sssd-common-1.13.3-56.el6$>^s-v><D?4d  6  J^|yrr r pr 8r  jr  r"r$r''4r(*Pe+e3Be344(4684<9;D:.>?BG(rHrIrXYZ4[@\|r]Dr^Û>bod efl0Csssd-common1.13.356.el6Common files for the SSSDCommon files for the SSSD. The common package includes all the files needed to run a particular back end, however, the back ends are packaged in separate subpackages such as sssd-ldap.Xҿc1bm.rdu2.centos.org0hCentOSGPLv3+CentOS BuildSystem Applications/Systemhttp://fedorahosted.org/sssd/linuxi686/sbin/chkconfig --add sssd # sssd-1.8.0-24 changed the startup order # We need to make sure this is always updated on # clients /sbin/chkconfig sssd resetpriorities if [ $1 -ge 1 ] ; then restorecon -R %{mcachepath} 2>/dev/null || : fiif [ $1 -eq 0 ] ; then /sbin/service sssd stop 2>&1 > /dev/null /sbin/chkconfig --del sssd fi HSl@t3,HK/ @+,W?8H,KuCp%|v*RJ1 G?_68qH(sR Z B   D  @# ( ymh 9U   L? +(ZuXP큤AAAA큤A큤A큤AAAAA큤AAAAXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿVpnVpnXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿXҿ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@@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-1.13.3-56.el6.src.rpmlibsss_sudolibsss_sudo-devellibsss_autofslibsss_autofs.solibsss_autofs.so(EXPORTED)libsss_cert.solibsss_child.solibsss_crypt.solibsss_debug.solibsss_krb5_common.solibsss_ldap_common.solibsss_semanage.solibsss_simple.solibsss_sudo.solibsss_sudo.so(EXPORTED)libsss_util.somemberof.sosss.sosssd-commonsssd-common(x86-32)       @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ libldb(x86-32)libtdb(x86-32)sssd-client(x86-32)libsss_idmap(x86-32)libini_configinitscriptschkconfiginitscriptschkconfiginitscriptschkconfigrpmlib(VersionedDependencies)/bin/sh/bin/shrpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)/bin/shlibbasicobjects.so.0libcares.so.2libcollection.so.4libcom_err.so.2libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.6)libc.so.6(GLIBC_2.7)libc.so.6(GLIBC_2.8)libdbus-1.so.3libdhash.so.1libdhash.so.1(DHASH_0.4.3)libdl.so.2libdl.so.2(GLIBC_2.0)libdl.so.2(GLIBC_2.1)libglib-2.0.so.0libini_config.so.5libini_config.so.5(INI_CONFIG_1.1.0)libk5crypto.so.3libkeyutils.so.1libkeyutils.so.1(KEYUTILS_0.3)libkrb5.so.3libkrb5.so.3(krb5_3_MIT)liblber-2.4.so.2libldap-2.4.so.2libldb.so.1libldb.so.1(LDB_0.9.10)libnl-3.so.200libnl-route-3.so.200libnspr4.solibnss3.solibnss3.so(NSS_3.10)libnss3.so(NSS_3.12)libnss3.so(NSS_3.12.5)libnss3.so(NSS_3.2)libnss3.so(NSS_3.3)libnss3.so(NSS_3.4)libnss3.so(NSS_3.6)libnss3.so(NSS_3.8)libnss3.so(NSS_3.9)libnssutil3.solibpam.so.0libpam.so.0(LIBPAM_1.0)libpcre.so.0libplc4.solibplds4.solibpopt.so.0libpopt.so.0(LIBPOPT_0)libpthread.so.0libpthread.so.0(GLIBC_2.0)libpthread.so.0(GLIBC_2.12)libpthread.so.0(GLIBC_2.2)libref_array.so.1librt.so.1libselinux.so.1libsemanage.so.1libsemanage.so.1(LIBSEMANAGE_1.0)libsmime3.solibssl3.solibsss_cert.solibsss_child.solibsss_crypt.solibsss_debug.solibsss_idmap.so.0libsss_idmap.so.0(SSS_IDMAP_0.4)libsss_idmap.so.0(SSS_IDMAP_0.5)libsss_krb5_common.solibsss_util.solibtalloc.so.2libtalloc.so.2(TALLOC_2.0.2)libtdb.so.1libtdb.so.1(TDB_1.2.1)libtevent.so.0libtevent.so.0(TEVENT_0.9.9)rtld(GNU_HASH)rpmlib(PayloadIsXz)1.1.131.1.31.13.3-56.el61.13.3-56.el61.1.0-11.el6_8.13.0.3-14.6.0-14.0-13.0.4-15.2-1selinux-policysssd3.7.19-1661.10.0-8.el6.beta24.8.0X6@X6@XS@XOXJXGXF@X@X6@X6@X-X!@X!@X&X X X WWWW@W@W_@W_@WWW@W@W@W@Wi,@WYZ@WPWPV@VJVJVV@VՄ@VՄ@V@V&@V=@V=@V@V@V@VvV%@V%@V%@VVVVVpVii@V\:@VXEVV@VV@VV@VMV2 @Vf@Vf@Vf@UAUUuUn@UmUjUcUcUUUUUJ@UB@UB@U@U?v@U>$U8U.RU.RU-@U-@U-@U-@UF@UF@UUUUUU U U U@U@U@U@T9TTTTTTT@T@T~T~Tk4Tk4T$TTT@SvSvSvS%@S0S<@S<@S<@SSSSSSS/S/S;@SFS@S@S@S@S@S@Si@S@SSS!@SsZSpSNpS 4@S 4@RRRRRRfhRD!R1R%@R @R @RR|R|R|R|R|RRRRRRRRRRRRR@R@R@R@R@R@R@R@R@R@Q@Q@QQ*@Q?@QQvwQkQIQ5@Q0@Q']Q @PPPP@P@P@P-P@P@P@PDPDPDPDP[PPPPP@P@P@P@PPPPPPPP @P @P @P @P @P @Pf@PPPPP @P @P @P @P@P@P@PPPPPPPP@P@P@PpPpPpP@P@P@P@P@P@P@PP@PP@P@P@P@P@PPXPP{P{P{Pz@PqnPl(PaP`K@P#@Oĺ@O"O"OOO@OO~O@OOO@O@Ou@Ou@Oc+@O]@OYOOdON@OLOLOLOLOLO;@O5O1@ObN@NNNN@NNNj@NN$@N$@NN@N@Nx@Nm@Ng\N[@NTN?N:N:N:NNN|@M{@M{@Mߒ@M@M۝M۝M@MM@M@M3@MM>M>M@MM@M@Mx@MM=M=MwkMwkMv@MtMtMc@Mc@MbSM_MQ0@MJMGMA^@MA^@MA^@M.@M9L!L@L@L@L@LNLNL@L@LA@L@Lk@LYV@LRLI@L7@L(L_LLGKj@KK@KK@KK[K@KK~}@K]KY@KO@KKK/c@K+nK"4@KJJ@JJJkJJ@JJp9JlE@J?r@J0J,@IcIcIzI)@I)@I)@IV@IV@I@I@III@Lukas Slebodnik - 1.13.3-56Lukas Slebodnik - 1.13.3-55Jakub Hrozek - 1.13.3-54Jakub Hrozek - 1.13.3-53Jakub Hrozek - 1.13.3-52Jakub Hrozek - 1.13.3-51Jakub Hrozek - 1.13.3-50Jakub Hrozek - 1.13.3-49Jakub Hrozek - 1.13.3-48Jakub Hrozek - 1.13.3-47Jakub Hrozek - 1.13.3-46Jakub Hrozek - 1.13.3-45Jakub Hrozek - 1.13.3-44Jakub Hrozek - 1.13.3-43Jakub Hrozek - 1.13.3-42Jakub Hrozek - 1.13.3-41Jakub Hrozek - 1.13.3-40Jakub Hrozek - 1.13.3-39Jakub Hrozek - 1.13.3-38Jakub Hrozek - 1.13.3-37Jakub Hrozek - 1.13.3-36Jakub Hrozek - 1.13.3-35Jakub Hrozek - 1.13.3-34Jakub Hrozek - 1.13.3-33Jakub Hrozek - 1.13.3-32Jakub Hrozek - 1.13.3-31Jakub Hrozek - 1.13.3-30Jakub Hrozek - 1.13.3-29Jakub Hrozek - 1.13.3-28Jakub Hrozek - 1.13.3-27Jakub Hrozek - 1.13.3-26Jakub Hrozek - 1.13.3-25Jakub Hrozek - 1.13.3-24Jakub Hrozek - 1.13.3-23Jakub Hrozek - 1.13.3-22Jakub Hrozek - 1.13.3-21Jakub Hrozek - 1.13.3-20Jakub Hrozek - 1.13.3-19Jakub Hrozek - 1.13.3-18Jakub Hrozek - 1.13.3-17Jakub Hrozek - 1.13.3-16Jakub Hrozek - 1.13.3-15Jakub Hrozek - 1.13.3-14Jakub Hrozek - 1.13.3-14Jakub Hrozek - 1.13.3-13Jakub Hrozek - 1.13.3-12Jakub Hrozek - 1.13.3-11Jakub Hrozek - 1.13.3-10Jakub Hrozek - 1.13.3-9Jakub Hrozek - 1.13.3-8Jakub Hrozek - 1.13.3-7Jakub Hrozek - 1.13.3-6Jakub Hrozek - 1.13.3-5Jakub Hrozek - 1.13.3-4Jakub Hrozek - 1.13.3-3Jakub Hrozek - 1.13.3-2Jakub Hrozek - 1.13.3-1Jakub Hrozek - 1.13.2-7Jakub Hrozek - 1.13.2-6Jakub Hrozek - 1.13.2-5Jakub Hrozek - 1.13.2-4Jakub Hrozek - 1.13.2-3Jakub Hrozek - 1.13.2-2Jakub Hrozek - 1.13.2-1Jakub Hrozek - 1.13.1-1Jakub Hrozek - 1.12.4-51Jakub Hrozek - 1.12.4-50Jakub Hrozek - 1.12.4-49Jakub Hrozek - 1.12.4-48Jakub Hrozek - 1.12.4-47Jakub Hrozek - 1.12.4-46Jakub Hrozek - 1.12.4-45Jakub Hrozek - 1.12.4-44Jakub Hrozek - 1.12.4-43Jakub Hrozek - 1.12.4-42Jakub Hrozek - 1.12.4-41Jakub Hrozek - 1.12.4-40Jakub Hrozek - 1.12.4-39Jakub Hrozek - 1.12.4-38Jakub Hrozek - 1.12.4-37Jakub Hrozek - 1.12.4-36Jakub Hrozek - 1.12.4-35Jakub Hrozek - 1.12.4-34Jakub Hrozek - 1.12.4-33Jakub Hrozek - 1.12.4-32Jakub Hrozek - 1.12.4-31Jakub Hrozek - 1.12.4-30Jakub Hrozek - 1.12.4-29Jakub Hrozek - 1.12.4-28Jakub Hrozek - 1.12.4-27Jakub Hrozek - 1.12.4-26Jakub Hrozek - 1.12.4-25Jakub Hrozek - 1.12.4-24Jakub Hrozek - 1.12.4-23Jakub Hrozek - 1.12.4-22Jakub Hrozek - 1.12.4-21Jakub Hrozek - 1.12.4-20Jakub Hrozek - 1.12.4-19Jakub Hrozek - 1.12.4-18Jakub Hrozek - 1.12.4-17Jakub Hrozek - 1.12.4-16Jakub Hrozek - 1.12.4-15Jakub Hrozek - 1.12.4-14Jakub Hrozek - 1.12.4-13Jakub Hrozek - 1.12.4-12Jakub Hrozek - 1.12.4-11Jakub Hrozek - 1.12.4-10Jakub Hrozek - 1.12.4-9Jakub Hrozek - 1.12.4-8Jakub Hrozek - 1.12.4-7Jakub Hrozek - 1.12.4-6Jakub Hrozek - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Jakub Hrozek - 1.12.4-2Jakub Hrozek - 1.12.4-1Jakub Hrozek - 1.11.6-33Jakub Hrozek - 1.11.6-32Jakub Hrozek - 1.11.6-31Jakub Hrozek - 1.11.6-30Jakub Hrozek - 1.11.6-29Jakub Hrozek - 1.11.6-28Jakub Hrozek - 1.11.6-27Jakub Hrozek - 1.11.6-26Jakub Hrozek - 1.11.6-25Jakub Hrozek - 1.11.6-24Jakub Hrozek - 1.11.6-23Jakub Hrozek - 1.11.6-22Jakub Hrozek - 1.11.6-21Jakub Hrozek - 1.11.6-20Jakub Hrozek - 1.11.6-19Jakub Hrozek - 1.11.6-18Jakub Hrozek - 1.11.6-17Jakub Hrozek - 1.11.6-16Jakub Hrozek - 1.11.6-15Jakub Hrozek - 1.11.6-14Jakub Hrozek - 1.11.6-13Jakub Hrozek - 1.11.6-12Jakub Hrozek - 1.11.6-11Jakub Hrozek - 1.11.6-10Jakub Hrozek - 1.11.6-9Jakub Hrozek - 1.11.6-8Jakub Hrozek - 1.11.6-7Jakub Hrozek - 1.11.6-6Jakub Hrozek - 1.11.6-5Jakub Hrozek - 1.11.6-4Jakub Hrozek - 1.11.6-3Jakub Hrozek - 1.11.6-2Jakub Hrozek - 1.11.6-1Jakub Hrozek - 1.11.5.1-4Jakub Hrozek - 1.11.5.1-3Jakub Hrozek - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Jakub Hrozek - 1.9.2-134Jakub Hrozek - 1.9.2-133Jakub Hrozek - 1.9.2-132Jakub Hrozek - 1.9.2-131Jakub Hrozek - 1.9.2-130Jakub Hrozek - 1.9.2-129Jakub Hrozek - 1.9.2-128Jakub Hrozek - 1.9.2-127Jakub Hrozek - 1.9.2-126Jakub Hrozek - 1.9.2-125Jakub Hrozek - 1.9.2-124Jakub Hrozek - 1.9.2-123Jakub Hrozek - 1.9.2-122Jakub Hrozek - 1.9.2-121Jakub Hrozek - 1.9.2-120Jakub Hrozek - 1.9.2-119Jakub Hrozek - 1.9.2-118Jakub Hrozek - 1.9.2-117Jakub Hrozek - 1.9.2-116Jakub Hrozek - 1.9.2-115Jakub Hrozek - 1.9.2-114Jakub Hrozek - 1.9.2-113Jakub Hrozek - 1.9.2-112Jakub Hrozek - 1.9.2-111Jakub Hrozek - 1.9.2-110Jakub Hrozek - 1.9.2-109Jakub Hrozek - 1.9.2-108Jakub Hrozek - 1.9.2-107Jakub Hrozek - 1.9.2-106Jakub Hrozek - 1.9.2-105Jakub Hrozek - 1.9.2-104Jakub Hrozek - 1.9.2-103Jakub Hrozek - 1.9.2-102Jakub Hrozek - 1.9.2-101Jakub Hrozek - 1.9.2-100Jakub Hrozek - 1.9.2-99Jakub Hrozek - 1.9.2-98Jakub Hrozek - 1.9.2-97Jakub Hrozek - 1.9.2-96Jakub Hrozek - 1.9.2-95Jakub Hrozek - 1.9.2-94Jakub Hrozek - 1.9.2-93Jakub Hrozek - 1.9.2-92Jakub Hrozek - 1.9.2-91Jakub Hrozek - 1.9.2-90Jakub Hrozek - 1.9.2-89Jakub Hrozek - 1.9.2-88Jakub Hrozek - 1.9.2-87Jakub Hrozek - 1.9.2-86Jakub Hrozek - 1.9.2-85Jakub Hrozek - 1.9.2-84Jakub Hrozek - 1.9.2-83Jakub Hrozek - 1.9.2-82Jakub Hrozek - 1.9.2-81Jakub Hrozek - 1.9.2-80Jakub Hrozek - 1.9.2-79Jakub Hrozek - 1.9.2-78Jakub Hrozek - 1.9.2-77Jakub Hrozek - 1.9.2-76Jakub Hrozek - 1.9.2-75Jakub Hrozek - 1.9.2-74Jakub Hrozek - 1.9.2-73Jakub Hrozek - 1.9.2-72Jakub Hrozek - 1.9.2-71Jakub Hrozek - 1.9.2-70Jakub Hrozek - 1.9.2-69Jakub Hrozek - 1.9.2-68Jakub Hrozek - 1.9.2-67Jakub Hrozek - 1.9.2-66Jakub Hrozek - 1.9.2-65Jakub Hrozek - 1.9.2-64Jakub Hrozek - 1.9.2-63Jakub Hrozek - 1.9.2-62Jakub Hrozek - 1.9.2-61Jakub Hrozek - 1.9.2-60Jakub Hrozek - 1.9.2-59Jakub Hrozek - 1.9.2-58Jakub Hrozek - 1.9.2-57Jakub Hrozek - 1.9.2-56Jakub Hrozek - 1.9.2-55Jakub Hrozek - 1.9.2-54Jakub Hrozek - 1.9.2-53Jakub Hrozek - 1.9.2-52Jakub Hrozek - 1.9.2-51Jakub Hrozek - 1.9.2-50Jakub Hrozek - 1.9.2-49Jakub Hrozek - 1.9.2-48Jakub Hrozek - 1.9.2-47Jakub Hrozek - 1.9.2-46Jakub Hrozek - 1.9.2-45Jakub Hrozek - 1.9.2-44Jakub Hrozek - 1.9.2-43Jakub Hrozek - 1.9.2-42Jakub Hrozek - 1.9.2-41Jakub Hrozek - 1.9.2-40Jakub Hrozek - 1.9.2-39Jakub Hrozek - 1.9.2-38Jakub Hrozek - 1.9.2-37Jakub Hrozek - 1.9.2-36Jakub Hrozek - 1.9.2-35Jakub Hrozek - 1.9.2-34Jakub Hrozek - 1.9.2-33Jakub Hrozek - 1.9.2-32Jakub Hrozek - 1.9.2-31Jakub Hrozek - 1.9.2-30Jakub Hrozek - 1.9.2-29Jakub Hrozek - 1.9.2-28Jakub Hrozek - 1.9.2-27Jakub Hrozek - 1.9.2-26Jakub Hrozek - 1.9.2-25Jakub Hrozek - 1.9.2-24Jakub Hrozek - 1.9.2-23Jakub Hrozek - 1.9.2-22Jakub Hrozek - 1.9.2-21Jakub Hrozek - 1.9.2-20Jakub Hrozek - 1.9.2-20Jakub Hrozek - 1.9.2-19Jakub Hrozek - 1.9.2-18Jakub Hrozek - 1.9.2-17Jakub Hrozek - 1.9.2-16Jakub Hrozek - 1.9.2-15Jakub Hrozek - 1.9.2-14Jakub Hrozek - 1.9.2-13Jakub Hrozek - 1.9.2-12Jakub Hrozek - 1.9.2-11Jakub Hrozek - 1.9.2-10Jakub Hrozek - 1.9.2-9Jakub Hrozek - 1.9.2-8Jakub Hrozek - 1.9.2-7Jakub Hrozek - 1.9.2-6Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-3Jakub Hrozek - 1.9.0-2Jakub Hrozek - 1.9.0-1.rc1Jakub Hrozek - 1.8.0-33Stephen Gallagher - 1.8.0-32Stephen Gallagher - 1.8.0-31Stephen Gallagher - 1.8.0-30Stephen Gallagher - 1.8.0-29Stephen Gallagher - 1.8.0-28Stephen Gallagher - 1.8.0-27Stephen Gallagher - 1.8.0-26Stephen Gallagher - 1.8.0-25Stephen Gallagher - 1.8.0-24Stephen Gallagher - 1.8.0-23Stephen Gallagher - 1.8.0-22Stephen Gallagher - 1.8.0-21Stephen Gallagher - 1.8.0-20Stephen Gallagher - 1.8.0-18Stephen Gallagher - 1.8.0-17Stephen Gallagher - 1.8.0-15Stephen Gallagher - 1.8.0-12Stephen Gallagher - 1.8.0-11Stephen Gallagher - 1.8.0-10Stephen Gallagher - 1.8.0-9Stephen Gallagher - 1.8.0-8Stephen Gallagher - 1.8.0-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5Stephen Gallagher - 1.8.0-4.beta3Stephen Gallagher - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-2.beta2Stephen Gallagher - 1.5.1-68Stephen Gallagher - 1.5.1-67Stephen Gallagher - 1.5.1-66Stephen Gallagher - 1.5.1-65Stephen Gallagher - 1.5.1-64Stephen Gallagher - 1.5.1-63Stephen Gallagher - 1.5.1-62Stephen Gallagher - 1.5.1-61Stephen Gallagher - 1.5.1-60Stephen Gallagher - 1.5.1-59Stephen Gallagher - 1.5.1-58Stephen Gallagher - 1.5.1-57Stephen Gallagher - 1.5.1-56Stephen Gallagher - 1.5.1-55Stephen Gallagher - 1.5.1-53Stephen Gallagher - 1.5.1-52Stephen Gallagher - 1.5.1-51Stephen Gallagher - 1.5.1-50Stephen Gallagher - 1.5.1-49Stephen Gallagher - 1.5.1-48Stephen Gallagher - 1.5.1-47Stephen Gallagher - 1.5.1-46Stephen Gallagher - 1.5.1-45Stephen Gallagher - 1.5.1-44Stephen Gallagher - 1.5.1-43Stephen Gallagher - 1.5.1-42Stephen Gallagher - 1.5.1-41Stephen Gallagher - 1.5.1-40Stephen Gallagher - 1.5.1-39Stephen Gallagher - 1.5.1-38Stephen Gallagher - 1.5.1-37Stephen Gallagher - 1.5.1-36Stephen Gallagher - 1.5.1-35Stephen Gallagher - 1.5.1-34Stephen Gallagher - 1.5.1-33Stephen Gallagher - 1.5.1-32Stephen Gallagher - 1.5.1-31Stephen Gallagher - 1.5.1-30Stephen Gallagher - 1.5.1-29Stephen Gallagher - 1.5.1-28Stephen Gallagher - 1.5.1-27Stephen Gallagher - 1.5.1-26Stephen Gallagher - 1.5.1-25Stephen Gallagher - 1.5.1-24Stephen Gallagher - 1.5.1-23Stephen Gallagher - 1.5.1-21Stephen Gallagher - 1.5.1-20Stephen Gallagher - 1.5.1-17Stephen Gallagher - 1.5.1-16Stephen Gallagher - 1.5.1-15Stephen Gallagher - 1.5.1-14Stephen Gallagher - 1.5.1-13Stephen Gallagher - 1.5.1-12Stephen Gallagher - 1.5.1-11Stephen Gallagher - 1.5.1-10Stephen Gallagher - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Stephen Gallagher - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.2.1-28.4Stephen Gallagher - 1.2.1-36Stephen Gallagher - 1.2.1-35Stephen Gallagher - 1.2.1-28.3Stephen Gallagher - 1.2.1-34Stephen Gallagher - 1.2.1-28.2Stephen Gallagher - 1.2.1-33Stephen Gallagher - 1.2.1-28.1Stephen Gallagher - 1.2.1-32Stephen Gallagher - 1.2.1-29Stephen Gallagher - 1.2.1-28Stephen Gallagher - 1.2.1-27Stephen Gallagher - 1.2.1-26Stephen Gallagher - 1.2.1-23Stephen Gallagher - 1.2.1-21Stephen Gallagher - 1.2.1-20Stephen Gallagher - 1.2.1-19Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-14Stephen Gallagher - 1.2.0-13Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11.1Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#1404697 - SSSD does not skip GPO if no gpcFunctionalityVersion present - Resolves: rhbz#1374813 - SSSD fails to process GPO from Active Directory- Resolves: rhbz#1415785 - ldap_child does not remove temporary files when it's killed with SIGTERM- Apply several more smartcard-related patches. - Related: rhbz#1300421 - Screen locks and smart card is removed - must show a message to insert the correct smartcard- Resolves: rhbz#1400643 - sssd prevents sudo from getting data from LDAP- Resolves: rhbz#1393592 - SSH-CERT: always initialize cert_verify_opts- Revert the ding-libs requirement - Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.- Related: rhbz#1369921 - Members of nested netgroups configured in IdM cannot be seen by getent on clients- Require the matching version of ding-libs - Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.- Fix a coverity warning - Related: rhbz#1382395 - sudo: ignore case on case insensitive domains- Resolves: rhbz#1382395 - sudo: ignore case on case insensitive domains- Resolves: rhbz#1369921 - Members of nested netgroups configured in IdM cannot be seen by getent on clients- Resolves: rhbz#1324428 - [RFE] Discover forest's root SID even if subdomains_provider = none- Resolves: rhbz#1367802 - using overides causes segfault in libldb- Resolves: rhbz#1329378 - pam_sss set KRB5CCNAME with sudo logins- Resolves: rhbz#1382603 - autofs map resolution doesn't work offline- Resolves: rhbz#1339986 - [sssd-ldap] man page needs attention- Resolves: rhbz#1321884 - IPA sudo: support the externalUser attribute- Resolves: rhbz#1299994 - ssh client checks only the first certificate on a smartcard when the card has multiple certs - Resolves: rhbz#1300421 - Screen locks and smart card is removed - must show a message to insert the correct smartcard - Resolves: rhbz#1372681 - ssh with Smartcards - skip invalid certificates- Resolves: rhbz#1329648 - Protocol error with IPA on RHEL-6 - Resolves: rhbz#1329647 - IPA view: view name not stored properly with default FreeIPA installation- Resolves: rhbz#1339986 - [sssd-ldap] man page needs attention- Resolves: rhbz#1327272 - local overrides: issues with sub-domain users and mixed case names- Resolves: rhbz#1293168 - Inconsistent user synching between IPA and AD- Resolves: rhbz#1374813 - SSSD fails to process GPO from Active Directory.- Resolves: rhbz#1377782 - sssd is looking at a server in the GC of a subdomain, not the root domain.- Resolves: rhbz#1365218 - SSSD does not fail over to next GC- Resolves: rhbz#1367435 - Intermittent sssd auth failures- Resolves: rhbz#1369079 - sssd runs out of available child slots and starts queuing requests in proxy mode- Resolves: rhbz#1338619 - segmentation fault in sssd after upgrade to sssd-1.13.3-22.el6.x86_64 when upgrading cache- Resolves: rhbz#1324107 - GPO: Access denied after blocking connection to AD.- Resolves: rhbz#1293168 - Inconsistent user synching between IPA and AD- Resolves: rhbz#1340927 - sssd-common requires libnfsidmap- Resolves: rhbz#1340176 - The AD keytab renewal task leaks a file descriptor- Resolves: rhbz#1335400 - In IPA-AD trust environment access is granted to AD user even if the user is disabled on AD.