sssd-ipa-2.9.4-1.el8 >  HeQi U]eZS1 x'ZXO\^ٱc3G2ΓF#,-@o]jFdVeis;#,@ ⊻>,sF !n.Sٲp4[G`RJ-xoG>˧*Dk%ܗ>7 :[7]lP0%.?4T 5$77})¸@K Juͬv\>TK:.Bg#xdJ3+ČF`n[O=BF9"ì׮|E牒䑌(zd_/C^Ec@=V+LwsD*,Χ@Iop/ІO4hy\O6A_G#-j ϭ=C*^<a}*N6ڪclJn̈́Q8m!x Lq'0y6Y4 oRű2V8]{TB'3* 41d77a8b2b695471010319375bb691008b08ce2d0352707eb65a0b905e20a3eb2344757aa16703b776f2d72a3d5daf3afd1f2f7e00302047c435bb500673065023013d4ffcf6156af9e870c94fa7a9a8cbaa94b4439cf22e1a712d14bda12b776088e2665f848b8451872b3e18663cc78b1023100a98ad673841571f1ed96df55ea1e50e078c4f01180a004d8d788d857862eb413726413735866c198a3aa8a6e5de217150302047c435bb500673065023013d4ffcf6156af9e870c94fa7a9a8cbaa94b4439cf22e1a712d14bda12b776088e2665f848b8451872b3e18663cc78b1023100a98ad673841571f1ed96df55ea1e50e078c4f01180a004d8d788d857862eb413726413735866c198a3aa8a6e5de217150302047c435bb500673065023013d4ffcf6156af9e870c94fa7a9a8cbaa94b4439cf22e1a712d14bda12b776088e2665f848b8451872b3e18663cc78b1023100a98ad673841571f1ed96df55ea1e50e078c4f01180a004d8d788d857862eb413726413735866c198a3aa8a6e5de217150302047c435bb500673065023013d4ffcf6156af9e870c94fa7a9a8cbaa94b4439cf22e1a712d14bda12b776088e2665f848b8451872b3e18663cc78b1023100a98ad673841571f1ed96df55ea1e50e078c4f01180a004d8d788d857862eb413726413735866c198a3aa8a6e5de217150302047c435bb500673065023013d4ffcf6156af9e870c94fa7a9a8cbaa94b4439cf22e1a712d14bda12b776088e2665f848b8451872b3e18663cc78b1023100a98ad673841571f1ed96df55ea1e50e078c4f01180a004d8d788d857862eb413726413735866c198a3aa8a6e5de217150302047c435bb500673065023100e860940cd019fe34c30c9261426c856a2419e75b9e985ff38228284dade67e75f05773633ad336cc0cf4547e0d6c8ba602300ec25f98a7df965f9760c292496303bc78f481fb005866438d79db3c8e21273069b8fe98b422586ae7e7d459b2ecaa0e0302047c435bb500673065023100db3a1beb124b066a0005061f13d7dd428e8b7077ff68efddf9f450325618b61608d049ffbf3c83a7368ed77f68a61f7c02304c0807aa0e9e37d56a82e8d7074e1d66192fc74f703639b978829cb83c20413e1c76352aa8647a0b01a9b9d275c012d30302047c435bb500673065023013d4ffcf6156af9e870c94fa7a9a8cbaa94b4439cf22e1a712d14bda12b776088e2665f848b8451872b3e18663cc78b1023100a98ad673841571f1ed96df55ea1e50e078c4f01180a004d8d788d857862eb413726413735866c198a3aa8a6e5de217150302047c435bb50066306402301e1c632c69bc2b3acc8290a4bef5602abfda9a0def7a10712cd98a27ad0a26588b90d5e8ec4139694b816e72688d768402301256a96fbc006757e447f3c1c02daf7da865c47168f75ff2c4a8b66e406772266323bfafcd97cefb75c3ab8b6dfa79810302047c435bb50066306402306b804d8aed1652368f86feb39a673cf7e931614f2f2e22cddfc915f502369e727efab5a2377c4c86bcb187ffdc4c6120023042c9749c9739c52ee4b4eb23afd09049a6e971936e53891ccbef83ce8e26c201477d7bc5ece1c98fa5841d25ce1b5ab20302047c435bb5006730650230207c855cd205fee8b198f270f1c3e773c7933d84eb8e64a1656ae4ac7b45a914165e997a90f638c0f0ae726735cb9b0f023100df61b3e3b1bce8449861e02d4426341d3e1ca8808e172db310c3cf92f251f6af493882dad08b1eba518af376492295b60302047c435bb5006730650231009629038461eb66f856c3cb51139446c7b27d8fdd0b720beb02511ae95f8ce399f56181cc018db36add86566763b1cc61023058d3d3971c4fa8f53e733da63e62ddf9a68b7c6a7326d70f146a070fc5232b87224ae10f0db1653d124a6c087597b4380302047c435bb50066306402306b52e5cc0d7adfb79c992a6255f7523fc63ad92941afe5a78c274f3038b6e15f4bcba77dbb9f5499077b45c4189b3ad102305d9710262a67c0c654ccc3d74b83a398e550ebdfe559099c0d6702afe4f435b986b862ea27d3903224836c144c51b0d00302047c435bb50066306402300e8e6ccf8535168d5bf8ca209dd1d04af5f048bcca3d7df0d83263ba7611d461f8b07629762fdf5b2db46710f7107e7602304d26601d5f5b1cf3eb95ae4d9fed62f270cacafa336e74c964a29768c3e0b4cbcb9375a2a583a5bd1f175c179379e3680302047c435bb500673065023013d4ffcf6156af9e870c94fa7a9a8cbaa94b4439cf22e1a712d14bda12b776088e2665f848b8451872b3e18663cc78b1023100a98ad673841571f1ed96df55ea1e50e078c4f01180a004d8d788d857862eb413726413735866c198a3aa8a6e5de21715heQi U] (*G^ gOkQ+rx&)1 j?,g(IjEg{2yU-vt 2{t:'zivSc&2q@'q->'YE(8g_;Oyxi{a@^u};_T y;1D!nH [[UIp?SXY~Ȅ/+5y!nZNآ[j5 7B`hNDWxL;א} BCNG>pvxe|NU^9H֠Uz[㺈B󆎊XHHx^1^/Rw HloB-P†R5EKqa_Ș}#J˓kEV`3&kRTТi)њ`[ ~6=E8XX]e|'}>nV i̓܎q2, D@ ې>`D`?Pd   4 17? . L   4 THtHH(89|:i=!G,HhIXY\] ^bdKePfSlUtpuvwPxyJ LCsssd-ipa2.9.41.el8The IPA back end of the SSSDProvides the IPA back end that the SSSD can utilize to fetch identity data from and authenticate against an IPA server.eBaarch64-01.stream.rdu2.redhat.com $CentOSCentOSGPLv3+builder@centos.orgApplications/Systemhttps://github.com/SSSD/sssdlinuxaarch64getent group sssd >/dev/null || groupadd -r sssd getent passwd sssd >/dev/null || useradd -r -g sssd -d / -s /sbin/nologin -c "User for sssd" sssd(* K"U(_ O)2AAAA큤Ae*e*e*e*e*eee*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../../../../usr/lib64/sssd/libsss_ipa.so../../../../usr/libexec/sssd/selinux_childrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssdrootrootrootrootrootrootsssdrootrootrootrootrootrootrootsssdsssd-2.9.4-1.el8.src.rpmlibsss_ipa.so()(64bit)sssd-ipasssd-ipa(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ /bin/shld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.28)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libipa_hbac(aarch-64)libipa_hbac.so.0()(64bit)libipa_hbac.so.0(IPA_HBAC_0.0.1)(64bit)libipa_hbac.so.0(IPA_HBAC_0.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libselinux.so.1()(64bit)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_semanage.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.15.0)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libsshadow-utilssssd-commonsssd-common-pacsssd-krb5-common2.9.4-1.el82.9.4-1.el82.9.4-1.el83.0.4-14.6.0-14.0-15.2-14.19.4-2.el82.9.4-1.el82.9.4-1.el82.9.4-1.el8sssd1.10.0-8.beta24.14.3e{@eReRd@dd@du@doMdbc&@cR@c|c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.9.4-1Alexey Tikhonov - 2.9.3-2Alexey Tikhonov - 2.9.3-1Alexey Tikhonov - 2.9.2-1Alexey Tikhonov - 2.9.1-2Alexey Tikhonov - 2.9.1-1Alexey Tikhonov - 2.9.0-4Alexey Tikhonov - 2.9.0-3Alexey Tikhonov - 2.9.0-1Alexey Tikhonov - 2.8.2-2Alexey Tikhonov - 2.8.2-1Alexey Tikhonov - 2.8.1-1Alexey Tikhonov - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)- Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'- Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed) - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7 - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable") - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #- Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level. - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh esrusvuk2.9.4-1.el82.9.4-1.el8 .build-id3f3a98f932001be8ab526f1e5efe1f9a559cebafa8dafb6a6d9d5cb378d89ef47cc08d73850df079libsss_ipa.soselinux_childsssd-ipaCOPYINGsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzkeytabs/usr/lib//usr/lib/.build-id//usr/lib/.build-id/3f//usr/lib/.build-id/a8//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ipa//usr/share/man/es/man5//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5//var/lib/sss/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3f3a98f932001be8ab526f1e5efe1f9a559cebaf, strippedsetuid ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=a8dafb6a6d9d5cb378d89ef47cc08d73850df079, strippedASCII texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)99PRRRRRRRR;RYOOa0Ҭ?@- {ۊ}hI)4-AB4}#@f͌'+Var Uy 妺*<n1ա(AqtOpj[ٽ%,vnGo?{|mڨ]})X+6KUPZ"[촫]c Zv᭸[LIY$%>++'fJWo.AR)I!%!7>EМDZK#ٓijh8"͆-*xZV\V-"OɴH&.%40j B M0|q&/ rLƗ$?<d޻q&q5ಊGk!RoJ_h| f|T̻HtA@źH%IJ̦<1lӨ={ģSJ n#0u$И1aG+A;&ׯ%?P\!zRmBk[~\IFPky{TV4qs#ʼnBݽ&!}և>&fמs>,giv+$RGJD㼲up<%j]K]ȜHT ]Q`w #o/oOS4$''mK{A%]/`:@#&[v yz靨!Di{v SKzSBgIwDuEwGdL癑+ԉ$iڥ '?!jV.bJ(5@f~L61Ap ŸXDNo ?pjKឍC'KɎw\@1(,ddfΡ:kR@;6'>(|X2 !6w.Oi9ڋ [;sMG  ?ǎGJ ߥH՚,7?w "{d~=sԂöJ L "1N 6e!yԸuvg l$.`ބۙhfByv3?2tNLfd2N~%!7jov_eSl88RD'rӂL{SVw2 GYg=SU]"S _놄Ta8XMCī t|[8O upj˜pW9Cb(\8ߓbZՇjV(PZ'}RXm~F<"*KNm̈to>$M4zӣ}9t@4 \tON=0 ֟l3,acRoU/Ń@i1eS4;X g vvR峡7Ʉlmp(N28ׯ4mTPhǿϿ-|OTnܦ/bcNNoSF$hz5 M3:5z0П6 >qtAꝒ'-߂/_V{@Ŭ,B [ cNՉ/2m6SPjŖ\(lBdX%דz[SƤO gNz¥q}2/*-Qe9ȩeO-6E5%;qֆtM} hk9F N0KS'jʡ:]9;R'ltBf&(I[W8}]=7jƕ"%YQbPY4 }rb=[#Da;90QT1Ngfpd},<~` -|!B2>\R0sr@IQRԛY@" kC"c_l5ȪbT[‡I x|{(+:ׅmGQ39B{T{ ;~W%#<$D|7kƢфyX!U\2\79j'@R]GEk #I_*uS3<"jtd X4R} c"ټI(6V^G0 HfA3Ms΂hRb_lXnұ;%2ݥ#*5̯Zk]jo3\#pu6b}1*@X[*, O4LQLR9 9!J)[j0Үo7is,aʂD{.Twwe4"8X%lxUpKbćH;mñHV)L$wu_}UA׵D\̀7-Q#_ ϷNSZkO;R#DJ&5vm<aRgf&Lzgτ3:XZ&,"i\kcvΙ#6l&ެKoǻy}[ { x#cGj]Ѿdܴ?Y+ KnYp{ `^Ʊ,K1?$° 6JBe:> Ak;GM Nr#4طNR'ϡZ|Zr9|39\8޻df `NmFUZVBW5tBLYݫq!Y'sB˄ h C1,}B} 19.a8y{r( ؍4XzkuFؑZ?(´ߋ5(@[btsNHyiݮ3qyѸAaϡZN\n%Dr~+nB[MrsZ1R&OP4 E̒nѤGEojӞoVkTp_Iޱ sG0Zk\S'f9CCžYaBӡäe$B%HmYs %.YҼzΰO}9,R (G TF`n@QrFR& hFCٜ-R#'.-oCIۏ]bF,{K?iQ 5>.׎`ц೜0S3f=UNgy͇2% /y"ՐITV͍PNm@wT|)|<~F@s9ĖZAO#8f' 2kQ K\V;<Ӵdkpt\..p&9$ eÿ\84MܣOAFaTAnJX 5􀸱vXNe7J=,Uy'_4_23t}H[_gBN=Ѡfx2E XZ54>1X߇+ #e>u"!ƲvHFE*J%_0dwY7gl`EFgtK?{Q9k+qvEKn&5^_T0: $׸*Q2{}]c.{xH_B Rnh)uga%~֎"q=|@xe([~2ťJREdQڪړABL2cj^\., N zl%zݏպAVx٬cR 7.)hP3"hRQDqj9;z=\d@ C4A\Qw276;65F;ٹue{,z@2ovѵEm ]co>~Ao'KQ!M!=ةHzg-ܚ>HUs_ŰtDSʪPS}+ΡD1]z{{"EmEd}J~Ը~tRlc^wvXNs069W x_)']%'90 o?;ԏMb{o:Ot4x9HZ0!" |E C[=3`)DfQ=f!Rr=GU: d}eX2T"*EJ{LmleU%' e&*'m֑b:֙ !'2f]hUUiV*5:}Ύl֕U{'5{kbCv$b nδ~pk>N4Cz#ỉC6EpBY5j0ɒ<0Bͦ q>W)j_5hqqxK@Y<6 %]^NfV$&0 g7P3~7AА kp*H9/GZ(E_ <(K]~6bufƐp>) 2 .o' 7X 9yGGͰ2u'>(G/Gū5ZC3Cf&+Sj7EbF\sVs@z9:Ѫ* #Z(2fm鞣atIU{T}͏ 4]qa7"|59yIC9G Ʊx*B9p72 (XX΄t9@[VV21T Ś߈ JOE4zG&PM6jo27H A`loIa[| -qQ ?ׇKQ_%G[p  Xq5D'q,I}8 FI3&ӟbw+폥hӛeUx-B l9 M O XD(G\2EhgcNOC@6fKplM? 7Ej_׸ W#v{2pBOKɌj>Q;M>FF X/u˂$lOد3>[`0-,51j-Ot}CQ RxZP?SsA)R `7րuw<򍡒,j NvFK mI\ ÉbS wQ#Ok \l_\\FW0=ef*x h,Zk FL&_˨bF9BuWC}{%ocKG~Ow3 Nf{t* M7x~M h@(uzzκs j&úx4zE'Vܓ!60ߞ(b4h0^+U/RhN@Sj*lop[ ^|õ!b2Rqx'ˤzPҘ /etRɻ$_u53a>^jN`'G*s5kBZ.TAطͬ4SL:ȗprew}>B+otq"H|tE@+ݓgB✿ʰ+_ NR[2tsu1cL@cL%Zwm;^+H_<=(_r PNz0ȋ #Z5n ȳhFyz95΍kДa@;E.VmgWPo/ZyW;h"Ћlv=x$ؚra:.ußGˎpRݮ o8K`g $6IGWl`Z 13}wrGtuEG`u30 ƐE|}= /(Ҙ9״xy#XUa vz ITOlW[$,k~ ߌu|Ǜf~:z#>ngOEdHve CF$Ji825d;HzT+;,a<`3@ W1^T_9 8hHJ\B ,1!~ƚdm< +T0!d~T}8YeBǍl_jGYVߍ3ĸ_YVZZ c)^xm1[t(M, w&`20 ܣ੹G<>[o昞=8A ҝQN'wX≏#bW*ܿӡbhU7U|"Ξ]ʮ 2."Os/^\R3/I#uzSx;`Splf/ѽ}x:m݂9MDؑ&Jh#PMiG[x&9(\+܄EÊc5+d -dIzC_/{-FTR(HSK-k1;y-: ⫕\La ,뢭Ԛ _زrI]+G k$U K[(Cokd•RH~Zpl,TP}Mj2ދB@Ma )8.7S'#_ku,Z\F3ģG5YEb,fDxTnd@ em eFxA@AGG=Bfe^xspH[9H΢PGL.WD%|-l vQ g&/[-ƌN:NOily18=DZݍ*LqyM׆A9`pлY,h VN{@]Sy l}J{ٖa8=k"G,s7oB߭B٦Dy+=30"yf<=9Bt6/)>~krM-斲 23($|ydzafn(۲7j%1(CR@B!chp kL{p~_߽P;#ʿ';30~=KkڔDPC!*?zp"bpfƃt)GvDX),a=& /QTK>h7xN,9Tt=~Q" kb5 j)EO[Icf5? zRb^I]0V wཙdyx[1NkO2 C谢9R 9!w!k%Ub)l;({]g & <7QMٛ}߰J#8łw&2'.NHI[ vijuV_;f69C8T/ݿ"% PH aQ^>w\8ZT s>X03}\qqhPXv'|FA5FkBak =趇[3)1L|%In?}' D9%cۨ:U,yh6(E.3>Gox$UίV|'ƛ/m8Kݪbz wcX4< dH#7|R S^N*y23*hU~6s|5z4V6lJD}M \v3>Ir)HOTY;Oف~Dj-f8b Ouc؄- ٛ Ǧ;93*kal_&^w:>Wx߈֯ބEQ_=^%7%v5B&xkkT[=a~4Џb S\e+c.dzv ̀mH)hHs_߰%|?,<+85i&9;ՈǎgN!2zC#vKa䨮_ }c;Uÿ]㽙hɴl~2&_H37/ Rz*00TMt埬 DZB ~42>Cj]FkZ ^e| ۩|OUdL]@X;ؘ3Kt:WcNGoTDl zYvW[p:XVM%1ܒ=+P$5[UԚ@itkh䉂 vhC]Cxwaeqä-BY·۟Jak 3$ TNy|t d3N (V/z,EcE-kjP7e,/J VEUL8o&l^X:%m64|DX.