389-ds-base-devel-1.2.11.15-95.el6_9>t  DH`pZz FFuse-lU~eMLbfPQw|9 ]~eƔ1+HQ)9A~sEgVWX p=Kc0*8مr=6°I|L\M@sشd) )+dbc|43D38f'%"r C(ѢG e0بyĽ9*U|\܅Ȃ$ooӦ)HΨJ;CMFG"ħud(iu?*ddSEi3JTi.j1ؐ!8о. os ʺSbqPTm޿8,ӼRӂO۳/-E `٧$?A "ɟ#o͖y@o1t3{WZu cYaqCDy1S*&}T$Zl'GBPZ-ak&>=܏5W5ߨ%=7nnK(ndG͊`j|ʫL"!0x;wGisR 79b998b3658ccb064818b41839ac76c47c590720MZz FHό@\K BWÌWY 3"4<0Z2\L5A^D{"u90)".d<RgeL I\|"h]a˖sG,n7S_Țj:s71[ĠW! ٤! @ϝ,JOXi↖#9fҳ #u>6ذrP&d Յ~&+<^Vd54ɣN {ʓj`n JelVTٵZR=Kٜ0#JFLmwjTRnq𐑓ګsCv&z9O{z0![O^v3{5y7|')V#;{R7I(h!!>b9U0Ty,kܱ/-BItr]RuDR?\@/Uy(-oaG OZH)n.C=x5 ^ܡ{SV $>8N?Nd ' V  #;AH t            W  $ X H (8 9  :>} GJ HK IK@ XKLYKX\K ]K ^LPbLdMreMwfMzlM|tM uM vMwNL xNx yNNC389-ds-base-devel1.2.11.1595.el6_9Development libraries for 389 Directory ServerDevelopment Libraries and headers for the 389 Directory Server base package.Z2Kx86-01.bsys.centos.orgCentOSGPLv2 with exceptionsCentOS BuildSystem Development/Librarieshttp://www.port389.org/linuxi686]<&FLA큤A큤Z2 - 1.2.11.15-95Mark Reynolds - 1.2.11-15-94Mark Reynolds - 1.2.11-15-93Mark Reynolds - 1.2.11-15-92Mark Reynolds - 1.2.11.15-91Mark Reynolds - 1.2.11.15-90Mark Reynolds - 1.2.11.15-89Noriko Hosoi - 1.2.11.15-88Noriko Hosoi - 1.2.11.15-87Noriko Hosoi - 1.2.11.15-86Noriko Hosoi - 1.2.11.15-85Noriko Hosoi - 1.2.11.15-84Noriko Hosoi - 1.2.11.15-83Noriko Hosoi - 1.2.11.15-82Noriko Hosoi - 1.2.11.15-81Noriko Hosoi - 1.2.11.15-80Noriko Hosoi - 1.2.11.15-79Noriko Hosoi - 1.2.11.15-78Noriko Hosoi - 1.2.11.15-77Noriko Hosoi - 1.2.11.15-76Noriko Hosoi - 1.2.11.15-75Noriko Hosoi - 1.2.11.15-74Noriko Hosoi - 1.2.11.15-73Noriko Hosoi - 1.2.11.15-72Noriko Hosoi - 1.2.11.15-71Noriko Hosoi - 1.2.11.15-70Noriko Hosoi - 1.2.11.15-69Noriko Hosoi - 1.2.11.15-68Noriko Hosoi - 1.2.11.15-67Noriko Hosoi - 1.2.11.15-66Noriko Hosoi - 1.2.11.15-65Noriko Hosoi - 1.2.11.15-64Noriko Hosoi - 1.2.11.15-63Noriko Hosoi - 1.2.11.15-62Noriko Hosoi - 1.2.11.15-61Noriko Hosoi - 1.2.11.15-60Noriko Hosoi - 1.2.11.15-59Noriko Hosoi - 1.2.11.15-58Noriko Hosoi - 1.2.11.15-57Noriko Hosoi - 1.2.11.15-56Noriko Hosoi - 1.2.11.15-55Noriko Hosoi - 1.2.11.15-54Noriko Hosoi - 1.2.11.15-53Noriko Hosoi - 1.2.11.15-52Noriko Hosoi - 1.2.11.15-51Noriko Hosoi - 1.2.11.15-50Noriko Hosoi - 1.2.11.15-49Noriko Hosoi - 1.2.11.15-48Noriko Hosoi - 1.2.11.15-47Nathan Kinder - 1.2.11.15-46Noriko Hosoi - 1.2.11.15-45Noriko Hosoi - 1.2.11.15-44Noriko Hosoi - 1.2.11.15-43Noriko Hosoi - 1.2.11.15-42Noriko Hosoi - 1.2.11.15-41Noriko Hosoi - 1.2.11.15-40Noriko Hosoi - 1.2.11.15-39Noriko Hosoi - 1.2.11.15-38Noriko Hosoi - 1.2.11.15-37Noriko Hosoi - 1.2.11.15-36Noriko Hosoi - 1.2.11.15-35Noriko Hosoi - 1.2.11.15-34Noriko Hosoi - 1.2.11.15-33Noriko Hosoi - 1.2.11.15-32Rich Megginson - 1.2.11.15-31Rich Megginson - 1.2.11.15-30Rich Megginson - 1.2.11.15-29Noriko Hosoi - 1.2.11.15-28Noriko Hosoi - 1.2.11.15-27Noriko Hosoi - 1.2.11.15-26Noriko Hosoi - 1.2.11.15-25Noriko Hosoi - 1.2.11.15-24Noriko Hosoi - 1.2.11.15-23Noriko Hosoi - 1.2.11.15-22Noriko Hosoi - 1.2.11.15-21Mark Reynolds - 1.2.11.15-20Mark Reynolds - 1.2.11.15-19Mark Reynolds - 1.2.11.15-19Mark Reynolds - 1.2.11.15-19Mark Reynolds - 1.2.11.15-18Noriko Hosoi - 1.2.11.15-14Noriko Hosoi - 1.2.11.15-13Noriko Hosoi - 1.2.11.15-12Noriko Hosoi - 1.2.11.15-11Noriko Hosoi - 1.2.11.15-10Noriko Hosoi - 1.2.11.15-9Rich Megginson - 1.2.11.15-8Noriko Hosoi - 1.2.11.15-7Rich Megginson - 1.2.11.15-6Rich Megginson - 1.2.11.15-5Noriko Hosoi - 1.2.11.15-4Rich Megginson - 1.2.11.15-3Noriko Hosoi - 1.2.11.15-2Rich Megginson - 1.2.11.15-1Rich Megginson - 1.2.11.14-1Rich Megginson - 1.2.11.13-1Rich Megginson - 1.2.11.12-1Noriko Hosoi - 1.2.10.2-20Noriko Hosoi - 1.2.10.2-19Noriko Hosoi - 1.2.10.2-18Noriko Hosoi - 1.2.10.2-17Noriko Hosoi - 1.2.10.2-16Rich Megginson - 1.2.10.2-15Rich Megginson - 1.2.10.2-14Rich Megginson - 1.2.10.2-13Noriko Hosoi - 1.2.10.2-12Noriko Hosoi - 1.2.10.2-11Noriko Hosoi - 1.2.10.2-10Rich Megginson - 1.2.10.2-9Rich Megginson - 1.2.10.2-8Rich Megginson - 1.2.10.2-7Rich Megginson - 1.2.10.2-6Rich Megginson - 1.2.10.2-5Rich Megginson - 1.2.10.2-4Rich Megginson - 1.2.10.2-3Rich Megginson - 1.2.10.2-2Rich Megginson - 1.2.10.2-1Rich Megginson - 1.2.10.1-1Rich Megginson - 1.2.10.0-1Rich Megginson - 1.2.10-0.11.rc2Rich Megginson - 1.2.9.16-1Rich Megginson - 1.2.9.15-1Rich Megginson - 1.2.9.14-1Rich Megginson - 1.2.9.13-1Rich Megginson - 1.2.9.12-2Rich Megginson - 1.2.9.12-1Rich Megginson - 1.2.9.11-1Nathan Kinder - 1.2.9.10-1Rich Megginson - 1.2.9.9-1Rich Megginson - 1.2.9.8-1Rich Megginson - 1.2.9.7-1Rich Megginson - 1.2.9.6-1Rich Megginson - 1.2.9.5-1Rich Megginson - 1.2.9.4-1Rich Megginson - 1.2.9.3-1Rich Megginson - 1.2.9.2-1Rich Megginson - 1.2.9.1-2Rich Megginson - 1.2.9.1-1Nathan Kinder - 1.2.8.7-1Rich Megginson - 1.2.8.6-1Rich Megginson - 1.2.8.5-1Rich Megginson - 1.2.8.4-3Rich Megginson - 1.2.8.4-2Rich Megginson - 1.2.8.4-1Rich Megginson - 1.2.8.3-4Rich Megginson - 1.2.8.3-3Rich Megginson - 1.2.8.3-2Rich Megginson - 1.2.8.3-1Rich Megginson - 1.2.8.2-1Rich Megginson - 1.2.8.1-1Rich Megginson - 1.2.8.0-2Rich Megginson - 1.2.8.0-1Rich Megginson - 1.2.8-0.9.rc4Rich Megginson - 1.2.8-0.8.rc2Rich Megginson - 1.2.8-0.7.rc2Rich Megginson - 1.2.8-0.6.rc1Rich Megginson - 1.2.8-0.5.a3Rich Megginson - 1.2.8-0.4.a3Rich Megginson - 1.2.8-0.3.a3Rich Megginson - 1.2.8-0.2.a2Nathan Kinder - 1.2.8-0.1.a1Rich Megginson - 1.2.7.5-1Rich Megginson - 1.2.7.4-1Rich Megginson - 1.2.7.3-1Rich Megginson - 1.2.7.2-1Rich Megginson - 1.2.7.1-1Rich Megginson - 1.2.7-1Rich Megginson - 1.2.7-0.7.a5Kevin Wright - 1.2.7-0.6.a4Rich Megginson - 1.2.7-0.5.a4Rich Megginson - 1.2.7-0.4.a3Rich Megginson - 1.2.7-0.3.a3Rich Megginson - 1.2.7-0.2.a2Rich Megginson - 1.2.7-0.1.a1Rich Megginson - 1.2.6.1-3Rich Megginson - 1.2.6.1-2Rich Megginson - 1.2.6.1-1Rich Megginson - 1.2.6-1Rich Megginson - 1.2.6-0.11.rc7Rich Megginson - 1.2.6-0.10.rc6Rich Megginson - 1.2.6-0.9.rc3Rich Megginson - 1.2.6-0.8.rc3Rich Megginson - 1.2.6-0.7.rc2Nathan Kinder - 1.2.6-0.6.rc1Rich Megginson - 1.2.6-0.5.rc1Marcela Maslanova - 1.2.6-0.4.a4.1Rich Megginson - 1.2.6-0.4.a4Nathan Kinder - 1.2.6-0.4.a3Caolán McNamara - 1.2.6-0.3.a2Rich Megginson - 1.2.6-0.2.a2Nathan Kinder - 1.2.6-0.1.a1Rich Megginson - 1.2.5-1Rich Megginson - 1.2.5-0.5.rc4Rich Megginson - 1.2.5-0.4.rc3Rich Megginson - 1.2.5-0.3.rc2Rich Megginson - 1.2.5-0.2.rc1Rich Megginson - 1.2.5-0.1.a1Rich Megginson - 1.2.4-1Rich Megginson - 1.2.3-1Caolán McNamara - 1.2.2-2Rich Megginson - 1.2.2-1Tomas Mraz - 1.2.1-5Noriko Hosoi - 1.2.1-4Rich Megginson - 1.2.1-3Fedora Release Engineering - 1.2.1-2Rich Megginson - 1.2.1-1Rich Megginson - 1.2.0-4Rich Megginson - 1.2.0-3Rich Megginson - 1.2.0-2Rich Megginson - 1.2.0-1Noriko Hosoi - 1.1.3-7Noriko Hosoi - 1.1.3-6Rich Megginson - 1.1.3-5Rich Megginson - 1.1.3-4Rich Megginson - 1.1.3-3Rich Megginson - 1.1.3-2Rich Megginson - 1.1.3-1Rich Megginson - 1.1.2-1Rich Megginson - 1.1.1-2Rich Megginson - 1.1.1-1Rich Megginson - 1.1.0.1-4Tom "spot" Callaway - 1.1.0.1-3Tom "spot" Callaway - 1.1.0.1-3Rich Megginson - 1.1.0.1-2Rich Megginson - 1.1.0.1-1Fedora Release Engineering - 1.1.0-5Rich Megginson - 1.1.0-4Release Engineering - 1.1.0-3Rich Megginson - 1.1.0-2.0Rich Megginson - 1.1.0-1.2Rich Megginson - 1.1.0-1.1Rich Megginson - 1.1.0-0.3.20070720Nathan Kinder - 1.1.0-0.2.20070320Rich Megginson - 1.1.0-0.1.20070320Rich Megginson - 1.1.0-0.1.20070223Rich Megginson - 1.1.0-0.1.20070213Rich Megginson - 1.1.0-1.el4.20070209Rich Megginson - 1.1.0-1.el4.20070207Rich Megginson - 1.1.0-1.el4.20070129Rich Megginson - 1.1.0-8.el4.20070125Rich Megginson - 1.1.0-7.el4.20070125Rich Megginson - 1.1.0-6.el4.20070125Rich Megginson - 1.1.0-5.el4.20070125Rich Megginson - 1.1.0-4.el4.20070119Rich Megginson - 1.1.0-3.el4.20070119Rich Megginson - 1.1.0-2.el4.20070119Rich Megginson - 1.1.0-1.el4.cvs20070119Rich Megginson - 1.1-0.1.cvs20070115Dennis Gilmore - 1.1-0.1.cvs20070108Rich Megginson - 1.0.99-16Rich Megginson - 1.0.99-15Rich Megginson - 1.0.99-14Rich Megginson - 1.0.99-13Rich Megginson - 1.0.99-12Rich Megginson - 1.0.99-11Rich Megginson - 1.0.99-10Rich Megginson - 1.0.99-9Rich Megginson - 1.0.99-8Rich Megginson - 1.0.99-7Rich Megginson - 1.0.99-6Rich Megginson - 1.0.99-5Rich Megginson - 1.0.99-4Rich Megginson - 1.0.99-3Rich Megginson - 1.0.99-2Rich Megginson - 1.0.99-1- Bump version to 1.2.11-15-95 - Resolves: Bug 1562152 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch- Release 1.2.11.15-94 - Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (fix cherry-pick error)- Release 1.2.11.15-93 - Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c - Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c- Release 1.2.11.15-92 - Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c- Release 1.2.11.15-91 - Resolves: bug 1437777 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages- Release 1.2.11.15-90 - Resovles: #1435365 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax- Release 1.2.11.15-89 - Resolves: #1421512 - ns-slapd crashes in ldif_sput due to the output buf size is less than the real size.- Release 1.2.11.15-88 - Resolves: #1413692 - custom schema is registered in small caps after schema reload (DS 47973) - Resolves: #1408976 - dbscan-bin crashing due to a segmentation fault. (DS 49104)- Release 1.2.11.15-87 - Resolves: #1391701 - do not treat missing csn as fatal (DS 49020) - Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)- Release 1.2.11.15-86 - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 49049) - Resolves: #1400997 - ldif2db.pl script shows wrong usage for -n as instance, instead of database (DS 49070) - Resolves: #1403754 - ns-slapd crashes during tickets/ticket48665_test.py (DS 48665) - Resolves: #1410645 - The "repl-monitor" web page does not display "year" in date. (DS 48220) - Resolves: #1399600 - ns-slapd segfaults during execution of tickets/ticket47966_test.py (DS 47966, DS 48987) - Resolves: #1402012 - Importing big ldif file with duplicate DNs throwing "unable to flush" error - Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)- Release 1.2.11.15-85 - Resolves: #1372420 - DES to AES backport issues (DS 47462) - Resolves: #1391324 - ds9 backport 47411 - Replace substring search with plain search in referint plugin (DS 47411)- Release 1.2.11.15-84 - Resolves: #1352109 - Replication stops working only when fips mode is set to true (DS 48909) - Resolves: #1372420 - DES to AES backport issues (DS 47462) - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 48983) - Resolves: #1382386 - Directory Server accepts a wrong userdn macro ACI (DS 449) - Resolves: #1382519 - 1.2.11 only -- coverity fixes (DS 49004) - Resolves: #1387022 - specific search with sizelimit=1 sometimes returns no entry (DS 47703) - Resolves: #1387772 - trace args debug logging must be more restrictive (DS 49009)- Release 1.2.11.15-83 - Resolves: #1327065 - After updating server, component nss-3.21.0-0.3.el6_7.x86_64, some client applications cannot connect to server (DS 48798) - Resolves: #1266920 - invalid message about write_changelog_and_ruv on consumers (DS 47801) - Resolves: #1330758 - add a nsTLS1.0 on or off new configuration parameter to cn=encryption,cn=config in RHEL 6 389-ds-base (DS 48816) - Resolves: #1369572 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964) - Resolves: #1371706 - Server Side Sorting crashes the server. (DS 48970) - Resolves: #1371678 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975) - Resolves: #1370145 - cannot reindex retrochangelog (DS 47619)- Release 1.2.11.15-82 - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 48983)- Release 