ipa-server-selinux-2.0.0-23.el6_1.1> H HtxHFN ՞ ?*}}x:㭈b߮`c@pJ5<.b$Pg/1x5b74d38ee2af8015750906e697f1ff0831c07c06Šڬ]Nucے簈FN ՞ ?*}}aݏ(MCWΨJz%ުQqBy<48Y/nB0>@I?Id & K 4Xt     3  < X {      0  ( 8 f9 f:?f=F>F?F@FGFHGIG$XG,YG4\GX]Gt^GbH-dHeHfHlHtHuIvI$wIPxIlICipa-server-selinux2.0.023.el6_1.1SELinux rules for ipa-server daemonsIPA is an integrated solution to provide centrally managed Identity (machine, user, virtual machines, groups, authentication credentials), Policy (configuration settings, access control information) and Audit (events, logs, analysis thereof). This package provides SELinux rules for the daemons included in ipa-serverN spacewalk.fnal.gov=]Scientific LinuxScientific LinuxGPLv3+Scientific LinuxSystem Environment/Basehttp://www.freeipa.org/linuxi686if [ -s /etc/selinux/config ]; then . /etc/selinux/config FILE_CONTEXT=/etc/selinux/targeted/contexts/files/file_contexts if [ "${SELINUXTYPE}" == targeted -a -f ${FILE_CONTEXT} ]; then \ cp -f ${FILE_CONTEXT} ${FILE_CONTEXT}.ipa fi fisemodule -s targeted -i /usr/share/selinux/targeted/ipa_kpasswd.pp /usr/share/selinux/targeted/ipa_httpd.pp /usr/share/selinux/targeted/ipa_dogtag.pp . /etc/selinux/config FILE_CONTEXT=/etc/selinux/targeted/contexts/files/file_contexts selinuxenabled if [ $? == 0 -a "${SELINUXTYPE}" == targeted -a -f ${FILE_CONTEXT}.ipa ]; then fixfiles -C ${FILE_CONTEXT}.ipa restore rm -f ${FILE_CONTEXT}.ipa fiif [ $1 = 0 ]; then if [ -s /etc/selinux/config ]; then . /etc/selinux/config FILE_CONTEXT=/etc/selinux/targeted/contexts/files/file_contexts if [ "${SELINUXTYPE}" == targeted -a -f ${FILE_CONTEXT} ]; then \ cp -f ${FILE_CONTEXT} ${FILE_CONTEXT}.ipa fi fi fiif [ $1 = 0 ]; then semodule -s targeted -r ipa_kpasswd ipa_httpd ipa_dogtag . /etc/selinux/config FILE_CONTEXT=/etc/selinux/targeted/contexts/files/file_contexts selinuxenabled if [ $? == 0 -a "${SELINUXTYPE}" == targeted -a -f ${FILE_CONTEXT}.ipa ]; then fixfiles -C ${FILE_CONTEXT}.ipa restore rm -f ${FILE_CONTEXT}.ipa fi fiKP""$bA큤N MxN MxN N N 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b9032fc57e4321c7fb58116282652a0fb6d1dce1270fcbf3c52d7794f77b0c519f722378ae5f9d2bc73370af9c30cb96b70f5bf81e70f6a14ad259c22de2a1524a93e38efcc7f251c0f053c4ecff96dcb64cd46cc268a1e7ba177c104881d6c8c69ab9062e8451344a598742a16e84edbd45d434a355d5ba9f18d169c19ccce73db66702a08f3d6ae0b8c86898820f6f6ce6a9ef4da0fc6ffc335edb5488c5cc0ed4rootrootrootrootrootrootrootrootrootrootrootrootrootrootipa-2.0.0-23.el6_1.1.src.rpmipa-server-selinuxipa-server-selinux(x86-32)      /bin/sh/bin/sh/bin/sh/bin/shipa-serverpolicycoreutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.0.0-23.el6_1.11.33.12-13.0.4-14.6.0-14.0-15.2-14.8.0M@MMy@MM@M@Mx@MMTM~@Mx@MfH@MdMU$MOMOMGMA^@M=iM6@M4/@M.@M.@M-M-M M@L!LfLNLdLLLzLe3La?