openldap2-contrib-2.4.46-lp151.9.4 >  A \i/=„` b^i?׆7[BsR^+nM F5r?g廋]pl?kk6#{wY!2`:ʿs >p>?d % >HLTXkt~ 44 4 4 T4  4  4444  > (h8pf9f:fFG4HȨ4Ix4XɬY\4]4^͌b͡cJdΪeίfβlδu4vϘw4xר4yx;zdtx~Copenldap2-contrib2.4.46lp151.9.4OpenLDAP Contrib ModulesVarious overlays found in contrib/: addpartial Intercepts ADD requests, applies changes to existing entries allop allowed Generates attributes indicating access rights autogroup cloak denyop lastbind writes last bind timestamp to entry noopsrch handles no-op search control nops pw-sha2 generates/validates SHA-2 password hashes pw-pbkdf2 generates/validates PBKDF2 password hashes smbk5pwd generates Samba3 password hashes (heimdal krb disabled) trace traces overlay invocation\,lamb11openSUSE Leap 15.1openSUSEOLDAP-2.8https://bugs.opensuse.orgProductivity/Networking/LDAP/Servershttp://www.openldap.orglinuxx86_64(hp(p~8p)w(@)(Xi (8(~H;Hp((큤큤큤큤큤큤큤큤큤큤큤큤\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\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.so.0.0.0addpartial.so.0.0.0allop.so.0.0.0allop.so.0.0.0allowed.so.0.0.0allowed.so.0.0.0autogroup.so.0.0.0autogroup.so.0.0.0cloak.so.0.0.0cloak.so.0.0.0denyop.so.0.0.0denyop.so.0.0.0lastbind.so.0.0.0lastbind.so.0.0.0noopsrch.so.0.0.0noopsrch.so.0.0.0nops.so.0.0.0nops.so.0.0.0pw-pbkdf2.so.0.0.0pw-pbkdf2.so.0.0.0pw-sha2.so.0.0.0pw-sha2.so.0.0.0smbk5pwd.so.0.0.0smbk5pwd.so.0.0.0trace.so.0.0.0trace.so.0.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenldap2-2.4.46-lp151.9.4.src.rpmlibtool(/usr/lib64/openldap/addpartial.la)libtool(/usr/lib64/openldap/allop.la)libtool(/usr/lib64/openldap/allowed.la)libtool(/usr/lib64/openldap/autogroup.la)libtool(/usr/lib64/openldap/cloak.la)libtool(/usr/lib64/openldap/denyop.la)libtool(/usr/lib64/openldap/lastbind.la)libtool(/usr/lib64/openldap/noopsrch.la)libtool(/usr/lib64/openldap/nops.la)libtool(/usr/lib64/openldap/pw-pbkdf2.la)libtool(/usr/lib64/openldap/pw-sha2.la)libtool(/usr/lib64/openldap/smbk5pwd.la)libtool(/usr/lib64/openldap/trace.la)openldap2-contribopenldap2-contrib(x86-64)@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)openldap2rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.4.463.0.4-14.6.0-14.0-15.2-14.14.1[vZ@Za@Z@ZZ.s@Z@Y*@Y*@Y@Y@YYp@Yf@Y7Y6@X@X7@X$a@XWk@WbW;VVɦVŲ@VŲ@V@V@V@V@Vf@V^@V\:@V@V @U4@T@TuT:m@T @T=@T@Si@S@Sr @SW@SK@S@Rb@RRSRSQ@QP<@P|@P*P{@P{@P}L@OOD@OU@OKp@NU@NؽNσ@NS@NMMc@MY@MGM6@M$]@L,@L@Lp@L*@LvW@LI@L,@L,@K@KK@KrKv@KEK KJ@J@J JJ\s@JHJCfJ67IA@IIÅ@ckowalczyk@suse.comzsolt.kalmar@suse.comzsolt.kalmar@suse.commichael@stroeder.comfvogt@suse.commichael@stroeder.comrbrown@suse.comjengelh@inai.demrueckert@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.comhguo@suse.comhguo@suse.comjengelh@inai.dekukuk@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comlmuelle@suse.comhguo@suse.commpluskal@suse.commichael@stroeder.comhguo@suse.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comrguenther@suse.comjengelh@inai.dejengelh@inai.detchvatal@suse.comvarkoly@suse.comro@suse.deckornacker@suse.comckornacker@suse.comcoolo@suse.comdmueller@suse.comckornacker@suse.comro@suse.devarkoly@suse.comvarkoly@suse.commatz@suse.devarkoly@suse.comjengelh@inai.dejengelh@inai.dero@suse.derhafer@suse.comrhafer@suse.comcoolo@suse.comcoolo@suse.comrhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.decfarrell@suse.comrhafer@suse.decoolo@suse.comrhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@novell.comrhafer@novell.comrhafer@novell.comcristian.rodriguez@opensuse.orgrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comadrian@suse.derhafer@novell.comrhafer@novell.comrguenther@suse.derhafer@novell.comrhafer@novell.comrhafer@novell.comcoolo@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@suse.derhafer@suse.de- Fix slapd segfaults in mdb_env_reader_dest with patch 0016-Clear-shared-key-only-in-close-function.patch (bsc#1089640)- bsc#1085064 Packaging issues have been discovered around the openldap_update_modules_path.sh which has been corrected: - the spec file was wrongly configured, therefore the script has never been called - the script should create the symlinks first, as slapcat is useless on a system which is already affected.- bsc#1085064 Add script "openldap_update_modules_path.sh" which which removes the configuration item olcModulePath in cn=config which is after upgrade from SLE12 to SLE15 holds inappropriate information. If the cn=config is being used on a system, the conflicting items in slapd.conf are ignored, despite of it, the backend DB configuration section has been also commented out in the default slapd.conf. In case of correct cn=config (the olcModulePath has been already removed), the script stops without touching anything.- Upgrade to upstream 2.4.46 release - removed obsolete back-port patches: * 0013-ITS-8692-let-back-sock-generate-increment-line.patch * 0016-ITS-8782-fix-cancel-memleak.patch OpenLDAP 2.4.46 Release (2018/03/22) Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717) Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373) Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687) Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791) Fixed libldap MozNSS CA certificate hash matching (ITS#7374) Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389) Fixed libldap MozNSS initialization (ITS#8484) Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650) Fixed libldap memory leak with cancel operations (ITS#8782) Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705) Fixed slapd to maintain SSF across SASL binds (ITS#8796) Fixed slapd syncrepl deadlock when updating cookie (ITS#8752) Fixed slapd syncrepl callback to always be last in the stack (ITS#8752) Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778) Fixed slapd CSN queue processing (ITS#8801) Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720) Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520) Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226) Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404) Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692) Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752) Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100) Fixed slapo-syncprov memory leak with delete operations (ITS#8690) Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444) Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100) Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607) Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800) Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486) Build Environment Fixed Windows build with newer MINGW version (ITS#8697) Fixed compiler warnings and removed unused variables (ITS#8578) Contrib Fixed ldapc++ Control structure (ITS#8583) Documentation Delete stub manpage for back-ldbm (ITS#8713) Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121) Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818) Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715) Fixed slapo-syncprov(5) indexing requirements (ITS#5048)- Use %license (boo#1082318)- added 0016-ITS-8782-fix-cancel-memleak.patch- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Add openldap-r-only.dif so that openldap2's own tools also link against libldap_r rather than libldap. - Make libldap equivalent to libldap_r (like Debian) to avoid crashes in threaded programs which unknowingly get both libraries inserted into their process image. [rh#1370065, boo#996551]- use