ipa-client-3.3.3-28.el7> H HtxHFSsr ?*}}o$gvEU'uMԟ۲tt*1ES'mef745182b0b5a42d005c88961d84ce087ee954fd.U l$ŭg+?)?FSsr ?*}}/V@`G1)?/ ݪi}n.%!cKB9>A?td   @  "(/"@" " " P"  r"  """p"4555(p)w*+,-89:Ah>D$G,"H"I<"X`Yh\"] "^ bdeflt"uh"v wd"x"yt?pCipa-client3.3.328.el7IPA authentication for use on clientsIPA is an integrated solution to provide centrally managed Identity (machine, user, virtual machines, groups, authentication credentials), Policy (configuration settings, access control information) and Audit (events, logs, analysis thereof). If your network uses IPA for authentication, this package should be installed on every client machine.Sdswsvmsrv03.fnal.gov$Scientific LinuxScientific LinuxGPLv3+Scientific LinuxSystem Environment/Basehttp://www.freeipa.org/linuxx86_64if [ $1 -gt 1 ] ; then # Has the client been configured? restore=0 test -f '/var/lib/ipa-client/sysrestore/sysrestore.index' && restore=$(wc -l '/var/lib/ipa-client/sysrestore/sysrestore.index' | awk '{print $1}') if [ -f '/etc/sssd/sssd.conf' -a $restore -ge 2 ]; then if ! grep -E -q '/var/lib/sss/pubconf/krb5.include.d/' /etc/krb5.conf 2>/dev/null ; then echo "includedir /var/lib/sss/pubconf/krb5.include.d/" > /etc/krb5.conf.ipanew cat /etc/krb5.conf >> /etc/krb5.conf.ipanew mv /etc/krb5.conf.ipanew /etc/krb5.conf /sbin/restorecon /etc/krb5.conf fi fi fiG33H1l1lE||P;K6\RqhA큤A큤AA큤AASdRsSdSdRsSdSdRsSdSdRsvSdSdSdSdSdSdSdSd RsRsRsSdSdRsRsS:S:S:S:S:S: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-3.3.3-28.el7.src.rpmipa-clientipa-client(x86-64)@ @@@@@@@@ @@@@@@@@@@@@@@    @  /bin/sh/bin/sh/usr/bin/pythonauthconfigautofsbind-utilscertmongercyrus-sasl-gssapi(x86-64)ipa-pythonkrb5-workstationlibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcom_err.so.2()(64bit)libcurllibcurl.so.4()(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libnfsidmaplibpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libsasl2.so.3()(64bit)libsss_autofslibxmlrpc.so.3()(64bit)libxmlrpc_client.so.3()(64bit)libxmlrpc_util.so.3()(64bit)nfs-utilsnss-toolsntpoddjob-mkhomedirpam_krb5policycoreutilspython(abi)python-dnspython-krbVpython-ldaprpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)sssdwgetxmlrpc-crpmlib(PayloadIsXz)0.653.3.3-28.el77.21.7-22.73.0.4-14.6.0-14.0.4-14.0-11.11.11.27.45.2-14.11.1# Has the client been configured? restore=0 test -f '/var/lib/ipa-client/sysrestore/sysrestore.index' && restore=$(wc -l '/var/lib/ipa-client/sysrestore/sysrestore.index' | awk '{print $1}') if [ -f '/etc/ssh/sshd_config' -a $restore -ge 2 ]; then if grep -E -q '^(AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys|PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u)$' /etc/ssh/sshd_config 2>/dev/null; then sed -r ' /^(AuthorizedKeysCommand(User|RunAs)|PubKeyAgentRunAs)[ \t]/ d ' /etc/ssh/sshd_config >/etc/ssh/sshd_config.ipanew if /usr/sbin/sshd -t -f /dev/null -o 'AuthorizedKeysCommand=/usr/bin/sss_ssh_authorizedkeys' -o 'AuthorizedKeysCommandUser=nobody'; then sed -ri ' s/^PubKeyAgent (.+) %u$/AuthorizedKeysCommand \1/ s/^AuthorizedKeysCommand .*$/\0\nAuthorizedKeysCommandUser nobody/ ' /etc/ssh/sshd_config.ipanew elif /usr/sbin/sshd -t -f /dev/null -o 'AuthorizedKeysCommand=/usr/bin/sss_ssh_authorizedkeys' -o 'AuthorizedKeysCommandRunAs=nobody'; then sed -ri ' s/^PubKeyAgent (.+) %u$/AuthorizedKeysCommand \1/ s/^AuthorizedKeysCommand .*$/\0\nAuthorizedKeysCommandRunAs nobody/ ' /etc/ssh/sshd_config.ipanew elif /usr/sbin/sshd -t -f /dev/null -o 'PubKeyAgent=/usr/bin/sss_ssh_authorizedkeys %u' -o 'PubKeyAgentRunAs=nobody'; then sed -ri ' s/^AuthorizedKeysCommand (.+)$/PubKeyAgent \1 %u/ s/^PubKeyAgent .*$/\0\nPubKeyAgentRunAs nobody/ ' /etc/ssh/sshd_config.ipanew fi mv /etc/ssh/sshd_config.ipanew /etc/ssh/sshd_config /sbin/restorecon /etc/ssh/sshd_config chmod 600 /etc/ssh/sshd_config /bin/systemctl condrestart sshd.service 2>&1 || : fi fiopenssh-serverS:@S2@S1oS!S!S L@S L@Sc@SS @Rb@R@R@RUR@RRx@RR=RʚRƦ@RkRv@RG@RiRz/@RxRsRo@Ro@R^RW@RNR@-@R/ R-@R(r@R7RZ@R R R@R@R@R@R@R6QQQ'@Q@QvwQu&@Qm=@QZ@QVQ(@Q@PPPPPx@Px@PnPj@P\VPG>P@@P4P.2@PP @M6@M.@M.@M.@M-M M@L!LfLNLdLLLzLe3La?@LD>@L#HL#HL@K/KՀ@KK@KKs@Kie@K`*KK@K @JJ@J@J@JJB@J{IIIm@I1Iq@IKIFFI9I1.Ih@IIP@H@HXHO@H-w@H HHH@G߮GGgGs@G@G@G@G}G}G}GG@GC@GkGDG<4G)G(n@G3G@GJF@FS@FFuF@Martin Kosek - 3.3.3-28Martin Kosek - 3.3.3-27Martin Kosek - 3.3.3-26Martin Kosek - 3.3.3-25Martin Kosek - 3.3.3-24Martin Kosek - 3.3.3-23Martin Kosek - 3.3.3-22Martin Kosek - 3.3.3-21Martin Kosek - 3.3.3-20Martin Kosek - 3.3.3-19Martin Kosek - 3.3.3-18Martin Kosek - 3.3.3-17Martin Kosek - 3.3.3-16Daniel Mach - 3.3.3-15Martin Kosek - 3.3.3-14Martin Kosek - 3.3.3-13Martin Kosek - 3.3.3-12Martin Kosek - 3.3.3-11Martin Kosek - 3.3.3-10Martin Kosek - 3.3.3-9Martin Kosek - 3.3.3-8Daniel Mach - 3.3.3-7Martin Kosek - 3.3.3-6Martin Kosek - 3.3.3-5Martin Kosek - 3.3.3-4Martin Kosek - 3.3.3-3Martin Kosek - 3.3.3-2Martin Kosek - 3.3.3-1Martin Kosek - 3.3.2-5Martin Kosek - 3.3.2-4Martin Kosek - 3.3.2-3Martin Kosek - 3.3.2-2Martin Kosek - 3.3.2-1Martin Kosek - 3.3.1-5Martin Kosek - 3.3.1-4Martin Kosek - 3.3.1-3Martin Kosek - 3.3.1-2Rob Crittenden - 3.3.1-1Rob Crittenden - 3.3.0-7Martin Kosek - 3.3.0-6Martin Kosek - 3.3.0-5Martin Kosek - 3.3.0-4Martin Kosek - 3.3.0-3Martin Kosek - 3.3.0-2Martin Kosek - 3.3.0-1Martin Kosek - 3.3.0-0.2.beta2Martin Kosek - 3.3.0-0.1.beta2Martin Kosek - 3.2.2-1Martin Kosek - 3.2.1-1Rob Crittenden - 3.2.0-2Rob Crittenden - 3.2.0-1Rob Crittenden - 3.2.0-0.4.beta1Rob Crittenden - 3.2.0-0.3.beta1Rob Crittenden - 3.2.0-0.2.beta1Martin Kosek - 3.2.0-0.1.pre1Kevin Fenzi 3.1.2-4Kevin Fenzi - 3.1.2-3Fedora Release Engineering - 3.1.2-2Rob Crittenden - 3.1.2-1Martin Kosek - 3.1.0-2Rob Crittenden - 3.1.0-1Martin Kosek - 3.0.0-3Rob Crittenden - 3.0.0-2Rob Crittenden - 3.0.0-1Rob Crittenden - 3.0.0-0.10Martin Kosek - 3.0.0-0.9Rob Crittenden - 3.0.0-0.8Rob Crittenden - 3.0.0-0.7Rob Crittenden - 3.0.0-0.6Alexander Bokovoy - 3.0.0-0.5Rob Crittenden - 3.0.0-0.4Martin Kosek - 3.0.0-0.3Alexander Bokovoy - 3.0.0-0.2Rob Crittenden - 3.0.0-0.1Rob Crittenden - 2.2.0-1Rob Crittenden - 2.1.90-0.2Rob Crittenden - 2.1.90-0.1Alexander Bokovoy - 2.1.4-5Martin Kosek - 2.1.4-4Alexander Bokovoy - 2.1.4-3Alexander Bokovoy - 2.1.4-2Rob Crittenden - 2.1.4-1Rob Crittenden - 2.1.3-8Alexander Bokovoy - 2.1.3-7Alexander Bokovoy - 2.1.3-6Fedora Release Engineering - 2.1.3-5Alexander Bokovoy - 2.1.3-4Alexander Bokovoy - 2.1.3-3Alexander Bokovoy - 2.1.3-2Alexander Bokovoy - 2.1.3-1Alexander Bokovoy - 2.1.2-1Rob Crittenden - 2.1.0-1Simo Sorce - 2.0.1-2Rob Crittenden - 2.0.1-1Rob Crittenden - 2.0.0-1Rob Crittenden - 2.0.0-0.4.rc2Rob Crittenden - 2.0.0-0.3.rc1Rob Crittenden - 2.0.0-0.1.rc1Fedora Release Engineering - 2.0.0-0.2.beta2Rob Crittenden - 2.0.0-0.1.beta2Rob Crittenden - 2.0.0-0.2.beta.git80e87e7Rob Crittenden - 2.0.0-0.1.beta.git80e87e7Rob Crittenden - 1.99-41Adam Young - 1.99-40Simo Sorce - 1.99-39Simo Sorce - 1.99-38Rob Crittenden - 1.99-37Rob Crittenden - 1.99-36Rob Crittenden - 1.99-35Jr Aquino - 1.99-34Simo Sorce - 1.99-33Rob Crittenden - 1.99-32Rob Crittenden - 1.99-31Rob Crittenden - 1.99-30Rob Crittenden - 1.99-29Rob Crittenden - 1.99-28Rob Crittenden - 1.99-27Rob Crittenden - 1.99-26Rob Crittenden - 1.99-25Adam Young - 1.99-24Rob Crittenden - 1.99-23Rob Crittenden - 1.99-22Rob Crittenden - 1.99-21Rob Crittenden - 1.99-20Rob Crittenden - 1.99-19Jason Gerard DeRose - 1.99-18Jason Gerard DeRose - 1.99-17Jason Gerard DeRose - 1.99-16Rob Crittenden - 1.99-15Jason Gerard DeRose - 1.99-14Rob Crittenden - 1.99-13Rob Crittenden - 1.99-12Rob Crittenden - 1.99-11Rob Crittenden - 1.99-10Rob Crittenden - 1.99-9Jason Gerard DeRose - 1.99-8Rob Crittenden - 1.99-7Rob Crittenden - 1.99-6Rob Crittenden - 1.99-5Rob