ipa-server-3.0.0-51.el6.centos$>=0/#)>??d  ! ? *BHO<     j $ LTTT(8 9:=y>y?y@yGyHIX Y \]$^Q(b)deflvCipa-server3.0.051.el6.centosThe IPA authentication serverIPA is an integrated solution to provide centrally managed Identity (machine, user, virtual machines, groups, authentication credentials), Policy (configuration settings, access control information) and Audit (events, logs, analysis thereof). If you are installing an IPA server you need to install this package (in other words, most people should NOT install this package).Xhc1bm.rdu2.centos.orgBpCentOSGPLv3+CentOS BuildSystem System Environment/Basehttp://www.freeipa.org/linuxx86_64# Stop ipa_kpasswd if it exists before upgrading so we don't have a # zombie process when we're done. if [ -e /usr/sbin/ipa_kpasswd ]; then /sbin/service ipa_kpasswd stop >/dev/null 2>&1 || : fiif [ $1 = 1 ]; then /sbin/chkconfig --add ipa fi if [ $1 -gt 1 ] ; then /sbin/service certmonger condrestart 2>&1 > /dev/null /usr/sbin/ipa-upgradeconfig --quiet >/dev/null || : fiif [ $1 = 0 ]; then /sbin/chkconfig --del ipa /sbin/service ipa stop >/dev/null 2>&1 || : fiif [ "$1" -ge "1" ]; then /sbin/service ipa condrestart >/dev/null 2>&1 || : fi1 7dZ& $`6Lnmm}H[[` L00B@@^W_(_(zzMPLLwpp @@qMMe hh` T E E>x8=:;8:<  sqob:-JNPwI =n!*~~ZfUE.Fh;(!*HR~k*I$H DA+ p?\SQkqC5y8K !,#V'MB8%5t=[ ;z$L+$)&'*^"DF 5-5{0sprv]*o 4t0ad1=GO*soKoTK>~_9[i /  y ,Q>eJ 48l>r  sVdf{qMyZhcpv*K8p J2)x'~qky6opN/5O&|=5sQR{c w%wNG W)  giy14Zb3U xi}9e6 R^E);;k{  z t75AA큤큤A큤A큤A큤A큤AA큤A큤A큤A큤A큤AA큤AA큤A큤A큤A큤A큤AAAAAAAAXXXXXXXXXXXXXXXPx#XXXPx#XXXXXXXXXXXXXXXXXXXXXXXXXXXXXPx#XXXXXXPx#XXPx#XXXXXPx#XXPx#XXPx#XXXXXPx#XXPx#XXXXXXXXXXXPx#XXXXXPx#XXXPx#XXXXXPx#XXXXXPx#XXPx#XXPx#XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXPx#Px#Px#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../../../../etc/ipa/html/browserconfig.html../../../../etc/ipa/html/ffconfig.js../../../../etc/ipa/html/ffconfig_page.js../../../../etc/ipa/html/ipa_error.css../../../../etc/ipa/html/ssbrowser.html../../../../etc/ipa/html/unauthorized.htmlQQQQ@@@@@@@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapacherootrootrootrootrootapacheapacheapacheapacherootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapacheapacherootrootrootapacheapacheapacheapacheapacheapacherootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapacherootrootrootrootrootapacheipa-3.0.0-51.el6.centos.src.rpmipadb.so()(64bit)ipadb.so(EXPORTED)(64bit)libipa_cldap.so()(64bit)libipa_enrollment_extop.so()(64bit)libipa_lockout.so()(64bit)libipa_modrdn.so()(64bit)libipa_pwd_extop.so()(64bit)libipa_range_check.so()(64bit)libipa_repl_version.so()(64bit)libipa_uuid.so()(64bit)libipa_winsync.so()(64bit)ipa-serveripa-server(x86-64)            @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ ipa-pythonipa-clientipa-admintoolsipa-server-selinux389-ds-baseopenldap-clientsnssnss-toolskrb5-serverkrb5-servercyrus-sasl-gssapi(x86-64)ntphttpdmod_wsgimod_auth_kerbmod_nsspython-ldappython-krbVaclpython-pyasn1memcachedpython-memcachedselinux-policyselinux-policy-baseslapi-nispki-capki-silentpki-setupipa-pki-common-themeipa-pki-ca-themepythoninitscriptschkconfigpythoninitscriptschkconfigzippolicycoreutilsopenssh-clientscertmongerpki-caselinux-policy/bin/sh/bin/sh/bin/sh/bin/sh/bin/shrpmlib(PartialHardlinkSets)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)/bin/shlibcom_err.so.2()(64bit)libcrypto.so.10()(64bit)libcrypto.so.10(libcrypto.so.10)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr.so.0()(64bit)libndr.so.0(NDR_0.0.1)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtevent.so.0()(64bit)libuuid.so.1()(64bit)libuuid.so.1(UUID_1.0)(64bit)python(abi)rtld(GNU_HASH)/usr/bin/pythonrpmlib(PayloadIsXz)3.0.0-51.el6.centos3.0.0-51.el6.centos3.0.0-51.el6.centos3.0.0-51.el6.centos1.2.11.15-831.101.112.2.15-245.4-81.0.100.0.9a1.43-63.7.19-1930.409.0.3-409.0.3-409.0.3-402.0.83-19.240.61-39.0.3-403.7.19-1934.0.4-14.6.0-14.0-13.0.4-12.65.2-1bind-dyndb-ldapbind2.3-29.8.2-0.10.rc1.el6_3.24.8.0XX lWu@W@W @VS@Vy;@VD@USA@O>A@N@N@NN@NNN^Nj@NNNNx@Nx@Ns:@N_sNI @M@M@MMy@MM@M@Mx@MMTM~@Mx@MfH@MdMU$MOMOMGMA^@M=iM6@M4/@M.@M.@M-M-M M@L!LfLNLdLLLzLe3La?@LD>@L#HL#HL@K/KՀ@KK@KKs@Kie@K`*KK@K @JJ@J@J@JJB@J{IIIm@I1Iq@IKIFFI9I1.Ih@IIP@H@HXHO@H-w@H HHH@G߮GGgGs@G@G@G@G}G}G}GG@GC@GkGDG<4G)G(n@G3G@GJF@FS@FFuF@Johnny Hughes - 3.0.0-51.el6Jan Cholasta - 3.0.0-51.el6Jan Cholasta - 3.0.0-50.el6.3Jan Cholasta - 3.0.0-50.el6.2Alexander Bokovoy - 3.0.0-50.el6.1Jan Cholasta - 3.0.0-50.el6Martin Basti - 3.0.0-49.el6Jan Cholasta - 3.0.0-48.el6Petr Vobornik - 3.0.0-47.el6Petr Vobornik - 3.0.0-46.el6Petr Vobornik - 3.0.0-45.el6Petr Vobornik - 3.0.0-44.el6Petr Vobornik - 3.0.0-43.el6Martin Kosek - 3.0.0-42.el6Martin Kosek - 3.0.0-41.el6Martin Kosek - 3.0.0-40.el6Martin Kosek - 3.0.0-39.el6Martin Kosek - 3.0.0-38.el6Martin Kosek - 3.0.0-37.el6Martin Kosek - 3.0.0-36.el6Martin Kosek - 3.0.0-35.el6Martin Kosek - 3.0.0-34.el6Martin Kosek - 3.0.0-33.el6Martin Kosek - 3.0.0-32.el6Martin Kosek - 3.0.0-31.el6Martin Kosek - 3.0.0-30.el6Martin Kosek - 3.0.0-29.el6Martin Kosek - 3.0.0-28.el6Martin Kosek - 3.0.0-27.el6Rob Crittenden - 3.0.0-26.el6Rob Crittenden - 3.0.0-25.el6Rob Crittenden - 3.0.0-24.el6Rob Crittenden - 3.0.0-23.el6Martin Kosek - 3.0.0-22.el6Rob Crittenden - 3.0.0-21.el6Rob Crittenden - 3.0.0-20.el6Martin Kosek - 3.0.0-19.el6Martin Kosek - 3.0.0-18.el6Martin Kosek - 3.0.0-17.el6Martin Kosek - 3.0.0-16.el6Rob Crittenden - 3.0.0-15.el6Rob Crittenden - 3.0.0-14.el6Rob Crittenden - 3.0.0-13.el6Rob Crittenden - 3.0.0-12.el6Rob Crittenden - 3.0.0-11.el6Rob Crittenden - 3.0.0-10.el6Rob Crittenden - 3.0.0-9.el6Rob Crittenden - 3.0.0-8.el6Rob Crittenden - 3.0.0-7.el6Rob Crittenden - 3.0.0-6.el6Rob Crittenden - 3.0.0-5.el6Alexander Bokovoy - 3.0.0-4.el6Rob Crittenden - 3.0.0-3.el6Rob Crittenden - 3.0.0-2.el6Rob Crittenden - 3.0.0-1.el6Rob Crittenden - 2.2.0-16.el6Rob Crittenden - 2.2.0-15.el6Rob Crittenden - 2.2.0-14.el6Rob Crittenden - 2.2.0-13.el6Rob Crittenden - 2.2.0-12.el6Rob Crittenden - 2.2.0-11.el6Rob Crittenden - 2.2.0-10.el6Rob Crittenden - 2.2.0-9.el6Rob Crittenden - 2.2.0-8.el6Rob Crittenden - 2.2.0-7.el6Rob Crittenden - 2.2.0-6.el6Rob Crittenden - 2.2.0-5.el6Rob Crittenden - 2.2.0-4.el6Rob Crittenden - 2.2.0-3.el6Rob Crittenden - 2.2.0-2.el6Rob Crittenden - 2.2.0-1.el6Rob Crittenden - 2.1.3-9.el6Rob Crittenden - 2.1.3-8.el6Rob Crittenden - 2.1.3-7.el6Rob Crittenden - 2.1.3-6.el6Rob Crittenden - 2.1.3-5.el6Rob Crittenden - 2.1.3-4.el6Rob Crittenden - 2.1.3-3.el6Rob Crittenden - 2.1.3-2.el6Rob Crittenden - 2.1.3-1.el6Rob Crittenden - 2.1.2-2.el6Rob Crittenden - 2.1.2-1.el6Rob Crittenden - 2.1.1-4.el6Rob Crittenden - 2.1.1-3.el6Rob Crittenden - 2.1.1-2.el6Rob Crittenden - 2.1.1-1.el6John Dennis - 2.1.0-1.el6Rob Crittenden - 2.0.0-25Rob Crittenden - 2.0.0-24Rob Crittenden - 2.0.0-23Stephen Gallagher - 2.0.0-22Rob Crittenden - 2.0.0-21Rob Crittenden - 2.0.0-20Rob Crittenden - 2.0.0-19Rob Crittenden - 2.0.0-18Rob Crittenden - 2.0.0-17Rob Crittenden - 2.0.0-16Rob Crittenden - 2.0.0-15Rob Crittenden - 2.0.0-14Rob Crittenden - 2.0.0-13Rob Crittenden - 2.0.0-12Rob Crittenden - 2.0.0-11Rob Crittenden - 2.0.0-10Rob Crittenden - 2.0.0-9Rob Crittenden - 2.0.0-8Rob Crittenden - 2.0.0-7Rob Crittenden - 2.0.0-6Rob Crittenden - 2.0.0-5Rob Crittenden - 2.0.0-4Rob Crittenden - 2.0.0-3Rob Crittenden - 2.0.0-2Rob Crittenden - 2.0.0-1Rob Crittenden - 1.99-36Rob Crittenden - 1.99-35Jr Aquino - 1.99-34Simo Sorce - 1.99-33Rob Crittenden - 1.99-32Rob Crittenden - 1.99-31Rob Crittenden - 1.99-30Rob Crittenden - 1.99-29Rob Crittenden - 1.99-28Rob Crittenden - 1.99-27Rob Crittenden - 1.99-26Rob Crittenden - 1.99-25Adam Young - 1.99-24Rob Crittenden - 1.99-23Rob Crittenden - 1.99-22Rob Crittenden - 1.99-21Rob Crittenden - 1.99-20Rob Crittenden - 1.99-19Jason Gerard DeRose - 1.99-18Jason Gerard DeRose - 1.99-17Jason Gerard DeRose - 1.99-16Rob Crittenden - 1.99-15Jason Gerard DeRose - 1.99-14Rob Crittenden - 1.99-13Rob Crittenden - 1.99-12Rob Crittenden - 1.99-11Rob Crittenden - 1.99-10Rob Crittenden - 1.99-9Jason Gerard DeRose - 1.99-8Rob Crittenden - 1.99-7Rob Crittenden - 1.99-6Rob Crittenden - 1.99-5Rob Crittenden - 1.99-4Rob Crittenden - 1.99-3Rob Crittenden - 1.99-2Rob Crittenden - 1.99-1Tomas Mraz - 1.2.1-3Dan Walsh - 1.2.1-2Simo Sorce - 1.2.1-1Simo Sorce - 1.2.1-0Ignacio Vazquez-Abrams - 1.2.0-4Simo Sorce - 1.2.0-3Simo Sorce - 1.2.0-2Rob Crittenden - 1.2.0-1Simo Sorce - 1.1.0-3Rob Crittenden - 1.1.0-2Rob Crittenden - 1.1.0-1Rob Crittenden - 1.0.0-5Rob Crittenden - 1.0.0-4Rob Crittenden - 1.0.0-3Rob Crittenden - 1.0.0-2Rob Crittenden - 1.0.0-1Rob Crittenden 0.99-12Rob Crittenden 0.99-11Rob Crittenden 0.99-10Rob Crittenden 0.99-9Rob Crittenden 0.99-8Rob Crittenden 0.99-7Rob Crittenden 0.99-6Rob Crittenden 0.99-5Rob Crittenden 0.99-4Rob Crittenden 0.99-3Rob Crittenden 0.99-2Rob Crittenden 0.99-1Rob Crittenden - 0.6.0-2Karl MacMillan - 0.6.0-1Karl MacMillan - 0.5.0-1Rob Crittenden - 0.4.1-2Karl MacMillan - 0.4.1-1Karl MacMillan - 0.4.0-6Rob Crittenden - 0.4.0-5Rob Crittenden - 0.4.0-4Karl MacMillan - 0.4.0-3Karl MacMillan - 0.4.0-2Karl MacMillan - 0.2.0-1Rob Crittenden - 0.1.0-3Rob Crittenden - 0.1.0-2Karl MacMillan - 0.1.0-1- Roll in CentOS Branding- Resolves: #1321138 Missing dependency package "python-sss-murmur" in ipa-server-3.0.0-50.el6.x86_64 - SPEC: Require python2 version of sssd bindings - Resolves: #1367026 Document and test procedure for running IdM Server in TLS 1.2+ environment - Require 389-ds-base with TLS 1.0 disable switch- Resolves: #1322059 IPA Replica-Install from RHEL6 to RHEL7 Fails - Modififed NSSConnection not to shutdown existing database. - Do not erroneously reinit NSS in Dogtag interface - Make sure replication works after DM password is changed- Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in certificate revocation - cert-revoke: fix permission check bypass (CVE-2016-5404)- Update IPA code to support Samba 4.2 - Related: #1322689- Resolves: #1225868 display browser config options that apply to the browser - Chrome - Remove ico files from Makefile - Resolves: #1232843 ipa-client-install errors out if client and server time are not in sync or unreachable - Skip time sync during client install when using --no-ntp - Resolves: #1288495 Add userCertificate index used in Smart Card authentication - add DS index for userCertificate attribute - Resolves: #1293588 JavaScript error in ssbrowser.html - TypeError: Cannot read property 'mozilla' of undefined - webui: fix browser detection in browserconfig.html and ssbrowser.html - Resolves: #1296124 Adjust Firefox configuration to new extension signing policy - webui: use manual Firefox configuration for Firefox >= 40 - Remove binary patching from patch 0140- Resolves: #1127211 ipa-server-install --uninstall produces avc - sysrestore: copy files instead of moving them to avoind SELinux issues - Use 'mv -Z' in specfile to restore SELinux context - Resolves: #1222999 ipa aci plugin is not parsing aci's correctly. - ACI plugin: correctly parse bind rules enclosed in parentheses - Resolves: #1225868 display browser config options that apply to the browser - Chrome - webui: add Kerberos configuration instructions for Chrome - Remove ico files from Makefile - WebUI: fix ipa_error.css - Resolves: #1232468 The