389-ds-base-1.3.7.5-19.el7_5>t  DH`pZ$ƨpS7~2!mA#=|p9ˍpY쀌;o8C˝kxL2z4NF0 Cô,A>'sjJ0h;75T{xB͵[4\11sĴ5-N=,'%&cY;>kbn*{G-e$cXn 7iYJ/_W#I1 phل~-t7n#ʩ濒>r3e|y* 9LRE |p:g4Kfsp=dR/yGNSOҽk/=VFX9X ob&$-M\mqpiC;Afխ\S{kV -\"UF~|dMIN}x>@mbȹY FE>)gPe2mj\ru (Dz#!nZ?>Ls2oQeUN6Z* َ=le93ebaca82cabe7863db3f1c77b088131b8855d5\Z$ƨH=TK |rZH<::!JWQ-_@1¾s\U2  ][svpP6y4mp.+QYg=b*!&7`; +^za{39XcuFnX,#srXZOЂ ǞJM [ٺΌpŢ`V&`?wDJl7cj}@2ixZ%o(C&jm"z4 ;$z*B.㘽W4xj]vNMT2=9p]Ny1و!TD>D4X?4Hd  ; *E^dk  ] ww zw hw Dw ww ytwPwww7t(8@9@:@>9?A@IBQG`wH<wIwXŐ7Yl7Z[\w]̼w^"bdefltwuwvx:wwxwy4DC389-ds-base1.3.7.519.el7_5389 Directory Server (base)389 Directory Server is an LDAPv3 compliant server. The base package includes the LDAP server and command line utilities for server administration.Zx86-01.bsys.centos.orgT#CentOSGPLv3+CentOS BuildSystem System Environment/Daemonshttps://www.port389.org/linuxx86_64output=/dev/null output2=/dev/null # reload to pick up any changes to systemd files /bin/systemctl daemon-reload >$output 2>&1 || : # reload to pick up any shared lib changes /sbin/ldconfig # find all instances instances="" # instances that require a restart after upgrade ninst=0 # number of instances found in total if [ -n "$DEBUGPOSTTRANS" ] ; then output=$DEBUGPOSTTRANS output2=${DEBUGPOSTTRANS}.upgrade fi # Soft static allocation for UID and GID USERNAME="dirsrv" ALLOCATED_UID=389 GROUPNAME="dirsrv" ALLOCATED_GID=389 HOMEDIR="/usr/share/dirsrv" getent group $GROUPNAME >/dev/null || /usr/sbin/groupadd -f -g $ALLOCATED_GID -r $GROUPNAME if ! getent passwd $USERNAME >/dev/null ; then /usr/sbin/useradd -r -u $ALLOCATED_UID -g $GROUPNAME -d $HOMEDIR -s /sbin/nologin -c "user for 389-ds-base" $USERNAME fi # Reload our sysctl before we restart (if we can) sysctl --system &> $output; true echo looking for instances in /etc/dirsrv > $output 2>&1 || : instbase="/etc/dirsrv" for dir in $instbase/slapd-* ; do echo dir = $dir >> $output 2>&1 || : if [ ! -d "$dir" ] ; then continue ; fi case "$dir" in *.removed) continue ;; esac basename=`basename $dir` inst="dirsrv@`echo $basename | sed -e 's/slapd-//g'`" echo found instance $inst - getting status >> $output 2>&1 || : if /bin/systemctl -q is-active $inst ; then echo instance $inst is running >> $output 2>&1 || : instances="$instances $inst" else echo instance $inst is not running >> $output 2>&1 || : fi ninst=`expr $ninst + 1` done if [ $ninst -eq 0 ] ; then echo no instances to upgrade >> $output 2>&1 || : exit 0 # have no instances to upgrade - just skip the rest fi # shutdown all instances echo shutting down all instances . . . >> $output 2>&1 || : for inst in $instances ; do echo stopping instance $inst >> $output 2>&1 || : /bin/systemctl stop $inst >> $output 2>&1 || : done echo remove pid files . . . >> $output 2>&1 || : /bin/rm -f /var/run/dirsrv*.pid /var/run/dirsrv*.startpid # do the upgrade echo upgrading instances . . . >> $output 2>&1 || : DEBUGPOSTSETUPOPT=`/usr/bin/echo $DEBUGPOSTSETUP | /usr/bin/sed -e "s/[^d]//g"` if [ -n "$DEBUGPOSTSETUPOPT" ] ; then /usr/sbin/setup-ds.pl -l $output2 -$DEBUGPOSTSETUPOPT -u -s General.UpdateMode=offline >> $output 2>&1 || : else /usr/sbin/setup-ds.pl -l $output2 -u -s General.UpdateMode=offline >> $output 2>&1 || : fi # restart instances that require it for inst in $instances ; do echo restarting instance $inst >> $output 2>&1 || : /bin/systemctl start $inst >> $output 2>&1 || : done exit 0if [ $1 -eq 0 ]; then # Final removal # remove instance specific service files/links rm -rf /etc/systemd/system/dirsrv.target.wants/* > /dev/null 2>&1 || : fi/sbin/ldconfig if [ $1 = 0 ]; then # Final removal rm -rf /var/run/dirsrv fi;&# n"]9 \]p@,8mm,8mXLX 5e~`_I.a*-.H To==0X ,(pN(+oP(NN8h0 (PMP=`=hoP_,H|3g# b#|,l j i|\TG}3 6y 7w2') o <G~ 1A%: &.] *OG HH=n=+IMTJl 7mY GEYhm}(  l|r #7A" )i . ;@@BSB@ACAGD}IIqeBD 3 '!(  IjC2h Kf O !kpVOE N (^Xp:AA큤A큤A큤A큤A큤AA큤AA큤A큤A큤A큤A큤AA큤A큤AA큤AAAZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZY - 1.3.7.5-19Mark Reynolds - 1.3.7.5-18Mark Reynolds - 1.3.7.5.17Mark Reynolds - 1.3.7.5-16Mark Reynolds - 1.3.7.5-15Mark Reynolds - 1.3.7.5-14Mark Reynolds - 1.3.7.5-13Mark Reynolds - 1.3.7.5-12Mark Reynolds - 1.3.7.5-11Mark Reynolds - 1.3.7.5-10Mark Reynolds - 1.3.7.5-9Mark Reynolds - 1.3.7.5-8Mark Reynolds - 1.3.7.5-7Mark Reynolds - 1.3.7.5-6Mark Reynolds - 1.3.7.5-5Mark Reynolds - 1.3.7.5-4Mark Reynolds - 1.3.7.5-3Mark Reynolds - 1.3.7.5-2Mark Reynolds - 1.3.7.5-1Mark Reynolds - 1.3.6.1-16Mark Reynolds - 1.3.6.1-15Mark Reynolds - 1.3.6.1-14Mark Reynolds - 1.3.6.1-13Mark Reynolds - 1.3.6.1-12Mark Reynolds - 1.3.6.1-11Mark Reynolds - 1.3.6.1-10Mark Reynolds - 1.3.6.1-9Mark Reynolds - 1.3.6.1-8Mark Reynolds - 1.3.6.1-7Mark Reynolds - 1.3.6.1-6Mark Reynolds - 1.3.6.1-5Mark Reynolds - 1.3.6.1-4Mark Reynolds - 1.3.6.1-3Mark Reynolds - 1.3.6.1-2Mark Reynolds - 1.3.6.1-1Noriko Hosoi - 1.3.5.10-12Noriko Hosoi - 1.3.5.10-11Noriko Hosoi - 1.3.5.10-10Noriko Hosoi - 1.3.5.10-9Noriko Hosoi - 1.3.5.10-8Noriko Hosoi - 1.3.5.10-7Noriko Hosoi - 1.3.5.10-6Noriko Hosoi - 1.3.5.10-5Noriko Hosoi - 1.3.5.10-4Noriko Hosoi - 1.3.5.10-3Noriko Hosoi - 1.3.5.10-2Noriko Hosoi - 1.3.5.10-1Noriko Hosoi - 1.3.5.9-1Noriko Hosoi - 1.3.5.8-1Noriko Hosoi - 1.3.5.7-1Noriko Hosoi - 1.3.5.6-1Noriko Hosoi - 1.3.5.5-1Noriko Hosoi - 1.3.5.4-1Noriko Hosoi - 1.3.5.3-1Noriko Hosoi - 1.3.5.2-1Noriko Hosoi - 1.3.4.0-19Noriko Hosoi - 1.3.4.0-18Noriko Hosoi - 1.3.4.0-17Noriko Hosoi - 1.3.4.0-16Noriko Hosoi - 1.3.4.0-15Noriko Hosoi - 1.3.4.0-14Noriko Hosoi - 1.3.4.0-13Noriko Hosoi - 1.3.4.0-12Noriko Hosoi - 1.3.4.0-11Noriko Hosoi - 1.3.4.0-10Noriko Hosoi - 1.3.4.0-9Noriko Hosoi - 1.3.4.0-8Noriko Hosoi - 1.3.4.0-7Noriko Hosoi - 1.3.4.0-6Noriko Hosoi - 1.3.4.0-5Noriko Hosoi - 1.3.4.0-4Noriko Hosoi - 1.3.4.0-3Noriko Hosoi - 1.3.4.0-2Noriko Hosoi - 1.3.4.0-1Noriko Hosoi - 1.3.3.1-19Noriko Hosoi - 1.3.3.1-18Noriko Hosoi - 1.3.3.1-17Noriko Hosoi - 1.3.3.1-16Noriko Hosoi - 1.3.3.1-15Noriko Hosoi - 1.3.3.1-14Noriko Hosoi - 1.3.3.1-13Noriko Hosoi - 1.3.3.1-12Noriko Hosoi - 1.3.3.1-11Noriko Hosoi - 1.3.3.1-10Noriko Hosoi - 1.3.3.1-9Noriko Hosoi - 1.3.3.1-8Noriko Hosoi - 1.3.3.1-7Noriko Hosoi - 1.3.3.1-6Noriko Hosoi - 1.3.3.1-5Noriko Hosoi - 1.3.3.1-4Rich Megginson - 1.3.3.1-3Noriko Hosoi - 1.3.3.1-2Noriko Hosoi - 1.3.3.1-1Noriko Hosoi - 1.3.1.6-26Noriko Hosoi - 1.3.1.6-25Noriko Hosoi - 1.3.1.6-24Noriko Hosoi - 1.3.1.6-23Noriko Hosoi - 1.3.1.6-22Noriko Hosoi - 1.3.1.6-21Noriko Hosoi - 1.3.1.6-20Noriko Hosoi - 1.3.1.6-19Noriko Hosoi - 1.3.1.6-18Noriko Hosoi - 1.3.1.6-17Daniel Mach - 1.3.1.6-16Noriko Hosoi - 1.3.1.6-15Noriko Hosoi - 1.3.1.6-14Daniel Mach - 1.3.1.6-13Noriko Hosoi - 1.3.1.6-12Rich Megginson - 1.3.1.6-11Rich Megginson - 1.3.1.6-10Noriko Hosoi - 1.3.1.6-9Noriko Hosoi - 1.3.1.6-8Rich Megginson - 1.3.1.6-7Rich Megginson - 1.3.1.6-6Rich Megginson - 1.3.1.6-5Noriko Hosoi - 1.3.1.6-4Rich Megginson - 1.3.1.6-3Noriko Hosoi - 1.3.1.6-2Noriko Hosoi - 1.3.1.6-1Noriko Hosoi - 1.3.1.5-1Noriko Hosoi - 1.3.1.4-1Rich Megginson - 1.3.1.3-1Jan Safranek - 1.3.1.2-2Noriko Hosoi - 1.3.1.2-1Noriko Hosoi - 1.3.1.1-1Noriko Hosoi - 1.3.1.0-1Noriko Hosoi - 1.3.0.5-1Mark Reynolds - 1.3.0.4-1Noriko Hosoi - 1.3.0.3-1Parag Nemade - 1.3.0.2-2Noriko Hosoi - 1.3.0.2-1Noriko Hosoi - 1.3.0.1-1Noriko Hosoi - 1.3.0.0-1Noriko Hosoi - 1.3.0-0.3.rc3Noriko Hosoi - 1.3.0-0.2.rc2Noriko Hosoi - 1.3.0-0.1.rc1Mark Reynolds - 1.3.0.a1-1Rich Megginson - 1.2.11.15-1Rich Megginson - 1.2.11.14-1Rich Megginson - 1.2.11.13-1Rich Megginson - 1.2.11.12-1Mark Reynolds - 1.2.11.11-1Mark Reynolds - 1.2.11.10-1Mark Reynolds - 1.2.11.9-1Mark Reynolds - 1.2.11.8-1Fedora Release Engineering - 1.2.11.7-2.2Petr Pisar - 1.2.11.7-2.1Rich Megginson - 1.2.11.7-2Rich Megginson - 1.2.11.7-1Rich Megginson - 1.2.11.6-1Rich Megginson - 1.2.11.5-2Rich Megginson - 1.2.11.5-1Petr Pisar - 1.2.11.4-1.1Rich Megginson - 1.2.11.4-1Rich Megginson - 1.2.11.3-1Rich Megginson - 1.2.11.2-1Rich Megginson - 1.2.11.1-1Rich Megginson - 1.2.11-0.1.a1Noriko Hosoi - 1.2.10.4-4Noriko Hosoi - 1.2.10.4-3Rich Megginson - 1.2.10.4-2Rich Megginson - 1.2.10.4-1Rich Megginson - 1.2.10.3-1Rich Megginson - 1.2.10.2-1Noriko Hosoi - 1.2.10.1-2Rich Megginson - 1.2.10.1-1Rich Megginson - 1.2.10.0-1Noriko Hosoi - 1.2.10-0.10.rc1.2Petr Pisar - 1.2.10-0.10.rc1.1Rich Megginson - 1.2.10-0.10.rc1Rich Megginson - 1.2.10-0.9.a8Rich Megginson - 1.2.10-0.8.a7Rich Megginson - 1.2.10-0.7.a7Fedora Release Engineering - 1.2.10-0.6.a6.1Rich Megginson - 1.2.10-0.6.a6Rich Megginson - 1.2.10-0.5.a5Rich Megginson - 1.2.10-0.4.a4Rich Megginson - 1.2.10.a3-0.3Rich Megginson - 1.2.10.a2-0.2Rich Megginson - 1.2.10.a1-0.1Rich Megginson - 1.2.9.10-2Rich Megginson - 1.2.9.10-1Rich Megginson - 1.2.9.9-1Rich Megginson - 1.2.9.8-1Rich Megginson - 1.2.9.7-1Rich Megginson - 1.2.9.6-1Rich Megginson - 1.2.9.5-1Rich Megginson - 1.2.9.4-1Rich Megginson - 1.2.9.3-1Rich Megginson - 1.2.9.2-1Rich Megginson - 1.2.9.1-2Rich Megginson - 1.2.9.1-1Petr Sabata - 1.2.9.0-1.2Petr Sabata - 1.2.9.0-1.1Rich Megginson - 1.2.9.0-1Rich Megginson - 1.2.9-0.2.a2Marcela Mašláňová - 1.2.9-0.1.a1.2Marcela Mašláňová - 1.2.9-0.1.a1.1Rich Megginson - 1.2.9-0.1.a1Rich Megginson - 1.2.8.3-1Rich Megginson - 1.2.8.2-1Rich Megginson - 1.2.8.1-1Rich Megginson - 1.2.8.0-1Rich Megginson - 1.2.8-0.10.rc5Rich Megginson - 1.2.8-0.9.rc4Rich Megginson - 1.2.8-0.8.rc2Caolán McNamara - 1.2.8-0.7.rc1Rich Megginson - 1.2.8-0.6.rc1Rich Megginson - 1.2.8-0.5.a3Rich Megginson - 1.2.8-0.4.a3Rich Megginson - 1.2.8-0.3.a3Fedora Release Engineering - 1.2.8-0.2.a2.1Rich Megginson - 1.2.8-0.2.a2Nathan Kinder - 1.2.8-0.1.a1Rich Megginson - 1.2.7.5-1Rich Megginson - 1.2.7.4-2Rich Megginson - 1.2.7.4-1Rich Megginson - 1.2.7.3-1Rich Megginson - 1.2.7.2-1Rich Megginson - 1.2.7.1-2Rich Megginson - 1.2.7.1-1Nathan Kinder - 1.2.7-2Nathan Kinder - 1.2.7-1Rich Megginson - 1.2.7-0.6.a5Rich Megginson - 1.2.7-0.5.a4Rich Megginson - 1.2.7-0.4.a3Rich Megginson - 1.2.7-0.3.a3Rich Megginson - 1.2.7-0.2.a2Rich Megginson - 1.2.7-0.1.a1Rich Megginson - 1.2.6.1-3Rich Megginson - 1.2.6.1-2Rich Megginson - 1.2.6.1-1Rich Megginson - 1.2.6-1Rich Megginson - 1.2.6-0.11.rc7Rich Megginson - 1.2.6-0.10.rc6Rich Megginson - 1.2.6-0.9.rc3Rich Megginson - 1.2.6-0.8.rc3Rich Megginson - 1.2.6-0.7.rc2Nathan Kinder - 1.2.6-0.6.rc1Rich Megginson - 1.2.6-0.5.rc1Marcela Maslanova - 1.2.6-0.4.a4.1Rich Megginson - 1.2.6-0.4.a4Nathan Kinder - 1.2.6-0.4.a3Caolán McNamara - 1.2.6-0.3.a2Rich Megginson - 1.2.6-0.2.a2Nathan Kinder - 1.2.6-0.1.a1Rich Megginson - 1.2.5-1Rich Megginson - 1.2.5-0.5.rc4Rich Megginson - 1.2.5-0.4.rc3Rich Megginson - 1.2.5-0.3.rc2Rich Megginson - 1.2.5-0.2.rc1Rich Megginson - 1.2.5-0.1.a1Rich Megginson - 1.2.4-1Rich Megginson - 1.2.3-1Caolán McNamara - 1.2.2-2Rich Megginson - 1.2.2-1Tomas Mraz - 1.2.1-5Noriko Hosoi - 1.2.1-4Rich Megginson - 1.2.1-3Fedora Release Engineering - 1.2.1-2Rich Megginson - 1.2.1-1Rich Megginson - 1.2.0-4Rich Megginson - 1.2.0-3Rich Megginson - 1.2.0-2Rich Megginson - 1.2.0-1Noriko Hosoi - 1.1.3-7Noriko Hosoi - 1.1.3-6Rich Megginson - 1.1.3-5Rich Megginson - 1.1.3-4Rich Megginson - 1.1.3-3Rich Megginson - 1.1.3-2Rich Megginson - 1.1.3-1Rich Megginson - 1.1.2-1Rich Megginson - 1.1.1-2Rich Megginson - 1.1.1-1Rich Megginson - 1.1.0.1-4Tom "spot" Callaway - 1.1.0.1-3Tom "spot" Callaway - 1.1.0.1-3Rich Megginson - 1.1.0.1-2Rich Megginson - 1.1.0.1-1Fedora Release Engineering - 1.1.0-5Rich Megginson - 1.1.0-4Release Engineering - 1.1.0-3Rich Megginson - 1.1.0-2.0Rich Megginson - 1.1.0-1.2Rich Megginson - 1.1.0-1.1Rich Megginson - 1.1.0-0.3.20070720Nathan Kinder - 1.1.0-0.2.20070320Rich Megginson - 1.1.0-0.1.20070320Rich Megginson - 1.1.0-0.1.20070223Rich Megginson - 1.1.0-0.1.20070213Rich Megginson - 1.1.0-1.el4.20070209Rich Megginson - 1.1.0-1.el4.20070207Rich Megginson - 1.1.0-1.el4.20070129Rich Megginson - 1.1.0-8.el4.20070125Rich Megginson - 1.1.0-7.el4.20070125Rich Megginson - 1.1.0-6.el4.20070125Rich Megginson - 1.1.0-5.el4.20070125Rich Megginson - 1.1.0-4.el4.20070119Rich Megginson - 1.1.0-3.el4.20070119Rich Megginson - 1.1.0-2.el4.20070119Rich Megginson - 1.1.0-1.el4.cvs20070119Rich Megginson - 1.1-0.1.cvs20070115Dennis Gilmore - 1.1-0.1.cvs20070108Rich Megginson - 1.0.99-16Rich Megginson - 1.0.99-15Rich Megginson - 1.0.99-14Rich Megginson - 1.0.99-13Rich Megginson - 1.0.99-12Rich Megginson - 1.0.99-11Rich Megginson - 1.0.99-10Rich Megginson - 1.0.99-9Rich Megginson - 1.0.99-8Rich Megginson - 1.0.99-7Rich Megginson - 1.0.99-6Rich Megginson - 1.0.99-5Rich Megginson - 1.0.99-4Rich Megginson - 1.0.99-3Rich Megginson - 1.0.99-2Rich Megginson - 1.0.99-1- Bump version to 1.3.7.5-19 - Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]- Bump version to 1.3.7.5-18 - Resolves: Bug 1539082 - Fix memory leak- Bump version to 1.3.7.5.17 - Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent - Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 - Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp- Bump version to 1.3.7.5-16 - Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP- Bump version to 1.3.7.5-15 - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy - Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections- Bump version to 1.3.7.5-14 - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)- Bump version to 1.3.7.5-13 - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 - Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c - Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy- Bump version to 1.3.7.5-12 - Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter - Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica - Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length - Resolves: Bug 1518287 - heap-use-after-free in csn_as - Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing - Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired - Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate - Resolves: Bug 1457315 - cmocka tests are not executed during rpm build - Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL- Bump version to 1.3.7.5-11 - Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape - Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base - Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base - Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get- Bump version to 1.3.7.5-10 - Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled. - Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick - Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base - Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package - Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset - Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes - Resolves: Bug 1498980 - heap corruption during import - Resolves: Bug 1511462 - scope one searches give incorrect results - Resolves: Bug 1514033 - opened connection are hanging, no longer poll- Bump version to 1.3.7.5-9 - Resolves: Bug 1271208 - Fix copy and paste error- Bump version to 1.3.7.5-8 - Resolves: Bug 1509016 - cleanallruv task is not logging any information- Bump version to 1.3.7.5-7 - Resolves: Bug 1474100 - Use of uninitialized value in string ne at /usr/bin/logconv.pl - Resolves: Bug 1506425 - Improve valueset sort performance during valueset purging - Resolves: Bug 1505046 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV - Resolves: Bug 1271208 - nsds5ReplicaProtocolTimeout attribute accepts negative values- Bump version to 1.3.7.5-6 - Resolves: Bug 1488836 - directory server fails to start because maxdisksize - Resolves: Bug 1474100 - Use of uninitialized value in string ne at /usr/bin/logconv.pl - Resolves: Bug 1447308 - Add option to show full un-ellipsized output in status-dirsrv - Resolves: Bug 1438526 - Server allows to set any nsds5replicaid in the existing replica entry - Resolves: Bug 1185774 - Missing warning for invalid replica backoff configuration- Bump version to 1.3.7.5-5 - Resolves: Bug 1476207 - Enabling instance service doesn't work - Resolves: Bug 1434335 - Errors log filled with attrlist_replace - attr_replace - Resolves: Bug 1453155 - unable to retrieve specific cosAttribute when subtree password policy is configured - Resolves: Bug 1459965 - repl-monitor - matches null string many times in regex - Resolves: Bug 1463204 - Adding a database entry fails if the same database was deleted after an import - Resolves: Bug 1469567 - Activating roles returns error 16 - Resolves: Bug 1498773 - Installation of ipa fails with crash in topology plugin - Resolves: Bug 1501058 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends - Resolves: Bug 1352121 - [RFE] allow to enable MemberOf plugin in dedicated consumer- Bump version to 1.3.7.5-4 - Fix coverity warnings from convscan - Improve atomics- Bump version to 1.3.7.5-3 - specfile remove cap_net_bind_service+ep from ns-slapd- Bump version to 1.3.7.5-2 - specfile updates: add asan support, make nunc-stans default, and general cleanup- Bump version to 1.3.7.5-1 - Resolves: Bug 1470169 - Rebase 389-ds-base in RHEL 7.5 to 1.3.7- Bump version to 1.3.6.1-16 - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify - Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird - Resolves: Bug 1456774 - ipa-replica server fails to upgrade- Bump version to 1.3.6.1-15 - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify - Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file" - Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0- Bump version to 1.3.6.1-14 - Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing. - Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value - Resolves: Bug 1449098 - ns-slapd crashes in role cache creation - Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so - Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users - Resolves: Bug 1451657 - -v option is not working for db2ldif.pl- Bump version to 1.3.6.1-13 - Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)- Bump version to 1.3.6.1-12 - Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10- Bump version to 1.3.6.1-11 - Resolves: Bug 1410207 - Utility command had better use INFO log level for the output - Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl- Bump version to 1.3.6.1-10 - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val - Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous - Resolves: Bug 1377452 - Integer overflow in performance counters - Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values - Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975 - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script- Bump version to 1.3.6.1-9 - Resolves: Bug 1442880 - setup-ds-admin.pl -u with nsslapd-localhost changed - Resolves: Bug 1443682 - util_info_sys_pages should be able to detect memory restrictions in a cgroup- Bump version to 1.3.6.1-8 - Resolves: Bug 1432016 - Possible deadlock while installing an ipa replica - Resolves: Bug 1438029 - Overflow in memberof- Bump version to 1.3.6.1-7 - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set(fix crash regression) - Resolves: bug 1381326 - dirsrv-snmp.service is provided by 389-ds-base instead of 389-ds-base-snmp - Resolves: bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl.- Bump version to 1.3.6.1-6 - Resolves: bug 1437006 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages - Resolves: bug 1341689 - dbmon.sh / cn=monitor] nsslapd-db-pages-in-use is increasing - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set - Resolves: bug 1397288 - typo in logconv.pl man page - Resolves: bug 1436994 - incorrect pathes in pkg-config files - Resolves: bug 1396448 - Add a hard dependency for >=selinux-policy-3.13.1-75- Bump version to 1.3.6.1-5 - Resolves: bug 1377452 - Integer overflow in counters and monitor - Resolves: bug 1425907 - Harden password storage scheme - Resolves: bug 1431207 - ns-slapd killed by SIGABRT- Bump version to 1.3.6.1-4 - Resolves: bug 1379424 - Reset-agmt-update-staus-and-total-init - Resolves: bug 1394000 - dbmon.sh-fails-if-you-have-nsslapd-requi.patch - Resolves: bug 1417344 - targetattr-wildcard-evaluation-is-incorr.patch - Resolves: bug 1429770 - ds-logpipe.py-crashes-for-non-existing-u.patch - Resolves: bug 1433697 - Fix-double-free-in-_cl5NewDBFile-error-path.patch - Resolves: bug 1433996 - retrocl-can-crash-server-at-shutdown.patch - Resolves: bug 1434967 - rpm-would-not-create-valid-pkgconfig-fi.patch - Resolves: bug 1417338 - To-debug-DB_DEADLOCK-condition-allow-to.patch - Resolves: bug 1433850 - Deleting-suffix-can-hang-server.patch- Bump version to 1.3.6.1-3 - Fix spec file to include the tests- Bump version to 1.3.6.1-2 - Resolves: bug 1431877 - 389-1.3.6.1-1.el7 covscan errors - Resolves: bug 1432206 - content sync plugin can hang server shutdown - Resolves: bug 1432149 - sasl external binds fail in 1.3.6.1- Bump version to 1.3.6.1-1 - Resolves: bug 1388567 - Rebase 389-ds-base to 1.3.6 in RHEL-7.4- Release 1.3.5.10-12 - Resolves: bug 1384785 - Replica install fails with old IPA master sometimes during replication process (DS 48992) - Resolves: bug 1388501 - 389-ds-base is missing runtime dependency - bind-utils (DS 48328) - Resolves: bug 1388581 - Replication stops working only when fips mode is set to true (DS 48909) - Resolves: bug 1390342 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin (DS 49014) - Resolves: bug 1390343 - trace args debug logging must be more restrictive (DS 49009)- Release 1.3.5.10-11 - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates- Release 1.3.5.10-10 - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957) - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)- Release 1.3.5.10-9 - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950) - Resolves: bug 1366828 - audit on failure doesn't work if attribute nsslapd-auditlog-logging-enabled is NOT enabled (DS 48958) - Resolves: bug 1368520 - Crash in import_wait_for_space_in_fifo() (DS 48960) - Resolves: bug 1368956 - man page of ns-accountstatus.pl shows redundant entries for -p port option - Resolves: bug 1369537 - passwordMinAge attribute doesn't limit the minimum age of the password (DS 48967) - Resolves: bug 1369570 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964) - Resolves: bug 1369425 - ACI behaves erratically (DS 48972) - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957) - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969) - Resolves: bug 1371283 - Server Side Sorting crashes the server. (DS 48970) - Resolves: bug 1371284 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)- Release 1.3.5.10-8 - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48954) - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950) - Resolves: bug 1366561 - ns-accountstatus.pl giving error even "No such object (32)" (DS 48956)- Release 1.3.5.10-7 - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450) - Resolves: bug 1360976 - fixing a compiler warning- Release 1.3.5.10-6 - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48928) - Resolves: bug 1360447 - nsslapd-workingdir is empty when ns-slapd is started by systemd (DS 48939) - Resolves: bug 1360327 - remove-ds.pl deletes an instance even if wrong prefix was specified (DS 48934) - Resolves: bug 1349815 - DS logs have warning:ancestorid not indexed for all CS subsystems (DS 48940) - Resolves: bug 1329061 - 389-ds-base-1.3.4.0-29.el7_2 "hang" (DS 48882) - Resolves: bug 1360976 - EMBARGOED CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack - Resolves: bug 1361134 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password (DS 48943) - Resolves: bug 1361321 - Duplicate collation entries (DS 48936) - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450) - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat- Release 1.3.5.10-5 - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)- Release 1.3.5.10-4 - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144) - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919) - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat - Resolves: bug 1354660 - flow control in replication also blocks receiving results (DS 48767) - Resolves: bug 1356261 - Fixup tombstone task needs to set proper flag when updating (DS 48924) - Resolves: bug 1355760 - ns-slapd crashes during the deletion of backend (DS 48922) - Resolves: bug 1353629 - DS shuts down automatically if dnaThreshold is set to 0 in a MMR setup (DS 48916) - Resolves: bug 1355879 - nunc-stans: ns-slapd crashes during startup with SIGILL on AMD Opteron 280 (DS 48925)- Release 1.3.5.10-3 - Resolves: bug 1354374 - Fixing the tarball version in the sources file.- Release 1.3.5.10-2 - Resolves: bug 1353714 - If a cipher is disabled do not attempt to look it up (DS 48743) - Resolves: bug 1353592 - Setup-ds.pl --update fails - regression (DS 48755) - Resolves: bug 1353544 - db2bak.pl task enters infinitive loop when bak fs is almost full (DS 48914) - Resolves: bug 1354374 - Upgrade to 389-ds-base >= 1.3.5.5 doesn't install 389-ds-base-snmp (DS 48918)- Release 1.3.5.10-1 - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48905)- Release 1.3.5.9-1 - Resolves: bug 1349571 - Improve MMR replication convergence (DS 48636) - Resolves: bug 1304682 - "stale" automember rule (associated to a removed group) causes discrepancies in the database (DS 48637) - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755) - Resolves: bug 1316731 - syncrepl search returning error 329; plugin sending a bad error code (DS 48904) - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule (DS 48891) - Resolves: bug 1349577 - Values of dbcachetries/dbcachehits in cn=monitor could overflow. (DS 48899) - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT (DS 48898) - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538) - Resolves: bug 1350632 - ns-slapd shutdown crashes if pwdstorageschema name is from stack. (DS 48902)- Release 1.3.5.8-1 - Resolves: bug 1290101 - proxyauth support does not work when bound as directory manager (DS 48366)- Release 1.3.5.7-1 - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109) - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449) - Resolves: bug 1290101 - proxyauth support does not work when bound as directory manager (DS 48366) - Resolves: bug 1338872 - Wrong result code display in audit-failure log (DS 48892) - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538) - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule (DS 48891) - Resolves: bug 1347407 - By default aci can be read by anonymous (DS 48354) - Resolves: bug 1347412 - cn=SNMP,cn=config entry can be read by anonymous (DS 48893)- Release 1.3.5.6-1 - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982) - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48766, DS 48636) - Resolves: bug 1233926 - "matching rules" in ACI's "bind rules not fully evaluated (DS 48234) - Resolves: bug 1346165 - 389-ds-base-1.3.5.5-1.el7.x86_64 requires policycoreutils-py- Release 1.3.5.5-1 - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 48833) - Resolves: bug 1344414 - [RFE] adding pre/post extop ability (DS 48880) - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449) - Resolves: bug 1257568 - /usr/lib64/dirsrv/libnunc-stans.so is owned by both -libs and -devel (DS 48404) - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755) - Resolves: bug 1342609 - At startup DES to AES password conversion causes timeout in start script (DS 48862) - Resolves: bug 1316328 - search returns no entry when OR filter component contains non readable attribute (DS 48275) - Resolves: bug 1280456 - setup-ds should detect if port is already defined (DS 48336) - Resolves: bug 1312557 - dirsrv service fails to start when nsslapd-listenhost is configured (DS 48747) - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48752) - Resolves: bug 1340307 - Running db2index with no options breaks replication (DS 48854) - Resolves: bug 1337195 - Regression introduced in matching rules by DS 48746 (DS 48844) - Resolves: bug 1335492 - Modifier's name is not recorded in the audit log with modrdn and moddn operations (DS 48834) - Resolves: bug 1316741 - ldctl should support -H with ldap uris (DS 48754)- release 1.3.5.4-1 - Resolves: bug 1334455 - db2ldif is not taking into account multiple suffixes or backends (DS 48828) - Resolves: bug 1241563 - The "repl-monitor" web page does not display "year" in date. (DS 48220) - Resolves: bug 1335618 - Server ram sanity checks work in isolation (DS 48617) - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48837)- release 1.3.5.3-1 - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144) - Resolves: bug 1332533 - ns-accountstatus.pl gives error message on execution along with results. (DS 48815) - Resolves: bug 1332709 - password history is not updated when an admin resets the password (DS 48813) - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48822) - Resolves: bug 1333515 - Enable DS to offer weaker DH params in NSS (DS 48798)- release 1.3.5.2-1 - Resolves: bug 1270020 - Rebase 389-ds-base to 1.3.5 in RHEL-7.3 - Resolves: bug 1288229 - many attrlist_replace errors in connection with cleanallruv (DS 48283) - Resolves: bug 1315893 - License tag does not match actual license of code (DS 48757) - Resolves: bug 1320715 - DES to AES password conversion fails if a backend is empty (DS 48777) - Resolves: bug 190862 - [RFE] Default password syntax settings don't work with fine-grained policies (DS 142) - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 548) - Resolves: bug 1143066 - The dirsrv user/group should be created in rpm %pre, and ideally with fixed uid/gid (DS 48285) - Resolves: bug 1153758 - [RFE] Support SASL/GSSAPI when ns-slapd is behind a load-balancer (DS 48332) - Resolves: bug 1160902 - search, matching rules and filter error "unsupported type 0xA9" (DS 48016) - Resolves: bug 1186512 - High memory fragmentation observed in ns-slapd; OOM-Killer invoked (DS 48377, 48129) - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109) - Resolves: bug 1209094 - [RFE] Allow logging of rejected changes (DS 48145, 48280) - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144) - Resolves: bug 1210842 - [RFE] Add PIDFile option to systemd service file (DS 47951) - Resolves: bug 1223510 - [RFE] it could be nice to have nsslapd-maxbersize default to bigger than 2Mb (DS 48326) - Resolves: bug 1229799 - ldclt-bin killed by SIGSEGV (DS 48289) - Resolves: bug 1249908 - No validation check for the value for nsslapd-db-locks. (DS 48244) - Resolves: bug 1254887 - No man page entry for - option '-u' of dbgen.pl for adding group entries with uniquemembers (DS 48290) - Resolves: bug 1255557 - db2index creates index entry from deleted records (DS 48252) - Resolves: bug 1258610 - total update request must not be lost (DS 48255) - Resolves: bug 1258611 - dna plugin needs to handle binddn groups for authorization (DS 48258) - Resolves: bug 1259624 - [RFE] Provide a utility to detect accounts locked due to inactivity (DS 48269) - Resolves: bug 1259950 - Add config setting to MemberOf Plugin to add required objectclass got memberOf attribute (DS 48267) - Resolves: bug 1266510 - Linked Attributes plug-in - wrong behaviour when adding valid and broken links (DS 48295) - Resolves: bug 1266532 - Linked Attributes plug-in - won't update links after MODRDN operation (DS 48294) - Resolves: bug 1267750 - pagedresults - when timed out, search results could have been already freed. (DS 48299) - Resolves: bug 1269378 - ds-logpipe.py with wrong arguments - python exception in the output (DS 48302) - Resolves: bug 1271330 - nunc-stans: Attempt to release connection that is not acquired (DS 48311) - Resolves: bug 1272677 - nunc stans: ns-slapd killed by SIGTERM - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT - Resolves: bug 1273142 - crash in Managed Entry plugin (DS 48312) - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982) - Resolves: bug 1273550 - Deadlock between two MODs on the same entry between entry cache and backend lock (DS 47978) - Resolves: bug 1273555 - deadlock in mep delete post op (DS 47976) - Resolves: bug 1273584 - lower password history minimum to 1 (DS 48394) - Resolves: bug 1275763 - [RFE] add setup-ds.pl option to disable instance specific scripts (DS 47840) - Resolves: bug 1276072 - [RFE] Allow RHDS to be setup using a DNS CNAME alias for General.FullMachineName (DS 48328) - Resolves: bug 1278567 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338) - Resolves: bug 1278584 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well. (DS 48339) - Resolves: bug 1278755 - deadlock on connection mutex (DS 48341) - Resolves: bug 1278987 - Cannot upgrade a consumer to supplier in a multimaster environment (DS 48325) - Resolves: bug 1280123 - acl - regression - trailing ', (comma)' in macro matched value is not removed. (DS 48344) - Resolves: bug 1290111 - [RFE] Support for rfc3673 '+' to return operational attributes (DS 48363) - Resolves: bug 1290141 - With exhausted range, part of DNA shared configuration is deleted after server restart (DS 48362) - Resolves: bug 1290242 - SimplePagedResults -- in the search error case, simple paged results slot was not released. (DS 48375) - Resolves: bug 1290600 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same ldapmodify operation (DS 48370) - Resolves: bug 1295947 - 389-ds hanging after a few minutes of operation (DS 48406, revert 48338) - Resolves: bug 1296310 - ldclt - segmentation fault error while binding (DS 48400) - Resolves: bug 1299758 - CVE-2016-0741 389-ds-base: Worker threads do not detect abnormally closed connections causing DoS [rhel-7.3] - Resolves: bug 1301097 - logconv.pl displays negative operation speeds (DS 48446) - Resolves: bug 1302823 - Crash in slapi_get_object_extension (DS 48536) - Resolves: bug 1303641 - heap corruption at schema replication. (DS 48492) - Resolves: bug 1307151 - keep alive entries can break replication (DS 48445) - Resolves: bug 1310848 - Supplier can skip a failing update, although it should retry. (DS 47788) - Resolves: bug 1314557 - change severity of some messages related to "keep alive" enties (DS 48420) - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450) - Resolves: bug 1316742 - no plugin calls in tombstone purging (DS 48759) - Resolves: bug 1319329 - [RFE] add nsslapd-auditlog-logging-enabled: off to template-dse.ldif (DS 48145) - Resolves: bug 1320295 - If nsSSL3 is on, even if SSL v3 is not really enabled, a confusing message is logged. (DS 48775) - Resolves: bug 1326520 - db2index uses a buffer size derived from dbcachesize (DS 48383) - Resolves: bug 1328936 - objectclass values could be dropped on the consumer (DS 48799) - Resolves: bug 1287475 - [RFE] response control for password age should be sent by default by RHDS (DS 48369) - Resolves: bug 1331343 - Paged results search returns the blank list of entries (DS 48808)- release 1.3.4.0-19 - Resolves: bug 1228823 - async simple paged results issue (DS 48299, DS 48192) - Resolves: bug 1266944 - ns-slapd crash during ipa-replica-manage del (DS 48298)- release 1.3.4.0-18 - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266, DS 48284)- release 1.3.4.0-17 - Resolves: bug 1259949 - A backport error (coverity -- unused variable 'init_retry')- release 1.3.4.0-16 - Resolves: bug 1243970 - In MMR, double free coould occur under some special condition (DS 48276, DS 48226) - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266) - Resolves: bug 1241723 - cleanallruv - fix regression with server shutdown (DS 48217) - Resolves: bug 1264224 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in (DS 48188)- release 1.3.4.0-15 - Resolves: bug 1258996 - Complex filter in a search request doen't work as expected. (regression) (DS 48265) - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)- release 1.3.4.0-14 - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228) - Resolves: bug 1255851 - Shell CLI fails with usage errors if an argument containing white spaces is given (DS 48254) - Resolves: bug 1256938 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax (DS 47757)- release 1.3.4.0-13 - Resolves: bug 1245519 - remove debug logging from retro cl (DS 47831)- release 1.3.4.0-12 - Resolves: bug 1252133 - replica upgrade failed in starting dirsrv service (DS 48243) - Resolves: bug 1254344 - Server crashes in ACL_LasFindFlush during shutdown if ACIs contain IP addresss restrictions (DS 48233)- release 1.3.4.0-11 - Resolves: bug 1249784 - ipa-dnskeysyncd unhandled exception on named-pkcs11 start (DS 48249) - Resolves: bug 1252082 - removing chaining database links trigger valgrind read error (DS 47686) - Resolves: bug 1252207 - bashisms in 389-ds-base admin scripts (DS 47511) - Resolves: bug 1252533 - Man pages and help for remove-ds.pl doesn't display "-a" option (DS 48245) - Resolves: bug 1252781 - Slapd crashes reported from latest builds (DS 48250)- release 1.3.4.0-10 - Resolves: bug 1245519 - Fix coverity issues (DS 47931)- release 1.3.4.0-9 - Resolves: bug 1240876 - verify_db.pl doesn't verify DB specified by -a option. (DS 48215) - Resolves: bug 1245235 - winsync lastlogon attribute not syncing between IPA & Windows 2008. (DS 48232) - Resolves: bug 1245519 - Deadlock with retrochangelog, memberof plugin (DS 47931) - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228) - Resolves: bug 1247811 - logconv autobind handling regression caused by 47446 (DS 48231) - Resolves: bug 1250177 - Investigate betxn plugins to ensure they return the correct error code (DS 47810)- release 1.3.4.0-8 - Resolves: bug 1160243 - [RFE] allow logconv.pl -S/-E switches to work even when exact/same timestamps are not present in access log file (DS 47910) - Resolves: bug 1172037 - winsync range retrieval gets only 5000 values upon initialization (DS 48010) - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224) - Resolves: bug 1243950 - When starting a replica agreement a deadlock can occur with an op updating nsuniqueid index (DS 48179) - Resolves: bug 1243970 - In MMR, double free coould occur under some special condition (DS 48226) - Resolves: bug 1244926 - Crash while triming the retro changelog (DS 48206)- release 1.3.4.0-7 - Resolves: bug 1235060 - Fix coverity issues - 07/14/2015 (DS 48203) - Resolves: bug 1242531 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)- release 1.3.4.0-6 - Resolves: bug 1240845 - cleanallruv should completely clean changelog (DS 48208) - Resolves: bug 1095603 - Any negative LDAP error code number reported as Illegal error by ldclt. (DS 47799) - Resolves: bug 1168675 - Inconsistent behaviour of DS when LDAP Sync is used with an invalid cookie (DS 48013) - Resolves: bug 1241723 - cleanAllRUV hangs shutdown if not all of the replicas are online (DS 48217) - Resolves: bug 1241497 - crash in ns-slapd when deleting winSyncSubtreePair from sync agreement (DS 48216) - Resolves: bug 1240404 - Silent install needs to properly exit when INF file is missing (DS 48119) - Resolves: bug 1240406 - Remove warning suppression in 1.3.4 (DS 47878) - Resolves: bug 1242683 - Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute (DS 48223) - Resolves: bug 1160243 - logconv.pl - validate start and end time args (DS 47910) - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224) - Resolves: bug 1230996 - CI test: fixing test cases for ticket 48194 (DS 48194)- release 1.3.4.0-5 - Resolves: bug 1235060 - Fix coverity issues (DS 48203)- release 1.3.4.0-4 - Resolves: bug 1240404 - setup-ds.pl does not log invalid --file path errors the same (DS 48119) - Resolves: bug 1240406 - setup -u stops after first failure (DS 47878)- release 1.3.4.0-3 - Resolves: bug 1228823 - async simple paged results issue (DS 48192) - Resolves: bug 1237325 - reindex off-line twice could provoke index corruption (DS 48212) - Resolves: bug 1238790 - ldapsearch on nsslapd-maxbersize returns 0 instead of current value (DS 48214)- release 1.3.4.0-2 - Resolves: bug 1235060 - Fix coverity issues - Resolves: bug 1235387 - Slow replication when deleting large quantities of multi-valued attributes (DS 48195)- Release 1.3.4.0-1 (rebase) - Enable nunc-stans for x86_64. - Resolves: bug 1034325 - Linked attributes betxnpreoperation - transaction not aborted when linked entry does not exit (DS 47640) - Resolves: bug 1052755 - Retro Changelog Plugin accepts invalid value in nsslapd-changelogmaxage attribute (DS 47669) - Resolves: bug 1096409 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown (DS 47801) - Resolves: bug 1145378 - Adding an entry with an invalid password as rootDN is incorrectly rejected (DS 47900) - Resolves: bug 1145382 - Bad manipulation of passwordhistory (DS 47905) - Resolves: bug 1154147 - Uniqueness plugin: should allow to exclude some subtrees from its scope (DS 47927) - Resolves: bug 1171358 - Make ReplicaWaitForAsyncResults configurable (DS 47957) - Resolves: bug 1171663 - MODDN fails when entry doesn't have memberOf attribute and new DN is in the scope of memberOfExcludeSubtree (DS 47526) - Resolves: bug 1174457 - [RFE] memberOf - add option to skip nested group lookups during delete operations (DS 47963) - Resolves: bug 1178640 - db2bak.pl man page should be improved. (DS 48008) - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981) - Resolves: bug 1180331 - Local Password Policies for Nested OU's not honoured (DS 47980) - Resolves: bug 1180776 - nsslapd-db-locks modify not taking into account (DS 47934) - Resolves: bug 1181341 - nsslapd-changelogtrim-interval and nsslapd-changelogcompactdb-interval are not validated (DS 47617) - Resolves: bug 1185882 - ns-activate.pl fails to activate account if it was disabled on AD (DS 48001) - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005) - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030) - Resolves: bug 1206309 - winsync sets AccountUserControl in AD to 544 (DS 47723) - Resolves: bug 1210845 - slapd crashes during Dogtag clone reinstallation (DS 47966) - Resolves: bug 1210850 - add an option '-u' to dbgen.pl for adding group entries with (DS 48025) - Resolves: bug 1210852 - aci with wildcard and macro not correctly