sssd-idp-2.9.5-4.el9_5.4> M Mv ĉJ4!!%joLne)Ip-Bm5 ']gbPxreleng@rockylinux.org p-Bm5 ']=a5'| 7y N@rʫJv |3fmz@dž3 .\hP7*;F|VlR9K6H9yIC9a\ C#Y7+Vc$ ⇧M|>3sq'FD=ٮlv|.KRV&")s 14ESƊDO{Ts,t8 $XoN ]MjmihmU66*WLÇrѻ&E$=4* NoJy`mIn0^M mß_Wb7BQIT_2)1XZ%yEhYu{'2zhm7B,2u)wqRRGRN.jly8M%j35夣r5ǁ4JN~AFF{J"PVWwq3P0&lnf?]6[g_y =*{%[mWȨbzff8d09802ee2c42568a6c8c1b8f3003af56e9b72fcc6f51d7bb805c66936968c685fb4061c9a2c0780e0ffa182b53e4f0b8024e9pdSݛ[3M?3>=0a?0Qd   ]48lp  @ P `   <dLr(89 @:XG)H)I*X* Y*\*H]*h^+b+d-.e-3f-8l-;t-Tu-tv-w/x/$y/D///0 0Csssd-idp2.9.54.el9_5.4Kerberos plugins and OIDC helper for external identity providers.This package provides Kerberos plugins that are required to enable authentication against external identity providers. Additionally a helper program to handle the OAuth 2.0 Device Authorization Grant is provided.gbMpb-473be7fb-fe4a-4e11-82d6-82d32a6fabc0-b-x86-64.Rocky Linux 9.5Rocky Enterprise Software FoundationGPLv3+Rocky Linux Build System (Peridot) Unspecifiedhttps://github.com/SSSD/sssd/linuxx86_64y':} yAA큤gbNgbNgbNgbNgbNgbNgbNfEe0898a66f9f24c57f0ec5f2f97348b430cc0a1246bbd89d3ce03f3dbfbdd42747a7778df406c167d7c596048cd3054be430de447cde5ec7385b202042e32ecb20d9dc072fbdcfdbd049011c583ee46f965264c6a09e91e07c6f330d1107f5f37e0898a66f9f24c57f0ec5f2f97348b430cc0a1246bbd89d3ce03f3dbfbdd4274../../../../usr/libexec/sssd/oidc_child../../../../usr/lib64/sssd/modules/sssd_krb5_idp_plugin.sorootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-2.9.5-4.el9_5.4.src.rpmconfig(sssd-idp)sssd-idpsssd-idp(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@    @config(sssd-idp)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.25)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcom_err.so.2()(64bit)libcurl.so.4()(64bit)libjansson.so.4()(64bit)libjansson.so.4(libjansson.so.4)(64bit)libjose.so.0()(64bit)libjose.so.0(LIBJOSE_1.0)(64bit)libk5crypto.so.3()(64bit)libkrad.so.0()(64bit)libkrad.so.0(krad_0_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libsss_debug.so()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)rtld(GNU_HASH)sssd-common2.9.5-4.el9_5.43.0.4-14.6.0-14.0-15.4.18-12.9.5-4.el9_5.44.16.1.3g@r@g;,@g-@ffffy_fE@f/f! @fg@e!