sssd-common-1.13.3-57.el6_9$>EC)T-S&苟><T?Dd  8" Nbrr r xr @r  rr  r"r$r' '@r)*_,X_5_6P6X6l(6869=:>? BGDrH rIrXYZX[d\r]lr^>ḅde f#l%@Csssd-common1.13.357.el6_9Common files for the SSSDCommon files for the SSSD. The common package includes all the files needed to run a particular back end, however, the back ends are packaged in separate subpackages such as sssd-ldap.Yc1bl.rdu2.centos.org1eCentOSGPLv3+CentOS BuildSystem Applications/Systemhttp://fedorahosted.org/sssd/linuxx86_64/sbin/chkconfig --add sssd # sssd-1.8.0-24 changed the startup order # We need to make sure this is always updated on # clients /sbin/chkconfig sssd resetpriorities if [ $1 -ge 1 ] ; then restorecon -R %{mcachepath} 2>/dev/null || : fiif [ $1 -eq 0 ] ; then /sbin/service sssd stop 2>&1 > /dev/null /sbin/chkconfig --del sssd fi TP^uF;`NXRh7x1] ֈDH&(8"H#hKuCp%|v*RJ1 G?_68qH(sS Z B   E  @# ( ylh 9T   L? (ZuX큤AAAA큤A큤A큤AAAAA큤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@@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-1.13.3-57.el6_9.src.rpmlibsss_sudolibsss_sudo-devellibsss_autofslibsss_autofs.so()(64bit)libsss_autofs.so(EXPORTED)(64bit)libsss_cert.so()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_semanage.so()(64bit)libsss_simple.so()(64bit)libsss_sudo.so()(64bit)libsss_sudo.so(EXPORTED)(64bit)libsss_util.so()(64bit)memberof.so()(64bit)sss.so()(64bit)sssd-commonsssd-common(x86-64)       @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ libldb(x86-64)libtdb(x86-64)sssd-client(x86-64)libsss_idmap(x86-64)libini_configinitscriptschkconfiginitscriptschkconfiginitscriptschkconfigrpmlib(VersionedDependencies)/bin/sh/bin/shrpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)/bin/shlibbasicobjects.so.0()(64bit)libcares.so.2()(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libglib-2.0.so.0()(64bit)libini_config.so.5()(64bit)libini_config.so.5(INI_CONFIG_1.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkeyutils.so.1(KEYUTILS_0.3)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.1()(64bit)libldb.so.1(LDB_0.9.10)(64bit)libnl-3.so.200()(64bit)libnl-route-3.so.200()(64bit)libnspr4.so()(64bit)libnss3.so()(64bit)libnss3.so(NSS_3.10)(64bit)libnss3.so(NSS_3.12.5)(64bit)libnss3.so(NSS_3.12)(64bit)libnss3.so(NSS_3.2)(64bit)libnss3.so(NSS_3.3)(64bit)libnss3.so(NSS_3.4)(64bit)libnss3.so(NSS_3.6)(64bit)libnss3.so(NSS_3.8)(64bit)libnss3.so(NSS_3.9)(64bit)libnssutil3.so()(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpcre.so.0()(64bit)libplc4.so()(64bit)libplds4.so()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.12)(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libselinux.so.1()(64bit)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsmime3.so()(64bit)libssl3.so()(64bit)libsss_cert.so()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_idmap.so.0(SSS_IDMAP_0.5)(64bit)libsss_krb5_common.so()(64bit)libsss_util.so()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)rtld(GNU_HASH)rpmlib(PayloadIsXz)1.1.131.1.31.13.3-57.el6_91.13.3-57.el6_91.1.0-11.el6_8.13.0.3-14.6.0-14.0-13.0.4-15.2-1selinux-policysssd3.7.19-1661.10.0-8.el6_9.beta24.8.0YyX6@X6@XS@XOXJXGXF@X@X6@X6@X-X!@X!@X&X X X WWWW@W@W_@W_@WWW@W@W@W@Wi,@WYZ@WPWPV@VJVJVV@VՄ@VՄ@V@V&@V=@V=@V@V@V@VvV%@V%@V%@VVVVVpVii@V\:@VXEVV@VV@VV@VMV2 @Vf@Vf@Vf@UAUUuUn@UmUjUcUcUUUUUJ@UB@UB@U@U?v@U>$U8U.RU.RU-@U-@U-@U-@UF@UF@UUUUUU U U U@U@U@U@T9TTTTTTT@T@T~T~Tk4Tk4T$TTT@SvSvSvS%@S0S<@S<@S<@SSSSSSS/S/S;@SFS@S@S@S@S@S@Si@S@SSS!@SsZSpSNpS 4@S 4@RRRRRRfhRD!R1R%@R @R @RR|R|R|R|R|RRRRRRRRRRRRR@R@R@R@R@R@R@R@R@R@Q@Q@QQ*@Q?@QQvwQkQIQ5@Q0@Q']Q @PPPP@P@P@P-P@P@P@PDPDPDPDP[PPPPP@P@P@P@PPPPPPPP @P @P @P @P @P @Pf@PPPPP @P @P @P @P@P@P@PPPPPPPP@P@P@PpPpPpP@P@P@P@P@P@P@PP@PP@P@P@P@P@PPXPP{P{P{Pz@PqnPl(PaP`K@P#@Oĺ@O"O"OOO@OO~O@OOO@O@Ou@Ou@Oc+@O]@OYOOdON@OLOLOLOLOLO;@O5O1@ObN@NNNN@NNNj@NN$@N$@NN@N@Nx@Nm@Ng\N[@NTN?N:N:N:NNN|@M{@M{@Mߒ@M@M۝M۝M@MM@M@M3@MM>M>M@MM@M@Mx@MM=M=MwkMwkMv@MtMtMc@Mc@MbSM_MQ0@MJMGMA^@MA^@MA^@M.@M9L!L@L@L@L@LNLNL@L@LA@L@Lk@LYV@LRLI@L7@L(L_LLGKj@KK@KK@KK[K@KK~}@K]KY@KO@KKK/c@K+nK"4@KJJ@JJJkJJ@JJp9JlE@J?r@J0J,@IcIcIzI)@I)@I)@IV@IV@I@I@III@Jakub Hrozek - 1.13.3-57Lukas Slebodnik - 1.13.3-56Lukas Slebodnik - 1.13.3-55Jakub Hrozek - 1.13.3-54Jakub Hrozek - 1.13.3-53Jakub Hrozek - 1.13.3-52Jakub Hrozek - 1.13.3-51Jakub Hrozek - 1.13.3-50Jakub Hrozek - 1.13.3-49Jakub Hrozek - 1.13.3-48Jakub Hrozek - 1.13.3-47Jakub Hrozek - 1.13.3-46Jakub Hrozek - 1.13.3-45Jakub Hrozek - 1.13.3-44Jakub Hrozek - 1.13.3-43Jakub Hrozek - 1.13.3-42Jakub Hrozek - 1.13.3-41Jakub Hrozek - 1.13.3-40Jakub Hrozek - 1.13.3-39Jakub Hrozek - 1.13.3-38Jakub Hrozek - 1.13.3-37Jakub Hrozek - 1.13.3-36Jakub Hrozek - 1.13.3-35Jakub Hrozek - 1.13.3-34Jakub Hrozek - 1.13.3-33Jakub Hrozek - 1.13.3-32Jakub Hrozek - 1.13.3-31Jakub Hrozek - 1.13.3-30Jakub Hrozek - 1.13.3-29Jakub Hrozek - 1.13.3-28Jakub Hrozek - 1.13.3-27Jakub Hrozek - 1.13.3-26Jakub Hrozek - 1.13.3-25Jakub Hrozek - 1.13.3-24Jakub Hrozek - 1.13.3-23Jakub Hrozek - 1.13.3-22Jakub Hrozek - 1.13.3-21Jakub Hrozek - 1.13.3-20Jakub Hrozek - 1.13.3-19Jakub Hrozek - 1.13.3-18Jakub Hrozek - 1.13.3-17Jakub Hrozek - 1.13.3-16Jakub Hrozek - 1.13.3-15Jakub Hrozek - 1.13.3-14Jakub Hrozek - 1.13.3-14Jakub Hrozek - 1.13.3-13Jakub Hrozek - 1.13.3-12Jakub Hrozek - 1.13.3-11Jakub Hrozek - 1.13.3-10Jakub Hrozek - 1.13.3-9Jakub Hrozek - 1.13.3-8Jakub Hrozek - 1.13.3-7Jakub Hrozek - 1.13.3-6Jakub Hrozek - 1.13.3-5Jakub Hrozek - 1.13.3-4Jakub Hrozek - 1.13.3-3Jakub Hrozek - 1.13.3-2Jakub Hrozek - 1.13.3-1Jakub Hrozek - 1.13.2-7Jakub Hrozek - 1.13.2-6Jakub Hrozek - 1.13.2-5Jakub Hrozek - 1.13.2-4Jakub Hrozek - 1.13.2-3Jakub Hrozek - 1.13.2-2Jakub Hrozek - 1.13.2-1Jakub Hrozek - 1.13.1-1Jakub Hrozek - 1.12.4-51Jakub Hrozek - 1.12.4-50Jakub Hrozek - 1.12.4-49Jakub Hrozek - 1.12.4-48Jakub Hrozek - 1.12.4-47Jakub Hrozek - 1.12.4-46Jakub Hrozek - 1.12.4-45Jakub Hrozek - 1.12.4-44Jakub Hrozek - 1.12.4-43Jakub Hrozek - 1.12.4-42Jakub Hrozek - 1.12.4-41Jakub Hrozek - 1.12.4-40Jakub Hrozek - 1.12.4-39Jakub Hrozek - 1.12.4-38Jakub Hrozek - 1.12.4-37Jakub Hrozek - 1.12.4-36Jakub Hrozek - 1.12.4-35Jakub Hrozek - 1.12.4-34Jakub Hrozek - 1.12.4-33Jakub Hrozek - 1.12.4-32Jakub Hrozek - 1.12.4-31Jakub Hrozek - 1.12.4-30Jakub Hrozek - 1.12.4-29Jakub Hrozek - 1.12.4-28Jakub Hrozek - 1.12.4-27Jakub Hrozek - 1.12.4-26Jakub Hrozek - 1.12.4-25Jakub Hrozek - 1.12.4-24Jakub Hrozek - 1.12.4-23Jakub Hrozek - 1.12.4-22Jakub Hrozek - 1.12.4-21Jakub Hrozek - 1.12.4-20Jakub Hrozek - 1.12.4-19Jakub Hrozek - 1.12.4-18Jakub Hrozek - 1.12.4-17Jakub Hrozek - 1.12.4-16Jakub Hrozek - 1.12.4-15Jakub Hrozek - 1.12.4-14Jakub Hrozek - 1.12.4-13Jakub Hrozek - 1.12.4-12Jakub Hrozek - 1.12.4-11Jakub Hrozek - 1.12.4-10Jakub Hrozek - 1.12.4-9Jakub Hrozek - 1.12.4-8Jakub Hrozek - 1.12.4-7Jakub Hrozek - 1.12.4-6Jakub Hrozek - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Jakub Hrozek - 1.12.4-2Jakub Hrozek - 1.12.4-1Jakub Hrozek - 1.11.6-33Jakub Hrozek - 1.11.6-32Jakub Hrozek - 1.11.6-31Jakub Hrozek - 1.11.6-30Jakub Hrozek - 1.11.6-29Jakub Hrozek - 1.11.6-28Jakub Hrozek - 1.11.6-27Jakub Hrozek - 1.11.6-26Jakub Hrozek - 1.11.6-25Jakub Hrozek - 1.11.6-24Jakub Hrozek - 1.11.6-23Jakub Hrozek - 1.11.6-22Jakub Hrozek - 1.11.6-21Jakub Hrozek - 1.11.6-20Jakub Hrozek - 1.11.6-19Jakub Hrozek - 1.11.6-18Jakub Hrozek - 1.11.6-17Jakub Hrozek - 1.11.6-16Jakub Hrozek - 1.11.6-15Jakub Hrozek - 1.11.6-14Jakub Hrozek - 1.11.6-13Jakub Hrozek - 1.11.6-12Jakub Hrozek - 1.11.6-11Jakub Hrozek - 1.11.6-10Jakub Hrozek - 1.11.6-9Jakub Hrozek - 1.11.6-8Jakub Hrozek - 1.11.6-7Jakub Hrozek - 1.11.6-6Jakub Hrozek - 1.11.6-5Jakub Hrozek - 1.11.6-4Jakub Hrozek - 1.11.6-3Jakub Hrozek - 1.11.6-2Jakub Hrozek - 1.11.6-1Jakub Hrozek - 1.11.5.1-4Jakub Hrozek - 1.11.5.1-3Jakub Hrozek - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Jakub Hrozek - 1.9.2-134Jakub Hrozek - 1.9.2-133Jakub Hrozek - 1.9.2-132Jakub Hrozek - 1.9.2-131Jakub Hrozek - 1.9.2-130Jakub Hrozek - 1.9.2-129Jakub Hrozek - 1.9.2-128Jakub Hrozek - 1.9.2-127Jakub Hrozek - 1.9.2-126Jakub Hrozek - 1.9.2-125Jakub Hrozek - 1.9.2-124Jakub Hrozek - 1.9.2-123Jakub Hrozek - 1.9.2-122Jakub Hrozek - 1.9.2-121Jakub Hrozek - 1.9.2-120Jakub Hrozek - 1.9.2-119Jakub Hrozek - 1.9.2-118Jakub Hrozek - 1.9.2-117Jakub Hrozek - 1.9.2-116Jakub Hrozek - 1.9.2-115Jakub Hrozek - 1.9.2-114Jakub Hrozek - 1.9.2-113Jakub Hrozek - 1.9.2-112Jakub Hrozek - 1.9.2-111Jakub Hrozek - 1.9.2-110Jakub Hrozek - 1.9.2-109Jakub Hrozek - 1.9.2-108Jakub Hrozek - 1.9.2-107Jakub Hrozek - 1.9.2-106Jakub Hrozek - 1.9.2-105Jakub Hrozek - 1.9.2-104Jakub Hrozek - 1.9.2-103Jakub Hrozek - 1.9.2-102Jakub Hrozek - 1.9.2-101Jakub Hrozek - 1.9.2-100Jakub Hrozek - 1.9.2-99Jakub Hrozek - 1.9.2-98Jakub Hrozek - 1.9.2-97Jakub Hrozek - 1.9.2-96Jakub Hrozek - 1.9.2-95Jakub Hrozek - 1.9.2-94Jakub Hrozek - 1.9.2-93Jakub Hrozek - 1.9.2-92Jakub Hrozek - 1.9.2-91Jakub Hrozek - 1.9.2-90Jakub Hrozek - 1.9.2-89Jakub Hrozek - 1.9.2-88Jakub Hrozek - 1.9.2-87Jakub Hrozek - 1.9.2-86Jakub Hrozek - 1.9.2-85Jakub Hrozek - 1.9.2-84Jakub Hrozek - 1.9.2-83Jakub Hrozek - 1.9.2-82Jakub Hrozek - 1.9.2-81Jakub Hrozek - 1.9.2-80Jakub Hrozek - 1.9.2-79Jakub Hrozek - 1.9.2-78Jakub Hrozek - 1.9.2-77Jakub Hrozek - 1.9.2-76Jakub Hrozek - 1.9.2-75Jakub Hrozek - 1.9.2-74Jakub Hrozek - 1.9.2-73Jakub Hrozek - 1.9.2-72Jakub Hrozek - 1.9.2-71Jakub Hrozek - 1.9.2-70Jakub Hrozek - 1.9.2-69Jakub Hrozek - 1.9.2-68Jakub Hrozek - 1.9.2-67Jakub Hrozek - 1.9.2-66Jakub Hrozek - 1.9.2-65Jakub Hrozek - 1.9.2-64Jakub Hrozek - 1.9.2-63Jakub Hrozek - 1.9.2-62Jakub Hrozek - 1.9.2-61Jakub Hrozek - 1.9.2-60Jakub Hrozek - 1.9.2-59Jakub Hrozek - 1.9.2-58Jakub Hrozek - 1.9.2-57Jakub Hrozek - 1.9.2-56Jakub Hrozek - 1.9.2-55Jakub Hrozek - 1.9.2-54Jakub Hrozek - 1.9.2-53Jakub Hrozek - 1.9.2-52Jakub Hrozek - 1.9.2-51Jakub Hrozek - 1.9.2-50Jakub Hrozek - 1.9.2-49Jakub Hrozek - 1.9.2-48Jakub Hrozek - 1.9.2-47Jakub Hrozek - 1.9.2-46Jakub Hrozek - 1.9.2-45Jakub Hrozek - 1.9.2-44Jakub Hrozek - 1.9.2-43Jakub Hrozek - 1.9.2-42Jakub Hrozek - 1.9.2-41Jakub Hrozek - 1.9.2-40Jakub Hrozek - 1.9.2-39Jakub Hrozek - 1.9.2-38Jakub Hrozek - 1.9.2-37Jakub Hrozek - 1.9.2-36Jakub Hrozek - 1.9.2-35Jakub Hrozek - 1.9.2-34Jakub Hrozek - 1.9.2-33Jakub Hrozek - 1.9.2-32Jakub Hrozek - 1.9.2-31Jakub Hrozek - 1.9.2-30Jakub Hrozek - 1.9.2-29Jakub Hrozek - 1.9.2-28Jakub Hrozek - 1.9.2-27Jakub Hrozek - 1.9.2-26Jakub Hrozek - 1.9.2-25Jakub Hrozek - 1.9.2-24Jakub Hrozek - 1.9.2-23Jakub Hrozek - 1.9.2-22Jakub Hrozek - 1.9.2-21Jakub Hrozek - 1.9.2-20Jakub Hrozek - 1.9.2-20Jakub Hrozek - 1.9.2-19Jakub Hrozek - 1.9.2-18Jakub Hrozek - 1.9.2-17Jakub Hrozek - 1.9.2-16Jakub Hrozek - 1.9.2-15Jakub Hrozek - 1.9.2-14Jakub Hrozek - 1.9.2-13Jakub Hrozek - 1.9.2-12Jakub Hrozek - 1.9.2-11Jakub Hrozek - 1.9.2-10Jakub Hrozek - 1.9.2-9Jakub Hrozek - 1.9.2-8Jakub Hrozek - 1.9.2-7Jakub Hrozek - 1.9.2-6Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-3Jakub Hrozek - 1.9.0-2Jakub Hrozek - 1.9.0-1.rc1Jakub Hrozek - 1.8.0-33Stephen Gallagher - 1.8.0-32Stephen Gallagher - 1.8.0-31Stephen Gallagher - 1.8.0-30Stephen Gallagher - 1.8.0-29Stephen Gallagher - 1.8.0-28Stephen Gallagher - 1.8.0-27Stephen Gallagher - 1.8.0-26Stephen Gallagher - 1.8.0-25Stephen Gallagher - 1.8.0-24Stephen Gallagher - 1.8.0-23Stephen Gallagher - 1.8.0-22Stephen Gallagher - 1.8.0-21Stephen Gallagher - 1.8.0-20Stephen Gallagher - 1.8.0-18Stephen Gallagher - 1.8.0-17Stephen Gallagher - 1.8.0-15Stephen Gallagher - 1.8.0-12Stephen Gallagher - 1.8.0-11Stephen Gallagher - 1.8.0-10Stephen Gallagher - 1.8.0-9Stephen Gallagher - 1.8.0-8Stephen Gallagher - 1.8.0-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5Stephen Gallagher - 1.8.0-4.beta3Stephen Gallagher - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-2.beta2Stephen Gallagher - 1.5.1-68Stephen Gallagher - 1.5.1-67Stephen Gallagher - 1.5.1-66Stephen Gallagher - 1.5.1-65Stephen Gallagher - 1.5.1-64Stephen Gallagher - 1.5.1-63Stephen Gallagher - 1.5.1-62Stephen Gallagher - 1.5.1-61Stephen Gallagher - 1.5.1-60Stephen Gallagher - 1.5.1-59Stephen Gallagher - 1.5.1-58Stephen Gallagher - 1.5.1-57Stephen Gallagher - 1.5.1-56Stephen Gallagher - 1.5.1-55Stephen Gallagher - 1.5.1-53Stephen Gallagher - 1.5.1-52Stephen Gallagher - 1.5.1-51Stephen Gallagher - 1.5.1-50Stephen Gallagher - 1.5.1-49Stephen Gallagher - 1.5.1-48Stephen Gallagher - 1.5.1-47Stephen Gallagher - 1.5.1-46Stephen Gallagher - 1.5.1-45Stephen Gallagher - 1.5.1-44Stephen Gallagher - 1.5.1-43Stephen Gallagher - 1.5.1-42Stephen Gallagher - 1.5.1-41Stephen Gallagher - 1.5.1-40Stephen Gallagher - 1.5.1-39Stephen Gallagher - 1.5.1-38Stephen Gallagher - 1.5.1-37Stephen Gallagher - 1.5.1-36Stephen Gallagher - 1.5.1-35Stephen Gallagher - 1.5.1-34Stephen Gallagher - 1.5.1-33Stephen Gallagher - 1.5.1-32Stephen Gallagher - 1.5.1-31Stephen Gallagher - 1.5.1-30Stephen Gallagher - 1.5.1-29Stephen Gallagher - 1.5.1-28Stephen Gallagher - 1.5.1-27Stephen Gallagher - 1.5.1-26Stephen Gallagher - 1.5.1-25Stephen Gallagher - 1.5.1-24Stephen Gallagher - 1.5.1-23Stephen Gallagher - 1.5.1-21Stephen Gallagher - 1.5.1-20Stephen Gallagher - 1.5.1-17Stephen Gallagher - 1.5.1-16Stephen Gallagher - 1.5.1-15Stephen Gallagher - 1.5.1-14Stephen Gallagher - 1.5.1-13Stephen Gallagher - 1.5.1-12Stephen Gallagher - 1.5.1-11Stephen Gallagher - 1.5.1-10Stephen Gallagher - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Stephen Gallagher - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.2.1-28.4Stephen Gallagher - 1.2.1-36Stephen Gallagher - 1.2.1-35Stephen Gallagher - 1.2.1-28.3Stephen Gallagher - 1.2.1-34Stephen Gallagher - 1.2.1-28.2Stephen Gallagher - 1.2.1-33Stephen Gallagher - 1.2.1-28.1Stephen Gallagher - 1.2.1-32Stephen Gallagher - 1.2.1-29Stephen Gallagher - 1.2.1-28Stephen Gallagher - 1.2.1-27Stephen Gallagher - 1.2.1-26Stephen Gallagher - 1.2.1-23Stephen Gallagher - 1.2.1-21Stephen Gallagher - 1.2.1-20Stephen Gallagher - 1.2.1-19Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-14Stephen Gallagher - 1.2.0-13Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11.1Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#1473005 - The originalMemberOf attribute disappears from the cache, causing intermittent HBAC issues- Resolves: rhbz#1404697 - SSSD does not skip GPO if no gpcFunctionalityVersion present - Resolves: rhbz#1374813 - SSSD fails to process GPO from Active Directory- Resolves: rhbz#1415785 - ldap_child does not remove temporary files when it's killed with SIGTERM- Apply several more smartcard-related patches. - Related: rhbz#1300421 - Screen locks and smart card is removed - must show a message to insert the correct smartcard- Resolves: rhbz#1400643 - sssd prevents sudo from getting data from LDAP- Resolves: rhbz#1393592 - SSH-CERT: always initialize cert_verify_opts- Revert the ding-libs requirement - Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.- Related: rhbz#1369921 - Members of nested netgroups configured in IdM cannot be seen by getent on clients- Require the matching version of ding-libs - Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.- Fix a coverity warning - Related: rhbz#1382395 - sudo: ignore case on case insensitive domains- Resolves: rhbz#1382395 - sudo: ignore case on case insensitive domains- Resolves: rhbz#1369921 - Members of nested netgroups configured in IdM cannot be seen by getent on clients- Resolves: rhbz#1324428 - [RFE] Discover forest's root SID even if subdomains_provider = none- Resolves: rhbz#1367802 - using overides causes segfault in libldb- Resolves: rhbz#1329378 - pam_sss set KRB5CCNAME with sudo logins- Resolves: rhbz#1382603 - autofs map resolution doesn't work offline- Resolves: rhbz#1339986 - [sssd-ldap] man page needs attention- Resolves: rhbz#1321884 - IPA sudo: support the externalUser attribute- Resolves: rhbz#1299994 - ssh client checks only the first certificate on a smartcard when the card has multiple certs - Resolves: rhbz#1300421 - Screen locks and smart card is removed - must show a message to insert the correct smartcard - Resolves: rhbz#1372681 - ssh with Smartcards - skip invalid certificates- Resolves: rhbz#1329648 - Protocol error with IPA on RHEL-6 - Resolves: rhbz#1329647 - IPA view: view name not stored properly with default FreeIPA installation- Resolves: rhbz#1339986 - [sssd-ldap] man page needs attention- Resolves: rhbz#1327272 - local overrides: issues with sub-domain users and mixed case names- Resolves: rhbz#1293168 - Inconsistent user synching between IPA and AD- Resolves: rhbz#1374813 - SSSD fails to process GPO from Active Directory.- Resolves: rhbz#1377782 - sssd is looking at a server in the GC of a subdomain, not the root domain.- Resolves: rhbz#1365218 - SSSD does not fail over to next GC- Resolves: rhbz#1367435 - Intermittent sssd auth failures- Resolves: rhbz#1369079 - sssd runs out of available child slots and starts queuing requests in proxy mode- Resolves: rhbz#1338619 - segmentation fault in sssd after upgrade to sssd-1.13.3-22.el6.x86_64 when upgrading cache- Resolves: rhbz#1324107 - GPO: Access denied after blocking connection to AD.- Resolves: rhbz#1293168 - Inconsistent user synching between IPA and AD- Resolves: rhbz#1340927 - sssd-common requires libnfsidmap- Resolves: rhbz#1340176 - The AD keytab renewal task leaks a file descriptor- Resolves: rhbz#1335400 - In IPA-AD trust environment access is granted to AD user even if the user is disabled on AD.