openldap2-contrib-2.4.46-150200.14.17.1 >  A dp9|K,7J*fol wS&y]4[RޣR:x%@F ^;ㄸoI۪^0 ͵u6@Sa8TV)-wM MRh(@\L hYZm̵46)x h \kj8|y s /É\ @ !$.F@444024904c70422c4f1e6a5a80cd8c74d886fc905b31b9b854b1bfe38c20f341c567591fd6685c77dd349dd37ed1eff42c42498fdp9|t\vBRw嶰4JգR0bg &eSw{\(񌑐bbImY{tp|E\!g C5-U^IѣBq\tU>W3O#=l[(Pӵ~k**VSN!kئ|Ef\zPTd=!}۵釩xUji{uB`VQ#cl7wroϼ#D~Aw*,`&.q[dL\7q|SCjܺKšj.>p>{|?{ld * CLP\`y 44 <4 4 t4  (4  4444 4 c (8B9B:BFhGh4Hi4Ij4XjYk \kH4]l4^nbncozdoepfplpup4vpwxT4xy$4yyFz{ {{ {&{hCopenldap2-contrib2.4.46150200.14.17.1OpenLDAP Contrib ModulesVarious overlays found in contrib/: addpartial Intercepts ADD requests, applies changes to existing entries allop allowed Generates attributes indicating access rights autogroup cloak denyop lastbind writes last bind timestamp to entry noopsrch handles no-op search control nops pw-sha2 generates/validates SHA-2 password hashes pw-pbkdf2 generates/validates PBKDF2 password hashes smbk5pwd generates Samba3 password hashes (heimdal krb disabled) trace traces overlay invocationd s390zp34.SUSE Linux Enterprise 15SUSE LLC OLDAP-2.8https://www.suse.com/Productivity/Networking/LDAP/Servershttp://www.openldap.orglinuxs390x8p( ~8hp) w')((i '(`~HJp'؁큤큤큤큤큤큤큤큤큤큤큤큤dddddddddddddddddddddddddddddddddddddddddddddddddddda29e90de58f7fc18fbe7962fcfbe5add2fdd3c85fe715a1d6639551f37d3936ebb625d4bf1bc82ded229864aa6ad0e9218032064a905a9585bbdd16006cba4be3fc29e4e717f3fa44236e6b004246cbfb579d2bb816398755e4a071ede5d40acf8793334aae837231eeae94f23f04c17a6e38e846cc1efa57c12d2a34dacf79d2f61a1ff922f16618fe8becd68d62b51badb81a6f266f384e566bed25b3c920a122e4a385013cb32f836ecc2b50b34a02225c1ebfcd9861f6580fe7e752eeddd3592f976ca689d85c457aaec0f6af293783d07c3304f5421f3a8428416b1dbd64092804eb796326c1a11a430c29ccd00ea0d3e6fa4dd3a7fb4288970ed4d1958e084b9ff54510aea552ca6661b6d9f36a00ae11a6d01401bb0ebaa0572f1606ae656d25d81b1df7e91894b59b1cda9546deacc1ddffe0e9b5db1982376efa1fdb13a9dcc49ef2f54f573378a09b32679cfd6b5a6ffd009998a6dea39888d4f6148a65054708edaf15a3b796b766e7b8724b18c841c5d405629f80dc686a76ab1ff5303bcc6b5d36b7f6e7fa20481975e2b7fff375bab602290db5c7f796534e6a4b3dd96ad16264f717f1d442498571cd3ca6ef809ef67f9ec106bd4f64584d26c7788713fdec6736ebadd99e17c817dc807dea3fceabdbf0cd7b17865ed827efe7c3a3388263f630ec8edfe6db8571e7e8a1c97ae2addd83cf81f77949e91fcd1d040e86ccb662118e9ddc449b0dde6f55fe1052a313730ff351787156706ae5ee992b77827c919aef0248ef1f846032e026eb88a06c5fa9d8fdce3955d4aa29cf9cb1bab260523d73902e3d57aac9129137d2e6f6ebe792ad2b2b62b0b37251ef67b12b2f12ad8ae2840240d6def2202970f6b62daadfeed65d57cf5b8ab5a1b0b9927dd05e1b0fa4d17885adf92d2de83287ca6445027f08531867c265cc9bd5b200e01c71642d1b3e6ca6c60960035331852ec7c4c5af1f78a03fef0e2758fa7c296b29698018f89f2bab899d100df95c2080ca2c3fd5b7d738926382e787cce2e1a1b395b65a4b02a2ad01024f554576ff5a4426f8e4af0d7f7229938a356bd132fa0c0a1323f07e24fc2916523838aab85e43703a44abfda0eb2afd081d6cd2d2600ef6f34d5ae4c1190a00e2ddd2b12c70f90b0ecb63f3e49c7621f81addpartial.so.0.0.0addpartial.so.0.0.0allop.so.0.0.0allop.so.0.0.0allowed.so.0.0.0allowed.so.0.0.0autogroup.so.0.0.0autogroup.so.0.0.0cloak.so.0.0.0cloak.so.0.0.0denyop.so.0.0.0denyop.so.0.0.0lastbind.so.0.0.0lastbind.so.0.0.0noopsrch.so.0.0.0noopsrch.so.0.0.0nops.so.0.0.0nops.so.0.0.0pw-pbkdf2.so.0.0.0pw-pbkdf2.so.0.0.0pw-sha2.so.0.0.0pw-sha2.so.0.0.0smbk5pwd.so.0.0.0smbk5pwd.so.0.0.0trace.so.0.0.0trace.so.0.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenldap2-2.4.46-150200.14.17.1.src.rpmlibtool(/usr/lib64/openldap/addpartial.la)libtool(/usr/lib64/openldap/allop.la)libtool(/usr/lib64/openldap/allowed.la)libtool(/usr/lib64/openldap/autogroup.la)libtool(/usr/lib64/openldap/cloak.la)libtool(/usr/lib64/openldap/denyop.la)libtool(/usr/lib64/openldap/lastbind.la)libtool(/usr/lib64/openldap/noopsrch.la)libtool(/usr/lib64/openldap/nops.la)libtool(/usr/lib64/openldap/pw-pbkdf2.la)libtool(/usr/lib64/openldap/pw-sha2.la)libtool(/usr/lib64/openldap/smbk5pwd.la)libtool(/usr/lib64/openldap/trace.la)openldap2-contribopenldap2-contrib(s390-64)@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)openldap2rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.4.46-150200.14.17.13.0.4-14.6.0-14.0-15.2-14.14.1dZ@du@bx@bu bX b; b; b4t@b/.@b[@``KW`/@`+_@_@_/@_FN_?@^^^*@]B@\ڭ\r@[H[@[vZ@Za@Z@ZZ.s@Z@Y*@Y*@Y@Y@YYp@Yf@Y7Y6@X@X7@X$a@XWk@WbW;VVɦVŲ@VŲ@V@V@V@V@Vf@V^@V\:@V@V @U4@T@Tuwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comvarkoly@suse.comvarkoly@suse.comckowalczyk@suse.comckowalczyk@suse.comzsolt.kalmar@suse.comzsolt.kalmar@suse.commichael@stroeder.comfvogt@suse.commichael@stroeder.comrbrown@suse.comjengelh@inai.demrueckert@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.comhguo@suse.comhguo@suse.comjengelh@inai.dekukuk@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comlmuelle@suse.comhguo@suse.commpluskal@suse.commichael@stroeder.comhguo@suse.