sssd-ipa-2.9.4-3.el8_10 > 6 6_6 3!pQp)Tξ7]mtZ`f!Nj ]mtZ`{' rMw@`:i?yp-=,@ %}/Dʠ%)^=o?$Q@vg&:8Kѣ M8';ʱ,*Y@jBXӶs&2ּv$NU9u'E[[]_-{MBK*WjZA ^z&w~@0/'#.P(axGa"U\m2A C+\ UWAV—0:T2eH;j:OE+OM-Jaw^RVy.NICDc& A]'*Eze9^zx K}6{6s%k/_/+uNɜ~1lA^ vCr~˃* ߖdXNqu 7Y,S#l@hbေwװ1/۷(1_ OKC'ٹfp˟Z R-0 O)9QB3cf4a598cf50e2e50b6b41b8df66cf4cc10f939991f8e0f50ff5e937b980adf0baa09d6a1843403eed68969bbf085eec71acb38403!pQp)Tξ7]mtZ`f!Nj ]mtZ`~POM-&ge8Rk.%k7&m+obLUXWcul-kWz^1@L}LS| O x ]V_Onb%>"3''(t?"P2zNL2 a`ddV*ch`+ф2 ꩓m}ڝq%*hڿJ* G P直y:|0c`9yVΝw)Ysq[mKnvyBA=|?q^׊ 0Uc^7yַ!nވltDYx˟{ՐpD? d   7 ,IOV$ @ \   <PK|K0K( 89:j=GH IDX\Yh\]^bd eflt0uhvwx8ypOCsssd-ipa2.9.43.el8_10The IPA back end of the SSSDProvides the IPA back end that the SSSD can utilize to fetch identity data from and authenticate against an IPA server.f!;ord1-prod-x86build005.svc.aws.rockylinux.org DKojiRockyGPLv3+infrastructure@rockylinux.orgApplications/Systemhttps://github.com/SSSD/sssdlinuxx86_64getent group sssd >/dev/null || groupadd -r sssd getent passwd sssd >/dev/null || useradd -r -g sssd -d / -s /sbin/nologin -c "User for sssd" sssd(* ~K"U(` O)1AAA큤Af!;f!;f!;f!;f!;f!;f!;e+f!;f!;f!;f!;f!;f!;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../../../../usr/lib64/sssd/libsss_ipa.so../../../../usr/libexec/sssd/selinux_childrootrootrootrootrootrootrootrootrootrootrootrootrootsssdrootrootrootrootrootsssdrootrootrootrootrootrootrootsssdsssd-2.9.4-3.el8_10.src.rpmlibsss_ipa.so()(64bit)sssd-ipasssd-ipa(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ /bin/shlibbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libipa_hbac(x86-64)libipa_hbac.so.0()(64bit)libipa_hbac.so.0(IPA_HBAC_0.0.1)(64bit)libipa_hbac.so.0(IPA_HBAC_0.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libselinux.so.1()(64bit)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_semanage.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.15.0)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libsshadow-utilssssd-commonsssd-common-pacsssd-krb5-common2.9.4-3.el8_102.9.4-3.el8_102.9.4-3.el8_103.0.4-14.6.0-14.0-15.2-14.19.4-3.el82.9.4-3.el8_102.9.4-3.el8_102.9.4-3.el8_10sssd1.10.0-8.beta24.14.3f! @e@e{@eReRd@dd@du@doMdbc&@cR@c|c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.9.4-3Alexey Tikhonov - 2.9.4-2Alexey Tikhonov - 2.9.4-1Alexey Tikhonov - 2.9.3-2Alexey Tikhonov - 2.9.3-1Alexey Tikhonov - 2.9.2-1Alexey Tikhonov - 2.9.1-2Alexey Tikhonov - 2.9.1-1Alexey Tikhonov - 2.9.0-4Alexey Tikhonov - 2.9.0-3Alexey Tikhonov - 2.9.0-1Alexey Tikhonov - 2.8.2-2Alexey Tikhonov - 2.8.2-1Alexey Tikhonov - 2.8.1-1Alexey Tikhonov - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently- Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)- Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'- Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed) - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7 - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable") - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #- Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level. - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh esrusvuk2.9.4-3.el8_102.9.4-3.el8_10 .build-id0da168842f2ff23c9598f88be8ade58a06e48feb9fd415f93e136ed8753125bb46703ca1333830libsss_ipa.soselinux_childsssd-ipaCOPYINGsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzkeytabs/usr/lib//usr/lib/.build-id/bd//usr/lib/.build-id//usr/lib/.build-id/eb//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ipa//usr/share/man/es/man5//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5//var/lib/sss/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bd0da168842f2ff23c9598f88be8ade58a06e48f, strippedsetuid ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=eb9fd415f93e136ed8753125bb46703ca1333830, strippedASCII texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)<<PRRRRR"RR>R?RR;R RRRRRR4RRR R!R(R6RRR.R5RRRR R8R'R$RR R)RIdMøl,.z$( h<4$iaza҉;n}?v+[ڼ2(^^Bm !sП+? gMỹGBUt׿ain,öI nTݞ:o*jPx:'h3c~0lM;Z\J%ꃗ[Tdy1ců1|次1d|WU|}쎖8{Es@/Kc܎E=E!8Y-tQeqbRPITwEBwF~VWOa-~(ӇļY d< \]o!Ta8k=kZcXdf;2}VoS_b YJB-7=e#4|b/@g@eTҚW"T{!sTy:8o߁'n;{Me{ H^]_3Q*(*K.:_Γŕ/`h[*}5iR؁̤i~Gb3E$ .=/@^8GI# x>+z܂yVHZ?A]0A&~x ZW=/&~$mruɰ 00_30)D38z@,$>f<@Gv2/Zj&.dUGx)&EQBl5AL-oIkYe*d}ͻނ8| m@187B<(\Znp 6 sMT74W>_Οf972 $~@\}f:X9ӺFK/"M|ZQ'_%.\3?\w b"dJϼgc|Bk7qv.j<zT,$<䅋{Gpmib!>{f7  s&kLOPpOLN+E&2{ 6T n gSİq->I9N T37;YmzF}]04655+\l%yì0c_AR}F (@ifsdI'hOt^$HkNhFZ.ba҆‡8GLW4M?*&ى8̏>/}>F_Dtf1K>w>2ͷA㬿x i!z1`e wdqOaiaCp#Aש',4` ơ߀q+?U28$?E7cqs9 jQJz [A>1xς|5*u-XsEADe$&(3O%oe@ w`V?\ ys,UU}qk.6V2"W*c*="n:ϼID3̪3!6TYH F T4^U^Q6q?_y =t&^ 0*|Qpjy AkO߮x+/O% ?!ʓ#_ϙ}Ў5\-йJ)ó-zN{'N- EbAT]:8NͧsR++/,T2;(EL}=鶟13 (mȎoG~8b{T56 ׷UYLԝw i.-Zl DiSM* JGO;[tfН_Lp~s3~E)si^iAf<`g0[@25ڃzЗUSE"ԥ]{)m p ~o&M8ȭH?z8' bYV r!+mY8lbZTF* U[JnwK?TI|fU=Qhh;Z҆QuY3x 7ۤ\(~ïk嗰1V$^Nvc; eގsY*h[1k]#uq@y'eNI> ~ 3I3/Ԍ 5^)8L3N_.kvE582s:dބyWE./7 ,6@o]@}l YvY6L!/j:Ab{G sBFy9H`:)U'tyQ';댬hWՔ0FGsgWc_khXd?i%0[dd.hm! F-a2쉔d.3 jMr:yiWt5r2 *-f+^^0h:=˴ M2r!b Zhtnf/p*x:V¢80Uǚci*a(JbCNICu g{u J8#֏l.A^(gƄ,fϏ&M<5x}V"nӈsJ$ׁ4|f^irg22$ ldZWTLrmS{?N fʝIvяN! $H'u{w@F@S=#%1?r?Z0P8  Yfr`7I_ߪA.z[W6vUvG.wS;0t|JX>p 4OR'rĒ:攓˝aQe ee^ gý}h1rDwU;a{TَW :u4;y΄ O1WL+‚U ku/~hyZ6\(s'}!=UZBpT:pͷ$M}k|0e^ %$仝>^AD/̨*k3 _Z3Uˤv~# 7̀P($K'8UD:Ǚ.RQ:tQL>n Ɏʩe.:M A^*u\ @X|!(L =4`ؙńA"`̵!9h;=YY0vw+ی+ٿU;mZ*ΚFɧoER >}QWYxݻ=G?;I36%!cE,Ia9R:XkRl)ώ$OT!6?N$|X6oM}ey3'DNOd~FC)be\Q6d&D5ӈyތ(&z cEpvN%EP>saY༾$(R`XǹAzkVuP2!!O(ؘyD O43T >4Η1]? e :;cjNoiWX_~JH*Sc4F! #_Q)}Wۦ /AyTh%4' ?-пm+# ŇGy @E5Q9d5( u7⃍>_䩗w)n?ʌ ~2DP/ ^G{llys,Y(!YGJ;?{h|zT PC#y dHLXd]4 3ʅ {A$fL4maם vu}M支/AreIBtOňYSOM -$N.f_\6;{DW[8JHNtiV&yY./Aw<&պY"k8+fw 5H Gq#BL7b͢cInB D2P$xqtWN_[OpOwE,I7.![0;ˣ]-,j`p8V 3[9b8ulZYI&˼Ylf5| ,O!A4Y<'YFMlZ?UZӶ{cd$h}cGP (rsՂZL%IAu8 %r 70Ѿ(* ;\i< _ƫw̙EW^1.jֶԍ_d#Dz/7w8Y~/!Zzh~6UI NHj&J*>GGؔNZLVt=c[r>D:jo/x'h߅4 FHzܫ74O# "-b%Zb܊[dzz|jQ /X8ь_𦱲)=Щ9 apO416I>`W.l–'X{l4o;<'J?;5_{ ᤔ3  IL*LjP:\5D<,0MLء΂IN3|W2d<REZ'+byO,4sPoG׷ 5Q[>W'}"9HBL#cpd; 3 M _o %lj}plW^#=&˵ƈ]¥L9K#tA \oͬ?YAmyx A)HaQM !}75|Ò5yCv؇2Nk{IbHV)/$L8 uPel&Qj5aT;L⋕subA;3򅋓Uf`BvTBfn<qL/opץ  }drEi fVD!'^ b؂x'EbCHS1sEh#)#\AdF4LĜF1ǩ$-Hؠ 4MZOfjI&P;*6o42bn WTL`[÷.LHNqWϡ̈3`{ x= 3_5WXS$Ң2C6ږ֚/ E"]ðtE T-d_ES(,SspmpxNT@gD*ov`"T| _O'~8DIDBRShk>5K5ݮHɿkD&@A,SNhxU$fK1R(/**mJFv9u?XWV,IUkX:sS'h=>#YeXٚhI*Od0gͬ 3*yvYК{OVxv ڽ0Ӈ-UX aE3 Z 3B0!B;%l4I' JǼ_&Gת^)SK{3Qƒk:u.KgR6írˡ(&>Zܰߥ4*Utt0k3ł[s=~+^yNI'Z^j•:/|;sk*SW|9mx] m?WPNN7JHj32s@#pRHȚw' O8*~yxAF yse F8BkB ([,ʰϖūK@S<Ƥʹ>)gu0Q7T~d"l~G ZsrO0Qr5Yl$s&G2∷[gʺX¯G /m4?wDV쎖* }ve:ęr=&D13][ wNG-v{Skah;cЯxLOv Of-^ab d1~0M޵=Yvŝ/pD$Jɟe.h#Hay17]ꈟ?r7Eros=T"M Y>I"U7w{\Himb6 [}a=˰9]+ 0?FTuBɖHesΡ=;7r>[,ѽ%4_K/>C x"Hu]()C+{S+[ MP0ջ&X;wBJZGu'ɎKѪdhw. TuM] ZK̶C3N闪H GXלg2SeycjK8E:/`_e69QJ'DW)!ܔ7&mEГ\9޿ Zs.T,Kб2_:oڄ@X爻._ՄG|])KA^55sLJWڻv{ʰ%DN-%]L_.7H(v4zkv72E9pOsLAJ-Ѧ 7)fvbWd*m(| elj.X6OW!rqGtk\/{#8Ӝ$ŅBWp7Eyyj:Ҙ ]{5I 7MڊjaOq:S ̐qB5Wok1J3P8w/-d-ǑVMHk۶҄c-G0w1N6Ͼ-Hj hQ Ojc8@2 74 fer$TV{ֽm PDՖY]6ێzE:WS N{3 {q:cNVn9yׅoG}ppi<0x*vl RpDk}Rv/Izq<g[>Z|9|A-_K#/jܼX|ںY>Vշy.Ã3ߤ&Jt/Dd? =s[,*qV,Hڻ-o8y"+g|v2 +( !Gd cwIE] !DA;m ^% ؾJIglo,!J[g9 4CSNQ҃M]ԋ))!&LOS#%b絺Y{/c w1]#%(ia-p7(j|A5N#=_%^l)29,[ UDtQ`|vC|0r3Q_̩L[E+xRU,N! ׍R>G3ZK2:iї5i\#fL,!]yM/Y)&$v7 }{/gc(N5On8NR}g]* sf%2D\wyDFdC\k泃ϡT2N̵k^ D7v*>^m,ҍt꿁j&s0*?Sl\6p= /Fi2>!G &49ѭ_dDKV F<T V\kn uI6\f[4Ii0%Hm߅rWt[0W3*)/l*!'ØԔKc8{Z!ʄl 2/N vY 1]8X;hẄ́}qߩE ݫBGRޗ'7eiNdt\sJfQYƊd wxr0]`|f>q E|N.]9wSt:JWk$5yaV{*t!7]rBqvHȡ+ y,꺾{&1wVNAl8 {@t;stRQpޠӬⲈ!jqvԥM7fAxmFsWS7G ZYJσSeA:1qeLϥиmGt}*1cG@f.`Bdzwqҡb(r HY=fg` Gak^wyf$Sү*įijfM7 泟HO5QОε USl4,@dW!U Niu My͙۫|j^ל{ۋMC>\ {NXkV@oQ͜TvC QBDzXc dVX-~W@ś.V sZ4pD̷1GރH%ȞWbЋ@ QS1诃m4ji7a/vS(-ٮv [p\h,Ǯ#,XHY/K:z:oHO)s= u Xp1@^ ϟ/ CM9d*zWf'-Gi|b2*e';vHNdDᶧ({w6=vf̓A]9* pbōnذۡ} al kB( s2o,,LS\*E^Zl"J9YQU6SUN8`ʄD:!``bvd1)ID.?D\\iE NDo%1c(U uǻ\a>živE lk.M#&VJHg@FTCU\Zىx&9)Z@>;rַ'7 {HۖĆeB+])Mtwr(V8%dɮBgrݮuՙ[ܝI#z(щ3̇wA%p:8Ikj9u7QU|~~#U_QKBx)}QU]גR YUA x|IZ [ `բhrCQBr8!ȏD'+! D=kT +۵`<Aҿ 'E®B6: g[p|T vغjw!ubHR?;Bk*IUY@ D ui& dE{O^ c7e$lq9&Ԡޥ;v,!̎fLvpVp_29q\{&ޱJe;pIRrFZA_4";.Zg܎l2R 6[\1 U DOFnU( ,IBDPe6,xYYW&)}DXYN'~w>AV|me U(֪UԄkU@ XX8Nwn zJԕm` wuJء,M6f`wYWQ(Xr@b5 :tQ\c o k9%*KFz]q<2AX)_$ŷc维C_^,  4YӇ'w8N4G4˥:&C:gQHtGTG+mղ8;44fc6A˼aƩa#>GV2ZmC%Q'\ɴ8*%V|PъLCzFF7?ξpȹYb7Ĉ˓Gi!Ż/F\gz`/;׉>^ߗ0ֽ зBRZs :.H+=jbRM+weYB?.#C@c="Ik&\r;\M^MqrQ:'ƍ3*\B_Q)*Y  mmm\|2~ ivV0 ,DmuVSǗ'5=h% CR)1(ߝZG tD)o2KOtcaZ8l7¡EIˉ!5;Vg%cDߪp 3Or H݈`:ur:W}LZLU$p]IuֱQg& H9A5O!9tboʗ fUѦਜ਼Avl8# nP?׾˜8`&7eB\u "a C\8qYqyzS_\X. ΢<&]ޯAoEwU11X3(  y\׺ ?Ht @O(;[zb@wBMdm Cg6ɸ:RѦGj=n "݂Րg[\^.U(Z XSяxrGHГЃ|},:/R{NS˞dN!Ҿٕ+(l7 ֲMcZm4WY?Rue&u_Q'k]\d8-8*YH77oўgUpY zob94 H)j3GLUt&E4y2Did Jf4LBtw׀[<\`F20n{(lSuO>4 uٔ/ Ӽvhd?x[ FO(#vylo6Jl>RP%ڸg9,n[D5+҂a&]U3'[G:XٽnO- OV,Q{EǂHi]$b ѠL=+N8zPq(Ktr3~ (~FJJnp^oQN-n0w0yx:SG vdcomVfh͓(^-2\l䔐>1Oj')A8{p^QݡUK<q]UwUs̋mt۶?tAI ;.HL7%? o =]Bbd)i8Q_,P qPI(i.[.>Qj嶴V1i9Q(#|%2t nBO%rVb?P| /a&}5iΆ+p_]ks979(6yL~\hz.(UgƼskq.Ga.`<3uí0Oyp [A9A +C^>u5`b2*-+3C/{rŶ v+ˍO+5o  ?]-7 Xu~@FC b<&!؛о)`!!}5Inu[0PHb!rYzU45/1똔~ c.u0m%DMbP6G%hjS] 0Z &c:>՘ez_HmF-kQbFYVKŶk4p2EqbNљ 9{2׷*CTk=ጂ_΁<^טȸ1dh)M +H297Da6hr6BKǏ VFpu0O] BD?Pmk;FtnG5Z$V[2|-Oeo-*mޝhUi}/Qvb XN:k{7N PPb ,+\`#1dEt?#YvwKWH4txZOddr9' bMW(JO) ϓ|mPzD9,] sjK Edul:k U*ʾ'zJCPRrJGlDAzY33rKgsQZIai!4ݫ!wW]V׻H]8ζRO Wzo_F)"BQ`,%űx#jGCVf+Az5kT(o56) Fe?&p"~a{O&48W'^RP!72휢xA&esLPuH+->k=BueZ7ܷ/~Fo&bT17 1W&@}v33t6co{LM 鹍1|Jο xα*A%%[XLIiZWtԳ=i΢6A_tmVfIl‡I"rwF+>W6pI #iɧe9F$X"1 u@ŊyiI yQ˾%FEk:yT|'Օ -R`CQ+a,l#:`3VP]|z9;l۲oRFaC1Up@)W-~vs<,{~w$W<TqCat8/ĆPGُ> ̹:N0vJiɄY ?/oR77?x%/͚Q=c[ beHJii;k$SG:Ff\* b:.3,\dJ}EYč>Ȑ;KqЁz]Y+z*)VJ2dKct]yy1p^TœA^ϴ78Z}t?xZ1%`h%)hG@_w.x]7'G ]JX73 &zPɑ#Zba;@?}i@Yʺέo >57vgYٞd[dDsZdϥ8̓Ѝw[f|c5u1 L+oe h@Qbf!vcq.AEʠ q٦\it6téh y;|on*b ;d;,ݹBp`OV}T~7B xAAÂ3f2E+%# PRvs A%Pu[a< ޳e/wU{T,1 eJ؟ єבKq=b;?ybdE0p:*lԈ-a{Ǹ9 2LE12sԄQ4nࠦKWRRH7ZeVa:K^)r@*ֹ-v;h $TF=O@ f<#D!L֗Qz]KS5MW2# SvH,`Ϛ/~Rl4F~:WrXߛҎx֯QPW Xn7i7"9wPeUrS@ڀLuLpޚthBIkVHʋJOGM)svӉ֦J"aaHeo25Uyz3Yl[584HihIdwվmDO^GުM^d/A'd̺ҘƼ 8CJ7 MBNo`syEsYBD!A5Qq柮[z:BV2nEVܹȻŬtv u=Y9}#T<ypJ=% @!>S^8Y1@9 }q{~,JqTG}ݢVNy `(o&9D#6/M yMenXHG1E#,]>_BI@$P @28//0?Yymf!-݁1`üAū~ŒP >g4ѝZDIgА%X`+ .f:b71afa.|IP˖WCZWCY\贕. {ļ?" zp\T7yy$2K% h%ߨ['$6/Llʺr#_,\Yv:aDNڔH `k:|`v>ys3<#>bI#OQ1®.{WnKoИXrEjd_e?-+^rTqViݠѹƋk*-x0,?jP;p>J"^wCv c;:02k sn^l Bxoτǰv2?/ĕžp24lP@FISl3%p ɡ2(]Kv%lZj>Y>,pyO,8h-)Ǔ鍴)%S=JqSJze^1hoIwʂk7z 3ȹ\Q1zOfRI zuR6cO]0njq8 NF["),гqJ*aZ,$xg 4B.n[J.GaH틜'4#5Jڶ^9j2,}4N Mv[㞪2mcw|: q1ݭ'C^ Po1ѩώӫQ!NmɁh//qF \]|ZB+aDWg l˵4X+ J@ e/ x/O E&cDei0|Ѡ}TDBKǟ϶7rꆌX@l:2ֶRh"ִb[knUT}2z{Nŋ>amW / +E+ w!×dEOPCS8{yIt<ͫ 7&`UjVvxCI2`JDʆ.knmAe90G=\U]E:Mﷷ&[7 ak=K`aU<(?h-F3M )54RCWENJDe !SR#}2g{dO9+4z]Qo,\aMyuI~\ AК)$w<^z2m_*H5whC{kW+5 yΌtǤ51c3jnq#]H]rPXdهl4ه>DRެ~g^*'cRk΋'kыu~3޽.B5jfnXZe=7NB9NNH5J4EmRzQYJ(Im%g#ɈAj<M;cvܱ^䯞G z[yPdyA Dij!