openldap2-client-2.4.46-lp151.9.4 >  A \i/=„ ;б^y+!1>\t}$őxbSSԩa !u-fr#Dl՚zϥstx0аY/g ;Z&E&v;H~iTP-+TG-9wCGA 9[0myɾzs!j4Pd4uuNh[ /y^Av˒]tbCLgH.DbSlZyv{Ry <>p>̬?̜d $ >  |   4 K |K @ l  y( 8 f9 Hf:fFGHtIXY\]p^bc}defluvX wxpy\z<LPV̘Copenldap2-client2.4.46lp151.9.4OpenLDAP client utilitiesOpenLDAP client utilities such as ldapadd, ldapsearch, ldapmodify.\,lamb11openSUSE Leap 15.1openSUSEOLDAP-2.8https://bugs.opensuse.orgProductivity/Networking/LDAP/Clientshttp://www.openldap.orglinuxx86_64 MI < ) h L 12i A\\\\\\\\\\\\\\\\\\\\\\\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.1.gzrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenldap2-2.4.46-lp151.9.4.src.rpmopenldap2-clientopenldap2-client(x86-64)@@@@@@@@@@@@@    /bin/bashlibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)liblber-2.4.so.2()(64bit)libldap-2_4-2libldap_r-2.4.so.2()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libsasl2.so.3()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.4.463.0.4-14.6.0-14.0-15.2-14.14.1[vZ@Za@Z@ZZ.s@Z@Y*@Y*@Y@Y@YYp@Yf@Y7Y6@X@X7@X$a@XWk@WbW;VVɦVŲ@VŲ@V@V@V@V@Vf@V^@V\:@V@V @U4@T@TuT:m@T @T=@T@Si@S@Sr @SW@SK@S@Rb@RRSRSQ@QP<@P|@P*P{@P{@P}L@OOD@OU@OKp@NU@NؽNσ@NS@NMMc@MY@MGM6@M$]@L,@L@Lp@L*@LvW@LI@L,@L,@K@KK@KrKv@KEK KJ@J@J JJ\s@JHJCfJ67IA@IIÅ@ckowalczyk@suse.comzsolt.kalmar@suse.comzsolt.kalmar@suse.commichael@stroeder.comfvogt@suse.commichael@stroeder.comrbrown@suse.comjengelh@inai.demrueckert@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.comhguo@suse.comhguo@suse.comjengelh@inai.dekukuk@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comlmuelle@suse.comhguo@suse.commpluskal@suse.commichael@stroeder.comhguo@suse.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comrguenther@suse.comjengelh@inai.dejengelh@inai.detchvatal@suse.comvarkoly@suse.comro@suse.deckornacker@suse.comckornacker@suse.comcoolo@suse.comdmueller@suse.comckornacker@suse.comro@suse.devarkoly@suse.comvarkoly@suse.commatz@suse.devarkoly@suse.comjengelh@inai.dejengelh@inai.dero@suse.derhafer@suse.comrhafer@suse.comcoolo@suse.comcoolo@suse.comrhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.decfarrell@suse.comrhafer@suse.decoolo@suse.comrhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@novell.comrhafer@novell.comrhafer@novell.comcristian.rodriguez@opensuse.orgrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comadrian@suse.derhafer@novell.comrhafer@novell.comrguenther@suse.derhafer@novell.comrhafer@novell.comrhafer@novell.comcoolo@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@suse.derhafer@suse.de- Fix slapd segfaults in mdb_env_reader_dest with patch 0016-Clear-shared-key-only-in-close-function.patch (bsc#1089640)- bsc#1085064 Packaging issues have been discovered around the openldap_update_modules_path.sh which has been corrected: - the spec file was wrongly configured, therefore the script has never been called - the script should create the symlinks first, as slapcat is useless on a system which is already affected.- bsc#1085064 Add script "openldap_update_modules_path.sh" which which removes the configuration item olcModulePath in cn=config which is after upgrade from SLE12 to SLE15 holds inappropriate information. If the cn=config is being used on a system, the conflicting items in slapd.conf are ignored, despite of it, the backend DB configuration section has been also commented out in the default slapd.conf. In case of correct cn=config (the olcModulePath has been already removed), the script stops without touching anything.- Upgrade to upstream 2.4.46 release - removed obsolete back-port patches: * 0013-ITS-8692-let-back-sock-generate-increment-line.patch * 0016-ITS-8782-fix-cancel-memleak.patch OpenLDAP 2.4.46 Release (2018/03/22) Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717) Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373) Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687) Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791) Fixed libldap MozNSS CA certificate hash matching (ITS#7374) Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389) Fixed libldap MozNSS initialization (ITS#8484) Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650) Fixed libldap memory leak with cancel operations (ITS#8782) Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705) Fixed slapd to maintain SSF across SASL binds (ITS#8796) Fixed slapd syncrepl deadlock when updating cookie (ITS#8752) Fixed slapd syncrepl callback to always be last in the stack (ITS#8752) Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778) Fixed slapd CSN queue processing (ITS#8801) Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720) Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520) Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226) Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404) Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692) Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752) Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100) Fixed slapo-syncprov memory leak with delete operations (ITS#8690) Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444) Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100) Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607) Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800) Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486) Build Environment Fixed Windows build with newer MINGW version (ITS#8697) Fixed compiler warnings and removed unused variables (ITS#8578) Contrib Fixed ldapc++ Control structure (ITS#8583) Documentation Delete stub manpage for back-ldbm (ITS#8713) Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121) Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818) Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715) Fixed slapo-syncprov(5) indexing requirements (ITS#5048)- Use %license (boo#1082318)- added 0016-ITS-8782-fix-cancel-memleak.patch- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Add openldap-r-only.dif so that openldap2's own tools also link against libldap_r rather than libldap. - Make libldap equivalent to libldap_r (like Debian) to avoid crashes in threaded programs which unknowingly get both libraries inserted into their process image. [rh#1370065, boo#996551]- use existing groups instead of inventing new ones- added 0012-ITS8051-sockdnpat.patch- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- Added OpenLDAP new feature implementing OpenLDAP ITS#8714 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- added overlay trace to package openldap2-contrib- Upgrade to upstream 2.4.45 release - removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch and 0012-use-system-wide-cert-dir-by-default.patch - added 0013-ITS-8692-let-back-sock-generate-increment-line.patch for supporting modify increment operations with back-sock - added overlay addpartial to package openldap2-contrib- Remove legacy daemon control that was used to migrate from SLE 11 to 12. (bsc#1038405)- There is no change made about the package itself, this is only copying over some changelog texts from SLE package: - bug#976172 owned by hguo@suse.com: openldap2 - missing /usr/share/doc/packages/openldap2/guide/admin/guide.html - bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546: openldap2: slapd crash in valueReturnFilter cleanup - [fate#319300](https://fate.suse.com/319300) - [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545) - bug#905959 owned by hguo@suse.com: L3-Question: Are multiple "Connection 0" in a Multi Master setup normal ? - [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546) - bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545: openldap2: slapd crashes on search with deref control and empty attr list- Drop binutils requirement; the code using /usr/bin/strings has been dropped in openSUSE:Factory/openldap2 revision 112.- Remove superfluous insserv PreReq.- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch to let OpenLDAP read system wide certificate directory by default and avoid hiding the error if user specified CA location cannot be read (bsc#1009470).- Add more details in the comments of slapd.conf concerning file permission and StartTLS capability.- Test for user/group existence before trying to add them. Summary spello update.- Move schema files into tarball addonschema.tar.gz: ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema yast.ldif yast.schema - Package previously missing schema files in LDIF format: amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif sudo.ldif suse-mailserver.ldif (bsc#984691) - Fix a minor issue in schema2ldif script that led to missing attribute in the generated LDIF.- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.- Move ldap.conf into libldap-data package, per convention.- Move ldap.conf out of shlib package again, they are not allowed there for obvious reasons (conflict with future package).- Build password strength enforcer as an implementation of ppolicy password checker, introducing: ppolicy-check-password-1.2.tar.gz ppolicy-check-password.Makefile ppolicy-check-password.conf ppolicy-check-password.5 0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch (Implements fate#319461)- Remove redundant -n openldap2- package name prefix.- Remove openldap2-client.spec and openldap2-client.changes openldap2.spec now builds client utilities and libraries. Thus pre_checkin.sh is removed. - Move ldap.conf and its manual page from openldap2-client package to libldap-2_4-2 package, which is more appropriate. - Use RPM_OPT_FLAGS in build flags. - Macros dealing with old/unsupported distributions are removed. - Remove 0002-slapd.conf.dif and install improved slapd.conf from new source file slapd.conf. - Install slapd.conf.olctemplate to assist in preparing slapd.d for OLC. - Be explicit in sysconfig that by default openldap will use static file configuration. - Add the following schemas in LDIF format: * rfc2307bis.ldif * ldapns.ldif * yast.ldif - Other minor clean-ups in the spec file.