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comrguenther@suse.comjengelh@inai.de- bsc#1212260 - crash in libldap when non-ldap data responds * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch- bsc#1198341 - Prevent memory reuse which may lead to instability * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql * 0242-ITS-9815-slapd-sql-escape-filter-values.patch- bsc#1191157 - Correct version specification in ppolicy to allow submission to SP3 for TLS1.3- bsc#1191157 - allow specification of max/min TLS version with TLS1.3 * 0239-ITS-9422-Update-for-TLS-v1.3.patch * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch * 0241-TLS-set-protocol-version.patch- bsc#1197004 - libldap was able to be out of step with openldap in some cases which could cause incorrect installations and symbol resolution failures. openldap2 and libldap now are locked to their related release versions.- jsc#PM-3288 - restore CLDAP functionality in CLI tools- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression reporting is bsc#1197004 causing SSSD to have faults.- jsc#PM-3288 - restore CLDAP functionality in CLI tools- bsc#1187210 - Resolve bug in the idle / connection TTL timeout implementation in OpenLDAP. * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch * 0233-ITS-9468-removed-accidental-unicode-characters.patch * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch * 0236-ITS-9468-fixed-typos.patch * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch- bsc#1182791 - improve proxy connection timout options to correctly prune connections. * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch * 0228-ITS-9197-fix-typo-in-prev-commit.patch * 0229-ITS-9197-Fix-test-script.patch * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service. * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch - bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN parsing in ad_keystring, resulting in denial of service. * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch - bsc#1182412 CVE-2020-36228 - integer underflow leading to crash in the Certificate List Exact Assertion processing, resulting in denial of service. * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch - bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service. * 0224-ITS-9428-fix-cancel-exop.patch - bsc#1182416 CVE-2020-36225 - double free and slapd crash in the saslAuthzTo processing, resulting in denial of service. * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch - bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service. * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch - bsc#1182415 CVE-2020-36226 - memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service. * 0219-ITS-9413-fix-slap_parse_user.patch - bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service. * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch * 0214-ITS-9406-fix-debug-msg.patch - bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck). * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch - bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read). * 0215-ITS-9408-fix-vrfilter-double-free.patch- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime. * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues where openldap would crash due to malformed inputs. * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch- bsc#1179503 - fix proxy retry binds to a remote server * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of service due to incorrect validation of modrdn equality rules. * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch- bsc#1175568 CVE-2020-8027 openldap_update_modules_path.sh has a number of issues in it's design that lead to security issues. This file has been removed, from the package, and the %post execution of the install. The function is replaced by /usr/sbin/slapd-ldif-update-crc and /usr/lib/openldap/fixup-modulepath, through the addition of the source files: * fixup-modulepath.sh * slapd-ldif-update-crc.sh * update-crc.sh- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509 SAN's falling back to CN validation in violation of rfc6125. * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch- bsc#1172704 - Change DB_CONFIG to root:ldap permissions. - bsc#1172698 (CVE-2020-8023) - local priv esc via start script chown -R on olcdbdirectory path. Remove chown -R on start to resolve.- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch- bsc#1158921 libldap-data should be requires, not recommends to help prevent user confusion around configuration ownership.- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect authorisation of another connection, granting excess connection rights (ssf). * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch - bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth incorrectly to another backend, violating multi-tenant isolation. * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch * patch: 0204-ITS-9038-Another-test028-typo.patch- bsc#1111388 - incorrect post script call causes tmpfiles create not to be run.- bsc#1114845 - broken shebang line in openldap_update_modules_path.sh - fix the script- Emergency fix: move tmpfiles_create post from the library package to the main package's post script, which ships the tmpfiles.d configuration. Fixes the post script of the library (-p /sbin/ldconfig does not allow more statements in the script). - bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update) * source: openldap2.conf - Added a patch to let slapd return the uniqueness check filter used before constraint violation to the client. Fixed broken memory handling in affecting error response of slapo-unique ITS#8866 slapo-unique to return filter used in diagnostic message * patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch - Don't require systemd explicit, spec file can handle both cases correct and in containers we don't have systemd.- Fix CVE-2017-17740: when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack * patch: 0017-Fix-segfault-in-nops.patch (bsc#1073313)- Fix slapd segfaults in mdb_env_reader_dest with patch 0016-Clear-shared-key-only-in-close-function.patch (bsc#1089640)- bsc#1085064 Packaging issues have been discovered around the openldap_update_modules_path.sh which has been corrected: - the spec file was wrongly configured, therefore the script has never been called - the script should create the symlinks first, as slapcat is useless on a system which is already affected.- bsc#1085064 Add script "openldap_update_modules_path.sh" which which removes the configuration item olcModulePath in cn=config which is after upgrade from SLE12 to SLE15 holds inappropriate information. If the cn=config is being used on a system, the conflicting items in slapd.conf are ignored, despite of it, the backend DB configuration section has been also commented out in the default slapd.conf. In case of correct cn=config (the olcModulePath has been already removed), the script stops without touching anything.- Upgrade to upstream 2.4.46 release - removed obsolete back-port patches: * 0013-ITS-8692-let-back-sock-generate-increment-line.patch * 0016-ITS-8782-fix-cancel-memleak.patch OpenLDAP 2.4.46 Release (2018/03/22) Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717) Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373) Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687) Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791) Fixed libldap MozNSS CA certificate hash matching (ITS#7374) Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389) Fixed libldap MozNSS initialization (ITS#8484) Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650) Fixed libldap memory leak with cancel operations (ITS#8782) Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705) Fixed slapd to maintain SSF across SASL binds (ITS#8796) Fixed slapd syncrepl deadlock when updating cookie (ITS#8752) Fixed slapd syncrepl callback to always be last in the stack (ITS#8752) Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778) Fixed slapd CSN queue processing (ITS#8801) Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720) Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520) Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226) Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404) Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692) Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752) Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100) Fixed slapo-syncprov memory leak with delete operations (ITS#8690) Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444) Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100) Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607) Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800) Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486) Build Environment Fixed Windows build with newer MINGW version (ITS#8697) Fixed compiler warnings