389-ds-devel-1.4.0.3-lp150.2.2 >  A ZaA/=„euK_̌ƣd({3>Y+,w2Vtu@tKmE~dqnL{?{Zj9~xhN u!(/#qwt[M5'cMCrY˖Wg$+xּ73)i|h 6ڹڎ[ gȿ_w;Ύ( -{(Ә$e-ρ쒑tۘ@J<x^ՔrZgtO$gMlZ֮C mxbd0d652428219984d30884156bb85c82191129991cfb6909e42e392650cdffa09109bf4d226de5d8217e12db03e2f0b3f209e2ea8ZaA/=„6fz%} :]fαffmhh) ʢ+SU#|??ޟ-ů+X֮uPEPe|Rbz(+t$3[h͎՟?Ye/R:'u{0biHjw/GT4R _5Dyv^}t jf<&_QlbAYWuX oD>rVD8ڹWG%p>h?Xd ! P 2Rpv&& d& & H&  .&  & P&&&   (68@=94=:1=FfGx&H&I&XY\ &]&^'bcpdeflu&vw&x@&yz TC389-ds-devel1.4.0.3lp150.2.2Development files for the 389 Directory Server389 Directory Server is a full-featured LDAPv3 compliant server. In addition to the standard LDAPv3 operations, it supports multi-master replication, fully online configuration and administration, chaining, virtual attributes, access control directives in the data, Virtual List View, server-side sorting, SASL, TLS/SSL, and many other features. This package contains the development files for 389DS.Zalamb05%openSUSE Leap 15.0openSUSEGPL-2.0https://bugs.opensuse.orgDevelopment/Libraries/C and C++https://pagure.io/389-ds-baselinuxx86_64 K)4> r! *: dlA%  }2A큤A큤Z`Z`Z`Z`Z`Z`Z`Z`Z`Z`Z`Z`Z`Z`Z`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.so.0.0.0libns-dshttpd-1.4.0.3.solibnunc-stans.so.0.1.0libsds.so.0.0.0libslapd.so.0.1.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroot389-ds-1.4.0.3-lp150.2.2.src.rpm389-ds-devel389-ds-devel(x86-64)pkgconfig(dirsrv)pkgconfig(libsds)pkgconfig(nunc-stans)@@     /usr/bin/pkg-config389-dsopenldap2-develpkgconfigpkgconfig(nspr)pkgconfig(nspr)pkgconfig(nss)pkgconfig(svrcore)pkgconfig(systemd)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.4.0.34.1.33.0.4-14.6.0-14.0-15.2-14.14.1Z@ZtRZqZqZp^@Zo ZiZ[F@Z&@ZZZ@ZZY+@YB@Yܶ@Y5Y@Y˒Y˒YYYY@YY)j@Y@YR@Y@X @X@XZnX0>W^@Ws@W#LW#LW@W@W@VՄ@VO @UU@Ua@U@U.RU+UTT@TTk@S4SRkQ@Q=@Pb@PWhguo@suse.commrueckert@suse.dehguo@suse.comdimstar@opensuse.orghguo@suse.comhguo@suse.comhguo@suse.commrueckert@suse.derbrown@suse.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.dejengelh@inai.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.dekukuk@suse.demrueckert@suse.debwiedemann@suse.comhguo@suse.comhguo@suse.commrueckert@suse.demrueckert@suse.dejengelh@inai.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.deaj@ajaissle.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.declaes.backstrom@opensuse.orgaj@ajaissle.dehguo@suse.comaj@ajaissle.deaj@ajaissle.deaj@ajaissle.dejengelh@inai.deaj@ajaissle.deaj@ajaissle.deaj@ajaissle.deaj@ajaissle.deaj@ajaissle.deaj@ajaissle.deaj@ajaissle.deaj@ajaissle.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.de- Explicitly generate dirsrv sysconfig file as it is necessary for SLES 15 (bsc#1081324).- switch lib389 to use the python3-ldap subpackage- For SLES 15 schedule, do not build lib389 programmable extension for now.- BuildRequire python3-ldap instead of python3-pyldap: pyldap is deprecated in favor of python-ldap.- Rename dependency package python-pyldap into python3-pyldap.- Correct name to dependency package "python-pyldap".- Introduce patch 0003-fix-rm-non-existent-man-pages.patch to remove a faulty rm statement from makefile.- add tw.patch to fix potential buffer overflow- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- added simplify-lib389-setup-py.patch seems the python3 setuptools on leap 42.3 do not like this fancy syntax. kill it and always use the python 3 way.- update to 1.4.0.3 - Ticket 49457 - Fix spal_meminfo_get function prototype - Ticket 49455 - Add tests to monitor test suit. - Ticket 49448 - dynamic default pw scheme based on environment. - Ticket 49298 - fix complier warn - Ticket 49298 - Correct error codes with config restore. - Ticket 49454 - SSL Client Authentication breaks in FIPS mode - Ticket 49453 - passwd.py to use pwdhash defaults. - Ticket 49427 - whitespace in fedse.c - Ticket 49410 - opened connection can remain no longer poll, like hanging - Ticket 48118 - fix compiler warning for incorrect return type - Ticket 49451 - Add environment markers to lib389 dependencies - Ticket 49325 - Proof of concept rust tqueue in sds - Ticket 49443 - scope one searches in 1.3.7 give incorrect results - Ticket 48118 - At startup, changelog can be erronously rebuilt after a normal shutdown - Ticket 49412 - SIGSEV when setting invalid changelog config value - Ticket 49441 - Import crashes - oneline fix - Ticket 49377 - Incoming BER too large with TLS on plain port - Ticket 49441 - Import crashes with large indexed binary attributes - Ticket 49435 - Fix NS race condition on loaded test systems - Ticket 77 - lib389 - Refactor docstrings in rST format - part 2 - Ticket 17 - lib389 - dsremove support - Ticket 3 - lib389 - python 3 compat for paged results test - Ticket 3 - lib389 - Python 3 support for memberof plugin test suit - Ticket 3 - lib389 - config test - Ticket 3 - lib389 - python 3 support ds_logs tests - Ticket 3 - lib389 - python 3 support for betxn test- we actually need pyldap- lib389 is merged into this tarball now. move the subpackage here.- update to 1.4.0.2 - Ticket 48393 - fix copy and paste error - Ticket 49439 - cleanallruv is not logging information - Ticket 48393 - Improve replication config validation - Ticket lib389 3 - Python 3 support for ACL test suite - Ticket 103 - sysconfig not found - Ticket 49436 - double free in COS in some conditions - Ticket 48007 - CI test to test changelog trimming interval - Ticket 49424 - Resolve csiphash alignment issues - Ticket lib389 3 - Python 3 support for pwdPolicy_controls_test.py - Ticket 3 - python 3 support - filter test - Ticket 49434 - RPM build errors - Ticket 49432 - filter optimise crash - Ticket 49432 - Add complex fliter CI test - Ticket 48894 - harden valueset_array_to_sorted_quick valueset access - Ticket 49401 - Fix compiler incompatible-pointer-types warnings - Ticket 48681 - Use of uninitialized value in string ne at /usr/bin/logconv.pl - Ticket 49409 - Update lib389 requirements - Ticket 49401 - improve valueset sorted performance on delete - Ticket 49374 - server fails to start because maxdisksize is recognized incorrectly - Ticket 49408 - Server allows to set any nsds5replicaid in the existing replica entry - Ticket 49407 - status-dirsrv shows ellipsed lines - Ticket 48681 - Use of uninitialized value in string ne at /usr/bin/logconv.pl - Ticket 49386 - Memberof should be ignore MODRDN when the pre/post entry are identical - Ticket 48006 - Missing warning for invalid replica backoff configuration - Ticket 49064 - testcase hardening - Ticket 49064 - RFE allow to enable MemberOf plugin in dedicated consumer - Ticket lib389 3 - python 3 support - Ticket 49402 - Adding a database entry with the same database name that was deleted hangs server at shutdown - Ticket 48235 - remove memberof lock (cherry-pick error) - Ticket 49394 - build warning - Ticket 49381 - Refactor numerous suite docstrings - Part 2 - Ticket 49394 - slapi_pblock_get may leave unchanged the provided variable - Ticket 49403 - tidy ns logging - Ticket 49381 - Refactor filter test suite docstrings - Ticket 48235 - Remove memberOf global lock - Ticket 103 - Make sysconfig where it is expected to exist - Ticket 49400 - Add clang support to rpm builds - Ticket 49381 - Refactor ACL test suite docstrings - Ticket 49363 - Merge lib389 - Ticket 101 - BaseException.message has been deprecated in Python3 - Ticket 102 - referral support - Ticket 99 - Fix typo in create_topology - Ticket #98 - Fix dbscan output - Ticket #77 - Fix changelogdb param issue - Ticket #77 - Refactor docstrings in rST format - part 1 - Ticket 96 - Change binaries’ names - Ticket 77 - Add sphinx documentation - Ticket 43 - Add support for Referential Integrity plugin - Ticket 45 - Add support for Rootdn Access Control plugin - Ticket 46 - dsconf support for dynamic schema reload - Ticket 74 - Advice users to set referint-update-delay to 0 - Ticket 92 - display_attr() should return str not bytes in py3 - Ticket 93 - Fix test cases in ctl_dbtasks_test.py - Ticket 88 - python install and remove for tests - Ticket 85 - Remove legacy replication attribute - Ticket 91 - Fix replication topology - Ticket 89 - Fix inconsistency with serverid - Ticket 79 - Fix replica.py and add tests - Ticket 86 - add build dir to gitignore - Ticket 83 - Add an util for generating instance parameters - Ticket 87 - Update accesslog regec for HR etimes - Ticket 49 - Add support for whoami plugin - Ticket 48 - Add support for USN plugin - Ticket 78 - Add exists() method to DSLdapObject - Ticket 31 - Allow complete removal of some memberOf attrs - Ticket31 - Add memberOf fix-up task - Ticket 67 - Add ensure_int function - Ticket 59 - lib389 support for index management. - Ticket 67 - get attr by type - Ticket 70 - Improve repl tools - Ticket 50 - typo in db2* in dsctl - Ticket 31 - Add status command and SkipNested support for MemberOf - Ticket 31 - Add functional tests for MemberOf plugin - Ticket 66 - expand healthcheck for Directory Server - Ticket 69 - add specfile requires - Ticket 31 - Initial MemberOf plugin support - Ticket 50 - Add db2* tasks to dsctl - Ticket 65 - Add m2c2 topology - Ticket 63 - part 2, agreement test - Ticket 63 - lib389 python 3 fix - Ticket 62 - dirsrv offline log - Ticket 60 - add dsrc to dsconf and dsidm - Ticket 32 - Add TLS external bind support for testing - Ticket 27 - Fix get function in tests - Ticket 28 - userAccount for older versions without nsmemberof - Ticket 27 - Improve dseldif API - Ticket 30 - Add initial support for account lock and unlock. - Ticket 29 - fix incorrect format in tools - Ticket 28 - Change default objectClasses for users and groups - Ticket 1 - Fix missing dn / rdn on config. - Ticket 27 - Add a module for working with dse.ldif file - Ticket 1 - cn=config comparison - Ticket 21 - Missing serverid in dirsrv_test due to incorrect allocation - Ticket 26 - improve lib389 sasl support - Ticket 24 - Join paths using os.path.join instead of string concatenation - Ticket 25 - Fix RUV repr function - Ticket 23 - Use DirSrv.exists() instead of manually checking for instance’s existence - Ticket 1 - cn=config comparison - Ticket 22 - Specify a basedn parameter for IDM modules - Ticket 19 - missing readme.md in python3 - Ticket 20 - Use the DN_DM constant instead of hard coding its value - Ticket 19 - Missing file and improve make - Ticket 14 - Remane dsadm to dsctl - Ticket 16 - Reset InstScriptsEnabled argument during the init - Ticket 14 - Remane dsadm to dsctl - Ticket 13 - Add init function to create new domain entries - Ticket 15 - Improve instance configuration ability - Ticket 10 - Improve command line tool arguments - Ticket 9 - Convert readme to MD - Ticket 7 - Add pause and resume methods to topology fixtures - Ticket 49172 - Allow lib389 to read system schema and instance - Ticket 49172 - Allow lib389 to read system schema and instance - Ticket 6 - Bump lib389 version 1.0.4 - Ticket 5 - Fix container build on fedora - Ticket 4 - Cert detection breaks some tests - Ticket 49137 - Add sasl plain tests, lib389 support - Ticket 2 - pytest mark with version relies on root - Ticket 49126 - DIT management tool - Ticket 49101 - Python 2 generate example entries - Ticket 49103 - python 2 support for installer - Ticket 47747 - Add topology_i2 and topology_i3 - Ticket 49087 - lib389 resolve jenkins issues - Ticket 48413 - Improvements to lib389 for rest - Ticket 49083 - Support prefix for discovery of the defaults.inf