Domain option is not correctly set in idmapd.conf when ipa-client-automount is executed. - Simplify adding options in ipachangeconf - ipachangeconf: Add ability to preserve section case - ipa-client-automount: Leverage IPAChangeConf to configure the domain for idmapd - Resolves: #1232899 ipa-client-install does not respect --realm option - Allow user to force Kerberos realm during installation. - Resolves: #1276358 Remove /usr/share/ipa/updates/50-lockout-policy.update file from IPA 3.0 releases - Remove 50-lockout-policy.update file- Resolves: #1263703 ipa-server-install with externally signed CA fails with NSS error (SEC_ERROR_BUSY) - Free NSS objects in --external-ca scenario - Resolves: #1263262 Unable to resolve group memberships for AD users when using sssd-1.12.2-58.el7_1.6.x86_64 client in combination with ipa-server-3.0.0-42.el6.x86_64 with AD Trust - Do not lookup up the domain too early if only the SID is known - Do not store SID string in a local buffer - Allow ID-to-SID mappings in the extdom plugin- Resolves: #1220788 - Some IPA schema files are not RFC 4512 compliant- Use tls version range in NSSHTTPS initialization - Resolves: #1154687 - POODLE: force using safe ciphers (non-SSLv3) in IPA client and server - Resolves: #1012224 - host certificate not issued to client during ipa-client-install- Resolves: #1205660 - ipa-client rpm should require keyutils- Release 3.0.0-44 - Resolves: #1201454 - ipa breaks sshd config- Release 3.0.0-43 - Resolves: #1191040 - ipa-client-automount: failing with error LDAP server returned UNWILLING_TO_PERFORM. This likely means that minssf is enabled. - Resolves: #1185207 - ipa-client dont end new line character in /etc/nsswitch.conf - Resolves: #1166241 - CVE-2010-5312 CVE-2012-6662 ipa: various flaws - Resolves: #1161722 - IDM client registration failure in a high load environment - Resolves: #1154687 - POODLE: force using safe ciphers (non-SSLv3) in IPA client and server - Resolves: #1146870 - ipa-client-install fails with "KerbTransport instance has no attribute '__conn'" traceback - Resolves: #1132261 - ipa-client-install failing produces a traceback instead of useful error message - Resolves: #1131571 - Do not allow IdM server/replica/client installation in a FIPS-140 mode - Resolves: #1198160 - /usr/sbin/ipa-server-install --uninstall does not clean /var/lib/ipa/pki-ca - Resolves: #1198339 - ipa-client-install adds extra sss to sudoers in nsswitch.conf - Require: 389-ds-base >= 1.2.11.15-51 - Require: mod_nss >= 1.0.10 - Require: pki-ca >= 9.0.3-40 - Require: python-nss >= 0.16- Require 389-ds-base >= 1.2.11.15-38 to fix roken dereference control with the FreeIPA 4.0 ACIs (#1112698)- ipasam does not support deleting multiple child trusted domains due to LDAP delete operation (#1110664) - Excessive LDAP calls by ipa-sam during file operations to samba file share on freeipa master cause high CPU and slow performance (#1074314)- Explicitly specify auth mechanism when calling ldapmodify in the installers (#1108661) - Add support for DNS classless reverse domains (#1095250) - Multiple nsDS5ReplicaId attributes created in cn=replication,cn=etc (#1109050) - ipa-client-install should configure sudo automatically (#1111121)- Rebuild package to fix a brew tag- ipa-server-install intermittently crashed with "Unable to find preop.pin" (#905064) - Disabled sudo rules were still active in the sudoers tree (#1022199) - Replica installation fails if forward zone is not present (#1034478) - Administrative password change did not respect user password policy (#1029921) - Re-initializing a winsync connection exits with "Can't contact LDAP server" (#1016042) - Server checked for unknown attributes before "ipa" tool version check (#1015481) - CA subsystem certificate renewal was broken on CA clones (#1040009) - Lockout plugin worked inconsistently compared to KDC lockout mechanism. Also, default user policy may not have been applied if krbPwdPolicyReference was missing (#1088772) - ipa-client-automount was not backwards compatible (#1082590) - Increase service timeout from 120s to 300s as some services are known to start for more than 120s (#1060639) - Proxy calls to /ca/ee/ca/profileSubmit to PKI to enable installation of replicas with Dogtag 10 PKI (#1083878)- group-add-member command reported wrong error on duplicates (#970541) - ipa-client installation succeeding in ipa server instance (#1011044)- ipa-join failed when doing a forced host re-enrollment (#924009)- ipa-replica-manage del always exits with error (#1005448)- Host and Hostgroup commands were broken after upgrade (#1001810)- Fix coverity issue in AD 2012 stabilization patch fixing memleaks (#980409)- Fix coverity issue in AD 2012 support patch and add 2 related stabilization patches (#980409)- Require 389-ds-base >= 1.2.11.15-14 to pick up fix for CVE-2013-1897 (#928162) - Password policy lockout plugin does not work as expected (#907881 - Remove deprecated support of the HBAC source host (#924542) - ipa-client-install may not obtain CA certificate (#924004) - Allow client to re-enroll without first unenrolling (#924009) - Enrolling a host into may take two attempts (#950014) - Add userClass attribute for host objects (#955698) - Inconsistent replies from FreeIPA to Netlogon ping queries (#967870) - Performance improvement for IPA CLI and UI user and group related plugins (#970541) - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost (#975431) - Add support for AD 2012 trusted domains (#980409) - XML-RPC server may return a wrong Content-Type (#976716) - Add missing openssh-clients Requires to ipa-server package (#983463) - Add an option to edit "Gecos" field from Web UI (#986211)- LDAP upload CA cert sometimes double-encodes the value (#948928) - wrong trust argument assigned to renewed certs in ipa cert automatic renew (#952241)- ipa-client-install fails to autodiscover on LDAP servers with disabled anonymous access (#922843)- ipa-adtrust-install and ipa-replica-conncheck may not parse krb5.conf correctly and crash (#916209)- Missing LDAP schema attributeType and objectClass after upgrade (#915745)- Significant decrease in migration performance. (#904119) - ipa-client-install failed to fall over to replica with master down (#905626) - During Migration - If Schema is unavailable migration fails (#906846)- Filter generated winbind dependencies so the right version of samba can be installed. (#905594)- Add certmonger condrestart to server post scriptlet (#903758) - Make certmonger a (pre) Requires (#903758) - Add selinux-policy to Requires(pre) to avoid post scriptlet AVCs (#903758) - Set minimum version of pki-ca to 9.0.3-30 and add to Requires(pre) to pick up certmonger upgrade fix (#902474) - Update anonymous access ACI to protect secret attributes (#902481)- Installer should not connect to 127.0.0.1. (#895561) - Don't initialize NSS if we don't have to. (#878220)- Set minimum version of bind-dyndb-ldap to 2.3-2 to pick up missing DNS zone SOA serial fix (#894131) - Stopped named service crashed ipa-upgradeconfig program (#895298) - ipa-replica-prepare crashed when manipulating DNS zone without SOA serial (#894143) - Use new certmonger locking to prevent NSS database corruption during CA subsystem renewal (#883484) - Set minimum selinux-policy to 3.7.19-193 to allow certmonger to talk to dbus in an rpm scriptlet. (related #883484) - Set minimum vresion of certmonger to 0.61-3 for new locking scheme (related #883484)- Properly handle migrated uniqueMember attributes (#894090) - ipa permission-find using valid targetgroup throws internal error (#893827) - Fix migration of CRLs to new directory location (#893722) - Installing IPA with a single realm component sometimes fails (#893187)- Set maxbersize to a large value to accomondate large CRLs during replica installation. (#888956) - Set minimum version of pki-ca, pki-slient and pki-setup to 9.0.3-29 to pick up default CA validity period of 20 years. (#891980)- Client installation crashes when Kerberos SRV record is not found (#889583) - Fix typo in patch 0048 for CVE-2012-5484 (#878220)- Cookie Expires date should be locale insensitive to avoid CLI errors (#888915)- ipa delegation-find --group option returns internal error (#888524) - Add missing Requires for python-crypto replacement (#878969)- sssd is not enabled on client/server install (#888124)- ipa-server-install --uninstall doesn't clear certmonger dirs, which leads to install failing (#817080)- Compliant client side session cookie behavior. CVE-2012-5631. (#886371)- Use secure method to retrieve IPA CA during client enrollment. CVE-2012-5484 (#878220) - Reformat patch 0044 so it works with git-am- Include /var/lib/sss/pubconf/krb5.include.d/ for domain-realm mappings in krb5.conf (#883166) - Set minimum selinux-policy >= 3.7.19-184 to allow domains that can read sssd_public_t files to also list the directory (#881413) - Remove dist label from changelog entries. - Fix timestamp on patched files to avoid multilib warnings- Set Requires on httpd 2.2.15-24, mod_nss to 1.0.8-18 and patch to check for existing mod_ssl configuration. These versions allow mod_proxy to simultaneously support SSL servers using mod_ssl and mod_proxy (#761574) - IPA WebUI login for AD Trusted User fails (#875261) - Add 'disable_last_success' and 'disable_lockout' to the ipa_lockout plugin (#824488)- Make default group type POSIX in ui (#880655) - Write replacement for python-crypto (#878969) - ipa trust-add prints misleading information about required DNS setting (#878485) - Lookup user SIDs in external groups (#878480) - Special case NFS related ticket to avoid attaching MS-PACs (#878462) - IPA users are not available after ipa-server-install because sssd not running (#878288) - Incorrect error message when time difference between AD and IPA is too great (#877434) - Missing option to add SSH Public Key in Web UI after upgrade (#877324)- Update minimum BR and Requires of sssd to 1.9.2-25 (related #870278, related #871160, related #878262) - Replication agreement tools report errors with new single instance CA database (#878491) - If time is moved back on the IPA server, ipasam does not invalidate the existing ticket (#866576)- Server installation fails to find A/AAAA record for IPA hostname (#874935) - Out of range error when listing RUV on host with no agreements (#873726) - Tighten dependency on krb5-server to limit to 1.10 (#872707) - Default SELinuxusermaporder needs to mapped with default selinux users list (#870053) - Clarify trust-add help regarding multiple runs against the same domain (#869741) - Improve reliabilityof RA renewal script (#869663) - Add option to disable DNS forwarding by zone (#869658) - Update minimum version of bind-dyndb-ldap to 2.3-1 (#869658) - Improve information on passsync user in man page, command help (#869656) - Resolve external members from trusted domain via Global Catalog (#869616) - Process relative nameserver DNS record correctly (#868956) - ipa-adtrust-install does not reset all information when re-run (#867447) - Fix potential memory leak in KDB backend (#811989)- Fix type conversion of integers when doing modifications (#870446) - Set SECURE_NFS to lowercase yes rather than uppercase (#869654) - Add autofs service to sssd.conf