*c8QMf3/O_=' 4Deigz-Wa<}b7y B['$4}:lj^CgugR!tӁuًj+ cެscQ݁7I.JmbvDԆz8mo*( 9oɸ)$$ [0tD?o~n. ]<#o> D-"//2*%pWv C Tc)x$BMzAMeU#+S/@co߶uks,אmcvdֺ2)tUb̬鯧d1{(1{m0ڊN XfEdQs]#]\ C<*楖 @|BnN% Ϛ m ;ʼnS- Snצ}CNoykfhHzCzF{[rm*9?ik 8UǥFVi7med͸׽@q6t3fz2 "pXm\:懤t2ccډ#O¹Da\{i?GRcMOT!ѣLl츱]M1F|N?D# eZf}/{+[Sma0B |Tlۂ *G4DY14EQ8NijP(n1";L!^w3O\>#, mhA!Gf$|@^R«/٠vi rP #j ROQ:Ղ,+|_gʐ3.ڈV! UI}HV!Y`G 0Om)-XEԫˍ uO5S3CU?tt} P`'*Wӿ/u?KH3 u 0+B|Hd\;v$L:X 70)5 TKi#<é;0n'JdoP>[8>be!Wn'5Yrl|l5%hK1^@_'x+·+w8WXyU ;uy rVfg3;`yW-RoGNJUw9kܭjt$m-%##R/kҜxUcq }pnA9SM^Mh+S*D5^DD{i U(jw1Liz2̅#הy!7I,‹[98z!|1uU\91K:unqBr$<#2n.-һVE %%\da \ ze{2TBpC#PWv'X'S cjBVp f!S=<)Tq&WDǸwȷ>P]NE%0>@B[aFDF/|OuLTsԽb~-'aϩAK{P@"*\I60;_]R3-`GR;wCG0ZejmD)HIUR[54+m[WR G%BɄlB+V@]Sg岑CE ]eqt>f7PTx*?N*Ck3lN@K[&@u6R'_5(om#uk?.qfD V29 [ct%$Oy7\$Ц(;;4'>$?YzP)O3p{LKwIiF@ A|i5XV ' Kc:v!xfQ5!!6:v|C dΔ4,~߭N^_3ti K89WR=6?LjkfYAW*H sa=+nB#G-f)$d{ ι<F#e_'\mXČ3j\,1Ӭ"snx$4tEtA}g$TE'X,r :t@5Qo&6|(gh-ʽ-ob]]\E2v"kn ptV hi_5 <$gyIe`J )@,Gb#H:X 2C?92ɱ{\sKo),`^DO/^e1&w6zWclLپ!٥_k9Hȅ gʃa&ެUQc7 ޕ70.Ӫx&C?}'޸VgU*:+b3Yf ϬnS&t9V'f'-(<^t? B@—:cޡ>tT$T]1'ɝ찜^,'mJp`NNTݪn8MAaf:GE{2a2Mc+Q%У>"u/}Xe 3*>uE?^k"",Tъ8Qkp%)!p6 U}vgL*qDOĻ[@"˱.).7IR1Qބ,\_XJR, VMTEHz*1r,[y0 #ew j9V5HK9 e𾽻٤XW`_Qm9Y=Xno˴G^v1QZ\`6W\0[lͻZ<#ZB/!z <{S-%h9A}C;־䞢?vӖ7؃]O6걿^n(k?fCo~ژZ 4Hd[gt[`RS;I5&W􎆅{zZ?]U+WYz5upu weiJHc2:Wv]UYbm O᠏߹>z@'Ny9!ixFD%wMwY;5fbԆ_N&Jbx)څ4Hlrɔgȴu`ԕXAֺCy {Bp+L|l4ShrIK!ᐒu,$g»^j*֨ݺtQ!oE 3#8wxTo zy%I2bq΂p {2J=rr^c:Q4y D)Z* fYPUlў ѕ` 7^wo=:: I0؁H%shOB6H"MHoGC6;mlB1O'9z#NāOHhobZQ` 8vI߶BUxݔ%C65r.BcʊϹQAHDr\#,v)Ah> f%KϸV,F#x2հQ$J*"=QJp;7j|B vmct7/#}7\2L&e~vH:1ʺS3my\φ`bDp@.i5 VaɆJHxʣn_){S> U+7,+dss=c1kHc㐷}30 F 6}]Z1x3S|mA3,Ɩ1[鿎rc\P'i3a]!ڍ =ϼ)*8ϥ?`,t0|f=5M};bJ'Lb1$}< =#GG=3SM4i8:皒fHM*eB71ڃwG^5N4 : ױlyy q2ΦPjĠ-{aS;g<˳:rIayEFeBL7d@3w`M]b8RtPNd5.r٫uJp,\`p[<;P.K@Bо;2t]3b]z`pREc;Ń,A4d7ǺV١L"9ӉL"h4en \7j3FuQ!/Ѽ TdWߎsx`{~73d|Pwqղ@=n~fd l #'^9A=11~lqFw>AgOJ BM\_mpwߠٜFVP3މ%q;4k;3{ _}' ysI"}]OTjXRzX 3S)gNOcT+O!0lkŽG+]k m̛ F^Ui!6_ r|&rk"gVeg+Nlmւ8?!OVEbi ♕o3/=tVdY֙nw'ֻ{+7[A:UX]ݖX@F(r,< EzMac<ⶂPIasMcA .D +Kqۡr(0Yȕ,PUݟ)_}|6<\,gC I_D ms]RaPMà[kls}ܼ珪=淯 <q$ ,=Țnu{[-cz{mO۰ݑ.":]UF{ K P_$;-31ES<fRio<~pУA4%yBhqf:_ii'kK%s6ܖKHSSs<]31Avs9XM\:WHGqFX>I}Hۍ/]f5,zN|c!-9 \ŞOjD=kO]d)?,SxG{|L&Dg؜r' sP(z-#>zyY@eTr9(G+ZLiщ/Y%Ělb 6B@^#lLK+o8Y@bBSʭхAޫ#,{-v&Az5R!,~ 0m&r ;gŧ=DbPN}'oi*~Kz BT䀂 (PB5|;Ö`'ͻҹw-kޭPv+F,h-b]Zl}.L𩒡ƆD ~`&a$Մ,y,~@`#M]pJ*ݨH`]m]p"MQy6S7D"eH.~}czIk͊U/T^\DBys m@Y#?w7{w1ZsKd@ot3'x{Wh#=QP&BzRokua0L7ˈڧգ j<х7 ZяſdZsʩŹ4Y2fi[(AurS넰ViC 8(aDOVzL}^KԳ{rnp+şżnrz^`mB|V87c gmc5z' ᴣ11#?rež |`x"/+Ӹ>׎*~MQrqyьLU<'0.Ltc@?GusIU0"3_w[Mg58zyITl(7$;eIn)NM~iw>t*6>MoJPh*n\.ﱚ&V"}Wc=m__ h0c4XkPj:i-`fǁ8>%YoMM|h`@8ԭ̩"R"񳣍]@w0f>HZP9 x0zm_  ͶN]>;=}zxT*_|$ғBsJR|Y{]Ph?<tgnHEuG*W~mᬏ-7;qNGFkcg))}*maC<呋BQ<,;N*y|Wxy8kk$! Sĝc)B6*#7Gc?B3ChB*MlL7|? ;}Nx?X>qbFx+5+ q}qo F@$) L)硠LvJ sTX?nO mg[ݭ]ƀ|H7nQ*os<^6p!>wN$cb[\*[C>'(IL#N6۸H1> ziu@$B[sJE_Jzto!Sup`Ix"㈹whF~ Q[,csW&ؿĔgp@vڦLЭ ͮ^}_spWWH'pQE޵:k#D$'t#q*q.'aߓt\J6Ow;*QL6{ת6h 葤Q݌4 M~2mztjzO60}dfn܋ Hb6b?-UɇIG FW5m G}8AJR0;)ɻQՊ|#[ݭ{ R`->3;)akmi*х("$e$?k]]K~ר{h*f) G8dBhhSGltN3% ^$ Gymj{Pt zT$ny\5mY0D la <)w ,l ;sfk;\;VR:Q6 }o3ٴjK>54 /(ыUf"k[P#$H.(sz%[ Ө1kYbBs {X4i?A^P5_ܕdT\j׬y8T4K$0@ۍ] &"VUETL^Kn$ z-Sx?Mpm~TVpObXz9cF«Etk:4 M-3˚3kqQ=u;`VO0԰'/Ml[nqw*VJrÊ*$tO?p=w6``',;kTV551JO|u-xa[, 9rs~U6]ZY G qb7sY! #oF΍NZy5IV/}I1v? |bprbќWbѕl\O+ZV@s\D6O0Je/yч+bG Ù;IviK@aZY@hEw3ǀLt9e3U<(# Q,3q = d?M>YmyIIv?>=L\[٢v7%үSaSK13> C":gr]Q*M=039Qev<rDhgu߉ ,g:J|QjWZb#hZ%oWf627.'I`17v.Cvn5[B(B c GgEYIvYսR^huP!ZEM=5FuA G*-< Z%媚cUSO dGK1U92V4>_^>:(G)}B0b6Ri qnϹHбa(1| ϿRc n~ӥqs~2]JO jDrM3wgٳ$`WOȨ]/ul.κ`H jMLܼb^@LTA3ܽ_ԫ>Dݏ\i?.nh~waPU BʴO١Bž5m?y^ٶ' '¸rt0yaGu2{\ Vo<^{ %IDS`\(d!!8p]: A` VvZNgڒ|G_43jap"yi yCxmDtE1>k$U%쎠GFFj e:4YbOvl>S2H.;>Ƌu%894 R7TtޝDu ZPkS / sSR(7 ^̤!H <O7h$"Ń@*Ndm:rzF6boQɎdԦmA\DR1c^)PsY 4C\萨Fn]/gfD#E718I.wu"8lܜ  &v0R|pۿy,*4MG:C`tcFН&'m,Ksl;r}!FZNitZPoZ<_18LH8펹?<[[~_X].)>x/1#ޜ3Ρ(E/Z}u}ypjŜ똃Qb_M@p峛 )V f5 ڐ>ޒnjF5G#{K*2OD}$gbV^ 2ă6lZ8BovOv&`·\۹; h|vA̘ q`8N_ܲ gTLRTǺM8! t.?XzqU}.ePǽ1s@ʖ:I >SMvӤCP.4ݝu³v(Z?ȖORCuns#K> AHO.aHcMi\h9iB9:fvWV)Y(^F' 9Ʉ'dY PN/ㄆ\)U}Uo]!fHG>@:ѶM!LPJ cc͈`Ò"v鲉tĨHYHJ``"N;'+.U|>=Hg=F+@wA %ލJc: wDPɖʳn (/Ѱ[ؖTt0Y<*@/]O^Crie9chep d \ /i1#l43cAkC"_L$JRvt o#rBN:|v*0c ^57uR)[FULZ$VhlƳF;Eՠ$3ͥ&!8s6V|NB5rYFfܠ-{m&L 4dx Q?56vu&O֎T$@{-nK f{sPHi*;` yzK/ƬRzό"tA[W`b.=lDeҰGA>yVE Ǡ:<aiK-9!tg(dw?uR;uQ5|?Xj;DlW__+4mKi c[[M e>wuCuŬnD0|IR b[4>)3@.[:${ OXl$Mv h+} _/lS\DXL8﬽^dv(t߇`(p` NU)f3 fsdW'0lr#Am*19m RH0ç GNY%\c-.p [˘U>-g{IPd'@/7jۡGR/nu w$@ ^ X0@OV .$G=gE/ψ~Pw\HS<8j=Hpmy}Gm3c߿$QycWǞm-ј\/S%+0fJt% ڹTh^֢X˿WUd;yh,5=hh@c䌰-cB6{`̤=Nm=q ޅC 7'hG*i?>|$jO> ~vݨ-**7u˟ER ~7;Vc#D(r5 [8mx `W -RqVډqaˣA?p. 2`*&sY;c~FпKywnfJ/GiͫHF10Z^A ܬ]1cՓyMUW)FL S8mw -8˚BG2HctG{OvW Kt.%$9h+X+ nv0,<>h:kn]eFS^%yo{6)JM\0jfh `~) a}Q ,8hm3mU<6}>lC`v49+cIboKY6?J4Y[6:QTy>d㛾?dɍ$q- GY\ 2eIp?J*.<'UgUZhPbzDyuu>rliko=e]|'Zbѻ)R<8<|aR]k;yPy / a P4 6]IokaLE~NPYyd6xgn[-/˘YoImWQ$ iچo(? Q)R_ ,Խa=BbPD,}: Dn"el! /NzC"|ś^DNad]01!'+? GWA+v|3hBؒ-$m> LZ4fBrLS5Z=7y,^-ţ M]k/أ= )() z5*zP/PIT(̻dM уK" ڇ6*8|п6Ohųr6I苄\˱ñw%R((.hOH0@DeCЧ¤)|ݮ*VJ%V#3O mp :/KKs]AX"8@H"Kn1Z䀏܍GG8|93eo[CerdrP%( \FkX޼~J]]jxm`dG1@IPOXrG0 / z|\]"# `k(a@Ccчdjg^)J.|}rx$nQZǢbznf|4Ȃr'L36b)';t:)6[Bh09]3M~Qε"5{Ԡ69,RV$A[anA%>l&aBڶn$_Xyj;o2.Fi=mTW1 Z}ߊķx.0\ PCĴ3g!6$kD4iֹ̕Cٝ_@;IP8/!JɃS. AƄJNG9k5_j/'S(@B]6sH*(MS+d7KXQ zD{>_sh -HNOF8 *X/zQ64G,Q'y!^{}eO9BSMv >4{yŅW2rmѭH}hIcR΂=?7 Ƀpc ^Y$f-ϢUvr4'کkӒ*D>ྴ^w(88ٿF%kIL~s*Rh^:|ZqDSjsk[=x-O3axq]4u?4-oYOKQ 4lU+0٧TJeoCdbͬХ ZM{GDR!q/ϔĮ=èb5\T:&X41GmcfoՑ1Do5+EPTøvE֮[ABdb8$hHZ\2⻥N2z~fyc%nюD5S*ڰ^>_}9k%x&tW4FoBΨ}]%QR ݃uc/9ωGvN_ɽGVb9ţ'(F"n6HV,xs{]sb25@ѣȓKrU{0'Q f^|Wt;fİ .߃ZA579d=*6v6xd۸8$)jO. Y?,MFCAb˸tLأIHs忡͹ֺѫRKnp""< DV+ޣopHI@ky 1OU|dspkkeR0iF̓@H:cpšۑb*v0;&39zH 2^WJd~?j[(:h_DNRTL7V5EKYqQ!p幦 $kȗ *6+TFUFTc`zf>dFp.c+6ðk0t^Gvryؑ &a>׋Dmosj룈EZc$ ?R1/L&lF0`OS1-(:W>Ki$8lưPz6hp8rC?؇Ke2ŮK$ mpf6\ݜjg=t5Z޵WlfE5Lז#/V h}ɇdR6~BRY ]g%t!$,{&Dۮ5bS:J7{lP\BcW+g^#k/̷~qEވR,j/c㿞Aӏ<4`/ "i\HMJ^i60K@IYe?A9 1탺0'ܢGB;n )e!nd"_@{oh88gTJA1mb糊2޳?_n8w_i`c^SGa'8(ӈr0U(S/կ1u] ;ՌU"+%;z0Gk XOT,DsICQWr ![o%Cta\oBy6i\&<ǢKvۜtJ1* ;I3 ZkUY(I19snk % 9&.{տ5oq1"xTZ>MޣJ?df;9)K.W@1NfTU6i2]8G/ ;O|iS_0c>ӠȚ&[TW<0RC#6^m ~&FQ&1?XJv).pr#s٧'rۼrYxinV&}(ĝ][#9=p}ѐW1(xpD $i`Âxo^=؆#Z}¬6\5z,ܷcӱKQتxi(w1`<[rꌈwUaD C(X"5XM YD;#75U+ S!Mn%F7[Ԓ4μRP#1 ݲ|sr_j|g~(jZ8xPأ2(&XzXGlqC5[WQ ۺ+S&[ q4یs~r-0XFO"T|k%C[ \p 1OQb$M>3t<Л){L\E%y{{zm$W"$LM"?Eb|6u[T Ar7c7dmML0X3gkrEh>UxIܭ=v&7#Mo`R*(})m j_Ue<OK)eҿ9koD[v+QW{cqqI*nF 93$Ǻ8 LoQ>,8tƷ؃0nkK&Uin@ʬw;`CcPs-,.P& јnQ^*8yxt~KO~1x'yLAI}VAN_\L88hHKqʁ)9't8Cok@n4̷H6@gr}q1~ke t)ʽacS>cծc> n]s[ v4S66 : I e.n( C4egv4Q=C".(   C)՛xCeb?wH5xc37_;K Mk?Lknz+{Tȵ.c=lNmlc^'#ףaU G }j-7 (П̾;s"q9j mZ n.b~ N]?kϪg@i1(iA~}M!}KY euݪ≜fsXt4&+y258k=J]R3ӟN…S_II3E󶌽@޽_ErB!_nWDJlAÆC8[3uY٠07yuW>A rOqdl8%h7uE^؃E8-jXz9Mj|OxybCG{31ɖ4|[q0BA:qȻgC‘ʗ0ugi"l) '2FWL##&7\t:±;Zu.#K}ϼfյ k LzXG[$t&mneq]\'d)uzq]W|\]g 4*<^:{9}ڳ=.:u/Y8jUwmy5C:1CmUue8iD :~ଅhSjhye` ClJe_1xnY#][c*ZOOV;i,6얋j RbݙWim~HRHQ |6xZ?@chŢLFÁ,;{ĒcHyݵos;cIdz \pΐ6eӃ`֛JHR>TtH1?fI]0n.ZVx;+)0}zJ y ?&}vyn~O|#Sy&[=A Ο#8&JѴdP/Bjm,D ͨcE(ZCUH9 cc MZzb l(Pc4|zsuL3Eܠ]p_hZ"B " ҚS:*I5pl#%)xg*yϕ'|-ق| )/p/$Nm GM$z6 u}5[ k*nW/x2VUҕHAгCk2=Wv\ sL{ C$܉[jo$0hz/'#84`MJHWXCrRo^A{q˕dQ\\hw Ip̫e?>$ȘG>u7M뺰j\L9-%``8c [Kj$L!WW 8,y1 >i*p9Ѣf3 fns8/y7Ŝ'Vq;%[W%=+vBl;1(p@"|ⓖ f BɧYqC' ٬dv{ԨbBus5* j%K+D,WqbIuLeTM jxkNah\8)d`tNگXC\˄hdW9Zn +gR-`xݤL&,ߨgag6I*27GC%]LA"D4"VyƥʍBddM&4pUp lpku!^'N{s]}r>\}dp`joqR>FhT8yAƻQ.qP|  0)(@הO++D,kV9x{ ktD CǕ6‹Iſ!g q_m+K C*C9s g9KBRPwָ hO*gqūC@}Bix*I qg:z>ߌ0J5Q1cX@NJ KsqSwtê|(_ؕ1rʴv@yc҂<$]c YHլwSx]5@Y6; U‚ŏa D3>)Gp{*W Z˱WM/:ѵMw#oDpFrޮL$u`NE@NW\ǵNt~0%QxxьVn)IxY̺>ϧ3oB-M,)-V86yVU$xao'qw 'gE$q}lô=!&fc:H(Z.խA.S>|KC+rI@TePCczHF2VCNuH= ':;ƣ(x^ | qsڵ<Gp(Do0:Tq l"E)q^]Ǚ6ʧ9<ٍL2E,fKW?$[1;~=dźm{E m=tC c7׼%4B,vp\3%v\ӺK Uq,a.FDvU{%W'58Lvx9X5pdha}cխz"_0JB0s;cr̒1|SIzj{iN&W^!*|$)E"[ N`:+ d+ѕcF0BNjw7]~*gq.C9OAeyaEp"ܲRqMi9gK墫u[V'cKS2J^poML@3rvN;E}a_RۀvF[~)ow..G}DhKK}sȢB!ƫR!;q>m.^{@0BAi'1ʂufy㓓'<е0nvM+>ڔ8.w];؎]LeG1^ך4䖿eN̗ф$$mȬ!bAm+>[1JFKIKMߘMנ儽|x*\w7 ZylpڳSH jڌ}kՑ& {z_~޷ ]%"~$f[@+]u)b U0M)DZ5=(KNU`ly(kiw١I-76D!IWՔ,>PS>ӄ4L{J+\\CU2:+$6lʨazGE49%f\rP@]F;tN2<[n)*=ú|N$[ź Rn dT(K#o[EޒoiW*k+W ' H YmIw~bw 8#Yhe>?(]H^pGΙاf#]$qQ!@g%EjPvx#:qyX'V{ozQWo]r}[G {;!Gîq .0UU8=-˄dj=@0]ك23q.hEI`2<)ٍ ( C\Uä&-O̭w-bYbPQBfRtpBp2H$>y؎"P"Ej|'bj]Òm3btŬc lO>l2t*@&m6; SW?zRA{H0btϘ6O>_#mk*w[Z 0iV3Ȕ~ʄ0e'T6\p?;)aY}eP1 f.*ĊC1Qa =Б9:&=(QM>%FlJR__'ǝiJ3sqD'0vVWݱ q⓷.7f86p4r Ja| +` 22W_=g$4`K^v -ֱP+'~JԀRc;y_cǡ,8lH</n6 Puh<5B{rN 25Z oY 潍^8d g)p}X :H`K)6^ ȾP.7gT3D7ar ӥ1e j'~h?X &yjۥZ0=j`=lK< ;Qs%<6'g6JyQyj!{ᝪlL; 2vHtB[<A˷l(K~S_QRYCo0eƼq2@4~Y~ܢteE659dK{^TS|CšQK4,lCڜCMuԿ#Ii%9GMw~%TA )̢vT3 13uDp$u fnr zyn]܇6$,"Ar_ -JD!WDv l P.?)y! $ltccA>h`#gyCqcԌ͋kB.~fN +[ѪjѢ JPp 8qK: a_.u/= vt+5Q6~|9V[LcBМ h _y! {nOK>D8>Y:cQN2I&tmR3Rwh*͕_.ˌ)6noE*$,'d3Xox{mF\AWf+nN)'6F*r|eƂZ ~u2X%opU,3%`w \daeܷaF QXvA$LD$`BD;jav+n1eD4E W4 蹯"p-Lyb|৔זI5|8@RDs`^̠l):/ @dT8w9 4\/2yQٱtݎ}3e=w>wztu9y:QE})HqP5Ǧy\}t/w0 E'ٝ6cQ墇&-xR 9SA3 A8Uk5L w@ ^?95ՙ\#|GB 7k Ykuo^PLjP1f2<۬x&İ"Rndf~c/&.(5|< ߈' 3YsikQ Ew0rl q-2a/o b23J|x{umm@jQRe]?d=~H gMD=;I~"&PT`ܜPADnL [U? R]wL с"g{qg,_;p 8gXOa\A[ ,zv.ˍYPҦE0_㒋! _(5F<ԫY\6>gk2a>}Qok\2#7:RRQy`>N[4ik+Z &xGoU~bJ{"(s}q OD`TU~?S\w]^\΅EeO6P9>\֫4X l*iJil>5]hh!⶧O*.CYJe7LZ6 Ev轞6Uox}o6M/~Āf$P/Yl)v^ b2FgE⻝gRFW?ɌtfHfI+5x{6ҙ)3^[sg6{T~K'H}M!¤ݼ! =mWre^dXVf1s噬ß*%o p\jQr_`6YY? ΩYm~YpGMA&@T8TJ!95^}@@.A[7-&ncp+d,un6бHAG/yzq) 0y\=\Xɩ/G {0X>}0ݠН\&xl D̕PK nIEQНsKNi|@D@tJ;lXF&F2^`^pd)Ч'I)q`&6xn˥P9^ oΜt&ZCQBp//E:n7+lFNE#ܘ4()eg,E@eExV>}ӣpᢷ*MJI2GW=aq V: <ͽ+7Mv6 *mdiz+rEgVo8mJEPTE`IC-Y=~5HvfT"c2_H6J~D/O08LVl7Xחyr{߫«桝 v>g֜t)H?-`PeHW!s.J6 o S8.(s`>ͺLYv GDQrb6[hjݽv zYZf|xru_u)@ȇN+Iݬ'x U Nq$xڰ<槀ȀnFPlbe%s+"so-/E>Ŀ%9iB_όa]""/׆/W:Dxeytc^4j9 @{&^?i2MMpdx8V;w9;1 (x%ݳBA Ez\;8L,'!mI`"YfbPT29ёG] ٪WG/>{VUɋ .͆XԸhdkq 6eWu!&uolBMLKV$d+94 k(;Oٻs-o;IGrܶQ6q+}ƌ403J,p]ŦuҦ ?cY%BNԈp2H v!zEqPpr> lu/Cfܡp߮e@ inF?_D>Vnu/j'AF^^ yiXfuYpN?q}oӚɗfr8ŗa{Yă@7XfŢ^ Scz<3^ulqxʸJLa}X {4pMjپp^7 )9Evtd΁w7rb?.{AEuV!L%={ Qgs>n8CM\#4m`PeWD'\3s{@IWەyRag1 <EVި}5 oʺV£"4Tsˢ^ӛqA˾Y ͥ?4ZBiĽU.6KyE;t ˶'|鱆 (=, DKz Q$b Gh81T<框&!*_dR/X^ p'fPdۻl4h(T`c iQ"XY/$1􌁥{ } p6̐t۴+nP왷zp5&nV]fvy^͚}ؓR?3M610%MhRb-@GҎYmUKV?%;%oa`S~P;Pk.8goo]QkOB5jODMztBHP`f$Ef$uX@ R`:Ɂok[#cj%%Tj [_1xT[$$4鷊n{rϜH絃FDAYxZ?)KwEo˃XYKRUIv6&"Nia{u#3@PtI'm#OgvOxF%춵/;Zc}T.> 4ι`B.׽9Ҵ#VDmӲ, q]>"!C? ¤FQi׮׾yKC$+ wrWUdR'`F^):F*|umFPmT7S%C!nVl`i䚨L{#LxB  6&U!Ž&#=lacj1BTDɊpqzЦ}ʕ[ 5l^zܦ"z~cW CL(n MB.IUi)p%NFx9;xZ2!HPN| 9wW*یSFS|x̳ )VDLP rpF{&Cxu}9Sg!~ڹiJz<O(VT(yܟPcg c:~<2r@4vBrѶ'JҦ>tqY-f&FTwJߑ9#_h!{o4B0Y˛/X_Qb X  9 C!r;_cY'M["ɉ҉3ઈwhG>rBZ6|P;,޳sXzJwLFi4e4J^20\P&󌼧|ME:|?y3Hg%ըXL-_]?ׄ*M+]QhkdGZ#p̅3&;2SRncRǴgs+doқB~rc6lOƍԄfu!E@DS*L:;q#>蹇b-yC&'N!{0[謂GJ@n ۟:} Xaz(Jx|2Co+-NN3QF~ JuA :u 0h݊ gDΎB}[}O4$d1E":+q2qYƨc"шsˡ[*ۈDﮥYJpKk'D r7O} ǀ{Pi@ӷ1E7xJ2,vGNykLH!"