sssd-ad-2.5.2-2.el8_5.3 >  A aQU]%0=<%pf*AGDR*ϝyC9CpJ;3uLȬvEd)Oa~ g&nh%1 R j1E ` ;.˝K x-廬_t֨Gw ĝ2XIwCn4Ǥ9FhOl-aN ue(a%_!/NVU@.̃xKԃQΫ0wJ}6,r9QDz<1K!5S ~ 7I~ CS~3*Xb=]?|k* o$YhDu{KyL(쥹c^JBLŴ֕>AV'A"? (Vg9מ 'LsB&QR)cJ=;nFDe [0/DZxx#_8fe146066fe02677d5bade8ab8d6048cba5a2f1872c4ee8cb3064f535151b6bed55109d96522db23736bec5c93aa482f3dede43588,aQU]a[M1?xsf\1Rw6#[y{eLnN u(\LsGiѹUclA C߿GE㽎s5IjHUx²љ[pBЩ]\:|yZ@Odj`Q㺊"z<~LYZIl!޽k-gyi_ZDjT,+yGam( +yg3sd2p[x5 3%epďC#smNoq $7ыo73\#T6^5s|o7dHO?J!HФD:6mʧ|1K1./Q퉈Ŝϩޥk63Z:hdܭHe0j}K+J_, ?'YlH" L!Egym,#(j7ځEefkj㣑A )dDYu>pEr?rd   6 #7TZd             H  B B B   ( 8 9(:c|Gi Hi Ij, Xj<YjH\jl ]j ^kH bl/dmnemsfmvlmxtm um vmwpp xp ypJqqr rrr+r<r@rFrCsssd-ad2.5.22.el8_5.3The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.a6{ppc64le-02.mbox.centos.org CentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxppc64le&'C8K8=OAAAA큤a6ja6ja6ja6ja6ja6,a6,a6j`a6a6a6542639b132de328bb997abcf9dc5df631c133e504ee0d72d2b23c09a20fec3add8314e71030d5d429fbe672fb1734d583fad170fb290f16271a94aff1c64073d8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903ae7febc7995b321949d46bc356de3253d5c155a8bda582024c5ef5e4e4ad6ad5d8eb5709f98dbffc1a4c354cc54edc3bcf19993907c9f47e5d0d6e4e98e4435b527022d7b33a334ce2a4feb9f6a7004db8aaf33e16fab97e8cb725fa9f648653../../../../usr/libexec/sssd/gpo_child../../../../usr/lib64/sssd/libsss_ad.sorootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-2.5.2-2.el8_5.3.src.rpmlibsss_ad.so()(64bit)sssd-adsssd-ad(ppc-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.28)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libglib-2.0.so.0()(64bit)libini_config.so.5()(64bit)libini_config.so.5(INI_CONFIG_1.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.1()(64bit)libndr.so.1(NDR_0.0.1)(64bit)libndr.so.1(NDR_0.0.6)(64bit)libndr.so.1(NDR_1.0.0)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libsasl2.so.3()(64bit)libselinux.so.1()(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libssssd-commonsssd-common-pacsssd-krb5-common2.5.2-2.el8_5.32.5.2-2.el8_5.33.0.4-14.6.0-14.0-15.2-14.14.5-7.el8_52.5.2-2.el8_5.32.5.2-2.el8_5.32.5.2-2.el8_5.3sssd1.10.0-8.beta24.14.3aLaamaa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.5.2-2.3Alexey Tikhonov - 2.5.2-2.2Alexey Tikhonov - 2.5.2-2.1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z] - Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z] - Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z] - Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) svuk2.5.2-2.el8_5.32.5.2-2.el8_5.3 .build-id64c3b1d01e1c3d5291d548fc95e3fe3f5a8e4c66ba5ccccda1f237eece4e7e023f286ed3172c471dlibsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id//usr/lib/.build-id/64//usr/lib/.build-id/ba//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protectioncpioxz2ppc64le-redhat-linux-gnudirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ba5ccccda1f237eece4e7e023f286ed3172c471d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, for GNU/Linux 3.10.0, BuildID[sha1]=64c3b1d01e1c3d5291d548fc95e3fe3f5a8e4c66, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)55PRRR8R RRRRR RR5R/R#RRRRR"R1RRR)R0RRR RR2R!RRRR$R6R RR RR RR'R+RR*R7R4RR,R3R.RRLJyl@mA[KtFRE Ie`J4|uU;ZZK=0a\f\NnmLgk t< CR|*=$+%ܸƪ&sAIVW]Q$lsVSY9Бї<,kB}"`RN2ząEטk$scj c %KOK~eqǞ_VW!xݙ (V&U/LؒJdLJJVtϟl˫0{ k2-lߔ|BܩVeOEw-H`BP:IoqJHU:E8;z4~ƨ16"A #ӂSa;(SDK#CIC#d 9jtg$xcRnSS $h.0<TF|GB'ph{34Z䔨zWk O-e eGƺHAiYcԭR3F; ʈaln&[ck od¢sءMt~3ӽ>O0Q~BEzΏqp/!"E0- 76i,Ig{(ޡ]0ik_R˨&fYؕɪCx_@g1țֻaqHnQo~]RI:^=r]$|ou{.0>qawlR>Yn5P +)WVۈgҦ`"R+#buTUHhH0"c:JCJۆ(X anl)erso KQ;r2 6QA_"Kԅ D7 1ov<PԠ";E[T-F VW‡Mz' 377 ,Tq#CLbQ󼓥)[1}m-ҕ17v`ku:WH,m)֢w^& R 4h>5?ּaLj?0YWȧxӭADtYM\mwrM|Lq( 3MFo&B:WxO?ӱ?G",bСRCyo=;{mi ۧ6a , _P9ݍtc'7=q^Ue xUݯMҪ`0a@S609>)IKT8:|F_nQ,UMEE&=ˏkCtB&Xx&r:QkW \:[ֹ=1mM lRbBEc#Kl# fN⌻̠[z`ϿJ^4*b_.9,Ab@t˧)S(֧ФأBVqbǜjFm$u8Uuy=BfbzҕK6!!' 8Dl$ߑ ?P~G9܂N>!e`f- dfSCc{OtìTvM5@2q%.%m"k0k$)FWx!+/X>\/C: %Z#v🌗Vo@9c1ULBW"t͆Y|-2@@eQT)uQDS9ߝa _}xkΗ{1n׸;. .@INWmDC }qIugR;UYtlL6 6R%w^`c96N(㍍1u VDmd~k=f'3sV?2eM+$q~?dY3,q]?/Xf"k%RfuC+#n>hZL X1Hc;ۧՠ/$S/d?%óBB͙~!wq;YT':8E!,oh}BS?7t4P b6jZN>IԦ 4@)#5KHrs_6"AKJ"r /!F/Z):ێ/߱PFZ6~BkӽWhs_'4 c!<4Z{3BiQuBVQ5d >'EЀsNzzu03Rgr-֏{S/Ux$;a Z7؃邩_7*j,#1813=&Rx5>1^ VC$b`$=k~0^ #ךmJ\b (+L< EV|͍_IQ^&\,fv܄?= mxY\c,DW7IwR#1nc6&N<h^t#ȏP+邩YN)jHuWP W Hm_փG*a3`u8.HwZpOۃ!W^vӰ 63lM`4uN;`/i>+Y.wbt?gJDS 6ȿߕG ˥ ʟy0&Ю5M?D>J#e߯w&e7J۝5b0g8Sm쒣kqZT + 0h?#a9 iWIk ե8F& A:ʃ!AkHȹwjT]mNdܞ㬦 :7/IJ S9Q~FXPO3~zeiX}"H0VXSNйR1nO8FEd H+P5L*mjTBb%enw?\x!!CMfUM3lK3zYJ{*LW WKv#ZUKikhY J*9 LOjHӣC?\V_1YU'c\tPҡ+6`M խl@WA d Nv J:j.Ү",Dk^e|InB.p~i])PFCɛWJo,vDK R0<*gykuڹ8V#bȗY qE |{7>#HՈ'4X8cWXLnO| l͛?%k$Ѡ"YLj &SR(EUR>_=8^PYPDd(xfm;$깧/Z7\7Fj).yG瘧7 0a&ؑŕgðLI.0^uH M&ץ8;VnqD+ߡG<h8a.Y;K^U,gS47[=1qt6UNs2IFR PH $u<OTԥ@u]yLۡ(ER:!^e&7FC>='k4]"YDebs4ொ-s F'L[X.R^VQ;6M4|]dO {m'p]N ȨfR*Ppp,u~zJjט\:۾{´mtI|@[3ޱd.PT򯆔ǯAj[%h=_̲*m{oꗸ16&~e@ӫ{wat0V+T j#{EC( %HLHTŽ_]? 5t_^}.B 19:9MauD6'Tp|' 3 &(ﳄDƜ!ái*c`~àޥuy0iyznP=kOA~nWDtC7þo5[1۞S JI2%i7s'>)>2c"vE>S(lG;Ŝ"2$2`Fe85WqȄeK5Q::*xvm$/b>-ňϘ֩@ ^qf p' *2fI"~G?'/h+Kz&`2#}@>6wͬ:>uKLԧxt)!m&AY?^= `h#QD xc}|D#YA1;N{6#˾6PcEgpⓀ_ӶOS4oJ>IB0Ǝ2ϟ%Pd3!rV 8 iIOھ(tll|Jxc NC/)$Ƚ˦Mv3(mk@!6_"ʷ*d Q9jQ/jٺHqPuV9w0|NI^.@40g&Nr)M 8x[ұE_ka%mɺV'P%k= B'_Y_Uk\ s+= F%BPI.("%+HWQ2q,epv쳦=E't#"İz"JE-W5`)Ρ]I,p@fll!F"5u0*AW| i25 75jx2.Ƨ7 H*fW"pƎ`5G9N5]0brD?[''iXkYl@թcV\lHQm/{NufZ4 q jh3, [j t? \MìyT;sd`:O0c4>#d}CgCʌ8U) 0@?t6.VlbP1MѓB'lxbEUzv_;^eb2꧇DϘKn42Ň4O)Є|gQ[ \Ò(R棢;m>jMĘ { CGW0v%33Vhwnb(r=Nт;J(fxʡ4$1RtQ6 ~$Ԣ2\` "ɿ]V31սt&HH.eGj"pۨ.ı8k<0 $Wc_%*X~U/..oFĻ+)BQ=K:T| i;iKݪKAd v&Q0b'BN";HhmTSO\ QB 8u>R1B @œGai*&NFx2L=F1ȬDƒ* ;]5#| 7"1)Z\r=G~-wQ̆xtGXu6.Z.;0Je3-@l7p!TOǹnfN$6.9][fUs$ʬ?cXe'Ww'/5nNBH#"81&hRm-Dw~Qw<pL.bvlĶHC ZIu{>/EE)XGC6`>8ܹh [er~>F U&4oIdPK#+ 򘇕%eLHKE:l GhJRH/()Ykt ri> w<.t%&q(P[g^ @9@НijTԀ-Q I'&"=}J3lx;GPak+#Y#F5Vxi$o E%QhoK)V:RϥUDIoۺ9p F.~$7(9OXl.Q~|w.Em4Ai$|qR"o˱k%F${{oSЀ{-/LzO-oU $zߐ0 C(VC3oQNj dbY̢y!wMHMvKImX^YɥiEJwֽ#N@څ5P;_Hίg "05jͯl) -V.ޟWx:Ռ?zR/ E~ FP@rX`tNN}+}ɼ_HC^KAh:}oT꼺D!djtv> qb ggURqWW#:Ls`ʥŨ1uMJb܍/N/M$Ką~0N' ,툈k^.J0(fdRk1„MF}!DJapDn@ Z"Q* 5f12XZ0#! .ٍ6OJ@ś7 ] 5Al,~V9.a00<رKP&i}Y. ;B{sFw,ZNP&Zg֙!; s/* vÐb@.IO_ 6Bc,6VMy\[}+ݵ{VBYB}j`<" #?_07l`5앉8Αqtkv>W{&2(:`#ey1Cl|&& i~omx^KQI\pȏb'$ B7BNuWi(@G02=7˱^~ii ̠p<\FoaZ߿nq*b̬!0mzG ]io pu ףTS6W=]0 2?t 77?N ܏Ofbdӄ& G% R˫e81&ɢď >LHv{l1Dj߲c[ƚx!Ra{E\$]ڀ:լ.\=oD[3]fO1Ǧq?Tڀwq4WT$ĩ*2 |^EiE2-N[و‰p\sW7p׍! b>ҕLxN:lh͢p)e*LRS(0& GJF6d]r 1XwQ͍)5vDa\NGiXPJ"IlnWˉy9bЙ)_Oø1i93᱊kӶt BW %5;0^$zRk \ @I@CJk %=Ifnd!N@c>*^dZ[XΖXɪ>΢5}< sFJtiW_eRfPm3gl;bgDA&[p}Ǝ,ZjA|a0΀^p(ruu"j#zk["y˟{A5ߟ}{vYȀ׿ĒHuE.BYp|/̼zjPoF"QK)H- en"vNI#mobu#o6p8bŵŚ9:Ubޢ$;87b_Yg~B>Q\x]g<^D^!'AVoxc 5?IŰy/ܼl )S5:#3bط]aW1:W"}i`ȻQSwh4^5HX# +hҴ'mޤ!k]?;.)'A0XAŶ+pc1P]i 6m:AGh I.9 xא& I I&T.Q}l./0.SMmQ~[.wfau lPѕRO; Rd{dp8*F)'=ԫE|id93&>A^p>g$,)eG]bBKbF.1w3n. ,<.8\/j :D%Ne+;iLkg'螣[^F.ejqҝC[p9=uhu?̅%QnQQ?&^qŀ^OJ򁐅ӓ5]k'%njD>| ͟ )}djfqFʊaҝAf;!#Tl>t)G2#b I810yZc$}L(Y^N]-iiYr/{&N93)XgZ9SāW|M²aδ |}4 Ynb^/ex=:IyQ2h30A5enh&;0GW" ^J MrZcΞ&u(ڽ aS0gʩ3ވI |u{ąLg9ĉ`mU <WuͧP;bT+dpmm0h婨I+M8UH0o irrTw57sx%7q-MlrsymB4œЊ,VA.) v 5IT" u;uꐫ|ΒYf'q?E)6>ےItU~.]%:)߸: _pۜc;.b MWwo8BgԆ:h?n@ϫp;@SygzVq%{_2hnA}ʎ""IG!] ͗;w G,vĽIMrc dЛs191;iIpRw|B7Y~ǠAwUҷt` .-f IcE =T"ô+D1h[E[W>XsE¤iCR͟ga?JkZBJYM{)ܴ󬹥KX|GK$-0#J%&CKVL] =eϥ<  Oո5ì9(mٺ!2Q%E$ש`<|\@0N,9GR1qz gII08`U+"["'ΥT„~P%( $.