ipa-server-selinux-2.0.0-23.el6> H HtxHFMr7 ?*}}'.) OIP\)nsɞ 6G6adfab6353fe4f0081412887a53fcb0ead179554XG8颚ފ"~-FMr7 ?*}}`V+vv/7uz{pjKFg/B0>@HX?HHd " G  .Tp ~    /  8 T w     (  ( 8 e9 e:e=E>E?E@EGEHEIF XFYF\F8]FT^FbG dGeGfGlGtGuGvGwH xH(HDCipa-server-selinux2.0.023.el6SELinux rules for ipa-server daemonsIPA is an integrated solution to provide centrally managed Identity (machine, user, virtual machines, groups, authentication credentials), Policy (configuration settings, access control information) and Audit (events, logs, analysis thereof). This package provides SELinux rules for the daemons included in ipa-serverMlsl6.fnal.gov=]Scientific LinuxScientific LinuxGPLv3+Scientific LinuxSystem Environment/Basehttp://www.freeipa.org/linuxx86_64if [ -s /etc/selinux/config ]; then . /etc/selinux/config FILE_CONTEXT=/etc/selinux/targeted/contexts/files/file_contexts if [ "${SELINUXTYPE}" == targeted -a -f ${FILE_CONTEXT} ]; then \ cp -f ${FILE_CONTEXT} ${FILE_CONTEXT}.ipa fi fisemodule -s targeted -i /usr/share/selinux/targeted/ipa_kpasswd.pp /usr/share/selinux/targeted/ipa_httpd.pp /usr/share/selinux/targeted/ipa_dogtag.pp . /etc/selinux/config FILE_CONTEXT=/etc/selinux/targeted/contexts/files/file_contexts selinuxenabled if [ $? == 0 -a "${SELINUXTYPE}" == targeted -a -f ${FILE_CONTEXT}.ipa ]; then fixfiles -C ${FILE_CONTEXT}.ipa restore rm -f ${FILE_CONTEXT}.ipa fiif [ $1 = 0 ]; then if [ -s /etc/selinux/config ]; then . /etc/selinux/config FILE_CONTEXT=/etc/selinux/targeted/contexts/files/file_contexts if [ "${SELINUXTYPE}" == targeted -a -f ${FILE_CONTEXT} ]; then \ cp -f ${FILE_CONTEXT} ${FILE_CONTEXT}.ipa fi fi fiif [ $1 = 0 ]; then semodule -s targeted -r ipa_kpasswd ipa_httpd ipa_dogtag . /etc/selinux/config FILE_CONTEXT=/etc/selinux/targeted/contexts/files/file_contexts selinuxenabled if [ $? == 0 -a "${SELINUXTYPE}" == targeted -a -f ${FILE_CONTEXT}.ipa ]; then fixfiles -C ${FILE_CONTEXT}.ipa restore rm -f ${FILE_CONTEXT}.ipa fi fiKP""$bA큤MlMxMlMxMlMlMl8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b9032fc57e4321c7fb58116282652a0fb6d1dce1270fcbf3c52d7794f77b0c519f722378ae5f9d2bc73370af9c30cb96b70f5bf81e70f6a14ad259c22de2a1524a93e38efcc7f251c0f053c4ecff96dcb64cd46cc268a1e7ba177c104881d6c8c69ab9062e8451344a598742a16e84edbd45d434a355d5ba9f18d169c19ccce73db66702a08f3d6ae0b8c86898820f6f6ce6a9ef4da0fc6ffc335edb5488c5cc0ed4rootrootrootrootrootrootrootrootrootrootrootrootrootrootipa-2.0.0-23.el6.src.rpmipa-server-selinuxipa-server-selinux(x86-64)      /bin/sh/bin/sh/bin/sh/bin/shipa-serverpolicycoreutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.0.0-23.el61.33.12-13.0.4-14.6.0-14.0-15.2-14.8.0MMy@MM@M@Mx@MMTM~@Mx@MfH@MdMU$MOMOMGMA^@M=iM6@M4/@M.@M.@M-M-M M@L!LfLNLdLLLzLe3La?