sssd-ad-1.16.1-150300.23.28.1 >  A bz%p9|moKe gPcJ6p(5M%F\pba-d+C $B F236d2f7ade49fa647abfbc352124aed9227a9ecc9b7f8ebbe531002efc8610d07887a8d0064e7aba2221c49bb09f4d4b3131f49f0A0bz%p9| M&%ⶱ@8AO a[J:KHBϹumf}Fݏ0 PP1S6X<: ^Ea"!n_l}W/6mz@OT^~gBcҮv w(lfÖe,M0mQ>7FRZY.p0_0)᜗ģ0dS^P.E6B,0n0l/ .Dd?%6K)*:M7b& zn>p>l?\d   L *3 IXtz & \  # @3L|3H3 3( P8 XC9dC:CFG HxIXY \<]^Dbc,defluv4wxLyQz XCsssd-ad1.16.1150300.23.28.1The ActiveDirectory backend plugin for sssdProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.bz%sheep24SUSE Linux Enterprise 15SUSE LLC GPL-3.0+https://www.suse.com/System/Daemonshttps://pagure.io/SSSD/sssdlinuxx86_64 !h/}AAAAAAAAAAAAAA큤AAAAAAAA큤bz%ebz%ebz%ebz%ebz%ebz%Qbz%fbz%Qbz%Qbz%Qbz%gbz%Qbz%gbz%Qbz%gbz%Qbz%gbz%Rbz%Qbz%Qbz%Qbz%Qbz%Qbz%hbz%\bz%\bz%\2b9e38798d494c1d536e3062e3b6f830e63639543610bf4bea573eb56a3939db8292d412c6ca98737aa182b55f0b8ba94444c1e57c3508120a9153f4f643f506aea8b1b9357cd594114a4eea8592848461d78b0cd091f2d8a0a489129730793a3704b25bd8c0094715b63d0755a425d621e433bd7f204d1c1781e2572d12976296fc7ae0196b1a00f100ce74b97b38d84938d1105c08cf71fb03605fbb980f57rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-1.16.1-150300.23.28.1.src.rpmlibsss_ad.so()(64bit)sssd-adsssd-ad(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    adclilibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdbus-1.so.3()(64bit)libdbus-1.so.3(LIBDBUS_1_3)(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libini_config.so.5(INI_CONFIG_1.1.0)(64bit)libldap_r-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr.so.2()(64bit)libndr.so.2(NDR_0.0.1)(64bit)libndr.so.2(NDR_0.0.6)(64bit)libndr.so.2(NDR_1.0.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libsasl2.so.3()(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsss_child.so()(64bit)libsss_debug.so()(64bit)libsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sssd-commonsssd-krb5-common3.0.4-14.6.0-14.0-15.2-11.16.1-150300.23.28.11.16.1-150300.23.28.14.14.3b/.@b@b~ba@a8aaj@`!@``x*`m`T@_ts@^}^f/^ P@^[^ @]}@]µ]@]@]@]@\@\\+@\mA@[t[*AZZ@ZH@Z%8Z!D@YYw2X~@X,XX@X7@X@X@XN@XGX`@WWW@W@V&@VqR@VO @V U@U5@UU@U}lT@TTq@T6T`TR(@scabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.deckowalczyk@suse.comckowalczyk@suse.comckowalczyk@suse.comckowalczyk@suse.comhguo@suse.comhguo@suse.comhguo@suse.commichael@stroeder.commichael@stroeder.comhguo@suse.commichael@stroeder.comjengelh@inai.demichael@stroeder.comkukuk@suse.deluizluca@gmail.commichael@stroeder.comdimstar@opensuse.orgjengelh@inai.demichael@stroeder.commichael@stroeder.comjengelh@inai.dehguo@suse.commichael@stroeder.commpluskal@suse.comjengelh@inai.dejengelh@inai.demichael@stroeder.comjengelh@inai.dejengelh@inai.dehguo@suse.comcrrodriguez@opensuse.orgmichael@stroeder.comhguo@suse.comhoward@localhostjengelh@inai.demeissner@suse.comledest@gmail.comjengelh@inai.de- Fix a crash caused by a read-after-free condition; (bsc#1196564); Add patch 0053-SBUS-defer-deallocation-of-sbus_watch_ctx.patch- Add 'ldap_ignore_unreadable_references' parameter to skip unreadable objects referenced by 'member' attributte; (bsc#1190775); (gh#SSSD/sssd#4893); Add patch 0052-ldap-ignore-unreadable-references.patch- Fix 32-bit libraries package. Libraries were moved from sssd to sssd-common to fix bsc#1182058 and baselibs.conf was not updated accordingly; (bsc#1196166);- Remove caches only when performing a package downgrade. The sssd daemon takes care of upgrading the database format when necessary (bsc#1195552)- Fix tests test_copy_ccache & test_copy_keytab for later versions of krb5; (jsc#SLE-23329); - Add 0048-tests-fix-mocking-krb5_creds-in-test_copy_ccache.patch - Add 0049-tests-fix-enctypes-in-test_copy_keytab.patch - Add 0050-BUILD-Accept-krb5-1.17-for-building-the-PAC-plugin.patch - Add 0051-BUILD-Accept-krb5-1.19-for-building-the-PAC-plugin.patch - Update spec file to requires newer ldb version - Update the private ldb modules installation following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Fix a crash with newer libcares2 versions when the library fails to parse a dns name; (bsc#1190021); Add 0047-RESOLV-handle-fail-of-ares_parse_-_reply-properly.patch- Fix shell command injection in sssctl via the logs-fetch and cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add 0046-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch- Add LDAPS support for the AD provider; (bsc#1183735); Add 0045-ldaps-for-ad-provider.patch - Improve logs to record the reason why internal watchdog terminates a process; (bsc#1187120); Adds: * 0041-DEBUG-changed-timestamp-output-format.patch * 0042-DEBUG-introduce-new-SSSDBG_TRACE_LDB-level.patch * 0043-DEBUG-changed-debug_prg_name-format.patch * 0044-WATCHDOG-log-process-termination-to-the-journal.patch - Fix watchdog not terminating tasks; (bsc#1187120); Add 0040-util-watchdog-fixed-watchdog-implementation.patch- Fix sss_cache spurious error messages when invoked from shadow-utils; (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch- Use /run instead of /var/run for daemon PID files; (bsc#1185185);- Create timestamp attribute in cache objects if missing; (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);- Fix a dependency loop by moving internal libraries to sssd-common package; (bsc#1182058);- Fix build against samba >= 4.12 + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch + 0036-ad_gpo_ndr.c-more-ndr-updates.patch - Fix build with curl >= 7.62.0 + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch- Update samba secrets after changing machine password; (jsc#SLE-11503); Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch- Install infopipe dbus service (bsc#1106598)- SSSD GPO host entries are ignored if computer cn does not match it's samaccountname, add 0001-Resolve-computer-lookup-failure-when-sam-cn.patch; (jsc#SLE-9298); (bsc#1160688)- SSSD should accept host entries from GPO's security filter, add sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)- Fix building with newer samba versions (bsc#1137876) - Added patches: * 0027-utils-make-N_ELEMENTS-public.patch * 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch- Update winbind idmap plugin to support interface version 6 (jsc#SLE-9819) - Added patches: * 0019-winbind-idmap-plugin-support-inferface-version-6.patch * 0020-winbind-idmap-plugin-fix-detection.patch * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch- Delete linked local user overrides when deleting a user (bsc#1133168) - Added patches: * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch- Fix domain offline after first boot when resolv.conf is a symlink (bsc#1136139) - Added patches: * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch- Fix login not possible when email address is duplicated in ldap attributes (bsc#1149597) - Added patches: * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch * 0014-util-Remove-the-unused-function-is_email_from_domain.patch- Fix memory leak in nss netgroup enumeration (bsc#1139247); - Added patches: * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch- Allow defaults sudoRole without sudoUser attribute (bsc#1135247) - Added an option to skip GPOs that have groupPolicyContainers, unreadable by SSSD (bsc#1124194) (CVE-2018-16838) - Added patches: * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch- Create directory to download and cache GPOs (bsc#1132879) - Add a netgroup counter to struct nss_enum_index (bsc#1132657) - Added patches: * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch- Rotate child debug file descriptors on SIGHUP (bsc#1080156) - Added patches: * 0006-Rotate-child-log-files.patch- Fix fallback_homedir returning '/' for empty home directories (CVE-2019-3811) (bsc#1121759) - Install logrotate configuration (bsc#1004220) - Strip whitespaces in netgroup triples (bsc#1087320) - Align systemd service file with upstream * Run interactive and change service type to notify (bsc#1120852) * Replace deprecated '-f' and use '--logger' - Fix sssd not starting in foreground mode (bsc#1125277) - Added patches: * 0003-MONITOR-Do-not-use-two-configuration-databases.patch * 0004-Strip-whitespaces-in-netgroup-triple.patch * 0005-nss-sssd-returns-for-emtpy-home-directories.patch- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)- Introduce patches: * Create sockets with right permissions: 0001-SUDO-Create-the-socket-with-stricter-permissions.patch (bsc#1098377, CVE-2018-10852) * Fix for sssd upstream integration tests 0002-intg-Do-not-hardcode-nsslibdir.patch (bsc#1098163)- Update to new minor upstream release 1.16.1 (fate#323340): New Features: * A new option auto_private_groups was added. If this option is enabled, SSSD will automatically create user private groups based on user’s UID number. The GID number is ignored in this case. * The SSSD smart card integration now supports a special type of PAM conversation implemented by GDM which allows the user to select the appropriate smrt card certificate in GDM. * A new API for accessing user and group information was added. This API is similar to the tradiional Name Service Switch API, but allows the consumer to talk to SSSD directly as well as to fine-tune the query with e.g. how cache should be evaluated. * The sssctl command line tool gained a new command access-report, which can generate who can access the client machine. Currently only generating the report on an IPA client based on HBAC rules is supported. * The hostid provider was moved from the IPA specific code to the generic LDAP code. This allows SSH host keys to be access by the generic LDAP provider as well. See the ldap_host_* options in the sssd-ldap manual page for more details. * Setting the memcache_timeout option to 0 disabled creating the memory cache files altogether. This can be useful in cases there is a bug in the memory cache that needs working around.- Updated sssd.spec: The IPA provider depends on AD provider's PAC executable, hence introducing the package dependency. (bsc#1021441, bsc#1062124)- Remove package descriptions for the python 2 packages that are no longer distributed: * python-ipa_hbac * python-sss-murmur * python-sss_nss_idmap * python-sssd-config - Correct python version dependency of tools package. (bsc#1082108)- Correct dependency of sss_obfuscate command line program.