?6 sPRUJR>F69z*R4$%M4w.cL\E=0Ӽ .ze릴Rt&dGˁCzPO5M&–-3kYR?2m-2 )SŸ99ϽW_ TɈ~jh*)"+!V}wA,/Y>td\Ǽ8XE Pcs[G='Le =c7m #b7p=m W)!Ly8C $$[OxpS۱aDVgyO5HHB F9`TC*Z{=ǼKI(7?B꿚Z}x 9<Ŗ7~y "^|Bz>j1,L[nq[Ll45uu}7#1Z]}UkeG~'9JJ֋I/%61AEIRx/1}5\Y٣KxƆ1 PI Z |wK\8P ]bŎ\t>ĩ /.D&J$r}mc1פU+rL)$L0zfxR(RmJr^ťk'\7ETá(l8o" 2eO\з#)llQAřBsb3%8YXP$3QUF|ӓ-bxEh"骂=?oI4i+woم,h)I[7q~Z&RuӋ G!Zpa>y8,2(~$Crg={׎74`\y+õZY! Г I [֥Fkr̛x6Ww׊yGV 0BD0Xl39Zc,Z#M;g!w TZLg@=e=ߚ5$g`Mi>O?Bv[nsں-*P!"z[|C5<`YC߰ր,?\s# $5UnV01x`0&3y , Zb ďfuG6jZ, kcM+>cQ'Of:Ƞbށn]c +~ť*bښu6Lfq(T8ee+> P|lE#rd n"WN<^?^2~iMH  N7c)I 0Mꨦ"[2s] ˘{G}|"y!^nN><2ms.xou:I,`[X MN}*M[毝TX>_9v7 \Վ O㩀K! !SЂ{(ëWU$0RdFu1a*ǑGoy Ycc`]{ ߼i44m &RtPlClb9hGUE N]&r O64 #$~i5k3X9Vȕ4(* v&Tcହa@9In;ZKJdAL{]eɎIi#z\φ.C^=s=3?S!"g d#&#=py sЩhP|VAup)$Av0zyfnw C&fR/ptE,v*t{zƹ {h?++So?}&jW\nDm &5czꔌN{̆bo%Rjk"VG8PYcKШV6|mt9̓˶7Wf8 S2 z ̖*{?/$rfdȽ[5t|!ز1]QPX WSx;u7Aלp+,VqwIsxM +SJfd]K)o*8(:'$O3J\2B%*hAq1둚 U`c}1oh贾%CAQ,/;$?kh4?#VbiG/[0ܱ(6 H0-5HsqzeiUi䷺6α>I-]JGLe~.?X=7f_!\-xJ^K8rq^L۟Ovd?s^eC-SuzShwʙBh q C{ѵmp؃:L$fvBo!R*]:DUs ĒRUPAd)#V8}g/CkL62adRx+A#e19ew>U%JvPbȲ =mry)Aկ'Y*Le- :ʙƨ,g"+?#']7NAv4b8D;X(TmmSxڪ+j>%dPDԤ6hsz;LS%V5?Gk>4ekZӓ+&@PvHeKjX׵#8ѥ,w&u-X% a1ZfJT& %yTvF4ñX>7%CKA6Dkn`RqQ!xry/'MP%:Q, 栅24 gt6"H:Ian!:dZICmn{?J!>a E.v}i@cbdIwmtD)Y"QaNg{hqVZ;<(B|ʇH|ҙ1sA>ܢ=2|H\!i-~7#J=P}\=%JK,G GofQߪ1˿m_)UԄ(c S'Je[5\?-b胡KkMH( z>U^XYxAqG( BA |윎F2)J#G1!qMBT=gj=Lx)(_Z8}hs)p c8 9NnGT!+ľ^eg >""J/(s'vnnCw,1%b'-i;*rB(6䬎u}png F&y`pTtRYjUA%q 5/ܥt> fH$1y9 w(QrD#EM B79: `4D \(7IW-fi&iiCl 1U8fkcWּ[ҶAAb? ,y r9oA!N][Xܖ6Qlcuy|uMG*?a ;chue44W,YgJʼ ܀|$|D2fFgo5TJ=D`nbғL"a/qqy }0N9ܩt=^ܗ#TH?r)OvW$_~-ڝל#2g"3U$\ k޹p"c#秒`"uR?CE$ <-IS0N;'!eC2~B: ?^$P գ$NcV.4Z+S/ EXT&LɂJ_r  HV^w4}Pow6F4 (WXN3k!0G4A z8n$;,_7MS6)@LZLA\ N'KF745Lrs3j~7h3(@ΌW;Eڟb~mkXRo9#\ZD oD^PK9r}FY=ׂI(KY`hb]'ԩa)k .E ;Å4롸HtM, Tt__1~!Fh+s!ww㟢@:{%DȌ7NVȇVsRXUBEϓLe.+7#22ou6u[+6$8}N.IJ~r[s/!jk`Ɂ~G, a(Xs*HImU!6{gh?1.Qʃ BDj*JD$Ne9r;J> Y??^(8;" ˠ!Xg Rg~ 0,c:CV{I^gh5<^fBc~[ {r9TLJ9ccg07S悬,Yo01Rd R˧s,zW†/z0AA}t\V~. ,2uȉ*445Ji?`T MD%Dz{0ݬa"6B/ }jN|n 8kkx+Sŷ%(ꀣ)X@79d.Dr a ˼=^_eTSK#01IܶA.AQ-쾍~b^,FHLDDXbiT( qi !C2}o/""}6 ==#?X2sJBS%ޡʧexsEtOp;&5$ `ZLA, vAhAxX:O GH;, wA j [t$+'D=;;8 UHoQv'X4\Udy" (xU 3o-FabEE5h+}eIJ)M^ LRXa l*L߲oжܪ.aqCcCTfqwSцBGEf"SVFX>%WO'-%tweӲ2?`++vӥtan5l z7( BQ5ǑޣN6^K/;m\!/۾ͅ-36 ޿` -9 \\ީ?ypy_>IL$GH(ga,ObFK8dK/Jp]p#ܥn_LЂ@\At*Lw0JF=g1:@tgaL;yygyC?n1#xy-ZZb1ƦBkcdc *Uаj+Sd@ыBAqq3Yq@řtFZ#v9XtEzto_;۷t)Y'}iL}F#y }&/?-k !\Cz&n,lM)t %_`LB{V +ɟ{~DC\UvzF$ͨ`=h+8zn:Kk*U* ,h'GRlY){<.dQO^S~3PڮKe ;EANardp=|1Ü6 ޮF@N("Fi(/ s>U8¨L&"?8U& Bu>.sfHw ROG ɼ2C1oKz&پdgkt)XF(ܧ~=`Fd% gy@g1MI5yc ^kr: mPz1Dr g!ydW~Sak~w;3E)]*3S!_5I"r);b0ilznx7̶S3r  .`6jsCtڸ0ЖTjV`ʿE_ZJ>se$;u)Dα]iNM3_ӘPIBː % j"#Xy^́aQZlY Phc$h]}Bg&SADܦƣ+4|. qp{G92I↦/ڍjz  ^&DS%Q2ZWs .O8ͅ7cuS.VV,:AkKy'樿7s&}khR$p哵 [; ,๫w_яʐQ~Y uRBaJX/LB >9Rm(F#$"O%g6I٥wLmoF84Ѹ=*JMgp y-Vû)ry@<VU_t|W\^X4h|yök3Tpy"WU̬)bOH]U4dلJ|[;bٯSܴu4H:6>.3$CIjJf(Q*Q tPAG@rsrwG%÷yHQijS=tcNM>|~W@Í@۞Y(G2 ( e i^a^Os>8AnY,Dg"[t۪t @Y750&\Z"!ҡCBY5Ou0]Gԓ7/"M6 Gi0B0{߮DOV{kob]^q \0F"P>mRg0~S #Gj%I}'ZXPRkIV6u~_L,z` 2>n+IۡntzʈqyL)]PZ[ֲ,1Ven->ޑty lj@,S4 ᮻjoEk/LĎ=s5& n M MEg|d۷O7_u~Sh_j`f'Y51huzxQLX1NSe ]dh{x8!mx#TQW֌HF{f8s,b+nc4ƖDV5G$9 gݥs#p+PwQQdz 5H}&㧁)27'VVzX BY!%ˑ:wSsxTv zM@%/b?Q$n*7q 7 xǜ7D0r/Kef9ND\9Kp؇>Nwc8ʡtͩ 9L4BnMZS]%SOe pr[^+ȝPF[&Rlc38 ` EO S(3?8cLE.KIז r(ok-sBDTO7O^ХsNeh)ٗzD 4|H2u䗁+{l{c1d()TWdWVqWcЇ:­Wf=P2\$Pi:Q 򘡆Bّ+gؤ#ò]AI$ۡ1'Ոs Ĩa_bj~YRKy( nUFr6'}f}K|5a|±lx*D^' ?NDH)^3R %iة]9xǷC˰tj  O 1vwVZSgp`r{\RCp-nWOEjl iTo_FzZɜߚ=t|\Eyn|Q|/ߊ#,cEݹ1/$ws!V"iTJ a!`Qؒ΍MMto~fET;Źu#io^f[q7xJf:t0>zuv-9#R/64[[T\69O0_(k8[K.P)_ +ckОy)J_;oW(c(tLPA׶Z!|i#ᑓ]ҸH!o6aD#7``0儾9 |{}T+,zbҫ@ Y׽v3v3Mtשņ8H*,94R| |zgsM "]߳5ݛC5aG .bFS;M_j#YOJva0u!\R'c5R ׍ٹOҺ cL->jS^jBb4:P!EF81SJ N ے̡ru!$W=@Qxp9`kN իĈȝA<!~{{+zP=! Js5F!(,xS?v2U+aCRQΫsOU7냺?8“sTU%߯ ?5>;:Me9$5od$;Fj\;3Xg  xۊR8ti^PsGDZE?~lW$dD&MqZBٟ;/)r0΢]GwhP0۲3O q Ө{t"9lw=TuːbxeNyygu6TE}fo]EhM;K;01aJFjKvzɿr@𪶪F 뾲HMS- 6:I6k; Tv T ]I% */U7QV( [s':~Ϻ MZ|/ӫ{G`*{g@EIbzj&ZF/z>[9%T9]RC#HDd.=b?G(֍IGYQ'uDy$RpVt\=M:Z]u-hOHͿ]g.CtZ xy%'`;)ie?=/_ 9"dΐn̎ P Xck#k,#F* ?8q]ʣ ouB f3E9=`Nb7*Ό[`b]P&lndqY]Sa %e5a!IjCxvp&7Y )#vǀMXa0)i3I%mb"떏C?T8YD[e;f*xSAk-w D=Qyn]r|ϋFQK eMBzַ*wu^ ]_plk}G K/;+Y(#sȩqC8EY;7iDah tsa<:w'hBt& QVd6d}by3 ihU3[lHJ%ɿRK_cF[jGR~5>PhG.Wyv&z( jstBXջ ]eo{ܽ"NAJIExDL#qQ?7] H!”E 䈓8*R>5-N>&@8jDk^L?R98; vyYX,cżꗡK\j{i xh / q) :: MXPtK^~a1mygg$y'M;D1 IK`BmC5)ȓ"|1x0 'Jm(fA\o)WG{s|p26,i(}v< @xʩ=`I$VW}N͎ lSJ !/ y`$ O -KeHAߟ}}o#Ğ#ӼEt̯Бh86uAg:b'<]aLr:? "vmǎ ;hПzAS$Oʗ\Ǭv?.J>}97vRd'V(:ዸ+fwST)df{K v?YwRk]7a k>wJ. 20'ȉf9T"|Gn KaǗlA8:!Ӛүӹ w+G m|Hk iR_4vkg|!!:!>$UVf` bm- ˷EQ#:)W3(8S 8 u ,jʶ{nKD 3:ߨ9C%-ۊwULwCTPX(M`3ֈ hҥRTWl4(fcZt,|Eռ0UB2 . tU܋'!F,4 ˥^rGh{:t (* |!V:ZeT0Ana" /U!O\CPah%v~kzxڀA$7\ѵ*YRXwǨ32a|j XHÚQ4 j1U7QԟI_dXwqpo&yG8A7z5/nsPU!s)W!oJ?ndNw6OyREqkخN`u:6\"~# nZ'NbwEr@} MH$ @o"ϣ.#Qzk|2oW4܎,1h~ŷ7 ;6iy_؅"x:(7k&&戟lցVi-{P&45bdžCy8B0dBv/R<F;!}9]iLٖ`#KUƕH8L2ԓZ{bc) fa[MHy۪ H(.)K]Pl"A"[<fCA!H8"]fk %"FyVCn!ZuQC2Zwz~k L,]i,υ"VKs@Y(;zFzx=m?;Y԰3vϥc$嬵۴f>7Qa-m9my9xȎ fj&p˶RNK.aؚ◇Bh'bV3|Rm96ܒzA 8l|u``OqͪÅɀ񢘫|q鬰@-}v0Nݗ1e?5s_N-R0[擄,ˁxސtuI ?Z%oy⦈C``tuN[y^NOuPq"4Ң{я"l Kk`+ֹW|If<۝3 JU`dE),ZQ`YzTbF},");|נ/kV^mZٚtAx"[ `i:tM BmlIE&` fY#?V7Ro; 9߽`Q,XItr1v5>@eɹEh``F<$ŦHw5E$T }H!2)Y [2#Ԭd98[˞+Tp tNȣΌD ꂷ1S8AU/ Bv!ba4&2YM1q*F"?tuuc1 n*v:},h**LY?^:^ ЋԎ n$B[8X0ϲPWs̡Ü-[$ٯsV#nk믰.5KOF%\8N3G#"OB?lj!G`bLƣN3khG&mGϑx8#4o2 ixUQW=.=u<}tdzP+m9O$zE-X ]  ׅiP֏Xcˍ&2Pwۖ2:ܮ ǻ| `yIJ?JC-d{S}oRhQw9JwAeF-)7rxub.5pKv7=/ gL1 J=ζ)~S]Rz3zIFd5dU)&\Oz5Q[凝_ 4K)NWx`cV^_4#_B+>c;u߻X&tz jQڞCQXO剆e͢SšSB%&PAbqҴZkk wzOÿWa7 w&m(Kx`)ƊBenRvW{S\C@-N3@Iޅt'g} Q)8釡;1(I+S w 6O/ ^W:LmznQhFXSZ4@'1i҈_ޚd9(~$|.&^C9- ^EW|o%3MSd]Hl.vu,OJ=reN 2aI-oyiv 0n0  5LxVע*0C?ϸlӥ\t鉻^6zE}j?u$uSk~!l6,VoI< W?r ^$:/J60(`)Xpś ^]' \^5"Ɠw=xa*\d~Dk78h20 <~*ѷѯ[|<E,9]a_$MKL`b 0$&Pxx`JrAuY%ӽC"p1Sq^To~wd7_K/&ydP]jb l eg(Q*fB$B3RsTI]~n<8ѹ6^t$ |K勚'sޤ7r~s^p!+g;K_V~\ L9tI(? 4H7<]秬wҎ~I ChCtba)Q(TfN㛝`P)9OB^SOήn\G'&{{tOTüu+=:2fIn?aVێ/Өz{n"E+uJs0 T 0' 6a Oh6>~Few$FOF{(a`nCBp}-/uY~-8.yG߰>g3OMO6+E{ذIc ezZRK{>}uHƈ8)g4OBb<0*f/cI ty&f,=T%y:酪iJX0ౚu?I;[{2 v[汃]AP2o-]Nkz _I ~_s@*1:ddPrO|6!֟*.q狤ό+='XX HʛғS#pKhW鮮_-0#߭[@N .կ{o< kꜜ4ض  $(37IBdc%GL/[om+ѫ腻ø#U֎ܛQx&τ_-+ze mJ:i Qu,tjZuA?µ%51"Vy ?N%wg*x@+P I+c^[!71 ԏ3Djޗ330_xI5PmjR>d-TvdG9&,&~F(fŜa]do`Q}_9|L5˘j57;}E {ߢSM 5OB?2m&6S 4>R ?x4®g 0{nbzBa%l Cܛ1# վ,Tj Ln,ԅ2t6-D&{̴Ҍ#І$86-Y6-KA1[]CCy;y Ũe&nIi4~V'Jy1kFuVN64llz6HRvbPH|0H|)$h}j3YP$慏02 AA;QOm}zl{+=1PfK~6LuP62qטʵc].t|R{jeqm@r԰Mvu+U;=q1S'_"c3b$l&_7>ǾܝOs4& M6 L;UTSۭM %&Mu̠zBLMmtnﰃxO`ŰgvVEosy|#^ ^O5SKqm %w:T0e;C%XR# \ g9$ԜX(+, x %&<Ņ| $hAf,ufͿ-牘T0T4wX PvFO?=Jvw[r",ǭDy@yoZS7u߇ [K01g3)2~Z>Q6`S3΢{Rw-w1:'!_-dݾ76h(!z~tb2ҹ[)TBZ~h PP}6kN_gޅ ^ifŦW@>xe)@$!T4]p.gnX7Dwi{qۻ9(Pl[1>!VHA$&/;J5"h\sD#&H4[K"|tAh8^bxvÚg+ pp.}=O3ъ{-cIpxJFtT6J>=F뎼GWǟ&[`Y[ծƦm"GDZD|q+ e66 _wd|iʉB` t?oDPVD&JȳC]( 3Y[us`tV$Ct9oTW-ߤ2ǣGSG嘡jކo9ns׬^W G`WZAb"K83Uc(bQ(Y{A1@}.峐!A/L@Ǟ0|mqW]| yg*cmhw} *z!ʱf5BV~Vj{ctg!_Eq~UEǬuH#)>yT23#gN W!~{&[tVL*X!Ev쭃Fg~%icJHBubs]%lQ\K]:[ чy-N}7&qu Z@p2żág({qQ >(@*M#˚rz `84-Lh R.'cV(\bfz=%d{ \P Y+ޭ՞w (zWٰ AOT4(WnF_4~sCx(c-9(y}0r/bq5w+>8NQM &(TyLfQBTT8 >+}Je YܧdĐE\G@x(BI]_6Hۛk:P ?Z0QY ieuNeeb0%kpEbipuVHA$o o?!q*As46&^~ع&V SEr9vE qW9#B3~w]Ŋa߲Vz p`8׸$try!oiŴ -z~7yT~`lFFWPH+:ai 0fql;vrh xhxl~-@{Q\^tf!43$2m܇ɒ O wu1W<[w~"m$1c?Wa?2d{z Y|7b̬u1|t; ȯ痋.V-!pWGe==J)=D$@XI!rI nGWjJY*8p)f1s׷mKgF9%zP^H+9xf/-;2s NE?KnxYe[ZmR5ߎi<㶕zo cUo/ #`1H4C+9AIJlS/(O-#rގpݹaR5w'45OL_Z <,D]S mC L7Xi̇l$ΓRËd|ҪN/rfq_r' X 2C$$?/Ԓzr/˨ Pkw]{m=n`hY`yFa 5(9ƃtmbzqEJ P$"#IN~{ Ie =H׃.z)JVdMhx~#ԅ5'%>4xu0O.t'>#T ?g|-'|n]Maa3g+^!ؿʐ݊VeUskKlTb(UdJ!mH%R^ tUA` %/OPt^+|j=?#|GِŚQ6"]tXFpOZ <rQ]Cl׹ښ"B`A63ញl'Wc;doоgr\oA\<ǯFU*d1b>NQ+Q.].73x ؎^f4-S0>CqӫLG_z#x/sM &3NfWjF5g=x_[LST/&KY6pKSģdh0>NŏMrBPFwF ;D+9O~Vqjv2qM,B68ޒ|HIxMݭ,btXݣR=jӽnV`J!h'uBp?síŏB] <;Dj| Q̶Z|B)[̬Bw!pbγ2'I>2sJn(ikT_}]YR!V~Jj?? {S o&:J}cض72+I-CN8(ppD96Uh]bQі}}|:Igct?Dt#s5R_ǃi!d @לn$_ m" x0%ѷ>]cHB5|9  ׯ{BH΄ Z٪kBmtԩY:cA 5 ?;50/{?)wX,,/DU<ׇg' _K:.Za_AX7.{?0­$ %CRZ~wUy QE 7s q4ݿdӘZ. 7oUCUlw[1*BlK57Fz4+wMxLAÙ iOc<ḛQH h\E,3M o(iN`uNlQ8[ĢF)xt 3; V@/FXS9:Ray:Z'.o\uUL]GI'd@.b~qtXoL!d dU͠yε x@Wozf Fڛn{ɠ(Ȣ")c(W2{M ;>9̯@ϖ39}"L;Bx' nk>޿a~dWx?4y[(yҐI-Q>&YRGOrrA,rbkD_F\ ;vM$Dڹq;|˺%,Peܩv!0H@}1߾|.^=_VLyY :( i έO"jFkY5MY?@d #ɷ@ ؈?R/}UC#vݾuF܏XӐ07x hu`@_ˬhY#tdZI$hUC`k/eöČtB<V B2%4 !Tb;+iӢp{c:V(sf'nAHL`Q.Nῖ]y6z6y12H9k<桹Ë[ }2ljx`*]Qup 9"dx<^ #@9*X)tyzCA!eExP6e_lT\x4(m JZ2udUSFAS TW\p߼v<ȨN .*T Eɵ쐩u500!ܧkaQgu_0eyFdk5*BilyC3J ߡ)b˞&~ޟ@:{e ESTV\2H"\sMϚԵ#NYvHXEhU~Vnln͊*9l19vh PUM:r1||P^Kl>Adr ;jxYV9WZZ8J۠sVT1y[hgslL-{ET=7ߺЄ`噌&%WO'8?Щ<ϔO}64רa}8Mr@kEG1Y bq&Ʊjq9 c:3?WIcS+|qTύ88sep7}-uS-DR9Eek,j^$6~k[†_Ƽ-%pm4݋',NXTd…wQh82E;cz~ֶofF:DD?4ʮɤj<™1Ѿ75Z'I> RnMJZ ")}fq[8Gy6=^͇ wȿ#MM֖e@ah23;ꀈT ^SR}ANq3ě- vKP^7"cf+qX%a7Ey)^S!va;CkDR/kG<,+6i}*;'jKtZ-%8' mZoDe/.dt Wʠ\H(tOcR",C(*@x:@@.6 r;8Zθ xEAi-X\3|w M*%J _"0um\%mvwv1ؚՓ  .W! "̼pɹ{B|O_-?!y&B{v{O5{owz2KD"q}Bԙ.*Ey Wo.,O.{[!ګtCQJ.JF8s;de {3ܱܘūXS'd%ύF6soeZ*6 B ԔP h5o%d Г+1dok dz\j  4o"mT9mLԲ߫* {mҹCjlE,'.yGۯ/6Deс*cDl9;Dtu;G"guGA>)]:&4p%a1p$NEI/ߟ[=λL"C~梛-rcXwֽ_P =.?/W/f,b/RzO?!S{_{-W3r[AK/:TD~ziΈ&|_w9J'[i5G)\ GPnb!b.+`Cm 0[`#.- `{4:;ٖRF.=/)ÈdbNA9Gzz6$QwEOt^gЯҐ*ࡶo2[|ztFwX%''vXC/b lbބ#=Q1" UفNc"3~%vĬog|?w\Ljz߈WבjS}4WeoSqżd{tCA՝ݸl&S7H!g14 %#\HD݃"VNPЖP\pkVs9lR\< H*,I8a>7 4R4ϓcbzٿLfK]G1S^L-f<’k88 cyDo5"sF9qu }It DO?ݓr@P4^ė_nm-C.rٙ3mv_."3ׁ~]{{͆t ɍl *j8BWeQmd!OMrW' (F #ՍR8:w#3k$rÜ߷^$?~2uœ3YwG mȊZY?F@v7הs'TLP=0YA܀1+BLH <'(iAp~ZF^# 3Կ)]{Wb'N^K'61gۖLhb-ꂋ)>zyعm؄/,Ί?BjD_7bE\uwr"\w3jCAn1\VH);.f$Y$A4+0>n5L%Z'+GI @|XGo <^aj%;O=KQJ.jň3_]tY,WW"+ iu]4֚6_O+BJ}.M(;H? ENë Lv]7|bZ3 0Ej6S8|@hExHC)۵$xItrZJtj"W5RJe|A>ĞJvrdf/B>@EŊGY}{pcwK%id컞Ó,+gu Cv9=\H@n.'A1u8~n"b|dIn48Ok|m5A4YEB`w(?_u}J0__{ώ:wG2x~ﰸVe*d*!\ D I hCi=3?Xju6lס bPzExG_z0?*KM*r@?rI'=ꪀK˾[l(KQP7Ǯ>pM6Uod=BȨ˞e{:؆!2yDn{5*˓^uDЦT|{6D?.,c%E g[ӝ{GQ;-azwi i~G%I~Y&E{ TޟO/0^|w{(NƅܵRUKv'p|knjQne 8yx6Jd,AV^UT[* yhIJ)Vo*"rxHba] usB4gSpک#=AYʾ Mюe|hg+ b0ekE$Qjݗ)ϵOh}'%Q`dD(] L_JH}]$|MY,]v#[Gc{m[> q*'Y`iU-&yr9T-#IHd^A?C'U1T_0=m"7zR1_{R&+X>m[ xgn{Gdd9" ^qM(_lW[ Tg*ڕk̖!S>!NF _k5mr3STj9:^c杠t8d$/EAjlˏ+剬'g%nT) !⨭xՔ W74,1ɧ ~R/$<|d5X5cUeXI)0i<r|c[N"Ͷ[OSdX=EB`9! iy`,~іjO4(ŘP=)peo9@*nţIp2WDLq Gۉ_2?E`a/vU\]FE B/55-S_2-}bG^5Q/3n_mǷg+)bcp9@M%hii:[+:EP%*#O z;)RZb}^97v}m`| } "7ǽސP9#qd4~20.;=YPvGݮ5zuiِM^B,4C %A?uAM5QGTn aEkAJL槩GOZs3 6mC%/9 _[?4Ї2$3Bq@(-fG <~F\w!:e(ȲH;[ 5>1o]S,U%LYaB^.92wua| IFq9]'9 &qU5-ҵ(k/C WolyLIL&jx\r&c2巼`F*= tOlH40(g+ 縟pMtH.fZ7wUi<#J`ue2kc>B&EB,uvEqKhm3%t$^ /Wm[S{'0 ׀yȐ 3J#U?O< B| @S 9?’c뻯s ENt'=}kFTlFa cC? ;%ݤ>ͮi~̡x[<] ]zl ZN&X#h>%A"5cH|YEZ~Jk }92d\~3{3|ˢ3Dxroݙ} 'iw;HдJA:)7}DP&\ 3p8vyg~l# sAhJG̰)ԣM q:$@]:cP. J M:`#7+jc K"~^FpDVq$Ϡ-Us.S9:#H?V@]20K83%k" `gv 6786XĘ<<P3:軭V8{qb[:J+nCT-Yj0HB67SO9q5db(wqfА`]IJf6Ʈ)6CRXAݸ㙪>L<4!*w %'m}{B,}b\PhpEseyI`kz}@F"1jzp KӮSZ(NV7~ϟp ;kKZhlXL}ҠM:)  8(#‡ U/'&r̫uLh- Xo=QPq5 RXLk`XZ9@NZm$eu]Dc&Yb03\har1YR"6P !m*DЩ3N_ s 'mĭq+FcQw0z)fF?zԶA:ysj-aXc5.