sssd-common-2.5.2-150500.10.22.2 < > , l g p9|h 令0en )rW]&Njq8*;o om8ҫF s 5 ~SH ?FY> *W <jcrH%ࣖ^֥UX9յ3eri( I0sҫ7/jQYIC^p_#,249iZ.f 6ƍk~PxrhJ`D6aHV;+ ?eTN.@D BsOEJX > I n ? n d # = % F W m | x (
8 C
D G L( P` P S VL _ W _ bF _ ( b 8 b K 9 d K : i; K = ! > ! ? ! @ ! B ! F ! G ! H %H I ( X ) Y * Z * [ * \ * ] . ^ 8 V b @ c Ak d A e A f A l A u B v Eh , w ^p x a y e0 z m m m m n C sssd-common 2.5.2 150500.10.22.2 Common files for the SSSD Common files for the SSSD. The common package includes all the files needed
to run a particular back end, however, the back ends are packaged in separate
subpackages such as sssd-ldap. g h01-ch2c IuSUSE Linux Enterprise 15 SUSE LLC GPL-3.0-or-later https://www.suse.com/ System/Daemons https://github.com/SSSD/sssd linux x86_64
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in sssd.service sssd-autofs.service sssd-autofs.socket sssd-nss.service sssd-nss.socket sssd-pac.service sssd-pac.socket sssd-pam-priv.socket sssd-pam.service sssd-pam.socket sssd-ssh.service sssd-ssh.socket sssd-sudo.service sssd-sudo.socket ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi /sbin/ldconfig
# migrate config variable krb5_kdcip to krb5_server (bnc#851048)
/bin/sed -i -e 's,^krb5_kdcip =,krb5_server =,g' /etc/sssd/sssd.conf
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in sssd.service sssd-autofs.service sssd-autofs.socket sssd-nss.service sssd-nss.socket sssd-pac.service sssd-pac.socket sssd-pam-priv.socket sssd-pam.service sssd-pam.socket sssd-ssh.service sssd-ssh.socket sssd-sudo.service sssd-sudo.socket ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
# install SSSD cifs-idmap plugin as an alternative
update-alternatives --install /etc/cifs-utils/idmap-plugin cifs-idmap-plugin /usr/lib64/cifs-utils/cifs_idmap_sss.so 10
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable sssd.service sssd-autofs.service sssd-autofs.socket sssd-nss.service sssd-nss.socket sssd-pac.service sssd-pac.socket sssd-pam-priv.socket sssd-pam.service sssd-pam.socket sssd-ssh.service sssd-ssh.socket sssd-sudo.service sssd-sudo.socket || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop sssd.service sssd-autofs.service sssd-autofs.socket sssd-nss.service sssd-nss.socket sssd-pac.service sssd-pac.socket sssd-pam-priv.socket sssd-pam.service sssd-pam.socket sssd-ssh.service sssd-ssh.socket sssd-sudo.service sssd-sudo.socket
) || :
fi /sbin/ldconfig
if [ "$1" = "0" -a -x "/usr/sbin/pam-config" ]; then
"/usr/sbin/pam-config" -d --sss || :
fi
# del_postun includes a try-restart
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in sssd.service sssd-autofs.service sssd-autofs.socket sssd-nss.service sssd-nss.socket sssd-pac.service sssd-pac.socket sssd-pam-priv.socket sssd-pam.service sssd-pam.socket sssd-ssh.service sssd-ssh.socket sssd-sudo.service sssd-sudo.socket ; do
sysv_service="${service%.*}"
rm -f "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart sssd.service sssd-autofs.service sssd-autofs.socket sssd-nss.service sssd-nss.socket sssd-pac.service sssd-pac.socket sssd-pam-priv.socket sssd-pam.service sssd-pam.socket sssd-ssh.service sssd-ssh.socket sssd-sudo.service sssd-sudo.socket
) || :
fi
fi
if [ ! -f "/usr/lib64/cifs-utils/cifs_idmap_sss.so" ]; then
update-alternatives --remove cifs-idmap-plugin /usr/lib64/cifs-utils/cifs_idmap_sss.so
fi ! u Ǡ g X h 8 ( I l@ ( l j y yp o [ f f h ' X` 7 G g 7 W W W ' l( g _ G h :` K Ap ĥ : \ R ) J o ' U E0 ȿ F Z " ) & # oD 5 o ! S a5
Z C = n * 9
8 j +
N < v W
W } Xc P X AA큤AA큀A큤AAAAAAAA큤AA큤AAA큤AAAAAAA큤A큤AAAA큤A큤AA큤A큤AAA큤A큤A큤AAAAAAAAAAAAAA큤A큤A큤AA큤A큤A큤A큤A큤AAAAAAAAAA g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g `g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g a95890608da8f44f59b5ee4011027392df092f74594e3756d54e69da6311c544 6aca7b020cf85fe4df6d8148d6a046a24080e571c7a90c230b71d3caab1e7f97 559857d0133a380a70bb0899dc5ba8bcc9c43312b0b6296db4f979b9f9422889 4a55daa00faf9fe0d2aa61c17ca85af95e1ffa1d54c7ca8ef247bab598e586b8 c9d576e141ec6c5fb7b65a94a016f5af6fe136978f73343e041857f8aabfdba9 c248ac98b41931d45dba01f7631b92ec57093767dc7f4737f023ca7b4e0b3ca9 b496b0abf47e8b8e0fd810145a2d1bd43f763e8071a825e6dec8c4bf6fd1439c 29b71774f5cc19a882ae0b34b26af1550ad023fdb5edd224c19ab89ab05bad9d c3f57ad7ceeb9e5ff7fc772a3455232284c601e7c00c61e988b3f1cfa303a495 2b478545c99f32bbaac5bd3b9b880b408bd211b8b0ac7d13d9bb54e331785388 02ed6acfc39359062cc990ed1efef9e84b0fd76e942cb4dfe49587f22b5a9663 d86bb66ed6a40907dfb74206039ac35ce9fa7a54048a1c33a0fdf20bd67e5a5b a55f1bc61a93f3b159deec3f913fbc618b0b78a435bce050a9cbed02b7b575ff 9e44841ccdf23b6b84c1aef86a37d08222afc9bd332be6580cf7e914495fdec9 d3e552d5c7054bcb6d1b87dbbf9e6cba8f9ff1af1aed3da3c2718379dc7e01a2 3a9215269899c0118075a3150a2dc37c704668ea40c46ce42f5769d43086fb37 548da7dfa571647ae487edaf525e8073c4b5e62fdff05541eef1735dc7384a18 ee636eaa47cf29054575ec460477831ce4d64a24e8e6206a7d1e82b079fbcf18 831a6f1d8c67d59a81187ce0eeac70d70a1dc210c1a167ed5099677d1fb530ac e7530b51900517fd0463fcc682c62d564898b743aa4ecadeb3c0a78157c365eb 4a3e813e6af29fffed47a1f35a15163fd8968cc4b8712f4afdc839ae2a0a3816 f3d75af12b496958da79018545228f2a9f953396d4cd4e0d01bd8b32928b3f68 11c8e4877824805b60aef1c0d1a660d4e1819c89a525f2301d964cd60323f3a6 ae97935ed6aaeb05f9628e8f66f37aa79610086dada190e091fae437905abc68 f105ad462ae7a818430e42a47ec8b568808bca2e5032254db3a4e904e56274e4 0f44306ea7c526355ce3d2c02c750e5ae3925505bdd4fde00276bebc3ca3b106 d710babaa839f3b5222308f299038560f38b564ba2d967035847e78ca10c6fb1 1fbc01edc97e43ad7eae66b21fd83c53edc0ba1d08662b87e51235d8e3500ddf 9d1a3f0cdd678c47a9dea783f4d90896099b29a44a4500efcbc5aee0dba9ca68 865b5c5aa38e64e709e52b0d53c7c211a70293a35161bcb9472e6d7d499bef41 52e87cb8830bc8a1378bd9bf45e5ba3a516bb03dc1b83d778d3f637e03358e22 a0cc0151cd97987abe93471ec780d9d9662451f0ef8407afd232964f7b398af1 879b06940d82cae30260c50d58e4cb809c3eedeec5760733b8194c446a3b9a9d 0c2a9ec5832bfd37c3b1c7ed01d74a601a4df1fcc7bfe594fa4aef4fd5aa4813 d5d8d056321627121b785076bd217e88cabdb700d24f4d1e6fa57ad516880002 47b72b8c44ce229683ae9460bff33fe66112243ddb6509b1c0de3b4fa2417dd5 acfdc2feb56a0e0e94f90ee9664818c74573c4dfc7de6a1ffd1d37c46d5bc700 2147039fe0d4ba00033f49197ece34b4413054f2c06f10a8b1480eba12bc3bb6 c10df919060e28372ba08ab20e1c07b33f61913679fdcc35ac4fbf079e986527 a7dd82ea9a38bb52f96dc1f7cbcb7f90652e0f5775ef255c571e759e66aafc75 fb4235b92b40c8fdd9782c71b6101a99fc77ef7b7fb684d1ebb79c569aac80ed 6c23fa0330cb2b653b1199f234c1d886e7d61eb35875084664975bc6eebbcbeb f0f70052d0827f0397374e607e5fce615b3c7f52860fbb89c61b79f262052f90 34ec85dbcb69a2a3a107faa36e86c6d08a6c504f5b8ca1b5e8615f1d341a1402 5497cf499d3a9e6327b00ae891070e115c6d78722f8ee0b4f5d9dcc527e494b1 e6b9cd30f9cafbdcbc3a9d54f8724bd41c89b5787fd12eab04354b8b919c1025 9d043ae35e3b33d417a023494aba4247c4ea0c20dfda6f3069679e8c312e9521 26b4a17134f7367b8db7c70b352a19bec69c5d6a34795765a7d44d7b5b5baa9a 4454c13b97396528e916b9630d3b8fd9db4aea7639589849acc9e5dc21a4f0e4 721cb4a27f7783c65efc86f9494327a49db01c4344c7d622778ec21936989ee7 1fa81da23386eb028845f0c67d830ec13256b90503d030278e2d100c53d7de66 9f0b7d6c7f728d9f6b14528ec01b85cee0da1ec30d8baf0e425d4983c1b2758e 5bf268061e7b72d36ca0c7e0a9f416fc5f7dfe259d0b6e80cd7a7023d65fc2cf 0d940329cf1e39953e752767882a0b7af3eb4a04ae67b15f5ead390ba1ef32e6 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903 7506eb6efa014a76140107a7ab8b89474f65814106e7958c8f2fa963260557b2 689115fcd8a9af4e973325bcf680f1b457969d80cef37192610dcabc74359e4c 7b819ba8e6855c9dd77da477a03a8e0ac4d4b7b31431170f4a83ab6db1beb113 dcdb6c6cc685f4bc40a90116f224af57fa857f266bc1c86b44a24da43cfe8e48 208b9dd42a07d5c49eca5547cde411b9f56707497a6de4e9530525493a84bfcd 935ea6cf847651b71d4a2f269ba623d5e8a6851ca67a94d0d284d6dd4a47dd13 de7e2b905d74c6e04773028457c47a3b6867e62e823f5cc4ee54cfa5d51c6f8d 1f0445c660f214a0a0507de6e9d0d3a38682d45fcc7736ba5b5a43a3880cb01c 7713806c9c40f3c734e686210c8eefd0e5fa52d04659e5042ed5f91b77111b81 a42664b5e2ea0e8d80bfe4ad51bd4fd09f35d8d75d1feffab3cf0077908cad10 df6e53ff4ca7a5b8a3c011c098f0a826d70b60a391171ea772fb3f305453a66a d9d3efdf1faa87582d57896ffbf786df778b2ba1ae0e0a4556a82bc76aff63bb 3f344817aeb28170cc9dd5a932a02de587783507daf846adc606ee176c8ffc22 56f48dd09a52de92f19e450e381ef6027396ea7b3a696a9c81e229fae4a35726 5f099ce5f48fdce021e266cd4e795f604f5e46741ad2ad9705671974a9f3ede9 5a41c5ceef2daff58f2d5ebb8417ed36f860854f5f535d8fddba228c00f8590c 242d49c481f37db17745e177107f4c7a000891780d36ca4a115094f704291286 9ebb2674d202f445b81cd2974b88e29e20a75334e204473c1e95255b33e857cd ece029a9160c3506d40e205ef08b27af87c09afdbc22f6df62e56bb9a422f5d4 4becbeb4e83678d0ee100e73852e97a8c80844132e31c9368ece372db9266a8a 0ec61ffb51c6cfa6881c8c5f6c7bc13dedc42de116c73c88c9d9eb811c26b77f 9d45e95ee891e9bb942e5d6851d3798e387ac306a04321776305aaf7732352bc ba7a1efe254c4b85642c33d9c46a31a1ab6afa21645768af5d1a343dae1938e7 dfc5801e185caad9be1acae3dd8553b71d2c6ed30b5c9ea108f9329d02d335ee f13ead6138031bebbd98b0b4cd33818cd2b6a25c3d5c40d6c7de03917589b35c fb023acecffbe14f7789e14c6a0fc10c89f3a551bb6777b0de7ead602837aa90 223032da6e841f14095faa8f037b2273162fa1a5c74ebf8a0d3f2b0197628d00 e54177f64fa99a2db0d45bc422d64aeca632b4a98c21fab38f4671e21dcff8e2 d12260b2683782586e9280bb7a9a3cc7e1fab437b5e93878d36934fa1fa7d1c9 cbd15928faff3b513deea28ad33cdc22d1ba914a6627ba6d1d8d4111958f7e21 f5013a049289ec34b32d048ed081b33f8d362db99fee7daa5de5c1847b2ca046 43c6880325bc87e97986503ab013a21ba22b592528f0f016dd086076677e0671 8cabdb7fc0b58a5bc30ec3a51d52112b0558c6c77cb3599f1bc417abc78fcb4a 7cc9439a0b468d1168cbab53c38cc74e98d04450388b2c5009cfd7f63eefb5d2 2f8f02cfeab7ff87fc0a1a419200f9f4cf72ad7184c23f7c1cfe7a24491ce706 f60c697cc5db348128c903f6d5832015cf0b78c9113df0abc6596eeac001b09d 18583b40d275753ea918c9a2955f2ae589739eed4a3c03c8b33345adc924f857 d2a6f3f35e68efe1143d62bd3e14d8c6ab947578bfdbdc211e11415d7c2f72cd 17f17345776cb640dab7b7cf31c31c0b5d82a9e99923c6027fa82d246a3b5650 f3c975bae10c15d78f5228ee279c34d6035d631d6ccf473377817f18647ff202 fa66db9cf0b07b78a90ef223ff9bbca9633cbf27959bdda25af49daad3ff3800 6dc599f7d8f0253619c0bd4a882f70f6ae717cdc781b6210c19e314a6ae59f0e 577a301714e95f7ed27bb6ef96523db482e3a2142b1f6bf4b203e6c16af9ccb1 0d515aea5beac0f43438c87a0bb545819683e477823770c852ffdb167a4279b3 a1162bd8bc9284bf69483d86d69296c0b990ebfef8cc04251459c310f69cecb5 a6c27521d46a849437cca0c0a7734de4c82b8206cf65d4caf167d1883767d3d1 de09e7e49ef85f0cf010809a18681bed862c9657faae1f1d704b96044ae16309 b663b7a7449a9570badf1420d9bb3579fadafb40afb198e5a53fac580857781e d7be78a1c2b93738e0000bdbccc1e4414ea9c41f78a0115f57975756eea217ce cba51fef828e111dff8987bd59f63403e67a997eabf374a3c00e0e9288bf3e01 5441c041173f416609b5df0700cebeb14c32cfeaf5c5bfbb315022deb4e77300 8c42336c752743dc943717ee0bb52609ce387e254c4d9ac97b2ec99892ae0d1a ab6f34a7d933c245cf59aae2d77bb13b66b9c7b9038e0b98f0076ec0fc4e5ad9 f1b4a7243d470bb03c85b5b7e9843a891c9537e643e83cc006d838db2670bdc7 873b227597fdf14d4a55f1535cb25d84da3912afc4bfea518180b743aa4a3cc1 206c00e42170b5cbb485fcd5a2063fb584a700c0a7860d4d62a5bf39520d5b0a 7f11fb019b45e1f574e9b25026057ac00478f35cf629e2e48a439ae68918c19a 33d925886d1ddfd18a2f19b1d55af0761e8b7e37a7b06f005baabf8c5560ccbc 8d69a4d780b22b248c6571bab9ae1b8f2490216388b963c39250737cd5a40fd7 c7bcea629b7146021247050cffdab9a0c63347c1c27b598d201f03dd4f19549a e032cdc127952732a5fd5e281483d85dfafde169ba1641fcb8ed5ae76e062890 039b27f81fee9b54a31fffef0b110f7fd80500712cd71774eaebda19cd4d05ec a7fb79431dcf12a46e7ca78893d459a38d970438201e71f6e771efb999dac2f7 29e155e31247883e051f825299d77beb5ecb77aceb81a215ec5d8b2781567f4d 46228a66efd9318a018cc4a41110154cbfb83bad44fb8c1ed878ba0d43e64bd1 75d88f29f4102523242378b84b0f45ca96c27ecf57dda9c3055baf671eb28e14 0404a0d2136d29bd456467c4779a730230cf8f9fdae44bef3675101fc6935889 51960e18d62cbb325519bdd8c9c96d7e3a3d225e2eb0cd3ce1c3412386484bd0 99524d3a97d4315e05eff6f40a7cc2d2595dd09f58d802aa06893b68fcba8177 3a3206c95f0aa348711d78133d1c6126affd5813df257e5afa65a70c010b76d8 e0a20fb4c459d37c90568427d4ef85c882e68e251da122d306f1068d3ddbf32e da8c3366ae39a4a78db808efe5adbc78e0ce204f1c99c14b5cf1fffb5a3c9abc 2593dcbd642c61a5a6484f3e5a3faee84a84247cb4e9302072bebe2af74ee966 d4bf4de5823ac24ba6244b6b7b3824776f7f2a27194520e3cca0c986f69451a1 c3803f76b355a2d218741eb772daff11184b7546d170ad2d187355d3d2768e2a 84a55b725c02a9b342da3a72dd3e3af492eae5147443fe399d833724dfe48ff4 378a6b8ad4a2e16a876d1d3d64c12de7e060ed8b97a729fd1e7491f84784cb59 0eb5c135dd18c6220027f095973aee2c6ce5cbd20191d3a92170d7fdd3cefe18 ad6b60d1d821e44bc6effebc155690279eeced5142ca3e9f4a0b516c23ba9610 277424ea2afd793306bda6063552a21344dbd7d851933f1626372d6d766cbd4f aa8acd1087873f3230e91abed5205d8ce90faacedc86ac9cb90e5739842c4ebd fb2eb8b5824b0c0fb939855134cf2e7d6c040a0bfb173f0fcf288c5b4bf6faf2 3d06aece96818a68ff139c0ecaf4c598a4aaa99ad6c77dda732b57575bebeafd 0c22fcf0166c33f447e50f5eb55b4702431fd2eb5998ca3b76640cbfe601aead b900f69a9dcb649f58c8a688e3a9599977abaf945ce7fe6ef759e100cd7fe216 3b8636ec48d27aa8b77780a10fc7cc74aa4cae3c133490196b17c8ebe6240f85 be108fa3b1766000f92e48659deb9d4b450641d0fb8e3c00d6f20b427963c6b8 ../alternatives/cifs-idmap-plugin service @ root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root sssd-2.5.2-150500.10.22.2.src.rpm config(sssd-common) libifp_iface.so()(64bit) libifp_iface_sync.so()(64bit) libnss_sss.so.2()(64bit) libnss_sss.so.2(EXPORTED)(64bit) libsss_autofs.so()(64bit) libsss_autofs.so(EXPORTED)(64bit) libsss_cert.so()(64bit) libsss_child.so()(64bit) libsss_crypt.so()(64bit) libsss_debug.so()(64bit) libsss_files.so()(64bit) libsss_iface.so()(64bit) libsss_iface_sync.so()(64bit) libsss_sbus.so()(64bit) libsss_sbus_sync.so()(64bit) libsss_semanage.so()(64bit) libsss_simple.so()(64bit) libsss_sudo libsss_sudo.so()(64bit) libsss_sudo.so(EXPORTED)(64bit) libsss_util.so()(64bit) sssd-client sssd-common sssd-common(x86-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh /bin/sh /bin/sh /bin/sh config(sssd-common) libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.15)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.25)(64bit) libc.so.6(GLIBC_2.28)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.6)(64bit) libc.so.6(GLIBC_2.7)(64bit) libc.so.6(GLIBC_2.8)(64bit) libc.so.6(GLIBC_2.9)(64bit) libcares.so.2()(64bit) libcrypto.so.1.1()(64bit) libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) libdbus-1.so.3()(64bit) libdbus-1.so.3(LIBDBUS_1_3)(64bit) libdhash.so.1()(64bit) libdhash.so.1(DHASH_0.4.3)(64bit) libdl.so.2()(64bit) libdl.so.2(GLIBC_2.2.5)(64bit) libglib-2.0.so.0()(64bit) libgssapi_krb5.so.2()(64bit) libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit) libini_config.so.5()(64bit) libini_config.so.5(INI_CONFIG_1.1.0)(64bit) libini_config.so.5(INI_CONFIG_1.2.0)(64bit) libini_config.so.5(INI_CONFIG_1.3.0)(64bit) libkeyutils.so.1()(64bit) libkeyutils.so.1(KEYUTILS_0.3)(64bit) libkrb5.so.3()(64bit) libkrb5.so.3(krb5_3_MIT)(64bit) libldb.so.2()(64bit) libldb.so.2(LDB_0.9.10)(64bit) libldb2 libnl-3.so.200()(64bit) libnl-3.so.200(libnl_3)(64bit) libnl-route-3.so.200()(64bit) libnl-route-3.so.200(libnl_3)(64bit) libp11-kit.so.0()(64bit) libp11-kit.so.0(LIBP11_KIT_1.0)(64bit) libpam.so.0()(64bit) libpam.so.0(LIBPAM_1.0)(64bit) libpam.so.0(LIBPAM_EXTENSION_1.0)(64bit) libpam.so.0(LIBPAM_MODUTIL_1.0)(64bit) libpcre2-8.so.0()(64bit) libpopt.so.0()(64bit) libpopt.so.0(LIBPOPT_0)(64bit) libref_array.so.1()(64bit) libref_array.so.1(REF_ARRAY_0.1.1)(64bit) librt.so.1()(64bit) librt.so.1(GLIBC_2.3.3)(64bit) libssl.so.1.1()(64bit) libssl.so.1.1(OPENSSL_1_1_0)(64bit) libsss_cert.so()(64bit) libsss_certmap.so.0()(64bit) libsss_certmap.so.0(SSS_CERTMAP_0.0)(64bit) libsss_certmap.so.0(SSS_CERTMAP_0.2)(64bit) libsss_child.so()(64bit) libsss_crypt.so()(64bit) libsss_debug.so()(64bit) libsss_idmap.so.0()(64bit) libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit) libsss_iface.so()(64bit) libsss_nss_idmap.so.0()(64bit) libsss_nss_idmap.so.0(SSS_NSS_IDMAP_0.0.1)(64bit) libsss_nss_idmap.so.0(SSS_NSS_IDMAP_0.5.0)(64bit) libsss_sbus.so()(64bit) libsss_sbus_sync.so()(64bit) libsss_util.so()(64bit) libsystemd.so.0()(64bit) libsystemd.so.0(LIBSYSTEMD_209)(64bit) libtalloc.so.2()(64bit) libtalloc.so.2(TALLOC_2.0.2)(64bit) libtalloc2 libtdb.so.1()(64bit) libtdb.so.1(TDB_1.2.1)(64bit) libtdb1 libtevent.so.0()(64bit) libtevent.so.0(TEVENT_0.11.0)(64bit) libtevent.so.0(TEVENT_0.9.13)(64bit) libtevent.so.0(TEVENT_0.9.16)(64bit) libtevent.so.0(TEVENT_0.9.9)(64bit) libtevent0 pam-config rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 2.5.2-150500.10.22.2 2.2.1 2.3.1 1.4.3 0.10.2 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 f_f'e@e@eved
c@c1@b/.@b @b~ba@aq@a
@`!@``x*`m`T@_ts@^}^f/^ P@^ [^
@]}@]µ]@]@]@] @\@\\+@\mA@[t[*AZZ @ZH@Z%8Z!D@YYw2X~@X,XX@X7@X@X@XN@XGX`@WWW@W@V&@VqR@VO @V U@U5@UU@U}lT@TTq@T6T`TR(@scabrero@suse.de scabrero@suse.com scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de nopower@suse.com scabrero@suse.de dmulder@suse.com scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de dmulder@suse.com dmulder@suse.com scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de ckowalczyk@suse.com ckowalczyk@suse.com ckowalczyk@suse.com ckowalczyk@suse.com hguo@suse.com hguo@suse.com hguo@suse.com michael@stroeder.com michael@stroeder.com hguo@suse.com michael@stroeder.com jengelh@inai.de michael@stroeder.com kukuk@suse.de luizluca@gmail.com michael@stroeder.com dimstar@opensuse.org jengelh@inai.de michael@stroeder.com michael@stroeder.com jengelh@inai.de hguo@suse.com michael@stroeder.com mpluskal@suse.com jengelh@inai.de jengelh@inai.de michael@stroeder.com jengelh@inai.de jengelh@inai.de hguo@suse.com crrodriguez@opensuse.org michael@stroeder.com hguo@suse.com howard@localhost jengelh@inai.de meissner@suse.com ledest@gmail.com jengelh@inai.de - Use the name from the cached entries when updating them to avoid
capitalization problems; (bsc#1223050); Add patch
0011-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch - Fix possible race evaluating GPO based access policies;
(CVE-2023-3758); (bsc#1223100); Add patch
0010-ad-gpo-use-hash-to-store-intermediate-results.patch - Update shadowLastChanged attribute during LDAP password change;
(bsc#1218537); Add patch
0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch - Decrease sudo responder log level when searching non-existent
entries; (bsc#1216907); Add patch
0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch - Only send cldap-ping to our local domain; (bsc#1217319);
(gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
(gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch - ldap password policy: return failure if there are no grace logins
left; (bsc#1214434); Add patch
0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch - Fix sssd entering failed state under heavy load by adding
watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
Add patch 0001-sssd-watchdog.patch - Fix build with MIT 1.20; Add patch
0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch - Fix sdap_access_host No matching host rule found;
(bsc#1202559); Add patch
0001-Fix-sdap_access_host-No-matching-host-rule-found.patch - Fix shell command injection in sssctl via the logs-fetch and
cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch - Add 'ldap_ignore_unreadable_references' parameter to skip
unreadable objects referenced by 'member' attributte;
(bsc#1190775); (gh#SSSD/sssd#4893); Add patch
0001-ldap-ignore-unreadable-references.patch - Fix 32-bit libraries package. Libraries were moved from sssd to
sssd-common to fix bsc#1182058 and baselibs.conf was not updated
accordingly; (bsc#1196166); - Remove caches only when performing a package downgrade. The sssd
daemon takes care of upgrading the database format when necessary
(bsc#1195552) - Update the private ldb modules installation following libldb2
changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba - Remove libsmbclient-devel BuildRequires in favor of
pkgconfig(smbclient) - Update to version 2.5.2; (jsc#SLE-17763);
* originalADgidNumber attribute in the SSSD cache is now indexed.