- Use optflags when building- Upgrade to upstream 2.4.44 release with accumulated bug fixes. - Specify source with FTP URL - Removed obsolete 0012-openldap-re24-its8336.patch- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch into 0010-Enforce-minimum-DH-size-of-1024.patch- Upgrade to upstream 2.4.43 release with accumulated bug fixes. - Still build on SLES12 - Loadable backend and overlay modules are now installed into arch-specific path %{_libdir}/openldap - All backends and overlays as modules for smaller memory footprint on memory constrained systems - Added extra package for back-sock - Consequent use of %{_rundir} everywhere - Rely on upstream ./configure script instead of any other macro foo - Dropped linking with libwrap - Dropped 0004-libldap-use-gethostbyname_r.dif because this work-around for nss_ldap is obsolete - New sub-package openldap2-contrib with selected contrib/ overlays - Replaced addonschema.tar.gz with separate schema sources - Updated ldapns.schema from recent slapo-nssov source tree - Added symbolic link to slapd executable in /usr/sbin/ - Added more complex example configuration file /etc/openldap/slapd.conf.example - Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap - Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap - Added patch for OpenLDAP ITS#7796 to avoid excessive "not index" logging: 0011-openldap-re24-its7796.patch - Replaced openldap-rc.tgz with single source files - Added soft dependency (Recommends) to cyrus-sasl - Added soft dependency (Recommends) to cyrus-sasl-devel to openldap2-devel - Added patch for OpenLDAP ITS#8336 (assert in liblmdb): 0012-openldap-re24-its8336.patch - Remove obsolete patch 0001-build-adjustments.dif- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch to fix CVE-2015-6908. (bsc#945582) - Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch to address weak DH size vulnerability (bsc#937766)- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch to fix an issue with unresponsive LDAP host lookups in IPv6 environment. (bsc#955210)- Remove OpenLDAP 2.3 code and patches from build source. Compatibility libraries for OpenLDAP 2.3 are built in package: compat-libldap-2_3-0 Removed source files: openldap-2.3.37-liblber-length-decoding.dif openldap-2.3.37-libldap-ntlm.diff openldap-2.3.37-libldap-ssl.dif openldap-2.3.37-libldap-sasl-max-buff-size.dif openldap-2.3.37-libldap-tls_chkhost-its6239.dif openldap-2.3.37-libldap-gethostbyname_r.dif openldap-2.3.37-libldap-suid.diff openldap-2.3.37.dif openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif openldap-2.3.37-libldap-ldapi_url.dif openldap-2.3.37.tgz openldap-2.3.37-libldap-utf8-ADcanonical.dif README.update check-build.sh- Upgrade to upstream 2.4.42 release with accumulated bug fixes.- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements. * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch * Remove already applied patch 0009-gcc5.patch (Implements fate#319301)- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks for Berkeley DB version- binutils is required for "strings" utility invocation in %pre [bnc#904028] - Remove SLE10 definitions- Use %_smp_mflags for parallel build- Add baselibs.conf to sources list- Do not bypass output of useradd and groupadd- sanitize release line in specfile- segfault on certain queries with rwm overlay (bnc#846389) 0008-ITS-7723-fix-reference-counting.patch- enable systemd slapd service if SysV ldap was enabled (bnc#881476)- use %_rundir if available, otherwise /var/run- move systemd requires to server package- Fix systemd service installation- use configure macro also for building the 2.3.37 version- Remove PidFile from service definition - Update to 2.4.39 * Fixed libldap MozNSS crash (ITS#7783) * Fixed libldap memory leak with SASL (ITS#7757) * Fixed libldap assert in parse_passwdpolicy_control (ITS#7759) * Fixed libldap shortcut NULL RDNs (ITS#7762) * Fixed libldap deref to use correct control * Fixed liblmdb keysizes with mdb_update_key (ITS#7756) * Fixed slapd cn=config olcDbConfig modification (ITS#7750) * Fixed slapd-bdb/hdb to bail out of search if config is paused (ITS#7761) * Fixed slapd-bdb/hdb indexing issue with derived attributes (ITS#7778) * Fixed slapd-mdb to bail out of search if config is paused (ITS#7761) * Fixed slapd-mdb indexing issue with derived attributes (ITS#7778) * Fixed slapd-perl to bail out of search if config is paused (ITS#7761) * Fixed slapd-sql to bail out of search if config is paused (ITS#7761) * Fixed slapo-constraint handling of softadd/softdel (ITS#7773) * Fixed slapo-syncprov assert with findbase (ITS#7749) * Build Environment Test suite: Use $(MAKE) for tests (ITS#7753) * Documentation admin24 fix TLSDHParamFile to be correct (ITS#7684)- Add systemd style service definition - FATE#315028 remove memory limit for slapd - FATE#315415: LDAP compat packages required for older SLES versions For this reson following patches were applied: openldap-2.3.37-libldap-suid.diff openldap-2.3.37-libldap-ldapi_url.dif openldap-2.3.37-libldap-ntlm.diff openldap-2.3.37-libldap-gethostbyname_r.dif openldap-2.3.37-libldap-sasl-max-buff-size.dif openldap-2.3.37-libldap-utf8-ADcanonical.dif openldap-2.3.37-liblber-length-decoding.dif openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif openldap-2.3.37-libldap-tls_chkhost-its6239.dif openldap-2.3.37-libldap-ssl.dif- Make /etc/sasl2 owned by openldap2.- Update to 2.4.38 * Fixed liblmdb nordahead flag (ITS#7734) * Fixed liblmdb to check cursor index before cursor_del (ITS#7733) * Fixed liblmdb wasted space on split (ITS#7589) * Fixed slapd for certs with a NULL issuerDN (ITS#7746) * Fixed slapd cn=config with empty nested includes (ITS#7739) * Fixed slapd syncrepl memory leak with delta-sync MMR (ITS#7735) * Fixed slapd-bdb/hdb to stop processing on dn not found (ITS#7741) * Fixed slapd-bdb/hdb with indexed ANDed filters (ITS#7743) * Fixed slapd-mdb to stop processing on dn not found (ITS#7741) * Fixed slapd-mdb dangling reader (ITS#7662) * Fixed slapd-mdb matching rule for OlcDbEnvFlags (ITS#7737) * Fixed slapd-mdb with indexed ANDed filters (ITS#7743) * Fixed slapd-meta from blocking other threads (ITS#7740) * Fixed slapo-syncprov assert with findbase (ITS#7749) Changes in 2.4.37 * Added liblmdb nordahead environment flag (ITS#7725) * Fixed client tools CLDAP with IPv6 (ITS#7695) * Fixed libldap CLDAP with IPv6 (ITS#7695) * Fixed libldap lock ordering with abandon op (ITS#7712) * Fixed liblmdb segfault with mdb_cursor_del (ITS#7718) * Fixed liblmdb when converting to writemap (ITS#7715) * Fixed liblmdb assert on MDB_NEXT with delete (ITS#7722) * Fixed liblmdb wasted space on split (ITS#7589) * Fixed slapd cn=config with olcTLSProtocolMin (ITS#7685) * Fixed slapd-bdb/hdb optimize index updates (ITS#7329) * Fixed slapd-ldap chaining with cn=config (ITS#7381, ITS#7434) * Fixed slapd-ldap chaning with controls (ITS#7687) * Fixed slapd-mdb optimize index updates (ITS#7329) * Fixed slapd-meta chaining with cn=config (ITS#7381, ITS#7434) * Fixed slapo-constraint to no-op on nonexistent entries (ITS#7692) * Fixed slapo-dds assert on startup (ITS#7699) * Fixed slapo-memberof to not replicate internal ops (ITS#7710) * Fixed slapo-refint to not replicate internal ops (ITS#7710) Changes in 2.4.36 * Added back-meta target filter patterns (ITS#7609) * Added liblmdb mdb_txn_env to API (ITS#7660) * Fixed libldap CLDAP with uninit'd memory (ITS#7582) * Fixed libldap with UDP (ITS#7583) * Fixed libldap OpenSSL TLS versions (ITS#7645) * Fixed liblmdb MDB_PREV behavior (ITS#7556) * Fixed liblmdb transaction issues (ITS#7515) * Fixed liblmdb mdb_drop overflow page return (ITS#7561) * Fixed liblmdb nested split (ITS#7592) * Fixed liblmdb overflow page behavior (ITS#7620) * Fixed liblmdb race condition with read and write txns (ITS#7635) * Fixed liblmdb mdb_del behavior with MDB_DUPSORT and mdb_del (ITS#7658) * Fixed slapd cn=config with unknown schema elements (ITS#7608) * Fixed slapd cn=config with loglevel 0 (ITS#7611) * Fixed slapd slapi filterlist free behavior (ITS#7636) * Fixed slapd slapi control free behavior (ITS#7641) * Fixed slapd schema countryString as directoryString (ITS#7659) * Fixed slapd schema telephoneNumber as directoryString (ITS#7659) * Fixed slapd-bdb/hdb to wait for read locks in tool mode (ITS#6365) * Fixed slapd-mdb behavior with alias dereferencing (ITS#7577 ) * Fixed slapd-mdb modrdn and base-scoped searches (ITS#7604) * Fixed slapd-mdb refcount behavior (ITS#7628) * Fixed slapd-meta binding flag is set (ITS#7524) * Fixed slapd-meta with minimal config (ITS#7581) * Fixed slapd-meta missing results messages (ITS#7591) * Added slapd-meta TCP keepalive support (ITS#7513) * Fixed slapo-sssvlv double free (ITS#7588) * Fixed slaptest to list -Q option (ITS#7568) Changes in 2.4.35 * Fixed liblmdb mdb_cursor_put with MDB_MULTIPLE (ITS#7551) * Fixed liblmdb page rebalance (ITS#7536) * Fixed liblmdb missing parens (ITS#7377) * Fixed liblmdb mdb_cursor_del crash (ITS#7553) * Fixed slapd syncrepl updateCookie status (ITS#7531) * Fixed slapd connection logging (ITS#7543) * Fixed slapd segfault on modify (ITS#7542, ITS#7432) * Fixed slapd-mdb to reject undefined attrs (ITS#7540) * Fixed slapo-pcache with +/- attrsets (ITS#7552) Changes in 2.4.34 * Fixed libldap connections with EINTR (ITS#7476) * Fixed libldap lineno overflow in ldif_read_record (ITS#7497) * Fixed liblmdb mdb_env_open flag handling (ITS#7453) * Fixed liblmdb mdb_midl_sort array optimization (ITS#7432) * Fixed liblmdb freelist with large entries (ITS#7455) * Fixed liblmdb to check for filled dirty page list (ITS#7491) * Fixed liblmdb to validate data limits (ITS#7485) * Fixed liblmdb mdb_update_key for large keys (ITS#7505) * Fixed ldapmodify to not core dump with invalid LDIF (ITS#7477) * Fixed slapd syncrepl for old entries in MMR setup (ITS#7427) * Fixed slapd signedness for index_substr_any_* (ITS#7449) * Fixed slapd enforce SLAPD_MAX_DAEMON_THREADS (ITS#7450) * Fixed slapd mutex in send_ldap_ber (ITS#6164) * Added slapd-ldap onerr option (ITS#7492) * Added slapd-ldap keepalive support (ITS#7501) * Fixed slapd-ldif with empty dir (ITS#7451) * Fixed slapd-mdb to reopen attr DBs after env reopen (ITS#7416) * Fixed slapd-mdb handling of missing entries (ITS#7483,7496) * Fixed slapd-mdb environment flag setting (ITS#7452) * Fixed slapd-mdb with sub db slapcat (ITS#7469) * Fixed slapd-mdb to correctly work with toolthreads > 2 (ITS#7488,ITS#7527) * Fixed slapd-mdb subtree search speed (ITS#7473) * Fixed slapd-meta conversion to cn=config (ITS#7525) * Fixed slapd-meta segfault when modifying olcDbUri (ITS#7526) * Fixed slapd-sql back-config support (ITS#7499) * Fixed slapo-constraint handle uri and restrict correctly (ITS#7418) * Fixed slapo-constraint with multi-master replication (ITS#7426) * Fixed slapo-constraint segfault (ITS#7431) * Fixed slapo-deref control initialization (ITS#7436) * Fixed slapo-deref control exposure (ITS#7445) * Fixed slapo-memberof with internal ops (ITS#7487) * Fixed slapo-pcache matching rules for config db (ITS#7459) * Fixed slapo-rwm modrdn cleanup (ITS#7414) * Fixed slapo-sssvlv maxperconn parameter (ITS#7484)- For now, avoid automatic use of libdb-6_0 by explicitly selecting libdb-4_8 as BuildRequire.