- Resolves: rhbz#1336453 - sssd_be doesn't terminate forked child process if adcli is not installed- Resolves: rhbz#1312062 - sssd does not pass LDAP rules to sudo- Resolves: rhbz#1313940 - SSSD PAM module does not support multiple password prompts (e.g. Password + Token) with sudo- Actually apply patches from previous build - Resolves: rhbz#1313940 - sudorule not working with ipa sudo_provider- Resolves: rhbz#1313940 - sudorule not working with ipa sudo_provider- Resolves: rhbz#1209600 - Getting ERROR (getpwnam() failed): Broken pipe with 1.11.6- Backport of a more minimal dependency patch to avoid changes to AD provider behaviour - Related: rhbz#1264705 - Allow SSSD to notify user of denial due to AD account lockout- Resolves: rhbz#1308939 - After removing certificate from user in IPA and even after sss_cache, FindByCertificate still finds the user- Require a newer selinux-policy to avoid issues when prompting for SC PIN - Related: rhbz#1299066 - smartcard login does not prompt for pin when ocsp checking is enabled (default config)- Resolves: rhbz#1264705 - Allow SSSD to notify user of denial due to AD account lockout- Resolves: rhbz#1259687 - sssd_nss memory usage keeps growing on sssd-1.12.4-47.el6.x86_64 (RHEL6.7) when trying to retrieve non-existing netgroups- Update sssd-ldap man page for the recent ID mapping changes - Related: rhbz#1268902 - SSSD doesn't set the ID mapping range automatically- Resolves: rhbz#1295883 - refresh_expired_interval stops sss_cache from working- Resolves: rhbz#1268902 - SSSD doesn't set the ID mapping range automatically- Resolves: rhbz#1298253 - Screen lock prompts for smartcard user password and not smartcard pin when logged in using smartcard pin- Resolves: rhbz#1292458 - sssd_be AD segfaults on missing A record- Resolves: rhbz#1262981 - sssd dereference processing failed : Input/output error- Resolves: rhbz#1290761 - [RFE] Support Automatic Renewing of Kerberos Host Keytabs- Resolves: rhbz#1244957 - [RFE] SUDO: Support the IPA schema- Resolves: rhbz#1298634 - Cannot retrieve users after upgrade from 1.12 to 1.13- Resolves: rhbz#1287807 - SRV lookup for KDC servers doesn't work- Resolves: rhbz#1273802 - ad_site parameter does not work- Fix memory leak in the NFS plugin - Related: rhbz#1269820 - Rebase SSSD to 1.13.x in RHEL-6.8 - Resolves: rhbz#1296620 - Properly remove OriginalMemberOf attribute in SSSD cache if user has no secondary groups anymore - Resolves: rhbz#1283898 - MAN: Clarify that subdomains always use service discovery- Rebase to 1.13.3 - Remove setuid bit from proxy_child, RHEL-6 doesn't support running SSSD as a non-privileged user - Resolves: rhbz#1269820 - Rebase SSSD to 1.13.x in RHEL-6.8- Don't own files as the SSSD user - Resolves: rhbz#1289482 - warning: user sssd does not exist - using root- Resolves: rhbz#1279971 - groups get deleted from the cache- The p11_child doesn't have to run privileged anymore, remove the setuid bit - Related: rhbz#1270027 - [RFE] Support for smart cards- Resolves: rhbz#1266108 - Check next certificate on smart card if first is not valid - Also enable OCSP checks- Resolves: rhbz#1285852 - sssd: [sysdb_add_user] (0x0400): Error: 17 (File exists)- Silence compilation warnings and Coverity issues - Related: rhbz#1269820 - Rebase SSSD to 1.13.x in RHEL-6.8- Resolves: rhbz#1269820 - Rebase SSSD to 1.13.x in RHEL-6.8 - Squash in packaging review changes by lslebodn@redhat.com- Resolves: rhbz#1269820 - Rebase SSSD to 1.13.x in RHEL-6.8 - The rebase also resolves the following bugzillas: - Resolves: rhbz#1270029 - [RFE] Add a way to lookup users based on CAC identity certificates - Resolves: rhbz#1270027 - [RFE] Support for smart cards - Resolves: rhbz#1269422 - [FEAT] UID and GID mapping on individual clients - Resolves: rhbz#1269421 - [RFE] The fast memory cache should cache initgroups - Resolves: rhbz#1265429 - If the site discovery fails, ad-site option is not taken into account. - Resolves: rhbz#1254193 - Fix for cyclic dependencies between sssd-{krb5,}-common - Resolves: rhbz#1247997 - [IPA/IdM] sudoOrder not honored as expected - Resolves: rhbz#1237142 - [RFE] authenticate against cache in SSSD - Resolves: rhbz#1232632 - Kerberos-based providers other than krb5 do not queue requests - Resolves: rhbz#1227804 - Group members are not turned into ghost entries when the user is purged from the SSSD cache - Resolves: rhbz#1227685 - sssd with ldap backend throws error domain log - Resolves: rhbz#1221365 - [RFE] Support GPOs from different domain controllers - Resolves: rhbz#1215195 - Override for IPA users with login does not list user all groups - Resolves: rhbz#1196204 - sssd cache holding gid values for nss, but not the alpha group name representation - Resolves: rhbz#1194039 - [RFE] User's home directories are not taken from AD when there is an IPA trust with AD- Resolves: rhbz#1266404 - Memory leak / possible DoS with krb auth.- Resolves: rhbz#1264524 - SSSD POSIX attribute check is too strict- Resolves: rhbz#1255285 - cleanup_groups should sanitize dn of groups- Resolves: rhbz#1251349 - sysdb sudo search doesn't escape special characters- Resolves: rhbz#1232738 - Cache is not updated after user is deleted from ldap server- Resolves: rhbz#1227860 - Provide a way to disable the cleanup task - Resolves: rhbz#1227863 - ignore_group_members doesn't work for subdomains- Resolves: rhbz#1226834 - id lookup for non-root domain users doesn't return all groups on first attempt- Resolves: rhbz#1225614 - IPA enumeration provider crashes- Resolves: rhbz#1212610 - sssd ad groups work intermittently- Resolves: rhbz#1215765 - sssd nss responder gets wrong number of secondary groups- Resolves: rhbz#1221358 - SSSD doesn't work with ID mapping and disabled subdomains- Resolves: rhbz#1219844 - Unable to resolve group memberships for AD users when using sssd-1.12.2-58.el7_1.6.x86_64 client in combination with ipa-server-3.0.0-42.el6.x86_64 with AD Trust- Resolves: rhbz#1216094 - /usr/libexec/sssd/selinux_child crashes and gets avc denial when ssh- Include several upstream fixes related to ID views - Resolves: rhbz#1215195 - Override for IPA users with login does not list user all groups - Resolves: rhbz#1213947 - Group resolution is inconsistent with group overrides - Resolves: rhbz#1213822 - Overrides with --login work in second attempt- Resolves: rhbz#1217328 - autofs provider fails when default_domain_suffix and use_fully_qualified_names set- Resolves: rhbz#1212387 - sssd_be segfault id_provider = ad src/providers/ad/ad_gpo.c:843- Resolves: rhbz#1213940 - Overridde with --login fails trusted adusers group membership resolution- Resolves: rhbz#1170910 - SSSD should not fail authentication when only allow rules are used- Resolves: rhbz#1213716 - idoverridegroup for ipa group with --group-name does not work - Resolves: rhbz#1213822 - Overrides with --login work in second attempt- Resolves: rhbz#1212017 - Sudo responder does not respect filter_users and filter_groups- Resolves: rhbz#1203642 - GPO access control looks for computer object in user's domain only- Related: rhbz#1211728 - Only set the selinux context if the context differs from the local one- Package the localauth plugin - Related: rhbz#1168357 - [RFE] Implement localauth plugin for MIT krb5 1.12- Resolves: rhbz#1207720 - id lookup resolves "Domain Local" group and errors appear in domain log- BuildRequire the proper libkrb5 version for correct localauth plugin build - Related: rhbz#1168357 - [RFE] Implement localauth plugin for MIT krb5 1.12- Resolves: rhbz#1194367 - sssd_be dumping core- Resolves: rhbz#1206121 - ldap_access_order=ppolicy: Explicitly mention in manpage that unsupported time specification will lead to sssd denying access- Resolves: rhbz#1205382 - Properly handle AD's binary objectGUID- Resolves: rhbz#1205716 - Installing sssd-common-1.12.4-18.el6 might install with wrong user account (root)- Fix a typo in DEBUG message - Related: rhbz#1173198 - [RFE] Have OpenLDAP lock out ssh keys when account naturally expires- Handle TTL=0 in SRV queries correctly - Resolves: rhbz#1171378 - Read and use the TTL value when resolving a SRV query- Cherry-pick unit test changes from upstream to allow cherry-picking sssd-1-12 patches - Remove unused LDAP provider code to avoid static analyser warnings - Related: rhbz#1168347 - Rebase sssd to 1.12.x- Resolves: rhbz#1206092 - sssd crashes intermittently in GPO code- Resolves: rhbz#1202728 - sssd-ad requires samba3, but ipa-server-trust-ad requires samba4- Resolves: rhbz#1203630 - SSSD doesn't own the GPO cache directory- Fix warning in SELinux code - Handle setups with empty default and no SELinux maps - Related: rhbz#1194302 - With empty ipaselinuxusermapdefault security context on client is staff_u - Resolves: rhbz#1202305 - sssd_be segfault on IPA(when auth with AD trusted domain) client at src/providers/ipa/ipa_s2n_exop.c:1605 - Resolves: rhbz#1201847 - SSSD downloads too much information when fetching information about groups- Fix PAM responder initgroups cache for subdomain users - Log extop failures better - Related: rhbz#1168344 - [RFE] ID Views: Support migration from the sync solution to the trust solution- Fix internal error codes broken when fixing rhbz#1036745 - Related: rhbz#1036745 - [RFE] Allow SSSD to issue shadow expiration warning even if alternate authentication method is used- Resolves: rhbz#1200093 - sssd_nss segfaults if initgroups request is by UPN and doesn't find anything- Fix Coverity warning in ldap_child - Add better debugging - Related: rhbz#1198478 - ccname_file_dummy is not unlinked on error- Resolves: rhbz#1098147 - [RFE] Implement background refresh for users, groups or other cache objects- Resolves: rhbz#1173198 - [RFE] Have OpenLDAP lock out ssh keys when account naturally expires- Initialize a pointer in ldap_child to NULL - Resolves: rhbz#1198478 - ccname_file_dummy is not unlinked on error- Relax the ldb requirement - Related: rhbz#1168347 - Rebase sssd to 1.12.x- Resolves: rhbz#1194302 - With empty ipaselinuxusermapdefault security context on client is staff_u- Resolves: rhbz#1198478 - ccname_file_dummy is not unlinked on error- Resolves: rhbz#1171378 - Read and use the TTL value when resolving a SRV query- Resolves: rhbz#1171378 - Read and use the TTL value when resolving a SRV query - Rebuild against latest krb5, add a versioned BuildRequires - Resolves: rhbz#1168357 - [RFE] Implement localauth plugin for MIT krb5 1.12- Related: rhbz#1036745 - [RFE] Allow SSSD to issue shadow expiration warning even if alternate authentication method is used- Do not mark the selinux_child helper as setuid, we don't support rootless SSSD in 6.7 - Related: rhbz#1168347 - Rebase sssd to 1.12.x- Resolves: rhbz#1168347 - Rebase sssd to 1.12.x - The rebase resolves the following RHEL bugzillas - Resolves: rhbz#1172865 - sssd.conf(5) man page gives bad advice about domains parameter - Resolves: rhbz#1172494 - PAC: krb5_pac_verify failures should not be fatal (backport fix from upstream) - Resolves: rhbz#1171782 - [RFE]: SSSD should preserve case for user uid field - Resolves: rhbz#1170910 - SSSD should not fail authentication when only allow rules are used - Resolves: rhbz#1168377 - [RFE] User's home directories and shells are not taken from AD when there is an IPA trust with AD - Resolves: rhbz#1168363 - [RFE] Add domains= option to pam_sss - Resolves: rhbz#1168344 - [RFE] ID Views: Support migration from the sync solution to the trust solution - Resolves: rhbz#1161564 - [RFE]ad provider dns_discovery_domain option: kerberos discovery is not using this option - Resolves: rhbz#1148582 - inconsistent group information when multiple ad domain sections are configured in sssd - Resolves: rhbz#1140909 - sssd.conf man page missing subdomains_provider ad support - Resolves: rhbz#1139878 - SSSD connection terminated after failing anonymous bind to IBM Tivoli Directory Server - Resolves: rhbz#1135838 - Man sssd-ldap shows parameter ldap_purge_cache_timeout with "Default: 10800 (12 hours)" - Resolves: rhbz#1135432 - Dereference code errors out when dereferencing entries protected by ACIs - Resolves: rhbz#1134942 - sssd does not recognize Windows server 2012 R2's LDAP as AD - Resolves: rhbz#1123291 - automount segfaults in sss_nss_check_header - Resolves: rhbz#1088402 - [RFE] Allow login through SSSD using multiple attributes- Resolves: rhbz#1154042 - RHEL6.6 sssd (1.11) doesn't return all group memberships against an IPA server- Resolves: rhbz#1160713 - TokenGroups for LDAP provider breaks in corner cases- Resolves: rhbz#1141814 - Password expiration policies are not being enforced by SSSD- Resolves: rhbz#1139044 - RHEL6.6 ipa user private group not found- Resolves: rhbz#1103487 - CVE-2014-0249 - sssd: incorrect expansion of group membership when encountering a non-POSIX group- Resolves: rhbz#1125187 - simple_allow_groups does not lookup groups from other AD domains- Resolves: rhbz#1127270 - sssd connect to ipa-server is long- Resolves: rhbz#1130017 - Saving group membership fails if provider is AD, POSIX attributes are used and primary group contains the user as a member- Resolves: rhbz#1111528 - Expired shadow policy user(shadowLastChange=0) is not prompted for password change- Resolves: rhbz#1132361 - use-after-free in dyndns code- Resolves: rhbz#1099290: RFE: Be able to configure sssd to honor openldap account lock to restrict access via ssh key- Use the correct sudo iterator - Related: rhbz#1118336 - sudo: invalid sudoHost filter with asterisk- Add notes about offline mode to sssd.conf - Related: rhbz#1110226 - Requests queued during transition from offline to online mode- Resolves: rhbz#1127278 - Auth fails when space in username is replaced with character set by override_default_whitespace- Resolves: rhbz#1127757 - sssd can't retrieve sudo rules when using the "default_domain_suffix" option- Resolves: rhbz#1127265 - Problems with tokengroups and ldap_group_search_base- Resolves: rhbz#1126636 - RHEL6.6 sssd not running after upgrade- Resolves: rhbz#1128612 - IFP: FQDN lookups are broken- Resolves: rhbz#1118336 - sudo: invalid sudoHost filter with asterisk- Resolves: rhbz#1110226 - Requests queued during transition from offline to online mode- Resolves: rhbz#1122873 - Failover does not always happen from SRV to hostname resolution(via /etc/hosts) - Remove spurious systemctl call on %postun- Resolves: rhbz#1111317 - [RFE] Add option for sssd to replace space with specified character in LDAP group- Resolves: rhbz#1109188 - dereferencing control failure against openldap server- Resolves: rhbz#1084532 - sssd_sudo process segfaults- Resolves: rhbz#1122158 - ad: group membership is empty when id mapping is off and tokengroups are enabled- Resolves: rhbz#1118541 - Floating point exception using ldap- Resolves: rhbz#1042922 - [RFE] Add fallback to sudoRunAs when sudoRunAsUser is not defined and no ldap_sudorule_runasuser mapping has been defined in SSSD- Resolves: rhbz#1120508 - tokengroups do not work with id_provider=ldap- Fix potential NULL dereference in IFP code - Related: rhbz#1110369 - sssd is started before messagebus, making sssd-ifp fail- BuildRequire the latest libini_config - Related: #1051164 - Rebase SSSD to 1.11+ in RHEL6- Resolves: rhbz#1110369 - sssd is started before messagebus, making sssd-ifp fail- Resolves: rhbz#1104145 - public key validator is too strict and does not allow newlines anywhere in the public key string, not even at the end- Rebase to 1.11.6 - Resolves: #1051164 - Rebase SSSD to 1.11+ in RHEL6- Rebuild against new ding-libs - Related: #1051164 - Rebase SSSD to 1.11+ in RHEL6- Backport the InfoPipe patches needed for Sat6 integration - Related: #1051164 - Rebase SSSD to 1.11+ in RHEL6- Resolves: #1085412 - SSSD Crashes when storage experiences high latency- Resolves: #1051164 - Rebase SSSD to 1.11+ in RHEL6Resolves: #1036168 - sssd can't retrieve auto.master when using the "default_domain_suffix"- Resolves: #1065534 - SSSD pam module accepts usernames with leading spaces- Resolves: #1038098 - sssd_nss grows memory footprint when netgroups are requested- Allow combination of proxy id backend and LDAP auth backend - Resolves: #1025813 - SSSD: Allow for custom attributes in RDN when using id_provider = proxy- Inherit UID limits for subdomains - Resolves: #1020905 - Creating system accounts on a IdM client takes up to 10 minutes when AD trust is configured in the IdM.- Do not crash when LDAP disconnects while a search is still in progress - Resolves: #1019979 - sssd_be segfault when authenticating against active directory- More upstream fixes to prevent memcache crashes - Related: #997406 - sssd_nss core dumps under load- Resolves: #1002929 - sssd_be segfaults if IPA dynamic DNS update times out- Make IPA SELinux provider aware of subdomain users - A better version of already committed patch - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws 'sysdb_search_user_by_name failed' error when AD user tries to login via ipa client.- Resolves: #997406 - sssd_nss core dumps under load - Resolves: #984814 - sssd_nss terminated with segmentation fault- Resolves: #1002161 - large number of sudo rules results in error - Unable to create response: Invalid argument- Silence restorecon on clean install - Resolves: #987456 - RHEL6 sssd upgrade restorecon workaround for /var/lib/sss/mc context- Make IPA SELinux provider aware of subdomain users - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws 'sysdb_search_user_by_name failed' error when AD user tries to login via ipa client.- Print password complexity hint when password change fails with constraint violation - Related: #983028 - passwd returns "Authentication token manipulation error" when entering wrong current password- Resolves: #983028 - passwd returns "Authentication token manipulation error" when entering wrong current password- Resolves: #948830 - sssd do too many disk writes causing delay in "getent netgroup allmachines-netgroup" nested netgroups.- Resolves: #984814 - sssd_nss terminated with segmentation fault- Resolves: #966757 - SSSD failover doesn't work if the first DNS server in resolv.conf is unavailable- Resolves: #963235 - sssd_be crashing with nested ldap groups- Apply a forgotten dependency for patch #254 - Related: #916997 - getgrnam / getgrgid for large user groups is too slow due to range retrieval functionality - Add two fixes for better handling of faulty SRV processing - Related: #954275 - sssd fails connect to IPA server during boot when spanning tree is enabled in network router. - Remove enumerate=true from example in man page - Related: #988381 - clarify the disadvantages of enumeration in sssd.conf- Resolves: #914433 - sssd pam write_selinux_login_file creating the temp file for SELinux data failed- Resolves: #916997 - getgrnam / getgrgid for large user groups is too slow due to range retrieval functionality- Resolves: #918394 - sssd etas 99% CPU and runs out of file descriptors when clearing cache- Resolves: #924113 - man sssd-sudo has wrong title- Resolves: #924397 - document what does access_provider=ad do- Use permissive control when adding ghost users - Resolves: #928797 - cyclic group memberships may not work depending on order of operations- Set correct state of SRV servers on resolving error - Resolves: #954275 - sssd fails connect to IPA server during boot when spanning tree is enabled in network router.- Resolves: #954323 - SSSD doesn't display warning for last grace login.- Format patch to configure sysv script differently - RHEL-6 patch(1) apparently doesn't like the output of git format-patch -M -C and doesn't properly copy files on renames - Resolves: #971435 - Enhance sssd init script so that it would source a configuration.