python2-ipaclient-4.5.4-10.sl7_5.1> H HtxGFZ5 ?*}},I ǥg{Uɲ&fQ ͋v6C*'23aa9e7e80b37372849b7510971b914fd0481ab7А384dT讈EZ5 ?*}}~9<*?wmŹ/ɗa Lop0N{|><$?d % I,0ARY j   D $ c 8,P x : (8'9D':LM'B4G4H@$IKpXNDYNLZNp[Nt\N]Y^|bd\eafdlftuvwxyCpython2-ipaclient4.5.410.sl7_5.1Python libraries used by IPA clientIPA is an integrated solution to provide centrally managed Identity (users, hosts, services), Authentication (SSO, 2FA), and Authorization (host access control, SELinux user roles, services). The solution provides features for further integration with Linux based clients (SUDO, automount) and integration with Active Directory based infrastructures (Trusts). If your network uses IPA for authentication, this package should be installed on every client machine.Zsl7.fnal.govyJScientific LinuxScientific LinuxGPLv3+Scientific LinuxSystem Environment/Librarieshttp://www.freeipa.org/linuxnoarch1 88||G*^^rLLi=D=DR9b9 c c{FF) D KK H HH1AAqq*AA L! R RvN<u<<~~rttr^^ i l + +<u"u" ciPP_jRRqHqH&$$5t+a+a)$$gpOOiyiy,&`&`90(0(#""~]]Os==L4AAtt{{(## E E_EkEk(eJJ  |]]HHE:%:%k.SS;//1P@<@<$x!!b`NqNq~gbbb7d=d=*y$:$::k00%EEMrrOJJ  ciPP_jRRqqz\__&%K%K1.++5+o+o)$$u//gOOii-&&9)0J0J#""O>>NTCC-||{{+Q%n%n E E_5EE(eK K   ccHHE:G:GkrT9T9;//1P@^@^$x!!bNNPmSmScUUaxx*$\$\:00Ggg~)ddtataב  ciPP_jRRqqz\__&%K%K1.++5++)$$xIEEgOOii-&&9)0J0J#""O>>NTCC-||{{+Q%n%n E E_5EE(eK K  | ccHHE:G:GkrT9T9;//1P@^@^$x!!bNN tPmSmScUU|;;*$\$\:00Ggg>j}j}tata!!c+P^P^VJpJp,oWoWCC3A)))$$|Oii(&4&4`LL6e\e\)$b$b4--uWWJ;;I?$?$ll(## B B[CBCB b bU&EOEOppp&&?6O6OlLTgTgH;;$Q!'!'\JJFw;|;|bdd'"<"<5--O B:B:u%u%YY _ _HPS>S>- : {KAA큤A큤A큤AA큤A큤A큤A큤A큤A큤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-4.5.4-10.sl7_5.1.src.rpmpython-ipaclientpython2-ipaclient@      ipa-client-commonipa-commonpython(abi)python-dnspython2-ipalibrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)4.5.4-10.sl7_5.14.5.4-10.sl7_5.12.71.12.0-34.5.4-10.sl7_5.13.0.4-14.6.0-14.0.4-14.0-15.2-14.11.3Zz@Z̧@Zz@Z\ZV@Z1@Z%8ZYZ@Y@Y+@Y@YX@YY@Y@Y{'@Yf@YRHYJ_YBvYA%@Y7Y7Y%uYYYY @Y.XXQ@XX@XۡXP@XX,X@X|@X|@XS@XOXOXN@XX2@WW@W@WiWQW@W@WWE@W W@W~Wv[@Wj}Wj}WEWDB@WDB@W>@W@V@VVZV@U@UYU@Uݪ@Uݪ@Uݪ@UoUU(UK@Ub@UJ@UU @U hTE@T T}TTZ@TZ@Tp@T5T@TuTto@TsTl@Td@Ta@T[bTG@TG@TFJT)IT%U@T$TSS:@S2@S1oS!S!S L@S L@Sc@SS @Rb@R@R@RUR@RRx@RR=RʚRƦ@RkRv@RG@RiRz/@RxRsRo@Ro@R^RW@RNR@-@R/ R-@R(r@R7RZ@R R R@R@R@R@R@R6QQQ'@Q@QvwQu&@Qm=@QZ@QVQ(@Q@PPPPPx@Px@PnPj@P\VPG>P@@P4P.2@PP @M6@M.@M.@M.@M-M M@L!LfLNLdLLLzLe3La?@LD>@L#HL#HL@K/KՀ@KK@KKs@Kie@K`*KK@K @JJ@J@J@JJB@J{IIIm@I1Iq@IKIFFI9I1.Ih@IIP@H@HXHO@H-w@H HHH@G߮GGgGs@G@G@G@G}G}G}GG@GC@GkGDG<4G)G(n@G3G@GJF@FS@FFuF@Scientific Linux Auto Patch Process Florence Blanc-Renaud - 4.5.4-11.el7Florence Blanc-Renaud - 4.5.4-10.el7Florence Blanc-Renaud - 4.5.4-9.el7Florence Blanc-Renaud - 4.5.4-8.el7Florence Blanc-Renaud - 4.5.4-7.el7Alexander Bokovoy - 4.5.4-6.el7Alexander Bokovoy - 4.5.4-5.el7Pavel Vomacka - 4.5.4-4.el7Rob Crittenden - 4.5.4-3.el7Felipe Barreto - 4.5.4-2.el7Pavel Vomacka - 4.5.4-1.el7Felipe Barreto - 4.5.0-21.el7.2.2Felipe Barreto - 4.5.0-21.el7.2Pavel Vomacka - 4.5.0-21.el7.1.2Pavel Vomacka - 4.5.0-21.el7.1.1Pavel Vomacka - 4.5.0-21.el7.1Pavel Vomacka - 4.5.0-21.el7Pavel Vomacka - 4.5.0-20.el7Pavel Vomacka - 4.5.0-19.el7Pavel Vomacka - 4.5.0-18.el7Pavel Vomacka - 4.5.0-17.el7Pavel Vomacka - 4.5.0-16.el7Pavel Vomacka - 4.5.0-15.el7Pavel Vomacka - 4.5.0-14.el7Pavel Vomacka - 4.5.0-13.el7Pavel Vomacka - 4.5.0-12.el7Jan Cholasta - 4.5.0-11.el7Jan Cholasta - 4.5.0-10.el7Jan Cholasta - 4.5.0-9.el7Jan Cholasta - 4.5.0-8.el7Jan Cholasta - 4.5.0-7.el7Pavel Vomacka - 4.5.0-6.el7Jan Cholasta - 4.5.0-5.el7Jan Cholasta - 4.5.0-4.el7Jan Cholasta - 4.5.0-3.el7Jan Cholasta - 4.5.0-2.el7Jan Cholasta - 4.5.0-1.el7Jan Cholasta - 4.4.0-14.7Jan Cholasta - 4.4.0-14.6Jan Cholasta - 4.4.0-14.5Jan Cholasta - 4.4.0-14.4Jan Cholasta - 4.4.0-14.3Jan Cholasta - 4.4.0-14.2Jan Cholasta - 4.4.0-14.1Jan Cholasta - 4.4.0-14Jan Cholasta - 4.4.0-13Petr Vobornik - 4.4.0-12Jan Cholasta - 4.4.0-11Jan Cholasta - 4.4.0-10Jan Cholasta - 4.4.0-9Jan Cholasta - 4.4.0-8Jan Cholasta - 4.4.0-7Jan Cholasta - 4.4.0-6Jan Cholasta - 4.4.0-5Jan Cholasta - 4.4.0-4Jan Cholasta - 4.4.0-3Petr Vobornik - 4.4.0-2.1Petr Vobornik - 4.4.0-2Jan Cholasta - 4.4.0-1Jan Cholasta - 4.4.0-0.2.alpha1Jan Cholasta - 4.4.0-0.1.alpha1Jan Cholasta - 4.3.1-0.201605241723GIT1b427d3.1Jan Cholasta - 4.3.1-0.201605241723GIT1b427d3Jan Cholasta - 4.3.1-0.201605191449GITf8edf37.1Jan Cholasta - 4.3.1-0.201605191449GITf8edf37Jan Cholasta - 4.2.0-16Jan Cholasta - 4.2.0-15Jan Cholasta - 4.2.0-14Jan Cholasta - 4.2.0-13Jan Cholasta - 4.2.0-12Jan Cholasta - 4.2.0-11Jan Cholasta - 4.2.0-10Jan Cholasta - 4.2.0-9Jan Cholasta - 4.2.0-8Jan Cholasta - 4.2.0-7Jan Cholasta - 4.2.0-6Jan Cholasta - 4.2.0-5Jan Cholasta - 4.2.0-4Jan Cholasta - 4.2.0-3Jan Cholasta - 4.2.0-2Jan Cholasta - 4.2.0-1Jan Cholasta - 4.2.0-0.2.alpha1Jan Cholasta - 4.2.0-0.1.alpha1Jan Cholasta - 4.1.0-18.3Alexander Bokovoy - 4.1.0-18.2Jan Cholasta - 4.1.0-18.1Martin Kosek - 4.1.0-18Jan Cholasta - 4.1.0-17Jan Cholasta - 4.1.0-16Jan Cholasta - 4.1.0-15Jan Cholasta - 4.1.0-14Jan Cholasta - 4.1.0-13Jan Cholasta - 4.1.0-12Jan Cholasta - 4.1.0-11Jan Cholasta - 4.1.0-10Jan Cholasta - 4.1.0-9Jan Cholasta - 4.1.0-8Jan Cholasta - 4.1.0-7Jan Cholasta - 4.1.0-6Jan Cholasta - 4.1.0-5Jan Cholasta - 4.1.0-4Jan Cholasta - 4.1.0-3Jan Cholasta - 4.1.0-2Jan Cholasta - 4.1.0-1Jan Cholasta - 4.1.0-0.1.alpha1Petr Vobornik - 4.0.3-3Jan Cholasta - 4.0.3-2Jan Cholasta - 4.0.3-1Martin Kosek - 3.3.3-29Martin Kosek - 3.3.3-28Martin Kosek - 3.3.3-27Martin Kosek - 3.3.3-26Martin Kosek - 3.3.3-25Martin Kosek - 3.3.3-24Martin Kosek - 3.3.3-23Martin Kosek - 3.3.3-22Martin Kosek - 3.3.3-21Martin Kosek - 3.3.3-20Martin Kosek - 3.3.3-19Martin Kosek - 3.3.3-18Martin Kosek - 3.3.3-17Martin Kosek - 3.3.3-16Daniel Mach - 3.3.3-15Martin Kosek - 3.3.3-14Martin Kosek - 3.3.3-13Martin Kosek - 3.3.3-12Martin Kosek - 3.3.3-11Martin Kosek - 3.3.3-10Martin Kosek - 3.3.3-9Martin Kosek - 3.3.3-8Daniel Mach - 3.3.3-7Martin Kosek - 3.3.3-6Martin Kosek - 3.3.3-5Martin Kosek - 3.3.3-4Martin Kosek - 3.3.3-3Martin Kosek - 3.3.3-2Martin Kosek - 3.3.3-1Martin Kosek - 3.3.2-5Martin Kosek - 3.3.2-4Martin Kosek - 3.3.2-3Martin Kosek - 3.3.2-2Martin Kosek - 3.3.2-1Martin Kosek - 3.3.1-5Martin Kosek - 3.3.1-4Martin Kosek - 3.3.1-3Martin Kosek - 3.3.1-2Rob Crittenden - 3.3.1-1Rob Crittenden - 3.3.0-7Martin Kosek - 3.3.0-6Martin Kosek - 3.3.0-5Martin Kosek - 3.3.0-4Martin Kosek - 3.3.0-3Martin Kosek - 3.3.0-2Martin Kosek - 3.3.0-1Martin Kosek - 3.3.0-0.2.beta2Martin Kosek - 3.3.0-0.1.beta2Martin Kosek - 3.2.2-1Martin Kosek - 3.2.1-1Rob Crittenden - 3.2.0-2Rob Crittenden - 3.2.0-1Rob Crittenden - 3.2.0-0.4.beta1Rob Crittenden - 3.2.0-0.3.beta1Rob Crittenden - 3.2.0-0.2.beta1Martin Kosek - 3.2.0-0.1.pre1Kevin Fenzi 3.1.2-4Kevin Fenzi - 3.1.2-3Fedora Release Engineering - 3.1.2-2Rob Crittenden - 3.1.2-1Martin Kosek - 3.1.0-2Rob Crittenden - 3.1.0-1Martin Kosek - 3.0.0-3Rob Crittenden - 3.0.0-2Rob Crittenden - 3.0.0-1Rob Crittenden - 3.0.0-0.10Martin Kosek - 3.0.0-0.9Rob Crittenden - 3.0.0-0.8Rob Crittenden - 3.0.0-0.7Rob Crittenden - 3.0.0-0.6Alexander Bokovoy - 3.0.0-0.5Rob Crittenden - 3.0.0-0.4Martin Kosek - 3.0.0-0.3Alexander Bokovoy - 3.0.0-0.2Rob Crittenden - 3.0.0-0.1Rob Crittenden - 2.2.0-1Rob Crittenden - 2.1.90-0.2Rob Crittenden - 2.1.90-0.1Alexander Bokovoy - 2.1.4-5Martin Kosek - 2.1.4-4Alexander Bokovoy - 2.1.4-3Alexander Bokovoy - 2.1.4-2Rob Crittenden - 2.1.4-1Rob Crittenden - 2.1.3-8Alexander Bokovoy - 2.1.3-7Alexander Bokovoy - 2.1.3-6Fedora Release Engineering - 2.1.3-5Alexander Bokovoy - 2.1.3-4Alexander Bokovoy - 2.1.3-3Alexander Bokovoy - 2.1.3-2Alexander Bokovoy - 2.1.3-1Alexander Bokovoy - 2.1.2-1Rob Crittenden - 2.1.0-1Simo Sorce - 2.0.1-2Rob Crittenden - 2.0.1-1Rob Crittenden - 2.0.0-1Rob Crittenden - 2.0.0-0.4.rc2Rob Crittenden - 2.0.0-0.3.rc1Rob Crittenden - 2.0.0-0.1.rc1Fedora Release Engineering - 2.0.0-0.2.beta2Rob Crittenden - 2.0.0-0.1.beta2Rob Crittenden - 2.0.0-0.2.beta.git80e87e7Rob Crittenden - 2.0.0-0.1.beta.git80e87e7Rob Crittenden - 1.99-41Adam Young - 1.99-40Simo Sorce - 1.99-39Simo Sorce - 1.99-38Rob Crittenden - 1.99-37Rob Crittenden - 1.99-36Rob Crittenden - 1.99-35Jr Aquino - 1.99-34Simo Sorce - 1.99-33Rob Crittenden - 1.99-32Rob Crittenden - 1.99-31Rob Crittenden - 1.99-30Rob Crittenden - 1.99-29Rob Crittenden - 1.99-28Rob Crittenden - 1.99-27Rob Crittenden - 1.99-26Rob Crittenden - 1.99-25Adam Young - 1.99-24Rob Crittenden - 1.99-23Rob Crittenden - 1.99-22Rob Crittenden - 1.99-21Rob Crittenden - 1.99-20Rob Crittenden - 1.99-19Jason Gerard DeRose - 1.99-18Jason Gerard DeRose - 1.99-17Jason Gerard DeRose - 1.99-16Rob Crittenden - 1.99-15Jason Gerard DeRose - 1.99-14Rob Crittenden - 1.99-13Rob Crittenden - 1.99-12Rob Crittenden - 1.99-11Rob Crittenden - 1.99-10Rob Crittenden - 1.99-9Jason Gerard DeRose - 1.99-8Rob Crittenden - 1.99-7Rob Crittenden - 1.99-6Rob Crittenden - 1.99-5Rob Crittenden - 1.99-4Rob Crittenden - 1.99-3Rob Crittenden - 1.99-2Rob Crittenden - 1.99-1Tomas Mraz - 1.2.1-3Dan Walsh - 1.2.1-2Simo Sorce - 1.2.1-1Simo Sorce - 1.2.1-0Ignacio Vazquez-Abrams - 1.2.0-4Simo Sorce - 1.2.0-3Simo Sorce - 1.2.0-2Rob Crittenden - 1.2.0-1Simo Sorce - 1.1.0-3Rob Crittenden - 1.1.0-2Rob Crittenden - 1.1.0-1Rob Crittenden - 1.0.0-5Rob Crittenden - 1.0.0-4Rob Crittenden - 1.0.0-3Rob Crittenden - 1.0.0-2Rob Crittenden - 1.0.0-1Rob Crittenden 0.99-12Rob Crittenden 0.99-11Rob Crittenden 0.99-10Rob Crittenden 0.99-9Rob Crittenden 0.99-8Rob Crittenden 0.99-7Rob Crittenden 0.99-6Rob Crittenden 0.99-5Rob Crittenden 0.99-4Rob Crittenden 0.99-3Rob Crittenden 0.99-2Rob Crittenden 0.99-1Rob Crittenden - 0.6.0-2Karl MacMillan - 0.6.0-1Karl MacMillan - 0.5.0-1Rob Crittenden - 0.4.1-2Karl MacMillan - 0.4.1-1Karl MacMillan - 0.4.0-6Rob Crittenden - 0.4.0-5Rob Crittenden - 0.4.0-4Karl MacMillan - 0.4.0-3Karl MacMillan - 0.4.0-2Karl MacMillan - 0.2.0-1Rob Crittenden - 0.1.0-3Rob Crittenden - 0.1.0-2Karl MacMillan - 0.1.0-1- Added Source: ipa.ini --> Config file for automated patch script- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1) - Add a notice to restart ipa services after certs are installed - Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode - Fix OTP validation in FIPS mode - Increase the default token key size - Revert "Don't allow OTP or RADIUS in FIPS mode" - Log errors from NSS during FIPS OTP key import - Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type - ipa-replica-install: make sure that certmonger picks the right master - Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface - replica-install: pass --ip-address to client install- Resolves: #1540361 ipa-advise for smartcards is out-of-date - ipa-advise for smartcards updated- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page - Add --force-join into ipa-replica-install manpage - Resolves: #1457876 ipa-backup fails silently - Changed ownership of ldiffile to DS_USER - Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running - Checks if Dir Server is installed and running before IPA installation - Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values - WebUI: Add positive number validator - WebUI: change validator of page size settings - WebUI: fix jslint error- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object - WebUI: make keytab tables on service and host pages writable - Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option - Idviews: fix objectclass violation on idview-add - Resolves: #1451576 ipa cert-request failed to generate certificate from csr - Fixing the cert-request comparing whole email address case-sensitively.- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received - adtrust: filter out subdomains when defining our topology to AD - Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled - Don't allow OTP or RADIUS in FIPS mode - Resolves: #1494226 IPA User Details not being displayed in WebUI - Fix cert-find for CA-less installations - Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid - Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal - ipa-getkeytab man page: add more details about the -r option - Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None) - ipaserver/plugins/trust.py; fix some indenting issues - trust: detect and error out when non-AD trust with IPA domain name exists - ipaserver/plugins/trust.py: pep8 compliance - Resolves: #1511019 ipa-restore broken with python2 - Fix ipa-restore (python2) - Resolves: #1511607 ipa-backup does not backup Custodia keys and files - Backup ipa-custodia conf and keys - Resolves: #1512482 kra install fails after ipa cert renewed - Don't use admin cert during KRA installation - Prevent set_directive from clobbering other keys - pep8: reduce line lengths in CAInstance.__enable_crl_publish - installutils: refactor set_directive - Add tests for installutils.set_directive - Add safe DirectiveSetter context manager - Old pylint doesn't support bad python3 option - Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode - Fix ca less IPA install on fips mode- Resolves: #1520279 - rebuild against samba 4.7- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads - Resolves: #1378892 host-find slowness caused by missing host attributes in index- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree. - ldap: limit the retro changelog to dns subtree - Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead of "CA:FALSE" IPA CA CSR - Include the CA basic constraint in CSRs when renewing a CA - Resolves: #1493145 ipa-replica-install might fail because of an already existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX - Checks if replica-s4u2proxy.ldif should be applied - Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default - ds: ignore time skew during initial replication step - ipa-replica-manage: implicitly ignore initial time skew in force-sync - Resolves: #1500218 Replica installation at domain-level 0 fails against upgraded ipa-server - Fix ipa-replica-conncheck when called with --principal - Resolves: #1506188 server-del doesn't remove dns-server configuration from ldap- Drop workaround for building on AArch64 (#1482244) - Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)- Resolves: #1461177 ipa-otptoken-import - XML file is missing PBKDF2 parameters! - Resolves: #1464205 NULL LDAP context in call to ldap_search_ext_s during search in cn=ad, cn=trusts,dc=example,dc=com - Resolves: #1467887 iommu platform support for ipxe - Resolves: #1477178 [ipa-replica-install] - 406 Client Error: Failed to validate message: Incorrect number of results (0) searching forpublic key for host - Resolves: #1478251 IPA WebUI does not work after upgrade from IPA 4.4 to 4.5 - Resolves: #1480102 ipa-server-upgrade failes with "This entry already exists" - Resolves: #1482802 Unable to set ca renewal master on replica - Resolves: #1484428 Updating from RHEL 7.3 fails with Server-Cert not found (ipa-server-upgrade) - Resolves: #1484826 FreeIPA/IdM installations which were upgraded from versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and thus startup of Web UI fails - Resolves: #1486283 TypeError in renew_ca_cert prevents from swiching back to self-signed CA - Resolves: #1469246 Replica install fails to configure IPA-specific temporary files/directories - Resolves: #1469480 bind package is not automatically updated during ipa-server upgrade process - Resolves: #1475238 Use CommonNameToSANDefault in default profile (new installs only) - Resolves: #1477703 IPA upgrade fails for latest ipa package- Use OpenJDK 8 to bootstrap on AArch64 until RH1482244 is resolved in buildroot - Resolves: #1470177 - Rebase IPA to latest 4.5.x version - Resolves: #1398594 ipa topologysuffix-verify should only warn about maximum number of replication agreements. - Resolves: #1404236 Web UI: Change "Host Based" and "Role Based" to "Host-Based" and "Role-Based" - Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running - Resolves: #1451576 ipa cert-request failed to generate certificate from csr - Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values - Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page - Resolves: #1463186 IPA shouldn't allow objectclass if not all in lower case - Resolves: #1478322 user-show command fails when sizelimit is configured to number <= number of entity which is user member of - Resolves: #1496775 Enterprise principals should be able to trigger a refresh of the trusted domain data in the KDC - Resolves: #1502533 Changing cert-find to go through the proxy instead of using the port 8080 - Resolves: #1502663 pkinit-status command fails after an upgrade from a pre-4.5 IPA - Resolves: #1498168 Error when trying to modify a PTR record - Resolves: #1457876 ipa-backup fails silently - Resolves: #1493531 In case full PKINIT configuration is failing during server/replica install the error message should be more meaningful. - Resolves: #1449985 Suggest CA installation command in KRA installation warning- Resolves: #1477367 ipa-server-upgrade timeouts on wait_for_open ports expecting IPA services listening on IPv6 ports - Make sure upgrade also checks for IPv6 stack - control logging of host_port_open from caller - log progress of wait_for_open_ports - Resolves: #1477243 ipa help command returns traceback when no cache is present - Store help in Schema before writing to disk - Disable pylint in get_help function because of type confusion.- Resolves: #1477178 - [ipa-replica-install] - 406 Client Error: Failed to validate message: Incorrect number of results (0) searching forpublic key for host - Always check peer has keys before connecting - Resolves: #1482802 - Unable to set ca renewal master on replica - Fix ipa config-mod --ca-renewal-master - Resolves: #1486283 - TypeError in renew_ca_cert prevents from swiching back to self-signed CA - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca) - Resolves: #1480102 - ipa-server-upgrade failes with "This entry already exists" - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists - Resolves: #1484826 - FreeIPA/IdM installations which were upgraded from versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and thus startup of Web UI fails - Adds whoami DS plugin in case that plugin is missing - Resolves: #1478251 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5 - Fixing how sssd.conf is updated when promoting a client to replica - Resolves: #1461177 - ipa-otptoken-import - XML file is missing PBKDF2 parameters! - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace - Resolves: #1484428 - Updating from RHEL 7.3 fails with Server-Cert not found (ipa-server-upgrade) - Backport 4-5: Fix ipa-server-upgrade with server cert tracking- Resolves: #1477703 IPA upgrade fails for latest ipa package - Restore old version of caIPAserviceCert for upgrade only- Resolves: #1475238 Use CommonNameToSANDefault in default profile (new installs only) - Restore old version of caIPAserviceCert for upgrade only- Resolves: #1455946 Provide a tooling automating the configuration of Smart Card authentication on a FreeIPA master - smart-card advises: configure systemwide NSS DB also on master - smart-card advises: add steps to store smart card signing CA cert - Allow to pass in multiple CA cert paths to the smart card advises - add a class that tracks the indentation in the generated advises - delegate the indentation handling in advises to dedicated class - advise: add an infrastructure for formatting Bash compound statements - delegate formatting of compound Bash statements to dedicated classes - Fix indentation of statements in Smart card advises - Use the compound statement formatting API for configuring PKINIT - smart card advises: use a wrapper around Bash `for` loops - smart card advise: use password when changing trust flags on HTTP cert - smart-card-advises: ensure that krb5-pkinit is installed on client - Resolves: #1475238 Use CommonNameToSANDefault in default profile (new installs only) - Add CommonNameToSANDefault to default cert profile - Resolves: #1464205 NULL LDAP context in call to ldap_search_ext_s during search in cn=ad,cn=trusts,dc=example,dc=com - NULL LDAP context in call to ldap_search_ext_s during search- Resolves: #1469246 Replica install fails to configure IPA-specific temporary files/directories - replica install: drop-in IPA specific config to tmpfiles.d - Resolves: #1469480 bind package is not automatically updated during ipa-server upgrade process - Bumped Required version of bind-dyndb-ldap and bind package- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI - Make sure we check ccaches in all rpcserver paths- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL internal error, assertion failed: Digest MD4 forbidden in FIPS mode! - ipa-sam: replace encode_nt_key() with E_md4hash() - ipa_pwd_extop: do not generate NT hashes in FIPS mode - Resolves: #1377973 ipa-server-install fails when the provided or resolved IP address is not found on local interfaces - Fix local IP address validation - ipa-dns-install: remove check for local ip address - refactor CheckedIPAddress class - CheckedIPAddress: remove match_local param - Remove ip_netmask from option parser - replica install: add missing check for non-local IP address - Remove network and broadcast address warnings- Resolves: #1449189 ipa-kra-install timeouts on replica - kra: promote: Get ticket before calling custodia- Resolve: #1455946 Provide a tooling automating the configuration of Smart Card authentication on a FreeIPA master - server certinstall: update KDC master entry - pkinit manage: introduce ipa-pkinit-manage - server upgrade: do not enable PKINIT by default - Extend the advice printing code by some useful abstractions - Prepare advise plugin for smart card auth configuration - Resolve: #1461053 allow to modify list of UPNs of a trusted forest - trust-mod: allow modifying list of UPNs of a trusted forest - WebUI: add support for changing trust UPN suffixes- Resolves: #1377973 ipa-server-install fails when the provided or resolved IP address is not found on local interfaces - Only warn when specified server IP addresses don't match intf - Resolves: #1438016 gssapi errors after IPA server upgrade - Bump version of python-gssapi - Resolves: #1457942 certauth: use canonical principal for lookups - ipa-kdb: use canonical principal in certauth plugin - Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid breaking older clients - Add code to be able to set default kinit lifetime - Revert setting sessionMaxAge for old clients- Resolves: #1442233 IPA client commands fail when pointing to replica - httpinstance: wait until the service entry is replicated - Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then not indexed - Fix index definition for ipaAnchorUUID - Resolves: #1438016 gssapi errors after IPA server upgrade - Avoid possible endless recursion in RPC call - rpc: preparations for recursion fix - rpc: avoid possible recursion in create_connection - Resolves: #1446087 services entries missing krbCanonicalName attribute. - Changing cert-find to do not use only primary key to search in LDAP. - Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers - ipa-kdb: reload certificate mapping rules periodically - Resolves: #1455541 after upgrade login from web ui breaks - kdc.key should not be visible to all - Resolves: #1435606 Add pkinit_indicator option to KDC configuration - ipa-kdb: add pkinit authentication indicator in case of a successful certauth - Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate issuance when ipa-ca records are not resolvable - Turn off OCSP check - Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 - server_del - TypeError: 'NoneType' object is not iterable - fix incorrect suffix handling in topology checks- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to handle PKINIT certificates/anchors - certdb: add named trust flag constants - certdb, certs: make trust flags argument mandatory - certdb: use custom object for trust flags - install: trust IPA CA for PKINIT - client install: fix client PKINIT configuration - install: introduce generic Kerberos Augeas lens - server install: fix KDC PKINIT configuration - ipapython.ipautil.run: Add option to set umask before executing command - certs: do not export keys world-readable in install_key_from_p12 - certs: do not export CA certs in install_pem_from_p12 - server install: fix KDC certificate validation in CA-less - replica install: respect --pkinit-cert-file - cacert manage: support PKINIT - server certinstall: support PKINIT - Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file option - certs: do not export CA certs in install_pem_from_p12 - server install: fix KDC certificate validation in CA-less - Resolves: #1451228 ipa-kra-install fails when primary KRA server has been decommissioned - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname - Resolves: #1451712 KRA installation fails on server that was originally installed as CA-less - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt - Resolves: #1441499 ipa cert-show does not raise error if no file name specified - ca/cert-show: check certificate_out in options - Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+ - Remove pkinit-anonymous command - Resolves: #1449523 Provide an API command to retrieve PKINIT status in the FreeIPA topology - Allow for multivalued server attributes - Refactor the role/attribute member reporting code - Add an attribute reporting client PKINIT-capable servers - Add the list of PKINIT servers as a virtual attribute to global config - Add `pkinit-status` command - test_serverroles: Get rid of MockLDAP and use ldap2 instead - Resolves: #1452216 Replica installation grants HTTP principal access in WebUI - Fix rare race condition with missing ccache file - Resolves: #1455045 Simple service uninstallers must be able to handle missing service files gracefully - only stop/disable simple service if it is installed - Resolves: #1455541 after upgrade login from web ui breaks - krb5: make sure KDC certificate is readable - Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing command "ipa cert-request --add" after upgrade - Change python-cryptography to python2-cryptography- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'" error observed during ipa upgrade with latest package. - ipa-server-install: fix uninstall - Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break replica - ca install: merge duplicated code for DM password - installutils: add DM password validator - ca, kra install: validate DM password- Resolves: #1447284 Upgrade from ipa-4.1 fails when enabling KDC proxy - python2-ipalib: add missing python dependency - installer service: fix typo in service entry - upgrade: add missing suffix to http instance - Resolves: #1444791 Update man page of ipa-kra-install - ipa-kra-install manpage: document domain-level 1 - Resolves: #1441493 ipa cert-show raises stack traces when --certificate-out=/tmp - cert-show: writable files does not mean dirs - Resolves: #1441192 Add the name of URL parameter which will be check for username during cert login - Bump version of ipa.conf file - Resolves: #1378797 Web UI must check OCSP and CRL during smartcard login - Turn on NSSOCSP check in mod_nss conf - Resolves: #1322963 Errors from AD when trying to sign ipa.csr, conflicting template on - renew agent: respect CA renewal master setting - server upgrade: always fix certmonger tracking request - cainstance: use correct profile for lightweight CA certificates - renew agent: allow reusing existing certs - renew agent: always export CSR on IPA CA certificate renewal - renew agent: get rid of virtual profiles - ipa-cacert-manage: add --external-ca-type - Resolves: #1441593 error adding authenticator indicators to host - Fixing adding authenticator indicators to host - Resolves: #1449525 Set directory ownership in spec file - Added plugins directory to ipaclient subpackages - ipaclient: fix missing RPM ownership - Resolves: #1451279 otptoken-add-yubikey KeyError: 'ipatokenotpdigits' - otptoken-add-yubikey: When --digits not provided use default value- Resolves: #1449189 ipa-kra-install timeouts on replica - ipa-kra-install: fix check_host_keys- Resolves: #1438833 [ipa-replica-install] - 406 Client Error: Failed to validate message: Incorrect number of results (0) searching forpublic key for host - Make sure remote hosts have our keys - Resolves: #1442815 Replica install fails during migration from older IPA master - Refresh Dogtag RestClient.ca_host property - Remove the cachedproperty class - Resolves: #1444787 Update warning message when KRA installation fails - kra install: update installation failure message - Resolves: #1444896 ipa-server-install with external-ca fails in FIPS mode - ipa-server-install with external CA: fix pkinit cert issuance - Resolves: #1445397 GET in KerberosSession.finalize_kerberos_acquisition() must use FreeIPA CA - kerberos session: use CA cert with full cert chain for obtaining cookie - Resolves: #1447375 ipa-client-install: extra space in pkinit_anchors definition - ipa-client-install: remove extra space in pkinit_anchors definition - Resolves: #1447703 Fix SELinux contex of http.keytab during upgrade - Use proper SELinux context with http.keytab- Resolves: #1200767 [RFE] Allow Kerberos authentication for users with certificates on smart cards (pkinit) - spec file: bump krb5 Requires for certauth