evaluated (DS 48141)- release 1.3.3.1-19 - Resolves: bug 1230996 - nsSSL3Ciphers preference not enforced server side (DS 48194)- release 1.3.3.1-18 - Resolves: bug 1228823 - async simple paged results issue (DS 48146, DS 48192)- release 1.3.3.1-17 - Resolves: bug 1226510 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane (DS 48190)- release 1.3.3.1-16 - Resolves: bug 1212894 - CVE-2015-1854 389ds-base: access control bypass with modrdn- release 1.3.3.1-15 - Setting correct build tag 'rhel-7.1-z-candidate'- release 1.3.3.1-14 - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030) Fixes spec file to make sure all the server instances are stopped before upgrade - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005)- release 1.3.3.1-13 - Resolves: bug 1183655 - Fixed Covscan FORWARD_NULL defects (DS 47988)- release 1.3.3.1-12 - Resolves: bug 1182477 - Windows Sync accidentally cleared raw_entry (DS 47989) - Resolves: bug 1180325 - upgrade script fails if /etc and /var are on different file systems (DS 47991 ) - Resolves: bug 1183655 - Schema learning mechanism, in replication, unable to extend an existing definition (DS 47988)- release 1.3.3.1-11 - Resolves: bug 1080186 - During delete operation do not refresh cache entry if it is a tombstone (DS 47750)- release 1.3.3.1-10 - Resolves: bug 1172731 - CVE-2014-8112 password hashing bypassed when "nsslapd-unhashed-pw-switch" is set to off - Resolves: bug 1166265 - DS hangs during online total update (DS 47942) - Resolves: bug 1168151 - CVE-2014-8105 information disclosure through 'cn=changelog' subtree - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable (DS 47526) - Resolves: bug 1171356 - Bind DN tracking unable to write to internalModifiersName without special permissions (DS 47950) - Resolves: bug 1153737 - logconv.pl -- support parsing/showing/reporting different protocol versions (DS 47949) - Resolves: bug 1171355 - start dirsrv after chrony on RHEL7 and Fedora (DS 47947) - Resolves: bug 1170707 - cos_cache_build_definition_list does not stop during server shutdown (DS 47967) - Resolves: bug 1170708 - COS memory leak when rebuilding the cache (DS - Ticket 47969) - Resolves: bug 1170709 - Account lockout attributes incorrectly updated after failed SASL Bind (DS 47970) - Resolves: bug 1166260 - cookie_change_info returns random negative number if there was no change in a tree (DS 47960) - Resolves: bug 1012991 - Error log levels not displayed correctly (DS 47636) - Resolves: bug 1108881 - rsearch filter error on any search filter (DS 47722) - Resolves: bug 994690 - Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart (DS 47451) - Resolves: bug 1162997 - Running a plugin task can crash the server (DS 47451) - Resolves: bug 1166252 - RHEL7.1 ns-slapd segfault when ipa-replica-install restarts (DS 47451) - Resolves: bug 1172597 - Crash if setting invalid plugin config area for MemberOf Plugin (DS 47525) - Resolves: bug 1139882 - coverity defects found in 1.3.3.x (DS 47965)- release 1.3.3.1-9 - Resolves: bug 1153737 - Disable SSL v3, by default. (DS 47928) - Resolves: bug 1163461 - Should not check aci syntax when deleting an aci (DS 47953)- release 1.3.3.1-8 - Resolves: bug 1156607 - Crash in entry_add_present_values_wsi_multi_valued (DS 47937) - Resolves: bug 1153737 - Disable SSL v3, by default (DS 47928, DS 47945, DS 47948) - Resolves: bug 1158804 - Malformed cookie for LDAP Sync makes DS crash (DS 47939)- release 1.3.3.1-7 - Resolves: bug 1153737 - Disable SSL v3, by default (DS 47928)- release 1.3.3.1-6 - Resolves: bug 1151287 - dynamically added macro aci is not evaluated on the fly (DS 47922) - Resolves: bug 1080186 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten (DS 47897) - Resolves: bug 1150694 - Encoding of SearchResultEntry is missing tag (DS 47920) - Resolves: bug 1150695 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails. (DS 47919) - Resolves: bug 1139882 - Fix remaining compiler warnings (DS 47892) - Resolves: bug 1150206 - result of dna_dn_is_shared_config is incorrectly used (DS 47918)- release 1.3.3.1-5 - Resolves: bug 1139882 - coverity defects found in 1.3.3.x (DS 47892)- release 1.3.3.1-4 - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47750) - Resolves: bug 1145846 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server (DS 47908) - Resolves: bug 1117979 - harden the list of ciphers available by default (phase 2) (DS 47838) - provide enabled ciphers as search result (DS 47880)- release 1.3.3.1-3 - Resolves: bug 1139882 - coverity defects found in 1.3.3.1- release 1.3.3.1-2 - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748) - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47834) - Resolves: bug 1139882 - coverity defects found in 1.3.3.1 (DS 47890) - Resolves: bug 1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (DS 47885 - deref plugin should not return references with noc access rights) - Resolves: bug 1117979 - harden the list of ciphers available by default (DS 47838, DS 47895) - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47889 - DS crashed during ipa-server-install on test_ava_filter)- release 1.3.3.1-1 - Resolves: bug 746646 - RFE: easy way to configure which users and groups to sync with winsync - Resolves: bug 881372 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts. - Resolves: bug 920597 - Possible to add invalid ACI value - Resolves: bug 921162 - Possible to add nonexistent target to ACI - Resolves: bug 923799 - if nsslapd-cachememsize set to the number larger than the RAM available, should result in proper error message. - Resolves: bug 924937 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync - Resolves: bug 951754 - Self entry access ACI not working properly - Resolves: bug 952517 - Dirsrv instance failed to start with Segmentation fault (core dump) after modifying 7-bit check plugin - Resolves: bug 952682 - nsslapd-db-transaction-batch-val turns to -1 - Resolves: bug 966443 - Plugin library path validation - Resolves: bug 975176 - Non-directory manager can change the individual userPassword's storage scheme - Resolves: bug 979465 - IPA replica's - "SASL encrypted packet length exceeds maximum allowed limit" - Resolves: bug 982597 - Some attributes in cn=config should not be multivalued - Resolves: bug 987009 - 389-ds-base - shebang with /usr/bin/env - Resolves: bug 994690 - RFE: Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart - Resolves: bug 1012991 - errorlog-level 16384 is listed as 0 in cn=config - Resolves: bug 1013736 - Enabling/Disabling DNA plug-in throws "ldap_modify: Server Unwilling to Perform (53)" error - Resolves: bug 1014380 - setup-ds.pl doesn't lookup the "root" group correctly - Resolves: bug 1020459 - rsa_null_sha should not be enabled by default - Resolves: bug 1024541 - start dirsrv after ntpd - Resolves: bug 1029959 - Managed Entries betxnpreoperation - transaction not aborted upon failure to create managed entry - Resolves: bug 1031216 - add dbmon.sh - Resolves: bug 1044133 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result - Resolves: bug 1044134 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default - Resolves: bug 1044135 - make connection buffer size adjustable - Resolves: bug 1044137 - posix winsync should support ADD user/group entries from DS to AD - Resolves: bug 1044138 - mep_pre_op: Unable to fetch origin entry - Resolves: bug 1044139 - [RFE] Support RFC 4527 Read Entry Controls - Resolves: bug 1044140 - Allow search to look up 'in memory RUV' - Resolves: bug 1044141 - MMR stress test with dna enabled causes a deadlock - Resolves: bug 1044142 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist - Resolves: bug 1044143 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change - Resolves: bug 1044144 - resurrected entry is not correctly indexed - Resolves: bug 1044146 - Add a warning message when a connection hits the max number of threads - Resolves: bug 1044147 - 7-bit check plugin does not work for userpassword attribute - Resolves: bug 1044148 - The backend name provided to bak2db is not validated - Resolves: bug 1044149 - Winsync should support range retrieval - Resolves: bug 1044150 - 7-bit checking is not necessary for userPassword - Resolves: bug 1044151 - With SeLinux, ports can be labelled per range. setup-ds.pl or setup-ds-admin.pl fail to detect already ranged labelled ports - Resolves: bug 1044152 - ChainOnUpdate: "cn=directory manager" can modify userRoot on consumer without changes being chained or replicated. Directory integrity compromised. - Resolves: bug 1044153 - mods optimizer - Resolves: bug 1044154 - multi master replication allows schema violation - Resolves: bug 1044156 - DS crashes with some 7-bit check plugin configurations - Resolves: bug 1044157 - Some updates of "passwordgraceusertime" are useless when updating "userpassword" - Resolves: bug 1044159 - [RFE] Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533 - Resolves: bug 1044160 - remove-ds.pl should remove /var/lock/dirsrv - Resolves: bug 1044162 - enhance retro changelog - Resolves: bug 1044163 - updates to ruv entry are written to retro changelog - Resolves: bug 1044164 - Password administrators should be able to violate password policy - Resolves: bug 1044168 - Schema replication between DS versions may overwrite newer base schema - Resolves: bug 1044169 - ACIs do not allow attribute subtypes in targetattr keyword - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable - Resolves: bug 1044171 - Allow referential integrity suffixes to be configurable - Resolves: bug 1044172 - Plugin library path validation prevents intentional loading of out-of-tree modules - Resolves: bug 1044173 - make referential integrity configuration more flexible - Resolves: bug 1044177 - allow configuring changelog trim interval - Resolves: bug 1044179 - objectclass may, must lists skip rest of objectclass once first is found in sup - Resolves: bug 1044180 - memberOf on a user is converted to lowercase - Resolves: bug 1044181 - report unindexed internal searches - Resolves: bug 1044183 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added - Resolves: bug 1044185 - dbscan on entryrdn should show all matching values - Resolves: bug 1044187 - logconv.pl - RFE - add on option for a minimum etime for unindexed search stats - Resolves: bug 1044188 - Recognize compressed log files - Resolves: bug 1044191 - support TLSv1.1 and TLSv1.2, if supported by NSS - Resolves: bug 1044193 - default nsslapd-sasl-max-buffer-size should be 2MB - Resolves: bug 1044194 - Complex filter in a search request doen't work as expected. - Resolves: bug 1044196 - Automember plug-in should treat MODRDN operations as ADD operations - Resolves: bug 1044198 - Replication of the schema may overwrite consumer 'attributetypes' even if consumer definition is a superset - Resolves: bug 1044202 - db2bak.pl issue when specifying non-default directory - Resolves: bug 1044203 - Allow referint plugin to use an alternate config area - Resolves: bug 1044205 - Allow memberOf to use an alternate config area - Resolves: bug 1044210 - idl switch does not work - Resolves: bug 1044211 - make old-idl tunable - Resolves: bug 1044212 - IDL-style can become mismatched during partial restoration - Resolves: bug 1044213 - backend performance - introduce optimization levels - Resolves: bug 1044215 - using transaction batchval violates durability - Resolves: bug 1044216 - examine replication code to reduce amount of stored state information - Resolves: bug 1048980 - 7-bit check plugin not checking MODRDN operation - Resolves: bug 1049030 - Windows Sync group issues - Resolves: bug 1052751 - Page control does not work if effective rights control is specified - Resolves: bug 1052754 - Allow nsDS5ReplicaBindDN to be a group DN - Resolves: bug 1057803 - logconv errors when search has invalid bind dn - Resolves: bug 1060032 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime. - Resolves: bug 1061060 - betxn: retro changelog broken after cancelled transaction - Resolves: bug 1061572 - improve dbgen rdn generation, output and man page. - Resolves: bug 1063990 - single valued attribute replicated ADD does not work - Resolves: bug 1064006 - Size returned by slapi_entry_size is not accurate - Resolves: bug 1064986 - Replication retry time attributes cannot be added - Resolves: bug 1067090 - Missing warning for invalid replica backoff configuration - Resolves: bug 1072032 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53 - Resolves: bug 1074306 - Under heavy stress, failure of turning a tombstone into glue makes the server hung - Resolves: bug 1074447 - Part of DNA shared configuration is deleted after server restart - Resolves: bug 1076729 - Continuous add/delete of an entry in MMR setup causes entryrdn-index conflict - Resolves: bug 1077884 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf - Resolves: bug 1077897 - Memory leak with proxy auth control - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing - Resolves: bug 1082967 - attribute uniqueness plugin fails when set as a chaining component - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution - Resolves: bug 1086890 - empty modify returns LDAP_INVALID_DN_SYNTAX - Resolves: bug 1086902 - mem leak in do_bind when there is an error - Resolves: bug 1086904 - mem leak in do_search - rawbase not freed upon certain errors - Resolves: bug 1086908 - Performing deletes during tombstone purging results in operation errors - Resolves: bug 1090178 - #481 breaks possibility to reassemble memberuid list - Resolves: bug 1092099 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone - Resolves: bug 1092342 - nsslapd-ndn-cache-max-size accepts any invalid value. - Resolves: bug 1092648 - Negative value of nsSaslMapPriority is not reset to lowest priority - Resolves: bug 1097004 - Problem with deletion while replicated - Resolves: bug 1098654 - db2bak.pl error with changelogdb - Resolves: bug 1099654 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator. - Resolves: bug 1108405 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..." - Resolves: bug 1108407 - managed entry plugin fails to update managed entry pointer on modrdn operation - Resolves: bug 1108865 - memory leak in ldapsearch filter objectclass=* - Resolves: bug 1108870 - ACI warnings in error log - Resolves: bug 1108872 - Logconv.pl with an empty access log gives lots of errors - Resolves: bug 1108874 - logconv.pl memory continually grows - Resolves: bug 1108881 - rsearch filter error on any search filter - Resolves: bug 1108895 - [RFE - RHDS9] CLI report to monitor replication - Resolves: bug 1108902 - rhds91 389-ds-base-1.2.11.15-31.el6_5.x86_64 crash in db4 __dbc_get_pp env = 0x0 ? - Resolves: bug 1108909 - single valued attribute replicated ADD does not work - Resolves: bug 1109334 - 389 Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled. - Resolves: bug 1109336 - Parent numsubordinate count can be incorrectly updated if an error occurs - Resolves: bug 1109339 - Nested tombstones become orphaned after purge - Resolves: bug 1109354 - Tombstone purging can crash the server if the backend is stopped/disabled - Resolves: bug 1109357 - Coverity issue in 1.3.3 - Resolves: bug 1109364 - valgrind - value mem leaks, uninit mem usage - Resolves: bug 1109375 - provide default syntax plugin - Resolves: bug 1109378 - Environment variables are not passed when DS is started via service - Resolves: bug 1111364 - Updating winsync one-way sync does not affect the behaviour dynamically - Resolves: bug 1112824 - Broken dereference control with the FreeIPA 4.0 ACIs - Resolves: bug 1113605 - server restart wipes out index config if there is a default index - Resolves: bug 1115177 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro - Resolves: bug 1117021 - Server deadlock if online import started while server is under load - Resolves: bug 1117975 - paged results control is not working in some cases when we have a subsuffix. - Resolves: bug 1117979 - harden the list of ciphers available by default - Resolves: bug 1117981 - Fix various typos in manpages & code - Resolves: bug 1117982 - Fix hyphens used as minus signed and other manpage mistakes - Resolves: bug 1118002 - server crashes deleting a replication agreement - Resolves: bug 1118006 - RFE - forcing passwordmustchange attribute by non-cn=directory manager - Resolves: bug 1118007 - [RFE] Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords - Resolves: bug 1118014 - Enhance ACIs to have more control over MODRDN operations - Resolves: bug 1118021 - Return all attributes in rootdse without explicit request - Resolves: bug 1118025 - Slow ldapmodify operation time for large quantities of multi-valued attribute values - Resolves: bug 1118032 - Schema Replication Issue - Resolves: bug 1118034 - 389 DS Server crashes and dies while handles paged searches from clients - Resolves: bug 1118043 - Failed deletion of aci: no such attribute - Resolves: bug 1118048 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed. - Resolves: bug 1118051 - Add switch to disable pre-hashed password checking - Resolves: bug 1118054 - Make ldbm_back_seq independently support transactions - Resolves: bug 1118055 - Add operations rejected by betxn plugins remain in cache - Resolves: bug 1118057 - online import crashes server if using verbose error logging - Resolves: bug 1118059 - add fixup-memberuid.pl script - Resolves: bug 1118060 - winsync plugin modify is broken - Resolves: bug 1118066 - memberof scope: allow to exclude subtrees - Resolves: bug 1118069 - 389-ds production segfault: __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:144 - Resolves: bug 1118074_DELETE_FN - plugin returned error" messages - Resolves: bug 1118076 - ds logs many "Operation error fetching Null DN" messages - Resolves: bug 1118077 - Improve import logging and abort handling - Resolves: bug 1118079 - Multi master replication initialization incomplete after restore of one master - Resolves: bug 1118080 - Don't add unhashed password mod if we don't have an unhashed value - Resolves: bug 1118081 - Investigate betxn plugins to ensure they return the correct error code - Resolves: bug 1118082 - The error result text message should be obtained just prior to sending result - Resolves: bug 1123865 - CVE-2014-3562 389-ds-base: 389-ds: unauthenticated information disclosure [rhel-7.1]- release 1.3.1.6-26 - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution (Ticket 346)- release 1.3.1.6-25 - Resolves: bug 1082740 - ns-slapd crash in reliability 15- release 1.3.1.6-24 - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735); regression - sub-type length in attribute type was mistakenly subtracted.- Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind) (Added 0095-Ticket-47739-directory-server-is-insecurely-misinter.patch) Tue Mar 11 2014 Noriko Hosoi - 1.3.1.6-23 - release 1.3.1.6-22 - Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)- release 1.3.1.6-22 - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735)- release 1.3.1.6-21 - Resolves: bug 918694 - Fix covscan defect FORWARD_NULL (Ticket 408) - Resolves: bug 918717 - Fix covscan defect COMPILER WARNINGS (Ticket 571)- release 1.3.1.6-20 - Resolves: bug 1065242 - 389-ds-base, conflict occurs at yum installation if multilib_policy=all. (Ticket 47709)- release 1.3.1.6-19 - Resolves: bug 1065971 - Enrolling a host into IdM/IPA always takes two attempts (Ticket 47704)- release 1.3.1.6-18 - Resolves: bug 838656 - logconv.pl tool removes the access logs contents if "-M" is not correctly used (Ticket 471) - Resolves: bug 922538 - improve dbgen rdn generation, output (Ticket 47374) - Resolves: bug 970750 - flush.pl is not included in perl5 (Ticket 47374) - Resolves: bug 1013898 - Fix various issues with logconv.pl (Ticket 471)- release 1.3.1.6-17 - Resolves: bug 853106 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (Ticket 443) - Resolves: bug 1049525 - Server hangs in cos_cache when adding a user entry (Ticket 47649)- Mass rebuild 2014-01-24- release 1.3.1.6-15 - Resolves: bug 918702 - better error message when cache overflows (Ticket 342) - Resolves: bug 1009679 - replication stops with excessive clock skew (Ticket 47516) - Resolves: bug 1042855 - Unable to delete protocol timeout attribute (Ticket 47620) - Resolves: bug 918694 - Fix crash when disabling/enabling the setting (Ticket 408) - Resolves: bug 853355 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read (Ticket 47660)- release 1.3.1.6-14 - Resolves: bug 853355 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs (Ticket 447) - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613) - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribut; Fix logically dead code; Fix dereferenced NULL pointer in agmtlist_modify_callback(); Fix missing left brackete (Ticket 47620) - Resolves: bug 1042855 - nsds5ReplicaProtocolTimeout attribute is not validated when added to replication agreement; Config value validation improvement (Ticket 47620) - Resolves: bug 918717 - server does not accept 0 length LDAP Control sequence (Ticket 571) - Resolves: bug 1034902 - replica init/bulk import errors should be more verbose (Ticket 47606) - Resolves: bug 1044219 - fix memleak caused by 47347 (Ticket 47623) - Resolves: bug 1049522 - Crash after replica is installed; Fix cherry-pick error for 1.3.2 and 1.3.1 (Ticket 47620) - Resolves: bug 1049568 - changelog iteration should ignore cleaned rids when getting the minCSN (Ticket 47627)- Mass rebuild 2013-12-27- release 1.3.1.6-12 - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute (Ticket 47620) - Resolves: bug 1034898 - automember plugin task memory leaks (Ticket 47592) - Resolves: bug 1034451 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms (Ticket 47614) - Resolves: bug 1032318 - entries with empty objectclass attribute value can be hidden (Ticket 47591) - Resolves: bug 1032316 - attrcrypt fails to find unlocked key (Ticket 47596) - Resolves: bug 1031227 - Reduce lock scope in retro changelog plug-in (Ticket 47599) - Resolves: bug 1031226 - Convert ldbm_back_seq code to be transaction aware (Ticket 47598) - Resolves: bug 1031225 - Convert retro changelog plug-in to betxn (Ticket 47597) - Resolves: bug 1031223 - hard coded limit of 64 masters in agreement and changelog code (Ticket 47587) - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613) - Resolves: bug 1035824 - Automember betxnpreoperation - transaction not aborted when group entry does not exist (Ticket 47622)- Resolves: bug 1024979 - CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches- release 1.3.1.6-10 - Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep - had to revert earlier change - does not work and breaks ipa- release 1.3.1.6-9 - Resolves: bug 1028440 - Winsync replica initialization and incremental updates from DS to AD fails on RHEL - Resolves: bug 1027502 - Replication Failures related to skipped entries due to cleaned rids - Resolves: bug 1027047 - Winsync plugin segfault during incremental backoff- release 1.3.1.6-8 - Resolves: bug 971111 - DNA plugin failed to fetch replication agreement - Resolves: bug 1026931 - 1.2.11.29 crash when removing entries from cache- Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep - Resolves: bug 1018914 fixup memberof task does not work: task entry not added- Resolves: bug 1013900 - logconv: some stats do not work across server restarts - previous patch introduced regressions - fixed by c2eced0 ticket #47550 and e2a880b Ticket #47550 and 8b10f83 Ticket #47551 - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock - previous patch not complete, fixed by a11be5c Ticket 47513 - Resolves: bug 1016749 - DS crashes when "cn=Directory Manager" is changing it's password - cherry picked upstream f786600 Ticket 47329 and b67e230 Coverity Fixes - Resolves: bug 1015252 locale "nl" not supported by collation plugin - Resolves: bug 1016317 Need to update supported locales - Resolves: bug 1016722 memory leak in range searches- Resolves: bug 1013896 - logconv.pl - Use of comma-less variable list is deprecated - Resolves: bug 1008256 - backend txn plugin fixup tasks should be done in a txn - Resolves: bug 1013738 - CLEANALLRUV doesnt run across all replicas - Resolves: bug 1011220 - PassSync removes User must change password flag on the Windows side - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock - Resolves: bug 1012125 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch - Resolves: bug 1013063 - RUV tombstone search with scope "one" doesn`t work - Resolves: bug 1013893 - Indexed search are logged with 'notes=U' in the access logs - Resolves: bug 1013894 - improve logconv.pl performance with large access logs - Resolves: bug 1013898 - Fix various issues with logconv.pl - Resolves: bug 1013897 - logconv.pl uses /var/tmp for BDB temp files - Resolves: bug 1013900 - logconv: some stats do not work across server restarts - Resolves: bug 1014354 - Coverity fixes - 12023, 12024, and 12025- bump version to 1.3.1.6-4 - Resolves Bug 1007988 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing (Ticket 47489) - Resolves Bug 853931 - Allow macro aci keywords to be case-insensitive (Ticket 449) - Resolves Bug 1006563 - automember rebuild task not working as expected (Ticket 47507)- Ticket #47455 - valgrind - value mem leaks, uninit mem usage - Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly- bump version to 1.3.1.6-2 - Resolves Bug 1000633 - ns-slapd crash due to bogus DN - Ticket #47488 - Users from AD sub OU does not sync to IPA- bump version to 1.3.1.6 - Ticket 47455 - valgrind - value mem leaks, uninit mem usage - fix coverity 11915 - dead code - introduced with fix for ticket 346 - fix coverity 11895 - null deref - caused by fix to ticket 47392 - fix compiler warning in posix winsync code for posix_group_del_memberuid_callback - Fix compiler warnings for Ticket 47395 and 47397 - fix compiler warning (cherry picked from commit 904416f4631d842a105851b4a9931ae17822a107) - Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch - fix compiler warnings - Fix compiler warning (cherry picked from commit ec6ebc0b0f085a82041d993ab2450a3922ef5502)- bump version to 1.3.1.5 - Ticket 47456 - delete present values should append values to deleted values - Ticket 47455 - valgrind - value mem leaks, uninit mem usage - Ticket 47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication - Ticket 47440 - Fix runtime errors caused by last patch. - Ticket 47440 - Fix compilation warnings and header files - Ticket 47405 - CVE-2013-2219 ACLs inoperative in some search scenarios - Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D - Ticket 47378 - fix recent compiler warnings - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47449 - deadlock after adding and deleting entries - Ticket 47441 - Disk Monitoring not checking filesystem with logs - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold- bump version to 1.3.1.4 - Ticket 47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negat - Ticket 47424 - Replication problem with add-delete requests on single-valued attributes - Ticket 47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry - Ticket 47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry - Ticket 47421 - memory leaks in set_krb5_creds - Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute v - Ticket 47369 version2 - provide default syntax plugin - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47339 - RHDS denies MODRDN access if ACI list contains any DENY rule - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47428 - Memory leak in 389-ds-base 1.2.11.15 - Ticket 47392 - ldbm errors when adding/modifying/deleting entries - Ticket 47385 - Disk Monitoring is not triggered as expected. - Ticket 47410 - changelog db deadlocks with DNA and replication- bump version to 1.3.1.3 - Ticket 47374 - flush.pl is not included in perl5 - Ticket 47391 - deleting and adding userpassword fails to update the password (additional fix) - Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization - Ticket 47395 47397 - v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured - Ticket 47396 - crash on modrdn of tombstone - Ticket 47400 - MMR stress test with dna enabled causes a deadlock - Ticket 47409 - allow setting db deadlock rejection policy - Ticket 47419 - Unhashed userpassword can accidentally get removed from mods - Ticket 47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'- Rebuilt for new net-snmp- bump version to 1.3.1.2 - Ticket 47391 - deleting and adding userpassword fails to update the password - Coverity Fixes (Part 7)- bump version to 1.3.1.1 - Ticket 402 - nhashed#user#password in entry extension - Ticket 511 - Revision - allow turning off vattr lookup in search entry return - Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate - Ticket 47327 - error syncing group if group member user is not synced - Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback - Ticket 47359 - new ldap connections can block ldaps and ldapi connections - Ticket 47362 - ipa upgrade selinuxusermap data not replicating - Ticket 47375 - flush_ber error sending back start_tls response will deadlock - Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3) - Ticket 47377 - make listen backlog size configurable - Ticket 47378 - fix recent compiler warnings - Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice - Ticket 47385 - DS not shutting down when disk monitoring threshold is reached - Coverity Fixes (part 1) - Coverity Fixes (Part 2) - Coverity Fixes (Part 3) - Coverity Fixes (Part 4) - Coverity Fixes (Part 5)- bump version to 1.3.1.0 - Ticket 332 - Command line perl scripts should attempt most secure connection type first - Ticket 342 - better error message when cache overflows - Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager - Ticket 419 - logconv.pl - improve memory management - Ticket 422 - 389-ds-base - Can't call method "getText" - Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts - Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used - Ticket 487 - Possible to add invalid attribute values to PAM PTA plugin configuration - Ticket 502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen - Ticket 505 - use lock-free access name2asi and oid2asi tables (additional) - Ticket 508 - lock-free access to FrontendConfig structure - Ticket 511 - allow turning off vattr lookup in search entry return - Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time - Ticket 528 - RFE - get rid of instance specific scripts - Ticket 529 - dn normalization must handle multiple space characters in attributes - Ticket 532 - RUV is not getting updated for both Master and consumer - Ticket 533 - only scan for attributes to decrypt if there are encrypted attrs configured - Ticket 534 - RFE: Add SASL mappings fallback - Ticket 537 - Improvement of range search - Ticket 539 - logconv.pl should handle microsecond timing - Ticket 543 - Sorting with attributes in ldapsearch gives incorrect result - Ticket 545 - Segfault during initial LDIF import: str2entry_dupcheck() - Ticket 547 - Incorrect assumption in ndn cache - Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval - Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation - Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration - Ticket 558 - Replication - make timeout for protocol shutdown configurable - Ticket 561 - disable writing unhashed#user#password to changelog - Ticket 563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized. - Ticket 565 - turbo mode and replication - allow disable of turbo mode - Ticket 571 - server does not accept 0 length LDAP Control sequence - Ticket 574 - problems with dbcachesize disk space calculation - Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions - Ticket 585 - Behaviours of "db2ldif -a " and "db2ldif.pl -a " are inconsistent - Ticket 587 - Replication error messages in the DS error logs - Ticket 588 - Create MAN pages for command line scripts - Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control - Ticket 603 - A logic error in str2simple - Ticket 604 - Required attribute not checked during search operation - Ticket 608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message - Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND - Ticket 612 - improve dbgen rdn generation, output - Ticket 613 - ldclt: add timestamp, interval, nozeropad, other improvements - Ticket 616 - High contention on computed attribute lock - Ticket 618 - Crash at shutdown while stopping replica agreements - Ticket 620 - Better logging of error messages for 389-ds-base - Ticket 621 - modify operations without values need to be written to the changelog - Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory - Ticket 631 - Replication: "Incremental update started" status message without consumer initialized - Ticket 633 - allow nsslapd-nagle to be disabled, and also tcp cork - Ticket 47299 - allow cmdline scripts to work with non-root user - Ticket 47302 - get rid of sbindir start/stop/restart slapd scripts - Ticket 47303 - start/stop/restart dirsrv scripts should report and error if no instances - Ticket 47304 - reinitialization of a master with a disabled agreement hangs - Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task) - Ticket 47312 - replace PR_GetFileInfo with PR_GetFileInfo64 - Ticket 47315 - filter option in fixup-memberof requires more clarification - Ticket 47325 - Crash at shutdown on a replica aggrement - Ticket 47330 - changelog db extension / upgrade is obsolete - Ticket 47336 - logconv.pl -m not working for all stats - Ticket 47341 - logconv.pl -m time calculation is wrong - Ticket 47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide - Ticket 47347 - Simple paged results should support async search - Ticket 47348 - add etimes to per second/minute stats - Ticket 47349 - DS instance crashes under a high load- bump version to 1.3.0.5 - Ticket 47308 - unintended information exposure when anonymous access is set to rootdse - Ticket 628 - crash in aci evaluation - Ticket 627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so - Ticket 634 - Deadlock in DNA plug-in Ticket #576 - DNA: use event queue for config update only at the start up - Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC - Ticket 623 - cleanAllRUV task fails to cleanup config upon completion- e53d691 bump version to 1.3.0.4 - Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data - Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled) - Ticket 490 - Slow role performance when using a lot of roles - Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry- bump version to 1.3.0.3 - Ticket #584 - Existence of an entry is not checked when its password is to be deleted - Ticket 562 - Crash when deleting suffix- Rebuild for icu 50- bump version to 1.3.0.2 - Ticket #542 - Cannot dynamically set nsslapd-maxbersize- bump version to 1.3.0.1 - Ticket 556 - Don't overwrite certmap.conf during upgrade- bump version to 1.3.0.0- bump version to 1.3.0.rc3 - Ticket 549 - DNA plugin no longer reports additional info when range is depleted - Ticket 541 - need to set plugin as off in ldif template - Ticket 541 - RootDN Access Control plugin is missing after upgrade- bump version to 1.3.0.rc2 - Trac Ticket #497 - Escaped character cannot be used in the substring search filter - Ticket 509 - lock-free access to be->be_suffixlock - Trac Ticket #522 - betxn: upgrade is not implemented yet- bump version to 1.3.0.rc1 - Ticket #322 - Create DOAP description for the 389 Directory Server project - Trac Ticket #499 - Handling URP results is not corrrect - Ticket 509 - lock-free access to be->be_suffixlock - Ticket 456 - improve entry cache sizing - Trac Ticket #531 - loading an entry from the database should use str2entry_f - Trac Ticket #536 - Clean up compiler warnings for 1.3 - Trac Ticket #531 - loading an entry from the database should use str2entry_fast - Ticket 509 - lock-free access to be->be_suffixlock - Ticket 527 - ns-slapd segfaults if it cannot rename the logs - Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't - Ticket 216 - disable replication agreements - Ticket 518 - dse.ldif is 0 length after server kill or machine kill - Ticket 393 - Change in winSyncInterval does not take immediate effect - Ticket 20 - Allow automember to work on entries that have already been added - Coverity Fixes - Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5 - Ticket 337 - improve CLEANRUV functionality - Fix for ticket 504 - Ticket 394 - modify-delete userpassword - minor fixes for bdb 4.2/4.3 and mozldap - Trac Ticket #276 - Multiple threads simultaneously working on connection's private buffer causes ns-slapd to abort - Fix for ticket 465: cn=monitor showing stats for other db instances - Ticket 507 - use mutex for FrontendConfig lock instead of rwlock - Fix for ticket 510 Avoid creating an attribute just to determine the syntax for a type, look up the syntax directly by type - Coverity defect: Resource leak 13110 - Ticket 517 - crash in DNA if no dnaMagicRegen is specified - Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry - Trac Ticket #519 - Search with a complex filter including range search is slow - Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error - Trac Ticket #311 - IP lookup failing with multiple DNS entries - Trac Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs - Trac Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error - Ticket #503 - Improve AD version in winsync log message - Trac Ticket #190 - Un-resolvable server in replication agreement produces unclear error message - Coverity fixes - Trac Ticket #391 - Slapd crashes when deleting backends while operations are still in progress - Trac Ticket #448 - Possible to set invalid macros in Macro ACIs - Trac Ticket #498 - Cannot abaondon simple paged result search - Coverity defects - Trac Ticket #494 - slapd entered to infinite loop during new index addition - Fixing compiler warnings in the posix-winsync plugin - Coverity defects - Ticket 147 - Internal Password Policy usage very inefficient - Ticket 495 - internalModifiersname not updated by DNA plugin - Revert "Ticket 495 - internalModifiersname not updated by DNA plugin" - Ticket 495 - internalModifiersname not updated by DNA plugin - Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h]) - Ticket 486 - nsslapd-enablePlugin should not be multivalued - Ticket 488 - Doc: DS error log messages with typo - Trac Ticket #451 - Allow db2ldif to be quiet - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes - Ticket #481 - expand nested posix groups - Trac Ticket #455 - Insufficient rights to unhashed#user#password when user deletes his password - Ticket #446 - anonymous limits are being applied to directory managerTicket #28 MOD operations with chained delete/add get back error 53 on backend config Ticket #173 ds-logpipe.py script's man page and script help should be updated for -t option. Ticket #196 RFE: Interpret IPV6 addresses for ACIs, replication, and chaining Ticket #218 RFE - Make RIP working with Replicated Entries Ticket #328 make sure all internal search filters are properly escaped Ticket #329 389-admin build fails on F-18 with new apache Ticket #344 deadlock in replica_write_ruv Ticket #351 use betxn plugins by default Ticket #352 make cos, roles, views betxn aware Ticket #356 logconv.pl - RFE - track bind info Ticket #365 Audit log - clear text password in user changes Ticket #370 Opening merge qualifier CoS entry using RHDS console changes the entry. Ticket #372 Setting nsslapd-listenhost or nsslapd-securelistenhost breaks ACI processing Ticket #386 Overconsumption of memory with large cachememsize and heavy use of ldapmodify Ticket #402 unhashedTicket #userTicket #password in entry extension Ticket #408 Create a normalized dn cache Ticket #453 db2index with -tattrname:type,type fails Ticket #461 fix build problem with mozldap c sdk Ticket #462 add test for include file mntent.h Ticket #463 different parameters of getmntent in Solaris- Trac Ticket #470 - 389 prevents from adding a posixaccount with userpassword after schema reload - Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang - Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start - Ticket 473 - change VERSION.sh to have console version be major.minor - Ticket 475 - Root DN Access Control - improve value checking for config - Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension - Ticket 474 - Root DN Access Control - days allowed not working correctly - Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas - 0b79915 fix compiler warnings in ticket 374 code - Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope- Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement - Ticket 386 - large memory growth with ldapmodify(heap fragmentation) - this patch doesn't fix the bug - it allows us to experiment with - different values of mxfast - Ticket #374 - consumer can go into total update mode for no reason- Ticket #426 - support posix schema for user and group sync - 1) plugin config ldif must contain pluginid, etc. during upgrade or it - will fail due to schema errors - 2) posix winsync should have a lower precedence (25) than the default (50) - so that it will be run first - 3) posix winsync should support the Winsync API v3 - the v2 functions are - just stubs for now - but the precedence cb is active- 8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete - Trac Ticket #437 - variable dn should not be used in ldbm_back_delete - ba1f5b2 fix coverity resource leak in windows_plugin_add - e3e81db Simplify program flow: change while loops to for - a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0) - 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar - 77eb760 Simplify program flow: eliminate unnecessary continue - c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new - a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking - d49035c Factorize into new isPosixGroup function - 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free - 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain - Ticket #440 - periodic dirsync timed event causes server to loop repeatedly - Ticket #355 - winsync should not delete entry that appears to be out of scope - Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values. - 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code - 2734a71 CLEANALLRUV coverity fixes - Ticket #426 - support posix schema for user and group sync - Ticket #430 - server to server ssl client auth broken with latest openldap6c0778f bumped version to 1.2.11.11 Ticket 429 - added nsslapd-readonly to DS schema Ticket 403 - fix CLEANALLRUV regression from last commit Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute valuesdb6b354 bumped version to 1.2.11.10 Ticket 403 - CLEANALLRUV revisionsea05e69 Bumped version to 1.2.11.9 Ticket 407 - dna memory leak - fix crash from prev fixddcf669 bump version to 1.2.11.8 for offical release Ticket #425 - support multiple winsync plugins Ticket 403 - cleanallruv coverity fixes Ticket 407 - memory leak in dna plugin Ticket 403 - CLEANALLRUV feature Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs 3168f04 Coverity defects 5ff0a02 COVERITY FIXES Ticket #388 - Improve replication agreement status messages 0760116 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion Ticket #409 - Report during startup if nsslapd-cachememsize is too small Ticket #412 - memberof performance enhancement 12813: Uninitialized pointer read string_values2keys Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values Ticket #410 - Referential integrity plug-in does not work when update interval is not zero Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled Ticket #405 - referint modrdn not working if case is different Ticket 399 - slapi_ldap_bind() doesn't check bind results- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Perl 5.16 rebuild- Ticket 378 - unhashed#user#password visible after changing password - fix func declaration from previous patch - Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error- Trac Ticket 396 - Account Usability Control Not Working- Ticket #378 - audit log does not log unhashed password: enabled, by default. - Ticket #378 - unhashed#user#password visible after changing password - Ticket #365 - passwords in clear text in the audit log- workaround for https://bugzilla.redhat.com/show_bug.cgi?id=833529- Ticket #387 - managed entry sometimes doesn't delete the managed entry - 5903815 improve txn test index handling - Ticket #360 - ldapmodify returns Operations error - fix delete caching - bcfa9e3 Coverity Fix for CLEANALLRUV - Trac Ticket #335 - transaction retries need to be cache aware - Ticket #389 - ADD operations not in audit log - 44cdc84 fix coverity issues with uninit vals, no return checking - Ticket 368 - Make the cleanAllRUV task one step - Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week- Perl 5.16 rebuild- Ticket #360 - ldapmodify returns Operations error - Ticket #321 - krbExtraData is being null modified and replicated on each ssh login - Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress - Ticket #361: Bad DNs in ACIs can segfault ns-slapd - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object - Ticket #337 - Improve CLEANRUV task- Ticket #358 - managed entry doesn't delete linked entry- Ticket #351 - use betxn plugins by default - revert - make no plugins betxn by default - too great a risk - for deadlocks until we can test this better - Ticket #348 - crash in ldap_initialize with multiple threads - fixes PR_Init problem in ldclt- f227f11 Suppress alert on unavailable port with forced setup - Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return - Ticket #351 - use betxn plugins by default - Trac Ticket #345 - db deadlock return should not log error - Ticket #348 - crash in ldap_initialize with multiple threads - Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied - Ticket #207 - [RFE] enable attribute that tracks when a password was last set - Ticket #216 - RFE - Disable replication agreements - Ticket #337 - RFE - Improve CLEANRUV functionality - Ticket #326 - MemberOf plugin should work on all backends - Trac Ticket #19 - Convert entryUSN plugin to transaction aware type - Ticket #347 - IPA dirsvr seg-fault during system longevity test - Trac Ticket #310 - Avoid calling escape_string() for logged DNs - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object - Ticket #183 - passwordMaxFailure should lockout password one sooner - Trac Ticket #335 - transaction retries need to be cache aware - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - Ticket #325 - logconv.pl : use of getopts to parse command line options - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - 554e29d Coverity Fixes - Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions - Ticket #315 - small fix to libglobs - Ticket #315 - ns-slapd exits/crashes if /var fills up - Ticket #20 - Allow automember to work on entries that have already been added - Trac Ticket #45 - Fine Grained Password policy: if passwordHistory is on, deleting the password fails.- 453eb97 schema def must have DESC '' - close paren must be preceded by space - Trac Ticket #46 - (additional) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #331 - transaction errors with db 4.3 and db 4.2 - Ticket #261 - Add Solaris i386 - Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks - Ticket #324 - Sync with group attribute containing () fails - Ticket #319 - ldap-agent crashes on start with signal SIGSEGV - 77cacd9 coverity 12606 Logically dead code - Trac Ticket #303 - make DNA range requests work with transactions - Ticket #320 - allow most plugins to be betxn plugins - Ticket #24 - Add nsTLS1 to the DS schema - Ticket #271 - Slow shutdown when you have 100+ replication agreements - TIcket #285 - compilation fixes for '--format-security' - Ticket 211 - Avoid preop range requests non-DNA operations - Ticket #271 - replication code cleanup - Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages. - Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration - Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs - 6f8680a coverity 12563 Read from pointer after free (fix 2) - e6a9b22 coverity 12563 Read from pointer after free - 245d494 Config changes fail because of unknown attribute "internalModifiersname" - Ticket #191 - Implement SO_KEEPALIVE in network calls - Ticket #289 - allow betxn plugin config changes - 93adf5f destroy the entry cache and dn cache in the dse post op delete callback - e2532d8 init txn thread private data for all database modes - Ticket #291 - cannot use & in a sasl map search filter - 6bf6e79 Schema Reload crash fix - 60b2d12 Fixing compiler warnings - Trac Ticket #260 - 389 DS does not support multiple paging controls on a single connection - Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName - fdcc256 Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e - Ticket #306 - void function cannot return value - ticket 181 - Allow PAM passthru plug-in to have multiple config entries - ticket 211 - Use of uninitialized variables in ldbm_back_modify() - Ticket #74 - Add schema for DNA plugin (RFE) - Ticket #301 - implement transaction support using thread local storage - Ticket #211 - dnaNextValue gets incremented even if the user addition fails - 144af59 coverity uninit var and resource leak - Trac Ticket #34 - remove-ds.pl does not remove everything - Trac Ticket #169 - allow 389 to use db5 - bc78101 fix compiler warning in acct policy plugin - Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints - Trac Ticket #27 - SASL/PLAIN binds do not work - Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFYops - Ticket #17 - new replication optimizations- Ticket #46 - (revised) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #66 - 389-ds-base spec file does not have a BuildRequires on gcc-c++- Ticket #46 - setup-ds-admin.pl does not like ipv6 only hostnames- get rid of posttrans - move update code to post- Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash- b05139b memleak in normalize_mods2bvals - c0eea24 memleak in mep_parse_config_entry - 90bc9eb handle null smods - Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash - Ticket #306 - void function cannot return value - ticket 304 - Fix kernel version checking in dsktune- Trac Ticket #298 - crash when replicating orphaned tombstone entry - Ticket #281 - TLS not working with latest openldap - Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails - Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse- Ticket #124 - add Provides: ldif2ldbm to rpm- Ticket #294 - 389 DS Segfaults during replica install in FreeIPA- Ticket 284 - Remove unnecessary SNMP MIB files - Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5? - Ticket 175 - logconv.pl improvements- Introducing use_db4 macro to support db5 (libdb).- Rebuild against PCRE 8.30- ad9dd30 coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources - Ticket #281 - TLS not working with latest openldap - Ticket #280 - extensible binary filters do not work - Ticket #279 - filter normalization does not use matching rules - Trac Ticket #275 - Invalid read reported by valgrind - Ticket #277 - cannot set repl referrals or state - Ticket #278 - Schema replication update failed: Invalid syntax - Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled - Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server - Ticket #87 - Manpages fixes - c493fb4 fix a couple of minor coverity issues - Ticket #55 - Limit of 1024 characters for nsMatchingRule - Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned - Ticket #6 - protocol error from proxied auth operation - Ticket #38 - nisDomain schema is incorrect - Ticket #273 - ruv tombstone searches don't work after reindex entryrdn - Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword - Ticket #22 - RFE: Support sendmail LDAP routing schema - Ticket #161 - Review and address latest Coverity issues - Ticket #140 - incorrect memset parameters - Trac Ticket 35 - Log not clear enough on schema errors - Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn - Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if IPv4-mapped-IPv6 address is given- Ticket #272 - add tombstonenumsubordinates to schema- fixes for systemd - remove .pid files after shutting down servers - Ticket #263 - add systemd include directive - Ticket #264 - upgrade needs better check for "server is running"- Ticket #262 - pid file not removed with systemd - Ticket #50 - server should not call a plugin after the plugin close function is called - Ticket #18 - Data inconsitency during replication - Ticket #49 - better handling for server shutdown while long running tasks are active - Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead - Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same - Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI - 6aaeb77 add a hack to disable sasl hostname canonicalization - Ticket 168 - minssf should not apply to rootdse - Ticket #177 - logconv.pl doesn't detect restarts - Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating - Ticket 75 - Unconfigure plugin opperations are being called. - Ticket 26 - Please support setting defaultNamingContext in the rootdse. - Ticket #71 - unable to delete managed entry config - Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock - Ticket #256 - debug build assertion in ACL_EvalDestroy() - Ticket #4 - bak2db gets stuck in infinite loop - Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS - Ticket #3: acl cache overflown problem - Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations - Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full DN.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Bug 755725 - 389 programs linked against openldap crash during shutdown - Bug 755754 - Unable to start dirsrv service using systemd - Bug 745259 - Incorrect entryUSN index under high load in replicated environment - d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere - 5910551 csn_init_as_string should not use sscanf - b53ba00 reduce calls to csn_as_string and slapi_log_error - c897267 fix member variable name error in slapi_uniqueIDFormat - 66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf - 580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf - Bug 751645 - crash when simple paged fails to send entry to client - Bug 752155 - Use restorecon after creating init script lock file- Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD' - Bug 750625 750624 750622 744946 Coverity issues - Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication - Bug 748575 - rhds81 modrn operation and 100% cpu use in replication - Bug 745259 - Incorrect entryUSN index under high load in replicated environment - f639711 Reduce the number of DN normalization - c06a8fa Keep unhashed password psuedo-attribute in the adding entry - Bug 744945 - nsslapd-counters attribute value cannot be set to "off" - 8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular - d316a67 Change referential integrity to be a betxnpostoperation plugin- Bug 741744 - part3 - MOD operations with chained delete/add get back error 53 - 1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in - b6d3ba7 pass the plugin config entry to the plugin init function - 28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins - Bug 743966 - Compiler warnings in account usability plugin- 498c42b fix transaction support in ldbm_delete- Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations - Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config - Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user- Bug 695736 - Providing native systemd file- corrected source- Bug 735114 - renaming a managed entry does not update mepmanagedby- Bug 735121 - simple paged search + ip/dns based ACI hangs server - Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code - Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server - Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.- Bug 732153 - subtree and user account lockout policies implemented? - Bug 722292 - Entries in DS are not updated properly when using WinSync API- Bug 733103 - large targetattr list with syntax errors cause server to crash or hang - Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining - Bug 732541 - Ignore error 32 when adding automember config - Bug 728592 - Allow ns-slapd to start with an invalid server cert- Bug 728510 - Run dirsync after sending updates to AD - Bug 729717 - Fatal error messages when syncing deletes from AD - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working. - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash - Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed again - separate tests for atomic ops and atomic bool cas- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix another coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - previous patch broke build on el5- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error- Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed to use configure test for GCC provided 64-bit atomic functions- Bug 663752 - Cert renewal for attrcrypt and encchangelog - this was "re-fixed" due to a deadlock condition with cl2ldif task cancel - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma - Bug 725743 - Make memberOf use PRMonitor for it's operation lock - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package - Bug 723937 - Slapi_Counter API broken on 32-bit F15- Perl mass rebuild- Perl mass rebuild- Bug 720059 - RDN with % can cause crashes or missing entries - Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2. - Bug 691313 - Need TLS/SSL error messages in repl status and errors log - Bug 712855 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not - Bug 713209 - Update sudo schema - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9 - Bug 718303 - Intensive updates on masters could break the consumer's cache - Bug 711679 - unresponsive LDAP service when deleting vlv on replica- 389-ds-base-1.2.9.a2 - look for separate openldap ldif library - Split automember regex rules into separate entries - writing Inf file shows SchemaFile = ARRAY(0xhexnum) - add support for ldif files with changetype: add - Bug 716980 - winsync uses old AD entry if new one not found - Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9 - bump console version to 1.2.6 - Bug 711679 - unresponsive LDAP service when deleting vlv on replica - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package - Bug 663752 - Cert renewal for attrcrypt and encchangelog - Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute - Bug 711906 - ns-slapd segfaults using suffix referrals - Bug 707384 - only allow FIPS approved cipher suites in FIPS mode - Bug 710377 - Import with chain-on-update crashes ns-slapd - Bug 709826 - Memory leak: when extra referrals configured- Perl mass rebuild- Perl 5.14 mass rebuild- 389-ds-base-1.2.9.a1 - Auto Membership - More Coverity fixes- 389-ds-base-1.2.8.3 - Bug 700145 - userpasswd not replicating - Bug 700557 - Linked attrs callbacks access free'd pointers after close - Bug 694336 - Group sync hangs Windows initial Sync - Bug 700215 - ldclt core dumps - Bug 695779 - windows sync can lose old values when a new value is added - Bug 697027 - 12 - minor memory leaks found by Valgrind + TET- 389-ds-base-1.2.8.2 - Bug 696407 - If an entry with a mixed case RDN is turned to be - a tombstone, it fails to assemble DN from entryrdn- 389-ds-base-1.2.8.1 - Bug 693962 - Full replica push loses some entries with multi-valued RDNs- 389-ds-base-1.2.8.0 - Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1 - Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1 - Bug 693466 - Unable to change schema online - Bug 693503 - matching rules do not inherit from superior attribute type - Bug 693455 - nsMatchingRule does not work with multiple values - Bug 693451 - cannot use localized matching rules - Bug 692331 - Segfault on index update during full replication push on 1.2.7.5- 389-ds-base-1.2.8.rc5 - Bug 692469 - Replica install fails after step for "enable GSSAPI for replication"- 389-ds-base-1.2.8.rc4 - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - 389-ds-base-1.2.8.rc3 - Bug 690955 - Mrclone fails due to the replica generation id mismatch- 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2 - Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences - Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format - Bug 681015 - RFE: allow fine grained password policy duration attributes - in days, hours, minutes, as well - Bug 684996 - Exported tombstone cannot be imported correctly - Bug 683250 - slapd crashing when traffic replayed - Bug 668909 - Can't modify replication agreement in some cases - Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1 - Bug 644784 - Memory leak in "testbind.c" plugin - Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree- rebuild for icu 4.6- 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1 - Bug 518890 - setup-ds-admin.pl - improve hostname validation - Bug 681015 - RFE: allow fine grained password policy duration attributes in - days, hours, minutes, as well - Bug 514190 - setup-ds-admin.pl --debug does not log to file - Bug 680555 - ns-slapd segfaults if I have more than 100 DBs - Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically - Bug 674852 - crash in ldap-agent when using OpenLDAP - Bug 679978 - modifying attr value crashes the server, which is supposed to - be indexed as substring type, but has octetstring syntax - Bug 676655 - winsync stops working after server restart - Bug 677705 - ds-logpipe.py script is failing to validate "-s" and - "--serverpid" options with "-t". - Bug 625424 - repl-monitor.pl doesn't work in hub node- Bug 676598 - 389-ds-base multilib: file conflicts - split off libs into a separate -libs package- do not create /var/run/dirsrv - setup will create it instead - remove the fedora-ds initscript upgrade stuff - we do not support that anymore - convert the remaining lua stuff to plain old shell script- 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3 - Bug 675320 - empty modify operation with repl on or lastmod off will crash server - Bug 675265 - preventryusn gets added to entries on a failed delete - Bug 677774 - added support for tmpfiles.d - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search es - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH - Bug 671199 - Don't allow other to write to rundir - Bug 678646 - Ignore tombstone operations in managed entry plug-in - Bug 676053 - export task followed by import task causes cache assertion - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8 - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used - Bug 676689 - crash while adding a new user to be