and removed unused variables (ITS#8578) Contrib Fixed ldapc++ Control structure (ITS#8583) Documentation Delete stub manpage for back-ldbm (ITS#8713) Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121) Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818) Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715) Fixed slapo-syncprov(5) indexing requirements (ITS#5048)- Use %license (boo#1082318)- added 0016-ITS-8782-fix-cancel-memleak.patch- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Add openldap-r-only.dif so that openldap2's own tools also link against libldap_r rather than libldap. - Make libldap equivalent to libldap_r (like Debian) to avoid crashes in threaded programs which unknowingly get both libraries inserted into their process image. [rh#1370065, boo#996551]- use existing groups instead of inventing new ones- added 0012-ITS8051-sockdnpat.patch- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- Added OpenLDAP new feature implementing OpenLDAP ITS#8714 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- added overlay trace to package openldap2-contrib- Upgrade to upstream 2.4.45 release - removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch and 0012-use-system-wide-cert-dir-by-default.patch - added 0013-ITS-8692-let-back-sock-generate-increment-line.patch for supporting modify increment operations with back-sock - added overlay addpartial to package openldap2-contrib- Remove legacy daemon control that was used to migrate from SLE 11 to 12. (bsc#1038405)- There is no change made about the package itself, this is only copying over some changelog texts from SLE package: - bug#976172 owned by hguo@suse.com: openldap2 - missing /usr/share/doc/packages/openldap2/guide/admin/guide.html - bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546: openldap2: slapd crash in valueReturnFilter cleanup - [fate#319300](https://fate.suse.com/319300) - [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545) - bug#905959 owned by hguo@suse.com: L3-Question: Are multiple "Connection 0" in a Multi Master setup normal ? - [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546) - bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545: openldap2: slapd crashes on search with deref control and empty attr list- Drop binutils requirement; the code using /usr/bin/strings has been dropped in openSUSE:Factory/openldap2 revision 112.- Remove superfluous insserv PreReq.- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch to let OpenLDAP read system wide certificate directory by default and avoid hiding the error if user specified CA location cannot be read (bsc#1009470).- Add more details in the comments of slapd.conf concerning file permission and StartTLS capability.- Test for user/group existence before trying to add them. Summary spello update.- Move schema files into tarball addonschema.tar.gz: ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema yast.ldif yast.schema - Package previously missing schema files in LDIF format: amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif sudo.ldif suse-mailserver.ldif (bsc#984691) - Fix a minor issue in schema2ldif script that led to missing attribute in the generated LDIF.- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.- Move ldap.conf into libldap-data package, per convention.- Move ldap.conf out of shlib package again, they are not allowed there for obvious reasons (conflict with future package).- Build password strength enforcer as an implementation of ppolicy password checker, introducing: ppolicy-check-password-1.2.tar.gz ppolicy-check-password.Makefile ppolicy-check-password.conf ppolicy-check-password.5 0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch (Implements fate#319461)- Remove redundant -n openldap2- package name prefix.- Remove openldap2-client.spec and openldap2-client.changes openldap2.spec now builds client utilities and libraries. Thus pre_checkin.sh is removed. - Move ldap.conf and its manual page from openldap2-client package to libldap-2_4-2 package, which is more appropriate. - Use RPM_OPT_FLAGS in build flags. - Macros dealing with old/unsupported distributions are removed. - Remove 0002-slapd.conf.dif and install improved slapd.conf from new source file slapd.conf. - Install slapd.conf.olctemplate to assist in preparing slapd.d for OLC. - Be explicit in sysconfig that by default openldap will use static file configuration. - Add the following schemas in LDIF format: * rfc2307bis.ldif * ldapns.ldif * yast.ldif - Other minor clean-ups in the spec file.