- Put static libs into openldap2-devel-static and relieve openldap2-devel of static-only deps- fix check-build.sh for kernel > 3.0- Fixed initscript to avoid endless loop when no configuration is present in /etc/openldap/slapd.d/ (bnc#767464) - cleaned up SLES10 buildrequires and dependencies - removed support for building on SLES9, didn't work anyway anymore - Don't buildrequire krb5-mini on Distributions where it does not exist- enabled mdb backend - Update to 2.4.33 * Added slapd-meta cn=config support * Fixed slapd alock handling on Windows (ITS#7361) * Fixed slapd acl handling with zero-length values (ITS#7350) * Fixed slapd syncprov to not reference ops inside a lock (ITS#7172) * Fixed slapd delta-syncrepl MMR with large attribute values (ITS#7354) * Fixed slapd slapd_rw_destroy function (ITS#7390) * Fixed slapd-ldap idassert bind handling (ITS#7403) * Fixed slapo-constraint with multiple modifications (ITS#7168) Changes in 2.4.32: * Added slappasswd loadable module support (ITS#7284) * Fixed tools to not clobber SASL_NOCANON (ITS#7271) * Fixed libldap function declarations (ITS#7293) * Fixed libldap double free (ITS#7270) * Fixed libldap debug level setting (ITS#7290) * Fixed libldap gettime() regression (ITS#6262) * Fixed libldap sasl handling (ITS#7118, ITS#7133) * Fixed libldap to correctly free socket with TLS (ITS#7241) * Fixed slapd config index renumbering (ITS#6987) * Fixed slapd duplicate error response (ITS#7076) * Fixed slapd parsing of PermissiveModify control (ITS#7298) * Fixed slapd-bdb/hdb cache hang under high load (ITS#7222) * Fixed slapd-bdb/hdb alias checking (ITS#7303) * Fixed slapd-bdb/hdb olcDbConfig changes work immediately (ITS#7338) * Fixed slapd-ldap to encode user DN during password change (ITS#7319) * Fixed slapd-ldap assertion when proxying to MS AD (ITS#6851) * Fixed slapd-ldap monitoring (ITS#7182, ITS#7225) * Fixed slapd-perl panic (ITS#7325) * Fixed slapo-accesslog memory leaks with sync replication (ITS#7292) * Fixed slapo-syncprov memory leaks with sync replication (ITS#7292)- add explicit buildrequire on groff - needed to build manuals- buildrequire krb5-mini in openldap2-client to avoid cycle - move Summary out of the %if as prepare_spec is confused about the license otherwise- update to 2.4.31 * Added slapo-accesslog support for reqEntryUUID (ITS#6656) * Fixed libldap IPv6 URL detection (ITS#7194) * Fixed libldap rebinding on failed connection (ITS#7207) * Fixed slapd listener initialization (ITS#7233) * Fixed slapd cn=config with olcTLSVerifyClient (ITS#7197) * Fixed slapd delta-syncrepl fallback on non-leaf error (ITS#7195) * Fixed slapd to reject MMR setups with bad serverID setting (ITS#7200) * Fixed slapd approxIndexer key generation (ITS#7203) * Fixed slapd modification of olcSuffix (ITS#7205) * Fixed slapd schema validation with missing definitions (ITS#7224) * Fixed slapd syncrepl -c with supplied CSN values (ITS#7245) * Fixed slapd-bdb/hdb idlcache with only one element (ITS#7231) * Fixed slapo-accesslog deadlock with non-logged write ops (ITS#7088) * Fixed slapo-syncprov sessionlog check (ITS#7218) * Fixed slapo-syncprov entry leak (ITS#7234) * Fixed slapo-syncprov startup initialization (ITS#7235)- Disabled testsuite for now. Causes problems in the buildserivce- Update to 2.4.30 * Fixed libldap socket polling for writes (ITS#7167) * Fixed liblutil string modifications (ITS#7174) * Fixed slapd crash when attrsOnly is true (ITS#7143) * Fixed slapd syncrepl delete handling (ITS#7052,ITS#7162) * Fixed slapo-pcache time-to-refesh handling (ITS#7178) * Fixed slapo-syncprov loop detection (ITS#6024)- Update to 2.4.29 * Fixed slapd cn=config modification of first schema element (ITS#7098) * Fixed slapd operation reuse (ITS#7107) * Fixed slapd blocked writers to not interfere with pool pause (ITS#7115) * Fixed slapd connection loop connindex usage (ITS#7131) * Fixed slapd double mutex unlock via connection_done (ITS#7125) * Fixed slapd check order in connection_write (ITS#7113) * Fixed slapd slapadd to exit on failure (ITS#7142) * Fixed slapd syncrepl reference to freed memory (ITS#7127,ITS#7132) * Fixed slapd syncrepl to ignore some errors on delete (ITS#7052) * Fixed slapd syncrepl to handle missing oldRDN (ITS#7144) * Fixed slapd-monitor compare op to update cached entry (ITS#7123) * Fixed slapo-syncprov with already abandoned operation (ITS#7150) - Included patches from RE24 branch: * only poll sockets for write as needed (ITS#7167, bnc#749082) * sycnrepl Fixes (ITS#7162)- license update: OLDAP-2.8 SPDX format (http://www.spdx.org/licenses)- Update to 2.4.28 * Fixed back-mdb out of order slapadd (ITS#7090) changes in OpenLDAP 2.4.27 Release (2011/11/24): * Added slapd delta-syncrepl MMR (ITS#6734,ITS#7029,ITS#7031) * Fixed ldapmodify crash with LDIF controls (ITS#7039) * Fixed ldapsearch to honor timeout and timelimit (ITS#7009) * Fixed libldap endless looping (ITS#7035) * Fixed libldap TLS to not check hostname when using 'allow' (ITS#7014) * Fixed slapadd common code into slapcommon (ITS#6737) * Fixed slapd backend connection initialization (ITS#6993) * Fixed slapd frontend DB parsing in cn=config (ITS#7016) * Fixed slapd hang with {numbered} overlay insertion (ITS#7030) * Fixed slapd inet_ntop usage (ITS#6925) * Fixed slapd cn=config deletion of bitmasks (ITS#7083) * Fixed slapd cn=config modify replace/delete crash (ITS#7065) * Fixed slapd schema UTF8StringNormalize with 0 length values (ITS#7059) * Fixed slapd with dynamic acls for cn=config (ITS#7066) * Fixed slapd response callbacks (ITS#6059,ITS#7062) * Fixed slapd no_connection warnings with ldapi (ITS#6548,ITS#7092) * Fixed slapd return code processing (ITS#7060) * Fixed slapd sl_malloc various issues (ITS#6437) * Fixed slapd startup behavior (ITS#6848) * Fixed slapd syncrepl crash with non-replicated ops (ITS#6892) * Fixed slapd syncrepl with modrdn (ITS#7000,ITS#6472) * Fixed slapd syncrepl timeout when using refreshAndPersist (ITS#6999) * Fixed slapd syncrepl deletes need a non-empty CSN (ITS#7052) * Fixed slapd syncrepl glue for empty suffix (ITS#7037) * Fixed slapd results cleanup (ITS#6763,ITS#7053) * Fixed slapd validation of args for TLSCertificateFile (ITS#7012) * Fixed slapd-bdb/hdb to build entry DN based on parent DN (ITS#5326) * Fixed slapd-hdb with zero-length entries (ITS#7073) * Fixed slapd-hdb duplicate entries in subtree IDL cache (ITS#6983) * Fixed slapo-pcache response cleanup (ITS#6981) * Fixed slapo-ppolicy pwdAllowUserChange behavior (ITS#7021) * Fixed slapo-sssvlv issue with greaterThanorEqual (ITS#6985) * Fixed slapo-sssvlv to only return requested attrs (ITS#7061) * Fixed slapo-syncprov DSA attribute filtering for Persist mode (ITS#7019) * Fixed slapo-syncprov when consumer has newer state of our SID (ITS#7040) * Fixed slapo-syncprov crash (ITS#7025) * Added missing LDIF form of schema files (ITS#7063)- add libtool as buildrequire to avoid implicit dependency- ACL changes to the config database only got active after slapd restart in certain cases (bnc#716895, ITS#7066). - Adjusted default DB_CONFIG to increase max values for locks and lock objects (bnc#719803) - Fix UTF8StringNormalize overrun on zero-length string (bnc#724201, ITS#7059)- Update to 2.4.26 * Added libldap LDAP_OPT_X_TLS_PACKAGE (ITS#6969) * Fixed libldap descriptor leak (ITS#6929) * Fixed libldap socket leak (ITS#6930) * Fixed libldap get option crash (ITS#6931) * Fixed libldap lockup (ITS#6898) * Fixed libldap ASYNC TLS setup (ITS#6828) * Fixed libldap with missing \n terminations (ITS#6947) * Fixed tools double free (ITS#6946) * Fixed tools verbose output (ITS#6977) * Fixed ldapmodify SEGV on invalid LDIF (ITS#6978) * Added slapd extra_attrs database option (ITS#6513) * Fixed slapd asserts (ITS#6932) * Fixed slapd configfile param on windows (ITS#6933) * Fixed slapd config with global chaining (ITS#6843) * Fixed slapd uninitialized variables (ITS#6935) * Fixed slapd config objectclass is readonly (ITS#6963) * Fixed slapd entry response with control (ITS#6899) * Fixed slapd with unknown attrs (ITS#6819) * Fixed slapd normalization of schema RDN (ITS#6967) * Fixed slapd operations cache to 10 op limit (ITS#6944) * Fixed slapd syncrepl crash with non-replicated ops (ITS#6892) * Fixed slapd-bdb/hdb with sparse index ranges (ITS#6961) * Fixed back-ldap ppolicy updates (ITS#6711) * Fixed back-ldap with id-assert (ITS#6817) * Fixed various slapo-pcache issues (ITS#6823, ITS#6950, ITS#6951, ITS#6953, ITS#6954) * Fixed slapo-pcache database corruption (ITS#6831) * Fixed slapo-syncprov with replicated subtrees (ITS#6872) - backported delete support for child entries of overlays from master (bnc#704398)- Updated to 2.4.25, important changes: * Fixed ldapsearch pagedresults loop (ITS#6755) * Fixed tools for incompatible args (ITS#6849) * Fixed libldap MozNSS crash (ITS#6863) * Fixed slapd add objectclasses in order (ITS#6837) * Added slapd ordering for uidNumber and gidNumber (ITS#6852) * Fixed slapd segfault when adding values out of order (ITS#6858) * Fixed slapd sortval handling (ITS#6845) * Fixed slapd-bdb with slapadd/index quick option (ITS#6853) * Fixed slapd-ldap chain cn=config support (ITS#6837) * Fixed slapd-ldap chain with slapd.conf (ITS#6857) * Fixed slapd-meta deadlock (ITS#6846) * Fixed slapo-sssvlv with multiple requests (ITS#6850) * Fixed contrib/lastbind install rules (ITS#6238) * Fixed contrib/cloak install rules (ITS#6877)- Surpress gcc warnings about extra format string arguments for 2.3.x built as well.