sssd-client-1.5.1-34.el6_1.3> H HtxHFNI@ ?*}}~sxUMѧ2ԣGY ]{N'Bsc5a3903cce936b60ac9b378cd680caf2fd1c0fff<]GDGZ=5Q _FNI@ ?*}}dt~aQ %:Mc"kK}>;]?\d  E %+0P ` p  X `(8d9Dd:d>X@XGXHXIYXYYY \YH]Yh^YbZnd[ e[f[l[t[,u[Lv[lw\0x\Py\p \Csssd-client1.5.134.el6_1.3SSSD Client libraries for NSS and PAMProvides the libraries needed by the PAM and NSS stacks to connect to the SSSD service.NBsl6.fnal.govxScientific LinuxScientific LinuxLGPLv3+Scientific LinuxApplications/Systemhttp://fedorahosted.org/sssd/linuxi686G `(!lKjyA큤NB NB NB NBMA@MA@NBNBe5e9a2526bbb35d9de1090bf123a4c2f0a802c5381a7576bf653faa4a3d52a690b12dafc833d2a6999c89214865619f525e46610022da35ab5336b3ffc57f5ee3ac25c98815baaebf970cde14d2d800d70b4c235ea9851d48fef6bd2b936a8f98ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b9036c57f43c939054fd4b831f271a14c97a488c38f98cdda5e887c5d396e3b3bc58bff3f83ba4d3b9ea6b9e6e11d2b634056ff1db1cb1d0b87ceaada2263ad13060d0f718e4c201be57e2f512aa94085df701a23b45c3abd22bf834ff4d04dde562rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-1.5.1-34.el6_1.3.src.rpmlibnss_sss.so.2libnss_sss.so.2(EXPORTED)pam_sss.sosssd_krb5_locator_plugin.sosssd-clientsssd-client(x86-32)@@@@@@@@@@@@@   @ /sbin/ldconfig/sbin/ldconfiglibc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.8)libpam.so.0libpam.so.0(LIBPAM_1.0)libpam.so.0(LIBPAM_EXTENSION_1.0)libpam.so.0(LIBPAM_MODUTIL_1.0)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.8.0N:NpMߒ@M@MM@M@M3@MM>M>M@MM@M@Mx@MM=M=MwkMwkMv@MtMtMc@Mc@MbSM_MQ0@MJMGMA^@MA^@MA^@M.@M9L!L@L@L@L@LNLNL@L@LA@L@Lk@LYV@LRLI@L7@L(L_LLGKj@KK@KK@KK[K@KK~}@K]KY@KO@KKK/c@K+nK"4@KJJ@JJJkJJ@JJp9JlE@J?r@J0J,@IcIcIzI)@I)@I)@IV@IV@I@I@III@Stephen Gallagher - 1.5.1-34.3Stephen Gallagher - 1.5.1-34.2Stephen Gallagher - 1.5.1-34.1Stephen Gallagher - 1.5.1-34Stephen Gallagher - 1.5.1-33Stephen Gallagher - 1.5.1-32Stephen Gallagher - 1.5.1-31Stephen Gallagher - 1.5.1-30Stephen Gallagher - 1.5.1-29Stephen Gallagher - 1.5.1-28Stephen Gallagher - 1.5.1-27Stephen Gallagher - 1.5.1-26Stephen Gallagher - 1.5.1-25Stephen Gallagher - 1.5.1-24Stephen Gallagher - 1.5.1-23Stephen Gallagher - 1.5.1-21Stephen Gallagher - 1.5.1-20Stephen Gallagher - 1.5.1-17Stephen Gallagher - 1.5.1-16Stephen Gallagher - 1.5.1-15Stephen Gallagher - 1.5.1-14Stephen Gallagher - 1.5.1-13Stephen Gallagher - 1.5.1-12Stephen Gallagher - 1.5.1-11Stephen Gallagher - 1.5.1-10Stephen Gallagher - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Stephen Gallagher - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.2.1-28.4Stephen Gallagher - 1.2.1-36Stephen Gallagher - 1.2.1-35Stephen Gallagher - 1.2.1-28.3Stephen Gallagher - 1.2.1-34Stephen Gallagher - 1.2.1-28.2Stephen Gallagher - 1.2.1-33Stephen Gallagher - 1.2.1-28.1Stephen Gallagher - 1.2.1-32Stephen Gallagher - 1.2.1-29Stephen Gallagher - 