1.2.11.15-81 - Resolves: #1368209 - Crash in import_wait_for_space_in_fifo(). (DS 48960)- Release 1.2.11.15-80 - Resolves: #1316869 - ns-slapd general protection ip:7f570c56afd5 sp:7f56dc7edce0 error:0 in libc-2.12.so (DS 48944)- Release 1.2.11.15-79 - Resolves: #1358560 - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation - Resolves: #1372420 - Backport AES storage scheme plugin (DS 47462, 48862, 48243, 48777) - Resolves: #1321126 - Replication changelog can incorrectly skip over updates - Resolves: #1373734 - EASY FIX : dereferencing a NULL sr_candidates pointer in ldbm_back_next_search_entry_ext resulted a segfault (DS 47858)- Release 1.2.11.15-78 - Resolves: #1321126 - Replication changelog can incorrectly skip over updates (DS 48954) - Resolves: #1361422 - CVE-2016-5416 389-ds-base: ACI readable by anonymous user (DS 48354) - Resolves: #1360975 - CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack- Release 1.2.11.15-77 - Resolves: #1157799 - replication delay when server is configured with multiple replication agreements. (DS 48636) fixing a backport error- Release 1.2.11.15-76 - Resolves: #1321126 - Replication changelog can incorrectly skip over updates (DS 48766) - Resolves: #1157799 - replication delay when server is configured with multiple replication agreements. (DS 48636)- Release 1.2.11.15-75 - Resolves: #1331599 - Paged results search returns the blank list of entries (DS 48808) - Resolves: #1332710 - password history is not updated when an admin resets the password (DS 48813) - Resolves: #1150817 - Running db2index with no options breaks replication (DS 48854)- Release 1.2.11.15-74 - Resolves: #1313258 - change severity of some messages related to "keep alive" entries (DS 48420)- Release 1.2.11.15-73 - Resolves: #1294770 - Supplier can skip a failing update, although it should retry (DS 47788) - Resolves: #1298496 - slapd process crashes on entry modification (DS 47964) - Resolves: #1307152 - keep alive entries can break replication (DS 48445)- Release 1.2.11.15-72 - Resolves: #1292649 - allow users to specify to relax the FQDN constraint (DS 48332) - Resolves: #1294770 - Supplier can skip a failing update, although it should retry (DS 47788) - Resolves: #1296694 - ns-slapd crash in ipa context - c_mutex lock memory corruption and self locks (DS 48406, DS 48338 reverted) - Resolves: #1297385 - Interpret IPV6 addresses for ACIs, replication, and chaining (DS 196)- Release 1.2.11.15-71 - Resolves: #1284791 - 389-ds-base: ldclt -e randomauthid Segmentation fault. (DS 48289) - Resolves: #1290243 - SimplePagedResults -- in the search error case, simple paged results slot was not released (DS 48375)- Release 1.2.11.15-70 - Resolves: #1259959 - perl module conditional test is not conditional when checking SELinux policies - fixing a regression (DS 48305) - Resolves: #1282457 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same ldapmodify operation (DS 48370)- Release 1.2.11.15-69 - Resolves: #1247792 - SimplePagedResults -- abandon could happen between the abandon check and sending results -- Fixing a regression introduced in 1.2.11.15-68 (DS 48338)- Release 1.2.11.15-68 - Resolves: #1278585 - deadlock in mep delete post op (DS 47976) - Resolves: #1247792 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338)- Release 1.2.11.15-67 - Resolves: #1234431 - Man pages and help for remove-ds.pl doesn't display "-a" option (DS 48245) - Resolves: #1236148 - Slow replication when deleting large quantities of multi-valued attributes (DS 48195) - Resolves: #1236156 - Avoid using regex in ACL if possible (DS 48175) - Resolves: #1236656 - Dynamic nsMatchingRule changes had no effect on the attrinfo thus following reindexing, as well. (DS 48212) - Resolves: #1240451 - Individual abandoned simple paged results request has no chance to be cleaned up (DS 48192) - Resolves: #1244970 - Crash during retro changelog trimming (DS 48206) - Resolves: #1245237 - winsync lastlogon attribute not syncing between DS and AD. (DS 48232) - Resolves: #1246165 - verify_db.pl doesn't verify DB specified by -a option (DS 48215) - Resolves: #1247812 - logconv autobind handling regression caused by 47446 (DS 48231) - Resolves: #1253406 - wrong password check if passwordInHistory is decreased. (DS 48228) - Resolves: #1255290 - db2index creates index entry from deleted records (DS 48252) - Resolves: #1259959 - perl module conditional test is not conditional when checking SELinux policies (DS 48305) - Resolves: #1260622 - ns-slapd - LOGINFO:Unable to remove file (DS 48304) - Resolves: #1265851 - Double free while adding entries (1.2.11 only) (DS 48287) - Resolves: #1273552 - Deadlock between two MODs on the same entry between entry cache and backend lock (DS 47978)- Release 1.2.11.15-66 - Resolves: #1270002 - cleanallruv should completely clean changelog (DS 48208) - Resolves: #1267405 - many attrlist_replace errors in connection with cleanallruv (DS 48283)- Release 1.2.11.15-65 - Resolves: #1259383 - Fractional replication evaluates several times the same CSN (DS 48266)- Release 1.2.11.15-64 - Resolves: #1247792 - ns-slapd crashing frequently cause is unknown (DS 48192) - Resolves: #1267296 - pagedresults - when timed out, search results could have been already freed. (DS 48299)- Release 1.2.11.15-63 - Resolves: #1247792 - ns-slapd crashing frequently cause is unknown (DS 48192) - Resolves: #1259383 - Fractional replication evaluates several times the same CSN (DS 48266 48284)- Release 1.2.11.15-62 - Resolves: #1259546 - regression - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)- Release 1.2.11.15-61 - Resolves: #1251288 - Replication not working for "delete: attr"- Release 1.2.11.15-60 - Resolves: #1228402 - Individual abandoned simple paged results request has no chance to be cleaned up (DS 48192)- Release 1.2.11.15-59 - Resolves: #1211006 - start/stop/restart-dirsrv utilities should ignore admin-serv directory (DS 48148) - Resolves: #1203338 - ns-slapd double free or corruption crash (DS 48149) - Resolves: #1228402 - Individual abandoned simple paged results request has no chance to be cleaned up (DS 48192)- Release 1.2.11.15-58 - Resolves: #1223068 - Regression introduced by the simple paged results fixes. (DS 48146) - Resolves: #1203338 - ns-slapd double free or corruption crash (DS 48149)- Release 1.2.11.15-57 - Resolves: #1223068 - ldapdelete fails with -r option to delete a sub suffix (DS 48146) - Resolves: #1219990 - bind on db chained to AD returns err=32 (DS 48183) - Resolves: #1219208 - cleanAllRUV task limit not being enforced correctly (DS 48158)- Release 1.2.11.15-56 - Resolves: #1219218 - fix coverity issues (DS 48151)- Release 1.2.11.15-55 - Resolves: #1118285 - Lowering the log level of "Configured SSL version range" message (1.2.11 only) (DS 48180) - Resolves: #1211006 - start/stop/restart-dirsrv utilities should ignore admin-serv directory (DS 48148) - Resolves: #1219208 - Remove cleanAllRUV task limit of 4 (DS 48158) - Resolves: #1219218 - Improve CleanAllRUV logging (DS 48151)- Release 1.2.11.15-54 - Resolves: #1207983 - disable writing unhashed#user#password to changelog (DS 561) - Resolves: #1207024 - IPA Replicate creation fails with error "Update failed! Status: [10 Total update abortedLDAP error: Referral]" (DS 47942) - Resolves: #1211077 - nsslapd-ndn-cache-enabled returns 1 or 0 instead of "on" or "off" (DS 408) - Resolves: #1211006 - start/stop/restart-dirsrv utilities should ignore admin-serv directory (DS 48148) - Resolves: #1210996 - Disable SSL v3, by default [389-ds-base-1.2.11 only] (DS 47928) - Resolves: #1214074 - Need a way to abort a cleanallruv abort task (DS 48154) - Resolves: #1212657 - Password is not correctly passed to perl command line tools if it contains shell special characters. (DS 48143) - Resolves: #1218341 - ns-slapd crash related to paged results (DS 48146)- Release 1.2.11.15-53 - Resolves: #1202502 - memory leak in new_passwdPolicy (1.2.11 only) (DS 48135) - Resolves: #1202062 - Non tombstone entry which dn starting with "nsuniqueid=...," cannot be deleted (DS 48133)- Release 1.2.11.15-52 - Resolves: #1193235 - Fix coverity issues and compiler warnings - 2014/12/16, 2014/11/24, 2015/2/18 (DS 47965)- Release 1.2.11.15-51 - Resolves: #1193235 - Fix coverity issues and compiler warnings - 2014/12/16, 2014/11/24, 2015/2/18 (DS 47965) - Resolves: #1171308 - Don't add unhashed password mod if we don't have an unhashed value (DS 47752) - Resolves: #1167976 - memberof skip nested groups breaks the plugin (DS 47963) - Resolves: #1185025 - ldclt needs to support SSL Version range (DS 47996) - Resolves: #1183820 - Windows Sync accidentally cleared raw_entry (DS 47989) - Resolves: #1155569 - nsslapd-db-locks modify not taking into account. (DS 47934) - Resolves: #1145072 - Bad manipulation of passwordhistory (DS 47905) - Resolves: #1144092 - During schema reload sometimes the search returns no results (DS 47973) - Resolves: #1145374 - WinSync - manual replica refresh removes AD-only member values from DS and AD in groups (DS 47884) - Resolves: #1193243 - ldbm_usn_init: Valgrind reports Invalid read / SIGSEGV (DS 47659) - Resolves: #1150368 - provide enabled ciphers as search result (DS 47880) - Resolves: #1153739 - Add SSL/TLS version info to the access log (DS 47945) - Resolves: #1118285 - Disable SSL v3, by default [389-ds-base-1.2.11 only] (DS 47928) - Resolves: #1193241 - logconv.pl -- support parsing/showing/reporting different protocol versions (DS 47949) - Resolves: #1179763 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981) - Resolves: #1175868 - Incorrect assumption in ndn cache (DS 547) - Resolves: #1159124 - perl scripts not returning expected error code (DS 47962) - Resolves: #1115960 - Nested COS definitions can be incorrectly processed (DS 47980) - Resolves: #1175868 - Backport of Normalized DN Cache (DS 408) - Resolves: #1174892 - During delete operation do not refresh cache entry if it is a tombstone (DS 47750) - Resolves: #1174892 - Need to refresh cache entry after called betxn postop plugins (DS 47750) - Resolves: #1193235 - Fix coverity issues (2014/12/16) (DS 47965) - Resolves: #1193235 - Fix coverity issues (2014/11/24) (DS 47965) - Resolves: #1169974 - Account lockout attributes incorrectly updated after failed SASL Bind (DS 47970) - Resolves: #1169975 - Fix coverity issue (DS 47969) - Resolves: #1169975 - COS memory leak when rebuilding the cache (DS 47969) - Resolves: #1170706 - cos_cache_build_definition_list does not stop during server shutdown (DS 47967) - Resolves: #1167976 - skip nested groups breaks memberof fixup task (DS 47963) - Resolves: #1167976 - RFE - memberOf - add option to skip nested group lookups during delete operations (DS 47963) - Resolves: #1171357 - Bind DN tracking unable to write to internalModifiersName without special permissions (DS 47950) - Resolves: #1162704 - Memory leak in password admin if the admin entry does not exist (DS 47958) - Resolves: #1162704 - PasswordAdminDN attribute is not properly returned to client (DS 47952) - Resolves: #1145379 - Fix backport issue to 1.2.11 (DS 47900) - Resolves: #1145379 - Server fails to start if password admin is set (DS 47900) - Resolves: #1145379 - Adding an entry with an invalid password as rootDN is incorrectly rejected (DS 47900) - Resolves: #1141735 - ldclt: assertion failure with -e "add,counteach" -e "object=,rdn=uid:test[A=INCRNNOLOOP(0;24 (DS 47907)- Release 1.2.11.15-50 - Resolves: #1130990 - Problem with single value attribute MMR replication (DS 47915, DS 569)- Release 1.2.11.15-49 - Resolves: #1168150 - CVE-2014-8105: information disclosure through 'cn=changelog' subtree - Resolves: #1130990 - Problem with single value attribute MMR replication (DS 47915) - Resolves: #1136882 - default nsslapd-sasl-max-buffer-size should be 2MB (DS 47457) - Resolves: #1161909 - ACI's are replaced by "ACI_ALL" after editing goup of ACI's including invalid one (DS 47953)- Release 1.2.11.15-48 - Resolves: #1154766 - ns-slapd segfault in libslapd.so.0.0.0 (#47889)- Release 1.2.11.15-47 - Resolves: #1138745 - Memory leak during Reliab15 execution (#47750)- Release 1.2.11.15-46 - Resolves: #1138745 - Memory leak during Reliab15 execution- Release 1.2.11.15-45 - Resolves: #1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (#47885)- Release 1.2.11.15-44 - Resolves: #1079098 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748) - Simple bind hangs after enabling password policy- Release 1.2.11.15-43 - Resolves: #1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (#47885)- Release 1.2.11.15-42 - Resolves: #1129660 - Adding users to user group throws Internal server error.