- Resolves: #973345 - SSSD service randomly dies- Resolves: #971435 - Enhance sssd init script so that it would source a configuration- Resolves: #961356 - SUDO is not working for users from trusted AD domain- Resolves: #970519 - [RFE] Add support for suppressing group members- Resolves: #976273 - [RFE] Add a new override_homedir expansion for the "original value"- Resolves: #978966 - sudoHost mismatch response is incorrect sometimes- Clarify the min_id/max_id limits further - Resolves: #978994 - SSSD filter out ldap user/group if uid/gid is zero- Resolves: #979046 - sssd_be goes to 99% CPU and causes significant login delays when client is under load- Resolves: #986379 - sss_cache -N/-n should invalidate the hash table in sssd_nss- Resolves: #988525 - sssd fails instead of skipping when a sudo ldap filter returns entries with multiple CNs- Mention that enumeration should be discouraged - Resolves: #988381 - clarify the disadvantages of enumeration in sssd.conf- Call restorecon on memcache files to force the right context on upgrades - Resolves: #987456 - RHEL6 sssd upgrade restorecon workaround for /var/lib/sss/mc context- Resolves: #987479 - libsss_sudo should depend on sudo package with sssd support- Resolves: #951086 - sssd_pam segfaults if sssd_be is stuck- Resolves: #967636 - SSSD frequently fails to return automount maps from LDAP- Resolves: #953165 - Enabling enumeration causes sssd_be process to utilize 100% of the CPU- Resolves: #906398 - sssd_be crashes sometimes- Resolves: #950874: Simple access control always denies uppercased users in case insensitive domain- Resolves: #921454: Resolve local group members in LDAP groups- Resolves: rhbz#911299 - sssd: simple access provider flaw prevents intended ACL use when client to an AD provider- Fix pwd_expiration_warning=0 - Resolves: rhbz#911329 - pwd_expiration_warning has wrong default for Kerberos- Resolves: rhbz#911329 - pwd_expiration_warning has wrong default for Kerberos- Resolves: rhbz#872827 - Serious performance regression in sssd- Resolves: rhbz#888614 - Failure in memberof can lead to failed database update- Resolves: rhbz#903078 - TOCTOU race conditions by copying and removing directory trees- Resolves: rhbz#903078 - Out-of-bounds read flaws in autofs and ssh services responders- Resolves: rhbz#902716 - Rule mismatch isn't noticed before smart refresh on ppc64 and s390x- Resolves: rhbz#896476 - SSSD should warn when pam_pwd_expiration_warning value is higher than passwordWarning LDAP attribute.- Resolves: rhbz#902436 - possible segfault when backend callback is removed- Resolves: rhbz#895132 - Modifications using sss_usermod tool are not reflected in memory cache- Resolves: rhbz#894302 - sssd fails to update to changes on autofs maps- Resolves: rhbz894381 - memory cache is not updated after user is deleted from ldb cache- Resolves: rhbz895615 - ipa-client-automount: autofs failed in s390x and ppc64 platform- Resolves: rhbz#894997 - sssd_be crashes looking up members with groups outside the nesting limit- Resolves: rhbz#895132 - Modifications using sss_usermod tool are not reflected in memory cache- Resolves: rhbz#894428 - wrong filter for autofs maps in sss_cache- Resolves: rhbz#894738 - Failover to ldap_chpass_backup_uri doesn't work- Resolves: rhbz#887961 - AD provider: getgrgid removes nested group memberships- Resolves: rhbz#878583 - IPA Trust does not show secondary groups for AD Users for commands like id and getent- Resolves: rhbz#874579 - sssd caching not working as expected for selinux usermap contexts- Resolves: rhbz#892197 - Incorrect principal searched for in keytab- Resolves: rhbz#891356 - Smart refresh doesn't notice "defaults" addition with OpenLDAP- Resolves: rhbz#878419 - sss_userdel doesn't remove entries from in-memory cache- Resolves: rhbz#886848 - user id lookup fails for case sensitive users using proxy provider- Resolves: rhbz#890520 - Failover to krb5_backup_kpasswd doesn't work- Resolves: rhbz#874618 - sss_cache: fqdn not accepted- Resolves: rhbz#889182 - crash in memory cache- Resolves: rhbz#889168 - krb5 ticket renewal does not read the renewable tickets from cache- Resolves: rhbz#886091 - Disallow root SSH public key authentication - Add default section to switch statement (Related: rhbz#884666)- Resolves: rhbz#886038 - sssd components seem to mishandle sighup- Resolves: rhbz#888800 - Memory leak in new memcache initgr cleanup function- Resolves: rhbz#888614 - Failure in memberof can lead to failed database update- Resolves: rhbz#885078 - sssd_nss crashes during enumeration if the enumeration is taking too long- Related: rhbz#875851 - sysdb upgrade failed converting db to 0.11 - Include more debugging during the sysdb upgrade- Resolves: rhbz#877972 - ldap_sasl_authid no longer accepts full principal- Resolves: rhbz#870045 - always reread the master map from LDAP - Resolves: rhbz#876531 - sss_cache does not work for automount maps- Resolves: rhbz#884666 - sudo: if first full refresh fails, schedule another first full refresh- Resolves: rhbz#880956 - Primary server status is not always reset after failover to backup server happened - Silence a compilation warning in the memberof plugin (Related: rhbz#877974) - Do not steal resolv result on error (Related: rhbz#882076)- Resolves: rhbz#882923 - Negative cache timeout is not working for proxy provider- Resolves: rhbz#884600 - ldap_chpass_uri failover fails on using same hostname- Resolves: rhbz#858345 - pam_sss(crond:account): Request to sssd failed. Timer expired- Resolves: rhbz#878419 - sss_userdel doesn't remove entries from in-memory cache- Resolves: rhbz#880176 - memberUid required for primary groups to match sudo rule- Resolves: rhbz#885105 - sudo denies access with disabled ldap_sudo_use_host_filter- Resolves: rhbz#883408 - Option ldap_sudo_include_regexp named incorrectly- Resolves: rhbz#880546 - krb5_kpasswd failover doesn't work - Fix the error handler in sss_mc_create_file (Related: #789507)- Resolves: rhbz#882221 - Offline sudo denies access with expired entry_cache_timeout - Fix several bugs found by Coverity and clang: - Check the return value of diff_gid_lists (Related: #869071) - Move misplaced sysdb assignment (Related: #827606) - Remove dead assignment (Related: #827606) - Fix copy-n-paste error in the memberof plugin (Related: #877974)- Resolves: rhbz#882923 - Negative cache timeout is not working for proxy provider - Link sss_ssh_authorizedkeys and sss_ssh_knowhostsproxy with the client libraries (Related: #870060) - Move sss_ssh_knownhosts documentation to the correct section (Related: #870060)- Resolves: rhbz#884480 - user is not removed from group membership during initgroups - Fix incorrect synchronization in mmap cache (Related: #789507)- Resolves: rhbz#883336 - sssd crashes during start if id_provider is not mentioned- Resolves: rhbz#882290 - arithmetic bug in the SSSD causes netgroup midpoint refresh to be always set to 10 seconds- Resolves: rhbz#877974 - updating top-level group does not reflect ghost members correctly - Resolves: rhbz#880159 - delete operation is not implemented for ghost users- Resolves: rhbz#881773 - mmap cache needs update after db changes- Resolves: rhbz#875677 - password expiry warning message doesn't appear during auth - Fix potential NULL dereference when skipping built-in AD groups (Related: rhbz#874616) - Add missing parameter to DEBUG message (Related: rhbz#829742)- Resolves: rhbz#882076 - SSSD crashes when c-ares returns success but an empty hostent during the DNS update - Do not version libsss_sudo, it's not supposed to be linked against, but dlopened (Related: rhbz#761573)- Resolves: rhbz#880140 - sssd hangs at startup with broken configurations- Resolves: rhbz#878420 - SIGSEGV in IPA provider when ldap_sasl_authid is not set- Resolves: rhbz#874616 - Silence the DEBUG messages when ID mapping code skips a built-in group- Resolves: rhbz#824244 - sssd does not warn into sssd.log for broken configurations- Resolves: rhbz#874673 - user id lookup fails using proxy provider - Fix a possibly uninitialized variable in the LDAP provider - Related: rhbz#877130- Resolves: rhbz#878262 - ipa password auth failing for user principal name when shorter than IPA Realm name - Resolves: rhbz#871843 - Nested groups are not retrieved appropriately from cache- Resolves: rhbz#870238 - IPA client cannot change AD Trusted User password- Resolves: rhbz#877972 - ldap_sasl_authid no longer accepts full principal- Resolves: rhbz#861075 - SSSD_NSS failure to gracefully restart after sbus failure- Resolves: rhbz#877354 - ldap_connection_expire_timeout doesn't expire ldap connections- Related: rhbz#877126 - Bump the release tag- Resolves: rhbz#877126 - subdomains code does not save the proper user/group name- Resolves: rhbz#877130 - LDAP provider fails to save empty groups - Related: rhbz#869466 - check the return value of waitpid()- Resolves: rhbz#870039 - sss_cache says 'Wrong DB version'- Resolves: rhbz#875740 - "defaults" entry ignored- Resolves: rhbz#875738 - offline authentication failure always returns System Error- Resolves: rhbz#875851 - sysdb upgrade failed converting db to 0.11- Resolves: rhbz#870278 - ipa client setup should configure host properly in a trust is in place- Resolves: rhbz#871160 - sudo failing for ad trusted user in IPA environment- Resolves: rhbz#870278 - ipa client setup should configure host properly in a trust is in place- Resolves: rhbz#869678 - sssd not granting access for AD trusted user in HBAC rule- Resolves: rhbz#872180 - subdomains: Invalid sub-domain request type - Related: rhbz#867933 - invalidating the memcache with sss_cache doesn't work if the sssd is not running- Resolves: rhbz#873988 - Man page issue to list 'force_timeout' as an option for the [sssd] section- Resolves: rhbz#873032 - Move sss_cache to the main subpackage- Resolves: rhbz#873032 - Move sss_cache to the main subpackage - Resolves: rhbz#829740 - Init script reports complete before sssd is actually working - Resolves: rhbz#869466 - SSSD starts multiple processes due to syntax error in ldap_uri - Resolves: rhbz#870505 - sss_cache: Multiple domains not handled properly - Resolves: rhbz#867933 - invalidating the memcache with sss_cache doesn't work if the sssd is not running - Resolves: rhbz#872110 - User appears twice on looking up a nested group- Resolves: rhbz#871576 - sssd does not resolve group names from AD - Resolves: rhbz#872324 - pam: fd leak when writing the selinux login file in the pam responder - Resolves: rhbz#871424 - authconfig chokes on sssd.conf with chpass_provider directive- Do not send SIGKILL to service right after sending SIGTERM - Resolves: #771975 - Fix the initial sudo smart refresh - Resolves: #869013 - Implement password authentication for users from trusted domains - Resolves: #869071 - LDAP child crashed with a wrong keytab - Resolves: #869150 - The sssd_nss process grows the memory consumption over time - Resolves: #869443- BuildRequire selinux-policy so that selinux login support is built in - Resolves: #867932- Do not segfault if namingContexts contain no values or multiple values - Resolves: rhbz#866542- Fix the "ca" translation of the sssd-simple manual page - Related: rhbz#827606 - Rebase SSSD to 1.9 in 6.4- New upstream release 1.9.2- Rebase to 1.9.1- Require the latest libldb- Rebase to 1.9.0 - Resolves: rhbz#827606 - Rebase SSSD to 1.9 in 6.4- Rebase to 1.9.0 RC1 - Resolves: rhbz#827606 - Rebase SSSD to 1.9 in 6.4 - Bump the selinux-policy version number to pull in required fixes- Resolves: rhbz#840089 - Update the shadowLastChange attribute with days since the Epoch, not seconds- Fix protocol break for services map - Related: rhbz#825028 - Service lookups by port number doesn't work on s390x/ppc64 arches- Resolves: rhbz#825028 - Service lookups by port number doesn't work on s390x/ppc64 arches- Resolves: rhbz#824616 - sssd_nss crashes when configured with use_fully_qualified_names = true- Resolves: rhbz#824062 - sssd_be crashed with SIGSEGV in _tevent_schedule_immediate()- Resolves: rhbz#822236 - SSSD netgroups do not honor entry_cache_nowait_percentage- Resolves: rhbz#820759 - AVC denial seen on sssd upgrade during ipa-client upgrade - Resolves: rhbz#821044 - sss_groupadd no longer detects duplicate GID numbers- Resolves: rhbz#818642 - Auth fails for user with non-default attribute names - Resolves: rhbz#819063 - sssd fails to provide partial data till paged search returns "Size Limit Exceeded" - Resolves: rhbz#820585 - Group enumeration fails in proxy provider- Resolves: rhbz#816616 - group members are now lowercased in case insensitive domains- Resolves: rhbz#805431 - NFS files/folders are mapped to nobody user if NFS top level directory is chowned by a SSSD user- Resolves: rhbz#805924 - SSSD should attempt to get the RootDSE after binding - Resolves: rhbz#814237 - sdap_check_aliases must not error when detects the same user - Resolves: rhbz#812281 - autofs client: map name length used as key length - Related: rhbz#784870 - SSSD fails during autodetection of search bases for new LDAP features - Related: rhbz#814269 - sssd-1.5.1-66.el6_2.3.x86_64 freezes- Fix typo in patch for SSH umask - Related: rhbz#808107 - Coverity revealed memory management defects- Resolves: rhbz#808458 - Authconfig crashes when sets krb realm - Resolves: rhbz#808597 - sssd_nss crashes on request when no back end is running - Resolves: rhbz#808107 - Coverity revealed memory management defects- Related: rhbz#805452 - Unable to lookup user, group, netgroup aliases with case_sensitive=false- Resolves: rhbz#804057 - Initial service lookups having name with uppercase alphabets doesn't work - Resolves: rhbz#804065 - Service lookup using case-sensitive protocol names doesn't work when case_sensitive=false - Resolves: rhbz#805281 - sssd: Uses the wrong key when there a multiple realms in a single keytab - Resolves: rhbz#805452 - Unable to lookup user, group, netgroup aliases with case_sensitive=false - Resolves: rhbz#805918 - Wrong resolv_status might cause crash when name resolution times out - Resolves: rhbz#805431 - NFS files/folders are mapped to nobody user if NFS top level directory is chowned by a SSSD user- Related: rhbz#802207 - getent netgroup hangs when "use_fully_qualified_names = TRUE" in sssd - Resolves: rhbz#801719 - "Error looking up public keys" while ssh to replica using IP address - Resolves: rhbz#803659 - Service lookup shows case sensitive names twice with case_sensitive=false - Resolves: rhbz#803842 - Unable to bind to LDAP server when minssf set - Resolves: rhbz#805034 - accessing an undefined variable might cause crash - Resolves: rhbz#805108 - sss_ssh_knownhostproxy infinite loop hangs SSH login- Update translations - Resolves: rhbz#802372 - Pick up latest translation files for SSSD - Resolves: rhbz#802207 - getent netgroup hangs when "use_fully_qualified_names = TRUE" in sssd - Related: rhbz#801451 - Logging in with ssh pub key should consult authentication authority policies- Resolves: rhbz#801407 - sssd_nss gets hung processing identical search requests - Resolves: rhbz#801451 - Logging in with ssh pub key should consult authentication authority policies - Resolves: rhbz#795562 - Infinite loop checking Kerberos credentials - Resolves: rhbz#798317 - sssd crashes when ipa_hbac_support_srchost is set to true - Resolves: rhbz#799039 - --debug option for sss_debuglevel doesn't work - Resolves: rhbz#799915 - Unable to lookup netgroups with case_sensitive=false - Resolves: rhbz#799929 - Raise limits for max num of files sssd_nss/sssd_pam can use - Resolves: rhbz#799971 - sssd_be crashes on shutdown - Resolves: rhbz#801533 - sssd_be crashes when resolving non-trivial nested group structure - Resolves: rhbz#801368 - Group lookups doesn't return members with proxy provider configured - Resolves: rhbz#801377 - getent returns non-existing netgroup name, when sssd is configured as proxy provider- Do not auto-upgrade debug levels - Tool still available for manual use - Reverts: rhbz#753763 - Provide logging configuration compatibility on SSSD 1.5/1.6 upgrade - Resolves: rhbz#798881 - Install-time warnings - Resolves: rhbz#798774 - IPA provider should assume that ipa_domain is also the dns_discovery_domain - Resolves: rhbz#798655 - Password logins failing due to a process with high UID- Fix explicit requires to use openldap instead of openldap-libs - Related: rhbz#797282 - sssd-1.5.1-66.el6.x86_64 needs openldap >= openldap-2.4.23-20.el6.x86_64- Fix multilib-clean issue due to upgrade script - Remove old copy from the spec file - Related: rhbz#753763 - Provide logging configuration compatibility on SSSD 1.5/1.6 upgrade- Fix multilib-clean issue due to upgrade script - Fix typo in the patch - Related: rhbz#753763 - Provide logging configuration compatibility on SSSD 1.5/1.6 upgrade- Fix multilib-clean issue due to upgrade script - Use a patch and install the script to python_sitelib - Related: rhbz#753763 - Provide logging configuration compatibility on SSSD 1.5/1.6 upgrade- Fix multilib-clean issue due to upgrade script - Related: rhbz#753763 - Provide logging configuration compatibility on SSSD 1.5/1.6 upgrade- Resolves: rhbz#753763 - Provide logging configuration compatibility on SSSD 1.5/1.6 upgrade - Resolves: rhbz#785871 - wrong build dependency on nscd - Resolves: rhbz#785873 - IPA host search base cannot be set - Resolves: rhbz#791208 - Entries lacking a POSIX username value break group lookups - Resolves: rhbz#796307 - Simple Paged Search control needs to be used more sparingly - Resolves: rhbz#797282 - sssd-1.5.1-66.el6.x86_64 needs openldap >= openldap-2.4.23-20.el6.x86_64 - Resolves: rhbz#787035 - ipa - sssd slow response with thousands of user entries - Resolves: rhbz#742509 - [RFE] Add SSSD Tool to purge cache - Resolves: rhbz#772297 - Fails to update if all nisNetgroupTriple or memberNisNetgroup entries are deleted from a netgroup - Resolves: rhbz#783138 - Backend occasionally goes offline under heavy load - Resolves: rhbz#797975 - sssd_be: The requested target is not configured is logged at each login - Resolves: rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3- Resolves: rhbz#761570 - [RFE] support looking up autofs maps via SSSD - Resolves: rhbz#788979 - sssd crashes during initgroups against a user belonging to nested rfc2307bis group- Handle filtering python Provides in a safer way - Related: rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3- Related: rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3 - Resolves: rhbz#786553 - sssd on ppc64 doesn't pull cyrus-sasl-gssapi.ppc as a dependancy - Resolves: rhbz#785909 - --debug-timestamps=1 is not passed to providers - Resolves: rhbz#785908 - ldap_*_search_base doesn't fully limit the group and netgroup search base correctly - Resolves: rhbz#785907 - [RFE] Add support to request canonicalization on krb AS requests - Resolves: rhbz#785905 - [RFE] DEBUG timestamps should offer higher precision - Resolves: rhbz#785904 - [RFE] SSSD should have --version option - Resolves: rhbz#785902 - Errors with empty loginShell and proxy provider - Resolves: rhbz#785898 - Enable midway cache refresh by default - Resolves: rhbz#785888 - sssd returns empty netgroup at a second request for a non-existing netgroup - Resolves: rhbz#785884 - Honour TTL when resolving host names - Resolves: rhbz#785883 - check DNS records before updates - Resolves: rhbz#785881 - List the keytab to pick the princiapl to use instead of guessing - Resolves: rhbz#785880 - debug_level in sssd.conf overrides command-line - Resolves: rhbz#785879 - sss_obfuscate/python config parser modifies config file too much - Resolves: rhbz#785877 - on reconnect we need to detect that a ipa/ds server has been reinitialized - Resolves: rhbz#785741 - sssd.api.conf and sssd.api.d should not be in /etc - Resolves: rhbz#773660 - Kerberos errors should go to syslog - Resolves: rhbz#772163 - Iterator loop reuse cases a tight loop in the native IPA netgroups code - Resolves: rhbz#771706 - sssd_be crashes during auth when there exists UTF source host group in an hbacrule - Resolves: rhbz#771702 - sssd_pam crashes during change password operation against a IPA server - Resolves: rhbz#771361 - case_sensitive function not working as intended for ldap - Resolves: rhbz#768935 - Crash when applying settings - Resolves: rhbz#766941 - The full dyndns update message should be logged into debug logs - Resolves: rhbz#766930 - [RFE] Add a new option to override home directory value - Resolves: rhbz#766913 - [RFE] Add option to select validate and FAST keytab principal name - Resolves: rhbz#766907 - Use [...] for IPv6 addresses in kdc info files - Resolves: rhbz#766904 - [RFE] Create a command line tool to change the debug levels on the fly - Resolves: rhbz#766876 - [RFE] Make HBAC srchost processing optional - Resolves: rhbz#766141 - [RFE] SSSD should support FreeIPA's internal netgroup representation - Resolves: rhbz#761582 - [RFE] Add ldap_sasl_minssf option - Resolves: rhbz#759186 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#755506 - [RFE] Add host-based (pam_host_attr) access control - Resolves: rhbz#753876 - [RFE] Add support for the services map - Resolves: rhbz#746181 - "getgrgid call returned more than one result" after group name change in MSAD - Resolves: rhbz#744197 - [RFE] close LDAP connection to the server when idle for some (configurable) time - Resolves: rhbz#742510 - [RFE] Separate Cache Timeouts for SSSD - Related: rhbz#742509 - [RFE] Add SSSD Tool to purge cache - Resolves: rhbz#742052 - id -G group resolution takes extremely long - Resolves: rhbz#739312 - [RFE] sssd does not set shadowLastChange - Resolves: rhbz#736150 - [RFE] SSSD should support multiple search bases - Resolves: rhbz#735827 - [RFE] Ability to set a domain as case sensitive or insensitive - Resolves: rhbz#735405 - [RFE] Option to disable warnings for unknown users - Resolves: rhbz#728212 - [RFE] sssd does not handle when paging control disabled for openldap - Resolves: rhbz#726467 - SSSD takes 30+ seconds to login - Resolves: rhbz#721289 - Process /usr/libexec/sssd/sssd_be was killed by signal 11 during auth when password for the user is not set- Resolves: rhbz#773655 - Race-condition bug in LDAP auth provider- Resolves: rhbz#753842 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758157 - LDAP failover not working if server refuses connections- Related: rhbz#750359 - Major cached entry performance regression- Resolves: rhbz#750359 - Major cached entry performance regression- Resolves: rhbz#749822 - SSSD may go into infinite loop during RFC2307bis initgroups when groups appear in multiple nesting levels- Resolves: rhbz#749256 - SELinux errors with SSSD Downgrade- Resolves: rhbz#748924 - RHEL6.1/sssd_pam segmentation fault- Resolves: rhbz#748412 - Memory leaks during the initgroups() operation- Related: rhbz#743841 - SSSD can crash due to dbus server removing a UNIX socket- Resolves: rhbz#742288 - RFC2307bis initgroups calls are slow - Resolves: rhbz#746654 - SSSD backend gets killed on slow systems - Related: rhbz#743925 - HBAC processing is very slow when dealing with FreeIPA deployments with large numbers of hosts Fixes a crash introduced by the earlier patch. - Related: rhbz#733382 - SSSD should pick a user/group name when there are multi-valued names Fixes for internationalization- Related: rhbz#742278 - Rework the example config- Resolves: rhbz#743925 - HBAC processing is very slow when dealing with FreeIPA deployments with large numbers of hosts - Resolves: rhbz#745966 - sssd_pam segfaults on sssd restart - Related: rhbz#743841 - SSSD can crash due to dbus server removing a UNIX socket- Resolves: rhbz#742278 - Rework the example config - Resolves: rhbz#746037 - Only access sssd_nss internal hash table if it was initialized - Resolves: rhbz#742526 - SSSD's man pages are missing information - Resolves: rhbz#743841 - SSSD can crash due to dbus server removing a UNIX socket- Resolves: rhbz#738621 - Lookup fails for non-primary usernames with multi-valued uid - Resolves: rhbz#738629 - Group lookups doesn't return it's member for sometime when the member has multi-valued uid - Resolves: rhbz#742295 - Use an explicit base 10 when converting uidNumber to integer - Resolves: rhbz#733382 - SSSD should pick a user/group name when there are multi-valued names- Resolves: rhbz#741751 - HBAC rule evaluation does not properly handle host groups - Resolves: rhbz#740501 - SSSD not functional after "self" reboot - Resolves: rhbz#742539 - HBAC: Hostname comparisons should be case-insensitive- Resolves: rhbz#728343 - SSSD taking 5 minutes to log in - Resolves: rhbz#739850 - Coverity defects newly introduced in rhel 6.2- Resolves: rhbz#737157 - "System error" appears in log during change password operation of a user in openldap server with ppolicy enabled - Resolves: rhbz#737172 - "Unknown (private extension) error(21853), (null)" messages are logged during change password operation of a user in openldap server with ppolicy enabled- Resolves: rhbz#736314 - sssd crashes during auth while there exists multiple external hosts along with managed host - Resolves: rhbz#732974 - [RFE] Have SSSD cache properly with krb5_validate = True and SElinux enabled- Resolves: rhbz#732010 - LDAP+GSSAPI needs explicit Kerberos realm - Resolves: rhbz#733382 - SSSD should pick a user/group name when there are multi-valued names - Resolves: rhbz#733409 - Improve password policy error message - Resolves: rhbz#733663 - Authentication fails when there exists an empty hbacsvcgroup - Resolves: rhbz#732935 - Add LDAP provider option to set LDAP_OPT_X_SASL_NOCANON - Resolves: rhbz#734101 - sssd blocks login of ipa-users- Related: rhbz#728353 - Resolve RPMDiff errors in SSSD- Resolves: rhbz#728961 - Provide a mechanism for vetoing the use of certain shells- Related: rhbz#728267 - When non-posix groups are skipped, initgroups returns random GID- Related: rhbz#726466 - HBAC rule evaluation does not support extended UTF-8 languages - Related: rhbz#718250 - Remove DENY rules from the HBAC access provider - Fixes an issue on big endian platforms- Resolves: rhbz#700828 - Process /usr/libexec/sssd/sssd_be was killed by signal 11 (SIGSEGV) when ldap_uri is misconfigured - Resolves: rhbz#726438 - sssd doesn't honor ldap supportedControls - Resolves: rhbz#726466 - HBAC rule evaluation does not support extended UTF-8 languages - Resolves: rhbz#718250 - Remove DENY rules from the HBAC access provider - Resolves: rhbz#728267 - When non-posix groups are skipped, initgroups returns random GID - Resolves: rhbz#726475 - sssd_pam leaks file descriptors - Resolves: rhbz#725868 - Explicitly ignore groups with gidNumber = 0- Related: rhbz#721052 - sssd does not handle kerberos server IP change - Use ares_search instead of ares_query to honor - search entries in /etc/resolv.conf- Resolves: rhbz#711416 - During the change password operation the ccache is - not replaced by a new one if the old one isn't - active anymore - Resolves: rhbz#715609 - Certificate validation fails with message - "Connection error: TLS: hostname does not match CN - in peer certificate" - Resolves: rhbz#719089 - IPA dynamic DNS update mangles AAAA records - Resolves: rhbz#721052 - sssd does not handle kerberos server IP change - Honor TTL values when resolving hostnames- Resolves: rhbz#713961 - libsss_ldap segfault at login against OpenLDAP - Resolves: rhbz#713438 - sssd shuts down if inotify crashes- Resolves: rhbz#709081 - sssd.$arch should require sssd-client.$arch- Resolves: rhbz#709342 - Typo in negative cache notification for initgroups() - Resolves: rhbz#708009 - "renew_all_tgts" and "renew_handlers" messages are - being logged multiple times when the provider comes - back online - Resolves: rhbz#707997 - The IPA provider does not work with IPv6 - Resolves: rhbz#677327 - [RFE] Support overriding attribute value - Resolves: rhbz#692090 - SSSD is not populating nested groups in - Active Directory- Resolves: rhbz#707627 - Include valid "ldap_uri" formats in sssd-ldap man - page- Resolves: rhbz#707513 - Unable to authenticate users when username - contains "\0"- Resolves: rhbz#698723 - kpasswd fails when using sssd and - kadmin server != kdc server- Resolves: rhbz#707282 - latest sssd fails if ldap_default_authtok_type is - not mentioned - Resolves: rhbz#692404 - rfc2307bis groups are being enumerated even when the - gidNumber is out of the range of min_id,max_id. - Resolves: rhbz#699530 - Users with a local group as their primary GID are - denied access by the simple access provider - Resolves: rhbz#700172 - RFE: SSSD should support paged LDAP lookups - Resolves: rhbz#705434 - IPA provider fails initgroups() if user is not a - member of any group - Resolves: rhbz#703624 - SSSD's async resolver only tries the first - nameserver in /etc/resolv.conf- Resolves: rhbz#701700 - sssd client libraries use select() but should use - poll() instead- Related: rhbz#693818 - Automatic TGT renewal overwrites cached password - Fix segfault in TGT renewal- Related: rhbz#693818 - Automatic TGT renewal overwrites cached password - Fix typo causing build breakage- Resolves: rhbz#693818 - Automatic TGT renewal overwrites cached password- Resolves: rhbz#696972 - Filters not honoured against fully-qualified users- Resolves: rhbz#694146 - SSSD consumes GBs of RAM, possible memory leak- Related: rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS - information- Related: rhbz#694783 - SSSD crashes during getent when anonymous bind is - disabled- Resolves: rhbz#694444 - Unable to resolve SRV record when called with - _srv_, in ldap_uri - Related: rhbz#694783 - SSSD crashes during getent when anonymous bind is - disabled- Resolves: rhbz#694783 - SSSD crashes during getent when anonymous bind is - disabled- Resolves: rhbz#692472 - Process /usr/libexec/sssd/sssd_be was killed by - signal 11 (SIGSEGV) - Fix is to not attempt to resolve nameless servers- Resolves: rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS - information- Resolves: rhbz#690866 - Groups with a zero-length memberuid attribute can - cause SSSD to stop caching and responding to - requests- Resolves: rhbz#690131 - Traceback messages seen while interrupting - sss_obfuscate using ctrl+d - Resolves: rhbz#690421 - [abrt] sssd-1.2.1-28.el6_0.4: _talloc_free: Process - /usr/libexec/sssd/sssd_be was killed by signal 11 - (SIGSEGV)- Related: rhbz#683885 - SSSD should skip over groups with multiple names- Resolves: rhbz#683158 - SSSD breaks on RDNs with a comma in them - Resolves: rhbz#689886 - group memberships are not populated correctly during - IPA provider initgroups - Resolves: rhbz#683885 - SSSD should skip over groups with multiple names- Resolves: rhbz#683860 - Skip users and groups that have incomplete contents - Resolves: rhbz#688491 - authconfig fails when access_provider is set as krb5 - in sssd.conf- Resolves: rhbz#683255 - sudo/ldap lookup via sssd gets stuck for 5min - waiting on netgroup - Resolves: rhbz#683431 - sssd consumes 100% CPU - Related: rhbz#680440 - sssd does not handle kerberos server IP change- Related: rhbz#680440 - sssd does not handle kerberos server IP change - SSSD was staying with the old server if it was still online- Resolves: rhbz#682850 - IPA provider should use realm instead of ipa_domain - for base DN- Resolves: rhbz#682340 - sssd-be segmentation fault - ipa-client on - ipa-server - Resolves: rhbz#680440 - sssd does not handle kerberos server IP change - Resolves: rhbz#680442 - Dynamic DNS update fails if multiple servers are - given in ipa_server config option - Resolves: rhbz#680932 - Do not delete sysdb memberOf if there is no memberOf - attribute on the server - Resolves: rhbz#682807 - sssd_nss core dumps with certain lookups- Related: rhbz#678614 - SSSD needs to look at IPA's compat tree for netgroups - Related: rhbz#679082 - SSSD IPA provider should honor the krb5_realm option- Resolves: rhbz#679082 - SSSD IPA provider should honor the krb5_realm option - Resolves: rhbz#677318 - Does not read renewable ccache at startup- Resolves: rhbz#678593 - User information not updated on login for secondary - domains - Resolves: rhbz#678777 - IPA provider does not update removed group - memberships on initgroups- Resolves: rhbz#677588 - sssd crashes at the next tgt renewals it tries - Resolves: rhbz#678410 - name service caches names, so id command shows - recently deleted users - Resolves: rhbz#678614 - SSSD needs to look at IPA's compat tree for - netgroups- Resolves: rhbz#670511 - SSSD and sftp-only jailed users with pubkey login - Resolves: rhbz#675284 - "no matching rule" message logged on all successful - requests - Resolves: rhbz#676911 - SSSD attempts to use START_TLS over LDAPS for - authentication- Resolves: rhbz#674164 - sss_obfuscate fails if there's no domain named - "default" - Resolves: rhbz#674515 - -p option always uses empty string to obfuscate - password - Resolves: rhbz#674141 - Traceback call messages displayed while - "sss_obfuscate" command is executed as a non-root - user- Resolves: rhbz#674172 - Group members are not sanitized in nested group - processing - Put translated tool manpages into the sssd-tools subpackage- Related: rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1 - Also add the updated ding-libs to the BuildRequires- Related: rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1 - Explicitly require updated ding-libs- Resolves: rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1 - New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options - Assorted bugfixes- Add noverify to sssd.conf - Resolves: rhbz#627165 - TPS VerifyTest failure- Related: rhbz#644072 - Rebase SSSD to 1.5 - New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Resolves: rhbz#660592 - SSSD shutdown sometimes hangs - Resolves: rhbz#660585 - getent passwd ' returns nothing if its - uidNumber gt 2147483647- Resolves: rhbz#659401 - SSSD shutdown sometimes hangs- Resolves: rhbz#645449 - 'getent passwd ' returns nothing if its - uidNumber gt 2147483647- Resolves: rhbz#658374 - sssd stops on upgrade- Resolves: rhbz#658158 - sssd stops on upgrade- Resolves: rhbz#649312 - SSSD will sometimes lose groups from the cache- Resolves: rhbz#649286 - SSSD will sometimes lose groups from the cache- Resolves: rhbz#637070 - the krb5 locator plugin isn't packaged for multilib - Resolves: rhbz#642412 - SSSD initgroups does not behave as expected- Resolves: rhbz#633406 - the krb5 locator plugin isn't packaged for multilib - Resolves: rhbz#633487 - SSSD initgroups does not behave as expected- Resolves: rhbz#633406 - the krb5 locator plugin isn't packaged for multilib- Resolves: rhbz#629949 - sssd stops on upgrade- Resolves: rhbz#625122 - GNOME Lock Screen unocks without a password- Resolves: rhbz#621307 - Password changes are broken on LDAP- Resolves: rhbz#617623 - SSSD suffers from serious performance issues on - initgroups calls- Resolves: rhbz#607233 - SSSD users cannot log in through GDM - - Real issue was that long-running services - - do not reconnect if sssd is restarted- Resolves: rhbz#591715 - sssd should emit warnings if there are problems with - /etc/krb5.keytab file- Resolves: rhbz#606836 - libcollection needs an soname bump before RHEL 6 - final - Resolves: rhbz#608661 - SASL with OpenLDAP server fails - Resolves: rhbz#608688 - SSSD doesn't properly request RootDSE attributes- New upstream bugfix release 1.2.1 - Resolves: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity - bugs. - Resolves: rhbz#603041 - Remove unnecessary option krb5_changepw_principal - Resolves: rhbz#604704 - authconfig should provide error with no trace back - if disabling sssd when sssd is not enabled - Resolves: rhbz#591873 - Connecting to the network after an offline kerberos - auth logs continuous error messages to sssd_ldap.log - Resolves: rhbz#596295 - Authentication fails for user from the second domain - when the same user name is filtered out from the - first domain - Related: rhbz#598559 - Update translation files for SSSD before RHEL 6 - final- Resolves: rhbz#593696 - Empty list of simple_allow_users causes sssd service - to fail while restart - Resolves: rhbz#600352 - Wrapping the value for "ldap_access_filter" in - parentheses causes ldap_search_ext to fail - Resolves: rhbz#600468 - Segfault in krb5_child - Related: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity - bugs.- Resolves: rhbz#598670 - Ccache file of a user is removed too early - Resolves: rhbz#599057 - Incomplete comparison of a service name in - IPA access provider - Resolves: rhbz#598496 - Failure with IPA access provider - Resolves: rhbz#599027 - Makefile typo causes SSSD not to use the - kernel keyring- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP - Resolves: rhbz#584001 - Rebase sssd to 1.2 - Resolves: rhbz#584017 - Unconfiguring sssd leaves KDC locator file - Resolves: rhbz#587384 - authconfig fails if krb5_kpasswd in sssd.conf - Resolves: rhbz#587743 - Need to replicate pam_ldap's pam_filter in sssd.conf - Resolves: rhbz#590134 - sssd: auth_provider = proxy regression - Resolves: rhbz#591131 - Kerberos provider needs to rewrite kdcinfo file when - going online - Resolves: rhbz#591136 - Change SSSD ipa BE to handle new structure of the - HBAC rule- Improve DEBUG logs for STARTTLS failures- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh/bin/shlibsss_sudolibsss_sudo-devellibsss_autofs  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrbgdeeseufrhuiditjanbnlplptptrusvtgtrukzhzhcacacacadedededededeesesesesfrfrfrfrfrjajajaukukukukukuk1.13.3-56.el61.13.3-56.el61.13.3-56.el61.13.3-56.el61.13.3-56.el6 1.10.0-7.el6.beta11.10.0-7.el6.beta11.10.0-7.el6.beta1  !"