Οߛ~'jX%ve]UfuCL*-Y;7y^LF ߜ|F mn`î@n#8XUoeT&Xdx('1ph_lZ^;4jCVnkEd!L`ޝKA#;c Q<J*^g_M >=6ZPy5m;Іv &{0{> Gc^ #yR7c]ηZ; SL}>+,Mh&WL}`fqѬԻr$)D>ELMLn|_,@Sălz';EF ff[Ȏ7:V򠔉oQ$HQ BNXmE0#iUOI&N҇fˆo_* xw +汣mCs Vj~̤"Z y/%a5Jĸ`xo 5n? ~/0kZ)4Pgh$zLޤs޴7|iY9k# 77njr):Z+~sf I[2DHgHW3 Sr,C3'+}ܓga>;{^ATq(]mpWuo]NUzPвNk[{uS?fN3\h&DN/?_(fNJv}j#.  id]ǏV@"KPHWruouP5gv Wm.VRb 4h-| 5:4B^T_L_ʂaIs4F@/W냱Ii@r0Y=5.nb*bx4#٩(禭GCԭ!X~c^'TJ3*Ɍ)$!~@?awWsEvđuz>TP$p{,نs`4L"۵6;qSP$ҹ/ֻjڞAv40 swyVqktD+VnҜ9Å;s@L'~T#WZt\oK`x>+'CjTԠu?"Gep-e)|;h Y/^_0^9藁-dj U 4cGߪ)_?La34,3zg3+2X<H~p 1r=[fy2Y=%IM ^l!w0P2q5Tc)l7D-9Q]j̹:*^4Q¼o,)=3- 깁eIcb5Tr[Mc4n1,7u'16_^'ZYڦӑȺ^Pi"RʃMTe<]r G>@W}OB:`W;/OCSr }L hև^+kqO.:ZZUn6z样鼓d5iM8h?k 1@漙QwSiR׺!B gAEe1Ro@7oa |te`Znq'~_I:sw?gLCe d b }w_\2JdmkG%kc#{Ifn@:*kѼioNԮIH1mT'iacn}Ruzz hŕGFiRݪG]s[0,DLG~b`5|yP'.?v!]}[M$$e2{iy~g:?/xO\Oa>[–ɦG|z~Yl{VvN 0\!'WVp>cU} Gkcr^*[nG/$,'pKF^v 7:U5Gk;WR@䅒l1U8.˱iH ObYX yE%Ќ09]c_\kn?F h& i?H_F5<c,-_y%8>&C)w6ܩSHa?./V-ЛBV)~1%bdG p(\߽d]DKU,YO(^2Φ5tI%i8= ?ݰWl ;vOnA?B/Vq;a'=V# >%ʟRSlA(>1q rSo0@}PudzM͖M ̃#xW"f,lʨ_~a N>!;&Lj&B,U/*!X~e0S(Л5`iAx?O1΅y+UO9XAw|=ViM\-3H8 ^8JTWi-L׽>$t% o7c-š!>EL)bWԉe6kB?e{︧eܧÃQt#{n o]Q7Ac˵n8.dvw7^R좐-$"A"vF^jRg[&9(V&h ̋e*xaSu[ϪOíڍZR `yQW h6(*~p&H`oij=3ŁXjf8B@tYqbj!+ykn>hv5|Z[k&q*C;:?CI"⎤FlpY(1oǘFlbi޲0`omXO׃W%OZ4*Ct#!R'M$x<+rX l3 }NNy.ݞjޑzs7d \ҳ5lHQ*sY?HCb5r'q3%#5~2y;fPG_[xf쐔cK?͑-|UIQmuh>Mv֋./N)K4|@ʇI:vUȊ$x'1ʹmm,8qP[W޲zU09r<OXnl=^VcF{ ?5}ZC!.Z…`2"=aY`M@oɟ[տyxdmsB`0ß` S>GaNSLx1\ԓ_te $|Qkԕ\Z S8gWxIDf9* Ol0?٭ULo ^'S gl3ȨF9)>H(0d?s?N7sآT9X1=7^+Cޚ%LhCN>}Z~޹RR%8t#4I @^#DW$ Cgc)>hޘPHhۺbB)\]I8T_7*;siO*È{j@mtZx#ꨤʜ7>b"˚=ߘC1Fł/ZZaY_ h/*g, b~'bD;r!AGsߟ"; +HS4Z]ȡ\G [5h9y0ޕ!3 ILj$)[[6l7\bѻ"߻[3#m;K U;C+<7i*q>Ks!@MT() Βc.gWt:{܆iP(e~%4,m$Kѓ ibz??vV wa9s2ɆA8ulm>W2[L!k" S\TQw!l zlJce d 8%|HL!z^R4/l2]0\LYm5 d b"gnbKTzXJ 筼jJDŽBF_^j@lnXX8v+08ܽE ψ=3'V[v#u I$l{k17hw(-O -lfQĬ! +U cC:fZ-~\$w'R &!`Cr(^'jM3(\+;$ .5*~P`ahU .?@k.<k3&4ɲ<j!/Gvs/[&Y ?,Fi#= ;k,@ h`sьX\-,zP2z Ԙ8+M@+NKb.>jH-"h*k }!&*uwMz(p :ʰ;"pZ)7!ޛ8@| /xT TP?d$߈9, C f^Bx\, R]Y~Z]Iwy92i:l&+&u!= (<іj1犐 q? 4R6ZW}O0>qP(7t}i(фGF^?{UI3F(#UhłCr$22epZA%dz-SR8|pG6Oy]ƶm5^Big#csko,bEQ^ {x%~B>\̊Hu#!N~C)ʒ4amD&+mn Zވ;7 lutX׶|tpe/r|=7|FUGl Dx̧m %AG}Z[WCC=p:>~ztAzƨ;:QM]ٹ @/uϫF9W>Щޭ{?m>uWaH)YvT]%{{9%#qh_W+5P`ȭ pޣM~O,f|n8Ndq#v20g"*Hv)tICDžDW_(3:H߉U04.*-QYF\aHXX$P1OU ǁJoaߊ28f3z%.u7$hv2-B::0,yx^{2o]15(Tgqc\8~2Èb8Y x 3aUc/aA;o6,Ozmr"_R@ \ˑ@ML i=Y4Ǚh- J$z jMYx%wVBL%S@lcxBh='o t?)?Ȏ [޻8NTe|PrZ} :IDC<aizVwe!r=M/Nezv7jNγM [tLBB,MV|rS-!!K!";,m gkt k nHŏa֛QХ˽v3`8dǪ&NjXZvz,Z0צSZ=dԝ Zs ԷF9c']^i&ZJA7gRJw\22cNaWdJJI(K(K-xψ(~VmWf3'b8'Eg$2ĪzQ'Wߖ!g$]u9}b#, Fbᮩ$ˤ7% #FcJVxmCNiK["đִ 4hG=_4DEk;Ҩ]Pжoh4DD%>_!iH1/z'[TİU> "SK#׀,s]k\L<ƅ)xvݎ;gJȄB[ kXeBw;NpV4oz).w,ÿ>7m76b;P:%*6CW Xx<,RїXKBxmb\PTăKg[dx" tkj/K=xh@Ku-!Q J-DE߭nw7j0]'+$,@q0~Zt-t 04 p 8A"v5fX\\5tbz| t2I?wq;/ck&!g#a[ڈL#/N+;nK}[8l" }~Kf2UeNHW+)'N_ے^J7(H,Vsã2F{[<7gG 5'n샭深;¤[ԊIRB9AJ3͟ڀ< I &d2q?6^-Q*lL[5+¢P<1%x+SBGF}FR9ep"ګX NvZ1S.?1r{VlC,W~HBt$#*fdu ŒW&F=۪ܜﳋ;QUyx9Yz_l_ գG;^sTyVc2j~*V-\=R5ǯڽaᎣpA{c'>. .c;)[%wF8_}|vϧ 6k p \#ۛ[{93qHO'@njo&(߯Ou#^9-ykլt{ K0R`0 dE M#j 8(,wnj9W(cJ*9Ű"Y,@;wL6YlܻBUW6Fm1M1:Q9 dēܩ>P>nڢ:ʄ$9TP:_e'm(۞Фϭn1mHS-dV&o#B`h@@Do{+Y~SOҗG&2 l׭{:d6X[^qhp !#C*\ <buol3Ē[Zur-E8Ɋ,|&K1]TW$BQ` 6z[|Nm_ؖrCSQÙlʪ&&vJ\0^AWOIiUAK /l:ƊeN!2*OE%]R`QCiG~ض_U Fu,RWD&j\վCB}` Hf!2$\ A=?;lݰ/zQJ1}t77gwƜUuCMQNp}CQ6;X*@|. w8JXV{Ie16ܲZBQCB!"y[/euѸ w760a@>|[n7j] |(DyO B_ql7QFd!Ĵ%_e ?\`{)mS1eJE{pP{)5=Ɛ&8`W-KB9 /v8+!]$qnN|ؑdO\)&Ta@d8lSLps5;V D`9}@1&@RU7ƒj0@w+sEv xA^5W L+ɓ&aT&*FLa7r!$S`ΊKT9t]sOm3j>?ya3*2BݵyIQgFD%R<7]\єE!8OIaYQ@ׅx~%X`k>EgZ %4S`Zf`  2x*>~ʡ;>+J؟4ΦsR].V% M֗.֠混(b~}4)S`fIW-8H[A{5<^D!o Zg,9ilxU⒯XEL. z:^&Dž$%d'06]~Vf-,3$$4ɶ0D0Hx\oqȸl>+e=&D0/eʕ{= 5-8ZSfF UeМZ~6 7-1ME ,dPtN=} ? $ԦxiIij`eSJK؏ `! XR~l\M5§N}m&l#| 'FH}r bE HHqK?APCa*t *.Hgbwt<&_gޭZ8oqYa*l ү,Ci虋;7YH8+A:YL7-FTm=( xRLhizwHTPC>9A9}q,(kR}Z7`iVg둤P̲j+uQ [OiKcmNF:xS?GF@Ҫp Vh!q`PPcs-CA:v =c"$DRiؾ2хX"t|(lYX}o]'WCWۃv~ٶI !3&s=V.n{W&Z0ہ=S_-ƛtM :l;qHkj*)0:f54HmH{*ƃhLi,gM aG$ۻX]1luI6ւ|Iw>2]Ls5A¦ Q$ӷ~dn KCB!-i8B :RD <,Pf:iCm}kmB[TtoJc`I٘, sJWPDGn$+O_^1 ]cIgq3X"i'G,&t՛s1t]oB۔%nDdtؽ3BjR3<* C^wxVUU w1+uS@`Xw)x80#R*w?R7tR`WDr̈́vFgUк%ַ4)_ܟco@y:#LӂVj`y@kWOoͨO6[]8A"|;:#Bn Ju {#$2jc*յt>|e6.dd[w9ڹ\t5{AzmwL04ii5"OD"bB 1J)^/F4t=T_$s%g'b`+yxDR%#Q]VCyg18V>b 1B2ͤ+>_鬌l2,Oh2lqdHIߎC)d=e'j7 \:F^zc!)τCm7Mci\|Æb[8%qԤjPT;kwM\M(vf/@Jˣm쭳 Uqx@`<' PöVYk>vQsMDv$Z -GeJy b^j͔D'75b6sX)Ẍ]IϟXKmxJ|:4Ӡ\0(8_FÈ9~ҟ{PdKU)t/{jWߪy;>b 7IPX!X 'AօWo}*][1C J!jLFX4 Y*Qoi?:|X256/#\u&;'OE|`{NTudBÎ`D̀a~O8(sMAl^_wZd eGV.sgĂӄݗ AZˆBgx62+8Ajˑt a ɂ koFxs ćϟ&W<1ULփky⩰űcw/!/H w"7,k 0#M9QA 3,|q25uT{Hkթt$"E.2njMo#gIy7Bk* {$?"+ؗe:Ⱦy߶I%@QѝEۅw{ڰvT3б Jz[F$&PFTyx֑9:u#A/NԸ0S,֯{/~ΖV < =yV_BhS%աmɄY`"| :Q>b;4w7/RZ6yܒK{z;[V=-a $poZc57RZ&ytt~&#+ܭٖѺ0 .R)=}QMa̾+{B_9or%NUuNݙ#EJ>9T)Ƽ8;. -쐯+؋BX0ȫMiRE*5ZÓtT~}Ҹ@gJtP?ZI\VF8BEh\ `ZL\k>~A&WՎ# @u{Ȣ{BKL:QXC~-Ɍ]}\7k|2u!Eq ty-bz )&Icueǖ 3ȹC9n9 RBB\:xU=gemtMɤ8wAͦ%|WJ /}-w9];U#:-zl Bn ~Hq-+S=O1=Głz'b_lPb`TB½71%՘ ͦ3m"m{ݡ..GkNdC,ou z*2~-qS7,q墈d#\gQR|ROkC=L2 B @ͅ{uq62$ Kby5Tl / \gB891- ʇ; *J1өO؞%܎ l:H}6Pt:"g+HaLS~th=iyu4WK- UiHF~,ʍ7~ BIfQ=N39μZlXAƷ 7nOzI*ܕ:ra.h5,⊴(7P"]q xizXĊzo1}u:/ ql Ѧ$S`|if';ƐJ<#="IцSZu'S lrӅM'ѣ+`9wTZxU7ޙnuH=ȧA-6r #߹[3r42gJWP5-}LY`8ޏNQ/‹ } ȫ'9/mR~AlÌ-; bb( Ɯ?z~}k2qt rRI*/,KīˤE,Z<.=f8FP FhM]m  ZnI 6[+kr5urQUŷ˥uEZ. Igpdn)Ǩ[&c*ckވT>br3KW܂(CEdu YG*<5HGx^xM!kwogV 7xĹX-#M6}f>e2({?:BW;--);ndv+wMrlP+Nހq_@ n*fo .Un\.hVPH=uɾYصaH6I>2:Nw3PUaٖ]L@ﶒ_[w6hgY|.k9W 6tr`{4l۽fHdzJ_ćr.P4FS ,a#11mȗ@&!xA2:Z%"9@-5BV|r{SY(pӂ̮)D9UmM 긣ݓFW2[ooⷊ-s ,*7GKq:#N+z;T930mFB\L8!֬_| ! ^qNk58˘s ʱxՠ1HB"^H0Obi !Xo/dLL}h"oReĈ ª!;,KgޞƢ)k 0t"qʽ @evJ0;r*2g6+c)s ( $ f-\mݴn|an)[ku4Bd[XkWCG^PO^%6!Oݿ0*F"M:A1/>>?]JjYї`-m=3`7J]Hk)@l,CQG`~>,+PBY5);gtM eKKx{UqQec6Gah%3zB5 HlP|}RK#X:/ ЏZ<t(: =}(_X~<ܝ)2=.qކ/W 9_WtQ~SCpaEASnjhn8Kj`9!RƗpr pDQU~ކ$ r=S:"TQ=_sYyetq 17q\oJ4E'Rs דN1 hg1W,që ׍]pWQN_wif,06h+X*7rVF[koah4-| b)a*_G WC'ܥ[pMhp$"͢^| Qio? =`+PB'MD:󦙈kG$E~@)0όrv}FbLG I}OOD*zGN/w#53R$ɀľ)X }f,*Kiӧ!|cH"s@b4,Nq'Ul0& 7 QUM!%=E4j7 h*!ߜ]嚪'"c> æ,E*lFRx0JpZ,6gݜu>fY KW})PB0`W<%yVIOzuwT)w;VN #K+DD$WsP_#3]f0Β^ILo(>Lb(0tr6-s{ԓx ;=8 U|{pP遚0bw\ ]@WF7k_\o^z w# vVc,-j;MhCI [QL}^3m}DJx#!0 @G'}Fy5Ysj`lRʴ]ӿ"+PL E <9"E|w@nֿ+Sߦ\\ 钷%֌#;8?FB;ZxhnXx?j*l2Y9sNZS6FY޳Qqpk Ȑ_MrT-9R? o[F?u=dPN RL҉jl@J:;zK̔1w.jck rв>Ο;/Cj!R^-Gi%!Kˆ7i'M\ eTVu&?xY5xR1 :2Y푪wa+_*q`yʄUzwek3ʊ~x}KЙ-B N" n;ui]SfB 8-\pd&x=f/.ܴKj+m/1r iC|n}> sLq=0$0 3+z$ <P3G4ʺ~ј}ëYQE0y F .f4ܲiFd?bPPXyed­vue T 8٬vO֮\$؁-Y?&O n䤫AhL-wjS%m--ޔ(M==[ô!{& %5F({^S N|vX"P2mu5hFbۀ6BvkU:[߷R h҄B׎W:٘%.XuauG R͐8/]1յy W/IڌysV,"-7}OZDBt$A |ז$FO<,)]R[y6 E;eI؉,RL $р;j%!8Z/) cLBc_eSƦ\_֌kGH r.!妕}~J.MՃ8ƕ 8ɫ'C<}:}Zg.{g܊s{L!!fԘXH4k `Lh#Ŭ"T2<0rh%Oo%B0]_`xP FUJNzH7i"gDNs"i⬓˴Q.4k1#C1|jAl׵Ԯ #j=m\ " Re/fj=?SҾ/%L=hjm7D~ڏ!- eP\imEcmQ2 $◫,N\Ꙣn%BNZA50ƜI!Xv08 9!mOM}"i$&PDy)\;Ucu9 ax?=kl'+_0>,fF&@/h f [1XI?ٺ_H"O_J'*el1*iDP@x>OyR ǁH\1YyգE™dƜ0攥R iba5BW< DQaoGh؅5y, ^!ds?+CTfB ]*bi23/ꫤ+hjܗE X\=5Jm j[BA}~3cs3޻!8=+ʖ/2 H.xPFQ:4˚E"(% TY@0P|#0v6-5%iQ_!+OJ }L]uS>[* DGkg$ZG7!({+],Em xO,7/͆+#}pp=ٸiK TU57^YхVAxnھ!$ zK?`vzUJip& 26,p1Tm*%J)?V1:em`U&|w /$]ҬuՓC F8ʡ#Bz%ާzT-/Av#Kl4U uRfאu[!<b～LoAE]p9ZĻGǴ<3sQ;5ֿ.F2J2##s|뛅6w~)v* (s8}g$I+,XBMi @~ս4VxfNI(X]9Z4чX#-JFYF¨Py83wl;]ދ9 揔RmJ NcaMq=+WwCZht#*m-`2DN%g }aD7!|>z&Ԕ]nUĐc,:61<Rϯz{,e.VFZJw`_ckKQw61V MD~~dM>buzYnmk CUV0A>?pp4v\(9GTn3Taܟ0aG:[hVWzG :H+gJ[/nkJS岧r 38}ѝhd}]"R8hw5!}A|\$K>Mp.u6 ĮXt1qؑ cZ8wv9F@_D֣rbQu4;E!Jr)gA>A6Tjsi[D*pi,Ɯ;J^̚sϔ2RFՏ^J <.VW 4;x`)W'✧q!e.wf L? e9|@Ddڲ YDw{DW;ssu(|(PEwCI[jnP<]X;(16bŲ7_ U#+ݪl2 '?8Cl];Qfܣ;j׷ fM}ǁ .o}Lcl (J(q0Jo`T޵ ;$@iaZeVB?V p=)|L=e\B-3qaj4yblKU.O0Έ.VVbDTt ˨̘W:̠/0Qm蛡V߁)XcY^tdme P}7f7YJݰ!0CLO+/} X*mLVz Y p*EH~ wM^W͢󸃩%s˻;RQ-Q: 7wO= @!bM2=.a O5g}E^ધi ʚ,6SJ05*8‚؆.) l3"V9g0kBOx_vCs (t;=\YD-Z,,Rc(ma82, 4ѣ,o3]'ivcc9^ڇ(ew* 3aBx`낲uӲZϖ,~n( ؑU֓jE8|!