ipa-server-selinux-2.0.0-23.el6_1.2> H HtxHFNx ?*}}xWdUM@J?Jd & K 0Tp ~    /  8 T w      ,  ( 8 g9 g:wg=G>G?G@GGGHGIHXH YH(\HL]Hh^HbI!dIeIfIlItIuIvJwJDxJ`J|Cipa-server-selinux2.0.023.el6_1.2SELinux rules for ipa-server daemonsIPA is an integrated solution to provide centrally managed Identity (machine, user, virtual machines, groups, authentication credentials), Policy (configuration settings, access control information) and Audit (events, logs, analysis thereof). This package provides SELinux rules for the daemons included in ipa-serverNr0sl6.fnal.gov=]Scientific LinuxScientific LinuxGPLv3+Scientific LinuxSystem Environment/Basehttp://www.freeipa.org/linuxi686if [ -s /etc/selinux/config ]; then . /etc/selinux/config FILE_CONTEXT=/etc/selinux/targeted/contexts/files/file_contexts if [ "${SELINUXTYPE}" == targeted -a -f ${FILE_CONTEXT} ]; then \ cp -f ${FILE_CONTEXT} ${FILE_CONTEXT}.ipa fi fisemodule -s targeted -i /usr/share/selinux/targeted/ipa_kpasswd.pp /usr/share/selinux/targeted/ipa_httpd.pp /usr/share/selinux/targeted/ipa_dogtag.pp . /etc/selinux/config FILE_CONTEXT=/etc/selinux/targeted/contexts/files/file_contexts selinuxenabled if [ $? == 0 -a "${SELINUXTYPE}" == targeted -a -f ${FILE_CONTEXT}.ipa ]; then fixfiles -C ${FILE_CONTEXT}.ipa restore rm -f ${FILE_CONTEXT}.ipa fiif [ $1 = 0 ]; then if [ -s /etc/selinux/config ]; then . /etc/selinux/config FILE_CONTEXT=/etc/selinux/targeted/contexts/files/file_contexts if [ "${SELINUXTYPE}" == targeted -a -f ${FILE_CONTEXT} ]; then \ cp -f ${FILE_CONTEXT} ${FILE_CONTEXT}.ipa fi fi fiif [ $1 = 0 ]; then semodule -s targeted -r ipa_kpasswd ipa_httpd ipa_dogtag . /etc/selinux/config FILE_CONTEXT=/etc/selinux/targeted/contexts/files/file_contexts selinuxenabled if [ $? == 0 -a "${SELINUXTYPE}" == targeted -a -f ${FILE_CONTEXT}.ipa ]; then fixfiles -C ${FILE_CONTEXT}.ipa restore rm -f ${FILE_CONTEXT}.ipa fi fiKP""$bA큤Nr+MxNrMxNr$Nr$Nr$8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b9032fc57e4321c7fb58116282652a0fb6d1dce1270fcbf3c52d7794f77b0c519f722378ae5f9d2bc73370af9c30cb96b70f5bf81e70f6a14ad259c22de2a1524a93e38efcc7f251c0f053c4ecff96dcb64cd46cc268a1e7ba177c104881d6c8c69ab9062e8451344a598742a16e84edbd45d434a355d5ba9f18d169c19ccce73db66702a08f3d6ae0b8c86898820f6f6ce6a9ef4da0fc6ffc335edb5488c5cc0ed4rootrootrootrootrootrootrootrootrootrootrootrootrootrootipa-2.0.0-23.el6_1.2.src.rpmipa-server-selinuxipa-server-selinux(x86-32)      /bin/sh/bin/sh/bin/sh/bin/shipa-serverpolicycoreutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.0.0-23.el6_1.21.33.12-13.0.4-14.6.0-14.0-15.2-14.8.0Ng\M@MMy@MM@M@Mx@MMTM~@Mx@MfH@MdMU$MOMOMGMA^@M=iM6@M4/@M.@M.@M-M-M M@L!LfLNLdLLLzLe3La?