openldap2-devel-2.4.46-lp151.9.4 >  A \i/=„ZXPU;[F)/l7jaɧ(?e52G+?\Tcv9mM*a6G:(tNxWA=]:}5ۊ1dn0Q,4nM7|>@#:ԋut=vB룮_ĉx2ݤ5Ǽ~ Myuva>ԗӑ6 Y*]8'63d151211ab936fc7fe0e4d0c682e5425acc95092d5cc2e4f0d7bc22f802af1e4d2a663d28724928afbc9d5d0684df91444a753f؉\i/=„1 ]£ܙPH2p؁AKVSTDp,r}ž-}5#R̗6?0y- …֡ M>ӬPe3.h%w]Z΄,m-v{H=~ayy0$bF-r.}_բ`KmuL]S ` ֔ilXZ̶H'*Mda԰ sJZ7^kZy0h3ɣY ՞ a>pA?d # Z 4:DL  T  \   $'++.../m///(/8/f91Df:7fFGHI$XY\]^Fbucd~efluvz,<@QTX^Copenldap2-devel2.4.46lp151.9.4Libraries, Header Files and Documentation for OpenLDAPThis package provides the OpenLDAP libraries, header files, and documentation.\,lamb11QopenSUSE Leap 15.1openSUSEOLDAP-2.8https://bugs.opensuse.orgDevelopment/Libraries/C and C++http://www.openldap.orglinuxx86_64;$$ T d    ( #J4  Z  {Q 1  0  \\\\\\\\\\\\\\ \\ \\\\\ \ \\\\\\ \\\ \ \\ \\\\\\\\ \\\ \\\\\\\\\\\\\ \\ \\ \\\\\\ \\\\\\\\\\\\ \ \ \\\\ \\\ \\\ \\\\\ \\\\\\\\\\\\\\\\\ \ \\\ \ \\ \\ \ \\\\ \ \\\ \\ \\\\ \\ \\\ \\ \ \\ \ \\ \\ \\ \\ \\\\\\\\\ \\\\ \\ \\\ \\\\\\\ \\\\ \\\ \ \\ \\ 580f36d19ca6a26250e8df7b41d3c25228ce02f9c432d39bbc1da543938bd673a2b6d6ab192265b2851d891db81a75bed9696d79d8f93291c3db93025fa4cdf5cae1a2adc2bea9118ce3a73214e247d35b1352c1d589a5cd231a95f8ef49c99927b92ab08adc0ad19a4db020f186c0dd4defe31ffaf7ea39f701d93bdaffdceacaec54975f7198552201e4b8b398c715290598fb16e587fcf8c88b1676fb9a769b62289067d896eaf9a70e05b0f9636b0862aa6ae2f2d31f7bc53978bc49105d304af82dfc0846ef12c1bcf2fff9dc8c64afbb137fa5bdd37c2164c0b288a4b159f1323a5d2437cd3614e8b969d4e293b927fde001685303812c624884d33cc5c155e6ad14c54de1ea581c97f805caab3a5316b09a4f1f3c68f7f6f00771ca1fd66b6e51a26ec9a6d6a793dbbc9bf5eb2021cc278adfd41bc9c39de3d5308f9fa3fcf64e3f3131d2f7bbb8df78163442adb93c1630592a324446e84c7554a038c9f8bd17d8b177410a0da968c56113e38e742f6b15ffc2b199f0161b74175e8717421f9e3fbab3fbd9d9de0b282ea764868446e53bddc837de59a4113cee93c676c735a298268cb4c4ef86c60714a89984ca447bfe2c308e82be43336600c5f41afcc6fffac8bc5e00e580a0f0fcfa47965bd37cc5bc3b53da70ff3a4baa244de448eae7bc5f2f68fb690d0607772b974fe82750e00b46402ceb6a10becacfdc07d1b642762f6af1036de29371372a0ecb242773bc09066e023f060e345f45f85ff647c1b3ca0bcc2eb7dc68d40d9624dfb1bd735c5f7b135e4ce90d560f3de1285ad6cbfd51976da34ccab343263e5379d8594db00ad47e7ab2134f44856a3b0c13db8c687e5fe25eca23eb7d05fb55387704ccb76eff6c4e720e542303302a9e983d7cc9883253a06b8f6ca8987a142653b94f0b54dc18982e275a1d03f28197b69011017f7e2a52980105160c7cf589072662fbcc6ea32b6eec021caa1ae90d5fd68f5e20fcd065af70f8b154bac9a2bf38d9dc2cbf5cd6eb99abc187721c88b1ebcc484455114fff24de034ef42466863e6bfdf25b87bf7338904589b22de74ff2a466a7d5b55fb194b1e8cb62b20c9ecc6b9e85e698142545757decd18a658811bd44b794f7934945fe5fa645ef13504a827768695626dfdde50560af1441bfc07f065342f0d89188c539c1595d3c794dccaa2d48c17dcaf4f2c954b96e1ed08a2ec9029d2e200d98d3f6e0c5d40571e53a0bf19fa5bd427470ff93df6fec171f32b96076989d7001540f2438113f5f7018978fbbcb88b11670f58d10da26716fa17d7a151f8c6501c5373848235f9e4f45fe86b1ae04675a87af01e517997ec0856d4f6848f43623642ecf6536af1ca16cc7ce1dc0a7edd1fbcb9eea3e93f6b7a5726aadc95c41cce43a04ded943502a77efda72cfd5f8853f99d1aaf069ea92fe7921e918d4a8d948f5726a30f9b9d8e8697bb81845a031dc85f44e201421aa3a1435f3fd7758e797766b10ffe2382b4b7a166875aa4e9c8e5ba2b8e39a27b80cdc538b5c42fb74b53b564af601ee41e778cec8dba6af645fa191ea9652fde6225d713e6603b889ca7d3105066f5d926a2cd0d92e871fba9b02d8219cb401336783f1a59c0dceff2004e533ff6a4d972c85ddf355460e25d35c5aaa9c8c9b0186c80975d7bc2a3a18018999e96931463805e3fd0153fde28ade789c75f36cfac647763ca460f36de60ec5f9df4bda3049f62186d8208ace70800dd2c6b61e1e1a429ea1195a108ab48bbad2e59273c84f1e5c8eff9fda6927b175f1043da38163d808985604701aae87088323562f76a9d94750519fc80f2832778a7234b443d7555a8d206bebd14d099bf7319bbeaee4c2628e384573aee5240eed44ad149fb89aaf1ca17ea0a8172601cafbd176690a736aed7653629ee905fec4f571439e0163ba6ade67ba406b237c5b858d22b221b8ddd8cff00c687b4026cb49d8b40569c4edaf6c4c1a155dbeb013caafa769bdc115b23a9231dea6a92a4612c7e63c4d6afb0bae7bad192468e82ad65bfd2989d5f595406889c0cd74b06055331ac540414f8b289d2471f6f89e1fb3509406be27748ba8a033b30903fec8e0liblber-2.4.so.2.10.9libldap_r.solibldap_r-2.4.so.2.10.9lber-encode.3.gzlber-types.3.gzlber-types.3.gzlber-types.3.gzlber-types.3.gzlber-types.3.gzlber-types.3.gzlber-types.3.gzlber-types.3.gzlber-types.3.gzlber-decode.3.gzlber-encode.3.gzlber-types.3.gzlber-decode.3.gzlber-decode.3.gzlber-decode.3.gzlber-decode.3.gzlber-decode.3.gzlber-decode.3.gzlber-decode.3.gzlber-decode.3.gzlber-decode.3.gzlber-decode.3.gzlber-encode.3.gzlber-encode.3.gzlber-encode.3.gzlber-encode.3.gzlber-encode.3.gzlber-encode.3.gzlber-encode.3.gzlber-encode.3.gzlber-decode.3.gzlber-decode.3.gzlber-encode.3.gzlber-types.3.gzldap_error.3.gzldap_abandon.3.gzldap_add.3.gzldap_add.3.gzldap_add.3.gzldap_schema.3.gzldap_schema.3.gzldap_schema.3.gzldap_bind.3.gzldap_compare.3.gzldap_compare.3.gzldap_compare.3.gzldap_controls.3.gzldap_controls.3.gzldap_controls.3.gzldap_controls.3.gzldap_controls.3.gzldap_controls.3.gzldap_first_entry.3.gzldap_first_message.3.gzldap_first_reference.3.gzldap_get_values.3.gzldap_get_values.3.gzldap_get_dn.3.gzldap_delete.3.gzldap_delete.3.gzldap_delete.3.gzldap_dup.3.gzldap_get_dn.3.gzldap_get_dn.3.gzldap_get_dn.3.gzldap_get_dn.3.gzldap_get_dn.3.gzldap_error.3.gzldap_error.3.gzldap_get_dn.3.gzldap_get_dn.3.gzldap_extended_operation.3.gzldap_url.3.gzldap_get_values.3.gzldap_open.3.gzldap_open.3.gzldap_open.3.gzldap_tls.3.gzldap_url.3.gzldap_schema.3.gzldap_schema.3.gzldap_schema.3.gzldap_memory.3.gzldap_memory.3.gzldap_memory.3.gzldap_memory.3.gzldap_memory.3.gzldap_modify.3.gzldap_modify.3.gzldap_modify.3.gzldap_modrdn.3.gzldap_modrdn.3.gzldap_modrdn.3.gzldap_modify.3.gzldap_result.3.gzldap_result.3.gzldap_result.3.gzldap_first_attribute.3.gzldap_first_entry.3.gzldap_first_message.3.gzldap_first_reference.3.gzldap_schema.3.gzldap_schema.3.gzldap_schema.3.gzldap_parse_result.3.gzldap_parse_result.3.gzldap_error.3.gzldap_rename.3.gzldap_error.3.gzldap_bind.3.gzldap_bind.3.gzldap_schema.3.gzldap_search.3.gzldap_search.3.gzldap_search.3.gzldap_search.3.gzldap_get_option.3.gzldap_bind.3.gzldap_open.3.gzldap_bind.3.gzldap_bind.3.gzldap_sort.3.gzldap_sort.3.gzldap_sort.3.gzldap_tls.3.gzldap_tls.3.gzldap_schema.3.gzldap_get_dn.3.gzldap_schema.3.gzldap_schema.3.gzldap_schema.3.gzldap_memory.3.gzldap_schema.3.gzldap_schema.3.gzldap_schema.3.gzldap_tls.3.gzldap_bind.3.gzldap_bind.3.gzldap_bind.3.gzldap_bind.3.gzldap_url.3.gzldap_get_values.3.gzldap_get_values.3.gzrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenldap2-2.4.46-lp151.9.4.src.rpmopenldap2-developenldap2-devel(x86-64)    libldap-2_4-2rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.4.463.0.4-14.6.0-14.0-15.2-1openldap-devel4.14.1[vZ@Za@Z@ZZ.s@Z@Y*@Y*@Y@Y@YYp@Yf@Y7Y6@X@X7@X$a@XWk@WbW;VVɦVŲ@VŲ@V@V@V@V@Vf@V^@V\:@V@V @U4@T@TuT:m@T @T=@T@Si@S@Sr @SW@SK@S@Rb@RRSRSQ@QP<@P|@P*P{@P{@P}L@OOD@OU@OKp@NU@NؽNσ@NS@NMMc@MY@MGM6@M$]@L,@L@Lp@L*@LvW@LI@L,@L,@K@KK@KrKv@KEK KJ@J@J JJ\s@JHJCfJ67IA@IIÅ@ckowalczyk@suse.comzsolt.kalmar@suse.comzsolt.kalmar@suse.commichael@stroeder.comfvogt@suse.commichael@stroeder.comrbrown@suse.comjengelh@inai.demrueckert@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.comhguo@suse.comhguo@suse.comjengelh@inai.dekukuk@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comlmuelle@suse.comhguo@suse.commpluskal@suse.commichael@stroeder.comhguo@suse.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comrguenther@suse.comjengelh@inai.dejengelh@inai.detchvatal@suse.comvarkoly@suse.comro@suse.deckornacker@suse.comckornacker@suse.comcoolo@suse.comdmueller@suse.comckornacker@suse.comro@suse.devarkoly@suse.comvarkoly@suse.commatz@suse.devarkoly@suse.comjengelh@inai.dejengelh@inai.dero@suse.derhafer@suse.comrhafer@suse.comcoolo@suse.comcoolo@suse.comrhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.decfarrell@suse.comrhafer@suse.decoolo@suse.comrhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@novell.comrhafer@novell.comrhafer@novell.comcristian.rodriguez@opensuse.orgrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comadrian@suse.derhafer@novell.comrhafer@novell.comrguenther@suse.derhafer@novell.comrhafer@novell.comrhafer@novell.comcoolo@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@suse.derhafer@suse.de- Fix slapd segfaults in mdb_env_reader_dest with patch 0016-Clear-shared-key-only-in-close-function.patch (bsc#1089640)- bsc#1085064 Packaging issues have been discovered around the openldap_update_modules_path.sh which has been corrected: - the spec file was wrongly configured, therefore the script has never been called - the script should create the symlinks first, as slapcat is useless on a system which is already affected.- bsc#1085064 Add script "openldap_update_modules_path.sh" which which removes the configuration item olcModulePath in cn=config which is after upgrade from SLE12 to SLE15 holds inappropriate information. If the cn=config is being used on a system, the conflicting items in slapd.conf are ignored, despite of it, the backend DB configuration section has been also commented out in the default slapd.conf. In case of correct cn=config (the olcModulePath has been already removed), the script stops without touching anything.