- Resolves: rhbz#1336453 - sssd_be doesn't terminate forked child process if adcli is not installed- Resolves: rhbz#1312062 - sssd does not pass LDAP rules to sudo- Resolves: rhbz#1313940 - SSSD PAM module does not support multiple password prompts (e.g. Password + Token) with sudo- Actually apply patches from previous build - Resolves: rhbz#1313940 - sudorule not working with ipa sudo_provider- Resolves: rhbz#1313940 - sudorule not working with ipa sudo_provider- Resolves: rhbz#1209600 - Getting ERROR (getpwnam() failed): Broken pipe with 1.11.6- Backport of a more minimal dependency patch to avoid changes to AD provider behaviour - Related: rhbz#1264705 - Allow SSSD to notify user of denial due to AD account lockout- Resolves: rhbz#1308939 - After removing certificate from user in IPA and even after sss_cache, FindByCertificate still finds the user- Require a newer selinux-policy to avoid issues when prompting for SC PIN - Related: rhbz#1299066 - smartcard login does not prompt for pin when ocsp checking is enabled (default config)- Resolves: rhbz#1264705 - Allow SSSD to notify user of denial due to AD account lockout- Resolves: rhbz#1259687 - sssd_nss memory usage keeps growing on sssd-1.12.4-47.el6.x86_64 (RHEL6.7) when trying to retrieve non-existing netgroups- Update sssd-ldap man page for the recent ID mapping changes - Related: rhbz#1268902 - SSSD doesn't set the ID mapping range automatically- Resolves: rhbz#1295883 - refresh_expired_interval stops sss_cache from working- Resolves: rhbz#1268902 - SSSD doesn't set the ID mapping range automatically- Resolves: rhbz#1298253 - Screen lock prompts for smartcard user password and not smartcard pin when logged in using smartcard pin- Resolves: rhbz#1292458 - sssd_be AD segfaults on missing A record- Resolves: rhbz#1262981 - sssd dereference processing failed : Input/output error- Resolves: rhbz#1290761 - [RFE] Support Automatic Renewing of Kerberos Host Keytabs- Resolves: rhbz#1244957 - [RFE] SUDO: Support the IPA schema- Resolves: rhbz#1298634 - Cannot retrieve users after upgrade from 1.12 to 1.13- Resolves: rhbz#1287807 - SRV lookup for KDC servers doesn't work- Resolves: rhbz#1273802 - ad_site parameter does not work- Fix memory leak in the NFS plugin - Related: rhbz#1269820 - Rebase SSSD to 1.13.x in RHEL-6.8 - Resolves: rhbz#1296620 - Properly remove OriginalMemberOf attribute in SSSD cache if user has no secondary groups anymore - Resolves: rhbz#1283898 - MAN: Clarify that subdomains always use service discovery- Rebase to 1.13.3 - Remove setuid bit from proxy_child, RHEL-6 doesn't support running SSSD as a non-privileged user - Resolves: rhbz#1269820 - Rebase SSSD to 1.13.x in RHEL-6.8- Don't own files as the SSSD user - Resolves: rhbz#1289482 - warning: user sssd does not exist - using root- Resolves: rhbz#1279971 - groups get deleted from the cache- The p11_child doesn't have to run privileged anymore, remove the setuid bit - Related: rhbz#1270027 - [RFE] Support for smart cards- Resolves: rhbz#1266108 - Check next certificate on smart card if first is not valid - Also enable OCSP checks- Resolves: rhbz#1285852 - sssd: [sysdb_add_user] (0x0400): Error: 17 (File exists)- Silence compilation warnings and Coverity issues - Related: rhbz#1269820 - Rebase SSSD to 1.13.x in RHEL-6.8- Resolves: rhbz#1269820 - Rebase SSSD to 1.13.x in RHEL-6.8 - Squash in packaging review changes by lslebodn@redhat.com- Resolves: rhbz#1269820 - Rebase SSSD to 1.13.x in RHEL-6.8 - The rebase also resolves the following bugzillas: - Resolves: rhbz#1270029 - [RFE] Add a way to lookup users based on CAC identity certificates - Resolves: rhbz#1270027 - [RFE] Support for smart cards - Resolves: rhbz#1269422 - [FEAT] UID and GID mapping on individual clients - Resolves: rhbz#1269421 - [RFE] The fast memory cache should cache initgroups - Resolves: rhbz#1265429 - If the site discovery fails, ad-site option is not taken into account. - Resolves: rhbz#1254193 - Fix for cyclic dependencies between sssd-{krb5,}-common - Resolves: rhbz#1247997 - [IPA/IdM] sudoOrder not honored as expected - Resolves: rhbz#1237142 - [RFE] authenticate against cache in SSSD - Resolves: rhbz#1232632 - Kerberos-based providers other than krb5 do not queue requests - Resolves: rhbz#1227804 - Group members are not turned into ghost entries when the user is purged from the SSSD cache - Resolves: rhbz#1227685 - sssd with ldap backend throws error domain log - Resolves: rhbz#1221365 - [RFE] Support GPOs from different domain controllers - Resolves: rhbz#1215195 - Override for IPA users with login does not list user all groups - Resolves: rhbz#1196204 - sssd cache holding gid values for nss, but not the alpha group name representation - Resolves: rhbz#1194039 - [RFE] User's home directories are not taken from AD when there is an IPA trust with AD- Resolves: rhbz#1266404 - Memory leak / possible DoS with krb auth.- Resolves: rhbz#1264524 - SSSD POSIX attribute check is too strict- Resolves: rhbz#1255285 - cleanup_groups should sanitize dn of groups- Resolves: rhbz#1251349 - sysdb sudo search doesn't escape special characters- Resolves: rhbz#1232738 - Cache is not updated after user is deleted from ldap server- Resolves: rhbz#1227860 - Provide a way to disable the cleanup task - Resolves: rhbz#1227863 - ignore_group_members doesn't work for subdomains- Resolves: rhbz#1226834 - id lookup for non-root domain users doesn't return all groups on first attempt- Resolves: rhbz#1225614 - IPA enumeration provider crashes- Resolves: rhbz#1212610 - sssd ad groups work intermittently- Resolves: rhbz#1215765 - sssd nss responder gets wrong number of secondary groups- Resolves: rhbz#1221358 - SSSD doesn't work with ID mapping and disabled subdomains- Resolves: rhbz#1219844 - Unable to resolve group memberships for AD users when using sssd-1.12.2-58.el7_1.6.x86_64 client in combination with ipa-server-3.0.0-42.el6.x86_64 with AD Trust- Resolves: rhbz#1216094 - /usr/libexec/sssd/selinux_child crashes and gets avc denial when ssh- Include several upstream fixes related to ID views - Resolves: rhbz#1215195 - Override for IPA users with login does not list user all groups - Resolves: rhbz#1213947 - Group resolution is inconsistent with group overrides - Resolves: rhbz#1213822 - Overrides with --login work in second attempt- Resolves: rhbz#1217328 - autofs provider fails when default_domain_suffix and use_fully_qualified_names set- Resolves: rhbz#1212387 - sssd_be segfault id_provider = ad src/providers/ad/ad_gpo.c:843- Resolves: rhbz#1213940 - Overridde with --login fails trusted adusers group membership resolution- Resolves: rhbz#1170910 - SSSD should not fail authentication when only allow rules are used- Resolves: rhbz#1213716 - idoverridegroup for ipa group with --group-name does not work - Resolves: rhbz#1213822 - Overrides with --login work in second attempt- Resolves: rhbz#1212017 - Sudo responder does not respect filter_users and filter_groups- Resolves: rhbz#1203642 - GPO access control looks for computer object in user's domain only- Related: rhbz#1211728 - Only set the selinux context if the context differs from the local one- Package the localauth plugin - Related: rhbz#1168357 - [RFE] Implement localauth plugin for MIT krb5 1.12- Resolves: rhbz#1207720 - id lookup resolves "Domain Local" group and errors appear in domain log- BuildRequire the proper libkrb5 version for correct localauth plugin build - Related: rhbz#1168357 - [RFE] Implement localauth plugin for MIT krb5 1.12- Resolves: rhbz#1194367 - sssd_be dumping core- Resolves: rhbz#1206121 - ldap_access_order=ppolicy: Explicitly mention in manpage that unsupported time specification will lead to sssd denying access- Resolves: rhbz#1205382 - Properly handle AD's binary objectGUID- Resolves: rhbz#1205716 - Installing sssd-common-1.12.4-18.el6 might install with wrong user account (root)- Fix a typo in DEBUG message - Related: rhbz#1173198 - [RFE] Have OpenLDAP lock out ssh keys when account naturally expires- Handle TTL=0 in SRV queries correctly - Resolves: rhbz#1171378 - Read and use the TTL value when resolving a SRV query- Cherry-pick unit test changes from upstream to allow cherry-picking sssd-1-12 patches - Remove unused LDAP provider code to avoid static analyser warnings - Related: rhbz#1168347 - Rebase sssd to 1.12.x- Resolves: rhbz#1206092 - sssd crashes intermittently in GPO code- Resolves: rhbz#1202728 - sssd-ad requires samba3, but ipa-server-trust-ad requires samba4- Resolves: rhbz#1203630 - SSSD doesn't own the GPO cache directory- Fix warning in SELinux code - Handle setups with empty default and no SELinux maps - Related: rhbz#1194302 - With empty ipaselinuxusermapdefault security context on client is staff_u - Resolves: rhbz#1202305 - sssd_be segfault on IPA(when auth with AD trusted domain) client at src/providers/ipa/ipa_s2n_exop.c:1605 - Resolves: rhbz#1201847 - SSSD downloads too much information when fetching information about groups- Fix PAM responder initgroups cache for subdomain users - Log extop failures better - Related: rhbz#1168344 - [RFE] ID Views: Support migration from the sync solution to the trust solution- Fix internal error codes broken when fixing rhbz#1036745 - Related: rhbz#1036745 - [RFE] Allow SSSD to issue shadow expiration warning even if alternate authentication method is used- Resolves: rhbz#1200093 - sssd_nss segfaults if initgroups request is by UPN and doesn't find anything- Fix Coverity warning in ldap_child - Add better debugging - Related: rhbz#1198478 - ccname_file_dummy is not unlinked on error- Resolves: rhbz#1098147 - [RFE] Implement background refresh for users, groups or other cache objects- Resolves: rhbz#1173198 - [RFE] Have OpenLDAP lock out ssh keys when account naturally expires- Initialize a pointer in ldap_child to NULL - Resolves: rhbz#1198478 - ccname_file_dummy is not unlinked on error- Relax the ldb requirement - Related: rhbz#1168347 - Rebase sssd to 1.12.x- Resolves: rhbz#1194302 - With empty ipaselinuxusermapdefault security context on client is staff_u- Resolves: rhbz#1198478 - ccname_file_dummy is not unlinked on error- Resolves: rhbz#1171378 - Read and use the TTL value when resolving a SRV query- Resolves: rhbz#1171378 - Read and use the TTL value when resolving a SRV query - Rebuild against latest krb5, add a versioned BuildRequires - Resolves: rhbz#1168357 - [RFE] Implement localauth plugin for MIT krb5 1.12- Related: rhbz#1036745 - [RFE] Allow SSSD to issue shadow expiration warning even if alternate authentication method is used- Do not mark the selinux_child helper as setuid, we don't support rootless SSSD in 6.7 - Related: rhbz#1168347 - Rebase sssd to 1.12.x- Resolves: rhbz#1168347 - Rebase sssd to 1.12.x - The rebase resolves the following RHEL bugzillas - Resolves: rhbz#1172865 - sssd.conf(5) man page gives bad advice about domains parameter - Resolves: rhbz#1172494 - PAC: krb5_pac_verify failures should not be fatal (backport fix from upstream) - Resolves: rhbz#1171782 - [RFE]: SSSD should preserve case for user uid field - Resolves: rhbz#1170910 - SSSD should not fail authentication when only allow rules are used - Resolves: rhbz#1168377 - [RFE] User's home directories and shells are not taken from AD when there is an IPA trust with AD - Resolves: rhbz#1168363 - [RFE] Add domains= option to pam_sss - Resolves: rhbz#1168344 - [RFE] ID Views: Support migration from the sync solution to the trust solution - Resolves: rhbz#1161564 - [RFE]ad provider dns_discovery_domain option: kerberos discovery is not using this option - Resolves: rhbz#1148582 - inconsistent group information when multiple ad domain sections are configured in sssd - Resolves: rhbz#1140909 - sssd.conf man page missing subdomains_provider ad support - Resolves: rhbz#1139878 - SSSD connection terminated after failing anonymous bind to IBM Tivoli Directory Server - Resolves: rhbz#1135838 - Man sssd-ldap shows parameter ldap_purge_cache_timeout with "Default: 10800 (12 hours)" - Resolves: rhbz#1135432 - Dereference code errors out when dereferencing entries protected by ACIs - Resolves: rhbz#1134942 - sssd does not recognize Windows server 2012 R2's LDAP as AD - Resolves: rhbz#1123291 - automount segfaults in sss_nss_check_header - Resolves: rhbz#1088402 - [RFE] Allow login through SSSD using multiple attributes- Resolves: rhbz#1154042 - RHEL6.6 sssd (1.11) doesn't return all group memberships against an IPA server- Resolves: rhbz#1160713 - TokenGroups for LDAP provider breaks in corner cases- Resolves: rhbz#1141814 - Password expiration policies are not being enforced by SSSD- Resolves: rhbz#1139044 - RHEL6.6 ipa user private group not found- Resolves: rhbz#1103487 - CVE-2014-0249 - sssd: incorrect expansion of group membership when encountering a non-POSIX group- Resolves: rhbz#1125187 - simple_allow_groups does not lookup groups from other AD domains- Resolves: rhbz#1127270 - sssd connect to ipa-server is long- Resolves: rhbz#1130017 - Saving group membership fails if provider is AD, POSIX attributes are used and primary group contains the user as a member- Resolves: rhbz#1111528 - Expired shadow policy user(shadowLastChange=0) is not prompted for password change- Resolves: rhbz#1132361 - use-after-free in dyndns code- Resolves: rhbz#1099290: RFE: Be able to configure sssd to honor openldap account lock to restrict access via ssh key- Use the correct sudo iterator - Related: rhbz#1118336 - sudo: invalid sudoHost filter with asterisk- Add notes about offline mode to sssd.conf - Related: rhbz#1110226 - Requests queued during transition from offline to online mode- Resolves: rhbz#1127278 - Auth fails when space in username is replaced with character set by override_default_whitespace- Resolves: rhbz#1127757 - sssd can't retrieve sudo rules when using the "default_domain_suffix" option- Resolves: rhbz#1127265 - Problems with tokengroups and ldap_group_search_base- Resolves: rhbz#1126636 - RHEL6.6 sssd not running after upgrade- Resolves: rhbz#1128612 - IFP: FQDN lookups are broken- Resolves: rhbz#1118336 - sudo: invalid sudoHost filter with asterisk- Resolves: rhbz#1110226 - Requests queued during transition from offline to online mode- Resolves: rhbz#1122873 - Failover does not always happen from SRV to hostname resolution(via /etc/hosts) - Remove spurious systemctl call on %postun- Resolves: rhbz#1111317 - [RFE] Add option for sssd to replace space with specified character in LDAP group- Resolves: rhbz#1109188 - dereferencing control failure against openldap server- Resolves: rhbz#1084532 - sssd_sudo process segfaults- Resolves: rhbz#1122158 - ad: group membership is empty when id mapping is off and tokengroups are enabled- Resolves: rhbz#1118541 - Floating point exception using ldap- Resolves: rhbz#1042922 - [RFE] Add fallback to sudoRunAs when sudoRunAsUser is not defined and no ldap_sudorule_runasuser mapping has been defined in SSSD- Resolves: rhbz#1120508 - tokengroups do not work with id_provider=ldap- Fix potential NULL dereference in IFP code - Related: rhbz#1110369 - sssd is started before messagebus, making sssd-ifp fail- BuildRequire the latest libini_config - Related: #1051164 - Rebase SSSD to 1.11+ in RHEL6- Resolves: rhbz#1110369 - sssd is started before messagebus, making sssd-ifp fail- Resolves: rhbz#1104145 - public key validator is too strict and does not allow newlines anywhere in the public key string, not even at the end- Rebase to 1.11.6 - Resolves: #1051164 - Rebase SSSD to 1.11+ in RHEL6- Rebuild against new ding-libs - Related: #1051164 - Rebase SSSD to 1.11+ in RHEL6- Backport the InfoPipe patches needed for Sat6 integration - Related: #1051164 - Rebase SSSD to 1.11+ in RHEL6- Resolves: #1085412 - SSSD Crashes when storage experiences high latency- Resolves: #1051164 - Rebase SSSD to 1.11+ in RHEL6Resolves: #1036168 - sssd can't retrieve auto.master when using the "default_domain_suffix"- Resolves: #1065534 - SSSD pam module accepts usernames with leading spaces- Resolves: #1038098 - sssd_nss grows memory footprint when netgroups are requested- Allow combination of proxy id backend and LDAP auth backend - Resolves: #1025813 - SSSD: Allow for custom attributes in RDN when using id_provider = proxy- Inherit UID limits for subdomains - Resolves: #1020905 - Creating system accounts on a IdM client takes up to 10 minutes when AD trust is configured in the IdM.- Do not crash when LDAP disconnects while a search is still in progress - Resolves: #1019979 - sssd_be segfault when authenticating against active directory- More upstream fixes to prevent memcache crashes - Related: #997406 - sssd_nss core dumps under load- Resolves: #1002929 - sssd_be segfaults if IPA dynamic DNS update times out- Make IPA SELinux provider aware of subdomain users - A better version of already committed patch - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws 'sysdb_search_user_by_name failed' error when AD user tries to login via ipa client.- Resolves: #997406 - sssd_nss core dumps under load - Resolves: #984814 - sssd_nss terminated with segmentation fault- Resolves: #1002161 - large number of sudo rules results in error - Unable to create response: Invalid argument- Silence restorecon on clean install - Resolves: #987456 - RHEL6 sssd upgrade restorecon workaround for /var/lib/sss/mc context- Make IPA SELinux provider aware of subdomain users - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws 'sysdb_search_user_by_name failed' error when AD user tries to login via ipa client.- Print password complexity hint when password change fails with constraint violation - Related: #983028 - passwd returns "Authentication token manipulation error" when entering wrong current password- Resolves: #983028 - passwd returns "Authentication token manipulation error" when entering wrong current password- Resolves: #948830 - sssd do too many disk writes causing delay in "getent netgroup allmachines-netgroup" nested netgroups.- Resolves: #984814 - sssd_nss terminated with segmentation fault- Resolves: #966757 - SSSD failover doesn't work if the first DNS server in resolv.conf is unavailable- Resolves: #963235 - sssd_be crashing with nested ldap groups- Apply a forgotten dependency for patch #254 - Related: #916997 - getgrnam / getgrgid for large user groups is too slow due to range retrieval functionality - Add two fixes for better handling of faulty SRV processing - Related: #954275 - sssd fails connect to IPA server during boot when spanning tree is enabled in network router. - Remove enumerate=true from example in man page - Related: #988381 - clarify the disadvantages of enumeration in sssd.conf- Resolves: #914433 - sssd pam write_selinux_login_file creating the temp file for SELinux data failed- Resolves: #916997 - getgrnam / getgrgid for large user groups is too slow due to range retrieval functionality- Resolves: #918394 - sssd etas 99% CPU and runs out of file descriptors when clearing cache- Resolves: #924113 - man sssd-sudo has wrong title- Resolves: #924397 - document what does access_provider=ad do- Use permissive control when adding ghost users - Resolves: #928797 - cyclic group memberships may not work depending on order of operations- Set correct state of SRV servers on resolving error - Resolves: #954275 - sssd fails connect to IPA server during boot when spanning tree is enabled in network router.