Crittenden - 1.99-4Rob Crittenden - 1.99-3Rob Crittenden - 1.99-2Rob Crittenden - 1.99-1Tomas Mraz - 1.2.1-3Dan Walsh - 1.2.1-2Simo Sorce - 1.2.1-1Simo Sorce - 1.2.1-0Ignacio Vazquez-Abrams - 1.2.0-4Simo Sorce - 1.2.0-3Simo Sorce - 1.2.0-2Rob Crittenden - 1.2.0-1Simo Sorce - 1.1.0-3Rob Crittenden - 1.1.0-2Rob Crittenden - 1.1.0-1Rob Crittenden - 1.0.0-5Rob Crittenden - 1.0.0-4Rob Crittenden - 1.0.0-3Rob Crittenden - 1.0.0-2Rob Crittenden - 1.0.0-1Rob Crittenden 0.99-12Rob Crittenden 0.99-11Rob Crittenden 0.99-10Rob Crittenden 0.99-9Rob Crittenden 0.99-8Rob Crittenden 0.99-7Rob Crittenden 0.99-6Rob Crittenden 0.99-5Rob Crittenden 0.99-4Rob Crittenden 0.99-3Rob Crittenden 0.99-2Rob Crittenden 0.99-1Rob Crittenden - 0.6.0-2Karl MacMillan - 0.6.0-1Karl MacMillan - 0.5.0-1Rob Crittenden - 0.4.1-2Karl MacMillan - 0.4.1-1Karl MacMillan - 0.4.0-6Rob Crittenden - 0.4.0-5Rob Crittenden - 0.4.0-4Karl MacMillan - 0.4.0-3Karl MacMillan - 0.4.0-2Karl MacMillan - 0.2.0-1Rob Crittenden - 0.1.0-3Rob Crittenden - 0.1.0-2Karl MacMillan - 0.1.0-1- ipa-client-automount fails with incompatibility error when installed against older IPA server (#1083108)- Proxy PKI URI /ca/ee/ca/profileSubmit to enable replication with future PKI versions (#1080865)- When IdM server trusts multiple AD forests, IPA client returns invalid group membership info (#1079498)- Deletion of active subdomain range should not be allowed (#1075615)- PKI database is ugraded during replica installation (#1075118)- Unable to add trust successfully with --trust-secret (#1075704)- ipa-replica-install never checks for 7389 port (#1075165) - Non-terminated string may be passed to LDAP search (#1075091) - ipa-sam may fail to translate group SID into GID (#1073829) - Excessive LDAP calls by ipa-sam during Samba FS operations (#1075132)- Do not fetch a principal two times, remove potential memory leak (#1070924)- trustdomain-find with pkey-only fails (#1068611) - Invalid credential cache in trust-add (#1069182) - ipa-replica-install prints unexpected error (#1069722) - Too big font in input fields in details facet in Firefox (#1069720) - trust-add for POSIX AD does not fetch trustdomains (#1070925) - Misleading trust-add error message in some cases (#1070926) - Access is not rejected for disabled domain (#1070924)- Remove ipa-backup and ipa-restore functionality from RHEL (#1003933)- Display server name in ipa command's verbose mode (#1061703) - Remove sourcehostcategory from default HBAC rule (#1061187) - dnszone-add cannot add classless PTR zones (#1058688) - Move ipa-otpd socket directory to /var/run/krb5kdc (#1063850)- Lockout plugin crashed during ipa-server-install (#912725)- Fallback to global policy in ipa lockout plugin (#912725) - Migration does not add users to default group (#903232)- Mass rebuild 2014-01-24- Fix NetBIOS name generation in CLDAP plugin (#1030517)- Do not add krbPwdPolicyReference for new accounts, hardcode it (#1045218) - Increase default timeout for IPA services (#1033273) - Error while running trustdomain-find (#1054376) - group-show lists SID instead of name for external groups (#1054391) - Fix IPA server NetBIOS name in samba configuration (#1030517) - dnsrecord-mod produces missing API version warning (#1054869) - Hide trust-resolve command as internal (#1052860) - Add Trust domain Web UI (#1054870) - ipasam cannot delete multiple child trusted domains (#1056120)- Missing objectclasses when empty password passed to host-add (#1052979) - sudoOrder missing in sudoers (#1052983) - Missing examples in sudorule help (#1049464) - Client automount does not uninstall when fstore is empty (#910899) - Error not clear for invalid realm given to trust-fetch-domains (#1052981) - trust-fetch-domains does not add idrange for subdomains found (#1049926) - Add option to show if an AD subdomain is enabled/disabled (#1052973) - ipa-adtrust-install still failed with long NetBIOS names (#1030517) - Error not clear for invalid relam given to trustdomain-find (#1049455) - renewed client cert not recognized during IPA CA renewal (#1033273)- hbactest does not work for external users (#848531)- PKI service restart after CA renewal failed (#1040018)- Move ipa-tests package to separate srpm (#1032668)- Fix status trust-add command status message (#910453) - NetBIOS was not trimmed at 15 characters (#1030517) - Harden CA subsystem certificate renewal on CA clones (#1040018)- Mass rebuild 2013-12-27- Remove "Listen 443 http" hack from deployed nss.conf (#1029046) - Re-adding existing trust fails (#1033216) - IPA uninstall exits with a samba error (#1033075) - Added RELRO hardening on /usr/libexec/ipa-otpd (#1026260) - Fixed ownership of /usr/share/ipa/ui/js (#1026260) - ipa-tests: support external names for hosts (#1032668) - ipa-client-install fail due fail to obtain host TGT (#1029354)- Trust add tries to add same value of --base-id for sub domain, causing an error (#1033068) - Improved error reporting for adding trust case (#1029856)- Winsync agreement cannot be created (#1023085)- Installer did not detect different server and IPA domain (#1026845) - Allow kernel keyring CCACHE when supported (#1026861)- ipa-server-install crashes when AD subpackage is not installed (#1026434)- Update to upstream 3.3.3 (#991064)- Temporarily move ipa-backup and ipa-restore functionality back to make them available in public Beta (#1003933)- Server install failure during client enrollment shouldn't roll back (#1023086) - nsds5ReplicaStripAttrs are not set on agreements (#1023085) - ipa-server conflicts with mod_ssl (#1018172)- Reinstalling ipa server hangs when configuring certificate server (#1018804)- Deprecate --serial-autoincrement option (#1016645) - CA installation always failed on replica (#1005446) - Re-initializing a winsync connection exited with error (#994980)- Update to upstream 3.3.2 (#991064) - Add delegation info to MS-PAC (#915799) - Warn about incompatibility with AD when IPA realm and domain differs (#1009044) - Allow PKCS#12 files with empty password in install tools (#1002639) - Privilege "SELinux User Map Administrators" did not list permissions (#997085) - SSH key upload broken when client joins an older server (#1009024)- Remove dependency on python-paramiko (#1002884) - Broken redirection when deleting last entry of DNS resource record (#1006360)- Remove ipa-backup and ipa-restore functionality from RHEL (#1003933)- Replica installation fails for RHEL 6.4 master (#1004680) - Server uninstallation crashes if DS is not available (#998069)- Unable to remove replica by ipa-replica-manage (#1001662) - Before uninstalling a server, warn about active replicas (#998069)- Update to upstream 3.3.1 (#991064) - Update minimum version of bind-dyndb-ldap to 3.5- Fix replica installation failing on certificate subject (#983075)- Allow ipa-tests to work with older version (1.7.7) of python-paramiko- Prevent multilib failures in *.pyo and *.pyc files- ipa-server-install fails if --subject parameter is other than default realm (#983075) - do not allow configuring bind-dyndb-ldap without persistent search (#967876)- diffstat was missing as a build dependency causing multilib problems- Remove ipa-server-selinux obsoletes as upgrades from version prior to 3.3.0 are not allowed - Wrap server-trust-ad subpackage description better - Add (noreplace) flag for %{_sysconfdir}/tmpfiles.d/ipa.conf - Change permissions on default_encoding_utf8.so to fix ipa-python Provides- Update to upstream 3.3.0 (#991064)- Require slapi-nis 0.47.7 delivering a core feature of 3.3.0 release- Update to upstream 3.3.0 Beta 2 (#991064)- Update to upstream 3.2.2 - Drop ipa-server-selinux subpackage - Drop redundant directory /var/cache/ipa/sessions - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost - Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency issues when there are still old parts of software (like entitlements plugin)- Update to upstream 3.2.1 - Drop dogtag-pki-server-theme requires, it won't be build for RHEL-7.0- Add OTP patches - Add patch to set KRB5CCNAME for 389-ds-base- Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0 - Remove a Requires for java-atk-wrapper- Remove release from krb5-server in strict sub-package to allow for rebuilds.