*3_[rv*i6Z1D-VOg";:yԕK} JŴ4*?[sLst3vٍγN?feA yNCJD~ʫ@ b/"j9+ e @1ffK J=v.I8VDCa7" d,jUl4 iIGBo7n5v c1QpP Ȼu4|g|)Y=KjM귻aikL70I \F5eO$kOo8-U%,r*K_uJؽ Ƕi ŐLu&4N6>u/pJv^J%(2FvmܻwiF?bŽ@x \4HSa~K^)( P'O #8qՀ)зr;Wu@5el[ e BkͿ=NU$J2Xu V Eamld-gNFXOg߭r.0=6,5\P]GK_(7xG}:gIdС6̩WH>0ocR8!Uph_7D; ٫zPOB9Fnf UVݫtid>R^7]h}|wFS6N)պt3+؂/v!" NLwk\5 v[eB5"([| qd^'UQ@Jmj(Б׭FQ;+C&+>|+T̆c c:)3 G;='M'=ǑTH%2B8ǁo2ew#E~N1+ q7G3 џQʉgtٌk^-4m⑗0JsO H?)96jTCL nyV|NSPU/Ū3:m!>dI`СY)ve2%jw+!qEr.hr,V2pΑ!]Ptaщ8J3߬~_CFL/٤՞x^Nmd ΜMD7ޙLj$k1Xa](] fDl?ސ{w7k;jyaѱN E%A8` |^lPpP;gP ,%Ybߑ~AH2*2[փQY=(7N^rIxF|Yh,>뷁t!rv"D,e(y!uIz@ %^Iqm|UQ(yB6HfopFcCqHI[U5z?,w"E8}OfQQ[ɓB6M{i6`DIj_Z>9 '0?Z%rMAzrJ oj7?j͕PymC zA͵t%DFqF[]ծŪ;Bp4s`#E6 ,BZn-\g5d7 F:yͩ>Stl{>5мzݰo/#0ל1$%^a~OK)xo1,yQx\? CSs?]jPq;t@36KíI1%ADԵ:N>=<O(]v&@2uL4 sPSbY~z*OqQs~dR]g%c!h-3{c/{7"u92a\w{&JYEWw:e? OE{g>_Ӻ{8*%ީMi2RnNHkhE1c g!:76<ȬNS)'٤6G9UOꤿqow2 ¦~2U/:FFJi)neMHfo()v["R Ɠ\vdO9 2Lb_ɹR9+QطtQ OHX X)>) ԯIJSs_ 3_~ pe!q[?qj;x.6gAHΙ OY%Q1vk9̤4'{qv-+VajM +tMH^,%Nq6M)Fj}Re$R<ՊWCܑKGEY4rKvEj/YC#?ChMp=#+U1xGR' N9"2,͋ I\cOe+AdyED'gLH䈯G`'X|Nj! w񤐝Qh"^%~r/K4ŭH?/~{I%1Z$V/I;aaN@`)%].KJh&NeH躲mEH'艙1Mc۸Vw(eS}w/>EG[Z L$6z!~ff5ab6ĺ;GAC,ܜ3Oukn'Y<=(hblY H ]@!{^p:!)E)!C?o V3(ɢ`F5KшmoV!௱ |A 8b%NY=IHSVЎ瘝F1aj- to1"<,OnUס L8UH2emzKߪ>OWf5{ s9י#'"df|lR Rnc) \<Җh$"o>lrS൜ΰkѻp>XPEU(`OL #[dC@º'zULRE{2y(Qc/#pWCu<"42- .~8""+?:uYk9C>y߫ oH~  L)Caqp f;+LF"P[֮}m:#ńl\"DYd싂T?Oj bsޮX-><2hݺkWUR&}-? {x_t:?::"0}炢yܽV{:w 7t&MC͛Z,MX DiLf7-g] H.a8&].n"4i7^v"O#z3tNO;H`X-CX8ȆfגYzEP1'?ZikrN Z%*Σ! YW .&!bEC<>*q9HQY*kH3o_5rv{^MA gXލү[:IeZy QA 6ށ 78E`'u"Iyoz!1/XNFm* L L^Os 󁠨3 [ȍnV+)B7g]h5y=_!tz5-e0thKk7kvk[^.C-ʔ)Υ)f"%QxGpA4'rpr˂:zKABvsu#ݥ y^ ^λ+8Ƒ3Qi3ebwIQ$O@r;rpi:KZ57=y (kI\_{^|}t%MO"s-)=ƕtys{ڰ@A;@/c y3qjLY'Q\&xDNO|nUdN\TͬӜSOV\\@dE80E;іjԽS؞\'A&i0^{S!]T/Xu-Y:TIJbC9?e+LWRUQW2'J3fң `;Jc6H֍xJTZ7;#$;-ϛs'㐔 Q+[מ=SxX^CwY u} NԨS-O24e|Ͽ0> 9YRԌ"RPJd* OjJ7L˄JiJɲ yEOi0 PQc7mnoHB)G`6E2Bl5RC&3xeh{<ٜ*j 3ɓ_&>񼰤ujS._!r?@qWiHpY]9R"3مVYD3cцN$6Y(J2 xu{ ۞+U˖T_*)÷*ՑoOaK5@L21eHؗ1CsOoJa Reҵ&9$Ȃ@+rej>hAzV.oİwgOH1KڼPBb=S}\ b6Y1?6&_HQWxOr& $mZfdڅIK6D"Khܧ˩A 58&p2b/ d2 hBD\'pܤo/K_9at4o "dxOZtpο((@UVhG1^r:?LK' [0~bhD'Mcl$I5껖R+)}MυP5]̉ם^Idë)e*FDY7qcS;?a=^I2@ӃɈZvc]K087h]uS~$de&Z6'V}q8Gwju]ITSq}f̏xA&"+qu酦E0i×v)exE1`Slx)=Z>N"i&T%O؟WK*vTum ËA@"}yet7rܼviu>wL7ٗ35z&%#ڙ9hLz{gP/e␐]ƦWH8(ln[5.qD׉i'77DA|s?ltbe+%D:BQO$S'˒c ^dtU2~=4]B'6'ߌ8jFMw+]Jvvno9йW>=r|BݟNQv;R`qq&r#㳄yP@yxԥfGԎej>Fu@GZ3~3Xnqhil8kQ ly}/LnE 7pqvYK4""sF囱X_EW g}N9* L{[P;IrPL\hw _N]Cbkp_'CHX.)Kq1{ 2{3Qd4O1?O HMWEG#D"z6(Ȗsۡ,Pqǹzurd2d]oCf;#_grF͵_`'6rnPw)~]g :z1f Njyi @;"߉ފ =5ڦ8<8}"83'8c&DT B$?PhdjI_b+Tʸ@a΃ǣ[t*?`&䵰v,{Z 𤃧ᕪ6#F&4X>Xw:\uc_v:<U\y| $D@odL>&cor[9#X}I2NRebCBY}W(W5ًdʱphxS]@OL:a͸܂-ZHG7BVW79%ISMf[`Ԋ8am*sFHMP= !Qp6+ɸI0?]tOR;V%3Kf;l)D5".)|֟{2P$< F^9P{=.'{Ptc:s`"|\wݗ+ӆ~*THaVFMd iBQ8zL),sN0CB]ف]gE76_ ӑEpͤ-Ȼy? \BӱiY:G)WM,Ň2Hvd+q󩈗bFD3Yș(̼D5sBU$hEՂ(?Z%GD)S݊( =FJysIUۺȇ,!ǂXhꄰb7?>%_o"@a{H+*dyܸ4OKT/$b1|:a QР`%Q ]>,KjxeT-*}hrIل (L-59`)"E-_DD .[ԉ\!f%ջJFy="_0 \,hT[skW};T+@QUn]@8RZGP)Y X%vNlA_! [b4Տ~*pNͿq[?!m4=bHNVެڬ: K^gօZWgtQlZ()!F/?n*2N)b_\t9Tҥ߬驽Vpeߚ3g#ŗՠMLe:lq<V:KpNL Y]7&+8pxcy;OHE?NͯJߓ%Jw5֛a逪hQ YKQÚ"bV @mWM6f yU-qxu\P/{4Dȳ6N F-1l ʹF+O w *]EF*n c r{Uc|}irg pZ@e@H!瑇hH5;UC?:쒷an9oZKg%!W3PUPkr K " }l{%'k6/x_]}4h_n"OgkQ:$H}Zf;#R#2bV\!'3z5s!MmR&LL6 ԈӪ:n\uV rp_bB쉱ʧ]YXi{ nGQ i8Z[<\dH ̏R+_+A(}3{*Z}Nd_6l=YJl66 ^F)_4SJωEe'Q =CjwRRdž:I\Y^`򞾩]tg \XP/(U9ӉU#BzT1j~] W:Mtgzٵr?Kp@] h7t>Sk\J/@ƪ n@#Կc0 }퍤(gKt`!A]>{\uT7 $l̰Qw0:GȣȔ GìUpNL'8^-zS9/*Z2Iyęh8!26/%-Sk2vޑL'xL .;@D}i_BOA}}gZ^쩅2J5pR)=0qYvܩsy$ _I!s ^o(6?Bڬ(=λ ];%-ZRz~%MxކE2ӪU{.RJI Ҹz4xl](+IlZ%եrc.)2dv|\-7S(3?^~xsXp|ڭ }M8ZSH#E`&$T@' 1/Гv1DC8{ne}mafBbNU58؍/d~8Nʪ5Zwvbs{YN)X/<9AINbϊ _b( $=Y6byc@< m^.IspUFbFJ ~`' 3ܼ:>r2v|}PUj/GJL7 vY(;}w<-SUw ?y>Z$CՆO4?B3mDn{vA?Z+TUd[|FI.^YDSC>=!NVMߗJ}[Z)R"e$XN'lnn60kgaK97kWR$>8x3:>iOٓX}$KlH*EjD-]/B҃PeݜH%K1 ].Ca>G,\zi]{E!HrRNCN)y4 S.Ծc:֕}vtu3]r^\TƷHA&ϯ]~43:*pIҿ g 3yozt ~2Q‡qm\Fe`5ӥ ~@uW%qYD+lm3Ds ֫w ͔ <"*naRGu,5~W<ˀDw$WB`•X9V9މ\BM7D8Wu]YCB2!)`qy5W:ҊVm ht:ķE՛]Ӄ & <ӈ8~l42N).q<C ' c(3-g9ݍ>Zf!0Opchg/m cf<|##n1.2kt Ԍ F4U# +5nj*WQH CL!^57:n/\R? WEG}2YJhv cӡIg\jq&c|&ku8pJi3^x]L6!:Z!T[*Tku#uu^J椵 of :S:CMjG)~9D#GCih>P V*&5&u(E\CNdCr7##M2#})\g7$61Z"YY@\/-c4ԫS҄d %iҬpi`tdGIћ^?u_--bkb;%/ǏXO'&Lkl8ҐQ"4x  q/YQ2G )n!a%]G\@[J+@jA''p"XdVum޺i\l`I>r5h⎼,_R8MOveĆp$w2Өzýtp8x۬"WcU1Ny7" DϷ cGcd|O,rٵLs/%б2Iyxꥀ\D;>ɖfl0 ]#"d{W?ky%j2:;+G-;ۘ[-VZHK_ہH~ҼM [Fpo ;U]FlG m2]hNG 7n%`_=S>cW UorݯBC~ ز^)6O}n5Nl#*B^.Ӣ*65'^//zN66 AAj< p'/6 :7'85 /m"Dӥޮ5hC߼8SNm߿Ieh rDw&sx*t;į^^1ϐNA AаcOgJ׌&yuҞcKp\+z-Fj?ΨgOCDsb'4$}I,leu7*Q"(!~;#݀QAzF-N+!ٝT{16 n :ζ- O}7un{_V]r E?~g˼ /zB0$A|_3 &^%cI?' JmJDuW9 }".m߆۔&"D) ?1X^W@mPOD/[i|ޖWi-._:Lr|93JA極wք,c@䎀ΗoR~K0.LP+dkzuKke$L 'p_vCb'-'?!=CTgf]GmJ̩)L<iۢX{fO>zG@1;LHgK/c)pJ MeS-K;`b,qTW+ʵӟx0X.4͍xjiqF|P2wNa:%r>0_~aVExu6@0ñHueX+݂h/e[` nCAv,Og#r"BqI)(i(3-~wSAp{ƥ)K;xxvn+lӪmfNdx2 gXNOX֏+&;ivRBg`K+k۬R[Dg8R[HOiqZᗢ8kn%<fRH(힙tZfē8AR86jҶMY9Wl@w!~$ ~H%sxg$&XڠM}@%?̌,b搈뛚q-mbd捧Ji2HOU`(Y-4"նhB3[bOŵV?lY)p ;poΝn'˒>DA%5<(ssS'z"#$s`urg[1eY"V0&I{ /I6U龧%Y7q\Π>Ahe@Pw;m3g+@"0NJO9փ x,'^O=#l2*`I饊nɯ8 +. |rp!ڃk Ҧ*n.>rM=ۦLv6ky#!*{a{^o`kt\9CBb) ߴ&svr5hCt J f&dM5Ɂer G _l04xrep{xG, .ML?dҠ!BMhDJ{+M&`fy捐y;Vְ L9 aБ Z@c_H!e_&vf2ֻʪ7mss# |,&nCIgAaX*'K) ^lK)VN[s#F"-%e4n.jtc;x0&BB2k_=bw$ɒY:ZUh&˨+^##@myUDL գTK̭^ Uxr" o2jtVҸ8ܤ֫ZKE:`$C)yF ֽ=hҒp$/w8!Sr,^sq<޻1P1r[#a$*߫gN ӈNb4ty'nvd\2Z'\6(ڃ%i7eеjďjn紮 \Po'MS~MNId5 >?bٻMA| V/D}KmRCpCjuy菐AV k_#n e`)F*0l^ NuBͤC 7ebB1іC-g{R/ Ά\%uX{&`tc% .hiL);gt `}){ [Yź!a:c =&";fDD$ٕuH$Q7H릝\[ ]Pv[s4MQ&Uo(ܓ*tK`R6bg#v[&\[q)΁Hw,P,ᶹH[TTOOXC nOT"Sz t楞^Ao]fӨT"rZE~1G1 HPf^F{[[ QXMlZ~z7Ũ,JL+MQHLsZ<˹гN8r*4bIÖ6@^t=[рVJj"w+b\-p>O=V=$4 V@9x`B$ꊿ(Z 0VY%/CE|VI *h8B˜Aj(6pNY~cTA'x9J[.é 5E *3 nvj,c>UVʢ`x[,PoA_egn'{~skF&CyJ{lسtUG5睧3ķp/mQ!S5bol6jo %$1Da)"׹$];GH1?|:4wycrdLCPg1s[ u=Q>R{`@D#6`h@ HTt1ϗR~0*㶅 [9X9{saQG"DP!\^\_|ҵ]F&߽rwO)U*.9-8P=ӑ#U]\J6o|D|;I8O>~As*VU38j (.bDm܃GfiqO$On!Hr [XM lXضĈ~W;. y1XgC|T]hT].p|t*4 h*V3iөČ-%/ws@ODxBx;1ˇ‘f:P߫~I ~&Bz!1QpPaێ?~G(gq'+!tSgLnW`U` pVQ#21s)!v3u?DPwo} nGP0z,)34HkKzlKfcP~IXz8J6U(bB=]2KZ5R1SSYSb jbOldع<7n ):qvJ*̂\VnT /,Øg 'd^_(9r6|_\nYoMvN+nzfA ^8C}]lZ-]R)kTyJ ~DҲĘ3eSByo`䀊|#%`ӜC@ٯCwl¨jBѢT6T˘Yaro ̯C{q\Knmn+Ovq6cשLe|~@N[U>2EɵNJA:bJl,x<8C9ɜSOe1-wo3dIGD1:4qk_{Ȉ*1La+>G[uTUE##{ $NjU('cĜ)̛ű,f|J)|2ͮC;Ӡr3:tPhve6%x(Fκ@ x'KcZ )fF\c ~jX 8H{[M9졠Pp{\{ijU,ĘfuXD3˲ .Y`~o +ʂbѮ'bFоj » xU%YNGAX8eD{r8#ء(_q4`hdl*k[Y*xLo9JbSm u )q<2h50xDi'DvYؤ(n΂3Ciýc,~̔N N@;^x++KTzX֓[(9n8[j]qvC̽~tk|B1F:ZLb Љ`k3=ƝPk3뫦E{J_E0T7WrF 4&ۮMnNn4OJ֌س~rϦ2ktxm3~Y )!c&613}0!d;gQȪڢS TBNsu#jKjX_^W(jA^2fBQ/1Ҭd/ٶnϝ] OFi~QSd](QaXs|˓猚m,|ZC ayRr7$)oyÜc/3,Q=u|G%?5GDRߠƯ$h(7Ϭ^TJa[oF){f7 6`1jǒo Ӗ7Y{#|B'P ?l,TG*BU2!&~2S9eK+#0mDXܙ]km" *eSfc_|\\eX3+M-WyBhƒPQ;T/"Ov1!-;^1wmw^}נ[M?}hys6Ry%#}S0f"8U/w C1y!>uR{ɼT%̢SCqLjkG6D{(lMG~, wu LPfVm@w^;4ՏK_hΜHIevCңGL@{K}3PyM}KI p=x{ rZvD!rĂ-b=M 4}?D>ثFkMY!\i0&%>#y̧fcZ6GYPM展=:ttIrt!!<tcdSaA K܂tsFHf=x%4hc/~F!|W1ЕN;˽/yeE-:xļ _6KO'g+GizA{~z0lES~EH-GAge8s~:NV9*Pbud0`RoB&J01\O|`x^['M [NX凍|i=!]1Ҧ(lX 4g_S2SsAPVO(Rdz=Вڌ7uKT&kLdY(!c 9'yg3#i3Lۦ|Aѓ<4~^sVZSy+lF = مUD$؈^{/ {HOO/:IVBE }QI5;,&MI46r Xsib!ŁtZGjUO)WޤDTiJn+bL~ot*8m쐀i;>$dD]Su}& ڱTE,X7UOVJ^ohK H*P6b!\f4.gN*X& +ޯ;E%QԕK1_ur%οd.gŔ%y(70 9qYyP 뾙f*pD~!?``t&X}G "Otb#r[̻Oi"_"mJ7WK•g/eY#.R@;r;SGK59*EIl J [),Ed4gUod !TB.~ޣd?ܟGzND-&-]ڞӥNz6 {;LjK{~xSJ{ 4!Ƥγ|5j)_d%kߟz+U!Y>% R5cX0w|6{ &C2'cE~`ξ$^疯䘶\RW{pG'ϭ0q6!m>=-.G9ܠ#3;"7அ;~on}v_ X'T|fī'‘k{q k^RjG͟ m83#^81Tp*Xb 3O4]pݯ0~0'YE~%SӱƊ<ڋ_?2 Qt[Ҫw{CnmYDb/ IՃq`PfþB h~f: p}t 0u&J]}l 9iy}hTv89w |DOE)Z&u3Af(@&ml9!x_딭@Or +C[~/$ZNA(@+quf}~g&] AX5S)e |**a˱Aꊵ]w]S+ [͔4~z_2,$98*suSX;RC7t:'ߐ4*thw9y{dK#ݢL>جh7*|0 -o3Nh.R߿>SvXm4ʝG\,eIGu0{QWU\)kowC}1kNlk0 _iѫ0 _,U~[0iX#+YyKvm=݀Kxc)vy"z'(|8d~ugwaq턖b5~mQ AɐEs!