* Add new config option fallback_to_nss.
- Changes from version 2.5.1
* auto_private_groups option can be set centrally through ID
range setting in IPA (see ipa idrange commands family). This
feature requires SSSD update on both client and server. This
feature also requires freeipa 4.9.4 and newer.
* Fix getsidbyname issues with IPA users with a user-private-group.
* Default value of ldap_sudo_random_offset changed to 0
(disabled). This makes sure that sudo rules are available as
soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
* Added support for automatic renewal of renewable TGTs that
are stored in KCM ccache. This can be enabled by setting
tgt_renewal = true. See the sssd-kcm man page for more
details. This feature requires MIT Kerberos
krb5-1.19-0.beta2.3 or higher.
* Backround sudo periodic tasks (smart and full refresh) periods are
now extended by a random offset to spread the load on the server in
environments with many clients.
* Completing a sudo full refresh now postpones the smart refresh by
ldap_sudo_smart_refresh_interval value. This ensure that the smart
refresh is not run too soon after a successful full refresh.
* If debug_backtrace_enabled is set to true then on any error all prior
debug messages (to some limit) are printed even if debug_level is set
to low value.
* Besides trusted domains known by the forest root, trusted domains known
by the local domain are used as well.
* New configuration option offline_timeout_random_offset to control random
factor in backend probing interval when SSSD is in offline mode.
* ad_gpo_implicit_deny is now respected even if there are no
applicable GPOs present.
* During the IPA subdomains request a failure in reading a single specific
configuration option is not considered fatal and the request will
continue.
* Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
* Default value of "user" config option was fixed into
accordance with man page, i.e. default is "root".
* pam_sss_gss now support authentication indicators to further
harden the authentication.
- Changes from version 2.4.1
* New PAM module pam_sss_gss for authentication using GSSAPI.
* case_sensitive=Preserving can now be set for trusted domains
with AD and IPA providers.
* krb5_use_subdomain_realm=True can now be used when sub-domain
user principal names have upnSuffixes which are not known in
the parent domain. SSSD will try to send the Kerberos request
directly to a KDC of the sub-domain.
* SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
output, to avoid issues with PID parsing in rsyslog
(BSD-style forwarder) output.
* Added pam_gssapi_check_upn to enforce authentication only
with principal that can be associated with target user.
* Added pam_gssapi_services to list PAM services that can
authenticate using GSSAPI.
- Changes from version 2.4.0
* Session recording can now exclude specific users or groups
when scope is set to all (see exclude_users and
exclude_groups options).
* Active Directory provider now sends CLDAP pings over UDP
protocol to Domain Controllers in parallel to determine site
and forest to speed up server discovery.
- Changes from version 2.3.1
* Domains can be now explicitly enabled or disabled using
enable option in domain section. This can be especially used
in configuration snippets.
* New configuration options memcache_size_passwd,
memcache_size_group, memcache_size_initgroups that can be
used to control memory cache size.
* Fixed several regressions in GPO processing introduced in
sssd-2.3.0
* Fixed regression in PAM responder: failures in cache only
lookups are no longer considered fatal.
* Fixed regression in proxy provider: pwfield=x is now default
value only for sssd-shadowutils target.
- Changes from version 2.3.0
* SSSD can now handle hosts and networks nsswitch databases
(see resolve_provider option).
* By default, authentication request only refresh user's
initgroups if it is expired or there is not active user's
session (see pam_initgroups_scheme option).
* OpenSSL is used as default crypto provider, NSS is deprecated.
* The AD provider now defaults to GSS-SPNEGO SASL mechanism
(see ldap_sasl_mech option).
* The AD provider can now be configured to use only ldaps port
(see ad_use_ldaps option).
* SSSD now accepts host entries from GPO's security filter.
* New debug level (0x10000) added for low level LDB messages
only (see sssd.conf man page).
- Changes from version 2.2.3
* allow_missing_name now treats empty strings the same as
missing names.
* "soft_ocsp" and "soft_crl" options have been added to make
the checks for revoked certificates more flexible if the
system is offline.
* Smart card authentication in polkit is now allowed by default.
* Handling of FreeIPA users and groups containing ‘@’ sign now works.
* Issue when autofs was unable to mount shares was fixed.
* SSSD was unable to hande ldap_uri containing URIs with
different port numbers, which has been rectified.
- Changes from version 2.2.2
* Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
This has been fixed.
* Because of a race condition SSSD could crash during shutdown. The race
condition was fixed.
* Fixed a bug that limited number of external groups fetched by SSSD
to 2000.
* pam_sss now properly creates gnome keyring during login.
* SSSD with KCM could wrongly pick older ccache instead of the latest one
after login. This was fixed.
- Changes from version 2.2.1
* New options were added which allow sssd-kcm to handle bigger data.
* SSSD can now automatically refresh cached user data from subdomains
in IPA/AD trust.
* Fixed issue with SSSD hanging when connecting to non-responsive server
with ldaps://.
* SSSD is now restarted by systemd after crashes.
* Fixed refression when dyndns_update was set to True and
dyndns_refresh_interval was not set or set to 0 then DNS records were
not updated at all.
* Fixed issue when default_domain_suffix was used with files provider
and caused all results from files domain to be fully qualified.
* Fixed issue with sudo rules not being visible on OpenLDAP servers
* Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
* The Kerberos provider can now include more KDC addresses or
host names when writing data for the Kerberos locator plugin.
* The 2FA prompting can now be configured.
* The LDAP authentication provider now allows to use a
different method of changing LDAP passwords using a modify
operation in addition to the default extended operation.
* The "auto_private_groups" configuration option now takes a
new value hybrid.
* A new option "ad_gpo_ignore_unreadable" was added.
* The "cached_auth_timeout" parameter is now inherited by
trusted domains.
* The "ldap_sasl_mech" option now accepts another mechanism
"GSS-SPNEGO" in addition to "GSSAPI".
* The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
* Any provider can now match and map certificates to user identities.
* pam_sss can now be configured to only perform Smart Card
authentication or return an error if this is not possible.
* pam_sss can also prompt the user to insert a Smart Card if,
during an authentication it is not available.
* It is now possible to refresh the KCM configuration without restarting
the whole SSSD deamon
* A new configuration option ad_gpo_implicit_deny was added.
This option (when set to True) can be used to deny access to
users even if there is not applicable GPO.
* The dynamic DNS update can now batch DNS updates to include
all address family updates in a single transaction.
- Changes from version 2.0.0
* The Python API for managing users and groups in local domains
(id_provider=local) was removed completely. The local
provider (id_provider=local) and the command line tools to
manage users and groups in the local domains, such as
sss_useradd is not built anymore.
* The LDAP provider had a special-case branch for evaluating
group memberships with the RFC2307bis schema when group
nesting was explicitly disabled. This codepath is removed.
* The ldap_groups_use_matching_rule_in_chain and
ldap_initgroups_use_matching_rule_in_chain options and the code
that evaluated them was removed.
* The "ldap_sudo_include_regexp" option changed its default
value from true to false. Wildcards in the sudoHost LDAP
attribute are no longer evaluated. This was costly to
evaluate on the LDAP server side and at the same time rarely
used.
* The KCM responder has a new back end to store credential caches
in a local database
* The list of PAM services which are allowed to authenticate
using a Smart Card is now configurable using a new option
pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
mechanism to be able to switch between cifs-utils and sssd;
(bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
+ 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
+ 0002-intg-Do-not-hardcode-nsslibdir.patch
+ 0003-MONITOR-Do-not-use-two-configuration-databases.patch
+ 0004-Strip-whitespaces-in-netgroup-triple.patch
+ 0005-nss-sssd-returns-for-emtpy-home-directories.patch
+ 0006-Rotate-child-log-files.patch
+ 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
+ 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
+ 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
+ 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
+ 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
+ 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
+ 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
+ 0014-util-Remove-the-unused-function-is_email_from_domain.patch
+ 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
+ 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
+ 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
+ 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
+ 0019-winbind-idmap-plugin-support-inferface-version-6.patch
+ 0020-winbind-idmap-plugin-fix-detection.patch
+ 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
+ 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
+ 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
+ 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
+ 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
+ 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
+ 0027-utils-make-N_ELEMENTS-public.patch
+ 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
+ sssd-gpo_host_security_filter-1.16.1.patch
+ 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
+ 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
+ 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
+ 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
+ 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
+ 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
+ 0036-ad_gpo_ndr.c-more-ndr-updates.patch
+ 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
+ 0038-CACHE-Create-timestamp-if-missing.patch
+ 0039-sss_cache-Do-not-fail-for-missing-domains.patch - Fix sss_cache spurious error messages when invoked from shadow-utils;
(bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch - Use /run instead of /var/run for daemon PID files; (bsc#1185185); - Create timestamp attribute in cache objects if missing;
(bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch - Move sssctl command from sssd to sssd-tools package; (bsc#1184289); - Fix a dependency loop by moving internal libraries to sssd-common
package; (bsc#1182058); - Fix build against samba >= 4.12
+ 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
+ 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
+ 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
+ 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl >= 7.62.0
+ 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch - Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch - Update samba secrets after changing machine password; (jsc#SLE-11503);
Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch - Install infopipe dbus service (bsc#1106598) - SSSD GPO host entries are ignored if computer cn does not
match it's samaccountname, add
0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
(jsc#SLE-9298); (bsc#1160688) - SSSD should accept host entries from GPO's security filter, add
sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298) - Fix building with newer samba versions (bsc#1137876)
- Added patches:
* 0027-utils-make-N_ELEMENTS-public.patch
* 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch - Update winbind idmap plugin to support interface version 6
(jsc#SLE-9819)
- Added patches:
* 0019-winbind-idmap-plugin-support-inferface-version-6.patch
* 0020-winbind-idmap-plugin-fix-detection.patch
* 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
* 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
* 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
* 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
* 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
* 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch - Delete linked local user overrides when deleting a user
(bsc#1133168)
- Added patches:
* 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch - Fix domain offline after first boot when resolv.conf is a symlink
(bsc#1136139)
- Added patches:
* 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
* 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
* 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch - Fix login not possible when email address is duplicated in ldap
attributes (bsc#1149597)
- Added patches:
* 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
* 0014-util-Remove-the-unused-function-is_email_from_domain.patch - Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
* 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch - Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
* 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
* 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch - Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
* 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
* 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
* 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch - Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
* 0006-Rotate-child-log-files.patch - Fix fallback_homedir returning '/' for empty home directories
(CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
* Run interactive and change service type to notify (bsc#1120852)
* Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
* 0003-MONITOR-Do-not-use-two-configuration-databases.patch
* 0004-Strip-whitespaces-in-netgroup-triple.patch
* 0005-nss-sssd-returns-for-emtpy-home-directories.patch - Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849) - Introduce patches:
* Create sockets with right permissions:
0001-SUDO-Create-the-socket-with-stricter-permissions.patch
(bsc#1098377, CVE-2018-10852)
* Fix for sssd upstream integration tests
0002-intg-Do-not-hardcode-nsslibdir.patch
(bsc#1098163) - Update to new minor upstream release 1.16.1 (fate#323340):
New Features:
* A new option auto_private_groups was added. If this option is
enabled, SSSD will automatically create user private groups based
on user’s UID number. The GID number is ignored in this case.
* The SSSD smart card integration now supports a special type of PAM
conversation implemented by GDM which allows the user to select
the appropriate smrt card certificate in GDM.
* A new API for accessing user and group information was added.
This API is similar to the tradiional Name Service Switch API, but
allows the consumer to talk to SSSD directly as well as to
fine-tune the query with e.g. how cache should be evaluated.
* The sssctl command line tool gained a new command access-report,
which can generate who can access the client machine. Currently
only generating the report on an IPA client based on HBAC rules
is supported.
* The hostid provider was moved from the IPA specific code to
the generic LDAP code. This allows SSH host keys to be access by
the generic LDAP provider as well. See the ldap_host_* options in
the sssd-ldap manual page for more details.
* Setting the memcache_timeout option to 0 disabled creating
the memory cache files altogether. This can be useful in cases
there is a bug in the memory cache that needs working around. - Updated sssd.spec:
The IPA provider depends on AD provider's PAC executable, hence
introducing the package dependency. (bsc#1021441, bsc#1062124) - Remove package descriptions for the python 2 packages that are
no longer distributed:
* python-ipa_hbac
* python-sss-murmur
* python-sss_nss_idmap
* python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108) - Correct dependency of sss_obfuscate command line program. - In an ongoing effort to reduce dependency on python version 2,
the following python libraries are no longer built. Nevertheless
their python3 counterparts remain in place:
* python-ipa_hbac
* python-sss-murmur
* python-sss_nss_idmap
* python-sssd-config - Update to new upstream release 1.16.0
Security fixes
* This release fixes CVE-2017-12173: Unsanitized input when searching in
local cache database. SSSD stores its cached data in an LDAP like local
database file using libldb. To lookup cached data LDAP search filters
like (objectClass=user)(name=user_name) are used. However, in
sysdb_search_user_by_upn_res(), the input was not sanitized and
allowed to manipulate the search filter for cache lookups. This would
allow a logged in user to discover the password hash of a different user.
New Features
* SSSD now supports session recording configuration through tlog. This
feature enables recording of everything specific users see or type
during their sessions on a text terminal. For more information, see
the sssd-session-recording(5) manual page.
* SSSD can act as a client agent to deliver
Fleet Commander
policies defined on an IPA server. Fleet Commander provides a
configuration management interface that is controlled centrally and
that covers desktop, applications and network configuration.
* Several new systemtap probes
were added into various locations in SSSD code to assist in
troubleshooting and analyzing performance related issues. Please see the
sssd-systemtap(5) manual page for more information.
* A new LDAP provide access control mechanism that allows to restrict
access based on PAM's rhost data field was added. For more details,
please consult the sssd-ldap(5) manual page, in particular the
options ldap_user_authorized_rhost and the rhost value of
ldap_access_filter. - Update to new upstream release 1.15.3 (KCM disabled)
New Features
* In a setup where an IPA domain trusts an Active Directory domain,
it is now possible to define the domain resolution order
(see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
* Design page - Shortnames in trusted domains
* SSSD ships with a new service called KCM. This service acts as a
storage for Kerberos tickets when "libkrb5" is configured to use
"KCM:" in "krb5.conf".
* Design page - KCM server for SSSD
* NOTE: There are several known issues in the "KCM" responder that
will be handled in the next release.
* Support for user and group resolution through the D-Bus interface and
authentication and/or authorization through the PAM interface even
for setups without UIDs or Windows SIDs present on the LDAP directory
side. This enhancement allows SSSD to be used together with apache
modules to provide
identities for applications
* Design page - Support for non-POSIX users and groups
* SSSD ships a new public library called "libsss_certmap" that allows
a flexible and configurable way of mapping a certificate to a user
identity.
* Design page - Matching and Mapping Certificates
* The Kerberos locator plugin can be disabled using an environment variable
"SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
"sssd_krb5_locator_plugin" manual page for mode details.
* The "sssctl" command line tool supports a new command "user-checks"
that enables the administrator to check whether a certain user should be
allowed or denied access to a certain PAM service.
* The "secrets" responder now forwards requests to a proxy Custodia
back end over a secure channel. - Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
krb5-common sub-package. Address bsc#1024836. - Update to new upstream release 1.15.2
* It is now possible to configure certain parameters of a
trusted domain in a configuration file sub-section.
* Several issues related to socket-activating the NSS service,
especially if SSSD was configured to use a non-privileged
userm were fixed. The NSS service now does not change the
ownership of its log files to avoid triggering a name-service
lookup while the NSS service is not running yet.
Additionally, the NSS service is started before any other
service to make sure username resolution works and the other
service can resolve the SSSD user correctly.
* A new option "cache_first" allows the administrator to change
the way multiple domains are searched. When this option is
enabled, SSSD will first try to "pin" the requested name or
ID to a domain by searching the entries that are already
cached and contact the domain that contains the cached entry
first. Previously, SSSD would check the cache and the remote
server for each domain. This option brings performance
benefit for setups that use multiple domains (even
auto-discovered trusted domains), especially for ID lookups
that would previously iterate over all domains. Please note
that this option must be enabled with care as the
administrator must ensure that the ID space of domains does
not overlap.
* The SSSD D-Bus interface gained two new methods:
"FindByNameAndCertificate" and "ListByCertificate". These
methods will be used primarily by IPA and
`mod_lookup_identity
to
correctly match multple users who use the same certificate
for Smart Card login.
* A bug where SSSD did not properly sanitize a username with a
newline character in it was fixed. - Switch *all* URLs after fedorahosted.org retirement - Updated project URL
- Update to new upstream release 1.15.1
* Several issues related to starting the SSSD services on-demand via
socket activation were fixed. In particular, it is no longer possible
to have a service started both by sssd and socket-activated. Another
bug which might have caused the responder to start before SSSD started
and cause issues especially on system startup was fixed.
* A new 'files' provider was added. This provider mirrors the contents
of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
of this new provider is to make it possible to use SSSD's interfaces,
such as the D-Bus interface for local users and enable leveraging the
in-memory fast cache for local users as well, as a replacement for `nscd`.
In future, we intend to extend the D-Bus interface to also provide setting
and retrieving additional custom attributes for the files users.
* SSSD now autogenerates a fallback configuration that enables the
files domain if no SSSD configuration exists. This allows distributions
to enable the 'sssd' service when the SSSD package is installed. Please
note that SSSD must be build with the configuration option
'--enable-files-domain' for this functionality to be enabled.
* Support for public-key authentication with Kerberos (PKINIT) was
added. This support will enable users who authenticate with a Smart Card
to obtain a Kerberos ticket during authentication. - Remove obsolete insserv call - Added /etc/sssd/conf.d/ for configuration snippets - Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
* SSSD now allows the responders to be activated by the systemd service
manager and exit when idle. This means the services line in sssd.conf is
optional and the responders can be started on-demand, simplifying the sssd
configuration. Please note that this change is backwards-compatible and
the responders listed explicitly in sssd.conf's services line are managed
by sssd in the same manner as in previous releases. Please refer to man
sssd.conf(5) for more information
* The sudo provider is no longer disabled for configurations that do not
explicitly include the sudo responder in the services list. In order to
disable the sudo-related back end code that executes the periodic LDAP
queries, set the sudo_provider to none explicitly
* The watchdog signal handler no longer uses signal-unsafe functions. This
bug was causing a deadlock in case the watchdog was about to kill a
stuck process
* A bug that prevented TLS to be set up correctly on systems where libldap
links with GnuTLS was fixed
* The functionality to alter SSSD configuration through the D-Bus interface
provided by the IFP responder was removed. This functionality was not used to
the best of our knowledge, had no tests and prevented the InfoPipe responder
from running as a non-privileged user.
* A bug that prevented statically-linked applications from using libnss_sss
was fixed by removing dependency on -lpthreads from the libnss_sss library
(please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
an example on why linking with -lpthread from an NSS modules is problematic)
* Previously, SSSD did not ignore GPOs that were missing the
gPCFunctionalityVersion attribute and failed the whole GPO
processing. Starting with this version, the GPOs without the
gPCFunctionalityVersion are skipped. - BuildRequire pkgconfig(libsystemd) instead of
pkgconfig(libsystemd-login): the latter has been deprecated since
systemd 209 and finally removed with systemd 230. - Add 0001-krb5-1.15-build-fix.patch to unlock building
against future KRB versions. - Update to new upstream release 1.14.2
* Several more regressions caused by cache refactoring to use qualified
names internally were fixed, including a regression that prevented the
krb5_map_user option from working correctly.
* A regression when logging in with a smart card using the GDM login manager
was fixed
* SSSD now removes the internal timestamp on startup cache when the
persistent cache is removed. This enables admins to follow their existing
workflow of just removing the persistent cache and start from a fresh slate
* Several fixes to the sssd-secrets responder are present in this release
* A bug in the autofs responder that prevented automounter maps from being
returned when sssd_be was offline was fixed
* A similar bug in the NSS responder that prevented netgroups from being
returned when sssd_be was offline was fixed
* Disabling the netlink integration can now be done with a new option
disable_netlink. Previously, the netlink integration could be disabled with
a sssd command line switch, which is being deprecated in this release.
* The internal watchdog no longer kills sssd processes in case time shifts
during sssd runtime
* The fail over code is able to cope with concurrent SRV resolution
requests better in this release
* The proxy provider gained a new option proxy_max_children that allows the
administrator to control the maximum number of child helper processes that
authenticate users with auth_provider=proxy
* The InfoPipe D-Bus responder exports the UUIDs of user and group objects
through a uniqueID property - Update to new upstream release 1.14.1
* The IPA provider now supports logins with enterprise principals (also
known as additional UPN suffixes). This functionality also enabled Active
Directory users from trusted AD domains who use an additional UPN suffix
to log in. Please note that this feature requires a recent IPA server.
* When a user name is overriden in an IPA domain, resolving a group these
users are a member of now returns the overriden user names
* Users can be looked up by and log in with their e-mail address as an
identifier. In order to do so, an attribute that represents the user's
e-mail address is fetched by default. This attribute can by customized
by setting the ldap_user_email configuration option.
* A new ad_enabled_domains option was added. This option lets the
administrator select domains that SSSD should attempt to reach in the
AD forest SSSD is joined to. This option is useful for deployments where
not all domains are reachable on the network level, yet the administrator
needs to access some trusted domains and therefore disabling the subdomains
provider completely is not desirable.
* The sssctl tool has two new commands active-server and servers that
allow the administrator to observe the server that SSSD is bound to and
the servers that SSSD autodiscovered
* SSSD used to fail to start when an attribute name is present in both
the default SSSD attribute map and the custom ldap_user_extra_attrs map
* GPO policy procesing no longer fails if the gPCMachineExtensionNames
attribute only contains whitespaces
* Several commits fix regressions related to switching all user and group
names to fully qualified format, such as running initgroups for a user
who is only a member of a primary group
* Several patches fix regressions caused by splitting the database into
two ldb files, such as when user attributes change without increasing
the modifyTimestamp attribute value
* systemd unit files are now shipped for the sssd-secrets responder,
allowing the responder to be socket-activated. To do so, administrators
should enable the sssd-secrets.socket and sssd-secrets.service systemd
units.
* The sssd binary has a new switch --disable-netlink that lets sssd skip
messages from the kernel's netlink interface.