- Add a Requires for java-atk-wrapper until we can determine which package should be pulling it in, dogtag or tomcat.- Update to upstream 3.2.0 Beta 1- Update to upstream 3.2.0 Prerelease 1 - Use upstream reference spec file as a base for Fedora spec file- Rebuild for broken deps - Fix 389-ds-base strict dep to be 1.3.0.5 and krb5-server 1.11.1- Rebuild for broken deps in rawhide - Fix 389-ds-base strict dep to be 1.3.0.3- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild- Update to upstream 3.1.2 - CVE-2012-4546: Incorrect CRLs publishing - CVE-2012-5484: MITM Attack during Join process - CVE-2013-0199: Cross-Realm Trust key leak - Updated strict dependencies to 389-ds-base = 1.3.0.2 and pki-ca = 10.0.1- Remove redundat Requires versions that are already in Fedora 17 - Replace python-crypto Requires with m2crypto - Add missing Requires(post) for client and server-trust-ad subpackages - Restart httpd service when server-trust-ad subpackage is installed - Bump selinux-policy Requires to pick up PKI/LDAP port labeling fixes- Updated to upstream 3.1.0 GA - Set minimum for sssd to 1.9.2 - Set minimum for pki-ca to 10.0.0-1 - Set minimum for 389-ds-base to 1.3.0 - Set minimum for selinux-policy to 3.11.1-60 - Remove unneeded dogtag package requires- Update Requires on krb5-server to 1.11- Configure CA replication to use TLS instead of SSL- Updated to upstream 3.0.0 GA - Set minimum for samba to 4.0.0-153. - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so plugin to /dev/null since they cannot be used when trusts are configured - Restrict krb5-server to 1.10. - Update BR for 389-ds-base to 1.3.0 - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca - Add Requires on zip for generating FF browser extension- Updated to upstream 3.0.0 rc 2 - Include new FF configuration extension - Set minimum Requires of selinux-policy to 3.11.1-33 - Set minimum Requires dogtag to 10.0.0-0.43.b1 - Add new optional strict sub-package to allow users to limit other package upgrades.- Require samba packages instead of obsoleted samba4 packages- Updated to upstream 3.0.0 rc 1 - Update BR for 389-ds-base to 1.2.11.14 - Update BR for krb5 to 1.10 - Update BR for samba4-devel to 4.0.0-139 (rc1) - Add BR for python-polib - Update BR and Requires on sssd to 1.9.0 - Update Requires on policycoreutils to 2.1.12-5 - Update Requires on 389-ds-base to 1.2.11.14 - Update Requires on selinux-policy to 3.11.1-21 - Update Requires on dogtag to 10.0.0-0.33.a1 - Update Requires on certmonger to 0.60 - Update Requires on tomcat to 7.0.29 - Update minimum version of bind to 9.9.1-10.P3 - Update minimum version of bind-dyndb-ldap to 1.1.0-0.16.rc1 - Remove Requires on authconfig from python sub-package- Rebuild against samba4 beta8- Rebuild against samba4 beta7- Adopt to samba4 beta6 (libsecurity -> libsamba-security) - Add dependency to samba4-winbind- Updated to upstream 3.0.0 beta 2- Updated to current upstream state of 3.0.0 beta 2 development- Rebuild against samba4 beta4- Updated to upstream 3.0.0 beta 1- Updated to upstream 2.2.0 GA - Update minimum n-v-r of certmonger to 0.53 - Update minimum n-v-r of slapi-nis to 0.40 - Add Requires in client to oddjob-mkhomedir and python-krbV - Update minimum selinux-policy to 3.10.0-110- Update to upstream 2.2.0 beta 1 (2.1.90.rc1) - Set minimum n-v-r for pki-ca and pki-silent to 9.0.18. - Add Conflicts on mod_ssl - Update minimum n-v-r of 389-ds-base to 1.2.10.4 - Update minimum n-v-r of sssd to 1.8.0 - Update minimum n-v-r of slapi-nis to 0.38 - Update minimum n-v-r of pki-* to 9.0.18 - Update conflicts on bind-dyndb-ldap to < 1.1.0-0.9.b1 - Update conflicts on bind to < 9.9.0-1 - Drop requires on krb5-server-ldap - Add patch to remove escaping arguments to pkisilent- Update to upstream 2.2.0 alpha 1 (2.1.90.pre1)- Force to use 389-ds 1.2.10-0.8.a7 or above - Improve upgrade script to handle systemd 389-ds change - Fix freeipa to work with python-ldap 2.4.6- Fix ipa-replica-install crashes - Fix ipa-server-install and ipa-dns-install logging - Set minimum version of pki-ca to 9.0.17 to fix sslget problem caused by FEDORA-2011-17400 update (#771357)- Allow Web-based migration to work with tightened SE Linux policy (#769440) - Rebuild slapi plugins against re-enterant version of libldap- Allow longer dirsrv startup with systemd: - IPAdmin class will wait until dirsrv instance is available up to 10 seconds - Helps with restarts during upgrade for ipa-ldap-updater - Fix pylint warnings from F16 and Rawhide- Update to upstream 2.1.4 (CVE-2011-3636)- Update SELinux policy to allow ipa_kpasswd to connect ldap and read /dev/urandom. (#759679)- Fix wrong path in packaging freeipa-systemd-upgrade- Introduce upgrade script to recover existing configuration after systemd migration as user has no means to recover FreeIPA from systemd migration - Upgrade script: - recovers symlinks in Dogtag instance install - recovers systemd configuration for FreeIPA's directory server instances - recovers freeipa.service - migrates directory server and KDC configs to use proper keytabs for systemd services- Rebuilt for glibc bug#747377- clean up spec - Depend on sssd >= 1.6.2 for better user experience- Fix Fedora package changelog after merging systemd changes- Fix postin scriplet for F-15/F-16- 2.1.3- Default to systemd for Fedora 16 and onwards- Update to upstream 2.1.0- Fix bug #702633- Update minimum selinux-policy to 3.9.16-18 - Update minimum pki-ca and pki-selinux to 9.0.7 - Update minimum 389-ds-base to 1.2.8.0-1 - Update to upstream 2.0.1- Update to upstream GA release - Automatically apply updates when the package is upgraded- Update to upstream freeipa-2.0.0.rc2 - Set minimum version of python-nss to 0.11 to make sure IPv6 support is in - Set minimum version of sssd to 1.5.1 - Patch to include SuiteSpotGroup when setting up 389-ds instances - Move a lot of BuildRequires so this will build with ONLY_CLIENT enabled- Set the N-V-R so rc1 is an update to beta2.- Set minimum version of sssd to 1.5.1 - Update to upstream freeipa-2.0.0.rc1 - Move server-only binaries from admintools subpackage to server- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Set min version of 389-ds-base to 1.2.8 - Set min version of mod_nss 1.0.8-10 - Set min version of selinux-policy to 3.9.7-27 - Add dogtag themes to Requires - Update to upstream freeipa-2.0.0.pre2- Remove unnecessary moving of v1 CA serial number file in post script - Add Obsoletes for server-selinxu subpackage - Using git snapshot 442d6ad30ce1156914e6245aa7502499e50ec0da- Prepare spec file for release - Using git snapshot 80e87e75bd6ab56e3e20c49ece55bd4d52f1a503- Re-arrange doc and defattr to clean up rpmlint warnings - Remove conditionals on older releases - Move some man pages into admintools subpackage - Remove some explicit Requires in client that aren't needed - Consistent use of buildroot vs RPM_BUILD_ROOT- Moved directory install/static to install/ui- Remove dependency on nss_ldap/nss-pam-ldapd - The official client is sssd and that's what we use by default.