- In an ongoing effort to reduce dependency on python version 2, the following python libraries are no longer built. Nevertheless their python3 counterparts remain in place: * python-ipa_hbac * python-sss-murmur * python-sss_nss_idmap * python-sssd-config- Update to new upstream release 1.16.0 Security fixes * This release fixes CVE-2017-12173: Unsanitized input when searching in local cache database. SSSD stores its cached data in an LDAP like local database file using libldb. To lookup cached data LDAP search filters like (objectClass=user)(name=user_name) are used. However, in sysdb_search_user_by_upn_res(), the input was not sanitized and allowed to manipulate the search filter for cache lookups. This would allow a logged in user to discover the password hash of a different user. New Features * SSSD now supports session recording configuration through tlog. This feature enables recording of everything specific users see or type during their sessions on a text terminal. For more information, see the sssd-session-recording(5) manual page. * SSSD can act as a client agent to deliver Fleet Commander policies defined on an IPA server. Fleet Commander provides a configuration management interface that is controlled centrally and that covers desktop, applications and network configuration. * Several new systemtap probes were added into various locations in SSSD code to assist in troubleshooting and analyzing performance related issues. Please see the sssd-systemtap(5) manual page for more information. * A new LDAP provide access control mechanism that allows to restrict access based on PAM's rhost data field was added. For more details, please consult the sssd-ldap(5) manual page, in particular the options ldap_user_authorized_rhost and the rhost value of ldap_access_filter.- Update to new upstream release 1.15.3 (KCM disabled) New Features * In a setup where an IPA domain trusts an Active Directory domain, it is now possible to define the domain resolution order (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names). * Design page - Shortnames in trusted domains * SSSD ships with a new service called KCM. This service acts as a storage for Kerberos tickets when "libkrb5" is configured to use "KCM:" in "krb5.conf". * Design page - KCM server for SSSD * NOTE: There are several known issues in the "KCM" responder that will be handled in the next release. * Support for user and group resolution through the D-Bus interface and authentication and/or authorization through the PAM interface even for setups without UIDs or Windows SIDs present on the LDAP directory side. This enhancement allows SSSD to be used together with apache modules to provide identities for applications * Design page - Support for non-POSIX users and groups * SSSD ships a new public library called "libsss_certmap" that allows a flexible and configurable way of mapping a certificate to a user identity. * Design page - Matching and Mapping Certificates * The Kerberos locator plugin can be disabled using an environment variable "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the "sssd_krb5_locator_plugin" manual page for mode details. * The "sssctl" command line tool supports a new command "user-checks" that enables the administrator to check whether a certain user should be allowed or denied access to a certain PAM service. * The "secrets" responder now forwards requests to a proxy Custodia back end over a secure channel.- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to krb5-common sub-package. Address bsc#1024836.- Update to new upstream release 1.15.2 * It is now possible to configure certain parameters of a trusted domain in a configuration file sub-section. * Several issues related to socket-activating the NSS service, especially if SSSD was configured to use a non-privileged userm were fixed. The NSS service now does not change the ownership of its log files to avoid triggering a name-service lookup while the NSS service is not running yet. Additionally, the NSS service is started before any other service to make sure username resolution works and the other service can resolve the SSSD user correctly. * A new option "cache_first" allows the administrator to change the way multiple domains are searched. When this option is enabled, SSSD will first try to "pin" the requested name or ID to a domain by searching the entries that are already cached and contact the domain that contains the cached entry first. Previously, SSSD would check the cache and the remote server for each domain. This option brings performance benefit for setups that use multiple domains (even auto-discovered trusted domains), especially for ID lookups that would previously iterate over all domains. Please note that this option must be enabled with care as the administrator must ensure that the ID space of domains does not overlap. * The SSSD D-Bus interface gained two new methods: "FindByNameAndCertificate" and "ListByCertificate". These methods will be used primarily by IPA and `mod_lookup_identity to correctly match multple users who use the same certificate for Smart Card login. * A bug where SSSD did not properly sanitize a username with a newline character in it was fixed.- Switch *all* URLs after fedorahosted.org retirement- Updated project URL - Update to new upstream release 1.15.1 * Several issues related to starting the SSSD services on-demand via socket activation were fixed. In particular, it is no longer possible to have a service started both by sssd and socket-activated. Another bug which might have caused the responder to start before SSSD started and cause issues especially on system startup was fixed. * A new 'files' provider was added. This provider mirrors the contents of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose of this new provider is to make it possible to use SSSD's interfaces, such as the D-Bus interface for local users and enable leveraging the in-memory fast cache for local users as well, as a replacement for `nscd`. In future, we intend to extend the D-Bus interface to also provide setting and retrieving additional custom attributes for the files users. * SSSD now autogenerates a fallback configuration that enables the files domain if no SSSD configuration exists. This allows distributions to enable the 'sssd' service when the SSSD package is installed. Please note that SSSD must be build with the configuration option '--enable-files-domain' for this functionality to be enabled. * Support for public-key authentication with Kerberos (PKINIT) was added. This support will enable users who authenticate with a Smart Card to obtain a Kerberos ticket during authentication.- Remove obsolete insserv call- Added /etc/sssd/conf.d/ for configuration snippets- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update - Update to new upstream release 1.15.0 * SSSD now allows the responders to be activated by the systemd service manager and exit when idle. This means the services line in sssd.conf is optional and the responders can be started on-demand, simplifying the sssd configuration. Please note that this change is backwards-compatible and the responders listed explicitly in sssd.conf's services line are managed by sssd in the same manner as in previous releases. Please refer to man sssd.conf(5) for more information * The sudo provider is no longer disabled for configurations that do not explicitly include the sudo responder in the services list. In order to disable the sudo-related back end code that executes the periodic LDAP queries, set the sudo_provider to none explicitly * The watchdog signal handler no longer uses signal-unsafe functions. This bug was causing a deadlock in case the watchdog was about to kill a stuck process * A bug that prevented TLS to be set up correctly on systems where libldap links with GnuTLS was fixed * The functionality to alter SSSD configuration through the D-Bus interface provided by the IFP responder was removed. This functionality was not used to the best of our knowledge, had no tests and prevented the InfoPipe responder from running as a non-privileged user. * A bug that prevented statically-linked applications from using libnss_sss was fixed by removing dependency on -lpthreads from the libnss_sss library (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for an example on why linking with -lpthread from an NSS modules is problematic) * Previously, SSSD did not ignore GPOs that were missing the gPCFunctionalityVersion attribute and failed the whole GPO processing. Starting with this version, the GPOs without the gPCFunctionalityVersion are skipped.- BuildRequire pkgconfig(libsystemd) instead of pkgconfig(libsystemd-login): the latter has been deprecated since systemd 209 and finally removed with systemd 230.- Add 0001-krb5-1.15-build-fix.patch to unlock building against future KRB versions.- Update to new upstream release 1.14.2 * Several more regressions caused by cache refactoring to use qualified names internally were fixed, including a regression that prevented the krb5_map_user option from working correctly. * A regression when logging in with a smart card using the GDM login manager was fixed * SSSD now removes the internal timestamp on startup cache when the persistent cache is removed. This enables admins to follow their existing workflow of just removing the persistent cache and start from a fresh slate * Several fixes to the sssd-secrets responder are present in this release * A bug in the autofs responder that prevented automounter maps from being returned when sssd_be was offline was fixed * A similar bug in the NSS responder that prevented netgroups from being returned when sssd_be was offline was fixed * Disabling the netlink integration can now be done with a new option disable_netlink. Previously, the netlink integration could be disabled with a sssd command line switch, which is being deprecated in this release. * The internal watchdog no longer kills sssd processes in case time shifts during sssd runtime * The fail over code is able to cope with concurrent SRV resolution requests better in this release * The proxy provider gained a new option proxy_max_children that allows the administrator to control the maximum number of child helper processes that authenticate users with auth_provider=proxy * The InfoPipe D-Bus responder exports the UUIDs of user and group objects through a uniqueID property- Update to new upstream release 1.14.1 * The IPA provider now supports logins with enterprise principals (also known as additional UPN suffixes). This functionality also enabled Active Directory users from trusted AD domains who use an additional UPN suffix to log in. Please note that this feature requires a recent IPA server. * When a user name is