fixes - Resolves: #1438729 Configure local PKINIT on DL0 or when '--no-pkinit' option is used - separate function to set ipaConfigString values on service entry - Allow for configuration of all three PKINIT variants when deploying KDC - API for retrieval of master's PKINIT status and publishing it in LDAP - Use only anonymous PKINIT to fetch armor ccache - Stop requesting anonymous keytab and purge all references of it - Use local anchor when armoring password requests - Upgrade: configure local/full PKINIT depending on the master status - Do not test anonymous PKINIT after install/upgrade - Resolves: #1442427 ipa.ipaserver.install.plugins.adtrust. update_tdo_gidnumber: ERROR Default SMB Group not found - upgrade: adtrust update_tdo_gidnumber plugin must check if adtrust is installed - Resolves: #1442932 ipa restore fails to restore IPA user - restore: restart/reload gssproxy after restore - Resolves: #1444896 ipa-server-install with external-ca fails in FIPS mode - Fix CA/server cert validation in FIPS - Resolves: #1444947 Deadlock between topology and schema-compat plugins - compat-manage: behave the same for all users - Move the compat plugin setup at the end of install - compat: ignore cn=topology,cn=ipa,cn=etc subtree - Resolves: #1445358 ipa vault-add raises TypeError - vault: piped input for ipa vault-add fails - Resolves: #1445382 ipa vault-retrieve fails to retrieve data from vault - Vault: Explicitly default to 3DES CBC - Resolves: #1445432 uninstall ipa client automount failed with RuntimeWarning - automount install: fix checking of SSSD functionality on uninstall - Resolves: #1446137 pki_client_database_password is shown in ipaserver-install.log - Hide PKI Client database password in log file- Resolves: #1443869 Command "openssl pkcs12 ..." failed during IPA upgrade - Fix CAInstance.import_ra_cert for empty passwords- Resolves: #1431520 ipa cert-find runs a large number of searches, so IPA WebUI is slow to display user details page - cert: defer cert-find result post-processing - Resolves: #1435611 Tracebacks seen from dogtag-ipa-ca-renew-agent-submit helper when installing replica - server-install: No double Kerberos install - Resolves: #1437502 ipa-replica-install fails with requirement to use --force-join that is a client install option. - Add the force-join option to replica install - replicainstall: better client install exception handling - Resolves: #1437953 Server CA-less impossible option check - server-install: remove broken no-pkinit check - Resolves: #1441160 FreeIPA client <= 4.4 fail to parse 4.5 cookies - Add debug log in case cookie retrieval went wrong - Resolves: #1441548 ipa server install fails with --external-ca option - ext. CA: correctly write the cert chain - Resolves: #1441718 Conversion of CA-less server to CA fails on CA instance spawn - Fix CA-less to CA-full upgrade - Resolves: #1442133 Do not link libkrad, liblber, libldap_r and libsss_nss_idmap to every binary in IPA - configure: fix AC_CHECK_LIB usage - Resolves: #1442815 Replica install fails during migration from older IPA master - Fix RA cert import during DL0 replication - Related: #1442004 Building IdM/FreeIPA internally on all architectures - filtering unsupported packages - Build all subpackages on all architectures- Resolves: #1382053 Need to have validation for idrange names - idrange-add: properly handle empty --dom-name option - Resolves: #1435611 Tracebacks seen from dogtag-ipa-ca-renew-agent-submit helper when installing replica - dsinstance: reconnect ldap2 after DS is restarted by certmonger - httpinstance: avoid httpd restart during certificate request - dsinstance, httpinstance: consolidate certificate request code - install: request service certs after host keytab is set up - renew agent: revert to host keytab authentication - renew agent, restart scripts: connect to LDAP after kinit - Resolves: #1436987 ipasam: gidNumber attribute is not created in the trusted domain entry - ipa-sam: create the gidNumber attribute in the trusted domain entry - Upgrade: add gidnumber to trusted domain entry - Resolves: #1438679 [ipa-replica-install] - IncorrectPasswordException: Incorrect client security database password - Add pki_pin only when needed - Resolves: #1438348 Console output message while adding trust should be mapped with texts changed in Samba. - ipaserver/dcerpc: unify error processing - Resolves: #1438366 ipa trust-fetch-domains: ValidationError: invalid 'Credentials': Missing credentials for cross-forest communication - trust: always use oddjobd helper for fetching trust information - Resolves: #1441192 Add the name of URL parameter which will be check for username during cert login - WebUI: cert login: Configure name of parameter used to pass username - Resolves: #1437879 [copr] Replica install failing - Create system users for FreeIPA services during package installation - Resolves: #1441316 WebUI cert auth fails after ipa-adtrust-install - Fix s4u2self with adtrust- Resolves: #1318186 Misleading error message during external-ca IPA master install - httpinstance: make sure NSS database is backed up - Resolves: #1331443 Re-installing ipa-server after uninstall fails with "ERROR CA certificate chain in ... incomplete" - httpinstance: make sure NSS database is backed up - Resolves: #1393726 Enumerate all available request type options in ipa cert-request help - Hide request_type doc string in cert-request help - Resolves: #1402959 [RFE] Universal Smart Card to Identity mapping - spec file: bump libsss_nss_idmap-devel BuildRequires - server: make sure we test for sss_nss_getlistbycert - Resolves: #1437378 ipa-adtrust-install produced an error and failed on starting smb when hostname is not FQDN - adtrust: make sure that runtime hostname result is consistent with the configuration - Resolves: #1437555 ipa-replica-install with DL0 fails to get annonymous keytab - Always check and create anonymous principal during KDC install - Remove duplicate functionality in upgrade - Resolves: #1437946 Upgrade to FreeIPA 4.5.0 does not configure anonymous principal for PKINIT - Upgrade: configure PKINIT after adding anonymous principal - Remove unused variable from failed anonymous PKINIT handling - Split out anonymous PKINIT test to a separate method - Ensure KDC is propery configured after upgrade - Resolves: #1437951 Remove pkinit-related options from server/replica-install on DL0 - Fix the order of cert-files check - Don't allow setting pkinit-related options on DL0 - replica-prepare man: remove pkinit option refs - Remove redundant option check for cert files - Resolves: #1438490 CA-less installation fails on publishing CA certificate - Get correct CA cert nickname in CA-less - Remove publish_ca_cert() method from NSSDatabase - Resolves: #1438838 Avoid arch-specific path in /etc/krb5.conf.d/ipa-certmap - IPA-KDB: use relative path in ipa-certmap config snippet - Resolves: #1439038 Allow erasing ipaDomainResolutionOrder attribute - Allow erasing ipaDomainResolutionOrder attribute- Resolves: #1434032 Run ipa-custodia with custom SELinux context - Require correct custodia version- Resolves: #800545 [RFE] Support SUDO command rename - Reworked the renaming mechanism - Allow renaming of the sudorule objects - Resolves: #872671 IPA WebUI login for AD Trusted User fails - WebUI: check principals in lowercase - WebUI: add method for disabling item in user dropdown menu - WebUI: Add support for login for AD users - Resolves: #1200767 [RFE] Allow Kerberos authentication for users with certificates on smart cards (pkinit) - ipa-kdb: add ipadb_fetch_principals_with_extra_filter() - IPA certauth plugin - ipa-kdb: do not depend on certauth_plugin.h - spec file: bump krb5-devel BuildRequires for certauth - Resolves: #1264370 RFE: disable last successful authentication by default in ipa. - Set "KDC:Disable Last Success" by default - Resolves: #1318186 Misleading error message during external-ca IPA master install - certs: do not implicitly create DS pin.txt - httpinstance: clean up /etc/httpd/alias on uninstall - Resolves: #1331443 Re-installing ipa-server after uninstall fails with "ERROR CA certificate chain in ... incomplete" - certs: do not implicitly create DS pin.txt - httpinstance: clean up /etc/httpd/alias on uninstall - Resolves: #1366572 [RFE] Web UI: allow Smart Card authentication - configure: fix --disable-server with certauth plugin - rpcserver.login_x509: Actually return reply from __call__ method - spec file: Bump requires to make Certificate Login in WebUI work - Resolves: #1402959 [RFE] Universal Smart Card to Identity mapping - extdom: do reverse search for domain separator - extdom: improve cert request - Resolves: #1430363 [RFE] HBAC rule names command rename - Reworked the renaming mechanism - Allow renaming of the HBAC rule objects - Resolves: #1433082 systemctl daemon-reload needs to be called after httpd.service.d/ipa.conf is manipulated - tasks: run `systemctl daemon-reload` after httpd.service.d updates - Resolves: #1434032 Run ipa-custodia with custom SELinux context - Use Custodia 0.3.1 features - Resolves: #1434384 RPC client should use HTTP persistent connection - Use connection keep-alive - Add debug logging for keep-alive - Increase Apache HTTPD's default keep alive timeout - Resolves: #1434729 man ipa-cacert-manage install needs clarification - man ipa-cacert-manage install needs clarification - Resolves: #1434910 replica install against IPA v3 master fails with ACIError - Fixing replica install: fix ldap connection in domlvl 0 - Resolves: #1435394 Ipa-kra-install fails with weird output when backspace is used during typing Directory Manager password - ipapython.ipautil.nolog_replace: Do not replace empty value - Resolves: #1435397 ipa-replica-install can't install replica file produced by ipa-replica-prepare on 4.5 - replica prepare: fix wrong IPA CA nickname in replica file - Resolves: #1435599 WebUI: in self-service Vault menu item is shown even if KRA is not installed - WebUI: Fix showing vault in selfservice view - Resolves: #1435718 As a ID user I cannot call a command with --rights option - ldap2: use LDAP whoami operation to retrieve bind DN for current connection - Resolves: #1436319 "Truncated search results" pop-up appears in user details in WebUI - WebUI: Add support for suppressing warnings - WebUI: suppress truncation warning in select widget - Resolves: #1436333 Uninstall fails with No such file or directory: '/var/run/ipa/services.list' - Create temporaty directories at the begining of uninstall - Resolves: #1436334 WebUI: Adding certificate mapping data using certificate fails - WebUI: Allow to add certs to certmapping with CERT LINES around - Resolves: #1436338 CLI doesn't work after ipa-restore - Backup ipa-specific httpd unit-file - Backup CA cert from kerberos folder - Resolves: #1436342 Bump samba version, required for FIPS mode and privilege separation - Bump samba version for FIPS and priv. separation - Resolves: #1436642 [ipalib/rpc.py] - "maximum recursion depth exceeded" with ipa vault commands - Avoid growing FILE ccaches unnecessarily - Handle failed authentication via cookie - Work around issues fetching session data - Prevent churn on ccaches - Resolves: #1436657 Add workaround for pki_pin for FIPS - Generate PIN for PKI to help Dogtag in FIPS - Resolves: #1436714 [vault] cache KRA transport cert - Simplify KRA transport cert cache - Resolves: #1436723 cert-find does not find all certificates without sizelimit=0 - cert: do not limit internal searches in cert-find - Resolves: #1436724 Renewal of IPA RA fails on replica - dogtag-ipa-ca-renew-agent-submit: fix the is_replicated() function - Resolves: #1436753 Master tree fails to install - httpinstance.disable_system_trust: Don't fail if module 'Root Certs' is not available- Resolves: #1432630 python2-jinja2 needed for python2-ipaclient - Remove csrgen - Resolves: #1432903 Set GssProxy options to enable caching of ldap tickets - Add options to allow ticket caching- Resolves: #828866 [RFE] enhance --subject option for ipa-server-install - Resolves: #1160555 ipa-server-install: Cannot handle double hyphen "--" in hostname - Resolves: #1286288 Insufficient 'write' privilege to the 'ipaExternalMember' attribute - Resolves: #1321652 ipa-server-install fails when using external certificates that encapsulate RDN components in double quotes - Resolves: #1327207 ipa cert-revoke --help doesn't provide enough info on revocation reasons - Resolves: #1340880 ipa-server-install: improve prompt on interactive installation - Resolves: #1353841 ipa-replica-install fails to install when resolv.conf incomplete entries - Resolves: #1356104 cert-show command does not display Subject Alternative Names - Resolves: #1357511 Traceback message seen when ipa is provided with invalid configuration file name - Resolves: #1358752 ipa-ca-install fails on replica when IPA server is converted from CA-less to CA-full - Resolves: #1366572 [RFE] Web UI: allow Smart Card authentication - Resolves: #1367572 improve error message in ipa migrate-ds: mention ipa config-mod --enable-migration=TRUE - Resolves: #1367868 Add options to retrieve lightweight CA certificate/chain - Resolves: #1371927 Implement ca-enable/disable commands. - Resolves: #1372202 Add Users into User Group editors fails to show Full names - Resolves: #1373091 Adding an auth indicator from the CLI creates an extra check box in the UI - Resolves: #1375596 Ipa-server WebUI - long user/group name show wrong error message - Resolves: #1375905 "Normal" group type in the UI is confusing - Resolves: #1376040 IPA client ipv6 - invalid --ip-address shows traceback - Resolves: #1376630 IDM admin password gets written to /root/.dogtag/pki-tomcat/ca/pkcs12_password.conf - Resolves: #1376729 ipa-server-install script option --no_hbac_allow should match other options - Resolves: #1378461 IPA Allows Password Reuse with History value defined when admin resets the password. - Resolves: #1379029 conncheck failing intermittently during single step replica installs - Resolves: #1379858 [RFE] better debugging for ipa-replica-conncheck - Resolves: #1384310 ipa dnsrecord-add fails with Keyerror stack trace - Resolves: #1392778 Update man page for ipa-adtrust-install by removing --no-msdcs option - Resolves: #1392858 Rebase to FreeIPA 4.5+ - Rebase to 4.5.0 - Resolves: #1399133 Delete option shouldn't be available for hosts applied to view. - Resolves: #1399190 [RFE] Certificates issued by externally signed IdM CA should contain full trust chain - Resolves: #1400416 RFE: Provide option to take backup of IPA server before uninstalling IPA server - Resolves: #1400529 cert-request is not aware of Kerberos principal aliases - Resolves: #1401526 IPA WebUI certificates are grayed out on overview page but not on details page - Resolves: #1402959 [RFE] Universal Smart Card to Identity mapping - Resolves: #1404750 ipa-client-install fails to get CA cert via LDAP when non-FQDN name of IPA server is first in /etc/hosts - Resolves: #1409628 [RFE] Semi-automatic integration with external DNS using nsupdate - Resolves: #1413742 Backport request for bug/issue Change IP address validation errors to warnings - Resolves: #1415652 IPA replica install log shows password in plain text - Resolves: #1427897 different behavior regarding system wide certs in master and replica. - Resolves: #1430314 The ipa-managed-entries command failed, exception: AttributeError: ldap2- Resolves: #1419735 ipa-replica-install fails promotecustodia.create_replica with cert errors (untrusted) - added ssl verification using IPA trust anchor - Resolves: #1428472 batch param compatibility is incorrect - compat: fix `Any` params in `batch` and `dnsrecord` - Renamed patches 1011 and 1012 to 0159 and 0157, as they were merged upstream- Resolves: #1416454 replication race condition prevents IPA to install - wait_for_entry: use only DN as parameter - Wait until HTTPS principal entry is replicated to replica - Use proper logging for error messages- Resolves: #1365858 ipa-ca-install fails on replica when IPA Master is installed without CA - Set up DS TLS on replica in CA-less topology - Resolves: #1398600 IPA replica install fails with dirsrv errors. - Do not configure PKI ajp redirection to use "::1" - Resolves: #1413137 CVE-2017-2590 ipa: Insufficient permission check for ca-del, ca-disable and ca-enable commands - ca: correctly authorise ca-del, ca-enable and ca-disable- Resolves: #1370493 CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy - ipa-kdb: search for password policies globally - Renamed patches 1011 and 1012 to 0151 and 0150, as they were merged upstream- Resolves: #1398670 Check IdM Topology for broken record caused by replication conflict before upgrading it - Check for conflict entries before raising domain level- Resolves: #1382812 Creation of replica for disconnected environment is failing with CA issuance errors; Need good steps. - gracefully handle setting replica bind dn group on old masters - Resolves: #1397439 ipa-ca-install on promoted replica hangs on creating a temporary CA admin - replication: ensure bind DN group check interval is set on replica config - add missing attribute to ipaca replica during CA topology update - Resolves: #1401088 IPA upgrade of replica without DNS fails during restart of named-pkcs11 - bindinstance: use data in named.conf to determine configuration status- Resolves: #1370493 CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy - password policy: Add explicit default password policy for hosts and services - Resolves: #1395311 CVE-2016-9575 ipa: Insufficient permission check in certprofile-mod - certprofile-mod: correctly authorise config update- Resolves: #1378353 Replica install fails with old IPA master sometimes during replication process - spec file: bump minimal required version of 389-ds-base - Resolves: #1387779 Make httpd publish CA certificate on Domain Level 1 - Fix missing file that fails DL1 replica installation - Resolves: #1387782 WebUI: Services are not displayed correctly after upgrade - WebUI: services without canonical name are shown correctly - Resolves: #1389709 Traceback seen in error_log when trustdomain-del is run - trustdomain-del: fix the way how subdomain is searched- Resolves: #1318616 CA fails to start after doing ipa-ca-install --external-ca - Keep NSS trust flags of existing certificates - Resolves: #1360813 ipa-server-certinstall does not update all certificate stores and doesn't set proper trust permissions - Add cert checks in ipa-server-certinstall - Resolves: #1371479 cert-find --all does not show information about revocation - cert: add revocation reason back to cert-find output - Resolves: #1375133 WinSync users who have First.Last casing creates users who can have their password set - ipa passwd: use correct normalizer for user principals - Resolves: #1377858 Users with 2FA tokens are not able to login to IPA servers - Properly handle LDAP socket closures in ipa-otpd - Resolves: #1387779 Make httpd publish CA certificate on Domain Level 1 - Make httpd publish its CA certificate on DL1- Resolves: #1373910 IPA server upgrade fails with DNS timed out errors. - Resolves: #1375269 ipa trust-fetch-domains throws internal error- Resolves: #1373359 ipa-certupdate fails with "CA is not configured" - Fix regression introduced in ipa-certupdate- Resolves: #1355753 adding two way non transitive(external) trust displays internal error on the console - Always fetch forest info from root DCs when establishing two-way trust - factor out `populate_remote_domain` method into module-level function - Always fetch forest info from root DCs when establishing one-way trust - Resolves: #1356101 Lightweight sub-CA certs are not tracked by certmonger after `ipa-replica-install` - Track lightweight CAs on replica installation - Resolves: #1357488 ipa command stuck forever on higher versioned client with lower versioned server - compat: Save server's API version in for pre-schema servers - compat: Fix ping command call - schema cache: Store and check info for pre-schema servers - Resolves: #1363905 man page for ipa-replica-manage has a typo in -c flag - Fix man page ipa-replica-manage: remove duplicate -c option from --no-lookup - Resolves: #1367865 webui: cert_revoke should use --cacn to set correct CA when revoking certificate - cert: include CA name in cert command output - WebUI add support for sub-CAs while revoking certificates - Resolves: #1368424 Unable to view certificates issued by Sub CA in Web UI - Add support for additional options taken from table facet - WebUI: Fix showing certificates issued by sub-CA - Resolves: #1368557 dnsrecord-add does not prompt for missing record parts internactively - dns: normalize record type read interactively in dnsrecord_add - dns: prompt for missing record parts in CLI - dns: fix crash in interactive mode against old servers - Resolves: #1370519 Certificate revocation in service-del and host-del isn't aware of Sub CAs - cert: fix cert-find --certificate when the cert is not in LDAP - Make host/service cert revocation aware of lightweight CAs - Resolves: #1371901 Use OAEP padding with custodia - Use RSA-OAEP instead of RSA PKCS#1 v1.5 - Resolves: #1371915 When establishing external two-way trust, forest root Administrator account is used to fetch domain info - do not use trusted forest name to construct domain admin principal - Resolves: #1372597 Incorrect CA ACL evaluation of SAN DNS names in certificate request - Fix CA ACL Check on SubjectAltNames - Resolves: #1373272 CLI always sends default command version - cli: use full name when executing a command - Resolves: #1373359 ipa-certupdate fails with "CA is not configured" - Fix ipa-certupdate for CA-less installation - Resolves: #1373540 client-install with IPv6 address fails on link-local address (always) - Fix parse errors with link-local addresses- Resolves: #1081561 CA not start during ipa server install in pure IPv6 env - Fix ipa-server-install in pure IPv6 environment - Resolves: #1318169 Tree-root domains in a trusted AD forest aren't marked as reachable via the forest root - trust: make sure ID range is created for the child domain even if it exists - ipa-kdb: simplify trusted domain parent search - Resolves: #1335567 Update Warning in IdM Web UI API browser - WebUI: add API browser is tech preview warning - Resolves: #1348560 Mulitple domain Active Directory Trust conflict - ipaserver/dcerpc: reformat to make the code closer to pep8 - trust: automatically resolve DNS trust conflicts for triangle trusts - Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in certificate revocation - cert-revoke: fix permission check bypass (CVE-2016-5404) - Resolves: #1353936 custodia.conf and server.keys file is world-readable. - Remove Custodia server keys from LDAP - Secure permissions of Custodia server.keys - Resolves: #1358752 ipa-ca-install fails on replica when IPA server is converted from CA-less to CA-full - custodia: include known CA certs in the PKCS#12 file for Dogtag - custodia: force reconnect before retrieving CA certs from LDAP - Resolves: #1362333 ipa vault container owner cannot add vault - Fix: container owner should be able to add vault - Resolves: #1365546 External trust with root domain is transitive - trust: make sure external trust topology is correctly rendered - Resolves: #1365572 IPA server broken after upgrade - Require pki-core-10.3.3-7 - Resolves: #1367864 Server assumes latest version of command instead of version 1 for old / 3rd party clients - rpcserver: assume version 1 for unversioned command calls - rpcserver: fix crash in XML-RPC system commands - Resolves: #1367773 thin client ignores locale change - schema cache: Fallback to 'en_us' when locale is not available - Resolves: #1368754 ipa server uninstall fails with Python "Global Name error" - Fail on topology disconnect/last role removal - Resolves: #1368981 ipa otptoken-add --type=hotp --key creates wrong OTP - otptoken, permission: Convert custom type parameters on server - Resolves: #1369414 ipa server-del fails with Python stack trace - Handled empty hostname in server-del command - Resolves: #1369761 ipa-server must depend on a version of httpd that support mod_proxy with UDS - Require httpd 2.4.6-31 with mod_proxy Unix socket support - Resolves: #1370512 Received ACIError instead of DuplicatedError in stageuser_tests - Raise DuplicatedEnrty error when user exists in delete_container - Resolves: #1371479 cert-find --all does not show information about revocation - cert: add missing param values to cert-find output - Renamed patch 1011 to 0100, as it was merged upstream- Resolves: #1298288 [RFE] Improve performance in large environments. - cert: speed up cert-find - Resolves: #1317379 [EXPERIMENTAL][RFE] Web UI: allow Smart Card authentication - service: add flag to allow S4U2Self - Add 'trusted to auth as user' checkbox - Added new authentication method - Resolves: #1353881 ipa-replica-install suggests about non-existent --force-ntpd option - Don't show --force-ntpd option in replica install - Resolves: #1354441 DNS forwarder check is too strict: unable to add sub-domain to already-broken domain - DNS: allow to add forward zone to already broken sub-domain - Resolves: #1356146 performance regression in CLI help - schema: Speed up schema cache - frontend: Change doc, summary, topic and NO_CLI to class properties - schema: Introduce schema cache format - schema: Generate bits for help load them on request - help: Do not create instances to get information about commands and topics - schema cache: Do not reset ServerInfo dirty flag - schema cache: Do not read fingerprint and format from cache - Access data for help separately - frontent: Add summary class property to CommandOverride - schema cache: Read server info only once - schema cache: Store API schema cache in memory - client: Do not create instance just to check isinstance - schema cache: Read schema instead of rewriting it when SchemaUpToDate - Resolves: #1360769 ipa-server-certinstall couldnt unlock private key file - server install: do not prompt for cert file PIN repeatedly - Resolves: #1364113 ipa-password: ipa: ERROR: RuntimeError: Unable to create cache directory: [Errno 13] Permission denied: '/home/test_user' - schema: Speed up schema cache - Resolves: #1366604 `cert-find` crashes on invalid certificate data - cert: do not crash on invalid data in cert-find - Resolves: #1366612 Middle replica uninstallation in line topology works without '--ignore-topology-disconnect' - Fail on topology disconnect/last role removal - Resolves: #1366626 caacl-add-service: incorrect error message when service does not exists - Fix ipa-caalc-add-service error message - Resolves: #1367022 The ipa-server-upgrade command failed when named-pkcs11 does not happen to run during dnf upgrade - DNS server upgrade: do not fail when DNS server did not respond - Resolves: #1367759 [RFE] [webui] warn admin if there is only one IPA server with CA - Add warning about only one existing CA server - Set servers list as default facet in topology facet group - Resolves: #1367773 thin client ignores locale change - schema check: Check current client language against cached one- Resolves: #1361119 UPN-based search for AD users does not match an entry in slapi-nis map cache - support multiple uid values in schema compatibility tree- Resolves: #1309700 Process /usr/sbin/winbindd was killed by signal 6 - Revert "spec: add conflict with bind-chroot to freeipa-server-dns" - Resolves: #1341249 Subsequent external CA installation fails - install: fix external CA cert validation - Resolves: #1353831 ipa-server-install fails in container because of hostnamectl set-hostname - server-install: Fix --hostname option to always override api.env values - install: Call hostnamectl set-hostname only if --hostname option is used - Resolves: #1356091 ipa-cacert-manage --help and man differ - Improvements for the ipa-cacert-manage man and help - Resolves: #1360631 ipa-backup is not keeping the /etc/tmpfiles.d/dirsrv-.conf - ipa-backup: backup /etc/tmpfiles.d/dirsrv-.conf - Resolves: #1361047 ipa-replica-install --help usage line suggests the replica file is needed - Update ipa-replica-install documentation - Resolves: #1361545 ipa-client-install starts rhel-domainname.service but does not rpm-require it - client: RPM require initscripts to get *-domainname.service - Resolves: #1364197 caacl: error when instantiating rules with service principals - caacl: fix regression in rule instantiation - Resolves: #1364310 ipa otptoken-add bytes object has no attribute confirm - parameters: move the `confirm` kwarg to Param - Resolves: #1364464 Topology graph: ca and domain adders shows question marks instead of plus icon - Fix unicode characters in ca and domain adders - Resolves: #1365083 Incomplete output returned for command ipa vault-add - client: add missing output params to client-side commands - Resolves: #1365526 build fails during "make check" - ipa-kdb: Fix unit test after packaging changes in krb5- Resolves: #1353829 traceback message seen in ipaserver-uninstall.log file. - Do not initialize API in ipa-client-automount uninstall - Resolves: #1356899 com.redhat.idm.trust.fetch_domains need update after thin client changes - idrange: fix unassigned global variable - Resolves: #1360792 Migrating users doesn't update krbCanonicalName - re-set canonical