before enabling it (#869649) - Add strict Requires for policycoreutils to avoid user removing them during package lifetime (#869281) - Make internal rename_s() call compatible with python-ldap-2.3.10 (#867902) - Update minimum version of bind-dyndb-ldap to 2.2-1.el6 (related #871583) - Restart httpd after running ipa-adtrust-install (#866966)- Add patch to override xmlrpc request method for session (#786199) - Bad link to Web UI config page after session is expired (#869279) - extdom plugin does not handle Posix UID and GID request (#867676) - ipa-server-install --setup-dns always installs reverse zone (#866978) - Inform user when ipa-upgradeconfig reports errors (#866977) - Certificate request fails when CSR has subjectAltnames (#866955) - ipa-adtrust-install checks for /usr/bin/smbpasswd, which is not required (#866572) - Instructions to uninstall are unclear (#856294) - Inconsistent service naming in ipa-server-install (#856292) - Improve instructions to generate certificate in Web UI (#856282) - /etc/ipa/default.conf is out of date (#855855) - Time synchronization is disabled in ipa-client-install (#854325) - ipa-replica-install httpd restart sometimes fails (#845405) - Improve error messages during ipa-replica-manage del (#835632) - Always log errors from dogtag (#813401)- Update to upstream 3.0.0 GA release (#827602) - Add zip dependency, needed for creating unsigned Firefox extensions - Filter generated winbind dependencies so the right version of samba can be installed. - Remove patch to support python-ldap 2.3.10. Fixed upstream. - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca (#864533) - Add zip dependency, needed for creating unsigned Firefox extensions- Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so plugin to /dev/null since they cannot be used when trusts are configured (related #864889) - Update BR and Requires of samba4 to 4.0.0-31 to pick up winbind_krb5_locator alternatives change. (related #864889)- Update to upstream 3.0.0.rc2 release (#827602) - Provide new Firefox extension. - Own /etc/ipa/ca.crt- Remove Requires on krb5-pkinit-openssl as part of disabling pkinit code. - Add missing subdirectories in site-packages/ipaserver discovered by rpmdiff. (#827602)- Update to upstream 3.0.0.rc1 release (#827602) - Update BR and Requires of 389-ds-base to 1.2.11.14 - Update BR and Requires of krb5 to 1.10 - Update BR and Requires of samba4 to 4.0.0-24 - Update BR and Requires of sssd to 1.9.0 - Update Requires on policycoreutils to 2.0.83-19.24 - Update Requires on httpd to httpd-2.2.15-17 to pick up #787247 - Update minimum version of bind-dyndb-ldap to 1.1.0-0.9.b1.el6_3.1 - Update minimum version of bind to 9.8.2-0.10.rc1.el6_3.2 - Sync upstream spec file Requires - Add patch to support python-ldap 2.3.10- SSH Tech Preview feature enabled by default (#825321)- Test for locked users before incrementing failed login counter (#822429)- Fix host page to display all data when DNS is not configured (#818868)- Make ipa 2.2 client capable of joining an older server (#817867)- Remove patch 0042 and add revert patch for handling which attributes are allowed in a permission. (#783502) - ipa-client-install sets "KerberosAuthenticate yes" in sshd.conf, breaking SSSD auth (#817030) - pwpolicy_find does not sort by priority in UI (#815799) - Improve zonemgr validation (#745705)- Make new DNS permission mixed-case (#807361) - hbactest returns failure when hostgroups are chained (#801769) - Man Page : Document client IP addressing / FQDN requirements (#768257) - Login failed attempts counter or locked out status are not displayed (#759501) - Wrong title and icon in login and logout pages (#814752)- Don't interactively prompt for dnsrecord options provided on the command-line options (#790295) - Validate external hosts added to netgroups (#797256) - Handle invalid RDN for container in migration (#804807) - Unable to use permission-mod to rename permission object (#805478) - Migration: don't append basedn to container if it is included (#807371) - Raise correct exception when LDAP limits are exceeded (#808042) - Notify user that password needs to be reset in forms-based login (#811296) - DNS Resource records: add & delete A & AAAA record does not work in root (#811744) - user-mod --rename with an empty string fails (#811748) - DNS CNAME record: delete sometimes does not work (#811758) - Delegation UI does not allow to specify permission (#812110) - IPA uninstall after upgrade returns some sysrestore.state errors (#812391) - Improve migration plugin error when 2 groups have identical GID (#813389)- Fix password policy history enforcement (#810900) - Privilege page should not have choice to list permissions by "indirect membership" (#810350) - ipa-server-install fails when domain name is not resolvable (#809190) - Identity->DNS->Settings:Forward policy: change check box to radio buttons (#808620) - When adding permissions for a type, attributes that are not allowed are listed (#807755) - user-mod --rename is successful for more than max login characters (#807417) - Can't specify netgroup host, user category to all in Web UI (#807366) - Permission names cannot contains '<' or '>' (#807304) - ipa-server-install --uninstall errors out when trying to start dirsrv. (#801376) - Should not be allowed to run host-disable on an IPA Server or service-disable on an IPA Server service (#800119) - permission with filter or subtree does not allow attr to be specified (#783536) - Netgroups compat plugin not reporting users correctly (#767372) - certmonger renews server certificates ok but those services need a restart (related #766167) - Set minimum vresion of certmonger to 0.56 (related #766167) - Set minimum version of slapi-nis to 0.40 (#767372) - Unable to disable or enable hbacrule with --setattr (#810948) - When adding a user with --noprivate option gidNumber should be required (#805546) - Fix error when no value is given in --revocation-reason optional argument with "ipa cert-revoke" (#808099) - Set minimum version of bind-dyndb-ldap to 1.1.0-0.5.b1 (related #805814)- Fix ambiguous error msg in automount indirect map creation (#790131) - Invalid error message attempting to delete config attributes (#791373) - Enforce single-value attributes (#794746) - config-mod allowed to add additional certificate subjects bases (#794750) - Embedded carriage returns in a CSV not handled (#797569) - WebUI displays "Insufficient access: invalid credentials" when a password doesn't meet policy requirements (#802786) - Tech Preview: SELinux User Mapping (#803821) - Tech Preview: Add support for central management of the SSH keys (#803822) - Password Policy Failure Interval Reset is not working. (#804096) - Set SELinux booleans properly (#806330) - DNS records in LDAP are publicly accessible (#807361) - Upgrading replication agreements without nsDS5ReplicatedAttributeList fails (#808201) - IPA Upgrade Web UI failure with internal server error (#809262) - Do not create private groups for migrated users (#809560)- Remove version requirement from BuildRequires on sssd. (related #736865)- Set minimum version of 389-ds-base to 1.2.10.2-4 (related #803930) - Only split CSV on client (#797565) - Search allowed attributes in superior objectclasses (#783502) - Fix precallback validators in DNS plugin (#804562) - Fix memleak in KDB backend (#800363) - Harden raw record processing in DNS plugin (#804572) - Fix attributes that contain DNs when migrating (#804609) - Wait for child process to terminate after receiving SIGINT (#754635) - Avoid deleting DNS zone when a context is reused (#801380) - Fix default SOA serial format (#805427) - Set nsslapd-minssf-exclude-rootdse to on so the DSE is always available. (#803836) - Amend permissions for new DNS attributes (related #766073) - Improve user awareness about dnsconfig (#802864) - Fix uses of O=REALM instead of the configured certificate subject base. (#802912) - Fix dnsrecord-del interactive mode (#807230) - Add requires on python-krbV to client subpackage (#807362) - Tolerate UDP port failures in conncheck (#802860) - Netgroup nisdomain and hosts validation (#797256) - Remove Conflicts on mod_ssl (#804605) - Set minimum version of pki-ca, pki-slient and pki-setup to 9.0.3-24. Change location of TOMCAT_LOG to match tomcat6 changes (related #802396) - Add python-lxml, python-pyasn1 and sssd to BuildRequires - Set minimum selinux-policy >= 3.7.19-142 to pick up certmonger_t type (related #790967) - netgroup-add and netgroup-mod --nisdomain should not allow commas (#797237)- Set minimum version of pki-ca, pki-silent and pki-setup to 9.0.3-23. Either we shell escape or dogtag does, we can't both do it. (#802832) - Set dbdir in request context after a connection is created (#804128) - Don't overwrite content by an error message (#803050) - Don't allow IPA master hosts/services to be disabled (#800119) - Don't error out on empty option (#798792) - Populate gidnumber in entries added via winsync (#798352) - Set subjectKeyIdentifier in SSL certs that IPA issues (#797274) - Fix escaping and comma-separated value handling (#769491) - Display certificate serial numbers in both hex and deciaml (#746060) - Use attribute name/option name when returning errors (#718015) - DNS forwarder's value can consist of IP address and part (#766073) - Store DNS global options in LDAP (#766073) - Move extension.js to subdirectory to suppress rpm warning- Allow removing sudo commands with special characters (#800537) - Ignore case in yes/no prompts when deleting DNS records (#800483) - Refresh resolvers after DNS server configuration (#799335) - Fix nsslapd-anonlimitsdn in cn=config (#798361) - Handle more exceptions gracefully in ipa-client-install (#797567) - Fixed checkbox value in table without pkey (#791324) - Fix exception when removing all values from configuration (#782974) - Set httpd_manage_ipa SELinux boolean - Fix mask validator in network validator (#802848) - Don't shell escape arguments sent to pkisilent (#802832) - Reorder patches so those that disable unsupported features are applied last - Rebase disable persistent search patch- Rebase to upstream 2.1.90.rc1 release (#736865) - Remove dependency on krb5-server-ldap, we use our own backend now (#797564) - Set minimum mod_auth_kerb to 5.4-8 for S4U2Proxy support (related #767741) - Set minimum selinux-policy >= 3.7.19-137 to pick up ipa_memcache boolean - Set minimum python-memcached >= 1.43-6 to pick up status check fix - Set minimum version of 389-ds-base to 1.2.10.1-1 - Set minimum version of krb5-server to 1.9-27 - Set minimum version of sssd to 1.8.0-11 (#766068) - Add Requires: oddjob-mkhomedir to ipa-client (#786223) - Remove Requires on krb5-server-ldap (#797564) - Add Conflicts on mod_ssl (#761574) - Remove BuildRequires on python-rhsm - Renumber all patches - Don't remove dirsrv user on uninstall (#797566) - Don't allow host-del on active replicas (#797563) - Fix invalid hostnames when hostname contains trailing dot (#797562) - encode Bool attributes used in setattr/addattr/delattr (#797561) - Migration plugin raises Internal Server Error (#796401) - man page for ipa-replica-manage has typos in examples (#796347) - Can not add new user objectclass to ipa configuration (#794474) - Don't