openldap2-back-meta-2.4.46-lp150.7.1 >  A Z/=„_puF;$\]kb>h IICesޖ&Ae43iiLP# IݓGeP GY7JOL폳ZZ`fJQTt4 @Zhjj'nrNeWjL9S1XHwζ33c$oKƍxJwRDgo;y͟e/WpdfѴvр-:~{;;I(Ra911d9d50c94dec797124fb624512259e14826ee7c8ccf58c824b7641f7224679a18f7886e451fdacf941311646f987e431b8e05ߤZ/=„P#‰(2i:-;MDI:= "Py yp]W؆+62Ev^:HjBXX~)\`<~PԘAEݓ˨ߒ"5!)-P0ޔBReU~GVG$ yP\Hr@Ug| (QsV=q:9M.tf)HˬŜ1 NP| Cv~ę0uHD GA K(j2|>p>H?8d ' >(,48KT^ x      %>dx 0 Z (8e9 e: eFLG`HtIXY\]^-bWcd`eefhlju|vwxyz4Copenldap2-back-meta2.4.46lp150.7.1OpenLDAP Meta Back-EndThe OpenLDAP Meta back-end is able to perform basic LDAP proxying with respect to a set of remote LDAP servers. The information contained in these servers can be presented as belonging to a single Directory Information Tree (DIT).Zlamb51hopenSUSE Leap 15.0openSUSEOLDAP-2.8https://bugs.opensuse.orgProductivity/Networking/LDAP/Servershttp://www.openldap.orglinuxx86_64^8<ZҏZZҏZҏZ3b1e0ae17255912767d70563a154ffc7579c9a300607c90ff744f017ccb4b1170afb56e8d4b1431e4e1feef8cc0e72dd2e76e6f5702ab325c9037e73056423fb334a426020c3ec38870ddab833da6ec8fc50fed6ab2ffbcac452e96fb2978c2bback_meta-2.4.so.2.10.9back_meta-2.4.so.2.10.9rootrootrootrootrootrootrootrootrootrootopenldap2-2.4.46-lp150.7.1.src.rpmlibtool(/usr/lib64/openldap/back_meta.la)openldap2-back-metaopenldap2-back-meta(x86-64)openldap2:/usr/share/man/man5/slapd-meta.5.gz@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)openldap2rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.4.463.0.4-14.6.0-14.0-15.2-14.14.1Z@Za@Z@ZZ.s@Z@Y*@Y*@Y@Y@YYp@Yf@Y7Y6@X@X7@X$a@XWk@WbW;VVɦVŲ@VŲ@V@V@V@V@Vf@V^@V\:@V@V @U4@T@TuT:m@T @T=@T@Si@S@Sr @SW@SK@S@Rb@RRSRSQ@QP<@P|@P*P{@P{@P}L@OOD@OU@OKp@NU@NؽNσ@NS@NMMc@MY@MGM6@M$]@L,@L@Lp@L*@LvW@LI@L,@L,@K@KK@KrKv@KEK KJ@J@J JJ\s@JHJCfJ67IA@IIÅ@zsolt.kalmar@suse.comzsolt.kalmar@suse.commichael@stroeder.comfvogt@suse.commichael@stroeder.comrbrown@suse.comjengelh@inai.demrueckert@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.comhguo@suse.comhguo@suse.comjengelh@inai.dekukuk@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comlmuelle@suse.comhguo@suse.commpluskal@suse.commichael@stroeder.comhguo@suse.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comrguenther@suse.comjengelh@inai.dejengelh@inai.detchvatal@suse.comvarkoly@suse.comro@suse.deckornacker@suse.comckornacker@suse.comcoolo@suse.comdmueller@suse.comckornacker@suse.comro@suse.devarkoly@suse.comvarkoly@suse.commatz@suse.devarkoly@suse.comjengelh@inai.dejengelh@inai.dero@suse.derhafer@suse.comrhafer@suse.comcoolo@suse.comcoolo@suse.comrhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.decfarrell@suse.comrhafer@suse.decoolo@suse.comrhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@novell.comrhafer@novell.comrhafer@novell.comcristian.rodriguez@opensuse.orgrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comadrian@suse.derhafer@novell.comrhafer@novell.comrguenther@suse.derhafer@novell.comrhafer@novell.comrhafer@novell.comcoolo@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@suse.derhafer@suse.de- bsc#1085064 Packaging issues have been discovered around the openldap_update_modules_path.sh which has been corrected: - the spec file was wrongly configured, therefore the script has never been called - the script should create the symlinks first, as slapcat is useless on a system which is already affected.- bsc#1085064 Add script "openldap_update_modules_path.sh" which which removes the configuration item olcModulePath in cn=config which is after upgrade from SLE12 to SLE15 holds inappropriate information. If the cn=config is being used on a system, the conflicting items in slapd.conf are ignored, despite of it, the backend DB configuration section has been also commented out in the default slapd.conf. In case of correct cn=config (the olcModulePath has been already removed), the script stops without touching anything.- Upgrade to upstream 2.4.46 release - removed obsolete back-port patches: * 0013-ITS-8692-let-back-sock-generate-increment-line.patch * 0016-ITS-8782-fix-cancel-memleak.patch OpenLDAP 2.4.46 Release (2018/03/22) Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717) Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373) Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687) Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791) Fixed libldap MozNSS CA certificate hash matching (ITS#7374) Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389) Fixed libldap MozNSS initialization (ITS#8484) Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650) Fixed libldap memory leak with cancel operations (ITS#8782) Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705) Fixed slapd to maintain SSF across SASL binds (ITS#8796) Fixed slapd syncrepl deadlock when updating cookie (ITS#8752) Fixed slapd syncrepl callback to always be last in the stack (ITS#8752) Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778) Fixed slapd CSN queue processing (ITS#8801) Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720) Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520) Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226) Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404) Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692) Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752) Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100) Fixed slapo-syncprov memory leak with delete operations (ITS#8690) Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444) Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100) Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607) Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800) Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486) Build Environment Fixed Windows build with newer MINGW version (ITS#8697) Fixed compiler warnings and removed unused variables (ITS#8578) Contrib Fixed ldapc++ Control structure (ITS#8583) Documentation Delete stub manpage for back-ldbm (ITS#8713) Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121) Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818) Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715) Fixed slapo-syncprov(5) indexing requirements (ITS#5048)- Use %license (boo#1082318)- added 0016-ITS-8782-fix-cancel-memleak.patch- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Add openldap-r-only.dif so that openldap2's own tools also link against libldap_r rather than libldap. - Make libldap equivalent to libldap_r (like Debian) to avoid crashes in threaded programs which unknowingly get both libraries inserted into their process image. [rh#1370065, boo#996551]- use existing groups instead of inventing new ones- added 0012-ITS8051-sockdnpat.patch- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- Added OpenLDAP new feature implementing OpenLDAP ITS#8714 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- added overlay trace to package openldap2-contrib- Upgrade to upstream 2.4.45 release - removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch and 0012-use-system-wide-cert-dir-by-default.patch - added 0013-ITS-8692-let-back-sock-generate-increment-line.patch for supporting modify increment operations with back-sock - added overlay addpartial to package openldap2-contrib- Remove legacy daemon control that was used to migrate from SLE 11 to 12. (bsc#1038405)- There is no change made about the package itself, this is only copying over some changelog texts from SLE package: - bug#976172 owned by hguo@suse.com: openldap2 - missing /usr/share/doc/packages/openldap2/guide/admin/guide.html - bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546: openldap2: slapd crash in valueReturnFilter cleanup - [fate#319300](https://fate.suse.com/319300) - [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545) - bug#905959 owned by hguo@suse.com: L3-Question: Are multiple "Connection 0" in a Multi Master setup normal ? - [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546) - bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545: openldap2: slapd crashes on search with deref control and empty attr list- Drop binutils requirement; the code using /usr/bin/strings has been dropped in openSUSE:Factory/openldap2 revision 112.- Remove superfluous insserv PreReq.- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch to let OpenLDAP read system wide certificate directory by default and avoid hiding the error if user specified CA location cannot be read (bsc#1009470).