- Upgrade to upstream 2.4.46 release - removed obsolete back-port patches: * 0013-ITS-8692-let-back-sock-generate-increment-line.patch * 0016-ITS-8782-fix-cancel-memleak.patch OpenLDAP 2.4.46 Release (2018/03/22) Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717) Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373) Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687) Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791) Fixed libldap MozNSS CA certificate hash matching (ITS#7374) Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389) Fixed libldap MozNSS initialization (ITS#8484) Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650) Fixed libldap memory leak with cancel operations (ITS#8782) Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705) Fixed slapd to maintain SSF across SASL binds (ITS#8796) Fixed slapd syncrepl deadlock when updating cookie (ITS#8752) Fixed slapd syncrepl callback to always be last in the stack (ITS#8752) Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778) Fixed slapd CSN queue processing (ITS#8801) Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720) Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520) Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226) Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404) Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692) Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752) Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100) Fixed slapo-syncprov memory leak with delete operations (ITS#8690) Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444) Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100) Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607) Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800) Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486) Build Environment Fixed Windows build with newer MINGW version (ITS#8697) Fixed compiler warnings and removed unused variables (ITS#8578) Contrib Fixed ldapc++ Control structure (ITS#8583) Documentation Delete stub manpage for back-ldbm (ITS#8713) Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121) Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818) Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715) Fixed slapo-syncprov(5) indexing requirements (ITS#5048)- Use %license (boo#1082318)- added 0016-ITS-8782-fix-cancel-memleak.patch- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Add openldap-r-only.dif so that openldap2's own tools also link against libldap_r rather than libldap. - Make libldap equivalent to libldap_r (like Debian) to avoid crashes in threaded programs which unknowingly get both libraries inserted into their process image. [rh#1370065, boo#996551]- use existing groups instead of inventing new ones- added 0012-ITS8051-sockdnpat.patch- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- Added OpenLDAP new feature implementing OpenLDAP ITS#8714 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- added overlay trace to package openldap2-contrib- Upgrade to upstream 2.4.45 release - removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch and 0012-use-system-wide-cert-dir-by-default.patch - added 0013-ITS-8692-let-back-sock-generate-increment-line.patch for supporting modify increment operations with back-sock - added overlay addpartial to package openldap2-contrib- Remove legacy daemon control that was used to migrate from SLE 11 to 12. (bsc#1038405)- There is no change made about the package itself, this is only copying over some changelog texts from SLE package: - bug#976172 owned by hguo@suse.com: openldap2 - missing /usr/share/doc/packages/openldap2/guide/admin/guide.html - bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546: openldap2: slapd crash in valueReturnFilter cleanup - [fate#319300](https://fate.suse.com/319300) - [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545) - bug#905959 owned by hguo@suse.com: L3-Question: Are multiple "Connection 0" in a Multi Master setup normal ? - [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546) - bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545: openldap2: slapd crashes on search with deref control and empty attr list- Drop binutils requirement; the code using /usr/bin/strings has been dropped in openSUSE:Factory/openldap2 revision 112.- Remove superfluous insserv PreReq.- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch to let OpenLDAP read system wide certificate directory by default and avoid hiding the error if user specified CA location cannot be read (bsc#1009470).- Add more details in the comments of slapd.conf concerning file permission and StartTLS capability.- Test for user/group existence before trying to add them. Summary spello update.- Move schema files into tarball addonschema.tar.gz: ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema yast.ldif yast.schema - Package previously missing schema files in LDIF format: amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif sudo.ldif suse-mailserver.ldif (bsc#984691) - Fix a minor issue in schema2ldif script that led to missing attribute in the generated LDIF.- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.- Move ldap.conf into libldap-data package, per convention.- Move ldap.conf out of shlib package again, they are not allowed there for obvious reasons (conflict with future package).- Build password strength enforcer as an implementation of ppolicy password checker, introducing: ppolicy-check-password-1.2.tar.gz ppolicy-check-password.Makefile ppolicy-check-password.conf ppolicy-check-password.5 0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch (Implements fate#319461)- Remove redundant -n openldap2- package name prefix.- Remove openldap2-client.spec and openldap2-client.changes openldap2.spec now builds client utilities and libraries. Thus pre_checkin.sh is removed. - Move ldap.conf and its manual page from openldap2-client package to libldap-2_4-2 package, which is more appropriate. - Use RPM_OPT_FLAGS in build flags. - Macros dealing with old/unsupported distributions are removed. - Remove 0002-slapd.conf.dif and install improved slapd.conf from new source file slapd.conf. - Install slapd.conf.olctemplate to assist in preparing slapd.d for OLC. - Be explicit in sysconfig that by default openldap will use static file configuration. - Add the following schemas in LDIF format: * rfc2307bis.ldif * ldapns.ldif * yast.ldif - Other minor clean-ups in the spec file.- Use optflags when building- Upgrade to upstream 2.4.44 release with accumulated bug fixes. - Specify source with FTP URL - Removed obsolete 0012-openldap-re24-its8336.patch- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch into 0010-Enforce-minimum-DH-size-of-1024.patch- Upgrade to upstream 2.4.43 release with accumulated bug fixes. - Still build on SLES12 - Loadable backend and overlay modules are now installed into arch-specific path %{_libdir}/openldap - All backends and overlays as modules for smaller memory footprint on memory constrained systems - Added extra package for back-sock - Consequent use of %{_rundir} everywhere - Rely on upstream ./configure script instead of any other macro foo - Dropped linking with libwrap - Dropped 0004-libldap-use-gethostbyname_r.dif because this work-around for nss_ldap is obsolete - New sub-package openldap2-contrib with selected contrib/ overlays - Replaced addonschema.tar.gz with separate schema sources - Updated ldapns.schema from recent slapo-nssov source tree - Added symbolic link to slapd executable in /usr/sbin/ - Added more complex example configuration file /etc/openldap/slapd.conf.example - Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap - Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap - Added patch for OpenLDAP ITS#7796 to avoid excessive "not index" logging: 0011-openldap-re24-its7796.patch - Replaced openldap-rc.tgz with single source files - Added soft dependency (Recommends) to cyrus-sasl - Added soft dependency (Recommends) to cyrus-sasl-devel to openldap2-devel - Added patch for OpenLDAP ITS#8336 (assert in liblmdb): 0012-openldap-re24-its8336.patch - Remove obsolete patch 0001-build-adjustments.dif- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch to fix CVE-2015-6908. (bsc#945582) - Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch to address weak DH size vulnerability (bsc#937766)- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch to fix an issue with unresponsive LDAP host lookups in IPv6 environment. (bsc#955210)- Remove OpenLDAP 2.3 code and patches from build source. Compatibility libraries for OpenLDAP 2.3 are built in package: compat-libldap-2_3-0 Removed source files: openldap-2.3.37-liblber-length-decoding.dif openldap-2.3.37-libldap-ntlm.diff openldap-2.3.37-libldap-ssl.dif openldap-2.3.37-libldap-sasl-max-buff-size.dif openldap-2.3.37-libldap-tls_chkhost-its6239.dif openldap-2.3.37-libldap-gethostbyname_r.dif openldap-2.3.37-libldap-suid.diff openldap-2.3.37.dif openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif openldap-2.3.37-libldap-ldapi_url.dif openldap-2.3.37.tgz openldap-2.3.37-libldap-utf8-ADcanonical.dif README.update check-build.sh- Upgrade to upstream 2.4.42 release with accumulated bug fixes.- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements. * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch * Remove already applied patch 0009-gcc5.patch (Implements fate#319301)- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks for Berkeley DB version- binutils is required for "strings" utility invocation in %pre [bnc#904028] - Remove SLE10 definitions- Use %_smp_mflags for parallel build- Add baselibs.conf to sources list- Do not bypass output of useradd and groupadd- sanitize release line in specfile- segfault on certain queries with rwm overlay (bnc#846389) 0008-ITS-7723-fix-reference-counting.patch- enable systemd slapd service if SysV ldap was enabled (bnc#881476)- use %_rundir if available, otherwise /var/run- move systemd requires to server package- Fix systemd service installation- use configure macro also for building the 2.3.37 version- Remove PidFile from service definition - Update to 2.4.39 * Fixed libldap MozNSS crash (ITS#7783) * Fixed libldap memory leak with SASL (ITS#7757) * Fixed libldap assert in parse_passwdpolicy_control (ITS#7759) * Fixed libldap shortcut NULL RDNs (ITS#7762) * Fixed libldap deref to use correct control * Fixed liblmdb keysizes with mdb_update_key (ITS#7756) * Fixed slapd cn=config olcDbConfig modification (ITS#7750) * Fixed slapd-bdb/hdb to bail out of search if config is paused (ITS#7761) * Fixed slapd-bdb/hdb indexing issue with derived attributes (ITS#7778) * Fixed slapd-mdb to bail out of search if config is paused (ITS#7761) * Fixed slapd-mdb indexing issue with derived attributes (ITS#7778) * Fixed slapd-perl to bail out of search if config is paused (ITS#7761) * Fixed slapd-sql to bail out of search if config is paused (ITS#7761) * Fixed slapo-constraint handling of softadd/softdel (ITS#7773) * Fixed slapo-syncprov assert with findbase (ITS#7749) * Build Environment Test suite: Use $(MAKE) for tests (ITS#7753) * Documentation admin24 fix TLSDHParamFile to be correct (ITS#7684)- Add systemd style service definition - FATE#315028 remove memory limit for slapd - FATE#315415: LDAP compat packages required for older SLES versions For this reson following patches were applied: openldap-2.3.37-libldap-suid.diff openldap-2.3.37-libldap-ldapi_url.dif openldap-2.3.37-libldap-ntlm.diff openldap-2.3.37-libldap-gethostbyname_r.dif openldap-2.3.37-libldap-sasl-max-buff-size.dif openldap-2.3.37-libldap-utf8-ADcanonical.dif openldap-2.3.37-liblber-length-decoding.dif openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif openldap-2.3.37-libldap-tls_chkhost-its6239.dif openldap-2.3.37-libldap-ssl.dif- Make /etc/sasl2 owned by openldap2.