- Use optflags when building- Upgrade to upstream 2.4.44 release with accumulated bug fixes. - Specify source with FTP URL - Removed obsolete 0012-openldap-re24-its8336.patch- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch into 0010-Enforce-minimum-DH-size-of-1024.patch- Upgrade to upstream 2.4.43 release with accumulated bug fixes. - Still build on SLES12 - Loadable backend and overlay modules are now installed into arch-specific path %{_libdir}/openldap - All backends and overlays as modules for smaller memory footprint on memory constrained systems - Added extra package for back-sock - Consequent use of %{_rundir} everywhere - Rely on upstream ./configure script instead of any other macro foo - Dropped linking with libwrap - Dropped 0004-libldap-use-gethostbyname_r.dif because this work-around for nss_ldap is obsolete - New sub-package openldap2-contrib with selected contrib/ overlays - Replaced addonschema.tar.gz with separate schema sources - Updated ldapns.schema from recent slapo-nssov source tree - Added symbolic link to slapd executable in /usr/sbin/ - Added more complex example configuration file /etc/openldap/slapd.conf.example - Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap - Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap - Added patch for OpenLDAP ITS#7796 to avoid excessive "not index" logging: 0011-openldap-re24-its7796.patch - Replaced openldap-rc.tgz with single source files - Added soft dependency (Recommends) to cyrus-sasl - Added soft dependency (Recommends) to cyrus-sasl-devel to openldap2-devel - Added patch for OpenLDAP ITS#8336 (assert in liblmdb): 0012-openldap-re24-its8336.patch - Remove obsolete patch 0001-build-adjustments.dif- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch to fix CVE-2015-6908. (bsc#945582) - Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch to address weak DH size vulnerability (bsc#937766)- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch to fix an issue with unresponsive LDAP host lookups in IPv6 environment. (bsc#955210)- Remove OpenLDAP 2.3 code and patches from build source. Compatibility libraries for OpenLDAP 2.3 are built in package: compat-libldap-2_3-0 Removed source files: openldap-2.3.37-liblber-length-decoding.dif openldap-2.3.37-libldap-ntlm.diff openldap-2.3.37-libldap-ssl.dif openldap-2.3.37-libldap-sasl-max-buff-size.dif openldap-2.3.37-libldap-tls_chkhost-its6239.dif openldap-2.3.37-libldap-gethostbyname_r.dif openldap-2.3.37-libldap-suid.diff openldap-2.3.37.dif openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif openldap-2.3.37-libldap-ldapi_url.dif openldap-2.3.37.tgz openldap-2.3.37-libldap-utf8-ADcanonical.dif README.update check-build.sh- Upgrade to upstream 2.4.42 release with accumulated bug fixes.- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements. * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch * Remove already applied patch 0009-gcc5.patch (Implements fate#319301)- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks for Berkeley DB version- binutils is required for "strings" utility invocation in %pre [bnc#904028] - Remove SLE10 definitionss390zp34 1686836233  !"#$%&'()*+,-./012342.4.46-150200.14.17.12.4.46-150200.14.17.1addpartial.laaddpartial.soaddpartial.so.0addpartial.so.0.0.0allop.laallop.soallop.so.0allop.so.0.0.0allowed.laallowed.soallowed.so.0allowed.so.0.0.0autogroup.laautogroup.soautogroup.so.0autogroup.so.0.0.0cloak.lacloak.socloak.so.0cloak.so.0.0.0denyop.ladenyop.sodenyop.so.0denyop.so.0.0.0lastbind.lalastbind.solastbind.so.0lastbind.so.0.0.0noopsrch.lanoopsrch.sonoopsrch.so.0noopsrch.so.0.0.0nops.lanops.sonops.so.0nops.so.0.0.0pw-pbkdf2.lapw-pbkdf2.sopw-pbkdf2.so.0pw-pbkdf2.so.0.0.0pw-sha2.lapw-sha2.sopw-sha2.so.0pw-sha2.so.0.0.0smbk5pwd.lasmbk5pwd.sosmbk5pwd.so.0smbk5pwd.so.0.0.0trace.latrace.sotrace.so.0trace.so.0.0.0/usr/lib64/openldap/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:29423/SUSE_SLE-15-SP2_Update/4412059677ec11eab7dab6a8ca4deb1f-openldap2.SUSE_SLE-15-SP2_Updatecpioxz5s390x-suse-linux     libtool library fileELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9106ad37b372c8f7ea1a3ba9d1363fd33b160aa1, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=eaacf009ad7039d68fcd2ea87d5d446dc34c8c15, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=683b493ea202c273502404622a3920b917c1541d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8b67f8be883d4b814c6e3871a61c3964185625c8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c02f80e26f653b4f21b4480de6e6630910d808a9, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ed178c19b5c8059c2e9534553b424ac4ef73ade9, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a1f53a816472850b52b5812674b7cb20bc4d03c6, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=34cae6931978caf3df560563c611b50235a1e5f3, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5b90ca8470a31fdd9e8fb59b1ce2e6cf63445dab, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=af363fe97155a7fa15cc9713b712fa251aaad777, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1c674b09644884112ffcbfe7dd67c659bbcab4aa, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e158ba98b9424bd54ade754678fdf5f4d8bfb4d0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2197fea8381c4c65b62d3b496da2c641afae4df0, stripped  !%&*+/0569:ABPRRRRPRRRRRPRRRRPRRRRRPRRRRPRRRRPRRRRPRRRRPRRRRP RRRRRP RRRP RRRRRRRP RRRR'xAT!utf-8aebae5b60e2153a4ad80cdc1060dd1f661f37864653702be2be0744aba236d21? 7zXZ !t/.] crv(vX05jXgsIfu/w|ZWn2࣠XJiEa9wT E3p-EHnTy'j$n[BkѐؖTC>9T(R>f'M*K)K<uSh҄8@K =V1ZtcQj~桑Ӻ~hS) ~Eغ:)/8y?>;Lg8P#X0GUBc 3ζ3}Q'n]Tw aH ȍDk,.ua7b`yG ?] ZXa;jʶ\ldrڪJOY{Tӗf4,EJZ-)qꖷꎄ6Ï8s̈NPkR =doVqÑ.mq * R$!QbhB4+1Mu1i˖]v! Z0k\k 5Yهg|,醵8{f?ExՁ{+LW lK`讂zWDᘂ9 ޖ#UEƴ./gMb3]qk뢌%6oBq(&[.j{1l*5wxf`[=djayݾ,pI3zMc}*QԳ7\iYΟ(ўr۷ve>'06z[q8$qgtNP +$DM!EμJhM$rf?sRr[u K憰.Xt->|4A zwέosJK@Yh~*ab1TWwiݒdV:k|L+-&aUmdYW,yuތ< { Kƿ8f;":^%vOeٯy*\Pt.-N?"K)ZgʜCq nioo[N ϡCk'z*@TsxH sH W|zN :Ot{@Kk)DE3~Ɏf^+obKe 4N~Vnu搵IKܹ𲧤X2Ny\\l[Q0E1I5-!n?wn9C5ze /m9{'k&{Lv?DH5Fw%/]1,t!=qY˥"`}n cxd u2=תvE@sQFi7?YBue]KٽFAw-DV_ca@^DJiafPXu^h%S>\2Z ͅlYx~M{C:4XMdȓHV2@)7kI_ZE?}( Tb-/-qxLG y gŸƛ?[(-IVܐ$ՓCVd]+NA;Nhe Ji\<#_tZ!{1 |ٹyD iu,A=e.?^,)?q٢X 4/.r8K ʍ_*;'33|<[N]N媄ϐ A]Ĕ.Fdk Y7Lފ$c'Yr )geSD h7LA%7vTf7 m}Fkd#>V{}Ē1nBH'EsI(]&Wvc: 'm!&!%5+>^&0Xn`cyɬ# هaޜd~ʔoG֭X ̇F`؏k>=8yPy/ʂll>:BЙmJ%LeI͹3e!b Í#c @7=cdI~q:J?p6^?, YiX3hL&>A*e[H>jQo1hdqNmiuܐaTrBGЏT#]OzOm uiPEgHƧIK| iH:ֽ 1N4fJ:"2:>(rkܝT1l E_\STT}DŶ8n=7 ־77 .'M0hy>EpjdKmXL+J'P{8dٙH'ÂaD_}]ɞٞFzQ ,"ٚ=ˍF~#.-Eݴ i];9l!(+zXK3Gj x(a5143TIf~{5FU4ʨPxz$c e;2[R2,TjAd&Q!rfP{ =x E72&ԨOgw}{6}Ud|-zn阚zWE,a4 ҳWh/[lwXd1іl%$kv!~F AIZfZ`y'HWF %J=V&L j"H'1Q%ssT~ ~Erw|,M^*P܇r*~21/2`@vXc$5$tws8'Ÿ,8q2?`4lWԧrj#ڤ_tN͞F|4iɐj 7`4!(VI0yKLM@(){UZ;&l"}[R?ާg3E }pl ,wH,oi9SRleĸk+di q ^96~(k>Mq ?;eH HLw.@|&D1>en,$XhB{2`|,(x1j KxL)qW P,JۚAp<&s '0LmJxz5y 7j?%# =Txy_7*Zd/}Jg W|e!g ˸۠\x4"UYd{<IʨZҽi-X]:G$-gr4N%p}cpM"w%;carь=f!H uxV4$}ں=vmcҰ%Xػc/&0c0he3#ؓ+nM=]iN?*uJ@aS\0hq =nv! ƞ HȋF(0'cV1M9 ڤ=Id F;XICv7t^=ĐlJsSչ FJ#~O֕|W Stڐ[;%漻o?R yAӃe%F2B сfz5\:'C8=_T-/x .z_FCR]ޢjʚ4r_ *-%TG"OL$btDb"1dhmբ$7 ͲP!Q%PV$@H~t~0Ԥ^,4K&y+i2I/ь]^L|UULKؑki<&,lQ"v2Nol.4'ϻNȟXR˜m`¼G!ljP}y!HF ݈La`YRUKUgK9!"Nsؖ9(Rۍzh\O^V/W o;o;:\w`4n{+F GK3Okh邬7fSX<ދWzI?l~{̢ ySqr؅oMaTBA T@Ip?Xkvx&Kwո:,-sYEUXrjxLJNm_{v7]VuMX@a /d?^+©יLT{Xim[#o{B#"O %֒9wk aIⶺp/Ly+"۾ߨGz_L" &GE_nA41R~<ajC\8^=c anC~qr-h1ZfrOgve0 7k՚pv^0KYpE ̦ ~y)Ւ֤ ؾ,Ah/v97YM΀n`Pl Ѐ(&H}/;p?s_׶,jrs>US6bZqpT\LL9ML#D4X~@a>{;QkwCa]X4_:'.O0fk"1X~7Cӡvf.NBՋ^v3CBeܼ":r>>c2諄~ˬ(֬/ᏠH+=#Ŕ~ [d .҂;ja͊tu}lj4}Cxc=kLIc %GwBZOFCU1h-3wVA>O،{}GqOي[sI=hfJٚ|pR?x:Gjax:(<7+;'ێ wW:ҩϊiײeG{3.n96yTzЍP-#2cGiR~58Dž0Ho=AekRl]5._|nFA YҠ.=&i|cGb=)G;9 IL=K'qfF> DhJ \يCI%G[(*=h_y :gGfh%̩ [ rŞ2G%m8WcV%MCAES]yeV˳q5}>P]qt}FaPSwz^8!"cV{U]"X A.WX+Ki1-CKf &q81ɎUDZ%5]F`BRbSZ EUgy=*R<-''TZh mB}CɵxƁۚT1`"t}0[Y^*ɷA]韾NnѾz~-<9$]wl/3[{AY.]PLhhò-Y)qV}q\kZœU~-_H*V>g]vP1c> ғ mV.zRzI (\ϔ >7q"~M"Wdx[탻G'hΒm]<4{MZKB"g~U2dPɞ5ԋ9 A_9YyBJãرq;' $6Y4>Ęշ]Ӄԍe.THU']{[McJ= :X|VX36ҹo$k~߶u Q5Q8<| pKKPaH}o^%z{bÉw -C?s% t0"1/hu^k@ eP{vITld<Úhtvwcvi/8Y|>6cFb+F 4yxxϴ5e_Ԝ@;x US|rdU rFI;O&^]˝5){Z+ T XTK>"Wѧ+Gr?K䣒@nCӇ2i9[l^*QLQcoٮJA2 #I%[ôZcTI-Z`y37(vMgf~ ]ПOBOJ A쓭8@ϳIbB9.U:Il_Ԁ\]R%ʾCl\4jTH- yԢ6zsyRN"&طU~69di~ULϺ RgȀd" e⃙A-# ˨IȅG7I/a-F!?h_wqk.W%q3|X8uhJd ݶDžQ<$塄8H9lZbsJb%{J\/G:PTr=-0U~}i#{w HNz=^++cƫ7pYBdvom0  mBJzӗS?rReHڹȀ`7uBZVВ[y z:JH{Ś>Fb?T$^g: B~{Z&vt'9LgwUX,xS }w0'|z&8EHQ|Y֥KgquAir~'5H^SUw= oMdI`qca4>cldȯR}_Y`;/DI'M˻a]􊥦qF(V(Q-Y?IuǷUM@q>߬Gv|U}ml*A#V "ިxcmm=q%g&|qI2!.+UR ȩxh'Wͽg>jʼn4L{&<^ÉԇvW1dБNy +d^[*=MтC7lʞQ͆bjfU6rTs-{B{P:Af;,|[z#/39 1d'&+dbOkw}tᐴMGܲL3+F-KXEm9 L `^8+[pQ2pk`^^mLhy`ҳٱg7 €Z9yBS%$dsm׼ RD= Υ;>UoBA 3.'}:2L(*N#|x{̰{n3B<5;)Jo M Lƍ*GRIGA\|^90˶Qf ̷|>5+Ak$4yիOˈ?"N:Y8(s/Ѱ>dIO*cO,Qzy%$ŃQjD}E`Y(ƪۙ5UpeB]ߺ:|(`6saURm70_RpͻL rMpalRYOV/`+9'bF}Rlbq1%V]k"Yoee*^s+Iy}yL԰;[qV~=-BץرR˰8yF=tcBJEa[$ a yq bhR~؍&5K=Q3xFFte ~R5%\#EBWnX$66{4Ek}nui?.ua"3hR8Jҍa񀠣:Q-9IrF~1Ļ6r W=0h6ӻ5H h\磊-Le2Ēy4ܟ N_1ȣ/Ho/:Ǖ@^hQAN:[ouRgIg-SiDV ̵T3+%u8 ,/ػlY;zUo6*V(Ȏ&8WD.&ZBڰ%U7 Ǽf9Y} X'J_ ϶']@^哣&!J#Qdk+dӞ*e>[_\ uy_GU=Xex^yϥ1P}Wfxi\TRwOhư6tY EmXʼnY."xx*gȚ_JD-dz^'6XmPKcb|J9 O2^5v^*܎Wu-;o9lA (}PG-M$*\TCWPa)~_cPN*34)El;D cTaDZ"DZ&2 j?{dlH#llpY /%of9Ѫ5n~9]2eS'Kھщ俟tw㖪[=:"R&\^>Ƴ֕*X^,HU: jQOIKle[a3O-lBM%t?3[U|G bⓝ*╾ް*b_?l=+@IRV;ቨӼ|B+4mlF΋cb3:tz7xǛ 4l¨b2kS)*?7݁,<< k(B.