file. - Ticket 49055 - Fix debugging mode issue - Ticket 49060 - Increase number of masters, hubs and consumers in topology - Ticket 47747 - Add more topology fixtures - Ticket 47840 - Add InstScriptsEnabled argument - Ticket 47747 - Add topology fixtures module - Ticket 48707 - Implement draft-wibrown-ldapssotoken-01 - Ticket 49022 - Lib389, py3 installer cannot create entries in backend - Ticket 49024 - Fix paths to the dbdir parent - Ticket 49024 - Fix db_dir paths - Ticket 49024 - Fix paths in tools module - Ticket 48961 - Fix lib389 minor issues shown by 48961 test - Ticket 49010 - Lib389 fails to start with systemctl changes - Ticket 49007 - lib389 fixes for paths to use online values - Ticket 49005 - Update lib389 to work in containers correctly. - Ticket 48991 - Fix lib389 spec for python2 and python3 - Ticket 48984 - Add lib389 paths module - Ticket 48951 - dsadm dsconfig status and plugin - Ticket 47957 - Update the replication “idle” status string - Ticket 48951 - dsadm and dsconf base files - Ticket 48952 - Restart command needs a sleep - Ticket 48949 - Fix ups for style and correctness - Ticket 48949 - added copying slapd-collations.conf - Ticket 48949 - change default file path generation - use os.path.join - Ticket 48949 - os.makedirs() exist_ok not python2 compatible, added try/except - Ticket 48949 - configparser fallback not python2 compatible - Ticket 48946 - openConnection should not fully popluate DirSrv object - Ticket 48832 - Add DirSrvTools.getLocalhost() function - Ticket 48382 - Fix serverCmd to get sbin dir properly - Bug 1347760 - Information disclosure via repeated use of LDAP ADD operation, etc. - Ticket 48937 - Cleanup valgrind wrapper script - Ticket 48923 - Fix additional issue with serverCmd - Ticket 48923 - serverCmd timeout not working as expected - Ticket 48917 - Attribute presence - Ticket 48911 - Plugin improvements for lib389 - Ticket 48911 - Improve plugin support based on new mapped objects - Ticket 48910 - Fixes for backend tests and lib389 reliability. - Ticket 48860 - Add replication tools - Ticket 48888 - Correction to create of dsldapobject - Ticket 48886 - Fix NSS SSL library in lib389 - Ticket 48885 - Fix spec file requires - Ticket 48884 - Bugfixes for mapped object and new connections - Ticket 48878 - better style for backend in backend_test.py - Ticket 48878 - pep8 fixes part 2 - Ticket 48878 - pep8 fixes and fix rpm to build - Ticket 48853 - Prerelease installer - Ticket 48820 - Begin to test compatability with py.test3, and the new orm - Ticket 48434 - Fix for negative tz offsets - Ticket 48857 - Remove python-krbV from lib389 - Ticket 48820 - Fix tests to ensure they work with the new object types - Ticket 48820 - Move Encryption and RSA to the new object types - Ticket 48820 - Proof of concept of orm style mapping of configs and objects - Ticket 48820 - Clitool rename - Ticket 48431 - lib389 integrate ldclt - Ticket 48434 - lib389 logging tools - Ticket 48796 - add function to remove logs - Ticket 48771 - lib389 - get ns-slapd version - Ticket 48830 - Convert lib389 to ip route tools - Ticket 48763 - backup should run regardless of existing backups. - Ticket 48434 - lib389 logging tools - Ticket 48798 - EL6 compat for lib389 tests for DH params - Ticket 48798 - lib389 add ability to create nss ca and certificate - Ticket 48433 - Aci linting tools - Ticket 48791 - format args in server tools - Ticket 48399 - Helper makefile is missing mkdir dist - Ticket 48399 - Helper makefile is missing mkdir dist - Ticket 48794 - lib389 build requires are on a single line - Ticket 48660 - Add function to convert binary values in an entry to base64 - Ticket 48764 - Fix mit krb password to be random. - Ticket 48765 - Change default ports for standalone topology - Ticket 48750 - Clean up logging to improve command experience - Ticket 48751 - Improve lib389 ldapi support - Ticket 48399 - Add helper makefile to lib389 to build and install - Ticket 48661 - Agreement test suite fails at the test_changes case - Ticket 48407 - Add test coverage module for lib389 repo - Ticket 48357 - clitools should standarise their args - Ticket 48560 - Make verbose handling consistent - Ticket 48419 - getadminport() should not a be a static method - Ticket 48408 - RFE escaped default suffix for tests - Ticket 48401 - Revert typecheck - Ticket 48401 - lib389 Entry hasAttr returs dict instead of false - Ticket 48390 - RFE Improvements to lib389 monitor features for rest389 - Ticket 48358 - Add new spec file - Ticket 48371 - weaker host check on localhost.localdomain - Ticket 58358 - Update spec file with pre-release versioning - Ticket 48358 - Make Fedora packaging changes to the spec file - Ticket 48358 - Prepare lib389 for Fedora Packaging - Ticket 48364 - Fix test failures - Ticket 48360 - Refactor the delete agreement function - Ticket 48361 - Expand 389ds monitoring capabilities - Ticket 48246 - Adding license/copyright to lib389 files - Ticket 48340 - Add basic monitor support to lib389 https://fedorahosted.org/389/ticket/48340 - Ticket 48353 - Add Replication REST support to lib389 - Ticket 47840 - Fix regression - Ticket 48343 - lib389 krb5 realm management https://fedorahosted.org/389/ticket/48343 - Ticket 47840 - fix lib389 to use sbin scripts https://fedorahosted.org/389/ticket/47840 - Ticket 48335 - Add SASL support to lib389 - Ticket 48329 - Fix case-senstive scyheam comparisions - Ticket 48303 - Fix lib389 broken tests - Ticket 48329 - add matching rule functions to schema module - Ticket 48324 - fix boolean capitalisation (one line) https://fedorahosted.org/389/ticket/48324 - Ticket 48321 - Improve is_a_dn check to prevent mistakes with lib389 auth https://fedorahosted.org/389/ticket/48321 - Ticket 48322 - Allow reindex function to reindex all attributes - Ticket 48319 - Fix ldap.LDAPError exception processing - Ticket 48318 - Do not delete a changelog while disabling a replication by suffix - Ticket 48308 - Add eq and ne to Entry to allow fast comparison https://fedorahosted.org/389/ticket/48308 - Ticket 48303 - Fix lib389 broken tests - backend_test - Ticket 48309 - Fix lib389 lib imports - Ticket 48303 - Fix lib389 broken tests - agreement_test - Ticket 48303 - Fix lib389 broken tests - aci_parse_test - Ticket 48301 - add tox support - Ticket 48204 - update lib389 for python3 - Ticket 48273 - Improve valgrind functions - Ticket 48271 - Fix for self.prefix being none when SER_DEPLOYED_DIR is none https://fedorahosted.org/389/ticket/48271 - Ticket 48259 - Add aci parsing utilities to lib389 - Ticket 48252 - (lib389) adding get_bin_dir and dbscan - Ticket 48247 - Change the default user to ‘dirsrv’ - Ticket 47848 - Add new function to create ldif files - Ticket 48239 - Fix for prefix allocation of un-initialised dirsrv objects - Ticket 48237 - Add lib389 helper to enable and disable logging services. - Ticket 48236 - Add get effective rights helper to lib389 - Ticket 48238 - Add objectclass and attribute type query mechanisms - Ticket 48029 - Add missing replication related functions - Ticket 48028 - add valgrind wrapper for ns-slapd - Ticket 48028 - lib389 - add valgrind functions - Ticket 48022 - lib389 - Add all the server tasks - Ticket 48023 - create function to test replication between servers - Ticket 48020 - lib389 - need to reset args_instance with every DirSrv init - Ticket 48000 - Repl agmts need more time to stop - Ticket 48004 - Fix various issues - Ticket 48000 - replica agreement pause/resume should have a short sleep - Ticket 47990 - Add check for “.removed” instances when doing an upgrade - Ticket 47990 - Add “upgrade” function to lib389 - Ticket 47691 - using lib389 with RPMs - Ticket 47848 - Add support for setuptools. - Ticket 47855 - Add function to clear tmp directory - Ticket 47851 - Need to retrieve tmp directory path - Ticket 47845 - add stripcsn option to tombstone fixup task - Ticket 47851 - Add function to retrieve dirsrvtests data directory - Ticket 47845 - Add backup/restore/fixup tombstone tasks to lib389 - Ticket 47819 - Add the new precise tombstone purging config attribute - Ticket 47695 - Add plugins/tasks/Index - Ticket 47648 - lib389 - add schema classes, methods - Ticket 47671 - CI lib389: allow to open a DirSrv without having to create the instance - Ticket 47600 - Replica/Agreement/Changelog not conform to the design - Ticket 47652 - replica add fails: MT.list return a list not an entry - Ticket 47635 - MT/Backend/Suffix to be conform with the design - Ticket 47625 - CI lib389: DirSrv not conform to the design - Ticket 47595 - fail to detect/reinit already existing instance/backup - Ticket 47590 - CI tests: add/split functions around replication - Ticket 47584 - CI tests: add backup/restore of an instance - Ticket 47578 - CI tests: removal of ‘sudo’ and absolute path in lib389 - Ticket 47568 - Rename DSAdmin class - Ticket 47566 - Initial import of DSadmin into 389-test repos- Use openSUSE rpm group classifications. - Remove removal of .a files that do not exist to begin with (because of --disable-static). - Remove double removal of .la files. - Do not suppress errors from useradd.- update to 1.4.0.1 - Ticket 49038 - remove legacy replication - change cleanup script precedence - Ticket 49392 - memavailable not available - Ticket 49235 - pbkdf2 by default - Ticket 49279 - remove dsktune - Ticket 49372 - filter optimisation improvements for common queries - Ticket 49320 - Activating already active role returns error 16 - Ticket 49389 - unable to retrieve specific cosAttribute when subtree password policy is configured - Ticket 49092 - Add CI test for schema-reload - Ticket 49388 - repl-monitor - matches null string many times in regex - Ticket 49387 - pbkdf2 settings were too aggressive - Ticket 49385 - Fix coverity warnings - Ticket 49305 - Need to wrap atomic calls - Ticket 48973 - Indexing a ExactIA5Match attribute with a IgnoreIA5Match matching rule triggers a warning - Ticket 49378 - server init fails - Ticket 49305 - Need to wrap atomic calls - Ticket 49180 - add CI test - Ticket 49180 - errors log filled with attrlist_replace - attr_replace- drop 389-ds-reproducible.patch: applied upstream- move upgrade and restart code to postun- make sure we stop before uninstall - build require gdb for directory ownership- sync requires with fedora spec file - build with tcmalloc - add missing requires for things like bind-utils, db-utils - add requires to the devel package - split out the snmp agent - upgrade all databases on update- update to 1.4.0.0 - Ticket 49327 - Add CI test for password expiration controls - Ticket 48085 - CI tests - replication ruvstore - Ticket 49381 - Refactor numerous suite docstrings - Ticket 48085 - CI tests - replication cl5 - Ticket 49379 - Allowed sasl mapping requires restart - Ticket 49327 - password expired control not sent during grace logins - Ticket 49380 - Add CI test - Ticket 83 - Fix create_test.py imports - Ticket 49381 - Add docstrings to ds_logs, gssapi_repl, betxn - Ticket 49380 - Crash when adding invalid replication agreement - Ticket 48081 - CI test - password - Ticket 49295 - Fix CI tests - Ticket 49295 - Fix CI test for account policy - Ticket 49373 - remove unused header file - changes from 1.3.7.4 - Ticket 49371 - Cleanup update script - Ticket 48831 - Autotune dncache with entry cache. - Ticket 49312 - pwdhash -D used default hash algo - Ticket 49043 - make replication conflicts transparent