- Update to 2.4.38 * Fixed liblmdb nordahead flag (ITS#7734) * Fixed liblmdb to check cursor index before cursor_del (ITS#7733) * Fixed liblmdb wasted space on split (ITS#7589) * Fixed slapd for certs with a NULL issuerDN (ITS#7746) * Fixed slapd cn=config with empty nested includes (ITS#7739) * Fixed slapd syncrepl memory leak with delta-sync MMR (ITS#7735) * Fixed slapd-bdb/hdb to stop processing on dn not found (ITS#7741) * Fixed slapd-bdb/hdb with indexed ANDed filters (ITS#7743) * Fixed slapd-mdb to stop processing on dn not found (ITS#7741) * Fixed slapd-mdb dangling reader (ITS#7662) * Fixed slapd-mdb matching rule for OlcDbEnvFlags (ITS#7737) * Fixed slapd-mdb with indexed ANDed filters (ITS#7743) * Fixed slapd-meta from blocking other threads (ITS#7740) * Fixed slapo-syncprov assert with findbase (ITS#7749) Changes in 2.4.37 * Added liblmdb nordahead environment flag (ITS#7725) * Fixed client tools CLDAP with IPv6 (ITS#7695) * Fixed libldap CLDAP with IPv6 (ITS#7695) * Fixed libldap lock ordering with abandon op (ITS#7712) * Fixed liblmdb segfault with mdb_cursor_del (ITS#7718) * Fixed liblmdb when converting to writemap (ITS#7715) * Fixed liblmdb assert on MDB_NEXT with delete (ITS#7722) * Fixed liblmdb wasted space on split (ITS#7589) * Fixed slapd cn=config with olcTLSProtocolMin (ITS#7685) * Fixed slapd-bdb/hdb optimize index updates (ITS#7329) * Fixed slapd-ldap chaining with cn=config (ITS#7381, ITS#7434) * Fixed slapd-ldap chaning with controls (ITS#7687) * Fixed slapd-mdb optimize index updates (ITS#7329) * Fixed slapd-meta chaining with cn=config (ITS#7381, ITS#7434) * Fixed slapo-constraint to no-op on nonexistent entries (ITS#7692) * Fixed slapo-dds assert on startup (ITS#7699) * Fixed slapo-memberof to not replicate internal ops (ITS#7710) * Fixed slapo-refint to not replicate internal ops (ITS#7710) Changes in 2.4.36 * Added back-meta target filter patterns (ITS#7609) * Added liblmdb mdb_txn_env to API (ITS#7660) * Fixed libldap CLDAP with uninit'd memory (ITS#7582) * Fixed libldap with UDP (ITS#7583) * Fixed libldap OpenSSL TLS versions (ITS#7645) * Fixed liblmdb MDB_PREV behavior (ITS#7556) * Fixed liblmdb transaction issues (ITS#7515) * Fixed liblmdb mdb_drop overflow page return (ITS#7561) * Fixed liblmdb nested split (ITS#7592) * Fixed liblmdb overflow page behavior (ITS#7620) * Fixed liblmdb race condition with read and write txns (ITS#7635) * Fixed liblmdb mdb_del behavior with MDB_DUPSORT and mdb_del (ITS#7658) * Fixed slapd cn=config with unknown schema elements (ITS#7608) * Fixed slapd cn=config with loglevel 0 (ITS#7611) * Fixed slapd slapi filterlist free behavior (ITS#7636) * Fixed slapd slapi control free behavior (ITS#7641) * Fixed slapd schema countryString as directoryString (ITS#7659) * Fixed slapd schema telephoneNumber as directoryString (ITS#7659) * Fixed slapd-bdb/hdb to wait for read locks in tool mode (ITS#6365) * Fixed slapd-mdb behavior with alias dereferencing (ITS#7577 ) * Fixed slapd-mdb modrdn and base-scoped searches (ITS#7604) * Fixed slapd-mdb refcount behavior (ITS#7628) * Fixed slapd-meta binding flag is set (ITS#7524) * Fixed slapd-meta with minimal config (ITS#7581) * Fixed slapd-meta missing results messages (ITS#7591) * Added slapd-meta TCP keepalive support (ITS#7513) * Fixed slapo-sssvlv double free (ITS#7588) * Fixed slaptest to list -Q option (ITS#7568) Changes in 2.4.35 * Fixed liblmdb mdb_cursor_put with MDB_MULTIPLE (ITS#7551) * Fixed liblmdb page rebalance (ITS#7536) * Fixed liblmdb missing parens (ITS#7377) * Fixed liblmdb mdb_cursor_del crash (ITS#7553) * Fixed slapd syncrepl updateCookie status (ITS#7531) * Fixed slapd connection logging (ITS#7543) * Fixed slapd segfault on modify (ITS#7542, ITS#7432) * Fixed slapd-mdb to reject undefined attrs (ITS#7540) * Fixed slapo-pcache with +/- attrsets (ITS#7552) Changes in 2.4.34 * Fixed libldap connections with EINTR (ITS#7476) * Fixed libldap lineno overflow in ldif_read_record (ITS#7497) * Fixed liblmdb mdb_env_open flag handling (ITS#7453) * Fixed liblmdb mdb_midl_sort array optimization (ITS#7432) * Fixed liblmdb freelist with large entries (ITS#7455) * Fixed liblmdb to check for filled dirty page list (ITS#7491) * Fixed liblmdb to validate data limits (ITS#7485) * Fixed liblmdb mdb_update_key for large keys (ITS#7505) * Fixed ldapmodify to not core dump with invalid LDIF (ITS#7477) * Fixed slapd syncrepl for old entries in MMR setup (ITS#7427) * Fixed slapd signedness for index_substr_any_* (ITS#7449) * Fixed slapd enforce SLAPD_MAX_DAEMON_THREADS (ITS#7450) * Fixed slapd mutex in send_ldap_ber (ITS#6164) * Added slapd-ldap onerr option (ITS#7492) * Added slapd-ldap keepalive support (ITS#7501) * Fixed slapd-ldif with empty dir (ITS#7451) * Fixed slapd-mdb to reopen attr DBs after env reopen (ITS#7416) * Fixed slapd-mdb handling of missing entries (ITS#7483,7496) * Fixed slapd-mdb environment flag setting (ITS#7452) * Fixed slapd-mdb with sub db slapcat (ITS#7469) * Fixed slapd-mdb to correctly work with toolthreads > 2 (ITS#7488,ITS#7527) * Fixed slapd-mdb subtree search speed (ITS#7473) * Fixed slapd-meta conversion to cn=config (ITS#7525) * Fixed slapd-meta segfault when modifying olcDbUri (ITS#7526) * Fixed slapd-sql back-config support (ITS#7499) * Fixed slapo-constraint handle uri and restrict correctly (ITS#7418) * Fixed slapo-constraint with multi-master replication (ITS#7426) * Fixed slapo-constraint segfault (ITS#7431) * Fixed slapo-deref control initialization (ITS#7436) * Fixed slapo-deref control exposure (ITS#7445) * Fixed slapo-memberof with internal ops (ITS#7487) * Fixed slapo-pcache matching rules for config db (ITS#7459) * Fixed slapo-rwm modrdn cleanup (ITS#7414) * Fixed slapo-sssvlv maxperconn parameter (ITS#7484)- For now, avoid automatic use of libdb-6_0 by explicitly selecting libdb-4_8 as BuildRequire.- Put static libs into openldap2-devel-static and relieve openldap2-devel of static-only deps- fix check-build.sh for kernel > 3.0- Fixed initscript to avoid endless loop when no configuration is present in /etc/openldap/slapd.d/ (bnc#767464) - cleaned up SLES10 buildrequires and dependencies - removed support for building on SLES9, didn't work anyway anymore - Don't buildrequire krb5-mini on Distributions where it does not exist- enabled mdb backend - Update to 2.4.33 * Added slapd-meta cn=config support * Fixed slapd alock handling on Windows (ITS#7361) * Fixed slapd acl handling with zero-length values (ITS#7350) * Fixed slapd syncprov to not reference ops inside a lock (ITS#7172) * Fixed slapd delta-syncrepl MMR with large attribute values (ITS#7354) * Fixed slapd slapd_rw_destroy function (ITS#7390) * Fixed slapd-ldap idassert bind handling (ITS#7403) * Fixed slapo-constraint with multiple modifications (ITS#7168) Changes in 2.4.32: * Added slappasswd loadable module support (ITS#7284) * Fixed tools to not clobber SASL_NOCANON (ITS#7271) * Fixed libldap function declarations (ITS#7293) * Fixed libldap double free (ITS#7270) * Fixed libldap debug level setting (ITS#7290) * Fixed libldap gettime() regression (ITS#6262) * Fixed libldap sasl handling (ITS#7118, ITS#7133) * Fixed libldap to correctly free socket with TLS (ITS#7241) * Fixed slapd config index renumbering (ITS#6987) * Fixed slapd duplicate error response (ITS#7076) * Fixed slapd parsing of PermissiveModify control (ITS#7298) * Fixed slapd-bdb/hdb cache hang under high load (ITS#7222) * Fixed slapd-bdb/hdb alias checking (ITS#7303) * Fixed slapd-bdb/hdb olcDbConfig changes work immediately (ITS#7338) * Fixed slapd-ldap to encode user DN during password change (ITS#7319) * Fixed slapd-ldap assertion when proxying to MS AD (ITS#6851) * Fixed slapd-ldap monitoring (ITS#7182, ITS#7225) * Fixed slapd-perl panic (ITS#7325) * Fixed slapo-accesslog memory leaks with sync replication (ITS#7292) * Fixed slapo-syncprov memory leaks with sync replication (ITS#7292)- add explicit buildrequire on groff - needed to build manuals- buildrequire krb5-mini in openldap2-client to avoid cycle - move Summary out of the %if as prepare_spec is confused about the license otherwise- update to 2.4.31 * Added slapo-accesslog support for reqEntryUUID (ITS#6656) * Fixed libldap IPv6 URL detection (ITS#7194) * Fixed libldap rebinding on failed connection (ITS#7207) * Fixed slapd listener initialization (ITS#7233) * Fixed slapd cn=config with olcTLSVerifyClient (ITS#7197) * Fixed slapd delta-syncrepl fallback on non-leaf error (ITS#7195) * Fixed slapd to reject MMR setups with bad serverID setting (ITS#7200) * Fixed slapd approxIndexer key generation (ITS#7203) * Fixed slapd modification of olcSuffix (ITS#7205) * Fixed slapd schema validation with missing definitions (ITS#7224) * Fixed slapd syncrepl -c with supplied CSN values (ITS#7245) * Fixed slapd-bdb/hdb idlcache with only one element (ITS#7231) * Fixed slapo-accesslog deadlock with non-logged write ops (ITS#7088) * Fixed slapo-syncprov sessionlog check (ITS#7218) * Fixed slapo-syncprov entry leak (ITS#7234) * Fixed slapo-syncprov startup initialization (ITS#7235)- Disabled testsuite for now. Causes problems in the buildserivce- Update to 2.4.30 * Fixed libldap socket polling for writes (ITS#7167) * Fixed liblutil string modifications (ITS#7174) * Fixed slapd crash when attrsOnly is true (ITS#7143) * Fixed slapd syncrepl delete handling (ITS#7052,ITS#7162) * Fixed slapo-pcache time-to-refesh handling (ITS#7178) * Fixed slapo-syncprov loop detection (ITS#6024)- Update to 2.4.29 * Fixed slapd cn=config modification of first schema element (ITS#7098) * Fixed slapd operation reuse (ITS#7107) * Fixed slapd blocked writers to not interfere with pool pause (ITS#7115) * Fixed slapd connection loop connindex usage (ITS#7131) * Fixed slapd double mutex unlock via connection_done (ITS#7125) * Fixed slapd check order in connection_write (ITS#7113) * Fixed slapd slapadd to exit on failure (ITS#7142) * Fixed slapd syncrepl reference to freed memory (ITS#7127,ITS#7132) * Fixed slapd syncrepl to ignore some errors on delete (ITS#7052) * Fixed slapd syncrepl to handle missing oldRDN (ITS#7144) * Fixed slapd-monitor compare op to update cached entry (ITS#7123) * Fixed slapo-syncprov with already abandoned operation (ITS#7150) - Included patches from RE24 branch: * only poll sockets for write as needed (ITS#7167, bnc#749082) * sycnrepl Fixes (ITS#7162)- license