@LD>@L#HL#HL@K/KՀ@KK@KKs@Kie@K`*KK@K @JJ@J@J@JJB@J{IIIm@I1Iq@IKIFFI9I1.Ih@IIP@H@HXHO@H-w@H HHH@G߮GGgGs@G@G@G@G}G}G}GG@GC@GkGDG<4G)G(n@G3G@GJF@FS@FFuF@Rob Crittenden - 2.0.0-23.el6_1.1Rob Crittenden - 2.0.0-23Stephen Gallagher - 2.0.0-22Rob Crittenden - 2.0.0-21Rob Crittenden - 2.0.0-20Rob Crittenden - 2.0.0-19Rob Crittenden - 2.0.0-18Rob Crittenden - 2.0.0-17Rob Crittenden - 2.0.0-16Rob Crittenden - 2.0.0-15Rob Crittenden - 2.0.0-14Rob Crittenden - 2.0.0-13Rob Crittenden - 2.0.0-12Rob Crittenden - 2.0.0-11Rob Crittenden - 2.0.0-10Rob Crittenden - 2.0.0-9Rob Crittenden - 2.0.0-8Rob Crittenden - 2.0.0-7Rob Crittenden - 2.0.0-6Rob Crittenden - 2.0.0-5Rob Crittenden - 2.0.0-4Rob Crittenden - 2.0.0-3Rob Crittenden - 2.0.0-2Rob Crittenden - 2.0.0-1Rob Crittenden - 1.99-36Rob Crittenden - 1.99-35Jr Aquino - 1.99-34Simo Sorce - 1.99-33Rob Crittenden - 1.99-32Rob Crittenden - 1.99-31Rob Crittenden - 1.99-30Rob Crittenden - 1.99-29Rob Crittenden - 1.99-28Rob Crittenden - 1.99-27Rob Crittenden - 1.99-26Rob Crittenden - 1.99-25Adam Young - 1.99-24Rob Crittenden - 1.99-23Rob Crittenden - 1.99-22Rob Crittenden - 1.99-21Rob Crittenden - 1.99-20Rob Crittenden - 1.99-19Jason Gerard DeRose - 1.99-18Jason Gerard DeRose - 1.99-17Jason Gerard DeRose - 1.99-16Rob Crittenden - 1.99-15Jason Gerard DeRose - 1.99-14Rob Crittenden - 1.99-13Rob Crittenden - 1.99-12Rob Crittenden - 1.99-11Rob Crittenden - 1.99-10Rob Crittenden - 1.99-9Jason Gerard DeRose - 1.99-8Rob Crittenden - 1.99-7Rob Crittenden - 1.99-6Rob Crittenden - 1.99-5Rob Crittenden - 1.99-4Rob Crittenden - 1.99-3Rob Crittenden - 1.99-2Rob Crittenden - 1.99-1Tomas Mraz - 1.2.1-3Dan Walsh - 1.2.1-2Simo Sorce - 1.2.1-1Simo Sorce - 1.2.1-0Ignacio Vazquez-Abrams - 1.2.0-4Simo Sorce - 1.2.0-3Simo Sorce - 1.2.0-2Rob Crittenden - 1.2.0-1Simo Sorce - 1.1.0-3Rob Crittenden - 1.1.0-2Rob Crittenden - 1.1.0-1Rob Crittenden - 1.0.0-5Rob Crittenden - 1.0.0-4Rob Crittenden - 1.0.0-3Rob Crittenden - 1.0.0-2Rob Crittenden - 1.0.0-1Rob Crittenden 0.99-12Rob Crittenden 0.99-11Rob Crittenden 0.99-10Rob Crittenden 0.99-9Rob Crittenden 0.99-8Rob Crittenden 0.99-7Rob Crittenden 0.99-6Rob Crittenden 0.99-5Rob Crittenden 0.99-4Rob Crittenden 0.99-3Rob Crittenden 0.99-2Rob Crittenden 0.99-1Rob Crittenden - 0.6.0-2Karl MacMillan - 0.6.0-1Karl MacMillan - 0.5.0-1Rob Crittenden - 0.4.1-2Karl MacMillan - 0.4.1-1Karl MacMillan - 0.4.0-6Rob Crittenden - 0.4.0-5Rob Crittenden - 0.4.0-4Karl MacMillan - 0.4.0-3Karl MacMillan - 0.4.0-2Karl MacMillan - 0.2.0-1Rob Crittenden - 0.1.0-3Rob Crittenden - 0.1.0-2Karl MacMillan - 0.1.0-1- Wait for 389-ds tasks to complete (#709329) - Set replica to restart ipa on boot (#709330) - Managed Entries not configured on replicas (#709331) - Don't create bogus aRecord when creating new zone (#709332)- Update ipa-Fix-traceback-in-nis-manage.patch to fix python error (#697583)- Resolves: rhbz#697583 - Can not enable ipa-nis-manage plugin- Default groups are missing ipaUniqueID attribute (#696508)- Set min version of 389-ds-base to 1.2.8.0-1 for fix in BZ 693466. - Fix some problems