- Release 1.2.11.15-41 - Resolves: #1130252 - dirsrv not running with old openldap (DS 47875)- Release 1.2.11.15-40 - Resolves: #1130252 - dirsrv not running with old openldap (DS 47875) - Resolves: #1103287 - logconv.pl memory continually grows (DS 47446) - Resolves: #1121596 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (DS 443) - Resolves: #1109381 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist (DS 415) - Resolves: #1128759 - Performance degradation with scope ONE after some load (DS 47874) - Resolves: #1127612 - Filter AND with only one clause should be optimized (DS 47872) - Resolves: #1014111 - repl-monitor fails to convert "*" to default values (DS 47862)- Release 1.2.11.15-39 - Resolves: #1123863 EMBARGOED CVE-2014-3562 - unauthenticated information disclosure (Bug 1123477) - Resolves: #1123863 High contention on computed attribute lock (DS 616) - Resolves: #1062763 single valued attribute replicated ADD does not work (DS 47692) - Resolves: #1121596 Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (DS 443) - Resolves: #1014111 Repl-monitor.pl ignores the provided connection parameters (DS 47862) - Resolves: #1115281 New defects found in 389-ds-base-1.2.11 (DS 47863) - Resolves: #1112729 paged results control is not working in some cases when we have a subsuffix. (DS 47824)- Release 1.2.11.15-38 - Resolves: bug 1080185 - revert - Creating a glue fails if one above level is a conflict or missing (DS 47750;Patch233)- Release 1.2.11.15-37 - Resolves: bug 1113606 - server restart wipes out index config if there is a default index (DS 47831) - Resolves: bug 1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (DS 47821) - Resolves: bug 1080185 - Creating a glue fails if one above level is a conflict or missing (DS 47750)- Release 1.2.11.15-36 - Resolves: bug 1088171 - revert - 7-bit check plugin does not work for userpassword attribute (DS 47423)- Release 1.2.11.15-35 - Resolves: Bug 1111404 - 1.2.11 branch: coverity errors (DS 47820)- Release 1.2.11.15-34 - Resolves: bug 1109952 - memory leak in ldapsearch filter objectclass=* (DS 47780) - Resolves: bug 1109443 - Server hangs in cos_cache when adding a user entry (DS 47649) - Resolves: bug 1109333 - 389 Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled. (DS 47793) - Resolves: bug 1109335 - Parent numsubordinate count can be incorrectly updated if an error occurs (DS 47782) - Resolves: bug 1109337 - Nested tombstones become orphaned after purge (DS 47767) - Resolves: bug 1109352 - Tombstone purging can crash the server if the backend is stopped/disabled (DS 47766) - Resolves: bug 1109356 - Coverity issue in 1.3.3 (DS 47740) - Resolves: bug 1109358 - A tombstone entry is deleted by ldapdelete (DS 47731) - Resolves: bug 1109361 - rsa_null_sha should not be enabled by default (DS 47637) - Resolves: bug 1109363 - valgrind - value mem leaks, uninit mem usage (DS 47455) - Resolves: bug 1109373 - provide default syntax plugin (DS 47369) - Resolves: bug 1109377 - Environment variables are not passed when DS is started via service (DS 47693) - Resolves: bug 1109379 - changelog iteration should ignore cleaned rids when getting the minCSN (DS 47627) - Resolves: bug 1109381 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist (DS 415) - Resolves: bug 1109384 - logconv.pl man page missing -m,-M,-B,-D (DS 47447) - Resolves: bug 1109387 - IDL-style can become mismatched during partial restoration - Resolves: bug 1028344 - Slow ldapmodify operation time for large quantities of multi-valued attribute values (DS 346) - Resolves: bug 985270 - [RFE] Add Password adminstrators to RHDS 9 as in http://directory.fedoraproject.org/wiki/Password_Administrator (DS 417, 458, 47522) - Resolves: bug 1070720 - rsearch filter error on any search filter (DS 47722) - Resolves: bug 1095847 - CoS cache re-scanning severely impacts performance (DS 47762) - Resolves: bug 1103287 - logconv.pl memory continually grows (DS 47446) - Resolves: bug 1106917 - managed entry plugin fails to update member pointer on modrdn operation (DS 47813) - Resolves: bug 1048987 - memory leak in ldapsearch filter objectclass=* (DS 47780) - Resolves: bug 1077895 - Memory leak with proxy auth control (DS 47743) - Resolves: bug 1079098 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748) - Resolves: bug 1080185 - Creating a glue fails if one above level is a conflict or missing (DS 47750) - Resolves: bug 1083272 - RHEL6.6 389-ds-base slapd segfault during ipa-replica-instal (DS 47448) - Resolves: bug 1086454 - ACI warnings in error log (DS 47670) - Resolves: bug 1086889 - empty modify returns LDAP_INVALID_DN_SYNTAX (DS 47772) - Resolves: bug 1086901 - mem leak in do_bind when there is an error (DS 47773) - Resolves: bug 1086903 - mem leak in do_search - rawbase not freed upon certain error (DS 47774) - Resolves: bug 1086907 - Performing deletes during tombstone purging results in operation errors (DS 47771) - Resolves: bug 1088171 - 7-bit check plugin does not work for userpassword attribute (DS 47423) - Resolves: bug 1090176 - #481 breaks possibility to reassemble memberuid list (DS 47770) - Resolves: bug 1092097 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone (DS 47787) - Resolves: bug 1094277 - IPA Server Slow Performance, high CPU usage of ns-slapd (DS 47426) - Resolves: bug 1097002 - Problem with deletion while replicated (DS 47764) - Resolves: bug 1098653 - db2bak.pl error with changelogdb (DS 47804) - Resolves: bug 1103337 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..." (DS 47809) - Resolves: bug 1001037 - WinSync removes User must change password flag on the Window side (DS 47492) - Resolves: bug 1004876 - idlistscanlimit per index/type/value (DS 47504) - Resolves: bug 1008021 - Self entry access ACI not working properly (DS 47331) - Resolves: bug 1009122 - replication stops with excessive clock skew (DS 47516) - Resolves: bug 1012699 - DSUtil.pm needs to check $res variable (DS 422) - Resolves: bug 1013133 - logconv.pl - RFE - track bind info (DS 356) - Resolves: bug 1013134 - Improve memory management in logconv.pl (DS 419) - Resolves: bug 1013135 - logconv.pl tool removes the access logs contents if "-M" is is not correctly used (DS 471) - Resolves: bug 1013138 - logconv.pl should handle microsecond timing (DS 539) - Resolves: bug 1013140 - logconv.pl -m not working for all stats (DS 47336) - Resolves: bug 1013141 - logconv.pl missing stats for starttls, ldapi, and autobind (DS 611) - Resolves: bug 1013142 - logconv.pl -m time calculation is wrong (DS 47341) - Resolves: bug 1013152 - add etimes to per second/minute stats (DS 47348) - Resolves: bug 1013160 - Indexed search are logged with 'notes=U' in the access logs (DS 47354) - Resolves: bug 1013161 - improve logconv.pl performance with large access logs (DS 47387) - Resolves: bug 1013162 - logconv warning - Use of comma-less variable list is deprecated (DS 47461) - Resolves: bug 1013163 - logconv.pl uses /var/tmp for BDB temp files (DS 47501) - Resolves: bug 1013164 - Fix various issues with logconv.pl (DS 47520) - Resolves: bug 1013165 - logconv: some stats do not work across server restarts (DS 47533) - Resolves: bug 1014111 - [RFE - RHDS9] CLI report to monitor replication (DS 47538) - Resolves: bug 1014351 - Coverity fixes - 12023, 12024, and 12025 (DS 47540) - Resolves: bug 1016717 - memory leak in range searches (DS 47517) - Resolves: bug 1022500 - Winsync plugin segfault during incremental backoff (DS 47581) - Resolves: bug 1024337 - Overflow in nsslapd-disk-monitoring-threshold on i686 (DS 47638) - Resolves: bug 1026956 - 1.2.11.29 crash when removing entries from cache (DS 47577) - Resolves: bug 1027496 - Replication Failures related to skipped entries due to cleaned rids (DS 47585) - Resolves: bug 1031222 - hard coded limit of 64 masters in agreement and changelog code (DS 47587) - Resolves: bug 1032315 - attrcrypt fails to find unlocked key (DS 47596) - Resolves: bug 1032317 - entries with empty objectclass attribute value can be hidden (DS 47591) - Resolves: bug 1034265 - 7-bit check plugin not checking MODRDN operation (DS 47641) - Resolves: bug 1044106 - logconv: failed logins: Use of uninitialized value in numeric comparison at logconv.pl line 949 (DS 47550) - Resolves: bug 1044108 - logconv: -V does not produce unindexed search report (DS 47551) - Resolves: bug 1049029 - Windows Sync group issues (DS 47642) - Resolves: bug 1053232 - modify-delete userpassword (DS 47678) - Resolves: bug 1053766 - ldapdelete returns non-leaf entry error while trying to remove a leaf entry (DS 47736) - Resolves: bug 1057805 - Size returned by slapi_entry_size is not accurate (DS 47677) - Resolves: bug 1060385 - Logconv.pl with an empty access log gives lots of errors (DS 47713) - Resolves: bug 1062763 - single valued attribute replicated ADD does not work (DS 47692) - Resolves: bug 1070583 - rhds91 389-ds-base-1.2.11.15-31.el6_5.x86_64 crash in db4 _ (DS 47729) - Resolves: bug 1073530 - Enrolling a host into IdM/IPA always takes two attempts (IPA 3377, DS 47704) - Resolves: bug 1074076 - e_uniqueid fails to set if an entry is a conflict entry (DS 47735) - Resolves: bug 1074305 - Under heavy stress, failure of turning a tombstone into glue (DS 47737)- Release 1.2.11.15-33 - Resolves: bug 1044218 - fix memleak caused by 47347 (DS 47623) - Resolves: bug 1071707 - rhds91 389-ds-base-1.2.11.15-31.el6_5 crash on paged searches followed by simple srch (DS 47707)- Release 1.2.11.15-32 - Resolves: bug 1074848 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-6.6] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)- Resolves: bug 1033405 - regression in ipa due to patch for ns-slapd stuck in DS_Sleep- Resolves: bug 1024977 CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches- Bump version to 1.2.11.15-29 - Resolves: bug 1008013: DS91: ns-slapd stuck in DS_Sleep- Bump version to 1.2.11.15-28 - Resolves: Bug 1016038 - Users from AD sub OU does not sync to IPA (ticket 47488)- Bump version to 1.2.11.15-27 - Resolves: Bug 1013735 - CLEANALLRUV doesnt run across all replicas (ticket 47509)- Bump version to 1.2.11.15-26 - Resolves: Bug 947583 - ldapdelete returns non-leaf entry error while trying to remove a leaf entry (ticket 47534)- Bump version to 1.2.11.15-25 - Resolves: Bug 1006846 - 2Master replication with SASL/GSSAPI auth broken (ticket 47523) - Resolves: Bug 1007452 - Under specific values of nsDS5ReplicaName, replication