sssd-ad-1.11.2-68.el7_0.6> H HtxHFT[ ?*}}5-X ~ƒ@uXcT%Y[6͵(?7ee05bda4b242a939de7be066b4c16b921876787RPﯙQE1VFT[ ?*}}9f9,oNvoycR,UD><װ?נd   8 *>\bl     6Tt$L$$LPU(d8l9 p:==GHIX$Y0\X]p^ӻb@de f lt(u@vXwxy(לCsssd-ad1.11.268.el7_0.6The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.T[V sl7-kojislave01.fnal.govUScientific LinuxScientific LinuxGPLv3+Scientific LinuxApplications/Systemhttp://fedorahosted.org/sssd/linuxx86_64K"3A큤T[UT[VRqT[UT[UT[Ua0987af9e528c06423996d38798880289d82963567cff99c6ccd64cb7c108d458ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903e5267f8711876bed5df9aa7d2899711f4da0c0dd1771cfe250267fa1bc67f047d6be67195d808ea3fae493a9fa318d0c4acb8c1f2672e4905e895749d11075f2cee810eb6c1ccea75df4cf1db6c8febe98bfd5db3ab259e4cfa0f6cd83ff2be5rootrootrootrootrootrootrootrootrootrootrootrootsssd-1.11.2-68.el7_0.6.src.rpmlibsss_ad.so()(64bit)sssd-adsssd-ad(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@   @ bind-utilslibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcom_err.so.2()(64bit)libdhash.so.1()(64bit)libdl.so.2()(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr.so.0()(64bit)libndr.so.0(NDR_0.0.1)(64bit)libsamba-util.so.0()(64bit)libsss_idmap.so.0()(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)sssd-commonsssd-common-pacsssd-krb5-commonrpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-11.11.2-68.el7_0.61.11.2-68.el7_0.61.11.2-68.el7_0.65.2-1sssd1.10.0-8.beta24.11.1T=@S|@S|@S|@Sr @Sr @Sr @Sr @S;S;S2@S2@S,)S!S L@SSS@S@S@S@S@S @S @S @S @S @S @S @S @SSSRb@Rb@Rb@R@R@R@R@RURURUR߲RRRx@Rx@Rx@RΏ@RΏ@RΏ@R=R=RkRRRR@R@R@R@R@Rv@Rv@Rv@Rv@Rv@Rv@Rv@Rv@Rv@RpREs@REs@R7Q@Q@Q@Q@Q@QQLQکQQQo@Q)@Q@QQ@Q@QbQyQV@Q'@QQQnQZ@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 1.11.2-68.6Jakub Hrozek - 1.11.2-68.5Jakub Hrozek - 1.11.2-68.4Jakub Hrozek - 1.11.2-68.3Jakub Hrozek - 1.11.2-68.2Jakub Hrozek - 1.11.2-68.1Jakub Hrozek - 1.11.2-67Jakub Hrozek - 1.11.2-66Jakub Hrozek - 1.11.2-65Jakub Hrozek - 1.11.2-64Sumit Bose - 1.11.2-63Sumit Bose - 1.11.2-62Jakub Hrozek - 1.11.2-61Jakub Hrozek - 1.11.2-60Jakub Hrozek - 1.11.2-59Jakub Hrozek - 1.11.2-58Jakub Hrozek - 1.11.2-57Jakub Hrozek - 1.11.2-56Jakub Hrozek - 1.11.2-55Jakub Hrozek - 1.11.2-54Jakub Hrozek - 1.11.2-53Jakub Hrozek - 1.11.2-52Jakub Hrozek - 1.11.2-51Jakub Hrozek - 1.11.2-50Jakub Hrozek - 1.11.2-49Jakub Hrozek - 1.11.2-48Jakub Hrozek - 1.11.2-47Jakub Hrozek - 1.11.2-46Jakub Hrozek - 1.11.2-45Jakub Hrozek - 1.11.2-44Jakub Hrozek - 1.11.2-43Jakub Hrozek - 1.11.2-42Jakub Hrozek - 1.11.2-41Jakub Hrozek - 1.11.2-40Jakub Hrozek - 1.11.2-39Jakub Hrozek - 1.11.2-38Jakub Hrozek - 1.11.2-37Jakub Hrozek - 1.11.2-36Jakub Hrozek - 1.11.2-35Jakub Hrozek - 1.11.2-34Daniel Mach - 1.11.2-33Jakub Hrozek - 1.11.2-32Jakub Hrozek - 1.11.2-31Jakub Hrozek - 1.11.2-30Jakub Hrozek - 1.11.2-29Jakub Hrozek - 1.11.2-28Jakub Hrozek - 1.11.2-27Jakub Hrozek - 1.11.2-26Jakub Hrozek - 1.11.2-25Jakub Hrozek - 1.11.2-24Jakub Hrozek - 1.11.2-23Jakub Hrozek - 1.11.2-22Jakub Hrozek - 1.11.2-21Jakub Hrozek - 1.11.2-20Daniel Mach - 1.11.2-19Jakub Hrozek - 1.11.2-18Jakub Hrozek - 1.11.2-17Jakub Hrozek - 1.11.2-16Jakub Hrozek - 1.11.2-15Jakub Hrozek - 1.11.2-14Jakub Hrozek - 1.11.2-13Jakub Hrozek - 1.11.2-12Jakub Hrozek - 1.11.2-11Jakub Hrozek - 1.11.2-10Jakub Hrozek - 1.11.2-9Jakub Hrozek - 1.11.2-8Jakub Hrozek - 1.11.2-7Jakub Hrozek - 1.11.2-6Jakub Hrozek - 1.11.2-5Jakub Hrozek - 1.11.2-4Jakub Hrozek - 1.11.2-3Jakub Hrozek - 1.11.2-2Jakub Hrozek - 1.11.2-1Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-5Jakub Hrozek - 1.10.1-4Jakub Hrozek - 1.10.1-3Jakub Hrozek - 1.10.1-2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-18Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#1152200 - Error processing universal groups with cross-domain membership in SSSD server mode- Rebuild for a proper dist tag, yet again, now using the correct build options - Related: rhbz#1098608 - Expanding home directory fails when the request comes from the PAC responder- Rebuild for a proper dist tag - Related: rhbz#1098608 - Expanding home directory fails when the request comes from the PAC responder- Squash in upstream review comments about the PAC patch - Related: rhbz#1098608 - Expanding home directory fails when the request comes from the PAC responder- Backport a patch to allow krb5-utils-test to run as root - Related: rhbz#1098608 - Expanding home directory fails when the request comes from the PAC responder- Resolves: rhbz#1098608 - Expanding home directory fails when the request comes from the PAC responder- Fix a DEBUG message, backport two related fixes - Related: rhbz#1097323 - segfault in sssd_be when second domain tree users are queried while joined to child domain- Resolves: rhbz#1097323 - segfault in sssd_be when second domain tree users are queried while joined to child domain- Resolves: rhbz#1082191 - RHEL7 IPA selinuxusermap hbac rule not always matching- Resolves: rhbz#1077328 - other subdomains are unavailable when joined to a subdomain in the ad forest- Resolves: rhbz#1078877 - Valgrind: Invalid read of int while processing netgroup- Resolves: rhbz#1075092 - Password change w/ OTP generates error on success- Resolves: rhbz#1078840 - Error during password change- Resolves: rhbz#1075663 - SSSD should create the SELinux mapping file with format expected by pam_selinux- Related: rhbz#1075621 - Add another Kerberos error code to trigger IPA password migration- Related: rhbz#1073635 - IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in- Related: rhbz#1066096 - not retrieving homedirs of AD users with posix attributes- Related: rhbz#1072995 - AD group inconsistency when using AD provider in sssd-1.11-40- Resolves: rhbz#1073631 - sssd fails to handle expired passwords when OTP is used- Resolves: rhbz#1072067 - SSSD Does not cache SELinux map from FreeIPA correctly- Resolves: rhbz#1071903 - ipa-server-mode: Use lower-case user name component in home dir