principal name on migrated users - Resolves: #1362012 ipa hbactest produces error about cannot concatenate 'str' and 'bool' objects - Fix ipa hbactest output - Resolves: #1362260 ipa vault-mod no longer allows defining salt - vault: add missing salt option to vault_mod - Resolves: #1362312 ipa vault-retrieve internal error when using the wrong public key - vault: Catch correct exception in decrypt - Resolves: #1362537 ipa-server-install fails to create symlink from /etc/ipa/kdcproxy/ to /etc/httpd/conf.d/ - Correct path to HTTPD's systemd service directory - Resolves: #1363756 Increase length of passwords generated by installer - Increase default length of auto generated passwords- Resolves: #1117306 [RFE] Allow multiple Principals per host entry (Kerberos aliases) - harden the check for trust namespace overlap in new principals - Resolves: #1351142 CLI is not using session cookies for communication with IPA API - Fix session cookies - Resolves: #1353888 Fix the help for ipa otp and other topics - help: Add dnsserver commands to help topic 'dns' - Resolves: #1354406 host-del updatedns options complains about missing ptr record for host - Host-del: fix behavior of --updatedns and PTR records - Resolves: #1355718 ipa-replica-manage man page example output differs actual command output - Minor fix in ipa-replica-manage MAN page - Resolves: #1358229 Traceback message should be fixed, seen while editing winsync migrated user information in Default trust view. - baseldap: Fix MidairCollision instantiation during entry modification - Resolves: #1358849 CA replica install logs to wrong log file - unite log file name of ipa-ca-install - Resolves: #1359130 ipa-server-install command fails to install IPA server. - DNS Locations: fix update-system-records unpacking error - Resolves: #1359237 AVC on dirsrv config caused by IPA installer - Use copy when replacing files to keep SELinux context - Resolves: #1359692 ipa-client-install join fail with traceback against RHEL-6.8 ipa-server - compat: fix ping call - Resolves: #1359738 ipa-replica-install --domain= option does not work - replica-install: Fix --domain - Resolves: #1360778 Vault commands are available in CLI even when the server does not support them - Revert "Enable vault-* commands on client" - client: fix hiding of commands which lack server support - Related: #1281704 Rebase to softhsm 2.1.0 - Remove the workaround for softhsm bug #1293340 - Related: #1298288 [RFE] Improve performance in large environments. - Create indexes for krbCanonicalName attribute- Resolves: #1296140 Remove redhat-access-plugin-ipa support - Obsolete and conflict redhat-access-plugin-ipa - Resolves: #1351119 Multiple issues while uninstalling ipa-server - server uninstall fails to remove krb principals - Resolves: #1351758 ipa commands not showing expected error messages - frontend: copy command arguments to output params on client - Show full error message for selinuxusermap-add-hostgroup - Resolves: #1352883 Traceback on adding default automember group and hostgroup set - allow 'value' output param in commands without primary key - Resolves: #1353888 Fix the help for ipa otp and other topics - schema: Fix subtopic -> topic mapping - Resolves: #1354348 ipa trustconfig-show throws internal error. - allow 'value' output param in commands without primary key - Resolves: #1354381 ipa trust-add with raw option gives internal error. - trust-add: handle `--all/--raw` options properly - Resolves: #1354493 Replica install fails with old IPA master - DNS install: Ensure that DNS servers container exists - Resolves: #1354628 ipa hostgroup-add-member does not return error message when adding itself as member - frontend: copy command arguments to output params on client - Resolves: #1355856 ipa otptoken-add --type=totp gives internal error - messages: specify message type for ResultFormattingError - Resolves: #1356063 "ipa radiusproxy-add" command needs to prompt to enter secret key - expose `--secret` option in radiusproxy-* commands - prevent search for RADIUS proxy servers by secret - Resolves: #1356099 Bug in the ipapwd plugin - Heap corruption in ipapwd plugin - Resolves: #1356899 com.redhat.idm.trust.fetch_domains need update after thin client changes - Use server API in com.redhat.idm.trust-fetch-domains oddjob helper - Resolves: #1356964 Renaming a user removes all of his principal aliases - Preserve user principal aliases during rename operation- Resolves: #1274524 [RFE] Qualify up to 60 IdM replicas - Resolves: #1320838 [RFE] Support IdM Client in a DNS domain controlled by AD - Related: #1356134 'kinit -E' does not work for IPA user- Resolves: #1356102 Server uninstall does not stop tracking lightweight sub-CA with certmonger - uninstall: untrack lightweight CA certs - Resolves: #1351807 ipa-nis-manage config.get_dn missing - ipa-nis-manage: Use server API to retrieve plugin status - Resolves: #1353452 ipa-compat-manage command failed, exception: NotImplementedError: config.get_dn() - ipa-compat-manage: use server API to retrieve plugin status - Resolves: #1353899 ipa-advise: object of type 'type' has no len() - ipa-advise: correct handling of plugin namespace iteration - Resolves: #1356134 'kinit -E' does not work for IPA user - kdb: check for local realm in enterprise principals - Resolves: #1353072 ipa unknown command vault-add - Enable vault-* commands on client - vault-add: set the default vault type on the client side if none was given - Resolves: #1353995 Default CA can be used without a CA ACL - caacl: expand plugin documentation - Resolves: #1356144 host-find should not print SSH keys by default, only SSH fingerprints - host-find: do not show SSH key by default - Resolves: #1353506 ipa migrate-ds command fails for IPA in RHEL 7.3 - Removed unused method parameter from migrate-ds- Resolves: #747612 [RFE] IPA should support and manage DNS sites - Resolves: #826790 Disabling password expiration (--maxlife=0 and --minlife=0) in the default global_policy in IPA sets user's password expiration (krbPasswordExpiration) to be 90 days - Resolves: #896699 ipa-replica-manage -H does not delete DNS SRV records - Resolves: #1084018 [RFE] Add IdM user password change support for legacy client compat tree - Resolves: #1117306 [RFE] Allow multiple Principals per host entry (Kerberos aliases) - Fix incorrect check for principal type when evaluating CA ACLs - Resolves: #1146860 [RFE] Offer OTP generation for host enrollment in the UI - Resolves: #1238190 ipasam unable to lookup group in directory yet manual search works - Resolves: #1250110 search by users which don't have read rights for all attrs in search_attributes fails - Resolves: #1263764 Show Certificate displays in useless format - Resolves: #1272491 [WebUI] Certificate action dropdown does not display all the options after adding new certificate - Resolves: #1292141 Rebase to FreeIPA 4.4+ - Rebase to 4.4.0 - Resolves: #1294503 IPA fails to issue 3rd party certs - Resolves: #1298242 [RFE] API compatibility - compatibility of clients - Resolves: #1298848 [RFE] Centralized topology management - Resolves: #1298966 [RFE] Extend Smart Card support - Resolves: #1315146 Multiple clients cannot join domain simultaneously: /var/run/httpd/ipa/clientcaches race condition? - Resolves: #1318903 ipa server install failing when SUBCA signs the cert - Resolves: #1319003 ipa-winsync-migrate: Traceback should be fixed with proper console output - Resolves: #1324055 IPA always qualify requests for admin - Resolves: #1328552 [RFE] Allow users to authenticate with alternative names - Resolves: #1334582 Inconsistent UI and CLI options for removing certificate hold - Resolves: #1346321 Exclude o=ipaca subtree from Retro Changelog (syncrepl) - Resolves: #1349281 Fix `Conflicts` with ipa-python - Resolves: #1350695 execution of copy-schema script fails - Resolves: #1351118 upgrade failed for RHEL-7.3 from RHEL-7.2.z - Resolves: #1351153 AVC seen on Replica during ipa-server upgrade test execution to 7.3 - Resolves: #1351276 ipa-server-install with dns cannot resolve itself to create ipa-ca entry - Related: #1343422 [RFE] Add GssapiImpersonate option- Resolves: #1348948 IPA server install fails with build ipa-server-4.4.0-0.el7.1.alpha1 - Revert "Increased mod_wsgi socket-timeout"- Resolves: #712109 "krbExtraData not allowed" is logged in DS error log while setting password for default sudo binddn. - Resolves: #747612 [RFE] IPA should support and manage DNS sites - Resolves: #768316 [RFE] ipa-getkeytab should auto-detect the ipa server name - Resolves: #825391 [RFE] Replica installation should provide a means for inheriting nssldap security access settings - Resolves: #921497 Incorrect *.py[co] files placement - Resolves: #1029640 RHEL7 IPA to add DNA Plugin config for dnaRemote support - Resolves: #1029905 389 DS cache sizes not replicated to IPA replicas - Resolves: #1196958 IPA replica installation failing with high number of users (160000). - Resolves: #1219402 IPA suggests to uninstall a client when the user needs to uninstall a replica - Resolves: #1224057 [RFE] TGS authorization decisions in KDC based on Authentication Indicator - Resolves: #1234222 [WebUI] UI error message is not appropriate for "Kerberos principal expiration" - Resolves: #1234223 [WebUI] General invalid password error message appearing for "Locked user" - Resolves: #1254267 ipa-server-install failure applying ldap updates with limits exceeded - Resolves: #1258626 realmdomains-mod --add-domain command throwing error when doamin already is in forwardzone. - Resolves: #1259020 ipa-server-adtrust-install doesn't allow NetBIOS-name=EXAMPLE-TEST.COM (dash character) - Resolves: #1260993 DNSSEC signing enablement on dnszone should throw error message when DNSSEC master not installed - Resolves: #1262747 dnssec options missing in ipa-dns-install man page - Resolves: #1265900 Fail installation immediately after dirsrv fails to install using ipa-server-install - Resolves: #1265915 idoverrideuser-find fails if any SID anchor is not resolvable anymore - Resolves: #1268027 ipa-dnskeysync-replica crash with backtrace - LimitsExceeded: limits exceeded for this query - Resolves: #1269089 Certificate of managed-by host/service fails to resubmit - Resolves: #1269200 ipa-server crashing while trying to preserve admin user - Resolves: #1271321 Reduce ioblocktimeout and idletimeout defaults - Resolves: #1271579 Automember rule expressions disappear from tables on single expression delete - Resolves: #1275816 Incomplete ports for IPA ad-trust - Resolves: #1276351 [RFE] Remove /usr/share/ipa/updates/50-lockout-policy.update file from IPA releases - Resolves: #1277109 Add tool tips for Revert, Refresh, Undo, and Undo All in the IPA UI - Resolves: #1278426 Better error message needed for invalid ca-signing-algo option - Resolves: #1279932 ipa-client-install --request-cert needs workaround in anaconda chroot - Resolves: #1282521 Creating a user w/o private group fails when doing so in WebUI - Resolves: #1283879 ipa-winsync-migrate: Traceback message should be replaced by "IPA is not configured on this system" - Resolves: #1285071 ipa-kra-install fails on replica looking for admin cert file - Resolves: #1287194 [RFE] Support of UPN for trusted domains - Resolves: #1288967 Normalize Manager entry in ipa user-add - Resolves: #1289487 Priority field missing in Password Policy detail tab - Resolves: #1291140 ipa client should configure kpasswd_server directive in krb5.conf - Resolves: #1292141 Rebase to FreeIPA 4.4+ - Rebase to 4.4.0.alpha1 - Resolves: #1298848 [RFE] Centralized topology management - Resolves: #1300576 Browser setup page includes instructions for Internet Explorer - Resolves: #1301586 ipa host-del --updatedns should remove related dns entries. - Resolves: #1304618 Residual Files After IPA Server Uninstall - Resolves: #1305144 ipa-python does not require its dependencies - Resolves: #1309700 Process /usr/sbin/winbindd was killed by signal 6 - Resolves: #1313798 Console output post ipa-winsync-migrate command should be corrected. - Resolves: #1314786 [RFE] External Trust with Active Directory domain - Resolves: #1319023 Include description for 'status' option in man page for ipactl command. - Resolves: #1319912 ipa-server-install does not completely change hostname and named-pkcs11 fails - Resolves: #1320891 IPA Error 3009: Validation error: Invalid 'ptrrecord': Reverse zone in-addr.arpa. requires exactly 4 IP address compnents, 5 given - Resolves: #1327207 ipa cert-revoke --help doesn't provide enough info on revocation reasons - Resolves: #1328549 "ipa-kra-install" command reports incorrect message when it is executed on server already installed with KRA. - Resolves: #1329209 ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind' - Resolves: #1329275 ipa-nis-manage command should include status option - Resolves: #1330843 'man ipa' should be updated with latest commands - Resolves: #1333755 ipa cert-request causes internal server error while requesting certificate - Resolves: #1337484 EOF is not handled for ipa-client-install command - Resolves: #1338031 Insufficient 'write' privilege on some attributes for the members of the role which has "User Administrators" privilege. - Resolves: #1343142 IPA DNS should do better verification of DNS zones - Resolves: #1347928 Frontpage exposes runtime error with no cookies enabled in browser- Resolves: #1339483 ipa-server-install fails with ERROR pkinit_cert_files - Fix incorrect rebase of patch 1001- Resolves: #1339233 CA installed on replica is always marked as renewal master - Related: #1292141 Rebase to FreeIPA 4.4+ - Rebase to 4.3.1.201605241723GIT1b427d3- Resolves: #1332809 ipa-server-4.2.0-15.el7_2.6.1.x86_64 fails to install because of missing dependencies - Rebuild with krb5-1.14.1- Resolves: #837369 [RFE] Switch to client promotion to replica model - Resolves: #1199516 [RFE] Move replication topology to the shared tree - Resolves: #1206588 [RFE] Visualize FreeIPA server replication topology - Resolves: #1211602 Hide ipa-server-install KDC master password option (-P) - Resolves: #1212713 ipa-csreplica-manage: it could be nice to have also list-ruv / clean-ruv / abort-clean-ruv for o=ipaca backend - Resolves: #1267206 ipa-server-install uninstall should warn if no installation found - Resolves: #1295865 The Domain option is not correctly set in idmapd.conf when ipa-client-automount is executed. - Resolves: #1327092 URI details missing and OCSP-URI details are incorrectly displayed when certificate generated using IPA on RHEL 7.2up2. - Resolves: #1332809 ipa-server-4.2.0-15.el7_2.6.1.x86_64 fails to install because of missing dependencies - Related: #1292141 Rebase to FreeIPA 4.4+ - Rebase to 4.3.1.201605191449GITf8edf37- Resolves: #1277696 IPA certificate auto renewal fail with "Invalid Credential" - cert renewal: make renewal of ipaCert atomic - Resolves: #1278330 installer options are not validated at the beginning of installation - install: fix command line option validation - Resolves: #1282845 sshd_config change on ipa-client-install can prevent sshd from starting up - client install: do not corrupt OpenSSH config with Match sections - Resolves: #1282935 ipa upgrade causes vault internal error - install: export KRA agent PEM file in ipa-kra-install - Resolves: #1283429 Default CA ACL rule is not created during ipa-replica-install - TLS and Dogtag HTTPS request logging improvements - Avoid race condition caused by profile delete and recreate - Do not erroneously reinit NSS in Dogtag interface - Add profiles and default CA ACL on migration - disconnect ldap2 backend after adding default CA ACL profiles - do not disconnect when using existing connection to check default CA ACLs - Resolves: #1283430 ipa-kra-install: fails to apply updates - suppress errors arising from adding existing LDAP entries during KRA install - Resolves: #1283748 Caching of ipaconfig does not work in framework - fix caching in get_ipa_config - Resolves: #1283943 IPA DNS Zone/DNS Forward Zone details missing after upgrade from RHEL 7.0 to RHEL 7.2 - upgrade: fix migration of old dns forward zones - Fix upgrade of forwardzones when zone is in realmdomains - Resolves: #1284413 ipa-cacert-manage renew fails on nonexistent ldap connection - ipa-cacert-renew: Fix connection to ldap. - Resolves: #1284414 ipa-otptoken-import fails on nonexistent ldap connection - ipa-otptoken-import: Fix connection to ldap. - Resolves: #1286635 IPA server upgrade fails from RHEL 7.0 to RHEL 7.2 using "yum update ipa* sssd" - Set minimal required version for openssl - Resolves: #1286781 ipa-nis-manage does not update ldap with all NIS maps - Upgrade: Fix upgrade of NIS Server configuration - Resolves: #1289311 umask setting causes named-pkcs11 issue with directory permissions on /var/lib/ipa/dnssec - DNS: fix file permissions - Explicitly call chmod on newly created directories - Fix: replace mkdir with chmod - Resolves: #1290142 Broken 7.2.0 to 7.2.z upgrade - flawed version comparison - Fix version comparison - use FFI call to rpmvercmp function for version comparison - Resolves: #1292595 In IPA-AD trust environment some secondary IPA based Posix groups are missing - ipa-kdb: map_groups() consider all results - Resolves: #1293870 User should be notified for wrong password in password reset page - Fixed login error message box in LoginScreen page - Resolves: #1296196 Sysrestore did not restore state if a key is specified in mixed case - Allow to used mixed case for sysrestore - Resolves: #1296214 DNSSEC key purging is not handled properly - DNSSEC: Improve error reporting from ipa-ods-exporter - DNSSEC: Make sure that current state in OpenDNSSEC matches key state in LDAP - DNSSEC: Make sure that current key state in LDAP matches key state in BIND - DNSSEC: remove obsolete TODO note - DNSSEC: add debug mode to ldapkeydb.py - DNSSEC: logging improvements in ipa-ods-exporter - DNSSEC: remove keys purged by OpenDNSSEC from master HSM from LDAP - DNSSEC: ipa-dnskeysyncd: Skip zones with old DNSSEC metadata in LDAP - DNSSEC: ipa-ods-exporter: add ldap-cleanup command - DNSSEC: ipa-dnskeysyncd: call ods-signer ldap-cleanup on zone removal - DNSSEC: Log debug messages at log level DEBUG - Resolves: #1296216 ipa-server-upgrade fails if certmonger is not running - prevent crash of CA-less server upgrade due to absent certmonger - always start certmonger during IPA server configuration upgrade - Resolves: #1297811 The ipa -e skip_version_check=1 still issues incompatibility error when called against RHEL 6 server - ipalib: assume version 2.0 when skip_version_check is enabled - Resolves: #1298289 install fails when locale is "fr_FR.UTF-8" - Do not decode HTTP reason phrase from Dogtag - Resolves: #1300252 shared certificateProfiles container is missing on a freshly installed RHEL7.2 system - upgrade: unconditional import of certificate profiles into LDAP - Resolves: #1301674 --setup-dns and other options is forgotten for using an external PKI - installer: Propagate option values from components instead of copying them. - installer: Fix logic of reading option values from cache. - Resolves: #1301687 issues with migration from RHEL 6 self-signed to RHEL 7 CA IPA setup - ipa-ca-install: print more specific errors when CA is already installed - cert renewal: import all external CA certs on IPA CA cert renewal - CA install: explicitly set dogtag_version to 10 - fix standalone installation of externally signed CA on IPA master - replica install: validate DS and HTTP server certificates - replica install: improvements in the handling of CA-related IPA config entries - Resolves: #1301901 [RFE] compat tree: show AD members of IPA groups - slapi-nis: update configuration to allow external members of IPA groups - Resolves: #1305533 ipa trust-add succeded but after that ipa trust-find returns "0 trusts matched" - upgrade: fix config of sidgen and extdom plugins - trusts: use ipaNTTrustPartner attribute to detect trust entries - Warn user if trust is broken - fix upgrade: wait for proper DS socket after DS restart - Insure the admin_conn is disconnected on stop - Fix connections to DS during installation - Fix broken trust warnings - Resolves: #1321092 Installers fail when there are multiple versions of the same certificate - certdb: never use the -r option of certutil - Related: #1317381 Crash during IPA upgrade due to slapd - spec file: update minimum required version of slapi-nis - Related: #1322691 CVE-2015-5370 CVE-2016-2110 CVE-2016-2111 CVE-2016-2112 CVE-2016-2113 CVE-2016-2114 CVE-2016-2115 CVE-2016-2118 samba: various flaws [rhel-7.3] - Rebuild against newer Samba version- Resolves: #1252556 Missing CLI param and ACL for vault service operations - vault: fix private service vault creation- Resolves: #1262996 ipa vault internal error on replica without KRA - upgrade: make sure ldap2 is connected in export_kra_agent_pem - Resolves: #1270608 IPA upgrade fails for server with CA cert signed by external CA - schema: do not derive ipaVaultPublicKey from ipaPublicKey- Resolves: #1217009 OTP sync in UI does not work for TOTP tokens - Fix an integer underflow bug in libotp - Resolves: #1262996 ipa vault internal error on replica without KRA - install: always export KRA agent PEM file - vault: select a server with KRA for vault operations - Resolves: #1269777 IPA restore overwrites /etc/passwd and /etc/group files - do not overwrite files with local users/groups when restoring authconfig - Renamed patch 1011 to 0138, as it was merged upstream- Resolves: #1204205 [RFE] ID Views: Automated migration tool from Winsync to Trusts - winsync-migrate: Convert entity names to posix friendly strings - winsync-migrate: Properly handle collisions in the names of external groups - Resolves: #1261074 Adjust Firefox configuration to new extension signing policy - webui: use manual Firefox configuration for Firefox >= 40 - Resolves: #1263337 IPA Restore failed with installed KRA - ipa-backup: Add mechanism to store empty directory structure - Resolves: #1264793 CVE-2015-5284 ipa: ipa-kra-install includes certificate and private key in world readable file [rhel-7.2] - install: fix KRA agent PEM file permissions - Resolves: #1265086 Mark IdM API Browser as experimental - WebUI: add API browser is experimental warning - Resolves: #1265277 Fix kdcproxy user creation - install: create kdcproxy user during server install - platform: add option to create home directory when adding user - install: fix kdcproxy user home directory - Resolves: #1265559 GSS failure after ipa-restore - destroy httpd ccache after stopping the service- Resolves: #1258965 ipa vault: set owner of vault container - baseldap: make subtree deletion optional in LDAPDelete - vault: add vault container commands - vault: set owner to current user on container creation - vault: update access control - vault: add permissions and administrator privilege - install: support KRA update - Resolves: #1261586 ipa config-mod addattr fails for ipauserobjectclasses - config: allow user/host attributes with tagging options - Resolves: #1262315 Unable to establish winsync replication - winsync: Add inetUser objectclass to the passsync sysaccount- Resolves: #1260663 crash of ipa-dnskeysync-replica component during ipa-restore - IPA Restore: allows to specify files that should be removed - Resolves: #1261806 Installing ipa-server package breaks httpd - Handle timeout error in ipa-httpd-kdcproxy - Resolves: #1262322 Failed to backup CS.cfg message in upgrade. - Server Upgrade: backup CS.cfg when dogtag is turned off- Resolves: #1257074 The KRA agent cert is stored in a PEM file that is not tracked - cert renewal: Include KRA users in Dogtag LDAP update - cert renewal: Automatically update KRA agent PEM file - Resolves: #1257163 renaming certificatte profile with --rename option leads to integrity issues - certprofile: remove 'rename' option - Resolves: #1257968 kinit stop working after ipa-restore - Backup: back up the hosts file - Resolves: #1258926 Remove 'DNSSEC is experimental' warnings - DNSSEC: remove "DNSSEC is experimental" warnings - Resolves: #1258929 Uninstallation of IPA leaves extra entry in /etc/hosts - Installer: do not modify /etc/hosts before user agreement - Resolves: #1258944 DNSSEC daemons may deadlock when processing more than 1 zone - DNSSEC: backup and restore opendnssec zone list file - DNSSEC: remove ccache and keytab of ipa-ods-exporter - DNSSEC: prevent ipa-ods-exporter from looping after service auto-restart - DNSSEC: Fix deadlock in ipa-ods-exporter <-> ods-enforcerd interaction - DNSSEC: Fix HSM synchronization in ipa-dnskeysyncd when running on DNSSEC key master - DNSSEC: Fix key metadata export - DNSSEC: Wrap master key using RSA OAEP instead of old PKCS v1.5. - Resolves: #1258964 revert to use ldapi to add kra agent in KRA install - Using LDAPI to setup CA and KRA agents. - Resolves: #1259848 server closes connection and refuses commands after deleting user that is still logged in - ldap: Make ldap2 connection management thread-safe again - Resolves: #1259996 AttributeError: 'NameSpace' object has no attribute 'ra_certprofile' while ipa-ca-install - load RA backend plugins during standalone CA install on CA-less IPA master- Resolves: #1254689 Storing big file as a secret in vault raises traceback - vault: Limit size of data stored in vault - Resolves: #1255880 ipactl status should distinguish between different pki-tomcat services - ipactl: Do not start/stop/restart single service multiple times- Resolves: #1256840 [webui] majority of required fields is no longer marked as required - fix missing information in object metadata - Resolves: #1256842 [webui] no option to choose trust type when creating a trust - webui: add option to establish bidirectional trust - Resolves: #1256853 Clear text passwords in KRA install log - Removed clear text passwords from KRA install log. - Resolves: #1257072 The "Standard Vault" MUST not be the default and must be discouraged - vault: change default vault type to symmetric - Resolves: #1257163 renaming certificatte profile with --rename option leads to integrity issues - certprofile: prevent rename (modrdn)- Resolves: #1249226 IPA dnssec-validation not working for AD dnsforwardzone - DNSSEC: fix forward zone forwarders checks - Resolves: #1250190 idrange is not added for sub domain - trusts: format Kerberos principal properly when fetching trust topology - Resolves: #1252334 User life cycle: missing ability to provision a stage user from a preserved user - Add user-stage command - Resolves: #1252863 After applying RHBA-2015-1554 errata, IPA service fails to start. - spec file: Add Requires(post) on selinux-policy - Resolves: #1254304 Changing vault encryption attributes - Change internal rsa_(public|private)_key variable names - Added support for changing vault encryption. - Resolves: #1256715 Executing user-del --preserve twice removes the user pernamently - improve the usability of `ipa user-del --preserve` command- Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities - user-undel: Fix error messages. - Resolves: #1200694 [RFE] Support for multiple cert profiles - Prohibit deletion of predefined profiles - Resolves: #1232819 testing ipa-restore on fresh system install fails - Backup/resore authentication control configuration - Resolves: #1243331 pkispawn fails when migrating to 4.2 server from 3.0 server - Require Dogtag PKI >= 10.2.6 - Resolves: #1245225 Asymmetric vault drops traceback when the key is not proper - Asymmetric vault: validate public key in client - Resolves: #1248399 Missing DNSSEC related files in backup - fix typo in BasePathNamespace member pointing to ods exporter config - ipa-backup: archive DNSSEC zone file and kasp.db - Resolves: #1248405 PassSync should be disabled after ipa-winsync-migrate is finished - winsync-migrate: Add warning about passsync - winsync-migrate: Expand the man page - Resolves: #1248524 User can't find any hosts using "ipa host-find $HOSTNAME" - adjust search so that it works for non-admin users - Resolves: #1250093 ipa certprofile-import accepts invalid config - Require Dogtag PKI >= 10.2.6 - Resolves: #1250107 IPA framework should not allow modifying trust on AD trust agents - trusts: Detect missing Samba instance - Resolves: #1250111 User lifecycle - preserved users can be assigned membership - ULC: Prevent preserved users from being assigned membership - Resolves: #1250145 Add permission for user to bypass caacl enforcement - Add permission for bypassing CA ACL enforcement - Resolves: #1250190 idrange is not added for sub domain - idranges: raise an error when local IPA ID range is being modified - trusts: harden trust-fetch-domains oddjobd-based script - Resolves: #1250928 Man page for ipa-server-install is out of sync - install: Fix server and replica install options - Resolves: #1251225 IPA default CAACL does not allow cert-request for services after upgrade - Fix default CA ACL added during upgrade - Resolves: #1251561 ipa vault-add Unknown option: ipavaultpublickey - validate mutually exclusive options in vault-add - Resolves: #1251579 ipa vault-add --user should set container owner equal to user on first run - Fixed vault container ownership. - Resolves: #1252517 cert-request rejects request with correct krb5PrincipalName SAN - Fix KRB5PrincipalName / UPN SAN comparison - Resolves: #1252555 ipa vault-find doesn't work for services - vault: Add container information to vault command results - Add flag to list all service and user vaults - Resolves: #1252556 Missing CLI param and ACL for vault service operations - Added CLI param and ACL for vault service operations. - Resolves: #1252557 certprofile: improve profile format documentation - certprofile-import: improve profile format documentation - certprofile: add profile format explanation - Resolves: #1253443 ipa vault-add creates vault with invalid type - vault: validate vault type - Resolves: #1253480 ipa vault-add-owner does not fail when adding an existing owner - baseldap: Allow overriding member param label in LDAPModMember - vault: Fix param labels in output of vault owner commands - Resolves: #1253511 ipa vault-find does not use criteria - vault: Fix vault-find with criteria - Resolves: #1254038 ipa-replica-install pk12util error returns exit status 10 - install: Fix replica install with custom certificates - Resolves: #1254262 ipa-dnskeysync-replica crash cannot contact kdc - improve the handling of krb5-related errors in dnssec daemons - Resolves: #1254412 when dirsrv is off ,upgrade from 7.1 to 7.2 fails with starting CA and named-pkcs11.service - Server Upgrade: Start DS before CA is started. - Resolves: #1254637 Add ACI and permission for managing user userCertificate attribute - add permission: System: Manage User Certificates - Resolves: #1254641 Remove CSR allowed-extensions restriction - cert-request: remove allowed extensions check - Resolves: #1254693 vault --service does not normalize service principal - vault: normalize service principal in service vault operations - Resolves: #1254785 ipa-client-install does not properly handle dual stacked hosts - client: Add support for multiple IP addresses during installation. - Add dependency to SSSD 1.13.1 - client: Add description of --ip-address and --all-ip-addresses to man page- Resolves: #1072383 [RFE] Provide ability to map CAC identity certificates to users in IdM - store certificates issued for user entries as - user-show: add --out option to save certificates to file - Resolves: #1145748 [RFE] IPA running with One Way Trust - Fix upgrade of sidgen and extdom plugins - Resolves: #1195339 ipa-client-install changes the label on various files which causes SELinux denials - Use 'mv -Z' in specfile to restore SELinux context - Resolves: #1198796 Text in UI should describe differing LDAP vs Krb behavior for combinations of "User authentication types" - webui: add LDAP vs Kerberos behavior description to user auth - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities - ULC: Fix stageused-add --from-delete command - Resolves: #1200694 [RFE] Support for multiple cert profiles - certprofile-import: do not require profileId in profile data - Give more info on virtual command access denial - Allow SAN extension for cert-request self-service - Add profile for DNP3 / IEC 62351-8 certificates - Work around python-nss bug on unrecognised OIDs - Resolves: #1204501 [RFE] Add Password Vault (KRA) functionality - Validate vault's file parameters - Fixed missing KRA agent cert on replica. - Resolves: #1225866 display browser config options that apply to the browser. - webui: add Kerberos configuration instructions for Chrome - Remove ico files from Makefile - Resolves: #1246342 Unapply idview raises internal error - idviews: Check for the Default Trust View only if applying the view - Resolves: #1248102 [webui] regression - incorrect/no failed auth messages - webui: fix regressions failed auth messages - Resolves: #1248396 Internal error in DomainValidator.