-slt3za1P_Y I .74Ӱs0" Ihk״ĝesv/R뤌d6%@31ni}>&]c "u-WĬ9tѱ /w7XοL^T9آpyMAUkˣJNf:IN< f ť$%ɣثe;3F)bS5_Y;İ `qJg;lF;MQ2 w<S}EqǪLko znY%b.oWu,yTxı-1mB*Zla| N&܊I6=aKiםAZ!é˾Y!jl5\G/=)n7v7{߭ӓ.G&;m d}H&(g+SE2j7 T$dC/kA]$)h֛$F9B l`Ws ׇkZRr;Fgao6ȄQ=Chk- n- >_Hd6V1s>( (^+UJ3>wJmSDFm_;vsHH`Mm 0lV2~ҭs|]yDb2/ⰶ LaƒJ5xAר7º`.4aMRJhqeUCwfJ[h5Q Mg,-7G=c%vg d= ^#ꟵBX)3+zx O.I] zOŕ /-rЃCLdzϹjZ}WD;5kA r7` ELs?`:Z /C뵦;oSZÎ2n T}ե]yG-+}cH]\M9˹ziyDxywbC ;G sQt[UQt=|7X*XLnb%݇1%^9FXA!Tz^'2;5;˺XY Pv|8}T=V ɹv%^a{F X8n)3G ΂ZbC!QI1&Ř?D<Gk`Rs VL*%/b^-5aN9DʶUT_Y5!%NC&CM&P6noEPcn6碥cv߾d6,e[hQ'czH1"Ka֥?"OMܣ*S RAzR'Mj ѿo$*mL%кK{%lr" z} ^`6?ׄ9 ~>HIG'}\ZE#wAR{UW,V%:αԋtsҮ0:vޮ(Kndl@w Wܰ Cm_r2Y gj<}>({N}uWThU_ぞGĞT^{+Qk1&l$%;&\Nr[Q1N 4zPOjZKIp߹a9rϛ1 abk,!D4HIsP=Kz_ο8$M ,*Tџ 2z:>QC0|:K9Jv7iH挴$*ulΰ`:@j CiwÑ🢡 *\r_ݭ}! 9"ZimĘTd'ġd-J9q26ĎXwW:38q;Z)}#^ lqaUf F'7C S*'2t|h=[Tu0e kfMPy7WK x S~=E9BqJTd*Y>qD5Õ*kv~H.gMlFغX"mv)x ۦ"ghi\e@7~2ʰ"ܶI*zs]ʖ,_ȃaP)li⯮d @0,O(C'%5iO[R/okja:#iYۓڌ=xvօj@y,'It7enְMo|*Hu;$v;N#?(ZG)ǵ۝2߽]2QP-7泘Y+˜â7 ܍ yPWKnk X?z'amdx0$bhZ贈`xIZ]${&rp^ȯq~W3 ˦O{ȐD3W;wtYhQZz|Q;#7BlkB-2M1 :b$= uܟj阢$Ǝ9ŹǷ^\bE g&$L<0|cc~3/C ̣,b%"`/Y{-3 | ADǂTCze y ^L6Q E\.MR!?P8 1]K_MFJ~.\M)nI_{Gw3#hb(O$1٬ /, pԬ3Dnde=;k*r }QLc,ju ԋ ~S;z5nt,&o⠗@JVSS3!sq@UhRb77 _P+l;4v(H؍!/ ]#9Fdz"'rP `Imrɢp"uOxQh{էtXP"u`i>i ;N6)77ePPt>l3YJ\_DRxԶp PT_;zPm sO+h6锉w[8__8{5JLb+ǥ.] FoR ڼ$Gjs+Ϩ{=-G m+ gpzsfQN5UAc 礵׹b}~L'6|ؿ*>+(bdK|[}<&8/=`76;q[xKtЈ%^d]ԏpwOhPݜAt2b2ԸI8:n5'_mq>5C埛Q@Cq=LHUW3/)jJh-F6mx(*fq|;}J畔}6ts(';Wͱɑ%;g\[<e(Wc+lQfպHb7s!ք&Lվ`4hEvnq`xdTb˔ɟk9,쮆\Q)/BV^vi >8_s!'\trŒ|7i{̞.E a!&%PƮ=gc$̑c@kXJr,Muw!4z NQ.;iRw%3Ǝa"I4#ϸ{+=ըysr-%i=ӹ;61RhSE"lYPf,=+<zjz#Ua3[Aދ l2Oԗ o25Df^(U=ߢv9>D6N65p<[| do^ , _ٽBĀ$^#51c''IvJbLPJbgF6ڊYĀyoREb茞k&IeD$6~˘~ &H m.)fuAZ0`7R~hfq|PdQVM4ca[e~jK29f>iɻY߻~ ?E)+2#F?ɏ!;FKYvaV)m@,˟Q`Vːm9gc~a]VuT$F1Ȇ4Qr7Nc'x2ZarQ-8(f?҉ FJƩ= pp!~J5VxBA)sۤ5Qy4:;9}(I_9N.b+rt Qnp潛pF*bĿބ!G)3|ڻ~HNi 6οp]Sd ~9 wtK)FcJnIjbFFe ʹ1"tZmMb<?O(6%]xzODUn[qD*.%4@1`mMƆ)joS \]AQ5%,b+mMv_lJi队q'0Efʳ/T>}6UL9I.5qtg1rz1k}iC4W(FiTey^ǿbU Kw3&|%_W=sꢞTZH],{1X-}g,]cAkl<[-5I r% _;~)̗<%^U\p=- _ax>NA2%1/7+?K5TX4jЏӜϨ}-=g+RCaL6ΰ׮r@Tjn"3=[#l8(j!mԂI 1~LօBt!ZK4ξ`-G4A`i28oT*#.,gHrVd+ҦchUqmYz7_#Ho&(ܳnFZwZYh0ô>ݑ K73Xt/a-Ӧ2gG~r?:cVg-$~ ىC NgW]a u#JeԹ/ ñ,OH !Я9'ݩɀCa&$=ő,@ۍ[QLN}Zh(M y;׍U/nFq#Bl{J?~TogU|v]ŷ^?E~^FFGPUsfyvc; lVi>Eڐ`Y-Iv`NNpXE ǰe7bm;$i r yM?0fUpL3 @ @'aJF ւpө-gь}@lEϪ$( ĽW%M(7\tK#h31|@zL@Xi.яXkM{KG*S1Շ&h23?H}~^ˠDٖiVMe/jyYs̄_l&*j>G{MͽJ1Xp~  V\K).橠R[Yt8+=;jd8D4@Q P̀GYAp;nlK0sX9/Jkq/`8 hh[N|[9 obIu{Bt` 2)-uthC~=߸V|Я%QJN2D 9iQ1+u?hQ&Mn8rUb\E_th&l[o_OE3e-Yltʴթ\G.&60RcЎZ)QSBo1iK9{fa7?Z,leI'##"s2(W ]*#?y2XU ]qaG(\fKY%QW(\ON0TB #P7m#Q<.'mPo_d6cU']g2.ЀF 1!bmnu@9uqm op2)EQ.kNwTS}1:_gmA= yl@H3|䮵 )CNmocpdprʱ&pB !\`֚v'QtF ~AA+w;IՄ{-<;iA`q\#Ιp{ =~ ájE(ށ,BgBG9 ,lP9V?b]? VC݅c:2b;V}+QcX gq 7J˙IQ=?Ao:Θ]er9[`g^w,\" ^6 b8+.[ FTw_ !m1h|g A%0>,5gv $. X,|L'm){J:br ,#/L}!crRj$OIw\FRR2?^Я Ujeؘ63i)|F֍p̀Ft$CnpfЙRd~JQǸVVF/lͿޏ#%츯[Fa"ž4*59P"9i%2v8=~:W?gʩ hH6wkOto8A{RTWWr?~zM#΄-k mYQ͓[~4E0q4*xnvŊm.17^\P ʁO\Y&l[=C[["0vh 6(t3'3޽&f!FQoF(o̹װF_hօB|O<4HLq\VGܪԤ9'b|6 )PM %vf"3摂D1Eute5FwkW٬pFjSf,< `][D|N^t9R@wO bd.0^Ar-g`'p*k!OPXX"tyX C<>EE HcCN,?"7ĎmƦxI8L!LP?h`PO9 sI4z #]]s6gJ̉DRDqມy҉kUmJ psUTJ |D@7@5p;$1~F4v=lD/+f=q9{0rS2Mq3}v[L@Ǧ1`*"4 ^;3Vӳ+e$^iS 6!htWW"]/oke|ql%%3p4C俔Vp ?n}5u􅶴aEuzVg5}Cj* n17dF2-3=Kj4Ǘ)ƓfOH-wgӓln7&:<qQHvfϾO5 voo"S+Q9]#h/f0@E#hak2Ϻ7(ɾMtNаvisycV&V#^)*oκ-69*X2ǵK\>C!ώz{q @9%wUEHv[w~vmiwwu'•M#M/4h_9ӘǏa .{) 5VύƟM2scJ );z˜w.(]kzo]_TJHUIO2cKsC XH%vy~4G׾]^]~_D,^N/`zT^1P*+G y퓿pb@fnghVo:hZ"N!odyNIPngzſ z2%]˽ѺkŊNuׇ=4sXC(|xfQQU wdQҍҴ8@e:Bl]/k*2Eiߒ,#VZ~,yHHeغEܥ5U fB%(? ܰf)q[rGG xz?eQHRJIN1m$ 6Z`b>h :}*oAxc= "dZr՜q]O5cT=#l D RgWcxXD2o%ۋa kN%͟KHzOn85S<݊EƠzaCނE?bau͕o-=tPs+aiZ8G(0Cܙ ZH3:˾j%h7q!$s}WU"c&)=#Ur^4>瑳"5*4fukA7GKkZ*Kn0# 5<@ݹqlBŭfDlBSQNcaJRB):]xS[uvz6<-u^N`2<<L1pef~^.gr9hB.ӎ|p)oUH}o1u =ri4{rLl$!m>;Hyg԰f^P3و Nu6YG^'SqprWA`S)NmKT_{u;C^Y|~ܵʭO-iŗYw[@ -ߪf_~:h;|dP 1wƺT@\Թ5@e,^q1K>-`v̌o: PT_ԛ]bKb*p&3ԀVKnjaA, *-H5xNfKaϤw'U66?M^%&ֱ(\5i|(~6ͬhkrV7$ a}~^Mȭ4qXڠ/dْ}ki[Fgw%ʟ*CY@ A|5DUK1J|doP޷>V~i;2,MCRάGqN|b@0DŽ_I\HP[Qf6E"n{iŠ /'9śW7NM&H=ȩA)p*:''ͻɹ*̇Ǻ$) ۯDYAʀ2}/<¤uw8qwՎrg)D ~YV׿]-5״îa^A+([f Qu!Z_]>4 Ɖ.R ?EJ*{&Wl\ QLٜBAܥE~im9{5)Vڝ⾁txslV:\;\ܙ|tCŸAK8wR4+{1}T\|{SE[y\R}ާ /T7C"Y2 P)A # (\f~$ŅLMK9,EIsR, ^41'oX%+1pspsXtzh?8E%Ȟ:JYuvGo ͒m=#9Ej.nPY;q% C)$VoMc<9fF1ݔG>bV~f2H$hv6EA K.b">:2 }3OO+1}.5{ d*3w< ,<@ 10ӪERP0V4?$睺 eJ~MY<ʨ\{mµ@IXkQe[VGxpO7]Ac|1B i|a܁'] 9nqB.̦:ĥKez,"`ngf[vG?gE Ew+d=AIR{sǃR5JdCkHOFˣKR2UBW]Rr:-9 gW_EE&4`@qz O:]4/U_B!/4 y]A]% ݞ*Ŝܤ2Sղ*qR{nm]gdxpt` ϣ7]5'2 i *J0MEKTAe_[ vxKPCܘI,[BYgȜT~Xڐ3$bzDWdfG x ^K.,1DTE i6UK-*SJ N>+pT¦AN}rBӊ97o9Qu$[ {Q7(!F.aBbLtb,EEJޅ¿wam;4YGR(<㻳_lp (^r4繼T{X{ @*=gGKGaXP,}wN3[jy^|@эjc!#U1%~>%YuMfw(A$̾F8^3٨j` F#9GaC 7LhR 6=rn>%u@*)Gʇ0P*HVNZҚ nyOgy)Bz5[)OD si!