path- Resolves: rhbz#1068725 - Evaluate usage of sudo LDAP provider together with the AD provider- Fix idmap documentation - Bump idmap version info - Related: rhbz#1067361 - Check IPA idranges before saving them to the cache- Pull some follow up man page fixes from upstream - Related: rhbz#1060389 - Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes - Related: rhbz#1064908 - MAN: Remove misleading memberof example from ldap_access_filter example- Resolves: rhbz#1060389 - Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes- Resolves: rhbz#1064908 - MAN: Remove misleading memberof example from ldap_access_filter example- Resolves: rhbz#1068723 - Setting int option to 0 yields the default value- Resolves: rhbz#1067361 - Check IPA idranges before saving them to the cache- Resolves: rhbz#1067476 - SSSD pam module accepts usernames with leading spaces- Resolves: rhbz#1033069 - Configuring two different provider types might start two parallel enumeration tasks- Resolves: rhbz#1068640 - 'IPA: Don't call tevent_req_post outside _send' should be added to RHEL7- Resolves: rhbz#1063977 - SSSD needs to enable FAST by default- Resolves: rhbz#1064582 - sss_cache does not reset the SYSDB_INITGR_EXPIRE attribute when expiring users- Resolves: rhbz#1033081 - Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not- Resolves: rhbz#872177 - [RFE] subdomain homedir template should be configurable/use flatname by default- Resolves: rhbz#1059753 - Warn with a user-friendly error message when permissions on sssd.conf are incorrect- Resolves: rhbz#1037653 - Enabling ldap_id_mapping doesn't exclude uidNumber in filter- Resolves: rhbz#1059253 - Man page states default_shell option supersedes other shell options but in fact override_shell does. - Use the right domain for AD site resolution - Related: rhbz#743503 - [RFE] sssd should support DNS sites- Resolves: rhbz#1028039 - AD Enumeration reads data from LDAP while regular lookups connect to GC- Resolves: rhbz#877438 - sudoNotBefore/sudoNotAfter not supported by sssd sudoers plugin- Mass rebuild 2014-01-24- Resolves: rhbz#1054639 - sssd_be aborts a request if it doesn't match any configured idmap domain- Resolves: rhbz#1054899 - explicitly suggest krb5_auth_timeout in a loud DEBUG message in case Kerberos authentication times out- Resolves: rhbz#1037653 - Enabling ldap_id_mapping doesn't exclude uidNumber in filter- Resolves: rhbz#1051360 - [FJ7.0 Bug]: [REG] sssd_be crashes when ldap_search_base cannot be parsed. - Fix a typo in the man page - Related: rhbz#1034920 - RHEL7 sssd not setting IPA AD trusted user homedir- Resolves: rhbz#1054639 - sssd_be aborts a request if it doesn't match any configured idmap domain - Fix return value when searching for AD domain flat names - Resolves: rhbz#1048102 - Access denied for users from gc domain when using format DOMAIN\user- Resolves: rhbz#1034920 - RHEL7 sssd not setting IPA AD trusted user homedir- Resolves: rhbz#1048102 - Access denied for users from gc domain when using format DOMAIN\user- Resolves: rhbz#1053106 - sssd ad trusted sub domain do not inherit fallbacks and overrides settings- Resolves: rhbz#1051016 - FAST does not work in SSSD 1.11.2 in Fedora 20- Resolves: rhbz#1033133 - "System Error" when invalid ad_access_filter is used- Resolves: rhbz#1032983 - sssd_be crashes when ad_access_filter uses FOREST keyword. - Fix two memory leaks in the PAC responder (Related: rhbz#991065)- Resolves: rhbz#1048184 - Group lookup does not return member with multiple names after user lookup- Resolves: rhbz#1049533 - Group membership lookup issue- Mass rebuild 2013-12-27- Resolves: rhbz#894068 - sss_cache doesn't support subdomains- Re-initialize subdomains after provider startup - Related: rhbz#1038637 - If SSSD starts offline, subdomains list is never read- The AD provider is able to resolve group memberships for groups with Global and Universal scope - Related: rhbz#1033096 - tokenGroups do not work reliable with Global Catalog- Resolves: rhbz#1033096 - tokenGroups do not work reliable with Global Catalog - Resolves: rhbz#1030483 - Individual group search returned multiple results in GC lookups- Resolves: rhbz#1040969 - sssd_nss grows memory footprint when netgroups are requested- Resolves: rhbz#1023409 - Valgrind sssd "Syscall param socketcall.sendto(msg) points to uninitialised byte(s)"- Resolves: rhbz#1037936 - sssd_be crashes occasionally- Resolves: rhbz#1038637 - If SSSD starts offline, subdomains list is never read- Resolves: rhbz#1029631 - sssd_be crashes on manually adding a cleartext password to ldap_default_authtok- Resolves: rhbz#1036758 - SSSD: Allow for custom attributes in RDN when using id_provider = proxy- Resolves: rhbz#1034050 - Errors in domain log when saving user to sysdb- Resolves: rhbz#1036157 - sssd can't retrieve auto.master when using the "default_domain_suffix" option in- Resolves: rhbz#1028057 - Improve detection of the right domain when processing group with members from several domains- Resolves: rhbz#1033084 - sssd_be segfaults if empty grop is resolved using ad_matching_rule- Resolves: rhbz#1031562 - Incorrect mention of access_filter in sssd-ad manpage- Resolves: rhbz#991549 - sssd fails to retrieve netgroups with multiple CN attributes- Skip netgroups that don't provide well-formed triplets - Related: rhbz#991549 - sssd fails to retrieve netgroups with multiple CN attributes- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2 - Resolves: rhbz#991065- Resolves: rhbz#1019882 - RHEL7 ipa ad trusted user lookups failed with sssd_be crash - Resolves: rhbz#1002597 - ad: unable to resolve membership when user is from different domain than group- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1 - Resolves: rhbz#991065 - Rebase SSSD to 1.11.0- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0 - Resolves: rhbz#991065- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2 - Related: rhbz#991065- Resolves: #906427 - Do not use lib64 in specfile for the nss and pam libraries- Resolves: #983587 - sss_debuglevel did not increase verbosity in sssd_pac.log- Resolves: #983580 - Netgroups should ignore the 'use_fully_qualified_names' setting- Apply several important fixes from upstream 1.10 branch - Related: #966757 - SSSD failover doesn't work if the first DNS server in resolv.conf is unavailable- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- Remove libcmocka dependency- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Enable hardened build for RHEL7- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)fruk1.11.2-68.el7_0.61.11.2-68.el7_0.6libsss_ad.sosssd-ad-1.11.2COPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib64/sssd//usr/share/doc//usr/share/doc/sssd-ad-1.11.2//usr/share/man/fr/man5//usr/share/man/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnuELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0x5899b38326e50ed65e0414bf51e29de422843955, strippeddirectoryPascal source, ASCII texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, from Unix, max compression)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, from Unix, max compression)PRRRRR RRRRRRRRR R R RRRRRRRRRR RR?@7zXZ !#,~] b2u y-iSqJ&|7 CR$W^>n+09f+.}n0H9h` e/OBÚzcC Q.JO'~'S1qPe LjBdZ[\~˸43up<-B8i,TY]BrQSvxQJ=FI.%^z6+DGަMӚeYIܨPl0L8숅0mMU2Ny$ iƱ3<2ؓܒ1s:W;|j|4ͻHO_Q(TUx^9Hh$S$:?%? :shAk-^oAtLbe[1a4ti_;RP– O/~-Ɖ/S |G^:z@85W!VB*>Z0W`wt+WEq 6d'w]衼eZcUh2aG[P _)b9ZiBH:2ů7fi DFMbb@i 0{7a*&=#Q=̎=h.8LD<=0lG4BAҫ|=vwn^b>mk Yo IT}MV釸+iV`, o;צ ۺX>=)7OD;_E}l\B=*&岚\֎']k#oeeӽ@gҺ2'bNU]şj&xsR XMmuL\+A@GWwGŒi{%uF^ |'0,O+ñ'&R6(sm(1'?RŬ < 5䀨gQ0[CtKxòόnR=F;EEDوRp|xX9 LX A7VRͲ7ױJrݾw㻗Eάzf&]i)ldh-b3}U~M|iOsΔVn *JKw"T|:3!lF2}ςAY\d2v/'/R'\^ *R^_/Nɺu˲E+q=4 K^ >[uz ̓C"X":{N3Rx= uԣ#*9YQ1rMepƉ՚̗v2ǿVRs/ }"0D\oX"j# -[Sānd$&"YKdqQxS6|WWmQcpl=T uQw,ik[d0ewynPPvV@cWY-cGbv?c6 sx=>R[*3I]~-B넫o8l[_7068l< ֎\\y߽Mߐ\[pz}DQZyA~d8Q,٭~COHHD'{k;$Xd3O 0˞2Y\v=.mbϪ5'1SuW)$d,(j RQSPj8 T-|. aW&$~YO,hj4L1jL[-+N:5T=O &6gty6ŗJʐ?2! {<Ҟ3 Jjx+,Ǹ81?8Yߩ"k_\p>oAN1?WKpˬ&8n`L"l`s JT@.F>ׅX8ߖZtռcԶ^O\yYhT&S}0MB,숰Oؙs:?!{\hYpnQpz3ֈJXMK OD~/N@>)uZ5mSt.hcx;iv^{u02Ovi\W,94H__@ÚpIa()|"(:"ZF5"ˌi rX 8IG F<"$U~U-SE3R9OK<&r(/2G{^tl cnM#IT `%GE*GsJ1^!2XG嵰}X1|7^Ub)=@Eh%~bڽ Gv⏶ij-5Y!e]D ኮhH`-d07!p:gvaTG@9*9q/M(SIvޞ¶U/RpfO,^%vq$I!⌴hXiϴgپb(Xm`63#S5' 򙌳J^}xn˖W0)r$" .cmj8k%&]9nmj{ 1ȝ5QߚET;23Z(2 I^WJ핌-pw6s0V%8 \1vԔP!\Oȳ7fS K^J%CX-xmC(4*J){>:xwq z+/GaفiᖰZkj˱`:!e]Fts7w ӮYhiX6ߩ<ϐ?oMfdg']iKm׬&>w03qcm[,c=|<!WiM`)'U~m]hw)?O9HYAeLӿ#K~h Rkyc3ZhfCvAG1 /N2XcY/MB"1 yU>R {FU?8 zyXđd!)Jjt=1#*~2x͒^a !df[(S<ڃrO?7 wl{좻l1!G~E`V -mrgLlӂ?{Mkyp)#n(@ Kv3N-ZbXk P 6L0b]"٘ܥ§.7ڜ@k|7ؔ= NB٧£B\\K>* ,eIBYhޖ,>QaX͂vf}d Kva9߭ Ԉ1qZ`1W. bYbfhx>!P2hG@!% mσ}>Vݒ)j4|3x V 0wml|XESK8gsB՝T\KN' })AZ(~LC)($ɒ+]s')TCT9]5_" FFg纾pL~E{Ӹtq/(BxW]zflJ>8=IНBW>N4#)X ԂS?>vuP{b)q5h`+s/`ey3M=J s:aSsNdHx{})K$QYH± [?!U؀FeȚs)l~:/(d2tm"w郓@(23+7a@w޴ҊұcI}ÙLZ򠲕fԡP$(D:n\ N=I8%_<7a{x+k-buR0`Ti CԦO= \܎c RUu䊳]XVv2/:HP %Tt| tX#QCi&Y}KhDž98:6P/SNfQ"KX$~.FoF p 0?l%`{04ە/ 3TccKxTTKfO|dy1lEU[% a{}j/|߁^x9|slw8<ޱKC%-.CeuEW 3\דU۟eiL!{c;*E5zYQtmԄZJ%/+GaW1[Q&)k=p$yoA5>dr.̽5. =z\i3u}V,A#qLL0:O- &G Q52^ EDCs% eQRUē)EGO@VԖ>3bffΰFd7xr# >VG @+4ZߋKĶFא)D=^/:S&k,E/OކT6dTmla #эْY.?F6A͑%=daN}%ຢV16|2jw\Җs_$g ~*!pJD!}l:q ۤVfϕG9߰HL7sއ=2$R#EaMCrh!^cd7QT[d[S'32ǸN24@ ZBdqɀ:39n{2[]ݼД |:5HӋ GJ\)$R䇷N:&IK[bҋu35y;R y.߄Dw=?Pdir&O0TK CU&ZE8xe;7fbtXA=ngqKAT/SC[{N̬QcSpI߷Mj Q֥Q$Q>`_{hrWm(i OЋ93:+2|Dxn!_qg 2abǀ>)Uw(lެg8@ߔңFDX.1zz:D ӭ޷( [KMhFN"eE^A?ֳU{[;&?!S&|k r?22`NL.j3ۃ?̲PUZ0M4RP^tGFl)l);W]m函ЖAy,؊$~k`GP50]wFy @٪<]Xtk`e'O>po/RVTwPH}#m7@( rAwnyZ|6QBA9fDyȻm=Gj&kWGwk ٬̱6RL_,C®]R7PT^?ۦG1Q3vۣrB*  =ǜe8Vti\a}:" OhyS<}>yFuI`08n(ߊ EBxY_[gʚNF!#y*[!u{Ý[cFlripImsƟ1+c$'|ȸG=nNT !ҁ}nCJ>F/:v[I'jiJD/?.6>bњ'|y/"_EsrL{. 9&MYw$yħQJߊ^K ^' np1C2QŶ'(&O~.u;t/i=aЂE 8)SXN @ NNPO;&#h$_械o 5{lۗwb^5*yıG?0숙>#KU_xgq(/UA #EMaSkst`SdI ?aZS}Z.UB$t$YƟI_Nޜ(iU3 "V3Y)&{ڰ5bSlZw,uB|R?/]hBM ʐD$\,g-\ⓢîԧzKJՇ*rP|toܖ;bϙU=4-.(8E`}|wr(Qzij*%y,-*I',z O5J,4lmɜat7?m+)DMsC^MüpK=WOu%!asWBefc/ęKx1] O{0 rZaWp %ڣayRHW.% {a*(*F2ldo9@=ėhb5LjڗX:1KVܵ>~%Rm>3x ׻S 6yIT ^ ]x^6К>y@/;:j ĊYѵbWkᯇE6 aAADZBX羴&^bSCx-.t6;訮σEfgv6 +{fAEf}(,H 0^#v'ބQg%=v$u͓m ,/J#QE>%Ҡ$̰j^{Ry> `; O&HHAX0t6PXmYCguAv -&|}tS|*w9R 㥯3->8W[q =!O~]waaZH`\M|_™oW K|V`lA:A;C+q^#u7L$p+!ԋ7y LEk-HJ]}ơD Ӗ ^ Jfa PK!֭f7RT[A]]JT;ޭفl$%jf2 p5˓"|9ɧ%^\!"uܾ_%bm % p଱狱 YK֭,n RqFrѼDn@ܾ#wPg,w\hcMX./Zҕk= 'j|5ZL@n79;p~{d)Qi4-^^^r7&gqwNKoaژ&+! Kp\~Bpx*%y0DiѳŨmaFK ˾SJ,OiΫa=_S9|C {Vk^-^XyZ~.sNV-wr~z)I-H'A(G*W&&>l7 x)Z8',j ^ϋvvb*  Rx|GUU}.H4'H璡*ETNx,s߼VrϜj%WTŮF]E %ni'ەc:IKBv}K;/=%# X!/1JR%aާ\^G:h"Ȋ7Z 䙯8ÒܕBR( =(QI2хs<:4f1=Mn89cĆsu]]`xBt0_y,j揳-*/QN??Ũ'=;>3- K3Iɂ?˿n 5}Kfflk521EðH[e8)оMWΏME>{ ~zX؈g#Y4ٲgzIUey.? +tkrX8Yir֏Q)@I%EpߙkEFK?Ҥzxd.$m{qh*Z@I1ie_wd$pH㉸$o維IMoHn?g;X b; ׺V#7xmj𩓸s_I 0yAlE a/&}niDeWk $l jw =ʁrtLpGX7a5̺nLȼG*J<-",acMR߁Ye9'?XJ ٴ<}WX9Wi3ڗ0|܊tـl>՘@CF4aI}qW~HZú:Lt}"a) *BctDPXdEٟKBu$1_5 :gқ68byj_5]v"ݙM%8^S)NQ# !ߘ  ܜ)ɤ0IE}$!-ɾ|Ğ-lZkp9dMMKZysӨ%.UgozH KfbD` N${NϷf}VՑHNMFrkzQ$[:T/}EKj8}FmT%$tqh ⤶MVN"^'Gdg U^h:`'_oMdVO/j)Ư21o!>`eQPiљn+M~gPMV䦋 ›1#Q(TXGIj37 حZpnѵI{#Ab/RPA4:dcH+y6{걊$ ornj9 bX&-&͸muC.eE_fT{"n-cJ$pY ^O րa=‰>&c\F-qÜJ@؂{|Ax?S^oV EO7&mNb/_湨KTG,b ㉼gx;J_d\t sneifTbt"VnIgW"Oamk-:<_))z2ŏֿgܯP<yw { |*N䕺{)R*F$Y|XksșMx_o>a K~:H(nB&Cߋ|; 9E]{; 䑸Ȕ#~5 O:3!})U+`i*U8G$xHt#L:(w&4՚z *آschWsٙA2GZ 뵣9E}%0e&EPjjK,ʫ Q?~n B0 g 殻?"쏽{rO0'X5.=~V?*9H{ e QQM{&lr)Akɽ /jM3W虮 mN/O Ի3(=*d!1pe&6.ڸlٯ,4nR0kuBNvpںX3=(iNQw8<P6>MK|~2~|)lP/WzߑyX+ (=wu!]ȃDQ_\WcvYw&QCdxc4Cɗe+8Hk6Lǥ{r~͆~2d@wdsA37^bA,bswESYm* OF[`xW2r9P"цbnpqY $`{$2#S|GB놳­dA6QFQɆFVW)ߠojB,/1[D ROal@"G׫ y8#QG $TJ҄E% h H;6FRn촧g}/6x :ejrv&H+Ҳ^uUU$&8*_q@to\4Խ@1LrTD?Z׆?1DK~_>*W&\B/O(-;/Ó )ܖLC)Lk 55^kk㣵\$]º HW *بjÉK`g-1Cv3@0Z~y 4DSԆ`?Y7bCGM:o)TPLoRQ lMg (cc@"8D;1`~}s&~/# {&٢.^ǞL= ! 1u>p ͚f$ FI"Y6^##CM&mgL-ڠ*1p5[q]v!# pELh$sߝg@ 3pjG/*v iã#1з᭠OO4jJ`}@dmu9@97%[aR7CiM|~)Y~lku;E{R]#,d #?ܓ\-G*Cı%Tondcw0TU&oЛDfqWbD [l0^ACrTHpK]*'iykntid1y[ @N.F ĚR22]$[iVNqL~% ߋ<-8we+% vtb1je]Gb#b؎mT?*ža^}۩orӅpKNoG@h8>쒟  f},[A"˵l}+Qq<ag4!W'+'N? D[CiL%Ox>~mH&ƾ;<>|Rժ%cSU7W[۹.ώA.