in IPA schema (#692978) - postalCode should be a string not an integer (#692945)- Port 7390 is managed by selinux-policy-3.7.19-80. Update ipa-repl_selinux.patch to not manage it any more. (#691883) - Patch to fix setting gidnumber when a user is created. (#692168)- Fix uninitialized variable in password plugin (#690595)- Wait for Directory Service ports to open (#688934) - Mixed case hostname can cause issues and confusion (#688622) - Wrong timeout parameter in ipapython (#684273) - Run ipa-ldap-updater on upgrades (#688931) - Internal Error and trace back when adding DNS AAAA record (#689452)- Use realm provided by installer in LDAP Updater (#684744) - Use args for domain and server when doing DNS discovery in client (#684780) - Fix 2 SELinux issues in dogtag replication (#684269)- Add Obsoletes so upgrade from ipa-client package is possible (#684931)- Update to upstream 2.0.0rc3 (#680993) - Set minimum version of sssd to 1.5.1-12 - Remove SuitespotGroup patch - Rebase remove-pkinit patch- Set the SuitespotGroup directive in the 389-ds installation template. This ensures group read/write to /var/run/dirsrv. (#680201) - Make single line out of python sitelib/sitearch code.- Update to upstream 2.0.0rc2 (#675282) - Set minimum version of sssd to 1.5.1-10 - Set minimum version of python-nss to 0.11 - Set minimum version of 389-ds to 1.2.8 - Add bind-utils as Requires in client subpackage - Remove unused BuildRequires e2fsprogs-devel and libcap-devel - Add branding patch - Add default.conf man page - Upstream moved some utilites from the admintools subpackage, reflect that here as well.- Add pyOpenSSL to BuildRequires. (#670954)- ExcludeArch doesn't do per-package exclusions, use ifarch to force ONLY_CLIENT on non-supported architectures. (#670954) - Manually install ipa-admintools since the upstream client-install target doesn't. - Move a lot of the BuildRequires out of the ! ONLY_CLIENT conditional because the API validator in the upstream code requires them.- Exclude building server and server-selinux on ppc, ppc64, s390 and s390x platforms. (#670954) - Add date variable to the release to make daily builds easier.- Merge in changes from FreeIPA beta 2 (#670954) - Add patches to disable pkinit- Set minimum version of dogtag to 9.0.0 and add Requires for the theme we need. (#658275) - Remove unnecessary moving of v1 CA serial number file in post script - Move some man pages into admintools subpackage- Drop specific Requires on libcurl and krb5-libs (#658275)- Consistent usage of buildroot vs RPM_BUILD_ROOT (#658275)- Drop Requires on nss-ldap (#658275)- Temporarily disable building on s390- Drop optional radius package, the underlying code isn't there - Re-arrange the doc lines so that defattr is first (#658275)- Initial 2.0.0 build (#658275) - This is IPA v2.0.0 beta 1 plus all patches through git commit 4da9228fb2ac34adab8eb1884ae414236adb84fa - Removed some