- Add more details in the comments of slapd.conf concerning file permission and StartTLS capability.- Test for user/group existence before trying to add them. Summary spello update.- Move schema files into tarball addonschema.tar.gz: ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema yast.ldif yast.schema - Package previously missing schema files in LDIF format: amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif sudo.ldif suse-mailserver.ldif (bsc#984691) - Fix a minor issue in schema2ldif script that led to missing attribute in the generated LDIF.- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.- Move ldap.conf into libldap-data package, per convention.- Move ldap.conf out of shlib package again, they are not allowed there for obvious reasons (conflict with future package).- Build password strength enforcer as an implementation of ppolicy password checker, introducing: ppolicy-check-password-1.2.tar.gz ppolicy-check-password.Makefile ppolicy-check-password.conf ppolicy-check-password.5 0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch (Implements fate#319461)- Remove redundant -n openldap2- package name prefix.- Remove openldap2-client.spec and openldap2-client.changes openldap2.spec now builds client utilities and libraries. Thus pre_checkin.sh is removed. - Move ldap.conf and its manual page from openldap2-client package to libldap-2_4-2 package, which is more appropriate. - Use RPM_OPT_FLAGS in build flags. - Macros dealing with old/unsupported distributions are removed. - Remove 0002-slapd.conf.dif and install improved slapd.conf from new source file slapd.conf. - Install slapd.conf.olctemplate to assist in preparing slapd.d for OLC. - Be explicit in sysconfig that by default openldap will use static file configuration. - Add the following schemas in LDIF format: * rfc2307bis.ldif * ldapns.ldif * yast.ldif - Other minor clean-ups in the spec file.- Use optflags when building- Upgrade to upstream 2.4.44 release with accumulated bug fixes. - Specify source with FTP URL - Removed obsolete 0012-openldap-re24-its8336.patch- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch into 0010-Enforce-minimum-DH-size-of-1024.patch- Upgrade to upstream 2.4.43 release with accumulated bug fixes. - Still build on SLES12 - Loadable backend and overlay modules are now installed into arch-specific path %{_libdir}/openldap - All backends and overlays as modules for smaller memory footprint on memory constrained systems - Added extra package for back-sock - Consequent use of %{_rundir} everywhere - Rely on upstream ./configure script instead of any other macro foo - Dropped linking with libwrap - Dropped 0004-libldap-use-gethostbyname_r.dif because this work-around for nss_ldap is obsolete - New sub-package openldap2-contrib with selected contrib/ overlays - Replaced addonschema.tar.gz with separate schema sources - Updated ldapns.schema from recent slapo-nssov source tree - Added symbolic link to slapd executable in /usr/sbin/ - Added more complex example configuration file /etc/openldap/slapd.conf.example - Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap - Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap - Added patch for OpenLDAP ITS#7796 to avoid excessive "not index" logging: 0011-openldap-re24-its7796.patch - Replaced openldap-rc.tgz with single source files - Added soft dependency (Recommends) to cyrus-sasl - Added soft dependency (Recommends) to cyrus-sasl-devel to openldap2-devel - Added patch for OpenLDAP ITS#8336 (assert in liblmdb): 0012-openldap-re24-its8336.patch - Remove obsolete patch 0001-build-adjustments.dif- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch to fix CVE-2015-6908. (bsc#945582) - Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch to address weak DH size vulnerability (bsc#937766)- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch to fix an issue with unresponsive LDAP host lookups in IPv6 environment. (bsc#955210)- Remove OpenLDAP 2.3 code and patches from build source. Compatibility libraries for OpenLDAP 2.3 are built in package: compat-libldap-2_3-0 Removed source files: openldap-2.3.37-liblber-length-decoding.dif openldap-2.3.37-libldap-ntlm.diff openldap-2.3.37-libldap-ssl.dif openldap-2.3.37-libldap-sasl-max-buff-size.dif openldap-2.3.37-libldap-tls_chkhost-its6239.dif openldap-2.3.37-libldap-gethostbyname_r.dif openldap-2.3.37-libldap-suid.diff openldap-2.3.37.dif openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif openldap-2.3.37-libldap-ldapi_url.dif openldap-2.3.37.tgz openldap-2.3.37-libldap-utf8-ADcanonical.dif README.update check-build.sh- Upgrade to upstream 2.4.42 release with accumulated bug fixes.- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements. * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch * Remove already applied patch 0009-gcc5.patch (Implements fate#319301)- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks for Berkeley DB version- binutils is required for "strings" utility invocation in %pre [bnc#904028] - Remove SLE10 definitions- Use %_smp_mflags for parallel build- Add baselibs.conf to sources list- Do not bypass output of useradd and groupadd- sanitize release line in specfile- segfault on certain queries with rwm overlay (bnc#846389) 0008-ITS-7723-fix-reference-counting.patch- enable systemd slapd service if SysV ldap was enabled (bnc#881476)- use %_rundir if available, otherwise /var/run- move systemd requires to server package- Fix systemd service installation- use configure macro also for building the 2.3.37 version- Remove PidFile from service definition - Update to 2.4.39 * Fixed libldap MozNSS crash (ITS#7783) * Fixed libldap memory leak with SASL (ITS#7757) * Fixed libldap assert in parse_passwdpolicy_control (ITS#7759) * Fixed libldap shortcut NULL RDNs (ITS#7762) * Fixed libldap deref to use correct control * Fixed liblmdb keysizes with mdb_update_key (ITS#7756) * Fixed slapd cn=config olcDbConfig modification (ITS#7750) * Fixed slapd-bdb/hdb to bail out of search if config is paused (ITS#7761) * Fixed slapd-bdb/hdb indexing issue with derived attributes (ITS#7778) * Fixed slapd-mdb to bail out of search if config is paused (ITS#7761) * Fixed slapd-mdb indexing issue with derived attributes (ITS#7778) * Fixed slapd-perl to bail out of search if config is paused (ITS#7761) * Fixed slapd-sql to bail out of search if config is paused (ITS#7761) * Fixed slapo-constraint handling of softadd/softdel (ITS#7773) * Fixed slapo-syncprov assert with findbase (ITS#7749) * Build Environment Test suite: Use $(MAKE) for tests (ITS#7753) * Documentation admin24 fix TLSDHParamFile to be correct (ITS#7684)- Add systemd style service definition - FATE#315028 remove memory limit for slapd - FATE#315415: LDAP compat packages required for older SLES versions For this reson following patches were applied: openldap-2.3.37-libldap-suid.diff openldap-2.3.37-libldap-ldapi_url.dif openldap-2.3.37-libldap-ntlm.diff openldap-2.3.37-libldap-gethostbyname_r.dif openldap-2.3.37-libldap-sasl-max-buff-size.dif openldap-2.3.37-libldap-utf8-ADcanonical.dif openldap-2.3.37-liblber-length-decoding.dif openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif openldap-2.3.37-libldap-tls_chkhost-its6239.dif openldap-2.3.37-libldap-ssl.dif- Make /etc/sasl2 owned by openldap2.