sssd-dbus-debuginfo-2.9.4-4.el8_10 > 6 6_6 3!pQp)Tξ7]mtZ`fY ]mtZ`ښJ4p…rXi`ΙbF9(Cě ]U鶘-:{>6/D¾H/@ʾ@)\Ү*e;bEӕ`([<8;؈hmD^Hd8uFXY+DW6B~. >:~L7@2*ӑN: e /ya,*A#EաӚ$(VCͣY~H+YI/AGGFǖWw#8"~WFo^il^ՙ֊56&b6* Czvy} a~Y5YS}j[+GcʇU["#wz$R͂Z7/aH Q&'؂.T5v9[R` ?5B$A%qJ*)N<&RA$.޼=uCIUiJ_R~^]~أ8fa126d1dd9de2f3124abec63a0fde2589889746e38c3056a30c4bcd94f643fb03053a02c5abed44931701797cfb620d0c56730d8o@3!pQp)Tξ7]mtZ`fY ]mtZ`udn;(yuxA2g>6zY(`I{8Qfţ "i~lLA.hg|0pJ5 m<,O$GtA fn-Ze/pӫ}RfkR'$>>F--Ik0y]\>%< ;W ɫœ&tLj<UſE,F̣'et~`Vm*gp/Ц{=r5R8r^ %+<&ˮqNr y%fRXi8H/L>p>H?8 # K049?F dv         Y    E r (89 :_bG H I4 X@YL\ ] ^Vbd$e)f,l.tH ul vwl x y4sssd-dbus-debuginfo2.9.44.el8_10Debug information for package sssd-dbusThis package provides debug information for package sssd-dbus. Debug information is useful when developing applications that use this package or when debugging this package.f3ord1-prod-a64build004.svc.aws.rockylinux.orgKojiRockyGPLv3+infrastructure@rockylinux.orgDevelopment/Debughttps://github.com/SSSD/sssdlinuxaarch64<SAAAAAA큤f)f1f1f1f1ffff9cb17a1033e838b8968b6ae93a7606eff39c53386ecfaa742dd7528ca485163a../../../.build-id/ff/e50facbf133176999592c93e2eabd36f77755f../../../../../usr/lib/debug/usr/libexec/sssd/sssd_ifp-2.9.4-4.el8_10.aarch64.debugrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-2.9.4-4.el8_10.src.rpmdebuginfo(build-id)sssd-dbus-debuginfosssd-dbus-debuginfo(aarch-64)    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sssd-debuginfo(aarch-64)3.0.4-14.6.0-14.0-15.2-12.9.4-4.el8_104.14.3fGFf! @e@e{@eReRd@dd@du@doMdbc&@cR@c|c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.9.4-4Alexey Tikhonov - 2.9.4-3Alexey Tikhonov - 2.9.4-2Alexey Tikhonov - 2.9.4-1Alexey Tikhonov - 2.9.3-2Alexey Tikhonov - 2.9.3-1Alexey Tikhonov - 2.9.2-1Alexey Tikhonov - 2.9.1-2Alexey Tikhonov - 2.9.1-1Alexey Tikhonov - 2.9.0-4Alexey Tikhonov - 2.9.0-3Alexey Tikhonov - 2.9.0-1Alexey Tikhonov - 2.8.2-2Alexey Tikhonov - 2.8.2-1Alexey Tikhonov - 2.8.1-1Alexey Tikhonov - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: RHEL-33957 - ad: refresh root domain when read directly- Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently- Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)- Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'- Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed) - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7 - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable") - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #- Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level. - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) ffe50facbf133176999592c93e2eabd36f77755f2.9.4-4.el8_102.9.4-4.el8_10debug.build-idffe50facbf133176999592c93e2eabd36f77755fe50facbf133176999592c93e2eabd36f77755f.debugusrlibexecsssdsssd_ifp-2.9.4-4.el8_10.aarch64.debug/usr/lib//usr/lib/debug//usr/lib/debug/.build-id//usr/lib/debug/.build-id/ff//usr/lib/debug/usr//usr/lib/debug/usr/libexec//usr/lib/debug/usr/libexec/sssd/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter \004, for GNU/Linux 3.7.0, BuildID[sha1]=ffe50facbf133176999592c93e2eabd36f77755f, with debug_info, not strippedPsssd-debugsource(aarch-64)2.9.4-4.el8_10utf-8375d11f8be8acf864e0d6f58da2aa622156fbcebe1fd2596a29e2f6950e6d766? 7zXZ !#,n] b2u jӫ`(y0DiiEၲ&n&`t& vd/(Wyŏ0y{,F2B ?<#O౩54d k2p8%썫S7s'&zfTw>#-miUj0y: H.?""1]2xߖgbiwo)r^]Z` Cd %Jb]6Uj\᝞pOk&?)O"(hHpjy*®u4B9e-:WC\:vd5>RS.Elh9u/xg plk <=u2 ΁ɘjAMsٌ*s.+6tW#p$7Oژ9߶*j]ן;v11? $hu'@YX.hk]: +ZryI`0^nG|܂ӂO+4mZ ;|1wtǿB5uֽUuOg,r&|di|^+ä~:*3[(vŅ~)>u%Aça-_:TV\ABJM=(EIiUBXG&2B&ge2 chY)"t(LNᓱ쟪t\Dذkŵ䥓4ե>:5`9SȬ c6 mz[4S`1 QÊ f^!4.capHg 3Ѓb3hXܜXV1f RDIۡ,q&rl{m@y_G}Ýho<"ɈVlXAŰiesspQ+idYKG U1.r}+I}E2k{=/-7H?˘{]NmU-:n!t`ƿWeЌa~WYj["eٲ<  { Ncդ 9z{M 3¡IoiZ1-PRqMҳpj՝aIլȆH,an@(+Rl YUؒ"s!!a !םmC|+婸C w)NR"R ]`7oxW d 0;7i,|i? 1WZEWAf?V|0tNk`XG%aGdj] (.mt32yΟpJRlԈ)x!TH,[EsFBqą#" d$"s NWSR:E?x:AaWG՛p%XS]\-]yin3CP,ou:(ULR#}OR:H "uOo%K4 e?&̕ȎapXm0+x-5̻i $H"_'Uԛlç__@K2NE[H.t\zqMzkVImUrhxN܌3 gaĭ@e֑3D@լnR:TUxb )&hg%B 'F aK@_S.kȨ_x\|wkl T+{j z? XID*]scq5_b56w _P3p vXXM4|0rv5<E>Do)ƻmۙLSCʌep"}jyٸis=׳H~hѯ^TJvҘⒿ(ζ X *oH<,fQ9t2%J}հ#([] ل9LƐĢ||.{xEŸz9b6AǖdZĄD(s)kZwxJ*8x嵢0GK~tl"_z^#VWF@_7YN?? ÷C#Ͱ!2?nֺ+J̪H ]018¬oSog ']ZD@ ]Ul Zޝ݊?#INW ֺ5+sQ} 1j3X'Ć5!K?&k/"h3UL/h Zz!x[Ocm,h%@ձa$龑ޛև r!3bG; y^Ҡ`u f=SN|n5@F6Y Lml<1o'+Ú |뎠"3.yp7/r<1R,ݒkjلERoť=H \su LՉfb\䭮fe=S63x#L՚cg[UVJ(;ɋ-@$o?*z7e;1c4++GN{&8HƢ*0#p&8.܎%9ǐI l>@:և|"X)CV)Xnml%G.F*T/A2xk|!WjۈBp!ڠ^f`m@)Ȼ.m '5~Ne|NPIq}Ӧ!υz f6xM&f$֤ 1pOU7*0~;=褉37;]W?f?eu؟.Xmo@_$T@<@i'0G:`ElOWI4c9!v cp/6vt~55ԡWJ<621.$*n1iX/ 5/cꮃe)w3֥&D>R9$_sAr7@> fsq6):鿅vLr5"kU&4/2d< )bH2e>ǖ|u.;tHהorꧤUZ\x&I-\@tyYq8?8/lA_a}TuFqn4.BYV_m\+ ތ*Q BRYWн1rη侇pjM9ejz󱼻EyWʥ[Qn\BwhZH'sٛ)1+x͇۠Y*PO{ArJS i(d@䄮ۥGMq|o:0rlUEvZUq0?h)8>Jz8D.[3 {im9' p8yH,%Q*čHydaCOr*}7|>Q# NQA#=17*@iȿ뎕\x Zl..$Ϳ_D&B>ZT۾&\hٝ;zELp^4k],[zٍ'1K9D?KP]vi7 yӳ)^J%& it D03u#.ڔ=Ì5`~gW`CXlw>]ػu6 @';R|C uK>+8 L6Y!&99MX:eDh_y~9V_Mlg/ 2f@kC*ʧx2\?CUcNLpVD׋FM誡m+jF&`;M!Wyiⷌ3ʿ-l]w I($VۨXXp6Զd}7JɿL/"$ 0 R`yo_|6W dM)JgH7#t +Hcrvsc2ungQ.XghG҉C?jnY"|0I%^Z(Ld/dCȯ"Ɂ:Jh#$x[}m{,l%`eNf1r`VNť#H msV d966߫R|)haCqa5`_ $icIVxp#t1T ?)&McwbϖrniÒ@\nzƈzoYh#&($P-{z_M,Yِu$S(Mq8S>$P}q rڹGf`9$UYE~R ʎǮ>C;"!C2j:-5bxϮ(s"40m*QxT~@|pjPY54, L%>-I>\ƻPx934 Cc#<_ߟߪ̀z(Ql孷Ӽz~ RT@|2>< (΍X#ClT+X"LrR&ЄOy$ӊ5y u< bmY?Z-Y F/DP Ým-{bz?M4,E:xI _[fJ=mp~"M$!!5VͻiM-`+ׂB::=nhoݚ$Fp_fSWd Zp*[.N;~ЙMS"k xV˘y=Y)qpp 2[*-#4&K# 㣮-/cF&Z'[9K{40ԉrD Z@fXĢNyԬ7S3]hc:q?>Xbw/h?1D`~nU, Nҹ|S3AY_pX1+oC}$"N@QFX/smq~A-qB[VFܴ0+E C˶)ZxAa2'[ҎB5&V-owx;3%aRG֮@=JŚiF]a~Pڰ@]\)M!;}0QBh7V_ ;Kro`sG_ Ež\.a1J`SiSkIXm9Y5'k՜ %xf ]a .eS1[fcdm2=5x깫ũ Ъ$u.bWxKYBo d:<2XBw98H|`@J-с̜R)^'b8e5ڋgs ГEPĵ<n~v# e ޅuBnhR\"M 4fi̪C2W/ŠVP.:WnU<7E޺<tC=7󁩜 eC  )p4D ӐKÐ@&22ʻF󸗠 17U> =KqWi> * tzRy`|la+9-$n8U=٥ӟH_4Ǯi%~Ol% nMg<ؓGp0֍\]l a>6J}CyVؗcɉH*XTT_U |`etj)hOJ D 09K%<3v3;QVTC懀<0K)qViK7 zdpg+arۜ{fRn!׭6G<S^-U;ȏ9H|D` B &V ^y@,գS|B:ݩ)(}#J4aϰ+)M!L,ƶzkBOR pDŽ)< MyҕkKDžOVlvmAò%!gmB%3Y| TtlI2 YlRZyT0Ojg?*# go{ڶ>ќ qؖƕE"D `, 0#d!/x0?{]s |)B N

Q ,D䜵Օ6k+#Kr'QMLWlkPV'䌤"R=w[?u(vڼs\ $ܹ keI0|=.lAuÄukeu`PJg@Ι=qgGUm-딐X֮`Jgu?F}-"!x˝s!*B eSVJXHBۆ<ϹS\s:z׫xfl,0hNj Q 1S` /C.KW2k+n], g!@θ910o 5x`~"*8'}\KU}z|5MҼ>7.(VI7Q:] ckXdP#X;9OYm e!2hLD/m[; &x# ^…F`lpX"HUxb$LDrxN9j=p&7"WBN4-н(cb#$a 6.Kx'Pvm=1 i4Psk(mXyiҶ1T&j.e0 NqbMc.^#mu{toxcrgc$+Fv@0D4 OЦH}a?H{ F5KBo%!5$^ٯLs(f,Z~\caR*(m a7U dgӒ(lspJ\K~"%bћI'X `;bsY, v2 xQFӐeh_/3z %j:Y]&.X F9WS]㶸SrO*"8[$MK*O_޼B`Kԉ.[0.-Lgj)*KPncEiF">Y;2o%0s0lHb{[3WQ|"cQ8\h'Z* s”< z?Y>H6Cs($͏׳wꕀQ&c'{}eUc=\S>-]w0ԏnds 1SGc 9e 4%a<ônB09\. ݰ!VDoRk'[N2nU ^%zSy"A>3cY^fW4jˆi/9ϻ;%I v W`G- n@+0aZ8dbpQyu4J6D;4W$1ꇰU>Z"Ak>4L>!  ]HXTOx;gqV rSj{gwpLǴ-#3< 2UN柌O5y o-iV"=X1kh'I+ X[R?T[ɝOu /W+y`_2YAKea|)wx+d }ا{iD*_ S ԁ˷GҴܕ#CI3էt+F·j!x+a&}a7+@#1</8OClYy8,ʮ  J p^/+|L#(Ne&ŶM3&י1C˴@A'ʿ@i9]hڶps863>`X6 5L!8Q^<GŎS,n%OS{_6T2R`~ܝ=Kl.SyX6;iq@+l~~U agc8|(8Lu r-zM>HДy*; CaBH'_5D-k\ppH1 yIҪ[/_ρs̵ٛ2Q\=b6e FbuEx~ VN͉~̞N9!T+}Љ N>BM{sx*F<~7iYx2}vAiIQ|5(7Rz%N֒Cye *EK$eh{M._q>X!ro;SKY𑨥#~5{QF#i`SZqY'8}^堾IG\M;1=a[$y&pJ6S?Js>rǏ0=ԅڡ"V"/3(0-c!LhXC8聉bJ6{E=bz(w2w"33-Vm b=8MH )h-r@ lwp!%f(t]{2yYjuS'4s,e͖? NN{opBOXiѲMfAmeW\Xf}mzwl+ $&&cD)*9L^K@$1Z*yW)3Utٯ}oxl!HPA}8$(0ⴭF 䵈^Jf44'h$fxuO,R KL$D u sԫR>kISk@cuSU`xtcPR(tj3YF&rr6e@R~=h cmՆ5z \~ziYl^~wb Uhޝ(p>*ENp[h-A42'fes4E("Ap ~hM_I7 ^x^$$& }t}d;H΢kT>x&RcSpĞ˳V&ҸNj\#*&\^!aCQ7`)6T)>0ZH(yǂJ]іE#(.j xC9 ^ב[aӉV>4Lax`O2Cw$>͏:-o ͚Ѫ[\f( `جlz 6ر!M-԰HǫGX5)Qvf߶ǯ5MD׌^tB<>Nj)hG{5^ :H[n^ WmEǎawQLI&l׌ I]H/'sVލHxc%-9 cMr?bYRZW@˨US\nK|\" zօKCk~p^#|GXpPG)s4>:KۇLL^q^:Sb!jLdD1l7obQyۚ"3_xf}F,3Ԥv#  ,gx[qNF0¹ڽn6I@@N`¶pL|-b}oH=n4ېWm !0D"q RC]]. >p<rWqĿaZt;<5?t.0݈{IpɄ۽' .qXZ)92`2c0nΧ. B, bra=xv5R$ 픑ka>K8V޴щ}è=J U{7C[i"eŜĿ7DϷtsׁ|F2|>ݹ텿Ӂ[4E(?#yjRds}oOg9K#Ux`[0d|5Mb=^KV•f;eFp}cJ{Ǚbt ;@; R pm`"i銊 ,((Ǣ(Y }|ŒŽ($1`֤ՄM"|4׼Uz>@F˰X[Rf%wNӚk!!34|CxWBgi3+BGN^IJ)SsC[WcϩU\y8ITa{ld&A r|4{x XUwgAu#lIC=;) DX?`v X9,7DgAktIxk_n[<|Tj7kL{{ZV \+D:D<~)c̗!ߚ0QbWÚM6CMkwaRC$} xytێT2ʧiV]iEu 5H(j!d |W5&>%i#sX16b, J+S4EQ #^[q3x]\ֶW9k16bST/~3WW_ l oL{$]Ǹ{8Z9#5c=֘0N`uZGS)4xP.ue.0܍>X2sʬ{${>kJjU1Wl@32Qrc.hJu qq) @5,X\qH.`LbTx+FJ110w$/}d,϶>7ܹ\X^dkG8k+St2@eobڦ_tʈfbҶ{LV5i%= yJJ{X-dx~4)}z mWB"@$@u>uEX#V^IjEz¡" ]gX-PðT/3&OT"f@_%;~k\ڤ:aDy%?3 QhFi՚rmXkI:G&>L\z0IMR HA=ǩi|q8aJ%z춻݀& cY5i璓(rh-~atX_Q7<  ; =7@U] K55 ޺g,cFd8a˩')@gB7z'G`n mmd?stBz\tsz`w"j8 h`v@/!FZh/y l4SF4Wy!CNlLk~-rfk~@Fj1bmaDe . ;qy$z'pY$.~M0LmG"\RXFZqU&H2ؠbM <域JXi]d]'RyHS%.N^ E=}b-&uGkBw6E sAGФmZnWmC?Kr(Ggmx4BMvB'YcNNO_Wx 1v<B7TR_MJYq/Ep6|d0X'4ΝBe'(a-Uzd[;Խ3b' Iu2HN˵+}Zw5zNʠOĥ/ziAk_НfC]ɘ0R#s4f%3{Y^j ᵶ#k(h I6%Ixjc?L 0k6Tpbc*o jd8;@gvwh7/iJ]5w_IAbq dqHFq/2\xve[^ѡh_ÙLt[t$!$ƃ+n@^V=$ tP r)\h MWU-kiRZЙ$a$znɥ:]K6һ|Ѹ1j~k꡵|9Ir퍍3dddC5&D| ]ŚBHgLzc~:QגCjc;#!@QIBT*PN0/cX?TCtBdW];AW33&jBN9uk9+%$D2erт}Շ֝/r6b2PpWWauRu%ؙI X0&4 EL,$ =h=gg t<6W|+ŖK&b1a%^U7A$J ǹx+_)XdLPYJr_ss輠Vަ|7$g<@ԸF,\!h̋@/:|$~ϼ<ͣ+5l9|UQ[_\|~v~Wnl3g c.%|jen:uQFq PUTI߷ʵ}Ȑ~LO6xWU̮NX{3ǒt=8~ +FTI>I-XSjI=nOTCԌhm`,)WN/&OKQ".TԠ_ 0m \g~V?Tc[w`p/0@rTȺ\Θ5)h_7^ ˙PM[j瑬[Q%kQ2[Z ~MzݳN'ʂAiԆpV}@MiCRxP1TA%rQ:0NMj,W%їo^zgFI悙{\ל9*kOhq>2K\ /'TLf#g؅f}j2e@2');%xv`"^;"- QIƩ6-"ցcy1*~uQ ȢևDr5;ؙh҅) 1;97'e.S0D| Zj[]}D 1nڹelGx0Yo>I*r> Y=[\'t2Z nh/lt,z[Xd:;aY6/$ @ǾBsW #:"$\ r̷va"| в…ʑ$?3Wq lWsG%mL.TDvNq pT>Z9JHZe=ലf + MʐBOFmfj04c)kiV]WR_bħ\poΕPw*/A+9!FGfvh.KyCUlv; IIsv"Nٖ*G3%ؼ͐`+Bf-#_]n&P٣wq-Ap)Z1=jHwon̦$!S?q2`^={73olg@ΩUi ԟC}hsȦ_OS&O _犄([ѕԉHXKXu>hzzL8#.\1TWbqf yi- mi$4KTN'o6QAKqkݺ@"lJtHk->T!?FBJWzGP:IƢ$IBU]em2.ﷃ3 ^R㯷rќAl s )Z.>:. BEX8f!b =ţ+񿱒m)VG)yt[*F|r{c^QY*[3^|1JUJjTIg\qj`WBV_-σ# Rgwwsy|]>տh/nCubT&Anb}V@i{r5Q//"ɮPC)!v) g7." ܌Ϭe.th^V_W̥Z*mI9+FÅ\)5:zǶq) nal ?\94vj" FI#6$i?-`C_6M/F u NLP>cg4O!K#OBe1iĘNih]e4u`g D ^L;Xǧ!^S4IZ(+@BQ6Rݕ5Tp9xSFY^S ň[ s1Ks8Ż4oA-ԗ[Ɨ(VɮaR?, nz|&H:$W mBpp.UV͚VVMճ) MBf;4Kze1kLk1{Yp86j a 7˫&[BrȴQ.QCՈJI 2vq`qUu2yX(h^HǯZH⟛VY hY 8:j Β4s^G;Iy %8p0<. *(q}ٶxHa Ċ,׮WYݱ5 _dP/oj(ڌ1G)wzA_}<*6"PHő 0$0;e_LQ&;Yvuxr !%5)`h،Z`NBP{&DEV2.