- Remove radius subpackages- Set minimum pki-ca and pki-silent versions to 9.0.0- Drop BuildRequires on mozldap-devel- Add Requires on krb5-pkinit-openssl- Add ipa-host-net-manage script- Add ipa init script- Set minimum level of 389-ds-base to 1.2.7 for enhanced memberof plugin- remove ipa-fix-CVE-2008-3274- Remove duplicate %files entries on share/ipa/static - Add python default encoding shared library- Drop requires on python-configobj (not used any more) - Drop ipa-ldap-updater message, upgrades are done differently now- Drop conflicts on mod_nss - Require nss-pam-ldapd on F-14 or higher instead of nss_ldap (#606847) - Drop a slew of conditionals on older Fedora releases (< 12) - Add a few conditionals against RHEL 6 - Add Requires of nss-tools on ipa-client- Set minimum version of certmonger to 0.26 (to pck up #621670) - Set minimum version of pki-silent to 1.3.4 (adds -key_algorithm) - Set minimum version of pki-ca to 1.3.6 - Set minimum version of sssd to 1.2.1- Add BuildRequires for authconfig- Bump up minimum version of python-nss to pick up nss_is_initialize() API- Removed python-asset based webui- Change Requires from fedora-ds-base to 389-ds-base - Set minimum level of 389-ds-base to 1.2.6 for the replication version plugin.- Drop Requires of python-krbV on ipa-client- Load ipa_dogtag.pp in post install- Set minimum level of sssd to 1.1.1 to pull in required hbac fixes.- No need to create /var/log/ipa_error.log since we aren't using TurboGears any more.- Fixed share/ipa/wsgi.py so .pyc, .pyo files are included- Added Require mod_wsgi, added share/ipa/wsgi.py- Require python-wehjit >= 0.2.2- Add sssd and certmonger as a Requires on ipa-client- Require python-wehjit >= 0.2.0- Add ipa-rmkeytab tool- Set minimum of python-pyasn1 to 0.0.9a so we have support for the ASN.1 Any type- Remove v1-style /etc/ipa/ipa.conf, replacing with /etc/ipa/default.conf- Add bash completion script and own /etc/bash_completion.d in case it doesn't already exist- Remove ipa_webgui, its functions rolled into ipa_httpd- Removed python-cherrypy from BuildRequires and Requires - Added Requires python-assets, python-wehjit- Added httpd SELinux policy so CRLs can be read- Move ipalib to ipa-python subpackage - Bump minimum version of slapi-nis to 0.15- Set 0.14 as minimum version for slapi-nis- Add Requires: python-nss to ipa-python sub-package- Remove the IPA DNA plugin, use the DS one- Build radius separately - Fix a few minor issues- Replace TurboGears requirement with python-cherrypy- rebuild with new openssl- Fix SELinux code- Fix breakage caused by python-kerberos update to 1.1- New upstream release 1.2.1- Rebuild for Python 2.6- Respin after the tarball has been re-released upstream New hash is 506c9c92dcaf9f227cba5030e999f177- Conditionally restart also dirsrv and httpd when upgrading- Update to upstream version 1.2.0 - Set fedora-ds-base minimum version to 1.1.3 for winsync header - Set the minimum version for SELinux policy - Remove references to Fedora 7- Fix for CVE-2008-3274 - Fix segfault in ipa-kpasswd in case getifaddrs returns a NULL interface - Add fix for bug #453185 - Rebuild against openldap libraries, mozldap ones do not work properly - TurboGears is currently broken in rawhide. Added patch to not build the UI locales and removed them from the ipa-server files section.- Add call to /usr/sbin/upgradeconfig to post install- Update to upstream version 1.1.0 - Patch for indexing memberof attribute - Patch for indexing uidnumber and gidnumber - Patch to change DNA default values for replicas - Patch to fix uninitialized variable in ipa-getkeytab- Set fedora-ds-base minimum version to 1.1.0.1-4 and mod_nss minimum version to 1.0.7-4 so we pick up the NSS fixes. - Add selinux-policy-base(post) to Requires (446496)- Add missing entry for /var/cache/ipa/kpasswd (444624) - Added patch to fix permissions problems with the Apache NSS database. - Added patch to fix problem with DNS querying where the query could be returned as the answer. - Fix spec error where patch1 was in the wrong section- Added patch to fix problem reported by ldapmodify- Fix Requires for krb5-server that was missing for Fedora versions > 9 - Remove quotes around test for fedora version to package egg-info- Update to upstream version 1.0.0- Pull upstream changelog 722 - Add Conflicts mod_ssl (435360)- Pull upstream changelog 698 - Fix ownership of /var/log/ipa_error.log during install (435119) - Add pwpolicy command and man page- Pull upstream changelog 678 - Add new subpackage, ipa-server-selinux - Add Requires: authconfig to ipa-python (bz #433747) - Package i18n files- Pull upstream changelog 641 - Require minimum version of krb5-server on F-7 and F-8 - Package some new files- Marked with wrong license. IPA is GPLv2.- Ensure that /etc/ipa exists before moving user-modifiable html files there - Put html files into /etc/ipa/html instead of /etc/ipa- Pull upstream changelog 608 which renamed several files- package the sessions dir /var/cache/ipa/sessions - Pull upstream changelog 597- Updated upstream pull (596) to fix bug in ipa_webgui that was causing the UI to not start.- Included LICENSE and README in all packages for documentation - Move user-modifiable content to /etc/ipa and linked back to /usr/share/ipa/html - Changed some references to /usr to the {_usr} macro and /etc to {_sysconfdir} - Added popt-devel to BuildRequires for Fedora 8 and higher and popt for Fedora 7 - Package the egg-info for Fedora 9 and higher for ipa-python- Added auto* BuildRequires- Unified spec file- Fixed License in specfile - Include files from /usr/lib/python*/site-packages/ipaserver- Version bump for release- Preverse mode on ipa-keytab-util - Version bump for relase and rpm name change- Broke invididual Requires and BuildRequires onto separate lines and reordered them - Added python-tgexpandingformwidget as a dependency - Require at least fedora-ds-base 1.1- Version bump for release- Add dep for freeipa-admintools and acl- Add dependency for python-krbV- Require mod_nss-1.0.7-2 for mod_proxy fixes- Convert to autotools-based build* Fri Sep 7 2007 Karl MacMillan - 0.3.0-1 - Added support for libipa-dna-plugin- Added support for ipa_kpasswd and ipa_pwd_extop- Abstracted client class to work directly or over RPC- Add mod_auth_kerb and cyrus-sasl-gssapi to Requires - Remove references to admin server in ipa-server-setupssl - Generate a client certificate for the XML-RPC server to connect to LDAP with - Create a keytab for Apache - Create an ldif with a test user - Provide a certmap.conf for doing SSL client authentication- Initial rpm version/bin/sh/bin/sh  !"3.3.3-28.el73.3.3-28.el7 ipaclient__init__.py__init__.pyc__init__.pyoipachangeconf.pyipachangeconf.pycipachangeconf.pyoipadiscovery.pyipadiscovery.pycipadiscovery.pyontpconf.pyntpconf.pycntpconf.pyoipa-client-automountipa-client-installipa-getkeytabipa-joinipa-rmkeytabipa-client-3.3.3COPYINGContributors.txtREADMEipaipaclientipa.cfgipa.jsipa-client-automount.1.gzipa-client-install.1.gzipa-getkeytab.1.gzipa-join.1.gzipa-rmkeytab.1.gzdefault.conf.5.gzipa-clientsysrestore/usr/lib/python2.7/site-packages//usr/lib/python2.7/site-packages/ipaclient//usr/sbin//usr/share/doc//usr/share/doc/ipa-client-3.3.3//usr/share//usr/share/ipa//usr/share/ipa/ipaclient//usr/share/man/man1//usr/share/man/man5//var/lib//var/lib/ipa-client/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnu directoryASCII textpython 2.7 byte-compiledPython script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=0x043aa9a8d0c2acf95bb86a01bc618e4752055078, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=0x298ff08cbc92b9be13ef27cf75d546f1ff0e48c9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=0x4bc9550a81d762f44fbec430bc7c0dc3760d90cc, strippedPascal source, ASCII textUTF-8 Unicode texttroff or preprocessor input, ASCII text (gzip compressed data, from Unix, max compression)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, from Unix, max compression) 3 R(R(R(R(R(R(R(R(R(R(R(R(RRRR RRRR RRRRRRRRRR R0RRRRR RR RRRRRRRRR!R RR R0RRRRRR RRRRR R0?7zXZ !