1.2.1-28Stephen Gallagher - 1.2.1-27Stephen Gallagher - 1.2.1-26Stephen Gallagher - 1.2.1-23Stephen Gallagher - 1.2.1-21Stephen Gallagher - 1.2.1-20Stephen Gallagher - 1.2.1-19Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-14Stephen Gallagher - 1.2.0-13Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11.1Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#727041 - sssd_pam leaks file descriptors- Resolves: rhbz#716905 - sssd shuts down if inotify crashes - Resolves: rhbz#716909 - libsss_ldap segfault at login against OpenLDAP- Resolves: rhbz#708352 - SSSD's async resolver only tries the first - nameserver in /etc/resolv.conf - Resolves: rhbz#708353 - latest sssd fails if ldap_default_authtok_type is - not mentioned- Resolves: rhbz#701700 - sssd client libraries use select() but should use - poll() instead- Related: rhbz#693818 - Automatic TGT renewal overwrites cached password - Fix segfault in TGT renewal- Related: rhbz#693818 - Automatic TGT renewal overwrites cached password - Fix typo causing build breakage- Resolves: rhbz#693818 - Automatic TGT renewal overwrites cached password- Resolves: rhbz#696972 - Filters not honoured against fully-qualified users- Resolves: rhbz#694146 - SSSD consumes GBs of RAM, possible memory leak- Related: rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS - information- Related: rhbz#694783 - SSSD crashes during getent when anonymous bind is - disabled- Resolves: rhbz#694444 - Unable to resolve SRV record when called with - _srv_, in ldap_uri - Related: rhbz#694783 - SSSD crashes during getent when anonymous bind is - disabled- Resolves: rhbz#694783 - SSSD crashes during getent when anonymous bind is - disabled- Resolves: rhbz#692472 - Process /usr/libexec/sssd/sssd_be was killed by - signal 11 (SIGSEGV) - Fix is to not attempt to resolve nameless servers- Resolves: rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS - information- Resolves: rhbz#690866 - Groups with a zero-length memberuid attribute can - cause SSSD to stop caching and responding to - requests- Resolves: rhbz#690131 - Traceback messages seen while interrupting - sss_obfuscate using ctrl+d - Resolves: rhbz#690421 - [abrt] sssd-1.2.1-28.el6_0.4: _talloc_free: Process - /usr/libexec/sssd/sssd_be was killed by signal 11 - (SIGSEGV)- Related: rhbz#683885 - SSSD should skip over groups with multiple names- Resolves: rhbz#683158 - SSSD breaks on RDNs with a comma in them - Resolves: rhbz#689886 - group memberships are not populated correctly during - IPA provider initgroups - Resolves: rhbz#683885 - SSSD should skip over groups with multiple names- Resolves: rhbz#683860 - Skip users and groups that have incomplete contents - Resolves: rhbz#688491 - authconfig fails when access_provider is set as krb5 - in sssd.conf- Resolves: rhbz#683255 - sudo/ldap lookup via sssd gets stuck for 5min - waiting on netgroup - Resolves: rhbz#683431 - sssd consumes 100% CPU - Related: rhbz#680440 - sssd does not handle kerberos server IP change- Related: rhbz#680440 - sssd does not handle kerberos server IP change - SSSD was staying with the old server if it was still online- Resolves: rhbz#682850 - IPA provider should use realm instead of ipa_domain - for base DN- Resolves: rhbz#682340 - sssd-be segmentation fault - ipa-client on - ipa-server - Resolves: rhbz#680440 - sssd does not handle kerberos server IP change - Resolves: rhbz#680442 - Dynamic DNS update fails if multiple servers are - given in ipa_server config option - Resolves: rhbz#680932 - Do not delete sysdb memberOf if there is no memberOf - attribute on the server - Resolves: rhbz#682807 - sssd_nss core dumps with certain lookups- Related: rhbz#678614 - SSSD needs to look at IPA's compat tree for netgroups - Related: rhbz#679082 - SSSD IPA provider should honor the krb5_realm option- Resolves: rhbz#679082 - SSSD IPA provider should honor the krb5_realm option - Resolves: rhbz#677318 - Does not read renewable ccache at startup- Resolves: rhbz#678593 - User information not updated on login for secondary - domains - Resolves: rhbz#678777 - IPA provider does not update removed group - memberships on initgroups- Resolves: rhbz#677588 - sssd crashes at the next tgt renewals it tries - Resolves: rhbz#678410 - name service caches names, so id command shows - recently deleted users - Resolves: rhbz#678614 - SSSD needs to look at IPA's compat tree for - netgroups- Resolves: rhbz#670511 - SSSD and sftp-only jailed users with pubkey login - Resolves: rhbz#675284 - "no matching rule" message logged on all successful - requests - Resolves: rhbz#676911 - SSSD attempts to use START_TLS over LDAPS for - authentication- Resolves: rhbz#674164 - sss_obfuscate fails if there's no domain named - "default" - Resolves: rhbz#674515 - -p option always uses empty string to obfuscate - password - Resolves: rhbz#674141 - Traceback call messages displayed while - "sss_obfuscate" command is executed as a non-root - user- Resolves: rhbz#674172 - Group members are not sanitized in nested group - processing - Put translated tool manpages into the sssd-tools subpackage- Related: rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1 - Also add the updated ding-libs to the BuildRequires- Related: rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1 - Explicitly require updated ding-libs- Resolves: rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1 - New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options - Assorted bugfixes- Add noverify to sssd.conf - Resolves: rhbz#627165 - TPS VerifyTest failure- Related: rhbz#644072 - Rebase