Œ&5`15:^ "7lZB1hJWm>8\[]7fx1nxm_6y'8Q)X ҡqcT1lS9D-u8r  kA)\ٖ"b. ehHY)?lAUh|*FrZ#ϦHt/`j=w!L;~<[NZҿ@soo8X᠎Fx[zЫSAGC1Py>u9dbG~Sv ThgX:g9jșt H IߢHH3k1=͖(':`#UWLLCy[8 >|> r8JL;٘ii#  Z't$>Yݬ>6[{yk{O[|#pi=/-9beQ42!揖DY ~sw|Q3ILmSu`kق>_Ue(O (UD WuK'M,?^~bݴ L h) +kD\(&Hmu;*WU?(7L.O@t.l:^vo4X?gih㵹\XN'hFM$w[ٞ!"0hF+dQrζ Lʷ8s20ص9 4?&vm'ڗQ[ v;x"6p%e_yNÉ܁]$׬*n?ngtMY^T]>`" ӆV=],Tq 75IQܰg5˓qB/>dȷ$p)eɽVO۷}먎|kb'o-092B }ujo me$u!iZ֯r^eݡ@k aRҁI/db* Yj՜ܬx CP3-8UJZ2rS<_w,1$ FnZg="a,fϠM𓒮٫=z9.hj* 0=lJ^^ A2 !*&H/{CEڰj||=xIGU9^wz3cl |`1 (IrPr, tÃM-c S=+'N6 DӔg WJ!ryV^z2hZq`?$.bjo+LJ9A!qq| A.:|3gPnZ 5zh*Ei8ߐ;É0ܻKkht&K4͉+zqGHQY w KËE7dȂ.M hy`қjhJK{ǒ%eq& ju٭t0(Lp]!_.J*Q# y!B1Ӧ[xtȭRngmY֘Vz4sj25-u‡bSS_1KRR8sȓ4fo!KьȤI1Rz:f X?YěskQCN[Ǯ8nz_BkBsC>U8T `p@,Y*0 =NZMA i }㋘.XPUƔ..Ihg`HyMVI}F {e<(."-Ich#2/LBce;ڂ%*%<޲SuBPΓr,ۻ8RoxN RN tga|#Ȣ%WKFX: TVw2~ԲvA{Zd"s Y'G1(7Lۮl:ac6+hc kZJpd# nd7+Ky F s)Y+J~9Nt"54rS>y8'H&VW+!spƨWNM|IA:Fɍ*/`L tyEᥰ$[F4$`+3 ѰD7w9,eJE}#՝ >39z:h-dž+527m z*~4?kOP",ۆZXz0). SEO^DN^ [)PЇI"Pۭ`1vƒI*OB-f8(+D}!= KfŹ}ZwbkxeɉJ.Q X#&Ȳ$EQ OPxՊ"/0o<Q4hZha.0L!NDzW=!%EwڧOl3Rf[?Q"j4(<i0yNa⎈(I|ӤK4B?ejIC1ӹg\^ujX㌉W wοUploʡwO]? TpC #ڟۦ>$E tS7~3rnI .F'Q.?>Xt넛rAj;\˖vL`#/I-k{9bIH2u (eJ{!U)ڥL VU!t\]M&o DRwP  .VS`FQg P H@^'!p]o RIT)&#=_O[?-~!ď sop?!nRl@oaZ-F=%2ƕDB9w3pV 1i;_gXy}ґT/6hige|^r$] p׌Er2K$3ŢI/ pGf2W~>A(sA WHYƖ]bG]x.& qDKqd)yq%4/3 ؘD)vCW;K+' /rVI)4'{2_OL$@<{Q#J&^F78cY3Ge>+]+h=1FnEB]䶱goJO+9zS26%޽DjODz3IY$~A.oT8O$Aw./tFS^%h QinX\53@E ԣu09cCam83g@%n܀!raZ" %F igvwP'pE(\%aYb(Rg Ydb89q6UnQ"W)N.5;0Q!d[>hpv=7OctԱc ]}W O^+Z)p4HU׺ iQi@4\|G||(T ^}ZoO}Oo-i ~Ǘj$<ԯZ],q [jϿ[lL/C tE +8.6TMDT.SuY]'7J ?6 E el (96J:&;#c"wHJD*z/& fz8/lVV+3'= JlZ" Ҩ#+,ojv{PwtSqSw <7f(q'y0嵋(>/JAćV{RfɐKD gr3I'̙e/ ꞅꤰN:6.重oP''hcädOA4_Jg"[ao4+6 Z& ډ4p $.:l mK|LPu;}^cF![]95tb._jzpƐ2b#]iֵs3'W _g9w i{5͊]d:1Q2l^2 J^@W$ D9oJ 0) C137F\o17dd Pl@<)DS=mڰMwl>;]zw>bt5,OƮ<᣸Y`@$LtTd_׳jI\?N$k^؍&.HY] )[9@t+6#9GFNcr+A>rAW|Ȳ{wXaltsZ=[|*`R锉N ;1iz=x6Z)8W0Cӹ_\:jJj݉N!t ۡό61aU7ҝ0kۼD6eSeœo?wSDx2v/DBn<1{@Q\Fs5 ٤'x^K׈my! >S:W@<1Eq[ #ܟcWl>ZfEʮe$PD$,9o%"XxKVM_bF,7|\Z?"Q؛;^rv۩|ae؀~u ,oI:+e-&/mo>C@rhY8yI@|y_ĎǑ*wP{Nſ@>uC3Qu$5ʈ [mwzXC<(.5]1u4M!_^ ɟ@D{{F;h9:#N璞Zlfއf=\uMD jT a>Ծ>ʒ`]f8%;etvzwa/[FJN2K˷?T~ RAj׮ X,`l(:ZpKxfŻv(KwGhƵmHecK´ܺQ1>['pntw&D&uZ53w;q2Za43IS8ƒ];cAբ}nSZ&۹X*&O%KF?&aaYF}(W47/U _9%MHG޻e@sibcQP' dɄ^鲄P|P7mD<@f+ΪܫCM0< O'ty]paJ SqRㄏe|i@^De#  Kh&5Q|" ]6G# ]0LFKklb2Yec=K )4q a~#kҺZwl7 U - W_4CH^Ra]pF0q</2L<]bvx6y%Ş/,Sd"r$K'FH`n>*#Jg'\Rݙ=E̼>eyVhO 9X/7P8 \5 P4Cg~_"?AEwr郤V7?j~Ҷxe{O}H?^%<#lTcDcu3,+)qˇ!-S b. !s7 -|Ľ#έąV+}P&]O֚H:Ȑl}T%BHtYhv\NAЋZsd#$ /6N?ie]p_a AKL\:{mD㍚E,ф}C SW3\7 gSf7S|_1s1q P&x`jpQGm_Fv:_>P&Q\knvHʙ65ކs A>.WpVfPWuy ]|c~̡RR<.Z"2 i i&IpX[ͭ~z`ᠤ+\24^̼`PDQsc5[ =ܑ 9x-1Y2k~xJ*k|Y ,nO]>D x]MQ rANrPӾ@"xF`-X8pd 3v~C,~Z!'tNr!.>qՍ4xNx 9@!A {uY9^&ݨ9t.'e[gbB3yLJڐϻ^\Dް\/@* 1K^_z LS-٥+GL'Z%N$:>\I~^V 1~#u o̾Qרp5%Ѹ@,ϲ;mmqdgSn_*%`q+BERM 03:Sx5)JYEz<!W^1Im[퇕Y\: % ҁ.w_12z!|dAACJ8"Fs<=!FeӚÀDvpBcd|wp`p|l r>lrnaիlpZl718: }bQlڜ'N_2슎jKwQnVzk_{\g&Nz1q+m BRjӮE ]0`#Z~4)+U9N9*dBF>/`?̴/­߿>}Ji01,a??acsQxpg'h.tiߵfS"'^:W2l@rS}e ᄆ7}Cq`]yǪx̩(d% onkN -HaJ!-0h9!. -yaxQyrO1 4Xr?mS!冤k-Gfmź б"ҳݛ2N ޗ 66Իv8,IYMImvmQ5oI C[L&~AЎxP= 6l,MX1 ܔu g?y6wocJ"ד Z|{3 򩨐 2 8oL8~qq~ly…>vmkv&廠"V{tʾ E Eաd'Y&=fiS(B._ȫX7:!MNtwg1 ]l~}-f c'-͜fY/Kײ>@|FgYƤY`o8/ =Wĸ37|D^bv5#KN!#LAJWP,Rj.nȒOGSjdя4N'̀ŨgdVEW@呰%F_c `xE5<3JqSAQd]K>m م_줤nodOz\Qi*>WF@` K:AḟEֵLD/q7ŗ XmpCv j&栍͘khEM5 #J3XEit?U.3CllprTfeCA0^Tٵ.LJ-kX ">^I> b*-^"]K#4s,0ВO~ŀ @q.T2}9bO~Q/S +Ds&&Fndʞxg1%{u9U (XU0)+pPW*;V ~)Ta vZ2ra ć7 >,%axyY]9 Zn= ,?:}ky86d 6spà#k]CiN{ҋvxܟ7L(VB6.ӠvE^0g6v͡v9%% \R.vo81zd+:sIŎn=ٮ두*ؽ #ˡ~D ,'9)s:y=$W_|8!h%g/Y\jut^D(B); 8ZP=LR?CjFG PhNZpC f޸aKwa^Fzz\#ΰ_A3\}ZI Ue]-Nb; ̼+^+TiomuCá昊9m <c*׌`oG DG9:lu`Q9ș^}?u{SJ{R`KhLm c,3P˄x`yqGl+sen d %gV`»M:q#}62 "*9\bkM}YHL\ `Cd UdovAf'ʏBH[H`; jOv]y0%)z1j؃lAOvi|iK?Xnpn] <KB9pʊV `qf{NMy@\ :zo8#Y9B@Zq.fJ&K<pEx9$BKB,hU /꬗،J\giT^C8TnqӋm\^/UvaKw;ӢI6`3ЩoΉ畴rwE&$_?e4{p E1Av MhqP<)MVU{wWGa%|WW˕T1u,af)Q#AGBQ)a7a>d2f_Oۜ rZAZJZ/T142'ݴyVy)#27N\'Cɦ.= ,Ɯy+jlf1v~dPU$.7myY BmzeŔ5G~ a傣j pRu/EAH: 0}:'(,PA؁j:. P@oq)KY X{Ȼݞ(dFXﲌŠh}>jA9IKQU~̢46D8:1_hoO7("P㥋]H pQJEݪ;&ΰv,>- allU3`?ϯť[BZYA]۩C8ʯU%7#ښH]S 1{d?e%ER!FcU4jL;#"Òܠ#oX =zr2ԥSyC,$#+7sm0.k݇ Rx|xj{-_lP΢K |CCLI.Ul UDhHJuƮE~śGs6qu|Kv.Wa\!d*kx 5R/F@C88aMDX!b澃sUWzVv8 wlkٵ%1trAj.m;Ֆ2+aKsa2Dsd?iB2Q-DhhdYWҁ.KsXқM 1ιV.6[ɂ˧h9f'V$# FZ 6m'Uu}Z:{iF&ox GT?Bf9IAvp`Z?ua230ese B+IedKKtASO)v0-arH'z.хʤ"fV|֞-b!M}_dMM,r|DJfXee7u 8ƔoXeA?,M }f85iww0˘#z=|q0F|(?H'Jc@޳J%|m'aܻ:[ $pF}Si.3ްx@vWcI>֩CH.ޞQN IYQLl$^ uaQ'X 2gd˸Eng ,h=xMK̹6|7UP) mxE&?-k o I*4Û!%)1+&љ]S}pE'Ⲉk MFغ*Pp!~ 8?@5.DnWpL1g D( {\Î_A~/][; S_oȽSM͝]f k9gW\B?]D:;mat1椓2qSWcK(>E&k4M:>Ak T y< OH)3$\ ;]UOrU"ėQ&ߡR *EIG"ssPW_u3X<@~lD ݿy&nEfڧFBt[27$4&+A^_\L8&?f(a\ǚգ/7R~/~3@jjw)5BɩsA%~cu͞Ee*rn0fc'4UJzPAr&ZIJ5W_JY:L>#|-jŵN' Ύ1f_==3Ԧ4Y7e];\sEzp8rp'ńpF9 ԋHd5BA9>62w'Bt _Yl&BŶ25פ"y s%;%%[Wb`^/X n!żW>uQK~ǎB"^$G\a$.AX"ڥifD.~/[c0٘@2mh{3!w">o4EnXc|(-]2Kx)Gw$uRNߡ4 ?Nޑ*!:5TMHlL:f qiӉK .]UMsr6r{h#^`;'毂ӭ$$X݀e}X"b$Bg >divgZ\bA;?_K9RKM*}%cy_|ͦKS6@'5&Mv |mU.Öў0) B :W19\%'}zQhF[rhjMӿMSݗy]9qV6kB_J]hUkL2^K~݋,-M|p%GՂH@- $)>^:IqE5iP/k(C7+UhHJhގ'5yx>2C ī)2t4*9WѺ*OU47c(Ɩ ^#G+rb\l|@jH7 x `AH8dHDζTls Ր g{ jfk1@&xSw5لzuoyX>ۈnFoHhژҵ~ r' _2rK !wD9_5H}FHw pAP:ibZ:y WC4Z$+3s$/pa'>}^FKy.!o:h'6_~`%3#MH&zF%ՍЩrk hqVے "!_^Dܕ)7Њh7{pQ0zd10+)_xnQjO ťvt6*::P^8~>{0@Y4 qnin%/@MiP}v:+jI:F[J>C;#.QRO?-U86}wP.]E]iS"|AWZQiIl gk:BM8|  !^^+BLQ}+oxF7,эrqVlL`484i^TM.RK:MĄ\M~PUC%N vr:H,j2As^3@׊.D1S( Q~wxEIBGkשxe8PoH.T# HV7}[AKiQaog^w"Z8ܘЫ`|\<ȼBhRM1|X,jT3ԱCMљ`B7Xu u]w&X30G3'(4(|INQKEtxb0s(q(QYSCkhRd-`RTrXXԈ@OBY[rfwgx.$`#r 8q396d!|Mɕ|^0GcCʮvrq'Ih|њ[dWIfox#jʨE={Z&Q|FfàZ_M%fKUPo1KPRȑ$%9|mViGZISMRCzJ9).[ER Nߜ1KDOxXoU.u~|%4jӁTr-IzZ=*œ4L?9 N @t$ 3]%KQҢo BmY']MuJ࠰(F?]l F a:u'`}S,E/uQ!z"ʸwZו'% Fo:5}f20? wJ اHލ5R􊠎{AXʞ8;6dUѓ5 Za@[BZ C`w-hzOJ{Z]2Me]&G1$k1202Fk>$vfbH\= gA#gE' KMl2ߊ\r@e jxe`TLCL6s>7|O]CqU =4Je3 ޝI.{-4'؛o3) Lɿ$A&ST0_Β,[}m~ 5UI~&=Iφ]`BRyA3֨LL#- .ЬYk]5I,cFTMyû `qT(M ?#$#CF_vuƏk#u[q3si}jYlÀ<4`1Vj 0JgK-F㞔O!1}|V_޸$k`\VS; Z7> Xab5?]KcP3=u/tsGrX)աޮNx) 06SU'* TCPh#$|_;NAK0OqlqC!ݜ/ADžM=֑}&iZ|dtka}oX>bY"Wވ /R2AژrO`~m~t`7׆G2q8.e-xBC%:VM\><[㚨>eQ~78/k" !