update: OLDAP-2.8 SPDX format (http://www.spdx.org/licenses)- Update to 2.4.28 * Fixed back-mdb out of order slapadd (ITS#7090) changes in OpenLDAP 2.4.27 Release (2011/11/24): * Added slapd delta-syncrepl MMR (ITS#6734,ITS#7029,ITS#7031) * Fixed ldapmodify crash with LDIF controls (ITS#7039) * Fixed ldapsearch to honor timeout and timelimit (ITS#7009) * Fixed libldap endless looping (ITS#7035) * Fixed libldap TLS to not check hostname when using 'allow' (ITS#7014) * Fixed slapadd common code into slapcommon (ITS#6737) * Fixed slapd backend connection initialization (ITS#6993) * Fixed slapd frontend DB parsing in cn=config (ITS#7016) * Fixed slapd hang with {numbered} overlay insertion (ITS#7030) * Fixed slapd inet_ntop usage (ITS#6925) * Fixed slapd cn=config deletion of bitmasks (ITS#7083) * Fixed slapd cn=config modify replace/delete crash (ITS#7065) * Fixed slapd schema UTF8StringNormalize with 0 length values (ITS#7059) * Fixed slapd with dynamic acls for cn=config (ITS#7066) * Fixed slapd response callbacks (ITS#6059,ITS#7062) * Fixed slapd no_connection warnings with ldapi (ITS#6548,ITS#7092) * Fixed slapd return code processing (ITS#7060) * Fixed slapd sl_malloc various issues (ITS#6437) * Fixed slapd startup behavior (ITS#6848) * Fixed slapd syncrepl crash with non-replicated ops (ITS#6892) * Fixed slapd syncrepl with modrdn (ITS#7000,ITS#6472) * Fixed slapd syncrepl timeout when using refreshAndPersist (ITS#6999) * Fixed slapd syncrepl deletes need a non-empty CSN (ITS#7052) * Fixed slapd syncrepl glue for empty suffix (ITS#7037) * Fixed slapd results cleanup (ITS#6763,ITS#7053) * Fixed slapd validation of args for TLSCertificateFile (ITS#7012) * Fixed slapd-bdb/hdb to build entry DN based on parent DN (ITS#5326) * Fixed slapd-hdb with zero-length entries (ITS#7073) * Fixed slapd-hdb duplicate entries in subtree IDL cache (ITS#6983) * Fixed slapo-pcache response cleanup (ITS#6981) * Fixed slapo-ppolicy pwdAllowUserChange behavior (ITS#7021) * Fixed slapo-sssvlv issue with greaterThanorEqual (ITS#6985) * Fixed slapo-sssvlv to only return requested attrs (ITS#7061) * Fixed slapo-syncprov DSA attribute filtering for Persist mode (ITS#7019) * Fixed slapo-syncprov when consumer has newer state of our SID (ITS#7040) * Fixed slapo-syncprov crash (ITS#7025) * Added missing LDIF form of schema files (ITS#7063)- add libtool as buildrequire to avoid implicit dependency- ACL changes to the config database only got active after slapd restart in certain cases (bnc#716895, ITS#7066). - Adjusted default DB_CONFIG to increase max values for locks and lock objects (bnc#719803) - Fix UTF8StringNormalize overrun on zero-length string (bnc#724201, ITS#7059)- Update to 2.4.26 * Added libldap LDAP_OPT_X_TLS_PACKAGE (ITS#6969) * Fixed libldap descriptor leak (ITS#6929) * Fixed libldap socket leak (ITS#6930) * Fixed libldap get option crash (ITS#6931) * Fixed libldap lockup (ITS#6898) * Fixed libldap ASYNC TLS setup (ITS#6828) * Fixed libldap with missing \n terminations (ITS#6947) * Fixed tools double free (ITS#6946) * Fixed tools verbose output (ITS#6977) * Fixed ldapmodify SEGV on invalid LDIF (ITS#6978) * Added slapd extra_attrs database option (ITS#6513) * Fixed slapd asserts (ITS#6932) * Fixed slapd configfile param on windows (ITS#6933) * Fixed slapd config with global chaining (ITS#6843) * Fixed slapd uninitialized variables (ITS#6935) * Fixed slapd config objectclass is readonly (ITS#6963) * Fixed slapd entry response with control (ITS#6899) * Fixed slapd with unknown attrs (ITS#6819) * Fixed slapd normalization of schema RDN (ITS#6967) * Fixed slapd operations cache to 10 op limit (ITS#6944) * Fixed slapd syncrepl crash with non-replicated ops (ITS#6892) * Fixed slapd-bdb/hdb with sparse index ranges (ITS#6961) * Fixed back-ldap ppolicy updates (ITS#6711) * Fixed back-ldap with id-assert (ITS#6817) * Fixed various slapo-pcache issues (ITS#6823, ITS#6950, ITS#6951, ITS#6953, ITS#6954) * Fixed slapo-pcache database corruption (ITS#6831) * Fixed slapo-syncprov with replicated subtrees (ITS#6872) - backported delete support for child entries of overlays from master (bnc#704398)- Updated to 2.4.25, important changes: * Fixed ldapsearch pagedresults loop (ITS#6755) * Fixed tools for incompatible args (ITS#6849) * Fixed libldap MozNSS crash (ITS#6863) * Fixed slapd add objectclasses in order (ITS#6837) * Added slapd ordering for uidNumber and gidNumber (ITS#6852) * Fixed slapd segfault when adding values out of order (ITS#6858) * Fixed slapd sortval handling (ITS#6845) * Fixed slapd-bdb with slapadd/index quick option (ITS#6853) * Fixed slapd-ldap chain cn=config support (ITS#6837) * Fixed slapd-ldap chain with slapd.conf (ITS#6857) * Fixed slapd-meta deadlock (ITS#6846) * Fixed slapo-sssvlv with multiple requests (ITS#6850) * Fixed contrib/lastbind install rules (ITS#6238) * Fixed contrib/cloak install rules (ITS#6877)- Surpress gcc warnings about extra format string arguments for 2.3.x built as well.- Updated to 2.4.24, important changes: * Added libldap_r,libldap formal concurrency API (ITS#6625,ITS#5421) * Added slapadd attribute value checking (ITS#6592) * Added slapcat continue mode for problematic DBs (ITS#6482) * Added slapd syncrepl suffixmassage support (ITS#6781) * Fixed liblber to not close invalid sockets (ITS#6585) * Fixed libldap referral chasing (ITS#6602) * Fixed libldap leak when chasing referrals (ITS#6744) * Fixed slapd acl parsing overflow (ITS#6611) * Fixed slapd acl when resuming parsing (ITS#6804) * Fixed slapd default config acls with overlays (ITS#6822) * Fixed slapd config leak with olcDbDirectory (ITS#6634) * Fixed slapd when first acl is value dependent (ITS#6693) * Fixed slapd-bdb slapadd -q with glued dbs (ITS#6794) * Fixed slapo-ppolicy don't update opattrs on consumers (ITS#6608) * Fixed slapo-ppolicy to allow userPassword deletion (ITS#6620) * Fixed slapo-syncprov to send error if consumer is newer (ITS#6606) * Fixed slapo-syncprov filter race condition (ITS#6708) * Fixed slapo-syncprov active mod race (ITS#6709) * Fixed slapo-syncprov to refresh if context is dirty (ITS#6710) * Fixed slapo-syncprov CSN updates to all replicas (ITS#6718) * Fixed slapo-syncprov sessionlog ordering (ITS#6716) * Fixed slapo-syncprov sessionlog with adds (ITS#6503) * Fixed slapo-syncprov mutex (ITS#6438) * Fixed slapo-syncprov mincsn check with MMR (ITS#6717) * Fixed slapo-syncprov control leak (ITS#6795) * Fixed slapo-syncprov error codes (ITS#6812) * For a comprehensive list of changes please consult the CHANGES file - removed unneeded openSUSE 11.0 specifc patch- slapadd -q could crash for glued bdb/hdb databases- Install the correct schema2ldif script (bnc#665530)- Fixed quotation in init-script to avoid errors when calling it from within /etc/openldap/slapd.d/cn=config/ (bnc#660492).- Surpress gcc warnings about extra format string arguments. - Split-off openldap2-doc (noarch) package (Admin Guide and IDs) - Backported -VVV commandline switch for slapd from HEAD (to list enabled static overlays) - Build all overlays except syncprov and ppolicy as dynamic modules (Fixes bnc#648479, FATE#307837) - Added README.dynamic-overlays to point out some details about dynamic overlays - simplified pie-compile patch and adjusted it to work with dynamic overlays- Handle the libdb-4_5 -> libdb-4_8 Version update by opening the Databases with DB_RECOVER if a version mismatch is detected.- Do not include Build date and time in binaries, this avoids build-compare failures and unhelpful rebuilds/republishes- Don't build 2.3 slapcat anymore for 11.3 and newer. We switch to 2.4 long ago. - Removed automatic 2.3->2.4 migration in %post - moved back-sql examples to make rpmlint happy- Fix listener URIs in init script to make SLP registration work again (bnc#620389)- Fixed RPM Group and Summary Tags (bnc#624980)- Updated to 2.4.23: * Fixed libldap to return server's error code (ITS#6569) * Fixed libldap memleaks (ITS#6568) * Fixed liblutil off-by-one with delta (ITS#6541) * Fixed slapd acls with glued databases (ITS#6468) * Fixed slapd syncrepl rid logging (ITS#6533) * Fixed slapd modrdn handling of invalid values (bnc#612430, ITS#6570) * Fixed slapd-bdb hasSubordinates computation (ITS#6549) * Fixed slapd-bdb to use memcpy instead for strcpy (ITS#6474) * Fixed slapd-bdb entry cache delete failure (ITS#6577) * Fixed slapd-ldap to return control responses (ITS#6530) * Fixed slapo-ppolicy to use Debug (ITS#6566) * Fixed slapo-refint to zero out freed DN vals (ITS#6572) * Fixed slapo-rwm to use Debug (ITS#6566) * Fixed slapo-sssvlv to use Debug (ITS#6566) * Fixed slapo-syncprov lost deletes in refresh phase (bnc#606294, ITS#6555) * Fixed slapo-valsort to use Debug (ITS#6566) * Fixed contrib/nssov network.c missing patch (ITS#6562) - New subpackage openldap2-back-sql. Contains the SQL backend module plus some documentation (bnc#395719) - generate Patches from git tree (resulted in all patches being renamed) - installing binaries without stripping them is done by setting the STRIP enviroment variable instead for patching the Makefile now - Fixed a bug in the syncprov overlay which could lead to not replicate delete Operations (ITS#6555, bnc#606294) - BuildRequires cleanup- LDAP clients could crash the server by submitting a specially crafted LDAP ModRDN operation. (bnc#612430, ITS#6570) - Delete Operations happening during the "Refresh" phase of "refreshAndPersist" replication failed to replicate under certain circumstances (bnc#606294, ITS#6555)- Create /var/run/slapd on demand. /var/run might be mounted on tmpfs.- fix build dependency cycle for -client package with openslp- Fixed quotation in sed expression to escape ldapi path in init script- Removed obsolete hunk from openldap2.dif - Remove ldap.conf patch to use saner default for Certificate verification (bnc#575146)- Add fix for stricter fortification checks of GCC 4.5.