to clients - Ticket 49371 - Fix rpm build - Ticket 49371 - Template dse.ldif did not contain all needed plugins - Ticket 49295 - Fix CI Tests - Ticket 49050 - make objectclass ldapsubentry effective immediately - changes from 1.3.7.3 - Ticket 49354 - fix regression in total init due to mistake in range fetch - Ticket 49370 - local password policies should use the same defaults as the global policy - Ticket 48989 - Delete slow lib389 test - Ticket 49367 - missing braces in idsktune - Ticket 49364 - incorrect function declaration. - Ticket 49275 - fix tls auth regression - Ticket 49038 - Revise creation of cn=replication,cn=config - Ticket 49368 - Fix typo in log message - Ticket 48059 - Add docstrings to CLU tests - Ticket 47840 - Add docstrings to setup tests - Ticket 49348 - support perlless and wrapperless install- Remove unnecessary ldconfig calls- update to 1.3.7.2 - Ticket 49038 - Fix regression from legacy code cleanup - Ticket 49295 - Fix CI tests - Ticket 48067 - Add bugzilla tests for ds_logs - Ticket 49356 - mapping tree crash can occur during tot init - Ticket 49275 - fix compiler warns for gcc 7 - Ticket 49248 - Add a docstring to account locking test case - Ticket 49445 - remove dead code - Ticket 48081 - Add regression tests for pwpolicy - Ticket 48056 - Add docstrings to basic test suite - Ticket 49349 - global name ‘imap’ is not defined - Ticket 83 - lib389 - Fix tests and create_test.py - Ticket 48185 - Remove referint-logchanges attr from referint’s config - Ticket 48081 - Add regression tests for pwpolicy - Ticket 83 - lib389 - Replace topology agmt objects - Ticket 49331 - change autoscaling defaults - Ticket 49330 - Improve ndn cache performance. - Ticket 49347 - reproducable build numbers - Ticket 39344 - changelog ldif import fails - Ticket 49337 - Add regression tests for import tests - Ticket 49309 - syntax checking on referint’s delay attr - Ticket 49336 - SECURITY: Locked account provides different return code - Ticket 49332 - Event queue is not working - Ticket 49313 - Change the retrochangelog default cache size - Ticket 49329 - Descriptive error msg for USN cleanup task - Ticket 49328 - Cleanup source code - Ticket 49299 - Add normalized dn cache stats to dbmon.sh - Ticket 49290 - improve idl handling in complex searches - Ticket 49328 - Update clang-format config file - Ticket 49091 - remove usage of changelog semaphore - Ticket 49275 - shadow warnings for gcc7 - pass 1 - Ticket 49316 - fix missing not condition in clock cleanu - Ticket 49038 - Remove legacy replication - Ticket 49287 - v3 extend csnpl handling to multiple backends - Ticket 49310 - remove sds logging in debug builds - Ticket 49031 - Improve memberof with a cache of group parents - Ticket 49316 - Fix clock unsafety in DS - Ticket 48210 - Add IP addr and connid to monitor output - Ticket 49295 - Fix CI tests and compiler warnings - Ticket 49295 - Fix CI tests - Ticket 49305 - Improve atomic behaviours in 389-ds - Ticket 49298 - fix missing header - Ticket 49314 - Add untracked files to the .gitignore - Ticket 49303 - Fix error in CI test - Ticket 49302 - fix dirsrv importst due to lib389 change - Ticket 49303 - Add option to disable TLS client-initiated renegotiation - Ticket 49298 - force sync() on shutdown - Ticket 49306 - make -f rpm.mk rpms produces build without tcmalloc enabled - Ticket 49297 - improve search perf in bpt by removing a deref - Ticket 49284 - resolve crash in memberof when deleting attrs - Ticket 49290 - unindexed range searches don’t provide notes=U - Ticket 49301 - Add one logpipe test case - changes from 1.3.6.8 - Ticket 49356 - mapping tree crash can occur during tot init - changes from 1.3.6.7 - Ticket 49330 - Improve ndn cache performance - Ticket 49298 - fix missing header - Ticket 49298 - force sync() on shutdown - Ticket 49336 - SECURITY: Locked account provides different return code - Ticket 49334 - fix backup restore if changelog exists - Ticket 49313 - Change the retrochangelog default cache size - Fix error log format in add.c - Ticket 49287 - fix compiler warning for patch 49287 - Ticket 49287 - v3 extend csnpl handling to multiple backends - Ticket 49288 - RootDN Access wrong plugin path in template-dse.ldif.in - Ticket 49291 - slapi_search_internal_callback_pb may SIGSEV if related pblock has not operation set - Ticket 49008 - Fix MO plugin betxn test - Ticket 49227 - ldapsearch does not return the expected Error log level - Ticket 49028 - Add autotuning test suite - Ticket 49273 - bak2db doesn’t operate with dbversion - Ticket 49184 - adjust logging level in MO plugin - Ticket 49257 - only register modify callbacks - Ticket 49257 - Update CI script - Ticket 49008 - Adjust CI test for new memberOf behavior - Ticket 49273 - crash when DBVERSION is corrupt. - Ticket 49268 - master branch fails on big endian systems - Ticket 49241 - add symblic link location to db2bak.pl output - Ticket 49257 - Reject nsslapd-cachememsize & nsslapd-cachesize when nsslapd-cache-autosize is set - Ticket 48538 - Failed to delete old semaphore - Ticket 49231 - force EXTERNAL always - Ticket 49267 - autosize split of 0 results in dbcache of 0- Add 389-ds-reproducible.patch not use build date in build num to make build reproducible (boo#1047218)- Introduce acl as mandatory runtime dependency.- Rename patch 389-ds-base-1.3.2.11_init_fhs.patch -> 0001-init_fhs.patch - Fix faulty python module import with patch 0002-use-python2-for-selinux-detection.patch - Conduct a major clean-up of spec file to remove all outdated macros - Introduce extra schema files from OpenLDAP distribution with extra-schema.tgz and LICENSE.openldap- update to 1.3.6.6 - Ticket 49157 - fix error in ds-logpipe.py - Ticket 48864 - remove config.h from spal header. - Ticket 48681 - logconv.pl - Fix SASL Bind stats and rework report format - Ticket 49261 - Fix script usage and man pages - Ticket 49238 - AddressSanitizer: heap-use-after-free in libreplication - Ticket 48864 - Fix FreeIPA build - Ticket 49257 - Reject dbcachesize updates while auto cache sizing is enabled - Ticket 49249 - cos_cache is erroneously logging schema checking failure - Ticket 49258 - Allow nsslapd-cache-autosize to be modified while the server is running - Ticket 49247 - resolve build issues on debian - Ticket 49246 - ns-slapd crashes in role cache creation - Ticket 49157 - ds-logpipe.py crashes for non-existing users - Ticket 49241 - Update man page and usage for db2bak.pl - Ticket 49075 - Adjust logging severity levels - Ticket 47662 - db2index not properly evaluating arguments - Ticket 48989 - fix perf counters - changes from 1.3.6.5 - Ticket 49231 - fix sasl mech handling - Ticket 49233 - Fix crash in persistent search - Ticket 49230 - slapi_register_plugin creates config entry where it should not - Ticket 49135 - PBKDF2 should determine rounds at startup - Ticket 49236 - Fix CI Tests - Ticket 48310 - entry distribution should be case insensitive - Ticket 49224 - without –prefix, $prefixdir would be NONE in defaults. - drop 9563d299.patch: included upstream- added 9563d299.patch to fix building slapi-nis and freeipa- Do not suppress errors from user/group creation. Add some safety quoting here and there.- update to 1.3.6.4 - Ticket 49228 - Fix SSE4.2 detection. - Ticket 49229 - Correct issues in latest commits - Ticket 49226 - Memory leak in ldap-agent-bin - Ticket 49214 - Implement htree concept - Ticket 49119 - Cleanup configure.ac options and defines - Ticket 49097 - whitespace fixes for pblock change - Ticket 49097 - Pblock get/set cleanup - Ticket 49222 - Resolve various test issues on rawhide - Issue 48978 - Fix the emergency logging functions severity levels - Issue 49227 - ldapsearch for nsslapd-errorlog-level returns incorrect values - Ticket 49041 - nss won’t start if sql db type set - Ticket 49223 - Fix sds queue locking - Issue 49204 - Fix 32bit arch build failures - Issue 49204 - Need to update function declaration - Ticket 49204 - Fix lower bounds on import autosize + On small VM, autotune breaks the access of the suffixes - Issue 49221 - During an upgrade the provided localhost name is ignored - Issue 49220 - Remote crash via crafted LDAP messages (SECURITY FIX) - Ticket 49184 - Overflow in memberof - Ticket 48050 - Add account policy tests to plugins test suite - Ticket 49207 - Supply docker POC build for DS. - Issue 47662 - CLI args get removed - Issue 49210 - Fix regression when checking is password min age should be checked - Ticket 48864 - Add cgroup memory limit detection to 389-ds - Issue 48085 - Expand the repl acceptance test suite - Ticket 49209 - Hang due to omitted replica lock release - Ticket 48864 - Cleanup memory detection before we add cgroup support - Ticket 48864 - Cleanup up broken format macros and imports - Ticket 49153 - Remove vacuum lock on transaction cleanup - Ticket 49200 - provide minimal dse.ldif for python installer - Issue 49205 - Fix logconv.pl man page - Issue 49177 - Fix pkg-config file - Issue 49035 - dbmon.sh shows pages-in-use that exceeds the cache size - Ticket 48432 - Linux capabilities on ns-slapd - Ticket 49196 - Autotune generates crit messages - Ticket 49194 - Lower default ioblock timeout - Ticket 49193 - gcc7 warning fixes - Issue 49039 - password min age should be ignored if password needs to be reset - Ticket 48989 - Re-implement lock counter - Issue 49192 - Deleting suffix can hang server - Issue 49156 - Modify token :assert: to :expectedresults: - Ticket 48989 - missing return in counter - Ticket 48989 - Improve counter overflow fix - Ticket 49190 - Upgrade lfds to 7.1.1 - Ticket 49187 - Fix attribute definition - Ticket 49185 - Fix memleak in compute init- update to 1.3.6.3 This release contains security and bug fixes and a few enhancements. - Issue 49177 - rpm would not create valid pkgconfig files(pt2) - Issue 49186 - Fix NS to improve shutdown relability - Issue 49174 - nunc-stans can not use negative timeout - Issue 49076 - To debug DB_DEADLOCK condition, allow to reset DB_TXN_NOWAIT flag on txn_begin - Issue 49188 - retrocl can crash server at shutdown - Issue 47840 - Add setup_ds test suite - Fix srvcore version dependancy - Issue 48989 - Overflow in counters and monitor - Issue 49095 - targetattr wildcard evaluation is incorrectly case sensitive - Issue 49177 - rpm would not create valid pkgconfig files - Issue 49176 - Remove tcmalloc restriction from s390x - Issue 49157 - ds-logpipe.py crashes for non-existing users - Issue 49065 - dbmon.sh fails if you have nsslapd-require-secure-binds enabled - Issue 49095 - Fix double-free in _cl5NewDBFile() error path - Issue 49169 - Fix covscan errors(regression) - Issue 49172 - Fix test schema files - Issue 49171 - Nunc Stans incorrectly reports a timeout - Issue 49169 - Fix covscan errors - Issue 49164 - Change NS to acq-rel semantics for atomics - Issue 49154 - Nunc Stans stress should assert it has 95% success rate - Issue 49165 - pw_verify did not handle external auth - Issue 49062 - Reset agmt update staus and total init - Issue 49151 - Remove defunct selinux policy - add BR for autoconf, autotool, libtool as upstream doesn't ship a prebuilt configure anymore - import BR from nunc-stans as it is intree now: libtevent-devel libtalloc-devel libevent-devel - added BR for doxygen to build doxygen - enable auto-dn-suffix feature- fix build on factory: libsystemd-* libs got merged into libsystemd.