|ԇ 4܂ZFfl;LIaH` 8Hu WC^^`!YGbc[NvFSO*LK/"w7~3qԀyu-اuTtQ6d_B̶~^]2V>Bv}@j2(Ix&04ms 䭛B|`\k '_&Sf8pyD 6&~: Cܙ'_&YW7A<w#!kx6 Sodz|SHM go'o랂iۘ/d_BT|YV GX3FMCO}>vec[Bl@ў<VS;a/%xU+9_EL9 ^J݁c #tkWGac UM mH Ni$e-TGJ(T C*X-/f}:YB?Z㮔׈ m1gcps-=*q&Lկ=043Ƣpcn`m{kb^-dUԟ+::.Y(Sjo}KX]?;XϓƑaqehkҡO*rA xvXޅ%խA&~ra_-Q1v렵>o Fyn8EE?AGs$e8xd.V<䴍.9BJ!ݴ 3nu=rO"Y֕Sq[ό 8-(1 J̑DZ(M.ؓD͎f޵?ƪVSMA]<:Eq٤r 5/m_`эY#87g(1^‚a]%'Lgp6%c3҈&N[HE֕]@O=;xxrLr*溑'7D$@HN;EG,Ul‰;{Q%r]꩐9⡉#rjgMRS?m~N @B%w}s{)й(7aa!}RDំ*E.17:"p7- nˏ^1MO1b1rԌu7c#߰=FXs[|wۨa b/%A[ky}~xu q L2JL&ecF!Q3ي`knJp\h%]:A/xv " uuq[;pF楅Y3nlg7Ꮒ0 yGY; X˷bt>{W&l^$yF|Ppr:pUFp { # tLApO%-A5>nxlYǽJؕRPc c/i% +ڬL r-'"9LB)lJ}/aRX}ଷD80#e2b5QRloԧ `)Ķ9g9]/U( $oBW}Hul DyG73f9Vq$[s.ms;fqs0 d0qw Zu{{TPb @j/ TWP]R#^V`J S6&] .\qe^G6͐X,ٜm38ԖKhQޭ~c[Tf!yPs`.•%{:`~]A2`+[u[U2䓰jBnaA%,)ٮ3p0< VoMcs3|c= Q1Ta=8<8~+AHHA,C +-e X9mPV\ԴB 1^Z _3^tSqydBg̜|8W-TmV&06?ӭ-Y(D4[brcjmAf(\ ~- !(qfd3}stwO2:4dp)RF(0hO=8Y$qse3V<7EI~nbbV?X!&(vʭ9^Sr|WhkĄ,3}MbTٶiVAZqFoe?*< $1tJDC/HN2֊{mL2cVq )ײi9 0ˈO.djMv-s}k vNh?` &AZfŴ3snv)z~o'aEwǧ%Ϧv -%ຬn@EZ%@8mVPH0߈A<֤ ^g!vko{ˬW0j?]/ghhYPc'Kf_6XJd68qLd6=NPՓ׾P(F܉5!&w,0g{=CT+Q TVE8; wN H3SaQجFRSdU0ޡ?K 1İ\U2n- 'k/$ LKn"P2w'IZS>9cq~ͻz6GdWj fsE˭P^>V(p6sxn6AKVs똗E*h9%/bJP}oQZ =]fk@]rF{fʭ)gv^74z1z.BG+4YPй-R6RLbcu9eewn3)靖`G3\ DMN=wu]Py1F>7yp?"yׄ!NJҼ0w,bok N'e5u ̢N=ty4CjO P M'2q] Mv٣pq7Apx$˜b'a?tT4 kI %J]5R&7d }9%apoUC.[Rn[9+\|S73U`{p0*Ī)=撈e b[=#(cX HHd΀W-fZ B8DW~zIPkGrvU]FWR.$e"' eV^|&v^J=j=wA*gtt}l ::ѬA`@Z!,7_bV&= Us4aS9u B֦:pyi 诂1x 캻ʰxN;3roGD/w!yi tNs!J' dpꖘEEr!v9t/ÏA® ]~ &VPGRB!(#rk*VQLwJRimMVHؖО;ɦP$xɉ3U 5. ߝ,CAZ]a+\-A+h9ha{uK;|ղf~8"WOPnO8 /Kt| $z>+/N/Q5u6TsmU%}ٹF(8' =4Z:fr{/{= ҈tЛ59_,ѱ`x7$SmL1j[_z9*F$qJ'5.: AxΰVs㮗"X*Ȟ<)8 6`Q{!gʶ-ώa&P¶ #' ^(iZ6|ޕ:wlqOHLRFIt5 o *HZ{34QJoc`UΠ J!AqPG/95ׁORpE?o3t|-U¡S H:O6v(B±A|iOs#1G1>1C?)2^FL >̶;B57DҖ(ںW`졘C w;(S[YoWjVqmRA!?hcӔi85Tˢ;P?@ud&@B.}F*%mʼn,qnUlO Wל[Wq떾,̥(;S 5zWF(WFIKP !BQPNpwȩ?PzUB宆җB +–yVe:YT"lc8f^=9FIszQYxl1|G|x,yBS?fBLT&YI?.}ăـu iC3};qt+2G.rPnw!9rRs%O@RI?a5x0䄟ՋYY$$́ʾIe #C;-fzyJH˷@D~0K#=?d["Lm&999\(OyN+ĈϡcG4|]Ӈ3$|g d>8 n`4 N`(욧ts)}鐕ZnchXȯ^;p6 ,{yzD2 ?cU~ۄ!.;mu,Qp&|&jkҝ e|2WasyzU CzʁA]f#hNS@RP~Fd@P-qb_S5rP/nmIFfP=,Ճu <ِA?y{%XGXCܩ˖@suC!miҬ?v3=C Khi0zV@>l:fpH>8/2{B ^i gY7w7h,!_wȟv ő-v_~ * s1RFNE;0m*AGdLךZ[H|_^ :L( ·~&Q-kH@#cb 0:֋,B@nJb9 +Zmmj*U䟻+iMȰȃrD /Xfo0 dH뮺|";QwsBehϿ +hC?)e} m" 92Pdu&Ŀy#6C9'RuWl%>1^.N<*Tak_\Ki$~#Fa %cq x*ϵ3(MĹí}"Wcw$uNB\f@쐬[1᰺ {iԹ3n\& .Ytd1HoeM6-&M:KYD1jqI6>B ;WFuNvR*<9 #Tt3{D|l~VC!2eʔ[gbp\1iPCN: j8)鉙{˿RT\݀ h[ ُil}K^[Zd^@F7r '33\c!2 Cx[g)y$h)j ƒ'y*XTޘ.C4 b/Y5& XPa SkAr|JzN%OQ*~?Z `~1,7B-]h_xl2-–fK~[A >כvmJhV7qltΕKqUrQc=}B'u-veJsN> %,@Z[F`k0L>,M14:JgU22JS߈CoXKn80|?bp1*}Ruf'Q`J`Bt1zh43D遖!ZcwROۑI-\E4$qS9 xܭJI|#a-("h-lL+ 2,kk"AAq."wO-% ^v]b(4%լ穳ٕ0!֋p#j:ת&2L܈m//ݨ+TT^<p SWa>e2*;/EW9{4%f$W5) J`iD1\g"JuTz]h]K igWj9%Jb9Jruѱ+Փ<&ݙU7ia֣U}ǭ #=2{nh u| B詤:)ZO( lU`ZYk; H}AcH?ӪT5sp'BVx04-~n  uU3BG N$'3R}]i w/eқIB]&HouZ/x\z Ӿ$JVg)`_APPYD$-kWCmg2+l erq?o*D73{n7-`4uʑ\ETʹٽ#H~.2rAz Yjq,`izPwn`48wm.ltT zeWWGu9E 9ΔwxA~^[2R:z ,ZmBvq61uv߆ҹ"t 6.bm(6J;5SOq"Q067WEرl8KPp֖/ G㪊?۩"p;uL(7a`k͸ur۠r@{=O_s;n)a5իv ^313!7N` xGYZuRWaஅˋǹ Ƣ/וFl5Q]+'|:" d+Q5}*Ԧhw𩖇N7DpOF/Q~]M)n:kܺ H<&kK8bd#)Y:eK bۙ6kLhөF6#6ouw\Ɉʹ{b-B}D% )]ôsb>Rh$rBI!1C@;%Sՙ Dύp9z>i7T ^O' { aN9)Fި&'DݼIT♪Ŝ]ڕb`hg,;~Ä^\khpEM$VYOӺYGD~ N€Iz\kʕ.^|p]$;bYޥ98uCIߤm #YN@l&'MluW r1rh~E, 'ji:2s ֡] `nPSzW b}ih BeXMҲb6\1$Di>U4 c33yȍ^K?̶oN~f/ɴAz7*AӜMEG_O}ȅ0et0珖Q^ E&ڒ6yj8bhR\}3 HrpY7F: h]>mw'B.Fߑ9R|bW(~.o ymu>xm0^9uǒ@Aܣ%%sI&z-fJ wG\M,_53}kGR=f8DIuv \˲]}l+oz&Nq%P@nB) Z=8g>rF-[*U*b*Lkxh OWw F9|(eyBT93*u7w|\C*+ SlV ^`<Y%1um@*[`Q޶.^~hn'1Nv~r/WP &ve%(^tAӶ] id*ڽ;YZA˖c5GyD O45%0unH$,=qYZ/2[Rn xr;Hqp%oJvSLuvp\LJϋϞ x)DU]'0bMGAxNGwɀwvQz$oO{٠ Șp`ǽ9JXA^8jc[PnnvL[ & XEW&Axp *r;}eS':kklkKɒ qC;Z@ uTPF]5;Nif@~ |3f:W8su:1.ra=5OSn(ʧ}W좘ы 8l%n  {GT\Z٥ܽ );,EᴏPijiks]8@` (iXr-{xUGnK-ؠ e%W^'zTh~MlZu6_nJa$sZy7 I_qc>y\jlNyltytנi7X Yt'i1:`%/U%]yu8Uck9@0í:pMZS7_\pb[!u[ݡ{G{uuMN\>n&y8$?D[])gTOY !ȼ#l.q{#Pj.8# K*a ';[Bzy 2QMwT^тlPSDy]g8,n7腐L02q 0[QN8O$-xxML^*| JvPR,(Ze_NJ=jH6Nff )nT )Q2JZ=>+;a9B'aƭK7R刌253y,nI2UM(9U}`)gpe&H#'>Ő&^w]fǕU?a:-UG闆NJ*̨o\SP}X X*zF Y C~"|oS7RVa[.}vΈh(9-*YR-9E>Ʃ9{dvz2GvyLLaIkv$:v[FX7XrxU?#Vk;vgh.÷tq#{_5R2oTs?q/s2C"YU45iE1WUt zKTV!2J2=ӊ{L_Kl6ZFؖ]9zdԘ)vjQݱWQTwqKÞ,|r-XxTqDpU\⷟{& am۴Yr4tQ r,x7=؈>ƻ|-{G56Ҳ 'mKiV^+iv hFֶ} & \^Λ:$y _4߰3u -D?Tz;'UEH+2>F (^|׸!Kް 5ӁxbtJǺuZJAI`6 )ԖӦ)\sf!\L bBL]GQɓTmm@XrQPf>>NQ9 |3B{OAʺ(TgF@cTtxd/{ Ք(P`u5L$7#7 qXvGfTno"{ԡ꿤P Ap[j xyct Tt*@{<3U  %7BuK_9%7`Eێ긕^'<֮`[t\gK鹪6'!=Kڿi|jR(GG&(Y%x;*\3ݸ S8`Fpd!E͹6| Su/=#by^Vz#>v2+&Qi0vȓn'8LEPue_rM"K--vHW\AJk^0sCJZc(,T2puCp25$냁F7X6ƛw|3 —a:8]\kwY~C,T KA;QΞq |8١xTU@&2GkSMu `7rZ,߫B ieKapXQ'sEyI;QcRS|M} sEYӳGteKKj2~HUE$; DvS 4.>)w?WI@fMb^dls!;ֱ >=L.bx0J-ec1%;uو="Ap.,}zYo>%SUN33<}+uz]2&C=;x^&Z_`>(%S(pX5I+-QswOq GlD,x@kvR7@x%Z ļ.C ]ҫJD^><7 {P1v()$Lu'5'y@2Ϗ_8"յߪ|$~{E>w{&1u$CRi>4i{g.gLzn羴Y5QKlPMb g&XOƌ{v>R_)`yV%&v_m͢Ԙ/sVQ{lx|E%tA 1Gee{W+Wgi-VJ!*ʋMV-ia݊+ ﵚ[w,ꩤӭ&^:^mB\Rrb@ԭawj)󀙜UTț5ȞELj̓@Ԫ(+fAX$g[.tk}cתjrwf|lC#w4IGIsKH듲 K8_x:ʈJTo'P-TdVD=9ٔa.pkE -KX/Ktoh@Db$÷R1z}acp<|!mо3ȆEl8@5Ckiz~vFς< ! F!AƜ  M$  (AZD=xgYVCnl r`Jdw`AޤOq]>h(>N >s٠QFVJbcHv5#8ą7= fd 5!(:/?nwrNnKzlԄL7:f(_TYpfy玔>̄<ȳevm4G 8-zܪ ^oii@ןg@W|vNHТ2Ew$$F[V~ 3jm^loj0oOdפabjR& 32>FTJV ԂG5:I%F.*)YM"x@XDV]43'P#FEeu \ BUᙴRTBSZ燮pi5zфN欎 q/c VM5o:垢2),Pd\|):œ|V>keC"ʕ{f*TI4BR8R㰳gڸD"i/݁V,$e=*MZ"7uel/Tg(*J+%id_qLaj ?D FAy'X^t*Yw aMɂ*[5rfj`ˋxG#uŸ'oN`kIQ8Acv—%;}g@-NHjf3?:k~+ѼnjZSߌk~OO $dD騙RAESwuoui _ss'H %ZnDk`3rfwb^BΣC=T79F};biq/狈en٭^1&l1n6v>ߩx` XurQ%@&00)YVWCq: D>2 {\e/OXh*" :G x@KsaNQށ~LT2$G|]k0c"z崔oc,B"eg`PU5&kU7DȊK O2BA1lډ fPE|wL5N=̪Qr}C?]-0.j  Ky~Ey.RM1^zh8uo;[_܇tzaC$jZ)MB#E2[Ot2e odxh)*k2+UrkȓZ`5v І{{ 8S0)|vR6c%⽃7l? Vh ި|IVj!;S"R*?'m N}M~ۓCt5 &ʬ+fGgZ,_W%…[d+ʚj?#$N\7R%.t1;tFH fk./K;M\8&54Y7n-o3;2;?Jl?/Fŷ|[G FX*1uq6UGŒ\w'pⅵƳOq!ݕcV|㉪=ҩR=?_:4sc%pՋ G sb/2岇a + ; \f^N ӏTl-t P_z0VCfaHSyYts)^<*ldg˙v$|8*0i`!Ąq,Df0z$gmQ\Thes7ƿ{ܧ2x}w$3}9{NS.nE^k3 |붬}/0|gXsR+[2$M`4:/Z^ZQAQRqu'[?Fc쎾a51lB2x+ص>mrkX?Ʋ%mp$N^G:+ݢ,y)Pl:@\@`t>=@cX&PYw'.HUKש *i  /\t [[c`hXA& H]%{5B ZڱK}uZc{+_$M$jZgEY^ <2ɜ9ُ(v E?+Vdoʂ&EgΌ'oJI|UDi"q"0MHD_~d5eٓ WW>ئ#AS&ᮈk ҡ_Ϧ5p]esHDoE*.ܱ4""XRN&>B&42Px $M,y DNɰ܃eeS{OR_'lckX_eM myevH?Jm}dXa7\6cG8*oI1{XKG ˤV6MG$"+;$ng"a;s1;l(?ko }>_~@ .O|]ioGg<6|Ox*oer2Zj ơц#$Ϋ等^/(Ǚ1-7X,Υ葥9:ed@f@׎Cô8S7%,P~I*h16ۮS<&IP`妊(gc)²u#@H5<XF7?œe]ɰ.#)8s0xB0 i!Tlj.A~WdKmX" /A)P}$J|Z)Xp– B='C^Rjr@"1_㮟]J% [$DM\gWe1>uBZ "̯.di 3nû[DJi#F7ofs$YF>*Jm6Lmo) TKWa{VtdX)BP'gXD !T2;LjHf}㧔m5۵|d`G"Th. 6RJr=̣_y.1&xE'񯋒enX0,S#(3> }ުoϘHrNO)t"uaeD"dzHk> ._'S]jƄ3mׇxV$u"ʠɯ] ]JG @YpN J#8`@w6+!%Z}i3*X@ڑJz}1 ?tŗ=; |fDe8DYúpy㒜sȼ R5[YţLOpOw5\Q "]xF3J<-kN x]aHk&VfOWUq[ f/.&'l(KJ ,.#Y,t?Zs.ڙ *r ֪`N|6R-,9=V l LO0՗ R1 Ks&ceH2W8ߣ xЧ``4/˾o!cz%U >]](\0[>%EzG;Ds`2䃖cQia+1-A XlPqe}mOAX]'z4 `vJ.ܢЧo*7/rpMFghWu2 !]~ B@EHtb + YfB8C׋pfC?K}ah4+¨+!?*Tt S[9ų]h$yU9Fq=|1cj=ί&\Jk*geᚧga-U {ӷP7vSFQ2TLX,iH>1i!51@qw?eS&6ʵ>%@&A|9QoZ@:]6Q/Yn/e?ukA 54D.X:MDǓ {xQTa|%lZ,PGe*1Iۇ v(0CɁ"#sӉ]%ExLuѻ g"W*QS. ced,ݨ>ROw9;O:K똬9x傁 Elr1tW:0㛲 n"&2T2K| 662QZ+Lɠŧ~ [G&uֶQʳ {ٜCbMgT[mfCJp׶N<5 6"uWNӼN19+X~9 z L8z}Њ*1R!"d~쿩&9D Pl|ضt4#uyBԐfpS.nķ%EzBv^>sWKvJ=weۻvӾ5mq)pQqW?81 p,Ů&u{tٸ^%68Gyxaw>:> ;Cޞ/[Jh7=1J%Bsaiq,k⹀)RM9JnM4.hvG2f_С!t/jJSe B׆un?:C.u0S RZZ%ȫLd#$F,{WOhR{|ɥo*"u˝PCBO)s] xt2S(?/B*w0/u6㓉H=$)*M=}ShG>ɵg]'9`q=:q CTE6ːî9rm`q cCk} ɯ -:6Q3%2aeL7[_MSe"* b rn94ebo]gWHcH@dH<_}"Q}d"⠷4kF4Լs1<pҀ2%[6$p==H1WQDs0KޣN"V lĉw6ym3prQRWpCoشUzۏbzFZqlg8{Hˡ2mDJN8R7jctY1:RӍWn ;Fhv$);-HETT|#[.fV/ zfLM[[uG+䲐.B86ӀxdP 5Δ80QJc `q~nx#nvx YTj=Xcl ("5yL'-2weNVk2-.ClC@"f)$NE Ė(&K_ٖk!'K&H7>=Wc"AQ_!J:x-}X|BI%K'պR[JZ(C{xȚ0xP 'g8 /F, =`NXI75@SBkWqPeЦM =s5I^(VjS}Mi7[@vO-N)#a&a Zr4PJvw֍ /$f7}#) 0$~b-TngSb8d(Yi_\Y(ƵixvwIfS&HHXSs񱐨W|=N}ѝ+ a;n8((@N TlYrɕ r:?Րj<|trM pQyF+L?b-TƃnMv&aO30za#oX7J;&E#ftyis8V3(U۔Xꩣ8fZP} ]ZCD5oBw k;:*E 6O~Dhw`]bƽo͗МJvPhԈ[)ȧsw7 C紓疍M僚qӿhPӺ$yiJJ[ Dw*[nHBLO_.TٱT $W a&)IX.eUk'x)Bz7@+A>jj\hFm^T'D2Tہ ECeWLCwٷ՝ ~ 'L~5:eùI+}6bOi!gw:56F&1m:,$x 1J0$(p`P*3[kiUw ri.Ynfي'5a'.?rT(tْ(lxy4,G!=0{Ҏ6^]VD2頾*.m m64DTilwNE_pꏏ7. ~5iq'8VH8Ȳa?r<6hRN/= wZ^7&n-~|n8V1Uʾ}ZC}q1|=+;h}W^CHً.-9eU֝jhw.D[o+bv ?ʐbڒ~Q]DL\,v/;(MB&C~Yobֵ6XVG;x9ZHCEs5K9oiZ Tvh2T{pJmg G8!K3+\bNu f QM ܘ0C1xV^Wp/؝sJF* ? -גHIs+5<^ɊG%gmG߿!U5,O g>uփRIԢͪDdPJЁCϥU 5mOzޥ$lZv~3T3.}RO:I_VOuUlْJ7(HV]?;F/c> 4ߴgS2LTH. yp5@=4hj cao vXY}U/I, +l-D ɎWzp'h,Txn̾c[ecGህ11'O#_,?͆'$hHњ+$Ma q vGMtDQY6zXFoഠ n #dʩJ<mB+S"!PQ[(M>̆]iDJV3bUkq Fjyҕ+)Pogwh`*iKJR"3w!9TC '4>)iVc*HD-nds$@5w_Vcp<3К j=nmU ~c]ݱ8<.=7]TU5DW,\w?Q\8f!Х :27jeJױ`&}!d:לߐ,LŀsaWEeN"TB8p-16k'͔mv0%(f_R/Ñe.?)׭):$oXx*d.g5kܐcXs#|jXbj{_|ME(%V"2/WOJBI: 5y4lPשLYH<~RMWKQ4} !|;s"da?锴jp69Pp BQsg9-:YxMT&Bd~WlG>ǃf;*֮sibKh+wP{kyE^U}$iHyzL@A^;_A~]Y"hrbm[{\BZQˬOrHM[uP\0 AJNgSzdzqUk;D4ȓJcv3R^#EiW{OhM\q#:'q(<ߡBֳf;T;Tzy[Aƀ8QOiġ#Mu}uf_XgPDp0=x4ێ؀´u$YyS\9N|3,|ȮTJ"ҭ4Jt(3aIXTLG|mgrm-B` Z9#!3DU\d+X륎8J"Tuj&4A4ޒ*ē~JKMc?NIF5Z *按-,Y]#폫tgA2e6_Cl0CUO-HPjav5O%T[\ ]irrT_hGH[}#h[[#N9d5 dy| zA/2(Uȣi?jx\S5 e8M@'ݞ'MO(T׈<=]GM/9oF gC]j˂ u+:6Y"A սmsŝl F Kܗ I,T6٘Ƅ[;Õ/bJI T,EFh8?Ѣ^>.d . >`KRr^ Xl=2ћOX&sOOhY۴e3m#uYղp"e=-ֻ]HZϯ=yS  P Ԑ K3zM9I>׾9m.'>vXEҖ/gx*֥`˿"=+hH^.O׬ePi@7]/gsQ' ,3U]s@d~˒Ƽ267GB܃Ǫ ](lU Fb|K@1򿱲K2"nH/',"b?$xNj q'm};a zf>×k=g"q7'>`삦$>+j3znO:9qO ~lGp)g-.>VQ9}di ;aoHQdL WPF/upژCH>'l_Ii ݋rR *"I֣Wr]&ϫJzZ*8;=g-AWMPOܧD@ƼR<7 2$OH{DE1E]%sXsouJɉq8v=mZ=ei."h?6`FA5d &r| wѨVH7%;4T(dqQ{C x-h!cNȜ6CҴ ȞzjC{9:N2dlĹ5Eċl:it\ pĪ'p3Gs$_U4ZHca;aqJz͝ h_8,`VxN^asM+ۺHZ+Ey;i[Qm!'`j:pP9`>FqR?mI>#YF˰u%p00%D_/YnM]С6wӵY݈}c)__a"ɬ[$*i-50JzZaw]"F)~oex.q p] Bmqu!K Ѣ_Jy4K"N~d4/ l^C[.%1e$Ѝ+ڙ[# 5get4.ҔuрA]}CF7|PE`Z`&az.zA)@ʫi/r6JT@cGQ~G^\VYY_1 kA&:OΎ9C ūNXI$A)rj D"NJgz_{P\Q#ϽzK^e덻 ڛӵ-"ՐEBEP$, 8SXi";5*YBBq+ `i-xW#Uĺ3^ë7kخ_1glVjكSj6z;<ʉcӑi(\@׺F@=yoxqwl͜`3$^ҽ#$({KdCau_s>A'˝RS`Ud 7 ҽjvqP.сNu)2Ao`JY1님XbK)4"!U/p&.tMdW*&σ\p#0}13\tgxhc~!usoMѯ w)iMcNC (6Ook#-+ziSbo*tN-v0mhm昌2LͽvTG*Ө:ъqȻHKOj~}~7 i2^U>e}۪y12fr`,Q7V Ra"`K/%Ywx "?O-kf1T&:|AZ/}˽QCjjb=ٸ}E`0dx}'Z&] TŮV\cXԛe-Ϫf qܽpb\O9J'Z'%8*x0q;ehm+éG0ғ~XYK03WP55lH̔׎p=09N;F$%*72aVpP<.I&O_Xˆy@>8x/Sasbmx,-㏞ddא^x)x S{fu Wx2VVXt Twg i Vz 4zh\}0%Z/c ,X}s QY]o6ݜJtDocl8,~;)t"ڭ0WKI .ʙucNKFQ54b!6S BJjSz`q&xin )/ȴ  nP[a꠫-ޝUyqݝ"Se箚??s ,K< s9%MjֽdΈS.g1 C{Z&i%z#:#7@W3THk(ctTYz9Ҩ5/D 0?`5XٯiəUeJkWX5 a *Z(-驉e9v(<\λmh@$I£WތU`,|Un_ S*qdA>5?wZ)Xua^\L0fjeV|IWQnu* q51GH`patLnWz./^e mJt}՛Ft4+}yO8!H`v=R,x UH9EkDZŔZ 7Į{e˙q@KY~g64986DDh?yALo#~\ݏ|Cw^n: 'mce,7~jN;s'~`YčoYRS1-Z>X8g]]U1ҡ bW¯ _G?>-d+L`n_F(7ҢK?A6VM+6ԊJG'_yM큵)%?y[,pCU?{r*1/OP IP;xDW%ɨQ 2PsG iKoqE.(J?tYqgAP4:dv־KifgArۘsgkSS55l6,3lD=:ZgYޫXy:ծ2lpAJ1]:abzl(+"Z#-B4,Aa RH-~;%` ov<:7ɓy%Y7_V։+0 SI%cq lHry;6¦Y~< < 8`Z}-Pr|R;wtMO3 #_M%O0Aԟ;p^aLcxb· /lMЊ#D:k~U^V:9ݙX{%qfe.Yt8H>0bα@&{`lJ ( |M*ܭj:,'gy#+tTnk`CNsPWl-zFuy`7f߽fOg'G?vRԛj3&[ɴG %ҏj3e_}L9hf4ͬu_z+iP-;DX*=5jIpVՙ\$U] Vs;o!