__search_in_dc - dcerpc: Fix UnboundLocalError for ccache_name - Resolves: #1249455 ipa trust-add failed CIFS server configuration does not allow access to \\pipe\lsarpc - Fix selector of protocol for LSA RPC binding string - dcerpc: Simplify generation of LSA-RPC binding strings - Resolves: #1250192 Error in ipa trust-fecth-domains - Fix incorrect type comparison in trust-fetch-domains - Resolves: #1251553 Winsync setup fails with unexpected error - replication: Fix incorrect exception invocation - Resolves: #1251854 ipa aci plugin is not parsing aci's correctly. - ACI plugin: correctly parse bind rules enclosed in - Resolves: #1252414 Trust agent install does not detect available replicas to add to master - adtrust-install: Correctly determine 4.2 FreeIPA servers- Resolves: #1170770 [AD TRUST]IPA should detect inconsistent realm domains that conflicts with AD DC - trusts: Check for AD root domain among our trusted domains - Resolves: #1195339 ipa-client-install changes the label on various files which causes SELinux denials - sysrestore: copy files instead of moving them to avoind SELinux issues - Resolves: #1196656 [ipa-client][rhel71] enable debugging for spawned commands / ntpd -qgc $tmpfile hangs - enable debugging of ntpd during client installation - Resolves: #1205264 Migration UI Does Not Work When Anonymous Bind is Disabled - migration: Use api.env variables. - Resolves: #1212719 abort-clean-ruv subcommand should allow replica-certifyall: no - Allow value 'no' for replica-certify-all attr in abort-clean-ruv subcommand - Resolves: #1216935 ipa trust-add shows ipa: ERROR: an internal error has occurred - dcerpc: Expand explanation for WERR_ACCESS_DENIED - dcerpc: Fix UnboundLocalError for ccache_name - Resolves: #1222778 idoverride group-del can delete user and user-del can delete group - dcerpc: Add get_trusted_domain_object_type method - idviews: Restrict anchor to name and name to anchor conversions - idviews: Enforce objectclass check in idoverride*-del - Resolves: #1234919 Be able to request certificates without certmonger service running - cermonger: Use private unix socket when DBus SystemBus is not available. - ipa-client-install: Do not (re)start certmonger and DBus daemons. - Resolves: #1240939 Please add dependency on bind-pkcs11 - Create server-dns sub-package. - ipaplatform: Add constants submodule - DNS: check if DNS package is installed - Resolves: #1242914 Bump minimal selinux-policy and add booleans to allow calling out oddjobd-activated services - selinux: enable httpd_run_ipa to allow communicating with oddjobd services - Resolves: #1243261 non-admin users cannot search hbac rules - fix hbac rule search for non-admin users - fix selinuxusermap search for non-admin users - Resolves: #1243652 Client has missing dependency on memcache - do not import memcache on client - Resolves: #1243835 [webui] user change password dialog does not work - webui: fix user reset password dialog - Resolves: #1244802 spec: selinux denial during kdcproxy user creation - Fix selinux denial during kdcproxy user creation - Resolves: #1246132 trust-fetch-domains: Do not chown keytab to the sssd user - oddjob: avoid chown keytab to sssd if sssd user does not exist - Resolves: #1246136 Adding a privilege to a permission avoids validation - Validate adding privilege to a permission - Resolves: #1246141 DNS Administrators cannot search in zones - DNS: Consolidate DNS RR types in API and schema - Resolves: #1246143 User plugin - user-find doesn't work properly with manager option - fix broken search for users by their manager- Resolves: #1131907 [ipa-client-install] cannot write certificate file '/etc/ipa/ca.crt.new': must be string or buffer, not None - Resolves: #1195775 unsaved changes dialog internally inconsistent - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities - Stageusedr-activate: show username instead of DN - Resolves: #1200694 [RFE] Support for multiple cert profiles - Prevent to rename certprofile profile id - Resolves: #1222047 IPA to AD Trust: IPA ERROR 4016: Remote Retrieve Error - Resolves: #1224769 copy-schema-to-ca.py does not overwrites schema files - copy-schema-to-ca: allow to overwrite schema files - Resolves: #1241941 kdc component installation of IPA failed - spec file: Update minimum required version of krb5 - Resolves: #1242036 Replica install fails to update DNS records - Fix DNS records installation for replicas - Resolves: #1242884 Upgrade to 4.2.0 fails when enabling kdc proxy - Start dirsrv for kdcproxy upgrade- Resolves: #846033 [RFE] Documentation for JSONRPC IPA API - Resolves: #989091 Ability to manage IdM/IPA directly from a standard LDAP client - Resolves: #1072383 [RFE] Provide ability to map CAC identity certificates to users in IdM - Resolves: #1115294 [RFE] Add support for DNSSEC - Resolves: #1145748 [RFE] IPA running with One Way Trust - Resolves: #1199520 [RFE] Introduce single upgrade tool - ipa-server-upgrade - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities - Resolves: #1200694 [RFE] Support for multiple cert profiles - Resolves: #1200728 [RFE] Replicate PKI Profile information - Resolves: #1200735 [RFE] Allow issuing certificates for user accounts - Resolves: #1204054 SSSD database is not cleared between installs and uninstalls of ipa - Resolves: #1204205 [RFE] ID Views: Automated migration tool from Winsync to Trusts - Resolves: #1204501 [RFE] Add Password Vault (KRA) functionality - Resolves: #1204504 [RFE] Add access control so hosts can create their own services - Resolves: #1206534 [RFE] Offer Kerberos over HTTP (kdcproxy) by default - Resolves: #1206613 [RFE] Configure IPA to be a trust agent by default - Resolves: #1209476 package ipa-client does not require package dbus-python - Resolves: #1211589 [RFE] Add option to skip the verify_client_version - Resolves: #1211608 [RFE] Generic support for unknown DNS RR types (RFC 3597) - Resolves: #1215735 ipa-replica-prepare automatically adds a DNS zone - Resolves: #1217010 OTP Manager field is not exposed in the UI - Resolves: #1222475 krb5kdc : segfault at 0 ip 00007fa9f64d82bb sp 00007fffd68b2340 error 6 in libc-2.17.so - Related: #1204809 Rebase ipa to 4.2 - Update to upstream 4.2.0 - Move /etc/ipa/kdcproxy to the server subpackage- Resolves: #1228671 pkispawn fails in ipa-ca-install and ipa-kra-install - Related: #1204809 Rebase ipa to 4.2 - Fix minimum version of slapi-nis - Require python-sss and python-sss-murmur (provided by sssd-1.13.0)- Resolves: #805188 [RFE] "ipa migrate-ds" ldapsearches with scope=1 - Resolves: #1019272 With 20000+ users, adding a user to a group intermittently throws Internal server error - Resolves: #1035494 Unable to add Kerberos principal via kadmin.local - Resolves: #1045153 ipa-managed-entries --list -p still requires DM password - Resolves: #1125950 ipa-server-install --uinstall doesn't remove port 7389 from ldap_port_t - Resolves: #1132540 [RFE] Expose service delegation rules in UI and CLI - Resolves: #1145584 ipaserver/install/cainstance.py creates pkiuser not matching uidgid - Resolves: #1176036 IDM client registration failure in a high load environment - Resolves: #1183116 Remove Requires: subscription-manager - Resolves: #1186054 permission-add does not prompt to enter --right option in interactive mode - Resolves: #1187524 Replication agreement with replica not disabled when ipa-restore done without IPA installed - Resolves: #1188195 Fax number not displayed for user-show when kinit'ed as normal user. - Resolves: #1189034 "an internal error has occurred" during ipa host-del --updatedns - Resolves: #1193554 ipa-client-automount: failing with error LDAP server returned UNWILLING_TO_PERFORM. This likely means that minssf is enabled. - Resolves: #1193759 IPA extdom plugin fails when encountering large groups - Resolves: #1194312 [ipa-python] ipalib.errors.LDAPError: failed to decode certificate: (SEC_ERROR_INVALID_ARGS) security library: invalid arguments. - Resolves: #1194633 Default trust view can be deleted in lower case - Resolves: #1196455 ipa-server-install step [8/27]: starting certificate server instance - confusing CA staus message on TLS error - Resolves: #1198263 Limit deadlocks between DS plugin DNA and slapi-nis - Resolves: #1199527 [RFE] Use datepicker component for datetime fields - Resolves: #1200867 [RFE] Make OTP validation window configurable - Resolves: #1200883 [RFE] Switch apache to use mod_auth_gssapi - Resolves: #1202998 CVE-2015-1827 ipa: memory corruption when using get_user_grouplist() [rhel-7.2] - Resolves: #1204637 slow group operations - Resolves: #1204642 migrate-ds: slow add o users to default group - Resolves: #1208461 IPA CA master server update stuck on checking getStatus via https - Resolves: #1211602 Hide ipa-server-install KDC master password option (-P) - Resolves: #1211708 ipa-client-install gets stuck during NTP sync - Resolves: #1215197 ipa-client-install ignores --ntp-server option during time sync - Resolves: #1215200 ipa-client-install configures IPA server as NTP source even if IPA server has not ntpd configured - Resolves: #1217009 OTP sync in UI does not work for TOTP tokens - Related: #1204809 Rebase ipa to 4.2 - Update to upstream 4.2.0.alpha1- [ipa-python] ipalib.errors.LDAPError: failed to decode certificate: (SEC_ERROR_INVALID_ARGS) security library: invalid arguments. (#1194312)- IPA extdom plugin fails when encountering large groups (#1193759) - CVE-2015-0283 ipa: slapi-nis: infinite loop in getgrnam_r() and getgrgid_r() (#1202998)- "an internal error has occurred" during ipa host-del --updatedns (#1198431) - Renamed patch 1013 to 0114, as it was merged upstream - Fax number not displayed for user-show when kinit'ed as normal user. (#1198430) - Replication agreement with replica not disabled when ipa-restore done without IPA installed (#1199060) - Limit deadlocks between DS plugin DNA and slapi-nis (#1199128)- Fix ipa-pwd-extop global configuration caching (#1187342) - group-detach does not add correct objectclasses (#1187540)- Wrong directories created on full restore (#1186398) - ipa-restore crashes if replica is unreachable (#1186396) - idoverrideuser-add option --sshpubkey does not work (#1185410)- PassSync does not sync passwords due to missing ACIs (#1181093) - ipa-replica-manage list does not list synced domain (#1181010) - Do not assume certmonger is running in httpinstance (#1181767) - ipa-replica-manage disconnect fails without password (#1183279) - Put LDIF files to their original location in ipa-restore (#1175277) - DUA profile not available anonymously (#1184149) - IPA replica missing data after master upgraded (#1176995)- Re-add accidentally removed patches for #1170695 and #1164896- IPA Replicate creation fails with error "Update failed! Status: [10 Total update abortedLDAP error: Referral]" (#1166265) - running ipa-server-install --setup-dns results in a crash (#1072502) - DNS zones are not migrated into forward zones if 4.0+ replica is added (#1175384) - gid is overridden by uid in default trust view (#1168904) - When migrating warn user if compat is enabled (#1177133) - Clean up debug log for trust-add (#1168376) - No error message thrown on restore(full kind) on replica from full backup taken on master (#1175287) - ipa-restore proceed even IPA not configured (#1175326) - Data replication not working as expected after data restore from full backup (#1175277) - IPA externally signed CA cert expiration warning missing from log (#1178128) - ipa-upgradeconfig fails in CA-less installs (#1181767) - IPA certs fail to autorenew simultaneouly (#1173207) - More validation required on ipa-restore's options (#1176034)- Expand the token auth/sync windows (#919228) - Access is not rejected for disabled domain (#1172598) - krb5kdc crash in ldap_pvt_search (#1170695) - RHEL7.1 IPA server httpd avc denials after upgrade (#1164896)- RHEL7.1 ipa-cacert-manage renewed certificate from MS ADCS not compatible (#1169591) - CLI doesn't show SSHFP records with SHA256 added via nsupdate (regression) (#1172578)- Throw zonemgr error message before installation proceeds (#1163849) - Winsync: Setup is broken due to incorrect import of certificate (#1169867) - Enable last token deletion when password auth type is configured (#919228) - ipa-otp-lasttoken loads all user's tokens on every mod/del (#1166641) - add --hosts and --hostgroup options to allow/retrieve keytab methods (#1007367) - Extend host-show to add the view attribute in set of default attributes (#1168916) - Prefer TCP connections to UDP in krb5 clients (#919228) - [WebUI] Not able to unprovisioning service in IPA 4.1 (#1168214) - webui: increase notification duration (#1171089) - RHEL7.1 ipa automatic CA cert renewal stuck in submitting state (#1166931) - RHEL7.1 ipa-cacert-manage cannot change external to self-signed ca cert (#1170003) - Improve validation of --instance and --backend options in ipa-restore (#951581) - RHEL7.1 ipa replica unable to replicate to rhel6 master (#1167964) - Disable TLS 1.2 in nss.conf until mod_nss supports it (#1156466)- Use NSS protocol range API to set available TLS protocols (#1156466)- schema update on RHEL-6.6 using latest copy-schema-to-ca.py from RHEL-7.1 build fails (#1167196) - Investigate & fix Coverity defects in IPA DS/KDC plugins (#1160756) - "ipa trust-add ... " cmd says : (Trust status: Established and verified) while in the logs we see "WERR_ACCESS_DENIED" during verification step. (#1144121) - POODLE: force using safe ciphers (non-SSLv3) in IPA client and server (#1156466) - Add support/hooks for a one-time password system like SecureID in IPA (#919228) - Tracebacks with latest build for --zonemgr cli option (#1167270) - ID Views: Support migration from the sync solution to the trust solution (#891984)- Improve otptoken help messages (#919228) - Ensure users exist when assigning tokens to them (#919228) - Enable QR code display by default in otptoken-add (#919228) - Show warning instead of error if CA did not start (#1158410) - CVE-2014-7850 freeipa: XSS flaw can be used to escalate privileges (#1165774) - Traceback when adding zone with long name (#1164859) - Backup & Restore mechanism (#951581) - ignoring user attributes in migrate-ds does not work if uppercase characters are returned by ldap (#1159816) - Allow ipa-getkeytab to optionally fetch existing keys (#1007367) - Failure when installing on dual stacked system with external ca (#1128380) - ipa-server should keep backup of CS.cfg (#1059135) - Tracebacks with latest build for --zonemgr cli option (#1167270) - webui: use domain name instead of domain SID in idrange adder dialog (#891984) - webui: normalize idview tab labels (#891984)- ipa-csreplica-manage connect fails (#1157735) - error message which is not understandable when IDNA2003 characters are present in --zonemgr (#1163849) - Fix warning message should not contain CLI commands (#1114013) - Renewing the CA signing certificate does not extend its validity period end (#1163498) - RHEL7.1 ipa-server-install --uninstall Could not set SELinux booleans for httpd (#1159330)- Fix: DNS installer adds invalid zonemgr email (#1056202) - ipaplatform: Use the dirsrv service, not target (#951581) - Fix: DNS policy upgrade raises asertion error (#1161128) - Fix upgrade referint plugin (#1161128) - Upgrade: fix trusts objectclass violationi (#1161128) - group-add doesn't accept gid parameter (#1149124)- Update slapi-nis dependency to pull 0.54-2 (#891984) - ipa-restore: Don't crash if AD trust is not installed (#951581) - Prohibit setting --rid-base for ranges of ipa-trust-ad-posix type (#1138791) - Trust setting not restored for CA cert with ipa-restore command (#1159011) - ipa-server-install fails when restarting named (#1162340)- Update Requires on pki-ca to 10.1.2-4 (#1129558) - build: increase java stack size for all arches - Add ipaSshPubkey and gidNumber to the ACI to read ID user overrides (#891984) - Fix dns zonemgr validation regression (#1056202) - Handle profile changes in dogtag-ipa-ca-renew-agent (#886645) - Do not wait for new CA certificate to appear in LDAP in ipa-certupdate (#886645) - Add bind-dyndb-ldap working dir to IPA specfile - Fail if certmonger can't see new CA certificate in LDAP in ipa-cacert-manage (#886645) - Investigate & fix Coverity defects in IPA DS/KDC plugins (#1160756) - Deadlock in schema compat plugin (#1161131) - ipactl stop should stop dirsrv last (#1161129) - Upgrade 3.3.5 to 4.1 failed (#1161128) - CVE-2014-7828 freeipa: password not required when OTP in use (#1160877)- Do not check if port 8443 is available in step 2 of external CA install (#1129481)- Update Requires on selinux-policy to 3.13.1-4- Update to upstream 4.1.0 (#1109726)- Update to upstream 4.1.0 Alpha 1 (#1109726)- Add redhat-access-plugin-ipa dependency- Re-enable otptoken_yubikey plugin- Update to upstream 4.0.3 (#1109726)- Server installation fails using external signed certificates with "IndexError: list index out of range" (#1111320) - Add rhino to BuildRequires to fix Web UI build error- ipa-client-automount fails with incompatibility error when installed against older IPA server (#1083108)- Proxy PKI URI /ca/ee/ca/profileSubmit to enable replication with future PKI versions (#1080865)- When IdM server trusts multiple AD forests, IPA client returns invalid group membership info (#1079498)- Deletion of active subdomain range should not be allowed (#1075615)- PKI database is ugraded during replica installation (#1075118)- Unable to add trust successfully with --trust-secret (#1075704)- ipa-replica-install never checks for 7389 port (#1075165) - Non-terminated string may be passed to LDAP search (#1075091) - ipa-sam may fail to translate group SID into GID (#1073829) - Excessive LDAP calls by ipa-sam during Samba FS operations (#1075132)- Do not fetch a principal two times, remove potential memory leak (#1070924)- trustdomain-find with pkey-only fails (#1068611) - Invalid credential cache in trust-add (#1069182) - ipa-replica-install prints unexpected error (#1069722) - Too big font in input fields in details facet in Firefox (#1069720) - trust-add for POSIX AD does not fetch trustdomains (#1070925) - Misleading trust-add error message in some cases (#1070926) - Access is not rejected for disabled domain (#1070924)- Remove ipa-backup and ipa-restore functionality from RHEL (#1003933)- Display server name in ipa command's verbose mode (#1061703) - Remove sourcehostcategory from default HBAC rule (#1061187) - dnszone-add cannot add classless PTR zones (#1058688) - Move ipa-otpd socket directory to /var/run/krb5kdc (#1063850)- Lockout plugin crashed during ipa-server-install (#912725)- Fallback to global policy in ipa lockout plugin (#912725) - Migration does not add users to default group (#903232)- Mass rebuild 2014-01-24- Fix NetBIOS name generation in CLDAP plugin (#1030517)- Do not add krbPwdPolicyReference for new accounts, hardcode it (#1045218) - Increase default timeout for IPA services (#1033273) - Error while running trustdomain-find (#1054376) - group-show lists SID instead of name for external groups (#1054391) - Fix IPA server NetBIOS name in samba configuration (#1030517) - dnsrecord-mod produces missing API version warning (#1054869) - Hide trust-resolve command as internal (#1052860) - Add Trust domain Web UI (#1054870) - ipasam cannot delete multiple child trusted domains (#1056120)- Missing objectclasses when empty password passed to host-add (#1052979) - sudoOrder missing in sudoers (#1052983) - Missing examples in sudorule help (#1049464) - Client automount does not uninstall when fstore is empty (#910899) - Error not clear for invalid realm given to trust-fetch-domains (#1052981) - trust-fetch-domains does not add idrange for subdomains found (#1049926) - Add option to show if an AD subdomain is enabled/disabled (#1052973) - ipa-adtrust-install still failed with long NetBIOS names (#1030517) - Error not clear for invalid relam given to trustdomain-find (#1049455) - renewed client cert not recognized during IPA CA renewal (#1033273)- hbactest does not work for external users (#848531)- PKI service restart after CA renewal failed (#1040018)- Move ipa-tests package to separate srpm (#1032668)- Fix status trust-add command status message (#910453) - NetBIOS was not trimmed at 15 characters (#1030517) - Harden CA subsystem certificate renewal on CA clones (#1040018)- Mass rebuild 2013-12-27- Remove "Listen 443 http" hack from deployed nss.conf (#1029046) - Re-adding existing trust fails (#1033216) - IPA uninstall exits with a samba error (#1033075) - Added RELRO hardening on /usr/libexec/ipa-otpd (#1026260) - Fixed ownership of /usr/share/ipa/ui/js (#1026260) - ipa-tests: support external names for hosts (#1032668) - ipa-client-install fail due fail to obtain host TGT (#1029354)- Trust add tries to add same value of --base-id for sub domain, causing an error (#1033068) - Improved error reporting for adding trust case (#1029856)- Winsync agreement cannot be created (#1023085)- Installer did not detect different server and IPA domain (#1026845) - Allow kernel keyring CCACHE when supported (#1026861)- ipa-server-install crashes when AD subpackage is not installed (#1026434)- Update to upstream 3.3.3 (#991064)- Temporarily move ipa-backup and ipa-restore functionality back to make them available in public Beta (#1003933)- Server install failure during client enrollment shouldn't roll back (#1023086) - nsds5ReplicaStripAttrs are not set on agreements (#1023085) - ipa-server conflicts with mod_ssl (#1018172)- Reinstalling ipa server hangs when configuring certificate server (#1018804)- Deprecate --serial-autoincrement option (#1016645) - CA installation always failed on replica (#1005446) - Re-initializing a winsync connection exited with error (#994980)- Update to upstream 3.3.2 (#991064) - Add delegation info to MS-PAC (#915799) - Warn about incompatibility with AD when IPA realm and domain differs (#1009044) - Allow PKCS#12 files with empty password in install tools (#1002639) - Privilege "SELinux User Map Administrators" did not list permissions (#997085) - SSH key upload broken when client joins an older server (#1009024)- Remove dependency on python-paramiko (#1002884) - Broken redirection when deleting last entry of DNS resource record (#1006360)- Remove ipa-backup and ipa-restore functionality from RHEL (#1003933)- Replica installation fails for RHEL 6.4 master (#1004680) - Server uninstallation crashes if DS is not available (#998069)- Unable to remove replica by ipa-replica-manage (#1001662) - Before uninstalling a server, warn about active replicas (#998069)- Update to upstream 3.3.1 (#991064) - Update minimum version of bind-dyndb-ldap to 3.5- Fix replica installation failing on certificate subject (#983075)- Allow ipa-tests to work with older version (1.7.7) of python-paramiko- Prevent multilib failures in *.pyo and *.pyc files- ipa-server-install fails if --subject parameter is other than default realm (#983075) - do not allow configuring bind-dyndb-ldap without persistent search (#967876)- diffstat was missing as a build dependency causing multilib problems- Remove ipa-server-selinux obsoletes as upgrades from version prior to 3.3.0 are not allowed - Wrap server-trust-ad subpackage description better - Add (noreplace) flag for %{_sysconfdir}/tmpfiles.d/ipa.conf - Change permissions on default_encoding_utf8.so to fix ipa-python Provides- Update to upstream 3.3.0 (#991064)- Require slapi-nis 0.47.7 delivering a core feature of 3.3.0 release- Update to upstream 3.3.0 Beta 2 (#991064)- Update to upstream 3.2.2 - Drop ipa-server-selinux subpackage - Drop redundant directory /var/cache/ipa/sessions - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost - Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency issues when there are still old parts of software (like entitlements plugin)- Update to upstream 3.2.1 - Drop dogtag-pki-server-theme requires, it won't be build for RHEL-7.0- Add OTP patches - Add patch to set KRB5CCNAME for 389-ds-base- Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0 - Remove a Requires for java-atk-wrapper- Remove release from krb5-server in strict sub-package to allow for rebuilds.- Add a Requires for java-atk-wrapper until we can determine which package should be pulling it in, dogtag or tomcat.- Update to upstream 3.2.0 Beta 1- Update to upstream 3.2.0 Prerelease 1 - Use upstream reference spec file as a base for Fedora spec file- Rebuild for broken deps - Fix 389-ds-base strict dep to be 1.3.0.5 and krb5-server 1.11.1- Rebuild for broken deps in rawhide - Fix 389-ds-base strict dep to be 1.3.0.3- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild- Update to upstream 3.1.2 - CVE-2012-4546: Incorrect CRLs publishing - CVE-2012-5484: MITM Attack during Join process - CVE-2013-0199: Cross-Realm Trust key leak - Updated strict dependencies to 389-ds-base = 1.3.0.2 and pki-ca = 10.0.1- Remove redundat Requires versions that are already in Fedora 17 - Replace python-crypto Requires with m2crypto - Add missing Requires(post) for client and server-trust-ad subpackages - Restart httpd service when server-trust-ad subpackage is installed - Bump selinux-policy Requires to pick up PKI/LDAP port labeling fixes- Updated to upstream 3.1.0 GA - Set minimum for sssd to 1.9.2 - Set minimum for pki-ca to 10.0.0-1 - Set minimum for 389-ds-base to 1.3.0 - Set minimum for selinux-policy to 3.11.1-60 - Remove unneeded dogtag package requires- Update Requires on krb5-server to 1.11- Configure CA replication to use TLS instead of SSL- Updated to upstream 3.0.0 GA - Set minimum for samba to 4.0.0-153. - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so plugin to /dev/null since they cannot be used when trusts are configured - Restrict krb5-server to 1.10. - Update BR for 389-ds-base to 1.3.0 - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca - Add Requires on zip for generating FF browser extension- Updated to upstream 3.0.0 rc 2 - Include new FF configuration extension - Set minimum Requires of selinux-policy to 3.11.1-33 - Set minimum Requires dogtag to 10.0.0-0.43.b1 - Add new optional strict sub-package to allow users to limit other package upgrades.