#,3] b2u jӫ`(f`-ޝC|ٚE90;TehH+ ."3Sݡ˻*ҍ^A ./Q%I%x8E҂ZUպ(D~,2a߹|t1NӘ~>tfBXO-^Z4y#*eQ~WUiub)]ECo?zJj<-| ^ן ;t`:.MéA92"JD>:i!:^}B#'v;f=%} ޶ru&|| rba҈4u1U&B+eLx fArЇ"6+e+@?vJ 6` MmES_2IjNw/ ]RBIkT :G: OmKI\CbA`oIրZ2I]>RԜb3 ^^<=sA)TIn'|y>7a5*?p}M}=h0K4p% ?5lX5E=h%~Wq솕lE2SgA4,Yyˎlo[\֠R =*^3ӛk&s w*?0Nkyؾ0ç,ZiJ\l U,#}rpyAF±&SҶ=6cګ |$bFQͲpir΁`ܖT*"2yҰ@EDvmJZPY٪=]\o#U0bF UUsO 9(g]#‰X:Wo6"sZ_ͭ{C6rs~R&3%)XFX=\C@bT0ea- )~l{yW-`;^]eDTA%})$HO<_0R~S(6XS:)o`gvTH\vbd!R]NJb\e෈'W?9!wo&%Sɟn8&?;Ub ̧8͎D!I#Adt[ld!lWhHRnDwօԛNw)(Fg]}/bDuMP܉;C;:j`s*+8`5to!3D-'y^h(Gx,ω= [ÂR= s:Z;߷o4ŚP#U^/_{!gSS6#x7Vv̪u 9t Q6Tyv> x` W _+R|@X(BϽyc2-^d%ð ]n;O9PvQr%0HbĚ4G+[]x]"޵=ڲc~%]O˼wf=}<$۝Ɖ|}̙jw8k'M> C=[Uғ9 §Ƿ\4}l/{z>i}lͭ_о(@V6#əb1<6bU! ʍ_m קfp[]N ״NB+kU`/!ec'ΩLtW!W`$Fuv2?l_wj:Y/%=TYWc lm~uaຳZx8FF 0itBg7,{59{HڢUfd2+ ɟoNShxpaIš){VI#+|t>B,¶xe o8 dt[rt>bŌr.wvM7r[ )3`#6j+0_=f/t-@V?YE twQ"ihL17 eepDg MnzB. tS# c-HEJ#Hh ~E[NK`&3>a}s =C3{Hâp<]L9>vgiWtbc,gH|MY7$2,+WԻ ~u 8# W(֬$ n1@l7y_!hW,ߩL-Nlc^?\՟VQSU@J؀$(oScfJ$Hm8E\ z/0.$㰪zG [P]Qa6>vW ]sq_JCOjLMNOpYd9AVNGt*ߛZJKn;ARt Hd.7! e(P~N?}--ԊpKG kBH+8:8a&5(5Mn,t<蝏ϒ:t'O̬ny© i_2R-w!tK_-nj b-DpCY v;|D^̈ ck{Mv2%YC_d*4ɼ}o8ܓ:(^h@F:L.201y4gE1:&[5F ٬Q]F a3܉ZSDOO~hEH×{^@3p P}:TF46uK>V QnJ$;Ka] # RhP=> ӑJ2>R-XneBbsXu(j_) `j \ű2؂MW:*~4 OmS=3< ƷO`~}hkkCG0뽿d!jր$ -ů{ F7Mkvmݜ;8Ifqu52l6 n ),]oYcibESvdNxQ[PIK{<%D1sOlfINANhgl9h3# c4c̥\ݎ[B~䣆˜nK>P0c7 G V8 5ۉj!Yn$dT,Nn}V*a}WҝWk:=|`?Jt;GЎræDfsF}20RCs !炕;C4D㦷b$L޺g2D)loTb"|#&U(~fMGI]O٫TG%ZM7Bp2<'lb$f.B"@a1GJPju,R۶T޴|⩎dy;"~q= 2!f8ޘ bAվb"{rlIY/5<,hdӘOME%_,\YŔ,+t6,xZD)eJ OQPQ^#̕KיI|JRll;|Qv5!Wsv8" Rƛ`rK&BV-3l_8QޔPG<('T!151a&x*p[ԝMڗ7ީ]B Gu;Nl@EK=FRԢ6)T>tZhc(pNBb>XO@ճx]LM"?3 =@~ĂH?Yggc2X9S#l9Nv5 No|9x\kʪ/|e߰qWz} z48qx?urRA9Ibj:,ްZI.X"Zv Br}0"[\| Xkk=_Z*z |;؀F)D4A_r] JJ1mW"əo?liK.bؠ+HuE!RHsz3j퍱lc-Q7oEOF؅%]:0y_h~MoS UqvPlV-ۖqOBIc!TfQYj-Vpt񀼥i/E۩M o+ݏ ӻo*ʳ۱oN{mV/ uYcv煕y£|W&ؐ_ߒwJQYrvOdarՔو^Srq*$Fg\ddq| ~_Dzn-/'Sf"&_, Ob6) ~Nӗ %G` ˘g[MŹ;KXa`oVvH L]) @eVo4{]HP8_P8:h,[ɘ5dZTF?c%Hp|Oz-ikڐbnzV=A\hU Q0{"t8oL1S5f7M=MR0R(wYA(?@'+ۮY)MَSҼq_x\zA⩏HFS~vhl- 6|/~gmjOHH^N0֣2𡪑:Itٓ=3n;mK`vX MUh \ƿ'!/MTfnXOaĥ93F8s=f›㌫AݤoMƬЧ-Ov N0#!)\Fdp!%|mwc28t x"2tGCUhdk#b}dI/rwizeD&PK&>ż:vϭ҉պHR=Pd側㻳M'vvɶ}rvaϰLJ(A;fG|v56cЫֲ0&XqORTӓ9I3XonlV ՆJj?^x,2؜NЖt ~f'G= !!.A7#];E|whNpE4"9%ȍ{ 9uIרsz!F%.V,9l:o~v+H_/w2sDW H\0¦jY_գ~%`NgttoAh@k$ĪCRKb 35A0_ӯcgb3_{ifvQ1pۺ~0gm*)_9}qYn_N_mBj@p+]+MF`T>+B+z]R{$j^!}~&"a B? eBo[?MnrHQ|ܻukwzKyH5~ϟ)c<5Fɻ^Z]/o\n4?GH92/ T;C]V'샥*gК{ʚ'"@(}UvIl&Wre Z|`vOR4.D$wG)zP8^"ѢT;72RxewŠBN#d[X[qK7>w6PX Zj&=e& UB#KNlȪ4F5%ΏE@;7&}t3``נϦ'?IpWBZFLV6w× w PDl&3A࢙&H4R/8aP*^AlM 2 Rd)/ PUxiiIᗺ,N2G97[_P &c b aU}MdbAm#BRQ>b Iv\a͐05=0`pɤbBMj:&iH!9 ۦ1U|}]_!+FⱁB<~Sf^.jN|S@Q/EUg7F4rGͅ,>Ľ4$?/ ;I{kMpuKc2uXfb9^TK~[U.$8ca{̈́@+Jަ;mvMQ?U*uWrA 0pc6,0mz;ʋ@EO#FN|FeyW# $ 82dϿ/cw>17Cq1a;bo½:Ǽ8҃/Bhبҥ6LNF8xQs}\d7f)Y YX֮*()"KGaƸ,2 AOvmKc̆'qUg R$_[a𿗢eGlgD@n*@1{)rq떉lvHVEV ׶2Mκ:%mcb^WWh[20,|Ӌ] dv` LJ Bz5Bo yev\ %P)z\za00;m2Id6}pk g7c䫞!5hPdʸ~,(D9UDpJUqߊZQ-T7 TE+ҙ kVy(K1>&V,wKz P4sZ# s!(VL#,E~q" fA?F8*6"4+Q-'cce,E)6.Q[d^Z;vjg69)5Q YfH/-c=C`Euen#ä5߀ڎIuYWʻ)@!3wkrvmKsOYhUgwq&Nn!F ;&y~`ε 54 !@@AX} *S竍ruBInmUzI& :: Q3|,BȚ}WIQ`K(a:0}/v~!()%O;\|6_ycyI|.J1D720F.EWJ&5sa%GaEO!#5_VSrܞ~S>镔׻:zKTWè NAc Wߪj5#m@̀Z4w  ݛyWGnzqsEEﶜګkňĥydtSp^W[5J ΧLyb P<m.8Z :^TeRNxj4tAd@m^ӋhIKjيz bc=Ilz`E2BNu_|JXa]qJw‡r^ 5j&ob:i|VXϲj{Z$kr\] qc%-Zr%ag(A[5mjnAZZlZd1g٨S茵TYF17/18ܛxkئa;1Э;8~R!raij4!ODӄGdwO_,ek=孼D\Q=@ uXs~ӭH[3їbhT'kOw)s !9枮ɽ1pJN?Ӂ ?#Ju#owM sBĶF2Dz]ne&~)A>$z)#3r8wU>vuhZdS,QiAP&.ݪ/efV6/̿N\"@k`Do T' N5G?/oj T PhC`UT4ӸD\&wߢfF΀!fode ǟ!PR~PW'@7Dx^ ͅJ-M<#Vd:P$WZW|Ro ;(uohC,P'k)GX\̩ ב0aank}ȉ$ߖv/ &Osmfj<>}68XdrLɕpIQv|8cj^ }H"y&Ky.$`+f{DA-BlDҐ]S0ZV5`QZ]%~ɞy F66'WŸ5_ R*cgm/Uжck ۀ\0'ɅbzeST(讋~j6@7BBٯFl oMpr{IG*9bY Ʈ\GT3 RfH]_7mV;rK?΋_(-NoCq9u<[ڄ6m}#(lɰ3SqDcE-Xi#p`>/Kl iҗ }npP.*Q!yŒNگ.,7zj]zݰcKشozE[Cd[~" X[ϠJ Ѩ4=TWɶ##̩e ?\l S@V*|5t/p'+sgyGѰ;`-Ȥɂ^,;7mTʒ΀ssECKzJ=VK8j{Vz,%)9\r`;w3Al{͟O3+&u0f)ZtltV*K':Vz~ڧL!LÔ6o1*\*\)5q8.F\wR%r2t(\v. (s+F$ŭ~hz`uO;{X,qfk$VAv B]I0x{oٕg/^Y +\@l ;=†$[E@XglH;Rju^cQ(~Qrbk 6*NtꤶhqBJ4˘C!R~@DHr&zg=3kQSxu1h $cIu) A"o>Y{m>5Q̝ԋ\y`\ڭWb ]S='j`/#ʇT~%*8{曛n#yاXwoнHo"fR9LY rUb ;Wm!LV7PxHQ`13+$흅aM %//apL]C}~":&ZvxL ŭ9тkhIҽ'rѰ+^z@?UTbaIHB8!^,OdHt1tmt L rH`dxL~x8ׅ-~Lx#"Px _ΫܦtyX3:h.gp$k#&摸3JG$Jշ@p|mlo,]~FRwуc3&qIsw#M3{BfNpɇ1@O }H^uu4C[_[& 0 Ϣy_&PI{' ?έ|̜|[,Om^ㆸm~e<KӚ]T>`\ND'ĥij2'}AeP)ŘlALý6r$@PL/f | xVA%CRZٰn{]ǃ[Z&Ik0Y/Nͼط-\z-"gIۉ{J.ax~˳tĜHCݭS뾏f~/ƕ6a5p|IM.uCLphi $2%s>5,1Cws Eu} j'~X؇4ttDXnXPJi[눃 &a@J)bJB셡7 $S-{/)3t" q87f As^vʄ.`RF6fo]0 j)&ϰZh^ryBǪdp'%n:H)*c8\AGz/m B#aE5Ylqdڌ?J!(=mD6ɃFu ZgS#WLL CZ%H&蝾ވff1 sqiJf@)<`az6dq3 y}S!Ǻ^7XB` iZΗFk/,/Ž(p:>3'5W|6:Hr*~+IĐ& ϥm9Y49e &pMê_bK zƣdh[1x؄:ڰ7jńk'?nd& &#v??5M7d ߅=EL8蟇z+4V0/m5K0_{ֶ^ Ѡ:k'8%a'3MC>ԆZ`U#}ڿ.:8031zg(E- ӿJ A,LSy2v@Z#'%`.3rjJ :Ga?%YL#b>/Ө|"fx{ݣqBDl [@5DL7ALWM)$Bgr,(2t)T*9zv4~klLN?6xgђީ %ZAGMW(Ңs8#_VboAøwқgDa6LDiEUv~8krICЬ2:(2^ʞ,%طqVcKçAŋTQWAws r5ߜ%ӂW}0|?L,O>*rh7Q{ڒng#"\k* ro#U9#TsbE}*|(Uߏ`_SFbyv7)SaydCys۹؈3K)wT"rLkp\j6?v]LCSv /gᴽj b匁CZ.<"I[31Uڥm\jZ~eHn]:4jcb S7ծ_SNۥP)zIH}3線V|P{KR=ϸNYǽPs2g~p׻d2%HsYQgs?2ڪAMń8nS叶:[Ԣ;O@s)=j扊qS@oL6J1C PJ u5<ǩ%, F﷑))Db?C(:ma6Z9AIa_ͣ'D0~=TQljAO"]˞!FnMVДG7)lE wSDSQ ¦e8s`DR˂y g$UJc ԩ~fq.:{XGDhr^GP4(筐vւ@dAχ ݠpCk- ȏ\'_3,? P 6uп{'JI:ptn'ʲbEQ} Yσ3WujI%HmN3tkNg)I߀7TlDi?.4@b*]v; 𠴟 L[<2ɵ`Dwf]b&' ܟG.s} f3=e-X{gtϫ=Y^azQ>RfOY|Ywo.V{''{$L0-"r@&>'wL ^uSUtAsjܨAp!u;%q+'E!dͿYSh֦ı+? 4ٽ ashB/, e;Bo<( 1'~17 QMnS6քL`f [rR*~ ,|eF;u32oࢡ?XО#,kP5=P$);oIN24icF0 Wr v"I}'LmCRMV(퍄6 &$o\;gE7UÐڷrxׇ=D)ͱGc^@ּ<̜fO R5VK3Dͬ6#_+ym2pB6Z`EoN 6̡⳶KM,?ԫg+%B^dO]šIJ=ߣ]K`0IZJ{vW' ;BWf7 [YIٰk uim N N;-Ms$Ǵ?eDjgGy`\ 7nkc0:?S)<ʦYOYǫIgaqǺ'ьG f%l?hUN4Ƨ 1Lx6+/8DRkZ9c!?Cᣃӽ.̙xѽf(9ǟu2` ,wh|RxI[8 ѣ47`86=:h$T="/rh8q 7q($9Z!0$FkoBh}e9~ouky3c"_G"=[NFEJkG6N:%jĉF] FiūsnY?eI%]s{-tY5zd@lFd/p%uXS뽸-~^wO( P>A&BPq(޺HCf$6,gӢD a|Ll⩵.zzjcڳl="Ed 9co -]$ITv|WזR\A jjJ曏Ed)i?0>?3&DSH/(nQ+? #9dR@`g7]V/IJƝﾯl>~D}(a$`VAh_RXG2JE8=0<| c ! ?ihs%YS[坜u;& j0_ T'jYsT;A Q6.l(<Ȥ2Fn dpQ;B]jxgZ{ }Bc>)W 5YU?TǿaZ?{zT]J*U3`{@ZO]FL]: rv*FLz2BC7/xfjQRJ0*7YGzv,P-[+_ŻF4Wnң)ʿ;|XvP`T_]>2W 6I'# S5C/&%d~d,b=j]؝*h!.TCl44m~D xs3pI9Ww-TEƐ&DS̠:*Dm3^ RFf4?`Bd%{kIZ9<Q6~Yu+5‚з"NNBŃVA-0!Kslr JU?~_LPKh{pTHӆ݅qΤn* Њ99?hBD-ltp}rޘwy&z] n1/7wpd\AE|~KGv$(`R7#cMYs*F3,Y3zn7tpYc0l(p5 /\̳T][1 C|UsIl2GǏFhҙ|zP7߹V±Kxpd> "rzi; N4*“ @ܷdkZ\ ":^5:L`jA6oaw87#y _@#SlLVۖ߯:o L|ey̧& 2l<]P4ěRB9W%LE ..)t {4P!TRn}|_?C!{T#4K8W 9rF7H*>]=\ҍ׳E3~.]X[^@-O b;磃 b1k8ؙat0J'aD^e`i;V5NW(<nkSAwΞhLKt(-۴z,},7\MʹdCEJn~k?P?-auμ֜U^74BD%0#9y˞$͡9/4^ ]^ 3LGJ!{3)6j=1A;NimrB7,+NN }x-و0D*gJןbך=M0ḄYs"k)}Dh)<8"9ȿ֩ ż+| rT\=$SWU >T8xoX \9=љ>"NiX4eţe/kp#l#<^m D*.:`ܠ/y~oIyĮl(M|n `O In"Ji[U&+ ۭӑ>e.Ԩ+|Q}Ӑ_K9 ܭ ޯXG<`"z-7w+m|6k9ӗU;R߷LAޡ'!K3kʊN+hFHU1jKD>͇ҮuK Tțx >2,sOW [P,gt"EJc(ePZcp4@d`|I/_BK c4}v?{ H:@@=CYK'YWOCyAp`)Lt*2[^SjF_?3K#u;rie#U(ql2'Sgj UG7Eo5-uk5 ? sqlps[r ~<,.ãU6+C)菪ܯy(`[KD!ܑibofRrcq=.Ι2-Aŕ +:s A#Q]Uk)b"5bvd 0%P?B 5,b>,+#f^f;'jHg>z c0WYrVgHhچtZEjz aZ$GWW"ds㺼RjK٭o%Oi P^b\ه'zpu/Zo){/mkv:hd\uI9$Fx<>C?G!Hv݆\5!t =^n; )ԾC4}5 WG1c"ǫ~ 2OR<>-HͪfY7ȲcN= p/Zʪjg0R Ն.I'+2/JrX"֒N9RR֠ldN?TƵ@y+˒ֵ:b/9.$>ʌRM۪D n05!+  "wyX_\uұDOmN3uYSn(IxDWflyoq@r_oZA 6@=P:쾶LE-4~d-m'9_=|6mNa]-%pY80.LEcP&|c^? |P$u($\ȐNZ{ :yg!lAWOp0nX&ޮpR+ۀZVݲCw)2Cg9u?`D'1 oh'ߑ %?R"^tYcCu^Wf)U&/Z37!/.#2E5ܰf{aҭ~#(J9ݻl?LF V导`vDs\9f >LрaѿԁmKpEamOG^b\jB9'(Pr`˲۸3c7UtD: [O6u4 N'w76U3]鿶nUҗ[㱡2:t-jX)L؊A\~+tqU}?u@~ bTYh˕Ͻݻ@;^0Te ׸EiQ5'bQ*, uf%KP`r^nZ_Nu]v:ևLB-Q,ʊG'*n-x~gS.T56DOgIؤ~BoȘjO1ֵ߁ ?d۠!^M)5R`Ry >2VUilFb M؅{k^ל'UW.85>y?#]I7gn 4͘ ؑ0žDhRhytݩzqvJSHw;n+Wo1p `@bb]D=*h+k jjJG-lze'2GS"uCQI8]RwSc.qOCCi} tZ>n#;BK E.{MvWi)O.kѻqi7q/PoM j3*E1bUv1@i@3^Ӄg+_ogE"x[Q/5/N&J>zzt::E]i:CÈ3 ]mv$ BG `}G@ K$A]?[e|\x5-ey5PLE=zz?-Qs+%.X$#էѠdEf>m=iR@X)m=vl?{<M'A|2q.