^5ph֥ j-$E;~j'ο n6sҎ)q>RʍIgΜy1P(%E`b~SA~,B0]r=whl" Z;] dY~{H\vl *#7}8;t aNv*5~CNً1\r^@_Sc[ByB]yox?XΏ1'i_/fK1 RkbEZi a=L_]$ϏۨG+QgmY:'ĚVaW jm= 4d{ d0l#zkɚX@O1۲srZlZ +y.qxOcT2o\))S=(>+ԈJdx9z<`d4@̂!m#e"  j2vOyN__wWd<~=mnƺ'YXzZR=8NSڇH@&?kHy3=aÁsTsPlOcHOt^ j\X`%UƨoHW^ocLrYb܉/ܿ)X& n~>g3qWbnoux&ۖS)^zM f3W6Vk4^mCkuR&K[4a`e+H Lhuǯw_GGB^JJfI6 g՜D~r$w2DㄚcԊ6E 0|%76ӊy(>%ZŲ 쨷IE˚(?.AVw)~<7/3,Fi}u YSY.3m#t]y|O¤mD@赣tk uN4+M5B?_Y:m翢ןQcGI`x{qĬ?姆pO9._=n?.N7b$)h1`TRN! XK7s=LjtS1l2+R[5qUAW$3R{ozYBeDU@HLbsjw.=gaXC"KF(Ca>VZ{$m/@ $}wvMj>cEɱ]"XHv?B؏S/^]M"nq$ޔY_OAY ԷZ2=lr^:b-*Nx 5Bh[!6yuH' S}.h3x;2f;{G9:j3U}ACRQᴖL^Lk5NA)"`97g0v~pYm!YHg8q(1[kt9@[ZX>j+Ȼ\ܹpXjUKCVtNlD;;UXGX Ahg%yճN<"vtˆ9wP`5D#yc])?a*E31bss[JfxOˁ=Z1uf&oC9=*0SUFMOiޕY$f7jCX7M}~Z?5Q\Hʤ4[$HYMϬ.!zJtiZ@SszVsfO,;Tԯ-8 ypfiַhLOwϛE[Jw+[4!h=O;mth|#+1G qQ\սXⷴ(eOnKSLJ}r"}* (19H̱ZסMrGD=f!Fǒ҈8=_g>^1Ͼ ⹉oҩQ{w.P"dgćyxdf3AZXN~b1%ufJ~&7;987qJOT TL0zO7z2[WEXHfl\+tLibYf2IlV4FQLƪ B^J`\Zg;7a3|62euiWP8II;g'1{{9H"g1 4V?+R>}s/.ӼU<^\7y"K뿌m 6^>\*Sf)dvH=QD_[5G2-š$1sy$bB}Mo2vQ`E]@Ve;7rOU閭 q܃?)Ƞ![XUol` ; qUn`ٶ^M#4C3v1\0$[hZ8t=l͕FD?p.zXe};Ͻ5YKikAMT䟣M`+Zt!*i'ݰr:\!1QU5HNE@0[/|wBR8 ϧwF%ʍ[7ÿ cݘ1nJnO@HTs`}؟AӝE$*b` /T [ðqMsxPs>Rm4@<9j"WbT,8='8X.KEkgS(ld*O0G P>kz7^N,$b1dnN>Q<͓̇ Y6GźrJT^{B+Gp*kLSewi}"~7"t C쪣l2ߗ jT@}m("=5f~꽽S t5#s EbՉmZ4Hrr.k3~?5@&^{s%s2W` Eyj!ldSTk wU'8nw%r{qط Pn Hsӂ8dz~lcjVS.vg8 7 YJ{{[E 8F"%  rLu'5riL%G@kx϶<)]E)h;-L02l_6! CP@{HhcZeCø{M  Wb6DYLJ]f1$} p%&uл#s˼ %^͔Xvz^퍃.D *_ l8+™ʓ,!^0@L!FN ҎwZIQ!l@\ȕ ѕ0a{&1*,a[wvm ޡ\$TG@ik!9#l h!ԏ ^D}%Bc8Ja-)ð oHG3ZE_w~dP}(o 1"UP@r&ǒ]c,A4pm;`d& P 6XuB;tBQBW1 eE6En:gd{,MA\m.F&؈!-ߞmW5}@iSx"ss d5I}4$ iߥLGá E|*ڌZzDN_ܲᖧ@bU`8˜S21B{!aZC Ko#ULz4?Q(`ӟ+[ l2_ opޒW]_165x"S5ԥfhl 4a@$gn3dU"\ "&-Yv>bog&߮,&lV{!^8.MWy$rbA;,zb z=Ry;bޑܫήU!'wY*aFjbĶEʋ́̾e[ޛ/bcϏ2Q岣za *>4Ny 4°sAaJG+5AyNK1e.<4[5@_1u~1)P);heq}T0Nq=]e-&V2 i#IP؅MH+XR݁Q"i$>[ZSuU+;9 3zK817 4dbLS2'T/Q`Ѻ0ɸ[C?PAu@0q,-f\'&|ԠPy 3/ZD5%<|DfAAࣚ6%fQW$/'R}7CĘ=6 6 3g/^I P]B`'y•a+rM|P,rH̻,B$;"Mw$A7i%Sh}M2cӀ+;HN(x|kp#tȳȲ0NQ*BRM(x6Դݣ+Jwc&<0gwJ+xͅf0[WC3F I1V %Sɝia}VZ 70^H*d6[ū*!JУab52`/nl(? BБ_`zKxrImk0O0P% y|||)Ur2^hvd CFQ ȥڧՙD?mCf( `^iXO|%$KAƐ!2irAr+ՌŪg6q1؁BUOcdB R4 uo#&MTӁc>ya>yČf&vC|6z!.Ph݌p~ t,i=KQ*,;6kY* Htф:WS3?,.t+3ԠS^ѭ- >ז`wKS1EZXtMg!vƍkZI'?j6E\oG} bȐ>G\ *tlX EaJ# Ё^ $ Q ʜHޣ%jT'G!0\Yp@7!j$glZ5ⰵIUo|u<idzgGoFw签4х`NJ_9Mtq+'wpċ6y9p#$ aYLd'(e*#paIzs7,q9eW E) x0tc9pyQ}(ͣqUZ@-ٯ@v'u H--N1g0c"i*b>/aY w/:X!:UӣLLPF U! _M H -9tO[E'U{+F|&qq w9<|ݶS3G `ž'^l{ TRԔ7f;wz1,M鷇$YoCKv^;9}-%СD0Ix+m: 6 `A&8/L/,yEfJ}!WitGp2DS81[^`a/WJQ1d #Y )O˖<@C! ßjUϫWB7J8U 9a4!.biR`s^c ><+uh_,OqIqex aj$rS &3cT !~pVPlj&"c\M ߋe#+Rr)_BHBʨ[8N"YuפJh;@`ZK?>#1U=k1C0_ӐǝRwT(8_^{c E3%?4Z/\Q-GdZ)R\MmNTm6vp:;!]}j®vK=RxKds4]:owsFF^j9ں_"ąq:u(ŵ#qѢ> 5}lf#o*Wӥ YT-oxT b:mHڴJ'l'Ȯx6AFPF/8Q$>AS@~fmɢ i2E5 !#TJln^FUJk%CiGپߴUk}xb?eeέ'A.|8{us i]P|*GOrH8/pkEՏws҃aM 1mä5aI^`U-B9@QfO5}E 4HfMZ'e·_>ˑozB.O̹9o,\p|O1mUP 6\p!.{ 3="^]'8]nq>[ q*U[5`ʪp (1ԔcF( }%xb;nXeAs5WBKPnsAGbH$#HqY9|lG"XeJS֝COWc,du4$Aegh5G X?.w"T?;*3 \ZW[rLNk[3tT/] PIB4Nn%3,b2feYA@n;Ksh=19j[dMQApW}o=v̛T0sn~(A?op>Oc ⶞u[C9 Mw/z?`cqS]QL)ݥlK3#mB!>ҊiSէ0@u./EkDKn=wRiaJi4]P70&X>V 4M~6XQ~9MTWao3 c܇I|gôZAa($jJ,XL$!04Up`Euܽr)?FQ=g5RױAOA$w ʗ}ÏS E6gEªkh@2)2!"5m:WnBl5r•>?f4"frdsNqL'`(ȂY1s_;?mj}P]E^)&q_ ]j[ewAHP .i:~%ܗ9J(Pl߳ޕj2,lHYfx<-b᳤? Hd0'~>0 5u٘6]W+NxzRWK~(EX0 J,%m —D̡ CZtdw }={'YC;.J_e +6օnj o+(`q(-vEjIe:d$: nԵ",-6`W 0IFϮ;|rK(v;u't`+u~1KLx˝ O8-S+A\l {v]!+xAqx{XS&pA/#]E {ʧg'"G2!ĢpzpmɿLh~ѿbVU,!#iJmmL t{վ L2]1B3?L4Ax";bq>GQ9 ,5P[ {'w{M_J Ȥj=ues\A2N Q-5"BgC)u):Wl2v/;8Ec1ui'kUNw3 R3'? xk;A=_okUM\? < Zn}W#ǿPF,E hhsP[ ;e Cqd.G$L~vNW=VoKE 7lllwF=Ǖh}9`.+ڻWEDLfVLaXB6}V` CdMur5m5?mg% S4.5؁N g:-S Jj@r1?%2E#Ϙ:4-N^ץΒqlFj`ڝ$Qҥga DS) q\Ac8_/ e, و:=+aY"w$I/8Uy,@Y4uI=L,-! ޔCklQ>}8WZՀeeW:sDT#9X*#fKET X Ú t1@,x*ܞhvtvW($/m6 | Wxn_<GWF8n橜%=zIΧ ߵZ~zA_H\9& 59N;&=qE]% GuL%. tUmW#($'vVj Un fWJ ai@- +m(Aeí=RyTjN'N󶝿4 (dEv3\ ,4bwV22'tx|I?3w 6ARLN K 9PD7~2R{b́4BV7)cj?l='=|Ǩv EpjfD9HFv` ޔ2^9C{j5B_>R8g9F;-b<7 hAi 7Ԝ 3PRƙa#1t#OG'礭"$03!/ktʊ [ bM:[xYt겁r6O{C h90*{B GAJ&w:MАn aldYF8'4n4vplԆgOcj: Šg:\WfӰ2zȫnY}1ķI _y_ ȈJa f jFھ>|rڂ]N'i\\ѷc#Ì[t Ȟ:R3% &tMx&"#/o'cյM؂a4]$Œ\ybtGH+MŦ5u*:a3\Z&B:J־\߾RF¼:FBO&铥+P:GEau>p~a=@pMhg> l(ۅ~繬דj{0< PܹBba{cҧ@?mvBt?<avݿOu XG/Tbۼ1K#<ԙ-̉l${+\wk ř=M\5M `ro O/Y*;xC!Z6A}cplh?}]28lZz~ih8h$%gPwDzo_ @'f1 XY?&V۟ >ȽkGSX dCMTU6W ^Ļ)u.Mrãx8trzP78tt+s4eǠ|U~q+ěƒNkoKZBwm^7].S w2i]LP^ε|Eroxt|F.}3Bۖ+wqeT$ɂ?ʀ9s+t@[U$aI(jը!7 u]o'\%ߘkHz0s/G 4bi<~HQ$X[Km ۈ16;P^!{GӺ7<`FɫE #iS8\mڧ]hsBH!EiZﳩc0HhLχ ^SX+$_~utw_20h\U)}=C53tѡޗ "Iނ1`=nI|8sfUa} x:-d99p1uAw,WjJ6Fw$)b9XleYd ^('>J+f Y B{=|Κ1pB#!s'||W^g9@QnGˢl*br:փ >N Ah?FYa{$ADw=BiTu\i[f[^S>})sౌNԥ"TaF5ydENR96/pј_GQW8<*pfo?a0 5\]vsGKt-rA|s& 7! j`y?ޗK[Wd5#LiStDoT?@u7:FNtDV zP9(!vT(.fsK:SeI|,.{˺SkQ_ ז:#NYkf3}=-dNAkN"=4X+}1Y#x^N>1;X諸4Me"*HOטxnީEB%K9&ff7% =(Q=1`FJ&ٕ3ChP79:&BW69x歛{S"}ůzB6i3 m-ziu|e kpt|)|~ܴ\D'ϭҾx&oZIL9i]?G& 3  ">VBngh~c@kc~t(C^) Xav7GN1r 1˓DMrt)~7h,nxY ,eOZYl|,d!JL_ G!ٓ HhjyFڼ!"+cИ![3SMX1l-L!ͅU]`ۊNYOk=Tq'3|}[4E2)r㚯CJ96fdM:FÊhp0UQpi2Mϐ/}.1}?A;I]D`>U-{y%GX(dXegLLͳkd(5ؽHtLbiH]icM@)*lPI/hЬhl íizfl7`"m"ad)2AQi>+ZڱKjVA?[QL s;7@U?7sxOf\DE9^d2h5%8xd•n'gՑ%HVqlVʘ꽷yVB BcTg(63F!Oޠ\K&Ok R0]^BkUzN~/ə4]NHrpLZɄZ zk*YvE"_C.כ1ݪ*Pՙ^241XqY!MG<5%a,V+2ַqa]Ɋ6^#`E&]xZƈM6~gC \(C~7%Wl;wT;j4m~P|%K| Θʶ-к>X.9y2jغHںdz',|:|p s<jI ^GJp7^`_Xc꒛z1l& Ђ|V=Zq#)ap}bY' 7QXԱb iqWǻ(,X:;%NbBP;CZTjǫgTK)iR4xo]wJ : bS1[f* }gSt?};k[՚ yF":7DJ~4=tc-nJx*OU9XE*9~ĴNJ'k Q>L4*8 ڿ)xA-$j!*.;F3-r< ZZB兵 EQGnVh7^&R{_>)6Q/5++r"౭ԁ=Y(rvZ;_fH 2#] Bmٟ'q[y_6Û9örY( ˾0c6`9#ʥgIB"qTt;cDs'ŏ4l)I_WAlu, ('Xˤ{:Cq=2E'y ª;qvMdɏ\d+\($Jsiy>Fukd̜kX Txxiު,/܈Kfv_xI țtśbhx㯟dNV*'-; d8S=C\ebB'g8{IE3+’ChT#„V=g|ajl]n!G4a҈/ ])wėY f~V? LٕXL!(aScFdqo7Xh* R3p١zx\: &oxۜ~/Irkb/m)[Rc< Q4+E{^ڰmU6y|(*jJ$@ilA 7j("f|dYߪҖbՈ"Ў-ZJĠk%ŻnȨʩt 1 8B /dø̫i /Xi|UQ2["#]zvT"Hld/Q%+ljZDX/Yҹz]?=ڶ'X!ڱT0͠ .2xP+AIL%-s|,a)mȜnB<|^!?GEd.zw&9bw#c}b΀*%Zu/*quda4d%}RX x/[k<kw 08&|;keӉSOc*luU.\Ffڂ| j[2Su[Bs}XENN؍H o gLdw&NI9Cc}z]ӨCzGJ=?t!E+/SzBhӓQzd<41uK'x*BmJA'ךu떑VًʠuV`:YWů׹ZFe8b|U]moOhu7Y^;.jH.L nxG0233uZz1ae}/4T:4=riN}3Gv%=3vuTA3Pjw? HP@X/PqKs{Ou܂,nXU7}k]U_.fK5юPsLsjDSNUCCaENdA*ba=1874E^ljEJ%Kkq(ļgomFNjcjbYsTr W 4>pSCQ4H=A( 5Kdd 7˷R ! \Y_^RPLĴ!EP+%ΤewV(5~n]6gdwyB*YA#jxۯUώ4b˛yo{BL|-@S(D7'=]VJ~~RpMP6buS,홰SnvTl(?U Rwc͊^[0j tcf6orZf\_j3SEcNMh/%m]zg 8C0.8Y8iMVP}/]1}V7g&wC˪{b+zʙ\(5%yIS']Ks'zQ #ѧ@Ard[3=+=g 0UhuѪÆ=P#s̤"]ĂaQa;uF;٘Yx 5$mUR lpP^7lBp XIfWb{(ӐлyӧY@\剥V 0ƽ' Ho2 (R.qrBLjdeό` Ӂb<$}m />ECCoO?Ini*.,3AVLBX!,L!%"tc^ʊJe~qG^-<69}uZ']EB =Q?4m#J P ǭ{F]sjw 3%r*KX M'`l2fQ.-.ӻ,1\X7'[ +G֗<8uBr‡" !5A dOE-cQBz4/|Q_rv/ ._ (,RH$C  vas,bh3K |M%Kߕ)?}q>RF1[`QJ2ZWc3޾$ID=Q  ;[ "^hb]{z63i)%& GOvJf35Չ{krxqʴs⥞TIg[ mK,v8aZUg y Ęʼ"Fb9ʀĈ6cۧe~Mh]Y Yi>;/: #uհ+ uTj;V֜:IйuyLd!dlh:Fvʣs +d8Oٕ %̳N(2^If Wb[n))I];OlZ M z:ă\1-, j`^$;0NzO,ʂN}nS;1cն]x8yOYz1"QGCWڷnQ=?*lڲ-tV* o' ĕ}JRL<ԯchkD:=M˷A9έTZaC@_^z S#1=ҠZҾ+ Ч/N}[ W?@n%7`zU9&U1yL__9*D}i!\2[pVJajρdͿl6~Zyydr"d-> BP%. k8u S9~RX~@a?쨊͡UU~pj݆LBbJEƊxLx?f& p\]l.c4C.`1*F9h¡X\pSsZ%GoW`ʐV^֌w5v;i(1>{p#"3[;uoxO<XnPq=@~*AjGhtWQ ECk 'zJJZ`x]"XZ,`ɃPtɤߛMHm5m+*gpV9JN%p:E:$/١?(%j.ցh>l_gCk Φq`nQfBtQsF502 < y\KdAf[5bZ ܻ|QT5dVΐ( t7П JzMOv ξVf6 AJ=ev5dE/rCtw3)ls9L'\}1Fb Ǖ\yP#[| p׺_$zv\^*ZAq_|2~gG9Uht4~FpIu JTĶ>`bd"<)W|!h2 `-`^82If3;@hB5f$TuLp17Bz, #+I0 T*SmiVyB-O ٚ˲%mc0 6hŔwKhUz^j߷|0'CfĄ *8o!rA)-OvBY'TiXPTS>&^]X牆у|_ipPn:c+9vvSw$S%ocdqf8K CE5R]jʭWZƄ.;@l @rbi馻]PHrsThFF5.>G5:Ƚk )Yb5m$VCWN@Z'&|_AlYVtKgԴ3 {h m*,zuJ@"f^U54 jV[ XnΫY>cvxKuQ%HO"X[W5t+Gy T'TI[5KT peLZ%%/L#_t[]6n?iGzRݷ>/2™#>? ^xa.1`]#EA;qhy'MTA#Pň*2YPmv%׉5}g5 & |l4?Bu "Ĕ.SNMntele~/q'9F9yydSV MvP+(W׻HSC;\eMٞXG7Ae/i#ԍ }exr Tl?`ywg hyG Hb(#Nɸt/ +Y`/ɫ&u)Xѭ$L~ 69yXGq O2{]dS M=do;21JKv)+l{ ᲜoЌi=;*'qKԆ5/p új%2K)&3z-HЊhR 2|g4)Zw-QXY~scQY˴$i1ٞd%\$u"@11oL!~V2f;y{"?}`cӝY؝ Z˻nt̝_}TfIm=ءJoD=ŶR8*Y&涌RCvwQ)0R啸|VScZR^Z\S TR%Ԑ.!!Ф`d U7"V*CYR~{tÑS!>m:CWK +5kJ: ?]qE-<-wߟ~{ N`D c8/Cڏ.|V,n @G c QU;U6Jg/;\W dobf."wl" c{߂ƹԄ/ZMvx"BB} ӣ6ơ\( iyNJbp`|ݸڱC{dޡ޻ dO*h~Gr#QG.VcR^?#W-&yf;i`b=6Po1G1͔ZSM1\wWE^Z|sD5ѱv9`IJS9ܴࡖ8m]C Ĉs:km܇Лݵ٧sL"3bR1Dc!4(70Y{k+ŀH-_KhiXsҪ]QP*>ޢnk^[Vr^KRۏ+D3$~CN1NEJ`2'gZ_P-ZokT}ৢmѠ¬^=M^FWn>HG7$]:6WzWqFz#܏+'u诳T&!3'f0/? АO4(`̤~Gnт:#>g2'aNAj s1l Op Oz(s4{ f$ZAg_hT =M{*2݉ND|ߪ_EU;ՄM퐲"Gu3?mDvFmq mx?z9FH)G{~ȝV Ƙ9 #H- (N"'rO菐LJ3f zOxihQ[~uOt9L7/b$IxMSZ/m3ꔈ}3RxT,"Κأ.xMX?>kuXj)Y0*xXDtBv. 0I#~$].18m fG>-4GJSoQJ?H衔;GU J_Rl Sԡ(CX,.nzXйj67Eלz6{nCI۫\?Hw adql]` HGy oU<4H =`噦y˙YicG:Dɯ]=}d9ذ2t V$w5aYa8FdsDI-ФiSDe;gd^)K*wQ-;3r42(?]wP;Z<3JAp/Dk\"%~U$>M'0Q1楤p~_ckg,ҫ AIfr)}{@DqX_";>`y͒d>y.8Ik#qBy]m' 7p$"r5rqԨi΀0E4~FQ+eJnOUOR=3T:s!8>nW(ANذ䅿/-GAj v|$r.`s */2Gȯ$m gƅa棢> ͫ{ۤ1XEG/HY* ,B,ZAea v;dԉN N/(>rf*>jVd̓ټoRYi.H;z;~O߷@ѪtojHZnЈdy%uTy0#oAWj4+ێ×[fYWPՎ)yI({gŌX] ormߢFHgi`X.BL5Z^Y; ,((ߖ:H2( s V'e@Em`)!duia:|_?:Sy {XY,PFb!I =5ge՝EÌ8Dh Ә.' cUuF;8?h&NMHI\U9WM6Ue_kתcDUKc Z  )ɊĎ>9LMal:"qtȋ R߲.QDIѦ&Uu GÔG>.FߖĮKa*eլG_ בd5nct'cA ú_~7,ܮP9tK#U-Jݕwؚd4x2D2wb-bPNs^xX8Idyf}2DuOIf{9Z=;B(l<-r.G3ғ_zD3 lA5gT0#od'7.k:=5W`_:[C/GI ܾEm !NL:ޚew%Hmy҄1nτۅ{Ş5'lFԯ ~ܒG$- Z,uj T?yVY2:V"W@#6/oIn!2Qa YNF'6+,`yc !,Y5&P}Rq9:m3o/L}js? @uP۸Ϝ}|*O%v@Qy49Ro m8jKs!Qoq:SMYacS`zu ϟvSK4>%P`e}TCIm7HAGˑ:W/;7{P@sC#f:fT;PJd+GǴ:Wf@(GCӘSHǑ8UW[K\Wk+GS>izPr}j Ba$6͙Mv'׹ldG[յ|qY= Ee6JY2꼠`3_Cձ)'~9؊w A8_jJɁwŊ[Mo A.<U{crx똘WT!DFˮ@ >X;|`{gpT'$)#wzJ`?RFLl榼+(sn%=5|]wstBO=5(3IHe@jt TDeMRbWYv '9W6½vOKˍh70,`(糶4E qJq"pWt` 󜗨>-O NtySH1M/Wlny {F<5lK"SJ ?{LZlhLd4X"qJ6@8VW43K>$9ApT8%:e'ޞ܉8I:ͷb+Ol#6-FKp:xv W;Y ӹTmc }A§;;ycg詅UIdd8 Q1δSNC'祱F:q/+9Dh7B<A> :]<-OgAi.r"e/7Vd߯ӔVkr1êWU- ݤ{ ф`M@<8i Lf}] q[3u8^*95qJ"hzg q+ڎ."w6zQx~@82az&S|g]8gqq B~-EKTy+[}Ny͵=, Eȹ2v3 Aⵈo&7kUF8@WFbbf&8 ۳Őԧk32eF[(Uv"J:>5Yx=;M>ksU\JQ .^j|C@(&nTC@1/Ɔn>khzTNAS@5ҥ;U r!8]&K $V†ҵ%ȥF0V@IA6Εv1¶լDOd[S|[e2+}0 -x7:[7ܴ%xoTtMxt /zEdJ%O5odgCP[abcݚ~t~6/[]RW[S?g'gTvm|rp T (2 H(Ůl@2s('X=P)4qqwd&%.ODC\#Ivyf^Aq\cA  oggHg|RdNpQ}NᚓLݙ7N^9GgU=751yF82`a,!ɏ4320|,. "ְ ["k.IGkE@8Q֌*ȟ-JUC/wWQKɀY+AK԰l~U@QIϦq \rqZk*`IbYIofϯBbX2Dž~  ߩ& 9<+`wCe+U8Ecv3_}lA샦(K4)3$;:qPiqR00Jmbu,|2a`?z''NfTwpa9G$qc Yn -:*B||eu$3{mQn) Zia<]]R!yPy *nn5p80+mZJXWb/<1-yԢ 7rB6*>Nƃ) k=hY gJ \^@/F25uD{e b&HL+EJD&JᑴN k&aWp` %L|왮3 LF]~L cGD( c􆟫gP V.2d-Qȥ2L { 4(Ȗ٥WE[̚L, -1@}ζ 45~S'kzPw +P^i.^9&-TR9(1_ R]K} 2soGu }_|%荍N~ƩI"{ɕwIjocoH![·<*%M Ȫb-nxpe}ryrbO!ᮥ,Jo*6 TDȐ!n%~-s B4}DWw_֨7.E{c>QU0َشTO׬Y{ q~uGj yL7`X-`Ӫ|]_J c1jNz o^8֐&]1S F]Wx hTrD^86;&$\&OU0VqF#)+Ko(r*9!%;Qw,!n7BC0n ֧bC4Ȅ6'`I3 4XXP3ٰ6QMij*ےex)h,;9ҢKhu+/_^jWn SGGb9/AɋPD.nԈ ' K Ϲ KeOe5W+-z}ノ]_SV:M,Z8ؘߒ[12tI'^c1{Q=ѽW?gg"BY6N/\2$)3(ehZ27 G:ZS H_vSLF :3m/e2cF.R_T1{NziaP`[%R<Ү(xwΓ%Z9Ƃ ,Y8%tdw_fz(Q,=6/Jv?)pE}L%sp3\?k<->?@^%ޘ|2&(e֛= )xɚ!EpR*Ui"^OgEH)$&?A&}/dzi&;!c6bw@E!SX]YjPz{(YqGʥh@^sOAt}MF$M?Kr bco% Y[IFXB=n϶qj7uMe{MM م<nyml3Mnl(4_\4Uٽ:?*asz@wK<uith BEc~|fz9 saU+ ӱHZE,kHTْlՄ_5#)vDMFt=_  O/1wx;&ӬQS[ $o]Id0 AB -:=QU`nx:ޠ?bVx@oИO?Yb:x j}/mH7bml1\#~'uF[_1bm[ :dmS=~hb$@(AOρFp_s^F:,=x]DG _UTA"'tXxEL[o/~I4Dz""5Ӯ80f/0x e^5En:^xp dPQ~YY󎼖DiDw8#ڸǨaK5#̓nh.4`.ݘSdUd2z(Pf'+&MnCHzCƎ?Wm4-뺨4k|0h9^4ޛO G9IP:/Fa[`{r?AAT|WUmg{³ό3J[D1&$Ykh,j\h88B M<[E>UO{$Q˞!j]c=%T :P׊ 륿h%&ioS}|j~UW#z =D!ڌ6(H;bWD×jY U="Uq\T|F/mdo Էl!