* A crash when entries with special characters such as '(' were requested
was fixed
* The ldap_rfc_2307_fallback_to_local_users option was broken in the
previous version. This release fixes the functionality. - Update to new upstream release 1.14.0
* The AD provider is now able to look up users from Active
Directory domains by certificate. This change enables logins for
Active Directory users with the help of a smart card.
* The sss_override tool is now able to add certificates as local
overrides in the SSSD cache. Please note that the certificate
overrides are stored in the local cache, so removing the cache
also removes all the certificates!
* Invalid certificates are skipped instead of aborting the whole
operation when logging in with a smart card using SSH.
* This version allows several OCSP-related options such as the OCSP
responder to be configured during smart card authentication.
* SSSD is now able to determine the name of the user who logs in
from the inserted smart card without having to type in the
username. Note that this functionality must be enabled with the
allow_missing_name pam_sss option.
* The sss_cache command line tool is now able to invalidate SUDO
rules with its new -r/-R switches. Note that the sudo rules ar
not refreshed with the sss_cache tool immediately.
* A new command line tool called sssctl was added. This tool
allows to observe the status of SSSD.
* A new option local_negative_timeout was added. This option
allows the admin to specify the time during which lookups for
users that are not handled by SSSD but are present on the
system (typically in /etc/passwd and /etc/group) and prevents
repeated lookups of local users on the remote server during
initgroups operation.
* An ID-mapping plugin for the winbind deamon was added. With
this plugin, it's possible for winbind to use the same
ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
(included upstream) - Enable PAC responder.
PAC is an extension element returned by domain controller, to speed
up resolution of authorisation data such as group memberships. - Update to new upstream release 1.13.4
* The IPA sudo provider was reimplemented. The new version reads the
data from IPA's LDAP tree (as opposed to the compat tree populated by
the slapi-nis plugin that was used previously). The benefit is that
deployments which don't require the compat tree for other purposes,
such as support for non-SSSD clients can disable those autogenerated
LDAP trees to conserve resources that slapi-nis otherwise requires. There
should be no visible changes to the end user.
* SSSD now has the ability to renew the machine credentials (keytabs)
when the ad provider is used. Please note that a recent version of
the adcli (0.8 or newer) package is required for this feature to work.
* The automatic ID mapping feature was improved so that the administrator
is no longer required to manually set the range size in case a RID in
the AD domain is larger than the default range size
* A potential infinite loop in the NFS ID mapping plugin that was
resulting in an excessive memory usage was fixed
* Clients that are pinned to a particular AD site using the ad_site
option no longer communicate with DCs outside that site during service
discovery.
* The IPA identity provider is now able to resolve external
(typically coming from a trusted AD forest) group members during
get-group-information requests. Please note that resolving external
group memberships for AD users during the initgroup requests used to
work even prior to this update. This feature is mostly useful for cases
where an IPA client is using the compat tree to resolve AD trust users.
* The IPA ID views feature now works correctly even for deployments
without a trust relationship. Previously, the subdomains IPA provider
failed to read the views data if no master domain record was created
on the IPA server during trust establishment.
* A race condition in the client libraries between the SSSD closing
the socket as idle and the client application using the socket was
fixed. This bug manifested with a Broken Pipe error message on the
client.
* SSSD is now able to resolve users with the same usernames in different
OUs of an AD domain
* The smartcard authentication now works properly with gnome-screensaver - Enable internal testsuite - Update to new maintenance release 1.13.3
* A bug that prevented user lookups and logins after migration from
winsync to IPA-AD trusts was fixed.
* A bug that prevented the ignore_group_members option from working
correctly in AD provider setups that use a dedicated primary
group (as opposed to a user-private group) was fixed.
* Offline detection and offline login timeouts were improved for AD
users logging in from a domain trusted by an IPA server.
* The AD provider supports setting up autofs_provider=ad . - Update to new upstream release 1.13.2
* Initial support for Smart Card authentication was added.
* The PAM prompting was enhanced so that when Two-Factor
Authentication is used, both factors (password and token) can be
entered separately on separate prompts.
* This release supports authenticating againt a KDC proxy. - Update to new upstream release 1.13.1
* Initial support for Smart Card authentication was added. The
feature can be activated with the new pam_cert_auth option.
* The PAM prompting was enhanced so that when Two-Factor
Authentication is used, both factors (password and token) can
be entered separately on separate prompts. At the same time,
only the long-term password is cached, so offline access would
still work using the long term password.
* A new command line tool sss_override is present in this
release. The tools allows to override attributes on the SSSD
side. It's helpful in environment where e.g. some hosts need to
have a different view of POSIX attributes than others. Please
note that the overrides are stored in the cache as well, so
removing the cache will also remove the overrides.
* Several enhancements to the dynamic DNS update code. Notably,
clients that update multiple interfaces work better with this
release.
* This release supports authenticating againt a KDC proxy
* The fail over code was enhanced so that if a trusted domain is
not reachable, only that domain will be marked as inactive but
the backed would stay in online mode. - Update to new upstream release 1.13
* Support for separate prompts when using two-factor authentication
* Added support for one-way trusts between an IPA and Active
Directory environment. (Depends on IPA 4.2)
* The fast memory cache now also supports the initgroups operation.
* The PAM responder is now capable of caching authentication for
configurable period, which might reduce server load in cases
where accounts authenticate very frequently.
Refer to the "cached_auth_timeout" option in sssd.conf(5).
* The Active Directory provider has changed the default value of
the "ad_gpo_access_control" option from permissive to enforcing.
As a consequence, the GPO access control now affects all clients
that set access_provider to ad. In order to restore the previous
behaviour, set ad_gpo_access_control to permissive or use a
different access_provider type.
* Group Policy objects defined in a different AD domain that the
computer object is defined in are now supported.
* Credential caching and Offline authentication are also available
when using two-factor authentication
* The Python bindings are now built for both Python2 and Python3.
* The LDAP bind timeout, StartTLS timeout and password change
timeout are now configurable using the ldap_opt_timeout option. - Kill unused libsss_sudo-devel solvable. - Obsolete/provide libsss_sudo in sssd main package.
Sudo capability is an integral feature in SSSD and the library
is not supposed to be used separately. - sssd.service: add Before= and Wants=nss-user-lookup.target
correct fix for bsc#926961 - Update to new upstream release 1.12.5
* The background refresh tasks now supports refreshing users and
groups as well. See the "refresh_expired_interval" parameter in
the sssd.conf manpage.
* A new option subdomain_inherit was added.
* When an expired account attempts to log in, a configurable
error message can be displayed with sufficient pam_verbosity
setting. See the "pam_account_expired_message" option.
* OpenLDAP ppolicy can be honored even when an alternate login
method (such as SSH key) is used. See the "ldap_access_order"
option.
* A new option :krb5_map_user" was added, allowing the admin to
map UNIX usernames to Kerberos principals.
* BUG FIXES:
* Fixed AD-specific bugs that resulted in the incorrect set of
groups being displayed after the initgroups operation.
* Fixes related to the IPA ID views feature. Setups using this
should update sssd on both IPA servers and clients.
* The AD provider now handles binary GUIDs correctly.
* A bug that prevented the `ignore_group_members` parameter to be
used with the AD provider was fixed.
* The failover code now reads and honors TTL value for SRV
queries as well.
* Race condition between setting the timeout in the back ends and
reading it in the front end during initgroup operation was
fixed. This bug affected applications that perform the
initgroups(3) operation in multiple processes simultaneously.
* Setups that only want to use the domain SSSD is connected to,
but not the autodiscovered trusted domains by setting
`subdomains_provider=none` now work correctly as long as the
domain SID is set manually in the config file.
* In case only "allow" rules are used, the simple access provider
is now able to skip unresolvable groups.
* The GPO access control code now handles situations where user
and computer objects were in different domains. - Update to new upstream release 1.12.4 (Changelog highlights following)
* This is mostly a bug fixing release with only minor enhancements
visible to the end user.
* Contains many fixes and enhancements related to the ID views
functionality of FreeIPA servers.
* Several fixes related to retrieving AD group membership in an
IPA-AD trust scenario.
* Fixes a bug where the GPO access control previously didn't work
at all if debugging was enabled in smb.conf.
* SSSD can now be pinned to a particular AD site instead of
autodiscovering the site.
* A regression that caused setting the SELinux context for IPA users
to fail, was fixed.
* Fixed a potential crash caused by a double-free error when an SSSD
service was killed by the monitor process. - A minor rpmspec cleanup to get rid of five rpmlint warnings
* Remove mentioning of system-wide dbus configuration file from comments.
* Remove traditional init script.
* Remove compatibility for producing packages on older OpenSUSE releases. - Update to new upstream release 1.12.3
* SSSD now allows the IPA client to move from one ID view to
another after SSSD restart.
* It is possible to apply ID views to IPA domains as well.
Previous SSSD versions only allowed views to be applied to AD
trusted domains.
* Overriding SSH public keys is supported in this release.
* Move semanage related functions to a separate library. - build with PIE - fix bashism in postun script - Update to new upstream release 1.12.2 (bugfix release, bnc#900159)
* Fixed a regression where the IPA provider did not fetch User
Private Groups correctly
* An important bug in the GPO access control which resulted in a
wrong principal being used, was fixed.
* Several new options are available for deployments that need to
restrict a certain PAM service from connecting to a certain SSSD
domain. For more details, see the description of
pam_trusted_users and pam_public_domains options in the
sssd.conf(5) man page and the domains option in the pam_sss(8)
man page.
* When SSSD is acting as an IPA client in setup with trusted AD
domains, it is able to return group members or full group
memberships for users from trusted AD domains.
* Support for the "views" feature of IPA.
- Remove 0001-build-call-AC_BUILD_AUX_DIR-before-anything-else.patch
(merged upstream) /bin/sh /bin/sh /bin/sh /bin/sh libsss_sudo h01-ch2c 1728896028
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ bg ca cs de es eu fi fr hu id it ja nb nl pl pt pt ru sv tr uk zh zh 2.5.2-150500.10.22.2 2.5.2-150500.10.22.2 2.5.2-150500.10.22.2 2.5.2-150500.10.22.2 2.5.2-150500.10.22.2 2.5.2-150500.10.22.2
! " # $ % & ' ( ) * + , - . / 0 1 1 2 1 0 3 3 3 0 4 5 4 6 6 4 0 7 7 8 8 8 8 7 9 0 : ; : < : 0 = > = ? = @ @ A A A A A A A B B B B 0 C C C 0 D D D 0 E E E 0 F G G F H H H H H H H H H H F I I I I 0 J K K J L L L L L L L L L L J M M M M M N O O O P P P Q R R R R R S R T Ucifs-idmap-plugin cifs-utils idmap-plugin sssd pam.d sssd-shadowutils sssd conf.d sssd.conf libnss_sss.so.2 pam_sss.so pam_sss_gss.so sss_ssh_authorizedkeys sss_ssh_knownhostsproxy sssd p11_child sss_signal sssd_autofs sssd_be sssd_check_socket_activated_responders sssd_nss sssd_pam sssd_ssh sssd_sudo sssd-autofs.service sssd-autofs.socket sssd-nss.service sssd-nss.socket sssd-pac.service sssd-pac.socket sssd-pam-priv.socket sssd-pam.service sssd-pam.socket sssd-ssh.service sssd-ssh.socket sssd-sudo.service sssd-sudo.socket sssd.service cifs-utils cifs_idmap_sss.so krb5 plugins authdata sssd_pac_plugin.so libkrb5 sssd_krb5_locator_plugin.so ldb memberof.so libsss_sudo.so sssd conf sssd.conf libifp_iface.so libifp_iface_sync.so libsss_cert.so libsss_child.so libsss_crypt.so libsss_debug.so libsss_files.so libsss_iface.so libsss_iface_sync.so libsss_sbus.so libsss_sbus_sync.so libsss_semanage.so libsss_simple.so libsss_util.so modules libsss_autofs.so sssd_krb5_localauth_plugin.so rcsssd sssd sssd-common COPYING sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo sssd.mo ca man1 man5 sssd-simple.5.gz man8 cs man1 man5 man8 de man1 sss_ssh_knownhostsproxy.1.gz man5 sssd-simple.5.gz sssd-sudo.5.gz man8 es man1 man5 sss-certmap.5.gz sssd-ldap-attributes.5.gz sssd-simple.5.gz sssd.conf.5.gz man8 sssd_krb5_locator_plugin.8.gz fr man1 sss_ssh_knownhostsproxy.1.gz man5 sssd-simple.5.gz man8 ja man1 sss_ssh_knownhostsproxy.1.gz man5 sssd-simple.5.gz man8 sss_ssh_authorizedkeys.1.gz sss_ssh_knownhostsproxy.1.gz sss-certmap.5.gz sssd-files.5.gz sssd-ldap-attributes.5.gz sssd-session-recording.5.gz sssd-simple.5.gz sssd-sudo.5.gz sssd.conf.5.gz pam_sss.8.gz pam_sss_gss.8.gz sssd.8.gz sssd_krb5_locator_plugin.8.gz nl man1 man5 man8 pt man1 man5 man8 ru man1 man5 man8 sv man1 sss_ssh_authorizedkeys.1.gz sss_ssh_knownhostsproxy.1.gz man5 sss-certmap.5.gz sssd-ad.5.gz sssd-files.5.gz sssd-ldap-attributes.5.gz sssd-secrets.5.gz sssd-session-recording.5.gz sssd-simple.5.gz sssd-sudo.5.gz sssd-systemtap.5.gz sssd.conf.5.gz man8 idmap_sss.8.gz pam_sss.8.gz sssd.8.gz sssd_krb5_locator_plugin.8.gz uk man1 sss_ssh_authorizedkeys.1.gz sss_ssh_knownhostsproxy.1.gz man5 sss-certmap.5.gz sssd-ad.5.gz sssd-files.5.gz sssd-ldap-attributes.5.gz sssd-secrets.5.gz sssd-session-recording.5.gz sssd-simple.5.gz sssd-sudo.5.gz sssd-systemtap.5.gz sssd.conf.5.gz man8 idmap_sss.8.gz pam_sss.8.gz pam_sss_gss.8.gz sssd.8.gz sssd_krb5_locator_plugin.8.gz sssd cfg_rules.ini sssd.api.conf sssd.api.d sssd-files.conf sssd-local.conf sssd-simple.conf sss db gpo_cache keytabs mc pipes private pubconf krb5.include.d sssd /etc/alternatives/ /etc/ /etc/cifs-utils/ /etc/logrotate.d/ /etc/pam.d/ /etc/sssd/ /lib64/ /lib64/security/ /usr/bin/ /usr/lib/ /usr/lib/sssd/ /usr/lib/systemd/system/ /usr/lib64/ /usr/lib64/cifs-utils/ /usr/lib64/krb5/ /usr/lib64/krb5/plugins/ /usr/lib64/krb5/plugins/authdata/ /usr/lib64/krb5/plugins/libkrb5/ /usr/lib64/ldb2/modules/ldb/ /usr/lib64/sssd/ /usr/lib64/sssd/conf/ /usr/lib64/sssd/modules/ /usr/sbin/ /usr/share/licenses/ /usr/share/licenses/sssd-common/ /usr/share/locale/bg/LC_MESSAGES/ /usr/share/locale/ca/LC_MESSAGES/ /usr/share/locale/cs/LC_MESSAGES/ /usr/share/locale/de/LC_MESSAGES/ /usr/share/locale/es/LC_MESSAGES/ /usr/share/locale/eu/LC_MESSAGES/ /usr/share/locale/fi/LC_MESSAGES/ /usr/share/locale/fr/LC_MESSAGES/ /usr/share/locale/hu/LC_MESSAGES/ /usr/share/locale/id/LC_MESSAGES/ /usr/share/locale/it/LC_MESSAGES/ /usr/share/locale/ja/LC_MESSAGES/ /usr/share/locale/nb/LC_MESSAGES/ /usr/share/locale/nl/LC_MESSAGES/ /usr/share/locale/pl/LC_MESSAGES/ /usr/share/locale/pt/LC_MESSAGES/ /usr/share/locale/pt_BR/LC_MESSAGES/ /usr/share/locale/ru/LC_MESSAGES/ /usr/share/locale/sv/LC_MESSAGES/ /usr/share/locale/tr/LC_MESSAGES/ /usr/share/locale/uk/LC_MESSAGES/ /usr/share/locale/zh_CN/LC_MESSAGES/ /usr/share/locale/zh_TW/LC_MESSAGES/ /usr/share/man/ /usr/share/man/ca/ /usr/share/man/ca/man5/ /usr/share/man/cs/ /usr/share/man/de/ /usr/share/man/de/man1/ /usr/share/man/de/man5/ /usr/share/man/es/ /usr/share/man/es/man5/ /usr/share/man/es/man8/ /usr/share/man/fr/ /usr/share/man/fr/man1/ /usr/share/man/fr/man5/ /usr/share/man/ja/ /usr/share/man/ja/man1/ /usr/share/man/ja/man5/ /usr/share/man/man1/ /usr/share/man/man5/ /usr/share/man/man8/ /usr/share/man/nl/ /usr/share/man/pt/ /usr/share/man/ru/ /usr/share/man/sv/ /usr/share/man/sv/man1/ /usr/share/man/sv/man5/ /usr/share/man/sv/man8/ /usr/share/man/uk/ /usr/share/man/uk/man1/ /usr/share/man/uk/man5/ /usr/share/man/uk/man8/ /usr/share/ /usr/share/sssd/ /usr/share/sssd/sssd.api.d/ /var/lib/ /var/lib/sss/ /var/lib/sss/pipes/ /var/lib/sss/pubconf/ /var/log/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:35968/SUSE_SLE-15-SP5_Update/1d9182d94e8508f8adeb79f463d8512a-sssd.SUSE_SLE-15-SP5_Update drpm xz 5 x86_64-suse-linux
! " # $ % & ' ( ( ( ) ) ) ( ) ) ( ( ( ( * * + + + + * + + + + + + ) ( ) ) ) ) ) ) ( ) ( ) ( ) ) ) ) ( ) ) ) ) ) ) ) ) ( ) ( ) ) ) ) cannot open `/home/abuild/rpmbuild/BUILDROOT/sssd-2.5.2-150500.10.22.2.x86_64/etc/alternatives/cifs-idmap-plugin' (No such file or directory) directory ASCII text ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d65f4715f88454cf0d2c8ecf843f4392cb0e72eb, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=30ca8a8d2a768c1bbde69f50198217e499c50428, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=46a11b093d18a0926d7bb18cb3d05dc97901c6cc, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=c81d6dc577114e5f5c0da9633b52a7492fc9f294, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=8e356315ab72a367121ffca1b7c0f1de1432e8c5, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=38a31864218e6ed9454d6ddd3e10ab43158060a1, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=56a435eb201ea48a95aff9ee8c73d95f7be874e8, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=4585a84101650f649fe6be9ff51364e5204a08dd, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=12417de03f8e36fc44882926f216b7096941ef2a, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=2aadd9bbf2c6ed36861b0e611979ef94b18ff7ee, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=bac78099f1d3415da6fa810dd5edefbe90a2ba61, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=5f3782fb59a30eb8d07697bf2bddf244f36c85f8, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6b3322bc1071481caab2ad6aa2f3e258b27f0fde, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=054cc2ed4c20b2a17f9251b5a0167fac3e52fc09, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=63c565d99cde329bb5c839d209d6c5f491d1dfa5, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=92b326533754f33d438b1071118df106159ae7a9, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7bb90ce1a00a95f07e5df2338280fdcc2c389840, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1655480fce0f106ffd14748558986ee46984e080, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=414853e06b471b5f172549c2e92fb8000cc42d74, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=555daf323738c459a171e9156ca1ad927f5d58fa, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1ca6ea39427db903ec71ffd4a9336832106e45d1, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2f7033d603078a201293870594bd584d0405a12a, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=47971df1ff5d308fd8a51273e9307f12ccc01c9f, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c68f35a6dfa0b2f96d4677614c72929e381ecaf7, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6239bad4a98b4b5ea14caef440ce3444bb622b75, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b0b77ececb7165b861c6d49c3d32be11467d0fce, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4227fa0fd45bf2486eb9e5a4dbd100f8cd6ab25b, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=56fef8e00d02779e12cdc0ab39c1b0d65741a88b, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5fa46cb89f58667e1d96cc0fd96cf5f53ee96c87, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=21d9b843ff40defe73ffb00f24ee2a1f1bf62ed6, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=19387132077a035d30c0eb34e3d29eba11318dd6, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0cb208f07fa2fdcf96b09bf0ede57d3d4c5052f7, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6bf80e8dd7d161b1dc51605b28bf59b6041cc22f, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=391201db28375fab1111d9c3083d5a36a520808c, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=01b9eda7ad0454defe88145552c38659587f057f, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=5ef7a1aac5e66b713a37500f4a62a7540ccd8f28, for GNU/Linux 3.2.0, stripped troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix) troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)
! - 9 O T l ' / < G S _ k t
#
$
P P R
R R R
R R R R R 2R 1R 0R R
R R R
R R R /R R 0R 1R R
R R R
R R /R R R OR 5R R
R
R R R KR BR NR 4R R OR 5R
R
R R R R KR BR NR 4R R ;R 5R R OR .R R
R R
R R R R R BR 4R AR R NR -R R :R R R
R R BR R RR MR R 5R 'R XR OR
R
R R R R R KR 4R &R QR BR LR ER IR TR NR R 'R R 5R OR R
R R R VR XR R R KR 4R &R @R BR ER IR TR NR R OR 5R R
R R KR BR NR 4R R RR MR R 5R 'R XR DR OR
R
R R R R R CR R 5R R XR R 'R OR
R
R R R R R /R R =R KR 4R &R QR AR @R BR LR ER IR R TR NR R RR MR R >R 5R 'R XR OR
R
R R R R R KR 4R &R QR R 'R R
R R KR &R Cn=7?0cW7A)$EL: >~^Vp($jFb2Q] v`mL.