#$%&&''(((())**++,,,--.//00111122333344566777777789:::;;;:<:=sssdsssdsssdsssdsssd.confsss_ssh_authorizedkeyssss_ssh_knownhostsproxymemberof.sosss.solibsss_sudo.sosssdlibsss_cert.solibsss_child.solibsss_crypt.solibsss_debug.solibsss_krb5_common.solibsss_ldap_common.solibsss_semanage.solibsss_simple.solibsss_util.solibsss_autofs.sosssdp11_childsss_signalsssd_autofssssd_besssd_nsssssd_pamsssd_sshsssd_sudosss_cachesssdsssd-common-1.13.3COPYINGsssd-example.confsssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd-ifp.5.gzsssd-simple.5.gzsss_cache.8.gzsssd.8.gzsssd-ifp.5.gzsssd-simple.5.gzsssd-sudo.5.gzsssd.conf.5.gzsss_cache.8.gzsssd.8.gzsssd-simple.5.gzsssd-sudo.5.gzsss_cache.8.gzsssd.8.gzsssd-simple.5.gzsssd-sudo.5.gzsssd.conf.5.gzsss_cache.8.gzsssd.8.gzsssd-simple.5.gzsss_cache.8.gzsssd.8.gzsss_ssh_authorizedkeys.1.gzsss_ssh_knownhostsproxy.1.gzsss_rpcidmapd.5.gzsssd-simple.5.gzsssd-sudo.5.gzsssd.conf.5.gzsss_cache.8.gzsssd.8.gzsssd-ifp.5.gzsssd-simple.5.gzsssd-sudo.5.gzsssd.conf.5.gzsss_cache.8.gzsssd.8.gzsssdsssd.api.confsssd.api.dsssd-ad.confsssd-ipa.confsssd-krb5.confsssd-ldap.confsssd-local.confsssd-proxy.confsssd-simple.confkrb5rcachesssdbgpo_cachemcgroupinitgroupspasswdpipesprivatepubconfsssd/etc/logrotate.d//etc/rc.d/init.d//etc/rwtab.d//etc//etc/sssd//usr/bin//usr/lib/ldb/modules/ldb//usr/lib/libnfsidmap//usr/lib//usr/lib//usr/lib/sssd//usr/lib/sssd/modules//usr/libexec//usr/libexec/sssd//usr/sbin//usr/share/doc//usr/share/doc/sssd-common-1.13.3//usr/share/locale/bg/LC_MESSAGES//usr/share/locale/de/LC_MESSAGES//usr/share/locale/es/LC_MESSAGES//usr/share/locale/eu/LC_MESSAGES//usr/share/locale/fr/LC_MESSAGES//usr/share/locale/hu/LC_MESSAGES//usr/share/locale/id/LC_MESSAGES//usr/share/locale/it/LC_MESSAGES//usr/share/locale/ja/LC_MESSAGES//usr/share/locale/nb/LC_MESSAGES//usr/share/locale/nl/LC_MESSAGES//usr/share/locale/pl/LC_MESSAGES//usr/share/locale/pt/LC_MESSAGES//usr/share/locale/pt_BR/LC_MESSAGES//usr/share/locale/ru/LC_MESSAGES//usr/share/locale/sv/LC_MESSAGES//usr/share/locale/tg/LC_MESSAGES//usr/share/locale/tr/LC_MESSAGES//usr/share/locale/uk/LC_MESSAGES//usr/share/locale/zh_CN/LC_MESSAGES//usr/share/locale/zh_TW/LC_MESSAGES//usr/share/man/ca/man5//usr/share/man/ca/man8//usr/share/man/de/man5//usr/share/man/de/man8//usr/share/man/es/man5//usr/share/man/es/man8//usr/share/man/fr/man5//usr/share/man/fr/man8//usr/share/man/ja/man5//usr/share/man/ja/man8//usr/share/man/man1//usr/share/man/man5//usr/share/man/man8//usr/share/man/uk/man5//usr/share/man/uk/man8//usr/share//usr/share/sssd//usr/share/sssd/sssd.api.d//var/cache//var/lib//var/lib/sss//var/lib/sss/mc//var/lib/sss/pipes//var/log/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i686 -mtune=atom -fasynchronous-unwind-tablesdrpmxz2i686-redhat-linux-gnu?@7zXZ !PH6]"k%P}z'Cg /s~A_x3̇9|Nfv_ a4OR9']h<#.ש*%܌2& 5qSނ+>ZwbSPura0-ٵl^j h"sMu:qlv`` 9F؁uő%n?vbD|z ~*9 6 4U2OT 0^w`TKx>516} <~e Ija3.2q4Y,ga@ 9v+煕$a}Km$>RF[ |d3 YT9 i*u  0ox_BUͭ( GBUJ8a^ۋA*vqm2(BZӚJWݑfm"ݱ,_ېn\-,vJSh&=ԕ<'' KcvwPpX|EGWggҤHUpT ri. ? $Cɵy0 mUD Ҧ2=AnrTWB? b顳?/tVCX .Ӯ]H&)/ [>sB!^pV'Cjl'.YJ۬Gt 9k,{$@x5VKFX @y M@~/}{X @_uI>޺5Af@p<~5c-63~2 UvWmADIS ~C7hRDa4FTzbz:v7rWե:+G0"Mi -wY{|)+MbSK a4 VQNAK &w7ϖ3x]=UkpHh~zH^俓Il[y^!HsZVeʊ'R>4-dL'&&CA"LulfFgc]o6{L1I0B8xnE8|V.p71̯襶Ԣ+|#1z*, fxWאuy:PB<4a#N? *UMR2ceOOղ}#/?1-y: ętFnfuY3?K`ߺԚ R$wzrhфkC:Y:C8b0 ՉB:n-.򱼐g@C,i",BA z.pQUֿ{yxin-k z&d(>\Iۃ(R+)=O\#A40AӮ^10V o $2vԜҒ<6ylB/d-!C,A}!܇rJAGy"rLXR/YQ3XzK-?VĂ-IA=ޤ`05GX8'/!DܤW'CKȠF LBX|Qc^@_!?8IBQn9`p_3:%߫i#l8쒔wNFcS >OR7m2w$= a8gb$['D@tsDu!*{WD6!B'͡O•Ưs0#c dɍI} ד`rNXe9t2zy{'4.$SR(du9/Mc-/]뮥Uly>n ]/;&2DY_p#0* 6uN6з{';:xRпhļvn:s8%.ᲤZ3m4DZ1gꕖW6 k4,'v>7 Jm|T. 3=<µ؎D/A4஋Wt՟AHW~Çz/}s \Oto?ܹ˕qZ#bz"Y;l.p2 gv8\f`4BUdi"Z5W2a-~tȋHNk\#MɕjiFD ]G贈d\U]EN{LP6w"GU Aa1`*@2^ % J2c;j^xt=#,1V[S{*Wݏ$yMf$̤Y2> >MϷ(9w=11Q)5 N>.|=q%Arv eK8~jRN <}Sxi:D B$yق7E6fo.W9UB]o7S(w^1qU:5e*L.rQ;k.P*D0;1LWե;0}^p!O;cWyZoLc'C thаam8o4ĀǦl%[z3X?'aLQ.=Sr`5' `O컮hQG ӠL3F˛]zm-%Rү9_P{TR)jQ-&L\ݾi9WPwr c8F>nepcϘl$^oB)AolArRAtC>_a#0c`EODX5zh''U j$Gc@n *TN<+ow djЧmݡ IQ+yfQ*bĭ]bI)Q'jK8 粜5"@qwTzV4Q(gD#G&)~zl?<`Qz*oMQ3* M +}ƎӀ8|zZ>o~@Ƒ/eMPQAA6W)8G4# 3onSÉL-7s̛ix*"Td^Y@ J/pغ"p#!E:”)q! }+WB=kgʃx]$՚F TDP5b HƇn4Fh' Q nH`~VBE~5~ʇ*Cou迌tu7hݸ#|=%"ڟ Xi&nP/71; r9\vi~Pt EK|,EFm &WCq n| ,O5+LT~40z j{kyI?iTX{ȱ)Ÿ,ܺCpЯSk I]8@oCk O0+{.(kj.} < ҷjڅCL*^*-"(-6kgYS*׫3Y!?ǁB_|ǝJj O [& (>XNcqJ8uL匣"Ly$ L3DtNhN&Q8VFBF6&jqX"(}LH l_bW J8Y"*/`1Zٰ/,,'߅9wSdi?G\Z$+ ŧ?@&dUCWN̐$Kx"НssކjZbFQן+wHXI8a=:=ytSYDLVBECuԡ4]"5o} `y_nED9f=푮s2ïn]{R5Vێ >̛[t4/ppsE?D6x}:V17Om};!vR2|xlA|ˇZGM (y rLSk>}`PJœ[tzTvWPP%PFVqym=Rz0Q_I,!U׽zâszV?ʷt  Vw-C=dtO.z'UVpG5ky}17{I0|T.w\IY\J,ѡ-\͏#Ylt D'ԗ& WͿ#:k+6tEg/'RZ3*1t S^qNP־Cyta[(wEeݓb0[L8-hx))1ҐL H#>G@ _(ζSe,/CX) r+V#a.}y|_5[h(8JjHoR/ćD$ڤ签Nޤe?utt5Q[`ܜ:EY2kFWC5DGo 2 /)@e ;b׌DO*nS"V;z>""\70r዇Ͼ/pKw(54Җ\ίĘ*FrߎaPC3iw(l;Fr!VpKTW"ŖbNaE#*yBx_10=.7YUɚ*4{ Z+Kd-GϡT*~rlrQ:E7Xݚ ƻcIyg3z>KJzWv]:)֣x ,m^*P˫D,5K\I=Ƹ~w-(~Ps鵆G˪#6tIHl3vA)rQ`5p6Sntg`?&|/i#lاJd %!?bNeM{}6y  }*V;3TǭHRrC3nHǑ`ONTMgުLf(94$H3o HPi@>G:8:RMfۗz JB5 ,s +> xfK֐EHkĪ=&0z(Ae"4v>Cdc_!--P剁3vl<;e 5p%[|hhnDc$Xc|iWMVgԋ{T]{ 瀉w$cC xBt9*6!ɉGܑt;WZn}JQى8uRlE d9H3 Gx#wBHҲwB"%+C8@#||=V}vؽуy esvvr3w/zqݺ+s 7vof֋/抾hw&ӵS`cn24'+Mcf,{6D_|[?>0DEC z~,a }ImQ)!hY#okLV5 U^6/uDfEOR޸/u+#G;/3jlgLZc3/ȣO?x-vyIwA-=)XؚwJ8KXB )M쪡dS2a}8JpX 8SO{mџ8QXЁm=59w /ť۳0x2ǨܿJ%,WtyJс ̭%DKo{c\1eėy'|qtfhQ..޸B0=:|hifAzsLقHK2m)@S9ig%Ͳ|١4xuVYY1y .h3>$鰒գ~WӛT̃)7:jvlE'ҁs_O#Ps/YףP$N!`9H;QQ N``N{$etf+KOCهGêsݷdȋ$~uv#ubP~ESkZMVznsK΅ZXm&L=6h?$v\p%5Ju0Zp3c6:1!.l;x'sS< ׿yԥ)!{ pyɴo0LxkA'ݛgXIH:D˙ =[:iQ1DXqiOt1`xj[f-=wBAŸIVjgC`(pBtVX:m2*Sj.P].ǏEnstq\Ȑ@Qa5&ŖCs?*3Rv*sV"˟{1VM֘~#B&Q u4MnLΛ?S"ժGD_VSGCHf?4#*U oxUJD݉<[ok^i=r%ZyE)Ē3@ʋB XԳ Rw>hfrt[Z'F혌+BɆԈ\lۺ@F5F< l.%q@ڬGu/ٕ"qQ9938^NOCy\S<Kn9w VH^#Xґi!?fR]*k13٧m,4CોvB b,rЋzݰEd:fÛ¡I1i~.^OuWN"Zy!4 E[7Lf6tZƫ'J \ Ұ|TkOo[_a6xWR ie~zp9oW!uARe?(-2YǀX #M[۽Ų%0އ[ՌKqr_7-h))5D4gQeЙجSL)`u`NB7: +$?[Tcb;@Ɛ.(kbx-S&3 dF zi sa5Yc UT4M=JޭS []7)qLl򉋮~cV¥ZDo38(/HLx}Y>+!6| KI~)V9e} `$ 9_ 27.XqϪc~ѱF`G*/XV0^9ƣ8IF dWμ ?͋ qBs_?m|} /U!{ǧY_ي(/IG݀kF.;/G@!AI9}lLJo]g ρO! i|7?ZB|H?9ˬ:i" zӆi/Jįp5vW_haoǶud`xKӋabs~Ebp9i&#ydM8&QX7pQO>(,D[{ij3T~XgB[v_I90W(mJt/U89G gٺCi ̙HD,*I'F2bn P黰SDX׈㱵4{CM.YU .}=[~_B35LI+oyE[hqe/qbۗ^{>4;Z?ePr4, @idFK{UKvݖ0D(:k*"G5OtOM7?\MهTM>O9x\L10Lu`=ߏ)WUMx '!@_w`)$ٍz:DLS߽9VU &2v]lյzyԵTxWCJ%A-dq'x3JG1UG}wC䕂dl)XZ߽)M, 8v[T;.rˀÃOMj++;b8I>Du|\r?Pz'Td{:S쥯+`~6/'B̰X~v/fZKY>!'.7tԸ8D=' Qk<'Ay}x؏xi*ES+y(Mq,˫e~9X;0.43_D[v9 ⵤ |4۷ЖN 0?Mћwgl?{+)fȭ =/oQs 7%!r3ž+5K<mWa4/g" _&WTwv9j_F]߮NupCR{]R2 z7Bh;43ղR0r+DkF_Derhߐ !2r2l>dքț$6쑫g_u( igT R-2o6Y(gL?)HD*`xQmӬD 8sa&u.53u9:=Rp]M3_!9N-E~ ˔_zcjBpEV8 )a|W^o])mRGJi{Cڽ.9f.4ʲQ $|/Q ash0SR?Zz¦_[{MH\ Ol~uP6ϑ`w iˎ}^T3?E+(ǼpvZx;M\l4׳s{GNԽY(9J\(mebtķs^7ѤNB]5c_H%Lx\$rF|< }\<Gx;[ńRA¹JpB' ؑyu@D>4{ B#S< ܕmK&6Κ!c3 ^>חf~lwZ<m̿YFι588Ö^F}@׺Nod]ѕOy(q\@Se+ʸl`X0xRܳi=tMdb 2 GO[gs2ꮅH8~e9z9bQe=~S `eQJY S T[gU? ,TE-+$䆌u_XW8 [ p+f)KU0Ol͇/J\>&-+UGd9 ł*nxZ/yWTeC>gTkFqw`k?`.&Br5˨dr1"b [7}IA^}d:σ4ll%Mh<ϓxTElv2O+K^))îJ/@$, n\NQl; .oUF>\~>9(eme%f3+Вmx 8\ܲi ]Yk㤣X5iܯ WDꭟb|*+S.t5)6%s1IU749X4.LJeڪ,Z. �pTi\IߺHWqS) Z*1/q5JM=>~뒂PнafV^Rn/d=x\)+/O۩%0Sl+p32̭Vp )L +NzY8pjrynch oRSvȕ<澰ixvw^dS*W,c3 O/G hxHgXr,uf4)y4 Es^}iLyfK;6Bn\T("N)1,M̹ܔiju3Id.yUSNk89iJ%<}6CQQFаXf!܃E Ƚ LkpJئ_m0 !e Evd$˺9kjϲҔZS(Ԧ@ج iQ_8dN+m/ n5:vФDq=[}Y.;U<|vRCj6&3WtC3:ص,wmy"F*)'a*ILBu*t_xޢsTgj*]޲gGxW+[Ph!w\#lH6u蒷̏e8Lͨ@S-3+i]z.fSJ^SVnCM+R-#bOl?\!6u7hb;8-FOnZiݘQ%O,C0ׇnjZ zv_wz@x!]no<ݽwU%$s_އV3O1|9P(s*3G#'¾}7o'Y/)JK7rʄA7ԕqj1^v@PWn_%p|1oC!k-β-pAPDž }T6tQ DX!5M+Pd7jj>Co>Rc|ӞpVL(l񆦁 ʞZ 0nAxzfȇfB$Ws8feO}c8C=jMR\8(mS#uC/m ZM`[2JߝI>A\2rҹĠ* ݘ˝ީ Dd  v6~>G=%X0v[;='4jI**>5FSz:yPJi@UcokR4OLt\l7γ/j w@^TI,JPessnkz-eBAe`CJPOaOi=&p<>ש3ΩZBV0`rKHd څ},`nl|Wu-exO`2UO;BMP {xeIa% h c HAEuOQ~z˦&ٓYIB׾dB5tcwP˜LjBaɿt 2r ^ldC%>aXx0;L~Ԧ@DMb2!>QƓ'ϟN! (|72}C}Sp|ԘjwNBs~;UR#ÅfRt_Z!q._wm >RdUnH_;'K"Ȏ=#Jcpނ#}z7\I-#ZF,Tߌkkp wL$ Mn~VVm<h^`( Gfj0I K.rN(^HmT T1FN#ՑBQ*p!20J/g'HR'y&va zSլk[2o/C)xw0MBSyG{`%!F4dzmo$c6wԋ;ܰMR: 608Go[yGLY}EQcR#b`XWMJBTe >o}E~"+Ԓ4!V6 3A.M:Pn3Bq!U0^6 qj8gjOH˩1^xkv2LÒL@g_.ᝃ5P^ؕuiʧIRḾdPS~?mF:AYN̵q)x:Ef鿇ώڌń)!za$j1D_ ;hRdSEH۩j23cX0]_<֕M&(v5e^A4 :`)U ٛøXI+lAJ^}-uR950eL|槠w gV}y}3zRS^mc:5 Z>r7}I>gTlS!EpӹɱXjOW9)?5^Op*Žj%V7 b4cKXaА/jd@Pdx _.%Ba@۾:lj:J'">hHX_g>ԍ ~ ˟/HxEK,G,&FADuhܼvS]v*IaI3LiKBw1>m_d]q6)\Cgm^ĺ@ !͉z:vuXkO^69ekDPSgn{J[;Ф'?ݞ%ޗY{X@`:Oҽ/0/|RG `}=`& t }ؤ<\MN"wKVr}Hm'effЕU36Կb`^+z3+(]iR(>ԗ.Фqa@Mzf 8 >Il"lw'/m,0h¥IgD '?$P/$?V8aĈJх-B|ٍjw z}؞%\cayGp#cpj/=&Z[,!dbKTCtJw0Kl~rg낊Y\)R\~D Vlm_CXja j* <6so'\#ir(*k-VQ` .}$",9spd1~a@=<<7þюi㟫ofwPcۅaH;l^Z~Z!g0<M+ԈEKw/k3B7 ` \}2ݡ.c4þ(f/;~q}Oz`}xպ 1ƱL pG: fM5C Ꝯ7p.Y,dwL)n;s }O/R+,`Axq`;y?w qۙ <<ċdט9sak%4:Z pU]CZXTrPitPDoQb|֫!1GQdQkq1M;(n6!}r2(r, BdOR#2T:\tIߚ܇Oo*h,C33B4ԇ߂ H0p Fzu1MICL㺓iQϓa.yC xޠII&!3’vBu@w)Z# ӵvDJ1[Or14ee 0$7'  |NDŽLҬǸ@z@lcԽو}DF;7ۦ -(oL yCС"$h~_hIͨH`ԣ'u19L=!y\Jz w;ؾ(LO(d+AkFb9d W/ٮ;go} j|,OdXث2yO?U  rA[0`oX:5Jhh[Ң*iEG ^i&q[KGڪbW{j&CE Cy'w0߳== !z.uӘ)q 4$'Z]Y-&+*B: 4ñ15\V!<U!އoq K-HŨ;b@0M3:8J.{{k6vՖ놏 ,=)=bcpY]V.0ѫNFp,/g<.`ߨЁ1/s۔/aUZfw<8ZFrG?Ph&L㬪8BHUo㑒E*ӛm ֽg鑕,:H<ώ>if:["HǷsU*ThM/˻@?ǭQn K (5mqh4@v ^L.ȱocF?*>)֋HHFf &OuQy<'$-@)$[sqY>!FTձo9Rb)wc#94R!<;lB~ě2Q18m}\V<i)t1 )xC;t[X(j`1Zp6rFmO%{+s&:OYD窎y(x]>~x)FNT~!݀xe +,R>G,z C`j [\=amDMUݎf4\h'_Yjޒ^}ظ!3I=vc&_a K?RM]Lq$_VB-9XqH)n+(p}Ln6n[IJ}_@ X|K&NVjBIe]2#=׶4KEfH#7+Zj 08OXմZrʟuDj2%.Doc]T"E&d kS 6axW9 }`6P 2-$YDxWx=Kj`:AgrH;<]Zudǩd:Cf 9@%2v0FvV ^]-2U2?}xx,4Կhu|0P9QBtAmS/66yDl0p?F8)Hl9qnȰbɓqv-' n`]o\β0+DmƖbJpЧ _d`|Gw,ue)bVYnƠ _rhN$ma[`r?_p "s ;V0'ϱ=(0Et!@ubZ)K0,ɂK>~RBUC7p^^H9f>饔SJངU#$Ws2u-۴qyRmc`J~5 lCC*eyU|ɎD-/1rέdT _09x`I&fX>{kYڣeGp^iKLIHu2T 0+.;/x8UƜA!et}i&s=;^X LPuwL!cG-܇ѾRY`69ʂ"=0e  9tǢԇk's>.Y˸9^?jtHΤ]I7&"D@}K jUu4Wic6y\Hi1r'#ג|*L/&AvY 74UBy]=SOLqɿ:0d{.ωjSX& |<-QV"88*HsStK R>c;K$SJAC6I4j~[2UqdU֖"Ǯ@o {-JC {Qqqs:=>\Ӎ|rCB,Eɺvljq{܉ }WX@3<=>0 +A:?E)D+oaТ`a7}+rD /r#*INH5`G&ѦQFFkpӨCx% gكϺO[xY <Ɂ`ցCQ,aɋ9GOi G15b0T?nJMB;*,j> (W]Q+`3E kI%R)/+IF֞mxQEbs4P@jl]Fpt1{ 0PWmd 4Yū5(l\v 0+zQƎm_.jL[ 3T04qXgSK?wu 6&"Y L"OpƧ BqBMVN QJp=͟CxPҋMX~,K4IaD:˚'8ٸ\kyhO#;K@J%H}H*l:>EA{etFuNeDZp49(Fc qiSMNӻ!d=]3]'YE3ExcU{f7"V'G\NciB?Ň 簌pugBQ'.◅z"{f!"pAEӅ7YHEiRB:GΟ(8@·F%#JZv'mnעGHR[j19 Ͼyvb="jz]|~Ҝ 5a ^Sخ_`lK9Kic^&Lg ړ%vL \<8& aqp޻n%0ruXpQj[CZMiu$SZLMegR}sqv=>-RDA]q?԰q~éڒ]$5KոfOa&y/?N(8=t]%2l0&Exv_^p1G 9E8%ZQu?l{fCCρۇZ[ZS7 mUsCSq"×a-GΕJ@ P^ G2F)L'CMi!BskIܹ_~g\Mb=6}V,tl>,hQ{kb*tEJ45{8loLǥbu'| M. Ta>/m{S;3S3ᶬ_Z(MAV !oX+WZZ^{4^*xMdĝww֙ri~v3W~pJC>HteGĔ^dVיCҧ҄xEK†oTdBw%A)GYvͿs=%y ?D7u 5!QgZhW$}r"䰈,t,6i"$J&%t k!e&4%iuUlI>'fMw ՕD{ׂ"{([Yga$-+;7hy+B- jڛ7%A?EtR=QLG/rZ+ },Eȯ~k|u'<#E^[RM:"r ZLJ,[nOf&kvJ<7>ņdѮ%fJ} ?;:Fdz Pqͼa>zJ !TVbb۩nXRiݩ?[KT53Ta1j+-ɿUQ tJ$ T6=t 0!tp< *P$΍lZxtӗtO3t&'Wnyѧчݴ3{|xDtwPf;-f c2)^EN6 B߆NnߌE4LZjs,wS ib檂M}tQ~ wN׌II z;i .S%떏%J17TT/p(e ,MQnS:ܟrWUʳ $SNa rv՞uDߜG59Yhinhb4^:9l`spTyhȒ'QQb(Gc[d1#` * n942(H (֒-Ac"A-DQcE 0zI˯*)Yg됽j=6M;0P(>ΌNP~BZ/T&}!XW@=|Ǥ.ә,/}Os2߳,Y<&7p~M&=mS?OZ "i(W/ۈUwݨdoǁ_{j-R݌Dǽw cNn nչm7R a3 qf<톊#z $7ht}| m=;s eP=ӹ81&'΂9XrRFNeڈGqLLOj m\g)YȬBcaCDUbB|Ԯls깭=1g?rnƟrSKgx "\ ̺ DlCeC7-| i@)^ofB\EvYم( ޝ8jhzޚ(^6:0ɼ&$2paEf$v'!J}ڏjԦ-hjKd)srK1w7bGq԰Ludk]!+=J͐a-0LR/B.>041dK|mD{CeDV+S"x)ٟ c7Pp/rcNZ̮.(2낮@HoY{N>oNWQW7dCG=,$H[TI_z*4YG'W1c\R ^(LPĶqKۥkA̙ Ķ Dȸ+p]5@F SQ_Q:OJPI*Z 1 _싆Azla`JqL {k%dX[‘P81.6zKV6 ,= eX# 㝲`m@D3, 0);Ea͸;xz˯2f;=7񗇻޴aR\{  ifD48>e}(~@Ʊ4>;F$I k'?4w#`5{uarTtT@ϱwPsÏ[q'їAZuXvaQiG\$R׽xPӟo;W<5l;EMdл);H kf-+: D ɟK#WKe 3?gBNQc|sbzE5Q~;O\C69M`R@r~d |{p,ɆV/2`]qal ѲXuWT6Ds4EWpؼe`/86xyls9<)dҎUX{[la;x) :^ z#zٽ,ۊ8,XD^*̏o:s (MKb.,GHl/K&L쥲oB$1hE߹uNS$wPp8Tn\ԝu;s%jGy~6s7!/Hfe.#7GDtgڎ:ͦ =M+ɤ=/v'7e۩q~D`kQu0jy拞U/ Yjǥm?tˤۯ( vT`^בehS0_DYII^na;|oz:c>ʀ;CjNZ| "I^gRgQ m`M|XNڙ)EBlX:r}݈Ů@('r`fN 9߱QjHLT-++c}Oad=Xdxtq;MUzdE=^j>›%!cHa3q9Ag@i;E>2Q@fnt8O_~F6ElҎ{$065(ʘOҪӿMj絍f2徱#Prhȱk;G4 L$ASLa-FlƸ $SӝA/GX+sg'MPԤhjc-ʍ1D ߗIJp+lZH˛#3iIJ{eZ^d&]m\\J9Ջ@,.ngkw{$K+n/XU&7 3s')6agyJg{O%G.7E5("4!I@`lMaAtQhXY4~qKNtR!ߏTJco<9Lrp3!kkg0="Xt\: =}T0V]U=uKHo`/DMc\v<$#" 3Q7=>gs]Zqįmn9# h'Hk&'7;T\·#&m*P*oØ92c<_>ivRA =onYj+zTͮṕ9WFJ5g"@G$SGC݁)=@4d:op.a v.6)~0_-#Nmz}aa jGqb"Y f_Sqi8:tfW":YH kHn]I]UXB&& s. O6Qȩ'YW*J?P1x/[7V_Ӎݍ-f6Ӽ.Uxe߫velf{Iʶ'h"8hֳ=h6vPگH})P)qL > .h1ҧ9? -OQoWd0t_F tߵ_ Îz(Ds9ښp]Uq@-B'pY=N-WX!c}M&x 2\N_m 8zݠTꈗا `H+!}|O\2xW&R>#pU\s1 $?rЪ;k0+dyrǡ'E8ƷHp%1foՃyXxH勺!J2B>aJO=G|$FIXmޝ//C6 ݅ )\L_ҝ[ " l-=p5X^QEu{FLu-lDc->:޶0I!HG)ʚNW`lt/WA7.uvڄNe&w|*f|ͷLmԺ 9jZxm=BkWUȨ9-(*'D՛M;cyJL 1MFyh_~}WD;X ʿ_ee9>,HPaWMOD)Do,;'tB .K'r%=y{Vf `,'o@_)obNjoyV?^Wxb=˨]K$"WvRxO>Tގ}1jqkɹqQkj ~Q"Fa*kx_8])k};( NJL\H2^!8A*5eTKrDb07Xy>8O  ڷOUFlkRVA'GW)kfDqG"C0ҥy/)Άc{}ސ`$EUdd|5gן/sR&޴v,.WJQÃA{ 縀y+b|q-D T^|t&NS9 DGP4(6 ?,O.e N Ph{b?tUo#J[nSʎ]G‹9:m&YiW׭6VL8dԃ+wrLqm,VNh@4Oɓ*>`Es v"[lkqJok" 70?r}# anIۂ~@gJ>Y|߲a˅NYk/f w^g^ڛpe|IT9 .5-b-ڄh}$ /YyVkt@o&>X’YZIB$3tUulX%UucMPt 6{'*(۟31%`BDEs)1h*" cY"byS7s+5\a_Uu(_WF]I|l֩Jk%^i?jv m˵H=`gg]>ܐ Fvp[ɉ#Z5s"nF8A9k ߑnp ]MXRCUhGS~՘.&/sҤ{3!u}y}S//C K:dm7YWvzpb*2kD4cp6 wf?-24z|7':6Etxl̥{F㵟594@Pf)7t=CJc11%{=2[[ы2TJh J"6m^AqQ~J%]"k\2 u 3>Y҅tE>t_eۊOuk&[r ƳS )A' AA=m5\o{mZ%on,L\i#3kv9bXɳsBO~HTF{ШoZ eӤDSp+CHHrozu!5_f T^P3+y63klpkt@Rz>cu\^{X k/bK9W E yƵz׋ܼt#\$p-F-O!:ƥj9r 5Ů$ mBnBKD@ VouoT!_ 2%kƔu;ȘH  z'ry ,]њ6:0ͫ1)H/0>ő 5K*&BvD7) S?ـ.Dj)t.uƵ.H"ؔFQ֭SH0i2\4 D3[gC4\iӳ&DfܞtbA'8&z6gBo-}*Lx+?FM]I7t'u-8lB X"8 ^9ۑ?ځqY$WF'ydBA?G A\+D;k&!4jLG}mk3kqz=84ʼnq<#}8$ qNveoDMWb͐|-8H+$vAz8i$L }(HOՄ?M,?2iOL/1W[\D8яpB-H)mTR$K <llzE8d&#se|ZV뽨3P~l 3EYڤ6mc:@ev3 ܕ]5! nlSLe\,ˋp.5SI-s[ ŃxKHmƎW+}ֆHz%nH%oG*7嘾ގvj>vWqy*"ŦF?ȱpY5L_`(Mݡ K Gil!H[L8Ч4 uՋGP\dqzR2ݮ7WՄ䌱W${%ƒUUc]n'-o;O\+B) (оM&@82˒2A&jcmڿXDOK/G79(s<ӲA]e(KfZzn[p\ ^ѺǢduM`O'k qa_{v92*L/Կ?hye(oWv[3QB@oX+t7}"ƋĆbA4eϓ=Kfu6j ["ܨ!{ t4w(v2rˌA D6p_n[wqBֱD1q72{Pf8^,%^#rl?\& Ϙ?ޣ<9G= 0^@  jgސ1w~b|B$_J JN.R:S([/4(I2Hɳ^YqOu_6r_$I*lGi@~Ie 5+%IҢhfX02l$DZ NxShW"Ŷ#yrTjl MˉjleJ5}9 ͋jlq9#.$5V?X<^%Fá2Qtٴqkzы3`vg z$]Hn:(Mc Tm\"Bkm1NO4ŌtaSx u3Kcv+'1d) LeBWnV"T 05N܉Ƽ^p.AHbXf%&]'V,Ai>e+Ab!U#c{~Mn0mMer[G(sI\H7!ͮο1rxty"<0NT՜-2/n?B-t+b+=f-ڴ*O[)M(SꜮs+]BTvK]_n>/LqDvNRj^`; ]}9G Fr[ :T6}RPY gqoyŒi`^;9Q *신vrF~ox,ۿ*V7~h;4xeBݜ 8!tt\Z82ZA'#,A8.ýPjNiMUJyL5& %sY]1j&"b$^dv§&jv2tJ-=zP9pJ oZ Hk(j]ڇrhuR=gӖ{Z.K(ka@϶qi\W@o9INqZJpXC>^YX/+5`{uAGC*谽 dQXDVU_smQNsKZ+ǹ.J& 8CT :0#0%8 LNSXA90k(LafbU.x rIR GAʘu+V[BVI|,iƅmregȭA2R1T[d0fsfohV9J lG읨6CLd^qlk; ט~VQMjBd|X\׉h@wJǩ+u _1T_";)*nRs? sX _2O M 2yK,Q2-V_D~¦P! g-J$k1[\r6f= 󱯍=6t i%>ڕ It[ \WĞ9`ΨW8[M+Murn$ ʤWuֻm2 |9 0mKxEC3R2 O4đ(Dayܪ\,B1c??N4^^4`~pA4k\:n҄pi1"M OeJC~N "[.,ۻԻOc # hý9y,*8w+Yѝ6P"so* ,k(bq)4EZi{tl嬫$́U~)R0+f7*r/Q=Õz. H,b7$iu(@K|=t@  #ǥBר~Ⱦ >>;93h "H?blj +o?ŪR+lH´02K-mAB }͓;*Ym\'x qBn7ߤ룤OqĹChyU˔eNǭLŏP=+Ȣ b5@V兒35byH̐_pNlxBKTͶ[+п]YU[3Ozq^ש GINIjp݋ 3ho,KCPg4l 3ݟ-ҤpT^CVUͫk1NL*wՂiX๜`I%^~ayO6lϼEToj^AlܣM$KHjːWVNl\#Almi L2`q,XQ,TUv=8tv&ٮIAcC=&ҹNMS׋$jV+hg6$n 3>Nzp|z9BX#/*0׍O8ܙla*!1-PՂؒJD"QF(=7HeZrF Z [ƕ:(ͼ5 $"lCf7{c!kEp[ӽZ~1{v0s/ ); pn]2jfh#0;"dHbc􉘂gUɮ~5`tfU(h+4 "kaVِ=Q7`Z25. OhVZL=~ jD*çG!QLh (6hA1 MD3*]~PaD\߻Цr*]V¦jLD#);4D+LDgcacU)8VW!>*Vɂn?Y6_F3wFTJQj}$0C"[R`_%"g8uù rӃ2y[cBCVv]&ye&B->ުTBSyĴarCGУ Q=-^hvVC`ߺ<YHOR2q5RdM=BHW|>i?(یao,m0`qnTAǷ*(JWPk_JՕS1@ǚcf a8 VJ1\:̀7@e;E+2bmEAH+NDwYC_:^م ԆFfլ[%鼩b3?5lY#* 6ZҙkjOSI]$@щ|;y HX<^%!x?h㢑AEFJ N+*|.jңnm_HEcMD$}ޥGn_A{eN",}afxJea(w|7-#F2}H_’ QgR*dc,H&64" f>t0u+?T1}&tn E :fL>T]8dUeXxu;ZvGN #lH B05rP=-KU`JwF8 )Ns֡AI҅.wժۈT5# YCtW Au_[Vҏ[ q`(&s55 Yh3{aOuƿg]Rs*`AIqhi$885B94 Cy?}5z, }bH\0O$SMэ"{illzqPo;3vEj'Ǒ"z?ySH;|;O\B^ZF 8Ys< XTp mjU'-m~rqC>Dg<0}vpvuVys;rtd"6% >s֧`Pe tdaK5s8t͋QS-~5*7L=]>+vMhC/MZ4K^3VXADŽCu}Q?CH _NJxmDHjNl*pSpqeg?#o[r6[AAVIx0^@Lx^CTT0_m Ip\40B> Gic<:4jţQɦI?ǑQ$ aɊMM[!x;qnyn*bkd!g9kLl*&([֝lnG;2z[=b6|TyI9׵ D|`tgלGN(Ȯ?jc/(0K;Rx-JurwT[<=z7ŵ)R/ d,Rޘf5{O:|`қ@S8"مztHgPSQxAо,֒H a%yb)2R?x O5=0 NM?j>bD n2DoYBa3jt/!OZ!EyK&8^Zr|\mo3CW TSۛT8ˎƨk՗H-L{KfLuhk GJƃmuot9PjE&F$6!/5^U*"-';&F1ϝa8q4.ƠEcmp$*/ nq|OUyByl13"}8;I띷wL+_)y-735}gopm#DjhwTI[s74I|h"*jcuЦOF4KJr]ұ ϥw،klÐF43DPONudC*:zWoTTC"s G֮K/Q?ijsۏtƬ\9 M%)%!MXsLD9pfn>9 X ;K*Q@GF.LjV*WI*aCp!hCH`p/p&x5vؼwyx09J"yO0q%uX5êLd"N\E0dWr,7$&[G36y29x MY='xa6A؞h"'}5hfYALP}f5Q%5 dyyh>~"P;E.ƹ6\Z19<8^5S7Hz5n&S汇ynlF=!i4Aj{f  7!f$lDm&Y73&.\ \u{a+f%6*7 k9'ySzyt~d٘hK8FTrk64Vv*if6ZrٻOQb8$ 24h  H4rZ~f5e&k(9Usg= ‰jU7BP0Z+ŬFgdz #n/Uk M@uO Sbh+ mU|i,2z<s]o.!kPQj־b95)piԼ$ ~Tk#yɨT@gMTkku =J֣V!ᆠ:ZvO)NL.s8PAdC& M[w |lں& !V}Hv8mc?ߗ[Xv󛥵v^ruuymk,=>ɣc=bǤMvݗڲh ERp^H2}t^6xE*.sRn˪k!7_H諾ԲPM$qpy#e#N*Ioa3g\ٍU5&+ GubBpXng<<ӈ0MDWJp lyl}J 2 VX)=BuȓNh~UI=tQA.Pc}E9#ẚ|{r=0L(ΐ ZNօ'Pn^bwgKMan*M{v9Kts;ɛAow=[¹檋`2}| Zuw>4O$}b1g)Qe2, ?Rl #/(l9RvZ-﵀>_yEtv:!)NV~Q$C3OS[HY^W4MoR1W[LgkؤqTVRDEP2x ȪU.p:&Og$aF4ʶ$jtoǹp/f4aQΐ wz h{lL+a@<,zp[4wqF=:,ީr^0j{IQh":%%*-EP`6a@+v,mW4sD}H؇򧶾:Kf%h7|=JmWY t@ITpe)dtn)8w/|H;y/:ܣzlNֻ㞤 y~m:;SX$J _^{d})t^zQр׹4m: U%QFQ ,@[TY"#bSMW8g4<Ж?}2J1\R,DRAQrr^},Z@4H/>TYĊ2C }yYB ~^(;C:j Q]JLvg?S$|&sN=3͐ўF6I 5O_MWUG'j"~e.c$vj\mfK͝d@Wk^W5cǦA]%D'@$]ޭgG u&,M{*;dQukH9yC/$Zg(W:]ģWCU)Vtb"Jtrf7"[U`T᛭2pфtB*iKOkY `MZd.וw*Q?r7v1ty_ޕn~t얩?# V:1y,T8T Ydh!~$0%{ _Yz:X[3Nb)oڐ,.uq̌{;0naR=>^=Q58֥ԝ,aQгšLCYȜ؅u)ou eu4,F}ܝ(6̎WًZ }8ct1 oLqHY* kgNpBڶEmiB""ҏ\UI mnzx?茧QJ20(48X3D[iM $3WHC wΐk2‡dar{b]HҞviZ=Q7!G@YXV@.;bbN/* ,b (\cIWtw`.il-Pl2jf,(-lTJOzںܽämf~ .v}}(*d\>bmX4bOX!)&+* ucI}6BBJ jE\}:Զ{ⲭ$vBƀ`d|I>Bp~%tEbF)0\-Y{O* $9yd֟7d`gJ˪NO)o7gEO`ݟU_h|3 KGbu9q%&uT*f^f_ţ5 49h=rt<=36l%#^2 !=(q'v@oZ s~uki$'i8h;+t/POGZ 0Z(../B,i>5sLsgT{&,il^K}u JٶیIo]'Hpi!sR@qTb`-P# %l3$E I@kD*a;{yB_0s6KH/є7S$ K6[h I3DY.#N*Ʈ26 P|&F?tmɣ)_`Cgqs\mGFMopIϴ<ۊt߯Rz^`_i`e7)&n\ӴK$q%30%J>r~އZ[qq\^ U!=( -yykÇO$=jR;QaI"gi  D"O*" MԺS;aV!vŒF(>6Pk8|ngΥ{b:= O<_5˅s$PD⫭(c/I/RMR}~ɤ۟j"\B4Lfaq)O|̰tGYĠL&KO>=DSF78oDV&?'s霡2HZH8\lH 7s*r,c8>īW()-LPz/s0 G]JSH8Z!}?Iz~@e޶5YIEq/~,&mN4S>;IlvU8^=+MvV v,ȎH5"넞;`>{H nDsF8տu DǨT筞 /n7ϩ4 o&7n-9kO`r꧱=Dڰ_QMGь+D9-k-ZJHINfy▹YB 6q9[HwxxyS5\ !o& J''+(57#LƓϬdM~x")|2ufGGT?\ǤWJi#&Ѩ1LV8jP?pjvnFI FڪN|;U~.Pgj`F X& \g΀m5R㰆󑃱{xw|[u@!q7<-_KSb@+ ˼HJHe)Iiv]|Fg כ)#1?f-voOj\V&CWcH JVbf)Dފ:~U?xr޴n4.TWǹ( /E~NV7q^g:ddiǾj%<)ZJb,JpDxTQC`P,mSS| l&{?i$tQA WSɤ`QدA;&?_ +TE+6lg1K@ֿI2_䨑FaQU2'؜$ #ܖ*<d sRS%[Em' H` @V>MThY6xf@ A^EϛVg `H1 ߊlC,+=Z2wn'?73|+),v:5q$MwN8.$q2qj .g 2 P[n@vf|r V\g2`wlc7m=[B;̱%N殮@0YwB6@̬O:lX$Y\yCFDCL8J4Es ڥv`ʠ.HMyMWo,TWzeS#H Q z8"__{tO%ֺ*ڽz3œ3s#:~$rt]J=b\A sym_kQmw7ЊBێ7ʾzW 6?H+GФ%#A{h (f1a>쇕p/9IR,$#DhcKqE^U='@^c k&K~q&$ug}pPJ8oy@+>[?}o- 1{ϲ]C-t;,6$K?:J}'J Zp࿋ӯZ4جS"+,[vcpE6/@d7~06d\RP#({U;xir'QM&:#U: jB>3")r!6iz}ڤC nN[hmbVs22`W#g _zTSm>x ;Ft+J!(ӌ!/ va;O.Y`>$qz7j+nL)ƍgKmU`|7췂=}uB+덗!;Y/$!*|Iڴ9m"itvR!} o9+lpO6EB.b;Œ}*,qB|\ocP}ٝuv!|u\4eD!\ or[ B5,a`twPaW\ >@be~}$ʊ"ګ '"D:mP K ?g)d]*c>6ȷ]k!ܓ3U"T[tWώr5s<?X!npa˙EM$!E-Ahٻi" fE}ދPNRY_+ގ;7Ϛّ{tVC3^x 0lm| U0"[? G֔q̩6mv*aJH- iv+@֮[ʹhr-˳Bl4ԣ/2̟a#}GToF"lDtɞRf?:YM k_`>,V?:QbʀWQ#=Butn"F߯ixlK+fj0DΒm!m1AVXcVNI2# ><^X̿|E,)qX`@OHu+I==7 ?jb^P;P{~GWb B]QS ! a,/>QKO#Xps?Jv6'gK)Zm5xcIX4?&>)TM "Z `~[3qn \D@*ԈZq[$(4y͉ћEzzqArGXfP^S2\ŋ7G I`q nCmpI0F-ϓ}Fh}7sREo.Zc/RX rJ-?n uoT+b46.| ^9Ac>XS8hT@{A/ 9 BBg%vP (г6U boߞt]`O~f0Oyqke }ofn{Sl 7~iZpW%-᧳:oI- ?9n4/DWdȅ>}Y0i}kt+DDyGL 4h[S)QwF#U]F7g1To`2RjܵbJv{?nFzb/$|"J;8x,V z 0nIK{l8)'h,&KU#}#skN2T3Ϯ[NWN*r A{ rq"XfS&33`l5_ށtZƵ=~{1$óC\,fږX&_L> e2W~ tf'`8EVut7'wHZP,| .4I",rC<߂zP9}v~Gv2YptW\/IbkwCÏSyIF3ђ]`bfgKOfz`u`(&8 ƒ SVW.U.fJ~B:UF:=FUJmliΐ2!Oؓ<@SӪrԗpZ~1 u'L1L8)g`b?:`R+AG:s5 :뵰,Z 8r69ti6C/CQJ Y ITs.XfRl=r!!Rf~(dsYNsbteh '%XJHK> U_3[@i/1Aq$!~y* tZt!s|Q@*@<$1N+퇫ۢ;\zۼ[Qt}V>6~+ }ޣg#.:_v>x6kSZ2sLZEU<͠$;ԹŜ \M??! TXo-7e5ZsVCgs'-vG~ ۴&]d`7yDLٔ@iQ`+Xgtc/SuA #)tn6Q Z F˥(=nSW5JHiRz"V>[㓥tX9RkSTYP62yk[CoP 62>B} r*a4D_l~r*!u9ޚ>5#~+*+K] 3CyrB׍@flg.!gH[$vaCVqGbt=b/FJ=YrVݷoSxFL ,grŚAqꍏlHJ-<> ,K9eemWr}o^LK5ߛt߻tKD`0x -"dϞ) C#W87!7#%_W?_tHe"ݭLՠM Fց?S}ЩZA`꫆d_]1n.Jc;V'l JO#v`&rg+co^Dp&K7/0jF=7GW(v|oˤGЊ^ңSdsnJ=I+ĄsCf. ;CZcy6VTII>RH>M6UڿI5I HI؇h HJ?Un{Qӌ踦z[ɭӵPКʂ#"M7ľ &hb>ѺeH|Lӂ!:^ímͶT盺O"W\/4iͭbޣ{8oj "#ACM9&pk5#TPZŶ1ټt>EJSWL hgʼn"/it$M5Uåe%sgF=(k%V{i4*AgRfC0ܛhXJ:|&(Ċw~f 呫Q}[P]@D}!%\i?p=%1>7ѵ\FJ= q?MЅ|^$؝^L2'RWh Ⴔ! 0K>f;$pabJQ(:>skzSh]c,Wq+`ņϱM:d4K ĕjU@){QR"N~f=I*<7g&pvCFQ%'u៏I/̟] etd sICfq{FܛG]䗏n+n\"\(a՜ɪ|ǧ$GvJh0HHJo?2cW8N bk)CĤ\2eWj 6ı) *;gxE\{.zLa>۠v%30iDخbUhtYʄo2.I- Fk~.?Af_ŝ]OƼ 瞁\y]z"nTrjVY$R,͟6Tsw ->M=WŌO#B3gڽ~>`%l Vr?f!x ru]3۫ypdQoa)?.u0bEpڒ/kE>ʮ~cdh٧ɇb #/(ERn}22,/`Ϝ>'97Z3%+d|c#q=.$j /3QRf-, VQUo|Iަg0 >&$acEB9еU{v@E$(bzXUK?Hk'>. R$튂/~ڃ _hJ,Mύ'CDw%$iۖY$?9D*aOh b&DwCbH5U:i3*%lkHv+}@+=}BG=,~dKB6x O5gN(X(~=V)`1bS q?tXA ~-G^*m:|ÍxD(v7pͤc۶?"-R9R"Q)t ->6mp?צǨy:Wqi̊ 6c~ERX6`L!IgAr-ܭmLB5<ߖ3SpG.͊|^f{*.iqx~*N"(RQsxWf}̉?442Bmi'ZDXdL!!zaoE<d>x^!,g =m,~_T6>g0:і̘6$d?1VX6 ؇9!+:I()іiڇ͍F5 v4[T1_j}ﻉ8Av1_o` Kr'=aTB|$i. j\. 6\.NNbd~8w 픽V^IY~َLW&Š뾹&.HJeF\0]dNQd o3pԘޗA}YcneI@YQ۶hMGp fV9uK3T!b$*khX1hA-Ƹ]ͮ}*zҞXm )T7\ᘼ^~﫳IG]G9:'Eyv{4o𒜲]Kq9h| o-ԧxʄg2*ܣaJ2|4j|ӟ4SQg}7FbcSL0@)wɏ{vh>Dirv̚nZ{\Q-}8ihH?=xZ-Drh>~q|yWg$B8vU9^!m, ל [B.Z~(x߳/& #N @0:% &y)W_B,E߬1?D0ÔQfg܊&3& p*&D"Q$\;a_uI  aDJঢ^R&%Nϼvqo^)jBǓVd{7N90kFke (U*k>Sz d2Z9!F=XO=$\KTlIV8k{]e=nk :Lle̤e킀^~]i}=P?]wͭh" u;1en41,ya7\"X 9vB'U}ZP3.,gw%3Ɉ}?WKB0(<1)1x j@v᪌nʃx-Pmh%7ɂHl@Rqצ,ϖs&@xP~M{`.$,ZCG'5x1.OTS8AL=Y e/]Ê6:QI55K(7ķ+GU1&,$cqz_Z6 Ts}ѽ D$QQu}X緸qAڏo{'V|,MJ-tr ${v~pnO؝W,J+╽vwX+ LU> j\-=7y =(N@lK6$z*&Iec $\bKS| ~t: Xz04n=>9|##agB&Phޫs԰Gjv@-[< vrB%D2]HcI1_Ld/ۉϳTa]bqзnG[$` rTYAD_ҒZ6H"pTfXo_+%b߰YZg GV %g&S3bǫgL" BRD&~EXܱ%IEIKR~Z^{)F>t[pKi%joWXa6cXe$ X{)Ƿ~`"\߶B|Q39ryseG ڲK%b<ˈ/u!l-4}chֈ^AHz 8!:`dUթPkYEEu׾V>Ik*+"u0HX[ynH 3-_q& )8Ht~4N ݩQ!|`Oi_70`ՙ0o96+26.3r8("{a[gCuf;vrNCV& (]_N\C(Dj{iipӜb)^Is!|+gSݎAji oM@CNpl*@Xēh6Щ o矕WӨL'cW1b"X86_2u jݴ|)m!* [˗l!5Rk~:gODB9ֱC,? bi_oч\ilA'Je 1,@ f~/??H<ɺ~FVA/ NW({G$umb|8M}+(đ,=FR+$5$i.]RFr(gcJo*50*JocP< !hU|F4ޏfwF