^n2dBL9b|@PBU7tRJ׽oAbɐP*\%)_T6$.Iި'D0?U4#1>Ỗc$O3"]җDx@/'7qރN)Is4 HȺ|8FNZ4UGVlÿ#f":jM5G*;=U*Qխ =n`VρrBcO,X1y5֥D}!Kq:y;Fz.$K beܤ*bBsnOʲx,ҺmLKVOZ"CHʾbqVEXTC('V CeSDc.F[>H\DS|Cׯ?h{|]GOexܣ"S3oM©!j op * v( ]]YF伝9~ /)$ycLD2_ g8gFO'Q#l[F{R%J\z@Q=v D&%4Ա QG|6ftn∻ngL.wřz\+?%l>/NBެރ5,=%쭕`3z4lobV:5HیԦYޤ4 5a0`vcWYXIjw79/Q+B+7\ўyWwJaYgaoP(M{g3wCJvPˆ"ZC0{g&&0NQ[pϱ^+AFMm &s['19mx"klr/02K0nƊpΈ⧚Ե%+L"n;%Wlqr#7:`~C. s"k{GӵKS y7!?:u6/o$~z7[ns[Ԕ.7eUzo)8nC՗Mxes1m'Q%J4ŴCƺ[ZoN i`9Oz&D@}Ə\|4Ӏԏ_8n y PGK>AHk\~51zVl[ =CTb-5vN(#AB(b?IG.W:DC_}& 4~ڦ ( EJ#O[Y-QJ+6@zU90p^"4VgP@ӝGj~rHT:x \؆%j*R1kNVtFG*;اO2pf582pQ@W$,3ryAr:\pCQ.r\ P}CË*A Ov7֊RBx}8R5T.aj-eby ?wdc?M Z'fDBRf>3[UK [2<[ |0tvQbκ1# Xd493 .PY62 2=20tGY$H3>ҬfǷ?|RV|/)[3h?{BCD-U<^.f9+p\/m@Y^ޕuڟgz(xk K\ȧxS>4kzCSH1CL6 y^  7t0PsYƸހ%`f}|HyfZ.-!vAЋ :/9&*:ALk g [+uiA5p!4Wt4)~GPk+5^v %iZ@oWDpɕB-K6 JH;*6@S3ұ帚 AּP3! "2H+LX2Gl+…/h N(ߠӬx%?K{z+Yd{/^"yJT!qvLESTgpp|Gtaq`j 7^<\ kMkԥ()e7K{;{ҕx]o'Wx,p@Y @)JT0 1 J˳#ItdM />FC/etST nv @և/$SMX)k}6@¥3dn(LR}mؒp@ =BEv4ek\JΟa(=mt[o=G?MyR$䅊(%{/BbS%XǍ^{|ࣱ cwvl3j+PH׭rQaa3v]GAy[_'f^|#3OշbيXtmr=/ [Lo1uHUTk4jTA偧Meu( '̳ȍ;9x0FqQϏ9|@#Aµ/ hFsޡ A'WICIZ_r0hYn}* cr(z̋Y|X..\'œ1.=/zo+ή FoKkBSC!tlk Aݚ$GRfD_w#K(ޚ[>t]7bCB=UQ _'F-&C޲8\a KcƴAѰtJ>v\F? nYE*db yKB>v,q/촏ii5(wš37ZFnEu?}'8S †eX\+Vo7tdiZɯ_ˠ2{“vu*HbGmh\T+SbXCk5tM܎H* ]#ꊺhÍ,O%ٌu$#]pą1Jbu轗v} +ÖW Dae$!))H l}\2z$G~0~/鶣qg w3oDa}6_ q fC]ٵm% 1P~7 t>C. @D$dT\&b~4uՓ=/{%$(3($5$!PSۂvbOa75Ym7K"byR? .8hO>+p~5E&6,RV]rwwa@%w u:okRO-Ij@:Jv8YeUbO} |竛Dѷz9ILMmOfRXJ&8է@*^S'S XXv:ɯZؔ(JL78VoP6r[4T q?{іՍf5yHT|QBc@`+֩.52U.86k =|z}\|EDXqJY݇>:/W ̻NZV߉h*\9HBf /%.;WqTǭ s6XBRf::~/.FU(*/ 5=G7!ym7nU z4qf-{+R$h3穕,oFׇL>/{}JyڭHQ-TX]b7q~N`i?z?@Y}(psaiz(o SvPtt: ʓ{|uq :3L~D?WZ2f㾖oeDO/ELLRZG)|Ta,ojj Q3Z_·f(2'RjOژa=&X/!_ۇ5!AWڎ&J OA׏粽x #Б\Dܡ{7oN&~j@ZZ6?/SÌ(*ZĹV| _q2E/76vmP*76Hc]IEۺCOq"dWEXis,%㠛RY' k]ɚg&nWYkoX˷L!ѯg}]C(7) 1ٯ0S.HF-󇊁nMh7\M b;BrШlEh,}$28AQᓶv~-۶fo7Qw$X6~r;<|uOURs-=4+[ҚRq:qfUx!R&$}Y{^pbxo{x[ .T͛"Hƅߐ5.=k>h98ѠMyly1[o!Ó1Z) 4fqwCEN%q3_-qJTam=z6 xS;0Xa}9Sg_%l *ʑLR F!nC#PUL-ݾzMœwg@3|,R5FE39(I,x7sGl~*pkâ#grWJ􇍎X1?=~A{ePE3;8ש*hJp6&?Xٟ\6YAːI{ٽRL8M1: "cd缅hW+Nd^Ѝ0 eoSEXuu Z*RG]8i[c՜h},3O f9v74M5*H$kmqVC]~t;+X0xeO2R-ۊ_:}VȈAg!9h\&tPN"pJo$XKIJ ]02tWik4 WD{ug"   wVN}R{FGOZ\6^9US3h2oIT@ K '2/<nRiiR. iß%+Z;'3 LBotmLaބtj5n&kCX-P`FB EX* ZmEpxr@Ŀ)W-&}?ݔ9T%Zg͍XB;;>'z/t08aZz'6pQm- `&4gjxuNXU]^ciC?PSjqȊvGuހ|R"fm$kTȲV.1{Cv ׀-0݄+a)58!yZF!jYK"OڃD0Վ'*Y;zebh+OV[RM02[T p-G$x0|S $^0#MlkO T5Kfsf;tv\9›ִYRvH΀*TTޣ`aiSͭroXP/$G>|Ud:AGIi<*vb`Ԙ'If/{qb$tdŒXMNqK Q^`'J@ل̓ )Ƭ-t{2`]h{Ci֖8nlK͒w+wT~COPPbaŸl6Lh*m[7{ nB~B(itGeky|ND@-V5+ZyTx;QM y6:9̀/0oqO7_!Z!w@ bExIjOdJ/;+yHЯ`Eԩe:'Xv@7.O-. Pٿan*<%)(3U_S@O%y*n 󻣕hR@u@ :A_2 6kIԶTJ._?'O؟(9w&d ՂFwY )cjHCbfmN%lau]H}ӽ"2Y2E.c'H۝^8: sq3CF-c]B=W N'lñ:WB)#6h0Kpͽ2(\%Iԝȓ$e66QSt/8)ۭϝ2sA`K# t9Ӯm#yh K?CH\D1JҨfl, v$^ЖIױ&B$3GMwKZC*O7z{0Q܋żt6e?})pX2\ b1<{8ti. ٳH :uO dFIJAQD+\@&n41U5~ϻN=^`رl%|xNi^M2g,2d\gRG?*F#gɏoNZČ- 73ǣ@=)u.1:ӼG֥bDc2r`v򯫤w+f)qLQGX2qtgMϟڨjKZ1%א8[ ٞ)l^fxم(Mki)78zX%RTik)*>:ls<(3hoR3dm_HKؖS)>yCZ&V| 6vgrpoY(T`_pmml8^Ͱ}SgnMQc2A1O^$9&.= Y_K v#W SUw] ÝRGB|X{ITG \q6?_(i.$'aCR>6P<8Cxa $ܥ!ҕr|0\ t_웩Dukь}9H@g Ua`EZM$Kl.}k> MSCͩ?gzOSÙkxS H)bQGUӵ/ ARk?=^?^IhZҞ &$J҃_qf>Յ : K3@A0hQpȎcvGH+Nm/Oon/Aãuj߫xIT.fp , &$:RGn_cJCRz d#o'`z cOwHEC9_vl6'{ .f`eLAX0?pGdPG6 biv43j'w&R;7qYZAڿL.L H#n7rqEM&$51`mio QJ;B(B%|E>vϲzCFKQ0/!s#'"Z].Ǟp)0AnQy3x_Ȅ"n<9b Xe{dewb* K\ F,ÕagG_Qo5&[u KpQmjz2:85ߏ@9=?AJ)B̏S#>i| ^E~?CL y"l|M N4Gxo-4B"Plet8~[3un(Htg-[ M 8V-#Clfiz"+{)vYEdu*4N2P5Tԏ@TR蘧!69r ɳmm_X0s2963sZrg4u o"y9O{h_=x—֊v${DN>m\Pdr7U)~!QCJW6roY{gȻg0?c F_,Y>Dw ;k@%6Πm㌷=mspFJ[: 6R|RUP%zП]}F w, \b R3x mh9#bΘLf пsy״P4w5YԦn*4@T`yc~s?z=7`RE1huԳ1@oE8?!sxїtG{ڽwLnBlZws;gL^\@;Ҫց-T ێ8* sFRe`JI>!"CH^o٤8=2ܪa=)'YaUDAK1-CA y?hBԃ&;ZHCo @fB1lې ;׬@)izO"|m #X,ޥ\Sda1˧_OcM$,.]Fv%𘫇ѨAf6z\Dav$PDlnRh@ 뚒0I Q q37W8)0AːVf3&: +fߕG@F`*`pPO1SG70YeekLz(fxqYa)7_"P8@pDf,& yWFdŰv$rplԾM=߾ظ 3jt- : \K֛j:¯3V`^]g8^pG~Eѷy0{74P'ȅ0,}9OR!JYHpR*=n {KzZy+m෯ ;wFG~apN6־̇jA<_;`]*b/Lٮjg fM6Vh;pKYSB3zK4㧖ikUhy9K4!v:3*6S&CK%ΤK+U.:Mw@FAN'6n^8͖@ue("3Yꧣ$9N MLJ` *.!^U:9Ḧ́&WCZR,ӗ\ 1ة5N0t $8R_=uˏxD'_AW %Y3I?3" [ llLh ]%`+}nxu#w)!ni! axČigɖpp0r΀8po)4cRp$ze%U_n#H}n?hcG')P.( 0$⊞U#LPDAwvI pkH!"q4 &$Z!F'pTSɊ* Qc[[ykY ]p?QJcx gN xP 4hGrp#, NΞfq-=wGԍjBc0#SSExGe1> rsTLs?/8;q +\%Wt jn}+ \0;UܜyQK1BDJ6-C&EGA/}L'ur`vĂ!OLOk(>Rҗ쌚B%ɚ}PM ?(z  \Rob }@Hs/\KwB_V: -w7ԮU򤯢W٤6R)N!Ď1j\S܌9.!;SU4÷/nӎG$'l-%TO^yAҋ-%J=#e =eTSXAۓ`Q:R5{mz!x[ j@eG0LJ PET  HUeFU (L! Zwm@B6@BbRrKT.ڈpwLz#V:w>K"{VΝ!$5Z9R@`-e|0*V9)>'wm%b@}EJu ~9,/}z/ӡ<#!\JXfD4f3j{t{B%Ѹ`uBP TJk$.#uv⬖wpPhu`m/-w ߄X$XTop\3LUʘx.@Ami(%7*@=,I<.+BL"rJs5QnˁJc_]ZDEUMoo>G|I> ա?G<<٠daU-4~U)a6 q,HrNGbk9{QA?"R%w3tu&V5 s>3a?!m8v-*xo$ TmUȔ@ 0hD,H ,@0FV@Vѱ~>!'YٗsB87NuSE}'PE+LLZUueQvK\,HbFipL!`W~M M+nmܝ\cs{[X!?3 BX)K4+_1\oR6 1xȥQ&tNfZ[ Gs7pdQ4q>ϱQ~oGGN7*WۄD]nͻTg[WHb^q>(%wWJ`_¶Hq k2Ӯ0Ȥ6I`|,$^8y̚n5X|Z%E(+tu w+':BC=`ȄL Bm]0k5|n5{gr@:pB62O(Ųqĥ@,^'Y"< 8fFN\LXUb[v$_7L25K 2lc0IJ4̵ka#՗!m_ƈAFZu f@2J`"nuXz nGD2@odx#9e11эz6wI[#jX!c{zM-6eܛr&[0;יJ~(9 W(0߅3+:RC plເ6߮1*;bg/ eA7@h bRO@6Wq m]|/ ,wS-n:.C v朴\9h|"1tT>/yGZwѣ,nWw DcG]O*%&}C %;n8]MAbIKaUR0!|1QHL5-mN@u5"{sH jz4#fj.YgN [YkRW"0ׯZo$ X(8#_EvwV01$[M IddJن)f1Zd>;m )'&  '|w^c4*n[9 Kmn i@3xChV\tI8{tch)^ Vۗdlz/,zTTꤓM [y wRcAq=|E)e.hO`"9,G[A ںL%y5 M?$9uV+W& |.;:|"XW/@;ã,5mvZ0Y;1ҚGQx'LqYZ Z$&,uE/&^PDu/>+@R5P#QpjcBЊyB]d.^Ӛ*+/gopgw/ͥ?pllA iP't# E}Af[qSOA1Eg/\me,zB9%91"wq{@uc)[ԉkh0W RԽ,$j+i"=fBw Mmw즉`FŪeLVd}҄t)Aɽs,큳O0du6;CQK>֟j4*QkNj$W!Qg08 :Xn˄+ Y)6 #k jwc[ }I..'9#굫Xf ټA)!Zzag[j(HQ+X (^Ep$ë)7f3ǿ?{i67 dj7nB NfA^>h!&Z97V2eQhhkl='19daJ0Ș(p޺_dUhs4#v`ĝO(h+8WsKoyP-=bLfV_olv'1n3) 7j)炒VAHmz旅Ĉ' kl{HGKf |iL&WEZPPiYy.d`Q=Gf43RPc׏#'z8TrϏo}|r ൉b >}I;߫Hq >vҴ6@"Ea7ԃB*;^΢Q^a("Z .ad-BOGIQ{gxbE5Z |s!sz^pBsp%Rގ#yS$w.hhDe AC5lKskwq,}hQ]%ʡ4H8s[/e*"x'1CK[?TuTWo10-b+/8}"g)T4\%]?+=JR.Gx8^r"kC=1:$^yZ 2cnGV™jM᚝:!-^)C`E{U eI^5̜1OS3`q{=nfoX8 fռ :{!"a ҝb}^ )JFs?%ZV3)&IL2x7\B6t+uȆ5eOGkz-넗L ѭ(^Hp:U8a3B3;1kSƓ+[1!#^(!n ۵ m 5rUI=-oh X< HHD1 IK-ESuH G7E>p/:io>k7" 9%Jnմoս |Eqd`^ C8D`2gGs A i85ĻBv (Y):UP> :^YpaV0bbz%׊Pr~[[בjмmj?)r!E6l‡>63T9yCtQuPm8ԠjW,^(Z,22m8%~_9Y58Q I#Ƚg,meZ*x h(Tz|}% [#iTWDuBXZL٫_vsT R2?D3S{v+X>is)` YcC'C/P]T"T{J`We VROMh],(Bqymhg z4mH$K&Brrꯢ]'=Ƀ4!8#*RykV8`ӆE2TKKpSuC>®F%X[g?2z! 9y P쑦kɶHZoβa#+PM'3$Dzb@F` #@@bÃb]E,9u g ϞT%}Ū?QKR:DM)D|~6︝#Y`I]B52ax! :>#bJ ]i&BNъ-!d.ֲlt\u7E/LI~6AH `|7L*&0W [,ݒPUty3A>,eBq7Km'gD?At FE_1r X@ ?YP-zkĕ6AJV?p@^~ۄ] BN)]?=˲dDfe.,ܹ_'9rq@bBͤ{Xa#@r/>9&>QRۑ$nu}N%߅O9Қr9++rl}s^@Ks I`R)۹Xd 'Dr3$ e7f?ԨIo]g&_#t$;},tiR!n`mZ<\x-3x-hU bgC" |ǥ܄ =-sW\ ̘(BVP펠Z5>ڐɆbpYoRnl}-7,o) j]ZB(_״tﲼr plG܀kHU}KۣLǿh(v EduS͎8, bzD8$-W)ATp3dp BAeI+iʺެΏH3fQ*K_Es4zhl3x󗂡tO86dw4LI3@s-WKVU*H#C04o ,!%UJqioSN[\C6*T??ΣTm:ai6lRN?7+.>BɟK}æd ϳ P3#ۧXHht dX.D)aw|<QyTp =`bY3w픆,>>SiSE ,ޢ|E겾q}VU͊*%^̸ &H>l4;2c*6& nۊbϧ? ^T}(R*> 49U2\xyt 7适~!"dl7mRX~8Z7B tX>:{ObWrO3F6 .=HjEpS%|umD83.|$De'HTl[>|vc:=ӻś&oIKۭ6Fq6&-GpcA4h[B8lrrĐ]T`H IkW29c@n}#+lŊQ=DCmL-^5+} d`e@nZb_67k_ na_Fd L;Sf犧|n2xڈuEUKis|A'vb`:PhLxdd/y4Ņy`u>חdzA`KA+x ҆1j&RZfԻOH3GO{^wy-aaۖ"r )ap/MqO_$>:~8|= wZu5]8WV>;tO]E3D$CSLwaE-?Z50 *[4cGϤIil]̽|֎;#|. BHm7҃C^`M<7HlZƐ);l\2d"j')N0HΏ;нXĒ3gX7[s"{-,v2a(r0l[h'eHoJ\Å8, 0{l?}[j9wU*?+d&YzvE<1$[/)oBc?4b$5,kzx\~J؅KrKݨ38(/EzOrM[@=^HgVhItuzhdXJoI):GaX+el2~ ̀8݆$JZ"ez[J`YK$!k Yk^RYss4C"&fQ2=:7u.fBxleORGOJo+sý^#geKmeW(I&wV͕s}uKW jEq#&@\cb,y E E~64@Zd nE1vIǬHu7}8(m>f1i"ߟd 8{bSv~4?z/=RzLhͰdk̯%(gtCtCblT'JYtdךi@{&Uz y~ߞYq3I&-He{L[&;RC%2V [ZBwlC]ްB>:s6SC(f*zTszO5w T#ؗI'mPj87 uV.)uky&n!Np`h=㇚I oR6Ĉh:փR6qr组fT[^Lf,*_`S@V$Z7.2'BqJ)L;e:)"*+6b++>;bzz/UM䫖:6i'qܒD&\ȹi5*joްrbB*GhEfg}\O&|}:Ks{cFoԞu_"X<`o|2m ,.z¼"48PQ6Ca3Pm11_g0%H, ee27m\OCr@oHa t(]@LÉ=p,^:6=P7?#I*j=踲ȸ{fPu'5eW{;gje ja\|d&:Vv؞ThNr#on>ttsü_VFLz^7^.kDM@i;w$3ئ@P:u(мӰ[%~ OԒZR"ױ6pSȍE olmJa cl3%ff ~-G ;LR9m,Up'y@gy/$oo)-]A4`yoB _5 !-lӸV 73tyb>MI'_ _Pnגd*aL!RǩRPTO.Od8{ad52ＱqϡɡCdJבw ̕ҀD*jk2vU$ Ћh/qc3MCPafa"%).E:3'uE!4쒠I6䋯CR9> `ǵęNꔸ𦿭0\Vc~0zɆz;jKbsuMڒgt.=W;.3x+A?T12$ǻ_iC/yr#3(.\9B5#.E2#ϜKjP$. s.5QJv]>;J^)}'D$X+ &vcG4˞"oxfOg< -#ne(֜q[kJ*|.5tr@u0~s'U 5#?