) (fW`A鱪Mm뱇2* it y|N\V6:Sꋁ8 "Hz& Ƞ,t/ԏ#]&® r \"lb(?Wύ.) D'In[Gi`.K
&+ag &'=5wS+G=ѮWkg \Fm @ZePmTf -
Wk9M/9آkGa;P/[p.5Wf6BF`Fቱ1vm۱--dfmYPYE6hGq[ 5iwoxm73CvcqOB%C4ECw[лS|~)$9)y7-G\
:١杪)F OډvGжZB~c`9{nit7 .U{!mJ{eUc w`q#h6>B
~-FxG ʏ\PJߤ-_-Nu5( /Y sax0B y)tzk&\9DÞ6~]T㤱$9$Zr 7?V[tu~)LdmP4/>eqk"0*g?ɇ''aQ
`JRV b T[AyO{jBp~& 2*ċ4䫬Ԏ%RN-9zr(ZFμ*Hbb; cgIw6`Amʉ:kgGr ,nD
]2\Z^R߳D x@Ouf6vσ Ɍ. _59<.tƠxl!9K?p=A9>ZZ7 uĝ MU'WO4t= -ցQkh֡(lY @IzU4
gA
m˅% =3w#.>ooLREDn/zX 2c[`qƕ>OiG PUzA8: 3 R)K[pˢk7bnұI<,e ~\QЗ E& F6@GvI9qDq d6%uu& Wv.>~a4L,a]=/oo| ?u*kF abaw ̨ M_؛ ^=j> -O|n'6ڐ
$ ˜1pH-ёd}39_q~E lhj RS\EVWU}1`:JVFiԱ6JY ~KݯPi T)w$6UY!xZd8mr{|,S
sc$ѶÝh
9la}sm7^q~AiieP'ˆ
;c«;\rYz
aPqV*WU*Ʈ49J|3z[ <~
XZ,ae^8GxX 6 {3M&ы\ >ա] ntr
śØWښsUtgKK| \ w܋温rGt5%=jZA ^kI߀?YE-U?&aKiP*l. wT3 my_g`&vh84&e{Y-,k§ .& ߍQSCXoky|QA.UPYP \PI{c]A`(SV~ s~URwv4jE{1Lwk T .9ڃf57U {!@x ((%p A̽j81~GbTs/;>I#n iQ$t%w]TCPAw:cA?Uܟة~jI.g6͑{RCk>B+[>.6/ G!]V Ã>B U |b|8߄n=\Ʀ.k"?^Z+\)'3BzuyW
Tn
6, J낅kvৃxj:}oŌ W25U~N
/i)2$r2$yTz
\ɭ4O
DXyX>sg4y,a^V+7 䋊 w=^삢Bn#(j Uĩܟ1c1*8עU;g ͈i֒XJ4gސ
'9*hI]拸98G8
3T꺌E _cp%a
/dLL8,T}H>]@9~b";C_D
7έj,Gg7NӘ˹
Aڭ8/IPwr2#Ϗ<Җ
8HD^(i/(k3xoFHI T㮈}tW1Bw[tC?Hz)p'Ovi DJRk[)1X2>})R-9)CO͠ SQy!Ԉ z RW_Pt4f 1 w])mQ.%RhIWpHY\% 8ꡮ ; J[z'Y7&0Ӑ|}'`iI<c!֥ ,;
9J>(+Y Րqk }z D CcC{<4| ۅͬKz: c}H?Lxu@q\GMC\ѮOXoX $^-l#$KOb2N4h_*Q: m(;k/ӵP$;/ ()ˀi}R:mD'kY&W:2tjV/٠v=\8N]}\dC&L#
!I>3 ػn?MlL(PPE@GS\3= @3\ʉ_`51
NօqzAl QD'ꦚOH b2[T aB\9,ۏ% ~BV@WAyaVe2?c] װL9I0c@M ; QQ{4')w" 6hW26Fq\Anw^䂆?U ~{,Be)7hf oZUohf5vGIKOգ#z;dS6kF>,(n
[U grP!qsԋh7R2y@AAprTΠٗc2=. ]qfS'Ɨ}5Jm&
=Yڍgx.mDy s1rZ6
ůhK;JaB,8]hVN "&S5c7$ 1w Fӽ7m5-p)[ԢY mAv<165
' 6JaE(%b7W@K2|^40' jTyֶ&Om
p<\hte1Ƌ]Y Z}:-N<Bf!}1UQ ʪnuyY )11S_ݕgKhY4 yEběY1 &5чX]OX'06?\$wQIH"y@GO']y7W'WJvqu5ʞ Ţ_zĬl L #~].@o淣SltFlt_l[f>3*X#\g?YI#ճu(buk;GCXbk#̵rJ.5 $DV ٹ~FȒ<ÚD\//9-hLbs Gڎ onʪx< AQNͩ@ZfF njBL}, rFb Kk! ~ d[ifZ^yX#fꈱ1.Vu !Aóx )`SEsM* /ʩoj^ uOb}Qy \cUf٥yrMX0H]ٳ ,@q˻3>í5)'*|~g0jq(H*!H21 N<ḙU F6W=W}s| ZY7 > ,#+]Lz\=TQeЇ}CRMlϋU)%|w B.ugBgUsLm22s##.+&M@ f1ka zR;
/O?^Dy)X&n,ҁ%m)ʸ$H
X- g
*(nײJZ8aFaOH ?%Z7T R*7{U/=:5睴Lծ)G=nLN-Q@ t~$a:C? VM3
N
=+ '2 5{*u<:i#gsm iVhw[M&ƪ*lݲɩ%$c>ºXswʣpMgF|Wq[нD}݈t `{K"PzSAˀk9b>Wܚ;:I5m\gE\ Sɯؒ<.,.p`N_i eƷ
>PKR嬸kZ^,!zcba`Uh盓|3$9v[jRկOJDs!4C?m MwQ -0kt+[9X$佋 f^"X H#I7% G
K#Op-exxd+ a @T+֭m C_Rem ھV
[hH)~(k A L>#{_Hը fy=
Ǯv?arp FH][{lU8DWCp+WJ\sft t:A|Ug0R u<8,C*uOkvgG@xD8Dؘ. OCQ
e a,QWqR3QwjxN {}ٰ]$YϺQ2 = H!@\?iL!*oڭLh!#CeɑkJلAOJ4LQbڃ#Y4l$\1K'Ί~4[CĿU=&j N8 b?p=4&O"0&2Y,7Zj:-?PR*;W+|lw/7_cD_w4F>wZG%Ee &?oJ4GR(T8*o/(*
n2\[: i :$ɩns_݂
xI". RDD yQ.#~/dxyQfHr>DXClx~(3?H>3n0M}JA>Бwׯ'$QcD
,TATTʦ% @xTu- dZ4ro;`hEO+BOHsuzIWWh@p[9_xHB` XO#F~a]lUmX9[6-ʀ' T"} ]T^䮖%O
]dY;: ij+ 1Ƃ o.eYl'0)n[Nt!Kx^<
xX: 5ED5Σ#S<64\3g4 <
}g>'b Lsz;FK킁o22Ns$Ѕ" a)9ibG ۱jdHWY:K03H}ESle ];" ŠFs
lr`ؔO _X):9a7n(1}eƍFN"{B6-ifԟ̲ VNcKP "܍
5[bex;S[[S~LDo'qd8+* /x6@oOcjG>ь.oBZV_kV%
'b?F4x35]*ڧ7) S Q=$sĢqP¥:+[\c(Qker##)mu <n S ͑v@h51?kD !OUk`*w-Ҋ<CDp;ػ
d .;x0/OuZHt74̣Hj I
% i
*d{ d\uY3>p(6d,|3Ơ $_^Rb1Bx.cRW@{;ȍ(QUT8m yQȓdZEܑCϡzH_ l%1QdӜ PR~J7yJlЙlr8K{ |BPG[Ar4=M}EMi{"j16 N.w|]MkL/s_
81~2C 9{<[ T
qgc㗒< %ѿel)}0 k'X@la̛rTaFbdL{)Jq;r5JE >:7w`L9/Ҩ) nVG
^@@> 侵qi * LLJ %T:g~ʝ@ jk/veȀщ~X l,- ([O7A$X|̫/l:'Q,]k̚G2ܔߞ,uX&Ε\G9l!
-͖1덎F1*sgbx;H
?{rvLlt[ctޱPRTul y>_ nb?Q8e xb\(JGu# L2ON .Vo
bҽxvG@ↈ|D[y#wWь _k
nҊRܡd~0D|<
raA:<᪼-M %'ӜVC #C*-ghj;+ڝl#z(Wt {b;kDJq<p|M+pQE6ZnQ?P)c{tHVfQ
#ctř_ ou nz~beN5O%#i+DU*&VI5_{!4
}{_Ibj9n
Ђ`F+KyvRZ+m1"> s[_{hJ{=Y !O6ѻ^ ȽѭPMfӘo6H]TMOhV{ "h%*LyRU@[&ylA |lCO=|Ѝ-.U'f> n=N7+AsGGg )X ]^@)&=P4fy)
zphR-f2{PB\w(cZ3ܐ]2Kh67I-{s+GEw )*
|iA$D{R? g0U E[v.n1eҨKTmq[kG5YZΆI;`P3 PP=O=')(3kaq5d.x@^㰊|Kyt@Mg]mT[9 KW?>u(9`_rv;EYM&W!f9 tͣ .inW_q\T(⬂,,B;ھ[{lw@M>.?қNz`I
Xq XDD#`d@ҩ.4:zY^:#!r\} x1Gsv`JKFkl&\K
wמp ej44Tx1ZToJknf·K*Z40c٦g} # jt%痐u q=LS ]K失{u * pGcXȥ*[. lA?PM40jYSչ"$QO5 '|C~ gmS]gBN̲#МUEM}CWx7vӴI
~U(v r ѯa.(XFw"\1udPO qװ: *wVoX L03'pepCՈTrA&LEh[).Kb^!Y0a)LOf".k#:W5[_m \ C;:07n(z+U^aKT BXڽKwF ?$`Q;/* vݡx6NX5MxkF!Eٻ@H:1+
@ /P9ٰ T> uX:KNyiѓZ |Q=&(ټ5xW5ߥC 8j
j7j'柼&5l ,>x9
(JA{B̦L+` `j;_ +jY[#>k
T;8.Oa'd% um
I(s$/^]i_ hi(c"&0TM(|:gL9v A|С Dsoa)ٸ h 7 MyyAb1KCLY
֭f'
=G2Waת?M[ިE+s~IiY0?@~3Yo+aYtDZfma tcr[G`ڽouZCARr+hNRrq$Wh$mg}=3
mRFM^#EaraǁI(@y;x5~JHm4>n4SAL Y+OFm0%>@@ E@GUzTz>զB[X<}ÁY7'CclN1{Oβ9K xxUɩR73ϪC0|+t$T?5)C#6O^I ӹf +͔A8ӭt(
2v
.d*G8`s@:(4u
; Q |8\=xA >>m?Y7RY̝r˄~nOJ#:'6K罨U\B^ ǀ()=MG `&QA2|j! 87 py#.:ULc,'b[Tܴe0e!$UP$/} AUޣ`?!Ip81"ixpF$nrLG *
1t`Yt~HmAbtk&,^Q533{:s-كwp}eoavbYt )sZ;f=CORp6٭w=]}#IeD.QE ][Ecy_T,
*ݐ ZcD[{
W`ad"0P V;B!
JD]sZ5|Ͽ8Q?Y$_i H#WUk \ܠ -M=YiID`,~8n4S{oUsۮ LdDGd'^2(ۖ
mgO{ 9"`ߏWb-GިC5!v~\>Ӽ *=7z 5aq֓lm u8(Iqx4rd%rdݦRd5#jed^JZ";1]C'͏ yX[Q>fŊ. BQqj^kf.?C a= $XƠy^7sls!J˘=rsW*8rБ pf E#!p{p)1CԻ0j ,
<$v_달1P7$KR[hPoM zhi,G[Y1 e &Fdo;FxFcsW-#Ǐ. 0)[7T-"bє569,({TH6PrnŸLӲa 8 nR΅{'(zҹg^6fb5
853 E\',joPdT]C
WUGjRi-BDI<#g6L_GlםZ xABcYD e,n6ي
+~z9Jа$gjvNYp@ *qZ'T,^Iξ6Dy(?Ǘnѕmgw-`hɁؘ]m+@|lu@T}w'c\o >9n ]t}@M[ԊJԞ:q1,d3`~KNO;Y-.;2fr,|Rؿ 5ΚȲROۚ0p<:`e*ڰUʆBx \$) JXH7fKZk' 4_S" lLAAIerCYsl%ԣ&0
ZHX,';$溯PM~0]/73bmM5g830<;=\~#]T\u߱(Y1]P߯1W' %NS dm).Aut8WΛ9+@1 Kx^A(5K^ʋW/ ؠ2>~-0@ ޯ$1RRpQSQHp@ov0oo\qy`S` JЗ$P 3~ n}]bw Z$=3 ўd"Z:_dqs DȨ@!ض=Hl<;: 7!L? ɶ({KI#rԸݪ>J {m# ^P=|{۞0BBF^ZwZČm ;>7`Ai/~SP-ǟvS\ڕ ۆb l#gBd°ISwtm:}ՠzc7&$;NE?N2\t4o E>w %G{uSg$i?|oF~d^R ig\
E36)ݰ}2_OQpDf2^ 2(hli6:4(c W 6 c3/WWckd( Uv~Շ#\?Et_ b| Ӆ(߿"S/C;gzMB݉um hMg%tL-+Ndf|B2Lt2Tu. V'KHilQEL{jd $XƁҲ
Kߠt*̰8dg G 1;ЦE3Y~մEw)24A
6YOoA3 ؉"|}tq"E7
v'#J^ȓM+~2^ l4o"sqM BWX ;RwKf>Ty.0l L*i3+kV(cR@,c+?ji
zyi$-t͕UXn5!wb
}
<akw
3ƝRF#NfWX?;
_c- ɫPҽ-hhۋylC gk5
K*7a
nO'^a՞g:*URve
<
u
J/q L%mZ
\ǶQȴ>qItA:JFj52(Vp]\bk *%"I-竍 Ky&eDaL{ tqeS ڲ(;^}_mL& 1>O˝) .bGŧ^ $q=M*M5GI3,GͶXu^-Ѧ^G8\A Jvۘw삨X? 4
'ޢ!է0{0k.Shn \Գ
qӉһ7''5v!K1|^ۙWR8&Jv&<7SU.ըѵn 0&LրrToA}Eu:M`fd&A:GX!/`{tIRCaH=b8 :bqNOh8iKkQ\Mb_ Ue b?Dˁme&dNeBbW6 e
fy mfE ߀ *P$c
x)>!g l:GҎWn(8hLwёvQ56X~t:<8'`B50菉),V|
ч)8Δj*.&Ӓ_WlqܯGbp7 d
:@00VQj:u2lu Gk]`d~TdjaEOMVa6w
$y w>둬bYdAX+蹭"s3܋hc!l j]o :g'W{K .Ua M1ӷ'E}G\F3RP|=)nI{6 $cOa46yv@s q0_/K'
|)==@U/ֲB,TĜcO0#93:}h!
7kFCe 2.W:c) %FwAen9:H^
px7Uo;5%@K},KʃDj:8N$tiY3ta:mIW+ބ5K `HۚULH 9Um) BM ?E={W"0Kr ?QaQ"ԽÁQ,x&^&
p 2IIRJ$Y_:>P}s3}\m4ǪFG.&E5O
i#?zb.0!$ ;PTrZsU pV-"bxY=߽
Ŗ5* m[4] $ 9ke1ؤ+̱"8`
h/7zAhԛbkiꊏ:ࢬ xS;w .HZMҍXGg.tYW6?7]"9B~ gsiNRqx&2yO٬ k T7'6+y.Qrrl "Ƚ1xRӺ@r +I3OdΏ*D_NQy 2<8lW]; C\h3$iHrS儩> O"%TZ.@Z~-PP" s&76;TITC
}`A Q f`{b 1z?Җ
Y''q*T\/e
Y!\ 3;8ْ9>ȑm "z+S/ؠS@ ±f N=u'h++ ؉L
.g)e:`Aui <14)]d=ҡןd
l
&, ".nyRVѶhL
+4dWI-+Y0v(ma4;܇-ZSv<>ݐ'Hݝz֒w41LGr@tBRszjV71pmU I(ڴ1qP 6sN n Z3X: 8G?v5$L3 ,b_[k 씌EG5d
JۈsH
fǾވyH1'?}&VL_QD7w0#/kfg(vSs0L'>3QiQO"58k'6hAgWh q94 a[{čN@g.(Af? BCB:/S3B>no jI0ͮOF `M#7Xu 9I < NG vka\OP?3y!, Q,d[wMr`Q{ 6`6h3M`tQNH-aI ш6l0$-V=nOeޓـB (1Y30DD#ǃ) W'hH5f?gbG ge\T^*,`.U8%4G( p(ߠ5B{Vq
U]V@
H>ezl鰑b}о|9]3H0\ZTN@c?dkw2m'/Mf&۰+J/g݄yW⫬oY &suR=ܸü-k6H[%|yb&b0ꃅE1--[g]D߷"y"):;R u ״^]hkbUjˈ&' zG'b< Jar ,Iz>ʲ?.DIkf#ޟRfԓ@OrXR ja8hkѼZj7Y[3yS%T:nPhY[3|hZ@9 9_r|NgS!CV)T֫Sf& k'В`Ơ>`B)O :G Qj]%>ۨ3w/<D@PK Z[Ǘu ~ |sWF] 3m YڴTOOje*1 DtݝNOkSa'Zܛ;}@Ԥ
`5V.$ہBlDW"fBPju$P,28D'1Y1(AHy=%|c.z¿uwk 4
ۅOcG)ϯgy/ H9F/2SA@- (lW#m]$uL BIE\`بgn5%!=U[ϑo3 ai81 Pϕ4LE@ҡ4(cJ?8'{g3>2\z va8˒jPEt#
a HL -#Yo@!\NЯ%>%p,$Aoҏ/?j#ߵ_
ö`U7 #Az3:lw=H}罖 UN>wcrDhv7h:pDsLHo{# gN=~ l ֭&Er&sDK|UA.:,# cb&^ڢMsV&:t.w JT&[vΉ = |@{7 We33/tqw6M{1I UewSSF ƗͼPDMBǯ!݀!(kRE'q ~ b&IȨ)]9w2lA `"+
ۗ:((<8` W|T*PuJ2hT1~Cr8ufk^ZTGTy0?_zvtqZc 4SyU%6| |X#zQ1FB) 2 NZiË+-YFM:-ۍ,4ɷ 5mobP+4l &
*%3_s.
Kbe3SP+G;gAO2GHSA1r4M}MiՒ k^h&'H 2U߹vsalH,r F< ^ e7*
89h7FzGlOw AT"R/ΡxپvQ:^Cpxܿd_|@B @ = Hxqi}7(鲁oKivoV&bZ=a06_HzCVWk4O M] M:&ƞ0XŮ 'k֦ N Fn' wE
{:Mom|B3Gց U&/x 7'd՚=® sTA.9$T9٦o_bkJ \'`E aT"ome߫ߓȚBcbe0#1m`tqw&@FK/uDU-sfJ&ea p>"53Gg.
5 ѳߛi/L.!,ۢjPWm& V ?TX>ߕKz # :
&)O{BGWPJN9RDwKAwŲF]Ƴ& _lpI]pB+4wFKk_rbLz 8U9-gczG~Ělvㅟ8&&h<ߛ;ݳ=s@a?i0F$ +UWBa35;\6,1QȪJt3Ks7eQ0Hv / ATZ֙;ɬ^U%(8 I# O mE/{ .fVnmSCiHmmqה #<~% s/d*J* TjӻK l#1RzS8D + ԍC_!ҫŵ"ʩ~vK=Ls,j1t"yaJk5BY0' lnͪQi4՜>~dlvIABg>:E|An/gyL!})4hh$#boo\Ts
HU^_j^Q{V@Лn*.{T[mSzF9O!X^+`n1\7)tRI`@2mUI{7uoI28Idv,}+!y GIJNdPYx jp82SL &UF8m
_u&َ w
RM plZX ̲+@ӕfцX=wgY%SI{5" 97(fl45EZcU#qt& X epQ`.ri tb]KֈxD p.PJ8+d TTH",j anp
Ƹ'ŷG<sy}0u4;rɡ ьz|C1ݴ?8E(ZʻD; 8nGڅw>x+^dބ "S_ЯI%]y3cW:fhN:%ƨv de"ebHwgq[(ZPRA5a0m=|T:}r#teG*xz
tԅBjp;BC> R71-5ƙP? \p 6B6"hg;E ͨvm"8 ]Hjd8/M-YfB!,#"b V)]$n!|*j=Y_jc0 ʞTLM& y>EP ~`cFBz
0 m,DZ9[u[èW2ր}Óqf'I?͂X2 9WZg(w8m^CD펯 Z:!mR" D u^VNsQI v1ֵiՇMRFm60,OخQZ{16=5 ; d1)=a2x. EWyc( udsSHjgZ[a5Uj PŐZ U.Fġ;"؝^r~34 )~,*|9o˸q@/ FU S$=
ER8(ӚoeT#8wN lnӗGbl"GpoR굻1^u*]",:)F6R>9:5 %avw4sCrqqۄn1P?L=]BŌL6ĥ\_}mC'52ukFpcZ Yd;FAF-3pqE*y!{w<.wRÀ 7?=aՀc%s!;aL|VSdnZ8<ǰՁ'KK .A-ɎKj %^%3ʻc!sCP:ݾoĻwqfmD,
.K [F+ 4݉ޝ+ɯ^3(m,
} o""g+<}Y!N< D_4
7+pSgyU|e 擼>"F: ,ٮnHr?T3+8iȞ#RD p30 +
K B~SI|듄?
<)b
>߲GBw7)vwG3./%?x4*.h'"ʆܛcYµ
K_O>ܡ0^ǚ`~p̀ "JLVF, KK!JUɷСKGDz5s NbE~`l&GnYž>I݈sD
WoR[4Y#)s>Ŗ )#$p`(.u$d8D`t)D˾qi Fch+6ŸC[Me5nێݱDuB-rJM>a>J9%s
C Y>jo!ap:04u3p)nؑS,_
wfOF aytwgILc'\9 _U(^5=l£t=Br,f2H 16ه+yfYMZc|`K^H+0bjwMX6,y05QnYtʡ
mjm>h_[:._jߩS3кnWAWK^ujq͉[FcJ+}ZEsϦ=p=͈z4x)^M5:]|PAT7]`kC!Fl
?훦-Vɓťյw+ <-4Ef}=>p ~\- `;4Vr%;OZU.C
:VPUEKi rn$8i;'W &3!g= 9:}&9^gY}u-lGRkDY5>nqUJ̶[E)*g=G͔ߢt1{} *}Ce Τ,%) XiWܓ͖صcR^ Q?u&X6MoW`Lkl3g D1IH;ڊB`jrxG.%~<)Ujwk73'iSI)QchYU=xUn~>d<ޭp at5Ѧ\ڣb ]˪KMZncm.rLcȚB@hiB< ˼f_"yYǬK$ e6WHvx|=tP]r )VVcQ5ORN;p _H E EuhtӆV^Pq-ܭj# U'+d >=}3X`U
;Ny
k<(l9>"bI魟=oz*Nר [Pi oRuhEDz ö]v)*:S3ja"9{G FJْvoL0}=_*&)jrt_"x@iqo \GƖdgN}.9&+#|5B7z%:Zk2y]UOs4x2p!3lBf ӐJW. hl[ͿBX2'D;aU'N 0~~`n{HsLKA|H[g.F"&S
Bz诜$"f.nq pW cט A/ ڜXT] J8RkRO Ԩ'Sˬi h@U X=/"Øl`!8 Ʉީ<\sQ 8 qM|*uZ^mY]s{V(a;CNi6,wI`r!#y)I K
,a܊ɕp6>q:n7{v'wH[tZ14,,_qh{,کӚwO\C ?*щ(.gU egjZ
ƱSȜ uJ63B9%"ݥ寂yP7%K:jح([ 8ݰ33j.dL
wjAppf ddV :F_,N}H9{^]Grw!q/=G,el ]JJ*WxZ ֟D_0p
&/pJQݮʌ<-O&=|R
xާU7(Wuu*+NynnHnkPؕo -kT/wXl\fz=k-gxz:E RŜĊe֖PW(/lJƚya>t;6&+&rK4#l\qa9g1{xu#0}&O g 'PF ԐVj 4W_&u s}`]7giOph e_K.>SxSRS{[zJ{-mlZ"2-+W_
j.}x7 4 ]Ѕmqc@
ʅh+-^mb #gP|@gae XrݕF.1zsչ&|~ ghvwڵ`烍ZLXNNd|Ɖ byMjlE2uZ^x7$'"W~Ea~*`Ε1qiM
aK'}4Hm@y=>>i8-x5jÂ! PU[N[=Q^3y+&?#q
ң8#{k%ڞumMi aR-CNTITsfF g[jJ$d # uԕמξH ?KB_ {#2J,.*&8:tR?FFk{Uh,n! u0ymc6!V`?yL
dfBrG P5 K;0#G!3 k{3c8zvp wDmRj?}I'ם4yhGC
Cp5^'Jt/IFm82<{* tVDi_:*h-A : [U?!+3T^xQ K qCYAm
ަ%D:gp -IO?8ϴ[ګ%j|phA^X5g ^Rh7 78wHa|,+ӗ[bGY*uԌJl ~"N_=6NźL!%xB p뀒mH0ܨQ(nxYVa/ac&46U Zs[tAa-XɒIR^ [GGnZդ/r X,%~I^3.PqcBn2*c
t-Ì& aJB,h NbLԛ4!mQG0ppnۃϯ OA+ ʝL@{4ٔkT`OV\wkٷ}yzJ'*H zAI_S&DžЋr}Ė
ic 2Ȩ+^FWup&"Ha|%b 8*Ĥ>@<{rq;@m[|Xª
AE{`#O[Mu#)U?EV!3>9Ac~[͔$<.Ę+8-NK{>Y3a7RO%ݘX-\)|3ֱJXVW| Yy79ӟKڑ#=WS\ dDD(/zYKHբ WBn'BJd0Y=fEF-0?YPi, _bQ1}Z/3XY6Z UdEL&O zA8 {[_#QY?f~'?e-O\z|+ >HlG%jAY%cF7jZ
yvKəvJv G AA)
,c6hrMHx}m^B>}d{7sLW9
/ 2xe {fسz9wV oyC ka2`=pr&74\buk}Pő
`%ov(REsGke >X[Xuι,/R?d6i8%rԥ -s^H2/x }N`w}£2͐Cj+Lo V:͊ ^!'%;A TEYxX_WϺJqC_#o 7FB
ASEꥷ8"aO=%u.K6J9$!v yA7]W(pSñݺY=EvU~ow:n' (h҃3MMo-x|l!l t|Sɸ\2/HePdzO_dv@IuQ]%f5O:(LkR M Q'e3Qsg]>oCia "OB2ǯE-сN}[+[{@[6 `ߝޕ}\MXr0K$$o/a* .YWU%4 Ke4hQMz00Ame֒
@ϑya7؎k 0hfY?gWRf|M C2fY;=)le =>j>g CL⫽h7HisTp" p[绲S< _vI5Uy FS٢ 3 %Ծ-B'fEES[Xͅ8J\LQ~%nel]iwZg i27)+D{Z,Qpka)Xs6P4kF%aIJH|n <5 /`LnS.#kGND*
?
qK A:EPJ
}oX8Mhc5@w% ^ئk '3|B#cT){Ff[b s:c2/QP %[xV^x )\,nwOS]0M;O;{]g|4_spσ+3bVp4e1W
H\cdtb\6~0 |TRnM ܟC" {WY/y||7x_x1w8l} X=v8tbIj|\Do=A@Y(Xv[Fs%_%6x
{rhpA.}m`~*(\rQKy칛K=W [4L?1^) _>JQ7-!4j-Ƭ0S!CEc\m̩3v{>/:|; 5oerXW >3)s9C 9<=UH #L
0Ss>ldJX}~ 5SE9"C1Y%"fBe[|.x.n}1dfCו!yK3"8~W衜VyW |W 1 F3>٠a V"]&y'(RI57 EiZGBd
İNzG H? dUXs=c $v~ɮWWBƚ: yN5%y+SF
9htmXٹJ\:F3~hϢg<<
0bD#xزk*
5S WRlLțoz'nފz H[U+->Q_uyon,(',ʕ +_珈K_(vrPڵYBԛ zoN 2 2&0~If ҰI%$4G`x)kEf ݀J#B*Gc- j@q!9Mq|YK$o<Nxv5>:gTokҼ?Vh|E;rah] rw_)ȽT ðO$Zi>CLBdڪ6t{GS&16kD0{Cl*2 Ph|NÛ
䆷Rƣͫ-Qn-Fx@-6UN+ f0"JY"Mz3
R |ol^3{Ԝ2nuU 1>g.8^N N4Rxk/ Ye+;nol4Et S
_ n{B
~'T5ϔl(=OvY%ߑ&zV2@Jٓz;
Z| 7j"U+QwK_Ux h ]C=έGlftUCE~6kؘ2Z*.=˥)5!}-LN7 JBOz)3vɱ(h't郤ka|ʱ:,| "jruK뺿
؛_V?LϏf
~tGGAOgLc?|"PDޏ)Ɂ㺭]'^ R( u-~GD eND'$Md[ɜy,fOT4 fqY+E<Wp[;4`.@ &e6+F}e4d`ntp}iT0ۿܐiЄ+Ŭ/%.CJ
F!8bcց! !6M"匙ݩRr0c"nOg9xp>+/ajDd(3mAh%sӍwݦH e+Z < [I [0:e @
Sٵ&[~O$tԗt7=!_9j^F^;zCnP?qOQ>:~Ĉ)'u4aFl
paB?