㉾gBHr(VEA)lʓes)^_Dp/Kٕk$ux\&y `_iݮǗ\^D}nJo=MhP8m>{9z:< v,t0ˤml2 3{e*i:2kŢB1r n6@d&nzWY3H{_fT^9#Acq8d&G=MQBa@f:\v\nޮ" 9 nK 85e|;vYu%Cu麮{>E-_(Iw"dmdWFq棎/Zڥvq &oEQq9&Z o}qc@" h¨OxKL' !|W@ؿ䋆h<lB)?w,0i|xh7}5j h!_L]``3i,D5FvŽAK'<9 $. 0y{Y^wB81Z#IkB-p孈qcJޕo*DvCVO~%L L$St]x?|48vUp'v fPQ3Ti9 6sOfޙ|7)1nG~;Lg:^@W) ZAYQgu`Uָ ez*F.six6 P!ΗrV'ij!Ey nLe mX;0c.rJ8*U<94-9niWF|}[m=7:wj[YagŠu$Gi\[,=JƠ4FtnU3MJ^7攐Vu vU D O YE98,ڹC0Dj,c=̭3H#4p kKL74V?J9n&_;=+)>Jp"d0䃩Nˬ_/RK*zTlzW'} $^lK+ :=v%Df w8Pk?o\$N&W=;^v^~ǻdݒ2FXKlW.N㘷en=Aq&̑!)U:^?ОRi6 {#=JF XRb 2Ie$A?#̎W^ +XP5A2PqIp>Is\շ}CΊ8wF'Ψ^5{_9ACÇDNνUyJB2 l\u||~nX1c$sHxE൫_I M= Y백,d7u;W|IY/ׇ`+!"h;S1+L4_No΅1_ʅlҬ>E]_Vp&AcpMZN"mxkSe),Xg>T 5hi]FH$<(I+zL?<fJF%(#BA\&cU%gGkGH NV@26**lb[_ ])a pzx J]J ; bՄ]'J -rnUdy޸;>yp;S}<߸8tH90j"lv7 fb䶴wƠQe<_-<8xljn񖏣f?pOSH xSf*Y{ =Jժ'LJ b(NHK8XJ2ZʳK !oɌP9uknG뢝)zGVS@4+@pJU> n:oj^έihԘgg,{ԸoeZ?g53^iIC_ЏҐx9tm3q^\ V:xE>Iy@Rx7E7zÉ~3# k3;0c7OlDոfO {2H@vTJ?*A+Rl<@ G̅9Lsm}r%}in&x+H%dk[-]Zr%smU&ff1NދVyW{a#x A -1ֳ YXؐo0 XCT1%x7`&89>?;1U5̘DPm7߰QRlj:(hMwCXjfkl}dBeym,sNT#t[7S|Ń Jd5sHH飗ײɲ6~96g:x5}]GONaZwLb!]"7@!7@FQ5JnTⷷ RZ[K7&`ewaWFG^4{|{b= X_AomqUNX4_:Be=L[ncS`(I~w!z몝07`Om§MӒEQn/.ZebUrR/kCޫ_Yecռ_P<9+,:G2ATNbQqVHَ^.ƶqX$Uc:bgă[z=_D&ة_ĞC@(g)@b9n^=U6J?<>66_SAS(Bx`mDӴ8#$/Πh(F2Św" gv +$ю&(#QQok\ScȊ, QyLbk!(x~8a$fh7uKd gLR1)Br' l«N$OчιPhSfWf[OE7CڒVsIE?o.CvՃUA>2!wؾ\#ˮ^/F6&Eӡ /u&H2c,vQlFC Ѭ>$Ha +^`uL~-%D_E\B稵j+Š2W;Nݖ\.؉/ఱ \լ?Ȓih&{\ ;Zٕ ? 8qtVؽ$tRZ!R z䈭vQ, mCt@i"MrfiY%b ۯƳU/*xžփّz=\s3Q% չPo v"M*^, S[YE5D4Mhx{D0\lQ͗CWPǜ7aRoHp7`)$:fT4tJ:߬K5,#M}Q!f*i9+YJTڃ"z 18 -zHEWx{%5]budQ`3egJQ`WX Ym7S-R$"@lr0װ@P.g{]&f(ekyvj;k쾇 PzLX56`lʩZoRJ[ٯ` i4ڥ:۲- d& Hj5( E]W.bM,X A}0*z~ 1 YUj˘3%{C,297x|~rq3K6"S% ͤx?IJɵyh~RlmGKFs3ɱDqWFб\$l5dAF?f:HU: MTc=OGMG~)W14$]\]ڳVDS^bs(\)ש7Y?Q*#ke똷q<х7.~aQ$sDͩV9$9#U ]vR3Չyv1Ӷ*qj>V䷣@Yx+:c xQLF&0f7`JkCEË1.q Dv X#V[!4ΟtK47 #z mf⬤7\SvĥZ2)QFP,s["C6^sU{EddIG?ل&97KЭ5CH Q @W% 8&&eʅ)ÐmhiKBl@+_q|yj:iQ5'f ŸF}> 7}Y99'#ป0qCth8V`5$_Bi XXCtb@Q]+R/OTku*;Ϯ ֣4P`+/:w ѢD:4\]D~` 2o6%/ 0Dʢ *#{T yFےA$+M+XP~: |X WԺSM"U.M5еMZ-{H_{k4G P*"9^ZkD^}ߗYPx(#qKʋ4mUsև +P;"WdxIqk8ʑsR$>yΝ({ 4`c{z5H wqf<uV [ &PXVxƫչ:!qw:ѤdQ+;O?IiXH. ȑ#SqYBO]'0]#W*< z|J+bIKm?e M\8X~5<0í\2 W[]j04dRs ^Pc0R5`p'a%vF'ġYPR07`h_ qITt0&LL1*Z巉O9);K (ޚjYr/PX?9'&BhK+v턻o&tIH>m<O?~k:;}}Ɲ#1ԁƴW$X jy *}*|WM=*(*dFQu2}G˕@MFF raDx/6kA,E( 3>yćcVmIuI:ѫw&veƬ"0g٬1gκ }݆KA$!7᭜RdUt-}mAAOMʦEr5D/A8譃6!p+e&&Qr]0di0&xsQ]г慒4ޞn)v_X mW9RZ^،@N^Z@y΃HʕŮ/oVZ4f{č6&&K'lf.oWB\jW!;2rprs̜X MflXv9(o:4&eoN|W/iS"bb<.r 0iƾuBaLHir`&+Gcާ6AYBKQ"Aq4e|u2R*Rt>K5,o1T5L*ӯ& />Ȑkr;F(#2fFTDXFQ6]L3\ K=X<(Sc9Qg"qg:1m{ÜT#Q'6QUdG! 8"ʑjg1eX K"op#YjC \HLdzV֍8?_?\v̪燇eW1N8Wݘ7=qGzBj<4*iR2Wꮱ~Z͜2IFC_y5IIƕ2r|^dWK/[ݶlηח]Pcdf*'?@}smܐ\u*+ׁI|&鐎 r0MegTEf@zzѽކIǖ=OҁG|,K ]IefޭV˶~5iЃ (I=^ Mʈ=۬e¤7q{nZΛ=vޟ1oRRyNĨZ%4Tm&CTccFћ[=Ǥ8:fw^wB߅;֫ȵ}_f s>(7ufro*3VR< yk-E,y(G#c`i:wג/&~$v^V5n׸A'"%#,ڟkFEG6u^O'vR1* [si櫳f))R]m;%GUuT &~j9!?.%7bȸ:'4Wc<<xTLO0\mdwNG$*~++xBɉ jGMkFo=٣T3Eb/FF *A\YbI;n/Pmzoq}jSE6zlH@>IJ5{ # 23/9 UkhR#G{/ Xb+%<@j]~¦j.<֌' Ia ( ^5|M88?zMsFK ,./2'+E:6 56V_ (QE) ]C3D:޵[pTkl&?N3&~_OG_LBpb8\0 7{<+ Lim A,/n5 `ŏ&V.Brk (kMV Ш#-A?Z?;߷5ײ$]hڃf$EU}p}X"N?@06|BEúq .:k=,S'4ϖ׏);x:0h 'Km^@3Z@@mJ&ei)&<͡bC{EsQ~c=va-+?6bkL?hP%.Iwph'|(X3jXHL̢7R1=~_?V)'.c%EWY.d: }-p1fE]ϝ?tf~LʗFEsbtϕ,~=Y>,}k+QZ6Tκ#xqft뮼u0ytQX-w<@([v 2x0Kw ɐQfY@e|_H>0t2qeGDU"Zaq\kD'7o!Î7]\|ȩ\_@$SXKezE`Tӯ=Fb݁:ʧ.")w ֆ5I0F+I@nIFCc(9~P񷅴&uܙ}[Ҳ z;)_C+UkϘxN=#}; :S7Pw:p.XTbb[2í,Dg$GNAŽFIasAw./qUIX=Bj*Jw͔.@a\}< ȘY1%"fR۩杽BUivJy5N?8^CTJ$.)|nLT*oCn.kS#Z0[+5jq"kzޛ<5x*kplA"H:Zy d:L[:I bfPRW0Ig"FgDvt#PL3JY]U=(ʑ] *BX?zI ^BOT{#"U n(4mǞ#E{:XDԒ!C/djVuI3K*|zm6+o~F >U$m(#"a)# 2 /Xfխv]³_T$epFxůU}?}=aj?8`#4~ɞJ߮h,l5V&jfVsM2|84֘ZB-0 ȗsG(azpA> "'КZ#Okv2JFG '%Ob(voKa =xv/*B^JhcJ+bt `YWxv!IԌ^uބ oY4DukN6O4kW+e7 .8CU5AL%2K9ن 6% f S< ޱݚ)йJF4_ߩU\b*`%s8GXs|5YƼDZ <;+&K^| A~byD - Hv+)z{Lcحt;"!4ya݅ #V܃ KJ8ܖ'JAPϖѕ_ z4N3mBDτlZQ!̩xV,LW-y(QuS&BB)G2PTPoB  CZ?%qєLx@,t|PkEH ޼tLG[A[/=M2 I>#_Ժ+|lÈ&Lƴ"1›,ʲX' ^|WZV)`ə@İQqUa BnoWEuw/ POg !AZfŰHUbAm„HSfِ@o.҉w O]<N V(lK8Ȏ%\"] ghhrRY 축jBſI 'сahV,gArzciZub7xN'Jds1bJsJC[])osNXwߎ?P 2l$ǙDJVjj{ _/Q-=$H.pۗ5 fe2iLH3Lxa2ЈO@9nNHlDr?EߚS+` <V^'7fpG:7iU\DWׅ?nlY;5^7TON63ԪMoS~gTKj%wQ7^%y˹N)#*x&gIقD# .c2}Npca@{?H&\P䍡+7]e5Vzv3E2 lL~F _ΞQCH.D$q]9:x#pZMmG ڪ`.*.u /}u]p- ]sv,4M$D"1A)1vHyӋ'bí=PKPuN"H˃T]+Ň˻۞) u7oxڟv| S GyzO=_7.Bz@虧c}0ʜtNҊN 43Ux3. ~s鴵7 i< #BYG#c:LN\vwZƲ)UVEʳ*>KPض=fpUt:Z*E0|vASƟa"r(,|(>T%AUߺDCsO1M$ᖑ[j"C۟-w׮'&Y&-}ޑSMG?|$\ ԄYi Uk-JF}3 uy"\CӢ?wM b?j2 re1{|,2 >Us XOlp9m{}Č(!:|/ |ukRH"E7 -^qPՇ BkT"P'֝`L1ŸԵv/ H, ҹGs5!, FgOv[0K+?fQ^#ݽ!i}wnIӘPU䎌м2緤HJOK)Ď)!8TTx-N C03gZJ" j('2V2 ʉ^ 7.k@ٰjh©8?L׎I2&Q3ъA< f ^ӊG0@*1Vw Ѫ˹+fy,T+ 1Cz[4{p4^{ٵl,k~.TW`H@xS+ڐN(ER+LGdT ʹg-B 9avzV {os4e\x x+)Ey$)wxںdSZ>(Sg ;n^"BMݚx!.N-?L!+0ּ&-`R6oԸ;A8&dE${0t}|Ae"7 =ٳ *tYؒ+^##2LnR̙b*׹zz07+m=?͟ Isi5bEfMtqXo:*.@R%{gF[#QYG +f&!G7!" b͊Knl58ܸnEk@K \ɽG6)U@Su^FUG+;>Ңg*WC#Ճ6k}IAcՐ)x.v4K:+qJK5*kϔ#j[ni)! =kq\N_>dzEb@0h󰽚‘$.VY='\Zub82PCծ_lk7Y6dvcsim׮.=ug׀:.3J;KoU95˴|ĪEQ AP'z nj/&Yxu"|!\Fۿ|ljbE=psZ\.}xĂ8Fa.,Rڨr[0Av+E43 񢾧ί(.!* k# -evZY䯼 FW2tNTRݵd h4 It}u2b˩PE=R%v&Ğ]yP1NvQ8J>d{u2s[ܔPIթx NY/K`Ds/N xu7z i2XMMP;4Fⁿmhok2mC;ض{zU_WTݳd7?xɅk8 "Ǻ̻5>|:Fx%W`B_=b @c\# b<,6{:Yѥh/>aDѶ|&q& s>EKByJ ~Fѽ 2K"*/M }@ rHsmy7Y|AůMbwZD>Ƹ m}*"ѭTNU$ެ|㝡+Xokg}$T/H\qP>vH&p-.l᤭nE+_y[XB70,SÒ(&,8l#Qd_E̥;^.iW4DGD ۏdB%!!+TLAZ%7.W0i$,U*X8O #Lw|!U 8~zKdCz>P3qMC EpNwpž"XHDƻOti̞uiHdv9`VZ7VQIv_(/sZC@WGѨ)=1GB޻bQ 4%Т$5zA7sRWsdeYhyZ[rٟ>Tʊ ;kY=ÎM'B$..߱ysf0PԤFv86"DH1i\@v?y1rMCgLcn f! b8Jd4!o8Pvdל7fmV=L\R&]pѦ K?QeSG&c 8p #@=F|ˈzrnNAn >3NLnR]pOUhkIDDl$"W\gQy{jSIi]\ek=V9ºݔBĭm(id~^~i"o9dî(@OWN CEgPvM6aB7[6Mu+_R+xq8{b:;>ͣG=n% ~蠻EEB,Fڄ? <%΄|X *!d*ATGϊglq&GR XH u A %>4 Tv&*λA>'M9=j0< B^ZUQI~/P_ؑ818Τ}>wWO%.֐kܸP‘4ssn5Ĝy4`>:g"McHd/|K"KO\HS9[Ђ~rs~ÕZVɛKBmkn܋#-ɠA^ ~8i(LTY6Mpm_܏m NXZT %է'?Y#hg/rRu~AAѷ#YQ3]QHu(,8s``^9nK;޷ 9U;ɤډ֭IO1sd9 ~fLƷgzlr"ydEIz!3ƍ˜at'nF9QќJ Y_vRS^ƣ`Aأ8L/rc'G"t…It6'J|ϘMƫڷ=݃盂77+OMDF ]$8-rśb#Vd;F V~Z|g!].DmjDWi9QT9Jȿ\WY/:>F?aLkY "y mq 4o7w(G-v G&kC@>vvgs&Ƌ# ̱A*YP.^WZm&$5cddI?Jc$un1YսYf=<\l纡ϋ~3t-ď q)O!T=wEN}?x,1 >1C$5[yQ,H{Hvw*Zr9jЂ6 @O,( g #ߛRӄճP!C,beߣNtc$O@ՅcA2iExkEAF#8ճy'q œKm:gI)9cc~Vwpz5kI`{h#NTI.ڣ+@*Ҵ2}H]-/ .Ȝ %Ǟ#ޙc?,oy`Q ^m"*?%ӓՓOg<JJ>2|W!Ͷϯl/—>x0 ~tiW,\J8FQ9]*Ƨ-DO/- û3>p5%܆TXN|ن/3#}]%Jҹ!Vt9!o4[(@>Kmc *dPU>ݼ^:6+k[P nsj<>,_\P'k akCv_sI'yWC4yIh]۱=a < H~^%LceU/a,_% ^kB`gzB$O =Cj-`ZF3z!<\[xP5F(h$+q'{HzS7,(Ւd^ܰEW"'4IEa=ǟPG%4LJ!w/pqZ3D11$.Q fׅy 5Q vKn+L2 蝕1xM!y%^c9D(W߸2'GQ^SiՒ>!{uhS_Y|r XES>.g/qgQMEJL_UX7 ݌8ɋyF޳!D ET\ujIF kMmYVC^E֩%5M(%1=%o8;;µrHfw2K cl}4$ɗ 4 bBE"8.tQ&X뾝縛,x K1훤չ6Ͱ%Y>$*sr'N||T;Jόnj:W;iwY;dJ!,jHt~1 @ ZE 뉢z.ۂj㵡*&9V~M_D(X/GE3y+C;&~#Sb:އO>>\ s? 7aɠK A ,a%b>uȐd~z4EgP3W8rA& < YxAǙZ9ye(|wm BG-MA{yhQ.7rra@>ӂoY{}j:2?e&+dZ~&X]_kZ)ƕ;0_ULuN=O%äkوfaZ.2%&qܶěf%."`,m R4}^h #Ɍ*Ý xQJT8S3Q%-mp$˒Ǿ&$y}<[jbNcf <0W% iUt=qD`nó^w(f v1qYcH{[߆Uj!ŝ$vyDalJFYW0 + mF=ܯҸՂ߇!C{6 T]U4YL vʸpٵ .R8 .\^VLXjfӫ4s0u Q#ZryӁ]LKQ;~+u+>-Zm6RkRkGnHIo ;ݙ7B:xEOYR&::/WFv^ڀiOớ>;-RQIઙEҳPf():DLrHԏ'!m5ҕ$7]9h$m{Ż;E JmYC2õ>zj[ 5Լ*,ߗ [=3rן+!d1DWP#uQA] g4kz|UgRa~w:% C>_<^.$q=ݛrZP;O΃iՓ v.[{> ӻo*ĥ*]_>QT{!x=$?>+&6ޤ|230#d;qo*nigiҴa#  #>]S¸F|9~ӿ©5U 7["XՈPit%"BK4ͨY_Z*lPԄ`Wn?19%)Ckjk6`bOEByV=3_EC/+jr9t=_MF*#.7}&cN㩍A%}:6șjŬ`tGWvǮ(8Kf%)FRGJ)?PUhGqPWۃ{a#^wZo?E<潪)@߸E7g cgly_Q X>< iҙHN!UUM+q;6L 4ו{pp1PRd!g0r?y`9H/?S;9{hcOFdL%?Hg1_dtPT,r% 𭕐CH7q!әsU۠OQyI>O8 MTeU YDL5Q#B:C_|{`RP\XnM,;dQip2IULRoۚ/@W[{« 5HFl=H1WU~þ,[hQ/JkM)iJxe+r?IF~40A|E@ZKs8n'8O8e+XR3ħ+,镴ˏ7ط_/QXu 4 hɨ ɲI{Hs؅@}gl|q&K3DB9,^eғ>b&ӌHWOԛ%jJNG4J̢'* !nƦ>ԙ%-3ܯ+uOn'ѓN6~ߦld4%eKf?-9G] 1 4X-9o+-˅4,|!=UZFdnsN3ɋlr9(ۍ)bL)ς̎[Ҵuhq^pcrSoO[ӦnN.8Q"WwƾTa͚VesfD Z{29SNe:u_UU[&+|HLr#R ̚s1F#2oo_RӓK<^߿F)[ǡ(e)gwu`+:DyR0BaTA][ksS]JY%4*e]#n7KNa {Nר0힋.]WkZToUc*nufo7;H(p>Sʇ̴FMiv84ѳ~M&v9:הy2(AJBGĖ+ZugZpק/BNR_U}{Yl V6ny'ƪ}nE:8^?0DDz "/E;je '%[â_iz49h@XY!MSZ~EY2 Q ƨT\#-EE67(tOAW5ET%8;9[SaGeisn҆邭>jc؀ R~7 FvڵlSTI̚FK 6JmQSBݮY~Wkke(R.7JZ'[«B~"p]cFሾtI ()ȝr>V+9c>9NT3 Vϸ-d^+- QOŞ- X{Zuܒt~@~ـ7!-3N !^hk7e:ׄl. :Jla!8Qr)\^*e^cꦭ]Dѝ2I^!8o'84OVN6ҹq_gqLz(L.h;oXYDDDdgS)\dzA D4QTG>vC-Q_ 6b>F"Zl=g"yHLrNti*xUnJe|-r؉})uk"J}$)WIt!S2!6)px٪tp'Z{94#Rm|ʧ{aP/lxKp @]9jlkvuF>3xDH ['vBe1S.ýS@^3eiQ&z/}_78vB#G0Cෳ :YDs1Ck{lԑqp(V,yՙ5E%Κ? y|NYj[}BJ/mхUb jAm:e&&ڣcY'2Uu2tG _tJ[ŋahvuL# G1_ QI 孷\bởLsVu=T^5 rn/u]&LK[zTR.j!7{ ;LSB: (ed-ɇf@HN͙a5KČi9&tMQ]PTqP4Y\.}qP|Q^Iy41PҮ~1$"ަQ^&h-YTg H8pr&Ja?e{Ll$#gpZd A"ld=GOA (XmBhRJYmНɨ0yb'kҶ-zU-wuY캾FuYi$}eZBVǡ>+m@$X7<אlB=k(9C5p$MًG|%'40vϴғH&_ROo[ ^k$%dM.b?5Vr#0}kZWN=}ThΥܺhiexYWW뵝vHm3LwŴfHF; !!pA~J)BXhs%lw1 qsfuFlTKvT1p:ͮ9 :@ pBh_&ہ Lm]q$\4/gJi5u:a {J]9`m䊚+ 0U6/C3 3 D@pG9!4~p$џ⚑{ۡu*xO{W:QQ^3 #9^K^^"rI :ܳh>ph9g>|@3xo8-MGq+fQ̞ ɇg|pL=FkEWnk?Y#p݊ i xҞU.b4P*Š/iuxN5Ʉ`HF߸{ڌ%"a<ʏ/ ([SR&KX ɥe;yٛ8.AP-XI f~pӘ1 5Ryu:P >4J}j$(GcMڕ~aOe=H5{ ).Xil,;R<_ ZYM bҀuuQF[ᏽ&X5*.I]6iu\ SqLGFO%%`ð\qy '_wBO(RC2Y_$5͑X!* teM`YoyÊp|/]gϡ$("ϯ( "B2TlекmWֵ (+Hv<x՘N:6xV3 m>;9FV ꁒ~!&g d^ۯE%i̚kL|(@CHI4 *CmaaR,|O'&]vSڅ8  'sL,WUlhTnQ+V=oyn:j6:U]i@>4~ڂmR(Tm]vm+BԺ$~N~ ?D ' Ma'sl'c>SRˆ@HL_Ǟ%+^O 9\1F?~TXLdeo8ni1LTщ!o[\nD7yCq79Ҩ5VGwVI wP&PZq.y^TY"_WbդFL\IOKIvzIS?؜%, S2I_Us˰e9կQW߅Sm}>MhH HxS 6^ d/"Y5)ÝY$zwƷ&tqҺTfAmJ̢='h&qQ>|E:ja)[ew9hHN5=]\؉DBvO4 3*O=Jr|e ,1̗2ˠ]k/!8[6q̇pO`[TyXG3 h~stwȔ.cȅ!DI`*B lE%2;묽ZŃ/ۉssTU`xȥ{̳+YVK*v[Ȣ> N՛| RThy!y BsѓV~T<ijkUw@^ʐ4٨*T!&zIٯӾ6g{{[S:pV:z SZ7ҡ&,ͼ)Jhadrk>ۊJ5 >|;J%m0ꧯ Q[9O xEZBtTu2eB܇=Dq=BXEFGjPנFVwKayMlt?T[LbR  >Y1Q')R{[sd.c:zr@w:A0 q<M'he;KNz_q&(FQCʏyb2&`wQo zesy|% }ɴwy{=d n KMs 0 0(*Msݺ0HEN򙒢e훼9)RB1Cfuorg\cS>6uKG>RѲlk\Qf,}>T7h!~b e.H*ٹe#haœeJ-8bIW /_XukQ7s &b&8v1  r5`'yBGTZWgJaږGu@-eQ!5n}Q^3#cͫp u|h!}nreN>}Vszo,3 2 OZL(̲(JSB Ň4)$TZcI|yLy,Jt/&2ˢur9,tm4 ] 벆fy(IxW18'{]'ħPݟ4oT=ݗ}R )2F-_oŭ1WGDJz l7vSع9(ϔ{dc4 - Hᡖt( k(H7uM [ip3ٟK/NOJ% d쑒,Denc@]8~ao;n%>4jH뺝1aWsnkBbQyEeQ[WNIc,8*rL T-;E4Z(~ ﯯȵ_o*+ o~I %gp+֒ ϲͽ۬EԲ@RXF:g>TxKK4h\t=*zqe.sOX9lyf w< VF `ÑReiL(R$'kظ(mWe'`+RR آ8M _;H/ǀjU)HǿF}LdHTYSL[]*>D0KM>fv+c 4hx4XlޒM,>qd\> ޞI\=C@lm+Ytk-d?!}sv:ˊ6X~kPD32v3|+G1&WvAUjQ6|TWNJI+>% R#Ѯ:j ix|3a1C>)̴; YHXHjW 'tܡh;Gh2Fb,=s£Esi4q%S*aR]3;(h*$VsM=(`jv'VYsߤy5H1Iկ[S]k ڲ…w\WI*WG>U^S)CFt[3~#HgBuXp˧/# {ԟ_|,s.Y ֎j!=W`l?U޾XkΘrHn<;0BդRqX`UfQOHCyIh L1.p=,*H>;8 d)"yI$9G䌿8kJ "g8M?