require SELinux to be enabled on client (#790513) - dnsrecord-add does not validate the record names with space in between (#790318) - Prompt for missing DNS options (#790295) - Resource Record type options should be more descriptive (#790017) - Correction in error message while deleting a invalid record (#789987) - Adding some of the RR type from the "allowed values" results in an error message (#789980) - IP address with just 3 octets are accepted as valid addresses (#789919) - Errors not reported correctly when logging into WebUI (#789459) - Need option for ipa-client-install to not call authconfig (#789413) - IPA nested netgroups not seen from ypcat (#788625) - gid number: 0 and negative number accepted (#786240) - Allow basedn to be passed into migrate-ds (#786185) - permission with filter or subtree does not allow attr to be specified (#783536) - ipa permission-add does not fail if using invalid attribute (#783502) - When migrating warn user if compat is enabled (#783270) - Make ipausers a non-posix group on new installs (#773488) - Need tool to update exclusive list in replication agreements (#772359) - Reverse DNS rec not created upon creation of fwd DNS rec (#772301) - Adding a netgroup with a "+" causes ns-slapd to crash (#772043) - Man Page : Document client IP addressing / FQDN requirements (#768257) - GSS-TSIG DNS updates should update reverse entries as well (#767725) - UI for SELinux user mapping (tech preview) - Allow forms based kerberos authentication (#766070) - Add support for central management of the SSH keys (tech preview) - Login failed attempts counter or locked out status are not displayed (#759501) - Better message for error diagnosis while adding an existing winsync agreement (#755450) - "force-sync, re-initialize and del" options for ipa-replica-manage fail against AD (#754973) - Connect after del using ipa-replica-manage fails (#754539) - Unable to delete migrated groups containing spaces (#753966) - support bind forward zones, aka DNS conditional forwarding (#753483) - IPA needs a check to ensure hostnames 'underscore' is not allowed when installing a replica (#752874) - Unable to select dns zone when only one exists in UI (#751529) - ipa-replica-conncheck does does not properly check UDP ports (#751063) - Adding loc records to a ipa-dns server breaks name resolution for some other records (#750947) - Allow specifying query and transfer policy settings for a zone (#701677)- Add missing changelog information caught by rpmdiff.- Update to upstream 2.1.90.pre2 release (#736865)- Add current password prompt when changing own password in web UI (#751179) - Remove extraneous trailing ' from netgroup patch (#749352)- Updated patch for CVE-2011-3636 to include CR in the HTTP headers. xmlrpc-c in RHEL-6 doesn't suppose the dont_advertise option so that is not set any more. Another fake header, X-Original-User_Agent, is added so there is no more trailing junk after the Referer header. (#749870)- Require an HTTP Referer header to address CSRF attackes. CVE-2011-3636. (#749870)- Users not showing up in nis netgroup triple (#749352)- Add update file to remove entitlement roles, privileges and permissions (#739060)- Quote worker option in krb5kdc (#748754)- hbactest fails while you have svcgroup in hbacrule (#746227) - Add Kerberos domain mapping for system hostname (#747443) - Format certificates as PEM in browser (#701325)- ipa-client-install hangs if the discovered server is unresponsive (#745392) - Fix minor problems in help system (#747028) - Remove help fix from Disable automember patch (#746717) - Update minimum version of sssd to 1.5.1-60 to pick up SELinux fix (#746265)- Update to upstream 2.1.3 release (#736170) - Additional branding (#742264) - Disable automember cli (#746717) - ipa-client-install sometimes fails to start sssd properly (#736954) - ipa-client-install adds duplicate information to krb5.conf (#714597) - ipa-client-install should configure hostname (#714919) - inconsistency in enabling "delete" buttons (#730751) - hbactest does not resolve canonical names during simulation (#740850) - Default DNS Administration Role - Permissions missing (#742327) - named fails to start after installing ipa server when short (#742875) - Duplicate hostgroup and netgroup should not be allowed (#743253) - named fails to start (#743680) - Global password policy should not be able to be deleted (#744074) - Client install fails when anonymous bind is disabled (#744101) - Internal Server Error adding invalid reverse DNS zone (#744234) - ipa hbactest does not evaluate indirect members from groups. (#744410) - Leaks KDC password and master password via command line arguments (#744422) - Traceback when upgrading from ipa-server-2.1.1-1 (#744798) - IPA User's Primary GID is not being set to their UPG's GID (#745552) - --forwarder option of ipa-dns-install allows invalid IP addr (#745698) - UI does not grant access based on roles (#745957) - Unable to add external user for RunAs User for Sudo (#746056) - Typo in error message while adding invalid ptr record. (#746199) - Don't use python 2.7-only syntax (#746229) - Error when using ipa-client-install with --no-sssd option (#746276) - Installation fails if sssd.conf exists and is already config (#746298) - External hosts are not removed properly from sudorule (#709665) - Competely remove entitlement support (#739060) - Add winsync section to ipa-replica-manage man page (#744306)- Remove python-rhsm as a Requires (#739060)- Update to upstream 2.1.2 release (#736170) - More completely disable entitlement support (#739060) - Drop patch to ignore return value from restorecon (upstreamed) - Set min version of 389-ds-base to 1.2.9.12-2 - Set min version of dogtag to 9.0.3-20 - Rebased hide-pkinit, ipa-RHEL-index and remove-persistent-search patches (#700586)- Update RHEL patch (#740094)- Ignore return value from restorecon (#739604) - Disable entitlement support (#739060, #739061)- Update minimum xmlrpc-c version (#736787) - Fix package installation order causing SELinux problems (#737516)- Update to upstream 2.1.1 release (#732803)- Resolves: rhbz#708388 - Update to upstream 2.1.0 release- Remove client debug logging patch (#705800)- Wait for 389-ds tasks to complete (#698421) - Set replica to restart ipa on boot (#705794) - Improve client debug logging (#705800) - Managed Entries not configured on replicas (#703869) - Don't create bogus aRecord when creating new zone (#704012)- Update ipa-Fix-traceback-in-nis-manage.patch to fix python error (#697583)- Resolves: rhbz#697583 - Can not enable ipa-nis-manage plugin- Default groups are missing ipaUniqueID attribute (#696508)- Set min version of 389-ds-base to 1.2.8.0-1 for fix in BZ 693466. - Fix some problems in IPA schema (#692978) - postalCode should be a string not an integer (#692945)- Port 7390 is managed by selinux-policy-3.7.19-80. Update ipa-repl_selinux.patch to not manage it any more. (#691883) - Patch to fix setting gidnumber when a user is created. (#692168)- Fix uninitialized variable in password plugin (#690595)- Wait for Directory Service ports to open (#688934) - Mixed case hostname can cause issues and confusion (#688622) - Wrong timeout parameter in ipapython (#684273) - Run ipa-ldap-updater on upgrades (#688931) - Internal Error and trace back when adding DNS AAAA record (#689452)- Use realm provided by installer in LDAP Updater (#684744) - Use args for domain and server when doing DNS discovery in client (#684780) - Fix 2 SELinux issues in dogtag replication (#684269)- Add Obsoletes so upgrade from ipa-client package is possible (#684931)- Update to upstream 2.0.0rc3 (#680993) - Set minimum version of sssd to 1.5.1-12 - Remove SuitespotGroup patch - Rebase remove-pkinit patch- Set the SuitespotGroup directive in the 389-ds installation template. This ensures group read/write to /var/run/dirsrv. (#680201) - Make single line out of python sitelib/sitearch code.- Update to upstream 2.0.0rc2 (#675282) - Set minimum version of sssd to 1.5.1-10 - Set minimum version of python-nss to 0.11 - Set minimum version of 389-ds to 1.2.8 - Add bind-utils as Requires in client subpackage - Remove unused BuildRequires e2fsprogs-devel and libcap-devel - Add branding patch - Add default.conf man page - Upstream moved some utilites from the admintools subpackage, reflect that here as well.- Add pyOpenSSL to BuildRequires. (#670954)- ExcludeArch doesn't do per-package exclusions, use ifarch to force ONLY_CLIENT on non-supported architectures. (#670954) - Manually install ipa-admintools since the upstream client-install target doesn't. - Move a lot of the BuildRequires out of the ! ONLY_CLIENT conditional because the API validator in the upstream code requires them.- Exclude building server and server-selinux on ppc, ppc64, s390 and s390x platforms. (#670954) - Add date variable to the release to make daily builds easier.- Merge in changes from FreeIPA beta 2 (#670954) - Add patches to disable pkinit- Set minimum version of dogtag to 9.0.0 and add Requires for the theme we need. (#658275) - Remove unnecessary moving of v1 CA serial number file in post script - Move some man pages into admintools subpackage- Drop specific Requires on libcurl and krb5-libs (#658275)- Consistent usage of buildroot vs RPM_BUILD_ROOT (#658275)- Drop Requires on nss-ldap (#658275)- Temporarily disable building on s390- Drop optional radius package, the underlying code isn't there - Re-arrange the doc lines so that defattr is first (#658275)- Initial 2.0.0 build (#658275) - This is IPA v2.0.0 beta 1 plus all patches through git commit 4da9228fb2ac34adab8eb1884ae414236adb84fa - Removed some Fedora conditionals- Drop BuildRequires on mozldap-devel- Add Requires on krb5-pkinit-openssl- Add ipa-host-net-manage script- Add ipa init script- Set minimum level of 389-ds-base to 1.2.7 for enhanced memberof plugin- remove ipa-fix-CVE-2008-3274- Remove duplicate %files entries on share/ipa/static - Add python default encoding shared library- Drop requires on python-configobj (not used any more) - Drop ipa-ldap-updater message, upgrades are done differently now- Drop conflicts on mod_nss - Require nss-pam-ldapd on F-14 or higher instead of nss_ldap (#606847) - Drop a slew of conditionals on older Fedora releases (< 12) - Add a few conditionals against RHEL 6 - Add Requires of nss-tools on ipa-client- Set minimum version of certmonger to 0.26 (to pck up #621670) - Set minimum version of pki-silent to 1.3.4 (adds -key_algorithm) - Set minimum version of pki-ca to 1.3.6 - Set minimum version of sssd to 1.2.1- Add BuildRequires for authconfig- Bump up minimum version of python-nss to pick up nss_is_initialize() API- Removed python-asset based webui- Change Requires from fedora-ds-base to 389-ds-base - Set minimum level of 389-ds-base to 1.2.6 for the replication version plugin.- Drop Requires of python-krbV on ipa-client- Load ipa_dogtag.pp in post install- Set minimum level of sssd to 1.1.1 to pull in required hbac fixes.- No need to create /var/log/ipa_error.log since we aren't using TurboGears any more.