@LD>@L#HL#HL@K/KՀ@KK@KKs@Kie@K`*KK@K @JJ@J@J@JJB@J{IIIm@I1Iq@IKIFFI9I1.Ih@IIP@H@HXHO@H-w@H HHH@G߮GGgGs@G@G@G@G}G}G}GG@GC@GkGDG<4G)G(n@G3G@GJF@FS@FFuF@Rob Crittenden - 2.0.0-23.el6_1.2Rob Crittenden - 2.0.0-23.el6_1.1Rob Crittenden - 2.0.0-23Stephen Gallagher - 2.0.0-22Rob Crittenden - 2.0.0-21Rob Crittenden - 2.0.0-20Rob Crittenden - 2.0.0-19Rob Crittenden - 2.0.0-18Rob Crittenden - 2.0.0-17Rob Crittenden - 2.0.0-16Rob Crittenden - 2.0.0-15Rob Crittenden - 2.0.0-14Rob Crittenden - 2.0.0-13Rob Crittenden - 2.0.0-12Rob Crittenden - 2.0.0-11Rob Crittenden - 2.0.0-10Rob Crittenden - 2.0.0-9Rob Crittenden - 2.0.0-8Rob Crittenden - 2.0.0-7Rob Crittenden - 2.0.0-6Rob Crittenden - 2.0.0-5Rob Crittenden - 2.0.0-4Rob Crittenden - 2.0.0-3Rob Crittenden - 2.0.0-2Rob Crittenden - 2.0.0-1Rob Crittenden - 1.99-36Rob Crittenden - 1.99-35Jr Aquino - 1.99-34Simo Sorce - 1.99-33Rob Crittenden - 1.99-32Rob Crittenden - 1.99-31Rob Crittenden - 1.99-30Rob Crittenden - 1.99-29Rob Crittenden - 1.99-28Rob Crittenden - 1.99-27Rob Crittenden - 1.99-26Rob Crittenden - 1.99-25Adam Young - 1.99-24Rob Crittenden - 1.99-23Rob Crittenden - 1.99-22Rob Crittenden - 1.99-21Rob Crittenden - 1.99-20Rob Crittenden - 1.99-19Jason Gerard DeRose - 1.99-18Jason Gerard DeRose - 1.99-17Jason Gerard DeRose - 1.99-16Rob Crittenden - 1.99-15Jason Gerard DeRose - 1.99-14Rob Crittenden - 1.99-13Rob Crittenden - 1.99-12Rob Crittenden - 1.99-11Rob Crittenden - 1.99-10Rob Crittenden - 1.99-9Jason Gerard DeRose - 1.99-8Rob Crittenden - 1.99-7Rob Crittenden - 1.99-6Rob Crittenden - 1.99-5Rob Crittenden - 1.99-4Rob Crittenden - 1.99-3Rob Crittenden - 1.99-2Rob Crittenden - 1.99-1Tomas Mraz - 1.2.1-3Dan Walsh - 1.2.1-2Simo Sorce - 1.2.1-1Simo Sorce - 1.2.1-0Ignacio Vazquez-Abrams - 1.2.0-4Simo Sorce - 1.2.0-3Simo Sorce - 1.2.0-2Rob Crittenden - 1.2.0-1Simo Sorce - 1.1.0-3Rob Crittenden - 1.1.0-2Rob Crittenden - 1.1.0-1Rob Crittenden - 1.0.0-5Rob Crittenden - 1.0.0-4Rob Crittenden - 1.0.0-3Rob Crittenden - 1.0.0-2Rob Crittenden - 1.0.0-1Rob Crittenden 0.99-12Rob Crittenden 0.99-11Rob Crittenden 0.99-10Rob Crittenden 0.99-9Rob Crittenden 0.99-8Rob Crittenden 0.99-7Rob Crittenden 0.99-6Rob Crittenden 0.99-5Rob Crittenden 0.99-4Rob Crittenden 0.99-3Rob Crittenden 0.99-2Rob Crittenden 0.99-1Rob Crittenden - 0.6.0-2Karl MacMillan - 0.6.0-1Karl MacMillan - 0.5.0-1Rob Crittenden - 0.4.1-2Karl MacMillan - 0.4.1-1Karl MacMillan - 0.4.0-6Rob Crittenden - 0.4.0-5Rob Crittenden - 0.4.0-4Karl MacMillan - 0.4.0-3Karl MacMillan - 0.4.0-2Karl MacMillan - 0.2.0-1Rob Crittenden - 0.1.0-3Rob Crittenden - 0.1.0-2Karl MacMillan - 0.1.0-1- Use updated xmlrpc-c API to do GSSAPI ticket delegation (#729805) - Set minimum requires of xmlrpc-c to 1.16.24-1200.1840.el6_1.4 - Set minimum requires of libcurl to 7.19.7-26.el6_1.2- Wait for 389-ds tasks to complete (#709329) - Set replica to restart ipa on boot (#709330) - Managed Entries not configured on replicas (#709331) - Don't create bogus aRecord when creating new zone (#709332)- Update ipa-Fix-traceback-in-nis-manage.patch to fix python error (#697583)- Resolves: rhbz#697583 - Can not enable ipa-nis-manage plugin- Default groups are missing ipaUniqueID attribute (#696508)- Set min