[A)->!K 43G;~k>{JL퀒4m_D?M J@t2QHѢVCs܆d'd!"S}G@ ʒ,Or'%-M*+Wѳ[[xu9)Q7@=tĵOA6nSFN'3EԾ ~d<-rJ;qEҪ0jԆή233I3sلcOVĬ&J?!Iwe؛>i@Zb%ې81XeTDHz N%2CVwO;"*Rwd@~}oEށW(!u{@vMճ!49)J1ʐ&\#nƾ*#3ڔJL3EX IL߈ |B"hNWnJ6 2صafKIy1dbjPʧ]IR}Vq,`措sb*CPg=:\}`y*ؐh  3"L3M]*ǙW~JuհAFfΙOj;ڊL/P|^FcRJwe4A,NPpuqq{--ĺ7Cg %@P|lk=.z_q jfz- 6a >=R! 늀jPN!pdIl9A3RA~nHyHW(ew-Yl,,^}*y<'9jzyA U]oUeAv;a=+B,P6I=NEHO+71$T!Rb")J]D))k ͹|SLG#h;VeRBqt8귯@&JY"" &[| F8w9? e<yFEh:nMp'2 B~58Q"R)RT?ԇD.~ddAZ0*<0}8neLv'6=PXW!qq>XgM48YͿtƲIQ#Kr*Fj3v-/én/;F#|@yQgo/vCN_}Kv'kkv_ThKCB [W#Fy4ͷK9VFzGS|ZDFF;e`f7)h+|:"ƑTXjJDRwye(lו43тRwhZ&1Gbs&%9YOQRTo T^TR̊ @Ew*{ͧlSthYPwcQsGiBj87tKǗJɮcD5$Sb|ҡ|"f6z d`:nňRI[)+nbyJP;PN 0ɫߕǔvl󬆻YlG pܚJ R(ήsֿC8Uod#dcςLHKP7sP0S|Zv8z΅1PiN ޞOugH܊/)7f-G|o=CGVZOd~:$'B#"ZB!J!8hR,'Lɱ`쎎LV}zyC=FQAh]),x=D_~XAe-`E. = .B]m]+_-8>0ufDrēdŃIgr!RcFe&zCBa2-f9OC-piMvtS ?H /HkaL=@ഒ,PrƗx\? 4fJ7Xꄽqxc/| |o\,q5Nj7EURCv^I͠?< yP=eF xEI?f _&n,!P$G]02|a3*P(9ehs9B6dIHMjgCƎz_dAP3yG"C xiU(՘UR_Uv})hMܪcG$Sc\q6Z/\>F)Q"y<:2cdf7]K}4S2bzWGضwcewsbt ;YeHfEhǃkxnwK8x{ aoc$<̟Y72|bBt6MS'8v_L}K_ WWذUpfsΌ^ #K @j܀[v -04hE2E0]ҝ w&RvDC?vqHЈxԂm:~'M>bW)ϕ=c#{_1,] /CTFži)آG/XH2=Q*KOF,ewb*aUO煞nnJ}dtdv8MQ2a]Ƹg.{[ֺgD$ i@#Ic7*ODo$oE"nY<)4Og@l)_;LWiOq!,ZpI@Wl<W'U&p GRz=::o/;שFȾ-q@i gt.MRl5K<̎n#uc>"K8tυ,~X(I{OuZJ57 2%'6,+k!k?.D*P`Cr],>\ORGi# pjhG{k/l!˼(q{0f8WQǚmlz?R|.iiucHas1a'~ܸdM]*N6& ]{WOGG[ȁn4d>y(泞3{+E$Rq_l =0\gz1٤JIpK8(MbNb 2̳웿ew ,<fK?484~"3DF ܟ&)z WfO. sw D>~QnZ@:״i>g/+lUT'">#mҀRS6fOr/Ր4ȢH3h~PPUX ETm~>4WhüӱG qy +uWSX%7e&:"jn#F,՘V*S}R­j\XdFlֽʽb~XCu\s&ye{$C%pۤL㾯z|-F#7Eid1>1piby8\k64VBe3k|oT0k!$gvUNu5;\+^^ A9kNR&&Mpe6;j+a1C=]1.3&aJUXo%aU2ZghᘓT; 8%Y]Xeh81WC˭Q 5ɢ2yp*m ֲA ZY^Bv#j/V.&VJ@Ӏ@nhxEs Un1n3WGw0(5d[Ѐv(1L2&1\!`-zRbkPkPh}[ UY[nrpeG="(kI @qeno(+$,‛bj۹e:O L8?e9Acԍ1207v}b>W5>:cWUY$D)Thl٭`n>O4T(-f },Tuv)ɿӻ-?(DRSR6eӂlhIаHh r&ly%mTՆSH\tԷgP `C^[3u)-saxjn]sr]5|QBgE7نPBJ*bLG 8q 4HMB٪b9jmEm_4<LzQ0$MgD^6SpjsStI;^fɳUpEo=E+6tǯTOx!{)]]Rth j(_SW9Qf .h@UEb+46]-U7灇yxG$ +eQpM9ڀk;z;gzk嬺9LxBh@һǬVxdS}>0Js^]|ڎV"+̝!l0<76Rq⸋=loJhWLJ]/'@3++w}.Mx56eҖl$Yb3zA'rer.2vT%|d >_*6Z_lʙ{b̩eGo'TيFiМuN,#1xWa1[:ޱu%>M$ (`EI2}@7?J@12 QY ܵv^v\4Ť"mKw] P!+7 LLЄiwDK<KɜHvA:L^A+_)jV+-y٪9Xhxk#A+A, ào;kUq&UB(r7)/0h=(A ]5 Nbͥi#Gz/Q#ﰉ:nTċVDVߟ1_ġJsiܽ"Jz฿aVA!Vxb׃Q_7B8ϸ~y@_=eGFwo݂[Oguxmf%BhmNt{ T׽^Sl VzvL v)ʼZRߘ7WMIR5D`]%rİsQ\tdWx[MV]%_)ب1,3t6[Q'1y <2 7,W ep,y&CT{̘j6s\i<EhشNŰFScUXc؍g'hAn4H'aZ꺙Q3s.CS]~2eg~[KPv_<0Z|SdE"v 49keA k}v<dz"fF f* DX-~tƆ'!A.:Oa|F!";sPh@׹,݌kTid]GՇʭz*x<,! +k'\y!S|BdѴ*B\{}ţvZH߹:W½[X 0 $x.]|KҌȀ5A`,SG3Gwyʖ#WCRM)Z~ iI3 ossҢ+ƛu# '܈!d_3m [얿rJJb#$| ɸjfE5;|Ģu ީ\"!Q:^sA p.tkWdx[\(/B_m>X7(gq%;I36.Dq!`".@7MnXqP*~23kvfؓcalaQoxm`X0/*dբ'[ߥXcBp`&X#｠/Ycu>R\`ft)SF!),Em>,$cy 4y BDS2wgQN0 bP //P(vy2Y ٛ~g=`h+{=-@=EoZ#)iyg?Nb:4 d ny0wCW(jd|Q6*I4l1mJ\)SIUː_1@x*$H[^kE$MI""=rz!a0Ȑ&- d%۷>챏RF ?qVDl0Yy=񱸜j`ƧkRVg@+hI ֶqd(_ 4$0,3V]7I/M?bh&F8~*xK0HutZ|odC&+G;/7* @`J}XIʎj*c Q 8^%Uyz̩"s8h.>(,xdr I}f}pWCq݊-ʵ;UN/W|^MA@ bZhGb~ɼmh˕6:a ׬پ E xy*ACDхbjT&[N%Sʲ[lV8dZbnr_` " eWȴRvdZ}zL%ZFU[l>g)+$ cEpzѶ)S,'9%gpXWPi2㢦Gt k:caX-nuI(rr6Cs밷_gҋ& _!udWRi IX]'.jqH>NhW4_3=e&HysyG~YWȋq|r3:mEZ}O®PstW$ pFeH ,A\Og9=-ftpcE;B  -1oyەQff;hm©dt1I#X>~[RQʸH{.}.϶:³p)k[`Ӽw?Uxa|^ nKYYi^IhcK>Y%r* l{':RцAޤ<(֓{l<<&~.0?X+1åQR` [i D Hg1"k?wQTdUUؽh1Z" gmL{=B%W*ZD͍|W$\sni^ g_ , 7~h __V^^KnCR&RO)DҒN'xSK.HE3ݞTNN݉L's(p<4i!027볍Vb q;-1s V@?𥝜OdN<'-?AS,'{Y.U*j_f1cҙ(!d$;i.«;5OE^.h‹Q~KlhVZZr2gAcg*C)3AK@qX~)pbDasR9vÔ-b#X ݻ)uTNǽ;v.FF oa\H7w#; N/JY~*:sDߟ[`s/ȗ 5$NM,(iˊ81#{`e,UZOד41jިǏɊp)4S\nC ,װѸ͟C٥_WΈ :s8I3EPsNnȠM _w <6=bdG2tyXk4c&d! |&~[|4~O@^&tt~nbW!C6WNḠTR>?mryf d?R*a[pI4~1rf]A%86бc 1U -lǬ9*ntʍcxlV*E#seUBDuaS?^B c>w"i@bzgF艪76a2;v3$rlv W04xߡk"}bS}7 QɼGH30'u ;zWTT Gױ!/AIͦcLCwl.M)͍~e6 chI_SϮ,݂uh[=BX\5J^I]=]I/Jd3dxZ?D4J2](nZezr2sf+g堩RDYEr&wW>Qgx BN+9dPd;n=2^5>8Ll:k TaVma`ژF2x{M'Q:·^C 6H%)/T2!jC:|CR #:MiװN9vfʍ'~_F^)*2O17M:䚦Vov,n\VRcEr{ǩ/N1O"c 9r۶Bf'0q8 "]9>삕N^ v?5/)hP^'Tb0>pG,^!;;3EC: S16R]3ȇi02y-̢BGmbN/D"Ox.퐌⚌YLqg V5DYd/cp];Ⱦձդt,Vd57wabsu6 |w|iq kcOv^&V@kn}{ҽgH:JT]Md?9`^o4a?P:HgpNGzl*͗OO"$T2k!g1[`qꅸd*otM%ssJf1\?LWn<ܨ=Nnr:8.sh1`il_)E|rmN#}E/__o fO 4I9w$${w@~v1R( Ep%_rQ|iIZoIљv1۱]Y#ZAlo!8b\냨 |-!Ƈ|7Jtg⊗rw-<%e?]5Z`}Sk٫ғ/@`eBY%roe1`,fyyX%ֈi<){-bCBRWcsnHV@/O*vg-+w.>_El #ɘ*Y.[hr-a}'~Wvܡchvr()t1}ffz ߶}KeR:_#'8O7E5j &^4hV'1y}tXN>X{πaOÌw ǕY,[J*uˆ+Q ,sW؊ 1X##˚3Op>lz_>yrٞ!۳,pgq&wѱO6-# W^|eݝ2[7St5YG-U$t QZK̎xC"Nʒ)s1 foʨGW?WeIvofTlLXWGq'}4*P]._fY[+Wp ؛SDb~Hm\&>K4ɞ|5v70"E7LP3;Hoo.+.iWܔ9S5S'3}MMYר+?ѝZoJ*nfbX[u^!EW?(:̨D{U+[;5}LeM)t Pϸwdr8&2 x>YJ7YǑYZ)r,PQk=@` ͜-fE%"Hӽ,[ VNXKT~>Ot6akxO_-'Mb|ʎ>U܁i.r82lt^/ItWzEDֆEIN'e/vPr+)3l9EbZed~ ɵѮbdkq- `6J;}I1wT[X$Aƴ^uݖs4v *Cp L'I!QSiN% F QL8k.eznEZ5x6:$@ J]}*i5KETx0ݘy<f/ܶ:+V)GJTG*o&}^jKp ,VMz0V FQc8:cq ˷zf-0yK5e;k$9Ĺaqv_ʏpuL54\x?Kv6u-smҙY%[ MKX:hrAMID>7767%oXmyE?OsJOϘrf-WLFFϨ8We$1f'XikH{Vු:[:~0 3_"ltZ_˚]W>I,d@ Ǻ⵭J>5  PT*W+jD4;!FKҎFW.t^aA5ɣlWd!:Gu`Ϝ`?ڏ٣  "cn.%fHm2 <`O3Y,Dna?^9 ĥJ]:I. PKg3UX`p(4xD|sd[XtR0a 욣&!wS!ѫMH|ޏ!QgW Q;(g+"+gE&mtGUc3gov;Kq T _;- "f(*&e@-Q(O^}x֦k\r2LpA:=8_ي)PaȲ'-.J%A@q~G 5=R;)'͜sEzPS -;FA{,qF%!'q'AT_)[SMts.x20FM\M,\jy#dZ!RY3Q'1GݵBy 쉒5CX 쿟u 腧-mn;$'F>#ÅaG6zuX^Z HTϕp4$Yαh@!3cJ["WB`""mC{< ;ډ^/*# {N`pϼiFL(ǹhBXi#YirT䊌=}DFZ{%xK \K}rcaunN:AkhuYmY&wW1-17RAZ  tl q忣_/Lypl ۑQu%q}JC@Ǫخ>-Pc(izFkНãa7%Yֱ@2.=M>t<YTk?*@(|+ǚ4`+.B\*X!3bIŞթ01MEd6AoyY';@7ˮǛ RȪLK0M|ЋKBf(γ* .{\V bW!IiDVoQF-tU(JN(vzHF HeP@|鈯[%JY]@Q险!_%Bb=5WrCy(څUϘᑆ;Ҁ=D=Zs)JWzhE}T6Ӓ\A)RviF0 'q_AcdN#K6-{>2Rl?nGm_[b(Wm%Ϗw|Py2[y>lxJ,{<:r/C"T.nN]9:$aVMqEq=&2ſ4ȸ4I õ9oW+4ԉaݙJVVGw=fm)HB~Rk: 롘x%}}oy}%߄4Hp4lz=tw'vhQG"a e86a`Kn3dlz'vn3r)VRLwnҕ0 gCi-5a]qZ)Li~4Nn}*}Db-ɳU WCk+*ALi˱.. a=^&)}܇)iӯ16Dwֆ{kr_ e2shӮY(gr8^Ě͍6=L>PM!ƚvkQy4zl_t0q{$S+ SVd @E_0O l~F&t[Yl:ـ#; o';KkmA'\"\h," yX5/Sq˴$ 5cSK$wlZ^I_;t|c*!N Q9NF\ 2Jmo fݷ^ӎKhSA-UKkK"K #9H߻ u״f8d݄װ꽙թ-o9tc(*+a"S*`O\TFT6SʨFs x'8ƳPo`RO];#׬*9G*k= k) fUG❓ZMo 5~'M+9rm rI?sw<1.0B )vDK8!kx){w!g֛:yfF-"~5zn^\ CX`C|PNOڄv=J噜Iyz`M)Fͼ-h뻢"Ϭ 0ȹ$j̍uXZ4< P8 # HiuYW˜-9q )8z6yYѢ *}^I-%'R)~=ՕV9m |R0&Y' 㖅AkHg@4D5[h1E!ިrE7f dö+eii~+%$\>輲%:sl hp M'`ELn*߳?}G jѓ7D{zzAf(q8w!DzV'݁6s;iDp? ?(]kGhTkH\ ˍ:#ǥEn[pO7Vu pJM~-SkD+Fe^xQyxϭ_ϜO@lX\~ BΗα{˪']$r4Շӳ3hm:beV*JxoRFF9MAX܌eȑ7JY3%hemY3?|hJg,Brhy;5O'o?1̗ /xRru$|l6yqryI;WWV45 P4z{߁$ &Gk=^敝&SP_2ȥK8v 9'_P!n9w8 0Oo?*f~̭b*5+ǖ@BjH1Bw[BO SmYbؑLM]>qş\fgx";P*i+8xدyrV& sS?+o>wyC3\ג~oE,OP/)K*"(2Uu<)pO6w[?xphm87{AlJ 2DȫJ5U50^-GKGZ6D^ wMN~W2.ZٽP6<9X{;{t={PlknhvvUx2+);lbpYyh»`L2⏂H[߄ un!@D;{lU5DSVyaDuʔWrVW4'깓C?5ul أ`#u.`FS8})gJcR(BgU n:`Q-޼O&F+rU6<݃Œz6L_jL#.?=k\vu+mL?Dtx/ic~ +m{] &uw7 _I?.wvP,Ճ#H5o3/pÝR8b}ժVUg%IΤs2aoQOA@FVw6*U3>pcmZS婟OҖXSǧeQfXJU_ͳsN6m}_^cP|Bfe< Y[;Υݽ ę^d2F'Y`յgկsݯt/sLwydv)x#]%y .Ŏ,9  0d_1"^G7EwsE7Scyʶ:܅.CC\ИTif%)E"=e'e)F=}U$q7 ('0=k%iژe\.WpcȎjLev_j)jJ 7YQAU{̶j^Fa{O:JRJ9N.--☫l Ӕ] ^VVWT89n4ȼCeh{5lޝ`CGda(2p[IsOw g!ѪmU5`j23vk'V@g@m8mk|iO#K 40䲵U'вCj23p ߾zbpb@rk*yHrD'lG a !3b"}z$o$֫UGíh.\o bB lC ; \ FFh/Ngo,P•?UB9RNϿ&W|H)Bgq%n"{6'O8iWG}\řz#m&Q➶JNԔv&sh0~qwԚ)m,< ʥ合}lKOYÕ7 lu.M E77,Wz,[3+nb;Q} /u7x/ HNJh .SQ-^~*5rj"U"o>`p@C)q0]ASb;$N8ﲖ3CnN>DQ q>•/=QD("nj3|մr#Wa#㙍=2NJFYy: Lƥْ3?5+ DPȠ箞,fN5hMNЀ׷JS } n:9'mz#q*t%f4ә*B<턋s>B 5:@ǕS{gx"BP/6#<[ 35P Q50.Q+JVf3VѮ|AaFM /⍛# g^mUWB݈s8_TBݞSz#Ak1Iwa">o \2z_+B *0#y8 zraC3 03ҐeܽRk qu #&Ԫ0ŁŊo?(O.vbKȹ@+S:8gfvt<]E1o'(Kc ;\Oq.K0`MAכ*aF7c~@!N͇`:XP x_T:i"zÂC4s:H8.{rBJ Eà+אȋR!H|1"xuʪEY#܉͒# +JXSɏ);0d@7 3-wgS-fñdL+O:;%cFr !DˮX Xbv^ d ,W]ͮ˺C;$zWy)ٱmZ;W)\^'! '*ᖤF {M用yt)#L (`_Q_.h(ʵ% r$(5KEܙw޻ uo8 4x#t3:x.uL[ygj E{:'@6zrۘa"WD[j)!c;Q7d\3h+/Zi~f_fA.vvg{³ŻdG(B~~ygZ]u'yH+D*]70i.ͱRؠA6dSm}c@ aX^[Ȣ޺Y\#U Bк#]HͶ>w }e+Cl7g<8'prP,w9| EWBHh s mQݡ OpmF ;٬}4, .]czkW H{yUO'k[P w(ĹK:SepR&4p2p_QRv]ZVKw}J-Z"nZoƪ9A]O0k>J݆7ϙSQ[¸> L*x& P<[^}\d`  Љh&H "TfA D!5yUP?$Dί[̊u$^R1爉4-_{N^%H6q̵B. ܮ&K?̧eԃzgz֤> 9{ݼGMgFKS Z@)Yx4,O&O;\[LN5g/A8<ͮ'J%iG#kȍ|4*-DJ+YX;Hɽ CUQ M{}L$g ve {ʛIY׈0=H9qܘs&=쭏̶ӁNe?WG^x&s-WadM&e, JeoQ ~jƻ~숢 !񈦫?-+7 YIn0uvVշLl-e=`%F`@KP뿂VV2+0)5y 5&lfrdC$#% $e(}dFhj5D^] ˛qcb|`qbz5ȮS.}4r~`bm^AV` 86t.?hi=1 6ٸZ4ݱlR@ցK*? a:Q@M=޸ӏ!ۨl\T#$҈,ftr*] TxȣN=DBGꥤkfIm1VF<3\@⚭4Y2ZVYSxNx"v$+hePlVf|ql/1Yvn+VNzv?QVGdS3=7LtX%:FkCueEoBK}B8qȚCEᛡ1VԤ*|~[K7~0co?DW,.@:_"xO{Uox}نxY:VʜN)5(ƜĢ31/>>ZӖA,dMT"L) j!&B=˞+WC+a 4kبb|M`GIa!U{&{D agpƞ UkoW(? 6U7˺'Aj⥰Ue'D3~ˆ0#/p0_^ܚa7'ZMEm|2ʿ--qT7y;4arl{Y;gv쪟~B2kNlMV_d""цG3^4 Qh{Ut✒1`؟'O6ŗ4$E'Rk%tat DH$LkakǺY"8'u0Am>#H4-CgvӿXKي߳r'Y^N@n,XZ76G/IW9j >//X+&YK"0AmǛqFwsn hc+rOtɯFgmAsg8Nec;CU{0 dͿ{6QSKʜzļ{?e9֓D=&)\8{T{҂~!, j$gDm-%El=L7zK@nu{Зr)SȒ1s9^]f(fJXl0дTzP>5- d*BȽ yLJǰ4[VěHo #kJ-QqSU0*~rbںEن4=%k~]dyc/2)&>M'k_3d׆O%|l#'|G/,LQ" O!162&zN@Zٶ|qE/s$\r4RS W#Uhbo{K1Oj&>siLǧVSoʌ`t+觕y.ccAK'ea6$DOdFa_SSk4<D ֘rZAԿrYYj K;=>O>[Wxe5`tX0"PG> ]إSJeTm mf.+%k5[k^׀1ލ w{SlDJ1#^|+>,"po=C>Bsay͘]r9k3G} MGxFpki>]Zy07g3P*7%_zkL?;[эXF) f̄ZSQzD2fLpʯgnGW45D{ܦz{PRyƳal1<'DvBF5 ;` Ub4t~Ì]_>g, $A c++=tN112FtA^կB@D#ÎEA̡8y~Ӓ==m7wX39Hwk>tb2I%SM]L3Z/2 Zϩm@a}h|-r.9PWI&J'uֵEۙAT].b䦢,=Z(vPGC'Jݩf߷~zg(GÖou ٘1H[3sT'H,+֟Ҿ$D Tl.!a;Mۚ/mkrDav׃y;eg-ZzVa$9CX uKVɖ|^M虾Zŀ*l-_(TB܀rk7uNv2h Fν}5)5c!wtXM[6*EH >w7[`iݜ6YDd;r+fq&L43CS>%Xb Oi?};3UBYqY,Y[Bm60l_Z4}5Fd R|xia6o+Ɯ5ڵVJ*]ybFZ uw6]UM;eΩm۰b0xgHiK[Y.e;4Wa[,ƌ0_%Cߏ ctZv_&V@tߖTr~k)uݪ}3PLž"i{r #FM\ɩ 響"6 ri$.wL0oQXCzo(~y>@(RC>;_8F>8vT`p<5s5MǢO *A_ r}H5ly R`me~h˱%u w0>\1 } $ͷZ:[yd0oDɋ?x״'R(qN8O< oR9FaK 1#91S]r@M,́2PN*ok/,)Str NvVmGBb?n⑕WKeR}G4>v/)c(VQT^x0e|怀(j_}.Nuւ$T' !iG%sGAR~FDkGhy礷NBqyJ򒑓;r5~S%G %n7kii{<Ŏ~"8bY@^m[f[-MD4h8cT|X#5K<)SQ-T:Z_UOyH*nDO})Lw"7߈H&&bkEG[f@0u]OW*۔噖#|zs5=o>Rgs[ߵe-V+kTUt6?ہ'G0(K֙e-KbCpۖDH鹠n< -`Mba!!FDlzZm*I')}Xnh%'Iu&)({jΒܽ,_ : fJ"q⤶'?|wnAn[5zC~8PwԀ^|2/d M~Z1K3>]#L+;H.籧Lv nkqv#_;V47G?ԩmQ*/~6+0o+ p૘!|lCe6InDR>1!S=)kQp/L,UZ$2M.bKܼ+ly%P(T./!_H~HrN8P3l'H&5ZgZ4Cw5Ą ӁdSRƉen./dܮ@ ψLWůZ ̑&Pg7?UֳYzÊqpU˳n>iU\\?MOB&jӝK)ξ+a G]E"5qml yCt-R]L6[ECD%$DIi1&D>+i$ GY7'7ϥz5Bvɒ$;/p|qrc>,6bp7SV>ko2\rB sA3 :GnpKx}y+6蟓 v٘DHP]uIV7 J2P77 ɔ?M/ЕU.ZtQ yhlX3r NKAGy3 a2z#Xܿ.ۉXKg&BE`?bO:E냢}CM/k#7[_uPvP&y(FG @?U ojp-7EK#Q'|\(Zw޿ 082d5y6iЦǸ$X> yDP9"#clj:WU.Q|WQU<ln<[$t+2P\\Hu9_ $#ޓ,>?