synced to windows - Bug 604881 - admin server log files have incorrect permissions/ownerships - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - Bug 675853 - dirsrv crash segfault in need_new_pw()- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2 - Bug 674430 - Improve error messages for attribute uniqueness - Bug 616213 - insufficient stack size for HP-UX on PA-RISC - Bug 615052 - intrinsics and 64-bit atomics code fails to compile - on PA-RISC - Bug 151705 - Need to update Console Cipher Preferences with new ciphers - Bug 668862 - init scripts return wrong error code - Bug 670616 - Allow SSF to be set for local (ldapi) connections - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the - log output to the text file - Bug 668619 - slapd stops responding - Bug 624547 - attrcrypt should query the given slot/token for - supported ciphers - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any - error message in logs- 1.2.8-0.1.a1 release - git tag 389-ds-base-1.2.8.a1 - many bug fixes- 1.2.7.5 release - git tag 389-ds-base-1.2.7.5 - Bug 663597 - Memory leaks in normalization code- Resolves: bug 656541 - use %ghost on files in /var/lock- 1.2.7.4 release - git tag 389-ds-base-1.2.7.4 - Bug 661792 - Valid managed entry config rejected- 1.2.7.3 release - git tag 389-ds-base-1.2.7.3 - Bug 658312 - Invalid free in Managed Entry plug-in - Bug 641944 - Don't normalize non-DN RDN values- 1.2.7.2 release - git tag 389-ds-base-1.2.7.2 - Bug 659456 - Incorrect usage of ber_printf() in winsync code - Bug 658309 - Process escaped characters in managed entry mappings - Bug 197886 - Initialize return value for UUID generation code - Bug 658312 - Allow mapped attribute types to be quoted - Bug 197886 - Avoid overflow of UUID generator- last commit had bogus commit log- 1.2.7.1 release - git tag 389-ds-base-1.2.7.1 - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes - Bug 656392 - Remove calls to ber_err_print() - Bug 625950 - hash nsslapd-rootpw changes in audit log- 1.2.7 release - git tag 389-ds-base-1.2.7- Bug 648949 - Merge dirsrv and dirsrv-admin policy modules into base policy- 1.2.7.a5 release - git tag 389-ds-base-1.2.7.a5 - Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-ref erral) - Bug 635009 - Add one-way AD sync capability - Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot - put replication config entries in separate file - Bug 567282 - server can not abandon searchRequest of "simple paged results" - Bug 329751 - "nested" filtered roles searches candidates more than needed - Bug 521088 - DNA should check ACLs before getting a value from the range- 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4 - Bug 647932 - multiple memberOf configuration adding memberOf where there is no member - Bug 491733 - dbtest crashes - Bug 606545 - core schema should include numSubordinates - Bug 638773 - permissions too loose on pid and lock files - Bug 189985 - Improve attribute uniqueness error message - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat ions - Bug 619633 - Make attribute uniqueness obey requiredObjectClass- 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Adding the ancestorid fix code to ##upgradednformat.pl.- 1.2.7.a3 release - a2 was never released - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Bug 629681 - Retro Changelog trimming does not behave as expected - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif - are not upgraded in the server instance schema dir- 1.2.7.a2 release - a1 was the OpenLDAP testday release - git tag 389-ds-base-1.2.7.a2 - added openldap support on platforms that use openldap with moznss - for crypto (F-14 and later) - many bug fixes - Account Policy Plugin (keep track of last login, disable old accounts)- added openldap support- bump rel to rebuild again- bump rel to rebuild- This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1 - Bug 634561 - Server crushes when using Windows Sync Agreement - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self - Bug 612264 - ACI issue with (targetattr='userPassword') - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager" - Bug 631862 - crash - delete entries not in cache + referint- This is the final 1.2.6 release- 1.2.6 release candidate 7 - git tag 389-ds-base-1.2.6.rc7 - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6- 1.2.6 release candidate 6 - git tag 389-ds-base-1.2.6.rc6 - Bug 617013 - repl-monitor.pl use cpu upto 90% - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors - Bug 613833 - Allow dirsrv_t to bind to rpc ports - Bug 612242 - membership change on DS does not show on AD - Bug 617629 - Missing aliases in new schema files - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments - Bug 617862 - Replication: Unable to delete tombstone errors - Bug 594745 - Get rid of dirsrv_lib_t label- make selinux-devel explicit Require the base package in order - to comply with Fedora Licensing Guidelines- 1.2.6 release candidate 3 - git tag 389-ds-base-1.2.6.rc3 - Bug 603942 - null deref in _ger_parse_control() for subjectdn - 609256 - Selinux: pwdhash fails if called via Admin Server CGI - 578296 - Attribute type entrydn needs to be added when subtree rename switch is on - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"- 1.2.6 release candidate 2- install replication session plugin header with devel package- 1.2.6 release candidate 1- Mass rebuild with perl-5.12.0- 1.2.6.a4 release- 1.2.6.a3 release - add managed entries plug-in - many bug fixes - moved selinux subpackage into base package- rebuild for icu 4.4- 1.2.6.a2 release - add support for matching rules - many bug fixes- 1.2.6.a1 release - Added SELinux policy and subpackages- 1.2.5 final release- 1.2.5.rc4 release- 1.2.5.rc3 release- 1.2.5.rc2 release- 1.2.5.rc1 release- 1.2.5.a1 release- 1.2.4 release - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif- 1.2.3 release - added template-initconfig to %files - %posttrans now runs update to update the server instances - servers are shutdown, then restarted if running before install - scriptlets mostly use lua now to pass data among scriptlet phases- rebuild with new openssl to fix dependencies- backed out - added template-initconfig to %files - this change is for the next major release - bump version to 1.2.2 - fix reopened 509472 db2index all does not reindex all the db backends correctly - fix 518520 - pre hashed salted passwords do not work - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of - bugs fixed in 1.2.2- rebuilt with new openssl- added template-initconfig to %files- added BuildRequires pcre- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- change name to 389 - change version to 1.2.1 - added initial support for numeric string syntax - added initial support for syntax validation - added initial support for paged results including sorting- final release 1.2.0 - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389 - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428- re-enable ppc builds- exclude ppc builds - needs extensive porting work- new release 1.2.0 - Made devel package depend on mozldap-devel - only create run dir if it does not exist - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330- added db4-utils to Requires for verify-db.pl- Enabled LDAPI autobind- updated update to patch bug463991-bdb47.patch- updated patch bug463991-bdb47.patch- added patch bug463991-bdb47.patch - make ds work with bdb 4.7- rolled back bogus winsync memory leak fix- winsync api improvements for modify operations- This is the 1.1.2 release. The bugs fixed can be found here - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721 - Added winsync-plugin.h to the devel subpackage- bump rev to rebuild and pick up new version of ICU- 1.1.1 release candidate - several bug fixes- fix bugzilla 439829 - patch to allow working with NSS 3.11.99 and later- add patch to allow server to work with NSS 3.11.99 and later - do NSS_Init after fork but before detaching from console- add Requires for versioned perl (libperl.so)- previous fix for 434403 used the wrong patch - this is the right one- Resolves bug 434403 - GCC 4.3 build fails - Rolled new source tarball which includes Nathan's fix for the struct ucred - NOTE: Change version back to 1.1.1 for next release - this release was pulled from CVS tag FedoraDirSvr110_gcc43- Autorebuild for GCC 4.3- This is the GA release of Fedora DS 1.1 - Removed version numbers for BuildRequires and Requires - Added full URL to source tarball- Rebuild for deps- This is the beta2 release - new file added to package - /etc/sysconfig/dirsrv - for setting - daemon environment as is usual in other linux daemons- fix build breakage due to open() - mock could not find BuildRequires: db4-devel >= 4.2.52 - mock works if >= version is removed - it correctly finds db4.6- Change pathnames to use the pkgname macro which is dirsrv - get rid of cvsdate in source name- Added Requires for perldap, cyrus sasl plugins - Removed template-migrate* files - Added perl module directory - Removed install.inf - setup-ds.pl can now easily generate one- added requires for mozldap-tools- update to latest sources - added migrateTo11 to allow migrating instances from 1.0.x to 1.1 - ldapi support - fixed pam passthru plugin ENTRY method- Renamed package to fedora-ds-base, but keep names of paths/files/services the same - use the shortname macro (fedora-ds) for names of paths, files, and services instead - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base - updated to latest sources- More cleanup suggested by Dennis Gilmore - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1- latest sources - added init scripts - use /etc as instconfigdir- latest sources - moved all executables to _bindir- latest sources - added /var/tmp/fedora-ds to dirs- added logconv.pl - added slapi-plugin.h to devel package - added explicit dirs for /var/log/fedora-ds et. al.- just move all .so files into the base package from the devel package- Move the plugin *.so files into the main package instead of the devel - package because they are loaded directly by name via dlopen- Move the script-templates directory to datadir/fedora-ds- change mozldap to mozldap6- remove . from cvsdate define- Having a problem building in Brew - may be Release format- Changed version to 1.1.0 and added Release 1.el4.cvs20070119 - merged in changes from Fedora Extras candidate spec file- Bump component versions (nspr, nss, svrcore, mozldap) to their latest - remove unneeded patches- update to a cvs snapshot - fedorafy the spec - create -devel subpackage - apply a patch to use mozldap not mozldap6 - apply a patch to allow --prefix to work correctly- Fixed the problem where the server would crash upon shutdown in dblayer - due to a race condition among the database housekeeping threads - Fix a problem with normalized absolute paths for db directories- Touch all of the ldap/admin/src/scripts/*.in files so that they - will be newer than their corresponding script template files, so - that make will rebuild them.- Chown new schema files when copying during instance creation- Configure will get ldapsdk_bindir from pkg-config, or $libdir/mozldap6- use eval to sed ./configure into ../configure- jump through hoops to be able to run ../configure- Need to make built dir in setup section- The template scripts needed to use @libdir@ instead of hardcoding - /usr/lib - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall - do the actual build in a "built" subdirectory, until we remove - the old script templates- Make replication plugin link with libdb- Have make define LIBDIR, BINDIR, etc. for C code to use - especially for create_instance.h- Forgot to checkin new config.h.in for AC_CONFIG_HEADERS- Add perldap as a Requires; update sources- Fix ds_newinst.pl - Remove obsolete #defines- Update sources; rebuild to populate brew yum repo with dirsec-nss- Update sources- initial revision/bin/sh/bin/sh/bin/sh389-ds-base !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYY[\\^_`abcdefghijklmnpqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{| 1.3.7.5-19.el7_51.3.7.5-19.el7_51.3.7.5-19.el7_50 1.3.5.4  !dirsrvconfigcertmap.confslapd-collations.conftemplate-initconfigschema99user.ldifdirsrvdirsrv.systemddirsrv.target.wantscl-dumpcl-dump.pldbgen.pldbscands-logpipe.pyds-replcheckdsktuneinfaddldcltldiflogconv.plmigratecredmmldifpwdhashreadnsstaterepl-monitorrepl-monitor.plrsearch70-dirsrv.confsystemdirsrv.targetdirsrv@.serviceperlDSCreate.pmDSDialogs.pmDSMigration.pmDSUpdate.pmDSUpdateDialogs.pmDSUtil.pmDialog.pmDialogManager.pmFileConn.pmInf.pmMigration.pmResource.pmSetup.pmSetupDialogs.pmSetupLog.pmpluginslibacctpolicy-plugin.solibacctusability-plugin.solibacl-plugin.solibaddn-plugin.solibattr-unique-plugin.solibautomember-plugin.solibback-ldbm.solibbitwise-plugin.solibchainingdb-plugin.solibcollation-plugin.solibcontentsync-plugin.solibcos-plugin.solibderef-plugin.solibdistrib-plugin.solibdna-plugin.solibhttp-client-plugin.soliblinkedattrs-plugin.solibmanagedentries-plugin.solibmemberof-plugin.solibpam-passthru-plugin.solibpassthru-plugin.solibpbe-plugin.solibposix-winsync-plugin.solibpwdstorage-plugin.solibreferint-plugin.solibreplication-plugin.solibretrocl-plugin.solibroles-plugin.solibrootdn-access-plugin.solibschemareload-plugin.solibstatechange-plugin.solibsyntax-plugin.solibusn-plugin.solibviews-plugin.solibwhoami-plugin.sopythonfailedbinds.pyfailedbinds.pycfailedbinds.pyologregex.pylogregex.pyclogregex.pyobak2dbbak2db.plcleanallruv.pldb2bakdb2bak.pldb2indexdb2index.pldb2ldifdb2ldif.pldbmon.shdbverifydn2rdnds_selinux_enabledds_selinux_port_queryds_systemd_ask_password_aclfixup-linkedattrs.plfixup-memberof.plldif2dbldif2db.plldif2ldapmigrate-ds.plmonitorns-accountstatus.plns-activate.plns-inactivate.plns-newpwpolicy.plns-slapdremove-ds.plrestart-dirsrvrestoreconfigsaveconfigschema-reload.plsetup-ds.plstart-dirsrvstatus-dirsrvstop-dirsrvsuffix2instancesyntax-validate.plupgradedbupgradednformatusn-tombstone-cleanup.plverify-db.plvlvindexdirsrvdata10rfc2307bis.ldif60changelog.ldif60inetmail.ldif60kerberos.ldif60krb5kdc.ldif60nis.ldif60qmail.ldif60radius.ldif60rfc4876.ldif60samba.ldif60samba3.ldif60sendmail.ldifAce.ldifDSSharedLibEuropean.ldifEurosuffix.ldifExample-roles.ldifExample-views.ldifExample.ldifdbgen-FamilyNamesdbgen-GivenNamesdbgen-OrgUnitstemplate-baseacis.ldiftemplate-country.ldiftemplate-domain.ldiftemplate-dse-minimal.ldiftemplate-dse.ldiftemplate-ldapi-autobind.ldiftemplate-ldapi-default.ldiftemplate-ldapi.ldiftemplate-locality.ldiftemplate-org.ldiftemplate-orgunit.ldiftemplate-sasl.ldiftemplate-state.ldiftemplate-suffix-db.ldiftemplate.ldifinfdefaults.infdscreate.mapdsorgentries.mapdsupdate.mapslapd.infmibsredhat-directory.mibpropertiesmigrate-ds.resns-slapd.propertiessetup-ds.resschema00core.ldif01core389.ldif02common.ldif05rfc2927.ldif05rfc4523.ldif05rfc4524.ldif06inetorgperson.ldif10automember-plugin.ldif10dna-plugin.ldif10mep-plugin.ldif10rfc2307.ldif20subscriber.ldif25java-object.ldif28pilot.ldif30ns-common.ldif50ns-admin.ldif50ns-certificate.ldif50ns-directory.ldif50ns-mail.ldif50ns-value.ldif50ns-web.ldif60acctpolicy.ldif60autofs.ldif60eduperson.ldif60mozilla.ldif60nss-ldap.ldif60pam-plugin.ldif60posix-winsync-plugin.ldif60pureftpd.ldif60rfc2739.ldif60rfc3712.ldif60sabayon.ldif60sudo.ldif60trust.ldifscript-templatestemplate-bak2dbtemplate-bak2db.pltemplate-cleanallruv.pltemplate-db2baktemplate-db2bak.pltemplate-db2indextemplate-db2index.pltemplate-db2ldiftemplate-db2ldif.pltemplate-dbverifytemplate-dn2rdntemplate-fixup-linkedattrs.pltemplate-fixup-memberof.pltemplate-fixup-memberuid.pltemplate-ldif2dbtemplate-ldif2db.pltemplate-ldif2ldaptemplate-monitortemplate-ns-accountstatus.pltemplate-ns-activate.pltemplate-ns-inactivate.pltemplate-ns-newpwpolicy.pltemplate-restart-slapdtemplate-restoreconfigtemplate-saveconfigtemplate-schema-reload.pltemplate-start-slapdtemplate-stop-slapdtemplate-suffix2instancetemplate-syntax-validate.pltemplate-upgradednformattemplate-usn-tombstone-cleanup.pltemplate-verify-db.pltemplate-vlvindexupdates10cleanupldapi.pl10delautodnsuffix.pl10fixrundir.pl20betxn.pl50AES-pbe-plugin.ldif50acctusabilityplugin.ldif50addchainingsaslpwroles.ldif50automemberplugin.ldif50bitstringsyntaxplugin.ldif50contentsync.ldif50deliverymethodsyntaxplugin.ldif50derefplugin.ldif50disableurisyntaxplugin.ldif50enhancedguidesyntaxplugin.ldif50entryusnindex.ldif50faxnumbersyntaxplugin.ldif50faxsyntaxplugin.ldif50fixNsState.pl50guidesyntaxplugin.ldif50linkedattrsplugin.ldif50managedentriesplugin.ldif50memberofindex.ldif50memberofplugin.ldif50nameuidsyntaxplugin.ldif50nstombstonecsn.ldif50numericstringsyntaxplugin.ldif50printablestringsyntaxplugin.ldif50refintprecedence.ldif50retroclprecedence.ldif50rootdnaccesscontrolplugin.ldif50schemareloadplugin.ldif50smd5pwdstorageplugin.ldif50syntaxvalidplugin.ldif50targetuniqueid.ldif50teletexterminalidsyntaxplugin.ldif50telexnumbersyntaxplugin.ldif50updateconfig.ldif50usnplugin.ldif52updateAESplugin.pl60removeLegacyReplication.ldif60upgradeconfigfiles.pl60upgradeschemafiles.pl70upgradefromldif.pl80upgradednformat.pl81changelog.pl82targetuniqueidindex.pl90subtreerename.pl91reindex.pl91subtreereindex.pldnaplugindepends.ldifexampleupdate.ldifexampleupdate.plexampleupdate.sh389-ds-base-1.3.7.5LICENSELICENSE.GPLv3+LICENSE.opensslusrsbinns-slapd-gdb.pycl-dump.1.gzdbgen.pl.1.gzdbscan.1.gzds-logpipe.py.1.gzds-replcheck.1.gzdsktune.1.gzinfadd.1.gzldclt.1.gzldif.1.gzlogconv.pl.1.gzmigratecred.1.gzmmldif.1.gzpwdhash.1.gzreadnsstate.1.gzrepl-monitor.1.gzrsearch.1.gzbak2db.8.gzbak2db.pl.8.gzcleanallruv.pl.8.gzdb2bak.8.gzdb2bak.pl.8.gzdb2index.8.gzdb2index.pl.8.gzdb2ldif.8.gzdb2ldif.pl.8.gzdbmon.sh.8.gzdbverify.8.gzdn2rdn.8.gzfixup-linkedattrs.pl.8.gzfixup-memberof.pl.8.gzldif2db.8.gzldif2db.pl.8.gzldif2ldap.8.gzmigrate-ds.pl.8.gzmonitor.8.gzns-accountstatus.pl.8.gzns-activate.pl.8.gzns-inactivate.pl.8.gzns-newpwpolicy.pl.8.gzns-slapd.8.gzremove-ds.pl.8.gzrestart-dirsrv.8.gzrestoreconfig.8.gzsaveconfig.8.gzschema-reload.pl.8.gzsetup-ds.pl.8.gzstart-dirsrv.8.gzstatus-dirsrv.8.gzstop-dirsrv.8.gzsuffix2instance.8.gzsyntax-validate.pl.8.gzupgradedb.8.gzupgradednformat.8.gzusn-tombstone-cleanup.pl.8.gzverify-db.pl.8.gzvlvindex.8.gzdirsrvdirsrvdirsrv/etc//etc/dirsrv//etc/dirsrv/config//etc/dirsrv/schema//etc/sysconfig//etc/systemd/system//usr/bin//usr/lib/sysctl.d//usr/lib/systemd//usr/lib/systemd/system//usr/lib64/dirsrv//usr/lib64/dirsrv/perl//usr/lib64/dirsrv/plugins//usr/lib64/dirsrv/python//usr/sbin//usr/share//usr/share/dirsrv//usr/share/dirsrv/data//usr/share/dirsrv/inf//usr/share/dirsrv/mibs//usr/share/dirsrv/properties//usr/share/dirsrv/schema//usr/share/dirsrv/script-templates//usr/share/dirsrv/updates//usr/share/doc//usr/share/doc/389-ds-base-1.3.7.5//usr/share/gdb/auto-load//usr/share/gdb/auto-load/usr//usr/share/gdb/auto-load/usr/sbin//usr/share/man/man1//usr/share/man/man8//var/lib//var/lock//var/log/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnu   !"