existing groups instead of inventing new ones- added 0012-ITS8051-sockdnpat.patch- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- Added OpenLDAP new feature implementing OpenLDAP ITS#8714 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- added overlay trace to package openldap2-contrib- Upgrade to upstream 2.4.45 release - removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch and 0012-use-system-wide-cert-dir-by-default.patch - added 0013-ITS-8692-let-back-sock-generate-increment-line.patch for supporting modify increment operations with back-sock - added overlay addpartial to package openldap2-contrib- Remove legacy daemon control that was used to migrate from SLE 11 to 12. (bsc#1038405)- There is no change made about the package itself, this is only copying over some changelog texts from SLE package: - bug#976172 owned by hguo@suse.com: openldap2 - missing /usr/share/doc/packages/openldap2/guide/admin/guide.html - bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546: openldap2: slapd crash in valueReturnFilter cleanup - [fate#319300](https://fate.suse.com/319300) - [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545) - bug#905959 owned by hguo@suse.com: L3-Question: Are multiple "Connection 0" in a Multi Master setup normal ? - [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546) - bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545: openldap2: slapd crashes on search with deref control and empty attr list- Drop binutils requirement; the code using /usr/bin/strings has been dropped in openSUSE:Factory/openldap2 revision 112.- Remove superfluous insserv PreReq.- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch to let OpenLDAP read system wide certificate directory by default and avoid hiding the error if user specified CA location cannot be read (bsc#1009470).- Add more details in the comments of slapd.conf concerning file permission and StartTLS capability.- Test for user/group existence before trying to add them. Summary spello update.- Move schema files into tarball addonschema.tar.gz: ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema yast.ldif yast.schema - Package previously missing schema files in LDIF format: amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif sudo.ldif suse-mailserver.ldif (bsc#984691) - Fix a minor issue in schema2ldif script that led to missing attribute in the generated LDIF.- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.- Move ldap.conf into libldap-data package, per convention.- Move ldap.conf out of shlib package again, they are not allowed there for obvious reasons (conflict with future package).- Build password strength enforcer as an implementation of ppolicy password checker, introducing: ppolicy-check-password-1.2.tar.gz ppolicy-check-password.Makefile ppolicy-check-password.conf ppolicy-check-password.5 0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch (Implements fate#319461)- Remove redundant -n openldap2- package name prefix.- Remove openldap2-client.spec and openldap2-client.changes openldap2.spec now builds client utilities and libraries. Thus pre_checkin.sh is removed. - Move ldap.conf and its manual page from openldap2-client package to libldap-2_4-2 package, which is more appropriate. - Use RPM_OPT_FLAGS in build flags. - Macros dealing with old/unsupported distributions are removed. - Remove 0002-slapd.conf.dif and install improved slapd.conf from new source file slapd.conf. - Install slapd.conf.olctemplate to assist in preparing slapd.d for OLC. - Be explicit in sysconfig that by default openldap will use static file configuration. - Add the following schemas in LDIF format: * rfc2307bis.ldif * ldapns.ldif * yast.ldif - Other minor clean-ups in the spec file.- Use optflags when building- Upgrade to upstream 2.4.44 release with accumulated bug fixes. - Specify source with FTP URL - Removed obsolete 0012-openldap-re24-its8336.patch- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch into 0010-Enforce-minimum-DH-size-of-1024.patch- Upgrade to upstream 2.4.43 release with accumulated bug fixes. - Still build on SLES12 - Loadable backend and overlay modules are now installed into arch-specific path %{_libdir}/openldap - All backends and overlays as modules for smaller memory footprint on memory constrained systems - Added extra package for back-sock - Consequent use of %{_rundir} everywhere - Rely on upstream ./configure script instead of any other macro foo - Dropped linking with libwrap - Dropped 0004-libldap-use-gethostbyname_r.dif because this work-around for nss_ldap is obsolete - New sub-package openldap2-contrib with selected contrib/ overlays - Replaced addonschema.tar.gz with separate schema sources - Updated ldapns.schema from recent slapo-nssov source tree - Added symbolic link to slapd executable in /usr/sbin/ - Added more complex example configuration file /etc/openldap/slapd.conf.example - Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap - Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap - Added patch for OpenLDAP ITS#7796 to avoid excessive "not index" logging: 0011-openldap-re24-its7796.patch - Replaced openldap-rc.tgz with single source files - Added soft dependency (Recommends) to cyrus-sasl - Added soft dependency (Recommends) to cyrus-sasl-devel to openldap2-devel - Added patch for OpenLDAP ITS#8336 (assert in liblmdb): 0012-openldap-re24-its8336.patch - Remove obsolete patch 0001-build-adjustments.dif- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch to fix CVE-2015-6908. (bsc#945582) - Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch to address weak DH size vulnerability (bsc#937766)- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch to fix an issue with unresponsive LDAP host lookups in IPv6 environment. (bsc#955210)- Remove OpenLDAP 2.3 code and patches from build source. Compatibility libraries for OpenLDAP 2.3 are built in package: compat-libldap-2_3-0 Removed source files: openldap-2.3.37-liblber-length-decoding.dif openldap-2.3.37-libldap-ntlm.diff openldap-2.3.37-libldap-ssl.dif openldap-2.3.37-libldap-sasl-max-buff-size.dif openldap-2.3.37-libldap-tls_chkhost-its6239.dif openldap-2.3.37-libldap-gethostbyname_r.dif openldap-2.3.37-libldap-suid.diff openldap-2.3.37.dif openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif openldap-2.3.37-libldap-ldapi_url.dif openldap-2.3.37.tgz openldap-2.3.37-libldap-utf8-ADcanonical.dif README.update check-build.sh- Upgrade to upstream 2.4.42 release with accumulated bug fixes.- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements. * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch * Remove already applied patch 0009-gcc5.patch (Implements fate#319301)- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks for Berkeley DB version- binutils is required for "strings" utility invocation in %pre [bnc#904028] - Remove SLE10 definitions- Use %_smp_mflags for parallel build- Add baselibs.conf to sources list- Do not bypass output of useradd and groupadd- sanitize release line in specfile- segfault on certain queries with rwm overlay (bnc#846389) 0008-ITS-7723-fix-reference-counting.patch- enable systemd slapd service if SysV ldap was enabled (bnc#881476)- use %_rundir if available, otherwise /var/run- move systemd requires to server package- Fix systemd service installation- use configure macro also for building the 2.3.37 version- Remove PidFile from service definition - Update to 2.4.39 * Fixed libldap MozNSS crash (ITS#7783) * Fixed libldap memory leak with SASL (ITS#7757) * Fixed libldap assert in parse_passwdpolicy_control (ITS#7759) * Fixed libldap shortcut NULL RDNs (ITS#7762) * Fixed libldap deref to use correct control * Fixed liblmdb keysizes with mdb_update_key (ITS#7756) * Fixed slapd cn=config olcDbConfig modification (ITS#7750) * Fixed slapd-bdb/hdb to bail out of search if config is paused (ITS#7761) * Fixed slapd-bdb/hdb indexing issue with derived attributes (ITS#7778) * Fixed slapd-mdb to bail out of search if config is paused (ITS#7761) * Fixed slapd-mdb indexing issue with derived attributes (ITS#7778) * Fixed slapd-perl to bail out of search if config is paused (ITS#7761) * Fixed slapd-sql to bail out of search if config is paused (ITS#7761) * Fixed slapo-constraint handling of softadd/softdel (ITS#7773) * Fixed slapo-syncprov assert with findbase (ITS#7749) * Build Environment Test suite: Use $(MAKE) for tests (ITS#7753) * Documentation admin24 fix TLSDHParamFile to be correct (ITS#7684)- Add systemd style service definition - FATE#315028 remove memory limit for slapd - FATE#315415: LDAP compat packages required for older SLES versions For this reson following patches were applied: openldap-2.3.37-libldap-suid.diff openldap-2.3.37-libldap-ldapi_url.dif openldap-2.3.37-libldap-ntlm.diff openldap-2.3.37-libldap-gethostbyname_r.dif openldap-2.3.37-libldap-sasl-max-buff-size.dif openldap-2.3.37-libldap-utf8-ADcanonical.dif openldap-2.3.37-liblber-length-decoding.dif openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif openldap-2.3.37-libldap-tls_chkhost-its6239.dif openldap-2.3.37-libldap-ssl.dif- Make /etc/sasl2 owned by openldap2.- Update to 2.4.38 * Fixed liblmdb nordahead flag (ITS#7734) * Fixed liblmdb to check cursor index before cursor_del (ITS#7733) * Fixed liblmdb wasted space on split (ITS#7589) * Fixed slapd for certs with a NULL issuerDN (ITS#7746) * Fixed slapd cn=config with empty nested includes (ITS#7739) * Fixed slapd syncrepl memory leak with delta-sync MMR (ITS#7735) * Fixed slapd-bdb/hdb to stop processing on dn not found (ITS#7741) * Fixed slapd-bdb/hdb with indexed ANDed filters (ITS#7743) * Fixed slapd-mdb to stop processing on dn not found (ITS#7741) * Fixed slapd-mdb dangling reader (ITS#7662) * Fixed slapd-mdb matching rule for OlcDbEnvFlags (ITS#7737) * Fixed slapd-mdb with indexed ANDed filters (ITS#7743) * Fixed slapd-meta from blocking other threads (ITS#7740) * Fixed slapo-syncprov assert with findbase (ITS#7749) Changes in 2.4.37 * Added liblmdb nordahead environment flag (ITS#7725) * Fixed client tools CLDAP with IPv6 (ITS#7695) * Fixed libldap CLDAP with IPv6 (ITS#7695) * Fixed libldap lock ordering with abandon op (ITS#7712) * Fixed liblmdb segfault with mdb_cursor_del (ITS#7718) * Fixed liblmdb when converting to writemap (ITS#7715) * Fixed liblmdb assert on MDB_NEXT with delete (ITS#7722) * Fixed liblmdb wasted space on split (ITS#7589) * Fixed slapd cn=config with olcTLSProtocolMin (ITS#7685) * Fixed slapd-bdb/hdb optimize index updates (ITS#7329) * Fixed slapd-ldap chaining with cn=config (ITS#7381, ITS#7434) * Fixed slapd-ldap chaning with controls (ITS#7687) * Fixed slapd-mdb optimize index updates (ITS#7329) * Fixed slapd-meta chaining with cn=config (ITS#7381, ITS#7434) * Fixed slapo-constraint to no-op on nonexistent entries (ITS#7692) * Fixed slapo-dds assert on startup (ITS#7699) * Fixed slapo-memberof to not replicate internal ops (ITS#7710) * Fixed slapo-refint to not replicate internal ops (ITS#7710) Changes in 2.4.36 * Added back-meta target filter patterns (ITS#7609) * Added liblmdb mdb_txn_env to API (ITS#7660) * Fixed libldap CLDAP with uninit'd memory (ITS#7582) * Fixed libldap with UDP (ITS#7583) * Fixed libldap OpenSSL TLS versions (ITS#7645) * Fixed liblmdb MDB_PREV behavior (ITS#7556) * Fixed liblmdb transaction issues (ITS#7515) * Fixed liblmdb mdb_drop overflow page return (ITS#7561) * Fixed liblmdb nested split (ITS#7592) * Fixed liblmdb overflow page behavior (ITS#7620) * Fixed liblmdb race condition with read and write txns (ITS#7635) * Fixed liblmdb mdb_del behavior with MDB_DUPSORT and mdb_del (ITS#7658) * Fixed slapd cn=config with unknown schema elements (ITS#7608) * Fixed slapd cn=config with loglevel 0 (ITS#7611) * Fixed slapd slapi filterlist free behavior (ITS#7636) * Fixed slapd slapi control free behavior (ITS#7641) * Fixed slapd schema countryString as directoryString (ITS#7659) * Fixed slapd schema telephoneNumber as directoryString (ITS#7659) * Fixed slapd-bdb/hdb to wait for read locks in tool mode (ITS#6365) * Fixed slapd-mdb behavior with alias dereferencing (ITS#7577 ) * Fixed slapd-mdb modrdn and base-scoped searches (ITS#7604) * Fixed slapd-mdb refcount behavior (ITS#7628) * Fixed slapd-meta binding flag is set (ITS#7524) * Fixed slapd-meta with minimal config (ITS#7581) * Fixed slapd-meta missing results messages (ITS#7591) * Added slapd-meta TCP keepalive support (ITS#7513) * Fixed slapo-sssvlv double free (ITS#7588) * Fixed slaptest to list -Q option (ITS#7568) Changes in 2.4.35 * Fixed liblmdb mdb_cursor_put with MDB_MULTIPLE (ITS#7551) * Fixed liblmdb page rebalance (ITS#7536) * Fixed liblmdb missing parens (ITS#7377) * Fixed liblmdb mdb_cursor_del crash (ITS#7553) * Fixed slapd syncrepl updateCookie status (ITS#7531) * Fixed slapd connection logging (ITS#7543) * Fixed slapd segfault on modify (ITS#7542, ITS#7432) * Fixed slapd-mdb to reject undefined attrs (ITS#7540) * Fixed slapo-pcache with +/- attrsets (ITS#7552) Changes in 2.4.34 * Fixed libldap connections with EINTR (ITS#7476) * Fixed libldap lineno overflow in ldif_read_record (ITS#7497) * Fixed liblmdb mdb_env_open flag handling (ITS#7453) * Fixed liblmdb mdb_midl_sort array optimization (ITS#7432) * Fixed liblmdb freelist with large entries (ITS#7455) * Fixed liblmdb to check for filled dirty page list (ITS#7491) * Fixed liblmdb to validate data limits (ITS#7485) * Fixed liblmdb mdb_update_key for large keys (ITS#7505) * Fixed ldapmodify to not core dump with invalid LDIF (ITS#7477) * Fixed slapd syncrepl for old entries in MMR setup (ITS#7427) * Fixed slapd signedness for index_substr_any_* (ITS#7449) * Fixed slapd enforce SLAPD_MAX_DAEMON_THREADS (ITS#7450) * Fixed slapd mutex in send_ldap_ber (ITS#6164) * Added slapd-ldap onerr option (ITS#7492) * Added slapd-ldap keepalive support (ITS#7501) * Fixed slapd-ldif with empty dir (ITS#7451) * Fixed slapd-mdb to reopen attr DBs after env reopen (ITS#7416) * Fixed slapd-mdb handling of missing entries (ITS#7483,7496) * Fixed slapd-mdb environment flag setting (ITS#7452) * Fixed slapd-mdb with sub db slapcat (ITS#7469) * Fixed slapd-mdb to correctly work with toolthreads > 2 (ITS#7488,ITS#7527) * Fixed slapd-mdb subtree search speed (ITS#7473) * Fixed slapd-meta conversion to cn=config (ITS#7525) * Fixed slapd-meta segfault when modifying olcDbUri (ITS#7526) * Fixed slapd-sql back-config support (ITS#7499) * Fixed slapo-constraint handle uri and restrict correctly (ITS#7418) * Fixed slapo-constraint with multi-master replication (ITS#7426) * Fixed slapo-constraint segfault (ITS#7431) * Fixed slapo-deref control initialization (ITS#7436) * Fixed slapo-deref control exposure (ITS#7445) * Fixed slapo-memberof with internal ops (ITS#7487) * Fixed slapo-pcache matching rules for config db (ITS#7459) * Fixed slapo-rwm modrdn cleanup (ITS#7414) * Fixed slapo-sssvlv maxperconn parameter (ITS#7484)- For now, avoid automatic use of libdb-6_0 by explicitly selecting libdb-4_8 as BuildRequire.