- Updated to 2.4.21: * Fixed liblutil for negative microsecond offsets (ITS#6405) * Fixed slapd global settings to work without restart (ITS#6428) * Fixed slapd looping with SSL/TLS connections (ITS#6412) * Fixed slapd syncrepl freeing tasks from queue (ITS#6413) * Fixed slapd syncrepl parsing of tls defaults (ITS#6419) * Fixed slapd syncrepl uninitialized variables (ITS#6425) * Fixed slapd-config Adds with Abstract classes (ITS#6408) * Fixed slapo-dynlist behavior with simple filters (ITS#6421) * Fixed slapd-ldif access outside database directory (ITS#6414) * Fixed slapo-translucent with back-null (ITS#6403) * Fixed slapo-unique criteria checking (ITS#6270) - removed some obsolete RPM dependencies - Added missing tags to init script to silence rpmlint warnings- Fixed an issue in back-config's objectclass inheritence code that could cause the server to fail to start or to spin in an endless loop (bnc#558059,ITS#6408) - default the tls_reqcert parameter of a syncrepl config to "demand" as documented even if other tls_ options are absent (bnc#558397, ITS#6319) - apply changes to the global size and timelimits to all database that don't specify limits themself. (bnc#562184, ITS#6428)- Update to 2.4.20 (fate#306593), most important fixes since 2.4.19 * Fixed liblber embedded NUL values in BerValues (ITS#6353) * Fixed libldap sasl buffer sizing (ITS#6327,ITS#6334) * Fixed libldap uninitialized return value (ITS#6355) * Fixed libldap unlimited timeout (ITS#6388) * Added slapd handling of hex server IDs (ITS#6297) * Fixed slapd checks of str2filter (ITS#6391) * Fixed slapd configArgs initialization (ITS#6363) * Fixed slapd db_open with connection_fake_init (ITS#6381) * Fixed slapd with embedded \0 in bervals (ITS#6378,ITS#6379) * Fixed slapd inclusion of ac/unistd.h (ITS#6342) * Fixed slapd sl_free to better reclaim memory (ITS#6380) * Fixed slapd syncrepl deletes in MirrorMode (ITS#6368) * Fixed slapd syncrepl to use correct SID (ITS#6367) * Fixed slapd tls_accept to retry in certain cases (ITS#6304) * Fixed slapd-bdb/hdb cache corruption (ITS#6341) * Fixed slapd-bdb/hdb entry cache (ITS#6360) * Fixed slapo-syncprov checkpoint conversion (ITS#6370) * Fixed slapo-syncprov deadlock (ITS#6335) * Fixed slapo-syncprov out of order changes (ITS#6346) - Added switch to enable/disable testsuite (%run_test_suite)- updated patches to apply with fuzz=0- Added schema2ldif tool to openldap2-client subpackage (bnc#541819)- Changed permissions on /var/run/slapd to a saner default for ldapi:/// (bnc#536729)- libldap's check of the hostname against the TLS Certificate's CN Attribute did not handle possible NUL bytes in the CN correctly and was vulnerable against attacks with spoofed Certificates. (bnc#537143, ITS#6239)- Update to 2.4.17. Most important changes: * Fixed liblber to use ber_strnlen (ITS#6080) * Fixed libldap openssl digest initialization (ITS#6192) * Fixed libldap tls NULL error messages (ITS#6079) * Added slapd sasl auxprop support (ITS#6147) * Added slapd schema checking tool (ITS#6150) * Added slapd writetimeout keyword (ITS#5836) * Fixed slapd abandon/cancel handling for some ops (ITS#6157) * Fixed slapd access setstyle to expand (ITS#6179) * Fixed slapd assert with closing connections (ITS#6111) * Fixed slapd bind race condition (ITS#6189) * Fixed slapd cert validation (ITS#6098) * Fixed slapd connection_destroy assert (ITS#6089) * Fixed slapd csn normalization (ITS#6195) * Fixed slapd errno handling (ITS#6037) * Fixed slapd hung writers (ITS#5836) * Fixed slapd ldapi issues (ITS#6056) * Fixed slapd normalization of updated schema attributes (ITS#5540) * Fixed slapd olcLimits handling (ITS#6159) * Fixed slapd olcLogLevel with hex levels (ITS#6162) * Fixed slapd sending cancelled operations results (ITS#6103) * Fixed slapd slapi_entry_has_children (ITS#6132) * Fixed slapd sockets usage on windows (ITS#6039) * Fixed slapd some abandon and cancel race conditions (ITS#6104) * Fixed slapd tls context after changes (ITS#6135) * Fixed slapd-bdb/hdb adjust dncachesize if too low (ITS#6176) * Fixed slapd-bdb/hdb crashes during delete (ITS#6177) * Fixed slapd-bdb/hdb multiple olcIndex for same attr (ITS#6196) * Fixed slapd-hdb freeing of already freed entries (ITS#6074) * Fixed slapd-hdb entryinfo cleanup (ITS#6088) * Fixed slapd-hdb dncache lockups (ITS#6095) * Fixed slapd-ldap deadlock with non-responsive TLS URIs (ITS#6167) * Fixed slapo-ppolicy to honor pwdLockout (ITS#6168) * Fixed slapo-ppolicy to return check modules error message (ITS#6082) * Added slapo-rwm rwm-drop-unrequested-attrs config option (ITS#6057) * Fixed slapo-rwm dn passing (ITS#6070) * Fixed slapo-rwm entry free/release (ITS#6058, ITS#6081) * Fixed tools returning ldif errors (ITS#5892) - Backported fix for failing back-monitor test from HEAD - re-enabled some formerly disabled tests from the testsuite- Fixed Summary/Description for -client subpackage- Improved connection check in init script (bnc#510295)- Fixed complilation with newer glibc (2.3.X release needs GNU_SOURCE defined as well in getpeerid.c)- gcc 4.4 fixes- Update to 2.4.16. Most important fixes: * Fixed libldap segfault in checking cert/DN (ITS#5976) * Fixed libldap peer cert double free (ITS#5849) * Fixed libldap referral chasing (ITS#5980) * Fixed slapd backglue with empty DBs (ITS#5986) * Fixed slapd ctxcsn race condition (ITS#6001) * Fixed slapd debug message (ITS#6027) * Fixed slapd redundant module loading (ITS#6030) * Fixed slapd schema_init freed value (ITS#6036) * Fixed slapd syncrepl newCookie sync messages (ITS#5972) * Fixed slapd syncrepl hang during shutdown (ITS#6011) * Fixed slapd syncrepl too many MMR messages (ITS#6020) * Fixed slapd syncrepl skipped entries with MMR (ITS#5988) * Fixed slapd-bdb/hdb cachesize handling (ITS#5860) * Fixed slapd-bdb/hdb with slapcat with empty dn (ITS#6006) * Fixed slapd-bdb/hdb with NULL transactions (ITS#6012) * Fixed slapd-ldap incorrect referral handling (ITS#6003,ITS#5916) * Fixed slapd-ldap/meta with broken AD results (ITS#5977) * Fixed slapd-ldap/meta with invalid attrs again (ITS#5959) * Fixed slapo-accesslog interaction with ppolicy (ITS#5979) * Fixed slapo-dynlist conversion to cn=config (ITS#6002) * Fixed various slapo-syncprov issues (ITS#5972, ITS#6020, ITS#5985, ITS#5999, ITS#5973, ITS#6045, ITS#6024, ITS#5988) - Fix building on older openSUSE releases- Update to 2.4.15. Most important changes: * Fixed slapd bconfig conversion again (ITS#5346) * Fixed slapd behavior with superior objectClasses again (ITS#5517) * Fixed slapd RFC4512 behavior with same attr in RDN (ITS#5968) * Fixed slapd corrupt contextCSN (ITS#5947) * Fixed slapd syncrepl order to match on add/delete (ITS#5954) * Fixed slapd adding rdn with other values (ITS#5965) * Fixed slapd-bdb/hdb behavior with unallocatable shm (ITS#5956) * Fixed slapd-ldap/meta with entries with invalid attrs (ITS#5959) * Fixed slapo-pcache caching invalid entries (ITS#5927) * Fixed slapo-syncprov csn updates (ITS#5969) * Added libldap option to disable SASL host canonicalization (ITS#5812) * Fixed libldap chasing multiple referrals (ITS#5853) * Fixed libldap setuid usage with .ldaprc (ITS#4750) * Fixed libldap deref handling (ITS#5768) * Fixed libldap NULL pointer deref (ITS#5934) * Fixed libldap peer cert memory leak (ITS#5849) * Fixed libldap intermediate response behavior (ITS#5896) * Fixed libldap IPv6 address handling (ITS#5937) * Fixed libldap_r deref building (ITS#5768) * Fixed libldap_r slapd lockup when paused during shutdown (ITS#5841) * Fixed slapd acl checks on ADD (ITS#4556,ITS#5723) * Fixed slapd acl application to newly created backends (ITS#5572) * Fixed slapd bconfig to return error codes (ITS#5867) * Fixed slapd bconfig encoding incorrectly (ITS#5897) * Fixed slapd bconfig dangling pointers (ITS#5924) * Fixed slapd epoll handling (ITS#5886) * Fixed slapd glue with MMR (ITS#5925) * Fixed slapd listener comparison (ITS#5613) * Fixed various syncrepl issues (ITS#5809,ITS#5850, ITS#5843, ITS#5866, ITS#5901, ITS#5881, ITS#5935, ITS#5710, ITS#5781, ITS#5809, ITS#5798, ITS#5826) * Fixed slapd-bdb/hdb dncachesize handling (ITS#5860) * Fixed slapd-bdb/hdb trickle task usage (ITS#5864) * Fixed slapd-hdb idlcache with empty suffix (ITS#5859)lamb11 1545062956  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~2.4.46-lp151.9.42.4.46-lp151.9.4lber.hlber_types.hldap.hldap_cdefs.hldap_features.hldap_schema.hldap_utf8.hldif.hslapi-plugin.hliblber.solibldap.solibldap_r.sober_alloc_t.3.gzber_bvarray_add.3.gzber_bvarray_free.3.gzber_bvdup.3.gzber_bvecadd.3.gzber_bvecfree.3.gzber_bvfree.3.gzber_bvstr.3.gzber_bvstrdup.3.gzber_dupbv.3.gzber_first_element.3.gzber_flush.3.gzber_free.3.gzber_get_bitstring.3.gzber_get_boolean.3.gzber_get_enum.3.gzber_get_int.3.gzber_get_next.3.gzber_get_null.3.gzber_get_stringa.3.gzber_get_stringb.3.gzber_next_element.3.gzber_peek_tag.3.gzber_printf.3.gzber_put_enum.3.gzber_put_int.3.gzber_put_null.3.gzber_put_ostring.3.gzber_put_seq.3.gzber_put_set.3.gzber_put_string.3.gzber_scanf.3.gzber_skip_tag.3.gzber_start_set.3.gzber_str2bv.3.gzlber-decode.3.gzlber-encode.3.gzlber-memory.3.gzlber-sockbuf.3.gzlber-types.3.gzld_errno.3.gzldap.3.gzldap_abandon.3.gzldap_abandon_ext.3.gzldap_add.3.gzldap_add_ext.3.gzldap_add_ext_s.3.gzldap_add_s.3.gzldap_attributetype2name.3.gzldap_attributetype2str.3.gzldap_attributetype_free.3.gzldap_bind.3.gzldap_bind_s.3.gzldap_compare.3.gzldap_compare_ext.3.gzldap_compare_ext_s.3.gzldap_compare_s.3.gzldap_control_create.3.gzldap_control_dup.3.gzldap_control_find.3.gzldap_control_free.3.gzldap_controls.3.gzldap_controls_dup.3.gzldap_controls_free.3.gzldap_count_entries.3.gzldap_count_messages.3.gzldap_count_references.3.gzldap_count_values.3.gzldap_count_values_len.3.gzldap_dcedn2dn.3.gzldap_delete.3.gzldap_delete_ext.3.gzldap_delete_ext_s.3.gzldap_delete_s.3.gzldap_destroy.3.gzldap_dn2ad_canonical.3.gzldap_dn2dcedn.3.gzldap_dn2str.3.gzldap_dn2ufn.3.gzldap_dnfree.3.gzldap_dup.3.gzldap_err2string.3.gzldap_errlist.3.gzldap_error.3.gzldap_explode_dn.3.gzldap_explode_rdn.3.gzldap_extended_operation.3.gzldap_extended_operation_s.3.gzldap_first_attribute.3.gzldap_first_entry.3.gzldap_first_message.3.gzldap_first_reference.3.gzldap_free_urldesc.3.gzldap_get_dn.3.gzldap_get_option.3.gzldap_get_values.3.gzldap_get_values_len.3.gzldap_init.3.gzldap_init_fd.3.gzldap_initialize.3.gzldap_install_tls.3.gzldap_is_ldap_url.3.gzldap_matchingrule2name.3.gzldap_matchingrule2str.3.gzldap_matchingrule_free.3.gzldap_memalloc.3.gzldap_memcalloc.3.gzldap_memfree.3.gzldap_memory.3.gzldap_memrealloc.3.gzldap_memvfree.3.gzldap_modify.3.gzldap_modify_ext.3.gzldap_modify_ext_s.3.gzldap_modify_s.3.gzldap_modrdn.3.gzldap_modrdn2.3.gzldap_modrdn2_s.3.gzldap_modrdn_s.3.gzldap_mods_free.3.gzldap_msgfree.3.gzldap_msgid.3.gzldap_msgtype.3.gzldap_next_attribute.3.gzldap_next_entry.3.gzldap_next_message.3.gzldap_next_reference.3.gzldap_objectclass2name.3.gzldap_objectclass2str.3.gzldap_objectclass_free.3.gzldap_open.3.gzldap_parse_extended_result.3.gzldap_parse_reference.3.gzldap_parse_result.3.gzldap_parse_sasl_bind_result.3.gzldap_parse_sort_control.3.gzldap_parse_vlv_control.3.gzldap_perror.3.gzldap_rename.3.gzldap_rename_s.3.gzldap_result.3.gzldap_result2error.3.gzldap_sasl_bind.3.gzldap_sasl_bind_s.3.gzldap_schema.3.gzldap_scherr2str.3.gzldap_search.3.gzldap_search_ext.3.gzldap_search_ext_s.3.gzldap_search_s.3.gzldap_search_st.3.gzldap_set_option.3.gzldap_set_rebind_proc.3.gzldap_set_urllist_proc.3.gzldap_simple_bind.3.gzldap_simple_bind_s.3.gzldap_sort.3.gzldap_sort_entries.3.gzldap_sort_strcasecmp.3.gzldap_sort_values.3.gzldap_start_tls.3.gzldap_start_tls_s.3.gzldap_str2attributetype.3.gzldap_str2dn.3.gzldap_str2matchingrule.3.gzldap_str2objectclass.3.gzldap_str2syntax.3.gzldap_strdup.3.gzldap_sync.3.gzldap_syntax2name.3.gzldap_syntax2str.3.gzldap_syntax_free.3.gzldap_tls.3.gzldap_tls_inplace.3.gzldap_unbind.3.gzldap_unbind_ext.3.gzldap_unbind_ext_s.3.gzldap_unbind_s.3.gzldap_url.3.gzldap_url_parse.3.gzldap_value_free.3.gzldap_value_free_len.3.gz/usr/include//usr/lib64//usr/share/man/man3/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.1/standard/16c1179d95d5688f2a87368fc4f1f641-openldap2cpioxz5x86_64-suse-linuxC source, ASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)C source, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)C source, ASCII text (gzip compressed data, max compression, from Unix)o6$U6cyrus-sasl-develutf-860380309186ef67bb48af421864245545e601d764e69cf7f5a4dbf7484bde1b6?7zXZ !t/] crv(vX0}eqDiBHU3?!"a+44t߅QCh^sZT#ߞ !