- Require samba packages instead of obsoleted samba4 packages- Updated to upstream 3.0.0 rc 1 - Update BR for 389-ds-base to 1.2.11.14 - Update BR for krb5 to 1.10 - Update BR for samba4-devel to 4.0.0-139 (rc1) - Add BR for python-polib - Update BR and Requires on sssd to 1.9.0 - Update Requires on policycoreutils to 2.1.12-5 - Update Requires on 389-ds-base to 1.2.11.14 - Update Requires on selinux-policy to 3.11.1-21 - Update Requires on dogtag to 10.0.0-0.33.a1 - Update Requires on certmonger to 0.60 - Update Requires on tomcat to 7.0.29 - Update minimum version of bind to 9.9.1-10.P3 - Update minimum version of bind-dyndb-ldap to 1.1.0-0.16.rc1 - Remove Requires on authconfig from python sub-package- Rebuild against samba4 beta8- Rebuild against samba4 beta7- Adopt to samba4 beta6 (libsecurity -> libsamba-security) - Add dependency to samba4-winbind- Updated to upstream 3.0.0 beta 2- Updated to current upstream state of 3.0.0 beta 2 development- Rebuild against samba4 beta4- Updated to upstream 3.0.0 beta 1- Updated to upstream 2.2.0 GA - Update minimum n-v-r of certmonger to 0.53 - Update minimum n-v-r of slapi-nis to 0.40 - Add Requires in client to oddjob-mkhomedir and python-krbV - Update minimum selinux-policy to 3.10.0-110- Update to upstream 2.2.0 beta 1 (2.1.90.rc1) - Set minimum n-v-r for pki-ca and pki-silent to 9.0.18. - Add Conflicts on mod_ssl - Update minimum n-v-r of 389-ds-base to 1.2.10.4 - Update minimum n-v-r of sssd to 1.8.0 - Update minimum n-v-r of slapi-nis to 0.38 - Update minimum n-v-r of pki-* to 9.0.18 - Update conflicts on bind-dyndb-ldap to < 1.1.0-0.9.b1 - Update conflicts on bind to < 9.9.0-1 - Drop requires on krb5-server-ldap - Add patch to remove escaping arguments to pkisilent- Update to upstream 2.2.0 alpha 1 (2.1.90.pre1)- Force to use 389-ds 1.2.10-0.8.a7 or above - Improve upgrade script to handle systemd 389-ds change - Fix freeipa to work with python-ldap 2.4.6- Fix ipa-replica-install crashes - Fix ipa-server-install and ipa-dns-install logging - Set minimum version of pki-ca to 9.0.17 to fix sslget problem caused by FEDORA-2011-17400 update (#771357)- Allow Web-based migration to work with tightened SE Linux policy (#769440) - Rebuild slapi plugins against re-enterant version of libldap- Allow longer dirsrv startup with systemd: - IPAdmin class will wait until dirsrv instance is available up to 10 seconds - Helps with restarts during upgrade for ipa-ldap-updater - Fix pylint warnings from F16 and Rawhide- Update to upstream 2.1.4 (CVE-2011-3636)- Update SELinux policy to allow ipa_kpasswd to connect ldap and read /dev/urandom. (#759679)- Fix wrong path in packaging freeipa-systemd-upgrade- Introduce upgrade script to recover existing configuration after systemd migration as user has no means to recover FreeIPA from systemd migration - Upgrade script: - recovers symlinks in Dogtag instance install - recovers systemd configuration for FreeIPA's directory server instances - recovers freeipa.service - migrates directory server and KDC configs to use proper keytabs for systemd services- Rebuilt for glibc bug#747377- clean up spec - Depend on sssd >= 1.6.2 for better user experience- Fix Fedora package changelog after merging systemd changes- Fix postin scriplet for F-15/F-16- 2.1.3- Default to systemd for Fedora 16 and onwards- Update to upstream 2.1.0- Fix bug #702633- Update minimum selinux-policy to 3.9.16-18 - Update minimum pki-ca and pki-selinux to 9.0.7 - Update minimum 389-ds-base to 1.2.8.0-1 - Update to upstream 2.0.1- Update to upstream GA release - Automatically apply updates when the package is upgraded- Update to upstream freeipa-2.0.0.rc2 - Set minimum version of python-nss to 0.11 to make sure IPv6 support is in - Set minimum version of sssd to 1.5.1 - Patch to include SuiteSpotGroup when setting up 389-ds instances - Move a lot of BuildRequires so this will build with ONLY_CLIENT enabled- Set the N-V-R so rc1 is an update to beta2.- Set minimum version of sssd to 1.5.1 - Update to upstream freeipa-2.0.0.rc1 - Move server-only binaries from admintools subpackage to server- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Set min version of 389-ds-base to 1.2.8 - Set min version of mod_nss 1.0.8-10 - Set min version of selinux-policy to 3.9.7-27 - Add dogtag themes to Requires - Update to upstream freeipa-2.0.0.pre2- Remove unnecessary moving of v1 CA serial number file in post script - Add Obsoletes for server-selinxu subpackage - Using git snapshot 442d6ad30ce1156914e6245aa7502499e50ec0da- Prepare spec file for release - Using git snapshot 80e87e75bd6ab56e3e20c49ece55bd4d52f1a503- Re-arrange doc and defattr to clean up rpmlint warnings - Remove conditionals on older releases - Move some man pages into admintools subpackage - Remove some explicit Requires in client that aren't needed - Consistent use of buildroot vs RPM_BUILD_ROOT- Moved directory install/static to install/ui- Remove dependency on nss_ldap/nss-pam-ldapd - The official client is sssd and that's what we use by default.- Remove radius subpackages- Set minimum pki-ca and pki-silent versions to 9.0.0- Drop BuildRequires on mozldap-devel- Add Requires on krb5-pkinit-openssl- Add ipa-host-net-manage script- Add ipa init script- Set minimum level of 389-ds-base to 1.2.7 for enhanced memberof plugin- remove ipa-fix-CVE-2008-3274- Remove duplicate %files entries on share/ipa/static - Add python default encoding shared library- Drop requires on python-configobj (not used any more) - Drop ipa-ldap-updater message, upgrades are done differently now- Drop conflicts on mod_nss - Require nss-pam-ldapd on F-14 or higher instead of nss_ldap (#606847) - Drop a slew of conditionals on older Fedora releases (< 12) - Add a few conditionals against RHEL 6 - Add Requires of nss-tools on ipa-client- Set minimum version of certmonger to 0.26 (to pck up #621670) - Set minimum version of pki-silent to 1.3.4 (adds -key_algorithm) - Set minimum version of pki-ca to 1.3.6 - Set minimum version of sssd to 1.2.1- Add BuildRequires for authconfig- Bump up minimum version of python-nss to pick up nss_is_initialize() API- Removed python-asset based webui- Change Requires from fedora-ds-base to 389-ds-base - Set minimum level of 389-ds-base to 1.2.6 for the replication version plugin.- Drop Requires of python-krbV on ipa-client- Load ipa_dogtag.pp in post install- Set minimum level of sssd to 1.1.1 to pull in required hbac fixes.- No need to create /var/log/ipa_error.log since we aren't using TurboGears any more.- Fixed share/ipa/wsgi.py so .pyc, .pyo files are included- Added Require mod_wsgi, added share/ipa/wsgi.py- Require python-wehjit >= 0.2.2- Add sssd and certmonger as a Requires on ipa-client- Require python-wehjit >= 0.2.0- Add ipa-rmkeytab tool- Set minimum of python-pyasn1 to 0.0.9a so we have support for the ASN.1 Any type- Remove v1-style /etc/ipa/ipa.conf, replacing with /etc/ipa/default.conf- Add bash completion script and own /etc/bash_completion.d in case it doesn't already exist- Remove ipa_webgui, its functions rolled into ipa_httpd- Removed python-cherrypy from BuildRequires and Requires - Added Requires python-assets, python-wehjit- Added httpd SELinux policy so CRLs can be read- Move ipalib to ipa-python subpackage - Bump minimum version of slapi-nis to 0.15- Set 0.14 as minimum version for slapi-nis- Add Requires: python-nss to ipa-python sub-package- Remove the IPA DNA plugin, use the DS one- Build radius separately - Fix a few minor issues- Replace TurboGears requirement with python-cherrypy- rebuild with new openssl- Fix SELinux code- Fix breakage caused by python-kerberos update to 1.1- New upstream release 1.2.1- Rebuild for Python 2.6- Respin after the tarball has been re-released upstream New hash is 506c9c92dcaf9f227cba5030e999f177- Conditionally restart also dirsrv and httpd when upgrading- Update to upstream version 1.2.0 - Set fedora-ds-base minimum version to 1.1.3 for winsync header - Set the minimum version for SELinux policy - Remove references to Fedora 7- Fix for CVE-2008-3274 - Fix segfault in ipa-kpasswd in case getifaddrs returns a NULL interface - Add fix for bug #453185 - Rebuild against openldap libraries, mozldap ones do not work properly - TurboGears is currently broken in rawhide. Added patch to not build the UI locales and removed them from the ipa-server files section.- Add call to /usr/sbin/upgradeconfig to post install- Update to upstream version 1.1.0 - Patch for indexing memberof attribute - Patch for indexing uidnumber and gidnumber - Patch to change DNA default values for replicas - Patch to fix uninitialized variable in ipa-getkeytab- Set fedora-ds-base minimum version to 1.1.0.1-4 and mod_nss minimum version to 1.0.7-4 so we pick up the NSS fixes. - Add selinux-policy-base(post) to Requires (446496)- Add missing entry for /var/cache/ipa/kpasswd (444624) - Added patch to fix permissions problems with the Apache NSS database. - Added patch to fix problem with DNS querying where the query could be returned as the answer. - Fix spec error where patch1 was in the wrong section- Added patch to fix problem reported by ldapmodify- Fix Requires for krb5-server that was missing for Fedora versions > 9 - Remove quotes around test for fedora version to package egg-info- Update to upstream version 1.0.0- Pull upstream changelog 722 - Add Conflicts mod_ssl (435360)- Pull upstream changelog 698 - Fix ownership of /var/log/ipa_error.log during install (435119) - Add pwpolicy command and man page- Pull upstream changelog 678 - Add new subpackage, ipa-server-selinux - Add Requires: authconfig to ipa-python (bz #433747) - Package i18n files- Pull upstream changelog 641 - Require minimum version of krb5-server on F-7 and F-8 - Package some new files- Marked with wrong license. IPA is GPLv2.- Ensure that /etc/ipa exists before moving user-modifiable html files there - Put html files into /etc/ipa/html instead of /etc/ipa- Pull upstream changelog 608 which renamed several files- package the sessions dir /var/cache/ipa/sessions - Pull upstream changelog 597- Updated upstream pull (596) to fix bug in ipa_webgui that was causing the UI to not start.- Included LICENSE and README in all packages for documentation - Move user-modifiable content to /etc/ipa and linked back to /usr/share/ipa/html - Changed some references to /usr to the {_usr} macro and /etc to {_sysconfdir} - Added popt-devel to BuildRequires for Fedora 8 and higher and popt for Fedora 7 - Package the egg-info for Fedora 9 and higher for ipa-python- Added auto* BuildRequires- Unified spec file- Fixed License in specfile - Include files from /usr/lib/python*/site-packages/ipaserver- Version bump for release- Preverse mode on ipa-keytab-util - Version bump for relase and rpm name change- Broke invididual Requires and BuildRequires onto separate lines and reordered them - Added python-tgexpandingformwidget as a dependency - Require at least fedora-ds-base 1.1- Version bump for release- Add dep for freeipa-admintools and acl- Add dependency for python-krbV- Require mod_nss-1.0.7-2 for mod_proxy fixes- Convert to autotools-based build* Fri Sep 7 2007 Karl MacMillan - 0.3.0-1 - Added support for libipa-dna-plugin- Added support for ipa_kpasswd and ipa_pwd_extop- Abstracted client class to work directly or over RPC- Add mod_auth_kerb and cyrus-sasl-gssapi to Requires - Remove references to admin server in ipa-server-setupssl - Generate a client certificate for the XML-RPC server to connect to LDAP with - Create a keytab for Apache - Create an ldif with a test user - Provide a certmap.conf for doing SSL client authentication- Initial rpm versionpython-ipaclient  !!#$$&'()**,--/0113446779::<==?@@BCCEFFHIIKLLNOOQRRTUUWXXZ[[]^^`abcdefggijjlmmopprssuvvxyy{||~     !!#$$&'')**,--/00233566899;<<>??ABBDEEGHHJKKMNNPQQSTTVWWYZZ\]]_``bcceffhiikllnooqrrtuuwxxz{{}~~      !!#$$&'')**,--/00233566899;<<>??ABBDEEGHHJKKMNOOQRRTUUWXXZ[[]^^`aacddfggijjlmmopprssuvvxyy{||~4.5.4-10.sl7_5.14.5.4-10.sl7_5.14.5.4-10.sl7_5.1  ipaclientipaclient-4.5.4-py2.7.egg-infoPKG-INFOSOURCES.txtdependency_links.txtentry_points.txtnot-zip-saferequires.txttop_level.txt__init__.py__init__.pyc__init__.pyo__main__.py__main__.pyc__main__.pyofrontend.pyfrontend.pycfrontend.pyoinstall__init__.py__init__.pyc__init__.pyoautomount.pyautomount.pycautomount.pyoclient.pyclient.pycclient.pyoipa_certupdate.pyipa_certupdate.pycipa_certupdate.pyoipa_client_install.pyipa_client_install.pycipa_client_install.pyoipachangeconf.pyipachangeconf.pycipachangeconf.pyoipadiscovery.pyipadiscovery.pycipadiscovery.pyontpconf.pyntpconf.pycntpconf.pyosssd.pysssd.pycsssd.pyoplugins__init__.py__init__.pyc__init__.pyoautomember.pyautomember.pycautomember.pyoautomount.pyautomount.pycautomount.pyoca.pyca.pycca.pyocert.pycert.pyccert.pyocertmap.pycertmap.pyccertmap.pyocertprofile.pycertprofile.pyccertprofile.pyodns.pydns.pycdns.pyohbacrule.pyhbacrule.pychbacrule.pyohbactest.pyhbactest.pychbactest.pyohost.pyhost.pychost.pyoidrange.pyidrange.pycidrange.pyointernal.pyinternal.pycinternal.pyolocation.pylocation.pyclocation.pyomigration.pymigration.pycmigration.pyomisc.pymisc.pycmisc.pyootptoken.pyotptoken.pycotptoken.pyootptoken_yubikey.pyotptoken_yubikey.pycotptoken_yubikey.pyopasswd.pypasswd.pycpasswd.pyopermission.pypermission.pycpermission.pyorpcclient.pyrpcclient.pycrpcclient.pyoserver.pyserver.pycserver.pyoservice.pyservice.pycservice.pyosudorule.pysudorule.pycsudorule.pyotopology.pytopology.pyctopology.pyotrust.pytrust.pyctrust.pyouser.pyuser.pycuser.pyovault.pyvault.pycvault.pyoremote_plugins2_114__init__.py__init__.pyc__init__.pyoaci.pyaci.pycaci.pyoautomember.pyautomember.pycautomember.pyoautomount.pyautomount.pycautomount.pyobatch.pybatch.pycbatch.pyocert.pycert.pyccert.pyoconfig.pyconfig.pycconfig.pyodelegation.pydelegation.pycdelegation.pyodns.pydns.pycdns.pyogroup.pygroup.pycgroup.pyohbacrule.pyhbacrule.pychbacrule.pyohbacsvc.pyhbacsvc.pychbacsvc.pyohbacsvcgroup.pyhbacsvcgroup.pychbacsvcgroup.pyohbactest.pyhbactest.pychbactest.pyohost.pyhost.pychost.pyohostgroup.pyhostgroup.pychostgroup.pyoidrange.pyidrange.pycidrange.pyoidviews.pyidviews.pycidviews.pyointernal.pyinternal.pycinternal.pyojoin.pyjoin.pycjoin.pyokrbtpolicy.pykrbtpolicy.pyckrbtpolicy.pyomigration.pymigration.pycmigration.pyomisc.pymisc.pycmisc.pyonetgroup.pynetgroup.pycnetgroup.pyootpconfig.pyotpconfig.pycotpconfig.pyootptoken.pyotptoken.pycotptoken.pyootptoken_yubikey.pyotptoken_yubikey.pycotptoken_yubikey.pyopasswd.pypasswd.pycpasswd.pyopermission.pypermission.pycpermission.pyoping.pyping.pycping.pyopkinit.pypkinit.pycpkinit.pyoprivilege.pyprivilege.pycprivilege.pyopwpolicy.pypwpolicy.pycpwpolicy.pyoradiusproxy.pyradiusproxy.pycradiusproxy.pyorealmdomains.pyrealmdomains.pycrealmdomains.pyorole.pyrole.pycrole.pyoselfservice.pyselfservice.pycselfservice.pyoselinuxusermap.pyselinuxusermap.pycselinuxusermap.pyoservice.pyservice.pycservice.pyosession.pysession.pycsession.pyosudocmd.pysudocmd.pycsudocmd.pyosudocmdgroup.pysudocmdgroup.pycsudocmdgroup.pyosudorule.pysudorule.pycsudorule.pyotrust.pytrust.pyctrust.pyouser.pyuser.pycuser.pyo2_156__init__.py__init__.pyc__init__.pyoaci.pyaci.pycaci.pyoautomember.pyautomember.pycautomember.pyoautomount.pyautomount.pycautomount.pyobatch.pybatch.pycbatch.pyocaacl.pycaacl.pyccaacl.pyocert.pycert.pyccert.pyocertprofile.pycertprofile.pyccertprofile.pyoconfig.pyconfig.pycconfig.pyodelegation.pydelegation.pycdelegation.pyodns.pydns.pycdns.pyodomainlevel.pydomainlevel.pycdomainlevel.pyogroup.pygroup.pycgroup.pyohbacrule.pyhbacrule.pychbacrule.pyohbacsvc.pyhbacsvc.pychbacsvc.pyohbacsvcgroup.pyhbacsvcgroup.pychbacsvcgroup.pyohbactest.pyhbactest.pychbactest.pyohost.pyhost.pychost.pyohostgroup.pyhostgroup.pychostgroup.pyoidrange.pyidrange.pycidrange.pyoidviews.pyidviews.pycidviews.pyointernal.pyinternal.pycinternal.pyojoin.pyjoin.pycjoin.pyokrbtpolicy.pykrbtpolicy.pyckrbtpolicy.pyomigration.pymigration.pycmigration.pyomisc.pymisc.pycmisc.pyonetgroup.pynetgroup.pycnetgroup.pyootpconfig.pyotpconfig.pycotpconfig.pyootptoken.pyotptoken.pycotptoken.pyootptoken_yubikey.pyotptoken_yubikey.pycotptoken_yubikey.pyopasswd.pypasswd.pycpasswd.pyopermission.pypermission.pycpermission.pyoping.pyping.pycping.pyopkinit.pypkinit.pycpkinit.pyoprivilege.pyprivilege.pycprivilege.pyopwpolicy.pypwpolicy.pycpwpolicy.pyoradiusproxy.pyradiusproxy.pycradiusproxy.pyorealmdomains.pyrealmdomains.pycrealmdomains.pyorole.pyrole.pycrole.pyoselfservice.pyselfservice.pycselfservice.pyoselinuxusermap.pyselinuxusermap.pycselinuxusermap.pyoserver.pyserver.pycserver.pyoservice.pyservice.pycservice.pyoservicedelegation.pyservicedelegation.pycservicedelegation.pyosession.pysession.pycsession.pyostageuser.pystageuser.pycstageuser.pyosudocmd.pysudocmd.pycsudocmd.pyosudocmdgroup.pysudocmdgroup.pycsudocmdgroup.pyosudorule.pysudorule.pycsudorule.pyotopology.pytopology.pyctopology.pyotrust.pytrust.pyctrust.pyouser.pyuser.pycuser.pyovault.pyvault.pycvault.pyo2_164__init__.py__init__.pyc__init__.pyoaci.pyaci.pycaci.pyoautomember.pyautomember.pycautomember.pyoautomount.pyautomount.pycautomount.pyobatch.pybatch.pycbatch.pyocaacl.pycaacl.pyccaacl.pyocert.pycert.pyccert.pyocertprofile.pycertprofile.pyccertprofile.pyoconfig.pyconfig.pycconfig.pyodelegation.pydelegation.pycdelegation.pyodns.pydns.pycdns.pyodomainlevel.pydomainlevel.pycdomainlevel.pyogroup.pygroup.pycgroup.pyohbacrule.pyhbacrule.pychbacrule.pyohbacsvc.pyhbacsvc.pychbacsvc.pyohbacsvcgroup.pyhbacsvcgroup.pychbacsvcgroup.pyohbactest.pyhbactest.pychbactest.pyohost.pyhost.pychost.pyohostgroup.pyhostgroup.pychostgroup.pyoidrange.pyidrange.pycidrange.pyoidviews.pyidviews.pycidviews.pyointernal.pyinternal.pycinternal.pyojoin.pyjoin.pycjoin.pyokrbtpolicy.pykrbtpolicy.pyckrbtpolicy.pyomigration.pymigration.pycmigration.pyomisc.pymisc.pycmisc.pyonetgroup.pynetgroup.pycnetgroup.pyootpconfig.pyotpconfig.pycotpconfig.pyootptoken.pyotptoken.pycotptoken.pyootptoken_yubikey.pyotptoken_yubikey.pycotptoken_yubikey.pyopasswd.pypasswd.pycpasswd.pyopermission.pypermission.pycpermission.pyoping.pyping.pycping.pyopkinit.pypkinit.pycpkinit.pyoprivilege.pyprivilege.pycprivilege.pyopwpolicy.pypwpolicy.pycpwpolicy.pyoradiusproxy.pyradiusproxy.pycradiusproxy.pyorealmdomains.pyrealmdomains.pycrealmdomains.pyorole.pyrole.pycrole.pyoselfservice.pyselfservice.pycselfservice.pyoselinuxusermap.pyselinuxusermap.pycselinuxusermap.pyoserver.pyserver.pycserver.pyoservice.pyservice.pycservice.pyoservicedelegation.pyservicedelegation.pycservicedelegation.pyosession.pysession.pycsession.pyostageuser.pystageuser.pycstageuser.pyosudocmd.pysudocmd.pycsudocmd.pyosudocmdgroup.pysudocmdgroup.pycsudocmdgroup.pyosudorule.pysudorule.pycsudorule.pyotopology.pytopology.pyctopology.pyotrust.pytrust.pyctrust.pyouser.pyuser.pycuser.pyovault.pyvault.pycvault.pyo2_49__init__.py__init__.pyc__init__.pyoaci.pyaci.pycaci.pyoautomember.pyautomember.pycautomember.pyoautomount.pyautomount.pycautomount.pyobatch.pybatch.pycbatch.pyocert.pycert.pyccert.pyoconfig.pyconfig.pycconfig.pyodelegation.pydelegation.pycdelegation.pyodns.pydns.pycdns.pyoentitle.pyentitle.pycentitle.pyogroup.pygroup.pycgroup.pyohbacrule.pyhbacrule.pychbacrule.pyohbacsvc.pyhbacsvc.pychbacsvc.pyohbacsvcgroup.pyhbacsvcgroup.pychbacsvcgroup.pyohbactest.pyhbactest.pychbactest.pyohost.pyhost.pychost.pyohostgroup.pyhostgroup.pychostgroup.pyoidrange.pyidrange.pycidrange.pyointernal.pyinternal.pycinternal.pyojoin.pyjoin.pycjoin.pyokrbtpolicy.pykrbtpolicy.pyckrbtpolicy.pyomigration.pymigration.pycmigration.pyomisc.pymisc.pycmisc.pyonetgroup.pynetgroup.pycnetgroup.pyopasswd.pypasswd.pycpasswd.pyopermission.pypermission.pycpermission.pyoping.pyping.pycping.pyopkinit.pypkinit.pycpkinit.pyoprivilege.pyprivilege.pycprivilege.pyopwpolicy.pypwpolicy.pycpwpolicy.pyorole.pyrole.pycrole.pyoselfservice.pyselfservice.pycselfservice.pyoselinuxusermap.pyselinuxusermap.pycselinuxusermap.pyoservice.pyservice.pycservice.pyosession.pysession.pycsession.pyosudocmd.pysudocmd.pycsudocmd.pyosudocmdgroup.pysudocmdgroup.pycsudocmdgroup.pyosudorule.pysudorule.pycsudorule.pyotrust.pytrust.pyctrust.pyouser.pyuser.pycuser.pyo__init__.py__init__.pyc__init__.pyocompat.pycompat.pyccompat.pyoschema.pyschema.pycschema.pyopython2-ipaclient-4.5.4Contributors.txtREADME.mdpython2-ipaclient-4.5.4COPYING/usr/lib/python2.7/site-packages//usr/lib/python2.7/site-packages/ipaclient-4.5.4-py2.7.egg-info//usr/lib/python2.7/site-packages/ipaclient//usr/lib/python2.7/site-packages/ipaclient/install//usr/lib/python2.7/site-packages/ipaclient/plugins//usr/lib/python2.7/site-packages/ipaclient/remote_plugins//usr/lib/python2.7/site-packages/ipaclient/remote_plugins/2_114//usr/lib/python2.7/site-packages/ipaclient/remote_plugins/2_156//usr/lib/python2.7/site-packages/ipaclient/remote_plugins/2_164//usr/lib/python2.7/site-packages/ipaclient/remote_plugins/2_49//usr/share/doc//usr/share/doc/python2-ipaclient-4.5.4//usr/share/licenses//usr/share/licenses/python2-ipaclient-4.5.4/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz9x86_64-redhat-linux-gnudirectoryASCII textpython 2.7 byte-compiledPython script, ASCII text executableUTF-8 Unicode text  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR?@7zXZ !X{x] crt:bLLТY άF[)A=^W RWRD) (=LaC\/TL]C,oX%b^lCoRWKE6?&8Hm[iEcvXBt#Cm9&%Tz+(D-~⾩WlCGܵHfAS4fͶϋ0N*ԡ#"S̙P;M5x"w4>mdb+ɘor󮫣?t.piw\YY'5 /e3گ|^T*bebNS[`Blp_p~l r Z ]f"TX })}. qѸi7 q=[[di\SbNwuC$该*&1# 9c0w+VbN-N[[KN%`!نYSI׳uQm585:0*|ȫ<++"Xh΢?c;wPӾ5@NGfz8im7b$\s/{K6p?!oj$10X[Lgrz0gst*4_~)zTײp}\TU\h@lNǥ뀚Uo8D(2+Y+ uJ`%0E"*ʈDd SŲ&2&Hz>Ek4ܯВ"BVn!޳Y$%f:kxf%0H$aԈ\8B (-Ys3F Ōu=kԷ<)[!>Nx)1Γ̒_ƙ]g&Xq$,ȚD}%kfd"1AKL&B&]L!O>TPIٰAYZOR8 U&?j 7m̼~<ն:Xvfɪ--x!?BjavkDQUl *MhjzTr{ UQ%Kjgo> O򺀙@J,hxg{b*.^Y(cznkC2WJjCBTBh .ۜQo2": "w%>z^Կ0$:BB(a~#|nĪRCn Hy0ժ3@3kԈɘ r_X/5E8=mѻQ@cS[1"ZeaʊpFq^rphKW\Nufr8L&Sv(-''$[S=QH:.\VyAǃ *?Zm屦U/RE]DM0xښVh ַsFaERV c2^YK~iZl.8TvEԌVRTo!vSwLΚ6QY;q_eM𨽤'߾}#>D_bߟej J_0x8m. FXnsրIݚS'C3n/ƼCyBb,IAERNt _$p꛹n߄a'3СЅyz'>~Gl̕fzǒN1G$VxACuwp"fPV`"i~ULGnbCa+^ֳ&2?jG߮ ̬'lTτq'[&)&h*Sv: D%sD +WBAzI΢]trPZ&&o|aoʚ':=+NT՛ъePi%Nz9I>DK#'V/@hϮ+94WWXB3آr&P7 JџBT )-FF9S1h^~&;+Y46K͢ea{Xv߈LE=C` p[VDGckN_\bj 8Hq#Zu?)h45nk߷m9;7}wrY<<2/^A*%sڈ0-nsa[3{Ky|3^! XPwV9 ГVisЙ3j`xl'.ᅿXĜKմ $2aP(%Cr:G*SrQӞ5870̧Xbz RR1E; x?d@bL ߌ/ݯ\\8P|v9oXs!##i4R4p@MSLfB`7neWbLV>ReO7KϜQ[}֚BuA p;1aT1n\ caͫ2vrr ;UJ'́3k/aPuT37xT2 ذbg,ۭ$2 3V#`>rts_9ԨrS߷a̓Z,K D0(;hA>L0jjZć8PHWt9; D=VAFlB@i|"uo[25.흙XƑ?#fe9yep!m֧^)Z/^'/2e׉]ͺҙ,;#pgSzS;U3evjhsWq; $ZᰩkN(c:cŇc3DkTgA+;w /3N׍u>.I Iߘ(-6@yqa'>t]?^XO7k|ZGj.[XV]GW V1a R6Q wny03ߢ|U=j@PR^>M<΅C<dXCYf$-v)|³fcۣsݥD  ݃QMaGNQ1)=rLȔ/L\\-&$Jə$[͵ ApBm"PѓKl5nOO5Ȣ{ 4T~5 Q]t[,]9ɾR)EWX סp>LD6}HycӍ%ȂpL*^ޭ0M3oc4/OwLrkUÌZZm6/_kaIZf",27ZksE(``x%\%8~GG$0C4\Dt#(¶Dk,sZ8{Ȥ _mh?z ܵ 4 魸{[ *PѵH]yP[#M$I2nU1ŀekoUCfAcUKSSa[3`9u1?VȽzgס32ǍX] Y@hͶVɱr^qj!pO͔Ca[roɺU:%FB+ț / OZ %D,Q踅n&6G,r|2y= .G/g#pzRYi lH])! ^P6|9SW "ME]xh)W>`:Ioe*)Ԩ|LӜ& Kzdw1sv~kD=_<5 h"_pzEH0(vm~~ __X.JT)zR', U `!]f9,~;×WоDkZŽ1إ-edAv?a@=57;nsխN!rM/q&izqU}[R.tn@F#fI\Տ99~~/ܔC L`zF^(3҂NS<;#/0"L}%y6}\۾[)B=ʝ%7A^ mb臝''6gI0POV>X$\U䒳G:pfbc;QĖv)s RyJ/Ijr=\twߊ|jêP%8P֍u)څTA]z11nu') ƞ9DD+Y͵y\D KON}4Z 9+izbWōM.Fa00-.|ZE24x2hH{s1fl1y{%ffŘE3UZ͉nۣBBx"7|4ZgRUV[6!YO|#f|ܚIRڦjrT( j* xR;#S &!,c,]F[*j"Z i&RC x|GZpK5`b1aolѡb7>`8="@^m(rYhH!tՏU2&wRՓwJɯ f4)ϓR-}j]ʺ&q$wo!QGͻ_W)mXͻViG8J@DSTP8 7.b9UFƠX{o朞-K'=g^zA̺0,6뺥SmkILW"r+ǜ]~n䧕GŸ}P/Oqr~ 0I=Ca?%>'X' b0\ ?3dG^0r; 4w"Xݠ ޔs+]yP_\Xe/ AKFO&Um:1iVykl8|q>cPA=|?GHK;zOC&,:6J\H e7ظ{zMvL*p}1B.VǴ)M=ghDѦGͲ9oWjGGd$xw'kvVәȡmnn58'$i,i3'qx9wy El37Wc*CP{…Vxx[*H&Hz^SgGJf )<~(`dIp?kq"ὃϭ2eG㱤pdacQ*)a3ZWME"+;mb%kRp3HD>_$H]i H+f|AA}pTY SSlIV\zc|3VM#+*ݢZK&UBIP0:y4rb{V@R^pmmlB!صI*t.+`*qHkI+Wd֡R'9R^h!vcH ז1bqt`Hc%,rU7[p@ OPMԧQRs9܎A ڔPtz9ip 'wD W#o9Ł^.PCAA-̵ vLq:%E|:.2ivufJ&zs 3ήtZ̓KFrzgHA&wmC,'HCj@߈ ȅt@p=ցt^ڙaIACgPj췭 ̑\303ޥp`? GXTU`hw [iy&E_*JEdG^&z &pv%UD%F^}+v/<p%5A ֽĭYLn=2ulmo㰨oJ_)kMk_Sѝ6FS J\Ƚ1=_zmcݦwNLL'sUyJ=.]sQ`>]smܟw6\L{jK QCQ=Dga~;.\ ws-]F:T<,HOVyKXFGu)PVt,>LeާJʩ;hMi,$|1(&f9b_ if,sIޕ~cInׁ"N^ZW< A{mMգ7+ʐQwWLrdA8,=eb7P: L q|y > b%cjTCn< YdqO[ߗHLle5n 5zje_.q])WgkiN6 "-> Fb2[yɛ&oevN1~ $J$>ėNwp(%ѭ,x4 1)mW'(zŊ>i+}sXT_R˟5|]uphnրQq,LJn5F'.AHBzrFJM,V86+r2a/ԙv2fˬ펆[@txIQUǓֶI1%,GG& ʋee>}Oʪ,?y;ћzX<մ)uc [HcҚ3IQ<r7eNl8#1UN^HfZfWumc[aP\wRmfk5|KWG20R~V( k5:BkދMYL6U>'O[>&h8ϒx}xY]&pTEΏ@!Ď \b]ظ>+lWxF ۼeK:ru#f= @.cLPˉ'чfRL3T~Њ֓Ts]woe|qnRa *7=ܻh`-gat/[.: _+ָ2 {! ic*Ұ7$;O/m^h=W&6J}'z?ddE1ط%vwM u,Ɛ7p0;HfńBi`*\>  ć[(#xDI>wa1KgQɝmcx4HIQyG_i3YɠƬ Z3IӮ[%܇FPL |ަìfoHEX@ qlr 0lϵNJCCŐa@87:3;%|ߋ0zrvS]1; cx*H 0 V4M hOHX%QHT߰'+ۛSh;BaozTͨς / YYs:~N| 7"{_s\SPU!N*k|nM:&<*kOlk#PUn&`׌K"-Dۧ+p40lJ'kxE#WG oYA^M  g8|ҁvWDýf,0|^\p˿3U"&DPQ0J m^V2!#(bKiNӽnK_*5S4+4x(13_W2)0PnښI2vj/"`J{=v.gw)j;_K-V0z-M*Rm$EYځ*)T[N _z }\GD{]VَM7gsP mPgXNqjmӤjV$qx&y_o4Ev"}Y ({s .|v;C+}JL*?>K];R¥7 vOw4WQ ?L+kMƓԞ> K~[ Z/oYQd~٪c WLT`:w!i+NrZM˜&](%Y/ZGm;O {ub@p^V`6&ͫ||}"KYa,_:+q^$MjJfd:&Z3zC:}1e$`>o1i&+mE_[Χ턆J\"Id}\ 4TN+$@AuoD_ay&ܚCrMv|$tNoWQpĐCBWlm1uErUH : 7v"yDҠjp,h+hL>pp9Y"Pr o5u< cvn'n#Mrd!*צF]sVgr\cpnjWWѼ?>rIh 9Zw5 r>Y&i'&sO1{Qr`` :CtpmNMj}` vK1tKpd$罶q#@3r/] Z&9֥U^{49&#dyM 7|9zdI]A4+dAvDv^MJ݋h R K\U@!a257 9uw}H5nF Fny! jU"zHVR w&t/ݍ۰8Ze/NXC7фiƈ sTmphTj૭C%x P ?+/SxޘdaZS@ sI6%eL͕LNj=;ʔ/s:?xYTMWЀQBɃ6 rt`>%DKԈY/ }R;}b[/`i}Rtl+Q٭eV[Rˏ7A'x2Iy&|$ %/6oBLM!zL1Gxy߀XKkPDWj\!e\Z7{s?#]VKӀi)1A`MX1Aߋؗ?#ce^f5YR˜??b)X h'>&6{zIh~%AE@dх##GxbDU*$,?r@HeEY{X[Ҡo`y&-x9}3zŸNeJ?+LSE}x{_ .Bmͺ$.cS_ tS~ N[Λ~;2YIOp<ꜷ0Q#fh$[X íeTi{UbѪ .z*6"7U`)QGW14 `mMX?C-SGZIFJ1'b'k\k $?'5bGrrF%jѾC b;o lxCO6BϞ~@FSn9s]bVlͥDpw rwcϞ=DMBjgZ_ߜR\dfʯ " 1ŎQ09хG1=b'b+ r}+f,6*Ex'fn=.2ERfEr2Uۖk KNΛUr-va/|:[F iA,,4Ӎ5TqgJkO/BN:yeT][@9wX [ȸl 4p/y#<0|qsҴPgS2 nqR楍)5'+n}QmsiHb0<~zĽ4Z9U)'n[J[E$ S|Fyb_eYg"Xӣ'HߎE?~?Xf&xJz*S6EXJs\A0>)vK9u o4%b^W#CxC[{?M$8 G{hş>uXTx2t4x N: Zm򆳓bN13=L5KVtV{I~rw*Je8#%Xr ±cDWMyKxE t' x5<(n2P}R=b}$?09Fb9e$Yѽ] E>pbH^ &-wu]+0{%84 ;䯙]^KOoY-`Acs6qVG~YR9!Q ӑKp,Y 8֔hm':%BWJ&q{ZM(m TP<%ĵ̾c2B/W-t*Pt]I{,3|_^o"4u€J~gApL/VZNb'lzӍ1==L 9"1R@jDP@??{+{}y3ZN@{UdE$ۮ%Gd8Q% ,lY-ݪ1K5)Q2b8Ok a23bΠoHiZ#9Se@|Zָw9q lH+s[g1rZ;!Ѩzt&sNi$u?_іVMp|k4!Q %xDV0ϵ: ǟ%e%ĐLnx(CsH)W;r]KvIqG! \AJW#O7} swp⧌-er[?F@ G'hĎ@gw ;7ET"/ ;Ͷc OE3+;AR^@ځ'>/vFF|RZ0+1:- 9Vn^}/_)Wlc<ŕ1l{G.7br|8`5³fn5~(o"Oj=qP)Ͱ(v?;!-ą78vJn+!:v] ̠@1Ѩ S}JszPMGYH`V3B @ K(\S["5扌Uu8lk݄5iáP*N Yt!>XmBkL*L@4f:aV.-@PTUm׫qrCńg'Fcdhl\Rh;GId  aRM{[$!4Z.cLdNoXr`G{vzhxdX j.NbB:08@DGiOm-JP+;ukn÷gn2?uqY4"c' 2~?<8%Xj182X1mL dx_KC)5T3mtiU~ZcRz6~*)N*gZ-i͐| &@Hyq@֐a5G H@ >V!4)2˃n9(0~|_ӑ'23 qRwrVϒMKn"CRʎ@ ۆܸip;P{R N~&IGmLG|4T٫(|R,tl`p>!}E ac`EVYroo!X~X:w@F@b/Ws"8;*FLX'B BK'¼Z/:4|) D^~"mmix4^4+tǛeQ11ݗslAzԵO½y}C^?p- 5 cѮf]HA@)J#Yd}C Şp8TG*6 ڐu.vBh0hߓ#H٘,$XuSNِ^HSB,,w%+˽XkTi0paJ> 4 ps~Gk6?$Jт/iNR p'5sC_5>q&'V,M59,6t,zO {7r*8abCY*1̥Q{}GXz`W{sCCtH2L̐K%#fSy~n&8ss"^K6)Lp:Uxj'lzK3Mr>j֒Ny&b5 Ӕ_IXO]b~RD(6StKBWmA>ʡ \ylQNIk "^WEe3Y@ ᾛk͊hyM&K[ٶ+a-%V?I:ZU: Z4"r(Z}ǯ7ޞ,:" %y,ҋ+ܷ!>k9ʛi'e>y6Ix>ay)!HaƂ4d҈ǴpN$}ZF0^ ]aS=KGQ]\oR+FKbSB?>^u4*[ʧ<qIҘP=T&20w*gsnQs0P͌x!SMAݮ8OKZLXkwP8~fWHpG$E'Cr*&̐=Wpro[%x_U_2fO5C Oн]C+6i!F9v;ѦcftB O{ZQ~Dp`ÌclW+ S fk@7((YUŏm _/q:sӔc:r'L2O%9+5Ϡ\u)s AS7蠇bg#0ٯ#2 A+LWDɁ:Y!@ H-7S'g N0lqe2,Q4ia X''I-_'SWk4@d"SVnV׾Yj颞dSg@k@RXAVZ[n>9nx)?1g [J\j /tTG-[^3(,̀]J%6!B џzhaȮ: ,2͵v`\󬽵6⣐@ MGr]d}t%𘰭7Y=G.GHr@[,h)ۮlwt$Q;%sǜ`裹i(!BM,-q>)V=n$lnnJZ\=}Tmb ,7džT%4o< M9 jY F>l=1doTTc?y$֡:K7/O [:CD)q)8 Bx ]m1BtvK:Xx\T=}2 X]j˒;/Ei%8jzo^N/ zDabm~K=<{R/gFPz as_8x7~wDsg|д[oO>Z?Y3Uߪ0̊/2+MOuAy~;kf̢{Θ@u媜uP^ nl+y;aE K@=Q @N@6;MuYRaBW5CzC:#:}S񫛫Ti}E;i]1)J{FOA_hS5ax8^6ǡھfͰIQoEUry.ew;`%~{9 3uxL@) {(׫U쑘^#ڄ"79~aW*$+xoSJ!T=⛎˓ 0\Nr1)zdDT~C 1ZVA$dUpk((yeVnfD>SRpxtzp-9Syt.ڋZ=xkw'*y0۸TؾҰN<&bml9Fی,lIhXE]^`tNۇm9ŭT2;470"kO+4Q3[~& d8ӝH/Τ;"Ɩd>n*"8,DCEwAgV?ߣ!]Xcw RD5KKuxp -d`Y|ݳ zҎ0 jGt%H>oo]gf]F9`> }f(+#>^3ɧ!$} VS#m#, PSkƎ] 묥Qf4^D$&݇RMР'Kd8Y;e9 D=daTW>@rD4N3{C QۯڐICpCɧ=;>k#]'ݛTXS\{p\*ǵQrU^N]~|= L=[zN]|5oOz5H[&"67ݞEt 4܎R"yJRlxP=ʡ=':ݿ N V;@ѫVm.Ri`9 B$}#xԦ XcÐeOIk9,PU򮓎gfj<\H@uۦ#!Ӵb4tL|Qk~ V˲kHi[ҳ/&L(9Ej@:XtlGPfE:|ckj#<'fz]<\"L78rO!}86y0VP@%r1ɰ]\_OI mI+Hl\ZfAz&DepQj!' ɍhcA|*;Cٴ i"3"n/ļu ڰJ;rx"EaçIac80 'G86 (XtZ)l*.ae9LFs=25ȄjBs`1(Q1˧JW+ol7W,sZJi[%KfldȢ)J &|r5!mn.f^0pgd868M))avQyH4FV6ӽy᭹+ G1AP>p/JȤ"ސ;^8@%|C1>bH"J;ؿq,Μ9eN _UC <=2BB/sa#yE .,SI}^، x`jݬ[Ó͗ɐH>Ro. g(ؕBqF+`# Lb@}V\i({^Yݦ SOlsC8_X+[I=;[*S~ \e!xI z΂W܊tc ݰQawh4l'; >I* \L91)981;LA&AOvwΑBt)0Z9݁ԬɋT$H4烪q'ǻim cyX"̻1m 8"Ӭ#9xdޢy\{o[졟X nKalWL=]VwY`XY, "4T` suģ49{O^GΞ|+?VǣG=zh IR$& lkJPewqA“wX<9DTIѼ[©MCqP$"0]lrWDB㍓E0HKV>Nu1Ȉ0Oq,Q]|MVZ3=PQذN 'fOC߭uk{w 5H'f$ G RO%9!!c<ilT¤F !peuWEmcea+4舡W/ؽ͇9YZ;2$\r˦wZ-K |tJ(x|SXJ1 &u-'u\(`}F4@wyFu*гƸR?qϽ>%mZO JDo_.噾{N&L̻["Wn1.>䠚Q8:'G3=`vtC."Obk h*ƍ>цN)]H׀MO>^~sEN- TvԢ5.e YwN]بFECǾrsNYY# GcF#P._X HׄKvxMqIfѤ[~P4J6 ۦ;pߓR>3w 5k"sv@H$لʹ.e ~ߖ"'P;T|Q OQf{ݑ < -1P[Brz1aVc[c}}x󬣕l4#PEՖ}GRZbM|Sf{HE;I%@%E"ʃZ> 47=~'c0oSW_am=ِ.2yġs1Db'0r:~M~=(bTEK}HOQgcT,4MU!g^~zg0ӧCfڋȸsߊ pV(F.%"(/xcB(b~J|ZdT*@p+YnӀ&\`25<< M穉[ Vshrqmv2g?狷PYHi{>? u+n.׊Ո hVpX f2E.Ùuد ћ[)C2 tM.yCMp{}Т _H59N*$jq7ϔکs{yUVU0Z%O3J7.zпȮ )qCE7κVPƚ}t3ٟNsQiz&z){%UA@{'#k9dM n7QۢRI1IlFy\O'f-5l "&oi>gy*(dARg J|msD'XPS? &iM$n&T̳LtePzV #URbVuQvZr?QJv]Mur( n}<E15g7n@{WM|[Z}*ޞadKRz4bmm`dfSg.n7+Ц\ }o֧".u>&`#PviTɝM*择c,W[J:80板Q$ P7SF\$3c6ۆfRǧڋiih=%\Ha }PYoMA̯D Ek}%lY -yV y&X1#'IJpqr`("-AVmv`&UB U;h>lh0޵vq -`RS*ԥ%Xi^rnzHͰ 2)sg_ œDUr\׹]ч=b}g_ ND(`./ ` '&K߀*U&grý.vL=+! N\2xDz'\Ue6ҖӮb8Udۨ9?H R!J}l]`-^>5ϡrn|;A~30k'_>2J8A :#de|"!