may get broken or updates (ticket 47489)- Bump version to 1.2.11.15-24 - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold; Changed CONFIG_INT to CONFIG_LONG for nsslapd-disk-monioring-threshold (ticket 47427)- Bump version to 1.2.11.15-23 - Resolves: Bug 1000632 - CVE-2013-4283 389-ds-base: ns-slapd crash due to bogus DN - Resolves: Bug 1002260 - server fails to start after upgrade(schema error) (ticket 47318)- Bump version to 1.2.11.15-22 - Resolves: Bug 923909 - 389-ds-base cannot handle Kerberos tickets with PAC (ticket 632) - Resolves: Bug 928159 - CVE-2013-1897 389-ds: unintended information exposure when rootdse is enabled - Resolves: Bug 947583 - ldapdelete returns non-leaf entry error while trying to remove a leaf entry (ticket 47367) - Resolves: Bug 951616 - error syncing group if group member user is not synced (ticket 47327) - Resolves: Bug 953052 - DESC should not be empty as per RFC 2252 (ldapv3) (ticket 47376) - Resolves: Bug 957305 - DS instance crashes under a high load (ticket 47349) - Resolves: Bug 957864 - Simple paged results should support async search (ticket 47347) - Resolves: Bug 958522 - loading an entry from the database should use str2entry_fast (ticket 531) - Resolves: Bug 962885 - RHEL 6.2 to 6.4 ipa upgrade selinuxusermap data not replicating (ticket 47362) - Resolves: Bug 963234 - When integrating with Red Hat IDM/DS, an LDAP protocol error is thrown (ticket 47361) - Resolves: Bug 966781 - new ldap connections can block ldaps and ldapi connections (ticket 47359) - Resolves: Bug 968383 - Wrong error code return when using EXTERNAL SASL and untrusted certificate (ticket 580) - Resolves: Bug 968503 - flush_ber error sending back start_tls response will deadlock (ticket 47375) - Resolves: Bug 969210 - make listen backlog size configurable (ticket 47377) - Resolves: Bug 970995 - RHDS not shutting down when disk monitoring threshold is reached to half. (ticket 47385) - Resolves: Bug 971033 - connections attribute in cn=snmp,cn=monitor is counted twice (ticket 47383) - Resolves: Bug 971966 - 389 DS Replication failures due to Fractional updates (ticket 47386) - Resolves: Bug 972976 - ldbm errors when adding/modifying/deleting entries (ticket 47392) - Resolves: Bug 973583 - ns-slapd instance crashed with signal 11 SIGSEGV (ticket 47391) - Resolves: Bug 974361 - Account policy plugin fails to lock user when policy is created for individual users to lock based to createtimestamp. (ticket 47397) - Resolves: Bug 974719 - rhds90 crash on tombstone modrdn (ticket 47396) - Resolves: Bug 974875 - Attributes fail to be encrypted/decrypted properly when replicated (ticket 47393) - Resolves: Bug 975243 - DS9 still observes altStateAttrName as createTimestamp when attribute is removed from the account policy (ticket 47395) - Resolves: Bug 975250 - Changelog deadlock replication failures with DNA (ticket 47410) - Resolves: Bug 976546 - Attribute names are incorrect in search results (ticket 47402) - Resolves: Bug 979169 - allow setting db deadlock rejection policy (ticket 47409) - Resolves: Bug 979435 - Replication problem with add-delete requests on single-value (ticket 47424) - Resolves: Bug 979515 - CVE-2013-2219 Directory Server: ACLs inoperative in some search scenarios - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold (ticket 47427) - Resolves: Bug 983091 - Memory leak in 389-ds-base 1.2.11.15 (ticket 47428) - Resolves: Bug 986131 - Very large entryusn values after enabling the USN plugin and the lastusn value is negative. (ticket 47435) - Resolves: Bug 986424 - fix recent compiler warnings (ticket 47378) - Resolves: Bug 986857 - Disk Monitoring not checking filesystem with logs (ticket 47441) - Resolves: Bug 987703 - memleaks in set_krb5_creds (ticket 47421) - Resolves: Bug 988562 - deadlock after adding and deleting entries (ticket 47449) - Resolves: Bug 989692 - Sorting with attributes in ldapsearch gives incorrect result (ticket 543)This patch is found broken and duplicated. Getting rid of it in 1.2.11.15-22. commit 2b3a50d55707ffa281c922ec188850576b757934 Author: Mark Reynolds Date: Tue Jul 23 10:28:45 2013 -0400 Add patch 0049 for Tickets-47427-47441- Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 5 limits not displayed correctly). (ticket 47427)- Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 4). (ticket 47427)- Bump version to 1.2.11.15-19 - Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 3). (ticket 47427)- Bump version to 1.2.11.15-19 - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold(part 2). (ticket 47427) - Resolves: Bug 986857 - Disk Monitoring not checking filesystem with logs (ticket 47741)- Bump version to 1.2.11.15-18 - Resolves: Bug 970995 - DS not shutting down when disk monitoring threshold is reached to half. (Ticket 47385) - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold. (ticket 47427)- Resolves: Bug 921937 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627) - Resolves: Bug 923503 - cleanAllRUV task fails to cleanup config upon completion (ticket 623)bump version to 1.2.11.15-13 - Resolves: Bug 923503 - cleanAllRUV task fails to cleanup config upon completion (ticket 623) - Resolves: Bug 923502 - Coverity issue 13091 - Resolves: Bug 923407 - Deadlock in DNA plug-in (ticket 634) - Resolves: Bug 921937 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627) - Resolves: Bug 923504 - crash in aci evaluation (ticket 628) - Resolves: Bug 928159 - unintended information exposure when anonymous access is set to rootdse (ticket 47308)- Resolves: Bug 910581 - dse.ldif is 0 length after server kill or machine kill - Resolves: Bug 908861 - Error messages encountered when using POSIX winsync - Resolves: Bug 907985 - DNA: use event queue for config update only at the start up - Resolves: Bug 830334 - Invalid chaining config triggers a disk full error and shutdown - Resolves: Bug 906583 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled) - Resolves: Bug 906005 - Valgrind reports memleak in modify_update_last_modified_attr - Resolves: Bug 905825 - PamConfig schema not updated during upgrade - Resolves: Bug 913215 - ns-slapd segfaults while trying to delete a tombstone entry - Resolves: Bug 913229 - unauthenticated denial of service vulnerability in handling of LDAPv3 control data- Resolves: Bug 896256 - updating package touches configuration files- Resolves: Bug 889083 - For modifiersName/internalModifiersName feature, internalModifiersname is not working for DNA plugin- Resolves: Bug 891930 - DNA plugin no longer reports additional info when range is depleted- Resolves: Bug 887855 - RootDN Access Control plugin is missing after upgrade from RHEL63 to RHEL64- Resolves: Bug 830355 - [RFE] improve cleanruv functionality - Resolves: Bug 876650 - Coverity revealed defects - Ticket #20 - [RFE] Allow automember to work on entries that have already been added (Bug 768084) - Resolves: Bug 834074 - [RFE] Disable replication agreements - Resolves: Bug 878111 - ns-slapd segfaults if it cannot rename the logs- Resolves: Bug 880305 - spec file missing dependencies for x86_64 6ComputeNode - use perl-Socket6 on RHEL6- Resolves: Bug 880305 - spec file missing dependencies for x86_64 6ComputeNode- Resolves: Bug 868841 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error - Resolves: Bug 868853 - Winsync: DS error logs report wrong version of Windows AD when winsync is configured. - Resolves: Bug 875862 - crash in DNA if no dnamagicregen is specified - Resolves: Bug 876694 - RedHat Directory Server crashes (segfaults) when moving ldap entry - Resolves: Bug 876727 - Search with a complex filter including range search is slow - Ticket #495 - internalModifiersname not updated by DNA plugin (Bug 834053)- Resolves: Bug 870158 - slapd entered to infinite loop during new index addition - Resolves: Bug 870162 - Cannot abandon simple paged result search - c970af0 Coverity defects - 1ac087a Fixing compiler warnings in the posix-winsync plugin - 2f960e4 Coverity defects - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes- Resolves: Bug 834063 [RFE] enable attribute that tracks when a password was last set on an entry in the LDAP store; Ticket #478 passwordTrackUpdateTime stops working with subtree password policies - Resolves: Bug 847868 [RFE] support posix schema for user and group sync; Ticket #481 expand nested posix groups - Resolves: Bug 860772 Change on SLAPI_MODRDN_NEWSUPERIOR is not evaluated in acl - Resolves: Bug 863576 Dirsrv deadlock locking up IPA - Resolves: Bug 864594 anonymous limits are being applied to directory manager- Resolves: Bug 856657 dirsrv init script returns 0 even when few or all instances fail to start - Resolves: Bug 858580 389 prevents from adding a posixaccount with userpassword after schema reload- Resolves: Bug 852202 Ipa master system initiated more than a dozen simultaneous replication sessions, shut itself down and wiped out its db - Resolves: Bug 855438 CLEANALLRUV task gets stuck on winsync replication agreement- Resolves: Bug 847868 [RFE] support posix schema for user and group sync - fix upgrade issue with plugin config schema - posix winsync has default plugin precedence of 25- Resolves: Bug 800051 Rebase 389-ds-base to 1.2.11 - Resolves: Bug 742054 SASL/PLAIN binds do not work - Resolves: Bug 742381 MOD operations with chained delete/add get back error 53 on backend config - Resolves: Bug 746642 [RFE] define pam_passthru service per subtree - Resolves: Bug 757836 logconv.pl restarts count on conn=0 instead of conn=1 - Resolves: Bug 768084 [RFE] Allow automember to work on entries that have already been added - Resolves: Bug 782975 krbExtraData is being null modified and replicated on each ssh login - Resolves: Bug 803873 Sync with group attribute containing () fails - Resolves: Bug 818762 winsync should not delete entry that appears to be out of scope - Resolves: Bug 830001 unhashed#user#password visible after changing password [rhel-6.4] - Resolves: Bug 830256 Audit log - clear text password in user changes - Resolves: Bug 830331 ns-slapd exits/crashes if /var fills up - Resolves: Bug 830334 Invalid chaining config triggers a disk full error and shutdown - Resolves: Bug 830335 restore of replica ldif file on second master after deleting two records shows only 1 deletion - Resolves: Bug 830336 db deadlock return should not log error - Resolves: Bug 830337 usn + mmr = deletions are not replicated - Resolves: Bug 830338 Change DS to purge ticket from krb cache in case of authentication error - Resolves: Bug 830340 Make the CLEANALLRUV task one step - Resolves: Bug 830343 managed entry sometimes doesn't delete the managed entry - Resolves: Bug 830344 [RFE] Improve replication agreement status messages - Resolves: Bug 830346 ADD operations not in audit log - Resolves: Bug 830347 389 DS does not support multiple paging controls on a single connection - Resolves: Bug 830348 Slow shutdown when you have 100+ replication agreements - Resolves: Bug 830349 cannot use & in a sasl map search filter - Resolves: Bug 830353 valgrind reported memleaks and mem errors - Resolves: Bug 830355 [RFE] improve cleanruv functionality - Resolves: Bug 830356 coverity 12625-12629 - leaks, dead code, unchecked return - Resolves: Bug 832560 [abrt] 389-ds-base-1.2.10.6-1.fc16: slapi_attr_value_cmp: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - Resolves: Bug 833202 transaction retries need to be cache aware - Resolves: Bug 833218 ldapmodify returns Operations error - Resolves: Bug 833222 memberOf attribute and plugin behaviour