`)ѺOAYXl9g|)lRdm|x|l'2WL+VVmR:礀 -SzɃŮk|tszCB023d / j |l SlOrntu|,GRk+&:_#-JimNJFPۛve([ S g-wtAEKL_;d[{Dc[ֱ+Uj3e iRNyg[G"9y<2(ITtZ X)]le5#:j>"Zo{5r-rIJ5}ս%sRgw(1qO/Q~yf71kC.qZzy9<&?uҋ]?3(koM>7CeB/$cH ptn@bX1/,Wo2gҐd^'T4qرfԱQY g :AsI&p0D"^Fz Li"r75%5h]Ԋi)ӿ-:tE$8qNO4qҕn~˂[G<@3 l'j 9/倭T7 S!Bl:m1tUKU@hь16yFN?J '!c)}&<A8R,a soY`-@Oq̋YK+B^;gPdf)(-է8)k8[6$kANnSJ{c /og#ap&tO±G>1;Q:O?vYi{SDJ TQNe1<~UA W^KbE;:Dk-R,͵\=) HW3e@rm-k7%*h0w"kL䖆xѐ3/Y]*!N~9/hxA'JZ͸ rG@z7o aI N}:xN}_)q1FxLT J/zzG`]mJ$6 ^oWũ?궎SkKgFNuU` k0񢵮PJm:-;RdӠy]_lrytX3l'.0ϗ7䯏F;ĺ?Ԉ A!čDwf}yJt6#/tus| %$勮s:INHO(R, #n 7򪻢{K(3]Jb&Ib,JVR=M/cgsA.sx9 DT͹tܳit'Ftނ"Nc+^/#p h[cYHhCZU{-|q19yd z7ͩD1nH2h5_XY秛-\l,Id m6𺍕=bPy_dyb;)o>Ud mj"ޖ# KYmUbcs\s']>c-wf'hїp8}P dnA쯧!c@%0Bۍ0kUp=+`jv6uQ"vHȅ+wDz:2xB'i^;ֿ ^uf{"]Vqd'Y |CBgҥ(}ޚ{W~]}: g8l,K7[JKh%: 6!|x Ypm~>bQK5Ny)z}T0Gq{0Y?]Vڦs7܌뺠okV{p~OxOR<#e [M6ǀ }LVgnP`/S,IyIPvդWףHiy*[6X8+TKvg>R'0tyo+輼BuAe&IqiG"" /=+1}b, cx=Bs=([5'υMl8;DG5,wְSENoLs!c=PZNYXOsחEv)l(i B$4̑ 1<] \hړ2-JoPgf< kiJ80{to5;Lu ;g$J%͡]4?ͬ#wЖ/ҵ$W#Ή7p/`?@ nb)`RHFwbE 00R]Y^~LWRg]:` :yx(HC ; 'Us;0!͞M^`.`q^A:ϑ.NP|'̇J2xdeʡzsY.Ш+,ca) @H6Fz, /K &'IU*6 c]MֱmS 2~zIȓba ަ0HYԻkj;/ov|yn5f:7wʼpdyʺ Oxa4$@h(R$ϼFqT:ތ!oe1`7]uYòU"_rClғO o@"vF\QTO&;d)ad\@ԼĒdND2/ԙSa7/P,)'%BY=|OÛ*9;+kQeux j&5}Gjsl%YcϙڡsjYLHUM |&]ɡK}gxěX3U3F}"SM,_)kBjGŋ@Ϗ$O +`OPh;J&:387|Dq#@LEcA)`& -+hp wbj%QvƞTA) EcIb6hY#rq^ MX[w0VZd 8bJkea_zVa``s[; `z0RDSR:Iᱡ*vP8O@/jpVIlLQ] !29d48MxS:O)P]W~):(o Gi w(QL>g2wϼAB =^N.8&+=S8$jͣ["E uC1Qrmz"=~,Vᇪ/JUۛ{jsML2=qδ_tag֬ǒ.#T?O. T2wf3xOi"x/Ѹb\$Rȏ 0hQ8Uor&C7vA#{oCd'4,WAKzS=F΋ w hbFAR 2.!ajA U m?(GfKe(կ=:H6öwlzl< 7(7SMv%X^3$+RZq)KZ QZK>ar]RS4J};jaa)8'݈|۰/л묛&{֥Y!"AJQr3mR$ V_=q0ݚ#6J_2 /&$wŔ?o/F Dikج#5\,RaqzoCFۺ#uGX{- CBnmLUkvv\qHA-ň"%8^W˶Nl%{/U$# ;Iαx`9ɯx(̑ex]߅0CHs 佨vC쪶@@7dQr(D>if=UPSVЛOX 淇`g s 4˳!2lIwPn0|wKk"|w+R #"/zDjSL5 9^NW-G\񍞝e1a;#)64a=}UB]9hSbE6}vHf2UEļguTԊGETA4Fk`S>4s<>X?9жnaM|+p mMk]7PoȘA ._ةa{yw5I[~qTIB^`ibV(XS \粐x4 ^/FbCbSy[h>ն} =z wFl2nm9o<P}+9MP7{,=R]oH'Iqt5}~ R[bꇫQWa; :P#j}i< ßxM]f Z'ѽ~ߝL`_&>z|"g] 1͂ps ۍŝt\dlQZ9 2(B%2pP1 .HNgmP>r}e4qҁg^n(%9oXv -\*te1yDe) fo#JDdF)46D=J:41O*ֆi/^w>cJ]ρz' q=+ 0 !63 Gsk%.jNQMINdpU'[̕GMθn.QmԺ7MQ#ũ#N߳Y'v0!M9c5C̢,܃k[䓵g~p{;TB}Ow_@Lz}|)Vt;_! ڸ؁L~pƄ=J6xlw#s5bB+,rfRŸ7!Cl;Ô||+W!a!K*rH^8J`)rjvC2pr(o9{ap/?1߿5➏R`HNz^եhH?%&o*E(zG8c'޹8o?x)4nVUP)2~L+#Qy+f8U抷bBi .&;&;,oֻj$+p$̖)%^?;<%#< YBI,Vyx#xP{<%$(`JTD%`Xa]/ mVԚX=R>\}jswK2CRHV 7YsXulc]73WHB:P]l^&,&vf7\ؘ.*J6n }"w |11Ś՟7#ڻj'pfANd;MlL*%*bР`ug߸\Ys FDuNAQ|҃Q N̆ aև 2WF[79}٥ZU0%O ̏$ɒh&_|ژ,%:q W πk).& ?$ҊZ)-3F-ƃNbwREO|X#ouSDx*4É=OPgHUe̱_̓9v|+c{Ѵv dmncκnQ=]W51ٰsl2CxsQ=g\0fn5au~tʯHluůO>ٻlƍ|'~d'ZR &Fv/]@o(.!g~!YPIL/"C%Uyl\"[>ԬcՎɑm0 fH`F 8,ΨTY2ߠ8*Xo/-@i^ kS2/?>q)5opJpX_KցΆ7e>[HP,Wݙ#śfgˢr~䨊7Bʍ@ngOh+;qǂeSa s [^EΊVF:ʨw.8mfl"~U:s3='arT{>j$ zDPRASs>UW:RQ]Ʀ:^I"Y:: j~ z49ezJ\: ưw $]΋<,NsgV2G*?Veء!Ia4Oyə#rFu3cq= ?s_ qzǶj\aGg)n0DMJV T]oDݍ[#!y+!+ᡱ@%+$Ǯ_tJҩqK (\#W0vIstǰJL21 ʆjc|q`͞i6CHwƐe@դxnRth73e+,DLuӘxEU30J*Cp9r/ ,9B5{SNa\˔=fBDb1"5Prqo]8 {FaF $H#I7>B탶'鴰CJM9JǛdVO|bn(1\[d7};"Mc4{+9·ρܡ) sإW>ֈ +10t ,L[l,(OvT,2LQoݔWV ԦdӟUcGOQ14D]YP";ywe-VdSpu[BWfX0.镹cZZZY5* ߹A-3,w&sAN&7h$\: yX]UgLQ((ó>m˜|ӞݗB|| d4TiHїu/Jߡ1fбX=ˋQBr T]KVxՐ6b'oԤn+*"w2*3=0 H/@,71&c!eOR280n3 άj]+}oYB+ͻ.}K꺭3ӑDkgU pcDVF&eWDѤb@<-8=jjlC+CBjr4ն7rs`[> -sHR4ࣵN0 ";9C۷?\H=WDF]O\; mTpHW4Ud֌7(^ }ѫ>?֚_@=鈶/BPFW46XΔ+h)NS+u$IﻨQSg_PѫR7T L&ݖn>l7A뷝"m85EG>O6U3­p7:Hb @9{́+zBq#Gjd61dlShEutl]:C5l8.v$#^Ћ˜AFoB#>Gvةa)?%]bŚz4ܷ~-擛N DMqMlªm.``U-'^yWGp^P$@@^XFNt26$?ͭQc귪fi[E :e,U {R!;q+\ J||lVDQ%C))djj{ ޯ-%"aWC#G$0LTQ6 Yb"!U٥OO&Eld x1mתQn4U3/.D"D\, V[ d))!2 mmb gZ-rl~J>I D gY-SXVN >4tHĆ 3hlԾ=m/~e.K= ێe+mxٴig0Wp⁔AʯS)irdM7.^j)gOoYa֣FUWR"%)et dQ;mKH;xw0leܔ,:~.c<,w*A-PND{SC'SwNQC@J?8S:<2Hr v :ȍeiF gDg~`?+RQOyg%a-v4jS ܑr9]qڡ j&ؓW7ݳ] υl?ԂS(1&R*pHߓw B{zp*מh :X*VRIUSqC=ɭ+V aqGӃ|ꏇ/{T֤03RzG wI%hf8,N O;Lp7~^ ܾ Njr1CjR>oohĿRx~8ˏG2n?z 6JO(N¸l:;OߨMFGL"UC:;"yx? U)R]-;¹G.(̢ .eN@@U؟^/|}ahtWLK%)Sr.ZaDܭgRy$,a2½@:-mG哨HRKE,i\aq":y(LrS >N g%=ֿʃ JC~Wԕ87P^0}p^ = ^^3WV9Y '` /54yxϽ3Gh0' \-sю:vDrlC`iĻ1RBH&xF- c Υs(~ԃ=~|ua ̑9rȜB[t8+0~鋡 ZUZpHZ}/ZZYQ L$Oc?Qy³9u='zGTE.*2J6af)oT Pޞ %P~şj6.{cKĊoc+&373ɭ:oBIy<#u hWD [^RÏᒂl˘3k$HG"Z5Eϸ6Q!i6\gєȍe1/`+>+^(5P#vgyޥvL_-b^M)}o k),ra[tM~qs?7\gT5XdB$8%\>5Z+. bG!Т^~,X m;bbro ]_bR=05lu;@7 6{պLW)` ?^z1ם;jC<[hk~-`\E^"܇::0a'B5o> !8Ňm#,]|mb$܆N0ƄA4lx&1oÖkmP]݋V23Һjl btBF"vaN"X"@S=2O9Ǒ6v2܅^_ ~΀w̤h!`2LR9s{]&IgQH9 I@>tlkG?ʕXXxP.Lg?fңK휅 k/Gč6Ds%~^(3 ʁ !Qwܹ"5~˦zD2J);x78xݪx=&}b1/0Dxq_G: `-P;K/gAU,д35K&,KwS )3UPF`Ǐ GgΦ-8"xQw"́X4UpX`Ƴ4GT FXߢxԈK%^ ^f;*'k+8b1@ujXڵ)bk8 piݽf)/ i`ʔX -qvq',:3=6{xo^7kzLuv!9,qCbLX _g =TJ&.# c3,*N`}:0D40xe,nlT݌J(Fv3UsIsW;$XB~wi`@8zu+iQ_jVM*G|c<{Ҭw fK_68"LQyo26vq9QB{$*];HȌ5y|ݐֳP0`K ^>ũ"䤲-/=6]Yyp1S GОҐ<mRRui8]nBaq߈13gԟpM4?uIVglR P2YSѵO' T Z9thE¯nWXAoYc:dF\^0';PDʏ >ə\~%phKe +!#u&}NHt㷪>o s@YxXŊW4=s2]4SZ: 0Jp?$wyfO/ЛUFghHc1b?|Z5=T9TqG|=)&9mXX  NBE˧70L̳A=bӠLB6wh)HDb7?!=fPW|; CO#Ϗ4k$썾aNp7( &ɎIyL]6e"q|>l-q^TDS?`?D"ML |ohJ\Fg[ Nzʌ﹈ m42\;1$_r+C:[ %\=`pէ\DrB-etbX g8(?:nW\:#-q@{ΕVǗS}A@ݏǜu4 i"JYEvRΧwш`*-򘀬ko_A |46YY' bBsqǢ9we" 3kqELPVs hZlG E=;&d4N3 N"=XR/MΥ4`˝k*A`jK=I3ꟙAw0/V'' ^ۻ݀%,NQݸ W/hwzƙPٹUtچR3˖@ZhF9 PCvX?|h04RBh$gbEk& e+n[yR|v`qYvk&ONK u={[ lG@鰵x=;(/;bwݪ}B;}::Ot%oWKS>!Q#Rh,u7b)>:aıIWlQ ̚KGW#}$tcG 0{0SR|HXeu"7| s-V/`qfq:|%f`^"&pcZ$bagO?)l|n`];sY >oךx`N`;]y* 1Sqa0x.(,Uհ םmtP55[磆}*\3,ZDt#&" 6Fw{ -"DoU}~(t${(Iyr=ElQT@Tp@?1~UWO=2 pIUavk˱w(&:u^_ikGk:,e 4$}X2O+ŕepQK=.;r4̄** )P+2ކWCRGr t8؛wZM~2_yx]]5flWȡvOeD\\iU1*UpzD [m8jkr:Q/j>7@bq2W`1ccO$ Cz5h]1B֪Sb15ÃK^2Afb6 @ $/Frnӭ@;DE4+g/I%q2M(\8rP=hʕܰ,L+ķځ~'_0VpcuWgGKЕM=ՏZN*KXmNI#4EB?5&$8jH+f/ 53`ly|5"MsAN3K[zemŀ5h*0Eu*M H nD-.Ņ4ӝ7 *E:#ҳms>XqE"˔>/ X)]Nc+2O4 $6jLB7Ŭbc1^2jK|OO%<$rwN\aL/I.$l=zVPӕ)܆ Ȼp7rӟ\{>?8a&m-\zoUnҠu3VDvHz_lR}i%~:5ZX\:gyODJށCw?:[!ȑEc0H'GA(d%X?sfױfm,ƪ3u?3r+DP`0(?njd $3{2K~ $WWp* B"s]ȫ(z(\bGmbFZvJ8yhXK')-N@}ԋŹ #Sp&{@&B3%JG1ى `jŰLO!m 0$$X)t37Mj߬Q[89XQy`Ē.]pxr~ʁ٥pӍqD=-tDtK `'1ɫNU^xدvQQxzo2#zupߗX50D͝DCiх^:L&c_ EdEM u>4.S˨(*VB WtsfsCj0xb9.< k5_x OYMLx|G5Sp#͠gDK̏u ia}"&4)!