version of 389-ds-base to 1.2.8.0-1 for fix in BZ 693466. - Fix some problems in IPA schema (#692978) - postalCode should be a string not an integer (#692945)- Port 7390 is managed by selinux-policy-3.7.19-80. Update ipa-repl_selinux.patch to not manage it any more. (#691883) - Patch to fix setting gidnumber when a user is created. (#692168)- Fix uninitialized variable in password plugin (#690595)- Wait for Directory Service ports to open (#688934) - Mixed case hostname can cause issues and confusion (#688622) - Wrong timeout parameter in ipapython (#684273) - Run ipa-ldap-updater on upgrades (#688931) - Internal Error and trace back when adding DNS AAAA record (#689452)- Use realm provided by installer in LDAP Updater (#684744) - Use args for domain and server when doing DNS discovery in client (#684780) - Fix 2 SELinux issues in dogtag replication (#684269)- Add Obsoletes so upgrade from ipa-client package is possible (#684931)- Update to upstream 2.0.0rc3 (#680993) - Set minimum version of sssd to 1.5.1-12 - Remove SuitespotGroup patch - Rebase remove-pkinit patch- Set the SuitespotGroup directive in the 389-ds installation template. This ensures group read/write to /var/run/dirsrv. (#680201) - Make single line out of python sitelib/sitearch code.- Update to upstream 2.0.0rc2 (#675282) - Set minimum version of sssd to 1.5.1-10 - Set minimum version of python-nss to 0.11 - Set minimum version of 389-ds to 1.2.8 - Add bind-utils as Requires in client subpackage - Remove unused BuildRequires e2fsprogs-devel and libcap-devel - Add branding patch - Add default.conf man page - Upstream moved some utilites from the admintools subpackage, reflect that here as well.- Add pyOpenSSL to BuildRequires. (#670954)- ExcludeArch doesn't do per-package exclusions, use ifarch to force ONLY_CLIENT on non-supported architectures. (#670954) - Manually install ipa-admintools since the upstream client-install target doesn't. - Move a lot of the BuildRequires out of the ! ONLY_CLIENT conditional because the API validator in the upstream code requires them.- Exclude building server and server-selinux on ppc, ppc64, s390 and s390x platforms. (#670954) - Add date variable to the release to make daily builds easier.- Merge in changes from FreeIPA beta 2 (#670954) - Add patches to disable pkinit- Set minimum version of dogtag to 9.0.0 and add Requires for the theme we need. (#658275) - Remove unnecessary moving of v1 CA serial number file in post script - Move some man pages into admintools subpackage- Drop specific Requires on libcurl and krb5-libs (#658275)- Consistent usage of buildroot vs RPM_BUILD_ROOT (#658275)- Drop Requires on nss-ldap (#658275)- Temporarily disable building on s390- Drop optional radius package, the underlying code isn't there - Re-arrange the doc lines so that defattr is first (#658275)- Initial 2.0.0 build (#658275) - This is IPA v2.0.0 beta 1 plus all patches through git commit 