@e@e@e)eReRe@d dd@ddu@doMdbc<@c]Alexey Tikhonov - 2.9.5-4.4Alexey Tikhonov - 2.9.5-4.3Alexey Tikhonov - 2.9.5-4.2Alexey Tikhonov - 2.9.5-4.1Alexey Tikhonov - 2.9.5-4Alexey Tikhonov - 2.9.5-3Alexey Tikhonov - 2.9.5-2Alexey Tikhonov - 2.9.5-1Alexey Tikhonov - 2.9.4-7Alexey Tikhonov - 2.9.4-6Alexey Tikhonov - 2.9.4-5Alexey Tikhonov - 2.9.4-4Alexey Tikhonov - 2.9.4-3Alexey Tikhonov - 2.9.4-2Alexey Tikhonov - 2.9.4-1Alexey Tikhonov - 2.9.3-2Alexey Tikhonov - 2.9.3-1Alexey Tikhonov - 2.9.2-2Alexey Tikhonov - 2.9.2-1Alexey Tikhonov - 2.9.1-2Alexey Tikhonov - 2.9.1-1Alexey Tikhonov - 2.9.0-5Alexey Tikhonov - 2.9.0-4Alexey Tikhonov - 2.9.0-3Alexey Tikhonov - 2.9.0-1Alexey Tikhonov - 2.8.2-2Alexey Tikhonov - 2.8.2-1- Resolves: RHEL-68508 - sssd backend process segfaults when krb5.conf is invalid [rhel-9.5.z]- Resolves: RHEL-67673 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9.5.z]- Resolves: RHEL-66268 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9.5.z]- Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication - Resolves: RHEL-50912 - possible regression of rhbz#2196521- Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4- Resolves: RHEL-40742 - passkey_child with wrong owner- Resolves: RHEL-40742 - passkey_child with wrong owner - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups - Resolves: RHEL-40570 - GPO access the wrong memory location- Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5 - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values - Resolves: RHEL-30142 - sssd_pac is crashing - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg - Resolves: RHEL-29454 - NULL dereference in inotify handling - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username- Relates: RHEL-33645 - Rebase Samba to the latest 4.20.x release- Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]- Resolves: RHEL-28161 - Passkey cannot fall back to password- Resolves: RHEL-28161 - Passkey cannot fall back to password- Resolves: RHEL-22340 - socket leak - Resolves: RHEL-28161 - Passkey cannot fall back to password- Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities- Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4 - Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users - Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9] - Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9] - Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]- Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4- Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4 - Resolves: RHEL-14427 - Expected cn in RDN, got uid - Resolves: RHEL-12229 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour - Resolves: RHEL-3925 - SSSD goes offline when, while reading a single user, misses a required attribute (i.e. SID) - Resolves: RHEL-2319 - Passkey authentication for centrally managed users - Resolves: RHEL-4146 - Incorrect handling of reverse IPv6 update results in update failure - Resolves: RHEL-4971 - sssd-kcm does not appear to expire Kerberos tickets (RFE: sssd_kcm should have the option to automatically delete the expired tickets)- Resolves: RHEL-2319 - Passkey authentication for centrally managed users- Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4 - Resolves: RHEL-2319 - Passkey authentication for centrally managed users - Resolves: rhbz#2234829 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working) - Resolves: rhbz#2236119 - dbus and crond getting terminated with SIGBUS in sss_client code- Resolves: rhbz#2218858 - [sssd] SSSD enters failed state after heavy load in the system- Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3 - Resolves: rhbz#2196816 - [RHEL9] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2162552 - sssd client caches old data after removing netgroup member on IDM - Resolves: rhbz#2189542 - [sssd] RHEL 9.3 Tier 0 Localization - Resolves: rhbz#2133854 - [RHEL9] In some cases when `sdap_add_incomplete_groups()` is called with `ignore_group_members = true`, groups should be treated as complete - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys- Related: rhbz#2190415 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs.- Related: rhbz#2190415 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs.- Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3- Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3 - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys - Resolves: rhbz#1913839 - filter_groups doesn't filter GID from 'id' output: AD + 'ldap_id_mapping = True' corner case - Resolves: rhbz#2100789 - [Improvement] sssctl config-check command does not show an error when we don't have id_provider in the domain section - Resolves: rhbz#2152177 - [RFE] Add support for ldapi:// URLs - Resolves: rhbz#2164852 - man page entry should make clear that a nested group needs a name - Resolves: rhbz#2166627 - Improvement: sss_client: add 'getsidbyusername()' and 'getsidbygroupname()' and corresponding python bindings - Resolves: rhbz#2166943 - kinit switches KCM away from the newly issued ticket - Resolves: rhbz#2167728 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)- Resolves: rhbz#2160001 - Reference to 'sssd-ldap-attributes' man page is missing in 'sssd-ldap', etc man pages - Resolves: rhbz#2143159 - automount killed by SIGSEGV- Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2 - Resolves: rhbz#1608496 - sssd failing to register dynamic DNS addresses against an AD server due to unnecessary DNS search - Resolves: rhbz#2110091 - SSSD doesn't handle changes in 'resolv.conf' properly (when started right before network service) - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level. - Resolves: rhbz#2139684 - [sssd] RHEL 9.2 Tier 0 Localization - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list - Resolves: rhbz#2142794 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged - Resolves: rhbz#2144893 - changing password with ldap_password_policy = shadow does not take effect immediately - Resolves: rhbz#2148737 