҉@`tWǜ>tpPfT NQX^ YidJPe\e}pQV ) o$uX;:'vVZ7qI<jH_F?%@$ݕv Z2琝6ptɷLdqځb8mW bkz/|˝h {23?V8gކ,WXQ}$zPWK~{u'NȓjN:a:U]p>}vŎqjAmCPTL} h8!Yt)nxZ}ct^ޟD3w?JOeqA? 2q>7V[?y`f0@'оG(&-PK>Ul~gW]^4p/ PD;a-ci0ŎNivUlی]}4 'CK] w=&!SRcr4ɈcC{,d;\ݘ_Zd}-fl_ B^2,J1Ta,|5aZO1릸ujwa,2wJ ˪M*˜|vkZDg+h6,m]O7 QM˲2ԏC#aaƵP@ osx˹b!ds݌^ qTRzA6 {GzcppӉmĺ=|%kQ]B~TcmnRB9I~}ݼg 9|6m̘8_|CfO\[F}/Ei^e͟:XRqG^Xq16%U,(#(㉀qLxdEVhf8~>>&V~}oREzI=̝EV^M'ZNn\+j]ٴ5纉֙OGghW2AϿLwTQ423AA1H0G$8R8#$4!J=jMNavj3z.t4*{y/Ffyh)ʒ9:ZOږ+aY2R# D"a'~ߢ< 5ۀizUlvqt× !chjNf ^p= H Ji{@I%8ZC*oO& ry'bN5&,X!\PQ~A*lܘwWO芦/մE>*ٲ8&G0UR؟ nnoy8D<)>FzPoW:z@AtGotE~oV7VrsF%(Zs/]]V?r+r ytJ}xR d!׃fOHjGI4csVQe/*y7pf?(dwr 2`PL,Kt1䲔{f%ɒ%0ۑ}o[FI,z^GYR </OSJ9Qr@U}S+ew^7>E&1-䆎Mpv3dtQC~܂I 4mhcPu@B\N#)E0TT/*dٲ &Od3PdBlt#K%-W=g>gaiW7$TB}PL8DWĢK8E=MKįe kh&Q-.0"\b3Bl7gBWpStkZx0[iĥBDjc{ZU۲:;cz͉t蹸DNO?VxPb.@_ KGQQ|Thr/`ķСHW%y:;U wExjſعb&SIN5;74i燅-? (9b(d5O[-&("S8!8QҸV1(/ FV\/,KThORjD^hO% FT[x|2= NBO4p/qߍ9z)zZͭr6-.;3i`$eDx |Em_\GtCgYP3$n̼;!"(;"밑K\$(Jg"MSA"y9MJ6H렀D&<9K̮*˷C[^q%l^*r w81$,w5-:&ɣq!`L!ݦ\S30j`@A@^RDK I7gq%xbhe\pD\=n5hFh*RnH|:[NaT*뽨s(y{EBJ3G:ѯ/;TX⚄IsH"ЁQKz#,D׺Cة*Ck4+#Uulo8~]Af{q`p~=U ͒Ů,U 8pT%c~+ uFtcy__oq||6L1IvsV*RqYUf ]L1gc2UΧj4\mn5fvǁ9R> 7w4ξ:ɲ.E=o=uT1iG`fܩ6ϫwBL O\tTPXuܥ@C?RM%4=M&pq`릔yjН]m) \M8_<~ts``GN9ķAZY lqf$FVibІgo|]7Rtkȩǧ|Z;k2ρ$ y?}SJ/ 1TeEVr Mb]qr2.g:tJnlw߭FkL&>v]EI6PS(4nAij t"BRn*, ~nutnI.6SSvڸؖ cR>Axޙ 2\iWÙ|KHJ4M-Gȑo߷(C/ X=1QP g.W8Cdͻ:r*s{$tN8JꥋߒgiFpc 0l+!/rU'´TOBCm;2! 1?8ގyV6j[TO}9->}P|=& fN8ZoK_zV-})~: >~hy)GcVhJC薊b8 aޛ3b [* L>N{j%emT! zRxr%X,+@9N3'ĕf|RO5m~hj} Mpn̾ʌ CsΚW 342HQvwI'__9뭱N) EI:dE1tC6= 5֤HwEIJ6N`t#i~KKB`25 ҳmin栛$817_&V`<2/gOA7Jb,ټ8}R.'PKV% АQfȯn4 6zj$Mo(MPBPv:1 A[@? Ke쫺ײE]f#yDd8̬anG7WcXtQKEŸS;U Z :~9;؃MEj|V"bBXF"A?&8LRSVsdDzpm' .j 2l1aU(mm %q>o9K:OX!j} [vZ@ H2m)Xmpyj}[&-g!c()CyXk(f3E0ImyBw+h)Ko1M0&=۔D7"N&f%X<>V\ib4HH PMN:CyxewGU #{3}Psiu2OދIdƄ\&/_a75-fJ`<-~fW8挈 [nV:=-㤉 f^xo9ܚ=9O lN-^f᧢FZJ3k\E\P仯̔"yihrp9rKi,')ט[H I^=;Rd{D|hzOFs +08.̒qb5}a~x"2o2g =VC!ni/.H:goq8ebpqXڏMa*ɏ?OdoD-=TA~'q%p:(A]-<&B0qωIf/I!3GyVЃ!7G'f)?N|(ba({>-rӆd{0DYZP[ԕQEϫjѿ,; *; 4`&^OV.#%(KCKO\ UQƗiou=؎sR)"tLt^~u)I!t۠ e'me`b%\ C>H._ţY^4~; 68_ n`ٳIڐ x ?9qFkđ tM1S(kd r:w$䄀_xהwvv9Nv>2Lˣ2H؀]=s }ޓ_~PA|h;HwVj %B)| ~Dw\I|0Ҿlɷo(^<+43F<~ |P`!@s#@Z]_alDz11'FlJBkAJ3Ac#C;\ϠAPM-~%yw{pTSP"*3.R0*C䇼>\'I{O{LCffpb)eYrAxĬLxJ?Q,OӑI,J=i?C91P+o%)x7^ :9 W=tب TTvna.oƳ&|HCk2 HsDi٥Z#w]N t7&B5öye8$aRV QbY@!D,]IYƸ'sm?-G.1ݔW ΅`Ow8 ϋ } jî&5l9YD3删s^GVHjx¹K)CWƒq ac!$"Pq= lf#L3U v M&;_`3NWKT8`E&8 lkUX[{Ĭ8\δ%3Rbj?Y-DpՊ!zZ-* 'CHIZ/l^f*_xD3cźB unfh aeΐ^~C*cVk'|þT 99(lB7g74c]8,;=Wor2txX{)h3dɯl::]aLyB)Y!ѕL.>Sw4Ɛt̺Un6t!Vc$`?TG P"۶!NUJUG ,zIp4nX_DC7uǽ郪?ҊLo]5Qx\}y7 qiGgs| -3Cg'OfJٳ@&řj&ph̩I2t"Äo\iS^nIq31jL 4|Є>Tzǽ3{-6J4[v[`;k'}OYRzo5WqrmU1>]KrCH4Mb([ũrj\F(׏Z>u{s԰K0g֎V|iySc5!%󷔏V񽾑#(ϭ-(`k7L(L5= )lE4mFCj>;($(*nq]m) TOBI.qܾ;azx#"coQ_#0(Ey*IQA۶L雽@6CYˌy[qgM`rg=y(z8ZZ3!`6T=5"D5'K/9 /w/p}^jǢ>o^"+ch<)G} Zd+,H͙$/^(@z~ߤ;7$Flښ#*ֳt :s!^^wY3Yr7qр䇋pڸ;I{L5zw&cŭc\+ڔG(k;SeƩ P,K[H VGi疬Q$,0 %y؂oJkVyԆs˞Lq4AMC]Hxg ]2Ff`愋+v+/,޻ab $VfPa䲩O &u)dq^^a$nFPFoV S?UUa Lʊj%*.`?q;[lx eie1v&h8`L% ϋW lD|8.#S1I ؐ1 ؿu5dv܌iP3.l$nClڌbl-q/v;=u߷k( [ _B(1pm0ǖZ<;yX/l: m>OR{\VwӄF. Gw,u_*_;cO'Bne Qn}M\) %%]x(5gmcvJ8 +ݠz_m{|΂ZV74eLH=ΚV zO .cdH<΢cX,X1I36Ö הշJ~Q ŏ鶐{zE+澚P@O ߹-U1w lpaƞyi*R^Y BJyr-5 .8CcXV9<$ L!Z3lo52>QO|R~>}dXc}bM9j ?&pTd(/A߯K4}m5<2:?rcgI1Yu-lECrC0COlQe|ń#)DJcɡ{ #bzѕڌEџ* 6c {Wp!DNxDy@×%0}ҍ;Qg JPNSR_ރ~N'r"Un )Za~ĉB8O}#e^sr2Xz;rFbuyr)#5g*ҳE) *yΌ8a_:H%a9=JE}4 ncR)kXkvd]Luqnw渜_A'`ӹzXեǏoO(|s&zdTQtJX"^ЙE&L)Y\Y }(! ;'|D\<&P n`3&P( Sn^NS{{lxM5T_tc^>:T#΃ID27\z~/ ު-KmѲx2~L%I;oy0CfՍ^gx~p8ب2O^$V O۱QךCgC⩶Euqڇn$A5-\Ku 5 Fᩦs~ւ,2Ĺ*EGƆ-nyu[Pl=s)7>':iB=$q~ i8klO/;jǦ}`rxhJi9dXm"6w'%p=,ѻ4+E)z02Bo弾paZY# 1`HP7~y]Z;fsϋ\GQx~p=83}Y Whsb 㩚oZ*,-`mZB.@cr12d_x id~x=QY67ἥL>_ @BSCO&] ӏ߶BLE'Z1|DO J( +tzC#JwfoWƇ3wv ɣ ը?9e/HJg/sUYIr۩D&tgrf~d6QcWqZHAXWX$E{KpԖ"pa葞Żw} $q83Ara8׈_ȱ_N GKe eٳEh2#32~a,g\WOp=_=TRMoe\;buӾz9CUP ɨ3P g&j8ˤWZzb&<7?׸Ϋz`\(lK}^UƆLo@bJ&@R1~#0G]6PV2Wzo= ԦTOJ&Bch\NOXNEfa۝o peVך3kL_‹ZPmL.:rOpm=\_XQH&n.K!]htP05k+B` e!=SӐ{l÷XF$ _$>J,|e-|^L.-E˼|ڧݕx)M;c<.שD$$ᨵgsaA] 8m"4ёYsğ 3 ,,I<2uT1RA_ 3bU1NgPC4|>[YQ=GH>(x&gw_H[ܾD"b5THvg;m=s6z#FU7~Rg *1*>4h-!=s%R׾nѹ/=xg0kT;ydGʪsX0ȼzy֋Uocl5~E]%V-.OZj1?A4-1dfp7'RK}դ93RpY!,~퐒[aWNLNX0a+TNgnɣO.Qh7^L^&vniѲYkםMQĸUrY*(3y 0 ֱ(C6Lo%)A}TpaeA( 1q\E'W%Ie>EߺyQ[+(0spFѼ7:_6e' 4> &oqk߇KBf2-tvv;/-r`X"K`5N<茅&Apޙz1s1vqDO9]?@ҁk6P>i(I6NYMgSR"dO8r, &_&˄*a\ nz^[]oE:+hwk-r&KT2%o?2 =ಸ.K, ;fjc?HOMz7/K5iZ {0}pwu*9>EySzZmzk7S "G2NΩYޖLHAU~]A|'GFN+Ԗlo?ZPQzYs~[yBSžSZA%>LGT5>`#ٔ[T'xUBEWnLPF[-%~smnAct0䈀sח1SX7TZG'kۨHCj`'@4;2h6! ZXͪ¡~ǜڍj.qBb5Z!k .z5搫B$ARkά|G 0W'G&p0<5ݰ3*鬃rojٗfCxA/L.u0 FRk2EýYI",g;iYg_pM^o8OV Z{%u~E^}I7wbYyJ,a}_5e4j@"PwuǔOtԬv~)/|BQQ%wZ_٣(e`v"p[ikS6zqobÂIPքidp7 `RQg~rїiSHx3ut$lD kftb xO} Z񈹻 i~ϮKtVTRg('>)_~:IJ*xb}V*K C mtqe(SUoו;xzY#%~ѝsA~ЮFnn/3<4e JoȝkPي Vv_D#RCEEK~?PrތvyUA8$҇Pi/3PJ"萙+9PmC73Su7舶a- Fz_93כ (ɤZM|KնR,ۉBE9$Tp@԰j.R ]$ɜQh$.>M~@sn_捤*0o%㗸މzs> l/"8, W"[ G<)t@HoY(YYޞ謹 PS}7 ϰdy'%8'C:Xa:c82y1MV*}uxmVbPPidH$⪁ߓX_z;$Ne:KsySx1JgAkR/bDoV=Σ!l׆@ܹGd60퟾8vd^<.st TR}s&a6Hɦ)Ǭ`f/xﻇ&tMn. 6Mi^~QK/jc)@X&mfb`hn3Mͨ:`g$y<>ħiX_*pqr_4X:[ 939}{X Oi8H_ ՟.9LO``B*aAbRdg#x|[Ej"E5vD(CjżiJ]ӆeP kǿ*xbE{Rf784ܿG'Dx|qFt+aOp>&mrrD=2΀ȲPQ]n #C7~`BjZBI Mti5QZب߆Xp5\a5gRFǛfM4) ޛauBEXN|פ&JVx7#4:)U`W.^}==~rٳ𧷔[YzkUf]iJjɟ9CA!=:jԚ.s|GvOEZݔh~?WȊ G&FUJh<V行/7~悻q⃽P)L*66L,}$w\){Oԍƭf{DK@#:9؞b%0QNPRu4=A9zVvY\(Lk&%Ϧ(`a$=Ky pɳ`ZT% _I׋ܓd}ҩTI9ZÏgf%UNXkmvnrqN;ّpY6~n/J{k+̲)c;IBC̊DG+GmXiktW ҂GPZZ2ּLETVŰ6ay-F>Ӷ=~"#-Z@K.L;>u{ׯOFn꒤s)5j(#&&DF“WPv_]3kf"Q ^o͓U;XBQ _ii0O9֋TO aMma(3,S+kt_ jP&+lff>}},L'@)ys.V|Y^p)Qf:{+S0ΕL$zܭ}4A}SY݉d]Mb4|\Dm^Aj7jKi&qV}rRNs?6 $"]K i o}sXKyZ˃y;=r-zhhi+P#)$~&nSxOB$H-j5ɗ1YiW'Ke$>\DImv8!Nrkb w-]R;(}e?Ê=?1dIۭ`e`M)agTcsٛ&&=IlRC di6_ߺʆZtCtaիˁQ a'OJ'Jw;d29Lz\/ޑm u0lNvRhlqE !VQ2]@vm+cka$$2Gs4[ԏޯe5N^V:G2}s(Cuf䌳׆!Ɲkio a&󗛘g7#PÛJo+$Eqwhp{a=93Z_{ H AGsBCΊ󇪳f3v3"GRԗABϽ 3)/ ,P* X{AV8D8,HySTkL,Gʰ#-'!P۔j%p&XXċYiGn? t8 ?2:o{ dih(O7>PI_9?L-+I |(~8,Q(@ 訞⾡a\xД@xW8C 㡟/knNꪑ/Q7OK)sْ fre@AJ G+l:x~VX[ gwl^3EbpXh)fdK6vÿ95W7b$w^ǐpK%dq~.idb5;n`3< v&-* kC[ VWb=+4VF]:SqWLK.Iow23D(U (:)j [.MǓX/$NPm,gM }7ʽ Z''.r -\a ]wM-pZTX `4:lkA[n3ӱ>(~}͂Xq4r Jyσ;\eNoar.D\tytExH1"*cA%6;i ѺS!5E_L 괜zslhA5.`Ka< 'W7 7KDEW.">c+&+Qc(fZ:WB* ۫qktS&g}o0X23ՌKUwaK(MO;"j@`Ì:X[l~k/\%ihQkQfJ=sޠa{~T;5[73T<h)Gc胪f!ɶd%P؟"G˸6a Iȴ̘Op ! H 9ƤGٌ)AT ~"·"E$e_ԨY `Y,2(_r3?ˮ1Hhz ?j3b 剖6esպxԖ!7!7|L گfk1ly^;ht.]'ep_9빚p赴 8`Τ{ lK0J # #i%b./zupPN(>RMxѯ'UN`6OFo{4_1DwXp i %|*U#F5ZZЛG#%T d4A7}B3x0mamꁧx5l16|p25*^[`p,H`i0 ăQ7nZBq -fh E:{pkhj.ֹECBtѯŮ9ϸ-.0,H)V Ǡ /9Z"ɇOJqa04Â%-lCPuSWA+)oާ-ER(>(( + N0P:O+9p&1%;hNQ *PiIb5,<./MQE: ):Mͭ楗35MXg'D+KLAb*X2vyrP52<[>@/ys;f'*% a+v /If3,5? vuX'ǁÃN[keV1u a-x{9/9cw0B͗VCvx3kgh7{‘s,hd_V9mɥp>~k YAAX A۳T. !iF 5 ޲yEkVnwQřQSsajF/v&^f#{wH;0B]|QnCBm < urFih  @ t+"3[cɔmW-$/}'}tA`~.Nyx95]VEr g hXՂ{)HZQ䍎/k;H<ܜs;J m z)ӇFg i_ .- 5zdR#"!%>{; ! N-3j9-S[ ~5 &޼ c}haH  .pptv!I{V~l=_9ӱTx Zkl&I~9BѴ~(ߨ[(dYYfBQ@db7@(,nФs7Ps͝AL1J0bi&#pX}o'N y *L?TL~mYݢym[ g4~#~!5t|-an P5亁e4+EB.:~48[K Lek~g/iprբo{/S`h][ 3eMr21П[04z&Uf"td,QQ=!=i=>䝯NOezwis8>_9k%ʈ|:"zX嶵ʺs= p|I#nQNԒSf '<M'D1\)G9ߤ1L`U<Vy.{QHȗQ֘%XVN7'SZX.i+TW>dȮƌZB:Q_?}%YNX0/VlXMeis ulz$< @RkP#<4ł;] `mHLjtxRﺟ9:U"fC[G۠ՃiCx;\cG`K 7e糋9Kj`OQ;q`kDMgΔ+8Ha"Ox˳Kl{ 'yat {*`СtnECs2=/KS%a 1qOF%"og Wߖ@ @C1B7B`ҦPXA.9FɅ/e 0KnST z5uB0 =:Wlh ##5䳞f\#TC|XP 77xH%9/&X{¡?%kY#Lx:^4YMN02l^^a Aws*;F@ eiH_YK *3p:hD<"u+C>Z(o/]TGůgDi5,;lõJ4/,! b6BPFy3d3IfkEHLEtqmSKcf lq.DAѩ-N[X MqhPaHa񡟋@gax4^~0FJux#'i)!vj8XUBlgf<^fvL!QQV\ TOa+XFՙ E0x$ц[fwAQc}Zw[Y ػHzsΰi|=q3(1dzɶ~}E:]){ ݪ.`}z/0dKYtQ~'mnބ׏6yq6ˤ ?(F% r{ySJQfE Q*̫7c$VS s(۱E MOUÚ+nZ8XRH~9׭bC4 4^ "ݼZ#t qf*D\eC9,-ulp2B.IVxnJ["\dМkyS JZ`E""a` dW@i`FNJ imч!ۄd[cD/Z ͘g40yBb `p!9qk/XĴR.\"O{ iHUO8*"P ջݐ mRjI @V DJ^dBZޓl J$x͉5\}IA?Am\>'QEJӈ {h\Ͱ)Et([YYo.a dC'e| 4i{4Vt;N*[3*/ U.* 0? ]p ^lw;cF%d~xʦZUQE1rZ`ߌF w(T::ifr&}V2!0^jXY_hQ~3. lI6 -86y_ut;IPGy/iI$-N ~N߄{^jcg; Ƹ,f7jtmeOxʺ^}LzB|lP6Q}K(8x& 1ζAec [_2k$t~ ZQ^78d/6#\~vWֻѠ7Ǔms{OrҋhA926{7녹ͮuA U r`j3pεB`QA=,j "fpFwYA|Ǥ tnRwI_/Te%Ђl*QHK1FpJIX2 0e"٩qVdGeX"HzH.R rK M=>m|DHOۣqD˦JA:ғ ortǺiNP.Cc-g&TWT}ZX[$O5fTyCۭ?A&ˮemCIa YUkƸQY<"knasTc{ <296,xqzTo//n.Ių{`B dԑ$Ŭ΢Wm_'cx^_x}_[HzWxs5yzv5a+>+FP֗ =\4u~~f7Zj}|?B_EG{ʗs8Z"5ޚ֫kev?qiq<׳Oe\_>JǶTTl9`)=f`Q#w8EYJ%ad *nۨUl;UNNg}R(:šNm(7d&ϱit)ػCV|MP|[>oxwv›!//OGU YefțܻDjB=I0ՓaG|EҎIı[㈂VN%#'y3 Sִ Yvh>I~E L7!S|8˷0LZ8%ȥNd/b.ҷcq-O JOuwQTì}L(K,byb}_h6q}[&fbH0kk,V?B+]%93Qn~+/~  O梨*exʣʨV%$hiKEtKF9.1/n3&H/QThq/-cȀ BQDM%lX(n4|g=Cf>zgaglRDF`y@I^;$r8qfy* Qn; 9-H379I~j;yff)>0| YUWA '1}v\_gJBOL'Ԍ鯴Ђ E׃JF"啨MM uߙ9Lm˽G)/ɭ\(T%ЁtK*>6՝O,}>Pͤ5wՄ߿Ӯ<5Tw1=;: O?Lvqp,7/q0gR[+X $WlTá, ս1h@A]=d=PAm3-V'Yg!?P6[Z޳iEF!f!`OJUCV7-nЏ a;Q=H\hnzhVFtHh1T*_!E~Qf[wkn3n WK|^NQF5L<7N: $꽖UgC$f67Q)`cɇ֡, ȇvTB%wQђ\J8 ݀bVXZ39] aU-ɇA[\@VdotFTۅS_7; 7ظ ~Xyy!-)E" *VQ/!m 6҄shr@ {Əv |"دE4:!~zWUnɜ+u~@*#x~Oye#0샑}II[dsc{Ո.-w%p[y"^)ꨥ8 }4ο2 8ώ]ZPsK"=0[FIcCr'NrjjiKMC&٭7@nA1L\HacːE{Y_< YWiy^(\8p4r\Ȱs[&[^?Q|htHAbĢy o*c4Tt4įa9ce%6@=BÑ scZsgzԤƆ7wo+&m9-S^1E|XrN2p OT"#BEػ_A?|Q/~i{[*MBvr`exoT-H`*]-SYf˖ewzUzQ@Cû',cؘXa2rDn#;〩$\#9h+~ HE-P^˱Ms5 [kW W>yJ^ okg5m?Hсz]o ~mp es3QrXewo$:Dޅd8|Vj@bd/- oTiڵg;NSonX\Oo`1Bo\Y*+!x VRtPTX1{Kڨޣ?@V{̼QU1 f M\EcPɴ{}:9ql:"?qd B@J8*y |W(g,T7l!|[bMuqnq ,{uc)A0 e}X "ݚOv=fYJxDo:l4i-wnt۟EI-PI҄xv47VO`y%>ed,Z0I'$|%ƠϰM$!΅vIwp " Gc8|;˜K')6ͺ+Y~xt̓9fi;>oK9b'LAO`sX! n[ D"8Ytֿ+>n* bj͢SQӯnA1|{Rw$Ý0@XL^ΩBW@'q'5E;`XU/z?ɉYz|P!<*ny}5ܺtqPHP{t_+FjyYfMpF1 lثb@ |2?75s8Qw[wfӀs0fǸ#'/IC?C9HZ;=Kh; WymUZu.i,Pu ^9#>N?m{K0E}<{+X,!{P7Ol[ďYH8SH1n"")FbC.!^F_2 䟋q.WHhak!F^_nKRyrD:"i6WshNkw0?rl,l~~1-CK&L$vM S!gd]xpYEQTM8aU4xfiߒҠ M #ol,5ZG = hu_p].mslFN]O AF Qq#J wg-(tA6xy?=D֥qe w$$)\mYj |GPFV<0ԤmI0 hw, s&'%Wy]mi,@b) c\ڑ*oye#|OQ2!2-kU(;#09J1/a*bs!1}Dbhڂ-g#>E-+by_5FJ4 TxZ+LrK;斠٪랰D ԄmB elz_dLy:hXȎo֣\Yڨ[\2Ae„Yj@z1 N6KRxhI9x Hp/& r%&o4.`&^s,zI%eTL9g,S0%b]q瞞龱:::Sּ[`ͅ"7vVו[&3^ti]Ie/H=xXaԃJ @9T(hHoZV(JC0JKQ|ӦRlC҃S5ZP{X0uӠ :‹]G"P^yO`m둉G.lS~f{u7 @"jfBAaQ3q8>T#woG`ȅM-_ss})^owi-dJX_G'Bf1-ٽ8A3X W}ia uv%wKmV.!TjÒn&rٶMXvMJkM\kĽvb Xp-')I7ÛEoN2$VaƢ ߀B {Rs^eP.ה _Eƒ3px:ۉ2|L(Q`jQSL$'ݔ}D}!< t^Mm B^/i=ԌV?lx> dC##P}P!ATIPTh6(tTB?!`O 7*Xr=6v*75"8~ .X4Nb3DXbHW3C=<}V]s$ ӥc]zn y@ j=L u+æ홿-A,Kiz_25ŗz>Km xHtaWbƨSᑘ]dоRWAl]{ (Pj)d&֔Kz"Nx#c ;}3`5xO>4 5 x5l]e<[PrN33B@ؚIPV?ek Aa5ڢf!櫮!ۜjKk"> #\xY,ГJ@DzgNOc5uyL@6rW~SlK}eri&3BՀ&(Vq/|﷤JJ0<9Ы_-}@^WsiO׮%ٱ(|CSwg˃</ c`)/Lx]qTnO_8c 8 C+Y{i'rd/ڕ`>ܡL=#L zvu _;,B n"Z($t,"0lՄGx2rJsm4c<~Qhg`FO(Ϭ,QX:x"DR!̭yV?ȳXsW|Zj{#c 4NrmC_ȯE=}}I@2hpn‹ W[[d9@%U(Yցz3~& j& \8aRs8Cy$$˗ /hLxҚ#w,$M`HgX.>3ũqloZ֥%&Q9c.j TUjhDZpccG\QEeVqOH=Zev5vw! +ҒQ1]ήxvC92a';`Myw?ݚρ/uunj}UW|όW&)'I35Hy`[z s*TY ;Y@#\֊n5>rYw d<-T4I[NU?6arAcV4TS*Z[R @OF.