}N?c*G8/>Xˇ/?M 2"K-ȕ2'Қ.XWnq?U#EFǠ fw|0'D+7LԮFOH1@LʣB8z}Tm+\)D< 6VzT$Ruk\R;0)~[fkn}[7˰E{)Kv`%l~4&G~f+fĊ̪q|BZxk]t~9I>IGڢ80J85݁RY[ X[kb9,ۯKڶԈp@0 f#mZN5kR8^)~ S-C@ZR+7JEhcz1+E<"xFtvCXB_婰ш}Qxݼ*h*{O?: #ϻw$ 29o&W eiW'Xȧ`m|Ea )dE,*C{~O\sFK V|Cl=Q\㆏UDnL0,4[#Q[w sbn`5?{Q_ y^'v>V&0|5#k6xn߭ fCa Yz>Nl-UB?OvKY۾4{ؐJs9$:RY\fO"DrumEi{v *!{;1&Č )]'MX쀦Ea!e막?VR'ؗ;"/>y ιOz5*vyne MA%t]Wt/`63,R#ة`$mpST@ZG*)4=M3CW}:X913ա,/Mj#K8-x74z)TcW:wg%POF#G iDCWyܸȘs66|T# o}w?U̳arKyyhf(o kKJ31[%dY`kx9oOb$|;6tӢ}4 TbTXj{9TpYxIc`CF4zv3|iGr~S|V#odhhsBD4ST 9 Oz\:g;w7&8* [-QҏH)6 OgŠPWbXFE4g7WIjw].KHVS"S)c@ȸarT)P$jLwN8 &!kontvGd/ѡ8~:!!K6/L2dSh^~PbFp?zT)Ͻтrv_W''` F.)aՎ*W#>ygqQy!BYxďqZ302ǹ!v bil h~BER1|\ZtzBTl@uUvŧ+>;y{{#-z-1ҶMw`/1.dqFMɸr:xжoǸ5:5F{} Zflac!/PG<^y"ZEj8G=ȼ&P7ZЎ{?^TڮCN3/ټfj6|q `PRܞϩB^ZH xQTǘ)d9wT+ذb0@2&ƒ= bAJMq֛qeCvsk|oU6 ?\q33 &@u\4)`_hUGПCxN;6پTdy^CͪlWEպ`k9M]W7в 3115/X'ѧAya*dauS?^ŭUlS!YIkyv kUmRv*i;05+}F&}wFOCf&N~w<;aAZ(zrJQrhsO] 6rk`%[ 'US ,>eP31D@ *0"47pEy7;Vl"hYVa'D~Ó׬fJhJ816}'HzuTdL,%&R lN;֎g1kCvIup~{UgK9ʲo@m)^XD:Hu L $<2Y]oMUES2 jzum#Baaz, x*H &mw{6Dde6qm#"+ڱ~+ЂM;UXϛ'zh|9;ý\2᪁[O9[o4u#^nl@ǐXl#UĜ҄'k)-]\y}$%GFnkuHG娔bqDIV7g_ξ>IiZ*kBФVOr`ܳn+;Seq#CT A) tv>귑YyBȋMS3p71',A6&ނĪ7 cYUW/pF)Ȅw(9 +W6ku|۞Z&Q޻VM2/PL'̓uCt_1{I[cV%M$p׻Bt fII*o*y'..mZi֬9>U8ūnXyJP^H F'#%qRK]_*M,yݼ(-u]@)yCh4/ W!V1s1 j΀݌ȳcGө `mHÃQQ`;1W )<4{tP?b2Xڏ`q19"i;4Wټ?.'_G5^rύFGO"j ]{H)e-a#/mYɲb||4G7lV&Kv MyJ@xNfaxSx=ExO*(9]L4!/]9 ؾF :Y .Ԇ SI P&Jh;^[7B+u,$4+Q2#A&\]l,u9ݝL3QYŪdb١VZb]T'C^<90dTR9,{'樒#œtcѳ +h}OyGɗoZnJOP8~mvSZ;yV_j$:] Y%6^5>>ѭ#K5FW9zm$xK}Ӧ)7V~;]a+7LҌyD) :2fgfi9C5/es{ii$k鐹t@|uSoj4k'8 jU J^ל>e4W vOTI[FNA,o2a'Yg00} %x+Ǧ>0 > V-r=lI=Y±˗C,UD.XRf<-ӧǼ" sSf!<)#RuhQN?^i`e><' ȓGJ"XyՑK\Vco=ƃ.6=2&#xKA~9ĢێhWU1uI#5̤]j\ Lk0o~/,#`A7?0']2{ z#g]yFoWv0vqΚkJNJLG@0AYv H п/i5=;~!O*(OLr a61͇Q&~]lH.yьҶEDuֳϟQ",k50쫚xpXuL42r0K瑐dye~MDÁ&xub`[>OwvcրC(Y)E>Ph*dY`o _jj<*pHP=sRPj|5Rsu&aĊDC_^r>Xsf}UeZgabZ u yQg=$Iopl_jeJdg{ʔ Ygo6$"+g3آju@)D~ۙs[X&C#DriUjuL@=w_ GrR ;J{ T:5r:lq`uumM\oKSZ\>e\9#:}?r2 +--TB+P 2e1$(P@&F.erHHYUM31H~V[_v"8R]n 6mu`ש 2}d;UZPi2R$MŗC_KGHjBnPuD=HY3scitܳZ[ `ύf '\ sZjwJ,m8.7BrC)>@ٱ"NV haQX0}",ne8(ۧRPk!iJ7kB[nVAtS!цV};[Nyi=kHw.3̂s׽;APZqR"K&kQw,>:^6+}{a>#vYmN7a%׍;p}uiMȠg%_* / na2 ij-{k*XmXJliB8VBx_:2SW~Xcu\![=Kvb3 V!az/ Z;)\xz+nqdo^kjPV P~P%ʳ:Zb6ԊYC[%JGobdкhh`[x6O^ ;v7ZN;r(aKB"<(cba K&H'S/n~[u=>8^h%TK9aJ|FYi wAB3p@2Liti\yz[20YHm1NHTe2\:촖-"-r/RPq/7Tإ%r̰q>t(Him?<Π#ɪA8lmļ v넁ͻ>THdv`t"B֫\H%CZV_iM+qٮ3yB"~e^4g7ڋ86`aҙa!O'5jf-w J(dlqvR9&Ht|ϕnlyDYaudKFWB)meێ&,6p$r*^B]It?wZ<\LFHX'&#%a s(jݾS4PN;ob9t"~JiU(gGyTsK-++hDChz|DjRŚ(λOw+vf)^y̧b&"6;@~R?xcuX] wI$;&pSoجHjV'9u%C}ȅ:tx S2X*!_(?HHqKӲ"s/\bC.4)qXKBB:'3%dI~_qf#<"nrC\0lU*a%@}}ZWwO=XJtNg:_w3SؐӁ飭Y2o5tQNt rGIQV$JKo[gWSYe#cL`'?ٴWScyXx#e7Oe3rgOxT^n^3۪JDfԴ'zg4ѫ+P'NRy*\Z+{[ fWc G0U [.?yӧp:p;hBw3k)ر (`Wª;KEo+UBRdqc(7T=oU9V!+gLLx? ä.rod:CB>T:tVj2BzW6QBk,B HZX,j׷P9#}:Q^ѱV.u'NstlѸw~+ܼљy ?+czqȡKs,1[ۘr:hGH|H$x\Ba"HDJ 6N -!nDί`ǥ<iT[U`~z5U(/%f^paHW"]B(I꣤ʉ+00 `FE<_knph/npxԞvr_efSn`Ŗ;YfդtGVt@peLg*NRP{%$ϊwᮝ|2ۊ?@ rUlK80HU=C%٤=2r]$`mi m y={?ug\(ԪṏXaZyW&  kh"ՈYϠ噔o +$UI(zs[,.Rg>]Xa7S kO0nj kyåŔ!K>(檚_صP`Мz%)j n|y4%ɞ&X!X)zꃘGHa%7 YX <'u沀Gr"@UK_:c;<>?b*9z >Hҕ%=zʃלfasI}I%/ Y4 7dz  y X+59Wgai;T*Oo6=j- <c'oOO rԣb0bnکS$Diښvdr/a:{&`([?[iI?R T7='\2]m׫P#(1#K!2N;0IH 쮀VxHv5Ae2;@z ,P eIv#dھ/C,Z?ѶnrAVAsg-c񬜱^  _c_^SM\ )V|N{xzL>vyL_,Q|_W7Qpc6d4-j 2k!=nS?a&v@"k Eeo\=lΥgrKUC{N%B,QTW{r|CqqD|$<*܌sW#6VƬK~)W5\ёWF-Ǫ?懮z0%fwX[M²$xfdU8"UI]P<hG5PrVHދ0DDrmyj6@(phW=C57&/,jx˪Yv&<."Rw15k3Cn,K $\uS@r5C,wS~\ީ~Itlp_?م}T2b1>^_N À??T!ڿvA& u1m4Ħԥ~w>$ Ir/ǘZp*^(UMPE†a/2JuM! -,q#Z Э#vΩFQP_׼.  Av0{",BBA.Q.sem?G'85f':GV߰{ O^L!ihd֊ݵIbC=FV}pӷͅق/&[dȯQiO'3-t>^MM^~-L1O2(Чs<%(26nO0J_/(E2%AO0H/2E$~r6GQl9OJ/"߄mYɭE361F.C.AGq $\HwL~h'e( ItC `43 ANͺ!7}f$uek滩:a2ifo>mksS^nPB tXYx پe<+]땱]aHD]qK['tnzљxfufR2Y#053E)u$~xVK6U\l0MZ`}8H&$~@@GpDld%2G0SǮƛr >^OH%I 4}:;2Q4g-]ww޹+!5Jr@i1tM7[ڌk+>8s3lZ3pm ~ބbk?⒝ƄŸ҈Aս`>+}WF.JcNYPf pdD_0dpRZсqk4r޸%Y5|N# 1[ X!jhpZ^.)7% YAQ^At0זy C=\X1$x}{BSKB҃rPv;oyس#Gd;S5kW]{%\g%Qd{;R͵UYY LK[!mn Frs#q5 Ra*v:܏lc.ZVmH ɠҹz[l 6M>DjC' PA4`d϶Y 91XNXߴ] B/? |+ );Ϲ@5z8HL%:nq(׾?/x*cV~('ȅ<QG}fEʚ 6QiR 0;8+˜S9x$pVL ˤMC7>!3~UŠ~rTIO''ī' Ipr0pwLV<5Pw-hHw465I?߁YMcC&ۓ aX2]f./\֏mw7*s':”tQ ?N=5O3B{:2ٱ"VJ5۞C L%rc%DWaWwWv tFq*X*ct/9#*W2mʩeFuz.>ISZ=6l[-FUC]ėIW54p̀N0rs\ uTK2ɩvt.A(\TB{X{q XF&JwJtE4!Tj(&eMbt-<{oa#t\%]ZZs{J()lzw |a`=VOn. ſ-b?ҾۇBʧ H51ZypSɉ&/'LqK@jI*sa *dZ;e&ͰzQ^jkf0jPAXu Ikje2]ːCk>]-5`F*F\3VO`YWW۸&py&[΍Leܛ/.հzS@Dno xb%}:OyzcGr$-k^~ѥ4K9y:HwFCCAcg.rrgޏ8IZ* %W~aWo15sCC{+G*TEްqZwMw ;L:CU2~e=1 {GnrK# K<ҥye lPH\ct7Ya?+A%;9\;؋ݟujTR#`ljK+<{pܐs:FV)A'$xC@*8kt;6:AzW=M Q2@=I8^,/)ZvjS7d_(JO锐 3j[l/=(8=9 @;>洍|tI*ԡSoC>D Cn o) {yHH-HI:ܗr u\P"}s0$}k=ƋIm͙z̐ॸe4jE] ұ,ʐ0l ձaߢ (.}>_,iK~rr/ )XwoMD>wzn! 0eb$YlmI5ض*8~ 8H;*O4yuc7a(Ŕl#b*hJ~yov4.Zy%4k^IRֻӒFu\n7Y u&c)i@1'̻MQFbqIADpx(P_گMB;wL6 +ޝёפ5y~ϴ8Zs$xJYZYws\v rŸ 7cKٷ.Eg3KBFp !j|g0M!1՝g'K8!ÆqZFW"k z %q’>BT_E,5ݲӆCxLf&o⭜TXm<3#cҧF㇉p 8Fɹ p`М;Ms Ne}%qIH7 SBĂ`ow0*תg@u`0yr$(Eb0/ f72ϭ“kE4EX4EJIW|5oH_3?E2O_Kb?3dC.scůe\CY&w0tܥ ]Bz㽊7Mt!aMV– H ~IFl&ܗL`Wqm-tHX-YDsV"V<d& ngw TqȰp\l37Ct!< rhWƃJ|R晿*z%R.+p,.2lP~ /`+s<}᜿9_^+N Xy&HHF5vR`%vNjds5rahe1)/uyrA`$%}Z Im^tSś;1Ev^áuX;7o2O8#HpCsH",Ռ>|QP ϖ!cxS]$@N.Y":C V6~)Ҧ}; /a7WdY͐-=^N.‿Cnt/CSym)F%s3y/a,E>kG:|"V3-hsrn0#5[̇up~ԨӐ?Q=aj9y 򧑧x'0ү%Pp7&2ȏVK590 \>1:*.c>gk|"}V AGZ,瘖q fSlKKF!f |l%:3ަ$Y#b+wT7F) PJGbx }0h{`bRUj:!<݉_T/ K[]:ܽ9*1f V URO}&OI7gei*4l3YݬU2)@ LYD}iXK)$h'wXj%iz^!3) >?Ek_b" -* %l*>zP=~MU*I\zlrRz[UvOt'_6 T$X6;fr ^(RɆ<,{m Q I>s:p7ka#K FQ8M{2os7(S9-Df#uYF }cJI  Pq4Zn|p{5/@;JoFZ9U -iˎ9,4E ,e'8c#rvX'q,iƃnRsD``,P<2wLL2#M_h׸ڙ 4h?W-ٱ*| +$OWv5]yC+m&hhmFT,O !]6h:϶ԙTe=هM1Pcqth]fܝ}_>0@؟Q$iNoaEfBXWc ul雞LUdb/& 9m2+hB{i:C+ q>Gvw CiڏхߑM2/;N0lZ.4k׈]}9` -1IN1cPY6mqQiZ@8[}fri}U>0Iy+yijfcDHu(6nJ5AP,.^ xh4cke^ 2\'6uJկ}ó(V).hTO/p q:{Δߗ-c ]@#ʫo:[Dg sa#Kt(YV,|/|No|4]y2w !..!r[ #VyI6 ~Cx sVvsmQ4: Q~nEAntCRtx>=ZC2&M  c* x^}%&&7b l^mR>7J-IhwJD*s}7m{uַ+~Š"=N5=Nd['i&S.zÛ E;͠VRptO`WDuIֶ>u~BoRV["B§ {RdkVVM 59 HD:l86=C;zw[ȑרE[Ҙ밼lygJ6vb\-fqeJNJ-F=jcԊJ;} ib~b MJ7y}U_re5},8C%%E9KڟK?hԦB}D\M -p\⳪m_CE)O hUtr(Gn14VLWVY V(rS\mk>ā{&󁴝 z9 ~Ƿoܝg&t@ϱsRf>6 %\aRB0}1^?W]pUn,AeHzC$xvTs2;IC\|^DXCW :/_u.e8BwtdO 0l w<e0dX+#$ThR lHlnlGCOEn/A,)aE_UgL}*+cz 6 k4-Kt ZBޗϮt8֯f{( p|`D޽J4{$ JR?̚raǖ{wqX5 cJ}r/7axNN&^z;f~PJ?Y'  ?!vg\k9 JЛgdn8B`wxg''DlqH|,ᜧf/z&t"Uk])RG,P+ӊ⵺Z[_5_P3tK[nО;+A]3ܦFm}f{spUX7aƫ'  ٌquUiWt cK ]wA^ՙn1"/ {]&Ot 1U3V8cGH;|;y*J :KRϩ {QNjo"]K^#%Nl%'VJ_LIXXR޴{;Vuf'B  ![-$҃#͈ A]6o.܌!4: G*סUȚB?^6˱5%Dca"M; r@CnRVg1^$Uv%Ͽ _i܌sh@MNA0£ޡvq2"H"'FG7S4;?. /DŽ;:.(]g`[΋~f~)ߜi`qIyxh)Yן5I%ղ}^h;Ù6οxw[`f)jo9e[\s{Tk0$Y\@3lpx5]>>)9r}XN`G1[]DQܚJ`YۤW4=/i$RtW)ߖ ]~96a[ FBL떇]R_.ɯ|TFMIH_õ5hxOJGkH {@wV%?7mgz~A"9zc@306 `2cKiv:_&<2}c)r O9G͔r(IXw_.7F.;} Iqh}f~"Jbnq8rr|dZdh=%Io>.EXq>F6pK3}su |zmWVJ HxyjbmotC ܨ5][>?[r5@NU:;˿Dd%[8ꜘ%?9G C&F@ґbڢH}D(_3"2v-֚)OOIzv`/#)o4OY 7C@ijf`+%W8YJ('8n+ #~4NJb%?@{dجΘfŗmZőP|Kv 0GcLZ8/Ǡ3HI-?pX' dGۻd~ 3">k r6ﺏUIjtBdMUNR ;[Rcml4XqГ#(YhTPqZyfq;-_7+9g2ufDԐ_S 辒L-&?/L\L)e zlϹr%LGF[٫S|)]2_3{oȲi\!f_ ~0ޟGq8м$# 6ꔘ,Nc0w"wl=2^ VJR,mur(Έ ޖ( =- gc5}#T~Ktukb8o/ y?\((ہp/R#|Yll;>OG`$,Mצe>LPOFм(S_&`Kzp|K(GG\z E%93O]ʙ5"F[}B@]Xh'Uk])뮃F#DΙ~.t예08ӽm5Bar%uRS؝M!N ݑ5Pڰan7SaA( h7;'ī#v%skJi5Dw]}=Uu hzh ^\c 'ui=⃻Elm|_ry~`GWHi&^k܈'QZƴu)y}J?ɫ@z.ɦwX=oa,STKKq᭟=ShXXq ]҇1)N5f˵+[rnq4It>yl?@UY9@ 1sP;6GU~apQdT2ÅJz(NUF#,@-3xiP)y*>B&r xdUz)z Z^./yc|8+w.L{uk}LRcgvMʬK<_Ӛٟ%ܫ,c[zЁ*,UZr+hnw2'T6)6x/yzI ϊW)+ZUQ\jIeGMĜ^T8lMCJHWœDRFveN"]  hp@J.(Pq|7h.#Qbj%EODؕCgYѴB.;}>UC,{Xe(-hj_C<ʓZC(2-T8E`)ME~ՒW+>c}JC6HePQ>""J̐WAz 7)"IJ׌N&C{>!W/glHsCq/cfǚjQ:&t KD~_O~:8j&5T8r* L"#ӎCFY!]cw-/A2"Vo/$W.rz,E /-9)}&apEwɽcSoBN[譄Ýhkc*p>[0UٛR(9lHl=}+ c)UzРFJ1Ҋ 1+st ;Yt?Bv%]@S>ѽ <;#s'P[0@b.%C -.}]kiHJ9=_i9?wȒ㘾\{68їHHQ(JʓucV',9Ej>|<܇*I"^ o?V *#n&YO s3 g :/5ÔI)PpۧM-lڈOc'<}7d(.M D k'\=l*#@XEߵ= Cm3߉[@0A_; $o֦Ú:FPisO-!n,i:^ـf 6c dxNj$?&\5HSonIMU$_#!xta_{|: rFHnXȘ\IE @ "qiSUamː$4{5?p l2ｈÑ8ew zX=P0UN /rN[5u4U`Ɠf-\EBOH|[gqw؍0X"2q-5ͣTV҈eS,#ҨD1p&{< Vkyo rllb+D8ֿơaB+^ +=eB/ ڰ_fLQ71$5 Vx$ZŦz$ǗnpQ߼ \#jV C"]AO< ss)hE`X#; CPl=*)iK [݆=|BX;ŽXw.PKUH>">(9#w zVǪH.|2:.InmODj_ǑayvJbkAɆ4tQ6q;%J)d0ګiD}`OV^ A^Tc c $= Ul{C<s;7W7$`_b+?N[AK^.NO HA/Py aG%4=1*w~Iyא+b:X+v.fjg[u5rrGyl 2RA7;9 WSڷsZ\i!lRDYU0kFW@xOSqBJ:ݻ nG!qBP!$*++`k al>7?* UNM޵ڇDxw?&8=QC_F):S ~/RQIbwdIs<*ѩ֤DEnp&nk':$MYl$.e/#]|qZA3;!eKγY\]EIg{={_ǯPD׉_-b+‡ɋ%C*$eӭo–d]&77$`M# (y+s4m/}@cFi^'>irf ܕ9UWFy9>/_(`Juѵ?\+i. d(*Ȫ7>k3#ٜit,F Z # Bz+rՆNSi5qkF‰Kd sߊ14\sƱ)E GJ@CF= Qѥw_AyjgdsgyxP]%G3hm`i\pހ{>݋+SwirWIBa*fPٰ2,]3jt r M{9w ^6n1)%Ӣ*o{!`>-~5Mw%2g/sY9wFnEރBh3¶Xt[`~gLc&օ-eY|)=7nDAJZg*=Q jHfqV`0?.ܤ{Oty$NDH|4Ѐvܽ)~ȣQyNWGf/#ɱ+=rJi#Mh;=*2i\hJNĎe v?xe@2_nsHVxy4-)oRi+/i*Υ81ST [: L- BijgÐt䃹h}zj20/=c[ K1%2fR)//GAYbKm < =p=al~ MMm)0d]Ǟ zB! iˆܧL&,]#WIrӏvE؃+xyzR{U ӓjhGhY)a:S1BtI Qo-baL[ 9a=\LquA'-@i<(Py-% -O$\d"تv5)i/Dɹ6RhF/@AO2Kr5.'?Lp]_)y15}76@tBIqY\x?.\,lr Ө]Gv_o-X cuQ76Y[-fCw6?kxˁ_NM}/< e|q˓A[k5yJ81Zmcg"8`ۣ>xVӮx_TFPR* UWu3 (My#XȖ~WDnթ -KDh$ MvAgHixa,3 `x4ϺI\K5R%C.Ϗ2dv-:Tw)l\| -+4HH'˴GpiBh 4<4y8x@dZhnieQ1 x]fWRlN-=|Hg)9~3t6p0c8"俼xbejp޻Xp2̀c #/ AᯢGTd(t\H=-h-Do)eԑ!}_H&͂ebaU1tA>pPe =+6L2Bڠv\˾{/c9ّN|)yi~}5xZ<+ ';_iض[:\8Y! h7S]e[ 6NJx)ڼE =rh|Lxvʫ J%8T+; ҷXV"gMi7Fw-y>qD-b8_6!?%  ;{m{*&Qզ?%n*AW22lyΫrҦFǑxFaNل,6_Z]0cW,=REbXDɁnҙ |_i Ԡ;mV00=C^_FKs@GĶϭhAwU%ip JM apSW+AMUt!|m1m Փs\~?}ד;L6AA5Qa 6T)x-6Noz,̘iRK@g~[nw;IŷIAŒggyɣ%g\;%n&1A_:adTE'B  Z6Cx8No2=vKʖץzeMc/TWv>q[Iߑ6 =<ͤҍ)UxhT쳨ّ*Y-F}Vp_Wk6G0IuoL80ɽ e''m%g|~3)%@!%:|^h^$$?W, }:=u(1'-6Ub) 1cl,w&c44Xdz<1O)Ԭ.+ӭSzH6Zq;e?ثC5#XzjĽ5]G«}NkVhOA7n K#k}_ ؓ^FL\k1MSq1Ikb|!v^4aݾF^0܂PY)/[Tg,0@5 ;DWh}MؙbM8t~~}{lk;t5=//' 6EWv{wpVlР^9Ykrbcw1_)70 ZH{CIFna Wθ̊a'@ x&`b4 !6hֺ')xՊ>bS6dNE Z&vN/[bSǕ|qV{ +CWF+Kj"t4ߗ"oI=~ib:!ѧh$jUhB0ʋdɮfGQCks; &欉wIOi׮X>si%3׿aRJHH6hR,wk͋3ں́'l9[yR\"ݘ ߌ!ZW@یa]vOPk R#m/  BGe=î'|jD-92"{q`׆]TJbA/q|iix!a9m48٦SfƺI4_dqy% t^0pe'o|n\ 8~<2pH 60勳 X^K ’2v&Geen5\R :moZg [r`\e51s$#UUTFl'ZKD+к'#)d}{?I)>c Zr][pK7[PO_|PcYg^T]Usŕk6a;Ar/ e!d`+ogyׅrGCgd>lĞci8Me[3EW9tl1э]=P ^6[7Ņa ŐSEAL:=3% @>mSONih̔PK1L0GDmA.NliU[!JԤV{a޺;:8{OW1aˁT<)ս#p֨(^2X.r&2Bi ֥n ״JD9'Ze7E^nlI:?*&fzqo|vN7% ҕ́6 EhEMI :F sZAH%#zǿ_%wY+l;guGG dr/uf3h;osXHFа ?KiO. }:ۇb4d5 "ujOz;tm^fIgXh~3+b2U[~"E$դĒdqmCʚFlt}xh@u]px1~yRM̢bԑT(gCsݡc_ woEPIbi s_*R0gL0`=1_W.ThևvtP9 \G}SV A{ [.SܼgN7,)6(`: tipD(jp@ B=9^(y`>z3@,~>ĘY^e+#z/H5=ij&וpوj{mܧ٥4-UffxJW~\`w,}mEeqe"ޏO>ɑb} JRYYa ^F0t5!UrW4:r]E}|ț:l;Ϭ*2ՕaIXчG'vɾ8jEK0uv|9 $;Hb*f]4b2E~9জ@\ y9L ϳ YTg1j"b zbKdyXx;73VFK'țS!Bٟe@J0(=M.Zdڃp荏n0I^DG,u ZH;F\L>_ɔ`Z'I~NfKgsk7~:t<!K|QRkPtuXC2K)Z(4R{#O8Hsc'b nW_'yլ%9s:5u$ZH魟a~H0Z#spPܶMU)ܗP BX]$Nl]Gnj~3ݔ+y8Y S{= HsEP E4 A$UgP曜|%"R.)pXI_\"ifZQӶ [A^1ʩ QD|ڇN/=VJY6-a> `vd~*C94_!ՂxaA8.wwo )xȨjWzwTSZ+pGf⑍lbF|=dlYGT]V 5^DW2B0{yl~uiD)1(Jfpbn(,VL|^F˯/ͼw،jˏ"+fK U _ sL/؊s˙giNUjM$#J g$)pN ] lSs%dXci pCQn>$D@c(ǁmMH('gR૆pG30qVrQ4}6NHV$L-FZwo p}`zL+ @ O~n ?Y`EMTb/mS)Y\,D-UO veh-7bsA'"k784VM^.J#ڷvV'^u83^&Mug~Mi֢Y<'uj v$6}dicUgLf;PO.oTr(fLbT{U5VP 雿ՃJj,aoR " hU#oկ]*<$X++d4qsM]͊V7 mbCMتI>5D7c1c4NW2ۈTo1Qىk-Xx;y<|Hj!R[M"CAϲ;7쭑-3CQ J &,"*"UDmf-CpcW]u '{wzg(a'|J TZB"U4VePWU%g)r}VE&k+E#$=^Mv`h ǍktDzqW1^v#YqbRnT3֚s/FO'!GD.w^?"fPj~Dx[ǫwB;Bņ~vR z3rR{O+>$Oߔ MG KIrd Y݃x|E߹sdFz?0*bPkB zq.-'B]=MQKJT93Xc!y[uY31D^"O[c5Yq]!jƫ "1f9YB X>kz.8<Ā2Kl"[nXgP#xns5|kE_[k]S_oN'<.͡KiW,*`8>aҦ&.K˕SvktT/ i kC^DR7mbt4|&ftS/Lp)EGc#~K/ģuюNX.[??JJ XomXGElc$|/u';BE?^h%u5:t8d8a(Fp՛-a09SH5,9Y Gިt%.$IfN`.%; +Y$5,LI.%պxs=~jKst ca3@a7W.FPƨ>ߙ!T HY7PDsח#3~Nˍ0es˺^an/o*yL͖- O!ҡPXi&:ͬ !ף*@PpqB^~lω'T 8>3FQq,AY Haڨʥ%X邿)Z/մ+ͣUV혿2U2q mUް oy|Գ12}JL|QAhop!q:P^bcWqܒ9׈G2@R?iT rlsXߤaUұ^(Ś] @mw]ϾC\AF?Gf7u:Y]z~:)B;ͫ߶gravTGBeo֥ kӗ@\>C~d;$In 1m[α~&W10CHpeWL;a)DJ?o'D vI zR@*KkYIad/=HٞGb"tLO=ʥJ ifQ^'?m}s/fFEAzhyx|jJ'V[-],7JhFHZl㸅 H8W@kz CT,ZZL ELA6]OVd븎ڣLh|C Ni}Ţ=~"-h9vR,,0VoJhC*d/H$͇eX`SIJ.,8&/*4 7/lOh*7Uu[&tE:m {D-JU7(]2_@lj,Pz'TޚV{>*A8Y WMp#'!QT9M8<4l|boL_O[x&F|X|KFpyG M .DbBG*u_#FK|Ժ(t}Nou^U4'x'p"2p%lp3cէe؍.#Z[X/N8^ͳ5QM]<H6k%;) _f6gmklN@v]*y ,pח,嫱F-a: lTI4GYa&&Rb_`C=]}Y˭OiάRVt+œk¼/M|Pi ̪0bӘ?v(s" r,H Ҷ(B_y?a_٫E9Rf1BS K1dJgwFYj%sUHQ͸v R;|Rۨ -*W k/-_G4{@7Kuh yl@D OT4$sE&K*~8E&uu_:LS9t'E[oQDe?YDy0H1#?Y*,Xt*SGR3;4_NݤT O{"j'ݷ|>anr|S\ˉyfS^ZT uσKXJ>`;*5g۪s}䗼Rcꞏ|aa]4$saz~T 5)ʉHeIU uѣIrh]Xw7iCKڍ̤=B#{JK䑜2$;_XA DYLk;H'Œ2 =n|&YgDҭDd)}m-1b@`{{>HEvBlqk˚=tFR_s#SBWTex&_L]:xx6 k{/x^dJes.(#mJ@)M$vws'e7g}xg9'L+=y kIE]ϗBʯ2'~&Kp4-;be|c#b+ͥL&cE>#LAovs.kvntG]*#d2k0 uiL~"IV3N>z*i+q piVuyrZ _ f&c恐OSִYWy}ՀW2b`evk &zqh $N >r4[uuYbCq2i2s*@5(9k6Ii[=O R8+=l5)GD7_~PlI0Pfނ4< ;RLc V3y\]˨Xދ? q>z7λ.}Q(|ٿ|#3$'w'7[=ɮV`n]7|aPhh\"Sf6FJ%cW njk\nxfK*-(l2KѭS':S5oa3OZ J>Wy_.V {XRp[N9rL+a;1 Oh hȵ`gU)圆1.-3aBNf%|ބڙ.E};Bb.@pL>jeX&;r;`z[jF\:P4# :(ݥ 4k:}B=єO$P,ȄOFY"j~[JA*30ȣ}S hYKjyt}k,?'bw:2   v򟥇ޙFZ:qu;wmʸm+ $;F{.^s(ZبfL]t=Ӛ,fLjRJ /2*xu%Bj[ŀ(G2JG8 #"Y #̋?%$Jpw?(nƄ0^2^ר<ŢFɧQ'mRtͿrvl߂2e?UiGwTV?}@iGCF$rqnyMc 6O%:=I|͚kgY4asp?l'R)|/^}p{p4 RtAa#F7܇'TvZ]uIA >%.ey(+#n@OxN"ȓh7aۃ#;`[Bf A4L Pǽ ]ӫ)xT *!Zxr\#BmaTjC :].>~_n)gRʰx&2i5eA ͺP3FV)7>ڊSLvQ2BN9ͧX$웓w*ScLnU"!mR[XeM&acQ7Tm{c/qTO"JW^$M%ќZ8wG2edDʈPm܅Tb56R% x慥 ۵Nŕ|MIޠ_!t"h+Ȅ3VG&'{(1șa*Et&Zc>0lDug坹Z\JH;zE"AWWPToX=UC|yp{K,Tu䲖g}HR=&ׇ,,UɳBٰAU#>4e$=9T% ;ӖKLHR 8L~@'l<(OwR;ϗCX (A)%pKw'b h~YHO+_qsP~Bz?Ɯ㺰Y6=*{\E,d;ۢ0/GS<k\P v/pMɅnd+γLgZ<B&]o'2OF6˧*Nob`"RFu0"ƝaKR{^C`A _hJ6ҍ;H#G1;ETBg_jV K5H1߻(8mvAy0|*[ţ:`YT` C4+eVެ>ߕte0i |r{Ҝ a2kvr E) cU碘׎I1+xs+s US*ko>]h1ߙz%ne{tyQ/8K`yy `5c?(VI&a:,IbO ܮS'[(@QϋQ|NβlLw d 1?-5룞Xwl mKK,6Hsv84A24jXzNI+v'yށǦ+MtW'u#Aè{NRElt%v%=-zB%%nH Pg )pUҵ?}"K^YyW]U/10=ɉP>f7Z(aNk׵?pZysx Q0*;/(=eS7F$rx7\UJ[ =WuGds3\_A?3M(@PC8&m~HLoSx"ⳀmX|/{kcH,]ߌڡn[x֗k&k  qP^upﳼ[o; 1kuH\yǔ>m޿A2#4G"qv fnL| -``&TFQ8GfP4.ʵ^1 } '#IƱFu!7q)(TʎP}yL5W#7ןcD-jadv_Lcl]G8Citi@}٘Bg~KpE@mMn"!vT{ .6?b \5,]S¬ w t$us%ih/:tWΝAç(;j`5(+ʽ;+LpXg6q[FFGb: z$IoZL vr ȰӋQ~;4t罶ߒw2X=8 / i(q\I m'V%gO`ύ>S߿8YP'm:elPJzErҧӧs3`>to%\~9dv7QZAw M!Ad޲A% -; $e{>7m\ j%"EtT4>)e^·rJ+N 5EX3^yUR}YF641:h5pInZ-xdtpGg@8v(ɿTצ!}gV%i-!>-i|2W#B{{ K*rz*-?6ua8÷[+ -~-1h _HcZғE tM~'5Z ve"*zzLYY 腽 - +A?0m f_b K>(Iru03^W8K1ƞ$}-`9Jn/P^j! %ٖJ@%"_M&' hɩ ?ҞӞDyNK z}/ a4\ҎAA @N IV0[͓P7kg3/\̢jѷ=YUbv_Jn6`dmCW_9.#D6^y<|$'g.^/r!"fYaDeЁ/ - qIp{@>G~4W1d;zDzDKXui.NڇѬBĐR y#>Uʥe(;C*И\II.>'[-,mTޟ9/vhw,3e@] |y\s.B/f5h\]dHÔR[yI )siB1Q2D>7KזCόSZ.7t?0}h817>~%J?e쮼0mXjNhY-[PcnZ6>&y11-n}pτ$\nj6z<~/I͍;.^|$˲h Z۸??. /&!QNl!TW)"ήDP8#A@$y6~r+؞ikUN%}NJ[a Q"E2㣋,cS61)W[fZh$#Bu:!X=#1u{440 Q͠Ge9A*ǪZ6 _q\dh ee^8}R8|'0^~KU9ZDoN@qc= +X!(UfAxџeڳ ~}\)ǔ[IG݊3j_v~GgFŖ'CJ/3dѹma#'nĹUЍM$}# {+ht2J5V@SZ≿5Uifo!PMvhs.5I_\>\d^[)ЙP^/mQXf~Aʣ',I3i#R2G|1t4TR*eΩ))ؒse ~,+bUعԿ'os2;ƷxIgn衜̹x-%v<á;S0"eK*LV(i6!nAǡך _o(ut1G*|+^W(H_.\oH* j¼k ock^J-Ykd򂞄Om"jmJR #ՓO[gkI5FݡuV<*֑ei}efT<);#LM%f,&7&Pw_`U- ;\* 9",9FgQOySThzSAhQaݯўGsU)Hb˪q`Hc[r2Qyw+6c }@rew*:Pϻ(q 7Y.pţ'S9+ Zű5D6_#TBN rc9y4s `vGT˲\B]7e*mVn Y_d^BaQz|ҊΜbʳH ]/g eW.IaCfʼM\9lY'3?eE#_OQ&.C#Ttpw0 -Mr}R\vmݝd!u; O&U{KMyt&TBO ^ϘG#<ҏRh+mOo AKĎ1 -}(JZXL )unV>&m=5_R|S"ąKOܼ;:P 34nmUJ7-KG0*{g(Ft8Ɂx:.攱+ss`*J NTP $y].ҋw(0yυQ|i.u\0^d )s3Wy@Cѓj /O~nd(n X>Xo˷s o=1uHuCTaU=Z.eEmVk.ZFSwW.}H!FC?욉tD~;o0s݁O%$Nm> KڵʘB5m_&C_M53 @wk D)y. ,E=Psma9:$C8\uŽ1iprpxmh'y^D9_rպ펏$O":Q#uF8%ȱ/<5@AEed7ɓ3N.' y8$({'>0۾x̶&&^eʙvգ̠"6XCfReey{l~#T "/F6kgjq bl?>t*\pI5z9b3*$ Y<8_>l*nF"`̐-+*YYo!0ö'J2;5](Yn o nBk8EHIPjVtp1lX=Ӡ]& g kbyK:}>F(:۱"UmRc#xI*/)+srqýz( J5{YWF]Vy{"l9.)^]CO֜Vyj bDՙr X,ρ~B.,}6`ȅU(\]30Z(o8W%];‹VV6EJHFp!pnAz?M qTԭ57G|gE-l0Wy(+Ƕ4q7d/B1ܤ!5&L'LabhbQ&n~,l=MX]qauwR^u1=~vZiu󌆶w`cm=!nv-lVI DkO})*e)z%[8bOU-?LQXv"\(o|*v۬fdB`&}i+mV8DXC{C#f rJ²[EM9DŽ} ơ*ZU ytth,[t-l꣛A}RwfyV  2޶ķ<?2iT/ Bq6t|_NѐiҸǚ_nq[`*u>P11ռSEK - /X '֓}}({6~U!zYpB0ŗ]6 m{Bild~H V'`&mhui!@Mǔrpœ 2f1ٷ fNJϸjku 9/s@+|n^Wo_XqO@GD@߃f̨ufujL%lK=KY+jͩՍmt9^]tqC)~e6#\:%(/%;SuH#>6Eu|.Ut,h^2y1QT~}NnD S%*e}=Y_\ KGLj0ƙg`FѪq {0;mdNDY2czVSAٚ,F^d;45GKv{3~ttrzWbBBs>4S TZ4g lo'BZmt,20g.,Miq50M_9"VGM%ccO~aQXh=bu̲:4}DDTQ!`@ q-8/v$;I)@PkdG21^׶oT'x< 68E]Dc6ZrI/5Kf6n1.gŃIpX*HE 9-s(̢V)/}=rZ|r`:b|w#6u^=@O8sV^tZ T2VjROѭ:B}[~JT%;9kAO#9&\ob PF'W_dipԏ1"A`M;&DU@vb@{eKְn\x_!MtEtQ^/ q7e J|\R$zWV B*¹i=?%߹jr]CJ!Xb#Է[8D\fbb_cnX^O'Y7&N6]N&!H)e_U/[-#F"_ `3}ɋj@vB,W`W\KrҚT`49zK0ID2v_;: `>S[i!n{=m%Xn'Lr7nݽ`-b89JwDÐsdBw4hCI+Je)hdZ!9 B9h+v9i3văodt|q;jdKx;NA{ș(:FۛMNnػB>fI>XxA." aULΛ‘]JqU"t/׹.VP_ Pҏ[7 f_:C0=[HfJtp^)n/ l<0?O{*ai>#9vvE!l%AMU:K.S K|3n@fcSdmSe&O,eG {FEy)9'm}eKI-eeTv<=뉂hK[\`ܓ XVя{&?ABBBʏ";Kq䪕mZOOaL)Deb|7sf:U6#<ךEmaB?Dv0<^\@I@pQ$ B=$XrD躽ƽJQ -Zz!\'m]'vdOFYp%pp^}VJ? D'zYTCw~ө9) 1A_,|+P  edmnuX8Vsb `0D2/ؐ-)]lO- 'G^Xh0O) T^^pQį}+8ʿ>l꤇3R}agQ[WRR~t&7'/1T!"wZ/ͩ+$|rբ -bJJ );*! m *+OK }O\p젪!f =/fc!-E#F@mCD@\,Wz?ğ7+7bfφP&1Kw M3/9JW]nȏ,H 3x$/7=!)vPs !SjHU7oyxNFyg3a=DhdD~-5bRgތ0ëb3C`B^8]J(i;V*]r1ml0,KLe#ʘPJ=[TUmt^6VZ궦B&ܬE,Tn(ן;GU63T,ӑ?r7sFt&ՓFsbh-(]{"F6}VýNħ&>͖0%#wvf1)L'"E,E#g5; {噟L44,DRcn*[_R5+eC 3g tWED!ٝD /}/1/4i*j*^("/T W瞶a*zb팞-QvMYƱ"oyr&XU3Ca(7{ۄͦipH_tWjx`|5M ,TPU|=oָws/ o ̚o?;lm[di C,Mu!v("ư۝kBKh}ݣXWJҩ(:zPٻ;&[>Rk~_ٵf4.x~Dg~G@urIسK]J6=>JBg֗ }B@RX %<~r/2=~rL5$L_pgM[RO[P fnUݧ4KH pw#}$ori[V`.f,> \ @#n9TEWOnqAՉ!e⑕@f?ƶl`6P@RF‚d_(jBruVdZpJ<PnVo#_3&";:~ȶZ5' -LW{Ѷ⮉IR.Ɩ 8voSL AVefL.'VѦ4k QxJ׾=tǦk :h;b2*># \{yT|+Ϭtj"bE^< )*|g4i9l"䈛 [)nѭ]mk[WRUwyŘl_HU5 )Zyh|g MJ]l *'T~6:$%yqJ¢uUR ߻qBQ+gX:t<_v2O8XJ%Q?oȯS !ofpш<$-k+>lEzd'S+:ʌYКfƫ臎Ɣگ{E3 +O8eɛ-Q:EJ'//V=8fNs \Xh! 2,8ιKjY4#{EP5X*d9gÌpGcע(7Ql*c"njFQ@f6Y9 N3b$KGdJ] Wm`ScpTp&%`lϓz+ֈY~мUmI;eէnmn\@2 [SvF,vczv10%q5;ןk\VvyoU)uƠD8KUH` -q$)֫J\ݪ\Œ @g2ئ0Z](9w02Id B@Rly0^ !lzs TFw?RI*us`Hii֖$N` / 3Ѭ) dUmo͕wK# C`]l)#)\:+ E*t!*يgE[8 G l*PIvV-z d546̊C|h5 |( T+.8OY}#,Kbe 2fYC:hG Jz.t憇ϙ9kaN ]cSP>rhִkF}3>yɲKBz[^l\6JC\4,\*Z@)qbWt5+=z9HCA7B`z۳h^&[snG>QG3YTI6JLzVOrNGX"QJ5F&3ϲkr.cͺǫqye薂OQazEm;ZJpS LJv!AȫM_=_P:{<{ yemP<3mS\4ˍm=U~A,eg毩ڧ `@s\)LdOp(vTOb QN"MjDW<Ǫ8O6%Ow_-C"4TEstb^K#5gp>:0$ <*.zV#*-FlچTo|OSi/y肍۽N XrS}^{vf/x \ƴo$8ݐ率o 3s7H<̭HI7,GUɹt||;@u,fw>fӗD֓O9P~4LHM)\̎EkLxkz?I^ .8Zo"5v&WK[ 9*ܖ  3CLߎTK'ȯgkr mӡ"(({Bp8ǣ|nPׅ^ el\uOҒV1rz,$W`?u{N#u; y(d-PJK5Ͱ/ 尹/ p?ެ":762/g9u0[@RB#Rh/po|x\4ْFW<@ p4x! K%p2¡z^[h'Lh]"څQ52?y!_ @uu#Qbc>ZVs؞Kx{%|ǻ`ۻS "##Y?zXjXEWd;GBU d1keBSZL 1W2dAf 6,&Q +=F$`zYT2ʒl19 >Z P4ZpX%qBYp;0PTaMH"IU.CPSyaIs [FAe^GV"9_}#ydPs, gu/HQr}R!YZatl!eL4L0: Ly`pb5R$0d2yڻ6Mf1VF1g<'mStbYhL|R2̚<4#LE O7`ZX\*{y 5 (?߼o'h4 B)z4ݻaO99H?v5冗x%gʸ 6&N۪h0.o{rn{eO Zd@o/uw|G\ٸu rٕwg;!H'ٮXj: :q~~F!'`MYH2=[!fj0BGsզONM ,<&ys R~aҡœ" &;ץj5hUzZ,,y 6j8fcF$c X{X&(Hp#ݓ8z-!s:o? FWy`ni641b6:8VFgB ·d[RG=X2&"b7Jjٜ3P7gm*rWWLBGQ0!S=[0V?`/l({Mab-mRR*`=I%Њ[da9_-4S:XX\mAL#Vi!Ayt FD9yN} vl =9`46rLY'p?ؚpynXn7kVէ3W]d3Kli33R FH^EHĠsqp CriD,qjN͡@zlY7m D܆ DFec{6vC11}=%/ Cf2NGbAS8e~C!/bR|̲a40I 0fPfi>Sk<)ܝV逯"AI XeT p`֥%M$.<6E,I H |YM'i",kja^2&ܐnenJD.< F/^h]^eCǣmm)GUt$|>!C0@LwmxBtWC,~Z5D3>__Na v^]ԓn閰rV+71Yhڏ:%,(cZwu:UgR(,eotO>Wme: 79*o<_8b^JpY1D͢5AP!6'Ӆ=,_`_^ʔ]Erͬy!WW *Ϛ(aiL8=KxlH]]xEذc,=-Q˖;+)$)g65Mh|PޭvKPE҇N&6lI &ck<ð"F`57 U/":!٣M(&L٪ق~ل9;H' \9B)D/&~G VT:#irU'Ȟp٩ޘ'fx m&@hwD4G~ W1ـP} .QRp#ruAj\tjNQogN1/ѭG>*La(LRc4e)]䎴)1Q%LnUf | ]j̝*C!]$V~D#1ύBw$+-F6(xp#qi{iF/N .&)7WybY\&(AWŒێv Ef894wmx3z3Zɕ w{CCxPTu}H,A$%STPl{BBeq} QSL#sN8@(+Xџe :n%QS(-hݞ8dI޺)8^RP5#y ;<I BQ3-ei~`D$K&of~:3(1S7 X{JZj[R{#6Dk;@wȥ¿)i(w,,/Mʲ5.I-aab38,ԳlDMV4$X}X1`Ézd9#di~̲:QO#}T '48z`f׀{>d%ڿyt%zgmBZs㫊;:w4|bўErma rb3!GksJ2^PT;'a.`^/f{E%k@Ȼn\2d˓ryF b\u.G8P2a83t~b(#-d3d-Me U'|*7lMP}35Z<\ OJ >b6F*+4NAbd' hW {![z˿JWDqQ(=PKdOBؼkT5>fp`cغ1:Qydm>Njm"S\ 2ryS9gC,u؀kiz$j8\Y#rՑmog-'G¯3cR9%X5udYd*֑"qk@Cft9* F[/ -bzhr H'wѱԞiyM !E;N %7=ޛS&6=N 'xٶcCmj%g~dY *r$thVIh׽=6KB,)`v?#ikك]CȬ {<@e#VO |SrVhT&+Rfc`˃_Igi K`f23r-FoG?$#@×QsQ&Ղʺg~2M-DȨk q04GV(;FQAfe rr56='tW-( jJ@R8=şٷ9D]m]"xpZ(6_+܀΋!ʪ ),>ʄԡ3M3Mpch> 9Oh81x[֕qzNH/LRB=d:%x3B#>H=k ]Mk%wޞ4 U VKM̺wAčMڟMo[4Pq GQtgv\A8TyBD8M<>G^rghӜHb~pݎz䆭66&00wĘ^1 $.Vњ<טBY'{ 2]WjnzU.p. b/< x&9  1λ:GGk.@-}#Gzxz  h=%=s+Ю^Ѳ)i~_TBHrK[ho$iqG WCDAIn#vl%EieUT˰'['i>_>z4GĪM1tGG:m04;l w9Uỏz8Et6B*7Y,}^j Qh3)Jo&PQ/r?/!8 YfDZ0"ЬH&8W@xÀ_K诔P>IJ'Yg_}qfjx^[]R_D>gL1b' 6$Vb,l]71L~K%k]g7#ːDb(1GJ-Ц̵5 rMU]YL_{subU|2,gE U)"h0&Lz5r Uk5ՙoR3}lzC>@/E#"b-)=Yw*@V1jâ%f <^L#Րk{Ƴtun1 Ė{QޔT8yZh+fJ2}¹$\!6r/-W qOfأ¾EkT3AUBI>VO~Lá@aa8G{xF  xb p(o1OipNRUx3dnC315H.j=Gq_=*y 2^( zW'g*L8BϾkۈx5^!{+62Xi~r1:%`T%ca#G3/Gkމq}pyd"-`;i a'忏0J Q^CRLGUf4xM$M3,]P`Ѿ0nfXENEn쉬~ Xül /knE1y4.rVq+ ~r4c?]ƒa K^+RuVјI VૹS[ bR<ߋIڸ6hױbt^6VJqbeYtÕUdUz pysrBiNuP@b=MlbLS Ǎ!鄸L}e.5U H7}&JR9iθN0LCF/Mm]rR_-Q(h.(E)Q$btRcy^-[x<~eoWydIPrƣ3<7毾+'24Fڥ`6v4;ŸHVutZ!XlbM=._F;mOhPd9X$7Y051wF X4&`b:'jM4Q D{ $b$1U#]2gVڝ r1L7n#72a&6 P}UG]Ex]δփJ}!7O~r7v:tjg򩰛FA3G}PIkiKy3W ֘0[ ӍϾ'Wο=H-প,ʈ->%5ljELTTP O1/+q6uƉmFi:`PuTHG 5u㐘~D;ʂ^(8E?p^ݹ,KI>]:H;qxl FX &2[6N!{<}pTYf|W'Ȫ4_'3pn&V@ۨ'O!1aa~eCdw<>x8(Dp׫UoV,<칙3*gΕvlqT?4Sgy %gtdT ?"ʟ(i3"z1r.'/VCqh;qO:Ѩnz|B/}`UKԷ/=⓴ԋJJH[DX(m(sch$BjҺ͓ThxH{,}N pWǽj,Roz`o\$9kώp8I`dE<{wR2Q+qex"{G1<ߎ936c iE(:9Ȥ &`ee]8՞ O$S͖jx1 *p [-Bw6@" ݷ)hcK 3ˤ1 3SZƎVpћnYưJoݢLT|^1o܎[J% ATQ=X} 7:W"[ʢ|!ӎHR$BB6r8Uzt3k5>;Zh W eL|=I /pJ< 4бS0o@#+-ĵJ_NqTrs2sϵ Ӷ~J[og꾶S6 %/Fj/-Fȝ_z@OWO\UֽSVkG(jeMɐHʗ[JhX>cc˜>Zڦ6tu􊦮 aM_yvɮxpjzR x ݐW~ZTV㏩8c 81Z55_d[y2(0'|͎FE7Nr6FCyG=Kcw#[u,9Os#Q 1Ҁ/S$d6f9u jSA?eM܋ʖ>6+n(~x$M&b]aU.3 q U <դoـW9,==A20't>@[i(ɿB6TU(E#;l;upSx {5:@0x!b]j۠~]jpua28C\|Q;#PKbV-/piD^&i~!Fyja<0c@ܬNMI@/]UFf0jI!983򒿖^హ'6+#t`s==)g@-VJ0',o+>Z|z߉.*TnK}Fw@+ DdɌ9ĘI"@X7q9C:L6 ?A76"6lm@'lVO)ߔr*0)i8)Yo-wx?RguiǾǞA>ziu6Qlgj.HJԔ鶷R3oml/#XzpROlJ|Ss/.D$k, !2{c\, CMP#JA'Y7SӲ ?kRb@`RkLѪ+Mt;d)qN>U2vd-ta& @%jB Y1HH +˨H E^)c䆜XC޵N pY  J{f }GMzS kT/ gZgc~mlhreN6oS^k`_NbEh=Ի}D ?C45I3 EfI#\l=_直--@ P ً'A$$M7E0UH]WT`R&Bnlj´"sb>du5* *L-W}؄/2uOa_ne&L7ygv˜f+5on5ʇ8,i:@C,nD>Ua?*ǝʼu -`&bm``?͡BS{᠐bi0,jIUiP&!̉d絛dAr;ȬMМͤk/O1+e5w7Wxb G0g<&M J-]yI2ס,$ЮFawecEq@ Cm.Iс˓^[&uaCm͏pr頥i8ƭS $RTI#Eђָ{=hꂚj[ #j w<4@4b^rB0~UAF6{brp sC' }V!$a=Ϯ4QM;a6H" 9:kE +|fZM!\ x᤿Mx]!\"7 ·JG5\?ח DLV6ߗ=^zWBⴄ#k{aϨl01΂2`x(8^!ue%VRYuIXeQp Zu%,>!yz 2D290ۢa'R~'.3z:f:G$]ư:1m`v;*gƍ}C۽ 2 ,tÔLwSIM4Bڴvse1U70 1''ƿ+GلUv^ۭ-pt판uÿq䎃$P n>bKaϑrJCTXN1Il$wH)PXy1Γx8!u0h4HP5mtӬδ-+k͵rAEK[ L~^}l(3ש4>~cT* tgՀ7`1bZ|`CLM?j Akf}@"DὃxSjM[xx}ӎ>5)aS'6񿠤I3x^?|=8iZ2ͯ ~.15eߧ#fW@4hMP#fX  ٝ!hI1&d  IIpέfϘՏ腧{ӹ</Ηhɍ-\Yh([xiFkVE8*EVwݧkB#^ O0W^o؎>f5wl?tYazF}ӆ!IĪQNalKue bWMʌ  WE<(sҚ G^ہ{67\{¥V[+2Pbk9`[tqv tt]K t޷q`UdO;~B1dEFVb(" D}n"jW t-F\:bIU$a PK[,ЮZ4k{Ì+E9<9PwWNLeGkMA]&Q<<[>Bi5V';]DH3PlOάj"y %Ѣ d.VG8$ g(?;5|s6XGhP Yk$`X^]b k$s՜5 (vj_/+evƾ(NK~rjyl_DX뫫09n"r-mw/,j<٩ 0UDWc>VVuj*%bUE/[sx_͐e.c#ݥ@tE4&lZ ]ץE$?[g~',opbhPyc9'\/o,4ɵD~?:Hd=>ghO}L4#ݜN {s'^F=|$1W^-9wEF@1nRW& HW_-چ1'Aw75foWyEH.`i~ fmQ1%EG( AmUmbm؃ÇD苌ZNVUZRU"`0olYrɷ=D*ǜ+xLIY?cHe{`pi3ǚ$ҮIrm5rε7eg_tS6! v3wX;H5O4S3M@F>t(R~XekW>|Kh9i1jL絊J}}ݜAp7x i#x2ț@+&{2X`6}.SXpT8ՅUuLK>%ϊnxГ<R2.Kͅ s?Sl jyNǣޘ%97#Q}_2{orl'mfg;:Xt*^Í"C︉=!§|PDyubAtr<0L4 ]2jnUIx 4 D440lQ[X]g{E$4Z8GkȮd,_&旘Fan0!M@Z~c뻗ADfA:}]b_3v3KjCG˄\E~-hSz3?6M0Gxa̩" *6amo=\}lL7 K2CX\gbD61sh/@ co\LGe~u.K,ؚrӯ =ZI1˵Fc # ,vX+ioW2b싨r1ekF@0rak Y9q ,5אݍ0zN% kthŭDG5YNyf`⻤dzf| 2~xy ib?*<oȈb@ W-/YTm!̟z=Ղl}oB!ZʦlTqzn!4$|ҊFj%+za\Yv|&Y}igHȡE)E;|HĒqK-6Dp^qӈ $@J7۳O~_SB1«♑60FdϰBjSФ4n\,]+_Tʘh?^5"Δacg&~E&1(x6; }}rr\{ ׄ<ՉM/Y_V~9W\j۲,DU`Y=+Œ*%~reo>Q4<[9@@(Fb,LT,ARoI~Ls˂̭,`,gg.3\nw; !`yڊ͐ (=y1')ߨ޳ƫBDLN\ #fAէw % 9| E1qݸF`ìhޥ~ aо e(TTyRA6Mg Sd<؊q Ɇ\i2Ҝ[BH,Qp3$JD IFWl@c% !d+"{G< vP*HZҩ NTƭE3f0BOd$k#eW_E}YA; e8;DR(F9Id4yP*,8<BeWxbP}a199Ix qneLDes;LDZq= vyiZ%7'WKJuҹ@&өլN0R< 1y2Pސg7Vvs Sv8#T�_X 0MuƷ0wLrޚ.M,<'5tgglS̰=T eY$c޺C"=sJ}>$.5sNO{NjWteghadN$U͗*BD)q1ݪ=C]tiJ tCߜ`ɚ:$E1 $X ; r[Qcb!}QUF\*Y^YROWԤȐdo8^Ƕ`JE^:[)fΧS^}}H J0氈H*cYxo"-p#/=0eu@;HF@uJ}(vFVNozuBT  T+yςJ1oTQ>J$=# W٩ὣ#.BdxK0!99TyƏmJ`Y\&姘49CY׊M!]-LX]FM ]\9De6Ƚ56y-Roqe6Ԡanȣ拵ITǭHaGz0khX^W4uoy\yV+üJB |q Q . v8if }qeɠ]u(Ixn$;y qWS\ 䜫?tat<b -M4Juf ndΣL喕 [DL˘yFTv֟ʸr/vi#\^ᆧ҅76hx74ɩSt56tO%Z?IcLR 0Oۅwdxh-!u+%uWOb5T!+p~-\!q)t-{_EI|JxCɄ tZA |eڳb ဏ,}o+(6l`dZUɭy?9 9 TRch^nH>s)pA)eˮz«s4lPBp>`6* [ p8 toQ}{G$_.XL+Mj&'߷$EoD<o^[W$<4b~f59_^8w@/<#OZ̭ s"w4FJ^Sx]RŒIrSio[aĂ G^sik{ŸNAN ,[͍C<-]I 86+{ead̺" >BjOL, F^7(m2̓DGv0X' L%a |%7rl\썱X!tIpj&gPH ZPyKnNHHwcyޮ E*ȞD0g2 R00_?ϣoS4/丘ll 9t qCA&&V`q[~'"v>D!IOpռF;鿛g wъH^o|Ď]K]3fwkDPǘEc,P "8H3Kt4*&C=cY;o~n_pQjC{CVy#ȕQrh2̈w\ wtB/<8Rvpm8+o0ƞwroJ"&\̑!q+3 "ž'vV?Hy0ll iIt߶T ?ĸk"9\1!3A'gn~.s;E(1;DLr{aԺ>l ˮs/70GL`= NkٔnΔ+[ s#9tx*BͶ.sQimW^ ""n5@gM]gXM[/],,&[zKuAV;8v43{7Zl;hў<oCxBJр撦!,'2ͤ*\.ƒYhϟS۝KSy"OéNl5`VBk! OIX3v׋Aס@PK4G 9+R[4{kq5B@UuKn% N6YɹTi3B;sǞZos 8HtV%|8BV\Y)b X3̐8M>`r y4IK, `Y?9)nD_TMJpUAqDI978]ZL=_Õ[ž:M F4\$DWpŠl A7Ьn0 \ζ-M9 _B4S\nOL[~W G#¼' L ½lÀP;0ݗH{iB /8āij')EromaCؿ$EV 쀖YT]Kjhsg.{"ns܄_47J@QTK DaY<7H` G7.IU]Q],tl%}:;Ț¶>Tc|lYqXe?T G+ M8 ʳ8 HO>3^Not9y,sMֆ7K2n]`4X3&z~y.c6x7]gEdzUǕb=,[]>Kl4]Е.ځyv?rj=@$MRoS+61O-tnmR*Æ夡˥Œ;{ȥ5U7(%>;gZ!J[o0L(fx C:es& ⟤!uGˎ5znGskӦ0}oY㹡^YLCaE&|msm xkȜfñQ+U* zXsMAVGO%{,0[9]QP(D LiҸD}ZEڻ6ٸxq pd4e:dǎ@H.N.,7ۏknU*Y iqxInoT_5c8kA?sCz&:"KYnpC̣V2^7pppYz|2\A4 ҅q"4Ċ,?BEEM4oT֢ j9T @FY}zQwRbiAthG&w`HQF(r~Z*.n. r20H<P4 ͆.77:]tx׍gTv>ӼQiSlr}3 G:;^GST5~Q3_˸fuQfZ$or9qe?9B\#.}p*>`FDD쪮bږqdgKJE\@fղxdu + ֟07d}Mr-#tSAxzhDH 'q-OLzdYGi+zr*fٳn+ZΏSvؒ\Wpdd U%a1w*8)lj=ɋldIw]M:3[wA7PJȫ1j5?+P>9|q70T[@92%cndz_P<;\vMeSV75ȫ$MH^;O޲5"1욤CFx)ɞTVHg~! rX ]v)_u(!~x‚𪣘/,LC^Ipʶӆ]"-*UJ;8jk/3]^R^VD"~YKh-$㯨{իMQ bgHs&$8X@l?>v ~[+͹C͋'*%|l5T V߻/p|si¬|ЩOs#Z{ } 6QcF_X-)0ނj~sD8ض:Y&`^똱|BNJ*$Jڡzi)j)q%xTs w*zb"+ 9&WeD#ƹUm?4=|I}X` AЙXeQ]kS6w]1mq?oへ ?35rZQ/S uٌYrv^R^qI[ъ\SLTh3BD!'?[i_4Əop#oOVO]Us7Ba Vp$f$Xi%(QX%827GMƐLp@̯qHW]&IT4DfUJYl;!IJ0s%0_yQT-xKulo'98A|pWftLz\|H!35s yDR׎5IAS[ uN.2.ݟ;e=}#J~=g0ݩ9,o֖dƋ'"!җO8x<>NF[4H-$^ no|Byn{QwfQ]"B+6ʷ( f?k7A)AsBg —_}k'-&%88{zSG: Ȫe#xN,/a_{Ka1$c)-~6R;C!zs<&Lc]D;sU8լTs ޾ls=s<dD}na`l,fc,>z!V0~lPZk[\i Q?|mBA#ظ4b&qb ]=0h+MyF(&rL+Zz\N""_I z䣁-T'T/Q{{C #8"= xWRFl,Uy ]LPYlMGѳu5\DRH1NhY8ahOhY5ˀXgs!lV,yK{173L(乳x@]H,|v}%/zv~Y2ع0z6rD̥|aurc?dvLLAy Nth M\ {Ж;B#(}!VF5 tRAb>(}&H;F֞$$R ]@>ʇᒸi~Ef">67x&0$AreqIU2֌Θ s{@\#'@r `ޤbM l}{N=|,wj%f;V^ʶC.+ҧiOCOөZA-)A_ay@ͤWRG@ ?əx*ג"YHK[b: /rŠCC=H22(2fZ1wmxp +%Wf"./;eYK}3u8>QHvq3"ihr,Nh Jjqг(ZbG qн *eSxb[ T}B ftr@ŐL|?ǁ,'q>k ߖy/@vըєի]ɯ?[&i) GVv̿ƉG`Xhg3^5 ̿nasB c_ ؾ<l`b*5 htod ag"xʼnd ̶}gxOܮ9z#1}i|~oNKȅ-| "muiA8zoOpq8=5%NN%Ϳ([ `_p~H"8>13 (z Wk%D 7x&؋qMNA↩x1S{fGKh~@]Glvn0 z]zLKn|+`0@jw)z)A7'cr62ƚC$$) K~L*'l4N3bc7;N>spuD:U\\Y ·,HhFw/l^%1s1b#fdI2g^X^zAqXY #y>{-6}KNIAt*=$-Y<ֻۄo]Sp?WQg8weJ:<trB-HWTkEis7U$"(# W{YBWd2{f]cѺvZíƗwMW D߱,ύɢ/ Ϩ|7>qA]@mdN7FtuyNtDIQo6U3w}q:h;MR<#FvhQ_Zڏ`vdf}-7{`O>Fq꨻eX+Ќ>ڶ{Yu!IJmPt0BFgZBZvyG,4_ĸ^%Pz ͭcUxowdc|G1l-#oe;$vVǮRLAnzo~ l3)L^!ݹ$įsfLz(Z$"RQ 1|>Evfb@bz&p6Kh}5 z/a/?PwB#yq\kPjyy&~DDS^vDӎY8|#gr҆"iRm$aߝnx[uF飦! /΀fI dZHewoLF hOԆw|ÿ*Z| 7HgėwiKKȥ*WB)m1έH(kcPÈ0ǿ1sP!RZlט6yF t7g K1.1*I>. ]N(1"ݻj=~23QVz2\eR-;85=)zxҳcJr%;2ݝb3ܕ䫢*PJyZÁ`{ha.81(q]$a z>*f_:+K' InoZ=۷mFvvws<)BۋT3^D.\ ްVmN4LF f8cZ/WiVs7jY.Ik Βw {|`9IT0r- OD滋Ѿ#?%<_kt()V>`lJq M 3!p^"79xJ2$09gQݶ%pjeCholD1ޙ|݉-\&` ]y%%|gr5r2DdTKiKk9!lfIegB`GVAeϾBu8UTkҾ l5YpPQ6b^ `ٮgA(?5>21Z< A} YGt+ͻZ|k-?F!Q>Y* CO3oa_u,y`gQ=Z`6ǸKvzl4czcwv[3A??%U.l"^',wxw` o1T"5s{@Am{#P|݃:u٨NKu6r %gX $ʍe 2P1X}1}$@rdld"yM:wk ewLi 9`W2A?귄G8bDa%E#MҠ$k&ÐJI ̊1n LHi'- (|-Rʭ^ȶvf^I]TT bS }9 g$}UA4mI Ox#HBBY ;aE2Ů))vEM&4Xk{x=m5=/-H;a{ċ!3/{,ڰ]NZ~S6Tsei]т)XmƢ+$Ag`c .r`.B~ڒ3%%{`U)C|?jZ1ᤱr3iJT*ZzZcN HfjFӗ'k\6[ty~Lox&#&D'Wh;TStVei9=z@9p`3U'Vh9_dY*_281$iෟUhϨD0lSS֖Tq.rgG櫍<4Ym}5ô.JHʠ8J6q^0NU (/o )™]tvhh#j݆AHi# e9"_sevk,VAUn~O )y ē1 D<%x(zG_*T2<;X9aI^*Mzm0p6k|,Wi.m/MBrֶ B)nhu>d{8A&BX6N3+~vgv^,6>"]޲AjFc=$TQ7oElcc^n: , ?~,Km z ."d+}=IOYk9E­ӼUs1[uv]ωPzX0#&,?۱wYIlLWS#1AU~AT][gʷDz-R vی(YjR/c:d]sV^@lglwҸ ߲d.|qİ{2mv(5]Țz>y+;" 젪lM6bHǣҙsU*N7A^t1> %\r8f$1a6JEwN3ovg;Q5$6Jkު&W×oڮYh9eXK,W?~ʡN@г0moKڑFɪn+k% tͳ -7+`#>k,>ˣ[tj_v;NCCQwrwN&>Y zov,6#Q /__-5M saOCu5ҳrU\E7XqbѶY+"8X󨫷GJM)i1:Yy[Q%\[2V(/~7NsHz #ÝGtq7=,[̃/VJ=h8"0NcadZB6).MP6d+i iZlW%k m#R+]b,e#M~J) [ν>=}㣛c#x[DA&9|#/俆?iv;'}~ Fzkyw?w8JT'/g%g z v@4l; ?-WޖkIaywHCqAy\|`w\͘0/qCSLOg@ Fk`~Ӡв\yR3gZ%'+XH8+KxG1/.9bE۹ɠyÓq} pkQJ {H ^{Q;'&$ q)sOi.PGuIIY+1yO9_,d%,x4 Z4rzi0+ω?G"<6kb'$A `QkNJ-ؓ\A Z^ 4jr6*WunEEi UseK_\XM QXjEtEW//1p-iM&h*Y'Yf~ψ8Nùfo&2-ّSuqz{:76 NM 98}R*ZՓ@\8׺mJjxPKhTF2=!ܚu I~c\hO=[D7#쬹H+;E8ؚ.!v6/lElVHHQ$Pͷq#bw{Y'Rf>B5u^b&YrE7 'BYkA;[qsSvamZ@z cM?}O't^aaq!q|*t# 'iۅ:pjJA]Hc_k3.vn6 ` A$Zvi(~ 3*RH$tA,[C􋝷?`h!eht? ܎ri NM8ա̂zn'j_к;5ep:"0t \c\lغs6|j=}K4kA$Ò&{7ǨLtd(+Pc(Օևij. ѦZ:K e>HnwUIJqED3Y7< _ y;\ >ď>WC@w>߷ @8T/g;t\䂘DŽkO]"+_4NQS93o'^Ke /:;|v2.g3!`O R-{1 7)KٺA͛#2`fQWI@'^2Еq|Z aߝ ! |8V Eҕ(,dGK'Ԋ m!B0Eyͤ(ł!8E{C;ec&-%bɣa/ >w7F =r2oЫ7cbۛ} ӵ}yj6#:g7cTxƗHrcsr(9R#/-ˣ5=g: aa 7 KP׳ɵxP Ȏܫ=EWS9^;i%k\3bЙ+ʅcPsGZo%a5{ȼx4p\kG7;Oqc!ƨȪЧI._zXnj^\+w *h}GzWmKN>чg47@?{Md:ڙg/*0^kW&}M(l!pZo?7)q$ ,E5AW5v P O.®`&F ;nGVLw2g}=ͩW?lMP w,#G" XC(_܍#p惚|J*<:tITW&2`nq'!K_J =C TO&b9|[o~c}RpI*YY3-3:`9_YtM?!PdQ{pG pW{m %?r|`*$,V́oy֜HD-1Nя"Uwnlv~54(פ\+/Ti [+ #lw|UB:̫9(R:xKO2cQ"sGMny<8?kiYMgʖD^{EUNm4ѧ2ij/ןΗl-F/16֌D<x8p]O0aXJTif)ĀL `#-z_ PK*iJ8BX%?3DC =654 ZhNx=d) T4ahH4cN̹qiƾ} L(Rd`Wc!XͭYi}BZ!*ؙYh(4LOm2F:8 峥?%j=tUUGk> ZEQoOW|$c$Ӑo~̾@ ?zIj,'"Vls 6"Ӏ S6\ombE w0 K,w1Ƶ[QQ`6`dĈKدf+v|8tm!-BEÒr`MganrZufPQ Qy"wbMCZ7)zq+9Vh5y$8bܿ9}} =]H4iHV;le:zសҶ˿UO~ӌ{z|3;5DzwxuÀQ&=v((e#[*ikHOfeV냅mbtÌ81o %-ϪPhg{x.fU,TBNQތH}Žχq;3P,S8{sB"/TW\2 2t"]#D,Luh= Lm-hE&k[$ T1V;x?ƁzNW2_heMϪ[>=R NvxE7&x-k~XR?zV!u?(-uIxC#um=_+٨gÞ` g8.7իTŝ'Tlf]Xw(h] 76ψ0S\>44Eb`~! N(}Ȕ1ho54AT5S~&ȏX*<v n}d{/ղUދ)SϏ.Ybd <1tu7YS<Yh,,t{3RHB5?ɀ|n %&TBA8Rݬ Bt'7^0OQ']bWh:r)N} 24`Ep N;$g:iOQY$~sQc4W k̈́[cг6\WVL֍Ms#5@Cyup4w D]l4Y)@~̇  y;?.g/jBc |B, dm'h930굪j J3C0uK݊ ^\t$sAOgѭ튤%s9(Ѕ?hm@ nY n35d֮ ܠ3sw _Cn~R)9Ml`"?I_fNţ{"j}MO<}bx'1;3+.{Kh<21VQfIQRQmgH֚^] bY3 ' 4&#Wl{ػ7Zw\&y PP&`];xScҹ%kӅ` .5=267܌/:@\&JLI.zY2;\ E?y ʙ=|>'\V'Pj̾6$6YXb}ѮBN}NUm,6˄_ɠNogeYȹjzǹZh ?aO9 -!jg`yqĪ\D+6&sXWN" (%W`n0PDmk\ndHyrl 0|Á5ct)z]rNh"HD<./)7Zx[%y}C08d C;$+xkh7bycgBqEO&`'y eo% YSVnE%M˘bVP9< GjdOk# VڋB^C2}2%H#QU̳戯;3W%Pidy9+SQ gSt'cD(i(I>`HHà(>AJ$1g6Zz$,7O gVBxݚLqvwx†([Ӥ$Iurit~(9^o?|pYP ?LPY*iknס$ >?*EE7Ŗ-Ը%qN\QK $M1.,yv8ԤYACɆAHyd<9r1bpSXGQ B-y/7#ܾ.t; ̯9;k#mi)Kkd{ 4R7Qa,_qeHVEg6pB]R*?xĊ$_GyjUH%Ct= bod#)6Aĥ y1;9G3F;1]27̅np&3}[o׭F咎>R ^uLt&\k *ם;ApnuEe>g_p5j+4;RdPgmY v7q!Ƈ" ob#Bcu y: 'f 0P *?ytesfj'(,h[Og[r1o". 竧-je'f0UMVeL+ayt/7y(\hkh.K_)/+0J-LÒ>#߉dLA96o/ߡҏߣR:avM|O>[M7o ag$0g2Ԝ:&ygUlҪ!\7_LȑIi5C9B{a<1 { X!RdDbgp".apT%]&BȃІ"T2Sѵ{ҽ9>eWloǧ*+"FGr$bo L?NK1}-@IJ"z̢=r=zATΠn,KJy If$ūB>2΁ک NH}4>jYg8QjSL,pP$+"e`{POud jG4|LH;eBןH縚̎U8m?3Z-z3O+Ԏu ;i0g6/?~4Q޴`$bdcV IZ#GDG-3h 2s=$$VKvF,Bd{i>1PA R Rh,S芯bxtu l`z.Ȣd@'FqtX2Q>WcG"Piaⓦ'a]Ցp+4XZ! 4čmNlM Z!p<9O7*Pu`aBQiʼn<,I[3=齅Qb_Hf-8޻[ZuVvb.W ! KL,|u2,'!fIv%JwϋIVp& WYz} ^ZhU9L"GE%%餽m_=ۈ5q07FM]]N_ $kSl%KqT$Sy/ }Uѩwӷtf2wҢCsa0)&hfWGdjk,mHv=죔/˾,[?zu{zB~ȼ< B}'@Ҕ~F&hVOiar]m" T`>L+J?GN~gm4fM<2.YvAq!=jhy!"*lwZߟ[ȈcwQ58p[fiDzBLP <إ;C/Az!$ (08@1Bڷ,C?.5@"ɪWq +'{Jd`sQ$ZKy =P/| ⎣>qq)֘*珽օ kY:d GjAgM1{,߼s ~m{H=9Zjz\w}_a*#tyW vZy!2:B8<ò\ʅ@\%݉ ⓭ILl2Uj5ĀɧQYY] ߪOr9^RNdR]l՝8ד߻Rzd{"pvR*^5K|$ɝoA43=./3Ny%d6Q?㐚Drׯc0Qp?2YhGΝ>`d!2ɉ%cEf~m5Hc"z<\#7ءת[^]Ӑ+D:34VJc=^>v(ԃ[~ǒ3{pnߘf\`^>3$JG k|"XÙ47fz\cJ O[X{Q\cti* 81N&Ԅc1@*LtӪ!>[C<+}q&9_LX6)W2]b9~Ŵl2^ܶ~l^!ѡ/e,GD%,I` O~\Svr( u7̨=]l4!b~=:rPkH"|$8OKi+S+AGYJd[n]`d0&s2,Л)- zO]II QN᥌x x3K: "Ɠ,d]ISl;EnrPOꈈ/0eh`]()bd*V#`ԕsy{:/=%FbKLUyj]@A ^Yf5`ճ)Yj!컇@:¬5-ՙP:G kR<4\gM%*$uY~@-$EsYB~lIWMփz;bý3yR5 x,.uV վ֡k$>'FK]]AZG wj!]Ċ(KTX rSǪsVtk Nyal /zyIN ^SoEAS(D_3uz51Q p/n!6ТzY ײON>K>āԒ7W)-M䀣կ뽡 G[$+RB `1Rn,Hh&ӽ>PM!