overriden in an IPA domain, resolving a group these users are a member of now returns the overriden user names * Users can be looked up by and log in with their e-mail address as an identifier. In order to do so, an attribute that represents the user's e-mail address is fetched by default. This attribute can by customized by setting the ldap_user_email configuration option. * A new ad_enabled_domains option was added. This option lets the administrator select domains that SSSD should attempt to reach in the AD forest SSSD is joined to. This option is useful for deployments where not all domains are reachable on the network level, yet the administrator needs to access some trusted domains and therefore disabling the subdomains provider completely is not desirable. * The sssctl tool has two new commands active-server and servers that allow the administrator to observe the server that SSSD is bound to and the servers that SSSD autodiscovered * SSSD used to fail to start when an attribute name is present in both the default SSSD attribute map and the custom ldap_user_extra_attrs map * GPO policy procesing no longer fails if the gPCMachineExtensionNames attribute only contains whitespaces * Several commits fix regressions related to switching all user and group names to fully qualified format, such as running initgroups for a user who is only a member of a primary group * Several patches fix regressions caused by splitting the database into two ldb files, such as when user attributes change without increasing the modifyTimestamp attribute value * systemd unit files are now shipped for the sssd-secrets responder, allowing the responder to be socket-activated. To do so, administrators should enable the sssd-secrets.socket and sssd-secrets.service systemd units. * The sssd binary has a new switch --disable-netlink that lets sssd skip messages from the kernel's netlink interface. * A crash when entries with special characters such as '(' were requested was fixed * The ldap_rfc_2307_fallback_to_local_users option was broken in the previous version. This release fixes the functionality.- Update to new upstream release 1.14.0 * The AD provider is now able to look up users from Active Directory domains by certificate. This change enables logins for Active Directory users with the help of a smart card. * The sss_override tool is now able to add certificates as local overrides in the SSSD cache. Please note that the certificate overrides are stored in the local cache, so removing the cache also removes all the certificates! * Invalid certificates are skipped instead of aborting the whole operation when logging in with a smart card using SSH. * This version allows several OCSP-related options such as the OCSP responder to be configured during smart card authentication. * SSSD is now able to determine the name of the user who logs in from the inserted smart card without having to type in the username. Note that this functionality must be enabled with the allow_missing_name pam_sss option. * The sss_cache command line tool is now able to invalidate SUDO rules with its new -r/-R switches. Note that the sudo rules ar not refreshed with the sss_cache tool immediately. * A new command line tool called sssctl was added. This tool allows to observe the status of SSSD. * A new option local_negative_timeout was added. This option allows the admin to specify the time during which lookups for users that are not handled by SSSD but are present on the system (typically in /etc/passwd and /etc/group) and prevents repeated lookups of local users on the remote server during initgroups operation. * An ID-mapping plugin for the winbind deamon was added. With this plugin, it's possible for winbind to use the same ID-mapping scheme as SSSD uses, producing consistent ID values. - Remove 0001-build-detect-endianness-at-configure-time.patch (included upstream)- Enable PAC responder. PAC is an extension element returned by domain controller, to speed up resolution of authorisation data such as group memberships.- Update to new upstream release 1.13.4 * The IPA sudo provider was reimplemented. The new version reads the data from IPA's LDAP tree (as opposed to the compat tree populated by the slapi-nis plugin that was used previously). The benefit is that deployments which don't require the compat tree for other purposes, such as support for non-SSSD clients can disable those autogenerated LDAP trees to conserve resources that slapi-nis otherwise requires. There should be no visible changes to the end user. * SSSD now has the ability to renew the machine credentials (keytabs) when the ad provider is used. Please note that a recent version of the adcli (0.8 or newer) package is required for this feature to work. * The automatic ID mapping feature was improved so that the administrator is no longer required to manually set the range size in case a RID in the AD domain is larger than the default range size * A potential infinite loop in the NFS ID mapping plugin that was resulting in an excessive memory usage was fixed * Clients that are pinned to a particular AD site using the ad_site option no longer communicate with DCs outside that site during service discovery. * The IPA identity provider is now able to resolve external (typically coming from a trusted AD forest) group members during get-group-information requests. Please note that resolving external group memberships for AD users during the initgroup requests used to work even prior to this update. This feature is mostly useful for cases where an IPA client is using the compat tree to resolve AD trust users. * The IPA ID views feature now works correctly even for deployments without a trust relationship. Previously, the subdomains IPA provider failed to read the views data if no master domain record was created on the IPA server during trust establishment. * A race condition in the client libraries between the SSSD closing the socket as idle and the client application using the socket was fixed. This bug manifested with a Broken Pipe error message on the client. * SSSD is now able to resolve users with the same usernames in different OUs of an AD domain * The smartcard authentication now works properly with gnome-screensaver- Enable internal testsuite- Update to new maintenance release 1.13.3 * A bug that prevented user lookups and logins after migration from winsync to IPA-AD trusts was fixed. * A bug that prevented the ignore_group_members option from working correctly in AD provider setups that use a dedicated primary group (as opposed to a user-private group) was fixed. * Offline detection and offline login timeouts were improved for AD users logging in from a domain trusted by an IPA server. * The AD provider supports setting up autofs_provider=ad .- Update to new upstream release 1.13.2 * Initial support for Smart Card authentication was added. * The PAM prompting was enhanced so that when Two-Factor Authentication is used, both factors (password and token) can be entered separately on separate prompts. * This release supports authenticating againt a KDC proxy.- Update to new upstream release 1.13.1 * Initial support for Smart Card authentication was added. The feature can be activated with the new pam_cert_auth option. * The PAM prompting was enhanced so that when Two-Factor Authentication is used, both factors (password and token) can be entered separately on separate prompts. At the same time, only the long-term password is cached, so offline access would still work using the long term password. * A new command line tool sss_override is present in this release. The tools allows to override attributes on the SSSD side. It's helpful in environment where e.g. some hosts need to have a different view of POSIX attributes than others. Please note that the overrides are stored in the cache as well, so removing the cache will also remove the overrides. * Several enhancements to the dynamic DNS update code. Notably, clients that update multiple interfaces work better with this release. * This release supports authenticating againt a KDC proxy * The fail over code was enhanced so that if a trusted domain is not reachable, only that domain will be marked as inactive but the backed would stay in online mode.- Update to new upstream release 1.13 * Support for separate prompts when using two-factor authentication * Added support for one-way trusts between an IPA and Active Directory environment. (Depends on IPA 4.2) * The fast memory cache now also supports the initgroups operation. * The PAM responder is now capable of caching authentication for configurable period, which might reduce server load in cases where accounts authenticate very frequently. Refer to the "cached_auth_timeout" option in sssd.conf(5). * The Active Directory provider has changed the default value of the "ad_gpo_access_control" option from permissive to enforcing. As a consequence, the GPO access control now affects all clients that set access_provider to ad. In order to restore the previous behaviour, set ad_gpo_access_control to permissive or use a different access_provider type. * Group Policy objects defined in a different AD domain that the computer object is defined in are now supported. * Credential caching and Offline authentication are also available when using two-factor authentication * The Python bindings are now built for both Python2 and Python3. * The LDAP bind timeout, StartTLS timeout and password change timeout are now configurable using the ldap_opt_timeout option.- Kill unused libsss_sudo-devel solvable.- Obsolete/provide libsss_sudo in sssd main package. Sudo capability is an integral feature in SSSD and the library is not supposed to be used separately.