#zs> ZyAx嘲}tրU4 ^mJbu8wrYړG@>KӲHdHO)iR\}x1)[@94{T `Pqw0]=8JbH#?G\@*jyheM?9${\lf_[qɒYoRHǞ8c }0G>tHY` 6ء|N+ ci]nuj=IB?mjQܡSp# *ӝ&9ӽCW"Rt4P$4OX"h/QFdvz3WMt˅|_4чνlf/IH~"A\90%03leO}kGj7#|{ayqK[%umեqۓA *e¾DS GrX'͢^GS{jC~sӈ_U4FvR C 6kRh?K1#`fu^S+&o#(>/ُv\&%Zg&"̫[Y'Ǝ_~|놦XNse EV Ў5I#E9iҧqzvNnQ@ʿxlsA3Ҝ~l Xn]G{*rK9)^,({v0YHmYUmk.o=;(C*=K3aEa[&oĀlU`jtA Ę"&nB,!4UHGCG۲à8pjֆTd⵫huddP] Y QKiO4ea9ӿ&[;̼.cd0|cCGG_EF-0hU rKsyԮ߹<`>pG!vR@nS!}X4>Xm8묢XvqY,6G)iVb[ =s!^lG9xaE8`v:;0b{B";XBvuVvD/h!"[78lPIy^ךkOh?ajb1V#qc_3ߨ+;!$UwH,dlwɋ~ZT+v|;\9 sF e9drt1M3f'fI=߸c kc]WxSEg,0H8{+ åXib" qIélSe#5o^L9ɵYk ]t4ZV=U<@:9u <(c^OC%+>038{jNdO@gm Q^erx%Pe׉+76brJ40nAC"i>mb (}P6^U+~.vox_X]c6wG0xD^ xzרXA⠯[ݳX^Q~}ڋ?<-HImLNM爫ɕnΥ=ɅNa$4rN>`@V.zHbPrexl.gq^qB!^v|ג^65b!KS!Sҗqejdwj}})Szq`lf<͠Ov qsWo|zq`h[%R~Ms]w2 &Q2Ř֭vqCsfXYYsUHU%7l^[`.FYn{^7~̴t#5jފZ+Ǩc5∮@Ao?*LbGe?2k_B>ʾMM[`#D4 [dCi(ء 7r:+| ,.IWsěH(P3=H| ;\Y ߣkޫ'Xq˹gn6Ƒ4)xLT@K) G-|Ą@S%鉬G,Պ:=`pP{XI(UO=MUլKC@6uOKiig 6C$DL-.]Yā D `!<2 U_32fYq5J}_yY7ø L%J!ɗw TnψGd%'w0wE<𻗲?6 aD>CG*󮯯{W1>:uM.5wY. R/=uNMKFz1F"IJ[sqiGD"mTm<+RD(;m D-6'2 /jxar0 #?ME{!edSYA$bqh,xmxm9~Bje'V .$] =>29 =g%G^1-9Лn];9bM(\DŲ*e7g]` ;xӀo%@8| Z[hqеSSdhGd樼=3I;B[ɾ|Ry߃N-QeTfգE"IQ+b Rg] uiaSI#zLI!%3bSXG Egp6Y9E fm݆@m#Nvct9 ϐɁ߿To:#žL7%RgĐ9B땬P#mn!'Q˳ kKPѥJ-p[>Kj2CVYXfײæ`c:ERlSX+Nupwo0TsRVW FRMUhN $psQ^kPOviH&#<Tg ]e '.UN (J60n6Ũ%Ww;vY8t 4j,#,r}!~*^w6+c%{42p6Ɇ3eOIZxG5t,=]KM{!27:-Oqr!PoFT!"0xjZB_Anoe!޳@DiHm> ^ĭɠ &sЀFex`{fS٘ق3,+\K{}Ż?^=͖WT0m@GO$qi>'\|*ҧ,_n -boA)S!Wy,ǚ/I6Ő MaέPC%lF'M2QhAÓgAl;{y?Zũd/%e_ ɗ\|1A㙰kM!yFW_$Wc &[%XA|'X%oݒNjD(Qs`=СLtQsKGA{8mbKzq(aX ~#szA !h#UJc_({9r]")8L;:Uk}o C0y2}TX ";̪t*s.%SnL rI♙Ǝp P!LP(*|liC%3;!+jCP~]#KU7WU F0ш d;aM@kMZ 0m wfou_xt|Ӛݥm$ PG)+pz|w ֈr Y7H1-ڲ-v6!K) ٜj{8$ʬɬS4\p*л?Vczj{_ _e׾=OU'4ܺ) !m%#ar~sԸ#[?t2TUmA0%Kŭg }ZǛn j|blHkO茄3:#\ﲫL5&ziSeW芶}|VK–b0t,?jt=w{R1wcהӠѐW4LR]#2G_:SYHVdX4ʥ)F'Av7H AL(i.+;o`6o5<. m`zϫef(z#Mv-9tnJJYB!X%#3PTK&`?."۪R6 >_'B[?nE/dDލZeP`"A|dV%3 ~ʹwZ3J sJ-i[P>V%DTޥ}JJ#'S[w/xIyU!)Tmr2#θ|nu;[֬mbaz^e}$Zl3ۆ(5F1;!]MȬ;E 6r|X 'p8{ȃsej+#撲Q3\^w}q.é_9^ƚN`?Bpk9[(5'7'n8*JwSFSj=#w?ZfXxfnHIvH`.}7 XF@xQTqoхK[}iu8*+Q'1jpSȋp*L= <_kL{Oc$SgNO[Q-:YYYh*Mr]yaِ|^R* L2ZI>Vz C& H% vK/QqJ=?q=)xxι7]K$j&OߏO3F_L_]B9tRP ziZ@' /3R =VxL>_QSSF^7=N%ޭyӛ!Wgi {L%JAP Y,OGp(0Բ=;Ou4dk}(t Zr7a:0&X8Q7e~&ȏ'7kX2_znFHYvb{hI:oћ=AW OgUYC`y"c/`5y kZOM9(c hU~I YW?ءSF߲.Oa[ݐJ D%~RQ?D*G/gQx֯oɸW@; N4 𢡄v<*/Yv[JӇ*쓯87PY&x(k=簾Q_YcG?bB:Qvh5K25QbcF6V:EP6q4t,5&5]?{"k=%3%ỏ`X-b,1Likq%25E ,/W^p5z۫q:f_怱FK*6lYGP*erպG 8n&IqsO]j|ja*YOeGzA/4 W51EAiPmHUdbU !)7iN|,}:cBbO䚂 !n PDQ.tbC]T$T^ {-SG^&`6RIo4,ȂSMLmI}׳4Ig)o@Z'!0=#>lP$Nb N3 /}-==7N=Yagw]Ř$K~E [{t3 +ӖǡUY/l]c)T֛O`\%JI_(`]+5S2.~A҄%u+,ڃcȝGյv@0uY7"+Qt"D0d:ck#T$x-,*̺ 7v3F9LKLr/%2#DWԴ*~`׌P˱ ni)|2"g4ꎍl,-e)|(s>dGDU-E7#j}^WQe&l*\='jXIzt6sY֝#f57Ifgrf bɰ#$>-xP 鱈nV؊*o£C[ljnϰ9o [TS+  +pwtҨ|}_1 )lNFsu"g? 3-e)$(/~ltQ7H}<{Jt+NX`HmBѢ /72EhC߫bV7sRY=תxy"3]Z(ic/hO/3"'Kae#E@K a '+5EZz:x:>UTspB I~3ĢcFͣ #}XR ]o]oOOkl+@RqQyY̠=$)v"S|pJBC_`t C?-^5cL3qh҃ҝ5?0E>;؊32x| J_2r>TlP =&/+wtEpHW_׉i |EU?&_FZ9f !|Hxz*p>vP\c5o+YYùnҶ i#1ah엩 \dZK|&گCXF<s505 dzh HZh zhk v8? 򱘊 W)@୔|v Pu_X N/ȶ$:@.6 :֦Z)׮F `Y1yEۿ*[?=P1Z}!^^njM8 5^0u4Ix+(lyPׅ}LSn۹ueW6fA OhGo_>,>u\QiԁYVO;?:bhm(6ΜL) }t9> ^ ΢)(·2Om@ ~*QVT&F]yP}Zq 38FB7і ~a2j^NO[!d*F>1EƑg>Ix6!B1X9vi״ Ǡe$^eiLgښ-rs0ũ=N$:I"L)W@7ፑvEmxSeeE+gWx?ևᐙ1?W3%Z#` 㵣CrOªد$M+whEyw,xGV%*nGk ~l87 E㲏lk܏봴ne\ް{) ZDڍ71ũϝ JH3NN0M+0孊E0l3^# RU&H1;ldݏU[M"Fdc+<;wcxUp2%s1-3YRDD*,Y#s_uil/pjٕ4ph3?:S3(A |NHN]2$Eپ.`Fm]@>[i_ىxH`~ S*C`)mc DCN'ʧ[URպ6F93PO&ΔԐWh/}Q.)j-Aux8鄱X7䞋u_!D]dˁN$_8IoZ; ѝ]HW`dQhD4R*7¥&*n8 oAnu73flw';ǜL*چ8& @㿼W(.ǿxԨtXrMf`>󄖫(ʣ-x#PoaT/f~-E iw+e cS>6{wAC(}{CoBJa"6W}?EG8 O5^-Ggh9}u a.iQ&jqVA0O5ȸy7i9ޖ;a9D6!P dX6)=[K{ c&q#$: Vdw8k₲Є0D3NZׅJ%nL/L3,p7.W#DDf8d61o+1[Xeֵl+%4~;hoyl:w(ܐB x{wGbgkq0WRY ;XBaRj"leH;P]4MŀD U(w,0LD_%-V \_%'R6λy߇ /P8VW rN%\f 5gzs>ZKM=}IqwXԩ?Yl|JƓetHc:& |#nngU+5ɼ ݿO=9H@,L|qV6&Bٍ]4YmoM%0>xgpbS9ɀR+,2Ó +hD>Jk7Vs11+z%CCK.7y-!['¸<ߪEqsyǹ'{&͹\2왋aXrOm4+u2f1fXtT&}$SCۡA,0gX5ÍG_UX/)v"8:x_e~ELJʳzݾT6@O\Bz|`bQGZ(㰁D*/xR?^̡;+ @ +E'H,5 ߒI%n>k^q0-S  Wuj Q;tkH^qd6MT^KqlJ@5s#8~MWK u6ƝtQӏwAw(H<|oLWiW<>il!| "_NіA;By`3f׊T^+Aq<rk[UqʻcaܤLj _yh^uijjFLLêq^Tfc!)-.EZo?qr뢼/}Tb%g.Tg)o[3clvYg7&V/)J $>F / :}6|ẽhQ5 5=:(}ՙJ%p0/ Gzm4V`u=iU|ʴԙF/w"`Оo094\ZJz'|m0cRuW.v?3HJ6C'Mspo0956%a}pq_WybDsۉ3{Ҵ߯}:.o[]5 N#}іnViդˊ4[nQL2RGTxp8F"jfz> O0lNvQOrxA6fq6$siU*c-.!6,i]RR<3SnwL!4R۫cLl͜ǀN:v)<}R w8vJqFhjHWNd߆a+,v"P&qf^Z۞nωbzoCTcǦ)brݥ jv_O|Eu;l =(1 4KܖL0r eyiuiT hp"*lHAqb{uv*YZ> ]I pY%F81@.JS72' 2rCEPM}|3[V{H>EǛHOr Zu}}>;d-f?\t x}]"H'* յ- "pEA屧:p% sN&4iC2P G5co(4W0zi랾CjS@l Co إMRi! {}$q oqx&Ȅ!gAc%WSng2km,/΄\U! WHR"=w3I)۝}ZЃӫh_nx\yuYaJc_cI3 qBQ"u=kkAEM߅zq5?9UEmOc_,mQn!Ϧ(3-֒(;YQѶ VU :=xo@4ŬA|e'jIqb7~7ttԴ~=+dp%|"3\N;6"qt3]/S!CU:uz"&J;i<|Z<] f Tk 1 rG/n clRio+N\TĄv-)Ds;A;H$TD@ﻩ6s" Y 'cY8EgehLB uǧ-пhq .oN?"ޘV] TAnE= .$o&/O[xǞ"􄹷yݺ&tX=i^o+e'>.KU}IHdrp7vl1l}R Ďآ|P(r˹?V!u&PAT3}R 4^ PTrVޫhm x #us NDb\[ۖ9ts+K,*v|2TdHI`ia&pE]}8K*09A'1o%V" zkZ ѵj{yzs ށî~M#}oRz!N?h wwC<8#xS{]Ǖj%L6Uz2E 8٧@`\9t;X@N "lϺ\Juxɟܶz}7?Y c'.+:UiA1ui[Xܒ$ܼCaO#`ckfg&Y Z`r!7ZӮڒ?ަTU2µ N\$36*J$':Ub3,>Vu=VzօTHKH@=(TBD|"6%$%09ڇ2eo/jdCTr`7ş?&@ЉWgJeZk{gpI4?!>x,J~`5Uٰջ tC)Y5ʦ7+}Wȵ$JJ(ԗC/dD_&lyDZVwVmƿa%GI: #7 Nn2gU!"ޜH(|g#s&i_p;* Rg%l$?|" jXGjVԛ$J 3cd+`Aq ~U`'`Ε"H/6AK+e/Kʬa-(ëua7j_PPTЍBxO/X^;orX6W}-ɁZLZ*5= bAqN%}ILy3]4$ZqTr D R 1Bc*ݵu5m۲S2ӱ %%b5WCk4uX0+axw`m)]!{R`w6=n›Up|CމҫBkzJ0Swck3$?J̢q E7y@#GcL}σK-/!.ϋ\ W 'UVk2`v}VL:EO H0b5_!GI>GXS'CVt* ڀ0ieA#ɥᢦNjstݒo{bVTr!}H)],1!<2< TT ;9lP}U@dҞl2/O< ULiX kaZa[k ,\^NjGm ֨wӆ9,)O0@kpĤS@>}7|֐Ša1>k-rNKƾo (`t-=wm ־ЪSG؊Sg*Ɖgm/1p[4XlSG(L`'wrVWo=kܗUO󀲲kn5oeLEVziv#8TF@PWl^5<.N>X?l3cY… ƒc^c̏r8 *lVw,nJU{}1Xr>楷MC)![knJ|M p8iC~&XcZbO!13q1ܚ<{C6@wdI)[?K.n DC%9ёfP'' /)*`޶~Ga!~">-^ #\|K{IPF4+:M+k@+x411iu\&z 0{Z|sh{L>/9Q~ffx-І"_lò!`{Fې0oJ4Ua?+0Q&"8OmK_fПAGCWf_; $r ȱ9e8dv>t@c g^6PuG }߱hPaf~0މG/"#J݊i0<a7."4;mm}cE͵qIVm/Su&Cc4:A\%ao!5 YV$I[aK {ge! }z*s r[;MaBA(p0c Q1+x0=8R$+.awK}LW}L1ѢeɇQ/BnKtBr; B(-*ߟCw"L|{HQ/6ŰIc郮nIXC"Iu `zA.vK/kwDvU;&7b"h  .߇`_lS!AyJqqTZLNˍZ:16M_5z5yP**# ʥH̔4,> uka<\^مMdâ྄-1]@ɧe`l5!'=w>0,TgG|\FtSFO..rLp8,QdfPr(ogؕbǾbaX'+=);Ň9b@ǰw "4D8M0M'vp|*"6^ (ЯL/kg&ޗo ^Lu:ˇeNleJ?er8^TpHi3x.Ik60JB V[IK@"Y{iECv.2 ;N^΁}#PtO&oZ$!!5IY\%"Y52u;edi rᨪk⩜@1 벶4n04ImJy"O͌jrJ~A0j;r5Q1}.LBٛQBzS Bt16Wؗ4TXLL. g23]|Ɩ5IF7ˬZ2m{;~JZS4 :`]XƄоh\t򘉗b*+Cr'bgQ/GUwIᡤ!:=u1^`) >Ĩ༈r.赩 T C(e$@Y3tc :yA`"U/@VʩLA)χ6LKżɂSm "RkIԕ 1}Izu{,no*f2hŬl'+fy=osvObJcs: Y[x Եڜ ڨTF \GiaEtQS#e_.F'Q9(F׻]?1 t̬3Nr- .V`` QV9?=!Z~(>B֘EvWXNď[L$y-U@; )_C^y#;EJh#Zc' ,Wp|s Lԭ+}U!H{9?$Bm+uKGH} NP[P.'BsڪX9ZJ OƇֆ{#!U UL$"˳}- S$q R e[j}5k>#J~xU\ Yߕ4<5*s'FA*ō.,#J*e\jR)z9[ mq<}>o3ԋ" >n$b5KTYčZDQW|j%(3˚:!=1⶘jO1,wz/sorN٪eCp*Aߙ"\UH0aB(SjfJ%I R5`ښ|6/ F&ɚОW"&%j!6M{l y>K|@SB$:Y6Ψ>S~%7Dީb>n_^*6\>y~a yKXI=:ai(oL?KSd?;K9$`p`81%[_.FHDg= gx0Z!B>V=T&%4eK: g<zrsTO+e5qG#†CHɒ)$þgE>qګQ(p*]DMvUk\9\*pѹ?3?'=]'AVS|4}K a' א*^|t5/R=FzL'd]76LnAy7i[Gq,ijf'CR@$*"MqLx*ĪxpXMx!ޚRDKyVHͫe_~8 7vLe,T"zxpͅY'ڰӛ&v1\6;סڦh`iA>ЗGc3r`I`{񔲗 ȉE^S#^]-[f_ufl@/F|v?=-ޛvDfJ]T7 Qzoc p]/w0`m2 bQN [)UȠhPLd%} ~L}o~*?{0 i{܎SlE.zsޖ;wRxKgSI:S@TI/~؛A_YbNΎ{bWL&m2FA}0@px 7򛯔V +EgX+Zl-/WUM}Dzͽ)xxyZh5ϷxK2Ļ +3vEƓc'#?SDxa) {cԦS>4}UqTޘ ˕mb3Zlq) $=b{;H8B29aZ}rq ޑ>iSsC}8oB ~Y~Izlj \.p19CeLGTq|‘ /}KW*Wy_UvAIg~L _;H'W6"> 9?~%W&=`3A@62}HvpUEp5 |uꑫ[{6 XGDR9cÐ:tNY"?4 ylE {$i#i4iѓ`^Oԩ-~i>Je\pz& &3p_o3ME4 t_/#i[R:rU'T|cHò DN^TStvNSeekݻd ZCi#* bXw?͚Ob<GKNSƫG-/<ʭ65sۧ=&{x M RԖ|mBΚ37&ۣ1h֗Sa3z`4E9-!:~]ݮW+`Մ5ȪXh 20E,b+7)ܾHS'|7+24M7gdMPr G7֙x0 'glL$1Y xuxȕ"݇ n=CU?rb8$sXe ./zͻ6= > TmR |/)WF!1[ڦ2,wi.DC`Svۯj wD1Ֆ0Ym3#ءϬɇs7{qnSh1%:κQHb֋i#^J朴D<"dXv)fS%&=Oꌡ$*7 +vzҹOk* vZ$U2 aWr2\}'7/$(5]'7 vέP@ o<[O//<fIfz>fiZPfҏz)hP=K3,R}+P3ÝH]=7M$uCGÓŰ!̞kSSZ|\?!&BGk;'_MJEc7.F"Sc<)G2z]J<O1MUuMj8S{f`[&}9fCfڔh_&kjs{ u3!bw#}cXLW,4yC̈́rN}jFy6))\F*+绑2R(iם\.ŎL!8)eQ/Wte8+SkVh 捆r:Y٣}؃.}UėO@/jܩx#lR,*Z[̦#:Y,P }Rб ˰WG1M.4g2U-ߖXlԽQkwu 6R1YMiw`ɗe*CvMdzw{lADH%==\`\tBf{(a$oAI+%Oec 4V`T9QjW5nJϣo[) f¥lHpܬ8f8k}G>%  a-r%[3T[V߯RMi^˕/a۲%~aNDJ4@E)We%|ueuuE6?#^膐mU4Xj˰^-ү7,Y>'QVd3+%f%9~kCe7ifrʻ{~0`: GLxfkc ' 6 cIىb&RjACgŵ:OQ: C`C`C^D +d\Z+ =9Iй{Fщ,Kuo#a\?8o`5}Y 3sRؚ\តGS֖JӢeq!ns\GvkYz 1cAÔJ8qͼtTpiAH9YIz/YT'r1TŬW7MoDUqtDZXގpbte^80FfQXt0dئl ώ鷬&9qAH]m+&IϨ-H΁[.ryRoē߇ B,E5\[9h K5Fmod"{#wZL9d!?BM4--wkdanw# B ]=Eܢ&>hҌ{Ʃ4`v:wUҐݩLQfP(W +s]0ecTAW+*/Oz3ax>ˎ$$tdg.fg0_~V[#sɏ,ܹM4 >*HEN_]VKr[Q?~, E5.Ojq!~5 RC-*ngo8%|PLF F92Gzj5ߓ 7(̭EYIC3_^W 7Kƥr|q6 E.dVEg:CbF.%6GGz6!B8`LƤSge|3.sEg/ ŨpSÑ?#«p'QG1_'Xr 4I Q׻q^S^D(p]R=K儢 ok E7wh ;Db?өF#*]y( {pUJ'PS> Z*5G泪#P@2J'KbiS-,s̔M,kE ]@M5Zؕ_̌j}zQ~) a* .HHYBAOj|.}Gw=C5@R(X`^$8L?tNTW& ݸo=Wuh_6x5I jAo}m`AkO ҷ3I= p^{[$o/m2}+ =xx UqH솽e{ygD32ˮubPoϡrʍ z0)ys` R|dQDX0}N3v0au\SK"]ͯENi%x4x㚣dI5Yt04B@ɲԟu(>(\3@@0+o iQ䁜μ{v /it|xV.(, 33*|xt;wޫcq1]T:m>rMEɄ)yy3}EOi(6~uN3BuǪ{v|G#霻5ԌS|EnG`n?G4(eWYEMwТ~"w2iD~O6Dg@J~T5% f׎r Vƚ|;J(Jƪ-^F{BcQ} f_&Vǖr2&Nc\*sfW2MAquG$M<{-ްͮ8pj=|YhJb7\|Z[_7 װC:4Qn?>wڕ&=} YN DO99r̭LE qQt'>C~QD)36~s4ZݏA{]゘@c0Yހr;F~\ehtWf}6P8_LeHLw1l]!V$:f)_h$< d1S13sخxdFw*SGO5$OK*{jJ 7 ǟ}ACfcsҖ[!Bsy|g@7<2MLɌ ޖu< "DdyTsJnF]Q8d@"Hͼ5s} e$ٰ¹nSH-t[Ad9a+)o} (4'hݢemNYDH~ @AL3KZ N&@ }6v͵6 JT'h$ַy?\ h})^PތhlUU;rqfsSDzÕĊL:N2l?Ѕ@F^걕=jdRѹ^Tlw9\8 {ƔFQ:Q\yGEu -Yb$~vMjĚ݈TPع7ml d%8DnoyRQz`rDEf R J]p-sQFv^Cd%vKdzGlFe,FhpB/6 Ģ;7 yv+,gv^W 1]WZlysGm1*Ba ,Q _SaZߞhܷCHNa6ltpƽ_8/}UX SӲY EKq6yH 8nk +q{BrbLTrzj2 'W3h2\Zͯ: .9\۲kSGvGqxr5j|oF/d~tۙۃr$GvʟSCфX+bP1j1кl磯?J>%75 p;eXF+9^8b_V $MwEieÏ s~y;aVz),"?,6_hY1򙐹.ֱRVF9D%zg$yڇaP_ؕ v/mb%EMbQ{JYynG@`cQWXn£Vf}fԑ QSL9pM\fHZ1ؐ+slf( 'O 9-#s+[*VNVJR<}>$siNS٣μ?0H\t 0hoԤ^*/4اbZHÞ!wx= b-'r i& 37o# H-*h 8AF3"|WGz_xI0ה8U7HaD%8VH-/v-Xyh r5"ڳzI*7TXaлF4- me 86(`N8D+ONjE64vHϣ5G8zeUY{6-m-˧sao̓fnRlfv+O2qG+քhƮƢ Phm\:4]錔Bwݔr6bh<˹rz$ͣ cus=yb9xaq:WNAtØd8vh12B\mاDy=Bi]}L zZ[e˂v*}VK8] lzm#B|9)օRِkH)~]\k09"wY8=63<\{^R?-p3F ۪=jZ qgx]@epA6}hVkHF[򴷤L+"tda)?iY~J8a E#Y`ǝtJkNֳ`p )&'6ڲ08tAC7\z[Fp,i]^R~xxh] 7VȄ塖b(Q^4Īwds].e|}M}c)R% S(yu5D-S%P?i3/Y+ -2,t1Q,oĸzu7ȶj[3ݜ:0[s>ek!֘\ _lO(gL( }ZMbe85zEQT{*4,5!6|o;1Jy+A]IESy\-vU بl;&_{1?{jU T:y&V]LƷ~Vr@R@,-ZڹV0̛#߳L5+XBʆc3pHHbw3lZ={hb- L!fw-M&(C Y)DuC2Htmx/Bg ޡ!ʩ٫A!9XuS5=B4a%1Ru`+N˫\c,Y9zÇ__˒9OXҌ]wO-=7h Fgt415U>Avs=8Clax(iI-yK:o1%A6Bdz~W1M,# Ck۴^o켟2?Qއʺ*K[$3ԗׁ2Fy+m.vGt|x-w9}G%tH f։Ə$AjXC)Jp_zoa0;FAZMf\6aͦBex rOPLe<.cmw2>p!jnV8;re9OrBp8e[ b:n^%PgC!1Ny<qi?V1QmKb)oNk,G8hzMqp==C[0;A,_GUCagV1JRpHMnAZ;-Τ_h'9F}\_l_u9#B OA%%Z5ՂHR HᠢU"C؀ȋK_uxQh\Yni)YL㐀>wJ H#d^%)>thf=ox8Eϵ+}|s}բ%K*YE/wD!IlU\_{ub傏CMPqE"#yܬ*M:%B#qW {É:x ^,-,{b跄60R*vd2fC]W]TSH,JPWg++w' Hx8%uxo{Lz QG·tմ!#Czi:9--w8ޔPغ ^Nk'&IJͶqM ܄.2㰢EָZfjo`]'Ik1ZBljͯo'n}bKw8Dń=ebwdDkMKh:cze4hDfWovHU>iJ1+ˈx7r\c?=,efbV a \r#6}jr37ꘙk 'F!*.JЊ$OZ-[9ů}M04]C@I)Jn9ykjhU,@L܍2Gpm ?]QXO0k[(;]w8+ǯy!Q{wv sA4!#^"g}}۾sdO%^Tvv7 HFGajhh=ݲwdNcRUNe\zxyNq`}0(&*YÝycOK7{TgOYUTnGFR@l B=d9?Eeo%>PVR0wޅk˯2]2eCusƀ|ݕ8w7ڬ|J ͜?E`[,y u#+i[3/ì#p 0K6N. ΥR˶W*ƛ>6O`xu<9ܛXUf{ekծJ{*tz h䮥MW(n; a c? ПF7OВgz o2D-A+&Ɵj@to@yD l&תsn _-cjzf2ƚYtAI4:98X 6AM!'d GL4сnr?yWڒk "u>Zsj,cVZ!4)YlxJ+O%G nVdF{rIh[OZfUcUc:jeԅ(Y4 ̠ӤQg{| ?6K8eWr՘-ggzQ_[CnhMgA.EV2nj=UZU!>arQdMႎ`Ew]аs*wq# pw5 9֞kԽI wB#`:`7%'@/u7NZCf[ RITUN[-ڝy,Ij>D " '& lS?o;}e) c o܈NpXVR7$D\֕_ׂOӘ`7!!q1G뙹Y!,]5fx8p]k0_Iz!3 +{ P^\tkzySo4Kc(?