4da9228fb2ac34adab8eb1884ae414236adb84fa - Removed some Fedora conditionals- Drop BuildRequires on mozldap-devel- Add Requires on krb5-pkinit-openssl- Add ipa-host-net-manage script- Add ipa init script- Set minimum level of 389-ds-base to 1.2.7 for enhanced memberof plugin- remove ipa-fix-CVE-2008-3274- Remove duplicate %files entries on share/ipa/static - Add python default encoding shared library- Drop requires on python-configobj (not used any more) - Drop ipa-ldap-updater message, upgrades are done differently now- Drop conflicts on mod_nss - Require nss-pam-ldapd on F-14 or higher instead of nss_ldap (#606847) - Drop a slew of conditionals on older Fedora releases (< 12) - Add a few conditionals against RHEL 6 - Add Requires of nss-tools on ipa-client- Set minimum version of certmonger to 0.26 (to pck up #621670) - Set minimum version of pki-silent to 1.3.4 (adds -key_algorithm) - Set minimum version of pki-ca to 1.3.6 - Set minimum version of sssd to 1.2.1- Add BuildRequires for authconfig- Bump up minimum version of python-nss to pick up nss_is_initialize() API- Removed python-asset based webui- Change Requires from fedora-ds-base to 389-ds-base - Set minimum level of 389-ds-base to 1.2.6 for the replication version plugin.- Drop Requires of python-krbV on ipa-client- Load ipa_dogtag.pp in post install- Set minimum level of sssd to 1.1.1 to pull in required hbac fixes.- No need to create /var/log/ipa_error.log since we aren't using TurboGears any more.- Fixed share/ipa/wsgi.py so .pyc, .pyo files are included- Added Require mod_wsgi, added share/ipa/wsgi.py- Require python-wehjit >= 0.2.2- Add sssd and certmonger as a Requires on ipa-client- Require python-wehjit >= 0.2.0- Add ipa-rmkeytab tool- Set minimum of python-pyasn1 to 0.0.9a so we have support for the ASN.1 Any type- Remove v1-style /etc/ipa/ipa.conf, replacing with /etc/ipa/default.conf- Add bash completion script and own /etc/bash_completion.d in case it doesn't already exist- Remove ipa_webgui, its functions rolled into ipa_httpd- Removed python-cherrypy from BuildRequires and Requires - Added Requires python-assets, python-wehjit- Added httpd SELinux policy so CRLs can be read- Move ipalib to ipa-python subpackage - Bump minimum version of slapi-nis to 0.15- Set 0.14 as minimum version for slapi-nis- Add Requires: python-nss to ipa-python sub-package- Remove the IPA DNA plugin, use the DS one- Build radius separately - Fix a few minor issues- Replace TurboGears requirement with python-cherrypy- rebuild with new openssl- Fix SELinux code- Fix breakage caused by python-kerberos update to 1.1- New upstream release 1.2.1- Rebuild for Python 2.6- Respin after the tarball has been re-released upstream New hash is 506c9c92dcaf9f227cba5030e999f177- Conditionally restart also dirsrv and httpd when upgrading- Update to upstream version 1.2.0 - Set fedora-ds-base minimum version to 1.1.3 for winsync header - Set the minimum version for SELinux policy - Remove references to Fedora 7- Fix for CVE-2008-3274 - Fix segfault in ipa-kpasswd in case getifaddrs returns a NULL interface - Add fix for bug #453185 - Rebuild against openldap libraries, mozldap ones do not work properly - TurboGears is currently broken in rawhide. Added patch to not build the UI locales and removed them from the ipa-server files section.