@LD>@L#HL#HL@K/KՀ@KK@KKs@Kie@K`*KK@K @JJ@J@J@JJB@J{IIIm@I1Iq@IKIFFI9I1.Ih@IIP@H@HXHO@H-w@H HHH@G߮GGgGs@G@G@G@G}G}G}GG@GC@GkGDG<4G)G(n@G3G@GJF@FS@FFuF@Rob Crittenden - 2.0.0-23Stephen Gallagher - 2.0.0-22Rob Crittenden - 2.0.0-21Rob Crittenden - 2.0.0-20Rob Crittenden - 2.0.0-19Rob Crittenden - 2.0.0-18Rob Crittenden - 2.0.0-17Rob Crittenden - 2.0.0-16Rob Crittenden - 2.0.0-15Rob Crittenden - 2.0.0-14Rob Crittenden - 2.0.0-13Rob Crittenden - 2.0.0-12Rob Crittenden - 2.0.0-11Rob Crittenden - 2.0.0-10Rob Crittenden - 2.0.0-9Rob Crittenden - 2.0.0-8Rob Crittenden - 2.0.0-7Rob Crittenden - 2.0.0-6Rob Crittenden - 2.0.0-5Rob Crittenden - 2.0.0-4Rob Crittenden - 2.0.0-3Rob Crittenden - 2.0.0-2Rob Crittenden - 2.0.0-1Rob Crittenden - 1.99-36Rob Crittenden - 1.99-35Jr Aquino - 1.99-34Simo Sorce - 1.99-33Rob Crittenden - 1.99-32Rob Crittenden - 1.99-31Rob Crittenden - 1.99-30Rob Crittenden - 1.99-29Rob Crittenden - 1.99-28Rob Crittenden - 1.99-27Rob Crittenden - 1.99-26Rob Crittenden - 1.99-25Adam Young - 1.99-24Rob Crittenden - 1.99-23Rob Crittenden - 1.99-22Rob Crittenden - 1.99-21Rob Crittenden - 1.99-20Rob Crittenden - 1.99-19Jason Gerard DeRose - 1.99-18Jason Gerard DeRose - 1.99-17Jason Gerard DeRose - 1.99-16Rob Crittenden - 1.99-15Jason Gerard DeRose - 1.99-14Rob Crittenden - 1.99-13Rob Crittenden - 1.99-12Rob Crittenden - 1.99-11Rob Crittenden - 1.99-10Rob Crittenden - 1.99-9Jason Gerard DeRose - 1.99-8Rob Crittenden - 1.99-7Rob Crittenden - 1.99-6Rob Crittenden - 1.99-5Rob Crittenden - 1.99-4Rob Crittenden - 1.99-3Rob Crittenden - 1.99-2Rob Crittenden - 1.99-1Tomas Mraz - 1.2.1-3Dan Walsh - 1.2.1-2Simo Sorce - 1.2.1-1Simo Sorce - 1.2.1-0Ignacio Vazquez-Abrams - 1.2.0-4Simo Sorce - 1.2.0-3Simo Sorce - 1.2.0-2Rob Crittenden - 1.2.0-1Simo Sorce - 1.1.0-3Rob Crittenden - 1.1.0-2Rob Crittenden - 1.1.0-1Rob Crittenden - 1.0.0-5Rob Crittenden - 1.0.0-4Rob Crittenden - 1.0.0-3Rob Crittenden - 1.0.0-2Rob Crittenden - 1.0.0-1Rob Crittenden 0.99-12Rob Crittenden 0.99-11Rob Crittenden 0.99-10Rob Crittenden 0.99-9Rob Crittenden 0.99-8Rob Crittenden 0.99-7Rob Crittenden 0.99-6Rob Crittenden 0.99-5Rob Crittenden 0.99-4Rob Crittenden 0.99-3Rob Crittenden 0.99-2Rob Crittenden 0.99-1Rob Crittenden - 0.6.0-2Karl MacMillan - 0.6.0-1Karl MacMillan - 0.5.0-1Rob Crittenden - 0.4.1-2Karl MacMillan - 0.4.1-1Karl MacMillan - 0.4.0-6Rob Crittenden - 0.4.0-5Rob Crittenden - 0.4.0-4Karl MacMillan - 0.4.0-3Karl MacMillan - 0.4.0-2Karl MacMillan - 0.2.0-1Rob Crittenden - 0.1.0-3Rob Crittenden - 0.1.0-2Karl MacMillan - 0.1.0-1- Update ipa-Fix-traceback-in-nis-manage.patch to fix python error (#697583)- Resolves: rhbz#697583 - Can not enable ipa-nis-manage plugin- Default groups are missing ipaUniqueID attribute (#696508)- Set min version of 389-ds-base to 1.2.8.0-1 for fix in BZ 693466. - Fix some problems in IPA schema (#692978) - postalCode should be a string not an integer (#692945)- Port 7390 is managed by selinux-policy-3.7.19-80. Update ipa-repl_selinux.patch to not manage it any more. (#691883) - Patch to fix setting gidnumber when a user is created. (#692168)- Fix uninitialized variable in password plugin (#690595)- Wait for Directory Service ports to open (#688934) - Mixed case hostname can cause issues and confusion (#688622) - Wrong timeout parameter in ipapython (#684273) - Run ipa-ldap-updater on upgrades (#688931) - Internal Error and trace back when adding DNS AAAA record (#689452)- Use realm provided by installer in LDAP Updater (#684744) - Use args for domain and server when doing DNS discovery in client (#684780) - Fix 2 SELinux issues in dogtag replication (#684269)- Add Obsoletes so upgrade from ipa-client package is possible (#684931)- Update to upstream 2.0.0rc3 (#680993) - Set minimum version of sssd to 1.5.1-12 - Remove SuitespotGroup patch - Rebase remove-pkinit patch- Set the SuitespotGroup directive in the 389-ds installation template. This ensures group read/write to /var/run/dirsrv. (#680201) - Make single line out of python sitelib/sitearch code.- Update to upstream 2.0.0rc2 (#675282) - Set minimum version of sssd to 1.5.1-10 - Set minimum version of python-nss to 0.11 - Set minimum version of 389-ds to 1.2.8 - Add bind-utils as Requires in client subpackage - Remove unused BuildRequires e2fsprogs-devel and libcap-devel - Add branding patch - Add default.conf man page - Upstream moved some utilites from the admintools subpackage, reflect that here as well.- Add pyOpenSSL to BuildRequires. (#670954)- ExcludeArch doesn't do per-package exclusions, use ifarch to force ONLY_CLIENT on non-supported architectures. (#670954) - Manually install ipa-admintools since the upstream client-install target doesn't. - Move a lot of the BuildRequires out of the ! ONLY_CLIENT conditional because the API validator in the upstream code requires them.- Exclude building server and server-selinux on ppc, ppc64, s390 and s390x platforms. (#670954) - Add date variable to the release to make daily builds easier.- Merge in changes from FreeIPA beta 2 (#670954) - Add patches to disable pkinit- Set minimum version of dogtag to 9.0.0 and add Requires for the theme we need. (#658275) - Remove unnecessary moving of v1 CA serial number file in post script - Move some man pages into admintools subpackage- Drop specific Requires on libcurl and krb5-libs (#658275)- Consistent usage of buildroot vs RPM_BUILD_ROOT (#658275)- Drop Requires on nss-ldap (#658275)- Temporarily disable building on s390- Drop optional radius package, the underlying code isn't there - Re-arrange the doc lines so that defattr is first (#658275)- Initial 2.0.0 build (#658275) - This is IPA v2.0.0 beta 1 plus all patches through git commit 4da9228fb2ac34adab8eb1884ae414236adb84fa - Removed some Fedora conditionals- Drop BuildRequires on mozldap-devel- Add Requires on krb5-pkinit-openssl- Add ipa-host-net-manage script- Add ipa init script- Set minimum level of 389-ds-base to 1.2.7 for enhanced memberof plugin- remove ipa-fix-CVE-2008-3274- Remove duplicate %files entries on share/ipa/static - Add python default encoding shared library- Drop requires on python-configobj (not used any more) - Drop