- Resolves: #954323 - SSSD doesn't display warning for last grace login.- Format patch to configure sysv script differently - RHEL-6 patch(1) apparently doesn't like the output of git format-patch -M -C and doesn't properly copy files on renames - Resolves: #971435 - Enhance sssd init script so that it would source a configuration.- Resolves: #973345 - SSSD service randomly dies- Resolves: #971435 - Enhance sssd init script so that it would source a configuration- Resolves: #961356 - SUDO is not working for users from trusted AD domain- Resolves: #970519 - [RFE] Add support for suppressing group members- Resolves: #976273 - [RFE] Add a new override_homedir expansion for the "original value"- Resolves: #978966 - sudoHost mismatch response is incorrect sometimes- Clarify the min_id/max_id limits further - Resolves: #978994 - SSSD filter out ldap user/group if uid/gid is zero- Resolves: #979046 - sssd_be goes to 99% CPU and causes significant login delays when client is under load- Resolves: #986379 - sss_cache -N/-n should invalidate the hash table in sssd_nss- Resolves: #988525 - sssd fails instead of skipping when a sudo ldap filter returns entries with multiple CNs- Mention that enumeration should be discouraged - Resolves: #988381 - clarify the disadvantages of enumeration in sssd.conf- Call restorecon on memcache files to force the right context on upgrades - Resolves: #987456 - RHEL6 sssd upgrade restorecon workaround for /var/lib/sss/mc context- Resolves: #987479 - libsss_sudo should depend on sudo package with sssd support- Resolves: #951086 - sssd_pam segfaults if sssd_be is stuck- Resolves: #967636 - SSSD frequently fails to return automount maps from LDAP- Resolves: #953165 - Enabling enumeration causes sssd_be process to utilize 100% of the CPU- Resolves: #906398 - sssd_be crashes sometimes- Resolves: #950874: Simple access control always denies uppercased users in case insensitive domain- Resolves: #921454: Resolve local group members in LDAP groups- Resolves: rhbz#911299 - sssd: simple access provider flaw prevents intended ACL use when client to an AD provider- Fix pwd_expiration_warning=0 - Resolves: rhbz#911329 - pwd_expiration_warning has wrong default for Kerberos- Resolves: rhbz#911329 - pwd_expiration_warning has wrong default for Kerberos- Resolves: rhbz#872827 - Serious performance regression in sssd- Resolves: rhbz#888614 - Failure in memberof can lead to failed database update- Resolves: rhbz#903078 - TOCTOU race conditions by copying and removing directory trees- Resolves: rhbz#903078 - Out-of-bounds read flaws in autofs and ssh services responders- Resolves: rhbz#902716 - Rule mismatch isn't noticed before smart refresh on ppc64 and s390x- Resolves: rhbz#896476 - SSSD should warn when pam_pwd_expiration_warning value is higher than passwordWarning LDAP attribute.- Resolves: rhbz#902436 - possible segfault when backend callback is removed- Resolves: rhbz#895132 - Modifications using sss_usermod tool are not reflected in memory cache- Resolves: rhbz#894302 - sssd fails to update to changes on autofs maps- Resolves: rhbz894381 - memory cache is not updated after user is deleted from ldb cache- Resolves: rhbz895615 - ipa-client-automount: autofs failed in s390x and ppc64 platform- Resolves: rhbz#894997 - sssd_be crashes looking up members with groups outside the nesting limit- Resolves: rhbz#895132 - Modifications using sss_usermod tool are not reflected in memory cache- Resolves: rhbz#894428 - wrong filter for autofs maps in sss_cache- Resolves: rhbz#894738 - Failover to ldap_chpass_backup_uri doesn't work- Resolves: rhbz#887961 - AD provider: getgrgid removes nested group memberships- Resolves: rhbz#878583 - IPA Trust does not show secondary groups for AD Users for commands like id and getent- Resolves: rhbz#874579 - sssd caching not working as expected for selinux usermap contexts- Resolves: rhbz#892197 - Incorrect principal searched for in keytab- Resolves: rhbz#891356 - Smart refresh doesn't notice "defaults" addition with OpenLDAP- Resolves: rhbz#878419 - sss_userdel doesn't remove entries from in-memory cache- Resolves: rhbz#886848 - user id lookup fails for case sensitive users using proxy provider- Resolves: rhbz#890520 - Failover to krb5_backup_kpasswd doesn't work- Resolves: rhbz#874618 - sss_cache: fqdn not accepted- Resolves: rhbz#889182 - crash in memory cache- Resolves: rhbz#889168 - krb5 ticket renewal does not read the renewable tickets from cache- Resolves: rhbz#886091 - Disallow root SSH public key authentication - Add default section to switch statement (Related: rhbz#884666)- Resolves: rhbz#886038 - sssd components seem to mishandle sighup- Resolves: rhbz#888800 - Memory leak in new memcache initgr cleanup function- Resolves: rhbz#888614 - Failure in memberof can lead to failed database update- Resolves: rhbz#885078 - sssd_nss crashes during enumeration if the enumeration is taking too long- Related: rhbz#875851 - sysdb upgrade failed converting db to 0.11 - Include more debugging during the sysdb upgrade- Resolves: rhbz#877972 - ldap_sasl_authid no longer accepts full principal- Resolves: rhbz#870045 - always reread the master map from LDAP - Resolves: rhbz#876531 - sss_cache does not work for automount maps- Resolves: rhbz#884666 - sudo: if first full refresh fails, schedule another first full refresh- Resolves: rhbz#880956 - Primary server status is not always reset after failover to backup server happened - Silence a compilation warning in the memberof plugin (Related: rhbz#877974) - Do not steal resolv result on error (Related: rhbz#882076)- Resolves: rhbz#882923 - Negative cache timeout is not working for proxy provider- Resolves: rhbz#884600 - ldap_chpass_uri failover fails on using same hostname- Resolves: rhbz#858345 - pam_sss(crond:account): Request to sssd failed. Timer expired- Resolves: rhbz#878419 - sss_userdel doesn't remove entries from in-memory cache- Resolves: rhbz#880176 - memberUid required for primary groups to match sudo rule- Resolves: rhbz#885105 - sudo denies access with disabled ldap_sudo_use_host_filter- Resolves: rhbz#883408 - Option ldap_sudo_include_regexp named incorrectly- Resolves: rhbz#880546 - krb5_kpasswd failover doesn't work - Fix the error handler in sss_mc_create_file (Related: #789507)- Resolves: rhbz#882221 - Offline sudo denies access with expired entry_cache_timeout - Fix several bugs found by Coverity and clang: - Check the return value of diff_gid_lists (Related: #869071) - Move misplaced sysdb assignment (Related: #827606) - Remove dead assignment (Related: #827606) - Fix copy-n-paste error in the memberof plugin (Related: #877974)- Resolves: rhbz#882923 - Negative cache timeout is not working for proxy provider - Link sss_ssh_authorizedkeys and sss_ssh_knowhostsproxy with the client libraries (Related: #870060) - Move sss_ssh_knownhosts documentation to the correct section (Related: #870060)- Resolves: rhbz#884480 - user is not removed from group membership during initgroups - Fix incorrect synchronization in mmap cache (Related: #789507)- Resolves: rhbz#883336 - sssd crashes during start if id_provider is not mentioned- Resolves: rhbz#882290 - arithmetic bug in the SSSD causes netgroup midpoint refresh to be always set to 10 seconds- Resolves: rhbz#877974 - updating top-level group does not reflect ghost members correctly - Resolves: rhbz#880159 - delete operation is not implemented for ghost users- Resolves: rhbz#881773 - mmap cache needs update after db changes- Resolves: rhbz#875677 - password expiry warning message doesn't appear during auth - Fix potential NULL dereference when skipping built-in AD groups (Related: rhbz#874616) - Add missing parameter to DEBUG message (Related: rhbz#829742)- Resolves: rhbz#882076 - SSSD crashes when c-ares returns success but an empty hostent during the DNS update - Do not version libsss_sudo, it's not supposed to be linked against, but dlopened (Related: rhbz#761573)- Resolves: rhbz#880140 - sssd hangs at startup with broken configurations- Resolves: rhbz#878420 - SIGSEGV in IPA provider when ldap_sasl_authid is not set- Resolves: rhbz#874616 - Silence the DEBUG messages when ID mapping code skips a built-in group- Resolves: rhbz#824244 - sssd does not warn into sssd.log for broken configurations- Resolves: rhbz#874673 - user id lookup fails using proxy provider - Fix a possibly uninitialized variable in the LDAP provider - Related: rhbz#877130- Resolves: rhbz#878262 - ipa password auth failing for user principal name when shorter than IPA Realm name - Resolves: rhbz#871843 - Nested groups are not retrieved appropriately from cache- Resolves: rhbz#870238 - IPA client cannot change AD Trusted User password- Resolves: rhbz#877972 - ldap_sasl_authid no longer accepts full principal- Resolves: rhbz#861075 - SSSD_NSS failure to gracefully restart after sbus failure- Resolves: rhbz#877354 - ldap_connection_expire_timeout doesn't expire ldap connections- Related: rhbz#877126 - Bump the release tag- Resolves: rhbz#877126 - subdomains code does not save the proper user/group name- Resolves: rhbz#877130 - LDAP provider fails to save empty groups - Related: rhbz#869466 - check the return value of waitpid()- Resolves: rhbz#870039 - sss_cache says 'Wrong DB version'- Resolves: rhbz#875740 - "defaults" entry ignored- Resolves: rhbz#875738 - offline authentication failure always returns System Error- Resolves: rhbz#875851 - sysdb upgrade failed converting db to 0.11- Resolves: rhbz#870278 - ipa client setup should configure host properly in a trust is in place- Resolves: rhbz#871160 - sudo failing for ad trusted user in IPA environment- Resolves: rhbz#870278 - ipa client setup should configure host properly in a trust is in place- Resolves: rhbz#869678 - sssd not granting access for AD trusted user in HBAC rule- Resolves: rhbz#872180 - subdomains: Invalid sub-domain request type - Related: rhbz#867933 - invalidating the memcache with sss_cache doesn't work if the sssd is not running- Resolves: rhbz#873988 - Man page issue to list 'force_timeout' as an option for the [sssd] section- Resolves: rhbz#873032 - Move sss_cache to the main subpackage- Resolves: rhbz#873032 - Move sss_cache to the main subpackage - Resolves: rhbz#829740 - Init script reports complete before sssd is actually working - Resolves: rhbz#869466 - SSSD starts multiple processes due to syntax error in ldap_uri - Resolves: rhbz#870505 - sss_cache: Multiple domains not handled properly - Resolves: rhbz#867933 - invalidating the memcache with sss_cache doesn't work if the sssd is not running - Resolves: rhbz#872110 - User appears twice on looking up a nested group- Resolves: rhbz#871576 - sssd does not resolve group names from AD - Resolves: rhbz#872324 - pam: fd leak when writing the selinux login file in the pam responder - Resolves: rhbz#871424 - authconfig chokes on sssd.conf with chpass_provider directive- Do not send SIGKILL to service right after sending SIGTERM - Resolves: #771975 - Fix the initial sudo smart refresh - Resolves: #869013 - Implement password authentication for users from trusted domains - Resolves: #869071 - LDAP child crashed with a wrong keytab - Resolves: #869150 - The sssd_nss process grows the memory consumption over time - Resolves: #869443- BuildRequire selinux-policy so that selinux login support is built in - Resolves: #867932- Do not segfault if namingContexts contain no values or multiple values - Resolves: rhbz#866542- Fix the "ca" translation of the sssd-simple manual page - Related: rhbz#827606 - Rebase SSSD to 1.9 in 6.4- New upstream release 1.9.2- Rebase to 1.9.1- Require the latest libldb- Rebase to 1.9.0 - Resolves: rhbz#827606 - Rebase SSSD to 1.9 in 6.4- Rebase to 1.9.0 RC1 - Resolves: rhbz#827606 - Rebase SSSD to 1.9 in 6.4 - Bump the selinux-policy version number to pull in required fixes- Resolves: rhbz#840089 - Update the shadowLastChange attribute with days since the Epoch, not seconds- Fix protocol break for services map - Related: rhbz#825028 - Service lookups by port number doesn't work on s390x/ppc64 arches- Resolves: rhbz#825028 - Service lookups by port number doesn't work on s390x/ppc64 arches- Resolves: rhbz#824616 - sssd_nss crashes when configured with use_fully_qualified_names = true- Resolves: rhbz#824062 - sssd_be crashed with SIGSEGV in _tevent_schedule_immediate()- Resolves: rhbz#822236 - SSSD netgroups do not honor entry_cache_nowait_percentage- Resolves: rhbz#820759 - AVC denial seen on sssd upgrade during ipa-client upgrade - Resolves: rhbz#821044 - sss_groupadd no longer detects duplicate GID numbers- Resolves: rhbz#818642 - Auth fails for user with non-default attribute names - Resolves: rhbz#819063 - sssd fails to provide partial data till paged search returns "Size Limit Exceeded" - Resolves: rhbz#820585 - Group enumeration fails in proxy provider- Resolves: rhbz#816616 - group members are now lowercased in case insensitive domains- Resolves: rhbz#805431 - NFS files/folders are mapped to nobody user if NFS top level directory is chowned by a SSSD user- Resolves: rhbz#805924 - SSSD should attempt to get the RootDSE after binding - Resolves: rhbz#814237 - sdap_check_aliases must not error when detects the same user - Resolves: rhbz#812281 - autofs client: map name length used as key length - Related: rhbz#784870 - SSSD fails during autodetection of search bases for new LDAP features - Related: rhbz#814269 - sssd-1.5.1-66.el6_2.3.x86_64 freezes- Fix typo in patch for SSH umask - Related: rhbz#808107 - Coverity revealed memory management defects- Resolves: rhbz#808458 - Authconfig crashes when sets krb realm - Resolves: rhbz#808597 - sssd_nss crashes on request when no back end is running - Resolves: rhbz#808107 - Coverity revealed memory management defects- Related: rhbz#805452 - Unable to lookup user, group, netgroup aliases with case_sensitive=false- Resolves: rhbz#804057 - Initial service lookups having name with uppercase alphabets doesn't work - Resolves: rhbz#804065 - Service lookup using case-sensitive protocol names doesn't work when case_sensitive=false - Resolves: rhbz#805281 - sssd: Uses the wrong key when there a multiple realms in a single keytab - Resolves: rhbz#805452 - Unable to lookup user, group, netgroup aliases with case_sensitive=false - Resolves: rhbz#805918 - Wrong resolv_status might cause crash when name resolution times out - Resolves: rhbz#805431 - NFS files/folders are mapped to nobody user if NFS top level directory is chowned by a SSSD user- Related: rhbz#802207 - getent netgroup hangs when "use_fully_qualified_names = TRUE" in sssd - Resolves: rhbz#801719 - "Error looking up public keys" while ssh to replica using IP address - Resolves: rhbz#803659 - Service lookup shows case sensitive names twice with case_sensitive=false - Resolves: rhbz#803842 - Unable to bind to LDAP server when minssf set - Resolves: rhbz#805034 - accessing an undefined variable might cause crash - Resolves: rhbz#805108 - sss_ssh_knownhostproxy infinite loop hangs SSH login- Update translations - Resolves: rhbz#802372 - Pick up latest translation files for SSSD - Resolves: rhbz#802207 - getent netgroup hangs when "use_fully_qualified_names = TRUE" in sssd - Related: rhbz#801451 - Logging in with ssh pub key should consult authentication authority policies- Resolves: rhbz#801407 - sssd_nss gets hung processing identical search requests - Resolves: rhbz#801451 - Logging in with ssh pub key should consult authentication authority policies - Resolves: rhbz#795562 - Infinite loop checking Kerberos credentials - Resolves: rhbz#798317 - sssd crashes when ipa_hbac_support_srchost is set to true - Resolves: rhbz#799039 - --debug option for sss_debuglevel doesn't work - Resolves: rhbz#799915 - Unable to lookup netgroups with case_sensitive=false - Resolves: rhbz#799929 - Raise limits for max num of files sssd_nss/sssd_pam can use - Resolves: rhbz#799971 - sssd_be crashes on shutdown - Resolves: rhbz#801533 - sssd_be crashes when resolving non-trivial nested group structure - Resolves: rhbz#801368 - Group lookups doesn't return members with proxy provider configured - Resolves: rhbz#801377 - getent returns non-existing netgroup name, when sssd is configured as proxy provider- Do not auto-upgrade debug levels - Tool still available for manual use - Reverts: rhbz#753763 - Provide logging configuration compatibility on SSSD 1.5/1.6 upgrade - Resolves: rhbz#798881 - Install-time warnings - Resolves: rhbz#798774 - IPA provider should assume that ipa_domain is also the dns_discovery_domain - Resolves: rhbz#798655 - Password logins failing due to a process with high UID- Fix explicit requires to use openldap instead of openldap-libs - Related: rhbz#797282 - sssd-1.5.1-66.el6.x86_64 needs openldap >= openldap-2.4.23-20.el6.x86_64- Fix multilib-clean issue due to upgrade script - Remove old copy from the spec file - Related: rhbz#753763 - Provide logging configuration compatibility on SSSD 1.5/1.6 upgrade- Fix multilib-clean issue due to upgrade script - Fix typo in the patch - Related: rhbz#753763 - Provide logging configuration compatibility on SSSD 1.5/1.6 upgrade- Fix multilib-clean issue due to upgrade script - Use a patch and install the script to python_sitelib - Related: rhbz#753763 - Provide logging configuration compatibility on SSSD 1.5/1.6 upgrade- Fix multilib-clean issue due to upgrade script - Related: rhbz#753763 - Provide logging configuration compatibility on SSSD 1.5/1.6 upgrade- Resolves: rhbz#753763 - Provide logging configuration compatibility on SSSD 1.5/1.6 upgrade - Resolves: rhbz#785871 - wrong build dependency on nscd - Resolves: rhbz#785873 - IPA host search base cannot be set - Resolves: rhbz#791208 - Entries lacking a POSIX username value break group lookups - Resolves: rhbz#796307 - Simple Paged Search control needs to be used more sparingly - Resolves: rhbz#797282 - sssd-1.5.1-66.el6.x86_64 needs openldap >= openldap-2.4.23-20.el6.x86_64 - Resolves: rhbz#787035 - ipa - sssd slow response with thousands of user entries - Resolves: rhbz#742509 - [RFE] Add SSSD Tool to purge cache - Resolves: rhbz#772297 - Fails to update if all nisNetgroupTriple or memberNisNetgroup entries are deleted from a netgroup - Resolves: rhbz#783138 - Backend occasionally goes offline under heavy load - Resolves: rhbz#797975 - sssd_be: The requested target is not configured is logged at each login - Resolves: rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3- Resolves: rhbz#761570 - [RFE] support looking up autofs maps via SSSD - Resolves: rhbz#788979 - sssd crashes during initgroups against a user belonging to nested rfc2307bis group- Handle filtering python Provides in a safer way - Related: rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3- Related: rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3 - Resolves: rhbz#786553 - sssd on ppc64 doesn't pull cyrus-sasl-gssapi.ppc as a dependancy - Resolves: rhbz#785909 - --debug-timestamps=1 is not passed to providers - Resolves: rhbz#785908 - ldap_*_search_base doesn't fully limit the group and netgroup search base correctly - Resolves: rhbz#785907 - [RFE] Add support to request canonicalization on krb AS requests - Resolves: rhbz#785905 - [RFE] DEBUG timestamps should offer higher precision - Resolves: rhbz#785904 - [RFE] SSSD should have --version option - Resolves: rhbz#785902 - Errors with empty loginShell and proxy provider - Resolves: rhbz#785898 - Enable midway cache refresh by default - Resolves: rhbz#785888 - sssd returns empty netgroup at a second request for a non-existing netgroup - Resolves: rhbz#785884 - Honour TTL when resolving host names - Resolves: rhbz#785883 - check DNS records before updates - Resolves: rhbz#785881 - List the keytab to pick the princiapl to use instead of guessing - Resolves: rhbz#785880 - debug_level in sssd.conf overrides command-line - Resolves: rhbz#785879 - sss_obfuscate/python config parser modifies config file too much - Resolves: rhbz#785877 - on reconnect we need to detect that a ipa/ds server has been reinitialized - Resolves: rhbz#785741 - sssd.api.conf and sssd.api.d should not be in /etc - Resolves: rhbz#773660 - Kerberos errors should go to syslog - Resolves: rhbz#772163 - Iterator loop reuse cases a tight loop in the native IPA netgroups code - Resolves: rhbz#771706 - sssd_be crashes during auth when there exists UTF source host group in an hbacrule - Resolves: rhbz#771702 - sssd_pam crashes during change password operation against a IPA server - Resolves: rhbz#771361 - case_sensitive function not working as intended for ldap - Resolves: rhbz#768935 - Crash when applying settings - Resolves: rhbz#766941 - The full dyndns update message should be logged into debug logs - Resolves: rhbz#766930 - [RFE] Add a new option to override home directory value - Resolves: rhbz#766913 - [RFE] Add option to select validate and FAST keytab principal name - Resolves: rhbz#766907 - Use [...] for IPv6 addresses in kdc info files - Resolves: rhbz#766904 - [RFE] Create a command line tool to change the debug levels on the fly - Resolves: rhbz#766876 - [RFE] Make HBAC srchost processing optional - Resolves: rhbz#766141 - [RFE] SSSD should support FreeIPA's internal netgroup representation - Resolves: rhbz#761582 - [RFE] Add ldap_sasl_minssf option - Resolves: rhbz#759186 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#755506 - [RFE] Add host-based (pam_host_attr) access control - Resolves: rhbz#753876 - [RFE] Add support for the services map - Resolves: rhbz#746181 - "getgrgid call returned more than one result" after group name change in MSAD - Resolves: rhbz#744197 - [RFE] close LDAP connection to the server when idle for some (configurable) time - Resolves: rhbz#742510 - [RFE] Separate Cache Timeouts for SSSD - Related: rhbz#742509 - [RFE] Add SSSD Tool to purge cache - Resolves: rhbz#742052 - id -G group resolution takes extremely long - Resolves: rhbz#739312 - [RFE] sssd does not set shadowLastChange - Resolves: rhbz#736150 - [RFE] SSSD should support multiple search bases - Resolves: rhbz#735827 - [RFE] Ability to set a domain as case sensitive or insensitive - Resolves: rhbz#735405 - [RFE] Option to disable warnings for unknown users - Resolves: rhbz#728212 - [RFE] sssd does not handle when paging control disabled for openldap - Resolves: rhbz#726467 - SSSD takes 30+ seconds to login - Resolves: rhbz#721289 - Process /usr/libexec/sssd/sssd_be was killed by signal 11 during auth when password for the user is not set- Resolves: rhbz#773655 - Race-condition bug in LDAP auth provider- Resolves: rhbz#753842 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758157 - LDAP failover not working if server refuses connections- Related: rhbz#750359 - Major cached entry performance regression- Resolves: rhbz#750359 - Major cached entry performance regression- Resolves: rhbz#749822 - SSSD may go into infinite loop during RFC2307bis initgroups when groups appear in multiple nesting levels- Resolves: rhbz#749256 - SELinux errors with SSSD Downgrade- Resolves: rhbz#748924 - RHEL6.1/sssd_pam segmentation fault- Resolves: rhbz#748412 - Memory leaks during the initgroups() operation- Related: rhbz#743841 - SSSD can crash due to dbus server removing a UNIX socket- Resolves: rhbz#742288 - RFC2307bis initgroups calls are slow - Resolves: rhbz#746654 - SSSD backend gets killed on slow systems - Related: rhbz#743925 - HBAC processing is very slow when dealing with FreeIPA deployments with large numbers of hosts Fixes a crash introduced by the earlier patch. - Related: rhbz#733382 - SSSD should pick a user/group name when there are multi-valued names Fixes for internationalization- Related: rhbz#742278 - Rework the example config- Resolves: rhbz#743925 - HBAC processing is very slow when dealing with FreeIPA deployments with large numbers of hosts - Resolves: rhbz#745966 - sssd_pam segfaults on sssd restart - Related: rhbz#743841 - SSSD can crash due to dbus server removing a UNIX socket- Resolves: rhbz#742278 - Rework the example config - Resolves: rhbz#746037 - Only access sssd_nss internal hash table if it was initialized - Resolves: rhbz#742526 - SSSD's man pages are missing information - Resolves: rhbz#743841 - SSSD can crash due to dbus server removing a UNIX socket- Resolves: rhbz#738621 - Lookup fails for non-primary usernames with multi-valued uid - Resolves: rhbz#738629 - Group lookups doesn't return it's member for sometime when the member has multi-valued uid - Resolves: rhbz#742295 - Use an explicit base 10 when converting uidNumber to integer - Resolves: rhbz#733382 - SSSD should pick a user/group name when there are multi-valued names- Resolves: rhbz#741751 - HBAC rule evaluation does not properly handle host groups - Resolves: rhbz#740501 - SSSD not functional after "self" reboot - Resolves: rhbz#742539 - HBAC: Hostname comparisons should be case-insensitive- Resolves: rhbz#728343 - SSSD taking 5 minutes to log in - Resolves: rhbz#739850 - Coverity defects newly introduced in rhel 6.2- Resolves: rhbz#737157 - "System error" appears in log during change password operation of a user in openldap server with ppolicy enabled - Resolves: rhbz#737172 - "Unknown (private extension) error(21853), (null)" messages are logged during change password operation of a user in openldap server with ppolicy enabled- Resolves: rhbz#736314 - sssd crashes during auth while there exists multiple external hosts along with managed host - Resolves: rhbz#732974 - [RFE] Have SSSD cache properly with krb5_validate = True and SElinux enabled- Resolves: rhbz#732010 - LDAP+GSSAPI needs explicit Kerberos realm - Resolves: rhbz#733382 - SSSD should pick a user/group name when there are multi-valued names - Resolves: rhbz#733409 - Improve password policy error message - Resolves: rhbz#733663 - Authentication fails when there exists an empty hbacsvcgroup - Resolves: rhbz#732935 - Add LDAP provider option to set LDAP_OPT_X_SASL_NOCANON - Resolves: rhbz#734101 - sssd blocks login of ipa-users- Related: rhbz#728353 - Resolve RPMDiff errors in SSSD- Resolves: rhbz#728961 - Provide a mechanism for vetoing the use of certain shells- Related: rhbz#728267 - When non-posix groups are skipped, initgroups returns random GID- Related: rhbz#726466 - HBAC rule evaluation does not support extended UTF-8 languages - Related: rhbz#718250 - Remove DENY rules from the HBAC access provider - Fixes an issue on big endian platforms- Resolves: rhbz#700828 - Process /usr/libexec/sssd/sssd_be was killed by signal 11 (SIGSEGV) when ldap_uri is misconfigured - Resolves: rhbz#726438 - sssd doesn't honor ldap supportedControls - Resolves: rhbz#726466 - HBAC rule evaluation does not support extended UTF-8 languages - Resolves: rhbz#718250 - Remove DENY rules from the HBAC access provider - Resolves: rhbz#728267 - When non-posix groups are skipped, initgroups returns random GID - Resolves: rhbz#726475 - sssd_pam leaks file descriptors - Resolves: rhbz#725868 - Explicitly ignore groups with gidNumber = 0- Related: rhbz#721052 - sssd does not handle kerberos server IP change - Use ares_search instead of ares_query to honor - search entries in /etc/resolv.conf- Resolves: rhbz#711416 - During the change password operation the ccache is - not replaced by a new one if the old one isn't - active anymore - Resolves: rhbz#715609 - Certificate validation fails with message - "Connection error: TLS: hostname does not match CN - in peer certificate" - Resolves: rhbz#719089 - IPA dynamic DNS update mangles AAAA records - Resolves: rhbz#721052 - sssd does not handle kerberos server IP change - Honor TTL values when resolving hostnames- Resolves: rhbz#713961 - libsss_ldap segfault at login against OpenLDAP - Resolves: rhbz#713438 - sssd shuts down if inotify crashes- Resolves: rhbz#709081 - sssd.$arch should require sssd-client.$arch- Resolves: rhbz#709342 - Typo in negative cache notification for initgroups() - Resolves: rhbz#708009 - "renew_all_tgts" and "renew_handlers" messages are - being logged multiple times when the provider comes - back online - Resolves: rhbz#707997 - The IPA provider does not work with IPv6 - Resolves: rhbz#677327 - [RFE] Support overriding attribute value - Resolves: rhbz#692090 - SSSD is not populating nested groups in - Active Directory- Resolves: rhbz#707627 - Include valid "ldap_uri" formats in sssd-ldap man - page- Resolves: rhbz#707513 - Unable to authenticate users when username - contains "\0"- Resolves: rhbz#698723 - kpasswd fails when using sssd and - kadmin server != kdc server- Resolves: rhbz#707282 - latest sssd fails if ldap_default_authtok_type is - not mentioned - Resolves: rhbz#692404 - rfc2307bis groups are being enumerated even when the - gidNumber is out of the range of min_id,max_id. - Resolves: rhbz#699530 - Users with a local group as their primary GID are - denied access by the simple access provider - Resolves: rhbz#700172 - RFE: SSSD should support paged LDAP lookups - Resolves: rhbz#705434 - IPA provider fails initgroups() if user is not a - member of any group - Resolves: rhbz#703624 - SSSD's async resolver only tries the first - nameserver in /etc/resolv.conf- Resolves: rhbz#701700 - sssd client libraries use select() but should use - poll() instead- Related: rhbz#693818 - Automatic TGT renewal overwrites cached password - Fix segfault in TGT renewal- Related: rhbz#693818 - Automatic TGT renewal overwrites cached password - Fix typo causing build breakage- Resolves: rhbz#693818 - Automatic TGT renewal overwrites cached password- Resolves: rhbz#696972 - Filters not honoured against fully-qualified users- Resolves: rhbz#694146 - SSSD consumes GBs of RAM, possible memory leak- Related: rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS - information- Related: rhbz#694783 - SSSD crashes during getent when anonymous bind is - disabled- Resolves: rhbz#694444 - Unable to resolve SRV record when called with - _srv_, in ldap_uri - Related: rhbz#694783 - SSSD crashes during getent when anonymous bind is - disabled- Resolves: rhbz#694783 - SSSD crashes during getent when anonymous bind is - disabled- Resolves: rhbz#692472 - Process /usr/libexec/sssd/sssd_be was killed by - signal 11 (SIGSEGV) - Fix is to not attempt to resolve nameless servers- Resolves: rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS - information- Resolves: rhbz#690866 - Groups with a zero-length memberuid attribute can - cause SSSD to stop caching and responding to - requests- Resolves: rhbz#690131 - Traceback messages seen while interrupting - sss_obfuscate using ctrl+d - Resolves: rhbz#690421 - [abrt] sssd-1.2.1-28.el6_0.4: _talloc_free: Process - /usr/libexec/sssd/sssd_be was killed by signal 11 - (SIGSEGV)- Related: rhbz#683885 - SSSD should skip over groups with multiple names- Resolves: rhbz#683158 - SSSD breaks on RDNs with a comma in them - Resolves: rhbz#689886 - group memberships are not populated correctly during - IPA provider initgroups - Resolves: rhbz#683885 - SSSD should skip over groups with multiple names- Resolves: rhbz#683860 - Skip users and groups that have incomplete contents - Resolves: rhbz#688491 - authconfig fails when access_provider is set as krb5 - in sssd.conf- Resolves: rhbz#683255 - sudo/ldap lookup via sssd gets stuck for 5min - waiting on netgroup - Resolves: rhbz#683431 - sssd consumes 100% CPU - Related: rhbz#680440 - sssd does not handle kerberos server IP change- Related: rhbz#680440 - sssd does not handle kerberos server IP change - SSSD was staying with the old server if it was still online- Resolves: rhbz#682850 - IPA provider should use realm instead of ipa_domain - for base DN- Resolves: rhbz#682340 - sssd-be segmentation fault - ipa-client on - ipa-server - Resolves: rhbz#680440 - sssd does not handle kerberos server IP change - Resolves: rhbz#680442 - Dynamic DNS update fails if multiple servers are - given in ipa_server config option - Resolves: rhbz#680932 - Do not delete sysdb memberOf if there is no memberOf - attribute on the server - Resolves: rhbz#682807 - sssd_nss core dumps with certain lookups- Related: rhbz#678614 - SSSD needs to look at IPA's compat tree for netgroups - Related: rhbz#679082 - SSSD IPA provider should honor the krb5_realm option- Resolves: rhbz#679082 - SSSD IPA provider should honor the krb5_realm option - Resolves: rhbz#677318 - Does not read renewable ccache at startup- Resolves: rhbz#678593 - User information not updated on login for secondary - domains - Resolves: rhbz#678777 - IPA provider does not update removed group - memberships on initgroups- Resolves: rhbz#677588 - sssd crashes at the next tgt renewals it tries - Resolves: rhbz#678410 - name service caches names, so id command shows - recently deleted users - Resolves: rhbz#678614 - SSSD needs to look at IPA's compat tree for - netgroups- Resolves: rhbz#670511 - SSSD and sftp-only jailed users with pubkey login - Resolves: rhbz#675284 - "no matching rule" message logged on all successful - requests - Resolves: rhbz#676911 - SSSD attempts to use START_TLS over LDAPS for - authentication- Resolves: rhbz#674164 - sss_obfuscate fails if there's no domain named - "default" - Resolves: rhbz#674515 - -p option always uses empty string to obfuscate - password - Resolves: rhbz#674141 - Traceback call messages displayed while - "sss_obfuscate" command is executed as a non-root - user- Resolves: rhbz#674172 - Group members are not sanitized in nested group - processing - Put translated tool manpages into the sssd-tools subpackage- Related: rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1 - Also add the updated ding-libs to the BuildRequires- Related: rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1 - Explicitly require updated ding-libs- Resolves: rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1 - New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options - Assorted bugfixes- Add noverify to sssd.conf - Resolves: rhbz#627165 - TPS VerifyTest failure- Related: rhbz#644072 - Rebase SSSD to 1.5 - New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Resolves: rhbz#660592 - SSSD shutdown sometimes hangs - Resolves: rhbz#660585 - getent passwd ' returns nothing if its - uidNumber gt 2147483647- Resolves: rhbz#659401 - SSSD shutdown sometimes hangs- Resolves: rhbz#645449 - 'getent passwd ' returns nothing if its - uidNumber gt 2147483647- Resolves: rhbz#658374 - sssd stops on upgrade- Resolves: rhbz#658158 - sssd stops on upgrade- Resolves: rhbz#649312 - SSSD will sometimes lose groups from the cache- Resolves: rhbz#649286 - SSSD will sometimes lose groups from the cache- Resolves: rhbz#637070 - the krb5 locator plugin isn't packaged for multilib - Resolves: rhbz#642412 - SSSD initgroups does not behave as expected- Resolves: rhbz#633406 - the krb5 locator plugin isn't packaged for multilib - Resolves: rhbz#633487 - SSSD initgroups does not behave as expected- Resolves: rhbz#633406 - the krb5 locator plugin isn't packaged for multilib- Resolves: rhbz#629949 - sssd stops on upgrade- Resolves: rhbz#625122 - GNOME Lock Screen unocks without a password- Resolves: rhbz#621307 - Password changes are broken on LDAP- Resolves: rhbz#617623 - SSSD suffers from serious performance issues on - initgroups calls- Resolves: rhbz#607233 - SSSD users cannot log in through GDM - - Real issue was that long-running services - - do not reconnect if sssd is restarted- Resolves: rhbz#591715 - sssd should emit warnings if there are problems with - /etc/krb5.keytab file- Resolves: rhbz#606836 - libcollection needs an soname bump before RHEL 6 - final - Resolves: rhbz#608661 - SASL with OpenLDAP server fails - Resolves: rhbz#608688 - SSSD doesn't properly request RootDSE attributes- New upstream bugfix release 1.2.1 - Resolves: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity - bugs. - Resolves: rhbz#603041 - Remove unnecessary option krb5_changepw_principal - Resolves: rhbz#604704 - authconfig should provide error with no trace back - if disabling sssd when sssd is not enabled - Resolves: rhbz#591873 - Connecting to the network after an offline kerberos - auth logs continuous error messages to sssd_ldap.log - Resolves: rhbz#596295 - Authentication fails for user from the second domain - when the same user name is filtered out from the - first domain - Related: rhbz#598559 - Update translation files for SSSD before RHEL 6 - final- Resolves: rhbz#593696 - Empty list of simple_allow_users causes sssd service - to fail while restart - Resolves: rhbz#600352 - Wrapping the value for "ldap_access_filter" in - parentheses causes ldap_search_ext to fail - Resolves: rhbz#600468 - Segfault in krb5_child - Related: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity - bugs.