ե)D¡>{Tt?b^W07U$/{;^<,ޭ^YT@Ѷ6<MT.?'h`/+u yǏMeaHZQn+v97lz6]מZYnO9dtdi0ǖI({Ԑ|M:i=!oh'_>$1 IJ<ԃd*>llwd]ZkiX/ CtB {}%",n3dj{O8>";WKmt ujn`@lsf{3(g[oh+q֫al6 B~(ޞl . r<e) r):n5Pca0*8wh+SϟJ}Ha9w].^qU%̞|,%ޱg~Y zW)FȴreؚߦI*c=Ղ*p2V>hgXMKCvil3#hw5't|G O7p탓B-?,naXUtQo\"m B7ƫnuWpD|X;P)<ھ3CΔlf < H#%S{7 )%f׆ pRÒ%oRp QY}7# N#stJҗBvRqX򼫉zYiE |#xޗD/Ic0|pB/t dR]|313M0/}KIfb[~Dt^1i>3z8v6LjzwmOsw뷠PaV1B=< VcHEIn!v9@ Qf%I vmY0j.ߴu'Z:V n ԙ˱|1n?X: }aCk ^ʜds̬EC2M6 Nz9"QH?F÷gQ vwXO?-?ct?q.JѷfRُH,ҷ騙_+8o&&),شS1r AC3P$=n#O 8zJް[[{BP/]5!2ohϙJxWP2=-֢tD2 U$54ˈ\+oBozmLTq>aNG P-C{e$<+DYl,,vA1ZoHR92j(?)c'kK$ZfMZtބA2AO+ Ԯ8.{eXIy\s7B͍u o)hk<ٵ|PJm8c|A{̜Mk!)*T$*>~y; 4b4L(eڗ7lX0UV4pk_}9c~'nUG+zi 4Kpdn̋Z~d"B8͢ JEPgM/7k𭬨nv'k Nע(, $XsV qSf*cesΔ#s#BO#8:# }.A *bZ.MK۶>5Ij MQOtwJ5^$l '&(RoN"h_4߀>0ehGo^J&~t9IlvZt6!jBNB(cfgD V{]AQ>֢ˉGoa'o*3Jxڳ@wyf38UM!yiOSsj++f6’"Uv|o x TyX"ղ/cj._y,.EcskX-c} [)>gpS UU Ng7h\z~[aID7<Vgbp4Fbƨ$~L6 # {Kʲ[p5nW5#Y<zR%wْzĦvHF׺Ŏg5{_{'OIO8/gM̀{k_֩<#n>!ǾiM^d8ٷ.%gQqYDcn^P '1y2p02CRSoǮvɣج C:̕UUbU@K.HT[|i^"vd]b=(Csnv!CX=HSxS_MM!@FVoz V0E=J!vF:؜8kbo-HM(ԒZk~(A Eֱ^Jtu>hf7\kυd*鐚 {[PВ2Weoh_!ѿ#Ok1u]՘JPXf A6\- V[IK/9Wã{R FZk\yq)i{c b%x ,"z]ٟicpY A%\O4 3p};DG|~r4m6v$墜"dr9OoL$)kp^Kn#n)*` O~HY7c+Px%$5'@"c\=AgC+ʨ8ƪ*339  ɣfGn!s >K*..ja"͒`zW82Mf-LTnCFs&,Z>HJ7w0.1MJ[*W<m䵂rD!MlEG%b"~ TTȬ̝XLچZs-w _1Vw1аM];ӥpQPmL7{<"3_uQGlY{+7(~XMɖV5q3L1 T{6ɋ׍}!T":N`wq^[K%3HOOG+f:1z._mö'##f:Vу~9^g&9~7?A@m*e5F^f [2_kC~p˔]^RY:JR`"VXHK.pBe]];^b u.pJX=̝ёו,ٰqt(#gq׷D DQ۫fDC"`"4(ৄΙmT[YƴQO/`+}%2G4&V#{[\umWk=xrՌ7oۺ`m{wo`Mt'ڊ~8֬:&X-0T}y[ ZB;đS>dl*RSQcИ\mc-Qѝ]AQK"8u^_ ussѫDP2ixv)+Lںc6s prn2~pX:ї!B? %6pV4)201=߄{I<@PӳѬ 7/PͥTfxAU۶Sװ1eҬಷٸŚMK˲0ܰLe&Ǎ,'-[ h+ h> |uqE8,j!AQNxǾq&M2>wtc^Pr@dq5Gw 2Tѡ-KCM6R!PmrkTmH)z6;l 3SyAՙ!\]e/!uzn\'&n8) ~Kc}G06!%}aE9V ìyvRfCwGP8ges9T mk5~1:N{5Ǝ:P'-@8  YRޔVfuu'SV=P1C@+GEaks.H՜|]2ºdX`!7hhݛ|T- o28P ;@[2\2%Q\="(FQ^ӮA$# "ו^0ރ&]\.;طygM*@ jeQ`ھtPN4- Huo08;էJzXo?f}LLn;=!.pؑXI2X훿{0S,t}PZgL=?fa1kU4x9ˬM)"Ce=aarj_-GJӈ hi.JjæzFV}{UY¶Z3 8`'-F'rsK<* gOOߓc3ZW e&ҵ'Zoάl2|!їe '*tTo`Z`AVckjp]Y =V!Q=DFgCgRS~JBxʥpҢhb*od!0^-|V-\Q7^憟R41mЙ9UtSXd!NO_6bT72}H ޼tZl2mPׅ'}v*|+B|dhfTǡpm@S̏3$T$0Aw1гx9TTtPʲod6:B=^SݴIud*4O&9v,H* EpA l6fz_mP U+@I){>:3E u;$중M!ʼniNEH Vt* ĚF[ɧZDU5;LQ`;6t y $dc53SS^.MZS%m@p.?v]+y`ύݪ+2Qҁr-ZNgf2U).+`)4W2ھ~4MpFGU{:9d6Ϯvs/A5Yb Qpg|K=jkM39Y BrPHKs&.u,̹ ؃l9F-@DN27 )]njX|> ^JW,ǶȗhgwiE_fkOo;Xx - hb Q>;mrRm5:n}'Ei+d9-?8d7?,ަY&ocYXk9" >%Iq2>^'{, zMYzq~*dB}&ux*wxW4eA- vҪlzleKࣴQ>uЮ7.xgeni`4nK Uw!Y"S(^no8>0aÍUwG-R0m oaT_b:vloCF0꼱dokZo@ 7Xm9KA-\vˤ~H]yk[k a8kኻ8%G^tΰ-]א+}YombMHrjXߍ1ɦ-cF;" _e{7R,xo[]Պ ߔʰ$ԡR1a=IfZ5lJDˮ`|(*~Uחۃ%di׆/-BZVThky%leJ"}*AwzNj9m->~mG|5"!qjt#tnm8f󳛘@|ȴ8dר>_Ћ9~S6vhq0Y,6#(XJqC4iGw׉!p?|I)2^?Ƽwh> Or̸C.!$dO5d04Ai/ȵi II1&‡aʉA` `pk2NJ_%'(ToLP4^ָ[T3XM'52":DwLáTe/xi {3ȅǿaH 1UOE춈8cBb"31:tsY;Љk:^+&ҠxKYwf4ٷ3KT7'瀠|)!#jn 5ŌeͤO9{fNU^ǫ sHsrM55~Y @܃GQ(Uw)wcǦf5RJ,}; tʢ>5*XX,>c&&@ ~\)R3Dڋ@gx<0w}fuB<2;?-K|o|CC"GHcB3O9K!hȿ5H'U-|}e:(-[$Sjeq:q /}k)+7jtA~HTmJ>ENT#PBa*'],__,vŽf u17AΣEkUàJAYNEr +"O_%cõ<+&*@ݿAl;ZP-{ vHPs4zQ)ͅNtEk34~O/ e(Ta}g^quJvyٲ1B} 3<xT/uנe i@Tѷ/Vd#3D9hpc}yے`ÂfΉM]Yg*f1ML1I)m6BRLzuLiYsAp10݁Zs@c]DR_P7 E<$1lxw9fEC#T›~i@W^hqvSu$jW)I? WyxJHY/%^9Q6/tY^`+^s/ԧ8jZ WqdQe8II/ehIvu6 w xM%mz*0{ؚj_X͕%Io>KL>k\yzدWaŶ;/3-Q|oĪ(L8S"K1I@g+`9x"Q(Gz$yv6tq݄$sI \^.ԩ9sfZ˿[j*7`mG@)1@ş۲YcySnֈMf6*ԨԸޡX M;=%DBN1n )̂9+0_8;d~̍ă^;ΠSg8T=2`zsRЏ!tS2sԮ8 lh׏phꓓ/!m^6j +h~t I OzI {$wqjI ێיw%O\02dQ9԰%84!ةu({8>95#U RiBa ;hD[Nq̴gηùñ6v9-vV(·4-SRhfSր>"p"9 z@dų5G:^l+WYѳq"BV6 2'|~n;4Q"=ݶ߄e)QSt́5ۦi߬5VH#( Sk4Ia#դ)-ӻƂD!B|oWxLq=ܒ.`UaJڻdF]QbQ CŬ<!}gݬ bryn.e=ʊ1Yץ"-%ANnI/e*j›@Y'et:Li07Z{f`EChD'>5q (47K12c&+F&[q%ukHV6@ {ẦΖMgٞ[Eqd@'=Z9k_-P濼@J ۳^))ʞ6lCV5TA^QÓ]X-~I}!u82[>bJmRa+ѴVdGbCMHu4i̢s#'AW[mjXOwbC--E S5=Q{v*q$fq]WHZ@} W'X k[;YnQ|m!VDu]9|#EL*F10dM@Zp(VAu1$͠6N~,US '|@1R'pďGZ^\-ഫ\zK ڸAGAt*ѣ ֻ g/c4_7>y{s>C[TRoR$Q;ȫ-wb\PgB&)uѾAzT1cY>c&aMP)K³l%qakKXF]0`V[_e$iWE\i|v#x "|mCK9 0[1#sDq6d,Vh , 3[&QƹZD7YT [Eqv{]0OvLh56| 5EClբz&d(c7 4nOR 7 Q?YXѧU\ȴNofq:=朞?]*c S%4iBE tԝ3hc8 Z)RK AH߂+qЏs?6ymP)+ ,ɺW}#I&4J FnCi"t;$^9}ehMI0s>'qJO%` O$>;?FOB@S[f6N٤Tm|x+0@U׼'6h.Z/ @ @bmZhwRM)N`|?R[ PliLEJ86y+g)%z_&-Se>~U2 sBKѴc Q~c̍~޺b=?Ʈ~>} ntp`~M ޥAG C}@%E_@~G0{4Uz`r!z~ߎ{e3AEsv_%ҟFKv`ߦ_sʓ##jSM/ v1l4kՈT+A#VH}{m_e*1ůj@Q?QW s2 #Z  Tx"UM3j/ޱ؏s  #cT:a1 Ʈ<^zӒ.fN! ~ l "{GYGyG?/"&GU I܊'EA,֨5V5.Po4F)3](Jx`F|Bmߋ1oևv5D̔_[n`w3tL+>(rįZn>܋+%i gQYD *ō``%"Vgaծ'#eMd4W,OtRRMaދ,7QZֳ( uLE3‚?{2|90F3/eUwd,I~Kn fqV ˅-9(qKQ sZsG`<5#[^z|e]]_פUVȝϨ@ӑy߾CK~b7%O:p沬yU!ư TR-pSHfamJq^򕟘4 Ӭ)ܸʐ0!ԃ#{_ QBaW&\/$֨mZvT;jc@2 xXDVr_tD$x+ȝ/N0s# FUY?L\ >cz965io^;o$80R嚖yITe{Ij:s<0g耡@lXEuQ00TSK5!S2C䗓']TO߱*p~Wj/(o(: \/2Ca0HH5Ws'I! }z"JYglo\]Н?Ä+&I֭*+b=>Haԏ݂=eSgNwIE O~ 0OkG\{3qǔJ30Q-F,d^KYKeafxJ7!8_2>c7Hi w .ؙ LXuKߛv0 @TZhvo<2dɓͲra+Ȝ6QBo/DpItdCnwi'ۈܮfNQMh@h{|J cbiJVd!]Բ+O;_̛)* K {OBŏKHvM˲с~]E#jva?愒9ZÔĤw=`\=sf#z|Zlرk:M7<͘$ c ]'D >`m!zqCѹ`*S\4Os ܁>"Wؓ T SJ)РM%M[Uc0>X#.BGܺva'nU g RAyE |a.K,mxS_ x һpB-J|e4hvËTl=7nsJPyUցB@ÕM s=jyUd⼥5S # TӺM݉YD4OJaL Y1>."5D vhr B 0:`ePl Ή]dswDQIj&Mg: eFᕨUƦ}qr0L̚'h*wt)<{e''2͇s.8:r\bL ʏ`nξɷ.*1vRnPÊ%8vJLv|A ̉XӏlQ,M,(P^gFoꠑ  7,ͯAа x ^``0$$.vo55hLD:}/t͂aeof(+!ڢ 5V" =y )(}1"cv)qE7OGp\ p^{R= dҴx= 㫮mCs9RPLW\MABnJT &iMLwı FJsY'E}"u7ˠoh8@1|x!DCT-6Б^Vre#w ^r _:4-}#+`ˋټBv@EĖNDS(.{~TiEUi4#V Vi~㵮s ϗì\$ޘWLlR,?8N{VҤcf9]"9M|Cg&wա+Zg}n{,&DaCca~Ǘ<)##F|ŗG}/0O\:& ;FDX8[$E\H>SKQz|2Rvɨ*Wn~A~FNDoSh+aVf j|y307S$U(k(/uci;$7-z=b?+{P \oQ0nTZE K% ["rjeI칳,%|U .I˗e~[}84ȁƋDKQCA;: D71/88 B•9 8icԊ+5b_ ϜU0 KŅϵ,2<vR{ lDg\!hƟ*KaΗ` UO/`TqF-$0J^θ5`oAƍuBHa\'ЃJBܗ7o|y:,/&7oS6Ty-^@.03?>-ɯVTp!lmU-/7Z\G #SEua%]Ei]pm9)|}dҐƉHM]j1Zq[ Db%/ƈ.KAQVYZz}U-n̮4\GT[`%)VA/9_[E42:P8JZkoF@t8#M8x&,l[ (hwڅv8"2U̼oFY ®>i 'zhVoE]P/ F7a㚬%W|K2]j۾I{m)R^>?nQiT}[ c9ODIkw(0QQ:h*,}? ˬC>Wt'pHU57AV tVR:=[6RZn*_O6ʎI<̃?nAdcIjuDbaKϪXWz0W2<~f/FFGS;=V7]@bUEy[dmT`3BI*D87af"͢3˲=bb|ꢻj?|>e.X0vC^59"_*]&&\^8SV> %_%BY{Z1h2wج,`bxcȷ.B exHp/o+Gy004bh)ޞ6ڬK):=;UPC}4s| KD6CY1f~+*RgLrG+Oa]:k`.HwYqؠXR]HA;'!?Dʫ;ߤlaA =WF5\a{NA!(~5ik}QtKsjJRq'Q+# Lw8齴h]qQk2kdK0ͽxvb*lnTVӂ82jâ%1-XXD}ġ.|R8=9[~r1 #T`*eF1cЌƔ%EvG;s nh]&zn1hћVTf*yŒO-~|BfQ˙JdS>sFjŖ. ]>&rmk0qD؊ JX|4]|yA>xMqQPAHU),*lCY6Epܶ_;S('?&?? zڅGNDmD>;DP7į./mSvɧyL;y~ROZaO[uY4ٌ[T€6V0C~P{>(&kZ~40ffc.Q:G|x]…f&XҼpՕ==Cmɬ˃?vE)Co(~?141mj_^}ѥ{2>8Uh2FWhAΞT bEZZ)7Rm1BPYw&pR'%@ XjFX+H'>B;We^ '__[JߡR?yUדG)YiNNwuK_*v`$?<5 ee 0'=4Q=HV ]TċoB4yT8Y և?T >i"D 5ln!lk>F*Y0toϻ 18:$ӡ$aWh$(1G[|^J]:O\ѕ&t[K;=iG/!~F1Y qղu4 } ZXkf&ΒA_r/3Δ.ެʖ@<b<;f6x<[84ו)%D ش>m!dX2H#< 9K7B l6R#tݼ@$YjL\IjP]竟GYO'ku~(E++iX%Akn:H Kv;64 +cXf'GswJ'JkiPŠ4Tc5N!O_2+ ta|$Zh1:p#[3?Sr1~ L?F &ϋ %ޛoQ[*ЃЀ 1Uo‡JDӐ5{ tC&T?kbn-$|M& 7J_h~S1¦37&mBzY7Bjakug~jj^$s~)P&]WwƒLKXߤƲBdߜ="<m`Ou}zUupt gi;pMt*6~2dgn#K#a|vh,2z>vv-͆݊GV,\O*;5>c-7ya0hiC¿1Y=@ά~nwAX+ QN' ѨBxBvtcWr+%D؁ܨdqM)+?" 4$RIJ E0U : ҷװ׻(xϜ:PO1VoO|up׮ 4C#H. ,;1I0[$|jG{Y#^g>f2x^JՁ4.ARm~(.+,.NIҋ1 iyouGUT 1 8qJ^ s|WNex9Y8"7@u= x`P|LrA.q)l;A*kn@R۾ۖٶl~fduq-I!EL_ul-Ƣ/;ہ|Sx^tZ~[oƑfÒNo໯c#[`Ezε_Hw?oyRyi}T{ v-"ͨxZ_"cǛѡj'?!ttXf_0&Ȳr#w}C+k؅^Yn/$]Bz=ɸ $: K"j>b-ϚY/iCŞbKO"aD\t&j1`+W >/4SBǒDo LC) `I}I , C?ID 2hykJ)5-ExsHx24vw)8dMd#aiO ^u<'6ҟIo7Ey[>K}#j&x#ܧwo*qYs)ʽ yTI:] O?NEss)FG).te\ٌ.(` f޺L[[&C$Km `_Tk,"X "-?G5 [fE*04 $0lN pJ}fjUf Wfm\{ֹJ?BnY6)fH ENz8 *jP6 Kڇ_* RD^zefKg=`jM/wG$Ib8v+uP^: 9xkL73.= p6rc&r2P+fܕ[d 5jRy u`EhT)o9DlL8 &Y_CzXW7- ^ )6q.&zb GvD16l=XOe[ئAB7d4w5xq@W/śXfZH9\z()},3zEkz8urH ?qmNJT$Ï҆ s )wh8aBð0H$Z>pz ndue7!ٽxcM%ŝC; VgFŝ1h`2I%?cj˕_ZoDIU1[79f1HpVEEhVe0AK39o`;L~{R'0)Q/D:#xj]8. j>4ރ&T@ 1 6ۥ\#jXCxb_;"ѤZSU{|]ږ'RSX;i[ƶL.oi>Lwo3;uJle˷ KĖIŸltcBR_}cqtSkb);D sZ Ki<_ystYH3g5y/eB ;Zh^ۈgRSspBa`;&p0֎}!döw`ߚsKȨ㭧˔xq??z&KT#K<3T{#4ѫ]0XOH 4oJb.1by'Q #-Sfr XֳjrthNno̜m1tp$gFXv݇p]l^1|f;u^F{:ڽ? t#oqXBʸƎq:0*)U@E"+`$i ڒV=1"ޜgߤq=,T!@W:ptQ3\ZO6|p0"z1u|EG)b8X& 3~O͘M?tAQY1}HV>[S˾t5WYl\/vH[8 OYY}H|G,_\E.TBWbKիJq,`bo6Y  67K Fݙzeڝ+q!}5`c욫u>%5oD 0o+nR3y7Ns~4vP4u xf@id|R-0G UzSdZrV"ZAeR0c8l8mҳ5ec#EaDQN"B1ϒ>R* pƓ|66U/ }aGC1:9Uf :("B YD.CB-/ Dba"BW6pz^Y>}LbCs+_4/ sv| tԝhry)p],c{YkAj 3PĨh'mnf)O:k?'pZ2!6p-V]R0ͳWU0&8/{]b'`PnwJoI ]?U ]"JL"Iq5h.59L7Q)Rx jҠF [Z ժ$~R{)B9y0 d>%u&嫛VurPH vlub~gX47Hr{N$N e#C !Zn&Э[x A]1oL5wOw*(w:SL=Bf91*,geYrk4(强V줳V!,VT0Uub2@0t?af̨ݍC1<^ggA}~ A_g"m6ހgiG~*Hp[>W(^aezAY(zsp[<z( Dʓ4j05<ψam]"֫E*#GjGb KF4MiՏ~4>B&twV98\\D\n{`-0ٗFS ٩q9 :hȰ!m*'ݶHP4aP[?\uy^ߦ VK\^z:Y6ǨMhv(SK7up?3%~..N/{H姰XK5]lFEW- j;ov9L{ մ5夵ض6EkI@p9ݞ+ 1 /br@É $ S 0 -QVʐJ-y;*:H" N!vtC"v)&ẅ́wF#=q})2m|H!ڌ*>VHRS!c'i$'R5PE^G"W5W]PTZ9; '֩( h{I=2S&葨cJQҍy2Ϫ7vB=tgst@X=UۣqL267 68R),|[ș-/dD*B.sHu odJLVWrC 0/op)JCUӴKC@sqjeulc/Y`(8c~OEȒKx}b|;K@]U䉺ڸ!.s2 .,'$IzhlS^He^/ٮ,t1Ӵn"vE"bng {%{R kkY16׶>OR.8@~m(D@g{Th G \c46Ny|YN9M('HK}! I*iVoqzԨd @Ę \]RdMIy)0.r4̡=q55 N$kռhDf,xdN j&*ǎ2rŕTx +ÑC_L[Zx<Mdcp& >+ GNRC_<4y"UO׽Č]Gi&9"=^ r^ʮ߮qjj5-C女䏃p(ʉ28ƥ1Sd{ _'6J%5)aoCZćNjl^f$m&X/kn&ډG ^Z?# ](`fyIw݋jicůQ=~,{&!k(yba䆭1AtFfH9R`3}XTXѼXg͟g}_a؁0!S6O 9Km@[:-\л4oїrp ߥx&V$>McZ!aNpڍu1tstd؇$KNx?;hGɓyA+*XCbꧧkqR,77u#ҨNTh>[袊,?~ N2AoL"F+ɆcZBγJ๦nOl}2T+^=ņRdo\=*9-k'Q?0Lxw!eFN{Q9_%#2GOW4W5m<&qռpEi, ";ClRL5PzZc3%3uK3oI@N =1O ٱiƺ654%N_Q6O#Q+QHUeO9Jz|.KMTUo&rQ`m‡IsfXdU`϶v{)o֭IsvԏKqw9n7߼敻gele\,["dyBg@ZZqLBQ+OiB +ZlV cCE\4)\l9vĖI@ 7(2HX};[΅Btb1QEXwb 6 i]ݶN5M-YW(^]бoޫF%C(0>[;ђf\/wR&QOa0^ ^$WM(SH`y~@0t4X0^3+;Q偓/VUٞ Bp*x!!N_:ǥ $\l"?KkdP0#a#ڪP8rpocpۦ@JuDIq^YUDçY3Ǔ3J nqNi83C#7=,k=a/ϝJr0P<R'0< c<_ ?~0~&.6xl3T<NA]p 8VBHB*ќ]enM1@N;+}Dn>4Xꈲ ӟȿYgF0/vq6^pSc(!HP- \&~,>L0k l6jө-Mq&GD1yČRT  KBdgRf;q0][WpsГQ N.]/c1["Q_&m7<Ǻ!