*[yaA:suOJԡ%"#̼St^D4GDT%;ǗmĬ/:m%dL1w$Rp.ޮø"(ٖB^1:6lݛkݔ3X E`*#1<Ż}sFd>UQ4 5\~_iRx3%ʃe!C`b!y\1֍|K5Vgې-5\[uKu hzLb@b9*t2)l?7z@QF16$\ʌ A.SS|~= XWN(ZT]2nt2̋0S= Lm",fOG+Jsnfmp%iWC)NۺU'6k&[u?ꁺL 3}Q:s eoE/csF/+ r+WX `wC5"yl3̪#0=!Z=`+QIsӤic ?a]tl(X%۫9c=]s8Jn0\~VyOFA" , nv'S4R}mjHv_r_~B>) cyإ۹G,UI,ȴ[$d՞ }^nG2;߬1Rչg/xRMSF/ᖨ0 ҈<0m;#b1y-RĠ-HЃ2SoAݼ${I{65[3-)j7~鲣DCtĬpKb `lU(NxHc@*G:!)ܐ+"m4Rż`RޞO^S;iQhy*¼"G._a'tg3Rx_A-x.]f_Yl b0*2HITC]PI{g~"B1w;י8L'tɳY0:m1FG*|_WteӴFX~{XY'L9Y@Hay2L+wЄDzwl 3`@Dn/[?)iYjGr'3]=k$^UNL;95[X Z8~ǪPlR [Lv*UywDr!811EKn-A\;ؙA5D'7Lhk0CrxtP@U5oM)\E[CZJ;:.RuxZ a㚎/p pjC5Lb<4D姠t9{^.u /|ߴ>#O `\9N1ÛDh#㜘a}>PҒHiL կ}g> '=S!oĤVg/ ;q(_+{rzj+Q1)4޺G ik =~5B L6n3hS\+i_4| 3אr]&o-e#oD*'T'4m61kFFZZA6'>T"iјa75c7!{4!ғ6,sh%Ql=8}ut+/!$6S(kZYDjY˅6'.ghe1QhwWŠ_9O}H7l~Kh>ٽXۨ[!1;}b7Bs/>mj?4T̵Q+@LU{-el,팳o+@{Vf|/u$湹x'qlH<*hbݨ`-9.6ŤbƓ8 RJ[夂GI|M EKSh.5•IƳ'_nkɚXa눯ZJTh5zS\JKZ[[?'ɛ6B=z{e5RZo3d߳J8ᒞq`t(dntw9&X[61 ~%P2wK+@^HxqCz#^{giP7Zԯ1gFFԬP]5=ŀwHP`΁ ExL6|PqN*x)߉eFؐ7byֲȇ< P-Đqm?NX6+cRP"5s]JfTG@wgωrjR&YD'yy~9 9WPuw;8LYERWq}J]I4wY?lXb#.\lׅ wAʝ#RO7F,$ '8YQ[{\\;gv[$x$ ֖$#U΋Yz{9GnhxsGRkF9NU_&!b]b1n S~z KbE!ေ]] 8.r]vx}gCTgy2j|vy6o7foGwH|SUՁ;m'GĂl)KđG!4>c+>,rYޑلw]Sey&. k%m@ `~-R*.ez@ #hnmM0[u/@f &Zxhݯ >aM ( *@O;!R(0HjP)~WrYg]k [/LTʔS/Z:a;VcJiDuιbܙb F0@k7xx6v{)Z=l-h3J9f#-h7 ; csW45^f $(ʾ|-9I%];Ù_-erQj~E~~Σob&eAT~NZOT#\|&ڼCbHw`g C T`Rdi" N&&x8047x܁? ]UL4"aa?Fa-V4;쇩 $X ;*u~:*ZOV~+WKDqlXmQu%/B| 3xB: Oi,O&dVy"ONШ6f^ly u*2VlX.YX gn N8y*uoJEn{Ohx* ;_m#'`y*o(Zvݕ'[)oA` 宨joQZe$3ZkLz߿9yhuwQvWxyʙD$qE _˜*-oβ 2*o=igU?UyZvDzrc[YŬ ՗uika"(WWR o$lcR8Mu@тv5J0Δj, -^ѫ)ϮN"`G":L[peָ!3:G0G1bD$PhivdU/ vkM7#^y!"؋m(]L- "Fa$мTPk{;I.'l߹2!keQH2Y,'aGק&j@]QS>b\MG,ESH$)gy:G=:RET\vwC*A8J<16/`a|VmGjYRoNHc<@5?M0?? 6s IC#6_WT 7QJ,Cgxd4^hd / j,W6"n"HۃV0LdcRXPgIXlDphsV5PI$,o^}CH3hYw 9Z/ @R/I)_Inrٛ9=OϷC\!ۑOEF9~ t! ȀYowT\#nߔ &\60zA0P;6V _z, Z]APq6n.\ʟIMDMGT[W l3 J0 2T! rT~T/=GKr̩]9([+%"Mƞ{~BG^RGw+hmO@W*19 X?\ z}JNs݅K쪸 4)I+PbbAD(]!j \rILE+qDg&\^FYrhl lS1* if2tr=5adCLwXꧼ_uЖĢr&yួfjiFȹ"LK6CF~L(V_#<@9n!Ba3([B1^ql2GN{۠e٬1"WIabr+9RT)k-f>q\~>AfTIn P xOŨ$p<[DžZOWbYV1ihpdTEsM R;!2_B5Jsl3d O*xm0eV0EQ=QՠB13.T&p;YM;l!]4N8IҚ&1<-G1ѶOL6B~M0\{*%|mď1%vJٺH'Jy`42,oͪdyV |s~owP/asQ1ْ5DB~? Xn#X%e/i6%Ӡ♻֊|k<=yX+ZJGw1Ὄ1 ?tLzrGlJ^WP5*us&-X)lvG>c}_ jnW8.<W+\ 7QG#knJMjSdFl:Aĺ; @Hrw;4qA8s$'b=T  ?!qQw DGt oCzLdE8;fYUrn9@6Wl1d٘(!||%IuFȵbH?3pzd k|7gGzSicAH9 ۇC؛PٳMJtya J "zop)3csy[2*MdK|yS@Q΁Z`UlX|jV{}şSS M!0'rl=Ѕt?ǥeLmo&HihIeD5tݪA PC'HVT[o%< ]*,]f"+@IӰF ĥi.n4У*X5*̶!d^%!9ux39Q3JDhetM>J- ޷!z=xuZ:3;HuzW^den9Md*&)9JSbd@ĺu[$V$qi҂V > ;PYHJַ|Ξ62B]/#}:s,'LYT<0}&IgצaVRtq}40>}^{/?@w"Bk9cL?WZ>M96FvpeY ^>~RAEgEzJrP$kc\tOږ.{E*s<"nKG Vm>( 7V(c^dr80 4q(Ox3ɓ5dQisvSVAU1`>?c+W^C̕l>Y%n\~.uCCC#SfL5Nu!p^maO:@^:6d-N_\pk5Q}[B~DM@@BMd(Q%duO$n#{ z(!HLBfb쨧1.i^T.4e!$v~y='Ks%u' P 2jUUx2HW[N 2Ddkx~puݠ W+-2Klg!;i*xʝ<ҲzJ2Ql$#Btƀ$bV0-OY|';%\2-2LР3gzGa؟U+M ېûT7N]qk@8n@ :SK;IHc =8Q} 6C5ΣcamFB]_^RrL;_8 Okn:ȭxyP>M~XގZY6_4:"rv)oa',GAOUXXk;U4RMnEnZ _{vJL lU4~Y)@I r3 Ǜ!Kps]:bhb7EzAʘTƱ\:wZī]R(DGVгDBdzuQID:_SB6ЭGC jJuql1\"1pn,6@5`ܷ ~U)xf$YoJE< u=Ѡg+r[oxjQcde)jjWFgd]|*)+M-هˬ#aOBwsq!w".Qz"=څGac[~gDv͆W0JEtuxM{P%Ԛ#+"R_/1~e햭zYq`U9UG<4}<=@YRpL+htyxq g?wWtBݱ\M@n=_HEFQW4Qb4HRƌ?B}xkK!Mj⥓*u1:!^iL@*ɏ)V~ G}:a d1N'mӾ_ y}u X R^  wu_#mVYYrH=,?QŒOgJ.SOȢiDB&ciU]r.r68$d ̆D!;w V=.JD{u"`32#̉<4yV[zg0XCy e$&?xO0 [[ !,0bOq*s'|, gpd%S5|T, By D3C"; 6H `qEeʤ=' }C&vw~f  JHBtjU _499{$`+W1eZAȢ;SF HUطP oIb Iicf4&F#:Vj9DS' T]4n?(vi16N2c3rYSK U>ۨJ6v%KFb]ǥf)ԔkSΟВa(q :"??6hu?m!G_J,V7߆ã2&"ր& @+‚H\Ž>NWVɪ-<^o:Q9w3âlbK$/8 ؤn#1_LQgFT=Lv Ix=/{bF]fG҈W4hFTQoHݐ A>8…j?%qS6ۗ!Ovb@XՒ{$UU/`n?f~T*R> ~X+M;^]e_z>p0:T K׷<.1,f 'Ęn3ym`~rU@zp$?!1unkd,tr؃Fat)KScd@Ͱ1H6%;lӭɝ媠lN<>LI"fd滶@F\9ztY2`2y{ZD34uM^Lc 坛uì& 34uXQ_er@ϒ yyy$^aY%._A$ iQ3DJ9IȈ<&/Vj_\ YQW9k-- pvm:J:S{I_cJ:&lvETjzlTQg]^PE/&bUCȃT P"?AjwçֹۓH jĕ E7 'CGxV RKC`hyb"`/y9:@gh2lWl:I: U'",xs 4O!$e^pr%mGciIWUi uAx| \" 9$}wIAAۏ,iP/0!{B{Ck$}@$1PRA }88NoIQOYe80h`R_܉C$`i_voΞ*>h[6W8ϒymLÂ("">E bU<8*fE !1c䅸lGj3 Fr>hIw:"yq|wg==q*ߋdslK1!)tXJ{ϻvZR / 8 ^ǟ%ciw뺀Oڕa)F*mD0m_{QҶLu:P[FFZmYb~{Ņپ>%{"hWV?ҿz.?Q4בZ#OrURFFy$h"E8z9ޮpvTxO!)l4ᛊ6d 2ݥ_gW+/(͉^IQ6 >du[%UG\La΄IM03"TJlR2K|+?rnEW2]Dfqa(4b-l7s7B\>.(<\o)F:sW>N%:2SQVq.%\)ɟv@6RHTؔw- ܡϲ(oNi8]\]V4DW]>&- ]CNyat>Jj T5C_2=.%r<ֺlY88f傔l12THse,D*Al["垁hoW>X/R܉FҍKliWX.t44fsxSâ'P#.[/n $1O,c}IJx3bX QaB˅MrsaFde8"v!"Av`:óZT[Xy;]QɁ E銕* wa q/;j'6%Cva?9ow>,$3-D(O/E[YY½%I t8@NT 4CuKIk/<˧,9npcdoXJ2&sʑ-3WH Sp>fIw[w2P}P =Ccuftl3r"L[ԔUKiL;}b3d9v~5h4h #\nDp Xû%! b)S !*hcj(!tc wRrC?=dwN ·JʛFD[< zGJc;RfBeHlQ:QvvlFKH;L%J"iw%?mCeAyA]#`I"WBCeXL%a,yþOB[У1mPݷXlpVcbiߘx}o@ 8y}ӪֶM670x\K,S'^-mx.m{f ;+q[1SKG?jvp $dvE>|XV́ӥݜق$e]fGȐ@&4nH]'JRP2]ȏۻH mIc1DވkUp%lU58fggŒYŅ$Wh]jsF7C ֪+`dB$`D% *jɍv _,vN{bmY}7J,ip!U_tE'lye9Ф!.,(:LasڸQ6ǘKa 3,+⸿?!xt6UP9bhpt:D1ࠥܯ{%yۛpբ$_#J}RNMU'ਉjA`{|tCeZ4)T*AKߢG-HB>BU%Po'C At,9AE1tX1]X#oEߋfɮzSnJBh, s%,$?# _ް4QxrBp&AϾ$8N]߀aO9@(خzQߦw|Y z݀_<9Æe c.,)#1dc"VFӨeO5E}A7G쿋8B5֯9U6~/㷍N'Cgpf<${츍aXoMUe}dM&^bF7pmC~DXY0&X@{GobR.cN$&yڹ#T),?=nW *=C涬)P |[ XYP.:5͆ O E$Y@ 7$ɩV0xUKc,qzfx/G.87֖˹Wo~)sIV@qkJU=*\q\i.y47YW28yvkZ2kGS/&90rle~=) gJ %aNȃV3|GBX{AfR-RD8VYK > bgr>о*78(/3HTJ8"ڈU :ݳ-B#x3 KhOja')j|)PoF4Ǿg؜X2*9곸Uϛq]bW~>{d{jvBw^*Ya[P)cQU+Ip_Ɂ,+Q! )%!c&K~fN E8 D_Y S3/_y" ْQw۰M:  KGY GI `foR{ly)EUަjI|P=c_"mI6t=3f?q*Umq7X͓_ওHm##}>&{xu_D:ϛ9s9sSݲ8+n-R lT~8 /0uVN:AvPj*m]~LF <֪rgZ# MJZs%N1x~I7]{m3'~ͤl҅l!ۓ[}5L?69tŬF>?Ìʒ|u?(!8zQm3eC/X|IkF&MNReTmi܁]Y ͡{KRJ+?1\JF2ZqD̢!Bbpc'ngLAe JID Dg-)Pt()& x첦R k45i3܍PL}ieX{%7a[HlԴJ|Amn_@!o%J#cB]?{ML[j+5HBgqm}4OE!)?uG^5vzܺMq d~t1ݵWUxdlqdwrGGXF$)R@~D#ld.:Ng\vȉAn3wY!ky г"o^bT\eR %ݯ5?WmD :3-ڂӳXxRn N mlJ(ABB &ϭ~ L+Il!Dʙ@@ P-0\å*m&qYfq;,6#`B`ͅuMY'!KT [ij{r%(j2M|ӊ!wN\ĊzTo?Rc{E8e)W5-25TK3m{Jіʋ54+=]Ȥ>S! 㡴lïQ<ٮ ]}HTMCw|6{/ 8M1/hNEs9AKސVSNEFZs(nu ,%8mϣ 84lY56^#RxUu-[JTYku4*㊀0:(Pw>8Q#.J`ײc4tġ9~MmCW3trȱ+ϡWk*(T?7pJ'XТTxԩSE;zewd`w=dB>YGӄapD6_"VRKk^3Ct`j- jcoK|D+:(e!/ҋ8"{, _@h@^#Ye8B|A#Z3!UڬY{X>u W9k{zG^!EF) x(b]'#3.k*[`R1Qhe"U["_%ټp.s!"$AH܇ v"(US6Oɷq4YPA<ֈ ZU{iiIg+)8lQ 5>k"iPsJXBA(!HJia4%lPjl9~1{T"XW d[y[H]I* x8:1\m0o3\8Cƞ)[Tq|Jx^9+f.6ni/t@~"R)+ C1՞e+IF &K+KD':]fRUa=֦27 :}sL_")Ɍ_6O$c'TFFCL=>LEMTDt :z2k-)mŸfr@vWc'|9 a*;KK~Yz{8!Ϋ|Gd"FOQB !MSy G =k* 5zquRAm*ea5v)H &nb(,\Ya8f0"FO4Q tUt/%'5%R>wƘw*h$ϰEXL.kaC7 ~}＆)$ye*`xN_$dj>XH%0u-JI`R2\wD^ѯ,@cߊd;c9Z[&,}= ^Qy}W;LZuȚv~MUpG"_Vsdc^d)0b=1Bgi}zf|ohINrzIsg ;mIax8 )SI}.qVb+MN[FNoy}I?G.6Ij?g#^esgl0-g,{j8:$%\/~( Z@2X6inIȚ2.z/U@ԐyL=B? )˿R?qwJLk'C*f /^zFUz#r{ ~a8ɒG*YB]. ";?oy>O^h GA2<'#g,o'12;;,] kv6Дx崕f9=?ʢjco̩ZƙtBqb%c1s1 8lSKl˃<Jazc#UʣBi,iU Aʔb>Z\D&|, )?AZ/W]Zr]͚%@ 1&mK'! cE>6lUys3퇏)6a$=h6KMRSj9}q H:ĸzC Ɛf㫔Zͪa_~Y>YҢ!Z\#s)ɘ/ggto+(P]+쁴[ '7eZ˝#6AOƓ|U\4МlLNƏ8ܵ.f.6L .$R$;QWWѷL 6jb aO̗*9ޱwjb;ύZ"6;86@ kqpĸ{f:p2~jr !燧 ZbISUYF[+ւ[^Azq>.-qaNSb1 .h]ѬWfԉ-= ostT5*Ef[f&"L#7"u諪-m6J,&i_ 4h,mP,i&xb M1VY b|[Bwb m xS12i`ڝ[D5vV e9 5ꭵaa()b-Tl!JO(# wH2:]^CśTդD›ˡ|Ze'Z铌3VFnmWϋOaĄ/ {͜u~|`0#C}+t=7݋EY kSrq.Go囁iH#;^K_?!H) 4fA) &#8yT;MDOdXp9D;eݓcZ=TMH߱718Ǭ殊@_zZ'\ H[˽MM,:n"x¹ā.f/ۇ|r;׽ogKwvӀE{'EVzCZ@#m}5B=$kqŅzޘOTlRw}bg!c ^v81?A gCyAT[ALGebݓ> HĞG7""8Vwo$ ,]zNBѭ5 4[2:YL8 sꌲ}+w2NJ{]Ԑ9tZlcexlXPj̀,u Güۨз>0I8|Z@ ௙=ۿ*>X B67Cʁ _Ly]dS= Xh"deGfIo䍱8#C7N=kޅ)PXM&kKäAYK(4z^X m[yhܫV )fҮoQ*nӗ` x:"Xt8[K[\چ z dZKIh}i{XgqCSdBQUI_jZg={)ZC`s+0ԤK*)m2é?1R]^{!: a+e\gh2LX߱L< z0ڭB9<+.@\/ՎK􎔜pu[m,ײ*p" N mXRX c^FVqRY%#һ@Ğ~)nm &NZ 7TR]&m2At+SGJeA,,sˬ$أK~ZK?A-=q|esNЫP AMzD&RuдuV-unm /#qfm kqy^z~ >iv_. ]C줙]l?2Ը^pYsSCeBgZI,c %+>IZ>*j_z`P"d.'G h#jE R¯4a9NWš+@"iYˌh;"Xs.<*b,v@5Nj^SA-Jc_PR;ѵHiI]4[ ֊sxeo)HW&I 9r|Pf=`v܃Ad$ud;ֺat?tЈ?K?yVwe}ϺvLnY6 ﳅ5XU\0>z  i-@gK4#'І$V~.~c.UKNv80vz Qً>X]u&D*>vi*O9]>_Dr ;9!B|6s5:֝?p0yԂA%anW{<QmWWc=4\yZrsD:nRVcdu5)@ʉahM!L B{lt 'c L,&kPU>)n-h*6 M]&a?qqUMnD+yY~1B e0W>xjO bDE[D99E1orOy1tiUͮ0P;2sf 贒~Z3:Mьa{ /aU4$٢"zKXd=zsCcׁv7%ւakN/d׺ڀclVݭ?g}UKwTSLK;Yz.M f.,l=ͥ(. e Ǡ[8 }qBktłrk<ߥ2[ۧuK&DP/T,Bsu7+hqti ' dS49]bgV;ә~\>D'0c ?ʭfB5kŅM; 't2,E A2cvQuExGdLy}G\ɤ<@,2^OIpJ2!V8o gˍ% Q1U7}#"ڵ1Xb38d[wV4]TM+H5]>z`#Q 7(.ΣE}BEv"*LlĕϬ֚MO\ˬ}` W: |ןFtC"0 B4k,jЮP5K?όn('{ѹhhtsx}d1G32uÑrW昺SfG3j釻Lw1h";Q7ByEۃp]|GK\5w#0,uw~q7~ny~m ryAcwpwC6C)E>yI=겭QQ՟0Q8iiB.)"_kw.܋4n`(~ADoa)y?q:) $@#͗sZ5A厥5ڎ[ͧwep!.lKo G ]JI\h?O&g w5T F5 le5H/; 2@F+9T*Nۿ/iH'wy0?RKЬ2Kfzٹ-S2wS Of<΃P{7{`|s_APwStz6T{m?WvJ}R jIVubsJoaQ˫$-916e(n ʋ-[&їq )dupEdgQ+T5щ(NW"ҝ՞=ĤjO'$ʣeƒXԩW(?VV9 Sy+ÓV<.kI!}\*M2Џٿqh}la*NAU@ `p;8]J^;mԁħsHjE6vS/ ٻGqvYRsx XvP $y@z0]eɂ )|]JEجO 4+λ\ mxl|(@Mm5y "EB`jQSbM[Dc;lV8(_NY+~#%C+e>hŒAqpn6AˮI!U_ɷ=fqΪ})_<yS9a g̢v Գ=ŰS}Q]Kuv|,utchpkMH o3!R̩?o4x&Zg-cW5\*: wYv) Iłt TL-4ΚTA5m?#V$"rGP9.= *)x]΄p]ƿ(W*#%λ1{Rie6+ҧ-TpᤶsʼN$?јzzeGW,d0艇pI [:YW2RSPo5IfN2Wpgx<7uӲp=8SYo.LjֈsB*v·k"9<#]<;dX `&C ԍW1PU#D?cRw{ArX3X@&ĝ|8Ϊaqdy~.;g΍'|:H]1TtQQ~=>H:ߝḐb %\h7j5hJГ%6AI$IKOsuE!k$\Q*l$O;Ts4]a L3%ȼtYVaSs^V ds9ۤ%+h/ *99l mQo#o?ʅ}}ײ*D\`Ja`(tAWUWbuv8j*'6i.[cA%}who'E^eDFA,e[ r?3"EuNRd¤9D|B4):yʍ+Ucd>jЇ)S7gRhWqx+"Et=A*&/ܠ$M˱ pл+]B?S&Ruq4> $Kñ\U p5G@FPC%ꛟBZDFbYK15ͥ*^e+ib^N;Dպҁiz0^(ZAoPd]!pPoDT:~ /{~_, ~Ty`:m?&<9"b)bTbjaOv[=!ր.LiJgFn_l]Jv*ufiI]Lwwbհ\/%@V9D>*ￎ12P3Q>˙?`5+ÂRrSnw=fbtΡVQh~O+S!93`,&^|i7Jr a` w]SM4ɘfDmۂJV7Gk> O2dt{5|W|ڌ@jG>Y(ާl|t"ip1% ś]Al*l}2N#+4Lr[v"ޅjn95`,Oqh,?F,ͯ/?Vf  &2B?L IQޑEf{̿_/Up|4J`hZV"(<%`d,Ea>;E jxƦTM-CVݐI t}|wb0hZZ2Lu>ןߣN`vϛRy>BTv Y{J.{Fe&w/U^uZ"H{ wLKYDwH_#l8|\ l՚ƲBRSi }Y: W=)*oH)]4B'Ol"@)m},L$Ovh\ ~ܝ(` ,u Vje/:?l~ arVX~9MKdB). 2R5J[? @W] /-guj"1E){\Kgy.CsiPj#9d6RvBw(Gm,갛pShXUy\KY`ʸ&oN52fb0ۯ~9= k Rat[ a=W|="0y=VB+\[ӝ5 8(,9.VW" DQnC]Y)A]r( ?{׻/K|YN+"6GK+E`a/L_m3S<xxoZrvF7aʒ).F@FR*zl5q R5s m;4-Ԍb7J8Er S蚈Ԓb]-fiGuk +?'P)e_Gjo%1!$ 7E=i<~bdCakV8Tcy2hm}ua$\s,VVPI V sz$Bw&u'{Orzr0HHPbꜲ.i%d%"]ґ~n~)!>s97Nж[Oe򈌑ZbWo:ww2q"^bHui$eǢjz0ۺT(HkI8d8"|5ĨQ0f;#PlrKVW^{C* }tʆÈLTcS6ԿC]#ٽk[PK#:y}{~I\ͥ=U? 񫜼H6!]3 &)0峁@L XL< >ۇ~\'lgs\Z*Dz0(%lmB8 n_T  8jYUH){q>'lS.s֥_/5ScFj8c gn fq@ְrCN_r[azt # Ј+P8ێ2ؿve"HtPM\?3FW-V;H9Yfz Ea|Oj1`PB^:^] :$A<^洅\5,ɱCU)O:K6*szfBl>"F C6^hgyB#}UU% )2о)SFPQ[KJJ[Ň'qVP٬92 ܪT$fҫ}$?%=͠1OӘCp\EFw"U@ o߸ )'pLl%ddwvx Z%څDm.kNρBHStu[ %R %۳-C x{ o5k詿%@tZp ,$ҥ=ϼ GSs\KU:CVb"*U::e}RހI,s0@{Ku.0"Gj+˨ A桿%\Ư^ #쀽qv6J6]Cux!ZeWl:BIzrn Bsxe"щ5BxBn <H:ժXmqܫ@l!ģIWZ$۶b=6(.L(Jh d! *;.$}Ϣ_kA*t -& jƒȼjf` VoDwD :x(m `ktWAނ82Ǫ<(oM+l;(|l n`Q׽]~=6O+p"R"*g% ymhzp JPq v 'MmP||7ĜO" W`L4sY<-ufPB7.}W7@6.xK,11"6j=̣Æ۫+|) \~.X>ꮱ{9{N7B,vpvt 5PPLH=0ز.54OƺxF# DS QHPa1IaK 3u0"^jq)j7"VZ aT%*Jʣ'\X DTIiWCL|}x}E\J;W`L]dz?nFᷗO;^_ɀK=]p{j$0hj <]6=C"e gstb.{X⤘?|/ C`~6-6ϔLU \1 5 ݜw0 re1f`#̀C dkQ`t3?xM$٤f F?k SdD 7J +HŶ©)>Fx٣D_o%H򧆧W>ѝSM%PL$/[KEVFC*OPφn4 ๶ Q4yzc%.Zm &1ek|]-vgSuߟķ*L?v+,:/J1eod݁3߳62E\3uWa^.=W%;B=KXt7s.TB^~K8H%1tYFL+Ox]pq`})W/֜0b:^(YJ#2)yMG>==TQ꬧XЪkYZzU![8l1`ͭoxu!jxKk(əOњϐu#5HW^+(Kk i{ʚ W0QJ^"LsXn[VgE61+ܲ}VK3 ̑3QGĝdvec!B7u|_/u(ǀF {Ad3."L)ͻlO0Rb\\,U7ܔC:}lJ[nVLbcSerFky\NN0{k`fL.乭R4+LP逛;ذ|޷ęvQ^ϭVa>8!Q %@Cu$Y8=Ok֤d,>ǯ 2n&>ʸRT@t:p/3ī9P\RBUY8۰΢ ~c){e}egadCL ʞq_*oKIg8$!{h(pjS[RisE=ߞq&fQ@8)0hnyT~w%CTq^ucȍD?xHAECN0|KEwNKI Șٳ.@u69V?Rpa[8rQυкf3q`·D cK$nKGָ`\=nI9%Yep2X: |6@6-NU|5` &2M]BJܨnE5$AI>Ap(\\tD?