SSSD to 1.5 - New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Resolves: rhbz#660592 - SSSD shutdown sometimes hangs - Resolves: rhbz#660585 - getent passwd ' returns nothing if its - uidNumber gt 2147483647- Resolves: rhbz#659401 - SSSD shutdown sometimes hangs- Resolves: rhbz#645449 - 'getent passwd ' returns nothing if its - uidNumber gt 2147483647- Resolves: rhbz#658374 - sssd stops on upgrade- Resolves: rhbz#658158 - sssd stops on upgrade- Resolves: rhbz#649312 - SSSD will sometimes lose groups from the cache- Resolves: rhbz#649286 - SSSD will sometimes lose groups from the cache- Resolves: rhbz#637070 - the krb5 locator plugin isn't packaged for multilib - Resolves: rhbz#642412 - SSSD initgroups does not behave as expected- Resolves: rhbz#633406 - the krb5 locator plugin isn't packaged for multilib - Resolves: rhbz#633487 - SSSD initgroups does not behave as expected- Resolves: rhbz#633406 - the krb5 locator plugin isn't packaged for multilib- Resolves: rhbz#629949 - sssd stops on upgrade- Resolves: rhbz#625122 - GNOME Lock Screen unocks without a password- Resolves: rhbz#621307 - Password changes are broken on LDAP- Resolves: rhbz#617623 - SSSD suffers from serious performance issues on - initgroups calls- Resolves: rhbz#607233 - SSSD users cannot log in through GDM - - Real issue was that long-running services - - do not reconnect if sssd is restarted- Resolves: rhbz#591715 - sssd should emit warnings if there are problems with - /etc/krb5.keytab file- Resolves: rhbz#606836 - libcollection needs an soname bump before RHEL 6 - final - Resolves: rhbz#608661 - SASL with OpenLDAP server fails - Resolves: rhbz#608688 - SSSD doesn't properly request RootDSE attributes- New upstream bugfix release 1.2.1 - Resolves: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity - bugs. - Resolves: rhbz#603041 - Remove unnecessary option krb5_changepw_principal - Resolves: rhbz#604704 - authconfig should provide error with no trace back - if disabling sssd when sssd is not enabled - Resolves: rhbz#591873 - Connecting to the network after an offline kerberos - auth logs continuous error messages to sssd_ldap.log - Resolves: rhbz#596295 - Authentication fails for user from the second domain - when the same user name is filtered out from the - first domain - Related: rhbz#598559 - Update translation files for SSSD before RHEL 6 - final- Resolves: rhbz#593696 - Empty list of simple_allow_users causes sssd service - to fail while restart - Resolves: rhbz#600352 - Wrapping the value for "ldap_access_filter" in - parentheses causes ldap_search_ext to fail - Resolves: rhbz#600468 - Segfault in krb5_child - Related: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity - bugs.