- Resolves: rhbz#598670 - Ccache file of a user is removed too early - Resolves: rhbz#599057 - Incomplete comparison of a service name in - IPA access provider - Resolves: rhbz#598496 - Failure with IPA access provider - Resolves: rhbz#599027 - Makefile typo causes SSSD not to use the - kernel keyring- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP - Resolves: rhbz#584001 - Rebase sssd to 1.2 - Resolves: rhbz#584017 - Unconfiguring sssd leaves KDC locator file - Resolves: rhbz#587384 - authconfig fails if krb5_kpasswd in sssd.conf - Resolves: rhbz#587743 - Need to replicate pam_ldap's pam_filter in sssd.conf - Resolves: rhbz#590134 - sssd: auth_provider = proxy regression - Resolves: rhbz#591131 - Kerberos provider needs to rewrite kdcinfo file when - going online - Resolves: rhbz#591136 - Change SSSD ipa BE to handle new structure of the - HBAC rule- Improve DEBUG logs for STARTTLS failures- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh/bin/shlibsss_sudolibsss_sudo-devellibsss_autofs  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrbgdeeseufrhuiditjanbnlplptptrusvtgtrukzhzhcacacacadedededededeesesesesfrfrfrfrfrjajajaukukukukukuk1.13.3-57.el6_91.13.3-57.el6_91.13.3-57.el6_91.13.3-57.el6_91.13.3-57.el6_9 1.10.0-7.el6_9.beta11.10.0-7.el6_9.beta11.10.0-7.el6_9.beta1  !"#$%&&''(((())**++,,,--.//00111122333344566777777789:::;;;:<:=sssdsssdsssdsssdsssd.confsss_ssh_authorizedkeyssss_ssh_knownhostsproxymemberof.sosss.solibsss_sudo.sosssdlibsss_cert.solibsss_child.solibsss_crypt.solibsss_debug.solibsss_krb5_common.solibsss_ldap_common.solibsss_semanage.solibsss_simple.solibsss_util.solibsss_autofs.sosssdp11_childsss_signalsssd_autofssssd_besssd_nsssssd_pamsssd_sshsssd_sudosss_cachesssdsssd-common-1.13.3COPYINGsssd-example.confsssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd.mosssd-ifp.5.gzsssd-simple.5.gzsss_cache.8.gzsssd.8.gzsssd-ifp.5.gzsssd-simple.5.gzsssd-sudo.5.gzsssd.conf.5.gzsss_cache.8.gzsssd.8.gzsssd-simple.5.gzsssd-sudo.5.gzsss_cache.8.gzsssd.8.gzsssd-simple.5.gzsssd-sudo.5.gzsssd.conf.5.gzsss_cache.8.gzsssd.8.gzsssd-simple.5.gzsss_cache.8.gzsssd.8.gzsss_ssh_authorizedkeys.1.gzsss_ssh_knownhostsproxy.1.gzsss_rpcidmapd.5.gzsssd-simple.5.gzsssd-sudo.5.gzsssd.conf.5.gzsss_cache.8.gzsssd.8.gzsssd-ifp.5.gzsssd-simple.5.gzsssd-sudo.5.gzsssd.conf.5.gzsss_cache.8.gzsssd.8.gzsssdsssd.api.confsssd.api.dsssd-ad.confsssd-ipa.confsssd-krb5.confsssd-ldap.confsssd-local.confsssd-proxy.confsssd-simple.confkrb5rcachesssdbgpo_cachemcgroupinitgroupspasswdpipesprivatepubconfsssd/etc/logrotate.d//etc/rc.d/init.d//etc/rwtab.d//etc//etc/sssd//usr/bin//usr/lib64/ldb/modules/ldb//usr/lib64/libnfsidmap//usr/lib64//usr/lib64//usr/lib64/sssd//usr/lib64/sssd/modules//usr/libexec//usr/libexec/sssd//usr/sbin//usr/share/doc//usr/share/doc/sssd-common-1.13.3//usr/share/locale/bg/LC_MESSAGES//usr/share/locale/de/LC_MESSAGES//usr/share/locale/es/LC_MESSAGES//usr/share/locale/eu/LC_MESSAGES//usr/share/locale/fr/LC_MESSAGES//usr/share/locale/hu/LC_MESSAGES//usr/share/locale/id/LC_MESSAGES//usr/share/locale/it/LC_MESSAGES//usr/share/locale/ja/LC_MESSAGES//usr/share/locale/nb/LC_MESSAGES//usr/share/locale/nl/LC_MESSAGES//usr/share/locale/pl/LC_MESSAGES//usr/share/locale/pt/LC_MESSAGES//usr/share/locale/pt_BR/LC_MESSAGES//usr/share/locale/ru/LC_MESSAGES//usr/share/locale/sv/LC_MESSAGES//usr/share/locale/tg/LC_MESSAGES//usr/share/locale/tr/LC_MESSAGES//usr/share/locale/uk/LC_MESSAGES//usr/share/locale/zh_CN/LC_MESSAGES//usr/share/locale/zh_TW/LC_MESSAGES//usr/share/man/ca/man5//usr/share/man/ca/man8//usr/share/man/de/man5//usr/share/man/de/man8//usr/share/man/es/man5//usr/share/man/es/man8//usr/share/man/fr/man5//usr/share/man/fr/man8//usr/share/man/ja/man5//usr/share/man/ja/man8//usr/share/man/man1//usr/share/man/man5//usr/share/man/man8//usr/share/man/uk/man5//usr/share/man/uk/man8//usr/share//usr/share/sssd//usr/share/sssd/sssd.api.d//var/cache//var/lib//var/lib/sss//var/lib/sss/mc//var/lib/sss/pipes//var/log/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=genericdrpmxz2x86_64-redhat-linux-gnu?@7zXZ !PH6]"k%P}z'Cg /s~A_x˽+/( 0͕ZV{p~.غ!ޟ7j$WC$ p'? 7wõMlid^D o§IM`i-#>1%8)Ϸx!nkNm )5X -o~W}ܘBPHRXPBUt+7ԋN_(6;% gֲxN:dRS,hiί,`vT]aC2oW*Bub $w61@MwB B逯<0ҡYYK`ػDxEoF{Y5z==Cp.L|sSP< Qe0Ӻ%q<4k[$$Gl:@|VM0p,iqA7X=Sj*FГWNBvc${ X>+C@EC0e1.lҍR^) ,fdu|&umDV3AG+4te^6 ,d| yMWBf\X (Ts'fa h ՒP"B xQ CFȺy\LOta.N$PƱ>cG9i څ7Rk, o)-.~ܿ7TNkgYXpwD: S/qF+V?(ʻN*aFJgth6>3HƢ^8vIzN U~&SFB!qlk@4Gj<+e%Zu`X,syhoO>#mС`\RFAy320x4,N·*i| :Հ"O,\Ef01g{L(~LfsB^ 9x:j`nSXN&8 9}kb}c3Ѭ/P+-Nz\ޤO= [Ghtr _Y2v|(63cZx?7`wbU V1>(P@Pk+Vڀ=y_<㐋83f&hx>n|/l.@iWH7hP*{/Uӫ# m@6׃V}PiK>Bp.珋pL.#(/vۦJ!`p! =bӲg6:hBcE ,<$2>G vnY8 ~A|昈~"b?,h=)Z/21)i`bEU}Y+.ToVjlk1S"jp*Vqۉ ו"y" S pth~@F5fީꎻ}VC6)6=Lhqm<&!d>TuMw, qk`Vm`'$:o-'<GGPHkH]`X׻R)DS`s.H<#WӴ)򣆰dZUŪn 9]JeF D"uOy`4׬z펭'x>t!IGdσ/꣮ %.*2Dm<|z3dXsQB Q/U(Sӿd ɦ`.]p2*7HK;B7BWSUY4, dV2ZplTy~0tDㅦ+q}!;L?}V/3˧5o\4NӔXmrؓ'g3m<8 ߁+""0D^{c\~l}L]|F\(-Ojni*Rm*oq^Ex2/ b5,DTw#6$<Dŷ1JAh\T8uDRCX3 CŦ@wfBatMA1!H%W+wwZmp̓-[(U{.d \6 ]IP~thorK*x@7_-Y|pj?⻹wcB TQ|x!zdoyW G)eVX~J3dŎd]X:^]^擰ò˽&#<1A%fOs& g^pq8KSHX*읶'W#Q"2B þ;Bs;sli.ϒeռHmX)?J~IN}V{Dv69QCny4*cFw9)~2.eg0r]zPTnwv4A(eΗp!#dYt7T20㳣tyIU”;i `WF;-^&-ū CUbƴSK>].Mv;ׁPb3IX;uih|ri[*=fzۨ]AhH)w &B>hxTFv.L,k>Jf6t Lk:n8sqmvt^ coAu$Oɖ[ޮRt#*ۘg[m%s~~e{ <ԗ>;Bkux*xHDeuU>QGKY ='@hrNTqjO 2%d%/զL]G'S4Īq$Ro(B^w`{ 6$$zrcm_] 7Z} {U߱Ɂ <휎ԠsMIOcWs&U^_׿%hZt9H\mxpm(?܄MC.^;wRc_L1$&XMLE7+~[>pPn+gH^.{ˬXeMj9_Ъ=I//26<034^YUY:O;Qsn0LkIH˚S\,,M٠_K$_<4W{=E8Gɐխc;2*:/֙"[톥%fp7M,2t'[y a5± H@3+NńugIp"3&q[BZ =NWOS4tz{XsP~Խ  I|)09ҫ ͗І JI+vBc "t藆$*µڃd61x ѦU GX<9jJ;])^^7}ҭ`9˰{^#rM\ vV6ɓn7a̸ P3U؁r~ V~4cDj!v6n#VRNYNxQz`[=HLyf66M^HEn5=P>;y4o?!΀?Cxǵ[/cDgSxe<8S|_|I_dїH6-1tBjW@vqb³iJ E8Yq!1L̋̚)RV1 s,3UtoF R'!;#Urȱ✱EdCj,7'-}P9J6ku~B=-[SLM5ܥ|-FjEoi8M{qE,Pd!~>X{{}"?yIuC:L,ʛkC{a@*+XR{ vE;zWZ4/uC7F)Nq7}[ٷ Soi-pָ\α +fzY-_Oq]}Z֞zH&"*rr!Bi;P9 _= l  !G9>"<`2TěA'˾ i4U2v 77f3ѠaoUvPpb=.W$q<{9X )N_̿/K(5&p=sܨk@c2:|_`SVsK..j㵊KLDT>{}{?wC`yh٣cf.'U  '%UFs[VȹI1L +1a_I3D|ðB`5Ev=d5=yl$W%[{+iZ;HK>X Y;*zV5PtT_e.Fnmdj-ΘgOYkPi6#VeIFVX_ƒBqHӶg-Az)ߺHx7Zs]IQ.ŭ!W5!YvDE}2X7 6*dZɲA7%FP69p!F}^\cZa7Bb&=0sEݛj\='p^>0#80:FTc2&C!Fu{K!ll]X;sY<>LG`>!Dث txE;y)f΃Gvvg\)}ƍ|Jgy\aN8qI//u,VN E?8hz#e!Rbp˗ mmgmȐcavqu!n_LpGPB-d0Nף!(("͆kTt"D)e! 5#aزW `h>*1ONSÊlXCzXBc:CNT~zuQ~Gde>=hKi/ժkLvZ3%~9Xe0Q //h=$h/ڌ{=?2N^v>#0)f!V5|u{ؒU P%{? ДЉN um೽<٘#H=!?9ߋbHQv=zb;toz*J#\U]9ZcơPTHg~Bd0 1W+p 'DAU^J~-9 JObrF =;K"i_ 6L Md:[z|6p?~Eo ɸos,ž~ =09']bP@fHZW!rK1DxXZYŹY)o8=l2J8 -~OÑIpd8_ =Nx84Us@ (Iʟ3꼤V54dm5qzaAx8e/}G5]qǩf9ޛt8P >C`?E;s-H8iwABq+uwMp4%S̭ 8 X!(XfD%90pC=gs^<[,SXξgnEU 6$N fC4$fH5ݱǑG6V#nK 4S>Kf;5.=x?@8Fe=Dlʂz-暖Hˤs^:1\y/04 7b$.~T[R))J=33)MX6ِS`4#pDmaaqTBEտ.vϪWR>%SDpΤ%IX<~TV[: gv>1 B!D1^`@;I#;o76 f|xRQc"mUg5"ġcBwC+-˿;i0 L¾/2.@x`;]oS*_ftdcrρ8z0Pw @lʺ:} _^c'* ?0vj*$ 8JqJx$p==(>@¥(y;{:Vn) MEtH;,x|jiwHh{l-~q2 }o+J=Uͽ9c*k-xht[.;A)zEtp L:E@RB3pu؊@-u`sAĽlf)Ξu1K\,lkr/evofr4Bu:B9Vb7^=Qf,)\3Jg"Q6ÚqSU)[=u woK'jLp:Q6(;@tjgS0;(K`\rكyqGم4) 1A1d$ ){}fJ^zǀTwݎ y|[霑 .yQ'nj8<:7ϩ>9^O4;[RyOfgnWž OL5FLU1WOƩpjއ\4w5_T~-b l?Q;x Q?uOP[.CyKSa5kI]šq+b?+]-+:!=[q&xDd龭@'sp-aq>:q*:񶠋$'8K(d:ΓgxKseOw+J4ң:h`cqUD'&ngWy,},6-Ody^Hyx%.fRdב!bw/Hh iS:c.2i,= %8CK* 81o.7ud+Q4 LAD4vԦ$EwSy[6 q엦>X73XkP‰תX? On\8:|]y3I8#oyd9T 6JMIG Ui샳{_e_WB!#kݵŨhڢpOǦwx &'uѿڏ x*óB|@r'ݢfO`leUwCJ#2(ax`-[CzК~zٍέ@JQ4C?7cFP0:IHÐ쒐&N=@Aj8Oo@6=j|4+5w_o:VX]#DyQN˨/W@=tBHA`QNqܣU=q? PФfFﵡ;KB {7`%^.X~W4/1G_M5ڌB n!n,tg*Kb8VktSVqXTWR4JN53=2C[pJjGzH,_foMEL]hǼI72Jȅ|RiKh( DN>'2h ?>Uick]e" qRR-a\Nɠ@>z;z;c$<(qB4!vOERdGs` 3=3o@r}>z"h"1½-_M )Y^LپuB *r)!U`DjUۗ />{~E(穈5_O\ț͂ހ j RPGmNgraIҕcj}WY+ݨMGIΈZ4Ϗj\>C]@vx|jڙ-p..rJ"9~Zmz9aF Ϙ;F9B^8~+n? %p?X@ AA4H"L'ĉ JI HdB]Trƽ >`։RPu=2"U/h"X(L\`䰹)d}*e%3+kL#dYAuݚxBe*O%c`RQLل߲#VI\9VUs홶?+@<7TE:v)A\c[ɏFhASxvszkUA³K!yEH,)Г* mT#Z1X\7B4ϲ#þDpKZDU'9QiœG^f,Nf}$}Z/R-h:wt*@8D|`aJ>s`3$lM"{f33'6{5iOkB7!meGM/__e>w}S*OyChd(uO}`7G QDC)7TrL"G)K/ 0 uWſ$n#I8CF=g@vY8aauoRF!Sqj%#, `bA]ɍO1>Ҩ9SVh.(dT4Jub&TCTITo.Ih:㢴A{`*T$g`$֓F>ypw喻5E#>e,@iT?u/k:$s0xyxi!~Ӏ<|'E ܵ)qwh2)Cz5D[%5>^N|-ƙ{~1RGXhsWBW-:woEjT [gM_>XAAfêmڥ׋iٓXZ38އ0P%ɪ57e$C ;h,ˇӌVQ$1HQ\*v:m!}>7h։^<ӭwx!޶Z]۶ܭxvbX/lGs ֲy7_pBu?cn})/& Ғ|lkSLb.paǀd.&S \4ZU+ΧT*߸ҵ7+9J_Z`EX;-eu"fJo{#7Y-b( +7^-+#<>V[{pc6TQ)MGC<ƃg.+c" T}=z$OqNS:k=,w94onS+Z a/حs(H2$͕plz+撾Gwڟ/_gVaF;%\8mK-uC-]e𙝏e08w|eY%9ȎҺE5n:?V7-0U 3'qgC-OOx@l=F6rc27ˑ`ODf̈́6[qxq PuؾbXEa<\Vp]0W>AcCU7c$TjoiokC2՚:8RLm :k pr䱉!Wg\tnTjCZs &Y=[ahbҔՒM4ȆhX{Bs*m׍LiE%6hjTQʉT {Ԣ&vMS;sex/'~Hl'Ul. l$|<}x;EAm-m{hD]^jgq6]'5: &ԦqMXnFidEP Dz:UU$6kj#l$ Q9[pAwO{XR&9ᄑQs.e rͿH'DsSv;]iH"b2N問}yv~\=\8qm[dÜm Cb,ya jF H=,ѭ;l!5JbJj\/̴ F{5)sqpǭtC'O}'MU7M [AcJ E[/#xn D1^4rC j%uLf+Sz+lu"Ez;%FRF]Ma#s=O0-_XS/rvC+) EOfɿ[, \"{5N&6,Tq Tcc`~+]UY^TMEVi7%(aj 2spKXZ R0ve;P$׌<)`O!W#?0oZY,6US&8]N/A&of(#tRCvP8+*߆hٳ=]rc*iPnY{ 11[S<]`Ͷ;Dh9_ᳳEW\ݢ ?֪jS;(Hc`d^:)d,@vdufy$5U%k{)# ml!`tk1>M (#qHCl"%bgHZeXҙ3BLP膴 VZ9=vLO%g˜.TWyr rn<.A=*bf7<>׹un[0`nٷٙFHP iG,Wbe% @4{d[3r3x4S醩U F!}f)c%kqBˏo@nя[0wU&HⵆqNdCPըt9Yc&G kǜM5$*we]|H MlQ㲷a.iRB +ÿvz,2R!'V!KDR?<'%⺁s8 roFT? ِC q w7w]w2!H~0-їt``F҉j֍F.3V]@f-ݥA'V'%v<̽4elųIDPKKST "|e!Ulg[aߖs"mYλ5KB86*PY$Y 8h#Ug}Ӂqv֘TJ&(Ud;BcjDVj~V?bG6%eT[.=םBAŞj t0k}$c_f fyzߺ.D0o3z 蠢,O٤>{o4ж_xIC\kKYr` ,2Y솖2BSMX= s}ǧS"H}ROk{ *O؜:`?΋ZxN`JDh&ov2fCGh(S*/6*Y7~ښDqŦc?uTogWEMP0?m`[5:>H,%ƚ\ZF3ȌU#cLEr|(AV/[<3BM{ֱjS*BJE˕P6f *攞k|@~T :rG,yX<AUmtݏ؉B81ǤÕtdhL]3.i4)u?do$ׯUB+:{5xK@Ɨ9 ~JTc~ղoK V9(x'BA;EV?F6w )~>~qpN{^04z6cJj֊iJxx 9B8 6LL,7IX:c^*W/RΎw(kuc+?/ (}=b2rit?- )}"݂D*Ǧ5Q.t L!uK=`7QĿ]<}'0 1G !xinx@:]LD|Ӂ2QU6s-g<j wdK)S1U[b;K:EI_U:kUޒue{`Eyփ2/i!L6AOT X f ҵhh9ڀ8ц?Zq3Y$X(cUO\E}j@c$jXVoMMB&-y l/EV%`x5a ?VgɈ6*˟L5{>I_eRAFS]j`z(!Z ;S; zoq#*pqؒ-Q)dl"Gt%g$vX#.ȜufYWߦquCYd.wm:=.<&h>uP(KvL`Y_%$ʄ $7r>YZՊ(($8(Kx;uLIgxJhjrݤۤH(AYaǨ~B/Lvf(uԉzKz_jAvSKOmdQ{P9~(O.N'`dhqܭ2M^%Ҟh W8|w=JnB|&N4~eG`ƲϮNޫ~j:ݐWp3aԭdXXlC`y$(Cw!UC).Hz@鱸j / 6ƃyhUnBR|6rV_rjX@h#54'gݯR#&3{!D~G5.odHj_/|kBAAneͧhI=ޤ'Mva%@\~vy=n!dj#@j^k\МߒN Ly{Ӌ^5ɇ#·cQ ,q4$%LYQIa U5_6MT'At̻-yn#)ih`ܵB[pm̈DF oHUtVӭNA fYT g梅v0?8Iq3Jl]|h _O+a{'jo@Y9;V3 TB@ɿVl==|b/)ձmXLlP B9! "Wb)~fǪc81V(}N=0rG*8Wjئ3&NswT?F1i#R40:0Y-)P'l[-8-Po};>7;wd`Z(JYyZ5ͫ("-homÁJ5[Zz)MR=rf$(YSAdty_8@qnK6 OJ!ӃZcKrx4ʏIMv9_ĕ4Z8cw_qZ=-*)`cR*ۍ̡z56Ӥd"Ȱv+Q$BZSѐ LlbP+R,Й0?Yp-}eIaL{4/= IQ ܄[,^0_$QCV\f7orLj 4@ڟ@TmSG[. {’.E,V0LG[?(¨o*TMdZn$Z;[ێ홀 pK.iMˏ6Y>Q)Wthj\Ͱ}vGу嚎O|a. Hr7/{0vfPW܄ 5~#Ʉ@)J; @wŏn֤_s}w6ärYg˹S*6_f:Rũ##;ʣU>~} M9W_f”s0"CHںgfC9o96Y9}FZ8= &"ʂaLnO] ӣB$fdB鹏|[TSPf)Ay;1x$qF[nY?x6D%AP2u[7T@FGP[pKt^lZM.=(2*"as)2q/iĮ2Bp)tu*ߊ=H[VPp=83tD#(+e$9rak S_h]]JD~_Rtq(Q10筀n5/򄱯[NlBkGun V=ݟ[dtϺK~>-I:3lۣ{j {k}/Yl;n8v؝Xu3ĉd NhXdNm TOc>tq\iT¹ bFX&2̚v~&Vc}$0eYXgOmBr:LܮL4FrxCۇD+ʡ"s>'-{Z!]n00.sA@NIN;nlmĂ"2 O%6]8#>uQL̟;7Ve{̃q޴/Nu[UW=qy.0gݎ{]P092W C'/dp02sTM ŸP,d]~뿠V:o7l!A^ԈL^|P<("7a ><%\^t!7(-4/Ta\yW|r[}/ z>poI~| ^랼'\~`9{+AFE jFMxvsM氡UOmS5AQ;Y1a,t-qs;:FgLo8ZHKD|Ic ,F¦jft/CS qg붜K#E3iňg@"_^"G%H&t4BWzjM8L8eWU|a&@tFI^mQʏġId=N3jF r`7w痮ky~j r[c%󳅥Ӧ50Nv~ap\Î"FA }7'ȡ$$6sd(U5{B{ %MowLDs,ǽBIޤn5nO-0M^,kMrk 1Bocݶ!k$LJ+joD;٩8 oؚ'i儃%:6ZLhujw9 f-:`:gpq\?𽨢i@tQ<6hlz[Dysz)EGr&K6Ƌn?*[s< "P|9tqGd5p<*`5q&g&x,C4Mb^>4n?ÕVGPc蔦`,Jj#夗INMMO17L܏#9 紽mIl%=}˟BtZ@Kj <Du $T~hW:P`b ܬVcP୎w͜U@O0РcW.|V#[|0=󗅎]}7L1Z๠d`w1:u~Ni , ܋|$= +lpѦnKLxreԗ}wQ1(@R4?询C;ܰ9|şBT2-Tb*iBr[-&$^q/vŁ%ad@D!59t]|!Svk*Oi (Bj3* ՅehXKEL,fRF<ђ'  '&;=hu/e@}KOpqj%S?@kkZ"g͘ w⓲K.߳F߸oxr:wof ?i!tٚG 'RMxrGs ~/c܃LE;JEd X_!69ʊS L7Ws =Nт1x//.bŀSzs鵅=.OCp"j&_q ƭc8xAuK=2Ғ1^RXPsU_YtDE1Y9`I|]S/ka_6; e3 lvgIi5m-N);HEzWP';G 'n% ),'6fټ7Ypk-4$tMAV>> &ZnSvgƶKY&"ws@S'1L`91 &l(G/R +BΥv/i'9\reMѲ죄^d^'v8t`(Ka tR4%X1 s$O$4 P<0"?fXx loN,ƶlh-L=퉦PB=x5EdzL `ثi@<)ñ6Q/iڇfCJCCDEh:"ިZK0\ z6=QpbgL WDS3U{}÷4ll~ {rۢ* 3q Š9wa=uXKc)A8|D/e /WVEDnDS؜O AHṇTu>J(}g#0ZŘ<0yJGW21'~jIlRbK|5H FϣzZU$k9~h2Ekp3ej[r*'g32ͧ {-r+ΛI q&mYެc>L ըY0w1&r0̰j/XZs6 Mq.G֞<"M$ܩ_oQ m <DaR8ס{Nܣ{6!d3%;!L6ef*u'RaMy7B/HJS?/V"SRi"5׃l{ 3/6C~ tcLkqhd;лE.O_ =!ǡ\l,3{ #e$ԇmq"h|"U mk&bԼu`,_^A4VĆI6#oHz $EOZ=K [bXg'ԧ,p6vWe5k ҲS:4C ĉrn‚"*cZ^ftGԎ7e=]d y$VϮO0@B$s_VAsmI5FϦ y6ȇ3IJY,oB4q}*)/"CXUٱv>ҥf<̷7ZO&F 6 0$ޞYo wu#&dI&K#[Gy:3Ck){JkgW}K83N9* 1}"`*:I6?]5;R +<k&yz~$E6=HMOP,REJ-{Xň{;l8yK*SG06aڋb瘮3LrVc&yxiy z8-O&0= ӽiE`k;>lwQ?7dP˒8LkCO!ދ9`趘e305K]dky f@t lZQq PAc%"O (i(t47cgޅ^q}5 9Y &p,ZȖ3i rm>]8'Jin"|H{逡YT.k~7ZCE'yRkc9ǖX.eWODJ6Tx5&R]C\ )8pVii֩/g'ڎtDcBwtI8i[P|uTE'NB^@.[bvj9$?(J:p?Qmk j>`㪿b tH\cuo%Ïp7˕ub=E %;S嬩Su3K& jF6kip!gA#`n+,2ZIJ5Pϥ ~1.}aCTo NVmu2k,'!J  ōLU`QKgmn$1Q8OVK38xv< i3,ZZ ,|NךQ ,2KCa#uw]}IDGm9εMj=9V{]%a?<< .>HsҸ.݀Vd9e|Wų90i5= l~usgU{kt bdGcjq0;[Nu(&gySrj ~93tVKP?1'Rh E19Cr&.V7B/gE (,?FXU:ykOCs6l] I5nr? 4GKD*ÀdqOy7NfyAq2S}N=SBd-J&UJnf4[bE ;s Cx30 !@kiיDpE\$L6wjՑj2 ; NXl!ʛ&|ϒi]^^φBi.CFq7041ScP+&|Tnp)>;_NSmnuٔ ]0¯|e"fWE7`56z˽2w`ǑZ+NkcPRͷK܇@:%\W,xrVImMu%f EmS_<*i>b&w2GZզFz*햕;&UV&QNl^$5gƝv h!RW_@SP_0 ҝIKEQL\%Ueh~%,@hbZח o+d 3Jtb|K(gQEPisml͝Һ;(>a #3| j'#0 Wעæژnu=mh k2N؋S-9s ?@h5;(TAVN1`~akuFzǘ3ߵURV G2d?"C7*lf.1^KN2ƶl#f.i-;\2!TĶG2OHI6Hyh2Ai(x?~Dӯ$^ IW(i;fЭюbJIOu"0+ӹMmFntN]N!xiS(_ݎj 4 MCe^assqʼ0}X=#0}sE.,p[RKCGCzZHZo݂] 6%߅]4J˨N B`ibTD/= PtU}W,ԑ;X~\ng7 EM - 68S6cR V <Ĕ < Zua6]p88yQ"ab\J d&1)J;7T/k3T))7}纛U3~VUT=VQzN(+Ǵ_m,B%>4^P*T{XY]Pјg>KcvFq=H@*&[hu8eaS$RpwֈU47.H.W]9 -Y =#R3TK+T 5f ;4?9$%[ x;پi zpÓPFH`-SyPϴ#kQD}]@$w_KR:`;8$ Ad؊Uy%,Sbմ 9׈kqzUYM*PJ߶*뉗4r~,uMzJQ0G`><7NJ L;Bl,z((u츗s<]YdJ+a J c:obوUFIc> ϮFV_ҊZǧXO^hL^*%o@i7@#K| x?f8~;/BʲaWm}&'zTft;XD=CU:\"e.X {? Y%FF'N{eRb %x_8C4W3T =5~WӢw8#ָ$hA-wT ərq5wf5P<%vX~* J6OC4ɊL2 'ݳ3m̎bj\I:Y] *f5lýS[t|;Bȡ\y/f>0_ ]rḊa&bˏdխ4JɎDޜMwRC*#EXAY44nTlϲ8[yΖ 0cÇ*7 j0$6"ǐvK"*^,ۛR۷' scmᘇ3b&Qvqz e_Af,-DLS%+ T*F\B>k9+*/qd8f$xtyb7~?XG 43qB*vFnNr=HΰWK\)%(Zq} 7"x{ ' _d58KQ?ˊ]X բ/j$2$Xeґ? 8gp;WBښREx>eU1q c߫,< aޕP%D_Ce˲hXd}a2PMlH7wL P0GD0}HxC9N 0V7G7QuAcWrw%Ps$sO)1o/:&e]fi.eEɮ}`tj] +|o*inbF)wq>̲2bw:c"e<|^*]&ͳ,"q9\14kq;FeiqPl= BeQIW?엉6J8{rHoRqqg<_Qbإ3^~PIjh+H3=)?ihC/?{ԠX1&$|:qepVG%Yy[0LSp(r:Ч8bbpd#m7dy7<[+ٵh!*?+Z]Tv%G M *w1VƲ%VУ:K1M&q{a)9{P&@vj[HĒ?+sr;`:" kx.3j8O05Od,UAV2][h%SV5!mJE 佗{]LC$8yUi " ^/i`Wo8v0_ݐ_n #CSn,=P8%taE\I1[@ ${8mGJRU}&\WG2*xZ6Ȝ"<94T8H>kHN,kİ &w@HUDA&YLB}55l֎R3<mu\JFD8)|k1t zj WA*=^ efRn•T-p@ݑ+IT Jo|:d\ըKoX2^K_[~nj Dhse=QGec q=-; d@ٯ?Wr,_Ed7!_SV)y$Udrʣ櫜 _ {M|AlRhHTyOsj\r*"D75n֘Ow&ZLχ? a1.,L'O9Q:Լre±)t̬;2;)0so a-\[LkQow\%`2*͚챫dI61GVc_ڒ`#i 1FՌ Y~4V ~PKҥBㅟ|$m+ ɕyo8P:o@シ|i|(Zކ->+ p;jN|0j@FY ˔;<؟D _!ZM"ZWǞߺ-$&M$B$ JҼ,)8DPWv)ab IvqsH/߫V S'4+9Xp>:|0bD:!y֤l'۹FJ=gGFGV*Pl$R:ֽLY9] "P"bU2PN薻ׅ oo00IK?k_u'M29XPgґ´TSBmxYv/ 㨄]s]|qB[INJ}`sa z7z-xAs0UU5ɇG}$úӥ NFMvEI_ǠU EE0g0<ۚ76*}CWl:5Wzi+diW5$̵&c>'0RE5n9r4ζĂǡ(␘X]_-Ih;4LP9dyiC^O;*H%"S&{)"V9aL_ ҭtx6`zBLѥ¯'~[ow $ғpVS9'"ӱucIț'iM1 1Jj E퇉 5P%Vёm s6J./F; ɳ8@̴ͶHC  5.~î*z3/W)Q=)3}%^wj+Ȯ<..WxIOslQ 7G49}C$`l8(DcLvZrPnzTjB=\]N{%M{XС0 ='4%j~nr,/͚,v~F7kt&I_ԛj\P*uv&`Zukk\M3e,}0ث0Z= rЯʰYw&wK>SLAm zu.pA/9[1cV]lLd+3GIQ%4AӔ%0>Weg@l ۥ;̮V-܄x1حwVXlQh00]u}frVT7V4D0 6)z/_s"El]@ E.ƺӸ\Sx] e}ՙe; N]&RuLv)^F}x v=vxDA;<)#m2gs1z]w@fұMx.67Ë҉r3Ûz:w;= mr 4 }~I3=X#yɻː6MJ6Abkg641x%8V8?sjFyß.vK:қ"$hY2~[{"vM `.c6@ttY5ֶiv$eNd)J b퉛c:׶XP{m`{~y)@wcؚ@ERi*BaL?`&.1)_O9|um!rY ]NE eBi'pn䠨_಺b{#ttj.(]%TQ}.; i!asWvm_!Q"3/l:*W , <>N~BJ%|  y#vL&@A4"v#S$$#z9x{zi'1XgnBh4Miŕ=)iX-ݼU(7`D}Fé+wY$pѼ|5i&s4cAZsU*jR.g_J;<ߋ"S0)NnJA~__c}{S*+M4O$JR?m5kד!TTe_N0 k_к\{h*|UHUX3v"x]b'HT |Kܽ_2uM5o XWDRe$~GoY9d譼K>?3Tp.uV.sHQ{K?2GbŒ74NkR^ 4&jdvHfڱYIAZĮeT+Y:!p*|M ӃbÇKBv׮T3e3nmzG8ˋc!ŵCEɉFiiF+\Hܣ+) d@VF,ۀ >Q0c8ddW#˷Xi ާE &JBQor" )=ٙQbb´&z.k[ :m ua)H1NG" x-iEA\k߄0eTAM[`b2MLP/&#oCyvz^6oԵx*Ője;ZRGS8{[9a$[+ӐYq}+Drm 7U`.Eȇe欱mز[-wx۬ m;[:fςZ0Bkdm}t @Im@1x51Ռru(3Y$^tN6oOq*D&|o!i/xKj8ڴ_˗ }CU0U+I"yޕG|qfyZl{k "t!Ɂel 춻(LW!gB;Gt*ZzGxgq`&[/n4zVvfPN\yr@ʏS2)YgՆpvXq6s9w<+cQy ω+6ˇ2FF/ ,k^ҝtI{sYPL4mޡ -gFb6}>U;2Oǫ3EyǩϱtpO+})i (n{CwK|hʇ= -+Mg6#P&ݿ)K_C"6 ! x$ UŒN%U@_'C$'H `GEpAI7ӪLOILٰgmt+3{M YwPZr;jO7tAGV̭!y_>ˎOYh#.q1R_5*(N+.iX-qXgv} Z%,$܅p֪*)ϩOi系qE ]*W`7 @DH)^|t \Sφߦ 43tEI~$C޴>'ozf-YJd) џmU]â@N&< =k]$<͡?=wC[ƙyw7rd}u$|Vʐ i >q]&ևF'!8aE}S2 d ^, yr['~& ` (:cMSr:[l(iwO IО$'By3~ ~U1}_wwZ*~w[FW>[QNCeD=(t@{HSJWJN%fayYBsvfkTW񮵪o|-MQtNɏ.GJf~## cOΕN 3t(䆭;*@X4( aS%x*i.3LIMƯҟE J#F '‹F df݅ǝ\aJAyaTHiPC*-~P7NQYҜ2Ls5LzM;eWI\3'w//N]Dzb:om' գgbImr2/ |ksGW>MLD-^y5*PXl*.rѷZcs,0& o"!<\F%Kв,KZ׆g\.+yH؅WSa\XZf1w|Ua2ִp.aϿ&KGuQ,}fKPbcKe\*}yF c+L|5̮z8>6⳰\+|0c970o[oJ#Yn/BDSkγ u#ՑÛQJ]Cg}cXm` g<xMM&DReoLʚ{S'1e{++0zP_~,N9jlT ײ zݬ]a5%3ՋǕ<(odam+;jbfǮWw0jL_jukNpt ꉽ97wP!$bf !}Q1UKFAxC;z}-;IKl![bqЦѴF"*7AB-Pue c3>5ɚ{cj(PȌzGgb!XH2.0 ~&{!xG\'ޓ_d(,A x߬S*T' YH  1t *HnTN!?ٌWDD"^m%{Z4^''lKTJ:| |B8^`SKÀ-BNac>iSf[5*K>A|b[ufy oumAd>b5xSelw8}SgfDإ/l {j2 Bͱ@36]?M*C!b lB>]v,џ?CbBҙV'1wB%)u2$lB`bKJ潥l4YA\O^< #@7%VQ/$Ϲ?4-^Z}gd,,W~åH7a3V/ p!psTr4QtO9&&  =ZT:=it? .fzr{^حb2( ]H|e9zmEq0ĥGӠIo~廼[92Z(>MC*z=HOr٘k3fsfuW' [T ʻrG6dce;?e5FT6a#-$R:+Ɓ# YYM fnl?YOaKDGp>}mhtJ%BovDX@WIi^kfN4F&[VR﹘}+bjcR<p{$iY_Y6͜@.`^aՂ0W7h-X/>*+ݣNghJ!ܐlS,цfT ʡ q'.TTa!~pT& Ψ8J,=H,Z =7#_=6P6oS8vE6u(ĩ֋il((Lԋ}Kn/(bu'ő1Fu iqʞ.sR2C۱O+ϸnVJK9")GZ9Fe55y NB0Ġ&gL~/HG\jORo]Z3jWv36hDZYȲ~Oѥźv ꅞZPpM'B8?Nj);,'}2yrt:OH>&º2PaRa|G#*V΂⬄D1[5s!!D# gD,^1̼fÑ+kuWQR㢪qaT?K݅dBw^aCјbS\Z  RA{ƜjBKRu qF4_=3 xv dˤ Gε|'cwaS((l`"w ,2 \G=; w_9o h.j È;c-?ZJigZ6eȕ4| Eaz߼kuAG+x֨8 P(6 B.E|?W8V1!Jbp}% 75tKp4eb5'1$(JU0v;W"x5 gڞ.-"<5U78 fJ-,NW(%xuTHpI C6l.DՁ2@2*0[EuvTDFlAe"TVog?0DELHFMzu uOHb-sG^ x> uG~N:B VC.wF쀮ppo7#'@ [!f$1w>f"*.UTN4ˆَG֭މg] g[_p.(,Bd ʚu6ـJ,tCC%LOXcDHlm 'ˠ#i("92;ZK꩏}Rmb~,˹#aHS\;&ڐ*+G.mP3g4|_[r=%9wHnp~O` }l@o-sܨe:d8+Wf@n.Zc!$f,@Cƪ8K$m/SZT~&]>t +bW@QikI6BW]$UHRNmn7uqW H,U%9^EέZJ3?SsS!|p4@vjm|xš'my9*e`g,}*n|H^aQ7q$nP.-1y#LqݡJ(XmƶI TNI e(0xJ܈|׸oD́L3*{ 5GÄfK&ȭ2r'偡]Bό:?n0zV7-D(DmZce4!6t>_W!@Npa n#*b{Uq̓62Af2Sva6Ek۟W`ÆO\UB7fY_~lNf瘨պeAoyZӢҿ9H>jDfԨNnVr΃j ATQ(Eml!Z>AyUӜSs8E;C_IU)Qݛ":^W \RRaolp5x4`sHf@km7 O/yuJ@"Rrx۱L.WֈEfI\EnAx*5Zi},\Եw!ِTPa몠:,y!P27P۸B LL!x-!ƾfN6D'3ug'}7]X6+BY"~ 2%ժ}J1۶ Cav41/Xf).W/J$P.÷r[mT-)(/S}?Z,0(&KŹJ:ovR3g'ư40YmbZ2Ńu,̍yq0qqqB4ixb$øZ* K?jV)itS$kKP~b8&c9o\:?ʩ?V=. %^r%˘D+M"ur)ck -|+ 66t Kx́Q$2 t0r㮜=+|h$~; 4 A!_R&$sCs:_~aMgQ*CU7Q}V3ȕ X]j_t1cXFVh D;ퟨE~|%fy؛b!&3asb+¥p{ve?brcyQ @X+˟L) H?80F6TC4J6Ƣ\KK=\qMg" TWVƃ?R0Nԛ) [i 2 uu,%OD{C = 2K :[d2s(dnNBܬ|_yU{DK j, k_$PkOʼnzR"W#t.$mɜL& x(+-7)T$FQro3VXa] 06_:Y*}p} Zp*5,%>'YR{,j ojfiV}VuF= LQsLVGֳ;^}:1H&ƯKksuGQe [y4cyYk'wjT|-yVέWQ4Z.]cfz㑇0"FD_EG$t~/ \]_ꗾByPַHp>aeb(NV$$w%M/[^MhN@_ 稿'ۘ˿4zK(=:?G(Uwx,(dEj@>49 OlU#6TX3 >:oOiB[2LM: rr@4GP4zgBΠ_y#i:=z+R-D|n ,$tZcf[Tʹp ]i\yW̭1+`9AWIT{fsMѽo x&6"Dž xV&-lJPေBQ:?UrE$&@PQ~jV % k:t Ba}/ҵy2}w'Y#t ݷ_H [p[#-|eZ-ٳfƿg+0qs-EN_7kĽ[|<`z _?NPB tzl!:6gILmlZ?qz8ĝg*\ss|j ͓5 *f݄ a+)i- AVf?Ndtv!XNk;y0U8'?t)CaS1|H7yd{RxPyr ˮ41zESprι)@q+P}Y = 1h!m9g6y1/kJ1A=T}kt݈{*g){/)ÏH%3X?{hQAC/] "՜B2⬨K$tm\c=*6 TЫ[.)mA(4j􏝠d_Fӏ@yBʁ5Zq@Т*uo{FӬgf cI Z"U/J}'VNnxh0d9JS8f4Fػ\{܎>V mꚿ:/|HBuv%.5.VUF7rKZ>5փ4&AkOy# scC6F9)NrL{F0,-xRrlb TΙM }N#,1B$K]q8Z99uWN}5+Pu$d~oI ,@3D;YUR VBIVm %ջ,2nMPp1VDKeb@ܙ8)5n=Oj)ǿ4"*0֢u'6㱐oQղ0f6ά*cqeČXLm[x y5v#JS<+Ҙ!Cg͜1v󮱐"h(-RTnQ򁾪}v|9K-PQ3UU.;D@B~Z6bNq\靝o3dGvW&p[yʀAL V`7&OC?b|%qTCդJAĨUC6P|7E;?YfTa zaX*d 4rZRrZ:K6{"th#ӇCHs_:R*fԒ*pyg'\d(TS$=3dKݬLwT\&ˆM؂;l$]W|=jN~:"m{ UXlVp#(#)3)Qx<#" cmSƸsFʴ'W]4Bae$S5kɂ 7zueR !v'sY[lr_tZoOn䘈K-@<vs˷ ]G._*sȅԀdЈP;^Iv 9bK#aߢ/O  WO MM ]