DK{{%Ḟ RD2*9:6p,1#.*#
NY6jZkVtJ:%O^XޜeR]>6 ,|-ᔗBTU'}%hP Ե6*Z'ՐH,dTZ( &S!\O-/Eٸtm;݈WtxmI3B^ ~d63(ʟo8-n-:o lv_6G1,{ψ7fH6-$3)@SQT[̲ [ӈ s!t- R3XO !=
^41vL[%l]r_.fꁪkS/&Ez$HM MWдA2z- ȍtTL恙ԡ+'XY7i 1 iԩ4gqVҷ0p%>0^| |# /" +qMYmtY IhÉmβoZ*ӉdE8F1v` 0om,
!{ <BKW#qAp^hw#?8<4&+"X. ^c=+sN^)~ׯ^|#_V^nݿq #s@@}K! .FfV@VI-$ ) ?w+D@>xĻѽzO a`TsTg#
\ZEp?q/7lL M'-' + ∔p{aZ`dJW_d Jh/Mihlh&ύd4A#p?D*".%Zr[Ky`o)n@ 9`%~f *c0v`mLXamfsV+ALCI9&" Kp9YүIٯjdCOx1L֏c0 `tiW:J]GmNt H*眊Ha:7\>~ag&4+50SY^hR>$?*\19ɝ&я|??!dwOX DQӺ1{{K.x_}sCVycbj :pp_"Yx} 60'Tui}n|۔V CK6 [m~ԅ~`n*4,![A" T~)PK`naTIojC K7kHcs,c1Xu \d x&$Q]1)RG//)I[N M2x# >4 r!ލP@T1\eD{o
9V\! <'TC. X+k qvt, _:ٝǖ Fgx"MP Im6<
l`}1C,6nOiroyii]8aJo42V`"O>g kY^5\ %Ό'Xm <.+O ʁޘ cA&w"$EUh>bpR/-"ŋMƆH8#}E|vq82AG {4 k9=oVL开ײAok ԾcSq Kgr3Bi
].E~A n1xyyݲ¦ m6Q>&&_rO Zx/Zgq~= "_ Ԅ@j 2CwFAB{>g}P}R X E>0U("-@dSx>||ls
Ҿ Lqݒߒq v^#kB
aҢV v̿ k QuL<*;x%5:ߍCJ㓣؊J*z o9N'>`MF4{J #\)O(xhX(ݰ_xu]U{lH-};,)*թ?) )N#%3DPh%g*! ]Ƈۅ%2\Ჴ W֩Yխqc
NsA GVHԡ0^ÇxX[f?hePmXpPB~1=+DU[R˔ RW(Ȅq>=ͅ{*o2Bib?~0Q¥5l_Pl#W*"0CEt qe]&CC@ (qIp BdRd<"v),JLdzL`ܩAp}3[TINrJkcgQK'2 6s4"շd ZɘKPz54;n3oPŤ_\%+3~6ohF U]RZ8$Vr H3.Xi&$R/!qZXdk J=g)dHu,Z fVi s c\1{9e: rUy6z6T%XW
LKYie
MCA4DP,s XuXH; /) t"5`ddFa&Dkf!} N2tY3h=UW?ֱފP?R b^a|B |߆RŅ؏RΊ L^+;Xjoߺx)-FɶhQOl .ً-R:Op٤bfUu,QsSiVdҪD M=6 Vǫz2} |_:L=X]AF"&73n0K_^}`Ӟg)$,Y-?ki};N'rFt|1fo s(fyU1^,#Wn>%sqG'gOb!Z2Ҕ* !Tg]0h1M&vc(QRwO>|+K9=ZVCItqYW;|HzsMxP ↻d͎P&zX[ai鏐R.s5،
#BUIoEKgXp* 6iܑ8la'9=hڐJ[E/4Ŧk;bj94v\yH$vWY5
*>W&5X]kJ Vd]OԄQ{ #d/}ӟF7kbϷMzunm/A}>UfM.~N}22dH qb4n^> `$Dovg|ztQlbd"
nM6u\c崇WDi
^Y2@ *W*;
Uځ1[s@LY21F|3[WȣL_Ү5 yXqBd:Z d %[{6 6XPŏ#b#v; QQzUH- K\>j`hB83MPHFܼ8Qa8ȓC#M[!ު\Nm@ eL 3V1C[Rẚd'XAi|7YP:وCۦU>x DppwK-r#Գt F$Aқ\Hr"i XD!1clEt \D.uff 3O0ά26Ǽc~}b͑%x卮RmQg5a"[
ڠ=% q[I k왹scX .C GbA{9` %O,dNDI' }ק@r60Xα_6?O&9DždFd:q {QDڹe#c<~8
V u \-A'iyNz^
5 F #@8|)G~ HM cNc/zWNNdQ.dGv\=%rXhW.ξUwS#Ϙ
Yd;5C8YN?8s^E %p%.kAPl!6֍k1%\`f Ao>
^B5IC#BE{u{ٍAf/ؤ ~ TnE|LwusOa+*N
d i
F lb*=gFiT ?gyVcпN;Coj:R5 e"ڼDm[r8 rkة,7Ҟh {-&Yܴde~ss3k,PDO:;Y`X&^2O|S j_/Yyh=j>\M zc04Vݯj\gmNMHx $jE t(!H}oI z^ x#ǥKV!F- 8I E/ i30ӜV=F}^~=+c(Dly
J$ڪ%g3VSeˀ p bIьЄZ&fp]Kwi:'Ztڰ-
{2_IUIʓm_ڶFֵkؚ8ȦrVuW cJ4!/ȫry@aZګςxv i64ڠ.5)
"KT#{*t^6Չq̝$_2?it)^+Ӄ]~Xy*!lDbRCziܙT]2Zq7 /QbO2Й"WO G+x
K0Abz L%?˿Ұ3X( T&MӁ
qq1T @ {eT1}$S%S6 us84jrI ?ho[0 ] )sw QAbs~DCZ>sDRF
O,h9^
4h3 N)$fGݜ@"_LB=x;X Ф5MsQ2j7 TE46͐d6w8z`KkiEWilA΅T
_uo2_s"!Dh~8 &lA=Kb6ն!>չF
oEd\7@iPe71D+AC(at#mqnyX&al:lUA= /ޖd.R2A/BI$ }ܫ VG $鷚!kU77)Ҁkuif4>5 (YS
WJ ~,u Ȁ Ma N_55߿Ea{Uy|dka;0 %Û@l{sP|ᦳtw !;~33]zjtY!zDwUV$?|6̧t.wkć@tI .zj[ ifTI2~ˍ䈞㇔ چԯE`6 Be)V'|'2:;^q6A6+>W҂QՅ$~v^u!Ŵ)C />`[zl"KM'^TlJ]e ? 4?[Dfw&@\*vЍJQX
w$: AaZNgm@@ZxG]oѭS_ 4`Y!O\gCg("vEW :Pf_1!SC^zfF"63@"v5 s8Yʭa_{1lw?`&'*7Y ]ASJ>40(^
,e;pl9_ ~*DSݷBNwhs%|*lm/q N%@ZXuo*5ۓ ogu-#f^7`',+%E||,q+ ړ.RB4ek DNz(]7˦/Tp7N`BN=ޞjtPZJ lBk(E.(I~[=v#>Y#{/ f{abrkk>°l ,ϻr9xB7-']*ĉkGQP6AgyB lכz_J\TZKA$ʻM<_(1`W֫ eoR0˛lT_Be>$:(+g,,.| u~'\oN{JڿIFnG3uȃ%S6cڇi4FRtky7 ={T)^.Jox бK/Nm\Ek0ٹR f^] Vڤrj<.M%8x8'rP c@ LH4ٽJ
`lٟqO5'kￋPlu^x"nJZ0ݰ{>m78(բA# \;(]:gXE4>[zémETϒ)o Ǽ An%o^ 7 *fdJ,;-Kt?c .i lPptăB߲}5@ŗ>l:a.c84vG)#kygijvѩK w9Y c(Z+AsqOpO$$Wl-O: <>p̊$
^$N9#@{# |?_2gz&AYdf;}8 GߵNU_p8e|Y=.I[qjдrXs/<= e^,.o\T-,R#B!X'#wx!INF ~DbcOڢY_d?Z*6My˭oZϛH'Ҫ߭JF0XM^%]sST8<,쾀~@ 7Ei-d
H"qmx}GgѶ z(Pq^fQ7
i*3nAa%5{4 ZS2LffD81ńbg# \a&2`gg$1w)#E5 e t(oϺ9%c jQf,K# s`J
6awtW!s҄.,0M]>]o@V2JX2 qppˮGPp.Wذs6Xe7xGd23xMxڮt5] 0=?*صU. [!AZw 57| oB eJiǒH_6A6hp Ky`跍tcd24 ֺݏcR跤:9͖6pQ9@Pt1 gc ? Y
FRU)C [3W-hHؔP2<^_P렔tUoiZ
;4^
K|Wu-~:R }a4 Jc <2 /Jr$$AKu>!Nϒ{XfeY2#Sv+R4(>spuNnZtJC $SP H:&d#Nʙmٯ
N:)i DvL&+z/oYя%hOd6$azƘ! {Py a" QTAc?a@m%cڛBQA֡UƦDKToŅyL, z,rʋ^x,m̠L8"-=zvbSODd ZORf&εb?"JŀΖ{y#
y۰ 8A/XO$o½
A;. ALH+O 2}h8hO~k 8We" O%%]s`y-dSqncHrW`Cy YיTWG,?#vcЩ^*zßmJfMHGJ^jG$ZҺg8; c
~l%L9 Os\%g}!&0[4o28
oa81y%& BJZd+\s2%"wȓlԪ1zw1h"kg>@E2 p]/jorJ%fh!l/77{ێ+H;`0z9}khbf*Q qS1
pY'ZiǤfqoK@m6
:[ h\z yaE(S$\X+FUmb;!vƔ0i.:-ۆJv~CAȰ9#d|J`^x> = jde)c4}7~b1t?|wNh-
t
e!`O#O}_{zJlE G9x}0Z~Ik^H J?}"lU-\rv-/WL '!!2[\& |Wt#̈!q3YBUMœ\jEG Md K"$ Rqąaӏ[,0[{ \Bk쌙~Qanҟh}Pсȼ фMCX ([ЪGҔӟd_'ְ f p&Z➣BqQ ,~! -W7ۏCY 禡B%." xP(4/:1/Z0v{%I$gAn~41鑦-3#N,Mxz =ZDp.CݸGXinR/"?@hioLh\U3/dGW:i14h* Z^k+p$f7o],isCBBz0ߧvTo- 8Jqu]0;sq ퟬyi]tTԻ]%dXn!Ħ\~/89\ǩS+Lٳphiv[gdځV> ;dVN>DWȏ!1L\6M
d*[,%ܒ P;Ɗ`.M^xY>7Wl45o\2;纕Jܪo9qپٞ6u)HeuoOf(,S˿DSRy4E:
J h^:p,GcA`k( >2q} *U_A.HO
WUݴ3yU;De;̿{e_G* #`pȚY>ϼ/F'x|'+_yVrGcM !fƐÚRuuW='X-Z.ȭcKԜ Y)t40 ~FO{C[JJ&"
# PPh8LaBOA}{1}xQ!ahVғ&;X d !+`huQO c P\ K{n`RIU *F'⭧MQ.DxKhJ=$(x݉kA 8l6n꣖pMqg**t.H/]F`Bw@{D<¬)E&@
CC_JSZꦰ#+z@{hVe'}1mZ`XϠ|$3$/" gezMRK&xng5) {ìip4' 8
F2%'Oe'XWy)onj`?댔7iH0, +PXlWTQnp|S%;
HqTBj}J !˦)i [bVjAS 0@d#/ٵNď
pO.`/;; ͫ!!\]taCE@}ޒM܈9@M-U?@IT h^CreY\y4hSIFu⌭c'Ԑ5` EEt6/8R (DLIB?d㯙vc s+_8<
GO+3N q >(@ڦ";nF?~' \ ڻqg; :BD=/:.qc*eᒃյՃ_m7 :0#ع
90zIS[) WF+ ⎅K2?Ѥ`@ FRl*dM-sϢѫ,
maGKj`-;-2qzybzƂ ]ڭ
w Y]o6>XlHkwۓfND~yI݁3qy4l)]an70mx:; WFv!=S r
w %U ÐHN<L]x#}P4xUxMU?猈T;-N l7-
,oq,'DgQ9ղ:^Fezs?J Cη\9>>GWPKu#r|8# _yz@|$Z":H19!0& F#YG;Dth+>ݫ b{hOJkO, r#}^^8e}l/&h
HlVĆ^,[ [>+sdK\֮yJ8 J 7ڎ DG7_7b[HAR&vNH>*LuAcv2IWRCU>^
^\:GDF"?kwa3ї",גԄ>nQZ~4ʤgvVdX
vC^V|cIEy~ [ ^/9r1rE 8nJ%
kpb3,όům:&-] Jua <2 ꨋv
7) B'i Um2Xj
LLʖSb1\ *xm
;}dT.p/Ҍ،w|5mĐv̓rVwAj MT;pj5@ԹpGnNr*θrqhraFɝ_ umRfmDHP= )R.`hx%IGD%9|PP$-a9VBO(z:C _M U|J
W;rA\wץ.'|dP* А|S@ _}e|0)6Z h=£dR!%_
C^qD4&lr \lL[&fH `UX 8,ox + +h/@ 7P!$t{mNP[ikX ^?ҸS~M.(Fo6 iq_ t#lLƧvʥvOV
o`x60+Y } uY*کC K~5vKj^\SV\Cqh$CEmnoΨc t]t^'TDEB"`-vKoqDl谎l1ci{g;9ƈ\V5
1ѳdST6Q6'2Vq4Yk/B \P1O ̭ׅP ~rN q ,:ǃTωM@*xnbF}pX
QK^Ù p@ :+IgH YT +" >JI BWk02oQCTb9Yʧ>TEWp&*_I5Ҏ &?b?+ ͻ&HH:1cu>"e T/
sͯS+ 6#[nNE;YP f5Ӈ "#P 4*L4AutvJb&J0=\ObHJv@7 Pc\rT$OTM_abN/I:v'Ar3H@NFP8-ҿ_{yY-;5qjaXkA݆-.\$ދ:{Jd (^⿅1U;{،8F&e
%R ˈ%֓J)Rʣ5)Xe7h 'fڷG(zbmҝE $G. qJ^ #>8!m *i W@ ҃1QxnRGx tuiH$ :˻\AcqqH *{3ΏrD$^MO3jם*ȷB ei\KY @ 9*FPth$X` dłp/PxpVmE[F7#K.&y`Xl=П
jNF%6}>ii?B9F- OYon7kD9GQQdS>݅EO=6Ƽ2๖e[ XW:I|{(p0
8'|sŔ@x&6G ɐ:mYq}ǿMJxu~zd¼oŔUf7-jʌ1`i[k1<
d^F6x 5%bT=cs0ک g`IJMHS 4 B&Ζ4/j̯ yf4* $7i|BmWć|V[HJၯـ^.by!W7ijؕ/6c]eڕxYGN#1ܶXgXJpIj LUDW؉ecR]V.SwbIޗ R%31ԭjn&k
ˆ+L:hw@u3?ŝ%H'IF\ń3 sD7ݙ`Ù:%h(5)$(Ch(}!5N(c%Ӟ6'2C |8,Hl?JRӊ)ىU? yLMGME"cF::z j O7
ҙ3G' u!qJ<RIq# Xp˫;0G nA&m]k0Qh\҃1FY{5$ _|%
06DMDq9&vJk Oy*<\L1wi\Ɩ3D)0՟ tN!YY !E-.{X<7 = yCD )3:k9aȴrOdI 0dyA0j
KF#{Մб+XrG<.(lr
]N$ M/#I6 d 'zk @~]k2U_n|WmbA|sC'' ޕt6@|*܄o",xGF10,N4L6
,FRíhS"8,cqc|q@ejI rEG% -a2#va::j2E }}0>Y b X$˴7{' NIrXv+$,;1@ '*T1O:iX(QшpHH Ai*(!B~ y -δdUIpj lꌢEdP5`ľ2V3Qť+qL
_WrtN5,L2V' IBBU :+Mٔ*c,%f)\uB >DHK1Z3(QXFP©Vv$AN*yX<^&)D>g#yxur@ {j~ - hJj9সX66:fK dm( Mhi8 = O/*Ebps` 30 r}[ ڑߢ tF @\h 0pWPVHS{ʣCt x
8ʨa* )DXR3S RD F5 EE"IR@B &px-x1aiX S$f2tZ&]~֍'' wcX H>^>iE]ElbH|.qC㘱zY/6j4L̦)QԔ iMqTX8keFAvnt_
,wq jYeuNha~vB`~b2D
Rbp$Ñf9353:ٚe-*ekUDff-櫸:^O8#1 V}XP/)L vHn-T)g͊ɾG-Jn jg*A Ig*0" VQ4N&P2c`젼SLT5 ZucsPA0TէO-Ho^a %il`92]H.2Sk/urśɠ.y ڸ;1K95)h.A{! KE>1@oCM, )ZPqąO{yt@Z::zFo!T[ 8^ A tT7ɿsc{
XE.FpO>T9\ޭ DP,IH 8Ql'Z#Yzͧ{:+c{ ǰy9< EguWl/z-r_An? nܨ5!n9B0lGnYzA)k/mA~U l0+ C`AL:ȟ+k RAOU* .գ b[7W*Jqiǃn: ˩ӱ[ɞZ< YzR]p]ɚF.^e$ E-JURɦ% .VA҅!i,b%h"
APn)44snis4呅TqUVPYCgYM^`2RA )H* @Yez.Jvp$ir7 Oa021{K,ʓ"?-QI>~A9,].!Z c|0rY/o`T'B+ Y71@C UB"f|,C 0a@f"%0 Jv hs:3R5o Ray.6 (<
Hzٰ? S .vuEIerÐ =džJKlN-G&
':{-"F:dWo=֠
YjɿP`b&
G8~G&90hVG6 e XSb6(a{ gu7SYOP}-cLB'- g䆵 9`UF" F
ӊOƤ@b1t
ygu v beֺ-,N Јh3C7%(fX-Zt+ t:7B7/}^ͪqF-_Q?l V0~i ՓT^X QP%dq VCM eӔ0c3Ga'A%a*,=24(UQ9<B]B3TR҂haVЁ+4٣;MZc6hJL1P
N!E';^;3M} kRuN
kb"ገ$ Ȃz1x@}}WtиԵA! 6^ J, Rytb/4B1 CS h / /PxЯj:}QT$T>- TvQ T$ zO/ n N
nO"y ^VPyz11R]\\WQlxp
S]@/b *T,L
CLAuUI@UP*ej %Rj1% `X mT? 2D I
i9J37Z @!qW0=lD@W8"/I𧘜ǣ\z q4wOrF(n QG~wcU2wcpP8 V"hu
< H{ga3/4*$s$BbLáDҹ@ $ĈtztU. CQ +~lG-cNAm`@&*@O=;ೱɄ
8ˡ~\6\¦ vW~&TC*3bm+5,]wchˈh>ER; 4[GА
D7QAw0*Os)0CM ҢF,O'h!JGܙ?Y;_!ziX ;NنN{,K^pBE5(SnF YeȩIO&X2wG
Y ŵ *, _Ф?/ ?
6|:ҋ PCv@B E_nw{yWq}gVsK]lD 8?#pk}1܈!Llam C<5G YT Jz Bͫ. J3!)H@Ȉ- -QEi7Veee_YVK_G }̬ib@ eS\d 2hW0_V/5@ gB@BC1YP70'@|4ID^EI;p[cVDX(|Ni , +3:.hXEQ@oir*u1|x?r@<ރS 3Q4P}\GŁ'Aqܷ9asDE,d*X C D 2 Z&Y&XW^b$ A%'*# DhPb fGH_>k`ＪntLٴЉ+|J 2$^
l0]Xp+\jȚH#ӨlQe4PqZ z s1keCdkqFL
lhXooi #~h30+W8Sk3Ai&R}]Fk \ (F`dPRG#>*48 lV܌Zltw6NKͲsQKUzSVx Yȵp,^2j=ITe-VY{ Sy̹MWW06v\{lw.-ƖEZ`DcD_ 8Xr7k
` tw87yZ2z[V7<<7Ak`]Lz.
Az+/ 6E@;ԋ E yBZWjbz0hIAF"
L!6;x puvbt`LT:xOi:HBrnm(H>ü}ʬ_料lUBaTw :P
FgQ 1pԓj ySZ0 2_
' q〱i',4ѷ]fgru jՇˉۯg2ͤP~ 9s3֩4~c cMoqG5t龓Vs߁]ѵ9'qC=Xa_ij?G}x @O~睟 6[ows)~`?qRm^X
#Yz/!*o̪DBo8`̈Aa_HzﾲTuPπfK@;>{ α K +7s}F\aqf|;h֡ C|%k]ݝ`
E5FLV7 SmE1͛5TV_)vӫWt,ˬ)
c
Dly7N" 0F
.+v h Vcm!Z6t` 07 &O@X[ yC
}ReAՋEdd7rL^OUьg "+08?4FFP
0/`}NX_ }Mfi@_9yL@DQw0aU6^V*^.8t;3;쓭=כ<0` d?_d fUFP+P/OnU:s^ Oy/ ( Xi/\!I;*s;poZ3Ќ @aX5
4ޗd
(N
?te V,}m* @L 6t(U0R1]XUV@KbH
'l^6I§/<j@.AT 1+n/ziT4>d,Po8_{C9Ě ]dۙJɖ
_'ISq&f7-NƯUW2Wp!OnqZ{ȣ9?v
=}Q5jspZ!d)+%Ú^X $HQ+&8 Qde +s*\aQ왘t`$s9:b@fO(a]"" \42
`}Á+8$@] Y/#
g}
naP_PK:|npGpJT@),A ̮Dm-Ҹ?&]\hE$>* !noO /mm
%ET@ #!O'@8AN"z""d* EQ0G=";isZTlV 0Ct -tx 'Ip!S ]
KQ /yl_3CoWN'^d4dљ.Fꡘ-@D+D,(̚3j0b> E7ƼQ2' PQ ثDT)$}E iE$r@ @[@w7ClnLi`^Ԧٙ^ VFH~)h(*
Hh`=e1>l8xi+^QR{SRG O(9ت <1+E$y>% hi v́ + bM~ʵp.X@#Z.헮pD6ufŵוW^갌
P@JPEI$D(Jŭo|FQR#"0s*f %_n+_gX_*}][D H` WWpv_oEyD̒ N:L.jRQDG.=ڤpAXvkqayG8x >+sד_V(LbP([_"! u1桕985~~P
PA1w7jNny[0Yf*އKz^Qy[HT`EQ vumfv Q hC:"*oH<.J
j'Qgu~:Cq@ȢЕmn*B[xゖ
(p-9k.|&ą7phf4b Rq01}*.j&HQ Xi Y@:F9 0\ȏC$ ?,MS}zcM04 WA3` |Eq3܁Dv?(k{
g^v9
' ĒP"$'VP {w] '7wrhsq/8o3m{ ƥ 0 PEcȥ!B {D$cĦZO?ZB7uءoD$3ӮU 2]gI @D䀃I zRP[/:o3SWk၁ q&.TS{17OϊDGITU@qD ЋLف>\ e/~i~5
VH)r>~@JNz &
ElZT.hÍ3ro1ïN _Q:voH8E5,(?gmtÇ%.L1ZC!)uQ~yVů1 LJs B9}ҀA`\=^͆i@>$8,JoIS7;9
rg%+(_[{%zt% 2 ENCy1z律_7W}:æE3A CP.T(@>C`dQ Rc^t3\Cnu%M doPVT!62Ҟ̮ .!IxK! 2ehiHE WEyQ̅L/J^ j|? ;ܵ_ [ 040ʊEg6bDE^d 'my.Rh`y4!