ipa-ldap-updater message, upgrades are done differently now- Drop conflicts on mod_nss - Require nss-pam-ldapd on F-14 or higher instead of nss_ldap (#606847) - Drop a slew of conditionals on older Fedora releases (< 12) - Add a few conditionals against RHEL 6 - Add Requires of nss-tools on ipa-client- Set minimum version of certmonger to 0.26 (to pck up #621670) - Set minimum version of pki-silent to 1.3.4 (adds -key_algorithm) - Set minimum version of pki-ca to 1.3.6 - Set minimum version of sssd to 1.2.1- Add BuildRequires for authconfig- Bump up minimum version of python-nss to pick up nss_is_initialize() API- Removed python-asset based webui- Change Requires from fedora-ds-base to 389-ds-base - Set minimum level of 389-ds-base to 1.2.6 for the replication version plugin.- Drop Requires of python-krbV on ipa-client- Load ipa_dogtag.pp in post install- Set minimum level of sssd to 1.1.1 to pull in required hbac fixes.- No need to create /var/log/ipa_error.log since we aren't using TurboGears any more.- Fixed share/ipa/wsgi.py so .pyc, .pyo files are included- Added Require mod_wsgi, added share/ipa/wsgi.py- Require python-wehjit >= 0.2.2- Add sssd and certmonger as a Requires on ipa-client- Require python-wehjit >= 0.2.0- Add ipa-rmkeytab tool- Set minimum of python-pyasn1 to 0.0.9a so we have support for the ASN.1 Any type- Remove v1-style /etc/ipa/ipa.conf, replacing with /etc/ipa/default.conf- Add bash completion script and own /etc/bash_completion.d in case it doesn't already exist- Remove ipa_webgui, its functions rolled into ipa_httpd- Removed python-cherrypy from BuildRequires and Requires - Added Requires python-assets, python-wehjit- Added httpd SELinux policy so CRLs can be read- Move ipalib to ipa-python subpackage - Bump minimum version of slapi-nis to 0.15- Set 0.14 as minimum version for slapi-nis- Add Requires: python-nss to ipa-python sub-package- Remove the IPA DNA plugin, use the DS one- Build radius separately - Fix a few minor issues- Replace TurboGears requirement with python-cherrypy- rebuild with new openssl- Fix SELinux code- Fix breakage caused by python-kerberos update to 1.1- New upstream release 1.2.1- Rebuild for Python 2.6- Respin after the tarball has been re-released upstream New hash is 506c9c92dcaf9f227cba5030e999f177- Conditionally restart also dirsrv and httpd when upgrading- Update to upstream version 1.2.0 - Set fedora-ds-base minimum version to 1.1.3 for winsync header - Set the minimum version for SELinux policy - Remove references to Fedora 7- Fix for CVE-2008-3274 - Fix segfault in ipa-kpasswd in case getifaddrs returns a NULL interface - Add fix for bug #453185 - Rebuild against openldap libraries, mozldap ones do not work properly - TurboGears is currently broken in rawhide. Added patch to not build the UI locales and removed them from the ipa-server files section.