- sssd.service: add Before= and Wants=nss-user-lookup.target correct fix for bsc#926961- Update to new upstream release 1.12.5 * The background refresh tasks now supports refreshing users and groups as well. See the "refresh_expired_interval" parameter in the sssd.conf manpage. * A new option subdomain_inherit was added. * When an expired account attempts to log in, a configurable error message can be displayed with sufficient pam_verbosity setting. See the "pam_account_expired_message" option. * OpenLDAP ppolicy can be honored even when an alternate login method (such as SSH key) is used. See the "ldap_access_order" option. * A new option :krb5_map_user" was added, allowing the admin to map UNIX usernames to Kerberos principals. * BUG FIXES: * Fixed AD-specific bugs that resulted in the incorrect set of groups being displayed after the initgroups operation. * Fixes related to the IPA ID views feature. Setups using this should update sssd on both IPA servers and clients. * The AD provider now handles binary GUIDs correctly. * A bug that prevented the `ignore_group_members` parameter to be used with the AD provider was fixed. * The failover code now reads and honors TTL value for SRV queries as well. * Race condition between setting the timeout in the back ends and reading it in the front end during initgroup operation was fixed. This bug affected applications that perform the initgroups(3) operation in multiple processes simultaneously. * Setups that only want to use the domain SSSD is connected to, but not the autodiscovered trusted domains by setting `subdomains_provider=none` now work correctly as long as the domain SID is set manually in the config file. * In case only "allow" rules are used, the simple access provider is now able to skip unresolvable groups. * The GPO access control code now handles situations where user and computer objects were in different domains.- Update to new upstream release 1.12.4 (Changelog highlights following) * This is mostly a bug fixing release with only minor enhancements visible to the end user. * Contains many fixes and enhancements related to the ID views functionality of FreeIPA servers. * Several fixes related to retrieving AD group membership in an IPA-AD trust scenario. * Fixes a bug where the GPO access control previously didn't work at all if debugging was enabled in smb.conf. * SSSD can now be pinned to a particular AD site instead of autodiscovering the site. * A regression that caused setting the SELinux context for IPA users to fail, was fixed. * Fixed a potential crash caused by a double-free error when an SSSD service was killed by the monitor process.- A minor rpmspec cleanup to get rid of five rpmlint warnings * Remove mentioning of system-wide dbus configuration file from comments. * Remove traditional init script. * Remove compatibility for producing packages on older OpenSUSE releases.- Update to new upstream release 1.12.3 * SSSD now allows the IPA client to move from one ID view to another after SSSD restart. * It is possible to apply ID views to IPA domains as well. Previous SSSD versions only allowed views to be applied to AD trusted domains. * Overriding SSH public keys is supported in this release. * Move semanage related functions to a separate library.- build with PIE- fix bashism in postun script- Update to new upstream release 1.12.2 (bugfix release, bnc#900159) * Fixed a regression where the IPA provider did not fetch User Private Groups correctly * An important bug in the GPO access control which resulted in a wrong principal being used, was fixed. * Several new options are available for deployments that need to restrict a certain PAM service from connecting to a certain SSSD domain. For more details, see the description of pam_trusted_users and pam_public_domains options in the sssd.conf(5) man page and the domains option in the pam_sss(8) man page. * When SSSD is acting as an IPA client in setup with trusted AD domains, it is able to return group members or full group memberships for users from trusted AD domains. * Support for the "views" feature of IPA. - Remove 0001-build-call-AC_BUILD_AUX_DIR-before-anything-else.patch (merged upstream)sheep24 1652172202 1.16.1-150300.23.28.11.16.1-150300.23.28.1    sssdgpo_childsssd_pacsssdlibsss_ad.socaman5csman5deman5esman5frman5jaman5sssd-ad.5.gznlman5ptman5ukman5sssdsssd.api.dsssd-ad.conf/usr/lib//usr/lib/sssd//usr/lib64//usr/lib64/sssd//usr/share/man//usr/share/man/ca//usr/share/man/cs//usr/share/man/de//usr/share/man/es//usr/share/man/fr//usr/share/man/ja//usr/share/man/man5//usr/share/man/nl//usr/share/man/pt//usr/share/man/uk//usr/share//usr/share/sssd//usr/share/sssd/sssd.api.d/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:24165/SUSE_SLE-15-SP3_Update/16eceb5d93dcb514f50c457d1e809d48-sssd.SUSE_SLE-15-SP3_Updatecpioxz5x86_64-suse-linuxdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=3bd59d99203c4df32ae3646f5ac3a5a0d1258a16, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=3d05318d628d71a07e59e5cf2aedeaec145a195c, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=19d17216948ffdd79c3b0ed8a9462584cc4c3046, strippedtroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)ASCII text/"RR R R(RRRRRRRRR'RR R RRR*R&RRRR RR,R!R R(RRRRRRR R$RRRR)R%RR+R'R RPRRR,R R(RRRRRRRRRR R!RRRRR#R"R$RR RRR+R'R RR RC=qj]xCutf-852a30ac90de4836d9e02c55701d11b43a3dd04ceda5b4e3a9411ec7326341270? 7zXZ !t/*] crt:bLL $hH֔h M?SƉIJ2Uba]:Gkj%Gs"g^t`+Q_w4Xh;"KK?Tm m!DKwY=Z~e֮<-/$ת|1s#J!\&+ Z1{f|_g l] "_hZ. Yh=>3*C!8j(>HUKx<k,h &XYV7)bgԧΤyl"=`KXX$lK/jQ t咇ļd!L$_`H7)͗Ap=:rfW3ok&@ आ1Kf' §>x"x,On%XȈh܄&р{qd$G%a=3$VP`!d%2,hfgq ?vJ%7tތ^G%򟝰QHwC3AqAF_ k}n4XgKP@O=!-!(k"O2$H\w!j͠_D. ("mDsJKD|~"~N O,RlR[7c淦>9 (EcHFjłQJ8{q&(q췑X?Dc"Bi%n)S&@7x$R5%}JK{htwt7W' ~K$j*<-w n1(!Sn+g$;šw]NT: rTJ| *_] Iz)7L"aMnV*I@\485_H!NtȗwEv,nS &MݭFL,L`c:+k ums:OyATTn Lx^5ti7M(h:їd(Tj{Rw? [izy{=JRq!Ds4B@)K6ūc=(Υs|7iQt]P1j`"c07)_'0Mk2JRn13e{&5)ʕLH.AHBrS۲.H1dC628{,ZҨ% (1.(#?23$6[$η j:_<6ʄ4;ʥjLh\TMfd%U[zUmpxXt7_sЌeȣ:䧎vm G(<+R#\8 rKQ "zX:].c+ϥu&uh  &\LD ZJ w{j!öYW}>z'zn?k Tw?>6Ҽ6%=XRe^7?-ܠ,Poo"扞v S';p-hx" "|QG]lD8`wU blO#T䟃!\۾3 O.-tL]"\j* ʍb~f4~,SwND)@I5ƾF`, (5Dĥ0}WvsSf?D&k.#o%Wk7ݩ _HT&g3f 2ՁWYϖIt\NPO?"8h@ס[kP,>iMA3 bU!JnLҝDA>^ {{8v߶#4'E=}>g^ ߎ?j/|Ejy?y Zɽ#t8)_. 9eri8n%6S=~B1;Tl$%nD}ǁ_(RuyO> x(?.&"'. 3l=ҡu*9Zph^p 죶8g'^N)h9f6ah8VV,KehUPU޽f!xyr%A^cJҋ'(YF]8RM)I^HR6otDSB[4pCj*3R&۸L*fM $y"uI{+*PU[}&,c]ZY8 14 }"2.ɸz|6牲z~SC*n/je0Df O⾜LeXrɗ]&Kh2>0)8{ Ҝy +c]$eڇ ׏EcUMO[ӚqsN)7ȥ&awn"~BtO?c]3O2@G3 èn+j%d7<̼wQT#r-AY90)omB6|XѪ{$G8f6&k!ZWøJ~/{ZͽhzݿiՔˁ}7-0ac|r#~9BRg2Aی]D Ƙ8uGR'rx\ȉƔ~4;00Ӿcca@(aWSDpշ'քxs1 0u9⿰&)'Pgp"R0V0E@?աOi>gFχoJN RFX қJyQ!=Dbt|Zނzڅ&mtdYA]@,Jd9CLf(&~#$2N5 |ur}_0?⿎k WiUNl˦;[TrGp>D @tzuk5/ZM˫cqWl·edHu4iz_HLOo.X<i1W:o `ia;ed 1öX my 6 ۦ2R7LQaVe=u+BO)kֳG{çF~w.wv-"`s9v6)訊 xESKnMQ7wxL^]0սrtV/Y?L~'D<գlDR:(KOy|hd -w&.Nb3|Qa}.ݣ쎙๾-g~/T@[@cIv[[X".Եݗkʀp0(#l<23fHaSs-SךJSʣv dVކ⍶ W2^W+M~ǕpZ VCQPDd~n[;_*K2pLXJ7 ?CeЪW4j"75l05lV ޿Plj*@U61lJAհmM0ϰDnBR5"S"_ы̸CFomf*:D lvk3]N4{JVP؜D;˄?$X3Rg~BSƚ)DWxuEV+G>^VɈ"4&XHɣl"aU{a91ʿm3!Wˮ;%“`JC<ʗHm1x+g2Bݎ ̈ LOۤ_::lw p~Ϫ/gy=j27aQtb2պs$_nlڜX7 k.`5nZ>=O}V8FsO*  q"&-Trɴ/C 'DA\>+q&QKv4]3DAA~UjʝKI"Z﮺8%!6r-ZD8.XԜF%L.IH!vsd2PbZv*4a K Χn\Z*A?:G3zKU)}sԽ2 <)`I{~z#=Nj[N 8+Jv!%gVH T;&GN pvd; DG&&,Z_P$>?V$w-zIA6r R ;soƤR"zQ'~j.pq(×s9qFIPi25tʭ ?e>|Jo4jJ5S> }7FXUH$JsL{H (1^ڜ ScAj:^t;g56Ɉe`j ):sX1q+IAJ-`^kפ+v0Gg,{X1k-#.umœQ0luo}/d,OK_XZPP9%gx~|o3!f h|5s]:_ Q<o[2=ٟ7ԭVh^+W ʋdF{ zءd9N'ǤTƪR= Eu{dg~Y5']p$ 6]MB07H4 sQڭF_w+h- cט1m!DK],VWDbɏ\;D+ 0]Jd}of |tEe'&1ie`!M5 `b(n4M~_fhXn M9b`oL1@HKkZƴqzSG_7Ŵ _5 6ƫa\{MTO߭7ޑ|vb."Iz";=R?@\^W%1 4`L7oٽj. ^r5^̮xh]&(m|cKJCVh dͽM ZLΔ"Q|79w+_1_j߲?΂Hh < S)f%t!K]9>]-F͹ v%Q*.n}M>~PI-LѬ!f ~B<ΧPH`7 ө^;LmV&1m9t6ʡTA%4-:TpժAbq=,ԓ 24p%(TҤf ]Jz^ 02,0_1ĎhlL[Lu-p=<#ɸ|lNoYH/`[c=K`( 3ƎW{iƖ>ϘD_ҁᮗ/',}Z,UBۢ,CKU(\ʼn[)[& ZB~[c}鴷,d%6f>a%}"K>!O!>O,^$p%{C#\ײ(aQU3>d|!PĸVffNE?۠wdA'6όHP-y? *nTIw1H8|g!ͺX:^~`R5S7 ,$uAh}|S6=o~g=S=&^S Ԓ²-?J7bua!~n [֊LI+ʼFy:v~µl*.ί 8I˞솚`Frj G3E.(TI#}န&x/ֻcJ04J kTo$xA} ^4AU4U7lׅ>&XM>YGO!bj&=9=(yͬi붘d@זJF0tڲEyFlIpn[#>Eay,g璜Ci)ő0n]gפ`0XYe+imYX^1ɛ,=R-*ݩ) RȝXFk[_U).IY3l 7ݫfu ze_PT}!aft8 m#[GABxծ-33?aJZ3kqOqYt "b iZ4 `c[==X[^Ox?oCLqq֘rI %( Ҿ 0Y䔊K:+RJ, + nDfSݏPRvxj+J٠0 ;O(猼Vb3? *RrtRO x{ғ9ez܏VAErdEQ-}l5 ֜Z~e1!\^NLː*3N:`u;Y} #Haxk&{4D?O1J'] bbwq k $qM(zₙ͟`|{QT,JW%KJ39kjl$b6<T6۱љn;r<[ b%6&Q9򚶴ڪgEG{V+TH МD߸GF)Šp EA,]mJ]x$}eUU3-ϊk^FǸh9%IH6e\zB ~=O]᚛˨e$%grIT%`GW;1!j\7 4&BQJlntwBtN:P}$Y` oBu}r6F)ՃVSv!RAVQy= 5'랞ff})zcbo4Z)u"ɕ\:C(z4gBYV1تOй/ *lIY Iy`"^FI_򍒑jK)ǻj[4Ex6wpg܅k.W'g1 b mLH KSf(Sr>l>\zYrm '1Pf7S3./BZxJ4*PXFD@՛\64-b) 9j:?vY2-290Z~!Qg[7 P%hQPBr͔YO:Xڒ3n?X+*+jCcMģM0wl}Q XdCjɾւX8e X.jئI(0IsC6Rه[E)mmV:~OS3ݨro/&~Y=z M$UxUhWPM OEc_B_m~ HÎlC7a$c' SKThB:gp#Kmuf>2qW \|8cfJ*KI, [=+ƨ0>pV)(L,IWr%B7v/Gd<&j\Sp% DyR[e`jc]F4.t߶!2<0e|UhEZDQޚ0;ejלt׻At쬧b8 U;$rSs.J m 0?L.Ǚ,V'9,c\đ#܉܋FżTC[_d1Ie[;Z{-ɢsF?7Bd42RepMǒܯˆ`ؙðKf-?.iu,!_jJ,x2S99Cu)]mD>׸#? xOǯKC^WI$u aK1پ&BKYUR|_kgI;| ͖N_*eV IG??s)u9+CcqCO}jdC| GQl'Cfv5wBC$$Q:섌;/˝!P W|;W JCd"NJвPظ,Nj9S^s (hs5O/z!C1}#Zv\l\R ̶0YIK o\lm僧̺NPvSNj\c%ᒧEHmvlRfs8"]a` w8cm\"Fܸ _YP# C!L_;IYPWaxU%GOP2bK0N[GTyŖ_9~; A,;+USF=!PPP(nRJb3- M ̟r_wS}Da()9=foo=fBS=!^_;иpxGJ*L-Ve_*+/6˥ ~H( ݒW TYխ9PnXg#@D Ia^Ұ"'iezARt ZMxHFNeIвd7^ PΫՆCҡx-r>*o < AXj;m_nDl6iMD)a4ᕙ-*Y%*&jF_rJ)|U8&!l=_r?f}:mNST9Ϫ aTơ fpI,rA>Es݇/dQ<þTx$dVN0\GR0BJL:ƕ}]!3vY$^4sϣ I6u t'ۢ\S*}#tuR{ CqhnFׁrh)LEL Ic$=͋C]̳)͸p/(I/ qt:]/r,ɹT;؆W izĂZ3&S4JRR6I$ؽ{ڠNBe+!w; cVo͒-88ȳ G |\0SÁYbKQ_$x٭j4F+6E Ē4~GoR?sADb n=}x=?ԒqZڥx@'u|wAW kx7@yNL2bG9Jq &tz$: q5˜  \Rn";!dvט:nPx2@&ܹĂ0=dA.I+iF`OuC؃4)%H= &R5h!aqةě&c.ffnG 8Ȭm3W5q%[h(O4wq)B= W{o 5Rŧ['&j˙ٝG=+^<s5DZu!lξPZ9|$1]y|֞cdcJ#4^X$tGIͬ_HD 7mLj91̷D~PR2&w޲ߑof>!Xn4R"{6H,AGFA,!NMqRa +i*( ȃH$DYgIؚ2>C8@ZS|o-城rIF p&ӈU&xݔ:.н‘u <'eiF.[(zlV Z1ܹK4*LqG̈H޲Uk+h0'oS_ʶLCUgq.+/G /lגβR}~@at}~?Ԁ-\SLC0CzlA Wvm9<8gj)tH^qW|Q:3 b!jWzp~6,=_%ҹ堤D@Q}%(h {EƑ h5 Ly ,ycTdҸ#YKFF(qSMW9G$%j>!;tqnJ`\H'N2`HnDeei6a߳! s@WPh -)A!#s١|7QCQvZx+B=W$J=̶ߋb禟!_zky_~ͶQ˵&EwN wʹ̥V$ y#Üڭ9rЛaTNrVfu.I+HiqcĭxX=Ur}[1(it̹n#zr4mt2m uSq!1G>"/To# svMg'k GmQ ]z4֛l!RgYj14M-7Epjj $oY?_l->3uӿp$sQe"-Ҕ\.WԘ Oᝋ0h'\Px}i4 櫲s)oN}zQPxGӖ)+(G*3brHgu@%{V<*e1PZLn+~/P<Ʋ(~jϽ4Ϲ"}FCo_?.`f>3&--<#r&Aȏ/֟{ K$0[ڮ3 ӹ)b(>=;3_I.u^MPM*@xi("Fk#ɷՒGCfU`2".!*z H07fAټWЫmr+#>nւHV4 <_ zx;Ad aE}J8M/)mr+fXg-0BG3$Oqr!rw}.,KGpt(/ڵ3Sxա g:nCSIሗ廒!yxV70}͗gA5є|t MU[N+S2cA}J6em<3i^D=C)r-*Щh_-Zs Q@B}'SGO%}0&JyiA+l]՗f7FV&,$I £5=ܱ=ӄ՟, jdHdQF)g `@ݠ}VԘbXt-k|W pn [[T[r;<[F|ni{HRg @-4E!f cm1XJ.-I ]EHʃ*׺8= эbO28e˹Tlgl(;4Nm/ҋRyRwHML(H(|?Ѝ RXp QK$w&_82sLupm8=/,G2F3L颮 $A0`mZ ʉuK vAIHz\HT%t߸7ꖤ${{ۨ1kY,x"x(fꑋ/y>d4Ҧ7)ru -D2~}{|+ =٧K@]\̈wkf H 1 נ^8 [1ْɧ:rCG~fݭ\ZIT9u =gṣc"';i2Tsr25q)Zc5z`Rt"$<,d@*]Pk]\fg}Xr-Q2hb tS Waw)̒lq%0uiM}DIn!ب< bŃG+nS۬_v<餵jPJľc m[~.cϙYώ|0YslW*kfWnK߯v# vP^S2n+=9ɰW9?QmR&VwwYtLΒEJ-[m̌ܕpC7?C>2ثFyᆕ$9͆==vHsT n~u Z8\U=g=@-X:o;{Ү \Cp38BGHcgñ>)tm(%4)7&gE|M74CT(S5KAP p=CIøӨe->I.Rupq3Op95.Bē9蟟!_'B0cɇԽn$f@*1`s' ǸRxFg9YI n?,>Y6jP?|G>.ɧ.WM勐"P5+zW`+S?',*7\xlYl_&W-Q+F/^ ~B ur#|!NJa^P}V9ros*qF H/7,\AnZ#S[ LA#;(!ψt+w-Dd2nNIX1]nvڴ_Isֳ:[ʎ$/=˖{cg1Y\z,,pTSU yɔxrvCh U'z ?=2t+"oZ".E⚨MnIY/ZfNFk>1"BL@q,h}l|ڭwV?HKXV@Ϊ!Ew5{њyr61d pAJ=pNԋ,`fI9mR$jb] O0 h#a/ fSNYgo! ` gÜ-):Ң`!?7xb,p{ӚL2O7@C<(P t/O'8y8m8ʲQ@ `݄sݟ~!u{X ae O ۺT{jho!pc.O|ȟgI͜LIv 3J=cHͲA={\2]l栎Z&bi6q\(Բe׫'F9f|Wf7;"‚$ m/M/\+BN^W>aZi׾/e%8 㪗Y-Y %0:Iہ pnFŕ {pe2<f%w)(6%1oρ)sŽ%Ǫ@hjwbu2 h u% zhXlI>v˼|tP&FxjEDa\%(xנEE, ߔC^f6Wzf~~5p3ac y|*m' ͫJ R#͍\D_*EȤ7)q?