- Updated to 2.4.24, important changes: * Added libldap_r,libldap formal concurrency API (ITS#6625,ITS#5421) * Added slapadd attribute value checking (ITS#6592) * Added slapcat continue mode for problematic DBs (ITS#6482) * Added slapd syncrepl suffixmassage support (ITS#6781) * Fixed liblber to not close invalid sockets (ITS#6585) * Fixed libldap referral chasing (ITS#6602) * Fixed libldap leak when chasing referrals (ITS#6744) * Fixed slapd acl parsing overflow (ITS#6611) * Fixed slapd acl when resuming parsing (ITS#6804) * Fixed slapd default config acls with overlays (ITS#6822) * Fixed slapd config leak with olcDbDirectory (ITS#6634) * Fixed slapd when first acl is value dependent (ITS#6693) * Fixed slapd-bdb slapadd -q with glued dbs (ITS#6794) * Fixed slapo-ppolicy don't update opattrs on consumers (ITS#6608) * Fixed slapo-ppolicy to allow userPassword deletion (ITS#6620) * Fixed slapo-syncprov to send error if consumer is newer (ITS#6606) * Fixed slapo-syncprov filter race condition (ITS#6708) * Fixed slapo-syncprov active mod race (ITS#6709) * Fixed slapo-syncprov to refresh if context is dirty (ITS#6710) * Fixed slapo-syncprov CSN updates to all replicas (ITS#6718) * Fixed slapo-syncprov sessionlog ordering (ITS#6716) * Fixed slapo-syncprov sessionlog with adds (ITS#6503) * Fixed slapo-syncprov mutex (ITS#6438) * Fixed slapo-syncprov mincsn check with MMR (ITS#6717) * Fixed slapo-syncprov control leak (ITS#6795) * Fixed slapo-syncprov error codes (ITS#6812) * For a comprehensive list of changes please consult the CHANGES file - removed unneeded openSUSE 11.0 specifc patch- slapadd -q could crash for glued bdb/hdb databases- Install the correct schema2ldif script (bnc#665530)- Fixed quotation in init-script to avoid errors when calling it from within /etc/openldap/slapd.d/cn=config/ (bnc#660492).- Surpress gcc warnings about extra format string arguments. - Split-off openldap2-doc (noarch) package (Admin Guide and IDs) - Backported -VVV commandline switch for slapd from HEAD (to list enabled static overlays) - Build all overlays except syncprov and ppolicy as dynamic modules (Fixes bnc#648479, FATE#307837) - Added README.dynamic-overlays to point out some details about dynamic overlays - simplified pie-compile patch and adjusted it to work with dynamic overlays- Handle the libdb-4_5 -> libdb-4_8 Version update by opening the Databases with DB_RECOVER if a version mismatch is detected.- Do not include Build date and time in binaries, this avoids build-compare failures and unhelpful rebuilds/republishes- Don't build 2.3 slapcat anymore for 11.3 and newer. We switch to 2.4 long ago. - Removed automatic 2.3->2.4 migration in %post - moved back-sql examples to make rpmlint happy- Fix listener URIs in init script to make SLP registration work again (bnc#620389)- Fixed RPM Group and Summary Tags (bnc#624980)- Updated to 2.4.23: * Fixed libldap to return server's error code (ITS#6569) * Fixed libldap memleaks (ITS#6568) * Fixed liblutil off-by-one with delta (ITS#6541) * Fixed slapd acls with glued databases (ITS#6468) * Fixed slapd syncrepl rid logging (ITS#6533) * Fixed slapd modrdn handling of invalid values (bnc#612430, ITS#6570) * Fixed slapd-bdb hasSubordinates computation (ITS#6549) * Fixed slapd-bdb to use memcpy instead for strcpy (ITS#6474) * Fixed slapd-bdb entry cache delete failure (ITS#6577) * Fixed slapd-ldap to return control responses (ITS#6530) * Fixed slapo-ppolicy to use Debug (ITS#6566) * Fixed slapo-refint to zero out freed DN vals (ITS#6572) * Fixed slapo-rwm to use Debug (ITS#6566) * Fixed slapo-sssvlv to use Debug (ITS#6566) * Fixed slapo-syncprov lost deletes in refresh phase (bnc#606294, ITS#6555) * Fixed slapo-valsort to use Debug (ITS#6566) * Fixed contrib/nssov network.c missing patch (ITS#6562) - New subpackage openldap2-back-sql. Contains the SQL backend module plus some documentation (bnc#395719) - generate Patches from git tree (resulted in all patches being renamed) - installing binaries without stripping them is done by setting the STRIP enviroment variable instead for patching the Makefile now - Fixed a bug in the syncprov overlay which could lead to not replicate delete Operations (ITS#6555, bnc#606294) - BuildRequires cleanup- LDAP clients could crash the server by submitting a specially crafted LDAP ModRDN operation. (bnc#612430, ITS#6570) - Delete Operations happening during the "Refresh" phase of "refreshAndPersist" replication failed to replicate under certain circumstances (bnc#606294, ITS#6555)- Create /var/run/slapd on demand. /var/run might be mounted on tmpfs.- fix build dependency cycle for -client package with openslp- Fixed quotation in sed expression to escape ldapi path in init script- Removed obsolete hunk from openldap2.dif - Remove ldap.conf patch to use saner default for Certificate verification (bnc#575146)- Add fix for stricter fortification checks of GCC 4.5.- Updated to 2.4.21: * Fixed liblutil for negative microsecond offsets (ITS#6405) * Fixed slapd global settings to work without restart (ITS#6428) * Fixed slapd looping with SSL/TLS connections (ITS#6412) * Fixed slapd syncrepl freeing tasks from queue (ITS#6413) * Fixed slapd syncrepl parsing of tls defaults (ITS#6419) * Fixed slapd syncrepl uninitialized variables (ITS#6425) * Fixed slapd-config Adds with Abstract classes (ITS#6408) * Fixed slapo-dynlist behavior with simple filters (ITS#6421) * Fixed slapd-ldif access outside database directory (ITS#6414) * Fixed slapo-translucent with back-null (ITS#6403) * Fixed slapo-unique criteria checking (ITS#6270) - removed some obsolete RPM dependencies - Added missing tags to init script to silence rpmlint warnings- Fixed an issue in back-config's objectclass inheritence code that could cause the server to fail to start or to spin in an endless loop (bnc#558059,ITS#6408) - default the tls_reqcert parameter of a syncrepl config to "demand" as documented even if other tls_ options are absent (bnc#558397, ITS#6319) - apply changes to the global size and timelimits to all database that don't specify limits themself. (bnc#562184, ITS#6428)- Update to 2.4.20 (fate#306593), most important fixes since 2.4.19 * Fixed liblber embedded NUL values in BerValues (ITS#6353) * Fixed libldap sasl buffer sizing (ITS#6327,ITS#6334) * Fixed libldap uninitialized return value (ITS#6355) * Fixed libldap unlimited timeout (ITS#6388) * Added slapd handling of hex server IDs (ITS#6297) * Fixed slapd checks of str2filter (ITS#6391) * Fixed slapd configArgs initialization (ITS#6363) * Fixed slapd db_open with connection_fake_init (ITS#6381) * Fixed slapd with embedded \0 in bervals (ITS#6378,ITS#6379) * Fixed slapd inclusion of ac/unistd.h (ITS#6342) * Fixed slapd sl_free to better reclaim memory (ITS#6380) * Fixed slapd syncrepl deletes in MirrorMode (ITS#6368) * Fixed slapd syncrepl to use correct SID (ITS#6367) * Fixed slapd tls_accept to retry in certain cases (ITS#6304) * Fixed slapd-bdb/hdb cache corruption (ITS#6341) * Fixed slapd-bdb/hdb entry cache (ITS#6360) * Fixed slapo-syncprov checkpoint conversion (ITS#6370) * Fixed slapo-syncprov deadlock (ITS#6335) * Fixed slapo-syncprov out of order changes (ITS#6346) - Added switch to enable/disable testsuite (%run_test_suite)- updated patches to apply with fuzz=0- Added schema2ldif tool to openldap2-client subpackage (bnc#541819)- Changed permissions on /var/run/slapd to a saner default for ldapi:/// (bnc#536729)- libldap's check of the hostname against the TLS Certificate's CN Attribute did not handle possible NUL bytes in the CN correctly and was vulnerable against attacks with spoofed Certificates. (bnc#537143, ITS#6239)- Update to 2.4.17. Most important changes: * Fixed liblber to use ber_strnlen (ITS#6080) * Fixed libldap openssl digest initialization (ITS#6192) * Fixed libldap tls NULL error messages (ITS#6079) * Added slapd sasl auxprop support (ITS#6147) * Added slapd schema checking tool (ITS#6150) * Added slapd writetimeout keyword (ITS#5836) * Fixed slapd abandon/cancel handling for some ops (ITS#6157) * Fixed slapd access setstyle to expand (ITS#6179) * Fixed slapd assert with closing connections (ITS#6111) * Fixed slapd bind race condition (ITS#6189) * Fixed slapd cert validation (ITS#6098) * Fixed slapd connection_destroy assert (ITS#6089) * Fixed slapd csn normalization (ITS#6195) * Fixed slapd errno handling (ITS#6037) * Fixed slapd hung writers (ITS#5836) * Fixed slapd ldapi issues (ITS#6056) * Fixed slapd normalization of updated schema attributes (ITS#5540) * Fixed slapd olcLimits handling (ITS#6159) * Fixed slapd olcLogLevel with hex levels (ITS#6162) * Fixed slapd sending cancelled operations results (ITS#6103) * Fixed slapd slapi_entry_has_children (ITS#6132) * Fixed slapd sockets usage on windows (ITS#6039) * Fixed slapd some abandon and cancel race conditions (ITS#6104) * Fixed slapd tls context after changes (ITS#6135) * Fixed slapd-bdb/hdb adjust dncachesize if too low (ITS#6176) * Fixed slapd-bdb/hdb crashes during delete (ITS#6177) * Fixed slapd-bdb/hdb multiple olcIndex for same attr (ITS#6196) * Fixed slapd-hdb freeing of already freed entries (ITS#6074) * Fixed slapd-hdb entryinfo cleanup (ITS#6088) * Fixed slapd-hdb dncache lockups (ITS#6095) * Fixed slapd-ldap deadlock with non-responsive TLS URIs (ITS#6167) * Fixed slapo-ppolicy to honor pwdLockout (ITS#6168) * Fixed slapo-ppolicy to return check modules error message (ITS#6082) * Added slapo-rwm rwm-drop-unrequested-attrs config option (ITS#6057) * Fixed slapo-rwm dn passing (ITS#6070) * Fixed slapo-rwm entry free/release (ITS#6058, ITS#6081) * Fixed tools returning ldif errors (ITS#5892) - Backported fix for failing back-monitor test from HEAD - re-enabled some formerly disabled tests from the testsuite- Fixed Summary/Description for -client subpackage- Improved connection check in init script (bnc#510295)- Fixed complilation with newer glibc (2.3.X release needs GNU_SOURCE defined as well in getpeerid.c)- gcc 4.4 fixes- Update to 2.4.16. Most important fixes: * Fixed libldap segfault in checking cert/DN (ITS#5976) * Fixed libldap peer cert double free (ITS#5849) * Fixed libldap referral chasing (ITS#5980) * Fixed slapd backglue with empty DBs (ITS#5986) * Fixed slapd ctxcsn race condition (ITS#6001) * Fixed slapd debug message (ITS#6027) * Fixed slapd redundant module loading (ITS#6030) * Fixed slapd schema_init freed value (ITS#6036) * Fixed slapd syncrepl newCookie sync messages (ITS#5972) * Fixed slapd syncrepl hang during shutdown (ITS#6011) * Fixed slapd syncrepl too many MMR messages (ITS#6020) * Fixed slapd syncrepl skipped entries with MMR (ITS#5988) * Fixed slapd-bdb/hdb cachesize handling (ITS#5860) * Fixed slapd-bdb/hdb with slapcat with empty dn (ITS#6006) * Fixed slapd-bdb/hdb with NULL transactions (ITS#6012) * Fixed slapd-ldap incorrect referral handling (ITS#6003,ITS#5916) * Fixed slapd-ldap/meta with broken AD results (ITS#5977) * Fixed slapd-ldap/meta with invalid attrs again (ITS#5959) * Fixed slapo-accesslog interaction with ppolicy (ITS#5979) * Fixed slapo-dynlist conversion to cn=config (ITS#6002) * Fixed various slapo-syncprov issues (ITS#5972, ITS#6020, ITS#5985, ITS#5999, ITS#5973, ITS#6045, ITS#6024, ITS#5988) - Fix building on older openSUSE releases- Update to 2.4.15. Most important changes: * Fixed slapd bconfig conversion again (ITS#5346) * Fixed slapd behavior with superior objectClasses again (ITS#5517) * Fixed slapd RFC4512 behavior with same attr in RDN (ITS#5968) * Fixed slapd corrupt contextCSN (ITS#5947) * Fixed slapd syncrepl order to match on add/delete (ITS#5954) * Fixed slapd adding rdn with other values (ITS#5965) * Fixed slapd-bdb/hdb behavior with unallocatable shm (ITS#5956) * Fixed slapd-ldap/meta with entries with invalid attrs (ITS#5959) * Fixed slapo-pcache caching invalid entries (ITS#5927) * Fixed slapo-syncprov csn updates (ITS#5969) * Added libldap option to disable SASL host canonicalization (ITS#5812) * Fixed libldap chasing multiple referrals (ITS#5853) * Fixed libldap setuid usage with .ldaprc (ITS#4750) * Fixed libldap deref handling (ITS#5768) * Fixed libldap NULL pointer deref (ITS#5934) * Fixed libldap peer cert memory leak (ITS#5849) * Fixed libldap intermediate response behavior (ITS#5896) * Fixed libldap IPv6 address handling (ITS#5937) * Fixed libldap_r deref building (ITS#5768) * Fixed libldap_r slapd lockup when paused during shutdown (ITS#5841) * Fixed slapd acl checks on ADD (ITS#4556,ITS#5723) * Fixed slapd acl application to newly created backends (ITS#5572) * Fixed slapd bconfig to return error codes (ITS#5867) * Fixed slapd bconfig encoding incorrectly (ITS#5897) * Fixed slapd bconfig dangling pointers (ITS#5924) * Fixed slapd epoll handling (ITS#5886) * Fixed slapd glue with MMR (ITS#5925) * Fixed slapd listener comparison (ITS#5613) * Fixed various syncrepl issues (ITS#5809,ITS#5850, ITS#5843, ITS#5866, ITS#5901, ITS#5881, ITS#5935, ITS#5710, ITS#5781, ITS#5809, ITS#5798, ITS#5826) * Fixed slapd-bdb/hdb dncachesize handling (ITS#5860) * Fixed slapd-bdb/hdb trickle task usage (ITS#5864) * Fixed slapd-hdb idlcache with empty suffix (ITS#5859)lamb11 1545062956 2.4.46-lp151.9.42.4.46-lp151.9.4openldapldapaddldapcompareldapdeleteldapexopldapmodifyldapmodrdnldappasswdldapsearchldapurlldapwhoamischema2ldifldapadd.1.gzldapcompare.1.gzldapdelete.1.gzldapexop.1.gzldapmodify.1.gzldapmodrdn.1.gzldappasswd.1.gzldapsearch.1.gzldapurl.1.gzldapwhoami.1.gzldif.5.gz/etc//usr/bin//usr/sbin//usr/share/man/man1//usr/share/man/man5/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.1/standard/16c1179d95d5688f2a87368fc4f1f641-openldap2cpioxz5x86_64-suse-linux  directoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=498d06b5146faab6019a2cab16fffe0745190581, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=44b96159fbff5b0910325b07833fde20cf7f338d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=3d07f5cdad9ef3a25c2db717a854f92f214ac5a0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=5586e72230be3c76c493ca5930cbdfd2aee4c346, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=d5b8f9e9e3ed097ea09168edcd850420a0bfa0ea, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=392e0dfb3a89211c448f41e5a1d413503fe0b0c9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=72cf6e39de9842d51df430bf51e0b08b01a83bee, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=6785bb0700a773d28661ea3fcae92a4522cbd4f6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=fb0005c62746e92a4ccf80089bafa4d23389d508, strippedBourne-Again shell script, ASCII text executabletroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) )3=HQ[ R RRRRR RR R RR RRRRR RR R RR RRRRR RR R RR RRRRRR RR R RR RRRRR RR R RR RRRRR RR R RR RRRRRR RR R RR RRRRR RR RR RRRRR RR R RRo6$U6utf-868bb70ffbdfa8b574d816823dc16ba90d512afa3488b169f78834f65e3cc1218? 7zXZ !t/8] crt:bLL dQןJ|0Ș].G!H=oƺ1S6swX ̠gc s{ з+ &fhwUeQϩd:TGD= (YLqTV>/([+D!5=eb7J݃iŸ`ӈo$*q6ќuxCe<&C_I'o=O} pIy?QI%Wvg7S[w&Ki:~XԿ`at# `>A[+c^.uY(9t*`Nk@KuiݴX0p(jBYaaHSRS:v`rj'g'Ȑ7uqSsZ^hl76o೷IAX3$/.}prΞkzÿ4I9&8''~cqXIݮ -{k7MC/[\or^ }ZVPp8}JYGx'ڭc֎Q7NLZ>B8s_:08JGه KV7 cIPH!L"3<7rjE$"fa&._Z,"0P9y?`2c$n%2# \7ZlaOB= q6"]-,J>t}P[fQetjͥ8\TJ=rdyK+̑PQt^Z1]SK b8&`ȋ5A `KYAsB{-!GT3.Un_ȿ kd'+,E >^znuW'Ӊ,x#e[>:| M?1lTrw({XDg?@ۛl|^U kQHw!n%p%FQbkRrPoQRHndEv~װ}3{g+i^ q q4cO;FKAEP`V3A )C!F!b1ק}$ܐx t˃{HyeĮpַ G(/c=4t;ZxAYLӢ( B0/ÿΥ\Շ>!F)r kDJQfja4-/AEmWbA# ) :E5:RpaRב{V>¡a)^54*{ %4+XG{`*N%l E6׌ROfYPcEfqn @ұ;q=mYך^SxH[v~<^DbZgIpJF3J#7A7ՃTyhڡl}{׍qCL2B(,ґ#MXvķބ #QGp{[%LFP4! voѪF; rDY"T%hf΄N&qQ1}iR87c|ݖܷ28FWD=]bZHT$]YL;QYx 7սPIu-;8 ]HJ0$O엻z'uPWFY8XgsBcO_; 9i/lѮAT 3F46V#z &g6,@k )eәHMe3Z<2 Xw-w^(ghx WVɟ ?qJc'Ƀd0DVvm=ҡ%uUHfICK'9I)U{{66Jtv|̳j3;iQ?QͤNR.rψnQ67o|G,20X &&2$5,}5L.Z[Y6m/`H'J>zb?ײ. 3{- cBK&t[g3=0pXdx4is F=Vdq0'/ed&Ua$!u;WMyiIBTrVz(is#/)[Թ'pieQѦk+P:[ YԦ!y˟ b[gT\QϦm`_ *<>0` }p(zW!/5H] _01C2Ѧ Κnbp۟$z& @led>(Ι?j h֊9bBW㪞m+*4ƕ:gwN%/pj,s =8q٤~<>1G jb:ɡ%MvъN^qlj&6w)=q|gIVTo&' o[ڔCmb_&f{k7@1H3ݎM?|1[TarYwJS.ˑ4}˥Gc7?2;Jf tys6s[J1}3m ⻡j ( ߶Y(垖wJo_Yl3wſ̪fðk b[)=,vu_{L7m!uN̚dqHqOBytw˺U+ 9O H[1(5ZmX~v߾dAG%<\Qj"g<gh J Jd(/g\/& kF;]连^VfoXJ+ԩQXlhP;jB|m^ΐeJ/!b'HުM{'BZC1RdpQ IMev_썌*r{X1U"),Fm@f\~*މ^Z^EUe3&u?3W z)c)A4 sp3$ﾭ˪ /Bf 9-sY^d$t(n<[jKӶ'Y!m GzJ Ұ#V⇥>gkQ ;tt>샴V Ȼ47j9~wm^ӧP -3d&D<ޭ0UU^[Jw O(EocsLI6qivI\Q+*X^.?={1aɓK'gKá*iߌ[]AnRg9XNLeXaG81Sp&L8;VzKc3 Sݦ>R-:K9P$; t#SAWMX(E?AX@'lV\e;rFevL`RE`Tu..]|^!@komLS+C(O%_JeN6o7cǤ.Z9n,2g'lcfe+ƙ*s{+/RH5ǹ<xQ-ˀښN$mܽ&e+ pf%'l̀Lp.]ELeƂU ` xKK Z\Oި1:&fj- Ce_J Ъ7I EwCZe};?fv<"'Ŷo5#\(BY  P]q~#kL!l3K#3pCnO tr(eV+^HpFN]2e*cndtnԠs/>k=}7'QFn[e1D;/h7e.;+"&\Ö1ЇPGVSlZN/(rh}Yt^6l%=yF-g.#_h'WCV n?{mR9eܘ+,jЁb y2:a7qE(㍩E+O2exTr(-nGf7yTT1ݠV3T qf?jiՆ#p2,1ȷg6aYzkl-q0$U3,m@;h,Շ FogE\9D [ m-{9{7p.Q.Mb`9N^>_7o'b(,UkAK{ҍcMRs%0nZ0?x]fߞͷT^EZGy046J8ʥN= MYd# A[׺G %4RGcEӻq1ZD(u-ue(q~OJ d1y-Y<(Xv;j-q~5ah~3ܜh%;ylo.# **p")ɖsݲ8&*OOع3'm%rSsdz{*4ߣi`D.Tג3I9^ؠ)K-:PL88;o-O`9n '^nJi@_8Au2Icv;|>Ъ:rnŋ,2n֗ NJabsˆ|:b &8c&MSCm# C:LRBșJݖ,&_[@ Wt^8uɄ^x7LebtA7Ńq~w$lEK^MbUL+x@c!٪Qʐp؅ FB{]a PX:y=!?j XLk[ns^T`Nt؎~d܋NLܡjHVv#;x@ ܶld I> I'Zߧr`}./(E䅓['DzoƔַr0Z^޶^U32{nkdbZL}57E"P#945Ȗ+H]YdYɇ3)BWOd,.Vj.HSF⦩>if'p5,׈<  } YT]IE:6DԪ6CC|ظæw@,ցrý26.~],+JuvI|r!Ϙ=GAސ+t*|Q"G>J7҆ /h$`O+,:-Vʢ 'M@ڕ(2K47p vF7-%X9"ݜ ?`LIoML%a@fR6${%F%O𻚄|j)vQ{-D|w1Hvu%);ԲoT`WB/H'7n{<)}D⾀*y\v!wQɒt=ժA Gr6!0k)w{ZK]xv@](h$nsչt9 Ĉ#&zF" aMg<.QjZ ,vɌ)d*got0mHWc{^&xP/Z,@ ½='C2[-4cc3h}(Y{\2 +?VI_*ֳo7]ܧ^^D oh 4c#]单O3yvHM0%Ym#ےu-Tх njw{m+OeF8` ~,\ Y@&_LUTfc*Yc95\ cekT#:B${1ٽW4]&P wݴR/r+Fױ̊G}j$LH# LÕKF<]82*M;`~oMGHK\dK6T8YF %bj,Гq`OFXr烊(cX(@w$3y#qPgx=H.hSd7ty8Jr_bPY88%=JED`yTMA=Oqi({&%{t权CamYv튨<P1f9%5Vs91%aQ_aOK0'Q]:&b7d7e ‰SE)4fY|UU25St/$,G7`D}% ]c`t seڰ${ iRC- 45:cYm>݀HKKNWziLZtcܣאL}S g}q؄)Qd 'DFJ]Tq좞dX"w.bNސ4{w/@D4*ջ>)eH!#!YkM~j5C^94rW~ЪJ6 &4 $b 3)k5'*-~{#\ݴR{{eb 0J m0I\V}vNNQ+&6C2f4Ş/'UBdOVځtU\mMF!'QH:H|={=[MV~Q{=$1ifHp8e\}S,$55P-Pj 8kp[nmr,k ϫ][Yq WEncy&H]i8g'_Jj2<NI^1ю8̉X5BLz>>rLXqmhTc̅Hjgs$sw6ݜ80.(Az%yCt , X/a}6+dઍID`= vzW#ӨX 㡩@&BB ifDB #ߍjIbQ'Agv6M@fe`w|',]ZSr@Ct)c=(!cCvih{MsOrFy]f1I+'9N]7㥬dO2Q8 )ɖG}xLc^!6H#WxtO6iq̯R}y<5{QBȵ Xp5ŕ,>,6P$Vg˧ѫwGݚ ulstr$|vOa*ȗTaג7wQoP:±\O0RYk::ٽ)̾鎁(1.1Fу?=4] z?ߌk@{lf<)clb_LmU06IA@=]Q3Wr}-Kzn;&x0O@\XϥX]Vfwv8DzB&u]I+,? uc"us, ?0tK{8،~uHkYXo7|FT'֞4̨O/x< [!ʖG휇g1M\h879+#ď`<zRo2עnۢ L Ǫ"yq2+t0oxFlSqNl}-y%K"fL&s#2kzC -Z}4fm-v00揚j{e{*Wc#l^m CY*J]7j[G2SI]2a.xő$C,e J~iv<̐u),"7kH@Ѻ*N6mFe$'8hr 6^?@ Y-Y.'z늛;a#gVH7{芺i "3u_Ii{}).0Bs;L]{kn![/=^u|l3gvS}`R[uIIb`)|Kuywk묅Jo]TjA%bb͈\ -;s cMa̵q,;9[ 9ڲxזTkY>dz^wLn7r= 츹$ᕔx~|D];߮IzFFkw}=*BҤrѰ--wd@_zȧ3-aHdN[9:@D6P~MTV;#4h/bg(%M4b58Dfj'ּҖ4 ^٩50ךfHZ"8Ҹop,(h6$<9`r&a*>W/#j5'~4mYZѺ⁣tL֢5Μb< žذ*1Uț)cZu9Q:p.Yzn/Y PAky2g"z}/WB0"og~3.R](P&7[ŢCs'6 ~zwR\aF_!2lzG /ai@TB("A6ˇ D>nyt2|?yٴ\0c Cn@* 1maث;b \xqY|b+VkҬ͒< ~D2Bqwd"}Ml WILP':+.d"i"!\*g ^bgyS3?[;J]=d TGв/R˺D.0}5`Ź, ,ae3m22_doG}E@NrzhUPOFr;#u^*i5hŻdÎc|#Ϗb&#N b\$GпvFG3Xm-giRDтN&7zUkY1ͪG"PD!屴7Zd \΋uG-B8k ՜Jm/Z}-F$ +F0tj4A7.,JP1V՘s}*`]G3ߐ6W8:͡#\ɈB%+aBgB E_Ѝ9M"FiD&Fh62xp;:MdwvVV=ZoZQ!݋v[v!ߦ:)>FO8h$8s(H뱹z'l 87 ?nXmXu@s_S*;Ch_a\1VH`?^"^̈́:Ɣg"|5P^/V@\9QBR= -*6~tn6nҨ4u>?<>eMLn4Nghy+ң x[%b 'wF̰9D_BwD4~uV:UGzBteQo"52vb+Q/H9Hdzqd$]EusO'֬@ʍp٭5vR 8N_|Ck&HƯz2b}I'g.