-H0>i 0/4c\swzZx/IEb~.r2AT|h86@~@3?)kXZ+յFS DɪiJq԰Ov"CweŁ:c(V@&:ƎT=N7hԿ؊Ww? wSi%jpf帢v*E^p˵u;Ȯuv0ڙ* `pAe'V!?0wy"[; /Ҕk 9U3=ߩ=Xz@݅YG ҳߦjY[*0J*@%"#le!ۉ.%0vWNGJ(7W|PaSk̢aj.gewkΐ2!E]Ó7SA05%}`l@ZMCKKHH*mfvLczֹ**ن%©F{ԸکA|#Lj[A(;{4 2?w1}@WY4` Ÿ'U$.:bs y4`5Re!BTC-+3 QIuOb,N}߯QU2Vv|v~E}z\ŝ8bMSBPJ;\KDǤ6> P:sי>66@er 9hLu\|pX hW`צt 7pYuEZxک!蔗 2zrfw C&Bw^ذG%+|ͪwTSML2UZ eHs W;l_86q)d8`F3X5R5s2qZVܽ8 Q7@ȕR(63bUh1PJLԿ=ic#j"MNj%C-7:u܂?2'ӺdYϷ^buyM/-c&7NMW%|V:hkZTVĸfoC–XVs7+wS=-iK6}..R oF6[ϞlBB6dChȋ dH}Cy`4,F˔#Kړ!+~;1)0Ta\d~OUMqL2U̪sQ|}|':ͼ=)4t =n[(zd΅ֹ⻄fӼ6XYgƀ;#.VTvd2w`L;4Di:e@M~@v0]~Z~fIV4`!h_C)݋K>L$ZŹ*Ϙdb@ާ&ArnF{DGEf:U1&H4΀RniM%Nqkk+ppUxb~4f\ ̀bn0 9 6I ,". 7(-׎AÙ$<Ɏs(+Rul Z'J5ԛp 6*%^ l.e~k:J$|.b%Dr4rK!#y,M3JFcb_@,5BdƗo;# kx Q:6yY,ȴ-Zܱ||8pr_+k5[ӃDU4MhH_[n&y.ZW"\s%GΰC:R,x "id v"pK28~k,>s)aSؐyG/:7FA'nοt _̩r90E-CE<Ȓw[y0 MmP- rי]Ȼnb;OֲrBY-֬X+',θ|=/aُnѩ #d lqgoB8ھvmy~D7Qlq4#V,ȳf}ݦi'*09ΜSBV)d1J'FF(%%0gL6r`a\јv&(@[Ysp0=cnmx ]=?3u<&:Gpξ"3`W YƳ+@Sq z~~Iǁ`{K 2&j^ %אJ]->WL Hq-rK/KC",dwA)%1nԼ`O44.!ixn4KcADٲ%^óZq1v -P ו:bF|- i'sߗ>uGagsoW܇PUvt@&;h6POr y 19eK>\V3ЏW8~aoχٯ%a "mV/;UZqD"6 a~z 2a{IaWW"e$6]Dg GM ZJg0U{D,}09n0y SDpGq'Hŧ#:50)]KVAF\|SI=ft|;ٻazFsƮIا iLTNZN#`STa%Ȃsa':v@V!!hmhڝ,03yM5Xp5ih8K{AmstI;4C=G8QU> OOGCg.T&FKIT}vr#')J@sOu _5z.rRNkqcEZ!bC:LQbJ]#FHHfU\1ҕGo&Kx[~M;Vw(Pܸ-`#KS}'` ػ ˧賐Y1+dBVI~yocL^T*a vSyhjEu5xPhKt;H4f~ 5rd ~V7B,~x6`6>bzFm{ABahO`6bFnm^f@mq6|%ڞ[Vt~@>6ba?}ioQ/Juʈo=GryFaH/dAypgEJTe^ٹ8~j(7UTsjnPzs'ӖQB#5⺆wAg 3pZnQ 13Ԑ:jgJ#B[vv_'Jؒ'Lϯ 7KgV-TCUM 8'2] Tq*,β'r$Ѫ蓤r'/@ȸ2r+$sEUu쐉1u뭼,kL& ^*vԭ^p]FDD6MSu^P c\#>|d.Gިz:KޙgM*IϮowP`}.<$qI+ !SuAh85Caa+]Oh>]g 7Y{V~~{#1-ͻ죡|al6%X$FXߗ>6SAPdo,rAV &κn߽ b3fQK(f-^+n=.2k \6mҁ}_CC8(wY8}%DIP;40~ KJ*OIE¬?FR|JVsTy$\Z$:ÿ́..t'`Oɽ'L hR*jTt(,{ Dr1F)-EA/)"A?W^VJ.qcCzG]MԴRc^\`%TJwcAܲ= Kz" psd-(*óа}l;T^N]",@e! 8Ҟ"3=qI:Wd+%#Djnxjf"#q$r!<<$#Þo.E{0{R'-e{ jL츩0q+/Ge2dEU,_ր]k3C>M_NUFQi^bp]h7݂V7?YK 1Z}85/XS9!ݠ|k$NNȐ>iB)9TM%G ն^l5$οD7g+~/Y|Zċ`#?;L6(vY!c 絡05!-jPMd R$B|-Fhƚk 5P@ApZȯK k[ڎ ؍|wWG'3R1 uH{(2rAjB㵴Pq>`J;.n"L7b};Kgt bvyeO;8xYodD1ga.)J[4AݽY6<'>3~rh1&3ۿ.0WXdNƎsU?n.L HFż1!`9s9r~]K| ǖVAR6+ꍶio B)@39ӷ՜U5nxjc(}*:1bjfynC߼dl/Fj0:7Dʛ8Z?%a0le+?eZq;sGÂq.v3*KE]VL(I(OcZW4˭%/4H1[Y?_COjk—ckI=[ѰeleT[n3f9Sc&`J Yx)ص]A Wz,%p*p?c s3 zߡAOKirCɎz2 }M(QGrtǸSVNXv@mO|"9.kg@8OsK&Of*)KmWF2RZmwo^:VhE+ c^{6| HG AcTE'443x YKyi@XTFW]oeW-u@Βg{*>!w=f4!<>T~ɩl̮eUrcH7 ke碬ey|((E: =H2JP+OQMMz]k]}3#.ADfX7q얗0U饥gdM0HLBYciW W[+|:m?k<åcp Pe9vo\byoP[@*wGWhDk<)Me@d41Z:MM&I8tB)^S.RliM?,ר%=C v%XII]i`VCshx& muABQ^fz ? 0HRQ&K/QQw ?.g~X#֭9 1\ R]~45>Ў-aFt3[ 6_u P* 1IEEr_e6WM>9:r a/\~vg8֦ ״R66Cxr>~~8/$A?#>r$wOd`ѳ m!&"jUtY_Qo$9)})/wpTy.݀N2?NfmLPQ G7푚 E/th<p4c~LN400'ӄZ{}(7sBt֛o*m3!M c`Ľ -L#^jY_5ؤN#g$Iņb~"BkC+2)oڐ#^<Ќ D.?31+C{s M "Gվ@BF/"#haXd)+Q@ɢ %>R-{mN.)5[Wr c_*dgx܁_さ|-۶w ШUDW !1#)25 gUii{.`($M) z-Ҏ6 6*4G^Mecw]B?-59Q\I붵"QBhcYp@ݴ2-9FB1,"*eeR7zއng7'/6o،o'C#bK?뚬 $1p#hC4kp$}=[$~?HxX(6^-bl+{ͱskiZ߁@yǑinri&${cq3NS4՚0T3 Kt4ͩ)}/_7kYMY)?P" 7jܰSUb Ect+y%N[wKVNDZ'ǐY!Ǻ跤h#6FPlx~PHn':qo$Ri7CAhH:d pr^St!&'^t3} rgRHggw+8(tUni;#b]$絸%AkJקr/2r*_>Xj4߰= LJ>-:Dk~2hPs A˾ Xjx RP,1Ee7ًg9k"e_gj_UH{ vCXUh3[=C[6n JyAhF%0e`W8>U-s3F],Xq\c fiXv~a?bNNSc̉/~5+8ƪcÛ{~ۨuGBesţO_~e(qw2- 84ј++^{IkCkɃ{\>Ṷ" lACS:[t}CppkD36%EO{q6N5I!@#>ޓb1->k䍄*Csوʥ*G)).j;lqXGC M=(`㥈j|PGz,mls?tr3rpbl./)Q/ ѥ?D!<i=wtكo`=(/dQL = nJBLTbFmp+Iٺ~U3IQ"ՙdWq NM%-?Z)VByEPFK7)Z(o8bdq818.t' QF*nޯLjP|p3U tkh4v:q(ks6eK1Nc,Fo E=\`9%bU{(R־H!WUL9eCmg:Z7u_cjt^7yLZduSx৕J2X$ ^87[<.pn4] L=@ukX d(AaY~QtT):Ԏ}3S Q-=N% kMTs֘1ߤDaf ,ej Nㆍdjxƶuelij&$Lzã)&M(Oy0gG+H O>;s0y`J0h *ѵA//lY9<+DfA>*SZN]e\nj*MG>D{loB1*7qUT .:|h߼,krArQUƀkpsr7f[:O|&*)*;[:Y0J:q)R -< $g6i8J)T *ol`#ܡoE>V%ȷBNXٿ$)03i RDTb.k1 Hb)pX;`qIDBIz ncLVԌ5= B5+{Z­ه/[L #3r$zXT悺 Tv,zjRĀ x $6T샥{|5)|a~N<ˏh_DO(/#ϥ:N?ĚtHz K$[j%A%_N>`ZSEm4Q ŔrK:2ߧS'T+\˨Y5W]:R@`i(>e-;e+ 9Pp, ~t<: QՓ _&ZN ~Ѝs[:<^ǗDnq}Lv!Q_S[ Aj:q+~p@ejXtdʂ/yR16brW}R'@yY TYϧ# J\i͠Lr/"@s!mY_ѡhjc`5 Q+䰘xñ,.+2K9]&|^5cԋ<B _ nt2+gyJ*n@p%+3옶GTRE`VeA_ӻjev㥶ʃ9l!YUPE1$Ʋ2Rܴi $U`&ӟPfnTLoKaȺmlE+3g"/#\<%{7VJ}0ߠJ`=+qsބ6wtzRRㆥǂX{eX6d&d+UG܅ ,f̻w8^8{ޓ⣳ګ0ayPfd9窋\AĊerea8XB/Y@p< )=W7orwUY~›G\O|3qZp}lfPq/ j AQru \Tz"%:q#O>(WH 6[fKsGkMz--JM*צeT[cJ"Iӥ}Dl~"]HGԱq--ģuȿíRۃKu ?=s-Ab|tne2tЌew'w8`݋5kH9]}]!q%~]i/$K0&\c0GRd ;ddnN?^3,uLmmfQc<1sܫw hS+s8KJ^;?Y7-9Hdиf^Q8#e1`kLA* Êi2w(W6i \: t=;a"iG~+UܩM⪍cYlomQ|HerIAM{5+6{4+JVPLe!JJxbb>"(! S2@nLȸ[~ԟ'"!; rCU2$fN:xoYqiW2"nR=ZzH=XT{!tV9sGԉ `b ~?bYbiŧ+*#JC&ta5%;.6o6 md5 j{36 -q@Cl9W^^qHm3"N}nVPs4s6}ek*c$=/@Znћs kz-gi~MEUmR#H=R9!X@ar9H!'A`u1T?gl,5'@wzW?م}d1|٧5ŀ>Wc`#f3TzgEg(ZSyy=븓5x:EUG%/4jMU6+>b~b&/J,{ruoo `řR1T8)N,%Tee %E)HtEHtI;0\G>Cl2y0*X_÷k1 ,vUUv7'Ozôֿ 5T5Nę0RhrK@e\Cad1g-݈RGzB2?-􈼡3M8Ŵ*v5|fS#JsoF=n[7ɺ9ͯ~^ :lź<ܖcLxfAY\?m9X4'$)780g=Fb!A ET*J#eCg0\jU1AE52hall94Ntc ^Q W/=]]I,olu#Q&#{L .ωA:>(UvDҬ'Q<-Y]x;|&Lw%1ᆬļ1Z E`րzQ\W!3d[Rh?<^[</:(FoDzhx;f6?4-lx TዱtL5w->KJ&b7?(TCzJ>aqD~ uQ0qBjp< ;&K@=^[(W=X[;ֿM8l,Qɴi7~/6]8l1&wA*.یh8^G1xh.i}%~$韚Xt!X"WUT{"_$AS(Lí xc_|ևe0P̀" ĸeu ǩ !4lu޴1(9ҙy3@ Vˀ &JH}hoڐ"[l=V@iT^p{u|}FyawJa :cIrmD>Xm\P6xT$}H"}+yxy\wM)f, [/S.$Ǯ347".zOn|WB5`nԼ De]3CLNrw$ĚӡUkn)Njk0 0vZ/i&0]_NiN ŶRc}U&TZ5IQƓ ~gx;raSGLNL-4q0qյ䂻7 \=qEq Ҏ#_xKĆN4>pgWojm'+$' in9W"Ģ+ˮtK (2F5A np Sr:xD$ȜB\N!6v=~9ABk7GS)"43唳bgUɡ##.N/.2xW=5Ъ!F6)@{Ŋ*@ 7iwY<(1%"*'WN2EQPk 6DQ9ȼҎ /;_zԈz%ȜjK_ (LD}" ?Pٰj!ꃣɒ>R^5·*1fr;Lj 0{P lOJS {ʢxٲf0B\"fgweKє*<64d?14"~UM^H,@R&$(03qvjGu4b=%:O%42*@K 1`ס؛im y2ê]-0c,q`b7ClyG7L졷oӎYoЉ#+?񪰦_'BGk;υVz6kg? u2TӋ#]B^g~/7zRZNtцwN&E^`2ŕLT pzl'=e.jInyUVl ?-x*VʄA>k_j/:u0 _3M&@H7XCQ~(xaA6ADMք ƹ" R~5lc]Q] v`p fEtI+ TQN ^#0a Ψ8ьc7VxA1P~8)Ax {uke_uѕ׹i\ }FaM:"gLn' %H4x?)O:Ǎ9S;Yj_3>oæuu6Z1 4*ɧT²;L%hLl3@ix:n n:IAOSq8/fNq~Jvt ab[SVkh'>03`[cPLXusu!iu ޙNCcY]-0lP^8>}$&dRrMC!1ga!ܾؗn=ș轋NH(ha7m+uKprb\P';P|^ Su輻ޞ\KO}>Qbbf(u_R (eXO ,.1У/GR޾Ti>U/Z.<|`2M+];Rr= 6UdI©!N| c+ ɭ( twVӓ͎d1U].Ӄ<~P΅9"j@t%Ɣ϶EfiZ8LEP 7O!% Q̨Pe{Kة9m[9疊G5z“*vSja,@rD A20}?Bq$q&_4p4q>۞/V>L&\-"уb&' d2^HO! |OPZe$K1GD0#@KGT pc0iNMۉs#olm19?BKStmUon+ Cά5 fyil[O`Pax)^ʃ=}Kڛؖi% "Ɂl`;@7X ]0lWFM[b\ "ݛ;dvίN%ANi H8T۵/+hN_uzs[j}PPqOz+~jo} $l`2ғ#\ H?~'ci/I"]^zG9oDl%9`FE~0ֻ[C =BT_)I┋kBa5 {4l8]wsG'`qiH{E"`Neئ[/(Ͷpi;AMYۙ΂i_M n8:FWY(jIGIش"Zb)A]H"V5IOS+6%wn ui<1Ԫ׀d9@|h< 5 ŗѪྕL0+fQkqvv@A*ZmWR9 Uz\p-:Xw (_u9^{@99Kb%G&JVQ kQE%`BXrN&WUjL;[}c^8Sfy_FuƘ2 jlzPd{} I0˄*qFV;0aE_Jvn7R…$A`Gp_OS鮦ChpԍrPRߵ5Na"QԸ(VӋdlg*NxC[n"!T RࡒT͛ 5v &"DW7̊ȩE\GFp_[HL6]J+,}ǐixdAſfà꾆QEa ȼqh Ɇ.*$% րc%tG{\!։2 5kݽ:uzYsYslhV$vLqX#,a)2b4 @bD4>I Vw!fV*I:6V =٤De35FZmzϮPo$~v~njeo6d$`g LX-99YUUMĞ=o Ar~ڽV\8D%}_*x䏛I[4WLqP L,&Vd,B U|N ]k ['EI5>dG Y??P+&%T :Sǯ|g/&j!xBq>.IShOJ~C&7VxhՊat\)-:@f2Ix\g#d"/l:B$+xmb6\Ryn|۶<.7{vA1-@=gB(I!sx^{$+ %?#b\fg MNMUǖ⭌ҚX;"]}5-k,Z萵6aN*,vlV:$aI{|c- s_ N oa}(טcܤ%iM]eQpٞ#qQxF.^fIMg7І9֌y>Roz.niH´hPS(^wCZc7C0/(Wng +?L> a9ԣ'~UT#qsbÃZ˳dX:O AFrj![AZ۹(MKE+*/ ++5'GP#uΊ(W*I b8"ma$:Г29ujNߺzZ3!d|/ $q5a@=hlØfFH T֡K通DR*ۥ٢?H6տY(S tMz4vaAԥ57y|8OM#8{뱊ҹrGmhO|yHo_5>tE6tXoqȱ1Ͷf"o?+xކPt+v0:&@KLcZ҇}yf,slme %}4J[/J/.)L$[2֠<ܑ) )NGOEɇ+ |<qU/&] {kɽ;Ʊq{009R{m%[cmH^VsLC0츐Ypqٍ,HSy&;Uo']ZΦ_zWc)VPz#8{ -*6VV%mo|w(eC5.@i壧%Nb&й4>iu;H0T>Hd`.֔Wggn"8L[º;޽B!V'fO)̀`N2/З!I52ᚒ.W?PY}OXVL#em*J/ˮр kdʹۨ~@;l1Mlqp0'[E!V'vRbrlc 2eÖ q)"}\Kt7zTj_y!q̤Cb4 .79Ϫ^tk"uc(Q;WR,rS p9ǹ`.aE G9J%L\*$1s)[÷_?0cwy8{i7P]t :hQ[7k$>$23wIȃxĘ* \~fy-c1q bJ.霛Ly.!.;Jei+g.nnӣu)KE1ԒNsc83*)j IMxe.!o9fجʭYV1?/ZWD럥W Fõ0 hBEd==jQhJ&}xbUE11}:9M ћ`Z5D\T*Q?UoVKi NA1:UgZ ։䵮ױ+Xt>Y8翰   *f 4Ά=ϗ,/Zl>03u{uغZ(hg wZV̾;P{j K$9=I JYwʎ깓~4S('ѓLsQRЈ2LXR84#w8X9_ 6$_3">ek2)? C8x i": {~ݓfOь;anhS4nSJ $x.rjp[Sm)\D-B[XcH3K %9lv>G1k@9ʼhVggWrmPr,E)ksdG @TWk}E_^VRsGD,,:šlTbR@2fqisuN@DQRR)bU";ث#6b%T%"_9향ɟ=Y4 v$48ԮMN|=B)DM0TSG~ZB̼ΞfÖ#3@o}h?cմzwKB[ uErRᰜ}ftqJ-u0 VX@7sNAjbD|VPR8PJzq|J~:tc: vT]C v\su?ű EJرƪx i -ᜊENPlhҠE;O\o86t5CS>[1KO)$gL\hyiKM}\houi`$55Trb>4s"!_D_0PǑ?(j+riƠ}u@,#9Q?'.l_"@ `Bγ+Cgڞ ` scPt`\q[RCFqw8@3dVf˥Gd=W1!b8h,QESj0pyfݏOd % ֲ.~GXItaOQEo!YQ1Y`O -#QWM$m/4ͲK#VXCw[I$P6xIoZ]v&܍ª.+:o<~_PgXrnTZP:V&ʙic}0q.hNQ*8t,3ľe%7ZlF-%&1-c{fK.m+l8b|Eq$yr"Uu8s}݊A ec#Wr\`.e ^K[P9yވ~`Y￦.l\d ʑ*$u15;(mpof.gc~ec{7Rsl3!/TY~R6K PX g~ 5Np ZF=5jeOoFžɥ3B@F"KZ2|Q= S8n{@f !