- Fixed share/ipa/wsgi.py so .pyc, .pyo files are included- Added Require mod_wsgi, added share/ipa/wsgi.py- Require python-wehjit >= 0.2.2- Add sssd and certmonger as a Requires on ipa-client- Require python-wehjit >= 0.2.0- Add ipa-rmkeytab tool- Set minimum of python-pyasn1 to 0.0.9a so we have support for the ASN.1 Any type- Remove v1-style /etc/ipa/ipa.conf, replacing with /etc/ipa/default.conf- Add bash completion script and own /etc/bash_completion.d in case it doesn't already exist- Remove ipa_webgui, its functions rolled into ipa_httpd- Removed python-cherrypy from BuildRequires and Requires - Added Requires python-assets, python-wehjit- Added httpd SELinux policy so CRLs can be read- Move ipalib to ipa-python subpackage - Bump minimum version of slapi-nis to 0.15- Set 0.14 as minimum version for slapi-nis- Add Requires: python-nss to ipa-python sub-package- Remove the IPA DNA plugin, use the DS one- Build radius separately - Fix a few minor issues- Replace TurboGears requirement with python-cherrypy- rebuild with new openssl- Fix SELinux code- Fix breakage caused by python-kerberos update to 1.1- New upstream release 1.2.1- Rebuild for Python 2.6- Respin after the tarball has been re-released upstream New hash is 506c9c92dcaf9f227cba5030e999f177- Conditionally restart also dirsrv and httpd when upgrading- Update to upstream version 1.2.0 - Set fedora-ds-base minimum version to 1.1.3 for winsync header - Set the minimum version for SELinux policy - Remove references to Fedora 7- Fix for CVE-2008-3274 - Fix segfault in ipa-kpasswd in case getifaddrs returns a NULL interface - Add fix for bug #453185 - Rebuild against openldap libraries, mozldap ones do not work properly - TurboGears is currently broken in rawhide. Added patch to not build the UI locales and removed them from the ipa-server files section.- Add call to /usr/sbin/upgradeconfig to post install- Update to upstream version 1.1.0 - Patch for indexing memberof attribute - Patch for indexing uidnumber and gidnumber - Patch to change DNA default values for replicas - Patch to fix uninitialized variable in ipa-getkeytab- Set fedora-ds-base minimum version to 1.1.0.1-4 and mod_nss minimum version to 1.0.7-4 so we pick up the NSS fixes. - Add selinux-policy-base(post) to Requires (446496)- Add missing entry for /var/cache/ipa/kpasswd (444624) - Added patch to fix permissions problems with the Apache NSS database. - Added patch to fix problem with DNS querying where the query could be returned as the answer. - Fix spec error where patch1 was in the wrong section- Added patch to fix problem reported by ldapmodify- Fix Requires for krb5-server that was missing for Fedora versions > 9 - Remove quotes around test for fedora version to package egg-info- Update to upstream version 1.0.0- Pull upstream changelog 722 - Add Conflicts mod_ssl (435360)- Pull upstream changelog 698 - Fix ownership of /var/log/ipa_error.log during install (435119) - Add pwpolicy command and man page- Pull upstream changelog 678 - Add new subpackage, ipa-server-selinux - Add Requires: authconfig to ipa-python (bz #433747) - Package i18n files- Pull upstream changelog 641 - Require minimum version of krb5-server on F-7 and F-8 - Package some new files- Marked with wrong license. IPA is GPLv2.- Ensure that /etc/ipa exists before moving user-modifiable html files there - Put html files into /etc/ipa/html instead of /etc/ipa- Pull upstream changelog 608 which renamed several files- package the sessions dir /var/cache/ipa/sessions - Pull upstream changelog 597- Updated upstream pull (596) to fix bug in ipa_webgui that was causing the UI to not start.- Included LICENSE and README in all packages for documentation - Move user-modifiable content to /etc/ipa and linked back to /usr/share/ipa/html - Changed some references to /usr to the {_usr} macro and /etc to {_sysconfdir} - Added popt-devel to BuildRequires for Fedora 8 and higher and popt for Fedora 7 - Package the egg-info for Fedora 9 and higher for ipa-python- Added auto* BuildRequires- Unified spec file- Fixed License in specfile - Include files from /usr/lib/python*/site-packages/ipaserver- Version bump for release- Preverse mode on ipa-keytab-util - Version bump for relase and rpm name change- Broke invididual Requires and BuildRequires onto separate lines and reordered them - Added python-tgexpandingformwidget as a dependency - Require at least fedora-ds-base 1.1- Version bump for release- Add dep for freeipa-admintools and acl- Add dependency for python-krbV- Require mod_nss-1.0.7-2 for mod_proxy fixes- Convert to autotools-based build* Fri Sep 7 2007 Karl MacMillan - 0.3.0-1 - Added support for libipa-dna-plugin- Added support for ipa_kpasswd and ipa_pwd_extop- Abstracted client class to work directly or over RPC- Add mod_auth_kerb and cyrus-sasl-gssapi to Requires - Remove references to admin server in ipa-server-setupssl - Generate a client certificate for the XML-RPC server to connect to LDAP with - Create a keytab for Apache - Create an ldif with a test user - Provide a certmap.conf for doing SSL client authentication- Initial rpm version/bin/sh/bin/sh/bin/sh/bin/sh  !!#$$&'')**,--/0123356689::<==?@@BCCEFFHIJKLLNOOQRRTUUWXYZ[\]^^`aacdefghhjklmnopqrsttvwwyzz|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~3.0.0-51.el6.centos3.0.0-51.el6.centos    !!"#$%&%%'ipa-pki-proxy.confipa-rewrite.confipa.confipahtmlbrowserconfig.htmlffconfig.jsffconfig_page.jsipa_error.cssssbrowser.htmlunauthorized.htmlipaipa_memcachedipa_memcachedipaserver__init__.py__init__.pyc__init__.pyoinstall__init__.py__init__.pyc__init__.pyobindinstance.pybindinstance.pycbindinstance.pyocainstance.pycainstance.pyccainstance.pyocerts.pycerts.pyccerts.pyodsinstance.pydsinstance.pycdsinstance.pyohttpinstance.pyhttpinstance.pychttpinstance.pyoinstallutils.pyinstallutils.pycinstallutils.pyoipa_ldap_updater.pyipa_ldap_updater.pycipa_ldap_updater.pyokrbinstance.pykrbinstance.pyckrbinstance.pyoldapupdate.pyldapupdate.pycldapupdate.pyomemcacheinstance.pymemcacheinstance.pycmemcacheinstance.pyontpinstance.pyntpinstance.pycntpinstance.pyoplugins__init__.py__init__.pyc__init__.pyoadtrust.pyadtrust.pycadtrust.pyobaseupdate.pybaseupdate.pycbaseupdate.pyodns.pydns.pycdns.pyofix_replica_agreements.pyfix_replica_agreements.pycfix_replica_agreements.pyorename_managed.pyrename_managed.pycrename_managed.pyoupdate_anonymous_aci.pyupdate_anonymous_aci.pycupdate_anonymous_aci.pyoupdate_services.pyupdate_services.pycupdate_services.pyoupdateclient.pyupdateclient.pycupdateclient.pyoupload_cacrt.pyupload_cacrt.pycupload_cacrt.pyoreplication.pyreplication.pycreplication.pyoservice.pyservice.pycservice.pyosysupgrade.pysysupgrade.pycsysupgrade.pyoupgradeinstance.pyupgradeinstance.pycupgradeinstance.pyoipaldap.pyipaldap.pycipaldap.pyoplugins__init__.py__init__.pyc__init__.pyodogtag.pydogtag.pycdogtag.pyojoin.pyjoin.pycjoin.pyoldap2.pyldap2.pycldap2.pyorabase.pyrabase.pycrabase.pyoselfsign.pyselfsign.pycselfsign.pyoxmlserver.pyxmlserver.pycxmlserver.pyorpcserver.pyrpcserver.pycrpcserver.pyolibipa_cldap.solibipa_enrollment_extop.solibipa_lockout.solibipa_modrdn.solibipa_pwd_extop.solibipa_range_check.solibipa_repl_version.solibipa_uuid.solibipa_winsync.socertmongerrenew_ca_certrenew_ra_certrestart_dirsrvrestart_httpdrestart_pkicadstop_pkicadipadb.sodogtag-ipa-retrieve-agent-submitipa-ca-installipa-compat-manageipa-csreplica-manageipa-dns-installipa-ldap-updateripa-managed-entriesipa-nis-manageipa-replica-conncheckipa-replica-installipa-replica-manageipa-replica-prepareipa-server-certinstallipa-server-installipa-upgradeconfigipactlipa-server-3.0.0COPYINGContributors.txtREADMEipa05rfc2247.ldif60basev2.ldif60basev3.ldif60ipaconfig.ldif60ipadns.ldif60kerberos.ldif60samba.ldif61kerberos-ipav3.ldif65ipasudo.ldifanonymous-vlv.ldifautomember.ldifbind.named.conf.templatebind.zone.db.templatebootstrap-template.ldifcaJarSigningCert.cfg.templateca_renewalcertmap.conf.templatedefault-aci.ldifdefault-hbac.ldifdefault-smb-group.ldifdelegation.ldifdisable-betxn.ldifdna.ldifdns.ldifds-nfiles.ldifenrollment-conf.ldifentryusn.ldifffextensionbootstrap.jschromechrome.manifestcontentkerberosauth.jskerberosauth_overlay.xulinstall.rdflocaleen-USkerberosauth.propertieshost_nis_groups.ldifhtmlbrowserconfig.htmlca.crtconfigure.jarffconfig.jsffconfig_page.jsipa_error.csskerberosauth.xpikrb.conkrb.jskrb5.inikrbrealm.conpreferences.htmlssbrowser.htmlunauthorized.htmlindices.ldifipa-cldap-conf.ldifipa-extdom-extop-conf.ldifipa-pki-proxy.confipa-rewrite.confipa-sidgen-conf.ldifipa-sidgen-task-conf.ldifipa-sidgen-task-run.ldifipa-winsync-conf.ldifipa.confkdc.conf.templatekdc_extensions.templatekdc_req.conf.templatekerberos.ldifkrb.con.templatekrb.js.templatekrb5.conf.templatekrb5.ini.templatekrbrealm.con.templateldapi.ldiflockout-conf.ldifmanaged-entries.ldifmaster-entry.ldifmemberof-conf.ldifmemberof-task.ldifmigrationerror.htmlindex.htmlinvalid.htmlmigration.pymigration.pycmigration.pyomodrdn-conf.ldifmodrdn-krbprinc.ldifnis.uldifpreferences.html.templatepwd-extop-conf.ldifrange-check-conf.ldifreferint-conf.ldifreplica-acis.ldifreplica-automember.ldifreplica-s4u2proxy.ldifrepoint-managed-entries.ldifroot-autobind.ldifschema_compat.uldifsmb.conf.templatesudobind.ldifuiaci.jsadd.jsassociation.jsautomember.jsautomount.jsbrowser.jscertificate.jsdetails.jsdialog.jsdns.jsentitle.jsentity.jsextextension.jsfacet.jsfavicon.icofield.jsgroup.jshbac.jshbactest.jshost.jshostgroup.jsidrange.jsie.cssimagesadd-icon.pngarrow-collapsed.pngarrow-expanded.pngbackground-center.pngbackground-left.pngbackground-right.pngcaution-icon.pngcentered-background.pngcheck-icon.pngcombobox-open.pngentitle-consume.pngentitle-import.pngentitle-register.pngfacet-tab-off.pngfacet-tab-on.pnghover-tab.pngipa-logo.pngmainnav-background.pngmainnav-tab-off.pngmainnav-tab-on.pngmodal-background.pngnav-arrow.pngouter-background.pngpanel-background.pngremove-icon.pngreset-icon.pngrh-ipabanner.pngsearch-background.pngsearch-icon.pngspinner-header.gifspinner-small.gifstatic-background.pngsubnav-background.pngtop-background.pngui-bg_flat_65_ffffff_40x100.pngui-bg_flat_8_225314_40x100.pngui-bg_glass_40_5e5e5e_1x400.pngui-bg_glass_55_1c1c1c_1x400.pngui-bg_highlight-hard_100_f9f9f9_1x100.pngui-bg_highlight-hard_40_aaaaaa_1x100.pngui-bg_highlight-soft_50_aaaaaa_1x100.pngui-bg_inset-hard_45_cd0a0a_1x100.pngui-bg_inset-hard_55_ffeb80_1x100.pngui-icons_222222_256x240.pngui-icons_4ca300_256x240.pngui-icons_bbbbbb_256x240.pngui-icons_ededed_256x240.pngui-icons_ffcf29_256x240.pngui-icons_ffffff_256x240.pngupdate-icon.pngindex.htmlipa.cssipa.jsjquery-migrate.jsjquery-ui.cssjquery-ui.jsjquery.ba-bbq.jsjquery.jsjquery.ordered-map.jsjson2.jslogin.htmllogin.jslogout.htmlnavigation.jsnet.jsnetgroup.jsoverpass_bold-web.eotoverpass_bold-web.svgoverpass_bold-web.ttfoverpass_bold-web.woffoverpass_regular-web.eotoverpass_regular-web.svgoverpass_regular-web.ttfoverpass_regular-web.woffpolicy.jsreset_password.htmlreset_password.jsrule.jssearch.jsselinux.jsserverconfig.jsservice.jssudo.jstrust.jsuser.jswebui.jswidget.jsunique-attributes.ldifupdates10-60basev2.update10-60basev3.update10-RFC2307bis.update10-RFC4876.update10-bind-schema.update10-config.update10-disable-betxn.update10-schema_compat.update10-selinuxusermap.update10-ssh.update10-sudo.update10-uniqueness.update19-managed-entries.update20-aci.update20-dna.update20-host_nis_groups.update20-indices.update20-nss_ldap.update20-replication