Ǯ|3;dbUzZJi R;E &Mݻl4AM b^= z3SR솕S#ۂގB)y c{{i]dV{*gg)>wYooTCQ%3ѿ 32ߋg;ϱ2u)(KCxQuԵ?G ZW`}πH`I*iO:Uzi?]m/]‹qtl%fWz6*|JXHMtSvr2$WGtZhk{dmjq<@EǥR `l^aS#7}k6'_ߌ柇~ęt{aqD4Sv4]E`1A,baL( 5AjJ/m9ף/@65);ƶ@m|$6wμdl2.;4 {bùcXQš t9hWDB_F[{X|>^xSI惗_c} W_2!moѧ2ީNz/&"4Wi 92~0^>o']MY8pUSq8$q> 9Z>4SP|`'uzzBV񋬉6U3.ʣ5ƮH8}-0]|LW u 3a*uSvjvvȁ:p-Z7~-Bۡ< 8Fw$2CFĺSK6)ԮWx 6/- ~( ov{r ԆdxYMz=x%;5B*5ڱBqܛE/R\~ٛruSתbjذ6lVē؄5 XB0% s߱q6u7@}imVF/Y^.~h)4Ҵ̾J,"/$C;=&ٔkNP]y@1|t]gE'g<\!@Lfyi:;@?K~ryj;QUg6K%u/'Ot!X9c%po4v>VoǗdzJc],Y{"Ɍ<8d(B }Ֆ*H +׿~VƁ!p!<*w7Λ3 yju%[,xcDT7k {|#}]kA3Lah~v\ލX/~F~4IJ/.w;t̛uU0Z>_ٻ6SdIۚ MH>h.tD\C3C\f${,Z:ՠl46mWH2>ãWp/FߖjiaX_'igD{ac!(/0Ƀ $0G@Q=P-~GcR7FzP y-&gvG! AhX}o| h^ ʛì}}>y^,󉯢9@&.FTHY%p2{(op 7 Gn&e%5VܹIf5!2 {?4}E5t/9W'FjVV̽Zxr5ea_O x4$&\F!bj5]ÊY}7#-|Azwbʖ"0oZr-Rdt[cW x+Ƭ揄Sqe͝eOn~!6$/+P`m_̛ H(QJ Ɋ_u5'|ERp"8܀p++Pm|`liOȥz#8;XMxΏ("zOMfg[CHN,BOAY{~LG҉%儓xʣ "`gSqs9 okCo?TGcYў$kl"F-KP*۾~j,]0E6D)?/BS써cټ'dx3*tݴC BM"[ޏEEo@yL@c 'vzf߲meaAߐOp,X=Met8D?3)1] N5#sޣKCDcΫwnuU^"s=xo6հS=aIpH ^B xk&'H노Xdo#HM Z}ZIc<6W d_}f,>ƣr2xב(<ϒHm4GDRE.[t#{7.%sM' @|00rnRi.)X.ӈJOy_0 ^䙲}Jl1 ΈQ_iw23R'{q5haF}'FK*S}]t=(CFH@ moQm7@SfZ!J7Rڷ뛨' 섍ҁUՍ VFG-KftdZxAɢ> {yYL }ij/ah7gWH-d5Kx^Mt(d@ڦ#XQ&5P Yycߵw0#ɧ3v$ޟ]ˇ%f3o bNy s(rF`YG4ԑ~H䖗\q>X) ʐo CӁ>>deӚYha{oK-`l4X8m4z!PG^4lD~ l3}j/Jj݉@SMO( ɋhp8Ba[$.a!DW e0.' \ "o>9ϘE՚T$z?Ib)0ru\#.ց V:sԯ\cd5 ڍs0%n"Y\O1g|>BLRɾ-d`,x+L V)#ñRWmTvt0T'L>hx{$hX@ h$(yώ)ogEhE1qEaY@tҬQzedFo+]¯&q91rez&+MAPvjqe仇μ"vx%!8t|M3!2WL_h!kgg_4 }WF~_Td8Q XgpYh\x1Gg{k'z^l4p)UX>-!d뮕i@]@|o٥WWɤGTFIo\P.𴈗E=5D|=df﷫Qj;Wπl 4jY3^H=X)ѯTPMu5&Mܨ'< 4zK%&U4V "Cu[)Zsęjv/,Z,k]L#7J:c'84F,h~`7bL~@0%RXB Q']Yv={֘x3l yֺxd [ESXgAq i,t+4S GoFʢ-ߵ`Cl\r"?Y8Ug68Eʗ${?~*Ik![/I IHިx8Wo-¢VCz_jtj "EgQ'B.ހ!FZ0K0g~^Yy-(CVYZ#}^?m}ZKy y@φǎ:OˈD%;YQnڢՆ(]_@ Dh#Np[Tف .FiQg%+I  k ǝ%sX~akM G oH!?|뾭I#0K!\,}~̀oI\ZU,AHҩ*eԟflIhs!!RY;n&aFFw;V8AAzzDl|ַ]^"6¤-C~(;uZxGYLSjSU@* {dGmt-%cGTfPC@el&7Q 4p rmµ$Y:^fq`*ju<>!vf$_4KqZ{9mh#i)M1m.@4ہ)>j ,%43L̕ia ٤k)t#5 zmt&CΗh*[THA[K!ʜ+dbkcrl(zΛ&^J0챢NW&/V%1X LqsnQ֡ ;\:iISA)~(%mL$T .M*EWyfW0ͮnԻk/d,Ԅ0WRAІ2ׅ`ʫ11n}m^N69 )VU/ŏySP9bVҸ#3V~~QIXVNNLF=OOeaeT W9WFR̅m Y\\*M#rUaS^ILWF6E3ᓠ Ɵw+9K Hʭ=3D+D!.H'2i7{=+ɻSIŦy*~[UԒuâPQS}>C'l<"Zg Ew^ OD&oTڱ% { A~OOji3"UT3_9T\*mn&Lfkm, m 5OMZ*[io@BS&&[ YmQ$6W$'iqZu=]sy3 "#[D_м(?FWHTy:jkr2[ĵLfmx6lt46P=iIa ?=~.HR+#d Ւ;w'[M! &G/`N8x賝ۀAJMC$$|(OPH5vGrHne"y_4`$å@emǃmiS& akӖrJEMGF.S ]JĈ&s'zE{˂څ 5xgRК6&w}j4QKO૱R똄/lP@-K B/q0*8˻)Kd,:3{6NZ5JĆ,?ϣuS~o&p3"B``KKi!<&݋V:76OkR/JtM17$ n uv.*f@5ݑoic.2ϸyM+;j4Ĕp>P,YGrLr,p=eb4F$Zr U0KS߽`_҉s SifN&kZ[GO]H۵KD PݒM.ɴZ%=)9&sljQ#Z}TƘo0٤Jq3=iz&87[:غ4$ mox_.pse47!h=Q3Qqt4zب_AWґKOuιpab@\C\É?}d]p& Ȼk4،: ]H sKT@p`c Q_'OƞocdikHnx 2L Y>58r K][j)V*85Ռ屯O̍Q ݿe]'kݱ تLFVN;rltYRTE':i[rs|[`X.@`|ڋ 8ƴLj^pzzͨ%$~vږTp*KY*g#z ˤ|sϮ>񥈌q[Iq=,&H;i̛1wW+$:,( D@|5:)S\vbGsӻT,;w)-!>V.Q g%ta_|BL]_0u5uRcI(pbXҥsS{^@C5\PnT`0~TuO8FVGw(d%EQMo4|lxS;ܦ#|PU|U% ,EʹtLDfo0)YE CgRRRc<3p<&hg~l_"{VB=r;MRκiPsm?p7!Bْ`p[G\7r8 Z"M_@p-{`{ Y? _Uw?Jj6yi  {$9??hM \< j:kM%muk)CX4&[$x!yD9@3"OT$MN%>dA7N-OB&! !fŜI=I9ƩoUC&:c,%:+yAZ+mp^i$W=o SZfRAĂoFSBHLxܛ ode#h5UXZN+/-\[b4H#S*؃&)cWuˉUcAEW[6 O,D$-^cRTmfaiKgJk5--5{9SN֖,>j1jcgu M A;fT.jQOrK&C.m7gAo9piȿkP 3ȲgKJ"r唏uXQ0AU> j$y(G G=bNuqf3'_w`6tīuy-?*[Z!d(=XLr>L 8Ň3Geypf\ζ7  K>ɩb4Ul.0X-ctvI/G:b(XYKs˞}<nW֕^b&lx^ } 0jzq`DW8nj74eܛiO$h4]D]!2ϖ=#3G/df>8$yj>6-8ݠʛv{kc"4kF GyqTk=dy.f01*l5q gX|9S7ꐑہоwq84oo!=q4TIN~͆G3gJCUɵXHeTǥ6b]1E7XAWl0Ic4Y9_̓nkdb >E>AVߑ] gf6-`W0Y9h%5W+Ǵ 7]Ms荒絴b.1%&uxoL[y xj@w%G{u3n:V'bU\/KfLdDhlylQú T:kW8^m^Z?ɗ:A>M̝gR5ǬY%nuxN^edž̾NlYwĐxB>}\?`>]wXiJ\љzUc6EMYVv%~793u|~\tӥ0_b#`.sM)dпi{~e@d\-+C(0˶/@DuVIOU㷩uWp"IZyiOqx=X:3IBFrNbntg#<%&Q4=lH U.wtՇox"qACK Ӱ,MD§jOq0>Ӛ%~&'Qk%u>iDܥի.;4Zf#(t*N(6.ӳ&hp Lm zYdP*/tn92B.Dn>1"`S#9cAB0Ӌذ]MPQWF+NU7B2Y^0F3eԢL!J뗥<*/hbIvj;4~DuA`6жࡅk>tU` hߪ_`C?EX-37I[JLGfzb]"J#k_N6TBTe0>F%#FS#㹙Gid2ۆ̊M&˹!ljhb?Bk=]*z~!Ҝ`jdfa5ֳ|> \.&n%;V(}PII Ib*?΍ִj|{"-h5gq!~4ˢ/˯Graګ@qmEKK :>sjQj O>xȑ0]) ޱ(xX(S v7#1idӾpY]kOr 6˘_IζvOt%o!*Kwdoom|`gԵd-(}o& LFGmjΑ9S oNw9z7c% ;P]`8W }qFfHQE  LLG#V|S9<'կCBZsF5V몇@Éo'*JȦ*Ъs+$zOkJ,8~Vk`v}|x䅬%(4ۀ7XI1R6]ʚō6NL)Ң\a/`Uaʟk?t5G:l <6*AR߶+NYPțb5ē=>]9 :EWQs}4g1 ri[aH9Q3l\./ÜP0f߇m5J FR%w^j԰淬Ğ$U]>,wUl! NrhuЎ¶_h͗wUNg'gB9\cr2p-vga蔥5#H2Q|eOp íX48=V NBz4]d/G"h2^۬U!~3;rfʒۨa:Jռ~! 2=K`>Cl2J3웤0c|F8HD꺜 pnDՂEat~XCmNGV1dH')0FFل+;AʪaHwNkͪG%qq wO - U:?9N&Mp#9ڗC-YD䯚pU,^ !s]_d \KeHF(}"nL3VjL-*D=IUbe_+>hd0۱ʟ\.6a<)ij^jBfoЋ'ik9 -fh Ĩ(<(霄3o'D˥ @Yt|єԹx4"T'd7}Ks<}Q!Jo ˛= =C]]ړ'*}_lWvdW/۰vu3G8(Nޚr6(UQ&r?JMqm3% v.2:x"shU.^p2 (kbxOBf`({ % #HƳmT]NFDa[q5͍2Eѵ Fm'zNz<3wwW ħZe-7s{.?zvDSnjMӘ\o,aQ%"D &/ІQu |k18,{'Rϧ 5;veF?$6(@ "/SPߓPÔ5A9^Q,hl _Wa"+ 'Qb;%lk 'JnʋE4I]OI X@iVYc9VvA1Qйk4df7 7 ]ԓ3ԴeBp14ǎx"kX:crgHDWiht+r1(㐦ɉCFA&a,*|v'Ƥ 39$!a睎 ^ƥDeq%M߄aw43t]@h]41Q=*@ '-9 pYc܃0fO]r $ZI!A:xy XO2%H{~.e%>d]1#kL(bB*R7t{2:+]%'{'0Q݅j8ڈ]P/KwĞZ١̣h7Kbnrl} Ϣ7BNKɞD&?[c7S8^@6RDfZzi GATd^Nj͜Vx F(R¡$nğzI1μ]Bd-c z1N3=jBsIRGmW(Wr&-^pxcOB㣿k^ 3vs&C ʻu(C|(*ğ{mޗ6q[ WWz8FFҽ$1CR}<%4%爱pw$Nl1@twJΰ3W:ܟXJEΐI}?k09tvmcvhy$m ǥm@+˸mvFƼ:\j[e踢ögݚ,ԍ nlAx`rDW7g)IaG:PAm/ñ#jWJ Ôwy+/Z3NŨD'`FЩhmǍ[_W]D|S]Lv52v{"xc0g  w*N]jf9,' O% .o'LJlT$뵻y-OD!>ؕG~sݕ+~sRl BGsD5[3 Jz0FX,Bo&Rv!"w{$Tfir>ߛ|qt4Lh]Bg #zǍ{8Jyh886N 9 jGjm7.G]a`y@9U8]]?1/wOd/,|V =QE5~8p6BXZxOh#1s˝7$"P'K{7`SZ{?::z KHB9^uNS4f`_WPսp_63)\8\}]FL󫐽YJH Hes.l_)-~ h! -f'd>3Ͷ-dȚ5.R˄sڊ߬+N+KOCQLA!a&8&h!|/КiݜO"4nq-*'R&$ +ur@`щz9V=ܮ#ZmP&HdKϮ%Ohm?j`L XY^fT {j%?!twsx4 P iV9-fiP~S!׆( K{0s"7 A]@*vS('Nb:h&R1C܁nu[@<8HuS7%Q ԹSoSi;Yb]vl!j՛=첪g ,)%;DTYE.: qϳkqͰ';}5-o3 ӸCͻSY2B" )[ ~Y.חIZXw:n_Ę($xc ˺g $>JEudke,Xln嬶s+\\rA@^4ؖ3jm' q6Sy-wjx<* MVp~El&O&7!#OJAF$tG"P.9U(!]srC 2(9pg "}G, @}{(^T8wL3yхd3= Rv2#VDd_dW#vț`%-8,k=W_\hs5HL~{o u'S՘ik fYϳnMeX'C>Q('1:#|n"-܊76;5Nev!N0Cй/w[9a:6[Gf\BX/1&Љ3^8v<qt'Ӏ =q؍B!kJ\nu޲<-S ۣC̭ ]}|Ps9Jt%: ˼,Bݬa>2"*?x]oߝT6;oXH$b~S1LLЁ@78=b90[s1IQa@oq)nޓ|r~&r^Jנn4j7"]o4uazs1'M9]rA"YGLIdH3潀_bn8'C(23$ߣ5A,}gy؏z(`UU,N"i:(\^RJEvEʊ  d朓ƫ7q’x -rǕ]ӡOqTSQ^˽S1dEZUW z4.fma{&tpP\brs8VF.Y@9ti yP+g684a;)d0֩M>FyӇڒY7:=]+X `Tr濵;-m_E*aDQdX^/ӵnp  W,z[@M}`r:D%@FcEUX\IsϣZ8D0wp*Rм}8igk8YUrue$xLgU>); >FV/͸Mp-Q yQ$&Kem3wa=b3ޜL4gAdh'LX+tV]¿1}(W2TH.w,՛\L{sIkqsO0U} "g"1g peMZ7e e„+u\~(NJ $N8 \¿3}F͈1 M0LKO%P+.Kҙc,3T/?,'&ϳ {iZeIRAO=B!ӕ6e\mZ]i\3^ D4Ҹ$,NܞVr4%er8G_IwЅYkl%@HB sHJMS%Pb.*}C6qivL\ meu0nxZs\!*_OaEęCvAQ5[iPb!oIl)}b$RC `KE홭[(^AQ "G0HɔF ^f2سҭF(kx_U ]uSw~DE{ #,~qbǺstݓ*Ъzʯ(MX"2.P`ovףMQnZҋ4ӸTꌬ$*Z8)˗^3Yx,ptS7 F,I2-U05@KYeb4QA4q(,.U3F@zfb_W(+ P1'G"߹ 4\ї׈6^]w+1ي=Og6(Ѡ1 #hռ?Jy;[Tdx/mhfÅS *?oZZ)5t].~lA^)̝/p=0?tTtV2Z1|xz8 SyD8kY<~57B0@ v~?v}MaFgvaa2jkAlܮ#p >#vϒ-!۩+ംhˍ')JbSZJ;1:wFy{|.܊"OQkRcJd^@D̻SźfϘP \'-+pB\T E xS(7D;!5[P\Pߔ޹"6?h#60cQqڹ 3ɯd73۸|v(8*fi[^h]L"{3^ϸyId;wY5p%TiuGFγtֈ[&%(MO:sl9szIhtձ J<̎ I=ʃ$>̣”N"2#l-K3ˡ= tIShGa';ĠD >t3j@u:u)ghP3SK-|8F[[I*ɨr\eWVb|+iC#+$/oN@$oo`-(` vFtJ}Ŕ(Ux()Š 5a7%cZ8-Xn}&pKGDLUwlhRI ~Q,wЋ}_I!lC薂< 'cZF*iXn=(R8;:"_O1}dodȍ"Qku(4"}@˘7J;A&G0ۆCx4h '4!dQW#=|FS ȌN߃^5afwj46g'ķf>8\G@Mғ]Iy!GpyEf=3_*bo lB]#X0{;MCA" :%O{=Q;=⯷Z7T`£8HB;1,u~(;Hx阈r繰 ՛`璍&/ײǑ q; 3~_&ylC^^C!H\ Pd2 ? P^r %v2c `@]ͥXʚDSas+F)K^Ϟ#k@i2_zUq0?u,O9I?>^'`PQJ^h! ʼN\+luS\/1mHgQ{9|hucP?/<JW Wx;'_2IRu"LЌȗ\q*J~)lOt5;}@)F]ڨ_S`.{ЕPOo{j;M}qH3 ~mE8.= n. õ{=Xy+w~t$S0$G{Gf]331= H|Ǯj[wrd<=p&M|"%z$,ɉ ^,Yb.- ҬEI=#E1bo]}Jv)iԀo;vg GId-<7ߔE"ƞ^@DkaJ@i&mHrv6?^AYDV?Ua:u yU}BA3s""-Q$hLh%#Gߑ3chufW:qtM ٥ UڃSvO!fVtIqs"I}neC,~YHnZ\e7KrnGW0` +?M-Q] "`q8xi#|JZ}Rz"FwQu3>WG#M&P QF#,oWH6cI6fF1ͷ5plY !W|(śqZ p,H WFOw^8Cm`c%`徔#'B}tZU3¸I ՛w2MB~D5\(%b4cLaXç@J-FJk=}W  ߝykU9^$ќArL8Kuװ40z`u*(w/{k<k4|P*o¨'" SxuMd6{䠍UL ŚUkiV+*^J_J8# X3a'$L ,4-3+-V 4/Q5XGl;.M]#[WAPo䣣}jj PPE {]Ӽؾ8AYΛrqؒn&9"gU05H%~rmbJ:_*TDkA@_:BeQ俈0JWP.}F%Tdԏem'8ZʊyeolWͰY|CLJnLd\3͞ՖvphȂ U3Ot[ q9׋qK2V棘1 ח#[1_?Gدf~{5ޠttSl|1BR!$m$ĭ_s @8 .aK޶H8Ԕ !C~6vrM03ڎdqUP>1 Piߥ!b=Ļ~;ۋ}Dp9Pl2olCb$GёM2O!FJ,>i $1,?X&`GEA袩OoxzE_͂d*.z7J]/9D>伛(6Nsqn[=Ee D``i{ /tJϚ-7ppZjsnqoA=N75l[eY񂸝%YFN*ح-)aW,.BUT.m*#6^k cDG&g0 eGʸkU8 v y >pOʏL|Ir=; /ϡCGxзCb?,/BmC-ɶ9,&x\^i؂UHAܷ 1ְ%JWRFV vsU'ҹ-pjnzO4q~Q ?] :Q\HމP# P 0*N:&Fǧv[̜}Fx{FQypo NxiG3x`rŊ7y" 4>'b.QAHOz]G3;ZΈTtmI''Zk>L~*G.4ߑc8%X@̫O[Y;rzE~7)b+I6/!R$H˖4^4%^wzh٫,-]Y;tE%> ?)Gҵjǟ5V8KHa/: <)p!< 9T[ -+ޤSsK\Ta ؝dFt-WStyEkL>c9Zw|EF}oB=B \?L9QfH z\ ?j>Qp_Ty^<,(\Q_ S4\9y:UwH*^ݱe]u "D#U(-L^;ޫiܮkG'J֡6jQtAˣl o7P},04R/}@K(535(%<`O%I:{a %M詮mqbo JߕRTof ]2u;ҎD񰅘 g[A޼P$Bx`"ֽgVL/+?i6k-DsFWc?T갇/1 |C7{b>&,wArAFϷ ևh, zErqTB5t\ {^&k7ygp0Kp"kһi.&FK4p@a&ylU $ĵY}@7C@KܱV^ʅr|1U/ > =RXCl%|ƆCYc)Nsq[ut~sQfPhnCI-&_ٸ{Iw7Fn3b{EJ, MDA"a,͔n#)H+-&Z S#~q(_*1}+4+QCCf6&~TNXɕ788[BQ<![et>JXhFxg R2_xo0NIyGSta'C͂>EL9rFS6v-kv᧷rìkw2kl+>v|Wz^E2e]ȷpklțr/+>'gGIOI`nUt[<9`)<ɍ<(i}|'Ai'6Q_&F`~lfв( (ru95~=$T6nтSw8*tȚ+|<]O2{ -CS֮Lîe#r ,{>3w.d̞Zų}]J@o+e˞Ӷyž˻ *89u"w'>gAsnx"1i( )K]N{c>N4?#yУEkAuag>9ՖF"L#Z,I2w+J>sdP>(#|ӱR :W˯=b\P>ӆrjZyB5A4G,=iރ6ٍ+ sBu_XFS7z-8%q)0q;$gNܒl4 ]'kXM JuW8M+g5ݫ6:jD1y@q{LJr+|Vdh#aQ c0͸' 67JԙLO]aBvIJeJ#"/EMrny ,!$ѡyt{Z8+6 afϵ#soi 4o ڤ1I|S=HH$sXx0|(Iֶ]gIJh˴\`6Urh>\+B:~9V5y jX6LqݪUP[ Hs|úCN:uGea,o_Mݏ\6RJ|BX#]61RIo0]lU @= ![szUEy~-F%~)YcJ,;rFl5n5=lm&];|J!m$}5_ăqeGqj<'FFA&dP23>g// =mQnS^1NtOrQ"tߏ֓$i|fܼz3&AADĨ_li'{O@C*C6ITW+j@+29 ݣT8'VDM@]֔#Zbr8F|UI5Z茝 g w YU2N]kOAF&uZtݱ!~~)4P_lvt_1]|U\Ƣfg$7`8tMxE㫕} $&XSϕJDQc)H78[]1#WaZ0r0MLM~ ?t " kƹy/uU J5/ퟟiK:&NTX'BXD@Wqux9xRmwPr`,9L8wh(?K3q_oyXRӦ po ~#7WXCO$GU(ͳwQRSqb=AxFwh|Ə~^c_Lk{X;B:d=v~=\)uHZv=zxLFআk2W@ym@fW Ws 2\ $x H#k:YwR`;-N0 &(r+ǮbU>W,{#X Y՚e=Ш o׷S9amEj3s)Wt$b6໗*y[2HVh`?=;#&@%CPMƣb[E:6,=o'8D'R72k,}5<F:U@߯7 = A #YDccby NBtm>Bit?7{ʍG㭹ٔl7aG˸p#Bbsm؁+w18O5։';}GtyC#[t@8]p.`ҲO7+cw~7t'2EMFTKK-<-jg*VК^_m#\auW(=lɨ0_lYj]tcuMpkO?1a灸 pa5A(A<$}%qH6 |cxoݼ@AfSb%C͊i%V&dD%G-|aS("Z⭼)ܗ?7%0NHQrޕ ي{Xi"1)Y#f{puX-L4a3v-'Ms~3N\%&C.F-FAR囮,USṫ{=Ӻ >{G{ ;]ğ/s|pxk ʇ d9=NiPOPB)#oݞkfh"{Ŧe8Z=- lt=`&GMׯ0Ӥ :(kAwA@d0)IrgA_b݁U)eI++i>.Jϱ7%&'؝{uҗcz+WInͷQ>2mXv4O$>x ]hAveٮNǶKkT[3F.Tk\۬!8JMEX/ 2[OoI{#p\/nPkKNoC rC=\ȋՀ/ |A3Xl$|Db1)xФ3o90"RkoDPqxfcX]R;. -Ă%A'4KhR'3w 56ݩXhPXU9ll@Nb=?@`N _TK\˚pg0V^":E-||4O}ɱfP/K4^>)N-iu5gn) 瑐lʏߦ6w5G,RXO>,/אu ^>5Tiw/Bbq6uc G+'P._^wK׉gfHj4hQ́)?%k{A*?IؐM~d` XK.7\)zWERHԭ+nufzӮ} ^#8~#VR-@h=rA'?Ep:;>JdZPiG`$'{J ŵV=?X?:Қ;_,32ibZg ܪ)zK֊wQ)RO}$lȅ Q T"]*-f wÂ9$2BqdiX3׺&N*Q n]Yᣩw ƧRfYNd;@${3f #f*̭&W-M}!i>0A(,u e;{%#(Xd:]}/]3W0%͑ -vj}X-KY@]jJ[DКۯF3/r^Its'9cd$35,CU sgX>jc <[t-ֹ?akmr/A$l==H& OD+7FChN5>yӕn!r&qݷ?ITd*Ϝf@hu ^5 =IdU:_>I%65N4<@)HAs&HVp;{ (.d߃PMҩ>Oq8 W?P|׊]g>,NQ;oE~c,}ڌcLyc2f/\Je$˛7v{UbʠTIs>fߣPR٭RZΌV%M WSG<:+g2%$^P3o˾%uV7MyW-;N%,FXQN]Ǹ k* Lggv8װ8daʿ|׶eZKX !k^Av+HW!j:9we|+ʻ)|vj4Ԃ^WԶϺKV h櫖~ʊ4'->b7p:qPEk@kszZjQ Uɓ||fw^QCL>fTSYJrw$؛6S(EsGJ$If>MugA)sw 7a^}% @jh5d8U*Xl.JZ+",λYRb$a3Zx$&z'1xqeThujуOLLO5. ֊b4Oj~[E$TɃLnПAzl ?#wF c MMkL%534\U#/+2VNd,W@tPļ XX-\ZW$M ^j: Qi->F_wTZ̮R0lr 7;mjq^y/̤qQXxDilcV4fi0׈cXS$Aܩ%) 6i0AsV>йқ_JFecņVQ%c-Sv2C>Csɍ6G 2ֆ m<Ҷ Ш2oF ?q,d?ؾX[1$ ]z 7GPL+ճNuiYm^}=0G vqs ˩a*~V~$h؞u!Zu)֭wcqzq0BRE%"ND_К}D{ʨ]y($(`;(Ax>lHXp#,=ϸ/ ,,Hi8&XDGx 5 8)o#&0{rQ mmuŨyI+5 xRme ]J}`t;2_X"~|[d!9@F,p_yBw|/zYE_#lB 9Xa/#ρbUh'r[|;pU<ZXx~>T UV[k2u1g\[ L@CD@ý T61Ր$圞` ^7xk5d@+"&(]=&;k-T9ʢic6_n|Y$͔G#y/HK!ҏOeTa(p=۪K_P8F^_1!WEo 2~YM  L"@yv =GY%ԧ[YvqMg= (Rm:]0v0"޲yWj̸ef!Fm̥Û2u\z9%$F dr.+=Qmʮ4:#(IDse5 ARU@Y'G}47^UWh욅ͥx8mFt+M R_ͥȉ=z1cüh%kSx8/pTL,5$Kĕ ʭ]r߄ul:~wtSMX9.qiz«;:z@]/։1!t#+R袦ڻ?