between sub-suffixes - Resolves: Bug 834046 [RFE] Add nsTLS1 attribute to schema and objectclass nsEncryptionConfig - Resolves: Bug 834047 Fine Grained Password policy: if passwordHistory is on, deleting the password fails. - Resolves: Bug 834049 [RFE] Add schema for DNA plugin - Resolves: Bug 834052 [RFE] limiting Directory Manager (nsslapd-rootdn) bind access by source host (e.g. 127.0.0.1) - Resolves: Bug 834053 [RFE] Plugins - ability to control behavior of modifyTimestamp/modifiersName - Resolves: Bug 834054 Should only update modifyTimestamp/modifiersName on MODIFY ops - Resolves: Bug 834056 Automembership plugin fails in a MMR setup, if data and config area mixed in the plugin configuration - Resolves: Bug 834057 ldap-agent crashes on start with signal SIGSEGV - Resolves: Bug 834058 [RFE] logconv.pl : use of getopts to parse commandline options - Resolves: Bug 834060 passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions - Resolves: Bug 834061 [RFE] RHDS: Implement SO_KEEPALIVE in network calls. - Resolves: Bug 834063 [RFE] enable attribute that tracks when a password was last set on an entry in the LDAP store - Resolves: Bug 834064 dnaNextValue gets incremented even if the user addition fails - Resolves: Bug 834065 Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied - Resolves: Bug 834074 [RFE] Disable replication agreements - Resolves: Bug 834075 logconv.pl reporting unindexed search with different search base than shown in access logs - Resolves: Bug 835238 Account Usability Control Not Working - Resolves: Bug 836386 slapi_ldap_bind() doesn't check bind results - Resolves: Bug 838706 referint modrdn not working if case is different - Resolves: Bug 840153 Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled - Resolves: Bug 841600 Referential integrity plug-in does not work when update interval is not zero - Resolves: Bug 842437 dna memleak reported by valgrind - Resolves: Bug 842438 Report during startup if nsslapd-cachememsize is too small - Resolves: Bug 842440 memberof performance enhancement - Resolves: Bug 842441 "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs - Resolves: Bug 847868 [RFE] support posix schema for user and group sync - Resolves: Bug 850683 nsds5ReplicaEnabled can be set with any invalid values. - Resolves: Bug 852087 [RFE] add attribute nsslapd-readonly so we can reference it in acis - Resolves: Bug 852088 server to server ssl client auth broken with latest openldap - Resolves: Bug 852839 variable dn should not be used in ldbm_back_delete- Resolves: Bug 835238 - Account Usability Control Not Working- Resolves: Bug 834096 - slapi_attr_value_cmp: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)- Resolves: Bug 830001 - unhashed#user#password visible after changing password -- patch 0020 disallows users' direct modify on unhashed#user#password- Resolves: Bug 830001 - unhashed#user#password visible after changing password -- patch 0019 fixes deref issue.- Resolves: Bug 830001 - unhashed#user#password visible after changing password - Resolves: Bug 830256 - Audit log - clear text password in user changes- Resolves: Bug 824014 - DS Shuts down intermittently- Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress -- patch 0015 fixes a small memleak in previous patch- Resolves: Bug 822700 - Bad DNs in ACIs can segfault ns-slapd- Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress - Resolves: Bug 821542 - letters in object's cn get converted to lowercase when renaming object- Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress - 1.2.10.2-10 was built from the private branch- Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress- Resolves: Bug 815991 - crash in ldap_initialize with multiple threads - previous fix was still crashing in ldclt- Resolves: Bug 815991 - crash in ldap_initialize with multiple threads- Resolves: Bug 813964 - IPA dirsvr seg-fault during system longevity test- Resolves: Bug 811291 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - typo in previous patch- Resolves: Bug 811291 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)- Resolves: Bug 803930 - ipa not starting after upgade because of missing data - get rid of posttrans - move update code to post- Resolves: Bug 800215 - Certain CMP operations hang or cause ns-slapd to crash- Resolves: Bug 800215 - Certain CMP operations hang or cause ns-slapd to crash - Resolves: Bug 800217 - fix valgrind reported issues- Resolves: Bug 766989 - Rebase 389-ds-base to 1.2.10 - Resolves: Bug 796770 - crash when replicating orphaned tombstone entry- Resolves: Bug 766989 - Rebase 389-ds-base to 1.2.10 - Resolves: Bug 790491 - 389 DS Segfaults during replica install in FreeIPA- Resolves: Bug 766989 - Rebase 389-ds-base to 1.2.10- Resolves: Bug 766989 - Rebase 389-ds-base to 1.2.10- Bug 759301 - Incorrect entryUSN index under high load in replicated environment - Bug 743979 - Add slapi_rwlock API and use POSIX rwlocks - WARNING - patches 0030 and 0031 remove and add back the file configure - this is necessary because the merge commit to "rebase" RHEL-6 to 1.2.9.6 - seriously messed up configure - so in order to add the patch for 743979 - which also touched configure, the file had to be removed and added back - also note that the commit for the RHEL-6 branch to remove configure does - not work - the way patch works, it has to match every line exactly in - order to remove the file, and because the merge commit messed things - up, it doesn't work - So, DO NOT TOUCH 0030-remove-configure-to-get-rid-of-merge-conflict.patch - BECAUSE IT IS HAND CRAFTED and not generated by git format-patch - if you must regenerate this file, - git format-patch ...args... to generate a file in patch format - remove all of the patch matches (all the lines beginning with -) - get the 1.2.9.6 version of configure from the source tarball - wc -l configure to get the number of lines in the file - sed 's/^/-/' configure >> thefile.patch - edit thefile.patch to have the right number of lines and have the - patch commands in the correct place - PROFIT!!!- Bug 752577 - crash when simple paged fails to send entry to client - Bug 757897 - rhds81 modrn operation and 100% cpu use in replication - Bug 757898 - Fix Coverity (11104) Resource leak: ids_sasl_user_to_entry (slapd/saslbind.c)- Bug 752155 - Use restorecon after creating init script lock file- Bug 742381 - part3 - MOD operations with chained delete/add get - back error 53 on backend config- add the actual patch commands for the new patch files- Bug 742661 - allow resource limits to be set for paged searches - independently of limits for other searches/operations - Bug 742381 - part2 - MOD operations with chained delete/add get - back error 53 on backend config - Bug 742382 - allow nsslapd-idlistscanlimit to be set dynamically and per-user - Bug 742381 - MOD operations with chained delete/add get back - error 53 on backend config - Bug 739959 - Allow separate fractional attrs for incremental and total protocols- Bug 739196 - Consolidate DS and DS replication bits in one package in RHEL 6.2 - There were two patches in ds-replication for RHEL 6.2 that were added post - rebase - the two patches for 722292 - these are now in the 389-ds-base package - and have been cherry-picked to the RHEL-6 internal branch- Bug 736137 - renaming a managed entry does not update mepmanagedby- Bug 735217 - simple paged search + ip/dns based ACI hangs server- Bug 733443 - large targetattr list with syntax errors cause server to crash or hang - Bug 734267 - upgradednformat failed to add RDN value - subtree and user account lockout policies implemented? - Bug 733434 - passwordisglobalpolicy attribute brakes TLS chaining - Bug 733442 - Ignore an error 32 in this case since we're adding a new AutoMember definition - Bug 733440 - RFE: add option to allow server to start with an expired certificate- not released internally- Bug 728510 - Run dirsync after sending updates to AD - Bug 729717 - Fatal error messages when syncing deletes from AD - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working. - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash - Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed again - separate tests for atomic ops and atomic bool cas- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix another coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - previous patch broke build on el5- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error- Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed to use configure test for GCC provided 64-bit atomic functions- Bug 663752 - Cert renewal for attrcrypt and encchangelog - this was "re-fixed" due to a deadlock condition with cl2ldif task cancel - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma - Bug 725743 - Make memberOf use PRMonitor for it's operation lock - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package - Bug 723937 - Slapi_Counter API broken on 32-bit F15 - look for separate openldap ldif library - Split automember regex rules into separate entries - writing Inf file shows SchemaFile = ARRAY(0xhexnum) - add support for ldif files with changetype: add - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file - Bug 713209 - Update sudo schema - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9- Bug 726136 - memberOf plug-in can deadlock when used with other plug-ins - Bug 725912 - Instance upgrade fails when upgrading 389-ds-base package- Bug 720452 - RDN with % can cause crashes or missing entries - Bug 720051 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2. - Bug 720458 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not - Bug 720459 - Update sudo schema- Bug 718351 - Intensive updates on masters could break the consumer's cache - Bug 714298 - unresponsive LDAP service when deleting vlv on replica- Bug 714298 - unresponsive LDAP service when deleting vlv on replica - memleak in previous patch- Bug 714298 - unresponsive LDAP service when deleting vlv on replica- Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package - Bug 713317 - Cert renewal for attrcrypt and encchangelog - Bug 711266 - DS can not restart after create a new objectClass has entryusn attribute - Bug 712167 - ns-slapd segfaults using suffix referrals - Bug 709868 - only allow FIPS approved cipher suites in FIPS mode - Bug 711516 - Support upgrade from Red Hat Directory Server - Bug 711241 - memory leak found by reliab12 - Bug 711265 - Cannot disable SSLv3 and use TLS only - Bug 711513 - slapd stops responding- Resolves: Bug 705172 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory - use ix86 macro instead of hardcoded i386 etc.