~vVHJsy: KxfWy/$imB3B4chnТB]dƗ*b+C5Æu! e^,Aq-O]?I~dl-쑲P0{HSd8 ܬzJp]H:HT ^cbQ;fNR=#+IE2<95|Y[ 1y&$^V4hAQ$UENy!a ӕ֜iHyS>Ga!r0C9uDεۋ+@s Q|O;lxwgp. ?G&Xlmp#rȽgVNY2z``%\ < JTw56ے=MK,@›KUal7S( ͬ2<хƴ4yy궲7Ť\VYi(=> $`͕R5/^ڕ;ЈAgz$i;Ӕ$~ bfuEIxCk-7"ɤ1fjjPj/)R4ghoG=Œ#Nly+' iGdv~f9& IkcXh;T*gALbO۝2 P娗䎃[~iN s`c8C &b7v;.zxQ.'d _$#\Dž +v :7XI|pf5s=ʞN_opT7R#؃K`jkst k+6Pų`E37b3I{ r8@e9Z!hMB2<l5=CҽV«0jcr]Yz[rEVi-JvNކ[Uk2:;AZ ԞqWI|G- 8&whUU]YUh=k)qPtOs_J6JBM亹ߐMÝ5*$A 䡉i;jT[C6{l2;ϜDI& ضETv\{Yn#Y@ Yzdse7~OQA w6 d*-[<XV oi: lg|fZ'iuRv E4_4':y]pƩfrrB57@l+" n1i|,T&+Can:>? jEǴoҏ2}4Ĵt$h5G3r.5xՖ:Y`3OzX,Hތ'㒃DqbAn _j/B9QoMA#X[*BL76w'F׆45@HɫwJhխ)UvR+Ņy=^Uk3XRtjA>\Π>klEqUb]:+ڏ!c VDum}ּt SI쒎@7UR𞧩HM2.DͯRP^d0Y-DdޫFEY4c 7"@,YxvqMJɺP0@]r#`|eE&~Z?? 6#̹/Uy,ᤙ(^fz#Whѩ5'ucC_at#>~2w<@` Z0ǘ\5쏨&k43His$/' P/AI./A"jX8195ѹ%*f#ȃܕHB]/ܽ PSirk?W)Ot>e҉Kkf5 Dd% r´4__B/%y. ݝP,;n,yU.[8k*į'ʁƆv$`Ưs9 w~3q_Y~cyLe@j 6Y{L{jyRO UGDP8U 6=ɇ `0A)p۫hJQqҬw5-4a}a|07r_|F޳&.-R JSůW/,{b2-xTRNl%akLD2_c@[0̱lBqR`0J {8 d4M:tJsX:'lxaĶsBL;r;ivOK.[HGQ 98 ibOLɸµ}vǠe6Ghnz!O|$mss,-ptY{!\1z"BhvK(r>[3Ll=^3X5s(Q0WX>"p06f͜ݛ 0s#ki3: k]2QA [!X t{x-PYy S;T#0*uLOԯgB :AsNKiFZ3jLiq'=O!{ Sj ځ,_e~G)4aIaC%Cx;O]  ,ZIK!46؂BjPTྙct䛟݊7C|Jc!}.qu6 NtHDP s*#e..M8O2E7 ,;A+⭠r _g;uǗe6 t$ME&E0{Zpdiwc@&k] @iSytyZ*6.:XD @s*7$NM&qc7  Q#i$/'ހE1:#L&aC$a,d[HNiяL]yU}fŤ]hMrŤH+Z_ RR p9[oZ׽HvJ&9gNR &p͙&8u>4?.tWvC3"vy4̞ |͉ryd~cpBҵ> YC݀%nxx_2ʛEF$1b`{hN@bkTc5_:YvrpuSbn3$o dB[=UKQhˮ %w]z(.d"*k+Y{Tkb~Lg5_( #8[rẗT.CS9x%t,BL]lS`ØJTqK-jꃕYJvxEx֏;Iꈌ|W뎤n{F[B2i5*bcD}a/c_-8>4q5|P 43 ]"Ieq(w{vN"_,sX* ,_#\d W㈱ƌ 364Db6DAM{AoBg\6!e|K QEΐɽi`Ȇ./4+й;aX59Xo҅)Y&|ʊA4Gzfv*Unh9|9eAkOhl}6{YzN7{; I h=R5H{HJO7Uh&Q98ZՁiQS HT b<sJv|M#`qiAT+ TS|QXWs9 {twyȹòG;L9/e4Y$Yc($11)5ce+G_{^j ͹"&#Kn%j;ܿf4|bo:׭g] } d&8q0Ñ)K~D?uI.:vZ, -Y ;goR OG?W*E1f6or3[yfwj-˘ʒY=/HvfF 虛*UK:L s9gޗqs)=V _}J \ߍb75O=wayQOjF)eWPJHMOd,uZUўp&M1#+K_Iv/rHC'9vf)&]PhCCUKAhHeT7β*(LzSh3F )R8>;-]l9u~gz\+6߳efJ֒t:LYDK[|$hUޛ t[};']ah8Yr A<_ ᫃DŽ*9]zL3p7Yl EGeSL|qbʆ*(㝟j렕5oʂ457UQY }P k;>Np0xB~Ֆ&P/ocI6rڦE_d+*6L|vbm^bF%dpwVyu@ _%IZ{ĨG@n0WS';kgVGD{Rѕ_y` ")KB(,LbCI6զr?_#ۢz!tPCᘥ<$rr(n{ߟ0 s 0opL{ad:;QpeIL҄wW exGl:)~+TfW{fe ƅ27 4aY(:ca_t X l~si[X̏Azyʿ1TWy'x "9:D+d e۹1V\l9YWKQЌzn8fΑ<"ExۑUHgh;龥s_%|]| .l@J{ ;7zS$G7 N7Sߠz(B(FN Y! dcVЯ`Tw@4&6Ii͔P@\UĹw_K7ם>jL>&+a!myRP(?3ON!F9.fx]#nٰ{ة/3sW?fLpX4\m /Y 'px=Q"" hnkUe MS[ 2;D$e[ߝS'IZp>6Lv]qLp}w4^l:, M;)do\+cxciPRNOY~]8̀RjJe) az^u1$ 4DЫ]B@i.z=<9'P"u<Cx:*:إ;tA=^ SKz] UJt*PwĨtLu] 8zLPJ[ɞdcB\'kS,eۦ.!Dh#lG|28lz< ̲eGk:[~hj>:7zX+% uy5C w$ |&x̢ܶ+ ؛lAB&i9:L",֫yc;~/EF&ߋPh,aXTIrm)MAZ$Gهdɩ1p 8PKʳsl.w3 5oӶ[EvEZuiN0_["k{X]qnMt5s5z_os;{B0~OgAi)o/@lɴbOOq}7K&D(ʡ-fDYEV 8moKH( L7֮\qF.zX3A 161QzcqNֻ7B'o!Q"aFClM8''J>FP8?mw@WtZT9.1le]q6켿^*ҔN '݁[O響  Kes-NO,bh yZ쐝 HgUe%ʖmcloI$Ixp.>%,Zg?Y{r2K3 6d[! 8!C8\1[v71 2/M4uܷ̒v&i xaɛ G"N,AMGVOyXݸ\͚VnFivqYBy6an[},8I YIQR9*%(]L45d9HZ 5JADʇ6ilȧņJ:1D>\mϝ7Ӕ Pފ8CίA,7?rNR/BlYYto(z˾6h2(!S 0ޞ+ AˬlMzEս lʋK)ゕ'+~&;AނWb^luhD 9B9["6d%%W ,5~jX7ꐊsKbYm :PoO&K^5ki!a*mwS< z^5%s0@QXh5٭"yf\*!d #^4} nkG̡3w!dqϜ[ jOIsN4Q~GO#IorpFBT<1VOmBX.F-VT;" ̵g>]婦In*Bh7Ռ"0]FK}\AhrQ)|`K=l˕Ф I-.)/W?Z@ZĤwYȘ[xVlcamD.8ҩexTBD˯sR]@B-A￵7r:A<ʭ~ndk~п+,3W=#$'5%Ҟd$ʊ뎽fa^ vSO Mb9iɠĔrC'Cjcop)qu/g1k1!Dcy}(aEx;D)7}@\bi$RRf7A`zYq.j< H?PEl=.2Z e>t(Hc 1u\O_%@pe\5edmO> E3 =}`3dÏ[ۜL1">G `BL%յ/QESRGCnvE:?E:;'(I/߁_eFab[gb"be|_g~XPH;}R$'P_CD ])&c=4|ZZ$^eqEABF&c_~%\ K%!苶ZuR-R2RoCn6pĊeZǗE9͠P|;mi{w<M]Jttyp7Jy=ɪ|&9nwB ͆S'$@nZ/tQ2~D`Zn$KSL'Bh_v̭|*@m;30<5Vy_{>H$6 WjFs4zud~-W˒6w;aB3lueB٩-uqVv-<'$ z v6AN-UBW_Rψ~FoO{Ze[ jSA JjXkЅyja:; Y#٧-3&%_&li4`k@FK tR̯d kz>Ϻogx.?M nBk!  PORG4CN}0દJS⬥9A:֬o^MTR ~3Ȕ{0]#F 0铬U 8zimo['bZAF,4K.VyZ QZ+YgsUF)]Mӱ'@M-Xkpxm!,3 0Ql~7ބ"lV!\ 3pI|,cTK|[leÉ$)5aTIϕՋmSOB7{pp$:Iu 抹{I׼t@BGz|$DTO c2Ud85U>e'Nv9O/#}ѐzC{b@CkU+/Ⱥ:IE=z6IT@(ZineD-̑^/%|-caڳJ1M:)Ŧ ~,{Tdڐ }%MW>AàyT}JYyz쭒XJh$PponEi&ym^~UY 0~V]bk a]"GPpXF@q.׎KUY;-c&!Npj>j`C\ѹ,{a5~|z~|4u|p{ +L$&9"rѶ0-;٩kh>;RԞn+a5  8 RzZה/Pɴ0v|_Kwg龊ٚbוV^'\eyff )-'qc Dn~+)T ٕ0qh 0p9DPH4D)uV I2BңRCWT<vK n.u{^2Q6iX>[5!J*7˂5` Xp b`f!5Y?b7{ȇ=tz@w;7{9鯡y.O;wҺᯯ:`570$Q;QQy}PX禛`MZxcrNX FRYX]!{Us>M6Se\o- , V͗/D-vvyއx"2^4:R5\~HXu=o]XhQ>EQPW[3o\Bq<=xӐV0qQmL 6$& J=A%GwLѶV"*:Hf1nnJ+1WFpTPid#*Vx1e Fgh& y9s([קrg5|9.<7Z4 bwɔqW ^v{3;icL#f@Y4k6[vr)!$yTFJWhɇ Ҫr*B ( ޜY}B`1_qo ^#iQjZvFgZ2kyRxZgg}9%CΩ/{/"#'N}~{'}ä}ʬF*Ձn"[bv66DտS?}ݸ\38a k42|@P8*CIq\طl(dЄ񫚳UW.?k!oX.GvF7j;=J/{Rl Y3L/)W,<:6ck Smׁᢣua|kTʍ>`L%/H%|d<$s#uyhlQLnf =cGn_sn94g_3e4dzLsyn =x>QMm[KETA@te=hr{z5҈YqfZ$ 2;qFЊpդBqnBH4 سi"0C Fh=oOD_poмIpb: sǜu4ۯnzMTѢb vGAˏVX#f(e BZo!̛wR1]Tm\z/z ?tb!G.4#2kݿvHa!8w@FjX >ܭcz@ Q]!K Z*· WY%Z| F4v-ļk%O:3q00 3/эJATvؤ yziˀ8t.XpLɏ- gNt TeGp00BuJͪ:d-c:(`$v{OMm_.2u2ڮ4X~є0^:sH(Y @X>LF,2' תGe()_;8]|ov?ғ _/ta9@Z*&h7ijߧRؓ`^vZXW.W7n ǡF`Hs]d o^AӨy_5lI8fHLpÉ>H ƦRc\ΐD>ݵB:YS7O_X[ݬ+@#>ZV\5)9s:4=0"gD9e JB0ڲ 2dm/t3mrR!;-P)&ܼΤQb<=TxQu\(sk4zIlty/]vaY#b,LfѬ~v--tU !eF9F xPj\W {z%mTΈDHN p\GYWUu#}~%~he6X;f.’oU.^8|-cXI[c1^J3R$K Rux`W B5tS i=ANm6iqMEⴽ2CcJje{Oяxl24HcZ@7~e Jo“{%ε Arґs}>/cS^dМ%.om ƭG)3琄 o?n1c(zKƚjq'G[v~p]r7%e?㖲!hv)^pZ͓Zh^ǯ0X{3hYDTS2>w1lcykֿb;RCV)S@Y4p2H­wҍUZosvzZ.}E=܏*P*3Q\،:zzFg=PY ]v&1G,m]zk]Kb, !39b iK!%~ 3jFCtX6vrlݹ`wX\߀[>zY]ʯqjMeg_>#ppa3eUM" E235Z46Wf+ƭFIh̙&GJRL T[8iӃP5k]D\kOMfJ$yK_zӀ6|N `,0>I.>"eǗa.<|N"3{qmdp P1HBb#3>p4HU{;D:mt 60`"MTcE=(-֙LhR9:|WǻŔc=UK 1myZ0%}Oj;MvTb|Xɣ=oQflmt&Pm/{Csv#wyo+q,45X jˁ+@Q:6L鰅$-],}9>_Дׁ4<Ɉл9ܨ)M=FH'.9A"b~S=h3oIsM KeL*}ݦǩ2jlIHsCpC"MI EƢ˼P*AφOU9;kH`QY-u;S>9HA<0Fyim>A6ױk5_ݮ]۱'ȡ꺯вm r6f,s dܩو'g.vCF|(+՞51E@}Ig^t$cAK^pӹRf7p|ocZÊTOq `(,oON05_R䊐ek!'U^@!W<@J- J?~h5 gBBPdV;MJ'؟ڥt.xZbxff5yeI7%hmt`ňOýJMB5Nлo.Ԩ@ r@yہ=D9\A]#|Rt.Q dw1QȿF4A ΑF5@90D:$tSfxWSֈ.zQ e!( q~_pOҠsFtuH5?mf-o r~z C.{Ic/ Q(Ӝ I i|0hxL.&)L/~鴧 #uRpCkySW=F+WN0q"c@DB=fyrHсA"shxgHۣx W.74#ȟOAfq͛o_nG262PKiy>J9m@SNǺ{=J:>`]eޝ,{+rɯUBzuúBozgqG`곜tX>@zԂe{Kj ˚qn&w2p"RQu,c NXeTu耑!o:"j0-EW#܆`_Ra(D#Xqut%bnsi)\B=qVw=xIs˔wT#QH|HAQ)My-D~[^З_vNf [D|6Vrb":sby&0Q\(hs[^x[cfME]-PDV$hjQÿ0  HxtA%0z<^}TFXYSE%FRHNi)K2SQ{F\I&Z-"ICz%_dg4q2q^3<6g; wXUw!zˠ Bd:<[/ĘI*'NU<B@<9QZ/o I.)J s`Zߠ !G%1Q=/(?Ne: BMTPJ >W|𘌦GîZIWȉ́vSv'b:0P譜8<ٙj5lqO4- G3q&PDf YxF,.D' mpm1|5) _Ǽ̊е>$ןZ!6, HTw}cʹ8| ٰWf={`LTڤ>W]fQ /ggqN՘jXN,u 5 { w&ZJ`Q~~~\J*{f+V(lC74\UGer""cN)"M~UyR Aܶma,ͅhSL]H>첑{2C(:xE IJ{#&%Fbfw9v8 [UT6xb+~v]d?tuVgTAW'::2$ "p+#@"Qo3jخW^% X2gm9կ)OGn=5#F0vɑ3Oq]ׁ|l댸ʥ_{&9TѐrU:dX&0IP44@|=։x ;QX%w;.x8 : ` ~uDqVI'_fԛ_/-Ou&E,I-m͖&-mLb*ws])$djO?/ 8#:MKAS}⦶r {nݶ9=|hþ*G\"h~:.Zp0- -S`e w IJϓ淼;(l0۹[8QmIw%g2j:a$!4v-pP]G6h g^fW2VL2mŎ;ULF UfCcJ5oLT A@7*|QhGI>92^Ebӆs?>P?~#*lA悹]uUi\ӓj&(Smh{83.'T< Q>>dw{ԝN{wׂ\0 ;~:.bUŸ<π]ﵢ~[mFbۨ؟N1 gU66n݃ˢY = $NOw Ëf:.yD N"xJшS[ߘ 75YCvA*ʐ9t<έSXl) yvS$ۥl*&?kɀ59pW?/Y-kKm}8l w26"3'qNatfJp"-5= aG{=`=oǦ&A Ƒ @] \v~~-_[ uMwr?! %j3ZH{tGX;dԡukhx'miZ$KÐY:4 5}o{loo\? :wOu+8F4m!؍W2D+=ǩC&Hn @l~ӥ-AFPP |pkq蔁TwI'g %!(@3d5ßl+YԾwCڃKX8*%7G(q*p2:X9]_ #UPFHSo2.2NtS^As`yG>6PGlT;Jm-kZ6oxg{V/.]*;Ϡ>w^_bÍuq^$(=m.s)Xr* `J1| 4:d^Qvb,g{ if`cZXReC{f@@Y[yMuXMrԷwp-.ThH6`AX?V.KX b_^\ӏd⸓9H.s%?οt4oQC?+ `4u.]ftDvh>.-jRDkGpHYR ,_*e/IȦn{o>MxJlasJjڻݿt3 EU;1nPBMc @c qnǐI?-[,^'> ڇoxO/L|/-T9“e(&g.{@QJܝ5 kr/vC)WtIX%8G/a-BῪ ʥYws_2qYt$?@f{జnH/H ՘$djiF?$Ay%\rh!I*6x4+O1XU#3ْ3[11䦹/@g2b`IW=[LJIc/ZrAT7"c!?q(SDG/x1eX?=fkm^mWl2HsgÜ`څXph3\J}g_P6l6bխ,yv0}P24V`lWnKJ+ 9-+<gIL*0L5029}:9"F'f&h: >8[6>쐲̓>QЎ||+KNh|I .G-3,C0tRV5o?_0t8M PQXl_>ҏ`oюNj5ď>m˞bwL|d9xOU ɭ™v3{۴pM՝[cdtɢbZBzo@*7?=Rufǐ *InX#,'Q[F ?Yj~eSŗ8 &a3uk.[[\GD VOW(>l-xbA Z-čỡXbrM-kTI]tb=ոe|Zzļ[ͮy9\qz lR+Fvy]e-0` &;c9ƙR <,\Mի\ QWe= ; <6, >-qx0-!zo) `?e*?3'P18vSALa!Q% `}4s;M8I#>eW7+{$TʶNy+>T 44tjs{2C~.c{C{Vnqar!J^kD̎w߆ +}}&áP*,MH 6p/zv~4.i6Bp-II~Y!$6Zm?]8gĒr{Ҫ4mr4ZE%r4i:\ABdg.;GCIcT= < l7ƾ^J m _d'&8 BJu ꅜ[&[hL)K`&nn%!g0H"NޒCW/R2S:93"!/=s[~x?!]]ZuQYc"$ =53NZy)x b]=Bb5Oe4cZgtmdQe0(lt:70`I^O&O;wtR_Dc^ܑr oL)OXC&nh趓YojtL{plC57)K4U^_3!!Ju"OZե:n6!.{k㨐&R'WgPI.$#Ou:7Kl q&YrT˭f@5Zǹ#Ic_\xH|F@H**5<+'wù轣)jmAAB[p IPH8/8T{ӗ e^HNس7B [gR## 8'†mE1`<}'NĐ݄<0L79M)tqb>$An7S&Ql;z|iIi; <:TEqu=18{oG y^MAּ_kRӗz(TieM|5!_sD;~G=d. fxb~O~o$s{gk6՟sV2/{͒sG1JDv{Y&EAqŀ;Ǻw,r< "w{qGf{D 0I${=QEլVY׳ܷʢ'DW†fcuS_~yU2"gQ_t&6v te~55~o n7ĸQo TSrjR^aͲD \ӕ`(lRx{v!Y|d,]0\6]'J& 5V)1ǙXdRD*:8gFO0L 0b{ݴ7KNm#sav}{gFXh6[CM;5agOA' Rm;"SK2"o'(庎>f|ՌHQpDqUnO Ϣ3a*$/]ǎ_ 1M+_L>=a.iZspKy9h^%;bGUj6<`gJv+hVh|A.l-vs2O$@:tx;(C|~G ){"L]p໮I%' W72}KF PbaSeѸ%Sl)ao*ϑc|t]Ѣ+-5UT!FzFj>@^AKy|rk4hXd`.Y*謱>J90xqh*TCm]EPRF=H =`fu 9pI6L' 'bjGpHT{¢4;cKR.ZQ‹;qe:(r5H!mc+?FJ''U,+߰!PƮvmsy"t(RRm˅Lfȏx@ VNJ\ܚ5Fe,6@_pX?* e/öpI'嘭_z\C>5lO 6/Ǣ¸,,0_J %vHudRc=AW.@ R_/T%lq,q{pt5c\L69um*uӢECHZ b%jzQOj|x+w$_|$'M;!k%^%K ZOl15g*lDU7+_Xa? 韤PJ. ނөf 0"Iy瓕y̖[AFI/lr௥ h&u\o\Q88#Z=0M;JD$;[%@6=Suiy(]ClB(vVzhNJ^ϕbSzW7c}yl'Sd*XXѽVͤ|75x$-WvTK5}Kc ?xpےdw}*NpC/~RvӅ^ɂ[. s17&x|5@D#,bj:e Ge;Nm.I.zs8v:}(3!Л*UI {z >$h:2n;|mR[#RfO0 >[<1b4TȻNg@v(igW0qe7:  \@D_sb a(ޫT{zx4\hs^ZK9P9v>nmpB$cWM@@c8rw7K֟&,fE(؄u*@MLPA1^C-Q/a1}EDNYG\ R+FPmy ߥ>o%:,α{2hp3/|c8IZTvHmb?Z QEŚ.y w0v*}هD̪g}a rD5#3j|?КjH8s 췿ዡA^䟓 _a/)}<.X47ߵvR.>J1M34 *Z{4ږƛ&(Gp/1Sà]o\,سwL>j&b`Srg{9y_ljsxޚdbnT7_t^nS7y_cK<[/?(z(3\$!vSƮ\Ψ Ns9& 2-AZÌ !* J%#ꔇg5yGgGl`ʈo;*~f=D[WH9hU\l>bYG(=͙NӲ:F=C)u0^s&TH[X>}%MHU' 4:j򢧊1UP; ?QUp|]!v- 9ly򰀈.z;9>#xSѴprpM"˘^ (.YTF;ӳ D=vilG_I{;ʷ\IVI nx z0Q2T".+'duF kI^\7^u9L4QZHo6?:c-ȰmBT W᝷)MÎ+x8vVUmT6)0Xkezډ9Gq Kc7b$UgP[ g{9Mw6QI};=,ͨd>~=%y!tEFnlaj <.e5E1ɸJԧjO 63?d =zY0Wn|UtfD%f.;+r_yoV*~(ǟ6 pKXL Da8X#`^ CLsEW/hَi+f)9(}pɋ&?q_.-8&s5Zcf9=G@L 2fuB#tx1xD;)D/džMQ޹,"5xԉ&rI CM=}w)L^ltK77ڷJG՞GsRuFG[Fp"`]'-׃fpU@SNE WKOfn?eio-Z.ᯤ`:-!(Xt,J3]Gv_Wq"zYا^'L+mfs5=&GfO 1"IDE{l,osXڷ‘GXu97Xx4Ѝ%U0aׄRb|W6x(UWHpޞ;}EcuLek9L;:C&Ry;{^{uO[3Ipi넩J]<PgqΛ0 [,a8+LC^)1Zz]\̷YH‹6ŭ y WF-YtX580SVS . \@ 1I Ż#Hգ DEl; :^dWsrn=Qu25 T|@ :>VY_k=xCHvl?ZwV2e׮p{(fCRBc>l0#\սŕ8h>E?36H:uѝ?L{,Z$#Vhئv`6r1$ mW0 S+7eW!RqRw[KGH X{J諂)Q'N3k/aǰpσCBQƂ*:˼\mH"%f`%#-$p 2^P $X:"mC@aH" R(:v|ZN\|Vl?)0|5N~kfq>K)=Dؗ  |QCu_ޝWNQ˴zS . }9ǝttc kuŖe^ӤfF' 'rH&2?9TW*SPY*&i5+Av!GͶHK[<<}}Gy[aR5UcϠy}A_SS@iv^}y΄*b{G\Ђɏtßg=.٫ߒNj_OB'BTobŝ܅M_[GΔ8 E̫DFWnH̒3% <BFㄧg g=` 6xņ.+õ)ؾR~D j $\6$x|ew4#,` 3yAP vIyqx4y`mfTLP";,mP'.q3fLջ]}< XNUtJ]H=7 \XP~N5j<|}g%m릶[Y}O@Nfw6}Aʹ8w?NJZX0Ue4 8 DGYPwepiO%ZYnjDlf(jR2? dq{ڈ_V)FP9,G|ߌڂ{HZE |`.mh YTJb[jY-wzpvDa+ɻ5, `52 /ꂾ c"uko|c)No6ԍ]3B5~}XTN}ddg;僣`ZW:9 X35]6 ٪V( Rx80߼BK*24TrfbЭ풒!RtaQ;{I&ޔbmSے?.R@/t +% ݔ&=nXa3]ó2l[CUC,@OɾwY}R:yΜ[Qe$ )XicgIzԱ=!b+*ѡfo-4{U]hkW`8aY-a9ĪL1_/`iwcs`mAA4;:[0Z|!(,NVĆuq@]H=n\7Vۼ+ :ŦU1@0t g'_GeOT=()?VRzguȶ2c;B#2Nj<<:Ň8}fئ%$e kzv ~?