- Add call to /usr/sbin/upgradeconfig to post install- Update to upstream version 1.1.0 - Patch for indexing memberof attribute - Patch for indexing uidnumber and gidnumber - Patch to change DNA default values for replicas - Patch to fix uninitialized variable in ipa-getkeytab- Set fedora-ds-base minimum version to 1.1.0.1-4 and mod_nss minimum version to 1.0.7-4 so we pick up the NSS fixes. - Add selinux-policy-base(post) to Requires (446496)- Add missing entry for /var/cache/ipa/kpasswd (444624) - Added patch to fix permissions problems with the Apache NSS database. - Added patch to fix problem with DNS querying where the query could be returned as the answer. - Fix spec error where patch1 was in the wrong section- Added patch to fix problem reported by ldapmodify- Fix Requires for krb5-server that was missing for Fedora versions > 9 - Remove quotes around test for fedora version to package egg-info- Update to upstream version 1.0.0- Pull upstream changelog 722 - Add Conflicts mod_ssl (435360)- Pull upstream changelog 698 - Fix ownership of /var/log/ipa_error.log during install (435119) - Add pwpolicy command and man page- Pull upstream changelog 678 - Add new subpackage, ipa-server-selinux - Add Requires: authconfig to ipa-python (bz #433747) - Package i18n files- Pull upstream changelog 641 - Require minimum version of krb5-server on F-7 and F-8 - Package some new files- Marked with wrong license. IPA is GPLv2.- Ensure that /etc/ipa exists before moving user-modifiable html files there - Put html files into /etc/ipa/html instead of /etc/ipa- Pull upstream changelog 608 which renamed several files- package the sessions dir /var/cache/ipa/sessions - Pull upstream changelog 597- Updated upstream pull (596) to fix bug in ipa_webgui that was causing the UI to not start.- Included LICENSE and README in all packages for documentation - Move user-modifiable content to /etc/ipa and linked back to /usr/share/ipa/html - Changed some references to /usr to the {_usr} macro and /etc to {_sysconfdir} - Added popt-devel to BuildRequires for Fedora 8 and higher and popt for Fedora 7 - Package the egg-info for Fedora 9 and higher for ipa-python- Added auto* BuildRequires- Unified spec file- Fixed License in specfile - Include files from /usr/lib/python*/site-packages/ipaserver- Version bump for release- Preverse mode on ipa-keytab-util - Version bump for relase and rpm name change- Broke invididual Requires and BuildRequires onto separate lines and reordered them - Added python-tgexpandingformwidget as a dependency - Require at least fedora-ds-base 1.1- Version bump for release- Add dep for freeipa-admintools and acl- Add dependency for python-krbV- Require mod_nss-1.0.7-2 for mod_proxy fixes- Convert to autotools-based build* Fri Sep 7 2007 Karl MacMillan - 0.3.0-1 - Added support for libipa-dna-plugin- Added support for ipa_kpasswd and ipa_pwd_extop- Abstracted client class to work directly or over RPC- Add mod_auth_kerb and cyrus-sasl-gssapi to Requires - Remove references to admin server in ipa-server-setupssl - Generate