,+y*Ł(ÞʱY /u<
96{ݺ5QJ$Ý'(Gg [} U;?T;
uk @;4::!3A( L9i-僙9j R(izU퐌|z&o« DT!O=,W)/3F]H'}8{
IFbE7u 23b!뿀(`KG5J+"zP\y ?>}7 62 l63o-? 0!۽/_@ؠEV Pan`' '̀V+[JPzދ=_w|柯^ SVHM:LzS9TyOiB՟\#*U4I=-Yg
.V[HL?z w" J"0"@ (4`w=WuX Jr*%|Do=X!/& B0Ltſ`ߠGEY;.=|1Dv͗)t K t)mbB
?7 f).jC[o}o Ê 3St_F8O X1"!"bq@$S/E51s&
eh&F~oo3ys&T~}m}8 > UV.zͣ;clFsx
i
]o[pưl ,]CJo?gWwtG0 isPt" 4-So-pH XLۄL%1a3*v |Gr .((odY҉c=v:2
= =TP`'s}|C$ "l":H* pdC
6Z" ϋxR-\J .%b0p{7$ IGptK#b %JhpusnKZ b A#M|:`|]\4c ^f}4c'扒p{o{Ndžvݿo#Қ^ZT >bh6G6-54@8
㝛OCPw=Bm\)D9
ρ{-Zt5>?
yȂ{o'%{h1*'fA}[Aiy^˭$QA=l2it }?fUA$' q!M>Ul;Ƿlj4v**&b㾁L+/U=m
I&9 ?RM U#wȅ EwoŇ[.2# d 2IDA ,b3;eg|kvkl(ggb|ŤȨG ` -|Owl!*=J Q`E~ǛL͟WofH|4}\JɄ7` U jQez3DBJ}xFA4&w?6OxK" Δv3ѴZ!:r9eFNaFtYap`TPHCzc[yi'xAGq>1r? ʿB S 'Ӧb!A gEcg,¨ooԿYa"Q@iDqV`pT(}6vѤ%HBb ג׳b׀[4*L1d3x.v q} X7 Ʉ%UUA,tpG5#zq'6GCE%yJv#W] É Pcଡ଼x:?zOpԛ9_yoIޭ8^x>ٜ{}Ѱ($xJ v7s?rj+Tc'Чm f
Í|18 &i0>'7[ 7sc!먊|8.߶qwK8 Uc> ;XNȍ'7~XR 7S>Q=3wH =P8]ATYdYQ
~J
dBT 7̀Ik>f06
(k! kƬM[QN^(/4/čA[X/Q6@$\PX>"-Q(x\1k%32ĐȬ+ PBk:M2,PkU]6V 9sF#,`7Y`Z2g
haD!1'a qP
fdd ט& ʧڠic(SHFPZթ'f! gxeQkiC0"aCDPq+%M\Ɩ='gV BT=6+ BM_N5hE/f5(?@>P`)#++ U^Q 0
` 4z~YMEs LۓCvٕ4PXO*Ě--{VPE{!}*A@~ TԈC FDDH2{zm;pNjouλߟ ] >ӳ< &qGgve蓐˻_* >c>FLa>V\I(2Pe~S}wqZ_;Xb.H'* k*+ii모++렀(C {Hw,:7|%҅kלmaCMAs>b~ji;( zDd)/VN
f#X8}OE~p!g2" zA$ɕ%E%M
nB/!p>
uqZC?t +XuN-l&4k-t9 ck_C4{|N.Ϗ+ oGÎd@
g࢙
{ ' ɉMOGNMKOЉ!@"#0 I(brkA9"y۟V{!Bjo'zW"H6796'&DFõvEe>.6/cVE#*s,3;=|Xr gl p`yg)c c\=*jz( _Fd@X)Q-> pE "~*b g1XN:!SkM w,MRknЄhNJ{
`eYLXofwݽ&|IA@r"!tL蹳A:. 0Nl9_(X
Q 'MLv`4ӓ3δTW*:**')**9 (sw2 "s &w k+ =2J;-Yn({z(X~ pt.˰ 7ձ&qn)j43 9
UР#D|9m%'Pd h!ƊH+?.ͩԫrXW,6[ s:ka:Yz/Yu.JPӍn>&mza˛2be (ex\jdEQY Y?~ M`:4 PA'o9!
Z(O
>% .A 3֣ؔG_; Sq# }(Db}C3" j@# 1LnY|}E fr|V/BdlYd e$r8Ux֧"pr&H:,PŮ)f4$e`į!6%KLge qpzDc8v'2rSR0QsOO͵FNU1 r1] L(^1P &aFev`xDVf+#HPȁy"& ?1[Qh\:K*@04 /֝ɔE*B5֤N8`b+PR'RǑW [%_0#O+4^?p>vb /~4Ka {^0@rOێd ~ _;j@45V ⺣),GQx)_m(~{?>7IeKT9 ʝ%WI`A ݘ*K;s"P 0 j
Uv
ֻ"}k%?]u;CKxeNR6 6ZݭvV,I4j %""ל V/߆'h7˕ ʘ6:x!"T3`vƐV_97 ;Jլ `|jKnt!Y }ژP юJE<{xf6~>gJd7"m)5 d^Y}L̆\WHӜ0A/WۈXpvF.7y;VNAql/eFf5uFWO. ?#P(`)oUv,6͵`pxL
tA8QCwIO56jոz#FUcDdZ 㘧Se~a+IؙǘbqG#gD2C {rY +%
!dbP=|]EoX^^LfC#`10H0Y #}{wiycW v:ﺮ{m=Ԡ L#@31% RZw O7aOP1M M<|(3^DU)u0ȵU_g:?+;?L 2یtF .bq82TѠiLnEe/sXW+ͻ٬ܾo3f
|G*zJS0%{odccP1 `)(,=CPn q$pOhju hsLQ~`5"ctE={ 0M'2IOx9 Q.a(1a xWpm iN6E=K 2"}Ub"H(*EX,X
dBXPuZ;hz T^åk O˲&neVO3ou B;! #̥ܧnɻ!?
ˁMU/vvۙ>uffX$ݜlyǫ;M-l[.6Vj?XDWUXve}.ٵvejy.*(%1"3ok=i^{
+ir7o< vZ>}7U8&otsBGp"~B@0P*e8}Wa@P\J*.ҟ3/G
,ez| {>Ԓ4*@;c E?w{JB=hr="He}߫Wb[ 2~(XH3 Z
dU861[Ɏ=61<}w?OѽN͕EkO!/ۍ'|C9WUAY$&:&W+Gl"Sc_o~iFd^ާxܧBT9*$ ? Eħ 1uddاd;f I_yo| C*,*BVC!7}f7 <ڶjAsDCHhK v -*zR"c ,Թ*`ԩQu3~@9"s1QS>W#rOEn[+sH[ Aʬ8A0c(acosRXǠK kU9%X%d ́~ET}? s;?"*X v6 iyߠivq́j WDef\g>r%bm_ 'ZZm!TĨ)_yX h0˯_F5I}G[1ֈvqknIV٪ːD:5`
-5=kup
vYi+Jqk*
LU*ўKHl::hmsHP>l 1\nВM
(Gj)6)b+4 )ժz*eڑƅ/ o=,p[D&;7SJE W#MmBe)i ]؎Fkh-8s,mWfLr ,PяdϜaW|9Grʷ;@ 5M&@Y=XujG ۏʁy,1 xYzꛢ Д!> ѩ8GKWa,mlLE]b.Pf` f@O?*lRbrr?vRfheuu0a%MF9Ann۷heD @, we18l6n8=JAuw `Ȼ? 1_;2NV9oȈLs_c7Xy"Ň !` {(ڏD@:A^B?~C#23fE Ș^`P*1{ bS^EMF°>c2mVR{@yY*< `1/TO}ܾ0F m_EL+j{ncA]5듶ѼG'z)
_z&)槻?y$|(XNhO0S ڕ7
v{-ftV9) ޓAպIithx1 dAȤL 0 5 < GN>z?y4? Xr|>Ҏ.d?\J.ngMoϔ @yksy̙ A|]#IM2۠$hih'hi&fiiiiiic Lc.k2`s0{)v̾ͤ"u)( o#nfӁ`Rę'9ԐBIV!AmA+2 NI" 窗p\& k!@/c5-- - J
Z:ZJZ:H ;dnҐ#x!PTxB&\!Q[~}kr>ǬW"B, $ I(wwA4)9x/]l5
kAb
Vb[X (C196Sؘ|_Suu6u
"! A2 id ɑd^,.:YlWa?DAF 87i@" T GjsJrQP6M =Ǧz^{{P T@+
cA;+kΉt ܌C(c ? s~w/zXĽ+g/<E䩐!2V=9[';+&èd
VAgVaoedXр Tfa%b;N#S
{)A72-V
J\ps_ I#:&v|5G1j뚲f>Z(12s9Q3@BB_e5.
nQv!FD ꉭD'ph m16ěxI'æ*Z) S}+G@}2KO!Q0
h sMv؛_$`رW(F}]G7N.:0du;o*?zos4qПM !'_r(N[4: ҫ*TR {充N~uomzz_[}wjk ]*Qe4_ՏֺD
-n~J~Hh /- l77\Ys,Y *:Yx9D$h$7\-}r0i33@P72&/2ܮC# ܤ~[1=2"&A .2A'0>' {b'
VÄs/Tȋ<ٺL7^z i,މ88?Bh]6 o :蕅fm(NmN@ P`. C˽Rp 8i;0!ê%F" `711~oW^hSΛ`+kl p5uQV6V6X8
0@ ^:s\j {t ҆/&POKs
;":BV3Nݟ~I(FΖXoB6f b7!fl& *n [εψZlO@7usֻnީ]RZVI֢/&Wg j-xk9{+֚ sspP@4X{gɻI*UDsϳ:_1)~ E=υ,ξA;!QRl`OIa*SO9-
?\Pj }]) 9ȺaF/%
A OF1A "s<[Lx:,$k~2*;}N˓2QRI9w
]WEii]b𘋫\Vb///,0V$P{&G|d[Nv d Iw9WWW5n/I)Ή ZO O._P9 i3 >FYd}OIZT O4<)MZ?5ͻy?.{ Vv5(+j }N kk/kkomqq 0:
tǻ2'DCɡ[e
^M^Wlu3[2-X9q{vռiob?|@}G@3i(t:2eE귔r ߓ)=P `o̹@L:T?7}SqQqq[qq]qqpq
qiqqqqa Jߘ"slp,ۆU3f L@ce]߁[/!Q45X 0g@{{>yooth3l-'
FϾ MQYh'm鏭=m<)S~f(05(7-]_ks[ *D` QcʹCea5TxASf f O~يiב+C&Vx7]!
zAw2$ʇ20>[eAPk!]]af%w\$0d'PO ǁD? /4|h E ̋멬}^=mm-V fKRAS!eڬq-4H3!D(ɉ_<'iiˋ$rpB+
a!@!4hgbQ?Ϗ#V"Jya_X?Yx"}PBXuLA7q:a1q'f̿c4|`:7۵su$mn'Wv 2nM<cHݑ/ELP:-q4-v7:T\ Ǧb:ӞdZM{4w>?%PsOux 9(7\+ԻC)C[:nw\?y3E "Y~/e" ;oimU<.L8mi1J2l,X>
'_ɲ.t Kw=-.0y{yVHt9LQPqiEnˬ} C
jg j9ɓMP Ftd TgA#CMoKbrϟxgyuL 줋XI"D?"⅀] Q
X aGd dBc0 >%9CfЬnM
zZ M e=?/xɲ})sYhɼ R0Hs! `3 jz+ y"`^b
EB) cWcbn|| 5*I f 2326ᛳƞIx3ABBLzKw m`d fGC^
#˝VH 07_
4Ƒ;N$\ܽkQ1O)\;
6t{lr8sWFlZ$qPGF.oV/ԧR;a=B de2,#y~7_u ~7 )c8?R`DwD`a@*d@Sa]a(MFbʘ7FQ:q)"s_Z'
{Ĕ~NM l8JjO^OyfÐ1X!iɛPU\`2f4͆ˀ*ȨFmtʌ5 !~)cf &Ld ? w :'9mÎÅ~+Ѭ6 (t$GU^&x}1jV3kK$%)J;GM(1!ٙQ,b
iGSEw vva,\ g5 Qe^rYI%]'^g9|}n?= &( pyh Cps[`@#t+ Շh˟<\Y~ jefD:s(iihhӰ p s=>NWsOk[c;2>IhC]\l^& nP @ V")A{FkNx/%Ƥ S.W Y)x|C!;̰Hwl?A'II}u澍0G r6L 4:"<
͎>ѵŭ2!o ]o!Ir P (`b"C V֬C\,HZehȈ)ڠd#"? Q 78@H_A d!o>zJlp7m0 } n6v57Tu&Iw[y^ks!lP6N|!~8qsW 꿪"x3l8 ?<;:qfR рNy& vehs۷U7d [*":$g% =ޟ/,项tD9`o*
/X#b+~$RGKk'kMSD=q3rbeiP CƁl ֏O軻k՚+ l
ΩxMb~?>*];| m l Ll¡u\bYU'sO!{N=WLv>Cmr;o^Avv.nҥo*Z%o~ q \=mJfi(9DOQDwBn ,R8)Af O-Ic(dxg?b+SD;zޮsE<2+Oo(CY%lw0,^4Q:G|:/pZ]6@f J+\Tr l0pn)ppuug Crf^>o^Zd 2ip e(ی$&v3 kNsίY,ec!Y}ƽhmgQ*8Qլ?@b/!jʓ梑8vCxS~Ho@)?
$!IOU y˩_fku?) f?SG`k*I|o{nqkx;e`@'fOW҈h.Q⣃8_$`hnmo)Mgvۥb$>ztrfC9Fނuv "'I7F;vH'l{ӱ0+NVpY4oQ1?izz4ȥAck^Y} 牻Z@sikINR].yLcOߧ(8ʒ ciT xd
!̀ { i0 S(# htU x7e86ַ
)FR"62'w37KkonsJk
l+ ]]Q
l#UMȋ G %)?!Ad?Jzg,8;~l+E4W)Wրh ׅ]MMi˯cZ}m[,저`dGy~"~qU tގ^w$ @~2( ;8 'ǮCU>``i4}I _{ S3pS+`%DQQWcV4I4~1 ^̈1-k!W\2r}Ϋj5~QXUb# 323!2{ ԝ)4ωnowf }70 l]+*NĶ^$TETQEכz 9܌cBCI"lV'5@
@Fqx IeIU*O yu^kg+`zO.q26? QCOFd/tRB3'cM?LL] %R2?GŸǍw@9@e.H?*7818]! *E%y6X//H44J6JRMg 7g)A Hn}uO}
CT+)$O\UTUypoLxbnz^CC_oW`!A%[H&H?uOvTAޝy2K°uC蓽CDN_d(pɣqxÆKhCTgfnӣK{`U$S}UJS% }b}"S9F?~< Ǎ~ aW<cOy?в2(ۙ6V:rGGQ'f(sp<\KaGwŇgݐy6/L=]۾ہϕ&=u J>o m)#b ?:Ǹ1ty_It2WqOanRܐ$Ó
trC@&gmC517II;GDAB<ѐ_ ,܀@b*Ǣ}Nçh]'S?zZĐq:| 8l?ܺ$}α`0fA8J*,< K
yԈ I8\hg+|C{)S*W
ྪ?wRڥ;?9K]\Ӣ6~j犔 @V ә _mEa'u5J*#@e05D~wwKzm9"\QG E $wkKq ̈&(^0 ̜0 J%' \zN1 TdW^w2 ff۟@o=2NYB:=eB\<7ڌ"N }_]f[ s- |9uf
L*C EK0eS#S jVVJ{ueh<| L
MmyG
'DКؚ4:RqL `ɸ? V Fbz1p4A/ۊHiC$|˪q|" ɯˇX˅t+x
DOG OE Rn)fEoE\j48fubb~2]}|쑹c6_9<߃v?X{Nv'mXF*yD
8vC0G!5vA ^#w}| yZ`-eP"PK X:C[`S[}IE$;
본saZk ٶ+Wx\՜鼃|K˖էӺ`w,ڸ:40=m2V9'bE
S
!4CA;|;\ e"- Ya ?(Ar˜
=ozsu w0[ ̷$
T#v ٺkdidV|/L n
o<7t@|aտv edtaB6Fb<T?x2 Ivtt $
$ 0^ .hT谮L?0÷ ]*+P.z.sr4 MU83 )Ǿ߂!LW~ ~ m :BHj&> YTwEUWh_B8hΨ~J@J
=AH>C
LXY(
vٖ{C rUa],EʿbU7`>(% BphytIAEO3KsX4wwU: eDA:>U:dE*5bEc'ED"D"#R,[aEb*]Z"kqz&U$c>MTP ܶG _W݉0& tvIwڡA XfX=ᥛ
#}zi2!HЍǻ
G } 20PW H2g#*%A$s$ b sm=W'b=ȕ Ċ>F-2Yy^b{^|k1fWN+Ѿ=MmR>':>MMޞr|)?[z
D20,w=0fB*{L?SSau(Aҕm*mK5XݦûTݷu9E"Ѝ b-kXna*bw5`
mJ}ǍYI7!qvvw6;?AӒ(A;~VzWJ =
btbӐقv_#
=ijKG:cz5;
a
M,D6C6^L0N 쉾^3i"ZF7Al?N*[[_?;n5pђ2؟Q Ȯ 關҉"xdyD ~C2 -P_qXw">c2`507!.Ƽ=ojhS2 M#[ɖF ̬ (2F JHm0 ^JQLSh=%PxUpXvw9Dmӄa##eR-ʨ5m*}\QW 'f{<5ͬyw@yQrq{mK*:A잱XIA;Wv} 3bij2~md;j}HHrosO1~sdw I|<t#0A>znuqK+-!gmCɬ#F 0XgAg0ѽڼc,
LF"r[Tzo60`0VXP?|VתEߵ!w$L 2}Y*0r)dd_cN6* A1 U|C✷*W Zs Ƨ/iY2P}ܸJL Cȸ@+;oLYwltxN]:
tE>^={u=/~zݟezÑ~}<|ʟ9 7CZDΏyR%$R@FpAp(
:J7dPh!B2 ƪטv k9f@ L|*3SפeW.4t@ ctQ| ' B)ASWto9ݝøp;O[fۭ|x pG8 8CM;[B]F(?.:4M
![^(o}zM˳KmGK9oEѩ̵ C!BF"I)7]23xŠd|ݼ6롫)~9K^* Ȳ)ؕxBUϹN2](M*#-ؙ۠:z4 b̬Tg
)yr/ƩekKXq\_U >3*GN&*Qňs
7p t+/S w??, 1ie Um1kɆֵV$s`a| q
lmG +OI\zx6 :S
R b
+sW
٢ȉ>Ic5 XR0Ck;tP|r#쀉$qݞBYk w. eV:"fe.P8_v,A35I1:}TY4 kmyAaX{#VM JMU RWC[p# n1ւ0*
C"Ad
՞/=íhF*p@#2hL(35B%O?3~ ]4Ir{T~i{QE1 ^'
Y1[5:8۠G0
fR>ksӚSaN1ofe?ؿZdRd*cAl[q4?o@NNٻ
&XM (# HߛK 6`AZI.a|8Ƒ:34uvkojQ&(@?YHxy,vXwspp51*TZ3MYOg Y0R ̴mŲaDnȷb V b 4<]|/p ux(WNmxTE7{ OMuٿeϒTչpP( ILH@bJd('#ٹm*Kq݅]ead pf(
Iړu|,j% $)dy*}-
Bo5{=QU|xmRDQ~w)4䚓㿒( Gt:s5_3
}!UF x1G &pӏ
yʱ"b$mI jM |iEɏ2XovƮʃ2(0t=wB#8
ьYi
R",6OU/|RcГ a$@§$ #ä n [5Ղf`ΰL:2A"tu^z IتL?[g㼼\۪>ɽ*[p]Rjc%G>
WXFӸr 2;ܻ
˦喕صi3R'+aX\iwNBԿRO+Pg ֿ7Mj9 )Y=J!&
1z
})O~/ Ƭyuo%$2kBmP0 ` SiB ò _^ ͏/Z,}9 S~"UYtY50
:VvmUqI0L7UqqS=ku)L1g#=߈Oyy gS3yO ^6a0+ P
V/[5{4i;Ԧ|[rT "$q~qQCW%ZR]8V>qti*u|Un"'|
v%ox
HTp~ҁ2-?'x y&$J(D"F3=jX)6 7C!}Ûى3z;nJ }S,RNVrMT*Ő\S +ʜy1!1͢*֜.j=;J^z8U`$b ӒD 72e"Ac
- lR~Y!IFтy_ޛJ汐\Fo78`O{Hg\UTUжV2k
H ϣ2[Ctb23 $LY!('`2
2=AgclxҺ ϵy]TutWXώ5lm$^6Y_YdAEUB[Ҩ2 GQk p&gWL^ b ao` h,Dd7! Q#ϳ~i
ES%lZgB_Mc_٥"z
iF-<*Ltye=jpm$FQ A#06n/|XVDlT;zx<=< 1&;K>W+* Y6p|Oݡv~ϕ9-WUbNod?uףw yQ.=|}ow;Kmtr~rنuC&&ߢgL7n+%dwIET;k83 8P@F J .*, լdcWȠ)"F`1Tx& :$wSlzגZ YJ_@40 'Pzpe/LJ]ZwʝS_[S~z"{5_~9{3ڜ
FEs
ڬu/վ^KAFç-3xCYS(n<*ˀ8bc2%ٔL )qÌ)2%)cYYaq9m'Pk Ԫ)nKb֜~ V_Zx<_EM秚L6 ȖY"!<_XJV&9 ¿($z3:C< }?п 2Eēe0IX;~6LuPϟ~K'W~O8gi )}30
zZaT &fJ%59b=:G{< j>c=U ]Q g~#{,Tk*rKRPx3nKه։G,BLXX1PD;+"B' ̎8*u$y42TKpߗ|X* y#Rc&:ů% 0
4ô b'q9~ie梵KA?O'ئ&r3 ˊ m((̼ d:` |U8mgfXv3õENu,s+Աu>%}V'T?踻?P q;}W]0:Gd4ӡa.56j|ۚJXS r> іDz"Сi M6~|C{-A_{*uYtx5血PX U`EXvb£f~i} ,Xr>\R/z/w32%ѹͮəݠL,a|:+XwhW#K=^ <*r!G)"\V(|qFNs;j~ :SY f73Pr84,Urꋋ!(i?B/O| U }x xv: }#ػȿu 7 Pal'"q o1}(uyvzH
n5fURLQ]ܟ[hh(EJyM "{ I;t&cǡS"vR'gcFȢb#m
_^5 db6@۴ J8FBdV 9Mf-Q0 8j! rM .tFt ٝ6^aoּv ?ʭ 2
It?D$r;- 2j2p);( ! P3$XƊymd EÖYaK ܕaUdHO짻^;u~'5JVe2油7:`X?7 | !Zn\c m}Wwx
Ngڧ#[Л
(ώQ1[ .0HY ga&[v=+f{,Ib¥+ 0
# 3U+. $ڨӫL X l7M$b3u3N)Sf7lz_FOPL82* v:_g(r݇|Etѣbf3ďNp1>20!¿Pc%i6K/=@a:BRlJ ta^\ _sԨD@/ ipuըo!
D F^KTbcfbXظe\r|ϑ^ hP GIˢvfW\D\#JK n" ԝvmd/v= < ;xD 2}4oFՇJ&?Yyl-|e-B6te 32H*OV/3J\=17$#䢷z?