CgX_" δLwE\B,yWmsj,'t+ɮr6Kw|4coPDŃTDUE L.Tj@A1;HCmd-VxD+]iLv2^?ITtkdskM0 v 6zr^&p*STkkG7*QVDW(7(.Љ'a㏝ǫLlUrn ]`λjN7.8d8jةKp%1Bm}>Iu ]:'{a ך*p0UmOI vstđ(#UOuJ?Ǚ{#(g=u-rn£/W1IT\Dڜ֩-$D`1~=K>%jy5 XJ@lBbwۿ&پ%>qq d|_* dыJa[Ӭ{r.~h_z#AœD9I iak fq9YUgq |Mrf5wjIZT6HA.hd 1֗]P+w.n~+٠C$zT>['V.#|Pc"nzV+s?h6i}ǣ_AO|O(W܏Mj4`!["{^3 Bp * ('ܢ,tJXHm`T6] JKl^zӍ4p)y}NآHAAiXYL0^T|rʚ,KWdؠLWm_2<@|#lVF8tkٿSI+G&6t1uhoX\{[AqǴ;U?B-reF^/Vߙng [gh +ͪDhY-$iRbiѷ=NmTJYG-.h( &{"' 2 /L6kr(Jj\k.+;&6}٫'[:ͯ;aZ5jq-\% ɭ4F5plg3{qI" q_~*<3.dOKOtlAW費j,-u.rB|(`0V.6εx"-EIӟ+wW!#QB]|t:ѳcK-Wc7W߳Mrbd|P "˭МwXL(<LA`ELo΂`Ղ*@9x1t9XanyHۜl#,~-aeZ(2l" :V18ՔD)Y&ds9{j-`/Jѕq|2YT ]T$uDs1Thi술M]?X0\ Qٲn6"Gg:dءfdw.澊x6+5ɿ*Q؈RӪQTH*uqt8HrJ#5V֠ƣ~W-IZ((Zklτ" /OtZgR 5!4fLb#} \2Nl! \/@A!^-$W+|ІG' !;}slql#_ ^>puǼX� |O!촑R\H--v$FkHA-;[^,/ CV\뭻EIc(DUKIc|wv9z- =d%{& S7QU@b^LkˆŇI!b+)lr -0|q~q@hMy0-ϵ*Ovy= a”umeecWKG$( $99Dɩ(V|y|Гz.&q`EGSxm kP9gZ/r_83#MH'F߾k)v?vҔ,tBf=%:ypIU (.p='5T{o`W*)G>8Phbs|'-8:^FQg #׶Ʋ>qe hc!1NzCQM/j4Z#Xh_Ay˭ݬyM=>{SPd?4XOZ8)oȟ>04nTjLOHh;}V>[5!EkPt+&Dy{u[W\m lq`Aw-s+}ZHO&_1z `!`M007P*m]0oE1}1f}|PMj qP )!BmJOL (LQm.3yA. ɻLx]fTr.dV3[X"/.ar#0)f3Nu*ćKLiU`];O {k7^^|e tWephNVm&5.Zeǥ4pəHw{Y(QFݤUXTv *Ϳ>6hM]"V6թN֢ ,XG}{Z=r'8>;Evޙ] "SUza0+/tSz`jxbmJ"^N4De%mh4PH!ٍjQ- /QyҫڞSOeם8Zm7+D6S\?J,Q^>?v-^g1uc/\~xg@R|eFöx跹KC)ڔek/8q|7:4Rj@FGXqJo5,w,w\|GΕЃN>gfgjp̷W6 *Q22H4T0cycLAۜ-x}*/2J4ΦT=>a&BII>䰷a qJ%Stzs|KfGI&?jUǟ0e}3Βt'"7S]P`z2_7 ҐRJKAȔ@H1o z2gu9y!e_ϓd*]/'ҿ k xu/<5J)K#gHx7iDqK;c! !5ܸ(&4aULP283݅Y/{b>+TrZt'!h6N;/Zꉎ XkqR;LFۛs[-Jxƴ7l 9s~ x#CQ~=~T HGL56z;ٍG .vL% :, <]>:VPnvu7o.$s`7ZQrw<Y2}.]܏s~AfP HB\sbaH\pV݄bӼQߵӸd3\P良|!1}'Si@ÿՖ_P Է{uCjMډ_t[+[vAN28عލĺ# ]"6 Oӑ+0gFqkDkaD*t P-L?3>j8xσlk}ٔRHW8`ueڂ#. =вB*"pzϧT&[~㷀(x.$PHn`l.ҡR0f8.?8!g,yP7aF(){a7!uUƕ3_ yCHmҌ*Hv .qZ/_{63!K6L#|~63}u\֋X} \of``$\05ޙP*:J kfd¦2 _˼Yt Ӆ&U;NHMkW1Q%e.~n\mDJj[͍1V&fpd)sjNRBmw!0UiȰ^Mf>oϺmk dl.,)J^p*G^ȼ#us8IɊj#SȯN̋lYBTk* b*QgTD@>JܝCAY4B |:#ti Ku&uݵO ɦd̯<4fk!>s/EW(J>7v9E8ktR||{!x{4[_ $fM]F) aUD 97]C!3u4ުdguP.P@0aޥ^oQ]Uh:ShFAzW$(}^%׷q؛q3Mi6n-{[v@X 7[;]uZayͺe{^tF~ޙG_~W+h+,XS *ixHx2}.q/ݎ: b;UlsIB~4Pe?kMeS EX,^K38{ˀoW Y^z~K_Dό }}2崴pƏp9Ż,آsPjqAQl{e恰|$TۊQ ovJݬ/ꃑ Ǒ/4|LZn^4nJ_^1X,{ENDjS-eGfOhQ茪Wג&ģDKc#J_L3<2Ut':`b<֯Ѧ6F(2&VMq)1vK3AWosB+Eȑ6@BFt[DzJ7t%KnmeW$  #|"f1{n} NnhV[U8ek#}婿C~9 o)07}5_o2\ FkӸV_13l@oS54\/@HTwUތ?ol% Oh$G>ػ؀CXh© uʥ?ZAZ?>{"Fc2x<*ZXwf87[fIfxa_)F& C&yYEAQ ˻t|(F1*k{&'xGwJn >f ; _?.CwPLk[rr+)C$9ˋv2dž'4 ۣC/XEh;̱zt5juWEQ,>Z"9oaF&X6w'ptA`M딿5Z82 nŌC'Z$^+};+16Z8ԫe >/7Iإ)IϲKi ΜD1V|0O7!A$1xce@KsأXumXf}K?䧧*?  fPP|\ dqShQj3u>UXkYOijaׁ#&WrJi- Æ<1 kZ^Ơ$QOΆQH8'Hw:/P"4{4"jv`_kЭ?L~?<6QuLuvRB׏Ҍ¢vbQ*hSL#*AxpAU~ F@Igj'o=}qQ)&x7Zf:s͒1jQ]qBMfMʳfJ| Kvx[_<㋓v| ˏH85= àb9^2%n`0}QaA@FWBj[? zo&Qt37w5\@xYYd>w3.M\NWzYas ܜAI v._ i]PYbUmLھub6RB?&i(dp5̽#`W: >bjvTq߇Ɇ\`9:x]Qe"ih%r9xAwDZ.E,%'F)SKiCêf-P,GO҇y$K.4rܦ vObN^u^$vu47G PNILl)a3uYk:Ҟ,l5><^Үt;Z&Sv΁ =<-2綮YBu`v%Ԋ4i'qA*&y+dOeequzs&4f(̸* ېMS1yH^-|u;J3V:dP+Gpt"؉1@wPjZ Åb%R}/[ާc'I]Ļ|!]WhȠQOV]zV!Mʉ˖ X%JlΧصLecY}?>v &!J]*L_iXk;m {$Ir%6gErZoq#>jI?.⁠vzK}́odPRhfi@nibf"1Oz{ %|C&FzCf. T/c ,97bZ.0Vl+gxUhAh䘻T L;|ҧjgUS{m+{jaA5-7_)FE bI'; {C2 ձr6Oo 4=} XKtp!*ZN4-*7ãiY z}~~@l.LON_auI>8]~،J)]Kե\+WtkʤG9W6+^n19W)fkF58$,:zhZLW=|88K_=М?l9EZwoӔx҈mrW;nFJtEx#BJ3Au+@ ;/0f6نNS^+*r|%w̻Vд,<{dǟ 3X4#ΧOvHZѸ | %M&Qjg.Xv4`E,٫5G':L6S^ h#dm]]|X8i~3>/b_e~9He>P 3jN˵LO0iů_n+T6Vr1%(siM !W RЪKH|cm ,QΊ;tNLeܠh}Ň]`3Ԙ=伓15Kn!\vcKstKhm8NZ%D! \sWZXFWٙqۚrRV7U% v^[eK߬tzϺkLZiW!b7:ݺdW՚nI}V~",cu ]p95)dWUOibSw }KHTy}v\-2$,T+v!hqϮ0HxU zPc15@}k)P4qSxz`!qm¾ sKw~?8>U c)̿ IsKC^fF>&ot{znʼn\J+l!bWV Afry PwK<8.#b~B*<ʬILVʇ%WQ X/R f,9tFIKdCc# z]Fݵc,J=Uٍ~ŶФt"[Ɛl`8{4i/Fٓl͉#XX WߌrX$QU׹tnT(0yc|y sa=:>M[lG|?2L1{{z5mTrt3ю >W#ҕ+]a2|,He[ZA~!p\тI>iRڰn ky U=K u vJc"d&E{#5dp+L6`QQ׹j16@ql`YZtg?,\;iA)_,UGۻ]`G7YMIk.|a1\h |&j@G/='AYF/ڽ!CF, 0?=n=Md$㊈sYԳ̌Lm4[[׹[,ۢ`aߩLWAۢ Ic$%uf90֋Al~^I'l#@Hi >fx(%Lbkg\= b6B6X<I阨ۢi@JMqͪVJ>DԔoEc8'o'ᾃgNQ5$1|aSޘ>͛hfҵESʯ?0"{5v_pCxZHR7[M W2߉CRD} f_V +N9 UHe!Fy]QEembZG&0X<ػAd1 qFL 0M2 Ag](?TP%_"^]a,bލ\b-b R_{[o݉k`P6}[L(0jdbH"`4|l̀nB y޾O$@k[4Jj^_,bS1kX"{F[~zF."֕>/R<JZq>=/uzN%]DȹWЁ>tWgb|؀)./E̮w9I1qN @s9|b:+^#&v=ٚ~??-3i]ѽ _Epj`E\/gtC/Nhuk}gǏc v]H߼<@813e7=ɇD*cŏ`u 9أ,ZRUQ HɊ.g߰o?h.&SG'<=:&tܔ@I5(3ui]*/?ro*n4 RV~Y{,,4R3:{~ Iw< @ct3dcc=溋?Ԭ\x+vqCi e~e@ 62OdʁT6&Pǝ. ֊++:·Űɻ( Bb\N1+UѺxd5xA2Pg"V(J7 xZӉ}4SaBe9RK!j.>2/]#^ WFL20դU 3Lʊ4n"D@e:\# D\F=K|!d2na١CQYJ_POL5(JI>Kd=W|^҇>P%u]v0_n&OenMmjV+St向*ތ#,0`0 ?`ƮaϮf9l^߳}JB/0opK.%79$v^a.uwm=8vuoQ6A=C B#A&Z*9\9ӭJ,n57Yyl(KvbcQGpgp/F6C )-&Z#!ֹ0i|7՝ 1u>>)S T<9:)y.p;`ѡqhH5}gI*Aʈ[c|좿`ԡXֵ<'2]wzT3 {83[5I̯2Fנp͇HӉ%n-!O nq7<Ǵ# $;0[V,,Ĵws2+zﰔGGKa19;EPeB5ew[~UdGO 9')zK߉o]WFZ쫧ۿlPe1C>MLulXD;s%?VʹﻫD]9d d"mL%PNߴK@HniUk}!.nɅwwUiF]9O6o\z[Bй*fԵ;R&Gv_#$xS֫4GyDq䈢?  $KE,?G-pF)>Y1av9zULTqf3RV2U jLFk(ےߨzd.hV]y`p܁pv{wvD)/fo`P3?ooE^j'W^?R͂vfeL˱t?ޫ6uJ)*wqblh\p"/Ge+=3\1sLJfÇ]9W,RKť ݑ[ L IR;b l$dhT#p9gdj⇘#-$ I4H̓㞣<R`< >Ӫ%=%MTUk:~!ڭk_o%`!N]XLVMhz4[=^2Xw1ni-,(_H]$+p["/Up2;9KP_t[i䤜'e$@}v=Lc3 B~qhʓZ bwfzBkZyRsfpľȗe ءz> -umD;CTX49ߕON2}$fSW=#&ڳ8JV>8Ɲm߲Py-֟ M)w>}ؒRO ٓU! U5l}eԦ_&+CÔD@[ȇ؄!iY<B:jLF.\;2anR\мޙ^J1ۘCҩ_jxVK  wWn] K!-7Qލ V /(riM]ϙ}袸V^PbCGGT̆b>-{o}ȕfLG`;7X|&$WGnNvPc(:̜xq5'Fv@q[Ђk68j~,-()?m$o&,OM!4 cGά{i&%-ָ \BPZ-`)~d|X?K;r%D* ,%NX]f{vȵi]!HQF=y |Ul)Cj|5md/?˕N50͙9s\>SVs,']67Y6..UӼ޶D To&>3W<. F:Vw(pՍd,n"Yl煉D uO+> ds-Z!AA6R.w?h꯶VF)UJ$.tk+5Pg D>[L2 [@ЙidG0םݚe=\eފ_<%$Hxv[aUր[xKɊ4Dw%==i%X)?;W tޞ-2D˩_1`wzYX{5b¸gD$\ъ֨$@T$xn5X4*|&h5$a=;^V,7YD?z`Rst /_}J&\Kkfr9=+19v֕N=kDRFҤu)_\SRݚ߅ U>Bu#ʈ;ƫM#V>?gqh|GH|dUCG K|+˺_W}= }~TcY\@ROUlvd#M;SME[ܭd-D@:Gry%h0J!Uぐ!b5DJfJ1)5?_cutPW|1GTalɘۃ xlz3J~P@^fKE致g(B6HrL)$!>}%ål 0mncR|f_C5J%|lU{S-2ERpH%;Z$A4]mL:p v(ٶķ9o:'Dbֆp P 5Ѧ5:>Naع]}15h|W- v\R0,^GM1aU3Q!*YWJ:A,<>'<:&KL^pY>PeO򁻣ϗ4MjC_PRJfyOJ"5({3l X rDhmAc=}p[Xe Df^GLEd8,%CnscI" A1enGX5ً{\,CsCS~ IA>փ/ dHϲbfD3d䭠'ݳ!n9̑d}}geAkHB#{V A( Ԕq:(wi-/Yulϲ27HQJ>>(%n.`';"q15аfPL#vJW ]K~yA"mc :WUn%\R&ؘ ޾G ]Knf2iR0ˑaRtlMUA`:& ,}"w#x-H ,xlrÙTdVYwgY@?в!"hq - s;|0\7iFuF?ui0:;8U:{PPGx&)& dW Ev.~9,#=١p{T6 M9ߺ@~p ]*(aZE 'CMI ]^x5arKr7#l!3.oA p>Zji哏Onx=tWeBƑkS1hR?(^z0; ؿۯI|S#ĵm #\ ^^Wp<ʵ!OWF%KA%;r¼U{u9wރThfNcb0"6, .^"ۀoNY>WLȺZ.;s慤t' 'VٶvCn#lfS+'-Ӄ iy.֜VZSvc.SтSY9i)i, PY_25 3jԑ$jnDty+|c$a'JiVBVy S㛥?ij!?kWjŁ6ݿ zX!E;~NbP(j;OF2mڂu'Xm;R0k.@;5tSb0]pJC}1GiIsRaNey:Og"Opq 1@W%ɰ;Ms\J>i@qV'>InϏ|l8.yg#,.>}Ŷ'w>0BåF(oCdJs- ˩|'iv}j~D ,D>FijE$/T黝 4AKՁ%_Hi7_c`Dș$A%h:ހ#2Jo ]]m碍CqM% @?6꫏ 'Y>@fď xj.kxYf* sC$FFD|yQӇmQ߽!tb8@RA@zYpN4{SyϽHɢzc1h#u^CW 7YVcj1qHhȋpITu}71qm"d R]g }Cɨ1CIbm8tb0r'|0vc,Z-E } !ij|\ [CIю^'j-l !*_Y6Popu:'w֗|.j7}$G-Pp(0qlwVkmh4cAq3RL KοgMs/2E_e=o>ϸN.:$f%̡K}|?RZZifgVkMP=2$|S8 },ݷբ\9BY@\v棑h~1ʒu ~:D ̟USvw H6mJ}N+DfC~hgLc}02d3?K# 0sudp֢l3%5FdƼkƆ<4A$>'war%4rgCZ %B's^iC; Z7, en?_i_V*h+A*y\,X1Irm{5Ku4;2Ss {q%˲R,3Bq>ɧܮjn<{6H!L\Dv ـU$J<-YmxcDFzx&[_Z;KbU9A .(diY*enC?̃,za˔,VSHE=8# DN ƺlr~ޜ3RT=<~4V3FL7/-g+2=w2]&߿ /yZ6DtM3 SE,v}\C'/Qa-H{?)2Se+=\{67clްgk*46q.xQޚVuCfR %-gѲrWw $/YaeH8a^t?42-.E+ynPv^WHk%l] Oj3v](yR-  5e$zCԤ pYm,$%YņapRa!Uw;BE p;8QzsRS`$Y,"C?@zr$mNKWHLQ{[w\G#LW~V$16/oKPyˎaRGcc`K2/Кj hql$:wtm:.[3YvlyYV;i֎@,R+ RAa,(X\[>0s97(qinKBtejl)!P Nqzc~9ZH8V=(t{0( |'gT\xÞ0uG1֙ud3)\ }i)E\l0W@ .#{d@xuUPFq.8ꔂ5.X+ 2`߉%E&mޜ7laO22ްA6K C=])OWcmw[X\P#)!YQ Hifhy'/WziZ1wf&ج^yMifbh:1L%#_;􁣁 pތ"S'ɒf,I#me̋ZNHbM]=&})L0AGsY+'\D:L)wJ5eၯmȈOjQ Xt:Iz;KUYؓYٸg&͸ QI2lNBZv"$C 477` |3GeWt|ϒ>{b`!%:Od9"QUJ**EmX `_$ontܝn]ιǮ>ڧxssx@i3g!ikQ>7JS"\W8i:gVQ0cBĈag"#%: / : =喋͈crFRLC&LACr $#e#,]s,1UrK.r yd-.QMLTqVv&򔔄dzK svќ]ΓP廞{1exf Apt} EU { u&Eyԧ GBhV` >*f.K(+Ϧ 蜢6IS9I'r Izu$sE&l.N'CzSv4i B^Ax~οix%%.5oЄQ*4S/>ֳr;^KO>iYV1tr5%5$N*cwV{GZMM" 8hDX|*\m [!)兊e] -p?(3gX'M_aOWܕ?zLrM9:ʂvC/ rb/ѲX<@ShKmIl7Wh < LE&) ]V!~!azk!។c| : gLm4ᮭi͎ݿSP:!nY7SۥFGߞe& jBd E. \}% \ h/ '}9^n [U:0GXAM5aj'Ƅ_!^SùHzf&qq:T-vEPU6Amuakd?xeZIo6ŷ ů?`Ei6crFXÕGca;_;Oj)a 孋It~Au@+rЈyQx[8r!‘w:E=).S8:>j,Gj)2] 6ؚXU){4)]m59Fy»4|5FĨ^ۯ_K.] -w'K9N#1"2 :FF{?Ħ|Y"r^4eЀpUkeeV 8y9sXCgq4oJ/I/ 5 lp%hhlU_H+wqh8[T:̫(iڼ${ܴ&OuO4^idjbvn&[vkVj:ДodM)%xnZy)}Es.ɫcfQȤwʑE~J6RA^5@7twڿ6'&S/u_]Kz `uO7e;;IaR<෋ 4=pZ;T2ݾ4U`2oȦdmi%"G9o;x0̔D驭F7xm-O${ /]X*Ubr,"ȧܿ/.؜ 2v$NΕ2pA>(JQPOjf+Dڮ^"5ݿG2msK|&'ł&đY֋V+-ͅ羒X=΅yly>Mncvս:i f;տYw/u3z&92r[&b _0yoE i&:cW;N"+fCCafVSX]ԙUB$w1?j0˜5szдbH:Ϋ3&s@p{|m3c{Ϝ]"嘑*T&<\Q`ru򗳣&3+Y\e ߞECYJqN9.1 (5׸i+P?H/T짭)ZO|CN g෯ɻ "btClb713{-Tvqj 0z+޹{"]}/r:GTYށ z,yD|ġs<]!69e4rN޲ހէ}'׷9YpB"C@ ]m6kVKot*8ng%/?ٶARH+skbMzЦ8w[m,OI"D#GێΓw]Uł$gŰ[dMM$#tr@RAkk6n)f$qjlg'O;M~7CكAםXQ vQt<ɫʙIVPtmIή`G`hpN:.}eAZ zGկ6Yb7{D$zE0v6ԃsh|J+7knku'fMѐNT mү-(K |Q]+ʘE{T.\7Mrڜul$̄WSffP86t}.r\1DQlnnS?XclHS/G b~kU6:;~ݸx  ׌:1hx1#vbq q!@%Y}D͈UzTI&-"ȣ>.B "K<~p ]dғ\@khɵn?q뫱*/.oIX 6zъ8S1D;͘)5Dq{Q[#&{isi?K˛u вZt;E"Y(_wH_ug] 7NarM_;'IPv$<ĻB('#^aπ`i2ar@l-Qsbićp)Ժ,W,blȷnDGxJRU Xo'eZC(z^aPB6ш\ƀLpǽ;SILߑRU1KܻG*i(A: j+J4e5.YS|nNͅ:]G@UZף_.6VcQtfKŘdf[+5 X:>j/"%,^XzYh33TL|/|ܶ'%>8>1XB~)g -gIFt!] Z̺H٪3ՐpE%к>@#W&AԒu;u`M] ϫzCGwz#kVw!L~ PV^"coiD&]_b42RsQ lqNC!G #}@;%`9`?'3NztWeQg5.CޚWoNE*pZ6[s$ͷ@s.Czs a"QSQIe1I۸92NR[ {r2SP;]1v5|X|b`˳|;!${1Zg0~}.1$~Dje!cp|:FYݖ"da1 ŶF[T=|FQqcN'Ѣ3 xc2ᗫR Tk\[[crJ)oZQXEAqk 5E=F]|Q2: ԫbivukjE #qaBU za HѢQ Qr! yt;)_BfɤT,Yrhazuw-4((9-T|ܝրDJB+֊eYzlX^v+R^Haw-ȥh hqFWWE CH!JJqLkexDZNs];%+ERks<]plK*ILzfm݋oP Iܞ ]6ܴN`loQM;aH%iKDWС j{s<<\@ct+l5 t^1 `Eu-E'ʔzR 5e)SA3ՆoC^'naԧzy=mrQhTbwH=zPn_ qOy3aQ v,FK1&Qg" Nԯg,tV=KS1:+hQDp=upߧn ]7 s lM*thP hr)\ R-)mX(E 5`1ߥu]^ybݹv5[I!=/"A9+\i?jpS=9ΐiEy a}cC^xRdh- zL'0W\^C y|45WᆟP47JљP9`2\lGv%|zboj VI>WnMǎnक़s#r3 򕡈z#ΝfXYTLv uM]fKҏG[.$?(5\`.©v`dgMVa ǀd6U{ʯsP5 HϜdd"%lDdMEZQS@8ȦX.uǜ81ﯥdR$ {IʳmWM]E%>q}~5eQy1S= "8mK/%!Z\;) wdFfQ6KΈ*AIÝּ}P-*PV4tևq,]&r?A_$ou=-ǟIw'$ @7Ĕw.Lt{sj or @|R1>)={;YXN{ h.E woGii} .k ,%+Ո,ԎNVYfNB\r)>#먙t9Q$50@i/gTa.Ə!C-LyL# _=}@Va`= ([,/CN!A èxo1\xX e8>5:0}[uyEmO4"to寧sܼ#A2J .-͑G< I_ _dvV5U=0=" (@&(=3xjnk#}P0?}y2&?oG1f5[8,;WWS"'"sa=$z$A3,Rb畑tLNW~ѩMT7L;ƾ5u:t90HOeHBODiCZ!2@8"xz9hd*S[0BX'y"%e|JZf(\F0?Ur0! f~"!qه @Lbx՜tSVffBC&}i$oZ4Mw}W/0xC|f6dky-ē+oԸx;VL>j'O,Z%m!$V WS Ž Uh@Q=U3' 5L}~`axFȽ7!. lJڔ-M F h!i8N(CysTa V-MUB:RB8m I8^ KPmJjV BN\e @Y XLj+\d}Ÿ6cҤ)زquWչ4hnQ*O11l~JlgRƑ{En|TCnb&$@ @p6H~4YF_)ܱArd3_N~)6=+iFzyEBZb EsHeS/ Si0|Bj•яZ6H-'{r4v(Ӷ l;ƧB\ll:(=c6~,CZ'B1yUOE`xfj"WES(j1iHS$H;#ܾDDrء@Q%u v:(lJRA *`Id١Haeϔ E\nH^H막FoUI"73V}џYg>|y2s鉓9R&D4S SS.I0N*7 q"!MC3C$odu7,M1o F>@4C,6/AxD6S EP50Ȝq"P? e!ȹ?9]r $.ݞ'<eT-ZgݜJnl[[gl:Qq4rfJjSxԧ OI5b%6.sPp !€;+Jr/kNgG>W?TY/Qģ>҆w 9#r¿oH bA 9iwQO S˪*IL'Bzcqt0T(wzi|x }H(=5KY@.AD4ʻˢ- Upb3 Llnj-lȸ}.A(kܧc>[I(y/v~>gf|@NݸXR׼/C/Z6췟S׆bs9{I&s8]$ަЏ}^e{SˊƠțnGW"a/S+X#2{iec49N1UߑF ՙ8t9tR1?oF{:tDzԙo$)urp\C1ϼc1K{-vYܨ˙ 2rIմ"R%"l&mo|. e!9T'ߖ2Cir'_VwhZd85o r yb VqtJ&Q6f+fCЩfZNCJTm(b̮ѓ-LFS2WQHv*Ч' ɵBt'xӜݯH@Z(o>%%7 ߍǙK enS 4<1^V:Ӂ͝we:E&̼'ѓ[5"Ib*2zEmC!]Uy죇t.5WW9IJv77#7退yWޅ3z/Q~6IϳB^ۙ%NU > ; [})٥1Aיf&me 1ȦHFQ.7@]˩z2gy~EҼKZfEWNY?WW"P jlwQcIkc\EUq> }E1H21USC^*=Im(Ѩxsn' JA_&RVK5|@,|t )GkjOPE-;V@bQDYP*"j*Q DPW`,͛!'`W~7W47^loծO~B+2 WhęNW8H&iG '786HSŷKS>ez/ϕ ?_RMyVG Ky&V_A/ 㫅>O 羥̖bssM7qG0WfR`,/z ȏSy{#S>jj+̵Q3$g (Qg CNl'^O.uo6F>uz\iL+" Y2pa*T$;^ _LV+WP}ܢ$|w!'4mG>bS>kOYd"uevZ~[$?/g!hXD kphnR.Qt-H\e=e*=DMȦq2_–4,nGPeGs|/FM7j/46壎JqLXd^ϵ#*!/M?Ἦv bU8g]l`7JߗkoL!Z|, "+p`&DπXd.Ki ꋀOm݌|>S&? ?&jY Fh'CG);A5 qӹԵV_RR>iY;͊*zi[XX](0JK/s>FD3`ƕ4Ɍu%bl]-Სi Zw!rT4C[{lkT +f$[T@gf[9="[]1b4nꩠýWWg\s\vQOʔoD%2gt=PkT& a'0xg&Id^ ۆGs|?{S80L4[fYƒ=%>T Yܪ?lV*!2~&Uՠ(=?πRcu;vTU-9OIX}]WSrt~4ֿ6Ϣs5%qb4Wq0+$9(WNg+pu|3H\oՋDs(Յ'<jNvj+W$ޠn0B. @5xv4[W="F>UuXxB?:yj,#; x~]F51Oc =*c6%0+8d*Z1LP7?YB:>:L'3@ M;$zF@'XϡBPKDI\Flᓽ3 lfTS;ۗPAM2{!<]y`"J4f%`}8\Ձݓ1v-)5Q8!91h@^o%Z77Ң Mo YW>G+˧+7:Jl\գf1S~0Zy[/4An4bJaO`wQ55!9,ۋ)?X%'*0bh8SX0XkjŃwAљ^Xr#[\9J ^at/XgTL~80ݔXP\Qiοb|QP&;q}NMy1sQ҉:Yn Fo1@ě0vTqF1rN.,B˗}oDɀ/K:+Z76gxZ[ bEA>R.n,ߗq&3I0%58ҡ(aQPbnvKX4Mg144vr?Z媧ʬl[o|~,XN65hhׇ, /@Ajqƨ:];=YҒqT<&gY|gA;]aVj9L%% U`\J~ҽ psRn>gn9IN$.%I"wE+^4P`Pk$<#\0!? nӊGd(ȨЅoQT굫}eֲD;[e# [_?gNâ){78Al)Anf$s-uWRcfxf +ùP2h,jqՑVt'-|@55b1R K3Mӎ6Ie01dɑy9C*g4mIJtNeĔ]~5͈Sa}^ic˜7T)=K7TĒyR)wns*Ot\ܬqۡ?88A/ȜK{JKf"PVؠ}:~T%ǘCzl@+t[H0 {}b%V*]?uF 40IsКFۜ0;ycrN2$9"@셫~ΑtSXyr| 2L0 ("Iܘ)B߬[9ca" ,$ \n v)gqpNs.ewF;M꤭;QLRw.o§~p?pJB@jpi>򙑴 A.Z{VƑbFʢƧDL ZtBMt*I>y-?d?ftll==&R*"VTme53of߃Бaϕom6t!daQ>vED܂_P%JC]KO1Y,Y=(IV+D]LhO+]bZ 8s?F$֩(rc4BN8ie7*h eWmo5/vsR'KO'܊ai[ BєDe00X'I0MĵYW% 7׮*rbùoHWhnΨ7jx;Qw'MG0L[4W,>vf&6)7Ѿ%Nkneѧ;5#Sڰ C~ ƐyyN2$-D57齔g}l]+Ck$^$pxݸ>^?@zwuY^97 dtFJWTazZ_!-b/?<-l,m4zt*E,*RQfYt$;^ϟ(R'gd`G ΀^ >UQ_샆z>6nM.),<5ҡXALdžEXc}!c#;6=/ї-~dsϭo>DjG|g_50Bƨ i}`5|qW3_iɟ,"qbL@nn82?^ _k8zmwXQK?1 iWCP! Y `QCg@5M!]6gib֦/ۡtǢ2Έmti&Q})26C.9,oΌ^XNIHΈ~6IWtd(+B!䉱~P3#sZZn_:x|N'Uy LOI[&0nxJݟ5r-6 F?oj bwPǠ?f=9?c#X/߼E-Q&,cLPl}*-߄T2]-1Mbr5eHI 2OrLm:n14^+5- .b\&`A֑(_1TDf;kwiKY Zm:rP8AL8e}g,O'm0Ɛ<> Ў6sgYqڐ@C=ΓFel-UD1JDRH/EϷ"Iv|Sp"ؽUd\ {*;E,*EJ^˗Wۙ#&2 Y>T(.i ^XC+}YGjWdˆ1˂~oOLj0L,$8PGzSpzaUpeˉ%ZԨչIcf9!bx\r3)(˼BA_D,VNS#W2>0ojm Bld:@5[n y,dTV %)db º pR^V]wߪx1PrZJgl#*'Y7:R_ {$4~ jGkw|TXibA,jJD}'qa~S1%»ҟbNIэUIĢ &;#ik-皙IFq=+qYj6AiO<'wbVڥO3ޱ Yu6S؟/ ׊ 0`ߣ` ވ9Xi `F z+Or z76}$.Ž*owN@9f5B7>*sEl;PB!.&ְ{`<39EʼSIuA4bT}-X0ކ C.a.puw p~$䑡qniO)]DP䴊u> /?L*3JxRy9uQ#rRN !],UʪᵑUm9SiV+ 5I0CO )%vzܕ9&6wbg UխcbujY31W+$1YKnN&ET/Qi)]k4K2LEYUa K 3M`9 Uz1 NB=|e ZC$SE8">M?qleG'2.6Gò?ѝ^% Q4jTo[4zfGs%1`9)"O$ZIEE쿫9x=Ɣ75B&H :1&2,dX"Ȍ_aRD7аv"ΗX|V y:ΣܛN7PM!e=,yhN^9Gkg$qO*|Z^OYkf&8"ޟ=R2y-(ETّ6@iUwo}_3`-rĔ']D֚G67poX|ȡZCl#k/Ts4dܞƍW y _Up}jf\w^~6|O@Ĭe[հ1W]%V9.d0ۃܗXm,/òb|uBd9 Y拂1Ώo7L #܄62lO-KL'ZXSz|Y"LNubes 񙡌* z"!9!8ʣI*⏎:u3$;njh~P]AQpY;'.аC'lA *-8>J@{֚v*'By,c5g݆ǣ!bTݛisfw4n{P^z]{]:u*.>iP(A)] -xt0n]o{RK܅iys`oZ"0k¾!͜Y˯IJ`k^4 ,-j?%BDŽm-ƾ}E$>y'pC]~X+s,v}XoIE]9A%h3 56djL|Gp,׶V5yk/$IԻJ㱐v2{e]+@3],gSYpJ<=V}ѢjAN&EExoLܧL2:XҦB^RAǜx&ot-6C0w S1tZ#-Hl\E9PzHQClB41G 2DCsmJ29?w]=%Oʈzg#3LYlC,|Ԍ^L+4\z KIMAf6qّSnծEpi̪vs qRJ "6m:nK rE+ϑSHiM9ZF 0zz\r2 *Eg(ǎ3ܓd:=`QQ R`Y.F|\;5$ Lᶸ)B{Jr=)Eͻ_y{>\YbD ieY23 ڶEΉlVcPqRҠV7'*NQuKb:,<5 ;gY B`ӕ:GI7_rRȑ hK6cۣhfl@BGUjXǟ(40<2:#`r $.;K!"cncJ1O.`nR,4A>6s>_-Ǥ9l䑑e©@ׂ%fLaggޥ).3H!Z:2ҋ1BL^H '=Y%B!HY',]kHmSQNXSf@i4KTֺ:g (,y5^D~>f{8\(\gpRU"B,z&0q)Bw㼬CA,x]ikԂR 2Xc[K6)FL[nB F~rT KSYOƴ00~:Zxp2rU>Mz,~w'e<:$lQ9U=[Ocs:6 o!l/Dcgp͌+<: Bf1m$T+d͗ol[Nj)+8F)VewL6a<#ײwA* Zˈ)P0+ Y-|ɰ"LxeH}yYeNy 6pPD}qrmPvZVg9mnE蒗Qif0H#N"w? .Ȁ9IքHXI#mGa(@yXU^={󵆽%8Ų^w"&vYaI9,v=B9v@nMbPWg)H%՛5uTc;(A>ɗ4cN 2y?NG{@H.ZԹ +2٤Vr6+z'G֕<{?ymBe7z$EDӵK3#X2X3>Rp n{^ |a܃/-l ȃVTX12T6W ZBx,=>}C=Kt[g4}^H ^ₜ+e֨Χ#<0]mW$6Яk-<GX{:|!1F{YHVD泜2xGA'ӌqe{c 08EmƿLLI:66LCeOGoAjV9í`V0eb+ucA'2fš*l81\[M܋[ws(x4#M,lځsuw6Vݪ{py.a~ьp-i@(YO$6|O{TUMŀyR[nw|^R'7]܃ ;MFE7pJ_%#т: Om䫤& y:>_ڟ׮}lKRFe)ʆj{Q{& T2&j]8 M=g|!.j|(^#a{(O2Ǭ~C5xe'-R,s.!/ȸsu<'A!4TR8)8Q;\gY=cS =0X/y67nxI;a{>` `7]@ >lbBfA/4ن7*@#c.0 vA!2IxCPv />۹gUiQMZ~_Tt}5dϫJnӦHXI ku5Rx;]&6@WpF19'0}_z~XU'ǵp\dAgvoWs:k~'l O7IFa* CR+Hҩ_)R|rSMX'gKMj 01'yfK0ڨ `lhT1+iH"c0Fhl6)`1a6b>u"f,gqj8hܖЩy7r[y=m&N/$fAGu5p1Fuo-o&ܱ~}\2d;򝈡6ahz@p\5|EXP/2!lqs`o7W+V)S>X<| ٍ1^%PG J ~~<`&D wݑBHvF^_(8vjU3A1=wE3wwN s:X5&V!s6KzM$acvM+(+i:?&FrW 5eX Ѻ+,R8~{G3v%N2u[qQlO+'P]hr(4N ж0X'*c>jF7W1Oޫɒjv9)])£$w1O}ZhXd}\>U=Kq>5cpCK=bƲv6QXH{{yOnJg7S42,ݾזn8 ʺ*oaNjVre݁z֯QG{ÙiEA뀿|V(ool5%aM'4R,"HaP]mx鑭G^QN ԻFیDj܍N<*d@)N/D!l7 G 6r :ʑ k^E+pw0&=t/QB[s.eHB\+|S,y)-9#>HnK㫥ieIe1^ A\Hz*BU:M_|Q{E/G2˗LMGs]y\] ë;J>svh3 kn0Je.^n *]ӲO#HcKȮ{6PT'#`EzouQO#g|T0mVx&J*@Rh}5ώl(dA)*'Թ_ɡ˕FzR?5ؾJ$Ʃ<}RE #0u8HrEdwӧUG!8Xwj grrr\EjAJ-ؼeyD?xf l)ä!5M-t!@> }Tix1GH!g~"[4}0=_YǖUS47! Ff%̬l.nʆ\ 6^AN wy0n BN!Cf 5+`";bY59CIݔ 9J| 8Q_,.Vg%BHt.I蠊D)Ɋ{% UF I4`_)sZ6Ozr[Ѓ o,gbg7=;8LM/`ě1B݋o1KGbG,TngB߭zX܅O^uˤTt,%`٣: zN XoVV֠"m$_b3SPd Atgb~O/-=IssJ?AX[ϕqYTN>{H@^>!^PHbY}~D )S]n 2Ց&^Ilz8vƞ/d%1\Ƒ5"Wxax5=U Ad<= [}bE[I9Ѡ9~<8>^At]5EH:GrrL若056u/ N@ۦ%T4ʤqsWȒ+ iEF3AÜ=6|kS!>:ЂɧY ]tv~QM '%q<%7F2ct h Lvg"a?L*b?XFW"^G T2gBMfB/!Cg5 Q8tf% VhN/i@Jx _MN*fc46 ΐ=ѐ=flŚ5I%K/O<ո(;~ƙ =z ;N;8VRy5qlKhcDj`@@bcQiղ4ɹ!X*1BU ر7: Oڠk.}+mRJO)xe|v)pMȬC|u2cmG[]bjlH9 堂B͔P䙄w!1M (ZV S8iR*St"3pT$ \^0iM}ѳZ 4z>vO`P|ItȔ{ggũ]XP߃Q/hx]a>BQKYiXzDˢ%QcXG| Շ cizgAXDrÂ$lHSj<4Mkv8 dfxnuygb_1l3~Dl<5(輙zP 8Y;+Ub}2^X m>_q8ع+9mRx,sSD $N%!,Zis~ktcr8Ii<K*2{FNR2V~^0"p4X;Y_ S[rtV'﯆cf#;'|/xt Y}u+D̲pX(?5mcx6"Z@MmoeE|D"3aDIQ_Yqsx'I_XQ($N 5yfuB8KKw++?r-ͻGXvWO6Ќ*[2 "rḧ́1 d{;\>^hz">+q9j4|ڗ~V2Cqw5._;W_ܦh|(|Dcq' &AYoR#۽ߗl"/ w|1Fre8)w@2ᮎU,݂sFJ0CoLzȼ Ae,KB0x`!# ]3_>PjvVΒX Ʒ۔!p ,n566כ`w8ݕMWf:Lo1O,Qr"-vh'^:IHwc~ YH.`!nP h>N!u2.<&3,{1\Ofnw&%N,`Nшi)Q#jK+-tў^._gר2T o3GL6J0Xͭ^[;LWB&~p荈BrGQ#gް!WdgsԘMr"u*iP]qch{8ҧsY'nF/D%Ćj\wŎvH̊^ļ㹗 !횅krW|/U E V0G`h ⴃ#;m\'Yet0V{rWR$LC_3ꁳZAǓv4{$gH8sEOh咽yNzN[R+Nb=u /#Nt bAyp eN2YU`ԅ|D ;]m_t1i=f"=8gn1XbQ F;g4@L'eF D,Yn4zǧ\=(y;SE1 H8]ҷ+@=ޯ6(2 :?:j-ivBKTy'd WL09(WmJ0;**N1|uV6c0xW^oabrYkd$Z5>YgHA`v!W&ЫfEBT{sX)4, Z/ߔ ^d[j.i]o5VgxuSy !