\7d<#?٨,yzM݅wJBHU=p?ݮ&a/$t bgRtots~ʺpupQdlQhdCqKr!EEћV 3UUE7~# E*Z^&Z!Lact)Gb2括<ɜihgʴF U[@ 4UcƋ_@ =XU&lRL[&?o46>0&fhj}1E:n6Bz!|Cuޘ-HM$&_(nlqY*'^(w)OlUEtЄf -R4kz4rg N ;•sEI!'0,AY!Q *(#SFcUYLҮ.ih2.loqt;,Ku5W~'?"E[3ԗKf_g`z}~nٰ#SۺnI~k`h8|zM$+JDF: XҳlR_zÃs\AOEyq"_V&-7e9'& !fSyTF`Ro! ++QIsH+)r7!#Ҧc)c@򓁔,^*JXL-H 5Z1?\ljU±DAƴ8{ Q?<=ey_Mʟ\klR[ESp3t -|;TÝ}L.={sB<_+~KObT`8eK]FzۨPEOw2N8K6_(^sb2ۥϗnD@hpnE,'b Ĵa)cu4E:p.*pf8k]qݴ<8P.u7hAY]cXT;Dwisz&\/QdCP-Vc2 0RQ+ Dr*A#J:{CtP k;ӸRlY/?뒰Q+2e; d_ZKQ ,N3#`iG˶" :kjz]Kۻ*l4fHӊ}D hLĚ2m"Q)"Ӿ4= kl|xVͪ8y+^TȦN0 T2De禤'#4H)/|Z]Q殌䌀1>MxY xD'"|)~w㯧'ƣԡbvJ}Ff0DV9[5OXGMcˀp ;pB ˢ D1(ŭАtQBzr2y_)c317=|k :>3wdgz`*(jU|t+|ip[JuVq*iwG#ۻ]n_3:yōo(k1@e&h}q1::6.ܞ0ւ7ĞSy=.h `tZzGu%3tw`N#eTGiN^S}ݚfh fhV~q7w.+( ԭ',zuXMQ*p)Hy1vmQ_7o{Nf]-T1\jTͮcqg~pt$MNHCS i [/z̈kvVoQ4ixګ4ϭwmѼI`VjѼXJrl+*9?@>(;t %ƛZe2ƈ>Ţ'.Q``?eubn`JПFrnۗ9%:bwJy'<&TWXSlnbj jA\P$32cE-PNpܺgD/Nv)}7?-K1qyW>zRH?er$SCx]xˇ(c-!OfS|0 ù !3 tb i,P E)J,~]EՂ:gf mɐrE+xp7xp(aB9sO t5۠&1yQ,\=1[0[O7W==y;s\].m41I*;1یU+_4oܹd PͼAv#> tf4p[Yq^^q4WbB: eg^EWL}VQ~,R 'D}АniZrTDz}%ɰ%A 4v{U>IGfe$h5̀F Efqi@jfφ=ث,j{"a)mYPav!j³_,/v4Ҳ :_5uP#_V_q+pAW=I4]]iX$RyhelCJ}bD'a:OclʯNe#텊F;WZ+w)*Ax {DөJnԿ(ٞ_R8n0^m :qLC!?^ rMeV/!hUXkZf+t"d pEJ* ]ԖFw'%Tš''y4M^ ¸+.R53c9rgmpN  }mq+ &BvaJ>6X_S^=u7?n5._m#͍ l%tEF"%WYcX <&za H'41촆 =^,foup!uj,tK3 <-BȐ&'?|9oYL%X ꭍăQ7{$jMj:W1[$bZ =7B ذ⏞/K/,ݢ=pB|Kԩ\,Mް̅] Á*pJj(/}M9/Gp4,c :XD^wݽ?AS}x dq)[TvFX(/(He2^\1QLɤU-/Ir+ X)cmK bke`:`+S;o;)Bb6&j$j{RAzD\Ed)wKɊMߝm]>:EuA3ZXI^og߾5Ś5'oAZʒE=8 e{R+1 Y?v(MU6 }'uxVߌFvLMP|+8Pʹsh&Z2ذ|yt*f+*^G#"!Z缝>= C%wJQ5Js=gnqͽqP>ˋ 0SXg}:#-@+Npͣ灅(;N[CF8w3CS\ FY ė V7ֱ 3drCɫ睋АE'M$ѻɎBROMm @ /<6rqw 0[V(Kg K?b#ۢmEtaג!?qQa<6œ?xJscJgvCy*޲IdBUhGeY ?8NY{qGm&+KIYU"'W_DR_@,kp>ZW]JM$ 5woІ`7Y]vN%+6hٰx,s=%ixZڲOJ@/Qz[O\D3Z[3/`UΩAQ 4H; . 3ܵ4Xo(h'=j,gI#<f46,܁/I[vsifeǶFe1{>bGʽ"Sb|9lLXߑkz־$WBOlsyہ;2&6SR#I "H= v`YSon9'Ⱥ8e&Ja  d~a6)fC#:9Æ?1ص<Y-I4}6#G 9nTV:Q re:@e +]Z]&4Ncqlы|Cֱ(Fc!e( vU*<"*>`|vR^bQ+媷r:8^CkKRRǿFHdW>Hnׅ}ʼƇͶJfnH9 h?ܶ=C1}_Υj%/9k56Si|2q8UK/$n5c o:2-pS\1f_MWۀf GRX( zB*Mx<謁>?l_~7C3r-g VFS^PH`b8I  G΢"ώ]KwQe0x3 j (N\:pD__@JvëC8&^fKNT2 >+j_3 ,9K\mpೖtee;%duބ(O=R]HHFm/R吊 C)Ru9IPȻf&R6/2Ct`ۿ"{쵃Wdqÿmy]tCD<[|<p9\Nշ /|jJ &?Xmq158f;Á5p;>Q;7wц5,K1یC"Bݲ{ :&6PZǸ.i vB Vig1Aj\-yNkFKrzS3(Ⱗ%=rt\nW=".$;[?"(=]ql/A\8|<;nO5C dVΤb'k$dt F j0ӟ|ȲڵaRs1Xҝ 1/ {>\ш026PIYp9๴t}JYuʏ s.LYgX+z+ 3Ιl"1.=J,>JZ61SXȶΘmhq޲Gr͎˿bopV*-wd)պ~hU?sNyo#]`gj3fr@EWBG4: 9ZoyT~=DD!5\}]la eշLb0ԓ)S7漯bV@c޴7E Kλ;ez*қorh6Kcҳ=yO7d 2a _~m A?C@G6mh}%6JWLH8X8d4GM̢kiۻkrL1v@rK-u?FܼPɽhOx 7ZJK;kw+Axj)5աذ2,Y9,p;SfI4^h3YgvKoȸgb>WD6W5ָԽd"߅7^ĂVV &QȮw;<ҍ=@ x3Z.ZU1jgⷯ<:թe=E 4-20{uD7bǀ-%J .Y%%zbjZ2J5l`uBV ȶS2Q}3.YAXXZ,aWPD`nSւ5| G.`;Kus|"׷eh&jGedKM(V_p޶%c./"*\M Q3rB؛l2gc~M Ǯ@r/z0?DyCgxfxbcL8+sX s>D-7rp:] ʁVפ 1JLw/iՀ@&H1LIJzHK<+tSCHgjdbi/] Ns^ *77:>byd uoO$-Cn\6)[|z᳃Ma#+Ax1; ?hlA)yKb[_X*4I_8#=Φ"1iTc( k["#G2-G$uR%Y[e=MHc ʥi^]#B+vv>Tq@tI(ʱhDܣeNO[~hռLeer1š8ōWI)t@foI;н]M!A|?5T^X+ztx!YX{G..$<tjWGtM}ifCŎ$6ii&ʽAYv }5H"25&)k-^P#A6 ;vH $x7>dh]RXU,n~R>&WyZ_$l#^:?Cќ%pu+D#"ܒcUd9* auNȺ 7 6ZЫRAzkw,7‡د4pzezy@;gټP=^dX\ P~FM˻!8%p<4r"3z<`_FGrRYgfof(Py[w=tf <>(wC^dN(1:=~{J=eR%)ǻ!J032(AKH;E$7;&o3).Sg[fEPMXwʞwnJ]Yb?Q' P;0'rqTS$LQeykHA * S& uw+(X: U;7"O4 e+79q~O*?&D~'j:&3~l~A @cȤi!~.+ ;΢ 凊{4 tN/фd;kS-EJ@K›h@V׳(ATrKۖA|NIˀ*D+(Tm,^dNUT ")rc o(v b7/PDz( .7,zRoMޙ7;|kMXJpĶ+Fbd3toh[v6O@ xMZXh $_f:7ba*o '&$HD'V@Zt6^S 2򷛙*+S'x8e`ԽFO2:"4Iaoߝ~Ʌ ݿ `K"W(^9^55aA̖τi/ `%&D:"֗07 KJN-;| Zko|3 `qUyV'gsgsa:rb4_?ipu]ʻ?A_2fUg4lv ~$$*0"Yd&Йcf1)tꣾȌڝNspq eNgY+[d[!v@kl66|1cN{hӜV!ۆ.tFZYb[{`&HBdLh:p$dٜ:/_Y0DSt6g A 0="mrim=5NĄA|Mi7y@hRt޻&`꫋-z8åc]8w`B@ wCsbON0-b2ޠ"9ɯS CTȗaAr9 7nZjO;ݣī`i6F\ oKߜի7 ?0ևU*2n܊Yn!W5 N\\Rz\-HWbS"kG&ctl ܚܮa*$nz.}ᒠ5(嬛Fm q27>a芆հy 3x!1w[}P'Sv1fA6`2?aO0&Wz~!t}^lȗ,BE4P> f-©=X< _SаSyVS $ax;*Ӏ@bIF梁 z{UP.KyMx٧dx]]FǴhG>.{є3w9#/56x7@|`B baEJ u#S%^mPn(XgK]'C,ɽdV ֞LH==HJr oR?s:209$Q]2+p~jS#n`+es.}= oeXX9r* @5%ylXPːԥܑtӹP_ O/dZi^K泥T 4*44*O)Vh2,PDSWlw**@bI~"떙t+;b=uxϏCS4)#u.HZ;Yr巷h+E.9YkU"zl$nBB7?q8bᗇ'`;6{ѶQ,bg ZF71Js75uۢhuEDA&r)I1;43`)ökonbV6XKM^@sn3RUњU|#W}fx`X s^4"ߘiz2%0lGPemewWiH^8{9O$FQ{1RʚuLspE0֭\:wpU*y%`v4/B'g-%"+'ris0joXb/puLzwG!x^"A09+/g$B*#caf[րsi>o<P(.BoD_^IڢU ],4s3̑g;v}6k/35cOFE2L+s3~>xevs2(JSKV%¼cޣڳ &KXiS <52OsxȽrÛELE>,l~Y~D|6>m"&n/6^wF)>qy?i[Fs@D8G,ŕyq|֮8I# + mis1iOnzf; x9;h7o5NiBeVg0S?y%]0_bE #JFpWuV빃Zv(3[OUn؊m%< w^4$+ٛV ”[ o|$Yd{ȁ6&?$b:t-Q!N ,{ )Z,5%vxj.({gVҰ@lZu'hLlÏPH6m@PtU:eONJٯ+j7F6)FwbѱEq-}YQDTJ`.ޖ,k̖)!r(K95!ԙ:Xb]p{rYVg$j@NaLR< Sn: M7}vKߩSNuښ5ê8ry$ũe#PɇzC21(fM8u-Fq7;:W\ iCSmܝK ?a-{b7@T&bŚc(tz$-"ḿovːRC,4]̆9k'e}x{B6nLK"I=rkV2Bj+M}Gw.nӎN 7EsO"R)>G> ST!S:hSeA@~KIbѕzԑ7jx,{ਞb< 7lal !jЩ,tD!d}zsV|5E8J06߯yoW `*mWcںDΕR2`z]9Se .w"5PdjEL`ԲoH:|kozT7 ("b3OmAf™~{0ƭUPfTT]§h*pI(.ĥ@x6ԑ\w_YLwmA &+I;P%J+z| DT78nݪԨ?˝;/CJW DWSg4*-IPp8q{xzM''1&pTA-^0~jNAu_?ɁhFM7WϨ,j{8 3^p&aRQH ZGd4<5͊`2>iM,&G߀Dm;9:j>HCJc9 1*;oz{ \EhE"o3@x#ÇYIyg_ǀ6lRņ}:6{;/z-6v0"0 `}CCB&8YK,ȇLk(3F0M /0\HQ5WA#gK-Oz슕3xW5 n׆3WuKv:jxY~dɡFaN;"ۂ8~m&5l2%b/X์4 ^sA4ϯ6@1a8?g $i$˃ Ѫ$^ުc}2y90<,Fl=iUb)%faW-L+Ŝ3 鯌k.ݹ;ϧAcN\QE:ᢃO2fj'BAJFn$GhANDA8œ99as>D:Q{p]FZtRaj`VSB$u0˩r vO^;r4zSb p5I-+SeEOwn:ccFۆic: ]wnu9_k {=$w䛗FƾAmL̂slzf)`=Up9XUG#W{?@o#KZ͒Sڻ?8Y?an2|: OXYQbaR'o),kްs|L+Pg0㇂^\`(?26/R!g4e Kros(L)'Vt_n9s]芰TȞ+`ON)>$;^: FAs3C]kFK}岛\ I3{;^ZfP'6@^@ճʪ#ZFNOģ5Ƥx::=qt m ~b)s9 4R$2bRQ}(u]gzTd7K9q8"߿w ~=һD XaxM#AP{ ەK+`bEBO|EAit) Cqbl_HHC&O6wbJ'CIqebΊeo[ ߛ4,)Vo'sw9 _D1 'rD`|(BTpGu|!!_ߧ5 &4,t(Ad(DH.NGr*N=,ћBiӭxQ藲#Ww6J|@ 䓐~l}iz62$nv9ԏ\BL]60ЧJNNdߋ"N@8e3=Jv*7R7XBzC@3]b/&۶*č=z` vԼ8=CMxlv9>;H*o!uIm16ػF|4@i1~!0됂Q:^:_V/o% "C}[(LV^xcڟ ( 5Nd~0$.N*&v 2a5EI&V3@Emc:p3k:tMt~!3گ8x7]f8>CrxP V쟡}wPa7ʬB$ I@p-/jeyhtcnY/YOEd%ѰRRm6y :ȴ߲Il|I 0?SIa #-/)g&@`ޖr8i&5@boԓkڗ@zn/}[|8٨7GlJ(]l6 H$ړ2htA4Rp"M$-V'ϭ"=X(*pB ;/N+U96J_\?9̸ek3,=fPӿYpq~,x8L^':k e]uCM {EehCxpJ`䟜 2V;٦#,LkƗR'uފ0Cco>P8aߙGS H_3Yn !,-pךڭ߯^4pC0d]CXS|nCvT]ơޡ;yWDA=/p dib_ QdPHpD\\؋H.5JͷqGjy}na5.и$~dݩYB856ںAP?YR0k W~bTn^SLv`&^;,Z\ ?;"$ԉL-VE$u;oEUF&1*!G9a .swg lBa2 Zɘ: ])&*;O#RQf,#H!$ ^oS08*y,!/vCm( 'rK$0|͹Nܬ VOZ1L,{#j =.SUF%:> 7?lYseVqYvwwS)GJޅivE@{N?1|:͢XkjQۊi=_>Yw#[ˎBTt_Y~R` {J]/ 鄤;:eΐxLfcMc651hK*vH Q32Yن!F>8,@k}_$Z:&@εݑiQ<Fnag%*e3؁ 5Fjp@9!L23ZΪ)}C=vz]Ny6_9Zp#,WG2.̈h9v <>CG3VoXmGLHcыHoRu=*z+gEQHᐩ!ʵr+n4CF6ACG k ùy%0ΘY]xvk|2;ƒdBΜyrTu3x)IfN>X4`~^$^R1!Caj݈_1F% le}E!esϳI6Pe@c\M m.Yӻ$ui?\$PԋM3Va6j(__+IE!Z> gŎͨV$fbWYCyd9758]KI[A͎;p wGฉ\gyz֘pA 99,53L(E'@n XNLlQ_n ̩ L0 ڵfk/̹|Yd:wp%`E, I̘ jtO|ոf.)]UCyRd%aqEHWDbBpcJX)|}D1O4uO&@]C[L(C'c.DT{Ó-|=F-'7rĮmozZ׹e]JN;9,ҨC} /OͭLA/9)q @mT_ lLDx N@keN+/4ʴ+gY`] TKǕ Ǜܺ$[R#H }E4ial/h):Ֆ':?hR/<E+n*հʡX|*jIP5L]>vZx=5saHM!G<'\ɺ :̠Wx!iF&NXǪΑW5U螋RzHp_-f EnIh*`i馸oXSTYt-1lzK苡jV&WuO:l '&TM)C@#3!eKZuE 'pMѭ~Uրpkp8UZ?IDQX[:RD%KJP[z8~.Jz[he@i[h<hƘzʢ2~u([05:cMpC%"4Ƴpg\Q-0Ns1.ǺBhQ V]cD͈Vj'hxAQ'n`Bg"Y>"-&[k()wTaqC[<(nSi*q.a‹C">~H-#}nvXx}?:I4|Dt`.I?mȝK|u JO 1뇏yHrc>G~joxY`D omļI}~a&EUwGu-Qo>[0B_|PZg _:0\Мh+B}OcK q9_Dũ!P/ܹ&mh'u\u%)3aB~ 1i)i(\@fJvpL.]Ré4LmFšZ1>2L!Ay ^G/z2֙7tĤg~ K {d,Z&vm[n%r7OZyB(hlEs~W ZSeP=.iDLlrjъHA]s-BPJP%wD6L4jITT4)l "Mh{}c¤{:u !'>Q[s#VEq~pnc8 ,OQL+xKUC%nO &m)<W'oQ#Hy]yb2k%72EIUL̝j#9~݂߬Y@MGj؉ń3'ױKUkeLWvɶ@ذ hO{qx\%(^ #KXZsa1Ð%}ČХʗ j|^c筇r6mkd#1A-qGFs_@R G=uGݬ| .Ns$dݑIx ҃4ϲiq{Ə^ԙ1щ=p`)b~?9LҳU6qS}eeZGVCĤ# 'r1d2x(P2dyN߼QȤCuA^ ٵj5cL"@LWy[](\7TFї3J[\?z8ɾy]H>USn9ֻHg@5!6!_"<^\S&(v~v=$ƶl̙a&jCy3ycKBP?6j倦קS]O:RV[-}=[ea@'+_Qp:lyybŤkGwZY33dJN3EUD,t/i4]+be JI(jw׻ p'ꕻD 5:f3dɞ6ylJ.M",\/ -Bj.v졭AFa4t $~[[ wate /۰{Obv7Ye4>xֵDW"+;CsQqPXu-'JY18soD2jbs.