+FYlHgQw#ȱI >'|~m&GctY %fJnX-i^v=OO_GRw#0Jg>c@6wWoNplACC`@UAr ÍeDo.y, FV]EyhG[tpU'[d+0A}8\ ([|Xj@[fxM/vO) \&EB:2q6O[؎Fx-l`1(8o,kr bazo"euj?VƾH@aE$=v(^^1Õ;ߎȅ$—fKv}`j\/4w.Sv2WMoG[Y[U]Ķ {d㟯ٵؙϸN;\OS@<Qu,/s] W1i}Uz.Yw{A=jo]Tg :G$ǥ`#72+Su|p PQd[ fު,Jui҅@'OKOG뙊X3J)9!7!|m?}Zb$׋ieo~L/쏓ɴA}cY$҈ф>oRlV䑌t~鸂PFB0#g)M_ ΏH۾,0.-,Hm_ ,^='<;cUwӶ .ؚ~88og|jH2V.9>oh]2j'@..CsB)C~*9)ᆭQEPo@Ѱ ۛV: >TN)MfU:lK ƍv B?tsFϒyn/gLrơ\2~jQ[$<u܁Y|M > ,REݪ'0?B)ֽ y引$tA&˕{e1loՍ;n&/) m(U]!6gi_X}c?G[DZƆs+V぀(dy.|q <)ɲ0wn#Ԃf@%}7p4p|c=u3qKo3SWem[SWuɆKyA3L(<՞`!]/IYȊ ] v*c BQ0@H͉% `+cTյt\Vu\Cp3\~ees:/XL9;jTLghSHoٞSdë_13 1::'O!n/v${0 :aUՌo8""C#FKa5\Nb2 .H??pEFP "lfz8a[nN]h}exhSפ 5 23U t> J/kAdL u@1z^ YSijM1~uï+-vDѤN|vkڂpժo@C,hAҧvYyr ِ}.9C'L .ycTa4ǣf?荅#* ْmmUŸ aosc;rWczMԋh1E|Տ/Ly]#uzz|WM-u*6Ynz,ԣb0_P=`DIhv#Ք 7ȰEEn~VqNV:>ivsqXo as vOfPuBc_˻yEdE`ze@(H6rs[a7U7}.v0#D[x,IEĒ_Nf; zX]h/YHrpr]@NSM )frġl(Qn,CyϘw^MӢ9:ou!5Cحt@v'cl^ʚ0-&HZSMW`Ɇ5AX눔L3M-ujeYGѹ;sadcs|uqrp?m\NE 9)$IZtHBط Awx! H>,U||k1Ϩmoc(/XJKMm]e5ۧb줮Ɣ}5d&a?R0E+S7b)$j9.^U|`.]eS HK1򉲣~jm]eKk7p$& xmJR8hX(nF\.8r'K[6e9bMԒPNѸ!_nyQ{ r?xf~:h>iVƭIڅr<e{dh'u3s Z T@)oL2|ˑwK?L)3[e_ez%s1) .'7I}NN;6߫VzǒwG$1tL)37{ƶB,ʓvkK=>)@qV"py-J=@VZ;:c>O;q[D4%H(`˧aZEV2/E(M~0V|;{`}q*d2 hD"I'Z G5eňjůmb̊ﾌM$2Zx8X?THGIjK{ +"WA`~D>$ < ϡfJ2EDW[s^B,ƄI{KjnYuF1Г@a uY|n^XJT;`]̩Aİ+++r+&<*=_KTeǚbK.3q^~PPDq L3).Ea톥exI t#XpbVR*[x7a#7GzںޫԋQbm1N_M JY62CώF}+(9mi0m͗K׵gak:V٣y۱ƙNkܦ}=-¨]rVyR=}-!e m`oつFV?p('h-IA T |xU56Ey1Qʐdr؟@ OW':t3ͤS[Tt :Ht#ަv 8e;koș2ltGr@ n>z?:bDln cySk~-Q36QkS&;MpǚK;";Biq>]5hy+]|g\gv#^)LJ1%}bIWhlUF_wEucMoJ<ù_KƣLS0'u898mHUU8E1^8E m_ VgyVW<`6ѻ@rQΖN˳(|Q`_nѵJlɋ ;L dt$uګz;", u߻#`wFh42aLENK,ZdFl ]j!.CFOl;K҅ U Ndj`AE+*S7_{XߎQQmWSy>?enEbC}-:iӃ76%1+ѻI?pIOnIzQ^8%Ό?Q' 8 Y_k3&E9*#y<5E<__c#NG;;.>0#!X6|Sju r$@f`H@~NĊ$4` R]b8sJ.NDv3#ohqpxcnVsˤ)1n BaޒOtU>Jw1X_ k& hO}J* p GꞶ6UW)3|mےxnNe ֹQ^ZtӸq6!woȏ?Y<WG ^A 3`V^ZMl+dwCJr C$4Ni ͳ")oaE Ny!fjh 8ۂ܆C|HM}ReF=$"| +KNۜb#<^(ЍJ#_=QvUyGn?9vSW,LO:6JyGhQPv?Q瓉h|r2E OήҺ p*{J ś4%'cDöTh|'} ^&.Yn~BV]X -t|&RQDԥ,吘 VWLRvm/,ƘMI$Ƌ[ॕ[u1H;RksDLB6 .[.G$vf&WG &IR)q`sIoX9kk3VN\Q:f R0b`fiA){ gi7nv {M<ƴMl EUg~`>;pL Ɔj.ԯƾ1:C߲xx=eiqlh |]0t/%&HnѪ]DbM:| v .£5@<8hkpw!kU@G)Q"'{_nVLQHO[ H4f3RKphLJ;m*j̹6/Ǵ DQ /4fηCfedЏ{R;BM9c ./ <` i 6 &FQqMI㷴WաZb! ϗwTŸ9ozݳf1/u>;{ XSVkIIӺ hLRun*s=PS(-JS_M{q6[̆;R߳CTښW /-V.8LReHC%vh(UY3ᔰ3)61DG^gӟ(w&oMucPѤ3lp %@;Bˉ0ÎH=S@ȭ&a;.}S)X~r_(񚙒dC+Y?ٻ=^/DTmh.՜ԓRi?eC ';&tPyvK*/Uaj==؃bzv([QO1_t @5T@Ԟ*fq ϢN~(j1Zs D?jqG*d'W4Pxs:eN[3*=|PVAT]yu'd(*/+TPOuP|#"n TtȪ\Mj y~:@.V/=B(6:p=]ȽB~BQJQ -mS|$&IvxyG:+Ag]xm 'b"/vbAL{>Q!!NYmFs Vlc V(6&y5L)䖈hML@X;IJ{Z*d>"<[pT^?]ċA~BdJb~?peپH2dɭ'yw0XW&%K&vڸ wT 4|r1JB{Z ),M?H@ojy҅o(dM`½Ɨ>i|@h:5 A+1%nWXLO">Rі^P!s!l,ܷǍ2q!449?T-_P0B<Piˍѥ(*YI"ec?/ڳ?DEm~K_,,-)Nv\H'D؎ &O; kdeqMAG R<oPzSSBM]ؾJ5= @V<9eWU: BX64Lj#J}Xgx$X8=vkN;qaH+J߮QOozHR_}XLCPQ\@♮`[zHʥ݊ u XYBQn졖qA:D<qZZYʈ6tTNeS Ґk:%sU}U C{cRkm*{FҙE>|%sƢ?>cY5ٰ1i NVw=XBz@Cn(FXlXOA#_9 8RRæ} 5$"m.,oMI>l/@_.F,=W=AQOϓPX9ðkFrM_,N欄aOM[z}A_IzDL|C]˖ 5]VnE`~—f&W]I_/&GqӾm6 "|!QhpنјP RgF٦q2J[b2ڄ 9yT6ֽg@fD+x6D\̈l4"s#XRm |u~j$Ǒn#N\cUO5mZDl*C~rxV*^̪)$֧~|6Cz!str Xmfkrb VDrx Q3~#3yI̍bD~Lw^eVumaO >mg _  p_tٕ\b5P)4y|L )pB~c!gm8 Q':}B 7HrG ?' &4@? ؔyϭ؇(;Ŧ$ %G_vrF3~@<#u웭,׋%BRV[i$PŬ#Ɉ7pof3D~~JMNz~\ a;t~S=TĹ4CwZd7{Cut3'{$bM%Q֌ 0)`Kb_aߥ0glhTQ{g1RXF")%-HprbF%w'UpZ9`C.&t՘К`͈,#nIE"R2uE֬:}<@"Ӂn{JrmVC݉5-'LKLYyI ?YXс>T3X;|A,g O6I& 3" AWWdӤp}xw3A%OWQ'mO+M4:RԀ :η Y7XWzڞ#Q&Rvi>] <>6}-D .`Ti7|gi@Ӛ"-Öu0%aom kX&!@#{]R6P`oEL1(yw]ŠQ4K9NZw+yh%5@^yFÊJj7(P0y%}D~${GBNL ^6dP"IZ^Z ~M8Ҙ^v0  5(Ãl%9Ŧ“c~:?< ='74cZVaLTV)r+AL8<jJf*컹R"p }&vkiZa붑(e9i-ӆ>n!(" ìa Mh붊J쌨%zI 1ugБAnD`̡!ITgne8'2+AdQՅ6fWnQcDŽ%S9(JkƝ ذɭܕZ}Etүz7!dA R]>WKOb9zh/u؂J\ B"4( lʫ+J\OYM~PѤaxa/Zv!4/ʕ KH3Mo@|nYkf3ϼ(WC+? E=`mW6<#@@IE9; 17:k?w;ݟ$hYk>D#v5ԚI- +MU\Grd#1C?ak546 YXv'߾KyWrOď(ZFC+ 8yl-=YB9s h0) 2>gd/FJ2e!դYt,%tbIt\#iS¢ vWk8hwF~;N^V( SAkFXhJޚ=#vr wrx͆ KT!2hއM=Vlm3NG]gw?( S}dHwf UګA%ňJヨ 8v/!v{v09$ , mArEGRoyKCc<؛11{OTɈS|%q D[mXo~E/N-dvVSH_Zr&֗z3.}~:%lV<]TbujK]$.oQu"*Th1l#n7j8T,"PEmpyHg&99ׂ:/ȸd# yYE, R/EvRGd#DŽ3smHώ usxOmD1B32][Z;n/VnxIO lH1X6Da$GUk O`& p#%1bؽlkZڤ8wJ ;J`?bfM MI}T d*@`4Y.X-1k j^Bk7b="ǃZ$:6jgy,>sn~;JIZiN^h,!+C[D&*Zw oztD"4|#p/hE\,:9L-~nѶ`;S?`OBKiSđ|Q+$B@pY2)'T|l@d6y8'ϒq ^!(WP8語)@z歩o'ȃݰ]⹕XZIݵp1]㶡Ғ"2 beĝNZG"f0/*em ޚLu7#=n.H&z*=+QiSwxOd4IDZ ?E]ujjne %97so UZK;Pf1޽;Jc@+OÉ%t dy1 J⟤/3'^=Uim"NOe7ġ [WdːPJoKǵ͝v;aA2yvW&KSp#` 'u|b>icd2w"l-#K>'sWe_x>}p:y7%᰾;~7֭a#KXs$#'bru|v_*GbC;%cϙG5DcVm&[9@u7f[L.5`Cy"OH'__=SE5'd :/&uն TM9(И7$ps]-5{$@ek@3yecwԚ}?jNG.o`{k[ϢC~O/ v^e|G0y'*(UQ qQCd8&mq*}"Zj7duϖ$lk.fkZ,ό61%UoLU,_H ."u38IgqY׈ɖH.?)p.$F砧E85!? 'a ;L^D7fm<FLT K[0)A+.)"TY\RL'1mfv7urHpnzVdzxAh;<In8`_A@8I •. &qRxZ: MYbў؄Nx$7*$!zfoXR½dIH5 xﯟu @y½_`,6@HSDRA(E>+ 'W1z7ڔ%w (p(o|?-@!YJ"XGM'L|ˢ tm88'ŦoZ#${C537aKQgx,q@m ӑ\W/ޭQTo#(Xt:\u^dZuNj䵯7zӣ7Ud/+9yVL%yynxC,L3̾T}bkE(y+p :Av;q83{*+`D@+ÞOrRjc@UcRN%.uEv!EltX{z8C9<8mbQ_% p7WD^jEy!FaZCXJjYUo5Yk\ʼ~ '%P d#4Lbș0_^A8EԳ$p셭hj9vnSwe/)5!MF9%^ Be ?R.eDŽ?Oz`%2l } g{ܧz<Rc?mՆh>ˍm{LIC[Y h{13aЯGq\_6UVѸ<Lin+#0ct8󢼼7aH"Ӏ膩:q{;3\TԶQO~l텣-p=+\PĆ=adq[ suƵn林pG!}{$:e'Ows- Nā=e4D',Ժ6^z:yr#2VΠ9T czb(dI/qS[9]'( =q2y/@:EӕThsg2nۭ\RW1Ф~xv$ nJZd`;do.%d}[-J+4su1#L- $~(ɜo1lC޾PoLK~ҙ)?7P\V^IH/FX)@ ɫ&+?# |ܗHEP砜Z*䒆D[öܨõ3^PkP=\D ׁ;`eHAv!\}Bl k异*'ʃm8k5#X!z2rYx/$A8KB'a)->qU0 \*ӇqUIt;VЊmMv;*CeF=<3 M{R4G D>|M?~S ΧbUDN\D_#zz;$WgZVlv3Yh3<,HVЁ"=|%=nV}[C}~ǓuPgrY(>_TsTpdJ_8sw":߀/bgDdJJoEi`˼]Fay׺#4{ %GC1d?7}f\HnܻmEW[$,IN>XtI"8HV >;-3{Q"Ob)%iOi짓--@ ٢ld̈́:ٕjL!u=Z0N*^7{ .ΠɄCj:E%Z8*@;[6bIѬ12023n}5aE~p'_UKB|S( EkzZ5.d"d,d~+2-IyRLЧukǥ=|9WZPf%=tĪъpU+!6'DzqJ)U'!ϗS\VhPȓ2^3ࣀBI'X|+QE}cg3P޽eB%z4ꭲ 'OMu;сӗa-r`}5y buƁ /L @D)b66WS;܅ 0Ooo?\rF[ܧp.5dj:#{4Rnǡ[ʿ·]6bԬ!aZ";u"欬YNeo^w/m)cv RԋnXT d`hf1p;Եw:;n#VB+ Wkq 5S4T~Xvy5(y|F6 H ]C9 &pVEPAtQ=bʯ}׽q0?ϬFx_.er tMkt `_!#~_a]:>?j^|@N yԤPpQos~JL݇$#3]ux9?qE83G)ɪӔUc[y -QDtc#Лj~{[ R$1Am7wJ//Rmd^RQox;*uwUgDmz<Ȳw~qB*HhG'.q(/9Tn-e-X-8_db- ,v! = l"lT΋qtlpg*1ꍰ߯s@߲Crt->TU0 㹂(U h1OhlUi2)|\&~NPi[Q!D#H4=M:z&XULTp$.<飯LG17]ڌqx/磪p|;c)\c*MWޘ\"mžrR)mE= ?yKe7/)N$،'͛\kUZn^rFE.OE:`$fbݥUN8iJ[2Z@Y݈0ʆ8vtw !0swSWPU"F't#o-Z~̈́ZOx3_d^NvZ|*Q+.[Jc$fiJY]"ݼ"8{WF]{-G9t|y9C_r u qUO08pW0GR> ]l eb! i9+`ZtX"᝗W! S!,`EXC*7Jϕwŏ '&j'H RV^{Y 镭Ʌ,ĥ @lV;Z3J%?ɛ)f(GKn{4֐U+6n#(Py+,{./HQ=aQR@gQKro9Ü`Y*'T_E$N+Dísm'5oyDCP!%icIMq87k_\8lRR.!R\vI-z36:0>Y6Cmp'}LlAB$Jtx | M+yD637 -r[n`;$P_L[W}%=ssn7a m<+>QRRFA^0qD1L[ W:syMŴXˮ@I_iC`yf5Z0T*dp4FJ Y1t͆I{5HOh קX8Hr U l \d\3Q=Uͺwv.Ca.-dƝ.d#3IK~K2`MEmT%ڬHV{ ᜰxa}/F M aTeTquf4Ji lΥN:i%bQVwύ2F)Қ}6g.& qG]:cB5|xaC+3]LĨ6F1F>LE|1kpR=='} ]76kһk^|A7U4,%ޞ6@>FidN8a>){󛈞Iy͇b1vȨ)?_,>7j>:a8^.l=hɁ=hv ]C}{YL puIJ͈\WN{ĄHr0b ߖs| -AO |L)bPXDú"xB'JuKw=9~WNw:G2j9\y/ ElBI K 9 s^XL7>R>- B{/3Xz8?h<C)+hT="j֫/uİH/Gc^n4?^xA ~_w@֥Q76nbYSpA^7Q{2.Z%q9:˖|\h'9j̾x|t#iBm"EOvW &qH3ޣK2 1Y6>Op81t:QH*y>~ /G/㲵r2\#(+-}L<&*KTaos,+$Dɧ?(',2YrNW Ȫu[v&9n4 vx7TkHK) Þ zE1>Vo12cm% U&OKi{KG.nlS`AgVj f䢶"h>c: zx?v\#1lΎ tt|]T&j~v5cRYmznZHخ @JA꺛S鬘 c^,:K-︛nj7t\_ELBB%436'-GuCH›^>Or8jf'ZmPn#GtN˙v2:>hdie.ڐ|aQ2EA 'nZ܊&͆0ʳrLnw5YX?PW8]sԓZN]HsFxz^~_4%5,cpis-Mm%qj] PMi46T 2[ABHEnZ+*ѳdSBBCN0&nMnAá !6OW(. DžyeD|7=![IƂ,ˬVQ&VxT>g8Yw`r̬o]š#0d"Ǧtl$$yGNZ4YlL_aDF[li:7>|8sl;:ryp6\Gf~c1fBiMNȒDk&g[74B#'* 43/c~o8jzXgR#<?@ 5 8`S53$̹6nCNgO(cvBJ.]usCκ2sKayO tu? bP1mk] " %i4G *dsbm_桜'݄}&R|4pyi֭!-V~]HSJ#=~;yB!u*KGfұґ0nA,]u">{ߞ3)K RDVxw.:=-b]! }f,dH ^5~o/ɫlAGB,wοD)HD5ʸu0 :ъ]SJ5*9ZE|:EFdooܤVxc$3st澎v"` YF{ސ͎>=U_'LYO]pxcqp4Y&osX-][\ k; ]G WE02đL[ &[V0X ZĬb!yVMoK~]&zp"_}V}'Qf[mIeJ6'Nqښihq%H$)R /ahK/bL:E >P /qC[(]h7yzh\ ַϒ{L% L6Ʒ!@\ƣx\=x_L?f`j1mJ72;})^ofa&4]Vsqh|i[1ufÓι8YeB ~l4ld]m^cϋ-सtOs00l̓DGo4'=_&=JEXunFl{3qb Lퟃ[;q?>\OR;xVT`0^}ա?a>[X8cD^ܘiقD&Sl0Fu]>,)9j{vxP}Hns~V9uY#l[{)̖O|\CGr5t}¼lgɋ(L# 7;wgitlf8>^x>] xlWL#$㞋/\Ky b)q9@E&-{ =In7p'1^_[!- 9 p}տO&}!7o5riWk mF;q.Ns_IؤGPf@{yO;z؝r8C[*ZP0nW^G  1_00[IѫtG l{}ר -Mp#OKpuk@Dْgrխv[^Wӂ; !$ 4GWF{ wϼdSuTH0Ab_m23\9Hv}ev9:T?e";!'0sywAPUig 1>3$㼍[(u)J0@Gb"7i˗a.kpp=I}2,i^m| RoQ70s-,&5) N]CIA 2˂t>#1sv疭_=}K}Y2Ҁ@ziPdXmSxȐztHlpa=! u8Auޕp\ZXpgc"+C_3&B.u?_%l0%1k^ [+# w{ 'F"u_Nj~bˤKTOd0abͿhz(O:;хohMycꟾwO튕oHf:Mp8e9 95ww aZ X ql@P^kfCc6;,KJڨ'H 1!UJ,kBӼND,;Vs$GR 2\XP/S  6 |csR35;]+ZT>Ϟjr# sns`/\>s0xpDmNKu {? f @= sBt^KOՐ=qA6JL@ϯ!Jm]w)yI|$uof?Pb2{Bd=p-^읋|*=A9bWosB=Yzޜ}Q13!Ѧޢ _AqƾeK偓ƷiHo}fP<et9u΢&M'b&Lk8yӐqYp5F(%>(dӸpJsl4N<źeo(ƥ e8f}IĐET hwE0#,]}Z7l#}POf_^;#g Pb.퐗V:TxIpCkvo%شʰS8͠]l>TؒG]}&NkF~?l[MЄ͹ࢃkD{=۠;<;eEZg+\2c/ < |xIW'A(x(*Z+&/7nӊC0`lAq+2вDwwn"#ìD M w,дc,%x>dCNj1waEgГ ˂T}(oqlAi&>9Z*ٱ][M\.wjѡ S=(;~ W3ھ&Lhge<ҬZzϼ>[ a/qNȝ]x-)pTũ~ ;?y UbQVW|fBpd:XxTU`CMUf<}=EW  Is R S L>GDqkǷ BE\N ]h n@&]Y6^BKz9h0ǦO cDuY<4f^b}udJʿXoTJ*S#Nh"kjJFB0?2W\ EM , 2EC=Gm2JboꭓL7?p*SamYuƅAAYV|O6yBzO:HFEt4%5 qU'RH4(܊i&=Mv1ZP[a+kyF``eUeñO<.YԕXq[src hN}lu M=/:. WAW7?B.[ecCBppxêj[riI {QA@%Uyllieݒ;"74 u`Oę-bזvР0#3BQt!C3/H$2ȼ{S!`5닫TT 㫚/9ҶZCubE[nꞹHJƎk̲tL(EZJCi%R>Uʵ|B/!3k:)Ivʼgl/CfpWE*U9@..#7Moe;U":E%&ط*"|NqO[_ &k3X +ߔqw5B[⑽é5. H؅H>:NM} _T4nXa%tMKly7$۟L/Kn쥽U ]巍:i ז\lu0с@g."R԰k+ qX vB||@Lv)y"Y_ y-f[sRF'56?8kS"J^إKc7F4)|M=Y x b cOpz|,9Բ|S!N%([ 2jDH* 1cT!iFRy5x,ȇpʿ]:p 2p@bø͟spn>3` vf޿׋O!.r - XCj[VgrC^xtI7s*>)YKx \}Y ~Wǵ?"t9aGC/*T7/EBy t(q#. ^° Ԭ%?x2!wc(M AC&D +e6 8$sx|t&MRsk; |119Qmb3^9ydn$؆Hws.242䜖@bsdP^k,C_ղWPz$ve֔(gND.ύl>$9G!Ф6lJ/#?Wʐ]ݰ8Q;/S37&|}eRS]$.ibI@Ɯ6L?ˋn C9//6/:h˘x2 : ꦷW/Sne?Z]B6I6rk92R[&UZ W]t XXw&>3rNcה vMma_ :nJF¹G%uF>)jAT\ мg<Nݡأ)ҍl77n)!%?ݜ/R8L;ñ^4Άlw4 ~S]EKZuvD|>2w1=Nz&,t~O,8z,A\ Yb' =gIb[4eqښ}zT_+݊qV&;cHc,>]\kG E|Kͻ&ְE+;L+L,ɵbDr`H(3hVVX_gkc`e)C%UԤ-VuF)PSX5f7A sD\gD5[sI7K H6dz||+oW@ hYxr|,{>|oh&Pj01hW]lE wS3VRAn li`usa a%)wh4{$Qj9kϔᐡ-7*Io;YE9 u:*>܋ϷKGE7*9WB:-& ٭44vi7¹U~!,>`;˵@&hrmc%o4ˬ ?co-ʌ a!ސWAV_(TP^=^4 Aߙ gYV}//;%YO~l2%HX NǏl.:"v+h)-˵SCiXb#ECpu+qQZƕXa_Q C}V`Ёia]&B}faXSNF]\>Vy!ϼaHx :u0gJs|ַrZhLrЋtBwp!|Rʴ7»\D?-3?wc<5IћLK2%6Mj=fauH0.pYVȗddvnHmN[1җ"D1ZQBZ./=4yծJ?܊lfw3QE$"ƦFsUa;/*o.Xu$hJ4Ŧ_=C,8$,z@D h6 GƪUhƒG]5F|(CcU+l8~hm¯`XCg Cm-meD<Ч&^G6Jv< @֑Ӫx6~LC oh M8fԉ$${%!AMvSRZ^樒W:Z+B,z&[ex*&gWgMi{^=J{J>/bc8ޟ+P;/μIz8(L} ׈a H<|3xzTHy(;s65o{b+ٲz\`_h@=x>v%rKa2 S@5(E /&?y,ӹ8(5ޖy݀em`wk# %1GnBCԮ)jLO#TK+N> ɬQuc!Ə AoֽH[}g3D"|̂'[?HQTZg ? #s`3#t=(FgF ˍQfWhPK*X" *8x:kȍ`' ݝԿT|)a-ނBUIp  !( h 1ݴYkӖ pv1޻=̯l۞T,Cmo "M#Q <YqKIAqꆤ^<]_L¯ܟ+o, ^]3ڣ>fhNZ hF*ut8')SoyHpm'j_<~-]m$vJ͘i1W-)&2iF,ߠ|yjhL<$ƊZG*Tә16KF;!Db8JUY]DzK7p!kA3v9?ϴsW 5B򉇝uэgUK !oIE1x-$z䥾Sc0NB#MH=2+k7@;oR닳bq-&OFDR̗[@.mw_pnpIu^wUBTV𮊣~ }IǻdNj`-.  hUϳE^] PUiw\A^x}Sg_ qJ.ȞoX|j]-( 4ekW'ؓ%3;{)Wހ3u$Ttk)  6q}ߨԂ<ɎՄ FTVu~8@:qjOfio(=`s ]sfQiyw|(,_/駀#o-AԤ5J:RSQ4}`YC1K SRYZ۾BС ; ˻w~vB`O$.u0hp3QeX Z;12%# 1'|3?}O<nê ӷB(Jl~qc|߂u|YsP(wGO7%80#IIW43X4Za0H/-3f{u["X)lxC_}̀XM`!wR}9Np.1{#~ ]KpN-03l`4 iGRlŗ{Q$>"Jnp OXP- uOv7k}>`eBƩY!J9c}Lj2<撼4Ʃ]v?nq1%a|ѱ+\e-K=ž&vg،g{pRDž܊KըC3շ~G:yF&4:V6 e ni ^f(9W~SA?)i.ڬum-]4M#h aO|bɹL Rwr0cx`8sU<䒶Omc@HjNTq:?e$zq ߂)O\x%ڲF4FR006:&M|D,R R|rq /&y$izz@Ex\P`lGyAGO.-Bs\k:7@". ϔw =/uZr =g;OJx|ߨ}U5Ipw~^ۧcp)6UF0o siidx*d`|]r,h 0J61U?:Ԩjvh{/+9c2,e}v(+E7ˢ7إ a' T3TyaCgpvP"(,Uz+mR|˹*,s:_~.fd*˾phkK ltO{dDr_b/D:A21 ̊`;t|8THq I rZ -aPý>ZĞ6 u=.qpt ҈gΡ y.;0 m;L [ou'v*'rj .w`* :sA]:L^A>h_f>Kܟq(m\B|0I~^Ȧ@`#-p囝hno SςL^<^}Tݫ%gT?