|l@˙T]X G1l劳R1LFŊg9uD͗,Nv҇0 ⶾ<,ʚ[%CWl!=vUK t%"oX+NNsK3MX*>pA *gLj\a^A[򼚏߽C_4rAuץDKmAB6|/q[DeH^Vہ$?lCW"Z!j&?gCŻj3wN1|s/g4`ָzJDa| GeΟeB>ۭlGþӉ/ bi I&u|M  @3Js|W`|S\7Jg)2,QYL[[N#<1%GT]o1Q> |V%5H) Jpj& Wѥy#yERuz§d!Uxؕy; \ lcP'ͼg>n˔n3ݴrfDkH|o*}Zn`J*Ygs FA|4dJ+w P6{:xslkuַQUSXPq R*^JkJU Ʋ)Jf6+l~g ڸIt?o'>E/tԟo]Lռ~g霛fTY߉Jq(Q`];~ƫe>qٺ'iS lv*QcQ(Oez"S7Ȫh*^O.<Η7m5k>P2WFaꠓR:lsd*F/GFqHHg :?Im|Oc3ߨ\ !9P+|^[|[,lhrsou4ruyP?ׂw"͡G),(0bkŲS?nMuB@&5K\KUN XBT[]B%/gux/8ՌYc}BT1${ {15 [ s^ oH3L({OKyIZY=[4@tXsi4?`|v=6Ȕf_qd4ak@pM= o 5hw% ZA+eBZnD6DYcS{F Y[+q'@S,48ToC:+Pdn+=Eׂ}p`e}YG([/L8-M )4Zv0;in VPjQXYF@P+,̛޷R|27!ؕ:'݁ #S$AV-wr5vC|ӠӸc$ֻK1$)fQ?zPo:,:LԴeJQ5x>RbFQ6MťQ &Vvˎ_P:҉VNϽ:˭+5uA?0}ߠށ!Xh U:ʞ~5'}b"[/SftԖAޤjAe.:opiuyup/[)*Aq(O‘/N[rNgֲ*p}wI'r\bF?z^"}Q?i0JD^˓@:jtȗtMѩ)hQ0e i$v٦ϡ3@bÑdfyXKky<1P&ࠛNQr-B#)~~w9 2ޤE&pkkP9,IcTR~ v+Ilwv>r4b}?ózΖ,l{Vơ`7'sVkxbLY)D,Ϊlۯ YIS"&'hβ,n5Digq$dG [*6KAb\%Iʤ޴0U "7DV<W:O9cNWkl{/=OY;՛⮮b,1%Tt-E⨆ J g/ ;5Zo+XgI>윺)OS͇3 %'%{rc jfg)/:cZ^!fquQ_UZ܏lC^8!"Qle]k]0#c9T7.`Ս&j+=xAg8_PX3W3 Qy#m'i<*RdۊO& AƼȗB30Ȗj7E"_fqQpc+741?2O'$A߰u{p2¢^,rQp0 #g}JacטUӥ,m}Ndۄ=R`d1w|r@:|)n0DBnƣk*4d&C?}>i϶Du?[Zh RP .BL?>Q8 ؏pzwn9rh!}t:65f LFo^NHZpA䓷TM7_2Qf"`| _Bd@ ecKͺ\3Yu<'TPJCG \,dm5PjRmn(@O萳*fX4:.{}dc z?Sx% i+NND./FFx4iRz"<Ja;fͱao _j*Vl"}CFlOz?z's¹ 5B0edܔ=)V;j \[!`Yv4sW@5r  r=w^(#B1֩nc-y5nHčOU,=9MF絻ҏ= uH!6|7$4gmV{f O`mbu?,~tOxЄ 7[sX6/~ci@d3t\w-_7 /96ʨ?39!A1ْB 3103cp3T8'KaK,~f} swαe*hѩu,-J\:=FqLy`'2'#χqJi 3)ZNMR[{+P$Ar*{40?㼂oԁ,SEKTR`q )t(HD]؆[嶜$sRe]%,*TW~Wjy;A3h}kn^Ul"-̸Vzx2 6Q5O-*7s({ f2C,ac":@Xى,*3X @}jTw5gd(OKԖcDZI\<?1gD|Ꝫg(r)SHK(yZar6gB$Wk۝r疆э):QՠK 1ģv*Aawo."כ_YCaʜ6} Ihv4gxt.A25 xΤV$O4>VcHҮۆIκ% 0YD T Jn!:zvתNIFR,/{kO5-@PqU{#ͣRg5?vTJF  1X~d!xMn_#5Dӽ"@h|xRiv\G:iMcSB1f~CU݃gG*jI! s-qީ`N+ӕ3W0,]M;uW!^ė1-7[]qqpy;MF|C̳; x4Ҥ7=)F!@ X"qڨ k/_D(2=i2[肰K.J(΄U "M}[#y>{1ˠ؀eWt/fP;|jE4'KVgJ l=&4zXmA$FԶE-oJ2ߥQ*x +%6wȍXؗ v8)z İ;^XLt  \&aP +Le#HlR h'җngPlѮ!Zpb557i_c!rwi6$T ׋빊 {j:\q~ٸ,f|<nj U/ܧ[[Hx>mgCNPO oF1v7@C8" ~ gwE}<4aJݞsOI"lA1G7A.>YB2"W zL DĎmmpJmwldt_i]El6yu*ED1{(gMNRjMw8>e,É$ґ-,;0Wޥk5qjV ݧNy~zb~8` MZm},ׅ(:L>8څB#ܤ*4%14E KޘFxGu&U_\t{_6`nR͟"zbT^"e덐);UC7K.nw4OUV( 'lZfz86ge9L9z N(a\y]k;Ȏhܔ A*^nп閻` QYݍPY*dv=4mOU˘CWáwS i+ Nzq}=Ք^6) cGU %)z-D9d叫4g{Oۦ|SaFG=RFx-`=NR,r$ioèd'A<ӫ߶x$I[թϵR|(Lx9G|lyYFb?Lʖzi]t8ã҆͝ 䝺6`g)pf9lj)_]nOqrOKUГݙ< =A/%ԴKgI7Sk$aP 5F"^z*;0WxF2"Iq<0؎1 oU|]r_T }L|ya]-ZDaՉ#Q>2 ;[B\jH!{RgmFB0t*;6[-B3R=ig0:r$mlf ShɨDV̸0SLGaLBvrɜ:whDjDD|Yvhh$X" sU+֧7K$[Î,v /tpjkk~+$5gevH COumX è(¿YTKɇgcn(K&N1&b=9Z訥7M{h|;W?ؔ-b 쒘U쑐#0]4"Gcf|u[E{B ,?/"[Sm7~̉$8h%X`̋TGq VG0pt;K&h!+a.F_ wK;-eh$*B/2rWZxaGD'HWD)Ȳ;єM|ps%8Ԣkuᒪ/mpuTGGR$rs7YkpX }*!.6 :cs1񉶧㤛DA@N)Xu+uRD6[Q`b}A(d=>4Yw8C/, 18/N$±چޞ̠ccOM IcbWbj,NWd+rJs.?VV$[Bs(rpN`Qԁq}N#[UYfx]\IQ) a~jλ͉^rK [Q-wDƚ![njC@I\!o,#К1g+ʖW4 s:ӸP;}lu={2QÏMS=0_N8)a+қ}D P?'8UzvXནIL]AVQqX͑LO<^i;>-u Da=%|Q7@ˁ"Xv1fAW֡ H8- xID2b@p7]DX4߳>~{`XpMZH{)0mKfa!ǜCeEFº?4O|d, lW@@LPޏL ^-$!uX>soԼ"Y[a&gcƺ 5 平y@YxA3` 388@_,ټcLMhKRZ:BOӜ ݓ^o GAZdN>{vc`[X-mcåߨ7W8B~Uo,w2--]qu#z}HcsL>*9p}vIC"E-E$d @elY ׸_~ؾϸ:uTB`wȚ|&`DgÊ쌪 r<{(ZBz. mm/} °>F>@f=J?MH P}4Ǚ.1_7 mrZT4f&H&9!9 Bk\M !6Bg0(Kx)DyIE $rvm{rNc$_Kx^/WY'ר+TR0!a#  Jx*ைEᓸaORUESf+52?N#k{QX:8!F7be'a)'3>̅ͺ?;l`cba!޶:< Ȁ"m-`S 88 La8X:Bc搰WGj@ ;{q=lU4i(3|Һ~bXqں=|D٦E0~b%86 {ch&2 ׫ V6U;_|aV*hf+rv9/21YqwW\\J[O֕/i[]M*v&IZt$Г/؅yhXz/{N_нLnB)M>4w])]k$䍪CNzqLQ|nI*ɩ;AmZdDpC| _&ȵAtYU#Xȉ$+x.9)4%seZ :]}B"BRgfXHh"pI]zحL@\{mU1Q{#~Ca;X0זɌ__MJdxD+`cucKʒpW#jqF @OR(Q`l?*Y!(J<;SG%1 ;ML+;oo{㳝[`~Xm>;-}풷V失jmɲjD_B>,NuS\O-dnڲQf 8sAJ%BZl hoPm9ɘY_aүPh5dwA1 v*'= ?.f7 SnƲxщPB8Q6*\k !E޽\OA)+b-;-N/zV;0K&M73/@=H&҃Rrlo>zd[4_c,ˁ]\k/Fx+Bdk.f-ŒI}以_ip-jj/Z`&wgV/ ' ٣/Y9 ߟ=菏/~FSF;쐰!(P/t?]&!^|_71&YXW#+,~8T}Q&Hi4*2R?n ^0=$ P!tHmQ!9.[9H#RĎk),\:'ZF mOB',Ϲsez{i+AW2'x~FOI`^\õyQ 7y {#"GpuWY}nCE,0*l:3qm W9$. Ly]m I:;ɰC"_H"VJvI(m0-bg%z:e_*qDmAy=حJO-BH.a3l.|]8 `TqG6܇Ҍ' #ŊBǡ5IWʱujžCM7aLkehÇ$y oTr'ѮCks$="ڄNO#lOd5Ŀyڪߣr9*). -r7/f*: ۼd{8tLڀ|4M qb_ T7fy@,ŐSr둓:}4|;̐ 0^Z"=@R-#H喝BtTlXIo oKNԱ-wSGc'OԥP?$qIWG5E} 8—0 ".Un>WOI+cҙqv=l<G ^FႬeEUYA[뉿U%)Ou~noIp?gZ)kN,.txta=a) sA[Z$ y]֭(oioX+A@j^Rb")aQqoW,23p1m.SLbY-'Lڞm% ֕2(n-Fna&_`HĎ/s&J xC,qlVQiC?^;v&Xg~K O 'K&ms]vX2yq nY&ןE&ZE BYKQH|*#خ19aP5y i8c~c-s!U}Sk'7Rdau>;J /j5 _CZtrC &@8Ov 6KV dAxˆ4]Oȃ^uj#Ya_9)WhS)-]*^{|yM8 #xsP'7V0j3=RT,z+ dI{W|y/n MK5YjJu_ /HD%Iׇ+B 9xEpzwq"$ͥTa{ۛqlC }*13|~C#a:i\,Z|TDZkX+3'0: )Q zt(4pGS?/ןx՛  \20Cr0Ϡ(&xƷh;K y!4߇&c@O"% ;_s %ZX3se)6[)KO*ep71o1DŽ;4Ddk?bVzd0yc^y%,Y4Lt=wl'd8QJrD28qIzsZӫГ t`JVX}*S+]6ոKsT[l]M'ܰy$̀C I.* w*oiWQߪKWԶrOS6冻3Ib314/X~\UkH/ϐלJ X,fx(e̴t^'pӀ'NIh"Y .4-̵mH_pUpGd[agcHD/i=p H̭*Y>1( ΙSݷ#;9hN(ٔl,¶uBXd-T?O\i#O+BDn5bCy6yb"E#gX+w2I IUt'u\Mim#79E̴%| lttȴmNlM-{#)ABge],$EqE[3+TΨ1p27$D|sbԏGdAn `ݶ稘Hy@I;k'i\7qss~J_:CHԵ(n RH'm^(}v6hzG!UBz_D[jH/èy`*/,<ɆqdkcV@hy4h90.: XN/o'qEi; ۩2EMծ; Ux- jgr̦pCZa-ne/ -YN{=r;=ȊSOm#J^iAo]jd$^B;/ÕJHC<17ҽR͜Lxf\}b}҈Fo8 -E|^F|˲V,^OO!,fRfP_93 ply?eX@ ƒTh̫-s&u}a`,W_6qK$W7_&Z2WS_5b\Y7H(W?eQl^ɼ花l&[WV>+>̲^{%?i{Gdbӣ 0up,.bSf_pv~rzd5Adۊ(nz򋕪Hj *i`8_6E# c-O%alCs aAZY0 Q4WgcQ3.] GS@9=1+0B `l‰U)ƑlnHu+p.0N;IRNbԐ8ѷ+'C~V-_/Ơ;lsWX`=5,DU#/˂#>+|BsOzepz"}g'J .7_M}[jmu8|r|&vo`xl*v5Q?S+H졯]8 ͢OiM(azow]gg@S4i|("Kr6lNZ6hY@'V) oժ4Ҋ␻o ^D!H>.e`_﷚viOhwHu;1 VR x(STS7X+f(˝'&'F 쓹1)ҷ3j݁~me!8w?fǒ{/`2 %ؽ%81BW}Ǡ^O;UHNdZZV[\H;wXӗz>͈n׼jk:^oL?W-tNɸ0?^TRK[_[tb*ƚfÀm+\,`^Z9>nWzA\B90r]žW n*U" I e;IxH3 S7|"bHO-CvC'1_J]%Q7"D/o~cg7lK$. YVTz9B,鯼 xN&)׹LbD"/!sʥlւYْ(9IBW$ߺ݁Cڡm˦~?sWxr!VDf3@$i{SF ky4XY;nV zSơ9,P:;H*XA] Z,oS(y)7*LszuEʙ4tg}SZ7c󪹣 Xq۴&l2Jۼ_hjfh|8'T:~ɇ=##k~Odbٛ{nJSPR ;W>"t1+,@\ I #?{27t%aUP% Uex5;) >?ZJ\}FvЗVm]0Qm"#|k03 v>S 0r&nD;8Z(%T۵&>I}C7(.0ɣݭϭs9SdbN3bBl[3SeBW,T WyoClGdj1LlýT *wDJ:x8Cvf`H@?j ;K#܏9[}gfgG|˰.k ~čk-]@I=T"k1Hfѷ{t}vKmvg3.. hD{i#s˩Ze09q1^!C;䈜DI ???m3|7 Q$ ݩ7 "Q uq9gO#bM"=o[j_]>춰p$0[ʊM/$d݇#1rǪM(梵`5ug' 8瓚(B۝H Rdk%iryg!ژQPxi6vp ang0Fsl&,5C/d*VRɅ~`Ιnr*NwgP1f),2÷vh3U)r;ȀcT.MkKM ֙fR4ћmZ_BǫDV;hs ĢR!ChcGLbWݦrR9$Ww~0ƸM"y+FϭXWlT JBR1I6d ,ha}RL0%(:?B4Z)a@޶߉J.)9!1h50З**گN r +|+Q.J*8!q0c/O~6G XcI+['Sm8Gcv>GmQ֥t^o d'/rDq ^ur 7/$vCb2-z+(nEW!i{ju26kE?<fr8la{ꒄ>,Sݸ dyMC3 ۔!+ٗ2 =|?j6hzeƠe'%u\n` ִ(iEVi#ET\8[!0 l1KDŽ]\>n΄5׫>/&KZceail|2s{U%e6 _l{t!sјX?Q I4;R,MZ2M"{15Nj}$ Q{Oo|E쥴58 M 4cN`'MQ3)FjV"V@VoUrAϐn1JF~pug,=H/!p 7ܶz?N랏e*sOT99ˋZ1ΪJd5aLtGPJSߡ">zϸN)ҏZhRdKq$_"v@ O4I,7w*Nt[[ Aw#;.*=Z3v;Sj=s&D(6خ8HnG™MJ/l [cYg$benJM˂MOj(Ԛ0ihk#!!C{L}@HQО7ݻ[[{aNIeh5dzH6w +kJ.֩HPC+).n h xp3VeA+ՠec݆v~>e[_;b$JjopVJ۱^as]Nva0{X# XWE0S!&˗EW8.Đƙp4 IJӂS`IzyMz+Ah`sE=`s'^MR.8BQiYۗWN'z-aLQ|z.~QpΛ$'Ple-ݭsC,h"e.A/eb"&*w2IxL[%4,8ju^CBqQEaJX^աWoK$ 4oUZCCz %`:eH4y-摾ިonD݇prz$aë886 eDR&$"K ȥz<"R:@.ndY1 z-fraJeΪlf\` ;uasˋ.寧9ah*jع^_a,L~eLl ?,C9 >?K_˺o/\En1O&i/$Lӭ6RXq̼@ ̇%gAH:O Ъd #8}q ]vY d i@F+sTy]ckÐϻE%Ԟ$;ed_:{QxJeTx_R _eiO(Tǔ@>6kt&+3d.PpK:_ҊWR1lޱ/wj`UlXw }9`4A.)Z7)ű<4ٿ'f5d;)LetjQ,BWv95ѐʽUN.V^Xlۙb 36&y͹S햂B"'Ћ3mZ_1 ^/$iFekBxYUoy-zPXug5&,RCAЮ%ԝ h'zV P7PbozmSz ݺЂnx?cX ЦF,Z0P҃#I /g @;~`  |'SCA ƪ&dIy GoTQ!(p1O)}> ʼoBVPг#X%(G%YRtj,3[5ceB/vLL>6TPX*v֣祓}$ uR^Ҕ2@P\4[<Xp"%_]>#]AHUxjz~Kk=2,UZh}d{>25X)!mP{c!2c0*鐖BܲWKWpB!A`-V)Zjjmjekd7ʼn8$`: /Lոˆ%TqG.%Nȣp:R҅]ܐQW?~3T}+` y֫6H4K{SAJ ?FҴW^{&xscM'WfׯΡ'1U`光P-󫮋e;-}}Z!*WCij)~'ge`tpuR hly+P& pc՞3 r8SpE{Kj6@w>.36[ff&S Xe!(|5J`~w? ׿[dWϸTM"nLVӈQ\}JeFK׫SJکC&4慉2h*$O{)>aJ_< *c'D ܊Z.^`_>ݾ_QX|j $HʕN j穮moͅvM߮$sbXn(s zxn?kGWo"wvRU1C*.vf;d*Qs1B⻍bFSrMW W!8!H2Dx~Z1 1+.Uh8Qu;Q_mm.=,3tD'i|˿-% w M]K⎒X629_af7;uR3KG e+ϓ|Z(|l,ZpvxOYbrjM(y6k5mrCXKߢC!L X|Uk)$mn:qULkb+ )d=UquA`5DkZ0YNoƵ4O8 æ.ɰ$TQ$b;:cZ>ゼDa~ k"-*#+mjcA5W[Yj!T)Ow?ݼ!P>1w/p9NG}M#(;LM{nepg5al>R %(8y`9eW2' ͹EdXwʍ/Mh?lRwu-6%kƿ%R #ĸoB.~%DCL2ɱkc[s(;ϧҼEO!G>4 wbiP1g7|5=Vc; ]pTìo9\Lf5/ ڭS=w|I#;3QЕoFezWoswB9.G}cÎ6}&ך+ h8$S-#6T;F-|Gr/OYG9#%0J> rm`!hU\>w!aAO flW;WL)ʅ{R'& &}2du[}݀9чCUrcƸŧ y‡nrd1Ԡ-4Wǵ򥨟8I}J ol{ǃa. ggVnaM[F|9GO7Be fyx]2jR@; ϕ.Ra_6Ԉ#xSru<98qPHGF+j.zPȄw 55J6RE#D| ];^ȫE>.ܽ:c㵈ey#jw[3Čl)RώHSze+/z)(O13i%hd7+ ' F7Ym2V1b JD},e!/t-O=튏'K"B4ϒCPx&S .I pBݢd:a,{/#Z7 /ܶ?N9F͖UΈzd@*r݅l=%XRӱn+'PJ|+)|eGfYjTD@yI.V4>Qo]D8C x'P *|3Q쳜eF,]uӺ=/OSJ!02M1'$CDT='1mm)>+CnV^sO7#pʼ]۹)HzcUh%^]m80F餬bL>@g;\K'ʚn {--Ѕ0rL>ޞ\;' ĝ_Xid|vCL(Ȟm\o/jfxFM721O48K dPԿ8D'Q.pu6b݇iGFbp6 b. ,[E;V߰"E;{PQp;#kå"I,7ĸ:8[R>ζkyy\b|*7ŋI׫M\i[KN"\y .^~9 .g!B'jW}+y E('1Tfv"%@Qx٫Q]W9 R oAlSȚ5PK_j/o/5Ry<>gA%NOl%x5,Y+0ap2cYP ʍ|+ `7sj۬ ?o\sx*1=7j+[_Nd+pDdп/ ݧ*N— w%~r+,Z+$뇠-hn,:ң}4.`jf&cnyP&rGͻDA&6KЄ(wPˈQwLݶtCH"VڐM ~TCHra\LWՑD1cOy&.b;ӭd ~ߓ—&0ZOZf þ3}TM97b\hFv4 꽘wq3TGdx,r )l@ryBy_Pe}}Y7o]5#Jtvpqӹ4m@.'. J5I~y1g#+#'"!%4pyIH2S7kBXojǙdo׺rE |pՆd5e'.Ϊ8~NE &O$yyq!V[1)dN *3V 3~ṱ $yPtREk5׼*(hO(Ŧj ΋UIzK?E.}J2~aVBFAƼ20#w -`Я }%{1IG_.@+/.UԿ9dTzbSʕhˡ]NB9aiU֦Zy\wUfEdJMp[P>.%HEЙuYV ф$i^eC.\RJxA(&RU`5*]X`*ޛ5mgݮiT"R}kvy9SeBXk J/@z[0zKnamc M[`q-|cTr^fDe%}Jodv5A'Y㒛F iRcy[tidia/~Eys+yݩw(%̇8:S^|ܛS1L[V=h $Q;n}Q6 :fXje/e'nfJqj/q*#: *<{ۆ=LE&zpLF %d.lR7O Po uV6? I\5}V e})RvuK80,i h\_.WW}yˉ駴|t r}F]667Th3dHz:Ȟ cra%Y&ǜgs93l晴ʰ˪hKM3:a$ƈw/SDQk /@d&T_ Db;HRa0FOe롁W5,2q^9Y'GЋީið; 07Kjr\EօӤU '($OṬ@g <$!byesJ>VuZ޼Ym5"M|-+=lOQ$\#PDOrC$Z+bU]jv\pڌ-l1kJGpsD煿 S2ZrIfcnuN<]=W̭D>:UbRe~NtgW\PVУ׉|h֫[jJ?%6eQXG)䤑GgvLx6":9j2LrXQ\^3 b+&ჁAc[f"cH6vȗWkxSjt;"^^w=v?[ 9w0^{ X?K6e?8tqٽw c.6]RӣMђ+SP2D9lrߺ? !-%^13Hw>Oq)Dj ZhKNW|O~`2>ԛc Iku6DPm?$qp]0*+k[d41Lb[<po[kg kF,wh%7j͝NS(6m3N%H Jr}s޸Lb [- l Z.`y2Ȝ mudH0;#5&oyRLXI(ky EM*hwt%I@8#Пk8n~`mY>j V]%Wn G'+^*;%݀`֥t}FrU< a߯E/08vՂfga/O }9 ɻmkk=^Ja)h3П8DSD~AQct,:ڎ܁mYXTY.$ӿߩ#RtU _>c2o!X='+M 쨜 UP3Yd*3JԵd0LC)7samD})(fͨhr I`s3( {F Csv^ {q. AW]6KvlV+flμjXVYp醟.VIE]z_G|{iQl{HdT6 My?zov_7 _V YJ12 '%_Nu}B"w N#DiS|j㤘H7T&Ib?GM`1b^-up~rK^"^=Pjf_j9ҩvLF8P|\|$82ZZqq/l]=̛QoPOB63D)_R'TEF6rCwAr̶V{F?s1^&CŶ㼺-Wq[,}~ԊjدWCG^+띴jPVs㨇qSDP7[GS*<&Ma}-֧c;, xG>ySɾ-m&J *aǎ#3{YGksó&t|d_46;L)nS!pe7V`;E!ZEicݱ8j6TaO6S,61a eaxW(͹@l {,h4 cH!KL^ LwHQ~FZ'ķ]C/}#9"26B.,k>DAmiѳsⶺX÷FQ<㳼pGlI%$fQX%YR\vUzwU?oH {S:Ij #3 t UC5o;jE)4;R/9''4%q (W(P}ng"{4zkCt/M־L (|`pzTrف:WT\h 椌A?E}_;SǪrh =4Qo;S4˱-MkhlLgf1HΒJH @lBH doz0%g5 *)Bx[Hͫ!M=Ft>Û5!^ In3ŪL /zt՟"ySQOO3z. n:X8ns)zܞQ _}`d4j3IeaV.ܟ8&&GQw`y3a![S&N>D%V~|$-G2Rk;ƹj~"WHGe4 c6* 'mk&E dVHIKb+{'XV.l㎈Z٘b7,Kkm0ZdR"YrPڌ{ !f6+a6*4~2fJC!^̉w [B2=1F'agdۍ_9b[(r^+Dt)0܅r =P^5(:# c{"3u{=f6/ĴCv%<'#%W51PKWvrk%Vl o{'3摂YwiqT{E2Y>\z).vC[X)n調,Bz_E|B0}nLլMD@( ^mY(PB \Q~fczT+!ks#v(~vO, ;7O@_* [ŋJ٫nazdYx>J FbIV|y(ˢ!~X4~[;E2\3L䉐եɿn"0]&cͮpZW$LY37hJ :<Ktl{;.nꅒƒԋpG q]V*v2rj8*$Nm5\lVNʹBLED_\U(W@j()/z*X! ͙iZF 0#V>sj. ޠz K5pCl<EwAkE-٣n+Vۄ~_V<2ߐN(YB3$\5w6%r q3OLoN^ѕTDy[ 9#$  ,t_[bUbgE!!&OZe2kn"ߠ-TX1bb /5s QS m ?I)x [v٠p1$CJ'>NVXD@j!H.+yEyzR"$@,_HcuT e_CWHƑV*6y^i,CN)Ap>z{:YRx/_#uA"x|fSNyJ-f8bL d>hXy;ʍQz2rdlp4a@=ά'-?KYk6_202cd,_o(܎4+7hT22ԄN[既=>LO} )o3eڔjbO];>$f$oLaPuVA`p*<3i̕q N}mĨ)8u*L:J2ƚ (e7qwЊ]d˜JYd2%/;y*[ mC%9,)/.'Y=HKdsi2iì|#j6.HCjߘqʅP#"AZGGvrƆ%C@ /mtl=蚧. zBrYooj41$ 'vXEVmZ,y^UG W?l]BN̼|'fH8'$ *0xMIKCLUe|*b 4!i}z5Ym4 g 5]4mk?C]\5)Ux沵#JUb KkB{N+$if>Z HFh' 0dUd$M0OE&V* >!6V{h+c:|V8w! ^8 Z?UEA|ct#zXٖOR'q~gUb^+%=>GPg*ِxњ~WtLv\G>8#>?8p/N"9Qms<01&-IzU,t(YQ^o ]Tz qAWXSf&nujprU+U&S9E{`<ʡ ^x?ВA B؞ZiaYl2!rnl]8bfB/py|D|̘suNI9};Ri&*&%cW=.m'*/ɘxRT1k@AcdQd͚^Dq{EVWisc:Y92.