ȫ]k([9[In72U €#1oID#0[6gd@EݐdƳ]tl(9z< LVQT-ϦѰpNH(;tXG$R5U-)J]>;YU< (H]1A W^|>b3ya\Y;*M53O\t'j?逝[hT$6S~/d`X&ZgЫ]v`?o62Y(mzR (>=b2,fvBvm1}jr۵ 0H#vCŸ$/qdkcH tC.e>e趽~l3KĪ>/~U v'm{CmW\JA\[n>UzTB;%6(m[(0pdlya8i;fc4K d"9))$ b@W$_ɉEIr>nqVUFr?#T٧^F</:8ӗ3xLYiR(g8՘I5+f'rpjU!a ~cC_G+(GM>d0q/`˻UHx2H++mٳHiAف!ث)HjCGй=8h-V{G0_R`";omn) .''_H1NU^-61"q*'uױC +MqXJѣivBq" #RSk^{Z*1zx)qobh[{fJ(*z#xzJ?)75fK#G%1'rѡ]z^yжL?6ˤ?J*†\|syG"{꺺3l(J=xLHc_Njqz.*[LUUpMSͬJe=Z\|DۙEaEl3E>iI ycl!.pf4[8o'8h ILD 55lo+#YCɊGM=t h+t(lMD3 Vj;;+Eemn@?pp [ؐXcΨ[_%p"/ٝ ꑤ+~R@قۓM;6zLD|09v۵oPBe>CWƀbs t:$g&wG{=FA)T%HX_D]D4RfQI_=2cNF`0k=Ljgz6e TOuoa g0w ~β9x0aZ*gLŬtmB|¾B"oYqO%#_O_0djheh/ӷ,ӯR̺⑽q $-P+3q?T#VjuLrآ!`5Q qIqF_)|caf\~a`"PV:zTYI*\^ˑ&CXAwg1:"9Bu 5su2`u56.O) _.s`z/DݔX> G9T"X}0×mErL!N(ޜ(ʨa z?X*  JJC4v]C=p* ƞqXV&wؖ/d"LeSZt]Lmx? 7Cy%{#A6|MkOWa_70jiz`u4/y-R smL0#\F0jd4:vo-1' &l Nezܐ0w/u1[1Js 0㵕k]fqth'R_-mJRziZy2I{viCla:%q3]j\"M0Q]!ubDZ`Hrþ r7ػ<;dA:(]ŧ9{nd4zd|>bif@} y Oʗ70IVB/ s*,$7hÈ@!0UFi>= ±,\1:N9F-7QQ|T P,ΰ3@{"* כ]_YMnط8պ߄f+ ETE49K)J=VfCäJm^xlgSp"xD-M;Ɣt^,2ñ>>N<QSQ쳠;zfvH~en3{؂ ѦieÉ+ o!1z*"MRw XObVsU~wj٪\KKD6_NBn&/M䩈m|7lq~b\pp'WO*sX@:F-+w1u'9 5@K5@\o`%cwA+nWِ4>2NH3: q?ρH1*#ʽ,UE\wyr%pעf+1;CQ 8[ff GXf˽8//օtPvtypQic ڎSS^Ff> "jX)d*d<$N"(z_jNf߆]~H㿻gO#w.Ͻ0!!U&nczZ©e4X/^U+.=MoVyU}uCkP6~W Exapm?+/34. ;6fGY/{!l?%` /pN.S2>=rU t>G@` | k"Ub@cpnr<38_rM~Ɩ62 lb[ڸ:W^ Gp !EEdQ",v* ?7h}s N{5-#%0& (K] śWʠ 9q5RkcGѐKe[)ϳEYה3=N"xzeӱ&xaxO6 h֣q.,EW' *gUZj|ТEropLE֊i{*)Ks#MxpGFJUvvPURGCGv%<[kuN[k@ -YTsUȏم>A IfGĽ8B:6U0-D呧P=(wS&WI{Zrԭ5 dY>XY 44N_V= }ʵhf5ߑ DXi݃D30b1;6,?sʲE\`pCJzK;bavvG8ÿΤ)nM4c԰d{YoC#>IDcwyĂ-9BiOM2(B(/kW\M3u<٧3-1~=#+: fO۠󮜁4q@?#ii+syꨛSh4V |L/]2LנkX(W8Nj;'zw O9b3~|b$r>KWDԊkC"@@n epo𪹈8B,6I~`c1,䙰9G@R:(+"o8m \J\1X˔m]m*;4߅sWނ/C 6PLk?e|;.;C%W)NE}$,Ep:q5#= hMnvhF(д^q<|eDmvnMhI Fef݅A85D.7|m^JZaIX\'iX :]&iy^&1%U쎙nLvւ xp [W$v(o޼X*J$mD&% t*c$Jl8r,.+c6eS.zK&u#J 5h fk #oB}2!}`,| #2tر ifDPC󷽟=r'm8l%|œEٍ<զ[7wg*mkeSs"]m rAc /e*QLdH軗b&{Ɗ!"e3e +/,й3H3.6WscW[*Ws2/>Zd]dKΛ޸SKt i~f_܈ZBv}BzjآRMw-,V?+mX3_P D1[ C΂ wAڌy~( X_RwjIvt%I >]~|U/T6נ3wN#?Ņ؀0Eɢ3O/.-9(f=IflcC %%_Vk[њr5q+'GB8ޢϣ,{i Ba" UhVф- ͅ]2{ n\ºTËOI=n x@Uko!9d*C ;v0O䋇 ΕK)I¥O?2fZR,ax2嚬`^ۮ7dt;Kt u)Dy\(@fpb*PmU OeP|'!8Ҧ gӮDD]JoFbm޲Sö}gU{UXP܁v %uN+D fx*D^v]֖uӬb):bI  CoV'WJ%58n2 doF[ ?Xp*VwMqSYk>xPEWd;$8ݙfcxw+7`/ȅ=Ch٫ěxߥЃOof  \ðH޵M?O@K@7{Cbv$솪?tvb Izkz?rץ_1 ﴛB@!!hu/p*ZL}z|Nxjewf}kkbNsd #KӖUT\]K.!g(7~1ϝ9 D/̰ױçy!&JM X):</9gNo_gHc6 3#p(1(9W/qi;Ôx!婅[cKi*܁+l#ogGsa R=qERN^J@md qjVA?I 0/;ƃFˎ(Tg&9LmtwHH 7)x\AB,Iu?=/czST|g=}mfU9VQ &W-f 8r'pۥh@{ݠRd?BҘ?5z<ݓ|= ,7~"]u3\VfUV aG1m v͒jyC@g6`Qhrdv^_g]ZjWo{Ёp[D瀉]8-r m"KпnPļE[?&rHDs P|+юcUԐbL ;b9H' XLNٹɪ<#hG~[]T#`?5M?9 9@2 [JJaO!*ʑ[52#_w-x'ZvT_ GJ̤*Rbfƕz",óBT0pAhJo1t@'K/l wtSS&cʇb4yJoWs[86~"r^gkl_^WBú"ct&lN ?3kQH_Chy.%@<Kx̀8c T4 l*ڃj_+/G4t>;p#3+8c?"b*ՀB1fCw "rSʿ\0SJNsmpP\Y240mo*J@Tq-SmBJ:OtiasG"`난̽}a&tvX^ Չ[9f콡AKq~p3/,Ź.Ά܄l3]nXDN~!m-bKW%wqGrpG?@U}TiQnhm^T5LT?Jm*dXސ5)9_ ϫ. E/m"/-XsGnFo90[DRG"owڷJJJ+\\Y+cVa$Mg*ڕ+]szB]XS@ԥwjVK jGY` g_Z"mciV :Px+dllR J%}b~6.9B#{k?-dTM{w+~##`=SZezZl|RֻuDP:ϳHV#=A8%{="PY$ۓtwD $r. zZ@'CJ$z[лyN,™փ%ݖ1yгԞF5 :T3rؽKg܍,AD *MƣTYJ[khECF`Mxa?Zӻ|0 J[lzRR{/ C)&SY\kU"3WRE'1@ xD*ۖE̍@ʌ`Q*{mM,oD00 tJr&G !JsX:}' (UeWGo^Rl{1bNpZxK9 C /dNKvsIEf.O΋\P{Wց8fctǛUill F:WsfOc6M$F^QޢB!%*.I~&oǗq(\pGH: [KJe7>LiwKHԈh LEW=OJ!"@?+hq"^&Z>P7]|R׏!b>!Cx}tr?D"3Z~E ~R5R(_Uy=g 3!oh%@wŲYデ˅y\#s5r/ ߍjБ/qp.PKw 0# Cc\5+ќ^oDtKv pu '~?! 3imõ/ x(RCD݂j0A]&([^LGeԭ]{ -BA}|BZݣD4ZZQ\",GHF0RXi&)+ 5d$50 zѿ.Ar+H$F.@9-hHB{p(͘ЕnוC.\KbDT~@P &z`Kɻ{ H$ZWg 08K丩x_^}'&n:Ƕޠ>C?:Նm$A#!-eTFTp8;zqq2mwb2+&BPoLpkragKC3 vؖxM%PK5 |N_sۮNO4381pg߷Nr[DC¥!,l `}욄Uox''^dMNNǍM?xvH4$ÜGA߲F aEtD߅Y !Vmɿ f*Tzp]*xe*UȽ| 4[wd6w? H`ź\-fN fB<ڬWX0ZI\3UL Dרl?{c'@`Iz0Q0GlwAń} 6O*蹎iq5Mܕp\nlrcҭYGtV ~}n*cufPִ@7`,;g:=:p" |UV77/\?8;RRpֻ\HHyJC8܉HJl(av[, 4o7`+subQ+C.0 q R@#(go ZJ=IK;{h=eL2Š\0ރAt:8 t|[wRu9FW]5?w\'  , V j,8g1D_,v* j,G?audO5pf%٩/~yX2.T/ K( 7# dzԡ^=ך -^EIXWp1b ;Fb+S+AwOyiu_L 6]⁢ٿ=7Ew9Yg9_u?[,{OU3`(Yc`ʿ 4^7dGSE;/bհE|2%C !\BJI&G˚N-Q,3g٦Zؙ֫::{׍gv $XF()[+hd4!XGSjGizk ʡ;>ShIؕ.*ܴT^W""4" hkdtb񉝝-WvebM<ڬ(UKq;(_֊*2RPzbr- aJ@`A3T Au36oc>ait 9Z@|!]J־We(޽٧D},PB>zӦRUa߃zV흥A]d?MUƐ`{@qTc@;O3QAΗUA{;R>0zC Kg7gmS(>_Ґ)I;CPDCG gdQ8&3%|ommˀ61ur?(/B〡çlpa Rwuzv2Z]SnipȮWC\}m- r$6SM51)vW$E|") ?>7OkJƆTa| 5ƫJ[Ъl2i</3!Б p q q>8/OVbWSI͓;:r|T9_wtQ iBA@P9 }4\vEYyBl8h>zXcT8!PxmQ'5(ؿwUl,T}liwkc)wyJ}-.5 / ^ B91-=YGGq/Nn§ L̇A,>$*;+u_ -,c TOK4{^~ӳ|z@-Px_ž>vSBzj*ChoO͝c !RTD -oxjhF3_:@׺P` !U'+5.ں] \uAb(ۤ&;+ȱ7=ҧ)Ⱦ9|#rQςo7a@Y1o/DooCĠ3ִ]U^g[5ƣrBh axܐ\"ǣFΌܚ!B%co󞆎Ns8øH;~φiHGP 5@DEwx]@"5 _b#f@1Ce /|CK4J4._ ;Ɂe|%rt톅 u/Ρ? sUmےF̺;l~6Mȹ=Gq|ț1أp2$4 ]k],}}3~-Ql|p!txBxd(u86t shWE0ˈfDΌ~_*䴫:uG1Ӳ*ف=aEķoтT3q"Ƽaߝ4|Zh)lbm<1?*ܪ:a=tFRa~5b0ݠ;| PoGe靕{q. h ;|U뿒JlM:kv{,ㄡH~"m;A#*8(>^k, H]G) R2G&V.XB]/mQ`Ն,c'+:O'@[vnj~_>wĀuY?03X: YJ,LT1 4:k+& la߉eY[5GMJj r=.po.'F!qkxBkf*¾{;LjB Zslԯ\:ܫ0 tP"Օg|wPKеNӒl2<3{`orP'mR:$FxN3yngϰ~5?_#s\}' 97K+ͣGW6n>T9w{i.w!8 z=9{ ",: wyPq7s#O17t_Qv -vyQ1L{Pr:i Yt| x"f ;sޙuY+9泶6B載 o;>Mr" aLmHĚbrpq;,PGQC2G/tpILFԜ-D_r {uT1MKIdX3'>{y.-?EUkU˛~<sgVx$0 'GwXVkGT~ItS1_W A4,3,[{)o}'i >s#˙EjtYqwDg H#{9-=c_8 nŚ: )tIHSť> !~ĕa ]` L_%L+@tH=4eܹC S ?˻&C-Mc4!.!~׻M]: ÿq;pb aVP|eMydtM[4ͯ/o Sz &DgL "* =9+>l(ܫB<Gew- +drf iWkd\QGTrjֻ׫]UWUQ#N,.⤌c[ҁ4PNpd Tݳnv㊲d p&1QtJהU[ 4N&Cask"bFzӜEs:ۘVWG !'QX K:1I4`KO#s=ѷ Wxb%8[oF`*Y+~tf#6Mz6 ,JgK%wJSo.<r0F߮|ad(AW! ,@6nm["Yv5 n lf$ o`sPTPE~/]a%C᪫ |]jX_@QdSPsb_/tI#$*䣼7^eb?hQ~Oѫn;ڄ]J+±?ǹc4-qPr>ǡ5[~mA\4cĬv6RM&7_Ւ>y6'6EgCԾljȹ`\ 1. Jo!Z k:𪣺scbQ 5)\?}n:m`(+ezǩգ^$Wҽlk #LIZ@+{;e{䠼Sz!i2םMu*Ǥ6AX -Z y֡s;VX5";|U :{HbsFе5!r sY+uyO;ʾˠNnx+%ѿE fug@B7g;"$UÉ˻pkxGqRfZ?{o&؇Uh3C=#?jLVHѢU/ 5Hi=Z{MȀM<ޑBîYjYA`ovB^$VP?kCsT;c‡=>phMrωv\>KGd~NDjku޶P^aiy'P`fY%.s_b9dzӈ'izMh]lrcK,ޙܱv%s6*S=칺.QEa(-ŧ&^=>װ;%,GlLjV ei/e[:.'!p|DŽ9]וLoKKMT҂/"D>S e:9 T1uM[ԉ䃴T9Ń%s@ȵCT >FkQIlZ@W[lkч]@+&G USYύE`)hN/bҟKFT5 N^FTt' J~bAZ JB8`{"BLTnwI凁]ҦZ?%#?\9p0~ߡi/tEϵhե=@Ua!rgԈەӏ\M NKD2p}:k0>KBWIU${PEFVv//˳m"0X3$XP$/ctla㯵 ,XoemH& %<@/ޘG`ހp6k4,<צ:kRc^\i8ڇWCX3_ln_"rUWZjcSĥCn8Mln NDexX(mhX5{~?q^ coH/r= /#}].[$n")59+%"se3?y@yӎb슥j /KT xH-?NXÖ;Ȼ]%RXMQoU(: ہ: 5v{GbB/It(1TO=Pʪv|Fl4*ԕѬpL?QIf;oTs|9ɩ9>uϛmKe.o(uj?3[. T 5ɼ[郄B4\񒆦5'`nC)e4E j0.*ί5PNϛ~fcniV݂d0F #;蛄R"砈@8 b{2NrP/@1Jq 㮌D~'k!l zIʗDQHp- dzⷵ= /RbcژiA{PY׊ #gFkK$]臟( [.v )ГPL ,ѽ.&a~MrdDUFnRpL-Lh B; 2Gopɟ:AZ"QvM?3E&#Jª;W3K&5QLXz9[+$u[`ʹ:#"ҍS#j,ġn9 pPWq+?9 P] !=:' ^jalfMt݅ !!n6cڭyr(4A*0"Ȫ[B7bFzWm;W;xXMKc$ox ]B81;R!Z\r ޜ<⿀6+HE]-i P{{ হa % !u̲Uc†f#Bz/ ,'zM,#ݑW5M^faWk/T{‘Fv ]ZՌЪ'NǾrTRdmcnsoKmYos Ho7h:h@OXEN2MksV6+<β'F|3A(o\t+v]Ib F|2 HY ^-;fLn#ֱc9lgf UW 0)@WBPI;D!cfg4Q wlĊ2vBa #!h4 v"䫉9%7n}Ʃ]Ӕw87]gzN~0cFȪdHXI k9J#v+/se4s򁠫v};byO|9hhi&ΚfұQ>4opH957!(ěheb̧CJ7z`<} dИsc)~o\4Nߢ;+ U]gRe  pZIvƧNRleVb€  {/\9IeQ]aL|N}VJʌ'B>22q($M "furJg?qIzb43*,Cerh6-k-ue®w([M,BOcވHqJOK u.$UcYeǘD%SLˢP= ~!N|YBA()#zvйnLNMT  -w&rVJ~)ڠ!RC5AMf ޺]$\*%%$dF:ki-pIrjKx:򼃊P7]ZN4vt_5ƳC&!  `E,*3T?RU |ؗ {w0ET7,,Ì:j]غsm.&KD'6EC[WcIJ weE7I@|\T`xpP/6:b \Ϟ(8)&hb}#چf՞zD=D nwV@,APG'A+cʀ;1x2M xO8ՍZ:g93(X.BvyĠ \6lSG~8ͺX=99:~MV*~]Sې5pfDe=ih;Q5aNUt8 b,8'l҃[PsY,VK;5MQ$>UJ8Ƣ 8$ܴKMq" I8:ĝ e(cso\eTߠ;MyH_>?Lqʹ{"rf@ZEͨ R-nZJFi4+B[=۽-^Z#ʼ1F䦔^(_ W\]870+Ep2c*>.vġ'muBZ3  ')_Ť&7\i- Eëi+j6g@sBf'1Q%pck{s)}OWIK A!IdQ&R Y4)ߡoGM9?[g@zv>xZ]Ho}~6p%'2QRv$٤B"G$‚Y$JiM0ڥf9!{f)D!.O#qAh'-/=?|av*R + mXsh0 };3{F($3?-M7WϒB2;Zyeޟx,'QYd`Tȵn֋ .#Q2~?GH0nƈv`/.{gWR\. @\׍dĊF'<;QJ۵bPLc?\^f.E/=Ic=]n-CoG>C‘mME}n3 U+x=<'NQe%&dj3f'O ~ "U^+RC'm#HI) ˽[Jyh %ͪuyY%m#%C?asLM iϰWh V!껃X鷴t8(h$HC pϵr5p2 ڷ=9 1P O%i#R>3Bsp}MhE;+Wd8o֖I=yc~[vHԫ/JuǢhR=jТ7N^y;q(,ָFGj>*T,0{0Ot5@fo 9"#x!iN,sZ|0u&9" 韦iy8u4$%|y/Zzp++ Q8Jrf((ËڪpҜ7vNm[W#L%!6"3ڛэIg|>)H7!6_=!Uݕ޷38-##F#ehXhf S@`KnIXFzbߘSv%7/(U[zq?EA_RjRVk6Co˦gXmWO3/䗗"Ce jVőOR5QՅ=PuPV|Qw:qF+[q}rzڽOeaN+-O7t.k(-E)a_U9,̚c3E'6~GgF Gp\<+(լ4^irwy_ŗRxa`WՖ_t~DѴaNӇb2WTp;jw&_aKkRʘRi/$&wLUӹ:4"+7-c_^tX`{$z~RH<թ}雫=IdOlTvC(2dpq~=؃_`9iJ{#*Uhc)H؅g8-ibmv{6뻷쓉Ҹ6d!j~AV7ZPݤ0oThbU-D'i7ɟv`&އ+9H׸)BFSQ!y@3=GouQSPBɁѧgFKsBiKZ>;fG괳GQd1ͥ2>dv(9ZneLxFȋQ^7{D[p;pO;B+2d9vd0K!%S;Gg[{ץr]$bNK*caa80S|Vb^ifSBdDA΅X 4dyQ}O}ƚ?kp  ! J=qgb}aL@zS,Aa 'l|>f]dڴ5S )`L(*̂F~aiy%RTzM.|BQE!8 X2j TiP5K42t?!]^6PثlV{!?k.IGq A7PC"(f*P2RqTҁ@ iҍg^ DCvv$"l[[ jJ☭PUO=QcxY0CЂUw W⋌̤Vˉ.T[?8|>0νWˣg&.DQ)7=LQUjl'FhJE,D(b*$AL4rUZo $N}/]sIe 8u+{5\*MEbtQ{'u(ߦ&9ԑ {ȭXp%Q󕔊rS6K f 123cFʔƒ$l69^mbG^EoZmOR5?ۄN80ԛIyTfW`@ u.cT24uy%(zsBS^CP+I `/Xڈml!RjK5: L Wc< s #Xyzt?69)6֕=N򶰦y=G&*e. Daal(Y?! wښ7 8kߩ5lyWҢrVk#4~< EqbWe<[+6OVX:Ti7A:/äJ( p v6<~9yT~T8؆sFʃs8&/S N;i OQkbZ'h% kPK'p)b@w:r3LhW@nf ~VSRSӴyj(&elpmzC4{tҖ>S u_{lA&RA|fVkFS&{ `K텾h>ڭes d%K_G8$ ؛S< o[y ?JЇ7Kg[\$v`RI#cv 9a^ٛ HQGe#wk^³Ŭ$9ɄHwod79iV)%bY mB\@͡  ׌x:BH<Ϝsht_!ϿCcGu&cAEhSU܉ Tꇡ}I{~{= D/| ݪ7(j쬥 W#a-,͵T;d҈A蝇{!p΃5HcjC XfJЗ!TO6Uaj Lt$:.N(No a S[ƽ &_?%Im^^ӽ׀`~ U0t~;mp/| `!W?t}`[)v ("6A-<_@F;hYTR)=HQP*=3H۱ﮪWeTy`&u>nj L buԶ i%Q=5lB[{&-7mI֔>gspbnys$_pOW1~YF8n207z S5z^HK+ 0gխcuW$UNWj!J0t~)'$o:@?5f/D4M.("} BVu>#jZSzaOb}&ejJ) A hv*2`ogXYpIمBբ0:` wݳm:'PC;Xԑ}!r8.:008]b FI*Zk}-{PJQEq%S ~1'4rizhE(j\ P&=Ar%?gpҭ)'a_0seo.g][Qqµ5eR}]^9HuM+3R$*@w4_],Q֯g4(oJ0*a~}3gy-d";JfsL9BrNj+]bu8c•mN嵁[!ZDS/UXՀ-: k $I7IUA ٨oA0Cwϡ?"+۴p5ؓypzHHʯΥ$^y-k S73'{г9ɀB>;l!H\.V ,hȑ+:sJVLXRkK_j:^;9՟>wf?dޡz@H vGڿRܛc>^.5Jh937gr?ʷꄛ`&UpN:"n$&!WHA ^YxYEW$FpzҴ^aX\?@2~vldvK2ocd}{-`qP׿a~{Ny@J? `IʓRm~j҉q{fD}@0yRh߫ĞG@0=^u$bb;v%XB;l5v Ǐc"ݿի?#ou HpQa)xY1r2f(ʼnSR dT= /dA7!MUY_R(yʹ ,$걏BAq{rwyhORUv|vUfU@ҷ^UBr o&#5PcLeMĞ\4/,΄|LIK>cw(+W KvJd67([<О0zW=,Ԍ_ޝ0Ԕ{aXԚ;/jj^0~LvU©2P1bnY2mQQkIj,9J 1"vA+?ỻR]6̍f[a}5h D{ȜE9n%b8kgmv-ew:ΰI+' vp*$&#礳HSzVR|l@ k5Ȃg%9sz/7wIu3n' RB7.pbBng=Aq1QDv u@l :c hSp*;m=\J]TĽ#D-//a^$lŷ.<-0إO. ?,^P}qe )nM,K#P2&%B1RxB0bR-Xűܫ0qY/p,=l,Fms˾!4ƦL1,#@UqhBp3%,]W0tdoQ2\"}olТZa>2ibIZԦdaujĶ+`R oDžͱL߲T4㈶*U`s [/OCNg[^αo؁=Hɏ+>؞_ep;u{EP>~ncl.6*(8b;Iΐ!I͸sE=U^X(ZgB2WFBd);8HE%=랾uWS4#]e6ZLx{RG,% Pȏm'} MXw aʟ'JZ~e8ΰC)?`M)1, Q1Z[W@}04M[V PoV|fLo PmI柴^dR$͉7s#<ORE0AzƗ?hnf̑ cYdA)4;3&AF5__`8=?3!`r=\v4w!;9}I"3&)0“I q|C}UgW$ڤY@3Õ%*Di芸M*=gHn4< 9 mi".C QvwiVL`Zʦ<$K)ja\% %.3\r. Op|;ʋEt Thك5 ʛh$wj>~NH:!FfC 'U7b>6?֪Afce2+Xr_A1%1aU5$H;MK{gLw=K%bl7aRGX +gN}8k k]?$Lйܘׯ>K Wzp+)ƽY|[C'DnjpDʾz*.W;>'68ۯś s_/qȂ;Lv&+?VQF՚07mX^Lf#r^tUxW7惽Ԏ%chw͢VSZSOpUN$R˞"O(\t\AJʀC2fWXݷ<2P ݾo' [zV,+L>:;3DɊ{ N`I%R[U_$: وqybptGbndZ)jy9꧆dRq"A3ϘSWAT+)&Ym/o3T̍#}Z)n  5 3E_9yqIQy 1+D'0GZcs@'R8#5k3x.1Nh`9xd| QҲڢWIk t_9v^m`ZpPvk|sJvq:Ɠ l@On1BkQĩ#`{4߅0]Q UsTRH<\mtqE-{M~@85&Owh=Hnr$_h߯T0oLAf,iaL{emo~H+h3%BM[S!UB=Ӏ)^ Jbq"0-U{.0>O(6n5Йvl fYY HC 1~t"f|q6匴# >|ڸLd9/Q;vƐx3y=N~MkbģNpT\0]@i]*Xhy .Hg3vf ;|C[=)kv[Y 1VKE?