- update to 1.3.5.15 - bz1358565 - Clear and unsalted password types are vulnerable to timing attack (SECURITY FIX) - Ticket 49016 - (un)register/migration/remove may fail if there is no suffix on ‘userRoot’ backend - Ticket 48328 - Add missing dependency - Ticket 49009 - args debug logging must be more restrictive - Ticket 49014 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin - Ticket 47703 - remove search limit for aci group evaluation - Ticket 48909 - Replication stops working in FIPS mode - changes in 1.3.5.14 - Ticket 48992 - Total init may fail if the pushed schema is rejected - Ticket 48832 - Fix CI test suite for password min age - Ticket 48983 - Configure and Makefile.in from new default paths work. - Ticket 48983 - Configure and Makefile.in from new default paths work. - Ticket 48983 - generate install path info from autotools scripts - Ticket 48944 - on a read only replica invalid state info can accumulate - Ticket 48766 - use a consumer maxcsn only as anchor if supplier is more advanced - Ticket 48921 - CI Replication stress tests have limits set too low - Ticket 48969 - nsslapd-auditfaillog always has an explicit path - Ticket 48957 - Update repl-monitor to handle new status messages - Ticket 48832 - Fix CI tests - Ticket 48975 - Disabling CLEAR password storage scheme will crash server when setting a password - Ticket 48369 - Add CI test suite - Ticket 48970 - Serverside sorting crashes the server - Ticket 48972 - remove old pwp code that adds/removes ACIs - Ticket 48957 - set proper update status to replication agreement in case of failure - Ticket 48950 - Add systemd warning to the LD_PRELOAD example in /etc/sysconfig/dirsrv - provide backend dir in suffix template - Ticket 48953 - Skip labelling and unlabelling ports during the test - Ticket 48967 - Add CI test and refactor test suite - Ticket 48967 - passwordMinAge attribute doesn’t limit the minimum age of the password - Fix jenkins warnings about unused vars - Ticket 48402 - v3 allow plugins to detect a restore or import - Ticket #48969 - nsslapd-auditfaillog always has an explicit path - Ticket 48964 - cleanAllRUV changelog purging incorrectly processes all backends - Ticket 48965 - Fix building rpms using rpm.mk - Ticket 48965 - Fix generation of the pre-release version - Bugzilla 1368956 - man page of ns-accountstatus.pl shows redundant entries for -p port option - Ticket 48960 - Crash in import_wait_for_space_in_fifo(). - Ticket 48832 - Fix more CI test failures - Ticket 48958 - Audit fail log doesn’t work if audit log disabled. - Ticket 48956 - ns-accountstatus.pl showing “activated” user even if it is inactivated - Ticket 48954 - replication fails because anchorcsn cannot be found - Ticket 48832 - Fix CI tests failures from jenkins server - Ticket 48950 - Change example in /etc/sysconfig/dirsrv to use tcmalloc- New upstream release 1.3.4.14- update to 1.3.5.13 - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation, etc. - Ticket 47538 - Fix repl-monitor color and lag times - Ticket 47538 - repl-monitor.pl legend not properly sorted - Ticket 47538 - repl-monitor.pl not displaying correct color code for lag time - Ticket 47664 - Move CI test to the pr suite and refactor - Ticket 47824 - Remove CI test from tickets and add logging - Ticket 47911 - split out snmp agent into a subpackage - Ticket 47976 - Add fixed CI test case - Ticket 47982 - Fix log hr timestamps when invalid value is set in cn=config - Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) - Ticket 48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance. - Ticket 48191 - Move CI test to the pr suite and refactor - Ticket 48234 - “matching rules” in ACI’s “bind rules not fully evaluated - Ticket 48234 - CI test: test case for ticket 48234 - Ticket 48275 - search returns no entry when OR filter component contains non readable attribute - Ticket 48326 - Move CI test to config test suite and refactor - Ticket 48336 - Missing semanage dependency - Ticket 48336 - setup-ds should detect if port is already defined - Ticket 48346 - ldaputil code cleanup - Ticket 48346 - log too verbose when re-acquiring expired ticket - Ticket 48354 - Review of default ACI in the directory server - Ticket 48363 - CI test - add test suite - Ticket 48366 - proxyauth does not work bound as directory manager - Ticket 48404 - libslapd owned by libs and devel - Ticket 48449 - Import readNSState from richm’s repo - Ticket 48449 - Import readNSState.py from RichM’s repo - Ticket 48450 - Add prestart work around for systemd ask password - Ticket 48450 - Autotools components for ds_systemd_ask_password_acl - Ticket 48617 - Coverity fixes - Ticket 48636 - Fix config validation check - Ticket 48636 - Improve replication convergence - Ticket 48637 - DN cache is not always updated when ADD operation fails - Ticket 48743 - If a cipher is disabled do not attempt to look it up - Ticket 48745 - Matching Rule caseExactIA5Match indexes incorrectly values with upper cases - Ticket 48745 - Matching Rule caseExactIA5Match indexes incorrectly values with upper cases - Ticket 48747 - dirsrv service fails to start when nsslapd-listenhost is configured - Ticket 48752 - Page result search should return empty cookie if there is no returned entry - Ticket 48752 - Add CI test - Ticket 48754 - ldclt should support -H - Ticket 48755 - moving an entry could make the online init fail - Ticket 48755 - CI test: test case for ticket 48755 - Ticket 48766 - Replication changelog can incorrectly skip over updates - Ticket 48767 - flow control in replication also blocks receiving results - Ticket 48795 - Make various improvements to create_test.py - Ticket 48799 - Test cases for objectClass values being dropped. - Ticket 48815 - ns-accountstatus.pl - fix DN normalization - Ticket 48832 - Fix timing and localhost issues - Ticket 48832 - CI tests - Ticket 48833 - 389 showing inconsistent values for shadowMax and shadowWarning in 1.3.5.1 - Ticket 48834 - Fix jenkins: discared qualifier on auditlog.c - Ticket 48834 - Modifier’s name is not recorded in the audit log with modrdn and moddn operations - Ticket 48844 - Regression introduced in matching rules by DS 48746 - Ticket 48846 - 32 bit systems set low vmsize - Ticket 48846 - Older kernels do not expose memavailable - Ticket 48846 - Rlimit checks should detect RLIM_INFINITY - Ticket 48848 - modrdn deleteoldrdn can fail to find old attribute value, perhaps due to case folding - Ticket 48849 - Systemd introduced incompatible changes that breaks ds build - Ticket 48850 - Correct memory leaks in pwdhash-bin and ns-slapd - Ticket 48854 - Running db2index with no options breaks replication - Ticket 48855 - Add basic pwdPolicy tests - Ticket 48858 - Segfault changing nsslapd-rootpw - Ticket 48862 - At startup DES to AES password conversion causes timeout in start script - Ticket 48863 - remove check for vmsize from util_info_sys_pages - Ticket 48870 - Correct plugin execution order due to changes in exop - Ticket 48872 - Fix segfault and use after free in plugin shutdown - Ticket 48873 - Backend should accept the reduced cache allocation when issane == 1 - Ticket 48877 - Fixes for RPM spec with spectool - Ticket 48880 - adding pre/post extop ability - Ticket 48882 - server can hang in connection list processing - Ticket 48889 - ldclt - fix man page and usage info - Ticket 48891 - ns-slapd crashes during the shutdown after adding attribute with a matching rule - Ticket 48892 - Wrong result code display in audit-failure log - Ticket 48893 - cn=config should not have readable components to anonymous - Ticket 48895 - tests package should be noarch - Ticket 48898 - Crash during shutdown if nunc-stans is enabled - Ticket 48899 - Values of dbcachetries/dbcachehits in cn=monitor could overflow. - Ticket 48900 - Add connection perf stats to logconv.pl - Ticket 48902 - Strdup pwdstoragescheme name to prevent misbehaving plugins - Ticket 48904 - syncrepl search returning error 329; plugin sending a bad error code - Ticket 48905 - coverity defects - Ticket 48912 - ntUserNtPassword schema - Ticket 48914 - db2bak.pl task enters infinitive loop when bak fs is almost full - Ticket 48916 - DNA Threshold set to 0 causes SIGFPE - Ticket 48918 - Upgrade to 389-ds-base >= 1.3.5.5 doesn’t install 389-ds-base-snmp - Ticket 48919 - Compiler warnings while building 389-ds-base on RHEL7 - Ticket 48920 - Memory leak in pwdhash-bin - Ticket 48921 - Adding replication and reliability tests - Ticket 48922 - Fix crash when deleting backend while import is running - Ticket 48924 - Fixup tombstone task needs to set proper flag when updating tombstones - Ticket 48925 - slapd crash with SIGILL: Dsktune should detect lack of CMPXCHG16B - Ticket 48928 - log of page result cookie should log empty cookie with a different value than 0 - Ticket 48930 - Paged result search can hang the server - Ticket 48934 - remove-ds.pl deletes an instance even if wrong prefix was specified - Ticket 48935 - Update dirsrv.systemd file - Ticket 48936 - Duplicate collation entries - Ticket 48939 - nsslapd-workingdir is empty when ns-slapd is started by systemd - Ticket 48940 - DS logs have warning:ancestorid not indexed - Ticket 48943 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password - Ticket 48943 - Add CI Test for the password test suite- update to 1.3.5.4 - Ticket 48836 - replication session fails because of permission denied - Ticket 48837 - Replication: total init aborted - Ticket 48617 - Server ram checks work in isolation - Ticket 48220 - The “repl-monitor” web page does not display “year” in date. - Ticket 48829 - Add gssapi sasl replication bind test - Ticket 48497 - uncomment pytest from CI test - Ticket 48828 - db2ldif is not taking into account multiple suffixes or backends - Ticket 48818 - Fix case where return code is always -1 - Ticket 48826 - 52updateAESplugin.pl may fail on older versions of perl - Ticket 48825 - Configure make generate invalid makefile - changes from 1.3.5.3 - Ticket 47536 - Allow usage of OpenLDAP libraries that don’t use NSS for crypto - Ticket 47536 - CI test: added test cases for ticket 47536 - Ticket 47840 - default instance scripts if undefined. - Ticket 47888 - Add CI test - Ticket 47888 - DES to AES password conversion fails if a backend is empty - Ticket 47951 - Fix startpid from altering dev/null - Ticket 47968 - Disable journald logs by default - Ticket 47982 - HR Log timers, regression fix for subsystem logging - Ticket 48078 - CI test - paged_results - TET part - Ticket 48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance. - Ticket 48269 - ns-accountstatus status message improvement - Ticket 48342 - DNA: deadlock during DNA_EXTEND_EXOP_REQUEST_OID - Ticket 48342 - DNA Deadlock test cases - Ticket 48342 - Prevent transaction abort if a transaction has not begun - Ticket 48350 - Integrate ASAN into our rpm build process - Ticket 48374 - entry cache locks not released in error conditions - Ticket 48410 - 389-ds-base - Unable to remove / unregister a DS instance from admin server - Ticket 48447 - with-initddir should accept no - Ticket 48450 - Systemd password agent support - Ticket 48492 - heap corruption at schema replication. - Ticket 48597 - Deadlock when rebuilding the group of authorized replication managers - Ticket 48662 - db2index with no attribute args fail. - Ticket 48710 - auto-dn-suffix unrecognized option - Ticket 48769 - Fix white space in extendedop.c - Ticket 48769 - RFE: Be_txn extended operation plugin type - Ticket 48770 - Improve extended op plugin handling - Ticket 48775 - If nsSSL3 is on, even if SSL v3 is not really enabled, a confusing message is logged. - Ticket 48779 - Remove startpidfile check in start-dirsrv - Ticket 48781 - Vague error message: setup_ol_tls_conn - failed: unable to create new TLS context - Ticket 48782 - Make sure that when LDAP_OPT_X_TLS_NEWCTX is set, the value is set to zero. - Ticket 48783 - Fix ns-accountstatus.pl syntax error - Ticket 48784 - CI test: added test cases for ticket 48784 - Ticket 48784 - Make the SSL version set to the client library configurable. - Ticket 48798 - Enable DS to offer weaker DH params in NSS - Ticket 48799 - objectclass values could be dropped on the consumer - Ticket 48800 - Cleaning up error buffers - Ticket 48801 - ASAN errors during tests - Ticket 48802 - Compilation warnings from clang - Ticket 48808 - Add test case - Ticket 48808 - Paged results search returns the blank list of entries - Ticket 48813 - password history is not updated when an admin resets the password - Ticket 48815 - ns-accountstatus.sh does handle DN’s with single quotes - Ticket 48818 - In docker, no one can hear your process hang. - Ticket 48822 - (389-ds-base-1.3.5) Fixing coverity issues. - Ticket 48824 - Cleanup rpm.mk and 389 specfile - enable nunc-stans- should also define the username- fix building systemd stuff - create user and home directory for it- limit gcc_security to TW. it enables compiler options not supported on leap e.g.