=lK-өEK4Bh"Or W>$7^Nd+z Gr%<5)2R,[1\n]@%gݐM`' F= =.S{;YrsO3m"b-qc'Tyw">'b=BSݰGg##3ՎN^G р*z!)QU5Ks-m!67$_AF¼X%Oq7u`s)˦wMp\G\_z O={Oڢ3+!Ec Y8+;K(=5%BS'Dx 䃌䙌ZDg0xĨGftJt}m~1s `<Q&"RaFe[K&YMי:\ z +ڃ@19L)b+kyvGQ/Ry~eا]wF2UbtC2۠Ng_MLꙤOiiD7po,B !xxH8x֐٩`S&EWZQROi Q&Ji. #тnn1O@eÈ _ /_ݹjs*;}F(\LDj.Q?r&VfO/%&Ҏ* T^!b6T0'K-p9;enу(8@c1GL' VR|+f`tc UN>a_cg) =REU 8 2]z{ٵ4s/GD0W`|Mqe6bogv1?'X$LnVM61֠-uF:XE亷eOp]dtKmUqxa_5 vtI6cnO*+mtRtiJbזSip%M%HkDWn}ٟSy.dS"hȉAS2J }.:Mz֑ʼAl.hEE~:A_r` I)*F 9뀍5jyIbo_t=OSԤ~ k4tOn1Eu[lD()d ps82<k_== 0䕝k^JLlRp-p mYr,fnby31b#7*B13]7ȯաa9ߞ,_&{Y>rQ_4ZBΉ:n[W@}DqGDkEbnV(I{[  ӑ? eQw{ Y2c+K+ca*"B_76&#}5T4X_04f<+zxElY24_nd7,bܵ8QX?  ^Cl@#ay6Պ:.y^AG]^ajo\5-ϓL~tBDozT]{"k5#}|J 3}+r##FϬ `\}TH8kLz{5Уb]$pX =eHiŶQÕV-LD 1N51u'==aPOp'fhoNf s=b#vM#84yj,F&0yC' >]Kk{`=x^['JP.ևPyBGi~R_ҖSlU5 ab %Hߵt u^xjV6dȤ rkS]drz0npR!bS i,֫؍²Z/4tnIT).ۤٮ ]jpe:/ݜv z1; /ћRu=g7}2-3\)`yyIrCM I+RU2If/л f cHt0 fcҡ4N*oF tCOl DܝˬI)XkHډ)I٠Ѓ&e|)Oëűc|?\5:*ݞ|jNYZ=h;1L:@@F2aLk5#(>iRzWpw,X{G3B=xbNEނ3ߢ3biV7x;X&@=4rN blN3klVrzI#a1H#X2_a>j[(ڰ$]dBȖc\Rr~ K i"WQZ6zUH9m]1n"g\NuC갔]+ʽt)qxh#XЉ6A)-uscN3WwG@plLT}"!P}.[B]WTFUJHa^ԷT+Ƃ4FNw4lc.[&%MOF n~hO9ZC Y@xFJ_vqm,U/;㑉14`w_M^l4~?t-wr[V/](Eqe=.s%}Ϟۏe{XrĕHMqx&O۳qoHB(8pi'Ԥer./uPJ Tm㡙#ګ7B5DES#fuXIިNZ{շ L4Sf(2q-K[!_ν9N.YC|ETf[]{^]- 1M{i(fCqV2i?-@6\B z/%&R)WINrHfӵ#a[4-h)jɇqȬBy'.`؃̂{B۵G ZQQ&MS}#c26_cr rCЅ%Tt[8 "WF]xG׾M@,l} M %SpxBXFp L}Zݎ//Nh V0 -Sd1Rxoeėߩ17MrsvT).ES\ 6-؇s \?*(/Ij4;sfb Y|.I9\(rF%^2; 䱊CÑCaVY1P6 C¯pk ʆni1#V<ޚqJ\sL̿C_&6 9g/Ci=~\ۜUCDsCxҲ]cι`1I~/ bZu(ti/,[oBs&hj؁ҥ]_)R`V~ZW}-t*EV vJsia&;ĩ(L5/Qʿm¾Rn |4lu sLj%@Tڹ;ܼ +IcLa:^y zy:)Px-4S76UX}̌a:be X}ӿe55\%hӶ4)!zLh"x.q(RzmH=%4 Hn χDBQM"~ м3X8)¤liD0r"4֣ZU{3NNC?cƦQc=Һ:o9P8&F[O.Ekb7$|AO \Jdp 5[9㣺?8ar<oKňC}(;nO 1F/A5J;ZΒ/ʐ/:T)˕s1%\;zWsjbZ]yaw}JF { saZ:((f)yKZr8CJ71 V,r;LrÖl﷢)|9B=OYjmF$ eF*W2LM#B*S'Q?z"ֿ-= R$'תUS)B/v*Xi#EZ qt$9mz' sBt5%Ӗ5ٸVPӭ-:5H\)$?WGG>j Z# -Sw(ڗ GO :#l(op/Ta|srX lijO̮@C rcV"[tQ"٥P\| 01"Q]7HYl6W%8X;^.Nu *p2;tߝkv'PTBĎK{/R+vez.1#j(֗x \e͗=̷ )j <}-{VD0 TU Bv=?S_lὢƏSP VaЇ޼e?8c20Ν5 @-YKh.FThǡ#mNȯ]ŇSS%1XQpN- HȲ28><,{-8fWf:igpevQUOc `Aw`㠊/!9m ITu|F$@0Wr4~ܠ`Q$w=pIVف @Ic"megu:.BҤKL:Z TL\gŗnihO>jѣj y?{n*U 1Ɲ'ܾ͖P8/ J+s*SCsW6($7EMcFJ58z춟Pjd~&[Fk}Q͔}x$*ۜV?_P_$ݡ]}LG2 ՖԘN0H&1]4;Y~ )kN N =]wj'yEidyWKÆ\aZ?n .M0K R RLJ ع&ËAZ2ШcJX譟&#I }KSvҪAIZJ'2- iC!g0rN%Tڹ megGd;h.1Wڷ)7hy!/!P7]5~sR~4g(ٔ"EW`"՞}׸I~wF'>D-Pk8A])d .̈́;s3C:Y%?{+ <@g{9(|j4vъ WT{뾘S\^p$C -Qq)/.{w,K-3Y0ƃDqˍЮ5vnpN{&u%6pbˀ;7MR£{юΐS-ƻ6( bd\*kM2]CTQ)q4(#5qI,DK"Xmw!bwLIq#-[[L OGG|4/ 3茥EelȜ(U扞# `>#d?2<\Th*+z$&O)c)wY,gY 'ټ&GYOHV3q$Ĩjp)s zƬ$hph3΁?* |9v5#tٳKցY8H"Ja`%wBin✘}ch0bJ+֡ e}Dh<0![$hEAwґ,c80 :M l7[yu`_!-8bȉ\?Dn?cPolN:x8_|ݡ,6y辱gMwFٱ{2d#dҙch^`ZHKqTL3wT7]Un78$q:`Cя1u"AX'룴o7"M϶ն5T&|յjj ~w63C=au.6Ŋ߹ ! ?YZ )^iy᲼|p.VmY;YَR'Qն:K$#_\17W,xq%Kjl hY>;"ߖ޲_4#+BZ,%%w@=ÌYȵ. ud6kxr*hE$w'2hgCX64EyG( TTQaJCFE^MWj}i;žp9D1f<4J4Yo&M$il:bLFTqv/1v^OWF¼҄FSF}C>6,RugCQm*h&(>ipl],"41-w#2b3R<.cXzƥGf(4]3zYij[y~t *\z$K߀^ /R!iL2O"j6U5M3W)"_+g3ߪܴU`8wѱCu|IObA=s!sT[?CH=(K=GM#z%:7H=hPileĔ`j:KI o-5S0(SƦR\ncKk6\,dcTBEQ:**8>jQ ? ZzMY&ujgLtJrחwRTjl"f,Uך~ľ*Gi19tɃ2~]1^tKr _)X$B-Cy>,D)7 H'&OAXPst '&J*7J!rtԂ |L怵fch\>J;J*䔎qlO=K$"}EkCz+cr7 !f9WHOCn7z>!zo\`=Y =*[1_PXтդS}h^ޜwVy`ud;Le_3'; b~e։ ֶ?4Sk|GH4 Rdkx _ƧV3+u:ql%pyb!EN"+ P>`od (ءcwJncir8.-{"Cg < 8 ԳQMvx<>ZmpPR!fIx`}Q2|d[Wʧ@;5_=GU&kN}hK!jʒ }îg~vsJU\.IWnw=.QN4$?})G\`<ʶ4a;>Q"ᯊLktۆa 2 ~m""ElmkN []. {,kzK W^ ̜ۣտ}NQW2b0IPƼb*{^w0-UfR*rZxC E_wV #f.oc e6:4+QzBIEBpy s-3w֊}:w:hX<FRq#=.o+%R(ayOR]RR S Y Zg-}9X+Nan#ii /uGX^;}-۴^!<`Ngb" FcْĹOɥw@ؾ].lGeW`t1ʹMmHwAL:L$jQj4cq[Qp~x[^iEU |چʎԨMU^=F|l>t`,#{>5n"wT_v[1ܝަ.R-ɟ[ʓ!ZuuFZH=g揫g"])Hj2 um Q"S$/z$|-wWq!uIdF ^L->:*I~3.H]m5uAf0Xn=>TrhN4V~/SDGT{ zjyB~cZm <;e9fc'~}KF2h 휒U7 9=K1W\[('!^NTj/f9s],bjȎ-拶":{ʃ|JNq?S灻W./gnM~rk7l)o؃ >VCǎ۰aUYCJU#-ܾU_&C;1kxGB@6moLW >>.^JܠD +cMŇvTITῌw.n]]#xRGd P4t<)VO>Yp27(qJ=O4sdnE)Z0 ㏼XuP&3>/%4cK=p4KqR{k R@3)LwtWX@41̃ϿU ji \kAG2Xe/vHyإMoq{3 ẓ(u5 5M% 0fRBY;楨ϑ~RXD(3;a4Яt(zq,s7x̎OR-TBFS3¨HS-O=;BE/ (]_FsK6vY}ށ!T %cT$ɤs=[ptu)TLٯS TxeXP_M2@WiN*M\o_Q>IrTU])a'ܾ:ɷ?Qx6jY!@4 ]$MRQWc+Po/IPgǪB Y*Q31aAAKro' džO 4:&G_*ELK,JP61EKv8W sRxƔP37l`JFeýF/7u&4œg;ϻX?Q (6>O%L"܅uWFiLˡ|V4NJݴxx_g:ۈf iEu@A]jNN}Gt|'~+.ztQp>VuР$5= |gZW 4}QrO8 Z䓶ND?3جiQJ9L;yS 9#}ppL,W!ԍ7X3zd T7 [qocW*H(G<Mp,τQ cfx QJ2Lbp P'{o5|mivuy#qe` nV,@o?Y;5v-RrrH]Rf:|tp94j5*d9Nl+X~@ϸ.\ 2"&_b@Rخݷt"it2>RÕ+3B`aI;_?X!4*\A7O_qqt{A##*^8ɰ w&mf:è1rdSB+gHAֱjBk[ۥ=>@1U%T1F{KԿ{fb>e86~3+4;[j ''~LyyULNHF2F)c)N܆{;gJ qU^ ͨ͏{V2Amܱ'DF\YP͙B;7{=//O6{7 K2Y"ԥ$w,,_*+aٸ>:~)K"x!jf0O7$k&=tLAl98ng}<)ә,>7<8yuT;3 LSo_xxUA6f$(ͼ7/N"h3M汷;u.z ?^%@?xFk`J8Cӆ³篴 ' 2~Ń+[JK9O.D?'{U璾!$wv)[%'!Y4k6[1Xc~O Ԙ߇vN畼?5[c̺NUuǟ 3\i^#Ek|ݢJzL204ǘMqBy&n%RFvO0XqxܚU˝V}:A ttH*o%{\6 t{9(FZq3nW1{ ߷ЈKe|&xTh{E= I ^¢fz$`#֎%=#T_NWPwq4+BI-,a? ])*^'onn摼"f%Bj;U|gH\niOe3qAXUP>sO"ۓLRq)D~w fLȤy˕ŊbejSRE9[~1%r@SɌ^[.)">~iK$tYmkGXp-EM ;^|}WcvufzŒ%p<ݎLi!"/ӏOQbȟ=M2aA` ޅ5q؁%ϣUGcƉw=7vՠ'sT׉nua \vGVtݒ7!>#ɕ!LS\L /`ܙ+X[@쉗LZf֠ݎU(^ "%$1Mo鯜eOTK;'1MODy#;;g5e4=2 ~VĶ\ ۺ{Ң҄ tӺV3! ~,Y|Cm=P†2E;~&qZmc%&i,ɾ%dBQLj݃S!$=)oVl*C3G"pVv"fL%t,T+a㸎BEs;;p"knj +o<\{"WKc?}d nQjhzSSy\^;dΛ#5_QRjOGNT4,~?A5k91"z <:#]9<)Dd)̮}A xI>[]25z %] QL.V)"7!r7yXskkۡz yk,s z2B-A&<2pA⟯I o#Xg!D9{MPؕ0ߙ0f4]׎vw| ;]R׏n*<;9Xr;>ιJ.],LЃ! (I^IXNO^Ny>Tm3e`uU}x?ů=x )hYwh|weKmgB;Z_X0ShQ+6ؐ3[at!n|}PtSŋ[#)M,PI ZL'j?-buca-; w{JO6@T3|OA+Kh8ZٌSgiN i- }֎{uiJ\2r"?E&G7u#y&QI35qN=H|.G#' \FRs6;\X?@VIiZʺ V.f=r絫Ђgqdh?Ə{b:< ?RSzGP}׮HϚ3W)VVs W1JN_zeQKL/B܊%n@ps5#λQ,?ux :RNÍ@i+s#yU:Ćz="KMcti%EdJBJ;V m!DYc9nj; +5o1= ,͈ʃ'Zع$ 읧 -wk5 ~E㕏!77TI_xip{gꂦ|~ڰL"g9)i@eò_Ӳ W˙xJMr(J-l"8#xbY:RD56x$븓44X&fʙd# 񲣜HCJ|$W k~fʻF:tD q4//ĜZx ּ ,PݱpѳMa@`^ *xEDGi.D=pMI+ϧ"Cqw)ٲm\ۈ+tQ$:wVPl,eUFZc0g@OΊV3BMN͞d^g^ cc9!,lI  8U 8"t7{2h{9ej2`?Z @p0H*H}KASd - %%d&~O&R UߨY6>ɗmbW~F~F DC<4Pn뀙gs-j?|ξ! l)ė>"2PՂpa-j)SJk Wq[c6'mep]X ]Dw1oL֖ˣ8D4v^}8#z@e^+T]yI1:@&Aʵ;ji V^^JC%C Xf^`F-6i fXjsjŴ4^frr)-5+Cw.ˢKBi:WJhkD]DI٤Δy2D B{g=k/ϒIclQlV㯰_>B=̘?)0P|[Y2&c=V5:Ck9mjb+Š.Өj{5ΘfJqa5M$ʂ؋Dg/yݬX$I-(2.f(gQWfRӔ&yl- OX׀NΨk5=gs)h{zDŽ_k4Go[Pl'+$5.uK?"xY(Y|Ɖ&/*>Yܺ%\%U:76|{Z3B ؏oc6W 'rKk^FiSV!?<.8$r9":`PvIgl-$n7/[kuOߒZ^,vdwH(𚫧њ7O=]J߂ ~uفѻ^Kgz&^^?m~=Z3qx0 pҧH\ :$gûНN.\mwؑtIOULUEiMJ ٱc`~8aҜG; \no><7% u6Mܿ1?"nW@gPX5@r&²{^QWq4hRC'K8/^JT:cWG;Oute][+VÏto2D9O6;}2 sbmzz S,wɇ>$e3 Njq_c1m zZABWHvI:NoڭH]=8ppirb[lܗg{j&u#nNhG[%ɑ!XͬkjILGUY`nОZdleUAQ;}r55B4X.AyKaio(yd ->blFy`_e\Ab BWZ"qYUyysep?iHD=m5މBB/ 77Ͷ!7 % :ڧ/omn8G9E~4M-7S1KgYbQ|Ϟd jˎph{/|ypj|o%~D$Ph3G3t՚(?N*]\`R}['(TwjIAuD>+HsnjzȕzK*+]L0p ́ɳ HfAӶQ(nf-.cV FL τF,c:-S(BAeC&3xr[ϔ]kxh?H- $LoS!"< .uQӽb&gMn[oE.:||ٴ`l+8j\%X*>p%rjvDm>Ajr5 g~u =c==iai<a(JAqe3­#ceSl`7} B ^ ˹XMʎBqd=r@KR΍R/:H2͔ijB/CeoppgRB5)'Hcv.v}OA|nxGQiD|p7>cq""xFp@sZN 4Rl35ńڛame} UL;q:K~% CH$P(<"-q^;َƀmK1rm6oXodܵ>V!L0_YGظr,\go\'63}Ȭ/jvX\j/ޒ]Dmۢ7H0цx >Lߧ_? UzA~g dNs˄'59:Aq}|Ui\bDo&4h>ow#̏=Do,Z"' |aOLg'5S?0,ʴ熃.MP"xSU!\ xxeudk'{XV+AȲg~U3YȠ'r 59ΰvMym>C`b.)Вvg%i[a Hkz)%2p36,E޷Nh=kM`iֽI7{8ʿ+MDm;W \wZQdo{Y\,[q[kG. $zԀ[ڬd*ϸ 8R% VRc %[$ÑuXSfR㙢F{Nϋ[ lS_5]NJL#nT(t +k[H6t!tɦ>{tFvT4b _ʟi90z"Da.PlTK oyαThD߾8Nnn܀|//z{RsذqQM" J+T{ޞ}/ZY? H8vy0+ҁ7!MTj쳠3*?o^pT4gRfv0:\& 1[E㖾HP&.7_JDa#*q{zX.n+O Y2'npə P}YA#b wUYfZGi[y{ > mRwGP! L4Y@d]Gz5ڢh1GK;>[!*n^|8fz[A,-JiɞλCQ۝ ROv徒 Zͽù1Fh, 8.~$y#Is⹭BU0}gnQ[(pجB:R+w $*,NSUv$"/ia9_ƥۛZNI'>yc{ϛT$Tpٯs1pa h.c0ҷ8DƏm_xBG=eu"~>:~~3Dù1ֺkXkSВw,ßefOSmW9p26sY85zSKVq"ͦľ:9+~* &rX0%u kQR yvVSC&M*UKYZ`:{ 2y#xo㮨@QGTЏr<źw fU?|I'Y!p'RMt7qőHS/KZH$dԶTv;6 ،'  H|N E@EϐĮx9oy-(Eۂh$Yl˸.syM5`` d=9AS.;w;`/X;g  0i*n%M@2ozd؏n~86=+AhpjoB=vvnȯ^lȓEoG9qr'M1* jߋ@ޱpm{+*-*n8k Y%F\}Ɲ`<5)ٱݟeW_ H$z͐N#T6 /Px%;V%lZ} 74i`ԤێSO&iM ?v%3+aw쫘kn¢ݬ^(hkUXo~#5*W|RQ/e2 $gCu N ny9._$v]V? 1 c $h7/RJ ̠,@,5I᳒9U|2m(Nj:h1Q܍@jLxc:穆C?U=QAѮ)*7D+d|XeFJdf5gVPux]=Y͌k A+NXlר\Bk&JGڭNiqAs5(<,#;4EAet mk~Y&@d)Jrsh5 ֯[)Ddzm=87G4MƁwo 3sU &En A]Ur('_i(ԛ踈3%w`B~*rrKT,`)YAn Qg,;SȴD4'>p}hpؽUout(ؿ(ОNȡ ;~7ibɮ*(6=S8l /6(ʕ]mBwօA0:.ѥ̗5I3-JG^^^oF*_ŕgR " Cωf$z$ D`PFA;CsTQ\BTteB9q4m#k _@uj1뭘zDPޗ-NzˇRKƒ(}?X6DuTӕyPWb,}G]Q=CQte$q.,^<@:bTp-uT<6ߙU%0MJ|p{ K B8ece@[/K/h td8csEՋd ޛ!Khg3MjX|eG Q\H&Nޛ̗+ r͹*I(yW"n9ӸY|Զ z h7CD7]dx,{<6pDNLy*.dfMRujyYFu٨= =}Zv(s|z(Πi|ͮ *y[D}np@Ņch T~rX*O2M,$Zt`/L}fmBYHZ@"R8lql`)mfDl&q57 ޳ͱ鷽wD}/L5^+jr[Ak:lz\U?Q$&F6ш.)~43{id Ў>kBg2 fJ7HF+۟hNi;Y؟QƋC&%>EDi̗)ԕ[)GRSk'@Rˡa\Tq_)^.ۻ]G7 N31nm~nJrfFAztGEK€H+ 7My"IeAn̿y3U)/ݕ{+@=h 1&}:Z \KZ_Ϥ4(O=jv .rJ9U~G 3 @0-L ڢ TBv%3|ƫ l uM84f#z6nmQgTWUыغߐ+jƃm@Q\/sxQ[doz+M_ʯ jC2i0i_OEoSm'mY$vmCD$ 7F4 \-~ (O#=vЛɆDlϹi?`H8n)IRԻGomRkО"~ALQK}@W#K2_;">P{IOwH"Ia7Miz |;L7 jMz*sA}~@7ĦS9Lon\y^=0םTmHye2]4VsCxr"* \O;?_#Β>/"ri! 0cQ!Um謥ƀ"7fE9Z+A oc:ŻQ*ȷ:ňA 1YNBr\LX@y2cD.Ĉ|)^K nB9]oOlG%$Xq8q },1PXU+V ?}%}º(hߒ^)GjCl߄ػHA〕n{yҦx*3,a^{NECS(0ruU 'p-/[d&HJb|(X1D4(gr- ӟ?C-O%jF >:ܬu{0S"1I(`Xsؽ#nu1#eWZ‡O*姭l^'1 6 L*2ssR6AVvT*M* v`߆ YN7N*ѽhOKM2<)[[DK%_XJ-JD=d}W49<5sOŷi~8D8ix*bw'!!ED;u@ Cv bTKtפ9w^ܷ>wQC^_wsE9rH̥eQ'BDlR1g!t3y}. ?Nˌ'Li= f]P0sxfn !<`0~|y-zn8|i=%,:O9*ڠumWZEâ; {ݘSõrBWK㓰C -7E[ =<ܔGMBe$pL(B,L}Oͳ×݊qlwq1(AD5> {1ʆ)ƟK۾_{U޿V9 ;!KTlq[@MV|ȵ+($ fOVT7{Ҝhxܭ^/t DBEӦ+|"ۚz -浴G|ZӟH k,~/_-= aNӷ6E.=:1iJO+scX+ KK8ݝզam^DS "7S=k ?Rd+eMmnqyGeH1_ WhIgB(  KxL(4B,b-X<5,^A(PEId)_?dH_y`.,X| :Q!_/IgmDe_ubj~C~B`6D*Ga#3!+]F#xBrDls%O:")TOnBdAxI|bE8i8};C-21Q JKÅQ9G55$`Ah.V-I,b0BM/Ox_tS_A#"} OZh&4IˆI;Ƀ[ st2SXꄂCfah9aRבJ|7L-OLZ G'rlkd% 52+Dq?3XpN'超9[9}Z8x6cmgmp}wZ@nˬ>|[Ie)C q0E;k3\o{,,R;0NEм)S/+xRu2 lїHt۾1t *8̓Jf/Ni/1X]p@acQmYM4;h&J1o=`a8R؎xggZ{Pw18YRh[lOr+4QN{$!YCbyTx;cD뮖/"y‚)+7\(O.$)S./ׄأ| T]_o @>i)eaނb<|.5A:N˖Fp:/ܺ8I( VHL){<5˦ SF2nd9&Y5/"}7N L4 $T;#ޙ5M+ԶX:4]E[qKV{sS" >+LԽ@;1Ba?35~gHY_a!\j-CBh&~df oVYb9p+l#!S3x LMˡ憋fgo ")*2 0?n^ ̤)e0i#޴/W+C]0 k4ol5WR,\ 0lS Z,BQaFըAs^g.腨u2s!r|m[o{'oPing|>4QC[c,JV&z0ڌ9{,x>Z3j!jo\ UE:9){<\7/F34N:rmY2̄Qs Ll[H[}g24GDH$|wPKdV/=*ζˋch![A=$l/܏n]aIt`K?(J g0 $n* ~/dyK|#g6,UBo ,i͎_i n2NX\ߛy-')zG] •@N9[&=ɁXK4J8HLY2bbؑ lpl3 ,a6ƜQuaA?FĹ_~*E??g6`E0&ų7XT1#P#)r">2NP1 /Qb/r4kt #C SIXKP9뫼)k^*Rfgw3,*wG4E<2@S&"@q´ymfG}> OPaȉ))6m 6ucR@)xA\avN8G p{ Vz 3.>ac ?dYSbw[b R$JZs{}_;ܓ0FW5J¬4osr38|fG;-xn\"?^NhKE{o8nbxLCt?3xF~/ϓ w|dia /ˊ-{3>_7`{Ʋ uܾW sŭ: r{!R=-/L 8c(tn+:mXv+^SFe{"a^37Ʀ>]hID.0N9)#45 : Y'ע;t "87(R,0'ʼ?r'$Uړ2=x~_j`B̕"RQ{8_` ;+s!zY/}P&<qjx'hbOSf Fkg$} AoLh {`U߳9HbRdӔp vctsoƬ*UxRm~G% kٵ `L9;VY oL4g-,m :[9σT+3l u {gL?1 vFwSEDn]U3al:2ET-'ßT1Z02H ! d/d[t2fYD`#GJaZڵ<޹,J_P_pP_kS |~4϶y4+;z $ծn'C0Llny =J8@$_^+'e&t8²+:3}ldk˶cXPHхGL,fY6-~ѺY z&;h ԀU3JR/ 6tjqcVX`r6J$ؚ$ X5dEL)AwTKOf2#92È~ CۛP5 .! 