'}e3+ ze-5X'_@MAEr( MD0`ȝ[H x}쉖Z݈K~?# B ,+mPֻ 5m Gmh; oI '8+M_+6 =@%NݳS vD>)C F$UIgPMwu)Fkn|@dAۥ`
@@?P
Dkj_Cl^Z#q3+ r܌;( 19GF g
P*:gèwsk XK~KGPIi @Hr2:Ɨss±lyGk#m n8.:{hÄT`jϑǴh4c[Wv+zT>fܡ%98Af TN's` [}7*̈jB7pp}J}6?e}S3qQTa0Ulh&.[g+HC|Dx{l<86+ mlL@̈
7\^[j|9vkx&TwQ~ Íx3z6wT`cu@^F [|u@ct Q ÷Flާ^|AV~S֡ EU^\5?O K>5$t**6HX5 9]dBwj< 8.CqJ5Y$}B>b֖JL+8A b˥:i+-]=;~uL$3(.2S<9Hp܄/1]y@,#(ɍjY
2 0 5akڭꌲsCi)%v4ָk/A XcO1C:e?2U_̋%H{G?\mm|ӣ@v!4loˇ-z?|'nnb 6$ q) qL6οd QDSs(9-<#?2=A"b&so^d:듄6\OŗA|͟wNezz^wh~}[Ѿ|GG n۔װS~O^&u,p #5 kH>"{m= l]"K2V?@`r,RQ~,_4ţ.7kx d7/v;/
c30[($UIJ{N(W5]&FdAzyLZ\Vg0#FB+ "
0` dhG8$#9g\7 =i啝h A3JjÐ՚}~|t_ABJ"j&VsE?!'Ŝb
@$BB7 ]VSzu,l> Lq"(ƻw ^1 h[f[/(7,9ݨKJ>@G 8tvC`7dkwwccϼAUH"EQ(A" JKsj-"tUo*:v@1 Bz=D4ooQb\bQAPTU,"QUQTBP_Q=I M;NCD
0Qz&b:+ q 곆
\J :d(JAFC"}| Bb"7V 0@ s=R~21nAgY:0x> [tVo"&J`]4Efj
b"*j ːt'\Vw
^pJLRtK,qX7
(y? k(b yV +s>.2Eݫ;_Od O&e
-wz3ӺiIJFgŮ?nW+ .1J <>[|UĢP Y.GRRD\SW@$ ݩ\ (a$ p?]^su?bնv%M7\ZணjqcS Pd4:q]SlzS
4(03 wUڳ+Z/% g #7gsrTK8E;ϳ^<Xjq JeϏݧ2cS_]HߎG[wզ7T3x b2ŕgil* UPt8 ¯BV^ɐ8x+oEd WeUE)\J'N^+U* |Y*xi xʡ XX#콲p{,;KvQ3sMT<3B֦d c% 2h05y
~[lH# w K]
w|4q- Ae{/O'or/tuo*oP рHn
J&0t27C,pVwRعnXO W2+&wé^/:N:N°3 w i&> 9M suS/o|a9]5㓊jnw3e9|+RWQ`] Յ=&85=
vi9X!
d $FE}q3K ,c>`NCmTϋ>'We nNPX eϳ&?e{(.TA,f5v'ʤŎ4?`w*Cm2l%=h|T9cۖek0aa3. xޢ$M[S0 JyZ@ 3Դ|}M]ɞNRaH|ht=[z.\Zk 8y'b
iXBCte6%`a_1"@GHF坲PEM`&e՟vz ]
qptW `vL Lv?G;vn58nD?v 3d70&ST-B$̌f;Dxyǜ¯~l@a~ B#FHYHpgu
z)4B6w,^7u%;X"*-T/) f8@Ad:W j_V;=Zd>c`
Gß~ /k߫ )8l<}ðY1sL`u:iݣQؼ+Poa|8& /SC.&>*q2SG}<^7%ϡn:4 iXc9}6 A6A9Gٗoc9eyڻ-[!
6q@t:h~5! q^c)8
xd\glcҲئ?/fCdƛ!Y 8H|ظoKsD8H!
χd/݇6^켦v_Fn=%p 2GҚ]=N{ jvf#k0{pŧVG.0CH 훓 Ű04 rm{.Ǹpf Q~lxsYȄCH q'YMkŪ/H{L%H,F`} I<7kaݑ!
Y FFs%+Z9xgsЪs4SaZVc qy )-+u
Mr##婳wT cAٸ/ { RUiIr3iX .F={~q/,;>gHÉ[N e ]H7Xљn2 *sH{"B+Ɵb~2&i(ꦪj gr M?hG%rdX~Ͻ&ɖ#
ƣ$
j8/Y &_|40F#ITP h$)6AFcvC~:?>^/%TONb2^9*p- 3U0ָp6:YR>/-\gM U~TYcӫ>]tp6M ͠ +Oyφ O D WlzjѽU| %]zw=l.ri COC^O,%^43h וS蹈s=ۊ\)lSl (Ugh ܋J'88Y~}5GsF`0 9TOus}LxI,|V"$FK8Vdyܲ϶: c߾ I{#a f| [3U\N;爳seB/g߫jArw)Tͩ7<"\* k.d@b
{LG+@ Lt}?-|W wDV2[\Ԩ2( 7N1 m|7wڏdL^`0:.ď36Lm6 m9Kb$bD\U{ F8X.1![W >{d 0h %v.y3y,rKơfsM 6S/s'!k_ja(U!?y=&!y7oڋm{4 Ct]C-TiBV"^.͘z
5bYq]FF QU TH*
E(AX*kAAEAdX""*bł 3fWKOzQ=[C S`ٿkg1Z=v @4g)YT?fȡme2C=ECmU k5~ӢÇ&D ٿrhC5 W1ElO'RYd~TgrN랝盬tg]oЭ"n w!KZԡ`Pm5hV8qՁ 9Syn6qb3fLs[EyM p'g6M5lO&f<C%"H [m6R e|/A% ܫ"m0`A#f`3=!e#HB1 !e3dur 3vnCQ}#M<ĸtXY4<]PO
{'ttxų珏n5ǏA a_Ġgb6 FxT R}Gt v2HҊԈ d
~ٶ}[z\k5$@Lce{S#q(?W}"wE4v<R`dT\k<2>= Aq eX JF@uKQrc 5G`B%#Zc))W#ry^GHz{$Vyϓ'#~{|X KnZl8/6 yT:ROOy렂H튐/gk 5}6ٯ;(blTPS/0z]UQ}"I mX` LH @s
3# *mD| 0@pf~l"rdW(g}[>DcǛT}tz9 uO)
Ǵ|൪!K9 IuY$]
jbm<7L{|feJQL**IUrjzc JY+; uP.h}P
+4 K]
}ua#C1~:hд r,ƘQYT
c4[ ϓF yZ\ gu +A=ߺT/hkGyK]z Sy? ᗫ͠d֘U o"g_Pd #'6tl|Y 9#@rqdbK Gmq$`D@H0"Og%_wq ؛>Yb*#*,QEF(E
V,TUXQDPDPEDVc2?봆nR>x$ 3sҞ1E882=cu>Gze=ucY%[ojtwVh?K: b~cZȣUW;ZFLozr i? Oj@;7.AqN!9n˭ ۇz.Ź -
Sʶ 9S,Co &_PB!@jF7pzD :.0e T; U+ d Ѥ,<^SڣU8wE;ٍM'fpܲ: I7 N"A\$Yt6^dzc9 :
*> Qд2aL
4$ar
۵iwe~}ߋ<Ww:}@ "G
AYcS v̿[Gm@\vLqBZY/ h$F Ť:Ќ3a'f*blO:m>b-6q{!!}ϭK
=-F?8NX)^CmNJxh2+zE°O8G'fWY ? -{7Ïe*n0w?~K1 | u
nRؑ5А %1!hPQEly/+G t=- 3[z3Ƽ\SC> 4 H*.@ 3@xB(b( #$
gG5P>! :08kT |7y-HES1
$Hex[ÐƮ6>?6A#QԤ,ms+BGaޒm,k fLjo{m^>O+´pca V0?v(
B$Ji07vy20^j"2W
~cZxtSt_M 6nB*mU=RTMWp]v᪙ŏ1v,Z˥;H0~7gMbWi+$\n'~ξE(GMǬLg^|n{(GF\ըz\'pez{Ă*ol#Jp8ep iz#
}#f 2ݑ8P^w
w@D Z}#@]DXd
{?M_ܕ9y7+ȁ< L&!DbX:+0 N) 0K{2oXvс5I]ezvr{ݨ(wC,cA!bU= m,،7 +ŭ;CG{x_K(ct%t]B&`v>^`j$J~jJ pTf_1}V3ssYd0S>w rw^Y7< ]) f
}R|]i=Qμp|3$f
"Ȑ-}5>]N^ ⚃~DL{oyD_dwu83=T? 331TEu[gX
X~
IO6S_=}J`5əC.b{z=8L JhH*+Ԙ4DىPW ǔ/L 0o 90^g
UÚ\R[Թj4, ;L >^6CMA%P H^1ݕB(2pc 8jwZ F^cvv256) i[Hdk54 N777Q~F8&O|
eE=:#O|歏]{6Sʏ? }/\͈"Q"2(" (TQb)O'a`1D"
4kcvOtogo ݁hrYf}* hgn~)d(DzCTW bu##(宂JF?>E&xrv|Ye_
HaI썑 Mf=Ǘv9HsN.Eĉ=`sǵWpa!'o`gɭ;Ne:m[ۿՅǏ
`9Y=RH;ǙFWm'* |<9?;xv kyc>C?l|_|" JZu@4
_dTeF)?a `fzE >WL
ӌ
eb f htb<8TygvvpnZw#4+[ y(H$0Oz
m+4_F $pVHj#F
r!k1Ww{
Xn m L@KWOfB, X5A<,L_{U!l~or
drGf#ŖV M}\Jj!j' pǺiG7!Gߚj/ۉA{u9 4PO;i{IУ#ص3DxXYhpp{\(vW=9
HR1><.cWca`e,FimlՊ;
=#8S(c
VNP E6)cɩ"dC>acb :L"ډt#\4E wOLQ6x A Ē : {+CUi~/SLkvGnNxW+FmٶI JXŜ{I(FҦӿkdš< yĝ;f)V9!s'E+ T#dt(hJm7t 7=Ax+B,ٖSJzBA@-Q1QH\-QЙs{s.ff _;ShB0c,flE,^4"o`|ޚr6=._Sn2|t </`0d ƻc C~_//6V8
ewQA
c+(
Is_3i7P*ܵgRkh1ߝ ű:dF+v\P%SG7}h\ QfTi?caz_5[\$@zw**v06z< өk#oqzݦ Ŷ}i>(#yt͏ GW]
TT8<.U GφXUcIjZo5 GY:DExZx S%Gtz*EEaqx\lL}OPx+nsG A5] 7ûSSyh"?uP<AH qCA ݇Y1.K$8B3{{"8*K5Myd?cy"]UءSU4EQhhƠA5ANj RO'~j]nq>-_[e?7U^Qa5q4nfr J r֥fwxRu֚yz ]fW) `zxM~n:~V:\7b\|DD
`9nG&2X!2M>ugq Įzy!auW^»{%d
yH6qg +,a {$$8⩊b__ /w>a_
ӧǶL 9zAI>R@%a/nm.ELwZimlicl)BPKRH#1F Ouz*o2/lTàg?ob<7I l=P e)گƇ# (C7L08; F:g>~o4=
" /$\k i9nM ZUKt[R _>#9n;=g
'pB\齸/ ^~m7k"KՍZa(6q g jc\K:WT
R{}LQm@9iːMSRL&"uфDWQ@ɘTlSt`G;eq E.HYiR` #i>g\~ A.1"sZ2fb.<:3/j æ.El`?W]FX^1wPpq}OöYhpd_8WX iةLJW%Fp9L ~[7G),.GE)r4_W)_wXM|y}~JA#W oRal?SJ^Fۥssr16`
tRDB:J6SME5:+_R't~^L|Ej*<#|[Ԭ"z5> m
l 7ǷLO ƱPhOM?~5ޫʹOБfH~*9PAs ;$%;d?>Pwae? upmʝZ3p; |O5,S})m R["owϩ=x]W7OnOK֖mgEN䒲|yV|^ knNݻ Dl3eo0KM ϯ+ gN%P}6֑ ׅ=Ln [KO1?[M.BmP9 M0*ԅܑ" KF:l
! (e=I:)# (QWdvFκiOY2_ikUTo=..uǩ 8}:l w67DS(0 ?Ҵl6S7
Nԯy]T(j~mVN0#%Fhȷr:QJF{fs q0M> ]L-Lċ$38)x̬,~ ,`YAgI5s;/ρ"+0Ard*&),WԩLL~S!A7%mP)`UK< }Zgs w@ zKЏM1faaOc 2;_&=KgKg-?VRi U)MBXLcoj(30p@S*+"" ZX2M C0D`A;2,gc!F.!Deʳ0A5}RXCto(FEJvcHjQJmV# Z,T Z
d&VF
Ec8CrLamhᕆ5;7$fIWI *
PWJ
R|Ք][-Z(4 ⠣wu4WѵjHȡC!U(P^>S\Jr<{
ys/7v?p6~~ۀ'R&
S
2A@c;äj߿gEku#tٿWWu'Ȼ-h]*JBʒ39 =J$-,1lPXO>)
"vt*}* O'"xcǷ ~ !BIL Mi裖' (:u;wU0zƃ~}s#rHpfz MR7hW\?(6Ǜ#htH//=\ʐ#Ȃ֓$ds@'YyRk] a@zUM:y"7!~
PdzuT(z ڰ i59Ýn444
Pct iqw"}Qfu?XӖ)ڏP> s3tinuUqԝP0VqDz p߹߰zNN̖ZV Pٶw (4 ^,ӑw-i:BYmKq#A5|VfݨFj~3آsX.cVKgkiKŢXldXMkkb4}ld_ Jϣ]Tv%֥
ީ5ڴYS x`Y3%Uk:T̺-&5k)
+PF'9ō_ʉA1UM U}h@iC
6/%Ƞ%B69m-"H4l Y/ײm8gi[BjL8ݭmbF\^t`S{`KkV~a
{*y0ZR (?F
fwikIU:. + M{po @qRVFQx|ӆ:
; FfTdX}%fG}m 32dž(7;*chji5mH(FZk~#Bc(9F~[֩YJXvlc2ȮRioޮfs~qbT'SfηK~Y0l=g,PK ,Ee'ʛy$wQ8I[&VnS1ͦ]q1RoN]ݦEfcev҇ ޣ:cPe͝J<$Jg`[_ h" Bc@}4fXgBS<+Ib'ZMF[l UB6(MHGw=iz w%#BށE,R$L 0 vucPI1K 0t64sEe2jS0f( Dˍ=h=|&s!J;VQKç#h'uMq%zrY 07oM
mUja8(їZ6
(뇛`yArE\YZhRw4UJٝ(Cئ ,ilp
[mW~GRp!ӪLo 5Vȵ
sMޔW3v+%/Hq=.Hrs ė\Ç,:/ujX#VTND?~`{^s!Ϳ$&irz٣U4F)#ȯs"n
k`=B-7uݦE[e.:lgnZW7e
hmS +ikOR;R=>TԮzjg-N9;>W]PS֮xʥb0\c`Mtk
bפf
/NJìѲ%5-1BD6\7!Y͇^*Py^pqb!ZߡVy:ϥi7}4w科t2)0І0VALc%gyql-qtPhA4rUEYN n M>I]h7tow|W"}/#T*Z[ǢDFꝖDQ2Q6
i5x<9F{ "ɫG_ WSijIv*S5mWs[mn3[>8$
,vieH^۹na)YJ-UJ4]s&ߕEŧ 'Xg"xbUWB^'/[bAu'EJ4nŚ֭UJ5 u56_bn
Ljeq"F-ܯ͍ܹBK5lӷVGMNd/QnzS-LE y/J" gd hmL8pb)AtW=ffG SCً
CE!&,̃=e)׳la5_~6 =֦TdHW3r v$.NA x"ų_l;o|m
#JZ aL"5Q
& ףs]{7iZYBRz}zZDƹ
V*ENG鷺@[%EV$Uгu P\m?
FEep"Œ"DQQ(14~վËefr]%
r1S c&
^TE vl> ֲGPx !4{5ݟG}(<. {"!!:G
,UPv5NyCa6N Pd:D `"R1DvKW q|}?]~&XUR APL "5ӴdP29X׳vx=vTI
s?W\l%O8TR (X g{쌕]Um* lQ
w GN^q
Kms( N: 5H1l /"9Y(z= G 3n %BY c?zSs ~Mқ\Ƀ.56ބa ؾtޖ>c ?}-qj,U^+pp P *C'ɒ^* , ˛aVw60eg e<2N.R&fn R
3~S < eqj
csd<e9+{q4 +7kwk.wP8,gp8o/;/v[,=op0yMB8|5 !7tc}Ѱ*G1/3OEU^\ڐpV|>&^ynNo6zzS}C3 z
L
U TU`10sRMpڐ pU.h}w3^Wf8eH>.6k4>5)vo;fjP L=7ǕK-YmTW:AClw#wn6Ekq7^|XoLExڕx7n
}3EYN [B!DOC]W #`=FM 1xQtm}(Ò;CG[ e[qi.Yh?$,xDy.KJW$ʨTF%MK=U0AVfNR Ew)݆I\!h , ɦgW0S2NC M?`;ndq.hbi:1d6'+Taj:< A־^ZRm宕s5F}VJZ\ [|C۱bıw6'qஎ ;VcG ʥsr=dô7ɥ
6fU<&SL,2J8knZqy24.x}w2]O?ŖR~fZI ە7t* IgN *Ҧhq?|O]Z%E
V
F02"Dg+GGv87.{C00NWp e [Éx=G He$1}6wit].K5w/xhЪ PT-PvtRlL~XF_bBnOV֔}IɢNO(ɜͺC>Q )MRwڵdo&}.2=nH ;gJ3ߟ]u|_OH?cnW[tx^+}|O};4CJ:LF{0,q
۠No
- _lsbg"F9JGx7%y$f%4y]ׇǢdאx4R{_'_s9ts)Ra},ë3'$`3.k j!ҡ hhoQ"ۼb{HR^z}g#XNL
MfU5\IAj$$kL8Ci#?ŋAa?-y /}-Y!'(~bk)B?F m6xʺ3C̳0^B%wsOEiatT sҦRE NrQo[GP~oLGZYx^eb=ZyOU]rYW& L" Danu d+⽣/lS?G]Zӛη॔!;>vj[J)]gQ@\#, لD |f`w >|$_#M0
@1 +d^^$L˶mW;SjoL+])5Lzqf2_/V #uDB5 Xz&TJ?l2N"*E dH )\ #z cG.ŃIth b'g` / 7c۟G}gof︔]7eWwvr\WNrU;-n3j
@=CF}WMBg <'n͊l1;IH@fJħ!k hݘ2 \'OAz8&CdUd6DvҲ@Fʔ1s
^/]_eݯ6UU
ڄV!Gr
a 6f{D z67u5R+gJfN4xOίao[fz睒ܪO
'^Jn >tW}̳jTEШM{RWEo~9c|>9Ylk {PwUA DZkԌ`eΏaZ MJ|hj)ON-䈜uᾫ|͡dPFHz`ȼs^p$вC'2yfN ~شS?Hh>^az'kO9^:(oq{9ɉIŻ@/ /H)w& 5Vp:e I] StMW3^M蟯MLI ls4"\s"k
{_yw!=}Es8ңJ#I匌mM[NsV/ؓ8H*`8%Ǡ[Jg(A-'5ֲֶ@EUph 6͡lX?Q@z` \7(AK2 W*(KRB3g
JzQhH %5z !NB6LFkΓB0 xӺ=q 1-k 1NwV?D r
)(,Z= +N0AQ t_Oi㦙!G`3{GdrhҒyhCy֓GQUjn"mF0oqolp!82AŧxpA\Rp 7h:DGt#2 Nnm9V GA!?FaB
Z 8X&ւ!^ʡOZUW;YufCyoKg[9;*jr$DmRt(i.VZ[9JWp+L2*2c|su 6U_nhMKvR X]Ԋt Wm"ʯ
^Z xNC}+aHUQ8 &7CG\ ̻
F }PGd
(%I x˭Ԉ]PC4anIۻW;Z>EA,| ISkG>57Ӧ;σIKX U#/)6b & l5
"@ WTjޢfXE%kRl)vDu-JFGh>,Rh.k7݄41! )tl%hr(O $6t ،F,MĀf`qVbg(bDboXɥ!AgNt3VKMs~n+Ӏ8wPq-4An7~geDލ"P u pIĕ#zzWMNbX&p /:wcs=(?; eZ1N@F=x_&H)r4/ d(
XIB6Ay!7Fڡgz a`d ͼ+1(-"tMjI 2$ 24R/eW d]uLA+PX('=PH 1 8+qv։B9 St/Aj?)Iӌ(I[\lӠnyeʁ7EɼLWQ``-B
yRX
45F~2s5A$:ظ/QOh`
"3v-s> Nfc ҡSƉccٵr8o9"P6w,+ϺIr,1a" zbq[J#6P %0| GCg]ȑT?[p!
LB>Ԗ j +Ñz$vz>bqZ$ B-^^\騾E /ij
}'x܉J}> 5C
U
#qqڹ
o'J !kinЧN6%j:`d bLNZcD!3g_;"c8SIsLbWRژV<ږ=C,\&|f3O5(XotcTAox}oN+"N_O45j`k }[VD1˿꿬r
A g¹T qvu(" 9 T1//eUa'G;ʭCL vd;?Yڽt5. I*:#,cUd IE}pDxJ>L W6[ࠐ+id5oIɺ|`l#D 9 C6~7h&3<6`Ql4Xy:y):r'~l5-;G<鍕t(D*n!?N`Η R]z:yUȚXpDubߛI~pAFjz#O%ժL
?T
삛dO͚S&7떷3W2~RGiI?͏qwNH̱Z-~T"h ~]c'avY<̨>P͈>=h̺F 1>?H]?P} WN|VpP$L0LWo+v%%]Z6!וF58 T8O_ެlT" :e2~{/6xVv˘Y;mx)s36άWFK\2D%t#2b&(
PJR16a<-K;!ne;sm k S+L:{ 5P P(5
`}.lP?\ lî& qgNy-M0 5W Nj0]aܠi_Iz|ZnX7S@MRYmʁc w [G* |8hS&qί{YQ@nNpH.4طHtI 9R&
pݗl4S)pl|;ˈ0TJNw|
6lL~kDk^ AP‽E=kw
9[|a ' %@]{;BBlRG[!ґa cȄGQN"mi!{niS~ʌѾG#|XxS B>
l !ūܙu=˞Dd|jn_HYT2w uާ |=Z]s+ k'ܫ6Wۀư J
PM}4n]_,@ehc3 QԼK6PeyM1^dx%mVU#N 8Cǂ"*TDznO I?lj4Vn~~,>Fm>s\`;Ope3҄[[¿6SAh2Ьo>ܩki 즪rOu_aNxS/6/%)O jV zNRvcK # EZE&[ [R@[&S1 r3})uR f #n:PV l._ٯǰ1" oL.V\jS1H?Q*" \EZ*[b$W}Z#7dǯF,Fgn&w궕@⤄s(-4=Kz aF]Rsn]"Mܜ5Ö#G>u
r9Hᶹ(eS n,t Cʪh*iPC%A";xXLX=GSj
L:1HY,e,KwUI
Y +k7 Kl8JY?D|^鍝+!LRimXى4n!ۼ!IBȀָ> Yt&MAFء fGN[CRLZz{dɗхϊk
E=Pp>?ئ|vvPދ,+҅wL+Bc ݣ'CBW\ % :I1m@$`p Wc:(i¿<n@~X\K#Nck[PifT7WG)M}:Qֺm~{<8v'lsP+AwpV]H_}@hzZ+XF#_2'C KzK 'ɛ ª1nyQ$ e^ouxM3n`+[ly TTq8^DOF {zv ZJʌu6h_(YkJnkO}VWv
U K YAW7W)@+x;ur8ߩ{C>#Y0(775mu_
)7z|7{b-c+%].NMW PZ~3 -
/3`XW.ijd+QmS*<$yg3-(ٚ =·[[}UU`&ĄnOMfGA/nQ#G8Y o7%ux@ʸN0oe)=
XL[e+>ڡ=<-fnJ3SQzc+3~@ jRFs&=6 Q
h1*|G1j.z[~h=B"[6,SY}R 3d ~sHYN90 |7l[WVf3@ P/.Mxw; Q̟qrO OV
m`XXkfK^45rJKDS^%d[ĤWd5AOYd\
:ULn+j㤨R=pA ^ȼ`pUdiYv2sA˕jsx/ힿw.."FWB ^KٟVz<@LOMĒOa] mwT;|+?nؚnUhPw`%; o(8?u; V@ɽJI3pw B7]'7N1EGKhS`a;oO SF\1r.1+W:͂c,
ȿM[DH]*D8J.-F77v
j+U]Z : -Iΐ! T4RU[g'Sp0XnDGf-Bg w% fXܪWQ-8+8 ;_H$gK>Nil 93*{zg&SrPfic1Wq[:8R@*U3!V"\aYh; A g!C VaF H_p龄.Jp,^T0Θ~'9SnZ!Z 2PTW69KI_ʒ3kKX at 8OT:p♛ | jCn,kbl4nKw.l_nJֶԬۓȥ(:U I _y R,bm |7/ MrY[{zV3Z*rdFe[:UI@$/SF7DdڪBG4ބs) ĻQ~(X^>Tj0`LP :gCZkvTfziRo5~[J 粢o$G$C&;uH"v
!< ? _/ RpO@K2x~ 1?XT"
B{R fW5I̤$`2_.
h͛meKoCoMFrq8F5 }>Myw ˎyCRm,ޛwy.ƞcs#2IL> Xg:dwM.0e-Knj0dk;2(X..!3S>Ṁ7e]cfCzx_vjV$sF Hpф$B >&҃g]!#&
X@R\0+'M`Gx,Ѳ`aFpTaMp o(}.4h4b ,q5ރ7У|y:v g KH֝WVq"V,'2"Z+o1)h16H7Ikp>8]mɇ'X3;NichMjy c7Ԛlbp.;.\糜kP:GC1s"d® ; =MHl~9S^zN KTQ8({ dD%5E1kiCه}Ҡ'
d ,`N"")7A VUV&d!j@JQ-a3P" U} /YʣnP2exףp8f8
rnw|Y)ĴdRjռ}˓+ ,=߂v9 ǣHJ6~zv1f}'Ma9\'KSɴ|'i&yw{ⴈP:\ßGܷjL&ʦcB0^T]_=T ^`7̐i>seQ,raK,?C5w冎9MŕZJV(`lg%CtJ f *8 `[m2\$< g;.^M};#>XֵsrG7B!`C+S5O*cɏkʖ@Lv,R;2ѣ\*K2:/Lq>oXYΊZ/!|k3TD46T+De@[7%tE"26\qRE 'Z
1 C|,Vꪍ n{U(vl9(Cfb,WYZ-O7
\FsTFye]ztfR :wW_>wD@'^l 'ڼH
LQc@ۘxb0^t% $o^OxI½TG"zgLOn7
[k/k-C#|&Pe_cӥcC +eTSv/ɐaS"g6leĜ%UzmG;aDaBUӷK>1@MBhM$=${"5gwVE6j*q~"F]-?Glty(2]B)5t4bb$7U7Qt>$TST:7\[)lz+yW!З?@L)oyh*}k=aY`ε\<Ð7-2ė煨_8O pI6k H/Z( K'A'܊F$]Paa }i(>س
4+ yb0e4Xx}b]ȷymɹ"2e@A2)D1et[ё$|&yW5]ߢ (ĕ
ΞUr[&hR
Yl@ [DͰSSV`Ѯy$868[ 3rWh"$ƗOēfߘcB% 4'ʵ8ҴFIN^֗l[;kQ,J "r gq_FN)xbd(ζF3
^jnWqN'^גήbE863qw<ǝ;+fӵiVlQIХwZnp`uF"w A:1g[iq;-^WB ;C>@} Y /Ƿ 9&&0 ß|ḏq \A9Wr
,]AF |CM7'Q tgfxeYbŒ,ݻ"M1. Os4p>o"QqLŘwAˆ GEW`hUi,| 5laP$d]l8E2t^xqZ@dCMw1C3U4vgC?[㚿07N^(=~Nam\IK"
w}KJ.,[;kCH' `$5Su3>[(>;JA\GXT5%c@~(*ul9wÐ$2yc1彝n'KB9,lUIએ%.F@ 7e5J6
k$]>inНUޓlA7qUa6*aNYg`78OւX.
z`
ȳEc\I t_YB0LVsWKq
pKkx6J8\@
`
>CCODz8zhbL !