- Add call to /usr/sbin/upgradeconfig to post install- Update to upstream version 1.1.0 - Patch for indexing memberof attribute - Patch for indexing uidnumber and gidnumber - Patch to change DNA default values for replicas - Patch to fix uninitialized variable in ipa-getkeytab- Set fedora-ds-base minimum version to 1.1.0.1-4 and mod_nss minimum version to 1.0.7-4 so we pick up the NSS fixes. - Add selinux-policy-base(post) to Requires (446496)- Add missing entry for /var/cache/ipa/kpasswd (444624) - Added patch to fix permissions problems with the Apache NSS database. - Added patch to fix problem with DNS querying where the query could be returned as the answer. - Fix spec error where patch1 was in the wrong section- Added patch to fix problem reported by ldapmodify- Fix Requires for krb5-server that was missing for Fedora versions > 9 - Remove quotes around test for fedora version to package egg-info- Update to upstream version 1.0.0- Pull upstream changelog 722 - Add Conflicts mod_ssl (435360)- Pull upstream changelog 698 - Fix ownership of /var/log/ipa_error.log during install (435119) - Add pwpolicy command and man page- Pull upstream changelog 678 - Add new subpackage, ipa-server-selinux - Add Requires: authconfig to ipa-python (bz #433747) - Package i18n files- Pull upstream changelog 641 - Require minimum version of krb5-server on F-7 and F-8 - Package some new files- Marked with wrong license. IPA is GPLv2.- Ensure that /etc/ipa exists before moving user-modifiable html files there - Put html files into /etc/ipa/html instead of /etc/ipa- Pull upstream changelog 608 which renamed several files- package the sessions dir /var/cache/ipa/sessions - Pull upstream changelog 597- Updated upstream pull (596) to fix bug in ipa_webgui that was causing the UI to not start.- Included LICENSE and README in all packages for documentation - Move user-modifiable content to /etc/ipa and linked back to /usr/share/ipa/html - Changed some references to /usr to the {_usr} macro and /etc to {_sysconfdir} - Added popt-devel to BuildRequires for Fedora 8 and higher and popt for Fedora 7 - Package the egg-info for Fedora 9 and higher for ipa-python- Added auto* BuildRequires- Unified spec file- Fixed License in specfile - Include files from /usr/lib/python*/site-packages/ipaserver- Version bump for release- Preverse mode on ipa-keytab-util - Version bump for relase and rpm name change- Broke invididual Requires and BuildRequires onto separate lines and reordered them - Added python-tgexpandingformwidget as a dependency - Require at