+Ni5dCNʈ^Mo:fI3V\g,=9D5dA.ǡ)"dG#16$s)}#GЦJ8[N/ g*[ޢ?RcB"Ic3/˺w!g1qrq&|݉22pAQDЗ/Uu,rޢ{) cV_`T/#6SCK@(Hw DiG{ R(@`mV-Q>ڈAq(vK 6`sm'y;x')G{@-`$qI.7w9_Q'g}3bd<@y>!F/ݯlś?jeAk~/M?vޤqh|2ϝ ɃCܯXH޷Lc]RB;ٌad)ȸa[fN'a.\ۈGWWjCdSaQFi# ~ 9J;HYQP{ʔ\^Om:0iM n;^ãBs=Z ʌC- k條W=+yw٢DVUE Q.ssZ sZ"0n2[~Êzg:Ϡ?4PN7-v6B) r'zZVfv^Ϋ< 3 n x}oO)/u$協-_1۠a<W-JQ&<@16a1 &wT'DDTvBXb1US) ԑaUq{Z_.TVXmXJS%=3Z2P|>]\eggHm}X]Л:0KڇZp~OnX-kPN&++[,ʔegA fd&USP[8WJ/{_2ڦ_{ugQ#_+}L #qQ|e(+ ?Ղǧw夙po&tA*Y m@K(%}|Oa;>EF#(6_8~N1!:Fdwʵ3c"rEw_>D; -z\< 9 y|0 Ej@;><1+хdsKI Յ#[-jמ7 H" qaK4$ƿ6uOe jcGϪcM!axD8w&}Srr;' fJ }+UٽnVz|+ri6G{O}eopqn %ÆbKEqdW)Q shE~~%_R 7hu]Y !TClir9˅LJ5#j|JqҨH1b,r8E7MC#ZmN@BMNnE RUWo5 7 6%>a [մխԤM2D+_I/\homfr!G} 3iiS@CCir7 I8%pikbBWƜ3j?wn6ڿe3cAMjᒭ""KQ9yFXt|P]R4dէ@ZL TBTs L;o.OħOob8/&2ByiyOĂٻqo,)5@i X&㱋y&= j΢`9ù_D¸skt^7]!fN"C 6iye@sҬqBE $ VU6_2!y@AyÚ8PԳ1l'չ~Sxy0-Bz1i7mj$jk=>?eëa8gû5-5p1?Vqpޗf֦n!A* ;:nU՛O˧ƨXRɠMJj&϶mЧ.+o %,g_}v0$ E;PsIv"Pn):jdt]4A_a` ο-aMS(%@ ]} x%HH|Ά%#Y@`l-eŘx.R;:g],[ jXq\804nۣ9ά훮|+6WfH};!mmJ]BW0iGz7P9D$WGˆHDH.h& t/W# څHcr͛Ĝ2!y2eI/~ND u,N&|Qc#lyA|hm/ ۔v(U>D3D1½"P24iMfx'4UWK~wVwee,_Vs.8[Fdd}IKÊE K |M<٫9@]4|4c5d@FБ19P>@sqM>|ZעdH&'xT5( >a<.N#q4ߘ^zʥ#5TF}!Y\4ҴA[O`}%{Θxױ?q!lj6|8JBѽeR_ZFul:oī8hq D{,[R]:.VbQD4vLU+O7enN ȹsX(Yj699_1N F?6eD[vq. s"Xx[t}7922sXڬ0k|{ڎoމw#: Cs灜|&R Uz*}zFኂ'&.:f970NĎw buW/\RXCt"zg"8cm6jH rQ9unFZSor]#p\߭('i}Ɲwvj]0 rƓxtQ4lk &cpB߮QkEiNz/ѳO>D)2M[S%ՃtYh.re -FQW:`~ɿI޼s ZO*̯T>݂iɆ0C$O/&1j )7O z|_, uɚ( /=Ļp v_a|؞P4o4VR Oc|"76P}X,, dW|5v8hM$Ѱu%#=.VitT6o<ixoygyڢU(N6VW[>&qZ4RXG`Gh*/.np䎙(ptX>F^\"/%% 7H+$wڸJ;Z6MTX πNlPhZ+`aƺʋY@$-,qg-t0Ƣrο814Q9zH c Aޫy "]RݡGh(-E@ `-&1ՆU:VyoMP`}fX1[s~_׌+\gU3zsC΁$ Q[т!P9YϤ&nGa:Q;\P!B#_ ~E&5ߛ10OY ?a2tNP7,@wmQ끼gkv86aL>.Yc!Vb\\ ᅯ0Wi ttJ샅ڿb 7ZcÉnΠHpWRKrp G< C2-B5fn,D5ԳHqQUqvAl^SG;~XI ͇a?kMuW " ؗB",L-FQ^^콅iҩ$2&4S5#mxm~@oA\h/#~A*5cB1W3 G4gaP)d5ShlVz~PnV2S-A4{B2&TȑT~ ;H&q֢q RГU14 2>P,cA`#kt=wTv_h6+C^GEՕcױ/B"y +%{ x|kŐ;-;}$VȒF=)ͥe~xsl/)Z#ws+X Luesm)dIpwa?E_d˥͌6~dȿ.e؞I =ƕS*@'MțWm5~>OJJ@0e3sLWC1qs4W?/%aMAVĈ(>&Ii x^GdnA%EѦeXewuW~{4\F3|]0=|=rR W5 u숩 ` Ute$:O^w9}XÞo?T]tYR:^W# 7Y)IϳnLũktݐt(Vj/ʴWFKqԈ`Z@ܧ?-( ?;@Es$2FE-K^ଥu tCK{6(Kzd;r?thDIB.)M&P}\NFܠS<=0^0bg'/gK \ E9y©)3{pq) ^Zf{eS38HzMS%8T0ary/iIuߣl @4SVDlY ԭGMDmmznGXQw{G u羺N\RCHhR$XMŞ.4cP#a-0e˓&!U~9dke ZiV6Iu܆йYc+B I Zgq"Qiו4ޡJ.3Uh 3Yn}655de[d&vMz4)]-l^_>ILݣt:(ca!,ЉLytA/R%у(>%yipS+v d"-NJbѡ -]|Ll Y..fḁL>j9r\ yoO=)AYtyHG*GOT%,Dɇ`;p8FƆ5,rku6>~{P y2q;d1{ LW<3'c[ǭUݣ>yC?*cP~6of危7 ~0uNwArΟfUIV*SK)2ZȡfqYe FIS+ Ğ{=uX.H= Rړws}=f5=4g# ܑIT"d|(QY\"x*M[FsWc _\_$pZadx]dڵu5L7NٳJhO}`S 4єO2,_o+XY}KX3# \1@y^a mT7^e ;jZ+S CtB.p;fMċ| - 'ϵTŪw}|Jrr4_%~ţ7˓"7ĢG/i!R:o~OR,&fxΛs<-AX@ buwpu@,p W5_i\gbhg^›&"CFx[s3U_$yO X_>aw/wiP1}U n:g8X"r|C R_r[Q D/jYHd9 +xcx\GDƻwcOEL[4.4B´V;GeDIq7momj٫BFyPJ9TS|)k@$W]u{8{"( QSt#R3K}!H*cOR:M|qxR)cm!#sM6%v#'-m|n2Wje?9~H\Mm;V2\[r+d^@[1Y5 lmd^f]y7ӏDO{~u=u*_UBF[g',83P>R/z]^Ǫ੖,Eô%85_ʁD@L%6U(GOD/:5!I6 {S:5N ̇^#C>&'K"7CG"bw?,ql+J-jRku^>N_^4{&kq{%i ^׸t?'iVE{c[R_;"(8Ů~Y5Q0$AehvԻMl Pt[q8%́IP\n|t4& TL-,&}YFǁb~i+g%Bk_EG0Jbߡ?"@%%DE r\nk^kCj1~6J0 ^e{Za6M;xxP vgˉE٣pD!Zo-_h 'd$\DzcA6l͊,f_x7dd!SǛ鏑GvEb WdB]sd~G7&FmWֲ*Nl%oޚꌹԤ;izj \ jW'y,.B~$|X["4U~ ~h6 "]zÒ9Px.;" * =0GDP$j]j]MYNߖ@ ^%¸^Z~cX1Ž,,cx#McYɆMtuE5+[wCGU’0cǐP|-곃旬Ŀ."/ Yca\$*L,#x\UdSICP"^8hR]&ϙ<!v E?gs _5Y/WiB&;@=إz^=68P;ޛ\wAl #V@Rx_:{Nj5Jm]գ[ɼf?x'XVǷ)qHyP`ER1Tp6#F𑡊W\ >D Vh0;D_uuRQf VRPd=wg [7[BzW+b)VGN%w~˭\62dp5 _`Ǜ NDf7ycƥIm;/'!Տ/$j@%*/*b! 򹯱n5V8֦ "DY g gl̫G27p'`_Nk"Җ+"қAե^wٚ ˜A,t3zheۚ*>OE4R82kd#v($]0eL3u3" SeeA+yյFL$AfK A W6+ Kf$y{~hxL0¬LV5k#ňT_fULhi|4Bc7"&ț*iqx]EUeOY'XEѽN0XZ6js8c0Wl lvE08.$hU\dLŊt۾32|ˮB.N{!^aQUb4ԉ}S-U-87髕 SNJ#>zL#la\w+D@&.S%Q$╊g`Z'`s!+s~h$'.DK5oqo/|Q[]}}-V,SKTI<=,`r=ڤ`_2^.k^$5ˈDIt@C)R e[QBĬ@s(qG^&S5{ֽ㨝ɋA}I?Iqy:\¡ŧ!HC ?2^|t<2͂]Zԣ#j3tywpjEJP#-$7vHźTwk&aOO>WoSNJa8]YE*9dUP%bז_)Z"% aNd"ڼtH1tbj;8Ƞr q> \Leak܅N&Χ~ёу$ wÆ_ x "-RuF.R:P[moZCUfj G`L.6E}èchjXYER"[jmQR29)~V$ڹW1 k$Jc{Y"2; @dPw0/o d0l܂d$OƓ+ ?.`Y|tP\Bf&y/9h{T1s-n7S3_&pz1Z^!fr q%3=V A>AF|HJROSp~0wtk˥ӂ+HN56: wgUG_|>|E>_%2S]Fk,~U / q捡Tfϙi=~"Q w )-:!O63wQ/A,L+t.o x.TϠ)pW<*yxLucml5`ė0nvwK! jlg%|6ϛ^EBFC4lp褸4Σt1甾b(. ^o D9uF%G/j{2^9&J.yiE`|K|xP: zwZb2rjh,U1 aBXj,PzTL9 Hikt|T:-d!I\9j."_) m*3B*_njJߚ$:E O0"YgkiAt ӱ]kewl;fv&&OX؟s <Ѯ"M$g^jebsxNUMCdmQ3#sZ0Hwdss|O@/^>|(zeO^$PN@&Bڹb`a(P{ [2B+Pߗ*`x˯LJ2lYEX+}@0{m<-D}1(Mྖ0NJl"i0J,raN5g#4o'ƴX7.)pg_[bJWK:!ykR Ćtc@CgJY'ZƼp@5ch-hr"+wTyh!ҝ'\&/p5:YT7FsGS)D'wj6 Ot tXkBʎy=[Ϥf5Y~yߙiۊZ~#i(2Qk+Z3Dl%7&Af4F/x,އ@ƝupyP,R maɷRzD,zmhc,"S K@ݡ4+U1w:ڕwUOq4&sқx&gXFlçXTVFvb} mj$$v@]WL.T6m0dU`W(ݕd\c|<% %1fb?v!ZڇQh9RlԪSEBi؟_{:x2.ރkC + l3Dnofa< k0=*$iXk..@?V^oK,C R 52!Zïטsx:vW-O+9uSLѽ`w+#AR(M"7+6U}%}֌H ds' R$ʇ/'aL2.ClnP4ں~D!2gmct8`2U,iIO6TfI_bCmջT\Fj@S)pfK-q\2S 40U>xBHqeSsϪqɟ] =zEae+3.N sI ʩ!).= o"])%@L}4R6In~p)E$a، mlX7dB.kci-hWSte1!DB x1ӟV<,˿ ry'Wާƒ,um7Q 셒{ʆ2A֋J!6 9cpƪ2vgXݴT>*_h'ǖOo+mtRQ0Ev x=9+hNCj0%&ŹݶD`(͡&'+*mr%$Bֳ+v-msڝ} ~ڍsJWn(/)@}A'd|hwSM.M,R1M`LV#5t%X>#`Z)kWPxzlj Y~!~ y 5(h2;ahA(·ۏe8=ֱO9': Ѥ 8&Q-UI=d$Dz..Eva8ਖ਼I&Q `?!ƪS' 3{V?$S2]`;ÁUN%+&kzQ'u"˙aw<΂mj yM=ouj`7 "Ⱥ&#݈ԿpfWgj+J٧;. 3oG$idUmi넠wͽ Z= *Ƹ?bڡ˲U!YZ0=hڣ=G`mMFY#&8Ob[(Bk0j  CJԩO!_iV҄=TM>􇽞_yz%bqĴ0:?ȩ>p$J;_&k?~\2H+y9n.ΌF '{ah.z˓ lQz9 +Ohh7/5[}#2m2{V,S2ta{\|{B&Q-{`@% uayhm3s6:Z-!cuP%=]@ P\G_(Z3f>*Dj Ix Z+N#b3* B=FQ\ru2@P-`nrCA~;~k ))= caNWN ]vTRA\eM0rM?}n *(#*BEG4R z\>F@|0{us=4Vpnj· \{=oIK ϶&<Z寋ݧYn)Ʌ[0Q"|o/.-f$M"* }nI"$@ɖ#^;ڨ͈ "1ܡ'M%TǤQILQ{SHRNO+>=W\tc_TlMʕLf)$tZ| צ}K;Ʊ)^O5 jn#h# pw5/f6!+dUB^|#"J~̜-8 Vi?+rϙ^I]hӔ;;LYӗ)y1;].3Gҿ* FojZe[ǐ|] w9Jv"'rwmDfjſp|ح^ʃ )/ V,5APSv38ix Clt>Qr(^ܻc#l$[)$r[תN 3m|! (,cBAeyLF,N#DWgE' YI8 ׵HRK P*;5֣\ 2q$:'{.vMT+U ~柼q[pS5wψy>̥t 8ըѓX)㈓_ ]1Z؉8 s;8<##(nd 2 dD ]PEodd^pѹDeڐ;vUHkn))= He^:ZFlcs`g#"e8OW>Mx&\j&sXcWGoQPOr/nFE I Kx}&)dA6-=_e}~&K'*$]0UJ\4Q;]B勮ﲭ1|&8,Xˣ جMUb\ꥺ=na]lR97FJVIx"QI 4 *G(}Ćc G^cAe*?~\e&Y"hOf2<[( ɪ5С䕀"(cGFэ`ģH3)t&Ǹq}2 caely1A+ NC#zfB$ZTTs7a +7Q iL Ӻ7PaҜ=-!o631H' K;Xkp ohJoN)/䴿a8K:@6 @Hs7z܄طE) }_2WW^XrL2'TWg:8}XyKeLI1<toƦq #)Ie'1yQ6B/EY&'ozZ7uHN̢']{摨蓮 "IӅ*A!W]80ͷS[z6:>Jd+7:ۑH4Y:G1=ʪ %@K0&n#83 6v$C@wǭٺ«&Ή V'8*L8ò"wnNS#}r\Wྤ}z-K澩j]fe.5Gk " ls$}v`2VTdpS w( \2/d>:f7%Gi>W2{M{4X8p--{Qe5tg#G EƐF;o^db(A0|r΀ I^oQd!0fכɞGʾLfޛPI>HX(g4eq&#rz.`YCzSwG~U==PqD`9S+A3En-%;L=4 ?` |7nVhP6TX{oܻc*eS}f# DE1:%!3Å-$zrYRD\Oĕ?UBGŁ*Y‐ck U̻HDoͩ>e_(O|-GC}м߫*0ಯ3\ dۓ4N`X#Hh/pxctD*lNV)=Q=Ҡ4ʂ*Ȫ `!ԳRW`IR3=Jcze^Ĝt=C9 T>x́͢&, u@ Hyj)UQk {;@ eE A2֩\ [#'5$;pX:/tN{6A0a(w'vh$;ldfPۢAZC[ Nc/s ,Rя2_-1%Pf<= $~ :Ci!?%wIO[DD曆89ۏX4w\{L/K vKl?V 3MvIYN'lN&wI F!pg2A~)a=eq6'H@*tyw-`TXtnWD Jv.Ƞ:Z: {inM Tk~UbiYf6˃~y Dʓ]56 2k?>O/wb%0vyrd#?(HAĚN۳;]ElO$"i,Đ}MEwGj+MKouOvUFH xAU_%VN۴/{4ŔVVrGj]#"{@b^aQFr~mpkg(~o-zzwA],B\`D~-rDJϖ8ץp# Y"D5Jd&Mιa2Ck;_{I0%ʀC(kMB/9͘_{[ 1 DguOʿI %w5i(|UDmO*0&+mW1C2WiX*tq;/ݟ%7M_t2>9"m@[iFvc' dH^:q0EpC*.g#uoHLr)k^ƫy߼g6b(N@~MeYՊ|u*ēڎ¼ I 0y 0! -GMNC| R }oJ7d7:}!X~1D<ْ:~߈E8H NyRtv{m ڵx0y69n3PpHhݵ]tP򓗼lk~`}~dnf`5F,eep35ӐTxAZC#4&ڙq(^zy>z2̹Md;y0, MR0 Pw4jܝ!6\!EJl%@n/A^kL#w}@$P>&l?  IvU:Jt^LOeFGxԜ~_hgԞ5Q4˼.^yu#^&^'Ub8ʠ25 e4#|胍̩4nh;T=zy"'U @vs1zF@;7;y-deȘ&F{ .gnǷ#7+:Jx(2O q6$+3N,BU*=L9G)Fi#LԹ7d>%R9DžuO0=<\炇[TF{|dr@n upo@ɰmSסy iθqz;FqfE~ Cp{O_2!'$2U2Pe/_jl.޽R`0*%;5h` )nALZؾpD6UbI@tck m,h{)=;}KnD?4ǣ])-mn8r]=6ζ/Wyȧea9&'.1RX8|Ƅm})pG=id6&[7fm`<ʃL\x\)ŻX6}ѲU.(\ F(~pW|=T`̡)'[t qa$.3UI7ֶ;1n6L,1=[Ǘ}ZUDЛP!b0$4Ŏ>h%=F?IJ2SKPy5gS,Ё`?p#]̞|I}b[6Ec2yhJ;pAw]LrΦͤCv im!bWET7\uUlԥC=0+dW沀DBã t8e.- ?&؞Ldap/hRMI+@]'dF`uCp IOJS m&>vWItKotD]0DUzHp;UkWi>!$洒nXTS⃸} J//Mz}DUkD~L%ZCAtq:e/[?K*v3ME}}b@ @%RpjK|~m'|u޹ gnfU MSAY`QZ#Fx*\눊,Saf39kHߩa X(PjV<9W>p"|% Ai$ 5][4 w:*wǏ2}Ʌ^Q4sdp-U(Z~0 ?h/7e \\тވ4ܲ{XqOIw^X'2lCCYchscLlo5? F\]1ԨFiw2i|&1(3Mq|P9w1v04]X#J.؞˞D-:&&9U'V:SΑ_F0"hy3\Rbru~IUv"%0_ `Nftsz0#.*nN %SmzA#:MJ1&Mװ_7{[~\!kK8xp:8.;W.#˞K%'EjJ li7 8mQrNE*`N*#5Pݬ0'j։[-t3gb|PqPߩ} .Z]_\1/krw!)(%(TbCS#Rc,L ӜD cQ۔PXZ_Z7`Nl; M(tm*9P sNY,&6Q1 5$} $;h;3 D' LHGz{PnSIރ fjSo#%֟X~*b}MdYDE[2 _ՙȉ u}Dv4 Л{ҼU跩iJ `L\Vlp +!> >p>zkL {Mˣk M]M+" ߍzO8q{ڥH%0vҠR7YrC ͗0mk@Kuv%\,]_ϋ_s)ouor]Yj@Eq?,|}5uK=_.<0Φs(5@b&/fr9E)BrC7;lSE_~(~%w|FdL(u )ea8]J11@D25Z@#ۓ f:{B#\S(?m8}2mO ;)ưT!!P'f%ů^.+Y*ґwwj(4)7Td> H-Uf7 d}Lh噱=KkzSL$QcPAg( 쿀NEp]0M_kVIia2^V$B)%/-];k؎^79}9] Ulݣ#%n}rx#A=< 2R m>g< .9Peo@b“e<}:{-_a%=bfh$rޛ7KTKj6~сx 4YҌk8UK;JrHLtx] 4ҳ$rF Jz|"*_)^X fNV CZj˭)a\IU<eH PW,wz qW$OiGv|/.=@}E*_Ur lo4xLٽ !4Ǖ۹c4 0l-PNZZPe+L29Q#T2E)*γ⽍ =CT;:{dxܨmL~IրO|!%ytQ3y"29yTf$BuCMJ8+1%oPSS7b,5?/7W]-!$^RS}[гDpLOVL"KoJ,SZwl'u/C5 ~(:L? Ksl&&o j|&ǘK["&Nv-ObXP]/8s6׭df(BFG©,=XZ03X{uP!'32~ު$̘ k/v-Xdp/~ ٔ]Obߥ*~B>E3d- bԁhkIfrb`2(vcOk5ӊMƝ`v%m}>u=<4T.QO]wfYÄRmhʎږ dQwC,5Lɱ36m1xðx:4Km>֜uC[M_DC h`Z Zr:3|9c3L_/Nhy_,#wIx'olVE(q#:B&0lnwxIF(t4XZxh#>o [VXk*u|D@SDv `/5 .*沴_x%;I7brk QLlN)hNnq@1V(t[RǽF  9koxOF[D8ꄿMq9TI=:(O2 !~o-O_M׬]]"M1*KS$`OW.5#Gei|o ;jk'Q,=$RdH|`1o3PH?r\5龞N0_"R'iqu?$,ϷRgHMEXP#qմB]rI`1ѧBA[zrxg}$SK C%  <3 ^~j*z.|Z*>K< 1+d df]x>q`G3,ٴ.#AW)A;'t?d } zXsoEVKHKo.Xr嶷y݃K#8&A csO ]px;PaZz; b"w":ոm͘^'FΘк4q,emznfhC6 ۴@*=E =!?)nǎT$-#cc( q1=7, j,RGp/HJcxO'ec7&ZV~"2 obb|`bLL9g$ۍϰy[a#zXb t Gn0rh- \#NمowD;![q9ˡ;+>!q:M%)&PِE~ Ź|BL>|¤h刓C˶- |.W(3}jo3jb^Ofз@1a;>F4G0 UCߔquZ|ben̷i# Uuo:0Ȫ4kFaڃ(N5> F[Iya>C\kw9dB  P=NkƓ(>,;СZFvE0++ fޤ-t\Rr`\?J$2#e`3c YYf(])d/;"HHy.(whDPv6^,3'̯d'=>\)^K@ùj1#:fQ2x"^"iփwaEjj/Vo+k,*"+PQSs@a&H"nG旰ұJ1vaCH )JtCM\dѽxsݑ9TUg+޾fI8Ҕ|)INVͨFRC=g{ | 0q&uMq!#uE<]JכT^rEWʬGwԿhDg?K$Ir #% VI,F.>sbGE}D J2![rdNf0cʑ$aK[bhY4Yi~_ 2S 6-Ѽ)QIO]|L)<[~Kb+?hBz=|% ǿҩA~~됌8 ? m)8m#p5)[%4B‰4Uc[y(v IKf+|wVX|:%b )/*`IfAD{'Pފ~8|29kb53\"NMbs*ývR|$b؀sJZ{ H9G($5ٗ\R/ }N ƌf#Għ|Hd(z{ ~^ 7iĉ-MaM[ hâQ UuJ%V>%ƉUq i-16jN{?zW<:ҒP/ZcӇ BgZ!֝u\;F8$ &|Ʀo6eC٤7X=ϯs|W#f~6;.YH@ &qCj``7ӫ<"o AJcI=]G5>bdgGq6TJ!`՟ ݹ:M-i"k ( RMKk=-MTN۱]J#G~0+>~l7AA)ޠQ_ M]HEO 4U8f"seVu=)׸BiEr,:YLT>Ic"3)p޽AEp ooN+N]>*puᨖĠSIOC+9_S؅sRr3+L,{HKj*=fΜ[u*!V5v`lq8 p}6n7&a&`6DpS"ǔѯ ^j[XXuvo4T䕜o1yL޻+ bբތ.&qUPmc`4j"7B4q_!qp\Z /*cAqd'akC7l|Zm!bkotGS(o{RGcO2J ,H%hw E+cN7,EͨaƑibb&9} oěލ?~DWJ6ȴ+hўcZGyg6[e#|t\dEvuA#f'h8:/rЭ~yO^"8(~Tjh 9B6.A*p%*yseJ۹\!EY.v3oI\Ԙ6Րe$є&IKZ[ࠡVt!ϕ]{[VуJ@J^ܭBX+vZ4Jl? c8̀zZ {|/C}Yg1%+G YWf^y$i±Y|IMFe F'ҖYtd۩n}6~(YCQa>K(Lk)eA>z'+ec2*,'Iž yykYI"Q4fd1EI3t: ʢբ5o>ߦZ@J+f7JǗX6|H#sw-E8a 2!JC?Ig>^MNKY.!z%04)y;1& hΚlCG)U+|r ab=jr[<(vM. n7V𻑙w pveN4(~tVm[eT/o^ڲU¢I!oc弴%ʑd8PLDvYgFgu LsM47EyT K&?8&ʸux]jKSK1ШuBSS`;O]:C+gu ~|!aX-H.EpT.0dD-h+fT7eU*.wBH()jYMsesQkmy zwn%olQ`i[8xy/hn`GPgƷN}NyJѹAcWzQK n1WƋ ,ɫ8cqz WYhGC-oM<߳ \k&3:qː mut - m I]ka)m?C&ͪ&q KV9gfA[+ߞ[s0f GЊp>lom"ȣ)w.K Yy"U;IK`%Cx&9t, <" e׍X#MEaN0aQi.%%T E (->H 16 30/{ Ұ-p )yatXcLh0z<GRы3^U@j e !q@v;9| +ߙ4(yV#M8޻Jc+a5V%ǖeYwygqq*L߱-XA}ui†8h7PI[dTB(ywň;I28k:֞i9eoXYaӊAE@ıVdAN[h g5* q4l[%(:L92ȱĨ=%.Գwl :AtW\o oh3Mm*fՠB .NʼneSLXcK*?urNC=Ǽ'F \S2n QW = B;UPAG{%=k4A. GBMmbtYelHTKe-V,OC(=8(j+ y'[WE7/V,q9ImOa#jZ ;8f!}bZ.|l*s-7vDL23. By" / =AL;=E$](Ri3=g3 =%qDSCx}{pxfk`*x(d|JYNiǣtʮs(ѿI_ V-x*OgS}oHxלf*A幌8i'JFGsy:mO_E4d l0=vj#ÿx_KH}O's]F=>|A甞udQ n3VH <-xCÁFQܒ;2L*vͪ"_BMҖ^fG.yO$]l`P8}k߷$P{5WkZ6|6'{FUh|IMF: 7[3f(S:^Kgd/~af_$^ޑts4Aqs@v="_?