Ô4#xZo ~Å%mBd-hΟE3QV޽Wt?sƲ/4n19ѮεEēlE 7f"v89}'Z-Vr?\ooWKRrXHA4_ 5yPQC5pk?pe1 ޼GpJZՌLz\`lY1¯B#H\ʹ(zD}DV4Fl:ތQjrO C'qM_ŨjZBb*0Φzgg&+. MXnY^3|`hQ{qQ#oU0QL˃{ۢv#&Y5aS+*黿qt)و>D৘ {8u4!}(dn3ˮ@9iHDAz\/WOK)C7n Z4#Ny,/Խ<> `½w`*=ذX=褐ug+)Iu(|+i:aQCъ.UmT?9~=ϡPu [e(+GӮShO[gnrs+գį3mVf~pc_qZA\@dѥq-=f+2F"+/ᐟf ucGr{,*MqЎ+֍<*GǜNރU!AB6nZޕ3nrc”nxxz;7u^&}e;aGn.J&Xi_w~q=vp2vtS43@EjO;P!B㦢M&ѽ rfXHOp#{W?ouͻp WE%ۦeN6O2]GRU_&UJי8\ɴ-嵣S]Ig,T6K`ÊbdZOiIisL)F've" OBEJAR F\:֐7(uHA_ƁQԵ?"No㐪[QJM҄o+ hTc^~4 C?Ю掠`=[2-R9MH;7 Vh]SS)~M8v h37qnHmyqy#e;>󀹾^%.ucPXq:r_IO@ASі`пIV'c%⇪10}=vuȘAñr;z8'CZVSx.v GǸ66++w4ڃA\a靐[?`;FB1N2L>#Ciq!ǺW_fے3*ppeH]/)٭8f"XoсK6yvH)R:S:VoU?r"<8O^E@ > iԆ+1=7,S.bu6iGIW_Q.1lU2cfىI9'KK+E[{A`.3Jq5!N:>uWy@N*ʅ+L+8*44dZ?pi4G<$ku~/$src]+|Xuh.‰X[]O&[K{oH7hYY\)\c8$ڨ?N>> h<[zd>y4Mc'5`d^e9>rdCo vLI=<# gA^\gs0mg[4;2'14J-܇n=~ {3=p7/-{Y-;aZ1MmH<򉇨taqu4_27'xxD$h4k:@(gm[ט?PVJ " O$s:^Iy#KӃ_0V60gҵ<7ϬQAG·ON$Tiyd b4<03|/H9UF=݊I uK6%cH́"-q:UOᶖB'1K&Lk:ްX@jB?ÚH3n" U^JPI'w ٿFRrFxtdFGuCFj~c=b?°mH |i$ K~}*ؾӮ^_W$MA/QbgFژߴi+};E~ Oqե }>+"I`n[Bjms l QwXXLAؚ*(Vr;ߢ}9 Ԡ95ɦJF`ل`9M4ğPoq-T_i1$zyVwcJHO#\q:i|ZmŪM_$Vdy=~8Hą׷{ٸgǰ,c,*x5CDO^"7OXkÝ Y* xOO͋6oժ6ܹvqW䏟0AW :)kq$iBcYUG/RU *̐5u1>6og=i3YޭHNxg6 {)NIBF(T|[M0jItxmġq{\=&-e>_^(6Q5~ HæݺɈ(!󂋢+Ae/I; 8^HrL򫳃|NI ӪP,-|^&(H5!$mtgٝ*P. q7F$Y z >YļX6٨*Fx0(P{W#o+h`o M\Wua- &$SicuDG([Ԉ ?BOB37znU( &"It^#)&*B7\9glx0íq-J bs$3QD5hpaH}Yk^+DǴ׃Èi%-% {192 XüXMp&L&vQI46% "P "MmqvR_YAA]F\E bļYi>!UY>B >Qո:66&Z/q-ɺY޷U򹡎!H`Q٘0ߡ$VE{y'r)ǯ;AgL-2Jgp CYRI!iiӷx#xW+j$17yԬrԈL<8R]f`MUqy}R?OϨ\nj׽7Vj~V& !S5-հE>Un8FeczWK`)6~{Tm>4 \5(B"\CTOkp?Qp`ܵް9uI"Nu}_5uڅ>fNm~Cp"˖_ q+8 ./8$:4P.Flh d݌HoK6,)N/7#VcS4)|00&߈JzdL:\N/~"B,9YWnѦ450vȺIkZX4tYMpX% 1.5d>]j=Ɏ(*1H:B1bf~wJ66M-'uX%œ*$Db" -:TH,FS&Rr[(*+;~jP->Ϟ :b#TeyqJ3![ؖ: d,Vs<3g[ͰGCJU=?ӳ(KKPoB"II{2n˪T3&U 0. !e„*š [v> _ޣX~Bv7rv,^˫`3P3aPꇈOXWRM `$q8sAyn$ֈ/e a{iOMFxGOhЄ850Iٺ4~"֓<&J~3?IqPljX&;?&9D=] +șܨlÜBO1#v2 m>B;L@sWe't!8n޴UƟ"аwwK0f!^~ĽQ`:4wr8/^u,Ь㊳ +{'x85S v*Ěb(Vu6eW#O1RU D$Ai*"pvߑTKBZX*+F9MQba;Xwu<[g7XSxl &SMٽ{Yxv#KqHæȳ4~BmYc`nۆ mFU{ox㊛o-(آ_k:*oɢZLA3"}31^ݙ;Ʊ ' ~B,K"2wU?tyDO?[%)<s@еiNiv/s%ܞ+E94۸: `478ҧ̝و=xkm k'n͔9 54IZ Gp>dMebt9jѿZcmSm@rF }MP($sI  T_ȏ*#Gx2?6,q_!h}p|ŰYQ2[ Kt]|Y]r7C??& DWȩ?,# ˿/=zb("yo Bwb\{n`uS`aQU!N/ѧ^$Pj@2(|9쮳!]nsRs⼈h]U !OMTVNDw G 妦:SZ(JmjA:8 V%}w,HHX>ӥSpYڣk;%g"J|((5twq`C^*<7z"S?hʔYXPme)/t.=_\7|R R155o%Mɨ ?eI2NJ-.>Sݣα.JɝsNKyTGg5D{+34QX*">ISW{l/6r<-ՄXIفWN7T$j)bT_ࣃ{]FVѱe}&Ehn@-?_]/q*gQw1J/-C^ 3˝ Cp; ^-āuʹwDُLr E6rhƶ)Pi4}2?3? {M7w%9K8Fd.iF&śuu0i'DШz`;\j 4PJ8#Žy>3җaGsmoZhۼ8*z1 +?ж zf e9B( ^[50o]Y2m+JskSS{W>c#᏶HB+G( _E"%6BQNjeTE'7VHnZ2]zvr43SQژRqlqD["i3/i Z$2PbG9B|fTysohJI4By.ҳDx*Ob:_Fk0y&[>q>R ڽN)kx'XCF5_TzLFh{$ W?Gse@){ciX= IBzao(V_l^@HB)u ?p=1"> Q$TrmtNdak9'.FՔ|G$i&WmP$_M9E2}VBI{f-,aꠧwISW¦J"e9*GV$ S#_W4li`^i x<2DB^ÓI]V{#>.xh=ʷDy0*PՊ`:Rփn-vj+܃źG@+srܐ5dJ"8,tna<)׍7V9`4?7cMY#vȲozW 5/S։,U|vr =u[)aŪ}Co{h C9ҥHmio,+pPUC/Ip!'gPɄc^xSy^P?"r|@2)AWj1}>2D5!Ie;O8#S:Ob({L(4c;8as7񾦊 Yoi{{isv`n0DA03<6MCIg}r >sM@rt5w}H%U!a~p50jveluf-P< /vjasLfs1[e>lH0Iqi}qHQFt%Ts4T|ENEf>]~ Q)5j#@16^k)q-8ɪ(r*CĄKÁ|Z=%laGlJCec=5@ `ՁR*t=DH?M5:80AGLþW!AX.6*TS䥩{J;'vkc\6íq|ĭ` |I %aC*~gw-ێkxǾgo'K>Ni8/A"d "w#VF?֠f]̥*&8^ RI$k\υWnZA pזJڤWwe",9KiY N;% A5|cuj^wQ}MeR2?OehՀKkn?}% ȫ%o@n3G@pw zg5wk|w׽z,|4O@ei {MKP$1Y9ƛ;3Z V4'WGh,_s9+C3tuqW]Cpc%7u$J6UzeN1tM~+ y)dr#hSݗ)wJcu<]38av@I f&~2Cd}fF$JZ N:XWwT[}:NvUrJ}+0>pM=BWg 2zTMDr`yU+0a=n\X1\٘!vf2b !jws&7ڇ=d.]܌Y#%wJ }{&(H>Gt?߶}X,bn~JO-\ jS>y˒>.Fb=N DHi=B9*աz#ulrL SE:Js٢&3"l@Y?i3h+>){ .veQL@ÆbN5CߵP5~oaY2yy܇]XKp= &1FHAPP`p s "$(mŔJVR90L CmKxeLIc^|SwAc #|Ψȁ ?Et2k;#L-G<($w܃5TZ:ܕco8xo)H>V 8+f@%v$<'tX3U<>0EPOh]rZ-5Ċq^R"A`!Wmѧo̵LgC?FZSKz` W4J棿!Nl}ѭ.o3DKobO"+(w{Ӱbh)mSiHVW\92B˫Z@_ uV*8jxyx yUY @q'`p싽j诇G΀dНMmyHڋ KNJqQД򒈅>}БGp"jks74G[|t/\`t"VJy;P%:!aҙ n$ Vk O ; <]Jŭw&i6$V]:ӵ`vimHf)n F]dNɃD}xնggEAlѴXDYw7k%ujbhA9QIp^n>&FxbrfCSұ"/ݚ ]d*Y_LYI #_5F¥\1t[D'KGCnd0WjZW+Vή\'sULLf F"e)D,[a\9N bϽ{w Ѯ61 7ɝQ 6.>c33 3guק'k"Rhw?%3ƦS֊7ØB'F[ yp'ҩ_h| x"ɍQ"=LßKa=ՠvIqk˔wrQ¯4.A>w lsBH72odlqBuhI`/ts/}C1fх|t%!vt“@ Pd@W*Ooז%K`ܖTƸu~ˈA MVzAU(dNlcNyF]Qi$g9gKߗ5ѹYIYtSYS%\C+p50~/74u6iTW,i!!wIxIbdDLlH$$.C"Y?+ - Grl]_Hal!rc_K !aak X[qAllT/I-u~`rwLU_88AAN)ͺӐdo +wVfO!jk) dl7Ǜ#C],ZN}i/#uI 46+;6쀖6g)bta$!r/`'&JbQlqy]յADœEq+ _eВ$]W'6%r,2#P!tE+c#-d}&(ny"gH8[C .r%vo^<e{95óIc] bC*nJbFr@&`RƎ U>:H> <@ЍU.ZؓL2a2UBtpt d=?{y>#W>bL}(K㦺}~jUƤʍ&yn*Hٷ3: #Ch ]Vyym.`\C*2À콼 /5+V4,"bΙGqV+'g3KNd]5L kZ#ŮJ]B 4V"ŏ|tu*,{ȧr`i czT(#PXA ˶5 Kc-BStzmĖ^)%?ҁs?V\)A@%eH Vszl|F z9(ƞ%f{(Chku2q @<܎ .r$_NpZYeϬ47'h֦`rb_;ڈ`+-gC{ 86<^&,?"  VP6M!]N+e}wԾUj"S3W6;m=6_28FU<6 C3;1<@~JZθ3ZG7}3ynHߟis2w²ua8UrdDpH>,_נ[߼ LV8)K~;65Zm6'\b}@'IyIf>[Q#`9JYӁgV9(f8p1-s9!RԹl~vp @RH]D[_]Nwdlm+X!jX2xddNp}5^x5AZGl96 (љM x?+':Z) 4S>L mLTkϲ그z[GwL ֎&oNR~p/$8U2Ҍh˴(qMU5q`E yWIvXya6#JG.f3 B~j"i`n ;%URPuW* 9XEf_E%D6z; s}oHaT$64W}f{4qyi`&h8]Wjk3>(e`1s§}" tUSo޶S).c̐)zRa(v)F4n[ D)ߙt+uQW+Z$(_2 QM\;spyŐ]BIBE2xC y/|7Qͣ Sw>6թ"vڐr٥ˣ 6;Id+}t|-E"Y E*1װ%[#%a?4< NBL\p)kլ2$I|n-WN5hvQѮB{FM[EיOoExp ;gCm5s̃9j*V915< a={<(vAtٗčIX3*Zqm6jA΄4!UzjNTޅ|3%W*'HFVv uk# @&vi=sg$NlQGL-ٰ= #zR{ou9_>#zQMMC^S3M|FP봳"dc vW6N\z[kV;Se0|DH랼QKDxg_VR9YϩC KJ)^vw8( tJ$~MXrc˅60FlC!!-{DD,EMlљLj{]+lii$]m+Uy4$qob{huYO+D8aP5 Yuu2ӳyXY2~9-F( -J%;lƛԹ c4}3,u]>=)mBbcfNiJ[dzTf^h-ognS!PZMR>z 9#QphyYۙ9"gt%+-ČI;#u nBl D %vK@"K7ko"leT{ Ev_հ~ g S+76F)gXde6y gE[C(x8$W|M_::(~DR8x^`c'w6rj=_gaM xػ)xTjdUЏ6H)Q ..BŁMڋMO;]+}>B,nF'L#j^M7(fJjd=o"̜ygp%m9@3f_\. kֈILz=βiEIPi!U޻ *q'xoߟ|%D6_#Mo(W9x{` 9Xь mL{!ٟЍbəXw*U.؏L &cӏNT$|? lpՐ`RԳ^ge)KDf'A5BH1Y-d9J1F)6LfAsl\݂)Urƨ(;}>rs`r]ӕί7I#=~*iǠ-rkSO2앋Z?ز'zj;+iy7[e z6aJ lAxqIŁhw-LX-/Xߵng]E6yM$%uslo8{#f$+JTrj&}j AmPjiY{2F=}e֦L'~Jӻ;Q6 u2z )D*q!GoTIق˽؏ ZK;oPZ(4Gaԧa$|S&J#T%D'By߬u'OD[K̴!Eu@v[9Hdj7EkF';>0!o%XZ nhjoQ| 1$k Q-NjiX*O,HF EGO@1)med6*b &—qukes[28wIdo[fF n<9uD(X|U2"g}X@O dqV"{96]omPcr!ӹXDDB&z__9g$|b O؍K]Z~bM_(#M Šy:A{]!)P( ?ZID.vFYEPQ;W_mriiO c "/%Y-PCjMZ@{`U O=d8΀ u eKٿ?i\O|d,q!mFiff6e '}5b(L@4rؑ@$_dU}pI)߽,3< 4k *q}oц&L<5:Irf령$Kɱ׈ DDjnXEe~I\hu4=+TХze*F& $Ā( 2x˯Gd ̜o>Uza,"8=̌>xrg6d4]8͠u/B$jw,her.y'=u)TǼPO IA4IU&oJ-y'97 ZP<|ǚqCnp"asDA,IY\;*,^>y!*0fpu3vO˲-:>ZUD~ 5AW=݃dMfb)k²uy`OOPc dQ*|_z4ہriM_,q{0 k,(.C*% dƘD$H>b!9`3: 8Ej)qAFES ^nwu- l o>uڧ5{e**x=xPGyc*؞ :6D&ƕ&-3]oJ"hB*Ay[Jbő8piTq<4CŻYuTjWOg`]}°]>4H۶iVW7xޢ qYl~XA~/>5Zf$nHp)Gmp_<_xgBllxGZ G;rEhtqi 4k;N럚9o7CwLۂÌ|ŭ{O!'j3RFNI"; Ј%Cu~YycM7e iٲ#ѓZ9)aQh}]jxKJI7$:EVPxEu% u-c)!%n-}VcȊeǬ %=4%FN RkG7QډqI&SpP䇦sg.3qjE[lʟXc譝N[^RR#X?WT ߔIYnJ!|rzsHLcP EdNzf&4yŐin|p[.yAhdK? |) /f݁V%{ZOZ_*"q> ո Q&(ݠ Q?YVq`@#t[p׍;tTQQqQR <щІM{umލbej!u\!I̡ 0MhT_>_wtj g{^~@cLLX2Ӂp+Rϕڳ<Þ st +V)jI 9&GqF(?BɅt%[i[H- <޳BZR⷏txyf.+_iU\d_j+<,Yw4zYpOq35K|w֥E=aܠϪ p:=G#^xTVG!q!aR 0FQ*.}իP+#|.a x}r;*aK\ |OVpS/A@p %֨}'^O\SZgM4'%2%6dBԅC8WKi 7$l{A¹+{G.b43zU.64C R a\Q6w 3/*UȓRXk^sC"[YoT!s9;v/w(}k˖kt1oi8`rdA|أUIF6{{́_%[~"3I*\XE띫DkS2JP3},OkvN/{edJ5!Wu!D.E$AF`S*,|VTҕǔn%CFtɃ L"KS3GF}S[ޛm/xdG (Ʌ5^A$d7\&WuP-CU4PV}ꖮ8NW;<(3+ գe Anash![Uvj<~EF^¨ 1/`H,Lfzmr2>UCCYN^v4TߞTLB"FKP%=/7 ^ C)m:UfſO˖Cc􁡲B?0q jx %GhF&&kq>$DycepkT.N@ILtÅ)qj'x1 Ҝ3ƊD- QJ( c&\#(\Via_nhY3\4]Gr@QH~!pD}vy{Pl`/2b OHIVN:AȊްM#\44'}ɏs[ `9fRi0(?/:Q8./LVT%rW-2`]MYo p6F +ONL^áA4:@:ȵdiBc#Wģ*>rVp}anI9&eLB:.c6ҺXp Z{jqQ3F;/9oiP}e=Xœ`?n,>NOGm6I-)=YؤL~?u}"Ȍԧ yb[)s}a<5dy26978VГ.?0YF5Q&paPUH{t('"'vG !֭Au{>XEk~ʭ^djȽf^[8Ý!nqn2߾ڎb>܁ *}?lh;ON]IP^:b#F!$< wL$PxcV,b؞J\ ENyEnbeWU5qQ : eG">BLN a h`BD/Zj>a&aH,?B\`Ӭ7|!1߯_>M#)KyX3-lȘv+X)L|wxX+kv+%0ق'xHOlp*zTfN )*+=/Q$ȓV\{V.P:@1"RF̊7ko*>b1O E)?^'%Lsm 5by:x#f@OpQpl'?t[2 %3M)FIa/ tʚDC6n+D=0NBmqOjL}C:(o{*[x#J|NO?ې\$ƈ<hu"BOZĠ=*]L06Lo+YU Ӆ.7tlTbָge)]M%0DDp_9qWe]%p9[ {9fE![){u^q;w!5bWt"BMAKT+["@oXtUI)\Olj$eAŇj)r7FkގxeMklIu S὚M_AV޶pJVHyt_7ѽ@,,_ =HNWud\yy)c޿)!