least fedora-ds-base 1.1- Version bump for release- Add dep for freeipa-admintools and acl- Add dependency for python-krbV- Require mod_nss-1.0.7-2 for mod_proxy fixes- Convert to autotools-based build* Fri Sep 7 2007 Karl MacMillan - 0.3.0-1 - Added support for libipa-dna-plugin- Added support for ipa_kpasswd and ipa_pwd_extop- Abstracted client class to work directly or over RPC- Add mod_auth_kerb and cyrus-sasl-gssapi to Requires - Remove references to admin server in ipa-server-setupssl - Generate a client certificate for the XML-RPC server to connect to LDAP with - Create a keytab for Apache - Create an ldif with a test user - Provide a certmap.conf for doing SSL client authentication- Initial rpm version/bin/sh/bin/sh/bin/sh/bin/sh2.0.0-23.el6_1.22.0.0-23.el6_1.2ipa-server-selinux-2.0.0COPYINGContributors.txtREADMEipa_dogtag.ppipa_httpd.ppipa_kpasswd.pp/usr/share/doc//usr/share/doc/ipa-server-selinux-2.0.0//usr/share/selinux/targeted/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i686 -mtune=atom -fasynchronous-unwind-tablescpioxz2i686-redhat-linux-gnuASCII textUTF-8 Unicode textdirectory?7zXZ !PH6B/e] b2b~f v)n/ɅUA`δIb>}ip(؝+tҾJ#Yr"yzO+ӏ2jiwChTP TqrQا q‰TǪЫ>+E7=KĀa6wk(̹swӲUim|dmh(/h][} l#tD59{yy7UB=bO䭁YeK, pܸ褐oQ圻2C|*Pe춄]*c/'<.M5!^Л;i31f Y$t\8 AY>(quq=a::u?ivP琸Wh|ړ_ SJn;3VhkV),rP&_51؇eO!R=4qPfLP>~̇jk0.ь?! Mq{xmjIs+_D~>/.m`@9g[^E,Wla*+l KI)&Lȑ]|<1FnvdkV-/ei'nb۱у$x9No,5 msmk#p#ͳG3b9ɆO=_yw!_{()g Qp~`i]ZBey.JRlp y̋N?Y^S,|T4Ѳ_؆ h vMTK{%ʤ.i'Ƞ^&Z\X]l<ٍiJR!aJ zU?V|:6 98PPDT(Ӫ|O 5,U91j4xc1Z~9re\N@nvrZh(nm}Gϟ21WS"wJJEMOdk;grWkVzS?^b@ e^q`g(- nQqqVuV x~/ىJPZ`1?7靓7J0=bo Nv*aF u"ϥ֔X{a\[Lj^|G[(X5H"")żnfhUI0(2MϹ״*el7l( YņDgl V7wqd' άEn*ڥQyjm9vzEyUn^k}Ȩ֋7y+*w+X3 )[S@GFn^ @w# dON#( E` z@?/c⿆s$Ϧ?*Zg_+1ҟɪ%8сzY{mb9~D5<)-/x'-PN|n3 VڻWUM:YHs,h8H5Ā°rc/Ƞ'siДY(I}GlXQ[-8= %誺@ Sy[hcn M'Yu00Ą`YF`|"~V -!(7?M=ػ[{s3Ϥ3s8F*8ToS,Ln])HM m0lF1 ` .qu+`pL-ᩍ_& OgeK:h ֧?! ˳G=Hzn+e gj1xjb%{UْB0Ӏ9M`jA֎9%HW9{VhP`~[~lP>֮pbuzW )Ҝ%c>mOazG8_CaC1CՅ̪Fԕ= FWaii#:[  >`Rڃ%|Y}\&C>"h>J1d.xAё1js Tǟqx(hT2sԁvT|0͘@d+ C6*4@CmJW)_ӻ.EL ȠKcKG׈aVֈ$LmgLxB(GFI(d?U6YCeC,"}LH3LëHh#.\v<1;\ ]GcY.`Z b`s;a>1d9-0\-< @tsdxpsxBbJw[}l<!TxGFw9oNս/T,,6MFjQV||LIÏ t#P()*%=̖O5>wFMRN]*|wTv-7g ^+ wT047=VYS^n'Z\I#2?+ U@cpa;LL_ްl$+Vڠw65ELwvo7`dA$`٠G{"A.%y`\ڹ $3:FI =f+DÐ?E ̎pˇKAչ2=:d;@1D7*di8lԪm7:LnoJd/o]c1\0Cy]|3ıАN ej/]MQaAǣc/F8jRlKȁ*aȚLal}=N9 =.*zJ&a* ӧSGXkő-9-ꀢOLmcHbfpORh?j╚ulf's 9` ' #Hn5Hs訌ohsZZV{.xVpn1< PS_4/\|f E`Dz@Lr\8@=((APtD9'0.[&7|LcuprM 7͘C|I_0RlzFVש (i  0SދBqXjG*2.AT$' @3X"+NH\7ƞf# n2 <_>Vr.W1e ꄑ:j׵FPDѳY%+8@{6؆2lػkèxi&˸ROAQ)V[s-ڋ W6p( n4A1w:OߤW]@g &D@r1QʑqX* 4q8Ƙ}*Lcj{A @Z^)ND}\9 \E"?h,~F[Q4B}hQbԋG`n׳*w,io ]8w{vJ1KFxGj>s201H8U?o.kbBP0'jë[ӏ 3ଢ଼u~a듗kX~a:ˡ>lNdD}ɢOxG\y?(,έ(nrc8j4Fv`A|U؏'0h$]RBQp+u34@*Q&IKuRӥk{[x%)C!St2Ɂ ` Gf,"zcHb)QfaQiu/X];GbŽ;_D,/U#r2jtL S8qC6l2fsxH< zoaI~ Ml[Vۺ) E: 2#]'FpN@ 9CƏ#Q9$>'h;nT$'y;@MHl0tSPوd(jE -OB),<w}˥MV-8jrocѭy$ );?S^\&Y=o~{ /. *wˆvկ WoO,~d| Cz -ILxMOOhكP\ڧTۈ4ޢiWo>Y*E' melj."I5VG&.1y)N7:Qk1e­e fؔ<k5_- a6טsV/n7cf`AQ.