Fedora conditionals- Drop BuildRequires on mozldap-devel- Add Requires on krb5-pkinit-openssl- Add ipa-host-net-manage script- Add ipa init script- Set minimum level of 389-ds-base to 1.2.7 for enhanced memberof plugin- remove ipa-fix-CVE-2008-3274- Remove duplicate %files entries on share/ipa/static - Add python default encoding shared library- Drop requires on python-configobj (not used any more) - Drop ipa-ldap-updater message, upgrades are done differently now- Drop conflicts on mod_nss - Require nss-pam-ldapd on F-14 or higher instead of nss_ldap (#606847) - Drop a slew of conditionals on older Fedora releases (< 12) - Add a few conditionals against RHEL 6 - Add Requires of nss-tools on ipa-client- Set minimum version of certmonger to 0.26 (to pck up #621670) - Set minimum version of pki-silent to 1.3.4 (adds -key_algorithm) - Set minimum version of pki-ca to 1.3.6 - Set minimum version of sssd to 1.2.1- Add BuildRequires for authconfig- Bump up minimum version of python-nss to pick up nss_is_initialize() API- Removed python-asset based webui- Change Requires from fedora-ds-base to 389-ds-base - Set minimum level of 389-ds-base to 1.2.6 for the replication version plugin.- Drop Requires of python-krbV on ipa-client- Load ipa_dogtag.pp in post install- Set minimum level of sssd to 1.1.1 to pull in required hbac fixes.- No need to create /var/log/ipa_error.log since we aren't using TurboGears any more.- Fixed share/ipa/wsgi.py so .pyc, .pyo files are included- Added Require mod_wsgi, added share/ipa/wsgi.py- Require python-wehjit >= 0.2.2- Add sssd and certmonger as a Requires on ipa-client- Require python-wehjit >= 0.2.0- Add ipa-rmkeytab tool- Set minimum of python-pyasn1 to 0.0.9a so we have support for the ASN.1 Any type- Remove v1-style /etc/ipa/ipa.conf, replacing with /etc/ipa/default.conf- Add bash completion script and own /etc/bash_completion.d in case it doesn't already exist- Remove ipa_webgui, its functions rolled into ipa_httpd- Removed python-cherrypy from BuildRequires and Requires - Added Requires python-assets, python-wehjit- Added httpd SELinux policy so CRLs can be read- Move ipalib to ipa-python subpackage - Bump minimum version of slapi-nis to 0.15- Set 0.14 as minimum version for slapi-nis- Add Requires: python-nss to ipa-python sub-package- Remove the IPA DNA plugin, use the DS one- Build radius separately - Fix a few minor issues- Replace TurboGears requirement with python-cherrypy- rebuild with new openssl- Fix SELinux code- Fix breakage caused by python-kerberos update to 1.1- New upstream release 1.2.1- Rebuild for Python 2.6- Respin after the tarball has been re-released upstream New hash is 506c9c92dcaf9f227cba5030e999f177- Conditionally restart also dirsrv and httpd when upgrading- Update to upstream version 1.2.0 - Set fedora-ds-base minimum version to 1.1.3 for winsync header - Set the minimum version for SELinux policy - Remove references to Fedora 7- Fix for CVE-2008-3274 - Fix segfault in ipa-kpasswd in case getifaddrs returns a NULL interface - Add fix for bug #453185 - Rebuild against openldap libraries, mozldap ones do not work properly - TurboGears is currently broken in rawhide. Added patch to not build the UI locales and removed them from the ipa-server files section.