- Update to 2.4.38 * Fixed liblmdb nordahead flag (ITS#7734) * Fixed liblmdb to check cursor index before cursor_del (ITS#7733) * Fixed liblmdb wasted space on split (ITS#7589) * Fixed slapd for certs with a NULL issuerDN (ITS#7746) * Fixed slapd cn=config with empty nested includes (ITS#7739) * Fixed slapd syncrepl memory leak with delta-sync MMR (ITS#7735) * Fixed slapd-bdb/hdb to stop processing on dn not found (ITS#7741) * Fixed slapd-bdb/hdb with indexed ANDed filters (ITS#7743) * Fixed slapd-mdb to stop processing on dn not found (ITS#7741) * Fixed slapd-mdb dangling reader (ITS#7662) * Fixed slapd-mdb matching rule for OlcDbEnvFlags (ITS#7737) * Fixed slapd-mdb with indexed ANDed filters (ITS#7743) * Fixed slapd-meta from blocking other threads (ITS#7740) * Fixed slapo-syncprov assert with findbase (ITS#7749) Changes in 2.4.37 * Added liblmdb nordahead environment flag (ITS#7725) * Fixed client tools CLDAP with IPv6 (ITS#7695) * Fixed libldap CLDAP with IPv6 (ITS#7695) * Fixed libldap lock ordering with abandon op (ITS#7712) * Fixed liblmdb segfault with mdb_cursor_del (ITS#7718) * Fixed liblmdb when converting to writemap (ITS#7715) * Fixed liblmdb assert on MDB_NEXT with delete (ITS#7722) * Fixed liblmdb wasted space on split (ITS#7589) * Fixed slapd cn=config with olcTLSProtocolMin (ITS#7685) * Fixed slapd-bdb/hdb optimize index updates (ITS#7329) * Fixed slapd-ldap chaining with cn=config (ITS#7381, ITS#7434) * Fixed slapd-ldap chaning with controls (ITS#7687) * Fixed slapd-mdb optimize index updates (ITS#7329) * Fixed slapd-meta chaining with cn=config (ITS#7381, ITS#7434) * Fixed slapo-constraint to no-op on nonexistent entries (ITS#7692) * Fixed slapo-dds assert on startup (ITS#7699) * Fixed slapo-memberof to not replicate internal ops (ITS#7710) * Fixed slapo-refint to not replicate internal ops (ITS#7710) Changes in 2.4.36 * Added back-meta target filter patterns (ITS#7609) * Added liblmdb mdb_txn_env to API (ITS#7660) * Fixed libldap CLDAP with uninit'd memory (ITS#7582) * Fixed libldap with UDP (ITS#7583) * Fixed libldap OpenSSL TLS versions (ITS#7645) * Fixed liblmdb MDB_PREV behavior (ITS#7556) * Fixed liblmdb transaction issues (ITS#7515) * Fixed liblmdb mdb_drop overflow page return (ITS#7561) * Fixed liblmdb nested split (ITS#7592) * Fixed liblmdb overflow page behavior (ITS#7620) * Fixed liblmdb race condition with read and write txns (ITS#7635) * Fixed liblmdb mdb_del behavior with MDB_DUPSORT and mdb_del (ITS#7658) * Fixed slapd cn=config with unknown schema elements (ITS#7608) * Fixed slapd cn=config with loglevel 0 (ITS#7611) * Fixed slapd slapi filterlist free behavior (ITS#7636) * Fixed slapd slapi control free behavior (ITS#7641) * Fixed slapd schema countryString as directoryString (ITS#7659) * Fixed slapd schema telephoneNumber as directoryString (ITS#7659) * Fixed slapd-bdb/hdb to wait for read locks in tool mode (ITS#6365) * Fixed slapd-mdb behavior with alias dereferencing (ITS#7577 ) * Fixed slapd-mdb modrdn and base-scoped searches (ITS#7604) * Fixed slapd-mdb refcount behavior (ITS#7628) * Fixed slapd-meta binding flag is set (ITS#7524) * Fixed slapd-meta with minimal config (ITS#7581) * Fixed slapd-meta missing results messages (ITS#7591) * Added slapd-meta TCP keepalive support (ITS#7513) * Fixed slapo-sssvlv double free (ITS#7588) * Fixed slaptest to list -Q option (ITS#7568) Changes in 2.4.35 * Fixed liblmdb mdb_cursor_put with MDB_MULTIPLE (ITS#7551) * Fixed liblmdb page rebalance (ITS#7536) * Fixed liblmdb missing parens (ITS#7377) * Fixed liblmdb mdb_cursor_del crash (ITS#7553) * Fixed slapd syncrepl updateCookie status (ITS#7531) * Fixed slapd connection logging (ITS#7543) * Fixed slapd segfault on modify (ITS#7542, ITS#7432) * Fixed slapd-mdb to reject undefined attrs (ITS#7540) * Fixed slapo-pcache with +/- attrsets (ITS#7552) Changes in 2.4.34 * Fixed libldap connections with EINTR (ITS#7476) * Fixed libldap lineno overflow in ldif_read_record (ITS#7497) * Fixed liblmdb mdb_env_open flag handling (ITS#7453) * Fixed liblmdb mdb_midl_sort array optimization (ITS#7432) * Fixed liblmdb freelist with large entries (ITS#7455) * Fixed liblmdb to check for filled dirty page list (ITS#7491) * Fixed liblmdb to validate data limits (ITS#7485) * Fixed liblmdb mdb_update_key for large keys (ITS#7505) * Fixed ldapmodify to not core dump with invalid LDIF (ITS#7477) * Fixed slapd syncrepl for old entries in MMR setup (ITS#7427) * Fixed slapd signedness for index_substr_any_* (ITS#7449) * Fixed slapd enforce SLAPD_MAX_DAEMON_THREADS (ITS#7450) * Fixed slapd mutex in send_ldap_ber (ITS#6164) * Added slapd-ldap onerr option (ITS#7492) * Added slapd-ldap keepalive support (ITS#7501) * Fixed slapd-ldif with empty dir (ITS#7451) * Fixed slapd-mdb to reopen attr DBs after env reopen (ITS#7416) * Fixed slapd-mdb handling of missing entries (ITS#7483,7496) * Fixed slapd-mdb environment flag setting (ITS#7452) * Fixed slapd-mdb with sub db slapcat (ITS#7469) * Fixed slapd-mdb to correctly work with toolthreads > 2 (ITS#7488,ITS#7527) * Fixed slapd-mdb subtree search speed (ITS#7473) * Fixed slapd-meta conversion to cn=config (ITS#7525) * Fixed slapd-meta segfault when modifying olcDbUri (ITS#7526) * Fixed slapd-sql back-config support (ITS#7499) * Fixed slapo-constraint handle uri and restrict correctly (ITS#7418) * Fixed slapo-constraint with multi-master replication (ITS#7426) * Fixed slapo-constraint segfault (ITS#7431) * Fixed slapo-deref control initialization (ITS#7436) * Fixed slapo-deref control exposure (ITS#7445) * Fixed slapo-memberof with internal ops (ITS#7487) * Fixed slapo-pcache matching rules for config db (ITS#7459) * Fixed slapo-rwm modrdn cleanup (ITS#7414) * Fixed slapo-sssvlv maxperconn parameter (ITS#7484)- For now, avoid automatic use of libdb-6_0 by explicitly selecting libdb-4_8 as BuildRequire.- Put static libs into openldap2-devel-static and relieve openldap2-devel of static-only deps- fix check-build.sh for kernel > 3.0- Fixed initscript to avoid endless loop when no configuration is present in /etc/openldap/slapd.d/ (bnc#767464) - cleaned up SLES10 buildrequires and dependencies - removed support for building on SLES9, didn't work anyway anymore - Don't buildrequire krb5-mini on Distributions where it does not exist- enabled mdb backend - Update to 2.4.33 * Added slapd-meta cn=config support * Fixed slapd alock handling on Windows (ITS#7361) * Fixed slapd acl handling with zero-length values (ITS#7350) * Fixed slapd syncprov to not reference ops inside a lock (ITS#7172) * Fixed slapd delta-syncrepl MMR with large attribute values (ITS#7354) * Fixed slapd slapd_rw_destroy function (ITS#7390) * Fixed slapd-ldap idassert bind handling (ITS#7403) * Fixed slapo-constraint with multiple modifications (ITS#7168) Changes in 2.4.32: * Added slappasswd loadable module support (ITS#7284) * Fixed tools to not clobber SASL_NOCANON (ITS#7271) * Fixed libldap function declarations (ITS#7293) * Fixed libldap double free (ITS#7270) * Fixed libldap debug level setting (ITS#7290) * Fixed libldap gettime() regression (ITS#6262) * Fixed libldap sasl handling (ITS#7118, ITS#7133) * Fixed libldap to correctly free socket with TLS (ITS#7241) * Fixed slapd config index renumbering (ITS#6987) * Fixed slapd duplicate error response (ITS#7076) * Fixed slapd parsing of PermissiveModify control (ITS#7298) * Fixed slapd-bdb/hdb cache hang under high load (ITS#7222) * Fixed slapd-bdb/hdb alias checking (ITS#7303) * Fixed slapd-bdb/hdb olcDbConfig changes work immediately (ITS#7338) * Fixed slapd-ldap to encode user DN during password change (ITS#7319) * Fixed slapd-ldap assertion when proxying to MS AD (ITS#6851) * Fixed slapd-ldap monitoring (ITS#7182, ITS#7225) * Fixed slapd-perl panic (ITS#7325) * Fixed slapo-accesslog memory leaks with sync replication (ITS#7292) * Fixed slapo-syncprov memory leaks with sync replication (ITS#7292)- add explicit buildrequire on groff - needed to build manuals- buildrequire krb5-mini in openldap2-client to avoid cycle - move Summary out of the %if as prepare_spec is confused about the license otherwise- update to 2.4.31 * Added slapo-accesslog support for reqEntryUUID (ITS#6656) * Fixed libldap IPv6 URL detection (ITS#7194) * Fixed libldap rebinding on failed connection (ITS#7207) * Fixed slapd listener initialization (ITS#7233) * Fixed slapd cn=config with olcTLSVerifyClient (ITS#7197) * Fixed slapd delta-syncrepl fallback on non-leaf error (ITS#7195) * Fixed slapd to reject MMR setups with bad serverID setting (ITS#7200) * Fixed slapd approxIndexer key generation (ITS#7203) * Fixed slapd modification of olcSuffix (ITS#7205) * Fixed slapd schema validation with missing definitions (ITS#7224) * Fixed slapd syncrepl -c with supplied CSN values (ITS#7245) * Fixed slapd-bdb/hdb idlcache with only one element (ITS#7231) * Fixed slapo-accesslog deadlock with non-logged write ops (ITS#7088) * Fixed slapo-syncprov sessionlog check (ITS#7218) * Fixed slapo-syncprov entry leak (ITS#7234) * Fixed slapo-syncprov startup initialization (ITS#7235)- Disabled testsuite for now. Causes problems in the buildserivce- Update to 2.4.30 * Fixed libldap socket polling for writes (ITS#7167) * Fixed liblutil string modifications (ITS#7174) * Fixed slapd crash when attrsOnly is true (ITS#7143) * Fixed slapd syncrepl delete handling (ITS#7052,ITS#7162) * Fixed slapo-pcache time-to-refesh handling (ITS#7178) * Fixed slapo-syncprov