߈:w\`=@RK8/*SMhWar=t1ɻ| f7s"6QxjNgkRGUc'_GŅ+òj̗`i) +**A^iŸ ZN??SDk;È|98 8um^X$XM4|,M,G(ŗsD='-OAkR{d~iiM>e^((dM&U/@k0 ᡏʷcgcE dK4٥qAĨܸ#HOrώ[L4ۘq͗A$4J BLB:Wn x=1[@ LR o,ðo3KL$3Rv8[EfL]In' ! ~9\}Fhvde\;FЦ% @?\8AOKxI_hal픉 WED_?("T)X$Py MD 3#];h8&6& |oy +1L:c9SjP8KKLh+L3QLl$e:@V݁"Sx qKZ=4 u>Ecԗyl4`;}׸MkJJVPxU[‘ MUc0w7̈́Lw% dS#g"䁖w+|?:gf]qKKیUyI0=h q9ʗm"UP%W6v̤n«| 8V# Rj6QWݦF/gQ8}u*~ J/#%N@TvK0ri_T`i3`R)&0Pϭ nT1me.D1EK<|P3~!tmԨGjĦNrǶ'gegR֛!Bzj4#mbLxsf$=?]3$0fcBNupR3B=pT 44RQ +a4鉼_4bhFu}GXn%I|-Ñ穴y9#H K\{b@"v}m rOs-w4vasƑ9J"be-Ts>d4MMJS9/,n*z EgiM4t7 ks:P2 Hԝ_%o-AAKÑYJV|Fnv0maA~ՆN B vE.5XJ> UQtP]{eatؗOO<'5\d)DK 5WޣAĆ+.)ХD"VA{ ߝC Aqtvu`QX^>Fa.Vik TR\pa.Ї rz\T c* ߊ#@7xuzSack\moG#hX *qu\Y PI`Gn.g/CE(>Zy]uBN5Q` (l0ռnq7Q–":p:8F$ḩʐ.&(hcE3 @^lxdeiʈw]XT`#L!B~IGze؀ѨŰ=$]p^, W[Ip}@䐈$ivKur\#4E6zoW<a̮ȳW{ kF^ͪERv4mT%2T}Ċ]w7OsN_ylKYBhNUepcSud&OѢV.Xl$>v Mw璂NYk&*:̨幷/:Z)X CPʍ.$j&nmD(GD[O W0E:'!irmn*Jrv&i0f%D?9 lK:mlQ-L[q}0kz[ߪjŎ9Gyp@@r.8Dot 6dΐU?qH񇒌$S=뉡DWwEѐY-T?l!LH׼gӦN4N$޵\` q))A@i.ydž AM_I(>]8hW Oa~W-Ԫ%dj-ބ*Sn&Ҥ+Qmc(冤򌯺w-'o SLQeە 1.Mꀿ 54=9rI˽#%5X<,{Q8h&4ZBS[&rUH:f5OmN9csQ;"wzsuQ6BZ%Wt|Dj̓a5 ۵'uj E]La`:%n=A.@Cp#]UbXK1S&'ᒹ)0[7-I Y)Pz"1jnkHM߫]֖\/sYp &ac616hP$k 0Tg"A#xfNeܻJL!`D"6 ;`D~YD?pXM\_43@oLY㊙F@VcR l2oSU[Hww{wOǁװ|tT\y+?,J/ 9&ßDVT`8hI/cp@Hz151 RRI4pvZ GwD,Ni?jn.ݐ'>GlDc(qF)fV8S|گ/u0 4J-oa9SC=wGQ@dX`U>mTQ q{ O^׶ˢWBx WK,Sq_+{ +oeo]hy;(S&H-jH5;[t*P X?aBICbqrvGP|3*K?x=4 z I!>bդy;<@X&& Q겕ڱ]0v-9'V˼VGlGSzߔxt_gl}sa_, "F¼ |GŇ"=pC +anYD[LECF--KS,p $;{opޫ>AAۅ莻9ȹ"MU)]F_͵{v^3\$qo)[5;uvFϱxvbPB!%@G|UA0%BзytV!k{ }bj&sm+B;Ri0v,"兝l/>Ħ Q'_R#⛝Rj#"h+\3qU *G#Ս[cZWag3l=]*ډP`;K[T.>i(X~44}$X@ۧj*K%xUST:Hz#s) g4goRV#Q#za)ऊG/[i-UY SW\\AnUZ/iʻkD 25$x2ԑo˜Q)r L&(ɁD p9)k J{P3StTH'fӮq)pzJ rZ!n#XDfS쵁$Lsuj(+fԣ[I6j= eJ[56~ҕu]VbZ6RPwo$͐S;c: V'6=ްbmS ;):tPb?xJ2Qm:5J˳5#9њ. Gt;niOZ7u;(E Ĉ@81#7&1(1ܻ4ՙ2°zsZ$"z$`XϨJϟIV;a-ʅ PjmMq~lל}[>T3D)r{ܦZ L٨?gT:vgfo WDZ1a/Qc@rwWd/a10câұ!g ~Xw}|ԠP\[rި5ۨ;|?;=G q` g1T.Bf‡v%IO֛b9q=mpfzW;@/JUWPh԰znJ݌kw<&O´2i.RJ~O˚kQ_gĨ@ 2}"ȍoù+q?l/u;; b1v[҉i`h3_L"˄Eon/ܴFqc g ~k鶖 7#k-oj34o8 %0}FG2S'Τa2ӊo^ŋScZufFk[n2*`Y %ּONEvRYi]&`J b +eZ vƚ \el|ookL>ִ\+e;tEZ.6Ghk?=۶BDhBwz YYa/;LJ*UKhl@U3m9&`[N{voA /ob1%5=ۭGU18A67BqeUxlll$Ѱn?$raؔVRqPhIS)(& ΍xux_SzG")bûls,+@v4kNzYVќ!W9F?z"OXƊktxy#Ol(omAbFuz9 +Š+ClGpu>KVٖ\BSǝSJyzSnL1tR\G))` BAS~ML(Z NLx-1zwkh.,Eٺq1 ShhrR{&!&{ݸ9*h iwO$KV>ʖR,{n@(2iV#;CΞI)W!x{_֔C9 l \cC aa o8#s"J5vbuU,3 .77ť |^aT%8hW3p>nܤՆipPi^9mɰ( O+ħt„N@;}LOriwTѐ$+zڮ>"2k=/-(j<[rQ (`Y0XQ-/2A2qg@5dζƦǼ 돛4v]cqk?:X]K,~\uXtV`#nhotNG|0v;ktv/r0;"+J, F "ߚ݈bobZ;v<?Q1pĪHh}!iaj4,CM y2-9a$fq$".CLCAHJu eȪN%ɀ/T}f ?;\(5+<*_VJFjj dXHU q>;D7B]TmЉ=#](X'R!>oʠ^Lc2'm? ^|/3=1UeK'E CyjM1d~ٽ”ȍ%u{Ĕ4NN hYϮ, o @P>: vz/rfדׇf}2"OeFY{l?%H@raNi~^܂I7d Yy;͝wښaOf)#j],f|H K#bęOT_,y2۰8_H[7zAIw9Mg5(gAkBcHzsMi.>.G_'f/zb SJroS%v  ̌.F~\+nkKb\0!B(bʅ(-,^~`$ZT 1=4C9{pV!o"Y>[ oG__>G{"@!G-i~?͘IF֩ZK5 *5MBjdgf̠W%ouYo#U8#dd]ՀZQS18ZUvʿwk DspޱʹFQT,ȻVCcbkP)q><7I9kwP 5>e!čE2!a|Ԏ> ʒbZ#FZvwww*ی%PUqEX-XK]F-8Rv jNneEDEM4`D>R娥.WPiC72c^둖SM,*m~<jAZ(ɛdIK~HV 0 iOU65-OBf+mN wdr{!!{ۦ[&9)og+Lr5$ vv_d {vpe32m!-qI'q;Ee7Tj^$h2qj6vqa2X #Vmm|=4> nTMR4ԮBm]U#֖ UVe\3t 3x+?PF~FXI,$' S2`> N2AW-zJE; s@,nib wK?GxslWȈ=}+_h?7Mk;{)|>CܚT圇at{fmMv+&]4'r*PV^ZO1p10z#al\FWy uM@~gڄj&sLD^ ʋG%|advECDo=puΝU+{?V8D*qf4,ٜH|ybs"X 4-^ RYEX*x }LlK-V(׷>j]Cܢ˓/a@m&qE& ۀz<ͥT{)2rqMx3+nZaOdh?eϢ5? OfTP!R/4Oi$'KEuySQwʰM{F3TߨocP#Aڠo,:Z7\@J[y<阻QX $Dhӷ_YQ]@3D?j J l51 cXo"Hj畴+NEF6:3f_{TB`Vߦc+<ԣ,SbL:ь;h`;ə%I}z~4j7F:nQ]k#ۚp%֡{9hyf+yxq1CA sn;,W2i˥Jy3I뭸 <*Ɵ6-$Nh5#RW0=̣k-2={_5ǚ!镧hR;FÖYaE>uy\HLSz͊KQm]JqBWJ$}"NsR oɬ`93w3Nfցn q%¸UH7m̲(r?3 [par/ 5J95hhECg=@ ­ k.ҙ\9.ȶ~D~^ 8̽-DMs;Wf>֬^_Es,E,:t-d Ní4Ӧ>.a$pt.~@j,1El&me6lAlގ-V tJue?h):wݧ?q7g6 #Ԛ* i\g#C+8U2=#xHTymZ^50 D0\Daa65$a1iPK\5W!{pE18bL+3phaI㵻2Ƈ3U-ǽ0i?]%f@gQiVNA{+ʷ\`|LvjG'Hlg΁CSa#\u",T]1쀗a37SC@8oř9s!#<È,w1!ȜH(-^EOҥh|`O9P;ml\n֐>Gdž^5A{P)JqєxZ:DT$YN=B #MCܤ*< k2Kln?;H_PSK6vGg[Aܶd:Ϝꏳ:^57ũU Rvi%G; OJ Є=^$n$&U-FwA׮wxSRWAEٛ?qpI 0\|q.#*Y/X' {`kypbkq?p')7/>؞)̉#4 ذ Qi@{@lU ,kBv>:܄ NR]GX44{JjFM WuLh|fOfGfH.D)AҐX$:> ebh{I8K@ߏ3-3Fc!XVde ;`@,V.ß-[I;E NCXdEb“6'Rx)[ 1}~UeDu0|qnnj:DpJ"7曶FUTm&*YC7b[.iRUD[0-[Na8גnDްr,>Ӏ?]޿0 tZ9i. >?R@r--A Ƌj֛)0(y: [ɲDeD:$vu]X(hoiN$ Ѡ|^kC;f ۼ=F (ݢ (Y+)b&F2 ^gWr4AVGmy㰄4 4?UU"ݑV^X}o +s&Bb9zByҭg<)Zp\s b7Յ˲\: I.MpX%Zq԰hb#W7?EhKX-0奐K{;b$`'O \ l?ޖqPu{>~˦;N̲]Ĵu4@ m$:S%)PvGDĈ†P&OHfQŕ0/̞fw^!Y*:`~[K^ 39(W9&>g  nm՗=/ֿ2, P ':8ʡ9}G9rc#Ҵ\ɑk ]݅*q*X#W^\9fq4^ڸ}$~^e$+cWunZ1:,qL*z<1a=5|-v/46 +Ј?Rt&j,؛β(Df3ӆ٧JBŪ8A(`{PU78,G,Bc jUٹ~!Ӥ4eg+ =њf[P+]" 5%QD4ZF霯PuÓ/_&/pqL04UidwmceMrb$ȹb-SXM5(Jq<Ǣb+rP!vjKIʹtXb~w〳84 +ë0^zUWB ')<#ʹO ԏzϰErQMs"0v`ne$.vA|;.+}ar4t%V?nXJӣM%1F^kQI=GDAOP#%kxuv^A* aV(&6Tv_pG,YWjᎣ0nS]/ `#y7ObZa/-WW 1 gՎ,5Y.w2]/1.'5XÀk?Fgs@:5vtvW6 &S˫?bKc,˖-Vg@kQjT ]bB ))jC]~4[O92Cz*v]Kgش -1MV?vG`PCԌCP7EU3lݒmp@@] 2f* 4=|7I(Zj{fC;X 5:Q_O}_Yv_Ŕ(G}LS}=7@f'KH3CHJ8^uM`Ač!RBmf`:iO5A+هb[4M<!qZcw{OXvL-d}< W|y$ 7Z4Hnr5/$ORn-6P5)|6J´0p(z rzC]D?BrCz{kXGDs>Pd}m-\%OSF*7Ĝ@ '$p1 iW X(xbL7U^ !vҌW{Bko-*{ Mх9SpZ+&س1=bh޿7zM+&S*+}8%LSR6D B:LJݪ(P&Nt#e'҇j7߆NdQFλ MLxu !4lFD%%Yf.e:[P?đ7R%*)Ie HWgfk^js? k>%ķ.3ۘmPDDY9-[frr}:6YjwCW*y_z ]ǸE4&ژXCypiͦ-stgոĮ\L{[L4sq o;XOֱ=YxKO𭑇_AG4Ujv㾄>Hvj<0 $7sD/icpHiIS.Pt$pPfK_ ;&`|/8K\)ͬ䏂?ߕ &i#x-uXz-[4Vt]8{8Iݽ a\z.@'ѡ5ȯagՑRwoE2a6Wp[ߣggyR綾6&rPz v'< 5[['XFX,C0ﾨKk#ץ}ʣ]K+" =G_ݪ+4 ܡfҒMͻ7~:c< M1xy}Re(d`ŚOlLs<y}(L2T]V>"%|@FmH{N6Nk`]?)/SHO'=ZWl!흊i\sD6"P o4Ln!΄Ӌ_:xi^:#y/!&yadeD]Tz!hl763eJqQOhfn{zxg5HEI{jf@ϐj$1_ !VXi1d7LK{+q׌|.JwOX^˼H:c4bC*y c^"V*:}>D *)f:Z i$Rɬl"A ͛鱃@?OE6~UGqyF]"|=YEMdM54KrcOFxvaAb gwK'LULt}mwH݈_L@qkrƠ{vlKqY?#i\@V_Fĝ/H8qFpz \zFbm!oU([%zi|?N 㻠\] ` &gCoHkJ7R&*f6 LjaV?O{`!5¡Fq_Fqg3JDX-\AZVM֠"d1շҋu/jI+|?72$T\lAtZ@O1iࣁFvB75H+=hj!VS}1Bb(m W8ky'/YQ3ܨo0jjȽlb)"+^&zB]],RPOМxx3 -Ҳ?4$7é\(:Na@ꁬ0Y[BS#Ug`(W՛QD!ʔmT>[rW:O)\ O@S<!)nR ̒<~?$aCЊydp6wv@jᰔ 7a\S햷|"`%5`W- .sN֠(qYD2ɀxrLCeX;meG]ُMi8ŻupH"˼Y!牪*UMwa2VDZB, .egp^ ߁%:~Y]wp4D5"YRQ!Gݪs\j<b5Bc.j-,KJVZ7dPзdsYe-LᾧTu/Y,Ⳳ]'x!pWSL |ը z#Y"ν9*si/kP]7 k#qP{:ϭC/Mݴ 6e*T̷L|3T8J} c+E5/lz6eh`7?M`J (2 RwP$0'>\ \heqfYw@Q>ڊǎ;؂TVe,%P3D X} åؘL@O^ =ٞ/A4yngU}tZQtL,v|heSkUõM]?sf'9ʖmo|g{A|2#FNs 3p53VzwCaRer{NGi$LOS?Yb7i)`uRB4鶾Y277U X3ו`uriVʧ){^'P[7˹2 |e&{o6DkلAI;0f[]os "x/"=qM _hpݴ *O@E^{G@ 5Uu+$- :߿I}hz\)!w =zq+AqԭB~] AY;AZץ;L;̢I#Kb%y^ZN (T#f2C.~>#iBfcπ 1/+oܫH6A*q:,D8WßhI; c _P,>(ĉvu0lVN(O51Jܔ{D46Ԭ@xeM^=-6K5/P]ڭ$8U?Xebi~ϧ$7.sC\|O%^UԯS(^ wr( NԒ}I,[yߖ~]ڎ슭{(o@~(#r7)t_ɡ<Bvڙ"LF\Qb,h^Y3- 75 =eTlvhv'V/@?c >pӼ9?L ,I&Ҹ.~z#WTnY#IX*v \>? d\AYp[/mZe FwzTIb6ѭ " }>TUcG}̰R3+ 8%gM(43BD|}$]MF+2@N7;c_Tn>#27\}V:s,5_DTzqUX-^dG]3otHSu9p ɫ餫L4@`C$qm\p:?$q$ 8UA'vޱ^eJE+i52l0N):8[7.sڮhjϥuinDH\_/A( Ɲbckidy*NKC'!3_󄗻L˿G2JT[VvZbZ䑶Quxe}4 ))R;HrQ7)C!m鎆PX咓j'.6l;~щwLvLR۪ {_"]n5Q0"!/Y@\|Mc!6*Sˇ+D(tl2z᭗%N>ad"ɣ3]X3s,Il) 65J41SsT> E'Pəvbü<_ WMPIU7Z'3͵Hxcqi{\t-3T;`kaSU0(g_MÈ)_6W-&ai^+p8B-Elk-b="l,PrFc.nqM_T:I;4̀ r{)v} ;OZ 0dLNA19J˷K%c}JEiG %;(e C%rd+H<[Tu;G{<Y˔E$|xX6*vdziF[v qEya¦+ԫʷu*r3҃( VMd-vX'ȢbF(M%"b'X&廏!Gl.RlKD^mRb:lB@XZĹ.(+3pS Lj`ؚH]F]䨍]]u6yx츿ȺIt;,2削d}eӄ0'iM' PNy"e8WS!@SRcXV@ - .Zj~i; }h|_\+&0剈P7+%m5!FFGrWֲnsCt^Zpߧ 4>b8pRX "`BŖuC! ˊ>v!>#a+gyɝ?7.GXAWXAݬ\`Uh[/nL5_oƎx^$igp_^j]_kyk`UǴj;<eBoʪ :: \֢8Hl51;ҋ8#Ԁ8j~ 5rsc}pq$Ec&/@ j0G7%ĭסbF<6M0WtË( cNetsS-4 4ȋVPZ6r2B=}BLӡF7uT* 1Q ɍ ְx^+z t?vSmM+ov!Cb\vĀ߻櫰zpY g#8߯fנػ%T_][PڴR')lm@`ẖ!ТpݔwN(99h>gBr7fD&3m&AL5vgzt]D;\LwD7ͥٙI__~=O ҙ7Zƕ~O%:[ɛάM}) tczGS?}Z ~IXhr N4WmWES"0Y>FٮnbdL /dfR,x(Y$uG+qa_W2\]݌jTosm}<Έg4>x.ŷ g_;s9}+6ڕ(l,(in?w)TH8L#n &Ge>CQFR&kG `cjxëD[ḞPVi] 5;"6zN&viǪ#͂tzɼ˖Ȯaw!"wDrP^&tMΔ|B%Kcs~7 =(G=Z-Q_D9&zV=HF7S !em&6jskkuk[j8|P P(? jSLc[ G\97A6le#jH*D:#`%eFim~ԠPۄ~>~}a}MOL>̮xiEdFOL HUVֈB#fbhۥHrV"e&#h܁>Az#Jfȕ3)jT%DL=qyz3EP`#BM_EgqUƏQ1xh?ۮW-6 7yMx<$*-r`RW<0&wee!zgn} F;IkBZ2"9ڛ0q!uE\FwGf:.<10UO)/"p5 {Cp#2~ J^Htg^Q f7*oC 7 y *3YȞ ҢE )I[UH{xqd)z4)lnDB.6%')Z>l_$fV}fX1&BGˁA|vyJ!."=_!gŲ#t^^ʍ\JIC (Q1ؙ£>Gh ڌ9f)rL̥Z0vK8]+LXt\<m cEqg[W&)Ub J-U^jҝ7xkvvSV?]6hWN@=o@iJ9Y#y-)FA!DdlР*"G `F<`L|FZ J]!*Xk}%@=^-ؤA#9 :Qم}9]ʁHFqYgN1&AR+nk+J0u-`zg؝ׁ8k n@%z4C5Ýp~*SNXm_gۿ~@&UU` jap`rV_|wKZMfLjzo)u0o~瑾&%=s_(ǚE̵nA;:)PWI>i0Qg0XBڋ3hĮ?S R'>7ZKT sY@Uhz Pr&=Gd$L #~Gl th6b7BPĤ42CmvɹjejKXo H˦diד tFA+mJ>hf!oK>בEk_3QXٞ/:u[iԫ_=>5MZjXW$4;da[zMu\K`}ޞx`VUN~,j5{t&Xg. NP#ZWky=كiΑA+_7o%gcYKA|75O Y!)׃. x;fjb. ͈0h09{>+TB\7ԦHZٰ~&tfhD(.SkDt`3T3%4/ůjGHZꍠ%nSQM+H snrnMˑ"ǣ b찧 bsсk>EUĩfS[Ra Щb`moS,%y[B$Ie u]=){)3Pt8AQюWv4&rCM]e>cWơR3_˚+}h]R>AM! f6Jbdφ+fmfq[41eK(3J<07 +5ʾ1M/h#S @e"$ Zw!$7^Y1z-$wb)X\K}:̅]9@75 x y&!Eׯodly=4K34;=*cePP4b z8_Z i社Jjm7W/-@B5 (@F99o* G:FtLY KiJ} \y1okb45Sff#7vYlKXM"'3=mbM+j,f㮳:lVz*LN@)::x#;z{Ɵa&fbg-kj؟ j2^T~z7I*"Юd)diz4%J[Һ9 쀻c5rMx0(\@G|o Ud7&N?9VMv'Q$EZ`y@~pi0e2'{PDQj q6Hi@zG`{hz/ܖC¬:pƮe-g+|Ш'¨gKk 4a:z\X& vĥR_/λ$hM0BY5$V9.`jm L٫e}S;oi>O"(3Ud=[ Y s`{mA 6Xi9ݨ i)1u!&ږsBTKF-=dpMu'lW-wU5<ptË2!YWK}gVz9\XV-x\jaAPIIjz+ Lj(m11:?`f>ڇl\Ҕ}q]u$SQ|ya4N, w'Lтm7«e@ ]@`>jWY v i$bK \_E R_1q)mюf4ʲ5+[;&Մ.)Q0V?rTց6m%ɢ//~F0FVhΒi%@)*`h&yυ؟"y޵ٻڞS#WbATn/`$ܬƾQ#ǿѴ;IݫE { ^dI;g=)#kTi_l3s2\r!=GGKkЄ M};r!ɏMKQWGEUA}uҾlUnkMaucmg)M7 R nHw/i:? |t\KwPQRI TTk1kLa?\.\A)ۥ5d`.D%Dp?Ŕnh1Sg^72BLk[aƂW^i.ίqz`}SHk 澭Zh t fcSpH Ls[tFc'no+qc1 MD@+P7H˔\uYkUL9$:6W> ce饉%~r3K@kySO9c(|qz%|@'3 "U)t8 !kYBcԉ^xQ7¢ #^-1{nt(YvOoP>Bݕ̜ čkx?~Dmߙ҆Oz#dcN[p&#ej5-nXPeDbAa9pZ)yt#eF)`+)FE2Gim@\qȘ65YA#fQ"زB \#L <(+M:厌\zĖ}sBeWl,.,Q} mr ',b#=[5jN5#cu[;C't HDZ#]֘l1mATL[kQH]h)GÁFhN5ቿHLŔ3q(ao D ;.g*n0qu[4cŝ+"Ss li4Iws.kH>ȻC?Kt9TgeDl~K^nK}WG-q^}I,dQ+Z9|*/G56 `A*9X ҕl9w hأFah,<0E7 _ۺ.w-?"~XYdK׵?i@^jQ*<'vMI6 {=}rs}S.uZ$y}c,|YhG(l0!@mk * KsmYmC9 XHٿI@T@VZ,$Wv,@>v3$T].cd[WegU V/g؜72ӤQ3Ue<ܢzQoW1a{(9/İNbޑaOޫ" 6o&khzy34nB&Q<~ol;vYTFˬ`X ^N^XCvAPamR/L?uR.+6@]!ݢFC3i X/6$І٨V%E* {:hNMgu6’*R~路lYi4g=Sn~܃ۤ r)mc$UL,qH|0yu)nf[BTZ}!?e2{U+w)iopM\n\}=US3WOc =wA%pLU| C vgf7-ʔ[qDDl&^)}mwMt kƻf*k@//^6 FJ3(n4G6P 09~kexMIgI||KEA \q7[w<5\'-XbmK1"ּUjJU$0vSO#!*EYɞF ^Ǚʊǔ GgyYltq2jQ( T'>h&n#֔%7U[d|Y#V( o[': 0;y浌\*3DF(׺cŴIHaf3mLg0bNO$໫|FՄl@tw ~IEk$^o;+xf^KSv8ҨtA=g>Z4 `82qyH@ Q\,*O}mö9}ֈsN "#2G\Rtb}siž~*Y"=[mYתJ`\]qEAN޹b.#ȼ4cdq:_+K\! 젩>+dKG<|nXj]OٴdJ naiR1uΦ9%t#ONswv?a<X} ,՚lԼ{fS'<fFzm'n` (4{MjCT158핖 㣓X]rzҸq!Yf+8f%Pk5A>߸d B4?}N/lGM}6&SA?C$> j SoFpG: rR)cc9E<!801IL5/UCVغ|0n G#3Nri𶿎;P! 1K9`N>I\V?f Ϯ-I!) Vs{E`=i~[KN&8^.6C$Tҵhxi2fg$]'Ykѽ=c ƻ] 3 T7Gfk[,o`~]jfb୺:1@ɨAVN\'Ƭ=mWwXIƺՄ\08(;gK̷O.mt R%nx{WtiY"taYTǽmӋ2MD٬ىk$\߭Q_1:_MZbqdc̞Tu46[L:pX2 eS"ުJ{19!h6zlbXvX 1infSx7١2Fd7[:V4UPmˢY`\Ώ_jZL3ߒFqN[L%$T2JH8W$e Nb"puHGZzΊRGz211.;Q e\o[}$^i">Β%:SR vDkM P:ZKbj/V/r<@t*'9$؜IpAMtWW&Yן f*OV`:"<69߳Qa֥iM_ifEKmHA0 |(d6N6#ˠzdHU7t2:yFWJ7 U!* G,id4A^X~EK`);`Ugz5HNbc fnaj^q[*$`ɗjL/Na}(o aKVIq9jz4aq$B07$_IMx9Ь -?hOgT&LB3mhWTg$ ^Ӧ >QDW$JZJD"ב?{ 'Q\H?įY]UʋBoLX6? fG'" ,<h#mZ=J偳r8:;h72_2;V\Ј h0FIgJ/y }Bȡ7?H19lM owCOJ.F!/@}wZs#Cߖ\ɼ%.e[ M ;}~O|֝"hR0 /*PANw~glxty"*V@"|ڰkQ0G Ar/: ʏ2tn B늗@?䠮*@R%0 :T0Z`FGEz}u9_ XAI{Rur=5O.; O$ԩ[H,&a= Ɛ~FÁ2W>I`HѲ/њNeٙSdo^QM B)^x~4@%wg5SnkX8SdAUY& UTd`7|jH@v)^}hR&tg,Zѧ1-Z'fO(4W98AY^* ]Q*<灼$tN!;:$ɬ7zlwl ] 3N4¥-9ɭY:urIa_ow#fPfESQ2۹GCi9ރ)b ;>t[a:sML({l {~GU̟YCZ#A~{ ۺO*1 E^@#’1qmv5~s=z|2D]%9(,+FyE@ (~ԑ#tGP9•+.Yޗ̟>S YZ