- Add call to /usr/sbin/upgradeconfig to post install- Update to upstream version 1.1.0 - Patch for indexing memberof attribute - Patch for indexing uidnumber and gidnumber - Patch to change DNA default values for replicas - Patch to fix uninitialized variable in ipa-getkeytab- Set fedora-ds-base minimum version to 1.1.0.1-4 and mod_nss minimum version to 1.0.7-4 so we pick up the NSS fixes. - Add selinux-policy-base(post) to Requires (446496)- Add missing entry for /var/cache/ipa/kpasswd (444624) - Added patch to fix permissions problems with the Apache NSS database. - Added patch to fix problem with DNS querying where the query could be returned as the answer. - Fix spec error where patch1 was in the wrong section- Added patch to fix problem reported by ldapmodify- Fix Requires for krb5-server that was missing for Fedora versions > 9 - Remove quotes around test for fedora version to package egg-info- Update to upstream version 1.0.0- Pull upstream changelog 722 - Add Conflicts mod_ssl (435360)- Pull upstream changelog 698 - Fix ownership of /var/log/ipa_error.log during install (435119) - Add pwpolicy command and man page- Pull upstream changelog 678 - Add new subpackage, ipa-server-selinux - Add Requires: authconfig to ipa-python (bz #433747) - Package i18n files- Pull upstream changelog 641 - Require minimum version of krb5-server on F-7 and F-8 - Package some new files- Marked with wrong license. IPA is GPLv2.- Ensure that /etc/ipa exists before moving user-modifiable html files there - Put html files into /etc/ipa/html instead of /etc/ipa- Pull upstream changelog 608 which renamed several files- package the sessions dir /var/cache/ipa/sessions - Pull upstream changelog 597- Updated upstream pull (596) to fix bug in ipa_webgui that was causing the UI to not start.- Included LICENSE and README in all packages for documentation - Move user-modifiable content to /etc/ipa and linked back to /usr/share/ipa/html - Changed some references to /usr to the {_usr} macro and /etc to {_sysconfdir} - Added popt-devel to BuildRequires for Fedora 8 and higher and popt for Fedora 7 - Package the egg-info for Fedora 9 and higher for ipa-python- Added auto* BuildRequires- Unified spec file- Fixed License in specfile - Include files from /usr/lib/python*/site-packages/ipaserver- Version bump for release- Preverse mode on ipa-keytab-util - Version bump for relase and rpm name change- Broke invididual Requires and BuildRequires onto separate lines and reordered them - Added python-tgexpandingformwidget as a dependency - Require at