loop detection (ITS#6024)- Update to 2.4.29 * Fixed slapd cn=config modification of first schema element (ITS#7098) * Fixed slapd operation reuse (ITS#7107) * Fixed slapd blocked writers to not interfere with pool pause (ITS#7115) * Fixed slapd connection loop connindex usage (ITS#7131) * Fixed slapd double mutex unlock via connection_done (ITS#7125) * Fixed slapd check order in connection_write (ITS#7113) * Fixed slapd slapadd to exit on failure (ITS#7142) * Fixed slapd syncrepl reference to freed memory (ITS#7127,ITS#7132) * Fixed slapd syncrepl to ignore some errors on delete (ITS#7052) * Fixed slapd syncrepl to handle missing oldRDN (ITS#7144) * Fixed slapd-monitor compare op to update cached entry (ITS#7123) * Fixed slapo-syncprov with already abandoned operation (ITS#7150) - Included patches from RE24 branch: * only poll sockets for write as needed (ITS#7167, bnc#749082) * sycnrepl Fixes (ITS#7162)- license update: OLDAP-2.8 SPDX format (http://www.spdx.org/licenses)- Update to 2.4.28 * Fixed back-mdb out of order slapadd (ITS#7090) changes in OpenLDAP 2.4.27 Release (2011/11/24): * Added slapd delta-syncrepl MMR (ITS#6734,ITS#7029,ITS#7031) * Fixed ldapmodify crash with LDIF controls (ITS#7039) * Fixed ldapsearch to honor timeout and timelimit (ITS#7009) * Fixed libldap endless looping (ITS#7035) * Fixed libldap TLS to not check hostname when using 'allow' (ITS#7014) * Fixed slapadd common code into slapcommon (ITS#6737) * Fixed slapd backend connection initialization (ITS#6993) * Fixed slapd frontend DB parsing in cn=config (ITS#7016) * Fixed slapd hang with {numbered} overlay insertion (ITS#7030) * Fixed slapd inet_ntop usage (ITS#6925) * Fixed slapd cn=config deletion of bitmasks (ITS#7083) * Fixed slapd cn=config modify replace/delete crash (ITS#7065) * Fixed slapd schema UTF8StringNormalize with 0 length values (ITS#7059) * Fixed slapd with dynamic acls for cn=config (ITS#7066) * Fixed slapd response callbacks (ITS#6059,ITS#7062) * Fixed slapd no_connection warnings with ldapi (ITS#6548,ITS#7092) * Fixed slapd return code processing (ITS#7060) * Fixed slapd sl_malloc various issues (ITS#6437) * Fixed slapd startup behavior (ITS#6848) * Fixed slapd syncrepl crash with non-replicated ops (ITS#6892) * Fixed slapd syncrepl with modrdn (ITS#7000,ITS#6472) * Fixed slapd syncrepl timeout when using refreshAndPersist (ITS#6999) * Fixed slapd syncrepl deletes need a non-empty CSN (ITS#7052) * Fixed slapd syncrepl glue for empty suffix (ITS#7037) * Fixed slapd results cleanup (ITS#6763,ITS#7053) * Fixed slapd validation of args for TLSCertificateFile (ITS#7012) * Fixed slapd-bdb/hdb to build entry DN based on parent DN (ITS#5326) * Fixed slapd-hdb with zero-length entries (ITS#7073) * Fixed slapd-hdb duplicate entries in subtree IDL cache (ITS#6983) * Fixed slapo-pcache response cleanup (ITS#6981) * Fixed slapo-ppolicy pwdAllowUserChange behavior (ITS#7021) * Fixed slapo-sssvlv issue with greaterThanorEqual (ITS#6985) * Fixed slapo-sssvlv to only return requested attrs (ITS#7061) * Fixed slapo-syncprov DSA attribute filtering for Persist mode (ITS#7019) * Fixed slapo-syncprov when consumer has newer state of our SID (ITS#7040) * Fixed slapo-syncprov crash (ITS#7025) * Added missing LDIF form of schema files (ITS#7063)- add libtool as buildrequire to avoid implicit dependency- ACL changes to the config database only got active after slapd restart in certain cases (bnc#716895, ITS#7066). - Adjusted default DB_CONFIG to increase max values for locks and lock objects (bnc#719803) - Fix UTF8StringNormalize overrun on zero-length string (bnc#724201, ITS#7059)- Update to 2.4.26 * Added libldap LDAP_OPT_X_TLS_PACKAGE (ITS#6969) * Fixed libldap descriptor leak (ITS#6929) * Fixed libldap socket leak (ITS#6930) * Fixed libldap get option crash (ITS#6931) * Fixed libldap lockup (ITS#6898) * Fixed libldap ASYNC TLS setup (ITS#6828) * Fixed libldap with missing \n terminations (ITS#6947) * Fixed tools double free (ITS#6946) * Fixed tools verbose output (ITS#6977) * Fixed ldapmodify SEGV on invalid LDIF (ITS#6978) * Added slapd extra_attrs database option (ITS#6513) * Fixed slapd asserts (ITS#6932) * Fixed slapd configfile param on windows (ITS#6933) * Fixed slapd config with global chaining (ITS#6843) * Fixed slapd uninitialized variables (ITS#6935) * Fixed slapd config objectclass is readonly (ITS#6963) * Fixed slapd entry response with control (ITS#6899) * Fixed slapd with unknown attrs (ITS#6819) * Fixed slapd normalization of schema RDN (ITS#6967) * Fixed slapd operations cache to 10 op limit (ITS#6944) * Fixed slapd syncrepl crash with non-replicated ops (ITS#6892) * Fixed slapd-bdb/hdb with sparse index ranges (ITS#6961) * Fixed back-ldap ppolicy updates (ITS#6711) * Fixed back-ldap with id-assert (ITS#6817) * Fixed various slapo-pcache issues (ITS#6823, ITS#6950, ITS#6951, ITS#6953, ITS#6954) * Fixed slapo-pcache database corruption (ITS#6831) * Fixed slapo-syncprov with replicated subtrees (ITS#6872) - backported delete support for child entries of overlays from master (bnc#704398)- Updated to 2.4.25, important changes: * Fixed ldapsearch pagedresults loop (ITS#6755) * Fixed tools for incompatible args (ITS#6849) * Fixed libldap MozNSS crash (ITS#6863) * Fixed slapd add objectclasses in order (ITS#6837) * Added slapd ordering for uidNumber and gidNumber (ITS#6852) * Fixed slapd segfault when adding values out of order (ITS#6858) * Fixed slapd sortval handling (ITS#6845) * Fixed slapd-bdb with slapadd/index quick option (ITS#6853) * Fixed slapd-ldap chain cn=config support (ITS#6837) * Fixed slapd-ldap chain with slapd.conf (ITS#6857) * Fixed slapd-meta deadlock (ITS#6846) * Fixed slapo-sssvlv with multiple requests (ITS#6850) * Fixed contrib/lastbind install rules (ITS#6238) * Fixed contrib/cloak install rules (ITS#6877)- Surpress gcc warnings about extra format string arguments for 2.3.x built as well.- Updated to 2.4.24, important changes: * Added libldap_r,libldap formal concurrency API (ITS#6625,ITS#5421) * Added slapadd attribute value checking (ITS#6592) * Added slapcat continue mode for problematic DBs (ITS#6482) * Added slapd syncrepl suffixmassage support (ITS#6781) * Fixed liblber to not close invalid sockets (ITS#6585) * Fixed libldap referral chasing (ITS#6602) * Fixed libldap leak when chasing referrals (ITS#6744) * Fixed slapd acl parsing overflow (ITS#6611) * Fixed slapd acl when resuming parsing (ITS#6804) * Fixed slapd default config acls with overlays (ITS#6822) * Fixed slapd config leak with olcDbDirectory (ITS#6634) * Fixed slapd when first acl is value dependent (ITS#6693) * Fixed slapd-bdb slapadd -q with glued dbs (ITS#6794) * Fixed slapo-ppolicy don't update opattrs on consumers (ITS#6608) * Fixed slapo-ppolicy to allow userPassword deletion (ITS#6620) * Fixed slapo-syncprov to send error if consumer is newer (ITS#6606) * Fixed slapo-syncprov filter race condition (ITS#6708) * Fixed slapo-syncprov active mod race (ITS#6709) * Fixed slapo-syncprov to refresh if context is dirty (ITS#6710) * Fixed slapo-syncprov CSN updates to all replicas (ITS#6718) * Fixed slapo-syncprov sessionlog ordering (ITS#6716) * Fixed slapo-syncprov sessionlog with adds (ITS#6503) * Fixed slapo-syncprov mutex (ITS#6438) * Fixed slapo-syncprov mincsn check with MMR (ITS#6717) * Fixed slapo-syncprov control leak (ITS#6795) * Fixed slapo-syncprov error codes (ITS#6812) * For a comprehensive list of changes please consult the CHANGES file - removed unneeded openSUSE 11.0 specifc patch- slapadd -q could crash for glued bdb/hdb databases- Install the correct schema2ldif script (bnc#665530)- Fixed quotation in init-script to avoid errors when calling it from within /etc/openldap/slapd.d/cn=config/ (bnc#660492).- Surpress gcc warnings about extra format string arguments. - Split-off openldap2-doc (noarch) package (Admin Guide and IDs) - Backported -VVV commandline switch for slapd from HEAD (to list enabled static overlays) - Build all overlays except syncprov and ppolicy as dynamic modules (Fixes bnc#648479, FATE#307837) - Added README.dynamic-overlays to point out some details about dynamic overlays - simplified pie-compile patch and adjusted it to work with dynamic overlays- Handle the libdb-4_5 -> libdb-4_8 Version update by opening the Databases with DB_RECOVER if a version mismatch is detected.