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around2.9.5-4.el9_5.42.9.5-4.el9_5.42.9.5-4.el9_5.4sssd_enable_idp.build-id1b4864a0875e2477ee3b8a6b5e214bf0f34aa048c77c19469567049a40dfb101e9e98f9311454bsssd_krb5_idp_plugin.sooidc_childsssd_enable_idp/etc/krb5.conf.d//usr/lib//usr/lib/.build-id//usr/lib/.build-id/1b//usr/lib/.build-id/d6//usr/lib64/sssd/modules//usr/libexec/sssd//usr/share/sssd/krb5-snippets/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpiozstd19x86_64-redhat-linux-gnuASCII textdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d6c77c19469567049a40dfb101e9e98f9311454b, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=1b4864a0875e2477ee3b8a6b5e214bf0f34aa048, for GNU/Linux 3.2.0, strippedR RRRRRRRRR RR RRRRR RRRRRRRRRR R R RRutf-87d45470e15fe92af4fca05d2df84c1a2557e3149c94893e20174940a65a15eea85b0898a07e8ae5cfcfa61475d20fb7dc6daaa2daaa43ede7ead2f59e8e61364?0(/h<kL~LBؐruLb<͘]4WnM᜸4Ct:4MZ)S#,<IS|ީ`h"Zh˓A5Uq?C6,9Nt316 H;(S|*g†%Wn&<Ibe %SRp>3#hA! [Q O6t0xX$eɧcN-)-[HV 1AQ R8f2.--D[bL1CH%Ġ#eγcЉcC\RK3fp>\7d라k C?  4 ICD3G`ZTeiԌRH`*b:y ErQ^&PdRBoBnh0E8 @bD0)Oj(O7q4C_Si"$8.F똥!MVe3o:㕻ŌpeŨ-m:ۭH ] stNQ"qlPX]௓M&slRMEVJ?]uewNްmb; lv Yd]]{Ǫ{ثrUlXu3q kﻵ5#^to˼fnU߮lłz5wC˪]x5݊n.߰Z_ks;{ɬnVmwخZbŮػ~U4+lsL-ZdVn,o*oVp.\kwZϮU/RMޒ`[zEZ=\zȪo,c*j;:LD0>/r:6h0&l@3x)cɬ&t=B'd8]~y(ႮF6BI=YTc/@gQ'a[Bf :]vqL%."+K QO#6mm1,"p"RqeM* !DTٴT2%ׇq*_DFȊ_0cAa6B8sd TUxG%(_YVE*lHP.X;PHs~6R[XEs߶z~;_~P%j|c:1KQf/˱,6zrzbF-PPW'ՃZbޫ~3%TZLYev{6<:Iwj*̧&IՔ.?d.a[XT:Ea%Ŗ<<0no8Y 31ƶ\&pXA犱^!qs7O dݭ7z+۫%{n؋vr֛ݶ[}sē wdbzݻUuIquCn:wիp8̄Mfki \tudSST3L벩\B)ty汙 /]hóqtdMO=r=q΅ ?ͭ5 ֆ>GW<׀@[YXY!j*No2rN/d,U;R^Zdfq>0sП^=@C 7ǹ|vNV \gx|Rxz_0O2R~ZK. F_z35:{;^o ;7ͣ.|ҿ4ݎ@Rgl"!ڞF4^|ScCF_Fb Dw/gsMH?qv%N~yO׎%lxt9J&C&5Kۤx_zѫ-%p{Q#G؏1?B1*CmokYߢ΁ko28y|GBw"ASq<)¶\KL]3ˤ>31/&Tx)5/rI_8 f=$gF8v=P'A\vcH8'!kQ$Q~9XP04C -I,oi %EF3^FLT ?eGPD02СC1=ȒCb^_a smpۖ0n׀M@^i&(Wfu!*ihVC2q^$.s?H@]2@Y/iyۮ vQ8\nI>hyN łO^ 39 I?kq.\}4&aSu6dA-M̙,t|?Gi[^dx~%ψ#W-(; q`=; > Cꖀ@(Qt+M-O}X`YO$FJ: R nJx2/ !R>Gl8= &|xjjQe> ¿saN-Ѧwr #%y'顙ZVݨï5}js-CjS띦li~! h ˜@ Ͼf-g{fZwgP˿?DZ|R4LCN_ux>o|َ0!\*0up[Ë .q.Nm,,t@`8z4m,8}b-/# l%A\(Z"ƓF4Nb ԏ(|2w(/>${ #@ ߀)DZ8D5OP$!jidT+P55D˞kfU=xblc$3Ĵ.DKHp3$ #)PْA1dBb ;VRB+jcZ|ai_W 8?t@&ӱISyd&Q\=\rJF%cWT+ҾbT.rY-+Fu*W#}ŨN]4<[W꼕e` gg Ƹ#Viأr{TSd$C ѸّCŃgnJ\ZCi0HARWX'q955GQh@]&ZQpTdb=G}YRZLM VtZQ\XSys5 mB:jTbQJZxN*mz<:Rΰ=$f"kv(˜&FEvW'(4CⲊ^A@2{(HE,l'zz=3!qo65uY5%be˱K|BG|I䑫ħZ!SvM &P'.