least fedora-ds-base 1.1- Version bump for release- Add dep for freeipa-admintools and acl- Add dependency for python-krbV- Require mod_nss-1.0.7-2 for mod_proxy fixes- Convert to autotools-based build* Fri Sep 7 2007 Karl MacMillan - 0.3.0-1 - Added support for libipa-dna-plugin- Added support for ipa_kpasswd and ipa_pwd_extop- Abstracted client class to work directly or over RPC- Add mod_auth_kerb and cyrus-sasl-gssapi to Requires - Remove references to admin server in ipa-server-setupssl - Generate a client certificate for the XML-RPC server to connect to LDAP with - Create a keytab for Apache - Create an ldif with a test user - Provide a certmap.conf for doing SSL client authentication- Initial rpm version/bin/sh/bin/sh/bin/sh/bin/shcba2.0.0-23.el6_1.12.0.0-23.el6_1.1ipa-server-selinux-2.0.0COPYINGContributors.txtREADMEipa_dogtag.ppipa_httpd.ppipa_kpasswd.pp/usr/share/doc//usr/share/doc/ipa-server-selinux-2.0.0//usr/share/selinux/targeted/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i686 -mtune=atom -fasynchronous-unwind-tablescpioxz2i686-redhat-linux-gnuASCII textUTF-8 Unicode textdirectory?7zXZ !PH6B/e] ce:?`ChD~*zM=\)ؗ,vPE8Oʦ~a2qZ~҅]c;q6lߋBHR5ȪŦoWޘlf F@uc"W!kB(Yp`翩P ws',20wUZwQeǠ /7v)WBĤڢoVpVbXVy@ vcoK I#)X#?^h2NW7;7uiI"N)7 Ew⠲!YKMڭMQ bG]kfj׾@]x [+}BCiν%-V=?jeY>)p㬙&p)uPvs|v xf<ÊytMŠބ&LIP^Zb$s#q%@7=W_x"LGP!F]7*ĺ4_ [K[2E 䒫[#'xޛqߋ d[* yc.i"0e[B6`Wu>&Qr/fk֒](1}^f% T%;b 7= ؽ&iy)Hc>^^2 ZN02&<}w@(mm ׅE?Q3:ipMi2Ԗ?{h#~)yTCf(M4R.\+| sj+ߛ.C)Sn}W(vRLDO室][LRm%Sdi&}]isNq}I.2b-nB[06#_v)ߡ2]ۺSxS!AXkWP0Z.kL'Nh(ux l[mGG<8Dmې|ѺxfYPё6:OSIn3]腥K7ek ?~* |]'Ɓkz눆)w, eF=$UKF+TGo8sM=k*?ڮ]vC&1ƯH*,f"QJ_RQa Y O N[}B[$|*F*͝xe_r:rzi0ĿgYz0 ~DډZSV?aWSHͬ2HV&/ ry!K1:(Cޗc'-S JI E[l@Εh\P5f8p]j]PݹEn+ )\M;߫"J7%!wwz-NY8#2[fODoaMɨ֎-G+vR/[D8scOY JbTyTb_l'[L0nE>o0\0z>:I6 Vu&T,HݍdRQd l'Pw / }{s ФU|3N ݾtm(d'94S,3}A$,^lf~/|Q\+)' )|j)V).&+y>S&T= xF;a트bْ;߽(AۨFT{\eJW <z& 6yT[%'= 0S!*r=:0 kB*i}/ ͋96ge/z&wmY6=0Ox߉PfC1B1] Up~S{ڡ̧wl7FEͥV?q3Xr\ ؂F>vdyTq%.WTE3Elu .0xRk"`w]^J*{UPZpccSMWYX|ӓ"OKUDL/Ɂg#Q&O|ZrZĞĵ@2_xʖq"9))2 M;XAnn|NAWش-Z8aFu--ͽ3S0n}VZz7QX=J0iZr2y{FׁbTv)M$܎#}E0Bel9PzD6K%p/nt7 $l e@n?F٬E+/DFB x0COc֔}a'&5 $Ztۚs44~`+S!=&d}Rvǟpd.}j;zefSBCT0\iF0Pڏhzbg澸GL֪} [^%ᏬdTYf&[y#nveӷ#F>LAR+NsT̆QKf'sߦ_W` I%ma]F Mbꪻ,8|&E(a\ 0N⑅4&jMU%> E-̯WXOnʼ]aWg>ܔ7j.(9\X/'&\Ny ?9D5It FYVX"!l~Z?$ѯPCw:8>t2_f0/3, =jFs1W{ t>hZED6=ڶZ]`vJ Vmdasi+̞O?A0 E|XU'*bQML.)J߁V+Lrka]XZ$ 頦?'_PrJbQ/4u)/n3Ef--iOP=;ZR=~J/ѐ !~Ӣ'1R&ڋY!IN&AM= >PTxv!~Ilz2׀7 Pq1( y0%+VWػ"YPŻ.9 ,U :?+B&H“8C- -CxbAFm'Y&ϏtfO;ķ%M:;.15 s&sbD]Ȑ65e ]8qYke-(K3ڊXsΒ[qs'2^LX(6;f߲܂HcGɃƧ$h>=.2kbGi$N!ƪX45det8;]~Z5f3ټ[q x^U[FGsމQ)belzcNj>$2\wљs6|Ѧ${TqL5O]y.^O1+bO+EQym e'?lH}٢c,H>X4Z<}Ƅo>wp&zxc-) @b ?耨En !_;ho6'P|5/RK9N AN0*(;jqNoj h\E&_lj\:3L&dyS#* T{a,AFK`k}Q~TOᠸ5CQdL^[k 5¿fhg^_G,;}iyC&Ƞw;; v~V0+$Ӹۿ!iRj0]Ϸ51_K*k :f?