ŢgT qN6~nmSaIĈL$+P4Q/RWwxcapE@H1gfgι.CG{z*Gٺ!_W}_S ^'h2LYYXt{*O7*9gVk$xm&rqUP|EՍ%I*GVexM{ء>/쳓:_Tr{֯E`IxN-Mg#+wà遑͈ԉ7F4Q-l;Cu | k -{eUR9K0>)%oCc1i3p3c 5((:뒹TJu]Ӎt=u|%.[G6x8լU]#qnN~3(}Sz[)`KNX^>EIfO[IAuU?[,'}J0!m(L~{ #)GsOӇͲ\[ʨ9Os''O 5oaaG6DךЀtwzAgm,KSw[r>ah &0Y5|\9 IHjUTQ8 PjVhޔ7J : 'K_s4@?sdBᆤg}kAa)J [MS1+DzKh cS:q2$0nk6~);_N/#9)+6ݢ2-إja{MF}M9t31S kb<껟<HglM]0tuAW)l lՃC\ 7b\6VQՊ^`2ZD,u $#Q8yuB7~1Q̺݆;Y^F\CR𤣂bFiV66 l)MQ˃d@ x]k? IbRA=?`g=N\\Mn bPH}lh%y P6`v4:QO]aƀiERY'FDۍ !@HBiPT}ˤ.py9J-7$5W Ҟen_))|=m/<V:q_pHd/R%b0AP(8)n+%!b=ӃâWv:ě9/.ksK =TU.-ĕH"U~¤;V?͒|QowUW&\ȏlǭF 6RUe)(r AzXܟ{ux؜aXxXbKRֱ=P;a z([uz@UpY]Vbsx!>Z-HkyhW:S&яNY?me>/^H``HHTM!`GkK*}V]tj;rfmb\ޮoʵF!$IYpۡ5uo뜢:'.>ر,̜Y!a)Lv}o c ҧ׉S۹Sمi F= V%=r@;N溩RdWzwtCrzMtlRl'UѨ7ዧaG䈥'56̸AcO*sZiD,ё8[\ ;:Y[~2ݞ}QQ#{n~% ^ 1RJIAߗ,iS2P 3ZN`qN]{y&^K7puU`אּ{u3.s2-a,^f aQEOFTIL1I8VXKh|c9df8K̬PM5pZ 1@F7vV~"Pyf*h89״$(vǐt!h0PAr2B<1'"8ۺTJ |c ir(]Itn^ "P/8(õPhMT}Z0x733i>ȂfMQqC%8^we4c@"pS$mX2& {)ލECIm G۩lq7fo0jU)xߣ/:!Nma4J$+:Kc1#0xo Nq6ZTАђb vwHP[<4tŸ5_gRe\|8wfV2xgޝ*8)=ce\C"q=Ò|{}z`NǎIi.Qozo?&[n` 5n`KISAZZƿն\b͈37ړauLuQ>Ѕ?/z!t[,!A 6bҫ,k9YjyTq/K1;@e6n@ wjpZTOQ yαIL4..nX>V_w44}4K"iS"PoOy= 5@m Mhdez`zN۹ 2U5M,#Ͷ0* 1w]\L+i_Euc,\xjz甾B਻h\AG@pUh|۪E&X&={^p]w*7I2t7uiP/.biq H?lVgLVxzsʎjʲ8Q.VJ8;cb?|3(q;Yr򯗇NdjVr!gܷ>+_RAN'v4\}F@v3ҳ.Mq3l[lj7;D:Z v[ƘW/ 8FߤXT\!}ΑoQw~\rUi4c'6P@Yhɢ73 eVqQCJ-͓ rڞ>*4fΞnX滅cϒ7w\L0K~lmC'?;w}0?I &B#Ol_M1;O "}[t1{$ˍ;wfzEY-CkS sRw 6IDp&8 νo[5uwG=g PG;;Wc!ʱg+ oYQ&sC{!w()!Sl yI|xH4ooH\Cgp4,8[mYnae$?Y&TKV?q~rNK: uͿ5UNs-˞821[la&0pzLuɔEzKݭk4nZK߁:fg 5AGW`YCO4_T=K<%=nB^)ZeH%G+A%AOUϳnhI-J\FT`A{N3魂i[eZxJkE*EK) BoQ_-:Qf,^JLub) ld0*j9`0N䁨Ƥqɜ)j̜rf$/'p :u'_XEWɤ7$xy`J۬@]F zd[_e1g =-[W92} B{} 1D&(Fx"v5}g 1nmۈG OFJ$) ]VgPT"(%KAT`"mu1š:7Y::I!G]Jh{1_=Ɗf-h [p&~!'&`?z*Ď0pEN%sXDcRKZPf7n!&I=jQ![6ɧVY&̐0@gM&]8`f;K6r6 <Od_wgi(+oVC Qup>::%T06Is|\`4(o.IQύ1Z.ZXéɓ"p۲ &ItGĖғEC|dG;)2]Zy7GLS%wШ./1n+(H%LȦcG,8E'Z)wlďd0\z5bѳXE ].&5.!V Fi.DP-i;IβxFq!v Pܷ?]t@ߏ1鷺jyp,ⳅ4 غU?mt*s|Ba+6`f#kUpa%Tik797ɇ}?DbY]4Y$K+28 G&uW%M?_ :Bs(?\ġphefP39MӉr"hkNXՂWR&q-%i[06{aAuxx RcOvh@A&ĥAZMbE8< 1wDjw\u|E cuQ<ʍ* V!]nˠbopn6?|??EXj\-K8"%3#,sAgkykIen:t_Hҳs``%2h.w<0C: ,@ kJ$hl*6? KAoY/=N$y2F/p~ $m>ͭh"= dH .O6C)(!!Y-F<YٚCT͗d mlʌg>Κ Ixxg#]/kǾ9|UǭaLhNiF$ƬnfCZz-ɂ q$XJxZ?KR%dyj˱wpP5ܯDsZIk]$6q٢VoϢ7c 1)InNjY[T69s@{O;eJÛ)<-P"_b@YYX߬x2VhfV9#8qP:;ϸ-i;FM! <16-}]c>zol~v6Ci6x w|TIBF#ddc;ȃ ǹrL"HueI,DXt€>Mip7  D!mѰFj7ںfpFˢ #E V(Gg BO7 &!?}"u]5VR_}JW;$P{*MVI)/th-;JZPs6klB8OnZ],5VMА g,Uځk6>hyI_4Yl6d`׹w4: [2MrM6X-Y .VW0F\hJ\7Pq\b3pnv~ĆbM:, =CAauoLoj CHԟ+ 2;@ܲ1 UQ%'h~k$|}aLw@"C Fiѫ7ϯf85@}.? *N )iK-1Oy p7"MiLPy^YzIW?!]y`V~ HeMG  NLӾ3KAwRR2!yڦmADfpG#q}b+Em="㙙IEHnϐ=#1"L vZ{~t&lRG\ZTf3K"oaMdQ 縉mvx B g֦wiTpؔ..QsCbZFľt{B=VkE?gOO_*.l6˱_9 %[7lAWN!=ٯns_ DIIXkP?a=fAWBbi`\t';xIBZ̠.=9cV̫GdEìk>y8À$O:u \[A ([V"WqB-0 )$?3R-41$l+Vwj5WlW:N{*41}ur" *'4qPn T&A`8_:e P{Pv-O)i9v;dB3P5+#rtI7K vK2stBVҴ3 魃@kFG//2/n1,)%7CE]IX8 ߜgYg3>1&]6'Ǡ\KWA`=)vʦVΩf>4x#)w<͘&{YӅ3[ qѨIFU귯uψROԒ48hgrC4^-VNFG ο5 ΢m`Uҡ,Il3תޡ˜ E;ȷw`mʑ@aF="#*6{H,gͅ Vݫwy2_`lj^V/mǴې)qz;baiP!ODvy4x&sJ6%'}sU@vMx#0szKL< f>V>\Dyh.:k]:9ϸ _I]9cbʴ1jhX^~CיMa.mMpC|W?o?