- Resolves: Bug 705172 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory - cannot use wildcard in ExclusiveArch- Resolves: Bug 705172 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory- Resolves: Bug 697663 - memory leak: entryusn value is leaked when an entry is deleted - Resolves: Bug 699458 - windows sync can lose old multi-valued attribute values when a new value is added - Resolves: Bug 700215 - ldclt core dumps - Resolves: Bug 700665 - Linked attributes callbacks access free'd pointers after close - Resolves: Bug 701057 - userpasswd not replicating- 389-ds-base-1.2.8.2 - Bug 696407 - If an entry with a mixed case RDN is turned to be - a tombstone, it fails to assemble DN from entryrdn- 389-ds-base-1.2.8.1 - Bug 693962 - Full replica push loses some entries with multi-valued RDNs- added srcver because the version from the source is now - different than the source in the package- 389-ds-base-1.2.8.0 - Bug 693523 - Unable to change schema online - Bug 693520 - matching rules do not inherit from superior attribute type - Bug 693522 - nsMatchingRule does not work with multiple values - Bug 693519 - cannot use localized matching rules - Bug 693516 - Segfault on index update during full replication push on 1.2.7.5- Bug 668385 - DS pipe log script is executed as many times as the dirsrv service is restarted - bump version to 1.2.8.rc4 - bump ds console version to 1.2.5- Bug 690536 - Double free in dse_add()- 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2 - Bug 689908 - (cov#10610) Fix Coverity NULL pointer dereferences - Bug 689895 - ns-newpwpolicy.pl needs to use the new DN format - Bug 689889 - RFE: allow fine grained password policy duration attributes - in days, hours, minutes, as well - Bug 688730 - Exported tombstone cannot be imported correctly - Bug 684349 - slapd crashing when traffic replayed - Bug 682897 - Allow maxlogsize to be set if logmaxdiskspace is -1 - introduce the concept of the srcprerel - with rc2, we did not rebase - the source, we are still using the .rc1 source tarball, so we use - srcprerel of .rc1 but package pre-release is .rc2- 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1 - Resolves: Bug 680575 - Rebase 389-ds-base to pick the latest features and fixes - Resolves: Bug 681720 - setup-ds-admin.pl - improve hostname validation - Resolves: Bug 681611 - RFE: allow fine grained password policy duration attributes in - days, hours, minutes, as well - Resolves: Bug 681550 - setup-ds-admin.pl --debug does not log to file - Resolves: Bug 681379 - ns-slapd segfaults if I have more than 100 DBs - Resolves: Bug 680290 - setup-ds.pl should set SuiteSpotGroup automatically - Resolves: Bug 681351 - crash in ldap-agent when using OpenLDAP - Resolves: Bug 681332 - modifying attr value crashes the server, which is supposed to - be indexed as substring type, but has octetstring syntax - Resolves: Bug 680305 - ds-logpipe.py script is failing to validate "-s" and - "--serverpid" options with "-t".- Bug 676598 - 389-ds-base multilib: file conflicts - split off libs into a separate -libs package - remove old crufty fedora-ds stuff- do not create /var/run/dirsrv - setup will create it instead - remove the fedora-ds initscript upgrade stuff - we do not support that anymore - convert the remaining lua stuff to plain old shell script- 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3 - Bug 675320 - empty modify operation with repl on or lastmod off will crash server - Bug 675265 - preventryusn gets added to entries on a failed delete - Bug 677774 - added support for tmpfiles.d - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search es - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH - Bug 671199 - Don't allow other to write to rundir - Bug 678646 - Ignore tombstone operations in managed entry plug-in - Bug 676053 - export task followed by import task causes cache assertion - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8 - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used - Bug 676689 - crash while adding a new user to be synced to windows - Bug 604881 - admin server log files have incorrect permissions/ownerships - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - Bug 675853 - dirsrv crash segfault in need_new_pw()- 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2 - Errata Patches in patch files - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result searches - Bug 671199 - Don't allow other to write to rundir - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH - bugs fixed in released code - Bug 674430 - Improve error messages for attribute uniqueness - Bug 616213 - insufficient stack size for HP-UX on PA-RISC - Bug 615052 - intrinsics and 64-bit atomics code fails to compile - on PA-RISC - Bug 151705 - Need to update Console Cipher Preferences with new ciphers - Bug 668862 - init scripts return wrong error code - Bug 670616 - Allow SSF to be set for local (ldapi) connections - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the - log output to the text file - Bug 668619 - slapd stops responding - Bug 624547 - attrcrypt should query the given slot/token for - supported ciphers - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any - error message in logs- 1.2.8-0.1.a1 release - many bug fixes- 1.2.7.5 release - git tag 389-ds-base-1.2.7.5 - Bug 663597 - Memory leaks in normalization code- 1.2.7.4 release - git tag 389-ds-base-1.2.7.4 - Bug 661792 - Valid managed entry config rejected- 1.2.7.3 release - git tag 389-ds-base-1.2.7.3 - Bug 658312 - Invalid free in Managed Entry plug-in - Bug 641944 - Don't normalize non-DN RDN values- 1.2.7.2 release - git tag 389-ds-base-1.2.7.2 - Bug 659456 - Incorrect usage of ber_printf() in winsync code - Bug 658309 - Process escaped characters in managed entry mappings - Bug 197886 - Initialize return value for UUID generation code - Bug 658312 - Allow mapped attribute types to be quoted - Bug 197886 - Avoid overflow of UUID generator- 1.2.7.1 release - git tag 389-ds-base-1.2.7.1 - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes - Bug 656392 - Remove calls to ber_err_print() - Bug 625950 - hash nsslapd-rootpw changes in audit log- the 1.2.7 release - remove the ds-replication sub-package - there will be a new package for it - remove the selinux policy - dirsrv policy will be provided by the base OS- create ds-replication sub package- bumped the version to get it to build in brew- 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4 - Bug 647932 - multiple memberOf configuration adding memberOf where there is no member - Bug 491733 - dbtest crashes - Bug 606545 - core schema should include numSubordinates - Bug 638773 - permissions too loose on pid and lock files - Bug 189985 - Improve attribute uniqueness error message - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat ions - Bug 619633 - Make attribute uniqueness obey requiredObjectClass- 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Adding the ancestorid fix code to ##upgradednformat.pl.- 1.2.7.a3 release - a2 was never released - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Bug 629681 - Retro Changelog trimming does not behave as expected - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif - are not upgraded in the server instance schema dir- 1.2.7.a2 release - a1 was the OpenLDAP testday release - git tag 389-ds-base-1.2.7.a2 - added openldap support on platforms that use openldap with moznss - for crypto (F-14 and later) - many bug fixes - Account Policy Plugin (keep track of last login, disable old accounts)- added openldap support- bump rel to rebuild again- bump rel to rebuild- This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1 - Bug 634561 - Server crushes when using Windows Sync Agreement - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self - Bug 612264 - ACI issue with (targetattr='userPassword') - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager" - Bug 631862 - crash - delete entries not in cache + referint- This is the final 1.2.6 release- 1.2.6 release candidate 7 - git tag 389-ds-base-1.2.6.rc7 - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6- 1.2.6 release candidate 6 - git tag 389-ds-base-1.2.6.rc6 - Bug 617013 - repl-monitor.pl use cpu upto 90% - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors - Bug 613833 - Allow dirsrv_t to bind to rpc ports - Bug 612242 - membership change on DS does not show on AD - Bug 617629 - Missing aliases in new schema files - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments - Bug 617862 - Replication: Unable to delete tombstone errors - Bug 594745 - Get rid of dirsrv_lib_t label- make selinux-devel explicit Require the base package in order - to comply with Fedora Licensing Guidelines- 1.2.6 release candidate 3 - git tag 389-ds-base-1.2.6.rc3 - Bug 603942 - null deref in _ger_parse_control() for subjectdn - 609256 - Selinux: pwdhash fails if called via Admin Server CGI - 578296 - Attribute type entrydn needs to be added when subtree rename switch is on - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"- 1.2.6 release candidate 2- install replication session plugin header with devel package- 1.2.6 release candidate 1- Mass rebuild with perl-5.12.0- 1.2.6.a4 release- 1.2.6.a3 release - add managed entries plug-in - many bug fixes - moved selinux subpackage into base package- rebuild for icu 4.4- 1.2.6.a2 release - add support for matching rules - many bug fixes- 1.2.6.a1 release - Added SELinux policy and subpackages- 1.2.5 final release- 1.2.5.rc4 release- 1.2.5.rc3 release- 1.2.5.rc2 release- 1.2.5.rc1 release- 1.2.5.a1 release- 1.2.4 release - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif- 1.2.3 release - added template-initconfig to %files - %posttrans now runs update to update the server instances - servers are shutdown, then restarted if running before install - scriptlets mostly use lua now to pass data among scriptlet phases- rebuild with new openssl to fix dependencies- backed out - added template-initconfig to %files - this change is for the next major release - bump version to 1.2.2 - fix reopened 509472 db2index all does not reindex all the db backends correctly - fix 518520 - pre hashed salted passwords do not work - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of - bugs fixed in 1.2.2- rebuilt with new openssl- added template-initconfig to %files- added BuildRequires pcre- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- change name to 389 - change version to 1.2.1 - added initial support for numeric string syntax - added initial support for syntax validation - added initial support for paged results including sorting- final release 1.2.0 - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389 - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428- re-enable ppc builds- exclude ppc builds - needs extensive porting work- new release 1.2.0 - Made devel package depend on mozldap-devel - only create run dir if it does not exist - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330- added db4-utils to Requires for verify-db.pl- Enabled LDAPI autobind- updated update to patch bug463991-bdb47.patch- updated patch bug463991-bdb47.patch- added patch bug463991-bdb47.patch - make ds work with bdb 4.7- rolled back bogus winsync memory leak fix- winsync api improvements for modify operations- This is the 1.1.2 release. The bugs fixed can be found here - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721 - Added winsync-plugin.h to the devel subpackage- bump rev to rebuild and pick up new version of ICU- 1.1.1 release candidate - several bug fixes- fix bugzilla 439829 - patch to allow working with NSS 3.11.99 and later- add patch to allow server to work with NSS 3.11.99 and later - do NSS_Init after fork but before detaching from console- add Requires for versioned perl (libperl.so)- previous fix for 434403 used the wrong patch - this is the right one- Resolves bug 434403 - GCC 4.3 build fails - Rolled new source tarball which includes Nathan's fix for the struct ucred - NOTE: Change version back to 1.1.1 for next release - this release was pulled from CVS tag FedoraDirSvr110_gcc43- Autorebuild for GCC 4.3- This is the GA release of Fedora DS 1.1 - Removed version numbers for BuildRequires and Requires - Added full URL to source tarball- Rebuild for deps- This is the beta2 release - new file added to package - /etc/sysconfig/dirsrv - for setting - daemon environment as is usual in other linux daemons- fix build breakage due to open() - mock could not find BuildRequires: db4-devel >= 4.2.52 - mock works if >= version is removed - it correctly finds db4.6- Change pathnames to use the pkgname macro which is dirsrv - get rid of cvsdate in source name- Added Requires for perldap, cyrus sasl plugins - Removed template-migrate* files - Added perl module directory - Removed install.inf - setup-ds.pl can now easily generate one- added requires for mozldap-tools- update to latest sources - added migrateTo11 to allow migrating instances from 1.0.x to 1.1 - ldapi support - fixed pam passthru plugin ENTRY method- Renamed package to fedora-ds-base, but keep names of paths/files/services the same - use the shortname macro (fedora-ds) for names of paths, files, and services instead - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base - updated to latest sources- More cleanup suggested by Dennis Gilmore - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1- latest sources - added init scripts - use /etc as instconfigdir- latest sources - moved all executables to _bindir- latest sources - added /var/tmp/fedora-ds to dirs- added logconv.pl - added slapi-plugin.h to devel package - added explicit dirs for /var/log/fedora-ds et. al.