_b73\ 1JqZ-]kUz2}w\ߠé8U %ZUTJpqT4iՐ&_n:#g.Ucr0iEpC@%S5H?:pk^>Mϖ$=oh[=ۯЮR05鐴 I%Ɍ*X5-#KISJ t "bnM(,wS5e1xWs˱: THcWd6;olL|tzZ85ԦL1A 'CV ȸOcab!sԸv2+FP68%Uա:u_ޱ4Om\]d>A*Tp$ЖY LT/XanX bOtT0[Аm3yn25{/zjxԻH걳W^_faLYc糚a\\-5ěh=( @ {gh>6~N]$C̽+b~9& ^sa]O>3 x7ȷ DDKJ=?g Si~6=n9F~ӯM'[ Yy=lID M!`?-W6/[t!>N<-mjy]nz@h@WA1N)b[/nj'B|9juU7 {@Dzy9簴g$, @Tw5PzR0>m]Pv+{$?0ژ"-@7Y?lZ=;\=("͑${Bnln|S*G<IŇȕvڗ+zHE끖 C_7NjϖCt0iѓ  v%TLyR"jK?}6ҽ `ͤhq 5h YA`R=fCx`Yq2H^Ov24w޳h D‡;hfJPK.^G =a#+H&dnhEݔ{|7Zظ0 k|Fg?ޘ$!1ZT 7ѥ+^kmwP$~g#6_okfX(]]ֺ椶+HW ӷ%pݺ-yj";Cki`q* C߈h&We>b5떺 #pqS*we!1ٺq2Ƌ'nZa]T%WjQxݥ8w?v@aOϩ}S?.Ap3 UpYFYJQ f Ä"q5R 0gY O)c*!;8ĠLĘ4hiG^i"$_{8#rk?*m\-Xk0gD}p:N/n8W7q5.7.2zV6} (9u)`X ZH2T8QwHS喹(s X%{306[Y(&ΊQ 9x/,0D\DmJau$G-#O?h|mJ·lC Yo wdOĹ.n ݶ<׀)2 I~Dl٪8F%o]lku}[o|EiD^2m|h-$ֵ7cR -YUz[ V52!aĘX <$l+閮W:j+0"[v 䥑4_Y%?1`̖cF]n5`;2Rx] TZv{G TwP$asߒ0qF*>BTnCn[}+~T2dl7F[{O44=oj|¼툋gF.iTmE]"H(mƳٶV!0K>"!R](Lomdt"y'VT$տ*th o>1LtdJwaSqy>ma7TYp>%2pJD(K$5(NC0״ǖvFI\OC6)A >\,Hs~71L?1HP3@MP%@66u Rjr59#~k'AoǕK(Lw_=waK`O춚k4)G>t؊8wj̈( Z`jv#fg}䏕6t֬ FPN 輯[96b]<Wk j(㙷f7Im{~!.ق8 mS(l.>܉}yF=CI_=yO7 S3ED @6NnU|N3e+\cJp1@>4ת {'E2s^ ]0r8Bӣ3 G1O$}ϩt򢳉#IEX?*V\4;ك)tǏhCoOQW1~rj Ԑ+vK ԌrZ3L]lq4TCN ww;>Fvx~:PsxqUc 6㪀%v;o|ϣOy+@ʞ0dhb4z)1Mst͂k1^d C,Z/ABSp&uWO[Q! +ky.LЌ<4ġz/!W_íf(Ϧacdcs.{q(\\Hpˋ%=SGzG@!*a֧>=I;Nؾl=%HfF ,E IXd8rJ:E=_>tah3{`rףA4{lkC5/r8xm `УxTv$:T wj]4VqP !I 3HYۄ/#>wڳcR޼|̓_DRW-M-뼱gU>b" )Pˎ. ^!t:A+L3a\1KDT[OAf|!1-Z(xJd"]LQ sYc?u:r0#Z;,a_Lu^cճպE}[Z3;3LX r YQac v}{u&\":=ԇHP mIڛX nV.e$>0aDql½ n W]֜ɸ1d`dBqgGMs;: KpاeU~eB ߑ%D拘0ٕZx)I27_ ]=ߍ :;Gzn%&|ޮv徱é(>1h3aχ -&"W6tAB9vht!L\qvX8-ik&b7>}{;c>D!>tB~Im&/r^!y\#5jCdQb'._ă-B/e徨uEjrӜA*|>7@ག=C* W!/\+kZ>G-*9}R+xҦ|xUMվug+Hx]Ox.wycθq=r?'({l^3 SMט& .H5(u)!Ϊ3BAwLSKi +nx[IsNE#_ 4r#v\Ɍ/x̂ @wt*0ɖba}uPy=\I6N D0ĵN^,RĪlPd1iV9m;g=L鶘XfszbMl2h[%Vs(h2꒲)GƯ3bY2lFqov9 L+>vnʜ T.@5NݓyTa~3'UgXt՘(_IJ[jgg/Nq)0XD -1PEWFsK,shu1<|j\o L1ZI%š?Ǣ݁]ML݂Shf\6 gM%XՖrc_pO$YV*on_@0Q2!xN1ĈGN4Gy6H.N@.{0־.& flcR7p(iW TZEysȕ<\9aL4md0҅ݾ% jjTPm:uS]#^2H^BZBU6}M0}- qiWh“vfK)S <-7\ItY<ufps5K@;gqۛ}.PL7lM4#V? !>|97M;Ʈa:"FA>2LlyW&/%Nc;cOBO]=%iX,=ģt[ɗŶ(g61s,}21n~!To47HH]0DW)VLC[j7bC ¿0F۪WRU) h!*p@@Ϲ(h D8D' `$X!B,@B{[S4y|2s]LA&K:xRji-ڵ׆(S< @֕f)14tcOqQfR;xx0ִ--X󈐗j՟`eE|5\2~;83,>û7ySYJyr,J"1f-ڎ=09CsTXVE7*(.3(WYq[Kd b_Z=ޚ' o5?J?5)՜X-&2RNƋ˸lyî>Ɔqen[9ذ-<}ğ6[F|&vs ;6Io/ O6N˴@`,םW:q+C2#DGUzKߠݐiϦOY)]sDvM@N&/06[yv\Tw>,:R;*fDb+nb5J2%Ķ&5ǜxbЃ9EʷoIm%َQ.4-՟Z[@};Xk O3:đC!Nȯ6]\p*rUڷeI8<c r \8<'QSD@ݩ:֊%tL(em!]`o`٦&:?o5OIÞ'].#2/ ;jŽ\5l̻wkNVj.jyެkWDՀ;R( f$Cp{bDW gL5,K8ן&n.i.H%s;< j$[=ӺnhJ ߧS+i +_ߗNB16vvxM?(/s8ŵv)cXhQOkhp2渠!^M1I*x/'BR 6A}CSdׂz}XC-oj!z{`,fɨh'mY]BI_w%rq̜;ui Ҏlq|;ٕ䬫cB0פfjfr/[0i{4r m wܢ##=nbfelpǣOS8N$ p4dqۡY u sjǗ9Z x}&QSB%WN>vF0>!/+;MN\MsM+`F?r%J33U"K> R{Hؔt^c%;vWBpXb:KXCѤȟUeDRuğtkoO*Y'DfYQS[5.{nED\\zj =*W@y'@|]ԔF,#aaPA\x Q5W]~˲TjL2D9*=N|p|s6'H|Z`-m`\](|3xTvL9`o<>Ւwgl֡ZEnU`vY VrlTҮ!d=}W1\cD.ϕA@bB XYxQ'"(R%7oBim0L0FRX# /=tjֱo:Ұh7t*UU0XؾJG\۳-$غeRL<-sb^Ysc{Ce7$Raf +83a\~1]˦!K!ͤClMe?V[T@Z&r hQ?iF5&_T/['=ΐ#mL]&FS3%|YECwxu&{휨|3#~Z3h  ܲ l 3!.cZ-%)WcB@h<~Q;YT0 1v:lf+5B>ې" sv:lU72g|)isUWׯ {['o \[lUہ-?Ee@D_nCǩ>4Kq^{ q-|5F:C[JqFgft1_c۫ɑ:|ENc"nqr5㮕8/%{)әQWӪp6tɪ{2ȯ߁;{4KZuKo0T-Ꮧ]||^J oF%,\͝-Rw4][-^MߢcO* Nfu;<$6ygN+8UJ΍Ȭhjy!VMy;NA[Awȡc5ԥ= 3:̼JXN\6d1:Z825}F=<;! M.SY&I'œIU21VӸw7 ͘-4,Y96EAPj mB;=K; f':(:ADE~?r&0'rۿvblէUQ"r%rNs80/Uac^p:m7٠46͹a†mRRڒyӖ+l~O)%]J {ZRl7ά~yWMmYhMs[Hd~W2{1宩g]3 yo AGmͭ;Mz*0y b8'=kn";|Q]_'ICxLr{iᓱj2#Z)^ jRa` 󬲵X rKX^Mx6ޭrH= z\mvvde M@S˦`X=PdǗ ɩ#.6a#o=iF2 .7/+ ZT:V]yhP6{r H!y wQ!o|o|] Vq<+VvKRy6q"7αL!$#ʛa9ikZD9|Txh{^kHʝxsW}aI-^9o2Ha^)@ԚR!䓦)wO2vP j'ksy?Ã\/C5!ى1L(BΡJ8nlΘ$h*.&A]5xd4iٷPz27{S$/G{Q$Mxoz;#qrbr`i GrymC-!]:ڒ%Pvw|$eܥ 1 DyyCR\٨gcD[Njˬ ^jEpIN.I˕LuҔM@s57=^pjۀԈNB0[4OqN5 toܔ5v{!\s#J&-HŅA3`2G_.2AnPMKDvt ,pÛ %@nf{Ć6D/;2(ףϕ:f5R|[?/E#ΰZtD)@/Q NΉ Ed# h]{]5YKj5?nŕE r#EaH(֓ΆgS6 1n-D$)ʽFu9#Y.71*TxpԮ>+vY,>YC7Dǽg* ^RO(E{LdtD⸱RP ^ql UEqZ{ܢ{>DAւQHdZT`8gg%+![OQSz1)XW ѰpnӺ `!!7h]ޟlHG"}m~Tr'5VqfiNh[W:MDxA]*S&mF~=IwÙXӂWjߐe HD& eAU3Wot%qH*ώu}QU|o 쭘T|_i fD C:ǟܠd%^oЂƿiTCNi)o[ḥb<-o-o/%x-ùM$a@o[c:J'.!/i?ʗp moPqv^3HkBuЩ0iiq7Pkq S9TE2 >*| f-P A]UaJxQ2;yI"gikN+T2ZTMG,Ai/{ v|MpͶήYHfDJB'yeڳ _MP~?tLDçH .AjAq+͋!mFMX= 2^*|d;\NU[Yz |K݈FgKPa .̠k/=ϋP{479z@7LM=. (^Uxͱ8ݭqAJ;ZRQzGbHEfhW8 ?9֘Pk(>%鮏eP#v:hE_ _>2SI1{v$@#׏KdM(@ ~ٮa6XDy)Y'fM3%C )|~A}G&*0q}B$F'W[ݝ'yXaY42S`F|߰UHC'#2\:vR](oRw?!-.(5diϹҹDL ^ٌ1yVa"X<]وJsYQo =jZtg4i`3~wkBe†G*lm 4J<>1#?J}4[ ! [G=6z0:Sg{yn|z.3d%UlwE..e8*\^@ixn{ HD&4Aǽ?" ףf|*M Bdmuޖ6Ǡ[KH)]̍PM =,v.]IǃUSx@?K`MCQNO-%օMӶ a vHԕc*q 5 M?Y3Ůb!FdnP(7]SWM Wo J3(k O I U_N?,d-5,G&\t^ BB>-hsm/4-p[6K(FC.+}.9 /kg5 k\އ|ulŃe;MrX5f(:Y8mlJu5<1 O&Vd!j!,gИ,X^D/ a%lh)&gȹ4\YZ L8v^#˸P(dbzMȧ8%s>X\7GbKf- "\pD˥ V1Qkfs 6 , L- VMK}B*-uSΤ4Z˼YQY-_2JGud *㱌ڮX[ݹJΊ :\?i?,ɔJs9UԚUXh{EgPQcqе?E޶ gʝƗ\׳:l1nj?W59s8uq@M.?MsYrr{=TCyk`@Ϳ1lqGq9#ִdν>P(^*EwPQp r0ƂcmIH8}URV'uR :Sg^!W9«aFtkR7b)&S4ڠxp3S?RB?gr` 3Tf[y^ގ񘈳6._-kwCcM1.|0P;0[STh='̞bY<᧯;GcoDDBPX%̂]u{CZgo%=^MK{}M>-k*Œ7]A,T {gQ'd[&0L ܄SK~"fLڟ7'@+ѼT'iKvК֪RD|5dtUz/ @:AP nc:Ǭ.Ixa]-䌹%iXWrYSi|EDxՂC kЀ892$xBC( cުb| K(فBkS5iA@/1`ˬXxZ, ُ#:sQyoy6=CHz^{+:'yEq)dKm;1Vy'gF)4)aOqIQ闔:ȰE%[;0uĝX3JWGr.O{L~Ȣ#.0uןc+r5XG"n<yMSC~yEn1. Z[|4+M@ 3IX,u)I^^bq37W9H_ *XP%Nl'9~ X/a@=sE GL{ᒠ%/XPsvPWO]J0i&"x߄Kղz-<]DiК_qQy{9B*qx>7Ud&tuojnfgɈ6Pۧ=q31Ty :9x7=䰭˓!tfd\"O+Qf ͌ȯ6EY!h4{Ddi/|i2ŝFX@QmyB;AHg፲Oz0GT|r\"a*sX/ o~oV` z}$vMnF)K;d\Y|0bguC/I@'Tۏ9muA6-g4OeX5}ֺ.”ʾ5~r"ݹD)Yof]h(٢ K?INC|\;)cLEg/JM6!crnݣ'G9*%`’,z|o|>__|mrȿ(=ʰ[yE |wFg_vԬ ;ZlBb.HI[Xk:9EIJ%:'siDdzIDž&ZxwWaÃ̤ȅs@TYZ1] ;9Z'A4c#pE~<Ԭ{[5S\uzoΡ=اڢz,=mxB}kʚA̢bɉ& 85L)2k}W`}0>ziq~\b@5V)&o9HE_Tq?*(8Ks,rꜞW_S74=8IwXs꛳sO~ΧG}V:FXVk#vڡ .$:9 ]%h Jv/SlNnGj=HEge'QR춳auNn2{+|g؀k|0B #[U_ 2|*^_䛪87|hrP(S $r+|ō]DIA7{ԮD3QͦS]ƱDL_H#B^4)dBQWYP̡+ˉޗu{G?Oz,]T}۹2ENH}"gi5c$5dɢ/!B g¯Ӯ\qUyS6-O1}t[L)s QA^ l܎r?hr1 }c݆d7U y<b].N|E``H(fLY&S:ҳT4wWV >is ATω>V܋.m;^tR:FG@sBtoo mHFhB"wИfߘh4a.T IOue y%ӵmc승!Nu;d D飘T;1R&E(3zݘlz q=Z\v[ 6ɒ P)ji}j]̣ٻ:ђrؑP ͸U&h~9 C_q9/&e~`{eހ} 7e.fXM͞RV)Ȟx ;s`V'B&~βFo5qJ{! P.)@ÎTЕb^?O0|]32 \P",N ^<)6@]?$wyQ.KGJeUjbYO$%5t3жT#$U=F<γԸY声&?ޱjSvȪ`G&$UHX){v沸@Y]\" UM1űķcFidݘ$#VBo+XP`\B#h$ Iiiy"cUqIS3z()wgR ^-eoJβO~Q{ K%up#u}16$&R'#|쐆ʥ#بNg%j`֢(?tC_ԨZO1 4]s̠#ip;2V8{Rn"mhsnZgkk~d Yte90D`+!$c=Mϫ'a|$ÓպGD"P䋆Ш,͌@UD$rnP]މMa06Enl4,_=~T<1܇Y_hL.3Ӓ:V&t#HcgF_9@^8aF-@$L?^ΐb(n\iWdKg"˪qiRS\ea]RTӻXCbNZWV^xʁp!a TJ2ؗGYLkQa({6=e/qfxCtXˀ#>b E@zO֧XRԳFDQ5# zh^q3fkX˜WlÚF.FYE|.(|Tqk7?iMrBb)Rm9 !#,3tKSij&L?R~tEm@+RTӥk%ӭ)@){Y`y pmuu(b IɊId+&2v 2K2?r3nZg }ZjH!fQozkKJiɞX?lvMs\H ^./kp̷潓/fxWG3#*xt8Ps5ne?y|ۓVzv1H7!?S f3y>Dx4렛ktP66$?CwAfs##O7Ņmߍ12M2yb|$ 8׹"qXM MoAxzUS\\yH@_ N>nd\<N^W8=(_-][הzR&=.ʶ4kQ ;};I0ccos4HXna^&w+A̷L#OpV[5xXEUkkB?x d+Y > Tp./}4{$0iW7Qpk$԰:V(Iu+UbXe;SZ-,#n1dmb7^qXs|IJY5j^KzusUF+*yT@ ?a'[ou -X~ Sh;xw P`4`\ ``gqUP!jUUVg˜rZҟ掀̢;u *LL0͂ F_ezc.lzJke2W= D/q3߉w# !d =M'P1t]6%`ʁ?z]P*>N~6bb>7AEH+VnR-^q_Ņn&h(5#׷%9ށplQRh*=/@9vXgj_S=7̝MƕoS چmP(rypeĆ~ p1 ) X{*Zw\dڄZaѪ0{r15dNWb*iEm>I$)mT]`cjfdT1o8YA$o~8P֮LpE"_" PPpC@O+N1Ql!7.׌m]N?dsܻ+% d$:XρKj4ruܭKfcBV;kSaT]ĢC"z<Үߙ֪T7Hy%6J |uM+>}x$I !g[Y㥽9g_oZoAqO{`(p?Ⱥ )${z.ƓF#ClTW+ Q/_ o k}ѧI(&0浈 4*CUz0ۇbK_^{ xSG'w;BNUnd'wp&;HVjc~MZPv { ǚм#94yM"B{ ǡ/Lfthf zv\cj֑JLJj=<,?k=Dw(+078T`T^T0]x|Z. 19.8Lv_f\?uIh4- FPyGFPА0Vx!6 Wi=u<3? sUnJM\]iy* *c^O٘]ʜ=vx[^Ǩф3]4 XQrm,Y*PV_ XO!O-,b CHAcCQ3 t˦KZZ(pxT f&2lhD3#K τ= d eFqU{=^?T {O(庖 oYpị>i^Fd$fC,Hu}4{1S+T8O lM7AYmdz״@ ytaCة/+ > l HKy8 &Dz#N?8*fa(gaoP#b7"Uu"X6kc<&rk9m ,>Vt7>K Ek0áAiIHRiQx: C.T f3NlCCR.=O$Us\Øl4@J֋?,q|v&NeSv3۞grsZILız1Xcf d- 3anY>vd c$EW9~cpUq1@X~V-6喖PEVFyBEGcg!o~.͚HRM>O-BuFa,M\ =^ ~cnmRRR:o#MC=fSKV t 5r8Izͤ*<|ظ5J^g'h:Q.!T-ׂ1I ^؝.tR;Zo@{~(˕<ovE!&U'Օ0'Cr7瘻 VryPD0Lv#-7k\*TU.iZTN>5oK9Ao.ׂOJ_Vl/V|QI \b_{DrPǷ}x8#3Řb'4Ct+e5ӸB{cA+HEjX.X2ލfJ]ߩ 1m,ʓVڠGQKĥV Zs.fx$kA~c iSҪw4?c-& E6yJڦi496g+K&ƏL TZ3͎OZ4D~XXi{:(ϣ28_~њsBB,Doy+=C5kpi#UjtXHjwQQ~lͰ6wV~G9NH9;-nh%]k@ELnz9Q^w >)s]J1֥f2a]SFun|ڜϮ(T;i'VC/s&^>0k;pl.p:N֤b ׈zys@P -qB1󼌎pGLvTK8KIGf3'!o˧OI5,q}\VD?ifї:W4A$6jl5:ț]ߒ#vv9rSef<[t(\qGuS)4k{ahm@D!";#:x =|!9,ZK=IorA6CpR|HU{\vP&LH~Rr'֤zˡn)l:vt''ǀI_X]!\VCt: +.pc(=ϖx&6'=p_Xn0u PhPOG=l}lIҕO ' ZtJ\߫c V SۡrAk1[Ɖݷ6!$@!'J2͎i)Ee}bU\߫ YZ