- Put static libs into openldap2-devel-static and relieve openldap2-devel of static-only deps- fix check-build.sh for kernel > 3.0- Fixed initscript to avoid endless loop when no configuration is present in /etc/openldap/slapd.d/ (bnc#767464) - cleaned up SLES10 buildrequires and dependencies - removed support for building on SLES9, didn't work anyway anymore - Don't buildrequire krb5-mini on Distributions where it does not exist- enabled mdb backend - Update to 2.4.33 * Added slapd-meta cn=config support * Fixed slapd alock handling on Windows (ITS#7361) * Fixed slapd acl handling with zero-length values (ITS#7350) * Fixed slapd syncprov to not reference ops inside a lock (ITS#7172) * Fixed slapd delta-syncrepl MMR with large attribute values (ITS#7354) * Fixed slapd slapd_rw_destroy function (ITS#7390) * Fixed slapd-ldap idassert bind handling (ITS#7403) * Fixed slapo-constraint with multiple modifications (ITS#7168) Changes in 2.4.32: * Added slappasswd loadable module support (ITS#7284) * Fixed tools to not clobber SASL_NOCANON (ITS#7271) * Fixed libldap function declarations (ITS#7293) * Fixed libldap double free (ITS#7270) * Fixed libldap debug level setting (ITS#7290) * Fixed libldap gettime() regression (ITS#6262) * Fixed libldap sasl handling (ITS#7118, ITS#7133) * Fixed libldap to correctly free socket with TLS (ITS#7241) * Fixed slapd config index renumbering (ITS#6987) * Fixed slapd duplicate error response (ITS#7076) * Fixed slapd parsing of PermissiveModify control (ITS#7298) * Fixed slapd-bdb/hdb cache hang under high load (ITS#7222) * Fixed slapd-bdb/hdb alias checking (ITS#7303) * Fixed slapd-bdb/hdb olcDbConfig changes work immediately (ITS#7338) * Fixed slapd-ldap to encode user DN during password change (ITS#7319) * Fixed slapd-ldap assertion when proxying to MS AD (ITS#6851) * Fixed slapd-ldap monitoring (ITS#7182, ITS#7225) * Fixed slapd-perl panic (ITS#7325) * Fixed slapo-accesslog memory leaks with sync replication (ITS#7292) * Fixed slapo-syncprov memory leaks with sync replication (ITS#7292)- add explicit buildrequire on groff - needed to build manuals- buildrequire krb5-mini in openldap2-client to avoid cycle - move Summary out of the %if as prepare_spec is confused about the license otherwise- update to 2.4.31 * Added slapo-accesslog support for reqEntryUUID (ITS#6656) * Fixed libldap IPv6 URL detection (ITS#7194) * Fixed libldap rebinding on failed connection (ITS#7207) * Fixed slapd listener initialization (ITS#7233) * Fixed slapd cn=config with olcTLSVerifyClient (ITS#7197) * Fixed slapd delta-syncrepl fallback on non-leaf error (ITS#7195) * Fixed slapd to reject MMR setups with bad serverID setting (ITS#7200) * Fixed slapd approxIndexer key generation (ITS#7203) * Fixed slapd modification of olcSuffix (ITS#7205) * Fixed slapd schema validation with missing definitions (ITS#7224) * Fixed slapd syncrepl -c with supplied CSN values (ITS#7245) * Fixed slapd-bdb/hdb idlcache with only one element (ITS#7231) * Fixed slapo-accesslog deadlock with non-logged write ops (ITS#7088) * Fixed slapo-syncprov sessionlog check (ITS#7218) * Fixed slapo-syncprov entry leak (ITS#7234) * Fixed slapo-syncprov startup initialization (ITS#7235)- Disabled testsuite for now. Causes problems in the buildserivce- Update to 2.4.30 * Fixed libldap socket polling for writes (ITS#7167) * Fixed liblutil string modifications (ITS#7174) * Fixed slapd crash when attrsOnly is true (ITS#7143) * Fixed slapd syncrepl delete handling (ITS#7052,ITS#7162) * Fixed slapo-pcache time-to-refesh handling (ITS#7178) * Fixed slapo-syncprov loop detection (ITS#6024)- Update to 2.4.29 * Fixed slapd cn=config modification of first schema element (ITS#7098) * Fixed slapd operation reuse (ITS#7107) * Fixed slapd blocked writers to not interfere with pool pause (ITS#7115) * Fixed slapd connection loop connindex usage (ITS#7131) * Fixed slapd double mutex unlock via connection_done (ITS#7125) * Fixed slapd check order in connection_write (ITS#7113) * Fixed slapd slapadd to exit on failure (ITS#7142) * Fixed slapd syncrepl reference to freed memory (ITS#7127,ITS#7132) * Fixed slapd syncrepl to ignore some errors on delete (ITS#7052) * Fixed slapd syncrepl to handle missing oldRDN (ITS#7144) * Fixed slapd-monitor compare op to update cached entry (ITS#7123) * Fixed slapo-syncprov with already abandoned operation (ITS#7150) - Included patches from RE24 branch: * only poll sockets for write as needed (ITS#7167, bnc#749082) * sycnrepl Fixes (ITS#7162)- license update: OLDAP-2.8 SPDX format (http://www.spdx.org/licenses)- Update to 2.4.28 * Fixed back-mdb out of order slapadd (ITS#7090) changes in OpenLDAP 2.4.27 Release (2011/11/24): * Added slapd delta-syncrepl MMR (ITS#6734,ITS#7029,ITS#7031) * Fixed ldapmodify crash with LDIF controls (ITS#7039) * Fixed ldapsearch to honor timeout and timelimit (ITS#7009) * Fixed libldap endless looping (ITS#7035) * Fixed libldap TLS to not check hostname when using 'allow' (ITS#7014) * Fixed slapadd common code into slapcommon (ITS#6737) * Fixed slapd backend connection initialization (ITS#6993) * Fixed slapd frontend DB parsing in cn=config (ITS#7016) * Fixed slapd hang with {numbered} overlay insertion (ITS#7030) * Fixed slapd inet_ntop usage (ITS#6925) * Fixed slapd cn=config deletion of bitmasks (ITS#7083) * Fixed slapd cn=config modify replace/delete crash (ITS#7065) * Fixed slapd schema UTF8StringNormalize with 0 length values (ITS#7059) * Fixed slapd with dynamic acls for cn=config (ITS#7066) * Fixed slapd response callbacks (ITS#6059,ITS#7062) * Fixed slapd no_connection warnings with ldapi (ITS#6548,ITS#7092) * Fixed slapd return code processing (ITS#7060) * Fixed slapd sl_malloc various issues (ITS#6437) * Fixed slapd startup behavior (ITS#6848) * Fixed slapd syncrepl crash with non-replicated ops (ITS#6892) * Fixed slapd syncrepl with modrdn (ITS#7000,ITS#6472) * Fixed slapd syncrepl timeout when using refreshAndPersist (ITS#6999) * Fixed slapd syncrepl deletes need a non-empty CSN (ITS#7052) * Fixed slapd syncrepl glue for empty suffix (ITS#7037) * Fixed slapd results cleanup (ITS#6763,ITS#7053) * Fixed slapd validation of args for TLSCertificateFile (ITS#7012) * Fixed slapd-bdb/hdb to build entry DN based on parent DN (ITS#5326) * Fixed slapd-hdb with zero-length entries (ITS#7073) * Fixed slapd-hdb duplicate entries in subtree IDL cache (ITS#6983) * Fixed slapo-pcache response cleanup (ITS#6981) * Fixed slapo-ppolicy pwdAllowUserChange behavior (ITS#7021) * Fixed slapo-sssvlv issue with greaterThanorEqual (ITS#6985) * Fixed slapo-sssvlv to only return requested attrs (ITS#7061) * Fixed slapo-syncprov DSA attribute filtering for Persist mode (ITS#7019) * Fixed slapo-syncprov when consumer has newer state of our SID (ITS#7040) * Fixed slapo-syncprov crash (ITS#7025) * Added missing LDIF form of schema files (ITS#7063)- add libtool as buildrequire to avoid implicit dependency- ACL changes to the config database only got active after slapd restart in certain cases (bnc#716895, ITS#7066). - Adjusted default DB_CONFIG to increase max values for locks and lock objects (bnc#719803) - Fix UTF8StringNormalize overrun on zero-length string (bnc#724201, ITS#7059)- Update to 2.4.26 * Added libldap LDAP_OPT_X_TLS_PACKAGE (ITS#6969) * Fixed libldap descriptor leak (ITS#6929) * Fixed libldap socket leak (ITS#6930) * Fixed libldap get option crash (ITS#6931) * Fixed libldap lockup (ITS#6898) * Fixed libldap ASYNC TLS setup (ITS#6828) * Fixed libldap with missing \n terminations (ITS#6947) * Fixed tools double free (ITS#6946) * Fixed tools verbose output (ITS#6977) * Fixed ldapmodify SEGV on invalid LDIF (ITS#6978) * Added slapd extra_attrs database option (ITS#6513) * Fixed slapd asserts (ITS#6932) * Fixed slapd configfile param on windows (ITS#6933) * Fixed slapd config with global chaining (ITS#6843) * Fixed slapd uninitialized variables (ITS#6935) * Fixed slapd config objectclass is readonly (ITS#6963) * Fixed slapd entry response with control (ITS#6899) * Fixed slapd with unknown attrs (ITS#6819) * Fixed slapd normalization of schema RDN (ITS#6967) * Fixed slapd operations cache to 10 op limit (ITS#6944) * Fixed slapd syncrepl crash with non-replicated ops (ITS#6892) * Fixed slapd-bdb/hdb with sparse index ranges (ITS#6961) * Fixed back-ldap ppolicy updates (ITS#6711) * Fixed back-ldap with id-assert (ITS#6817) * Fixed various slapo-pcache issues (ITS#6823, ITS#6950, ITS#6951, ITS#6953, ITS#6954) * Fixed slapo-pcache database corruption (ITS#6831) * Fixed slapo-syncprov with replicated subtrees (ITS#6872) - backported delete support for child entries of overlays from master (bnc#704398)- Updated to 2.4.25, important changes: * Fixed ldapsearch pagedresults loop (ITS#6755) * Fixed tools for incompatible args (ITS#6849) * Fixed libldap MozNSS crash (ITS#6863) * Fixed slapd add objectclasses in order (ITS#6837) * Added slapd ordering for uidNumber and gidNumber (ITS#6852) * Fixed slapd segfault when adding values out of order (ITS#6858) * Fixed slapd sortval handling (ITS#6845) * Fixed slapd-bdb with slapadd/index quick option (ITS#6853) * Fixed slapd-ldap chain cn=config support (ITS#6837) * Fixed slapd-ldap chain with slapd.conf (ITS#6857) * Fixed slapd-meta deadlock (ITS#6846) * Fixed slapo-sssvlv with multiple requests (ITS#6850) * Fixed contrib/lastbind install rules (ITS#6238) * Fixed contrib/cloak install rules (ITS#6877)- Surpress gcc warnings about extra format string arguments for 2.3.x built as well.- Updated to 2.4.24, important changes: * Added libldap_r,libldap formal concurrency API (ITS#6625,ITS#5421) * Added slapadd attribute value checking (ITS#6592) * Added slapcat continue mode for problematic DBs (ITS#6482) * Added slapd syncrepl suffixmassage support (ITS#6781) * Fixed liblber to not close invalid sockets (ITS#6585) * Fixed libldap referral chasing (ITS#6602) * Fixed libldap leak when chasing referrals (ITS#6744) * Fixed slapd acl parsing overflow (ITS#6611) * Fixed slapd acl when resuming parsing (ITS#6804) * Fixed slapd default config acls with overlays (ITS#6822) * Fixed slapd config leak with olcDbDirectory (ITS#6634) * Fixed slapd when first acl is value dependent (ITS#6693) * Fixed slapd-bdb slapadd -q with glued dbs (ITS#6794) * Fixed slapo-ppolicy don't update opattrs on consumers (ITS#6608) * Fixed slapo-ppolicy to allow userPassword deletion (ITS#6620) * Fixed slapo-syncprov to send error if consumer is newer (ITS#6606) * Fixed slapo-syncprov filter race condition (ITS#6708) * Fixed slapo-syncprov active mod race (ITS#6709) * Fixed slapo-syncprov to refresh if context is dirty (ITS#6710) * Fixed slapo-syncprov CSN updates to all replicas (ITS#6718) * Fixed slapo-syncprov sessionlog ordering (ITS#6716) * Fixed slapo-syncprov sessionlog with adds (ITS#6503) * Fixed slapo-syncprov mutex (ITS#6438) * Fixed slapo-syncprov mincsn check with MMR (ITS#6717) * Fixed slapo-syncprov control leak (ITS#6795) * Fixed slapo-syncprov error codes (ITS#6812) * For a comprehensive list of changes please consult the CHANGES file - removed unneeded openSUSE 11.0 specifc patch- slapadd -q could crash for glued bdb/hdb databases- Install the correct schema2ldif script (bnc#665530)- Fixed quotation in init-script to avoid errors when calling it from within /etc/openldap/slapd.d/cn=config/ (bnc#660492).- Surpress gcc warnings about extra format string arguments. - Split-off openldap2-doc (noarch) package (Admin Guide and IDs) - Backported -VVV commandline switch for slapd from HEAD (to list enabled static overlays) - Build all overlays except syncprov and ppolicy as dynamic modules (Fixes bnc#648479, FATE#307837) - Added README.dynamic-overlays to point out some details about dynamic overlays - simplified pie-compile patch and adjusted it to work with dynamic overlays- Handle the libdb-4_5 -> libdb-4_8 Version update by opening the Databases with DB_RECOVER if a version mismatch is detected.- Do not include Build date and time in binaries, this avoids build-compare failures and unhelpful rebuilds/republishes- Don't build 2.3 slapcat anymore for 11.3 and newer. We switch to 2.4 long ago. - Removed automatic 2.3->2.4 migration in %post - moved back-sql examples to make rpmlint happy- Fix listener URIs in init script to make SLP registration work again (bnc#620389)- Fixed RPM Group and Summary Tags (bnc#624980)- Updated to 2.4.23: * Fixed libldap to return server's error code (ITS#6569) * Fixed libldap memleaks (ITS#6568) * Fixed liblutil off-by-one with delta (ITS#6541) * Fixed slapd acls with glued databases (ITS#6468) * Fixed slapd syncrepl rid logging (ITS#6533) * Fixed slapd modrdn handling of invalid values (bnc#612430, ITS#6570) * Fixed slapd-bdb hasSubordinates computation (ITS#6549) * Fixed slapd-bdb to use memcpy instead for strcpy (ITS#6474) * Fixed slapd-bdb entry cache delete failure (ITS#6577) * Fixed slapd-ldap to return control responses (ITS#6530) * Fixed slapo-ppolicy to use Debug (ITS#6566) * Fixed slapo-refint to zero out freed DN vals (ITS#6572) * Fixed slapo-rwm to use Debug (ITS#6566) * Fixed slapo-sssvlv to use Debug (ITS#6566) * Fixed slapo-syncprov lost deletes in refresh phase (bnc#606294, ITS#6555) * Fixed slapo-valsort to use Debug (ITS#6566) * Fixed contrib/nssov network.c missing patch (ITS#6562) - New subpackage openldap2-back-sql. Contains the SQL backend module plus some documentation (bnc#395719) - generate Patches from git tree (resulted in all patches being renamed) - installing binaries without stripping them is done by setting the STRIP enviroment variable instead for patching the Makefile now - Fixed a bug in the syncprov overlay which could lead to not replicate delete Operations (ITS#6555, bnc#606294) - BuildRequires cleanup- LDAP clients could crash the server by submitting a specially crafted LDAP ModRDN operation. (bnc#612430, ITS#6570) - Delete Operations happening during the "Refresh" phase of "refreshAndPersist" replication failed to replicate under certain circumstances (bnc#606294, ITS#6555)- Create /var/run/slapd on demand. /var/run might be mounted on tmpfs.- fix build dependency cycle for -client package with openslp- Fixed quotation in sed expression to escape ldapi path in init script- Removed obsolete hunk from openldap2.dif - Remove ldap.conf patch to use saner default for Certificate verification (bnc#575146)- Add fix for stricter fortification checks of GCC 4.5.