}.{MpzWz*~7ϭ7?Ax 0K8݄DeWh] h]L0̑4 WY ^boaNpP_}o^"$W&hs%pIœTƅx <\*UUQԆ'9(t& l=\PgppliHQ$KAWP]Gx߼L89DxR4$HzԬԸvh"ѕ#*n΅چwhjHBo>XRIkW U1R$] Ļ. ^r(Z5xߗUDЭ/Q}Tĩ Ù7uj }1N7ds{SgemF79nw6 SE*s2nd p885dq!u[_v6,w9pp{oV$/c=J5%~?xT\]Aaߨ-'J|`ny:sk=lu9`3xiUnAqz}GCI=t6t"*n)Nyw(7y t@QNmCԊkTDk-ljPν54ߴY`šDK0"Sו[i'R8rL03um|@  |~w(f-L7A#G_4)|,W'%5jCG4~'vJ,я\9E»ʏ l =p"*WC/4Sgg:-S:E"`Yl 6-xe{3 O<\ty7wĠp"A v7sl 1+#3,^(p.x|f۷+5tm8|VYSDgy<o5.{O%끠t =kwȄ;H. #dGIJdql#0.*m!cs*Ղiɉ"K(1,}1TF=TdeF*=d}$<5oVɉ<7U܅ -7g >$.0c 5mQx>M)ziAW36?T2ϧG5W+(ug:G7kրQa'ee N%lZ+3H$&gxA, ЄX3PҍCOZd 7HMn-~#3HX8`KDm7;QVڨ7Pz&#aKu\I`:]OV['$h{`M\_3hbԒM [x;l:K0WXt2ŊG=à~qLr3-Eb_=E~#!Nae,"X^Yu~3+X+& 7$£vOn9[4:=ր4ޓJ*/S,>T+0;>v$$/K$K<[rrjbQcF%lBk1)6#u>SZuBauEs4 ,1x| oƆC5e̸?gA ij7[ȩpl"a%`ÖMw3>:pEߪGtyR3ިZps(O"'TL LEK 1]l1Pپ|zYL!(y!KR1Kw ?cjZ>g}L%XQԩʮ:%eHQN,ϥsi ?ȣܔu }_yX2,B}hE>FAٞ3bwȣʋDwet= CS/XRdN :i)!h -Wȩp2꧖б=;s|VxtCW+()ik]ϥYG %~}d>pbS]Q`YW8m8Rf {jF@cU, mB bQMg$/_L\`3pg!s%>o^`bvԲ[ݦVQOy)0j>Ez.oQ[l2MV%mUG=-}n ÀbKhkEȪ73wSS̏ɱ~d} s|ߞ ނsũ-S n'>O7y2@])+24AY7b O ֿI6ٜdx~ÍMIOYw|J$.uSQ"yޮorBE̬+o Ő_1 &z7wd݉k% (~)l[LVh`̅MEb@AMxυi?㟠!^7Ǡts_EQ3%vDiZTS޳8h~oxܿ 񡼢#),)2 à צJ%0ݑ@#,ѐPJeq=3(x|K&gVhF/X17Xיi0CV˼z Vhm=׹Čd޴qŎoai(\|r ``X&&}=U"7 U_cU"[V{/{јɣ-*/ . ܽFaOK!5>)~)'eJ (Ƀ{- *]*懅9 aU)U++#iFLި ܠh2-­3%s>xW]>OQ&GђsIQ$w7Na n.954B-㈞!ۼ;ÖL~YI Cjscz>( qm r-rB m'\oiƷeaypCqXV =~IY7s+{{b%좤H*˜ l;ijDǾSZyc7yӦ(Ulf%) _1pC-| }.=_:Q!BZ}f Ļ9IwgaV12ϜYYw>Ӻ#p|$`wB"IrX'qC'mHz8IyȐ/%欄KWݿB=EgWIaD+WB4 L#qX (ɣZ:ӗ~%ճ M 5ܻ0b[w uYi ?uRQ=fma&{[Zۇ?`vfMAbfVMBOW*X<.+U186\JiHD^5xO᧫˥4FS,cp(4[Q&P;tsE3,6E$P$j`^d_cg+oGKWA !q:wOF8:wyA;8~}UxGF* BQfsXsL1!uB%D"SaB$tBQ/ ݐ׬$NָE IDpIH_K<Y^@ꀓm(8xJ=BҁTX3UD5-&qa ,xze*GTwr~PCqO#~,B `99[)fÌq~zML3\svݷFb\'N{G{=ܣtWIt*yV*AZK#;bq,b!Gl}ц!ЪP{*E6LlㆸH/g!O/T:[S`/C 'h#OBTV jl͜ 4)7*wQPخI/ʦ٦ 2NW:T(=f5cLiePnj8J)ړ.u6+g25#MHm_\ƅoεZסxC 0~w-9X8kܠjk!Z`%e07ZiB31/%kp*mz`_h^}B!L{ ӣV^D-a_ꊕ& WDkךup3+ KQj tw !B*^>͐ZTn5' &żlQکy`]KqЊ&L<2n5k:qҬ wR~2S:aCS-J%"﯊AkV|"[@bȋ&d Nɮd\1=^Ud,/`21&6?M7 -[٤!#~@Ăun f}#>ee%rtW_ >rQ=Bw0} "X$wVAz QRo*2 Ŝ> 0t#1=WQ@fPثk ģWzr95WBv)hV=X"u,v_YNu ڗD ~C4,Twz!a=N CnT'IH4# ˆ-fH û+ {kCeֲ2 vYaTbsT v`UD8pe|VEŶggs^Sh8pGb{3e/Lr'Mٸu|g$;`3x09X[^FXw= <+)ݵS`z*3PMB l&0-Dghr,ZNLF2 $}I$ 6mxb&V5 T6}]sZ#|e((aIJ7XX^)cg_3^p >OYSi&%-Ŕ4ڹ^0JBoyVTVGhڕ 7 2BF;+Cm}f?R)6'G:)uMdӼ{Q NTi魁ΐ FںޯB7@c*LNYeT;nO r)C0g>< =RH!S*)<|=~5M}]U1uC@o3Ɖr4lt•E.53OlMeڪ Z8x6xqbL!,^Rꬹ ' ݥ6:9[_c6t-Za [vo0ލlkBo:Be}+%\03jM1#Q % ljARa\`f 6W5.,r+5U 9,8{z\~ɸy|s).kd5ҕwU`ػO3"F*)/x=t>Y 2%cN櫈ʄƵsY{go(oь![f{ >?_:di“!ۃS) mT˶FܚTw0&i0g*bK)8:A@sFmg>{}6t:K3"0c]Gߡ&3pȄ% ,LϢCa>q14&αNvXFpʏuWzx<MEv]\-KO1F(TbSMW|*\3 F{=r?fŊܫR3y)뵻E0wB9\h:4˻{C- `١E0Hߠp }obi|QxAh ]ê6S֬/v<o4Wx4&(oXP_Z¸E'{3ܚ`^sjE5@7+*?%wW{]PVD:v߬wVVQG(*閇_`W E2l4-JjɂN?$DU&v"_s}8jߌ >$uNd8W0ˆD490 3p-Tf}p :q|9}\lݩX߾뾮<"(fz]X! pXȾq79]ݜ#bi>&z[O^# sW\sDnL@nF(9e Z݄+iSiYrvQto%"% )h>?xq~pExxND,0IG}]|Q"4\m/s\& }HCB/oB-:wf yJk8xͅ cM@]ӿ̺5Y; iե Nua8LIBmӰE*n $MDЯ:cDZi[!K0R,M')[Vx= $ e73)Z=xyY=)B((ܾ⤥MwlZ~aBɉSi#5DVRNu#E#GؐgԞC; rI1ya wZy]N^+q7%b8RP V}@> WKGڽfWXOqQ/댹y=` ;b>7j՗#+@ Z Wm)vh~mǝU:'cdPx"RÀm9jrA7M>۹^ho mA39 NϠ5gY TY#E_1Q~ObhxMgmqPEK8$RQ7nL݊ED_GDlz8~`05^s>8Y,5 @PP=;S#PJ ̷&wNc`mjh_GYeMEĞpSa&/1m7lŽ ȡg6#:, S^ےL>GsaEP$@wW0P(\ӘՌ<;}$/*+ʫ2vK- ,hol~A;̱9& Bj5;Rk$q >c#wcg|FR{Uwh/ |oz,*9V>q/%D oy}XM3-~ovӗ=2 4ߧ04R2Il˖0ۤV-A:Jzz2$<~B)DHV[y Iv) O#*@`ZL<:5u =U=Z EOQ\ZXpg+bRT`FvٰC~Y^eSCD`)qU 9Y,9,-RAVYYvgva JH? ]/O ?(e^q zf2y +I_ ZjCU7ղ焷. Uh &1E0=OrJi}YgSDo:=' csK]XC;>GC(&%i}{)*ftr+F= ɦ D[ƘF?ܣdE/I.ޖ|?k kЊ%ֱ,_.a'Fƨ%+^E*(|;J Ij\&q8y9hZ {|8CРeHj kGnobii{$rMvc m͌g,JQq>2i0gY_@], 5DД$!{0n)j" R0e's#o8LLPV8:.ouJ;ltZtHuwI.uHQ^`o9:ՊyOGEB}y3.L\69p ʶ] [" >Bֱ:O*K ۿgJ^te^K)t*ӟ6q8+g} .;?uXU:hjE&6pg(ҡ)BlJ<3MoO_⯙.+﯂bhc%KBMCw[b@OqO?Et6p3o'e _"˜%+0fo2 Mm֕wo2|+i$L'B큭;y|{$jN r<r/QTQ]'Bt% * C 0JPygM 9.@b#"_ 6X8-c6U sfJ>a6mq%$^Imj\ L."{QeImgĘ#S>4\@߻r<5*&K΢̓ª[ni Mɜ \ D!!wşP5[P/chŽ&nO4"MozY!NW rmWH0Up(zxWu88⳦ryhٜˇ1*]J4R X^jH5/C9L |%N"RF5BHO4S+,/f2u˘%͐2#Ҵ(c qqĢ E9yn9+lZM9uzA0%>\:q)҂K4 )'Xitmdo:uM!$XXxAcglD2=}h5M\zK L{tjGGё1h\nedx%NS@q,lL//U6OT4=Xҩdk@6ڝzii^LD'jES6M>pphaJm=i]D-"0>a5$)S?wtw-<Q1>FwfwUPIUb\/)*_.U-B=ntG  ̧pkHNzVRȗ0a?g=ɍS"-8tN/7H"-KW^xjI27e`@4zI]m[  ,I@+jTQ8SuZxYo  M}S+x-T,Biqe.ceՀQ/w0JG  ^$A)Y= ]U=\r5Tn U_~jd)}qA䖦$)EDǂ w2UxdO/ZZp婧V`J;C"zR ݯn4eb(}j\hW9qMňwSmҶ4ƊBvZ&i~.*ASk6 %* j{+e֧ J1P+$V[uu,W{ eXA8-ʆo#:hX`mPԨU9KˤsJi2 jwPbIo N8gd\^> %]/+(V28F6G:d9)ZbF¯kgJK5*TCV8;iw jų_Ol1>1jp,"xD"-~P͸|G!'ǵj,ɪ/%6T ٗPL(jsȉd~ 5k^QjTPsJ#@%)7fch\5,+FNP.?Ss3;Jzc)_(ࢡ;lB|iT>@"vppPd{쩙 4Ճ@7:rE?{Q"#o2ELdX*%$|jVZ>UW#Qxrmܭs Dr3.Uq$en|ʁHPt"a=v"=oXYM0+ LX*rdF@)xH_Pg@jW=¿7jhҶ2rV*ě$%!;!K]½RSr%RXT3cw49 he0E;V$͞rLiul\y?i}jn)հ?0(_{4Y')˨B9[FR~)lv|7Wl7Ϝ*Ā JW!smMO|jHY </~®a:2)u|!(V;yt]<;P&4r.<[!FOS`KűPZ4tzMr~- }ǛB kBlp9+ygʫM{In'$ -* :V95|2Qw{WTRbY ,o.v [:wiV4 EO-D$58Asc2|Ӊڙמ.fӅ_,DiȶaƸrY3TT [~VhTM'"~VʌJ)t6I'Xa=$b5`u|%]sPR ["7BбI55^~U}No Y~<93Z>Ԟc}E\zxRmr롊ŢS(q ǫIa0uM4"%n`vEue!.mz$ɩ*`1806=3FljX=ڃAtq;YoS{ r浻e8 x bSZa" HEH(-s :- '6t%]}:G  ~whBN3$SM;On'I1I "Q 1$ZGy3a.0_\ yS-N/b'b??!>ֈ(uV/ ]fkVT kn[L8gZ/Dmx)£4/kO}#pk@2R54[ <0a:X1}iT˙݉LUYe'a?Ǫ>$fwy3u ^iZP@ ȡ/UN}X.@RrW6Dӷ¾Rpb$Z<)n9BΣ ~y:H^RrRk ';˷מI=8Œ@'wϴDJ {F8kvXzCЯ/)F""ڀތA "m2eٻtC;H'(҇PnKEM&FmN[w6 j$gQˍG}tL#.A2,vzc>p]%I˺vgRiG. $Y Ȧ/#֯fw=Q:l _뜸 D4hr= p݃upO8 ^%~,~,hA4ž3yרk) '\*;b :a9ZgNui 6CYLROm'wBNܶNj? oRkx0'|_8^Yi摀z2~E 2X2m(y_7{68ԁЪqM?Ih6tj{|Um=i@qP."Zh0lo:4rEvxL+E۬rTU{-2`w;`Ą!YWKzKB~hUX.\Ux}j5bO2}݊UawHg1xܻIj‚F^c:$Wa~!m3 :p _ dFϼ4%Q(fBۧ[(: ˶T0(FS+cu䴲:vËՓ 4{LSAqTJpWm?L%1D VS{+zMZxxX?TngU3z,8!Vo^t:.0FϝכU}=/C3YqWOzECr *+im=v%lI`H<BaJj 橭d/"QX !pɅԀ2{gr kWUpxP3m打ھd5A9Dul,zZ%0Z2w yUY^sD9yӗ u/мO5qV AL\rADMoC-b/%#ŗmHdm.h+PNkAA IH^!4")]ZE`vuErcRk 3O2-H4C$&C"B"dN'W4 {[Efn,TB\[ f| FOEn%])u)}J@HqΜ;v_C9ϡKib2H* A*{#c%iږx5UUE-Vɻ,iraFXb*42(: !'^?D}tGk嶖u9_AV 2"AV* Eg$0}"җ}Q%Ł} O v=P%FTS[灢2& QЉOhsZ`>ʘMP- X8z<}fMt3?7K#X АzՆ G=llR3ensߵ?&Ӿv?V*ͮF1rE5߿ߏ/9p6]s|ߨ~ A%"cAch^#7\]*QM)p%F?&wӞB/j$d:V5EC~!p˵ Qm[Iot_)=t聩:QO8>ڗ=jdO+- ֆ+ ,J[Ew#ZDC@c!XD( ?TyY}= J{K庂m$C7Ye:|#V0Rb?T$e؏q8)1\ɛxxySx6pTvrEMmfDt3.gOQJ0!,&F3NTܦXF~P]7/iNچ#淼KH'PFyGT9Ƕ 2> ;F\'ay^jH_3#;IbAc~j!+Fr1,$&!1;L@M:,q҃'+b/n!0Vg0ڃF^uM/%WWyyr/Qc,#e19Uׂ /c83$K˶eAa0b٭c& /m/hF*qYRy"q1D \dkI}]oa6ϻ^麀G\Fmo0P&S(l &:ǐn9vELqzN8W t8K5&]x4> OV|9)T=iJ UtT )v鋇)=tLqg ¤]%׿aCӕQǁjB+8 u_^XK`_R.i xdeO*+=H\pX$%:)Am XARegy^M61d@|.'nN:=TQ;C-!R1ܐ*}o~v ?:XĖjPL׷JHd=t]>>[2uZȍtYցLW>ú)[6H^@mh2O/شH~ ׻޺ΤPM~Z)P,!orS!<EKl}U !詆mMog4ޡbFy!lH=zMￖlq3 ܂d+͗zv'n\ Æ? }:8JF~΄1kr4Ǿ ͂0H$Gזk(Yv(+L=ߑ+l/ $n˅/=lJ_ Ds.>j ۧ=4'+A+d :qu=iҘ\63dOXQܞrkn$ E<@>Ԁ`e䇚8hg]ɑA]o6<*@<`頗=eJqQt5y;"&o?]5+Bk[eOs h!2N'8*͓X㭾Hdk]r׀\^T;=@eE`-ʇն/6t51*y#Wȭl_Mf"3Mw>5ṷG9\yI3(51EMX( _<%8`Gi4\ S[5Iu #=7FqV5 cQļT&&%_K]V%6WsktVqkۃ.#"6I ?Z|Ê=z/W/xLZ46c\i ؤ /-xl 4Xʭ+SD&oҽ$]^luJ[7O߸!c{F~! >`^[_UVL7jfHR#fCBkdҢ~dC']ܤA4F3`S~o=f56Ky'W}+«'3j vl|V Ps|@ }zKНaWl&IӋ ٩P |o*p\*Y%t#5KQm+nc1Ex>ަ#.h&T8m5,i?hcʐ7j,H3Cj>k:gbcf݀=jbmR}/Q$ifK:~IF=Y$G#3*g--ҝUY ){"SMQaIA4Fd|P'SJ~'j)Iiࢋ sxZmp/|8ޟn~)zHbY'bgf .;!m*iX2N;u{UP2^ǟ3"s(]!C *d5Q9YIzxY-+uak7ځ2 bu;?4#4>Kl|-!΋_?vc/z C\Ӓp#rS 1/sI]+"Ø A+{gYOzUs0/2"lȧ yЌdƬKn]rBS19$n^akpnmΎUgO xqm k[қ2t]@_ Z>i8[5/ygիxᗄ՚" m&OدuO"[#w΃dEȞwKѨ ʶwAi/ #7+ڂTRm#{1Z .8D;s%uQ$ye]A/7>} @466rlIم)Dm {h#h?n@ՉY* fjz.)EÍ$ɡmE=Ek&QHaP2/a* CzhKC> oHx(:BK߈x':7DvgZ{/F;YJ'{^5Uae84ꗈq^)]B'@Z7C$nqƯBKm/> (r^, 3R(B[AGg/e[eI>WlNJ@U!0qh^l?CB^~/C) zɻbN9k%k@֠ygLYkNbxaQodWcykEi-c>keq.J$~A=T#=4&uMzjUVhZ%&)gAQBnvf .UVTc/|JE|̵QQl@~?B-9@Ne))4yTBPDmD! QI2?TK]ZҖt1ֳ͹ˉ# D:1=,AՂh!UϽ^&pX##cWl+bVwQrD{ &p hg(7m.fufc+ks-M27~YoGt/1|QR<$D&q_M,(푬;'"̓n@Dr$ Ӓ~J[f6 fl( +WVeK/ :HJyX@'kӸp+{(dk5iȬ[,X&ݺ?pb^}*}zpېtCvEfX튲:2&Ht:g#P7'ˊi/vD^Zзx}"Ƙ%UV CHLvT9{pzdPB`icd]5Ď+[:~|d+7K"#Fc<#n:aKB;" d?91(7`N}̋nA䏶v'ͽT=_Ւؓ|҇Y6;0 _sq&@L]9aԃBqN@f1n֛|I@E.G! pɠv EeW(??k;fJ|"ZF,2-. K?_4#jSzp/%7 38+wgv7 ! V kMzwT"H>k(Q͒6~ C@̆(msTbcHjXt>of+|"U/ ÒfMX^5RDHL2\ꉄNľ떚GyR4"Uu=L3} ud;_aHa#GgBg.4Z9ʻPW y;ÅYyt,N^+W)5|&4`l튨d>PIT߽p&%ti0R΢kƊBs톯LJWʤT'V(^E_C^b_H1Y SSrw(  6^ۇzˎ~g$va NX PVh S&nyEÖ{₿]C $rxHQ5`5GT_3-+ zE9=JHG=ht-$ȿuD0C2ƨ0>^܁dp0SR7v{8ԥaVld8?m%^1%n #w'麢M-\:n#Uq^+4]T, 0gPz/^I-#t}^IuY\^Ej3Z~r*Ci4 m"Qh7.2j-HO}+wU5gr:ԡ `9na&gEr:ﺠb@ ]g76Â&UKB֟y݂Xn %xJؗ^(5.aVnޮ'͂&ptEȽ)%Te]t,1P˻^^ sԮH`ė5M-$S,]ZI7䭲dyۥEbĪ\%?ÆUlHy?^3;rўe<3#R;G{׸aN:fћ{|Ĕ)ȴ5CAW8QO*-tH䵼2Yɖ1ՇaQw{o.,|Veu⒞PyB.B5kYeqy@ gK?C9t+j3b9(,,ˆ#)UR,j0^ Rkf]oYwI`~/C&{Udyk("vϸɿy0{ {*` 6G ]Q$E"pDPa2@6~]?.J=k,jhJ/<-t$l $zC k)/ـivۄiNhƕh웟 MqJ ꖬW~$*!6.+|}p i{9} *ФDH CD 9]&V).'iE/IrTiy1%rYq+S?4@Vz,9ҤdaOzgaaMB>F=V%[\ɮvD('Yݦ[EbIד',AyQf$𷉥ϕ6t4 U,Ul[*t/hfACޘhZI(KSOoB^m;8q"!-)Ukְ" 2PyA._wsWlqv뼵e <5܎ 1&V&{aE6خF5 AJw9H xlq6Uao# v< &\௼M#]Dhc7t:pݍ~9`+Htc5_G-uѕzþ>+ +@  5dr4{ 8iC^ 3\UF Sy>FmHS`j}j-sjq)h/c'pw:>8aQn@Gȩg#*@ɝ*Jzc{nhxZfFJj&YE(AKmB˶6o.Btj(':R+b^RI&镀A{З'&Fb}Vl[kONu'f^.xFM\k`دyB"{jqkmbc@̆VSh$߂01!gC ׌>O?߈`Z ċe>Mh,t9h ^cZ1h!Gk><4ŽNnk t2!۴U,FUT@R%BP"4OE$eWfL5uG,u2n48(f( nK! {rkCb1ao"鑿$7:]x+x&Ѥ ޑϝ-ep9Ysj`+kwK 6^;_׼[$ĚK g\kTRPq'+[%eA X; T0aȢK[_ҧ {P4*okRZ `2nZޫdahD$_2Jber[7l0`w|X^A7lи&oLnμÍS'z~qDSI (;!5J}Wo@XTi,+SE 7~'jB|@"cj+\O GeGe''^ ī*3+ k"(D؟U||Ac8G{Pd>N \Q5iiEHKՎ,i0HȰO  v@-*lszp@tp0X$?G?i-acv.R?q}{!;Zڬ zc*#N`; S R" S!dFW”zil'">}7"k׹,ijFV%}f̢ٶiQY[G+r Z:wU@r1>Yd Ip+EWƁl;?]^a./T*"Sv'MlJrme_/ʊbOW@ n:A~sU}"'tAvrǎh7x7'`+1鍱H$+}nU}< ?L$p&kҮo,͍ H?IIl&!bqn|Y!xصu/6cT!<\%K!vP?ώ{gL݅xy;gTnng,m~gQi xOjisp>g1}n8 jV|JK<-d*X4AQCXD( ʮZU9(R]h( 5IGi jŒōl[LomYfzmz.._vc9e.u~v+"ɳyMxc4ئ ԛml[@H՜~ʙ6>m \(P؛z;9!NTo S8̿I>9d: 鞺-҅"~_Fח`ΔX}Ѵ|ɯ0j(YV2 {{Kd~Vh _t~VZ%WC3>;ڀ!'dbo:Hd@Zy1@zW܏*Ꞟܛau٦@Sl@&Q;L%n'%vir;AqħT2FDǀ3:7A!7~9l)ִRI&3]e&Z:F &N\x pg_Bi;q؞WT\PqYsrM;͓9$77ߣS^V:Xz8W>9ٿij[152pB2eMOwynK0zhJꀺW-P<}cNC`Af1`U?+a3 Z=Ӈ*tqBOlF.E?>XUJ{CuV6YN؇j}LT+:qOUjD|( VF*Sg6TϜR) )vz Nh^-;܂ܠX15 $08W|/LhfLm$ǕA%UF1AdHg;vYT=66]V} x,*\ @"^q\8|ܩIŨB7w'd烝!q+e0z.A+p_ymS#k+Է5JʮJb6VD'ٝ{c)?M' ,rC6+l KXA79:T{NGS(_ʵz+o 1 >΀&H8V4\z@#YF=7Yŀ}njd \L&#@d8#ٯ@ОbI-njRyTEyqLQӺ{GUȊXm%U֖Anua !\0s$Vf_c:zFdƧ\|TWPv5(=Vo]+Hgir l͸$ $hI:xq ; !$8ۻp&mMtH2˂7~5TU &(FMu,2ΖA{8KW5ZLzf9U2E{^ւi_ 󼽛J2zfxIHqa@ݣ&3#UL g\EW'Z2> AՖF"t˾[.`:yxLaS7C]VK;\|9_#Zay5)%K- _}M!P _$]ͬZT;[؄f7ݮŎrr0Plsm]q\=B`eJ!CϏX(BQmdubNY [XI LZ ֭{!b>M% 8KH I{!Z5oP5t rv whm(`N ߎ`.7hq tsUtzAAEiY,8]JOR1σhքn8BE!4 Pcs94b*>N-=oXMލeHēyF=,D4 3E_@lK y^{"+U1c.z~b7S,M^+غdW^0u$Q^ٕ̊i%6<"V^ٹ^B`ܨ4|6, H(s%dJ'ioî}-)~h,dR r&zx)IjSx8qD% QT6b|*8jzQ؏wv쳑K]x3ˏ{cHݕ7%#w[_| t?= ;SVt&JQGRacw)-pU&]C=6i_w.\R>~x AtIBxλr\f-y pAPhp epZwgGswG |T_v#@_YG E [ 7Lw~RK Ur6n‘.Cc}h7kZ/RTI5 oɂڔ,!$ޑrWțQ*l B0@x/%$#h YZ