ޞF@̳2!3Tz`~h*M8pJ9k3WW;cQr=B8o^N QnEW4"$8#!{]ڒ1)(ziy)u?JW|z3R֍a-S]Y}~`OR"0c\4 >YH &ܦ# B* EXH*1kPKļ EXZ,qHofSˉipp'3(uy7㫎*ٟmKȱԾ # EU*Om T®v|_,1U>S;B/̲$6aFcj@Rf _fM%*@6 !Df ʏKJk[&ij˧~ΘÈJfx.U\4aox)pb i\ޥk$Xp$qNYk}R^aP i26=I&`uUU8mQߛlc`]6$JQ+Ѫ6GL qmER՘MY䘽Ɔken?2F3#9LD$SF`CչG7"؇)sE0WZ #5O_pf-)3(X(oOݳe5UgR@iFO,7y[JFtWMl~\ʗ!:Hz/$> QlN@\uȄ-YLӦ"AKb^8M=pدl|MJq| Vzgפ~s <2.YVaGߦ bmqCJ` F P9KlŽ&2G^Y3U+h1!,*=/?bz ]Dÿ!$LM] M"2~ݨSR[2~$"eT]5 Oa#36wG_'=:UVuC9[["ջcm ~f"yǵUZG}Um 1[o% s{u{td_cB39*EE{)kK7~`iUMZ]#z?Q) EU{2$AU==l(߆aY{7iL E@ɉ9áQߛyպe{eD 0Pf.˿m -kt|y4ٌwݰ\f0+7 ?-׵KH_VI9(hO*E<u=cۺ+6s1^Wd ړ(8Jqlh[ \G;(dM[nzg8ʡ2x%]w ^IkŊMdNTԤ8 LKW:K/^.OoAFщ$ δz MU'+;&9lMs+dUO_7ƭ 3p?S؉*\?3H"9i QpvR/5}.,+'O՚<."2%o/(%~ zr6NkMB~,L(7ճ/TS$==,/ES[:^;-@#$.p;5pNןm֨}XʌEe!gV}.}n ZR՞ I`YcSjj5 {X%~< bVLc'ӉҐej_z^G!7]|ojNy4bBs`jB3},zqG,zlc37 %%-d2^A@W3&5`C Q A6OEaOu> iYs 9ba4Ho=Ab$ x*6Mvµq$]U袗@f\& @u6@#ʂIxur,If΄v.`d@z1<5H0Ma<$ "/ juћ崎4s 8eMKsN:.ڣLi4 k`B ΅dQֱ$۟1|B9x3J}040Sز@Wjĩs>S@z_Xm)'`G7<7YjX)Ss%rϲ-Mia .IV#.s]O%OxӹF$ w.woӖ}t\4]Ma&vnpTj.WWOg)dD5-%rɸ^MӂBCfRAm$J(PqNL?5~(K gF"kx7}vPz ,LOռJDžiODxC3gZ=1N:=s9s_r{jncX *A 2;EIu}okPpoq:~RQ[ |=_\a%)ݨjDoEx ϭpڵ:FU7uL4wy_IF9[Mxܢ맸诋"7.@^N]JC5r_P^2^~sݠ[2:ꀐX]rcٷch|7BU:S_/Vj'08W1{zs/ؘBvd,zIΖ ϢI9i'ݏY( *j̴#|M)+ogz |b3 ./һSS)+ 8+NOXQP)X@{33;%%0m)38a4ܠ@MOCǺu}2M,(wyCrijiGgkwur8Ż 'k)'ńT[Ӻ#7* սz"]/ ,KTڿswb"Hdy" O8% 8HRbTĮf7SF$?49&5۔ohrVH!\) 1K3UfzoMFM4nnQ|I{(Cx4ꄋaʃD>zB eP[hIoá#RWUiP6)*/6;$5g,6gMdEa=%%QF u\y7[ i=Vn/pIFVi-Lރ}g/3 VL ,,żZVРF(1S8U*ou]XC!Mi}Ӻ5"`ml ͥ6?ϝȯvk3z;жXbV7{6A.@yR(@*.  kxkwiXp'?D'mPpd9QS6 ='jl/'x/Mڨ;E4iu\0Q[{jp`1X@%!<!s=Ÿ'ƫq>0i.Aā"H̶ލ;yT F Ĥ"=SC& ¤M+e1 lˮxh _|hF{K&(s;(>&JV ۓ$E*]fWQIF" mb,DsXv.gārػihL od%91mEBR$mߺN}m@yyܗxG*A dȺPL; [TeuEywY|LE?H2ϝlTAMhD_"J+cPP]"$['uAmtM*2T2睤 h3/-1˵2FӛuyB_aƛa^E/+Nul"~E+bx?t6vdH% 蕧yyL>Q e '/Os>~KƓsMb7z0dŖ,bsP4Û*rZ7eJ6zY&'xyAJlu][!(+biaL,*JMx#7{u$Oɋ-ɯ c8sؘ#1j3; e´'a7mɡȣ dfk,UVgP)$VZO‘ uCzYQѫ@U}n[CjoC-,pݱ`)HBp߀8oͣtr+OݼZw0js~Z`?qWEIɄpȑVV8ݟDleV9\zcO \F0CϞ*`L{\pE[Q,~C]%;, Φ/b՜Zs p9 k8:wqmfo"8Z5T~J% ={<bc`$zjׂH|3Xm$fPUFȑy00L'ܠFeH-O:UV-Uvt:ngLux)sob,Eն6\'P>e]Tɇ=@+JlI?s |q ^M`>w V"x sAm8SpgIb ECZ+HsL}՛->&Wjj*W+[XzEn Yغ`9B JfXBF!$$0Uc6tS0cBy04rԫJ(M/moF­ݝA?V[j!D%@XW;Iy,? g70nz#`YHB3!r`Yy?[A0HSm\ kc.Dh=qwZjQ!t`eC5n\2NЏ3otAyK uд>b\UZʜ 5uXn51 = il˭630ڄ \J4/;=9914wZфOՍ?9mP\ >j?}|gOy06M|S_8gҽ6. 녯a؄nH wN =?;^F1H9 ToA*,f]- @m9YͺO=(M>$o7hy _,XL]߰ywEu 4{/mM6ބѺ=[r^1 YȆTO wҘq@`]gL0~@zo#&E>)x75q c514U,*mO,Z${1{5ƞeN''HE-6M*,7iSn/L{d2}'Ndl71"*z K6Ac`~TpHW %x!g2Ӻ䢗ZzOG-:qk< 5a9 yLDZR=j8&De(eN<}a_*֔=Tj?vJs0`G֚3MN`4&KKhP 2wiΕVl^XJN=U*oĬjӏ65(.4Jp*R #>]3>zPNvd'IKŐ;IF_jzlR[1;Hj|OC )=[.VE60N!x2'{@K‡=ASHrY>|Og"2|Kz=b?i<  M!amm^Ixw@qlEٯXQw3_Z\<]+\`X#e$W7p3jF?{RΧt7]irxo3M֧2]V%HeE<ƌxe&~Bl]c )hB[mмbD,_n@2!I(`_i~6/)JMK4ϊ͔rl1rZ?G H~R2S6еdc Z05H1IƼ4V=17')(,HARsnB3Yҍ@u6{c,T߬1@MQKG%9$7T#iuOWt9 jjj:^Ww-i9'PcpYm0.AA}h=̹8o #Dܔ r&LSG2t݄cƓ7o !pwYc7Phʪ*8Tt lb>Ve2x.d=t>+L@ӳ 2i4I{-3n󄗵Cڳ8 &d2ݝ6`()iD"nd8*HZ4tN/Dialp1Hڱ_K bF|6t2"C+М]mW: .˾q`VeSlt j1]<VYM'tɜ^4- D$HGc XIH~3(UR/wGܑ$~&W!]2o͉`WՕr.}g-:uWi/>xB~9RԄqdU{_nGҳf='+A*]lW,6%#{c >2?f{jreCz *ʉk`hb $Qg˾wxDf =7㪆/! sK{7}uL*fYd؟ d vC\`^ygsvO.KDҠw$_2%.rհ˨BLX OAx܊RD&޵s܍ 4 P^7POsM4aLR)8Gf!P2V-{߰PKY:DxK7-> ?SXsA@u`ܬhq[ުr1LlfR!o >m 1n$?kdx&Z-;c1,l"Z j u ~07RY#Hfe@DIb}UB#qp,JA*. n,~-q4q~bJzU)-czLSpGyմ֭BLLMlW&LZ3eW$%@(.NG)^173Lh`]!+^}kד&vy͌R—mM~{Q ^n,#O(`Bf9X}}Ҭ-d4Ƣ n*NOG,R>5J,6ƺOw3i(sEpf4z,q;E*i6{F2Wh;YD׭ڵ=1[cLA-$1Ŗxtx"Bs nh|n,f Q8 c_DF 52`l{(_d3n)ᤅ_OpLRM0 UOA$CT{એNyly`"cncs?3;LbFYMĵY$W;IwSrLUq}Ońjr&hen8e8=LO:aܽyO뾏\ (OGH!2+BRN?HpWNM!L cʇQ{3VAW 颒ۨDv!T (SzTjyou?J`r㡠=pi+FWZJjA0gb>.ʧ\-} *0X.&y֒fw27k^s~0; ,?$]6]u'FxGmu j}LyУ{xU;rhjj0x@цJP-H+݆ZN8=k]p6_ʄvD_nP0ZZT-Nn+hhg(d_HO6 |^T #cmVKQJv 乙PC!|OD}8#?MvJI0 D)AѓߧrVͻp@F+at2wsH7e! bKfy>n|Ơ0^*#fv}IiK=5pIi.WP4=N&QB-9l+'_ )200`۞=On3"VV_cJ9nvpAy8TQiW+Ejr-ގ6Vx LbYm\F4zq;3DǘNibƓzA4Q_hVPḺtT pϠ[2T2oX.\6栻Uque|Y9C[㿅's%؈w4p8#}$3GŌ)쇬3{Nl-3)a*-UkVBxq%aN1-MGfNzW>qqva?0 JEpes :e l7v½ Gai>)'.OE.z/M^T̛)ߩo\@(&;RaEQ@6.'p[3C"'fy J(,py7Sc\3wO쫎 Q1*/^Q!9ǩ׎V'5\ u ˖g L#a|Sgb3{oX)Ӕh0AJf\w1zi8VK Je`C{ lWAud2oATtSq3re#cW\[A q-EgGVҊ%xM;ޞ. ʖ Zفػ ͣ %¥;^@BiɌ{B)T@>R=?+ohЬx_04U[]|h©t%܏uDyH/B&[4!Ui$-' s4pn1F|Q>I.&\b\ Ԧ#A`ݞ٦]"f- i4Ĩ鉐<5T&T'pF+&pr#aŚS*"TQs:\:z;rV B?"骓mx ʥà:+yv"Kd08+&'h/D gXXЭȾpRx=9&!{>j8O 0:&ۈN=J3d'S Ph `4 =KS/>SH*i :V|F[v^Z2^ (;~m}![KS f 8v{'j@y{)YtpvmX c55Ӹy yp0)3P &%4~ͣ6I;UGu& D(nj{(#b6sv/iev߾@D`~9@.U1}fm~GT 23Bɇ?׳WZ \f<[8?}ƫ+js];`5txP!Y6Qla5ѕ.Nvc-R0<-$2Q&#g"&-ͭyuV)&Kc_V`/Ŋm̶U n%脡_X$$knc:$V0 (9 OO])2m@44T7ܖX,22X#q"epwpvWaCZ|Hr~ ɛK2kߩ6ރ&# Zֻu8Nl3GW8~?>r&HRͦ`joXڼ.Tl) c]Wt`  JF6d*Sq3zR_cFuhS9y!)9CEy6B--dhYR5(s%uP*nL 6*/& !ôР:@tw 9⩾2z_MFoa_]b|6jY P\5"F$wlOSc+oOW %I)NUZDִ?/jC3S2gY8SN,SeIA\,QD\ٱ|3;NhLzՄO\襈QP^B ̑74zLԿ*5v6Ձu~y6qIM/!GN%Y$$8(NNXM` Tu/ ŕI*@I|ޭ1}ft#4@nsFr{fxˇ]?Z'K/=nn|Ct9KUR[Hvt8#gX e;zq6t 8yİJE 1.+e6˝}VGǥ4l B% لCU Cv*Nxu$䷉'#QSw'++_GZ@ĻYTϤzSlK.UA&F2um46g zc]ڠ{KӰua+_Y*jBFfϻ5{R6=qxi>o,$I'r X| 2ͮ~E|p$ݞ*KyRZd& o[66)ŰZL[)zh EڅGQN'Nxq}mMmDͦe_d@=A9ĺ4{,#29.ݩ Pan}kdO).PC`zw5 я8-h4Z_;fk1, 뛆]d"0d; s #B7u:2c@jQoK |`hߍ(K[66dB^ ?W]Xm> j*onUj]k ΛBߐ{#\[6r +6Kf*N0 dz7 m'|s{T6ҶFt`vzsћK䳎?X+ӂl熬iu%:AU;+?ሢc"-&iӍֲJ*-05׏aKW7[ˍ ROcyBʧi=QzfYp() R Az[a@^4}5ozqc$z86pz~iM\q9C%he<>t$әHPFg N~9QC4@l?[~yXE5L0Hk>*,hbƚ<\Z4Vfqio%)2?bafhm+aRb/T7KpQMRܩۮ7Tɪ{əc"Ttbg Q;]0UVe6ɕ<~ߢ*ADQVmMIg4[^L>WyxA~4V-4VTaS턿L!S?0@6"dڟ]ht֏H2#i N!JJiN4J~n=?#k=,ͧJ3o6q# ?dg7*WA9c;stR)LfbVG-&hk"F[Hh3s~f0 Z{X]K)5L$7F: <4p;LjZ߶djɝqŒ^ko%\7 Ttc|V]kI)p&@֕$JZm)fpV5*o [~\ހ&} qmiHx9iMV0.\Jjsp >b0cUw)C'zWmގP6:G:6@eNGΌ.O/H.u8nUSvG7}.<|߀%tEm2{lV@X{A/x5u2 lb=| l5|1!ⱉ,Is"EZZHsl4"Њ[ q j[4y!J=/q2n?c1ͻraEW5Ռ,['dģ,cCX+>21֔"5٨{bzAiр)l8>Ye>]Nb(HÙ}B{Gn+ F:r!Y2ӠE?;[-ɑ]~Lq \(_{_@YOic^_Nc&ɭkFW?68ݽN;iPbA g >ĐUKۍU󤣽u,)*>0} ~&"`"|6.8h 4I\ǺBYڌ +&7f<͖*rKߏ]Q%9@ >)g+rCUuD@'~58++,"UN{"3KOM(0"\@$/StR 9ME૭' !KJcv]ݎÁ ,lrQ3Ǫo1LΆOg>BK'4<D婩wozZf(QÞ4(KGɿj] zN5/|2:Tc1'88Ţ:2^z:#B"ńQ鏽*Ȓ_vTte4O|5bbem<Z6Xz`v$\O/DMBvάˬ6>W??% }J5>Y굃Yߘlz3uRݴ~ݬ#l()mBg`4gENyb&݂ɶ$an`.K_Hgob~8ƓI"p77ɋzt GFA"Ԝ[h1jir:.zfl Dzݯwx HlxD:+vI Cl J_7gJwHx%VLH3!'x\R #7QY)F{m rϗdHIa!8+VWdТ(Uwx0.4[aӉA{lz9MC T;a ;(A+M- MQo#,;?Y4cvʜwDj=`gdqh@=P;L˛)_KcFxȆH^UXUnID'GE+BRCT+2E7ދE "R _E&j$o>%*w}Dh Tf  :ΘgZۏsw 8x5aћt S_bZP7ԮwBGk163+錭e\ӫtD ض4 N%)!EeBkZӈP}A͡g t_O<MQKzx՘js&T3'N l9r0/TP#F"@ts6@DMKTb;ܪiAO0,&)`dp4eZSQ Ghő5ԎD5UѩaJf+q`=H6S )jj"Ts |N' J9 rho~eEG +!8:(oODNK\AA+( ri.W@HSƙ|Ah e!L`˞@7ص;PI3W05r7Ry.ru /^ȥ-f%3˕O[bø8~B@07Qo}70MdEV7[D)\ʄ Dj5L)<mJ 7s+LY`c<]:NPQ]gB25xkw#;v6 uV\?-;1{-=C;h]3h*wH7Y<ՙu*v[\׎u$T<$򗂚~ϸ;4 tUFJPsmUMlN,buTgEpj*5YQA{ۗbZH((Ѝ+yٮы7›(`Qy)EOo-`:_t%W&I \qP?+X2Nԕ)~-,FZOJ G nSxCĸw$kb7nucdI,+IC5h0!gځ*[Aj/1cYd&r{ -wb #*"{=CLˣRWhL )p RC4zOR <y]Wjsbh&.$KcD o2 H 𡅧̼;a2S?r~^}Gu&H \DQI#$EMz@1SqRp1 f~DEg,yq`M)1u<7|u2ֱd.yŁl[U0;<ЌR)H[އ'/zZy?}Ҵ*0,N@byЕ)bMɔ$3H?5<&앫 0wq-Z9~Mzah=Gޗ݂ᔐa$=IOs]bo#2 `bPlnv{2i XHz0!,.!gX'RfѸMx̮/L=jUn+)ch)'=0z!% i@h^mv(HA:OGt.OE5G>u g &^\(lx{[.XSy?i|Bwe- b4ZKȉ!Ŗy얞/#>_$rx>mJ[ڽX"z;5m Ɲ!liEңOA-`Smbfvt5  Lbi[nM*Wf~}+HE`ytS}]-3dHn^pS؇NFA9#T?If)I'. hʂ$m§ZR`8";+]S+*vD fW4%'ݣ==@g$پ' ? O_hV}jEs~4UBc s" 2pD4Sr:?c:E,ԑmy,xó}+-3:T~/.˩4E (aQ.U`R= rY Ֆ/Cb_^\n؁=;a'[]!@r^!JڰT+D`Ěq}ۡns 4hGd]w: }H[o!'g9Db?)}g?s$MFcIѸJhcjs` *[aѻr_'=6O5gn0 #f`r+e1/8p} (q=+&WVȽ+`W^uRg3K$QY!Rۜ~ ]e!u }:sc_bq+sƤzp   /JLa^ᎄDLe"O|"Vԃ{w"u$!OW79CWX.= m٭]Px' Eyma0v>uiw\nFp.!uIw0|ƜBp}'tkrݵɰHľ|FgqHWO"|A}L]yIu$ اQ t u9i7ó/Q=UN}d(uw‗Lffwemw[ W>E"ѐ)]RK2YVsL߼78z 8ESZfy p k˜d$(Ewoyެ脽{wILeoJH=M|kOWH]9Y ͇MLa+3J"HM aʇ0iҭ0 mra{E!ڢULhg| J!J "$QJGD{|hzjvz֎LdMK s0PSYӦ_ AB;gERt(yn>|tV,!wټL/S5"MPRkdo䪏51qx%싸2X4m[;<)Xt,Mv xImYrCš̂I-ֹ#j9L`-lVs 3 RJ bFCPdq9S *{Lf68ҀIr xpuԿnf buM|7RhpޠM~CeXSߍaKO9J q!