#$%&'()*+,-./012333345556657555555555555588899888888888888888888888888899888888888888898888888889directoryASCII textPOSIX shell script, ASCII text executablePerl script, ASCII text executablePerl script, ASCII text executable, with very long linesELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=553a0461708e72e88d0d543bb58289c9c8eb555a, strippedPython script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=924764c8aa88eaea31f003888d9850a6bcc38c01, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=53b6e9bb64a41bd44d105c96ccc50e1f48b46fdc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=8b8d8254ed496c9a1c09e7230eb19485626a7713, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=c88fdedb329643e5542c57aeeb50525200122dc8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=8843c88756f14bfff029dc4273ea9d36e4bd06fd, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=2229344bc9cfe50caec29150f5071db8348a4397, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=e96973d3ce8d16e0cddc60f675093d817873f564, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=14f0e9f40d8f7339e0fc6191435768d9c38f4a79, strippedPerl5 module source textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ae1c5a26cd7d2f0fbd2244686dc651e071bb733a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b1881f3789874de3aad2edd64131d2ba9721135b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c764c97b095881c82261f951c2bd1c5b235b62f1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0954fd7193c2553317cad7df2acd78a6630368ba, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e9c69bc463c025037b801cd167e821c91f7e5370, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d5ca684bfef22b4b79a918a422d6152ff2bea7b9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=baa9128fa89dab7e0364ec4ca04a42fbfa68160e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=95fc41e6fce862ac25cead82c7e66cfdf1642780, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3d1b76a99e95d3bb9bcaed512e01865f32048864, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=af0bf0813f29077bd4fd19faa48f24915bb202bc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a6b01cd8e0f8080b2cba4da8dcaabc1852d452e5, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9c2ead984fc63a9999e377a8cfa636f255a9b48c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d8ac828b8bf7f3946e1f2567f5b0615af2aa7b86, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=40b31e01baa0f030b2dbeef48466116dc565e11d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=05ad0e33d6fd2fb829283639691fa7ef5dadd4b4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c706686212619c56fd089debd8856665c4b3830e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7f312d9285f80b61b5a6520bfcafffffaf93d334, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=36caf94d9c1aeabd87b6df625cf0c6693622eb88, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=16ab9fc477a983875ef89b4c4d46048b789ef9c9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0bdc9fda0222fae69abffe4205aa8217f3dacc79, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2729800789ed9c97910df2f3c981cc688ac01c90, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=eeecd990ecf7faa4d18171dc4896116c35101693, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1a33ce4a02b475b36bbe7b406fca1a8d77e9d8fa, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=59366db6dd6ac58adc94d04e4f7f390875bc1cb5, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=430b3ede62a0afff0d4aae3779120cbdc33d3667, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8f4c901d8e12bd457ff800e74bceab73340b3a63, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=85e14e2b8c49f7c36940f6348d0595393c2ed7f9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=186ab1a6031ccef257234cea53221f4629b51a60, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3e25d08b0ddb23b174a01159fd613ecf75f93db0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=af3c95b1b91b8e622d474478b1fe7f5f481ee952, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ff3aadec539da231c28283d5cdff578b4a2e0d06, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=91c965c7bfb5899dfb7f5c1577e43210bbfec16a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d86fcfcc92f41ab14e1e44ca6b3c7ef40349f12a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=742ffafa1997bdf9ba5a530d2442546027691a4a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=56731917b17fe154e7a466984d292a9f0a6994d0, strippedpython 2.7 byte-compiledELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=6cae1c2756934f50196eba63641ff6a31700454f, strippedASCII text, with very long linesUTF-8 Unicode textHTML document, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, from Unix, max compression)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, from Unix, max compression)  /EUay#&13@GKd|4Rk5Qi(AYq <BCDEHSTUVWZ[\_bcdgjknorswxy|      !!# RR]RaRcRdRfRR\RRRRRRRCR4R5R)RRRR~RRRRRRRCRRR~RRRRCR4R5R)RR=R,R7RRRRRRCR4R5R)RR,R;R&R$R8R@R#R"RR3R6RAR9RCRRRRRRR0R;R#R"RR3R9R'RCR&R$Rr+L]p 3,^UI50#hCdH{-^KGR>"Ћk3 jtm\NNo6,zg6tcq5C<&ÏJ9 5͏d;!uw~dzSEΰ`4)1k?F%EEY0S>hVh 튪bw"fzm ⩸] [DDkΩ1QDS5f.#s%Gpt#[Ifw6Ⅳ-wޣ!p$ɏZ> ئ_{6z]o|&*8Vw%lZHk\xs E0vm7hάh#rx3ؖ>@{#veC9i?~+{-$zbas={+J;.mDPB^UT(N ?`"G～!98B CAPGY8 PS:f:ߐ,/!;D3/PK } Hc d::Aa X )jj"k~hL592UЇ'dgKIDKN6z= Ufk"$"5VM#FyeZ’3ԚbTf8iĦVΕ֎["6,1I:Mq vR}9`7 A#BGi+o@@7BLӮn )D=˵&`DhA-* RI L|9"l69"OS [dFK C/'⅞VciWJ*z8f::}ay!juA.)hgz^JM#$y3?O6TswyT52}He)69eIC#S(gGtˢ˲twRr7ƪۈQ+m[P2Y.!-] P]4i>x{k啇dM8(ƼJ !FۋW@.nP-\?#sT{߂B-&M]}2Ns ÌxHҼ ^~J6{$~? `Q%f3Kzl&-Hd={y:^v溻1Eʫ|9z ~hxSUGUfzU!:x-8$^Զ{өBVG\Egv̇4g $=Wl3R/&L6ȳvQ=Z~^(C䴇 3ނ!RLleLs~jP{GU5' ϒ/ cN}{.Gke0zu=B>WMb2L\ٿ6}bUOטAw!ɸ.iwe\[lpw<f|uiX5j33de'[vQ5sklRty&g}Lꑸ[VD#ʜM1=>Tfw?-۫*1mFjlf2Y61 @Qb-=˖S9 r " ܿc_oB Oߊ͐2s]Ri ;NOn,E^ p\ra-J ]ަܶB%1$ik7q}t,)߇QW}Ѓocvʳ.Jq9u}M !(DqokrkFmrQFH ȟ||P])nLHȒϺ@:`t\g(Fof,H.]~UHkDWguɸo؈t') vC=HhŜ`aEۺq]k,UƊ畸T惿'@fEq eVݫ+pE  %_bji}CY梩4!B( (50|5C{LylV 9 V4f5ToZhQ2r 6䅩xH n]`OhˤGhT慵9Z_CjRVձ V|~[ork-J?#Afo+\9 b .%KӅ$&- tDh%=껮B٬ rW@]( ܻ,X}{#%$Sh5'~j Y{/@!7c1&,w#"p T!Sb5J fyahvlK:>}ps~/뎕  9\Ix8~6.jɑ1ڽO bxUTI͖>39IpūOcR1l6o:>K|"#0.|/z#Q޸jMW3b I>Np|@3Bv;k\KڀewSX FH{g$ѷ#(7|R|2> &74CgU6S31 uBn62x\7zgZekc˅ 1s >TbL( < }>0znp$ʭ뜼=k0q׭GYߡ_ʉH&iuWh,7?HK>+I x,RezC "*uU #4(N#D ͩ$3gHtK j̮{Q$:?[ S\s=PDm<O2]tƢxw]q}>£/;0UbJ`@^.G=h:upF8&Zu{cEohkI6ZVjUXʰ2C]R '0W|!* 񭽼S +ĎؗQ g9W3V/'2JlƆwvЩbazR7P"S۴̅҇4 S)&q)Sx_C#5u=80 jydXQ"Svew<{'4/$<꘷D+6*y\2A$c0ێ3?mjv'%_k(5=),CE |&$nqa)u.E殺8$P9eYExJyuMub=!8 {Y.{&zNiU />ݝ]W1fZ`)Fk"\ ɛֺ(vy6;LЗ!  ؚt p )В=C_!l#rpJ;Ǔ9vD(B$U0K)Weѹq+kh,Pl‚ٰwQ3ɽ,Zk?ܗ)Ϯӫm!2n2L*XGB_D1 \$  TJmm>ֽr4VdѹUQ26&\;EYdJD}KA ]C^.v"y%pJsvM? SQ㞝4`O>⿕ٔ,NTwȹ|HDvH )b)ʡn|^`nÜ®Lezq|,Y?%(5]>Yd.4Df^2< o]4.z<"a  yp}Ԝ3Ƚ\]WFc8Ibg=L8o R3``R3Oh+VqEjSmƶ;ҵ[iF d8Ꙁ /';]LnKJ(?Lȇ^&n睎<6Ay#F{nymt&Kܷgmy>O]}UJִ4tGuez +?JT"kr5bI}ᐯlᎳw8'=C4+*Udd.' *\cCo(hMa"Z Ꜣؒ5"YXP քCvP)`hcu%㇙8;F&^\@DN;lpK-7H? sq\[*ϣ.jjR`hȿ9F2M//@xjK~@;W\)72}d` HeosWD}?B7= ?$+0078ARS}-Pf"OHPEhYFe3llE{YMR|?]sl%[Jͮ`jeoچ#Qx 8wo#y6{< ~;1fс%N|,H(n͹ (X+"@lt<J7 0NqRrVA*Հ#N_4n"2}|HP*bC`eod+m,ǙGftltr{>kPSK\`3V%f4`GGŔh@KOόP ' iu/ܽ)ZVS0!k C+4;{5my54=vЬ=HsK2:9dq׏oaFa<5G\nB&?  szDEFiIGM?1ұȽףN`䓮 -!0Tvv^bpĠp1PkC6cMscvn@Dž33/ؼm"]b]TjZr3tKQj:i ｛R#;W*QCM+ulƥM\Жjヺ`X|(1nxVG tk4a/E`MQ@Hq5fmAUϢʹH-_c6 |o *bWڐkC֘ OvrDAӼ O!.!y ´g9F ^ <yafUR} O'.w@ *ۨE9'rAY CyK#ߤ7CQ!($Ǽ&/c##sv5j6ݒ|p u?< Xe۶^C2I Hf}/fz@y<_LNϐlT_ n$Ǝh|c@~TѯUl6J,K3C9s$Ϥlwȅ3$TSu,*/4ez$ZPa9L[czz`GoڜBWrpNA q7gCi9::֤.>v%;95:o, J)bz1F^&(: Cml:J=rsOg ՝p!v. FF]^ڟmf}@wxJc3e|r:_}tHW]EtA;Ӽ'f>amнJl~81y/ UM;<'D[P+Vm=q배HḂj]x(R?rkOtE9| L'5w4D`;DAMkYhL2ix ś6sYEFrk*|cԼ67Esg1iFg}C oY,I){{s1QSO˝icЄ*KcOkEf(1 nc$3+摥V_퉊?b#ӟzMJCH'rU!Z+*č9]FfKc5ѹ>WDNYWS[,[% *C#zf Wߜ7g'՞F*D3٪xM3ၶ#-)4N-3Zɣr;G_F-f.4m̓#btWTN75"9ќpt6, 8Dh=oz'. l=Qy'_<6W ŏ oJ`or;i f[ύ<,P]bel$l;|9٭nR^oqQLq?7V|$ QDN7yTfE"%PYUggv>S[侪ouBcmS&bڍUJCv%xLĝڋ_&*w!hK$9>J˃kX~y$ #[Oc8tE8AcuU*|о" kBB{k=qe)Uv,Je(XgK>)R6;7pČp{y{49Kcb*yķ& HPC ze\k73|s{'I m*Ӗ!N,>,AZ&i$ P@ \nvػ9׿z q--vo%1'Fvl+( JX sP|0=] կBdG#O]'8ϥ@L4Q 6ɘA{A q !=i6bRȻ+")QH8xehL"7%*egfe۹2*ťh7'Uodqa 8au$5pmvYz歈#$LrOȼJV505a#1^*k;C\5פ9=qF<8Ib*3h_eٹr(~[$2phl2oOgaExc}C8 w*oŝqŐ`dtLJ~FG)1q]гwfhsm_-V('V#QW`\C6 φQjC eZ5 /Th%n W~+8':4kz } Qk~~Z 9"|{Ew9>_/('Yտz{<؊.^u o,S ɻ5}aBUEGxxg`znXh€Q] A=%W clr~% cI_vcuhiA,DbpZezݦ|Uk4CnMjw!kQ5U7fY -V+=+ aepW,AFB o &RncbrfʃI;E-J*BĠ `Aʱ&-7|*ɽ$ܪtiHf%gjh"p߾xqQ5,ABm|(L0yr:C.yb5!Q53Q)$́aj}yZ(Nq@l vGZXvjF%֖WE6̢Ћ54#7+*AyLIZ'-Y ~IV^̪0Mrω$}* >3멈 D/+3Wc(hC'eѻm8hD {vrJ/XN+VPe5cIq9o+3[MU!4Z?A:.D)mM֩mm0<#Eo{ST òֺԬHi (2"!Ԉn:e<-d42o6!8NSpKhZ>t|7IsmR4DS e5|/:qhD {nz#Fc’;,.w:H"&[vh`̛|3*Hc 8vz^wӛчDջ>vy)zFj%6V6ZYgƽR͚X< 6 Utyc\ʪ\gd\I?!ŀMec}Go$"!=b+]c!<4- 6cIMkɰ&aEkU'^w-zss#-xXw!X3>3?nOe.y7s5]O|&>YÊ'F׳t+:v}+j\5Tf.TU:~$*]q1]ry%v3vš"d5hXj:oEbG$wlfj2m(n' BK3eNE5[*Bx?m(=F^}T]Ծ!͋CRcxZ,Ȕn Ð< ϐ!8X<+҅<hZ V(.w}&ҿokA;I^ggÐOjcKjQ& &W9Ⱥ]t;~*VJtQSjljp &6,bGmmw&YUC(DFG)fSOuzٿ@y)y֓LVto+T`mE,6[׎MF Jĭ>JKSR~<)\J3>ֿ$]5m}b`.V:-$${ KU{̝EnDۭ< 2eҘyZQ@H]m8~Ư9NT~!kUy zHL'Ii2h[/vH=i+(Z8*k@ pwڋò?EqFnM[%pyHXR1XZە=sTSCȺj``њz[0NkcsMZ>`*¶Ãv`Kgŧ8,͓zWFyKo9(3-+e]2UQnn٥X7La׆|9ff*滽x CDϒHCܪZn|OZs/+NV=[Xr2"afP"g@i6xgW75L,jJC>g[} QΦ!ڕ`@1^9?ognKyFݐt4[g]P&< RAUlu[E5ݚ1LN\{Q??J Y'+y ŭԍgӪLl0gȭML".OU3}j6bmM67H(qԵ /9Aqg,b q~%Cڣ q{yh0XmݩXr@uJZE+Ob~^KK&$:os!Rثlpe5>n(vZ˭[{EtYhy-(+cg5&(8R&/ZQA9QL44l0@OӀl ψFZDl¨#~}`1BKkxbDy߆*^~@/w~y,9! 'k0KNȐbDA%ИI"p8C;P/i*,q٦g$%n|!X- zXom=ZƯ)M>b+ zz\Kp~~) 2~tP:S^{,Oԥ(*dGǕD.?NJK%bBNKf=hɅ#M-Җ)z‡GTиZhJUS\͐eC3x՛,݇dtdM04rTeH4nkg u.+vMUEt"b)Oչ8`&ɺOJ'g(0T>hzɊbNPE_.a1;F Smx,t]R>1`9 I2uqb1F{{dqk|)F~iv1kZ ߏqgy*y^MdY y7vyjSY:w<pY;9 @ Hjn_i; V_2,٧8umPK7Uc{5:8eHózF@ = :8Cw=DR@hpFj^UR!Nb I<:ߏ?& cuJk!2[fkeF0aL>h%B?ݴ"W:=t1'2$9U 8ceX)F@0VOX@WP;GʤEMh67ߕxۑ1F{&ZY}|ڀRm(Z64$̄=NH3E]$Bmti-nl#1IMa]qK2=>za5 tٚkm4+e/? ] mNh;?o{A)=(]FoNG(UCdvfSܵszK;: + JAPwڒ"/WVyOE$R!nvGW~ݍs+d 6=?ݖ-z #ta901#}V8*"*+q>A(% r#uHMja%KAwWXb)WB=|2|.R 9!Ƣ eYgoi uo2/NDs9*CB#4ãC\S^b*j>G ) TsjO h͏r\nƔ;-S(Bd/*Ӳz[ԉG3K,9dZ'EhY\5*vg3q Ql'4Dx085}{gn rP=rN*`Jz 9 qrC|8b)c :(¯WЫ&4,ݲ]*+z jO5i@Y]kVrr=ʠ}*8D~ iqRg4f Um'g-x(y*CRAMJxT#XyHpEb Wrj.B=J϶mong%/O2)U(TZVGx{e/b1H:1RXI친csR50Bc G  1㦔4H.t؉?uf+~E$eudLZ^y4U/c) ';4h9&Y\&ZUB ޸xU$IA,ԺG8q&۞z-B:Q  #`=u!lrwKp Xkǰgc7+疫[-UXau(NխBd'͗UHn .L"=`ĺ'Fg/(?#Enlj I(QZ6"6&loߞg7SRm9)?b'g±Ͳ3q|6wcJo8&QCuTP.)9)߿̳D8 gŪ4k{L5nŸfVl0g<BjF9f='C{T+uƇjK$9j3\ Aw aI8%lNj"꼷$`c'کU<ǵu| XSBl_k᧙8]q?B>#ukŕ"t]^!,ہVu so o*nH[.]Ér#M4__5zMiY@ ={ Rҫ{[ZP3{;|z&3G-P@ؕoSl[ |@Ѩ yhXKη yD{vB%W '| ]*{/kBPwg!\wXKtחj=~+5r7[N44(_Pp݈"G̓S9 :ŽWoH-3!Jr z͍`OmO Ah|)ۉ'pIO[*FHw*Hꐋl ɒ)WUC + 2ܻ<|{&Ïld>Fcts]QM M"FRX1rV7wo^`W;О:߉rgk]79$O!) ^s >_ ( #`x,DZJ~gW"gԬn ;X ͤUӎCR#H5nZ'_ N;H[x HgO! td{CxA˷jԧ2_RfmɵǾ.dyb_,&=rjW Nb ^L "O^ ~F2C`o %YLHҹO~9c m co@g@S) oˊ n0ouܻuiڧpGv. I11>߆ `8Cf}Pb9ԷDN(`8-T@rL1(I0n<XݏxŨy G%DKluSq0QCg1+(/t5/܇ ~VۺVc~6hrf@wm (~!ORI>lHĘjX"1?P3nG 3՛&t.ˁ,#o½7{5 36 /zVlIFG1G㱃G\+6*h%).AI1JmϞNҥ/Soq<w२*ZxM=o:|8щgGε0֥D3*,V-a{&fD5Oc=2 SF*8bbƠ7:nіʗ:1;feQH2O$ἓ8>j@đA \Ѽ6@&l@^8h{s,z]^hDl("~'{VE`C~粜e}g9CұQЭ?:b97v:wiɗ3t}wۜ6T}@et~^m0zX8&~}?Vk{P}[+H&*s w?\ Y'$k(F{F5U |%7fcr hϕJ$HLN/$8Hl+Rc4 }]+jZ@2jV>h|P%HGv =0hg62aG&J _CQ(ļM"V:Й_U&%$xPƴMw8`f0}l7?.DŇpzj#2@xGM(GpʴG,4ez=͛o6& :iUUٗ,▜YlAo-%fF:u\38>9vHYTMifՍ z LUk3-޽CcHxT@9)F@o|uf;;Os˹(Z$jýr^AjcC hoM];߈C2u&S02P,iP*Fwh elth|%?z@C I*P90ÜvPI iKӢG!>Ԫ_237(%*št?utsgIUJ &ua*Z'}ZX`B/F@ -F?k,q'j}c쇴B>WMV݅^V H#gp tX0]ΡE7V 3h&r Q75]Yg70+ '=mrR=[[~+ٯ3,}RQ(*UeկgC;tChԼ0xn,ءDQzNNđsUq?oyj1e잛ngCOhP`sv]l|G$Xk88hշc껂e3ީ-}dxO0^8D I_TkKSp;#1h^[el(zrt'ȉ*<ǭZF4׾ă!!mz d3K $d^Vbژ{9U'5}ˤgN2Wm|95}Tڸm+JnPRP#ΐRCR"ԩ)C4ȄV22ܠ"KWAaX'5Ghz!|EA<1$&nwt~'˧)'R[@uN3!#VP~-caeq.]ggdḨŗ Obt%AOe[z,:>3jLyLn:NKYq&nn0y#݋61> ;)GX%ypa6.!$#ݙ+9N|&bxyg̦Jɩ4|GB%IM2P;Hr櫈(Q(Pi6C֛U)Y8")1DT8 #JõFU?vA)i3.e,:\&jE"%ۆ)W%#p'{Ҋ!{bxxݐܔSJRώેMsԩҷ4c3 2Nbw;xBd8wk$nF=z{w9bqVv%Pn;An}ɉcgʮ޵B j2 )}NfZ_G/uxB4~(h(g5~=fv]kɎJ<7{[$Ri!s`ΪI?d>>̦DM{3ر(P&5[nbZu`%8Xgi0#Hzu].oLZdOGjyZLd<~nwLJԉ#PPhZa*SoQc&chʾEb1/u/ x{]4iE&A@9 *Oh恎/%܂l؄1("mq^= qbu$}٥ts Īهڃ)L=[ '4V̹A-Ua$2Uܲ:"1-/u)GoQO|8esw346Y5:gXGz&SQOal\ڳh0Od ojMCqA!؋_@Hd';t̹°%n&k֙>׆iin!O⛘ʖbXWq~%ՙf5}軟a9'F:w!4y0 QmZ"?xwpWgFg0]?EW8d $\X+II쨒e͵ৡ"8a9'[# _I0 >nƱJ6OU n!βA谔Odb1>>Wt3˖:펲eC5p:Ww"6Iĝ@.NmN{`RΑji.cWW#\:5PRl4x%w+ڏ5{-e3wYBdtd Q6?2/ptӑ*78ōb*C҉z/L#Sיf#U݈" @>0W*BػE )đIH1"McrXaчjsT8_^0AIOst&nEʌIpvlU HܭH)fQ)14u^ i- Z-ejd"}ӀfnVN,Tt8@ƓN ' & _9\Ւ|2eڃϩ&+y/6pR̎ͺ*8rd`&ElO޳Ar{Z!@i=6a e<A3vLPKPVT 3AU]鐁潢KEuE\;^gzf5 gp04 c5ZG\[y8o0_^t٫C&%--!4?SkqߗԥhUٮj@NDT0zO1ݵ̥[*PA;E݅5Id8ȵ*:nX Y&PL#^US!HφcޮniuN)YWF_%QǞ2SGǷ$*hd,gIDIfH`LWΣ)'L}\4XzC] ? !HnNumh#_& uϴZ_|6FDsĄSL0F}22G|ZW(8vpNi;5T=Kb{q4fTi"DI !^k\,"0*Eͷm.V]c[3DT'&Vۓ>6]˂ KbAHGne3%˨vHwS]2id fڤ{s;.lIb_^*A0v|)lkO?NaĹ! ҢwFFda1!.rQ`~VnղFg& g!7\^,xi!ܿTArO𛿷Cҷ%i&ȭ-ivo],ZRbz̐ye;XV)X3}qJ٠x)Km_NqtBHDRU7qYh.# acGd!Pgl`Ov%2pEHGX*{A9ƜL4`c U ]](G,?SS#fHc*d3<*P.X_Mv-4K'UfOf.0g|tpK`瘆N7֏rG+.L]mwDo.fcjwk4V9P'2 Koh6Q;mE?' e"x*ܐu?8X:7{*xOM@ ےB3X!GFP>]sXP[^z}-;L{ke8?+»04haK4p[pa5*D\L̪TJ,,< "ua~hi#G#df~8 Ug_cϷPd6Dسp]#V:Ow\+Zh R 3 ;.b#-QmwJO4GDa` ./f(=6pR~ID>dqk27lMȹSQ"R݇KMu[Z_XA $]Xj\I"P[%{>`>DmC#kꞐJǥE?я6EӛùFG?#o,v _=192ˌ ?e.vΒi-Q+k }&8Z#;{_S}p}\TZʸ)hXgg}"7)HQ/\iǓd%T"Fi?Tχ#a͇~ o"'GUYfVO?cTk+nF4H:;?匒yQ#=$kėʔE钤7Ri56|^탥v" ޘTWwCx)e7[3 ݞyTd2c38< @)pE&&`SUTį@@nB]KR'wk',eJȊ`ZUJ&?ع)(1QW !ӭ\%`*+g{$ӽmP/y.K#L-3.rk?G7^pң'K0 Ix:F c$opjB/IvBdb],1d7=9K^K|cS$ ߄$T vэh^)yAHM:ߍNQKf5|dq|`RqeŒ"r:߮dA:M v/LU!=ȥm:.ؗF2-9&՜Si#2\VBQqTLS@F5mHnLZ=8v*>JH$4gϪ""OR&{a-s_4`a`"\{J |p,J 9uQjg@+ 1^G Y$`̼cc n\L ɚȫNf~^ӊ!Ȕ(fJJ( F_hWno8Ts:.s\.v424.5'vb32˘7T:&4Y+)t{K,~ehRgLAׇҟEͣXɪoNXTpbi+УS璹gBdh?tNqۅfmg_Y n>ɤՋ DcDJxd}֯)K=O TMz"nlju~1[X)I:ԝv EDƆ\a:b^2Uˤk遒%he-^MgzH2{@\P҃2SnS_x pNƹ@^ݥ/q]'FױXO`/o i4Skrʚ \2)B@3&} *ENgh ᤻ "prAD2s47{bnOF+{8x`k⴪w.NGPjs0F2C&fzYDB"L[N4kUܜ@p^_w#|Q/?D4iDLI蹟DSm(?-1g8'S pI2yw>*<2]S#]pXe}OKMh}6=,7K0~Z ]f/j}vy5 L?&cuPCACyAĦ+Sf`k ^@IXǷ,0F5ۇm\[yfVڠ3wKX_95"})Vť\jHRkSqEz0˽ET$-.Fɭ[d/x@k;}/NiOˆP Y|*k0򶵊pcwr' /Ӏ;2E\aw,(q='z PyX$e5dDb%]ݍu.; 5'sew{HPK0bmXDw s%=`aA[,ig @sCkEhCwI)IP<BȕvՈi.fy@nMޫWLhQ] UrfzJTh*[5H}%Ķtю𛃓,YŶxM{I`!c{Fp"dc3-KZt74Vs_7@9k& j2pPb# yeY DE|.;ddO*|/[[z١rLg HS3Sz!: (X,7'|$`OJ!=f!X}ܞW|Ųq2߾e N eUWuI:\ a.2cE %' P|HE"x( 8\@}_wn)}F;=zn6Ŏx y~]/.=g~|~|Ƽ{U[K9tS:9Mg@e @xJ7{t3U˩p广Vp)yB W @n8 \dw[4}bsHs_ngkG) lJمh-i$< ȜC+mY>i#}d$' t׿Yy:kؿx$2.P=yCHwKh.] ! TA(v Es;=i mo)9SoAl}'r]2%aF%(~4Ι>=LEo]]]RޱeWFbpVuN" | ~βioI-pṑy;#AiuNG+oɎp۫̂ ol֔CWXX,BeǷ٪I=v]m3LЊ9P | EK'࢑v[p=N>}I4 k$D+0VeՖzIgfʼzܟ]F 91@7(>g($hU7 aWK@$O]I kr78jzZ ?.֋_3&'%[h'<?3F 7vӢt͹rExIֆx~A۹A8qiR X0^yg'YhM`72< ^<&ژ < B1̕/֔ZG{B^8/'ر+4{_ԺT̸( 2ٱ wRUdPHooX*Qzpf^x,@:9(Xt&8ڔ1Pq| (p =b꣱`⑸&! M#`nͷDGW-/,ekY1p)2F"SӐpά;/ pOWv?C_=aee2bȊ8{ LJ??5WzKwmYCmV:CU_9 dC  _3[eK;a cO[/zq-dy"Z2k67YX'3}/:.hUL٩7 ߗgM謊{C`й>ZKIZy;tgn&2&`b]A 66 4Ea^?W g悚J_WĜqnfb,`U$j_2] k>bطɐgK `7pa >iHJ\^)Ƌ'VB`O^C*F4ݭ4W`ͨ <=ԧpCS6iT}T?` #]9p9Bz~@(I(:9zgC RDč͐rfSKdbA`i\i/ۖe Θf)=222BB7 ~ֻD5'=d'm0xШbpRZCd2h^֗Ax 4Xy猯gw)6̬'}ӶZ}׳)ZܷtUPa: "(LA3oG-&4Fo ܋K'UH$?6v.V`bIʤ.82n.TyO΍1_ -Njeqb!5GЌyyA##߱<bL8p?I;ٹul8=grk|ZXlunV*oo@d_ ,༓;u}? }1a"%NU̱EuG@(tX1ʧr޲n  mXu#EMp7Կ6_͠% g.0 j]#Z&H2%{b#m<}j4_d(uU#udq@] AFGTv@` ) ?!󱈄ICeE=TZCe*ٔ.+lI’ki+RDnu.VJv3QœO'A/1>vG vHabQsע6O%|2-gݧ2MD@D(`ѝ6MRp:ܢ`ONe0C,*RcU J :\$Tlc#K8h"]kADS`|iKw̹rʿj:Gq qQGv9al97.V!ǚtATuS H`g9+pD/ѭaRm 4Ê<͓&pnOضr1.e\1DTl17j+cv˄-hKR*]=c9#"Yok!+%s&1VĎ2$xLĵDT%ҁp]A GO4uAMc:@JHO{ 0zs'xGJ0 TlЈ?$=!KlJ ܿG̞[ 4[HH~HM{$R{$DR׊;ޭqb&>i WquW6٠fHԑ[eỶݨ1~[oX 8-L WsR.)ãeB<8o= ڿHaMn rh:JҨyϡ0 c!2hyrO39tPM9j՞dO+JkDUkRd)UUrw?KXZ}Qi@P(8|TX'AT}!+=%o5Ri&pGۉ Vb0\Tp?#` ?>xVZ ʦ3t/T*2Q%6@a 7k#`n{:_A&!dr-2Z2,nP0 'g~[W*dkpa$$^sub֏bm缼H~,9aK!4:gI|I⏈_,NaZc2erPLE%>d f^"aVm]honF*W간 FQLBrW6!-Q/nB9tR$;(>M ;<6.63m7iN8<I6e842x*&\SI@o1ִ,K޵gƏ4fԏ>hs{C~R:rHF<s2Ȃ 7zgUøAo&}؊Y}KX 3PMO>V8J^vI fQfm0Θ;wa}n%MEL=,'!C25H-, "^}Eg}5.ڳʜ0@Lddo`Zfbq>C*n'н6LJ9'הcJ-gH <\ Q۩ʑt`-h/!B VdP9tX9@g R >V/KvG/#-9J24e[%QZ\)N:K֭2D|E'1tB#W<y{@k:zzNԘi@ Şt0-j ,M~ҾSψj07Ufj_:, I6_ZVrk )?*/$Zq|ZJ)z'ٺM^VR3(։$!mg󼪸W? ^ %k0e , 1mwM=)cn?J UMF r4nG;'tZ@ = ?E[~ FlԐ>?"f6w#y[IAS²O a{Yikk԰IJTa -D@Άjr 1Mݓn4f5 H.XLnI_b¾@5Kt%.3Ihy$OA,ɕ]'}$/AtgT@,\,_.s]xQFH}34\p/v!MM>θ*iR{x:1QDC?MnƇ}p,OWU}| (OI.MEf5|eTnAcE0,nn)=ۇ`2yM<x]rK- H>L8g?w@,kY}Rݪ E7DZ(`Y#Y-:p8~Feq焢gר,ڣ'JEL]M~i\1V>l:HF/4^62ɞzF[YL0dt7;@cR8C /bc & ʀߋ?{bEU|:^AcV1=Ū Ɂi!{1 |S3DNCl-ް-D΁Lp@aGlQi^RW) cF}XJ;><=ח;(o_-l z-Xh1.+כAt=U؊& d5f=9thB:UaU {K. u&~b[M)r>v&iJJ+~961CP9_!6TDOl!ypg]U;2Wy[eIk0ПGh\ri1':}x};JQ YG.avT@0 \TK:ޤ@DEZ)R[LriݮDmڔ9MZv%&+YQ('mD}]@^D=OcCE({Lj"%b/8L{a50I9|fd4Ev"ocTtBIB́.Ipk1؊ }="ysc\?a՚'?3d,٨1 QsʵheU`6,%8s5#Ǘ$-÷{$F&x Nm:u9ӐF(cm3$+PQH\_.?\![ Ηpkj Xǎ֠zUCoﲚͨR1).54$W, ! A7a>f t8Ja y aWTP<<TQg\fk~9G%L-U}k>}TE?Ij]4co G?SFJs#w([EqC0 ڂ0Cng0aD|~^:)mx[(QNB ^LbebqMsLR)XAt>q\NHYo)(ix 6CEgt5BjçQ,(X9 9?JA_E &^r'Q'GYѬ.#Dޅvy,*CI/k^AKтaFKFW^1 @[T#It4ڲЩ-qDۚ {`O6͗ vme(/{tݺT *Z*,oEZ)=7m؎+m 6B}tBYOO_,kIY3D"23Lvm$=բΘQN' ]*ZQ+,)ENÆh2a\7g6NYOBP ð6+Zg9aByie}g"gP%%5灜*W&y& 澚EqϔQdңnBLoK;sNY=@IE[a `D# |z=AB2 @q\[Q3b^siPTq;fۢݴ|ʈaXL_?\QkeC%*̿ X3 wi aMÁb;Z3s@M-rX#()J7O:ħq(D̄R(BΝ ;PU!˿0zӴlfW4rDߡqZ'.+@Bg.Gd\Lk 'Gս@Dcp]щg2X 4jO LC}$tXE˗~Dș }Few[O=3q!4Mi(mpAY0]\CWV3FBIme\IԹNϺbV<LHk(-oL怄 G J_ Lmg"h w[ ԊE^<ߚwDP80n %QcVBbXpOpϡ@Oⱞ"j*LS\0SѱۙFaSBxADC57S4t0KgQpDdb>dPӑ; S#jxӬ>'[ۆK9<>[o\↳с!G,s? L͏=k*C|5 Ys2u /JxjcuUZ?HWȼ9F;*]?Gkh+]O gjYRiD=.jMeZA֎ƶAK!Ht/OYؐ XcJO+H:X?ZIaWB1֒]!mD{h~NewvӾA^M Hd88F{,L_UST)|GmlJ+m^5VGd 6IoU@ꓞ>G۽DQ7V>3OeBuᲙ6J'"]7^@ ty풾8TFvG _4EYCnl3G(26izRiY4$3%w F>$VqO¦! DتbCL@AV|&;|x8ƍ@k=lOcH*x4Z9 &{wW//Tey),QGFtD)0=r6'1~W |Oij3@& l=;.ESIJRablOg>A*?wn%+ئt$KINdfS\qjF#2a+}Du l`Ȝ]7|qg֎i=Ѩ~ya{ޚ=ޫspa8uUg]AD>lٛ%FYG5iC_4#&9TE뽻x[ypcjC%za7b74h_iyOr6x8 E#9vhiq+m =]8\%9^J+;f'k T/W3vg=(yqTL(N85^7yυeJֈH)H N˱uZ?vqS|GPX-xp$T4TVȲS(/m8F8KmG`LOWy8jI(LEbm]py]0uzJUxW2x4a-\u]jW;k`G( s\ ҷoL\]DzN3ۉ~o$X l/7 rv"S-ՀJ0n#Rh2!B5mHAMl2ړjc>d8'ߛ~ ޵{,-Y}Z*2עʳ%5jc^-YdԦD6_^-Qq_K' HK$@d8{;@[OtVn͐@+1e-<uTǻ L_ X(h_ t j:tY\Fys{aqkv  vtx΃Ţy<“ q!![{\mfMy~lMqph8qpA@ګI[3k4mg@nC9Ci }uEcfP_;;=Eu%%-IՏONZށ@mzQA# ]^ .HH ⷩA1l|'n6^ɇD iodC66f/]6i֋du:HvbyGD%X ƣĜ% b7 tC"E4j6w`@Z:aoɮgeb{dJo3 3 9}ץ*>6}+f8mm}+AQbrGq-I}X(8 {o) ,ƐOO_1Z CB2dxbu(F;D^MnGO]Qv53F|K6go8B@`Amȑt76<v J,KW -S_DD$!**e@ И! P=_"?IǶomF}Ma%-iN~e?Hv,ݻy;J, 8>: i:~%u BMrL)J(d9TS1Ka0 QOHR;BqLjY-㟺@͹T4jRs9 {``(5.оܵHuT7N+>--Qcihh3 d`.E ;B% Fqs9-׭wrmjTfC5IMNɘo%ny?{ b na…D\y~t UF( E3x _g4]VLt#nbj@&f ݫX ПyVWEa?YA侚%ģ'M͡}n }"gǁq";đ NT ͗ח4O?kMцkse{ l`O9Ogη;+xhι[,|܋W~Rg"LĀZ(=h-ITg{3w604e& fvKZnKlSeSQ.U@^Դ y^gfw7MlסFna?)fTNk.,"Hi.vɽsBTb5מLOFw(Nћu'ϗJAPET ?W hO@"5ǹ4v{ƿ@읍dt\k#@ XpgT/m-^uMyl3Wv=dAS s8~(H(Sw\Si7-FUƦOǒhZwlLf2ݷfb,*q%{ѱ^(2ue&Sbr17_]EJP*?r\bu*X݇T&SQjGUa_ LU1gP&^Dƒ?M(8@sHh Џ4RR`f[0ʠ\s?=>GKrRYonK18;HZf_ih7[+fg1Uz/ J̔ypZ΋K8Rq 3*.1zdmônt]|09 b|́ݖmQ(Rdz}olHfzwZkV^BP(j`Z1|)ugxb . TfݮdtÌ> r¿\7e:j #̏FyT'K{OܧUjuۡw3SÊDd50o)øH',İQxg07eD=X }E\Av. 0oi\0ZyLtZ=(# Az߱^]O sHA/sdU]fC9HPBבRu*!Ý;ߍ*YV]b6^y &.?PSB|pz M{q`"ֹlYU#]I2I) ̱!D`ql*yC.3ݵ\ȧ%0\M}||Ob[n^f_SfHg bK#/D@F E2᧋W5nH,7}>bu-v{lr~;4լp %B<0pAn LjyuDhv e+xCT ߄hԐ0/mqJFO{3ؿA&2d4.&*,U0NuH& l6խR*XzMd)QSn:^:$A;PVG¯!Č:- 8 П\( vG^pgl ^<]×x\ʞ4&pIqpX@aն;G;}=n=B blS\B*ÈڼjWzc? NiOK/Wp?x!mo|hRbn8 ַ$n5 u ߱jl8 9Sǒfw|.+ J3r k%U,yuK<|3w#2HWu{:#(Gk9TgvmB^EnYհtzK F;~K|o4aU5Iٽ^ҁ7қ]g:S?-~X q^=Ȍ^I-t|-Wܽ<6){HH{]RTc!d#|]maKX8WSd)_Y]ﵗ쭶W͗=mogox^!h7NzlUC'|6=O1A2a!Uk*-pB'MJ[ʹkw lZt>c~h$t$ >jHbKd|sewY)ʘH%1}-H/OP,?OTSOWaGA~PslfRψCE`g)2 .epO$e)?ߧ3U+L ea-;|!7^K܍Y0W0|{ W,'0kh06FtE܈iLQZC'Uw3+) 'X}`G̙V›3xRZywrE n"ZaJefN= 14Mnt+>A,,w6A>=6~ŸhyŢC23:):!A4nE˸[\dz@JV\<n0f`8Jw\Lee?Z}oy>'qRe*;4v)8;UA2Хҳwb Cquŧr$84FKb.'#]c ]B$/z~M~%[,v6jڝmo*ՑML6p.A?TY+ZcOS32Bid312}!W0kLuZ!KN>p% r[$[_xJK|FIWX}߶+Gr6+|G<<*P/4(5Tv;eF236mc $v, KFcq&>4DR2=糣. H#))D'ӎDOʲcJ KF$yXP!rK>b[l1$g"hC1SOSGV62 } s *IDwm:rZ4{As}rbe?Bq QwǶMN A{@-SMXdS4ϯ/eRbdpYq^:]"3w_x(@nۙZjT%u5jE|sd+u>Qe*&l>1qkrST}DB_{К0nzDμ$X;CO֯t''FXH:iȔ ;g( Hυ?(8d+p{wIv#G7;?T)(!%*W 8 VO$ϷMOz=Q;,H(&vdˋCJ-$ĞGYao':z>. G& g=+7t(_,ո999˪/Qxޘ gL-Oa9В:EUu x ^' "mF 'V~kRXf7X¹&9V}S:@scy6"8. @F@l8.4.?QX'V3zt{M;"9 "OǟNUq]qW>m?ɚr4bm E;ÏL~%3;㭵rԲl]@T`쮒nVcvLxZF4stm"Or-_QL3;2eZ;]a8,߫@,g|[Rd(MlZTu. yq7KX\@4oeq#$La"3ݍP&IFR`0ֻwUOb;l=9`}܊X":~2D\ko5vJݎ-+@gU`ʍ,r6,C6=&tSiOLD\+10gt !"'#7y~.]D$ủ{G𷻥s0cE2`f!ONq M|A szF $A/yrs<f)ՆlݜA|I |,%lakvcopQGI$@ ;fF# OA 2BfoTp "1eIw%]ޘ׷GjjBjZe ulUGR8a zU:rXMMuG`Rclzo6alဉBRήE[O~Q01tbU,Gh:J*O\V3jī6S(%pU6vM6}S:dgߏR\İH鍭$*[uR&ZPnC@H!=+*r:ӈPR]+Bނro`#%]_0s(LL tu+6% Z*?S Se q7!ֿ1,`5x6KT>MA3uI<,S>2h*D<Bi!t+Iv[Q9?*= TyKHd&:5Wm {@boMRdXhzz<> <|Lg FMJXL<xbNJ$Y@1n) l]LDUY}oJ [fЫ`c<̺7)Qz55q@Hx_U?s?5? *̳c .Go=RvpUXuAE悟(mwYݧ>W,'>:XTwtu>4t&S1?XyhȴŴSgZ٬Nm/΀ng˦L<'C* S&5 Ra;8wUWvG+:gT.Ev±WxTy<݂jc6*Q$C&G^%P5O s{"X(1X!s]ROͦ -rY8} +6y_V!Vg xa]o 4#ƥڃ,}dX|FθS8ZEW&qąHh%H;lҧhs@y\[&NK9/L g\]<Ïp`^'7^͕C|ְx;!@%xiY ZOdZb=Uu_NYr^.p>,[ եV5e xYsy >Kў40E3'LOZpa`L~Uj8ÙE:`O63QJs$q^A|'WQ |Ko|$ =L %d)Z%?Z'|Oz!ʫÃ@jGXQmfq"\:|gQFIf| p,Um)PӴwnd$4@KYRyrF#iIN"'pZE+X{ Fa kNonFzizOu]3Hwm3?˓iL=jɇ(Wouwa1G=  d$Ty _8-Cٿnr` q3K:YYB.p:X ByVhn B Gpr!o&{0}oW97 ?o ŵm]>:=Fyf5LX`D*i*l=Zމ\F?*Y0"7H  ۖ:SJqZnBLK9z %CW#)}h:ݱ-"zW+_>vHnl%?MHwyqJUCH* ZZI%T[K?L_@?:TM6tulzhUh)iH9I(xx@P<>YT0p´@qjyj}|֜ΎudDa'ot,~Vh45Cm*4K8Z23('*_PTtm =Elxzs͕?\ |af ·Gp?Bp(J/2XTfa+|CDr kxI _sgVV6wu{R0N,aᜦيKNh˿Tafm!],9;g?-<tu+fEzd}C@RvsL\3NJ]QcQ$@y+4qk ߢZvp86VeK|0ZĶYoH!PĽ7}%3U^tgH6 r–cn*'/0ALn+|ŐX\/i]FT:usG^곱УU<らWR#!ȯuMk9L"Np-qlV25Q1uHπ`$ILxXpRg1gO6u:G9l1Y-7&/!qHrԚ tN/lN$Ou_ֵ [cDY`tW3KY2Bg_˞R=GPASGߎ#hY͹vr!vix'W ?݈Y1ٌ@TQ7gv9U-i! E'wrwi>[̿grX!)LՌ͖2ڡ[Dl{`\5DJC^ӅhOm|NspqWs8 ,ϻoI LgJaRAm#lޒP=x,gVխxn-~k(Dver]h)=ÒnS^e-Ev!T!аO2jIGW;! G_D9nl""Y)dl_6W}ۿ~6 #g[mh(o@a\֖J`#OJ!58M;fL\'`#sⱐrr# 4lAHgMrJa h㧍bt̩ S<%g)_Wfۏ~Q-C$)O]> `H>.:=oi*;b;;]^ d$y95F<./>o2:Fy++yEw}}$!@c_^>^?m]RX>QZPnw)n&(vf(ő.sU[][ h mj0C`!jɫ[BZhbx$5FdoDNLnogP6a^p}3LsѩWxηN0Dc)$|L[di2g 8o:C֨筤T|57~X%Xv Ub@w1p0zWB6 | к_E)ڱ_G}:ZjzOw!BS xDJxO!ڼHSu@vc遖CCGIR9,1Ȅ3::OQL nH[g i;"]k)EQ8L|! ڈߋ>[qq53GHΝɃFs3* UW]e~\,8ǁжšśl=oEpcȾ E>ǏRio!4[2#+Z$ՐҌb_b8&#"5 NgQyO  C bSfrԽrfx+X8wc :}4wf".Ou߃|]tpA<+O^Ogf'NŰ(chdP)ʅXŏːh:FңbȬba"/4R",!ց7kLӦSDQ`3ނh[F: .BĖ|\Ͷħ:=+*W6~c_rd$Ҧ3IMK'hWDmu`:*6wE*qTB`"'vO!|bȢTJD W'@sru#,n2,>Ӗ躌Wz-`Nv1|p>{]Tra{>*U\͍0a r(g V }$ Rb,NC s{/?<4`J.9qh΁s@N`CF=Xm?(yv}=Ywlsȷ-/<i9s Jɡqi8+x#ג՛+jS&B?KzDݹxûE&HBԎpdžLj$ g^NC 5XcD<ߝ%vl M 0[C#f3O|] KL"„æF*ڢi_遄~s3} =nsL0kTGSkZ}ګB-ظ|utƬ.X]ǹf`=+_}[gôԥ,Ǐ`]v~UXqB#{RWEF*2|O< Fakܤ tR$/f0 - yS##x1Ŭŭ+4#myӵ 'beeޯޖQSJk`7?[]HO1Yώu1T> *??Iq$T.<͏:U`#h-7G)F;k!;8-pA< %TV#Wд!D',=_ D)E0e͈[y% A+0+T#Q0|c؁C| y `}pDbRltt+r9i}I~$U 4fLmh?=XSc'$)/09\|kG(&r mШ>vpS;D$rgT, Xݾ%dXȹ\df4xKx7KwHJ^7Le3bwL+^9*̒zZ~^_M|ѤTDgk1,&9YL78f>q3mE:[Wt 8|QgmiJՁ6–RC귽`;;\ؕI;+'g1/O.)djͽ cʲ'e12ڋN7]K1^k;~ƔՉ8m MT3%#=F9^gX*,Ĺ19QJ؉!&yI@̓FmmtN?FDs@ R;[cؓ1dSzm,">+PzmPHqпFw+fi!S&aE:ȾC+0Vr D; N|h3T3/y =m=e蔧/ǖE!UR))9_yг/"w|RHɣa.y9j 96ifIwMߔev2M ꦣ7~E߇pdSi/r5QedoSԔ5cLl@#M,yIÝP;pJOۼ%9IXK;"ZiOgX+gz_U)'vm"c=&K&i\ex죣_2 XǙpl({=M_[-\D+[;CK 6޼ES0Q!- Ssb Ox׋ ͌撱<4cmn5d2zȷoI*y(&B[kR΢o-W#.z!Douۂ_}1kC}7uZwf.FGsDžTkp`V\otAPAĐnaTT\C@V&,*%krsɠkEL?R4~x&JF0t6aB^{r *WU/} yc՟'$ p#t/5P!2,S\dX:uYCL-T)kMvN8֧;e;\/g+Զk(6Ç< /Ai :~G/Nxr16SN[K[1Ot;/?al. Xϰ f~J6^Rr#9LKjFk{a}YWQqՈg^*OBDl2D9NDE͂c=}M㏈7-oKb̞ Z?2@i?28&)ȟv1f7@RPEH)XZ4cjƠ 1Ďa$A)kNW=xUYxV/FɌF.fvXcS/jb>lՐ)= q?sTa )[围TR&)5q.^*ち9k[86U֡q/xriz+Wqx޼)u~,vߕ$t(RWO ';6,<WH:R\n4T%h۪JzWw%ݩMysp&&z=3,yg+ý:(ATZ7g&N:G20ǛPqF!qT;]¹%z@xtP10J¥y@&pV7tXQa%+[U 4򔩐GO' 2YDX' (=:`.d2\i|ƫPq7Ar?,Ք֑e!ha.R\' #[>Xn!g|0u[Lyi*G_zz7܃ . 7bｇ |& /o FTWRg+7Z/EA/#R#M78ߐg&K!-)r$H!*ԯh,tc ]#h훃t ՞n酀rgJc̹FNIUn=i >1~ra0:(`Ao*<ܿdUb֚q̙0ظ3qɰ\ 1T3|M,zA$5Vf֊ڑw4ŐJl P ,BHikF/ ~Iy6+cz\#“ xղn $ю/dEֹCaRFl|&O.ᚤ.Fw!}k5-AoɚB'q}3m\fqƖ4뚏{hh(3B{?is$f&ee RPĄu棥|/MiGHi\*,b8uVg(Ϋ]Jk$2)B屡k -&hĖGDJX )'SIw6VU<*#]>MGOto+x 0lbͳP-QP)d*T1.%"a( (Pi{GQS'kujR,X fҏǒ)Ա?AȕjfI?E;e8QA"O7'K5~1~,/Q!"JBK2&I Бb5d`6WB֊k ĉJY i8ZfBϛKHD"[}1(I^b;;(5d":џ+`3܃&cV2*u*Z_zB_ҤaAa\ifl$vy6q$*\be(H[RFw6fWq7' AsMꂏmLȟnY}\"b9GJ0#P($L}BR+ yl*Hc@Fk@MɄcSޗә;cw1jة 13 eDR~i]kfw|\/->e@$RpS؊];gӮoLϸMx]n`ng kk-.