ܩQoxUJ/; ~]63?s:ךU^fG3g? 9`'!Ie%{<ߋKM(+s%9/a]/rƟ#0͋a"@MxlcoEr:nmIbv s .2RPU {:`c":b .zø& zn: zNP(n1 {Ѥ-$ T,+p^ٹ|Vrj9'7[:b8#>v+g+6ꙓh@Hr#nnEol|w,y{->%h 4P˜$0~^otV#u&w}fZ|͋ P#n P=p[ER5~q9`ZWAtJrrGhLUÐ_h}0o<,0شhvO:(4+Ov6o}UcA_Q o765wu>cWكn|W5*,ճ0? 7(E7' Dְ:8׸ Y8@i.<1bțqn$Y{%ktzV1azLzSY0 쫌!&l(d6.>8'XZ4ЫB&. $5@ 19PaoK+⚲/[]a]*YPݧcb'OsE0Ѣot{ *#0߉Ss+XF *?TZP<6|0 FE Hp–4y)SrN!8/c Q&DYH\s$Me1M˪\tڻZ$,8q6mgymɴr dQBʢqH`7gQʊ jkڅ7kF7.p:MlT? TΕiո,d' ȉPgo4~ _J2G;" b!96Վc%{w@: $0ֱ17T;RU)jLn)p5 PAt*6j#ZxjK\+CXVu!񁓚86)wz“bJa9k|pqv896&3[ͅf_B:UyI83g&hiC]h(QbB!" }#h-CUmXU+-R\>wʉ|-C:>f3N\6^¶:)M@AUie>f{n$fuӪRyfu8x5k=HsߛQ\LJDm S:7_zmPGaӊl@藭0YU" ' =K{^h@0N/?c$8ڎdHC\=}dV>QlZv&VF Y. V)È"܌n̋|/9^ .^f\:Ŋ M0X0ҙ7KGAcZEYw3Vi{7;EnpAyGݰ`s#“ P:` jEK&R fAcmcԦ.Uwdӛ7߉[aݭ N1YEl_^7!8^-I3Dtsc]SxnB'8phJͬUE]ARt54'̮\BJr?$ܿU;XS*Zi׏Ͼ3AƤIWBq==\#+)D~uG[=sL*%!pnF Idӌ7[@ [3*Fm?-YPiEݕ[=]67. P+Ow2t齡QPKcYc6OӐOo)U"c.{9ɇ^2ǿr\ 0@|]6׻1{/P__cq&m[!B`#5H,3cPdL;Lf J_Fٺܬ٩جs.,@^:qX8$hUutF;,'huPV D(LTbhx&4L UcC\slg-H'U-| Fb&_&'$mME}avz`L] 4>n%N2! %/{INq*FW>s;2U~ |XD/`1p1[$HAd0Hۜ. ecWNrg.",e#+}A=-WT[ y SIԤqqב?3# 5*$[5r"f)^\Z>-'=Bt\[$1Mhg?ZmQpGѨہu'~U).4eZR$3Te ",A2klZX{}=ء1wN6 ht=:"UplAg*BEb<+ۼZT$L4ZnUN~𭛒kO^ysl!3_| UIU^ 9x}dBϤPFL &cd-&yőq£oxE ԏޅG|$?iB<+~A!f[$R)Ͻdq5?n˽v%MS=w,V7'_ԊQ5KHyd#a4 Rr6.fy |3 Z rWPgZ5Q!rPZ"rzXO7}ȕ_7)R3T}._>=R7uP`xio4 "5a6q/ r:߳y|X}~ :NR2Y5k1oA+s},h#"C}eQgJU1gkq♻X ;,Ll$.c  #6T);f.1گ0B?2<=^dTjqxB|K`EEx3Anh `U5$O}ka2qA CXïny ~u7gdaoA !7R |σ =?U{6{ҟ y6Q ް좾.8=l"f9s 2_FPKoU34QS;89>r+ IO`H,ccnndI>݄jÓVsx.at˴SO{-d[WS&{JB7< o$S^nbu\zZW+$}nRV(r1<M]DiՁEa ̸,LnCxeG.ncаl)s (sZ,Paظ>x4j\w L8q d])l $O4r U!qt|<:(7 u579* ݳ6נ݆!$Xdyv=sXG7e_uR%6E{G5] EsIQxCn՝,BgFe iJ^1꺞K8BsfHBQQ)ew0iSYQ/['t@BO" 5d׌3DeO%K2ۆwT 4(s@sL cW-!"qI@}s'd΅Wf_j-ZIr`fʱ &@ 2%ZT6ǬwII*x}H/Lc^''8+ ='QW 8$'&8FIH5As1twdb2BjIց&;zdWVbLZ.袖pX8&O~pMGӟ2f(91Ww;s#s.^7M%g_7ń|%AklBl7ΉHn-qZ7sddL< Tz#-yP(ꋈeԵ!m34>QNW<1=XCjv ٣ͦ[ 6lV+ _ vau'~zʆ*J; 9If5(F",~诬*Ɵ hꀮRRW{՞2^ qB`]drm7/p1veFBY='%>=J;H:"yL:RsB6#zqHhnեʰM=E^o(%VR `koUNa4 rI̷$~"Ex:阉;H+/ߝyx,6$y%wawXO^'G[fSKXk8!L;jz7˨惷.L_ iV`JE ͪ0ⓐu)O6߇Cv@fĈYRN?ek6,?gN e#ur;(A,?I}HiׇSDw;DcYDŽr=渵Yǵ{>j(]A\IBk_NL=66؎y1KpD]X5BYus|Tװg);#3&$CZ+e;/$GC)8rF59Ad;c)*tMz Qty .e$ER!WJ,r0Z!L5htzO %3]ʘ;8G6ɴ (IZ@ ND5] #}Vqy!@\&a0“Ŧ>L ;B(Gzu {5I\w]/ӲH_ܜH_yfzD7%RM+UzC)VX8Ec3 Da"(0c sc$lt \ZNg&y?61sLszY/x<1>8 2lb't'TjHT-f&3T?1"jG|CaB{erP;#+G7OyJJe9o7{)ި"ܺh#=QnM+Aq*B2Xgk/}W$@ F>{ A,$Z-J9IqnChNumӗlfєUm]ѷ|)2DŸG-ɝɣj#Phd:\W8;mHSQvǹ94٭cb6>ǩWwU}ZGHIhCjeF\Z($"m3QPR\.e6,8GyxfWه޸U"S+]Om;}J*GdF2&4RἙ I< U{p/uGŁh\ q֡I<$C*24/t YL"{v\@.6'C(Nԣ\@Y蜶Kj3|\`{(DuߍM+Db;b袊K sbbaʓJs(:Fee#lU6?1=NۣrmAV %b006$Wѿΐ϶p(&{ROՂY oØKD3Wsȷ^Rx=0*H 2YY-$_PJgLB󣢎aSym̡6o^v=m*cD5zM}Pn#0 Yl8y]Ѡ];*\ihTIbf_|3di4(c^zCYU Eo[ʷXsSN/R6L݌!Oُo_]dG_5`le P:4&GJ @gyh/+/2Yh9R3M~(+ֶ:9Sd Dx(E,4MK/WW,^=FV#_bfAmΥ0O \xA^F3GdS{5 fpJPJR:縏2"R$H*ymDPRz]XF[" w*Һ^܎]+[RXpр'k!EaQIWBY/̾rC"/Z"hp+\S_8 r2Z_w=-;QL-DAduT-c d HR }v,yp&?9h"FGuUw)Fu4*eHȐa:cx]_TwR$I珟 w N1? >eZdҿbAxq YeݕwRJ7<& DKGu.ũ{N[aʉ%c N` (fIF%[3{hwʏzILڭͼjƬm*ys6}w*MiB'L9*qLF{2Oc!vImJm>A=AJ͌Z$ُ(f஢?ETdwZ$]d=MTMњ܇ٓd4W\@J0636Ys)c˯wl[d!r"iaͫȞ%o* .637a3 !țHwlVhz9%1+[h̗r1z W0OfVmv6 Y̹Vx)IFUo'd3ʃk!xv;>CY<pVl_jYḂԼ- ^cբ†"+O$qN]Io -`/RmR4䆵Z/&98v_?{ "g) :f^F^|dnbLw@4W96!q:sa?e).:9ց0WӊYi[k s@a!GQxe$jRpn^%$u,`@RL6߄y$"'s''|(]޾}"n,aw`- 1aDma"?ZŧqQqk3ܯM:8b1Ti|&ݙ&"o20kt\Y J{!T:|eoRnϜN{5:4Ţ?qVY2֣?G.|ZcUuyoQ~&^7. jRuvUs@<ɚgxE`x>.JW7"޿71Pӥ7^EO"~<z?>FuԞ?̗X>}@G j Dev=]P1|ƊK6펯?S AFM7Wp:jj(>97h~e}NHV(D46Dڥd_(4?9P-x;pԪ{{(tWĐݬh=TYXQguyE2pŜ7 8AUC|T"q@3S3"z7麨Rwr t5'N:{nuo)$2RE- :;Doe=7ζSU7o )D^ZQ C Ƿ>G?I^6uM'h+q org+ yB]WmyXy_qБQg~ v 9l昛ЅHbn8&/1cigֿdX@ G_t 3jJGIi|6ܖ~"oPv/-O8IEp[Tll`?Izm'N(.Î .'v$yI{?@Ю7rvi<2+eyD oeg,kO|Zf w( AcS#[sgߓY !2:YƮ-Qz#:mV^?YّJ%{ gkМlWobkʃOp\0o\nxdiAIZAM@`Mf? gğۂZz B,d6P͐ѳZ7}IY]0OH~ }՛jH> D'fbIeCN%J>hb4h.l8[Ne3yEVL$\4 bKU#lq1-kW_tg3 |{Y*;%$>x pQD|P4P0Md6ڧ`R/vtN].;b,UnyLo'8 pqsLjyWɀ9XW/\G3{s蔬gfAOĴגqP+M}q|43R|6OLw|O`)~Djf61??s n3EQ'{R^ Щ ɃO; Yy~֋1սD4#a?jPY&+ dR{&s"aoL%䟰i\%W.*kxV0V-f P5nS$ r)9#^MS wBǿ%nde)蟠}X DąN.pR,nrsU 8eaٔ^ ҲV; Ny@ln3wm=5cKmh(f,9uzǍ Hc g? QvF gd ,&pgcB;֥E%S ?#T_ֻxEÀ&>RP MKr@I* M1QAKȲ! ¾}Z&iЪ`Ds|"wt6"mxYB_@_sz 5i1C#w)TUtD~K *ycG|wKq' V * zõ_ pT;5N=vs73h?S-JGLoI'ei1τptq[55d ~en-ّ`慨g'cN݃[bBgκEb5qG?QӔΰ_~{<9Tf?9#3!@ csZ_'N짶9_Vq > p۹R- wIamIO5lF?=KȂ5bs,-r]*'3IԾKLذmz x-\wQg|jG0QAw᭱ߤǩzu78a92cԍpQgxD[P;#;j&3%1&1KhURp><3Y ě}"؎;ښ8ٛ-Ć#IH5[tp'N5|".ۯuަbCؾA2i2(ȱ@sRC4>Sqhjw9fQǘehu{{e?"f;;uuՓҒg !á BO(l|>h ҋ#=~K!!GK ^kKjy'J zpS8=0=mB|)>oN^d*DX'XM-lw.W S2.\vV=f&O}Xy#4m.W#z SLz/V_^ґYmL 9+7e;r0D_P\Z! A> N<Ŵ=q7X\ĉ\HZ"ȿ7~퀇[x_֏r!^D?氭:55 8>īug 6PմKrv1wc1Lfzvӈ38M?vϣ|;DD.nË⃨( 9Ѻ{1CI@YJPĎsQ,T(D_%*MsD.'ɕHً _7Oc178jjJ UƑI)aB!fe͉4I p#9?`/6S)t1˄ V2#Ow@C'u { Wh ZU$,\C?yu$r8d>t}TwzHſ٠e, ZD4< 犫 _jmȤYpd8SD{Jm|OS}զև0bif?A[h@wNkt's vOn$@}Q9+] c3 ^,4 *2YعOYձ4Qsd!Gf:WNFRxH@kpnx/ +U,#m7 `7,oWsdqZ"BtbkAUF _P) ZUv l7KR<.Vhx9 &fg@.c裘ZԿUe7Z$]f`Dfzot Dh!A"CZ҄*V?q a$ Ep0 iHtcIB ^νi72Z 'Y.td3a;Kpځ bʬ<F4v90SRvyJZ'/]qRf6P~eQ˞Գةi P*®-ٓZs`*C9*l)Y խ1ml06𲈭ȆXw¦<6-n0Jn".%ӿ:0MxD+d Z,]Q;4wsJB\ߊ~4sF&̏:e,|hO}̧$AXGPKOϙuMή)ώ;c⌎lzl;lf N.W;_`\+gz||vO;)YhB,sr)"?p9X9cBq?dm|'x2HPj8$7w80xZV?2p䃟ڳ1l|Dg\^) A=USۜ^_ S Ռpn"%k,(1\S@Srֲ$Ng3|rF ZE# CNO.v%(R'v,:u cWHМ^Bi >RG)qL]7#ĐtO3yIH~>˄g"n|_梂57g XN>;AvXeNtp>v"}΂ |`17rS ha9#xhݖ֔yXXMKԏG3Ttȴ鯔Fht'ع'^vk\12S<5(ڲLBbˊT턴^O? (AQ4(Hǜ07uѶyJ 4=bxſK8>ȯR@&'#2e_Z<׵븫yL [,dr$UKkm*Z\A%_el ;*\s.gYC P"*yOO*W@A nNܥĮ3p`yiMoc-]FXQlWIdҌ'ժ$_ae*:kV5%N>0ı R2tXfRju@^ni6}4INE=F :ҧHI\8__o۔fUZll>:o 5&l՚tb|$~!˒YZ:3q uK`2YGdkԑ+vqtM^eo:\jeGemh7@@L!P |[Sss&Fep)MZ8h^&+ f4+ i88=H|4s}?|\gA J`3~b&T~'z?7䚋=`OWuͳ&C#ήaۢ雺lVP:jVrIg׃G? qnf鳟2'h#D{ O 8}GW=s#. $$K>f^K₧:鷬i+WOrQ5 YrEA-&hq9+iB&i;UFjD$ˎr-I|K}/?(_ŒZy/6 - qAA8s˔JqoYA"t5K'.} fҝߠ;_WA11I3DiuC[ےHEe\=0AK:G[z`~>*@`7 mtCg+b0^x+&n;b~=7U69]qXR̨SR"H|'!9h^TӵJF|f]]ȏ@j^gkz[8xj+ʧmr6m\;K'XIX14/][B{>QzyZCSO?"p&;,`_jhu[H -O8[m'W*9 #Fb[g#ᰀJDcBIm,2鑃zHbssSgT@zF-o}me=WOh ,Ѭz=pkHEk0Lno76]䅃qclCͧU@91ax @f)Ukm̸_nφ-rsxXmj2|(}?XY%n m[@@hOTExεMeC*bel]9*\gSe-!TٚHV7j,i j(YnXDc;bj>b4f>6Wn6P N|9(reEWQb|1X-0B6'\w^p}|6+88oqvHz.\".Ğ[MQ 3b7a|lŤHm(I6LϚōWHLUVm^Mv{p~!w|O p-@*ØaIA?!Qh;p-SF|lIUawv;#WWdV <ڳ(Ky c. qV?d9khITmRh*cH-A{._{Q멤]ʙp8xQQE"0yIWv݅ .PYHOw&%m "tRX`g+r{Qk ˽0)2ǽ;dEd`̷'qKxb~Kh >0'dt Mx49CzjNiGf ? #IUԂOpP0^_ cuglc Hu2rZ`Mdf҆3H ]椣3J@C DjoCR|9=/3\ (ʂ!ʸ[B+KOW9FNԞIEοҷ嬣 2cC2E%),9#*iZHSz _}wكJ`nYiQ6>;F0FCJQ=L6&̌6E6c#(?Ap93;|62/ZAtXIJ9BߓLRa˦P`3 X)UJJͬޢgsZ&s/&Lj Brv0KRߙquA}-Ӿf\{6n_1wBi`$L:-H/z[c/ŜϺ!8YSA&X%R+ $^3He:ąK\R ݭ6G+xouPpbAU6j_%NmeYo$ 7<L5S3F=I`tpx k*ɟ-,ۖT,T gOE+^b F#O WA'd&8-8<Uo7w>'Z*  Yh&F /3s9 S|p471|{HN)_"^֜^mԡ|& (mb7rUuNrR$-B4,[yq>8'G/{J>K+%|%8$7Z 4d$3czJe-m $6ٺmKb+ ܴ^8=IEtX3%w/Wк!rc1u[.,lUp#YQΖKj7!qn <)w4?aV&C Y.a b*rK~*ik/qXBfan(u?)lPQp}J5Pƽ>MwԙT(50L%ʍU)jwTɞɧN;6aaEP Q}9 0̐IBk!K HDRѴZԵ=1ҧCؓ`#OM`nӰiDs]ۃt!żc] +"Z*]Cmzu!Εzy1+@@kbZ')? Ót㙓U\?ӥT|f<+h (=k36bo WiH jjo+q &0 2 U9aO& >R֬B/FsSЈ(ox>iaw03 ֙pY"#\IN0ܽљK<:wJr?qg|=Ex:D\_|r@_'@`cI9#JS`jE*:dKoynIoʚγۗ45MmlEeQ`)c-5yRj'vKWƖ"Q17?cۘ#hYiq՚M 5 C&ىWxҚgU"'Im{Vg_E2%`lM)Qf?òs %O=dC$&62vz!H&>>]Lk vkFBϼLtkI<О%$ePխFcAQE`9bZY 87gC"[f.:a&9s<,~e'F9Y +A-pvd%i)S?eRڠ3'}Hv*($DvkjOlu8# K#93G8S.['_!JrRgI+o [ShdVGqT_l/l}(BL zQ=[8ruY(9q M/3"|bqBIgtb'>@-smDLx}V>*>BX}b~ƺ32[V|&֍mf}wۊ*H.eL ޫD1%4X3 䊷%NOh Lw1wت87:UñdPQ2WI>$y6/ɭ=!ץcjn)CpABHalߡjǧQ:~h&_91IVךPwrc4}&8{/ ~9ʐܱ8#6>b7!">1WbHiX Y9[~iIF]mֳY4ho&cB C*֙dФHy\Xp<,*av Lq )/{(gCVq_3^2t.x}#́j~͟DZDTq E@HJ.+\>?\T%p&/]ze7_VMjߣ_  z ِ]|9JJ9$OsgRMrerC0.^y(Ц<0}{!%F)Lb7U" xQSٍ#(*n}_UY4U^c:g] !пh +$vKա_1M*̕gXLLǏ?i \W%&;2 {!zTG 4_K>}.lkE̻Gl>A-rʴe׋٨aG4A |w̻<MF1pvy}P~ ғwhy,Ա?< 6-Z%҉ 0ȡym" w99u0bLDM@a y˨hx %No9jH r;AZКrV`C fly]%D"T혶Z{Y~ԭ.8(^Wπ;fHy- qz ɍ*$9E Hǻz?EXנ] ̄*b(}z7tu-鱽֝駚 !,ieJ(v5 䶚24ؠj+3A* p\[i$ә:ρcúKD:"ݣN\ =uOQxtsSdڸ򶁲VGOl<̪@Vʟs іkA/Vf!%~ӐNftޢNT!8bw'YV~^- `O(ڕ\&J"ʺ%zhMwBükY'[^'cx$ȟ9i/^ŅVa%Z#j#DԄ`ܠSV $[R Zs7tsX{z1%ce nM Vʕ,D\ /%9PƑ"^eu,M(\rdp9#;&8Lͥre"oj:v||"g3pN0EJmнc.|%t`h[笡9\deHS3f!@D;cH'43ү\7n?ۍi\8=ɫ->fO4$"5+ 0 wl pwl:IpRVD劌 7cqKGڵA_MEu9?0AJ~\?2̬jpʄ]A y@P2uIp/ߛ?a>?$ՈxH_- XfhvzHs=QÐҥm65-M`} "Og(*sł@<Чm.vDo #x%+l.G];dV}DJPB e)l >z~oݫ"F yALQE98smUʙ`<ڼ@FNF!"?t箖>i%0Pqp[~'-!^<Ґ{1Phߏ2MxeR`ڍYa(ε53"PjzV@ߙAMГipE?>& | ?UQΘzhrQ&S#Wfma*jښB)0qD*dHsf{֯#vz~l<]yq2)J!>^;f + Fͨ [tnXi?TbnvlAu#ߋ::] <-9O fp AW왩  tW6#jRe xKS؜qXp W[ku5UxJd+\Xۦtnn;:tdv[߬ Jw?Fcl1{@a^B1(7+SU).S\CvP]9S <☕%Uxwn ofsقd/c2Y͍=÷:0>WH|}]FyJ eD admJ;zse uW8lZ07y1*3.w8Qg:?EBSv]xjM ?>W)AB /SlyԮ!jRꩂGa Wu~= (OɄq߯)Ƌ"VyOKrV++ SFwgwà_XѾ[idcu0|IbU/Lw\rzynNh΂cP)P)|AUDTr $/J\Wn p4ey8˼Eo,DP_FN.HHk?<%[F "aXUE*fΰ)fp_uI+3:8vh9 iSieDzLF/W%w^{=G{U,^7q5x|krҙh|#,18Xhy~ zs36!vɌ^coKFT V}ģQ5Z[AiUupV^j19ΣqE_Nsqyó3Đ'KXB_NCڼWa{(H4`~;ߞxU^šl79޸1"VH7qpvPI7),>) wˍQ2Io7#4[az.L簗o =הW NNPa8}by>VoU/dM@oPPO)d}"¶k⳸e^l3ՅT>p"u̞< UB#yU$ ˂v q%(`XsP ~U8**IzJ Uhژ9wK͙`aN"&^l!ѫPO ,GeD:[^߀'0.1`w4\!=(ճ;U8WMשB^|~0 z0nnѬns_ǾP߇Z_CxE"ţ0L/ I޻@Q3&'ݱ x^@Xn4Յ"YnQzgI :Mju{E?侅<9{-HeP?x\[%CL!T++ Ȁߗ9O)8$VJa/ <=^-@7Q!h+^$vV_nEicfτO#yZEn H= QԌՇRWx1Gw#)gKYn[»`B:E2@h(l?c{кՖޠ>)u: ,qݪc#x, dap%J wZgn 1i'Pul sA8)ammPS0H=${ *<8#ꎂMvX:Rmf/\aZmhXyIfD]V/c'ס48X&[VKIRGrΜ's M.[۽qfፌMñj"|ԃs,>w׾C *!q'! QS_i\B߅;y=~䵑TP CXprՖ(g]]`j +a@'Uw.9THh/A˱\jm~DStʢT He0%PeWЄ!פ,1>Wƛ!풢{}3WBS)@6f &%=p΂k68Gj8gf_OT'c"FV{||јr}=|'8YmqQ8W#l$f A+^l ׍(voUMJĆ'Zo+!` j q$99'~R'^7wMRn~;QezU&j>YЧ[*?Gcp{F/yb-Ju(l6y ְߗϰ"#e N0 ԝ5)?OdB+Atdzedd!Qg20;Cr]tmr_SWZV.glE`vg+%ú#Z[䷮wWIW ܔm,z9ur$fSk& \$ Y}6(Վ^hln{b`Q ޔ 'PPz#U>L&7֖-PKL&^އEgNnDk&d $}#"둁8.i7M-zgH;ʑ'c(z Fo"969P_N_stDk uzQrq(갦0aOP< kBEx|txPdn =6afY:I{p7Q}K"-Hjn>W143U_&*U8Y޻#}1Ջsc}~?T3NOM=)K59Wp=E67*mz&dLK l3+ /#g_&=qRof n:eUj¢r0ӷ>IՁ*c:יxxzЪN1p9Vr# ^ݛU5I4o*肈Nw H,B_lgx=D%Q4Y[+TG_#]q Eޟ wT @ 0^|㉧>8y;:W tmxamXpJit|:F4\we}%5 WOt"t˔pRAS.xʗKJo.b׆E!|s=:%!qP֗_)DUnlnYCʚ^O7n*E f5<&X?bAMvy/兟SG^a.:Q`ƚ55렪4;z%Xe(%.-ksj9n:B\[n!R/<͈ɳXͺA=y/s|GjHƘ׎ ;K< ]hc3>xQ('-ŵ%>IR[^gPU+U$\@7$:,;.U-4fY*d\W"@껱r+Q u,r&"23tPߛ‚b ksV4]~ PO}@QJ'ޟ\pLKoK[[Пh'A %I=niEg2Ga[A2+'n" Y95,ZEoį4$w[$s^46EzvY')w>}5 :֕OzM?q9J1 Jьyw !ɑPQ*O@:fbk7 h4*.UjFwF[UkX.Kw`xu,O7!6dOArioz9|h`%bM-eTP@yތPKg: k4sAEoi"/iuno YHD[pa}?Џdpf `NsD*YRaQA<}WI"nm/I( ~"-I,Ɓ`*J"#]n_y W0{h*ŷ4%7~O"'bͅdؐ>~P94>秸BiQ-2_>6 H*2kO).4 ~6cΆmF౫B60 M`"ǽ "+U[dS6;N!wNnPEYo*7SƌlM|6$ 8qT63f׫|]YWHm% 2Ќlil]aP(#&1{6 퉣m^UH0|\l%soUrZ¾x & cP]\{KJyWG@OvyͿm 0> K5j".d`Y'-/K2mQBWzvFޏ؋hA ӧ1DБ8:SRUw{FVB6a'bpEpEg71fʁljk* @~[W ɘ'Q _ Lj`* j:x(yk2p%+[jp!xCBfo.H g +7ӍU)pE/*Q􎣩r>,/Kt p? ,"y@8Cq']Xl jQX:y+q, \Y1QJDr|htaG^܁QGu'^OHu\N'Qpv~Q#d(bjOȩ[يٖ#uzRYw^Ei$[$fpirߝuW'FwS$m7)V&m<g$샢',5#ES!\zD(vl|45$lU|t?.<? OKVձSвl[]JegdJzu'ٟH<{SyyԈ_Ƽ=AVc#h@ʻVCq yʥXcjGHiDrVtXvn[TyPRb[- j!ۚLּtU˓lkv|t#xwj +[QMg[wnR*(Q2r'x1f=ԻiaG=,DG&§%,bVqPwl0Ւ$;W^s뱈8GnқT (zWmv 1%j'D2`ViTn7)kEgDn{I ЋÐ1F`ѱ|YΊo[T"L:Јb$M3\3~Zۆ(RG^OP$׾OK@s%mTrՃqB61"b{zQG0+zVguGhGͷ3ݲY4\o YtCI TF.S)'ϵ7n{ _,̧UQٶ_& i pjVmi|FӓrC ei#AI"T;?r^O>Ig>ׅ>p5Iu_vPAܨ&4"#o :˙`gmaD%y0vyR? 0iAO߳<őt sOіudW:4]-`\bAlf,a c֊V. ;DG;׎3kWK*3^@FP&d =wko5+<1^mxzd $+, q k.PjY#җf/&A uxmڲ̩>P>\G}U-;ˉuHg hq3: bI6013~cӓ^-gY{aFk=3RYΧeh,XńmS?Q=5/![g+U&+<^ Me7 .X",ƶz[ ˞*}ܖX9 3v@{N84i{J9J޵A.