$j5.=!E WO ʢVC(_WI`W̐5x^Z/^ gO +@$Q<{R@yrWPPksV1iPin$k[mFͶ3>$NSF"$xk%)TCq{FHۊĪ"i>C]HgPH|^}*)DlՐ _ UzO@8@-MYQݷ-\P, Zqޭ]]v썦`z{KhܯE#lݻμ`úxa^lwMF] ZkInY.uYNzI*-L?!ƈ҈0 WzX<B0=|0&2#/Xe~j},8!]E]B„\AG\K]Yޘwi1Vqe;!#NQ$ݰf%XWELr,|)oՀSBBg4{†\"m]R?;ۊ#/hdZczAqzr~Kwݔ-,v"TG9Ӱ}ˉFz "ZDPDИ(=*Mx79Q}||FEx#kes_<27\NgcH#טA.sm;ip3qe8-FD5CJ!;X, @7i$=A*aRͦaީ/!FL UP{X/Fr@wl 4Ib1ǂ H$, B;v2vwHE ȴ86VKKgb@گ 6;Άちj#zϙ/| ?mIBߖA[J(  ~sfR`MG1m$vPS?8!;(~&M06l2[(' }Paڿ5K =e-yɶfV0V Vzқ=dܯana_jvIq,nYwֆ !t|a?_VRܝ0dq(Jd1"&Kb*MYཷb#0qZH>!YLl)%|4%lWpMxࡈF:bJ&G3ޘ!qu+ цJ'$!֌5q<$L1@ͨ*4q~ha>(Q9B*.gAk]Ȫb:W %h3ƢQC81`UNp5Ѵb#tuNN ,D䍣c:̍ ()SRU"|?zYaEQ zTeTRfذq{La(D`WB1ehkrPI!3InFSz:ȁBG&JAќ/lc[y? 䑉@G+ot W$b nHD"L3ʀT% HMHrM^sbFʞDb.Вr@v8 H9_AyAc@F#-U0&L SNpSlS&;x ])`K Gt1s@m74,0H ;v42 (|zEh'nJTYFDt: ^0!uCbWZ"d) ,*ZO"#.l++:~d+QZ R t5mAA . tiO(}0t%#*>h#npC }dȇ$" hRZ hiq1-Sf!ID ├q4ȼ$(ɥAa!, Uc l&ѦyHИJ&\s\1"3bK;y[CWp1M0E_R?_} cn+Oԑ#~F<Ǘvn ЕJ>??5caI{ۍg'm c$/_a@Va$A i U Q2zuDF7|<htfa-`pe+h :x)REnd3D"1@NLө,xQ0^G R_* `Y[ʄհY^!R&/ \C]6?>cku;r&_E pC [M]pRKZ>IDi$%gl3A߀Tg`RvO}"6q_Ns-)Ꮊ_&МMR9\!!={;3//G ʘ/M|JDѬ-;׎&Fd/ {/mƖO \x A60S {(1Ϻimqo*C4u/(]_=CJr #aeOjUCe$Jh߇).e,;u.2Ne 0&ko.i 2/=J6hGf(|aGX9ķ>1z1$Y)TPhzl\d`*eQ_Y"}a?`hÌaUvj#zN%Q4OE\W\ZQ {Sð eώrSH|8#e6(*q0ZWq0zo'(YbaܽE#Af;X~ȸ#+㯏޻֊SNQV]ɫ|d[gDcye9TL _ dy!šw}u~i `tN0PO70M㘓Nq{ܛNO $f"@1SK||ĠL^A_ܻBÞ72tQ ̛mzF,G"]@co"rM1zźzQ^`j5hc8mRSAK0d1r)'9ǖ+C:_S?4sF_Sv~N]:">m2IG[-J=&ӣ:= bPZgDMѾ+L@q|Q bfO[BMRg[xcwsaΊN%s]^g__u-LB;I ׋fL[x uOaըX~Odr]_`;txEQ> mM3Glj90v31-'2wmɖ`c%)E  T5q![_#ƨ(4<Ն>+nQ(|\l3,j%#xn#cڌ, KXc3xv(;sKP]םU]}Nn EGk39Ɛ[5jyQQU|F b P4L׬80H#'&Yy KN;zaP QOvIGdf269#% 2X=>E {FrGd}Ocjcx3~Y[`mWC\Y+,V+˙Plc^`ڻY{.'#m)9-fP( y>wm?7(S;¸tc;A`Ö"3G2WLKRH&$+CLx\Lӵw "z8K2T@ط -J  sZ`#)ϫ'&JHNNJ%opu լd_=nN#ی3D?R?0Fӄ XhswJ7N":fi£ 'CȒ78e%^݉tpu//N_l"{exu)~@ nMeE3Cs/236VDmRIu6y$nAAVUyÍ֤o/H< f͟P|u@|ΦWo|(Т:s6\]~% G%J[R+1ɍ`#\]Xu]|>!