- Do not include Build date and time in binaries, this avoids build-compare failures and unhelpful rebuilds/republishes- Don't build 2.3 slapcat anymore for 11.3 and newer. We switch to 2.4 long ago. - Removed automatic 2.3->2.4 migration in %post - moved back-sql examples to make rpmlint happy- Fix listener URIs in init script to make SLP registration work again (bnc#620389)- Fixed RPM Group and Summary Tags (bnc#624980)- Updated to 2.4.23: * Fixed libldap to return server's error code (ITS#6569) * Fixed libldap memleaks (ITS#6568) * Fixed liblutil off-by-one with delta (ITS#6541) * Fixed slapd acls with glued databases (ITS#6468) * Fixed slapd syncrepl rid logging (ITS#6533) * Fixed slapd modrdn handling of invalid values (bnc#612430, ITS#6570) * Fixed slapd-bdb hasSubordinates computation (ITS#6549) * Fixed slapd-bdb to use memcpy instead for strcpy (ITS#6474) * Fixed slapd-bdb entry cache delete failure (ITS#6577) * Fixed slapd-ldap to return control responses (ITS#6530) * Fixed slapo-ppolicy to use Debug (ITS#6566) * Fixed slapo-refint to zero out freed DN vals (ITS#6572) * Fixed slapo-rwm to use Debug (ITS#6566) * Fixed slapo-sssvlv to use Debug (ITS#6566) * Fixed slapo-syncprov lost deletes in refresh phase (bnc#606294, ITS#6555) * Fixed slapo-valsort to use Debug (ITS#6566) * Fixed contrib/nssov network.c missing patch (ITS#6562) - New subpackage openldap2-back-sql. Contains the SQL backend module plus some documentation (bnc#395719) - generate Patches from git tree (resulted in all patches being renamed) - installing binaries without stripping them is done by setting the STRIP enviroment variable instead for patching the Makefile now - Fixed a bug in the syncprov overlay which could lead to not replicate delete Operations (ITS#6555, bnc#606294) - BuildRequires cleanup- LDAP clients could crash the server by submitting a specially crafted LDAP ModRDN operation. (bnc#612430, ITS#6570) - Delete Operations happening during the "Refresh" phase of "refreshAndPersist" replication failed to replicate under certain circumstances (bnc#606294, ITS#6555)- Create /var/run/slapd on demand. /var/run might be mounted on tmpfs.- fix build dependency cycle for -client package with openslp- Fixed quotation in sed expression to escape ldapi path in init script- Removed obsolete hunk from openldap2.dif - Remove ldap.conf patch to use saner default for Certificate verification (bnc#575146)- Add fix for stricter fortification checks of GCC 4.5.- Updated to 2.4.21: * Fixed liblutil for negative microsecond offsets (ITS#6405) * Fixed slapd global settings to work without restart (ITS#6428) * Fixed slapd looping with SSL/TLS connections (ITS#6412) * Fixed slapd syncrepl freeing tasks from queue (ITS#6413) * Fixed slapd syncrepl parsing of tls defaults (ITS#6419) * Fixed slapd syncrepl uninitialized variables (ITS#6425) * Fixed slapd-config Adds with Abstract classes (ITS#6408) * Fixed slapo-dynlist behavior with simple filters (ITS#6421) * Fixed slapd-ldif access outside database directory (ITS#6414) * Fixed slapo-translucent with back-null (ITS#6403) * Fixed slapo-unique criteria checking (ITS#6270) - removed some obsolete RPM dependencies - Added missing tags to init script to silence rpmlint warnings- Fixed an issue in back-config's objectclass inheritence code that could cause the server to fail to start or to spin in an endless loop (bnc#558059,ITS#6408) - default the tls_reqcert parameter of a syncrepl config to "demand" as documented even if other tls_ options are absent (bnc#558397, ITS#6319) - apply changes to the global size and timelimits to all database that don't specify limits themself. (bnc#562184, ITS#6428)- Update to 2.4.20 (fate#306593), most important fixes since 2.4.19 * Fixed liblber embedded NUL values in BerValues (ITS#6353) * Fixed libldap sasl buffer sizing (ITS#6327,ITS#6334) * Fixed libldap uninitialized return value (ITS#6355) * Fixed libldap unlimited timeout (ITS#6388) * Added slapd handling of hex server IDs (ITS#6297) * Fixed slapd checks of str2filter (ITS#6391) * Fixed slapd configArgs initialization (ITS#6363) * Fixed slapd db_open with connection_fake_init (ITS#6381) * Fixed slapd with embedded \0 in bervals (ITS#6378,ITS#6379) * Fixed slapd inclusion of ac/unistd.h (ITS#6342) * Fixed slapd sl_free to better reclaim memory (ITS#6380) * Fixed slapd syncrepl deletes in MirrorMode (ITS#6368) * Fixed slapd syncrepl to use correct SID (ITS#6367) * Fixed slapd tls_accept to retry in certain cases (ITS#6304) * Fixed slapd-bdb/hdb cache corruption (ITS#6341) * Fixed slapd-bdb/hdb entry cache (ITS#6360) * Fixed slapo-syncprov checkpoint conversion (ITS#6370) * Fixed slapo-syncprov deadlock (ITS#6335) * Fixed slapo-syncprov out of order changes (ITS#6346) - Added switch to enable/disable testsuite (%run_test_suite)- updated patches to apply with fuzz=0- Added schema2ldif tool to openldap2-client subpackage (bnc#541819)- Changed permissions on /var/run/slapd to a saner default for ldapi:/// (bnc#536729)- libldap's check of the hostname against the TLS Certificate's CN Attribute did not handle possible NUL bytes in the CN correctly and was vulnerable against attacks with spoofed Certificates. (bnc#537143, ITS#6239)- Update to 2.4.17. Most important changes: * Fixed liblber to use ber_strnlen (ITS#6080) * Fixed libldap openssl digest initialization (ITS#6192) * Fixed libldap tls NULL error messages (ITS#6079) * Added slapd sasl auxprop support (ITS#6147) * Added slapd schema checking tool (ITS#6150) * Added slapd writetimeout keyword (ITS#5836) * Fixed slapd abandon/cancel handling for some ops (ITS#6157) * Fixed slapd access setstyle to expand (ITS#6179) * Fixed slapd assert with closing connections (ITS#6111) * Fixed slapd bind race condition (ITS#6189) * Fixed slapd cert validation (ITS#6098) * Fixed slapd connection_destroy assert (ITS#6089) * Fixed slapd csn normalization (ITS#6195) * Fixed slapd errno handling (ITS#6037) * Fixed slapd hung writers (ITS#5836) * Fixed slapd ldapi issues (ITS#6056) * Fixed slapd normalization of updated schema attributes (ITS#5540) * Fixed slapd olcLimits handling (ITS#6159) * Fixed slapd olcLogLevel with hex levels (ITS#6162) * Fixed slapd sending cancelled operations results (ITS#6103) * Fixed slapd slapi_entry_has_children (ITS#6132) * Fixed slapd sockets usage on windows (ITS#6039) * Fixed slapd some abandon and cancel race conditions (ITS#6104) * Fixed slapd tls context after changes (ITS#6135) * Fixed slapd-bdb/hdb adjust dncachesize if too low (ITS#6176) * Fixed slapd-bdb/hdb crashes during delete (ITS#6177) * Fixed slapd-bdb/hdb multiple olcIndex for same attr (ITS#6196) * Fixed slapd-hdb freeing of already freed entries (ITS#6074) * Fixed slapd-hdb entryinfo cleanup (ITS#6088) * Fixed slapd-hdb dncache lockups (ITS#6095) * Fixed slapd-ldap deadlock with non-responsive TLS URIs (ITS#6167) * Fixed slapo-ppolicy to honor pwdLockout (ITS#6168) * Fixed slapo-ppolicy to return check modules error message (ITS#6082) * Added slapo-rwm rwm-drop-unrequested-attrs config option (ITS#6057) * Fixed slapo-rwm dn passing (ITS#6070) * Fixed slapo-rwm entry free/release (ITS#6058, ITS#6081) * Fixed tools returning ldif errors (ITS#5892) - Backported fix for failing back-monitor test from HEAD - re-enabled some formerly disabled tests from the testsuite- Fixed Summary/Description for -client subpackage- Improved connection check in init script (bnc#510295)- Fixed complilation with newer glibc (2.3.X release needs GNU_SOURCE defined as well in getpeerid.c)- gcc 4.4 fixes- Update to 2.4.16. Most important fixes: * Fixed libldap segfault in checking cert/DN (ITS#5976) * Fixed libldap peer cert double free (ITS#5849) * Fixed libldap referral chasing (ITS#5980) * Fixed slapd backglue with empty DBs (ITS#5986) * Fixed slapd ctxcsn race condition (ITS#6001) * Fixed slapd debug message (ITS#6027) * Fixed slapd redundant module loading (ITS#6030) * Fixed slapd schema_init freed value (ITS#6036) * Fixed slapd syncrepl newCookie sync messages (ITS#5972) * Fixed slapd syncrepl hang during shutdown (ITS#6011) * Fixed slapd syncrepl too many MMR messages (ITS#6020) * Fixed slapd syncrepl skipped entries with MMR (ITS#5988) * Fixed slapd-bdb/hdb cachesize handling (ITS#5860) * Fixed slapd-bdb/hdb with slapcat with empty dn (ITS#6006) * Fixed slapd-bdb/hdb with NULL transactions (ITS#6012) * Fixed slapd-ldap incorrect referral handling (ITS#6003,ITS#5916) * Fixed