@W@2)~A ?SXPxr7 撨,ƩA`8726J${9ZYPgY tɣ_Ԓ1 >:@3+h쁬)J:{<FPMM5YS@Ϝ+Ujz1UaF  l]ĕ䚳sDF%*sF }ݩKAP3v, ;_J?"tE5~@WFcBc׃? }!_G^b۽IޕcpEÖڮWN(@yQdVGP˗"UV`gπx׫V^뿇Sѣ^wLި]ua_3JKpXyn =q-TZC/|{}}Y4 xdO{xƚꋐZpYm`)M LqSYeח8Aj O QQ#ą=W Ș`Z\0Q3LLH]_[ W]!PMdžj]S@ҠĐ2V\O޹YJK~:FŵsӰ  :xFT+/F 2U:W |E3EOyBwSYom'γW jL=o6۳ͪ}sb"^_;yQzD"-d]a퇗"b넀JdNOO T Q}ܷl` >=޽ZtcjF9Ir%N>y?%:}MZ&lArg#}>cEKr 87厐 r#$_(1qG}pU>j*TBU]yo>hHHlvZ!|,vBG7hH+eOm>lwSgւH `s&^t;<ݮ{ދ<-zcɉ'e0U#%Xup`ć˾G\65H0*K1X~ Ior-ߎtUml6zTUKd.%}m,WĎP&сT]I~1%ȉw7K&WV8^X,p7;^b#4'ẽ@? a؈bv.Ar;mI(BQ Pau'Z%o-ۈ}s0)~{J|8%:A>.! @?*LF(:@F2NU3G)*܍B'Ŷm~ߑ>o@E3cs6KOseJ&I5" ̎=m~TLMԥ֦\/(F%< (A-mޑ&Ee,M"p?wc ԉl#ìH೰9lhRڈ$EϣJ^_yfj>c>`F/d$_ 9Tb!.*"j~\A`֡a_0DX {'KEBr-uϢՉ,pv/\ ;i1UVsZ"k,wK6T?fɃl8h޺g4sOn/Z"Z1T [H`iBԸb !EQļ(O|Wr ?%|nؤh Np3y<>y<8/{b&4 ƛXAIQHR1_}Y>ɾB"ڐ%&XIQm8gx5*٪Ӹ1m' ՓTs#Fdxpۢ#J/B\0szz%[vX4R:-]2w寔-̻O؝^ܸEWo=\.LQ*Me̻1OqIz%Rs.H*B>y#q-ΝT U=I n3n4+0%6f_OF|# T ]6_i"deO+C~X *[-0Xmlҵ[#IjԤ2.n-H7s5tx8'!.|,iQT`%qh &W[aN3Z v^O,C꡴2 KՋPfgUo"5+& lW,,xԤϼŲw.\-sz{‘]ɻ \jrRc+z@pw]hPs혶ire>晜@R=FhJ7p f}X LBץϢGdx?yYH%U7 X#o քC]00$O6Ƹju R|x[QIȂ_d7%IónZ ι9b{ "@z!9*0_/UVj{!eY7U&H4-̩ to3Z$^43ϺQ9`U1G%C6 kpH/m֙TNqF3=Px^1XTr8#b+e+9_§Ei9ͣɊѓż4n1VҞw`S9nw &%B)Tv^'07lk-7ԤΌ0=fQbO36[yFqNd(f/rUP0OA;'@EYwwpSј ڎJ%mC RR+W',p4FamaY\>}`Lft&A;~&oa>~ٕjZ@( 5{p3 6BT",BĮ/ oA~̃쐹 y'tYħK6'DmOͰX ez*"堊V.6J8D -33"ݫf𣂏=NE|G_ьvDFI tvL˭f x4,,UnӜ+/3*sb0ZC׈ٍ _w/d۸>mLGx*KBn[`Ǒc"mԅH+Mmgiޞr&EL> a]Y*X;(Խ/ںy#, ^ㄛdLMRKaDF Q5X>+8f.o:gw>tIֲ[{!HξQ݉ 旌\~ZYv'mpg%B+eM%tV]H]e($0ܢ[#'C/œ7=1^O3N=~,SN.7PS^Bnc z,.Vj&đ1̕YkkQ9hD}ep?f`tu(\KAoMfIo BFW*S3]GF"e\n0tm5s;qحw8N xQ8cpji-8Hוțx( ΨPoN< ŊPDժX[.˪ tiM%8 Uԧ9{ӹoӟPl/nz3{>4Ӏ2?>9τͯKNfĮ T g畍VJ)\ؕ+|񽾇a[|}%y"ȢUfϦ"h2;qLv$4󣖒^>>5Ԃ- ?T ('"d?7Q~. 0wC5G}qDÝoAXPɽ eSFT1- ?ybH²(*Q)2do(% /)Nc)Vz(BÛ`OQ,}ˋW]SےqVXtfS5 ^ȇ + U&-d޽z|vR-D|Ue|t<Nۅ$Ee-/o_eD|9 ٰky/ѓFS@D$x>|%`pNB 3l '͹T_C|ENK׬E<6~rJP45EzK [۶U'r@8-ŤMgӶba@'+s%kB+H'ńZ2.&ճN2f] yghTmy=˕\g]3,ڝY]*!} G91+پBE!W2bVO^R$%?:'{{ 9Vcz)f`H*]UyX ^L {$G (z!Jl1$s'O[)|6貧Oq 1ʍPBHm̹(H܇<3ؐ˜bA tm2tN+YU/^|"NKjLCá;~&Grݶ4hGasl Z.݂SBs :iV)K2mvsQҫ>\J5쫳RVf\Qeu*ܞt784ʼڌ_%*X/Z51E  nXI|]Bp }pP[u<7 qD{[xs WC1>*]HFؾ#+FRaqnmTL !iVM)v6NW͝zB0ႀZEJK28(rǦpߟ#.H7BF&Vl1 6#a0+V iΓ`nn>;#cLV7f<>;fM}*'J*}?Gz DCi ƣ :*s1K-@b38YFh`(=SZ]]>`pMτYc:F<̀?9,+j!oX]\S XZŸz\{cyml kogw8G\ \o;T#rYMiS<5vGz7R7MV ]u)I8wr)4: ƴ;SgT&UI޽<.T _Y\2~%JV>zr_ ߩyP˿gW6 >Pw<6aҢXMqbkV)*2N+q>b!⚫ϐ }>ěq8MNh{&>xFrd>-^oɠEXoo"6/XLh[Nk, fÉƪy|;=. |E{ ><}mS0hg2Ē:̪vQR;-fE|PֈmąqI=㻱pVl#9j9A^|#L$%TDFQgyUVw)WNPȔCV\JƪCw@ESBpb]K҅9Q&=l4etz~Rȟ) J;4_R.7+0=!F݀w _vφTֹ8›w"XbotdlB]Bɘ:OM$߶M9[B@0ߠAWh3 جR F\Ε)*#o{`bDv@ Lc*\&CÁFsL'iZ;ի.B}JG'511;eMt$FÎm>Mb xD!\GK +jwsEJJZѧ Qd;D'>6 F5!tGwY7no*yH */){BdR˕!gя^5Q9eT=-Ie2dfT& AAW bHŒkhc0kkle)tkω~uBVL;D_o/̩␿\ ZSo@bfxEgi{92U.D5{@j(ݲ܆c2% ʺRyf">q n9F֧BY5Ѧ9S}{ )K+dM6pn.'`^@ &e(Tt)>ĝs\{<*}rpB6"Sّ̀b;5?բ)R q;V8k n :T;R6{!GI\Oz;B#[nӇ 9RVUY2l%7wkEzK9ځ$3 e` ~8?.J~aFTPZ~}+};dc:H`w< ,܆rN [F4x$f64c} +鿺ЎqSlau}G,@Vx/Iws1h.%(AtΓYQE蕞Qv3b 5 n<h@u\aƘx .''SK&Mp==F^:xHUO,L <݋5BM `T^Ao^6Xf a?-ɬ *hIHl 1̔RTA)OurpԬcԷT= nja]{i2j!ml-<)Ctqh<]|aC&ua*'J$KS6|:OӮsm)Tkl4p b'֏(YUOk5[r{H0~u`{z{~B2Kz2-V}3[) #7V0҃c#iw\>nc?Ϊ=bW9.M<%7"nAU-=o Ь[-hٲOR nKry0p ,{PBQ >R6|A{p T-.Yj3a`M(T-dRL4p{]jYB+JoC{ eJrpdw.j ?S:0IFa)ZF7A{Q5o0CDq():bkKJQ=\iѱs@ 0vE QZ3~O !޼9a9ے, c7V]h\un>'OF&HWJ *P' #&d#GfEn>>iNiHe<. -$3(GRLr7,i ו74w8Y&'xi*o`?O(˩ D%kEf$1LHĩ _'s&IԻ]YpyLV.5vDɧ87 zMkV,T.x:*IwyG63B oXZ{OeNc! LVfo:mH»I& B;^fnp MofsYd៽iV -CޭWyyOˏyẑq?nAPA45=z(eθy WMMx5==%SQp" ;e/"q}#9g&61+y~, ɜ4mq@Da&c:?| QM6HT"sWD'8[IaR^Pޑ\R(aEwlYgn|A@4^b^V;xP뎴"֣9 4U-Z=(PCoȔSK\XKy}cXn'!:~94E+"4{&xHGTtNnXnMJXyڥ.n!"jar.wӂ[9 OFOy- RfibWiz9kQY8(Q*v 7]=y]yS;dN?wni 7p 4xڽ Pc`MAZVE:,6j3ߛd:6ly~L"qy3CI?ߣQ*_+V~̚eyG9ނRȫSQWe c& %߹ ʰH e!S,2:ui-+Š$q"Des㴔zo䦞I)^;'-Fjm6ѽ4@3h$ݨuI;հ+<,"^*7F5s2ძVLuIP%ݿ"$o3?KqB_w﹮[ \t[_V /,L< 4No8·j%5:2"ع@9U څ459mm7P8ՙ|-{dHkvy+_&#|'\MWy6<_'M8V\3U&cp(^4E;$_5:O;rG*BOغ o&?M4b2lbqA]CB;ڪVq\/ս/{2B܇fh3[1&p^)\2BddY<#N"HD3%T$;v!Tc6wViFAD[ޘ ~i ư⁥m]ha贽i\;́BWMGg`gP#/ B$G9ѝga}ZqImg0f[14Po 3rjcWԼ",IuE$=Y&\@#^<""LPt7m bKSש p53L4n"]W˔m$oiOu̚iħKjHZ]\Xͽy zv1T|96 nߌُe %ۚYSMLv#Xq-2">!vT47+٠\gPBc%8;-wPu0~ 9SBXRMl"LZJX2~}@G^\cy; M icpwҺc`fZg!-EψPn*˽Am`vo;[۰kLfUg$M?74 KRd[nr&~Z;_?e>6= ݎSE_׃(Src/wFuA g ` Kī58 kM 1ux{D,sY^^! ]8sCWa;wK dM}}m9ɴ2㿾%pK7NkpO1WNt)UY궵 4`$Lz9IpT+x1ăL!.e4DAUvhizWh>rNVM'L7 :6u߽2tH0}7a,^À 17 јm+v(:a*obEhOJ;$ťOӪZ Wa<=hK^ۏTYBv7 vMw=S8 2qm:9?nM(!MB݃Ttf>.\1@@6Bq8aiey  U%VH ߟ^gY5$@$:7ʏȎ'Fa ]wFV C'.B{iWХyceR`]U՞*')c҈I}zX¢gS#2W,|,Yz6+E :#;b2g t&rrV*OU76O!4iI Xݜv7̪3 ܏Ecc|ڼ #/ke|!qj$ni50]ybyyC|@;#_HF22qzw'0t;~pEco,@,2-t%A~ k_7ݯߐ{;kutx5U #A_~L!Kr.)~h^H+uz8%&kF~?[8V$8uǟrw88)w˓2+rmv\AΣTmS7F6>995`c94(fa(a,&|Ԝ/0知4wU%D*1s|HPpew#oGU篎X*Q+ L^@AŵUT2sW*CEXDvI^`YS7]׍& 2]+@Ab-P;ޣz[$ 2u}"-\&nG ?Fp~|ebIn6{C1/B`)E)0J:D(m7f1 qV#Q 42>bQP{`F[y M<ɴϰnN]LM>o}W E& ̇Gڐo/З࢘Zލ nG0[#=mt/Q i36jʞNb'nnZ>&pqJ뮵yYƍ LVhH:e!=ܰkە5J6 nﶼ/s[~gaXotyT?P]x2@UNpnF*Iiv*c2/1qNMDQ"*AL@EE7gQip|) xhD.}h_-o1[L [0#P!0017{w4k!ՠF;q `D&2-9XU$~KbcTڮWg֡mԧg 5`:~yBx.u|e:t;!֣O<;Fdppq&dS%E];{}rCǪ~Mj8!7 i|q/ R1rkMK'Jv3B!y6[Ѥ'H}$^$#;M n}܂R3'.Ҫ<ɮ "K tOcdqИpt͉sЁO)u~qn 42}8q`@%&Gc +zudpx(Yj'/K;X'atg_bTpș&$N6 "lĔF?ny h #a!26NLH,w|s?#V\w'$Ȯ#. :KFEvDyr H^%tQ|DTU}$4.f I,y1-7Q*>3Yu]ɤJ3?; n|btFwe~DQRtk@ַ#owJgWB̀Y0Rx/L.yIt$3^f"Ε} Ƀ6hBS/> VT81fBݭHC-a<.T?C=&b##'iXZ=Cas%Z,Td tcӚ(.J7@Z3ZH[k>YTq3ЃlJ'r>\W{xDCfT#,`Dd!XiYah|>nIZ[_6Vy'ޑ1j)~d>on&_$hyOM/˼8"c-It[(|}aLBx/n\hU|dWHvE9au_u'M` Ncxd3Yt3qу}7BxM^Vq[//Wp^7ں H1N2 t7[pR4lvs2xe A/Kt(h?uc*+{;^ ;t\kԉ[lÈ5ZxhrWy[z[^XWЀf6 0fdƸ7ATIj U_ELpWShρk 7n}͍b2ȁH?V+#QR4})zmC?N5r&,6 (~&0/*5qa4mvrn&]>GǿK  `oGI=@XH yфJ>#ܨOE4|=k%"婇 nr}*@9@#% 5Xtߙ~AyG|PVp*)F(%4|UͼV ̝vu܆*˦|x9ޮًƏ,rVZwܔ/,*٭~BF KXG&0$0 g MZ",I?~B{)DGɑRkXGaNW"]H ]dc{(M;DǢӧz V,k# y&{ݯi<|+ Fs[I1(qP<^U,,DlXҁVIz['IӗS9['d"y݆CN5T52MxQV FOH*'b{ߣkekmq *W'x˧e)& DKկtIwgZ@ۺcX5q.[GfBAB<6? ˢ G[s?JcЛs9]ĐQV_F5f.0|vڛWDA&O'v]a*l0Å!GK9cy? YᗺD;niNţYB$V%ZX.I1jg eYXSkKQXb' S5% jt 04쁉1Ox9zlu#d5~5%ƫ3zv&_6ލ-g {DJFUP3np`B5(?!@tXM B{*9+yeꔌ''GA3*mh!Jg#GϨ؊S1i rnijcWC2\OIfTKAྐྵDL" Gn}2^h[[PWJ) <,6z3(g<1lBS^ݭ9=nL''JWF5'.)EG1>k:)+2F@ምf"z4:dA7䘲|6nX2' <3V Eqd/kK ߳L ㋪2U|œluq^{%QjE F)7-7:ޮ~2O_nzc.w~ak&&eW]ǹCcPΐc+ٵ_HjZ` ݛDͫ?GrI؛3A:G2Xīb<DQ1`EVF$r0 H|i Tv>o)Y4c/]/[j e:ڀ;㜺 ɡDiIሲ3 Gz9*Bv76XH3~̀Vb cH%Ё`g=|/ 4j)Wl$  ôqLL `mU6bka ؝Eڏ3g:_7JQ *FW iO# KxCP+=m95.֧DZn՘nnM6~ jm[^W~/_|7&ġ9~Ài Q?zE:lnlIHLrNt\yO`˳E4`%k^ό Re|-·E" &Ȇ陼ũֳ)s*#t.-q|;;gi7 j6Pjg6J]_Xc'~.uՔ#Д\@rVf. Y{ze~1.Uy1/ ]ʚm4nᷫx\/I 0?A iv eS#% Uqb+q,HKd_&fij$_7;>a=͍ D/WXzNMGZEH ؙdf8ZmEy͕ƏݤdW=$x#°JE0 RqC8O6믗hxJŞqz`II0A%Xu 0|Jj20zAnъ kQLn=Gw-8L[lItUWqK a$El:ށ l7P1L>9מ {%&yBScŧ)*<w맙 +DM*@BP#xF1PTO/"eK!8 H=_lӀmH~,Xra:u^ĵ |#؎\U08~5*fUR4O \%^ɄH`kL Ԑ9vM"X|[UHPM=8maSh9g}|ѹm1BX-.+-.^ǑÓ=V<9t,T@'ꡒgcTO\*0쁢uIT_9k0=JzYsIe@Rft_gιn2J"ʹ[*p|j`6`ju{v@v~Z`&/\)4/(bfM SMd_aи9M בrQ7dN|gNyy |emoЊpHGP\H jBi䐸kb0h*Nu""XЫP,`|wl•8-P%BǛHvb&b/Rͭ8UepһO42T N|͎}TK)FU3*o}`ٷ򋢾Y$ =J/{FocwZ+s>p+Jֱ2`vCOkN'18gma=4 Ғm\D,,_?[Ծ>VЈ_;Zh U;vkR\r}tDUѤMQgTo*(ך6x*G$4㈆=ixaټ/,YM"N&Z+7$C]ѱR#!N() ӭ i2锽oFdi8i̐P! Rxo{.hs887,4=9P|Vȕ,VQG6"X!9(8xcGS'JϷ&,UA ^b"ne T뇕aՂoakaec2kepNλXpt~uI5ޱb%Wj=q7n] ~]t[N붋) YBc|Rrܵ~(yV#[BQJPSg DR}):ml&@C#U(::gD=K(s?EEȑdm@HP qԮYvfUi1Xy!=O/VXzD)`+:TjAc#h2_[]:3.fH-U<$;#B!3^vv$Qr4xU`, .ղog)s:hCa^ D/^s KMhD|0Ţj#\br+~Tnŧ.g_1'g2yb_b,kMN-u]ѽ}/ǫ!q}yvE\w}L{/}]3+j-YWfDNoʼnjƺ ~x@lIkc" @ a2U)`Y=}o b4ލ # eFޒuaEjuS>g[49j1'+Ƈ~ o~\Efn%<.)?ٹ$7Ù=j<f&J"H^N` bZST% $KYH<)nB,.B|tpTudk;[ysXТs()AQ;;l&F}قʹc߇7LQ:k3A!&gM7uij V()lo=*fz/|F֛!Qnlzm:Sď[LtM_q [p :}ʟ?S7mL rM^R"[%,z%h1 ] wa+R pV~?AtzOaeQn yGv#/nUZyXX [A 6*ep&~ 5I9 \jݹ,fˤgGO_͓#okh!^o D-Ymjj 44jD'[\qx^7"10V 7Ǔoeqat"-:?NWf=2=: [bt'k_F)vY8U7aq֎%.^ZN}*oĀ``oC)e4J_AFաOdMhS2ÉVL@}~>y?U}|#&" W4B(~=a2gG+@UCxt ~$0 hYkQ iA=>O/F}]Zj Iհ!̬)(+5k o7ZNTgS`61JLԢk)uS 0)3nSKXjQ& K2ݸi"\%sTOt}EKW3Ajn;\UU`ޑQ>O?7f(PAemgksTS `zw v8DոDAu|jmC OKBHt6rԏ,p1І =,XӤU2#V)т찭of[2Fl@+[FZԂj$|}:qIʿ|id0U{LMd]yO^0vr^lan&wإh?NKMS@&ڿ|>jkȸ =]PjM*6)[P!˹!;S0U %B>$' G$I`NQF1:g2_. a^kcWJ%kV$nۨ/ y2v1IՓ@p~X|{ eܟӉc&K^&VJ7_ݰ $i b/y HnR@YÃ"WޫVvhaiqћVw8eu7G "e}>T }>"d:S3FKR K醋`d1˝R^s+ߡLĂgY Wfp 8mEQ%JT&BJNBp=vy*-:Mk U%lNv zl YZ&k.$%[|2-һ0x2'[G!}vƊ{w dg~ _=Z:Wtn5(fiR@G FĕYVOj /}snS_HVHt/BGOQ7A9ғ:p],Eg% . DŽKImq<,%I#¹ /}Qgscr`C_}-5e #؄-ka /[01"'+ǚe.xH+g#rYӥ%KӛdzI#(|j{&#UqcIom7qfLLt6*_MY98DvmQtR6dۙ1JRFsPmņIe!퇙|\)4>6lQO$Xzdf6 r?M MYtHdf!ȯwڻ+( Bw4$/(Le]w0ݐD :pG~h 8IAq03 ^TDG7Bbw:{8>05Oq&>\Wt JY,N7K2"o~];i|e/1$ a#S} ԉK& *y_|$`#yj ǴilgoyU*|"WJPL%@F1j4m6Ty lӃO0_JWԵvZphj?"v@c%e`H/ ⛔sKT挓)r':6٢"/g<:M]Gyn#s ~A@w%qQ܋XM#y 韒T'Ʀ?*`д9UfFIJ6YD9RB̯aJYf/ k yTIwdh쒚MhR}i&]wBdh-}"UJa*E X?tfAQڅ7օ*w璊<g[Ov_#Ykiz.n%+9*;-@"5W|c- & 5v#J2} jK{k)B+> iL㏊MKcxf賴l&R/q?A_t1"=D5X|3 ?eţ- {2=?H&, Sī"Lڅf},+uEMg:Θ1F:9ZMAl]v?,Âu&*R5C6r`hb1ȭ^;bt,77Uڟi >*+">9A'? 0ϣ&pj~p ?Ư])<ݍ\F,a\l E+ե+uC-%e'n,#@<;K\7-/JNrW"B /~7#"oVwe+)[s :1۶GPe@=xt,9 ?u+Y>aU&Z?cvsϙ QE/arԆHQer'X\pVt{T@!|EE lI1%agRY PLڀ,ޤ[́N"$| bW5є+k`<;GeiGUy`n%ĝGt&nE;-+;J_3S0M-Lxga٠hӜ~/nߏKS#AȅcGZEsDS}19uIo1+I8,c="g;?(OpŐ լ#En(䨰nU)̂L|־-S3bs.Y.$nݗ6# d`^0yo<#yH[rTn}A>*V9a#f FUGk)[Peh{,=-d 4hB9]\j93`&ȡ';3 ~\j)&awtڎRV2 1FròoU07\+ߟU9[eYE9|ˆRiB ~[9VE^.ҮGE%dMk{!fZ5󡙟>+o\%N؋@>G[ypӹX`ҫXѹm"E6˖06xSQx܋ &!US%^7[ɇOq{S_qu=JYnB25E ̠[4܁ǺZk m;aܨU~y9or #<#2pFP48ٙ7':%c afP'|nNa1|Gy(5@TQs`vEAMPۆjQwkzXT bq-nA:;-!,ޥ˼n@a^)%`yÅ{[Nzy^e@@ EG{lA!bpA^kݗk /2WZ/zp 06H_U [rpǫj]6%eK[:;i[̨eI"ZRwSBN 輱و$g); t$056V <]dŶG-)A\Z-䨝1wE͸5b!6eBõ">IfǠ@*|!$X.z9~`T]*h3 ND" hlҒ~ƞ`%fûU24uIt[HG-B_C )Lc|+$dDvH Q3GfIDszk w ylR5\BI*~ۖwBVzw42gq ј#Bw (jb m8`D =mAjA~9%#vg/c,5j/E.<\}GqJ򢴼F/F#l儙%(UVSn] +HR=AMjOC⣮B(3%9xv}F!!޿(si.ԨMH)t$1ߣ\(aGJ ͋>}9WЕ`)bb_X: Z򦲹79,0M[3{]dҾtc?Z}:?*y1l X_WGe':)^ҕ_L33c& Gcs*ek&L Foa՗󘚦3'(r&Ѷ 4K=܉Zz0ej3[DYݬ} PftɄTs ܖ5qkPC}^C/&&|fYuwI0Rl,qEK׾V~cBVv%x) lm_K%"_͆fwfzkO7nUcI dfE 4(1]lm$ M} }ȧ M~ń/I g.I+ѠP6H[vP<ӉgMg۠_/ꎕJI=G yCYz$m%ʴy1e2jOMjK7*9;bq$C HQ'^CziwD4f~x+oZ <յНtS[I }"Ltrm^5s(Z=҇}Z;P$$.m>=]kChonG=,h+Ku XVr7( dI"*SHzӾrs:lz13F(f1M|ip4"s7+a1E 'Q^DDՀy,μ%l䔈'機'-BN]futq;V@]NQ= $F#~s$ ,zKQΰxoI$M|UK+ʖ&e%O%VemUɒ/W:4,/lv9l;on_T8qգo%wete=5R?AQ3v52Y+u=0?H٩("P33Ȗᙔsz*gJ <5g$Ȼv y+պVp߹ubLExѕ0]VML2_j%U`8T<3GǾ^HePIE-f(~"0|C[|PS|t>$J-3[VsJa[1'q4p̸F+ Nڝ)*bLï4I]f=Ff{YA!Fn B 2K <|nNQ pZp3$xNFpC&;"FBGg|L>`!-E E$aK%-GΡ-X`mAxT|X1toV` (#':Oⶇ/$id<(`djO@ߝŀaRː[XB =]d=yK#=T^Y+` QxՀ^z]Y^>ߧb6EEW:(:q*dRsf\xxi+78gjҿߵQPDц߆žBQ] Z4Ob#'v'H3N:/ 9Oc7wp@="=o~x C"7H+R[eL\-!/ j}^tzs 4}tDHU;63g6MZa#IUQcG]\1`vTlݺX֯,R$@ǧæHWdX[4aI^{c|CΎHmLxsuEҾ}q( G uiaU:ѿ# -n70^iX63l-C4q Ge%!4=^8?<68}58])1}JKy*I$6Q41GOG:! | Mfh1B,*z nԿmeٽy;Uk雞Ae':N!&sVv>%ziQJ+ʧ=_i龭Src>_+aTR*6hP7^eSK܋(~~@ r./{^1[/ZXZyG S&T|]wM6K-ӳE-UR|v½UpΨvG]2害FM: "$)9}~$,g{*J4d܋s8 +H4Qr`z:*R=wbf5rryԊbE~6b}"lFqcrCl/o'7D=f|9nl,Zo^IXXiZLHdߑ$g+y5i&FCzS o$FaZI;a~չN'N][Nl5VBS97n&:b^6\R7_@t;|{w+7炾(S$'!܅ Lwoxӟ{,!~!ܼǓU8U[JU7[:egq\ÀDLBYHe7+Opɀ'qxt Śg0999)\O Jb%D,Mϟ*5'L&عm \mד TJXJb~"qA8mDi=j n2(ެ1,AvgmPuGzx+!i6&@QokxŚ ;SurpS恡=Ǵ딓V9 Vl $ף:gfT颽I7&r$MOUrުa 狘'Lch,Е.wTXT:E5u=VLf)ܢ}ոc6j CN JO! [Xbr`n.N6>FpTyR$լBjZ!&jϳ!ߟ9PAVGՈ )| 9IB)uQ[IWV 3F16OФy˰Κ2\srb2BR^^ :>Jԫюޑ|-~u|'˄/!SdQ*05"yG`q%Dt)T\ a|GǑBJǓǪd!?B>҂1j,vts%ѨbJKpy]_dM>i/3cݾF!JcYR4IfZ@->Wp@BYh Q.OP`ʑ`_ZZظbvau_VGjN3G;0Q{w{C`y[KbY|9R R6lk z͊͢9|WGcyoM҆?vgP#f{uL)c.oSvuh&bCw$j: M@W TU Yu$Olrz׌׺i??