{Vq5'QuYɎ1z9(Kp=W>&l}6[I9Q@adSяTf%L1l"Rgm:wLbG&ǜ[쌝U"!uRx4Æά/M1mb!TC SkhGVe}k`4_o>߅P͐b G#gKq^NZO3s1д[sİuŅσ0"1Jrɓ@S g>*Wx٥/ YL x2#_sYjvXhݞ np7( ״ބ B-ŠmzY.GiGx^z`>9լ,7Y𼲨\{Y_i@6XOդFC2YoX (շeؗH*Lc6.!6p<a2B ⨓=bZU0,7Y:X3d v]'Hۑu>3_J-ًZ*\Qj)lq8ޔs_7b2VlK-֭.MxV]'ع7tL>"EL~WWYXjX:iM ]8F44Ԣ֐ VIȆN\a̭ň P<>rLUD.4Oœ5݂[8Έ GFKXs[_i=n*;9G,ι9#g˪?Bٵu0>=$WeR|>ژӌ]%|xc*/E}uęh 㙐:Oɰ}럔s2m H֮",%qI|A@ !5N+5C5 wĀ(?0%?QP8@AZ`j"nsgKN0 JN{^+rC&&II$I5E+ַRܑ !}!fRIdy [BVvvee|w\R82MHsM.&U=Y Y >G>4Ɩ9vr߾l> %gL* Y#`ƙHL#{@%w,M=G2`:MVRBE<q4uƋ`"YɮuV2lyM|~q.fYBmUyxoR8-%K `LAz=9f9K"G <.OonvFsH _ֱW&]|q)e;c(<ǹH>yp_ZuトN%CxAq}y`G|P(T-|gF~- 5-kZɃG`EnWՆc ˴q5DiDQb;D(smi#wDQ3*- )Smq[`5={ ?]ѭk{|}C,9m\y Ձsxʁ4Վ@$£*!5nwp pi14@$(kHJΊ1"`!иR[*t`׎@ J= Qك,\΁iZyiXdCpc|*Km?שTߠIaP|q+w;t%)afkC%#wQ#D䎀Xe#6in~D@M3a6UF$13{5|½Ocfgbq4&i ^QfZz}v[st(φ&p{ȡ69l'7-z_dPg?L1DDC8k"^3:_h\<QqqIfMeB 3o#F+?vj=c&#sP&FN`-GۚjKV/T ZH'xh9CpZI~!.ČG[H߫t_aV!Yؑ/4ABB՜޲87!* b,;| >]Ꙥ9:}c4> V ,(|<5/m>Z?0zkW>0 NKyʮiejSQ&'=`I@wPs1^#Us|@#D٪6hvd7?DŔ-VNpO8ÛQ\,PgwAU8V>(k~{a=XZ8ܟ&39׷hTP [-DhW"~$߻%:@'`EYT=;!j5K@wOL֕ımE  L0o4B;6ou9 ٶS@Sk.~,Ӳ7ki. F&֫#(Aיv1~>/_{vk\pO"섷'"6& Ժ&p[=%aXj>m2 bM7C""2؍6?TW0/yv1뇰"k$0vKAkE2CկBXj53Yj]dHTh)Kif&[1JI|@;)˨-->~L0#%<%v /T7yvXU]TS!nB!ʱ9k=i@FB2r. _GТ9UķWt44jc>F9dfӑ,h^4 A!$ed@E{s6ŽСBJ5Jg5nM+$21DQ❍V(=H6 'I:ӝ_s<_ e͹5 ·vP= *Qa[` W!.N3|:sCg}[FHo`K}i8shf;){~AD# pr!q7~ϚNwF^ .5GqEO7l!^f_)cKJ {0*Izq~ShG=x֣ Js<<)tUD6)t`k "'N.54P&|k?Qd6 4x{As5̆j=AƂk~rKekL/+8{-l5_"KYG%)T<0TCX^OGV<LL㞪#[@7c(uY'.(b0ZbDK;@UZQέ,qVt-NA&/}p{y)(Qu ?oYFXpk>|;S|N )e7C\ RbX az(8uU3d|.dєZ sϫJcyk!;.ƭ+N3m=6K}S_QE% bC>m ܋+W$0ˌTG*l,q c1ou`5\%-AqY(7ŧ_m9Z2NE>4G6vy#܁ 0bӗ(þ*Lomډ`ea&unBR9tD$ͬL5:.u&Wm@pg^72MAa,nPJ8 `ÎU/x8~F2"魰P JWΪ̀{yl wP%*x6XE'{L%G QwC%d'yiZa/ d5_Y^#"\:`)8>]:}X{6M8H,k`W:L(6Y(? Mք*jEV0( IG ~q_,^ 7S8z])DgR755js 7 VɤOds"eQ*۞nRr1M,ISAGW٩R_KG*1+0%Bm3Y&ԨQ߹w/._q ܖ )yI-P {^=rnm8UF׆6PMhP21'j|\="x*]әZR+'=+&tKj˚PFѵJw\j['K?}d{,;[]H1KV{nݷ@.}^w M Ț9 ȳ$uĈa D%! ZzX9?t/UCk5,2h肴Ȓsn]UBů'\-](q4-ΥZ[!a6u"|!cB-sA9Jygrp5L,>nxf NMLKI3LK'ǁZp )=}wݻ^ "6ad NJoSj̵6xrP(XnJV tӞ)zA$X Ӈ#w>ٻq:)ǗP#!@!]|hBn4v*&,i fHg "w#rp{o) +pJզ=֒΅="4L0[Fnq?^jds׿#, O<3+f=>3zwOS[-q~r !8 zT}'I8L3zH\Z^ݹܟ4OjVb]ebmMǿV; ~Jam[z-AozhpkkY=@x'9 ա/c!+XA㕶Tx>?xC%-"EdWx ni%#,Q]PvzO^^+?R򵣠qe>P>X2@q/3x{4Jy&C8j fCl+kiC((EO >gae$ ; LÔ 7IIy9ؒ<9Cjb!%u0DRV,S,yYyfGIİV2b w/fLļ\]V 5].H?'߅qdEAۿwI^zcZqoY Im:[6?884GMπ2ҪF< MWmW#.Hk_5u!>,!ďWTU0ѡaUHQb53;}% ".[@zAϽj;~5@~ &ak%^|M@-c AwcmK6GEƷgdsY?}˄Ifx`fo!"Xt=R!њ׿Hg{, sq|lMZZ> p"'/oA02h+^2YF5.*L$G!GS^[JZ۠Lwq$xnSGFtliLArdZR*sp[@v%,uhdP *ukX?DpOGJ\%q0c"ܺ,] h KC6J7ty{%.#GBJ Jq6' 4Y+683,~wCkbgHZtswsFEL?g96bN{x{=,{eZsi 6T܁G)BJ}e/)dO:4Ϸ׹=2J?jrXMʾ9i tNwL.P N] @L?Cwa^E jש$z8K|'|lȋh-ʙ1 [ЃG"0J-,03%;^𼰘' 㳀Q:$M'3k%YxA}ədb^>ʇF*hy_SWVG(a\=Ao_~b = D8YOHܴk5U3'k1׊Is@NȎ3hP=q(DS3ĺ%p#.f#rw]zVBcL;pe_/=' hUlh"jj yp\> xƹfcgЭ?rXRKNnij5 5g,Pb04:%,[ ZQuۥ)Ff&&D3q$ȴAP|ϰ܊qj,> sߋIQD8֙n*2TqѧB R>1)c:|'VŜ0\,+9;Rm?@DF\ɛKyVᔿKTi`K) ( 4vAv&?¼bGZ$xm9z$S=gaˡFopc8Z$ȻCo*ƊQ MzHZ1G݃;{iB}Q>o- m.U [Mxp<_5q{ vY/{ZٕsepZgا]i F-GMUJC2TH924!+hؘ<85ZV)&8kNl԰n+k81YoI2(|.8/)F?i3Çry = @+&&*47bg͍2-0/'YXa!kdڎ.#d:Waris?tXRsy7nE ZMD˺o8dV2dϥƆEc-k,zk/?bk.5*iy?376b~V$ѫ )WRQm)ГWW&4g,oB AԜ }uX2Jhq. +,axGk&Ӯ/;PNsI>FŵOnM%8\8LT_ty)i0fb9A lx5DރaxĹ/`/Z4@9tH3kO,wjkN,*CBܼf?OR-qMGq8!Wz E#$boD7z@B=z2Ϩ wk!d6~Co=TɜjDC!1ӻSW\|o~67ͩ ɮ!;SjӉBŸʍwxM{y3 \QBzI="lr&5ㅙ&P7JEG]6C֔ *?|WP)Œ/N,d2UD^6\k2S[yծ<;A]vND :+8Faؠ`JJJ ^:16RQk #VoQHyvw"oOTRMF/ўg.9 Ӻ׉`iJ/LNi;SFW+`7Q'-zML`L[z=Qd\ȹUV T p==\a+lPE r|FYv1чM3u"?B*8Kv2^qS/o˹XzM'Jfٰ$ZoJJwΘUGFqڅP:nqav0EBX-QB5sR@Xf,Y'MO~k5`Kq .ØLހ׎+$t3y(@yU !$!K}7"x,S^۶ Ukb7Z*>;:bە-!]$\ę818X~4`=/Tx9EBÏVLIj[y:l~*11T8wxbf*$u?ަ0uG 3襔tyXF8G&嗕#ڕX\55xlTE ^(^ _N=U;\,]?(FZAiqd_a'ԵBz!ADꐟ9sv9l)x|JZXw'ŧ4ro W sʵ⒵U3Xt8%)&qnxBg~ls w= !NhhXH*s{4v7]?Ԕ8^J6蟤+u'I.Qom7⛮[^'>S .9OjZhkN)}c>bD>pR0(" ;^mGބCͫskh!JrZ} \h`NkkliVw4 D4pvb+-)d<'^Bb p:z ·dŜDm J@NѢe o_OQ,dGIrOi!; *øT$ cMNFNxlIS}!^^H4:[*G#!NƍEBB z`DR.`3s@ Ko\ʝ`O2>K%W(zFOa_x@gUTZ~2/rxhoorɐ NWHh5Ʉ˰{9;c݁!`kfN'+?lI ,5Uwc3XwM)(' )mJt(B rُ$~bRg/Ul0lƷb $ev-{D@7QBriNOalu@ 7-~bN}"Oy@hcmIV 693P&50KtΒ{tnj4%4ACmz3;&a/Rmi4= YqGs™(^Jc0{A%$iU ;-۸-5<2nT{t?BswPds\7R|av1~?;B}-߅>hNpͱTWtg)Ủ`JP$ h~Pmpc§n}rjH1L_Z9PrBz@ :CRlDkU5.Zr#Qv+@lq0"jXC/z>џ`&s'1$^ykvφoz8/SAj/4>GPZê, t8x_IҹIs24pk(^9dLA q)'qiJ*KL,YӐͷq\J* 2 2 aF/bv.kNEPX! HY>Tٍb"9ZV#񚂤qPRXҸfɽ=[[T^ĤNkk٪HW)]jOdͳMM}8kɗI5Xn]v~AsjOSЦktԢ?#Ҵ4O .G/ǜ#:N׶t:Gȵԕly *,^l]E*T!fU o.@c3ܕ e"+_Y3#ŷ# j9c$(`,ؒ#ġ we 17]P0\ŷ :7q2~ݷ$:__&Ů?ncЀFji?e z/_MMs. %dVdvef8@/"PmNDuN"ə6X Y~Gxr&Lu?BB \# -2A4r|aհo(l2`PVVqNm7)ѽC)HꅉI7YC]F8Kb} YLQ<{DېQɓh[yFF sN 񎙂DmgNCJY{'* P5 kFR*ǙU& ͪ Y-hRG#<gh=?dG>i+mU.r.ˏt]`{墤b.2, |٪_v}nhly +`S;Сٟٟ䊃Ԅ&tU~iPځڻgB˱4.8.E+j^L}>]jv\ne>DLU&xЄLD5f8}9g=u4qӻμ4ª2feӬl7L/ꑀÍhXXA°1X*ڽܣҒ!ClP͓4b |'3%<ݩ[j2!(A`pLM 9 >56IH|{:}luɁVq'=br6m·<&,iv|4CBVO8?'<Hշش/O+ qAxIa'>8s,yҷSDR7"܏nX_SW+Du$~%XԔɨ_*?f6,7@"#W9i~yp"dQ -.aJaս3/Įqܿo@1j׳[Xup2‚$á;}Y6?n=DlAw9PyUy^KɄa||M8ײvl&q+i१ 3NN?Rf}-3`OHi=n{9bSzňe=?*^쿠:GsBYV1uE4 {H8۷׵thX^L A $=)<.^CTՅ_.ht/ ~LvثSi Te2w{~y tC zgn}4p>CƂgϟbNγK@2P$ Ԇ7[mPIh5@T^E ܍a$S7 +i?JC|2[id-Ba3ɇZA 񧺬|j*R;{VAwo{WiBd<2۞Wʃ0כuDt7?O\\A.0guFx᥿?'u"_$:T9E]XmP(z6`xٹXs0|/eA{E֠*֎u*IUnEYxjL0f6+~T,1IIѦ+ph?CX>3;DwG䢧<*^#'p>8x vNʙh*zԶliM)Ss{Yh&kGMVXioH3? lW;+ uMBS爚F~uA> Lkd>V#w$*ض<*=,Ƽ$cq|_x,Iy-Qie:JtvdODk8aFcQ;bj+O,&y^khTBU\k-ǻHh)vK Jy%3fV>XRHNZ)b5w97K5E`vv%_Gug&!4|c~nh1zDr.] b$uXSY̥dˢj\x$%^=RݟWӟ:>6@s 0WUџ4+l0f9e4x&bj `j6(y- 1)\ƕ.Nq1l70˅#hdlU7⡠cU pHݗq!{,-A8xe’>ꐄ׻o ^%O N*cor|2̉- %”Q΃sMŞfB-mIL}nJCz៴,R1Ef_~A.|NXҝF1CԵj諡94n*p i!LDm(44_iPzҴG)Ǖlf;OG/ 1]R-φAU*5!0FߦQTal wao$eFsp-@^N̾,⹾`Mk[6aq[B<+[bdy@Xtc.!UtȨ{4^5:s_{- 0X=iw28?M ubݪ>CېJk>l+Aꭖ7#r_ 3B"DN lQ]X?/5x$u5hxU&Dŧͥ.[Ddl*V kݴDd;$W ݀Y ;_;:pnjAPEY}vI0l>*ίQuFB@3ta\byMEgp^7 ,sZV0Ιc״\ :il pL# ]8I?E)ޱǟ1]9-:ew*dm%ޠHrܚp*Dƪ9RF@:-%;@{E?J< lC$Jh}'ڈ:\[)a!6]>=PCy5#U_w^) /YB3fQp붪(/IB_2jeEaKqB~8f]nvgPtDܮdDh؜KBϏh,"5fdI,{sj9x5=ÖO|_5捜) 8/0f_qL|n`uU;@fI\%zq"d܋` I>X Yf<̐Y &w])!oY(৽)P݃-&Z}_ݰ7TH8q ?]- лO_%ǜw !=HЧ{dP^n*:af8PkFy̌dn #v<[yEB?HC!*Ս0b:0jT^j?x9RK-*k-Kb%5 cQc/ N@ӫ.d*qV#Z/O=yT5UWB*Ao_c-| hԝr9~INAH>|%!SJ,&ē\>b!yQ@4:8W:-ߙ*^IcX2L@o#I]ć֍hHTH(DMPay1F?gW1̙'hЪ~p<JT|p%5O[7lX+eVt1jvwY"?@:8v-t 2|*\u(^R1bRYõf\R]kKlX2,[!ܙ_vsMa _&^@8JiupUGĥq9$yp2mw (R$'}_7 4%#Ac/Sps``r3ݭ@ YO̊0ئ"»-jȀΜ'kZ[].bi>[Yo*iZX" 72g{GW0F#;\az|{r1J# K'=/z Zay:LHrV@G3l ~|f|L,h]i{~)";T>Wv0q'vԃ Jׁ8[_t\iPb Q&HruYDZI^!/[|EGlP{@<woE 5jl\ N`J3k']L jLKSL"Gsbfd$W2gձ~39)6S+jQj](mLmDe( PcZ)wNeeѪ )f Auliզ~oX!