``ζpg)f XNQnIt e< 2VRYi^U]' '<5Ac}fe|w}]vUͽB]f$ uVˁ(!RA\4R<ʅ;mB*7wHf8'O%W 3>I|Z9:L{zNH`3Wz5vZI)[pԝEwe7oA;3ZfU6$ )u.0|:E] sbLGK0#a'g!gx L܎ROۺ/7L*–NdH}V6{U~1OC\>Hʅ@šYcM}5f]F%G\B0R^LeisD@uy7ƃ(|eT8s~;y DctO!Z-䆴tK|XэJƅ"k>iZrrP -sʪN-~ {F} RvĈ^B@*Z2^(BxzAҶj]}DLÒѯxXd(]]"%|S/yM$c05N HH(c[-یKTC 3(Ḫu9Ut)]jEjkPgESAmJ{X^;J 6{Xfb*yIS+A\. >Q72[6 MXua*, h}^s($YaH /ϡ@efhDAn{"`lnƜ({(h9q,g6+?}ӤA%s{:#;K ffQ۾|B3Ucl&!9?)?~Dre0|d⺺3Ѕuo fP.l@ϔSezx˛{[%9 ;6JWprYAFϭ PM<b sd K [!fۑ J u)_B9 E x$Gu?&X\RK/nM'P؛,nv!i>=*H*Jf CؒOgA.w<"bVm>h($$D5g>ag6YuOJ&*:WN_+~U~ybYJ"hONFD!׷dmw.ɑ2C`}4՛ߤE65|ָ̉h.o?:gZ >H`n8'pDŽ_dqRc۫J{1y2M0XxLTD)|6L{K [ W_M&jX;ܯ K#$]ZRB!:yq#+)P1J_roꅂY 3y^~Y)46H(I ġRe:e_BǜYڶK\ri?/.8Eǝ|~ڥG+f ngp|^ ?Y=j 0MTo=|cҼ(oJ#"SyEV'G?ӕ=k`T`MfW>*2='3^,Ig#RS6ye Q%6$GEj~>$sZR2g6To!\T$p}u"D,.JkT͗(WРϑ('9c_[2lrk;$l_}hmv{2Cx2t|xIkN6J2őQ!|?&anrw2h`Ä%ݖ'Սz|z:@ރJnG*<+谥m+Ln@C[^s z.x6=cv'*#IX}2]WFq@+"ʪ`ح2?lF3óQ481e=d}Xҭ3xnIAi~_9᫵Q?}!n\`?;;mP26$+no&:wTfI传顯!WoΟ5剚ꔚsԨ { njb.iwJzO7GLy*<$fDp(Bo-.p澯ݿJXywgJDg|d+"ywS" VO:qѷF 1%qtohE0$pyI&X?k75.Dqk{9`tkv%jS5L/T;=rL:C?1RءlvXnQz|xđXVZ Gd+\2kZUgH}N->ۭAc즫Oylcj%k(?w() ZoۖYFTMe`F%ȍ P &>U*;VJbRlvL%B1Ҕ^@BkŐ[QQg+%1ͰZϗyC]w4F֙^@M"-Yk"|H(3Xv+kc )|)괒(.aQ B~⊓S♰O?)Z૏gc*yG$sp'ꮸ~zRF#4cnf' 6u l2*-N :I>N"?`OFZr*^vteC/$nЦPVkXVvo{(;΍~[Tj@ގM+v&&㑴ys^+K `[`;#,f ,(Ap8WEp\E"$/ m$ƠmX5uD1KlHpY"1M4:Mĉ@JXTyi7/ D㺅_UPR>T]|/C?% Pn >S,8vcj)-:WPIx5+#CXaA#\𧋘51kgRĭV;LgXyv:L?%y/JuqM̬ue)f݁~]G< eT.U"U~DF⦌'עW&T6m;pt/c=Pqt sա[QM>6  fPX,RtX?' G4$)5Vf*xSmAG[kD#yC;\ c鯷4.cp7U)`"W;WXbM;Y*ĕ=-OayqDI ;_1fWVs8b!MV US 8EPjZ(rj9,6gmU!6֩r t].9m$Shci( c #]eGL|rmx^.TO$=zD&B{G\2䗤CdNոFख़?bNoR^.=[S&|ήsf>@}U^{+/j^UіB0YB,j?*!A<Ι=`ZҬi96߳A"GGR@{˯ZݙZq K!rkp 6ڰTobegC7fǮ -߭I?H~jn~S#B0 >πSoo֊ [Yo98+_SRl"1R[#PJ;p ݶ`A .ȓ'/ntİ1c?]\| fщ϶J$Xo&1Zcr KDV̾LɏZ#=ż$|Nj? ^wT6@D*OҲWW_"q rźx>igm^ КYH"mOUnR9-hb\JmuDa/m\c'k$# ZBi!{ͮ 5$i?)dՍ: 2 R* ΐ w#m=d@{3!>궷3\[Pa̿oښh(h"VB Dd; 8Bq LBVrl f S1'%2[XŸ ayiM>cpΰSUIZĔ"RAx=3c/j6{72LйIo^ӀzLGÈG## % Rje88o[ހa P SXY=7(@%n6C=Vۗ}dgڕIc2on7{js`3uݶuS",c|E)BcYULVXX.dyCyDX^亸7j3ڠfMroխa18mڗm(nEQfX= U b(ESBBO#/=ŀJODRMtcJ2+Uw[Sp˅:D#-= OOB d1ditT)wNifM@Ƭq_ xCXw=XO j}AyQ; -Kyۜgz32'Y{ě"pag֜$62tY ZT!EJaD5i󺯩Xl4Kq%${2Q]~@Μ5 㪅B3{0.ra[tVS1Vh'Ku9Uc(w.d6?aRGUi Q+P-q;0'27 &I('Ɩn+ @{@Qi)ÿ.\JT 4`md V{SS6=Mnz|[B ){qOQ|< Eani-$J +4 ̳6ݔ`,}Y ]bרb,ARơc~S5`}"_/nʳ7=z4j!H^ڟs5NX6~m l5f5 $o 苋TK0b@Wb 'iU'#BKH{L#u/~$f1ouOV%?X GMyޒqc] H ̣51ZŞ Oþ@XAʢ!_&eJ^o9 Tcl 1O$zdL?Aه? T[H%wOgybmG[  ,U{$3V薴[>kZG-4d= + 8A/0DluAB0jY m7Ԅ+U4&o'5F_z3v $6xPc~\ΒY=Jt!cLqOɵ^H 2i$CXe!*pGG1ݮ?# q,ks\{JOtޭ=X þ]շdȸk-W_ܢ k;0Ln mhūNCIT\ i2z= ֻƔǕ@8'A~sDYtrLE^/Dn)\R&Fۗl(@$m=oq! 3::MOkr0QW)CkD5hYDYϊ ݏи\JS}Bj{( Cl.hSc.m]$ABt]W &j6v8D?]JХۊ&L,Vt;%.1\㥜3# ѼZSjqrVfq`1܍$M."m{'tbɢ6M'>MGc7?I@+Hd>24!uV^ΤExwŋ~a™boƫ9ܠ:`!.6Bx QpS2Jixn@*զ;(\-;ۚMu%#m5Ir}_R|qr9?UkF6J+Et8j{C3zL?Bqxp{vi[هiTx 1]ZNᐲLa}..&="kޥϧQlr`ghp-E3!T$L.\ 2 tEf+j-*}׳~ e7Ѣ0iǔxucZ9M9}Y_۬mp1.;);? 4U:f ڐve'~i0"w$?,,!؛x0!0} 'K{.!MF๟Oi˩QijEs"1Y|f LOv}EB|~)J ANǿw(Y[bols vePJCL$%l_"iN{w$/јFʃ(<}&ȞV+rN+d#X@ktm