/3|UQCdJC |Y/L)A{֐ A邓T F)(͡G񀕫~"g OArΙZ΍lØD L:˺5Purl8sjɈ{WF]YQLr_qyZ.ε M.qXMߊ:ŕ\+"@; (<[ ǧ 10@y{kE5n%p6qylN֡Ty~wE,MǏ“G uӴ| hD= i}@ ?O3좉6x$SKnĔ#۽"J: `G!3FWتM{ w ifZ|L4˃+w]KtMF3b s œx@~6H!$9or??;KHr@D¿LlK+S ˘C=vyLkmX)T :,tc)-&z1n=6a%著r)4 A~_Bμg S?F,Cl_Xk!Ȍ#.- (N_aSC'VQ<%P'̬,'JVl Ѩkl>:;k-w4]5)`C"D-7zL}_+L1y FeU?Q4`uT,1loGv tY%Q:N& e>ey9_7ӔZ`ZD!LC[JMDު{ kﴃT05YӐ.6`7 *U{܀ϽP< -ah784Gڙ'-a~- cFS@sm\#eXt5^;3]9%^Ό^qFe=JYa.u.>K~-(k%=A.yx.t KFKdS"1GZTף ,+*Ơ] 77H]t{ݖ;R9M]be;noAle:;{0d ҇`kzKUGX8i>o(ևۧ+7ooLyg fǔj%+9UL7eM Z=JRV5ޤj3c<~o1Opaveh\1FԮw &{{ѬĬh{Ր6E>q -oJS&Hv k>R~?GUk98O$݆~R>CeyW4|S:eVm 0b8U' z-c:-K|_pZYDeTǺw:vlĥy`gDs6`:>"`; ,~徟 €{kn}޴AL6i&{v}pxf,(q"Cb$ou ShϨ"Kͯ]\$52ͱM"uܱ|+0S~46px|钗*ι8.iJ#C,@4~_`i&eduv6F~y#(r%.\b$@!/1ѪR8x#(+V;U&g~?G<3^.-S_Lbi{M~fdw.ý̬o%H 3^Ճ+K^+$f\/Xbja bY6*JH=#1OJpԶ\P% (Es\-Pi9Tߴ>Ss,_őq:Kw/M?uф HvZPٵڶ'l% 9rc>צ(unKs 5Svf*ݘDec֗Jע1Tߥe"n*T#𭉨rx N(WA?` 9?b/ *@ ɟɛ +β6d0"X$uV g\`5@$PFQ?XEƾz.e3n(qMp Y2}~{#ԗGeo^_ʝlTJ@D(.ɩYz/1LG(pV(`"*& L4!$7"6SQmY!h)pVCO3ڙ>%N#RՓZ<Hk&PnPOr9tقOG 8>o(&Dc2=]#y|_{ Õɤ@\p 1:FqF<~91OsK\euS6 M^7b5(RV6,.B 襕Oh}Zlv^sN0&QՋˌFZ&zSѿ(}&OiCB:w}dաCo=~F}I\K³L6~,ZwxP;Pv0iHށ`G°QjE;3ȒGI(~I2ApEaPgG"5@z _0)5Ӌ(ݹ` o„>na pX4_(swgX > $5uBlq֓'tOa4h*z C|c*Mis"I>VVF3TM>-*<z`I xPH}̇>rƜc`{R6- j섻c -x̺vژ oy#`gN=v 巳F^1[&eH%p ]߳Q`psrֱ%Ueߎ`ؒ!6qޒlR/fmO9VOf,dZYIn=:Y8 eD%@c{èg15F+0v)hb~[BT+(ÛdՍCdB8 2E귘l`袽:3#ur!S=XS^A8 rnTrIK鼕3͋G{oR_p)`yoX 7u5H%l$zkkVrfN^֮>Iu-Ɩ귕&[vni.{SA8ƷjKCx|wϤ.U 09`F Tٖ᫶SK-Kv_?\$}R<r yP l BRmAAw7}>ɝ"˘lu >o'T`rPnuF$mDҨ L~ ԎĆ 1dl5HWRT<\]Gg#Z#ű8x٦ n!ؾ?e Eݐ36x7/Q8$ZKryg76+3顑wI? kMdŘ78:&DsJԨ|XaѻOKhmq}* #NClHu92G5776={%Q!VupZ,X< }?-6GR;7bI-KM1H}$uamT/mX {Q錿x@UÔ"tK!'[ܹ-`2v--?^D"cn ޢq4e6&rB%܉4am zs˫ڒ27w<p%Zp-d~))^MfHbB$e1I'|ovEzAqr4*<@9Mc>M0eK1_0g,ROUD,>iGNB{+xEzt|tvt: Tq;#2f'uq$d< RR:C2 R"Nmܞ@ V\G3W^fR=Z#^U-;e[DCXX_81Vs"KeX-\.^FȬ@JM&/̌piS/s857u`yf!F6T̥ 3q~<*S1frxXhgR![7S=|4//,bhџSA< ցTPF,fm :*@Tp< %[m,oM*dn/-Vh3#sICQqrO{l X2( ,'Wl6ldŬƨXʞ).kԋ:( sVprr-L_r4\%fla+#OGfZ1I ,Od?𩶵]@pOf% 6Y}UO5٧JMGϡʼפ-Wis'atj2Ge׵]׬2;X`gz~[Ftq]b@ џ@[2|oXe>:̨nlRh6 vJ[ ʷn-A{ƦiA%2ya'yg?zh3Cl~*7_V"۴ Mcnҙ00F3ңH WL'W@}V-HRpTꭄ.x(v9w!k2Sn[:Mv2~ #N+"KOc`a#`4''8O3N"F8Ǒ ˦q2k董ۼAq:*6<;= ga_;X Ov5^0dja=6~U+q"9ddڹ97l)b;G7$j" Ŭ(ze[wRSLۗ@wF0 ?ZI= D=nI'rD h;CP8&tJƹj+tNKyPjuI[9s=ڈ3v"On nP/]?XRXM1_YyQe؂dWֱ6=6K]m_gBqw { ^LSX(b0i0e9s ^Hr1DL޵RԄؕ7_"5p";Ն] Q.jb!tڲ !5Y]fT_Z\m |aUb4_xlҟ( ǜ$y(2 =n[sm FkuA~v־tpnOlWPt=dM>K,v]¼#OuB8 H{A! NPQS~Čv)͜خPFx0sîvܫ G˦ Z"r5?)`q:b#l{4ڗgi %Ttqx⿅M&Z%\ k?8"Ŧ~ͯ)7Qy[^|'TꆢKieSkMV]j9 m.3t]NbA!$̐2pDGukD.;{xehfNs%>hrbBYjC;pnf1kMF}ڢYZPnV-cT$L!4p o8j "7IZnN٫ʈ({#GOHL9:Tp [k^`ѹ[HL%P6k0sT.uX 3spz%m0W#"™q.DQBd-(k؞bA9 TT`"Sy_Va O=oLaD57G_!@^M >tֆ# °5rˣgjÑI8B.L;'uHd=0".drr-8,:X-VrJR[ $-"B*,^'5NuȲuSQ?iA{N Ș6m5r#ȇrH`iΪ~X@W_ie I/X^ʤd\$ 6veclfwS@ Wt%qw`jD#70R} Ċ$2O2e^a^x:,$@ >2*z:AT Mԇ6}PU\s0\, p} eql܋-]ai4n6ib5UO`q[~N_4 q~椤Bmi@R;PyJt$*$L#5#.].ʆ`-59эK-&+d>b;JZr1nc_xo{棸S:JhAݞ79.E%㐉q%rkpޚMEB{5X:Yp~nW ]8?ۅ-̅*x)W)(T:d6\ei*WMYGġBCV0ԕf:PLS!]K~{nStun. _O#*"B7%>;@b/6k)dT yLy7P)S`n73Ʀ!#mӚoOeW^ϦuӖR@Z>`("ctM0iK{,G\?v~sYdёcڞ8lV: Tg,߬2y].k105T֗Auk>CjfdɊZNpij?d: ˁZ2=dhn>ZU2~ln$GF``tFbl^_*ڞ ]@Bf~-%5TVVRq5c: 6‰}T'SH' DJ ?\^>n[8ŦqJnMdg )y[@$ط趨-E$ؓҚ?K)gI.]!q ׶XWxd_ VZZ9@ܯT>ƺn 凪8JqvY"i*iF_n3A0[qׇ qFޫo8'%2]snGT)׿e:\x>X56\OBVQdxQ"ac=%W}lAwS.RyF[ѫx49އ$~{yO|aClezSFaāb,٨6n\ 01Q<"IdW]N{"LsOz@'Eƫ0R6TϽCvs@mv)&PZ`5^l#xՒhZ$ڃM%]OHŌ.ً"nD%(ShW4F]kxJ}99ʌZiLKs15)7T5/泹>6v?/G6g(Qo?]tW Mbu1 j=,7BF Kv)7WAC!rwgi iSS63@r^w{֠5Sfstv5JqwBGK&kwdc=2V̏z辶zܬ)j9;n\N5k be Zf+{bJ l q& B|}WJkBͧf}x*7Lś'pTerΝX/ꈱDsiT?:R+h?L6}]'$-nSVyB*8[u'"mC7F RFIIGMڲ8OB&@>YwNh@wu[XYr3y{+OFק qgJT9}x6j8VsA KJ+ݭ^ٳ 2&+v7jY1 :/_Y[r Z7և5Li,ehUQ˄q< /T Mh4<:_ 9Ub0"Nģ8 fGٲ.kJV}"Qߋq܂I$6ՠbb%Wa}qeNL UүX'ջdv^HT#Q/K+BYGa!I VLM:>̉#e]MA+uzj|Ѱ :?zhII> zuVQV ̩*ʗZjkxbO{4|IE?Wj(:$;J`HӐ"Mm-Q9k ":s_ <hkHu@N 6:S@ Z #$T0 "hTZxhɫtzNoVt4JwlOLMp9!K?~Z9wЏr.f:ei3Sr) 5@V}8hI+Uj./ H[`j] ԁ-1ED?M 8xtIED@az( n:ʭT98bX5_!5؋ u[D[4Rv.WYxtJw?XKy)9FϹǘ5h"$>~M͚A'IO޴T1$k7`_?4㔉\r|- r^l}2TZZH( W-GּHnPhP_|*уƵ„~Ҿk@E:e`K#OcFܛ'Fox̘Tm!pդ0a$4^5ܺ!V.2j $'j-wFJӥ O-M#iخ_汁yɨg=>1W4 s'ŝJ_s$`[PЗYlSu1ͦ紶hn?Ϋ+OD2T6'_n] ;WCm MuAs5כutzy'ž =|zS쌗& +*8%~Cz0[ @WbiG6$s5ąeFa2yAsս:{舂9r:B pojzӳ2GŤqZ#חR7>!C w{F|u?)35J7(c/AhW/F5%e âm?6`x2bsL͈bF$%kڝGQ$^B&\%u6*L6f=䘇hKf76a*%$DUꯑmZ*I^믆(nlƘ[D@Mn:xl]"NQLס|e|n3O/iZvG) ,Kgl:j/5#+/R6u%j?(uj0d#~gQW k~<1c8y%a*&mXFq ;cm6UMPߦ!גra鬐vjdK]+x~;HdgAr6(fjl,x܃r'_C"g@p5s]U-!;SAzb'܁LU a(m948nŒ8/;yCϖm-Lf&`3ifDz_~oߩIH4ɦ\F$ : DsAF9pTKҕȤF5#'|h?ٖ*]i!xp`,|͝o64/d6)ucFHզvleպvZ-҅޿=~PK8Ky[߳ҨjFv>m+NňՐC0)vgO HS^RE7/YrQe+A#4'a*?*_˾a@P@ QX]Q)bn p+ ̣lXC&w6\EΣیRH{qyZiJi܎;]fpCibhr"+Wo54TZoU'#sk 9!mO`u:!މ+0E s6Q+kM]*3gh x~<Psdə3e, )4߲aeHМݫckx{WLBfgf 4=cHBXx j4s qؿi&b|Me-IdSƘt5aWfaJ˱#e|"D˦ 5;\D"XJ,Yŧtj b$7t/7|\lU&J݇}9$BNg"х APœ jmXJNWu;3ms}r #f,8n'؀(BeֻxuAz- +-̭[;mwȲ9e? *chIvpeNbXj4Ti$_O3DƘRkAlCNj" !Byx4^(sIDHĺIBIqc?s=s;OuYL/ka~ iIn1NSbZ 9Mݳ(0KnidF)^inju\GW5:dDk HY9\_BA*5C!aZM :ZZè>%ϨJ,U!YEEL-:i6?7q?d7ImEfe +`,=3]E7CI) ʣ(l_ ͽX߂cI.=*<ȇ hMx'uEJ>-8%%LFnzBԛ=~dXZ0w *TNK88z%Ax[[@d;/"5iPU-l⏲Ia5`qջ.PM/Tu ZbNkKuPryzk- 8gB44ay)E8'yLF0[^V9;}+m,Oz9YvcMk /Y v#*S=Ocޮ}X{ vJzE%}ŌHȷ7&Y>֥ї.LI|I-Byy:!JeGiv/`4 Gƨh潔w|1o^ (Iht/razp?4֊-UJu!JL*[-uWUm! /@QI67]noSZHTUDJ(=`RPˑ}$Qw!D ~t@xcKvPDT'Fihw4F:͑(+U&5 wSWb䤦1ASuMm*~i==jM[4ix`LjD#}A"*&`++0 R1ےؼ㥱v&"8#~fm悧͎02(0t7<heR*$s뷅4OThVJƄ5OXtEQзk`PW_hDIT˘ 9*khЩfB/+ԽY@f9yC5@)Rf`Rl#p6O;HPA\1E5UJo^$ĨbRY❖A`8;v $m!1d+(_R]!->?+71`:(-98SvrjE "+/0( J2BU0tD#{;rE"֣窠1j>y^!C %{xqgėviU%:KPS߾ore̽<ۓ6Tc4INZ[E6ԴUV`%tKJ,Kv#?:i̯L6Q3]Qe!`Ц% NDXgR;ʳ!E"/g.;}<Ep^TLQ|b7;zv`S݁x pru~YKyz,9N;,>Hw C+V=n'$ n&Sn֧k^9% gy#M2,)3MWHoj@9*M"|6,O8%"@2 UB0bfΤdtbꚖuvi.=vM h3y6;v\hBj\kv'3M({ܶgNs3wA ;U#vkuf]1NoyӤȹ?@ z+}J7&| ڡ7L`ԍF\@$~@r Xl8[}!SU.\g1|d =VbK V5ݰz1ZpL\]O<.:㬏=h/;|ΈbJ]o aȚF`'"ipAyB[]v]ZO;;\~)OZkw9'v'_~[2(s1hh$#I cRfcl~d%`47FU̙/E =m@/5_ӖvE!;U{n߿x kp=( ѭ٨[Tz}&-,B i%{3?I n޹*Sv<ǶN&|jhDyu1ZzFKp;=Kfo5}=cܧ>x\ti@\9#zd x1;1v18nGI?47tC;)G^*oɏue2]=J7h* f]iߨi,6oR°3PE&n"8n?_h*3s؞sD4뾄đp^>vJ?.{4>N:Wc [^FBQ'2!|Nו[}΅Vh=vKriq-zvU;Zap:;L۵ 4kؼ) w-)ض9OO`Dw賸}jZW*uZ `\S16504s`v26[*de_̡: 6\8pr@O0DRs\F~?8 t?Sw0Gs7ZC[J>#5OՒ*Z5FE␔AL\VO9yap)vck_0Pkan3+9ܵ *lĨaTe s+W\op kr3>3E}!{yȈ~۸ lɷ)A/'UsFXNFUoGRqHTG<K<! lBsǞLtTO~~#AVP-R|rf"6N^S\EV]tWMə„?n0yt@Sޠ.Omu*;g+5Tm6m=mDճAm Dә%'EfޤWH@u`'ƣsGm {>0`/l~QF~Ѧ |5 1hT` NyoGbMIs̓V 1ᾃDB ʭ!M:#1PT@=ߦJ#[qfA/On/Yf**, bOt{-/%CgfFBDePܵ< ԍ!>-G[@H;e ,+0 u0GhoEbk9Q9P7L oÃYA[(c E pVPŬ,ส{f]rJY@;uoԊ%Po'l\Cydr*#Vbr"߁!iN?ì45 y8jthͲry(wv^1n:x~5- ǐ8pN>kEgV:v9ґ7.dza&>e:UuWL|fLt;>|Ž5}`8>ubseC 8z0M %%Z"} [I\ܝ=FY3@J7 \ A( D viVˡLLJƣzq-E xhRg<𗢙 id YcPk'Fqc!7d%AҸ4'[oE2+iQqPt㖭zz zk5Y~Os#8ር˫8*ߨp2F*P % N`v1lMW?] kð5aZWM#KH%U;]-Oɨ{p"gIr g'ou h W{ .Hޫ,cJc%t@ qAp:e`Sn9%pwfdr?5X= EτU:zSБ9%AшvrM25a0:/5g* BLzr&՜ 5r徻J J{ecL=1b}[U7Bd#noC@{,ܚ:3}TS[]"U8:0"ǫt11 ܊d=DJeX;8;.:j:z!)xMM3G쑸8=`J!"Sjā#\ZBu=EE /ؿΣ5,I]tӪQni,!ep 3&GIWr)_7KʵL pٷE:f\Fi54!^7 i[h勴Fcoϯo|u5韒g[7UZcüY]0)ueOE@{m|UdP[*h`0խSe!2$ME:g/{N'OA #̿xT'}1873l } ^PҌ=y * ~ E~n7sk${SRaBX{tCgmbExSKIg=6+΅r[^|!=W$ڲH-Ԋb8:6o2}77Mv}5M4hwxͲtIM{EE3[,֧#`3n2w?U\K{ UmUCec:f [N)>rS&B 9u+T:ӴCn \QpB 4 G$+R;GaKaS[[$ƢD8A(H*YSo" {/uA=ukDj٩Ya>3%%x"b!dJj펩45F`r!&;Z\>ﮜ6s Ps H P07 `hpv r,0j }-M6IdG99eCc*6M,Q2QR.*Wbh`] Ysca%&dR;夭V{Stش!Âbu.,@T3 #ӣ{|gP'Poo5{>"#S S|tPv,zIhvڗ K|N3$¶_;- qJJʙ I"4>_㩙gtȗ=lH'r\,3b~RA/(C 2yњlt`i\ Wwh0FLYC[tPT5/56.?jGH|\Z@_'Q2| 3 dgi: +,@b<%Wtrm|9cݳ.p? @~T1k ]?>Sd̒0sOwWv?1 (զw,"zn<٤M+H3fwR 5 5vhs LjUo!k1e;Ě=epl#ASVFQ;IbP^XHV /"Q{TI_vTN ޛydlp=P~=23VhB!?A[j9h>vtT [V Gidސ5|/3#p9UlKܼѤm}۱d~GvЙq3F ;q9,o!5I-S#t85Ync\>|bw[Ja`O(W&p`Ԋo)9ln` %DBǑٱ# \9We ]?+*1aai36~C蓒DM )|@:CZx&!@e"6f0{B}.Sw ֓/r~p˅1ayrS'kOHOlY%"P٢F|^PpcI!_}Aza){]ѡ 8,% zWqSPqD |-ht7{1ZvҾ[R &å՛~3lTxxX9m85 1<_ ZiBT~'S1Cٚ>qi=j#JN0[ !P̻('Kr6!E@a+IO\2%O+{ۃ >";k ߎpz=8!v:ZS_-{lqp̢_/Das45tab\ m~UHf&E. j lݢ:pTCfb#sdg\KWI WKe`J+ٴsuniG\3[o5-Јjlh5MѝMK!RUJ{0!y?_A$~ \p'M;Н8=ړX?I1q0Ux>T&|@9ɊDV38b.뿽$Ka؏q1 Խ=vjv);J$8+\o u{}h_-s;D:.eAB3uէ5씾'FpVQv5pf?")22gleM9}7XI@~$M6M]~J1eT냶e_epJJ5LMې  #p\@ ]wy->Pp7+ YgHg%L$* ʐ)|vD Dqڸ|^)V23bRo/HWCf%Ma X\=[d={rf=DFf>1(!|ki7,<#ޏvls=c6kHDr:Ҕ-0:458-2pzxIheН)EQ]Z8b-ٽOQ.*O;¤iP~m݈@EdC>?aE?fY ML,zSC7@o;8X͏辴N|tఎ@&Z~vh8؅kE5 {uaU(pV'{>ͅO ^q%4Śkzj:ϺzGMDVKT4-#Vٸ|zfm!]Nj1FhK>[לL\TCr׉4Zg5}QE#~?=:Lh\ +Hlȿ20qX2! xAF)J8WyўXOiG틌6Mu@B0׈J<:oƞ] 1Z>) zX 2QszfSH݌ ]3iPsJrXKSy֪ }rtkaAIgbh J1Mo| Jw3Jkn%peRb^mȱT, [ j7$0f|GhǸ4#n|4A>M7l"Բ:ѿu (G #; ܹvPMU;6[#,w?~f}8Xջ( CM+7 G7ڌi8g`UeL\DI>$iK܃+$w<GaBnc/q"p~D4!\GitWU-h?Sʕc!xYPp4z@ WUA[ïd Gw-roܣ7m֔»,R% - Ny|,? \|߁&|+իr{:xv6>mk{)tלԔ[,ʼ -Qc[efW#Z~k5\2.x(X hU{]hWMֽq :7!x0]$_ o 8G>{楣$vD&¬+4/* ߏslm1pGKOr9Hlg#LS#sM] `d82Y=h+/: 8Xex1 d}:=Kho ~ nQ+ӯ م`p|nd)%9te۟MQ'=%0~?0ҡU$+{Ƨo@[ 쨉 7f&-beJ ۿvws%{%]Kb5[IG$3rQ"be 3$ 4Ȋg9MQGzƞ{W75g]&M]o*FmS$ t|?dn||0d4Y=Lzxm.DzA/f}f53"!&<$H9mȗ09ftHκG`&|q1n  nap|syK "MǛuG1qy N9}ZvWֳv-KoeaHUuMW\M5jDDIo=GΪrfUG015E'S le\;8%U3:ϕVVAbSf/;RٌbeqVS4' W 60ߞb0~iI5yx&jE&F%HW[Gt P"UdS9t>{/p^yqo֣a?S"8bT%8_U`!I~(lru*, 6| {Qo#38]O1^{G!.jX{o&7<WJ1AH>P<$ᒔRȎa>jp}Te"b[Z̫L i$QI<qs: K% sz\|F[-utȏ*f2fS#"nh1^HJuv"WA1dG8&r{X6[sb>b*rtaĞޘZJ#ڶmeMKYs٪fbZ ,F*VYLMTf"ݹe @ spivF*?{+ְ[B3lwy.&pJ,JV2WIJ>w|=S  Cb`]s{1ctc6ɞF@ylVB2 Ll[Q$zNDuתvl_a<}w2IܛCVAi1!j 6tvR70Wec!D()\:*Xp"USI$3L:qktÕ|#LB`X+ؙ[M!Rz?o'7uv;4RL` k-hI S5|M9Jh!`QdMo)]#]@) Wzsl}<3N4SG \*1eT)O-N9_Zތs:"\_2MD^|N,0fc YA_,^p*]AWJC>9E`"Ѹ?ngˆ}>Y"r=ؕ6Jo6bbm@@K033cCJ9JY[3FCw_6- Ybm=9vDsB#2^L?|6Q Μ&b߉&/oIO v( fw02ҝ/e-uQa&E.3H*cE'^ {U΄'Ճ!MSaaBßhzg`ٿSL&*[KQ#3Hmפ犰>F_[6# Ҋ)CVSa6A98\X!KIcضb?}۾sGhu/>pI?kWT~J\A) Atd'wJ|) ش$(A >? lE*2JW* An^}(D)mSNN.2U<|bqn#ŊUpzMTz/crڙ66bk\t":ӊO$'ꋼ5n{~Iɇ 9.6 34L~p ڗRy|0A-KPC-c֢nw,Ji0ۤaE7>}^7޴9KZO: W M邆eڀ)^.q/PJIh=5$>`u֛V.:z{!Fgh4߀Rڽ N&lIj{ƵMM#J)PK`h#n: (69,#'* 3~H?+M$6#q?t S•O'1{Gީٹ)i܌\&W >#XJD@쵇Y#!iѣ1ȡs0)d&;-tU+n" !%c{*|Nch g_>r%58{2 *ǏZf/Rp1~U52B7_Կ hn:NF<[)#mY8 ^b-F3^`bDa7^$:In,gcڡRèiKOi[GdϗTl]D0CεSф{F]wPFC(TY'S5p ?s<J.?.wq :셨̅h nMŰl,jo<N6/tXi;cbBqhDxɒʓFw#Lޣ-; o!qQ覄<8AL|M#e1Cd&qNC @Guy[dh${db6S_N\ZoAlFϪxoAAh^PPnQ-lMV%Z!4*jQo‹} !.G%\=`|he( hdT'ayQQ'񉩜2O-VS2 ُQʉ`WdJzZ :F%D&j1~BWzlnOwGj,2=&]bC<.㺊['i8'FL/,f͒ xO4q{N 25$ j_+M%4%'<"3؈w IX|L[Ztv1VKH;mշ I2u2p>2-ZI Vf&'K~Јn% _\\kK>Zq(@3/% n TxlȠG,0jq} n5؟ 7gS%c1yUb(w*Kجf'GBy\q`ڶT)n<S;Wc$,Պhj630kagrLq1G;ʲϰ#Xi1nI#3av ЁPG 4 (cWVhǧ`$EX` Z\FSSCF ]9]N;Q0FTfh$0V"gRaGcL/3ӟs@Q;M^]a#RBݠJ3*HrFթ. S7n;9&[$d)"Hm: gi#5|_$OvOxb!}ů ;i>/TFɅjg48n Ϯ#cwpaS-1&]ljB@>5 mCI ,,AJ彧?j0lJ^WJ Kz>CD'a@36_LˑoOƮ 1>n?'Ҙ#&l[`'h]eB(;Rh65v*ӎFܚ%[73 8D NЋ DmRoZc!FTFxKeZ(^]vPsg/$9|)#2CyE^?) ?abeT3K $tHLzK8ѨMGŝDs-Dcځg^`,n9rTE/kB̖ x(uGsc%1?z꽾QpdTu?mgXDa4SEY8_ge8=V|7iF* 8^qE{or_˷}߯dQ"nd$&͓tPk\ iE[N9|!~ɾ>Ef&%x08G7Eq7Gv.^W<0 Ky.AiJtxi2;ǻP9XxƍAY6֭bskZ-4+K{M/kCŶ|$ [3k'S,ٍx~}T˻c2uw1E Uz= a[4C`I]>!ຖ3VE$W749ςÅD;Ku^[ӽTQO1rDMc:8K]{,gF^aL%~E Mիb.[۳v}$vQe&2&S!ܦ|+N=8دQy}۾|رq]\{ +u8䘻Y_L"Lvȇu_Lצk PkOa'6Rb{}oHIfC5fBx| qF@@r*h`kJデCKq#y%4.