a client certificate for the XML-RPC server to connect to LDAP with - Create a keytab for Apache - Create an ldif with a test user - Provide a certmap.conf for doing SSL client authentication- Initial rpm version/bin/sh/bin/sh/bin/sh/bin/sh6666***2.0.0-23.el62.0.0-23.el6ipa-server-selinux-2.0.0COPYINGContributors.txtREADMEipa_dogtag.ppipa_httpd.ppipa_kpasswd.pp/usr/share/doc//usr/share/doc/ipa-server-selinux-2.0.0//usr/share/selinux/targeted/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnuASCII textUTF-8 Unicode textdirectory?7zXZ !PH6B/e] b2pӠ)_)ցt=!1M%_ &G>ck19vY\ @"h7үnQe27j~W6M}[eBR`o)i-L'!~b_ж4ě//-#/]ihϥ ~=T~(]L*R=@2xiAduF #PJlS6 ) nDV Ω r,@ɕu8JgaatEѵ?ȐeDՆkDsjY17SPVBrMjً̓BeoU9Taz6+[A>5}C UROW = y\1b p! A%z'dI ;q]B<1hДS kÎH4~bMs`1i{u*ԟatKko.P~' N_?cxǎd6 jae|_؁\;?vXt/$//91_rKq $*y:,2wP\Av NMe&- imH I7!Hk.a"7H4db mf|_y,D8`ɦ(E6:u}@6 }5=ˤ` S> g(H3*<y1ԮYx& ɆxCRG!zM0r`4J vVnǦ_ 4gnpy5a3!1%=}w=c{̬4%kيolC͟Y6z=.qt\Nܭ .gpv?/X.6K;K/\$˃vnX2ˇӠq 11晬QMhNEpX:U0_ k mF,y嗎$3YMBQ+K,\4fOQXf8:bZ'M⨝I< Zd9H]Wiڨ!$!8_ 7912&Ζԅ(3UdAKta;:6l1گ7Ju&I8EҽB;x[8wW|P :ZxLԵl V,J_Dz[[Ѥf:1%0s4EZH^rhbp {.l>ߢ壕(*_!ɀ) Ѯ )ޤ~\\#m J'ʮ+k#Dm>f:Ega*zjϬw?C7WQ qןuJ+ipUmC(<)'e# O2(>0AYwWjJ+r;e N#K8R)U+z};DZp11Rz0,iE -pޢƬǢ2iK_)q7q bzqi?QڽD!ΐkylXOsv)1Bt1ja2Pއ* \#R2lȒ>{lphROhJp(ڏP*tJ)&xds^W-T(=]`{i΋n67UtĻ_VJ^M<8N# I|'T>bdleekTKHXB=ܠZ_)fV)IôZdTl>elǩ{KΉTϩNb"#*dtHvtB"jovӡ!Ǫ "GE}evX{|gE5TT:O_RŅ;x_0aBE!CI6jJ5:AarLm3GiMeoA#s!2Id ?+RǸ~yt)FcLTѓ0[&wD?-tlexjGh9 %nX+'Ô/=A0't4Shw"6tB{҂tdH!L`W!*F4$iZX@09LN<:VRw?k:ۚKx"=}6 U&D}É!%,JJg%߅PL ō^GCof`CPC5%^!/B&K:a(yrK,zXs`[ HFJg%>_HyqQUxDa>I.~e;؋x"z`3:m]-PbD}!Wf"(X=t*TdCx!ZbbET?]cU*9˛{w2I H/PDtN%Jvѫ:{Jh57x@>P$9"$mUf:ڈk-8" }-QVx_qPʥqu67e.cI,|s}dW5 ʗ֯B%q6+cД2D 嗶]?a@_{a+%~#[]S{\꯴] Ar^xb@ҴlE{ l%̹`֖\ M;ȓq 9"ͽE]w(n#M+;BpRIdYL#FP U;% *;eSGfw}4^hn/!n[2fD})e37{G,-'O)gNLW0wSg<FUw"}'`,Kli53vBTl'HKx23ID IB3Axnnz, ,8+tvFdU5`@e3ޛ^@y#0QW m- ^/KP؈]#+\ݡ!`w(t"7(7޼3=TFU9NK^GQW2J 3zh_p{Cfg,0}k)xa8zèL ݟ_zV ` @{\DXDWJa7XxU,@d)AnzcQ' ˉ]wwo̘u#L ?]_b#y"dBAeޱ9I1b# 妳Ph)dz& ?9Ҧz=naM#l2}7Sw2{$Ce\3!5l,/9@ 5i`& vV\=!7#N;Jz߃8tCdڴ>ZO!_P9~5\~ά6gTZ Ik֠&QL6Т5|AJ)>NggbxДGڠ<'m sc_rװ[}Ln `9JYKNP:?l\' D(ȡZ)7!rqS}P EgTiD GG:Շ,e֢onWhz)h7HkNCQ asT]khY9A߫x/6GFϗ<>y< d_63M&冨J^xIb pܺحXfrjlAƖfiYh'\1TxPVMt wXNR5~Ka@;0M kҵr8Lt<$9qN>|+f{[lo-[k_ |,3ϠL _zFBڰfT;O\#!\N>nPDh`_|*O-,ZRg%vd4Ml6W2Ed YJb(XV+^Dp9¡2:h0U>*{(w}3w?M,xj]>l&PLXto1AÇK "~4SSKokPDwiYf`@0^$[vajƾCܔ?p3b)@> m}ސu&"lRx|-QUm8 Ȧ>Ȧ@^~mrb:L^W -,ss4i5MckICssלŎ~IR}Y0g5\4 ' w4ANiLfN]X6\ 98xSA5Ƴ\(CDR>M7#@:-ao Pz9NMW,}@ q_%@{KJ9Ni0IڕYo@LgBKĺ`G*k'RG붅վO(4l5K͵2LPB,9pYlRٙR-Vvߎ:f|U ==<!? o8ETbwVY~XihՀl~XOӓMV󕦰5$AiʌGX^:VDA!D]رPzZ:W ,1d.ȡ;$^qQ0 n w+h Xt;{]\ߵpm4v +ҿCEb$$^3KSKʪE`I!ǻ z`c.Y#Da6'{[N)R4{A #+z}t_ԢHҢQkn}0:"TZ Ba{JZfULy>3 ʝƪeb4TmyR(Q'Dzh!%w}N}0M^o) $ќ#KÑ`DR,\ &S|2%J&uB&iOFL#NM?}1J]}zxU >"V}qWu\{6(7iK ׍!eBT3Fw+9F4̶\2%yKI|Â"bxxD*GW9XEI|P, ٟ?6D{v()ho7ǘKl;A | iRz3Hϡ@ Nd0EÏ5!@do$ H?@]-xQF8{˙Lg "_2dX̍j)KgEE_,;QNusץ0p/'hlynў+)b.xQM/E?OfR!cܿ`+IQx'QĦZV NHX;,.mt1^ץ.RQu $6 SzweSFE