=At' v&EBy4Sr$&RǼBpI?Tug;P(7L32{Pw qu@lb ;OS2"8nۼ"_Z](Z0ڻҭL;Ce鶈'"Lce|LIDA[U8\Ь?o:ԌXz,*%Eu_k(fG-srz+W/H>:%ܪHL 6cp iBYQ;T붧n`3.-^ J||h,BG͈Y()2ؐIBşUND7Ć bu$WSWܝ}Wĝ˳&͢?v|ܮ\M荟^({ Rπq$B[|~Ds4m&Lb ,@*?8v[KlWe<8rkZ\]w Sd*>ԑX)yU<HlpkJ: /|=CdYsPƬiQ`|j,f﻽D?-Wk~hڣv $^^jk,[P,6VIxnv#IN޳i6Bt_<(^N#ami#1OŝdJVdO+vِ\v ]^3+FoEL~k~hsK~ViB;?7G˺!QH(j" 1jaNoPzAW>Ww fRffGzAkwrpnL7x(U:б|k3QR5O/N%8Q@ly&*@aTŕ2VXSWG7;3_vk yޚ 16$jH9E5T[utA2WcekY=w%=SKq^?~Ξoۏ]!<4&d IV,b|dNAN{hL"4*7-jðp aZwdHr$(?n, #)av,:$.qYFv#THg ZRLo]e8нg&bf($`5Ct]:s֧Nb1_{bGsIzig}_Z18 ֬YG!̔tKGc`ǵG奍oxt grcI=}9§n$FXn/U1+iÞ?yW\XG$J^3Xgc'w"K"MC]K# C()0⸒Su .Yl\Ӧ<˙w/4Az[e^ J)!Ѵ[? O=&Å: Vt>S/v)`GCaƴ.|Z1cy 4-`U0aC$[GLG\> WiOT4]-ŗHN+{h΀(֠˚Ruq7n$!\(suDh,cQNn@L`:%<ڿ(t/Bnˏ:NY 0NI@ lam/{7'K}ger沥fWip70jE3}U8odM_XN~7M_vH~=E\R4zc^'?d(ᄣ0we!5%itX:%&!Vx`7m_ t"XM6G20BfZ[c_ų,e,fnQ[q׻Kb4cz3%+`B&j>a(&}L7/cl]eFԁޗ%XعO ؃%<Kb<*5T`8O\܆v8=hC|"=6<}=듻[)k,JZAAc'=:">4`uM)""XsU𾳶LP6=}-d2F2 f.n өo|Z AG0K Ǟ6@{fSf%pp(bޅ4/ !qN'@*u{;m. Lrχ!S"x̘muwl-@kw١]H r G,x{ Fheysnb}tC iQXd--7IhRϧ'R\FET^Bk.l-m0W.v*ȉ^=iE:7J60߻# 0y9nSlpRKjL ŕ-_"7uC \>YŦ٪5y ]r5f&)Eʗ(m[k,#HVeB]h4~R?tV "m2*tvCAI# EmwO~I!;زikW̰0@B%/n^0(d%ޠ2JG#-SFI-y8т%>SkN^B{P~nԏ]n_ `cA}ml0".@ i.\U VKt0?4Pv;./Пq"RӍYV;45zvӨT]X:ӹޒوc  ^SwĖSZLݝ/djnAZV'h5 ?ս #$P D;Є8'IN|jj澅U&,hn)qUDui6T\0Le݅1>ef_rKW{#p d*ѮsD-(' stO?Vv&:Jg3#a._J,AX# #wMYwqꪹ$? UdjJK"Gyhh9"IՔCCD|dU"iG-"D~4{Onp X,K^A[jg&TbGy2[5.Iq чq_Prʽi-ڦԞD)e681^|pvk^ CD%pܖ7YVV"Xfi*<$[ H|f6x{iV H̤% pf=tޯne _["d=v|͇d&d spjMH+a`% 瓊@U:"Vw iyC_(k8Ŭ\ 8YWgo#(3@n~ Eg,'5|!Xs[CZ/c|[G2,~GS4*L|uE˥k C| l;Q#[{:&̒ɘk׷>{P;y\=ҰrTQ姟ga)HKti.ĮA_z%ŸAlYC.,_>cX{82 [k=Z<(v. ˹#,V^Y %soy6?AL?(ki!(p))JsW[5Ċbߎ.6yyC* {"։g"Xsk E4&U'%AbƑC$t넉:gu"C3} &H;rrVQK{ Q2=[:?}]@g'#s@!+ZJ sڶgʹzvAX Nw>&.M^Q,n5cjgT~|*Ҳ~@R QHZ}mt@L$\~8`@ϟodY:ݵ$6LXq;I`/O X:OqL/ sM0j"rɡ51fFKbp}eԁR.W ù{yS1n\Q9yl#nLv!v pn/9/ >b~Ҩ7܇K1NH 9{p\%sK9$#aSf<>` KšmV yw'/ęJ5\RB+NUbi %SC,Kesjƴ(EP Gq~zn'e0](謋59\  |1]O"TNc( d"'6SM$ !)N1+PmZE0rh=ǤA8s핤OEx{EKF=FVl,P)fRO$ekK-,<7OLtd Ulcihy-ɋ$pm>/)7ѯOEה*]D\#iU-x= 0pBOJᛋ]`MoBnʣgi6Ra6Px{ ;:1)yv ,XNx|yF7d^#,CP&""KwB6=?re.ukMh7 g>'kԭ遪KNЙAj)e4Y8nHG׋5oN'2<"\̷qV)VXI7\e-渽ד;bJb?N1('vB*4\]un~83΍iAkiiř}ut O.n&^PP9}8iǛ}DzOH\gXG V~EVC vB㾈7Tϵ7Rw6%*ũS8!-5ӕbּ rBn^r׹!T4ʪCl) 7 _^_0kE\0åbLF7/B72(A0`gלM͡8Tk >Wg[M/:٣1aK WIiwG <+rG%-(r:+sg_GYo@H/Ht= ;T Ck' lX]ts /EL5(;;#񥷕CzmQLc^aI,$8bFövҔ Jy"(Ytr\?lʩ%\ɯ" t)8b*Z/m.A[\(AKQ`A򟏷2{J%%3ܔnܝђ(W/JfS7CETfߋ;:ƛ$ 2,b݅_2V Bܲ.0[H,=QmBH2Ogs :InwbVļ U,æf֢6hQy"S)'S\3myk((e F$0ׄG3瓣8 y<񚒄ׇe,tǰۀ,%2 Hi| DZupS8{cI$ 82d'|GFf}aM.cdvm5oUע6Zv=wvQ%(APi*81y*=J]{4Zwy%Dl&iMeǸh[ߴ` /CEM-R~"/hyAz\$(,!_ݘxL`[*J4No$ ڜQ4a7\!VuO715O/B̠iх |sٺ{^pکBOj6zL-(߰#:W~te8.3e"vp=XbLicA'Ҳ NxԇX 7=i"D/wT.-ZGgEObe^b'?3!Į@ymr>Ȕw( 5] a?bf3cJk vJZ<=MY p^A0v{@ꃴX=A] @Υ12p;`ox78)<҆0, iRZQ-]A8z\N]|rfyPɐd7rۙpIz= I}hA`.I"8ݎ!(*'_]]2ΔsCo԰Enĵ<6~yЕ_=Hio!]t5 ~LLu^MlĻYm H߬C0M6{3\>^ttNZ=G\:Q1.#P/.g٧H]cfӎW.v@͂R3|Ĝ03^C5N+# ?q8r68 ,"9CZ!?A,+λgumébP^E!042:Jߜ@ bFLNo.j,wM DUyDŽ`Qc2.MC'B=@LоmFJjF-~/=e.[r?8cN-yX>+pg¾q\0}8(bw,Y\RMvraRd;^&͛.W5QoE?,jN &%= @/bSogbPZ0zC[ V^_tvzvR" Ji zcvcx#YPjX-Sܭ~J!b*M^q[ЯtSGu| Q\+a8g4% )Kx$.unu2Ɲ,>g?8Uڦ*C/wiKGo{KbE;V{j98dbGM{TUǧ8Og=!`VY gl0-'U442S(Lu 'FO5U@ZDԖI)w@Kh(Xվ~mZVjv%eGjUTf(Fw 9]|W?.=GKt@%='caDRRKZQ=jF. ڪ2@y` NZr^+\ò͐QB 0PI_MoS}8A2xZKq "f&jj$SMMXInNL!݆}@z+̎y`':-oPYJ. ~0C di쮙7N+N V*m"凲p,GBFS4/2Jd,g.{" Hys@Ʊ#d ރi<*;I,'%ķ~WěIJDnOJڕz_;: N_ 2X ѵ*NYňP:*.w)E>a扬rLyr{浨Oo7v ϏwttbV謗G|^{z]+z,0g}7 00@?0_:v7)~\0CAV/YF`^zp@l3u&CwLXw۸CXw!O"!jmHݺEsxFP9\˃0RCvde=ApjiHz(jwi>SAy\89lۑ="6r6A#ط0'nx_:V{+WHPC0 EhO\Z0%n%["S#.u$Diý V+2*aָ31f] ۇNvnȹ.?hښ532 4X:RHR *Lź}`(تægt׏U8J.F+,cK8n!Hs  Xv l?l:|']&B`%DF`t#Sn % x=:^`G틺znr_> [GLc3aby'4e%z$zw gevu3߷iz[H\&99`>O9|HiIztے:=lȺƭ# }KSr14ҍk֯խv1T&8[P^%Б^;DKKNu*j+^T.4dJ@G\*|(zQeMo|9Q:$<|A5 I1s2 4ߣ"61&!2p)CH3 Lb^E9'Jte$e;&|l{} lOh0N~n uRҗ #=zo{Er/AiN>\xspmL.I/!-NcܪW"p;} J/a0j #ij/-acx;e7ʾ,, ׉:v bk"u*XIX09#{bw^"K ռ9[kXW*BjCn\bAdz@0m9k%LdY:J+8+~9@SfTv_&/ӁM4ɤw\J> Dr 0!aq;2¨%TVVYF*JQ=@Y#Ywѓ6):ͽ :ʨ$X?Qӫe.c^y-uG `D9KK+]U+^>>OVY{ hVeUn8. rɦ& x y5XL !neffxDՌ.ahZu\XJuSe(5̧% UL8#}9w1p<|*d 펿(?V@|E O|//ǚWY85ZXOB=."TZeH_9A,53g*țx}6ŃkpeR1&]fuHʊH=^7mWv`+6.O _;{vC@Adxm"h|(5i jOT}E^YiX\YY^(NM/JB?98a ~lIV*,dPep0|$72q J5aNQ-dQзzwJ`" 7N~|J1W,B>7AtI+"S|YWUZP\Q*h"P$SQ?w47eG4*lk3H!#q,3!syrүDz=o]ZѴ} _E\&̡BrZ_$ n jFj՜闟O}5-Ms[|[ǢiѾ\ie G"f>dὼqM4WoJNh{e.<Āq;RZ aZ+]A%~X*f-3d@ 5&օjerqpG9yLZ ZXF4 ")]lOc|ج-{{cqg?ũұeܓ.E@C9[[_ C/?>ӼzW䘀X:+OehנP@!d.bĘQ(BM2@|]vJJ4E4"h&>(z)qФ>>s{T؁$^OBKs3~x}h{Pb_tmݪMkD[ ^)V?7/ +:) EyqT_TYV\_ #~"9OCcDիl,:S0)dލ⬎-YJoaoR&gX;˻kOU)0Lͻ880ed 펚AĽ u잢1ˇ9OJ WT׉,6ݗeCYbOno,bc˜򰥯``h=!L_|p$w*ǯMÎ>9dE|bypqLVsɻdLV)ίʿ4١xvIfo!Wf[ F#kZN{ ;O9KIR]v^ ofJ/f9|QmZS3:؟ vc>̐Qx&;v2 )cR`g ! +Ii}ar]J`GD>DY׻b/u %64|ׇ@L;TUfJ18VQ;4 T n}D|.;CN>)ek%D^'S#G+B_NhA]Q~* b ЬmĞ'7-Rs^H?)&<5_,]$iz L^"g'B}mU B\c&o_ۿ?$t!G]m 8oG7 H6eckvXkz`bLOvDS 8GFόdX=[Qis2^3 o?`JEoz ]RBWzWGiYS Ad*n@>t'Ga&誈:igx?Xa9![ХաKrx"]Ok0X2dFXl2 :+a` |CemP>dHP+iJ03y?Ip)ĚUՄ1Vpx>?Mc0*@yugCWeEC{@=n/$ 3 g x!(ZGO XSp-;w n!ࡵ2]Km v)vۆ$-'ϝM\< o'VI'>nnh|A? ܯY0-RQz5OF!$mzgm%jg%iv|JC.VHgKcc!Jfh=*\@[`Ve4ۺ휑H8 DLNU|XZ=!Ue׌*%ybyRAlJxKė)(XBF[.W-%(O;+h |~R[KXљ_XQwo*AdbZPōllTr* p]tdvs˟ձv.3Ѷ{ YsEU%9¼1P<` QѹU=C6[ZA%\@Ssċ5x13i#tJ7$|M F]i Yy M3Ԁ.%Sp_Y3N %z3"3xjV`9G #{EeKʌ7ۻzC "9Sm}D|&!ʗK"cF/S$\<)`2̒xE \A2W&XCDZ_=x8z/)g݌l׶L=_ #h\58itb(n.ROĒZQo6\D6@=[zN}ou\C= AMqF#¥RuK:LU)9d5M%;˷L[W*o ڌA-;@,`83Fy ǟG %1Ʊ#Llϑ120 5^Ӱ4jhy*J^h'Ei{+\ H;V?qʔzTE@/ `Am3zV@%򣗇W*S3ЊբTq\^R&Y2Ϋ؅Llۦݺ])X#n4/D.w(aS![E[c~I `FUw4=Ǘ2gĔK|Xo篴Pڰmet)`G|êD8 j9_]>DMq5P",_T\lzvXX.CWc ͢ES趧ڏVH®lǦ֢NTKh9#{deuHuGVlЅBE}!T%@u-}z2 ]0L&`׸P{3>=ZH%Q= %1 fx@{`l+tQ&iS `bV4("?UB0PuSK"I V%#3ГFȸ4p"FFi&ʸ&1/癪:Y"o-dFzד#o},AȸrT6{!H'\\:/cNEgM'(y7|lGܨG $:=w 2rTbϷ?%6bsŬ+2vˏ7lXljzql'&Tc|P>C1]Dɏ5970נ#;~{i:'h gňJ)m\Õ1_ aUI߇gn6x'-=W0&<2 h{Rj=[BEmUaQc{o|*=82Y9η4y$ai%!ZvJ ^N2,ϯ2j G_F2xF-9pG L,K~Լվ?\z>ɅLyI[]?kׄfL|1z] R2'wkr݆0 w(5uwXg*:g ݻ"ʁ<|wx9-,Mo67c΅Ƴr˓uJb#IEU64l9"/;k.F69MКB:'9qx)x=6qDꡱ^@K W^@Lbg,#:0*VgWD1frXg3| 9gE:l,eq_gdRw, uZ,.0M[2LWZqA LwA%b;h> ("E%IʧJN PL6^US;vVy9+Fà Jk[5ҏ@۱ 30rmFht.YwD^x'plzV\<ՉUɸ0Uj͛mXD4C(PϔPDhZ0A]WF(eiÎŢU݆:~mS+QҪY3]V qr"4D{1 1iRؘvTV Ō|KjqVs3]8IM&OA&f흵٪&CwrԻag6 t__/UYC7 ettj+А\Mmnx TO-iuٷ#WsvV?i[FɶUVS&SjGUPP)Q4ؿI׵V^PG-GxE>Zpگxx&9 ',q 2o\Xʸ{s| N+p*!p]tņ҂\ [0@{L0Q19\ᮮsͫk7E FpH/ŴFpPyac0Ȱ}]5R.\Fc x"?_[lfh{5u>REp.@Vc%B(r~VB*s~4v`r?2Oq\#ANnAϕypxmLB 3bXڍ8xQT?pL5q-D"qJ㡺Lis\v=Iyt6KqK${u&#`^19/Y=ˢnOOV= +R KΛ6^9੄7-)c[ҭO~s/؊!)]f?bșk,I=}cG8<̥D_5%1u}.&v0/t_|* Cg˖Pm~MPm *CO@ӱ U-3Vb/ =qk?aókb\@= DVjuhHJ)2}7ViT^d7D}ğa9}4Fzb~֝2$q/`e"C_3`cJO9u X҃-`y2w+d~ "3 sz} n+G'lv6Ix=3Z6Uʎ ? 6R])!9ͪDq7)B„ mHRҒeY)u;C";qxQM'i_ XQwįZ/*%fh圙# ,@WzNX[Ԯ.b bŸ:Y{ />5cEL4op7^Hp%s)"ͳd7P\2= U"12 b{/92CQl]߷9ӕp5%zV5P=BqW{~kTxBt 8CI]o*G+ "?\abh> QpyQ3! "^n(Ϩ!S+r:~91aZLU;dDK?9Xd' r" b=5-8-J)zzS+b*]!0A DX>VS͂tc)Lrc t\1Ţ^fd1;*($p_c9Ms`{ 6+e2+3(yZ0QWz&Pl0]3Ƌ.d_:l45 IaC8*Ƕ ǡEbF R3]M7Ug9h}ίk[8x| G'(q3I'Y!SilզgH*r"g1_EL~+kx#L?RJW^H%qWrzΖtn$S%SʻSu~΁F6RO%`yҘ t&]{v=lNT(ܹuJM,va}0/հ4#YTw~0 w=L/ F5!9'-~U|yd.ss)ꧠ[H״Է9p{+f괥1IWFpvq}ó({IZ*eMK {/UVk!2L '4.izK@nЩX ${1'Qypɽi~VQٳ+[y~Z.EtxZ ^z r(n/n8LKDl%SC-6A̾?xm_Ey\u^dfy->OL_߸M ˾+awj:D}iL"Y{?-%u;&b&D 2+ ѻu|eV+QГQzB=3m.};;i AnQhVo%x0wX=i. )%Op2cNm\R,Y%C4. NCW ]c"'L?&Q|=>ck:CՈ pQ΂ E-9WUC$]c3I(iY[EzHzKoюYQ[lO]:Ki׀0|R-gF$ #<7y _M·f…L˼WS9j=i$v.ƚz:IRiz m{b@ijʑfJ/C;VC23f@tK&Ygڋ!iY/ս Lr_;[c YC϶6}9㶚 s9ۺK&<\ 6W$O EI>sH޺GY~|4yr0ۯ0j?(s 4s\+:p5<7~ٷK+.lmU޾t6r 'ky5.W-CH_RQ[.߉|[pi`;x e)83YQ<2Y"NY 2*ani:I=w?d}a* uP#J{eCXa@JӆuBdŕ 7|=U4\ @~,dȔՈ>RHAB;hJyR5ie|~%T&͘jv ǠH^tO=b.!p~8R&si gCo2=RR]E4riԅCk]&{/ ?S2GIulvW Fq>Y=KՒdFs>oarwVFa,ƪu6 759(o1& MICa-!*܉3[2oqw%1Psξac/:*1TM"sXx7:xa%{ |P.tfiCq'" eX Bɦ(Mù kvEf."ۀ*JKűxTB,L7B$m;x]:!P0kHO݄~4AV_K-xR)ܒV>bB|v@LP:Dhٳ ='6˴Z?pVx 1<&m [ɄʠaCZ"Q/%fY+ڗSXG_id*'@Q*B"@H;=}TipC$/݇x6n7nO Wx[ uY$ Q(f+m|~|4`hWyA /4R=ȍ X+0FU%W,Ad^>nkw 6;2s -3o#}w? a>5H>ivl^Zdw4q,uv#yWm'DIMפֿ`upP9 L(owφ؊jc_@t<9:jU[2akj"0\\oXVqރ5V6`l3]=ciV ;*?_[ bjzQa>B.5ݛR:i"3Cm+K7E5XR@XQ6t2p7SD):hRE7{cy}Wn(miI}NaTؓ?* " J{͇=.G2D ܰ?c"bnM@/E*Tl׋8壮8sn6q̵WVL/ͨ3 R #Y/`Ѯ^uG@v=.\m/^WQKȤVJ!k9,j jnŬ'GݧjDV2 aW @ a͏kVZU̼)8'as[cX-cݜ.,+%(d[ =%ߦ]yǰ6)zťw_~]~5fժ%Z۰I!Wo?J8urg eYIjj{`1$E3dtg/lDݔ+k#o&k4f!>erfNSn/+SR%B9K!P^voޔ rA X}E$ +*f6z}+E g{j|b.ӐsBqD5ޞ1Z7 ِ 2BBLHvAp3m% Ul !q}!"Ex?n1aE%#`dXghprg|spWS6MeLl-b҆߬\};_)1RBU"UL p[\๸(\l1SX6zҜƫp){"~N2Ќ\oh-w\3BNJ¿byNG[VNz>^]h`!}Q  Ia e GBT0CmQ)f!5p\!s C'eo3-Jn%&ǏL*,6Cwb~R׾?\MLyXYC:D|aU[96,*H a7e@Cjf;+dpaE_;k?f@!ѹK<Ā.jp4.KҲy & =L5!:M\}͇ypʦDcqjV TڣtWzU1KVAj}מɢ$A7M3|GD Scr@2!J64U-jsA4|3loEJ{?!} Q,fy1ZY%qށf֔.c@S{6F$mS[U J +0rz (#*}f㶎ɀKSr2{*0ttj %:K Ħknyc;W &f7XF?&ZA!\#ޣ+`fU>Qcp,I24JS_pաAa&[ ,ųB[B1`L"*Qod_)&1+L| mm`@yo, 8:D$.ҸGDcԠFݘM F~u9Q{.PKZ#0l!O݁ AA!nOڳ'/ (J(Zsv1+Aå=h|x( 5,R>cٻ4$VRA`0-m<)U;Tkv!J# SfU5Q>ԏp3nS|a#ah+2E.0_ [~ X >ѸI<1{yGpJ\7a# <ކ~]]YF Jp0=VhNKjx4(c}7{cfT+^ZvRD=t2݅6/ůF酱zmUUJƣp(ri>᛾-5Mϰk&Ո/Q[ЎFMaӟTCo~".i-VsY}tcqlMj)۠k&p òӆl5)S]a鑡la%pG3HAPW(? y4@j?vK%bwUXɎ]=|nT$jI9|_]# 2bz|E8p/*-e{{7|zCP*=WC{ATp @4L(!i8ڀiP9ЮB!=`_<.&zf~2f1&0Fo|PlܜB1swXص'% 3\o@1K O)|4335w[~.xJu1jヶo @HoxX sɣ-d9u*s]FjٹLߐ'?t0rg|}dw훦=$m3qSxuP 5v0Dȁ-G# 8q ĭ>ptudG08B(KMm~݀G ,a, `t!#qYLie-ؕ!ܱmGn *3Qr??Sd{!t62ز/Ʉto~y=喯:-d!ކMc1!&^Ns%~,TTy'XzR9buXXṲ$NZj/H ~Br+8xYZt::6mȒI1T.;_W {(Wcsb2Q'\Mᩆ7,QN_醊'V/ [UѺEBzx'``Ow#Um?5޾n;@`(k~uDIژi.=ٚCuAevy7ϫǡĺz\u\t7+e,vj[g6y^Gӿ@YąXHz 8M[|ž?,4kO(d-_Aof=*`- `s9?ԃahAL% =n-ϒsZz^S( ZK|Y_y2lyX|+|"QJo1fxFMhNl|Q i7ˆgw\HB WG+tu@WQl& /}"q.-i~Y+U6_i^–]q^RtF}QJZ{yWV,st׆Va*|u1a>%_e<u <|j#q-:f|X.M^;78# OҨd囡Z' dYJ3W:Wb.(r~PJS(.~UqXB;/ ZC!̈K =XqɯwH[V[gN.uwCr">FWw 9'$O˦Y DBr4h z޴1TsǯQ,=vΈzŤ'@otY4OߵIhxl}LA<\c~Q'zWazk9`ElqY>JTՊL P0 Qj#R0Ҕ+be.x|o^ VLԃ悄u)"R_]g5p'KEposGުu0^ i%)z)TĬɴ(y)jj3anijB*B%#ؐq:\rNrq wm˹?y3(4n6nHLuJ (!kIcM<[>L(_k6G6\r"Zdw*$jIK @!JeB͵lfR р?B*Q;Kq_d{liUbmSڥS ttav،B/˰& <2…司I .;FA PI( `~lV^mX W5t<&@F賫"kiQ4O"8u*ۆS`o֢#mA^F&m^Cawl'Qdv>TZi1` Gtb.~* 7F'.w~-8W;'[O=p``e ផ&7W|`'h%(+g^z5⺲-yMQ KPFfdU0"PEKp?/ ;}֏E4Ȃdz~ǽsdxFmcQh~46fG=_ePtӼ˷"G 8~eR8$|9g 2JE~9(Ρ 0kuJ ٫NUmW\m6vpl+ɐ.̇VfLAY%gWV%d83OC yFU8ٯ\Es84ĸWXHBa6[I,ѭuA~D1 E?h] <;:Ds*m 0\4*s^;$[=Hg>$2ا/_d"Hq)ʠ L/։pG4@F\h0aSDW|w*m$×_ 8;D&D8kKWxf\yY U?D7isG::m!j;v>DhDW}ڡMK<M4w#`#t.Xl =>HNdՀJ!ދ( ''~G5+ !2qǂz&6S:)i}F^)VD; P =%!NDNI;H~E2SR~nG,rѻCx3f_?nhflzwhb4 agn\Y3<2[~+F']Co9r%!3/,!n#AnN& oī1ջ<[Qc#Iv/xqoͷJX!&q X2p8T0U΃:_ L-)}⤞\l Dz\io si/T.!ɕk ^dVu%J⛸D'>[/PjDt{2 q__z@B8)9J$kX9Kj)q~l-b˹^888 HtBPvRyNkc ޮ$ |Y^; ۍY}|Bv{o 6\wDj̕~D6y!=+,3U,1^] 'Hk^SfSEb(H(BjLC"nI tg<0a3RN*WƋEY¨`6 q 'Hu~6aDl*XuzYWp!2vF?c}i}NͯLչJ7] Go?6XH apÉ?9ݕ{ LEPr QIb5 LkD屄I 6^t<=k&[+cΥvwx봟)ON 2b.nR]%3ކIA⏮ؓβL|DWTi".13UNSHSṷEmeSZOT0Nk],QهF|#QWeX|[{xeƼ*LqEyfij#hP^.},RVa?j;սhWG_Yl\p!%%g^ND cG?jaYM;3`hG2 JL𥅫dzi8l(2v4%2N%{wI s%TQp׭ol_{ϼL[1 CyQN^ܖKh~ߘ,jVˍjz]M)!#\$Ey۷nsvڹ!b:Ј= Q¥_8)e%઴ JL<%n""aP`'-7`rME@ߖaܰr" Q j_6O頒 (h2`KA kyy (xt,80m5޷n?J#?GY@SG,(ӎMVGP:fUh@ oMo@-DST s?7*o-Brb oP m_-Y̓Ȁ9-(D$ǃރw~ 7~@`ϧkH}%БFR$7=c Pķ2{Y{uh{+)=5ڬ4RC2CTRɺsUs:Sjylx2EP1(O0-KgoܸSJUI١vhk糄f罵Ł)$&d5Gz;>bM 8m13ꇐta݇h$9)1{DȻ~~ЧP:%桖3+-ҡs,oдj=%,w DO곆<uxWYv:0ie16Yh.!ο& %&@o^6J$q`ZDRI,!rZ6Zkc:TLSM:>tU"m>G5/K/:2\Ojt Ҍz%(7?h-¶>V)f'7Z8Fc2UUfulE;#!U]km;B08YvByj>FOh4&]uKw5tr ѫ֐"iLcq(@qfYHXBd[2MI#shOVI$J]a#nC"3cxG5۠L`Mԕ(>r559PֽYJ4 5;̓b8 H F^TP{vz3L}C?vRP.^ԀztВG61Bq-9.lm{c^"/(:"-q'5K 1koyGsTY-^&'voSMIw;bΟ`"`M٥cc#ZMy:Df7]'ETZ`ȣq5N_迟BN>!j#ZPnY D;rcX?;} wH8{, yӼW.$0S6aW@׈Nz8+/ecP*1|YgƥQu E8Xf(YvT1p&ܦDg|!>q}60Ј;h5:1wƦWT*٦"W["8u1D>{ݔO`nYu*X|Ԧg* ~};ޫoHdCQUbT:nevrW/JpNh5&]hTFll8"_JLfsRI3FCY8 mZ`!'YD%ET]{8LVܯ̚[E*뻧cRJI[ [MxnqZ>BK]cD8R;V05S/N_ijoVITݓozZda9P3 ^s\/}8.~%%{RcM4D(ikMk3{0܇?M͓'\.ED>9z3YOF6e@U{֛vm ᢡjeIYiC&?{If> ,GC^φ9њ{w5-"l }3FC sf5Rs(erN*b2ŷ OlRj50JTy0Gq2S-R- c.\)2/ è9V}~x- + +噀^)Ϛ}OX4A Z=a=w+Sɜ4OH54'p^`a^nCʥ?Q6@"Wxg.@O_mɭmܤolVZ``pSUCx|% 5F&;)r@=VSIj3{jhJtZoy*ր-F*!dݏ>NeӺmQgԛ#CU{)Oo-jC Lv*Cm!!裸FJtl1(eيpyǣ&T~ؕ:qY0N{;[=p{zvuRQ.}V-l=&ypo@PJHnS@4<Ӧ$C'MZk-9v/.PP)BAh U'kiHݭ61h.Fзb]LR٣RK  L$Y#hYÝvs uL L)=Km39Ze(8a3q;ۉ8+X\Oz7.,RX/UW^ HV˒zd4^6=/wq \*edqQ&"mS#찂&fҐ5ܵ̀:&Pp]{H(Kb[wNvQ:i  Y$*p&̆s/ McoKC((񻨇yoܚBqxVDb@kJ\n<CX/Ot+&{u%kA#i Aam6/?X,e ӓtYE4m0gHJ~ k6o WH*Ll4&gB,"o ˒2x/Rݿ)ZVKp4X 4feZO14/Z~VO_EcȴS+{3s/ ",@IOrGl]4$#ԀյVyEL[F|"4x5['69=0CM w32X$;t2٠Pf`V4v8;Q|4Tσu#x<; zT,R=lVDTJ 3c8ĉsËS"(J %~d"oZYN>PWEuDGPT)5ѭ\U XVw V rڱg׊uXB%΄Yl,5p ,LŨDS4Đ.aBK26uRP +<aWwBs?+VGyOu$}z!Bɂ;=)q(ߦ/t "Gz(aY/r= #t8IN !{VqR+W 6sNᅴQ)#FӪ8khouխIOEf%ʦK;)@ {%Ώ_t? (4mLUU1gFs^x=h]eռ68 %1|hhoO,bw{G"MVA~Fʁ"wg'ͮC/ieRvٟ>PJr5PmOc(tC!͋̎YT"*K KY299Ir.F}᠁=.TJ8A0 g$`ɨٔIs;vC4r=Wf9ڒ;GfRr)թ,u~S̴I@#!'{pxu4jngu7u9JmI\fh4:q? .< Ҵk1tJ'-xȶDXc&jG8fyY.olUӸ J_\ 񌏏TjlB;xwum?FV#OnRbzH^]v5F܇?.?6oDBG76 Pmm,ZBl#oxPtY-;u:m6t,K3d (3 4/8UY^|nϵW Z(w{F;tYw AZQ:\H\#ITh*M$k?(l_w3& 'ϰR p )L|wQeJQG,K wn+ϟ&#* W,PfN1wಂ374B9 黒 TI^2Zz̘cr_!==Ox] @ E+n&8b.﫴* `FPQ"q`͎p~*+?lM#6+3 ^Aۚiw\=q`O(,e{'1DyYnjw)"Q3]~'^teVHPHCo[A7u `2(ʡŌJfQRyrܼwmvX*7D:95x|LC= -!c/X1Y*K@3xZ49TV "8D"?bnԴ{0;b 6@ɊP%vn$48}nK-0++Hȓ:Z LK$0lwpw d{+O! Wp=xܮ{!^3=wHK<&_[-Fϸ1GCs TX xMSa|EVoSk8"In66Ǚ+I*UoX, c =Y|6h!m`:$ulX·Dg"J8Y[>PU'=rcNitR{j8􊊪F(d+pQb*l~59NQv}aP:F7ػ"wf WvU,菓d<Β;*6A IFcr "N vr  '/bP2QRo)T+yfmr.P NYkߥz[ 6ʖ uab~s'< ZL}#8g'Y$Srhtn[W^ 2t`dIBkY9ڐ6?/x#E;YDA\M|koh N~7y@J`d_z8*zh؃΍ݵC_=ׅDMY|h:]W t؇k`p1y~᳻ ^$0|/bȦ ?e@1ѥe lt4 fCľX5I_c|invxEaP|3e4z'>BlƁ=ez?RSM  ]c⣌xc 0?& 6?͘7J;u3N0pΏ3yW] U H.oƇֽP%Hk헾!v%ajj`I87c2@L,;vѱ7*7Ue ;Cਫ਼X";>As[n_ Xx#ԏ.ea5Z L,8{*G~V/d0HZ&'.O=|L[e )KC` m92`ՀהʒAQyK[0cіJq/o[;iT{w}>r@Dt37 ]*<7` Cʬ 8R#x|&_Wt7=_̫Jzx+hv lZK<,Ծ4ܓ="_9ZR\By;+1-R/b]!<}bHG/D}Uo\V@'=QWh5-St^4Oq:z9_:eQco:DsO𶿣*r"g~ eҧzBe&Q "aK] ߻?IZڻp}3yy< U?-24_+:MTP\ZL6(@:F6óWq<#_?BSZG<WzzYf|^8o(͓aWŚ8d>u_s^ .5?)7~F!aKHΟZiVFA(>?+{ҵI6~"hm 7|*c!nIhf]sjaHUVJ lX;jnV: :?+ZX(>~7S"-J3pAB/E'%߉#oo_uQ Yė [`YyNV %?ʻz|08,{~׆f!LܔQ,(f2+2O {IAjE(k eD sZ Y98>蝊7j4XE&#5Y*շ[AOsud ;sXÝ72"7zY<͍)XpS-x7ѻNRaQ}&xG_([[B@ER'[V[TRXwEVOa%Fnh! PАg㝖yA*y6"ZbNnsy`ӌ{${.r$I_tQgc An9xw~"hű`0-22)Hn+SR0f6KEZqܘ"Tz] l"ʝ( yڮlkS3s8z3\ZS<컄Wmkׅ_&^^Lی /2)3!ң"'y M'94p26"]n Ry kʗ%x/o9;c|EPY+R;8\X{}C:bqyt|%uzApW@-[ o#A'}Z+{L|P+jt=Y#N <(8ye%v831#ZCc- n,^ӾtV: r A_Xe.%3%C3 @ jӑڑybDo+1ў%*ֻŒ ?.v /vG5 qy6-\q- a0'*pRv$O8b*2<|:ӡI;iZ$vI-)}\VGbDUꗽXS"LH!hّZ7(";v?\kh?>"iEYo@~#K~u̿_uZtޕr|6'()z[a: bpL9pg"w"AyƲY4e~3 96H>#ҐЙX< O/ӾT3ڼַ1 OϖsqБLzN aR?4KgBb^r)P~/Ve ǃzr?A¸(Vԕd9L/K f})Zd"ݻxA`CIV{ZM$|#x>XGy}o%7 G{|* DC1,:g@ޟScA@aP3W\/3SS &IrgV&-6!&^&D+1?y-u"4Jns ]+c:[I ϛHz2/5ΌhVU-}]E/ڰ##~OֲQE&}P07Ef#i[m$\9;@DtEȆ4vU?H#=`w@-dL% f7mdAPաȩnĈ}$` Tɯ&X/#t{p̝&" *|YHK5Dfp58ݱ[l!DYZJ0ߟ+.H BDmKZ3KԢ=^⌋2(upG*}Ȫr@1 @߷"cSlܟz R$BZ{?  1& dݝ<8UVc/&D\.$6WtI'?)S̀e}[|*/gF`HhM"tLގY0W^kfA|cvt8P|fyL6MFN/w/!` V|z3X\jfWi]j & ag,N&\=E_WiB]sU=쐅' ˩aHXJ@k"E' 7UvIs=HRU=:—@>'(!BFn9oYѱ?xk0넫b D)GEC'䏗m1X-IFdNeI:"s`\1 nhx Im:BjARb'R/P/,ڨznܧHfDbX0 Bfa7BJ.5 䩠6G{sbDk,"*,ma(ǣ !?> ںzBۣ3'Ev e42˿R'Y!ۿJW`*ܵZH'za얼~XnM'qdHѧvĊa<2شx֞-G+ZuK9WYtn*^^dR4TVxWMK(bkʪUTB]֛1 {[XGfIb}q NȜ*h A5BGdM~g $+Ci&y#fKS3/tWӆV |GҪćH2KuQ^0oC馧9*VxQ[dU?$TB6U)rl%{|wc Kt-{ =X+ ~I{aTNvm5E}c8k躆B[aXAY$o£nM&;@ݛ\o=ŇSNz`}#u9Z wn̋(c'Joؗ`':Z+scw+fj8*kzuN_iPW<@xya >՗YДQ0]V C%>q7.}g~&V1CGfS&rC_a/Q:p0ӵ4_k zܹH5lMq4g>tXWMr'{0i*(k=uV(wuPL,D$}{B|XSrElHL~gh" pVQ _lS'i)4ͤp˺ӝxDc=N*+1܋MTr>c7O./иe/(>;zX&a#}UT_ mx0H{b#nZjO6Aٔbx "hc}̂3R̟**Fs{s>S#ĕ5ˆJDŁ( NJ>e1 J#JH˪w*UG)XaȍOIqG-rv0zVw#(\]G=m}]&8kG}\jK_3+Oڙ~ ]̺Z6]h!M,[W c6ߐ8rEKvI^.ͨ`g֪F0ME0U/Z#C'hu['[P4*-h78ŒKK#5Nux 9+@B#UL JOBn⁊ㆌgͩp :f@ s4Te4MғK[{CG `8X?niruw+(!hqߩ3(YE1E0yEH䭭kC%4"2K<2[;{Q$Ͷ,ms;Ne I.x`lD۳,xa٬-5"DIi @ٴ@Zp\T3kN +৹Z E(G"߾ʘ: QT ,>&^p:͵l$'a0Bb1ob+06}Fqx0vj)V@d(!)ض-! lh_f7!kU < Q.FŜ?2}~l7[)Y7:Y%j4ls .p%E%OR5 BrcNYe0:!Poɹ+C\h f'=}Z#vx0^YqSd81J"!i/73=-3f0' zQ|{]k I+`OJF wE;T%y#cXuMbo}|`OxGFߟ PhczwI!AGM p/l#}Y+?RlOϺJP#3"&P4rۺV,61Ժ{hC Ro1?E!Ԝ(S,D?Ɇ%b2O9x_M.llN @%sJ6͡wxUZؤ|ޭW1#?SDƾ,xvxMBŽs:.*Q/hsLe?8\2Ȫjs?`\&seF2e젧Y =lC>Sb69)#&^P@GN{+^8p@-9p#\QmO|@ `+0v ev͓=%)$TUO\{E&6t}hZ71kMA 0`o0 ¹q~uGjEAr0 sͫ8S>#- \z/iw! W̕ԣMm!m Gr5~ir?5>#'@->ƿAM}05-u1 A[Gy"ʯZQԋAt)KY0c@ʦ[e i#GNmAKvNЈPp4? iOlfe⊟X%Hn$pD9>!¦XT9B:u{pIi,*j|I!vJbO]_CnOaSRA_|< ޳cPh%z9hcl:Jm%Ov- 5J"W. ^73!NX_x"~PS [kˊ8(/ZQn)>  0."#7Ŵ@>!BK=*U /6,dB'1:!p]oT Kmf*ɖϰ@#VM!4rf+}uG}DAjRj)}ۑPIhn5U9lv &=UkG#,Rp6ϠOyC[M;+nPmP|132 O˅] jkd@h9g ЙG! a>%g2f}tkjs>HYmEN[e(1?Wgp|.L\R+{0 3 AcC{o2!CL /qg% [b+?ycsm К";-X2H̶ٜcg4' v`5q3YR @c.fB+}ߴg9ynjHMyD+G{.O/{^K^f"tM/vn0LVvC6"6aPʖ[~=mMKj 9ExkϫNdGМ)Be~p s]}B>n[lI zrwJ2g9$"#BsX2XN΅rI|cOrGo*o*-/ PQGe\~Ο{;4]7RR8{~RyJcPzR\Q)?1vzSnP&k'? ̜Vnu\u["<'dY?6 H y~~ 1l"`mbdX#\.6 vwͺ3&i¹vTxWԔ )x[@"L !m}ڹ1L̴p G0`;Ng? 9\6J(e{Yˆؤ1:gl0-3;seD1K򗬍NNtymo\Y]ŭ)j7V/[Q>$7m gUPI;P [pO>̺V¦fs@x[ 9\1m~8tk/$ҜG-ѦSޅC{C] ⒆o~?A^Q%'+Bo'[ShCM-8sPSu[OtƣsTTdLLX77@U>ĭx٬{Pcyvqq6%  9LW/ԅhZEUI1}W}ubh41Q]礂iKcSПvY"ДmIWl!0r%`0B,pgH'XR84:_?>c C?NvqJz)t?8lu/&px?ވ{]? %d{}|<`c0@֐G c*{Dr0`C?cѯv inwċ~ex@eh!!>u$8`i>{/Ywk;d! _[U>s"֓twy>,OѬ<4c18W>L? OSސbԙg|$b443_6zgOW 9k XzaWĖC3o+G;;h8*x]qëwm$?Tu֢INf?}%DA Wl)A}&ݞlC1/j?h1)3~(Zq4x_g_PFu-o1Zf;; '!9i9.E ڊo_ͦbDv׸I(.aF!HNHdxU3IۣNg  D|Ru[P Rw/ $vgnG Cc%DK)AbSZ-]  ՜'?,4oRL[&]k-qKA,v =!7m_"uɽ,0sț.ng UT1X[jKy;H^>"q\81/SvQ,uIIyΚ  L' 4~^M;ʇ.%W *90Xb(z7~GmUpT5l Iʫ"CЍF } Ȓ4bc{6}{:6ho;KcPڌ\6oc";RpH3]:4)ihe<#Iy(u]D><$w+YhA!~hWMo9^ު g0 6PhNK-v.JF<$۲8$=%# (y OJ81ũ%Mmcw/+KegY̐I, ⺩Pf?W_y؟A?3P<ʧmN,gIIr$}d2L̞W߼ p*ԟS|57{g7av{]HQ{y˺Rgʜ>Q6pc/3j[BZgrHM |`*IάЈaަD&ѱ௙T O>rm&zK=6S;[ ~UH/'lI#ƷzCdRag)0. nC`ii85yΧn*bIXZA_G~e>t &bW{7pg<:H\(HچUSֺCMp`dV46#cidǞ_>?idᮃAoU]체چd&3!Q猹T\JF3'Z5vc,sYu(,28)6FPvh@VKz7_2rv"ҧtגF/-N!!uJv$ݏP x|Nf>wxME`L$T.|ZLTdHE@MHdDkoKͨoߍ/g1Aq{} -gy5L Ny;ըU[l&$F %5C\ ag<f![v8+p8cK JGPjs{um$L<pv w־7\0ӳPkZU?gBxޡP>3k!rG(Y\=.pLS L]DYHAwcw VT]6 [d8#dQVWE5 ?6^wcMr?b -oFloAQX 5sy!:;b2YE 턏䀑{vLoWwNLGHK}p(*PGOA6Y1]N6j\)$b Ot1:vukveI[2SʻezXtdZ37h⌅-ޅ .R ZB~ ī].iMs ^{]! v69:g{zZɲH ZrէW b#J<2 0G!C,V 0pu\hRE1Xx% B|#ԗZ"(EFvPD[ZI< Q*vD> [wDBmb_5ْUVydII]JE;x9V A%Hq'J"d)7t9]8_FUTGٱC͂1-a^?*HEC"/M|II]y0P ww~mѣW<QSR l\INFJ[?rsjΫޫ6w -A>]"i GM Hx 7q`N@K1PZpVo >Ck'J,f'9|#'S|.Sb1 (<~;) fZ$Cb:.FPmvj΂uu]3r Oi8}{1L1-SPOk.ITԼEj__(vi#!^i{7NaO]cHe3X 8Zl}qW.WT} X&w<Х;߮KYI5{Xׁ| txqoԁ6qrg$H"RGwYZm]s s{MޠaϠ^êz_#7ak$󴉈JwyrAXrLvJB wq_{fDu6dGk2ŹEfcƖ fC/Sjj閌+S}RXvhR7\v`t-fG~ؖE!r껅\6Rxp :oEzGF)zRC|L hlRB2̊'Kv <s(6`6?hH$rXם[DJܪ jӪ|6PKA[z$rz^xZ,OxE4^qڵr; "Kr ZNa0ή"T{~l /@N/)i+0$`)Um_ɃJlw .b41R07طN]Ž@Q E+"@)<hQQqY1"D;_]3c ;\cbq_w{Rp7JDֈꦹ7eH5F$Ě b̸3#ώ(<>ȼtOT+)1†.VvESUjWeǎ =*ʿyM!Z$*CD)`0}C ͞`Nh) Xеdgwlj VD/<-qoy=}FyHV[aq H"dOur4_ㄛ y'F(9TRc:#BOoUTƭ[@ 9@.pUԀ)+AZ\Jh푃mzN6K%_SOgaA86K VUFsE\)U7Zzp*~2LYZGH4}MKP!a2P {|sES#!NJ,'Yg-[0t KG3TcG3 َ۟9OK#4S,J/XkC[wR&&]_~.w``UQ4cgn1˞7Ҳ#2-pmgg|涴jF@ޱ7%`צ囖 /;@R"uވxDs4.h^iH` :pj`mm*儿^=1)w|L[?KsKqa9%7}k J~X;3wp2/BA[f(L &d(m]_L%yJ 4$ R˛!`5=o }WMݯ꿑咽Ԅ>E,xaӷU%,T(L!=ŗ FzIrzƿNDdX& `iL.q˓v;<`c%ơ3+Y / yf H2ՔOi&Զ ԠҴ?iwZYF+H%QazN+SW[ ysse&8KAV4 E{6La`;APЯ$l'?V2PZG;GNrB(+^.Ir#7n^$lGMﹲe)DMw&AƳ!av4r[ DDsD t=d4%H=b囼VA<y,j{Ё5O>զR1>6Ю/#=W;JߙYնh:T>]L)}& 87Zt={y;{wK匮%sbW., ]a&~ɥP /2Gְ0km) mófNj rXd )IΥ g|2uN3!QvOnwI(six,U}7P7BwåU1.#܅qUW<y%4بZ$i5l9#K$HUl?}̇%yۓ9;\!SS$T!NKureÔh|Sǯ;rOԵYC/?C gkҀW6b#d 0uKIPS?vMpAE+F;t# ctR)xyN.UyH~4":` dk{`UК6O*fQ)Z[0'n8*Q‘ی}wʉgsULyotUAuapH0oKp ع,ug[XcXNx~_EN>葁|s؂< MOi_;9`e @;OeVĂB{rKܢAjٽ4}"DVSrȟI/3fUd+vV/Oѭ~3? p1,H>f7"s nYw_=R=ӁKF`?[+--^ȏ^|2j:}5ql(". |l,`zUOPIG"6O6p೤ XG)U;~^8Hr?QwrRqjzbV (T k %8Y'ϖ谅vksð1k.% lqTC^:rV%U98J2 f[+y5C 7 ]QT _oO3]z~Ͻdl+u/yB蕯5sl]';ҭJ0 ~~^l]lO/y,p j#Tvb #×=G[wwLļ. VKtTOހ}$elHӓH퐤N2e=Wvpn'_%WD8@Nfmȉ18Vz,l,z\eטp#>%+щdkܸG`c0/? |qݜJL}x&[2lҊ (y4s!@0*xF҅y;㑑gMM=2ȏ4X\"cI%U|̄&ޕ3)چ̋B(qGDB#Y-.&`2 6InV] v$ ҕAA{) $^o]S g{3 wJ>'sa5S/I siSwk4cbY2|EC.@%!@?Hyq*spAH\F?BQg2:&` wxxvy]&9cUPd+Li0*é| 5  B1714fy3MuT{UĮ@ ]!>G;f)Bux;p#)ɝ" `L #z?l[JnY2kC+䕫SDUXhH/#, C1q#*kĜ07{j}lƫ+JS.ľI=߫~VǗmz{a2)NZSoPOL|4`!5td3lJ6 eB*5-Bn3]0'! \5^8Wj=0Y'jFYug1e6VG]GT`1;6[\2E $&~C`/-m;QS-^Y Xfpb^>y;Sx?6:Tr)Ů͟ĄSQ} NaW5$bAb]̃hKiל'V1;)T쮠DI#K/}C~==znK!\⬾+rk<,C$|ԩkU]W2.7X#7߽^p'MiE`z"ڏ3ߦLSYTSٗ E'DKNx'(zbkqiyl?/xfja7/ g|M8l h }jXj=vϥ{fo=CN 㸣o}#'_ vH@le)%`\%H`8~MkvPx 553kz< ޗ>q箟F)=64YeaqSx@RqS=01sDêRSO>EܕTA}~;1%z:N>tŐ JPSP˷. .~p(֫uJ6~yIHHy |Ѳ"Q]rXwoW FSX3q兴zЊǞv քݽ#99?Ɋ6ЕI(Q>D=\D{}ljszec1E8B(/RxUlc1-fPLnJg\]%$Kb G\~!j#ITy[SOgguFe3k PP'sߞl{DxJ=l.=Upz4ބ%ܧ{攺h 畜2\@r%D:wLaVq]({wqx! }$U)?JV& 'Ih`yQ B= |t3ax/pQ1 brbX[^C*Ϊ6VK}g"\l#L`zs)#j$NQ n"  A̡@nd3v/]G?@u_g|Lk!]RKvg3cE)_{7&O+#Xk4@#d}ja0i\=,!5Y m7am',72$cB}.[zt:[x;8*<^\vف}Z|oawEm]Hi'4 e}6c1Uԉ-aꪓ5vS<;f2ʄü*c' ͱ-շ+t+8TFxm \g"; epp?;IE%G\-ᆴ#YSwDr b-B=byv '~xT!@W^n>IZ`מ2xSڹT9O4 B}œgw'5N#!\K7pkMF/rɡqC9ۉRc_[mI7LQ)u }:`ߩ>)j ̨=0%=i.4jq-f\8D4%&j9}f`ޞLz:qy : #u¸BK:2 7Om8ÊuegoA4w!MI~AG8%;`I}ND<]*Z{tp遤g_ܿhf_ 3U3e ݅`з?:ZMVk0.kG.ő&tvIYk5:όgҗ0hI0y50?Ū{3 6S. HmBH O> /9@ݯcE콥.kzI dߍ!-*UTȸ2$& ACIϰNs[R`7fr6RUjo16.+eƬVnbeF^g1Hk*KN AFDW%t= Y%ՃӘϿ7TS(4*|mPl1mָneO=' 1;rkS?tͤ(:?w6vC?Jx6F.\(;9$%zw1m(;qͅD ʜ<q[I9{'[1٩FZɠvCnqE K^kD?4M㮾aD^swqYrͮ p `60g0%Z፧, O8q`BuEGij2\oJŏD~5PNyxKEƒ߯4>/> GRPxm7֮U4>!ˉzR >*g+A3W ɮlYJdh]fȹtHQy~zRS<&Mb WnC*.up+ $\%;yU>lzd]r-5̳<֞ -Y5L2u*J~^Vvka6qR >\G >( ?>{믵s(@".jaERelP^,o2 򜹺bX+78Ac1/s*HFIښ"X2ӶWĨּO_Blm0Q)w[_Iq#TF MU@8G>SȠEI(ݏO l,jMssf[?]wޞ|-h,`=ݸtUB` ǒbMtY%%ڏMVѓ)}ݩKYc,Պ\Vr|WO0<-A778+h@'ؖIm%M@(SȗSz8TVkA8dA'Y? 8o5*reXмR~Y(ZB.P}6@n҈yZo|ؚϨ-F:BS>S/i;q;Ϝ'oen[3KGBʜ"`3nq NVJ0hKױQD6*CB;VԞz0`n NYB7kFBYfyPvN!k63ɣXVUG:1ŤF-_-YNyIK  x^ǧzP(9z^ { `=6f t:BޒBڜ)da E uՉD˭jcdN-tΰ^}&NśQ7an\Sl䵗0IbFGܸCCEAڒrXSwNpiF뢃{ Z]|o9 WpC0"Ke)!A*n^r5t֚J?6mov4 m+pX:<4-US"˰h\0w?|y6Pn:hH?Rq"a!g\g)bs.#NzFsTyR:'G'"cxhUf0:pw&%ZgVu_0oGУ/7N_fNBFD@qϷw =b*4Yϟ/~y~̑Z oV^e{;b[#ڞyJW;Q`4J!j^ ӵjʜ^M "*޹jyT!ժJeKĸ^Y : u) pG5(y*M瘥RRqKo2hoYdr ۚ ۨ-=sj݅ n#dz:NퟦkTNX[6 &Kmf LepRС"+Z19Ůr}п3Des;ЦsedY&H+leaGM~~vY~>uCyŠ*j O}0>Pdٱc=¨Q, MSt#-ϮaMnV{ @8j?[̃'. er|թNJnkq:@J|+> m,rMp:zX^;sO:{Y)F_@lq3y Z \OYOEb5&$Ri嶨[ MQa8n`А. ;>T_J}wѕ+TOpMe$ג֫CxPi̥&-n?;].|:3~cᆗJoاf`IʿC|0ɂnP"-dQgi<]| >yb=wG>BIop϶Y%_T!idv{w3 ,e:1W8Gp"pL.>,}5mVƞ@M +nndӈ51/<*h΃k!'Fȵ2爫}Ǯ%x/V# JZF9[#`0[e#WI{`tVru(5 4n>@}b;'¡9ܛA\/BN7V~j;Kbm8_P$ ZA.<\)FsfY/s^LrW $*2t!$lj a6wiCG' o ZGdg? 5?I*yRG|X_wNҞwV4AI`hv~cb*PW- ^)+eoV:RzhrvjPdYcz$'1M=u06>jSN?:|)0KZײj59 ]]DL 6zMB*nӘIUĔ 'd.3)eȓioۍ; 'Qs! q3 ԰ ˟Hjn1%˚dcIGOQ~дޙ]u/V/]^#{61m@)wCtxo#eJgzFXwZ/RA*;8URC 0'>US3"x],:uq,SVrtp"T9- 0n!Wh!*ոXl/\`Zb:\!Mm|vEvO~wӰs`ohc?a2 A*Ug[I6 j};JeEStBjB %{ue> |Y56SrE]44T." 68U&F%Ž^ziBScxP%ȹu5dw:f9ha exYY;ӟЯ  eAd$)oUZC=9@c'JTyT^&n6c:2zcԣ !))lر`鉇5 J+0ZQ㹢k2uˌ"%]llD뜦Ou6WR@vS4g"Q$nwvCI,Ĕ)]LLD,Aa|jޘ&beЈ-jH-`$Q ^1amCTq?3i|@rckɆd}iXuqr?Jܙ svKpc7.V0E#6#l[ Cv'c1~ӔJt4u0!NaM#ꗯȌwu,j^BٳZ57܋t7GId k+'g,IV-o"b+tRMg,j"fRVd  GȰg"ịM`vMt;k:%d{GYxR[#-C /5+D<r3z)AI7D~Rhfx2R d/.sn8HW#2@,.{JY>=Bb sWђ==w2YC|pɛ:àPJ9\6x^a@bݼ"dљ"WlX,@JF=&W)n -~,*=/Pg%?F'Oi&.ԉk6iD FI&kiz)'ڵQ;ґc#KKy$&)<6Dmⳣl10J@U=ؿRy)(g4ϱeUc>HCn.'—H({I 8>b'ѤR\Qn p1ռ "@uX~Sqd/ofbzEhsv~"ᛷ _ So]8[)C8w=l1>MȸMcUM 7iPa@E9z&M mf=Ϲzt9<ޔ9mh4.E͡M2Nv$E$Rb ErՁvFC*w?͠}#{WVX_C#&<|0[5S1K PR(־LN~7i~x` ׽\,O9d>l 5:\Զac @p+$<>wTPmԢwK!9pPXaQPUvL`Әޕ)&|s溣x q2kHMҠj $@Bh+=_yo->z(]SQ"08Pz_uI@ۅ-ENGdF($s?v$3۠) @pCEB-4Z1H-LXZ)g{Y:kk4`2K[m0 _ksb%Q)dϹ 3!$Q׺hUD]1TNdP !rL%032z2%s1vT&*KeE?yZCF Y87 _# DlogN@jȍI~m%Nȋ#!K۝š77(͹yA=&B|lk'e[Ev1b)HG$~ &4 hH' mkKGJfm=g@] G*rGזPv7r.q`>/{jl#R}[g Q!lY%oWQS˳R۪xȊV7aB8iaa|3"]Kl=o"}NV'5BIL բ_%7ġ@*#*h]OZ bk|:*Fgv + ]@iIti+Tg{۽8ԗǙʊbXMPMř|&&A a>Hr\ xd%ꋣ W*ˆDh\֣wA(?Y}PV_偻tڂ-G'Q]&u_FdOs5UU1sg#<(1?,Fe9E_MS !&}# s+[T>%N4șUU|+_gU'"H Dr u"%<z^ j|seCL(B6?i؁ ֏ID_./>6ߵ*ChR-PIm˩8< Lp-) tB1d ĥN;cy_IҪ<^!kA ey 6ֿ_!пynr@PB/RYA~L`[`dcZ*:,ˈY)HXPlPPVx!G_Q gt\~b `mAŬ?QSdV ooQ_&ߣf6Â?`<8Jz&,KXxúcUV& 2Ëo*V}14[< dұS Ko 'Sde )Wm$K `}bGd2`47nSgC;!LJs8KeqG8[9;7#bCuCuX]DM1{A6Q˪҈Uds[SCp@P V!3}/~[LızHU$V4.&<';[G}܏ O66) S|Ck:]b"twLNvhӂJjVyWT+VvO^O@&WI _DQo7Lj !񀢸\SEPgҔ7MѴI#~6L{\5Pi#gTέF `# L8<̻i5$g.YCB' ǿz_E;tJSisoNjoYs\Xx(9=xܠ6:㫳a}8qazb=|;p/+:м@bVz1/*gFuƢm "2߫7x;t2@ڶQ.Zk#s|X<8;wC]2%97 Z"?f?G;0VJ* ϥpYsTu>dd1Y ˩UX|?ZOiI(~]uuȨ]ʂ)/K4Fupxz'QT, [$B|w5 a{\|$}Y#ł4'E swr&6=rX>ȹCsJ}ۍ+*W0"$q:<a3 _+nϚiMΦ뎤> ʽteu7'j:U@f&o"sJȱ$#آeJb(=Iڜ ȕPc<%& NJ֪ƹ/m2ͻgeFDYpL+UJ#ȅ-ml\F2WU)RZ݈Kh ;.-WyTcF+wwiʤH`SdL$S)ukFueW N#uvtot`r JeoCDC`^|`BYT_gI7$慩\@|U\,['V:p e 1nxfUT?`+e~}?ޑP_Έ&/PMt6EICᚃ@y>r=_DyCL?9mvO@4vfh%^R.Y=SUG7'yy?-[At47Yxʫ`=OFcHo)z3.hT?lK+yMU.3dfomy>$'#%"$pXmhĄ[bKz+b,j~bWŤ/rڐ9yf3+.C Hηo" Cy Y  "Q+Ë?jy/:,y.z]#EIC|8h-$pf<kOړE6 vVgqƫmX&y,xMHabEF2л n A8)jۦgj5L8 0 r(YiF-}b 1l(nb<_4ej_]XOUUSEP*4WIPќu?/MJbW6='ur]boF;5WāRG( Q%Ȇsny>]?nb?kƬkAi18 r^ 5]aV`|E(S0GA>ZA=ou*WgU'b mdanj ?NEC!\.$PTL.hћ"tOC\ʱL4⾿Dt ZNȰ?YبhR+Kw5:rVT OLyJ?D_B #.Kd[I৉Ƭ]jr՟kc~SW#e"ѝb2x5p׈:8>v9 ":4`(J=2rمLϟ*3"seH*{ h$F!N=q;Ǿ?pϡGeD>$eQ(^V&?-x]gQO j m0ris3yZl {nn<o=dMZcHqkGXi烧ոa1==7~$c IVw%+ &}Z+ H{%WZ!@DAUTQ8gޔ5wh*6RKvH*DFf2'oH`ܰK,bU](GxVũ%#3W9Y[doʼRpM}zSJiCNp6k'dec b_u62axX>a)i.xoG B&7P_sc^&;X!XkJDɃͺg=LMwwF{SlO)՝#Bp! Da=j bh!YR-˛ECdC/wL 9U ^ln9u Ao$h?کnẔR% 6R1C ;@'ԶӐ R_=Yolvpo[ѷɪv1(2EHWO&nSTjPmvT9 PĮJ2[?DҠ~n9O3d6'$N \Ze .qN@}qX5,}[)@G_i)# )7'>-@=qSD.;=@xaH6] xiϡCT#s&ᬒQ% v&x(mCBRFԷۇ/Ռ "U6_T$MmLMBK2mc7kpd43 i1"|c`A1٪N{cOAhJӦV7Tx.Ep1'c#Ci3)l s7"ިiR?]lװd7dn,\M_L+u.=jSli"zVIGKۊ5(#;lDnv2t&6beo®%e8FhWL!XΟ4Kvƨ@\ʹOL%-$a9 k%էgQ23?ؕ)HtAY4N^6UP!s% bץvHD&NOtp1O?N7BUN4C3^©46 O8j`qYpz( ?t[0fc ex۞NE^o!yP>Y$ptrlC,,M:mٸBNrھ8l@*3zd8x7\.l4MB6H,Y!GJ"P&JF ҃6/'iJB*I]RSD%Th%J;=h lhǑ|"Vd +c(NWm^>:oK#k,۴5WJ,KxY}*p6W Ռzy~mY6Pv7НE0\+ReK`W.U(t_^5 :ZSi+d<,r?+S` `MZBDm +Z@޹'P?r{8|&'ڊd|i38}p1HNIC©<☽UBHimQŰ-VM@xHDS؉bUU<#}:b;R]k7 caן;ahB`T]-4b*)޿s0+6 j9CPojɗVBN4$װZ"2M(drVp]& ᰝ[To#: VIs| Ҏ v+Ӱ7kkt=LP9!{U°2%&^H`È.9cǭG`c+ s>-bvH076M7!ViQס!-6Zg{(f8%{l JZX8LYfVG.H7z(Ek9}` ewė?1?csA}ߡ2=J~;i>l3~PC2Jd~l^vYi!sDB(dKj\Xsm+Aj  {]~ˍod4PgEN fl~Qoe4 :+7.JԜFR+ :flcxiѝ+}#ֺL,BKQ4zZ 5#ϟZKOCS|Xt&OY05E@x ȴ7B/n׃ֿzCrQS)+75O PmBdu >@))bzG,[vJJN*! Ny4dN]yVUԽ̉5;<9f^72/mB]>$7P۫"s0oߘ A/X;ޒ/ոh|UP5R(6hl8giuz7Q!h#qs` Ewe}7Wj<#t2m#] ni|<#m ybt`L^x2LmDMb2Ghb ??@3K XTeʜ\ϼ`"h#݅*`Mfl C5OrB?zR\VUMzP?ӂ[\CQhƒT֢;j.Di4}Y hLF]k͞oN7b;h AWlhuiYB)BO:ini:oٳ硈nGAK(,C H)[Hv@%L!/K|2.6K,RI7RҹwXsM)%`C'fy(G v[Ffk>dːepIP؁S.BF;Ȃ`jl!#aGQeph((NtEm1 CJc&x hp=˕)ui7$Ȫ[q-d$Q4oΓRqKbYE*p='x-=^f XgĮKQ w^#1,4 7.qry OԿ%1"Z6y;5r{ms0TchihPʇB Hp_vz$i&'n `JkwW;fy=1QVłGFrS=+azP$ɏ㪉?6Foe"$?EM~8jӘ_dU7A3 /߬SeA%Kl2SOc'y7!SAEi/WgֆYA4}*r+䵢FŸ U&g=:a*kgCaR*v+$d|{VjxU_{Q+M= ˼ۤ %Hi98caD ;pEǑp`KPO97..3D:+ԼqF?lޢ[8yS 2vؽݳ'>s"_></Dd2AݪH 8颾O/y7c_0$A<@QA C¥dxGR戶 $S  6c.s@r/i{>rioTegAWAVWPYnVA7E֝: R$ 9]hR|ʘm+kdIrZO$N{ bnَKVidz*"$"=q7د3X^ѥ?6f8=|̀,h$O):M2\8 ՘(%uJbT p. Q 5 7e"(w}bz9Դž)%] vܥ4_O(Wj>X1oJ^L ,pOyUd{x@o@d^si _UZo}p#nŇS h+yq3 H OsCa\WCk4fxA|t]c,/sF'[@F^](|ǞLud+<,Ə>y9 Z9`~ |U~9 J1"7NtR| _}7carSž-Q;^֝.B?0"9jJoMu] z)*<=M܃3wL€9)uEB+E b\3Oj)ؖk],5ohץ LM.E4ۙr$kU y/Caҵ)v9okj*)G3gl 7FʈsD^GuY"}!SZX+^`7c@XuBwS⁥q#ݽޭ/^u,D@^N`ј}i Q#/LekQTIW+w] S8QY{AaoT>k[Tc'M5yuߓ=h–*e Zh!wB33c,}F΅&Jaxp1^Hz1,?/]FHOQiTq|ɉ 9o&Ͷ7Ff# Ge/8NEkARa@XwE',e_-.xǐu'fI(!uM3 JW;#VV]9v` \l9fFd2~Sʣ`Tpvefc$7'd d'}ՍQV:vP-Ia}j poJr8h1˅=H39vq [%svMz1;x >ҭ^}`ZU¨!Z8ɟ j/Ӭ>AK`pVz;f8L4Ti9Cډ U}L$9*@-6O,s:>#|F[r!rLk'=tCICәg8_Ǒ%Ecb n Āl$#w ڲ$V=~ g±D 0eyO]t,ϚMM R}O7gHpx8nkV$Hx#kmh';hԍ ?!&*#ȎeOY ,Qɞ8 b+^aig㰖-VuAij,EZDMdIo*ʶQM~rͧߏ[:xFdz+%X3&x ~:sZ)[gP¹~hr{^Ѕ(iē_jqeD8 u;q ϑ^'G>)q2'){p0=?(3IbxW2: !gyP2xPiS0 p7JrـߎfKf3GñkydcOC6Mcb7Y-GvE?S`/`Tmn~,RؗX_BOxnVBf 7Ȃ"?}j+!;R\_L~7ewyą[^ܠrtYB}\ͬPA~sϐ_{{מ, `})=G}ͧK 6EW%KZ :)y-cӏp=VXBLpL}i34bGj_먍2a߰<)<>q.z0yZ:`]R}vztL8Fn&.8QOUMDjzG;"&?@[g++Iv|v&+rۼ~yZnGFmk˺6jڗ٩D p]Lgd8>EHgh3m6]Z ,[ycO-A&K[}ݶK~؁Ýem  M}S"#sMSkzxzK&+] ?qnZO <.r@3Ž9yHdc<+t;RdgaHquMXK'0(jٌbz qW2BqF}i.Jr f ;(=iw{p*LJh#  p?9 4J&8݃ m-4`2bg2#~< /pM}u pF>UBicCz-lS أ0a:OV! |M1wȹ (@Ú+ai 9s6  ] r0 2cP_u3hD$0x8zE@o5*6#_EI5YYߛ Drz̻P>(!0xmCU q;HڕȜZ RP6čGkag,pm1ߖɞ:"flԻni?hf۽L_R"L9cyȍ3 kOo5Fxz ؐ\ 8H`œO9pPҬH^O Bǥp{)FuDI+#+Z #uۆ"Ć`Ĭ)6U T<`~icO}kn$_g1Cv3G&#XΣOG&Hˑ'm[5)F's0s-^{/v_ţZ)Yyl} pnҰEP;*ow{bz/xƔ֗4̼dƸ+"f< ƝU7GHE${E ~\a^yB5ZJ2A u$1><:9ˀwQNrI8`zB%Ԣ7\83@QJ)+Z~U$LL]\_itDЙQ'u2ΝWU3i3OvGa}d.?_obOݾu*Km2(VJFrKBZn54dP7pܬ,1(Tr M ̒bRcqd !`-x;? ުG*{w [,"wc C+h^ځ2zT>U f=4eP|ӝ6(jCa#5l q޽O$&1ڃ"vyfoZVIL ^HD1lނfϱ#XH|cyٞH9 +/<-q,ޡ+9PI\j&W:hS7oCobrEUe-`7v>HPoC$r#'koqHL 8 RlܠE$2=@wFq { #Fl2 K XM^z.aMEw|lm>S.S  QK[`k{|3DtMܫ+yݡٙE3*4$p kUް9ʘC5㔩GE֧V/»0WLn*k.]k$И-:9j0;OeHH#Ӕ7(%8!wHHޏ J:Gߡa׆K݋2>eFcDݑPzFa GA*'![ﹾ^KEsC?.J8 vFsvPe>=Lwq[HpK<4K(2y.ɓHw?|=TYHGrhzM:N7h"R>46Be,]wPsb\{QlfIûpBvxC,Mj~@oZT>w8b+h}K\a9;UY=z;0A:7aX-T \re0R7k 5o/2IkAiO K`][iLܽ61. ScONoW;(c7Tl$IG X lhx>rXZrӋkUzwS 3_q!*n!3凩 O paӍG4q$L JIJGo-OQ;g0{֭j: \Us~A6]F-εzis,KWL=ɥ5VZ@MrmwK%rL荃ay=v0pc.h{КLMD nI]7az.KsQ 6Zm5.7t6\C, ?&bȨC8q%Hވ$+ fVmj[l6g˽SD b.Z ^̊2p0^柾ٔ":Xb~fkܚǪނ= Df:_VծNu?83uN#rŃdvɃ!P+T\xq@8ʖFTCK\|V7 XkQ+'PS:tʈwk7NbT}mZ2k{ &OOD7&\NJ5W܊9N٢B%#9rGk ɥ)Q<{~&DayD'w\]ݤ3-2+c{eZw.B4eqeKg3t|^ /0Fّ$w\D̗єuqPQPR]b׍NK.6Ͼdd #oqH6ՆnFDOx,앁x $K*6ڥ˶ާ;H^f:h9ŵf0_B֧IFL!!S} 75alg\%i _"YDCfI¹=s;}7 uM )\ ֨aI&Y]DoOvQrsI!+>b/zgx;D·5h"w=N ~T\iw'z7Є$GSQat`vjV!o *(I~\ay0hA1sfJ3kM]@JwCQ1'f;C?˛ !Ud̳[l:̖.P9%1+ft@ز9LrlZ/He9IڕA1ОH2F20Ko z_'huHBP+}^e8:Cj "5waU{ ){؈u9wMR>& 6H'9 ěZ'ir P 4Ǎt/<<|mJ9ce aG*;uf#AQK':xx$.}~'!oX %?qK"?[ 1݇8!#Pw;B^>v :@#M̞mᇺF*1g2 >:R,w6m@7 gT580>/Gu͆d].49%QdG )av0a >"KǵE9qUZhVSUJt^ `|q2i atU#Ҝ'}U17QSAۖQHU~U\qc] M$EpiomdUTZ Jޤ>LG.9z<^xk^Cʏ`yl^ I&r6J5ΣK.LG>,>荈(mR0|yv2}g.H*pFV뀎6gel(ƾBh6R-sOk%g"pO] #vrzgcȔ{ P 1Aq', ϻ#ZF WbO>+5/!Uf~C};v=+wxAY'κ[ _鉕9[`w QxU0˜hh+R4s?o#<sAѪ Sk{ڛeԝ/ޟg-D(VBCOK\c+ibpiKP]t酆~V谊Tf&5/^s ϣ9v2ɫ5`EF<-, FMTf{Rlݴ !"%«L(4Qy3#[٤ >0i*:ÀNl%2I'591@Z"mD\ybQ8`.I)) JC]a,/isn]A+HIz,̆nW {@S 4 -%^WbS~,{pk2eX cDPLq1\YҮIA)s}Ih( KO_gnk7T/oZCi& ~sNIo(Xa88e I[?PBor 6gx+$U$˻ Wrgјfw~+fJ!E t4漢"qJ;3Wm҅@I97(ksk {+>F) k3]&17 FEڡ A5$PNo#÷[{dj+>K ] 1FǶ/ACӃ~ZjN J @Vv{7o T}McUFOt)"(==|U &K Sq\ V{QxWft*ylE#EGl,u,]6(gtPeK3(RP4  zKڅ݄$dLf::ɂi3epv47vqZa0s`ɛt$ Ě8PI->x =˓Ϛ[EHL?j\vUV"EpEIk& Fz, m^SnB2S <7I#e;l(ZOʈBKZ j$ ukݳ݉`@jA&ܔu9ne@)94%*^Av]rg"PK\VӀhmo<[ ?Ӽ)@>_w.Hx35t6H aFdr9Mh4. bq<&&3܆&QV [h:h?R5Wj?3<_jda{벬Yz64?U pu^-x-BNM~сWLaƚ2L bG칛D{IPS+3zC^Z9hmɻsbt&SYw<d8l{aery).)#bBF6E{B=el{X~j+mˎiwj7_el2tŤ+=<2APstx_+bdO ;S@z-! )cuU%B܁< x7>+ˍĊ5 ۮ@z?4n| {:TPZ8L"~u@9E9v+ZpTU {ټ6j%I\ϲ ű&\; =5N}pSd[f> TE=QzOُDts +ʆklH3B?gkˤS}rWǛŽvmF dCs*ل;GJۚZ\4JSÛYL-)N ed/GIpQn>ʫϹ )Z2HX'o~FK$4AhU SDz Ga~$I| wD[ s_WY"{ժE:?HoCN?L+o?W(5X)* p5 )L , q=PbVQxz+G3YYRNk8g酘,Nh8ff:TvMtv53 p@{\I51ʷ|s)f;H'.|rn풙,gy/L v#1 ]<<"4^a VUBg=HN.'*nː]s:t)CK _#Qѐn2HstA3\>ruq݋źQ+e>Y%zz\ݑ3O/`DV^e}.{聭7EdOl*[P/|4@{|vӆ!(jauGzKF/d_f 8knsP WwР@9M ~BrTeZXB`M?]ۖrJcCN,V<0RB}{M')Z}{ x=jD? ꦓG]r񿣈F/E*Ղ;H?)pAm(o4F`%ih1]η`SRwԸ$훆Oz1z Z cʶ獶ՂX0^ F'S񢶇bBVҞy E1Nt.ޑ/riCM|֦k_NQ %HTnhJXmiig8P Q-U h؞6Nk`&3N A79HXmSR+AtGZԎIJ@ a*xY ,,J}C5h3m|3ŠmK$t⭞t wfۚCMRaEUS&2r iTBK ٷg.&b$rΐYOBJOI`QE-uG%rcRٰ9'WR E.3gЯI)|),3S ˚:1bÈ0 0ܧ=`8cqRĺy9QE|5K8g~Z>*Ex03"6'DO "X%[Ų a6s @qFptCH!?,u?W\sƗ`WLSdM_ )FVg_Osqa@I𺥕9l;pPOH#A')9}^ ȳp]( %yN OE+b[!sSj2Ka4xoUb`t،lU6#"aI4 -7ܔ$><#Ξ Ghu.\=.ߜ9Idu$V LבGDdriǸno4("LPni3<?.ʈbb-c Q^b%Y} 81AsNh)o8%}!4;@B.YrQX! RLݬn:伶 Z\(r%g!I).R__2񜶀n8f'ljXtXWdS]%$1E:8@}ifqYj0 E>PިbDQGҗ r^f=.6t:q*tp|1|V8ޫC׾Gp_CFɶ>iG1i=uCcg8oɜ/:~q2D)j+ok./ģ^ev`VX/^o 5HonqM>ImɐL].