- Resolves: rhbz#598670 - Ccache file of a user is removed too early - Resolves: rhbz#599057 - Incomplete comparison of a service name in - IPA access provider - Resolves: rhbz#598496 - Failure with IPA access provider - Resolves: rhbz#599027 - Makefile typo causes SSSD not to use the - kernel keyring- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP - Resolves: rhbz#584001 - Rebase sssd to 1.2 - Resolves: rhbz#584017 - Unconfiguring sssd leaves KDC locator file - Resolves: rhbz#587384 - authconfig fails if krb5_kpasswd in sssd.conf - Resolves: rhbz#587743 - Need to replicate pam_ldap's pam_filter in sssd.conf - Resolves: rhbz#590134 - sssd: auth_provider = proxy regression - Resolves: rhbz#591131 - Kerberos provider needs to rewrite kdcinfo file when - going online - Resolves: rhbz#591136 - Change SSSD ipa BE to handle new structure of the - HBAC rule- Improve DEBUG logs for STARTTLS failures- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/sbin/ldconfig/sbin/ldconfig        1.5.1-34.el6_1.31.5.1-34.el6_1.3libnss_sss.so.2pam_sss.sosssd_krb5_locator_plugin.sosssd-client-1.5.1COPYINGCOPYING.LESSERpam_sss.8.gzsssd_krb5_locator_plugin.8.gz/lib//lib/security//usr/lib/krb5/plugins/libkrb5//usr/share/doc//usr/share/doc/sssd-client-1.5.1//usr/share/man/man8/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i686 -mtune=atom -fasynchronous-unwind-tablescpioxz2i686-redhat-linux-gnuASCII textELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, strippeddirectorytroff or preprocessor input text (gzip compressed data, from Unix, max compression)  PPRRRRRR RPRRRRRRR R R R RRPRRRRRRR R R?P7zXZ !PH6}߈ ] ce9?TUw@snJP~UTl0٬FtlT?cOOjḯ&0џ!p(2䧾S] 心69x7cn5kj?l倔 O]*@`lCj~d]GeF ة>MB[EkQ/v0qՉ!gQvL-1epO-gـJFZ%vcT[)Mu.R$_X@хӂn)jۖk %H#g/I9bnWaFSbQp7vQs e:  Ο,Es>񦅅[;UJiӋ5<_9cCQcTؤƽS;Cr f#uI޼3KP:>/I#D[76| f.Bc OUպ[zP// P>9@!7(sǻ, >]˩W6njIx 9gDX_u(C}O1 yoZ$gêpVL+SʗhI< :'\*8%ͼ6[tx~-Vji ,=9 u`Ҝ?t E|/*O"f`Y^*|aϩW-۹',1MKb-0*2e<٥n)(6,戶ʼZ)v? qv5)zhO #J`!(:uqͩ73lR}qP;&/Ox뾉x%u~P_97gLq癓[ymȭ h_FR69DR SH67hʼSb]b c=/w9P*!X,B kauDb˟kuM>)&bŊ5pة\ P %<=MH⠴#PjťoR5%^쒤hTpVs,JŦu\ :KN\'4O d*SdU5PtZwId?Յ-DlǢa\1ςf93<;kg0TRWG=QeRTs#*6o+"P ܵ/֡8* QiJ9x  #mY*_Ep5'nB-& EaCO2SB|CŽfN#5=E>/P0`]fwn!CWE%Hؖ,ֹ(LYa0n%(Xgh='; %>((jdF A]L/БV1W VaE?Ą*>(!zۗE>/AsaԘ'd|n툾T^".2{yUmjt_$v`Ax8_䲩>\-.S^ P0*,%!9د^ᘬQhVkvĐ'4&-ÕGP`L~UÖoНeɁO 6y-SLe]lI;4e)='_@9j;:v RAh}鸰fo #>ߦRH׀denP}r>!Q\< ;M;';'|a?rciz")4͹><aW Vwd-#R_jڥ[3 zɹ3`}[ȸviDT%t륨nbKu0r%;ٮPa>|HSbb-jL+ Pgaxp\~)[6if^%Zu?Kn9Ջ:m ǿoWAIN|[whZ<( Njӝ #]iEC p+$hmQZuo$Il_$?oyB2$VCɘ[^6Аb%ҽ}~FNe1dT1Z7?8+դ܃ ]l#~t9NE2^NT!}?4.VDv2Wg0›Ot0˩jݲ N"(d(.,e~7SdlϜTyė#n+ɢ^n+ qVX\֙g^Y[տQma#p :t<Ԭc->\{>G6,=aKuVQh S9TBz5uJ7ш3f=u9|L>&rl]s\/B\H̄ԋdҏvJ!ZA@s:]")2n 2Kҧ;u(Zv P0o3X#֚k` !tW G붺'#uus-ɘ?$ YRzB^m˗taŸy {4>(-]x_FZJ`pۥj!NV%CѰI2sEfOgZW^q"حk%/k2ud`zzɎ{ U@9W!Vn0k(7U_('/ҒQ-כkgS cw7ilF<%B|#FkW2yYB4^]S231]&fh &&s)VI,ZR&nwE_npp[HS=46oܮ/_2f[sFMGs[& .L!V[p,dt Z75I-jA;m[`t$xȗ݂G#'@pr}IwcFEfLEhR,"'vP GWgځ;)6?c7vBfӉ1Jf$ P+؂ŕaن|PR0;J7Mߔ/dܘ4p4O9y_$$DZt~:l M7P07;%EHY5b8e~ 4kr$Qt.