.update20-user_private_groups.update20-winsync_index.update21-ca_renewal_container.update21-replicas_container.update25-referint.update30-s4u2proxy.update40-automember.update40-delegation.update40-dns.update40-replication.update45-roles.update50-groupuuid.update50-hbacservice.update50-ipaconfig.update50-nis.update50-remove-entitlements.update55-pbacmemberof.update60-trusts.update61-trusts-s4u2proxy.update62-ranges.updateupload-cacert.ldifuser_private_groups.ldifuuid-conf.ldifuuid-ipauniqueid.ldifversion-conf.ldifwsgi.pywsgi.pycwsgi.pyoipa-ca-install.1.gzipa-compat-manage.1.gzipa-csreplica-manage.1.gzipa-dns-install.1.gzipa-ldap-updater.1.gzipa-managed-entries.1.gzipa-nis-manage.1.gzipa-replica-conncheck.1.gzipa-replica-install.1.gzipa-replica-manage.1.gzipa-replica-prepare.1.gzipa-server-certinstall.1.gzipa-server-install.1.gzipa-upgradeconfig.8.gzipactl.8.gzipasessionsipapki-capublishsysrestoresysupgradeipa_memcached/etc/httpd/conf.d//etc//etc/ipa//etc/ipa/html//etc/rc.d/init.d//etc/sysconfig//usr/lib/python2.6/site-packages//usr/lib/python2.6/site-packages/ipaserver//usr/lib/python2.6/site-packages/ipaserver/install//usr/lib/python2.6/site-packages/ipaserver/install/plugins//usr/lib/python2.6/site-packages/ipaserver/plugins//usr/lib64/dirsrv/plugins//usr/lib64/ipa//usr/lib64/ipa/certmonger//usr/lib64/krb5/plugins/kdb//usr/libexec/certmonger//usr/sbin//usr/share/doc//usr/share/doc/ipa-server-3.0.0//usr/share//usr/share/ipa//usr/share/ipa/ffextension//usr/share/ipa/ffextension/chrome//usr/share/ipa/ffextension/chrome/content//usr/share/ipa/ffextension/locale//usr/share/ipa/ffextension/locale/en-US//usr/share/ipa/html//usr/share/ipa/migration//usr/share/ipa/ui//usr/share/ipa/ui/ext//usr/share/ipa/ui/images//usr/share/ipa/updates//usr/share/man/man1//usr/share/man/man8//var/cache//var/cache/ipa//var/lib//var/lib/ipa//var/lib/ipa/pki-ca//var/run/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=genericdrpmxz2x86_64-redhat-linux-gnu# This must be run in posttrans so that updates from previous # execution that may no longer be shipped are not applied. /usr/sbin/ipa-ldap-updater --upgrade >/dev/null 2>&1 || :/bin/sh?7zXZ !PH6r]"k%jd{V뚍e%'[Q> ڔ=n(Fwr,@/ _>kY1_fe RmP|-%6)756ciuf ]eZ)x {3t >R$ EzjG(wǦtVҪ/'֦8cP,-<'N 'vs4e Ӧp'.pUMdV/S>8k;J_Hx`r5TRyVbmGE7í5W?ڏ4|U$n~wهW-;|C~H.J*L{"f Of&JCjƪEH^/ʋz췀h}@I[WR oͪ"]HT%Z {Zև)srPϬ᳉l:bb{s:Є(bB'HӪ E?wǞLݟn棯@+iW|qAQN.QC\œ6J\Q_'{oe#fr磹r3YsÅϷӬdo396 !l=V"N,w!Z-%Sbcɛ\ppQ;H/ApsgqWtBf0o鸆f>ߋ@<;"*N9n &ϛS4+ Llj.ɛsG2iV"{ t~rZF8A^i!f&P )ļ|*}Q9z YrRUjՁ*ZП4_6j"x=YXOSoKMڢ󭸆p:槏[netr>0>GMEWH|ZP.斜딬%MATq~ٽMp,*SQ,=ßᳰrro9_cnHU1Di 㝆m>T9@L&m7ܸ=Bԣgɍ_. 'v%k~ 7OxNG[5|}E Vfq?烇~/3bl#We]y'[ D[7~ =OJXIBnm,&jpQ|d_ NS#Yq~FW-\^ }O1YAr+IzoB%G;Ew$YAklZHExE=fx$fSxWF٭kRp_?2m0Den W_Gt-b!8l/$czQJ9*)(RLȘM#$X*@ ~Pe-B `lfʊU(нR{}~܋Ӎ oh:rՙ­&&XA2yڇ⮨!,?kg|YBhRohEqVRz{yS~quKF!}fTC(Wb _?!sq*vY+aWʶÂ-s]T_ǫTzArٝwS~Jݷ}j(3~dv^?|~9z=8ʎLڵ26y2񅁝"pqݯ(9 :Binuؕ yz!/x׽5o:2qf ͢RX۩,`+M\;ȁaԦ`7O+_{`JC6lQ8 a!#tӺQMJrfpNa/2Z}X㙛S !,rQ B:_rx7dvbk;mSd`y8H'M .ѢN$+ljh)Q`_?eYeu*7GA#iit7}ZE٥eqec/Ma9oyH"rOރj=lLZQ|ٓ1DrN _Y9^)>E,}#xUsdotHQWG`g/*2;L)n7 FkR ǒ\RG[fYL9ٲ $L/6籠[ެ=sy dWOe`w1JcD! XbtA0 -BknF-Z9f iXѣ@Q7Aq,y'q9y#jH+zW"[Ͼ2#>YZy K6-chw5h}Et2UJ"V !/&dSƒlhm\nrՄ/E㏝|;n [@?3ʦ9YzKqΔFbW&\Aht49 V(<0Ӌ"\eOW|ķ$!bT9)4jЗ^D8x&>G;[gnal'^_5 ]շJ爧eүBv a-̽zb:'x䫘Uhd^O z$#y)ݛK:|B @B Cb^Kj@$NL,|cf)NqՃX"J L}y2TsB- \R o c~{|x{>iߔy `L4 >Gf$˿lAKQV1҂ݛP}E{8q3[K ,x\G5Jik<[Bn>j|FOh[ZJa.9y_o"|8T8nisD.CbE08SO Z# X,D#81BһyT~^ #!/sӒ6lNV \cxL2VjvC7=+t%f6j _ ٳx4$܁ UAaa%N |;X.+Orje dWjx@}0$FbslXlнbsb=IJQFu@.4ij> ܁s%g񌺕>I֮/ŷmHsۼnK4X:8Y!1-5V I Ӯvɜ,Ė]SP;˹dɊYWo>fEaewzʝ2sMne>/RPo+ [&ݰwҌ, fBs*3xmDp,^)(&1nc{Y FO3HH"'OXL^Y']i>pJ]k%}޵yy&a95KFe3$eד(EIT<*l +>ye4_r:׹BhZ@pqdq@>!=K7=<*$l5> Xan8@ v>ܢ>@(m D P:(j62_1'3z++]P\ $%H^,ca6 ~%]U{6: _ۋ P8NQ̃ru}i믐8 >:lz!zČhI^⦅y<ó Xl(١B3Kza%(IWlv)]ǎ1VfZ2UlO G“\ жOW@+m#xM:u]ӧ'G d40$*8{_# 0iVtk[hŢӀ6)MmjIBzxt<2 "՞wǧ|Rd[u}DM+iHu4F =7刯U (%T$nzP˄U{Օ Ŵ{\R(=4o!J6i;k U.@@/@#R ѢZ^J񹒅tb͸is) ~;f1`ϡ`D,3Ua2ArϬ{R#"PE -$g·#P"8+xN>C@4f/ZghB8ĔX9GKrK4E1yl^k ABw>pdKRxisS*whrQC=(Rdm=CE %ABj_ie5h>w(܌=DPzl|~#4R9b3-o:3xOGJo ;Ip?xPӹ}y`~1ш@J:FtF7=+Qf))|aI ԍ5hD]L9CK)Vsԛ1}eszIYvMxWxy{1Pu!a$Ufm-R^J(oCi& TMjglUaM{VwG;MX)J.?#P2դ: #r o{N/9^c6|b K`ޢ#]/w~o׵P8GeUv Z5@qpVH 5tλ'oD1Y 6#D[:r/Wh&y Yv=sF'eN41+Ҿ|WaP7Bf?"z>HHooěCgQӯI)Dٛgot1Sޯ>DDfM3\"tGszNGDMK@ʈ8,&;Ia&{!3;@[ U\)PPJA4:? 4AWŸy.EOe\M}Zvx,Ngt$KsX T06)F&};B=RX)+Aʲ#МSzǺ!TBKvG[=GE4[K0e9\&tiCG "RUO jc"~ .{eǀwɞ40P9r7؍~2C/78'"HU(jT.I qG >5qu*x]r_x_ T/O ɌUpҵ䌭÷I8s')tV 0*;.t.X87 ϙj c)^ ఔ8^5:{~Zz? 0 NmtS2~:ct([3"leMwf  =WU!qK tpx 1c B@umvoR즆=XMkP]&G9ұ $sf:0*`2AAD-5Y43tZsl(ML!GZ4G'+[2|RH>jj׎o*CigKmsx1P^zφ-f8nnӃX\6e#:QB얤ޞWK2 z ^ɏ3a:)^?J|hK)t'Rh-WJd [f7oW,S ܕM")US+HjB)O˖k2' 5f(t*YF pauVy%J)"1# koY 2,԰}ӄ[-y?Uf$Nj] 6t_?y"tLȥ2=H ss O¤F(ǟ=lY#g<~?kR[ҝ_@^E #GAH&8*{iyecqA9{O4n2XC&b+B\r^jn/3a$#yC `9ɲIZhuh9KN@ eK g gnG%&zA^]qTiW%}Wj*@VzsIuf{?)+|@*-`Qѹ_eyӈfkAyLYvٻD=]6a|^A`}N; ndf t]㍇cZ!;$%+; ifML.Ka粅 #DSq>ZŁA EteB )БlHV `+pGmOam)oy*_[,2HߥTbvAdIlNE̙+SATC 02RUI\Eپנ5;0GN$J>{,2ZN 4"sΥ=V\C LfB7_ WsGh:8OvW2ErS.jB&G SBIr ID"c7ӥgtϐG d/bWκ&x"T/;%`lꈠձ@.՛,/TzNG0VrxOmy:?n]e[)BLjz7ۿ_6+ĸ?'c {-981&kojXbxX/gN/޸hZoZh(Kv,Th eH~.H&g D^6F'bBjHe7\I5j߭Fl2O&yDq71]A)eQ!qAoZ~gӹ^˪ֱ dL?9i8jBHT*.Qtڎ@/U:3ϟFϧʤVzf9VI4Q/׻!,3+1@LzfGz۽[N$YR3/{UizuODf9Ό}OWG2T )?VvӸ/9Ƿc05Y{tlzHcaU|xcY/hEn -$(<,%`89n#q.1cr4(%<Ҋ5$W(w7hCNY}`a0 NGQ{l&482'ܖ|+ {=ɐ&/Sޘ6F0i&[aM:# FEE&8ǐHA8o{_00,. fJTj#vGblnbfC5Df&WZ4u[ qEVinnSe*FGYJM܍3&*۫Cu#FH)P{~kk.JG-ƋHʊ Ba޶>< ,Q+"ť'y2AHbMAP\ƻ'Xga;L,ꕥ)'_iփA> Z\h8AH$*nqu7)蹳j>b"Q'lrH!D9FDET3^H{EΨU+Օ)> yjb݌q\!OE 'gG#hHKֽHA"yFs[ʆyã[wߥܑGi*fu2ٺb0JT]қWa ʄdVÿ@{ERT*+1E}I68C\qhKRh۾3֝qDgKqs@c¶1F}LNNV:#%xBATAr:;4w/l3㋿)*$?k\w !'WJN7h dI@: =u#BpRYx{,tS G aQx lQ=t@K6Y〬s벉9dbEpAt̾`'~]H$8lT#qe ^Ek|+^8O]< :}1Kg,ԗ)Ku6UirM$P{}mu|NfĔV>G:QlzoW|$#F=4LB'E@@R`,}M`8@ΓCcΊmE,lpF(@篻mMF :RL8"qw/|F L>< RUy4LoD"m s #w !Vu|WẺ**Ab2-v:(ib+Bu֥vS%?{c@n%XSabW8|O[#f].˵Ϣ߃4C˧2bQxr-Y\à 5\窍%oIHGEcZ;z5B59DTr/I<i2YrR G] 9cZ'"pN;(33Y ɓ17 wq6B4,.P-)^)K&-GJP=&E*u]v qS̱]7T{t9SWŁi|a-J)8.H OӝGG8'8HOT੊O#RJ$:д7c*VHE%AFڐAkqdZ~?b9 owfғ~W?<-xrKt+BG*soO<6csaC X*3Nw9Rk^^|}a }n UA Ŵ]P IʨR|L Poa2&?klI4pLpyV!p 7mQ|(ZRYI0Թ0v"$f-J[}vnmvc֗IQĒx>)@|Nc}JrWSd~l纏WxvC⹿6\p5Luڞu\=#@g3Y)y7kjP_ FZ__[m͏q]wxho}#[*߁5q3:}-HT(W^XH|C*^V"t41GC-̪zl4X>_Kb0v,vc8F뇱Id=)K=2\$ lzv <}܂iW;l*:eN|2~a]y5B`'涂1 2Ay\*k} >1DJ~JF `_hUg}G,r: ^aGcCMXX8NĻu>uBC *4f37 x*eluK71latÌ7T/d hՔQD]!jT vL]3>/3E WwmPAwwRTH~nj; rS*Qhn!g:)=htʚ8co{[t]&ZM(|tƎhrF*L:)&rDi#">Iζ2mA^*S"hخ%kwnwӀ/ۚssvԎʫ<ノ6[ d\Vp{NPEUZ)L7O*a򷻋)C̶~ja#pMe<2SnȬ%c* G-"BᄜǗV0=*Z|! 2Sx0zRUb QƖց YJ넚PajANp5HU =U+u&2sIœK_h ;FUQGs#5 ?a +GEDy^}#'M޷:ն>9">ú>=YKoInքމ{T[t@V(Ii㩯Qmp)͑[< $0 uNVF )ݝ$Iܑ Eȉ QDXz@!^nܑlrb6[|} +rhpl)󢠄 !9iAe4[+W,\ 6JjXWJؼEO@@7q G#V;ya>6E 4\_˶kMcհb[#t=CpH"~T>&70ϳ4Nl !͎]q:~0)cIN1*;czMSi;@/+4wBS?%܃;li2xDVʘfi{U:Sl1]<~"NX' B1ݵ,i.X2VT auqy/h3DZ<`We`i X"r&h"FsUjL+j`1N8{zY=dӓnvy3P,`(&Q/[<_ e8vϴWI,JDSJCY(9/r3d#dn.N ~g%(>ÙEY+L aHW1I>ǕX\|OE֜GRh>_yˈ\)LK{584ݹ hXZR7]7gUsr}.q5@&Ad$[D9@5:a8lˌ4c>$)U/pW"xw&MFpH5" o $uL) ,jp(1xKڮ'4JABFc]U-@30< _4 XZްٔW`|LӶO0?nWqytL,IDO0ȥj}L3ISrJ))xR*QЎZI0AF M`l:g> ]vYxcNVqE n?akewc`bb69rt̸G|QB2 .-;l"l;a@ UNS6V|z;ro>aܒEj ~!6j I>&<.9'"Njd:|;ϭÞz|G4rAx w=x6:Py{x!\+R-BL wuư>;aU ӸX<(ؤceyB!H#Nf#shM_q[8l[ ު:Gi5=FD+Q4q_Q#OmCV8L9 qMM L1*230)i7d ϗu͍髌Jq=# ph!ͮw SDŽ,*:IiVMbLE=D)g2 , qM9_⃤4'qfQg3y.ZԇL;&2qc3&"iRxsr-D0I;t;Rm8*fOzD 9as%kxҐKcL-rzA8y'mJ;^4nC9zܕ [ŎpϦlYc" ]e>S-'iB;?ؠ눶SJ<,w2gHLNoóKF?0g[8-ZzG'yYR兩Ym}ͫGR"Mh$UOC#:u6lCER<]q]@(}`_nt,ċ6NAF欅YBb0k9K)pr,$Y$)=PB<<>ob D%z|=鐫I)3Js "\>$,#4MaUVٽN Ur|uU r]q֪1˗N"A[/Tqr u X 4[$.Jx6d>S%O2 ;T%-S[ݼʺG[mj ^7-˪sԣRB)÷qk&\^ (  +7*AP]+ldwAG"?G :8t.l#"!#sׄ EI:ΥVw6|^l5i"<5 KM*R]ajA* SۢycP 4 _}1M"S|މ,3J||0Eqݮ? ZD5|ۮ>_ԡfa|hQ}(̂]y]Nkn5"@X=fU m.4ݸUǭ-4{>#P#zCڽւbu%} [~,z"3e4-x vK"ueMXWa{y tW1j&pscF$XoL *n(wsЊeyin ![oGJP% ~J0\MNk)^b$ +1 i;֙P u'`NC&߸Wu?Y+V6TC.OkcaŢ'SQV{n0iP/}(1+$Dwc=Ta;].0WU&6qe7CNɋ?+Ƴv>G11Yb 3Ֆ>*ɔj@ :8d|~ % I#j9#Ղ=ʬohUNhEd >Hob Xӄҕi։j/Sب\G28t˯ie)gFڋd:8+ C #℘:r.sC/;p"6fY^VeM;O;tVH/~+'6R_׈,>\E|>˧67< "XECQ pqڐM~1UK@ MH&:Yr7+mjOOj!1R ]db-;H~#I@_X䈭,[jn\g[j/ijrf&8v3\"\sm$n1-+M#7<bKMk+`(|Nz߭M֊}Pjwg Jo1uk]x[;+| Jr i8_DJ{Y‘ke*[2.Qkͺj7΢]{PYV̈́:h´qBf4fF 1pk~E*C$\n G#x[O_oT[RH 1H}5&P'LbŝYGӼ`1 86՚xƯ^a Dm AC5\l-n^}%G򓏷F- ΦǦ$^آ'=#yQ|W!< `ԭ6Q#iTFF 'ٺvz!+~2-"4u@fmӸl}ǰ 9b,i%n4%KUL$.6M1ns ~w#jЏ{Tr"ypE *zeg!zfTEn\Uε'Sn$O y} ɚ͢N}0/^A)'!O}~ ֔M{xW1 F(dtL|N.%CKSW$Xʰ|%9G3HFUTX>>qD)WNYl(Nӗ03Fv2~l-'ڱ@C5f!WJwi@ {(iqQPcBBF!v'Fxr#8$$@iȺ5F%1-0  u^IE:'Oc80R}A+Z|[d>3 |ƣ xX2ȯ Y aXZ>NQs\\,$(oIbޘ4yÆ'>]vl{Xa* |U`Q f*BD=&j? h!DLղ1w(E:S/$w}l@̖֫bj:gm594Jbf.Y A?I~Ww'NYϧ@M ݐJE +^7ɡSAY"K_CDE|o<&"H6s~gMTy';U 2j$Rզ1'm%7ioUJyJȄ"YJ!hZKL3}fF.p1G@!Ġ0VE}ysC^n? rpV)pRe@8QNb81 ǯ[ɶjʩ'JH 9PUs/I}א+O*Y@3+}F"_X"Fa& ߉ńtY*_nZn o9%؜N)b(1W*%s/&ڨZs+N>6@'f3GoHA`dw( Gf.!f4Y͆|YM N $Pq1H:w2'7{smu8D$ ?t=q*p ~?^PkJx|,'E*Kn;,ry7?kmZ;65:827+6nK A9&Ztdr9GOs#I:iA+AW|8Vu@ i -1 eRcYWMNVcm↩֛=\l-Ɯk|Dc#]rΞH{2'"-O!Ulyjq^ׇPKu2ϺG¨5z6{&3D*3-Nﺯ6rr8mBGBpߖq-=IeBz3Xqahd50 N4= !S19Ť~N2K\"̲"6 t뻨׆`y.SkOcaciq M`S&1C) B㐣ǏJj" R)eL녦y ?&Zv}{grcJJ&h/^l&Y3ohYi-e Z:w+wsRcUT -2@f,mL%ZGWy U"Ck2#<;!+Ptk5@zEk S` p< Bm- Tḿn.1ʭn;M+6ڪ@xJ۲L|51}L p'mc Jƞ|}OpYS\J+ w[b)M7$ddk3ju5(+݀$ߠ fϚMvXO–%B֒c`%Q3iYNcSy+1ƊMtThbxvm:f餚sd")7gS4l Å1",=Tq20 0KjjOq-vA:Ȕ2# =}]妄ja$$S ?DF1C.UVlU=!9cLCM?unvmdR-6!rl7l+ Op닇`BkO䢶ȡ.)&hnct%ʉf!E 3!Y?'f} g^dȃUN>Me3J@@ՅMPu LWQer!чcd5l]yI\I̚,/Bӽ9MD x)j*'}g802&a19JTV'Τ?wag1zH<'{B{^b@#Fv ;S ݦr7u Yq/ M %_(7tby hH$ 9P*B䳾P%C[7o8YTm425^#οj3cK\(znso%]z?;~f}mɨnI-e.rFOO88~EEٵ[FnEOXrBPODhy '\Iĵ-Lı}D/Sׄ3V~t!Oe/pjG:*ѵ_=8 j:<{m3n"7Bnӆ\'MMT:˼Q+3y[Fd_I3tTeƒiֲ_i|${IF_ Pz˜4/1}hHR2s͚}:p8dyL&E+{U QPuS (wC)a96<1df rN,ւGBg 5:DS˖*zMނBAws6 pq&{QTFAâ9?nhMMZj2B"$&STt8{N.KUp,M@i\M.6+hr6}w(2@FJZSBD]VRqP8]h iױit8V?Z.G&x-V7=^3f#GCi'r:1,kQMƤ\4qfjȋ~vI7K7Mav=,ՅGVZ ь y[D"LYk.+H;Xs)ٰv*0,ɽ6s\Yv~CVIy$ٝB͡١ʰ4 ?[M C<KP&[gȜG_ i\fwH[hxK۬[p|]H7cn]4ՐWR+*n79itEu@kIqex(-o@2J3|@l!aEm^02 ۚMVGdY3ƙWwϴ#6A5E>[8xO\bZGW|ppꟵ((s5$u 1**U~1z1p^G/@ѩ,AWk؄AS`̤Zr0׫ -3M\1Ls]3;p!6 g%2(_XlVB~jN& ͭ\-$/`0E;VD>WEQ{$@L!e)n3BE4s&>5ֿMowݽ#;>Xk9fIPX빞 )wvG GAСQvJ.-?mgטT{e}]rWnC#8y4|z KTd8NrSmLCF{g-H UFddhկ*063UxaW%m:>Oѣ?>F?8nWvޞ6f[z6k+Aݔ}h^F'mECm, [\{I9}aM@қ7?Vמh e//>[.W 9)'dHcGKX06km]w9sK´t2ZiN~scb A~}E aQ]S)'v1$/~56ECyCLlQ ^v8WУI>ٵΏ4)a͍|d+:1Py]k-L :tIN#Y %K{xBˌ.9|BߠvBpq =G2:5SQY ?ސCFMpIHB͕[3 6UX>Ҥ{h XkN[I"sFH.ϾdxC+8+ YjhxOք - xK!V7/n8K0q@AC ȥSΞ"YD mȇ`'z{`?{4$W'T3 sqD@@0ij+SԚyQ ʨkV[ÑC'&ݜ:Z`hAɾ" %// }HE $:kV}`}۳k4maw"AMKffښn]PBJ.: z67t 16sjo "_[ZfvSٹWkbx_x Q&% @eIp#. [Zܼ/G}rn@nGy[7XPew6"@hoz^ |4Ibnci rעQB"`dH sO+)k&`9RY" Z]˽4uA^(h@u|6on*q8O'dɢ6`m>>I`_dwuRշ+8~Nd Zy"9s<@P$M?߬QAItP^kt P[ _;!:Q ZiTDs ?t 8HB貝0BVzLaЖs'i*zaR͹V_# VPxk=[$2Mې|&}5a [&Oq+N5ȊbE;>HV]a7\^quaO>m 50)$ \o;$J#2ڗ/75̾^/Ѳw3E؁C૊1tzI 6'nLH$IEWt\= &^KE>(sQ̝ VVn#ΠD:0Cp&p0X֞b؟{1XTmz 6K/VRRzNh:dڜOf=A7쩋 K\$1oT4/􋁎bw(m>TfiZ+H<И2ksŖq$o$ϛ"ovxhnhNCA{髢с"&[qrV.Ʈ<ܥ!wH &gѯSBE݋U%}5Vj4"[^Fas>iӶxĘA*UwÇ\ r, CEWKQdkK2&Vנ 6`U{8% iiA~CRWWpeu#҄P.zRyZ޼N ^KV5iC6o]+~ti/V_If\L?^O7*_C ~zF%CW5 d u+$IZʢ1GHG'kro0З ASh9WfSKFoLȈpykH:cHbϬ(RQ{@ i%͠-ᐤʃ22:݁?t{T"8Bd&ҿ=مu1{b'HG}=h #USp|Ovo#͐ϮJ [7/a' 3eFe8vkc޿ m"EX /cnukOA_\Lmԓ"6-ekxX8r4MBL! .,9͒)X)=R07$>wu۴)LO<)0̦zދ$uLشKWǟ]QWufaDJjdZa rع k;nI,Yܵ'(Z4oAI]Īy u&+Č_?r:?!NDnf; vr=Khm~S?IW+Z#ߣe{eM3 )`2c!Ma hiQރQ^td=cmy77\2K% %؉yώ.~+>7"qFlJܸ\}_$5w#R_Ќq/>au\9iq;z(Ј^2!\&D(vc9Bڏ_LJHq`s,&;L o;t342XU#'GI )\ِEaJ&{ЃF[Eh; KhaZg"u\ozȠ?:mj}莁76&_s`UPb{-D ?줹'KdO&Ec!p^; /^L^;Lgk83T!M80wHuK֬]hښޔT2Ɂbakן]'!UeQW, G҆܌#06b*zyъsVMa8>:G:=;U 2E +'e U&+eA@8sTM t*Q7wAAZl i݃rmB`m/ѱ+g$Ɛ16-=16'ב6ec{r/&v4Oo EKp-5](q;:ȼ)]rN$?lE +[NeEgCιc ~8vgdnQiP7f}g; Cؠ:n8$N-S,7WAb'@$7X0w&~*rEBLq?(k F6dςjMLj9ؐ%D|Ij􁷖^Œ:JcyL9ȝpި-cWuOylaҍ̮.