<xqJ=h% Tr {:YgDMԌk(}CdɚN)`xLRiWgZ{#4mʹbB^mt۪gioAvhby7lR[~,zO*}цg*oIpy{w |9vD]h{DZH3 N?|+2deTƊux[`ן0: ~X~D)Z;9@p(yHlf;>:i NX=rJ?^b(<҇vqUAE2m{'y@1֢V[Ȥۜbz` Ώڔ|n:iVAnNH {m F|:n&|veTDeG77 ;_?U`Am!SaQڲ3|ʮ7˙3Bt,:4 |Ys{`2}mCF!O/-&"VDjF|s`\9 b!G2f]Fi1FHjAIP)tzu>SP'Tb֣lve#tQ<չI]E LE}hi`T~l\ص"g@C'^ sP`/K(H.vEK[+3rN+j#+˶;CkF.M6ǃ6qHC)F(Wk#/+;652l[Npȶo~Q3KvɈ{.qJ{s=6s4rm:Jl(af)FJqU bP,}2S= ;)9iw}CPKUJ/ q74gXXg=1ME'/XcIQ )#7_A]g~1R00fӊ+]\zFr>t8sLnPAƈ22>AʪA#p {F+mzzD|I̝+T8m2Gl\Q 7UROd ;WQ!kŧ-4/$7CĢxT#\kFm ;2))[7,KHˣK&Wm\#ld jH&%,V@e/uup m&Z>6PkՐIiKјO'ݕkQ3CB[+4~86#^yckhZؒ{)97i[Hݹ*Mq{` WZޑ-=i,#>MW?UQR$QKTdn ~i!EvI [R2@ַ:'D3^Z?m%36nc;Gվ5yPDW4OҺcUeΖAۤ ފRRY #7N8:gZ=lpDVmv ޠl | 6|CrAm.dyH 3]SPP)~Õφl:5am׸BSQ?tް||)c+ 'H h.lAVïB!d;5ɽUT70F9D61;U:hj 7kB08=9;V:biX P;(t?GFUpsGn؈f0[+KmP/7Il^[hsZu^$ERaqY*N+][w0#/sp*{z)4Z?DRD[2y7\57s챷1cn(:X%bK^4lf}O!yA /jMц-x˕{}aR:'xw'sEFA0DE?HyafpQ#0hfΒaO:[IqBj위W ȓX&쿽1|xʏvN8L\|Pdwv6"SqӈFx*ʪQuuZ WņnpK:nHt.D:NF\cBR{eo+PhWdkV$G&2& :?{/ GLZ[oug0/cǀ2>A(߼_{1 5no %Q)/9AbƭAs \! $7[jCuۑ kA=:e %}j͵'࡟YR TCB[LxĞk8Py!mw M$ Sт'еv'1wԗ̽!n):Ɲ2Sm)}\(ϑMVgY. @H=,Vż3*2F3J簻+MH9 A~h| \8TvB Z̺L3A7w} vJ$FC2+躬\dMV;φT5q!\ZxU_Ù\'{Qϸ~Fb^k)f=2p3Fa"?7k~񗋘NϬ0߭ק3y"Wl~ALQ.6tP 5[T(BCn(q/8-1'һ݀ȳ @حT49fhD 'NB^WW_e(j$_yh ͆bTTa,]nuϏ)T,GzHuWD]7(L:H)Uҟe nR50ie\y(06}BdsXuKyd>LYr{{ToKWP4#*b/qp["<$ݓ(^!p?w^.l;D:WhFލ}^]&J<5cfϠFZ=Hz=kF#/ ſ|TN ߐ?qR/} 7<|ߧP|zI3s4>097BfdzfGM2URNG'k&l4KsĴ"uhgX[#x:20t(8"wK&jR;BSH,pF]9]Yar-TRTO=Ozz; |C+wXs 揜5pWEQ_ҏ$gHEܫߞn+!bWhn-y-p+5lt3%xJ4e`YŖZC0E:5(3>q#E IqЎ 0/%.A?.P^{[.-x0:OSNǬ?_>):Ed]=+Q:gɮvrӾݓ#kNGZ}U}^}?v}Jr`?8&AϟdAĚ4͔~B蚶Ғ-:IMASw0=p)cvMMą ]*E牪3:aI\^x+:<mb[q]d@+ kTZRv AhI4hxYYd qTnwoٖ:@;1K_w7M&xF | /~@y:ݲZT Mad$+L2CVsJ5au*ΜDwrS¬ujEaY^rJ|{_J%MG` >([$5wPa}kt5!D G0{3r(g*7V Qr~L\箰i.{QQ* vD{r TlS2nx*WJQ=z:pm䨳|o;r۱,IE;y)5&>ըZwͧ^k>bnٞuisv>ve@ [w~HdNf/% "0!79QU7YE{'0#vU`6m(fgݪ!נ' ؚ^V^RGg:悥75g r6b 3)kvbyaϱP_*iK)]'( \onXrHѓ]p(A-r}rf(' \Z۰kT)dbTUGm|"@H?Em^\%?7c.e N& I LxCVk\]̼K61%k/>?ݯ|*))Hicz0(# ߡY ̆ʫ}ˉ!e+ }cSBu5j9 =p6&`k;x[ XF&k][5ThP3GZ d> qAMV+\Y*KA|?CV"k'&W%&hW@b5Vr=чsP_BdLPD}<@hWP1kp 0\<񔻏 Eܲ؞<'~C>{Qۿh_^j?\Mc*6\Є|VoKU)o8ý *ȍR-=Sʵnj:FZR@' *OΪiV7i3Fʁ8CRsȆ7J!˜qjWZb%Y7Dq01~ro uQklӽˋU={_*G][ v.Z"۾d%wA4kJԠ bz$\,翰QW4xKu$}m3oQө.۵q6g?WXQ9x#\V=m~!@H'G`.̊ڴgڎ(LR*>\X {1Xl NY$͹i\hLQϜrSca3E?%8:"U,SBSۓ}s l {Y$x ws|PA`8sߒȗHmѬZ\:x2çܹUi{V*js3xL6&l. 9Ifh*M.M0iMZ)iLubYŦ8X W1D*!:>@.o\x"GտC̫Lx#`9|;˺=wȂtɶ؉=yZGRp` eRٱ1 Ľ -pJb֏QiB7m.PxpWМqWIx9e@䍧3莀7jZΤ!CLH=ꏷ['\8ȥRGnZa&%<)޲_)I7֭ v^W iZU<("bG֕U+gZ w%Jg #>\^;s0Z̕0 ;VjDڎ6Af BE@0"4BO K94L^@T"8B'Κ7Hk*ౘw嚔/ڤvx7Vrr 3dH9":g!%dBG3_O{{>`V)K*[1d֪\l_$WwmTv(Z==B Ҳ>[R]8pi zuQR(+SΔ\{k(vLbX$5r#MkRʶ{%se9̶ rCe)&% M7g cY@,JlA_T}lNq-F(j+qSy{Fy“ŽӖ5z[e)-7 [?UrһV|ʜb RvHkmOz}Vxѥ3C@e:3#nSӓGPѠbSlHoNSS1z3 rqkM> i({,`Pho?Jv F77-uoP&ɔhW/YpHȳ^DȑQOEǕ`olWmj1]#u8˽p@ =ϟei|szkw qi o50{1[I[ӚF"u'" 0KuXYCRHvtܼP:PmD0HF}Rύ-2uՃp+Sdsy׫Zdݱ̅nFPGukf7[_.%F1YhX'@uhKW:,#.e+#,FB>E=rpi_ z!foHeИk`hzlq̤dɰŚV4;OBe.WGU Pq0bU'$64^4^x/@e5֑s(q`Sa^$0o:${{Χ_OjU۪sv7{j$;Rλ VK(X_ !^p?w(@ C r(~l;"#JdZ>H12+=ף{)t1N]N;&c/@x BOODuӠJoD莯\Y.(~sh&b jBW-6eYH*37>R4 _>ݶ&7IqsPq]Sq;l:7>G4eDjW5 @Q7UA?s_׷Հ/kr#\^\!OaIMLdVlY{ȅX-f^ W=.^hհ']"2vE`z0άsb1ZJE oҢd-Xo`b ÷?HnIǹ(-zY7ĤA N pQG"-:C+ܿ4hB-~̖x~w:M6힫Vq/[q͠Ric֦ (EP^W.@LT4.ƿ- AfxWGjĸ"ӄۢXMȺɎJ$vՆ"3 ̜Bc4c}6S{,QkGA? )nh t֘O?0= v >ӉJ:hjkrhC pmGڦ&4K[XL<{ [k"}@3r3 =G9.7kvPb~f>٨&!rA3uFBآdy ;]ToD84D)Q[2JR 5L x4kSѬTm>9mRAE1!8A`Kj`/A aQ͚vx1P*,gmDԿg:(4FtEO MJ ֦ZyRk\.|UÔq;e/aaE2+V Nz]7PžڀaPu~@|T8KRY10fD-/%9T2?yf u<%,$4/"{15AX:O;E'2V!?瞤Q_ kԅ)JEQNfsL)n}J;yFdtSBQ#GW,(7phDVJC-}*ͺd8 ,z5eq0-5`LKh4-΄SME*έu8,nIֺ+-| =LZNfyla;dޡKU qx}+Y!z)`Db|˃yU+=qX:x%Sm;6\ B=JK؛o@_E}3jᗌQsfl ʏ#lde\K@}$h͓z+[И2 Gj06v |"IEԵLwZ O3^qM|UJJ4'qPl^mվ\>,=T}E٢Cͬk %AX:P PHJExRfM2%4"pPp\d:: aZ/fxήcT[ :T̍8dtr*Sr0n鴌eB?;Xzow\,/ޢ^g勊45L0y>vIq᝗m/݂C Yg 8",8<'|" !!_@w3 A䝙Y0Kk/sK!͔#xR$4:Nkt_NHJUw3DslhWRD燃1 =\A5a{ +XkwQϤy3j.(j{p-L.׉Nr ^1^8h'k'SCE$,i"]dV3Z~h3l ?a[2FP`T Vb3gd' KV@]0A1 J課wsCrĹ\m~Wu9$?7O!S6# [S֥61D]c e.0.2\Ws)dŒ]3n͗~82Ld;uJe ]Q*}l5^W.9H p7+SÙqV d^+EXr,]!CFBי RWhnϫ-G0|wfY@E>hr0M?zfd!"|' ɕWaJVp>u*YЛ .#I]1z[}F߀:#u,M̱ȒKk:Zkӱ؈qw=k^YUH:yn+{3':|B3$<º8y.C Nx\sEN){cg\8˜Q%'R _#ў`-\=Q x݌^w oi7 Cl:r{wk$@Cښj"51V!ǙZBJ]H۲stXK﹪WDs0:F5 UawG\f34YhZ4tep\68K2ѱ‘7c7|]$-JZApf]ZMmz#\\`HWgrs^g42V8NE鋊c>ujDNƍ.] 7w+iսں}|P`[joVybMKU:Hm8JTKIlva{ ~:݃Ђ!*l2b:?W+VId+u5ZR&q\Jymcp!6b8*7S1)[}'!͐P ZY?2:VD1/ze%%0gr;`r-%C )\*s8rռeZlW |TF"X,F([ Pך\N)5T|6Z-E:bA~q25W<ܪqTƹُ7SygnS-%~CpDcy'iDKeUL* Ck_0^T{&"Hyf]ra=U>ost+E< -iMu=jm`ݸamc_=V^8p0b%[q]ea~kg2tǣ®l~hqPz22ߜ'R1e~ [ /j۸Z~֝G ,_xr8yd':KC \lYn)HiWkgџ]Q3|UDVӲщ G Gh ̌08taj5SN("ql`oG|geۖfy]Bw)* Fw\ eϒ+-m7vքկ8;_ܛ' eԾ]SԄ7:^]}(vvj_tb:Pl]syYhcm9 l}of!5`wT+%4|βl%CԎ9{8eju[^!Jj/Ě:Ok:A^'R h8TӪlҮ9mWX43n)sJ_A<JdԹ IMߥ6ߩ,Ѭ3]&׊}̚I}r&l bɜ/)*Qڡ>_HF3?+7&xKXqa=O1#+!JU9QC/ٹZ[hhvxp6؏K$ϱ"Ǽ5nR3$@9+-0+ٞש7d4v%5ոbK2"96l}IwRjS_zzbQ%U#˜.92[p0Xxdž  ٱ Ҷ3| 1T5!^jܤ% e*AGq+_rVZ߽T@cv; Ly&81,s1vYf{:p BT3l: Qc6씠EyLpZYOb?)m<쮾0. PǼ_X=OnϘ%ȪkYSG~ Κ6yT)S3/ *p 5,x4&H->ƗeVJ|%`Q.3u(.Yբ3" 7YM_WÌ5yPAH>r tl}x\I[15#fQAƇdc +SNg/>ԥOn : ;%9!m,J:5iPJYPQ*=,H /`!D{-7k+Hx1+&i ~d'N?D̪DT&m E ֥>b@hjvaon8nt,+)oT!p!r;Iņ1:BԨ(yI)jJ6:+ U2o}Ǧ$ۉQqD8Gڠ3qh~{-~<ɢ sP N8Ԫvm>}y)P2٤j m"c_&^28CppMo6CpV9<f}Y[Lf{;2 } f6{#3Ɇ5+&D7xdIG0_PCF5ݢIҚXlEk< Ysϊ; >0mZaD^s@`UǮB%(9pP4M]yP?WtNQ6l70\el#>4 hVSJkvC.6#>~ }K:ֵe+ROa[HˆLQXN7 ]d(/_zzZjn[7TYA$KvFxBB?RIzXdհS* 2f/jeX o?mG-aP\Ёi?w |9Bh/ #oYaXsGiiWjKYcf p^)YK WCh%nP 4}SθaɱCqX#B/Vǟ8 k;׳~8;pG7Lt 0}nڑQ۳PH{Miۋ>Nᐚ+~8V=,Dm%G\u, -*bk.6ד(VN7Vm k06C=Ę٣k;AV7< HZv3EQFFwO'g&=(`V줾meyШcQ'59F9"V_~?%T!lLHG 2!WJ!cqd RbDB ㊢)=˶ Iu{mDwbS|ԭ.im>mQgPHDrzDԒ O6 > r%O,;e^Ќ0+=.pM*&sj[( U"zڠ.qaH.p!m)idqϣxi,#T&ܷ[TuκQd 'A==S:P 4G\;[iOu$A,"#,b 8'1owMsȴZq/ l?4J(K)¿lnAdfC($4d|kwkb- `=AwuN0B;kt4; @̪v #κ OY.4 %~!J0fC'Jar Uy]C+X3O5^raYg3`Ucj6& !3c/(ArP煼9?twDõir"'RI))IYz aQ(7#O*E8i<ptEC|rY0v |$l@0,(h]CS\'E((S3A<.rmP x1~6bY$ N>^v @M}dncWDxxuJӌ#W= J,}4Eg{:\>' &$'"ͅJMx"xDMNy0V"-@VvB)EPGB&?UP0`qb}yoi{|Xzq1ԚtpNyt&;3hRlXRiP%ragz~:E+,Gp_`u P!!UsndsdL& ʸ,/N^̫Xڗɲp>5+0Ơ4hm3})X\!ɋI,iKeA5G0#h"[$ GfPڲ}l ׷#& bΦ1*i?j̩ߦ AW-ܓ'b^ H yG"' 06FZخ, 9mFm6R<ϛ2mQ>6 %\r#,@yƻ\_/r4A] %5ZƎ"rZy*; uz^dKLտ̼XHC[(|[O.)