- Updated to 2.4.21: * Fixed liblutil for negative microsecond offsets (ITS#6405) * Fixed slapd global settings to work without restart (ITS#6428) * Fixed slapd looping with SSL/TLS connections (ITS#6412) * Fixed slapd syncrepl freeing tasks from queue (ITS#6413) * Fixed slapd syncrepl parsing of tls defaults (ITS#6419) * Fixed slapd syncrepl uninitialized variables (ITS#6425) * Fixed slapd-config Adds with Abstract classes (ITS#6408) * Fixed slapo-dynlist behavior with simple filters (ITS#6421) * Fixed slapd-ldif access outside database directory (ITS#6414) * Fixed slapo-translucent with back-null (ITS#6403) * Fixed slapo-unique criteria checking (ITS#6270) - removed some obsolete RPM dependencies - Added missing tags to init script to silence rpmlint warnings- Fixed an issue in back-config's objectclass inheritence code that could cause the server to fail to start or to spin in an endless loop (bnc#558059,ITS#6408) - default the tls_reqcert parameter of a syncrepl config to "demand" as documented even if other tls_ options are absent (bnc#558397, ITS#6319) - apply changes to the global size and timelimits to all database that don't specify limits themself. (bnc#562184, ITS#6428)- Update to 2.4.20 (fate#306593), most important fixes since 2.4.19 * Fixed liblber embedded NUL values in BerValues (ITS#6353) * Fixed libldap sasl buffer sizing (ITS#6327,ITS#6334) * Fixed libldap uninitialized return value (ITS#6355) * Fixed libldap unlimited timeout (ITS#6388) * Added slapd handling of hex server IDs (ITS#6297) * Fixed slapd checks of str2filter (ITS#6391) * Fixed slapd configArgs initialization (ITS#6363) * Fixed slapd db_open with connection_fake_init (ITS#6381) * Fixed slapd with embedded \0 in bervals (ITS#6378,ITS#6379) * Fixed slapd inclusion of ac/unistd.h (ITS#6342) * Fixed slapd sl_free to better reclaim memory (ITS#6380) * Fixed slapd syncrepl deletes in MirrorMode (ITS#6368) * Fixed slapd syncrepl to use correct SID (ITS#6367) * Fixed slapd tls_accept to retry in certain cases (ITS#6304) * Fixed slapd-bdb/hdb cache corruption (ITS#6341) * Fixed slapd-bdb/hdb entry cache (ITS#6360) * Fixed slapo-syncprov checkpoint conversion (ITS#6370) * Fixed slapo-syncprov deadlock (ITS#6335) * Fixed slapo-syncprov out of order changes (ITS#6346) - Added switch to enable/disable testsuite (%run_test_suite)- updated patches to apply with fuzz=0- Added schema2ldif tool to openldap2-client subpackage (bnc#541819)- Changed permissions on /var/run/slapd to a saner default for ldapi:/// (bnc#536729)- libldap's check of the hostname against the TLS Certificate's CN Attribute did not handle possible NUL bytes in the CN correctly and was vulnerable against attacks with spoofed Certificates. (bnc#537143, ITS#6239)- Update to 2.4.17. Most important changes: * Fixed liblber to use ber_strnlen (ITS#6080) * Fixed libldap openssl digest initialization (ITS#6192) * Fixed libldap tls NULL error messages (ITS#6079) * Added slapd sasl auxprop support (ITS#6147) * Added slapd schema checking tool (ITS#6150) * Added slapd writetimeout keyword (ITS#5836) * Fixed slapd abandon/cancel handling for some ops (ITS#6157) * Fixed slapd access setstyle to expand (ITS#6179) * Fixed slapd assert with closing connections (ITS#6111) * Fixed slapd bind race condition (ITS#6189) * Fixed slapd cert validation (ITS#6098) * Fixed slapd connection_destroy assert (ITS#6089) * Fixed slapd csn normalization (ITS#6195) * Fixed slapd errno handling (ITS#6037) * Fixed slapd hung writers (ITS#5836) * Fixed slapd ldapi issues (ITS#6056) * Fixed slapd normalization of updated schema attributes (ITS#5540) * Fixed slapd olcLimits handling (ITS#6159) * Fixed slapd olcLogLevel with hex levels (ITS#6162) * Fixed slapd sending cancelled operations results (ITS#6103) * Fixed slapd slapi_entry_has_children (ITS#6132) * Fixed slapd sockets usage on windows (ITS#6039) * Fixed slapd some abandon and cancel race conditions (ITS#6104) * Fixed slapd tls context after changes (ITS#6135) * Fixed slapd-bdb/hdb adjust dncachesize if too low (ITS#6176) * Fixed slapd-bdb/hdb crashes during delete (ITS#6177) * Fixed slapd-bdb/hdb multiple olcIndex for same attr (ITS#6196) * Fixed slapd-hdb freeing of already freed entries (ITS#6074) * Fixed slapd-hdb entryinfo cleanup (ITS#6088) * Fixed slapd-hdb dncache lockups (ITS#6095) * Fixed slapd-ldap deadlock with non-responsive TLS URIs (ITS#6167) * Fixed slapo-ppolicy to honor pwdLockout (ITS#6168) * Fixed slapo-ppolicy to return check modules error message (ITS#6082) * Added slapo-rwm rwm-drop-unrequested-attrs config option (ITS#6057) * Fixed slapo-rwm dn passing (ITS#6070) * Fixed slapo-rwm entry free/release (ITS#6058, ITS#6081) * Fixed tools returning ldif errors (ITS#5892) - Backported fix for failing back-monitor test from HEAD - re-enabled some formerly disabled tests from the testsuite- Fixed Summary/Description for -client subpackage- Improved connection check in init script (bnc#510295)- Fixed complilation with newer glibc (2.3.X release needs GNU_SOURCE defined as well in getpeerid.c)- gcc 4.4 fixes- Update to 2.4.16. Most important fixes: * Fixed libldap segfault in checking cert/DN (ITS#5976) * Fixed libldap peer cert double free (ITS#5849) * Fixed libldap referral chasing (ITS#5980) * Fixed slapd backglue with empty DBs (ITS#5986) * Fixed slapd ctxcsn race condition (ITS#6001) * Fixed slapd debug message (ITS#6027) * Fixed slapd redundant module loading (ITS#6030) * Fixed slapd schema_init freed value (ITS#6036) * Fixed slapd syncrepl newCookie sync messages (ITS#5972) * Fixed slapd syncrepl hang during shutdown (ITS#6011) * Fixed slapd syncrepl too many MMR messages (ITS#6020) * Fixed slapd syncrepl skipped entries with MMR (ITS#5988) * Fixed slapd-bdb/hdb cachesize handling (ITS#5860) * Fixed slapd-bdb/hdb with slapcat with empty dn (ITS#6006) * Fixed slapd-bdb/hdb with NULL transactions (ITS#6012) * Fixed slapd-ldap incorrect referral handling (ITS#6003,ITS#5916) * Fixed slapd-ldap/meta with broken AD results (ITS#5977) * Fixed slapd-ldap/meta with invalid attrs again (ITS#5959) * Fixed slapo-accesslog interaction with ppolicy (ITS#5979) * Fixed slapo-dynlist conversion to cn=config (ITS#6002) * Fixed various slapo-syncprov issues (ITS#5972, ITS#6020, ITS#5985, ITS#5999, ITS#5973, ITS#6045, ITS#6024, ITS#5988) - Fix building on older openSUSE releases- Update to 2.4.15. Most important changes: * Fixed slapd bconfig conversion again (ITS#5346) * Fixed slapd behavior with superior objectClasses again (ITS#5517) * Fixed slapd RFC4512 behavior with same attr in RDN (ITS#5968) * Fixed slapd corrupt contextCSN (ITS#5947) * Fixed slapd syncrepl order to match on add/delete (ITS#5954) * Fixed slapd adding rdn with other values (ITS#5965) * Fixed slapd-bdb/hdb behavior with unallocatable shm (ITS#5956) * Fixed slapd-ldap/meta with entries with invalid attrs (ITS#5959) * Fixed slapo-pcache caching invalid entries (ITS#5927) * Fixed slapo-syncprov csn updates (ITS#5969) * Added libldap option to disable SASL host canonicalization (ITS#5812) * Fixed libldap chasing multiple referrals (ITS#5853) * Fixed libldap setuid usage with .ldaprc (ITS#4750) * Fixed libldap deref handling (ITS#5768) * Fixed libldap NULL pointer deref (ITS#5934) * Fixed libldap peer cert memory leak (ITS#5849) * Fixed libldap intermediate response behavior (ITS#5896) * Fixed libldap IPv6 address handling (ITS#5937) * Fixed libldap_r deref building (ITS#5768) * Fixed libldap_r slapd lockup when paused during shutdown (ITS#5841) * Fixed slapd acl checks on ADD (ITS#4556,ITS#5723) * Fixed slapd acl application to newly created backends (ITS#5572) * Fixed slapd bconfig to return error codes (ITS#5867) * Fixed slapd bconfig encoding incorrectly (ITS#5897) * Fixed slapd bconfig dangling pointers (ITS#5924) * Fixed slapd epoll handling (ITS#5886) * Fixed slapd glue with MMR (ITS#5925) * Fixed slapd listener comparison (ITS#5613) * Fixed various syncrepl issues (ITS#5809,ITS#5850, ITS#5843, ITS#5866, ITS#5901, ITS#5881, ITS#5935, ITS#5710, ITS#5781, ITS#5809, ITS#5798, ITS#5826) * Fixed slapd-bdb/hdb dncachesize handling (ITS#5860) * Fixed slapd-bdb/hdb trickle task usage (ITS#5864) * Fixed slapd-hdb idlcache with empty suffix (ITS#5859)lamb11 1545062956  !"