z`v.Tf-em2<"ch:ӪJ[m\Tp!ƍs%p{Ɩ]Eh@DvwiЅx L)T޹%q2srHG[Qcd i%%fAI ci4p4R))5ח1Q$ДZcp<΁-66=S A 8&2Nri n90uP g>(wq /V UT=Dk&B/KݐCWB#Y>Sb֣ܝ5#ksCgIWm61 y0gaf~YraBWSXq^xC$X[)>r|49ҽ>q8R:',mOw  Xg"HY_FH^5$@O(?:g]%ZiXb}g0U^ ?ӱi3+[Ud6NuښoyBKN?Z"bꛂ}Uq ׺g ;Rh@~LģVb({aIN\%?e"+ov5ŝnhԋf小qу.ѹ%տJjKm>Z`B $^'?QuS 7 *s֯ nC̀24 j=$8*Pؓh3%(.릊Ss7EjdDϟ'0L䣪_%=o,J.r(;Jv/n.$yc6cyH]~ךc( .!Y4&g0ZBrt mf+Sze=UC 2Fs&g-ȷ:r5vE;$Gpۅ!)wa(-f05^ DZ߰*a7wkds@P'iGLccn;g9l(6!UYm3p gW%]mdJNDIZ|XM͖GOxE>:"B̷%*P<ս=&hm5[.b&]a5mQhE/z gc=%<<.5)g0#}d%~GYV]Z* gFv((:J"> z>aX=CT<[Em[,ifn/Xnp(5ՓFƒBK +) p-KZR%@ybQ @vg2cGv*] OK~)"bSa6Q,GK3qP+1=V@ ..j_ 5kM[7,h'`hӽft9NB&~6Jűjq>M-G'EYh}$zEo>gf%y[sά\& ,XӨ֨1^FZ]wE_YR Ћp7JRipbKkK)u@='>ܢJoUոex^#C(wF j;(栐KYL-'SRY|$r?` Eyn'踈 K"fmPKјfUoG^DDL;nRz>~)C; 5 8 8Г^\FM[ݹ`IjⰣ0?Hq[;Ԡ)OĘ*^reh(T/4e*9@~ yp#|MV!mFlS&-^ga*ܺhCZTpݙa8CnцACSUa0uyא~cˉ6rKvYs[k1uJvQaqĕ{ϜZ%8l=:vKZ˿WKŇYIi"x]slh VyJ!Dַ?bJt8Ш:Ry&eCd`ǛɧMe{6]2惻3>`)R>bM;ֻrkq]kǡqTXG{6}8X2Chn=r;b'diI;6Q.hVlTL9,=e7b2V1Z2Cef40UާCײ4IwD+* }\jlax+DJƻj=Y6DMF?v`~:yuE9یylO1Ӧc)Jd@: Cz^5:/r,zn@ @'7Dd\?[4g~u gQ匮"'Up/OP{Uu"<`5Sl0 ^'ԝq`n@@w[C-~5uAƷ$Oܖ&h>X|6IB`9PzFO!Z:( jET6._ >}w9и Ja|)u]A 'OByTyhd:glb%X 3Gn^{=x0:~aL .o6? ]1 ']MJj<) 8!mP oTAO`5zR#fmOjR0tUkt;hwwQrfkw5|;(K/oGq҆U9 {e\ׁr6;PTeZ9C=AQݖ-lty-~QKdV"E'^e53F'J[I?#(E-/a2Qr!ӆ8mOYbc{σa˹2@e4 ^+MXxU"" M¾پiRt(F^5l:X&qm@6Zv'Ő-EҦWNZ)81Xc̶zhΘ1.7I}9IZx$=foH9;gZ&~jmFv=7Tf*GGL&K=e."琾^ :LZކi (E$ab"BZ:͙l߄dqn+ R&Noge?t1S-,,#"Tv3Ƃ,Q<3vZ߅a1U"gH.==uKkDi!4&ZI*sU7ō#8,Ihp5}`wBU6NHc'섢kܸ?X@a~<_aNdVc;0@rI17E+]maqxP #lXV? :뻑zp鼕։V\ZXV9TZ=>bY:4ҕۮ֣&~oGٌtDK %]ekˬ$Ȭ~ #{WPN8囆y|Q,za5UO\ %}#յ-]?#^dΩzuZOS EꍒX=5Xǒِ}8!Y~mnEpQ ;#뒈oZA*WSX+N8s}#k:ChY[>"FabIμ=1$ɶh\PU`e/6-Rl~dvYrB-}I<*|1{e1@- cEچJKIl|;8 ϳ /+*y;#& GN,t 2YؔJs)o- ) L JXEFCvi)y!ٺ%:M<0fW^Nݳ0Քa{}J@A &2ma$Fbn;1?tun`e)'>i-z#!'&2dZ`;YLL8!f4!Y#Fu҇,q{12[ŷ' A]$eRp"w`Yg.Rխh\Z6_?xY[޽.:j̐aʚ\ژ .iZ&(z﵂89*tBK yA-ͩUJ,([O]hk?%`㭑ݾ;\+т8U=/ ?Y?Iu=P; $O̷Cx!ޞ*RTU&"sYngԒ~/僥w?G$>C"[∷I[2~2 xy_LG|'i7F~Z;~yX})6J 0$M12ɯ[=f>/~O2rKYkLa?aҕHy So9Ĉ3,P[wj/a$K\xŗ+vy/  0>xľEs'Lr 6y4vS:6+Yq*xu|ot 2,VIɁ`>wSȎf isMx-ʵ[8^]"U鏠de*,R,YjϗLPׅn_{sԽSAV/WZU*3HBcz H+piFtA0~^vr?r n[w M3/d-+~%em/2tQ+dNuvr0֒P[†h52ToS#Yx,6F쓨JxVPq~ׂfڕ;oY`xqHpb)m߃kx ."/aՃu?-NiWiᚃi Q"IEj=14yQ L7SH䨝;2{yGG;[:Q/oC*?m9 FQ,|N{Vt>xȀYC8pYɻ{3O㞟IԂ<Sa{u? *u(v"g8's𔣵Ri˂ឧ?K@KŸ9\^(0lqʎȓ2{[y5YUǣ~P.,uRB,ùBCs΢q9¹*t-]9 ;AJ\DSJ\Yܺ:WPC6WH+ȎJAhVHwm @nH_]2%Lt!H`NL#͎0-DjK;2+N<; sEH;KŮ3@ǰ͞#&>D-M Ȥ[t$#|&eVAlƜ& ,vQsPe$^^J_ f'gѝ1|`:/X[-M/WFHjzl,p1~ƫHs6}ub*HpHP?H K}Gʟ:~7`鹷0gِfcjz<~PjٓyXd-ҪЮjlyI$k67<8m:tAJ&5Gdu>9)ݶO:5YbWf᳸7OL"3e)lÌ}C3,$p<MxS{g'rzAc0[TO h3$Tܫ?⊚'t7CPlhf{ 5@a(@(𶮜3Ԃ.J{e7jO 4J&.*ŜQ*x\u4t=c g-|'`\Sln,yD3oP/,n*lJ@[<$_x`a7gs o$`Ya8!tۨFc3x@t:aJkMb5:uӱTZʋX A#?WKWه7kcQ,l#1zSW|, Y?"67~>K٣|BcP%?#fEآ2h(6*3nb eP?!"b*_[H:j7(PzjbJi+DCs([L8ɬ3.(di2[ 8ۛK9d teiٸB'f`̈́q5٩FJkbc] 5eN4Lj_}3Dxxz-2?]qIh-Ly2 U-/a͋Y;~V87v[^0=8_^FT& X9$ct 3S!zRwP)x]qvn3ٟRAq 5q?LO^~`eH5RI&Þ8NG« g(8XlU:A.w[U8FL]XGXxm;u{F~cODj>*& tB#7cё1L;8!]2!AG C"aDJHnMHnulo F_$>3"K|?}WVFmzS {!?+L}[ug +i)0c]WM9ܺ!"OnȚku`kv 2:g n# Qk$ڡ.<`G: T6LW4~4XzeM4q|1? biyRj̓Ұ n6QˆBgӒu zqcQl4Iؿݪ'~p'Z⥀dG؇jN dmpL/y&HI (A~޻%tݲγG$`01d6`vR;"eٽTg::iArٗs=q|'_M/:&U5_'+ -ѓ:BhcAɟ!R{qE06!\.4̪/)%Qo ]=>AL6rf,`o!dǥR^%/rf vl&d1*6G߈,P]b/#  D).]Z]_(}%¹H{ւT. [<F#%}B LQo s)$-D@8*,lǁ o* YPG^gsG}Jy6Fs̎εnOj #E t:lgmwci+ }9Ja /*m&Y7Ddq+ʵ?5̝aV ~!3;HJ7a)Jjo-r[bզ- W!@7$3{HLG;*oq9Bwj ۄ@52; 5԰?8{wA{݀3eh`#G 4/EX+Հ'VDϠ>)nhϯ) }+?:z^A/ecuS/BtZ/n7CldDsIyMȏRSֱyȬ eU&Ԭ!:q~:1[cS 9ˈ@Eȡun!¼Ȓ Ag;V `%7(d{1pV*,TކTqbYjNŲ:Ώ-CpF"LY)G*B =AhrUoe"4c-tS*M&k/Nuה+u顠?|gLfUFXQ1YB.n_zǶ Ojvvk_#i=Zi&$sƯ8V#o`9tI'Lx6Γ<6m7N % :G}`7v"<^ބĨ`)\O{[NsC&x2F%zc}8[/PBl2QuHl*T9tu▅K,3;HGZr"ϛޭ>=%sew3 qCVu=-:jv\TkBN JmT'J&nѷpKi聆ǮBnA/N10aXo1ʋhixUrE2eAp+X}p}8o-5׵F3y;ˉ8weR@.̳k"˗BjIrL nIaM- Kj*a8]^nԣaO^(ǫWրW=.AžԩIǾ'aQض{{آ!7hh/EByPt¼kEsv|jqB?PfB'Sl=c")+QU3 0Fgpݾ_cqEs|Mm xiچ2#%^r3XRX]/tQ\D[l$ᶛ9QИfhIQGj#-=bUV\ mرz![iSO%kgo%¿nO˻UژFzՒ7( oK>o-\eΦrcr^YhE@.յ(kr/큠34!fUY}rX`50tĹ?QI@xw,ĩboX >(;۽rcٺ/h|Jtr~s@Q1pz[|*1IٹcpM6]"5պ<bXu,űcfHc]աP0gwfS݇-)2gAa>.dlGZ;5ހv$ۏ .l.y%Ȗq7gU"V 힝e'V}2i,ǿQYa <̛`Վyu3 2u"mTT5 ͎;/+SjzZ+bR5l S$T`}S FY}xtTrR#|_ `$ah7- FNHT|mN~W)̀87=cngcHֆ}o :$Ѭ%~>0?oaq0(ŖNlxng(`^)h$_㘖 :0k>`2\)xC5L)/s탏}A,|Ԅ"vzu}?'>6|wf9:y3y(UFC#ObWJLӝ4}H\>5!z3M0+blb~FAg|ƠFGOgК'g^ aLsɸ[)2N;)SjdDj[>pr&[ucF‘XxƤBƹxRDPwn@% ;+u3)6!hbt`7r)=Z7E4^T u (I;jљ'àMKdwAK4fRrmZQHʇIQ$rs7P8L[!E}C+˴_]Q9B=36,e]K%˧[~k.93vJRL~׹J- QvPP{jї|? դK7 "")m 6os=`HC=n ~w*FVu-嫕v^4b$:k @wLhrFV,"/&Y ;3L71"m#pNQdQg)k |ʰGG/t[G]ͅ8Kl⹝'tYc,ug!ɵYU`ԶewZ|hf_X֫F63Nblr0$5Y I8+7G'ri>/-7#riUj$@aa@N E *- Ҷ`OK=ˇ  oEr|^7WOΛr\|^E=1G8cm2yXc>7ߓ嵿X2O,ܙ[?K;tߖ=ߖnC cbzlzL}| Q+:ojaċJ(v [CGK+; ]Ѥ@1ͤ…)-]gY'hǪJSW <:(4xQ;[i\ڸn{LonK H]nmYs4K>|Bğuw[8{]V\c&ubRIZq|@ `NV.E)lǜD^/ `ǗB<wSZ83eI|8[2h|Sv b9 ^u 6ޥcvki ]b&ؐܐ,AskͰz{Eesqꛔ 1v|CHwda FM#L.Xm`Ϣ:?*5(?EeⵗRVbso Ֆq7z.g5G#7$t&3wcUYs=2KO7 Ԡh}8[T(~ՙ(;}<my[.F: jw-Bc38AhƗۦgR,ST^EPm6imw&KY5wl(k3q(  g>+hц>h Tƪ]9 ogc A4X^e˜r< MI߭@%bg6").J=ɘVB3&R `A $ !m/#+/clסmӪs 'AׯֹW&nV'rsm갷s1:,\.z:>tוT44M /0pzb@(2(*G։0"bekҞw t<ԆNNZLhOQ]T5ALS^WB"( D^u1* &3a$gRS6RfNǸnfz,/d> ph` >j+ w. "S(oRO~ۇ6k+7M5gU7:䨱[""!*%ebYz++ kcqrQq8,!}u5τkKye>P9)b԰WE*3hVeU Oe3^S|_R`-%E$tYEn]2Bطl )myկt$S`49jyqu{ Ƞf{s}V"&-JiJIٱ}?!g]g\-%7tEuvVj"ЉQyӁ#5O$DRzE8@Cj?w8lvgVl?Aٻ7|L _[u ?uNyn0hѩ廕]x #s,:gԮ׎HewziӼn<ûWbSధ_Zy>ӷB6h'K.L/<1 A-wp=wy?gj=l·3j :~ b_w2itSHgH)0h!!-eO Dǹ}o"msטuIK $SNx;,`:#! D*!C\@^f^HF?0EW$h D3{,v*KP@7 o4ia:o zk 5[r]TGDJԯ0DCAUޚrn`r B@.OPKd3Iw:}My4`uE}vO{ 7yl2#4w Ǻ,i}{rJTv,qD==!n;,eL"HC!2}e}@2~j#Mej~ms lpl0Dc":C۸z" |5.2a;dCFcn婖y-*L?x\XDd -lΗO8C "K´Gv2|`Cp4ܸ >(ر \ˆRbn:t"!J!AѢ̸4D@J\q \o~%4 >Ȣ 7`$yhm=_q)?)$׺͗w|7K;K<!աILV//$`=˓\ZaM@ Kn;S8b0LؚD/0C=s4<̼^;9ҳ%Wz$y֋-mef fu۫*)TeBMnq9"ɼ  ^U5O=;HqQL `G ˞<.2uN)=/_P^0(6Yb :}j s\Hzx%P.UOr!:+qbcaƏȺSqD D.%L@6ٞ6SFʰUϴCFL'E'ܠNpehNoۿ^G|O({KF\)DKvLЄƈG<0_y?M*EZ~?7tOn[ԓjC'P:?/+~#ꔦ}$qNΏa_S}%u+ɉSVMɶ+N&N&_CG^lφ"$qgWjeRikgTڸJJ=!4;PJRk&< rrQX۸ʆuǽ=^:Rg_e@Cs_6C -/+էUS3)vSv5g@q VeBhc2;< cΟ+sN'iޥjȦӴPX31cJ-eGwΦ@liO =w#bcs}aGa|Vm67x5__C{;3>K-/kFޟoj]l~Oz?/>mZ9iֲn;宁ϧ Cj}i3UAOOvݡ<5S|VɄ~Y'9}Yμ}@67L#VB({@`@䮽8U2-~QۺeTiү{04{rZW6/[5/#wy33TƱ;Ҋ3/"zd~}o_iߩ࿌9ZN^z)g_92ֿjRkdIDzf[I]h.)FhZ.od^ -] "{ߴ}PtͰyA2o9#?DVeECBE(rM*["Zn2z%z`"xPqh Z<@G1{}aC m!'jBktl&'"ulT<)Cy텴8řDQ1F~{` ~W~C7I7)!?($;ϔv_{ֿW>veG9mR<(r;P8:/YeA!MQoД[! pS" ,h4Y.$eBVc;XI?~M+i ||jtQU7: 4@*\E?;H"9aƪ@IR;*Qƾvg5WDPP &m_Q摀RS|hh 0 y…w>(cf}o'JN6V{MUƙ H wrى8dhAj@ &BlTX"(9# ;JQvJ\E7=B`"y {s%I>"xKBz/ UH|UeH䤪 (?hsHv84σ9;< }o (5ǣko3sYnYe)JGjGcI[HUo֩[6_āT^dRoQClwgKٵåowJ^?chYYmX"V%Z KVZ%çRbsТ7iSU6h5']z;g1)V$8016M`7䚆LR,FwV~WꃲbIQ\$|/.oZ&ҕ2웋JcPi$W-Xw@- gx'I,ܯEgn x>n,@,BI([ɡ9=^[9\@6zڬZn[2DaDD4 [ްj r]Ǒ˃"zOO_}'<aAJvc] ڠ4A(>X7 ={BCP7o J͈؏߇lVq#71D(/ɡW2j<* ;! ~Mw2o?uHAT:''p!q${֯`"&9J H$y9R]wvq&uzP "*H=$px{+WsntSҊ_vetuO,7դm:rXmQ,#}kXL0Q8 d7h/}Lð` +Hndܺ-d=-@.y~Z:x=G} ݬ13|)c`rg쬫L,19BĨP4 ),HṊ;;rBwڡ\0^ԟ/gOMvh9ӡ ~Ϩy_+ )w4C!zٳ::l9;uӹOqo/o>ՊkIzDU.~>{.We*t*2)棪QdwICz.=o`N/%VH{Qؼb &_Uߺ3#=sy~>]'RwY,/`Yѽdd :?o@xR^`wL'e) `- 5=>ַJ"+:}aN ,{<yuOu;d'A' yɑW#C+g`Kpie5}mٞH'($+zM?x`׀3>3>hM,F4hwHp{ uѢYjm"y]?`) SEO0uGC 9^D op2/|8C2$zV0@1&jS|4"r=<ZP,+A\IpSvq4'x lZ6駋  I؄b;x +xy'm_7j,7.. w+\~8Ko(pr,J֥B<Ew oB8lfB{\D"d}ƸU/SK?hpj"1t#f0mRvkB#HQL}}0>'fفk@1WN~X+>MQڂ 6 zǖJ1WYȍnPb4B|闲44 T0'<'b,DD KKT }_m"bzf(ϯ-L2dM*;F8g ։kDD15p{7W2l4:?2C!~(q#@P!I+P)`V/w4xpv}m,;ŧ|T:E2I=]Sc]gvP6ΣUU#_=68@! Wl2og@KZa]TbJE1LީI&x@fdrg<lϧ !s2Pîc\ڔ@,)j)jY@ 0_0y@ۛK0@R@@8d5=<ݦ$-L0HL@"HshpjlB\bo(@ }4|XN$YQUE\IbP FuO6pA+Ap/cP?v-utk{7bz<ၱL.~QhKBP]>N_e<| b GfL 1G_0QP/wW݌Dr^۸pLjhX]FYhRXFdn=)߀=Y+]'p$]V-FGG 4 '} VH~qoH[-quƈ퉣xMU{'FwUh@(}n'>wYc [0r8gr9" ۃ?VFLʇs xh7QCD)'AUx$@x"k@m۔1J̢MSqrWvt/jLk:'4%|A&6WF(!vopx93&1õ8P5Cc'k0Rc=;'FP>ygw7/̵}9fK=!9,)ME#Y}LZxV5YF;ћ}B89TxHA)@J!L1)V 3R` -u eT~&oPOOBpf0' W(._xԹ+&UB}O5"-6Ͽna>O,?紵:eSi1({K?8ͣ-npݱ#$An=E_)Wj>V+4o]1@6 ԓ̝RpP}Jt4)cI AdC۽wQ]Bz%&LBgRMc=82zC} r)gЩWU*#IniGL]g/Fb-d,M;im_).IAj%#NL,4Y0}|T?ŻW=`#i>Q#I{]ray>AtSNPƍ66_^ :/J{첇ZT'(;pM8p&jtŽ,{yaC5raeviΊIpC+~-$|Y w=[S4 ~U*+% Dd-ZUf|SM2p\O:1Z9@XP;+*F&(g$A.vC'Oy]suE]K m6a1;oݶ#@\g_v|oqRS=˻գB~aQc(biˠ:jV~1F@4 LE;\f 7{/ԭ~/'6 5N ~djqЍ/QicdI! SWaVެu?{plIaM?Εh&4J5n}Gg#aa٥͇?>YO?:`/[ #5jF1I6Peϔ8Ra%TH ]YqZ^¼ԟ#npfH#@#NjKjK1ʵXg*БwHk` NB#i!1e.$7SC\TeT7n&0}>_:챮I@&`I%P[׷O]q6"_ֶ۵cL2ѴR2¶`uzi6O_ѰHoA$K9sߥ{ 9Of*Coϝ &5YԉG/^:٨"jڽi¯[{-'H^3iPFKc6&.'Ȉz>U 'o=mdj{6-yMX#GRVorgK<[^LS GÏrt9]<X=*(e (iֲ]Wi|<ӃNI|3Lk[E?kZկ]=?W6|W]ud*jPɀ#SU:>&:$gi Kx% -[J"U!Z[{kLWoK:y>*= q)m ϖLJѡZO-^E <_2~w0ˢq894$RɌSj#'|G}6_^|kMfv2 *J 6ۑCߩY!Roo-^֎p1Lg/9}ܢNw.$vEj&={m{CMWSO?qm% z]NõlDENwc {\(}<1_MXX^ G?0oCJ%ieΈhSbuK̢A<_9Zc 55T}8;jLkI[X zֳS+ٻIEV+؉0)UgXD  wky3KkO59̲5~kTClm nCӮCZ 4:奙C2 L w4],64,fF{Ï@p̔-T uw?Uw/f a<_K. 9"n~[8%3:]P(LU;(p_bk6/'nɲ|keD  $5^=0nqC_I`:jN9e)}Jg|XCڻ <­^aK7W8jyGƳz^sYI'O@fd\/:;B݀@O%Ca`y,8 q` $Ÿ$Ic]nM_zJr{`EW@'~صB4yT`Q ~CS"h^R!O 'L Gǫx*A~!v[@elqPQF~nT€k]䵯;4-ë3Љr4Z"{k&vI+ɪ&ۏ0 -p!E]$ cb~ l|ۯ1;ƈ]Y "WRLA}i35ϕt[c8 E(~+ xƎkZPnr[Y"X齧 ɂ]Gp84p{fYG?( N}9CS/MIq9ۤNphFfpgqEnksՏ/>U!/`/˵ #};?t0v)PFf/ 8dYyy~ySҮL}P ޮ(!c/,$;J+5SuR SxLNlۆыt^@8 }{8{52;,@v \EJ V]9c%nJJ0hR9 yCn|d|ɞ]8F*f.-J<0l0`tMyoafnbFhQ^Q{iNla $ECBC}@]'x [8Iɇlɇ[hn-C_ Gl^1KHpo!篨3`A\'G03ڪh;a1Hp*Psf@+u~J ǐ^45:5vxXV8 {*OMb` "PFAl==HlD z$8 3W#GLIB{X`f @R (4QPv49oUGgx4DG?O8Tޣ̜/Dld?2 LhCA1ej;c| PHH۽mw)n?F=EA~&P:R&xFQ<\up*[ҙdvg\ujx)Դ _  K>-$9[b3@a2#q"O!P?}P',LI%vɧ}<3ƞV ⱪ'"o` lP~h &c_V3%{BvVyE1ZIrXmkyHP}T ?,^Hn@M#?g~b˾y1*|>;҈tZ 3Gs?Lx<9R䀎Ddf^!@ 2G /~$0n "`i&CmzIzBIR`@hV "\3@$^-ɚ"? J2a2gI:s%ujbe]TyM[=6c$H~4f=i$YRcqQ(C1 zkg葂VBD@xd?QXjbXˆ7vgv~*8pd7"20X uMXyu[':9-tzn/;}݄.3~ݞ9T88B_wsU"%I ie~jN٪uyoYO_C>#7J! TZy si@ק}Gw̶X%ZZK>ճܫƕ£&W!gW(F%xYD m XL1r=vz~5{r]W ,C;xأb >9Bxb+!R:QnFzXCaj`ףBL"vd,R2ѠK: 3MS󀀬C~(95*+T:Pn=&@Z^қ$?.F1/_:"&{HT8ztL5-A°p;L>yorlc)6 Ivnk/;K#@xkQrO^fRQ0^$R#Ъno@Q!v'Jiu #Thb3]7|?:D5=D]d! 6gf8=Ӆ;n OœFR=-z2'n*~'R=&?٘&O5O nʻ>NjE`F>~ɯlcm7Ƨ՘Hm3kJ>Vq??yܛ)0 giŹ0w 9 ₨ z#7~>`pwgg߱93vzm Deِ3׺gO7 ;y~jqxᖽXkַMu_ FODFI>}5TR_{;_5xk{?{o?.>% ѹ) DA[ Qq [6߭*] 89q}{fַKu $sx&Z']5]vM[]QWDĂEY!EGǕl 3=Ry6@a͵j ݃JsK{85U-atKA.v!?SA6YʓB+h/e/Gm]׎? |F)S}5[4{G{"۱Y{X8]նמtp{_<,3v€Zlp{׏7gUCmaUe~< #yGt@c+7`sR VHCRsf!]m٤5[.³z'UW\O66muplOrQyk Yオo3ry}wf"Ӹu2=g/@FsV<2^AVui Xy|Լ\bbbbbb_"!cmSd sZ OxՀGDbJ_{aC  ܜ#ӣʮGTM:x/SomY,L!ÙM(hq±e?g]?Pjw:D޲'\ٹ.2yfzzzzyrrrج {$2}JO%hu|NT?G%?]w٥6R:gLLALLL>La&&&+z! =eLBA EP'ox)yPkk|CgLܿ!Az6TwU^Rrxg1s 0y}د"N:Sɔb޴"ѫEq:~Wϱl:{e->Jp&%M6);UUUTUĬpcXnmPSV:VL[ů1XpYBDϙC T\wƩШ^M>$ /sH'2E TB!`bf2W,_bOSvxk4#]v3EK7 +]1dK9>:H2c-O(Ƹ7tLTlnxظkԚ0Xx鐐A3Kޯ x0>]i?j:bmHy xT`yW>tK:Zܲ Bz馇K.;LÀDمukYs;uGo>,6T5{i-§l~ȳgא|Y |B%pAC@c=q<93:1"]p U! Qq]خ{wXnu:TTΦn 5:׾/6fQY}u(Gx8-ǀaG=gt:W'CP@7Y!j xu ErSiXzx_\TL`w;sB}IE&' e@ؖXu1g"D,IRT|hp4fv3M=#_$L!ɻM!YDBY:؃T? qI&0M`rg{!bqV fD& ـn€o>E! B&՗0hF 9w.h:Ҋ;^xĪxG2A.HaIDT UUTU%UUUNUU@UQ=hr,Cڳ?Vi 6r~ЍP#+9{Rv_;{z/ORwev2 ʘ"Nq@-|Yuӗa}] e0<PyQB^ ڟop[#}#[3C/YI bfMY9upL0{X}c!BF]3V65re\}7MfWY-I'-$NPs~O Ųk?Õy4cU^N qEx 3*+\7>xշ6F:coc8)^!L61՟۷tֹv2&=:7ssYYr;:kh1mp5 B1i3D!5!p¾tE55]ކ+]/LQq%,LuHw9O|/whOna>}Ҷ&L^ )͉"@V +~IE&U0UUUU4UUUUUU6UUU3/B64̪h[Z faBo*L#y&2ztD a8}rGdbKG̥}aPQ[KajY{x9ufTHPf"@o5ЀUo^ذsy>âG F~>GK| '#/I"U (Hd3D)eL-?ݹę=Q.i'Y~JisW/I4\G?|40dL+)sAQ}9'|Ys9ȝVe||mYfՅ]2a1L]Ԕޙm/d,j7g5Y@-nAPlT,]_u(|ŬZJ'sUCh0LJDRp%^?qd^y>>h΃gT1s:Ճ;'s@qDKY \3obf4`]tC<닼9vsמY7Iشa'^eHڬnv7b";02tG\"0YZcczM~s(*\fJs-IPI4ڼd#M(Q-k;ȔGXGw*@ou\ ġGX-h"ŏISÈd]WAM4P|L:Y&ԜZ*6AUWWi>՘WbX^:(;&S8u[fiQ^Eׇ{qgXr~d=HTVJa#_nGϛz ݕ97}ZWcIRj儔FY{CjBm3Q@O7n~/<8!|(54{",hinfZgR`=);D>4M\uUy[fJ1K@_cu%'>kyvzWBzZR-r}}}}}}}}+}}(}0ɞǷПDmD 7BȰr@hICL,lD P.a7?4?=J0#`dTpFVtC Ǡ܅53h  'jJӑ+SҖI$fѝW9wyXLt)S˺''grgg[ggcggg\gegY']k d:CV@ c;!̳Ws=-3-ٯ͓ ",T$"(b,AnD8Y?&4LJGk{4 1gK? ޫC_[5;PAD(6T!A:QKx9_?D#QPEq&~{dz=ro xe2ER*B)5e2L.By)e7=Q"z.KE d8w?)ta`9Ucĕb={rNKPmd8uh{=ؚr;w~j@FǽIp#%$x~ӯiMSkLG~iH-}[~]ut`kkkckkk^kkkkkki+kf+kkkkbkkh'NLfWPmn¿qjB]W3:vAK@OE9).f*h q@Aex"w3!s>o]S ij]$-X"y;I9y ,JwZ^`vֈ&N&ߍ|v% 2Ξc2 BR~0OIoKuN ߲3RbJ y:vx "qҮ9. &S(ҭwciƾc1+|:4)9YF DF<\r~WN~Ę'Lf <v1ל )GcyLaoY|a7}^O`.kҲylV<.NwP6L(LǻKuƦk{zojz<p{6XpkGi|  Y%3QVsapV.&&e8}9[<jO^Xb!Ywa6ut~%]G [f}y;3MI$Y}oLxm{Q4Qv9~5>qJDkep[mjьJؽ;s~ns+IT}lO1xcFO@3?;6vER͎nl&36v[IACSw:wӴ4+4?ykPέk ]ЧטOsM~ svSowyIַSo갗 o},8?"ZدEh Wn)rsKCEz0S3Y@=Teh(gL(`v҄~zyB3l&q9LFe$ -r8rYj" m(6 1&)nwRcWwF~^U] eJl3z*TXHbTO Wۙy ysX\Aӯ5l{?Z\UY5x# "ok5E=-1Eթy#ϕUQX1pj/F!kkNEZo2 ˓hFoD#B6)Rǐй-حqZ[J~ 6p)ksZLkTK.~ sTdi י`4/_n.ss,$Cd4~q4s$-g#a} lhb[ Ij 7Ar̻TWolVtku'PM.b ΆPAf蒫d麖tBɮSn\_ >fsAoK/F=}b°d&XAo|-WV;/Ŵ2עfyP!S@ߗ! aqo| ]Q+*">'|pNȇ'p/ W(ַ/U>'oίE l@ e۞'~N($y?+^5U_J/^>ZP Z{T?yj<9LՒpȦL 094'R6FA'|z}`*.-#49&1GdS(65; :ʝ#n'?ңMFo,USw{0hg>h\ Zds89G&CyI 1?`dQpd ^&Nʫ8N-YSC}3۳婫xQFqD P~c:sߋF]db>=-oKvߤZKXuwP6Ӕ:/34/: (lٴ4.*a<oZntKU,% *YG{/+Ǫ en l^Gtt^Rےh`exYdl*VmrZ{)%em(p'+NռiPS+e+ϒP BAĖ Qm;KUkl)[3Z֨zܓN˫zHU|{]Wa-R!(I:mNN8D(d LZ7 dnR嫾jH /EkBa"h~1>Ħ+l 4nږe[p}S6<;}L~,w#Mtگַ]?M<+z+yk(gnL3EXvy-B_\FxøcAJx.V UQ9@pdXõKt}55]F*p~Ƚǃ.GIC>p-ԥ71WXeeq]Y-]-! j6VSފo:SkvjFՏk PHI(v+/HSf1!Lds.4GDf:'v[rPyOwdRcǝhkf5NMoTqnơWRrܼ8e.o:S}(7zl jiZ\|4rqJ6 Pl]+WfW-$mFMyx"4gX;>xy|j)R>O/+LW{SMh$J[4@5=@]IWYי̾{>6J22gVZ_32 nhW.Gv paٟBӋcd8 w ջVN}V*3ǞXO< e+Ɍg] > ք/WzXx,$mJ?5Cɦ whp_pX'< JQe$pB ϋc{s<=))* GV^ũCMp9%a㑚E೗e(dH(mhT Ņx\ϐG/tzB9Z.WZ۹>S0."4ͳv>G^&{o'ܫ%=wkPȔ/vt/ 43ܱG:Nх<#<֊/Oej> k8=O޹+.鉾 I3YrMB2Ec HE[Ly.~Ns~[T˘4eby 7ʍj;-OqsW6} xK+vT̾dbo]JL'픙mSWs4Y=CegCѼI'`\kbx 8 '꿦LdHo _nG"bb=y-㦶봤jɓ3 Xl/!a@-b7lv AV/"Eör% @=!E;Nۢj>`p];E*yN;u{S~O}8xT{7 3p骼W}:Hz )T44044444443R4444.T1q BL1 kPҙI~-=}bɜ$\OcJRseIU/PSrfS0+uJr*"dRGas@YVtyxvsX}&>b͡BoM x@;qJ17P]h 5QQQQQPPQPQ-QQ Q QQPPQPo혃~wS-E^̳Դ|~2Rҽ m9Ux C0B\d̩[58I@,&3930.{ΝTɀwP(FMRXF_^NiTIIWt!jOTT Kk+SSؖl~ZPYI"쁬Ϫ06RКK=0cȂ /'@@C!ƼCnXC0$! bbͦ3?&e6(ٲƪ?K,:E+00Ha{Dȯ K12N2~q䁮>is۬y潏Tjf>3`t,f?z˧WmKF̚]ǗB;Ơ-j1]뿱 cl_ tl۩ͅK5:H|C$)/lJpX6կJo閌YK(jĂΉK/5¯ȋ+}$6CqIݜY 4ax%u4FJ 9&; x3;Cgdh~n%@ۭ#uk`ϔYy >ӛj75O)mOhѭ\gU-I8bQv;EtUvYv>)yF4=9uuEz7C~72 !E5r6#LvHL#fFl|,%VL $hu|h-v&׾I+#-\H)DQ46%F9'BcIq*Vؒ;?'l= TvMYmcս{5{3 7?9yVzA /:^'}"gnW5SbIgupOw'\+zsWxŌ0́θH!P7F [Zp8wxOYS* 겺o[c9)0ZM=u_7tPWue:>J'mT\;w1{yWm~^JjwodbJY}xrJn-C^Bv94LєZ06UIM rT KIJHWE/`E $9za~ 6鿅O7jenNh"F0s(+Wg|-A|oK~nVg;v64ڪNm$P3 HxJ%ϛDhNE`~]axD'Z#.V`X}1B0 dBd'ǢqCbݞϣyDtO&1ZZ.a!-|ua/. (,F,Tt$B0ݔ"gd"jݽoت^_zFrd9rzsT{KhJ ; G,N_╼ h}p;؞TܖN!9v4# $ FLXm缍$nxfεLzY ^u¨qTsJx?a[K1/s¡^6.jڥY}spϕ/i%c-J ՝Pཙݜ˛91S_U?|>d כq3 EF6<輩j)1)B2r*iK!@[4w;zD}V&pw7{<[n.֝`Z `eĠIN^C;Ni۲38OUCi.>2 N%[ܵVPL ?yu9x |%!0$3$|>5U4#ȐD@SJ(̡9䐤`i'e-3add;[oAڵT0q9[k2'ڑKZRKRe~;i4fQGzJL[56IUCd};?0J#j%AV-vNoZh5e-N϶mo"Z4ngF`U>ѡFuWUV$` OJQ)nCg2 ܶ T9Oj]/]f5X!NdpxM9\[7NszX!n@^8wv94z:30t#k djŴ7E9}鵔>{z>@!y0w}i$J!ClG8|$td,sMvC0^;H@5J/pd ܄#0!oQ@a7eYT!,, 7l0$d@a~!$)d;Qv(CF"X]\bF[S48 V8^ H0xh Bo1'.'aФ0ʉn . *^:2 0@kX̶f$mx!9>f?Ü{}F'ҦR'P_ /-J-y!OA(΁3WFG  Hp9jqsNobb!jl~'r",R I4+ݞdD7v!;? h5#n B," h$9وH MNGZ^8?3n>=?%G '4M2$#u][zA{'&V;F}aX8TyWA.TI- CBB\Ketlh)A&}񖽂}W_ł>-'gE]$em c Li(c=kf2!D7lJ|E@Ov2wŚkUb{ ꡓ96vG߲&0iZT:jÞBdmEHLD0]ZN7? J^礜'rcE .&?;3?I}CzmY~z%Lb?@)@{|ݺ{3_]lg9pAy2{Ƽ8^2ޱ̥xKZ3!a_u>O+LjFbYO؃owb8esKKՁICxLoKB2A x @ u9Orw|8B;;` ^.[5wy=^򦁛~Db*z]A6bm~稬i]^1c㸵 OG" r_yC0">|Հ|>dA˵rVOS|ԾO*j7u潍/MLGHpxne0[ ,Q}~;ɬGNit>.ǽ̏LR:(koYܿ>ufA-zK@8oҳ\\fY948$(I0Kay a6>`XO73Jp?e>K./ێq3uqOF=uɆGyrouEz#wRS %Dk'?Դ joL;| ~.^f4DP˩cJ8RX)JڤV[F"O_ʹڧ5bo~yы ت!O70 IG!ԐثOOodk%\qˢ)/.FP/uծӥ/$Å];xβ,ϖ=r8g*)]Hd=rkGfԎG+35#" j=DKqRX1VsOsOXuXZTBefr3zFFhOzn|gl񔺗Q{91~1'S4.l;$"ޕh{H+JA㈞`6 D(䱦ss1Udua[&iJff:l2Og!@@_^}lJkʺ WnԗUI ,.8$LaDH4!{dN -_Uy6Z(]ZLzf .I3!7k8۹94B\97ZZzmfTx,)d6sSRwޑXL=Q'9I~?Pc~k^L 8МCPJdUr;"-7䶕=q{Z#t^SG~fA97F$uC7n8/+%1ekL,yZeBƙʧW,Q/jP+9O݆]pt.l?\3[=,6+B zbH^X,m*ƭP ,j(cȬ%g&U*sU&o G{f4W`ϠxBI{f.=w1M$cA3J4uO9B}ƣ/Jw~Gq2Q9h:k~h# z xEZ-JWRIpK{:9*6 GƇq:{>.m|l~e^/L>nold"p%X[U OQFʅ,ƶABDu܃e/Z`Pzfy>V]-PW%vg>m2og|EgEVNcbwX+j{͵>EJ]N]*uOˋcea5U4hg557/-QUd3w8%5 s³Z`~,b"Uex}*Y!I{$a"Ċ?E{ѣ{>i!yilvGOM͓a.կrt^C䗘Lۍ:IZԻqUs+s^b0Xc㽭q _;HjV%~m4QKD/7UN5k1VNQQEUUP4;AڜRsWMV)lR+MqIQzIěriΰ1SHN?9Y9}v;*}?k ilg^Rn5 Q}Mwc3xvձFZGɨ\N/o[by{ی>rIc}K=&lZm+d\ f{W>rh%ٿi&OI8nR'ײvz2scW\l`׿En[dkc{^s}G=wa0m5\kglrz ں>0a+phtX&"~"@[y'W|=F}žw_yWrKG4ӗ%Te ՙ$)_tRL{rSQpPo@T?F~ydbCWVVwbJpY` Baaߪ+u=;Y#{{\/4>i^ yjqc~؊{?&S,B~/ Oo0BrpC ~.SVa‚vUL؎˦P !sq"=)JcОQgӞx%#*) d]"bvw*aR sT_*mbs=1?%'UkݎxmM4q|K2hxZ{_ƀ.9G:revJEY8IeFq(w qʸ_ZHIҡ'.0{A-f㩄?ķYߋ;~C2@%0upy[ޓ ZS+S0tA"#gI}:Q-w8BLx‰8[om9ɼ6l .~o[7I=ĭ}cᶵ^BTUQ|Wҷ=㾽(n􇏥;_򾷈m45]O3q^h4*:T8?ӆa꣏?U7u+Z̄zY3Kj$~ukSih]0RNUt6Z(nOZDZ ;$H2 F4[_q0|ܹY|7BrA,>Z^? ] _e{h5>>QR-u3<Sm#y-~-۱BSõ0Vf+^'_nBAP οTtq>@iL@RYtԋ>)ꩡ4"1Th~C!>:|gwz k}%ݻddd_$[>ޙ5M+7~ŏݙIF~roqIYM[#ZĺL^SLw}uz/=pS堜Ыeo ߃Nظc:Em`4E]ߚvO4:| Ұv74rJ%-,ŅKxmG---,--- //˴KȳmIyq=wJ OȟK*=1<:2fbufSh^A~|^=cG&z8#]8'Jny +*{mvR_DY誾:Οkp;:k,L$tCJ"~X\ q9?%m-޴ȂJ:N;emЩhf.rk<_aX}'>HDFk\;8ڼd^h,>2"GR(h2N@T]=OF6xy^19,x0@W?W ,MCil \r4R-2e5CWr$w~w)/ItS Jʯ^!Q.*dͮvQ2`{|r=_T;q:OeSz_;߸?Q?0?š_?j3ֳ;MbHyaё.sogO~k =_vl(?m4vOu0m!!/CzVIU wsw_4_d!>Ȁme܈ǿ(9;/WXew~nsv?SHiD3ܚO~W/ܙX͒VkJ{ҔQw˦LOOմY>gv0h3o!y͙Df$:@@/. F1@\蹘LX/S>zm|L2PWjٍ\Q[G\ JgO&h<9t<%Cu"E>n柹?oO m^Z|{.U5ߝ2R^"ҞɁ3ERc-r¡,@=(WyNE==o- /ЉflMԔ<1"RU_}9^;Ծm ۮ1vq':5yԉ+d$LuFoeģ͢/S5uuD{O!w-[ 0ϛwmI})u7SVZ_6 Oo_/!-wh7'wP.9'n<&8?Wc~9<י[yp_{ o 9^<y~L[GQE7|ԛ?͙LfsX~xޣ`MlڔP 2ck&'xը ԡVz 2T|+|Ԭ7߷w/IǛ+ ףZY:k}~];nHڸd{I>d"OcʇX^ y.R/shYFo.)Q$eb۟A]Ot #3IГ錗O7la>Zi_Pۛ~JG<6Gr/?L/kڦs]BS|3r߳\g ΢kc?y* 졉CRרf0K(kz(NZɘbIЈJ.Z7ZZ fV!YQ| ̴TU~4럲n{]L3n'*!Uʟ Z fOYZf!T3sG6Jtmv/h BPQm8^wXU(/G}- m,c[M7u|7ٲaX1JMl9&\mJ><޷ZroZG^d0!ae00=U3q ]ߏU-M"| jgO3QMOB;an&26y@ؒ9bDB0N ]RS_r+Us]D濟ȅMFݚOev;3Aޘ=v=.@㸕tm_/GpIMuY1V$4>dn}MGLtܹ4Mt!5܊MoUlZ>Q9 ]ZMcSg#uLj A (( gxK:l*ňb1SU4v9زW yoYPdϷ (kJURM"fz伎4qMrV{lk'-Shߞ1"H?R0Q<#?)-|%eN~,x%Lj5>ZW>(jSYb_HUm&w]*oaԙz=6kJse`CCF ~ybj!5 I$*&RBTCx\W??3mmm2mc/\6%_~݊jݳlٱmUUS36ZkZֵUTUU~fm33y} ^=Uͯ~u[g WͼJJ>M1 RWބ|~_ŋػ;ËFXӖyPA*Ruh8oo~ ƴpLy&q6a#@*(+b[ B ?w+ʇ1v̷[|>b WC1A>꾖 Ccr< TK E,~&➕_$`R! !