чk ,j9-{ 찑29 YW+S,B@{@m{^ >"G)Zo%sY֧o4y 03~)HNBƣ**Sf3C\ ~zex \y>!VU5,{2_ȸwRB0=m;.t?,uKL#&=ވP"_XɶO?IJGi7]7GXvu̧Q',G"<& p(6,Q5Q] :]7w" ĥKϑ!uT;`L Q("KcxEA9]o$p+چ?HڗLʚ%i|xO-M,[O$?%aX/wp#Q-q]d.I p͌+oCYlN)8|I)H 'domޟٹ_c_vA%öGu=z*LX>z#IA V a ƶsD=9Sv8ML.ta+lOSsQ*ז:gԨjj;T >ٗ)j䓤WqP^nO55yͿ| 4WB^ѨX(*lv  Ӄu2f wo ZlZj seLbP6} -=+'sޣ&VZ)]#kp L'$dW6\\uQ6˼; [?ukyVTl|`{Q[q`;2Q24wՂZ$ xbX;0HbV*wKZe\ d qOAl$b31/ek T*ERd&ȸQf68g t[W:fO i|"X h2qm>N/}(ف&. ʄg[)V(q9ٮ04{[G@ t1g?~D22g* !:GPf/Fo,^-8/ɗdG5.ʍsJvzEPllrdZGaf*}z,fŬQĮ`jlO5P"OD!qkqdqp@bLfʳ/:63?4ҧ6Rx.db5*d⠧~P8QDom2Dz٨X;C@39NtBqKw=rW(X|*TúvyYo-'h'~Og,MUlTwOEc&}He~u a4tn(LzwNz.b|UA~Ry#,wٹ[FN\W[7q@C7 s:x dkT^x 6YCK{9ior7fgȫ5m =^I19(ZL+eKy'\.X)1cԺ6T2!vP\{ фx ?8n=lm'Dy|R #f5ܺ*HSh V~=sd , Y襊t](xlzBZ}dY>'CT1}XےFhմBP4Kd͹/۟It5BԑUP+;ÿ<2k\p2;q=lƞ I>tE/$ύgzsV拓?o)'A8s#|{>F<=8r$ ,P18| ;'g7SfTE[&]vdMeoMҭ@Z~Dw+IrjFH`2'g#)Kˉ-#Y%ONQJЧno3_]'*kL(1fH$3 9\6K9bK?-kuz  VG&"hc)c0h Ԕ J|ð$A~I&,yw9D np-{i3%Zfw`Et&7K_YHdž 7>S"^8^U9cnIK_-E5.pEOr9؄Hۄ;tЇkAů慎\ERCwj!5Qh '4Dʫ oM&.=8b>S,;ɎMef<"N"[.܂ph_ԐW}z c2Υ%T P m{ YfUk WMҮS~YYRMQ4jVRrP!MWCBdd~At0aGXfs1 kM[ú[dH` hbt|ɇݖՋoZy'?Cv7~%,C0JdL/]-+0a`Oc1Z2 XHUvPQ(2:>2_3W蜵x~H=#n}Tz9{mɩ@ K EQg]R8$JN͝Pıaϕ?k'SB2Nbp,L%a l v*c?zcԗXcwZ7:WŰ4V5G逐 :G9Θ#Lra 0lV?h`e9qFk-'CGlP*C/u1z)Fi(+-Ш wYS{)*ؐ>N[AGLcm%̿BXb1E}f44.jG~S6 ImËV?@_W9m*ׂ{;xz3aS aAP[y"eIEh, k1 `s*s>풡>M,E"?]`894BCIIZ?5dʻJywTB+@Ta RjR7CtL8{tS܉ޅ$+^@Ym \BۛKdl=17mh|Tb{ۄTw\$ɀ'rR@-/;;^0 ~> `iA&aKKBHv7vjDר/a?i ?W>" #aƓKkNwPb^-{qiNM1VuӞkBbI˽E]ak =~&}|u&=&S{4)COW ^WW5@jԀ&@@̢}jonF2=߷xaq6gMujA1wt\8nK3tʠP\WѲ#s~B2#RI(i(%^Wuf FJSZ̼vT_M-+)IKZ4v@VN6FYDa,!Su;F|xYMΐJ$׮ZaAD l1Vs% dfe MBXB5}Ҭ ^(By򳷦P0HJ4Ecs'PUk|q탃jzg$e"d,]Qb` /I' n -d hUSvY-1 ?"/ Z>kҿ])"#a<¾fJWn {>iAL#`YZj*eUVZ~ hd_,Ƽ(r;As}[p ]XD%Xf*+by[2WMI g;bgR0.{KyDF$LȑJVU؁u۝TQkJt〈+`ǫ [Uq܆fZlXq2[(LRv]r! ؝܄ϯ-h ~.:I;ffKdNoi\CZ5>jv|Wq8)4z?m "1CC{0ψmP* ?7LH (O~.-!EGpCCpc*#?otPF,87CKklβ44V/:gTdx]T[c/֋ai_`3{aVhSYދ{%ŖZ'i%$Tt}in\U:.PBÒF ZBL+^@#"G2yF:8&R46zA@e4\w )Lw<\ )*~\]wT/`1!V_fAԒ@!;)A%E>(A<$Ps8`a2#mψ{i<K x ~Jӧmc*:aW!/O]Ը_ ̚N-V rNQ ¥w6d]==("?G^|6@ڬ 4gXPlfd6C`x#)}ff]+Sq߯DC=#w7g]b>jJxZ^H™5|_O5wziп@?]Q8 «3P5P3 ynier+A #([mt%ɀ-jD̩sYC;KM6wB?olq+kdv)JZ.dY>Qb $8Ks]X >]&& m4ؗ{Q4[b5= P&kG*V oLfZ'2fDcÅV:yR"EQS$<q44Zajs<@y²:왴mN[p+]M Bfyx%,8) @3Asۻ'}6,\:0v~DjfVV3S1UqOwJdipoQsÂ.ƍYaI@ݭU_aC:_pCəo+z7k i^XGrHHGtІ;G:u;,h` \Ռ|u G_[Dۤ[EƌY V$wpgx3}*OuӜB5tdӲ%rRTN44BGN# '_.U0ձk+20=Qր. o14S4=茠{vsڣڙL䎊b0Hm u,wSttCt_\ sd g>mZCH-քq~BD:/|1?}*#E5,CvG~VEcϨ1VI+e[ SWa?|&늒RF-3%T`Eeޜ#{cB[s5a|h"tkv ppK > k6ڦlTx_##%)]7}h=[WՅ=c8(mLZ2,[(M! mQK gPl)`$+Cfy]Q*ihƨv +]pXh(飗%FBq_ϑ_BVX`ͦi| lK`oz++|:6t%rƪnE4|r꿪s镇?I$sT7:qmx+NϽ؄۵ "_Zꙩ|ϲ1TReڱ/[1e;;3<7 A|֥9.OF߀)Y(zUX$軰ECǠTGaocPdJ˳A 6kUŇ6rg8KOz>mTgJAMv_6h̙֛1-϶ b֙H 55!kxO`~C*1ᨃ{ۄIrFθ)@.Wji%#HY(m/]Ըrq[vG\;N"Fi[ZYLtzʐAKeRIDM2XL \nPj؈$ڙy@jWt6h_Y1&L,3? 'ݴ~&2^Q2Bak"-ςX>2~rqOǻ|7PH"cАȷS&- ` 3ώ$~H.bR^Ha \>ܝ 1VQ5M\PFл^ß羿hClPRG^=pZf eT-Kw\z$j`0qQ"+P-l_#[W  S;U,˙;dTzbds+-k_"tI$(kibuq]>=jW$\ o+8w3qEIb b@?4Kdq~lg%rߍ3^'/ž|!izpt t͈]o+}1/P2,' ;O)=Y3Ln;7!{+Y7#SIpW@ a"1{*Biiʄ6oЉ'_Y+2qU2=ZR׃*YS_tdj+NIӥ1.oN梟es^ ͔y^Ke9YS6&DAZ:nTOy %@uU#uJP`'_sl4n\RHcQЂVR=!7-0)ʲ u=zODN嚷:RcV֖lӊO\N;5;*ncW2j^ǘQYMBsDΗ*0_7Z",Z3Ra|m}.94t:meӉv0>lu̚[Yѝ (ۿ=˿ `0^p= t=2"a~2Ŵ'hR[ g<~hϽoB}3Ouc!@ *Y2Q8}_ypzuQmNF=0BBȿ.8e I̞Cceʠ2 0ELìtfWo{1в[Ve5|nZDMqG#I>~˻J0E@brV .B/!0T ^nZ*w+km;f[Ъ Թdi?HՅ[勉SR_ws_/UnK qD4HcKH;8PM˴"fz@JމJ6ur.<:W7%jjF:?}~ґn0zm ¸z]WL/зl|Ve| E6P=D6HJM)3n D/zgWv+3 $"7mܖY啦{ܳnF6()(S&/ Z4l)z˳0RqAQGS!ZQU֛%up3ԟ3duK ^ oH˻H 6LȀ!>4X'%$|7X8V(LqHw[:!BVA,zArhYW:A.?^ХF<^4̺IKhb9€BY(FLRd(ȚJ&Qs$0~fMzꊶ‘,Gە4!](ݬC\PC!%rjSxaL_! ͅԴ8\͐y,MHe&h7Q4pT-K(82AKJ Jˌo#? M>L9OhJ{671};lCu^%)'8aOy޵Yni d+ԒtKұhXo*c;;lM^BO .%i!"(ӚS ld!M(Q%YfLQ }gW6򊼂b[Uk%V NиǕXѽi9lܜU„p`T /^36w䊚y\jYFmXuxu_6GBW1&;ap8'Eę`>)N̩ٖ%Rpⱛ &)s7:*~eF II@?%CJS9'.AB}?\YŅkI۰Y՛'-tAnRh7'5ѳ}K*g-U0tx܇ o*+Zi)β=Kc.~*/e :p:n:.MK ?HhΨ/jvg;NJ1uEv^l@^WZ&a%ŦTD C5RUQyZVj%>^q?) !kGO5j]Bh!QFζc4pG'a-ozmp v<vYyyg]Fsy#${ _g$cmɤCcobݯ( vB&Ld F"Nz96躣ޢck~q~-;G *Zdi-ihٗ?Bشcq@ vYVjl9e꧂A}96 0?G|ǴP>`vq(<s%j]7"A{gRMgܷ*V=FmAzI8Vd[m}!kFzҚAكfM}^_:(Vf!i /^y\3RP)pSqeg0is xы=qIq`CM ~HFYbˆiwMҵOi97 )DMH >鍽Iо|҃vFsBMhմ尣nm+ ,z3_؛]E˻jG˫dW 4Ƌ,f#E'2ˍq?->6yJ1䤞B3C `;ٖ`R2#7cyor.,A&׽OUΑޱubfpFd-'ޛãUը#$}!5lU^I3gt@cMxRkeKkM Ԭm ǶtIYd! Z{XEIEh')ճ+4>g^@uc?{;Fuid%NVE}ƜhGK- /솈 J4LlSg\MCANv3N)%ˍys!Uf;QYǦ۵8z94BAė6ӆ$W VD1CTLq20F}?g2f ۞XczT}W7@eMۋv@&<6$Ή97+kn]JAސGF5 I0+X+{Xȝ638`a,y2C# d{KLun[͙QR n^k|PI*(NX2M0=Mpmi4R\;5Sp~ `D#"1 4W9 d|@Bh ֌u|w͢/?pQM1WI%ev7j$L,Lwʶ덷7Ӳ:{'ow| N!ZAUob|\@<-* ]Hp62JRW`KsČe *''Yݨ-?+kWrВ)1evfu_}vD h$=8\:xLJBs9 :WӆN 1ғ #oV, .CaLMs)3X$I'L47xȭd}/Ӯ]n@F>x,fqo~3fOa4i`?-iߩ֠ $AW{DB\{ OѐfnH~'(IZv ;XXPZD<(&$\۸"}'Ud˦ҋ=JqHS8XƬ֯EUX\Ъ W=C{ϕE+U~&wQxGdF>"&k;y&2c뽍VNnWDX"M-AN9/q)T%lnRᘴ~qn40* AZE:x>꜍+t=Vx\z_"wF"vC9\?WPV ֙ lz"Vv?m&@D~|əfu TF{ f'/E0$'F"MyF%+ѹ|<Գ+u{:ߔ@ %[cNf[FgGQɝt$Zٌƍ][nPS oD -1&6SCwYgU〙>bny_qEڬ?Qm5_ 2 WdO`Rdi'o=3)?Cn?rvlWgFL %i" 8{qB1vk>Z9=#Y݅-Aanj-S|HK ,}RBJ´Iq3A9!hO6&!xWW5EgUƓuRhϣpqL'.}q3_6hVkiJx$azQߠ yLBh1)[nTIhv^P(3M>X[h~E!Zy&7zEx$MW[*W5xA!桩M#>r! t<LPa#K* 3bCEG&y !X)ܣoSN9Y7N~a^k'/o(ΰo_6Y SqmIj듍)qfPM܍Õm$oW:YI170Rɚmv=@FkD XNBji(F)&]<# >q}iL /r]֊<^HǭW[; CԿ"RsE`RiRtClxAQO/Z6=L!}:n+iko?c#Yjػ7pVoNB(vNC_Sh[kp`Ii|6,0e+}6J"{*LCr+^ ʑLmUxߑ\PMxi.NЃ?olűC1k|5 2UkR.:kW=5gTIV~Kp52Ð&0Ǣ',>Ȃ^>Z8~Q$#qdi&Q@yV[bW=d,K0hIestWe۹جL,UoWhu-+S uUmyo,1p?iMh`{ '?ԙx־dDž9XG\8- @&YG(\DU3M@1"t_ja (|$UiI }ձN1X~&'1AfAt!d9O%k έu-;Cj e߼}ib^}oq|twb<J'’"rH-3)@"4\9'lZIAB(:JliQM` dg(YBH'8iTmH#-69;ɟtB.%+e]Al}eApB< p}T4Jl#,/kȕBFpLP&]@gc3JJ݃@CB00Ihp\ty>]Rr 3$td8/C4`³!h&3#A!j=]w<+I+OFVKLk޼gPVuK9jswZCFl/CO1*Sm DNw5|Vey^_-bI(N3ރ|=>7k[WBU$0 zlj$u#[1^R~/3 icǐR퍀&()QMfS\V?XN6SV*rA&]ۖ.*P/2F1#и?:siVxHD.ɤOY"V|7'?~daؑA,quqn.؅zAngIag(֭dķĦ\#$RM̯imܴMp Octt">f$d$?bqIEC @Ljz5Kd5vmr=P@i M *@# fTHSyh[Vqw1mj9ek_ ^Qd]s6fuQt zύ%.ݴ1F;r6<`TX=փ# 'p!ĊB4z9uƴx 3~ZPv h\< !#yEbtw BSz̛ҳx@QF!=7jR˙)>e;ۻ=yhǎ<EqQ0, XOGAUx0ac XOSkXxۚ 93y*!i]9)AN}yNd;8¾ m)[W]`-@UUNcD3 >za%g_UUU!Ve]i4NTL8O5x|㴼OlNٚfzvXGR %Y0mUU*bM 6~?+u=hD{2'r38~uOiVeaL+h88T@BNƤ5'cvP:*,M'1 ?}XcjP@o;zo,U-"d qO{珘U< EH 7;2k`X3D2ˇhu(vDǯ-VdBY(pm 23Jld/)ôJ Oǫ- kj(R44'߄0^[- q Cle9s3Ey R2 F>r߉O,qvi\_E:fq胀K#ski YjQuD ^wRȈAfQ%!vuZRbTz$QT҃ -™R ɞ?_:j]MB@If?e uZ#(ɦK3hl$9͉qO@N8j60{\ŸM#v3xߎewn${VJ0-=+R N lE 1x)Y4Z5?LVc(h#- T=^=>^74T1 \ȯxX[KM2уe[r;I4hi^z°HuDqDG-M*j*5^ buOcoMJ4 &EhrwOp a\_S)WѡtH^ˆȚ`X쩉rsr s6P{(Z524t}}+ *]̕rq~Kr[jY}݈)L~a5M l:KTܠC^U"j%=fBU،l#1yc7UiK~VK2] b=cKEHrWI]w?%[B^"r:4GOD76reSKP1׈vng%,ߌoDx5G uuT!/ۿHbr-`A'K&m[\D6[G! oVJC hOɼS %vlEoxDeks2 v}ye@A,5Qf+$[Y`|p_Yne,}@0i|wd{75ZhWv9@ a^c[yu+E7O(wSF),A N8',3fa Vq=gzfIovb2F# @<.9􆷙9"SQ)v 8ierX9O=D" <.$^6rF8PWI@ JصrNC$S,!'ʪ vpt1urA4S謁]Ȳ.,1o;A)ܔt {=dt(Ǽq\y\?<} iQQR 5q`bXNyVs1Ss lhkCdU+=I[Og#f*eϝR1&6hj)gIgHvCXHT5Ȍy}@d…ĸfR0+rTGuIdž7θMꧤ>;EXQEfȗ |_6=ō7oYgekjZ?$z^=EB}D>9S8.v@#T="9Ͽv)xxaPM5Odw$-] lS={'vek4f >*UPQ] lᚥ8ezEvuj-{)F礡x]xv'.EV0.-knݠ5ńv`3' ^D⡠jcO%vtELubZ~f0 eH2TgO(j Wn.qސ%0` y$jm,9-C'k:n:^n % Z"g0Vz w+;A䶽Q]`a8#}AP`JO4Ϲd~#  b-ymAV%AsO l%zI $\l(rVM)ІOJ,-k.WARN}F~=)i͸Nh_-nޒ,+M]D!놟%i4Y>Jܫe]Xke3N#wZ=mm&[-o1slO8XP 5bHjaj#(٢ ?Α\F5}hxp)7^s:ج/f g>Wu5N`Scߌ2ؤ-'z0j7#SO?pV^݋qd=_dkn98ژљIcC˸g%S>ªպVN7cr@cdbn 4voQ[\j 2Ed-zLB[j3TG bNvM)a*gkԂWື !\O) _SsN"<8 Uv JUq]ψ:V~mdK;dɠj'vGgk^YͯJtn WrSƦa%{w 7ܕ%@ͽ]r|L=:b(1Ugp%^_lxj2fXh\Lio|#[zJ2:˥ޅ4YҕᵘQj:,UNy֛lI bbMپb@ ucjku}kID~%$JM&,6ubc;qz[m$XQ-漃_PS:;L ~%}`mTbV= U:ˁ2yFseU$Zosӟߣ ӱ,>6(@Zo%#emXKc Մ+f]Y 2憯it+JAD02q٠i7Sfs J`mFJŮRGQ Z7?L+ĈwU )vgLH l$$m2('JTLLw)in>KqC߂RBQ ZW"훣I9FnfP6<|+o,M*:%[{EЯ=g[)C aZQ& FӿӮ S~`1e3*EAc䡀@FFeUi}H#fQg# ꊠ`*>kyңg3)n{e@^.XpdGnt{{ f'fZXFZWwݳt50)03l44aNfԼJѲr`:!rj(KֶPI俑 J% ~G7&8m~/HRph:x4_qzQlWo/IZn9CHbVʇdΖz\  ` !}_|h >Hu?T.>a<=[ڞśdE%qt2`$^˄ d0:9-XZ!DXRjq'a}Wo.O/R/ϰ ^ˑCB=tE8OzN{uz?fM\EVq0ѫp HQAĐ}ĉ80;x5IdY#љz}:IBJ!\1; WYu_jrŘL{1m+VSK fH@3OсվVq" j@YakjрJ ,X ~p#]v) E m`K. lew$%Hwba~^꽀ݫ`rVS1F}rWg1[`qg V+g$G4"a;; ')Qk' n\9M]vy-rm 'v&~?Mjd\q)bC69+iܵk/|8Zg \PA^2Lńn X.򚎭0OI&A/مkg^Ҧrx!}'GD"vJ C#bA=U_C: :fҔ >X@Jus.6Tn[LV1"сپ]PS9]|}"NM*1^@33_"Dw\G({ i^QSF \+hPi؜?Om3U㍏&S=a7Ǎ*4͇{UZ%זa ,8M)$4ⴒXZOF^q,ۣ&BiO!y) f9u'Y[r5Kտڮ V>A<3F,iGZf=NO&їiN8Nq?"y)-.I}ß0vߑ]ۮrJβ<-b<3z1{sK55v O 3vG$s}ޒeMӿ}|( ]pp(joBb7~G U<}/WwQZȢ95Z3}w_P4݉6n5L8ěPG\ C߇L(~Bj-gz,v G'\aTdb Gqtm^o3#e4; 7R$eqNt2\ N)75d]l/":yHҁ^A<rGg;*5ӏ hN=n> Cc+9c؊(=ٮcv7gFr>(St0eXKkJoKyIqccp)JyÉ <Zm'U)Ɏe.<$RZ_Æ#-kDrl=م^T,: FZTqoLl$ح5%QH#]CҚYR}pVޞīFiheׁ"[W=gpX]=%*\` z~lTzkn5ּWIS`:Je1f;`bpx@w^@6(ES/{Km?IvO& yF 0wgN+ ?`YL &$n5ɴd b\it@@7*<"ӟǤĬȌ~Pl  &Q-jJ+3r>91v Uy#-lL)wY ĠY@cpp626l|MO4^ԊlruylO=9PG0MהRrWщ C5r$q~W$/5D\H ^ЌHY9+!/lF|Ёso`0S;\ fgʺMc$59y]m| {qg D<1C ·'?$.EA0#Uɔ:4jV=JYe YҖICXB0$|^`Z\2"ټ7.5/A(s[IW%V17 $s&nTLߔ;/y/"Cd4 LYԝ^2q.XAA5|X>hlk#R{'2~ևw}3OϐF!gm<--Bz:(`h>AԭGDZ/ɧҁTFcPoLa]iz Xtm ^S[x+ <>! ?qdfzm9=΃TzBur{#2Nqu]xݖf˹By0dM/K|p9DG:ۂ`k9f} V]JѰ/B.Z[*?Ş#!c'#v VN37c2Í7WԋJŤD+p[B?afEN3k攛oj];*ŏyEfz{!PKKCrfǺnbfa@1Sv'7n!QoJrR{(@ z~c=%\yVRua%6Uh(ڑϑzU!Dɷc&"J5|`(onA1xJ#:Yk/r>%tM0K}6=iD~aZ-٨;jǕP\eeA^#Im_:cCo|B߀ 7D<+)"1q]3PVe#tGbؗ 7KpIkꨜwF4: &8Sp)}ޔnYce{}O 8{]VOԑ/B8q\FV-ڀV9:7 B]VDI7⼽12Ќ\8.6腧l>`swL3%0?W[Gu۬S@ʯ1œvLdpSWN=/}/G;YЇ0۶Z>^揹2Ngio}*d a3d(_$mnf{OFȺ+wY5ۦ/tSPF̓}#RQ=z"0RB=g#Z{OJBkםfH 9^T].yb^x]Rf(3m0OA C+SЈ nTZJ^5>^-﫢ø֔]dMB؍(vX\$*zٛeA2G$z%NY9t$tYJ#?g1yg*Qek,!"YGݞ" pnW.eOBr"@Qوvߍ q! dS:?2 թ+C"&X!!ev Ҵ}ƶa_ʴ*C틼17 ͡4ߟ{N~ۥƉ`)㵰b7dfl'3`4#^&-C;QE:&Nhwc9v=v$S5 ]#r3VQx`t~AxQJ%i~l#结GVicq)qz4rQN2O$)!0ݼ^՛ZRPIntQ4 1<ß/Y2)^1uhtm*˿v#st/+eg;]PUbF1C`${L =/`%^X(EO)+3I) Ihh|_U#-fblw=~cG%0/8Iw$gqڤB5đ%I|ѬKRpȃމ+Fsv>; bf@l8*J~lkfS}`cNv]A7:nC?gzMҳ jT3CF6\q0@P眙Oތrg2hܫ}jRqM(9 ԼQx)гSu7z5`VcٺHaP뗹$7'{0o0^NP.] ;D¾J2*U}C }n[MsӰ)?*MZCo͉Kh=ls%UbkR$9HFz{ ߭zΫ݈&>2վ❗SN9m7z4x>L i:{drz!Tq~sN+lʂ!ݏ | [Jk(_2?ډ6bcztX?8Pْ;&Vsýzc(G0 \#uۅ*b3Ҝ2Jgٺb .tw95)}jۊc\rI+SJK\ gռs3JC Q"83׹UJl?c>o~z4̾ڣÅ^8Ħ~ []~е}2mju^$'T-F]ߏ:Az*Z x +Yh;[64L.# -;qҫ)^wc۳p9͏a8/-l6+.W]XgAz?푐PiΕh4{3y4Db]Lr,dU<~ ?)v%0iUl?C+Eݎ*@_ܾmC8qj]](nAԺ4/xN2`&6Fhj/9@9T'v_]2_*^ء+~oA8}CfH_e8iIrqmWU*̢#g[>D(ٕVӞ!p]E1(aA,@FSp oְa"5h zGK$ s3F3)5'<.2$fcLBg=I)-pjGi; /GYH)2o8 E=[vM`-JϒS&&*dPb*؄H:p/Ϻv g&o/*@`n[ 뜅!臵{ [Co2MEuB9>SUfi =YQb?!+haM1-1#i 6 yj s=}*umv_VIz#W0Q 9@$LWlձ+]śp 8>݈ |i*`miAGKwp–(fƯ*)rΞK\H 4/xy2wm˵_߾ MM@9-&cc V vʯ1ru/]Z%=soI춷gl>)9z9Cl; K4n\Krz:Qr!v.裂pEa6^FOUBE0<%>R~7&tzk zuyS2c9 l1gDhDsከo`᷺~`t1XOYT`͖ݖXQOrj}fD=(yxqhKe0m2مW2RK( UEB=Ϡ QS4Vo= EQCx:YJ aѼmw.òh7JO"/f0_Ļ(`\NMad ?[b&R1 z1QS/S>@ KwG;ܑOH[96"Mܻ|UŪs^9|H /p<'6[ㄴ+"DK~qv I dX&`wHl<"-Eܔlkaϭu `b%ogY }@灾@B>s~oKn{*>A(.SecES#S4я&bf02wܫ w7W9wt/uߙN#. l4):bmhvM^ûLP1#ɏ4n@ƥ+"g}Tm~Ly,#4A讍 Ů'5N{$}pbRm>Y3L44a4p'O+K0YΒin!i?Y )RG~&44?9VE;=%bu[.6V!ARo;rMFX[cu2+OX +4o6S^ eZ(o7+niK2U6OQ'!Ū{o%G=I2'%1?Y#߿zTE\I')~ba{g{̨ݕ<iʄ49>"Km^U|t&C*u2eku:&+d|} 1=v4ZSy۔b\tϽ"WɎ<>yyGL?&o@[sũo4Yh\VdR.k1#\a5xc8q([2iۅH+c˙!jZq4/Қl%bu'Sػ?=w]\c^7GĎzYgɩ4} 5@Xo"^bC CR4/@l&KS?v+qL,>LΫv|5EO<0r)]K?5 `*|0`>%_)C7kF[N+tiAR*E@sm|"xGE/&Ì1F$NMI1-ϖGX7 ' g]!VI_y5u Fj~켝*[~bd C9x'^N&Fщ`4-Rڇx#mqs=#pN!=2%iL(\3evl6׷.މL**pw(5y5Lo|~6]'$8̪QjbgulڗK %'S\V?_8j w.vC xR3Ƀ$cTΖ%%+t$S.S>NS o!ddi#l.2b&Ga"3.ӱVeud;j y1 HX %G*:Ak6Zx_YCA4%L6pr{oC dYρKAWxUa(ir E9nOVj-~X 'n&Wy= :tH&nt؉6ZpPC[6jFUx.Vf,} Ik_KYY˘akp 4!y9Kj`aD܂iPV!_ok(Z[呫&40C!T' )Z!]>M*U?i@O0HD;PV2 2٦LIL {[blWPᎱL>=]*ؕrQW8nhe5LB9nrE[A91a VY˴ɔm3CDwYȰ|O3>p#B:>X7Z9A;qYq` N[72+din2\ @SlҢ::hV (-uGȓx;0?}-_)Ǩ3%;OMK֜$!hȒ%\ݏxہ5p*>*nIV:=;s@XeVNr ^d6a3*s<6Ԟ| *VT?DFko F  O҇'<<̂zCO eM wxȗ!o!bVm'*)";x8_v 4Xl- #Gpd? =Xwx6/ tK(0I|NOH>u?F ISmfLZT@ՠ3'd{ >]\̑P%&&u۶?c'Jou#|0φ%<|3n~%eM*Fl5V7dPbkXT"\p_+ə-cpOiEjt(?[h]%S:+4&5w3pO>#H&pMM W 7Z$jHC}^#R@ B :*_ʑ_|0`[ ?iINHjP*}3/[# 'ޔ:=:KC0Hd?4) FT~ВJT—NN44ۍ*¿ ؂RRF4ȑI" ~{oݶr#hZ\ yV2W1$==c{GP.YLWV`MM4WF 5y=!K+ ' ;Q%lPq2 xG _Z5X:{ RZ15>~a?Ix) W _$J]dQ.|-"l{ZJH4o]0JrT,n9qtHЂ>0FyA7JկM&:p={2GCg]G[*ݧ롥{qg #l`6eKbMi| C@9 m=Ǩvigڲ"H(e+ymI S/(o}Pd~|qR@;d lu [ND뷓m»eovL-D5lP ͞9$y%3]p_^2 dHUޕcD@(>A 6h"zKȶ:Dr#UYw{#oBOI7œ"n*іS |wzNKQJi&՚=ᮢ~h=a6 3APj-K|KR[ٮ>#ߛcXZZjE2f 3KdV翰*;SEl5rVU*.