- enable more gcc security features - enable selinux - fix the systemd options to actually pass some variable and also set the tmpfiles path- update to 1.3.5.1 - Ticket 47982 - improve timestamp resolution in logs - Ticket 48759 - no plugin calls in tombstone purging - Ticket 48665 - Prevent sefault in ldbm_instance_modify_config_entry - Ticket 48757 - License tag does not match actual license of code - Ticket 48746 - Crash when indexing an attribute with a matching rule - Ticket 48497 - extended search without MR indexed attribute prevents later indexing with that MR - Ticket 48368 - Resolve the py.test conflicts with the create_test.py issue - Ticket 48748 - Fix memory_leaks test suite teardown failure - Ticket 48383 - import tasks with dynamic buffer sizes - Ticket 48420 - change severity of some messages related to "keep alive" entries - Ticket 48386 - Clean up dsktune code - Ticket 48537 - undefined reference to `abstraction_increment' - Ticket 48747 - dirsrv service fails to start when nsslapd-listenhost is configured - changes from 1.3.5.0 - Ticket 132 - Makefile.am must include header files and template scripts - Ticket 142 - [RFE] Default password syntax settings don't work with fine-grained policies - Ticket 548 - RFE: Allow AD password sync to update shadowLastChange - Ticket 47788 - Only check postop result if its a replication operation - Ticket 47840 - add configure option to disable instance specific scripts - Ticket 47968 - [RFE] Send logs to journald - Ticket 47977 - [RFE] Implement sd_notify mechanism - Ticket 48016 - search, matching rules and filter error "unsupported type 0xA9" - Ticket 48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance. - Ticket 48145 - RFE Add log file for rejected changes - Ticket 48147 - Unable to enable DS service for auto start - Ticket 48151 - Improve CleanAllRUV task logging - Ticket 48218 - cleanAllRUV - modify the existing "force" option to bypass the "replica online" checks - Ticket 48244 - No validation check for the value for nsslapd-db-locks. - Ticket 48257 - Fix coverity issues - 08/24/2015 - Ticket 48263 - allow plugins to detect tombstone operations - Ticket 48269 - RFE: need an easy way to detect locked accounts locked by inactivity. - Ticket 48270 - fail to index an attribute with a specific matching rule/48269 - Ticket 48280 - enable logging of internal ops in the audit log - Ticket 48285 - The dirsrv user/group should be created in rpm %pre, and ideally with fixed uid/gid - Ticket 48289 - 389-ds-base: ldclt-bin killed by SIGSEGV - Ticket 48290 - No man page entry for - option '-u' of dbgen.pl for adding group entries with uniquemembers - Ticket 48294 - Linked Attributes plug-in - won't update links after MODRDN operation - Ticket 48295 - Entry cache is not rolled back -- Linked Attributes plug-in - wrong behaviour when adding valid and broken links - Ticket 48311 - nunc-stans: Attempt to release connection that is not acquired - Ticket 48317 - SELinux port labeling retry attempts are excessive - Ticket 48326 - [RFE] it could be nice to have nsslapd-maxbersize default to bigger than 2Mb - Ticket 48350 - configure.ac add options for debbuging and security analysis / hardening. - Ticket 48351 - Fix buffer overflow error when reading url with len 0 - Ticket 48363 - Support for rfc3673 '+' to return operational attributes - Ticket 48369 - [RFE] response control for password age should be sent by default by RHDS - Ticket 48384 - Server startup should warn about values consuming too much ram - Ticket 48387 - ASAN invalid read in cos_cache.c - Ticket 48394 - lower password history minimum to 1 - Ticket 48395 - ASAN - Use after free in uiduniq 7bit.c - Ticket 48398 - Coverity defect 13352 - Resource leak in auditlog.c - Ticket 48400 - ldclt - segmentation fault error while binding - Ticket 48445 - keep alive entries can break replication - Ticket 48446 - logconv.pl displays negative operation speeds - Ticket 48566 - acl.c attrFilterArray maybe uninitialised. - Ticket 48662 - db2index with no attribute args fail.- Update to new upstream release 1.3.4.8 * Various bugs are fixed- Update to new upstream release 1.3.4.5 * Various bugs are fixed- Upgrade from 1.3.3.13 to 1.3.4.4 with accumulated bugfixes.- Update to new upstream release 1.3.3.13 - Removed 389-ds-1.3.3.11-CVE-2015-3230.patch (included upstream)- Update to new upstream release 1.3.3.11 - Added 389-ds-1.3.3.11-CVE-2015-3230.patch: nsSSL3Ciphers preference not enforced on server side [boo#934934] [CVE-2015-3230]- Update to new upstream release 1.3.3.10 * One important security bug was fixed: Bug 1216203 - CVE-2015-1854 389ds-base: access control bypass with modrdn- Simplify filelist- Move bin/ and sbin/ to /usr/lib/389-ds/bin resp. sbin/ - Removed conflict with atheme- Update to new upstream release 1.3.3.9 * Several bugs are fixed including 2 security bugs Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all] Ticket 47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly Ticket 47451 - dynamic plugins - fix crash caused by invalid plugin config Ticket 47728 - compilation failed with ' incomplete struct/union/enum' if not set USE_POSIX_RWLOCKS Ticket 47742 - 64bit problem on big endian: auth method not supported Ticket 47801 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown Ticket 47828 - DNA scope: allow to exlude some subtrees Ticket 47836 - Do not return '0' as empty fallback value of nsds5replicalastupdatestart and nsds5replicalastupdatestart Ticket 47901 - After total init, nsds5replicaLastInitStatus can report an erroneous error status (like 'Referral') Ticket 47936 - Create a global lock to serialize write operations over several backends Ticket 47957 - Make ReplicaWaitForAsyncResults configurable Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD Ticket 48003 - add template scripts Ticket 48003 - build "suite" framework Ticket 48005 - ns-slapd crash in shutdown phase Ticket 48021 - nsDS5ReplicaBindDNGroup checkinterval not working properly Ticket 48027 - revise the rootdn plugin configuration validation Ticket 48030 - spec file should run "systemctl stop" against each running instance instead of dirsrv.target Ticket 48048 - Fix coverity issues - 2015/2/24 Ticket 48048 - Fix coverity issues - 2015/3/1 Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)- Conflicts with atheme -- /usr/sbin/dbverify- Update to new upstream release 1.3.3.5 * Several bugs are fixed.- Update to new upstream release 1.3.3.0 * First cut of 389-ds-base-1.3.3.x- Update to new upstream release 1.3.2.23 * Various bugs were fixed - Highlights since 1.3.2.16: * Important bugs including memory leaks and crash bugs were fixed (1.3.2.17) * Various bugs were fixed (1.3.2.18) * Various bugs were fixed (1.3.2.19) * A security bug was fixed (1.3.2.22)- Update to new upstream release 1.3.2.16 * Directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind * Create a normalized dn cache * Replication retry time attributes cannot be added * Empty control list causes LDAP protocol error is thrown (dup 47361) * Failed to compile the DS 389 1.3.2.3 version against Berkeley DB 4.2 version * Windows Sync group issues * Size returned by slapi_entry_size is not accurate * Single valued attribute replicated ADD does not work * Environment variables are not passed when DS is started via service * Propagate plugin precedence to all registered function types * Unresolved external symbol references break loading of the ACL plugin * Package issue in 389-ds-base - Fix unresolveable 'Requires:' * perl(Mozilla:LDAP) -> perl(Mozilla::LDAP::API), perl(Mozilla::LDAP::Conn), perl(Mozilla::LDAP::Entry), perl(Mozilla::LDAP::LDIF), perl(Mozilla::LDAP::Utils) * cyrus-sasl-md5 -> cyrus-sasl-digestmd5 - Macros for dirsrv-snmp in pre/post/preun/postun- Update to new upstream release 1.3.2.11 * Enhancement: ACL supports new keyword SELFDN as in " = #SELFDN" to allow users to create entries assigned to themselves. Also handling subtype in ACL is improved. * A dozen of bugs are fixed including a crash bug and a deadlock. - Spec cleanup * enable init scripts for openSUSE < 1220 (e.g. SLES) * dirsrv.target.wants goes into unitdir * Added a 389-ds-rpmlintrc - Added 389-ds-base-1.3.2.11_init_fhs.patch * Make init scripts LSB conform- Update to new upstream release 1.3.2.10 * Suffixes used in the memberof and referential integrity plug-ins are now configurable. * The hard-coded limit of 64 masters was removed. * Enhancements: plug-in library path validation, replication logging, changelog trimming interval, and referential integrity.- Update to new upstream release 1.3.1.5 * Plug-in transaction support * Normalized DN cache * Configurable allowed SASL mechanisms * SASL mapping improvements * Configurable SASL buffer * Replication retry settings * Instance script improvements * Access log analyzer improvements * Performance improvements- Update to new upstream release 1.3.0.3 * No NEWS file available; SCM changelog entries at http://port389.org/wiki/Releases/1.3.0.2#New_features_.2F_Fixed_bugs_in_1.3.0- Update to new upstream release 1.2.11.15 * This is a bugfix release to CLEANALLRUV, userpassword, schema reloading and others.- Initial package (version 1.2.11.12) for build.opensuse.orglamb05 1522622737  !"#$%&1.4.0.3-lp150.2.21.4.0.3-lp150.2.21.4.0.31.4.0.31.4.0.3dirsrvnunc-stans.hrepl-session-plugin.hsds.hslapi-plugin.hslapi_pal.hwinsync-plugin.hlibldaputil.solibns-dshttpd.solibnunc-stans.solibsds.solibslapd.sodirsrv.pclibsds.pcnunc-stans.pc389-ds-develLICENSEREADMEmd_docs_job-safety.3.gzns_job_t.3.gzns_thrpool_config.3.gznunc-stans.h.3.gzsds_bptree.3.gzsds_bptree_cow.3.gzsds_bptree_cow_instance.3.gzsds_bptree_instance.3.gzsds_bptree_node.3.gzsds_bptree_node_list.3.gzsds_bptree_transaction.3.gzsds_ht_instance.3.gzsds_ht_node.3.gzsds_ht_slot.3.gzsds_ht_value.3.gzsds_lqueue.3.gzsds_misc.3.gzsds_queue.3.gzsds_queue_node.3.gzsds_tqueue.3.gz/usr/include//usr/include/dirsrv//usr/lib64/dirsrv//usr/lib64/pkgconfig//usr/share/doc/packages//usr/share/doc/packages/389-ds-devel//usr/share/man/man3/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.0/standard/6fd1dd5b96694bca399c448bc2598376-389-dscpioxz5x86_64-suse-linuxdirectoryC source, ASCII textC source, UTF-8 Unicode textpkgconfig fileASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)PRPRRPRR\ٖ֜D;{Cutf-8d2cbdce57c4a246f1cad86447fcfb2c7ffe74724dd4847e94f87005b410770cb? 7zXZ !t/w] crt:bLL ~bNZ9}^><ß^ ^!y5͇ۢessEkeZK4kBSGjen^)a8yhVB >i9gL3)ָXt@JtF)RL /X8V;윱_rЄhvZ璀43L6=3b&#~Csɠ<> %`ksKFJ|6?To{~!