܇qW\ZA ɚVPXpUє pZf1@QX x akP3h*>vDn 1g}VFl_waQH4=ws2:X{y/x+lVCM%yfE[CNƳNb(zAm0zHO" dzHBfkɈg+qzͽv WRDN]ܵ!rS  *IQ[壐ё_jzo*_lm$l`AW'Kx*Bs(}I94aٲPjɅaHt3/qRMXDkHdqy7ѯmaŽȓ30$ K8y S{*߁O :ׇaS/SdYL eyI/~vp <:b?6UկBYT/F)Εm,\N5;xrN%ל-"YKܔWY+qcHGبA 8, D$NU."3:R){"$ÒTCȯJ.GMZD"4'HSRCޗ(HqӧnrhP;hdcЇy7QO-"ֽXJj*~hHa\ NK;Xi1#ryҨuSu4c&f0[%]cݵxڝܼ㏣ן'a0*Zx0y*nwmDs_UڻOMIH7rjQ?tf;J[@@FOrzS(!ÉaĿ.HZ@!s:wX3I۾{$ [_.c/(,9qY L ]`1B2F@.?Lbֲ3 $)֣;:~,3et,p4^INfmЈ֬~@Gs5H+:{Ah5|2w_vIV'X,v:e@w-Ɨ+";0tiAІ(Gٶ+U5D$"F#?9`YM z>Fq@;MI{2uV5?t瘬?fҠǝŅ.//zR7rA0#ph{xU0 p~e??6V{-:XS~e_&LLSR>M ?C'7)#Rc|[-,8:ѝH~2<* + V 1n+C T{5S;\q$T2Nć"5B2r i"{Eg#32REMOnחޢ7~9'/Vg(YO˥p/ǚ|-wh}+l3R#6Qߘ֪+8v 9=$i<8M=@]2^Z yo}V<:Wތ꘤"Jopd,sc3A3LS~Qe,3X5!ᨁ֡v} _q\_=?K@_$FCq.z|(Q 5.eTc&+v1?o0|U^9W:-.i WF@.E~yi]4=0ݜS`Ԏk{u#G\]5N:$P a=*-RYS[f~Br< CLD D`iOA뗧NTi$OF9bq0]4ggLXֿ^ ހ1(L_Lb~m՚C0hg+7A-ֿe,M1+oc5Y=^'yIQ#%|=92&ZiBv@{1 ̚{I,sN*x3y\x b3ؕ'Nˎ/[S oiG缱[]<>?RJg|iyNbȜR3If~Lk]ɢaF ZQl{M J[ w*Y~?Y]e/[^Y(/K'zTWޒz\/7n AOm7-5.T}Z RP9KM }OL@έ+NJuXT |#S'v|&Nd*6pbΕĮ7܃ F >f:(bɸmld.; vz*k-, F:p D\TOCԔ;;yNG0K)=gKiaz8 쯊˩//Ai.2u(^pR(8`^W $)ֲ7q`lTG&4j]&Q"lZc3 (xIHlЇ WX9.d2I*(WK?(8QB:(+e|hW %#UM.13\$H7X+މ1bp&;oby) YY_K~[*Yn<9UFZ[m2G:ߵ|AޢT[lN'B+ׁ,B@5RHRZ`Mt:~>{}|O Ig0)G5o>qFI'R.#K#-Kr-@5p?b&9\q.ˈLf`h"kܙ:*'r[,wQd]̮"rtcQ<=鿤,%շ1dIǗ+!iYQ!唟qڥw=$R;. KE8]vS~U~ j i,~A7$4k&Z% -2ۏ(ױyzJkE9բo?'ĩ2_Q--YP~/v:: L:Cdʛp~aQ\)gCX7 fKّ'< D PIڠ Q'&U$ڲ ׉ )o@eYqxlY(0BO^c/3#AGB`H“Ra&\lHZ4bԵpC9ZST}]s<#Ϟc IByV"WX:Gk |濽VvYL7 GxFJoGbw$RwL"¨#)::>#^}7uUϮdtA،&+FOpa`u1jd~/-e&KHj/π$PmD€ V c(aRgtlj"՗¦† Bҧ#i2A%oJӳ I'L=e"T.1Fm@R.[ϑls^w^S!PAԨó?r?X9Z%NXķLV#Jƣ)Sjyjv.Yk f_ $B]$PKv0x}܍FNL 5beBLSmuKox G/,*!Rv8flӵ$`, 5Vh5z BrZG7;չ,EiPKa=Z=1T%#r4l6 7%\|)nu]rX!žwB xNTRQVS"?&NC Mr3sUΥ(?7bS'C? ъ߼Kkء%u c,TNT֦YKIjeh@g8H@;s}x6poΎ۵C'(2 b5Ws_嗝G 8./y9ݤ̓\:], r e Ro)xiQ1f`,ÐҐ⏕bưć ?c\ULzOn#O-vc_EnacP' Ã4f0NTԟя]k zTsuWvASfzd? `>0AZ "8ߪ :wI jrûa;TmY_ȼg"KS zb E} ɖb>ݵ& _x`? v`<*L"'H(OBzcgB(=Ѳٔ{,/~.^- B0эk_fuPf$P28&4臃8+ rcJx  -u}Ljq\*Eag@:KZh.O!Ɋ8kw Fc5kn^Ok'V,ks}QZ+el6X&kVFu(nl !n2"1ﲃYҫ=t!t33HUtskū7?jl}qX,=;dMUTr''lF)7Uϭ+Ϥ~Lяo:}ELWU؂ҚТI|/f5pTE}ߵ$/+Y^.ru0Sb}7/"p-2ߊ;ǕصCYt"khӳ!ڂJ5"tSdn wJ Acf̣TE3.r Qx+\.^$bBBQ(^Hgauw(uEVTE-x%LwI>K}@DV\{/7nkœ:XB\^ \ T2=*rQ 3H =H2BŴWڇO:h\8$mzu2BK2n遥$hח8̊9/.-  9A䖫Y/D[Zש;!!9VAn*YqME/ T}ItQf0x&hJ.U^d4v=XDY|ns#Uhާ@dEH,?-,efKe ٫ȧN=Bz ƍR{Xa_㆟A*;RJj=@⾪厼Y>P?5+b5Ŵ7sz"餮;w]U]Uv+\ J>N*Kp9ՙZ YUy!_%ȕ}Ӗ*铴s:DA t(3:{ܻm/, S 4D ٬єj}T_ŴdPLpޑX9B!/6mAT %>FM^;EqB&D7E&p'3V&̈́zd}8iɈ $uP%Se 8b+jv:ɋxGPaI4x]EqY;P@uyՑ(N<hsjv~!c^P7㨍}rՂFD׷)ӑi_L> )Yns9HH,}-\Լ0[[Il-ZRMVe֧Ě? 2m(`x5^5yi KzlE _Ʒ:skO{"lb03N2EiM'4EJwR r2bɸ/ŝ5#P׃8vrUZ7Mu|@cdMy)5Wr҆q+"^Mq%q\߾)B4~5kVX!fR:IOiP aqw~`fwB({D׽ {$ Sd`JH_FJpBȵ7sȶ՜%[Yn@hW Pڥx7ǥ,l4g>i2w8ܺ1oi{)U'\m׬z"hU=vE{Qd;&cB~as*pL% k\P,cbR[tLRBlWCһh˕37wiCv~|W,v 8mkj8ʒ>İec~<[f0ῡ#ϩ \/f"9BП֖YefYn>ZYa}6PJ.o)Z#W i!._)(k 7B{b/E3CFx`HP3gj$S9}J5_Vs-{źøHkFYϻ\Q➕dH,'g>[)ޗC/c?q(9ԩžBqY[۟QgY_jXOS[9)*i%0.XVq8\%[; Ǣ7ZB AE?Јuz:$M.7apL8.{Z ߲=>/d7UMLta[YŅyBr&Yom%dl;i5?/Q ՌD݌N ӕ-ٱk[{(KYx: y_ݓG3g" <Hk6#WV ;qI%>59{z`~< tdx&ш -hF)($9SI93Ui`_O1cwRi^ڻ9[m)|H~Oڲ-qeoT'D/c59v N{uGXo^ =5:Rn D3Np $vpsʄ)c.%;̠䌆DaZ~(V\ gP=+>jf:jf7 7fk0F뫛 *I /j"QEҶ8@z֣:;wrR+27Jדuy`"MlZW(9my/x!J!Tv/J][ L$l$e+t:d,Ll"[dˢNJq0cU3C4MY׊]ͱcERʤL2;mXBB-1cXYvJM!EqeZ;K5X#v5J,s:f_)T>>λsGc,433djCx n3ꓺG$0DBm'ӗY vȺv_:6j^R [W$ Uh5jue,麟Iauc,e|k::dѵz/gMEx:햃w9 /Z:}G+EHpJ=bQ^Ӽ\E8lk_(1e^fɪە 34f>KEBk$_ Mܮ˾9CBl%f/W& qC]1`sBo1JWl%0TwU"Ep+dž PA5z>߃ ~9t[f&'{vN9\\ Ÿ$f$>+`mJVe .&oK-rt[?ŀÈo#(aq~*boKg2j]cw ̽ ,W641Иxp!A!9JJ7,vEԽs)_«$ GpCȈit9̟9[;Ӻi|~0C* dz?ĝ5ɧ7Ew<5+(0;rO*ү-+x]W=F)YF,M0D`$P|Ti_Ya=y[.Kut(2 , t@㡗\jҪ#Y׆cKw:iy5d Hm7ѭJ*'QC.Ж, #㺯kZ_5μIvPYԊaakA0~2Asr՘ rP1Y&jLpK3#v)bkTCɂ}@lfv>mNSeؐL> ,8-*Z,Fr|W'{ݵ盌AI} vCHz/B.l^j4UYf8LC<@:r4l-K>ɀ< K3Fsߟ2n|"#Ĺ=K.ͷl/+GPz%7ybMoUT \d% dEV n/͢'9u-{;T2hz v '>[wo3o;yRZ} qhźq>#~(<K χ[eꝕWi gm7t)9ӿ!$z3lH~O8DM9H?1;!= Zzf瓿\XjVcg/*1NY?+ZK8􅃌&xo}f}{/ 5׈R -ITw` /t oy7_:x*6ŪQlnxy0M "9>pr'']\"{\v;я CޜE f$\}P5.6WrZcnkv*:Gѝ}gȵZ; `,)ߐ̟RTX8TΪm:XEؚ6<9fX[.׸|z[&'bylvTϪqj)r7.&nH!wpJ[ ,aojpؑ"h;]FUV-Sfr4?+HTl>_ioڰY ?5ijema#m~ġAɑܥYEـM7':p& ڴ{PMӥ`L.HãʟqRKDVt9A_I m73uQXa#$>*UNݱgA 1h.f5 ZLlGiG|U~=KI}e'w]{wiMV6dZ%8 h1,,hmDk/, _tٷBI.V n;E:_DjQ2 d\5cc6"I M+d{de3W V(A8YTsXvjY" 0] p-iU4M!CFFA6А|L2FXt)$ aWs]6F-ݿq&؋T+]e A!}\U)ռklvӇƠ`]:#IA|JeSמMj_cXHNf2!d<{i˗_V<PN d[wq]9ۿD^9Scz LSiݰ;ȭXTًUu)HBÝ5Ȍ eA Z<>F@oCgg }1 3wo1*ʨh,3⎍!oԄwz_#30-^ϡkxK|C&TKC94u"j %j$xvM?ɰְq[GF\ns$T2Yme/!`I-B:!#L-ޔ <, 尛:6מei:{3*!` #Q*Vt=%}za?xFժR5_J }eLJLvW<|9]yQ$~i?/SGBtJZU9eKx4˼ug;.׽(iPU(4;̏|kM%+U@J,|HsvB~kL!_:ޅPnAy$)-q Q)wT?saJ h($ RjZզMpD,~r׷ER>d٩~OxTM*=z]nOpBl# %-k~m@) !1~k(jrS)˲UK ,a*aMv9%,=$ƨ9Eˏ뻝e-KsxTIAEK{xe8bk6(#P K]mĢzfҭށ#@oӍ휜ɼc͵ cء" GjɦK=eU+e$f']/ItT >$7)U#G> N {l+PrSL??_J:Uup'7v-a6˦Xϖzv:8>$|>>&O+ \W5 9,EZ+J%##$Tƒ۴C&~UƖr$ˋزyYNH+F;%%D#a {bi6^H:_Q^ 5M/ʭʹo [T;A֋fV,5eqUE+-j9a[Ȃyd2̂7Z~5Jx֙X;y~H(0@9Hv+ dsԆ1unF.VTk4 mZV~k8b~hR?sQS $|}&҂T"3/B !@ŕoa?6bA d"j2bij%Q qsvq+I,F٥Ō g}"}p7¢vFҚ=[mZ2ᄀQP^׍Gs:0ʞRWkWG҉Lfslxȓl+y snx*/C `C[Uqד Y܎vWp1zum|:{Ϲ>hE_-grGESKFFȭH6;Ȋ) 6:HeAr Po2WZxܾM~LWSHWvcCu٥l8cj'*X0T~,:k> |zs !0̽;q'\#% F45Tw3~}Ld]g=  *c,kҭ=c *xկ#؛-vya_# 42O/+{w`Mj:/أ(3.7oMy04sQTv'7I(:I/b7"Kߦȝl3C5{SF[4kqgJE .M AD#J)Cqq"x\;EbѢEcm %PJӲ~*S%AYmOE,Sr&|΅W Yˋs*^[l/RGs- c5[`]MUVt"#X !UC D,fjf~K__}\23G$gՠsA@c[w(zbx) CI ;!` xUt8׀''%ysˆ ;eR?wyǒ2jPscQDgcW]e#L"Yhp(h936G՝/؍ ՟@\:ktK̐E% j/=^yO%(yth$ЍvBj*Mm¿ P A/YT= *4PN*¾aRszn^͹ρ\OHv-E?j7)G"iSzhў>cujt0T Q(}kK9ĽKvrY5!x@Zu-eXCK΀䙱i]Vgy|QmGڐUQ35,S-L2!atqމP.'0'@4Bc;Aq_^+ADՇk>0H,$UHr؇{3ʖ9dx)0d`A%ҜE tDcEu1I'!pEپ,8*DX' vo K8Bv>`ΥPI2XÏWeuW"|g,t)bd^/ yGvQ' |īwSv սfi~(PJ_E^4ogԕEP 6!}*sȅ(ȯW~iP.Y0 PK`wA,YRq!x ZNEغ t'k:I6!ooWz/!(pc}8i7(*s;|,F'DpS伟`qlK \T`+Z CI<;sEv_p.lk3pZ9UBgX% {UzH' QR/#k`VJ9GyӬݰ9/ <.Vpg@%JD08e!hA=XTl54D3eañrv![@<]H"- {&K1B9o^?Km;Upjqu[:)wWǠ}l%\kX\EI+s7k^i |QóvOn678.5qbE]"ff7v757|#p`?@4{e\?>VXP>mL Q>(Qpa`o3㶶EK=KN0[v,gO:hӓI~R<:DF\Ȓ'a^\Xǂm>eãK]q/NQ󪏻n~HJŲ>9Sɝ 4W_^[O r1[,ԕL Ebq)YNXՂIVPGx@;Tjv߭ U^ǥ_B_\\{<ak|`Hn̳e.MDW!y\hɑ΄8e*)u({@ }Jp n#x&/vY(Vđ:L5 .Vnyi3K~HGX3NCwgB1bmEp81X/x67B&ئk?[¤ ^M$E,Q>!ۺp![E2QHuBBtO{AA:zL' !p7V w >S/܄4ٟV&ՊPVP +%EJӊv}K^X18`G>8vu0Q]bOp']餥p~33 P|㷣W*'[r'i)!`>ߐCA_|A!֓^턇ݢoIÄ8 ybޱ4y1e]Z*uIX6rDzX<I4Pڥ$0o6Wɶ| 0 38l^Q\{NJ`S&F8I:ITám岢lH>$+2Kwf{i:LR/q絀E("?% EܞH C*{Yn2[ &+D[1PX65f)8r}T˱K*J5Eέ  ̄>W4XQ <&6 iطDd2x$QSo죍YXW'm OjCo?2qYU'/mg'4F!l@ICJy_MYt+BQϗTM_9..ƫB=Dқf^3flq Tl;fh3cGwavb5wl'D@CڿAZ ?OǮImmOB GcWQO*}-Q|tQX:up TV.9/rTPؚKe k2ݾkQB,',n ۊF}zܱʂckG $n\qyQ\14'rP_8g"*yN}y*ٯϑ6gVȠó)7?Գ~\{%~}0;)R-~ 3'2_n. G)vh*˩@Ӫhqpo߫3X޽׫˿sBMCpøἦ_6g|`A#'jt%Q?OT`dС} j }Iekxj)zeI GcǕb\l!f/? M".{,_ mPqͬ`v:Eأ՘mЂO04ߴX:qڣ'ڪ;Z =]mdNWoJ‚-@RNy896_о6UC1%1"n_ GwC<6s ?[c7]P2FVaRVoXF"!'M-)94|P n,a'-_kւLUOE<ڤ-ъP(wczV"VްȰpj讁|b#b(IY͖+)|䠌 +e<OgLvOeT\%ؿ:zEO'Q9V֕&󗸻 9 Gg={ILQغA^mUKiHTeXR{6p'?6mg̉)},ME$pCh7E譑e{1,**ztDHl 6P$YIȊp")lütz<])И\n©AxX,@u'r8 sJp,tݹ ;ŜHi}5_4ͽZuIm!?ͤ XvoU.f$M^bXxz\{Bb*EtָU,b'wNJhc2#סa=l*g^vf%ؓ7\f,?#t]'h%ߨ9^ޭG a?oң. ?7F)fN`2̃ЫOqp;9jDͅ04)qLg \ƨ+3u&z/W!V߂T^钢P89H=|9c"_ +nxn;MrIa fofN& ,#9 ڡ" '3H{Z H %_x9kMXBdpm;>\I ܝN$x0uM|%|3ߑ#M35!W#}PvRR# y9äIMI`?oRU (W=kGEoYs:hciaNధ戤k+A+g]Pc~c@F-5/(nVIFJrƫ]Ի3ƼPypD|[Jasʷc|GBj(B4In67!*\y`[$Fv(tj209 a@ )_KmSإTgLF)x(LD++{)^=Y'3 Wt?77.=nb y<%mS<,P{HŃŚ@HUtO:WٸHM!gH8׵ѤC>@4$Z4 8t2zk i2͗luK \fW,X|4CV "Xf(C®;ڊ vsX"2S}[=7JHGwUdmӭG2Y~EG.8u6Gߟ]hD/C NRcK:C]OWO\O γB%BoT&!Fiφn:'bw)G+m3E;i1^~k[Br y =#b| sP/d Or-$!-6"*UGr hS0C<+a;1jWNT .h3"#GkOϬLdmC%tZƍČ_Ij]DSy{7Sԫƫc]GG9"@A*Ummt #p5 5;EZoY6SW 6>orDa[հVϕo> H*{> "{l)r;Te szF-p^:6 hv1ʼnFIZ(nZՑ|u14\~{:i#Aj>d'.̢}_^[Zj9:(+KƔu!4z%RITFΑ: 9*֨gQ< lN>FJD O7gtqvԋ૮b ٹFT*f&!x<ԪAi h=Ts ӭ&XL'Kȏ8MϮJrNs0.~pkW!@wڄmx.FА:IJ8K#u&Ĩ?JK=ld_v#R֪!QcS(pN[ ey}_Vbh,klni|a6P1U=\ts+WzdI.u\B#6S ۊ-A5O}!-?%Nl,sg{Tȝ;3'2AbUT&MS=}١2mb!"ZA\[|E["ns-TZu/Wޚ,4#FLj]nJbqRhw!\𚃊V QugmF܄1,Mq< {l la]?XXա-hY*FAncc'{V4>eBpSdVs 0/knS|c0\~4SAB;] W#W & u€~7uB#ʟހ39r=Y9^[ C8'gp7:$;e|;[a˻4v lu~z_LB# @'w(NwP8l4 kT>E'tOM~"oxr7euGp@?kSBzўyhZKFκrU+4`usA1Y>|h,@+*2 V,˟_(1\<qvD9HEK򰮹Uw)y} (i,AE]?D-6yFr]}3 qj-5" KTdnܑ Һ%ך}N˻}SJWy1/ 3޳rƒyb@\Ċ6<,b~&o䱚Uwq,oIѐ9bAPMLQ&E#gq`aQ :AeoPb'7%HJ3wI{\2-L|<>+f!é޴wXuK9}`ߨ[<ӧUf@m)+<؛~BNZnpb7|S_WD"d@$+/#pdQrZm'1n"z=YFSD.[Q{W!/eN o>ܠ,0D5ZrU2^%1p#?ɿϪ'T"&,3a^E47*uj5!ܚ?h:^ ϫReف^@UlCc=uBuGiv9Z!y(9rj%yꣽL\hbSXA|v`Qڭyޚ{B^U#CM~ނޫ z#Bh#o4Čztt%[4BU3WFD0J0&ڼ&„=*4XE{ȼdCtR/x#?}7?Ryg`DJW_;PZbId| hj _FyhrJ%06)|%$s`)^~/$>D@|*ݔbr vyWU喇/2e~ .WL &pJZGoNI+ сk WWrz:K w`ÖMtSHo5^`LQ(\")UV+FBj2嘙Cʁ7XK]zқBL8Ck4kW9#K%Yk]'ueLL\}2wI6&ΝZͬqMt˩T=%>>(8_g9!u[<Lh;¼WWXx?3ĕ0GA<'H?. 0)W<\Dq-Kx1ւ[qM|6DOJنY.zB2?5C 9_OwϷ{ Q>E+$ -s9!Z!J}}#½kGzBkjo)YCu8Gvnhd Z%v׷#saZ5}T~A]/^Hf6κpǏT 2q}\H|XZ1Aj.V앏cN38h`5k̰x$$zhH|*+rV7H|v@L#JcDp:h2xV_ʙ0_:s iRBwžgYsFQg)Kkr4#"14t;==L+8T0/"ag,3@ -y>WpPeC3Fԕf#i:zeæͱ%t]2KB`>DSt*0yh zJeZ`Vꓣͻ(\IB H3ýz m!r*R6'I7pz!ypa_{t /GXКx%2+Ww^dsqdJi+h:D'9j_T e)V@Y5nVq{aPBEj *CO&ma2ޟyA32wVUo6q\;Ai|oB|=2JiM=,^Uyb /b樗"+! p?ZYx[S S@CQk=z~ā|Մ|qr4>Mӿxqލ7V-zj;õ)^78f8S~{ cx@bxJ4֛; {}ŊۯT2lK;%T,Qjel^q)$;y/s /{@>'+AБ?ʨIߙ4^F19'ЮTGq? 3r?ɫWf{) Ej>"9]i&'&ҎKꩅLHb~_y}:9`T.Hqo充 #c~wd_eihrz┸_aw-~nGlU|. .i=4+\w{eOBU/0W~3~+I9 |[K@˅v."@0+ iT @G~J=(#V-Rfnk.a1oOmGԅ^gJ !6'#͹4C*"$jus\P`ە@|s]PfmC T+;@9xvPKbav`]VNJحV9˹Ć2whQ2Qt~M!V X)]}HB5)PհXncLJ!r9u. g= ѿC.ib+gmfZ2 4HF@V7z7kBd>`wQۚ (Bi4 #tSzҍq l_5:ᵔD|sUj9>–'v9xM_3% wtIkgRhO%;E>\qݵz>?Eмdh+l'hdwTj[*Iعi!}(ٽԛkBaHRDiפp'6X-<>MnwNת)ӿQw?J;;[v!_ _`|( Fn,{ r>̜ Z0)lPy%b@˒2=oةUm'cyߖ}zwHe^-㱏.omWEXYB$;.7' !xo19;uɺ<$^Rat(.pb% $WU!OU2>P"dEsd6JR^HrBzȓxBr9G1ϘwabjO}V P(6@`}$OO∇>PA<+r)L m[Tl7vTYg*5VvG˳F-3azk'>ġGX[)UADx6p`=^]ux[f~ԇpx8m]CiBp$|-b c!s JpA񯊛SiK&"aQE=(BK۬4f3u?ى+a*änAA,Vr)Bx.x֭Y^˧R?7!.Zh ̒80N'fXV~Jb;Y|`( Ao#%j }V!6(s\=5 kw@jf745`IeaG'īͮёQ$B1$w`%d"yMi8f4 m9~Ba|hIO H |j66-q]] A q+ϐ@~0U`68H#t*Ѫ+`i"倻6UcÝq[o*9m;ňOvFV;]xA*CU}J}И?fg^`X"(o]9'$v'U.1XFFVGOe,=)eKjka"H|C_6 a,-M*cN'{_T/305O! zy+?((e XON u*m wB`Ij)Tīb9#N+;`,5ѱl@mŅeu[ j~âynehn,"&Z$N*TtF-d;-%'*DJ^Zvk]bhH͓d-(p542=|ţ^#pp /$Z]ҵߟ"`*uᡌsbM}`BT{'N#pkI@{\sJzGf^k-9)4N4  AwӦouBl>1hjȱ#kܠJt҅_IكVj$Ec,h~\Hb~Zw8NNWJOwr MYW}]ŵdr^M L8&}C`zatOQ7YpY%- k cd ~)B%6/NYYoM^DtF*^D(eҔ| 4Jp:LqiGe;n3;i370r''>bx]opmFNy3E{CsxuM"cm,&-͈\)N#EAzbO<:,֚% eOŠe9zD5:8ѱ3Z\Pn+ާ9hIot]j (RNN}~X̑,?rgI \&*&44K YɔNccso k]nPTs{(QP阞D,sr;FA,9#36V5Pl`YZs/N}Z -w>-0 l-BĕIJŎ+]u,cfV-TP_HJ8HG/~3x_7ve77wb *f,/ԑgohE`Qf0#i#zfA gX8g j9yXK/Q"'( ߑC睝 E{bp#tCewnt9 F4b7rR..\C];p?|T;yJ"XY_28"ءZ7{ZQ34m_>+/;Hm J}qq`3k0&D.z)lS΅)2]y6e&a@,9EєbCYl7%Y:/R,gZ[h,Ap&t`MԀ8O}z4. -H=b#urˀDoŏɞϦʛ ?zpg eػr[T|L*VH*+]`ĞuOݨ`g 럍Bd%_Ѯ ϾdjP$F8ucYPKQ3n?]VOxA[fUfbв-FpbmEԛ2,tb0! AZA ~`m#['{L˨pCFP&-9X6{r 17޲pGqm(DZ mۤ2B#;2`\ !)q8F}5۱W8aNfS*ѰKs %ȕBǻuup$hFa9*"Bw_M6|`ub>Y>8辞1t-kN>S P#IS_] $5=,YM89A{~LCRh P"Au|=ssM#+5S2NߓFnPŮ#xttn=h˴jA2Ƙ[Uvu#X\4a!19 ;+kKu&ATet744TP-QTs d&jpy2:{E+6Gj)Վ_`.MQ[W֖?(q+ο婲K4 th||EtX@z?bdGߨ o-_7a?Srx~X qX+wP3Se(`i,2K = AyyD mj⸨tVkBTuQTY>Agq†!T2XbZ]8\}7?ʴe-2 "ByLEgq̗oԣr PȐ# D+/> w^\~G*E=@O׺(Dı-^N2I-[wxTc7<?ų[Uc|YՇ|eo7!9zx1-T.ۚNA &*O;ZtdAAuL[ `y p[V$B3{7#`"RCL.