[pl+e#}DS11Jӳe #ca%y1cLuU*ȗ q@2<"1)J-jpa`_$GkoHLp#'BhT`*;? Utl(t^L"7Ojt㞦†i9y3ۦoƄtS^+91D"NQx) H>Q_fVgɴ]u 7 M%2,d/]VFEQ"rYVW.4o3iJIT? }p|BvCy&a1bz5Ҟ6eZ38k|mEp."PBMEhY6E?nIM Ao.Q6kon\d_ %lZ?c˭\`8mq;U/d& X蒜Ay0%>xoh5KcL!Hϻk޴{Xs6~ækaAdꏯ '˾f~ilN[ђΈVE-ģ]UrL!!L=AWqq ^2$5,I!wd%<2o7IK/l4}8ч,QcYד&it(}r҅_ ]<,Ef5h<AYf\iYw\ٽv9 ;JMC$`9D9jT6 m$t_YGQ^JSV jfLkTp.XqQ/F6rfi9nl| 781TpֲEQ~aq/+ƷaF/Q #C zʑ֙64mJ[T!RNd;wV3l~ţfL3Jv&/+}|u-CJnqI/9$mJR۱#d=gZ1XOhRbOS*vbnQM8)b]:TlM)A}ߒcyK- tr1_ N\cmѺIe swqɽ P`y rv\n+!T& h,e?Z׎>3 m#wbBp%ZroT{Vr26 :3R|;4OɱE"MŬWdbO8qWDšw g ݁)k]ʻ1ǝj:xR.MIEBo姸 ߿az+m;5N;;Kɩ)oʫYJyktOʸr,F@Ⱥ5ݚI7mFsy1J$ʃ&.5=;S:S3ԭӭ6wN%ڳ*9Z!?3^q(ޒ]ñ̉&|BUAIR8~ۨ,SI[4$Ď ,f Du|Чp.׈^@ss]{&P(Rc$LxHm4AmGuWOK7&N:#yZ~ioƐ"H#rY>G4"QNAQAT-+żbmډcFQq J "+r桟aŐnD9t~ I{c䈨5;oR_Wא0fUo7afW UP] c}PN)m\5s=3Kn((u( & z.qm`W-樋ge& ͒ò#@#@؂JyW.wAX%|Z⅚5kM22-_L'צtC-ƯA^,%:}&JZ X3Hp8 nW†4E McBpe1WZWup1!3H %φPd - 2Ŗ~F)=MOPq1s Ӣ37*X:NúI> Sp7Rpd5| zKn1_kU~Xοz{+/B4dl^ʂ= +cwnS$@yx#OCyԁ8HH0)Q7-~iWxmxSb&E$YNS/r`QПB&2q _qib h hnPq^Xt-ݶ>B3I::)|)3NY |v25>I%CTٲ_tҏG'lxf|G5ft;Y"ʎ]C a ߣy]O7]i–%I#H[rb)Qqp=>HsSvr~}uB˔546'C{/<+O+5g zz4蕬Y:o .)YhNe0)]_78׮o,t%C]/xC,@|tvUmG[RJV~2 cޖM=:zs"G򖖷NȻZ~)2g|" .N;,1migEB;1yAuNgǙt4#aŹ;+ " ?iب#^ ڝW.Ė#W'wfCWӜLi7Qʯt36!F}.ɝJS*}A9O!Ƿ[ */jI1#MRq>%H~,c{gh b(NO~OH%\tg@>Dб@aФac@mx5JP)+ۛOp5# x;%'jX)8kMW\tJ2M,.lY,]}4j` n*,BDv o>1_h/ uH6],Ws9;ZA :{ b|@Y`ԊuC;L^\CYv jE/ʵE ᳡X4- .~$g?fd>3(I=D4GaxZ5ud˅?x{𢊬3㬌S27Ѳb%:Ѳ2D'S+=ã>8ZU9XUyU(t=y?e7G/\?yGK'Lu!JVT%/` 31gR3F{SXO X}sOx(J}ҍA,f(od.Ur>:S kpS𖗼bx ]ye뼉4;C/+J*]&FQkv  {Bmwpy ,AƖ}CA9\Jj€U.@ \^;њ0u%.]4[uwa~r!)v0@װM1 {~`,L=ↆ`06̕hq]V=J@nԾ#&1}$~,VX疛X`cPSxS'%@L"A@Nf(E i䳧_^ si&{vQh4V!1.E`Jm㓄ȜtTf6`E/# r/s~l<bb#wCI<ګ Ay_lVb6Dn0 禒N:7LM&w^NxYu` u[/g&/.4Oxy=|IG(ohY!\WnW= *E*NdiczO|IwzfSF0Nv1k‹zn3 0Lp dz8*"C$GHeRo.qАs&7Ќ _b o? ʜU5*=xvd*\hV_⎠6o{ASad%$<]m*LQJ?)Q~崺fWuN+jۘ׶&V=@K 2;N i r.y{W edY"JTiPο㫃 0D`Y(eȰdOn 8=tCZ":F0.nopi Ńa1d^.*JψLc(s^ "ۤN5vo Gi#$>hoݡ:0!g6z-_L|Q69m2Q^ \{ԘC#D;]!?kU,޷N%5@|"1XCV;Y%QąT 1Ⱦp$b+A}Y5G0p% |W{ >|~ 3r1pbm*=^ T(~bnh0akHBSTQ bNs6퉍\'|XdO-N0 }}9Hv۴z6ʩŜ֡QEZ.p^k> yBU! rUgka(*pJ/zN{o2;QF"@-<䬓ᡗ,.h&U&!Pxhi/7q|7D\\V2 B> CS3jY&=X24 Vxmc^9=*ZOO/RѩNy5{0;g '5j9MaTV&O*ӂ{6R?.;.S|"CG&rJmbsl  PAp 69P; 7b3j4D0&PNYmi֊ 1 #GcUPH4]d, q~0pE=j^b51ߑ3igZ T-y ,qB~%7+͋#Iw7kMw-y]AX_PDCq8{]#]%iی!(E#'z@c@+$p.lMBoM5I7:gm#ARgt1&pTddN$$I u x'ggI꼙;C;t1r?A?~4X ukKWw-tpB<+bhBY*<o]-w8 r_R2/ O!ӦN- k}[C$OPg7R[>#Q :E)\(?$KRO9ed&@2 }3FQW!I %^y?R3ݓDXN7F]e&1 ȫ !#On\ۤCS2\ec^iI}:tt5>1'|:쭁ӳP GbGϿRؾk m]AV7JP9rۧ>Kݥ J12?o@+Y~]zᇦ i}6QH8m"нN%ƱHJE5N'M#汿3 <nԤљ݈B~nxju3MDtKG˱eLՈ%(Y9&h+-l-S_U5\Zr4$ &W$]ܽ95e= hxK_K ڐJ8hteACL3jTv ȓL/6$xۅH~9Jp9SrQ$^ƘZ[?-_ch ]j~Vɬ+'8BY ^)HJ+! R|9KyLB^hd+"9CH|rTvӡA}"K/DP.A*ÏXusY>B!4lQ4f<њ[ZY1f=ԛ>烙e_iD 8 ,^;[+ ; '<[0"9qz$CR0lb&_;3TqٮM&V=Ή1``3{ -"ގ#pkxo}#sv{Թߖ)Owz0svxx2d˛ОjBg2oU@$4v9K?}‡yue(/`/CG4a\:0 %߻3FrZDm]L@:2"X+ 06)\"E1<]?M|Ou9VTfUtS:9k>6ۏl }ꠁkkA!Op|!N-J~>D9v.NypFU Ykׁ[Y}uFn>IqDU00|w*Zf!* T'-&g?`\6-QBap:8{i0G cU$e PLxYAo_Y=-\E+_z)#z?^4V6$}lvC9o-eDg P~8A,M*ٰV;?vVÈ 33U}M샓k.!&^i?&"o@G+l`'OCS3d+Տ#Ihs ~)* K\rsqbE ` |~Wv{)s5+/C`Dmsm]R-|t>&k٠.p7mҪ^`mf>6/i"4B@6=܂rH C[`tPF] _~NiGSVhXk/RlvT:.^qUn|}xzWk uYZ\t< PeȽq%YF5Ms tPՀ`]hWǭլ{؃+QxBv?