߉#w(wnH#|7|Z'Ҹ$G(&CQGuE/,)tމ»8H> !%0 d&cx)9o?Qԑ@Avԃ2-a):9pV]Ge:TM݃e$K' n.1i1uTF },=(KΓ_{BUey:^6%#g]|#WN2)fwtB/GS=Q,#c@x`^rg,xV:{{;Q- A ܜ ǩXmUS-,_ȁ4@F*u´s]8& ;q/:EԘFGDI65"zXd:jw6'69dI-83xU%"8_o%;ܗoAXcޙm!O- m:!J4&}Z 7>rs(3vݥ;]l $>v{9Kw3""4QBhzlTB #K0J- %"!%pѻeBcbצMAdWA]'%Y;FzkQC '\u-6 y%`fY jKg5Y;&7h5sj]?t`*'@B0,FA 91[}@ƿUvf8^Co;&Ŏ9P- ^}O/4s) ?/;)e2Tv. ~c,q2e #4;U^l^G "Ekd^ [w]@3Ժ hպ4.J%~a #0/;݁kG_eX CbkQG5Eħ#;.=DtcF=qoɥ6\z '[ &3]d }EYSTH:T-!*πq9YSHJYsxCwy*7s $ i2<ɘEnew/$Z5ֳz@̉af2Jl'%RP.ݙ0 Bqmt=gNu8^#$v.H-'/HK&o|as # 74-"-N"ʙЩ>Q4').*񞈃:Lv@^^1 5J[ ¨"ڥ"8ţ#[LCsf̘qɩvT7)x[\֞nRltY6ׇvu%%%n80:I׿Al>,TZ(3LiZd 7}mCxsM?ìN+oBFkUxs pjBOx1cKmµPw`>uԻ),yv~.&r2-l1 -!u& iNcۃx!ǔڗxa֨)L[WE[S 'p+8:X^? Џ>υy:oRfeSR''qj<aDyC7 <K9|>{8ԬFRiM `_>{ {,RIQJb?"qOQwz!|Pٟ+T̚41]-S[%tvMsi( BLz`3Lk"kmCnN|;7)t7Mq&vaZʈ|]3JvJHg6/`^TS~ixLGvT ʉ&sRcdt+:W; X3`$F_)ឤތ+laHzc_S0-Pzep $$t i٬V=3]nXz7#m G]ӠBy(C(uD4~QUL<'?/\5S=bU7E>!aaD M/q͆qLHѶ$JP̚fxrXϻ/ A^,sjsQw(h@32'@xA@$=|מk?wS: '73y=@ "_X-|$AG%}ZH^" Bl鲩JQ#UsȺvS5 iOg ,[IoM+_ $kBJ+T' Lt 1BxA-;Ukgbe[X\Zzt|h}sS-7ewcqfZ&o 2dd1f7MlERA`Lր}&4+'C]65Gmѧ,'[-WXK9H(!z=+V3>buREn[,S%`ZO(#YB3*n*!S'CeE=O+7[yq gc.8Ktb(S[-eoO6>@@8 1InR %A҂wRL^d!(e-Hĝ3hdIh#Y*FQlEr?ESVEljq"ԣA L#|1͗E|{PeXcÂ,=f6\c؝"GpH=Ik&}_)${ ec{ f""B`à9xZA%<`(B܂Ho=4вl;gyF:! ³`0T6<}g֊SīxɘW, eX.HLlt\.+:c?HL$.4ų?8fƫ]fj~U2.@?ۻL|CN"wioLhj;VLDiQΖ_䥷;FoZM u ~_Y?cmr)~ۢEfYwHLF`r)xe!~kx0ps-InTs3x,TbVm(z(1ܷz4R-K_%UdҟȞrQo a +]HilM1|OrD(͈<*l${j窜$c~DŽa-?:*w;LRsh#}v-Q'7ԍ[Gk *Cy=ǜ>i#-;5L&Tf/RB>0@Z( \r]u$ LY7Ni;8:/>], X x#9dGgϾ]^-ZG?al dNԡO9ټ2 f1*)W3 a uTh8qr1cM nkșzOlTT4M Dxo[Rj=]UN55}U8.Cr2蕳*|RR#a&ښ'9/CpBȻh=K+onWTTǔY$G7V5_WWW:'Cio$+(%q&vˇVB^lY`D% ްAW|tz3PA"g%)LRX1vne!OH;`xk;V]ʢZQhL?M}lhkW;FŸc1tu:Z&Gkìc_ߵpM>=W\$4"y\¶!}Ǥȫ5}FTXEpFjE౒@ e( 2G$ͣkW8Fo[|I&)MmӖ`_>SmAM6T*)Mg^tyD cc?0nsEJΐW dA/[ tf Z)F%$Zm7*Ay"6(UZ nV{\b-GXo2Sx-:j Lj /1e b( fVP5zi8]pIrLr1`۬斦SZ%Aha?2G}hejŌ5Ӳh#8]N{v!.q9<-bU# ʼns^$jUr{Fm=f ՔWD(8:!'JYp#0Cfnsy;LV;TxC St/3;To*5kRG3 sVl8\mnG1sp#)K&℩x[YN)?L&y5d&H< !F,Kn:nNj iwjf--q6"dž3ͲGPk\zMKj4^0/kP;د:!:(,wyE-HO!=>F Xsu/G\ 624 VG$e7_E'~MZ4Е]76kFJ|cHW~2,d0 vc4Vcˉ#$pW2"@{3'SuN;I% &]+YglXw$lMlWS|  g :Õ>^REJThONj6]_R?cDo%a:ZZ3Q&pO4XLaٝыq)F5*E}o܈ozw>@#y1J>p}B|QЌiIj{g¨A1n` 登_8e .lm @Q4 ߌ K7eЈ+j#ԛsʂH0TmA%s#Vs}OH9cGahɟ?P%sǷn'Ե\ c8H/:h0/s~mzu n례y~3"Se% u' V=/Y*ׅ/NZOpwD@Μ%)E\#VίlSYrƯ lۊѐyz)ՏN v \{^s*Q!H@?$h8߸Bs({GO{8Uk>됻%b UdhK37,1YH2eK~v*(;lsYNRcR "e=, 4{CeRLfRݎ:GH7sf R *zjQ KJ}A=6@)G mK{ i50 Ə}5k5j '0]) k#F[1mL4EgL ׻›r; nON2:5B:6J$1ɑX[|@AhSl{1Als]*x{E{"`vW t= xOZ:Q:Fi) B((jd 3(yh"0o 38 NFGSP:sn(  G{ʷJinUXeN=_f"UΝW9T,֠qn^o(xkJI2B|vn,#2te|QBX˗&گ2U &NdHxE!CKݠ&Z3D UJܹ('Sr?-48&n  dI EV`+CYh $9̀b(@`6t|./gp, B>dO cq@᪖.wGBfGG:mJe>*¸3'<CtrKJ %bBu􍄑4kGX n=\}O娝TdX7˧K640W澲]0O꺏"ym?JV&zS5G 35@N'Drz(ܰEp8D6iQN;ܘ `He%ÈQP8gvkshuJ8B TN](N,q7J$ iq?F { J^!R߾`[ $TqG0mNw{Ngn"cL??d[CNJIt~3]H=b#A:MݭлPPJyLWB/TI~ ,0_6i5hGݰ_C'^wFsKkpԃ5սZɊ;"%b(9A;;K Udm`d+`t%)= !\\0:&BkA0;-2lpOUuXgVlN4> j1fvt_uusXsoBj{dvJޢOn qra-f 1[vhPI}F$-X,+&`8{8.&4>Tݍ+&52~YSPqݎim櫐m7j;OtDGy5?;Md*6{aup.qT8nI xq@$Ɉbej&=j0` /UkҀӊ\4OaneS)DMi=pFn-V(Ϣ_%C^uh6[;6 P Y;$mWJFdCž-C d0msnBsTUGԅb@>MX<:~F*C~Q)Vaw}TNp)O>%-卮8s^k<0dXZ^x\PJq^mX;[G0|lmBM;'< ҋ)%r҈r7t=1-FqJ?Qiw6-+HSlT,UX}J Tܚcmjr-kGDk}!Z" bٴ)| {_{5]v2¼})e07l+λ Am D԰+0ofӌUЩ]v#Wg3aΗ i0_sڣp,&%Hj:z[k\垁0Kx@+aupF>A` |`>rPV3(y'Mħ7ƨu ] j6` *bUDž]l2R]U9\`L*? 8k)P(Kio2IN hyUHY0(PuvTU8]CF)fִY0[i,m7ҽMv@BGL{\ZB҄G['o@_Έ!O =-Ʉq18GGor˜nu`ϝc"\<7/HJ ׈lO3ƚoX̯x}^9zrV\ev"x wȮ?JlP%`6ӭ_*T^õ9sqƪgI}_ƛ+]2+m91 峮+S4m` gzt0ӹx"SVpU4$KCýU/S+(zj0_GeʗuVUU^mz}vt 0\KC~KkO5Blu"e&i+▗Ip2,VsE<&x a(XΜL 0, I?,W!,Qa.">y3Gvѿ\pu(PǻNhՏ KTLWN%%󓂜n?4B0NlQ2&B@uVʗS[-۶MLXBGV5WjT_O؝5o<ǫb~51Պ{]:51umݓYm,50t:܁!n|bUk/Alh-\NvOK<7Q]%P2FWa5Qu9B1_In>+y=-DO7֤k|BZ,\ s4PE`_Q-]nkrwGM Ccɍ1Kr;7]6Λ~_F #GKbh"u=8'4*fSda\UXyqB +ݱ5ڸFWϦ b]1| )$j*yt"PA>"'vew$KIi 4mVڪn%Q.dZd * wy@/& 9"{ЫU_'7YF\" j)+^CO$,ceᲖPň> \>F]v1z'VAp X)FQLx5#_"Vڇ՚8$~gmH@Si'Ų>j|cfKTLoȤ4.kw;z ِBL,DTMB)'|( L( ozN{&\˦BCBe"|º70U<Ϋw9¦~gC( (B L cJxXUM"7BѳǞvMZ"9j+Aݹό^ q$9׃Ef0,.]mJRo4*. fv7zԭj w+[Ln#罄WPVv;nśȽp_ņs5^;UlK#Nb,Tɂp}20u?lwȎhH9pz,J)tK 8h/ $%bD9=GTu[m3I;4سLЭŐ%#2CġZ<nCԠ'"7YYdbfdg^.qnf FE(W ic3;%Xr"0Rn.J )+LM%ǔ/#Bp|u^S|:igP+ݲ7pPYj4 #ɉ3h'YuN-+ j/:Ҕ;;>33iڎ-Rz!6~+C@n{fS%8sN^5n1[>ӛ&w u ՀOň>I+b?vp2rq׮ #u]lV)D!o_U:SsbTw ~k4:[?HV4%Ē GŀJr3 4}:_[ q-GVGnX ɣY6'Sό']Y[KUi%htњ>W˝{K{ƷDkn Y:ϒ%m᜔Bk!17>nNJ ;(VƌO9UCXL_Ɗuf$ȏR܅FL8#Qv?bO6%X;M]qʯavw fA81 ͹i- H7nDf(@¿g"zIs)kiTy2ѫ?PL(lO݋܅s7hKYBqyuk~}#MO0c< :l"1\wr]Ԗ~ T7{/9[~y\c5s\v}~ju3zKmގY;A1H )k,xN% a zcxcѷ73YfjXd;'Zڿ.E4y ^.>/tά$KX۔)ƏdҢF`Q0]9Ai|;gbCF 3EU|E 0 XLhhS|PLɏnġfSOkܣR $46B46p3Xb׺`RW`m&kX Btk^n.4CTv-H4F%M%~`8îj954Obf^K^Z9<]`$5|A1W/";}g_;!`?i0RCV0]f;S1$~"MmHpRBАI`oxa6jqo%sܹV3^JZs0+ɆTUm=;qFR#F[c6[0aXi wY`rެ%*'z )L o`GO} t2ڲW3l:* []5s5|7s<{5 _8ؼ ` MR bb;{<~g;嘴m7N;}:Rt۔a'PiLd^I D6|6HˤT#9eS_%>?,6RH|A ,ੰ F%4c%ͣҘQ%7r~ËEwFU7JR@*lW{!OIaN8>&nb'g2 OAz[T* mXR^5gLkIEPэM3>!&I0%L|Ɔj@qG[h0#֫BbpJ6Buv7݈-pVWiS":& FWUmnV~dl q( M훩V+݅Pe2h\?.%BUvV@%Z0povnP[اX `+ ^`>_2E['G7n@aVMueK^:i$H~7(6k(j![]Lcoz-=ːԩ"=;8Dz(yW\L+WI$JqdBbr=@G]JjC̟TEQաJbT9,8A.5г8DT4~)贓UEf[}ˬ.eOC&  ^\ )r: ބ_6;)wZY\DKW,"9c>6=PuE=n&Ҋ8M2nkk֮mxO hs`bu3s)S^_X=pWԭyR $ oD5rޖ#]J9dЧ~J!D ]` &ߊ #r݆ae lqRWX3'V3u%~cX%w`UxķRxܺ-0៹_8m%g f4u< F8Biys+_P9J}>)d.mG[8%2{_.hg뮚=|)L AT|[Z +T2Mצv*o@ŬPW dګ]^l2I>3_"Q *ȟD ^IR`=W y;)8 +EV}KAU;"I!v۴N<`p@e+B 4ֳ© G0Qeh Nwۄ*Yb"T@^icxOxNwy%nqU2OU%L7/ܕ*ȪPMVewm_gJZʠ&3^YE=gQS /uګ#G-p'jTUEʃ[唕nՀ*5ds 7Fo? >;UكNA-Б25w+^+屎ۅkb[NZDv"!1:NH ?G`dM8c+=xlej9`"s{ba%?Сб*+(p:rISnemR C3Cs[L7U!tRKm2h BӔuvSL+) @űB)XHeA"]s?2.o#.zb֨j*ÑӴ}]Z' gwkUKi[qN_Hp3U{#+Xh'SEz|/n";"ٓR+J矞i_g ΅!4|?+qQbLPVXr$Lr6 z\[h O#_y U  /m|ǫMF 9Cis׀T%TC|sK/*( M^h1!$Lir9t ~Gm.dVCց[NhAȫbO^M`-BXb\i 姤?5 b-Kkn+6Fw8}> 'AΪ@[-tԝH)Z2K%R7Z"x':wHDWc:2Y$*,,M` NJ'؅ `K%Q^=VFڈN)= BŸP3,|EY*Fܜ |*w'$OiH_C6wԁz;BsRM^ln=0W8[!kR/s?zr94$1;9nxxH;19b\ORBQYFZ2ʕFیV]t'ϘY Neq9Hy);sk4A~>Vlz@E!v)$ĥ]P{|{Ff=?;iiպ:3rd댺`¶YJhNyм>q)Sb^YTi_g(սY>R\'~KWZ* P&P,p;&iFWGt7n􂙤[meP$+LإWl :ex]ݩjv%sʧet"''d^mC:LTu?i8L`,X[rN~=R ]N1ۛv;g̻ބ? c@YDTljWON^M{"$h` w69]Ą ,Nu.Zis95DZ8f^q0Y e,OPc{HwA j_5Ptv,:7.EcOi'r4Ji;"s8CW}%Ky2js"kܹ1|׊Wv /[tCA[Z3],K$esF AZXl 5ڱv>ϲ&[F5$@ W,Y)AFAJ ޵+FĪ2I7,\JVn5v$_0x)ap#f|IAM2B)IΙ vt7\Wöf_K=ZQ/NEW߯!zRԠީ#ǓZcd9fM3ftS gD6o2#&?43&d iDO6hV6 DGzir!afW>Z`pYmIl%%{y|!Q,qckP<| TڼVʺm_d \LK Wosȇkjk;8kΛIkm*N6%2_e\F=V )8 C/hoy$j -ޅؑ:t1[}k~(`ĂCvϐ7eu@;x8|'vhxrN]˕}iTB=Å"D:񎼑z2%#$ 66 U)"u wƁ;7!drד1[{x MO˸"b ]&.#B=4BUSt-Cڢ8}EX6X5-.' Bf*q[+:УH k 8$O^*(G/IzX4CeLv5[Jbi{Q8GUy ud]wx#FHCrr6cPҦ:J.#X}[l_O`fH+?ڸ K~DX!P,>|j-L)ft)[MW:.cnhe,!3m&߄âHrr󯅒;J|aSvӷ@A_apdʥ1oHld؜瓉\OI#,Hy݈c_Vb?1 0bUGf&0z(}>mה'rm }A5m 2"âhͨ{oiYgUR$)B)/tQ(2w%Au__]{}4!2d&F6;ph#镖`V㙅I\#|y$8o,:tP1YBS(l$Htj\^җ Ni&_pG/]^Qm*?=5f<+aI9-gQ#ksV.1Hv6rwe)f>ʄIxp܋6"kDMm*MP(0.fqBo460Y#ʕpn4$lyR/ B?qiGChj&ѬK@m;A" Z4 4Z }3sТː*L&8f"(fsz\.2GjtmxRtQ*W3 Rm͋ķJeɨ6Js7l1CnX~OQy$sO\A=k:%T:]W!Q!#7)N CE>ĐSi&anH>e>N(@ʁmE));!{!g{ltup*iio% dyJ!sy::iؼBdL01 50u܍j"*r&>1WDߏcF(UBh𐩏9Ŝ>#S~E+8˥{lm^p;ǀ p8_U% x߇TKJpK潡Uoa"k`eԇQT}+/Yn,R_K_;ө _mFk5"#RGK ?u֧UEC,H^,H=g{EN AO 23o9UQpEK]Jkq.ACz}EܜV-YPvI*TH` Ԋ'bUݡ&;bȃxq2awLT0 9`w37|V4/kH)1vixZTVW;ݿ!7\D7^N_ٮQ:45* @yieUjϵwRgN1AnS} cn%X&5e-,8%oQ|{ۤU%vM(bۖBz?I#k#\eKz N3Cś%CNzs Mj-p.uQNqlDY>Q⺩E[,3b^EV:zt$<f@bmaݳVM_^# tёtX , 2!g :Dv,д'@sO;e#S,P&dc (sρPҟ kkR~8(%Vc7AGnqcK";OjNhˬ[X}P}Μc2I8mܐ)`IZa/'0v]榀Ipꎹ>3D \ 7oN#=N73eNm\RyS OzPIp2}@ *2=GP[{_ hἠNM?&f:C]ѱpmc{*.3=BsAQY|!ir JTqe'&߻K&^ͅOK;JWF{l G!0O¾L죸r1Td_P@=])9 Mj`J-|h/cr$9tT8yI4GS9خvX([dh}Kj8?CGw׋;;{gnK)&ycT~st/j׆^v,šS6ftr_2&΁[) 7%9*~r-gG&L4/#2Dǰr-?ΞDG$i 2#Qwԑ2 u;EFzZ#8L]0N/#[Br"@=O9՟+[&_/ikt) DpzWTzX x-cq:<+AV qm5U ˒)krT1Ń7S"Og>cԙt ,rb; gӷ݁DA|\A:AFo)gӤZEd˓e.G&HJn?ay=^tZl+;޾."޺6Ȋ{[P /3/Љ7UV p4"5rtnr`Yg,v^z,eBbcZ/gLX@ I$YB˂Rk.m "==mnhƓ~ل}6%M ^~J-9"C%u אvoW2]H{)1zz!P;ku$Ni㟆]Ͷ>ώPv8l*q6P ff|>\d.>b?&ynЂG ?U2!%nWgФXc8MWw=C٪kǣ+χ%6eAr)ڶ0)怸y8C#&fPK4)}m,Xvh2Oؔ^Pub,m t]gRkqe YYˠ:WłqYRyDnVEׁC[n1j<% bF]9==m\%*$ʞ(5 1S{9P"KݟOЏ3쩸UO k@lc6>tz@ uH6i0NEf~`|Cvi^6'N&<“_ +?WpaغX2ʺd @Xi+[})Vs,gDKqa3 Ӌ`{Y3}K> q$N򄘌tž49 J_sml`LP ]/ Lq !bёEk(mݚIsR ֞tȖz4_ֳzýr}sߋZ3ކ\ùr~[<3F KAtdh4ph|D'X|uW6 钐H:Xksn֣& 3q,T+=!w .V[&f;FJGd]샩`2Vk_%)1/(H|D$nz[W ,S=th^JV_-"ױŨ}Y.߽YLjAhX{f ZM6Ѓ}`qVnbCU,sCyJտ/F)\Uձ_ S}ɊFhfBV5pr7{ܝŎr?J -gP2n!I}r.9o0WZ&GD@t~ hlT(f"Un~1D<L0O}O^WC.SpPKmv/U9 zaMTTQ"+ˋmpZ[-tɀ7F.A`% {RTy!g9и{7]Qr8?1 0!|+ r@HŦBCYX3LO.J@QG}^BBe>~7ݲ-/E?*+i;N}NxKl*#+ f\ zlaSJ\046SĹX68B#']>h2w9a؈* *Ku&W["'h=xl9A>O9Ejޗ꿙-v`0И!˔%:NZ u?lTʢ4@󍇘*͉vuuJ#Ĩx+XԄNjddAv]!C%B% ]+#,ΈG u=e˽T&54RDɀ8q(5mѽO 4Ցmfh:T Rۦq97|I-pOP;ԄnLhɅlo@N 0"?]|Flr ZɋP.VA0}4 To7d#VME)j+^y@c-{zwW06~ze ()GrP6{&BK}hatrlp"Lt]D!vk( DG5ˤ;e @ı`9"D|OrQwV;å<:rW[ GPi[?*yk\6]B'LۛL &*}m |EVR_zEќ|%LF{W5*|2x\9\ :Ҝ>$`Z̵/S@(bw$H"e14PU`{8!gpA796 d2az^x=3+kiۙ׷ 9tdW|U&.{$%yg2ٔob*${dJ$,ߜ^I3^N2 !lM*NV8-$P+&$(ʋwx|R {p{ GF;tgp^u3-OR[z,ʅ`) X hTϏ,r^ S!@!9'7~kr'Ɗ,BX'ꀨ3j4zNqϺA{*6ֈ 7 X'~9qj+ ?p=3(`Y'l?ĺ`,cpu6'Vd;w7Zt?vH{&e1߾ގS'1XJ3^AUT6д *LND`kPόsDpql:RZr9Kojo&竆ˍ*\@lD$[69W=>'ƃg`{(W(wwf𫥰 (-#c yZprl̞$io_E˛a0YDLhT<[鎃^25Q4dW`70#~t7NALd #;5R׏hZ|͆2RY+t83tSXQF'Sg(OU$%'\" /hdGLDOXԥ Of}LƐ2u[Yu!y02+y;ҝro`~0/_\h (FG̲>GQwаMuy4H/{*{W铠O]2lS(r.۲a@p*pc,7!$i\W0tRޮ8ssr8Sغ6`ˤ+$A%FJyGcCΜ9eۮ*#7k@4C+FCS`QOh+6ϱRw=gTP]-*bRف m(w0$m$'*6m[Dz*rm#=Ch}*crmWY ,ҳNѓ"!F]X o7. =qT!b%)l i4~¼?Kk9SXInR{ h~7 ضߚEne>)xuyI"TlÙr'|tGL)ePNL6i'TBȓ=4lZj!ޢ0ScߢdQu1nW!Ҫ>`Eaml6 .hIN9;77OE݇.d{acCdx@zy gE;i p',_͘ C}>%<~(Ǚ`C,w?#A~de(OrI}E*7_}jk b"65~" EaN0ҡ?qAҔ@3Cʻã_V±V&t ;^i_J)Ɛj?Gmo{lhJwYVzC~=+NNV|`f3DpgDhDWgjEVAT>[ I@+gBpoCg}Ńh@ z ?tXNrΚFh > E T7E=O(:Ňy꿡 )e<@o);23UBcm"YD}l'F|L-&jg+ُMzְaBIQ-C IWbdtCpq\Jf&#:zQK)5N{.K/v#xr׮nqmZK1DE"fG5x#帝 Gx4[ճ)̅,>+l&7\yaۤ*}+S!!fNܒHi74| mwR9$kEO@`]!ʬjñ={0X C.65f7v?~lB("UR,bOS0f^0UFxI%ƞ(/^ AdtsLI9",fi;\7hM@׏DXL_tҾjxF,@fepE}JǨK‰*,be{5U`YUmW>mH`lRW0+j GsCT^S& &OnR8ֻ5N+~CQY^ŷ@G!.@RNթa}B&_~2һ)_Ӑy,cFnX!c,67牱g1rK٠xe ;tZ t6W&\֋+Ǿ ^=؎Kr8#=r}IgѮt>8 ΫkzL`vC9N(f-¥<)0ĄzʾGYLJV+ThsRFY_ݪsBc2KrL뷺_UYk 18|L=WF+_t'G{K3}3ٵGHxP37X{u7=WI2ϑĠTU+]Ì{bFȲk; 3z*e+rBxR.6j}d:q>! `*- #rd/T&槒d^uZ%|q]^ րO!Amǔt{i{|0눰( |Q0#{Ӥ=IEj85}@#߾3BrǶ ?yvv Q8\62kNNt( aqx>fsojzZ]øZύj!zx1 P9)tE1s]Á*Rൂ9N&biD4cC]ʗx$cH1{is$iomGvsبv|xj L)\7Fv=-+{YonؤnGb9MUKq=@답nx",ѨRk]|܍*r7BoӞ|!10`g֨,6.ucm^ס'ԓwaϜA&t932RT)^CVCIȼZ{_;db&KG':,\!*IUt>-#QHZܦL_2nk\AiyA4 Ung{p<#4M_&kfxBkX e b5~A:DL8[2XY`=rHĤIWR(.e`t]cBKMh0Ũ`/m `|5I03#t/VՙQ4&ir- Ayxb֓[E{D(fzX-?R]қFWfЅ5/T2l0{K~WΝy;|Ջ6I! fHggd*:9AHkx03s;`P7{d(דA&q'+" coNt4 pꖉ |(pnŶgIM)Βg ̡7&rk6F/v5]9S[q QnlN hr\d 2DYXwqzԜ@ &no2+NOED 8V(0 b S3z‹GL~?sUN7s+3xIJ}Y |)i^Y2uc{G $Ud/(XO @v+G2ytg̾t^ꆴ{X֛Bo#k`6MP9\rNTylz!?o CJSoP׆S֊"7ѡ SAb0Mɫm!r. bj};΋*NuRt|a@ߵ:-8 +]EX}(C< /Ӧ/)@k s >u(_xSyL:ԙD„n={JA]S~ab C>BONh[z+Z͞Dv[_yAqdW pd/aLxAcʷլor ƪ1qp,6.5Zhy8FޱR87&^Q)<Ӄt}C3#r 5**͇ %KwTm\^^ؗ2狟w=v4{E(l:gȪ<'J9ua-IZqGW%w+GьR4scEBm/msWDY[OsM0'wO5Du<,ԮuЁ=k_2f! kq'g~s.fݦb[q:r1On[U+vR$=Buk}GT!W_$Y"&IZxY>pM@J-Gӟɿè3e}(r ax0.Lǰ/wf kEDUӠ*xE5CTHt,*ȑg辊H-:Y(*5& `3 $_-4/DLZr`q6Aj}M 6C省4=aШM.8?3C"JXᏸ|Zظ0">P_ UIj!hřG /ZhWt$_xO֐^@bK.)HwGrm%9Rbm^fM?؅ ]pد7BKN$#,f@9x-+KJgDRVtݹR烋̯~̪~mhD;ƃ# `POe&m3.%1z,IbSaSXO˪# |r3ÏtuW+}U"CRv3Q~Ol 9Yl!!n HTc t9b_bbvz+Ʊʖ=?uܣY5w5Vkڀ 4 pOV2qWځ Nۃy)bU oQɿJ]@fnτ!{@C[9A_LX\Mm\: +8Y#NX樓j!{z -uXQB.t(XaF/6duy(f5ibf/pI^b8Fg 'ͬw&~Lۉf_ l2ç+\55ar0/yHrQqlAW,Pז-uem*a(Z:$)/]R)'ԋZ\>I34CH͹ˑ*Nk ظC diq^9&E ;3*PA˻ )Nyf\o O!NKjl&kJlf  KK ;[ɜ'ā I~ (jPxh?UVsL [Ls9nAM0DcOwW.k&D+W)2o.,L&|rCu݈(#eRh)I?UT%(+ЊTi;IJٻf\:vԁ5!