8 Kl0-`Kh`՛ (D #\DSVqŋUje Ilň+s)B 0ʿ~vIln۾Mqzf&H%%ŷ{K0bz@NYD?i}]W^@qRa~h W4&`u0<6̏ok^nS{e;3e|R1"\YQdHn|T8 n3QnOȪ}TƫH+=QUtSАsC*^{TBعXj\HN̔ uld1|uyb' ǀrk*1ս,N jk]C%"$ja 9j3YV*)+&2'& A[`Y0Z,_,R""UukCP`^ZQ-G$Lre5KLZ$xm(\E}=4@7u`lxh%y] +|IG`:]f 2FW:C|)!mt&#+"r>څ6%5?!kY6ǔ6RbGWI>3Tݓ7̲_hji *7-XU9.yC,>Dk !q UR V53kqFQf Aݙh%WM%|$QNw۷5$ Lp+%O*X3a]oXsu~Ы2Hkpa#5 F0v|?Mk%1(whx?y8ӹ߃ m,0#W}m Ӝu oM 9,`W3﷌(F}v†ipҍ.< vb{$tH"s'rVa!gX/Iђ &@vN[c)Hb-C7 R@Q|& kNZ_G޴Jؤ<H)ޘG: g9é.'?d@~N?6UΖoJS[q I*:)~l Bva^ ~8Y%IӀJ@ZN^6i.t_[IF44 U8o=K^=*傘Q27)2lpx٢h#Ua{ph D|U%Jc*/ QZ\/h k9݈}`Bw%Pԋ\jq2Q+89$ҙgBx/jH(/Pe3}͒ƒUnH>bЛrr^\Ȩo؏Ém *غ9ݷ.62<|DXt\3Y@(=:'r~?Z;x/^|58% ѻzUm_]^sK&*L+U {z~k0`\ήnV"H`{^A}X%K/}vZ_)w[rb82}TWZ TͱAr 9=*Tpi-}Aͪj=.@iArNo/yKN<8w4r,TU"0>eB݊zDMYk|dHP|,ݢk.M2" 0ho)ŲhL>Z3;Gwho|؝mזjWqQRjcMøu`a2_3?e2" !"G[&ԂEX(^-h|HUF;D'xҝT_FIG21oFuTr][5`h"+od*W9am9pPֺ_WKy`fYᆥ7raUX-ٻw2śJ17MqN up 73w8_I>=aoKI&V4aA7)۲]ɗ@_:GvH~J"'&B2Mվ%Sl*5_d\T:~Tj gd oVwA# +Y *|K5TEϝ\` -vFrF3\7:p[Nܽ cLff.SM|(J*f rUk\q}H5$zj̯Û;u꺌3/'|> :XO,q>k 52PbE,~F*ǃ-eI+@8Q-r*"~{|  췱ҭGiZW1WqC{v'mwK4]ݺ^$qqb|&^2SJ%[Ũ!t1g)#0l7z[`cb ˸aovއA0K;/7ƛ9/M)`&MmM fS+F^vT~[$ "#j b RA4DB;uf,rd.ȡ#V l)Gkvl idkju.[OpjCki0ĂF .H7l'itO^e)C)#EN_駎äRTcT9بr呾р!RGg' s/I45v6oLO{m&GbZFj|lS͜C=]@/s^&!ʞ(y 3|h7'uVͼEsB9D(}]3A!+bRцBMPTwy(D wӫ&P#" gyПVR5`E#[ n?6W6ǵcWl=̿ ]wî˷O[Ea Rre%צbW!:a]5K8DJ|)#:RM&=/԰'+"rr-yE #<*(tweEqqpwkA^&%ʅ=6V-Y<ͪǘfZ&^\nv6<&aQ$ oۮ2u]B{./.*Uu0~k^kpbǶ2/ЌK|VnYPW96-i^¯ ئ0ۘic jje~U>a@5 {?`#%Ç~E񰌏ܑK&|(JwqZ=0@Fnbd;qR.``ou"_{\-Y&Mvߴo/סΘ>QD"Ncv =u 6pq\n߾(F㏉(`fOnA\cMW9\1cAN}V[daLq%WDT60 ['oVKu͓GJZ>]~M?`eh91Ov x,Xk+r1| /ffWQҮ6۔vڃxHozNJ[ΜY*6;q$1mFr]1Z\6b) Y 'eO"yw3D>a}*U5@Uc W7>ӺVpGh; PskǫǦT%دǣ# @ShcD ļY3.X<`Z/Y3mtlLІ[ ]ˉYԃ<'yf%f$I;fgmU5!RK5.i|VȡQޠzI4(U+9;)SOI,%'/ygׂw$ vTd=PꃋDY8梕Fm4cyUJw7l=Tػl|Q C 4!׭nim/c9JS [&{&/D5P DH*Uɹ7A_eԲQ,87MW,q hOH3RO#JWW w!W߲VHXM;nOG ;:Qnk,¦^PA.y̨<[jFlN'w(op\D0A]Ӻ&[?(96yZ ::uFpbL J w}2VN^TeZG|[lhmT'0_"2ꢋ6NaC&H B8ZԚ zNP,oa&Z(j"%SDo6\^9eH:&[ N[3V=0Di'`⫲( 7ڐ!k0D"xhuj ?P~|p9Ts?U=Xwo5xQDZ(d>+ooS-DoG?򏢙?6(M:{%JAWtg XgY l~+*qXt9I 5w~)?j\ynpT@%ԓΗHQ zƒdQeҥfQ[-H*gsyD߾ e >rv羋lm ƃw<85c'n-CN:ʪZjA$o04 AΡn 6+c ӹf7l<`TV5g7vXM:b`俲*\=&Xј&iZ`3L[ܽ5ݳCL|uZ( 2k@lal9:BY@/d =5 )K;g'. K n'q1h$W ybCڒuY3]N::_e俷pĚ?kgkpo*S޺KI:R6'b's^ÿ?Aehrxf?,W0F){(QP Iizٺ2\f47^IpaW(bP-I_C%Lµsd@FÃ( 8u~Gr5l'GW|̇uϔXߣ yt#3f0Ʌ{b,>MFԾzK$qw#C(a|W=e-WMIM"M G_6ƑnlЖ`~'F)zS}hӋ]3w+%N6!=k/Ҷz(P4"ua r('Ĺ\%oYXZl 7_|g!HuT[/yYW}pdRЇCE"XA$S!Ͷ;pDwnXtR(E X.Û,J8:IHA0 gG,ȞyumN [E/H3uϴrH&d}TlI&Vն4Īg@;R W$^ 3f\G3VA&ςR@si:PkiiMm%8O!Bbt;,^Z eigBER8l;} -;*WW4 4*B?S^H~ `W:AutxÖ},TXJ~^1Њ4z/u`ڣݾ4s :vݘbs˲|qY\(F)N-e6ۖYUkg3aWMXRE@ֶaiע׉s.LCMVfbo_;)[cU԰/6b.S}-V/xŊ?2%[ñ rt"458qb0U@'9J&UDR4- j>j6mrdPhÒkXUL]B%3ȳ+YF@= 0 %nñacLq҄!S'|-o?5jCgL։l_GO|78arhg=o un(!}f$-X!GŌ1 0[]p?ٸڵʩ"ŸPLpk-wQ`]Xw 5d;o KSfAz,^a7PIck_[OŊ)1_J"nTE^*;?0!J3% Ik5isḒ'J~HU&R[q7{@"؀F_]#MyT5 ғ.w*c*A$_7(1˗a!Y?Jt~([ķ@4#y4LJQH?qDX W!BB5XR`'s(mUQki*xfS$FRx/a!!ʣ eVi( 7OQ;ZZY~*tUj ۛHǾ5fAM^PbO=dmaK^샰p˔ãˆ7*et6zRF{S?TeGÍSL .& #(DoR 3aw$wyANjJ܆ P`s(?lysH3Vr_y}ҕ>XZ=';._:?1'F6\;wFƂ1ϏQls샦XOI`A yQ }`=]'P)y^8Wu:Uv)lġ.CkO9n]q8 3".;ܽP _A*H`g4@ "!JF b4vj!w(% Zʄ{TMx6ױN M_Q倾Ek֚k#l!wa)/hy_.hfe'ۢsשɝՌʗ?ʇRHGj עi((VhG o}|ΈX4aY yySNiԎXH"X>X8]Dнq;,S+i˞n?hvHoz"+hG1Ԍ+He :7^A/)TQ,k1$d'vߡ x)lg/ ۣ Rb6rOY+d6+mZZٕ BXT)w xfsR/¤cXUlK⏻dm/sr7Hͪi߄Cy; FΞzw.t7 >(,}E]G~1nz$:x4Aش7voyc>. :̾[0Q3"Ry\av҃VMuLwZϫH=PWpXWU&{O7!Û6AAգ6h"צVIUMR9ȯ?AEh5yk}ut.U+f3^ALT8 =)ѻ-yW?W <pK[O`^ϙ jXUr$PQYQ2{k^NI{X lhX}Ofmp\Y2 zJ_ σ i(--l갠L(ւ'FGgG kL_ݲ&z"4v{Pzg<7UG$E@Y6-1G`,^'V1yꂳ<%vf}'=xА1rx8vB#YɞErB{C&ݖ*cUVmWX rB]߆&dL诲='@nn92gܕ:|o\{2OҐip^ {lF_L܌>\e[ ã-\M:8-ǑDv3+7T"ޙPo'a*`PXsB0COS7qp]Ee1~]!KoK?HH^!ʹh ۳MZM%HNZ J%`՛ťz3vA=3G}Ҁ LvϱT. Kq "+>UUr\%9{fI*8m߼eΰOmnH j,`Tnc'_f%|{CgCp b "a6:[m8@Q4Ǟ0a땟80Ү PJr}Goうߖ:.2!~JՄC8M\;8Hzu7UzʷT˟o{)G䰙Ԃ=o4"yK,FyoRM#awq3Q<]c1Cf2n_װ䰿z*C=6['ױax9oX^~o-콿2[M˻԰+)an L _1ma!^|,^X[vʕ_NBZQoHv#Ba  ,8-#RI~Y'k/+}WslD/V۞}M9̼VVҰ؎Cӓd9!zFA/ ;rK/Z* IYui &nъJ{TԎ:tAc tIN9>FW L q kmLx Bh842BPf%;ƪm*׆?>(h`[X!.l l6 &@F'ڂvy/R}ֈJwU?\*sl=Eʯi7PD h"zJ@t/C&rֹQd,ڨy} u@K(c['8ӖJEKE* g Ts_ AT80(Y%i^6a5 /w)Z9Cho|:IEш7Aa]17kG0m:CYZ2Mڀ!(rZ"Љ*vOjאe{NX0WG o?) A|"U"-y͡O̙ >x^+?)/PPƟ8Z`@,l>Ć:si8oyj--|+'i }r;@7)S2*TWgϾn}GD2bEfoۄɪxƐ;'6X S'BьߍLaL[2'~Iҙ{W,1wX'%>=Ryb90'%x˖ f"fnicLb~$YˈzZMV#tѪ93FH,^SaہK6'Uauf2qN j֬bi(pt|1\IT- o|aꀴZ0ɐx h猱+|'s}?˛#$ UZwi7".{$^Xxpqv2B3bw*]ph$.6NGE^>Ī2~6Wa>wSA.~>6!2HGS.\G(oڞ&)ں-T5Uyw}Ss;S0quZpHJ1!`S@nc[}ؙ݀WߠSWJSqw<>E0]LǛ ގHLN+T \Zi%h SA3 .$1G }w1/e7;*Ko{\*dp˯>m L.S)38EyH="-} lJ)$%ic&)n' [G16|!Lf-v_,͞{ f؇B[Ge#LT|/]RU^f '#uڅ68c?2*/ _iJ>II%U &ڷgy0[YN埌A=}W`GI? qqeGĔCic<Ԓ+{0A2^/1Jz_ÍlEfN_?b:ʦGuX1AHY(⡋cG^QX^cFuռ@ ɦ8_Mu3H ߑ72(_,7t I"}hzl޻"|YTȽ/q06Ww5QVWmHyô'mfCe'CH+eA3RܪWK]>Njcx> )D|D(IQ)ԯ_o[šjU!k |t [41T h;*%,1dZEVºő"Nuqlx~B)3u&ߪ:&K䴝}&qJ4rnѪ9OiGA>3ƕy:aWDv$KC9׃?"Y?8DX~slgZZ7@45~c,$̒vj6(*.[>$YcɬqGmEVNTe;ƏFQmAm4c0Gz:ĠxjS'5S6">nlV+Wtc^{.R AW y 1< FgH,;0vǿidxMp6 :I4-(V8wCKߍ46!Uz|JL9DQ_s+_*02d:;!Yyp N^f熝RX9/iC)6ZjYͩ% д/{<굛V g:k5f^x6zJ UsX>W(AEBj`1sO`,$pޞG(R#Yy.3;A C) ~彬Ց\r򿎺B0nsjQ U]VǸ~?a9!OX[k1DZ%:9.ͶSh(/GvPmL'M:7q. %$p$䖷څ7 w\e=F2|"C'Sp"؃ŠNU@JLl#eyf9EZ}MN-dbo<Ւ$ D I鱈}w r1ۂ]uUXPҚCM.?N4=<;Lk48|%XO2j|v)T>!LrQ~ ڶzJM>HHm={-bVtwl: p|w1qm5~ /nzR0R!->8~zdblc]BX{3 />=1QZ u{ZNJ'NuڇzhTxr/D ޳\BYGzTcaUVf^}DH;L8xD9}w%+֛ QY?rOq4_03|]>kW[weKfhZPrxʺ{JSM sdGYwBp(RU"7E76!d3x{7^D)8:tɆ촏6HTXW1;LT9tclzOҼ8+ R϶%%=J)\U`:L*>e/ b?@p MtU2Sbs٠0NȋDdлfSNn$mIGoNs_)<oXMQ3YļS` #hα"0{;\2ܵ^ޝEHi; "e׭^$r7^)P>%_^-,M*Fg̾ DCػFHW5([<^/5١5-(ߚAu\es>D?y r ca LThS;V[q8Bx{h!^Vc0Q0Z`Ѧ8d_4d39vҟG0O: o|pyk ܭsh9eye]ł/ دtd? QM^?J4: f=Aep8E0Cq:&auu(vSϦg^?#@Tƙ*H3}u3N? 6Hª~N ^I$?ףŏR!;X2 6T'īW+QGrF `G*g"9T],Q`%~YC$%)gRm&/1Ah;wxWudsv#)]6MBqKv[@*6c8P&ɊկT&41f`AѸG+ U .fe=a>9ᛑ[%>9K_CR7foKp8d|ܮk_(N8Bɻ;~`mE}ȱQX8``ug;x1h|Zgku|HtSE˝k! `ckTLV 08j9.CO.c ֩4XIR+'S(t+9c0];L$xػoBנ YFcl(1-fPhVFzeWm߻]lƔZx=:dtcܹĚ P@u&V2Ebf)[̊l127qlOA&$D-yebbKv鯬*A<">_?_H423eگ,63aOs̀tup5Vkؚ qa fr=b\!޸t qU buny!",ctp"Nj Hݬf=6K"\&w9^\{˗a4 u~S"qzIRFa,ۊāu3gwRz< opi#0luuᴿͷg^։82W7pB; UL7".'9ed8`VC$U31 zs)ia(pV@ė@ Pƺ~!JB`aPX$#̱E" XtGU'xԻ.@)^l ?NuV"WĎTWtBlC(C5Y&7iw\Jb&GY9Ņ7 + JkW`#9 |D +>s#C~QA5}^|{&ͳwQJIA$x#{(՛l\dRWa;e!;,tMݡa>^V@q4ga$eL~OHc85Rb|SX 1ތ,Sю21 N.)[H5qIᬕ2CXq0F²1& +nE5^d63OVHJz Flڢ=@6t}$M Iᆸ|Am& c1],zu, reзrSYfr{E;2nKMJ'XP|_{AVIqzJ4}LFV-P.?p;PM-ȯLwot7/ 8D%h[e8vg'Q:Wh8O颉CZ1ɩc5vn͕'W2qڴT8F'ox6&'L.X#E/жTJ~d^?d)pi\F9 W ccqH1ZUR\43 ݙ  Iu@qOx8(rGG OvG7\F,h&K1G_T'k#U OC=?B杷xk5sG |u zU2EP)d]K B9V?* >$f^c2p&E4P|JgΧPk ``4#mJ=|pAtf n/ ;︸f^7tѸH̨[~+WIx sPm?~cXkɉ_A{ AKVWQF;' jK=ug.5@VYIVwʼnheޛ=X+Xȥn?$ȋ^@<,\,et!;>MB ]YOG(hS?d ~9/<CW5'e:̞sZxd&,Z;R\e @4dΙ'E, !}/ݮ.7b'bQ DMθD_ii(KiKzDY.+@TTmxs S=LA]CUQ42]X+Bve@4Mܧh;m3e n|[ifG,}?oB䫋W|Ė ݦkfBnMEdCzO={!9_äd#558`$=ƆYKwi{W&hJYU$ P(`{?V"jW|,p 6%OkEc<&g'c<oiMĞĊ; 'dcbWFSC Wyag,Iq BW82ת2n޿  Yo6 [qpe$RŠS#4bTNCZZ{x4>+zurT3mb%nWs9 ى`"j>К ƶՑ@ŚW!Tvq>`(`a jxig (_ġ^Twu<7RDZ-fwy#ˋ`AL/w7֊qhy{.?@h fmr=`Uc k+HUr I 5CI7UHR1vF~1!R{-ʳ#<^z:0 .Rrmkc|I9_3u^͓m T{?i2Ц0>'T!mow9*_9rT8^ GbzMp}e_- nbyB h1L!0ir8ķ  ߀ Or*PZljkj45hfLu_YPj OR12Sy" za(_ 8B {ƪ۬c~>aIsmR{ȋY6v[O6* 'ɋ3fo)O$TaR ൷Uټmn- vD+Ч(Ӳ֮_9.Z>FK7"u/)zaY1oEVw-4 =KRp R3*@:(6 M/fC~3cU`?3vF 岑7lU5+03ypb$,8|B s` ^پĨ1@GI2)G5dv?rH_Uo|f`@f8\j'S$)iP c}Qn)4GYi`Iˁx6L̤~  Ѷ[)mVl ;.K,Vѡ%/-2rc1K%(7 3oeWL}x3.'*S9ۋpߋ #k_ڑ0Qž_ m.5V5oA/?j`J*/ iT6G&da*$da6?jU/lC]Y~j ?$j$#'{QZll9_:a)R%ݽMo㣇}ۥ.<)\/FfooФH@}, }4N-mnZRG+./*xCub~`)-efF^H źycճ ٠UtvcLoָ2~ՖeU2`Xfnی3STy?[NXs.OTFK׼AYXg( i~q%v3,:>CbE4ng[q crrӱ$[?7gߪɘ c-&p!>&:PpKp+ v]@߁ 6+]vI(}iRTjȝr'8eHw[]K%\Z2kKIJ*ŤSL\g7:N29% T'nu99 lY9mfۄ <]߬Hz<+ȑKQ2i$z {jtk0,Y H_\gTp^ޫr3B$1>n+qM胧Ti39[ChT;88iR1V<7vO_xWZ*$uG!AX*m#x bUq>W9?* |d=KH٣^!Aȩ}l .ىUHΤ``"8}RT$Iz`iOe4pHC I<3S(L=ykr9sZl1WD#qitr-k1'/oռ@| \Q>UNzzROOxŇi4\S|Og{;y"<ɀrՔHKE(oP$lds> X ٯ39,~;'P)!=X} @y1o" ?b&t<=^EU!r}fOeA cνY;I1UR# `{c<?9 ' 1RvQ/H֦{5Ĥ lnNQAwj/@lM \F 8EI+?`eqRNAf@cwҔ0Ȭq6)xOCV' OˠRص?h2{*s?1&>.r?ơy> V}yH27[ր(m+Iy`iu~6×azk']Tfaek^9%Y؃_h0{I<[ey4KMEbDW_MTiIO{sQ֟FTP$,^2Y0m lc})c6i4vgA Ŵma) ]{zAp4npV#vn~$t"R=+@M9dw7 M 9# &s;lU{y@g(-m. 7hr Oʪ9&t#s\wmKK2\ od̢DmӐAF>7/#Msjc.izBFtC~ ԫXf(3٬UT@g[cknB|';ߢŷuDqWQ͈Az8[NcZM5M 7 VI*c t6=)q\~aT ,)i&*1 ] t +ft?FچU<NrsQEI Ti聡lH^.ՎYp:%ZkDnp":;`_>)SÁu]Wj81J$9ꍇ;~Z$s3LR(TO}ts)66T:'@K3KCa"TqPKϻ %dO@# t?$KRfCy͛; */"J"3^a<6͖ϛiA^~©*Ek8_zcӰ*s׶`lcC$H@ KԌX.,9p:uvXcL"5Ȟff8\Oy1PAз F޽=$7ÌHHO{D8B-đ&p[˚3gάύx yqXkV.,xm(}ݩƙ\j2I&2[԰6j͕qǸ;R[ {4?dg$R.Ò;R}SWA3NS9h #QT4Pn: 64 )"$p8NO}Bg,r |Z^{YV[B3 '۬Hw14 2KWGELT^Ч K4ZM~&8 },bÕ^xENe OB%2*ۚv.{&]Ua((ơ]ܫM~] ٔctCAOҤDEb.!fR^Bax1SW_w+ ɎH/2j#FKxz"k.>T4􍦜l1N%_p7'\Xi~{ KJ,6Sfч|w D@?}4|{f&S_c2F6Jbff+H;[M:QۖnMZÄeݭ΋!1E1a32n_r!u=!,T /_Df~zHJVf6ifL&Oieo}n\ | }4hmT5gsrC|h,HyzBu@/yE{/zU3O݌n/ESіyߏuKF`ctZXI eT"NFn2QD*cJm*v Ό01ǻu92ǐ!/ ʸrU`í Z=5fպ<5ǩ?wДKFJ$ һColxu=Ĥ$ /؉ylSN'M_ J=ŧ'NṄDLP'ڰGc}+[k>}( #/3h:D]cxY[x\ItNa0tg0tщhزKTVsyWwǕm/.GƼTYqB)&< >sFĪXIP&=Q~WTk)Ʒ\)6PMY|Ka>1g|'Ac,5g|4\kGs`oP`ҁ(iV{fʏj5Z6#Ndy ULhN0_9@ ιXK` I*݅9qP7ߗ#;fxR' l >L@YVDdрz#%za;0~j$g/:78ånn> uZ}QOUqé_ Μrקx>l? {AC,: 4PV1AͶJ-D7z~RAՌb[[>rJ\^w#*[xȉXH8E$ד1r|֥CѢ[)\ձ}}+r GZ^{%]5 ;^NB4vi3ҚqΜX%3 ,q9P0^|1<6o\>RL%dUjax'i*-ϝ_bs(7۟L[ u,Y40(@"I.7¨A_5rW/L ^b_+\3u@G(&ǂn?CC$4|x9amWDΆTj9Q#pN-b4E_X+6E&}:YXe*> IMYjP*%?UjR) qi˫y)6fM2o ^j}Xq%e'~:~@PK'Rŀ];>L5y0b!rtJ~jv/0mϣ|Bm4_YԼ$Qҏґ2xa%钜9ިt[aYIܫRjG잋~gvuuOZx! )kz3{ޞCFl0 qB@ ! {wkt^XG~(`CI`*,bpb#LDXEb7"d6n[>AYKL\ر5hZ~b<2\? ; HQ] xmFEn@!q$!ajBVEz ÕRJTh`Yz)9"GnxbKK m57 z)93ӲVM'FkdX`vng)@T/@t1-o®f2ͧGڹ.)f1tQc_i$sa 7'.DXzRP 'Av.UsRZjCɉðdD4,;8k:~ HM 8|ry[^sgSt(oaҨL3Ea?cga0p:J? M+:WjPWAx>!@.4&dP= ESTFػhs6b_d15]k $ϨTԜ|0MYP9t@Pz2zN7e& 3sKu]dԎ,8oreW& (R9!lk5m𽧯ך jd$葏5Vyo/צvWBʀqŅe8Kf-^Xߕ{CLǃwV=kk͓+zHTU9VpĮ$#[ lMtE;"jd?%i!Ȫ9Iy`$k"$jGaeyr#Bl^MaWWZ!쏐X`6WY~EOAGՔ7WFsjCM$WpojQwsnv\)5A*$a|Sb8-NV=E>)4 l4^.S\: :P_o|hJӞ'[ É辒FVƔ3P#P\<-Q")|,pC"LLCZ4$2$ -0Sx2ZtcZT$ĘD[ByPPĨ񦭅ncEt YduJPR'C sݧ 1BFu"I[qE2 V$!q2)txe@n 5k~S2J8%Nk-{Nf UQq9g75 d ]햼 ePty;bӦ;3fovZiG9)TpG4FwFzxn/:hYV SwrB"zNUiwc I9wxLbH Lf y"{?Ke4dKxXwF(>6(;B))m5 ޑB9\zRߺ+Ŋ@>lx̪ΗPO>#m_Dn*DMF}YgZccbںzq5YTo:؜ρ UI喷'(òΪTu2mdʁ "GXL)}ϮXRYOnMI*}rșલY.g*Yg4UrMb5'y rw u;2,m ;xo ϥw8~ܻyi,bNkyG%H4m J5#پ؅ '1jgp|繟f-2h |v@D`ET{ӴĖQN 2$5̴q鵥7dUQ?