ռlE|(v J _H+I inh)Lsd>5_aEm,/B &fee/3LB-0>t$,դGH~d9G n/l]y Îţ:+oi-zR)|imEuE|ȃlSxCGnnMꂱZU. 3b@17S[^WF0j1zV<^tk):/ uP /tŕ&MHe%` ou͡dIz: &ZwYKQye32kGGN~үj}~'̤k=24ӧ^[܉3hc3嘚8Ғ +el'஁puU[mbT6c2{֑ h^3.~a@} | ZSiB(ڽQ_D!Wzm(dTTu W ڄ;KnTKROnU?p`z,mfZ~vIJ;[(Lſ'U^RM,qAsmaw_VJuSK !Ղ Hy uw\$0 Erq `e^L}Qc[e1Z+sGd'\L4;-Xe 0TӃp[5#f=򈿫jnyf ;4I#2&`car(Ӈ'|zN7m3)H͜`RX;em(z \ԽLL~@69p' ;|Z ;O6uyΝRFTޝsQԮ7] OףA.hXuxuL]q p="'F*j;:ߪ= 檕"xtԼJ'0$>%H0:۟qFpkvk[O^~Zx.N1^{/BgC9d ʽ훨M{f^DۑaY*"pyhJY9XI5C"nf)Jr8;)gM2LL- O'C^ijp<  qRAO2 1]Gd"z McMg֫͢|.p[MQ8F(\wZb1bцKs('!<_6\W1:`=H9״npۉ㋮L +{ @,{ ^,COlIbeX s g.`Bp@R2߷:"hz&:?칎/J IHPx"&{;T^&=s]O|%jfԍnķ<́'`nHa[[ ܈]Y=e) $rp$,?Mʦa.ĪAAGyg{.@zOrgѶA*ܑ$U/k9Jj:E d:p]n@)wW$ZsRh(óS ɜZ͑+1rqr@*?W1adO3V#Q9xT]>hWj9{;T܇H-` Wzi[%ZRHimR1Qt1B@=@tb wĻUZX"5q!̉ￅeEtUĮ[Z̫֚ ̀*=1/PQz:(vGSģkn@|YAciQ)_acXG@qlnxdf`Vk*`;fg3yz%$ߨ2p`9d'UK"Eab/w@ 𿈪Q i):1=̌&H,jX$НgzzȦzRYOs}1ш$xs=E޶a@R%SvfgGH PH\>EP4AV/͕x*[ gLDgH93—ӳi Tr=JuřZuZlp!+sdxd(aZ #qPhґ``MUs[SNj&> 8$ۢZ%l'UHUUY=ն7RJ d>ˆO{20L2n>g3Deѱ ͧMsVy>;_350:? Ұ4֓fQݥղ}Ӓ\~ĤX`~xJYGȅj,k@NJNNȳ4#%ݠ,+չ<&,&yǒ 1_ o4Lg[/ nSE7WI9'kGLTx\ 4Q>./CY섽D/"XSѱ@ uFe'hͩ(1Xmҵ'fKBrZg/(*^XGf3%#Hnۃw^oD9@til8jhDz jŚLgwm'O5lQnDMBMWݴ9.]093} A&el5x=ύ&Wɉm8WСX1=wyr2x@<(MJr*KJ rfXVG ޶o%YeY6je桺f Rϵ|Gwd㚵'&`IFYȀ3lOKy+O-8ꚿ[AwU:U۪k˽-Q.}$/>k%j"hU pP>wx sYf5MG(.\d!CgRu*ŜlZDD’u&_}YS# h{4Lbކl*廐ŹBufDݷxyvw$Vp+, 7$Ar>Il5jxiPc_5B+y+OGԓ<9+%$y󒌰a)P$ ËsPL;RxzQ$2NwЭх [2ۅZϭ&֧)s) P(ٜ"o;#Ǿ0jvlīn@-C:w-nhRd|!ȵ"qf%#ޣ ([*fZmO2F i?&M qqߪRC;?zȞh\Pi3mKvT5Ĭ,'ZnQˉR5#FI :%p5q (OtRT;Ȩ(!Ŝ"k0b9/~ڠeHg16~X{'1j^%Ak7G.BSۉ4Xz  wvifjWpxlb=o..YMƖy]e ߴW`*#Z|JFX$mS'Dt~((͑r&~T?TF`TJ&=F(Ў|N8`ӣh8h4&G`lCV moP2`Q`M%麄}+A30 ;53 NJ/ /(g;14־sGߺ跑AS|N@[y@Hc6۷%Үů8 3k˞ò2Q hm+!hhN!O hZiv h*L׈Y:%K YX}r3Gi{,T0kܤZaL PNt1*Y%H+/ua᫿E.p+ trS{?#1 2&5zn5Z`Z<Xy&KN*?Syfy剭}fϒ-ХN76;1 {f>5!`?nnnrE.uG>Aj4ΖM9jς}+V=Haw}1QuK2] iek%@@誁57gQ_g/kZ3]LWqXV"εAx z!Y4-V!3n痶)g&Ny p,C`Bz}i4ze.>'Tc}>P ӡ!͈9ԉNVr&ҌFU5F uBtEH9VfGE~G)74`Lʳ{BmshG⒇2J{TL'ηn]A81cKk]a;Ē IƓspK2?U;aX4>豱Xf.jQ-|MUbD`^/?[g8㏁I;a^KWձ.5:Jaz*h&ucѠcs~RQvVb_=&.~i}]1k<ɼkD5Rlp4Rv [pfUN˂"$L}9翰?uaƁ V߰?쓷3#yQq57;!nXK+&?D( (7ɑ!# * ə_2ܸ ghD';B݉7wt uMg79ԚH_q6 L%N3I'w@AuX^̆B4[ӣYͭ7Ϥu`sw'L;x|KڲAFjyЋYQ&ӾkE$(!߁PpF4 u]FV&ƺH<{'N}:,) ube r?gGnD]mSmJMɜuŴݳ:zE+mC5Ɛl.{裐yVќLV3Mm@-F~>v'mC x >0IS41 GV]/Ɖwo{^έY/^ӡ6PPꟃ"3ÀH^qqZ} \K=iiLpǖ)IAsȦZexnI[yO駯uck@31LB6}'H]/CT\E i9课zkڕ6B$dEa04&(@>ilJ5ȺoS005|f]hRI-A]34n/5Cx?VO(U^[jcLl_'zQpe}Er.>yaN$ ?`3e ![eW1!A]l-Ò'C"_{/?iNP.C w JMj@M E35S/$pfP%[ <+_׋jvr'M> TA@Sr*\@ҪWFA%ն60hegCp;X0 ϸޛXDPQpCK w<&F+Rsa/ #"UWwb,Vec^yeFe+^8I˛'ZhL~*+h!ГɖOv]tgA^p V/ օ|MTj` ֣*r_ׂK㇒,<#Uhp_LxsS卷"ؽ9ez3Ɔ8 X>U :xúƛ~\٪7@W(pG/l(=5q'.>!lIC>_d'iWYP5ab U20eNpuDFLCӥX}La4|BJntϬf q3Q& !^QTzG9x@&X\r^A&eh2]%/hQ67 fhHGňOb,.Q&Sմ`hڮ JLE᫽Br4gY?Zdhxnʩ E;nAO툀Ɉz)ŗ\YvpH8LW-D:=Znhُzg=E `pcU7kZ:Lx>nE ;6 :]ΈoX:v7}P i%n̍Տφ}S /)TӨA6QÉsrj<roSwFCT^cۍ={CĘbwc_<"^ehV?p>CN%r =.k[:NLYDcCu#YBYl >xV rUA=eOcm+vF s$w4!RFvEXuox"X#wp=A~H TsnMӵt᝙S UrbYHs9C<"ɮ-(Иq s嚑e;%[V^ *{Mc xoR_tјMȠ*r>@&禍s|t~/Nd<u)4d$|7iOuzԇa2Sh{  h-b2,ʵ3p8t ^)@u-*QC*},x~ZɦP]͕; a5a"$vMw2nbe>61Ȓ0"#r PLBgVw 2U YZ