ۮ*j+1Tacԍ/"9?R _D -c'c``@q&fj(+$K lSdg}!refh:*o4YB+4 \3r+0A$& 2J1ErzOLORO'6Ad9 '֌ $ +CꯦDp<*2~h^}LBL(ӜS6krN&Ca-;2o)ynNr`^yPfXQ6lo*֣3~ $_PD\ZKy %z_=1^%{!rK[u45!\:4y\ 7T $km!V@L7$>S;D?MWQjn͌4dǿp):,ik^B)9w_aDZ aF[}.sfYPb6)9iKB)p4$wuZ3k?K=_U8|H 'iB/iH$2) 7"٧6@ (,[ dL ?wlK:88pB)'22Xl}Qw(d#-U+BuTō9 ?*4'!5sKoxdvڇ HOHn[?&Y `Q+A8fkNtAXh祂F䘊?;Ej[@Lh)`;C(O|59/At"8aL5(g}(150#yF+?I,$}?ki }) _'݃ݲa_}>ꋔ8(Ww3\yFḺ :Cw>#w {^-MV 2]?BLlpg6B2FhB(M=YNsPX𤲓.۹,_Qy=K{mYqיqs!N$Y̰q{TA P$/ҧΑW`V?i8G~,r8q_?#h.j]G[~D ]GIbcLm~8Ηq,d!1*O++#ȣc\KO]Qʡk@G.2m"z8aH$'Hz5>/`bn%sC׃``Te\mn9zA. ~'iǼd7/Bf G|)Y:Au tMBݙɩVZLj"8tc|PV#DYW>f?-iҷ]}ŞV Ÿrn:rV@RZ8׫opH1P1Z!5p#%)XZ|pfM![.M%gR !8XWc {3;9ӂ?!;ߦ5qOM ՜k>BNAUN*\We?YikLۺ'ݼ/eQ6g^Lb sG[}?rYΨ.5Sr8SЄn\ϠJ|1[E U#ɨRhN~=Mr) ~Y e{ ɇE\/ auEA2{~!iЍ;I@0$n,˛ S su4?^ZZ7H&j۵i.)Gtġ}V7. ZTFvR&61%Pn  UDދhl_ ۆ 0pR`NշgaoԡQzW1p8A6?EplT=ZH3YDQ8 C!Abˮ]!r15d q5]IÙQ  *Ht`)=l#D`Juִ}*\/c)pn a>a5l}ÈsZ!둁[tk9|m&Zj0nڮo"G,+5["s7`<9}~ ~"HOYbd `#dRAcy&pd`A_a? fΰBC^: gaLh7EA1 z{c VS&~jJ єqܑl d5<}Pz-?zUebF_4yk'WN3V< Ŵ hc %)ޞa>肤3I Vj< I꼷Q\1bl\o': ;M Y*H،Rݭ' S /=ȸ6HC3^lZɐ'C-ʔFm_ Tv`ȂN |{T9?Gs ]ݫRgoWV?/K4 Ҧ=xw"DoU|=R}cK ,9z \ ]-''i#p .A U ΂sF$6u3e6bE[PWs-tm OLn` v6~=: ZNUꆡ6dr#Kvgi{7B u5OxUߔ&FӢUz5x=`V^[e:rF ߪ옶ޭ?RpZjZY{]Ө}z{0cl&3]X6f~n ZuKy(]g,E_JV#0 3u'ypgs$qkXmhȥ".gcjI6$1a`^9l-[NN̼YL9 ~X=! zڈ?!6~2x4*=} :4fYDBqE;;6_[Z\`ڴJjYF5]MNL[2/ M 2 mf ` PdCh. VGpࢁeq{Y[P~{ ui]]D޿cx$i"zNiHZK('֢.}aLFS7 trzpdФd"'hu6wp'J!ޚQ{7¶Sˡc| ʳEP^++ፂ*<_nZxK,).K4 R;;(L :xHqgS=Zޝ~'#ۜǨ g_DSV$m{a*yI׿Ԧb';F؜v ?xK$7gF6hLdD1oO汚)+Eb(2 .loORbL޶y'K+sFޕc.zSl9}ЫM *N$D(=c2r=+HA@8Lz^`*ثj!j" Jr>(6Ӟ,7+YhJ[ndu氱@)Z)Hְc*7pm@zdcKJaGtXETΔXe2ޕB"zeaV Eꔻm O&ds6N)XaPoAAb%QvgE¨&~f冀xL1 2ѾS aǛ{dnNN 3WٴiAXx1_ڈ Zp#;4avp9tC2x|K9񵋃]0~|B5;sɿ v~ehgJq4tƣXq-l:(8WvJ= I`iӃ~~BbCy߃q$';( 2]Lqf(|Q]pNNjc I/\~&/Ϝa}mxvz2d&C2qdPc.7h&)OWo[:L&2s\1u1'>mE#\2ԿK}U>%TQ${tk2*oFx$;=[ SW[ c*0)pU͗IʺBJ:ZmWD\FIlj(¿[=Q?Tz5np2ѹPE ;]dy@\! 682ճ~Nu8ךߢ\њn)eື~UXeSBa{kRLP%_>/!dXYv Gc 6FGpWjC74 ]g!'@ !ĉǥ2eL\027q}ݑ ɠ"Qw0",l)碿){}V d8e4O`1vFZzݩ%BTv􊤒 R7QF:GD … 30s"ZHp(jUs"p LUNcz7G% +>Er.:A%Adַ>F;-#f4j%owhWXh]8FÚ䗴Nˍ,{>Tn{bͳ@P#qJAjr'n"_xJKL&qO4̍LJI6 ԱxA@"1x"#֑=RS`_q~ F\x۲5q0T^X۴ V9&x2|={@xkScΊ;&b]ٽ4 mMn8I5 T_UЦe+Z,_Z_qpcKL|Oh|mB7̉Q7tpQN8bcjR"m𵷍nя/ɗ=>`AXC>."+<\rcwXPdQdv.)+* OsA Ғk/jeW:QD!PW/k0 HWyev71SAĬa iX-*zR*p;A{g!IrCĦ ^{D"QJ[e +ieA.6'{ηH2.429> |!K̊f9zE/.g*t>.lYẠ-c,t j$Z̳&`@"cm-@5\E۠EX!'w؋t \`]^ZQe,pIkφjLؖTS\}c&n<3M[Qծka xEs9u';kE>A2\0ZjV-p/]Ors1+^8)}۬:>Jd K65@kjG^8C,2 Hv K7v1],?kE$miKSo<{ƅ_f% ֱ䑽[XaSn h9AA 7N.~dn06ViyBIzW(Z_bC,M0W^q#bJm׎h"'Fۀ>X18Q,cr$;Aa3GW I=gY?C "UWr}(Y8}i{ bqg83?>n!G1h, AnAGsg%2~ oyߛ"0KݠȂb rDx8Qu=A]ŁOV.{T*X@$f={$,8:*8$ T (i B*B-Tb%VH*nKȓV*꟣MȪTӺnb2t)LVpp{e{^XHxw뀪^|3]ôs>},))+CzG7bsagis qoM:H_5MDS^YM9*XngNIGgrnqp"jڜ|>uB@R/LQ|| jLs!JXW7=ʮf8j naÛ`Fq1֛g%Ey6cJ?- ӓnpqZ{|{XƟjih5KXWe}4qΔ.lC[,6ϩ)BI[(L 4\ _;=OT*7Y7H?Ppg1.ѼNV3O)UAs ӹHh ;(OrerK%`5/i6L,|'߶ᘐ7ᦱMsaC<L"Zcp2͈B' 05ŲTMgTWzƈpڈ_f…[K;wdXhԼW8Pa"U9׾ ;yv^yhxKd!@PtuY#s%0C< GV[v9( IE>熏Gg̐w+宒ltX4gBHÜs`m9ݿ*VkfӉy4kA0&VpeU@Ƹ_sE85CyIxMfV^) LxexQW\q ĵD,B[5?&P<8V *f.aR&W$ q򳰩߯*DaݲJ! oϳyZJw\_YJrqT n69Jih,qERw ;ß~=6PjzWQ^(@an|)n{xHe `_WOVL>Y𔞃 Shff`:9Z;l B CJ[ wFfJ:**XNtB"sX|UI -XA|pB6y,MFW(Ic_ױ=Nh& J<p܎)a Te 9jK7:v&>"w^$'?֗W$z0?PqGcJnQ!HJw/ےUh鎣#gOM>#‹]:zZ@ob0C{qi=J:st`LċyFEw'I! BY%o\IDNYM GUOa^3c?B rr/C<>et-(^DGƺeRKF̶ܿSe06L[AKAʐcלWzsMImh0;Q I2CruS2.N=ߝ|qAng 7IbOVbN ]Ἢ7*>xۤ{KZ.Effheݼ-T9p1JqLGל$8Ge8.:K̔}Tq,a `z$ +f'Fb*mW4t%4/C1N1wШI] m;Jp8noR<  Z)/J!QshvsVk=gm’$ÀgP1f&[cdΩ!9tRZv[։G9P{8:ǞP{KEH`a%Ī9#iMR1ͦtVud$H䌅 C &6 |3"^RٖoRt I͡T-j}7H>A~P +W)p7Q\^iY6@.Ѱ191lNJjJ6zyRce ]V$iH^qbÕ;([Es_x.k/:A Rܽo2Ud:iqxOCh=>~+B._Wq:J9Ðb!? J-Ƿt)$]`~ŗ?莹5|!& G=uW&AЏڀF}H煐+& Vʻ!-(P_b=tQD2%! L/ }m÷|J-ʨر`@˺Tҽ- Q2H  ևŗ-SZ$zwEV>ȼ 00>t's[*kpyVjyXފV'ΫiJؼ_Nv3)yAmmV#VNK:2`Ȁ0/':ޥ!YqHKGt#mJuPY8>F/xu172we[Yiu5Co1*FkQ—w];C 0ӈNUg&\=d@9+}[t}>^*Wot7HhX֧aI-u*W0'#Hhfzꂍ}qBM0S]xL[5>F}R{@JQ4Cc#pc1D$2~R]$Z.`6ԕE:H_~>FP[`ƕX* ?j;{0r-YG%s]MC ro6T_ڃLj| n%.W)^tط@rhE[S U}5IPg.IyѼCգEO),zUNaҤIbM0m~@<3)ui7=c$@S>7 A'mП `:Qv^۾Rn1;x7-Se(gS DQ#RI䤈vy(wģqgPW_lLRσ ĿbUYlIݠθߕu ӂOʶ!ԉD 83-Z:=Z۱:Pj!JJ6sYBzKYK^4. }SXT;_ gt/ [V1ܶt4 vX{hЦ`|r\rDߊ8tKH:!LEi;OC{ NFc^b;pZW#h/-w$^+Q'7hƫŒ`/zl,kasǣttxMtLx 7 ZpUxlύd7yzdϊ'p#{5kT+ZJtX)FJ:67؈=l] ͚(Uv{! ~7Mvʀ ڲjHۛ)|pG,g:1Ood((G`@;J8:K?yO}7%MR>w_mۇ'bYoQHQ'@r!*"21?EuS1[*)Em(&M8T}7*Vy-ѣ K3]4 vIF,|h,PZ>7dm.^7dpԸg=RfdOx5Zo.mzS^O32[Րd33,u| dѵ\=KϤ|rG~6LR42/NFP(եŴl[j^!kZcs,j蝆-͟N=-_ƠRǷq&mѐ`z}N,MwY$?g=b Vd9 &nv`fgn16yӇI HOXf!X]|L0 0 J7FV1-!AТ5μjf1^nbe{5X\_K_lӤQZΫX*|֖|C̵IcͰO m0?5;BLpQ*L$'kȁk?#1W@uӑo ҠcgZIaٍ/[v] 6)2Ojj&dtaV+f{ g,\jX.qwosÇVYiPH=gq\A!c) ˜C"5~#W)$Vܲ_L#Po+;LZ.ic{pQ9m 6˹+ nU"*ٌoH w0f7_ #rV[J0=I JK+s pzC$L'y Be1ݟlgcm+ _?۩ڀ?"sIwSRɳXa#Tj:܎V$Zo DiAMoWX m>sʉKzRA|"GA>dh=]&B88@h(rg:*V:@(ϥ^=MXr|\aMMxZ F[{J׭jբVH\@ZuDe8 q:aJo==2F9•ݠ-o@=i%ȇB S*πw-)X=I1?*XzAOTrt:tiF.{, + ]`⛪ La|݂^jU۬|MimJ.ձ` Z4V'T+L?X IvU7:NVYM]/ KMw5 \Pj\9D:GE 9֤/e)0qWB.ӇLjBa_L%A}Wfƫg30)p\=wf½{x [Y{ ~敹<gP.-Y\t6 cF#9X:9ȫ;;^/e r_@HI.J^Gα'E9kS1{(M #CRT$w m5OO'[} ?\š˃oH sC%ǽK}c))D^ `z?q_SAT'\a]z5[^Y+.D.0e ,4 v*Rjꍒ(>bwͦ>KKƾ1I/ _,a>8,n\ox#GgSKIvH[7ll0Ӎ rf r&R2qlYJgH2Ϯs2!M.FtC8FB%_ntÊx,/r[&'Β^mL܎B[9e0>ǭO@EiFk;03p߷_Go.?nzx&7N#|_aw ZE}m1;(݃/pj}DhDMgD<@-,UYR"с}f-l ǤPfe =e[UH"d: G")O]f \ybCtrY`8Y*DeX#P{;ծR<DCqV_Hb_#vI f摞S=JtŜ LԺ =#aAzBPki^Í'*( ގyK;|N Tq< )>mn6R35[Hc8;R=iT&, q,Wi^qK&OE,/KVp]Un{>_(LaT"ary% d+Se8O2c伄,?xl3y.{:6 YǶ4Q|M@}71?L[ g4>L\bGAX5 oҢ{Ž=2QTӵ޸-:OT8MH͏:A^7U8ԑ^s"V @G10{J˛sn'GlO# 8\%vU;zb+p7FAɡ|yH$%3a{&H11b7d1ũ|%_&JYMA"|Q\+~],AU?81C)~a@sq|K̩"*Xf1B jEܤD(δY2;-|Vj4!3U&9Enwb#vůPU>RC\Y,Aܩ`f7!ֺ~؎tڸL1i~UOA : HL(grV F*9(sZ8A06;'Zlċ+'r[:l_._Y$cd7#s[?C貽~Wg(wj擡n܇ @ A2cTpT^%r{Ŭ)-#g0grxn{|Y uj7OS#i p@ \hdz[Z̙ J1@(I/;>&z&ƙ)@ y@Y"W7mI7osݗm jEۚ*.cuN8b>mo ЬfR6ݞT( %Q&4^$z%FyCE ?E[WoA(i7ʭ1M:#JnƝt67S/ ƧcXJP<䫨^r7^&y@ 1Z/|=}WWE}\5v }!}xp0ƽk:YJys[,c䀿D/@:y0'&O2<ͭ\y ԰uGCa\|;g4Sac*ʹ.G.t=_N9|+^s!e8&nhȾLf8m px~e97vU>ʯH$H4%2t$O'M.Wpĭ\i$(rq!ɁܟtOQ{~F]"1?P\-Q&Ҥ9+EKHDnBR(-Hf4&3sNƒ9mڻA>+X9S{#(ta8U4PLIBײأH?`1b (D,J"ULn9J[fkı}+U7vN0_ƩCOՑ S-|拿>õ3jE5azD=ų})XWC^~-oH=ʚxꇸyb̟ S1-\fN ([{߬rdG~vgn6~sj<RCq& QӳWMHqYQy C݅xlM|UIo\]pkA32cy١\8k$#R`_h]ieN45-D&QR4{g_œDzH @j:Zs'= |zNhLel /$ sH a~5$g6olI)>pV܀ D҄9Jw?'s<2\ ɌFq|;i:7 A+t Xk(#!DwUܣǀEU i#mrfQEsu] Fh\zyoejۧj;_t1ue֩a 0~Dk 퉒Yi^)Xz 53S'̹reerP @.db4 H9Anœ 5eFzJ(H2M42\ޣmS5^BP+X,v8_cxnYq"gE2 lj[ %Ø0s Fbm~KE o@̐JkG [ב=0QyMqdhe~A%u{۴=*<=5ɈT oB dj<0fsWyr߯DɑYKsKs.eSA}x3r^Enl ;[4mنJw)_//бhC.K˽Ӛ>Dm0۰KY=}qV m0L?r~%аi Va 췏44T_A骓X2d@QoN _Y@ {I0 -Wd>S_H}g^hFqkٵ|rI080tFa9k餧ǀ(f&-=Anzg9ʱDZ>U1]-f8lϖsCkEj] ^~XWe,$4nls+kGI`[I~^Y5vb#;Q&tqr͍}]l̜`Eꎳb=rbE`oP{8h°o 6{43,kP=hZ?ù 5lc@1$RJ O6=i]AKJNƼ oW 8qќ =b9;ӼyHfGWc蔮Fr CX_leizD:\Nб!0ghޛ!8zA\I"@J̦Vѽ 6DmN2WU$[-|V/ |8f65|T1Ry9" elnȹ-Hب2遼,q-A WT?QoGd`+N%>J hnF3 0RFKwNGtQe{j`s?fN-kuA65*t0͐hIT ]RpGHLVs9n.SΎmWj v~=m)˖P(V6Uq\#5Cź0f"<-jGT*Αcud6'Lei\WLq$-Gd0?i':rQȾG` i7Y!|2Vi4ܑ.'ڰtpO'>)4ŠS EGi:blg=~ 8ۥNtW/"ABdAm(lҪxa|UܜYcͧ/Ӂg;; 8xj=s]b*ue#V-d^Ê8_'(NjS40N1?uti l;QF8VE/VB>MR KLr5Z\RwN[ܚvxY{ʬ.16ϝ2V@zQ D}V07xM: p7.T,:v8)B&CJXt)R:S&iHK,,ІJO (ftwof*AS *A Ӂ:_X&g]Kd n .mqAגSq @[=CȿH8$h<o H!QYi@e&<ͱfq)9{7#p㹊ÚC|'ա&:aW$!* sҞRE`dLۜn |@MwF  1_%F??_"4$oJ.!h M.~RQ12Z*$X2DWR?f!C>i7>>QP*^is=*0 됤C1 YSB>.?xN +VSlab3u5wghK״&ÞA~Am{-'A+k0<@qVOY!)cen7>A v,(ĚpLCȮN +dIP8@4ှq3 Vj#!Mk|IMGzaKp7t32ed92Rq(2,k/8Q*LFډglW@rsׂwݕ1[C.i5k GI*uDmlϓ?8AG$p\ͰUW7w84X操>hFHѥR|zRL+Rdk1c@@Զ3f`.pg]eoe\f~#ݽ0Z|Pc^fO{>4c|W͹D}[LaÙI9}WR=V#N(*=eKJ]8EY}B%xx]1G Fpud_gK&-,HT:AÈb>̅j҈7>g\ Gou ߔ7ⷢI(v^ژݙK [EwM@"l6V~Hn LedQDkŻutګO).!Au_\b{")lle>&!9U@2̼ b{JKEƐn?ۃ11# d?#h݋SՁS:,u/E'$o : |7T0u Y.睲 6j#^ǵ>>~+%ݧkCI*EH%[ h> Z8bgN~N݀,;N6?c2p;ܳGO ^[JW& kxiiV=i౶|O+h[IrN^~Ӕۚ9ߠ B BS!:lT! wZLU/-4h1;fJod|^P q q uĽF}2C2~WTxzKN2/"X *:K"l(+RRv zԏ.Xeв?lx:A4L`um{S30R"@f:f+Vs˙G"Z3@!+gzwVYʕ؃_MMͅ}6Nvߒ17O.9na7Guڼ3{$?6`3\ąs/x6{jyՎ1 5Hwڽrl4σuҤ=H6ޔ ݩh ֽǛhc8ɽSugmte0lV;g%!3 "hh0nUsD2B&8&JCg.[k8$NM`+n.as$&0xmJv s 49a*`S&҃ <;unh\5sWDP<јT8.f~wMގ2(=,#~;uھ$Z]dz62 R+4~`fٌBYfX%s;]3saC?FIj$Y=UJ.!PEذ' }fsD_Ȕɻw }6'ciE,[NjL Ү x(1Mܻh6}SHS[.7"q܋w|yۧ7UM{R> fv%})S~',u~RIk.INU.s͋ T9EA'ϳO- X8^X$op uE??O`eDru;Ni-k5LlGϟcIōcW K;)Ԏ>z!Wo(T53{L7ܠ^p/”I_lǙE}^޺n"",l tgs;4 tZ Ϛ'0/Oi}1V:[cя >S1x  m#Y1+^ՄG ./@.5?Vm]-Oz6)tE[7KzoJqRBvA_I%,zoe.FůF8eE%֌EX of`騇dѿxPYhE 9PV=Igѳ OHMm4p )vuZ;qhvsLLjC C+$kEԧ}8iIy[ʟgo3m7"(]Xf+X Q~3Rvgb A'm9.\%lZiCmzgfk= jCk׸mȣ[רrL('`3* G ]q{AVp\ Xeg 84#D=(y Wjba ))=!T+4'x\{R{@p<0*3SE7="MZ{poa88U1W 0ϭ0OFJ^#C8$?,kֈ;gif >:edCIGϸgFg ϼpPye{%<qҧ_u]OOvcRӱtꉴpA{P.oz:b&\&Ȁ{rf(Nvc\pd.F2e)d6DrKҖ2.>qIBlm؞AS<%`EJ=\[x}B4|8Z Á SqqX0 ~$t~ꁢIs\[ϒI{Fc9zԲ Vs)(v={=5As\޶~#m<< ݜ#/;qBwN  DiX?v:⺹|NqMm4e_ 7Q 65;Iov%\ G04٩~G"$1$_݅fI n=<7 &qMQ,s۔Lg#7@#`S{p[yw=a:(۪#dģYіfiڰ+WD!q#v@?@8?(r4yHy@BG) PE#g W闎7њ۷`*c\( \bH#s|6FrrdgrpT"y< (3)1{s0SsÄFFf v ^ht?y{'8up9"":,m9>@+c|$f"DR:IJu$qn':kHRu4+z 9thGrٻ=fkZ@9(ʞL,KOջim%hi!#3 2bxWph+v(EޞrSA}$*R`< =`)#ѩĬ(=[G <[U Vrjbq]IWo oCSSu|hƩ,̽ʡ|zmUN0򣫼p?)aW%aQsaי6$60\}ƜOH+37S4D0sh[^enɔ2_UZzEYIT3Dtsoo· !HH*.]xK%xz)*zזL]Krq߹hy/lB]~K~8`KHx)s<=_ugcǩT4L56: nNVXȧWwKyx ]z ?ntqxRgX,{dsܟ|r+GZ^V~ȭBvN'z $E ]`vq4U|ţoS@zX:gܨq嬨gvH?xHuj& P#>elvKg׿'Z57Aɀ2XPZDRG?D"02`fwfnvcձT$ @sdLCدK]OCM(RVX,IwA?$zC(i\G*aE}fD4a#K"ktQːb NЇ\K"O$S0xkKP%6HqEJLSk4th^䎚ӅHqZI=aMU2bcV<"cxr];f*U4KNhzin=' [04%D)OIӬt7,D}ƕrT(FP$s_꽖1n;JrV Q+z!+3J܊7Y*6qvm,=I`3&^cOxÍ !h3J] cmMy0h/)_p(1Xov b:UX& =+>@vpƃ[`rJ7tWt*J|;_NڀXdRvp”=uMm`ݒOAoddj-zצUM|짠{grNHAGoORw~7FP-Xq#opK,"lC9-p\kk8a. !8MPT홣P-x#©ScoÁD 9:8!)~K y/YӤvJHէ+I"_tEŸ}5aV^8eO["/z ̝価| %bUc\wE$b|._] ~ejԊU"욤5#/}Ap5ˊߙry }uC$]Hxl,aM6Fnml X:Jn.2ؙRV*l@plsu?W=| G2"6*5 K^MR%Y߂;xȭVHAZpT)|Չ| W9"R^q-w K(\K(Yq !W(u2!xTϓ8BD8jÈ?p:\$?M}y;V5an4T@UI,gZ[H`yXr$ r?vW5!Ռ.0ez\M+ NGU=I0 6k$oAKuFɭ8G>BS26>nt9N,Mjg٥fz='hNKA2s#!xyw Oreσ$^NU-Qv6eBt oe=#'ҟ!`8*.wZejփoGͭ^ z9jbnhj[4~f!*@&}MЮ$̙Yx'j9~.jp]ϼH6\MhFCavMؾT֒|E .osBc `#̧zH Cّ`FJ<|Lw,VRlQz]ڍX֬rvj|Oa@ib,<{^w@7},l`U1^k@9Jy,yHƔ:--6Qed_%x?G6os-U}_< TsGf@>142*_kT 8ީd/c3 ^[(#7l{26$bc"i'gQ|V09 {4P|bʭg1Eҙ4+`8IqB8h~z!(nU 5E[#$ =$|ۑgh "jX>Hӹ\EF1F4QE:.Λz*ſ%_ލ:/@l+jn E(=2P.Va/X3o{zξ|Ӌ[WU Kb$HQ2?kv߇ Xg Xd-9gތ;e`>//`T H&AUbqQ6s n/2{s֘N}dSqGźq{>$N/A)43-YM*l zރ^>-e+?ƌOɀrW?{ɚ*lǁRU}IiMKeL9 PD}`Ҭ A!Pw!B)$jtEUn=n[Ā#3 q|[`Q<*G _XoY#i Ei`P(eVc zB_)_,wTj?'`>0CNޠicVgsnvH.SEP~Gc_r>;L颕<9^EN@`bi+-|MƞjNhaHg"%PA dL0CXb=b=!``ZʏrvAJ$~pCl6\R6xH5^SMLwjIBd|ܟFDYrV#8iH@S }uѰq8 ]:Tx"v~OgX ߾X\R; r:DF0^XKkY:E(ttL-[ 9RB OLlh+B#:<~oegB~ͽH҈rQiEg$rE*kYH>R tkW Y+!qSc22p˛8DҎ<; ,ݺ+PQqLᤃ6ERU<8`&h'pZNZh)~ԡ0TR#,_;ai )C:L DM6緍|2)byRg_d܋oppWaPQj~0n S!x8(`XT. ~Ԩf\=8z1:k`^=4!g> GGAii([63votgh-w9)#N1`< WCmǵL#9F͌gˀdLAm6Y3]w@*q65sp~zR6 :zo }D63*E+L<>/zotױh|mɣ.񔖐!5o, /CwG!BgjdAY2p+ Ȅ6anåN1~H}4@QTlP:%5 $me4}x6֝ϝ DV@MqP*diB0Ÿ[$NӃc݇V?@G,|-gɾhllݠYD.瞛6f0n{Wش*{:\q@뚎+gOC~]*dvM}b I{%+2ҧk3Y &7n2Qp)`)\ Tf'4,}84|#pp׼޵F}"*0̄Dx&*BA垸u"4|'iU8p@zS0NJ;&풣igU@_ .[DFK<f VO~s@zarYg8_Ғ{zdpPY9啻 t=.%rTsoL&UBУ / }{Ngh>ˆ%c^ӫh  EoE; D>wa^0e 0'>st*ӳ+KݢfLm!Uclʕ0;sʏd 9oM,(w2nAYB:T)/=k6\kaQH6c@ٷi(Ʊ<5ܘWE.Xdٕq=1s_Д3$IrDM{+ 7>rJu4KCNz gu2E!B?e 3k e;+m$t#3]6rl#v;-_}%C펖.ž->Mbϰ-fkR)粰6Nނ (У)kEЌ@#J_DWF3ZJ&L-OY?맆<~|g -ccC(`~@)I²uv/wa @cypxL ^"$' [%odэ6peyA%vC3*u 8Q+} rLasϔ&2ۤ4XXZuspDIX&_ FahvҖp悵)%Tazq wSaTϵ @X^# rH*,$O=HS ֡qf4eVNaʜ.FG.Ib jwJB1{lΊThǔ9+\h db|ߴ>y?zސ8RiC8JkƬxoHn)d_ql&ogH^"Z`[BK/.zR\pܹ^Li1O.o±9tq9U5 2gmnlYɊ146bfNR`gm~|se70K1bnshљ'.z\l@hŖa3O< cz_رakHū:?+>8ڝ +[ ߞW4GnB?İУ  qd +>.ĉ y_{24NǴ -Cw} 6+vdD&Ճ{xFW97U\+;h_sW#̘ӚL+ήGCBj΅R;sa*k$/~Z4U2^U]G=Isܥ<`ocoڈ *K'K~%Cˑ 0%G= 1MF$jǼnzTB(3B_IiΰgFɋWfb>G+1Ǜoz/-V xZD?K2|g!{U+Y)JO҅fC%xB9-r!t~#reА-GUyOSdH\):eh%BmQL Bs@9%Mak?Y4@ۯ0ah=-/D'yAX9n%4nS za@%3ղ_CNlu!ේ=.7x|7+\m98wEOYQ(a*i5*6[K[OkS3nc"I2c'e•E-[Cʳfyσg )$Xa3PJ)' ^D'q cC:rLa,BpԀFf n' b7 p7\.M.GOOdnE r /{g _`#3VNe.psp9V,f݊Jb:5n%7vٸmȫϭHo f_b>: JEml^ϔZٚѴAA_y-sA(Z";Z 6!ț(LxԮYLڨ [m\C']MjTѿ@bՁ o\eepBRUުAI0duiD,OG0{y&AE_0yI85[J)EZSkX񓸒w rUe&Xҹm`ڶ!#*[Xb̼[Wrf^Uh%|5[{JK`L@9ϒ׿ui -xtdXU0")IpSBE&l9ɺUr{$`gVq^ f}eɀ=6 E7^AfG2P5{^$dm яð/+ddn8GP[6gnb,(Ջ7/S6URzIoW,(o- ٌ&oU.v~Aš8@ݭ2˷Dʨ(C+B~QIM wj9un6VºwmHﹿ&҄9*PERZ+;88w܆!!s:$۔g싋HRi($!7*?l!