#9S{qsמR>bg V{捷[0[ &B9K!Η^@̐RF^QO) ş[>u3ރ/&MYPpލ-yK g#JXY-C*e}wbO NfKi <~x g"α8!}~JP`VR"EMvoQ Fs})8u +Jo9XZ#jcP `0w=xg{ G\q0/HRμsi**Ejb sy75S%~,T3dRȪ7at!oMDYf¡Ucɱ jGcmv+CSytDKBXOB\{UUyy|h,KA( ƞJ;cX%$(F TYr נCY4 !k p򈆑T䕎LYTYI<,FžO$ B-ĩbJ\ K*FQ55;%:a8P˘$%`tsUCx1MgӈSq1zbQ4Mv(Q Fw:~z3?co'<">B|ࣂ~jZs;5|% OW,JYqڊxbGfR@!+uɐLAYF.9Hvw&+@qlrj29}7Jk2wıXtNҗƞj u_qF-w*+9hʔSJH.G8A6՗e풴kMj'֓_(.`YJ>P+;GYQe3+j$Vl-AAS22­=TMcr](\fQ!ha=P#4_DuSƩ`a~[ ]\EiZCZ35hs%<-Q(1-XOzCU$G7v}o&:{Rq-'T2*2m?t\eq@||tRg?` Rr-[u{,!!Jijd7,hD9EZvODp) <1R/ԝibI\lFhMR6n20ZpW۞W$T'nf@vQ_%8(**J5޼ᐽgqO:#[U96Rox2BqVהTQL9uU.M5I$l E KiFDJ+nom_Kd2Dvt?l{FYa^<㦦c|5V@ O0.sӳ7)SxEk쇺r |h]%*h6ԉo?ATIvTh:USZyzO [hg;ۙHZiOpf 8.w? C8A]Vw@jdp'w 4ȴ-<ܩz[[4zyA #/؂wAm;/GN :-#s$;!v_o}2~hm'KJUxnTx'*xǵI$Y 0M4_`]SZv/l;0n\_b={jXܸGѮ`}XVQqTkx(yhz#b(v*Ƙ8HMmVKBS}H:ê)ٵike.q̀Kzlv[VYrwL=b\b{r(JŒ8 E˜5V'|\Tb>` LB aeQ&)_8Fjr7<>wlP lz-9KRj 잸HZ,?NVKKX|k3TsrA/I{V&{} E{4ޔsaNں6|-@$5.z6 \ĥ9װ] 3ݻ=$2fsjc>a8.7t?R+wԍ~+@[)9nGSEa9$(0 #ȭL/UON* U予woEz|FF!I00l! "!9M!~MQ 85l,x\3l2=#2\ZbB [yk?gNvwMť̓SU^&d~PJ%|b tîİ}#*u[uZu<+s2FX6>WWn1q JLyy53Oa(KT^giU@>'~vU"Y&|OO(f]/,ـ˝B1L.єb?>?F'B[}r)6vQrt1t>8Lz1(Вegt@[Zxsy0"/us9^HyʢuPJbY ~㥏~+E |?ise(ڜH9"GkڍGUN$HxAݘ½ř#|hî*ebO/E.TNR+ޖ?(x{}n2t;qM%up`r#ˈEY626Y&oלQ:A5գ;;ȭVi+\78h6ȖW*) vr*K|]i;8!雽TlsWCԘRWR:miNmJ dc;SzSG9=LuN}N.7ߕ+ϡTC lB+#0ᄽ'_7%*8 *(=&(3,NtM~,i >6T-XYԦ6K LZƥ*dVALjV&+1JcDBr|!neLfǩ{JYEt3~ZT.ll$f!b@UNySH q+R"n%:Դ ̜8ᡆ|?-ݦbZ_ D R-}[: [P2L|5!5g_TC&ƌv^d# wU|IG5|s-s?{e(!4'KqU f 5ZPi﮸A 7±̅7PfvH)Tvk: ?c \}  өw暶ePe^2_y*"Qz|77X 1iľ pPＦV t-eRRJ`M͝%N6cvq}O~fz:c=UpBCK yПgQ 4w1*{5n{f_qvb8bD2qP*Ԍ Os*.ZQ1{mBaς},Mp 1`Ѹ[3s|N!}ۅCWi,;Ҳ%%"S~2SG&:8 P];bZOCbs.78M=5jгRwݚ~u)׌#ՆĻںM q99b :#td^/{IFn0-\Sόrh;BY眉?#^Z*aoV|0G76ÂKNO52d|yʮCw׳ET8q4(Ht/˗?xD›~HH[ G><>Um۞eq4- 9]4LrU!N~?=q`'ziG넥_E.eݻA'^bIS wQ7JCg|򃱫 ai43CO1O$i !}DhT% .YQV gnZ+H E 1KkFu]9JV.Ϲ6`B_a \@ !`ȉY0́1!uI7PbU*Ϣb&6,U_7܊_2G+ѹٓI͈" .oHꇩ<*QN ͊|n*{Mm:3XRz¤O8Y z]/%M vH*i/?V@._ c ?S9"=MzwO8!gHIcČ* yÂ5 GOăOo AnZ>ԕRP8 ]> O}v.",m-Z>}*KĂJKF|MJpC?D]Bȴpƀ, umꔙ픠G|aYj ]QO=ق"Zs~-e|!g?H2!o^,%YYp``mxNWaNPy#: M.&bqSF偱I\Lu}v+R@0V˃\,5r[X5։YW{F_}OU׃}\ئ"y4aټE#@>c uF.ǒ?#K2dبZm7m򶭾@ODzMKd86.Bhr(= 6=䜔t N ?BBm>'=_&x Qy2lxKac (dI3]Ătq޾ޒt̄1lۘifSq qܒ %r0b/ɂa} 5BsvxfAtL ilO>8Lg 2tjzR$D>u5DIyj $ZQ~g=h'CF*<2䧵3m(|=|G~ d-_SR}->vrVዕQZRߤpK5*EDdm,ң.onӆEy 6,,URo@w7e[Crh^w!ĶƜTf99l䀿n,a`wHPt4t]@UIݙ]5{6Sw3mVa;Os/N'0ÝC!QlbFrFwǠM5M 5#cF.W͆w X-@=pi~B0;< _ sW}ZC4lv3zF< NN0Ծ7.2h_Vx~I%o/%ޖ!qvXNSoS`җci9Լ$]߸ۿy_;:  CaThDrp[(cmU;aT~bgԞN_;ӿ\En}yb Z4<ʒ, A ׅst"c;!ҵlh%5g ,xϽ^_b7Pyy`"LvbOw}E@*dPH+yLU#(/&(21cy3XH*|zC))ir`/=ِA0k~@ο@!%l>Y 5GM8+T!`l-t@ YU y)88rּ$5\< f}+qw@PWE@,X4@IGRHQw Gi oe46gVϏBT"p7Rp *.u'ρ)s sd^BF,aI㙄P8#xFR-$"U?~o:h$աH?+GeI'?iA[nN/lV(n8.0ʦ/@ XFj|ȓwZl,4nskRWX(؟ܱY!6b1[OFq .a R4INEU k!?elGN~*\;.{OTlg &N[KmOppj[=|@E =քH惺\=*1fL C9&:6#`U-|#|.jo8&|4V aLJ&/E N#  $of4pnLo9]`ȺMzal#def:rC_?9^Ҋte0zA:9{0J=E$ƓX@*O:`ľF#=Z~ǹa~*D2!x?O" J{Bo$I}sN,81?:4T;kdg9]rvI}m0XnѽuH"uC_# xv2z<$;#[M҆* >{Ȑ>px+őki Lo7sV37~>A~[Pr]t&<3,,@k)7fEVM!1@V#M#zsxfvX԰iN3`,Z0zrk䊁'I)2e'xBZL%0mʱ`ZQ )4jM l<Kg];}v{NB zB:<(klu|ȍfkG|l %sYZez`"Aqyŧ5dBx"zs(C[SׁM6Ez;w sF&0lPhޝC!CuLr|Z֦ŦV l KEԱP^줆-9m"Eߍ Y󸈡 >wY]/i_6CY}h6"3[ig%IN1ų<rv~ .4'>+:&"zs0Wl8j޹qE[͟Q~пjKQPIc5a/?G(zA+rm02w&e+4"a}BiK`WG&ř3ܵ䴨09sdWf W?8Dz:X]+ TmjV<f\t29A"T&b xfx/ C2nЦJ¦x նۯ KH xO[z:%%(m e|%$Rl#/ Jt%nXz/aMW^ gKC\ݓ~oU.Cz9Å@+qSs{Ә: ob G^ssۀ%(/Yh0LC@g#I# z݀Co"h]Gw}/λb!{VLlq2]cu }';U*H`7bNqrlM$0Ө+"L.8oM,6j[Cjb) }4NRD Jy]?(jqy8bˊj$ |xl>NtI$ KU`j&ҁ]W. H h5P@/UUק~h7wڋ6Ma`"߲ȶ{ܢ5_[mO̓zHQ>שaK̷zX'>`tK1CF gril6iz2rcʨU@kl8tikó\,7pk(ɡ1Xb whkl^}GBuB[VG peOU(abyz{{QW.ah/cH_0-d_+fDSݨ&"9;~{nML4TM*NVr1ZWmFˮH5:ڊ*Jx~ZL`0e*gǘI̠8넼 YF> eSSpaB4ȗԾWs1ޜ' :7L5ik.2pa@AQEzg_Cn5uAS{EJY 1@ĶľRTdQ_c +H *)VV0h&ļOfq/ڊ I YVnȲy:|hn` =ψ k5R[lHa"GMoC`ؖH r펮II:Q~d ( bR ӗ,qX UWY PY:t՜5 tN$:@o٢:?uIQ[h0.ze,pP%LxsV]fNI( ^w3+At,?Y"0!H'[Ck1{+oWAgw2׺q[V6R* `w&kp#d<sBy>\f` \ٟ͙eҝLgc d"%:citf{qrE \&4(.%A{S<~m_5f  !(Ǘ.%f>ԝK*b{261 h=^ IFb[]7\ueLȃ> Y=ҢbKx@YGcE-}QVS:m:L4n'u{5ՇT-eˏJQ#b…NKFluSt{qө^ 5kL<:$"Qd; qZia&N Z\xҴ+>bE؉іKlH#8\ޅb*ߢׅ-vbMsbA(sIci$xGJC'͞0E 2~`]BGIKX_c`a(Qr/T#F,{}gPuPyXQmP28['#1'sGly22bs܌b(-aOX׹GrwcB) 5f!;d3&5vU6I>>rIjʮD;_WptQv34I1x6mՇFh0eI-qUAu|Lj&b2 jBB? LIUn5rlaWM`yeO_'Xb1cp_(?€Kk!28e߱#`$snB~q:kz99U&j) 2 B,g_n5[!EXN KХӘASxZ3DtG>oY^~6ەKZYRuhyH&(lٻx;8=S3 EݔD{`hkXd=ꄍ2$0K4Җ}}a+t0_6AM?9Dbk|XJ`4!lG)hUT):~[^IО>RjBUc=0+YDA 8V}$J2֟ t 9o {Kg:{".%vS$6\Z(|&[p NmU[?Ԛ##q*_(QB(T[L]%DhuA{LJűF%p qs߹:gCo\&F_y@\e>ߧ:;NOfIgA]cc~A<7>$so5K5DʬqKO ViwIZC?P ,;;&3`S9 -k X}k hE|CIZPbd;t i`ח;i:nHF'q=D:mI XL .[0ˑ=$ECCS20Ο4~7@zX'j>D\&\0븅PkܝYF^̤G ɱ7IF!}!M7y9ؓ5lg{b{˜} *+Hh? s])ui){'- \1lDCR̃o|Ҟ[gHC}sԜ5(I|c2sJM}B27R\T$/~hT{oc_ "L1^((*R[C_͋iu^JofO>Pkd/N-%qj!!A)WPS{ zOj2?>ࠗT͡ӝAaYģݶD 'Iƾ:<[CX93GNj\ËUZVmE"jwC-V9n {aǬXMphl=mYt0T#m4^FiׂFnc8l*3(i-C6PHQ ,b¸7$.€ MTy}iQ%QoM)]#c>@T:نV#ۦVp'|j2\xU(_<';[5ڶ E~ϯf!H8=sUO ϼJ~GN$옌6>Ƈ^b}d[u*W'Nl xS-=Lz!"{[0kq |un,}ѽovuq#ab ͎-I|;seNқ3K: M`.x8CSf"EՁ3:hGr2PN; PbJ}'ᣉ%һE@RY#̿)/uo´mӍˋUtʵjG!R@Ptzny"-+Cl UR`Zl MQA ;R}lc y4 Kl ST'òSF@(ˆxhN~D m~8};B>hNիb}mUsgwi9@D\ۅ б7ZBu%7@^zJJso/vn^cY}`gr3pDYC he?%DE'XfIbނbIK_6:(9+RۢNDE*.h_WQBYdLWc]AQ w4ſ F~q| ƞ fLNbK^ϱJUd y1uq4=pCW)87AK9҈D'\mm5\/}*c6bi'ÓZpĈ4hʱs6oFh !6ba$v=PQ-]"5M7j=e:S!5-YqNdC ͜+L‹-u9|PxP++HtP.%.>ʃr TL|\U_'U,;$}4V)ř\,@i2%LQI R!G#zgڰ9P?5 yg2a B9Ǐ)a^G^S㮎] sq4Z(4v~lkA b}ٻfO+iU(ծhDtvadc!G|3|񵐶z̵!$q77$]*{ShjgL}ge2<>j0:њw[:ӓkB{0UBVqnb7َbdOuRf¸{D˻VUmͰs,^|f3,.g}PV5h͂ 'Ș U.I\:% H;q+Z (RNCL'puc:^\Km3`ty1߀ǤW7EOA~c+ᘫ-%rx?g B<U*.L}_w >|3bk+@A,SZf,zWo+Nu6UwS/?{LFQ*^sY}P6)ī6?Íx6Ui2 Lحd洠F_"7} x5Rn5-q3CYC}ҕZd=z>4*W63oS'z2(>cl}hٍ<ؤ[6pkIزږJSE8RWm%ؼZE[ֻΛϰљ/}H]3, {;w̋"[_Fګ TcA%eeME$ bNm!e-6}%!uEEkzH-gM8ِR-M-'@SR5 0RUv?2Ӱ _zBz:B?6|;l 'ҟN3s֬0?x"XgpCe2vA /+Nrc@d?_5y[ X:I}Ƃw˸bՍhHcƅS " 7O'\Vxyo4뤟/ϯT$ :?QӘ?]d1a9sJ.õW&? LCjqf*9d~G(SbyK#p4cftX-C].. &U$D@,^gteothkl0D>u@PԘIW˴Y$v˔.͋P*?(7Aw+oUUBZ ڢiiz9FLOwlVuYBe^mfI>J UNAp(8)X# Z1R~߼T" 99mYUȐV ٫9cKqAA唘daJi%.ĭJ[_Oe B* C'hl}qzPHm]6W1x|0 ڀiS &ΕuԮLˑ)iadyܾ,ǿZ8z8Uzق'mtNC| є\е]q40W\ oQ 5Wys*/T4YCJ~Ȝ,rqM'Px'/0@1QSA]pLygJDq8:93 ;+-4.q`4cDX;9|Q2;KvizNSOmm;l ,y mzHq/ςYu$VK$=~ld $=2QՏڲ%X;0 yW׃4Gᦇ]"5U9zEyQz{L%_ T<(C&[q|ToY8Vg%> H)m*2`_`^;(.%X9"io${;M>lqyf4SgM[G7j(JO=I}[ӳ`qܴ~H\OB?miz\tPBl= \4glV-=+Gze&T 9޹߸qsMgtޓj#xj[w՜ifމT҂ˉD5DTn_ʈvٟv5fyX*'4F\*Vą YhǕ[#`5ޏo ef'GG?$YVV.gIb5 @Eׯ*<ȤH[Vꉺ쾛eD*Qff&IB1_=9q$ [kh3jʿ4[ETLexrZ[wn}}%⁲*0.Jլj> ˭ZQ[\Oex7d%DŽ15=<3A\Dp{ ,U>t­6 \&cVحd]GDD ԗw}_JTM&M ./n_eRT43UN[5J' c<&um xMzdAr G@b,rk )#` V^ &"F)MN>OekNH lWΒ/btC"fF7wXG7O"6PE:ɖc6b ]6+APFv[q=|TLV9j <`N9/ ڦV֥ÚdZ C{v9R6#i̫V*%}1 @0Y&L/,TiQ5;0دqsss`K>fs}4d "tJP 31kְf)c Z4}%HU!K5|=5 |dp:r:6(׫SeԗY$`(c-[aw+yVprᚧXTM8#\BCaދm{qs[ɖ,nCk_' ft-b)u5 .j^ML$1TRexdZ'O$(Jdv xmVRЍlO :}tD>7KIg;fi(QX?8|l.GwMP2qweNB]|b(921sH<2R wkqiG,y0Oo1n7v{y"2!sU:[KL;\z$5EZy,Awf,j?gԧGUy3G m~jKۣr$H|)z@釿DJ?Y{Fcq,$胫g?b?O,3 }P9,u vVX sw;.UFϤe,H89(4OW8l=&\hc?) ѮIHDN$t/<[;B ؔ _w\Fh'̬Z,X})#&ۃ-jw#S /!yⷼ4JK{,?OtBa}Sۨ(Q:${|>~H4ىU_Doy-L͂TEPSPj-ߑD#9ǡ)*c¹nf e/AzL <$b kX<*"@qcPDNoI9{4j9&X֋*XdC3"`qrl[gt3VY};~`e8ə}qAS تCۺWJjw8|Gmi)AA1$Y7{vhqoo3tzYVVRugL;!!J[ڣ5t?QUaowۘT|*Yqe@(?lϧ{߱N}S(͕_a6Az$㒶0ڢ{i{vy2H3JmGpȇFJn4Z`~Kx/5$x1L%[-ޝz_^CshSt?ڵ-_1ġt~X)/0vӘFgc%NѢ9}%X7H04>^E>8 /d2d6Y>Fd/z}4O\C’ٱPf[HcsVQ2x9,=>%55g`% Xѱpw$ՀיM|sffVs =29QBI$*&ѡwlC 9nB= E[hEL,:vcu eWg$z'\<|Hm'B lNd-+ [>d]Ƕ}"ϢF^ >w5 oCg|)R6^ml9#:̴ cm,oNjL SeI2:j%h"zFPqv{@I2)$y#5Bp -cTfwϡ*GM:Δkv̩ҍ6%H] ?ԔRD*qXPiyDS L%[0ǏJ'kL~* N@_[}MJT!l[@J 87/\Sg-vU'`VHf㹈7b '$NZOZP9+OFbx5\Sl -!s_6zxв36Uk*0Gl)cS0Gq*L}w{PUk&Qn:_x9mʂrǕL7P̀yMI64#e)|,Pbz62]dC2F¥?US!K"wdj$f֏`דuq 7kո7/<놠E)e\d>XgT\hO1b9|TiL7 dptg? #PBQbRt_cLˮ5E/PmukX]I }1OZ2 9#;IZ3ѶX-9#vYj]4F/SkvC)K&rk7Q7o4}5+/٦0-(Ʈ;sP< $RR-PXШ~?ۘކeT9Dbᔈs|SqC`?rlTXW :/%_Wwnsgn"/lY!6H)JlU\h= ,"JW ΎQ@j~0k7=zi>/#`q3G%0&K,f4̫?(~5nk**Q}"Yq xjXM>0k6Ӈ6{x%Enp8F@<$1Ea hϤ|| 1\n%f'23m4،sd2 7:;fm^?фE_W#a{K}d])*9۪Sh]w NFY(wC70FhWfM2gHes(@Q93 *_֥H ЀUf&;*E*,%Ԍ{A(Mt_;g`ݡtHQNR@J BZos3ңaCeMP=t@?,m61ѵogzr ܮ=r<sW<~_,CKB]{hWn\o縘dE?"!r1nLuѲ۵BVEnҀaߩ0:q {5,ן*{Y—Dgm0/Iy  .P*!j__Pi0"hUK՟Z!+Ƃo(q^*.ɱ_x HHOܬe;/{E4JAZN$!N=dKUNVV 5Mk0c6C; 2@s^atP!}'‹D)~{$4F0=T :6habu8j =Ӓ \ Aӝ]H3>˛: ,@C\RH{0Xɖt"ٛ uu8i1c:Or"zA5q]r"Fl DQ%fޮDуTfx=DENp"Lܶ4c+rtލy* s4f!*0-)#,"Ɲw ˁoX_kr${js4 f**/miyHdCVglhAy''bQD#U("57TE]xT؃~(>}(5&e|U'Fi%eDOuX9gC6JԈGg<3Hp.aJLD#VdW:=/M`Nll밝'JRB˚$)yvE3NjY +sCܾ@}T hgsO zo"/ aC L,|'JU!HcO1F.Ĺf*de00=Q9wO%c! ?qh ^:$矈. ]0)@$bl5wI޽ʆ[>JQ!fL`M"NO>#`,Í&J PX7@U kTjbH 3q Ug{Rm7$v65XٙrڸZ=/)|-H4Ŭ=4V[8;0}]Y+3&|r_zl"d~NQsVyt+5ejs$jZc1ub%D_+>GZ TYd3sYD\#ʃR-pދ;hE(2\Ă:x7O]^QTug%17&y!F45h}JzGϑ 1m$QQjcme -c& [lsM ݪD.yX}[9|JY#o:DPy:$iCQr26&f7vi3.EH]Ta7i&6K"KDX@H\?|14nͳѭXU3 0: Qs i|JN2lR,5^Od5&Rͽ|sH DrB_?L (mLh ,M'cP zTHb>2Ŗp25oi |yJ){&Xܹ6)+2EQ mux?k]%G:옃ى8g߾E E`7Ofn;2!vQw!MyRSRn7OrakME/jJ2Na,ErHCgdeO?_υ:bӵB '8@!;8L=0rBc?ש9D(b#%zݯ1Z/8f<{+"}#hv_rW\%n'r}q#ە) h'P)%16`Ðlcgꄅ2&"H 2@=˓QiMzal{/'d!j?#CG,` #AtG |#Az3h${ N}Q%%J@S k@2InǒWQ¦( z4v  Fߌ͉<b̌=OGS=GjuX4lۿ7laZMgO1_TGGg湫V셏kH+b+R*TTS9ʷ 2މҮ QS=c-5q:f$pþI\ؘ%L շWfV-ʍ;SݞӐjΪQx(iFPop3"*5ay _Yny$џg_\=lcȞfJg+T!it`K6K_sўa&|HOyqY.ui'd6B jCA=OnR7%,O^CZ-,k%ok< б3[̗ ]Y]P%^^7~F^Ϟy;֝e/e ݦ5oaD7COO{ַKr#mGӓaܨ%/Z=rNEPŠ,N| 4s@gdCJPh1VJt9aGQY <|a顉=T'nSڢ.ނCOL31+\0:nGY٩E77,.RʅsuZܱ_H]=N亪* /oL/ӓ ;le9W#F}[%PL?Xwƹ${L!}߰4oRU2#Q4W=4lGo%&Nĺ7W{&njь("#DQ4Wc?o#JnYlH/{4|Lz^e?|UD ~7Uҳr v}i~U2"VL9?o^tu,k^OV 'vYgvYb5# >ɏ 8L 5?vOFj9|_FH3redhhmoFBp'+&xv2 YI̴2cㄵtghi8{K7P#21ČPIS凊3'$l"\d"Y狊[Dݠ0ff5ħZh^DžKi}7k| Rj4I &eQ2c7̟}. P1sѴxQJBfeiut%ٞ_vL(WÏ38MSxH quWUa6us NVc&(䱢ג dUvuw4:xWg894(kyo2{1~ȐJ$j1+cU*A_ 0擅5Wxcb˜7Nz'O(݅ւL&@/R]dtSxYXSVhEGlG}B|9[1 ƊzSB*3Ԓ'b8(|ޓ7s!o>-H0Lw^6:{n6Oo-8`MO=D{Rɿ6{g8/p%8OZ6zM&t{Ujp\wØڶzr!(dvLc·L6{K2o&/99`KLJ*Nba(ټe*4OPeG-L c١qi} %0w%7!&|a{φu.ʙ5!(x!V_)BP-j٘gĬ Ϛ|Afdm+K7OM-u~㨊Fr )݈"%"rzK*' ^&;gQ>nJ fk󔰍dFyњ4&,#$Wݐ^_~:=}S,+wM꿯ϝ3G0{F`1i>bwǙp-h[5C[8! cF02:_ JKnC$QvMmt砤$R0D ~Z FqŒs4"o ;Q gD@[Α@}7=ה2!|AvcQM7\߻HqRc7˫0MdƋI);k7N/9©pE (s[,Z3e I}x B'д ȟ^j2ٚTtma|E, !z@ŀI]F :N3RTڌ#EٳP:i0klx"ŗ~+_#y~ڷb\,7`ӚIAL0]cKI'!#v.B|[(v .