%G+q%ފ<lyQ%kUmC;7aWrh/]A#y7v'fV`A3r(y-%$=`) S9 ]?&fh [ 3OJdH*A_0qUo1-g%,& `b4.ljx L;(}[c%=%݃!bUm,gՄIN335'5ejQANuZO^~"Pn8OZħnTV PO{f{en8s/uPb؆Sg}:K̨ xS?)ڃ^ZiYr;.T aM,KƵhy d fف>,Y֏33Q9B]Ԫ-7{ ob#9]+'™TIӪsJ1&nef*ywNv+z0x{2 ]p rT ,R?LU[=yKLum Nrz4p ¸|ҢQcw:ɩE[62Bn!dvH)M@E]`25kD ܧ$D8PK:6Lb\Ra=!lnE#J3t8"%uo0:k_6r՛]ǔ;J^Ǔ!NHUt+P**x'IQv@hiu9DE7[BEy0=ﱓM3VWÌ`9P"*Ѻp)g]UyP5c7ZҞ]}ph?̰a| + D_"v DRfsx?'Q)zz_~uWmrư$ YleoB(dN=dd)H\"QW+8aR[Y|4ywN0*bAq")ߥV=՞PQ[ͽ1IuXkC}8h*i2!TC=dgVȳ>Tvtvf r`+O^ԩ(I2hfꌈ0v5c-K;\PERWnx Ύ,֥&VRH/ތshkK /c<)X]X%4ZCÇFIˏ0g+Hw '@L񲱽ߊtֺvk .a˓cfTd`1m'k"&xh+ZI-Y O@;N jcO!EF2pZm+Gk)%1֚PN4`+8[03eC  5K|C9٬,EѵaJ׮vSD~w,ͲFDmr܀#H ʍT!fsRe #xqzW>K!gՅL%$A؂\&ՠ\{!8ia!_-],SY4Tښ.dDj"!Sұ]Kj|" cJ-g\jg$u<ĭ^8v5_z?#J\D5s'{~P\rH֝'B-M/GYZҴt<ȏze=Z UK]¸tjQ_4z>!.J|v~HfdIF*8ćМɬz̵SX+5UP- j48GckO6s2ixG%)AscA >8uJ~#*BZuj tRP߳3B8QLMG=r%lP= S挓gS W,*vUB$0u6"Jb:\|rsozR$ .8 I ΤS`~奟+f6V3yzΉHWn2kC*eX^фj;&qɲ[:R_ōMLYg[~0gCV/yH$J?o8, !PKqi5fiۘχ]#6&+aݔ) 7k?Xˏ+N9MiKF[I)xmk#7MH?Ql!I Ğ#؃J76FB(JYLhI 9B”FB>)0 Y5!Nsr=\Hܺwqw._2GκxcpdN[XW::;EAǫM:fS[ӆaZI=:t셠M\@f~I%fBzGI&V,l m$l\` +iCyFZ>5o|*+v0};DiG*'?eڠWpM @e$'b#wVYwl$QK(?mtJ"hQ(Kg7ؿ)i|B؟r>KXn0!Q굜ik/EÄ` 揷1wom19n /cy)&'O-F4=?$U ֛J˗N|h-N{6XM"8U6nvj@faiXg>Vza{ іNZo -0 n4"5lBSܨ_!Gxb|:k+,m/xP[e7X'کv&<>iO7feYMnnL*%\Q\]O\!w8 Na[!ƶ nx$u1BqoT4xŚT8a@: FFy[~ϱtH8nxݵOy"8ĕ>BVvrάfR^~@b#ikpH2?#DϼKx*BF==)oTe?N.Je{£T+JjNzV[y!ƶ}4}Ê^Ď >G+|@6hR >ƿنK<O|p{tweew Kd>GN@궀cqҏ,.RŏB/1:,=8C^( fUHpV!^ z8tULG-UL?GY[9Oomp7'[I _R `yNY A9\}9'=GXWM`A6#Vi7 t("\N1 S8 e8#(pOC~znz.<ك.]EԲLXFdMsJElŭ 33NH2C\׵O*Zh%8ms6@w ^+"\E /m,77{N vنzXkk$„x/:.#_;n4Y}*# !kzRYHu>9w_ZSUvFud)! ]Sd TPm@P'ܸ>Ǘ"!Nmn?H"<\Zkع: 5~h?ChI/ ]3h:\(]}c?G}{2dv/wxe|xypFL:+A bfe>D$Om})(@i|R]3FXJz tt@7H](k9(lAɘEBڨXm nD[B[ol "b)vij Ę-vF2|l_'k vdghNŞL7 dp^kt<ٰ("2mQ_:TIpdg%ꬅ'tNjh`ǦPMtsԿ6_%hax;PP 23ڙDuxd[̽tIO% &nB[؛ڃ&Mg2[V O:tc~ԭLض P62;̛Vn `Զd!e;LBi^9V V~H_]SA"4D6 4Ek9hhzB=g[QHN\zkt]n[,ηRO)y ~2Ɏr,/JPf n|m oTj=\mXʶj)pzDjmiU" S5y\2^K5 ?KͶw} )c2t;pm]pd,خs,unK0*l,"<$#: ݤCR Tz]_id4tɸOU"Ow;/AYO1jBT;Ҡit{gy*YR^.N2֎6F]](Aww @mVU$,EzvUR*R0R_*Ji?׺~phjhB 6$m]s}dVhg OÚjTQ7D(2I^JP:{:/4E+J4ڤ ."I+PS=y%D]\V~vߏdbdHQ>?Ps8U%.9 #6r\ ̴ۓȝr<X:҈+YW7QʀJVѣdPDZʅ8r_Gvz_RO*>aҦ}>rA?KPo mZ\DJ^I%Eũ]jU$עSxw=:c,ĥ"4Jn&o Ev>}8Vb#^?p95kt?Xr q3j # 61s;SxE1mT֖zj<$R.],ΐj{ |7?bOKF>3("mo@h\ .7լ 3嗏SXĄ>b|A%kj6.|Ja!@+ȱ7n ȕoqMv Li'vyb gB{n{įe]20IGȵF(&Uُˍ T: UHJnj>Cpfg(loL:}p:1HkmAP“>-, }n~w'"]Zuֲ Ji ? ,|R.|{z7_zfYnP ܻyxxLPio"dS"˴ ZJR]jy]\rG}wG*o9߶1Ft;{ıS@>IB2-tDX=&+Dy8f23Y: p .G[jcSqU>A&SծvI)x=(<>p@)yK jpTX6 ][ Qz7w/r/1QzE<}N :̬悯 *Гs}_s|Pv;3=dXk~!.饺+Y֠&5b0:Y7C_ZAxzUg*/הf &omϱ/Vs1XҤRK>0nq[ 1-=\rSHv}KMN*``+bO D7 )t"F(zz; >;⒃'5n$CNq}ngiU˱'[d#jegֶ4_D%)ZeZM>ox+hȉ:bo$: Lx&̅'g)4{>® "?