ܙ^T[9r^dqmn>rJR9:יݺo9=G˦݁@}[h |R 6\F9&f8?$Yǡgle,.қ:~eUN SLD58D:TzkEh]JS#QJUI+kwބrL2r(osV7'\ae;I4At`xW vRusj?Kmilxb٧U_Qz#,pJ9 $8.Z7&zW"~Cy䐅AWU O5)'0C%U 3HJE$F^CL8Ƭ{Ka!Ā UWްAr5t1rMPA|=MKZ.)+ERڌjyɇ`{DCSGD1`4Y#aژXd}H]H>A ˥+wۆ SE ᔱn?:_<܌w SDq P95:1z Jad祣O}dYa@"t]81ѧt|k=uk3;Y9۬^1fO ZwAOVx.z;f!\RѤ:G"K_#/P(rqg֛$OU;-As%g>4D^iO>@oH ;OX~Ջ$P~AIR.W6 uڏ o ٜq"=x a*BhуC&b gpUBLV ['n1PZ^h_S8E")QȠML?Tj޼ |4,'4vR՝0@aOֶobɴgBO^s@PMҎ[2!(1ْn((^jYP_Tƒi/[nլM> p"I9Y%$*ɩ73bL8f=6>B%t8YS| j`pz=z+Y0A'Aɴzw]T1Sw1{f. TՖ]e`Otu=XlJV(|}áIȥD؅3- .0+ڞmvܮG6B'*:Üt<#ҍ XV-'Jه@8M%fkhGC9:'xj U*{m&0kb ^hg_~7o7`jD R!+{/uPʸ aґh\]'G4 Ț_NԺ~jߤbPxe;8L~6E/=Zoj9|~ ljspi s$nJ5Hw)Ñ[satl 0<$UgBs#C63nij0/6[!a=0 f_0쩗hyAe '76H\3٨s.7qڼ["ѫ$bZZtQPGz_:>³X8` dJO&5|Z~w2Rvsi$xrh 4x8~,qC%᝷5U\Qg|g^l!!*~jmtba&Rڨ;]x]]sg^%l'v>Din*ݺK"4rNJKcWm~d0?? #"?P3?mouˁd2*i4Icm՟؋ 6dYsq̋݉9ߙ4I+A}xepݬ0 i(ɱeT rP]ҟ -n eeN.$EЅ JtԄ|Vfr`+1rhc|›4ܨ~kLz|7LNў7ΩIk&-BRnjWb/Ȟm W'hd#U[:-JmMԘWR7 I}&rȑ#=j}EjYS -|3 ^<%ՙAJ%@X[Du,Sn '"uջ_̥תC'95RmDB˾[uU Jr},&W{2پ.`CC+ [nj^ƅ?{ V(=W2R-7}hm R14 \Z=*i 3 y\xX Zbb#$, s(HmHX17WY~})T7=e[ڗ2/[#bi6󵇒3|(mv,5W2kO"TdgJU#őMF*pvK=X6=Q!C‘ڭKk&į(k?!O_lyDkӁO'9~Y՛[ FݢqJcWisÔܙ:No/!A2.M|'\tE\L(xq"FﵝX߳c5v(7_e5aPvI Ir;|1b>zN^h ]t)(].tGHMk34EM$d{mɃ?s 1FUs%=*p27?K}g4 hJa݇a?jAuxᲗ\6JBtC}/BݵZJ9?-rɣrcR idL c<V<7Q^ %J5,:S"٘0qHM> =\$`COD <F`xC' 3DũP졒ToYΣ4k~@nI!t>GzW-<Rs)IHZ~&Xj ~ ?ǰx'wx\R.n6WجX~H ngsG-jOF0|4ȝW{vAF=u~;5wd,,Au!r^) 9Z∆ jmIVg V- ?b-o}xbOyN4jSw4,d C;3f,Pu]f^XK))m4~+3opxߙKuKG@؂dNbɜe\2`2g@ DZ/;QG {X;Ȍr|n1Ytq;+w- oBreI83]"h,3ZY0+AC̡?3 p %Q{˪TbT%*hp(>\6lh m>,4?[m-yрv!^3 /-4u>UJKH7@jb_&(8N]5B$b>N?.}!2 Ǎ;Ź<^B*Wo&jjތP9A3V}AR)\cWx@H$Ζ2ؕhq/N;cۡ+[efA sH;DEoT8r"oh;o>CтpE 7hV uGý%y"C`hh~p9K/4IzOʅ#y騶prY6u4]_׾!1t/gPV3utB=m )^3cjOT6Lxr !7.=3IV>L_5=j3s,+61; f U;drڤa~:Uwؑ3-fCV4R3lG\n|%Bʚj*`Q= {0"F n5bxy-gӀIP' ݈IlXuΣ3ЎS8'r!e3oߤUw~s79oVOl/WX<9 "fSːa 1JM,oscTiخPuJE 77 .ǷdƄ9U>wtPN=zaMul_WlV' ,Wmy%'#>t5ituT/9$r(5DRͷ 'QNgvZB$."(Q&Nb{oNBVg>$ H)w~A<хZAg*p(,q=sAƳ"]\Ղr3?K~(m9=;-%[/KRqx8r݁/K^ԑFܘi섒\>s8S'[ tҳ@=L[!v 1:s9*8wo˸.6=Bu[:$40â([}7TlyNHC)tǪ &Xٛx<3c?9sIpQPPX'^*@4顤hK= |FTjWBg͒s._ʿfie7 С!^u3@:z<"طpࡗݵӰd9Elr@HV=~.ͽ/IY͢qqI?Wa*a9m\;@{5_SmZp͐q;׵ـdC?}SI޷vWM r>gn): z\: i_:w^]"5NyyIHb]:v  K/I{WXԅqڷ"n+@?n᪍#x'Oy0<.2+m6#M94۝mywW/ O~)1p3).aOt.Ԗ􄤌 2؛+}L2䜘%>lHG;O˳O}]`GD&SS|xsP2UKK:aܨxWވ@2Fyp&- #eBq)xQ X"^d*mTIFҭ 3b47981U Ĥ,}!l%e`tae"\Zdd;>nSvjG>ov66^;u A30I S> rduLݑZ4 2}$ӮzƋ mjեYtuReJgP%&+x,ebgyPll)Rf߬1Au &J'QoD=#4yZ*)|,$\LB,"E %~:܂3!ɍ<=^bѬW%T Z $հ5Q*Ҏ$QzlӔaR,`{hb 87qv &]qV 4jb7W v m–8/0ޙdǭ> 3;rD[DFvd .HJP|࿋7dv J]}Z98V _1R[9]w..xJ- TI9u֫KNylB`w8X"H;QFnc7yQwջ'Lۭ& eE(W,W(X\4 MjnF7 ؜:r* ƺB'.R 7[p͐sek'%'>k'\pVW-X^;"MyI 29F3d, ֮Gm)gxnoɽPVua^`=ZU R|\]Ɨ9X6gwW4GgW([wKΚgC~އc8UE\mi,auatc> \^{]83Q1E?[[Ydc0w57a:48 (+É[b; Ø9#q}l`u Ü@Iq`S?vE뼏)L:l!lhlR OdU1xCtK??[ODxJr:hl?|0dSY8(@ -? QnUB19r`\g+!V Dy N¸L&[giD)-~Zhhƻkj@M=08֠.Ϲ"!vX'Dj;UQkݪ!՜{띯 OrHˑ!ct>յyLO~NFb!p 57N]z8e}UQͅ9)7I𹭣'u~'Pq L꽓TTwtSXYT Y58jE|O$puىsؓwwW%ȭy%!߸H#oKGu{#- Zz!=V3DZ(CV1cw^s4 tMCcVؿxȯ{QbGe LZs%rirO\7vI*!߄IH묯);Z'ͼZ م|g#eչ["SL]Bh Y(Uwv|y&OA*Q3o AkZ$ͨn.zBQ%*쓰Y81y 9J@ڟu !]gCz~[v>tsK$#Ty"ZwlUlE^f-GmI֋Ъ]EF_c9t>,ϼ  ID\LWkn1owtr B{rtt 8-[yzDd;)Kvx76ީIXSnv`] A鸦BRgg >JZ"vH)p5dXEച/%հ& Va &ʄ/O#PӏL8$RU Tv(CHu oxtsa*$αD\ɴp~$b}8zepG9Nr|Å$o<Fq[ۉžԵ0D -woV<3uo h$`ߨ!Կ0{\~D6{b{PZ1O{hݳ >oXxcήtVSld5d'1%DDu\8݋?W̶ )X |7bψZaDr)|p ͋%WGa11#$yWk hEƒ MsƽQ`=/cUsp&&Dx$ : tzC=g2_Tq5Fu{ {WPhV8齜^u.oVR5 u:zڤk57PK \@*ؤa֧dW:9l!!#a0$VI٩RdE=^̚H"#x.Ԝ4Rl_![M~)puYؼ‹)QuOK0_`uV\S~u8aRBfZ&9GvC3Zv =*P_mB͔BъVVA sE0uaGsYt㟒g7|3M73dXt@ۖ͹(Ǡ!:-]~;p,l8I^.6̈́1noW}(}n8 ~ndKˏ킈oփEPS $}C5վQ WƼ{jf_?ڌl7MXLܦ1W3*)׮x>;cSݑCM6`N*[cLI4-O-'❾)\UU{nsK4wk)%{Zyw׽_^'cM{?&"!}Tpm|DiC2ȣTB`i[x$$%-ʭU'Pjhy0 ؎dE f]Lu[v7 fmp3hEzϹ|Ԥia"2Si;d.7א,%a,Ba2DNCg.3=~R0\v2g ǐ ZHts( -DP@X|A`πXh5B,9toEVͥ("x-k g"aZm@Y};S#d+L .^s?v"|Y20g^MU )/ING z s9[.&ALS*n7";ߏxb^+}ACUm`FB`\=/L-`~6%Mx>b_V"o\bĢ dYKחöI>a̭n:ΉFx1<Զ:;t].jWܴ Wd :c*Hf8|zM$ک$Ws5!Gk`rr*tK1p$0,$BrϪ`aVN&+'G|ܷ UZJB4]2 [2f 6߯Ap4p{n*hVX_^d{ 7"ڬ..!>1~ +_sX]-J*HZ Mq7ォ:cj}ҪVj3+lwª$(ܥdneԸ LLyW8bU8fa[AV) O!(X/O) v!g,߂ֽTc&Z8FB0em߬U/^ u]P ii2ZӸ 2^nɆC}X7 W![UGapH1:(_iOxCUP#M,,awu$ٲ׫׹\mĥW6kYS p3 +ZT˖Ŋ?Vr ~OrEYYj֞ZIzy…bU.)c6ڛTlЂD*kӓ@JKo^s@:uoX9<ğV|  q۶ swcDZsٛ˻.S ,Q ZmB32a 9 V]z-R7,{>R+1t ,$ٝp<82lyrfc -c&b׼DMvZ.zg6TǦiKn|//NRc F.bTՐه`M9Hz;}Jq:O<#A ^EDͭS={imC!J&c=XS K:p+3nc"y$pD/EBwvɉtx~Dm8'v2m΃s,[Vu4#bzW)M\ dGMYV㽿$}O f)c(1AA:ucp xDk?RMoBa4x OSaz"4:ژB`* -Acy|2$/OvB6shhʡ7HN6UCK$5-e ~k4HIotƁw\/@ſqk.K1uH֯82T3H*mJ+h3%i,Po`*^m ׁj,jo鈓ZpHɉѿè.V[m3u& mQhkU'Σp]ǤkB:#h8]"P j0}Uʟ>>\9]J7PyHyG)'eDzq!2:l)4\N(~t'ohKܥ]OG91üv|sʱg .]$8r(\F./YZ=@<6gDG[4;?U69?PFG:%Y:u4(d%X"f p%fAE<hڴz"/$J`y@ TysQx>u\U2Bk9V/e$1T63x[b +H| IGҰ&7J EdWd*EA mρD?h/mvz @{^+ m]U.Z&#U=¾8'tXfCr#`e{Uqژ -Ĉ ˗ܾ8zছ 'G~%"u/*Zk+'ap'I&C53W_Z  z =DDt-C8lI eW kQρq))2zLX'ZORz5+:G2s%GD-YWI0GIݍ!(  ;l&1I5xni8Ɯ%h>cH7 )&J'24}3BHiA],,HfwVa3 ]0uU éqld@ :~_ LU7t %eu*U:]aIs5@&1o9ti7z75A&{cNΖ,ߒV ye4w@~cܖ U=+]y SP=吱NLz [Ӂ| +g Uj ŠtM3{%4`˭WR@Q`%≞0ZT9>b=<佖jpQ6vYog4Nrm^Qms퀃8*h5q(_$NB )II$֣yȍM9 J+/#njw\O:^ c;1jbom@1OKX-aڟΩW@6vkOͅR5,= Y5U"o}C9ҔRn4ȞZ>4c9|猉Fxf]SWFiXN+2fcɤMJklL"g =7|9J<Iٵ#kjϦTQlkJò(3b U+bjJp͔STmk/&!\FdI_R" \Q}&߾CO& FhogwV_ڤcZ D1ABݕ#!z%*䕣xz" [߲$<&'~fRJ=2hM yj2b4k`2~'tb]d|$%@'4>U$w"[>5U!NoBUbmQY 0 uBUS,'ƽvرg#oM|[֫IB(:[t#.K9ţa%hckV:͇FHfT[(nDAE%?8YUwl-#|T>T]vBjT?0?/_,7 P!$(nefU,g[OӪq~M Σ Bs2T:p?]֢jIShVp40GOܴ┤6l9cT,!D(1<%#E˟ђXN .灁R`t5GTEFPxG(\3RnB$ VV&DaQvQF%·ºMa06TN]l\́u)Ց]} U>$u-m?x<9[(,3f43߿w p]eYVٻH1ՇԄ㺻|/.bElVe{Zj>מ /ـT/R2L#N8>ejm-dIF?/RO1U{(x{ھ_C]}Z/~Ʌb""1͋^fI챃#8H \Y@C!He 9_ge0g$oC瀠;^h$po3': +0;}g {ǐ^ 9$ pgwu\Z Rj?rid /ii/Hp7Þ#z ;qZɿĚ,fB/a uӽVԒ.t̓u,{)͚Ɉwlf!xI+m,"n[). ,[*قzY"-Ԙyo de52b12gJm >y>('&ٹEx $ U19z O4" I۠Ѝpc5X~#Űrz[gڨ0LK?HX 9PJޱQvC k-R4;F,>/V>$~VAFfsxĿsMǁuBvUsxBnA?51#L:ӥ/ L^jP5Y5X-nxHJ(5HgMrDt2EӒWmG )\s#Ķ c5'nڟLSNV @nBAak +  *X-;Xt)\O޾ i$> `)`\nUs+A* otq gQ Q`F[ME3~fjJ:cۧMNשP| Oi :Z-krɃb9WvzSӨ2-7}lt3=!]IQb;} NlpКrPQ4~rUlHf!ִEnZۤz: .zo#dž d'ZEl/{> f`4m3pt)E40x$Ih_p{ۘ(v=땼KLkT})1Kl{^k &G66d4ҼSxUvFK ALyOTA?Qvك6)N-,Ɖ5t'iJ+?ۭ6׵`,~M,!/Riz"mk[[Ԥn%-5N*OGzz*"ʓ|tyg{#Վ49\A2mt_`dž%'Za{h)xz#s*(Pb\fEѰ$ש(4Pͪn9[1ME/k1OF*@]kE}R;P԰ԢE@c8Tl3JU2⊢?S|80Sꦰ29f<=aNJwa+]:wݕ;,w`H]|̚ىNJ/ZIbXNy ̎,WM?Bd Q}u.xeK!А7 |L; ^tx~@| 0~b |&Mј% >|.Z3D_Pk;Sd`&L6ͭ4F*3PϪҶLEQC)/QnӅςk xQ^8k=<|Ru4E[ &%SM6Oq\nZ<"^w…Qߪ_ł;ylK0>ī8ѡ;L MV Pz\p 퉣E)ʋ&>eYrH* C-BP8!\{dS>;F.\rGLI5v\e1UJtcwuTp ~W_TN؈}W^ P5&rζ1UvXJŎz3Der: uukaL):<=(ӂIk8v i?cq}#8h68č~AU:)%﷞#of駼 4xv v9)f\# ֞>$3 Wd۹W i~pEQo 陖(+oP6B<t)wحL#ڿ>#Gvt5Ou;3Y廤?rȓBA:o=D'O) toɮ L xcF[2|@"4[^*1RQNȋX. Sķ=q"\ cQ@H㊦7s |ia5glZ{w[w7bAHnn:x}w#}ͽJ>H.pk^6帔$޷Eʼ\>A¢>S;Jw5P3=.JsqH_@Ru||`BIk&":9TpXo9NF;( @ Qaȗr;ߛnTE^@3;;ͩfMXt MU1ƹ> dy/.l7 LA16 e2`&E 8DZ!R1dm hԼa>DlKSZz f͖}ڍk&q FMFɢ&=xk%S(]0PhegD_(i[9q;&ڵҁ>ָEps=cR.>N!Ⱦݷs37 ZWh$ƌ > wd~-7ڲD+\# {΀j[[?1a{mIt8ftfYp*sȒ]7gry7+|7Zkʃf; j)2uv{o9ߦ,$"_Аk#0j/LU?+'ӖLÿʐvBY.[f.I^HJjMc1e[lC%wnД׸8.ds(+(]C/ktK*tN2txZ˟RL&^q ̀UUk|*:^|276KxHTTwtU*># WZ`?)}v_™PLqaPC.}SiTMWr'IGǥ~),X!/pG=hV8HWc7Ac BGe]@U`LJ5mR- 7*n1'M?hBF+{5CY =GQM頒O Ä#qO8`>v)5NC m;y oeChX=RV eb 3&z DOx3&@GD *W2a^uɗGB#t`Hx.cZQ Л#/)KB,⣝x(GLdA~WZ\B\O2{ϋ6m& J3&'y!'|h&R({Q+ȍq|mVdE^a&xMIa2:l W [㶰DcY~ڋHA9Hbx V{W0m.y`b:Tt5S2iH>b7'z&[1L9[ZQEo\_4"7̤KK54G/Lh+@`(eLpȣC- M{nWU~N&\$m^TGH4E'[*FW.]ٚlw8]KWzƤ){lx$yJZoۓk8f7ܛI֚j=/#4"os{.:6Vw0Gp$ѫLatz7Fk{܆[KAd(b2}\IdTXg*@ qz TGI4jxp2 V'F2ѼJZND 1zhrx6R }p°C2|?@y3W_ѠP/51ok\Kz?=>ɼ^1O>VrEM^L)}SOpֲw g]+/ 塇uׅsx l QRlĹf`qA.KކQCQ! /?l&w(QEѡ򰇸aA1̆y'u=\ ۫n=d}oRWőBjced =dӦgGksc|i!=jq]NɗuI~h}nwNG&0n'Ƅ+igiM-V 2^ vShVpeezm)׋ԋ>5_n=Yd/9\HEx :oJ%FX`C/Pw>1)_/&B> Tqǫq9癴GOBl/8 C0&N&'}Um \q<,  /},V"qYi"6&Gc_mؐAP9+uH ntrR5 ׿K;n( }/Y:|9젰vX)PN.׋&ǧz.(\2'vJz|HDXV/Rulf4"h w.V&(rgDfSu[=2Scj>dDrԒY} (`[_N {L :TUqDy A?CS? !יxZ#×IIoJGWF̉s*Ar-@dKԜ>.?@r+iccO;>{?=zr9Ӭ{ ͝yG$<3n,cY  ::I|i9~>Wy9CD]Gat,|n3HwHi-S;4+{I+bnzK*{52Q8NCnYp\+ޚXp=%3U L24޴rX-(Lf~L! i<yp")֌i0cS!Y{M*6쟎jwu'!b45@}9 zwNZc{K%A(+ H=)Iut04j.1D۫dv?jC9reϻ HkybƔ:Tg(r97W=|LS ~ ++XhOAE撓R7lן1;! h%?zp D+e LcƬ&j;XvݴGjcR{Xfs|\q֦)bE^4*v.7ZY*v͘%!#n9b.nj 7ڶ l8{@g/pE oz ڵ@ԬA%w:eoBcc9到&eɾuG\C7zL[ST=DmH֔J&ՌAq LW !)iʃ62T`Btwq>ƨIiy2,\(~y[wVvQI|.a^E7xxߍy3us@<6GSCv{ 2+^rv#\upW CXI]Iv55"%'̟RИRBR^ H]]%L}F}xG{^Tm(Ngduc0^[bN vt4.T-]cCEQwfUW8R=3Ywd6Ef6q=uG|*ZyW9WF!N57R,? , t́hg H{ߏ'݀jQ,"~<#x08OY-\Xn+H$ 1?İ}"> ApXTc\R/+_.M =="C35(\D' 1&D(8%7,j)5[Au]Zײ(<]'(Om~@G)_͹63DAYs[]C[gWpɜߕ G/Lr9 Œf9m b kG_ʯk7IAy \6YUA&*8K[uw(?dlݣ B6T/m9T73= şVjNJ@G)*\U PbYCE^)Rg%gl~d7[_'Px-IZ<`MPNoF[q.:\Cލ57#׉(aS'U1~n)ҸtEk5ɗE42ލݵϭ=?NMHܭZR墼d3t)=$UKNVJ*DSC4k K̈́JCp׷{Rױݰ?r餴m}V)b'3 :y  UyT|{84+ LŨmiwI1;qn8+2+E~&g4=,N5kXeL<5Fޚ|_а<ɗ:){=-p~K,9 d a n/bB|~$xX\ dp~R}/c|bfE.: v 6Hki7 UknGj'uLqn$ϭeWnvG\-闤JV}QsҤOf^1eMXr]:2u(Nlڗ-{%O2kzk۹u-7qH-ju&P3@GMDPA]˿HpЊ{kY*Z͊\ Ѵ}\t>\<;o) UycsA]ކc=wC*2l_@/р HƂlH/@1.d[|`tW P Sȯ#P|{AWau@r|hXH7 r͢{ggc yihɞyhuY;.6꾽\qbF,.YN߸_H| Ndg}9ț"Жh80\ehoQue~v}f%A[5U Z7`OlVhuk@ y3fA2bur/fɉf.4A:TdX#2?Z&Q5CW|̆/C`J1 Ƅ47PΠZxb2FxzPޱnQ+4#o$vIJ ;?὆莰\k (V܍cD>}&P7S))5N'KX1J]2== k剉iU2̿#'d DSH`&qʔv,goY-5M!]Ʋ\qzf[ʋ}e͚ݚNTrYv\,>8x>co,a9Q'i`# 2ENfěy6( 0Ld{ksw f+޴4tSdľ&dDEO6ʞu_`4pfBqMRjc-^ɋ vr+.\SHrQCI ,L#NA/A7a <%>!;m:˙P.lbIڹy&TmMl+O3S@I9~a'G`^̓bgU{=2嫷b3&[t$9҆@jvo|Bws bv MV!8 Ð`vPׯ:/tBsc$ʵҹ܇FbZ8N<C@բbw:2,1Hv./PK\Q7+x wdU>J@_-`Nl\$]m@&M,)O[RJ+Oۖ!wpJISW:NœTݢԺ,z!͉\`k3q(8kCu}(.E_>~n)(>C.EݒTΆg;%<X N }(imx1ZVi06"Q..|"X}H"pw?TPY"hq2zEkOfi')"(lVq}%O!BJ"?x%U\v_*xĴypu5FD>^k3!>NnIrAҴG/9#b UUҀL,&d]k+LbYFe+x;#? *}/f^~׌5LA3UXs-E"{p+}26 SUe#0k;derb@lX^ |P@lXH04wR;x- (6!<R^&H-k&[!qʹ-Kgq=6Q:N{oR]HW} 0e#2k8-˫"2YT8I$Q*[0)(hv|إ={-%^=LF^j%.w_~7jtqV-ݚe{m)+5n&ZIrhfH&r NqL+[\h힊S+_KRbWib垯BMkܓ6,*?{<60+hЙgDZu#야-:`H,!#nkXQb5+ "*Bl(G=)pĝEC·9 'Hb74.:?q}+DS]Uߠ>Y=p~ gr!"~ [<rH eb4+2qsY_$20TgǥYJGR?U!7fH\UKOg[3];argx+\:sZRyE.e r8 Va/2}_KhkOSLrb._D/<-XS}r7ާTr+lÞUA6x4eqyDEoҦ/Lٗ2G%AO. B :E ~wv.-P 2 g}s-3_cӸ#<AQ۲mp=L0@H3 [sx?''@!&*8?? ʚ%ZԽK8\j]:-";-DfAd®Dn(H@,+/ڒaav)"}s#yK*ڢޢ*LShpep٢#ZM;}O.Oj~IQam Pv^>Ԝ[J.i8̾aa䎍%gWBS˞~F'ı"rxh`40g򶬏TFuh]丁iFոʳNMB:ʔcPV,B0] 6E}̥LØ?p1o 5XB,] _6_񉝕tџTm$[+b|0&<PÚ{y8i:JA0)X\+ Vf EiqWkC88סKj g{R aË/&LǡX0.Hp2#@m, R˥|_,P _sir4@Nî]OiҾ?I=6=>vIweȈ{Nn$D~~ŝihKy^3Va0Y 0־`(8&24TGd:onɦ\ |* __xAџG)3'P)?vyТ㼾Šza(&s;'kUI2(R/˯KZ_"[q\1**쥄yzW툨'X8cܣa $#yq &V*6Nx,_gٕH]}(iҧցRdEo'ޅAk  k2dT 5p_qܸvДe" x.%V$]~NqÃ1 }Ɣ@.FKm{peOQ#Wza`57pG- a뺍F8w%HQ E3M½"I ADlҚ~)϶L&W_I)fc|wݖUdڗvq>o&,r;E?l t 4hD0b;O<ڽ7bLyVr怊źf/Z'ګxE 4NϾo(%ƒ]?"ojE䪯A?4?߮lo!zhA};S`>laA,C (O_ʙ. ܌cK@RKkmGV#}'Bҳhnğ;tCDžZ ԠC`y/,9UQg-W DZpcV8J %}F񈧵KEw%:%xTq$.+h}>YX$`I}j@;* ȅUgp0蝊_nd8wnϘLoS=tsi̅ bb`IZs?&bQAnM"8]z`uX\QY>jC-Иa^9 v3[rxS'hI` rCOf5WES s^B1-z_޲1KL_*tZC2%)us=-VUsF]czD{Hj)Z` X'W+e̥cH hb;s 84^NCqPJ]iya:1ڕg/GK G՝rn4=)7>2 ZMAohkīNaF ?a!fiiz1SO}M:+ˊȋ&NB1^myS?bL?} |.q0ʿRZ'NCnGUH"2 lK~Сn$ 0"չ&/Zo>W.'u94 AD8`$nH\V#I8bFr!٪ߧU7 ) YlXw\Y3qQTJϥ1&p{<=*m Mcޘېw-,ini1ע oB9+^)eF9PcyNhdSI&@06ty6Gq2ζ"}M\&&>6V{LfjѰp 26op%d4㒐 E)$6f>ssovCZ<PS0-86^u3$)i!RU8rqkQSCkYL[W1$a (VĻzEcNJFR%;%E=4KϢL #&}/Iدaic$pָ((6Ecc&@e]Q Dr^*Q,G !J$hJ ^Mc= J1zD%A/ 4ަذ.^bBj#2)xOu N,ZsTκ*H[;U F%+Nԣ&'hklF:J~D4ط2c [/=#j_V( ϳ#0RoI[TeVRGo%hg-Sjoxe2 BG2h[(fyw;0w~Vw:D:j.hH1Rn}ERy&'. -d6Cmh9 Rwi7p}!G*}gW\ ,πLwAfgTQܶ?ܔgFWchI6 X%qH1*-^ȹrd.FB-AaMب؋ԣhc{,K԰Ϗs_祏R]|GG#zK;7J,v[?LlO \'X`Mi@q+pijS΂ ~3"xd~'].)i}. cX\yID{ģ&fU]zC.ZboWGbzwV%)՟VZ;ATƦ8sȮzN(OLk bc"0woJ]S>3UP\V !=WVݖ= aB˺\Grgo NMն/>FDHʩDcfbKmvI${9%6Gr_HFX *ų:\XGm1?=6( rth,K}pŕ%LбsrDAp$GX29סٺÀLh`31fYoOJ}0ޱ͹{lR 4nQjv/>/בo}= Cu\:KD;PٙxwR!-&z~!Ydحb 4dyBmfRg&Qf#M#Rc#OoޥY%/<_8Ÿ γYqİGȏf*ixN徆X-C^0qAjgҽ?=Driuz(H~r٫iV%^qFFN9݉eV.оv}#ƎoŦ-IPQ  Bn)O܉E᢯I? yF6]LjB* pPrX|F"0x6G礔p<î!Ywkt_8RY# HP")f.=_iyz5 M)W\e$Xb5@V*4BhJlN9| - _ n/]Y`|+Vv7'445_uH|Q@Ui eU]I gFT1*h_$,+r^XX|Y,iM+w8&iL䡖خ`@ԌJLpKbKkaǡ7(|"@QPFe 2Djm.Jo :F_e&]{o%FlPu) NdMH}fZ=i"`G}x6s+^!LAzR/L& *a aTX!R~05yso'Bk?R<=~D[-dϔ@q |fw8׿@J{?1>& ~U*ҫh1uHgM Ǻʻ%VL5'x5<}psKM{/I:kF,{Dόd7_YJ. KtH%ór%0`[L*_e>6XE~FήwgXx՝JwX/&0'e|~;I6_*&Mp1?CӵJ ^,{z#3˽;,:M{MGM$m/LI LپUf(:+f99 %e^i^U !=,^RhƙIRNsN]ebMϽ@ eo6ΝRQFp1`?Y %Usy ̮JKjq ZAizE4>ܗ8oÆu.l7J8 AS2c ŌRB4Rx OTeaXEtyW]aHFio YZ