#$%&'()*+,-./012342.4.46-lp151.9.42.4.46-lp151.9.4addpartial.laaddpartial.soaddpartial.so.0addpartial.so.0.0.0allop.laallop.soallop.so.0allop.so.0.0.0allowed.laallowed.soallowed.so.0allowed.so.0.0.0autogroup.laautogroup.soautogroup.so.0autogroup.so.0.0.0cloak.lacloak.socloak.so.0cloak.so.0.0.0denyop.ladenyop.sodenyop.so.0denyop.so.0.0.0lastbind.lalastbind.solastbind.so.0lastbind.so.0.0.0noopsrch.lanoopsrch.sonoopsrch.so.0noopsrch.so.0.0.0nops.lanops.sonops.so.0nops.so.0.0.0pw-pbkdf2.lapw-pbkdf2.sopw-pbkdf2.so.0pw-pbkdf2.so.0.0.0pw-sha2.lapw-sha2.sopw-sha2.so.0pw-sha2.so.0.0.0smbk5pwd.lasmbk5pwd.sosmbk5pwd.so.0smbk5pwd.so.0.0.0trace.latrace.sotrace.so.0trace.so.0.0.0/usr/lib64/openldap/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.1/standard/16c1179d95d5688f2a87368fc4f1f641-openldap2cpioxz5x86_64-suse-linux     libtool library fileELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=44033977b2cd3c491baf8314bea0b2515c56c16d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7f3c05e7f73af23cb6494bdc58abc27b8698e665, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=185a565ee659ba8d5615c8750caf22faaa97610a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bc0285e010d15fe0b5f1e7524a336fe392af85b2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1fc0288224b8af68e92b75cbad3c171181b15047, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c5f3290747a5d9b1674f632a5d8be9a6082f4d0d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e92ba2ce91fc0f3634ab96ad75e406809bc2d451, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0383a947e2c86f89acfd751572ba128e089e4bdc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=38719dac8bfb792524eb14cab9953ea1cd55e67b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fd2fafee48e4245ea035d7c7e794dcd6d57d08da, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a5ad6f1e674e61585163405e19f721bf3fdd931d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=184305f19e223e267c6832bfb32e700783507f70, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=edda1d54894882823de6573af486f639eb295800, stripped "#&'+,0178PRRRPRRRRPRRRPRRRRPRRRPRRRPRRRPRRRPRRRP RRRRP RRRRP RRRRRRP RRRo6$U6utf-884c99a43cfa9ac55d5d7e476687b13507ba6c4d086de627caf0622d0b7fba06b? 7zXZ !t/] crv(vX0}eqD tYT˹z\B>U>m!a[4} /C-aŻb$S7Sզz1Pn9RFd㲚^UW9aR~4V@2M'\U3\Ndو1RBwMS|CI±K~HI} p#F$M@ybдle1 0ZtK1XNەLse^4钃̓;^+R9eEeAKZH0bHhGҝΕ}IƇVbRtP,)sRu9ʹYU,6:PP5Cˆ ڱr$L9v^>HEƢgT;G@5I<9 @yY)u2o>Sjx ,ymv3PQe*$q~)tj-Y-jZ(u-V[DⱰH~.",8}BS?OvqDV:64/,l b/DrEW\[a%[EȠ %a1qyk#N=`D3%c,EjWJ#CAA؎6 Uygr^_H϶&/^l@V w+9BlJhFzopeN<]3+JeoLeWs:G܎s8K7ԅڦQ~SdDt.09tc{WȇXr϶ b͒`|S3mfgh11pjE3K ,D1䂐 %3BRlq&fsVo!qE^cC׵hN # 0>#ybAcrӿ/ w9JZ#ڊ!zw.W0泿7Ϛs,⫚\n?>EP>Zy=~ڇ,ɇrKyy[jt_|1dq+2^qɏjj Ľ+dPbLE PRSE+* ,'3Qq}d oٜܤ3SpPi;sU5uc4y HgvC=ukNbCV1I`OɌDf/0]Y7>TgZ(7]׳v B6\J ;+4tKw &@Q>ZuāA;x`+-ҍj/wzCw|ⱦNٿk̉,{~^ >#~bCQ`$<ݽEemFף't,83tybe#RBin I&z)DaPũR é mp'PB|+s|Y^^g}f]B!h' .'J!45]T GX*0 E'!ă#|5nYEyRv-P ~6j֨e8, =% KhdS &X́`3;;%1Vq4[OJq"j1T`o~ҨZXy t;rc7]vAL&Ih?R)Ԯֳ"a5^xHdlU `VSPȖ)4@;9Ƒ9ӈn%z{i) ,^*廎. 㕢0)4~ RO'LW X1g 3l30Q(< TQNvHQ&r*)O%䉡̊O}#shP֚>כ,Z OdžOSSxs74!creO5Dc*cϴ1/ b"WJlviB1"/*Id>:!Tx!JoJ$Y[چ7r#G{lH/[U7ZM NS4~`_~Yc7P,nغ<4ct[f{V0S$ne@W3]m8^>[Zdkע}]1)'d:ٻqݤiᐁ,e^BPrSfj0lЂy;.M:MLV#!0qA{zQBdbj^+ #Hd >P .NOUjSuNnZ]9gɓMw]sĔTfQ}Жx䁷)^G<J-.j9I?VAjnV3FW*;^#(ȗK:TiIO@;G0[ e4Qb(v۲8eܵH $GKmfn9Fe6tOd0(܁0\uqģF/UuJ1(  Xj&ݓDAl9SW0SLD͂w^xbK9 oppP Į,zA>6LAPj5Ѹ|74=-j28qJ}Xu/nJs}8\iA>!| uNp,, ~R=T}<7>roNgtYىđvl}]J\97ƨHظr!~Pֱ Zi ӅY@6QGZBQ AtAjGcg:bZy]J<ȃ׬ZQ9Na3")PuE7C_u7[ nHd@dݹxX)3},v{my '+ ZjW6%OH\SY$ Jt$cG%C0MKL2G>]-d+֧:pP y'A<&b<9_.'s}zد;"u)ܑqX&Gpme}BJ&AP}o5k!yϭ+O YgJ f,5V;+NֻZYhY>+iyMAHFc!W,UHy0FwN%CaUkw w5-^yEǂҔup&;XN*o/N~Մ<$0kT?aqKZ|@|R (eSPx1o0}ǞMPP_UxkXhX:M򄪡;C6…[0VNE(qOhhtx)JжD?/H*sWxY M=}OrB2J;rs mMZ;` /2+!][b(f_yIg݃[P-؍T?>ϥe=&\R{E` o4Cv~Ji* eYtI;`9/I*]?E#!Wjq_5QRߑatQ6`ߍׂ6Je*f8po+I W osi!fуfX$NX70ABz!D*l]ςޕ؍ypi+A4XG8wN^%F:D86Z :OzS_6v`xǯ[&oc_C%m,+w({TSWVݤJp2ZCwh`lb3#΁!B7O/I㩤>!IN',=^秷#eOhwfshZ\堗>(/ aeTט62Q߭lIsCY뛭Ewk7ZFfOPbRt'7!kQjlt bՙla$+=19ND+s<E"ݐ 48d@z뜴!L2eVR-| Q&g+֙I@u](?g)k/q#q^{Ĩ,H;nq:-].X7N"D,/DGS7WNP/-Wͫ'=S~4V#Z@Y~E@jZc(Ŝ7z XV;K75m04ЂfDƠYvXonY3!>a{DQ_]vFOхă7Pn4 ۊafRtMmg(h뙠Gۍ TATO[FF_~a/]t\fMeLx'h̘g2Uh*S19CnA}{ġū2gȵaQ`i:&6xe")bu%uX}]Y<wJRJE? @+Ȅ˜[=7Sv$ n2 =@ <X w{ĕM@;/)G4THe`GKw$߅J65^wx; b8^ûBlt3_7'*{N.8!K '|zḞ/%3 <W۔c[h)QA]ݮg@ ih )-=aǴ!Ir,1k iƙhyw5UR;Z6nma{s3 H#jRr7f/ smҔ88i)Բpʌ61udՆvZ^Nqu8 5tb7$c(inq6+3tN*b7 ަ{>1Qj/={1={x;1&|fGaSφHYXD)4] sO*ަc2y2-wjiEC_Vt~}E4+9S"j!7+m@£%|f:%f?մydZԖ~D.l폻DriAB-L喚$8`( Ps|u pHJ?C>ifc6I+xF1~;`D[ڊ;ixCK0ܥ%&`:a.OʁMD^ V -1Ҽ0wSzFbM OO9yGVII%28V?jfϊH EGHǥP,"B:Yr [(&Qh)0r);@Q\QTy{c{a./} J$0r&_U-49?X|53 #ەϣ"cleo[1]_[h [ LA_]h hDHrf:fʕ%mBkRCTv S}E rRĘ>sE*o!,p M3/<16$m!&KĽRt>SV^*/@|'lJ֌2C]X{!c3#Ok~F|@\̗'#KYO|Z'Z_CP0e`V2Dy9BfGm>E@鹿j@p-\ NZĺr*c'Aw3YUS{U]kRH;]p!  u9JWڤItbzl9_!<E~JS~EG)m)3H'DI01?P%  E͈4 ݝ*R7sUUk.chG~S,zwt侾ludgϢTt6>TUcR59mc5(ZxCD?>T+/t ;y`uۯׂ5;Jd g+~䂹C OxYZ}@JW]쮲YHMN@f?YEJGXur#c)(ia &Ht% g.7 ]كԓD+)R[ zZz# .vSq+>tRA3 CM!9yUHτx^1.m'+NUf Rpc>Em%id%=""GY$Lo ֈn6Znr[A=V_X&q`>MI@sHuq'\;W0)u 1d!_ ˠ/A޹߁b%N6C?M5rZ ].zk. I6 4Bq[X y5XQN} ߸&A͚ 鵘T@CX!CڅRwd 17J\zԑt ׄ}7EHגt˶S\CZgf[U\19^Cf0>Hw1f\Z.*%&쉗 4ݞK%d $92"or)5(\V_*~rZ7p/r(zh``ӤmXᣆhpQh]:Ns &5kqāQQL>4o&v2k7pIWٌ2lcTD<1)w¹E3V]-H 4#1*ӇEsnC2OGڋDž iiS<`]-GIaAe9 ~}O]Zx'$-u GXM,=;9ցVb95hE#wZaw\ʑӊB|'O5KU&'\[h~CpxZ2!Ccexj. `@Asj}ʦ/sKfdJmkƥ5 M9K2Yf|2/re3Ut]T,]jrax"ձ,O@ Zq=_2u!UȂ#y3`EOǧr(@ 7Zoʵ'UKogߟ$ В1Tu/I#Lw |R#acg,672m'{1x:RóCh\K?Fz JsPë:)Ks0}@zeLH156X<.'Qt;,EたC6)^Ry҅5fG %`J[DYyas:v=0W"UĠ:6e>2y ߖG_5LKIEWyRz|ײ-jK\jF2\ L!5=aLWqy3H7)e2Q6[ظ #)!^uV8> uG jU [vnp6-b\kk*0:y_8˚ EryKOSGPмþpAN$6z1.eY}ȟNR݊bZx+tpwCj]=&&w8t$bVpuᢏ eST`QA@<>yA|Y8}W:F!*{ v2WlF<\FSOb;­01UݘwϲNnA1-jHsSW^XJ6ʐhmZV)s_\nL"|)hێO2: .o$ аu0? 8^ P ƀ*[+3h֖[~"Դxuٌ6 L4` ! vĪ)4=Blf%L߈}c|ur":,xEߑтWJfϸOZ*p D`Ok"Ľu::;;fc2.,xw7sKI~\.:Sjs8oqfK"tltGa|~V^i%:ƭo_08NG掤bV+dB0Zjpu섋 <(ONtٔs_qQH-zU:jW>Wn9}?Qދ=JxZJ,U VI\YįKP\|6c0靘%& b9D#rHPh~+uO`)FH1$Ɛ}0SA$ux*Dba%AgYfi]dV( Άs\ 4{kR IoۮS9zqnnf`v$GExIoT X uǹ&ٽr`–||AY̘`WCd ]шUt,-hrq2wɀ& n^KfU'/"6vDpH)jβc`3Y,囒]6F#Uy9lw#>cb劒7Fmmߣ}~7 ԧt?;Rw%t>E4\\⼟Z2$RVJ"5&0i(#jt˷v'Al@vݚxAt[a 0~ߖV3_wf+?韩Zdh7NJ]^6<_*8),9 Ilz)~86ӦY-3^NR8v]@V /Sz FyRw8=bv&23F{ƍ\gI %`-|I\2qanTJia:t,Vd*vٱ\KE-RDp($(Xtmlt̒ 8u+vm,קghHOwk J2!n,_T0FPj ^ާ >%Gn3{E6GcE{-k]&^nFkwK| jؔWtTh`yjuS'3&O8 )cW@9Z ?6W?4F}$W hƒ7ՕBkI;XIt:<@9.ckYlDY˩`"}-Z~l)xg2u#nD%%[O(@Ӣ4m w @Mz>ln) !'զ#%ѓ1NM]U:?`bQ(WۣP$1& CSTԪΗ`!rjr.ʥ5BE" E°+1gPc_hH=R'cD1.'ay}?ϛ)8N`xH!݅2I/"pC؋8ɩPy4ʆƌ$J~kp'I}3A 5\-M*_kv{E\0!,þQogksScQNox"nS۳Mg^UτT00]/H+5`,@P)dmӋX% KyA3A59a~EKbsy52U,4grM%q{mBh\ۜĮ H)  =0_7K _bIeaV>x @mygŵmW̺ȩ- V_^p;aMWBL@Ͳb=6<|u|2kD .og۔