>eC]>2O-eWьˍ^0-f҃.:©ߛl\ ;E^46t{lc4 R]T Jxº3fP2V rۨCmp)~ꮌ ݇HEr7r+PS,pOǓ W 켐R-L171vZt5םLK8qWsBh-wRQGFp:9ϟ G|V6I-5l.W!t\ZS~pX2aG<=1 .9H7B15(τCE0;a%p)ձh*G@G R k ,U'G˙ ˣ2?wq\+j;d)A&KJ,3h/H, 76؁?9 VVJy>[MݿI ѧ&d -=d;׌>җ++)cZ[fK`opR R/.aP93_|Tż·%7 w^,DIGOHտYoB~YtFkt̵l/w%4щ.E85Eo@ϯnt1F:ڗpt!TKk"%R8$Z_;o֢ɞ̾C"i񄑾ju42~PZH6R*ogTR_ԨF 'Ǝbb܅LxRFɌ{47uw=aV P]’j"DKofkl'84>WFXkȥV;Z(fKb XR\Nx r6 vU&@/HIYNSJÆUge7LqRKӹM٠zh/ r"+[F]NyDBҀVk#vllޣy"φ'*:?::uv-Z&2t1A&U"8PngZh~\whum 5|PBI%fDGn$PnP$B<~e6[ć>Wutn!q%R=V+0cóvWtSPE('9nЅkc!:7JvpW%PֵȎo$eNMퟰEƅ,TOrtyJ@QV`eIM1+A6Z㙘Ok:ipD^/n5z/tvQ3'Cؕ(-_ 7p7~(3 4hr [Ikڰ-{ylRxMf<*')Oa ]֒ N5Q٬6o >0Ȗ&pWqUEiAFa}ɻ܋(`rZ<{챸#pe':BS^9 󘕈TqֱZ+FNZjpYȉ>͒nYw@~RøSj@˗$}\p#oy?h*bƼ eCD=y@=@mY'@j=}u/Kn gх3Uf@ R~zyMGgW_5 &Y$syE A}u3^Eg~H0¤Xq$\u/,ȡAO}!G0iAvweE8,y{@rdƦ# |ޚ;Tp(7҈@VGC +9 *CQzѱqP,oA]`" z{J!ĜT-6SN ҵo5y: B>390ZHzctrOdgr$Ǐ1 wN78ӯ~!^拘 `]<Kb,^wܴmhzej Au{man۾/ gˢh݅%?Wb|Cm2k~%9hۓ;=LvkvÂ4!AQ Wi-fQ>ͶUXr[؋ 9BjY-C {l s3BRC+ᯆ@AXnܽǎU92njrS"B`<#q?>c"J!sY$]gΨ{()2 0nn^N,Db"egg,gσq'TD{4FQ10T5\iAb2Hf ^=>V2/&--~ȰI*hOSM#${+H]F1IۛS̓yG- ޙn*U8v=&)_r1D&|,j=ЦȆCK*ATL]\XGz' m=`F8bve%aol?O!vvukC0ARfݼeN Saz5cSy&tOb6 rv=s@a-#"Bdn߸ .^&DU-zߐA~*!].x‰)B_d"BK< 81<%!!>=H[VPc}zn&|CF}'{|Uc\#^vM `Vg̘,%5}IH]qIv#5x8T=r@ǒ&}TjDeS>ȔCz}In &֥KKeP',(l_rmg`dO:WL,f0&Z߷_/jӘҽhީ\䫑$^w-q=E7y3nKs:l6-]b 7p3hEyΨ4(vmva5D7%٥BMs3`х2H[Y&rيrsL0<$ZPqLeB<@;Q <撆!L3FI7'nbL't^:o`IJM9ʭ#xSɬY+r_Ap/v+rاp"} INMjd zb"V <&"[ڀ [߷Kxhkq`l*mT&Q9:(/HI%NXYbBsɁF1?NxOO~S81m4R0^ s/-lR Yv^"nn<uѿL!2]{vHلŏѷJ;qv|/F}~ Y0G3`BԄLꡨ|D}XՖ`K}F*ݜȗtүal eU_*iO% )UBk B] -UK+HPf*wPEcUw;Y"\AUoTPnnd;psIi&k~ V ,#I[Б֥/p&VY+=R\q0?"L!GqI݁GmL SJcMac!o(Jy4bg(į&/iɅ-'B+CŔ5d:Uiwo i/L2.>)[ $߰ȅ~CqWX8ƴie=G#R]%d _Q+A.:-F&?ldmaNjPe=3zRVopݳ۝}[U(Jα+`@aC8Xs81W["dZ?dGǿY<=3X󯃠"x̰ xN`c7:PZ7"ΏLelYf'lJ/$=B, X ogl,%P)sӯAfmW:FZuQ¹y@cEyܘ2H4DK( 4Ɂrgx>}: ΋q@Z 6Y~7dnRRޑ"q6=u̷5{eZB+dE] ;l]dްV?Y ͠f%8!lsBXγ "\bXPp܄S=ntm!E/mt0ukx] #6j}d,3D$X8.~Hpu [8\@UwVn>"t0'i>܀!Ш91-L-E}}-=B{)Hk{g EZ]Lg]f"Dz.%-5@? ܪRDŽֶf8,TƋ G%TÂjH xGuN$2ݙVt% L@Fy׻ SttJ')(M _mʬ ˌ\DfFeDƮɣWǭsP"{D׬w6&pKC8 R)dB@p.MTn&#Bfp֓7f9 nF=G2t-u߂ʇOBێ"d9csn8ٽ>F|*o'`X7(,i B\&#}zq ɤwQ72šcc|cjhW[\W A";w(1(6W@z8vᏦ.vR!oۤ4kq!E¤Q4r:Di ͩU&D#w$?K~Xpcz򽔉-}fA6'Exg *>,(4AL:oi ̴pj> Sdȹdîi`Pp?==h՞6Q|~A\s%|-=O߭C,-?s?PJ<^FW{k-RȱX%#2Å>RFPf?(֊pƕҳeAVJF`vT̷?=6;  o܆CʰO6`2:_=ΥL3 \?g!'KQ~FSpT:BLtD.pWSR6 McX($nHX&ZP}mv5Z%mx,C鴬MECD3!ʣ\p_5U+?I +_59[6][:]=,q[q@Fzǝ7k,ߘ~ԍd)ki_m_=}9H%#"5)oI TOn E]q t=c:S%Ttﷂ潏/OZ(&p&"jP=үߘ2mKNH}RQSϏ}͛1444=i$R}-XlVT'# iN̈'m/˅ !.h8.!{wj~1Sj2p-Vڨdbs5jf $2EO؉|&T'oi[Z{i#Wsi[Qfzfqit(G8*33\.3n-ED<%ŵb6 }Il"`+1xЌmJZh'[-9`:Qrz[N]c5>>^kƇ⊧OAFȅe= uhw+Ei_jgsp'}c ptq(?t+RsXVe&jkVPw[!-,6n{3 (GWb/0ZiL=D'cx?/qS: P8Gݸ*iY5z b@%H#KIDebPшw+/Kp<0 4$P̏ ZvW~HŲBh/./⥽9{}Fx(K&$SFH^L3JU˞xSd7M#qBΟp kI6yMPfTO2.{&Sz;3%$Ԃw4#$I18VX +ROUBaNLZlQ*&FGp}`EmUfWsJT@ϯ`Rǟ^to2l{no<l^P/Xav ʾ;[үZ>Cͯ~glS y>$y'n#h>eأ=?tUQjQj+MKeWW'/ Ig/rJox|o0 rL+Z"R0wʿSDt*Qy@^+?a_!2ԃr.e<ĘbȈml@7*97lټWV<&Wj{gV6f_: |E,&kolhSF*pd"KN(OjQ(u1'U)0?.ʊWV1o䏪>.T~3f.F痁KmMrV]*mV $xptj zmqLV t2qjMvgջt vk VY`QXcSA_䪶 meq@$+WB;(OܸIa {9.2؊A=~Hb) -duNN^Y'&AI+xQHHrC^VVtHzQFI?tM,ժ#u~) y8wj2ݓtܐKgr< u_x_ƞ3Cnգe,S E o%0%ZtQa~ A`>oj^#:ec1M-4GiWG+ J0"/{{G =@ ѫVZɚЅ2 ۡT[*VV7]Ўmc)9$qׄ-J;ѧJb|8L^m2z ^'p4E.V#<GHYз|vxE8)6ZкAϝ%)\d9q Ļ5%5UGIdOzlzK6gBGz UJ^c D̰+갫G_E7Ɂ),spqju^m7h f)\F_w q|@[74^*]nW kݳ5< ,@/N<޿;\XUOzԐ}pi2^[6Z%g69tD+ś[{ud{d+ 7KEȾOÏ qdrF S{H +vJ@Oˆç[50]IlC+bOd-ktZ/v7#@Cb~=܍qH[^L >س†RKqJ_CyK;lN98)")Z͎ vEI}~!X BlubƂOH8y<~P-~ t)|ӋBxO>%'d-#WgAÂS߿ᝈ|Kv!\$+d`7Ѐy〣-uP#FC2C^x Vx`ᲂ\(g10u{;{مE<9Á_(*>] &5, /Q m-aLO/z\;e%vt F_@fmDb& @c_v Tެ{k&,czHβϜ01y["my,3)l%,tN㳇lm\ITv}ΙG[ \jxg;PZ G]"ldFkρ4H? +Ky` ڶAMLdР"-LZIT2Sk K:jm#@ G.Pw@]Ems?!vWgõ84rn)͚|HyvX􆹉Ps:Up:~Y3P2tGx7W+‹-=j+2z 'Hl>)CT_3N"oKhilEé=Q^ E}AQO:Q쭝$bH}9K{[a{0?xײQ*dRoL U_@jm3R"L)b”\¶]Լ[aކ]Ci*ġj<@x0BE q\)\J+/Zqvᶘ@.C*۰iV?O'./\c#jVG WLƒ^蚱 3Kpe׋E<(ojɕ 5sR(q|/zAW5dToÝ/$z$ªF ,pzUlpf*S3y !l#%4 aO-vVBMf0UyA*O 0?򤸑Bź#E!]w:N RG-wٵ5Fr3Ug+fɚY! lm( .GIwG i{ѲAŗSml[EkQtS 7Jtڃ I<=\ҸTm,R7͞W*xjN3zhfrF,hrq|j34BUn^'s't<҄ fT~q :̜)oCD0g^s踕N$ <6saz'Xzt{y >zx͸v=Y`'mU pRD7n1;<9!½~l'c.a@i'&GCEKm`sNZ6R6{Z4;:V|׌SW@,o>,VeI]/`&~7bz 'V-U:Hl,$9Y*^ +moI#P W};7,T^x;Q1l"RYas I\tUO]e8)/d`#b(ď<8P[:K Y<:Va {o61$ܓ6bg8zqkʂ 쇧K~K\Z=Le8 V9Xw8 ;nnhru6 aueL1#e?'.釐nXCl~&V x#B_/fHD*yOSEYP& @^ .=F.+/1ǿy6膄u%ׇ5U DsI.V+N3? <˥ ג:Qkh:Ibf 9;"s4B\KJ3mAJrV2byoHF~Ѵnz8U4 CVOL!+Phsx#v1{' XaӤpJ r.ZlWq%p?3XQuCm"'O>r ɦcyY-W43x4Uk BœTr˗t58pGDkot:ܲ#-#}qydw/kjDبF-/ttO=©ܣk>[p.q_T!DCddfӼXr9r}/[Y:0 yDz;_ y'QZ3yK||JBl6gBc[fPLvp|f 뻤T{AOz7uyCP.kyV1Tu:~hs'\1i ~p/6'>і)v՝-Yn-ܲ7Oz#RۮB X /o)|pϤ"7&$DJLl oKFyxg=#[Q@oRe޷ҏN츙zⴵG lԄuӭ׉Ii %3&eɟ3Zi,KVY` _U]<1w~)F\gA$2ޓz'+q 2Cl+.1RlDfĻB( 1R Ktl9a_Pȏ0֩*oX /yg0lKB`k( md Y/yh^Òcُ?PȻwPܰսeҮ1DScm+״3HΫ>}~phJ3~+Sc$Py7Siz]o0n!Jd閍:fu{Kс|h+~u`{! O9}@h'P?QeNbqtV n*5~=Fb.L_nBp`q9i+Fgj,usr~5(zQ.m_V6GZ_tusqfJoYKٴB̠ vLF_M.7v(ɲ`qELuuL=HRcCWUlD{BTBCHqP&u̪Siso'2*@{F֪}['d?WOA:'$#"P<0]4Y#|x`'EvnhFrTpT{$W&;>h{;1HSB=񏂗3R<1ۨ .+)cr!.{p EsgF%dBdR]#x&w/*0AUqx c|4 YS=]ͳx44RZi#ۅPRSxH}OY4/ef,KpLof}1d,T25JN͚rB.[ wƒ ߴ )Ƥ1=#UK]d?3pW5/>qĂ \Pϧm0gJ hrXN^7GB+!Yf<hYT_fաk@fL[l]yfrWG[ C+Ɖks=k>*0?!4wKoY?lL}m[ח,'[5j!P wU?k*g_}{(`6T[27@Tz((Q4^eda c7Riwy{PJur~[R[4us t.iI,0)NbB:&bS_uYNVv[5F6"PV-ٗsnT'^LV_)Q5?PBq ]eV>m|rٰ`f@"d Ō#?e…"!Ǖò)ͪAHt'.#45Kr36}Kmy˛);ɸ(cX8ƅ4x_]Q! ݻᴪkB)RZO3P/$}AjgM3#s~8 t;x "Nǵ)1I9 1\} OWDl37Hi K7aSY]q/0bzp 8|Eڱ#\3.NVTXqopF+}5猀EB0{VaWZ(Jd vHCgHttIv_TZ#B?9lB.. zP'F%lieC6Cb;Mk"7qf^V(X&'ގ()6| P)6qQu׫iʬC}e 0SDq]1CJe?w0}ʄxfVl˞)J` C\nf Afmcx_cL9oBT1ƪ;e5bAcXс$i6lT^g ٿ%RGu#s!iLclǂe\$^3!BU7i\N$,~λA\ڗԡS؂1|vO(矰`@KnX3=.{|)cA30.HJ :[1ez,( Df +[> _FW%p NOvT&HZrbkY.ߋj;wdsb}aO@) hNbHGy.(JC"dT2UM (Yb}j&*Lwо9V ^cw0`Z2Bx'[5eAAt @ظ]"^P ۫ۈލ*1N-Qra(ޣE,11I:l+eClze7,ˠ1JWdž'?Nt6WQMlh|;a2.\@L YZz{-A51f3vnWįM^$ǨՏ|@dQ5#vUߊ%ϣĤ-7Tb9z2lnt Qx[UkOW{gL'h3D0ac9 ᩿9ap:8&w^^9[[}D5Q 9C8qB#ntq2>Lt!9onFH1".cX2)\bS_>vsdOC na=gm!MD* c$'Y0"LX?>Oii)3)=5Nq{F]5x5"rtr-2S7k(ڕ#8tgdf,D v(~H޽^ߎ/K -+OYp%Lv3棽 (˧ZNjY&κzr4aAj_BID\(Ww6EE ΧT]91~F^1ƿ%*_)uTLj6sq,6ˌ{d剳W@3:zBJVJGmOFl͂9>6G(x|)4 4}վiuDV?7zBÞ)v It ~c?>?2pshX*|my0#(RAS&[_s .ΔO8 [ѡ &H'kw6[2;{Pd{Q=)TBrݒU!6K8b۬НN广 ]蝃2HC:)XmX 䲙 /hu(isAav XDzkna626 Xb5:콭m%GW|'w F-9.-y~`ij|`ijh8z gA_LVᥧ ` zu`xOCҎtfCP: J+hUڥ NeRt"‘lr<[TN^Bǭ&dF6TY֣L@g Pn- ¡ͣ{u\$7XM]Cb[4~5D !.bTtZȰ_}|B<߱s3 !~[l3lHV$Bؚc1 F! Rz_(,C 5 6iQtrSG Z@JEbNJ>o˝ڻb1}KW\$2| oROݦ`T:hiԔFB5U/s^%ǎuH$lo gRVjBM*Oe lY2 A۽ufQ@"c-s OWoƯ'v$^9"BAkY^6N6ұf(@nPg{Lf U9GЃc1_!j|bT V?V9#Aߣ7~K灠:pvmLI_n2[n04~1U0O5p*08"!UPE+H x8uJȣ{[A G6"LiCȞw3_ҨYDJV&IJYn2ܦޓW{3%CSI哆\BU9^$ʴ(^LFМF6{quXf*>x)\kb`Zֵ'lϾ%; uWV+gkJ_ +88~J! #AkUWMxLZm{#8ѡg7 9~eڊI#rNIX|@[xs69m+ǔ$F?ގ"l /f L5\pxd oC}8\u df @׷QU`i:K?\GY?fQW@ѮraBiSOz- &S&K+Tuk6H֠bOSKgo, ߵS6Le}DD1'&L.K>"[ధ$' MǓ@/Ye(d(8A# Owd;KGH P4 VF㶯aWBgS[Hlb,(a5H./NՎ/0i$>ff2Z݂!ߺ& ޶$ʕ"UlmY݆[V*rYlwW=* y|?Cm`^NR23ՖV@͑*d`E|{ҝ3}~l,_c鈶0I  =$΃FLe/?؁6FQ(/\>CCD=|C=vPC?IzZ^5IuX !YN;wǮpSZV edŔ~~aY<4tm4Ey,zm޴*\0efH,#B9yfQ#BEΡ620;[:+mK`8BgL_)bP3LQ&"kDZ ƥh v៚  B3u x|wiȥ#roaG rz3 !qntB:1+qpu5iIJHAbhi>pCL+V4t#TC2wp}CCMtp?œU`|ySz]s6J#Ȏq&'J JQG5m(PGK^=/oRǚ@O$q|hR#zI38 F#@=qwܢ9ßW3Wg+EkCᓩH\v*7r^h%O/52^efގ\ Ld 1u'}y,φz hH6IbkHy&n#l2;Bo !o>u o@Z`!${Yؔ5úKڊ%£R\#Kx;'BEe l*>~*ZgLPnϹ’pke JG4J7VÌ&Z0`z}@u/#k%h5AD`Ěhdzh)pl];68B"&^ )RxVܓ=g# g/;A"4IL<+}kWYÊ@AIC 7Ǔ&ҴDo$n,yyK@54yL5+Ha5G0X~v Z:]N魼LF۟R}Qk lIԀx`~n(W9}\RMZ FRvS'%LyM_\˗*TV\e繑`ȫ,ԃ^?qӓ:7֯Y7uFM3 5"s `u/dfuCKӢݴ.ݼع}4>zOAiÐ5,Ii!W2?J)bV$)<ܴEÙp8pyIHrԗM`d"6ۋh$t&[g] vT)pI1j32 P~Z’쯗K}[p\J!댗ѯ4}L3f}zm;w\QC3$0{(M !xwhi\Q$DRn> +#Y&ɍͯˠJqnm04PurI\TڝM1q6>b*/uzҦ(H3-Ʃ3:(?ㄡ/ :KOq >1Cl$"7uOZzyyU#8 -wV$ˤ5e” &.'«z8Lrr1v̋rGG`xd"֒o Q@&ͽ1 ~ &-pSƿǘOCe g{+GܟL}7[i}Z~+|zgfNzw\^VsV^Gô$y"9w3 QoUXdBNtԇ{rc } M.1g}ef`!YHO|]%XnQ^!zzqF[pcbxw(A@$ .Q D{Z|_v?۫)Wŷ}c<۲Wd̠ә##jT+ cjI3Nvlqgzj)pNac Јd.A,5{;)UQx W]%xijr-Mr?:c eYv 3]Ou<zcmLѯ HNM溁o$ߋQ]08+Fh}YH-F)Cz)Q {F:9{|8l𝅪7j]-^[txկX^x^zE^,| a& Ըŕݾ ]2C#L#tT t#(Pl8#z+jWixL]$n_~GV n `@8PN&x޻2ɸa25Ƃfjlpߘ rRi08nW >WcR=x? əLXWD1#?ЁBI?+ms>өrg^neڼ}*7zW*'=w.l x5]<,y0Q>) gӼ627zL "]'`gdK7YcikG#PK'~jᮏH]j|c sߞ4W j ĝ+Ԝ8y0hM;37~l}ldcF-],I fyNf߯kp8D "2 (}8ѓS{H2N^^%ͅm`l$Os<` fÓ=ihx"3HXޠ,LmRONXS5%o5ZDz7NŸuR!ѠbJn kRc9Cq&=M\HB&pAOM2,'&1u1wWq8? )ձS8yͨdf 3`-eGY5[<ۆTҵ:M,2h| 7P9z wΞ^BSGJǭ]G8hB}p }0mU5 D~}!J5@S vߚ khMpl^ <Un)e_{+iFȱ9!JcIസf@R VaA , fId+J< CBYKYzwA)Ky~+ s>gVZnaq+cbcr˿N'匶Ԋ}J:ѿ>IĊhɥZI]1a轓31lŖJ hgaKk5IK˪0)޺_κpu>u&|_)1 `jjP}-żUit*S O96.+#]G42/`쩝JIXlO:=Z,ӗܘ`I`krDY8]F 9:Z"j؉ ިyM>ls̅:C] ".ڦQbyxifI}KPF̘pd.lYhq*q#(]Fƅ>db(W!_3=H,ƔЍܖS]|8 ?6WúXcPX&lwTLlK8UAp][ )!"7feYċa0KoMPSS>J|Xh8)6/0p ֝] &@M"9RUX: =%ѽc6 p7 1~БȎv_7;sq,`v\l`ښ$Z0yDui ɐۿE$/x!'rIc宗26-Dw~<-r.&M6"8W1zl7\*k+U-N!:y{M(.H=(؁VJ6d2\Z=Ӟ ZzJ18#'g[8m;ӆ +I{n|z.BMЮ78D2,Ng%lWMj,8籰7v3su[^%y!iJ<9KN :0YHKbzB[M 7Ld!vU8bzܧa9Dx?E?`f\0GA$* npXP_|֝Hۜ~ _%a~6x;<"+t廪n~3u5aAPeXO9\{y-LqX>nn32㾩#V\ dl rۻ ,%ov2< H E؎l\#|^A w  jfĊ*;ܘ_BC9)D;nG(U9)6y| {#+ԉbDj7;Ossn7vFdO-һV_:<'/Jf}Ԁjf]<!PNޝ/R)p褵GfK.S*꙰Դ2J|p{ڻg4{/sKDU쉩g18F#,vFA*kѧ $ib~$+&؟1RGmٓ LXng q j"b)?Ns{RW+>wܟV (Y$/[؀=`lA^l c왊D9PYkȖ!t%;!*5JF{ƚ.:!A!Kl|HK>V(7ve+"\13oaǓ( U l2;ҳѴg]*g3GU& $o:S ̹jR܎șZyO(ח:zMK60Ӕ暖ne479H?$!#,C#ODگmf\[kIqE/}hvEWoĒQ2(>cPoΩ{:@ $efv2*p *O1?8Q oXa$"ig(C$#sgM'؃6j뗕#7GIw.x82NCyI%ƪ;PM?296NI5;jϧ±<||{KN!ϩJѮ~ZiYz~FƑlB,,}])/!wU*zo(h<3C.F4qh fw^ _vzSHɢպcze#sKá^%dygg.f.c}b(-E֔`kwzh0MQʖ!0؝Kmzھ)6_}%VVQWƞ蘀R>vܓ,}NŸEO='og^G0 mc_n]|`7_"X2՚FUdȪX1<: I6ɞ&V8,">ԆJ H-A{d:%eOy8 @Q@pT # QM1M|!#FgB) *P ץcQ/ltaN~Fe% vQ`-|>A]UsBT NJ<-cApm'3;B)JlXҕAiLԮ])tw}c^Z07e9g/?ӌ|5USPAB\?(ݝu"o4ݗX2Eac.2,0]X̗PӶiϛ J8o8by x& u9]a}MPgtHվ׎4ݠǮV,f2tOADO촡MKânB%F>;=fa尦EEꩥR Byo}|"&%ye=ڙyzƗ:!M*5IQg߉Ch9Q,Q8g@W2əl!}t,kW @!zFˢHwYTa;abqn!ΫglL\&rQnqDPoH,n'eG2AIޑBEaAW>=zp 'փ@@:Uy+w:  2ڬpyQDrNZ+b虫7%F&p?fYK^,l5\ ͻ9K]p[]8fd1gTKs Y08eͦqGeV]zvDbU|?eE6ߑOF9e?`^Y~ ]ú;h#z@nP.){=Ι"3TKf:Rb!Se >bgK-r%R;#W+|l/v%4L>@6ڪtvCJAC2cO{u-㴆N9@@rɑX}֬`PnԼb*knsod]ybLB`NIcQ #Q?) "or~nAB^ Ȋ,^iOT?VUpdHG % vW0.z3Aȣ0VEG$}: @0璕هw_'@-~@,MǙ KfW5vJ/*qW􆓌!j;\tdIVg_;Cahj[w.aRpW7r`YD /Xwq'/h'tOIQFCH&֧ܿ(J[ϰ$7uKK^| 7JVfQَ<ٓyE[ Pm8luǓܟg5&0Oj )sAƹ,%$Q"֞nռ2u{H71&`u%!1Y⿞hFs H$7_%ɍС%ꀼQb^iNm#=9}ttVPWk6pxݱ(P Zk4 ojG>GW#H?x_6*Π`%X,$c8c[BT^8j Nՠ("k Ȇ-{' 8V5;&֠ķcW|Hc\@.TU#[F4@0$!#쵂UHsHVI8o왪6)HoZߛk"\OE3yKKWʏ57HU6z'9}]`nafT_ S954CˌH3r *v!g^NRCfMW{3`uYVE3 /VڦIHg/Vm23whLvFeBtů`5۵rV| K@f,3v<.+[ASxx(f\@%ވ)+)_^tZa=94 =q'CaQ='|}cԖ5>5@ȸ@Gb* hbjq-B[@N⭄bH)bˊ 'tј8꠾ykr7t1LjCr`n3/G=hUWހ憆(嚋SruipsrWrЈ%E"1TV[h?Lv7&Kz67 yvjêIA"mB oK3)];.)"N"ۄaXsd5LG>=ɝҘl{Н!T4MRHIT_tsea;Tq {S)iM2+e6Qwwt-4|[,SI7x1է=c% }3v^xI+Ǔb񷼌bo, Kl^Xtƃu j gRrFV+}p1/x C&"7o@1b:lʂWɸb2RI J_AVڴ_%_>C'k<=Xا-x_.oK M&]G=?ԗl=)K Y^jqjvk/u:|OWW _"pɄ2^r8}7_n$mۏ Gysd\EdEYglFx=(/d~2%C@0kA `|+UrsK5!xGʲa80`mw*'Rẅ5f%eZ!y,P ^oI0>3qzK$K;? Nm҂_Bp X'\C|$T~e0Uid 0'~yqw4F].?\fE AN'.X'{O]89frMeIޔ ܛ/y@Șj*$гaLZYsҵ)ɨl 9ppZSW_x֫Ѽ]K$ fnӞM2/'"vVjT0T ڪGlWZxQVHrœbs68{6IK9\h?΂%Bhm-gH_;%КiyfE@߽>Q-󓾎 E԰~ B1XEy$A*ܞj6Ntsş,&[#}!q~2U_Ӵ2t M,I8:8A'S\,T]@ =${aԯcl'',tVI{8gpB]> imt Z1[^3살fEIrwWEOxeԣ<>Z?hw)~2|\.Z}_) ca'%VXS_mu3G'%[o\ ^PLSƐ[Pq?7+YԦ' 5\#_qZs+hs@ax߳ ^2Vըڙ}OsC巘=EuIdt@m}{j`0ը ?*{ژ s¥4Dg 7Vxeя { j6 /ZhnC'! 7p5Pnm%cQȩ&\>C kE2Mw!~_UeS!?>O7/ź wD>72;Aa&3@~qM=kgo_}$$mtW7e*f8!M࿠cR-Ś҃ o?" mfN::̅8fW>F=WTGfdz5(\9-N@ G&T"׆$.< _z(FڷI I_(in;2 5u{4vz =rT@5'`KGk~/6)doS[AJOctg:HUu>HY%' [PvT3mGY{Q-@!]zQ~H 5] ?zy es֍bFQ:z S.-'iM|xQk}l =:F KXw[㨵 >Y`1'eÏxݍJL盐4MN|e]{D\9_~PJ psH~sE:pCPdۡx&JGw?9W}r xF?d~iJN,-8+Id[vWHR`&N?Vp C&;qnvؕL2 ߱m[ Q~7H#Nsqn+Hdzjw1DqMko`p_3{f[:l B-Q(# #N$yzߋ@',kY2!LNjQ%ܯu:O݆>l2.P^rՎ[.A@U]vudx=B? 0Mg9 d ׄC.+"}QX.q njw_+gzQVKYI5-|U&2-)F9nr!qXgbJ0VmXrܿP$ MfAr' .W=Q;;#c|A@czpȴ'n 7/:M;rURTK. ̚t;u~ \,D~_s>.}4:G)xP3) $9,3ւPĢ,9:SpJ9jG*͍vg8 m,L ig)x{F<k엡Cv1g)&/ӑcԷ%02'mzkÖM)cU&r{ʀ JsҎf}dM3Ct`7QR8tXMc_* RWF5,zHQD$25!nVXGT3N|H1ZvuU{/B /0!V"pDSA*r?at{ڒi#hPj3~'%hϡLDV5y{TsV.UxfEFڃE]Lj?P`*dTv$jĪ6%p"`7Dm牰]Ό+d!=}6V@|P/ z; q VCT=f]w\EZ",_]/Sb8h3a%Aބ9X"f¥ԶzaH@x`QikN";_߀i!]T?/9 -OJ+p{'yF6O.F1Q8.hN\x%Qi-@1:^9ӒBscǍ̂^fZe6gx!vƯ1"dLb3C!o9w!BX1~'WP7bF'hJ`tnDYQBg|9X ь^P@)`%4x}/,ƒy AэMƚ*i۔]63hRDWۻQR۹՜=i!;&h~P}@Cy]l$&*hdYL]mO): 5ep݄gm+7e )_ym5Z:La͟|Ы?n:sj< QTV slChŠs|1"@zfQnJ:hT־@[) PҖFe6 !yӷ>n{({ӡ+Xӫ}dGX`ˍCC _L OP12`y(W";!˺}كZ~fʶhZ!(\LPn_?kX4T/C+j3Sr .R}6d>g#^p6CW_nC?8|?.Η>x~LzјL~,$2bN[4 QJV VD2*9 3WdK=C͌)!],* ,h[x"FD )q%ZӼ'l7P3YE~;>dnyػftzwz͛,U! Zԧ5uQptJZ_:C`]l`}\s+o>9C0bR:w FJ,̌:5E™+rhH+.rŒF셗XRf.u ˟ޏ,gM'uR4qމm@1٩Z2ʳD2c5Uf^!wt.7p #h% 7MZ;[@sR\ql]e "w c'n^$BD*]\ z8=S :;;Y4(:Z0[LExXϤbG9FzཕH5^QɁsC2U-X6m:OtdmH([!-^ĸ|F@S  -xݱt1tҕ=;4AavG[j/Ϲ?|Dw7X$wE]!M?c< +¦_Qjn?oQ0j?a<|Q}[1]P2P,F MZA<-+b~ K꾥%+UY?VD]msL%%]Kל ȋa3e9>WyGMޤL&! \e{&t[fPfc9QnIdaOVe0M޹MO "s+zwM@ʼnƉgP_aTHH{F?!)M*ǘuwnj)xv;Rk!>1W G8rH Mͺ[aP04hG2]#(4.DJ&9E:u U"r 6j? !?yjq ɼ43em;&[ *S0\ר+}9m}՜sJcgI0q9]S*ެ4CX)d_T}h'>?&J(G12#L/X@[gM"odhrj7Rix )]׍`0h+,56ZWar) k 8CTe̓ys8[!a^Gp~h s@ϩ$-5(rGf+AU!0?ZO,9AUՙ[X~㱀o ^I9q M˿cy.n~ |<$&d 8w]v, BﱍqJ#`ZPh `U-{՞픷;tP7v`biu70ⓗs[4KFP`q LYou|.ҋtD2||aC-|74+܉m"rj sB> ir. 6?  HorbF{HikTG >xѺ dr׌_oRBJi%D8S?@n6GahT54B"؄wzdf 6kzz V Fdcqmy' ۟.q }\'Np9m4= $:t0m!+|PWdihLS&dPjWp2IPm;gH[4 ♖ R7nzAA!?S*t0P.(Z/ =ƖSVv/Ֆ&q``q'w VʁZ ;|:;apX߬Dk y+f) Nt7.EWcL, |?ȧ \Տ6y%0 b|Mqo9Fȵp$lY&?RꂵA1W+O*=#*pM:8uEs7 m?n!&䔙(4ɘ| 'uͺh%pW~$.q3TkmdFTv3 8GJR7O.0- Z-VYo|BFUwQ_Na5[4DyOltB{VG5!*ծo~wʲbp-~*š& :2f%uLu ŇTZL;uoX2vMsL]q(cKr v4֏hӴՑS.>Rc(sP3̔6~ܠ{02{?͂+[[Uk (sTWvjRQ$o'\8AdcM%dq+fLqEơ3Ԉ@qdb:4Uݾ.)Xr̆=x.2Zh>Ef[o}՛169k<'V50EezB@^qȁHzY4H1nXˣq+7kMRk|ښ({43e*$JɟpPq#Ma\51r6rF";@rL?ןf#7J3ß;_,4=Y[ ?-#sN[NYLK~2KУn$Oz~h'ܳĪ\s3 |-Qǹiؾ6{л.\9ӆl_7I#\KEdVYo$v0TW'l q \o2J (W&\ \O΅*2Wm:'ccA9##Q& b0 "۬h9wb>1T]=YHx}o\x.!6cа)2]a8z+oީP?=w=r;ZnG,n:&90.'ZbP,^n(<1@2rN 3iv-F[lcǽ:M\ЗVJWXRSʵH=vZ䝤/**N¡C?QBm(Iq]61Yf,qMoBJ K"ĥN1F<:(^M@F^ 3e0uvP u YJ3m6"C$ÇsFݐ#O"!') 7bH4̟T֗YNn26 |#g=,T%Gu lA9ɖɴi?I#~Mrk=%@ޯ yiSjIJf#Η1EݙY਺0[&hiivL!H=>z&)n4h"q6F#Q2w:vCKs"C@U1:T676bhB7,~U;^ ?0:Jx_40L3 @.֟"R#ǟSs4\S6"=jOH]Y1ITϨ1A@D䕰j-?F? Zn'b+e CC~V*W@o MӪJ\b>YAtid(͘DpsRx~ =dA-Be)Ԟi_ZK;C-²-ЗaHW9$-A3[V:&6/x % ,ZMm'ɿ9~mq g1CQM>Z1K(;g"笜3q!bQ *ClqmqZ)pJig V !p;@ qMl6庒>n{8w A KJ1*q*4 =(Et/ODQgxҞ38|WpW@Sq,ЄD/mj1إOE\GTӞS뾛(j:zqu{nfD?'-\8t&EX!jT&n nceXNA-kg'-F=ts/ ,&-rcd!aG4}w+ H32]6>eb3W@C5uQq&3QLSX  !xOB_ֺG]d58]iIٹ }c>v=P!,٤ X\\Uh vX(7JdIX'j0-8<(}L`MLiq,Qt&@$Ej"*"^,Z'/8?/Wi4#hOs53]c۹uI콥;ĬZ4 iR+ &!)`E/wUwnA4Y )×Uk([1$*NՉNR'!2&y>ڤvj`*ϘX԰Xpgc" a@STY&#eyӳ ><7]lf'5ll,N[F.kԿH 8M*HAIuC#jh&[ 7NսO@$ y椟rs\ KaӻlHv*~!Q-.z K:W@{[~ƫ x ORKgJ_}Ǣ/Q}_?5Ϫ"PI73IY 6~HM#l^(3Zkv͋yZgiqЅie"5@<قik;E'|u82,ڰȤPhꬤJ=W*`%9?)?#~|XM 9Қ$un~a܀ዔWX2)Jj%C,Dq5%mb⧞{fՕ|uϖ ,-K[0+y$8!q`[Tyb">뷹 QDnj5 'iݻ"4 t+G_{C9폤Y"(X2o+{aQZb.#u\?rpl}VpO_gSUr2–MUY]4EtD8/ @s׊a9: A7նXǢs(ejmF8 'g:G&e(PRMFdY Oqm?Τ(Q¹ݢ(QF5.Q ΄3[5[ô VZMufV{DdR^{L"DOocTъ€ذ*8`8c`R (TsLh'򡏟3hZiֱ-Gdz>sv[lKK3`\@%a‚Xo)qN6BuzNan|?@,N<fɏ,qҏf aX@_?ٙu6#^xz<>|)[.}A | HR#PsսGP\bv+-uֈƊs< {6RHbNcɤ WoGYc$ljXn IZbTW O:xX&Pew;8b\h:xM%I$a5Y|@_..v5f ?ts@'K6iwy6toiHHFNGbU_6T19O5Dk,^y=o0]<@cwy봨ίWP%s`-"X FBf`.4`Ed5ގ[֊6K9=Ω[, j=03B_hֿ9X|ӘL+se\~E74 F)[nM6>3cZC@w7mäQ ৻ _dv/~B,}\VЌB\ޠK[Y|j>H zU4?O8]Aʷם@gjJ<^mf-g‡y~ZyO]o51g)ofČvi/Hp0;ӌaأ;=Epb\x2ꪺ1i+ G)¤Ti\N>7[.Hr$yб܏'JhtҾ85)ɔ n'ep'3 3 =Rm5뜴N糋wӀ.Tr9M9䘟%$|/q aP\GjyyM0B*/z%h*@[tdx&{7| OоصDJҁ_YE^4fMld%W' \ɖ?tINO| ;l).̾!JN#F:lϼ1_U}<[~ WBE!f=T >v)!rURE)$beПTdӷ|6iJ_DK#Dy.+W KTu+!ٹeJP)Z ƐnºWuWRD9hLvO1f=Ďmk̮]-X[1ərXvxg4q(%JF99V/; z ('Ow*#,F ,2Km Gt/ۼyx^14hQ@+!(ꖺyڮ!N$/N|j8E a1Mfl"g*yS7^Җ{#k)Q1 Hlm C"uÐOϻX$NM!_u+PgՀĈ0;}I!Pݭ쑽U\"S]<䭻3޼=T](j5n3ZqI/su4< ,AԦOu.ۅwHgv#dYg@LO O⹨y7?eߧ8*ћ9k?ٴ}0#8!!) D/1&=˂W\;}J|MA. x髭K W>0L$06'gXV%-Pt[i j6*T(BJC7mS 4ō @̍TC+ ; hey)g & vC-bS[{@ fvOpU]w CKo:g9v ;!Bb$ LJ1WXk'Ɯcl|=11DJ6:jon ] gI/+.~s9븨-kWC^ .;J]Ljp,YsEDNCPr/D8AeGӬ͡_Lu{KQTaE(_ggvKyXeG?Ald_:m[ T1nlU [/E)4fVp;'W% -Mѡ૮LV;rwzUݛįz!J U5sjo[)~di6¶$.J(ջZ [v)ZJ#z_Ƚ&NsճDs(anubpU/]䚃JKojccՁ~W}z)bpSI+&o:ώ8)uqY6D b`FOX:+摶}&5Zb윸Q^M6NOCM}L%2 Zdڡ;3% w8х C'; }\?~PriJ#DS}G1:|5)Ǘp0l,;E<zqybb`Ę:V%i8LW㓖N1qv:i@6헚2"jco0ey7PHa)ֽ7ߵS%qr֕bRӗX{^~lN8;tv}{wg@LXFo s=mML[F͞xCg;^7Kvhޠ;Z0-;tb=L| &խ`Ft!z 1;»ʋpdILcs?6MU8pHf*'D@hbVV :o0MqIlt5^ۉ-ܙT0th 5q]O&+\TyAwb.!"kie#gn¾v\s˓ uR[-IkXx ^pbRizrUK؏LXf!2`}>?٧rf~׿{ mݳAQ=y漌G;*(H @ :TËNƴ_٫ @b Ơ1 ew-SPTCVs"~)v+{5Ǻ3ZgS֓F }T ;֙2VS .7x+ #yhڳ#Ġ}OE~?rUPe0z~o/Q4 m :yI?Z33&jAdu1ʌsT2kj"&P)ئmpM[YI" uG JrmII`-3i \Cczy![pdfBtmM껼teu^b׎l&3 1q,쁊o 5{?JJDaA\ld S`vU-'vaDޘ(ů[hyIr|} hKI!CαI󵇊{riBv3XQ^p4uhN)v<]v |@wRmA_swn<}z,T$gCM| .J敜)OK1<|:FjMtvM]dIA#jE.blUFݳIx[OԬ8lf %+ߙojY?jmԝPv[9#bQ`H,nWZ?)3JK7h}{Wܩ,Hhb\Ϩ{k܎pː#::'Z"D燢 >zYwYNNhql/}*[*2I h# ;FgMtw:lOŘFGm^ZK]'-AD ޫۋߠJ &jQ乎q<;6`L'S->4 Ou7@xZ?{Faw%#]*!m'/ -]ŽzG<šW%./q~)i{YvpBQ=SFp°L^jŭ|}/8Bgm4-IՊ'Ύ?@*M.lZ 1X_{wSI1&փ{NA~Ɩ?Zժ (//cý`@\Y y$~%iCR{I2Jg'Ev072Vr9rA NrRMVeVf'?V2]Wm (Mhݙ ,[^q%{`Q_K f*e $S~nI3 ^RM6>t^fM8( նթX5D(!Z&VdŨ;9&Ҝ󧰥'D"wOw߿Ά>RmVrS{9UeeEa;=e Ks!Ol^^.IO0,>s- f ,82  78n?(, [XBM0.%$Qͯl =40f(Ӊб,cyLm8PDm3 o ^@/"?wO gU*BX3l" gT($ ߙ`1su}է$:_>xdԞ1'+X YvJ4LSk15R.d~B?=W@ Ij2NZ^'>4A9;sOǓ-iGDοQ8qN4秼fb7ɨ0,'aF1oEF ~ @ԪT1Y`XjS'7Yg)+olΩHyֶnehnQ\iM ¨t9s? Zf+4괞`.a$mlg$Fr<mϵk~Xv',%U d]F v֍HnOd1e(Qܹ!Yعd̤U)I4gL~ rw4T:  јф^3^_w) [; 0\A7x3[gBy;\ROʜB AxqɼkA94A𞖮(]:S۫_0QU!v6*Kd%WqZq}{ع1Zq?eUJ٣dH>S_ hFѵ/%e|FOG=aX)3a;5ghp.k]޳M>\<- qOoNTa]''ls#ԍNfBVr端8T9gy{k1␪ )F16 ~$1"8,~$Ql+ǝ>MꡬnWSz֖I4 YX">8x<_ f>kR2מ@Z='nuy5L'Lid^pRu qofa]ߎ)Wi{cA݉W8L_8)XC d+źʶwDڸHakt oӑ${sXzſI. ׭~%`zƸNϬh'?%6z1qc7}醱mVkŽJlI)T  L0^jE{-I66m\Wе0'# o~ 'iQRf]`B2\qP2ALo)~rmB?fAyz]d Ӹ3cҾIO}?p>ԽmVί܄/&+B*H3z|Y8.F,k"zyƳ\) Gqܽ?v)UBN}@%3^+[] c=7+{&y -|}T>fe0ch}j4h^Ft.h]԰ySUi f{ʹ81'' RHOpg aaPr /B;^ɩjf}iRRv$'M^5n7FNg b0uC/(,J^섐m;"@\=;a)-HСˈy]&V`FS~rI8Vx0qNϤX8JwMMfrQXz)Y R-IY>V^FƚH6K?,WZh _m V ,_ĢI}m =3X۝ӕVWWB1tKNՠˆ'5qy(?'5'MB5H !Z}WYP@j88`mt uG]0w+x0@w!p)dqQ 9E@;ɮ_EU^lN)|V*NP/)7_!cBkꊕ^Vޗe'qZB<ʢ/CXU,,A7-@XBUP6"h/PFgfυDrtZ ) IRѮ9PYm ֫KQ ܉xէnN+tJIP( "+ NLYtr/{Ue=?PkpRP)IH#~ bz RD.8[\'NrA:""/GahU"'%655wѽx q^q^L6A`#A\xAj̦Y 82WIVOI.3Id9Y(.EZ#0pyMxz^"үp_MT>N&hw϶ \n/E5dȫ:1((&xi|aBFEqF\ԋWWER_*%x;j~zBh{.;݅@%{}G"wSÈdBf&|O_ܲ Q[)Y$@$ 韆t볨嵧"_㖓Cc~ґ?Wx]i2:"^ &K5{_wJq@6.k8w\jɶմXYVśܞ6,̽Qwz0[ih'c=Gg (!er~?%\-C sn( MR48dp]krs)ǩp[.~_`A lHbƥK"k)(S,+ _Uʏfev*!3\c"3~Q8Ղʑ?\?Yy<Kzʕ?JW㘣ߎ؂va4r}Fl{̶" j J. )Q4 FcS Zq]̉?J᭕^fܥ =k4 -pDϒNʐR,(k y9M1cbfD!$%I:[PW`OucW=KO >Suˆ<cJ#+mPïJDL%2q1@eKUTmE\|WZX 9ԉVoyc刦 sDbd<,i״cе6cF%e$kO_K#Wr W;c=: ed ctUCbN`m(Y?;b㒎3² p ~JFգI3i)_L Z3]b=(xI]f76Fث).(//$,1,+D+z`泗G\:&22K-lA^q:ٙK%C3#} ]0P']LAכ :UubƵuD##h};ymM(RȒcmK֗aWx3y5L;V۠ΟX*QE^1}>Q"ɏLj*qAbO= ^,G^jC#o2﷣pσS-.W a<[% =0x9?sz"ӅV%5.*=7Jp߳ . 12j~NľS{6ӨբQ{blP lFi;NH@5[ p85}IEgnjx7NgNDTS w7(qWܱ5[UcsD&$w @PwиS6ՐUK/^%I3S^ȵ- CP v!9HxWqyt*Mߓ7Xni:XwAhtW'@Wo{7XHlYSYṭ ׼Egx !ǣ!J[H~o54EF'" fy^+Ap$Mo+W2_pLU# ZP5fJ'?)ğWE x  @J2J7=:oM-ƃŃZ-JG 1uҨUu4ӝed7a[̕<)t1M F7RGsԖNldoۉC>!,5!Go4χlU)dKq-OG=ž(øޖN *ZWcTL!Rd:Kqj*]d}Myƙn9Kl)J!!M ,d}a$(YM6qFE ߽R _YT !p4 Ņb9iux4@z'jtHhEVyyؔF29Mb;3ؤ-]0s=*+e-9k ඳ>>6¸nDύ2ŬCSxuE^yz6Ң89.2/ wQgQ"iD1e9ѧL޶UM1}lG:KRl,RZ0 d~ v?KtHCO^w:]`9'v0Q(osd9U)kj*Ҏn_~.e0=iyF; 2xUDt^5;{bhQe3ܓ(¡Y-JYPjvA+3,0j81>v[~Ērp4Jx u-@sCpm4 fs7}K\tQ "u+.qsxˑf?O3Lsb-QJՈ |š, 8ʀ*QdīqZXOҷcgצP:k3C)*BK8:{S82 Ig8i꣑`v98Zi2P]0Q,Ro*\8]et OBD jHTs1k(L7UM*iq0r k ώO|) ro_fyܮu~_O)or q?V-ryc33#O񿘮AI`qH-թ >>DKj;'<-UQ3,N+@>3oXVCMo]ZVUgu:.۹xMzcJfaq;?Yh28P,6A K<9МPPҦ#+=A4*#)ݬi!!7i=1O>4<+}xExs . ͝ްtOẈ" UH<`Af!j܋f8k thȶꟗIC]5.`Zhz;Zq OXzLJ]YGV\XC:->0:CT>Mѕz9jjo[fsW4&|On MZZ0b!#{wۢ4)eLQ^UW˝),P؂J" h.mLm4:7ct[Gkto<"Q:ߐAMCRG8Ϟ:}eW[QSF{(Sr a>,@/6f9W4<[ t=,JnHAۺ!Q*̴Xf}}qJ..c8)F+*&Fx^ldE<4<_i{yV$f} N,[ݼ*ʡ6t7۱Je Kx=RfO${; &1/P03db$ 95˨dX'o<] ut͸"e-9$h c2/7R'x@LaCI94e=$^@hq љ pXx۝ԩ|!]rxu5m@@SE"](OMi/7xw&Z fv3}ŜnIIr1->]k'1y^ew XCi3cYt>~`dʣVR:j9q_ ֦Pmfj[oR\~RБU#д10afhz#i'ϬLZ MV4n*̏ڜн#, Ҍ;nE\KϚzҭ| VlHܔbGDNQ'ezd0=~K\i>D]?