- just move all .so files into the base package from the devel package- Move the plugin *.so files into the main package instead of the devel - package because they are loaded directly by name via dlopen- Move the script-templates directory to datadir/fedora-ds- change mozldap to mozldap6- remove . from cvsdate define- Having a problem building in Brew - may be Release format- Changed version to 1.1.0 and added Release 1.el4.cvs20070119 - merged in changes from Fedora Extras candidate spec file- Bump component versions (nspr, nss, svrcore, mozldap) to their latest - remove unneeded patches- update to a cvs snapshot - fedorafy the spec - create -devel subpackage - apply a patch to use mozldap not mozldap6 - apply a patch to allow --prefix to work correctly- Fixed the problem where the server would crash upon shutdown in dblayer - due to a race condition among the database housekeeping threads - Fix a problem with normalized absolute paths for db directories- Touch all of the ldap/admin/src/scripts/*.in files so that they - will be newer than their corresponding script template files, so - that make will rebuild them.- Chown new schema files when copying during instance creation- Configure will get ldapsdk_bindir from pkg-config, or $libdir/mozldap6- use eval to sed ./configure into ../configure- jump through hoops to be able to run ../configure- Need to make built dir in setup section- The template scripts needed to use @libdir@ instead of hardcoding - /usr/lib - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall - do the actual build in a "built" subdirectory, until we remove - the old script templates- Make replication plugin link with libdb- Have make define LIBDIR, BINDIR, etc. for C code to use - especially for create_instance.h- Forgot to checkin new config.h.in for AC_CONFIG_HEADERS- Add perldap as a Requires; update sources- Fix ds_newinst.pl - Remove obsolete #defines- Update sources; rebuild to populate brew yum repo with dirsec-nss- Update sources- initial revision 1.2.11.151.2.11.15-95.el6_91.2.11.15-95.el6_9dirsrvrepl-session-plugin.hslapi-plugin.hwinsync-plugin.hlibslapd.sodirsrv.pc389-ds-base-devel-1.2.11.15EXCEPTIONLICENSELICENSE.GPLv2README.devel/usr/include//usr/include/dirsrv//usr/lib/dirsrv//usr/lib/pkgconfig//usr/share/doc//usr/share/doc/389-ds-base-devel-1.2.11.15/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i686 -mtune=atom -fasynchronous-unwind-tablescpioxz2i686-redhat-linux-gnuASCII textUTF-8 Unicode textdirectorypkgconfig filesymbolic link to `libslapd.so.0.0.0'RPR?7zXZ !PH6%] b2u jӫ`({O*Ths5D<#+w yVþ/.z',F\eL|2i}7-v*;UWLX YnY5'qmaŠKP-٨oPxڐ |ZK?3C60Z ! /RyL_tٽKF$w^fsўR XfISB {bs~"yf˕F@Rxl &G9ydXeɴt+ y0D$yU?!)i@(}*@:lut0;/#yAqA1XXgO-'Nt҈.M2ڧnw>}d![F ;{;03wj˟p \u>s67SgP'9?T#A?qD[/G { N"zNe={ٛQFq 볠Ofm86*aHJH̷N:Mǟ^plED~Ou}*0ac#}jnjig I@יile\gM#$樂4rÊ&/wu[(8zRnf6ڪVtm[5x&mW΢0\9A hI^aVA*9h|8"P"C}BKXqZmCX߈X;SևvTËuTpdGc٭EcZ&2S&etr[0 D-yY 3m l>g#$xaTͯ"NL5j 3BJR;d"jJhF.-,D><LEjK;*(fR-SGM-NZN”1iK1.r+r.fAq5jG (;;жX/E cxM4N|vQS{I⾷~Ǔ"R'X;DQʌ #jm'|BdF5_MPT3{WH+uS 8gM3o]'SZsTzN{5zz,ENn̑S`bewd3w5`6#29:AK@LqS0 ]1cîͷU=@H`mfOӆNnzHb/;e93ZjXPeFXj9=* tݎU__dlD]Eɂ =~&Ly4䖐U;N^n՜9wjkװXNnPS޿١ǂ3-?s3sw@U!D/?kr @%NW\E1kZ\e1U!R5\2ϲaMB:LoKjjS Q>)ۗR*ooYP\Xg3 \.{\D ua?<۽J~#O}J nbvK.5TVv3Z14+Gz oD `-)VO<:pNV^6_(\3\6DKB G_I!$C0AJ56=8SlHdVx+F: rr4? bqaoe'y!*u/Ĝ?%=Fz|Yu c#WvH4ɭ=,Mu o f1:po)ÊE)2NpH f3ѥEĨO Jm%N ݞ`zrp R7JbrboOzVWbSlH!}Zla#b."#e0x&L  (PiSL?j^D0 IPoC.0 ӭRoRUxiȈ^k>=Ezm(j{z]uGRh iS HT^kVn;A5"ؓ%JkON_;Esfz$o^sq\g ±7uVȢ<}W2ka>0,.3,*RVJKx\gā"F{+Prtx^T9W7\08YjuX+[lNkrx5rZ%C*J%gow:.G_jOt&Z=pmkT튰堋rRzƈ03M<͏Rbby0$GpLgShje1_^r)K%57&PU#O(H@&؍6Xo`FL=bA]aO+:!npS/qSTڻ. ')>~ j&ڼzޔ3ruG:OIX8Jl {( 9&SO}id& zV:E@^]H\i5`,X9"X/5mJv 5Vn %;= ?)1ua>mB]-ݯeey =ғtXh9Ȏ7wX1 a:~l-в[: ^,ne.pNXnQ>Om /9Wټ"eWrkw:D}0LHT4rllw0OؗhYvnݷLDdbAU=ASGR}={d,{xY!hz8ZKe177^DǺQMsԐԼvDKY#2h ¼+7j>̌)al)igXBd_֚<7;QM ^tV=uާTB,Yhf|;|3-ы:Lgu q.=>Ӝʞjn!b=%1LޟNm:|f@y./B:,Eq%*Vٺ2Tq||yz#5JpST /r3Lg|EÅ՗gWJ;`Hvw+@]_Y!.Ŧո3ɘT F@` )|zA2AQMfq_ѡ} U{,E$33wc }J’ӧ8[G,J`AP *y(+[TS"ƩB3,B1zQV/7>f|eʚ7p~ dV0(i Ɣ&?լNZ)x&zr=J@rGpU'}!ݙ{x &ќb"" W 74d ܆VzKF z.@Ϋu^hϾP9(q8[a׀Сydiu4ivt"DH3i\N zBB!IiU>! tK+I(mKAڟ;߳Px|(]nr܄aCV6+ËC s33GGի5ޟxQ7w υK ý74L'YwѺCޗT^'4}O|Åݎ&JP6򾙢,$j]/xl3o*KZ4~oQnJW> & y[mKJNRT?0I6z0뽗F36ZR8 )YM% s-6z|SF4r"<;SaKDw˜W-Q>(K=”3^WerD*ޚ[쐻`'֒" |9TciPR'U)q0p|k59PKiɪ<3X@ <"w7 !~?v|vT:QqQ{tI!28uvX97Y4VA'ڊ5 :.ʇ0Q߼|. S %RCHw [v;x!O%uim to|7]CC k:-G+YwZ_]{Mj(g4=4UU [}=N1֐&hl~)5V(ZFINjMՔT}^Ido3zވ ̫n\-!2dT'] `Ƭ X,z8T)M8 458rDr]M7iD׎o'A8ҶԜy!cD]dGE~Tgn@$_r8 : GG'Gg&IR zcFڷUG}ԝCFwp h(6X14胃ڛ_3wYct[Ŧ? . +`LTS%F)C?XI*qKBVPbU3` `i@qT1~%ʓ蛆5o 88 ou%w&M $Uή"M09ZA :Ʒt9O/|lɠ#|,r`S $E5ݴM/9() Q3p fn:2{P?C1, @ioS "v<#NN㼕.}\X[)R\u&ZuefV*V-~aƩH98ZQUngvaJBBhgHE0V| &v"&Hcp1+ᮂ~|ؾh*rX#ۧnLDƖB=J\:jv> ,`Y.RؔG?\- p OucSX M lnoK|ax`Or >`DZ0*?W+)k蕂M,î$G h 5%dO'b:&Rb9l?/ʋވzA~47݅R%n`];]|?l7ۂz PpP6RBWt}'hD@K*#0:I[c5͈1.\? V#{q[ae6Ғ$7Kz"-Ѥ6㒊AN'׫~䭜AѸ8yNP+FSP|ciJUV9p*q̜źDʭ}G_=_diXċ#H9?~|dPfn>{̿HK(gԽ qTge3M+]\w? 84GQEx8r|m%g\zlO|R*;s!_ "\Atj8axB~0 [~h#.u 4spPe * &7VrN 1ȠzvmNHI Űg@Yz"MNw\@yT.H T,5RA0qHf B_O|M֡;*<{Dm24D>XDbdEңN.~?޵_'4G5. taB۱3 ˥nǩsIBU0-x=Ue'Z$W@FT+,+5^T /0A2(MQiq!b6{haX̴xy5wJd,`FgBuM"p |M~KL' + wޛl&=,Q.D"2db򸃉EE_g:8+ O,w]Y΀bW2XJB\aR>Y4 7ILO>w)~Lg " ՘iq~rUX%>sv Xm"6FVq#:-:5T3iՉ+fML+o[5B6Xs!vAsd8I0n.-Ϟt5/J9|Lɸ@k5aӢ 3/v^roL /r(ƊU7[Fk< t1'(oq*2ΐ9g] !KwuF ^VjO2G}HwH4=O+-yVٿ30=U_㡬! #_~K}ՙ瞱@)TA/!팂Fc,JR8*z?Yoԟ(C E:yX &O!<`7jZȪbR ?z24 CO+ ;!(=(P -/XR#bs:ڽJm+ңUFJpT^N3uP}gzd~nwH5V}*Gn KM (<+Lc`IX/&[q\rQmCnaKiG?8FGו\!HnXP8W >gĥ֝F; i`:tYuCTt6e!CkH== [X:H8. [W]CFwSp/V,5AP?P2g*RkםNQԲ}߬iCK*`ϲK,,D45|G.V!kzDPԪmf,<7!(, t1 =;iT,ȡ`{\^ZBCgDr'=D+Kp}߹k<V4NJnXœ&lǪO5r8bF"X1Um 89C 5I<ƨfU DH tVh"]O֌زMdi3.qn<[{'O]AYS-sDAΖ#:CČ!vc█tJպ*ollGasF*7z廉 TӁ,hͤcY=1=5|k9@ i;5E?@WOSd >՚X#O,ޭf9rWոwH미a#*ZDFdpZ;؄U3w` 1ɯd"DM,]@'לfMUߥ%M]Tɩ^B^tڰ09Pi3c{qCKBМ%\]< $mwI$㋚+z>{ ##n-1,FZhgˍ9֓Sz4{}'ԍs7| كy6ǙXݕ95VY.v?(~\fzvgH ܦv'CE,1"s//;fbn}g{ $ {XKky%EE?%(=k+T"j骂mYI8HB;lۻ"sS4뽦);Y&:,q)8 HېoMJrӺ*?NX!S`y2]!;201`sWXxݐtN',! ?BA';_lN!D D# Nِ1Zݒ2YxiE_Ezȗ Se+-9tD_L*++80UGassR8/=MvoʗƐ9e#]MKd<]X* ߤ7CD{.WBS}YI؏ȴO̐{eL" H|L9r 7ӯɀ^baF-e)Е3A1׊0.X|VL(y .,D0k%| $ox76(xi@wIT15 &?hmYՃS^ pT8 r.羐R$ q+\LpXkjR_t`u¬#t=" uKnoCfcM+bz4r3A=xH_&OِmB=Y:&.zwAp! 6zԨN!sjyu.ɛI{ i 7̲sp]IЀk)x yd.޸uuMaq)uxf!G^m qjK6⫇,;$%{iJgͫz-'5N7U}H-dIb&(`1l7F@tJWW#2=r jtƀu >O`.m,3H_@jђx+dNL:ogc2jR~_92T&:s=O_}+6=JccS j]XC; %iБ aШX .`&<}rOyZ)_s〶G] ̧`5t_1Ju$a ufik69Us=HS , [I6o> jޖ3=&.ʢu8`+D #N"cY9›)7b\x=ogG+W*v`9,Ys dF6i٥D<7uCZ(cP2TjTXn%ŷa^gIV˴.Jp tk8*YN^׎XmUp_dVh &y-pz.j@TO!!LD<5q%wJ2鸷>1KQ_2RYհ@cw&#]j>eB $[,XR'9+Ҿ!:E\qv҃_Pz7D߭bWw.hܮPٴB38 ,GW(B\L^*4afڎ ^>*/:h gacWgf'`KKȦC䢣|Y^d9nl4gK B8& 35bH@\͒7VF )(;B|-"P}@F>ޔ?E/MKZB8у뷄[-q U!A m9bJ7< 'WgDeMkAl wDP@ى[?{8B_+.Ę)Q|v) Ы7٩yH a2[ѾE_(ă* <#K-mIQzj{eӘ U>2?ZPmчXMB%3@Gs&=r$G~&W-` =+Fnd!F *ƉaR m/Gw_a@=J;k #Ss[ HSڎI|M+u.~6|`Y{heBLK4me*ػ6-ϛSYPe ˧13z',ˆ-Sp)Q М(L^4cEwT$XjCW폷kKV'iUI3k.GQ}lP uvK'ѕȩ#zuҒ9ZW;BXH8ZoڕӠ=jEs@;c?{ԉ0-̣ ] Ɯ'6I]wU1L?[WʕVitkpTE[$|4kĵ:5_Z4&YV_m ӖnEebwADZD ~6<'u_t]ew(yGĕZ6vT_5йw'Va~NӫUWC1 HPuiWӤh̦˄`UYOնriFS39/k:0fʫ5.ޔW"dA3ANFbѷˬ klRp V1C53N5&}ycmCr+SB?[r^Y[>fz:XKDEK:1C6a*#a] l&jީY/2pQ 4ghJg }"%BR/mInw7TO'~ޠ  etZEVgEC5N}OUƄj1 '?Th|QzC7Or+ϣrQo8z[Rt"PU #ZL[ac5Mq5ؕA'm6|hngŵ?yB ǵˤ9nZ0ths}/ |mz1Q8[|V9<^[K'ߒ=`FFbaVQ/փH#2jM<8inP?9 gO_֝Weȗmϡ4 =rY^1ÕAGK3 1;>[ եjoA!ϋc!}G5;[Bw\˙%Y@ˌjζ<ܫ:]ÄKLɚ 䱫NҫLD?kk/kl!1PC"nކ|X"sǐh [dY܂4hA!.=.8qj7mQ,mj;K(~>b ڀ-sl'޷NRT9z)wVnLT3rO F7VJږ.s7kƁi_0Vzur-I園ܳ}@J+iQPRyikGs3MMiZ&lE 6jZ>-r<WSǪkkVWhmaPa& 5#E1vj=L2bآu4 >JΫ0 *5"|b t$o3'3 [J)hIKD%흋C5Tc蜼1,mbF Gɠރб_=- 9%QAtny"ʒ6\xV8nwI)q>P0g' 0 Tגn1Cs'V\VRv?9f[ʥf˥5'<(./hGAՍ~-,H }xrmJŞ=ǒDpMiPCzz5[ͺ)I,q aOV4SQܺԚ]R.L+ktU_;ذK!c+-Pmաy3Kڻ&MEjq.GRWqm_k.\*`4뛬 \섟Z3 p5Fy S>hDc{UyÓl#O/^Q+XKSuNPJ*1ePBNlMJ\+9t#g p)9}H9@"29ŴsR*C Ȉ3%Xg~oR@bGmyiFһDkuҎF6Xn28 7_m: >]NL2 => {"Fn|.TOCƹ?7|g&ҽ /G.7ME'Ve {P?+2 ٰ:`=OTř'xfL%W?).l*@<#UbNzji1yöLHtxJ=LZPDŽ&|(Ӿ_H)PK=ֹ2{È}oBTIA`oR tvgb4V!ZCd3܎\H=D鵼zp۳X&ERSn'{r!Ytb5'TV3.qCn 3@u1 id7t|?t =v3!y&a[L+#NY_ɀe1c_zILT.m C5YoQ%Q\$SliHkWwwW"*ZyLh@27'\̻oxK8ܷ,QS& `ŦjB"Aj k<24S7jҲNO8s;daWbr5 r jSTfnZ/Ƃ*YJ+!zfQ'FYPNQM&Y#xY}BggR!W_,W*;L\oC'RV[O%H"eP&tFJkN݊329#&KS1K&쑖;`U]X&!2J-*F:uPB):yqmɭ/cU#3NH>\tU0<Ƌ7⟳&W7k7X@iGc2莞Q)C@u0oRg`M͐4_LqڮęFsa,sPH 'ꮹkX&%,t`Rh!t>́qe Э +="rqϐܐz޿}a3|xb#O?@FGUu0[7Z) =]/:n)(u3 T=BF(Xϒ Q-0L)P3ۅ$h w%W-q|.|an]BV8~Ѵh|:V#c@O`u'6.Ѧ LJ;S{shjTYk]';%_QeDfAnnU; 2ETojD+E!,MܧoNМm4Z{H"I WaYhb0]__ :5Ea͇xM3 Gn߭c1­Qo5ny^ ;I 0]v>YMwj.[~a%•\ڄsRmѩ0=[5 qڷIşA%&JV@:gP+y eM2m,r}f汅S2ƝdpҾMh+ `Al6E.] |5QTPln-aD,$ ƒ,̱A'mV Wt+bRю;< Ƙ`n_15bAMI֬If7>2&SH| .jS-uK11DV(!Z+`.Q3`s܍GLټ_~].dֽY}AG5̕S֦J?=(y33.z~l9oYqsT5~8Q:!O6M2{3!j w@,!g$`Sjݦ\G,n|j;h=>gOє/Y3rsIT 4*uo|V<z# X<~7>.,eIG3 q"(8@&(iXv*q9tdYxj6-Пs%,@'SVa 8ľk: =5Nde.'E3 7}eր:'DoQϸ3TnAF+C '>rܕ?;"{\RS_ؕ/y@4Ҍew'po$ 6*0sqXkT!3_`ّMF-zc{=CbZ74뽊'aGD}W8#-+UfRFӉR7A/M-ƼT;vwJ(yUл|M6$Hf'&]WcOrg ؄z3~Xe‡HnZ>̈́}y!yvi^%It˅L~wѥ`P77/e˦C)st{%P++7l`riK2xuF[~';7JTX*>)CgݡcVpq~͂ Z>N*(|r8n-a(גς$h}qJY"'==?㻉)̀rtCUW˜3-XtJZcofz<ㆋEԂ'{@er, +@tC{e1UuO* .9zi.t ɋTL@Nlq,dz"wXHDt:MRzFpwhč5nGtHނ`<>K*#{wPYŐnZ=C?zph\`F6{dѭ~ GԸyuzo|"f#BvT 6"#k{:KaB-]?1#k75ūvK8ToʍZj Utҏ^k+s{hf @WKLbG Km~By,p}}QܫX2r&?ak>]J`qsM@ƌ0{nqNS·q9GKiȥAMZ-59,! Ӫ(o'٧Lr/X_~VF3vUĸs?ki9Wi%27eݕ;|T[Z;I<"/VwrR;dޜ]<7:47̉ j݅s.h›, M(myJHNj[[zNzLBK{7!ZE{D°ɍޤ4osA?6?ji~q#i)UC0TOVrQg^7rq9E\1Fm5x>1 m\"|OC'Iy(#FĠOxX?f3O{#i{waz&N_p[@tf'!3< 9DҮkz A5OZ8StRiƾ0zg Kό&d{Ŧ lj :]ߑ<Q'=cBPdcf +JlLz\m,34T`H_#FSv%s釒c`ɦd$A(0^= t]kK~}z$RsPeVMB8 &ph#9co@p_{eWI"(ߍk\•ߐ4j'_Sw밄GQMyؼU%&-56"lKMy#mgBpO;d*z2澓l`;~ w&\c$?7Ƹ|%X6vkxƙj2=CӬ:qD.x}iwG|_TSZuFcj;4FX"§~JqꨮYK!q)^,An4B4  KǤw<ӯ:R]gP b%)=CNN:|WUs*&a_%UDNb_@O/mӅZi'Qg`C Q}Tߗٜ6aVb#մtn\kݖ>aWPVCS@ w$ވz*.$ TtCV%ɧvURz~UNҿx>e:H#`H=@f7`xמÿK9}7b~?΂W4;(i%u/@?p{2ڱSÈpN.`'SepXRR'4{r-H:A܍0.V4toI2aIc.|ԸL)4zb.Յ!sI|z霚LZ3η˭ DkSnW0ZY+BT2!Ma>:Ix>>Pj,s9`Xh2lCLrPdQMu_J՝]h"n }wM)kTp_ؙ穼WtSq묶BpS+iɺZ"'LJP`7*y_a̍#CU2 FUMMЅ~C|ZOc`O|o%I ƪOhq@iSC;W.(_J;E7vs7rUw!yS:Tޞo4Žw^ kEd Ɖ}*P-TE^pբ24NS&e5Op*G6"q>1B\Ԝ z,>S5B7CU 3_L*Ox|5!隥1{Ab?rY(q 7z?eoTP,4 !X:Sx XmtQTb@yҬ(YJuӈ,D~ "pCbfЏCaay/c4UWaKh2Ea@֜#+~:PZޏ X5;oUOW-8tMEg!VT! +-, 8F"N19ҘYuu` ^@Ғ/%vӓ9mϞ=w k'"ր2|2'ί=(by $&%l y} ݟAr*Hv:OvpʬM6 By=ep Fl4Xf.Fz! 7_?[E@U Ɗ*yFC~{ͭ] V/ ۧ&QAfrgf13<(3d Bhf0cQB!* U K I價KQ6vrS{Vl~IH21~0F-Z!Ab O}?kx9I@aSO7C~ut$aFg.il"hvz⇊#ء &[`2u!vфkS*cUExu,+b8S%sk*}S~gvT| 8#,*Bt@DpOy oMD,(Uybp&'4 )E *O8rb. Dwr=5e "LOb#0@,&g&E{<gQ~7_lԼ'C;}^ŷAzOR}I@#0QWj$:kÉ$Fo]`$THGpL_}-0-e-J-{׬W/֪r㺰6$OeG u/ד[.?j"!'2cXj 7$_RrUQ\Fb8!ѣ7sq$y$n8;9~)]v@~3,*CmNhgOv;=1IfIPt(b:wڶqCd[;5hh^RLDH:9UTT7A[k|SOIr<8[2T+CxOO+~/:X7 Ft:5!p+FA IcX[/:[)Wϗ00V+JTBg8[)bʢٙAP+țpIQOe05 IlvCP3FI>eVkޡ/>TF BCfn2&tRS;v`fzG 2x^e5ey.