slapd-ldap/meta with broken AD results (ITS#5977) * Fixed slapd-ldap/meta with invalid attrs again (ITS#5959) * Fixed slapo-accesslog interaction with ppolicy (ITS#5979) * Fixed slapo-dynlist conversion to cn=config (ITS#6002) * Fixed various slapo-syncprov issues (ITS#5972, ITS#6020, ITS#5985, ITS#5999, ITS#5973, ITS#6045, ITS#6024, ITS#5988) - Fix building on older openSUSE releases- Update to 2.4.15. Most important changes: * Fixed slapd bconfig conversion again (ITS#5346) * Fixed slapd behavior with superior objectClasses again (ITS#5517) * Fixed slapd RFC4512 behavior with same attr in RDN (ITS#5968) * Fixed slapd corrupt contextCSN (ITS#5947) * Fixed slapd syncrepl order to match on add/delete (ITS#5954) * Fixed slapd adding rdn with other values (ITS#5965) * Fixed slapd-bdb/hdb behavior with unallocatable shm (ITS#5956) * Fixed slapd-ldap/meta with entries with invalid attrs (ITS#5959) * Fixed slapo-pcache caching invalid entries (ITS#5927) * Fixed slapo-syncprov csn updates (ITS#5969) * Added libldap option to disable SASL host canonicalization (ITS#5812) * Fixed libldap chasing multiple referrals (ITS#5853) * Fixed libldap setuid usage with .ldaprc (ITS#4750) * Fixed libldap deref handling (ITS#5768) * Fixed libldap NULL pointer deref (ITS#5934) * Fixed libldap peer cert memory leak (ITS#5849) * Fixed libldap intermediate response behavior (ITS#5896) * Fixed libldap IPv6 address handling (ITS#5937) * Fixed libldap_r deref building (ITS#5768) * Fixed libldap_r slapd lockup when paused during shutdown (ITS#5841) * Fixed slapd acl checks on ADD (ITS#4556,ITS#5723) * Fixed slapd acl application to newly created backends (ITS#5572) * Fixed slapd bconfig to return error codes (ITS#5867) * Fixed slapd bconfig encoding incorrectly (ITS#5897) * Fixed slapd bconfig dangling pointers (ITS#5924) * Fixed slapd epoll handling (ITS#5886) * Fixed slapd glue with MMR (ITS#5925) * Fixed slapd listener comparison (ITS#5613) * Fixed various syncrepl issues (ITS#5809,ITS#5850, ITS#5843, ITS#5866, ITS#5901, ITS#5881, ITS#5935, ITS#5710, ITS#5781, ITS#5809, ITS#5798, ITS#5826) * Fixed slapd-bdb/hdb dncachesize handling (ITS#5860) * Fixed slapd-bdb/hdb trickle task usage (ITS#5864) * Fixed slapd-hdb idlcache with empty suffix (ITS#5859)lamb51 15250767142.4.46-lp150.7.12.4.46-lp150.7.1back_meta-2.4.so.2back_meta-2.4.so.2.10.9back_meta.laback_meta.soslapd-meta.5.gz/usr/lib64/openldap//usr/share/man/man5/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.0/standard/c94cbeffbfcae9ddce3412b46d0f45d3-openldap2cpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9e38f47ae98fc365d44abfe00dbd23c7e754f9e3, strippedlibtool library filetroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RRRRRRRP%XOutf-8ed8d4eae742abad994291c9f8973421db1376bba094eec4476d8779ec25c06e9? 7zXZ !t/q] cr$x#>v z oKǔ.afwMw#Bʦ] fRf+/Sce=y1SD5aIB1CU j6@#1BlЇA'ߙ?F9#pXm"Wa#4Z]zOٮI]nڄd1 \ M,]ڒq;E^'qFڜm՝^:wU"A_"t:]3/́LdFhvл# |5s9刦 i)-yd+~٘#z@efO5FxxR# ~\ V߹f(1qcž#n\sFQ&3L1`H3U41K}!% 7 p49h1?i8:GMU0iwqWzAn"ْckuQJhc1e 09N%}uV\P"ӟ_w UN$Z9i<4z N4_ϐCL!VALE>ta&pn e`il\ZL!Us>tdv$iZ}׏T-l5;~rXOi;PaQ"P:DCѻ~ckx/NLmA1x1te[4)xXW IWvĽ)\i/%d2||Po`aY_4#3`?_ 6@h3mZ%;e<=,فlP"K $I|Zgk@C!V`?@ %" rGaF7߾2^9g#{|ov<,׍]#i8ӭհ: ¸rNא(DEax F47^QiU4\ Vu"R0Ÿ $Ai O18PpsC q_)\6#y.ʒ\~?l`զRߥh*HΥ1iЛOD/ޞy@|V`lnˈ%6zzBBRο?uHt8SxW_] M}?g60|ݚ.db uGn9򣚺]F“1jl5{O˒5,ՐZ3w:\́xfIOG) !W}F!3'?@61A6 ?dɄs eDoӎG&-exNnbCt zHeB}-ydQ#u1aqx 2&~.;t*/&?#0AlT3oW@84tW$hwv Iѱq\B8 Hqr^ /n98 i@8 汐sѠCWQ}p48R$7]PE6:[zHqv7!CȀ'?[yw?+=Td/mQkGQu91c'X`OV~懭Vt)"jLYG|\ 45ǚ=#IeT,߀ y!WA}7嬬)#6g/@(2FjυVM STht=7ՄWvqOX?:΋Ol\r_.Es,4jr ޛ29˹(_vϸ9&HeCC$(Xܨ|71qp-f zK"+wSM}+U׸8'*ndik:z$Fp yeou#8BjVƂ"# 2%DƮ4Se~7"jvZρ RUv"$ GA8JUUD߫:֭;-yeHFBP p]yF:uf.5xLnLhnm ^:ߞI0ިe _v2;e(f:#o怢|9v3`1LJPq=Q}Gl@(F}$8tK*OB`> 3TZf^f % RepNfeN#uU3 *ʇxĚܰrԎF:`~H7_mQ%[W~t,g3piҶEi?)WdIBaŶSu8ov3]0;3}b#DF?Ӯ4;j 3%ҊqID(-:"}rP_o>Bk&rBT+]Tcv< mݻX{BӓL<%'"pȟ2k#90ܚ?#L Y$xHA_1>(DTo s7 ^MG%̷@]yvſ]a: s5ImQBEg;ԤlBvqƇSE{?Ąƪ@\K\&8tT9hqP wc,tp<1?/?t,_VX6 jb.?PrnvxSkzPٝ&vβ7qb}Yh\ntǖW8܎ku7 =% OWJw\rΧr/}m3hmo Ͻ%ٮp ҩރs-VLmBҬϗdYy;Y?"*ZNprBXj=2Pv3zKO:Oa1G \ S{֚5w}R̴:- .&Qmx?!!՞s?'3 \²jrtav 35ء[Y^)77T}1몎36u9YfTg Y:'unh:xI&ni&Bĩn!'UXxM=^qh"+&Fm n.?zPk~OXdE#+uYp?dL,+eCxz&8B;k^ CY<ϻ@Wz|.Hѫ 4Q[#xxɓ `L"ϊ$>_`Mve*CvahQwf_7va CxУ?WV%lQЀ=m߳Ahҷm9 =\pNR !$|c>X#V=;3@h~crt6.~_t-L0?TXZqߐ266v1W(r:dZR+haR:vn&k)7+%O$(ǹ"jnoRMRS.Et:8|f& xToT]&~WE:^>nٓ$}# wa^Aܧ$!EF(G5g[c8m6dgRN7|?3%^ըORx v?UuC ڟRؔgO{OCWmnf6ؿ̪|O:!gkm R}ӞtI39&뽽 U?R9)@^6;ѕ_n:6~ElTAq_\DdsjJkᤡ|VP5vw8''lK3CcB?G֨GX^C< VsG4E^zf YW&?" /|{1D%OaneKCX"eto/d \ [ {W;~9u%j&&ܹjџ%FQgq x\Y>yk[/$24a\K̎eBREUxD%dFeb)6ks5l (S O!Ag@+}xd- 7g*\ZU ;mៅs`q7urqe.Dm[O$;%ArPI{zOUPQ})¦w剃;EkսoL#'i'&ݗ#(JK<Fe{+Jl>vpCf[? 1vlޏV 0?.?l1O_4ְbfѸ7gCi$Cw糯B1c'eH2+F-JKz3DKjd9c5t50vY RE_h{ ۠Fh'Q\Pm˄2)_{}OFX9Hb6aUٸH[DphQ3..]1+e.g}3qtuE-j~DK G~lpP-op³,zPJ%Pgsj 3mc5 z,B!h*\aŘLGcmM~A CPPg,`ˌTb4( q; _E=$aQYLd RW-"l ܏ZBr@a*>T*=߹ɯtij0 ޣj6pZdFP=&LG?۝2yWfy>sV$Ѝ253Xa#>ř`;z酦)dzd)o]Q-3:!46u@~N #ʖK?2U1UOmc4Vҏ@1Jˊ;}DŽ vPO+' QF& ۩0ƜT3iJtž0rP98!#gw_&j $L'dzҹFT7.ԭk[ߠnKUK c-<3p7GEp!y&#B헿q68cGP؜T&jf&dk#AP+:Lݗ=N8; wKY2 %a:FbkEb!f5Ɉ϶LS0H 2(t#4q>K8#%hp^ghtKԯ:m,al$7 [X$Ԯ7sSDz2/аB?^E{GECAzDJvVBdTɞ:u ,͉){U\(Et!i#u`ò8B [ymDfV4Z6/[:@~Y|=p&Bv&M N3C4AÕhqمVy3g̥`e7յOO6i] 9Bcˈnxh qR,P/buL랣Lu>Ԩ @DM}#,n?*ڗJ+d; j+ѿr$hBL';\[)T]n,IFzԟq,sP7~䲏_Y,=rwj2}gzu0  -խb걎:ZO"g^j=:֌}1)w&օcx4۠$NX}%y ?L Q1\ܶL |\n=0D(^1 ¬w!U&@)蠲~lpmRH7=H A#cГ,83SpIH]2(|%\eNk GkhraR?[m:5z">^;+ #_EOnB"Ne>SMaJ;sqф/]^5Pa,ذfe}6yRu5L5`yΰ!;D?t66J "mLH*9tO9LFgF$oHҠޛ"| mxsWIiRdr1?۠ Itb?N種QtH b$awHB9xG΅ɉ?U&g%f[B%|}0q^őJw7`YSȻ %T^iycbQQ^rs{u)hf8p$d^~EP[N'.0Ȥb. ZLF^ D 5 ˆr;0"Sz~}ӷ&p˂-'8gw+̅EvW#Y)I㟎ᳯtC5<"S Bo#w|| bUQK>6*D_P5[=i#aU6GK j+e*6)۲BDXrPȀ=* ]ٷn}2WVGm@rdvr4nԘL|' M ^HjNHPgrO;'Pu=}uMD8YfU"۪&h?9c/8MMm>hjͭ8p3uS 4–wZ+Նg@b_l5إ[>OaN\o+ ʼ =8"^'FBnD WI y&Ц5 !hf*?=%a}HJr^\ڿ~R1H䯓E#|i5[5J Zf5MqN􎭙h%Y T1Bn>uHֹ,sLxQ]kEyw O s J#^P"OoV!jl1Aʖ񹃡%ºNTI': I%hŋklݸ[KS!#7 U8Nw#- n#nC:goO5_Jk9[j(RKV|OY+ȱj^e_W_LE?zh35G@Z,T9i:gf n:Wk4IL]nM:禷@D/x۟⣀4}MI,o{Ef<ڠBo籚JGfA4.tXiHDxv~=dIALV>Q!1 [%cTDSB ܝM/?՟WF<^o_g3!μBQaV%G`Ns {KAJ*'SD݇X$rd% ulhјSYW|LQMrRuڈ?AyU[W&= 4s_h79ȝ{1Q`,UTЙN2[2/K:t rǑi~`CԊ~>޽|S?%D9) RIic8G.`^M{7j PwkĐmz^g~p}A"חF9'[f63K(Wf0䭡xdiev/QHFoP"Jܢ^pg_类1 b""FQ6ΗW h y`v'vέ`-Jc=r> QUF!]edPe?"N3&aװ[2NbM98g(g`cdв}ͱ =Z!S7qMC~z^r[]|hm͟km~/c`3% 9~z7XI8pMm(憑 hcqSxѕy Peҍ"J#Ȝ=,_0@ZqRfGSCi~> /`/; a$|TyR:51wri@[gj:?W'94ZGCcZLV5k+zɲ .qyBoGE+X",wEoOsq' 0Fx4NXo 9!qIBlxӃX }27@̗̈́HD7}/*FB& YU[׽JO 4znCm<[+4sA|ҵN#5/ܽӀ{W f6ޡE,^%ƙY#>(0 g4ڎ N[4bIW؋ndg>(Y!x#-qZBb>1bJv'.n#r\G="G]kU~O(pp6k`ߵWHt.*M$Ȭ`h8k %(Q2Am>Ei9>*{D"- u1м@@Y}C>Geo͒'(v"~4w&(.]{)Q㑩tViD 6m$ gWq o:q-ιAK?kU:{V s U.x Jr^Reأ3 ]-hB`UҠE, QIezsd֓^lN<'gG45b dV5 2zE|Di4~ň{h].̂\z]LfR@A5A6,F+ݦ&nm$m;t mu}xG*}Ycm0͈JS}H7ðwP"gF-Hދ;GOtVtź3-Kǖ *h]YkO&q>'icayj&s #,'m%0%`ȣj?W.CeC7Ӝ&y؜}xJ2w+6o=1$ȸKxbNcq [̑? wxs)XqJ齙, 1a&PVuA%}oGds@ A賺S˿€)Z.`aR F M' XFn4^,2O[-X}djmG"0qj§ n~ԓ +;tז'aDshfzg+aa9BpǔI&CZ4K50;׳[_HyL$ٙ* 'IY-Yu{l|.ȸ/r]N'iU `8L]B7 "._=~*ُw?[0UP:K~ؚ%N pN_K`ĕ/$?]n2nKg4vz#1bW`+aw1?ɐzuy!ZXR_o+eFN\}5*?sDS1n Cvkgb_a%|+,e~1rϺ߽aSy,cp8 mAbR *Q3p"HW(]f\_fq xtyaͦֈ C)Q̯?soɺ 8n ,J~M栠(#W}.=QY 2FMyKӲ̘НYY |e#!os4t$-om) 0VNW۲w2#JEOYv[+oeQb?knǢa&qOv-rhNQ`٭ġ&s=;t9P>~cNF Ba kf% B@ݢ|pV"Ybl+FBDo"h ϥ2Jk;t;^HJr ˢ\.7=)keX]7]T;\ f9FI3 xDLenؙ;B+hZ ?ꨟZMcPgJ"i,]U;y=WN*?mX< 6sA ;2VK5˰YSTW5"PpSa4W0"@))kb1HԠptOR}tJsHIՒi8Ax'Il|C ('(.ir~ [g仳5,ʥL~r^P5Ws\58}Eo{ zIRŁӜ혖tK qeH &,>{©LrږbHQMr^i |kҺ,4PsR(S;m  #F7Cũ_#v`Xyeo`}.ЗÀuHb]Oӏ!ٌ4*l4tjO=e[P*\'W%~Y=V38/=4G|2 %WK?,Jfӡ&W֤gɋ 8!$cbKӯQuݸ3j PUz7JCgdM#%y?tH5 Ģo0W{kq#$ V C%@0"~\+ ?FAق,(='px?Zo;J]o VZ A˾r2,o:@-z.A`,c% ݛw|=Ιjw@N="qfy4R [$ D6%úNv~䨶Ajkn880iڇuyxw則CuGg VwvnMaw"u,}lњwǦGeI8E/ib?*-wDCV?v94BW]u$^w)CYиLNF/ZV0K?S[%2s2iGkuӾR1l%7Wz*zbQ#zB\,齡.>;]Il4Q*M[YӀ|M3Sms2K= P?^=!>޽R&qs6@N7x1(Yo]+n,4hŤ .\lP|Ԭ5)z\3L& >X35lT_Gq{ڑYJc@Lt7r5DLwv֛}NX Ik~A-GImgrܠ|0`~eR*ځr}AM nϴק4İF0$21UNYTQܖw,PkO[#[zaDKq$wHꀮW?jʗuSv2u}7'H* :l[I]C}Μ~Ov 0K!#{GVe$3  Ɲ2F\}EXjyF 6?^{Ff؈wIʡ{>Z.og@OufBSNK8A7wdߥRr@Ѯihe'Ҏfwu f_"x`W9Qiؑg̩Ղ|i\ZhX[XId٬ET%j2 iHGb #DF|; ʱbJl6=`.mzIӓ/ø|Fz  1<¥d<׊qղ(rwM[nCĖ$~3O9lKIU#!SG4m:Hc\7`5ۮY?Hu|nnfdMH7P?#~+c{eL>dۓn `OXi|R߳NX iaN?4+XTq5O-+b$Rieb {km|KX R͒ 3R)9;8<(,LȞџv< RbkL$\skr_-9RFK: iS0 J0ciN|6C"IbN#l|/q3g7@򱁵CSj<9 Tgg j #|C-,1muyp_k%U.ƶ A lQu oOedSX^' SzLf܂7 *u#:9fIY~ɦ˲3n"vo X1LEOָkyh /"*~h,ߓ+TӘp1dCׅ3 #dc|tz`8܁ AG\o}*ޟЕӹiG!_n뭿(g`}ŗ1Pi7);Ed(3vX<ڤ/Xy}x ͼAZ墂:C 5jcyu.]$ŷ ԉ4V4[|Tɉl ;.1K @i rաcCQ}헓TK.C*+;Zqu;K]"xE5@3?Aš*0249If6= I81 !DFL]V[/m8QlEIu$B\L\'Wrfsl%K1x Α[*ޖO7WaGVcn7(c+^GӍ7"BL.C27x8AB\H+y Q9xϱ>@HTJ ʱ܄hIK2Ћ` ,Mf޶̧!