(1_q(v\ʙ}9`S,꨼n iŹ'yrI#e'O$g<(Z~ y^h@! uz2Q .tcvFI2ÊE[pA943A[1HlDL 'Xdgʈ=1 }Hyćj ®Ȭ"!a6!]]Eys^X1[c!ynjs.`̝m$ h8.&IΔ@ ks# l0Yrt*z:M (2hf[2l')GK5Q)k t~=Evl&wheEV$7og~-LAû&3~::YsX!a߉qO1V%.ɿE=䶦F>Fz? .FJC)h;ftݖgsV$*`Ԑڢ&WIx" =RK1[:uLR NfSA;HpdEn%qV1t-VUɢ<]Exo%Kyܖ܄i8]=SW(;7cӚ{ 5PoB:Fȉ/_dznOe:>>ֵժL\->[6`CP6vW޺$ `baYR[bBN 0SmI`XL,-(ǽ?Lim4ÅZmWY=iu)z7\iK( Imu*C $?² 򾱫?HY664$"hž+'W<2w$ܲZ-!|vW}H@rpus?#e 1$TDV^1 T 9B5]hNLxLVgt،Y{8M=k]Vw>-Î.A3 u2#bڪ%D=Uiu WjiX;m؂.I9% JV |QJ+䫵"蠦4R:6cTc Fclh'7D=l~)m7:\]ff=PZ#|ͳO,[`YyZqj:qmͤT5?w-E9,rHN8,t+7te/KCoN0@엨Tw0r^.=En9xE4JrHk Mdvt0N]Q_Ȯ"lBP F:@~ Q$6ق\~(P!?{٣eFwpfɍ\az Z[]hJ 6t*9a %mQ5>z3P.|dR\yL||ML2?$ȏ zzJ UL@v.>u( KiɥSʷ ~29$b *# 1/Wͥ c..Ӡkk`n`,țEsepCs_bލaR:k導޹t?m#9(FL'/\,X ]EB, g_9LeKi~Z}}Y6ỉ“-oۅu-0܋+EasX.۩++ݓo r,n8l#]6PMk t ,jڭk$mRVr6 yw11d7< \/Qa$6Ɗ"$ ?/6Ϙ<9+ߩ]P1xVv^PlgZ21C9)mJREz{}O^bZuo)J}63> c08nM^bFYx:M 'ˆʾ_ȗ |zy+;BꈐEO{MaoKkmD.u2RhnJYŤ,Q{#AVr.KIr 66dY,vhcŠVH =@5!ƣxڱ[$r J 1^ZےUy-\]@nۓ  "JJ=鐼魒 nEI wn^ȿfExav9B4?8Bd'? H}2^kZc/F3o6Ԇ2(E^lpXBu,y|d:1<6DsxkB])Oe6([rzaoɳRk ׆F8ٕKlQ!rڼI$@D8٪SAsFz;cq?FuXe"}l p!*GCZUSi8!G/1 iaa|mu,Z4Bub$weN%^ދVe|'j[71RJ҉"39Xw{WQ "{$jATJ ^A^6:-z"εlJ xr0 ]BVSyTFFyvlH& : 54XkvnD+5W( KV2Pe\_MVG:㉍ɘW ~;N@ sȏ!*;, e %6Z%hФ4"ެ@*a0D)Q,@{st%H6kX,xdBYkS,e 堢t\r<PkJX̣g7&4E=r0B#40M: RH*Df#smN{['"(? ŵ )YDh7w6vfa$5U-"eV,0Ɇu?zȁr\€7M^YɎRGtuAtS|Sb."` .*jF*~7pT)QЫxҪ<+= ?6CXKcOiGc+8;IudM.r W>VRJpE0z#¶7}܍zWa h<\J'\ucdvɠϷᆵ}fsT:`xAI59z)}Xe@r.V)VkXʇ1;8)O:c2 Gڧ7IdY:Q>9ء.D9竨Ҫzn+k`$ՠ׵bņu,O9i ㎖0,UJFslRK04\oufvS,W!lCgti*˶\]G!%a {!P>0 37u0. ,=BLmUbZ(lyZig5~{[H% ^hiYEBmhֵ(I)iQ0uH6Y\xxIBՊgaŻq(k]C$EA,v6g[]G87rK)ڣtfHHIgFaXݳ] Z5 ,bESЖi$)`4)l/7eW(8Jf+t }.= Ȭ]uB!k˃%Z cEgqCۨV}T+u p}" [<62-?.1K`廲pJ[e82#rܒhA`xge0`MT9cN@&A1_9皇>n^w5nYJ穎DshK'*) [P*{XzW#Zg `mV$wE <(|D`& ٰ:Wz}gDW< uwA_Cɛ_Vv?!3xG'zm4j;g;{G&:XtڮƋm*[F*stha>^˥]s݅n1^\e2e W}dӺ/A SjSjؠg9jXG%BWmԖGfb4DvOg_kAr>DŽczICpi>A׆=ޖs@<JG.S$;]./3|!XXBMߗgܶ!!T̂Hٕ?m}&gvo6ultbj֒%M}Иώ$>$crZ~OjM{~)?y2ĀN8Y'K#P 20!MM"It-VHPF](Nw{qiSd) 1 6?2Nd⼫LMTo&Q.Zl~Wey>ll+υvfr]?T] 6,e:I&$) .J-c( M!Ә)'J49jrgBaW#ǀM!uss8,Y7nx9b5Nzj )cy6,VyDGF?7F#\0 hOM.F̓uI@O2~?$vǘzzVr5pOG챩r )@Gsb"Bvopma[y`yS`р -goG_| +x՞pg6;GYӂ Dt`12aݤpnlBNV"I[Q$>E\Kf ppt-_!fދ+a=c1lԍdeh1jrq 5L! j{gI 9@D#Nsms4.J FΗR`_eG$VmBEG\!_ T.Oq(D?ЬGb, c_ӈqV$eC*}3/l@A#'K6 8uk2#$_dYj, ,mQ=B7᎜➧-aQdEP.P;eJ e@5Fp\M۽l;}!cYT,DߴEtljWSaw/hse )©1n\)LF CZ;2,h}9Pk$?}VVRHj7@<{e sQB<$5X -ɄFatemܞ}Ey!(k?"Re޼Y x-lm@ްe5Y>oWfcv;iÜl^IUX=퍖1O>kzF)rD_ 2x\ 859Fν<]tiU 7B1-Zj dEuXz߷.PYsUo.bS{:m[IA8 jC6Y!Q g2c_l_ CeT)#SQ睭k%[k#,IDkX*TAw39&ɟ6>`R 63 飉un vs@J[&]۶m񞁎I?}*?W`QܹP1ANJm*R?GKQ魫_LR+yu昅}042|ɷKLҠjw@( 賎UrT7j5z9 zlELo#P͎D&㉽ |,m:{~[u9o/Ub$\k!X>n坊.a"YnOlY:QC^ nA8rF0*J{2˓'dG/acf/liUUeVtfb=P*Ќ5Tf,xoc oʊ{"Θ)% '*_1RVF`@G7+`6R-yqM.I-UwX&ku".*c5ӭ( YP5sv ?$R0І ^XQ a#.vΨ?suQ2Mo ^w[!;DfĪ 4hv948p($4x"HWs֡]9!#s b O=ΰwcU=}S֜* Rsp4 @Đ%1gyz CT~̗֮,7gQ|5K bLBtKϤ_f)T~rZ%~{v6e|<>њ9AU=?} !-Iuлӣʸ-,A5y"]0d)&X轉\:DD8ާLǰ&\t $=ByЩT x@苔h85=Qj,bc?a)KFxg ?0.1qpwʏU:Х[p6m Hvʎ ت@yPN[1P] PУ S\TS]^xzDEƪ`5 fѨAǕIU8BmxQRGjql>)-~r 1FX[.*| jy Y[6j]>9᳽žaפdft 6UNiN7xq\N!U] h);rO"3-ZՖkspǁR34G}l#'2b(0S}]K·hs2?VZNq,Nա6pFT(U@`M΢ o?6z _6r5 Ma *Lij]J}U\v% \}OH1)a^k*:^/np\bpQ5*RxRR >$05: ŦPx ^ 7+m A8GxxsqW˶@MH JtDkDSC7hl|=,U=fqO(i:NP=*#׶#KIk;pր|2!@.yQ) cC Uԛ퉂of@IPm>G 8K7CC{<|eI|G:ͩUu\537XuYkf\_rNV%hC{23W&B [̇ c#f:_[}3:"jY[K epb۠ $Unwx/;DFؑyYIfsj ?`e FU*G}]gdnAt8$2MYB'y#Q#]q`LVX1ڦxV93+f$ ƣL,M}>r  9o~Fke߿SL~4[M* `b&k/S@2*^ eH?iKaե"id.XxjQV6o>OwP]/UԹoJ vTa$s@gW7L# Lp۟VL3ꀣxi?/r+;Sz5i%YO^Ju>x-S24]yiZmD{Ԙ)Kp֡$J>Wq%o_x{BUQ -"ۭYnvfg"aV2FBw0X: IJYQ%p]"Mm_QEgeeGZSi ڙ4O@P:Rc.ifG?Hir4 $ءy%EVW4Tݗ'Zk3r="9ofA_Ut "R(*08oS $aFM}[|xkiӬPlpJ!RBPȚgY0~j:N*[SݖkwbwhbX'NsC."Y*"XUZUw{9aF1 vaX&)A@`9,X,TrDqF%+/I+[w4= 1/;jiM??2 }ѷ$vhr5^6!Z't̲D?lfkK;f}w}`?0Bs{[>%:"TO¨ɜQL3w|R3k^낀/@,蠴Rr]}0sy;71NlMkbDٽk<pZn_S^"\7EɇsD'8WȲܣzҲ#viiҜ3ň< /nNG>Y%=ߥ*dϳ\5zkc8$>f%bp|qLP+YXE2Eh2ch]XET~:ଯlb݂O3Ǜ\9};Y\I LiX QA#K08uɞa4ʆϢ o;Rx#Sg PGvy&bmP2V5mOZ_}xnLZ '9C=oֹ9őMJm0oд[&N7ē4x(Zynw5._-4o>#. '7,ItcE(H.!CD{[Ӓb6k ɝ t§U(ch P= ;}kS)-?3TM1nM9|Y}v) `㬉I ,)#hZNʻɌ>VF78#ݘwP2ε쳞_I^C[q}bIU|ABc aQzuCsċ]YO܋rRDcNt wotwA VO5pABpP]Gk6 8Rvc>% S>Nbd)W {:Z 32>*.;,SCϻ+=cU6_t$_RJ Cwt( &|[]NHm?M<ׅNcsŷrPZq#6 z JdH0"mGi)?H}' / ҺKK8r_ZrNR* O5O9~N MjyBGȨ:9i!h7ЫY۫=j#Ij{WTp!-(7w2ά %+t 2 [5 H-)5Mt1EˉF_Gݤ}ϛ[3V-m*a&ߨxb<^\绕 5~w, cPk)@PfSwZZ@uą: 34q;~GK7Bغ(ȑ`$&`ݑwX V[  GA,WBou[/^Gt?z}$eοӵy삿~rO;&*91$~KDOjFYI΁陌 I1 "2Jb2~[rPwH|a)$'þ1H:[F9}!pJ_2<n4AAO_z>Qp^5B~OVueLԊw YLz,t6PCI 6!o]ڰҒnW[kd^)6#$֭HA =lӛ*0_C脃N3P18eZcz[YԆL%@c6gӑJ @8M˶ m!w#8'5c#xE|M/@?qDSU31;=(<*0lD'-)?5!N4q7J%+uLM:>9 !Pzt2~AQ+d^( Yi(NE=!yIih(vn.L({Ղ {&ѕK½7R@kU^pn Iy8iXe;j=QDۜpdDV+J+\:I. F4+k S{ T魾l:?8w!%p:Ӏ<Od.)|<7Ⱦ9W߂{⨂}X=P"@ Ps}i!I@U;lX+8*VXH,t4TnAښY H9;0KS>] 7ٹ?SU.xm뫬 ܥJ]pWe@X> *h,/l|:$SW%Hb}Ï=Mo!Ldi휷I.9,HoH̀r$'̹U\ƿ9O,b!6tcH1, w+"-cyb GNa=xҭ@HgD-eBajHgdFEٝކu!z=uő +ʥ7Mx҈*&H 7:&#K[p~cjL]2x1y;b{[ξoM9 mRZщc7] m% qa}B4˦XY̎Z&w~lO}r= 73[m0, j꓎58k Fi-Ms椷DIއ!>v ,ޟ( M@U?7qP =i_ F`u¹K2;S~> _XНXm$kin>jDtT֝vC+ LdhD [ET߯bZmyFj،S9hrN**=Q4GNoLNd˝ռ'+O<.:rx 86`Ivߦ ʳ{sנuYblN\8/ve}  '"JTGFۺmCmJn֏v-?Vc#"r&d Ќlez kSH3 Z} 0_]d79S2$rh R("xkw;#<$ ]a<:ʾr㱏reO꺱Hw a^{+IAco%3 ,ёM /0LfCJ2̘ UR˚x@6M{3rbsүnqbd+ ʎz=zĊMuvj8+"8Şl,Wʀ3dOu?{WuWibT-X<e9Tw'=D<@ԣ֏`7+u gXr|kylMHv>-jgY5b"RQiFk%6|e2\J? D ϐsGuF^wH Цo?D^аtƐU}CE^.M+nr FeLy9. ¿?,fx VB`2)5̍Sd XV۪>ʿ-v񪑡PYgNCܞۓvcf&e,Ual_(4bZ C:ż`qCg5&3wL#LtO'ꮭĻjl ?x>JULm]Nd&+ltj]SӴQlj7\a,n@dt6jEapt`Z.BW&j[ d3}U(8[u[}"Wb"=Mߔ{ rʯ0Q)Jd汫7 b/J3ݾсe@1Vi\r-O=Y(&keqqb@0EWW؎ԁ$V&W++i6I,`4̉xF;L V[#нgh:Nc),dI)WEcgmG^}vor&ubein⟕}d Ȇ.ߍ3rJ<3y^^4"j`m% W]Uta QGuJ kBR+թk @O[>h&jN Tm%- ò6Z:vPӀ=zLЎsa3Ӓ.3_2U^@#¨d!q*\1R@O'O$o4r20丶Ͷ-t˔xcҐjrH#%2kxqƾ* ҡ.gdVw9ۓm >HzWAͲSg5>ky7 M\0rOCEt'z-pPwojK++Va$˴ʰL$ZN7szjQ_֟+ЁPƉɅ,Ս"^CD J8/]&PNشi#rߕԨ ׹Qav9ۦtcnoИECo+ڵO#p{}=zÃ5!ez=4~ &N܂lS/{B`Yω5#P\TF\iTfbm FLI TIeMC@Om4ŀ~X5.+K#hȌuq0'/ۧ矹Ѽ!yq!iLAW ޵fWXB*&ҍy0Fi{ֹ@X@2 05j39UDn-G. M "F%݂楺iմy\ "gCs?OU\hK*8]8kyt:6TwtaĸEZܷ<4ݎs4/\*YGu#AA,f !ӼàF>+?y4蛞=er3Cs>_S$ZL 4`D ^Wʆ44@-q \CgCy!q_16)6x`h`1ijdީP'> ǃqf^S77l(% ͦ4h-ar2 H:o&hOi4edaվt;^*z_`(z:We~٪sOI㐃ڏ~ͧm'D ~P(7*`Xy₻3hCwq.ͯEƆe*ZaeS' uj9aw"+]ǘ+H9c-L y)߷Ԁ8);ƞ!NO+Snb$~6-8:9+98Щ9fKt|!mke\w<`&gYYœ- >U^ ȭg;P!Qpx,$1%DV^C}Б^%+/KC|X T].}އ `JՅk`Y^.-c*e)-r+EJE`p\k'$YfuX}x|cnA Voے] m2WGgnYڭs8JZVtfة0G*x5 2OD"Q,-50>P=]ə~Y,ꕏA~3lG"8HV`7L<|J(w#c4b>0 -ƌ Z{N_6B 1A:Ͱ%Zl@l1.d)} 5;︊!Z{$~ׯ -3Ӆ}IkRO8'LeeCZ+ȵWb ZSoNԩ;xOE.E&ʂJ5+Wda3O)3$pbӑ3 }MӂBF#_ci;}{'/1%[_ O8pݶ/e#(h}zց<\U7@Q0nI4Mrпt(i'm MuE[)tͰzТAs]h2DYƇbB j$*=?cn8%aS:ZħQ%_@g5p;CWF4}YHoJݨp|'~.jG*(1,{ɌPQh gׅ3} žo|&u}"D#PޣJ9 c 4~|Ѱ@I^bc9Ňucvwу[Z XC[b]OVY>3ĠNiOC!ATh1]N҇4/n# :YQyg~"%ɬƯMHdVWFiKtx{7nFi)F谟c bc=0p~cqN0g|sE+zRŶ6v{N|['i5S;]bd_e$|aUr`.p&RJۢ6R&ؗwǏ=GyvtW.E//7mѐ7t;g|a(XYkTr)e<fr(0f;bsd̕KWՂ_k`x]6,DcuXn$ݫ ^ԑ| ܽ|'t& +:-|$e4ww}Xwo_z:R%t̢!Jg(DEz6522V_ÇqK E;0NID9ViѿgN@kHV |&ɤUmzȯMȷeˮrt9[%&t\{=.t%T3N CmO:1ܭ".EO#帆<\c]XfgDCB_{}G>x@ݿL6+bLgi czz53%P܇xN'mP2~W8܃uG48c3b+#LA5ǜu<ڔ׀^5\'&e=qM#wd'ejɄhKZ68wQ쿹?y¬9*Cz 1trUD6Պ Qe/{%>I׺=1Gd G r+,4Py:A^rpAqc/„y G ׃vJ4b Jp k? ۝kT ٨sn}<ŌtE>=Myr!XQJBe-g7vͣl Lݷ4V-dB RC͵\X$+&`9 -O=%y判>'xF>'(pl'z*%ZT)h?=n `GY< *bUW OMUb:%'3P )[J:Գm*$D6?z"/]g>vgd`d/NG꩛ hjږ$s=I'3)>Řq'X2_EkD]TЈC WF. YNGH<\x$l.TYz}|,uUrJ`[xws* -rKB Pu:/ge@Xf940, }ѷ*0KB0Qމ[vX؇nUem՝7k t-y`0}6(\~RFCﳰk*D"0HgPzz N`~dԊ#ŭ#NSg`l-MS(u+@z>[2Be{{{'̊"p&4;KH+ V.vqqG 7bֽVH) 5~jF>u~U 4V݅ ։)| s崙<{ʎEҕWȤJ G-0OɃvIKʾ stF6d2]wPEbx-яt53D`أPmlq 22ov2uz|̕VM ܤƾdj_ztCCМ0VZ{sQ{s0y״r&7b 9g=l0d%\6K)ȺS$Ϩvƶ6nv#B4g0z:/ĭaGG.eٸcFzlUDc,˲rڸH X۵HMBZ_b ƖbrR3Hؓ'fI,%4.02%P B)/wLL#ytT̴}+]˻M4 tl9^.k䌩]#-*W N:a'S;`.| 2)~oCTSa:DEki&?,޲1gkj-VUt|<@Oe"Pq dp! ^L[wuMWnrہ K\kIS!3n3~M4~AK@'Dpoae+*s7da>X{nD:aYM4ϷQ~ R9,UW!7#y-YDd 60|/FxsklEqj Rkġ+"G;*b hEpwD6Z\|IDͻ_ӯuP H LufE12!7x_,Q| X`$ʄF}h 2IݟD"nH֑6xB:y"!Wգԃ/PTٺR x͛,zm(`u\#Z #[H<n,Mf" lM&~@bFQ/I3W2u}xdoO^(e͆1.m{fU Sƭ6ܗi@&tÞt:pM(.DFQ !k͌%c^ң/,. !^C;+MU ,#j@;-G]&|躿lPщ[oǠw<(l Ye]Sv t6޶i/.):rF-SS OuU1OJElYyTUrmtϢߩ>&5^^.2^Z%Opؗ!mU%,ONqnz(ջszBrp:sۥdI5|G}'6gG9;nCu,DҮxV5]!FȾ+&ϊV ?,-Op1#ZRSj..hJomDWڂ!劈Fxpi9%[F BDKD%a6c7/L˺%:HW=!w$~-Zaѳi_5*Sg_VTA0!=-aMqhinS$ }7]H&quʎt9TiǫEg$bnݬVixYO #n&nw}"b?/~롁GH\qs\ 5<= ")#Adv1|u {(yur7Q}$" &dAp񘤠ⴐ;S>U>I;&? $knw^'ڣձ iY)Q 1?= yIהYhuqt"r*Hi55aQ $(Xڐw\:G0M]O,\m:M4i]i*yowHbVGgOŭEK g0>$J VCe<.ҼL'bp.B θ늸#dWk̺W̎X/oq E#O(AJs⟖iq\4c@z" Ddq!n%QW% ʍJP 㻣r`@$#\ɪ~`g?z $|d> U@Ȩ]uVsk,5)lLz+ڬޛYf2ym'vL |:QF&Q<6^kqPUJ^Лu̎3ocſiDݶW$5&VV.lu9]E$=hQ 9*3fbr Vj3i39gbZ4'fr |;M4h-,9w,c,dP[\sTw#n4&Rz%/Jnp xfn!6?>fzrZ9\zCZMN /S$2#W)$iVu| Z9SÕHѦh@nKyhAuk]}5Vw8cjB"mZP4o8 ] ׈-)VCfލfD0a"On.2J  q_ ӎL7/Cj5Uu88Q% 7W@d<3 ͟Ԍ[=qzK3dK0ɚɖne]$JxA#:NDQ_K+c<]qG-QsS-)P#R@؉ik:vPH"D?]lKs}P 5+m/9e+ i'Bҁ5'zO6μ(7&z vZuOhIDW)l7&*"(QQ*2=Bؗ2k]\2前b}BR7 :􄣞GN%Gt㥱)՚nJX.rbekG Rx<3ۘ$7DnRG |N+/*ɩi4ׇ1-#)vĽ |G^A9Q~~h1YT- ~l|!HoCu r/>8ЄXg9}/dy5+Ob7w0ژm̒wf:$CЕE{#'bJI>~.Z}nӣ%nmtk.2~c&Ly`+8{aWF[VI S߹jLlX @µ^G7nJf2v3зxJWCr'a=LVy${9~:pi+Fbr_uu^͉Y"G|S{Uqj 0N[a AJ|:5+35mXBj:qj]5[QO~[6VHA\;36Sx}bcӢ35!>6Z"D=3 *⩚\9?}'43mf rw`ΗBq_4U=}Wt %Q y;0=k{ kN7oYBcHys"l%U#7nF\ `d[tsugVJE=\'G[7n|yX=h>_gn;a_d~Ku"z۳9JGvIiYYŪ#U2&|SKMCHڒ hYZxFe_IA^O= }\@,jlwP5J tOߙ%dutU,ƒʁn8>#ۓqJlyZ=zŪ؝r[6P4)<5=Oox!JD\^B1jCܴfegK]H'woY?`IqN͆d +&mCC:SZ얶sJxss$!(qx 7JOڼ?+ cG u}ㇴJPF?!gW"k{80a\@T]p(;Ui s} K)Bo!k]vsu7HXw:60Y G0Ť.f-3 Dѫ(KY?W$Ĉ5.IA%9N]x-;6X۶pKUN'm$𾅥6yPeAK1҇CpqU08yC drr-<] oz$jBż@sRgjֺNikZm>ɵ*v+ WkPuhJWZ]3٩mf(| H蹠bt}ڦC'(rʲ$}_#훮A9=`B5^K0eK;ׁqҬ|AZžA/{%8V zJV;. 8(SQ +as$d6xVKK$STrfBF<3oPgl_2A!!C.u 7v Z5rDrUwr\jQEjkv{d|Yp4XdTк*]SmE{\WΩ ߿ȧ]mDrMa;@tͤA au +U# dߓXі) ⊵P"eF9H83yKiUtKHX2uF2|:5 =*JܖtA̴~#>:օ4(֖.ԗC0Q\?Ǒ)y_'fh ?|WT˦6sv<[#I"F_4XN}Km;vle27<:on7>g3ffٞ܂/`4\~7yτArVJYLmbxtaǢg;/)vjOX3!Uvsv\ ¶7isSZl([}[W2 r ۻ2QZ 2Rvwe'TW»~LyKZr@ud0Bbh \P-GM B,8|hB(ѩg Mڤjr#p3ݔcWVN5s5Tv:.;g&LؑW6WOK_VTxc3i?` PĈsm6@lhRO+)ߦ_<31N$@GB|jxITȖ#:VE J HNV~xLɂ`O]ˋ:S0#A;[=> D6^U+ܫf]k]J^n3*Q'OkJewV,c/(谩C$ y9ΓaL fAm1B(K EN{7fkQ`~ˠwd$rmj}I՝j\ 67'p'̗7HBdFL0yT-G MGهЛ2&סh>Wyx&]@fy87 @ld%l2'.0)vʩZ3 40]FQs p/{Ekr.dEzb̔Uk4 72Y+.PcߢsOc?{/UO4f?ldw {={گxm9\Z2s0oQ B4Z"^$ZFɝKaeY̋68M(&7N], vıӞJfEʼni<.߻!s=@;Cc1*H,{FĢ4m/2( 2ev?2* Į)ŕ=od| X@/J\09E<\jQe*DM%w,*@, =deXנ8|u2+WHTY*pMeeR" MB05k{VBS =J?֤ӇҡInf|q7Bͩe#*_$#{7N㍨H}L!E$Hac[>guE#(hT2ݓݚaBhFa rDD`35`q݌_Uk>r>z <uFOf}oUA{0|DgDZnCn éwd$\݌2@+IzWs"Nӽ%<3d#)}2Tw֬[ukOdeTPݯRVmzzB _$IKm/`,_^-K&ޱISM[..5}I4T!63=@q |{A^cAA_|%佯>®/ɴ,Z-M uqޭ>&=Cy3AŪP)zENV>sک|$II֜?y(ɻ(WS7ϥ='mZ,`cev9̚)/15!\[[oP ^t)Vmx͐|7Rb`je>\{fLQ'@. ( H@Egsb-Yu {Pj޲5v'A,50@ yeсBxR\7O}+xCoJSsc]z`{A 'U"#(ʆң>aKarxK\]!1,7xa][\Gu蕛xu t@5.wFC4S+4\nvgXnवpk%(ȋ@U9/zR*nb0J"啝2;C,["95.5BZBkI>z5 P&zx|nv[UA*,biݲyc&(cpxM="t#8{:Do'nVx)RY0(4>~fڧ]ޚl96Um{  @To:s/X:-mYJ7 6tˉc\9)+p V֙/;Ok-uedKEi9@nM}tmC%RA<h S)S[]WjҌXulyJgBޤu_QQxx0'\e )V_@`*~_N /\]K7{Ĝ ?AuQ\xl" '>J_DA~rg(TM),HP8#~fwVg3#?3 E%,0a{whu$DtI,%q =pP?PU/ah01nTٓs.O~b 7Hr5M!6N!k=VD1T܌DrvyWZ܃c1/MX ׆ArvmhX%ꈖP鞵K6lݳZeϗ;擰#K8fl{mzzIU(ܪ]#@bVUF&uJO ~j"EJ/nVxs9=s7r8G+|Ak5hh0*cf01 犞·O8P[+, UGGM\l0dQ)4}@4*г Y$zoou@x0ݦ\|i^G{6r&k a >sϘ >ƟT=d 5:NM\7$a pI+56m~%n՛ʰ/"^« |V%}$w/ў;xk! >Wn㉚Zoeb=Dz4MbD싑^T)#:#1="(Һ|B(`!