ʃ3*Ȓ63ēͯcKaW󊒄ýWyGLzU^[ռ(e D˅|p57QrC\ıFN j9:92h&XlDe9.]\y;“28xQ\C>aD^[9UBZU~8}YefPrxikGćx@ACE hIł]ٽ1-&f,؄6(Hk"RE8dfȦN,cb|uoh-ѐٲ:FEytӗQH&@V|PZR(ք lBpZwaܶEnuqfE1HI} ?+txv44}J_ɭe j:E)m5 dKGϐvLZ]PDh.@s&s>l:e_I@JS?sg[(&Å2 S!X/@>TtVhBY!WjgIT+L hzRں6MTg-M XI柺:5s⬋] _-jJ6 pdTKzbQE:ވߊؒ<渤<>8] xn nL5orݎ|ֆ(9nJ9|~J، Ey/B++߬'Vrf2jxN>,168ߘS/qUa-}-Z.AF'a[m%(6ƭP2bKBb!t22RHv9 CQ¾ |}+Rg r8AشV[/iV*T4@0y/&*ٳ0ᙯmo +^#Yy# 7 SKO1TVlΗqpn\fv5E[Q@SOvE#+^Qe )AB}ԆE3p o^*@3`I(1 p=rREee! 9Q/,ҁL71ϋEu wHfO7/ ܑEJX!nOO#dJ#Y=*%>vRo-Oפp'<| o}oWf23/Y PЫ%iϹGQ\@&/啋J+(֌+BY$㷽(.7€'g$U/Ysݖ6x%8Ez~ F~5Yӱ+VH-*rqQqnSV[ Ì袅ftoAMڲ/3ӆܰOFOyfqZڽfjoQ[qe v8p'Vי//%YXXRZ^t"YF=d`=yg慔9Qm 'DBzX|(]y+KWA5z3۱x"RxGlH3u=8}'z ?1ײT5{b8h\7r~~LW |i$!^ZcHϕql@f'.k&̻-!ͨMnPYFQ\ D@v(]V|Kl/<)/3% ڽX:-iބ}X mLJI!v+Z/6!Ɨ޽vjk[Q>9W<,FV?F#lq.Ֆ_|{VߙGXa׮YHW<EPœ>mpwedDՒԮ.m`$=Hd](9ˆd  EB'-,'Dw$O?&mG,"ܠ`NT=kas!PJ`Oc1@ .)2zHl٘)1|gE1vvr`PH l.iϷ!c#l4Vm9&ࡔI13b:r'K,>?$SZN2W0`]"梁PdA[4:P@{$epkl_ 1hMɐp rk3{"U>% .M1kmj Vaj?bGʿ6Nq;  ׫p5.cy@:p)d2=X(SNA;m?A0hrp'JM@M)lЎ_KZt9j# ;*֡2#-u9Lu%3K[`9j2ߪ`/&`jdwa&n4831LxFe%]c|B 3s/7X xzU1 zGo ]lR6kB,2d6#OhF}o:L9c.0(յ5"}mu(հMҌ0?*l}4mؘ50+,oe OK=A{f\؈lSr6D6yzd丠Zʼn\CkA>"_Kh@L ̐Tcf KL2ns-Ĥp<;[8iN{Hv,tfY|a^r##> wd![{?[t؉ O<,J ֧p&bʺ:b㠳@_%1ךȋ'T&@/r1ּwZ4pUJ/h+r3P z7s]`3|{8 Վfh1M azhP5I/-t[l;iLJ/ /.dBMBnU[ٯ1_D+SK( *6eTr1ƙ'I(xi!45ߎAUC6,:L>qkz&''2{>ֳ4>q NaD18s\]qve9VnxYI -P\SY*('eR*B|t_II*lXv3S=$/9F>$f4&Ar11X t$Hʩ5dPc2Ĵ@2h7 ?;Ҏu-Ԙ&PBohV* c!w@M},~L(!KrvClyN7WTD{qYa.:&$ ~0mwNI=B/o &\XdodTG3$@x;.ٿ M7Wj^k_㽧]\x!@߮i{\Nʨ#eZؖ^7?GeBB*D[ >tZ5/+$1is~hKw/'In / ׮|8ޱ|q z3.OQq#[w1ߢ}L6sI19AQNq%837Oتsm l S x/+z DbIf Wlv y׎.L=x"d9ͦR-Ҥ Kz6J .m{E?Ȃ"lH2+ΖiMy+_lL1N\zZ1*k@N9#w_qWL':o~9QSp֒ئyufjÃ6B5Wb-Zcya--;͉T}*xTQ+6Z8_p"@1}ǩEGO2eFZNf,ugKA+!G08wq`Egl`Bp[ A:'g'0E-&"Ztơ{`9/&ΰ,-Jug &˺ie҇w4g쀔,0Hk G_,$mn魄-rcC[X~*"kK NKybQq5r@ʩNT@yf?YkR@)*%px883HYfnOxI]X37[{,p ~R{gOݏ]^#.rIj7DT>T,=A6?*ib[WWƨIЋ>+4E:b2̵?6O|A \tYó=*b΅4u" meC`KHc玸9:Ҥ7:2"#Rcn2^ zFs`/ut*W:1tc.NC- w~ q.>L/ Ky0^T{K ՗xQN|sSw.toZ@M!`pk$6|L2u-tp:AX=&>Wpgٳ_ёJ-$_5q Z.3G35T+M`l390Rte@2<"8h7!Hk 9?fFFxOmk?5eyaVSs˺3dw|B8p9]w%6R==nYC|T1&MJkK/;Nd]`nKuKySR7>/[#,xGX*Rwߗ a9/b Zjۄ$, ے.T"N[&y va5 ǒwbEN,:98Y">djX@PqrCjF>`Y}\]IHvc]g ZQĖ/wO_m:!o!d"wCJ#4+o{AyQfWE-x tm/p2j;l:Gv 9ڔ: xX`{jAȞ.P[!&\-tGjx K(ܗ8)8rm;v!,4E-B?yBaɅȟ4Uz.1&qQ⋭sEmr Y6Ցt+#ǫSfYȶ杼Kw>>ԦhIy?tz@̣#e0N36r>B-Q  j_aoF~zZŐ *O'K٫TngW|`A\m \i/R\*/!<_ !~sXfc!(z`-Dy;)ڈ^^xĐ)!3x:=)ޙ థ^8Ν#W޾?U4;=Ut@ʃ q3.6T~E^mfrk&F+ v0؝9EJzɏ{yˡLNH(cȢLp7~ mLSlssco0b@X`7܆3w믏*1ϑ4GsJJJr:7 e)F|jp⫉0ZCXOiEPaQ״?}/zj\dΞ0*"RN>URW(vv[weҢeA_gbQ̍^n޲UpB"`D^O%r[?%ԥԬVG:e:8:,s"RD}kvM{tWpw FʪI_c-n;~j*!6{МJNK!yt79Dzɋ,?PܼR7Skް~Ue@c"KKDxyR^ xCJ' $suDQl:> Z<:%:ިEPd/G9;TN{^@ `;Ⱦi?n6gUq'—l*" E]"" 2?t_JH,$J$Ptk>'>ܴ.mZN|*j$7kfFH+]`x3'a$Ę_4}dV2̪d-tdVjQ(?A D4"C2Y.z >bu6< aP!3Mqrﻵu膼gʒx/coo_UYe>2a#;1R*f ~@7ۃZ׭ffu(+X9) I19ǎrg *WH%Kv zQ$l9TX$:ȦΤv9J1jhv*hϣN䕎}+w1~gZߎnPuʸ5`dV#sFp/Au5 P} A2zK S `σhdjN+X w:Ed'0Pv78Nv/$m.EڏdR0wТM?rQB2}cyefA4`׺궴HO17 %i$g7{d"q5}XR#{g↘?uF?یKYV2(Uw~+lbh8zaxKaV1Y =\KDLc*}.e z:V!N_pB}ඪAڡ캆'rpzʈ A„3)Q]*m\Y5"8)4yآTDK($ M{ 5HJzT{Y%KB;fwr뎅_an+aGB6f]L/zSg".KnlE*`ENXB;峂Nq2} q&yuJ(lL=*=\eE8 EhsnXuCs|f.Z~[hbO'1L—DYSje.ۤ_MuVߵ|=cW̥Pɯ҅i:&F(}w+R$e$]IPBMnzGmL6]`W"/˽(Εz*7HW1KU=rO2a^Оm&}[4v\v o1K7DsF {pYf$4Xa1/񆌫"8}3ȟo%痑/HDW!< yk6/<1>bO~}7jFzQv\Ħ١7ӡA"`E*5w|D׷f0@Qw#Kr'nϞr%穽z끪=03rAYlh])!_0 X˚ q7tDŠ9s2<G?6b]JF61h(Gz7rЪb@KGYŤ3 LqTT]^I2N@K1V4# A1\3㝊j2چ:O,<#g?|;2 ڻiɪ9נׯ7um),l6kԪ(7$͒-[{^ШJfI+tJprmA)HxuB55' %5*~R~owQGw~r@ܲ{өėR*aϣ.aVND]B 8(|= ټ[Lnf oq&n! 0N|'<øK\dJh{ŷYp@ˣ݅RĠI񨜉#$:YsrQVfBCh ؊.o,Z%d x>ʁUB{#oJtr-EHAzOc W[U;Bx8AРka.2V~нYtTXI<]w=!]]q)p%pN ދtxӤ4]Y9Nٹu]aǴ@l\=Vd_{+hwDj\gO-P^l\?*[b k0o'ׄ>?+wYYp}٪ mi4&,,Y 5o—.2Nvy %?k"+C aYtsÏ Zֶv]h̿Y&qI W#=B̙JYwfdO g 1@]0ٱ2[Yqp*-7>u8PS,#;CPÝѩp)f%C%WTcu,YNC[8 I9Y5 g% 'X]*_KS_ʸ91GX^읟*GlNY8%XڵHqDbR𹷐G>M w*?ln ? -AKyʍc;O*˒L$eJwbLaP4ꘈƜ+)q#L9 2WfydV-=pEA+ dmTV'/:5Y B˚^%gV# ]UV{ÄFF'9?8=/h<[ U|nۦ6WӶ6vH iɣju:k[+l[,8[>fyק G2uX¨HO`No`~'cW2RJ/Y";> y?42yqy'nm>rƘ6㼢LoQ3(  eab:I(]T\dCQ}%Y3w_ƵȈ]?-/*h37?bHXT$e.&Z 4$f{ӧs^zV¸<\g~A*jcմG{H_SjH }|@#i;ǃW0c< UR/Ird:PGTꝢD+ҜXt: 㰶CfAx;!B"sr3 vX/-&m"mʝ#1Q\b ;72T#0+AB#.7 o(_+"F0;#szN_e:T6*/6t^fed&Ny[!hH,Ix7ģq:/cHO"g)T yy F3=%64!Gvbf#IEVY|ȒAZ[$0Ex 4ü.߆QV a6`HP7_]ZPsZnĻ %KSnKٱ zӏFQ!rMq3ަ4j:5\Y@mڶzB١2}- 6D =R;EۺB,28/bYEI*ԘO+݅~(-}F)l*!tSi0g=/a˧Vݓqlڮ5t8ҁojwq0mk31 Q`r5TyL7ΣY""Tr6xo}#`hz k{'C'ȒT=^3}?4$%gUgi֢],IHTvI-נZlw7ѼFn1ѺʩزR,"w p%đTA[39F "IOY/c DKw [0ܯe0Ɠ, g/Ѳq~\@7*~SRр#\:bbL~+zWH_Ɗ N=?LHoH&ǍMJE)r^R]l(?FRV#beP%&+/u6`fmqpF_,Yl50k"Lq dgαd)i;4|30ZMB9dAXwkGAP| cᅘ.vmHkscm@s IӉ><>SXy U/7,SeNC?0{xP27L4%gɦh8srV[FDif:{Q:-8YBjԪ.KW 8~ؔQSI+_s [{ϝ}|DYVRc,&%9(8!z-CP#D[#up,ׂzI=BzYO0ǒt( ֹ\^uక kǦOKG`olʚal1}qm#Q?C@0g(,TۯG˸]q+Ͷqj1̾n6 ^^ 5nJ RwZtZrsdԇ\)jO@+㰥8A5#y+ח5 #C&Yg`|`M(鮻ʯPRK(0Y;Y߸ /|f5A3>{>T".XLGkȱQ '6{5ԉX0OŢ*!}rZ K(jїz?ޗRӿAQ}{8a\J5rlg@8tL+drՂ-gMXallAyqm! 664sE)*Z leI8ufZ@AdQ>ڗ+;Hw_ٿXV \v6I ?Pky@ř:v"79 xb833ðN~`<ZYgm)GQs'l!ҕm͞ 0zȔI;)K< }„mwB0"ئ¾#Z%|C#n#m$?ۀǴf"\yF3smBFz1䙬,:L.-0;Iْiq֌6B=E9 ~^3H0Z< >1`f'@axÞ/ !5z198;7XU1}-rH~N#޿UUF),K65!g0?̕}~f>zқcgXuȏVRUT*,I?#aZДb~䰫jzT* S*"V>ucvEL #3/<ĝr- )xcEobJKelS@M/z%f:y1 vqC rvPW࿌̖Wd}"/G~{!^Kmj{X>Q`-KLYUv!31W{$iƔsOL:}>+[Y)G]jXjbRzuȐ*ٰ)?.ApI6<䉨 8aPuJ0f~'G-*ʖC9Xjo B#OY,D:@X+HonȗE3XhW @F+oZiӘ^ccK;^O^{s=&W61 6-⮩kq頧!SG?- ʳ];u։EO?GQ[v@v[)ZRggs 0Iڴ="G3)S \F!̙STwb'h:>/uXpk#dlWZzR^q(]o,VCϿdZ^6YVk}{G눺0bO##qodr%Y.1|\}IRu9SA1g~؏(kt4ߤ* S#g}=Lsy[(vj-,[v/&/fc6^` ! ?rPЅs"pc-!K1jŬ[*)hz1`u(`wC1#|FD$z0qQo"1gXمl~A'˲ Dp*b1WH94!) iҧ2 uKL*/^YyG}()q@[l2m10ȁ/Uz\Za6f*uw( ncS >EUt#TwNl9 .5 >oȟ8$RÙH&zI\ާ9y՚lꂡN su=ʶ\:.xn] xMUy@Gn߶nx-Fw ;Ά/,jSb"`}Z(^rR,Fr]_eIjW=UҮӹ/Nei1 oW؜ AaYecߴ[c{Q*\ 0XG/ 9,2WO ;e^X| & k=…ݚ!7m-QJ;O*g>eLdl.\2d$b4qyR0`:*uvb_]odh EF}KlU{,–8N{B(KtpNaW a;:hN3ă?@zH<|9JBވ/W\ 4h(CQFI*o@*VԧNB00. ّn` JRC %ˑ˫8Z^|MG߼&5ncxʲ=2\@9D;N?C+D{yM)q W ܾq-e LTM_ûtBX}!-#eˬk* \New]g>_v;Vk* es鲦8JtYŠ.Ênϯf@ '0.hz}c%b~jd<һ /G\?ls)Ҏ6Bk8 MFDѓf𥢈l3O@ y%fn3HMGtP+xG3aي 4Ƭ@PAfڢ7cluѨ;ƞb3Mx=lxlґKY]B>DdiynfA,?Km"z,-].x¤:;+X<.oc;3K{e'4"EB fB;ՉER!-ӄ$pZׂ+)6ޱzG!9Di Y+ |0/{կv%&j,*_vyJ(S ح`ugOh1?`2ѧ}G/9Ŏ㎲m'nÈ3j>F2w3x ^&KUxQE"C `SA־@\Վjs? x=) R~"p`'L=IW#/1.?g`5(ܺŚMew;3 eUZ7e 'T3s\]4f™p7I[H0OPB4:~䆠 DuM?ج%-m$ UX;}e{?*/ 3 -ݟ:(uzG`o"t1:vb,LbhP]5ݤ-:nU]Nn '!" +$drscu2frtZ|(jbߴyWj1mm?UT]mO&\ml_ \ .Ҙ=Vq|[2ۺv7/km&\&s ֧ YYM@A-o#'-ioရ<t]?P-@v& Gz8/d9-ZķC.u6|l@`MՉi&CH}{<.m*"rדesi' <^N,߬!ƈAs{T8Y߃dHYW$ce5ƞ@=*&EuU+gzu s-;"C֜Uj`6[]3+`~R˅k agm\/|@]!,m=Pr_h9{d.,[nYNb#Fj(DiDOkTƣF؁\@|ʺLdItRnlI5;+$ґs2hV[rNB`:AhPAU(J*4_X#+sVNZf- 4ǽ4->HAz}=x?AÇ@kq?ၵ5s!f6XQFj` U̫R ɿ]yHP#A'eZnv,Ao4Q\m' $/'yx:I_$MY0Pc&ݞ@hTZїfF5$'<OxZyEt+Վ0)K i eQFV`K#/!bا}]e1D3s$ "$bqb~9+7O{1Aw0 h;J{TTʼ;Gd P_0S6B~mx!}6.J_ 4 hr_O5:q<}d~~ p&fPUM5o?٧)#E#Uq<,J 4Z@ǞN# |]a?N!!UXȲ3|)^=/6 U)̧:b͂fFGplZqtXQYLYhuĔa8d'- j4ȟQ^t7.\PGV{$Vs(; #m\#nZTx_o,ͫ'N1* B p^z ( 4hu)}dS fv6v UeVL5Ik3hdŏbW( TO$ ͜_l֭DuM%@YwP$={ M Z";Fk;l`uwGPw'ӾBO:*VO1N ZR}6Z+%pO4lFt3 Hd$~Ԋ3z&e$f;xD $|;gaMF՜0t;B0 v6߼#[`P徽;'uڕbQl jY T~]p !5'pӖOf; :|]?βGD ʧ:(VT˶Δ*AÙ1Bi70Ve%&Q-AU?wAwF+LSZ%C]1/&ɚuAY=#gZPސ+Mf\+<5aXȆEP@KD`1{or[-0(D[?qeцլK1Q <&=ՠ Np_~NXcg8F "KLT{Ijvn`IN6z;XjâÝCg_z.3].&Iƌotdh_pZ*%Д;Y Bjį$FbI=TL_}V֌6FDѹ5\r ɢ[38l׏uD\m?CrX8r= &A?D{0[4I5E99>M;1& Vf _ #>G:u><Mdr&&cYp^J6y⏐}Fd0sTJ0w)3Kx?-mnF.~ڹ-T=^zƿr/ek! Om']>OD[8+weøjWPʔr\sBڹ0(#D>DEx<0Q/FuL6Ɲ./Z|{'z A:aq @ kL:'.\Iϣ9b!\R8(n|"'AV^Tslp^n̴}w*_O$'{.bgjáw;+ Uv\+ J@9()*Q걭f!n!o805~!qQԴ>1K=`iߙ~vnO˺1|}Pgߏ, 3^nC?,^~X"Ϳ>b͐^ÅYL X9F;t̞!q´ $1t:IH"x&f bsL2{Lu_!gP{.k  @AJpTa2UU*g^p2 |NPVZa r\* ITZ0=$5h7~]/VOgGvԠ0ԁyEmQ#sKXzѼ6R<^T{$33r.U&]xnߌV8EŲb!2M'+5am Պ 骴*%vo`cp9wAz1H>2JTEqŽ@Uf3>ōjw|bg>>_W1(mlDiE$0$l֋l°cU /ZlTvf `u&oz20`0@WPpcC`,^k_nZ`RZxMfPV3^/#NvHGЭd]y8@e~mg!0=-j?j MAP60%g>i FŸFK۔4n+J~6>& 0.ONV;jSA`K݋;j$UTn#'av"6-gVDՓR^BP?|]S)s #85?4O|#FU֓23-um'k~d&-IM%mk 2Yi7Ѭ[x,T.5+]kgWnltFql;ji9p})C\}6{X ܠ}cSQd8O H:A(*˫A8St*q%;͝܋xыpUnQVv-W^k[+WMJ Lo  On}QiK ;[㭵b<"8A>Hp$K-nG\\? Q8$>|m*J?BW3G>I-BKmX4ȓoW%Z+}z֛5U ќ:&bRlks.{._N*b۠諪;hNY*v45ؠ ]{H4R AX-A/\!5q]<kgf-.~n]t۪Gk  [AM{*70ߡU~4Mx&k!͍;;&9އ6۸TG8 s'wCP-`ؒI=F㙜 i}!Ǩ}#fn+"J՚k[A”USnSɆA5UWۡɳ*s_5A"D)35)eg? ڱ{Nnq̾! bԛ,0fkTHu!T@ ҿȲڡGMCHSO'_?y2ͩ|ƀ:?l ," ~x͜P-U_ۧaFaY$1^KYL; osꭣHsB-5*cH_dh@01+2& OٍKwWS >0,G9!ˊKNΗ ܤo$SYԨ}W-UXx)K8J)%'֗oPY^v?TDNIf.p6 +  _V!9iGxmi|grK(y1'jkئ-eWfZCӐb˓CѤ>"J]c1v h4KmG^*@.^p-&ZL&/8_%ڬ5Re ؎-[kWWqYp.qz2p KߍSЎv<\T35Trgi: T fjQ ~łb8!#p9M?șΫ$*Q-n~xG7*pX{kkU2d9ZB}hoZ&YE\"i݉)uo*=eHBZ ?:n^% 5h[,77kn gaϳ_"s=whYE8n߇\-|r{0ZF +}% RAgCA(.[a+lN8u[u☢6^U~0h:1tR(t2[I5Ȑx*hf;]dWtܪ8hCb*A۝%Jb i(DɮiP֎}--/ax9A~YK"2ح`UWm"gq_ )5Py7^ZmV~i,HOp6ZfTs8UʁRދN5*Ôu f@yr< M*>l㱼z{O婴$#fqf@Jfs,z);0uo48̃BpWuytF}-OȮ']zջ)+ךEostU;#ֈ"xOzŷᢌIϙV3񺼳bH0oTH*-e1zrt0/\F E$\E- $Xyt؞0R"n;9)" i&,{r] [d H.SAt# ө  1n=;,i!VWQ}aL/WopHF+;Ԁ9*{'T ‘'r:CN^♟_;T]> .c]#ir/9K6? F gp(0dLwf  L]IIq@2_*7\15-"?/ d>Nf]eKL?4Q&&ksVЩ.dձtmxVo ,!s!n϶/"BNnh;ȡ\'W?eeҏTߑYYCPq8tVS Jm BrHStp~b #IuN1-v$..k%*wK$05Ufoj5QD1.t,a6 i`N'K!f rI8 &DKfgn+1gr=*Q4]&>L8T#~s.Sh}Wlp2Ϋ!~.-?@̠]ul%Z \SgْDFpeXPvS3m udiȂZdr\PALK("97?qBGnWB}(ca7i9JB'x{-ԁ.@k,7-)sz4AGpfƕ?ėK)/1?k|~x O7㾗=jo-Ax(<~,BHsוêтxUq Fp [742)hcF<;oa_6X20!{{d V1WqZI??Nͦt¸ZUjNxᕖW;ko+X_3b k &TMⅻ`Cu]|2`H˭+}z<9"G6:tۑoFRrzo#k4IZc-?S'*m1y/Da#ج[kLU#IcJou 4aGbR,X t?hc֎5s*1dpII{GLêlw)N`$,q+Ei'\.dM弘ʩ4 2M)xK5H;/̆$`e~B_F y;n.FQ<:Cm7DlXi`wD $>CQhѮG=T)G'ȥcd12}r՗Ji|ĪUPd}%\,|ZaމG ݠ[ecӘpϜ\Hn?8CEKU1;X,Gk#KĶzA5eAMx`R%XY{PA(H{f<,-kZQd_P~ )P>}Ȑsd{~!fxkuT"ը̲!TeKSAUhZAArlƃ{;dTCOh,f<~L RĖ厡/nYcI!3[b[$B$X=bS EGuV aڿO2r.Ϸ u,E:bSv`K ߱ Z}%iuցn:..!9 ^Ts N{5~"V愘%VS@caHG{+q< r@ޏG,bIxR 5P U*hzG./\oC"t> 2ȞAC*5I#%s˦:8rƇ5%9b O0/93`z-6hO)0;$"p'Seia=TW -5zm Y8;% wRlIN󆾖Z$dt킇(S\Q&.(ʲE)UvxŶfy ^h)ӻ^fn}N:8,Mc2bd H<|<-^bRw/%QcbBTxĊ蟠j֣P- Ñ P'f۳x6\sONܱlv##63i-YvxRhhLa۱:("uA_WLG9ŝ_!:Fbc`?;OD5!:v]tH~UŐ@qK}=b>|:kuQD:%~iBpPUV /n b:!u/ܥG":Y7A蚎Es#^o˴eS+c=B%jC)%?;#R2z#K{iA^>쓪*4KL=&k'bsu]Ҹ{џLɄf= )ZXsT(<1TiHO[DŽ̴m1|՜q&,1i[Oߗz{<fy@&s0CUAÆ ڞdD\ؒAǪ8\',0֧$pWVqz{>Gm z؟x^HTpP~fZwQ~G\ (8I\r+V;,Z0 f֛YP;L\xGK4ǒ"ї uƏjAMH]"_{*a |tT//w[Wΰ!?ppT^*cw.n#_lDAńH nC vԧ|~S:Np ӗ;7j#&Y vd5\H"4у<2)[63%v e=l4+Eu{QY3(aoZB+8&8o Y.Pyx܀l,|x{gr,Y8$ ТYG `hxW6HşKf 9ՅFwOS ˙H~fpkrkD3]& յzQ&mQM\g`Z=f{Vm|[ƽbJ,w R‡Jwsx7 >.A){r,1ղp-~Ld̼^pLvNr"*2 Vzr+6: (=o?d9TE*?I_k衉8bOaRQ}~'Ǎ9r k1`sښu1iz~>ي.Og:QBX@<+kgMBj{tEEq6ˮQ`i3: @*']3*h6Mol3obZKJ&r.-=5Dհ܉=jmf@ˏA$HnPpw-p~Q(R:%ȓ9MM^;]T aSaAR~ 3[ (,?-ɕ\@W.J8)} +J7z;lHJ}b֗c2(Rt"Q@u1x1o"v0sI䮆3aq/IZ#ۛqPYQVgX?H#'bXYW9Aup qҧć;*%ENvh&`qOɞܧǸ+e54cQ`rp/ ww:du HP;J+&(ܮIi'kpZ8xA83hu,Bc!PrIP{`d舉#>_ +u;b4[.oJ~˖T0g;Z Xܷj[O& =4`[#iX&aRT5/a9GO0amKi"]j7TQSө 8Z_v]y`as\@9VReI]铭Gn=U*n̩TnMEI{`Vr1O zgev.}ju:\r_Ex~* .ێLՈ#5(8% ?gH-AhlI*oW2I e }{Cj\ߊ? +:"aYW]XOAH82!׽u8"L,PP/ S}fʅDZ#v*{}Z]u}a zxDx.X\:e?4]Y/늊Ädu!ȶ|z wK`!r(Ԡ|ٶ& "9N/YmZpZ . #)E2|z%C/1q&`Jt6x0#Ǣ{F=gڮkЁQ0o#Ɨ}![D0&A<ٸsOǙE,fdIqҟO3 &D#r*ru:0*'Þ2EY(ۥ {\'KKQϳL1O<3"7|s#c"sl'Ov%HYrn%.:"\q^6OְӺ{p`YAkN}ƥvob5Xc*)_?#yjJ=܊N]R G8/x?>OYwpRJjSsBN̍g=/7K4i]B%tag,2E #~A버 vi2zWEbAM|6E9R_.T?b lsHN,M5RxS=YE*52A" +ʭ; x!Ua3? J릵r<Sve1+* WDiF#oPzt>_x?Y֡M 5L<,=%Jlđ,H݁ѥvLB bn[CJd~~w\J(lҸg.i^V 4<$o`pFo|w=x |N)kLp$~U *p1i/!e{&BhH/ gʱ7'8d8NJVTQ@b3i J\o8 q]7w\0;'U^^&#Q̊Pm-as[Wlks=ILS[(;zE-,MyQ|8`NLyr[?`̖*y>{FKbߓrP)0܉h{ oT5,1}v?0q@z L ,0- \YV'yLǗ8)qδ>gȥ9Mcέnj?R;K^Q3 Z%GO>E)Rv/'N 6K>l4Еϫt*#V<]f8AW%b boE a o+tJGT}I2QP_y=c<;Ij|"+3b}>/ٱ&EZbmu[!_= {KLUYY6U܁XM]6%Ea'ct!dzEq v݄bBq VB TMJxv 嫙RĀ\¾raΥrț  Iu5GmEjY#tV`.9}D3<.H/SzؼH0-)P+ =h"wWӾneLkltI o 9JRiQL #~D< d@rog v@ 5CIJ]3^F~l߭^0 V;4ᮦEE!T7#m^-Ƴr Zpz~Ow)ps:T KLZE長9?ɵt`Y*{ۤ%!O+ ;l- _͍^\ kɣc[c~?Z0eDwVpb p"t޶.sf H=Ty^qdY'Yu_`$͠C&it%8?PBd|bf&?;>_pՑfz7.\ A{l%;o ft&HX?j]i(󓺘_?'}@MLv-*04-k,C_¨}PV`\e##zs)(a:#:fhKM;MW$]*gPa>?J, Bͮ5\>蔭4E,y y׬#$kjLRon*'`.}}#"S7NG.r +hGn0p㥘L8/!(߬j 7KJNkD!+R˅+0. :{MЎ+frV˨ 䠛?Ke&'eD.Y;6] G^/xNlc){Qʰts .{w.#onΎ?&cS= ܋)Le .Ǣ'iNd?OSDvla3elrZZM/HEGomP HQ5}:C3xBpC3MFsR3qH1(m%3ڣM.Pay}d;"YZHUַ E={61XaSY[j(:}iO+%[}/:D 2ƪw؊;-sbM(l&Mu6 N۔E%;֭3i1cm,Lȴ^?{"uڑ(425kOqQkR^aV׽ 1rTdp$}x*K,BR9JK6veH{`my'.W^z2{]DW؋@u yMǠx1o!z/$ 4p#KnaXqۍ">!DžrR`VK-% usB93䐪8e:?=ͰEύhjWWfDٛo/Xc}d#* ~NK`=jj}Pf;DkWy2Ho`Gp.&[l~ҴFlp?c~㩚605&*wbiu[:W(kRe: \[!wfZc#䥆*HR ]*XxUFwu7p+93 ]\-P%D[>94/oyU\ıɨQHʒ% YUck%t}p']޹MVΙRBɊO>]_귿Jeb&JZ^ÚX#QP+9Am%;N `y2d4d[nxWl b]@E+аm#H[5Ɩ1e*Eů/COKm92k*Vb6'ٜ5t Bo=T TiC ]F6I=~ӋApނ[RbF34hy_D$=dWEL'Zxxi@< 4m ^yP#)PbfsICRp{=N?R Z$6EQ›Hk[wDՅj i t ݍܭaIce`A$oh X)Ovr+[i=E#C$6Z\fB=&|`j'T$o'Ctۺ34Br9NT[3lkym{a@cݏx\sIp $=th hhe@75?L'nqo:]N̉m/AZ e$k1Ss*lZaX w3ɜCtctGDM:/E_ՄW٧S]fJR(p$t=Tеڅ^; Ha$ %- f#cW鿾(kW`8y,$JzMtmO9MNWᕔ1d:Ssx\,yKSu4( T֗!  +GP1xa J2egZ),dm3"$B4}g /%Lɓ\z^>Gn.x{w] ?ftjj3M+2Ѱ1)@ sdU$GIamY؇~R&, Is>mViFC%~M=i]-OeM{K*3uqGtE|LR yz#[af u&5uD}n[Oõ")sJXmT*=m bd3!?X'`OmD Dteou-)jZc\d^KG V oҘfEcQ;"4Bo:` \ c|Rr}7ph5P&\NQ&0tSˢYƻx6\|T)j·Ou"Z{gW}|%]Dz~ {ߋ+y'pBEr္D7dQNi4o< S`S΂g5 /|`a/Qo6Ṯ/3`-/*5IFB:jZV6X &7Fkb6℺a 0DbNr +vUfx#_u,R?Z [xe@@=Rb2պ GLlUBŃ$T{#4~^T&Bß-G]oIOOs*GQScQਂLd1b䝁Z̾{ȧVTPzۦSJ~F=D]DM_|,/[ vuyJ:_N /YFOo,rKKHgFEL-YrScg\ Жߍjw!I\dEyY}q87B3}u?}3[߯5GJ\XS1'sGKj6Zsc-~^x׏/tdGy66%'I̺"$%2yRMCgg6q3 @-9^Gאd> uuH Ux'c5@!*wK ƛ64jD8w+ c>.5"F)) !zU nFcR4bnOjϠ$]bD8xօs̈^(01W?Q$ԋ5N c2JQPAj)kUEj2ED5 (vM@:0ܸ*O, TBq}^5phb~2 [qir3A='tlzr-|-/pyS+a eMIn8}n܎7QAN60j3&-.p*Z6ﱠMg R&PiQR5$T\HN}udyMY+KY#Is$n17@PXQT"bUH6#X"Nl>"eT20\  M* :l#?3.F!ѷ\g(_ (kS4JXKG)B7cfDQ\BW<+ɰy O!'((5^T 0FLzt5I r*vl\ ܚQОa[X\V'o^~o-ΙJn;[Qy> ʯ!5qDHeOj\AOY?.Grɔ]%³gT/jƔ-vJ8zzZQ|?XY"JF 'ܩx,Iq(Ti#'HP޾hc[,[e=4*I|@CЬ}U%^r>on+.%$-8mI7S_0C}mIʒ>yw=J)\7=wx?v ZC ?G^gv. .I@ed2, WGЮ)Ü1%' ^pnIW<@77ɚg,M񚻕"7$Џ $V|3lE$1v:J~ej<|W$`-ƀ8B5:ݓ ]xeM"[M< %"~75 ^/9 6ertvG]2@g`x44[]E?OvKIui֬|TmR Gpt mz0 %29@A:3V"տ"=-ݗ`BN֙zT\ <Μ]E$Ng%n;|J#bIwwClJq¨~Im@d/?sLœf5C KsA&U``0;\s-HYڸ&U=xo/V50K"PLk#pgXq gf?}C7N.<(\zLoZ("$m=>Z)RPUĜ. 2-~OŦT6c))M8|PwJxuOxch%f Up- L~BYx)Hw6.ͦHe|r W eFMƹe_elt~x )@5j Yg"1y޼"$.\ܦBgW JF}$Y`jFQT_%$HO;=,[)$lY{|LAgΑUeIY4}`Pr϶y/M}a 4kfo_ԙqWǣh׹w+RLAIۓ',]WThW"Pff s,IJ@MvU"ef3D}r.ʴJ4 \ mW!8sQ3dpa?SVh|m&J(@mɪYmw}M| 7rZc^]kYDVHOCg7*#-FzDZ\'-8[S ;lQPf aFjŤqBnHpt2A %GaԬPtxܕNቪATxKVh#aXd`07\La~?7+ND}SP:)Я )m]U9~A0( @^Q{P-$ ~XB{h]ƅ :/}+οj]@DS },eEtZJ rdye,SO÷5p8i3sr&{s KĬ濍uI͒Kجs<9->#IH\ \Uo><>@E`}&ʆgGO{-k r+&rpCq_C= akAbes  I)aYks -alwaeЭĤ#j#pa/=cx .d&oe"\cpZ#L'VЎ^#/cSt(o[OTΗ%| ynYhgt\ ݷ̦8W74oKkujb)w3;v:Wm@ dȎ(_3Z cdѶqCA4|L2S0!9(_߆rzF >MaUHG L~q,, ?()qG}$\k'JQHYtx %We*'ˈO0*ԣN@{Ry;NSޝ8٩%'v9tΤS8-zRFSev9Y1JaIH5 &b}bjɊt=ȉ<]b{O]!ƹ%CB6O bKT+`#a Z^7inǎ]V!!kfJ<2(-?4ERv.by1~#)js}[.\OTwaЯޗwr(kmҕ (e}C$Q v,櫰`"i‰N}}@x%nML!vݯmTu!Í 0=}Mʱ_u]+u4(J qHۀ!ƮR][3][PXRxH+qҳ1ylh4駀ٹNL$kT;x,fl,Iu68꾾P"itroOyn/0h.7̺0^r ;6ߝ㼗GA'&B5{Hhs,_Zu4^]kCߕ`'/[~uw(`eSgdhQ. >?\ GPbEMP/O*ve4tikk`ed(hiv;끣lvߒI,P%r\bAxi3 5-ȶ+VKmwc-ƃuez _.c@I5L{{U,@]0"T_:v)7멊˧;3 Mv뗛BQ?WSr@3~AW5c S' |mBkr'C1ueO٣a(/NdC&L^(6X`)A!ϓ3ͨԛ͹:w^"&'$ԇoS`LW3ȖU,wY>KVO1yuHr|!7)%0\P%aM&&0u3Y3"ToQ]A)?m?n }GY:)a7tW,ѫc{53lVlvAgWꯚr-2oLw$;y7LEm jN x(WG&#cSU p@pJ GI`<2Kz1#X:]LzOMuiU_Iq` $6WQޓ*U\L']\lSg+ iQ VRbrWɇiWfѥ;+%ء)A;-j/S-BoMH5fhmȖlg׉!ю+%Yhj}BoNL s$zVZƌ#s>t}M*8I ^#įW3y6!uH3 O&8" p8`᳞Fzw+8(!/pzRFKc:!m3T"`‡4:ׁx8-d WngZt[ ]n⢳WWC׽.*Wt/%Zì(-/ڍn̨@$lucb*ĬH?Y.czl HŨW֊ȩ^}}l 4Q^ ߙE<T˔qBdYLj(.ΗN|E".zZ(iɸ7=y4tOo"~;k ;5#(|ёI0+T/tuN7^kž8h}Q>x$З ee`>#$f`\D`?&w`gT18 ߒ„bɻ9硸+B]Cl-_"l2GNn^?ioWۮldBk&tj`| CJ#8$ |@wzuDDv>f S&o]8IGt<) t[]Ѐx{ Jbev#L^3˺Y\NEqgnڬmD/c*<0es|:řB N?cm CXag^H C"d.o7+(7jsI9I'`[#IGA(:$ UA~f}>ᐉWܳU3-3i RȩlBeHy]\D*G?p\$Ge$գD| OzKbQ~?,j1CѺpT"_m6;vT[D'30^$ |XaX.p+h8n+)2$Tʊz zgw;j[װJяaG{vS*\8DgHZ_'k?k= *~ОuQNAC{(zs)(={$e2qζ^ےϮB>N{?ZjY`|Q#=&DG`E%+rdRƗ6jX:" 'AcPD$ oi;s%7ndCbNfFSl[r:6=&d/k4Ni QFnLςV~MJ5;.nڐȭ̭:M&OZRC;=`j/T 4#m]Ɣ\@>C^"dO@rpe ~?H ޼ݾk5h0!M}m$3T<>8o >71m =FnAT&?SRjkIIJzF8 Հf$qM\z `.bPz?~WW/\3C=/-"n) nzTỾl,=ƶ#o[bf^YVQ,:% OGq%W߹1Z/w*W_ `4AH%tc|(d Pc *}Hqj;v+|2 }N?/ J|Ejy2dͻ 2BHG%n"ɬϋ_hFݼIF.jBh :$H /MFoTB?h04@uZgV3UN?kr<6WCũ{0oh`a<~tz?F >>@{_YUj7N@@) ]f&Ҏ';.siFp%1p`kGOxaZ_#aBT<7vx (_)ui ߇ҰfPnPMM(zC"\Qv/-dz0>88yk* D|=iPBWo[yݻ&ڙK(8>2G~<;ݡez%#M&│ve% N查~~-?[Gq$t}H( ,6m8%Ȋ?',Y=JD&}mǟ!Tm'-s ^ZtC@%nIACCfW %s;EENzW,b$Y6L&ZIۭNv׿ `a/s~6B3!5йZ;:M^^ewC|a] ha\<$Rn(:Tk)a{e1WJӱ0oo|vuhG<N<HNsWQ.k/>+aAc ͬdCқܥKaKT:+WS?j/(x-Yܩ\bAE/t tG}L- Iy$ z D;EjP4X—xdgd/CiL#pa5q[-|q.;< C6[w;X\ FFAg5w$Βlrךac 7GG*pb F?^%AGpasH;9xTEDyoqq?b$w+RuZ#Dɺ3vڦ9%CTtI/$T^K =:e[ o4$ɷW)`%E75zq>72:xJvN5aU# DޥeJWZ 9_;U!{,g~3hv,0?\vzPݫOf"U^I9ģ$~_6y4H%og_?ůmE3]#1wKB^&b*LI}1"dΨgYߏ.~6qTjzuzq .E.Er_1 kCK44 Q'e ~g۴}.|N݁}PhH\Of5KQ`6ѰwמHjOp.*(xj> C9*SêB6!f= Ճ'ĸܯڲ}wl*)kV.u4 xՑ$aƲtMPgGZWUܚ!7uH.Ũ.M;(56D*XY~Ocƶ'=q(BgiަRF޽z$/eW䆧Coxl0f wfJnI 1o]Zu6e#^|99ŵ40W~>bXNc&RSPj &-O6h"p\3B׫[)YOo@o?){6Au'hẓyAJmNe.N?CņSlR %ن(zoX=mu\;͍/{\H\''v1Q7`xsp6ȨSjR A1{dRFC϶Hwawos3J156ǚR킧}%f9+=ϡ>L%nդ]+XjJ^΋f//E 4=Kug_POyomӘ{%YJp1)1R '{7ZRYcIۙ R i{v{_;QtA Dh>o\in*@*lU^B:}^]<,lLp?'2}-3쩴ܔ(*/>'.y٥BA=mG̦ @}֯B;w줅`np2zLՒEPM[W͓CsZpmVzںUx>9yH,i1Va (qKh]1୛fc/!.$'.bB`Ly4}\iy {? +:Z< UP=Bo`)GBU@s[N^9Q⌼]A!PmDv`is@ʈEQujVDHP%m]㰫;g]^Na G3˹dTMa?k+}?LZȐK{S2ph3|Z2rC9J jN]iLs~/jH_yi;K/9iGi :HaUhKs,EVtʟ ~cfۦ}wjƗC.M}wu)c,UcMa87DY)pw,WQ>LA$ 13p ̸+ Q[fO-S(aXwRrEW=۩.gGw-1T邓,|Y Sv+Bq̟qVBɐ *(f&AkGd~9,? }n8p+wro,vˀ3QdEe$!9X,m gglfX d+d׷N~kj:̟EH"E;)5f0 HQPIڐHNnJ]ݦ *n7;"pY Y˥8Y@]5jBSh1onF>c1~rr[B /yljEqZ^sU'YYKW5J5 8| Txe[ WJxc{cP@] *bSxI?mwbw(ա|eV:Bܙ;p#OR ,Ƣ[F@9"j̬Q[S6ug!s*fXTvɩXd,Y~;,#sK#tn2 wπASs%*~VbM yL]'T^ކP6:Ĉbe-=cpXx'^"þ0F(p|tZ}mu8|HC6ރ4lXFNUzglyc2G|d߫ly+ZU?-D!v"?ej; %6 z$ IqsC *%Stf,i:nY˥hel/2Ǯ;йcժDG/ws{|FdTYbѢHߌ|mxcڌ"\j*[Q'$osvO{`oc&^%' !+qQ[nN>.V0H ǜ[NFОA<#M%ejᦒ]Ԃސ]s $,a9֯0b?bNdf4[41#YY|d +8$Uz CϟRubƜ>6GvlR#7qz5Y1:FΊZ jox! u\vףQV)Lh忝k߲>0!::09k|nU8Y)yc̤z ˖} HL₯|A əӾ'>H|Zt4ŻtsZM+(,tg-[;kq}ݯ85& [u'D[{zgǝJy3gAI\&[IïF;uۙ@f[GC`onLHhR ~E&(},\DDԳ*4ɻX;J·_G=o

]f}.> @ќQ0 C.a1 KBTB%m$Zc>$KE#FhװZ߆y؜CԉvSq#H+_c;G4+NQļ+{Ϲ}E嗐~α|m\ՍŎ"䙗ty6%U Ԁz\TWh EU)bXhPcwWOħFAks vϨy|K|!O˘[dp$x ! %தъ);D^(xQ/KwUJ3 _bfսQ<\^օcWBpҶUf'I:1^)U1M x' fg=xlGo[⎹Md3݄;5?D/2d%Mdqm#}W]1CV7hFm&٥iVﮤŸ<2A6{"KЂHZXp"J Yw w Y}zkƃWmL5G։bG`O?pe =IKL)E5$xs4x|"cCmHɵ@%+ɩjhĪ!`cNCRYDnͪCQ@s6d!l]C{ݦx*աLx"$Go;yD/iBB? !EgA߽sb>hQFZQb=6]RsB`FjAC\\yCtiQh㝩V yt $wV=ph˓CIIE'Ӱ&3tsPoؚ.1 $Y')aSl{J Ykr"CD=:nd#ii+*eٍ)%= Xb5eq]qzVNDU{@uZ8SJ-"e+Y.' 9Lθ=\6aEB2]b=6CqKgq^hbf$jK*m7-Q/UΫ2FQn%r8b^Hq@N]Oh~jiHLn[W1R.oI2ͱΘ Cn#!gAbıojR39H;TKSGR߻Ũ5, XA1?{L"̊arÓĸ:iMW,W߁mv–\Ta+݂W8uNn}쩮r㞦E$Ћ ̰0Xu2E jB!oܙ]5a^a+\ӳCᑲqLQ*ZK< k͂좰F@Hi4,L?WBoy'I#im v0+<+S,*? t^qpᇗ郖ʕ0*L,3& sb%HfVfސ9{ q_ͲM3/+ȴfy_ çц^ lZV@9g`G"U=ބ4VzyJPUyJ7 FDMp ж>QT#O ҏ8m)|K VmD -1+ ;L/ʌ.X$e+X(yb:ၼ%qg*dW©6:;fNG"M/FurՍs1]so,$˻k+Je}c .3Y4>Ĵp&#В^6I2}ܗ\&'ҹT#(]530o*:.}- %_HgQlkNE$toZCo%&`_2^d;DL&6EbQt]ݩpTa\w,=iqXG)bv(çpEt6RhUo|}~uDjqx3M6ͭL6gQlfe]M 3@C1r9@#_~k jz$|Fiᴍ}21S~F%2H<$5/ޤ2BOb{Ol:ct ȒB N͈o8 rBy \lۣr =x\ 6FwԆܪV0֓l$WÄ>Ŝ"0SE3MCÀ@VgtSE\w\ VSW:\2yFń$:_=-y4E^|d`M>NZ򴭉#%NHb=#Г='fmbFuih896Dt O {|Y:ZQ ޛΪ,ؼ C2_zmea?޺-WtCo;N`o7C,ε9 '=m&KۈI@Cmn&_%yjoѵx1ş~ꭧq9&.t`"#ҽQw p!U >a{}9 $OBՖ;(\ * cr,*h9ʝT᫿}h|H3s trͲم۫wElDg l~ϰU%CqltER׎\^cL؞Xj$x ɘrM341z6`P5:XfeL^~CQNHWb]Ai~"CjHMV͕ڨxq뙪–p"N&e)5>d^/[LOEPT+ 2Ny'f<{TP;aǾ=2DJ5KqXtZT ()Eي:0Ij>nk0^jzզɏgI6S5Qv:MMmKq$aJ,ksҜցֹ6O7$f>%$PEBU16y&8y^)9NjARQhF硘.}#pڏ~}UF=cO*uk-4`B"04ͨ$%Pb_u#W7L&ݧ:rFj)PayT&[}XS@u3:kw/5];h̳vP7KNTt;tb8ǥ "q D:p.)i]ywL0yLř%W`iP /0~lӓѣˑ?A1L~Y[M0"oҾbBr+\L{N_T7'džqWOĺ kYYd3o]6؉C\hpZY-Aߍy2Z]How!^3DD|+AC]0a>lBdØ| n `mS %]KP t& e^^O6|n#9M? ^*c}|ok$[F4CL\N ;Rbp}c1"^"\U6Ohcܽ6H}V /F{=7r+JcW:~^`L,2;L"Tbߞ`5 ㏝j,O.T];wOSwX8=C".nHkO A$e6XfZ n?x?1rzdK?W9Q7Zύ Q;oK%j ٚ(Ӓn<|e tvB_^Zal3B;\~pu!?M]I@m z4`!:ˌ5&eV.fנioԇsQqLC(Ox O̷iPL ,TbBح$_Ra+S;\78 ϓHc_Tv/ 8u/+ɞ"TĽq1K(X)zM1#C /6*6\u j$ wԳȀhFW͟ BD}lKr[B-4ia %Aҙld goa1URY}E8⦴To!?8lEi YZ