% Kp)5#H|61㾨HUFS R,RT3?d澞hB!iT@:d</R)VLǥO.Y&h x8ҿG^Fu> \>Q-%:b3Ф~gkh9*NWי'їie;@]\R5̲ZC܌3 K5PKn2': !%7x fu *ҥ٨&NJYMI޴^v4g1Fe/sF`KH a{@u6+ b$83n%,Ngv=|Qfq%]6ɿ/O'ݤz`N 6/BjAquOdzaAǖ79F`Tז(IܐMG"?U2z r/50V2D`eWq*nNs<>Fm8u!X$j@[8hrH..Խl>RoٻFx{ G ӱMSS|ܒMIt!wF`m>BIJsAVcr@/sQbb7½eg<ߠM5d}(ΖGƺ策$c4G$haYkPP´270s{r%%T{וwiaNIP)]ثWe&S%H}ayJHīr3x ላwbX ͘q[a~d [صypħlkw3꠮0 |(Ӧ4[bO5r -(i,w7|;M8whx1y&&O){Rc"A<^B \w1`ɝjxbGG_e\_¸!;٭֣ Ÿ_6o}8aT>n׮s-m-LL]OYLK.{|SG0Ic_!p)R4%cY=p8>l\VQO niz\q 5+< {LVD}fBqG7?7 Y]t8g؍=o3OU4T^2tx8L+P.(PwlTγ"YsX}7$U M"I(ϊZ 2Hg :֘u[,o򍬒zܯ;)u`WDǖU4k9"mIL0HKrqϞ.{^%"wHdc0iS}\b#7!:'ӞLe@XU??ʍ&Swzc!*4Oq Z1<om] ?2_o"o{ CW؅gt 댲F#.Y'Fճ߸yj'اzW(B2A-1\%{;?k褄ً8s,>gX w~Q=jLLz|ʟJmAxb " |_nt#.ZxuWw] 7I5`Zk14ū\a6eˈ\󟀜8oa8eg%C'-T4'_ S;:Ÿ$%V?kߞθL'X u7AuO*sA:mb&uV:N󈦏}KDI\SxZF`3Sc`NP>K 4$.:tGWD 7_ slng2gz4b/M'26ClspL<ҍW s7),Iayrs'zB} Tm:S|!e1Hv\ly[//y/tD3l!V$A6.k{ΈS쀕aV**P($0;{b?\ݜ@C) ANq:P>߁ȚU,4 R4t"xb[alE/o?Tq2"!gZireGG>%Af5uuޔ)qtمyMȂfgҢnyQR|JxXw`/ʭRa FELpLfv g^/c7v7;zmlIeߎ3J,!Fq?y\8@(i3C!(72ni_- 9;.3ي//3W!&T,us@e({/vQ"E )9+OZd)Xn,0uJ@ cod>3;`Hei˯ O6RhØk>(7yZ #zY$Kݼ3~T;EX&vs0-~/&7UOVrxpGϸÛ6;`t.>CJOɡX\EL8p9?۽̚}QoM0J&Y{3 |.J;>n;: !HhsCF"64rU99JNz$ ,UzXTX^ly W~6dmft fd$v" 8$.: zj+V@пtn2El;t¸E&fDs:*M6WݵFli_9j$3x })dJJ+Ň{ ҃we""],̅GE jklݶza0);Bbo`ʒVqĨʖk=Kl+<5D$n=0 B("C%)izV n~*_#b d vL' Hm'8\>t[>Xy1XEWGψG8Gq۫YO+,AOds6C}c7;M;u3g۱+7.B_LT>Dx5EH5Bݯ9yK1RpGbMK],]efZx8ɀK 5ثfDB?5ש%ϓy $: ;&v < :g>rBsɅx~+67+[Vz0B\AiReC7>n6񥬼DM~ ^nHo{ +Ξh_#͠}8mzwIK @m`U"{kͼ58@IԠWg~I#G7qzocRBg䋰PJͪG-yBrs:]ÑҜg<,6Af^E^f=/},MK@vpM2{^0E3zY̴/(Y|C ,З8|tXͥTl?h.HeCgA#C>H[֗\cCNvTt5uD7 Zfh OԄ~?ɉ{*,8q}]8JShĊ*ס2cRL vtZ]]KR8ZqZš;%>v,`õ'J|0kE ry|Cy #Z%z./S* rL"cMeqU7) lkR4S#w(3IOHtb._yH^H /:11FbҰIsY6N \y_zi>|y/nSU۬>s־zv`;7r4:ȹG)1X2kڿH]/2-8%W[x Wb'xnU򛈄]:E1W+6زW*CdZfd7=Ug J=VAeStZ*{dt[u Z 6hR%oڂKZ4$)cVy\:yFdˮJK"1Z2nmJôQ,_E$kGPG ]Z+L]Zyq$,1@nRh?a=SjgYgo1~k&6%EFC5-ﻉ&®^s;{W}PGг,F{Җ 3SbyHЈWwNFh G89WzeHā(9&9I:?=ζopǁtXX C?"|Z͟L1i:<W,m!_t2֪P f3x\Lm?eEƎM~B\M-n1h+OE2=rJpfo^Kdr7ل6zB:JiӘ?7!?L"aKPXbyQ=m? #,Qc GM -XhbłfvpIJ 5g*FߩUP|90anxj}4{P4{۵BA|CgXSG3αzzoqH6T>'+%4|vvc;'i!ԵsS+Aß71&~A'ر?TAҸ\ ~}`kR-aL?(T#Rbw4z~FZ5X`K϶r+S\M6Cw)g(Qh zFn_Ht i:3<Z8v*uD*.F7veHV0Lx?T6HK9Yod?=9d U9>YZc ?Dd6bEZz>bڔW.Ĩ9p %'ԆFm"/ҭt5Ui@O;#d  P۝.x$ު fP%Hiw@ h6[Ye]0 Ѩ܅Ղh[zKgh  xR]LZ:[֛J"McNSMA fDG:i#/ .eh4dX񧏞F&|o`]ފ·Z09"m{ثK 3wD-**(д~UaSΎz?AE)o͋D8 WY_ɦ 99ouE6bVRq6*L3M/ȣas6G!s54 rpeɰV-/ѫE[NcA⾌JgهY:2ov}V^%f.<,6)V9j T}q7){FôA\)۸;@_I&yvo@SMX7SJx9ijXDnAƻy\[uoT Sc&xn)~[NE}uװE#$"t088gb5 lV2A/=w6! /";rRޱ(A">E%Ii,0oo8h`gH,EiA!C̑ c3Kh+B#Ӛ$U.,c6a~hС<cT0|+o!*PQtM -k4iⰜ<a.r)7+ *\潜%hSA].a&*X6dwX$PkLIM{g,;#Y@/z-f*z<̿4΍A3&^x/``_U&RTn?_ǵKI)(ka<Fo+NS"lk uQPKy~wv0l ԏTr+XFqxF3-}EzHq>}KvW@!"KV.:M vσm{P*Ybu˳Ǧ-B!Fxd]nQs]4n{pU :A)lyx(%lm? "TWEI %1IdRoSa7zAvҴr[< L] z0% y>Oo#:RlAbh_3ۮ$| ˾ƄkYmjC;ɭ96nfL%$d(9e:.%E9Ush5`W7<ù.EN D} ZhGQY>[Cu 9/V@7AyGhHY,j-u$p}(hmy&&j^+,2ٹ 5'2QZs%_=0ǿbՅ ~zZ"3Ě۰Qp>?.eՌ##%֤,wm/ vHc_mò!d\42"Ŝd>x ;؃ z@Yi-4K Te2#P!Folx1 ܂l$O7IκYN6Tr<, n}Y ~C0_oOVYge;J Ű/j]0,5=Շ>WܵdF :'3PW=&,9A^U՞ mr&1H)DDB9!NM ySUbGShj|IV&򴐡0QMѹMLE 8?L|,ջU<al˂rHhA2uao~A'$ f;A IQBA Hӹww96PLK=i̎MB,:;ts ph:Lc7ZO|Wgs^&)Q6Hs9[B*i|"E^xLu)S-Nb>;l ucfjVoW<ɮOM<4ܴY1mlD-u=̴̖-PKܸ;iEHJ-ȓ6mDkCv㊌M]t0f,;*E?"TO/TّXaFЇHs?qk}G14Ih<|qn&z[8,t6L qa`ÀgyIfywizm?TdX!╌;mBJ!,8ZF_7_+ I$c)1S` ̘Wo3X<{㇄ lPVd60]{Ub~:mqW,=jel*i86cIa%.YGYbĸA^J,(v7;~֚7YK,ԢO8WA`98EO>kRҸpx5¡6Zekffp\蝞AXlg;ANAS&D̜{ >VMh0I5EVL9o`!Htbg"dXͽ]zf|RצonZrv9j?}bϬ΁#ku+v[DM$i[?%y'xuMO #X|8XgUm̑&6T>,-ʋ) gPu4GzLIu<_bpAܭIF`609ӪZC8IE !e-oP/yaoн,rvD"H-A6" M;i)}s:k 7Nz@9̵WW:FHnguS Oc ?=ȒF>}h <tgDAކmo+L[g!"#c ^W $f8ЊnRSq\$.eHQK8.ךMp>mߚ!&{d,3<n<XKݯpVjnGG10{pBR sO#MZB3(6P0j%> 2uk:4e/Vl 2yvߣC!'ʨ6r֡\r_f.i]T?AqusY'_"KSaLo:͌7H~oT|QΆ/S3 зk"k$1Q5vעF6b* bj^K6bI .MC]ƺpl5nI?H4m9ÑtkE Wmׄ$%M:>Ff\i ?=v;XMĥwNoV]kMʎL +o'`ttܠ`7,m Dըqv߯"BeWiJRZKB9E l@Gjr{py0L56PF=`.V%-< ON6ҦV2+cZmQl1_[q:{jFhJ#}iSanXFu&u%}QnC;X XWtw1u;%RH,7 OFK΄F<=V.%0^̚W{\;S0BDzh IQ3E;$}ųfkO|do0Z ؒn x?f8SY# %V G wLt.mn0oԶt*.Lc(7Fg3s6pk,Kd22-eG|,j7/&A{7SyuK&@I/: O{ӧm%Hzx&U i*WTtRHH{2GФ7" S. wA<4׽!t -e1E3@cW,yAZ;qe8lExPdmsYKe 沣mu<ϵ r}>Kj5i|$ uXF&& zl*9Ӻ&b)XkRBي؂g>k9{ѧi?P)P]<9Ռ=NGKf[W]աc𐋾jʩt3cyoOy pX@{mFU .-T  L]* eX(HNiFRIBTf%^GvT=}ҙyd^};5}ǿ&1wȌ$y#l(!Zq}NT3̔C] RT4?IJHzGpdlsI0jlH><00op-8۝[sYTrϒE|XGm/D)"f6~(ތWb70sN/.wW4R6r _j 5 i㌂Æxȓ%0An1tHKghqHɖ_ս^8؟|&o鵞Yo5@ D>(Ge%DO`F9;?{sR&>as q:+)KB?#xȌIKc1rgaKaQ(`?)RtN뮑rkqڇX6\ZH,&-"5ϞX=tjR;AlW ff6#o{V4 w*]]Q@8'Wt( 1EVya?jސkSu5z?.SI@Hò(՞ ԔrF6fb~#Fґ'v: H* ~Oޑ]Ҍ5ҐeCӕ Ha1e}gmc ߽x:NL̉Ѯ:06 SvA1܄lOYesQ&E'HIXJliԅFJD~!c8|{Fnz]1CQ&P"&';1p"L&OWrmߖ^.9Gc֚U4 FƮ5GsqbH||}k*`BUX5м hX~5LKÚOL^-IpmRL=n󫉤:~llLz`ʜ]^wQ&r!MDeȶV;)g6CKݚ%WNvQL=A2/sytOd2ll]BڊO?,ЅS# 7bjm7Ll8K- `lQ cb ݐPRHߴw@5G8)oj1 iȧ_*l.LTaʟRP{ێ(g7g֩ixg84X2 1VMr9p̋k;țQuC7\@V!pslodr+Xwٵ1K  p(l@ ES[XטTP]Inmpi(:ՃA{ed?ok:Ŭ(ߒH4j:ڡ$-A8EuI.Y!2.ZGw&ҁ_ +"ol{- ;+:]0FU9S,:!m=VY .q dGP6XCHM}?/R%0lM7W9LNI}!ZXV O|=딬a҉)f"ƄIQŗhؔ*nk~;A=쐺g0(L)_TFi8ooYd8>n-zWb]X$Ho.=#r\TcEeך.A<LsxWֈ~T+6ք`?]^r0t%#]3ya:ؼl| Iz0&x~;Z$ԗ0@P\RB .t2-c^/ik'X)#db7֕\=-.5/ytS#FqE~W'QTM Zi*bU 2Ҹ H4Oņ^C@~E8uHr,It%":69tA$qPKZWAC.u>.8 pAɅ{SqշEzJ&PwLY2 0})jxtJD F7(=B4FnL9ҟ)3u;OI{EulED, 4@l)R؁l͜iqw||2uEJ/3bOsEQ*9_.ٰ/ %%m)L+m~wY*26ނk -`3om-]wlt>;Nr¨}Ϭ)r8*:͢qq^#u_[sRhJ.\2.%-?O8霘$(#<%B_1}XC=~dqTrљ.㇤&$X]IZ?N=_t#/1R.M)VG wQu%//& PrtͶBԒdsK_ + =y]ѽ1jP_l{sae_A>Fu \f+rPKI.5Z_Oqh!\ V9%;`E̋P,@ mGd6߿º Cd-po#>n&^nyM4R3ER?QH5q{&zIiR4#B9/E@yz:/]CWayj O$ $Wqxc+"q z-qE$i2qyeN跱)`?Ur \: a[KqC dhI#G,n4WZBf8a~`U}Gcs p Љ})x{mRZv+GEAZ4 a= ֵtXPjrێ2GC /]*X_ | I+lK H4 ޮǶ{ /ؗvr)TMCM4ځk_Qf!a)o+r"Bmw&!8sUM8kXqdhsG$ӮCIv׶ BC?>om_(=%,g4nsO7W-PXKJ YWNw3GC )NjT_ʕʯm{Xr"@K]r8!U 'DD{Ѹ .LsǨ!Y04tӳ27R3~ut嗤~yg,k o0NdJ9Dg@׺(aW_RWZ{镢S<e\*U#t`!hK_un"?kK:37ֿm+heۖiӴnN啼CP1|ψ`uDhE.5o}&n>p!rV 3݊ *6O5:ŝ|nsep"-ﭏ'LAu\oZ2B WAct%> SϳOaF ќ'833a( *ZO:jtt27[o/bmca .䚙_bCQTE^y!h!3[˱wa3Kasup@<jp$x4qtYNh6kp3Eb̷762 /LILkk[vE0\c Q"}:_Lfhm=' rÃ6Yvxb85uwkQDLFpdbqPXՂ Kj^:JPCY+~?aBQ^2b`gl87qm3Ғ$+ޕ׷g ݐ96bv3Lp^vVQc[m6aB4l|2R .I?c֧5_&q-".47y_kˡ/c ++j%;9%Nr _ WrD1tkgI@'K+zб&dЩgcꮂ9tQc_G}6<-/Rݍ0'%2A|_ la=9Ieí/:~cx{.{Zb"Bա)0.X= P#A#ϳ':pX!=XH1yɲOl-p̙XM\6.jzG'|tȯSkYCN>X M!պ$r8#K|.sFfSslv;"zU/[FG1= !$X8BYrP8 0@Ǧ>d1k.D5S +R!5f8GE(k۝~'ueLk3Qn͔-+;7WH$W| r:x3eJɀ!wYVXAp@%D‚{b}K".~M,"2b*)aS73^aHrnܬ/ȳ+$hg+DZQqoG _`;)7.׾#hl0YC+~9-W Z&h1HO!0"4n=yc )fO}XsB"-Eթpơ\ -۸2_9>4/*fա`c3ێ;ΦCк(\rY^&0B+mCgiv;TZD10cqOXaR9q*7'zi"-fw}^Q3D@"'ytt GoW7wq<=; @ʢmԤYEf@R\WS"F>EV;c_cІ4Ra]%$U3"<ƜLIÞMK\`)1wuR bsTiܒjY:ؑTMjp't";9DgRk[.[٣5,b5v{ 9\X_Ƃ|y'1-JTߎcdhc/|pRe(蠫h@Ot)?Z-J&VkUmWbs9.%VOI6u$M$4ck#+6ZN+0Z7K‡udLjb=7\Js#$pŵS^ZoCg!70s]eWm0RjvZ|;V;Y-81NȂBi1Q#ҙgꝫyU]>?ͦ4E3\&q( T"4cܖDRMwu]wjln}s8ZtRIAbVϵ6wR(L%uspi;B{uB$Q4Իѧ߅˄0Ŏ#ɢsQSZuM.4W:@ÎCP]mdd%{2v f Q/77t[mޞeu_ۚ!xGkbܸc+D!m(NZ ƛ{$`[<\C{o'k5 :Q&llIv3Y<-^uI=G :|WTU#QҺr"N׺4 *,թW}7bvw UP+ߘey;u/-O-ా%,U>j|fF?w>Ğ];O}Cgks=Gt_ȕa+xL;Xm=9u^äIYH^X QCj=!_EG,4w{)u7K1+޺ 1C`bU^]lЁeq--'#Coc29i۫ڔ| .>T-F)nRGwGGTqQb^r6^ʭ袶,4+3Ō$+iZ" I7953Il聭(,{-ϗ]p8s}B2rUGOt{:wBD\d1U|M9 \ |AeV[dcCi1> "2 ΂Md{w$w(yIAh6:{\Fdb7?|@+2 o0;jκߌR8dMf0%ʋMr|uGsS~U$h^,f F GW&!/yVQb~X Db2}2X2CjG&z,c|!M;mi~]`yJfho:8f҂Wr|hcp@\΁i]ܲ/rD{ d6emh,4oLfѷ+_9]m0`_[+gIJiPo4C̗,$㑄黿=Q (TW>Fm!2 }%pLd$i3'<ьr-?쇟>]Ip9wGvx^4OE1ve1tu?) ЬDѯ{-Cj) {1t(f\]Mon|a8- Hu7t0A+ BP l5h{Ɵݣ<,[mr#*ݻ(8\*`:~bE9RT; %`i[aA~NfƼWz(fT=eǨփ_? @1&j!Trzk3CÅԾNԑKgTR]S=ʞ5IE6=PJJ[&+?X3=,\.Y`^<kJb<3P ic}z\yPڈ w\5!'H$(eӲZwAQbGwU #W*㑈$VB}ʼnʩPs|%;Tt9А rUS#i`C[qiQ7}\ٺKUFO.~]qI( 3r9aFxxiW!})+CQ?PϹzRCQO;_*%AKօI1fȷR-{7t+RAw[ZKAHص4=䟯Yl>M u,`'&~9YI/k,~<:>E=4N##F;ԕd5Oԃ:#U6c(\sKf' QnL­:~.F ;la SYL&yAS}GtB57 sӃi~kEr 6m@7ÈUrrm0 l[o˽T.Vq&sBV]?Z C4W£~Qq18`%gy cA9ƑvIhthC`HJ`ݸ 8pJX>;+b31B=0kEwh1=&χAQ9B!LpR#Vy!vF:?pX2P`%s)Nl}%lJjhh\zە܌<-t|8$POmN&٨"h^`pZBSib1ԯ>%ǫ %77j2pM)_qjz\"tsdyG!)