Ͱl\ ̵Hi yX$Φ~#i<` +֦Op. h់ahfwިñK wRCCUfA3O<*QM9MjiD(6äфM30~̥IV?#ҴQ#vjfނB΍3Aq.' Ia' K%Q=uZXh%U9(ްD/rǼɐ=z( BJ/J03d}uGA\q+5%ǐ v&OͰMo+r!ݒqޫM'vIj ޾o#k@ C [h?08 ן=2  !_Z|)T`]lONgG1.P-84(KgA=Κ_JTݜ ëp2*wVH+}FcTI׶ӧ6{ټlor.O1NXy)aEsb߬( wRHJ"RyY, -TDCTi*XPZJuNҞpU![߾Vx5;$}b[@Izad}njjP@&dg&B-)͵ӈu-` zdGF.5*E &&y?ul\ݰP=}vbMU觘;1'G*u(H12P;IuT,|-KD0uy֙TƮTD3 ooԃ%mV3Xֳ' B sIK"@%5q9Td;Uw6w'O:-sځ:si QǀW*JLJy6\&`Ϩ/2X;4c#*)!=ge@ִY]s;Щ[72wR6=9 |*.ீhFZv1_PH[`壇>Tw^g{۾BX9gAm?=J3`l@ ;Ӑ30e߰1CgƃȀvŃ _0^ނ;̃HQ˱ J8MiM<]NT@;'qjljHWK9MjW cO m)HsH 2YYbARXۣrO>y#גGگL փ!K?q5G]h>pju/\[^(buK>=eWoin@^`/lNlV}< 3` & أ$́uNXm9^A愄ڲ@ ᎫpӜf bcePՎKrɳ  #N$jVM?/hQbǎF0CRo2B fv?Vn#<(TB笄b,V닷8.%Y\]sp P#bAJ7[J*f<@Khԡ,|u0Ab6ot[p~vZ a]C>A{^L){9ߜŝi8@|!k.ъޝ[R=2'('lYB4/ ŹY=ʾ鯧īXq.h3'ŚE;\y녨m0휜/. 8eV=9ty5xDwNOiGg͏H-#f0j3@c+dTQLj\=C > ɰh[qEnzȔYBY7838b-!lD1`c]mζ;1;]4y欕D"_- i*#F_Nے~'-4F2y.Ź6\cѮ ;1:Q@-Z`SF/ U Q341S'L32t8̒Y9ZI6IDqeRiH2B t섢KؓIlۢ׀`(6ΌJ'ⓕy}"5>CN56%8b< KLeY8S-$co,bֹJQul+ʉ7/+E"+IVq׵cfs2R#euB^&єPm5Gjx謒4϶eA~6*\#jfe++0{t"C=X*Zef.+JHhyw[f fm޼H@Gbs\2B;s@gyjd:k[]J 魸"*9(Om*/GyLJ,mL^x\-|tACd=jrXP#Vh(P8Jc<ع!Ⱖ g8AF )7/i?~J{wŀV|L{I&㬮^b' n>s1Vc:v7ްʬLMGX.pZ;rǹv M/^G|Xf#5LZ鼤 6o?LN8y/z Ã4h G*3Yanq.;h_z gl ?GpI3u:5h* q4'}7\:Y6~ |l^5wEPy /M .IE TI묲Yog8'/ 1C!e}v__|Vz;aq-$zImT,Ţw̌$*E}a} {ck$Ҽ_E4&Qө(5wܰjhbg[E~3n<¦MU)1[z`!3v1-2e|K. > Y4j~H8' f2D\Q{>Cl Қ$ }3[VЩ4!g -6 u7t7;M$ݭETւc7,qGQDs=?ĄnY`S]5C[i1ȥd/(1swZJP. t~[sӔw#Qi@(Hi@kNHG`Y Ͽ OEcw)%V!>dXp JB_&?K586a a7RF8+MFDjDl[\Q&3Q^:̝{ZEHvK)ю\^#)@_er-9S2pRO2Wp>T6,,Z_?' GN,@pG߬JdrxHtHLeo{?^1N3b!>Y-02Ȋ`ٟI҂ޜ82j*,tL^"iӛRɴN ѣ_ W K[t 6i5[?rTJd݃h4^r7L&JqH_,e+b'SAxk\uR-uLK|g%>G> vsŶYGYr )pYiPn{jеQArւdKb@/Ro ko ѱv]VrqF8+EP2^uI+ T mSѷQ5W3(i*NU)kdrhQDv}c"o}+T{mu%(OqSvdG ,n8G-7F1x€o?VIѣ잼gl2O[W1fH/{cDARL"MO=CG`a V`eX38kC\kj?_*6rpyξ!aٮsqInׇsC8r_'4Z2;3KuKp~8Xrw%2)h'ueZu*z:ЬD' G-hm0n}~11`ICR:Iq9gfы/aO:YoaG S=p?Ձtf߁U>M(S%{j^1gj6Jh=AM+vTᚎ>V[ߪp *B,'o.!82"5T4ĕv,X\n-~_*[/ A#dA+m<p緇V \Y }u3*+axD=. ]ܼíy|rZ#0g'4eS'}fDwj6b$ tu ؛ߔ&'z*Bʙ{µ˽ξ4Xy A쵸T(ǟc]QW51^5G)`  5k8w0oDA kB>t~FA7uI)hK G ~{ !̡l@{1ͣwV/=ظzNnrx`vo ÿ YB/Rj HB]ܡ9 woѩ0;qwƍcF W `) l*:]j%$w1.ZǝP&Ow"|++!d JWzPnVZn{iq1:*m@lWyѷvI]8~xܔ,(^[o_z*NNP̒:vU 2÷>nćL ?uébi4$׸hs+ Y)f1;`ae#I\dy3QmG>xy܎+5&23PUnT8TZ\ѳ5zK\!`rV>Rw}Y!]:p"/^EZ0 *Z(r9ݹW5Z|CT킌0ٺT 〗 &ɻ #qU> &!ʉR1ӷ6@&ken*=z~S2anĹHY,HEHrO~0Y( zuRFAYK hr 9E捥=Omg@ đ04˳ci!̼XhP/vpp❕z[y_ ) v9ϳkv'߼7ew: 3Գkl];7gEG#Í,reP[gC2-/+M= IpZUp+oc0M< {yXAw[W}7N䎓s?(4=6"%:g@Doa?_s;3.qK{Dʼn>x1D$zWw܅HMNzo\ h{H,YIז6n RDCN ďſPXOSݔMl ?ԛOB@דTm)wUmF_vsOp(B:1GaRiEElF ܲ :3ު6Aqy2)_ KR6Β6T 7ʖ(BZFtԜގ6)0nt o כĚ4!I*,|Zqg}M22MN?1`9qc f1q f"i%2"@ pa۠ݚw0 E/ hJ.‰ӘQQscwc%`ɪCHt`wkyq* i0Hs˔:ՑjɹRPN״$#EP "@>{1/v"`#(_Lt7v :Tt[G)IE WP}da\]@!R_f 3iz`S5ׅ u4zUT!f2'INea8"䫙]ccRV[ E4~;# =%s[lY6&+ 딍?0A_vۿma%bh>'(0c8=t-`9:фN0ͅdOlM\zh$eBM!:1.Tx1 -|$KJhc 4܎v/'iMh4\`g~+xߴV=X)n;A reTuuGt u?^4@+IѸBsqB8KOx{jE=U _,;0 `<bE4Z$erDdin_Z* 2me]2G\}LzGZא{af)6zt$_@/|p&{fNYvUvTy&hu7]5,c#l:$dg+A1'`?6m#.imjˢa~૎Fp7b.FӜ|iO45Hݾ!xcqx>/k9Y1qzK@^n=uZcAbĄ)ӓhYdX7 pyX#9h6-HPf@j#l%u`!Qw!G2*u\GEG7Q@36_I.J*qH}epFpPWހ8T[n/nSF;`'+'yd',}!S` E b nm-VQ‘]B '[ ja;fU9>9n#bWRGՂ$V``[>0!"}GrL}:.o:tGATo"][$F I4of5I5Q{ś1(qM\D68w5 I8N"1Lm!Dޓ]*ӒK:4yEE>'pQJڜYd: ,8J1N5S]GF |]|[QIk;Qא.E$O 5f7Ѧ3ZPG粃>pI1ϯeO-H v/뺌0|͚`G\Axln"j0 Yl:,3_+-2c 7 b3F^7Y}^"a;Dyϵv]49AS%p"䵳mTv1@W! Df!gXm-paCGbfZB .*$Aս=*/al~ay/dIB.1 0,ȍ لN9cZ5~v7zdDon;ՙ؊+&l]::۬䵫9U6o|˶q"{s,UC9-3EՊ "mhs%Lgtuߕ8FM;;rl: AҔ-I܅`]3CP=?;eĦ*{@s4@,.uAxZvФ1lXe[GV &0_IY04 F+B&kfʭu$&^I4ʘ2 aXoU0ާtX5Q¯;]Xjb9&fDN#zG[qFk(hg>HUm^a JH .:Y( wHm"=?9"I$ߩ\y)J>\7pGtJF/{,ZT[ɷܿJajtJgECkw _muO\9Њ_]"l yEE'vh!w(َgG9dDk쟫j={Z\R4o< &vK ͻKZ6tF2t+?{"HSet_sTx3Ty6N)hVe0&W$K~9uaanIrޱ*yYoRb9V^Zsu1^αV ˔c5ĺ_ɸ}IMb[m <:P'ny}_mRq0`MP_D+-Q埜)j:̴;-zBC,y -*Ţ=#rF֠NYgX\.a>6I5t,ݶ(і CpX]fKʪ :[tq)CN(،*rU8"`_5 EA^T;Q{ڮX"ㆠ֞ez^qѱ Q1ˋAMv-3;#@IH2+fȅ*`zW# 蚨"Rξq'4l9?ǢYhCZAښ+3uxpD6t/mjl1 HaH3gbmDwM.5쳇9SPuشFpFhyں:a=FD6aMAwh NY!6y\bU?\[[(Uh+(Vp/@ڔdЏİŏ? l*zlu3\3י`pvؗr'F}Q}\ke;%Wx-y iЯkji ܪ='5q=ʝjo/zD FfO@vUEbR)]U5iU2 ?NEElR8ʃ fd(NVq<7 'L{,0;rL}.7EL22aov_! eG.0LUePt)- npYFk #cNY^GQXD%eNIܿ!$ `;c~] +Ra=_ @bۯFM m @l7ƙ>8g4Y:54CdX@Cʫ\ꂣ6{m^Ux]V=' 0$77pJURW'RT*B??7ATaY\8¸>3*wFlGNKAmjV!s5 7緐 AJ` 1(~KhZ+-|XOI"F0, 1^TGW;9gȔD!,AlIO@85iWŠ=xmV.u9Ƥ ; )25&&hKJyf¡뤐̨̬2hI9_q:a6UgC\)?6:pFks'u&2jM\% oBVœL~hԾL/̏^9q%c]\Kcq1c$ ȍ·CqgJ9G&lUPߞ@B&qehm㯋7֑0! y;̌[ |`8t?tj3X3G[՘!fRts.kkc>1S.'dx(l%z+۸Ncks = /]&&Uu|czɆHvjAJ6Y=`k=)J[*tLY*z]\*zHW{3mLCu?Xjeb3652"?zLA:Hy`Cb> X޸as.dؖ٪L/p!)*9&<({\U o'dccsoKPFM#f/ a{Jb:cxB.KM<6I1Kb9zwO#Ӭ{e],6-A`fNGQRM3*6S!b wzra$A~'v$@;=L(&j!fyk;в"r{󎟩)QWĀꎑ yXV$?./pG}#ozL&sF ȃSg)}, @=^Bp }8.8 UCD\\m(͎.q)^E S q9PZ h(hRʣa'TM[Xv>.IE?.4~@#΂\jz3$ xXcDZ4&UH")\nZ;Vr_LaqBN5镀9`P:ٱC+p޺y2 W b)!ļqKNsӀvja`grԢΑnbJaSwh! {RGݣ_QMv@%D(@B|B{egUC{i8;+>P)sg*| G»U*  Z<] 7o!Z  >4=Wґ%'?e9|6Zwgé}я$:do3J:XgğS<315'aZ/C D U:`[