/T$x(s6N+.aC6CS+N#{/0|2oR:_>o@GD\zqX B^ș<~ʹ1r{plND+q=wu۝^j&t%ZS6b^l:d*,kg#G@l,$YWι7?85"GTYzQl^Qv#!1Ak1F ,Cjd0pYPH4͈NHf_Bq_P|>'6} ^ 85otz>P]EzU"5 Q{B1XK&j@ʤ}$@RV]J9GvUb|AsKHa0I.ޢ$f Ƈ)\-̺X.$g=T :ӊb~"䧠!HBݴH]MRI<k,3.ؐ4Jc(ʡPMP~8?x=x͑ol)AtI/Uܥ'eX1eZ+yzG/EA-į/nce!pv"q <{(R]#ыWdD̸ ل$Ppg"τcK]8*|}6yZh}QXJӨFJ)KE N%vgL^E*8Nc#Wl@@p:8U Iil.T X;,mr\֢">i?ۙ'8x4tkKe$$7?*ǜ^ˌ_xBK"!nvDXhEߜuQ) d1A|@,)4P O4ԤB584;RתBkcK89ȑo6^ݵ?#$Fb]Zfp ljShpIH`G05g²p<ܑ5is՛66D`7)G&w!w&64+. K+cÁx2x{^\[PWiV39$HLǃҀ$:0PGMns`O)ԈVx s[Δ{LYZ\;4 ̭KMh3۩BŃמ77VyFaQ}v atDlU?<恫 qRSD#9z맜[`M K$VIY@{h3 rӊʔ$9m7 ^};v%Y֢ Ú 2wIFyG iAc |׶j^"cdoa d+`n4}2ǺEE7 =҂vr'!/S++m'@:};Gm ۆl "?;Q|X:#V݌_Sy1ו&<#t&-b:91Ãcz: ߯:rt9l)bGonODZ`fCCI&wWE@"DG1#Wx/e R\2,o֋+K|*ϤWn?ґNEJHIgDUmTG+@]qڹ} m1r,W %h%VG4b¤KQ#RCO0"f2U4(M&6}a}G; C6B@b8M@|Bv?sqyPjmn12I& M8J_MJ)'#:,Qg~0)El;A^ۄ-`?mƞ`O/>0Mgs1d,W>X&nj=QVl #wFٛ#WU/+Px /} 0` 3Z0m5N~p< :!e0 +[d &a)d*مNTr쁠B O~뿘"C꾥z͹vouve#Z#94K|? ڇ BPnF!|s7BHW2U.n|bߓ4a;]*`F~\ Qe:ɶz| t^y"&ƧqEB5cѣ#O>g ԃBЊVHu)Y##c--5օ)mˌ*4OxZ&x yR9OU3wtI/oWl,RV~ 0dzLu^ټX2*H13d>CesγGI+@oE]i؝w|#UarU 5akbmf(U9f΃-9^Ccz401Į (^Xc]k*nĮ(u>YGp_[OdP H>5KE0l6caUsթ/)svQISEU;M`@+vu B1#QV6 %u׉ CMkJtHfN+9\F}ETSE[gY}~)RE#ʩ”)Yʳ^.ٞ_,ϕ?T$S}KӘ3ѻ,?ؒ X7ᙳwY&a ,в~J)X,"Y{ѲMZNBX3{{t dz \M ?Q}sVLl{]b y.h_P: -uZto|fŚR53ծ)W~66$VS FL{anޠ ~NT@i\F '63RlW=`$ݹΜkov%GJ hmIkv6.+|w~3p|GvDufWgķn~HŸ\$3]?]Ӄsr]9+55<Вe{QEY(s_N* jQgcp rl݂4~r4݄uFK(oqCLBir8T!>^Y})gv8"FjU>epCZ2e>0T4SDNY`Um;AԔB4ߔ7I}~,aŻ( D;57,E0[ fBPvO%npmFG-٨p2C)9`kA^򳒛jjjZzLƁ jIR݀c!w{>"iJ2^*" FLFʒFFRמM3HWFGΠ#sL:_p͇.);c;Ư*TPYQ sF$UiՃ.NUNW_Zqǭk 91yZݮOz9+Fuܲ!RG:d>HU3I+ŭnmier` 4no¡:Ivw^7f{o8Y%bkvXKB0>s P"U{KV O9orl)y"!W)Ɛ3PΕ$-%ttYJO ˧I>l ZuPك'TJ#?q.;O!O]R*u~= % P#ӈ8F*7`xjEA||JR27:KWXW_"|ME4B.yċ=c܃䭪IŕeY TsY_>՚Sͼ.ޡ8xu_C>2!u M=s$5RTJ#G8^ɁMNpi(D&wUqB^ v[,W(HC`>C #O3Lp;Z4%Fp ` ɂ ~]C YxՁYyFeDX;I-DNrZM ?:Ѽ/&^Qi2)cV`bqb:ZԽ6*$#Ġh2`J >Ke0X-ۉ@B"еå@Ħ`|&˕ F Z{YS 45!aVG1C+?e4C@%CL#dv%*}) 7r` %NG1TZYm*/N"fJTc5 7jgw =4÷kk[5m1#%y͍DlF1j6Ck$‡Acbʨ=E 4Ctb@LEN4-Q{x|" º }6""XcoRn1uudKW43UɈe˞Kh`w']+[H@]2.-zɇ3j/:37aϊZ3Ot/0= R{0-L-lHU"ERgJ9' ]l5׈\% .1$ ՛ N'S>bEGIm^.0`Z>5a63n%F#3|ۃ֮UXԳz( 0\a]O0Gj)vc*b4jì|VES˕AZ] 3y~R辶 C\Z(O.=|c,CՐ!lʔs:}^D*^St *,ěqPw!mU lV\r,d<%-N-l=-TPxVgt6Ţ2.WQaE@boD-':'2{"fIǿrɣi5(`_#XE44ASmu/ lŬk~G`oHQB)&- FS u5iìFv6x?En[u A>kvC Lkr_ hT\1pyy$}*V6m(APR87iq %mGi]%aEphϼP@ˆkʻqRc`ǯ?+6;p;<TPClBlM8Y1^A/+Dg&){bT>|9+s}A/O&fd/t[\PG_(y~?H4)4]@NV"Z]up36Iҏ 9bY{"P8t .ek=UcãWp@!kDr=ݓm"N[k8ѷ{.,QxE"G9&GTHBsJݝ?ޔ<"~5HjjCIk8;a6w3# Y?*j$I;̝X7| s1 Ƀ/yF-tk6\MPi1.BI.yj-L1tf,-7^ Qh P ګcbs{_E'ōG2w \o;71ɪU] Gg)3Q+NtSWK[B<ȔDVRaWCԇwvbSzM{׌C:!9oڊ@5/ɘ#bWw3GظĂ⪞Yݯ|ە@"d)~9pvpJݝ(,0sS`Bv BtL,{t~K`"Rڅ ʋxpe ї9|_|C)X`q&ar-e@^JA @qxѵKt4!۾r6skB5DI?7*fGwbmilKd|)JV*tU=(s/R]C.w+q@ꁢbl!u0an@S"O7KFo}!i86$2=tg},HG̋'-Tȃ`kJ5J))M1Cў J)36FKBAseXK6 CO1f: *.|MšbZ{XH.%et C&]\{^y|,)K( Ī[BD+C)x|̴-.G;קKySOfYIEYj K x: kO&>g"qPпEI4eE,<3P1<=l+t )FkvǦ*8Ν6d+ҟֽecH~bsufna`9SWD5cۂct<8Dm}e:*Ga~.2ۮ=+'~>d}B،.HϪ!=1"i*6W1R\EXQYY+2/3v]$Fyͣ Y" # \16\#=X Z R23; r=#.?4aMDc2dQR(裐4%cQ1}mTpr\ h#IgN%~|إuJ$/uԐ5.@ct0t~;um/fN +o&dPjq ^n|Y̬`l0*ދv\72P0Ѭ6`plJM(ےblR 8`y!Kbu7=?Z9ajgmMZ,h֫d$Hd"jǥ%lLgR( JM(S{Ih F{~Y:Zf 6"v<30E\Ga/A,*dM'wȥmrM 8^1.-NIGQdWq6>}A^oI66 fGLIQV wY *X"N,Wix$8sȎO nul&}&'R0)UU6:{Q_*w}C=4K'Z(x4&ٮg SpZыS)_9еMN/m 03xˠ_-"OG("ɽ ;C;U"O-4;v) SƤ6s'WhUoGFEc!1M ϴ'祇ٙlKYAeK[vJ:Χth M<\=Y#oxl>kKȣv"">~p #9kXjOuIզ%"V!3y 55qF}rDtDa.р|DfE9ނ6O 3p5NfǾ :khJVW #%J&bVsrէ$15D*,+D6,[#uJ_!M(!)ѥm:^//e+P0Wr89 0My_J|!D<)e?,`{th@R*yy.cgN-Q&ac6P/@.@+ [& B]XQ}d.qVkias)eFX 1 mKTihI`T찆FLVI8V TЗăTچ9y4Ϧ'_#>b}4ܦ%'#\>zȬƠǶ$6U8iB5Uf+-9 ThO*̢ߙq#sŅ~ѧ;@ Q/vVc5ȣwsWfͼ;`Y5xtJQQh'30 FG䕐e*} p([akξjN#s6v+4$lq?C9vP)V [W|;,UE,)LQܱ7!L^O%MT}&9m|2CTbeUY珍2vʼ gWr::f#}·wǼlot2 ,ddRfxLaL⋍|I*;3pd:x"4 ;Բ`pYN A?ٽ7wǪ(u'xMmː=-qzNwrq" Ep}9 .5{:15]oQ@JL%gXjn)ZU~8ܙ Rr0%7T/Rs3Sx*O?[-=JG`AL Έjx;vooA"ݶTS|-scR7E-?h%92N$;g+X*nެJFrrV)<׫n*vFҫt]ժ2@\p".@2fBP~^H *x$F9Lq.#k&ֶ E^lЬm$63,9faPI)‹aesˠjvĖC./GkNo .Yφ1h.) b Rd "42s{H b)9Q#-m,LKyYCY~s;z[oxneDf" 8VD2pV }~Q M ʚO^.ɬ(\#-ކ$&/~[\Pwu  yS5|Z Fi&Sij:[EaY'á9^BV^|v!/*p&Ux|0e=VR+^߷BwvN>)!qm5)$3vBEWSLBlAs+gbVfAU!4aJkM7ۗpZlHzXEv?0:R=Utd`ʦkXnC#h)3)'R2ei~h}99ϰdˬjmU8v g"+DnR NEk$$9ysݟ+2'{ogEbZ0' <=̎!͎ }ٶw-ЄU~;7!&ʯ93iUE( 䄽Gti:Թ:pU\2RbH: :Վ4C*Icx;b܋/&y4Vqe\0ODO-+8Ʒ"_mAOe|p6REn`)p˻j=QDERK!@Q[xk\kTUGu2\Qi7Uv-}TgXOƪ5^1˻FmMd`8 ?jҮin+;@0Sz9K6f@sKYн fÕn(y- fIu<"1gԞgũ{Jy]uSӮ]<Km.=9X4"Dڅ2PK*h#Sy698Ay_ so'1fU-k z7}%/q茉t,NRNF`6 PV}񲭒GjԡBQ_ѧOTuFYߥߨ p@ƍ})T()!^R{E#btAD`y8XA*pXsڵ뺸q.3M[t8ݒ s Y.og 34BjAWNjO@ DU$Q4;!|)ZŒچN[HIoGb_e]˵#nY9> Ic/&1e^1%F3L6X&l^{>`yZ0WIYBɍ}X>sWwsZ{iq˗d|iL^81v(W3"SejdbO|1b|Ìr㚎A“QL&8+O5'Ls0۶ Ϣ*μʹͯf@]/H::gcrWt {af8ŽJzօ3<.fTڥvO'[k?F2Fv >Y5vN'rP&pp OO "GZHBH6'ʜ/թj1>zc~,JrTÖ| >&)P~AŲYAOQ;AL^S[5c,#e hgk*j<<эKxq.>3 q4F7z_FsaE97 ~ab04I ћV (Dtʷ >51=mzX<'[4d)  H 8*SЀYAG=ZU-"{: XikA &pZ ZguͲe%OX3C@߅{4}U\R693^kwݠ*ǪҖJ6Tk3It<ͧV-f6h=6  u O`kdlN@%6Ӝ;&߼\5)Ȝ:OTMTK[,]u+ <"Ɔ.ت_l tsonwUqM-QnьV%)J2}~йW|K5l¼wO̾t[t]o/hxTDzK-vGU8CbZ̊Y>X&9`OG~i_͠5訦Վ8KJ8\U[db2[cJj&镈F?,` *Imw7s7yլUKe%DؕH9ĦTᘉd8VOJZ$EȎx#~LHAa)_ֆN͉W{ "^ wIct𗪠*GQ$_;in_a'|K9r$"X XH(}W.b7HUzf> G̮dajC~ęH)} ͗arX5ُۣ^LRWX>μ67|np22[ Қ໿_ ٻD2n9+܊%!U/Є |XΤLc[oqfv7wM'q4/2J $(sf $0*jyI3aTyUOI 왅8Ef0 2~˰GF\8=pgIߐ%$qn"l }5ŝED*܌=+ij2{m!/cJʰ~"+Az84ŇU6 K#udž36&I0@U;n)1AԎ+v:TI1&rBjUPN1rp aͼ{0~Gt[?OGv[<7YQTfQi# [Z~13rώX"Pt\cQ'1VadRx2+Etc6HnТFCAw/ =mѰqW-E!YZ2M$`q}+&(![W,P|BxK#(srUDEe6- ½OLWZo`lvl x6S8Jj|ȅu&,D!#pD]&1n4~/xe-3GuLP1VDKAfOlu0\֠ >y2 "[jaF_lRA:n$@x -o'-!&G`MHOՑdߌ&Iⓚj!K<4n*s3NF7sJZ@ ObŏĴXwu ިޠ Uֵ;L|oW;ɽp"*\)~Cd`FNw)vk%(g-s}ψmϖH9'!Ka g'q(ww®6IW G#"E{0> k7󛚳s~`V!H .pV>ASqO9C_e'=|€7wʹ+Q>}%ro"觟dg)/*րD' O~m?IU~m8aYAh`BdeZq[EP:Mx2;gx'b@ɫA)5hLTf@15ءz@M/AfY幨6zI=*{@u_kǓR>yéG:zZd%8Vh"|(39Omf2r QgcOV%j̱Rs=ۢyR<Ҕ=s"s61ߓ6/+iIr// Nlc лE4@~ȯh*\4Ǩ.)c2)V v h.h^9є[R囃vt1Of_.!ef/83Xd$f3şA qۮԤ-$ ʤ]4a؈ . X[6r5 kM9 oWh*2u+USZ:ndNwYÌ!՟;r@iWgX272cȡK TP6MLj;)zP4-bȫ;2BZ5pųRNq]Z;3z@Z߅ӟ_k6wX5V81T^X 4 U˯ѷ>k7}e EfSyT 1⪬`K<#ۢMϸ{PyY~lN)dUocc_) l )(O/qv%wgn|;@ֵv{^  =EhQgy4qTe<L X[4S S0zzLCVk/DXۅ +2TBR:flaUgCH/J7tL!!3R^ũy>;I#W8r)^acvOX ^^(QŦ,> nŒO@,zz`k&>Uњ 1{x:_yψebVhr52tmX,Y2-+&@ޚ3b3cuS(',yoa{W>+v\荔Ǵ6k}\NlzzY7ؙ#WE 1vA%>@s?\F>_]O0 s@VX ]3?۾yA|9mL͝OV˹&H4f`Qh)9bϯ\ʡp[t"OӺu/6[ luE;մ/=7Φ,V.eoKݍ (KH݃l :*DPL> `ݲz177o;oJlKJ€ xg:jSIM]N[/ (zP!F[JUY[#&ߊwt{c,Ϻ~]EgK2 *Rb|IcG|l/_ "`H8p8ݩx,ARFoӒn♘AZQu/^Ri!c#_M;{7={v͖zFJ{9?@+qZ  ?bpAN.@XtpQBJN߹󝐶6D>*aQ\?8pt¶*|ocb.> QS)~} 0肏؀ndίl/i>ty9!y9,dw5U|XC0&p4x*9 Ϊ1-]j< n{ov%_^KMHa<$"F0Fqڴ-uHvЉ&ڭgJfYa3cp=_'dSc %!WZB^/E?]Sg馎 b=)EFxk)ysR "(=GGYQnpiPZ/͊G(ǿ@#kaW9y55|]p%>&Y+,:6ӊ%Dl2Sջ`ԳX`9-ٹ"utlJp⯸:NѺX>lfaWwoYL_u8QTW7LI< c =HR,g -܃kJ9ԗIf} PEݩdL,YA_hsj=Zz|P{XqD\#ObXy3kF$wQ|\xA^`e4Á#yfwkzCpiAd3YGRuP^VD;R.qY[B4bujr=|&:iU+!*cyBxat~X$gT[d{ݳ/61ҷeyk&UHAyȈN=+LR5]/ODU'J (gO/"Af[3Υ>ƛ`Q>B0Ȇ~=ZQMp`?FYu,BX˾4yNY"ĊrwCpq -xXP^KI3j =NٵC'Hⴉ=0+ul7J/AMӀRJѰҗ{Wg=@ZQԥWV+eU{;A5{J\ `OT0߄]B 5ȩULe*]{( 2V 9w0%_% _0֥ԝd8DI; .ye@VͤW"&<X 9Ǡ@ d%!ZndM?FƩ.zOMQνlW(S9/4(7jOeš`THjE{y/@]8uK(=Q 6fF)FBPi&w}xeHb6Lm'f:5ҪBOWu+pk:ਜWem4,}$q\ }VTNIGЩQ!R(yR8]ʚ/ߋ[@%$lbJ cܩW;= .p>9'wø}^2X46@i2)Vy M^kYn)~R:s*oș2*OkKmEbBw`ϋ޴J6_ɰHI>vrќWk~H&;ߖU^Z+·y5I^Ӧ[YQP.WiusQy̲p:,sȄ3mt65Lo- isңBђ] rhMy@jFHLǢ G;e)iF9coB'Ww{9cwTieKbA/ڱaKz ^o3uyB~_&ڡXo|Z4 ^דnmH݀>H?0Li!4N :M)ikA غ`v `ώ(QS|8_8#ՅXߨ+1-HJR.c2$|+nt\x%i%F]R6Yk}pv%VCI}7X.lgoN#Nn gDvKM=GΧSz QB%MOt/dwǽ`38|˂/&y=LHllt&)t&=]+-q @ 2txʧ]ٞ^hXp!1rQ 7\Q*-wfBS_K v*> "g*.FE6]xEݞ+k})wcY |5m G&؀q){2#^=f3=L!Pd5Q-k oP$C;3ۻBֵ2!tsOʒeY0 A7F(hըWbX\sH^4[y=i5zOG,?a^T`6"]p0OZ(Zx254&v<ӷq9݉lֆܠ+K1ISEU5'腝(hA4߃ =%ik &3ݱ8w19hL22<]s^9Eg[@pPw`@ډhC+8;}v~<99ޅK;aZUnFnsqH5UQTOVs(?&m{aj5aѷȠGKBFy)q3d#9ak@XYa}OBonE9n!inr\}rhs.z/o*yc}"7EJM2SAݵ*ND`"%ǘKcɶ:ZnڔԾ*pe~GόC4t'@o(W6ug&Fhj' >E.)5 e0/qt8HYԹ>Ը k0R?q Et"gV+e7Ujd'I:rKx,Pl9+ %t.SuB1E9_'Ǝ]|7RDi DhBaȚQ4V*\yS qRq,n&OfE:OKt E_b 1A37wtF卺Pzq81Iz%'c| 4Fjc"־O]' ;2!{k%JF L騽4X9g0P8[zPN&I`p#@W9@!XCgeD+81l̅[ >K)XKoS.ixqY1QfIF)Cr0@~j?Udc3fU 1{?Uϭ7av$- x\fڶ av X͉ai&Y¦J>r/wHLSVv\I"YNl/\% h7JZT!BFJr{XUC8DމœvQrJaSPR#BU8X%^x"G5b2`̨Sb}ZU&]REzbd_Wn% aCh~> .U^" {YmiI-bdLh>C#bZZu#1!-7'@$ ݛ( )9դ7 *a=E޵:D|ۙuÃQP4/02 (_oVEowsRndbFFy‘Ͽӑr 6M (Oi]7-}oG FוAɑ-P2WWsD&a,|4 >=Aꊾ@R- ֺvs͓=ƻfh*[bW2Zcȟcy׬hҤ)XI ^*LS6"sl{w-'u&JJa,>ppzOGاaA0agwHtH%4|VllnKw$npW7s/{*B7`@2\91`:/w!Ggips˰MoI /N=`(W-Rf>/c~| =+={9otAtz[`i"S}|+VoBZL'׼ =+!}BpX|zpqiLymMi&:9O  jwPmNi%XFȽړ6doLtw^k}9h]~ GŪC2(hBDҗjEZӳtXP$B R6$m:3bl[P`QWzR֋Cb;F05َ~;c4כּ Nʅ(?-{HPF sWR0J g|8;M 5A^i29e.156L4K\y ZS7]OedͶe`hAdc4<0,+.}rpR좻o߄c{_ۃ8?RV[8s+ *p-{d &ϊ4.93,bώ]3+ <%݊EUs ,]F/a+\P&X'; 2iRއS4/$Ts;%PmwU(IZ RLJ2갠8Rmvvڋb!iIYy ]Q.*w5E8Dz'!ິ^6Weyf%_ĠH̃0*tkINV35d8B4^w{^ #~Cr~cy `vr*%$G-\C'1 ?LKcWN^ _89sgXik(^T\Խ<oM~Ѥ`?os3dBW"a *R v /lѯ-r ۟wy,W] ,GCq͑~U L+>D.4<7J# Kλ_w΄J|Q-!0H1?n2Y8:K-䇆*VYW Ejf}Sēc9 I,ʸ\a hI)·ף* Vn.pC9}/9T 5ay HWNjLcӇxap͌}l~l*&lDKsnEѵ|5ձS2ԬP#//@PQ]w- :Rnxt(?VBOHwAI,'T7j@;Liiu* m$KIm2+ܗ 4((47(Xkߎ[vm"Ie=AD \;1YU*P󮆘!}l4vH[iMnuӈeK8H%٘MU4HlĐœOB 'zr5xc<ZeI< |fGujukW6zKL` ]=-azţ"_' @p0G7=Z#FIxH~! 5w4C׵N˵12.pJ`Pu 'dRNYN,Jgu}}h*PnkpROPG6')$hn:^o?k6+M/hy4ӃGwoQsVV*3OGKZ6֖_ԥB.y Q<_HbA4}(qC*5(W(@PvΊu&2XםFH/4/}ARߑo*΍ &1yYcN-Vg^gxJE{xN-c1b`źX6ݡtL'Uf($CM yr.}/Jm >4~3Sstތ~—_ftY&;δDT@C%x3b`0RBJe[G98#\b"F>>lb0}x;[c#3HVd̳3ٛ2=V>H=E{t3 Κm b{rX3v26 '^8 HE XيA=Ws8Y"iC:4 C.0]w.hz9L$_D^SLo'"OHP"by5[Ԗrf4 j9^֑.X+s8wF.+Yv*bWnCq|[&' `7 (Y2A MgOReT-/ևꑕ+Ksz蟀Jx[jXXj픾qR\bU3.*,{!Ŋ%7 qMP6$wnrL7-k0S%O{(OpjRɨ>y(3]_zzgͺg);Ӂ(k766cj do\ abinx<0),/6 >}A `|!4Y S Ʉ?x|/ ~5Jn@ %"ds)gZp=E ɫ cKzR^8D/V4$6u?敍TfAM -݌SY$-׎3>sւFOA_ǔ(1S|-j vMMk"5jr.U]{N!?zrڄ*M!ݬY^ 2Qyҥ69w߶"2;I=NNP|̎U#0әn^AWUDQ@$ 5%;%Uʼn:rBдjs-zqʲ+" E _M7r.l^Qfaf]mR5骑F7qJ[ ە|Ubƶ =e NK~2RoO׃\!H]Pʸpi6Cx bU+^f4I{.3҉j~;5}Xlfc}PT5wᡑmҡ\({9UW@ir q]|3c36oU؄ j>jƤzc19MKtJ~6Lu2qYBY|ҍBdэ.p:sXkq`.C{X]^z*m:q>[wbd. ZN,.$[&< HPR"0BhM3ND,N@|\Nm "dj E@VH6Z85DZ k+pѴxq}x?ZXfOe+]k_5TU.wCfg×`sa7cݜ0|NґVu8߁'p㍓P3O*S1>Ic&%-q jflկhOX@ɻw` ñ @yd p13Pۓ]O ߯T=kV8-m6^VdN^ɞy3 3wEq!(lܶ0VtI3̐mԅb<;Ԏ(-d6p%ƾ4!긗YPau@)a7/˒D{j!HF"|`~cP-eC'- 0pe6V8&!}Gĝ aAApՉV|ߟ0itvZ s-JDt6šW\kM)/A Gba:Ø1pJԙ;pP:Q {!^24-%ȋPəS td;R YfD3\_n$q(d rxW8e?$Bg1ZE?) u7샤fn/#/ۖ`iC*xhE_0͸:ˠVL}]=vp>V?RLJ6\Vgkad{מHꥵ<1CES rheHpF@K]qN֌Fr}]r9^ܪvmF ':M;}Ops/?<_{<(˴ǭTD4cɽq1rٱ࿣ />ogD$ZVzQ\ٖwѠ=VƎR["lGͮ@$Om ` Wfds2^8Gr| ]! "k_ȻuB!ݴFSxU)W/$?Fo~wcm? Jpckay.q{ؖLFT-pex0}%BZOզwjħNN·S80ބ]-0gL%4BF~DJPzp<0 r.d{:V;q *z.f]VD]d![{EF{FM aۓWfT"4 ׉ ʶjx췸O':лۇ֊ EcмܭURQ}/-w4?9H< G-H`Tek!a;b@اV 5;eYHib5"PBO^;vR +F{uT~p|ȳ{E -k0VY7WMvL vO} ٠zes>ut] :Ax5AW ^b-ї WaVO.om:q΅JL!v^WuUH:eߠPCvyFe%Zg#0;oy")̓tsݜ>] X%Pɐ:M0 jH]Bgo/fԌTT_.0aR-Ls9UtTç¬*a z\8l/&mia 5\B)T~*>|lX;6fu/D#^3K9R#.;rz PrKTDToXOH,'hHb6%w`ZuSj6jƗ-}|$Lx [8gpUj%!`TXs "Qp庀~r=˜\(j\Dǎ4vylЯia𮐜H˟<>ȼi1NtRNMP8=alTWYְ'/iM}4,ԡ%0z gbI ܅RX3Ac~f$%_\:D̹ $1TR=of VCiN;i8dz.isX;/,pP2 &7)q`WeX SԝHHbϲO.q4GJ,Wi/2DP_GvS{eҼ\Mg&W-iry""*V% VňkYrNم/:GPL̝ -s C0î/h}vëݫ0!呟m˰1!5ua#`'XVCA >໊+6B/qϒz qUl2]6;]#P[ FRS&KLĪiްlLAB8p R3m!2o%&lpe]L)tDis< +:%=\cK|~ުgP>ƄpFp mKd@. YZ