%)Xd/r2샕Ga['#e)/j((jnwR785p\ 5[N ؋@!z69ןfpDԜA+xs#0}+Yy*56v#hځW}XGIlөg io_*I뾬)8NZ)}}U8nޯoKO'b96laS[ gdA*yUSRkߥh e }y{sic\jј\Ov'&Ö ]((Ú~\ .mvBP8L_@팄ʕ]9muЃzs QdN1i6oHG.׎A A109mt)Ө3x|ZJ*1Cu2)4PN^[wk0L.I /~A[ p4Es" +޿H,_kLzӻÕnW ^.@>hy0 Q_=q3M-8y 2#_oLQv1~2։N9S_,WMmTq>)5n)%@"d.hMWI oMh&~("} 2:vQ7t23}AT2nљ]2 a9$OTݹݥeUomU]i2&QZ#l#ZB4oNB|pNW ʻ(嘹FvЗP̉ W7 :X22&;B8/|=ܯ1KQ8U=n`҃]ɀ 6~2%gRJwϴ;Y K@7fEOy}`xs}ن!hZ1ldHJp"7~5**ႤMHr(27CFBWmQ(4(JV.s3klz¤1/C1QyylK?߿ްhi,G}m_zps+&E&﹣qILMJfT"i5ybX3$'6֠!Fڒv 2ݾ 99SQE)+Gmy:eV!)J6u>}6BPg\(|7"ًnCkVL8M㵇zj=sW!p܍B|Cf 5o 82&VT\Oll;46k^sV̳g~IlH+0EFynmfʅv'H^g K3'}E2Bp+ FF1̵zMCFD!Ȋ\t3ө"-OC7Y YȎ1O*G琊8['l}y7Ь!a!!F0lJ&kM}"˹,4}m>,Q-nt!, ;F4^\XX2eRa*t~jvt6A]q A|2i5fP:y9e˱!-WƻME2Ndi8:/f -BJ*_z/BcC'՝|G4~9+fͥe,i k c+;gv 45Y)eIqLe/͋1 k*TGk_N>/Tr7s,8 CkeA5kR%bYKƨL7-W^ u"N墏 ƚ2}5Ȇ![1h9%0Ugiȱ=:Z`孕Aĥ#wb,Q2x!XҀQ KNwڝaa9pS!kʦ^zB7{%[saPO\5,gz8zW eFmZ엏N-Mbr%}- P&nj ;JQG409ޭMsYt 0(`䮇?D1gk[eop[9\I}*Qĩ{J6w?gyj8[WE@.W܋v#K[ac92q5]}* d"&70P3їOPjb#?Kӏb/^Uoؒ.3VjG(Pӆ$C,{I_V?khA)HS# 6GZԘENVsdO~g+)0a&G ։*yVLWN( Wu)x 8>عI"v""{hpݘo o˽ 'hnp÷IS>k]1[6Jqm,Hߟ\nU(=JhU,Btʀ@CmėgEtK,5(f̾20GGόr~aݻj=SzoCGkO뒔v (BInĺD?3 0AkӺreOz^ ocov/ G-fa?t2Y2?!_SzfgHKeExz6_ơџBmRRؿH 7on5N] +ŐF7Y' )͈;B,_S3V5ƻgX2)[Mk"DJTyּJ9b tV0KȢ?y^W>-" c^ffg2sBH)R$F :e> PJ iC3бVܳZS.l(Z,~Y~Q%9suT'Vx*;((ϪhYD-̝hP?vF( / DOb>YY_.U7gм:"J;b sp5%LA:s.g/nYWc.FHB4F!1[Sm}||ڈׄ@'P^0v9ǖdž6˜P8PZ8~ xxɁޣj, $뵔Js(qq4b͊tIPy 4*u+16io?̂ZvK?^pur{| 'dlN3b~J,1Ma`-n7`ܪ6Or X%Y=_^y\_$3f= CYExx;t.$^/35|Z$H/ #gu֥J30KX rؚa<|<2FM'ż2r 9zR;kӹsJ[f&@|^ 6cUzHn$T FL')]|ro5^@Ӛ[ ֎lD}Yw)OoTEX\"ha|ks}5qQks.s{xw310ءLPI^늞pd/ۙ9XKf ȝpm 6D$-Te̖9K?_Iw?D@}f@ر4r^{#֑V\23^sq\6~cS^W_|K~=ˤ R}%QҲ&= (ڌ(b!ة3dlU1$k׋2M ,PQ*5,u_?8H4Ey%rB n2F阁׻zv\ ]E%x*9*?} Uo\4Krg6mԼv`WGޮS%ǻ-CQ-@z0+Tr BknC)A5>zoB-'ް0:ϐc=AiFP"P B?UHŘП۸? Mh%N7,5z[;rmϖ&6'4l\ p{ޓqwQN۔4lc!' cy@XR% f|RsF!0cnO9T1? ?誮| $ӟ\w^y,9r|VވLa |1Ӥ(EhMoMҵN/mf/2zzFڅOՆq]ی}Oc5d 1ա"!pɤmJ&ߍEKIӁɒFY>^7xXxKDTcr#}(?%[q3kV XAq&5%ז.b -p, t`Gq4@I) P&7ޢa_X s&$.KJ! ku""kcIU67 =dBDK:Yj RY#]YƼT=(io82:\̉X 0|r?tfBRe_w™zlgsg4%zô}%̺ רqsB.i. mγg@LM!U h +qța.ɺLf~jNP7 vMԙ!83e쭼LlTbxX?_ݗ㬧[ V`WD] ,V~`qذ!cxg: [u{ZjٟqC-_^xH5OgcDލAfJDv'65>_Qx.վ O\j5d RM"[jӁ["#75cPQ @O `z\@=ʧ#n0Rő{2.Nju6o XEuîNfub4QpW=2vTuzIQNmm]˝?RS3wA5M$mB>`a!d9/~ \v^^u$泘;-(oAZ!M"'# +&C-BA AO$Fh&0cL X~u~h͊._D7B=u֨,Bip~ ]='sߑȊ %t|i5@hq@ 'tIF?E/ +!vO#(v(*#6`=;aT7o/V\ O)|573g o]*G|a!Rt?Lzfb|auG*mQ`=<O);Cg% /S6ANgc%͔MD6kfh~d=ɑ`H'0p+-|0:.R ɕQFi(݌1>(ci&t12.U?ɶjvE1H%̵aXAV/RnQ((LO~iW*_p7{|o9Zkz0&l& 2,CX:ϵ')lYVѥ*"C3ԝ]p,b_Q27/)yT}RuON+jQ&ᧄ:7@[M.Yw O\6؁Ը:|]YG/lm?4)snŗ6 g,>bBiN}.:ՉFCmNcV{ll齙4qR!3F^BY%@F mebJ*^ppAnD<~u O7qI׋ơ{`X3;3#kpDRzNhC|_+x GY %ՅWqDY3Fږ|_U}V[ЭyCҢw yiZ7G(k:#*\D¤B|߷TlpԻĠ4$QV)WJHYtWU@<۱<7d8дE5Cf$(țj5Ma_uAX0MNdj:rܗMbP|C}~+zaW[sm6Tӕ){s\˄Ĺj/T_eDE@tf&LN}.eg}١CmpJB sLvMdlz&Թ"a͢?o<!)GZa70{\Cscqrk2yYUFo<4 7a;Cn'Xq_\r=཮#~kxi< Jla 4E , wԡfTRvc>e*MC&~ ๅ'j<1s#bw*j}bs(\h!`lQ ~D:2cTϕYҰR̐I o6)>a }iֵu< H[$\t? v5"#fX+[0(~|ٸjx춋hẺ<Or[G (q@ѸE8 1;B-5E ⽹#]&gTSƞ[;b=-xԢ/~YߩB{g)N5힝,3QڑaB7ʿ%SlXThQyTO%T>C:$5 /yov[IM]beƑuBڍ@MFT@Dz,:5bp"fZMr)oȬ}6P50p I^LO@$.e`m2Mޛ-(ҟTȶUr`+MhLYhgzA7\fl( bq2R-_&Ɉv:ҹg ;<tDiAԦsTy3$ȫsHmG# c㆐W`hItڣL1K\kuXfר=55WS\]JzW"*$uj/?V,|$aw:Z>F2pɜpZ0E\qĎ$6J#p .F1D1%AlJUDZSaľ||t"R}Wk82-ZO@ٝb;H;r=^dhī~|lANV AϔfP8 "L6؇d3cM&rXDj*ɘ)!^&A.v܀t-:)X6/{&VM0v i>G{A|M xO_J3$N%3i-@tLzy! - y򝳿1㦫͙~Д<*ٹ nn'!1C b6I"{c9nũ2 z[q4bѝ/uꢥ\3״բKcmr V4HUEcئؿxT؟7@;uYWR듳 PB qmQedI19vJF5l(bH9)q RVr42ބmǿ翠zg03yfkk+g?J HQ֓U+-V}Ȏ@Uߺnτ;)̶PSIm\),_plQ(!Ȼ(#{OV|߳ Hdvr\v3_&^+W [6ZϏd͟ƴgm8\rWp9d#u3ldor8Waʌ϶u 8\aerM^3yCl?KGf_$R& }t1Q[6+s2MUftr| o|1HՀBRZ"F@sǀޑe憿S>65p\0rlnƦ-j'+Ku߽-v yKvC…<]1.e sӡB,_!p`AWYF36kXi>\21ԏ`/&Uh0i! EpˈL^ŏuCa#S!R/c/apuѲƉp6j5S(Xg bW3͗ؖ'~j1' s}LE*!y0rV c9pn߱d7)Lox@2xE161#7vHq]$\"QdJ٥"Fׇ|״9ni0ta`J֊X6=-!l|ۂ,z*~Rv{so:\R$M/z8z 6_}B/-44ds&9jWýbZI{ [o ;yP|#$b{G 4:/9Oy6p:K E)}0F߯ cͩċ2 {TZy֩ʢA LNCIlE_]"꩑YCnFz욧ɰlX:I5"olc6{llf w5)1#@FܦL~V>aoH`5-lСa]2ePX.)6z;9~D MpTq<1l%t|sY1Td+fήhi m'ԧIEd"]Dז P@i4pyO49[UOóvYtNDk+jw4"`/Ey%R+.)ў_]QxQs*b|~GvE!/p pqYe2 WC3n7XS3yڃD3#*EJZrܻ92SA `r. DlœfVۣ 3nl4{ʫn6ς= ,cIve[~_K\[FmrXsJ9Sf"\+!*ZYh9+V'j͂s4aq4T/Vcjp.7B.;|c(ߖ[hwZ=;uÚ;f Yk&7-!%̸p8w4c%j+QHScڨG~yl hƵҒ_ZBnQMA572# ?K6h D5"a TH|c8#΍Qb>"XGiQtῄZ?\q:XYEK'J "FCd3qJ4O-ݗ}oj,vׁF3Pgp3ݎ9х@N ;{ U@ِKyaV8M;V#-?sw'Œil] 6հ]Yx~w4vk,TRȉ +3Diq'878 KH/ I"mʵdƸ7+CyO2rdƫ^&xArq'y5uppCo΋ގMXC6/64 f~h 4jd؍܈Ą!oSW"m< /3OE1|,/S'} e 3W쾐-><O//ǹoT'1ɇ-ēĄ+?nk~*/ڏX{v2 FQ?aI>JYY).q|.ȵi[.ùd#:vqL ]g+}dXCfQrԏfAfK6aY!Q%exB (ua$e (d4-ink=yZfhl5:y{F8q$TmMx(鋖V~~ dmxFлmNl2fjzL33 ~",g_N{zrGz4Df $HT!rұxDT1DrۓyØ홹B3u"Y^UBܓK&| aC oÅ9_,fsghBَE6\Ebھ:B@OZFW\ o\i3'xCMl*Fw.73? #!SxKl|h_pۏG1OgP4J Q7%JC[ ͨùrbt"Xnw }RyO>)i&aI4, C,KÈ%YT͗6ћ fU%s%"aY$*HԻ6\v/jufXx_+h\ߏ|iRKj*RcҺU9~EНFvPuT!Jp.4(KNq)DPDpC|IbS OxZbV23vrUb:dHYE@ Y=yHUopx5s@#x PDݨe vsLge( nK6}pZ)9~hı #ldK(Ø0lOO:O+C Ɠ\7FT玙N+'gC1ZLuS:  IN1dDwfbb_= Nѯd&wTe/,RHK-.0?;UCqwҿ$_}ْ%;}v#zГrG]f$6ackiwUv?^&EJfyWh~.jҦ][eGSL&K[r&|TPzcL`B@}7ιIz7=*GS"dg\KL .FV ; _opb,$Ⱥ`~X XS6\귇YD#.m,*PAo?[}lxmF$ИיsX?xKT8F mK<uqJ^u\0t"u TiϢ\W(VluI ,W4ܲ@Pd &PFggX3A%޴p(\,^] t!> oLm)5{IӲ!Q2 ֖IK7t; ?Q aUo/νgͯ Ƞ n,EG\z̐b-)y~US- {[p-mQ<7/_Tc~r3lm2ҥXk&=2؇ɌsLa}wDcAa;EZ\U%灼V"9g|Ӹ>L.Ӹ]Ť' ,liۭY MYnMD#,m|E =~I7vfc8κ6$^ƒKu-ZpPٵP0)ܴ:Q^ż,=oFC8ZvaZoZm_n{Һ 'yk~^Pݐ 5\s| 3B79i2$uT>`E)n3#5? ] |~RKYt=,4^5nvKu.=¯JL/[qߢqsRbqn6lW F$) /uawu I4<Ԥi$TC1ܱ.oK'OR,-Z)"<)ZTᮥ9&Q`Zj<|mʡ AN㩓 f;:yeNcGO1b",ENG&?Ez;~8u&>T7o{q$$ڬU7.u.q|XWB'wIoz6hSVklsɂ:>󦖨]zNS$sip's'X8 M*?z*_:Qvٮ[mTf([;n ,΍ W֒ "R2!4r˔q)72=P`:>&?+F2 nސPkz Ow<햄9!YMua 0҆g~bq ׹&ق9DzHuIzn d`],-1whæ0icQ$lU))dƇ>?n1JFu]#ssgVK|IG^*D*|e»#:krim+/!j%F0lGfQYSIOr$v-<䎿~pK UA)M(`t@m<1l!?+^t&5s,̚wj:/ ClTGT61R,c+AX~!#3.=?ՁTLuVj ]ͿBEMҏ-Y JI ]I[h܉4]gbۈ-ul'^e٥8I[_ANM~h5;ɢ32sƢ̇Q,Ao%>oMh*8xSJ)@gm*I"e)֓f,'GC[#MU; \Q(ѹŪ܌0=.XFbܬZjNv*Ҫ+ꔽ$rߴ}48"Nio!pj'jnmI_9*3qhEQ ,oEǨd0& '\@Sq9~- MUt0(:#|@MvZ~h߂ G[c9 J+QX`o)*E~r$rTͺy}K9BUK^D\ gK&]a`7_0L #U0`p~OIYcȚ#Y{51*kRSw'awZ"OEX ]#&L+2vf)@ǩ?1߁_mg ׊'JEn5r5GjqOJR%:ޓխH Kw1X9D1Yl~Au8k<؋SIǿB+՝By(LDž/$wZ8ಇmOb+m;~O5lr1̽6raMin辄|"rcIiU:nƢ 2αfا`F>bQZ4? }y+_e3AusT$Gy#J?@6tsݮG+kl @ҮW7KR/ V7RWF SN@{1@-A!p]zU#7f_qkAJ fGn4X9Rh.Ff"8O3zwc]R>'F!o,)k]|/o>Ctu fP_HJӳƷutTgӬ&c-T:߱0NamdBDZߑN4#t>pon615g-חx] ALC㞥:V2sjCaSj%WM${d/q m˚~a̲~[{KB!F<`%uKF.մ*\%L@6Sh*HU/z3=.%%jxWܫ˱ /l/i{< pcošÕZB~dkGOڒ5ttIY5pW3ڤĖ[D&g8hwdG$8ά*,,w3|bh%RN@•ܔy;z$817(z~,9>]W^\D3cDNy͟WēFTNoueAif ^{,L r,"QO$ڶ)_<1`~)y'&a25˚j.*/8#oA&s%ĉߢ^Ia~W޸-Da: ʱ}x6l:&sv;^6r\Z Fgsf(7%9jҲ>y'U R, M1g /秾`082wqk# ?\ R2;߭%mU.wC\Bg7B@DtJA#gE_H%Il?I˕۫.i=sC0R ߦuD'H%8̌{jlkt&Ѽ>T4n ^g-+w}~o&t˂aAy.7cA1$/Ä,|X|>I$NR^|\wiUbI1Vl`jJwn!v#d}idPrv=}&PgnџA{̝ \ĩr7jꙭ Ct2oz0?85|9Tm~/pzV# #hm`3mPW “Wܫlx9Md29rJᢅ3ˁe=;Jɬ&bHj{wi2*EgW0)G$\\=%»O6WN0&gf8o}vyvߘ:GWe5)]RkY%GFEh ENkwǡ{`> de)37dN NEK&5ihan]QwH5hcm_:/?{8N)};B?/ybA+.A$𔘡N[cö=[S.I3l򗢷hLF5a~?AMC j0/nD'/kwTIZa-l㘰2FVE[(@ڝI{oQg7(jmW;9k^'9QB(?b"rͿy+?9JE!?лh&.G$\kn$G MܧMdB +UWG[tшl]S'_ҵ_DSR_Bp_Bv}ͳZudЏ1C0x yi6 Nk8_êU!&"71 /:9Syv9F7O{Mb: / Fxt:TLE5p >y;ļ>g:-@K\mmw|hVVD =[&Gsa+B/RKtꊀ>վ4a;E(nWKU6 tS3jt..ZSyq xvUL:ŒP?q1MYhճ4)+D)Z/s|SP-E-y! | "L飨@Q<3EJ- MhU.3jnSn E!`!볉m8%yA(=HYו]kKeA}X(Dm.1alpx(qƧ"h%c5hRN]_mp|0rewn@#Y9\:9jND-'B.U@Oo~O!9/!a&/M 7Bn0m@@n7CY{ⳁЂ[kUXץ6[nPG}sȣ]P7p )"f DS" A0S"n\DĠN{("%0 <_ꯛse#3>::o9V~"vzY2Bh8RbY>3@|S zm:ium#cHaRFD51Bb E9쥫 <\[1j~O |lw"Tb>8_4iJµusܼjdZx'Fn&hV1>'"J][ojf !dғn>r;+v@ؽF*p` vTsc"MM _O"A?[)&ꕬ98^$N .йA`uj{rtVE8'Q169T;^ 9qdrq87sP`2Z U2 1ǎZϐD\&*bL:麆I1c6JV3_Wf8VK}BH> BE/ktũ5! ګ>rYF@^}6s=,P( .?dϖe8td;X#ɇ:g'yY$U6tj汕X)B}D( k J)"ᖞ +ukr ۷VBM̂ïI^^WQ!wܝB@l>e///:C nS ,<`7֊ɱ@Ry MX^^itC_%Q4 R3 gLÇ v=8)8|luT15eջ6~޹OhNeW#'߱Fm>=RZc4 GʶR+Z>M/ZQ+'7Q'(%"ZIfkqSUX6{_o:zrQv(POxu ;LwY,Ej2;9/\ x7&q&6L8П篯V>^wG9~4RӰ-ùd-%.IiP>w%,*KZx`"+{`=pX4Bled;EY&nE&vVnm 15g|`dL #$Bz eAtCޟBέpmۖm`T`oBj妣 hn.͛QA;lþ]N𴕰U1<1m0'!-eco.v~'TF-Jk暔&<.)ɶC 5>y`SwĻ!#Ѡ1 }I42ｸUlb"\!.l9QP@ޜop˫f !L/y:dacٱx&,0B؆7l+B1Hx@/ʼn9;.LT '֠dR@SC$}"S`>xvǷ_\c<ƌh"N! i(4PKɩ`;,x*BQZ^B{~A1^R|cQ4)q܍\;;I $)G [QN[uaAnN{(`uCl TGXgDDiMx$h,ٶaIr=YX̑V 07#CW:be5q ?%ʯ#{ܖ ḇ=JǽWB[ݍ$fD*/9mvޅ`&TE Ȧe60hs1W5)c%$/vFAb{,,q%} m\,|ƾwU[\ʕQ1phHYFqegVVxT}Rg<hZQj8R0VѯBBkKQj̤eG;O :g"G;4m[d̑+>ֵ9*6RZXɼ2Z!^aJ Fkejd$ FB0$׻bhj/z0H\3'jsyGV_$)c3bo껝(8l8a9?޻H`Vhö:T.oޔ%'zob0ʢ5P.\ SU4k0ÅJ{]::,*<4 s|HqZ 89 #pOlditňc` 1lG3i+87SϪT,?JɀM0Eښ 47{cN*^ f"VU0)V_xNrFe91H{ Ai@"=ď\baHӷ7 hh <$M3PzU #\ JJe%i0fz}ҕR@ sY0B-2!Q.C|B8_a NMb?f|_8tJxZ).})Ke NݴLt,n6_u>>5k9n^η)shI0 mS?H -.֢²x;iYįt*`ayL##O;(qW7z XU Xu:{r>øZÆ7Na*Lo2t 6{:!n-FR@QVte*sŨ~IO><#!"zi2O .E.D )9@Da~4K`_ntoɪ`{+kX]1)"3 ެ iB0* Z0b*VA dQ@.yz4nDi>X<}h\LHMѱ*!@es-^FˉJr6%!6tŋf9֞[%eRթϠ.Uݵ#r=㪉Izx&6-=B(C82\M2;1B`q"d'W lVl2`s4~Zf3 sW^d).dJc:hy}f{BMvƒ!Fj;兪D7Σ{UŧO&xsmeWñVndm/Qx qnp*5!܏, cŸ<8gMUPD>^%sK;;LC5:4Ŭ-3aNƛc0z3:8:- <,«,yTT,KC_rLS-oػ R뽵LCxGQ{98d9gҘ1eJ{QuN%m&MU\Vum\pGɋSO .\NiARz= !OӅ:M]з[`x̡?UuR0wպten7jq[*H*9V#ioX$~WW!UcbG9~@ dPLIFGh@0\6 aT2q}Z,s-Ex\{ԶD҃%jZYtY^Bb3%;80`aiy4=Óe ]B7@xV'":47:Ƣv 8o!N.Ό;հ5 O .|X*ݸ {_v LD9/<DM-`/t["PO2':uHAyJnm:ۘ^A #I0nEaaMm&W<5UIs*\C̓ ɤ.ܓx c{Q0QpĬzgK@:-Bؼu"}rx} #2Q܁c/}ΊHg?l O&lη7):- MxHE`NdKR}fp5zR,qKŝr3e0!8+\3u)#Ya,ߘ`Ot*mJ-i{%zYoˀP|'gp^f~ĪHz@'ԕ} _O0Vm1Q?unp0ןVB7@Ϲ4DXY$Ks-^̴}3@ ve5Oyky VvaR c޹yVPz(':r'W8oe`dQ_?uS٫U*ID5ewe4Ӥ,*ǨM@쾑ݑDo4iB)dOH)aUFvušųCc72y›\4Bu3PgW6'GK8Fu՟Tt"FRh~%el֯Wb?:ΕF|ӣԢ> PvdDe+%KIKi܏v* PD#DBVfQƯjgj.65b]pʩؼ>ٍ҄[M(+ i2zb2a d Mַ94P$[D؂^PgSHA(WW{Z:9Nx2XNR]M"O17K{" NHZ:<(&lwe`/7"]+1wC"Dbi/'izT0KARa+`XrټanC}p7PSYsq\4VFݕQPU''M {)-%U-IdPcwA-ǁqNXs`%u\DƖJ$87}4l<q񎯹Q]ys҅q\ 4'.Im6H.%*q^|}ոAq3!BUe0Mz0V# 20];fC^E;Fz౫ FKqeJ~C\ +kv&ȼ[BaU SJCGR5Pq`mS "$*1iHSN(-8Kꟹ&7ˍKwü"|ouTt[@ܓ[C2.366fl %ĐC(MPON&AM ^U>I ;PyW19tP_~rz&`y2qPzԻðWi(Z7X:{ȥ2{ru_4Gڕm(IkT^'XRMl/_ 7]|0G-dMAI354a}&cv}f%GN͇O͗Fgp[?Nft;bBB19 ƊSRRyBs]]9բ9J4; a{(%?˘H[C8ݟ`&`J{5ѡ3u!~ؓ$qH*ba) \7Mn5 frrO]5[=h7`.GmW[WNn9G L8Ezl.r-pBHWiPb3jKűDѿuSp[q9G8s}%pq 3_eӵOqܴ|MbLcY <|;m?bQPDp~{}$W3(RĉJpߡ|)8'[m,ajPF"##AIWgAk'F][ö MCJ_8`er3=I>?5k?s0Ԟ4.gf ( agZDu\4)1kR8]Xp#]t3$O۠An5-Nj} +hDI>] u! !V(ܵ+ qʮg'QmCi)aVA6LV'?^be~IN!bΛV!lP($jɍZ]"Z8nhF08gǘk+7S#diɊst,lWT`tCیڼ$䚚N='(L?/քEϧӘ<A9|FX =E):|}u,B zE"eAvIm_Cj G>8H,UU<k3o.