܅dҜ/9Ef3 >QZ.Iw0ן4o-bX e,Iʚ#ރB)y >z$w_qAXuvyr1( R9 gōF~r `yvN)[gŧVdxwY8 |[~/ܨ>܌1fn Jj)콺o,U0 4<RܲnTznQtH]=<(iC[̚ՠ :70%DžYBxz/%$:W+I2#@5#Y9:ޢDVK(e`l%8_E埳ז%!2>1F\]-t==+z:|Q]Z 36p)tϳH:Qd߹Uݧ|I2*נE8`~)<>+}' AAkJt6á&zE`3ٶ㓁yLzdq SAocjR,3/Klve!?C9_#`}* x%$թ݋3ZpEz)D+xG`L~)@Zs,ؠ*,o^L8*u&<( D|={Kvҡz,I A=q q?$\*#fքwy3ͫJSWR <*0K9,j5N5UȻW>)ɥCq4߻1}J=e)MQqD0(-j*'k%Brks%84A+G 't/L8z趢5Җ@㦿`ʽnJPa8\yR(I8VP;G=tØy'DF$ I= T:іDnz_LX(>W摇3'D +Hn3mnwv j3! Ins,wyGTG(k%nDܐ0 `0P4o*Td *0e'mt8%ch:VY~Qe-I2]|  >ȨU oNRm(FH_ICZG>b3\[eII|J3`O+r%A⡂,DRCXPҐHiWxG\[v. .["ga|*-0(C'nH<&y_4'zۡ%nn.{Vy= =J4j6 >E=AoEj$/P?;,sc(_r(ltT^2a$Q G(M \4%Q LѠKyc{Tj4>]@;:x\isݵ#<"z:~f(n,j?MZ=x1)n39/qwVj0ͥUnGoG!1BfQi4Φ*aRVBn4 ;**GR0fc]8fK!1{ï3&%*ʂ'kdd^`PzDJ{CGS RRQ ֹΪ ٝL>wT"wCM| 4z?K,Tk5(N{puT ?͠.ISd(a J~G"LuTԧH?c+ ylՂ9NۢO^pE h}-vL?'nvf0"B@8 LjSʉxRUH߀<6ZS6?eqnv^NB؄D#aښ< pDX{F+SFf)__P߬GG!,'Hﲯ$0@ <鶷u_Qr`L'ۑ1%:<;XSeW3!Ȅ d gK &REMf[;0Չݛ[%$X|LI=ygLlEBj X3MnBXxȑs1M 9gcM8!}0#{Y ,\f+APf&b?hz:!́RL*?8U %xгG]KY1pdiR`ుcZ%#e:bYf{If.șS@hƝ'1=s(;!aGBGp<&q,{%Xil+ ]V:14txuiKܢ:lБIX3O(!vHsWzCi |AzT2[PY=rJUo|\cM(e ̓Yۼ;dcՈZ GBzߵ`=F&A`%_(}} '. e;IǟAF2~X | :pj4|MGXINqy>+1֙rs%%wӝ{18 l K)] H4=2jM Sp5nc~WBLD!2x[DRg$b h[\鎯ryϲU19>9MrG2!l$9{X=R67<¶-KHHpJYB~DU[W8k/`)k=kVtXVV!]̈7jl:51@47$G4kVy70(>"z'A; xYjt <E&Hei0JPulAN3Sq`3-Whz3XYShp KG5-qtUr %ݕUޘL8SxVUv4%Tx !b4d*RYK,_D Pʥayf~0͉I5r p96иfi0QR2Y=n];^ ?8{#j,5\ 8\K01Fo孺cJjs-j+iUFT$cv1__/wzRg(} -Mݏ{yP^"AUQuc'x)WC HcGqӲɅ )v"ɢM(leR@@vj'd$N HѲ (hg0황Tv-3j.7Ȭfݬa!6 MIށ6Һ*~yŖUBqŝ C:ĝI}5Unxp6d,FI{"D-K%<9~"7JMPI G?J M@@8{\a9*`ݤYBǃZDt2rSS{MXn(SE ڀE_d0H s-FEqSTdNAr[=ˊ7 S )}y|ϒK|'*^֨CUcԹAyUʡug8ʻy]i {r*eqy oϻbtҀe(ݻ@ DDm[ݸ5wQ 4!D#mPUž q̚)472.zX?aχ(xbq{zHNhP:e]b{}@eG<߅xuF*GE-Z^1>Gj7Hᓙny5ZN@$0/yږ#Ӆ(ݤ"bɖ Ď>ӔQxF]bSuuwLE7 }r6pbHbBߖr< `1)1q)O5W~wk=OHґ/݋\qo# %cmLnB҇®|QWm: 0oG-;.u`.?sص{J2# !I0REܔZea'ıwNd饸!o*Sq[(=\۽bl4z%5$v˵muI# 3#|4z?=d(+sy-uGAtK7̧{'WOrM1XXS1!*e3pˑnAnUO&7LA}#6$sĮ. Eh`XR/-RQ[ڐ+Op 9BB+NQNNʚIgόBsMOYГ·k_L.Z,B#@-Ax|i|sKz}w?LGcHESݰ}{G=C P-k\[ 37$X]+{򱴖J/ܜ2W\IA ʇ.^M0\'^s셪sD(Wjd7o޷P DW])`JұS:+'h%}G{\_O}{rm4< xNm[\m(=ݥcH\3- I9Ŝp!J?~|m B76/E* L7n|h6\Ȼf\&Iíioź-9>^qDD(^u.,gKkﲌ#0 f~j)_p?*(Mb;Jl!5*D39q a SH_TUnO(U!Yzo!. GugmH5uDZ|\tNv x0v5(׫"ay~b*fbu$',QF,V+Pmnj!a!PYp _tȈsrk1 XE ˁ{^o]< ?18#+%f_DuRri9IȽ'%aun)}ې1T%sH/BIok j?Tů( S/i`C΍2i};qzHEPO XEC7{xHLS/}nw3u <&2VgKo_'$-Ig. $ERGv>@ O>%d\7z%{o{pB@VӅ mØDd( + c F(!J_Ͽ[5e?rf:Ǯ=$E f5G;ԂY+4 IӯMml ~ASgN3K)pb@T7SH5PU^dPp(N%ua-j͈ jV_֔#{X$yxįo="SgI9p`[ Ά- +'zhȨ-UNV՚M~ ؠ ^{43sFV^͏-}/i跩k^jfdhK`"y1!xSDz>;tnڲ"QUuU..!vUJ*YAPWR*ub}:SMZ[B;8Q&!MSaỤ"\n&6\tA$ P|p\ɘn}gOS1*HɼKV)Y p?o,}"n|[I?~a=#@{|3Dzi!O$/i.2s^{7*ʹ@=HFp` !):ceJv>aY٭Z׮ZL Ur"j0Ȁ`- ( Z:8VA3R`\jşy{5Iעځf,n ,a4%2rx(i( 9)CyZ9%˞ ҜRZ,C'~['RW[NrZFN+Cl{j# uvuO# p'_Z(}<>Fj`:UP0hƫ1#}KX$(T/<-x.Œ["L\@ 7)DeEWw>ʼ "^"A'#%%E8j/TB4EEŶײsz8G_OcqvV(M`bhcsUȓy%JkJC[Tbq.JP&{QCs*C)WbaЩ}ήGo$C*&c[D  i~mifzyPڇ"vDh ZΩn~;v--# wv{LVUJm~'?.T] ߮2$>P*e,u\vbJMȗ͈?wELëF'=hmZ}b wW,!3[{ȎxpDo'! 3$884- QֶˏB@T.ZP*cʣ_Cϰ+Sr{tv%龘˧p/ۮ]l"qʸw̴?~+=gKc,\,n{a Ng HKͳ}İ(VWg7#P(_E&J48z ގD~%lH=@0ӬD!L$c*v>ݧh|+PĚ6\c2TN_"M$wȩ@mw6 j֚|Y-MC:Q3xY:LÝ3mƧkzn=Ԕ73~<җXV NN<%r7VY,G!E2+A\o4Al ( %3YW/xȄUbAZ7iiڀQ,kvfz8<'Q4d;BOH>;T=a* cLʛ\:FnP7$vD[Ce:?'i/|=mO5tnVt_[<"q?O(>Kj +Kj;ikp]bbe3B@՗QhfSMI umx */'WdM0[' wNdp])_(rTO=`%=^ r]4zV8Z18)R`Zʈܕca@C2EM)1gt?DӳYݬiy?]w|i_ pBFvIp\B.v0{ielY}7W.@#A>UX<A Tr^JLܼZ rųJV:D)"|@5׆N ur}e¬PKpX!Oص^#`V>G(h3?m蒃>a:\|v$lv086@tuifJHtx"fMٱqC:|>{F9vԣd'2OWv.8;,"f^ m:t Fh"^N.W5 T`H!ABv`+5M踎7bz1tP[%Fۄ_GUFtJj]68u^hEdĢټZ%p)?)mC$,wsmVAs@6ˬݣ Ch=3μ7&(2ϫJGEdcǿHs4pP"v ~aFW g}7/('1 Cmi[icE½t%EKvNe>y\ (Jiirw`ʿR ]ӃEC=V1ObFlPsGQh7q |XңCddqx t d0e!zK܉9 ՟o-xd8} ŃGP, Jڱ g Ul_{(a2>;d+YRTM`SHDXڹa%="젰<[3 txɨa\qvU1S~ۀD6f4.h>lYEҢ4 3]5Oc䈪1?`|Oj-Pu+D7MH*S'| sq`dޠ 8=&px,M Ӽ(.Wt,-G4CSrH0 _%r 9ntr ˹b(/%Gb8\DaEQ  p"`56Da]Ο@A?!{Oe asvQz b}4Mxʀ+䠜̲ks'Wv2P[uS'.osa|%]qӁo4B %^N8͊bW4Q0[|pm58Riw[чz6pA]BQلn25'">/*)~l(:(#B5i()2mnJ)]/߸ ~QZL 1/]oƄ5=&Vn_»1kՈJ%h7j?_j)Y/xudzm5# |V`$.vG@#.M~Qkz ٩樐lvyG48/T{!,(S&Q0k>Í;q7Uc rNXk)zrH}FclHhsY xq9AH{'?<+}!a zRc?Ԍ(SWҼ_A`"%6̎HX{&:$l] 0Ak^F =?~CA Y5Off qG돁c8֡cZ˰N_d:yKr=,fc 45BKlweHnrRqoChWtL)"c6:s j0t\G<(%;3T07%p$[WWϱ"[PR yG^\{+xqz+1:o]k}4Rw"Kg*;?^e.Bh`Į~N[HMwsM%<)i+K-D~sݱSl/ ۼm;5@lxI~xpS! `, i@#0))n*\ aLxqP>SOx u4VFĥ1E_m?}83eag=o}+[ġlA@2~>m!GgLl gn%3Dm j0G׀bfDrz!J("Hdfҋ !]oћo%M!?qa?2垒9Ytp']t8XmZAeA&esSG0 E gNm(i*Ak䏿"x~ K%} ?1H,M{VUvP4]#e*G[K"F{t1ܤA`\p69zA}c;D;@1 N}P@Py؋lhE1>9\9V-m+܃iB^o+˧{[*vulwġ)^woTXYQ5nHmt$N 6?-.$w@a@q!/긥3{ԑ+n}͵.Aڪ %S+ 'd'S_E9HӍ-(Jw?^'TOj>g)ۭҡko KߊeI![ <,:&ZH+krͮ83/IZ ?.KHT` 2 1{49}`q? `%nT Xnbj3.4ݦxґ{`;;`?"_rS m~j|ّg}{&)T2!CA#Yc C2fdu'٘i ~{祢_ di%P?34ʔ3k&P2\V9GDVWX:kW% vě$M˕i+k-Bk߿g̣{:,FǫWf<=Qln2v@ZF$#^Y?5A n%j͞DD-%ѱΣH_s2;p0[A D"(4;wMo۶)B(5v ^̀0*K<%7uơ25]͜'0 z]_qH,uc-g|2.J8x sbҐQ%6ToA.ׂ|d)_ܵaQ}8KĈ2Q._'\ i%1~@%@~x*WmEnbܔ!Jœй#c8  11=˧5-:*rj!Cj%;e)<_KV" gU)!0@h),^|s+}!nbUe*v/s2$ ꞯHǂ&v:P792nqD cLWE^)7ɗUP" a_z95_K;rp@f+ei7z$ANt8kn@-K~t'O 5&2ZT虓`_0}Ug,̝ 8ljx,8u?^ Y/p X9 $~uz X!5㪈`!034~|i,ӄ~#r]{VaKVO;F{Äؔ9s(Z(L@2Ko8 PW[7tomzno&x߽$b~!;{t?tmªj|1%ykHov*q,Ps|ˑKە<⎣,FH{4qqhCg0&#@Gqf@R:x.GИ%ѽֿS=NFڟe~Z;n%b^2J5֛J$w@aFyCи/SOTԍq?"I,_ XKƤ0X?̊gTpŴNى5VqsH;)9$L RqPJ:j^lai~:KNggؽcMשJT ϙOXf 6>xz5-Je3ԿG69!j@F6,3]0clAh>q~j1PP7Fao f"{Ruȃ˂wޅ"۞si{ 6uUf-`#W${?HLʓ $m{lyI@8B%2\~i!ۅ X k{ ^񺥜4B\ADejpGɧS}Bȣ6w_s `˽R0V8P?_Q"C 6o}5NQv[8#IX}Sj,jzadW@~kli11}.<%E[G lVN@7s Vl'p(nlPfH9{j$jbBߏs$_;"%7E +U_s,;$@u V1,ZݺI[M+OZ{E1TQ+7J=/GOqQ=)f4>9adK!!Ca=}~DF uRحv"~j֪~>XWV}d!FCȚCf7.. |QOC喙EeԺZw3h[Jc&T2Ͱl)B:S'AXtXO{c3h0i9bG@=4F$ ߠL"7<&V+R(͹fG@ .m~י8 IqI+rf m˖;+rrH"5dEx샑ݾw-}chm_A6bз@ʸC|nZ'[TyDO^cPe^(x%ZX)Pʳm:GYz?Qc./Ak/d4ihzS(@]pAuEd^FrPsTO_ti<-xw:\5[6P#_%_T##b6X=./ KvJkva/y#y@ާe&5:h)9ݢJ_Q<2U{7+:9[,K!!5)͍ ;[mj 5'-/;8S.v/L5W g'b囮K ̈́!!iA 6 fFF- F=RaTq/Rs4Q3J`dmTRv~283˳!Cv;pͯ)*SEr+{w׾ \]{?-VJ+QYF\JJaZ|[L=(X;iCr@Mޓ6ެuy#Eh%;o~Y#^ 7H`Vo )T=63E_T_qC]/5l$ny,ɢ³]ҽCMC{ʼn>m!0yԽ#0}RyZbZ`Xl7迋.{zC \Fm;*@ ܛ"/) K\:f**ZɊUI1 83Wq:DPi;d[ȥ@Fڱ|XѴS'%XrHv^d rTE΍Cc}ޓm ZFUas9Ş%iOQa*^\ ]4+T&:O'cx']m6\U(ͬ9 =s HH_gî>¨mȆN11 (Sv!f ] Džzh'+<׀ΊxыdG}8r/azGt%i{_l=GK"aXn9GLtҰHs>pldaEU22,ƣ~^I!ogpct8hkVm!=AFaigFֲ%Nˌz֒iJl_xI;A<ܜ >i13#d-nբ[[2xn"̸3\œXղVW2%zC:٥ɗ cr83,̭% 7GBngiϢm#-19s6+ +`\`oS!!тz즃|&C&Dol?a^z>U6q%2&&7T5zztÎ+ ;i(y?D"-7_VUWP>J`U$Wg,i_n:h~RZ;vȷ,pDy+DQԯ^10`!0y Y,LzڌEwCDw$xnB@_qu%=rkmwN/cӵ'w>t8]*a(8Bz2f5hhEe ۱'ؤ+7,4D"1pwoFtnxX:jY|_v87 >%'2:f'c=4duZڋB)*"zy{wtB&w" h 2ZejkVIxOYCu,릩8( -V)U5U[+УnR!!*sHo=-{GdoHF–lM&rrmGR^FߊȠ-p0oBo@E7%p'6Ѕ\H4G:ƽ/)1֤7*&Z;t8z Q;zcd(G[<{q1i`d?F}$95͑`)=I.!4Q96!˹*Ƿ`:0r߯O!_wl?·l=\.BQӂfߦ =u.Bwu,m)g>8K3Zix'Fa( 3QMr ~:$MZ>ꡟQyRQnǠNJc*+(c{/>ozt٢ xffLG6QNxƽxkݸPVҵmܷ:PV- cՁaFjԨ]>ٙ g1c0Ȃagi! PSkXVBTb*|3{A ZAlM82aPxן$.&EXkqZh0{N/6U08XTs}rJ"c  *򈲜5ж*ԌTLRl}2'5qόNNB@Vp_DMܔz ]ͣR' h#"O=E3ifjf.XƑx6tԨ&]ċĩ .4[ ΒZ%7=|%d3]:@ +=ll$B*q{3,)UX_4$g,/ @䨬oTHZN,4FYvjW~ga; 0z>] ,Hb^p(I(YgQn 7A "'jgA(wǒ|a8;wZ|<"{ Zfn?ϳ.ڗS4`or%gݐ.gjq/?z%tMI_q1/&(W2aH/*eAщ5nk$]TSWHx㌢ߠ/VeF2Bm~S+OYJ^=\ frH *MeWӁ*pׯ]яLH<빯 xmb :ބqP׫enJ ~VAiu0RR3LJ牜N)ζ`|))7( ̡:UDZČ%>jmbcаEt쵐R$ZM1B3p6狀kta~󾴑۵MNőO^qFP~Ő3'(|1 ۑ)$4r@(&Rȟ0lB2 jJx˅`g†tM w ,ͻ(gzIdH$+l?;=;n^ |,Y؎F;Q7uEu}`|腍,9BԎ2zm[!;VW('J:`;hBnqR5BUL.Uk%rY%Y8Xv]Ra*/7 D 2#إ͍PU4{'twdM y`cbe)tDŽ ;D-@ uX XKeojGC^)g_k'ay!dX5ZAsЈYw\Y*a8` "%>Xq844# ꩦ\G_drf[DHco`2%@iYӋ3cݚR:I{: 酦S~ߤ:zvbbMh}i;Fܰkq^YJ܈@y~`qr֛m "-b1F&="8jTY+#X%G{v߀2FњnUB ymbu)u"EU^ˌJul[} R]Ari1̝gh a4 '0Gl'@ПYEPrNC‚ɹ|Z5ۑOAP] ³܏qwh XˌH<0)kJLW{mʮPcG/IinX|$HO8%ViZJ"ts"j_T:,j4M|% ])4]X.6-z<ۼckis%?F? ׷(g6\$I^3{P7@~ֳ :PofULN#U{˚(P1cd)"Hl>nE?m1J.\xow_Vs#lѻ`'|:Grz02U՗SWxEdOeTJՉ,"|c<o?8~̓c=M [KE˜y[-vzJ\"brK4hu9z5n| MWWZeOz!A+6'@«r\ /CEVHg1GyͥyGNKzѱ.-ŭoƹȋS.Q1r} v7tTG:RaTAY_wn( wƁH?3>X#?sVQI:]Jޔ.): &4f_4p9!Xlڀ˧ŀ?YWc~-J᭡*DW5w O*G yBt-*ȉ.ȑw2ߊK;1[%!Ӗ-Wg-N5"*Vxb *0qfBIB% a(C4)-X\R4W8\ېS 4iݗwCf[V.'R-4}P|Kn[Hx0xֱVV1qV _uւ/d%̩L&U^el7[|Cо HxD3#,H09ŷ[N^ in܌PyXj>$B'ec uYm#jn癯]w;ʧ}2m]͏-k]UO |9ϐvY݂O7nSryѨ%AVZ?^bڤ"-<7 }2$"kt,/ķ Tz Tf2B;fdas5]pMf_׵xBPEË<6 XN!ݨ"^(n2iiθ0-x1޸J2h z)GNͳ7b,$EI LZOvܩSª~ZXROd?f~O'bSh"%(O\?ѓ4f½}vB0}.jcc<_WHK:v"B@6xeE]n뇓$='-F7wt5fjUxR(a&"JqR{qlB|h4ω:͓ {G.VKR{Y Nzb!.qwK s1jiR}֣ؒ`5E }20T*W3!pA,0̭lXmދ7!? X;h(jūNKKb,KɃiqjM. [r}m*4b' B`˩܎^rH gxI eDj>M.=.gh!J,^% vG`_?;"T#.z  b=.E@ܞe2P( E,l"ߝo *"u#9y(w)(S;% 0zg+ʩORe jH`җ!@ pTEV~B@eQZ8+ b!pi#@Tm 25wghty n?܃maaNJg bP4No[ Gb44QUC<0#ASI-a9v=oc $; 3,pȪ?\^-ýc!1/p (͘0F ];\yz ίU*$Hp_Ģ 0+QkfN0*1ܔCYұM3T܊<09PVzko;֤A:_X0@ryW $S]rwS |,rϊDrj?ā2E%{әV}8>_IF=C-N 3:0wpM_qD/G|ղN Lq*=ZXݹ[" NvYD4'9n'&j-8f6*c;5"M!ܑ%,ʽ=MeV0dL=*71fKY LHr>tУ AQ!E^D$z|V$"Wv؀L+{,c4_3S@DoЮ I0frc>{+"FZc<'NE ?Uƃ[UBHs# ڞ"dfnjHs^Hµ{W/?)}7pH[;C _w9@JWfu,\ Sߕ}\0pW{R&hc/$&iqG2ũt0(sܶ=.R4Ž,'ƽ E GRA,7+JŕsLS-<.GMÙ&ۖj~^v+y[ӻwF?@70vo3q-@a  kXVr.(134Fsk'06q]d]mmi"wDV }jdD]nPԣT35ON#X-Si|][(5kݜYfV"L"H;${UX%HPeIS}Ú:9Ů`5\ˏ6ʏgAռ}`iET9~EݓMhUyvjx vzv)'C }b1$jʋIqӗBG7lBY?QU-Fn vDt=DT!'̾BlR 9>9?B?rh!l׵]>]LIrf~Z(h%,yHG>6]_oPg^{ek,ʗq|}fe1Sv$.'ʂ3{?>dy1Ty|?<8@Ɯ yS X'tcO mRe3SAl_mX5IX pUƿt<3 (1~bS")H.F e4yzmfq;GT3ZTeDی֝I|ok_3,E'CNe}uS%AӉ;eJBQ?B;r: ;Fk>J.o]9彏ښ?Df˥egtK]CUTڣހ`2G1D~fꛟ@?bKز>vD8}̭sº}m[9Q癭4cW?Q+aڐʙ励ۚ*#j?mJl|Me' iWڙK[)Usb/ľCmQ+K֫65۝|y& qE RD}z"O5RnF{O%X5ozHggqOԑTb}xBDWQJ@K`i| z0T&Е@Hnyؐ$kfGN[k4iRmH@n]/h/;eNؽ )<,or} \>ɿ`o$R9&SG?8iKV tĮ c'D?`Fb}BJ2h_|y"OGW\xDӆ:VU[r):I·EO눨Ȩ4mf\#2ZIUA"(> ^@=W6}-JZQ _tRdQ#@|qgb@݌:b盆 6S~98C-pŘN̓DOnqjKٵE1j-1G \:vwEI ,2xn>*kz~>N}2m[grܹEREP ]4v.kba/1F3v;^'R_ ヿOcwYO$BwῖjB6j%` 2u>mD$emdQ:p5W-/C?@ʦӂK=\4D SGҟD|1,Al!trJϦU;C+ gŭF3m;7^ڔLog=ûW]١0Y=r  Ț\zcpvOIʺX 'WJLs~ . \k+&p^wy4-\#S0c?c6G>:[h]+1̓PBĊpo\e'Mvx={B"[2>D'nN)bmvn@v\ZSF͞(!t)UQkNCWki?}T'{mO5B 6E2E2.g|FjKT@8/\?c!oEľzֹ3 }Lm'`Cr݅rrr` =z[PRV ${HYPXa T]5/hm\۳h EJcq%+AN}ĒQ~[w{o.w%] 5ͬXfVH5(|N/(q.tG6mtLY"z ;ےBZ w0b\Ħn|[Q|`MD{{ PC>bMз("ha$km흊E|wBzhm|5vN[i>Na?҈zmZ0׷hD*2s sGqX-jl9Z7T,0`JxzswT A 3sz&|vuVX/w?iuj:5>w]"h5L͋㮯%HC)Y%Wl[{]<&r7" )dQ՝Z;e>O5 X25?{7zOzmj΁KVUiH,Yhhz ݘ" @'kq{hKHcW[H 4 aTZZK*!awmgfkι:R'p.RNu:F5#y 3Vi# ze o6k!2Ah)k{_kE@A"c,^D;YuE;b̰ ]3`ʖP ȉ3 lc*S2}g-݌g 9jKߎkc a Y/vwo(]%}u6SQԀcx{A8 qSCWQM&4afRG-uAtn?=o_KolVTS$_hQkg7)o g0-aP2>$3ǿU1!pGw6tQw?ӵrayK/d(UJJ.弧ȶw!P22G5 ~q% 56c$I!{]^$9-5(5޷j_*>jbbٹq7_YZoxUڏs#7{/uˆCôtWMo6<`| ļ t1v!?X(!zh  }…\Exb֛$i/HœP,ʎ|u}n$4me gK"" >֒GGP|]Br.ޖ0 LTkKԋn`=K7e+Ά8H3:}ʎdPA4߹YlL9~`᧑zR?iM~R^5"y] .=exdW/d]<8\u- LWe=$T)NQq7@1\Ϧ.v0|`GU ]w*6{;r,>\Սi#K'=o:m ; ֔wjG g I4q Q&})ړV؏/THՀ1C /iJTV2ifP2pcQ/3a68b8&E)`zk$`:JhYF+dzuyVi1Yڲś3gN6Y~˲fs\- #3.4Qr.jwe@}""Umihgc &&Th%Xy_T a;?&ˁctn2ZA{[&L`|0?02_$*iVAˎl:N$B /d#U03C) '>ĘiF!t?ʟCYXO !!OH?t A%f$,2tHp~4OO}#0.WDS2 %o=Kt3uo/_HiXf!{1"DzK>r䛫ejuq(rvK iMC#s1?mWŧIAPк軨\Vjc=xM1M!r*:2ಾߎs^Z,a r&xxy?[뾭TnKZ9ߒFؓ8Ƙn _nՉBr^ >›O a#0T$W> NбR #Zz% N2Wʃ:"Mg8EL$_!_N1l!LJs+Ut|{Hin+|F\/&:@L>jKw;[wQza"m^ϑƚj8ENdPz]#!u2]ŗy@v7"YQys澞,C#.G 7~$#f4bU;thw;^rэ4+O翮Wf%*~ݚI 哊kS]+]p,]: N8VMGC|^ JV]^U[6?lQB[>XQ3VbR\ 뿌0 &\~0&$-9F au}"ObN܂nq4:VZn661_HKm[CTR$xk`%kH;ρnQx:iU8l]LmzbuER+Ք}Z[~_2ߊokMݯp|>/]q2]ÔM/m6YKABx'%9OPH5]Y1 c8h)kU+Fm;b\ FaxuCL1dM-C-ҕ{ֳFp\eXw7,M,FoP2-{1Ih0Qt.Rr!ڿ.GB;ސߒ@wڨylZ-hRcM¶LYO6LPy^0xp:8m׈֨I4&ˬlt]agjjא#ǻr1wFC{g MowAi$ζĜjS}2(d1 -:_si,J˵334vwf;TR&cNoAs[5gg7Iܣ'=eGʶ.\)zW$P8W#g)rl K^~t?3Zл\ikDĤ xFmٵmh*Zj95j$KdFv/jF!W`tHEc`m:djk' "IA>o#p FS YZ