@zhr)^bvzNHx("2]?6yae މ\0n%R grO78gm < }HkpLO&@ѭ4bFD|`Tf0ɐq@C!g$"y? ȴz P[^j)ҋ<:˪xz #lT?4sP?Z0j/ɺF4tZlFe״ԏt:8gy.LݵU*ڝy\r3 +\tE=Uɗ0'X(`}h}zj 3f͝3^$,%t7ie; ^qD~nfE\D(?e(j8pZwJU[L㈣ Bm]g؉[Af?$Tqkur58g 'I'zP5Cϛ9 O{Ht.k=:.sigS@wO}|jeEjSH 0Кb26Jlb;fHo8@gƔ@ }Å] #)l;An o,O}RjZ|imK)290%R[ZqOд^Y~#<ΈF?NA셩ޜU +r9G!&DY|A~_\Jfּo mJЩL։-wX^`͆/09CJ 7\ACj7{Dh{2x+e;f^ ma'<*˶TDMALF0ME֭˴گ<.*݂lgG"6$m@S;ȇWyYsFsd k0A#徜xt`Ǥۚ4{mFFm|XVn7bIĩ1%G? 7i*pp_g{6,<ZRHݽ=p6}7oCpY~UMq`A))e+8(4nm[.E/=!b@EkD {U:sd/>* S3j]PF:4(-!ʖȽ \l$)xV,/ٌ۫lʜbr񹘙V h(k)Kǡ8VG*U?]~ȏsk3s="솟;ֿbomf\<{P V@E`pכK1U}\7beřWџze䞥|aۉ3#P42 rWo[%ճ<2sGXRt(띁 W}HV>|-.^DrЂP"l`PJ 󩙀Xs݈ByRr~0t #KT# O0sBx_{95)rFB˸p/xtMV p+Xţ oٝayc)k9,q\`gX:Ж2 6^r. 'p>A/ftU-A׊ '=-0W',~/2ѵH`iMm,2I)59<?V ]J' P BM,%V'pƢk1DSѓ1aWxt&N#T8t؛Tap%S$zFwl;C9_U1 su!XkM;ȡ%w`K ;g(巑c?_'M*EM|mt5vE[Յ CgiJ|fBF?1U܇a=B ;hqS\d1yQ;tFwVy.zUxa5bH, h֗CXb#]$&tr *$k@FT@G8n}ł.~|oC5Cr!]0>n]X.M93cw~ Jѭ;f)4qZ3-aj,b^^9]Z^ܮ:5l".serD&-$]Uҿ"nZfiLƐ![[Ip9j*I BƪRtI O.t'^9JFW{Q ,DŔkhچ0|4ebxW{ʚ(NDVك 9K#֚$oj-[>1gEƼH1x\}F1dp,J 2 LҦ'K <(-e@Hd̤򆚀=`K@߿R4c絉\LNmZs4y4$xZrl{$5HhF,${3GTw_v9{wzb풩c#pWs踽"ʵwt:*/e [D2Rz!kijz\fqnl"3<>#gb/\m| f ?ePNGN>qMCXDJںO;&ϚX%>G:Hĺ-vhžHT"ht@Zvb?d{Ju ISDDt`,~3|1 O-' ۪KO6#qGP;Ņ0ίl7 >^WgA-q$,?%]3@=;;v}cbO3w3imjj4cHvxw{iY$%kZQ {WTsP^/FbTb:"$al?&=yd̒e j]@}x@^hk=QOJ^Y:6iA ][%8C@΋WqAmVtUѱt7H4ޟMo8㡷JKIbJ;0~]xZjB{o`02`;l\6&v#}]W3]6'kڴ < q)7 vV+=o^R vE5Kh}ۍx#5|]޹0>b} 3I L<43v5r7Y4BDR`1iM6 ?#6J+?h'O3bZS1f޺T7ɛPEʌTs8`~*Z~ j"ו"&'N8ky+7 MUpC.Ŏ&@mAptD\x!(ŗg\$C(`&y()q=RYr WlOeqNƫg5dlM@:لp@kvvl3T%jV,WAH]5'XVL_G7zrؖ+-4"| 4MZ-Aċ7P^f oW>LaCw~`5Rl Shڋ)?3U@*}q(}#nPRIOe,Bm)U3z*tS!;dQXcWZޢU;GXt=K}DaL:Q n>E3=XRI{>p_"מz}(S@BId^ /.2su LxT˓Y~ubkjSףؾ3ynԴIR)LkkUq!Ңafyۋ2|Ə`ۉj8|);R}Y{ =pN}bjS^?nlYcN^pYk<sT:.1虸uB?2q@q7 y#Lÿ;*]i(g.:1$6߉ ^%6S8&^Qz$!ddBzM `\u,:QrpMgq?'6槤lgƇ}X4Ag)VSun8UGS9Ȃw=ia&QI/0$ rzVXe+}јIz,&L#g*')W1V3`x`Z}A䣨۞Ƥ >y`YEo+XlS15i4$x6UUÓL1t !5 I(9f|i|Y꫒ ,89>jkPx) ~)V]˜k _7"a 1YuxM")' &E SuQޗO`JU“3x 䌔"Q\YnKc[4PUM8M-^xh٩x_o3ZD!P&rWw^?!o-͈rAjsFiPZO)I LnG3% ݟkƔ0MT?I~tI5/gg=>rۮ #}UV~!)D@vž:^Mw@"~* n\ntw O.ԛA{>{r\I'ߘj̐Q Ȉ3X5q+37&[l0)^ a-m<+ԇ2O'Xs#Ζkh̆<Xä _+~m=2hc pzu28޸c3b#[K(r:lƑ 7l.=-vIE+ $bEOm2 C(rXtbgh$ U10`j(ਿtQjAe_Ր!aNĜYVM%ʨt=8 -̲$:\?MPu፛αcZrטmӇf<*gp*jB9 ҁ>?yqz\c>{P"hq ]7`'{W'"Þwԇy 7$MOԍD8" ghBS/?qֹC~M!Cd6few!m<4u$K5Y7Hz Y@U{H _Rav4&;A8R. /?v?kni[^&5,6W虻bt ^$`e@".1g;6 zF1v$2'N?DW0 E۹MA׌3"6Tc?`z0/Vcn6HcW k,?H3':RmU_6>ܞB$04YiǫXuFf'D,N./\ӱ+ _u?q(NGTޢY;#3b[pS$LyqFދ]XQ^[[}F0HTfM/=1_)B r߀¨tXjB,\oEH_#{%9Ԡ̨FIRT9([UA Nx Luv5Voܹ^8 ;VyпDH7h~o=vdhkDJQ )t w\?W8X: DAӘ=21i=L$64#<6vR/3z. $uȆ{r(i]c}\0J^,^8)7#<m'=Ӊ2gqVMUM T%HH`x_LmB/+aY{/W`,mG)tQI%~iy/ė*v)8RS߻*=Ox^@D \tZ+w;N\*] Q.~ Jd 3q2oaxe([> HA֑&Wa7Ur-ƪR8a]|8qLE P8掳K = 2WLh3Yİ!IxE)أ3ə"ȔJ5I늽{)g8ZLTJ`v"7I߮\e_ͭ 4[~vzYP0 6D uݾtEy4F]YbF:XsMu8ݤYTg>%$YByrA4[_á4Uagޝ`BeS'#4#xN9*f8sC2%-Ghq.>|4X#|Ra-b-`uų`kܱ)kX`$]3PjNݸIj16"XH jYNQ\*|F}gRm4A3PT_~:~Ƭ%"ry*} YXBr ]U/^+!ggu"9]nmM2)@gg[ªsvO?%ϣ,MrE2T?NzJ/F;9=Th0y>+0S͖HeBi $0ᷗhA]9fo+[L̓n44Sd;BUBfξJTg`P$E_Myʆ*Qu;/kENZ֧Z ZM=w   z(3 v KmU'P#o)3Oi@A5יUƨqƄJ@`DN vPy4áo9Es~w%c83U1QQĎm ɾx/VG_;V䚏=,;r&Y=lX磇b%ތszQ0S~-dc|6FItAh? VA&l:d0eKhsg1}#[ݖ`:cДq;eS"l1WWtS܏6ˑPք M5%7Xy19H \0uCQ4s^K沦v&og.d 9ГZKUV/\zȜ,y)"ק3!ߍ}k޸ǔH/Ik]۪Ao)R ]zA s*ؓNYJ<@lBIf꘸".כ<~ R`s@BgJp0uD=DgO 4FxpER٤M~]Gx矂5_d F׶)K^ x1$`Fn^{ E&XqpA`=D{<=/]GUkE0]*. ?RˌGWe>DA VNZ._ȳi˾}W%Z^G7kɔAVȀLcͬ?ưЁqNK,JZ憋Pz]G*Jεxf8}bqX 5*enL \%bи @C$i-ffc(n3V?ݯJxoܨh3=y{%n[MC!\n287g3w.| s_hSQ_+Y2'=gLw(᠗fpdofip^O;`lZ RuZ'y<9V^}SI#KixuzcӇ0(&q'qo|ɐve7f L}g\x󨺜ÛzZOfO(> ~F(_KV{ݿкYt@|$#]Ta,vn&¾,G·3lm75I"FmHR99l(m}ى$`z|*/;Irzfcf_%AmldU(+C}bn̤̍IPņ]:7=ݜRb*hyu;rTHJM8'q6IMH|j@R_GpϤf]zjieGBP%b}-=v|; :\O z7P 8Y'|}\;kcP9hz!zŞ+ifLPK HMò[Ȓ0T~/ؖj'TJtkev'ɓ1,a(t/2 v2B^ڨ2-ZS*p脌zn̳ѓQ\8U见O'y^P#vX{5TBLj@gKDStRz];هbR*:f8UgcuVOش k"7|vm6bXu WwËdۻ5O[<k0EAS6@Fd̞GeLueCym~u`OaǝpZ0A]oUyBeKF2hW;xYh=" 5t}NM F^X_MŭI˸-_Ae3bHKji6X;\֏}>uTWF-ު[jK-AOBJ!*kS쥅dn/g]KCvUY_>0`[v8e&Z{⃌"ڗ6||<8ϝf~2"1R4ܔ|y𓍲 uot6c{紷lMtKlOڣ6Ŀ{!o47ߘ=bcShI<bVU_$uC Q'Ͷ6y@AīR:gcfu .6O,n?g7KECJ Ysi%̦7 $ŝ-&CN'7+If>d!l5 gI݁ 2 $yQwk8 0~,Ka%T1 U ( S?:B!PJѝm]_C*)1d`aX_l\.ScHZ)v\ 3OSQ 9Nl 5OC;ǐ%F<3* 8nÍepTy+:hP&D W%C+=("p*B ?w{NNhikɻ4UplG eU5)In?n@.g78^~x!IRArSK㕽Ӂ$@NAH&4ml_ P8f 8ȼ2П.y la7_7NիIƜ" $wXhh+j9"#~6<ρk7"ci*H!Ce_/A`߃ȂI_h.BUˎ"Tos'LсMﭼ|i7?J࠙ - 'c^pWDzG&Z6МpO_SrBZae bqՔҍ\=*d[;{gyWYtS&+p <] r{IcK;2~Mu~{4(;= Lm a+eN@VZGbH,w8E jVm\a*aEHG?CrDZ+ok8صQd~s%lg0e1> 2DR(ZOffѷʃ"d ՗ZFrMj&Lc 7W$9&F;N\9Id lDϮQB+9UL.RH$[3g׭S©Wu M$hg\#2?A&.N 8"JV{SU?0 ^,6~j#I2R1 ]GnWCq"Ү8v4E`S?K&Wۯ*B~}Q|oa RgөSA6 'qT%L~~}cg+`L ճ)(c)qAGnRRb5pm&FA6Wֲػ聝zam !ҳrop$ ZsYʗt9Y^ZK*w$tZcPk s=?瑶D3. ی0 "%\j^MqDݪzn堼內;FE# v[S+%f%J}t7r:bnR6XxMA*gFeG=l?Ⱥ͏an8 _;zpq:а@N!ݗ4Q)C1õ"i?H]QV_7} A - @E @5Zҵ0?:nng,ԷOP.mDŽ2˭ZT+qn_DD`hYxﶻYMi)ٓ,l#CteH g7#D B[XcT$ L*!g>Bt2wB)_2p~wAM7mfISX[0aDS#X f?Qg*9vsK}_m殝8It#{(7y /#`[g6V`u92 : »_w zB2Ƃo!ҩy̿h"jq'eGx.O-Pg.?xJ}T |J %Efղ)1i\SNtRp_^Qf::{x>-85¿#F#BB:bF{Ya|jPƜ CR:EtsJ~8 g"D3M lV}ˇ= ^O_p4CP'P̅6.XZee4K;#=EݠzmMzsuko7D9Ks$/LSnCʯ#3題a^De}Qք.G BZW _yۺC*7*j1p#,Q~sHaV-݂-ta'xgrAH\Fc`@MnrMI/Cf>D-U@:VDC[9I~Wē!T0ylX a^s^Po~MpKcA3&Srքb%z۔r) hY6 !@- j*'Rp%M`K.C$k&˙_)Nf:54tG\J nfpg&`ʳ3ʢ^5WBU2jCwD1Ч 5dFJ/×xtoU;_cg9՚-p9bq+wU 7{I ȼsˆUi Ԣ*)FʝeЎ-sKjLW^FfХEaY  ͥ~S\'jR( K=3ZW[3@.$Rc[{=0>T\3 ~Oc,qMHŵ2;Z߼ $(jũY*&h ^Twr9\A/sϐ QscB/O]4n\q<~y&|;jJJy+AkCI=P]β '\R U]cc;,#ؘ޾{,=>ʁo4ySr;h t^2< ~ L50@5ht @G>peIv-p٭o8n{v@2:"x5ϛ`e[`b~^ C_%._O͊ g&ّOfvZZԹ \{4Bf-B[qugvLkʾB(Q&L99 y4ԯ*m7+Av$F)asQꤓϗr^Ի?%lWQ޳~l0 ķ*K<\{\A1(|^]\eX+/tե伊IndT>CEݩdbE'bT=1ѡ0q痈+f=UNDQ2e{[䰶QU3D%n7ʒ;pV3aG.S9/O%0;XAXyPH@? EMA׌~- UY6L~s'=;4/:Ut_B" 4-BP'-։S1#z֚84[ʾw&krhej:TWyխN(y XWnlOp6uG-hrImd]&j[[0 EV ܼ} R6κ#SdBqW+T &KjVkdhȤK6@n*f ~VAP/<s8[!_hHIL_=Y`PkPέzVGR},WB uGu;gϤԵ<֕puȸj^\"JŸ_,rrE7 N*v~n :+5T/zSLPKI^NUXRp7t0 l:OUf^Đ^S:q;JP,h{٭b2;_Ȣ˜*m~'jk nU zŎ1esBtŴIpzމ66_Kߡ/"N'5o3xEtOݦ'a0߾OY8qYNEn iOAP8͙EeP"1`!8g:$3[yQY3 X(4/v<==akSڀFZ$zTrqNUNΏg~jm1^{sE1|d ɿ6 VJd~ ^=Q.њQ^W] |K3;4W(f77eoǢ7^ֳF4:ݨf,쑆/ez;rLHq twPl%^.pI ~X"9DԷBO;.17`gzVtãjHLf#Ay VjOUD(M [5<Y&U@zFP'3^i(M~=j_Gr&CG[2aʘtJr"yd17^<8WHրʥe:%NWpʁ@V0򶸙94Ɠ9`~)mcZNI l_9Ǎc# bh"q'{%;LUU. v! =n0E0b$~S_O'w+\k.@［ջUƭriD?f3*i9'&'[[?!K"!I*lR; 6Qzƚc?>Dziޮ\2dFחeP|ZC޶n-bc;|I!EЁ+SN+1Jǵ\5]옧G]юF 8