|M3yO䒱Sӓd6Ca)vز[NKhUm QFJ2(%Iy6o>Э[AZ/,QvY@_"ȹu*̶5y W:ǽF6w>7_#74/'ߩDXLS2)rOOMWX\d^xs hIP&mRbc/Fʯ>)=Ie#TeXGowț-t@JO@ݔ-"B9[^KxoTA4F OnURQٺ!8)vM.!25#1uK"1V +1qܱ'yYq"C޽9,΃MMbk/NRYVa h"ya*̜vC_4\/b[]sSؙDQV;ђjbsz |ibYX&/![hzu`'btCԊ3ZY Yu`I{a2B@dFO{1 }^_(nހϿ= Q|,:j luF[ c[Lhᩱ+?X6$YdћKv3mHrH$}bq:r6*2W+Y+kka32tS0q"H.x!sKQRo٭׆(ƕoưe yLvf"4weby9VhE!޸bP\nx|=v R>}uBR;)=IU)˕jW@=U.tKE%K¢;u|/OeH"j_kE>CNW\o,͑,/FZ $KVsJ,#_>z|޿_U D]Ut23l |3d"cΊK9Kf^\FJXxdjCkjoB%þ"8y.qet7NeIyӳ Ty|vJCeu 305IAAS*M%{V4ߺi1iՉ8O:?񧓯D1|~H6'[}@jG-@jKBG( atCZ pF;7oXs ;@OkBy=ӠZ]@EUQTH'PXɬ6f4#nԅx%KLSA[ub|0^So}cF)X`(6U{rM Ci cd͏4!8hה01oY _i;50woL+z:3վ. a[KY=qQj^]:\jbb~~#"+~Q)/c"=50!XAG7mOh>(W:L[+[j+J W?. M@QpfJ0$0(Y{@|`ԓE}|+B {sQykYf绿zmLڋ82KRֱUӆ4~;mQ=_'@qݳӚ$-\H5n>;:NI"=DwJ 7Q?`2-~%0Du^wwbguc";JUVh6k:*t)W+ Ңz?-> +IK4VUQ?kzscT!`6 67_DR] 'tΥN"xt?&]MĞL\^M4dSjn^?b.O=0Ib;!˔Dn_}Yz}؛&*CJNGksG[w\ՔYאNvCu524R=奼B0Ucsh*"6#Z,݉Э6]/YT6zmo@RxHK(9[C*S sl ',%?D}(2Jd,G絜+`02Ӊ-֩lBӝo[q: ~PK,Eu;7T׽Xb@ߒ)L7g;H1Tڝ 6-M;AuxQʻ4F CRb4|ˮdzpS 5AJ/ ة2bS8Xhaq*ӰBq$O_Bi~j^<6&Ԩk9 )>ٰEw%!sb: wn‸ڵ-1y]_bhXp`ps~K)v|4DATaeP_g (F {^$O5cZ~˜&Ep\鳃,6aMqla$GKT$GM6pY6Y%KB}=ޡrQ?{0ˉN^D=06F2NYdRduO剡yB&񠞿Iz-lߪND] /=P/֏a9DY9)zG|*7*7;7&FV4&Ot+lEb/7E 4J%xUP{\WGbziMUqZS dR7vTr2BgPң)=\o,۝'rWyO3HsH8*ʆӨႻOh{qEfji"k+}lش3䭚Jh1z=ܘ )l2jnU8-&tY:;s$\DE4X+S)Ge;Kąl#/}ǚ1_ bSG1.?}K@R #[tC%s&+3] @M18}/)kHXU:>q5@E`ؕLȢ͚migxK1DH᝟cq&98[   қ[GdKZt˔|It#ñ61~z,otӘhCFjZEicՄHb~y>X>X '$Ce`oNC)OAfy zXuQUî@Ӹ-A7h+n=OI!6}y؄ET{!˫%օXg8q=21q=,]&hv/<>% t$j4\'QFt5:sX`0ʭȜ*Tٳ%N;xvWcO62K쨜 D߷uE>|E0,LP:NHb&* +T[%dCr1+i8@4ֆi,d+EvicCsi#`hifNhАq@gIyI]zr XOslGl]F;铕`9h^_-}wt XblF.>|K'SE]jb`pWE }pIP֗kjԹtr˹+Q8_[G+ͨOuyzyȫAq$x~9,Y6u*^QӔ'K <}CǃTue(*0@Ǭn- έT:Eؾt;J|pt4]` Cq~Lߣ}|ˣ"8ٵ󊜹1\c!ǣM,KG+ݽAFX $298low- Nr7YgbܞF+S+5YIԱ&G+ Oߟj; ΝẙԵMUuώWJ߱MqϚ;ZkcF7V(X4/eև|FIj]rHP@Y+Ǧpy-O 7liD'k&G1]rO0{vwZ1-{sAT"t(vHom[NX)0_Vqe+GuAUQ~ #파E!Ǥܜgj[uYc&0 |$qo+jFrBRSL) }_T!,Κ?|GpV]s @#m◬fd )GPARJ]܎vlSEÕC#C)C~ @e d107?kBk$l.+ 7n:eAjr'TU[_(5\C&uȟ E9PH'<%2:}.Hfѡ=<̶e[!jr7UX˸Z P~Öbp@RpǸ6Zu qowhw%#f+Ċl '0)1;K,F7/IUo*p( ui! MڹW%|qZ-)>Qz=f:W5{!hw[ˏTEK^ v)GM?]ɕ4cv[o?&mUۗ(oi jFE4%ڕjB'73lMޫ-E&Ε\ ](9w%q-'3B5j;{ BP/lsaI)=jruNjTg,2~ѭ7#_ $仨S@Q W2kEuE򦡶G5BJX\Sr "zIDb׼2C;['(^=B`zla穁r7QbWT?j@ p$m.#jf,R? ƮK\ 2# Q&CYF,TpFo笠W?Lފ|qNJ$D`rE>w0ҫOovqîՔdVMP9T ޻A#o nim9Mv"LEGQ@ѻH߄"x):ؑ{p!fXݺ傘inG2uMpa FM*n<:v;^Cۛxj?pxHn4 D 4QN &Ax᭯lj-Y Dsd̔I+Ag=#N.\ dvFEGB7 WZx$[YPWk< ,\JTiB6=Z#)Jju0,wW+0r{@ &7%hٰ+kDC|Go|+g@{BF 6EefqVlLy}Z2tdۡ? 87[= ). {_2F_S,h4'V εz\uR/5 ~  9R \w*^eFc(W0He vkiENvTݱ Wßӕ3^)-*mKEXC: մr+pS`_gۼcHkM u/*L߹QKKrP,0W(7' bÇV>21*t_&AC[!cu"*փ!k^AlƑs?x_9l.E,E ;Sn+g-2MU ^=fȼ6ˡG޽(*.Ec)*c3B-Hdmvb,'4N{ZD+j}RUS'4+f39?+޼[dFX Kr^|҂z 7X+zNHBݞ*xKtԳ~@`|v"%%{Rsm&{RMwpb@=r5ņZl;U[q8ZFxj;1۷ʥ"\\\ֱ4YL(\Gy@I3#;b0+$Yk:i uWf^Xlm)ThP{W:+^6s)X?GIޭƧSx,epϩ+uX"F`0IӌnƓ< ڙ,bWv5n@$Ձwd =bcܚQ.%(rNX}J~N_8g8|ذeԭ M^+ț&,V}}+\qGDIK*u{>ߣDX6k펞y>gقYD:!iR&ٴ2g֭Z|?V0G"9aUe3E;!H8>ӵ[+<ܩkjRR-[%%"JoPx r{tǢbl("x_6$J+2'ݙ!(!.\GU}B7x5ݵz1Ca!*Q}jyNiJ w Ku]Hjbx4"F: , mMV33L]-֪;j2lQT9M1CK}gmJ⠢.-tk!^.oQi.)تٛ3ʱ",a0 $ovMK~=@3UAu]0q:vLaAjcWf}KR!Tt*U h K eveuk !,zD)$pe:Z貽"nSy]@`B?MႾj8=Ԛ!Sh[9̪!Ԍ\ȗ-'^[8dǒ~Z_C-!Mg'Êc~tn|fv1%_dOpBc˿֐nQT!#S T/ZwU2N?ovNbԶB{9bLq4Xc#Ăsr NDp3w8z+|;Qڇݟ]]{ SP5 "c_hH\+@EJd g[js*P_>X0!eNJ%>±*ƫYQOŠ4P^nufV8>hIH2X{b4>BAkު-Ol3¡ 6 L i`c Jأ79[>".lR;A^6 6%p3Qaa\O,)ehM]J_V?pNtpjEhJ*89-+/5biCP1GJ\ф~s.$-˳9e"®wS|T?>eu"M(u F\4pãbι;SI~l%p{$X)ZV3Ti!I_"a\H A_G(%x(@f[q RqbI'>tuDȧ }HHm[ /Zp&lfC@ӷ)ص?agHed9yN+/"uE(b {GkNS$qJ&^,_ ۆ27.@]-N"S?;BF"m6ݎ_b[~o~V?(KB? 泂;qp?a ]lw`A ^d{Sm u i wWWu6wn⋇{ ..´aC d뵴MvA[kfǎ;JHZUpYtq:[i}s+7!_ A8cB>FC[u@7oVTMm+yuFzuOlzg2 [{./ R/<3&jPF0X\bhuMdrt-z eu w2IVjc;6A' 29kt>p8m Hڣ]:ie!(FǟF6}Ye[l/FmOey:!޸-o}'iH@{y׏6wfBv\p*K&csڻujxUVr? VX! يj‘Cx$-G8nWZ b6 աlf!1J\4!|Bէei8d n -~|Ԁ%-^פ31W`qpMP7 yxCeޛ'`OeT%](U1NAs Εi59of3w d;)jVUtXHņϢ- Kd+іN> @&c9%SCA*e {_YS+:<(H״\b}U q.J|=SȐ`jZuA|v@N+`~rp}EUysړA*CGC/WF-{EQNZF`qzA mk\A;ȵjG4# |-M9!:W0ۏWZb%AbG:~*w *5YD0-&]#,Tuǔ6,N+mN}KSt  %x(5*]4Mޡ7k~{!\?Bl_V07ƾ/˸WO$ӟKfoT\T7؟Ten%(` @T$,Mq Ĭ>S=S%a?%>Jq!؍rFRb(#RЁf;=|¡TbYZLOYMD·׶լ̕#%> ҐmMBs3gmXvf 8$T:sH6n22YUQJHa҃&8i>͌;Jm s(`6/1$Ue]` _p/ /lXs<1{j%Yo\h]gAa,b|ie`e3~#LYfv; oŋgyJnUш*2!Pu_JFWcTNTAG$j;wSyLOBVAV,OgE+dEP_Efrd0 l7ÅddX/:@:®Ȉ⃓Q==dBAX/Ӎwt m~R'|8A+R7ٖ<đ(T94?>:tGi^i`=Ļ2l2l]ZBV\XzAg-kw.~ >j1;&٣Up'czI:@/jȭ"/wA|i>]5{ߍic-wld StKHh؅KދvW@dY'4}k <rv*3eq˘HMGވ=tA9axf]4c795]}㳌} C<"PB$2XTz:3{v`Fd24;WccQBAW>ͥa'1d M- HKj,{FX)HB|MIj`'a؍`Ue苢],Fp@x9$OV?V@q"5^>m~426DRJ۹zAp\j;#$X}QL뷵 yf<@6NC.nLF[7iB vGm00(3BsvP)&tx?ʯi8pcƥH*nE!~]K-^ǝ `@cBA) 0sAYMs y@c$1/ v<JLzu:ʝycH{ Ps=u#VW5Yߒxs7W.m^sHOZD-/T֝3LLW P+h2gڝ5jC}a$flܖ# +E~B!cԖHi}LR]|+)Sۗ3Jw08n(?GPT]K7XLmړ!1@_5)؇V%ƣD`wMgc^JζH;d n S ͫߤvPrɭMER/*Hv\X[ B#{@}ySnPMl2ڟS01Z1:FUd1S`~vZAog.XYG}ln VJ_5)x+:"ISA<|W IBܟWeBq+HĸŢ<6uc>(s);zkSϵs./I;֍U k:V< @8e c[">LЏ8J]oLْO3>I0Z=~4< 2, p/LwПol1 "/ Dz[YC5z-E4]+lXveEcNOQC$ AVs<ë[a8X%oXĘ4uV8{Nai6j = C6Z{v毆@1I!cŨRG='ĤcALiiqIN&3ǽ+0G?Oeۙr,ƶ"RNv㝌}Q~z_wSͥd]q E+5kArh]/Tq(tH-ǝb9Y"dBRTUum.WtT,fIumv?0ђyѮ?ϔhaG97zrFxv 7PH6DFe=j]}fJ6N\T7"TK5q]nfn/0ȸ YB /+o E"Œh CnY0~fŔA0: veג\4rPj8` -u2- ~shUܧ#cvF]kGP4/iHsHUJvJg‚7H>^NA*Ή­1W졮Z0Pf-cX= m7E l6i"i`a>3:xru @][UqJxM_!ɫ5$؉q Xo@GqB>SF%mB8Zr@I˲.Wq2NӇ Jmh[o -j?Y-ȥc۟CA宊XL_w-7.`n/j 58ᮦjԼTMR[.oeQ]he~ ^i+ Lo/ؕ pz"ٸR?psˡK22"pF ͩ|'2&*ݰސ‘h.|0sB.Ag&A^rѪ!VO4!ROz`~W0 5}pI \Gsűoژ;n&kpVĜ2qҦQhJvk[<_"/Gy0oBR>4E98K:rֺ_zNUm1mZv Ll= ,[BlWCdkݪ)*27?<%(dw‰5 |)Q8P8 A9 !/dj+Q@x֠2&X^|B)VHgL·]EA9a{QjuE@{ ps6"髤Fq񧔯54KMoocco'ǛŠ)vXm2c dR$CU.zN;_Z܅<*\p-eK D9V21mXIi"IjRSE_xN2,[ NɁO븄S3sZ~lI蔹g0 wνk@QuЛ8s=2?Ql8 3L]81Qyk$m™:G !zmp\8.d̶^%:}XClFPo=)"-c_0+QrZ }n(!xIvLsd"ҧ#Ok! ,NvPabaez{3FL~{osA3}}9,lAE}{ܚxC>Fr \x+~ ;OYn2ʮrRCςpfG<2Csfo#\]VV!ČD ̗::dSf/{.}C_])V $`fZ"ëƼ.,$36C؏eLQs(=àe6ғuc>fS电Bh:|tm`S= Tj:"lP+y+Ť3F7)X݁OFC;|1KӤڍav^ւyI[3#?V)Abeîb S̜7l9H&e^#b=46|ڰs.˨4''?$3 V߻H?>/)-Q593K!lP Gmpt ʳ',8 eय़} g ?ZfK܉^GdTa:Ģ3"~&CXOW@/(lk@sZWTDۋ)~E1Kj8'bK:ЮaMpZ'[F=\L oo@lƴ# ZAi+PnKG1D20Q\fuix5~d{וhj>5}Rznz?;m'Tɭ`(2+a y"~ _mޯpu˟ڦ>*؇OˡH'STp^7: ؀o(3 ;Stqgt6.lBBf]|A|Lq9({_L@Xo(J/_u ҕj^鶅6w)( 5u!r<5nJ?ޞzTLCfjm!Gq!~Qiu`mn}izIla0@R.u0roo4hqMЬιLS~L,7I)u5(u݂rrO'0Z|7zZ ./"ws|U^O:77'4@R+u8a"feA5LIi)3c|D}ƗՌ/\O2%UKV3v\؞ mtً ELڠl";bȢZ:'76(pcd`Mz,z֤jjE`(–*%Ǡ?3X Rj/3xWzƦ EͺwsR?aT=wvtN59Isq snx۪zԽE'2wrl hİz}v01 jSdф(56'""C.J5jR}HЅbVy X1ʰ}kTKϻgk`za{ niߥ~ns-4W߰PeZ!]V34S%eă~ O:QN T9R$욜[{knX!#3+LZrfB)ֶ R_c|uRy-4;_BB51c:A; QhipzwSs?%nDG?Xx.Ց/͐5xi Ps"݀fEu~/n?/[ta5jGoWxKOAi9wTJE ?iI$-(dtBaZH~z2P5FqpL냽AZ <Ϝ_TӉ_9|{9u–# 2K3di^|HHiTViy#rplzeMyfdfrDqzU -'q|D,KY־:L8=-8F?e3kMMf" 3dF/5ҁz'`i̗.'@A]nCn tдoYRW5>2lHY,]96 [,N"wV"s:Tޱ@#ce'R"R^xIU0rN-7 ~ZH\,W:՟+t6х8aCa\ÚYa P[C'f_^+kzŅ 1}4F1h_3U(/|*0W쀪Y!XuMO@PԷ`)\0osp(e8tU},zxN3%Z,-ϩ8K]ۻ 2e<2q[ʙ},G*nÏ6! NCxc%yeBT Rv9` I/VyŒp9bU3ĩԻp7QEm ;?MT^sϫļ!tNqA@/AS4 봫i ҡ+hvOlyA:jBW^DzA{(,GͮZNLʇPD;RcS)cp ў+/5ĪݜZ;"l듀C+zXGb)ٜ:ZTErh g~hBJeX3g^ dS9]Aڢ-R=ߎg+2/S]`VBpK5 zA0),ˌP |OH̷ kf.b+ unR ɬE_Ҷb/ 4FCy *Jؙ^Hw&JLv/SgJt6-c Zt[F`>MdjMdH70 )BӽA.=F _ }tk J _a3e8q= %`^S0yY_ng 0]n^bTTK3Z8w Zw = <Qg7*ͭ'-6CS΁F)g~[eJ3LWIW?8 ˫dn~Sφ-!k0.į%S{*EC"0G?^7.h 0I"d%SI{#BEK6& TPS\f>389N )K:% /$0E Ѭz:pˑM{:9Jc uTL3˚-Io )8ESnnf?o'ѩl둙9PrO-;M=04ن祢Z!r,G0 `tEbG5,X"`6s,L R@6@qTG>N~5]SW~%#Y*IoUæ7~H>*YhAbM6ж ܲf"տDA CU(<8ʰug&e0א>r֤ž MP?RRUCZ_PaELwsu,$pNyȺ`kp]-׿ozDM8\X: _@M~dW&{iOC h+|^{Og\ h#}zj՟ 2#5w*59O>HYb`B;w[Ƃ.يX$@9I(6)K[tkVK@AKvzTʬL˱L& maui`G,ϗ#]!%=7@~*[pJzSDlw jp~35.4|yof4gmh%4hwZ} [?l^N; ާ_=eáFD[y[z^x@[&2 f8܍i.E!A2KP8/en[ţd=w5s.r%;=\iψZ؁5hX4YTAźA`&qh1قEXX.b\x@ <l-݅OFXWrfC7elm$lg{Hoٸ@05L{*r>2wڥ:nE>J塘 ˟X^5?9o |B5 PB)R;9\ svoIXυą0ę!?O H"G}h:8bV+&oV|$i\l%4w+\t˹=1bKUF@{"_E'd41|d2ƜH_SїGD vR!Iv< ?ꑜ|F"/>7xZC=RօŞۀL'΃> lH(9?`| ߚ7j|r 7o{T凎@Siz$;^|,^f玝PE<0sv !W,F2r#n5EJe7#DH_5+ X~+\+>\+x'BKWPJ CYߧ~ۍ%x]1-ԕ&/1ZngslXQD#Cr.X IUƱwPxIN'!I(Vr8TE -EB|b}D'2#=&ׁ 0M2#^T v1I]RR4%UBI+'~zUƩ A['@U1ɰZƁ_Z9!x]f't⡪6;d_;`10OR[Fy"CCCIΡGv`E`DꛤˣS`I} O1|{늵B " E%u;0zȔDrn8w ^=Za1G{^[FQ$xh$ʲEF?@"I%VšC1); YŎ>^+q'ȁ3LAB_mq]Gε]e[фku&v_~EC{%9]A1cg }T<9)62DrcF77,H(cR!lP(9+Q 4VWݐr>ycúOZD+._&Hw$͹m Q W7̐YB (yLIq܊ԕ8zCfz<e[WK(O䵨ceJΐ$׍K<`p? @`$jAYTG]$J{St'6a h4;i!FocGa|gcOW`H*nH90%ˋ|E`m`Edv7'N3`ﵣnLZiťf~C~oG1[Cc?%6I?AwAh4b^ثL~e jw &;>?蔾<ᚁ{{$^ ̎ լeaw(r-牬R'Qc~2LFOK4\&sRUpBdlҺ%o}ԌkyyI0W0QPp*~8Ptqr?Hk»Y:!^ZY`pi~X/>xFzLm3$eDx9-Uf)އ`Y0^q i}q'}1Y%,dk /6%V@2[X(v-[9 ̱,}ϡyhqۊ,Fd1Ϡe1'XZSL"3`&y5ү,ғGl$B0?%bJN`?x[R?mt>/ί:M"`9Jl8+IwhƤ+GIDE;v;F:㤊?/qKa 5 g]R1[> |ߴ%+U/!4z7 z=bN6+(Dvg^uZA *;YYD^ځ9˷SG!XpJ~jOȬJD$x<2>Rl b'3&g]eq irkn/衄+ }FbAЅg'B X*]Kzz(mp@U*9Sj5M/ C *M30ԫš֓{<̀?NP4Rp:!=(6[Etߛ Z;.!Y=.Y4mjɀ"hиKuC<) (ڈ9)P=pyAZe7&EXŞA7TrB|[5Q N֯V8OT>Z*Mo9)ol 6uuAW(w{Va4Zg08ҫ)YI|Q=>ya@ypP}aƪŲ$58̗hyB\.:o;6S:* 76mAF $H]E2GeI1(YZLoiEԲ|TbTVenW81\ qŻuОe7Z &{ ;bN횛O$t*^_ aL }uZYL,[$#}誖@KD .!~92`Z 3,l#N-fu_aK{yD:N/*f[Pi]~DE+ot..-b9K2Zf|lc=$VCZr%WNC);%(ȼH.[ys xt7S̼ז IgC(8lr^ fD~=".~5rshaX+õiT>-]㺘Y|ۖbMqm@H.5(Qm3g2ĿVHnZ{;ճk6a-}FC0.lirZ}fJŜ_@6m7;"bRQ3u3SyANIb_jp_+nd:M{~UJ`kץe (HWsk5d`SHoi"rg=!Cwb4̃Ly.f~DjKڼzz3WX} ţލJv#22 Zf?GBG99 :wѤ{.]9£pMu{/W /9g9mU5ڡM -;wcak=6] KS~'(U୷AA\D,AJpN&A 1$М pɣg3\h衠<5gg1*<Ĭ=߶|eAjiC`39t௢2$ I/vTUcVJk teP ip)¯E/Ř t$jcv|I6,Q+|AqmgVkJVB{kɏ\RP5_)Pljd{cBz4 kbjr9j|T}2<~*̺8pxr6`H~0v 4f?U ^uQwXx!|kT5=%h̸mpgb#$L{^:!\$K=˛. ߊ̉fFJ J)߶(}wpfɤ7<} wcl`E21vvն[@j=iGE0R)5 N=Td7]9]ř3*`9p匿æ'*x7HVyWpwk|j>;}t-qAY,@QhśegѯG:u|F:"~ё:&)<EnR g9~?~'~Y6WIº!+-ST.}մ6:դy,s$0mjݔ=$۲GKoM;v`滟_U'Ը‘{xy)R:\eJ`6*1D T$"8>p3f=T5aBFZ@hҒw.u-^ #xX.2ԃWHɜm㖠Ρz&R].?>$u_&'S;KSAir^Eer~JYJ,=M([ 1fV`o_>B &SdaA[rmL l3^ ."й,dOZ˟z}Q_UeM'_)n3VY-ժLDQ:?G;3o 3VL}qb[Η0hSNSw&(Cy"-@D: Hfݷ R6@U8<D<\'ijEMXlaAZ0F;c*ۏ.wgxZd0,fi A.9gE k4,: x2JiT܎:"m&iyR/"peBY aE) QB'fzs+ j 1w[3F1|e܉F"Vq>-{zs0Kܫw90.Vظ0 Wyof%1z(1#S*7L tgNW0z9jpK]xa},Н&&% %m)tLͪZ>]N*eV(gp .XYuKAc[ESb קHc̲D Hڤqӯq޶iy`ĉ%gI5Vg}u*cdax7f(ʎIY8.+W qڝ9H@n3AbL;!'%scnPX"q$Wj~>B] / ɛ?JQ[d(t.QL1IsަGk8PPI7rQnjgw3Cn` @3UR6D7Tɜ+D'µ IRT pcQ~063Q,{pdR0Lq㒹d+I UIM+wsP". b8^ \t^G &p* ^]]dj8RkߠϵV4aj>~Y 9_y4 )[CӻHNEw#Di1 t0[!6XFHb Ziɩ.LWbeD* X[bh:tc+:{NsuFjc\%%UtՕ]d7^֡tXKIuԔX!U4]3]^Ic.3 R~@!nmȖCАYɇ:eׂdZcH6ޥ ?bcj-Y~iTǀdQE<'8唱'2?cc9l4`uɯᨩ8A>yqR&LwDrO o~g@l&<~[!4HO @RKe8h4f2A8n2@w1Blzֹ&\['QG:a]{|^@tÏmÚh 4Ҽ-|B]CZf#d%݅Vd(`lq}o,j #K{wDnXgWh+S#ٕrg-, 6m缅͜P1ySWM6?Әl&qb?Ma}W}n]]`VզwXf#cr+Z|/pe9oz>cNC 1 d-*YBsS3_j? qo^u܆JHV}/w.TFL ~e E8W~\ڃj.:X'k,1Fbr*] 2oizVMWuQm4J,GE\5oyquπ_i@R4:ܮ4M+X_f~;yt xf8b+cK,m[QU&{mWwAހTp?zMg컄5VEnBVqUCbx,M0H$=mH4`/_dcv'PVz!asone#eG :?h!B64#>)9tڑ'd`A-ݔr.?GSCToJn@؞42(G+?6fT1M#کѩ*FFJT](5?թM HD n큂l#:OmTX-׶rAf`7uĸR+ ]0=:a}N]u ] yi0ss`9FyYQTo*0<DD=Z^M?=%>+uhhIXJAL?xuTwypZ!ox}oQ1T(capbƦjzyOV?V}c姸{,"(] H9{ +05K=c.w'W"LmsΈqUyN=I΅GR1Rg*o%`Ko.evU梮|ix˶{8j[͔YWUeЂ␦xݤIw=Qr/r]M5tF"GCMȘ',ɼZCsYO6 ZB;TР>fE2C1\6K 6]\:0b`ҙ+<.ɓ61e>G8ڦ]u-jhфe&Q.{(5?YErQ. ܝ`<:zOPV$b7;$wa+>NU|o!_Vw!3-f\hJÏ685:Was&J=2"F@Jn/ʃm.2uSN.+љ\AmEh&fw ]?S.{={#ߩd,FTD9˶}SO3䊮L#i5WR {ELةMNR9^4qԪ9[[CLʱȇ#2YUrAp*u3Ybu% 1DEfer4dqp# 19GlܛI@kٽV 1Fvޑ,lv ](@qh=F7;ߓS.*j~Ǐ~l`yAԻzIkQ5j":v2D*k=1!A"~aWfk:*d̷3畻5pgԖzV?N #}V`&ΛD2*%t:}J׆ |;p0‚0ۨY&MWI>eqB>?@Tɱ;Q<ǟ'RB ?Zuj7HOr:q FECS !"[^؟M4 Aٚ 2ߪb/tuN"ɃR(ƂГ]OJsu]Qe1lT_ +SsWi/sE5ZuNd 3dZ߫ͩN0}^-,Xh/gTfx8N.D8tr:?[ڌ*rxZz XJU<淊`R|ct8>[esWG1, pAxg`jא~ tBOz'pr루hlU%hIfIy ˗H&/T~Im0dvߟd%:onfFuϪpv]ʡ:n-iϖ~:3UV]2 1!'z: K9 eW4lq2!Y b*\zϮ-FNR R %:xv!%eѮ`%о-~p5g5p_t )o-qZWV;W6fkk9Bye?/zy]p^5><-k*{@ZPMЫ'{}H8\t3sa|]0^%7HƳ[,#vG[n=y'+ʤ Jݢ/6O^"$jґiwZ&)q?j挗qg)3Expw![+?5j*ה$@hi ?w;Lbb"7*cvL\'y4\ԑM}Vb8D+Jd8)t4 OO<;v;,8aC[[j9q:o s4̀ȹBV }^q~םu)y `j^Zk~̩IQcI׺ǣtW7\? &|"Pzu;dX]C* FUoZ`:o{a޻c \BR )QUc,t *Xɒvݻ'2V]!@G nЯ.96&XdQ;Iy {M IڪEGKwBznsU>-rvS>w8ͮ*K:%cUrUa㏰t#n"Ɵa 6xrwBu gPSKhfy5P[ws٨+|9^7,^)nJ[jI[^u)9 M!'HϠWP:HdȄcI@ !էc %|jd%„H qsxD,B(@*4=lmdvcW?m}s gl\GH}Gש"1\ɋi ˣ._B# `06s':(ɜ.\QɵK0{,yUkpf*n_VU)Z7&Hdߝ]EK+ޠ=yL*oixQ؁8q?a&9v,abx4&TEXgSn!\`wHjzY ۋ뙨d0}t8?䨼lwnݏtmTӔ;||&Eo!l8h!nT0Fb"~<@~,P1?t҂U4wˮPCq4mFP;StP%ؖX<4L-=#WQ@sn)|=5ͣx4jT_1T{@ZAZcA/A2vP¶ @^ y$=}_K{zF2I`4l"=*nlR`cϮގ[B_uGF,ݗ;P=VXLQ4浰C>K J;wk!8ؤSԨ֮bج bhrKD}˘}Z#%EY;86$.wdX@*$S-w?<8 wր2t]2şQ)r  CZt*"wݤ{^ yeO!tMz悜WI&1WMKO'#ɛ cvq\]ڗOh{bmv)|JA?~OS2.D'є|#Ỵ_o;(T~l7RhWnSـ4A}=J*؛{!9o::\{H"oGph7-BSqA쉀D}`<숦(]\җ]u[ ^oDoJ̾Uc Zms~{NIٿk^a/2Õ\C"Q ,?hҗ*n}PbtsFNnFm]R=DF8t:4Ox[zfؽ~ņNGiIXڗP4w"KDDJ0$t&!k([ǾkO˦]ѱKyn:f QrG"A|/$H]28O@"/k'U4~z hl\!1:'셴D)Nn/ _z~.{*pW^98J &e*UlE!1.d3Lw[mBE-.~Iox]%D赯\|X1AcSazC֎_%I>VNvD=dy϶>ҏ~>#ElkV'$3q/d׉$p?=n(5T)v*@Pb!JRB}Wɬ$6L̶-:ioZw\>UHq_|I>ʟQbM@BQ!ijujG? \hy_R v吜s<-Q9~ˇn R?YHbJ87F0]G!6Q/ƽ*5 fuOL<ۆ ]|meb'rvt̛oHH$v SfkX{S:՚9+zm/W3uscR qJhV;ՅCDe\{8dzè)ozqL %~EDVۈfIֽ|GlE%4ӿ#!L?Q@nI8j3hBie~82 4aiy`DoDK'VF+}osuU}N 8ynW="*/m]΃)Nt@ȠK_sN ` 5u,ƃVO' 5tp\znsS M׼[h$ixx5yRL^/I?9Y~9w<#'أKu$Y@>xZfT"g1L =P*|΅wwhRm 8VRBu,I(?#e‹&kz@Q}LJ#*=@s9l `konM۸}Q>N7>_rDK)#*,c1ӵ\ @;>%0Kp ~ }~k'%8*b Zyw%ƠIgn,o=#fP"8' Lc6>lrY8 쯃}AE= xѢrj.rm 0~ydd8޽#4>cK'tDvl(}qOL(.J 0D&Q` ֑2 ?l?2AD=ρxKT3~G]dBUq%ArEOx=Gm,?xWӇo(H~ThKum[&c~X\w{@q? ]/mgAZs_jߕbH$8;V}>H{ `X, ~Slt{ka%yK t6@Qvzol"~ VDZTq&=̄ ],o!|q S-xl]QU(IO@̑R"l]$f2FRQYOf#"Z]e=a$u$!8q:q$y;_Mi t7syo?u#^ ,gMS 3RZ3U<)zn[HOrǭ%V#I$qb&?Q@􈼾#E@:MpI4e2!^݌,:8LwͿN=RGT8T6qZ,  3 7 H0*azя#-hR7ϡ]Ox}"77k)yUAϩP)m+ZYh}lho A,VWZyGϏ@h"9 ~ܟ.kh]2gkbE%<(')OPsG@zT'$6 B Om~i.#ot$ %*b&^n."FJ4D]`УF_($z$dqFUet[qw]\WmPMQW,E/LGONJqZF18+8fEkA9O\؅l"nur -dz!#q@7$m0? }v:x\Qg !b3o(¿:7Dsi<.a,-Vtm sдOk%zA=UcQ?\;B }e/g+2e%vcRd4ۺ4!nܰtXb*݄_e*#ӲVbvfIHY93fAd'Rg!)?mTQ63y,bCw3>x, $`Me8w6rsWth p‚߽8S~u7G mf8*wPF4;p8c{ njN|=ue pL89oM47x'X8r !~yo q →o7|~䅁/.:kG[:Sfi7LlfHQQ"9r#aT*b2͞[7C8oA<[9y_?(~['B@)}#HGsģQ=Պ++/?8&Hؾ~Y l<߈{w(ƳVϧd!MbhV2N|3*߿f%1~d^6>ELG\~{zrim|?#H"Xl`iȹCDTGz1Y[Y%*W&H0}s%cca懟AD[;L U+{i;3 |0w ;|LP\x,Mb&ƟE~(tHjQhk$>g7a:o}P[%,,*ot-Ֆ~3;jg?9~??RLDfb.9f2vpyVK/*=6(nj>1H֮2"3OAsbjit F&55Xb/#*hḘ_\c ꂯXV=6Ǥa&!#"RK|B9-F_ܽ&RX!)ݘF k@%Lt8} q%U}~nV?* DE(B}'[%!Gq wv &o#s7uHZ2ThMǟ &5<ˋ5"<x[3~G[3 2i-#QTz.b/^,3>$"p9h T ۞# k@ ~&tva_ny׋ԻT;mV eo*t0|z L m[|?cP:ώ92Y@==YQdcoұ5HOm^xHZdxX)n!U'4EalR(aghgZB"j1E^ː8)I|w*%H?9<ބ$80VSng}JX(iZ_!JWj3``xoa=_N \6v_x9Q#K<8E, =ayξ4DŽaܩE%{uqؔޘy@9DG6`.Nq.hjg@7:I=/z;9 @6; `qSKy)"Z3.vs\X6p:K)jKJa,3Z#[n/>Ə دP8V8?|.dCX4B@q5 .24NAFt%iI$i{[Lgu: %+ZhE#~Xhm8}G#:"R!gLr )t |W%Y!utEh0:@{|+vsp,~% X4D9^uy|I&/6s'ccWZXH0HF.27gT$gڒӿ73B92VAC}mNj/Q)aL yUE$0F)7r jLN6_y!ANץK7 X[go*TQy^x tq:UFyw+)+fךj}R_9h F+xkO`4?oh=9B݁iX"?ENEM̙{ZrnrP {᱁/0I2dx|5n~mjzsB.oG^/{V3<}mS kr+6͠ilJeZK~aja .6'6 j پiݭ N1#뼂yRϞ޶P` 4 !TKԝq1x1Oʢ*)Zm? ˛{b#PW62z3\{:x/rӫ_AV;~&1k/?qgq[2n#v s?LF=9PExDJ񐱑$}rr9X,5B̀HW9-^SU`zedc" 0>φ0R0hߺ3Rij?/y6sn!'~LavBx"+Qջvb#2KlՄ~ %d޼l6w:/,˯l,JUeoX(.-_YھDR6>A/{X΋6lhA&yw=)'Wlī젫DO rH"ATtM(ʯGA<O0#84473)a煽F*Y"ϗN839KnmfNeLo nU?ql;IDj,]k;ŮG{}FQ}f2UCPywcQx,a ~kwV$+<|W~1۷`mP+4foۯ@Ë" c?6F'ӍDA0=9yŴq]S&XC7iDD_mj7( eᶬxpP}N\U5J[VTP;8ө;r Lқe;dԙӸGTQGqwuagr/ L=7$TZ6D+$c i1qm&UL,=ٚ#q^ڄ4)4s=nEgKGP;PoEMYFۊ^(Z+aPVD5? B7-( D##WASd/~omu.DV$p2HsQxB/v"~5a5hKPK~T 5GuP ;:9=ۮ9>2оu)rǶ1r)WcSIZcqm9bՌajÙe5N^fMG %[r/j 'D1|Ÿ+c̫~٠_ꛃtNUդMNPþ Q}4_ko$v3~My?5~%BY'vVj[#[S!pE ޞR|`Dtd$\s/8xRh 4o).P/uԠH=>)O6{f]ݕ<*?UƆOҙ>f Oxl)R[8 {EUoJ: =jۺv HjG>hp3JtA&~s|#ʲWR th > b݄,0&ξ=y'_bsʳr)6"F|$Sc֒6àR"-e]]3 h)P""Y͜?'WD.6c [C(Q9۹wxA`6 Q'65L\YBY6Q 5X[EL^5q>xyS/HXWuǁW@iu_Xy/; o7sM_]@ {`9Ljm(W47b_acoAGCД… [ 3+ L[Gxe>$^1I `ճm r@ezA<`Y/ns9Q X8O{e؂qlKk$z ,zǗ[HYΞDvM ݚB^yABz^J>()#G*! CҨ8[JIkjHHyS>e}a,ZhIŻ0HRT@:5B_I(!鸰OhSWRӨ /{Ig;.Q@Uϔ./ Ю&n놘&YGFrwi@oBQ&k%O%Y9>PA]$?&-jX;P+uqe$|J=H`ba >8m8@Y10ނx‹,&ɿz{lytW"fBƅ->ĒqVcWdBCv; : Nb`l$[`mdV8$|8@~}r*74{{ D;m|-,{;~'e] ULQ{-I ՂY'~h5k1> bbFN)rbmNgVױJƭBY[* hXK狓fܷ%\߅ ǽb^e\= sػB*C_0P䀊RlxKQʀ`#ȖMkoSyUP NGl'wzXMa"|+nk̀pqˡ?ud43wo{|Fǯjiëz!g$;xuQ6'v9ҽ%ϓRn-[ |_bhes0c,l CuwdB@$go5kh?;6* uT8ey}Je@y@yy&STCzWS[+lqNT\+6^eIXQl2 q7vai561#0EM0EYk0ZQ,#5'F+΂1C6 -~ -/ɵo& 5-O(+v}3t ]׷+UZ])<^+L)m_peY bVߓ\QӮ 쒠x3q+-u=J n(pMw0s!|uAEQ{ ei 8`!oi>=p ,>_PZeg;[-E-]>ň)8Wn>}nH0*5 "l]+mp4~Jɩ <9.;:,PPzǣyңt*^/žyH嘇1XWH˞(Hg=c;+ 1Z{Ll#'8&L8|_):Hegtx-U3UWhh̓5)0=s7(-Rq%@VӒ ]֞#;y=\ wLs?.~n=nYm*q-6D^Kw[A6Y+|_;QjP,0k΢~< sA\4 lGHXtk_Dx܎G#A !i"f8>e ;d P rƽQFwn_cVcO5 )d.^׉Ѻ'J=PBkh][P,_("~yvIwms'y3t/_׵0IGڑk-kwz_݄gPH\e'>rx i2,D3C$iFP cl>T[V~ZhɌ uJ8hJW@*c떍xv`R78ӻ;|g7u{J!]<:4|Lofz%2Ȫn#1qZA ]Gt/69@a飥\?X~zut]QX.N5xˇoLa Hpn\. B}n:0ŠvҺ> =r-Sc8 77l{a4qk ۘ= ucg0'.OVrTΣ\©'ʬœ$hI e<Ƿ#o3hɎ+v÷}*q+:I;*p|D c]5Xk:z+[A%?zf1p{?=@LcO;L07߇kpd_\n4 T1+kdoNA u""ܺwgZ\=#2Yuv &ڶo!y:1U]jх,6-&hWw2D]Y㋂ +O(> R"1k-u`!@W#:x N ^Љ\_UZj\x;X3tˆP"MX5bYvp>Y|*r+"P/-!! 08ZH^g@ISx@]a%:0,Uid$*]6u״iRJ{O[,tt;;|%ORi}!s#pWbvz(76kg;A3!g?>RI=|ycNs~t+{6{efD]ܫP3Y5v궾Z3R5gNN$O\FW8_}=r+ a(`&b ?;!_mj hvRMquwT$ Il ]Bm7#|Bw2IǔB!N=Sz"ѽ۹PϦ˘P~jmrvQV.0K եr jF٢%/~MvtMFkMS-&1oOYҝL!!R+'81U#Qc)maz}dKVqrz0zAQ1g=b l姞dy lԯFKx@J-[HJ"9lUId[4WEA3,QU[S'7dνX&aSЖlsHBPnh4\T_M ;H_7s [!ýy4`^9Ѿ50Lp6z"bNŠFUTUELވMU_Kx.*NSMH!ӓP+}<E cZ,6>RCB6JZN]7ဃ&_3'w[(JĻ`;Xt 8Bo4-z"|`%|~:Ҝwuz WF@h"~Xtb( T +2%ķ1etx,2๧d]7;.bSf[Du1'1>9im OtU Ϙ#-H0WSf;9 Ȅף68QzS(d:1e SJfuK}@wn:P\ugIN%)LC*D$)T #).5Rs!uGAg0vڪ5ΔJHGDPldGkW(4 .+Va@'ЃxB}FHmp,08P?HRȗR٪΢4deF 9aУ@Zzd{Ļ )ܜ_2Gj;~6O20~?ԦhM̠M[.%,eG17N?}8 pc1<9sC*%c{i%ʅ#(<$nF9>58Հ]/]`HG}# ԏn;3"׽M ?, Ã> j$ڼv4 Qs3n`@SN[hX!L&ԅVs>./0"Qq^yOz-N1c~ļˤ:׽R8iHrwoZ{$l&%?T怡6zsf)8 nn^L27jhdU鿩]`E& 'fWZ Q5 [Lzy>BvLs&;5#k{^"OrmD6+gJ4{,|ش<, Xͼ>XYTTɚָK8d#%HYG)|geBzwK'GW<(Ԍͪm{jq6O+^ptUḄ,6+{+B *ZS{l&HU^RkGO6"[=v=&t*pRSMHif#7K0)nxw#y]c Ax/́o޲J.u̼S ßOt`. *ı3::4TV1/ư`^jC;dkN&ZM6+ 46;Q:ˋFd-ہQIbH]녱]s=/W7O1ֽKՑvo[EJA;z39$/\q'╅E4( NWZ,!'+(|Na3"#2'ŘӊizWbVPnh'JdXlԏG+:@}xzPXl.CIIGg~u3 VL ZTډ[m,x|#N"'~'z:t.$cZ4Ax|TM7XhG YʅЄKpfH\9|Gg@["^Y y[~}mol_;4)u2qbKVz`ˆL gI>sӖYy=A\8 +~I8UƎAD arMH#H{xe~顄unw{ Tfq퉲yƙ5@`vࢯe$@]]pLͰfHR2ږaf ]'$?N;nn!yx0(G=w &G҄' ]jƄz!r6g.dmo`TGІ,,g{R|KuPDS/t9F#tҷuO9L&O{8WeT.Cj3Rޚ8RF_T Vz${3u>qloD(@ԉb1-j%eWQ^.pwRAȒJYlD,4S6Eȗ,Nn?(سlHP@_X!i9~Xl r}˰rb+kVޱ@iL-m?! 0!H&p-[hTҧB۬Qt> 1T@ɃO͋`7uO\/Dd[9} j߸c?_e1.R =Vf5iI&#<!5S8ȡ(5P._<%i:ИÜ"Û>Eu G&wMw \n VK#\bڛYC*kęrs|I͉NڢAyFaNQ+nL%Bx:6 hϜ9]bhͯE~!CJJ[+1nEz8ARJ_WL XY[˟g)PCҝ%D3M2P6 g/ƒ`e(_LbэD-EXRXF~==s*Ǵz#ώ@X%}q%L\?lB.DxIDAuٌ=?ɳ d8Nݞ`)9*dXye{p۲х|ά8 U%njlߏ֢^:PֳI5DtY> :bM8M;B/z[XEF8n ;gT KC"4w*'%X,MEyy80>Ttska /LjYGłBUفf:4=P@_RNIΕ1"b71loDgj>ָ>opOHR9pJxH PF>U!srI)_XP'ԁBY;qzZ!2 Ae.-f0DhV?g(Ib(kΒϬ^-!&w2,_)ٛl^Q>ږwNg,* cV-m!Ħ7G6\#3Um%; (~Q t6gNd mtlk%C?dt/Zs%<̉ w<N0g[65g=rMi9}|.8uy׳~͗2YIhr׃Ke+Ƒbȏ6$31p;(u Y)nLD}&ųL+{̗hǤ\=gUaCF5uD+8y`[}Oc r+ y"ȱw᭕_5.s.@ֹ.eL*+سo:Lo d{ /EFhG) ̥+֔Z#8WHN LtKڮMv W=$ISAb$lgRؑ"Hf ,2距Xprʧ)g{8vr }CoƪT\Ni^9fFL>iL蕓`-3 B*.E|g|uʯ}~$1`L&.~q\F~;š0`#ʐpӽf1q_Nb<ÌH3+&d=J~唾! OUwKjUC(æ%1.Q42~NgV}_Hx+zFy8ba c8{ "ΔEU ."kx9OM._l-bh sEltm {(IsW޼}"/AeC^쿎V[i<@Nui='ZU>()+2I(yBịҿɓيbEKPhMbbn[J%+U]& :HyܽS{nzb8,&D6%A9[$X(BÌgsoWmD$@oQjvi1|P,ׯaynBPk(|w5)>|ȆHkevپ^U8ڻ!.b^; * =sTRΕ!x4PGoU|]yԿ_bs,yc& +Ǹ*&E6vP'#rix|W("'/u0KFY1U]-Bs:,.fKQVΈchFRp4}-J<%>`7R)~Ջ"nhlQ[JhPJX(ڊN}--K}`+8TStm4ie) J| 3*J'@0NߓE',R& 蒐%\v|sĉ-dI,H|@4ny1Vt[ ,tMusR{ݡAf%Q&%NLXAUr1c(oakUeUN3@lC*XDdnj* 3ì Hͯf,*􁡚g'Ym,ֶ4XH*}J|omu./lm*+NH7h2*Ո]M%RY"cT?E3q*rA`yX և.ӓBmF/LTKS%sPg5notΛPR)mNW10*+bàZ +>ȡ8}jئ``ʂh)RshdM^9)lI3.N2qB CP#w gW:H IS٫CJuk[lcTW(R6,ACn~8ΟD=Q)-k~Ap3:$<~#D:2L*ha.&J}VnUlRV0=B%ܦ,  pxDscr,Ys!{]sk@}rsUZwf[p hwu&d/j19Z3޺>:RZ=*Kd&`pX`aj#7K3t[RpIeL̙{"Pׄp]Z,mQΊT'-h ;8KӔYx;y ;yNx$&Fi^3FIǧ!}>?!UK$Z)fGD M%1g#/OuxW5AbcND}oE-ȊTP) FrQ\`>/yY#:iBpvmj=P`4$h3BW>(ѥtBh8o~3,@jwićjNÇ+eWmC'buI V IݷidKi#}ixFEj%!0*)MhҺ<΋|LVE#TezCj|Sd}>`)Z[/ijm\c]6isCb|^z0J\>r-<=9,ckȼttfL. ?#=d2: )M̲F'~ dfʗ+ٵ[ԫ_&Э|9S_ڎŪ.vb)ie,GP*m ;"_rZK. ?䍪3hN(A Wt#/'C˥Щf,q@? #QAG9V3QC[EpTKr/m&9Pm$s?F=Hnf Qf}Onѯh?r.d)f/\A+V!Y*e$ۧ ';@FYnUs[ tD:#gƷjԣ }f&܈* ȁ-DMƧ5.f%8gD- =%#<inImvЦWG{.;v?Y\Mˈp4u|.R(!l%`ggd1=Iz 6AexlzaL~/%i!udߺoaņUgym0GkKr:]%8 sҍ%|¡|982rn,WOj K{He-ǀND8,>}ĸ$J,_o$ɚju\Vamh4_bpqAg3ɹAQ $ gsA (הtCa2#Yj3{u[:K r]sG[~(aJZzyT1[}l[]o V 3)lWIat5mՑ|pKDH aYZfX+Bm tfs&D.9F!̭/}<%fn:eSq}w͗F%bݴ^丆 `{E`KNg^ۍMC<0QN~6=DE hz6'hePy|ZT59;/9 ki=~D(zC@b3TUe BeQz/f4a@#S1c$`4IboI4צ%5/DuAh϶\l&:ZXă6^{*rI-3nh͏gAJΰx&KZgoG/=P*)XYuIlDb|8J^>EęJ*ľștJ aulh߱+>ٸ9iba6~& n+X^?pl\yP$ ``h b< n\I8fz^0Vɽp Z̙Ժ +3pI7) L(ËsQ1-h7.)eY^c9խ83NES0׮GA-?IR@+yL{m`abX~f8p I$)QOEꆻFJa-۸G_$7{>/O2tu&?y7.t8 E*!+S*ÃzsAJ'b&82S~ ;{zD-=xy|Cd8u 4p8E߻<ѓ`:2ʴo(qD#e .]5WQ8[׾m=['pʜʪ=L7ʍWGt0L#V5/ΆF:-U?}ϣ ]/%m' ( r+:b^Zbe& vErB ˌ,!X9{$Ԩh\wI5GJj( 3EM2tΆ_>Kv ݲ:2+{?Y{a'Z 㕢%9p >Pܯ\U.趨Kr(᪦+_8EG`2ut:~9wNW1̖v#U&.Ǽ+ɻ_گXBL}Gtнb5]yV#Η$.}ܔ|6r͚'fU*>JܐǾ҇%U|Y1qf D%~lTTGdCԗn rĤl=K%QmVB4 rFێSջKqqKwhogگN@X;J"i%k`3^bNSFK+.<=T%.)̵lvzx8P//չg ~-&Ew *n1eƆeKS:םpwA/N+4';$G!Mi l.Ou/R@"=+a'Ww4{䶠&÷!@RTwbCgCx V_l/9=1i삱 1EB7:~]"@Oj_ZMЭ'W`G#XǿfMC F-ş~L LG)A=Dt:Ka/,s`KJ'~ d*e& ]4\؏$"k h"Э ʸcC#p]dh+97v`h~Ś˕Edz>45j 7Qx F2 mk~&{w]F醕MLf"-bD9hw!6HW) #so`ص}^DK|cRIg8QSB7tǀě(c1V h4hߗ=ϙI> 3mFwZ2P7z_p&nxd*IsŸPꥹ4lt.Gu=GIH_z9Ѵw5o;])y`>B^Ôm1*lM6SFz0 iSɔoWw9 [P25"-DxQBNVct.x͍i0uJ:@=-{XCf Z(J圹D?݇f.im JTwb*iA:&( |r u*mVE u 4?Fe ;>`aChig\2v$מL.dlx(.}fP,v$N>»gTI%cϟ7L*w gխ,crqKѼ0~ M+`vp߸N@|=Wu,&6/k״}?6,*>2{?fwX6PHխ0isQ)!c-k{aɂׂg?\ćPcb(UhTt+$1cu.x.M#; o(v7"녈߶_BCr B5TXk=vv:lZhɌeC`YHh*xZԤS,~},f3'^T I|{|w>nӯ^ s' jgNkɺiMp{Q!9fMMF#H)eJ[C=rHQZ}RóspIL2ewfFn0h NB[:;v (ФZ+$ ~{fb 1,YP e}@ՎUg$q+W!Kr5:iL*Q|ꠜ zߌqYUCP%0;m$1:\PkP9.ÿ.J؃᱉FyhxQ 'y"m|mG;2I.H1 ^vl'mCc(I阩4ɯ 3)y\qʝzˬ kU?2q- dS|]Ϲ!GZzrr1=jG|-TrfGP2w]YkDC=y$l㝊Y{ל=pWܣ"$TӤө@I}y0 H:Zx!dǤJkU9=/<6쨳w}K7ɒ |ĺ<5.%arꂸH_HB$$ *_k0-yiFny|P^>4E9  ):1(#|a֬Wd `2'eTO8r?5O9@YiEFHm#}GB׷P 0֘cΏ/%a&`ɺnVΦc"QMIڔ?1sZ&kK|i[UNɑٶ~֤dYB!/_WU ٸDgT^Ɩ&J_3DZBf0TIKa +5YQ^e)I!w\8v=8F0 m6ANR@ts]xoAm_iGUmz /.C@ː񨔙30䏟qEHtȟ̞, 2k C殆N!1D_`g6ʖ~}޻DCyL-udD;O*Fd&qٟmL%Sʵ>\×&9| gs4>ksc^c!gSsMLb%Ey3# /uNf+EX ףwrY7G"$YËASC <AhYWk퉮K+NE SRIK|Ҁe ^RlͽE }7JqUm-&{Ly QӼzrŤHz6N卩 qds0Cbn*Gd~H7x'|6p.%rs&yJj©s:OޚYY X7@v۰+3Y̆䵍, N߹tVin%dƪGk+bzi]h~Df YP$AۿBC&L>wN_9k]>La濴Jͮ,͗A[Y5$O&Z\љ[<~f$^9]D 0ѣ"*5Odf49*"[|%4$Lka;qUwkt&NL(Fe Fqěz sd }o93ƄzKD?Ɏs,?a~X3w]R~RBЬ;U3ˣTi 0^ꚰiO;&Jj-ʱR28_;kP[$W!;Fоv"`DێiG >Y3[qpP$ _j{HIݬ[c!ggƩƪBc1kSv'z2CR8)ۀAxY;H|剞ܮBym9Lo(1M]jf[Og$e0Pxtnw1͆]x>D|C4&+4p8Rw 1\:T(oZ*\*J [|.1%k[Yy?͗r7.[;X/EnL쪿^4^S{#^펻;aĭiT{z:)l gӑf'ŭ8KD)TN|J{O죦?mhn.a\EN0\B1M]Vx 89DQ*uEz]%NڱО3]*ڈϋPR> `69 Sw@!wycU7Dh5 yZb x 9=R7I~#hYeҩr/Q4E^mԆjg!/K.5ўL;+Ape{6qwjY/-.ۊdW3-DokZ y>Sps ]+]Ou Er^o|'l14)2^lj2x'.InlEi*mIb|s7A20YjmeVk:q*Nu9X;9+~aΞEd$j_,c a_^A:\]WqVW<+^L)U3}t6^@' ,C`r'ID'R;) s-?}PH'X3~e,A-?6C",iM gdxp-/"xB|n'yHvOؘK~hr>SnMZTLgV M&RYKlH!JZ1eK-\q&o=s7F$rD=9a^G_:HD"?FJ:{ۉvf!r M ?c-7PQ2*E|cc[Z rep4 Bl$* m<>oߥEgWdpDj}Rm GF,K6ӂدR}*3}Ȕ"HL Ty\4LiypK~@)D!sΑ{٪>lh{ߖz1璪4C+!*T>5KPcnipoW]6{iZe [#nDNVzWI ֘ P)3"/!IaK2'NxZuRfh8b^w,4L<6qgpJ}5e}$}ͷil=< 8T!M4 A_a~XKk忸Xq6 lqB&g 'B+ ƚo͢jY? ]bM '[^zsB īcwzIs`oP9]@wD 1uԹ& f6%!r7ruO$cJ?3o\*H6 fA D*d;gF*X!CN`Qz)=,)iK+z qGz;4G=N+&.'uQ̖ r"2?H* ftGkŪnu.s&`%q{5t H=}/ }Sq趕1[AgZQ#v"ޥ>h5 ?* E}VTD9 cZ-uExor 'Ţru]{je/Ea q~4 ~ejL^bA^ޅ45MёyOt8B`þWtMeCi'}>G3Zw (Piӥ֪wYJVgii{bꑍ0Ŕ쉭~W{#,k vjnZfDcKG>џz?>,Ŝ*Z^﮵SE HCo fqf-"{,* R|66NĐc\:-"8jB}6J4L;4ĺO̬F$yIqp"HR6<`yLw(ukBĮhzQ"QDA> tD˜3G4yT[$|LxRT7l L\i[˃?fu:i vSX:.!ڠ{pLHAm% rm.d"LcZT]FΩ Fyp 4V,bA_åWص,py]>kZaA4׸UH$ҸܬH,ӧ AMLiA̜iۿF̊߆JǢ (-p|^R0~N <Ê) PNdX;뼫e\RyѷI\@,* >0aCs}/Lxg&!:$|/lZxB ̋"_MWwvA mWF(q嗃'}}~sʼn'1˶? ڨ y.JQj<{{ҨQ">鍕Ͽ!`u'tXxl>ܺ/ 'UL5t{"زi6GQWᾬ:y"x~".";%8ۤ_uk'3Y6:'Do󏍽e(_~E(Ö4|ljtV uy~_QLhy=P U!t(_bGdqVR,7*J-Vw[\|P-sKAיVK<Ȯt<#汈[ F)<_l4l1Vv߷b\r: ⃿[|KU3J5>td'  h@Vd=IEuQp,-Wp~8Y JT~oVj@N:e"wgWi`C4U!bèpV1.~{@vbA-Iq2[w\}PKCZ)͗4:d{)1SbE6~VW^G&|w~e\33c|:0<$⡐ո[?2Ɓ"-0JXN6x) a H-Ha^Qɿ'ׄv`$S/J$鬸 ^?[~[8 ktDr}KsVE%#^+ϻV! 94h\7:E؝iZP*Xw%h:R+WJ$.9B ɼz" -xu[R)ؙ~s-5T>&^ӖÃoGGw̢D_h$Tl+a+'qr˩#Z>х=f?uK?Ôzc¦dsդ;~] Cõ4iaDlvxFzYڠ n"0|'梂&5Ep- B`Hm~#ʰHa`ԄLKL(#nOΎ^, bU?T(l2%'2Vm=st'62Zi3jbh<%$q[M5+ND(nXwNloTj7;bp3qȼ-KE|gl<)E6fk=/8+Af 0b!P|Yl/*% 9ؿw ^k0fwS%nWm>Wϳe\sknsj:6Q.K !AY!BΟ &ӥ6i  v V*2%K_7Y'cjY@` ?X,0Z8[o ,/kh9(RD&7lbTY}"[t$ӑ>`3'}K\蒥&)Ő%i& V35`")jK Q'&= ejmE0T3S*H'"rl:;zY?cl*epQ5Mn|vL+K :CGФd˛/i0fj('$1 oIt(jøp?yՌ_f`UL!lk`6qQ'X16@.Ts0CBgHxO*.g@IA'[#5x:SꃝQ!l e["!Vf=0w- $Lz2֫YWir_$G)+hQGH~o Znc.{<F%5 Q?:ܐ{=DO!iZKm.s >wRm-7h2b*^ R^ڇ/GGȇxYeLgɳL@(1WHg 1bt F0Ta ܍M5\pTh*?bE-3*wKQ?'cxFOObFl(XG^Qw8pv:1zŴ3izr]*I#R0+ #S*l ;S톀1E ;ʴG)jͪw ȫ3?ցzꈚ1x} BgSb3Pxc;'$HuҞrm+D#9uuCuDo: +Pե =֜h|6J.[WQC2Iv|lWVGd\L7uQ׫CBNACC!Bh;E.-3sMoP$  6RErL b^ dٸ^D!i?Q|`A^ c/eKBz) vPŝXl?I%јG6LթķӠ2542 Vm Xg'U^pbgus_Ì 5}Os0i'zc(M 9!kvmC%z)pXƢ Y ZIJgE8znE{AG/tt4bt }~0ǺkETѼU杍ZT\pb_-rmFhm(9!cHЉݐG+!Eq4RLginq oT[se x,K#L^TJ ec♏זH"ujxNHz=޺$qfu(󸾇"n?UA:jĤͷ/ԄgW* 8weQ5.#-υ[!Ž5aIF>X¥`8Y/.eԥ&x lm QRhۺ4y:BL2OGEd^S%_CD,ZjEOLNBhlkKZ\PAb[\޾t@S|;oB>yL0wwoP]l4`-7=<1Yw%*nLTd/H\Ѻ9Xhe\v)!mݫ%}T֞c1|A5Lj/=FM GN,;E/ɣ=,zsޝcBᚿW;>9 =R.BѦ.-`h`ө >;.b#qc嫺hW&TV+fƬ7߈v&@}]0Gf p͊Ry##`m WhǭcXumʿ8^wj/ͼ̨G~b:# ϞP~^/}7_nWyAIDmKkQtɑW}@c3ӊFpGy7]Q8L^ ]ݔ>*ݥ%Q`7)8uvi@.ʨ ` :T@* ^N#`Mv-u s|+96i]$h+ڣoW9b=,MB:9¤b&:uc.5D8y2'O`)Y@id0_oR ;t*li&DV]_P(_P4ȠVUj [?'\!qIuh_RLdwl}rV<6^ǰKAc !Y's͵ Z S~|TKÓ8q/4R0'_V".ѥ6mJ4~:e#:)6۩nsQ23%3 O3\4q]L֒g٤Ͽgp7T c,ONh{$Hކ %n23,,#_vhX,􃕏jl3k6S޹|J0pdl;,J5)TՂHi.Vx t_Ih:*zh4z v4;Nu3LQy5t4l*Ď^w-ɎjpCW2&!?Jz4X-|(1. l>&EۀFH.+?i +SW\+5F0Du<fMhj~ 34[C>DܢR8CsJqL}&M֮?sX~O5fXUw_#Jh)_:$`ͼ2eS/}@2ejߦeJ o9NĀgm6Ζ|}<_ւRvhz?l8&8i?~R~<#)~M+ӿgfw'ؓAƁ d(+:}ej+Vb?`Vu}3f$='STSP4]">Ǘ^~"\fFD -ƢN{';\ 8D5g ӳҷޥFU_/qQ#"\? L$^\6ouAȟ]o"#%z07J46a$lsP]ȡĴpD7q^L̑E8 ; ɔ8hWfsJG^OPooq DI[U*n ^aBpQ&V!<6f@[G^6@TJ[ogf (Vs|G H}Is$d5nLFp$y:u5`g{jZmU$)ῦ'R/K?O/՗Dw@YZ& ܘc~N0Rxlr?E ?@}K{TOe-9|%VdNg yFjb_yB0tcG>dH\OVȜݛTs兒&Pp̠֙ѲgX8 Ɵ{KwXw%0 OH aE) G7_OEY}5%.RG|–u!tUf=Wp"u(<) ]=8&,+݋ $-$),5IB#VWQV_2ѡul!ILGE!+ bl_Pr@ N!91"e%ȇ1Z/$RqbH 5Pn-c07t9d؅NO4%ZfAuR">DQ~ܒ?Y*QH;lZb2E{8G/ `S}ɄfS~s8\˖Y_lm"]Mᖆ~%>!&r9-2qfg+`i1;j ɳ!j$7NhHN2Aj톱˦cnANT$fgQRfv,(4"k~bދTu 2E]$5P8嘙d&h)PGˌ| g7Ҭ\ZrЗ-LmX;A|>*(L _Gi2G̑ojHJB,G=s@DOn =`MX, :JR7Ʃ.\Y/f훁~5g \RFdJOUUGmVj~P u7}oc6sYo6#MiYlo̽ Z,~tsLf$.v-#j-|}cĖ: FjݗAW LtV92r宆0G1lb %򄙡SF,+a> AqWzQ,}*Xif^j+6تO⇡"J- "VgiA'mHj~u;mgO0 S!Wsz8Vx̭-P%e*UE1WC:_M}@)}2v-Z?>CQ+%M[狗 g|lH\y) ^QШRq/a((E(wlm:3/{5(/Ij]; ɦH p 1z暻q`LFj.Tne?Lzк%]ӦHl^ @bG7w ]@uRht4ҵQm. .\j wJ66tEl,6CYV[=NBMR=Rm\_UqoOU OU<~̚y=&4î)D ؞pʡD͒Wķn[TtAȭo~)cbi2Mަ A<!qQW :NU_/L]bund:1↠F!AU96{ABL,C <ަg΋tS"g)VM(FȼU/Hd~6誉|>|IS`l]ziYxӁ̯kKa۶9%njVBIȻrшyz2{tR9.cD^ /d ]%6sIlDSூw P_Uxu!;~6ra\Di nLF.}BQ+N6}" Q& zڜp̗\ c"!\F31YwIynM'[#C{rs*NφfAKٺVEs n6 QrC!0s`,cnK 2`1pigţVJK?ɤٔlPtN{47<+.vcT{#Z"+q?E0 j@<9mkX,z|Vfx#s~QDiƶ*'œqTd#F}iŸ}& O קYbDZukN$~_3o٘ &l "*rf#\? tB&zn UM jN8NFE{TaL_+ Xm R[r;W: =/AT:׈0Pp&\ucB!u]M8Cl^ ")$8S|StFooHEoAyi}^ ( SLgYQ{ OZk#ѰXk]@~z ^Y}ɥC aM8hg:Jpc)OH24It0.х#7]itp=E!G6q L5:eQ)$ "-^r{U;{+fB,R 9<>xΨFNvSem%v;.RqB~rNɹLv~_ F/DY.զN'+S,āx5{z9㬫[x/)v[w=dƇ{QcҐ*/rG 9wFs;BH0RMp%qoE]a#pǴd7R3i)wk۝AW}/B{s<Γ a˶D`^y ǻ,ʹ(δ(1`T. i ='$Z OΜGѮrfj'Am+AIDQ6veܾ%fY;Ss 'IT՗b v!0rROV-̫kyBT.0W&,*3 9*NIzqG84LJ.ͳnO(-5:܁<D)jxBö Wi3>k„FNe q&"ClGӝ$Ub*iY{Rh#qk&Ծ$qɝ6}B-D=d(^O! O`}p**}ΞAm#+PƊ'X $\莢 m](7o&e OxHd\A@)=\3#ނ)dM:f򛤑OgN 8JkTq#E@oJ=|r}so,>%N3LfO:=t9 eûo2gV8؄oa`wˎmkj٪g0p18ۥ ./y@b7rrء19 fu@!{>ȌKA ~-cOިzޚ7ns~#l4/rv0i 6nᝨ$;K!xre}=Rt)O*OFS1""\L}E5Ԫ[+ѩ8B4QfnU{Wu!1yef<}a{eJ2C U6szY~@4$h?x߀;A^yb}E'`ꬎ,aډq䍞C,seO$Y+6]Qں]q p5 q6l}嘻aV$&j8;X"2e&3j\Us2z="lR hiS T v UunүqVnsTR 4 ˛ c&{gʰ]!M^D|?Fcltߤ_ ?M 04z>!57"u2-x (qI[4Rˌ$YJ*ݖRrCZЕoIy\I yjA[@f2F3mEF9Dj5ifmk39QBl*,<,Iw9ny!&dvQ[g@*oa*h>HЍ"-vCB#\IhM_ԉk!C( #|!f®8^ۓ]f34G~N3t8g8<@c<%pZv:ahLNr+j xs c;-\UT5`El3⸑>l4}=#1t:Ɛ=yc*G5c Id=S589f;۴2L]"|{crxb{iLl!F'|ML^)r% U BGM|.@ݴ_<5Z%[+Ke9cJ`}e]Hx!c3:sN# 424I0V}UI_M*fjNlώ Ayw1a: mj 3 wfÆz|3/iJ΋Bo.w)Z%1&# C>e Ԗ3^v<Σۼ1 1K1\>{Ϙ9Ar:~<)ymئ{Ҷ 6Ӥ=b 8uV&*oTLxպs2`Vg>zZ}(]9O0%̖ |͖WAg(br1"H6Wy݌|u3z4 Ϋn; s.I:F=8.ÕFٷ@U^ רƓGn5H!r>ڮr .qd龁3*:kP$BxW3C˘Nm'5ҵ_^2sPo\uaU|ƽS'DĽe^~IjA5FQ .GínI (O5)gGsz 3;"ɦO aPp?M${޸@*Ga]Հ~n`4[~yfyCZrnZf+PtVt6t_Ӧ-N(bfŚТxyrd^@l؝sXDxO!_Izd9'?XJۓ|"\%dzN/.C_/M㖖t€%IHK!' lݳOu\Xg_>%+=3U=`!u4iSp34v RDd#g~,orFKG’Yn;H@KTә1 i#}]يޔ;?:LD4i +VҿTv}[p@u|o:X}0 7jJyq{w+䴾:~ՇԽ׿3hQ62Ua+ڌ6 _8\\`TP+`<5^*D]!XP.2m>T@/&{V'WKxj@X!|Zݯ ;zMg}o,[4Y)iϫ D]/O*ղJ5@ ߱c"!$,"P@Yk9ySx:P!krEG{kCrčRLn<,rj/,b $5ZMjqE,ZAT$)|5^tsaJ5/+F.b*@ jE-Z0A ;/ [0nM>ݎ94tS9\׺H}HƽJxvLszEb 4?@f#u¬QhT5kzȼ{'~uY; Nzq3fZG4drs?JE.ikxU"4(O@M(< L7u[&a[Cи/9N7Mђq<8Vlh,n_Ǻp0 ec}+jM/P? YY:GY?[ \H]B ~:k*-꧿k#pvޠ\@+\u8uMIE&Ҥ"vХ̗mǹ-dq >._PRyމvRyS*;F^iauN?LT:*WtsTIaaOg-yxoo6.b@R](BC($'Q0h N0d6[mZ?('>m;k ] -勒unfN6Eh`{,a4f^)kqi.dv((؜lp'۞9 /.tYs8Op+ ߭!Prp &Rj'㮓'=C(Ve97uƙ<馊E95YAσg4hC*؍Xy=-fy~%&DoKWq?xe8)鐣tQtBy.` $hm P$<2,hXCjtem"C4,PbаRt_X$z$z coeb(/jL/耄9m[h7;+KU"}=:5t4+FdpY5()rHyܩE*|` a1l - y玅ɑX|,{k|]˴N o"AYu$<G>ml0I,m^uLZ~2*r+QyrJSXIt_~<*yjxr)S]8O <֕|LOi ޵B $W%[ Mhj*(['ck9>N85_0fW3'avu'dF|^r%h;Ls֡^<#s5R;_S/ %5b6¿Lm+[ì(') ؓ%IΤ "d4p%;pir.̷/g_8]5?#⾥DxD1&k܆Y2J%OHa69^ػ8,+1 MVʥ,0l6$ Y"qE#4n?{ZY"מiLP{?,Q©5$}=s2ߣuh@7qWX[7$|Ս2DaKTo&AX*FV$~n_ Lʬَ̆vp3Y`#n6Ng/6_ښ2~ Jk#tEf@r^@]K:ҍBsvBYtzfmMc^٘a;ԛ+'<38ud YB9J`8#(ILHup1(j&b8 bI..жQ^!6/|6hon 0I|]Skk;$az>TL#C}ҐyW{PA٦]H![%}`BW a]vIʼ7By򴍂4Dρ4"љ oJӵI-R$ŨVPwdjcSO75޽[4'{Oi)7X[Dr҅c267ИUq/]'aٙQ"Z80,ЃEF?* Bh_F~IZmH߹˜ONYj簏jFJûQa7R?9AƿIxW9U X絝1;b5op;k1PWɻLMkR1PJjƢ-FCsMT=ؒ9 $ oJet?qC=Zj"jM;) r=oˠ.۷>9/&{e8kRS6Vaļ-b?i+~fM@m!U%]Q "'W8[+N U@,')_|w]GUU(B?߮MgttJɐUE*zn*Qޫhu#b9Ged'B{@3`G!|*RրSI~M81Sew@yQn._o~B7bt`&>c]: ,ڂ.X(x Inc#V WR.nʺ,M#aƤl欤rƊ` @7c,J, EJy'SzdE3NV4;#($7routݞOԥ gd1jܱWt0.T´;4%I24B #7m(rjJ灭a8%@y~WWԁp1ev7IG/{VK!o!>/I99ŰTE9b6_/vOnd'ۖz/kjWK?sśZʧ_L*2 .7*7Ӻ L~AY}:z5YK(:qdXтFG{)52D%פDg wRfuD5  ^8kpAxO~͓)L?+BlKGBUjRNDgMMNx5@O{Qڱ1ì{aCޜYֆ%Okھ2}&s+v“8|/ 䔎iHhT%b׾? t/-O9eMH 7n&Cƴc;3\/l5-7FeZ,R QsJ2ga@e1^ҍ:_F&8ex6C;%DdY=!Lީf.1WhxH#|lo~(eCy/۞Q ?!N/ir9uZ)?`#^*X"~įIyH2<#0r_<7@5}}^(H9Y" L>Ը4afrPǰvL2I3V6]4QMx;uL9H[t*}YM(dHxn-aҤXp wLGOE1Zw cL6z~k1/9mKCq\,'ᣳ+SUH[ {v9&!,l ,OӱƆIxzHZf"}zi>ҹGR#ڔMBp>`I3JdM9ƫzk@))a t/(m{25r25dNB7w0.F|hy]+ 6-U! W$~RgMP("kAbk<z[gx%/V3@~ p\\dF6yTGiߚ_(;ߧDwqàqɰ!!sV`@ :C`/ !n!"5bq#¸>#56S(hCC'=F[fWcg=4>G%9-r{la+r&&n]hՌchNY/\aWϻ[.K25_2 S)SheFx*P^7*]Ԛh&{gZJNy48aU.t?.}x~2K;=|NL&A$r*y{džx8:Qq8'!^/G՚w%)ctI[9BPq'6RZT'jj\B. _Qr)3Z$>6~@F iZh$ukCVO1#lxv}AP=v ΅ kXGEiwf@vt9Ae(Bvtk^{^dEv-Ga8#>-o4%#?e n<\R ?ы@G!k]@\=B)7ӦW߅šN.YU֌V6Ǩ{ W /]s(>M-8513N:wL S+ag-ɳ518_m\%^qX2PW$ת#OXu]GI$!p .u[uV+It5sr8Ӕ^c%цk2I"ZAI?+ x0 tĴcDUoTvِ=]獗>FqOQUх$cyͫ#ù :Bz:h/ZkrqոL<;>2yz16vUў^K4=k{9}ݨ.w1#I}W?}Aqx.Ui|,JmcuOsa^2X2HDێs,NGYL "\ī,I~~(ɰZI=[93ű\=hPNOʺN9ctGwQ,cUI5k?8_\"8lXPAv_A Չ]]v>ϒ68?1zHw)N1t ^5agO)%uJX>&K=1 TAJ! ~ҏؤ_@{ɩ>H=n[ܖ 09ݬՖ5k\|֒ < f*n-K_m9> Q`h-0 4ꥼ1Y9RB=xEʬaz=z: )}1DE$c:;lNjw. |JAPkkAXNpסH<ӊuNdQW¬ Ǘ {%;S3b63YݶNʋ)tJm5H h|YŒ3SxD`bs~]ٝS=dixXߘicLuDanMe_Ŀ.V-fvyiˋvd~@c}oZ<#O)7eQPr>@g#p%qxRq)`v/SK K=pRsΎ""f$رa6Z;aADzrw W{,Lw0t8LX*Cva% &h+:N: $i`,xCp"K}C P <tQtC ƕ5+z%V#>4G(@2q.%:͖w/U[RaմR I-yb6\'x< m2$mմ'Ag|M9hUQF4uZe<C?](G\Χsdzl"20Nɫ'$2q\=kMR@I'(Ud8d4ti8? d3w؏vƟ~S]gHsF^U> %ɓXZ12Hw).TFr:wĿ#;b2UC:q4CPSYsB颥2$hj?җޓ! 3(ʊ?[m^GAlbpӹ-Dhuog Alr0'@̋fq.> Γɼ(mDhn+l2%j*k'׀ O.EXI3kiִg;z`+33_ʣ&"0tD"Q&_IM>cۏVтN2{;mC0]| *SgC}u+@j"rb{)}aon%p1i2߻:c`N@Cv9Nr|7vxС7N𰥝iju t3Dg#u-*?ѷ`' y~%jֻ]q-2ؖf8X\R5Z9OR0wr,_6-h/ꔜLŁhtI2}:Ԑ~m\W;#[s (m]4ղ@pHp$IO_!\L үp啪&V5E6ىbBˆ;L؄Jn+.d$t8u{:B@y&z/L76p)Eg\'ofHD)3̙`HH! <ړe Z^)j\/J1=:wc[ <n 1Le_3"A-jCT0jKnA@Qį8Z/tnBXBHUstqxC1.E6pKuɪ_^LۑHҺh 4|gk 5XEr LY NbfKCSפKR&"?AYi}2(KԂl=:̥Xi+XK)GW_j}O82đ^1 X 4h+hh)xq+ȋ˃5ԙ\Url߶y%_ ]ltTTj"nXs;2xFf o~cT4EIJa X6*X j_(2]*ou1Oǒ-2uLJBcrv=IٽB9E&|'Dp4k$ Dk7FtQ0HOb5$0Ȧ l!~ȃ?%/ N߰Eħ@]dT7!z$dC]DTܬQ_ =plH7J!t:ץnH,X2 NQ^ \PdE}܂5)=F6_J:p^#65zJ)y=u?؟