>\x= W Ve,P^cQy$fEj,j4kR|Q 16eqI#G[{p[BT/ڰ\>)oMB=TU93Y۴T~X=fbtvA^cOIؠ% Лn)p:d.zs|iZE4ͥKz?ysbf"r”M?Awnp8Ƴ™aafbv1w:+3@撈xª~m/XN@ZK0鬟tHB1F/>#a_>A3Džb,|~%=Q C)|uc*OHi%*dKl:0!)iLMIB*dvjxS5<~4~˻lI:yKZ9>4򼃣bzH>~y)4VH::X>9zRQApPYG l4A=ʵhda[[8 M\ՋH7ai^T:}0%9-2z!A* 3 mIjprwXĩU ‰\^S~DA#Xs9EJ'X@]ul3mt4 8 &gAm]&3* e(LA ;0qKvY]N@_l%ןF=EKDZRF5q(f5jI.v4p+Џ{``O=UxKw+jsyۀ| 6w0(*w2 fno܊EqS%r%s!wݲ%-6$dO%|eY#>,nX}7bq40*xi\zxngf8f8r$$xiРK`RUV#7΅=爧rwcc|(eOcmް>p$.N k6< p;%b]EUY%d`DFB'<ՆFlF*_""f*q桶~P5>`;IFvA%ęa϶4ԻP>%o Mٰۙvaۘv[=SbDL"v/|"~_|F~Ч4V c/A66S]C>Џvor X}TvHǿv@W  heO{ߦx"E=?,|<=~&a䶟:HwtA4i,H8.GF}FM|fAHshJo5T09$!WALRr8*ZcA9h G̙@IbSnIz%֌I+Ϙ:,H9Fl3/-ġƴEk:լM(hdH\Ux_ 9’RA8 .uc8]&3!F\2Mbn{U4s75N .C6gS#q!<(#S.2d!Q71_,d<9LEe)H`0b6pқanKC-!4 Û&N89Zń?V+t5W"qO1B~ф@{RnX`bh*3zk~tR[#B$RAM=2M-*3fmwtؗ~~0]~bNS,^]SAC\줢zj`JhpќUE\G*4Fg۶HX8^F9;G؆cA.\.V=WhKCI]̟=p ʹ^Ο4Z{_]>&.T4ݭ@ZHe+QI]_ b==VyXX*\ѳaܴ H?xD&0$]5nI.0uޏBx Jڗ+ Y74) ^N<ڬW0?eLl)>we"R(hz2_84|_lS.\mˏFnf-5S*SI֍R²s>گ;MK&GV}L9Oy.~ལZSĿf%kˇ($ؗb,of Ʋ#SLOSv5n$ۧ1VRdg] %,`KDDnzvᛕ#wS^4{!_YGnpv?Ua;A.4Iȡ jOPKXq%>\;D8[b"rydeU.F- g)87C}10zj2S@̵L֓?tw>PlAH$V} R#"J H8YXRm%WH?<iNs`~{ܾKk(\ex2C@&7qK7Wɫ9\KA"Z(]z!EO;7%ט=I2IF[iAGv=\j 7r#=V?A=mr݅_~v͠7QVMJE!N-.ܰwԼn![`TY;Bw(ԡ#Yx94 *T9? @:'e1l2F~V"ZKpȭh- )Y,7todLwO U# _FugO-_(Ԏ ܢ E"#]h f3@Tz>1НFeʢaof]KǷ07l//|=W4z^Y}J T箵Y/1j13 !.TgZ̘#N3Xsٳ{KDΫJ仜Tۇc~s82,.1bjӋ7]+ KXul*s||σz5q^HrV9^NC1Rp&wI+]Ę0=u 3t-# !(W9a&z`v$ufNkZ`G@B&Q6&oI Nul4ˬOYW|GAmBg$HQs8NX*X,Ղ}8 oKG}yAԸtE+-JbA1oާB- W{sнP*"&HkO} gʼn%] 4*Dҷ|IȨ X:3q8+UYaU~]6`7#瀕R kzB*jzgf *q"BBQ Uq: Oи2hSaƯ$B 4{U$J{%ͽ(J`45hpR:W}nv<TOn-^@',}fU ߉&NJ3y ӴaW>LBI@F\Q[*)p>%I L+?5V]|rSQ˸+hYG шHF%jTB&PZ*\?@Xe ty-GIYH pbٿ9rstlnnO6,H[`jBˑYa`OB?"m6ѺǻAvM U 齺ٲU dTxߖHKEoOJr>1_ c^mfX;6+*E!8h2)VcwÖLD.t gFґI*;h4bzĴ|੣ h]sK$|a:P%ƯY|l58CFJIKGHGl]֦eVC>>7LJGw[6x.#yĄeRcZ1gLNcuVZJSH29d6/eL5Mml {>׊ܭQv3\VfkƯg2ok13[m&_IwXM^_6kjf><OcN j5Ȉiµ&(H}Vqaj3ڙLզfDMF6v546kVL6LKIL&B|!k3Gy/gڼvS9MͯF??Z:^x&ygx3^x,f)@ky nyi~ǒc=l.hʳ/wej?[y6 uf6c]Z25~o<>Àڱ2Lgscw }<5xM8Sݬnmclfl5u(6;2ZOf3τ6cj 7xk!wKEͤd& u$S %jLKO_Dh('_:] #'&Nh*h@>Z2;2a(6s@ ݁SNod8mC\R/r]ЌDM\pQAˋ4&`ipdmdշY,DePP(N8OH`^bPxW hᆣˏnE9PH1qר̹^BQt2f6Ӓ,*GO#U06=SA7"NQ^;_u@lD Ju 6zŘoT7(3meLMJvd33 ,:#g/%C>?!?`6,В8JuE,H  fKx7 W,8APRp@hz#2y%@ )@U-1(S"; @-V"YQ^v3c9dJ2kWAoTDp삜4D"g +?1Aʮ˓!^0C @P,zaLvhZ. bQ# dXռ436ɼMd]2v氠)ilQs [DX%LL0 ]qMZID[V*) AG{XCQG{dₗhF3 l 2NcIDLrGGGF"i D2fH2r¹)RٷLUVGVw ۉq~5 `ѶtaO:P\ w8V/X[Ar$mBźK(>M8hdJ\!7Ư@(W׻-jէx3H*@[TC(9Z#8^]^tzjb]J$fȋt}ԸovWtk8PõzLs=آi/_Co gvxoSo&pJk k~2]07(~l5(7tyxq^~ ݱT5N6i"iտÉj>[kr 7S-7xplAW@V;_.