{PONsLkdG M0LI_ReU CRYQCL=̞)9<;|0+HT PR4M`Q^4\R2&fՀ5N/'Yvuؐ%h7ھ;Û(/ 3ak~kRE P͗&J[XP2 0I6 Kez!AmE,beV=3q[ /ET4GjUAtz?c[0i-(qwTy@9 /3V-s8\2Hy+DS-ݡ (;02&恶И%j[J`h(U>y tEto^#6~QRqOͼOWi[8Zp%Hp3i~zئD q P'^[N>҂ΟݕJƓ̫{0P1{;ݵpq*FɃY(,5ZbyNQŁY:W6T80A|?&&^8p+^ZErONnAԮnO>J \VB Mtob)^por!ӎbObZ?_?_SzϜphBՍ @?uK<7;bߒ7WA5Tm kYsn~NS3~(KOD3ȒWef1Siऻvᝫ3bSչY϶ Î ξSf<]&~>bU 2ω{S1^ڡ'|x:@[t}(|Uqc,dߕQ| XHn7Ob9eW 1oBn13_^ݢUF;ȞGEv iăە?1y~O \qiU҃S7|ȝ G<4hΑWeCY1.Q\P,VDKb,9+I=x V(#*"hSdg>|̂ ( sؐAzUҷ2iC\'UBZq;1T eP؃u[1>c>*s/3;W;c3=`bΎ0;Y%Fl$8i{ MH{sxޘЍDk,CW leС;ܑVz@( )Gf?:q4ި$[w۔Ux /ٜJF* ϳT?wPGط!)n,i94kcLI4)s-r~9ukn>XgGhM}!sgc)?o~!(3/o"Ry.|PR0j ݂[i^hQ&= ڒ}逋{Pd 'R$Ę!P1hTAa\=SxRa݊p`tC { Y-vr.Ρ#)GR&yk]Fo4QYIGPG?jF Lfb☚" 5y*=uK?V;5h&;Vj]b0\0'WS[ܨ1g~ իŰ/^##‹LxV'`ϲۘݯG쇵jnrC||e9R헨X))z5NQ[_T `J~.UChܻ: D@؁FV&\QV_ܰF A=؞$ a贶7l;ֳ0m*nLaO%fS~( B<WM e{#(Y0ɻ@Ѿz=MX J$ԝDD'H4]* pXW((-[En^0dy/| $C4L] XߘFwr8k?-c:p*vu~RjDv9*GU[jԀ6cz/=?K J:^-BtH ,lb"{n9ʌA%ZA@͉ b1dBs37IՂd\ ԲKqn8 9LȘ?5 ("Q.<DŽj{ z! \ug2bK׿v-<2O׫5W+ V tI#eڦ"S!+m=}^}P?TLu9ϝ pC]!YZMku zt34ǁE9rwP袀Hω"Ğ,ѩ o(/.V uB NSzgxIx&Ue' Pt[lT7+qB8,A$/yȹ)Dx-o]stMيUQ `Fx"wR7d{P👑 2gB{^;|Rq~i&?P&C'id[O5|>Z?Ƴ,Ǻ"XoNO\f&IiCpv Lp} vmib1/' w>ֆ?k\Tmu"@%x ɲ%s") dX6Iv79} >0EOX[;h⢁'x۟5J>,D9ZG7-䡝(\Zt2#so"q?o|gU!6 ? '(cJZJ#llH_#YEzT2'NH}v"C(2[B(kO9ԀEEF\d1^@*ÆV ^-,YKJp̷PNխ#aDW+'^O*|~1eՄAvspnf"(ܭR,({;|q\?0ifj:%`q͛b %( 52?Cww܈!Gek"%nF ^(ϜsOLOS%i+R Noab=k0!-oo*a>8+Gbv&].j!bQJ78@ŷ(MOǍhVHH.@QEiTR701pC_3r?+Fp_\p_f-M4cioXR(~KL4 9SW<@ġgJHdb[Hj?샦=x(F.KR@yAuIwRme 1T򦬦Sf3xEIH PS¿(\!}:ia/ȳh!Y:l%$=[7b8q8ݛ_ 5g꟝t:jP%W0 ;b>5^V:3`*B%~tqŃ ?`^h\)NX b>+WtSwSVhE;y4f۔Q[ ?Y˜^8wI]C'bjtnj o<\#2YC88B>0PShAhcq^ LDS8Pk77)"a넌JN0@5XBx3v.~>V$wjtoG[=j 2aG2 MSܙ~CJh_kacȾ熨Y! A8[ĝŞ3z/ ̛(3uvIS0⩑j7VK:0DO9w62W%* (tY㇎d0ڭl^^K-XQYvd77QQ׌ALn>&%9+'⏻/J+]!ߠq Qeje-N\XjLtͩa{F%J6|i3SѐVa`%+@n%o2Qpթ$Dlm̏n;e;Jc8;]GK˷x@ODmXHG }/:s$gW56uQp}샬ZڜL4l2i|Qw+2%HcEK/`6z \GO"RECҠ!:FUyuCVmpn>1`ke/'׳s-u6 u |%$Mf`ZXz [cwR_,s#RR"G2#BUB*;W.C]Izh\Gؒ/YpKA]}fIXcġ#>ӌԯp*%Īӹb&OHxSTڿj2-_ԎpPT6xNL8"hb$LT(n7\u[ikRJ>xO'bmd5tplSS˱695MZU N>ysݞɊHV8})f?9[ 薉j TvHf<݁(z">,| [SyfrgR|!Ckbg "ltj;CEP#fx#IZb?m' D*`*zC$ͭTk j'ٻU7!QsNΩp-IڱvҎJl(2#R粒YEb|*ADYQ;Cz$ *@ ^"ٲ lr 7x|3ah4Ҝ2@ a<NQinmAT5ZPT57*|gd36TяT&QZ6ױu7U ;(Ƣ/sn8;9RRmuBqc P@1'}rKZʯ `YxJiԌsX-wZc]"ffXypDgo ~%My( ͢坷kU$uB罒=DZu!1=.{x T1QBwr E zq7^NÝZf)%S5W s(0U/g$*U%[4W\w;uSN]B1rs*m3kd =Eu\i'! RLfJ`l`*xR7:{Vtm!&FflJiOXH{BX4+*6b"rdo:&U< d,I&w{m<#:b. DqZG0ֺfW="0忟aػ=sn(ep8LT9vOX>l6dA4RC Q B7i@{}U pM> QqS'+jsԺCEzP85y xe?65}vCpTE/>NQ c#2BO/r7mS>\Ë -b2!)aڂ\Ι~Fv+,=/:n5cŠ-eW'KU!ub>ze5omJz:az.xWR@O}Tp*'E.$&g K 66n~cɴx} ?0zwa ^}G͚+' @qpm.Bg-wyg^tQPv{},Xgr!˕SK9\S:D&ffS>i™uւqݶ,וxjܶ ("s0aVnu`\/ZIx7RS %agy=I+J>Ӗc ]cLZ>,1TRwg #lp7:h֤=ذҪuIZA/+|*YlWy:EQ K l-aL%)"~#͝o~:d ٘+?W˟9SHmlmbUE ;AC,C|Gw,0gttiH-G{}3=P9rĻQ~;g%F$ /t~]5g}\|u澻mD"$ *Qv-IsN4- pR OYi_E bH߼yrm4+2{B3baGT jcHE2q'8)*{gKY'  QлR;X]"QOq.=OGt4 ] _]ȱhc[ ]s<{4tT^<GwR_uxøvx?X|F7nH8Vl^4L`GlehK;h5)K$"YK%g٦2 3MKpȀIygjn뚃&Leb[P&vYšI`7B6P 85Dsi\Q IS"}|X? -v!#^U 81R7<%Z)^A{ycˑK W!]9H$_ T?8A7Y٤:|"fqBo4&W+AS汉a@!qCp]]Dmz1Y.k.T<-žk rp$( Qa^j"qgЈe^~NSBM7j/)sdNCJ݁KII ,{o=ʝ?`B uS+P ĉ@c3uP<&>M?6Ψk4^ʱ w6YVVZ;:,S,Aam$/ ]Hs#]Ef.|M1P)Uފ>J^č_XraY:&+94]OxR%`CDbuR?/9q9_od.؟ѼX}U`z?lԇj`ϰdoJ.z/ {kKٕfNxGao觮#֩|ٷm^ҡeB`^kfR2rԲQΰ׳>?; .tݽISWべp-@{:%cW.m_H'=u,6qX08p|mo:e[@t\__ţMlO9JQ%ֈ0(MS<Lϯئc$Ma!{*J;e#F{p,qgO+4y4s-+7c2jNQT62Qw4lzNp#gy E}PͧrFNڂl4Oqb)ٝ)"eݕdrUQϔX )) Z2CT~:W['߻ёgu' Bɲ"uD.H~;&RP-s,b_ENjq ]. L.Nlou]Buw(f/{-vsXK;}9nޝ!v1nTVUHb0"8O6'y\Z D깦FfGJ+y}x֋̻ݽ͍ :SlQTQKV_~ṄdC Gn>[(%ہ 7B <<,۹5dD{ yX ֒rTm]4'GMyF0Iƹ@ 'W@21o4؍d/ު׵??KSE~_kRAF:̔(*wGxUPr. Wuq$TTc-y85(.eِiek #.O-yJiuxkJhuBOpHe'fy#c?%*['fk>2Y4A-&_f-LY6`-c:o:/JTZ밃YS4$U۬=\ hww>zDR7핍F߱fڰ>~rݴ=-Ș+4/,!m,B'Psi[mC2BG Ie X^txpݼ 7Z ~թ#Ř#0B~{/sESHoŞW& 4g.!OSzA#s8pl= K {lA:Z{U&\:v)0f~mgBV+BXK dioSVm N4׌8;[J"?P*esPVNy;6Pn*gPE+M`HQ#ό&@5[ #k}= Q+{\??EۅȻQ~wnt+R 7blm}0\4Rb)nIr_BSGua8]ia 3'=oNC_`탡svbMcXbz] `uH]̈Y6ihpfuNJ;p=cH(681_wW"L; ^ W G%շÔ҂ [/NX kCvt#hCebFO> wp>?6 =N@~c i2}zt=4w=2zZYZŅ|^:2}IE(Q"SBqbQ*"Jwe!-?At Q{>% #^ХE2ׂPzy=r nzm{yb&ʠ|Ӯe,R/h;O243:A*J8LnAJcDk/bD1}DPH= FZo2@LZ1Ň6,xwWF&撌S%wp5CmLS"MeMh⧐OIt>xGrš:YҸDJbctxI=\Zx,+ 8@mտ {Ew"*^g-Fw?x.s:^rM͒~) _kn'Fpy&-zAV+`K$`O8g /X k?ȄiPLmNYu%ٜ.3$H9F0a51MOqYeΑ.;% wtYAr75v!Mf83.̶e< Jn~ۓ&HO$<<4#vmc> 0ݷ/Ch|iBX2wR̸#T9y=J_I l䙲O*?l~/CoʱKRF=kř#R b]#[?,An+Yo{YTD2*C7@W\^T"/Cǯ!~T.0=gzilQb)]1Aeڊ5H @f].؞Zlч Ue]; q+/n '7jҾ>A \0ki+'>9wy2P[?waqBJt2=ǚsG7>O՝h94 =x6] Dh!U5}kl@LY`&a&$N!|< t;V 2\6}βbM_UUV`7cT&\m. Cn5XzIi[8yaF`|6]qTpi.C3Հ@U}/_Ms:ZqlϚgbIx1!o|C;F#z O)9 UrNōK5MKu<\$#ՑnL-7%G} 'B 2=ʬ󀠨p ]δ`<37S[3Wsid 1߸M-w|MXnxXNq`VJ7gpt2qhYdv% bzq ûc0,!hWWJ!HԪ9.(u᜵P!I|c!r2+\է4!4CptgYG\io ҙ{.XB4}^h<. ZbsF%CiZhUԎe^+xV,Iа]ҐʦceM}jBð;2/~N",(sK|u StՆu.'EӅTR3yCyx,P AFC\g WR9ܕyk[_)k)gzx N<^t~ڋhz՝?p'Ym$o|P2GFtѨT,*a)aUѸ|zG`QvXiaa|3қ NC!C"EG +mpSR 4(7Mxܛ!Jf< $!'ĴVxA6GE?:/~ҍG4,@M$鈩2_8"jxCwfr`9K@[y>Ȗn,q\q,oM]$yG7+jj,D(S4L:bX ADeY <̹ەd<%+ș;ayZg~uQ'E 8y T2t M ~/_O=U9@~$$w]|C^TRn7r sùϣSQ>(cd&߮69Xj <׏(<ۘenJ ;' ĩ=M|$itq;؈R8=Yv -@s\6B$⯸ΛhW!< r%:!N2.,a V2qkZR@5b[hjk:X@=x8 >2*vB+#Q.耭uh#ll~FX/5k|?<2]tc\ ;gmP -vv8iJUU$X՞@q ᛙ޷mr; 29}}\R Dwt6zv䓩E~It͙sbi ϡoNkxHߋ_zUSB?"l%1ç^ q#S$HGO-'u8vcm,`W_(e&#tuX!C1nj3!p};+C7hPBb8 La]n91 }"a pZo5 :R{hJnr7K,\ UL؏H\5_F=r r*m6 LzZ8U iPz.Kn!7?Ws. P 2f/h?BmX|NJHd&Q!T(Yskpq14ys[[Ј$fyKƁd\3whflE;T|F?W,%6]Ux ]S+7cR|3\3Ÿ?sԅJڀ/ m V@lk\2&vJZr犰itb9xԄ NeD-,qP7J*DGU{ĩ7=2WyXp;/W⠟h$CL4Kˑ,`=7Ouzu\+U/CNHpxm_AkZ|1{Ⓣ:0\X:|.zcށT@1ZC!6[I0-[R@AeܰtqۈY ftBl#WyaC_Q^VRXÂTdq`c2VL]p""Dpġ3i3}a\r[So:`Z|3w1ۢ6TgZ.hPhޝY,ehoqɌ̺:LЙ5*V *&Q^7y;j4ŦԈuz4"/#u KH j_ŒVukZh:CTM5ثjDt /=lfde^>4\k -Ð+[rqv Šte݉=_ +N2t FI Î~'s&Vm oF 㕕qΙ ^1\wWN5(r9< h͖"rdY7Kt˧ M*kxh˞ K:MUϖ2̂1"ڒOw( w=ÙaMjޟeI`rlS<&#LANu46[mG\@@O$i^CR3w\q aD6il>V\ww>1J,Rsb4su<%&dA&Zn$$!LI(F@UdBkh4mA{CYnǫH~Vd;PT]-~``ºb_&W`#:ǴZpX$Kl; x}‘|g8F^R$׵1N &ۥE X|U]r,Z^<tؕ'[V$+&Zi8. .¶wE~C%8{MWB؝Բl65/) 4`Bjѣ~ϳ'I(FI˺{@h0ˍ. ѩZX ;&\$g tpиJņZKoziVTf,1س 37e>;/t?S2WNrG=dz4DXЍѺ"Cj}幽KCb ;W`=ijP?= #,lk |B%~GX̧*+ 2N4udݓYXך(Y(N!JQ}ekc[d`k\1ᨲi H$=O#|hE/ZM?D%kǛiTPŏHJ#+CB y DԏACJ6W ic[(5HfA8ij,~1uʧu&r3]D9;C;ۛD|'_lRˢYG u|ύ `*W*O%qͮ"=m.s\MaVVw3<'˂IB⌝0wT^ u诩Jؔ8p=^nՊ][Q@z.=6Q('Py8jL `vH!]n`[(MJ;c :2:+ebFŽC7ЗhU+}!*QN.JeOCDq={P)r0 [Y"}pϛF]Nh[U|z0}!]zݮ!+>hu[4'WT,{+|y- ѱ=X5 pdѯyEeTHf  V0ẈUj` qjqaEM>5i 3.uy@ cv)YˋZ l9bb in? Ixƙ;GE|56 !80D8x#^p򊾩w+{82wi{31=UV~86{2=ayp7Jd"1?U @Bq#~OµsGX>_B(}[V:or|4=҃U뭨 @c]V*ؒ2<]U OanE3a#/&,I. p]]C#ĸ :2oDb1=48ԔMcrS{c4Tu%dPЅ6s^B$ѫA rHB?v8^fS; B: ~>:3I\9c`-cN}$˕X !9w*g qR,~ڄÐ"X36g51umOMspEyL&p?+u vA#!?G j!W8_r(*/ۖ#`ӶFai+ 9J ފ:GpÞ㏸  fKKl j^yqIf[ޛ G@Qp,%=ysr$BG;8=Bl{`nmLʗNja`Y *usA*l4vsl7 ݫ.,_0cRC]Vb ߃赇Wٰ%| `EmT6f*r^}&,ˋ+,^!7Nj:eUBϤ 4 $l\-nK3~E1x*fl)`s7YḘri:ȧ ! P GI2vb2;PԊ"MeWFpXԍx8Nf<W"wԄKm:m Tznc wVt$Zicu6]Y4e  uTq8xT rvKnQ(Y,0[[_Q9 h^᳛.c384]` T8|cS\, nV/hVw/2Ǚa#pIVeܒJoS$(Eo'JIz{bʤɹM{76n,A%Vw9 ސO=eW`bi[Jjt^}I (gۼ{r0gd될P` 'mYՍsȨ(zrQǛϡQmƫu'N2(_a3`D)|x!د| *p zmX?A6t.d/1 LJ8<歳 n=/V1x'KU$v_~6< W%@~i=Gr',UK;X eN[CO{ӎmCTz\-ђ ~wThDJ*%Y&وRb,_Cd@C.j[[4.Ҏ2c,<"BhIPcJ*f 3As2"43VHByvK.tʳvVa' SqBh+Kr3m E(]AAj0/5J:&7XԡkwEa'YJrôuwdM֦*U8w' TU$'$>78.u؂҂&:;', Pz%fjrKZ(}LW7t,M\Y~`RFͼQ#+}?:tLՇ?T'\t="m_?[bmk4Wn+g!|5O+wKwPf\)>{Ob>Mj2hUuL`4Yd<ݻR ,G}VbX%/ ;ѶQO l)4icSyASH:feUojV{E(a#(:.ҁʼn+Қ .j2C8Be];-$ȣNB] <U d+n_1J|"o ;'  C[ZLZ1OMX$I!K_USDc97A~CUEGtk2>{N?,tDyTHD>kֆBhW@xVy ފ ,&0Tirb Psu!zG%(~I#=, ,s@CD-g'+Z ĀPg>_#L/R/_$UG {U\j"Nř&UT.}ψVCF\RCeQڠ:(QY[}:ȓcIY~6Δ*Ի)u_dUNq~LWHJ_`)VX(":K9脖# 6  q=ω/y-xŷ_A-,0j#OJy#`C/V.ַ5n2vs濢^ CIPnnD:vVyOu$+(bw w,N[J%?6"*U>9IZ*da[o0ՍJr%x/*BvD8Ej=Pc@|cWdRG83(r=)]c{v6T]=v e]ӛL{  =Xm ״Ry, E|8bB)lkv7t/:#UVa4|O\%Se0!gW2[ 95ąt2V&A(u(fcſYK,͜C ] Xa.Ah0~?fr~bbZ,UI[ek#w:esw|)Ua aBl20aZe0z&~f]X ׭% z.*M;9$'ҟiTQL[(Щ BEI;[N|{L+i%{.3 CπaW/<IȮUnl"vשRލFI=v wr9Pߋyrx43Jnlu@uQe|:.;}?|,hr{ &Reg< ՗H~y"PNBE|K+nqk$"N@2kB L[$;!-3)8TմE)3OŷS -VꅰM(6p!lU$j?tlIzVN/&"z亭g6PL :?/Ό2J=Ex&{ ;9cSL**uP6]EmtZ}D6: rEN*|J~4*`YՙoW&J2;)M;i֎gK:u6E'N= z\߻??YeHCvQ1(-s]K Q =g$\ V}־%{M@,)AДh%{>.0^t܁OK @$J8We­h@Zy٪ed0 Wؘ><y` ~[ͺO;W/x]{RGK]oĠ? eJB}iwM/tx!j&.lJ<p}Gb:x!"-V;#kc׮26'xt7@ߴ@4hi~'w-lo"zԸOM02.*QsLrx{z #JLƻEz'pb?|*\BA+9ܐA;]F6 ]]aJYW8u' ܣbIp#DiF\Ya[}JݻRG.yZ x?pMÔZ e.M# 'a7"${1A-aFaWՀӄ_Fvʽ0pX<ʣ5UVcd8d|/ r7I칏(4tI ޽ kրYFJԸj#;$ӆڗ1qpfe[ao)kTgJgAHޣi7F [J`$ͭ}.>Y"AB-1F0q85BlU,nZ^Xe~G8]-Iyjk)л.ٻ&yi fxcz4b"b#&}NJF\ hKqmߪǿ ue& 'u[m % =FUq,I g&H]߹5FȱЬ_e ?\@%ͽd2f,Şv8wQOl]Dn򃯰ִ0cQ7ukIy}4 ,TAa]y_?rL~CXpvy=3R;9ܭ2t __/׆FWA0m!Q6`jLX&2."(%$%RY2A^M"50ܤ[U)ac_L|cd+A_}0nRbޑOmu{8,(}qBB:^~+란"Q̐ 9*V, EEƉ]kYÈiI_ xsqwn9Vcе`c͎jdz>WbΆ׾܋Ox$y/*?Pdr|!C<ʴCYZZs8״%qG zwa?2J@&J(xη!rds-hA3Tz$@ UL~8&ǯSaѿ˾`` `vH}|Z$diѳfCɀ2JeW9~]ې^1S,x yP]M~֗:>sS~|[U$pvzW+ԣgV3YLU/^3`@9,YodD5^!'2 FA hڨM*+ALD%~"ݣ;FҤt+.M2]kyvV@3np폆ց 9pSeV=1߲rOM7hQlb%#4ǿȟޅ >hbb8 CWoqomi!yϪ^%6>(5sC)cDuTE,]CDzvQuxct%t+q\4;Zw?wAWמڂ 5[mRfn\\!