424uXL x>|o :XW<-+zSP&m;K#@Uڻ 2V~jY{GszɈN: Bg!m=Ձ@d<|P|,ܺz{>j(R],¡"sC <'<2 qp-xȖ>zMr=}uUZlOG<*+/-^ͼA6k6Я}=\٪A ֑︎ 'Z3n]&I˰3=vE3ʞWwBKVqVqPwi;[rO(+xBYٞ/!Vф;-ԆD1Zq2j7rizZڗcWE.&v(Ct CD 5]HSsGd]fFcA(wUt]{0?X6mIkPR\'F:QIԠ&9ᝄh.xL;iԤ@*U?^1.s@R29n~ګ#m18`xB\vӴD M=!/<8e[* :aήUK&2 hs20>0>q&ǎ\oTv*`T (:g EydC 8$u##Zb) 4u]~eѳV H#5UVPʳPкJ1T(GXeN6#oǯꦀK ~1`VY\VOzPyF)BwTd jXȓԨvnQ|,ig֑݈>]Cc_\JFr"ꢕu=7L&h9y\Q̒u^rMpQzB~N0݉iN [rWʿKjgIxPvV6H1p3𥘺|Ot 侻*9TMP7:OKg3o1?=Dر:klMuɶ:}|YKXCpHN[O#=e?p~ZG!n0Z̞0F _Q dcȉjS;/hKsOȾ#Z6$ y6dIM=JT^%{:UP"5'jwtoG΃ٗ^Bxv;2k开0J \Mj>t'QR~=H.|LzQVaVIEI/iiW\G&} IcrB#׽̇8}`#xrn&K+0f9kHxG{Ă ^(M?pݚ8@.IOeVM9O!O.%G7, dP y晨l+4^uS 4tSya4}c"ԟ^m=sF(7ʈ)#ZV/q$}tRVT; Tu$~˕'}!,x~[\{Ь . ι15 7*v\^(.* :VnB5*E0(N&?|qި%<|26,ˏiR,sFMCtcަ(mgz .6:\to¬PI~ɾ=`ҬƤo|+g9OKپ;^+vR&<#l#t]eE~W]禆;(~6q(CB; Q;Tr*㴦Zfz])g e3-bEpW;FUZ3U:"mVzȤmF)V0qA>c0"y3Aʖ{ 4$l#o 2WX*Q1=ycM8PuYa`c* r%J`uy[ xȚP{ SEʑ7-N%eܕ&wo b~*#n)~}e͟gcLNQ$@;KM٫SVֵ,F'=@~% RJHqDs/rcfY8r |>;䁨%x/s>oY'.6i(+ߜtrpϽhPboHoz_'-em#"yndum[z-CzP~h qoJK+3&Y$hC.vtB{lm(Jkz?ΔeIɕEј{$KPm+?s+ dQARY{}!I]`T 9q|1,jMZk|yTӼ 2{<8^iパJF?qt(0m"˓4(I$AϴD%ʹ򉒀F Eދ.w^Q(v&CtQLEBk)UҸj銴2+)!:[` 瘉X!LzXմP]\3큎5{us8v74dC0'7?`# Wg6ZƱ 4?}5 T Gk#3[<= 91Mzjo-9 `4p@&5xSJ(A\|l{Q W"PьIBxƪP6K!zH #"[|^jg'v.go&Ox(#on*0*ȵd12:6+|!y8;PCL6DLq -D~W5,Vޞ&AuMV_qzgq"yZ2cFU*[rlX4XQN,@2AM|U-*L'$=^w~_Ȗ"z 5 ݁V7: {wsV"QrC3[v#$-@(2D# ;c֫쓆fҕX$F'Ԇqq 0ʑxZD;XNUDh1/W l5J ` _XO>aān\g4qShs \OH^(S@r ֡$iw8-hTPE;#ܳn]?LPʢU!羼uk! ^&C|=%RhCq DJQ-IdՕ8Q}c U9o9qfDisysy6!p[_ex J.N]H [#c 7Q8\ жiWH|йb ݖԳ$atۿqdĠ#]Fd(.b(ʯZM=8.zք^={<^nѬ<1zGU.k~W_FR*n $DyyTߺS,4%0e%]LC340pMe r8@b,p2Go"Xw=8"ln+I|uwo鍪Wb$D:(~9GR;YiyׁR1 ]ZU A1D?5"Zj6Ѻߡ':+riJE D[N9my'Z^ҁ\Ze_Out ,:m]=ut`ک9`jÁ֕`z4hNN8;v ~ae={CFL#_d3:NҧI/b?h845}[3dS<9)K$*NҖYc7|φfOnwZ>-\% h*ceN^xGY -CMWlDcT m/F Sd%h7"'3(6$x̗Ja o13G-q2? Cw?_9k"PMP7 NUF''oj7VqrYuʆ@zF-QncQ3  ~{yf61Ռm>he9ӓU̅wI jgxE6pybEZ|G}x`6>4˖z ThjB8 &詵NG K0tB 'ɝ3eԕ hMSȝԎ|Ж<6Q=A{(FEbXHJ~ EiʭvQbERϷ 4^ 5Q;ڣž=l,B{\s={"%)&i1? |;l:$fPY`>>i+ SUFK avG}fP`Ӄ1 X? fjfOhrNL?] u/ -:LYk*0u[J$)Q6׷IcV' Ȋg* 04SY I)p`1Y4WԡrWOJTf>Bd w0% wkD7E@uXRo[ F{;!|ȑWT)OY/P<Ǝs az+OO%2.g:# HQ89ZW-'ml+r=ZyUkG d&&蚐| ȋhV1<hԔpgA9RD5#崭[Nt,3Sf܇TqQv0^Kd{~ ؖXyD @z(2,*~x0.ht],W=nD9.)GoСEtϢlN8b_ ly 5LWwǙCZcnWܭDQJaIR#AJ-*>=ybֶӀke@K8 mƀ26r[3 tqg+bBsC{Z.gO IYB#-n ܟKEYpqi>JCVRjϾf˳ vSk߲ShV *;+Ѡq+@S?m.\'48Mt| &E&.cLS@Iְ;7ObїjǶ 7yy%rK=k"[`F06$̈ݡ^p}wE) E^S5K\iS!xǯwl (sareSK7OlZȁ:0_Y\;vVTx, F\d67pׇN_"ykܕ А/e@\ǧLl?Dz<ʼnfO&I]>9IkH*ܛ1͡sZ(s_[,8 '[n(~&V"ub&S|~&~\upWC_RP>p)'$͸*""guP40J?[s[/PiI ,<CGVȗDǖ"禉A']Xre)czwrpEpЪ4ݨ @GO{|N ^/ٵ%37ͰS!~/ސx*'?_,ybG| ç?ש/ r3l˃6B^Sm~ >fdLH_X %.A˪;.sڜMگ2‡ꂟ jcAIKߜb;͛j" <חom=$/+kJO^nLgthL>2(aBƫ ?GA-j# *^f }yo׾I=H6xSj=w+g53%$os0?\' Hh*ݾ`lߏS{y!(ԡlݰιԸrϣZ-XCAdD=rxpE|h>ߵd!( wExL 4Ey{9²(`v||0\Ft'EnS0]5n`*aumɿY={8DL142E5,cNNgoB,Lb8]7\ͺޥa|ۣ 2Iqp!1PcKJ@GN!o<1Tlʼ w lbUapcx|oz8k]<o HdfL5AR=I>oPd}kXBz9k㭋n_m!R#aUG{+8i5jV (Pr-FLƖh'MZst+=ڈsTQݻUz=yFZ8a4n\zwޛNK9{X_5kM0~LrgH/ێ~zGsXX>z.""cq51yV!3YFf=!J_HȫGbe"D 6re :"пu+/';o;4 ?~LrA2 }%c.DYDZ`^w+<_N*oГ?䀽Zo00"siөD6*15x-h卨e@>f)gN}Շ.LB]x+"6΃0De9ytP20^L`B9rѱ땊pV/'x; Ӱ_0 ffW%:X JƧ35 dA"7Y/Y%:n;Ion2k CG-[?9VcE3%.