QA&$UX-NRoxO۞ͳ
> ##^[]98Ycjb Qj)spbnMbWi>t5o@AL$;b{V>QHcKCQ5E_ UEFND4㻝K罞E0xwC0194(#抵-y`
?Ikfr/%<
g§
7 %Mi<ś[-/@3g
@w>G8We %KnfVS4rLp1r{]5gҼջ4N6{f"
]: \B*\ R3ĩIԉyD D7nMՐ9'Qb3&)f<:W3?sTi/Z0<4 cs!slv {ll;*uтeh_({m6FMmo(-~zvTEA݉b29Vw;Ɨy ϱ'&tD3ZkxR,Y^u' fwN&^^ha_(2lG!ww+ t^f< ӒYcӚCvL$GG{
Vv h 1Ah{
9xUY 澅yo`8A OdN'Sn~ S
T LLkWW<~E:l`R\jmc@ʋggt5F{HEдm!¦ڛ={o}
((
)mF4?T0 ᨉ̽zHʵITRn{ ַ|M}ܥI|ʳ>\Lö
؝Kȇ0L? 4K k4E&^BRq"M:f/b%{`aD돧oTkWď:!X]лVG]zS ~,R ?y'E0-ho
e+ o L. $ 'Y 2>cφ 0x%#2@
ҳgd"ԡRxP768Z$YS8lj1J&gRB6]H|=vG}J a߹Tqzum3pL"weNa-smdǴo$ 6/9CP|{c;u2\I@8u)}ȫ
G{h+)7v9E7 5}Qmxfd|gAsBiqՀ^xhLpS\Cgij1+ wg 7:#hLyk`t2ln>Gf`+%w "
iT TyF騵<5|oCxC*/s;N?(uеŁMA`$Dx-]bߩĽ!<Of TD
~1)PEЬdnv V p
; .uzQ
gjHG ;1@7хGM/nXF 1lA%070֦D\^;A萺ouMRh,O_:@L 1*xM7sg]T 'Z3&T :LIe3w?>kx;}(|x\Ye5.إu@B~/JF\%}Jҵa >Wj )^םзf+J*20s،MHi}zsW8B>=5nD7W'Fn_3? 9{7 ^Bb~ 1-yq#b kĬsp[R1Q,K=u:!7 7< pL;Z[fHXuj.5;Sι F%1)#um^m\~/R3 99/xUhZ,+{+O$T_W&A % m LZӏ-^ әV|Ep)|dńEEdi&Ee/GRB!&`}0Ld]@&+˙cXLB" 㜥e1~7 AiC\FT3'aEE$\0y sTɽjf?4'bP7͓j(fmf -I;A]f&<)W>ϫ7N![i-q%< 3*uVe `
/栃9 ܐ/ īŻq0Wi7w&0HÂ9 \⓹ȡ4VwR}x`urYAs>OgA8{ !+8QM+r7=* nS @{j"\}=~V)0_9ONOHNW5 9 <V{\ď]=r̴[-i+/5ΰk2cbwlrv3Emi_"ݲY/4peqaƟn arNIXROGNnc+)STPf7Fg/ϺIsa4x휜4dۑGZk|OߢA,3 &tzbPd7obN@Ǵ/EX.ܦRd&vr\DR"KAS !q#eǡ1i MHwh2^= q阵a@FC9NDOKTx
ΒXOy xx4M.!Fo\ Zh]n/2,xAsU#w8S:ے'o7f8I8#ZUYq
nzV4t!|]/'\LYTmxa1+1jw
QiO*Y5 < Ffpx< fv@[J
BWn:B^W'WU2E2Ku=鐣KqXҏ}KVe
Ȇ歌 %7.RWXߴ.X'Ι3Whh
?i76Nc!j/aW>ʺЛ0)$D '#X+w I$Z/8Xβk6յ-莩M~˥b=Xb xgד4oj w hM/RA
qJS;oyeYX0璁:v
d{9kz[TY
G] nA*ϬJ qp za;,PX 5oQֶp% b
Q"sRq,-WpepUaf $Ž i%O2JH" &
x;uCa)8 Vݑ ,%o >]O@y^scFދ=ۓd"(`r֑/w[U%>zr/!/g0$ࠏ}q,6`|c)d{ {j{#U$\ /z9>YUGt ,PsW0p u-V@ zB;9IjJ +m37^Yu?:?jKF%3':\z8
Bh/ LMMwǓfFVQ껟AS6xC
`y`o<)LֺL*}#^џ?(C^
ba0328}Rb"/rABd` j DX(s? {ƑRB u gfQT/̬N,NGaiUl]/ѣ^?Xùx Ui$Iv+D7(± ç);[iud {6 ؋a]T.8C1ſe\ɳI: ^ 8/ 35w+N|鿼!%hg 3jZі;"c@یnf.!/3?~0˂ư63,o Z~yZ
f3,V#0aZ!2*מ Ծz=%s{O
n
e%`_ǔޓae^13\)d-Av|{!| Riļ [ xӪpe*1gOXѨ/ϗRZ/ M^lfDk4hϾ>x#Q46逸VJD -; ɯ W
_2ϝ Ю Ǝ[ca>eHH{,؍)eۦ
@f 92ܴq: B@E$JX~ЦQE,iWM[""Wav0%n h+j@>35C s}$d|ܸ-3L7*)]:*^9$8ƩhuN?:&{b4_W媬% wB AM3}RҰћi :"4 ڜkp)D6qhG \Z NiJMSASeB-j)¤V#XFu
YL"&ٓ}]u0eN=wv+x[XPF'/U #7:}q# }fՋJ)Ց˄綌h;I^b0<
5KBdgDsQa=E
=#2=Lx& %Wk%MN{|_f:0j ;gOԚkŊzjEVMCR)[e!Z[!ͣ#QVڑ)]&VljFUK±"Q:;TD8O:UDFO]2F HA9ZCL$!bՒ͔\шGΎd* pq,O(qm]|
ЎsC ~YHƞGic"wUc Ez i2Ԓ2;"2K0o8J%)x١[mR2Zi8@6ZBoQzo z*tahJ)1?cҮ#I}7/y01"+ Uڎ
(ԂF?heK
t:dנZ`M!U))`i_ӯ^ڗ<$FXdb]551
25G=Xn@!}ꚠ+(H ml
8uƲ(Y8'[[1 peu{G \{U_VxFIaur=IѦ&s7 䫁g28SqML-;^&+M}i3褃tp [a<=}Poݳg
;4q9\i:t.tSuVgaCvN#Yjcb<aoeM
p{ar/ s] qtREJ28,\%`١BHyH_s|}¹EY[Uę8 'X
r K*!Ɇ;/wT=,4fYᷥѯ~=;O .ĩ39Mc3N& lLGhf1 x\A) "iOŔt:X>yPa hӚ@к1ئOyս-!1bwAay=Y82|6zzQN d=ΒEZb3O%^ʎl[mX l <^< 6Z1X?18&n^ hY lJ+'vNHsvy_'P:d!ڢULPK4'^5\6l ~w(&)`M G@_ltO_GU吰m%t*IR{^olsC 4JúCFK =
"42oPֆS;Z϶ cF 6}4
.ȉ4*
YD
*B|)KNO:k-9]|U:F
]*'ZTqz+//lDǴ[# A,s Ж@7T:M77E ɼ *Nx]n
hWx
1-/<9x\*z(hRv5c /#.U1* 7SuXv3'z!r+kyLW5qUp;@!U" kKT$r%U}jg! SfUf:Q? {( EFD;dFSa*_/:WPOBߦ$A>ՙ8\m;jDO@p[i
)dO2b(e衊(I[f2QP[d+cphܙW" mGF_nހb"R@r̠VtCAFE B >Nc^<谷)<3e
?ўB Ӏ@ p Jy^,8kGV66~:ntnh5M&f.r
3R10*")֎[|0n\^+)TVK> 4# mb VֵYf=OFn6E%9lq\SSE D:_zO@ȯFB#UlQwASv >j
hI;/(ѐbвgIJ4LFrq뛈}B1eQ·G B֞BH{[_4"tui-? = 4UEo5k E9Fô @Wڋ-wF@X֗b)@ w3!sD!vC#?0 $:%r=+GIN*9%C}87\nȆFK!x r` eRNpŧ^TE-RFtXc`vz 9&gvѡ iRߙ?O$Ov4 t*:wcUPiW*|߉sKL 6ͲS;_}÷?t~Y `O64b/`WUdTfϿ-?^`c`?TgfԒE@cT@"kfNjT u@ u~, "!S卋5U kc9V3Qu|fXBo;ʭBd2-xm=
EM;J<_\c"biجYyߚ+V\o ͭyVw\ f;%m0 Rs0 /E0vH' (f;^vpe}(Oޔgv褸9٦5W]zJ+n%4 37Д4a^W sӗ%Amm wk0:a ՠ3o A
| 1o(xvx}Ub;{~y"]0lvYgL~NKg s*TVS}pH.]w~ b 6;#`l Wl S'1U0 a3ǭdM Z QS=VBt=\LޗReB4
"n!ɇ*: e4;WͤT`AVi>@[Q2捈/2>_?d6#vA?_?k noN4 Mu,T@3JOj T]UJ mE5cL(0[d_ lPfbWE bu_⧼oQyՁ&)}BcSCżH;Y ҿf9 Ӳ7D}2叅(¦#LJQW*fԜb,-ٰ?2LʋwO6:wsB;爻\ZɄR5##G\__AZU
a WGz!Xn+)yS-\iOG㤛1bg3Z=,e%s1UaNׁi6 %q OA{o&PK=Q| /f}AʃZY ϡ ?w#W:wLw UsE36hᣉ;vj䙭Z טS 62^scm#"ho*Ͱ?aAmdf[u+}wjU0?`N/" QCYs5 09i0 r
Vl.qe\.:RT xljR;XiLƌ}pIZ{w!yDخVz',+s 4]K2iDI e
k,Ժ9VB(s kW-xryƴҝ2A^(iD.Sl9R1Ƈ;!3. DIgٙPnN ^7ZT^ ceP(, whS&va>ϰАRe61mf70cвx/A
]/
>Ci KCEcRpȴ>4ݙ-w~ávs~ݒv!jC3 \yj=s?\kf;}&CrcyO՚~Ct4@ )ϰk3UnP/`]nyh6vߝ'~KW[c xVʋpMeGc_߸ оT?V끅R8.݉GW ,B(C;vNd; 2R)R4D9[bYjnxPx mth Qu@G gUQ5̭Qge1c t`ȶ-7?hi\ݠxݬ42 xin _].˟ X٭d'E)`w!1v 9ZVFC
X\#:p>Hbt SmH%gB&p5QBeW.- [ޠ7& "DPh}͖faRi͌(婚M Ŵ5ţ9VW2IA oeeYfa@dN:pl7 `ں?{J3խ8\A r}1U{-RP?/K6S^q-WsP9*fӍkj{0 9mr0D)?ץ |6-պV۴Ѽ'ȷ+gdF~ a_,$зsjx|VD/h`pl#M9.KZSMcy.2MBX}!Ղ-ๆt{_fS_H= =Jbd[X[jt-U 1/hQ@@""|6^u P\^qF|*|;i bm
]N2H
4 T?"Rǝ%{0m wߣIu;f1 -ح3K|lN+NWr2-I=rNdޕnu%1+ECNjSvnL&~ >r46RBYP"K[bݺe=t[
ïA[=0t@s4鶕AGQ{dqXGYޞ5j-f?4/xݬ 2_,I t!h
Ȭճ
M*uf#+\E"gJzx^Lp-<*fYڥޝd
DaZ T[
@ؼ~qѕ7vL y1T BoO]C u|چ76 M' oQy!mD-A~ 6yO>)O7Lngz:at֍a5T7; )<& , '7%Գs70y~n bPb7qO-bĭB샱1Iy黡Z#Z
"u/0#iZA6q#%ד;/ Y7s H*(鉱UئRk/v<$=l§W (]AqwܪWCBI@&U]437#R2 {ɀL~0 N?XKG!Y-tnii˯IIJ*ƿI*.ZNQ_qe֍YI yM0e|FA ZB =Y/}`I)_;Ȭ}'9]2[J?o=ά/cP-#vt=2JCo.c\~
6ݧKV)_ :pb_jG Kj
D}QiHLҀ]`*n"n1X$ݴuo/%XoQnShԞ6j;V&X .$cs8Tq>)uj
N¬cP iAvcD6 T ?,BiogS9Zx(sqg۪iU% ]&iv<
YzGDKߥO߶fs*}I hXC~ΤoB# {gྚ! Oxu_@j
)9i3>q&haD+Cs:=Z9,en
UX`.+a#tƶS4T֩hmN 5 P$O /!n["ŬzF
ĥe8]j6$MGLpD{dN,ꍶ E]hoCY Md\CrG =R5L٘ofHa/To2NnR+~6_eǝ+)o
̫PǬ3% 1HVg[]Lb#Py("D(n4Rmz X]iC7xMigA\g+`:w]ETۃ'8kQY}`c<ޤt//xy_
&ⲫbL ^k~{2q8"f,$rQ
tS 6 A hi'fd/Wd=51י {,٥m)+*N8}"!myݸһb#j8a2 a|2J6qFtF
Y^
1{ Z ouyG;Q1/ŬM)D/<]ՈoRU_kM:ol!ބ16P
ʵ1w)ahy"Ðv9 BtMyk}m\Uߒwsfo+ʅgW1/DZ~M#2׳dq>*ϗ Ѐ&%HK)s0z=Ym{'U 7s@l˲5Ⅱy1I`9N[@$k I̷a6V,H́ A4 (^sT_-NL2K {GJAc\q{;tu0a GYӮUJЛy##1E{}AlmRc\F;Ą q-X.ԗ,s!bj)9aA6C]MAg\ IYV , L2G$4'5r5 U$6SdiGH }1 ?SI|s!Yx1!VV$:^ b=bEC-[YZ 1M*YH~^?~ĕ% 4҉mBk?D tTuWծ !\ޓ|xl3+#rR.l*S0{F7#Ri@r#^._>,<( c V>0dV ݪq=o|gV[-MG$G ]Γ[W v+
9+Oþ-簑 cMGdpHiq;\ a!¹ZSˢimq
wlkU^Ƽ;q vB Z)i nA}Lo啣9q
%΅, :T6JGM&aGc?FBR ڬvi.):K7J * aۅ&
=&Ao|0ϰ%X%*
Y%9"H#8\Ql^yٯu-'ðY1ocrވ ϧ0̉.yp8r /qmf`oa Qk+$<|- AޅØQƗ#U%m|z d-^Zg?!bI
5CEB8[ff
4RxIUy|n5=;t:7U=Z*ۃ$dd+~C,JM3Zy'%<|ojH4 xÖR@WtS ab: a'ێFn2dhA<R`N|Wߵ@=EPi#G6 nn6IηC\7t!yp7mg
iʥ>oFac7!-~oޚ`䌢R0%^۠GѭTO0T;peO1I 咃-4^nH.ZWڏ= [@@,
S,a2P [`6~k *EStH1l4 6$1vx[>oR l[nL8bo3ґ-u8VkHѩ_":ܟܧC,JN3yhOٓ5l5/@lU ʣ C$ )cKD
bwİaC#h{.=tušP.{e^$#vTnNv˻VԵ{G$#LeZx5mLy=i^-S-2
wCd~'q#u{Yn+Wnh{ ֪*_])/ a wY!Vd\M?
Z 6-$rL]r p< OU/Xn5A!H&dQp)( eۯ |7]5G֣ _m!
>:Iǝ(!2ʈ0KKTM 3E]3 ^S>UmWl[O^֙~q}_QYU.4:#:a^!iw]/C ҆ (N*z,paRa#&}0:<` 9XllQpڱGp߮KQD$qʺ${obX3xhz ѥMnZxWO 3Z;Xx:_{ǘb\=3zLVCx2OT<;h֠9MTF'cXh0ޝW/ ϰt ɹ2 >N|s
jNh|nyI/0 ꃮhC]iP ʚ6WAt- EUzJUvgIvr>Q6*KWE&1yDeF8i7**1m8o)@%=6s60 `$](K{ Z(
h'AV!kCL,A~(PR+ja~ !Sp Q"x F1 ?MplJПIl&RehfS nr /Tg] /weO[T 7@M͔g* paeR Qq-fm\ $ 8# 3L+ ج<1Q0@ $a(vzie
%\C'QvӢа
ΛZNt$]#H .xC' ۪(RּiVn:Y liE|0ҍZ {yan'&UԾZxXIV+xM;&< 2opĽIOgTUJzSgS .Ò?ʙLF<sa
+OIO%4>*η3ʒU"'isP mEwY/MZB?9eg!n ]*J':[ ;NyE v& %N_%Z5L -4d-ܼ~m 5'y q -ĽD{]WBR/u|dAzya!1
+Jb >,kK]qq]# /tBTq6g |]ic)K'Zv]SƒA ~K U~F#ɔ 7P |O;!q%.6R %?>A{*ċYvRuoo9}f| g%ȂlIuP鮣?2 6N*q>X<|Q?dTl1]*+*
Q -& I U2<;h܇֖uRoOsX- `¹ل1qg
y+~ū sӂ , / Y[7K(dSc
-*0@Lm#)u}ƕ"iO, %πTD~ge qZ sh KL| ; A{ fay南j7lT͎m"iŇgbHO;.r3B*
PСypQmFهϜ:K(i #Lto aMo*sY4f~3*Ss:j2I >9#.(U/&o0Z1ҷI{) zp?_%ӓY.J;.QEYf=T,
I I#$[y
.O 0DX
4EqZg~a~ͯw4 Lb;҈u٤OrLRyVip
t-ѥyLW[_DJGbG: ۉ#; ]L2GqYm !IzuPX5I
;;fs@B>eMѯ_Ĵbٹܛa#QNk'-PO-L>=';9]qÇ B,Ŕ[rS]7;ϗCu!8z30pD
Hř+j18W7,vJ{fY[S+>_^d8,aLz X9\VO {ꦥdԡc L4衔oer"xzy_K7Bq Zh4|7~x[*RȂvE* gqMS]Z"ΕK-`+ ݰZ"磤`iSr%Bv=]~-
[ 4$ _)ˠ?yVseQO߂U/,,
CZ~*c;E`nd^yJY
AaUSڛ''J2Š$[m\Xt)#P'|ڽ
Āoj绥 zƉ0z"|k?ȁb/$H
-NerF0e`h V wӝ>h y"Z1} tSfdWkw}Rcv-2 QGBҍo49~e
o ܙ_)JcHҶy^!j NZoŧ%]O(P"@ڻ>$ 97\7' W[j]҉g ݞ=jE,G14Ơh ѿphC9%#HJՂeh=N)Q%1Kbާ;rs >gT*?X(7";ܦߚ-TL>ÑJ:5k:BymaFҹ& *u~
PC,awQBFVkZrs1(p yp, :C(f[
F eW|(e*a 0+5AqXinI¡yo:xSRx>qB;V{k~ףy! qkpMDQO
h
jLDjI'%,s֢Ծa]uւwJoUiЊi'Ʃށ&
W/ F .n7c>Y[O :)b,[Xpa(nIdS|g.L ئHa{Z ]:h ;z4Q].u[I$?k
3}Qҫ+rtϒ%5,g}MYFT}
"pLpo_G&ڑ =짛/QÓѳ
)3mXo?ޙRT5 \M.X3( 6,"Agn
oss}$ \.^vuO A(dcmp"7j\[\Jˌmf/bn{ γO_`t;wdѼ;KB0V\Ύ_ 9~WF-7ejtGE
)05? ҺzUwWo%eMw:h9 haޘƦ7>]D Xt
;'GKHL,s,rpk͝::_G9bɄya_X@E;aoWH%Zj|ŭʹ(N7xSť0PjFTNO\ NAH9ЌJ\XlQf>, RBlb0̼m.,-F+
if= `l$ QTzr#LdlL!u}2}Hzt[9!WeX~2`?P=s(\%y 8NI6h=̙I_,Y~)B\[5oc9c>p \@?o
#~LF]ަ_>.:?x5kT"Z !W(6U8)Cm}!t 2'bg
C6Hd9w&֙T|//"?kkҽȜӼux @vW~ G4w
ܹSR\ϻ䏊{ls +er`6\,J\0P^yNH6N~lЌY ?Lpn3\fP
ɣ~>ͯp 9CCTwZWwU@vT|32Jd>=5%5eu@asUmTX_G4q]#6ms
(*f p*ᚦ)yC[{2#ٶer")>6fYRm Fxaۙf˯Unc
mBLU
:_e=5Yy{um-\*T/3<#2%"U
5^s ]Tǻ ETMrı,)SHC
jmXj)p$w dV spK救Z|&;bX)$qy_ۘoco #q2K`c]e#Dv{O4gPlӫ˩@0?Il/h|!:hOl]J40;BwbRj랠/o꣑O< ^*{g |Zx%
MpI런DUo! [mM.{`Ev} X JrlQ?\Tc}F ~ݥitIn `69Pк|Q G&tma.d
PmկZ!Eye݊' `"/GoXj=R&:^g!
b;N'6B7Xym]߇}<9> ѦΧhioBdRGϜ]
wHa-Is/g;pg Dtm,=10]ќd
'Z|2^%tHv S$iΑw&H_AblׯПtI%6/8cɀ^P.%/2b $2٩A/I= ̖UceS҂V"N'|e)ƺZWa GohRikۼt !Wt
v=Oz