7wTq铡< lhpX?R)k<ĕ! eP0@MVPGT]l.lpEhwx" cl*^@qlq8rlOM>TTejR$Qx0 @]]Cx/DL-5h/aု.0 '3͘={̮LK/3S6S ~3H`#S٩QwlB*Sy%$Ch DXrx&G|ŽOV6/zlt# ptZ] H0b XD"DpvQ"[ˠ^g:*mqbB "MlXjQ=l-GшX׳f=Qƭ x;QS!t,_g gT}ۮ7/K:Eq7Y5PW _D_2xw"\Dqte>q))',BTφצ HKiyVPg9T87`B̿? (tdW2h~>T^~dnH0-̥\ã=7]f&I&MVp'0D!"Tǡ2줻܅/OૄK|fx5NS(<.aQ[Tr#v]l3eH,ɕqjÄNΝknTJț*_~#ZNGVA]M.P_!2=03ԁԟb]t %CutZ;er@rN/p0 :Υ6Uk#pwDEq$ʧt&:{' *c}\ PwWlVehm&sdP>u, 9 kHa{z|^5frZoK9Ջ.!ERd:n ~v؉CMz@^—>yL,+Dd4Q;Z2qF@*gx倌0?Z_cFLIZu_AXM2,vm3NSj<נdP6y'9=;j[[d REaX(J ]^}!bZI/oyq_x g90t :^aYoh.T ,!OdG!35cU9~B t-omC[Dڲbt>JVko#3|ᑑ鐹fq+;F:5jNjAکRE X@ J݃x㩘aLl -2Ld4 8y 7; }pYMH_K#!@X!~X3:_'Vq$XLĊIZ'EA }ݬ?|N:r=2?&M<'ߠJ12_&1mM<`b#~xC(lg25G۝.t|o`y-2%*}ڶweq\ty0e6dAmm>4LCA։$9b7]ΓIлƿ1Ɗ+ xSjv~}d>ffeѩEOOd u[泞5L+{?.MO3U#<{?ASӝ]'  hXQO'"VA1-n] GPK,۟ŽmX4߽hUsTTHj 2+󠰟w:G:4RWtn*_apX%u;FL`9 Lt_ZOTABzLSs,R=+@.dT4V)ǸGBJ՟jҤ$Cuܹ0bcAEYyw޺` ]ΰ|;ڳ'n mh]a*2%yd*ؽ4XJ01(&{,ۚ-|G7PHse~6q.:jQ!7&_y-U@Q=<ƿ5+Ź0A~5P7O{|pl-`AYM'rchVeoOX0,J{i 0y.X#%}w|ﰸb- b_%^.â{2f\yr?Li-Nt&U_Lq-v8gW`= }ٵ/lc9T \gQPhL[-ޠ+;m{#9DgX5.7nqr&zvqϐ9 [dž6`kpw䋻';&^i]Ȇ.+B޵iI}S} DUV&OÊk7,3ek6K3*ћP4q@ΏZ1&}Ӛ(l9i2~gNc 4䩵SU5W܁dQBx=k+)e#}60hb7]fAEs M(l@odrwf4táGv KK8v0f8+w?y6 G.twkJelLT-cUEތ唘- f4'Ctc%:dm8{-Dͧ#͸9m6sO#ͣs|k4 }W QʕKjO-.b ޥ)xp$ lӉ V}<{gVÈ W.!,P`}'gT[,'8j^+ *7}z8 0FaeJ+j3#0L |ĝDF7 o@$ojiGLY 9//q(a:@?=5^n@1%Yj;nBx5yXES׼,= %._ lr/Tܭj >$˚?@N`$ nC/G|T:8:HM1#.HY;IvrZ)Z̓c0z?44{9]2h ?ZՄei S 76Z8ۆ޲V{*9 b!a·`O1{]vnDDCr/I eeҞ~v*qOlBgih[oIC k ?xlC(r(W]PeNE,TXNlJ ~"" h܋gF4~K!B Dݏz_ĩXOQ :eS/.qI[p94w?;Y ZfUu/ZuѶY^3ș5cR1Ho>LOU(Eg!4k~lSB0 FŮcuTm#vj]496ނҥ ~q2kpdmTn5qtΆ6~.>LyDVEDh [{Jԡ5S'^B¢>|hL;nɶ9f K\-Wz- qa(@.e=/Ǣ-7A0|UsHEzJV7O@:g{2oxlN܀dj=ԣMe]@9×&&6DVUu3GO8Ɇdt"&#Ǖs,2,j16ZM=S91iM\th?;+bz7%+siPi!{tDX@+?O J}* 'E͵߉Gм^5SYed(z$侵IO4>\+VlPPFb>N>fOT3h%?MZ.9BI9/ؔƇ(Z$nx]8{,'+bAҍlrO&CA`bS{eV/n!8~ח>e"U?"byeg.[ Wac\L/7sxP@hYڋ5Vzc3 |js3EaZyY'Ȕ)vl=Ն`5z[S7ڤ͖.|eqܜE-4؂:=|1?l!3I6TX8qv5cgPizD$e댸PK[WQd}ndjA"$AZ^oLVpRPn/nMwO lËһ6>rgXӍP|[nEr^pLD\3qbؒmki]HIj6ubSTT4Xt>HjAz,ܮ)5(Q׬cAv誛 >.\3kcFw_ÚNEzom'x k=2q*%-1V鉣-3̆׾qMʜ3֖v4O^:;ΐ *4@JÛV'3`XaK}ǘuu2;Ev¥ΰ)y6 (y*ۛε8t~qZa_t c=VIgKCUJfl:񰐿>OݮGˀ"w)d0̾7gED?=&p}Wme0xzRjrO0WEeE*&j//HPy >o-3R-.Vo1C_}3UY=hEzWr&a7IC>660``asuf}$M|jZt3~9uT?Ώ5O Ȼ~KOJ^R~bF^i6RDv*X7/ί(m/:sva»,ҜSZߥZr(ĭΐiX/}M\SrK`c 8-+#*QuA ߫/[uEøf@)w@KB*6w RYǏXXD6$@pKWJUFnZw ?xOiy[YN9elSLDFa;e= QCW.}h5ũ@,Q3 9"Mp|FXp1r4 VcV#*a>`ƗMkxG?mg&tT"G:2?ZC3zQӧJvVfg_ջ@jyVv.YϜ %bBO.ⶀɿh,'kd=ʶV˯kWi lH<` p\5j(3 8 .SeݠFVTupjBìOU"pQ(|BvÒA`?1#hN7`&bPbDc*&T-݂txJ߭^ZXrG[2>W4fCX%8}n*t*ptd#>Zbu侺uWQ$ehĢ4E"Z}7hi*e|;#:Bw;wB}tf'A6KKMギ ^l@$3ᄹ~DÈ8$~ Ik ji_Ό OXQM>::Iq7 2#;Ľ ݘs^;{4J(8;|qMiQ-(6=zݲY~1 }k:i߫_S>d^c,MS~팄y6<\yI6IkLx []Su,z'?qGHbJeHd"kV]('S{f?yMºY}v~`wDFPC;û)eb`T ߣmw?.30(WxyH*sj;)`^7fLO橧m]N H[:,(-gř |$ ̣Zλۘ ~^J8W% L3kI HO(.ջf%-kuGFVBjgV0;y'r a>*bur]bI[y7\6"\gS վ%SStKg\73{JMuDsjnwN*P.Q!Ez%IW'붂K w`'g)RO@_l!mcZBoШ㈈gK{ hiVp\>9~ 1odW>nxgah}o| y™m}y" Z$]'OH/q=xyLQ?"4g=!JWKGlnx8sOrZ+@gT`X~@$cus/"/omsa𧌼 hgw;r'$RYڊ#W閞5V;P+tur\yNAm/ B̃ 6{fdgXrcbm 9u r:wq&UXXFٴ?>;lr.,m1nPS b ҩ?ɂߥѶ x})`it;|F6ؕ+8 ^B7jmMeo}W>bI}ZePm+O1~MW7!@!h`MPϹhOFQY8~גuZ g}p?tTɔu':_qfg̀Şɢ}Pt>&a$+79\5)^x`.Pk۲\[5h;מe޴'ɓOO! ݲvPU" #b*'wX v-2L4bN8L Pozmh9d:Q9#5sx p3Tg":41D&ZCM+_8 3ROM)7bE<3C&%qJ\ rvzj.f^ze+F06AWfơ`dav Iϐ) q$P| H TXM6J Z*WoX3CM-MMK8a_xQxh3`k1궥fkӣU ;99ͣ yL^y#4`XTyDzM3M|&;bilGɸզOO.i4a,N5;܉##Byl_sntgᾺO |:Rf~JPa"OP\K´~ hnim๯C .oe$27v1D=R|dʽ_jU:@Z ,I8pw(` 4 H~6s +(GUO8ni*4^ߗMkEZF<N$?^^$Yd!yidkkDFw16h~(#rg^IAbChs96[,įnpz$(ǶEgc)1N&xf_ⵔ{ ? g|6Z ϗBԖ̱.CNvAs11T2W!W8LAN^M;xXisE_bg*Wk “/c%`YHS?4nFr/\CBa;rzNs~nj<5\Z/3rߘ ;~-2TGwȅ]8bͶsRw:}YJ)JfGDKoFr"DT7 KwL ש&+u%(AUAm]i׷x[r?eBdЌa|Or&j )C<*vM^;X\Z"%ɶdSO}3,t}غ;j$e8fFH5PohΕ'AFnϐ|wnBDXkM4x 2#Mu]#nkL:9t/Z|+2~WdzC$( `@TQ/ča1=E,hD~#ۻ?0SUY(;a\X}EADv"=(wP&'uc36kD0)Qes[z Ї~M/q5'4<={pLߘa3AERL/[) u^'Sm<{e_ȩXw(a4/YGP  6!F'w]Ĵvƈ"|T WS,]6X'p|ޒ\M5!8x;M'{QQa%Cq0sEdFNr(< 4u)7W. 6jin(XOVN @ ]Ip8TUҰDv:?-VdmofLd_6MovWTxJr}(k BSp_י41k n`ZқQS*X{8Xy,4#VJx Sec--K<<&yo,ӗ%osY6s,ҩ?TްwӉ߀ u3v>5ZhUYGX=Y|)N}c4 hކ^un̿,JHVF[zyZOf8=xSd.-3Խ}jPDG=)nk2}3#5`h \ cbLRg^Fn' q7nu$pn=}<3awyё*ǰA@Dgl &J~Q<=tq`6X1y7Nc?h4ޫjB`- _n0e{IJJ !)Ė3!n/Gx;J^h}LHrGq6 Щ0%PLIWq`p&UM?i>rΝO<B; ѓξM챛mlWp~W͘> cFO11Ћy[W$ѽg"GޚPaO0؏,dvjlߧ $pk`Y/|Bo1S!ǎ}lW-ͶSpqɵB"=Wn:F;Xb|  SbL<j)\kF$Kf[ 2 ?D}yOʰ(!0l +lU$zQ1g΅)s) 9-,D(~0Ԁ3E?ck^8.O("k@0WW Y#c5SH1 myp;ɪBoa h`tRZ 9I;p5|V- 0_ rXU |ɀ,&U>1=*̱+}?3ѰH[oG-#&;G4aMsC/z`7I.Ԫ{H0- P48:~B74O36 `gA1xYͧx;'j>US0(7'*' z²fk>KkFR2bBG,qjo&AFDmФ$hqO`F?n|@AέUI55 60vZ /pG#G[~ZlͺF$G1FFyn U|D Z.yX\W\q ɴڬNY\އvI715 f%Oܡ 4#ZrvTUP^8W3=m:,$X` ;\!9׆ H7KkǨ3" 39N\c^q"X {]c0Ly3^ed5q^kGRGy\9 XYYM*Vt\͢ bjDBZy .F_|  D-<35*ԑ1c4ۀ(I1RiTu# bvB6 +u"F^Dk<#牼{ښ9R8j =T'dd`?]R\-\qaZN`wICXrL!ii8Ii 2 c26sQވ6@]CK~lZ^5}D#Kt"ɄV:̚<{ e3r%͕wlсFgqi}辫ჩyc".nLeO. sKT" OZ>Zx!+F V񍇙.=+||9;]fB#Kawh> w-7N$+-]FcE]F,$'u|,<+IZܻ8xJ#Vgð+oa4Y¼ i['^Sje!0wzWM4i1>MP:G¸1+4Faǝ.Kqʼ3nq !( M@ 3Pz߈ν@3bi'n5+[ FXJX(Czٵ}}\GD [mխC=RLc:JAٰ;yҭBNg3#cP$_[3\WIZ$*9CcG=s~ ˚TfOmydlf c?BY*o"fRk.ͅ`̓$:! ʱBm^fM&_H2s*\dɣ o4:kKF١ъ:y] R>n{3(g'aZ ^տozLjgP^~N݂cQTNʔL٘I=D6ìh TE?)C)ħMVơݒIO#$3Www9w (ȸ&X.XkGpb߯0'C9!O}2Fbv[DG}W"|DQI+]wM`J=Y *"=2wHNJ#MF5@&b^tdJl<>5;Zw'1Q3g "uG Q$~#uV%Y&D},V MW3D\\dA{zYk*VgB/AӶ&κb>H<[H1|a eb Xa uwC?B׸?i$ J 2Npď9(zdD8s'2&OsK[!+ʚfȵ\ZW;?L+ 6ţ_)D ȵrf?Wc4JM{בS{7U@_4$l\6ÒY]lL)y^nj:9WM2B4ܭ@@ tLf)fRGFu2e$u~wx :3\ƣ"2% eʼM4h}TVC*vSAԫ߻+L!/ !%'$NR}p ׮@qfgЊt7Z;m`2Rlej--DH^QTē$)RenAk!{{^ۘčf*bζS_DX|5F)wGчD\tdX7n_WR" r'6kз7S#3+3vTh1^S6i.~k$ٴ\fF[CQH-x9q^7<d&#\/kY+a8*;O3֘49mdHm &3 p,Xf}\]eP*G +YӁ[ avȹV s@8W*"ԖY,(fd G5MrOa/ U M 5+/~{iuL?r*Y Ag[Sia)A&;쮡>ᤖ0B'NZq<4‡#(|Y41ꟺUq,$ym(|q:s7b y^tٔ&QsQXFBXn~ǡYž?-PT*<f28K%:ɴ9hbʂ.D/1:ڤN˼A_yܻzl0Dqqy`de}ʇVH^[P| v6mTGpwvsݏa$ѿlX,Mk7:1s 7VɼIgΏRp,_Eb8|՘) _Sv[;]ajs1)B߄%Cy}s섘O&,%ht9 | cPH[=!B$ #0i9q-7Dy&#tӮP|7Fi槬e `jugeqOD"AW M[eR0(&P+g(tǧ2ӢrTm?=>'`c|-ɫFe=hYVq d23%^.Z*ˉV;"f3 Ute"e>y@[ W¹mXq @=c0X`ͣ"Jcmv[7bq1z};.edCVTW*^pj3y*;c;?y$Lun@Y!`_<4XJD=\U/w Pj} YXois3#+~մ^(2q^ fR]մ0|Z][L{,NjVMU lW:ZނOw*|et_+u=VH12n&FAJ9mxB9UH\GGf70f3vL5i sBj81 ahۥ9qwd8ge(99AaZC69yo-a@dyxv82sW~kȲS!}@ 5%4IF[DYɯĞԐ -[&c׌[!ąYڣɋWю|i -PʕȠi~&u'Dduk-71\S&*E6ߣM`T _PՈ:2Q6SO?[6sm B47:E,$-qbR: 5UOh*eoR`7o˭kT7 "rش1'.d<dG-bBJEDf\z6H8#Pfe?9!;7+/ݦLiu4CArA9}7bek  I\Z0x"hi?Y`jf( b֦ND|Âo%#(A-6*6/ )O,XATÉozj'Wo9OhX[)pC$}+ ya@35e,pH}D)"՚!g=z)#Cf8 ?qc]AMRߣ0qyNoi*V,tXdv \kᦟbڹ!zӵe+h~Mkr|b*:pfHk.00jI,kB[$k'pӕ_1eŦv?CY1 GuvBz/6QAb:IaPVФWi8`,7c-ЋOBn뢣is@k;e ^A*E _o'K`0J.A[Ȉxte[zc>^GOEɮ$ħ6~pL&PH|VKҟNp&(s {{ZUf+i_hT(|Gܩ&׽OUQַ:MEFϨ({1aK6XD pQBrP(;Hf*/xAMid5+g|oPbyS<;r$ANAa1*[J7V+J}z@ Ë'p?Hc{[ cZ]E> q5cyڡl1M%9s8<UR:ϼHd*om2S`Nx#&lI ~Ɂi[}fJvw&mf;D`\ExZ?D^~ҵF#[2Aw{`(x10(р8S&ݾpI ok`9Ur&UL2{Dt30V5ЯKH4jSQQntגqRyhTU]Ч7& dwAOK1&=S~W# ֮YoyWR#b) C5.!Py#>8ty 9[X_p~Zg cSj*{' 'cGcb)؊-@ޯO< l*irZ֋Y½rN_5Y|%^1Ms@)*}^Mцt;,&2i4WMG49eFzĥR+0T|=T}ȆaIkR7.>o^*PVrhx(2.OI4fUaY]KmL ＧpP`е:-Y}[9X]=fс1D/>Vp!~7B>m^%@r'5ernF;YaiR0CT63ca"ċء?F]|O2|ǼEu-9n7gR+gHx3!:d#4?!قA؋Mpx-ZbAR,@t Bab[_Lا-`g,@i4 .I4G 0rabQǢvl2A=>e B~.:ś]q_Z (P[>TyLLFhÛezbX 5oDY5MKŚ`-!)/o*~SU߀?\^:qrpAV34pp!seNIE(;1DP# Dw3 ꓙ3Jr7!bWX[~kqu?N2Hހv^řDQQ=RNbP98͢FFL,zZ a̦,+حdl'cӭ0Z7I-k}$ tj6wVg[%XCOT_wx i?,ei4] HS"<[.Yl g;PqE̫QK)Jk)`N~uL68Wu7׳&4I Kʱ0fSI?G͗HVu$[PN[aϷEO8Oj1~>dA X,k{7<5p6D^..M2vve|,_[Rfgň}x fUI T5FGzk/=A-z&Ａw_< ~c')mu=.`Pjj"QvFiA5ճWzPP .s\Pb .7ᐫoieQPHQˌH E#YR4ʪuW6geŗ]1ivX2ה6$JrMyz%_Wfөr:FkfkGd|LFPQ @0DԇOͲߌCr/9i$ͤ~F2t/"H28u-CA2%tA3 ĞʃK&B bע4MmQ &Q {_tGNPG}TTZ9@[V(=5Ga?C$7ފ.E)$ ΌW:Yeh_KoK4y(i)+NocMun6qY&04F]t'ۄ̖^C썔e82@JuBe)~>aPfksY "o܋9|+9LDeE{l$ʃsЯ23{mץcaX ?+~KB7Ff&7CSLe( O}'CۤN'_D^="Үt搙u^<k6@כ9l :{Ft/$z 9!QyO I $5rp%CHhs&”)[FI9;Q>mG$!B4vK]M3YAd'l 3R!H)y1 XBlxgbَtȟƠLwf~2 kD2NH !Ҵ]0K!;ؾDW|]g$_Y1!~_ m4kP1ˆv|hclO@ɡs9u+6;萛e'$+#wؓ ^[M8tkp+NU%5@E\S8͖$+C6#̏l]jfIKH>g$QLO Rdp&`}_w~.5_U숐QM@tSCl SjFHNW st?V5z>4ZToFB fԟ .yMTΘWֈN'aP7gydAu3 -* c5@C&+3cI|5,lgX;$ep@F7$T<"Ay@⁼"楤/Rɂ8]QoA-OF)IfB$\jxlO[+ O3 d1 蒞(B+5(A 68>O@&N&~/dD:g9*x:zH>TWXLѹg$& Ç`;3p+g&u4ہ":`ĥ,Z@['Y ׈ FcO s  .7 7Ϣd!4Hi׵12B~ S0S1N68NdA£=0eTQA;slTC",/ۊb+ؗjʷ0ED$ydnzld wl1)Jڡ"(x{'V_/]F 1 YZ