\yW0"cH3\@e 0 Q侦ƻ$&}ԩl˩Z>NV,)L# XGaUiM]-݃#vr:`, |-!짲|3P6oCL׾ -p`C]Ե_%5ɹ;]Ne\l2 $l 뒎  w\Ji% k\P]r|+d )1x(ߖW2:1TPp][G4sE |,&CosAx^4Ik@{ Z^?ٿ0?Rt=aE<,Mƫ{yFܧI9'wI `Bkɹ0Tce&4apbԘ:?C(g|R ڲEۦ3X, FbOk2Jwý`+ wqU/aԧ b*XJ]{b0Пw1*+xUn²6 *ζ1%%=GAzFlv+3 i7W,@|pfxࣱqiP 4mKVBt$ , pԅ뚝,&F+rnH;bȾvaQ)VƬD͝/gOIT] `nOxd-X6![\x7POi^09eFS`zV'D q14_nzƻ &FrI[VY7g&5Xl|MI{k[ﾚ؇]< @ \F,*uL<mF.b vkhKҒ6׵޶ڊ9Т7J& 32,QORA4Gkb'Tڶ,A+ϕq8">?D.=*_hl<uKMT;e{PNm|~HpaXO |: H9ߚW$%Bn35+f=c} 6 4ɬRdNai) W<6xV< f%XۍGK̓Ks@d yp%!s?jayQy|N؝#,o^啾|Bg6#Õdd"EV/!JΖ_W^l1;"I鶥Aou͋4')ؖh ܋iC(=r-2PP)xċ(PD4t)g1nx}ؓ>lyAG&7؂4=Y R8{CkuXm*0}^ ,峛m~1iiE@#k\τuL(~]hoi=YLz$sRBV_TM+/f(pSd2QNMT;jUf ,L>x7a.R1sQRE%I~͏!7̋"zCr 3 &cݐ>dS[xb*\܊z~ti^I 5`uRlpFK96`laxRL,NDNFnt}wc}91=B.ꑸamu4S FYT5_ 2R̓Z85]==ڲQ7U̦ 8%eޒa#Rk-^nٚ9j1]& 6TeXU8;0]dXv1lHWTZvn{$ڙ}%>5iyj /MtIpnz6+:"GoL-~`F*P]^]ꅳeQڙʅpl f20"yF5Ŭg8+>KN9Nc4 =T (\:~ Ek0lt>v}x>`h :h(k8h.:ۻ {k*5gPc$0[bQѲѕ}=>qgn\ uF~L4Kб~9n3* V2G%]!Tgo!sa` J᥺\XN@8jaQc#EF2s&*ʦwvF䜤@Ke뒄X_]!`gٲƨJEF/%7^/c:՘T#X.<7Y-@~!a.Ȗ,I>}mӿLFdDeaƒrY]~~ʀ(^W/DC_p9@,#Êϯohա(btLV.ڤZؠu1-~׷c%_R q}]^?PVld}ԵT9` %T(23 c:EP3yWh'HG fL1~kbxMWpI(-k?L{>y0B;um4@ Kv`)-UeP@N UdI_jsv ɶO"d/3 $U'K~yEDs^?L3ERY Pird3C _R\s;)T2i0;NP{;FfSeQU6w; ۠ÑiMq6z@Q%ɹ"r?hBaÖQ:l2朓Li:v3-+lP؈Z[ \{(]!,p339T8mz7nlǩ{.% ĭ+Tm=ddUtwJTILX"wHSy>ndvBHN~yg\ioM߅VcU-Yǀ{<e"0 BϲCLYP(jP!y^4'c*Lk胐scjQt0ćrw?~|0i>s~&7<|!O|_iH6P@aqe#$wɰYEKPq!< ۢAW  @a, ]#rZ5۷Y؝;6dZY,O:tDǃ6V).2aܚăwlm`NO@ ,GH%iߣu#!&qg" Ti8ZrN򦞙4ᮦkrP8V~yX|_/{q'<8l2:* 4[$& Э(iOKC*zDڼv+X`gldg6."bA{5ԥlkeRus6+T5Ibp$3'E%'H?*Xb4ICDoBTsrQf ៿_w\{.@G/`"PM =5=O",=w!own6Zb5/4].k+rzsvi-)x=[S U1B7ydYepbSzɗVTk InMQe+RerIv>1&V\4h[wgl`t;HάL9㫽5[1H&K_Ds \&,%̦=|v䚝#%3HKDЯ;| MVP:5ģَL9M[d]mzM&3y4U##u t~3 \ v7Y֙**"ګGhs@!&gU #MEx4<,c`@PlQz^|G95Bjs DԚgvj~<97^DxMە:O<mRVIp0$#Bgl>J*{XݚSg#Ϋuk~J;g=3.qeˎ*RV\ 7@;U&OW}R9 ( OfAj.AH@L`\jeD]=RfVxg&2uv4KSfWӾL`ûftS+V p6AyR8F΃rLAǶ8r6 gg7a /f.@g Kv+Qd <>otoFWuPqaSK24mY09ȸPt Y+ 0Q_ۇq45/c ,i+4W$cO?OfjJboF6P-D嫇x&^jr"AaB=`2T.0飃\<4VW:`= "=bs_q^iis\ZL'PχP/1+ۺlz2,#Yhϻb픀*f &E4\~?ïݏn7:-_/9\MK=G(4vJ~Qgqz }oEfFrcfD>ְUy"M@XߗSw5Le+e3;Msc$J`Vs& 8_Q&mO l :AB'yhEkHչ`_b0Pq\fǻFhwfDmxI{S(-繉bz 1. &rB+"3-+.}xO/Ư rjתfp~s & mnY>uuLf-* ~ ؍f#)V¡~ig]Z){a6Ąu.]1W d̝zO.5Ay|2DI16o|tkwbi!~B s=wR%-dWoH:y I43G8Qk'E(Pn7?tz<};2r Ds:7}7ZVAzKvmg!oTΛ158eCp™x&J ^:}%wSi#.ؖ Bȹy®X si›^7C U}~_Cܵ81>7,z\OÅQe2-(o Dh!ڐj)xXmH.>Ֆu t1[Di潽"iT-|Ü7~ir]4OmFKI42f)UGe•l|V:]Oٲf5rdvk9I1_h.e8d+0|EpNLGHؚ/~3ƂRsD <)@U 杴=A10Lf5V}r v) ˕bmMVE>sBfb`{/cN2`]e@}`*s-l,9H nbTGm*[!Un0ۓ h'6񚶖'M+Q/@jIdU֛Cqî˞p)5.D ׷DgÁEݔ4Ն#UYFfV6'^Mg*ES3~YO< it[7MtF5} <5Ǐ_J[S\Z#5N9F-PCso~*@M9Ms`ɳ= SMWSM|BIxYMJ:#Ҹ/'ܡjS0EV*"'"soG/FP#JEw屬9 Kyޟ7Xs[? =GParm^̆=dU-^i=F<+Cd:yD4rrN_mMNnko Hqc ؘoP)CܞSkdy4s$ruҍ 9' ,d޹MӦ(69gh4FɆ>O}Q;v)ߌ>mx4յ]v,!W2~$I_ 44LC?(2 ;?fz\vd;RvyɚS?}V6=iwxWӬ4Ȅ]g479͎g:p˘arW22FZstKb`M)"@c^#&K"IA:_ (E_|& zEg*VAl|ǰ ր2X=[ '0°S/F_^O|# aҶ,n0;{(U+AS\ {1D?3ދ0i~`4udK:ؔpA ZP6A(gX^X@|-OT¦Zi(XFmxh(n68z(BEY砼N$A qH,HZ_{aFRgS{ җϚTswжPdy\IMs;+_vw'@:rgZ%W5/u;,Y؁o$h}ɏYjZ|EX|My8CzC0 >\(2Z}&A`׬q]+tCE%a[)d T^V@3,Tg7:GG"Z C^?@Fdǭ~ ("mN~8eb~@]>6Bb+#hBjk) M 5jD6Wpwtm >݀%tDڔku,m %{qDWS3|"|p ltWNR T5 `TX&T@H* CGco)Ӧ|_>ɼ5b%(b  }9X+% 6_8{;5H] 散Æ [܂_S|oaV<^XBx8K /_͜T+뮎"׀{t7Ӫ0h-f_ }wCaH?bě? Dϧ&&=c& ;*f3MLP ao$}U0foNWVA#")3x_A;!N;jא6c)vF׭>"S;*͍DHjM8FS 8+F,=*sNCt39< :JK|[r8RjӐ@7::0lHc Ŧ43NTR:+ev*PSh1KԳ2 uDEnuZ&h}9b9#gos|ٌ U9Z?-%?@S{]t2n} =^-v,UJn,}6xc-F9®FF~ hI`L&k/j\KVr s"9mrlhi;\a<&&X,VT/@Vou")LUoH_3)`<䊋$J.ehuOSdF{uk=[/ՒXHC5BmXdzr 3ƹ':yx]! PƦkj͗l ^Z-52v']}}W9:3QƕS^mss v~=g,#ϲfb9>XSѬs4 Ns1JiW}44]v-ʬ;Sm#\Ək?tE%A½}f-eT {#i l#GfVqB.:VGC]thSn05jR; $T >1X_TY0ۻ(x(Tٗƨ2JepPff<<6qph3 :F+d51Xh 6+^d'#7iI<%I쭔Gq eRH &׾S[gJ_CF٢A"ML4u4Хb̂׶ K}9rYKQK6-%%ۮ,"1lVLU sI* {k!հ+٭Nl+,Ote҇ogƑsl#ԈS/ʸ/4q"d3~=`]JE˞]Z&VA}~X :0iʷqؙMиZ +D6}ⵒæM4}`\FT#zvue A53rzSȿ:WvP.@PW]W$# iQCAm|¨ :\^؟kj|m0@SB T#I@dm u5i! en%~{S*f~% VU"e|%82DI˾SGQ~9ȹR "I;r[7kP/H%pL1;X%bv (oKs r`!J`5ll?$77Wl @p#RN*Z8bL8սP^@(@s3k >טּsI?W7{,YbޮwKj-\H~uM URri^s6eJ6"h'I]:5{V]:43#,ڠInz~lAaِ}8p;+cSEH1V904;Ͼ96fǪگdbןkY^WFB+Ď@Xb`>vF9sUA9tdjTIٝh;1#C #/OVlgu pòF} ƻ?M|~#ՈAFz7GC7 3<&62O?ρ!g!ӵ 8k!U,kCfg`П= 3 R=nww3S/z8Ud.=lܼ\@S!.}Pc I㒜5F۳\@'-Ukl@T:p,VhiY$N80a(|(Qxn.g&ɬB>87C)U!VF). RSEn-10FC@gh\c8:qEƯmL둢L:"/.2PB@2/U1g0e !!M>8mu b0WĊ HZ1^f3%Es#POҴ&2@9&RP+V*`Z"&~o@SyrʁJV]A0M@%Lh ]#{g.eIu5(5@h@K)”x^9FVִchTΊ'8h`JA'P@"֦Tr !v/4@|XAKLC[|PֈY~"Pԓ;?>mpܣ#J@nz#r5tp> $DXץiC] [3ES0M"/`K/H%.'O>_ 1\׹’E[ǐN: I/h(=RTs5yT61 >5؂O"Y\O^!?Agj\7 *)֘2FJf>%N k&_a׍Z!t0 }%-,bDu$L. ۦZ?=PÚsRAK lxHz={ [K6z.*riJ-UÅ(:gKK[*Pou! vWg&^"/ZL]73 GIzLRG[bHDnN}T/@A釚|˧<5'uX`|T<UpC(x&E0ОkzRu$!a0Z̞gڭ&:L_ϥ4wI^YdT#TmD5n_󛵐VaK%TEk(l_1z5q < ^@%¤R"yk5Ŗ4o5)HB|o/#yʌ}s$ gB+50m7J zL J ոx:\~J/eVTi TjJ\ %ީ$T,nQH+]A봡&ȓ7gm(z⻡5; .ymO-wN7'2l9 Iy0{NGʘShM6$vJs:̪庠 0|̗[;i_OT0Egc[8) Ry)OHS0&̫T`ih~[gݒ)/eGmHm,Y})ڸ?0QiB^Dp,^(6 _~pcs/w R]XTx\#iS8fu-/A aK* LԶ_#`=ar$p~u인cLuv2O)FN]%ӥJԸ!۟9`'ث(t̆7?shcBq*Xo8{f:dyU/dˆThRnB۶E%Y3,so07$=GD_~eZ^ʇiQ}k\Zv}>ǩ1 /9ia7.ZSb SЫnbj>]GVUꈜ'v3n6KrFi˜*1<ca) 3DwT;;cV!CÉ pͦ?߮|D䡄`֭/ʼ@ڤ{_K|'V"B6ՠ.rbQ0USֿ;o=੿5LN "jj<Q<,2Ӻe#1pvUA`ǢlFoCa;Vw /7mNsB9sXhTS۔]lp@{n4zm͛d+J{$Ұpm>L q(1 Hl]Y7O'v;̳LKjk>ϻ`|C&]+6~q{Av9ai+48wYێ͓Jg0q6H4W-bV6AgrC09 VM@iXmߣ# CH? Ұ91oL/0F!UCܦG$i)x7'G 0n:m95#-eo.|=fIy"~1{5Ǐ "D:V% ~%4BπTU `U8Qł>oź"nQo r!%GݠЖMնl3ɏ !8ɷkyVLSR;cP߳Ă4{2uv.$Bqc'UUJGHʡ՞_LwGQ-m+/ ! (DIb)= FsY. MqLj#VξCWt&9Hn§o_ySهojJ fCv'8 p)<ϐI~0%`m-OѼGEM& Mun/@E2rSJq<R섔;. 3E܅hmF9n/aۀ%q 'g pJ3r~Rz%Ycjf}P vQǮK^Tc-Ob~B1nrru$X)㕻/A5AqWP~5$BvK@ Ô]\Gmf]Aac nB!t3OC\'wKk =t3sr?Kf@dq`+ ^zn?\F)PomLa"QV8#˨x{*EÁPZ&xke|8ʐ D͘_T q8GVP~umeeH9;5ʭJm4{[OG_9 $5Q{igx654ק,yi#w3sb6 vd<$TLwoT) 1?X0ts$I/Z3gϾ>hL~HM dd%PuMJ_/p!ekjx떘0s LSɌ uvqv&(T%{yG°f L˂l&iuc|kV}:LxoNe] rw^V0 h# WStq5l<=I{gTѩۂuG\2>F̕.fW|}CUqVsf/h{3jBrkU#b^ T<ە"NiyB6DՕ!o;8&fDcĜl0gc/a>9Rҟ lkZn~1 ܪG7Z"'BljT_E=wKR3"WX<>@EuJHqŠ8u"Cs# [SH{@O6q2\ hX81]*L0.ߩj Y['U-3#"2N61Qi9Hd086>gE r,x)U_LK7gI@B[U QC<^~Pcq?*Cln㩡 äV1ŚFc/ |:>V "O^U' O6S7}(g׋0ֺto)'9P>/wsySt/TvѺ ϬnoʏFQ 4Xd )7?0 VfFi".#Od- nT"H!PñD0mI~$+3/uK`,3xQ?#|Gp./< _M\C|OY5,/s{9;)#2r'ze*Ӊ>yim@%P1 iDM$YH#;V2PPLupEby=Օ恓[|fUE4g2-vciXZ8σ)+qf: < pv) G^W/gLK+/zaӊKF\G{`aȷuy\%|21=Tc,ŎEpttH?!poJؖ"oXP:Y+x)UGո<0rBF4q{f)&6hԽavtV$W7oz`)`$DY$3ҠL{g/5 4J:$I.e Jtٲ3fX['}.k4! .AQaYZg9 Q6!U}c&TrL_ ]!凋\{whSZK9!ۈ'R|{̪xKKL Z&V5W0|#jR!޶߳ɲ<[cԐt u,Ly&XFs!h^srW8ļ- w֡rR4yWeoXۤR͏Î%lvb Ėxp409LӀ7ENlc{'XÉXv'2_6 90y4Gڇ2Pr*'\ZV{6Wm1(Ƕ%?]/]v0GBfcAH+|jK/yh( ?~Ƀh\?hv:\Ž1Pܜi6-U_Rwsy3SvPPcmlt~กzubTFkU}krwJx \ZP~A|1"' ruG|Ĭ`J3>~"9x YpD9 S}D=9^}eO.-SA" \l#U{]-c~&ߧkqf i fK2F±`5 )Hޗz >O}tBS.o.7N# eĺBg͛>D,#xK%>3\}81cIچlCE67p:MlީuHw?lcTo@ז =a:# /NN@&I 'zXq?QYHVr'3blYԿ GnsR,㤿V3t7__ǧ٢u9CgZOʃHYqBs.K҅.Cl4t?/KQädO+M{^ eQKQ #ԁjgO8ۃeзki}ez7EQh]`:BCTbmuFòX,!d]L*󘥋n S.]adr]t[O1nfřݴ^j,0.Vy sq7p#?qK[g?kM/UYWkZF 0V,3S5^ s=pe!ƎMrc E6-Z^P_]$?o-QI6{Y3 O`lhݑ  m1or^t[[aJ8fG/wWf0|-_>۶oӁ(j* hVETKT飛ڥ pѩ`nެHiٴ8kG .:JҠ3bfdΩ-@dq0L@55c۵r}|+م`B lI#f 2C=O(D>뷋 _OT*0uV +Q3v>˟6vv菊58 sH8$}ΕT3i#6B#>I&iCds6;dOuۻᚢa "꺀K&ۢoHRc N#GU-&NK`?[j|iCz?删r 41Ljk8sҐJQ+򄟷4i=rUC.]mBxlW. )ΝTdOh;霻FJeak͠XLs-D _ Yu:NNRWOs<ͿNNb(},haH@OWhhKRu;Z `vab:~dHbgǨd2'#C UVOD^U8?Ugso1,w}?C]Ss\pGa_t~/8,q/b!fGb'i_jCds&nx<[d.IOc_FU<^=_М1WSR<ڍ=v`dό·_O$# KCj(DPrc_E-4cX;dGkJk"(ťAj=J5XF$@{~9,Z b-{1_S}|2,m~ JYiL w6Fk^Fk;su~:O|kjlQU~O.D-h%nČX'%F9Q5!8jޗKGߔm Ǎ~ۣy ?@$ >W *&EW|6m\[ot=:y GZ8BNx"ts *$<w3=iaqO!ďM¶ݞ7  j#Z^>*+8R+ 6d&oąV$b|c1a[(^6ҢT8_oXbnl"}xOްV%'TH"M/FE~SQ@%WR{y+ GwRS{$Fyp4||U$$WIi>0dʹ>R=kQ2'|6j$cSSp9͟5Q t8`36䶢ZA'@$k*4ϧfܨrv%ml2*&6_G5w8K|P:BsMai}dMTX =-qhk`Z$"wR=@2ߢ\\YٷF)B1dV"ʦ9K;NV djmEvMȹBZ8S*b@nh"ک>O0ӟˑnQ*|&bXͩ{ 'hܢŔqH ʱh9K2U7m$lXݟOJ|94k;"Nf_x[;&[ܾxx5N`!|=ez! cZ 8 N<ÒKL<93FDﻄ&(wWV6ݜ"ǚ.J~֩RT~  4-6Z(I6#Ny]gĝ%Rx\$ȴ$=Zň$jcwK kY H xHmܙӊK5 F6\h%}]y'-X+Pa>9c,TCc]0Oڗ۠ :m޽hp̨]})8nMb0lƄ 'Q=†c}=IuL-HI~w5^Z Z2vߒAwg͹{z\\{5aD _BxT鿭 9lq#oqeG2XJ>q$:c,{?D_1yw}w>1r龧Xwm+؏t]`6/u_;2)k.c`[b]U>Q]Jz?I ##C jtw-'ʢVqFAw0X?c]&a%9p4,Wb`|\KBrۑh=x61rG~ 0Lu[kNд8d }G@ęf`kZRۃ V&BCēA"/1^n3V&q+KDg)hm?Ϫ,:CYI3SW0KfOaؚ \uḂ>UBHuw$Xr 8U`; E4/n_0=8j}RUIN~lvҎ/.܏ЯR!)]=JLj5/iM}MQL a!j*,zŨ& >pHI oЖ/3FAӮYPX~6lXDOg7=Ii&SZE٦l#?\ h߫:'_@lR8ۘ8.HlX~J2/UT+. -c@E ½G;*c$ AQa7|r+UL:[4 vSV$v]82 ׋y -sn9ft ~"v@vACITH}J2p^mWѽԣefq hTx*c <*- KHL[` ЄTAxW wtN߆QL kC;D%\Sf}v.6=hC߂ w (e/ "@Jʿ쇟%_3W*"dtB>nú B1d KH!Y{.Ɔ_2%k#k(~ޘdh9DוhX3n{ݿ=\%<<59W?3+zZkjΨS!,uBĺ4„*@1 GqLx'tbq ",^cTdx D+BcB߰Nu971PZL9>^ac0Mpɳٳ'`Q_V\i!gFOl@+yh+HG{ZY#ŤR !cuΏ4|,cT.ěk{͒H[` n7J` R+1lp3 T0&;5c_j.'̄USjvQj"\~ឪR\[:y$>㖲T9\G£B^cg KnV13){] YLog !2:GDVue`Hkv(yjx T݊hKtwW~kY3IN֗>kQ!<#e/WtlM5)"Uh|d>wH GqȈ4E9&8onڣ^ L4rja ָq2wk 3X~GIKdlD҈-8.Ϯ ˶I#-꠱R F VWԗ!*hRUDM#rS+.lrҧ`4H]4ڪVMN53xĿo sno[-Q]QvjQ oY7P*Yb,h L2.9)b *stU R}x,: Ʃ4#꩐~=Ǵ޻^q7;߇m `!Wۯi Х424I 7mnO_ޓDؒֆ>i䒮Ŧ\G=x۳,.` LaEg$#5tdw)^_l!˙$kd ]̠ M ]ygƜwkR_OZ[G8#ƶѬ?@Zk_jONZ&QvJʛYpw:h07x2Zm|Y N&X]_M([(H2r1Uvd#_B tHwpI"˄BяY&iN"9** n%'[axגl96VnKD~~/'()Df˷P7P^\T{M1ϯ8>BDdnIXz}!/I M__?MJ ׎ǗE-ĤS]FvkAl8R\B}ol,<*mYi#-YXPc~‹补M63!²}BHj󢵺5Wf HCukG/~M:ddJ3OjE(ҷ ݥ} kt5|R2< (Ả4ºnkD²:'͎l˳*(h7OЌɸ[ N*|tʻa{KK7CL%o<8q9@?C\u_#lR;3a&_] 9&*V_zt'ӥU:85T_tXIR*ЬwZ厼Omiy1CMZcy7uȂF%kdVP`E)Iݒ(U.}#YUm|o]q{!glu/`=t/ZaЙ ^俜Ojc%q$N 6%r[=rgyz-(lUsN|tM]*fXxK*L 贶OU?K31༭χ=F&y,҈eCAڗ ;;ƲسٲV=9P9-*tͬN)XA~_8Ork]"xŰelk/4R,\ [r$J$Hril*枈yv"qllE@dNE<βe#BO+fm L2lrWBH2tCC]zC^+jtg8ͼ:"S+E?B-ԇ#^=W]}zyZ~SN;/L#VEX2FO2&mqW&n5PI-l Ȫђ&Q4)R& p/_u.`ni7킠 L44[vJE&]'ݶet%%ߵXEnZfC%,AK8[MeѢԭYio@%~;Ul̜ՄQSJ.ă~I6?(桍L|Z:W[[]^ ^Dvv{ ȃ%ļݗvYYELdiӬٽU#$k:}ʚ}wA^Ey ]𔺳YМ8Ja/l7<9ˣ_lB`X,A<%3Ax{|;z6Q~@a@+dوYaY@i3U71t9˚V%Q}sk> +g_aA!%,@7'71l$BÅFc srS/҅CĶ_]y=>krܯPe5H^=,auqr`h3!q,bmfkCPhɔX :."~Vѩ~=jxu5k4}ͥ}4Q n{1x̟O 5e} \v׿MIBm]k͛^o:Z/X_>RC]nC/k7/J$m]-a'_T"R<?<ͫ'LY&L0OdJOBC54ZS e;M|3 e}nއ#Mg1f>}]B|t9v.P,F-7`qke%1,յAuT!Ipw0+K1  k)wC۹Q~Ug]@U(Ġ+ xNtu GASȣ\:'/Z;^[cJγq٬l3[QVOf,t =XgsoG;wf*0l5jr_9e? ܩҹ4auvHTs(Cܼ"'gěPcB(sI`:~<JbL&J7vֽ ))n;׊@,;U(/(ՂIBˊŋ48^_>~0enSh\ MT[v'jiZ̝jKÆ ȯ n<$ubڿ A tpQ&c&gT? o=USz^g$LWdw BtijBnIE߽>sZ;dk4k[,fzPCe-XcL]Z+&!<ʶU&6vs;[/m?lD~,k)7Ua{a <^U2 Wj @rfJ- A [TUO+B Hw0L.G␎6- XOd wh]J 0  ~4)m4wY.K-$l(Ygь9؎۠gt@$ oͭ}uN_v#}(ngdolHF/|Z'=:*B ok=\kRSuߕ(h;uX{* $*tk27H9|5G2i&,R{m;Xᑺ; ]BIۊHkMBx*U!Rs >tFclڿe*=݆Z}2}B> Ԭ,Jvt *IRK%uyoNY:e~J*ËK$"RTM$"dQ.7T5lмZo\ThT%aMSY(RؕhxC7Lftdt#U8ɗJ]#=xj!,Tux،4q+6:Z8 A']i(Nig<ǻA)=`s9!bp[#"T?rpZi)d_ ٓW} T tN\ymS#B~ۄcVHῃv0Io Qjx~~Q}hN7'׺_YS)R@@Ȥ>p@1OO&1s6?X*V+&X{C9H\;<%_px#H!o8Jcޑ#:3oݐHŭS(Mmy'q3^ؒX4s{A D1ho$65fQ,b Yׇ柇jx[|CvQ6Z6PGX (j֏:ީgmYY%Rʦ~H曾RsX8ӣ`Iu5LuCo :ˌ:{Xi8 4O{))rI"}UIkh}3o 1b[ hg+pAugM-jݤ OXۛLEhCsr ˗-6eLOƜKTk9^^N^FdXTFX+M*I4<}Z~V<,ګW*ɨOHz˔3t\z-yS&/3nKN,uΌv×sьRMST feڴU^ԝܐ2=o(Nc7d4Lv% lծ~i:@^B;bo {r ysܠ (Qr7AN֬3矔ܽ"6ߎǔ]݅# ߛ&t}uô]Jqam "ȷ&vEHO1K~ +i"(d*&]<b]˳|[ %Ƞ+mHAN0w 3o8w;rZh ǩ7䊳^#FK>-:QRqxeʢ捖_J<0_WڊaZgh%j41f`+vki e5.%L 85FL\j>- ?u]h/Q(JT@xN15p{_gݐ+tJ|Rc i9_ant!LO>;}lx̗ɾt2ž4\q[ؑ2N2hE};˪O&@] ґmE m,0>YZԷ9tT1ת# ~Z /Ųur@_E)|췧!VFDstS+ O~I>J"u-i; e1d#%p<4,FÏU2%82g%%|2 lBv.Q>+7OI*!_K_V~!9l{}R`axS`ZWUE5XzI2?s9+}b)B߶@ 9$~yi v\Zb)NPcy /5sNw0VЍ4lys뒉 V{rb<=1R9%-[Uܮl֖4[(-vPt_ͯo,$R{JZ }k&AϢ{q-GӥBr.jwΡ2EMeҡYΏQ/#ID|"m:#~pmh/vg YZ