-e\Jm'9K(U%]&vqr -PjF{Oa&3/l,9鬌s^!P;~'Xċ ȅfj% N|R6FUۘ /'М|)=nE_]!YMipg{^/ȆFks -z~[FQ;Kl˼#E\ti/ޣLNe&Y(` JNN 5ά:x+/R,coz;ڸӴ*ٵL˙En |_B>K*w:/"s/# {x?ˮ!Qe׋C#[(9"&iR~? X]A\7-X,M2G ~TJtJYk HZ?d0H1o[:𸲂vzфkLSMU%Wen/+re)戴`|{\$!$]\CQ:63-C$َ]s%Yf*|MKsrRjQ`p^W\C~[/p`0O$~E@i&V;w"6^56Q0Tv3ASEq&͜hj]8v7chk6agIbBM`a\nM{6j'!T)˦b]ir&m@jh3ܼ-GzzCr5'ÊLM@[g#40E}h4ʔ+w꾍6^"YIjz7l$П},ī/yIMjI/G;V o%VȭY*rZ=бm(wi-&]jLE#_/fۭ6aTB|KL0 +Hu :ty+@QX-#D*xIiA,۪/qt8Œ ;zY8y%@G07\'o͒ DHܩ%"?1M "U,ba?Y`COF.H! OOgu}}&'{^g2g* hsOWy;:֦0@ȷ w$^Bn?=+fU-"LZi| tj ۩tܾJԫAXb<`9$( Mz?7⃍Ǯh5qό ]\UT* .w}Lz%> rhFڢ<8_i7u gj N=jl 9[d#CY$B2юz\/J;mFx )d ctq 6g6W&'am O[0kFՋJH-,[  pL@2*PӻH9{O@4:yX C0P W#ב\Y~εqB#@ 7 ƤtZQ>5i@ qblra9TB=dI3ɁPpw?dLϵ-tPMX.a${WA\p$z)$gdy>YG4J2t^wm*&rΧ/1NmR[=|uF8x6iTq瞇MM]%dGt?ը\T(Z 2+ϡ~<S6sőݮ0=Ic*cDh_K8~^X5k=2T1K ǪVfKˑ JHH^BfT_T1"nAp0,wwҌ%Ԝ)oSɞ؜f7rlX@;ᕷ R󓖥fytp~ 8\ӴDdV؈IITc0?$[eu/Oמe4t'<,!J@|*O1pIeȲs Etf<>f%sBj'Ju%`Dׄ7f@,\bK%aj [ sG? BeλHJ nc&PLih%C׊& ȇnLlI&pUd?J?0+IcJ|nkя+wZ(pN8BВ4I*6djۆ뀩 p9:/p•'z-A*cb\vrT-l˨;M\O`EY??LrL _ Gvnv7uWޯ'P ߉]2673[>EGaUB]Twm)Яk&qa;\Cěccp*$A{#y"ƍеGh2+1 ܟIj8v=^J \r8u("j$Qm> TivU#w0ztd |iI-BJ4 zL +:w!Ң ɍiHQ+x \a# aFwJM_RI[d&kv6eI"xu'r0i'4T8H{ə5GpUu2pRĞlBWG&,Clt"bp3oN)L{Hne:G$Ӷ {/j).O%hXI~^lL# a'ݴCGRXGsaԋ_.ֵɷHfCC rGoL 5|&dpOG)h: O{&_z^0y9tv>ܬZ/9uU)xd04i7݆{re VWChOo)lU+`q̸_Ok(UX'e4"kDjx~6/DF&+0\ Mibn3~=׬AޏGP<ʌMN@L~^ A(05ҔIRrJ^m 6@ټVj+y cCdСٺ2"T<>œ3$ 2- (=y]5?\sI-d)Xqn5V#G"UW(CMt9QZF [%+0͌0pW5U4?aEjLA@OVQKg2@Ah>;YPJ1|B˲[> )D&#/q%V8UϹ,lڷ 89_r:TVƶepsN-]iS I%~, 'EM -CX_Te4mZyu"^Cces5iӖ0k,Τf ]7ϙ̊+&ׇF+]\*hzNx*'AmS({lXr.r2 CQ!ٕY%mQ5wAmoݫ=@ivy^Y6]{Nn צCx on#$qL3yid)xFIۊ *)S|-6J+ٝ)U7}w1$7P{գv('NfwpW Y4H EJbN2\V|VrKljeʚ0YElUvUsYp3pUm&W.QB)L\)G9>˕A22[ߥs3|9w%eCqf_ʜ]^=5z}o{ vbW4cQGOkTFU:"a> E0!jȁsEw6xW$GQs}@Jj\;t RV*/ܼclU\ ˚ ,rqlIY[psb@ ;;W-70DpsNfl{UbQFAd*Xdˇ-w(?<ۖN'@C: q[R\YqC{"8jj j4Ih`7M4ߩoJ{ˁ?w`>BwԮlwi!暑_1]iڅKxْ< *Jucd&5$BR8鍌gnnLPcPCm|nc@sP\e@;S,/4Ee)yI$>%S7!o`Vy߱Ze! TStqI1܍+7H~y|ND=c1㤖 N3KC"tߦp@_EϘԃYcs0g}?s6iBT_Didyv/'N?w9X'oxP]2ԥtҺ sT֞[#`S ^-ڀ)R*W #-i96ofZ,alj+YX8g}, Guqf4'o) h%KV0_œm;2a~tzMz]Aqqu!6MrEHO#۬Ģ/4)J0%Ma+rĺܾ^)΂ƒ1\w8?RU~I7on%Iјh4f0/7ϔPUjԥQƝŽ~qKGk8{M|hW a32BB5H-I{s{܍Y14tV|E.<@/b*[QgUt;roeO Üѷ[QW# +Dt'JGc@0 DBu6:H\XO< o`ਸDd8ߕ4)4\G*&[.}~oyd8y0־FL\OYla'{0zJ'+D]: rta~ޮ4ՊETt"FZz&E5b 8 {DKu9vXi:EvPv\Ml7*"6h_6j >»H4A(N:4`fCjnOϻi8 [rmWk6ۡTp$P~j廩zUTNwC }wE8?c< m7=rϝRn"bO#M<ִxաl+--a9*XM~aJxS+q,6;s:PZur>.w֕(}~:v'`T+0zi@'m䝝ܳ۔kY֙owE*Fеr88ΎyyP)ҏ^6% Mz|moD_q*i8._L?b݇oy=yte*zB"܌A^|b,Krk{CuՍ0k5ml'ߘ3NԀLKYCԿұ/C@5/[n#K%{*&|H4柁ȶR-ORe(/%VlҠrwE_[ 2@[z 050ȑT6:tMCj(>9yUTt~HJ- ƔJd\뷚dl&;|UpVJ{;<~0!%{ Wm>V;a7/zPq:/BꍪaJX۟4o$J,tlx@ y2Eg0aK`ig祣R-E5P/Lw\Q/j:An;I"!#0QrQlU%*m)[\u.!k8HN{9".Uې1 3:un2։W_[Ĵ_f^M0rt]~%nH]\: YMUa +3;eل.Wǭ\" ^,ӾA{#eJnoCWU[ PІaiKuhjm# $/ /2Z*5T] 4sGB5I)dZS>P!2CdD Y?*~) v5b!JFG4- amAx,Lqr8ƀ[bmxz䰦pG '9Q-,XˉO:q<#8 cڛ+ⴙoch Z[0^bHbGjĎi|~.}K!T~  *Mٸy!cd;/ZpCɰ-V}MF$*': X#Yf6iAH`}JV1I{8Ӝz`p e9wd۟uS-W.