+>üF_6OCffpuй%r^0U(4Nݮ3/{tɄ0@Ԧw MTvѷ C [|@-Z(}&D2lѡ(vI=Ma3pEH^IV)Wx*m޳vqϢeIcs"A3k:bb`3h'+]AcBW9 Ī~'BRi3]!yr%M4 Z)UqRZZ~2*y";Aenj`pW$_E$ݏ(kNcqB#;^ Go5! Sr}X *rғqe,K승Fk\rjvU2Pg*0\Cx;XFl%QD+ىY꒕! \ %A§*J">\?bu}ZR?¨e'7;=_Se.Əɰ2t['iAyGsF,Lt#{^L-Io^@LGxӭXwj;D rx`}%]'@A$u,b4J0Tk÷y>P3WSc*'Ph$٧9/vR}@GkR*D0=C%#z -g8UF L7((P+7oF/\"Hr@K\ 46l5k(^'DzoER%u :#e?vCrZE^} 4r+~3@2hﴧ< )=G!:Yu+ұrks`nP>?-9-\=5Tn&qET(3UP(*c֊ЇT >_Vz@[KRF(Aɍ&kODE;w"uBkJJ[kO4}2b?SGi()ȥkguǕ %$ݼ5Jn~aBQ7"q3.KGwz(fFI@y5?-sfSR&yavSOEki#]Fe,$שm9v."4o 辁4s2[E!p{K/z `hL'U3 9 I͟ƍLz38QHʴ;4=Mteu[/]6;v`1`-4E+/䡠q5c\uF5ϯo$/ ,BC%_Dnu8rVDJ8(}I>֯snՁ|\%^鏽b|07<{ZL/ &KUrT0`V A5c{Tyeyѡd8Ѓ*pپ-{%pTίZP,Q35vGHg`i^kAꅡ炕ωəkk'!+D|7.^nk\(RgK-73}Ue yGP&Ze,Dџupͧi9rtBpxpӓI]^JE;=q)y4gj2LI_(ځ8-4mp8 <`@`D,͐)kFenM ^k3d Q_ ^f{L.0Tekqj^J"6_E 6*hA]`62󧤘#9.) EgJ 24sQ #VU(]^ƺJ^t)$eUGl(#M'i:xm4m:.$^v}szFEbOJ ES; /\z+(R/X4Qzwc8’.8(J 0&HįU9Q]aѵUF zOʓ~7A s&MN2?MB=?v`L.\jI.b"-.LC ~PLle! bbqSk;g{]e;C&[nO|}kgA#dP/I 5.+I*%u8.q8qw r߬v&)Ӂ_C'i̿+pk~ gdԸG(P]ŜpHAQ޹sGݲx5;t9o +AxWUj4lLHRZeM,Я 3 y*گx)[#eJNNuPyN*3 =4DG~Yx~c#|5?kxM<ͨ~NJ:g%m.Ceؗ/zUu|<;1?]CS׎_,'TbR%}II襌ENй+p9W-4j͌B*CrFKh6۔@>O>ߑ6H괼ha P2[ D鴟"<͊2X:f? Q.'ţS#""lo7 7seKTNsS;ɸRAC/ %DH UЌ̞6 ̩ќXt?lnU:`'ZNz/_ l\ʒɖVH{qXWRyc)dzAL>DŽ 6$}N'YPHa vc59UG'ү&BǘA!_)Tw 69a_dnwâCLF τ ɤY&C=4~",,|5# n7/0)D1Cl\z,Z~p7͒u^ |E(/PȵS rum- a`]'5em9?Nz8,NwjM`V^gH_ϾdOb1h1+BygڨH Њ[efQ1~q)cw\#_RjQ4;Iƒf|x ][ʙۦ&ve۠nUeɕjr%YqRf/1tyc'q, bps ^$+c1ɿ7 [-ObXHwplf%+E7 ^̛cf=ְQG7b:c# sMүp߂7izWn'r'{O(!6ժ!w/D ݰ@&3Oihfrz[o ,<@:lty^\L=i*foK*K5 Ea)f.ν1tVݾ1'4@W9bdu;ՂlY,ä7%]nQS/+,mbQ&L6 5H"H*nڀ]ģkÇb%ƨ<$RE<* ms$tcE`otQ^||:}l5-EL]/F֜-K1 ci4|So l & AT5,!H3Vj&qp&w|jiQ&r߮t/ld?!9jdDn9,D-p.7z/ : vzy 4D=[I˃3w385seCYѸ ^e@F `;3$C١Kcs5-hDͅ9$tѥO ByQ|mbU6K^EEt| h+j*.+rQ-C?;~/na(Ռygv'GD[И_fQ} Zz,'_CRjMZEBT.<3xkVnjel͞v}}Mɯڻkioj? |)UHh^yITӊEΧ;~YNz^S %r:Z-@Ku{0!#Ahk\]'`23hR)JP |1 u ַS HLFydlY҈ noMB5v~}Ѝ"hD6fCrnCPoLjZ M1VѯHh.H;RHb5fMk42F\aLb]>\_TVcT<|{=V )S怟ڌ|ּ%xSYqΉ%{?LEHLsg*N.EȦLυ75Qby:E^MApۣd9>"q70_颜>ʃ5Lr߇4{}ȿcGº ,8DaoHT3H7]\JS]z0+> X_;ژlWI2*KzZkmp.9D/R=}vR:D׳ RU)!.UH, gp7fVU6VU弘}rJt<[GWz|}^ TϯJ_}4K~1:g/N 6&R>ӉwUo%o}|H/(i,[Z;H6c5w( s$:R_B1Ӫt#o:* dN? :@Fa<K>Z=@nMal O5{k/U˼F%y;*&9o`fntK7 pC |RæEo'9(&s({uN"Tnفlw Ҕe$IWQO>r΍;/Ԟ~6 9|/j2 *tѦ6jC{rFOw)XBu$jnDq#sf>4۷&gNa̟Q FX 1`GR[WhI2[>sANى(QAȗO'cІS$xj(X>5DwA23Iw'f+w*O".3 m yꍷZ((F1ttuJoI> ;6mx'LZ ou? t-19MxgBޱ`x-Zbn8`s ^مY.5-Aj/qG `YX4FC:yԭ%cuѳcXWw[?vf hmF^7%9 4YN@0Mi=4qqG"!+Ȃ#_k>d5n KNn2i \-`O*\BmL_2y`WwQf5 \ CUںqN O%z*(֚Ch'$ ~8POkt6~C/XL:ʔLGإ}-K\.3t?E۳r̫x4.;./EɏcaZ)1?pwoo3$C7bJl>>ri뽖X!|enMŠ>/pMHks^gKeޣ<6`@ lv/]HfˀrR% &KsհS[TWݷo랧}?݊3QoL!7{wݺQD_!v_/zKRE%~ XJ}c Tڧ){->Isk@Ll#Їc-@ 6lBV2޿Xc*,a$KSBF3LV P5f@]r*p0 ŧ0_tn39@1sO^i]Jz bpIǗy΁ِI?~t( f($uD\+yPph*N&n*Z*]K. +JorHx9jۥ^H [F(3Q~B/L. y 9QFP+/KP;R4t86];@?H۟ ϛ~mkb?|u/rc$e '^[/$ʠ@v`KNp2Ȗc)Gw>=tEV/h*j9ʠFbgm)Bk; -n'4xJMkMxs? -ѽhyK'Ňb!],c5԰i4hrU4F02u~l NƀbӃw='ڍL8)nkᝠ2UfKd ԛ=50O@b0y٣/ ܍>`xW ^p(mcAVd)&-qxVt!g^6ԸN_H0>e &` /B%pN dpb 1_^a$ZHNN\\KMFǡRs1͵aBA?-MSN}>J39M? u3Rr=ܘ&ihNп6っXu$ﰔM,R۲Wɍ]sHnd%b1Zku?0_X`A`-?P,y)D)\PSYYp,ySsk(Ur;_7o5 _kg YZ