&Kbf=zK1Y!7#0h L.睔0Ќ'/jcaP"!`QM÷?w=G`Gxwo(s1ҟ=9!m@}=ǓMheVX$ ރSR6D<<Da^fJgj7nqg@q}G 3 EF_Y"4XVεuq8Cٙq*`,¡ h "ө`e&B_NZ1q@{6Ht v",ltG] "' 2|-g( 9ˤI9-htBꋥUݏ}a@&0.=sl-}f[{̹'k^:ϛ9 oQ9 E@2.S,0 MN1?JxEs]؁0GUǨ9GzmoT=6UV:,vLz+v dѕm9 ZPRdyWԊ(y%b l?2a X) `Lۀ}cebu%H#O~C Vx 8=9 N Nc;[(׫FU$CGZXqݳ4B_L$23 %?Oݩd-5yϴ*)k%l/m |v7ZIٗPW!xxroQQ'nЄC(+J3yRP)7G3W4 ]E"V :/#cpǁF |,.>M˻kb*"i•A8`r _;zH6d(%4@-1>D$u^'35R!7w<UX!_̼uZ<+OMM?\chBv3EG;T>-uJg'{ yx 2҄!-pC.p}t0P{/'/XC*"G#[MŶ+fS mg=G<;#"%'T{O|*).JrHU#ZA->bm`\Jw+*+QOU*w/lƱpq\;exVii,7.'-gtc;rqMx &y |ttq61axrܗ ItH>':@?>wG$/y;bG%ƌFGiL L 58tƖ0֍Kz w o/v'G,N~[g`G&d2m @rFm`"s)+~+ꊟ\L`dӖd Q36/~wZ l%JkR=e;M4]UKXz[]GL]:^RIذ6S=ψ:6o؝}][mq o%1tnia(uM@RT硡x7u>vsJ+\%l ⟚`_\).cqy9u-3DGjԜՆ[{͂m.CtYSC+;}͉h4o5*CdܻrdRXE5sRg83')";P`+F[v&9=^F2+&pu< _ 6Xxm@[g>Xĵ( _F2M?w262U%#8$ݠ7|T'uDvrr5XWʝm_{jG**e @sl .SػEiJt0~iI+ NDi|I/\) RzƉhbZvJB3tȸ @T:"v9Mal5 2%k umL݄#uu+)᝜)/-ԕP?h9nynd~Ч7EBWVr51i~s"_uq 8[Ԋ= WtTUBa=Uej'ycr;eɖt}4,wc.S=tvZe<> 20:~rvI͖UBLh:i3zǐs"$JByW ^[i>Wchq D{$+vOA%Bgխvf|S*a&[Z@&꒲N8a#7"x#XgB$KoU6qeH ŕɄ*)jmjiiN!>%l0K LV;|Mnj./b>{8e_~dπ ouAΛ(pJ_~]-ج#ix VH۽-[MJ\*$0;f绌'TUJ"9l% ۷}2YUfJOjI?cJv$kcH| ;ẻ(Y,T&0W,hԉܦ]+w02aE !zvJpb&Z!O@{Wc6u*jota?@ñҏ }yy(iއi8#}C[_e'M.Njz/9B5l& 6&76af/̰?׭'}<@ZDeL]tA寨T_Ri)`8%`ltUbDrф?[i4?MbGtrtGe_-F1}E֎y۳a*& %<_(AUAO ˆJy|_'xkųKPgkm 4n15Dp2)'_9b>l:o#y|e[l=ő|نVE/_*H+vpl8aqi=RM|5P@.7t/ ZlN"Ig r4>PEtl /M^.'9(xu+Vs!ZBjɷX;]5I9l8NȘzϳCPݧmEYWH3)w;]xWcd1R͉e35 ů^aV JF0&ڃʣ$R)KXCJ1iRCgC)Q;2Ldw*41oy⬭=T^. ]V‹3l"Oǜ3nMjJYL%.$E|k?۹l۶z렫* ]%SL7nvexV-\{yP9=$ߨR{4t(ζR~|cڄۨM(v;΅?<5&^ ASOb%q٬վ)l֊Ѫ:%_5ʙ%BԿzW1KǦDQkف1 !^JIW6덵/Ƅ=sxr۰ܜAo=@'IAG܁Y6ϴYX} (P:5\bveU JlR/2$9 W&W ).2F$*~WG^/ryワta_i0:<$&G d.ZsOH/.Qe~[5%1YhgYus8&))Gӗ\ ŠVvYsdZKEVwoYOyu`?j Kjׯ=|NfWF)عxFH7p@إ 3բ?.4Ț9X92gc-5p- i`#|Ɩ]ThG'^GLnÎa_0ɦbLJ~;pLF"<5 wsV@<~b虯Vމٜ I F:]Χ)Iv7 g!2Ʝ auT̃3n>~wgbETBY1+ 7ϝ5l͒˗ ßo[1Ez;&* WJo#wK^UVSHi;X.)(:P#8 =#9^yF"BObE0װSkmxOQuʶFT(^ZKA_A739\mQ8u1";L jTM, ن_vwӞG_n#Jc _lg [/BBdcfG-DyCxm?}\E]"h~P.§~rcUܼ\oS;E'Y& ݁UT hov@] $McG]a|3f-F&a|yF X!$$C[ǐH+{nOC( )8gt0k!G.ǬxC.8&~TCl3ᯞ+{~#V%k݆!XQ֐Zª7ϣaF5!ThЏiHV> XxN 3^#k@񜝬e 6.זN9՚IӦI‘jk[dq_W3oS+ԞQ1J;Gw&7XbC#bq@cuJĄp^ΌCI\=֖\ɂӠ99 #y7Sp\JK7_i6'c*Di,$@DŽNDC} =A_N/MJLPc[\r&ۈ7эu3ޛ"A_Ts%|ƤX -C!@ؠi@=nq7I2:~?T1ܹ*Oib=Q?j}qUVȑ_W])m\ FX_^ܪ?$$ _Q2i{X?1tL> OxOՂ50wYNa+9pkb0!0m#`#!A$.xL;Zh]֫;բzLhxc !.5X18f :+0P7#4UJ&qG"  {c3/}ǩB<7O~0"JTfht!P~sP%uK,Q;͓:ƩYTWuc*YӘCVձ|}KxҫuyGypjԌO)s  n7~Ȗ!x];>ԽAy3>aZ)^[)Jíl=HSVQt^qŵo'lK2EQqI4y&Y[2п,H"p~#5y9Vg=6YN x78W_|8'vӠztf+Y$SZ0S:C1 wU+/j(, El|0o[@6S Zu1t:@}O Ɋ6-Bh$ +m bvi +~f^^vUnBw<+ ^' NX3ELҞA!G~r4_5aA]nAyGfE0U_=FI8ǰ]>;(Ž&jjɵh=m=F4HHc4ԫA (*>0CSIc姩j9Z IVP h|9d)'TpNt?hg{ rz._^cQc:y%n N<;Qj^,SP DZf4[He,gH@)=feyw|>/3ŏL3׶B0cup9qtio&CFx*<9=rlUeի<=ޕE@_]HNHw)̎:n}+7 I@QŴzpaQ$dBw/om7o0 8T;IWX8m2(c}4-StA7be̞4yę/S$(E2ū쉻Um_5jQ ΎPIL**~%<27W*%RYSg>w E(%Y3QVK}^df:RגLnKo7q+cK?3$O} ϟo0+S Q<Ǐy+ysFyQfoSqB^)kmBaEC~P2SL*=6Q\,>\[J]I| 3 ]fg`ADx\ԑ?~?)CMVWPA /hWZNruRBdMpusCgΝ8j#Q7|[M.}DP1 +r]mkڇ/ vqe?.P%T ZYd?%mG H)DvR7'AMW8^Ά縲3BU͵qk[Da9wl Tv2 'm듍I}$8qm0.3FN͛<QFܹ.mٮD5JROg6*|0,~Qc~9f>662*f h`J^,^_Cs3!b=M[H ^ʆ4sn![cW HlOg-ٞuCi_,d{tD$ I19:Y}wmi̘\2Cc/nρzA\6kF#zZޭz~= !q95D-Y4lu67*5!8NM(|}8U*Q]3)"hƷ1`o-da9ȸ@% aFՠ(,ȓzE׷)!-OZiDN̶l(\2&7!/WS@UwƆUeڑRvfMk̏Q̈́:[V$;y덎c];~=.kфBF- cPC ] DžNj:Q%+,pC^GIGZWa!䦣Z鰛gi罳P?eN yʠ#|㊆W 2 l]g''/v(7!y :hSwVH-|@HIwM7xoӴ g/x>񄓔6i7QxZfoz6KomGI7eij5AZbdxUNE45^}f#!k]i(}$/Brp'^_m5sȠ\Σj8$Ĺ$;g~ # q "lUy=9@X*Y^bPLJt9^]>H6gE7ȱEbw8- ԽLql5n녒9 x4JVGw!&C< &@?P݇$ĩx; >њ h4?HÉ0`O-@`w8_W0K^=| E4ėoҦj F>QϜHLVHak~|G l|+xU4b;ЦحT{^<E3JKoo6+`P sywUEi~KUW َ%ҾR WHm>DbS9t@v,?`k/ҁ37KԈT!-mj~h2Az􈱎f#Vcׁn{)Q̍Ui =X]`@dDSi ~:$Ĝ@J:ZBY{y3ɗSE-JjmRQm)bXwQVM AZGwث !#0_EwnF# {tD &gSc S75^D>X%SB!vpSt!ӳ}lRm.5eZ"$0sU{gJ,ㅄ(}+Oc{n4eD: IAAC?OiqjSAs55*(˘L Rh=DHyL*-&Rh>j|fcDl}h)tl|~5HpXgۓӳ{Ug~ʃYa_+qA S-YQ.符$wD:yKn"{Fir%ͧYrEKO͝Ss !aSlH]~}( c%-d)9p0|lW_9 F{շ*3Io#6#'#X3 Bj³xPD]ټ`Rp\ 8< :c<8ڗ8q؎9N&+׌Y 4`1*iStvAФ4^ n:y,߇Ud?Gֺצ}g`B1J}xPK9@lwĽ3CbTj[${S䍫#8➓z_},^3>nhpŧ!R)}~,ZkHrK:Z rySzA6 ½٭fVZK EasÁLuȢzoE;Rƶ%QnхUR:=4oa$nCr͚i#Нt2jm' A8\tž:LTrQ"ىH}֘dD;Z *9njMU"= GGx̃cl3X2Ez!%Vו䤌n/Sl]%џP6~ޞ"%3ʨVVR ;*rҏ'6*fɶ/:?? =8*K*w,xj'8^0Io Լe~;+٦K3Ƥڪ+QP*p3J@oj2>aڛ[c X΀ׇϲ/K;ęլXIX+'N$O N⎄I䲗R> %8Zt)O0L$͵"%?us9|lʔI.#:Pf>gFb>r7ʖ= m< =1P"Cn-`ΈH@BQgK{)i6Ր@4^hȌfK;3"h9㈯F.D҂tp{ntI `w6b7BQŢJ 1Ru#|^|dPow\t)]~;7#uaQ125XvvX釆έB|h &wKSS7-žԊ-[!KqPgIbMOFL61`j ^ʔ DnԺQI7n ż ~'_@21Lq1ql;7hV{N74K"[x=.$"m+"}ݻ&޶)c;o*as5JOWb48K6 V_t!(^turM5\~G޲Y‰Sa"#z ni3SG8^24䲙I$ۯvnrfn, ŤSs![BbZah|_g."q\Spw;xn+PY?JaF4bl4kt$J]h5,q):ž湝[&r> xB^/R)9#v5~ʝ2į c,w۲d$?qdG" z w"(tVenL2,ĸ xeb$m,X `($,Y=@X?Mc{6f`6M_`*A-V=`S(#p,nzRIs{ec@\i-d``P]7E rChp+ Pt#m4 Wp.Rr|`FR-K X;(p&.D0U9=/;_# 3Sr18R adKQYK&QO;;Y/[^},4zGJ7BP0Gvf;F)ٷ] )<妈 zx8H$KI/HKPW|UqWmvO |!F, [5z{mޭL1&7~l9.qV)X$Oi g+6Bh.dCNU(v;>$,7]ͻ{sM5Cvef^0)"j#L K{,zZlOe=)ӻb0GVR}/.p_:̪֓55x? 굏9b|9_2O5qvLxmnu."L@ n=Ԑk^3bJ}^PqOK OɌ+St2ٞU9RçqYӂG+oL9 G}Y7 8wTBQ,y1" .Ekj5CR V= K7?4qϷo`{Inr ţ|ݤƸmFG%0!2cq\W31=}Du_YvNN%KZ,>Ȃ#ѻk`^.my%>5 M^ #+͸}m%̇P5RܞHk(';c. W9$ 9Sp Aq2 an3&ªz!aQ" PƜN:僤T;aĤX B0`uފڅF2v*ljn\];׫0tLzk0;޾j)ULό8{A _ xzх reX0ցJ<.{ u*$EX @Ǖk)ݫi$vxAױz '[lDL5Z~Y!.3 9z7 U3͵Yٓ] BzQ[$ ?#| KhGsvHKhRTU3m}Xe`Hړ;Ϛ7H>)oS^!l&ٶ1>DY,zφ=Keh)mĶzxfK%`0ip*ePp(2+<~iXpVL(H4kre,;Mty̓~m@BLtT&,YMA^!T՝r~&GholDx ]⎇ME"C'[<l"f&-a[OO;$nqV,$%{ӫ*6Rf&#hdbs);roSØp#j q6P-C?Mۯ`ffyGI@7{t'Ia:16GNNȓ1SF07 n7똗gVcgcGDюVgy\/6o\0ws* +)5ًKeks_yr 1V) <~=mewlU0<̅rJmkSâZy,zKIG;k;o/)`4.؟ hFǾKK -\A⠆e4F=c5C/8@x?vUMѰIXQy@+[ :mW0zWZvqYJE(E?3᭠h.̦!EU/K|x1aB-،DJ'wA+~ +3ߨOۿXVfZAWfcIKJK_8dW]DI)2ܠv,X{F( URXFQn]NI km77 L^%PeMʞE,RȪG Õq TOg2ڹge+GȘǷݾtmhqBH\++Z%@h}f<>Jo?#ߩE&7PfTMWPUk:216􇮖 쁼8b LZae< EJltWTh_ DJI|tHו:FF7K:;4qG>L{3a2 %,1L-qDž!Xշ:51eZ)i?k^,l/ ?(:aa3Lp fo{XS"q$+u$zG}yas^ፓ3S>0zڧw9tfpZ9L"dv ;KR=!5E دSNEFl sH[Yj{d} 5Ph),0ouWA_RB_}^\ v~A}k0ǯ?E#W(KﲇN<9#z%o!D>L荌N9+؍ӕN/<#Qd `{x~o?^|W,)H4C)䟭r{XD|;J/߶\ʪR.1[g!QǘukјtiV= teUybN?4Կ z$2X )Ҏ7BRcCPd4Ol"4=:=[vF7Fb|Y̲1`*R3#ǥ̴&PQ/SVbe䐏4 4^ݔ(Lk'hB? d,_pǴU=tim*0"9A2qTqh!F){[~$Az ) c]n7%"\B(*FQr^Dpr k:ۊ3 DcM7H|oEN)h2d'FF%2C)6yJbf9i'dpWi.,tNz-!rZeRxUZ17% 95̻(ոZaR9R={+K[톶 +rdLQZ'y_WkM$؝L[ͬ{U@z.Np8 s)\FWI-xdy[̱jבRay׉soGFOE9 &z[d<,-}6k3ᑴ[Hmr|ؠf s6NР oiGq-%ޢ׉@c%GUvo=bJr@gY^V7-Jȭ0^6ye V" EB '^٢Y!`aY0{y!A |Wt.c 0DJHXrGRÃqː֯(>#v쌉Ha"KpقZ%ĕ^o/D %ٱZ'h X_9k,&@{7E̖x~BD5FzRȫy OGf XQC^;ϐfs$L3e@8MnVW7Zҗ?'<M-Ɩ3hi2ska1cB8 Nҗ:}9:CyJx)4M!/.zw֭;x.vBhq.i3zEDQ>=.'*-Q/ @w܋ 2z8ו[]bX*:0+FYκ~Æ)!>lV~,텅14O9gn6"Q{y::Y_හRCo_GwMDgԦ#~ZsA[i%W̢'q#lM9WiX&~u~|'`ZӦѓ&+pi$(vپwíwiwxy><ʵ &{Ux+)8f1QQ?/#UAJTt?mgMDh4GxƥzASo3g楔ݲɞb깓Ǽi OFI$#t77Y}qFzW?OMWz^2RJb4=C MvcU,_P#=vkM 1I`ͦڙ#j1 Yʾ9DB\:%?&]L$r7? Ayd.cLg];/B.4Bl@@SA*ϬSJ%])Elzwwu_*d=5VN)~2w(NSjjGAGǯj2ξd[{Ð% Ȝ"jqӢ" ;U?7!70vdtO"أoO +ɸe˫ѝܒw|M,ipB6!*ֵ j+7g%ӱOBhNm$KڙŧM8FHiim^mV-b1Y~\x ճ>^%rvov;ԭ;#RSr-H/Z}ΔE@zϑ%C/GgyUQX*B|b7h֐;Yh~EJp&|R}JlsF BHU.B!+Ϣ Xz_PEHW[] z܃"u':7;.9 Y+vOpUaFdIS81wW~bo就$q'D^y\P2| Q2I R B3%^A=){=,&j YGF>1 qjdst\W##?8W{C MBYYs(h= #7^߻ x ׎X+DCWq4yb=9.O[XF9T~cLf4˃zX2 I,h PlP|'Gvo|)0w;y DL4?ڶBր̢"#ϻ@[-߁Ÿ,Ѧ4t֙i,+(QU[H\dK;D_,el3Lǯ'`ŚnuJ{U P'=|s$?Պke"Ac_:@(r9WaP=]wr:nu4,c;-mQ5ߺ ƀ=&@RdYM>gw;yIp¹ǐ5w 4pYPۆu-O [ #xDעnx{) c{4cI~vC\V0[ no05[I;FX<;˜2-vq#ȭAN4䶃gٗ\~ de Z(wJnX@[3yX`tC(եaF3Dl /_PJA_HjQym7ny7Wqqpjva-yῳvk>E߇:s}6" Jm+q@oFbZ肙xbG{ʐ 8V^|$!\=drf|9 1u,!z)ɥ [贞/j|i;<NͯWyuS@ڇҕ] 0-H%ج#6_bYP?Ymcho.!}m\mq$i([kp=h|bೲ-u5b,ua-} ɽZ҂ /Piˁ9MD&񿎀'NWE~.Lv0.byX2TH5Π|`NX'-HO"`8י+. *#]>V# #iS;d|f_H3Nru%N@dˇ%\ĜnY>6d)Ho~$$"+ Vd(ŐxRM96Շo:3E@Tt  ‚;Onuڰ*C@1&J2]V*mrnjiY*]T^sL[I$uj} k3d/M g'yHĘ2y/gkL|C@YJ ߿bonYh eiVH3oQB#3]ņҤx Q_b'@=x1&'ahzzrFJT$'(}Or[T5V&R? n$j(}2>cm:79JɀsP^=,QNPvz܅lvT,.>VwϮ1HYke`-FX3\S7> ZyIΣ,nFM.Ao8w;vnO 1DLw.Xһm TbԆ[=0)9of5[)p]'&꽝a}_zh ;zwJUm 4!.ݨƍ)xD^x<c,lP)|;J|.J@M! cjO%lr+UᅉڠHO Ry^!j]ǭI HG7:$ٛ4={\~Az)ԏU컾kp&7ht.(I?{ZYMM>5 sN}.@ܲ쒑XM*+LwY͜Q:L}IeD&pR!]NB^[pYSҗC3+:3' Cx̚^Pvh e`>`'Fs(%y+H*R/`vrrAv%;/^^XovcMa W%B7|@?ɦoxeM^yFf(Nis cv FqSFyr)L#D ~vY^1Ds4=ХlvM2[w_J<[~<(w|wPZZ+Ū~ _3[UtNJ%#Wc5 D僧݉JMO bloIqͲpAVۻbua6lu4# (nJ{ZV'odLAg^QYݤ }aI#S`¾ fEc" \y9ɦ/J\_ǰ oge!6 uJ'yFEw?&J-6x~bmn`h 8sx ZݵWS>ncR~NLR,FPJ$OTd9!Сd齫<>d9Î-Gnmp[RrPhE.HI a17ZݖS,J lVfYl'Ns>Ounx?m΢E m)#UF4-^Z3Z:EfaY!}[\:#Ӌ A0+l2bMo9t, V17ɠ%H_}4z ~9ܗĒ>GhZMYml4ںy3@/ɃI:VΓ8 ۨ`E{pwrSfy4C'/|/vmKպSt2m80ƭ^N ֻB7u{c@4zmHBO Bbn?S./ PڠlTq۳2(O:s7%PY %+s^/9UY z7OGeZn{ZPdPMy(@E7 VtI4sȩlg\ #lFEV{@I Qk!R ſQnY.Me[tTA6g] MT|TK~g-HaFk yyUnǘWaP6&{ 0T %xL5 TP(5@-ީl1=1foQ< 3 {1ϦP=Qքd?@YUIfx4Mp@j^wn`Uzi>dO_u$u44c]e :>SM_ 7Yg*ID>m`=u Ш:\գ$QtV;Wт^Ax)nމy=b3j3+ntr5{!/ hJ=o&Z !{7 fբGMA#xE]fh5H Ez ٟDyV[͓۝y' Y*\YjOFDD8vuڏ5G6! d]IH d^OJk}X(&7; c89iA{g/3Lܸj6&YFdOb F{W0 '_ F/2"Q eal-.X,UI;n9ǧ !YpU (}1uW5#&JN^TfKZڴr_E,dk-)3cS`?"DnMg58v45܈ed;=RkCrj0,&ʹ$HRCPDsYa'9dhst70#lXk9R*?f]C!g/A=y9~~ tYTR)[Hrm0 T $j :DG蛫Fs[8f{$$T{k}6z1 0vw )դudTǥʪ7We~m^b[d] w p# *8xȄtٛ0g:H$%@JF| wy^qLLe߁7mG6eu9 S%ˁǤ S G%'>YUIM/a+zqA2 15~9/͞Zy}T|B&Mv$Ȗա%>tABN&oSMBsLS5b|c\hya{pn2X;}cɜ \͠$HMD | Gl.c'gLj(\m6!UU:)Q6 8k8_SŪ:27v_}mf[M$Ԭ\p?U)߾'|fGf< - a5D]aP;TüN8Z, Bɕm(ekը#'x74܂;@0\ӴM,#z]5̇JlYl7mL0RetO3 ahs,A6Wx PĐX5Ƣ q5: L5$&ݑ`:\BCڍJV: uRgjz h70RÌNQϦ_Bȧ?UĚ&ú QSV$=&+@*2KcTV9OIuxCO8ޛ8Sv&bpq ~Eꃼg&+$  nAv. %7YY tpHA.By@X5|vЪ\Czts5-灱߫<9˛EFRhY Wrm" ʜ8ؐq[.F꬙$̈#^YF;s%-^U{qhzGӘfjd]8_l=*8{D?0ܙ?5W#F祲&@94P4^ 8$5&5;i.r*VB8N_g#ь;'4遊.h IR'iۜGEBopէ֨g?`kwW+Az橜3>66$,xHݧ^DJ99'Ph%4D ⵖ1nG3jF=*~}(N}BY>Σ b?n+6yYpCgo ߢeӾuhߪͼ`|N=Mm/5fWPkO1Rz"FC^!My{t&xz9 u/C s C!qOK)u#]NIs5fW|#-x?@}ITjb[e~;ubNi.-?oĪ^ ȉ]"P#y׏FT \&%Ŏz $!%]+Xy=i@ji\I3NK~I[h;CLEg2U}^$xYvU"?^d2ȂgD*ܹUbJlfRڋH"O_M~+^a7;}!," m\`rГ, $3Wr c3?kvA<޵Ve 7@Lk{~')B{6*F̾R9)F1G_{|ͫS*Gn5P7omj#m[2ƾ6*q6S G'ȱ ds"# dVJ{/e}VB_YSaѧLݯ{+Wx|X#,.WPOAÃPDFȇT.`tU[=在>g˲w3x#u+wF co)]-[w>, .F{]&bNASv:?zxGSl/$R⌅]N91嵙sbHrhrtcSqpA?n@ ġ|`t`zA`͍/.U#W6}d[KuS:Ϲ::`4f"lx.yekfO-R8z_C j/"@9 |/?{4&!Wwkq'.gV˿qխj啝A(%(KˊΛs}d 77t6_}j֗~tҋFQ @;C pM4U7s!>&`t\ϏDg8 Η8&SOr iU9{6,=߮{9;WuҨI ȝUiQ oC(jv}s?ia.9v9 g*'6#[po0L ,Wy%xE< }bDͳԲP<0oIA|Ԧ׬{A[A2P:"0n+SEsKF_b]Ź@ny"\<Ԯ,$˝3oq_x$ohu\>)Z 'n~OZڱLUumK*l]:ج/ҘВ^(} m3!QпwRxBs1 %g[rH޾-i>lG!dGMCA/9@< ɰ H<g|.s_dÉ|A zG\͍y9=- $҃'-S})3p`PBb<_ireaCj"9Qگ,$L YMiWwE+BO;l=?.6ePPM!^fP}&4o8IdX*W> $JɼL}ꖤx6c#oBqReZ+pa9ϫb~ZFlƧ"ϙ]}Y)pԐ!g) r c\lΘLuUQ2syђn?TS,DŽQw+GUG 0~$[zk)KuJZ|:dKi/:jJCmVBhwk 9sNV;? mC^5eC]ڵʷpkm64۹^W)E ~7cJke?ɋT_T7I.vJiFÚXD7EA^e;} v"Y[Q6*wBx)>T[e@li1ɽ4{kz?UXxnJ/(\6M퀡(N2&'<'#'5KnQA>) ˩/ħ?3bCZjӕ}qlUmHߨ{@\n4a}uv-dW7q}7WHep2$rdW5̢#;yfiay,ܭ{Xd-0bIi:u>∢yf߃q2gVbiX h=eHDώSnkQ9bA#ݚj~4BP6O(-o[Z.얙ZmJ]UEр ?1i}s~F߂V8L/{K OR @USj1! I.vW).5w I4{S=U5KDzΦ]Z\`m 져\a@uؑHp/j?9(UO1o@YS%Mwg^ =-WÕ˸ݨ 9l*YHIV-Ns?;d`SW"izqoW$ris9"yh:Xl#Um ) 9\ N ͍Jz n:%ŜyiE GJ F#dDn@X"g#N },IGIw2htQ Myӑ0X1v͐IC%uDdN68"{tԄ, sڜ-?8hjQ67$ɎP#?\.R U}2x@;_Ժ"9>!x ,Hto:s_u˦P$k\4lܬIoϚDzPΓ $PEch)oŭݖnQdXkf2=Ҡ ~'1W^?VT["7f"&q C$+oB? #캒b%\ dCVd  Ҫs}_$$ٚ1|[B9y̮~wT )(΋+o~$Dz=Qu"[bjk@DY_|Әu),:-gOBd'0Z\ mݵ\w keC'}jܦxs6A_\YNV_tB@}Q8oxG3^O`˟E,3\/#y7fdI1ɋt?l3}ǤÓǻDq:5L^yLنTFѭxhcw.M(p ]jm-2UP_3)61W)LSw"fhJ+=ޜJ7q2 @`l3<=vUGٔ,J~RHBr3-VOMP$)QR#Bw?+ClI?(27 ;Uf_(+S14CKYmA'#DKyBE/}7ǘ{6F0廓Ģ/Y^~a6:&!m D}q PʕctzɵXzw5Bq} y51TZp%;<(r$QPC=?&pG{oGpaUz"fFn1K%CӸ\c:=ϙAw(^-F%x(s_TGHLXwCT/<` 9JOVMJ!"=-Aڈq-fn۶˖%h`F6\ݗ/I e7I IK8c:K{҉c[̭t,sSj<pa.^`c@6,!z~긝W/ϤhH):?HvQ\'U+?Ψ\$恅r_Ve|PtD5#Y?04Rƶ0 ,51s:j#Bvc_QCɐL&u,pdž܋ i9tm[|!IS\2$&6s 4Z9 f eJBK1l Ҧ4`Sk`%ο<Y`1*A 5 aCќ&$@Lnw(!_$9pԘ+~9 q^a_ߌJ.JDq7H2[">F?Ie]E}5OF K*[]C2Qf 1b]xG`,(E[ZH ׉: V"(|0YbEIH)4 1hNhKxθWI=q,kqxfeA٩'9cGQ;UԎmLh"o 3{c\Ɓ{K\_q.NO3NfꢋXgD2>ֺS6ĉ͚JEu8#&6FEr5p}Pf $L:\ǏSf`'ǘETa]iWQJPh/ 9}:jcUy2(N4dxϣck_j6Rۨ|@e"EaV攻,a"|!>!|iCK] j>b;pgkēwC$sp: = o8 =hhlFYs@6t%_xiczhn#4{y.Gc cT̫@Up$pqU,ROxQ %!!?9Lh-Z2vՏ&[oGC]"Q}6SO- Ma3wduY-*(t`Pz.1e̼&K<<.}(ͰpO HFL|kKR ~gx,;z]>g Geah[hrā{*m;(=oi%AHqV5 2ѪMki })%?9<9}S3;\0T}<ĉ7Դa|ay1@䎰6|aU!GIMtNn\z_#)z/=+,xKN[:[5ɷjު6xo۠ b^+|H}T\ 's{*N47;qk3 i+|pg{4ߖ*MRHs46j"r{qyv<'*2PC KG#DZ5Pޔï YZ