$((Pnr߅<8זf}~lp$$B\F,5sz{yfjS51&7EfU+e{늆 !8RV'3QZt:j}/ oՅ ٭gׇWgb/#!~J P9o?֥b-0i` RWikpL [M& ̔ӑe?z^x(W5iר'JyM; TqCb\]`bNVqs?-^㒼~ki/sUH^CXIcMRBW_C]>U3))E=fB DkCy[V}h*$؛8$lU|0C>nk!ST#΁C!?_5>NW2l2n󨪓 Ddx.t%(!cfUpP#5DPD"PC'~ݙؗRB4;wʵ cg,)&Źz!avp) U Nc1v|`,'g7k7zM~t}aȿfGuc{Mia_W SbY 诛zsJ0;.7N<)s/XЩ d &1 !NϪo@06Z-> M~cԩPUI Uz׼Pea|.1]- IOo s Y(V٤]UAS@U|I}(9Sj۔/,F"#@H`DānRzËN|fiIO,N ;jd+v)BHJCf5mƮq@fZ>a# whAEmk|tyR?B勁}n=ߥ򻗗PR+S)bҞūZcr ntzer-Y6m+XT!=צ}7fx*rub;Ÿh(>seբj[n3${rbgEҍ*ĭ4׭|:Z8 R'ҼPn7l Gz N=5ys?Ó*4"K#lGܐ_˩tkeIaL`SٞefTowBgSl{;?wS 4r,Fegt[MB&SEI'\iN'H-{@@M#3faVP&_n%5^E_UUC cy'`yq|P{yqVYvz_%~C-mcm\?[*#.d[ ^Oҗk;CqNP )N z,%72fHaHK$GL:\TyKꕻYz=߇ ;UD%Yi2,M)?0j1p9uZ~vzJq\/VWA쇻h!w{OfӋ]  5b|88gLsQ2E!>X<}+$R\wT?],~ ~r8Po^.il^¨kRw}q2@诞㑞{zv֍Õù.l+V}3hݐs$2L)d{-p@I*P6 %HhyLwMg=Dۤ^vٌ6C$P3L=~Gm˧׎%`sy~TY[ dQqЬN"E\@-!^kM%`,g'NŔr'(Df -m۸]cƹ:[r5?.ka`ڏzJ.E,^9u2 Ia:.C9N]dH,k&-ERbVX$Ns%i,h>vGnboP~Qi[8҃ QS'eH:deA{ݛ`_viy"uKh]bY9.q7\3܄*7׽wuz}\EѻR0ާp_R%/}c\q=YUߟz\7++.EMK^&G!]ADҦTĘT#Tf:l𞾤5?o Ϗf^QtSTQ4TtU%~A?K1>O+eRuU:ўn˗ު0b5SuS[CܘgEZ6M4]ex[]57u6&: 5B}whM~}xɧLd*&ZY͢_-5(+91187499\'n8՟ꥏ ?׿p6uJI~kBWL@[ n|O?G4K*7?,O_!i6,|<.^ׯ`%Yalmu,<{BAZ;wmbhg_T9AJMUVUUմ-VW'b:,[_SgzLH\1x]טsP/EQcn?B='*Ydy5_7$,14@C=yۭw{-I2վ3zO *cEO0z_]o}vgLVLk~9Tr4RtT5KUx4nygYdp,a9w=<տ'lw%q'0vIYm4?irS?lf#--=9CƆrZL2It dmKYA/U3$A9n1FM#8µ?/?1??/?>>6<ӅtBu=,d=cy49.2N3{t679`e?Q8y)2i{Vڲh\|rvDc!aJy H[a6IGS%U#S[oh]9#"צ$^+tjHQ#M4*Ȕ!& !j6]Wbg?'犱?[˒8斅lIR7s3L$ nҿC2ۈ[lΆS}xK{Igzب⢿7UE (˓/wJ_&Ow+ S7֤gυ'"Z=6͠a6YQe֯3C*R&djsOrZrW[l/M?Q͇^fn8P5Ht88YdDZW/g 5s(͉rդDun$ >֥fb\<n8J1̅wضKbJPYk8]&BjM's6GW^*.DJJY%d>>6kp%%r\ۖȱjUWNk۬RSVĚIU՚sW}YM 3$LL1Vׂ:r}%ς[x',ϋcĝw~?\MZiS-Q|;xg^) BMClI$یW3l9#w LA%#JW- p,eǾgg0AY'j$+A6KO`e&AjvQd*sy>%DSWC0C]{҉Q<^¸O !t T Bl`mUˑo9d) {{ ~:D%7pc.p[VŪLY dOOJOflrn\EeEO*ńmؗ@7f 1u41 ɂ QŲm#rq&MR+ $ O;ї&VR(¹l TB9_$ CX.Z,1Y 9% cpGH-ms?\~e-m;T|NmkU7g,L†-,9K13oKU)Rw`O=k:ֽlQ[t]\ Ģu "N4rO0D֙/.<[{'_j=σϑ*L!*z|GO)%[2O-^Z۽+S{.Z}ӚSajM|K=wZQw; R˘uf[g/ xm.~YD}U\$ҪbUQX4A HEm lācůE tϛLme]4|®(QM>|=9?]2^/,fW5x~'VhN`mM`"rTe&6 ج+Qz^wҽIX[T_&߹)JN^ٕL.$݃l 5VuQMk$ B"h`JRCeLXY~lZ4WqY|֓M=a /% \Y4)e?{\XĦIgnڌY-i3il]tm|9ˆÃ=X{zp{C Nz$Y D{ @:IKXcHKm)ߟDDV˒r/Eg.~/=6/a zϰbwE5Qlˍ]b&t6[??.hܖhHjE@ԫ =y)&9^RE)) O_Z~=h UzZOsl}W?GH]k;QR=K-[cۨm)'Jb )[RP]{uwű?c̙O'(j2.ʦS: ܶ%OdI:EG+FGGG9FG@EAA FGG[F&í{Tsa"g#*f6tq -֟ip86ћ'7qӠXԪU=f7䕐3*()n9*hRw]f!-l̼7---,'57 ) (-/7:979ɭ;[i)2͂{#{"8Bb z ݴv=Ug0Jy4̳o(QXVSsw{F# a#]|$Fe&gը d@RZpRPdgggXfUgfgggg'!asye=iaWΚ$Q8#բZu 2 U. ΧmL](vRW>5} cWeдsݐ&3_@U0'3~9*F lCFVAK̘R,uCwboa̻`Xn=6-k`frlۍͲ;fg7ͼJ[2 yM!k$%6$_@j"Yo@,eD RM؄bȑm+Z{ $ ԳSwA O^w21tL'Ѓ 'Rom5y2y1f_kɽ7צy0wնu R֌yJ DmrEP/%G8ĢvIlİ84Z5%F-:>*^I-Y%QQ[YWV.q&r[)w].JI|-tX,qƞKUP9bj|Yߓheؙg; N;E{_eӱ|%vfsh0s(%zL>M8HCBT[3:ޏ(|~5%Q'A====3====b0FZ êlC7o/RW%"Ut}h k΢ego8d@@|<}OWꔻTPWګaAҎr 2' \ KsxDs)(B]{d =0eB0SO];³PNAv;l:l:?B4TGAӐCƙ=;..]ֆ+E- 6ΑS-ζבhrq*(hxyl,L#}w>0  w.)P%JgU;k+ jMxiJKTx5%DS!| ۟:.gۂܶy绔pqh8igcs"sYlz=~(֌jbng8t|4v^R. 84[H,p0yWL"YZC=&=3Wj`?~ϯoyoyΐ!oڦ`,Q+5ەtт$QOf}Wߟbr.CE_5SaoŌ[?5ݷ>tP/~έ_kE=ITT(ʤ4suv%/e>>z\\|JC.˜y?)|?=KLָmϖY_{<\OUc?*fi9 fmBᆭt<+ WٗOkL쮳~:@BXlςzmnG"^ߣŵd/nT+7y``l)\g'Wp\Qe Gˍeஐ>*'‘V8سYpR:CdM8DPE;z3PddWg*5t8O\ڔ>BH9ZƛV= &}?8{#4$;l>b.9.3#&'?Bռtnj 3MzugGoִ2r^e7V7ʹRws2ԯfOfm &6utdՓ&P`HJZ ; 6tյ&3'EqQj9+~IՉ]9CDVWݺf)S#g {[]Ok$hѥzZ8W6Xzid6P-\;WܱMΑ.Fò3pP?ZhlMdso%ǒG趑fNѢ:Z*ZOsPCu"o.AkQnj_'N跕:=Rgr=*Fdu׍&w?3rORHm-𓵼RTGx" G, OQLE;'Ž؉ս000mCu'bwk/[zXƨ@guUV(tmqVh>}Y\zvc4j{Ħۘg{5YL@gU1 y'Z`XŎ'՟InЊKf 1Mm24Ō@oaϤom$2MSKmż-7 TSMoYG~d9[z0cw •؀~-TyeO:{o E4t zwиP>mNӒcg8dS E(kSUn Ю q?#e_{bN%Mwu),tLRJP3Vo+6q/PsU?qo~퐌FG9ų=OL>l-GYJR0o O3o>sJi_{rQ]Vt,Ǚ]+Z[+SZd_h~w*qJNޕ^ XA_.{&:U%LCBja 9svtrYr~H& 6bIV =-]'aE ],0~@R()Ju|´4y|FPDiZhrcjӓm(F 5`@=§g62wiz 蘰PN^Y_fo <sQsh./mLF6/luUl<9\OW3HuW̫Sp4K#Ң}0F",CI3ֿZ,lKM\"){f4fpB!>D醪ў>&_QsEssaOg}c?|wւ]kK'5I]5O&h0y!]⦟tКG݂.{C៷7~d qr% +ҟHW[4C JC*1/f (H:z6z_5/LU$U*lYmvQrqaw Ў]? N][/gikb5M1ft,jޯAbqmۖư, j$٠ bf T z1K"Z/+pR'|HFb$N/st3K1Y8']T܌ 2ܔ|"f'ۼtfҹO3 柌cmN|_tO&7Xt $җ1=z ǥk;O'mIv49|{a)dX$#ȧ!4a9MZnxoV"dLGRv:&*:ZŝVZwH0E-RhS{dp5ȷyռe{*NoJ~_v_Pn/pxhwRq9Լ YOWyH6g_¬EյsM1v#h3G+5۴ylfRlܷnUC|f9ꪷ7C6yKo`+a$*. h/%aj<&HwjhRỏє m~fnIEiVGX%]0k?T8.`XrߩEWä?L~CeJVp^Nf+%OixU$n|%Mիqf[d2dr GN?=jDʿ`Q7ٜ;alٷH}Qn>m1$dgiY1{,}r9>Wu;M^-~zכ(o=>q(!~8 t\t.;xQ_F]՝ޱJWɬݮrYS:'~'>ٱZ3ǬmmO+?:@ ']Vguu N}Nl{ioȫ)4: i9v.ت[X3NwUtE#ŷ7v8<~6*G[uy>Cu 7|ϱ?;q W˹1aI\hIMQrHBS&̙34ǻ',7JZg톛UufZ7%mǫO}2ʒK>Na=QTMK }ǎ>qFv^'v-V]A;2i nb0SWslhŴ~~LcP"v\&tKC@b@jvo ǗfN'֨$ry[-S?0P6 tRuFݮ;!YӋm LsQbEdnf .A=6tL@V/Z$9Sqܝɻ$ѥڢ7j)o8uP0Adh@"mu }{][]R^‡J6Ջɗ!tFG>{ZV=N^D+7L\3g$3݃z]T.suF&b7"$$~o ǗwmpkJ GTeZ$hzaӽ5 c_L( `2wڠO&,ĺhIKf*hA˭rg[/?CTQ,qqacMZCgwpn({.(RED݂qLs_IUV iO}7z5)fލMQ7 i1V$L=(Q?j]'vݺa).g6<@OuNk PwO¦vzN*(,bp#R 4$r͢.`@L\ G̨?~ fDbDDs}YjdŔS&ˉ]wRgK[MJNދ;$/ԋjBKO0Mtx7QV;Q't^A\=qWS-:H5HJ7{fֳ{zNI64[{ZGn[ñu ?j~jeEFq2eh.}`Y{u|߳f.3G7V+`O>ac?9S3YnSޜE9")=v8kg3RgWuh==".NC]7g]+ZzOVU++1ZʿM2/kK{,t4 ?Ư]  |0z؍fKӥ/QF@>SS3m+\u$~aM eS DDH*M]'_ %)(4c=j<\A{_ͿΥVvkTR{F?Z[B_g_C5z_~/!%XGi!{⯩ilmcAAd^"936_.u=%BB'#ǮocgăcϻWw1Ω7I[ʼkҹn[x2: CgIe3!.x&+Æe? ?K?!y}jihߩ~)>Lćқg⋠x~ tT[*ٵ_ 2Bx / nrl|,9Lߪy览|~/ďW}"$APp7.iyy#gfhť'cWx0$ ;XcöMY,Uw0 aO̜ uo+mώ9*QyBGU;kNw V2X@1?17Hg,E'DUФ[|rPHa7iÑ&rV>KW_!D/?ڶ+&$|e;V[]b;>'ؗ, OxgNхJϓ+Sz 5;mS}7_#dFv0~.u3p#$,Sj cf0<$T~Lkq[l7{>O 6}ﲹazׯ^zׯ^z `{8+ իVZjիVZjիV[ 8@       VG^zׯ^zׯ] "!     ~jխI$)"(((()#88V#1QEQEQEQEQC 0 0 0 0 0 0 2EQC mE1Ej8((((aazׯ^zׯ^x #^8 AAAAAAAQCZR"QEQEQEQEQX$G1EQEQEQEQEQEQEQC ,A @ 0 0 0 0 0 0 0nI$I$I$I$I$I$I$q 5 ((((\QEn8%vl۷bI$I$I$I$I$I$Iqvn=[Vf͛6lٳf͛6lٳf͋,Xbŋ$:qqqqqqVl1[DQEQEQEQEQKqr+qqqqq8(E v(((((QEPaHkP 0 0 0 0 zׯ^׎nQEQEQEQEV#8\b6ؒI$I$I$I$I$HaajP 0 0 0 0 0 0 0ג"((((((((qXqqqqrnI$I$Kv88888((!0oD#IN.~p*L#%ߓ^ٓ@o\E7{)r B'q2<7`Q<ꉼxNg='*Zt&6G4#N9P;|+CaiO8"],v wkǜ1}`L7, j d ZޝNm]{59toT{@/P9|Ϫѣf4ڠ 㕷amCڙR|%u&ӆ;P re^B/G) <$rX0K 1.,?MθDshD{?tY&F(׷>N5f "f琵OTyE~ފQR jᓄ cX6ԙPa{%`( dj8*&N.mK@+j{]Q!"$:~l5qP׸.˥ b¡xFw bs6,_iH1O.$\/S@9U"0]?ӘC  BJ22nxGX#~:u*]M<  /E}tpȮrǀޞ1 ;M &nf$O8ڢ(51F- '0촛͜k\iڟ$L9p̿@B[h~ALZ#/DHp[HAۦZXfeZ7%LWחrXaM{`9K4ߛ&0YE=o- 詃 CtQ,ӫP N{H2^b'4',||2Όmnqڑ_ƱVb/:RY^kCx1mo^GsG^\ÖĔR/lT9gw@N?X:\CUrhgsN˔o_d\iTO O~ j$҉:OT87n<Gz^W,:I'oscџE.I AN^* _Jn G+MuW,6j'Nqɇhh'P*=HBjD9M#WRٌXz=Xh%J*2f{lʃ ʜEDdS؇83%,T_<,\QfrLa!&D.1r)7sXsH O:0ۛXD*C|"Ta?}ȳD6@?ocxxۈ{ o^Rɷ@)9U[4"fܯ~hпW2XMo WGy-2)@ӧ-$,Pzn4;>SY ډ Z 3T)+ ~RJii\D^ iA;Ẍ́,nٺ\ n1_cB2??2W3;>J/Za^ v3{+AZ߳׵aјv)!m{"y;h<-EŞt{APz?Pqfdo-$t!"?2'B*2n&̎_ rɭt"vQb33(Em5KV(%[(aAA$  pkh(hLʖ々'Ifqh7T0Tq1˄@S?mahob^>!LJYs?̦?dQCU𛪼 HXOO; BWm(,崋 `=6FASoP@+?=zSK;Wwh-&qfDC5ctr/fCLPͺEN/$Bި4EQ>'\HIpOHT܏[[WHvK2Ũso܅b[!%{] +ΆWkGHkd11?Yz?1[;,3j^||NуlʸGzKnmnq}H&ttCAj҃%D#-ئյPOWD{:Քk6 op?-ugRdϕĐq KmU U#S.zs',yANXd&?^`nvI|&PzRP{[CqKKOTRdYyQr9u,Kq6hV&eTѽkSv[pafcRuhknP=C4 i@}t͗A5!5\8N q%QP^1KL ( To ])ZX5wSD-^g|qr䉦k/OV K'tM^߽ݳ[B뇱x8\%}E`L; |wPm {=C5떬LTnM"XElŇljZ0Z#TAJބy!Yo Jc9(Xtoc InzToeNlU[7ELj_$_ᓑ8!FY{"1ΧVcS[]RC7 7ɹm}9*Bp9Qs1}6]V2kh+&c5ox"O[bieZeO#-H8i^'0  ܿ6Q 8<`a ze26ߟ=Xڗi19iԫl<e|윿/4b[s$]1M6$U|ឰvik -p=t>~-^Fr%d=v.ۢBZrwRhy!m2'J׷x,fg{7XetWNr~''H7@ٌfg<=p=.m4R>,!r0M TZj>Պ [ODĕ8J' < ]#Qڑg)^}b}=8> lF>N߭@v%F"XXcY$d'U q`# w㡠軨a$pOMY~0R+'Ҝ]0z1e[QW H7ve4v<]F`L26+aa܅ޣ鍐`Xě&GFš,E% i#ņxf;"1$ٖ /c❱N,xa8QI15th9cŪ& \LNBh8r PvlXȷ+?0B=ѐ!?J3ta17ݎsjć""prA*HV"$t|Xbؚba p qmZ$ʫ~0Jymk.BEN ‰lxe{nހfam@맠|'Rnef (hq̅hC` ӫfa uDYtGYFg0z*9bx%=ڣʜ΋yxM˷/B 9j7Krj>XO9 2eޑozE6. Yp. yLyxʊzͯFUH7^mg= XheW,"Pq۞czĎ% .@9d Mx*|0koqYږkuwB=UHhL+6{ ;VV+t@{Uh%Hx4ON% yn1* Tا+:ڨcxLb2B- nz73Ex2sv3w\+`/9l oBߎNsQ8߷*_I1GRrY>In.HB5YƄpsG _ܕ;Fn6idDݐWj+q̸~-L@" M+ 7s>2܁6S >N+ cY >3-PaնVZKGZH[p0\sB/|D{9Ш??Pd|"dևʆ%& F@@ T>_M hHX KeP4J[Qf,V"cjR:zj0ш|𞥴w(eOױElHAjLZ"[Ywy IwJ9&|pԒ|l>GkcׁO$xkS&q{/e( ~C+;zzB#DԑiwJx .ogqCR1ZR 3` n/<`Sm^?ղ*nEwcF ѬRT.ENwޘbS5/[b9ᡠ]RPEG̈́k;fktA@BHc2x΂1n>BJob 4z$?jv~q~/fe^m snx4tr\śa~sF @L[i^Y5'y HHd n!D>A+XmDxtDQ\3"M[3cÕ5'4'ZSQ`ʴӠ |c5S)FT ڧ3N=J_V[J 3[i9fC #Y03_)HonjKcVa:Y-q#>/L/nhEu}oԹA`|o?]йc<H} 1VIȳy0B7)|4 .Č#e7q`rtV~"ړ0{m+TϐC!y;k,AmsMzZGt{}W ¦p~2as方Oc{ NJs滒-e[ ~C7ءk&%9AϝU* D nĄ|agԳq r3NG .AW͚5%zIdc^$"AHڶ^}ǘeJU9ؗڀe=[XӴhD|o[Mpr]2b>!݅p[8^fukK .1([tDW.iBE;т?ϔtB81C c TJ(@gωC[pn,Ct7j`Q;di'RML tnKDAȅT EiG[XݵDȠsMda+-vaދGIKw TZ] _+B;jJ۞ .>f1ŵ+Yweh yW(J,ҋ>J ەSwUWN58d{.W81Ȗک7j5LFIw%4?T10oh-ƶc5?IF) '!pxR5,K:ok&+x\A)G˜OŘzGc/`yqJI=_j;;*YgbDwX9>cooF4X"ڴC ^W*CoK@zDElDȭJ{^CA EMi/~qn$ ꬭS[EtHFѢ^$%AekPwa|8*d;.[hdSDi?.hpXF mNQGދPFU,@,5ЭB7cQLBߩ.26r$b.Q bv7d(f5+8|AmK X@sCZb 5b tb 9ߐ'c(eB@Ъ>h6aUVΉIT]/RyYIa6UF‹gV<5 t 1R2֚rC~<ת&s¢yUdJ]vCba x=x$5*ylNNBwC]C_Tn ݪ*;|ugDEWكP v4+{0O)3'P*9&a*!b/ko|orv)&CUB ¦ŖAI'u}ƶƫoFgM Acϣ!v2a%1joHN?AbQ/{g&ɭ !ȼHaf"W̍b:$dsJ_[Q \;st>ARB?IXTfyP9W}Qɩuș`xvG_Pזn1ܛ&*o!vW:-IbtbY 2EQ` Y 0ĂͫqpIREbΡtO d-\L5]| Γ:/+۽SB"E'#QaJN{Sp{S=Tz%ArY%Kq@ _Ă ty|E&fJ2Ҧ ۮ#<]8iyEaK[G$GQ#Z@P7wb(l1V)BIqWK$O3؛}i|Z+qn4$ʦӤkol<d h#:+}ؾSrq8{?֚Ί`,f\w{0C:b%K(uH]0,9vұx_'N^Ko|] ` 76: ku:EO]~;Ʋr3Ty垺@LjDK4p,hG5Sձϱ9Ȱ0eb<tΙWVFQo# L\gwX,FZ  96 VcDQ%C8ʏՕg0舉h¶ZN{'!SaegBFXN:PSտE$#xU4SIuz)ar;k7X0oknDn#US~q~چhEF}݅ӳ`Y?SB^ Zi$ջ>ߣ%aj%͑&{Q`"JpS]G@Pn"P@G^tvmPZ52g^+^p_Ma΋ n ppC=APJ`i~oR؃%*ܥEZƧ{Ұ x5h,0y׭hte$j ʱ 2N9D2Nzr2ap u $%wnל%@ Lwr:k% 1j/O9|6h==.xA[hBT$I??N[0%y87"8=3saKpn+V-)gm_ >f[H" qlh&z'%4GO9u'24eY["daZCE8>}Vo_s!T]iji8UPE7a! *kA8, _>hp#ψ\YiO5q7{), Ò1z~l!soj-FfQ:˥U=?\{/ [z?q9å0t~pO;vc0EAfU»mH#6?~ vEwb=>cnCQ}c^ LGP/V O C(' vUi^As˅gNY{Nw>^a0A.=È6(7~\`*lg%U* "qS5H'1#Ǜ/|ϾyaGhhUWWcRbxv/1y{rJF0=.7&%Hd]^Ids A[Jdǐ&Iɺk! h@M[)/ZW`]Jkґ+); '9QEmyټiRRYLm.aYOU| vN`Մ #w`jOL8+Uy#`MkP[68(T:i:_` e `$ͳj*nf5WƸ"aT&V' &uDDF[guxm}Y`]@YԦj)ђgJOb ]T:y!F9.&&;Ja,b1wMݰܧ~CXeU]fI.QMvB(e߅ .) xJ^0f@Ĥ2a*9KQ4:X{\ӌlnBr[7) #e i$s9$fBN..}wmWQ 8V › 'døx7Yڞ3]]s";8LQFF-,d 1Q/iJ2ji_R1$-T¢]FX>t)_⩲\% J SĖV/cRc=}?X XtԞrªSe29>IU+rVe5!?ՖXnG*˳~D/MP2 j CEKYV/.;?HPL`7quҟ%g~!o __ ;V7߸P;n=|m4,r];Mdt6Xr_5g k䥵Hџ!Ƿ sԤF!@Zݚ=`IR"GJ+/SW "qV'Z"euZ{~a[] 2F <;Q$vΥ+G-dOLYn$fKL8YzsM}d;۪Lѳvl<=ȝ~bNHߊ Yʙ{/'Dn<ɾKEpIR}ߺPcQG!]|ђ .[=q!0_ sAŒSQzbZoTlyn䗴 E>4LxwTUj24.OK}Uڑg<+k=~3$~6@xCsڳh|%h9L$H~R &% ju!hOmx E%>e&gl:ƷEx³#^5\&*?\Gc0ǰL `Hz8u~b@#^;ŭnm!a=_-5gQPDː]h/ s=ȱsQRK&\KaW£da2mKDf|A3:ּ ;^Whqp~l[eޠL)JBEk#1UZCOe?>c+-!Kw֏wM M6yzR}bԜ>gZa0f`獆SpQVL\9+ q Lʃn͉z&JrA0 Jr+׃АPR[R>ARxE(7STFq0x H/qG{\}LhWR!@GY^BGKWJS g}he>pīӎuF=[d6ո9F< Vv犑V ا39܈,J̒ﵤx6;tZ(lf9Bׄ`'ͦ7NYmZ_]Cg|9 :qϘ@z!|B(SMz':fv*1m6=t*R"&kdb5/k(+(Pd$01] 2? dhfFOT]Mufjse3`uaARupz)9:6G ^Y;}&vQƢ3̩?a(Y;Lk%v0q}΃,/$~5ېiVJt{~oDU;6%v=]<@)6X̿#NYVj:j  򝰽ic,'ӮSF~"+(:slMLE,z-u0>3VqWMg`76B[% {ft%i a"Q($M&H}N%3E/)Z $W{Zk!cQI*[Sj_ϕoUSBxe_n, w ̬G '=ﹱ0#M{drB!3 m۠ Skg5=ζY tu>Gą&l9vJTҹu~YG?nrL3V*@]zqג5FʐWd̷_zHr+ObOqxhZ0L$`Ţ1WSQrl Re޼V_=쀥%KQ!ǕwxT?|Wp,L  O {~zUZ+[C \׿9@@dYgażʟ= wU𓜆@':ǿ,uHF|܂@qAy5~Dv-SJ;ډ+}GPUX7/(9#\l(w jmkp \u1RYER|vMt<^}xP!>SBdh"XiZXQ?h%rĦ IzPy0x‹'j5d.A(:urø2N\*|)wpqSuQWrvL%⬫_"U1@(Wð\1DPѲπD+lAX)P# ~[V:̿HfPau\JL'HlhȜ#sl롸5 OjFe7Қ8~!.uo:?Q~ Wڦ+6e(M@HmX-DXūڴ9N6OŢU}_P%NcA f;N稧PRz 1=ѻH+@! ly/šFO $ 0[YV#پ/i.yULB4u(1\Sō?u%tͤZڲ`#,h?ÐJNYTxP=J9] F}J x:W YzT-+-*cT Q<\#^?́g/z.zБ;0Vx`I !;Sm"w,B3LUby(|M7eLQ l rAr~r. X=^/@'Rnky{;̞ԩoЃ^߃vfM0ia "i0w-%0E)V3#T.=8_@)šoa$TvV=pvQT0}8xn=Ɯ>g,DHIKE@bKe@2N$HlRC=z l'$'42>yȫ*}|h2I9Z( DP+=`RQSL|DgݏX+{_TIG2-Aqjapɷ~^m}mAQM.7պSr&\ak>p֮b@:?ݕޣ7JozR&CX_9C6G(e͞hS\)% h`ސ81}~We"x(;K-KZd@2pɈGl"noOÄ;ixzU'ѡiA.[ÃݘbCTKӻPH |` ږܡ. Yha` |~VѠJiz<=Nxtxh4;us[/lmi3 K:DRlaﭘH{kՋ dgoO%qxzcfUej$m{(]bNW<Ɋ諮@\89 :7fZX`BGy(;Fc:\q /ч2xXl?wX2̅[!ty#j3ĺ6*l- yiprɵFZD&޴0l*I0W,ƮN_.2mIQH+>:37__3FB G Ŵ=xI=KO/9̋t@+zgUZG/+ 75 l'=ݑaQK,ӣ*Wq]uﴉkO_JBQ7ESkB)֓w15?.eڝمI j*V}?D"- )j 9-6) RL3_9j%>őD[aT%"*k^K)%SG᥈=/[%&hW ΄yvDW1Rq|ܹ)"p w8w~P0$?Ǟ:ݔf?َyyv” #apΛ~ a}S2ߗLdG" _Weۦ¾HMT8^:lIkG&+CLg a4㼳Lwޓ #pLf/F`=sཀ? y $,ɡlz@9DUh~o=dA b-do}5GY2ǡ>s@ qIyP@ڬOuSB 2oe"[84 7`*BT^ECP2ЃN~,sti%7',<S}Q ~u<~g?.$ΙGܴGk,ӍRݏ* /cvNGnRV9*BO{@!Hf&\Bi_ E:LL%HCqF`}hg,%WGke03zj{?9 { Afú$4<&~hشk(WXLֿY=FF֌YP7fQ5 "J%7}Pzntq7ܶ[itٺs7rjvkn4bI} 9aj¿@ B*r-e%L3= vpEnGE"S"jaBns@ri@ϛ7\?Nv@pAxoLtk͢TTEwM%׋ѻYs\H!1%46?xv((MZd07-3rty$z$<1+gj0 r2bjk]ǜyYES)`O60d!;)`_Xwޮé n7hG1_b^P v띍 kv4)nEBO]lYZM3ׯZ|gv+8:( wQ+!?i@,]֟l=TM^s_蓯p^6w JP!)93 zI 8#h0S2\DG^FrJ\U88Tz-8Kf2}r5l U#0w_=N 5~:єkM4 ޜ4YưJ;sΓ- AmO!}nR4vz(Y߃X r>0j֮6< UpVI^}g0sW`x,؄ R' ĵͻia]3Xv_4$ͮLwgi ru#jF}OZ1) NEZpTi4y1 /G\XBX1SbLL0`a%+i4VYvKUy=Tk>S' #5R.G$jdG~IM'8Lә%3 JQ\ z˜AWaԅ1A%͉:!KV' M-YӌC!;Oo&@UU"3aefG ]b޻ mΚ4rF{!qdKQD/U @$8 w K .0ݥ83tl t# @.6 R느1խSv0^uKE釃~j\e,o޾cd #ZFFޠN?h w#Wo5muVo1NlU$^ffW 7knzw sbiZ:DcNvytb usۑ֥}1'Ke`H*@8T!e@)pQ͈g~ 8NCR~ՏMw{E;rDxȶ5p|a-sPbg+_bXc\[b̊KS<u,/L∌NmukԯHA>9E;j۴yjJCڞ gVE?usX 'l0yOc `L:݈FӭoCTPJO"u<@&ݹӺv9܃3Aa-Vڡ4|>k%@ÓFALWJ=A8zf$JeK)%Ppnܘ:9}I+ڢE$'̖gm4 zeKRCF2"ȒJβo]JcvP%W;0tࠫ\ÞDz22*Q<lĻ4`tLB/;[U;Ұ6Xi mh(7{$\&~Iꦢ}Rr}ݚ 2Ԫ^ϡ(ԵO8yM&Olt}Fz hY9qi>]tWR!_Ad@* 3XbX9j Qu/sΨ+&;?5E{ӸIkjV }dVDyw "3dv\EdgVɡ#ɔU]Ot)_;ZڄQ= 7LQ&#^AB[7KKV_0Bq.e?tZe\nx|oNIت)ϋ/ 7ɔG _#rE86EzR9Iih|5<N,Fxlų*osȂFU!f[LIF*N{!@jqEN`4rߣ.Rꢎ 8z/IS s`Y<$GSƐK"4!(n s}mR"6np,{@,=CdRƧ14x-vG<k(J>o\ƿ}&+px9W-.sS#7[m:p3(,_VcJ9#B*S QrS/^Zlns=m),W!VŃCR^ ?/#{fiRX;v v\b`sͅ/m\NC&m=7խGrrIOknGX=8UɘTc᷽W8^Kͮn-H#ɐwXlF-x;ᙜIIDNհ\&dxQj5 9bRfmU\E{T0¶O _0zw;P҃1Gwy^ۿ4J/wsgi΍VܸJ~?(9жjZT+mL ,$s_t)bIQ$G% {/ՍcHՕ(<5/J }ք0CIb{+wSV:|GM5tbKYΕWطP$kڠ Xb lMwМNtf;8æWS:ٸG2@ˆf~ _j8*In;+bhGE* ]38 aB.l7;C!9L-Y9 Y3%_AH׶_{+q*6R/{&=,SstuFQeGuL?jEx݋hS+~?-Q,dUiU5Ok2~P͌ϋWeaFM0!#e'XO'?ENlk[x[H^+̤#S5+3bi Hp9jR(0ka#b>ؿ!a 2{bf?3~:$ޡIp4qmm*t'͢!,I Gh6yܰs*8$DqQOG441]vM)qK(aGV/wOQsaG_V I<(`w[ZGӮOX=^o+7PZ%NКeo@C"}<LH3q#~l<$8葟 Um+0]hN4P B%B,~coim.`&>8) *V|Ib&ztq|WJUe{حDq͢I(}PǺ9ɨZkc z]~{^li66'l6I !qأBֶy)Co+Adfd"_)[n~44&ɐzMP JQ 3, VC7Nv6)]~RQuZM=^*J0 :X@5tRĽ- _ 93Fot,pHt$xӠ( )Zq)T32U2RaWLmWnS0\~aPHmy^ͅ8g<.:G¹s9ʘNe50YIf<-!ȣTK^ \4~zV}E7:>><̶/N3{S{auW, Zcp>^BYѹC{:)/-NYl}WPb^j5>u?Utt;_ .oW5%bY R~>LXPmciّ#KŢuB&E; 0A(I,nԾȐw4tmJŸPgn @@JFUE˜+?s!dM*7[2yM`P&`-֬ W(z"-݅67b7LdoӃ?!)", &J^ѫԀdih8EA+0;޹>--ڻ0-)9:T y-._u>7 e1ٰQcxiW YO$@Ip%粽=r$DQGwԧ%iʲɱb \q w3EUb '![|O(V iahЮ2D a;/tMܬ~ ^d}M<> p-4p[Rl ךxuHQ:풍@ 7όn?{ȗc%"r6")lm*=Hbw&GȃJ53L{~=]|:pVOc1[35CS Y:M[!6yS~yYJղę˨Ytθݺ45 Z5HS+ӽ+S u׏ rPKAYo'/pt Օ=;3LB ʋy6PA\d/KQ.\$zK}J?Q̛ҐrC}K"LaÃ?q9Csmx)v-:>_b.frkdδ=uA - |.Am,DMFF!#K99᢯abk2{1"jN -d 4>^_|<Q/<؆wWp炖Ϯ(IQ8R0ƍ˗[,y]8K  D^ d#$}6Qg~%}%j:6"h$?UH f3 F<>wTl|$$lAmUyTXv+"_.év'T{ 8c^I-:N@%N[27͸ =FV{ tTD) ݱ&NЬTheZѮuH}sPď P(OW֞ ̻3׬+3F^,ɲ*K">DXŗʲld帺D4d Pr80<%V0XM3iiD;MidxI.dnCpJWuIʬK>1.gwÖ+Ul vwmnxV\._E4D󕼄rqq>v)EP* %ցR3I|nS~K>Q \L7(!=JWlwRqX. D,~Kw7=LG (W fDZف>sPhƭȋ+*-(^Q8mU)Qy iR$-`AE0;4X6 hHz<I`gWbh6S0~iH{ě}!u wOmt;|> X{1hV4l~BƋqh֊Nd%t\DnA%2w⫠E0 Y OR9v]M4@夞y/q$DvwT{7p.eaKmL̋r$sK#y(f[)a$g fOM?gth4QoDx Uu ҂ V̛ o 7^ q/+ DJa7=wE~IAۤ[Kⵑϳ }wC v> I.1KDvc%?vP:_dH,\ԍj/܄P`} `L^TtDzڦ|o{~ECNR*VbwsѲ.@1Ă_y3jDF8td(݊h GC5/(۾뵰JC=oIra/g@h]0w[-xF3ߐ]p}w E2VRNĘۍ)XHoC>|lt.{N~ލ ~mǰ>_ղq T/,JZ>!iyH-,t{D_ňvz+pKcF;&\L`= >zPLOlkh1$]'N,gc%bk i%Ydl;/.03"5|Pj4}B!,SN4yZ>N;tV ͜󤼎 P"/`d |Y@<,<ޣB 5IfSR ȿBs4r6tC&J=sٵ!_y/}7p2D e?V4ab}vQ`{EµVm\nQpW>VYXHNQS&va׿&GCrteaьLƽpRۉ)jxGا*٘DӜXiCZ%?㙑Tmp58]]=7ˀ'l^_8ɗU'ca^z\)4Dpuk׸@1j c`DyL:̀AW[Qy#Ô)Hn]rLQ&`K} h` юMcyi*u-B $X B:%= 0ӑ2DFP}q]Gn``jݦC9*YMnqdQ+֞'a hhP@ 5Sw΍":{dI.! RS:L)4 P@$~B ~A°<̓xOGcsN'( [ +J6Kms$O쵁HBk4/6{{36_h)2c-{JmzAe2 lD.7E^# NW #"DgH!myɪlV+P_ 8G%mIKA N\>*tFNWZr [2ͱ:G+`ӹ&j䎮} "޶LَӘCU"/4u]HmF ;uKi:!?#7h^Yw]:o̥.XAWί Z>;˰M'4!+Xݷ<Jc#;QG{sw-߫ml}l}#{}8:c)YbϦL2@/_DM+P>^fl_^beutC~բMA I@xttL_&sjБ11n0@Es`ڃqճouE8DdqCS =Y'd )XU}`\X㟄O QL%v^ЭD 3UL3^шm&Gȷy=Ɔ{ﲹshlD6X@&U ̯rq Z`h;MեQy[P2q23}*Z ώ_BM~KiomV ӐgwXtg; "N1G#.2FZF7ףDs m$;^\r=(MqA;>DZfѷ1 I<ŝwhݨ>٥BJAKj8MfaҌ?`ETn| ( Ȋ1p 2+R'gf{`g|{&Mogt(ADC̬0ѕfE$YAUݪr=u}\$Ug cy4ES!k,elcK˓nM ց eKxPU(=S7y Oв'BrMᾐ3a/t pXe/?XX##Jx$Lm}[=# )C2vRO 8ee3 z SO:`vĔh1Nu't?j\nPyAjNs♭E#ל^ãVZvr _|m^G)4VAvG}U-!RU,<,CE VC:+0u$+z%]iXǃ򡀏iܖ؊!ux/ŕi/<ێ3?TO) KW##U,NAJY*c,9î}W (D"N 2Tl˵Mחİ֊W5a")Z̷Q޻H'X#$or͠Nko_RV3R񛒔oN8!QP㑴gփySxx9GW@UE6[(LL?6̸M*R&r nBc! r{UNU\=Ӧog," ܄^@kG;bn-jwA}]Nr^jg~}k#x*A׼` &9@eZBiPFSS)#E%ȗ ?#q:ʨwDTH$'Z [㙀T//Ï@֙27IR=ZZ]?^\Ņod ʅeK:xݪC8Vhz8WTGLLl D67ز?݈P13:#g7|p6W3Ha!n}?U;JS>`ܾQs|N{s9u9VX燧Qtq?+@yZ&}t.ܑϡ &Hd&w~9GMlQ 18.P|͞maÌQyPMkBPX+z+$ y|d[ZׯIXy?:՛`8QG,Ô Ygbe $TcR(~Uv|#/.p>]^B3P(O=*IO [I<"뷰w%,.K!((rS1׶#'g(2`s^$h69ỳԛ?cu@1Ïege{k72b4/x^Z$QHrbYz)$~6%o!P:r:Hh1 1emݘ˫fք+ L~)lݭ1QYFrkbu&5GK?c5(EoHO$Q6N^x(G1i#& ͂ך.n J@Cev (͖@A۬E*s8usNYݳKӗu AbB6~J/ 4uU"-ceD[ߴ`s+c iIFu<)o0 2%ko[#A\JVf( teocmtxr|߈x0p@كN-OʶgGz”&Ep/-IvbZ-OAS9 - u#C t"y=MR҄?xL\bA^쬶3[Se4D)8TC#xriu,shkS$#U}p+b99/gίw~Lt1\ >7۪\ >mkL {W#jErI[5M^<ϰMeܐV=,*mj;iV3b틕NY#۝ NG:j8 CEP#l{ܶ'N6U1@$9d(sj-zcF3XPiͰI?FnEBU3e6piwvk ltI1FuvC]ƒBV%6 Q@TAڮ =7b }0&F!ܙbix%jR \𕦫MyzV6`@8.xi],Kv2gktk60VzxL j @ ަSvtu/yDċ6+Ak0_7~ _SҧۤI1**|Lj93LJì0ʑ1eP9]I>T o z4DWKdgF1uJQx/24i~(o|,}^,|=FkGL''!re!27; PlX>~3Myvp7[+<MEn³dܩ(m=ЩV <W9#Ú?(Y>Sfi-CGF|$i٧!S^5aT OsOHRoˮˡcw(oѩ[xc@zka=qIvvaN:,`ؿ-WT¶yܽ TY>IǦ'& M'ţFsV ~PպX܎9ӷk/b0oQT!h2勧u[+GG@=zܷ")ȣ1Gk,{EԾCt ZՄT Ǜ$eyʚvP0, %9= 5BpO J&yƥaP?u || r,@א+/m<2Jwţ]"jWboP{ީ"m ]HMJu71!bko X^E?bݮv ~ݠ~eWp[Acc`V .ߴȼVj|.Z,Gԗ.[ +s K'V8^rR]tRgR6N~6U$B\uK%/άM1}LSH;&F 콓?wv:CyibU*y V8픺= zXz DŰ+oTT$uZ&l'uv7mY7mLx7#D,`df K ˫ p^e0'wb긴MsNm}QC k'R^RC٬OVq5Q9I:gj)&_9ls ᨔWB97z] s;@>Lu_r4;롸.=V}H02zP}'oHٟI  Y^~/ ܨ3+)3vi7OT(_XY4ɼj @#w93Qї3]Nd+Dc :Zhsd&&Z3OY+ #jLX1̜fc>v%$&^!d)QR( {FVp,ZiplI H4Ĉ;Jv|2Dm1!P)~2m7Jp4>f=)cZvՆ8_?HTؚ%s*> GPubTɒ#ٮZ խCAg=Qd{_8Iq}ƔKmSPל跽EwQ7Nۢ3{*8$WS%GߌY!,҃3AP 8v}0_SC0/8ǴR')id^z*F-Hs`X<"u[ĥHaV?1~.\.6^$&> z',r'qI{c W 8Z$B4rl%D%*S ͺB:'GfF@_-0k)oBcVZ_D MhȠ |N6;!Lx-COA:MΔ`y==2zP7j%ht2dE[xSNz%K1ZS_ C "ZP I?td$JGbK[p ?<[<@hgV=s(mJ:pQݤ.beMH0Xyxw>;bXH8ъKf'4+zbɖF17Wex*gv.*ɑ4~5_C"M[ [)-pystLɠ/io70i#at]0>(!k+R$'oĴePtX:L(W 5;pJZ}KӸ)8dM_S=yέSs@A6LZ_9sՉbJg` :@Űbn0x'w/$e [WHZfUK֔qEbPn8S]ө:_AC|o$t-etT7YE\_g$D'ylaY]a0k6b.)|FWpn`@@1"V\P/)-G4OUKT祐nDd*< >= *ZW`8swhHO#ߐ2藊q֖X:9PT]11OsoیtMؠ^Q+Rt< N}'x،i}B]CTgtɀZV&#!. b] ТK8IAB*IնYDI T'|1kJ7f #7c* D"NTN2"Uz7OZtwĴ94H#?%8nOTzQf# +x<y1L[l[!P BkY2zqƇ!a1ʘ0J":;a͡Vv ˆ.>_U7e>!W5 .bWJb>?FbvlnwFaJru]r ;#d 7d<[b]H`Lb*woE jDEzE|<]TZY%Qǎ{ 4܏PfKy +˒hVpaf,LCzwv3#IM`-dCa4Wݸ}NCR^ovpk\u({w\*KH'$/تFX4yKS DQIN1ڈq:rBa r B饒ɭ  J\32$S;]:\{ai0eF@8?#*'连O#+%qmY̩vhQBˢ*N]03jvf)LѮ!.NyH7uhD?mܐ|zdl)6,8dM{umXJRuν!F?u?+|AXIE5.wLq<e*p,{A]`\d hz˦aSLMn7fQ[I~>dck|y&B}l^xJKr|=urޖlekR~IOSU)0Cdɫ.Y?32K>b.z6}Av( OɍcbMeAduηSAZ÷|`g5D&_1 sdV,X+[c46S1"~0%kT q}_3MWɒC8&k#nz7W腝)RƧ,)\%ޯM EiŞ '}0Uk|\඼mZ+5!.;BGIsP(m O 4Cm`@/$½TIߣv/_J*Hp*n)<*"(xX匡ח"~i]M =|JhAKVA[v"A䁽aN;)yKo`f=-sן7 blwx X`WH[HZd߶XJORP$NȓP3|PNWO^^tF:A.{*~I7X-5+^it@}b!> Dxt gSl{0W4gK"u[ BOUDD]C9IcqSvb ve70$bz Mjd mv97aQf+6Ҍ_;}&ܤ˵`循Ja0Dg?-*RL[yժk˸84dy!YB9TTKM/S!:wb.;~~0KWO0It0_VQCRZgu&/pq}}8Ĭq)h\uKfznުl5ɯ;1mw.7OhgH)m[w k8ejGy}0] Tة/ͶwʣN]ĒX-~@ಀzQ`>$"ׇSI qʶ香W\WZ@FFM&qp;FLԀ|yV,a9ji_݇2CIKSq"{u;hyZ,/~X F1]!ll,X<*ށWJL2iKT,Z7E+ɑ(1?]#wAA3{YW'f_2Z@wC !v#7S ErT,fMNzy ?L0-*H֙( 9(?M&FV%ZQ묤 j,Nk1 e?й weD44̚K\k-Za!r.r0:_,EJ_3u0f,AŞ+g(61Qx1d";oiv":XzOeuθ #'3L ^X],[6 g↿vW _ohU>xlds20Ǹv|W@2qil9hML  1-9\jׂ`ȁ WJMJW1 Y}1ku!h7NP!+yXvڝ=A%b:S~73k KƱ#^aGC5ٚU#v_ЀkJ/9Hɤ 2͎y`FO+Z "J5M-şwlZdLy4@V3C/FۀR^me\!8hM }ôu\Oa AFN<|{l/O=UJ/_2/ 9b醈|mph"8.=K۹c-ƒe*f/L J' cF+`=?# xZtx ZN7@hb̟ڦvJ8nmK'@ᚺZoufz <\99 q^0 tti}ͱW_84HM;֦Wk޼). ޫ]-*79Gw㐏Vxy%;KД[\ =0ZWjrS0EVg13mf;ZCN<7ÃY[Zu8S*:[AvT>3# 7n@VGRQUIiu-nen[2?6Zsc͍By+r|ɉ>Ib$TYxIk]jr)*JtHŽٹaMCIDAIa%NhTɿ=?IWԆd&RTYK&[L-Jqv;}.