}=CnvZ qQP)w7dcd㔪’[d1@S"Kk~q/t~xy$SghZ;[E#r!j'nԦ'L,if.y nOBiS&/q|FxXde_2eJ$D:5b1/zzqf^}AiΧYQW]ZCߋGN\;c3F"C(74(!6b{:^e:73U'SK] )Ϥ,,3:]L^|yA^  ,k6MRm蛽2L(+ |] xr7 7v/AsZ3JDw|lщ,[>k$ >k?q"[뇤?H |"#!h"hm:)>_YbKČWL:4qw͂R <_<..y@Tg> (Ϊ?^ފy\d&׃ tVgԝx/T 8dy̍s8C RHP 8}TIkZ !9hފUrdYny w_zǎ*87T)QBZ5''gX Hs0\]k)m)*;S`ӣ=&x{>捚Cp\Lf1tUm\.@9 Uqnn%鋪șj:ӈQ4$fkcefcv&YO^xD0 %l]*Jhl;M+Pq:24$Pobg/!~s$4+yR5ю˳"DŽKʫV*@HM bdBđE$3#&"WgQ .?ԙVeMFfDc9hznOLQjmD'fCqq ,CXj"r ?fhk9b*٘dc|7p}׫QDZj6Q*2 Q}m*hg߼aZ` 1w$8ה?LH/ SP LHI?4/1 ^O9Uul9[_3TʈSƬko!1R`7ŗҮvxk<1d}0l.oLepݸM{HϊrV83|_E޵CRsϭRJ̸. 5nNYck'Qȁ̤E2/DV(ad#Yf |hod^$ɲ*?uC,95Cư;@POPҗt 2'f0J 3^YXJ,@~- _Ŀ_ Z9~;- _>ID~AIM0~L-~aR:u(>"hqBؙF޹;A4SvXyv~!©^zh8쇊"J bZnbLٷ z)a|d`6ĈfΨU=pQB?_"q ( u1k68+$.ϤyU&ԝ؜O^/X)N8my!^R\, i,qu6ɻO\N WPvg38n2|CߒanI,qoT G'ċUL@u])pMۼQhZu(v<,Pڄ0-z_uSR=xI*$ x+j"9FPi=[r6ܠiqbieyѤLk~aYjԔa7-C8U?@w/km <,7D征if" 2ۉgŁڑ7ΙaR#.=" qM3VMpeΫ8eΕhֻ0 KA n4WF$KŊ(#Lr^+`6LdY-ctks s4\q*]bR}7!ӈ0•wG1z6-)iƐ*v7tq@4;\I X?4UfMg!;AELD8tPE|ௐu鲵\q?D0=A;nBm1|}IZ2*`ߦ ~Ov #ȹSO|:nuN֊+|[L690'T% ya* ?o: %Ioie䯟n} եi QPn&%\~ҭb<`e(ȀL|̀TvH%&ڐܾQ\IaJCGw,͈S+Ijn~|L&&Ǘ',#V @~@ xG+"oB_“)r &NV 72fzxQE2R |\z3YOhYqYO]^<5?pxMF`D8;7n| I= w -7/M~ 7/vufp5SV7 Qˉ!\A&sJP{vmLD3 RX0bed=Ea@(!u^Yk˅k:6'T6L`"V ،p*)OG|&茍TH~@Jǽiuown<~Z> !Į~K 5_+96A$bD<{Wp6Euh1R2Me%3R eNlSڋ@#k81@h3L@Duqdcpi+8:c4J뎲 _t>~ܿI (9CX%* beX&B0"|BL赢 $D)VޞPϱ:?VޛHų fO)l_?'beaGɀwGӂgC#g.fSE&6e]g9=($dr2&F^J:Z-zoZ8Np85G썧QjOe(/.Wp!-}֑E>>O@ "t{4꛹[\Vo"ׄD*Bpif&bP)@/4TC91;W>LFä=ajQg$FxxY&[Tʥ՗4$ןN \$g aOM}HyV=6'υ|Z}!QAV~UGdS$O{68Y%-1dA}ȦnG9\?dR P+c)LSĞ5{uޥ֕{HU+-řyw>|3Oזtjh97qB=Y l;Ej~I:-,.FwƲGEH9d1F ]3bz+ߞǑ xF:Dm -NFܿWU/LY8|kE''uV@©'=]4·`g߳O&#CS;u 2%9eDi~n=XB_^SuvC,9J:JyY*zv/j'mn?7B*/B&ov<ؗۡY vvV!Gv|=g0.~?Ŷz[FD#G HJ39h!m*ԝ8٥rKA&p{ [oidYy@GҍƋңF<@wAmmRM_ދh֘5E V?9Kvrij*{PDgab'i:}IHrF#T9.dƁápZWȻa1Xz#c^,-w*ܯC|}E0Š6f Ɵ^T 2Mr+~96p3VM8>sD+u8r9fNtɑЋY̺K-TE }3"f$`ڇqxN6dB5NF/ˤt='q8 6fKe\P("Oq4Nh^К v -9a!jvYjEb;,f;w~PO7`g[]DzIEUl]a[nEf;>EYkR OO9GS2$fjY(`'VM MWcgjzvTVUΧhPPFԒsRY_|!ʎZv(!g\IpOO# M ޱH+vr P{!WX6ԡ!N_yT,WWbFrd˱dLwbΫF={Ip=l&>*JBi(6ŏ^Q="f aF.E "F&ÞT Ly$i|5uJ ̱de9&L'Se]jl/-)1*\U˻݌FSWGxI_}HWܾc;gsIjLc/?$'wfbGkk&#h3X=%CX!*|F6 m dF ߒ9ђ ItRX~@̚,:9ŶqA>Gײ!iGy(Jsp\ZؑV#Ū 7#4d"ʬ٤TC,]Gh|ZυVy 7A[iz1{ +1=,cS*I`Mqb~MK-=I /"+ BX*iܪ]'M 9)ƈ#sWDFg[eDEp0.%t ϓt'Ԍ/b/Έydƥ#ԁ;-a"=u&ʚBKAQ%9ͷk{iRN:]w1oE$ԹqccB9ʺ_q&d4x1˷Bw`++^'3U7e]Nr a۟FrSQJ5}YZ5L&{#V]ibYJYKSV2,fX w\CiQગ9^ױ[8\g8ޤkAШ0t)[EPt[D(BfT$n֕ѬAG+P B&@CDNtrÖȏ}I7fs 1V =bЪe !<6U;ЀoݫZD!< Q"V0JhfA,~t[rʘr=-L/JʭNj\w9|$۝/m^Ȓ}mɬ'Qd{ zTka %*2 'hqmOA[Oa>Yg V>+>(BYVHy0yfr9`JYVw y[Y,k֎dpV}BKI{ [ŀ -N:%1CtVnP>S]HPVZT,{izmo}ԕSVP(WKX:iJ"#>>yЋ[xȜ@n^bYؿwpyVxcIjF_Tv_TUJr7"|@ce/i^":xxZʰ_m0=/^#k!\7oBoN.yc;7:Xa1U(A@te/'#iiE< HLYN}!_Gf:):6upro@X$" ׷A'>fI-6{^o3\x3; 5C*Z;muU7|}2DoGX(@ 74 ^8%u薋'͈VFB3Â)rE9 ֞^ٙ^@[x`/Nͣ!8uzU'lYrg)1T5%dt nyem6%[4LB".O7Y6"KCghXnq~v54?9y/k9ŮHOu1 ߾u԰㜌Ә `DIsޑA$z7Pf/k" T iIy#% m+b3twڽ>sȺGᦲI`Uqeu&!>ucja-+e5k2y'cLLb+يؚG«hiB,KpV|ƁHaV~l$mm$ 5USp3і ѡBK'#j2X21(&ZMRt95CRHe&~Cyc5X\2/wryp2 -b!@$CeћiO\2]hLa?*^=^6mJWOA.}|2ߨ#"·vgZyG#ꍧ? eL馕b1W$G'r7';yG_U5hDhwd(Q$7/P}U5X_4wM@x*1בПmYIoހ두 UH 3'yWA9TPweJt6Pב$ECf Ly] 'e85sBa-o|eZ#K+!AV9`ԩw͗13ieaռ9Ee_,}\6{ GPƢ /*^?P{rtIyCcge:Jo+Jo>qo8 dz`X|og$8j*q1l;=x+%);;S;[B712զWS|[1x{CsxdJ_H$7tUg_:FZP=ZNa)s zEyeq|%>ܳA-ʊk4"fO2ȱDCvH(|;n|'p&E3Iѷ~]अ (.(RʔINm%7@GeIv=^@ kR5b/nxԀCnR8$,g6MXA`^Qj7 vH](71>nK^R@\{Z r{&MFrvbePF 5>41K?ശKez[,>4c-upxGz{nA> ?mS MΘ:ɒJrVDr YR^~me|C=@ j9YLL9s9xq%ʈ(%\Аz/AK ez󝐎HƤI Hj*PK۫>5= ,fۡ8ciNqUI|}] 6~Ӵ*LEހ^'FB`Gt2S`V,{)N4:ϲ˞blgXaOΉ/Vpft\V6+|ÑkQ:ՇD: i{Lw <.pӅ9GsHvl9E8"˂Ȟ{S"r#]yYV 8;Gj HDG'ސ24aQħ6 UGN"N4-Tl^ z'&IzDQYMrwʪN&Rl ˹g,˳4}_JQFAk3>B5|3cj[} r]EIfc%{pC9KIDF%!=O4im̭Vo1O埪3 tJCCǢ V'nPٱ+u c+ܕɁSxE?GqA{<9m8&P,-)z"bOߌtQ6z| 3$gl+`{fk HV|WI0Q8Ԅ{/smvi|kD7rP]*m˜SF@cQa? :-g] `ۨ.juN"=pB@Z8]8z FQn>U*$l_lEtyܛPKŨ2PYœeSz{ F4r5Hj<]l竛jtྴ)ɖoA;pAJ4; thh*2p s{Nu8@SCX#1t9Pd)GUb{(ï^8u5" sn$}f;$4j)ٱD A=13X{5YQ0}<\;U|x)丈(~#;yn?1k]9DKVc,̯o )_֕|N,b]ϬZ-1THL ]n_}UPӧMarT@~J i%8t?6hｦ @ld&H@`Yq*ޛ9PJiRmΖ :ӑvp7;+K{l}sP[5Yz9F+ ;pfrڎMHIM0gU'+ҩ=*;\ T"?# ҈'\ ;.>-毦ij`cY#k~$>l"$qCv,_BoI! V.PYb`>j( |_,3Vt@Ge0܌h)[c0 Kdh&[}sY5e+gz(vzH 7}j+Ϻr;JN$s{ۑX!N"dYwfnyޠRaу#/>Nv4HY|f?1ɜ>J|.J_*{p Kv !2xF2dR}N}i;iQz0}rЎjiR Oe;V? ycūFr(aSLB W]bVM##յ)Tu`WGtLǏPC* {Lrch"AMfufqTIVEf2'7н5r”lc3!| sCܻG-!Ίm'~y\b#G"WfPJ?58J[mO+i!cP _&ںAfjTko\%uCi\q7U(J`yu@^Vk+'μ#zrBkTf`]+"iy[!+H+ ]g<*s|J߾ 9Y_:|C;Οf6U*aOJY>z"B{^d_Nf?w;f'A8B/ /A#B?7RH߶b4G4CzOmcC,.6t,ataRZn+vWM }e2 6"x_/'HxW+`[TFnAWWbB y` /S(y_~4{S!?B1[ sX\TU! @M1_ ^="Bu* !6xpCKmaɁl+Z O=0}n># Ȏ.$>_tr2 )bp]x!«v;$xQ672±[;O܌1d$'`ۈ1NZ rNG Mw7w?lK#/Ί̑sermL<5\"CG@1YLϿXvq&X{PѺ-kW9kZy]0c@CjRi7|%ʨ?΍vurٕ^^#(Ps}uCͷc~@.7e!⎰23?֑spXŞ2+wPq1*?B JIpɗFdA$k iR[}p 1 [*J.%B j42DN?-W8[mL7CJeaRIӛwqfRLR$b!@wSks7yt ͥn~q;TP㾒uQq\H\~NmGQ1Rq\>=iUokN̏:dd?$ה/'i )@Wɖ}tEz̮u7R䔤t!u_#ATZOnG* 7yyع\:<0G*>Ǔ&&BDRijm@᮵\׺qzb>׹đOl\vB' 8!VPc3y,k p?:ʠ`ˬ e7 P hؖAt mWTk2꾍+j3'C9v*#؝ܞfI~#gᢙ(VcwG+?l0nd̂g6zvOMЛgVKo!.Ųg/*|$#MѝdQ[>d!šQs$)碌Cca`SI 50h:. \6ܙVw݃ rU(!+"4ȕvVOĔ~Mix,k=a/Yo&f\י`ptO6 >+>G^ѡL:$F|H<:?iѳpk4; ̍d:,9ruK_ۣCV7L<9k=ŋ+9G~20#1}h{ڣCG@8H:`F넆s.ʦ8?:  ɥԳ%$ѧTaZF%(/]T ۬ MC =l(xjHpeHwh zp*>!k@rebjsGu;E2E =ƻm-[;>H>ijv<~0(>z:[*5evR;^f.IG(v=\Ei|7TvJ8!a,[:693?*P5QbJxP:^.ظB,`&$ݭjļpi;A.i \B|}m4G-zsTbMsV₻w/@N6YAٗ_=Zy 1 JHϏgʦ})݋f++L2#/~^j/~#WU'W=-8d#Կaz"|W?"|t1[F~g2m=xM9_@Јo Mc.j(KemiH&W^g!UE6 EtNL,rX7^10+}J!_Ŋ!o -gG/6J~[n䧑* &XoOR6GOfT!w`V,#_ ޅi=W=ӵ8 *&~zgr,a,VJ18`jOqƙϯ!sqBod/I(fTɄ2y[9Wb4߾Ӗ)Ӡ8 6BPNYqgm&BK<_‰iԎH1V(G{֑\4^MdZ Gv&٫u/,jޅaK= c<5yJZ߸"ZXHd:uL/A/[>/h}l f*H 4Cej( d!_W(әk}E99X#<>D?w co-$HsePd6&dƋ&Fm/U1Y&C Q~40J,A/,lM6A]RizMgLe2,גŵJM!+^8 gIsIrNO@㿟e7An?I4ycg~tk)*5zBz^ss&;+1aŨW{^:]Çd4ϋpy?RK8UW>/anW~7 .S!ĉw {Bͨ#Ouvjfq&8-+@% rb%ػl>:ĭ(=O PcЉG40ۖ7WsR-эrVzFj<Ⱦ׺4ZDkuwBҋ;-8is@EsT_|նi󕵓ag !g-#^QOGRk(+'!:CϸHxK%hO9KEp_QAYG b,GoLƇ2|,s:OGto/LVĨ^Rkͫke.@t R2׌_g:D8>(}:KR7 &2 T! ~o 75`!b$+vRxoÚx#hpQlGK@[ BNXp%Cy [~: |jxe ,9Iw3'mPsCnB [Kܐq_>KIasvv`P+ԄsՈ3DΚ3mF耝-BI;6KלT䱤ZՋl/>k9Ǧ¦ {,ȗP'ncdʓ; T EЭzBz%$n|kt}SX//p ɉ!ΆsGoVI̦ΚyYv>ap}A^ ]Cْ?FR,0H)` ˦b\ȗH r/`+jA4ERbdTi8VsxQdNAʙÍC'GL&6r\el9bsvTYu rV _f@b}IQIPIV,̟h̰EHYaBe?9=%$ʗwzwʃ?$>.o.+NGI@i:I6;AmI LĴnğz};KMQZ 6z\Mb^簖N?>M};CQR0hd'X>˜G:5h!r4QbRek_%}0 j RR6dQ?f%,3Sk\KW a<0dRΪ M%V'h! ˻J1p mn.6)Hx_d (7ٵ.%F,YJ,ǂL']''sz?!"b[!xK &lkAQ>0/dr-!UēCII`O^w$8" 'R'S=s#טhZ?BDW-!B%+ ,/yM<C-Ĵ6NB @g*tm M ϬH'F3)߇7=jV&I= 3D R;fP N`wh鿵ښl-J Li#}3gO7UD*,e-h@3+R#E4s}#>S[.3-.֖fWIf}Tf#0w$S3Rʪ%1J$G@Nq|^WbI)x_DCykNM.9/uABr l^33b%wMz}΃\-BV YU”. g/ IwA lZ p@ w"m͖eP*I1,hvq8tT\Tz\)'C#&'L%N-*kNGQ0A00g^Ȫm^nB pA%lIl{sbTKUF.U.&R >"NJ<9?cnV< tv`|ww׷d}ݏƋ@"GGS"98h폊A X>$J98On-ɼ )8V-f^ߕ mJ=̯^֭gܵ6؃L!YݎgĿt6+qc/hv11͒[+b<>v=jDxHXLC: Pʋ5p<]w'"+sM0כ>3zUP%^Z0 ?Nޒ'JEj?J4mH?X]n|/?A.6pO9"[$c iKyKxP=HF r$6r!iEvIY}x'$L cg\p׬jBuXĢAV޾B천!A6 0{}"c_NCtȠ ؕ,+!QY퉗?Nm&vNr<׵ +V1D{36.xzdXdEÛϣpv@U ٧ViWh8Ցv ("@$\^H1L"-$< c%GvqYƧhB x ȜC`i^0֢+ 3a!cI~r6`MJLP0]$h璸imfZbЇQں~N5#FV KF8 3ޅGȱH)-"l<ToDc%Wa,:ar.t5`[гjͪ˭SA`e%ucEzS;)ly(I>/zZЧoНЈd4;_7̗0xuN`>Q*aꓝVMd_]iS& Av3 kC!NN-McK)1 loݞ2%f c^'LD!I<XSW^4*OKNups];6¸qsZ0{`@R ~&{d+7P:Ȩ%q }qYߍrCGi7~*Ui;YrU-8I|jY0t 5nrVi Na8DX-Nډju(F𘠗̄֋WcFVCyޛ#VSפH2+5}V7@ ;%I­ f;&pGVXu9LJoh"w㝯vi+M" :h2<Df+SYծhIΧEn^/,£JA]%4=_N?GP5H2sNs*:U `Uz+r "jᘖeF\?]:?<+ضv/;Ҍ݇ ICjC8rwH7biGFjȜ_8e@ .Ecv-I G4Z q Gcg7_m=dRȱ0sb#|67$u\E $8‹lXE2ߍ{c2ĀOlv^PX+1LzZq٨&ʶ8c-\ۼ|>H:t?l>ңD;L +" A$ !*zmz˭*ҫ%mȌ$Y Mjpi!tGp p9WT!ۊG ¬Y3[J)VfHXes:*܅S%m-`:l3;yE G_&N%h\'yX5`UARNwϭ @m줶J^o|_Jp%l2U _`>cWI/S O2{a0V9ZW^kP2-f8'-AgW!+< poR35]LIe>Z/ĆhAWMjNИtbEk-J)-~gS~AAhYejzu2b0;Ak" ?Q EO%Ji$lj٧nrg2PpSaT&Ϋ 9AktXBI\/!x6o#JS+MޅQVv!|@끩%a#枭"xFЙL"0ۜ}0c@O 5f垴g +)~ݔivK쮵`NΙMֲ$޶u_IW zy+{m_AZ+܍D).|meĭñ݇ UY{͎=flpޢ`qY*Ûn6#b3H[ Cp?)E-X%zeBH! +•h_ބ3P@R 顛\$2&l (c(eb`5.4d[ftoА-A6w_\ Λ̇UpBsf(k+OY,C ܟzPDZr̅qc3x$g`zp>M:I␺URÞo - jboMdEۋ"Vq:p~E}6X+1M|ei]KH~E`IP(2p9uXfz_G=y94,pM' Z~L@L*PRƠ ;B;B[QPjm'dfpbq.u[N>œϣRjĊ% [n0$\0-bW Kr,> 0mlAs4 RvaaZJC^f|OF DmD^6wAzl(p{A]Phm47 bVðWcn g5uz丟N k08+5Dc^ <9yWM\蹺 x6pGD9Լm,/8VJh{;Y]D{"V^oE&-gCKpJ,zzFVYӎz  z m5pYO 3^7DY~358[uc|bx2=dů<@#eKد#~)^&qzKs/|Asx84}ɦi;em\sss=n>m>NC79'W/s Vs6.D:LWD0Oal>~[#FzhCr<:,Flx3;m#wuIj .I2"RN zG4_؄'cEJu›|أn_?X#?UCgR^/uR ZR] @Zwťזk w61>W/6><Ծ[+:擇do>6֧Z'NgYɀPF[[gliu Zj߸,手5y aV '03l(@s 1)C 'kŤ12(]1: :݉ R[l, q187jmIUKm.)wц<4>́szWJK3HjTl+ug p;Gآ$.=ҽJ.|tm|2"rX[P5k1[ak!QIrdϒ1X4z,pd^R~T^CH/mfϮҥwNǵbDm$k b@$\u& }~CiaeNq&Xp!{F">68m$(#tGG]kB'eTzTw2qL]w$ Y@mx0Ķ8Hx99yC'|nzb:~T;t;@3IdC%n0XV{Ҋ;e[7|Kãߩo)=9u–vW=-UIwb{a>.8ܳW۸&\v4{Eʤrqڢ5y4^ A51FZ # 0E>_omOȁ?j}j>7߭l}Jmh< Alw&|x_]SM`/$LJd;q/@XeA| S@,\,d)u88\OtjF`?ޥ<Ļ* ^{7Zyɿ{_ zM.ͺ7wЬ/O&K#_]Eѝ91VG,{'  z$Hpt|v~u~U'y圳m`2܊Kތ*|kLQf0Y&Ok(u2OºPUℂWi\TI#k[\om@ I;}GG?v|S t >M4]Z'4F9-/QwE{k&RRx{vYzvN?^:?ӊV#(/ {F G g>R69k*"g!3A+tF.n`]B=?yq|`G61J8x|8{X켡Jy+g..^&oti&e2Me2!L.#V07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000b00000000TRAILER!!!ϕ7WGQnQJ 2lFtNN zb YZ