^Ida\6AjB?)&xefx;_|S>UƔ]t`ͲO y~Ԗ?4lv$l(~qI+1df x?(!t]K8'ߟ u#4!G?(Ӵqtw'x(ʗ]ӎEY0'h/" s.ރmpPr:OWc*%n(a3i;:(Z D XUE:ey#,]K\ "@VR(>gdNW M/)>d4;i p9TmSěFQy0nUXQ.ϐz+/y`!d>XQ$Xv< ee%۴*һmʳ]J\W#הH_Wbm*({1]ʢӱvF{ωe!KT ;y)Ƙ*Ջh|~=]8 W4%4kHѮ`~C&^aĴi{ՖaUHҋxE ȧM)w#kڭkW(le`/\QF X^iq&]v<1(Y0F#4(:j}=x2lC7(9&}HYΗCE&.bD%ERQi Ҟk=gbBFUnsxNg[t{F2)N'+?#Ts+2ij`!ȣ uaؕBQ)瀞-qj:s_8!Y) o\O[܉-X~jyvilk*Wt_ Nt՞L _SvJ#ܙ9SC w-ԥǐK_!Έ V3W[iCOٛ7GP~I\}YeV0ݥl?xwD9 Kyo @NLiNg8ݲ?&,BFug9 s_!sY^ y&^'HL 8>AX&ƪǻTy9;P{snu'48.*+ig>\%boXL yE2Rf^(vKl Qiao{g:ZUK.1A^Q@lIE4<|LGn45)c}1I~,-3.x!0:bkVŘg_NPXCzk|67cQ^{\ 6\MP+}K_jCio AyŤrtg1Ps>sH7^ʪGk-oO*.!)|N{rVID̔Ig~dJ~aGv C] r_T /b2d)in#A͑a.vV7q(+ m`x!/*Vz"ƴVG ē} U:53RɰyND1=ɻZVC޻Y/[qJ{sŀ$hG[z~kK] Td7aɓahnsz;Ws^+)(H{-pkwpFz:2SpْWioI.O&\!DV (q2mjLI]}7̀<K= ^]U? yǦu9RݞK PwrR,0W\q%P1!o^%=gt;rʼkן}OɎ,?vEvr_9:eCg#݅o+N.+(eW a}WIȺ› |QִRܖEs7t%U0pv1j>444 LiiݷpĖ)ʀ8?~v:nj\L0Whn)%3`x9 W9cHɷwn!<ם \Mh%!j{F*ae t#WrqKWtxA$9RdPNXzƫXR)pIkٽ ;XjL:Хa^ +U0לI&?$ 45:kBr\X@̬ɫmCE*>R}pm'nA)A/ C7LZC1UNɢ_ZY&d/ VwR۶!φ+4%A(=49FLYt< i9u@pܯw}k=+xRգ( ,ٸ)GV :؛]4)݇W- /k Kc5Cj,f 0FɆZ>@Ȭ_Z2<606obBBI1#$UxҀcZ|GfLDLLa􅎝[y^ˁ^1Dꐴ'*|>~AЅ73ω:4̖}a|gPu&@nE95(zOH,߆t6^, Ȍ[do#Lra`H"u*KE oΙQZp:(;*DL|sG:4#DXʙbfNɲT{uwM*BM5??RaA衄Ab x=SD=E>!.IEQ*JFr;4JPwb#ADcnE<{L)Y-1U?W;-SΖpILZ5TqF[ӆ:wr((+Kf84"`E0_QtaW(%lUPˎo5 `s/?2R!80ܷ'h˙mP Y5RdZ*3S8l EVra-9aߐG)h\)iqiDnqCeο%80 > Su0禿堽}?f #!3yj8pp4!VUΙ Y7q~@ڈ8@=6O;`K GS [#p! N$GJ4VIg@ &B6f:s9q2ǘaD6h^vqamx,Ǵ3,gރgXVNm΋iP3<:<|r)TP}m6t]BfAəBo*ڧɀHY'u'&R(El'mw&{J:gM_8F&^\noDA7wԆ'woYB۳tv|]ƣȖSV}*MPc@>l5iBͮQ>N ˈxd#)7T7l#"[:Ck!NZzK3;\%Lvh5˃a9 /1-, űOP꫒zpm6$?DBԓ a+FP2sFv3V E6y eHsٖM!d;^ jC!1otj<.J{ N"X V  юe9蕸ubHJ+˞3]VFү2|Q-r+4y >`եwpx6˫VUIޜ6$,>ޘFu6o`Ba#B9!v*~qEA|嗏8(jۭ ;]s}ӷ<řSvBԄ"nL͐BI#ԟGn'bI 3R8K-V> Ao/hfMr W!zb D`)󍽵s@`bфeh3]Oy<QY9LH4[63͢\ cR: PB^lހg g\]86{}0 5"T-l52űIf&\T;i`~^طdgQHdAvW@Di6[]<庩 O|F`ۏA7Glfv4>SUוq=㽎YCӝ]1V@s-kjMh<՟N\,> MFN% z4E9 9ͭRrѐ%lmg5z4O"vJ)7#Lc `x{ 4 Ni+I4AA3㦁 9Ƨ t602~$癖D6`^Ymߴ/e@ u0UvPޥ=j~ޯS?*G@ZadR(ĉpdEM}Q*I {a©k~!,ZY'UQ;fnhѬM ד9?P.xj(-B4ŋk {/ |z aZ.>am G۱,Œg6X2X|P_ţ%NCmNv'UXc;tLe?Yp'fZJ#vU-,hk ?;芈^B1&,PXTGR}g UpFՁ\H0X# ,mJ~F!ouCK#2:'h!9qFwOoh|ꝫa:!Ū E㤎YYnu[L+Li>e=ya%Y~8!!N#dfmc^dˣ0(ɥgSI/@Գ'Vg,},0 { ܁y4Yyni}2~!rIޖJoZ8,te|E|&]oDOW $ @Ìɸ%9qVa.fB4].%4eSMb ?V HV&ꊠBK|y2!]0CF:>s7+'@8? vL`6˩W"靕*rh=0k_k5#eVPq4b蓽j C0GѶ4R\rpG.~[vgi w\fyW:CNˍTp{,fՆZZFP̖t-gbcؙ$]\f_sMb'־^EBbh0I*0pԄY8#[]yѴ:qzF 븩hʉu7CoYVW`Y;#.zl]yo\z/f; KVO"Z ~U"@F=>9m> vSI* 0Yd`Nj{Ckelk4&L^RnIcAFЮ!݇hM@ESB,kFTT%s"6sΒp~f5KFkԄ-k.5J4/KPb.te_K$7䗲xEGF3 ^(]!D]mhD\ %6ZV|Cj&:?\1qZ Dѧm+9/#չ\RRpT8ڌ )0י? *{ό8B8 IaNeީ5 I.B *J5=8=nd󷲟`oAhitQVH΄Mܹ6ʣ[uт@_)I&Y5'ie@5]L([ J@{tqXoc|d *`ߧph]8 헫bkmWuKV kwg Y9G'gu.,4`;ĊjcejߋjU۴gEGsMZsI5kmm|+;۲:ĩL$Q&* 46{89Lϰ_~(|z HQSDٞ6=<_bϕیxGS\3zex؈',[ÜpmUIS] J,* ,ek~Vٶ*u_I{f#\JZ_zvRNQw[.`#h%Kek 7p~#(f`*(ZxY~7mh'yUqvL:o]+c vi? n14NX9zⱵ(эjcQ\$@c![kF^SDO `S*uXǽ7!3C0v{@t9lnƖ1I$=ea3`9C>- ͆is9ZI7Vr;}d e}/fEW*T,$#!:gGu "e79O-K䗭C(V[o/qÌ2MFXv99G'{}ob\oN9@k愲$@ݔ,LL#~) Sʳ !#4fj?Ӟ߬&zWIp ;RTBX5 ^sX"VtY )tHT Ѻ5Ak%%j[H.yL@3,[iYE!os8|G]MPg4++nW`\M 1V5CAʋA2W6'Dx!EbB#;sM)z6)Ƽ"JE##&|]8EӜ+#'54s|DQQ1:޿YTQΗaK^QҲEOB _r^:U]hE[uÁVt27!;v:-1&#L*oߔio9T@֒:Q5 wErm,@Bh` 3jJ"p66NLzeOH..p?uf98\Ebe!>l$; )=ƦypeB-!߄`쩆/9, IX_lP RW0w$}pb/WL˂ oe<4:q ̊0iMv4-:QkPtYCBoH7t:.`A}E!RfcsQof8#]ah>+4BzY{ه q:Ŀ~4q+ Ufg_+0&h몽 Ow25. jҿ;-S17u3Nl4eu*HXa:l.n+):`/(ht4 n#Ai,6L>~g'C+!tι(8e9C)3GN8%AjB׮>4X(~+){N2+`ͧF4󷧐3Cu WXtǽjBϞ!pФς``JWK{&P[Ngԡ.yL @gy}Z\\4cV!_7y$} (ʱE@E~vXz:T޼OClbj)P=>z3֥A:udD"*C :1|:߿2.+74 {l5T[$IN;"еwME%C?#pDNE_@6kIG91Y!+-:~3 #I2QA}ظ& 52w@h[Y<-aW6K ҐC3P-sz+M\8ȴpwl?qGM(9`Hb`*}vI(xr8E/݈\4v{T|iU[Y =\E1\ \$4`gA*By @HܷaADo΀m4?6b[UDV˧@MX>>OӠ ;gEC!ذt֥0 V:KOqFr+:&{.5ufcs^&^,eRsP [y/w:ɝ=1/ȵg\sŚz*8VK' a:ꤱFPԌn7NF';"_mWIy7FzǮdg7;՗H$.N͉ pmm={VHDk7ǿ s'4\oW(]zi/].pMȶ |5:OxC*wAZXtB*T3r rYdgΈfWednB3!( 9"Zx>ؑ*4<=W[qa?G]*->&^lsT G#I0T9'8SWo6+d€umәU/X|tr)ʚn`YV>-xgY%A~IŰP2p l$M)æ u S AtZ_"npm87ƍi}0'aI1bEJkʯK+0״Y.tVלd3@|wc=Tz?~G]hqZ5%+pR_5y+EcqԶT?J6V2h=:Ëcy񎷻t!X4NWZhn NRTˋ`aܖ-\HhǫϾtN~w8zϋ Vu?F X O E}0[+ o!*MK!: ӮgY"$7H8CHEUVX䜼Edi^!jgdYy'xF>xܺ5ٚl=}9Ҽ`Jw>{`.u .e((C^ٱz=-QzrtOQK5j$)WV"H%}͒v/4Z9B3[n._cW GѾGʴ`R%\gBr fCZTS'W }q-w${VA􁫃x԰Bm4mRXDI0ૈ])+`1}d"קvؖLQrg# =ȦDFh@ NniU8P*O),̄'&tӎ<֝PIvA^)ЖXg&jjjHe[6<߇D>PZWtmkP /YPՄhL;\rx Gˊ8 ~P4ؕoWVw}U Il5 gqw}i 'q^)Elԋ)ߒ7Dŭӈ%O9MR05MRJ&'\%ݱ9 i*Īٌ KKpa=8룶#bl[z8KbCd~nIMGqy]4U4E)-<f#'!Qn<֤Rzܻ$%4L <Ճڔl)71s*[XympՙztU|" z=PAOQvM%5˪E "Eq 46Hȸ/{+QlbYd"q >J=? Ӛ%]FD0MhNg_1hzM S*Rxa3#t DHyZl8SRԒ㓵a6$}LQh-&09>r"+mU^,Y/usgs5u:{^" =,FȥŰ-:Uz5ٛeA.myu]6;zP1rg H׺܁)+htx%6\&@4Xw>|&SX[hLݯޕGl11ȶ0C80gvjbf45px*?N%;a6p&rZ+ׁZ%M/JS Ov:@h uH|V([.)]kԻ l)+M]{ ¨̿LiepHH(Cxtz'MF@HfJGa_q [ܵM׉?QCj6qB v`zv;HtA 7 gD5ᦏQIZF?O9s&Sevkj:y]-Vǖd֤ ~6Z\NuT4QJDk>kh٬FmE,mc'N,/KrעlOؼŠ'V5jaHjÌz.;~C*Ͼ >F_reQ6gc~uČIM|ҹe?p3=9B ކoʐo ;O.}_Z3de刔tA=t)1gv$lEe#z l|D߉754IG=n@X؊urr$^ٛ&"ZS GQ织GE_ِK~@2r|Ӳ\BHwg!vzhz%>9*_ ~ທ/r.yyH[靇ইY>7^ц%B=Ԓ1!-ηh} +|ƁcY^4/8}q;t ma957ȋrLT(JǨpT-|:=/a33JmvpCWrʧD]sGl} sI-r)$~輛bP~2P1#}D# h,H l|]A9Ipt*,ESOi\bDn]Q9_۔#ſON1QJ)!ڂWNi034QtĪD&&×[LuƑh?kEw*cs{;*ouWs Up~@rUI^>~t` iqK/;X 9*#22Kz( `:&\k f4^x;oӁ8Wi2w-E<(N/,I^|7[t8͈pC4r};w7:hn}ʞ0<1n,no{ɁB/ǖw֊)E:i\I, j4g%#!X[ _i4N#Pg&-.LVW{6by,0L%빐e\p?ONMpI#w"Yi<C2'qbCbH[K#kW)!ڍmL^s.ɡbds'A c2/ص_ac.-z b5a/DugB[ Ҕ/áqX̛o:0s֡.x0qbF4-6xPٙsn'-mhq L1T#FOA˱lŅ67kDZˌPv,3[T̋ՓC(-TIU)Ҳr\5&KbD],w$1p3fCtG'( TJ"{;BLv9rPLby.xfLג0vvbKD6j|n< s3htbF6@ť+9f1>rb˗Ɨt.TXp_# +(= ~U7P$-u JQx$sΐp\oT҈ZJ}>$#'r)fi"vA",ϪmBTz翞8/):T7G1-jě7 R⯂nZ=bAu#j'r xԩ:H8E0Y<"f2G 2(jrHޱ@>ǾW>=6LR>B׋@YVV:ɟƀDǭ4(i:M2H"8>S 5X(C`کa靎V9g%ߋm݋Lp7en\xq7%sŎux*WZCq*C_Kao3՜~IŌ T@I߄$JbFU7H6W)V@a w-/A$TM I7Y|&z4|;,0Щm(yDo֔;J { Ѕ '=6R,_n4L A_ nT`gH1zG ?̭^hG]c(=k) _|[:u$^D_٭.a_qmҞN8LB%SN\ &{_#M^*akYB*9Zp \w_x2J zd_G";8Lh[^u91ʜ_P8\Iĸ#ŭ,ȿ/ܰ!eTȼ[eƻ?R FM4.]RD8ELSqZhJL[)OgO>ԚW(lt `|dk蛼 qڊ'x$܁Es^&dVNe5lwǼ=Lo&l0x9}l۫'D3BX+w1!m<8$*?-ьG8\!nœ UQKΘdmMS0i׏i$Ͼw [j|4- ٗT,qVv$. yb3%n7\:p/E6ia9?x͕نQ*"*H тE Nbq6D8atdLt>.5;{ڦS-V &7qQwU`MݏuFgOnAbA|m5_^iΟ]jxsGf`фV/ -TrloҜijm9nDӧzڴ4LB  c7yG^ֹ;tOfm-h2Fd%_33;j̑ u8vI/Lڰ {AE+o[=VYʊв$I)uujJgc&|t~꓊k[C[sm|Ƚ;X4~\BqLi[a٧qfd^լp;A־S'` yi7~+;\ރR&cM_sWaG'b/pD"-tS2P>HC?  Rf&TƆ fst~'qEI$ !O^JƪT-3pš:~K֎,*DF̋+HϚj Kz8H;'}Cu=&EMo+Ô4Euq^$on]GvN{V?aGڲ&[ e&OqrqudXs ]+X 'P-xGҹWjcznj`#:>~3bM[Z1Bycg?,W憩^ISZA@w&v$E󂵂Dᚨ_!<* F0,BLSudBX{+ I+c%>s@k. n%p)j;}J&<ЌWL8g?ʟ?7ȓEYr}*B<On}NbyISqʦ!9h)`äb5,s2zݫg?3$ S ,۽_./9{g3[!ti7?c9UۦAAY&+,E1dgG7!ף}$NHx-lKkك_M$} :̋K*y@C᫫Z=&VrW%jm9g4e 5t.2. y:ImvK 2 @C2v# hCJ"q[NbۆEPNo_Ν OA|[: IWXQr:})0D(Ş/ $hy^t"OA B^a'Uj0dfߕ \uk`QZYE- x8 ^B*H\6 `K:=( ,iX4V f7U-^u@&{z9RC0*&}QK`[d<9lx6,Sim*i!#-Yb<-81?ۥ#^oO<| 3w0 g%K\:*;q ofh^Yv'e`?^_:~1m~jův=?I?kMeA`S AɅu۰-N3a*#lLcUсC1c&rF}pR$LZf?GSJs\Fɸy(jHH(*)Z8>!"܌hYh[A˘NL[;ڐEq2B Yglי:\퓝U0`€U+lXOUtU8x4KTWmKCU.GL"ݚ2ޘ&-X :aəͧ;U*HlB[}|r݈w{>sNKlPw*^~ oD38;Kh^JSLYD;%SI|K_"twKZr@)o8 n8SN1>YRalїUU4E1({ٖ G)} 8L=LyD8H> ׭‚GhE GEqoy^YD \"].Ӓr%2ڰUuT/bxTjCpF[,tN&lv .д-è&׼f'NhGHj;1|$fluGA6S!);!B6բnxE̓]݄%*:6F! }&O*3/ q^q&%;t(Ɛ'翡(r/V[S-+"%7!s2d_HP? ;P޵A)5,GG=nB65Wj;6 gdckiRHN.h>wv+{/tү j{69AtwS~FF`8zWDk 6bث0e&z32f5[MF'E<:HE1f@f=8RdǼǴʯUb&m*p*W`ٲ/T}rCF\i@,Ky|ݞ7<]NR5!j,B-\Țn@du6^|h&^ɯs|4nKyy "B?)I#A 4$\Nʥ8o[" XWpstcw )52ͨB $yhwЗuvNx>P_5S Mx {YOYH.(+bXD n#m`"KYv'*ý V=#E"r.Wмn)?D9 Vt%&kD8i o{k/d!MJF]lp:KN +mKv* `PmJTP>Au>VbJyE,vd_B :XLl_.xfd嫟jБp}D{~~.ӡ75Fbng٨|73kbˈo@c+qΣY' n*~>9iF77pID6ٙIΘCO$z{ASHU揗T:4Kä*h>i>Źh=UKBG +C=Q(ܪu V ҽi8X78RhT<fq>3a]iEs_J+PdV髐at WO]|+#vve*]x6? H1n.x~kRZQ' Qz%jAt٧cyPR7P䠰 j1VfG-[Zhm5n3*yHD'F^xĞHt}k  {^&074$O g>kj@Vi\: rr_xsc{V4wEFLӟ0'!nĘ/~\M*Ih6zH4&}qr.J6?=,` k\I!xi\bHN׺I 2Y #eޝ>)5KBG-hF|$>s0=NʪH,s"ۤp턌lU+ɴs+²w:;{~CF1ѬV-` pNq`Nk'_6N@ I'|ܨyfwHJ1LVa{( D߅ 4׶l7*-nhKɅfW!ΐtˠCL[`=wqYCyak#eqm|fþa04d=R"q lRN؏   -_HxP~Oz$oS7 s;=͉ "-GЉxl>C=GyY?BӍm8W*+M.bfyNK&O" 0G2_yϖQ[wˊ87=̛Sӯ:ڱl圈S.#9ouDJݎQr0'7i(E [TY'\2;M=NlS,b1:7A !q>--"}0e[~d8׆K1,t4aӼg`_-=)$ *S8>ua ]YYcoGeO͊O;H.xpµ]?oI g$Hɑy$ r*q &'Ŭ+'NxkG[ Sj.mG'j~;z֥ Rt!iL%l=:9zWuŲ- ўgT*q6J4"F+fn)=01|g}-u Z֜_TZPg3hJҚӝ^l~U۴g}f.s" }$2qqB C@ۼBpz4Ǡ(|q?-ӆlJ+۟2ಙ'ߎ@jNluצ;o.CYo)Rb{B)W6;1cg}ntĆTA(l^:DѲܙb Q ic-2]]bf-]Ft-oT1{ M:slًͳa.F[`Gf5EcfDhaW[M̱uI5*Wݟ7+FĨ$%ِv8b͐G=);4P=v[Lfz6W SuJDJvBq/i7H 5GHH" МؽG}\]M㳖D\~ge'B#Mgɾ+2 X _KUoDCTD{&JSXߐGs ԱNnX`T*.G'Ѭ>xCӃ3:;DanA1^9AP{fԉ%,䡜1}_Cv0Oi43/W'O(VcgʕTH|d~o,jU|74.5٭or~ZpבD1=S!s(+T0W EɄyG%V۹*F9vL)ݎc>O'W9&!* A/ [kD1JG݃)b |a `b@@[2e 5չ=MV)Mɒt]5soj,zaDp6.g!DfRd\kmVT?_.Y*r3x2HŜI9@:UJ%p9HX$<5~AЍvMwT )eiEZn#Q"oױD,E{}:#m^\^os#g @$O~f!vNAR$Sny9Q}[R$Ҫ8l yхJ2ᑕ,.oJ ŜN>a9}1%t 4u>x?iPW'_ lɣ#n|ʾ[Y){. RUHz؋nBƾ*knk3aR^-Ϝ, efފ!ExK%/vGiCZh]%`˜s>$)estdT\850FZ K/$ ̝bfso%ڶ": xE*(r>~q5%v,~A'{"+`i0 =@BuRYb:D( 2ެ afjuEo@QqZ˭$J)T4> 3[[)\ ##l!|"p6@*OV_YfnKYN]8…]ڰ~=-~4}EoXGVi'"( POd7홫K)xedYX.M?qP Hʌ:ɧm5R'Ԅg@,dW$ ¸'3JlI҆ Z$LIx?v|+Ja4,n23"yONq1ԞeBpӵW4J]3,|AL.} tc\x_Q(0|6>T>#Šn!QQk8;^k1,wW2ψyޢ YS4vK3L\%ލt-Pp^#gAט)dCUfw =;uоvm93-( jMā7 >cl3<4 )`[Rds9bbC;YF/Rj/Va[-+ *T4f}t՜!% lv2L!ghMTutہB Zcxֵ8I{tq;3\Qe]ExNQ.ݙ!"n\Aڃ'okN-q7&drwN `d!ϡo o`'L*c/9Fhm#׀yջMe;o]˭bP7QNlZG lxd4YL%? rxl5n7y\G(o 6N&NY&IL43mcG[t{|̠TԢ8`'V-;i՜kmNT6)ݻCu@~oR_^٠0i2R?k52]'Kѩe\Ch_"j1kH2A>sjDCS7S˙2_Y¸aM^ &DXKaN4%~K9_a:S 72WzF;ʲ܍I^.Tw&n `η:oEES##5 &ճ'Hzû(AhrQwZ8塡uӝxg +Uzۙxj(;U4n)3Ka73B:tW[L":SlS  0&Fpۓdꙓq`]CO [%uk:tUz' &Ib p_fk9Oj ds]> !V(q n+ lD$ 3lXJ*1ld#2ΦU%nNK;×4\CoK{OXoyV鬒(Y  :}ܵ3 ΋ux@G̰t^8l:wfP(!e%i{ qkd+GU@˸oք݀qP_:$I&NhMZۆ_$xl 'E5]J.)x_Ya}~`/?jn^ߞ!9JۇfK5ڭ-XxQN_.Yu9m LE c ,4m5"j*Ck2"(]2NU`PQpQ!^i, "OMHgq0Bϔ TH 9_z -߀p'O4*RR32ۨ7/#58r;:+όr6aakvy{H`c&fC3 oђk_ DyS!֙ WӶcC$3:LBgim85yOxǶgL;I7:֗[Rl4VBΦ>ZFzsxG4Yu,jP|ۆBgL;AibO !^zm`rP/?]3cDĩr}w |powaR# rImNy,ĢsBO1AJ8(c=j$LQjWgǟ&p}ȗ$59r l X_ bH1:*͓ZD5hSe 8dT i)֔ Sh&,wTZ^/({GL+`멏'r[ؽYg_6?S%hDWr?JkDn*l(#~q=WÀf̈́CzS| ;AYG6y"&\C\y\@O*a7lnFlBx~|As>4ZḙBAēw-N-laM|zROZ»@Of}dAז!Q03ωdo~Txô}7~ڳ(B{h =0(/fD| dl9܋}|e(sBA!]A GʒJYy![>niU?Bf7\[q8Ĉ }͂c/[b7qّ=&gN0տzJSg{ײ.]кRwTjFA\QGDEHTӻVRÉ{yDDރ4n h,ÞT wSkEJT1\K1Uf4SqAnMEhfG5/xԽT !5?}WX7\=[qI@aNJ14>K!z8/ LYEM@Ρl}L*sDik-s @ҠJ|3QIt%a-G@ҥE9&x\g׏ļ0mzswY 4C/ǭB[Jb4mTf3}ƀ$z!7ɒtZA D'Ll;$6{ e=%9S?0WebxE7?4r~.d `#2)'u_-X{ҡhmZ>vy厳C5 TbsD `斝̓3NEA$PVjm&;آ*%v8C,|K]CBT8b%L n"*fN65=a^t%z VDpiRy 6Wn0wl:N^)φ`Qm:f1|jiHm(*ƶ.#sHUUs`pVEWѫ(ݦ} x$Գ7f|7. 9*ƾ s^ ?\9<^>γN8v}H$j=`Ia PEWZ .DX[`ziOyWcЎKO̞xƥ$a-͹hQB Xi?|LMXqvY+9lq@Z+ sVVNrf,7I%2!6WPP5+ۅ-4ن}8vV݆+G}tBq#L^V-sutVeN|Eg*,w1.<n>6PL2f`>)#ςt;2$sWO3a0i};jqW2/5y#x+?ԢCoP(SOϑRl"mGKtޭ_Hm:$(+S{Kj6$M0Wt3]=Aeգ,<OF8xB( j/2F飯BfFT"[?_oQ&1K{|J@8@3;Kh*H_zyʥ܆Y:EeHRB8-iKaH ә|2v\jmRgPWT{S\lHܙLur٭] ]$Ig=OWthl܅0Fygt:gR@5%eF96ro+va&\B7953TZg7i8DcB5'Tam?_y`&\Y@USW>"ֿ!GARZ*4nw`[w~bFįBc76bRֶܗ)0n;vS~NP{ю5fׇY~0pvԍNķxaH_|G> 1[Ձ>ZѾ7(Zj4$zhV5q6sPH'{с㧖km?AS6 ȓ&UF{7EJ*Q\!GW0tSSk(QKInu56"@n"؛Lo,wDi N2 }Fp)pS#e\KKh_&BGkoxqZMjhEc)sa!%8҇QL`K@Z;>N1^@Nf^:_fENBƤe`v{v/뾊u-gb%.@TuD()lT^Z]ր+.`#V-vcA~ 6c Fv40D*&YL7`Z*Q`bb ιy>A$mx2!Suv.ic:pa E98SXes%Cht{Yt(QoljcԼ{{H𧬭VYl43թ!NG"04fFE idg u-9IpR3,mI'?fZlz蟫e@5i&n2<l1jf=E{EvHxgSu G gD圸^qgy6Zehxuriv@}T^ O<0މO;1Uz ߧQo\)Q>}K&u,NBJOۤt8(?ma#_^^V\PDMrft*oLm+kPC8"g,F!&H`mZ!VOmE CP6rR!w>蒠p<0J{ؤ 5'fЊV4A O6e4ОўXQeX?4p/c DhMԞt`> Db<Ir~䵧8sM}8'Uɍ۸)k w%??+9ZѺ펠bJK֏E3ss u[[>I )) `l@K;ugI~TGbMl =@AARul.T` GEj!)INqF|^f9jfϦSH4j[zGcRV0pr;f()Wv8LQt!GEY m2;@S6ĽdEㇲ˫jG io1_kO|t_t+sRJ Uݸ rE4j>6_-Z1ic((}i;FuR/F.oLiÕ Pw>"ЈA67b ldl;5sejϏS~QO[!H\ոVVI׮9ۦâ4$*u(͇W㱫T d<ŵfn h{"Q"GdI1?ƒ GyV)ݩ#z"eMbm&&irCʻNrloWzx:ƢkBV`nDC۸fŽn,ţY.~JVX\혜h7fF+FYL vtM5;vaYW#hxf,"Szy:JZfܠ 0 6"⶞HeKX4;!֢[pX㶌M8W֜YAhV4o$w!.㪨Lh#mԊ kx'H)R;?;p7k~Oc>ގ=RG|QC#VjEt8D1ED6fHPPeOOgPӺ-i}Ű)XPŕqǐ /3|򕟯s%Iٻ`q5aP颾W6@@+N/ς7lFj{Z& AdQp|&%JKHʵRzY&hUVe{"cdME1i7/qqn![p~oғQ24 ɓ[s*yh_Ad㚳zZRY\߀+>.U|ߩ]|dTE?+VPE~E_XA >gf|V%50u>vW`E;Ӳ fW(4(~ 5 (|4(]?j-TiXB~AwA]=wΊ6xWil_#g"N!V4Ӟ^|ua+s9ivS{V*[. :b^E؋KpTc4B(0eqvnM>e #6ÄtNV<4.8'&Ke$>4?eئ^WS:w9 9oKFK|\1ȃF" b,U1OVڸ3i+ɕPdY7>ƛn~fA qWd  ZydSU x $K Yr~pIwmܡw1AGk;%K͏SY!BVCGD.5RN" lY,-1\0- Gτ_]p Ù8Y 3G{7_#o높*Ŏ3kL8F*bhܧ>dDop3\?`R v/K/+(u^֔;_AСFakשSK[G5 R$ga!mKgn$+$΃vX l17IJ))~na9l+ݍ|W+MUeL]`Ը_`0xz'ִ"6Tk}ӈg "֬o A M&_F6eV94g{Tp88O.;K2*OBF }omЍ۽j ky??*#OtxJ+&~@q턮|KկKO! > BZZY彂ÒżĞܝSwƃ,zYf S5bvE*+ٵ5I*j.yw=Ы p? #KՔ؉#L՟