|'̫YmqZ̃j=P 0 I5N*E믭t-@mhE\圫(RLExTഥM:`2 ;;L[2Wo6\3˹uUSرҮ&ܗ2VwRDPʃ/57E4e\KgJ]{؟72f8@4%&{~8r8,YϿњea?Emv #Xֱ_֊!8u m;ut)Εv.ReX JSM l]CQn,b3tݵp, Gf!ЯOj3ӱ߿n&4j[QH9%)<Эo ўdUl](¸ v?Q[ G!V`wd"(<LdO77onZGTʾOK˄L#̊J! 7̣Ou{+̳N:73۞'^]^!{}1ô)B8f?[̽lNf>2`P1Ҟ9g$>w:=#=yV~  g.!B/P}ÜG##v l%VВ,>֙z ϐMz4jZs cjWxqVĔ("}<رlj1КV( c\MU%ͅ>6[yWأp zQHwx~!\|8 h$۪@P$.7U d{>-Є@ͣvW0lcP]y={N,:1}FVgp,L.PeJц]3mӳÃShm[Io*/-Ô$%XR $A4r$JR_z~~tJ 2Iq+,Xj@]G1n}fw wQ524D5ݣS}Tc8ggλ} D"456+z?JPk)2Q8J;Xd#yj|wVTk˚ >=Fnd2Mϝ#ue::_#'v*iOYi j\**Oj3f~^-T?݇kR؎1ل'wl6 W F)Zy;-[C ,;8cou_1hMێ6ԛ8Oѝt@طϠ v@#ڢly^0aٿR868+wL4W(f{%N@XD 2J, ٫*!ir56؛ИF&aQLfvо^ef I}T6~ڰ 5|1vB0[$dY6;uAZAa*b:7/7ND3Nnq%FRqnGL[gy=]RF*Z"K>cv8a-mQ+m7Nz`Vٓl/AY?j}}6im;fJoLůl~U&ڵn8(FJӔƜz\9i}q L>M}\TJF|Esew{1icΟͨ0:Va.h6Oz*p.gV[Bck`D"oƐZԼr#D`ȪKS~4A!qgb .$̮>ոH'-[\[/[g\/$-iz$+L mx֖E6t& 4ʟ\^wgU Uo/Od[;Ep5)>Uwth^st1 ?Y`BawSd[ u>>˱ᥰCjJi/qy$B3P |~f?e=FV!Xw$dcPȡ/Ps| +/KKUv;#h-*w(EЎDU`)Ny ]\6bz~XU0Oz2\sO,w}7kF@󆞑mIN"#_m<à(yfc+ۃ] :@nyLX]EAHt]sO3BtG@WYZ(],^r}luh'*@>k!w?1G |´t~u/QDrQϟBWA΅DJEh ^umn )^Qޛ*ivRur.GjnlvcS9(Tۯ@!b㏅_Y;ZQ2~e(<yd*ͭ &M=ۣhI$ڭfEW#so1Ѱ$J\0X43{UZ܅S^ PPo7mg2{g^pHlEr3I@IAc9*ȼao!gY4 G-y/ шf\BXVpKmIUe%lT|Y:wpSk0YeA^ΌG &rCvӼS-z-[?3[3$ɇвpxYdr!;-^KYaֱA< %[Ћ}J~H֗y KF[T6e&FA{pjo؋&ST%ӊdCծՀV'a~ T #ѣibZ++52=Uô?L!޲*i:`gãj'7P:h<Gۣ XIȨIgcFߛyES06ف+u ,cmQL,+Ɉ`PpƬY"Bñ;J$кTai QܯʗY-(>'6ώ5瞾Gj컺02ژm(!;kYɱCǮI" p\PjPE/rl"#Č/-2~ODMV-OL=>ΆeX)fe)̈́xMl44Pe`d9cY[q 0)vKn`5':;UHoAhxCJR>$75Idzwh=_{+3~FoZgbQyN}*DFvl7a#\Mkn.ǯIЋp=/)x%rcI50EcUAC3MyZU;5Ȇ z5V٣ CjbP=2GjUքxT()M5 #klJ'"Z['vnpD#\:iM0]x4w)wL] XQ2htnL3Ƈo*ƳP\A4s 2NAjAgFnr홻hrۍM\IQ6ݒ,q`9m,SqJvTjm yzfx*RXkEE?fDI oakCi ++ A>5gKbZAGˆ5t{_&v$]L*~"]g3=i#='l U;Al[D6=@@}GHl:t(B_fSx%Jg_GZzeÚ 9;PNdPU)w7M9_jܓ\#"q#?w\^oIPGZ k$<9~KggwTU2,=v')BHM-zQר,Zܽ޿\.Y`0Y5DZkXQh[^ᅪY["K4jYޯh3jQC%G2spRhŭ c{gyأ%e9Cr)/wƙ֮)vLbQg~}a^ymcv+.p66[ Lc`\(L\lvڔ`;|PtM>H0PZYp޴R1z.>Ĩ({3-ue;pZ[`նw FYs[ Ϫ}}V8|> zzv2>$T {ã{/KّjX-3IS\mo.-Y6%u>, @┒AxĪDy O|>,[G5 +BM4RqUjL@6_pc[+P'gBMwT)BM;JsjxnN66w-È2ڭT-NlLx=BTv{@4 e E KiBv(#ltM@SD_'$# fwf-S 'v3wl!_ǬzWwK6/Bw;P%g3uX0\kz"?H"g;Ӟ&Qs+^m57DjY࠴͆-%юz 0{z̮m 1=wk- c2rÔiC |9>5~!ه9m|1>ɨVQfu9f[K7i*#ð?Ww A` @0PьdGvot~ +ܤzO"pT$*FcBME{YNdv\`dS(֩Ka"ĆT2Nœ|"R0Zc)MGi&5:' )3᎙RUCQ_G;ǁ,ߚ)\K|ghf @ ga@6i§*b 2eNo0[s*T4UJ8~j>*SȁX; H^Wň>S3-6-ޱc(*{]ԡ"&T'=G';TB<9agsN D̡6]]JB!Rn[*>VFiiT# Eϱw(2A){QYx_}9Hf{cT-oUCKa ؼU:}>oKRF՞W!(/Zˣ#%}o,p0Up~LXp+-DNv;BئLO7rS^Bt ׺o)<U̘V2y60{ *EZS}-w? m,R 6--o=WzYr.ϔFԱl)+==JxN\u_{(6! gߔA޻%A΀;D@g^DXxn-Yu}KD`ʁ+?Zgr򝣿Ziwi&{Oވ,WS{ɍU̽AÒ*C }8Zk XW/dri-K'?~ (\f ,n?aR #Me*AheS4e)4 q aY-4G9ĵpH|:~J*NUwfO[cy4'Ty62+H_eo-Ea=V1ijLJĦcIrh7y渜xc^P=sXzvmbBz{1DZoi~%NLs h"RxLvfcK(H6'[?,/iZq`2^f01jb.&Va]>y\EumF:"ʅ -R.b!L>9Gdiy]RRW\c?õg }F{4]eڕzZѨl(k") nY/tIqy% ˺+ka =ڡhm E؝)J4z䰥ٌc8Sg'7×݌jZ+^+xRSo67NbV uu.ga.ZR5:En@MݾCş*໦RDcڡ?=wz=qPR1m` PoU.82dr֛d%dzxB;L4»oXASX4j|LN8li(oy(/m)HZtn=S\ssAo!f W;nL(E Ͽ'8y *I;}`x݅>t9~@ Gga`ޣ6 (.]G.e[v>a#kٜSBr[ yW0Inzä.eedrJ,6ހLMvffޅ#BGݸ