|ˣNnbSwܩM ڴU$^jcNz&$(t/RZ4 9qb>lZRO .aRFY0`seQƀHm9ZQ6D+[OeʘߘU #ؙNwiaL7:/=}4vx:J/yqy#f40_W9eV7)6y+ݍC~o RQȕ/|F7S cK/`|diܓ.vV5YB]}JG@JH>1U*" V50 Lj<S\ץȽKT`I6ds5lD*6݆m`Q)^$bO fl=;IJ-O8)ۓ렬jeU[qp X\ng# 14u `eJ%پs.a*}ʑc^Цʪ%;i.A'Gb}}|VZ8ONӼ TBe%HF OƖ>Ab,4]ob.b4햪ViƒND5XS@:cWT=[[<§ZԔGP=Ǐ+6>%~ B}5nւglP)_%߇6s|ߒvf1d/PX-^!fg ,6p9h_тl|Vqy!nU3&'y~0.g#/=Ԟl%̳8 oҲD~hҔʱm<@Rĵx/}0}!-A_I)rb{Ǡ+$WD>):=Y=!;)vYv:*p!&~gso&mYy,pܯX W}UeP{tqzFB%2۞L\- 9-_jqҿ)!b>sd8]oJܐ[0 VPoY[J)aIT iي$.-0NNAVa6I,nA6@,%]ϭ4B"Q־i֭06{}wb+Fn2WPf5 2@ArMM8FSR}l:dT2}@nƸbIy](Nww~mb[QfG4g=OY[D~L+؊J>5nB$ mϺs۶Ml\}ҔUQ詪5yuDXE)z#:o4.^s2j1N7~In(ǼS9E([{'9t_ g$7 Z:ddoЩ2Qwu@RӷVFpIذƅL-;-t)#ɏy'U]Lg- H7g|Ɉ%?ow3۠K!|P:n#l*tۚɽnh tc8t ˩YEc_̍thgFsi"ocN%eeYnHO!&>+]rQ"9X?(07^q|h٩V^j\Ϛ8le/.:!VB֫M(kKUĪd*ycX?ehuj[&G1ruA0woe.XݺG?z<ˊd AdS>^[6;Uپb[STN<ϒmpx-l;fqZ:ڸyD=ޛv iMGŮ0w- DƾZw[KY1cޅGP=UQ }FГ ]UIC9uaaCE S?4*i 79*!}L)q{' v bh&Kk^68K18T^B|!b8xeEdä(xJdH 5 biLޖjpMy cv213M|K5[6TGOQpW!,SB7ܖA8<=WRҖ{G b<*&cP3gc2CZS* 4Yy~Lbf7,C¨-gp=Y!̄~Q䩇~XMZXyQ1$5deջ@)7~i9 E| ITT>dF07H!TGa߸1hΧ 6;sڏ &"4uOIf84%Kwi,1ET%." >Dp6,ߐGӀuͯ/Ϡ^j4Pl實(n|̀.#6A<DtӼ=sk|\lͶ1ف-D#u2n'2s.L}d~2z^15ϟg3C0qGHE]OgCnI ӍӦx]L<C̴g]*GX,BqJfU5NYA3fN<렙ཻ G yUtCJ6Yv4#&1[K\62-\Hov zjCNB MV]ϊP:2xg?ʡZG8í6Fl%loab6|H81uN =Rg *ܺAHv(2ܴw OO3j|4OVߛwDneⷵNNį``|x,~gjӏ[⛵m+Ff+ŭ `F!8.]5bFfy`7hLjխS ^,"mv#ƹ&Hނ±/8qIߵ*u-F&P,EtHM_4w2/oPZGDҬǧ]zQ`P V ­=5|q>@ \vT|xuS^pU /]\¥ WR_M7E=>BJ+rajQ[*HߕWMW -}"e<߻~ݤ0s pOf莍cHه7xKb ayc~fxX 'A\AtBh @2L)'!_niDCrH͹ogBV*^ lbT -KבfPAj|XDy(2GWu T.ٓ;pkC*Ceĵ(:۱aYdލnv GYˡ:<'^63SWaZtв׆n@'nXay3x~*xs':PC<'td&>eNa<.讨AfTDg\q'8uM|6+?ͅ$Ʌzڽ[G@ÃdyV,5gvg,[$v P6V\FgY #KҠl3^ј,%{z5E?1d5Qjt|~!ERc1D.ZGMCh`ҥaE.UdE;x`bAFθ-6*ĈS.=<ʛ"V.^υ\9I[,l< f"Oʯd7 k'HXE|^0[6cqbd{y T 㠖2>07yxb["XոʑE*1 wYj]i^kM?,~X2r<= Ќwv3| Zaav?U}ڧJxWiJRB>56uȿ UC nߧ݂*kLPI1JۀCc DTN9.CS~w%sk]y/R/ r_d:V]-jTutL2hɱiL:2 {K ]<-^&D;^tI֍Ma\~0bj`E m7*@0Oɞgw8ӻ&kh`PԸTc^.+ . 2݈i w=4وQ}Wg'rnߕ~վu}#X9 Ag$7'eP"f.szp; ȗyY WauG< P=j5Fg 6~҉wRHS!~Kz?زT~]HF{561@e D[NDlnf4O疤?3Icʁp-4 DQkyZ8#]OJ>ċ\gD<=a})k&V&g-ln qL!Aps%e**~bV˘3'AQch@T7SRmqCqlF0IلdݷE3OXĭB0"''=;x 9z{k$by.jeG?sf}ѡp*/9'Dzؿsfpaɼb=i.΃N9g5_o0ݡbeYlmuK1Do/LJ7tۊhXj'5 `)CN+ ȚKK^ p.Y>!OARQ.ѻCHSUwn4bsWFyـC ^Q9}gV sTE: NG9.S#C(IP0F[PXQ'͌pF)۲n%s ѭ1C2lܖ)~w"tC9f J r U/?z5 u0>eeh³TU==W/vLߨR5s;Zѝed 1S6H Wu9H;ɲ=i6y$#qO7 Us,a) Ql%(?Ŝ: u.n/îFxGx =_&=ك&ˎSK/FJJp^f0,Nf͕ N sMNx?KFKlb?ϖ8?spw !S9XA]3 +Zg[s DN< ׹HF("X AyPn W֥ip)^xRߧY|iiBOF!yj:#Jm'ӈMGޅm;p7gv1n)f&V:T,ZR&gq.[GGeɵ2hRj,>| yųh7*=ш.k aWU3}ϽPq(wJ)a36#ԓ 0 ´aM$8>+ԂW |/5:z?6_ 뢘u+@*2R0mpSa%+==cʕX;]ҥ4(|n`>[`ZVز49oQPۑȈV׎,FR̾)7U,!|$\[N}Dұ ` ""8\uOneJ?e"jC+Qhl#w%|Go?h5;dQPP40ͱg*?uQk %7&B^?4\vZ]u )$_u*t@21\c ee]'G8UWyפA[iq:ɤ#M O]F3)0@zi%h]rb)&,Kƹ~U|?j(u|Z΋39@dU g!E: h{T՝0HӴYe\h9 %'ЁHtc\r(OzA|^j|52X&L>2%VF.^M FFpК [*ã^K'_6d`l*+K+j-CDI=.T ŘtXPcڋVQ,Y#qEHQW=vU-Vxx񼭮Vy y6@/O$SpOB`)0Awa$,@`uG%>_ӄq j -z_j7{ϟW7+Zsfu^=M4nbډEMYC<[_0,b^,M LCP"b_:OLJ[6` !,/ ‚FH|!sI!e2-z_~C6C ԓ :/װ#U!{X6q1N6,aEt^aA!kpU&:J\ʛ+DƩ!:AABZ cfR ;:y?^݆e|<(C)O+"r(k(doM5bR r ZvʡLa ɷLh) PT/gLfu`)JJX+;RJÞ٣4??w\!(!2s3. T[MÓ(|91jMph}tEBB.P+Hb~\7nX (0hѧ,e$zPg2Ct{[b还0  Bi6B; yF[UqҒR5XCGve6PA$3 (-iD!6VX=|X jyT y>=BYW4T.U!:._BL!l kcW&ּ9(w{َf/: Uƾ-gXYF֪/*X9/qw=&^Q!iW&{o92H/=<_x䞜=˫5}m;I:+D G $aRD\RAZBtm^ߔ0Q.8MX3|(vCaE|.9f? Ԭm m9hvQyg􀤙b-$(`U)5W~igkx@"` F~#k;>„3-q}GY>ϣk'Pwr7Žxyx 2DL3M:)AZ=Xy_v0\xUlI ^;#$S~/m6K)^0[-.A4b:Cd5$;iI9*zd53T9jľ0z;t ; %gкە\E+m {I Q7//k4 ܗ]GQ%Y l9j5=@}rHbdEFgsq^QԙCW)l5ҋܗ߶1${Ꞩ, TUፑ6Lk[ٿ1ڥ8Q^xF0HLNx!uN4Ry^лӭŅJq1u⺭?{Dyn> {7+PL@;Rtn]%9T-L7fPᔿrƘJ_IA\<;" m(-v(a- 8jrq!zuS/S?֧~.#?$Į.y E\̿3Qs28B31 V8Zyݧ/)N7CXƍPOm~~ojtWi f1Vm)6͸MGFv&Lct|r<@ , XK(Ӯ5CDI;+hb'e ` bOim}p ?'y1 Z>OfAUPjZG7=$x @5]mX*c+lz(<B%sW/Ah,"bGjcG̩T@{NР6X}K>Q4]\Kғ(`L={I=7s1#au-(.Egrzϖ8tOn;_aKm4."دP)H J#CaJce_XV] /މ?fڍF>:T sd21{ oq6+C@:M )ysM#ɶ[`yk>۳^yWXl{-iq?kuyTÄr_`tėҘ͞>Ke>и>;W `|U$}Y. xL.1뾻Vi˶ H0=OO},7^ܣhS6 tY 6ҵSWVտ?P}mB8)NCTDiJMJŸ|UE"N \t"oBk^+Nt֪4N $j0Zõ`3;ZSQ4=H։#JFFv0I6l$I6Ue6LomQ+&_- Є!5}TSY\?;[jPqxF-B5 =wj"U:^dU3UX]YLq7( _k_ QUugInWxAZ>oj3d vOny@*rq# XS}[(Ct/Sad[{PEU]Cg:t^ygp1tX1V=` k5*)K,!/"[+iW~JIӶ@Bݯ lRu$Ghy+e0Δ׸Tܘg@t^ q:Sn,䧵kORvvr:H.)^:\*zEtm>, UTrVO>ҶVYw]̿ v96E.95-OE|fWxzyP~7$v}̫/B.J1B0:u\s]I"_@Bj`al)[ !SM=fé Xxc^ϵw#U[-ؗW52y8Sv2y$FI-rsOx55]-_e0-V( k@V FCp}\Xi5 &@Cyyj }i74zވ*V*W@t,z u!@X2A%fKJ9phTjms%"1; (k˾[w^4Hte\NgsbnzEgHIiJ\KM~qdN,"@1K ԟN-R\SztM*ݏP qiCߓ~ ΀bG */1$R4 Y| k#d*c6'Zs~? 8%t{1@=Pq dҍ|V8qd FH#[J*,Tk*g' MaǼB Hp$b a:@rvڌIxnr}(XRLIrVdu4iwSfчMV_/EK69p6IϾ'?/[i˘ mٯ }2Υsw$? rz`ҫ$pz{9$ОL(r ,iPk +1UG^c Hr43mRFQQhs+ݵI5['U x"k"a ^( Jħ3m;uG*cʧ=(7qxn h5D\re+6uBW~X>w6pgoN  hΪY s 3r튽 p ðr)AlʵHLcj cSjM()*U0q-UH8{$ʟpx:~Ǎ@ڪpW'dͪH2>n vT}WﵮgqT %S sItاP(Sߎt +CV+W1D>li P1neV%-9d%q.>7 iJtՐ*:+]`xy~⬜ Uh1M|spy,zp8˻_45ip 2~Dʺ0t $Yr9;8?FF**f[ckŭu,Gp y`>,:Bk_vw:4Vd&qBNe ¢u'&~f14Zm rB.;[R"d4E<m{> 1v_7ׂ.r 2U_ɚAVn]W|eb=xKe#ԡ7>ޖlV* : hT2G)ruCNbԪEza7 O9&Kz[d-%w( h$/j0tu/ͯ"^xIrC1OcHt+`2=UYah$ v4O4mvNWOL&nX|`H6P~s>wg(o8|a"/=KszLkX|hGX:XgyꇫfWP'e w@?}uTef'.Y:xD@Ċۙٔt(8<-*Yf1Ӹ-%apdF;>1-4f-LPt3dc.!^cw(Β,fFJG|q>¹-֩ feS[~p|GY"G]+ey?7{G$kݠOLt@fnY2oZ>U*Pt^|YfY'Uބ"ʢm'NchbbWS;. KDȭca5aSZ!]kAࣛ٨ cb ,Yl^j6 ([Dh؊ھCu/ MQXY7fWq>z4e lO= Qp 2a22MEyf#X #@Qn.%2S`v^XW|zŀ5 #vAP=f(kv^mT&SF/dG;Ns^<x2 Wd*OF ӘHkMgr'Ώ`t~nǺÛBŁ-l6| TPr.%1%|$g 7uf>~}'Xmm3-@Nh1Y[gc?.Y<\^[zzVZN>Irwf߼ “xۘ* oWPosX^ FiC]~386 {Yˏp ySbbK#Rٱ8p:pncFdT?wRitI _EC[(̝nFKv| 6bRքH+rùjDaǜj?k;(܀Ngkeyϳ ˙:U[S>z'\vyr HPic,5C=&pLyұހ2&VN;$3ʻ3^٤˩q1Hk6 NOEF$J \UVx!t*[0qĀd8N/}IdQHWJ֚뢐a@Of!;E6m-c+-B4MQ|v`BH&&v0%rѽ6-Pu:N@#ǽy>sR:%6.|(%H߲&WH츙4_&\jmF[99]':K27b|-Yney0bȬG7.oO$̗0Ujz  q11eAo#燼mTy(pVv,ֶ! $Ա)Ng^C6d i*#^Aϑ3bg1K Ǖg}|IH-m }bc]-:eN N'wu6OŢ?a"[Gf#}Giy`°EgQ^ШƑ9'rMߗ!*k -!,P6MUfe2vsfQfk=+ܠhAZFRmAfg"5|ӏگFw51Nlw,}Й` dH<ޛ$SO{7C)0i~,Ɣ=&l&e9职ltYg':Z`˺jR% 5SEi%W# 릅F^4tX[Ce- O=~Kɰ!!ң8P剞n?xu|JQ88F}K>=fV&T8)\P>Pyh6&&75򀂶qP0~3 F~n\uβeҚ*::%!K_2[ш-)VWo02RhWU9 1aCPy7$4;_Ys.^l774BCvX|s0nbc4kw*Hs()Jրo<6Z:8:큵uGiئ,qyvLk;zxߦ&/elyx##Lcݚx>Շx"`kQ~3,*JQ]jZ}r[J8o3۰hGt{*:X-*ʉ58X\-C*!sArž`ӲWgmv]qbQps*#aJdUQcLE%d8R4M@ӖnZo hbvs;oAزBTq1[D @g$PZ=ި{<'yDdjd $l~0u2fd)V Qvt$╫&Kwd:9cuRߙfL&v*soY{2qzoTNJi yV!_1$1oO5*(ίY@\T? U>UL (qk9iATSHU =aud 3u6iaYg8;Щܒ<5ёs"tlR7e"Un!kf4(>ɇ*3XZ#o8?I?DD#/4XX;yMDҋÓVMB-B4\Kwj-~@wŶ#w6'k^׿Z*os`8:m1B[9t} oO8҄c&VY]Hĝ`rM/)1t&4۾6 կ lIE8L)c46Vҋ'9=ViÏ}93IxM)*؏KʪҨԅNm>dG lO(;rM)TJ]|7kމVۢ]>^__f=I'k%[X>AǠf,f\9n! ;Z7vJPjQ!/1 G)b@JA1{':/ ?Gb+rkaoZitr.h%4߲7gs1M}!EMk&=IE#絛 bEl. nSX ʍf@!0RF:;Fr``$PJWLz*ʼ3pkgsu-NH%Gy8H5KF$^#5ʚB&Rk{הL%.~aut;#|eD=M =$)<Քò5[>cd|] h4,ahsM. X>jVbTIt9(nasQarJ^wzœ @qg6HF@"u٪JA,p9O›%WF})aV@:f5#`s1ʆUvk6G]檑{Ō씛qVan.GQAV|u wӐ'B"~MZ*G_S7e> 'aN ~0^RBrT rV`M$'AskTp[.u:R%C Ʃni2?2PIcʽ6ۮs0ZckC!ⵦm^7]$78rɭB,y8kfk=H(6ڧO-'R:j|&~gߒZ4ȲɉNcQb+ H!ݍ+"3m>c'Cyr9#[D{tz6P^Y:Ǭ]`Ѕ׸=(]}mBAAֶý߆0,f*<*<}0 V7`ߓ7V/)t/I׮xՓP$l& Mj9Qۺ|Gg?s$D ^ BuM]="\GVTo5\%ՉpT^-"Opp<9Gmp0x*D\ٙye罙z<[tjV0pYFs2,O , F¨Ɂ(=+0uS$N<& SQur烘- G.x6F)SO ݦ8wewW(is:lI{7a,aՅ)U fG֎@ibx=8wv9z &^F"J4NP6C?+c+R͗i7'gXG E dWEPi_% d%/_yeΨocDG$󀏷k36>fBrN}帲ik% fչ"wihé%ϢzEhaº+is0s| 4-#Xo*`x_t1m9/܀X/9dZAV)V1A~5j uv1Mz#E| ŚX($(gMVJXZ#{q W^\ˆ]埅K7^!E=?㡪U fl5;5, $C=;|/ yچ]ש Hx]v?bZwMkJʓX0&U#?T~ђrkkrZg,JtMj{?[O!qjm  :_iӀrd9c BClõY+`6HUwl7f'F;9ߣܙ.Q<9Dcli4h0O4P4JFAF.S{>C;/{ŕQ(aQdz9̦+HA *IK)74R&\XjoG&%~qpI?EZk]+u!)R`oҞ0Flc Fa=gjKԏc t(ġl$݁u) p~JG ;M6䝺NƯ~?{)j l:3nHHL~U!&xY. ) $Aleo{/^jtN\6%"T)256~\bz|T`cHrXO;S G9'CO;|lEW'&a5ЭytSjIsi9)Y$ZQ{Ъ釀2T==2h?#&t2tHFWft,۬k^WRe<%:0tb*f30?B = #iU`B v=MN8ϙd'F W KR.gOmIQK<[89a"tf$j`Lo@e8y8+eO\F"ւP϶jlO$ƚm0H ixIjpJ4(*28S%)AuEDF R6ĵ[-VF|Sc'&d"Ժ02|!:KfX ag0TWx1˚0+p35-]vs8=W7uFE"QqG1`aL8&Mn Q Em}iJP3tYػz7 .ŏv^ 7Wzb Đkx(̅IfT&r^Ć{%}>:znHjw7dH6\e@vieod%ةtf~{UzGu9:\98q";w.1V j5D=ƄܝݲxFp`i!6v+/0tZyoJ|p zˍm6p$?3D}߲s; K K.1 D6<=.>OƠ&𑤑i~N7p>iQBw漽RƢԱވ)  ȇ]ێx\-rHYB zj{ʂJ):PѕGy`ÓZ 'r!7KsǤ1gc@cί_4;ɾŦɴ|mT b+0m_2dNVQoԏ5;w#yptwx㬊(p{ҫ ]XpG@jPPi>0bۘlFMȖJ`".S/Au*\sŒLFZ"6cйxxI&1 `6FQa`~cڌĖ<) |h.ARO ʿ&gIɈ P>ԵEks a;;k)0JΉ6F;;`t9{7:-d*k偱y;" )YK8]d5Xٿmd# m"ZW*Ĉ1Su QsHɽ3F>"z(M|d3ĠI#U 1摠o *z */Mv42/؛&eƽ1u73W]r'1o8\B 5fzt[w#}Q4*kӻ+y/ ?fQMUdRA XCd|T M(ׅ}!"2-$,)ڋWs@zէ:MNWr ob 33wT|z&mj}Y*EJ'r(#ODeU=pt׳+^Dnyj:RtɛTbĠD'XIiSB>G>&ŵL`J`'b}+b\ x橃^uRizt]KPul,t\i`.ueH[NY C#>dUYj@j%A2( zNNȜto/H]b8"G;dEƐ# ˸%͂?EY9 Uem`Q)Cߘ5kFE i`s,=Nm+OOtZdxy 74&9fK]m)K&PK?X>h2T^`?9~-R^:qtGgL g~R/}0lr <0 k] P5.Tq >ҟ`M_8O4N9>dtv-zoZcRBυxHeYN~z` P,}" #; a*ȸ%R WXQr-1׸~pBl]w |xEpJO(k?=,xi32N: 8#J7C!Roq-W1:!O:Pk#?ENgؤ5GwP>gǩRj_̈:wfcg!cT:rY[~'vu$*xx>E2W_Wb,,t =ϭ.Y^^ I-8fͿl'F I4G+ {##Hc.\V>n[Å;G|f]Vy3c؋[Q*%7W*=KoM陀u\Ъ:i暵'R$x8}0U%W\1Ӹm!/{3/uu JS?N)E3X.Tpmi0ԂǤk7W#ݞ%~L9|UDI9A( Jse'kʹ8$[oqU~}xD(aePhobo 9{`z¨E)JG]p˭ KH-v.3N%k qxK= 0$H26oYbKb#RUީ(2IIy)+ -tC#2|0HϴNcsIJ@ZUǿEE'+3{SE^݅YE6p=hMb_;}{y E$q"Ê\5l8nΔ`n- ƠO>͇s\ Tceוd^1K1FSyF&:J3@$쐄&/ d 䝈,5- pm& \{x)t[+vȂ*&zQ>S:|E(`Q( k<;;:g|\;yΞuQ, h2Y.OvtDID" q$"GJh!jޥcƀؔk`>3du" x,nzDN}{R?Wڑol!E=Ǘx6@3ysk:~u'w!0{/2To?JKZ^%TC(d;GyȢuI%C5r>ZNM2^r"^ 3mkY9GL I4~*ŭjCHٚF4m61?%$-(h6as&iU`u `R4Vџ/J1N2# ^`@<07EG·"G;kN/_f?JXW_%gB_nN>@e=:!lz`,;jG'[d^. тDŐy<޴hDڸg\5~^?7խ=YH;QQ @[1wRIze@0wn+'%iGvq'SjkIG|7A&)Qo1Pf׳r5#lwF8tfIΑȿ$Fq)>GHnzʙZCh-qe }k~Tk@E}?,$~YXM[*C_ŀ0|tUuF T?" 1Z"xt$8J GjI׆J&}FK/)@ҎOE[:N:d#"cY'@!2y֐сȻ$-I&y/:UƋskG˼z ZnDvTN3&NsVwyUdFM+Ӏi Eh}Jt=T_T._]sڻ eڷ ;_(ڣϥCRIj-H ѷ~x!50Oh dsc_JrH5yMֿ+Io{?5pl 0*p aeOƜ49e:ۘ[a^׼vȧ+HdhNWdz8"k,+Simjϱ91Pʷl7ݖ U*uaB^C/)GYǝ3Edb! ^-v&&PQ0#N-/BQ`:U5jCn.*x!Eq?_})hD^m*腧m'0Em.y~QA Ut.k4y%6YDjf Ы5hȼqy찇D#__r߃$,ˤ4%][o? ք# Ksk4 #,(S;{1ڃI)XetMci< ׎KX3$P-W <;-g:R0s$=g'`@4pY66V`8ggDa0I#kz'wkUp>qn"ץM/uf*r9ɐ:D۾{ʉ X*IZCl@DCAv҉D"mR<-nv<<NyRf.Hx2zwntI[55;b MzV gŒSݧr =S"IVUW%ޓ k1Vtc&SC&n|a?ebݔj3rVn")QĢS'EδPΧC8Jҕl!Жi ӯ@(=`q_On8&:ϵ~ߚ"Woh '3)ɲPk FhpH%n'ڜ rd"J4Uޞ?$W(sB<\q0EkVC41myN+}Ib]L ZX `8<(hU ;2GWsfؕZfհm{8'w<1_U=Ieaz6ҩb|3(7 c a^h_$[}\ݳԘIf21D~#UKM>^cY]~J%}9SoS|4]ЙڞψdLsfs`)HdT`vqz)noʈs yePt:7pRY"c}vU*'Ŵ|?kIj20F}X~{iex`AJi$U~e< yT91o~1F]?rfu1"xw^ *۪d>ș GȯH&$Ń; 0r0i*q Bj$TG9ƿ+n?.rסz@AiMs˥nW+ 슬׵&g=#|@5hT啗'ŗ4k[[)ʘ5;DNgtv*Sz@7NUgʾqHus10t-*jr$$HvTͽ~I 4|m22iX>3MT 55o-8&b b/7- !6Ԙٞ'}loߓX< @X*1ahyѾtmfpom7.5:ڗ NH$6S6'd'asl Vҫ+Z鳟3NFwXfvp# ,ʐ'W.AeFqarٌhs$c~p*8e-I(e`kϔݞ$+ېu5G{ p''y ,_y#[sn ׶!Ǔ!mӆ?}'ڷK(tqS<)ɵ7AtRF^QBIwMU(m1 JIcWf,!C׹o&93i0t2jX^ѠA/872MLH^5Q?jEN|r#X`JI7(_Rn6$tZm@z`&| 6]@;gƦe:禎e"%zu *K#a<ͧX$rzoQrWPC ݮ˳Z| ]Y+"Hq *00ko1[SI)`Ŧ8W+XUc%3B]~; C$;yp_ HVZ`=DN`0 GMkmSԪhCӱ#q;Vmg6 tVS*n9s~q+^~& o }8͇~. Zeն}xs@ެ7%T8`xN&5SCgx6%gRQZNJ]gi/hI])&e?MHa].48PDOz =JcZ= dw O   .XUo#-W_31)9~5m]hO, ӌN5|Eu׼bXJ*X}A{41LߢZD8(v ۛ1g;SǕ9'ÎzCb 9,$c>x`odiBԲh һpn_8j-e+HE/xVS? B% =ֺ6&wc;E9 *?ڄ@R{Sk^?HD +zSsri$Rs/a,Oq ;~G&D yɖ7i`T|,8?oPȱBjǟkKU9w܄(C:ǷV4}#W,ܦ٨YHp^\S.mfw8vl q>d?7'^ǶeQ >{":*Yx(ge(-PtiH-SMF02^ԂLG]~ 7/暅n]7ZW]:ǔ$إI.Zt\iKqsF?R{)y_Q@_M|@a-PN6?XXcxZJ<}wz/1ٸfrI`m6Gi7̱mbYSmx{r{eOၥA>1&.@ ED'r1?oa)#+/1u`+68-neKi7m\e^`i`ݍ 2p B 3*,<|bxcS!n:ӫGe{♫_mt;Iaɹ)w9'{f!\l1<JQ=j; W"(U~H;VcQKa^MkD3$YI̓\+b+` O޴!U#5,7m)Zkۊ/5<4Ú#<1Tpc 4A.rv[7 < yw7+/( OQFcgT<2g o^/?x%b vL~򆹖/VRɐV'ꡅ/AAHis%Ua꛱CWe7SXY5kGgVjQ;iG-|]˛n<"bKmW|\OwWL7P280hAnF 0YfY6w1ʏ YwGÐ]EX(l?q: 3u(7),kjc,#$U>{wsJ}56|Y ~?ZqGv{s$X8m._ @wv%mme0l85C{)=%.v~K3n(;Am2|eq&#fnp{ͅkC~cnu .)F':I6r$IRŁwN8.!7.o2,~uWϼZfDYaME1a,$-j/nNc] -}=wcʎ<$_<Dr~#)?%/.ŕ>+ߎ}3Clяfhs%e&IҔ@:$@}T!)Z*Ćw7M9# &gJyU;㐅:Ɯ^PIpbA(X(I:\mza.zk\)[Gu09=`F]}ZΠ+5qr5J@* 3uGVcE#&殐Gr7~wHa-c3Zd<3K"VOŸy-=\~a}%xCss,ArOgJ^X p vDV8j7Gxa>@ڶıۤ!ED42bP3]]w=x HPpbZLׂ>|*v}78Épuxakv_ƢlM|s ~K L Nl?$3SõM͌!~1{Q40Pc9GM*nvBQ+x" mgR9d[ FMƶ &Ș|s5O@+(mX붯Cz46.o!)[Jl KVb13,W'/Zx)7NzVp?@j)U{L W@c|z=?;p''N]Zd@ "uޅCp9]EݸmVB$\3Bu#=0=t9ءk_[bQx|<42SWo%BJO2gNmEr+%)N6yo0S8 Oyj[c`"ѨcǨ]mA/aPGWPLtX 7 w'.|[Q%ٿRh`&s. Rm#VU RՠzDoƕmo_.;jWYR1hx;Jw;"qh ԣAArٯbrȸz Pzb1&s+y;9In⑅{ 0ZβCڡE_x\C5ͽj:a{xxPi3{=v1X+NRuJ}'OJFfņfU>@ۻEdjJ :ܗgX̓uw.o Üõ5ӳq#8|2 [!E?˧,A54Cmm{1ZdhQt|bkMrG<< ,I>|Ȉ_ه;̰VGoD_SO*t]ڌLj֜Ky~/I`ֈ^MT0ƻ=h%LC( q+}& 2EqR 0]i<'آhOArGr9 9Di7C 6=a+؅0;!c~h'1VE1AKu)s@>6VAY.0'XYvnXGCLn!ՊI %H;EX|Ikp\.r_B[]^eAؔq'MgmX֨w_h4+Yox [zTG}J6*|Y^Cw?aCrO/3k27%NG!=݉%7ɮ+x9ٿ ;`f*ͭ/л2RL--qqZ% Yi)i;rjRɇyq p_d.MП>_TyֻG ܇ B!$r{ɯ^Rku;o6 MDoajVK$ &~I6dנRqWuw*AL;5غR~@_#LfQ?a!ʗX"]r5EQj!5+ =mܐu5"uǿ|z;a/W58SL%W|Je5SR6fXE%/ S!|YB7 Q]g2 zȸdokL:yBsHMJFwQv$8ճZɤ] MW0bHV{Fn&l%ӆa=2Vw`!lciB`& 3VhG3j]177 ~??柌3M P,Viݔ.A{'i| YxYZ*&GFD;B.9!=wg" bX cG`x'k%NK"&΍ |H=Q1Wbdu;3kC;2>ͤ{ |qQVp p\GtzKYMmkbN(:R>CG#IxLCiA$:O7/Z/ vh?EH=7 "vyB' `pTp\0pY{0I*byJ9艎0Q}{M,I<8+03I?epi*b ͅ]~t;?57w"{[ţg0pـ Z.Ӭf h 0%Щ$o(:t&ߏqvM=nLv푞*dpV)dw{-&}*ыivҹʪ<I- Vn WaZ.2Q`THVZ>*5M( CݐԭF鯞>uc* eB23+0:l"*+v/o_~BlJ=* Lr'-ua|0e؍:]jps8x-x&?؋GsVf;-&: "evrE(ѳK t`_\uZTa?Ox@"؅f}n7uXu"*'TwQ,-&_w`WMPlCPؕt젋'xTfn";*8b8ɭ@w٠m%7nvhMl(g0@!a?\߂ 1|x.?O5}O ~(.J0of̉P=k g1R{ɦ 牡Q! ʊ$^C<ߘHB >u OK>֡.)2kXb\z ا)0&h1Ols̋-P(~TGG/=`p=$$x6edr0V¶ryhZ"ҵ=.2T$u5 ԇ1Xi1m4WmkĻ*dL"nFMEmQXg Q5 =A_!31,~M((̎>1w;9SX~^]yca*>_e8ԺCDBZ{τ!+oB^=e?5=1Ƥ9$PZ &o zOh0]bhNue-@I!<7⭗;ISKE%x%rV;p5̆s [7;Bo69kR`B%<ܞnݞj갅[ j}hGௌodcj('Ŀ4!*5D&HUAPqT2#ѷHp_ذoVVЉ!X7#[SA8x'oq %f &ŸYbZ%#An5jj%S(С9CX&4$)=O-g>eՔ ԍQbh^jm\^&78;9qk3{@D?"9=%x?3³lnlCJv%&!W~#r- pF `-{z|.؀Z{]5i㩖aLT4s2yUөl$X<̓Uv.ut#+pbk/7^).pH^K%"2ww07|Gq 0̼p"P"A!ҷZ*ѽt_ .^6we{Њ_tCXɝpa#fY kSC_9;[|Jj-} %,u&˕lucW3Mͺ7_a 6( pu^%mW^8f%H@fcX`HUrjMuX/r™vLcR[|V?OtD[Xi B)Z?& rChoF zb,S Me._Tu[v ?{G݊ai%wɶh:a:}u*,i)gjf%QOVFi鱏">ǸFR m?x.)X;ܲKς␨JOb5,L4lֹI蟊p`̖*60|vãA%gLS^B2ZDubѤ0XC:?%.a[\6G^ 3)> Em.<,D}h9ՒDQIN8u=i9G#PK~uS`nn]CԼbs]>x2ꑕlp|,;8m2-y¹#Z }0iCfɚV-JnV0L^եimF[b/_^:🾰S(ZwǹZaRN݆lT 6/"D>m'.JqgyH<}wfnЀV4mYI{K(gwT*Tp}p(](.*GrQ9R>ϛv9ywGAsSˣ6cM걖PqU%썡XSx$EQA/\!;4ٯ?+sIÃSe9+?迧=ퟛHipcX+Nƚǽd kk)m di#r!  l|+2uHnAӷ8U+>`f#7UY w+ˁcS(?V*5]] R53WƬ;Oz]kT9W[j;Lg֦DUQ%~xΞK 5b}NbɔV.Q|`r@l4)E%Pzr@k+OۇJJ\ Nk)d7 iT6Փ.e 3-=̅]4AN$l$"WiocV;/^!C<TFrf앗+ zʕ*?FyW5#{CbtyR h۷ݼ?PWfE:50'j *jvѐz{;Ww$Bn/ӏ r~QROV 6gAVChҦ)Uv\gK"uLCwDM=jzo]KQLi1sg Mr ;cg~ygKJ\w&%uwu6Is3},i߲+8+P9XV,2#R|U ؍ӫ2'LQ믵a JxC8Yg&Sά\Oͧbx~͢0hvV,E򎂩a ͛*80[("݂q09}Aq&,C)_ȥGwJzOUpƑsiP.)|gOpWYҜ|٫`guL4l;fRӲ0I i>V=`-A:2HDM#EU96ApH`!w tm$m|`o(Ibeb >7Ɉw]',(id)fp03|.nR5AĒҢ8(4Mu# ;A~epqN$~0qx/& TM"zFf'R/GjLqCy\ )%bqT̚c Oڛ>v0FӹrX/.٣4A pyay\`;VK 4n1h-ILe5ia\yo1tcMOŎkgР̺Z#8"Wo1%fK:cZ됩@}Nkw-~JQŦ cIZs1({! $Y=WEarg5 oL\ U*)z mu0,S$ljɁ)pA}VNx8/^1MbY"0rһ<ג3EV޺Ώ9µ &gǂ2URBD1id_/Qm 3v]-@wZ*Se7tL9&Eo1+wC_Fd]J&ȥx%ezH;iYFe mK Uu'vW|K8tU;央Nj$rb2ᗺk;6lik.d8|;d|@`'DꨄG9'5l: 9 J2}2k![XVP!WO \ E8h2X^)櫠{ZuȺ{~zwX1@"ou]1&|sM"2ٰ sr^CUBd`N_7UQ>a@3m7 zR"IG2Y^7@ȋ]NZ!̉|')"۩O`1߮'[IM#(}f}(<S0s7X/ &\\D>iѺ͠vK2lVwt" 㣊*&9Q3xFrb0 Kd.(34L`0N^Wʱ8(G:;v "IkQ7 ,[2id1y ?l1US?, r4 ޝS^npsٛ.2fe8U_y܌򦖱G`He9sf9=rO~EE6^\]ZTna޿|hBt2Dzl,%}+j4O[6 SBSP^퓰}Mߖie0VLcTn帐(MUwȰ`]OjF!D>7hQR@p[>r6F*BEۊU%lהGMZL]vZz u,0vDD]P?Ñ\YP(1MNngobDѺp3"GL ^ED{@pO -3뉦X԰ɗs(FQ׉XNMռYh:Q}HGLi*J9>GG}.VfZGyez4$uOhgnrIQaZQL ?n(Fl^i,"aw 5o:dBDUW+a]2$ !Z5\=/23ѯd9p*]C%玱Jcѣk]+՚MN/BHbn"ш@ό ×6ؙ\=͏2_4jn QH[Yhր^:F`qeA8$;]68U7) %tEwQJˆ.$%~7H@ipgjp 4>U'rESݛO)8%Cx :[ myXeԊD?i5!!=48kP nEbmϨP[$Jza=$CI 8$E6m*{t2CJ%IfM "Dc%}}R.n}|GPR;(MY!riRJD`OV~b9Yg0U&:\rF#޼8sngޟ})G{0K WS"]f ө]933?~dPMtjrʅ FFٴ.U8ƌet >'63tĉq uY7NWj4U" *L@7hw%?=g'kn. '٣/k'4cmӸ#'=Z$ކHٔjh@&>I@q"%uV*l.e^ iw,@PsƶԯH,^U;8- я}ed-0ՏqdB .i1`AF;T]-ɻC~e~FfآU$ 9bC'_xJf/tԕ@٨j31Z蝧1st 3`ܬGǻǺ>,29jΥ@DQ V VPkMS2l$񕶇Hp3b \T H(,;vS1Sqg^=2xӕbX! Ne/ť6w_ nF?wa\;&ucd%aK qvx;s)yYT N [*a|qZsP73kG"06$G]"'6_+TLl1WN=gȏ)b|Y#'-2ED4%By-VGaB)51p[}lt jQ\ML2BZ ;*uHB@sc~Fk-Л2FJ{kQWVj`a/Ͳ*Tcyw|*DYsKD%n68NCi7p  w=MQ@whZ*| WY7?|~)?c}_@@:@)D#F9 }7Ԁ{:x\$OadT²~煗\母 \ DŽ~l CuNL`VSgjBlxp5k)UW7zpo7>2$@rlCzEo] 3t*2_j,N.'hGи‰71 ;-k&Ba`s))%vt"ኯOsj:4< {'T1jvLkS n;J潿(rimW 3z{"m.V 8o| ^BdS q,CCIb\qݠw?[ vL IpSyf( j CQqVmXVoLl]9"T{LjȤG)]H. 3$^ ѿnON^O|t}>zV`(_Mr\}Oy%wDɛ&; ւ:nt) <&%<*c)h+() _e帡)"tm-ZIW~_K]b4#JH?PuVI`?MDxn!bGo (NuH1P ! ͏T XZ&SY/LJfdUdQgRϕyVt^V2 {(ttV\WG8[N10Z􂨹mu)]QV>3g\krS!9Vz;(`F- hi\'$,TvR3,u'%EYMm9P|WGN t>QNC};@Iؠ8 VKm} %v ~|5_Ṝ~K ƺU:C~)wƔxKaBnNN _Θ3W&qZz%*f\qw4DŀCPߖscu r,3j{I Ʊaezc/eGN_2NlcHcD7H(:zO2( ⦂ڒul @W.@fe&Nz_ ;7aމO|Bn lu'epfӟ(g5n[!aE3Xybى<ᦶ^L)76\'} . ?92ғ? }4 βc+S=Ԗ?Rֲ?O2vKH[,'z^8-_0S+shekQ$ooLa a+nn-'IU95,-8Q9h yY%4HJ%?(K 9ˤtmHZT_ JuZ’3 C qc<~^?ɕ5,20DeK/|[NkS]vΊOžNr:]T~7H#54'9Ϧڍ,~3jyӊ.KQ4 S⚁UV-9浻e&dcVS3/}9^@- #axx'5Ddo:3!)ĔO~{ qrV%h\S&@\e9>yr[[yn3=#j|FE oDD7jU6ĽҍnGJF1L HL'ӕ9w4NF@NE4_c@Jj]BJq. kGh["e63^ ШQl4:݅Vots7l^ .7}ӱu̪xtYQtMD= Rsu# di)ff>&rI=❬X23·l(--.'rMCg+DK'O9$s]K'$ @ }<9`ZH ]FUͤ4t˲V6Σd D|v^>l.*|.k`N:;h:li{@nl2բ%p'00ѾvE7nܻ|W9dl-5 rrmKfPu2j{uJ$;ќqyv̫b3=}[p lK2{}-M_+/64P*I"Ѫen[ֿn) _3u.\09B9_tl - wH¹\7 0 M|tWL@`|s)1uiM,'L[sixS;?z71!&iC^jzr٘p2N?􈖨|f-.6:d YԵ׏i6$s@8|Y% azEKvG5ꨵ˧ 9fɞR7rz#HwY84!CAPE۴8x2π)>)H4dq^7+ XJ?u/@&g-Db{f<+0 z (pB'e{0^TVTP~bܱt3}-n.QI;UK64N>:A s0_mHcАv̮\OA.=N޴PHgc6r1!aˁҮ6U|/gy*weFj;nݯ5OEXi=1h?w?Vm&4>r>%^Zy &r26}B c1:'>:$/í8XIhοi=d!f;L bDx8 t9t WƷ[zJtZј'qg$J!ŐR5AS=BG@U%u'+Aex֫1kA۫dɁ/d(Lʲ:t0,Bʎ;ne#D$ncҵ}sʢp723`6mCHzQ8!MZo+r>NFCbv"B٫՛hQ6&qUF=w" )RA~DQ/}i5ՀhX $Ĕ+O57:%)~yp6FqLYP]ƖiM t]jGC%2$ h_- U\ӽ̓poFKF;sS|UV <rڵ> f&3,Cfh{j,e()B[ U4P'"beKt ]NK-Yf5"S5x+%o%û0fpyK֌(Bd\0+rT3;bUl4n..\"* 0wҾÐ\"z1G-(qمQH ܿƢF<@e z Q `m#*xx)[ư<#_ĽO(vȁF7/'2omq?pmZ\ar>ɢֽ?8. <*$|Ev'/>H/SlE ϡN> 4"_6dNɩf7YZ89v)kk Dg\ o ;:`RTcG_64 nFE˖.J'?Qb`e4cbwRUKPC7&ref.y K$c~jp,hbMXsEj1d*9tvBzq[uPL@ af,sy)tnlVM;p5>Tx@mB\;eHksb[cn^``HjcZ=ŦDYHj StU_=齆p|bo!}=/)K[x.#7 Hl`s状ޝ/ lv {t*n  xYjK:q+ibӎeQDA[)7T O2_浹yHEջ5mg ^Y:%kԒ;Z ?DGfzRmM3P; F(xy,XMPv{ઈ3gWFN]>!wK?2') 'qdN|UNo[]IWt4WG#̈ElNi`Jun'c՛Rac 6uVzctf'[,0<ѝ|jcVd~sP%f)2+pĐQF{p9Ӈ|'%Gb\banQаF9 V\6ѵ zWcSsO6HcmiޫUcTL @ݧ;$'ͮ22jœo%ޟ`<0@0_&bT$e4+Q 8e"o!A:>8g.襔uƓ:* uc׆-3 w߄nRQ"߁%ZV{TġIs`ƽ(l} Gtm膡'8[(S oGE;wgpS"e{ 8ɉ}MDZm?;z$[9`ani_A ʰϵ52t:-|M?'Cb`4#3넸bKrK`тX_tCXXVeN} 88x 76G)Y1Eߤl{ B?2w ߑYݽuZ;3P=ޱe8,ԐG;OۂiTu>r9p(#hjpR%"kBWT]EAq8X[7@NjU1(sQrB@)nŹc#pXd;0fb+Y@&RԜYn7Șr1YNk=OćX1'.ʳʞ){G9r_k3!N=!&ؑ#@TjjK2ZW=54K+!F=U(qd/ 4F56z5u}~#dkb#zp"dTfS{mL޶/-iJ %R|8Z|OF$0  6zZQ=gKb@a')Yȷ9@u1nꮸD8@gG"&ڎ[kb+g}|qV?\h|C<|(͒bPs+wދh`-l%ٔ+?uKFQ<$~GTB͗C$SʩNyPI캧` &ۤk.8U}O Cەu2q*ST<,GC3[\)v&Ws=5OIֻ.o+ڄ&*u]tx4 KtmO0 Ucyh$ \m"lT5Z/8b&dӃzg#hwB*`o@e.OョpENh*ɰ+ {^*eY01e"Q_@uveEs 8;rdž%_"\~D VUrcBXzۼ7SO&Ex. FNZA}c`i {1/7|.WG7d:8hZ<iNRIR$Yb0 _KwViP2AptC--NɎ3$d E'Q'i;`U! "RTWBSrv"mS6\ce&K(Ro ߊ^k֨[aw`XKzY\J!Ci/RW|} EBⶰ;\fS6qNF7_W!Pbm= j??RN#K ,T?p^g(ԀH'sjyʝ!ӒUrF%&ݨC \D@)2e8 @cY ﲼ2O]E~ p<#<71F<-"Lm;Ψ BͣTIOYC " (k`{v-sO'W GM<6V;~e+y}Q풸N!S$^ ς~c*]=[g=WIJ$6k$FKTىQXHnDoC~$:♆k+1Od`R ^t"9he2hoJafKK5~JrpS󛮳mSx2@SMzj'ޠv #I?7?'A{QWB-T`@?h=B3D&p$Q贉cc6P°zZu n0  q%R⥫RN$bz>BCxSgC2IJh V HAǀPt܊B` Va 便1@iÅF7]<Q~?q~jgW2w:!Y\0S=*EMu$۹KPT%t77*9dv<Q. _DIW-᷉D탯귌ť_Tt:>мdbZS<7`FzYyT33w<ny")-f 9%˔SȐ3^]p܃@ kBF BFx2L]L%psv ;tMEy{%%(p5K,4;I§ S$~-@BW޾>i"W=s׃xE3ٴ NY`m'ЄkE1'j7B{r"%S; CQEwgrGK9}Bw{()uZHTLZtZkŜ4[A$+_܏fkMeZbHC,\Ā/8gKSb<|2ڤ\VJ6TA\~nlKl޶"Z|라kAΕ[<Z.l6Vsx5q6Nq ǣn$ϟ PXs^!VՏ{~9Ր(ZPHLX *H!XDBTSW~uB(QPh"(~*_oE:F(3q#PCYխ5PtR^,>GVr3mo,7X/4cy6OX=<뷢lkiE@ 娾e'uy_s:DoW6{$tz |$gf)J޼A'?A_M4%K*~{ $>H/90ۚf+o_@+~65λmV.Dݟ@KOZp7Y4?B=7:j2ړuZ1GkWDob5(|M:1XީK#I0'T>sdmh!A{\ FPv8@PxCaryԥi> y{_;e'rw|ʶKBd%]KK]HcI쪇EN~,ձ aV=jxtf'zoO)OY$ò&\%qHA{֘#%Dz ]}9()D%A~+'2_J3Kh6y h fؽd[z_ĭ vf  YZ