=M±'j&'IaW%oȠuubqkڀ8H`gQ۬Z{Q}]Ab_*n1B$hb] 0m n2 ݞ~ZJc/Ѵ |ItGI6 :9aFaKn̂Iͧ$3Aj;>B~mQͤoQpۘ]#`2?iKבvRz'^]fQnyrtN6]DS*ŒRHԑ @e]%vW9XB2ĥjrM"(-xV/ GkT %WÇˤ>1]M)Vҗ^0"o\䚳0dj MR-}]њʭ`C8jkt%yrHe¬*rޖ>~Ob0ZWąg郈K]e-'-x#NIP1F7:@va m@U꿖дLp3ۢ0ɴs$A<׍$.$8͆M@2:ft9Qӻ,FȊv5ʇ.(%ER9pC2sfxx\m7ɶ.h>Ŗ"cmNuN8س:VhVdJGULVծM R5R6mʹ pCXvCT{_Q>D ޣJ`JF!AW8.&,ØN}Џ8L+!'A7Kz1B#N0lev;&T WmXJ[ѢaTyك+ׇ8? hv҇&2'lpUc cTY,4'"{pAF!MLFZ)xSFbH ̮w]n߶1;|]0[ss3ф1ܐqߌHqD{hت-0U |볨)ŕ_nkk$UŮRy;oyX m28v\(I)y>:xPʭ&<=gҹ:I)u? ҫi!Ylc<^`"bBY-WV˵Vi Dj XڛUXH::-2fԎXKʇ -Ӣ?#wLЗ^HE!2[xWHur vF>hVb3 :=]2J[ m\Dy0_2#l珺p+y xz^oVtm̑d_>s`ٛ4;c9tWNSpN&-!k,\I d T0e_n#G<R"UYnӚzuSRl #Tf*s!Oi]wI&ڷ@Gr }91m+AyB5G+ 2u$A`#-C Wgq}bI;^?k>fQջDÊ x/n}vr83!UjEBF$]/ F#l I^L8u=`O/{tYNݐScNlJ3Iot8?H3nPwƅw8  5}mvnܜ[- )hyrʰZˇqHX  M2iCK;,08^khi1[#"Ts!gյ)cYRd82mOTmzpۛ|snPütYQ 08'}7tÏ|<[1yGR6㄃G/.B;bA M}*Z|ƽ<xLĀކbfEsB=J9,`OIQU2}6z`V$nw 9Ϋ|6Vv9Usp%QC}+v@a6,Q3)%VT @?C~.;|IRlj 9s`,(\0;jE+#0?̊ir:rjg=VCdܒ,&w>{ E;uX]ګ&(o^jG'o~O) /m[ФNz\śdAS[eϹDaʄ@jfkʥfTb^+#nr1~m.&KGH]/RŸw GAL6Xݣ\e=1LQНLG\F7Xu4`N>%& }f I2%T C{BCD()6مHȌ~@ǭJX5y>p ?5Zvdf櫍o".(t0I33%q:=o3,Ù"d˂_ UXEN [V,4L^|n V3{IF twNzDq3]>cȬ,Hҥ4Ury}ԥ bE64~i]ےwIN*2`B,2^0LVWpo+5 8{x7ʜQ< ľ՞vR)dӪz+0"ֲù]r`pklǗPo9fsӅ޺q4*d5}\(q#F  P1Op] h ~Wc1As2txs?#¿QGCq;z+~c\Fzm~ä*;vr?JX6r+ww=WP*icHs?W-}OGԜM_ބ3|"Uh89#Zger,$|[6ܾIeuK3Jf)[;jT~9pe N6VqabC!ɑQyzd6Zt &bKV}Sw TX xd ׁW/zYV=1(_ g21IN7A"aXo3 }ƕ ,lN;eNu1]3[[fO[Ȭ*6 h~ |Apc˻8pHK-MbLug4v.s8hUyGɈ> Y9|d:$ko4s՝{?>2IyOVr@/ۼd #q-!N*[sw.]^(^>"r2T}Bw,֤X!j`-/L`q~G& } $g'Q=i}t^e}dq*j ulKW S9MOW3`FQ v" !M萪 He2czxs8v# co<m#oww"ڥdь( ׍U*u[yW0R!Kw-ɂ\Ϥ^x'1g' ٹO+jF#+RprRHa6,n>K.)G@h]`\O5b=9/ Wюc]a~!`j*V,Rj% ><wԅ.:*"sWq̨\`i/@$'l(~#(-^T\c6gGoy1uu /PypFXV=o.iC^5w kfٮ bܖCm=vP<3;?"S 5n3<T"]_B`l{6=(щG͌NJpk~yj6۱$ނr6X?8Wet~}wzaJu [>yl̆:5"17Xkv׾%=XDA5 1_ӂَƵρ3&xW~$/N&I(%[X-%[}ҊptH}aNt ~ ibRV3?&kB Ը{E81pIѱX8QmX|M-'$k^`9<}}]]Xm,Wlޱ,cCW[낇l(g $R-F4{H~\/I1u9֗FMK3}{U`|%Fjm寔z]*JcD%&7Fpi+; ؛.e2GH/}hX*}Vb Jc}!bQO8B7$ea_N;],,2 Kv+hB5;ʼL&WSA(E* ť"8K\!xǗ7ͮ&kv.aO@AYVSg]`RYvi l/Z ~mSo<20Y7LVҹaWS zB3Y<Dߖ©.? $ v3A!orY,fF=T1 uQDᦠ)kGd%ۻd+NDؐ/v!cWNVV2I*-vAz\I蛉.63Ҫp`UJJ 09Dw{4cvr+0 A.Ao{*Yq(u6Qmy{ѬaⴇYy9vIS% 9 W02˞|uDͤDx%vJ&|ޥ/BN=0W~/CYئ  Sਧ4(`қp4pB:< 0k=Bϯ? $k\F"%|>#ų:ԺK*| h(DaTIq6ƣkvipC]1HQrpVD3 Z]aW\}"(t9wpp<`-/S$b->L|ysUZ(7Ţ7XyLo#sJNҳK$y5B ȫV%Q#i)"{t2#y}o6ێA>PhlWWKod Dzc Hl`۩1$ww>:xgez7+>Yys":|:^a):2v@e_v b4"=H s^1k76TsOf @}or+>1 43ҏ{AZ'Plabo: x!5E: ?! xTph1UZQP Ǡ1M+6 4nʻ=) 7o/y&S0# fxfⓚZP8;-<K:OrgWFX#GГn^E9с'D9?G\)Y"pW ܾ긊isie*\x%72_l-x%5mz\o}%w/Xk"}y9^DVT ? NR2P serՖW~U]{1u]:HGC1 ;s,#"H>:K?r M_y~ 40@)&#FhT'ۻY \9hy3m4|& ܬoaiv_"u&G/iI/#Yj4è>-W~.##CTycNZocM̚My&'W cwKj xN WZ ̷*h$Kk kMrjPYZy̮exDo[K8baZjNӖś1PR97sPgonϞ]n|&:C} lx%|#G^|Ň1Q,P 2Un3BqndʥH36 Pt_GI?p 0ԖyG_R8?4#@(xVvՖXDR, 9/.uunFDՍY*xNt^SO,u9烹 b`k-l3Vbhj~ &RCotÅ B'B^S wH+8k3 _PI{EI:6lrUs{fºVuCEϳ/b ύrT ӷ`9tuĺRqg7tȞ %-JyNʛ"h+*]b Ҽ y^epuo n-џE Fړڒx{N&B59Wko!QoYp;fHbX{:fٔwi;lهfHAa:'Q f+ҳTxT}kM͂;ʭ᡽x* X`Ґ4zfX,e؝ 2D<5hS $Ro,ozvZJ.E¹ *k4A6wC$3szGS|0ueF^HbmS|U+ O\w]XEּSKv$x !hT5D5QKl{ٽg<:Uu, gFU^KiEDK>FQRqBI'- ٝ՟rޜ]KhzQ,zTE>SbN[g]?㼟/ϲjpa;`呖if~^n9CutU+9Mm.űǟ<$ 66P!r23W~Wv׼y.%t>w 6*':vҎCBgᩒoӊVQ3t5n~yEC5m&~kR4޾Y! G\ ,*`# .o+j+6~dڲmJYrTIaa]msO1 <<ɹ, 62a$$7,Zwwg_ q=$0#kPjzJqcV"Moƿ?+_!-Fcrk"[e{ %X4)KZKK=UW0uf(L'GiGfUh@Δ5bu9<~nbo&U:>% a1N,19˕FIZ<`s4- /Md c&`{}or"5rAP٣QZ irI.11U,?(?2i҇q(_8u!7>o6SUcv;CP,I%e&WR 2P{mOFq!vuth/{;@X#P+^lNBk?EKћ!@)t$B{fgປVNg[^% Ķ!5aŝNsWU]N(B9G \eT l xGrv1o|z@OM6i?E{'Rq)Gu+D/81\t+]A`bզ~B\0\LU6 >6Rn( ;=~մm (%V(ۤ nB}P['yG՝#J)'V_Bd'%v~ 3"hb"6u{J@<\Q 5&PZ֎>i%++PgfyBRBm!]W_0)#i7_J¤Eh⿇Tx~78V޹}"r'{?7jc,˳[J{/SVиM?AAiT6G0_=Qnr3ݼ$݉J| $sTϩU\{[zpޒH c ]Hk]Y kP&i&'D$ MRR f722ћHBw ]HE@bP'fB,S HdjZ u^GV-u;/_f,&S[[p6 FA6a`TeE5P]I5Lw)2A5%3뻀iN*E,W"lѼ%P2 o4mLh ل@*+z-&IL%vY/G'N'DtrkwĎ.|@`9L }2\q ;QXo ;4.2 zTAS)`YxlUk]=z=vR8痮de tnX>ljSp-Tm|w=%j-Ea7Ӣ>()!roFh7 "@f~*J|Qr Pa+rWڗ|TB,@"5簯#Zgmn]ٜ6}pճ&0-9<[WiCS|ǷB呶vnv vS RSbDԪ wu]U>KE,B>B൐HfQ\ˊ +h| Zp{|}~%ZPzXf`֯m4_S3. enT$Lͬ6ĶIS&9.ğ-P6P*#ZɖRq%#ߣ6Y\xj~;E./xM&#<ua,mOFbč[) ¾\uUY ³Yk(BDuAIP"qlUs_";vX'˰awP7zkj']\@fz];:||!'it̪eڃ EYOP v]bKK$"9Ee2mb*Ts|TyaY:<= o10>8i1swH:,V \yؾh<)Ocӟd7TO /(ץO@<9YƆd4HV~j!M`20]Dwz媅Xm#lhJw'5*44#IxgO;Uo٩--f3jyZb@<.68Ou|)=69"TF eAWuf <:!j6:܍HB%JDt;RQ C@[#g0)=\-g|..0Sz[+v^ZSR7WPo◢ n>aP,ЍLyb06i<ׯ] w9e_RY#TC&dbiPU<YxgL}Ʋ-]dRw\SJ&FGmykPK`O~N7C-i$_ɨc畇eb6/ >T09J05]^c a7-"J꾀OxݶlJļX}*Fw[ LG 8ݍ: -`xn*ZkPzlE]¢W5`л2*.&j*9S$9%1 X*.so愭v),|La8FqCיh: tI$x=oD]gz+Fө&+J n{vN Z@́ Y|(BtOrB#j~Īlb/'Q/PE uv-G/e˲-=B rX|$W.$bt<Ѱ4em%B@!lפ]ijआ9֎)Q5[GK,6<' _*@vt hh*7ҖmǢ,gT€2 &tM4QL! Hڒ/xt6xJtVH3SR ‘ 6IϷ}[ `wr 1yCRQ%a6)<]\ieebPqrl".=4 VϢ uyn+k汱sxɇ%ʪ=\TJ6NֲZrPX9<-+/e pxuߋ\3ǖ$?7jWn_ĤL-12atp.ia|蔲Q/4 ԪEt_rºH"?6FK<-x:2nOW[P¯۰7"R]V늈ηk Qt! Bؚͅ"$"?umV',v<(61!- +=fѻ r1Vrk">kIZQb9tYYڍ@K]P'^'Dj:3 9YWpx!x_ߝ?}ٷ nׇ Er o7,NZld6k% [r0 6-hiRBvL^NU%Kx-Vp K^^=][w=& QnUW٫$=i. Kܟۀ1}aλZGT0AFGvRiL10ez˖nP#h?mtx: h( 7|62`:+)[+d@Oî*_<V3d909t p,2՜|рd Ș6t}?xqoF\6v!:Klp/eOzDO DR\lhs*ɺvz,l&k.ң?Iqs5BPyo+(\!1VJMs/aLeDdEIQ[B O`(iC4# '<Ւٻ->[yJWZoihJcB^V#LmA\4y)Lcb^=n8jr!֥YwbƯF?]Eo6:킔ëV|fH2 84Z|1:oJ"KHT$JœG͉Wo77kB S}Oe v_;YD+I5jZ0My06MVL# Vv6YSFfb[} vy : aX@|ߖx|q9gigkx[48a1:ąS[ĎUDds@wxJ^BIߎCa{4%p13^URn8RgdY =FiNL]:PsbW(1[fM204p8kդ 94|mV^[ KtqSׯ ϶1rN}ZrJn@U3]?&1VvJl/|epxQEzV (0&dĬ5aQ5\$yl[V](ٓ>'zs+#r!_Ԃv0pӚbo0P ZLY"_6YEŃuRXXq`löPbvZK]Aɥq]g+ajRxn$b8 -V!%?0#(-5w7Yֺ|mcj~pEX|Z\&Xӎ=Rv:<"ZBK.RAoȜ/6fiY{7 c>Ƣx|pǙA`T,;6]3J:CGYKc q}٦*ri <.:q65S "՘+dR e.p˽Q W㭔_h1G#wo Judž:0.xnØ>MKzSl6xA񩃧uD3*vϘ_>κ|/R}]\Iq蜏0-9{e Cn*`d&ʙZW95#]M#z2EKC,r@[o԰0:p9Xlux k.'[dOd$tQm!szIX,/CĈCtR<UT@xX"] ֎qI43h[7d0BNEQ=0[kjg4Vk~~)1S˅`~[f?1eWԢ3_+wRBhlj]s#]M#QbSX*lRD[+/b; uOʣg'\_hN>zzڙWz$"UUX,J7Pb&v (Bu*eL;F#п?oo"P,zA1e5߂!Xq1.[ 7[%繑Er ma,WGq} T;'@DN9]x8K'%h֗7)y.# hz|`Mԃ88Ԏ6vp œwi3hOJ$FMNcR)r3YVxe|BM۞}W^ÐPƽo G& 萪Jyx`&ԡ`lO`(`J;-N'5Ǖst4n8I):\W +ɇy IU3IVi;=No.>9!'z,ڢAM'Gũ0c9Hqà4Me#a` (L66z8Zv`Rp&*lI%VKŁ_8Ec"}Y)'Ђpӣ8la<݅1O^ "x\vݜw'JQ◭N*ӯ`oɆ'7 7!C4,s9ĤA辣c?}+{җimgq$Gr%`|]F{黐JWP.HD^\9n gWѱ) @n=8U[9;Hr*pyj"WhXus0u||^W‹2 C{n5f{OX mOQ_{O"}<.\,<|7jD&md@퐧Ui\9Ma2ȬAz_ I-ٚP6ے'Di:}|Gv۠Le^V( d cI J 7:EqHs_i=|m ʂpE+n`*ؿ?d@N]>rO_Tw٥q(>qKueA?r@~,O`]]]Fvg:\*FL!Ԉ{'](T$0y@P G듿:R0FEJsdk|fVQ%{Ee Wn٦YTa["-#2+aؔA~')'?u-SzmߌpgwcWj ?^f܊MQ$ C]ܣ- tȚb5~7>e;^n13n%e7Aиz{ $RcpW+d.b{yy{Vi- 0q @8O :e 62^J*RpY2&@h*38JKT8H[lKV$ӏ6]!K?T^qUWn -n@KfQ.DQe)~ZjTs|ڶ5|(\8'\6eqC"Wmw;qp06p+KkT ZiwӚRGBVeO7њS|tbU + ׄ0[FP,댾SnݓgX0X\v1 ^J `&5 ب@Em( { -J_0j0C3):X$g?)uh-b9Gw_a%Iӷm^.9 ?֧- iJY}+nz Wv5Zr9/%$t!Z\$ɢPE HM(Ƹ0@7k"iz\۶3^笢>8;QuSf-NW DxY?cx} c˽݄s/2W ;G!%%O֨곺]*mjb55LȖHq>(]*u3˙7+`֣1O DW5Й"E+G3gBtA0OVe(ߪ\q!u{1L#]uAGY U,1)!:܀Um}Yzi `K]rk4.~"AkAu|-Q_AV_)iJ#ɮGC-5Y[]q'ˣVL'Z*RFqyPiMjI qM :|[0X8"px4sqJmas, LݑrRĺ2Bo/vڨβ¿ |L.qGD{ aT=t@ =qi1ڬޠL1~_ -nJX0H6VI}%;9XȰxMR-#/Q4nW?'\[5:o!#rl?OՀb7ydA]z jy#Rc-=6z:Ig?t;M|nבouW?m}IO,O!$>m]!5SCC9mU9L5W8.Etw*Su?/C^ѹ𗔻$~;%|-!/S>M/aզCі[fuK^fh˲bQg?j-b^ȹ m0x"ZL%9)&ፕ93%Vc|:-qUHRV7$m|plǖ Z6s;tR˳_9ߚ]v@8X,`_bE`(1Ana[09"|Ǧ fm])ͤƓP1{}2T<}_ܗ $IIGpBE:m!C_b>Dx wK v 4Jh Y`Z͠ a>^l T1ά^.:æ:k/}Na׉ȧYqkaN}y*+$[~a˃gHLJo=z2{SvƱ eWBH ԹzPʪb.Z*wGA5nv3shԫ/sѲ4Ռa =sO옞uN^@NzG.kÃgbp4 %43hG3R-hZ>9Gb3pދ"> K˄:B7b [>'^#GW-4b4yWB e{(B8#-.z}5׬(p,uIxzN޻j{dU\rn*gbK Χ$I4A:V/<<#~>){N)vŐk:3% 採C*t(s{UlN-?h0zmS v_S!cv.P|-\ԡi3UCzԽ7"JH,J8ⷱ6lK(җvixR~ e2qG,Iy>Pam-67#X=esYiP`D^$׳m(m t#M/\EpM%*sΒbq";Wf%¾oeM2J{O`f To&,cM[S$|lgU 8F߫]1hf\ ## =Γ09$# ?o.ھ &B@0j7arj|#B1v$%INZӒV 2hB~V] }-J{8Xۖch2nSC~;ƕTd'Tes2_z^2>E ś׍1X-,,G״>/,yiveǚ D%6!ke6xꭙ^Yˉ.)8Gr8|Y9ͬXNoC[VRO!|FC&o({[*+ë?p`fq=c<(ݎEbPKWBܣ,[l5Y#1Kk>:c/\)A);#`k"8*;EτI26n".,BH.ֶsOLGMM9o1 T>5 5sC4©ؐnzDEƲ8G7>IzʙC%?N:F~ں cNt[oPfr=ݻCMr=P: ˮbAZ2%}43$mY4_tMG`.D[QI_6l T%Ud~ܢ-Qե4a8mP̀F!m>Xz]OYϩ$A H{>f"S$RoQvrL} O6_:Yf8􂷙75}䥐_\:\a9ܙRЍ4Wؘ:a da[@o`1YwJ!ԙq *1 c~BF:T1PA0l6N88 !i+uݥ1Q;ό E+,!"&'/ Oy](Y,*P*A@oa]TM8hM}Qߘ_YBj2kiV7aOٰYG8ŕj 2ޯP]z(.LHV֯.hPPdzY_Qm.Kz6G hNT pwK:#yKo&Xk6ph(zˢ;|Q\: i ZB|$FTCLӷ#؉Z4 ^恠m/'6xDg$vkZXPk*:Y$sJLTHOrYnXFX*G˧zsUNJV!Mzj4.'$>vG),t$6oluv喏mLW%dR*;MpBŹ.v,QESƅc3=LJ[@Lnb#kjJ5gR6.gܾ =(,/~܇y1 LO0LVL[|-[u ȼS^? JSμ*ҒK"/%UȾ1߁V7ZB(~z5>Qm_$rȁ50?4rˮ鉶y8:La8P- "8e'_Rv%Wb[Rz ryB`4%!*= eߠ  * 6n;.Wki/: N.#v_*Js>u*=YG%;tUS]HdS~.1W8*1i %SY?=XiqBg[, e{K\_d ~/wG8D$h33kS2'oB9TKSD=X<qmߴC+߳6Gv&oe:'s5 2`PD[_ k?K./4q:B[o-3z8JdV%&o;!'HeiCuXҚ[l$}LQ̘qfqjQ|hqj.<H ]fPY0Or_'WUlY[\&-Jc0Q.hh8%O0Dpn6Zw` XDMX\OzqLb]H.}]b!ҴKb0] .ru)}Qw~ un#F.gGlMN;y8ۃyC T/'#Y)D-tocl.kzݓF/1"iJ?++Gk8B|VI/mxm%YצpcÏsAXPT=%E4im;yފg>V2B]ʯS|gfZ,/˧y.FA0ʚ0=BEZs/@g2Z5njd8:훀yU}eLetB/#J"xU᪒vƨܚtO{†;2n:&g\ti`,""Z؄;9c떫WFxDmHyzt@-6K)!vį(٩&EWCWg<%u%lpBYVi6q#  pKN\~󓓺M1!2|EH\7J8@8b;4 ,y>B}9|} mMh)-$:2t](/^Ȧ8̓緃k@7)!&x?b|j;o4P=R\'i&;OϲMV@y״{ &1G5+3#Xo[M $.mƚRU(syCr%,@!Yt%9>`[*_Ҋh~W<ϼN=-gbU.ЇOQMP 32BoK@cjv`%7r '4nqo5 x +1 $D`<-~ eNrJ-U=R3Ö́:V %ȆzѣLZs(/ko?9X&Pzau7IObzSA?E!>tfPsHwSՌ~H::Z~#JDNU/+]F$[9^53tY3|~6;Kj|3ADd ڪw9ς-?P( J3=a [ҎV0O)k)ͰpX}.^2} 4=ͱwhGGG4dHIKI^ka>86mדm;Þ wLM!' K ü7CwP}ؤr[ßp'o\3SzW}O2ܞ)hZ7ӓ?miUhGOQo;D[.S(?j߲C{8{ O%8kpgO[2GQ^Jomu4e)i%!p1<rhKBtjΦW7kUcU<0FKA!]ssG! Pqra Xqf9YsxL } Oly?Ƿy \pO/AwĽP ig BO28 y֩ N\^Sѽ7vf$MyI*IUCFw}j-K5㾤oB-K\rmt#ygo~0ݏ 5D AifG[̜lLWfdFLR|Y=HNsa*؃̏GcRs0q|Qcc@zmU69e"K_`b`Eb UV,HŜh5+:ezg\ؗ͵hMOC^1MdۯoE1vМ"5v<׾!sT轚 o@ )]w!1~ ;N%:(Vaخ@/` ML~`#{O{n+\cJz :yY(GOכSST07Di }=MbӇt 9w Vr:GM1G޳zLA=$wkZc7Yh&SN;ܘ ^oR׸WX"&I1@>9)x=V}u'Pz+ nR}Ic,|a+'xVַ"bnh=[囩 ykZ#lf};.]Z7_ !~! įYyi~8דŸޜTS1OW2Zr _D y4]Z.gPSBvA~jIQg085LGtUN[,Y[QBCsZ'`YP-g3GUF _ʬ'$9KYm.?#_ה̹`E#c̫b1ǔc7&*<nJF l!0 ?dETHIm5xome1+*Y_&kED0{&A 4#rHd8.+yrfDi^bߧ]֏]:;CUM` HAV;pmtp,,yIޑ|KKSCĿ8Wc$~`k,UG^S\x9tjY=C*\.!R T:/ Oc˧BqWD~j9;7L8Jav7 xAR]0]KIN,% 5IȩvL$d [ᖱ)uO2ll"DBbe!\0-@ b..ZYBީ-][ D]T glzF`E6dh%]6p9F'b\] k$U!.}]C.a7xK0u weF?r3&Zا廍 ˒/]3}3H+6Fwueqŗ?:3C7 􁰛\j4&.!p|rKM}$T/﬑n^{O| k,nB{|MGnc;Z઻,a@OgA_Won$՘ V5%+%L۸+05,ݡ0mC/; ,BeK~R ky Ge["!?ܱBQE]Rlθt5@Mތ-뀡P gl;o0mzGj*d3;K1qǛdߛ3x1K@:(# L~NyZzd3MXu,Wv/ տs?@AKoڱZu5cĴi_鞌ǤI2;⟝\d6y'\ NZG1S8HiLKvѕl}0|l6P3`` *%FNVgB?Z I3BEi5 i eUm< 1uyA6zjm{\ӷ&tt`{ ` ^)Z# Qy(&̢,j- 3S"M AE))>d-0),6 <-y}G ;u^feR@^[<8{KQ q3 >M7VY!l)vb#gڟFpb#힬9t}n\`W`m¤R}u8CdYn1%X;Q!3^s%' [b^ oT-ny E5C)\n1c Fx5+҅qk47꾶-'tKmiSBa#-FĚWбpF/6j9P/'We.JXV9hQX8AWx^Tz]̫drhD cV֧whC48h'_2)l<K`"ڑ QjD$G];9ETm)EFbuFo̐B4?J YZ