Яel."QG?vfD&=^awFPz`C8-Xu 7Sܺ4ۼ7hf2sEfuړPHdFӈpB32$h3FZNpsmۗT/G^p9E1ag9A4WRyuh*οGQ `JڔTX龫= 7SʏgWD~[ 5:8 @$gL(QDDgvJ,0_ZlW&$\Hz F df&&;Z,Xߢ @k1~-!O2tb@ewٺ|9Lxa8/Jd^p+?GZVPj@_P/N9I>kWJ ,$۳{Ь4#6~ W6Ͱ>*X-/ ɞ'ͥ0 ϣʃbňt s,'߃4VmVME/4.w!2.W,k~ p]vV锂Y+r!萏Ip\~MɎρ=}PRHtL!Ua#"7杭C&;GԮq9r1FFFsR7HMloY҆d ~ eSytUԵ挭(.L:7`J)},iw:eXe43)Z5,Il)7pe-jԥ}KUB(2j˕ ";HS!)5;yuAsXGgh}wn7֧$^51т/Y~ `PC U UKqF$)/ BW.1pnU&1"6K5g7^eO%&TRn tŚhLf7jiVuU';z6 DӤeUՖd)JdŞJwiA;q!,EG35U(.nS\\($( oAl  |&ηSgY151&[*$@9{Ay̐L®.Jb^Ye-#_/@pƹ5$"tT0Am^@O/OSb{SvT!qq34-cbN^h_O8Ɋ>.CU](cm&[m[.A\tJ :TtM0SދF7w|*͹68@DG_ECD1%΃|/] IM&Rr:=-L;\~i10$x.Ȝ`;/ډzn94@ԥv/%gP'̅ $9憘Tv.8S6A$ K]M-F.t%<-:ThhXBhj0& 9(/K& 6!H5)/(oitl>p Tb6AeT!ڝB7S oNO9#kN,\]~9Rh?A/ja^PFE&Y$@^] O;V7ULۦa7:/l'x}>\|E+nQ)% o ېia&3z*)Id#)L%Ar+=%nXoAQ + Dv 8 OJ GyX4ASve̗BJ&Jq5:v^,Us֣Kz=?rWtFu 8۳ZL²m<`(I ޮXNDZZˬ'^t1v1Fi7o|Vn`+\,$$Au7/ӵ@+8=JJ^ !ŀu/iLBXK"oAӍ|%IU OtUۅ#kJ,#,7k ybWw-m.4/*Gxu4J]Z: a!õYk׀y\LA}ٯ+`e Di%x5g6 u%x  #%EŚS#B2!eB%\6g8SaH^'mDy&Y#*FQ'{ڱrVY*pLNBˏ~jFP1a-n}oaJFݍ!uSb/b 'w Ɇ- )vF ًYYg4] B 5s^Y bgv58)?y' HOQC{IyAd|! )'w+o% \^5f#m%)b :0jҡGbi87ۨ  #i~lH6j$cp~7G70!;^Jlҩ:V9^ Y#@Ǻm)x 즧G1>+˘(oW +Bbr ,͉'#Sq)wCʽ|׮̳&lj`">sHqb%^Hf4IJB\Ft> iˆĚ0JfG oX/HwPw~[N;{%X3 څ[KEsX&:adĪW] Xq([E.)=^ i^pb n+arǩ8'j5a,%Cu`]#ήp>7ͯp;O6G_Jo!E/ǐ!vFzARxU (Xd5q/xA`.-Q_'<‰ԹPovJܫn+?|u+L (a4q눦~EBʒ%XiY︢DOS.9;uJE3iL=M2q?qVOaʈBy*; 8mǗFoz!`z'Jeؕ Y%}YA޽iXP@:jHZ;E=$PrC\=ҦKO+P}`ZkB`&bx^S]O?YovvDt cV)iv\PAƂL%ޓ,p-[p.6qU[9Icw[.?g,N?E9;Y5|gV-!_ceT )&܃Y'>/];ΖCkPDDԦd8ܠDu^˸9P)zX:ǹʐjpy ֡OvlM&aL?NP}ʞJػ d 'KLL)DjPĄ/1:Qf(Ɠ08tZ7_QFPb{\/Di]Rbl2\ˆ+TI.qUW<SOFSk+jv_THic@IŠy~=*j^`)BŨ<3{t|G ㋝t`l52N ec9tU=,\<pdޖ|_m= *' NVyF W㫏H!~x/t|ڢdiI^|pR/ ㇤mvb$ABXqUv9DfZMC|ƚIVI^%.^#2b4PDpG`H|7v'+_vÍ i9 dwYکlzZr;fnنXqflw;,s ۡɡ nbkuGa mM.M*Lʼn; q$6; Cx֪$%xgJU3`.\/(B7mn쿁`Bmeg}l!Fm"?BܘR!RAe2VX=`'E?/%A9y^陈'1uPڥ+uGJf!*!ΪvgO6Ҩʹ0Oh%w:7`WOCS@юAKǰv6eTI)]cNQE |#Ur{TdDrϯHH (űSY \kHhQCIҍ#r)Z/%H}GiHzneXZS z *G'%8Ш܁-K tɿ˄`VeUB{$ ǀo<iKX@l(#q(š[w)븒g1]y%DĹ$;4&&Qb\V=m,)!Pl>* *X3Ydy\?̿jMY۴;ڋڻ ?k3TȾ2ZsXw]OFTQ4m;B2NKNt;k@O{Vf7)5el?W:8^Ovıcp E`n֫bD M?g=u~0