ŗ%>3{*kaO5*Q@"]}ҥޒ=ۉ]}Oįƹ=2>zE\wuo2w1Mi^1G5_#_Աd> k9+OYKbof.w}ٺ#|0ϬpM n~~W䔓U]HۧJ; ֓TSDe[ jJc#Ec{>BG+ g!`֎bp,&DIq8r9.!( aVi6ֿ닌 NlKԈmMT*ߠ 6nK+Zzw³lY;qGbvcx32 Wc0澾=N`ceGYLŰ:0a Ut0v! V$dl]H<*wC@okoADvI;)iq W!;'<ywUdtȓe`KN: 7Wj6[U 0=1覄To=5lT6%cn7*n>,CxF| ?HkSݴnߤݩ W2)B]QpO!hd:4.1v)ڿsTU6c+A? H.^w4Yƹxd4Gy)$ƈM2h,cv9+ A dtГS(=WYe4R۵ݲuuO JVsKK5Jr;Y4K}q&hV[ 1_0O0'5qڝ2%Mᆫk(WYElZwGx bpë9$e8KAy8zݯ- qzBP1)G| ?Z)Ƣ3J>XT[/x@P?݄5߆; 3Thߡ: P)Cl|R܆ŜR6_W3 4xsNxJxkloe)E| &-* |hbTpXe9͉>OK̔r(צY<#mh%34/!Сp Dp뼈AG >/9U6ԝˇm]^!t%o,E!iyVoq}Ö_3LZ8TR1O+QP1$J<5{Z:YX<I704]fflNp#T2܅S!WpzTU%X=X$%Hd3<ש|D݄|;"=MR / FSG6ш (Dc"2 UY,(mnɭnw|Bh]g VYE;(~?DY,l[GoщTF xıy@8[ }`doo ; Yb3~}&L=:n)&~jD.W3S#KwxѡO}YQ6x~4҃p;x_]]m s' Qgڵ鯬jA`iu^+hΘ7HWPj&5/#wp63&_)faPBEb` RMSxʙd Xj,Iz>Bi~YLVvcd{#~T1(*; v,>{TY(YPVauSY8l m5؜c%m{ i$Ec=F꯫ 9y(r f=?F%{."ys  g,P >C]avmWMخRNU"}Ne`'NBlL\5Y=/\3sHq2}}[)Wh+zL~}?r?gHrQ≉*.iu4k^@ut9oJ.BKݤGh>#ns;P9Ay<Y}L3u&R ~$bE$X?5² 4h P|7kʰ"hlˆQFC%Y gcNZqW,MhTdC0;zc0Q#zTSg)?}r!wV#?cZՈOkL)7g} suEVMQىW_KEE%~[2qę09AJ8V+/҇H׺%a&{F/(e4KevB*c::+|eKM}F:63$A{>I%Ӕ£W,$dB* ȡOfw|Z3mgm7:ON&RiYqGw-J70TAhgt&;,q6+2 Ek/-CF‡sR#6]t>X^^WDTڠ ʌ 262Tb@*Vu3-֍ЛAp(m:ROV͋zb ;b-8n'd[yKяc$V ۩G99bBcD29LvY[..Juy}~ѐG/MG@U"@L)1a#@ȶF$0 Ӧ(¹a_:ɼ^`@^(lrkݵh~3mFڤ ZB'3~O{8&[_@`] @.UpV|fAr];tZ,JQ<3' )wi j,"un3/m8sFA G,Vqz ?f/|Qgt;ۆjsHM[vFaOy\' uxNQl##3xs}瑜m/GRHHPHDiix#g\T7BGW6&;(`LG-Cl e.uF^'}$T3~?*e|ȯ7lGw'*my<ُOZMݖ31bxP>R۲wSe'<{rkϬ+J@AڕvV@/$.ڡ9#}u |+@ fЖ;0*'~2;JJ#+=f۝ `޷/3Va,U!H5|ˁ Ǹ &w ѫr_'V6 `huG,B0>e(}@gX;IG/\ӺE?ڒ  \q3|n֍4!7S[aCj}k":,,׺(X PI6yBhvY'!* #C&1VC'ќf> 9cnx`l*SojTk({2ֈV*<_[͗© O όDXޝYƑtES5_$-Xv}ezk+M,ŌO1 r0AV]uvnlgM2~yhK;Wxr=wd!JSHኙ/<(- Z IBXA $Rq\/ h ƥ85 L6w L"H`;IC,8OJߢbS u75KS >1682"wŘ3ڲ\YSۺ/S}+Jo_v ;=iBR cG}ʜd;ZÄ+\E=)z 6l4/G8SYYxcdL.D;OhX4p2ʤ/(xw1CAweh\D' g(CID1t5̀}iZA6ΰV;pqͯtǰ} dLGlzXϫ4=GDb1f plWsy&m!HUB.\%v|)f5!w] d*)ʊ.-rICWԂoz|d$L% o Ķ;GXȯβ7ìm|Qw;ΞH@x9Q짟 fW;*`'iDiep{ ;n#]BSȇb@8XH`:{u8Y=}-E,ME=-SZ>u,DoH\oL`*N8{]?%bkvSͮA AqÐ@Xzf×fK8oe3Gގ]u&B˻™1Jڧ]Ԥ2R`4<W|oN3^fqޘ~-vwT˚Ck£t 0"M"D %k9(Zi'g5 Zll* HI@&{F'.DrG%:%\Ѧ\c^`b&Er,7cZW=-Idqx+CS8 94|=8m#*vȹ/I䌑B@2{7Ŏ;HhB^k $긊XڤٳmL1-`2N\_"{/p8OOD<3/Tv,ԩx6ϧ+k\ԫbenPk K_3fe"_z͎*wl϶V1LC1e{(KPxlH6}ŽBuy'i#PkŒM 'Uir>Iu"bzԎWTY lf;G_] %u 5 YQ dҊUx,zS?fxX%)R si=d1ՐJKkprcri-NHke ;-o⶛a LnM&~KMOgQQ^9oQP9|[Ύ-Kieϋ|Z_+2vh qhi0[3<}LP[N x5uO36),Yv. gӍpo.b$pRrgv%ޭ:_1p.SF)q|:$4& "rR`WV!,ߖf<)i9TcUѝCiOA`|CpB֨GDvenX?:+7e2mR:#3vY\#O"n-s܁1ƍU 9chNfAcKNS *>JEGTF#tͿӺj$QRrُؕ@x)B)7ϭMw$݆>qdjvLFM~2J 5MkԪWթ'!:;fnUړ/AFpCe$ l7wjeL̪_ҽB7FcjO;э9|^=؟8RU=xKSO;Z\&Tf۶{&yf1N*ʕmSD*Wۭ,.,ϫ=o:`? IR1J- 6WEx-){kRd-Ήl3 l thjkEÔo%{u+Rg>ǬSg}Zr:"AclZ[ځwgOm߾'Wqume3F;>Mumh#y8r܂T %oX%eOL}Bߗ{(|EBy|;LfMN1`uV+\ nݻ(ux6zwc!=e},`&jBp? ?-a 8s-"7,YR˙Q ν˲=}oQrQ;21j!2!G@L@S8(_l8.Iy.5\YKrE+s"<[{b1}@Y}H]k$=MxDO>ܯ4ǀ;h PvL?zEWibl)C[-cS#o& xf⼷NbjF Q^`BL,X'ry$޽N)1i\&/@qPgg~]W莝XV {5յO=84)2%rYbkO7x{>8ND:ECZOTDφ.dL~ov*DZe!oV("vbǸ%wKɼ**稲ߨG$ĭ%[M6L'oAuvN&V{GkArBhӠ>߇ ,VHn|a#㳝o޽pN"Dr&}~ۤAq-PH\Ob5Y/k4MHXွ/ 9pn#kZPDQP P BvSMܹzq@UF˲L1tLQ&LQq7ԆG.@m:sxHyCyR! =;k*Ea[n2Wbo$AZT'cu,h.ZbyY``Jru=įfK ]Iha3:LY@]uV}ϑ))Q~{VMg#ƦFH)"luvOCs:K6YXL~RJK(.b t3#' KX Aɩ  SA=ET~܄ W: >h_(Q獎Bx2k.Xl)4ILat+8h+Ggoo Nzpq[X3_-m_|nqѐ"&'#h!h0< golaqd[Q|lٖf6 ˿K7$Kd*{~^1 (\%c^ .c7`Gbt9hXAKk+YVަ\8xRTkxP ^+\+Q/'%AfpOC''&JXhhjTؚ~;\]UO3y(sAo'[^Nm,G!Y)8k+_f [֔8hJe.ꃏMaB_}81o | 6,FU%ɌMSscwmJ86ۮs\{χ{rwģ]2: w16dn%@N]3j&čkx6.ЗG|jsnk ovQ|~0HҐ<{$qj[ËɖuQ &vK#=EU4e[.:IȄޭNTPuXi@Xc5&|c8(^z<s&yAG #xPn:Rs?ddMZdm#4// N LnM,B|KaB8][Stz3p*:)KN R ΁Gy1$Uu벚ՁcVb0=IW=[OIna!~]Ȋ4P54<jی>#(Ye`;<Ϛ\ RdCCr7DDx?I_ko;}xBsIP54y+H+r_0e ҄Sa7έb "K'SiDPG&C^;so kxmTjLS4Q,"t3 1PfCHuŶ]!c-duԗyN\]Dtvepq_h $;] (C1c{,_31.:8臤%`oĹ:|5.;SnJ>c9ޜ՜7B[T#ԕ,mhP'_](H13NO=B)Xtw.@H!KK_Bo>FwVc$`6v-d͌nN R9p+-M:hPP(nx|(ҳG;OnYNSN\Tњ!TB&sAc,!hz E^[h3)H~Nd3SZH167 62F *1:&bZ>ʲ_RD## 6ZS,"S!XR=f ,1LNw `e@cmm Q?]tJ!dC{)>'^/V~PʣBt_ao@bVAb ASL%z#X PMe=.!dlZM^K@>'閹 "(^)QBYX.sG)/= ~"]-XRI&?%P3㰨Fzl&Yt:T@nQ Y[|WҴSPـ3(j>US;.(9{w^ȹ+:n!}52N"-b'mLrKI y;#e+H86D{\zx-H .ȰMs%k` v\$}Yi7j& +,[ȣTf.HTS*j~:̲@Wm97)8[N@yxFh#|WZPZ=_ .!=yvwoT>i&4~{9wuhLcOR| yYr @,("8M8ϭ_g'mǽ#y@*?X3-YD3 ʙ i ǿU5i8ŠM1:LxTzKf7c|xLŶ'Q洛p2WkU]Soqjg{Y}=#- ADŽ+KNӵA!!hfT?RMC4 jZvjA3Rp86 -ugX)bҒnT6 ;.^m Ìk\uhꎓ݌l*s Q.6O,P5|>,szI !ri<@"ԺMѥ5VqŽSyr<eOW},!uo!/֥#8liKn-na5G! kslV25IZ ˥#l({zkljߥ{pQ~mώt;%!}xE_~c7G2`W .ɤGnu ^ׅQ&lcRo=B)MwK?G[;˴`{:l7ҢV;B4('!2Ygm&j??hrZU lNLe-ty=Nq$d1]&g>dmXJ LQ2 -s'c;Tvɪ gzph.U>@7U0f0бzmEi] ?ORDxܑflϞHKvs%]CMހQQOMLAy:`zNf娸GUNyLIFĘ0"r;/95`ء! qIJ'fd8R/>K0#; |Hg9^z&x 뉉o8X\1 SxkeA"3Pjd1YAeKx99&VAvo, I䋏"ANF6_\Ҋ,c_.E]_㥏µ17Ɓ}{o8K3gLc HS?ۈȱY¹su8@TJUVb5qL$GG̥^\52zE+E"*XNHQO"}do46g2d907 vV3iU+z%{׊ghVum'kc1NVq=vQV,UsPxRݞzm~)p4n.>bn h$.)[,& ;]kWgeL"a>5!>M=/C=oeV.8Zo 䓅~ե>ǃU`;ƶ ׸T悘d~bԱF\0+L#M<ѳrVydLs`OvgYK8'ьex%1\ c*Me[ `t=9O.Qj94x&khO,#U(0^uV7D,G3tGJgKn"}Dj=m$WFAx4;Ȳd5ft(yo}i>$E33i#q[+xpy^qM}nWZrQmq7<Ad'Xs$LnO )9Q.RWz`?; -Fh T:8 -½y#H`"L}tS%M,)d8  CN4:BߤZ4&M#d( #R!\B$Ch!q0P# vK>mAo=V+g}WQJmac[\O-?:.\$ط|rr]_e VrqJ 1Tbv"| qؿb莈.hʼn>On3M }%|JHFB98 fʛ[I$vzPU &b߭nд2SHٖOUՒPQ=N[=JzWYQ>SI)ណŽ&Iŭ Mx t?#m9 &$3I"*qt+C s3r [/d{ 1)il}bձ' JI e"B3M"wｷs܀x5U(-_7gH[PN#Zp7}1-!(Ȁi\  $h<2>קciij"G/AӠr5xܹY&K_vO0`yhuax306~cngRIP7O:?{̫U ثJk ӌ.G(s ls4_*<۽ g{H'C{"lo0Xctp{I_SwT@UdwJ|![{{qTG-,GuX41rkJoX$d8m!.W%7V;_0v}n&&1x]1Liy|6&Ѳ"Y<'vQ& bλ5j(pkHT8i*ag:$XʂD!ho}(E[Ɣyp #[80l ֒=I M1\úr0\{zu2J 5"TwNhѬ$_2Kl #3Ԧ=t[YqVĹn1al~Lzs&DE^`Ƨl~d|ZU93Ъǂ[r7iMUUGG>C gY8F$=& 4FN_aK45ٗe(q48ܭ)d!xDؚq.QK=&ax4kUiXY](7:e8ړvk@YVRd$_TLΏF)@ *4J 5b &5G(ᖋiu3:ޙMײc&5\S} /UJ f\GRѵ x(( 3OJȅK]h}eC9=A{p0nDrV5?f{ĽyZ|h1dD^ QE%'bN Il4V7ʿK䔻fp`|O{ 6{ i L7<YCӱMTLH'ӐvpCZ Ug)Jj:&N AVB)nL#ipC!t}@(SsNP<)KILCjXgMIdg?[_b;Z(KD&/'4)U`WIn+BitV XN}[uotF\v&fɥQ (HBy'ZGO^1p7/6+}筼GJ?O1K')V|4_P_|/gM%w0 +;Ri#'&A41ềfvSȹq䂕P,e:1ZMdMdNH徺x E]%PEUoU*D#X Cna2HSF+V~H}|T KhE( BI@߈|q8(RlvԦ-'[5Ui4Wjeng=7Q'aTq&PxzRog_ʢmOjC0͞I/u; _٘XXE/lXĵ,@iꔏ3<Y^JxJbzF-l_KKAyE #E,^+T(cg{lT8չloO}n\ [ )M}Lä́9EP%]Ǥ ǥ+ZyZ} &Gm9ia^ L0o AsInT(CE!|z-`y큰?*U͖zl[84cPX'pvt`ӹEIjd;lY !Ijθ7hĔsJ!2fѴv bAE[Q27N}1%^w{jib[e BG`e.NP$CcvJɈ"JpN\͖JaC90 ˦2eѷb.=*qv/&~*co!xED"6JVaV<%0*zYgrPy6j,('6ict7IY9=̓u2%DPbIQ$%j( ^b۳f28"5S0ǠuC=8ZPuߨ^gƩpӿYKzH$4Y<uE:^ŋ?5#%P^JOpN8N7NTĄj 2ge&`>}ᷞWy&I4c75{%*:%%Oxd %^ *ŁU vV_.zܶNȰehJ -Ghcy&,ьY@l{cpvy:82^U'}BKD>%ܠeج>i£b8H2B{zn0VakV.):"Fdɼey-B6M4[9, 6ø3NX@O .,/ Rv=P 7GaZ}J&X; vqh <:Oc/ɕGQ$ۈcE:;IxsxvL_Y-'%K G_^<?ހ@%zeɥI#65½_|;p VZpݭ@޹8m0=E3EKKQpEQI?@%wFB62SAo{;g?@ %xXp%hR.kdp3B&D=9 =I~tƒ,U2OkQO4i^SedF1 r/{85mltqK`Bdäo v%;iR `)+"KPb[HF\c\Bz)ZxU'u&Tϔdg9 7lI2`4!)T@K#+gaޕ6s5;B -(|4>ZMk *[?Dƹh=l47t7iZ Sn L ]fۚbfdzL`i<_ jG<^1AU!}f V)lW zYT6/,tmDϔYBuzd |סONnA[-s3`SAOWfxnt,Eޟ(~G(+**M@r\Q';/dO0) uŹV6z+ ٽ}s? GrNS2V^ip ԄƟk3{ 1ih]L+z͎/WZȻ+3XTne8O~;KHEt;.fV=A?KQ( Ϯ6|(VRj\9كݞba8ةW]PKx$S H#G7(?P4,'sB.;6V`_81G-=5Y>7=p\:քV&*}t9_(jD#ԠtɝՂ5 ?ڜe+[U~Ͼٞ _?8(0CIƊ|DEnG!B#~-j4;7SSjXecǎTKʚ$'7- Z*㣱vuXvmkJouy G ;6_͊-XM炀oxc1cjꋛqHZ 4;iqC28, hO[!4'/XJ|sȮHd;: l^_]I`> 8Hfa{8U&5AJ۪;*ΰ4S[7w狯R~ g=8%_&#&LDBAG `3ȿ {i"lBn[T!s_`= fzI't?!slHBab`*_lTKhZ𿏸a1W^@y#F>a&vdBlc_ƒCq6H>vk;+8q0T0+ELO#`e5iV3!y]C6hQg=qWp .\؋)޷{tR,˟PTNS&$2]|7ѭfN)kp+?Dj4XŤoFg1\hl:|beH?[5օ=ʿ ,<^;m ş6e_4t;q1¶]Ic6`3#Jk},[/,(A?vv /,kvZr).~''!%}"Vf "{7HY +ݭr{fCl92zMSk좋tv-Kwh"&qŘʥtpXmb\(8w`\WZZ.*zM{ ѵa l ޚg ]²2TKx6?F}P NMQɑwA8*SgB6LyvD 79S2īq3EpPNT$"=gQӃ`ޟ.Y؉+s"/Ai 2s|B8m3"(֣[Rf |xx/c @iMhqWq5*K"8ڦfU(KyX(VͳMx>Qϴu Mzҳ0V_ƧC9KR\U7[vr{ YB}t wȰ~8ٛ綄j2Q6+ "EJ;; œ9*xߢ#s"+$5#ـ+O--lJ4#H!*'rt vf3O >B܂M f^TPd"_5 i4"a1~xi; DXC O!\mN)ǿ-O'۵j)6Zk8֓Ipg}SO"mq@gs:sD1˶ x'"k|uX\\u<+BND,(]IDRCߺ -.m†q ^Zy w١ YZ