{U-jNo%g]}ϣ!e ]$@wnӿ, ΙޱJ )O{ Bei_ؚ/gOOT@Ÿ1voF!h剫)f?097d>~\vߩac)D% wlYߨkH|{Ŋs9w*و D \C]kC7Z/3ύG,7J~orWߎ\^۵HJAg!qBHghEwBl= 33ߴfژ٤ 56WgN'pVpOZFtoݏo^76  )pPH :L*(0yt5=8.T41,tbUL> !LvOZ@_uɶ?XꞰni#Q-! tU< dʉhȏ9c#)sS)bmIjbID)"9;C|\ V c# dhbW Bo.¿Ȱ% 5HCL9a^J}\\ gRE6C1\v~ ,QQ3`r2~>k+,RZf1;M0<,A ū>s|H%yxw2, Y 1rAUk)lgV'CEkuOhW~B|)0Uz'͵s$Jͤ;瘏4h7 v{}\dWKXc]ksw ;-gHa x\)Ѷap4Nu|=%1@˽}W1tbPK @b HL5+?>HD5ֿE:{a66EQKhG#C;bI ?Va=tW+.rb q9Y۵:E;3:i} jȡ,$K"$n {LNd 0`b{[ԅtbibK" .v༺~f~$ľxoPJU3 i9~4* e˅u/ـ2_~G+1Ggx)q[}#ObEbUW3=VSo*2#0Б0 V aIŁ H%X!ά 8ۑAyN +AJ1fBMs?o$wnWiQ`$҆ 7}3R {KCU$n ;ó{ I^rUHSM&U -!A d^r7DW~ڽ0亂Zz'zQukyJ~ S)|ڱƝujiO;)&պT>1{_ȭ[vYcVtYZT.]gUB;6OOvvB7=Q\k{dرq7# )m/$q]{FM9B"#aרAz$R24C$6~3ӡlM+fȀ/\r^`òC$53NkgƠHX}E6uY] '4\:}z|(>!ZYmal~Jr#\,[̛Dho.t/sUIh{52j)'!P \^^C}ήJ=9cWG5N?<.M◬׋O<#fKCɉ789o}ykꤤ2۶&=長:y$^ 1΀5ԁ{) >bJ֏G/zDÐS-{~{-_˓=\u14t2 a[?C7bf~oJj63^9)wy+x?<3'[G ɱ _4Z6B1R9_ M-hBEI7,B9N;VZߤbFI|mu۔REgsҴrZx;敐[\ 4@8r\]'M v4X]چF\b|Ȱ%ZЌhBT0ľw,':n;At>lvF5 2?вoX]]0FP+1n*lO0YCdqif6mBfp)g; :Rw72f3z'0̤4>URatKdcD98k*zP1CSByؠwԓ}{;(ي \91ϐ Ҡ&Gym&]kJobLs‚֒y &ee9.mH߅Aɶ*y/ ﯖhA)ztx&ݏhS\]S(WuH} OqH'?Li,9~4?Dnz̭;OTZ$gXy R]:WH۪ݡ%Z_w,!WУT!7H lbUipu ().(+)7B9'> *%1dLi' OuQoit,D0X{pOAFŻXPc_[,;TLa@4Đ`[F~QC||06U+`zMÛl:;g'"Tj3S:`/Tw94(R$QoH#hC8aT]\hgýϏd-T005h :'1I "fUVɸ lU\@y>e! 7G_E]Kä+i:i s`rTXAWZB'E 5Rkn5&x* !u㱽o5JvNyk>d٢gIdJ+ ?n:tR~x5j|\KnttNGf-H14CqCNBz /C(>(gRt" _iL3pvƘHu_Iia3vƕ3BE DPG͘>::xojz7ڽe=¥D9DJu~X߭^dKF$SxX5G'{``NE߸}ESQةsI8y7 SR2+%ei'Ͷ׎#POXqq{6I6M29o` y\xG_ϙH;ۯBU9&b*❶b"M/9Ɂ~=n5}Z>, 0s5 |OR#k7zv{[΢ tUk.{]CӽkQ?S,vFCkݲ(+kQ"meoJ^)%Yt0B!S1h< Y?"KZC+-BW6AQs{Y^ [9m Pvv7sW특)F3T )!?a1Iyag#vl\3[Pӽ2QJ4-iؘSmTZ-'%ÿ]4 i>颦 HN1:H_-BT3/dsQJʹ+ ;X|+lKۈ*MiT{,l='yC$sc?B{0EݹE8ܐ;$|Ǔo[[>#=~M:Ғt>&I #Rݨoe5E])&Y eQ򾯒|aަJj;bܢ'!R^[j;t"S;~s nֳWpz;ܒZC͈>ׯ5g,BHꉾ k;UKR 2;.E.l$=Я#dY1>$rjڢs42wgƫB7;Ц-KuYc >/WSCV/M˯X96"ؽLpp5gy6!l9+ZnPl:>T35^&vzTrqzP-.E^]Xw\+C{hhÔ{YqIc߁ Ef zAVԚr'UǀRr_+Uq\9>w7'b,dd> )/Ne,齢OU]JHG^V=TLJdS\Hi4BШ=Ҟ$vmMnHoc5RʬI`:0jw΅.~#BÒ_^N)idE(JҳV6hq!Pv 8 =;[o̊Ÿ flyj;9NYA5NM P%8m:6PG-B$M~^PJVAg =^[v.Ct\5tbIb>O"F^ Q0|Ө|[B1i}駕J;BNu7b YsL$Y= ;^`$1Y?MqQAF: O&$ћn<5eKjMOʩ:.)3\`m?AV5DŽHPW-騀w״\&}|cSGw:H#+_D6jG(If*4D[[Rt\; n?۷PvV"|b&!_qdhR^ 6.VW$ ZbXҳ;e™} P,89QC~4 @c`!"Vy+O*bؼ|V2T!!-?(щ&&&Zpٜ 1by`<ހ3F~3˻ hǑi8< *16* Tˏ! чj-IuVzXf7Eu˺>@kWZ"SkMP$( Czg2 oQnSF@E R깼>Ail @l%%-Z>8@󍴅mp;]XWAڈns)8oEaEڡX-}8Z*VPگC[HPקaʢݲ"JZ1c,S  d~ՂK4GwSaӕEu.a5x:6ԕ$Yv]K4bjH)j؈j>\|!/z.+eL~@Grmw%|cw'5 %DB8SNZJWxkdu/@ "-\Fn} T azU[0jp3.Ξ$Ƌ "ٿH{@9濴 G Pz8ױDrRB코H,w>i::t%Ie_dPԣ@u3 vIql2s:iV^:zJh"U1G `$w2Fuc95@tӯkYfbP ѳ@wJj*H?&ɳ&p sg/<"̫¦P X H ?L*&Vm>r3D}J©]6\4'XrWDw0VI-@]Tݧo_.A7~uoX)#ú@%E+eGU3&Mȁ>cR]KW HX0Xf]E* ݉$@5a?NmQM'ך4VaCt%PNh"#O!@B}'_JVӭP!W:goܾ/\OGdXs~Oavh߻AvSjЬNlp"/>wfO:4Ff«!+GDaO-^/𿡔JZ^( {Ll0S A9zDMˌ3"cTpVfԝ -w]!$:%3YRC6[3 }~MKT~LS[ކg%F$sIN NJL&j*^ůK!\ Jg4˅3g`A;zJ̗6sldpzP;LЅLZvԧ UpUqB| ԣSa٪[ؑLVVc01`togI|57/w~:&@[ԭil'޲QgEb+|O%>anX OYS1Q kv-MTסm"l?ƈ|pDA!`U>o DF2i`^-AN,{B[BLD^uXx8lAfQ+]v K@S$MftU۫9",KH "]l X,QwG6͖|14芕q$'=#`wSGIꦔHzv˱P4rdO&c 9)O>ƞ (zxs׫k,j;)2(ro|;;&c>4/8+edīkV%y4[āaVUl7 LAuWȏIJ[wyR)Z< L`T Zqf⒔ȐT/?ĵ?賽0;] 4-qtPAy㻉RpVJ\wnjeG0-SƄ+KއM[dt #iT+)"pႨ ~e:96 O[5Ѓ^8hŅ J׏#؈'*"!7́-lﳲ}T3q>%Smb<2G@Tc< !m# QyxsՆ{9nSk C;=e`j|`)T!Ż=؀4`9sbdo+y0MO3T!-.$>_ 8KSi=\`fY!28.*ICN|IPG+f5 ` &4ꊀ0dgdA$&[WAҋ.9Wo+Q /xr?Z9 3G':typI]`5o)7+_"_$ؠU` ;xDn}<}d[_7~p1]02lY8  _& @:C1@S9Kt`M%v%pi~p.SkBk =* lO=L=Z V%>xv2o#lVTYW~?ӞE|&F)>#)\*#U>\6kRb <4P]fߴOWR>:ߘ1Xj7] t t#1zmYZXT"Edpmշn׫ouXzq' " %ӈ)ص9>=UI^մ 9njpWpSkӚX'@W~2L]e@Ϝ .6M19ZrNR1&A>= !FK?tuYř㌰ӣ9=Hp.J4sτ>iz:9o^z# y=hJRt?-mͺO^#rR&K.K?&ٝ>#rSvDYHzֆB'! ޮ^zMg8V;?&u/HՃ`JjLMK}S]DkQF72_b3G*O®3σ Bs2߁[6=) 7zyi&CHqW$ˈDyc,h9&]ZisL%8gD~zJ+[WV'УzDu]S&0[:-xrMɋJKx5kz:\-us`#h"G@N)ợH[Gj;%TQk:|Gs64 Myς ݈m 5bGv0D-:&S1G/ԡlv!š١݆J?%M*#2gJzvlaJv#P]D($mhPG8sUJ:Ɇt Űtxo ÕQ}C# / %lx4 [> ڤ4þVd3@yփ4"`+Xs]=8R( }P<"f="<0&c70rFARVZ -,kMy7AB뾠;OH^lB 8'R<}cDŹ xmvwM-,vΪV݇x!,0%B0:EX˗ |K~1/`3HE* <pкPVeoB{gV#q?,,H.he[w̤EI޸:0ޡ٪Ws䛗!.0|$_Ӻ66]MkkK-y[]R7C v Qӊkιj I(EK-ixtSr:0m(4xX.|o[V)"T ӞzWqG w2v; R;_V'}1K0#oөgvtz'eZ=u*W0>Xq{fGK0`yQ\07(?SуIj-ciqAEj{2ֻ&[Nי&aCwg-Fgj0SɨHz-գ~lI4j[k=ԥ63~w$Z:I6(k]k#  n$h)o9'Wn=o$^wZ"CkGcIY#?p;Jr^L99M*bnxumHP#&G&pdߘ.wL L7U㴑 (;(2 76oڔ8[eqxX7JTۖ(KtT4jUPk+՗)!,֮_UKF4y$~[o\3/~R 63,;~Ò^3˽3DfVe[=n|kFc!JY[ º,q QmQol4Lɨ`e@*)+}R#uphhOSՊv :oδUdωaRZZ!Ke7Qq2Rk :d8#O"*0.>ox"xCȬ{{(4|q㶫S;+յNw;Y9s~I礥K_NqGdCwkziXRTDzM]QbP]$j^` Jʞ6'+:HvJ> ,Lm1qIPxı}~e gau7~& <İ0=m|=nwTݑ=Y Q!EҢSRs]GFpzuo9A˯} Ne3o"kɅOo;4L4t!4ERHwc%51*:\⺆NjpL 'D%flEx;L? K\Mfy-V*ɫ@L/#Y-XM,10_"@GJ.V,yYr&f 9CXc Va al2NKUAsb^!W)gzgPZkdG/,MV0+"p7P,ԘaM<~ =O1ɫ‚*7D|QD}dAnuC4#UBI%cPbw1#?jȑDUcHa ԐSWZf+m%1VhJ8py(uq/hPViSD2.2 =~>6* }2bvb½}3ϒk=S֎FZ⌴X?Rx7z#1}D#p:klրI5̭/gP&%rBwȿ{5ﹴY(a ֘`lkcw#xbF?y<)Wu!GNf i.H>zˎOۖ69 /TЃ{@=Uj]X_ji2{01th)W76/IJ}ORu(sUӪ]{5hS-q^˦ZpyM ;D56Vs'fF׷&ks/"ȭ/&<^zR1rstCV@g.bRTa"?|Cm1)odN/%"'3]Ѷ6ˬ=¬0ɟCtNd@{ާ\ZVnJ-Kb?Uĵ% b s=Y d2m :Y 8M* YAo Z6DpNŔN9k@,͡v-v+51@|*&-4<)Vr %2舶B)fXl֟IL?q[x։ɚl? aA͛VH$oRi ˵OS.1(>hPЄ-2WCŠ6Ur1gvj O2-+aj6ڼbDKNw J.ѭ%^0vWr=&0rmaP}(ǫ7yj9%7^ 7kc=:}`S1f(D~`pi;rȺ );_0sþȉy\&⿼~bѶmg bGJQqȴB5eWښ"K$Xɵ|hU>4Pg۶7ku!Y!Up  x7_ JKp]ҬEے֋Ƣ&˵Z ~gWXmnN ܮ,,U܃#lؼOMV.d̲] ꥳpا7ӥ}_̽,U:'N/ĚǼholP^|te<8`2{/*?unj*O.@>H%u<"(7 M޺Ψ\ٱ+2PgIc*zrsTN''sլuS+v'z*dĮ+Z-Hb5©u 䭼.W!GP0;Q6/]e~ZZBC> oZ1H,f< Gǁ`!O Pgw -jr*_EJxЙ !x%g賺V>S6,Q ~!D`10-3D΢ |=~Dej# >zCjH9"݈k bI־:35VŇJ/>==^f7i2]Bʈtڴh+xJH7?^~ qVyveh} ~zݜhB  mfmr-/Zx s8EwHӼW 0ȪDQI^xFȴ{l- h4hO? j`iz ,4~u4KjJ3gVT=.=W˛ Iٷ=vSM "Fx]$gx2 Fxot􇌚(2WX+&:W1C@yP{nM!Iſȹ#wif.77*?{=?\X4X#&0q+GVb7_x{YZ`ְa%vd!g$?dhl#i)2kV!`1(u*PaˡF7}t.{To7W]~!?<(卲PK 1rj=2sR1e*l`yih^+ 3/vHϩ{M4.-*6tŽ-_nxHy] jXBIN=`}g)yoݑؒl2B)aj {V0E\3*v3 Ϣr MF'<Rlɼ B41ti464mp34қf Kc@D N !aGKR sϮ{)/V [DNΠiRBa wvO7"9XxVֆ'"bq֨_ؾȨ -Cix na8jbb 2ia4/dDptw#yJQ4GcAX8t[PUR: ջe!.˜)jwȰ7@7nnw톤 g/UKr콮"QlOQ-ȮE\1pٱ Q b)[K|sbQ3ݫaS)fHhc*^GĉmX͠OT[n~YWMuTeVÙkSh ʵb]^+BUx-)] mi8<.W0@°FfڭaIy i'IffQ+&_Mͳ*+7 ZNJת ?4ōH}dk W^αذ]<lKfD¶W<2zi(GL)ܿ?O(S=X$Du-$⟁E>~Q|v|£qO^ pJkgg+>Qll}c[!Vq֤Xs7m0(r::7Q-')kWTidlw73>R3< u3v\}*5 W=e.wf{װeM˧4>QռS+u3e yh4YaL:0HxX&4beI*J.*!VkU{hj%ZvřNX\3o& H_kRhԚC XWqJff"U˂{<5-7P%9q}x_F F]GWqGKA`Yݖr\bt>5rBS<4`ў.*腳(C6|0 }O,7e-6ãJ03#}a-b*`0fc94AKo+r Ba!ydfV(4-ld"_ŝΟW`AOMa4[<e*!DAĒ4|[0Ox^|V $-ΐ7,bz󖻐m).`u!65\jB o/Wf\,YI=I) "?֗Mi`{n; _҄Wcø8{w Dޥ56~ċEla8.ރYE\=XMܨ4 S,uC4F`ϡ Sqb론w$H+zH m}zArK,kFߨ+BͿGqӤ缙t]~ ?Q,3݀؎nN%Wvc(z`|^P-j fR魵h!(ܹ 0Pe'V.wj/ z+#KlQzs{Q 7Fb so8{3T@Rdpf.!BA9>% 7;OgY%w1 RHhS:1-whxQGݐ@f1bll Cm{5-|GW܊y]B҆`uך#Ԙ*dmg"T@ͨ^Oڎ/'?K!x39R#=-濢d)K kTfGluھf*zL~J\'^]ӄXfa }%Ai0 sku A0XɗCSs :%_—űs kh; P4&97޷nWǝlA~!W=|?pg\ZdL4#WH+jn i<+Qfɜ<O3cyN|J,yvӓJfdܑXIh~1;2@F{_z]zO"ccR{\޾l8|z6(HTFQ'gcf̪Q[x[ioL$Mv0l:'vߦӸ]I2m+1lqj G%El t w0Tjw}3Yp4& 77J~6u7~8SjOuTdrz#R RC1"82h`?U+F4R0{$Z\%:1]qzq;+be~&+qtb!uV&H$cljT5x2];9n\:YxB#=!]DHE5lbzegQbi,Ey/'[5 Io*%K˪Ɋ<'hI$DbAXMZ&Bj90.ɮ/;LVO4,K)(ɳF4 "=hten`>B* oH1{},͞w>j* ??bM:w8^棒^6~RA|f߶6FCEa/}<Ofl4Cվ|߂ 2<8Uy*=Ve1]f%mP>7&7j2M_tpԥ019ÈM{ HnED~>Wvhɥ{( m/_&vZG:!9 K7o%K=J~T_A~I\cn=6* %;%T2a]x?Gtgn6˲]dv5Lpi zτP+](:,=רlZ0k&TSD({¨0{ELi59O\_r Å&g 2$"8.8c[yԳ#O0z"jb^d&AM%F.un,|dScFwfၥd Qxk&Ҿ8l#^X{x80{wc, ] 4SI|\: Ps,Km e)=0[)ňfhkvNԀE1hT}-^?=LbSn:Fm38T@k/)]?>~uvQ*&8bDe1.RۖiUFVލԑҨkvӫ웛|%6_ A97Sn/&(l2M,2'tyIur+IHQFw!0C[|bwgL"ƉOw*|b -ý/?LA'kl4P7 x}ҁ,MrEvz;ϚGp@7_4T|A" `?ɐE1(d}crJjz'b<B#Qr3?2`K rW]r 9ޯ,ܺ`W AP+cXJ~OPnwykIܤY7B]>} ǽ3Ra[Uapˢ*d{z#/laz.`7n憎H5_oiL!T;1[GeAó>#WVK\Q.r6L!ʆ%fDXˤM4nU蜷vETXZKftmB_WmGs</" |#SHD$8(/15CBҁ$g໖@nPi,F:t4 JzUaUd]fhZ)4z2}Q%AkVݫŹ]Lq`,bcYpkݯ?rX''yNRۚUƓ3@JXm L|З(P)3!`ԙQ+eT>rnطDr  p pX~m{EuꍁI:$y;OȪ.4)aMdT8_ ۅvlޅ &6dpI&)&i֤A'Kr#n;t>l &'sBR/Y_[>](˭5eO/z?6ѳԃS?Lƻ\OCNI]CYTYvؚ6)ʦLseH2 xc6g7 GmbHvO!nf>ZI㹵-Psђޏ-g^^B~9SX+? ϫy^zC2tʓbr*h♾]993'ZC[tengg  i m +ʝ]C٘8?;f dΉ  mVv_O6|4T 0( ,iEyUM]{vD. Uft / r9D\I ^47cu@H_Eنމdd9_CbУ)iGf[c큐 bVY݌H]̛zf@ IO,ESveTQ=_sc=ьW#3g'juQ&Fb:6L"݋3gn%Hi]Y#8ZRog{Ub p$:k%l*$aݹݲ'L,ёw\-M.gcI،@$6kzzr0miォQA;oϮbljY\v{]1n|:2Z}5Ֆ` QޛPIԏngk+DX\3Y|$qǹc WǕJ \& FrM(V-y(t8ؒ wLer-{`LAbt…vQ,[Yx xʂӻ70'rZ5m _*97rsvlL=Z aK⛙`"tAmL|ӲqLx9:76hGcI ۶ &cY^AIDRKnhkkRޑ^ٓ`uᢟ`fRְƀt1/nĝue*>-r\7Rh:3We%s-en iXv==mfnݛV}lUVa[Ua4"X2 H~3fa~:Vm`+}29e?a+=7ZESՍA1O@vIp@E,49~\{6JOwJ@ÏeG #y Ychg:^R?״&ڥfBpE{hd-_ElQ7[>0P2$Ea/h[o?$QKCҸ$]Ow.jT䆧KU O~l.E^Y!Rt5-w3@Wa3Ǭ"X Y2;u0yzrdA!%Ϩ_n.vںexkx4;!ő߹HϤ 0X#KbDV3uI{'.2&|zqa%n'2QGpq|5= L,U?s'R7O <`1FYP>娢|z)vV{d՟ikʌE@Tэ`n%H1̡Ffpn_ O$e-HPB@->.c֎*xN=GB@-SGK`mɣqr vjK!V%e|kdo{Aɞx!^@#>S6"00Zw "M[ށ:I7, -Q%-H k@`@ZZ&ZGفv|ݗ\yia+I/UN8EI x̶ w(v}:5Aó^ 5h̰b5Hx,r> C*wgc/,9*p@rtLmX9ii[N6FBbuYp LzkT(x🔑ޅjFvd \%6^&898ܮ~AטVƒ,[RS5v^2@Eͥsji45l6iN&<2ug@.uF)l'zTv9 Z~P.li} ΜtWgDvBW5HojGo4m(|\0Ƥ_rq4+g"J] H>M[60P@1 XW΍\\/%[6dzW =F`L X~j.o8m?%Nځ(f~rnKIjü xUdMtBq k)?>#WA E* LEleK8$>iV(hUUNoxBH^dJ.fR4H KRIFgQbElSFL`^qFn_q,"pULv/]߶≿R&k|_Ugn +Iz3Y b#s8z&͛r2IbYw3NNyvE[?=q5•d8)g3Ԍɪm[yP/#Jw҈_e㍭.A)RӆH>~pMNJb>Axq(nhe݅+D0NJ,. sfHwys6-do0A4|F5`[VEYDg8t,hPۄL"ֺ=@> VG>h#a)pp#A!?*kcsΐ,( DS4ъMe ?PdѷX 1Tm^lOFȗpҝr͍M1*f;ez#{|jh7*n РAsT$|X Ҝ]ytS<.OV? Ł̑Q̿>)/L, 'Y~(L2l[:ܻbk! s?q.#o4-Eht@2C!Ec"8^[Ʈ/Qpj t!p^CIILzMV&[ő#8ߦ +ܼ sG5EA]MYu !TߓHYx7ȼ񝮰&)ڡ?fmuƀXF)ղqكIsI8XN#u^3(>h PTK 7DbyP4PDtSCq f梵2 {( ̍ewrQv,y :ϐ1<5&' W{۠+} (#f̅ABJ/S3WO낙vgUEo΋nSnWnaeԸS3ZI۹w{B䉆OEtaFqzj|?YBݓ"'kj/j07-kcLA#!TLóÍ#~)! 0E{5aXE RcʦiVp20ԑ}g/0qt?AxHC0>r.bJY}\Q"r+R'12zugp5;zBTa7*ŧrR㯳 XLD󣼞Z/'Ok'}ªU!{ $zˆB R&gw"XTj ۳!'f 04{>X"n 1E٨+Rp#~^Y =&|D7q9b$̅:[^ܟ= 1n~巒 ӕ 15TZ7F١( ۤ=ڌ9޾dެU5l( +2.ȥ0@]/ʋxf>c"gFM0K{M:SR@\ ԡı W;Xt+I1 A*S5aPdL-!Bt.ۓ~.4%xEEŠ&Pr2)4Ze !,8mB-@buU&O'<bxxk+ 9e>] /{JdҪsvSzs:צid'uk4h'(^3̇Ĕ2$b)kdNoIaU'MMʴ+%͠:ч0ԏ="o)f{]+bH}$Q`j~x. /6:3w `2۞9mhg bӽN$~z=#uQk!D5@GzىDz " 0~ug:*q E7ؗHR~i!j%W[฾QfA_oȡ(H/ I1xjߜBH |tW9'!U}DA>S''YUdzƾhM1 7eOiᶟAPsa{쳖| CtR䠜y*5KQ v;"4sPcQ6^$7x1TI+7 s9= ™9*XRr%Q^0&pHۜIos# ɾ'v,،L1 >>|ИxC}Ii Wpj=|@5S$P9pb;,Dܱ< _^XW>'ίA]z e9&Q G8e)VueGޯVj"E\ _wX?QiBP!08"PHemkZ1En5Oc\t/J֣u3cWwkG8!![4_%v"\z0H Y2T?Eo+ /!0F{4G8?7$@8k_ϴ?QHJo6-$cxH~AT(PiC=[e 37v6RVF4 |~R7vKN5 dP7dEK5#L'kGfcj+[|O=.2 &G}Li r">ck5E:Bͳj-o_\uzcHrAp(*zKX"="~kj?{pbؾ K'сC 7Ael @lj jT! yޘQO*-)#,:,ԗҁ Dn07 Hn,/.8TK N̴De>aa2|󼿇[cSV?ќHf# ʃ}sCs~wN)cb_1bmL2J``.2(A%ɿښVs_EPUqf 8Эxgpg?45B1#wH^;d6I uer6v\@Rp`a~fKDOȊ,1A,!Ze^td u` Y9*TP.D}%UXbJE;囮=֐D[: u bPTY ZA4Yɩ1C5SPrL0{&5P_ =UZrě9K8`vBT|%XVtԄ/BZi7jNUv ҖLP0?e  ZurCxńҘ'Z2&=]6Uq-"ɇ3Lֹ>[#E]w4Ur~lOC@>67s6ޓqt+֟k3M3G!wf&UALE5LRЋ"wWTmOpҝ q送#n|L*wk(?ù`Yi W~C{mɢM.9yFZY_I׎|4o#z@z45빪9TٮKF5evqS)HU7/Ks?J@|>v ڞYvaQN^En+֗Jo1F&ٷ/'+:_*w{>Jq{+A B\ס~"&ݰB 6H8zٱ}u@ I#j3@T}ĵˣE>y/$fYE9+ !9Yz}N8Se^7 Q}AGT3 [pKbs{2ׄNJh˧<7( ɉ_BftYhu32;&%醅u`N+ҷЎpqKLotB);&! u2Mgv'%G l*.W9 %+ 8Z;; yJ\-[EU8{&>ϙԧ2h^ܑ=oE~$ r7]"wӖG WzivNgj8ihp}9mGJ>ލtkkIcIH4O0𨸵`6G2J,}bo$RLL 朥pG͘}j]zUSOAU;?-jLnr.D%AQd`0յO_교u"R4$|4gu*ӁwTv@8,'YA\m䛯ӛnmuq&D-x9U[#fJDխSC<4KXQbo 2C7XݩLɂ  )v~w w}%+kp\ѠG. ^nXn4/D Hst(' M(yL94VPuCfdFu@v (|QN8Ʋ}&ԭ&]U툔> 4U X 1aEp &KsWPc1SOaJzf|[_/隨sNmNZBKQṢ5>b0>~Մ<řm!φ|=>,`W7IrGazGbOIkaکmw96Яt㞦HӇzя 0Be"?}i  W`@vNgbRBfuڀM21GlBFr!4ULk.Vlˑophaǫ;o1$\vSX9Y)v ?j8+UY"X]p9袔X5mHB}TQ5H*@t FXcه.C&Cr(iBU`M:Q;!XQA8g q;{(E+^d|jO X$GsAlڨԐpElAd,%꺤"r4 rS,K}( M Z/(tƾ|1ZxL[\eyRylGg:hg{يLLtkX bi+֥+QS骸/셓 _5{v*zj -*@Jr yDyLkl$5x6%[Gjxԥx°4Y=)p\i#aڳ!]R,0Rƍsql侕>a e>Ac!LgBZRlԛ yisj~_̇A * ïM2pme-Ο+c$ qc_E>P%l]9cxwޒn~Ie& A,+np8/Ah?瀙`ZBG=͇1B4nRb>=^3^S) n*e~?l>f ^O]q+99W;ڲ%:F:)mC"(Wq*R()Ɍ8(Uj=oM?Lk*jeÚ 0K r/"0Qt?W s 9RVL%Fb3DgDε"1=կ_)GobB2:K K&!sx*)vcU'y@+?iZIsT?9#y:@L)PeCF #6Ia ~Q)6#XByE +h棬, s}.P{{h[ո¥Xu'M+k_qF YkŹ Q7 {L;{KDxf<n $N/YC>fe+t,xQ:pzj (+-h:Y?O:=$?f#H[7 ũRr3C5Nq/n p6.72M(؀ij jcg*> O)i-ionJxEf2{Y#m&M,x=)saN3*-./}-|DC^3A64֘qқ˧xJ6nV!ZH.NG>/wp%/ťv&uV]>zs,l%5ֽ0R8*F2'R- Ňdo~{%)n{ʹOYz>+X 7,q٢;py|N_P^ 1}tj~tȆ)5`Ƚ!PXPJ^.ˠ>/"7&Mfe= Fi XeZ8bnPS{jQ>ΚxF} ǮYXh^W4W:LoFE7{`z uCX ˜U9P^f;BDߡ2Apc|\FxnM":JPdZ5JrZUW¿B:~5;{_uUaș$V\8bhFޙs4M&mA5ņk#A D6=)5 86ckp @/DK-5:kܨ!L*S( HCBi]#@,b=@U{R܅=UOt]fX48p{[4J%QW%yZz,L뜗sib AR?qA," thhQEdKnK[}y`) #Ty ]b^x/|YȚ,4/q[|| xT2{q8UG?.&Jti;[@.u{8G XI7l#ZoKO QpsF.|֗ _,[LikȌ8PIgW|<D 'ѣr2Z/TEd_Tnb$\|۔zk1wST3/4gnUE%)gN@vʾ$:^ϯ~Yf7Zt27=JYy gSAWdǭj'%u3A2[wHXFAn>7BgGfI#g?ΊAsO2^uU >lסphg"u\3g5g\`ɭ[#9c(a DiPX! C =I/,ȲFk$)?OTA0'_.q%ĖmvSGgRT4tBYl- \1a5[0ƹ[Kحw^e^\Q >ġ4O Hn]mÉa5mt9oN5+"UI 9%_S"LsvKDA?zR# </ʭ &5Y@OQ=N-EL\Yk wWr EQႁ .h@*px0$YߌPV츔#\>_F7D!4 }TSa_9#gJQ.6n3 2/A39sK>51 8R~b}TjĎwW`(fӴ.'++pGI1A+dsw]'֊+}НW'ZQ2Jaw fIf bLԆ:$/WQ `V }/1A; !PA]z|}6A>ϕ!aHc,^gQW;IAUqTjзݸeS͘A*%& $}?GajO$z_h0`6vGiX^%g^j^hrmVpy8\O"t &۱"_nrWK$>"ּ2bYn{0L&wqe7t8K-H@}zoZ*#8Z"l vR,52\l#<'i p Ei!RI\؋'+"$[B0Vi#U%æ2ukW[qFVEK:ܤoD'^vݶ(Ʒ6}--԰؟gI)n/iBr4߃ y}Q:O'PUhI*iXګaDQ[?@s" h 2&2H_. .@k`k~x= wB: G-De X2~,,>ٮ^ 'O_ Dlr y-|+Ү"*yXy?|<ƙ , |`R9tϮn>X?p\As֮ bсV ixy8,2UGRl"4X觪90l-4PC?:vm0|ANzx{D$|U-a<X`=B'5zk _|l&$<~Z@7Ȉroo%1@Nx`:dN#2i`fc`dצ' 2!ԦkgR6@jڣrk}\T rԠfpO(s7"XNd + I\h>BAv+QT:IU&^HƂ#Ԝ]T7`Wҷ+3vò^u&F~ piǛ`94-,&U5!$2jB}t+ӚGN̂-`),]( 4+~V$ШBԗtgAnc+gK*eUX9X*h\F4߯b)#D]H5Ыmbv-}aNk*9n \'j1G=WA;NŇs6dK6+HZ)8M<}`-3_yϟ8Pnc4M$p|LJ 4rS )`ܹ>re}bhy   sۡo4=mZ~`sp#GT"+1y T_ER_8-yPFB-xQX~͡$T.tmكJFbMvDnxLѾؽ_n=8dwa~[R( 5[Np#O),@0OMx%߬-F?SŠjBPNF YBҮJ\9% k\(O\BhNņ-,j.>g-D2}HvVDþcCBa6Gi\BR? Alw%Y~u(݊;ݹ?s GLC=~0V@}8}+<3؝-A^cp:6lSå+#fˀneXLcqW;'#^?,™vR9Bȩ!\ξ,Gw7r>ͦ#1D52 U郙7 d)6gj<¬ 3l_٧VZ |] 4VKͅUZ2hz&~y_D3py~h]N-~6pˣPb?!ÿmEȘw7*CeŏNW4%v-Nώ3G @1ߐJ$L#"fņ-<pRʴQ(#4%7`< TFO !>yDQ>Cl-Bꁷ|ESyz%jCC(0ɶFZ4}`8IOcņ^¤M& <I1,IOI8^+fUn{*?rgO=VC0"¤IKוi+c[d̸r\br;^oYAJ(`8+5b<#gaY3F w<߶كDK{!5Ձ!jGns {eH-sR ?/;]o]L"! +0"ig3T_+?8-thCcFU"X6E/ ﷲ![,vMsLop'A$,qA3aMY }l嘷M!u: ZyڹN_< nN3KŠx1ic;eN\RG^E 6 ^/?1CZmM'NtU~w^=t(3l3'ק6bYZfpۮGȵK[0d0paVIS|$ >A8]}BN*ߟ̭WE(JyF_zLz Q]j?8lTHA &n 6ދ 2 Ѽ2{Zj )ϖ]qWYg9B.כY,i'R4=pVr.$N\E5 cJc?-8Hc(z,!JIuM?'6 :oۋi)G@E״.tZ?L'ȣe`ku =E?y}ѐ|;rSSэ={_Z"zt&uKW9 zS%Ns~k8$-7tyaA[^{7O&̹b]{\@姰raJ".ɑ0Q5Q^m! AEQEJ42z Б6&ЀXb"6=I!3@|Xy)C6d*C; J,8tK{ ϴVY/g}xYBXZܘ7-Ӎx NfvOUPo'3`?"~]wvNƭKZƞрÝ]|u9v]G2E'Ʈ֓?n5J74ËX21!u#/$+m$pZ?W ۸=¾; ߃"Q\%,ƻzǩIUU_PDuZ[}O]_$RL09r{Z: tV;݊$eۢ>w6a1h67jkxSԡmu+vx+ nE("eXXXIk5ݽ t'@Yno(߅4 *`ܽF 6*.F?nkn(aڎ>>`4*e~~,bw˂DM`9@ @p^ɺ J:'e\Bd*wď_գ *U9s` =TBP o.֎R@!6! rYu>z,5>?>@Q5  sjV).9ȘσQQ9WG# fLݒ!ro $zz/3Xz}a_ebcy%_s(۱ >˧T~ lG;޺dк߱|]h#Z 7܁*IO Zvؠ#IΏuldXaTTFmT'hugjCV^ #LAFwaajA*J~ R 98+?fy{3GFAJ5~ی)5 ^cGiG|x8P0ňMtl@{Ӹ+N-XĻ^UFxMbKϓ@p;}O$ 3e@'$B_jl&;HUr~&胞Ԩ&̐a#ƮF[.  :@^oϪP\ o?šLq8??^EaU]- Qʮ͛+SYGŭZJ!0sp ;4a޶;֜ilRRKMOb;E+W9TKf7?@Fl* ю mu㬞cvB<sz#Ah v+Vii?L1 D)?[gzfU52|U%OZdcUU/iaH$ItNB<˙|< ĻXu/&?ƫ#uu'?TG}֨a@MK=碗Brxigm8oOG-߈ +Dr-A'}̅Y?r[~{֣K} |=k Q~[սwdYYWև Go+asBlyGm@a|VnɎE{v kdatS%7ѐXysב|'HCL7o T& +3J TquLdQ 6'@O]Zo%#Mvd]bֵA_$&V"Ri߃PuK*Qqf DK]sS/m#*i,14[p׊~4L1l QY9A>+e'vyIޅ|vr7Z1|(H!7%CM4cb (N}z\I*8{ diJaL{/sdx4קVMgx˄m^l{tP_,DpWH,}AvLCX7 Sf%f ejz:Ldߘ}DcTʌa6*K)6]k&1d1C/ ʛ*1`P/A#VkK?}IRo@+Iq$,& :F1[-v@]^/5hhh3?|bW5~z22޷n镋pOT-aruH>Z8L듀`b|hyINHvamѭF3fEW?5ZIZ/>Ay&zwSctB^{>7_ϩlr%Y}A{sWL>ʎ7X[8v'@U/gRGpŗ$(}I/n6r="t `2bs ]YjGʄ[7OȅۉxIg:M,gC<duFԬ)S'_ ޯ}Ij,QB8e BjGWy7]);x=CQg+8>ޏ|$_3П'C:x:x0aX3ݾ;|&w@C4>eRڥx2k s_|jY)WjЃד:ؕ{Zp{Kk7%k7`=U-#H`x\'vA'CVbY/$֦wSGkO(KU@T_UDd@k3M_W-ixy*9|Ka$uEd#[M,=ȋ N>rI6(F ~ܶSI+a׷s2obm!=EJK ­bhѵwY*2 UirO,:B9&`K-;V-Gk.tW?րH펙stF(f{ktj/l6A 0ڭf,ao*-PIЃšlvBUUDg6od.D靦R}߉:~[և'>"^VWB?y֩,U6]`~5f',T>%8ꥴK[\qp[*"š! nFt(8"Xqio~uD ̓Η$=B%j{Wg!**ޘ4Nw7tr4Di)t:@s C[=fCF=4\`Wn׫n‰(5.VTQ2b^KŰTb]IbJ{RZgAa:Nz6R]R}Ni+FɠB1h #Y= e]j 7I.o(I֡:z !O,T8*t %5b@o19SS6s.Fa:M}x!; op(=NqNS>7GsLU X+{"S0PR:Xs죮l3e͚J6[`Wc}MWp AI;yMAlJ'fQ}3[pЀ 39}.lYM,GaQJ\V| [ͷnztQDҳMTHAe|>bS%z ت(p5}?ĚlN 8_`q:nBPȶ -C[,:O R5% m0,]GX]CRnbq ~,Z)>cT YL_Tw6p+m8jawߩ2`r2bq 6!kbsG*NmQnYxu^9 hx"~#NciXYdjF`T9/ jm쳯^WL.-.x55 S㎝l:I&|᧭qhFvY^L=eO@cG &Z;0w*q!x:$AKҨuyF$WUCHFRc\KB%?l99Łҕ|Χh̏ nh$89")/#I=z{Wɟ\S/ Uslǎm LUڦ3Ե1[k[<XU2lNE69Z5M2H 1y)2|;(RSo9 .dG\~IߡZo. tB*dn?s.XZ2!%yߪ*ԁ+C,7(:#  Qm*&6U4|{s1~Dg|έ1 gB[#m %oy{\W#w kOD;K_X>9ׇVʕYeiD߱0RNQ!f3s>^ĉ̞LTA_⋆4L-dТ+Qo&ԋWX"ݲL+`E><ќ A\=6 u.⼊]bP4mb'[ZX(5܇."i[:#e%US\E&NG U^fK>aИ97;NVQ Ov$G'\ TCze3 )'6Y>iykSL_& -LYƙ{ydIÝbFp g}&[sHZGI)ҨMH 3N &)n;MsO7>\Y)%b WCRǎtYW u *˷,#GRuN^noK5D0\up]n{hnFlVJ}OOl;ug€V@FKlm=p41`KPPk[@aE։LZ7ϔy(J,43CQO069顱-C0e|Zj44:WMWd3'kZg4k[nX-8f˃{yIO~}s %qa: ,tb9#qEK *"ы4!W=~OΡ?&';4t cMẢ;[ZZD9sx`G:#z!oSy`&K|AU*|P{g@9LҞ>,woLV60xg2sӪ!nt,Լ!*`FC>É,PO6ǎtA7x^38uEX˿a{!3gr ]WkT vSڈxOv {(Xg띅y(c[ZksIc?E]')azWp$@ p=G}Ӵ'_f-jcNO?ܴ7佀)4AY(@I&.5 ՛3rG۞nOGpJXJr683g*1 ($MY8hdaԛGb-_& RZҎUI=ORjheYN(Kun60idR#/-\"BF5.^@9Cs`8菣j7 i5y?f#~R 5&oT1GfI7ac4i|-r!ưUB|: '];X+{ 0$wqܖ2tM'{t.ܬ!=#>b'ȡ0i=Ep91l=aVYV]v'wy [G]ME珞7͔͏U1r-Q6N /D[Ù]K /] &@sj;ko dG&zD h#aNE RcGfh`q f'?j(YO mp,=Ǯ3XB pf$Aԫ/^Kumc ·AC wLvkZRJK|bbU#i/ }ӊ9Ӝv0Oe;"aW^5ąhԯEj 8]CcEJUQ 0r\@j':p3Ԙv { Z?u[#@t%k*ƖGᑑxڻT~pW?-|}5ѰM m(t*}*iO\ _g F,4a,ȁ?"S~YxKҏ a,#+0 z/s@d b9Þ8/>cT)+ĭp)&TtwLpp'd%`4v8 20'2z>'VM z\DoFkdcQWt6uCznDo` ݼ΍_7 S/65#c5o^s*ܦL⦩XXbXumNTj}/`a&ջ(lWVlɮl,iW=ҕR^{Fd8B@8sfBG2f<(*̟ Rc\M5]8ʖv0^\i gͥ%2egJQJ$*y:Z/V8sAqЎdI3`XʵEv ]ld iRog|SB́LlM|%A.U^6YAz.)=9&V]mDZch7oJ- &0@AMǫ^oL5v>_A*C_8ӳ(H|e"IsTCS{[yq5O0 a YrF/Qg L ?\͌^% {*~{oyoq45v/5H<N>4cnb[G$Q]G;BT#ś }*f0~_A'HL~>8F%_gIݤhhH1VB"N]q5[gַk6]r;8?k&"wO%[K4sP䀗FQԃN "w:0\ {[7 m#'͠6ݎ;lU-0H%XS@sx+*.u~igV6^#T os*I+8 -gkTep„: &;6 ȞT6d5kAhM+t^^|dmIz`ZfEr50@_  &ʵT뉊togmZo7>`a3.q`>uL$ 2a/#%CUy#(I#Vq)$ta" 40p\| o&nOg3 3%G4{15"<)iVC Y6iOGgгIuΰg.` F0e۹+N]ͰHH@xQ2\$]dz2)뉙 z@2{_YKpQ`I3cseZ[\/xT`6̈8<{F,Q:շ3F^溾CLotxH<o:jDK_ΐd{톆vYG9Xyp+42;.7]xPL4Żn˳s{MwJ\;|;[`I(?lϝ_C5STF?܈ t$e4lyRunI'(KG]"CsPk\vklgV1~ܘJ6 T ~NSV2|q’i2PO8vJPԝ|s%fMoC6?ڲ?].ɢa4U ɊՈArB}%wQpbHo<<sL+BL]"q$uݬɐ!n4`$ۜ]_kvT6Bz-$u?ߋ;,g`q=<_-a$%v!GQO >r%TτM*8W$S'iI>t֬dlT:{ρey;&[.iSj=*_1("JYm`9dUֽT!FۑX;A\a k;BQG|zp:?;#ʶnKCZ(SH_B;⩶u҉Ov9 I"pk:ʋRGlU)_1(W0qM_d @x7ћH(e;Mf L^PNZeH''Go\uoO[ }eO D5kr){3h%HrM}ѱ>4|yFzk&9ϥ+\120M hU`=4˼ᦰ⛰[l+C`mW3SL'/DJx*A~QrlTѸ{He1)8!'o q P޵h 9BVjKs2g焢UɋJ@" Wu?`E=ϷnIlRI ?>Z~C2柳HYwvOsY}I |-ֶWRbINXZ Zoǡ'W'|nO)5n H~<3RN^-n8}Q/?aJ~ؚBfXXn="d <t䮚zP=u:3Yz3kueسrq<HcFŗ,u~|5 ;˷ԏ%2}~Trvϸ&rvM-S."OoxYb6E5wH$;J:{7f/cq14/c0a];l-_}쳏 8ZKuY3[>`nh!mcۿvcTN+@7FIvԵq<^Jڴg;#q3e)m۰[GK|Pu\r3Oxeg}0jTP|U JdJt.f݈(AW y%'z#JLhe7; V n+*(+_t=ys +%Å]~~KTzNa%'30? K!;`m*XL٩k6Djp|(P` vA/^:LJ>JMT,\E6S>&Un2C.K4q+ACx4fW$$rq* hW DZ[QO9q\j 861mȤ /d<%W4#a+WA0^/LOm`X3%&+f z#ߐohQJ>o[kf_Sh"ykңK|3M BR}ZhIܤ۳O0{BNbNfWHD%_ .?ʝks!ġ=VFb$>gs^}K>ơAK+ 9$dV, }"#+w !uaa|&gYԵ% YWa~FPn{#Voljf@W3Dnk=$=Xdz\fn~˧ I.N &n,}o*;Ybv2h}L} v)z.ZvoUѥHGy5@2Haۖ8 w{65e3s&aKLЇ@.>~GnT:ⰶ~֞1px; h}C6 a1z.NreZJ-"ӠY.~MWdu/g @AX&,ܼ|"m_YN\G :gTG=K:k#oLe0?)`*ʹW ȥVwa_}<V)<<$CW \^'D0MV\HF4H^Uq۠[A \azu:8k>?ÍK軒Gӑ?í0Ǒ&qAXڅ*jL޴_((,SuETsxVxʞZQɗUn tSsGOeXͼYUO\(Cdf,( 3׊̵ uaPx b듏e4ЮD_洏w؉GpίzbM>hG`(=_Fm4R?^hmY*yV\n^3V\Hba \^鉶jx`mT2=ux)Fީtqa ͆3y;A?S1w_vxQ%#ЃgQMݏ3XzX 4 Mwo@S&S k8B c'my+%;VbӛvS˭qM.e 6Rq9ew+d$*;Ƹ 4')߶\pA}r41ѡ8U.;KX ޝ~59"T&u:KW*i^7Ԥ0eZ}٠g?Ie?E:mVX~TiQw{Ƭ\T0ȗWR!)SX{DjDbc9-U3t$:<[ G#+@vݜ51I]N9dvs 4}N|BP",Z?i~R _d+^u'UO2AL/f#8&Lz_ c ÷,7>,ۄ$3𪄘y~PÎ@ZW  W "D,7m !rϦ&Y-!lb` B {~23eEH;:bdʃJ-2st *?xpegOcm]Id5xPYrۺar E'ww\=܉ݲ1{tZ\I;-Q.;R ozN/O;HWi< 4VM<yu{uO5zͲ=2]-2=dtΟB=<&8\^(awH_9'߶D<dBr0taaЗR]~Uvl,Oܐ*&qpD%rHSzZq9?Kkk4&?:}AqIwa]%.1j'_&qJ;q6ԭ,?7E/y~RPr{TL)?QTG qfcZ K)4 ?PﮰZ1:Cw/ hEa N 2GW{[2H\5'{'aspq\XO7-Ҁmn.{BIFfiAo=CkT?}}XpZ[kɏ9K=7I:x?s|hU/I*fZds +#A':I5i @9De љa$?;QjӒ8Crs_X?g4h}t])Hхu EÚG ogN+g$`,>FL`Ki5vn΄>q@Nظ|,:5dElcpΜIm1B7 zݍ`%#3?*MI1}*dt^ ?S+ f1\\bghW)|XiL1U6I͖whdIqI1o2(M_>X2L8GrY gWRepQ)R|򖻃5?) ǹ]U2{jKr6]3 \ |Jw^%Ȥ 7]w ~ TA9Ly^ Z$Wøl^kZǐ,ZbNbGT[o% È5x+̤3<X+! D<!c-,y]c'A)p){"O d0y"{EEݍF&qn [ 3+Y<ROL$brgH U F):)>zs7>)yd@5k[v" t5ӐFr%ku9ns<9 ;"Mibj~].B򹕙y0 ]`Cr+&t/Cp[seIlx*~zT( "ѧwzMUOa#>byfLJ=p7;~H"Kކ%Zl?}w09V9[::0p +Zw5<@;+Ҡvf[S5w8=t͊t ]mtmi^]|.&13)/͵d[Vjs`+Ciovc #OFq3Uˠ L eV'@i&tǶ?0ʧDx@者 @kSEꓹ3 4/ɿR4"l'NzIu=_uUbC),/&.ev둒3L;lo *@+oDQ  ~lѝPzuF}J&;am9K -y9\'uT:JSbYfY;1(9IN-Bg8lO]ub}i@K1h bi*S+ƻJ|D\p7ʲY݉CEՀQɱճ1˚hcBb>8h(}oYhF>Niڈo=Uq4~Vn X*$wM u;N]x=O<=$bޗ2P.q2}WR. a_)墌)!%N(mۖ͆e(}] Ӹ sw@T TiѫKi.QEd^v} 7]|hَW/Ltc3išsٺ(K+&Q6٨@iKZn/S˷vԍR=}j}0AGaXVit} =O%kb/!!Ga<)wl2g43E&ZRG4E_ ;k}A*qTzFgB9࿻f6 0v@I-48ݚnUѥBN8VX2K9+wbxl)jYi|5:;w,|f&fU"yk:〳{=T _UuҗٷtqIEpYw^϶l~hUJJD?@fA1AE_"m;e]/zHjb5X=(" O~~ ,a,z`TE' mlDVkxN:UFŎvZcSղZ.qkb?:7&9f/T$_S|HmnxaUs{\43)w۪҄@X AL4|G+:U]h-b%$_%Um xt!\㓠~S¡v"oPcw0|Wt8pcOOvaD伛8Lpyz2I2wyZ{4<xD}>9}FIeAits)𠘬xS+UT8~ԽFH/OyS3G|N,nڱ³i߄WE36rS2vp'~<\O7XMiuB*"s ~=&:3a }#w/DQ$xŠ46*;''ߎtޟg 7gu6Jb`ס56b} SnEs}K3& U\/W(\Fȼ0Rݒ.xY^tP1۹q8h}hU":!(9 D* r͡R)4sMͰ7ʵ_|LX71J\z72u5Bi@p&Wsd0 0xb|߅q.Od@+] 1_#D Ym7l큐37 Z+tE`mq ep#d.5C[ZOGZmmn',S$*17/F%^7AkC.co8RP|*Eg9ϩW\á7Y)Un,onPB‚J*^BQB MWCgUrtp ÙG;SVAIFuH .\)mSΦ=@3[S VQ& & CM$4"+qhS1 twѫ W7)ƻ3H$ݧ׀ H\ŵ,e._KUpeK97{BVG&FGd`j ĈKiN.]YXT{[R)bъsE!~œ&zr]n2cdmAh=$ձKL#zKrS~;CX"S04=Ɋ]nK9824|[uV2ٿj Hnn22L@M&.=U&Р弬hRe]$!SKCo4ࡍ?> Pֽ[uOTNcMu_¯:l`dJ9C0|.W+7S."Z@&NkTjKb &زkySloWv/uًFV 㤯۝F|N~f6YviFf?P ʕ 1HT|Lvcwu{vܗ)# W{\!sNWSxAieFL⸿qy/fg`$ OR`,ǿ4kdRYq2&(fƞhmE6U^,#H2|zРvBBÁZv^ixˎӺmcr($7l.y9XBO=ݸg4:]S;/)_ ! wi}.d#7_M˔YOP3cj">dWfJxi6ެ¡B21c[,+]v=,GCdL%lGō9y-)SƺNSwAL"Mc'F`'^;kTG?5M*뱼@WT RlhX,1hm88}71-PlnGFO*@i@Cݸ”!)eG"f9<v =[`!$;{Vh6y"`vFs S oa-ZHhN)m8$P/x|nb~I">0Șta51 ǿrVd]wm`y>q Oq#1~vNHkZ J^ǡ!5=%e9 uiMۖ5-z ]ZO"dž+؉_5yЁ\}#+~)' `{x Φ&&"0:ZQ(,Խz9pyυ " G|QJvxB]ɀk]ۚ|!Nx2e++?_:5JQVV ^E*6 .{=D#|j ey{ Аl:D)"w:(c,E;}&^ҳy͊$ `? o&~Ee[fOQڨ yuW ^݄%}qH-\4&{pqBeRp5ZDfe݁C*8/d83'*.GA02RFV6?YsAP/E 0quBj)J]Au2mz3ZR'jt`7-׊,4I=wϰhVy!<,]_iy[UR.fKTm{D -?֒22f88ا mSbZ##}WDߟlu\ehQ <ȅg6).RQmĩ\J8 ͯ$yх h9q^\pVe!Rƙ|wO-[hsgf?"Q?ɡ,],9,�J3hXK 6mŐb3bxmvF)Re,xJ9XUDŢp%UEmKt5)Re1E\iN,;au娿'f0.ۗj 2w ]fT ԝ-P+[p`YiEfu-aHA\2y!rr)J3<dzsR.I2NN.0[&Hʟzr#M}HYJ.<nE D;5*SB:}_q]qo{@:i>bޗ . >d5h B$q zJ`yx(z/׽kcQ^XeJ]u4-cLqѣpTLIdI&i+)D^X:k'pu Wq 'ZcRT(Jߡ[I|}Ew7ڟn(* vҎw.qrP|@zSﶗ:TaZ@BQ?9.Q_~&*XIʎ&fMSjr/iJD^N`ŻGiD5wƁU;,Iܤy ,)ҧFkxKYP]0wLJ&{;sfxIķ~tq.: DX݀Eí9dQ-r9S=lEik23|:n!{d2WTV"@e{Jրa6ƷEPvj#zHR0S! b"K^ e-όD914'g>~g5T?lӌ7a,cH&eQ/9{#'^is("L^)rQEE#*| ‚Yc*G8faw,҉~uel L*q jzz ȈfSZ7Lke|E߾^;F[AZbwۘ3՘gqǃ٨('+;`W1#-e7J&[rD׫qOa1[ \7YZІt9n:*:{u!Tn6Q%;8b7GVEǛ'eq"F_mn Zp2T9܆,{-->@6㘅b CǀfR+ ?禂b8aF~@cځ+; Rx 8秀|tw=g|Zo@jl L)B[(ԫq-2n"J*oka ؒo:PqeG91rqwtcT^#!f"7&!+}W?*ЎSkXRl1T%۬$?ީpuBnΡ %b "a;uDcL7BRi>~('`֤7P{Ҋ 4Ox#}vx>Z'9(Iz"{q] 1VQTY4j25&0'} 曩"345qNr~E=xՊВrF:ZOa&9p w@vX~9Q|dt\Y|!!=#XBc+O)F <&D Mǵ]2W?yE{^==jtL!|27`&0Xk<|qsv+_.ȃC88lzL@nB HP1ѩ({$d-|q'N '$] #P=~'%;?SK^]n5EN^*q4!i^/GP\\H4l9TO@+ @NjV[z|))J MPVfb\]í }"w| eA*Ӏ.?Sp:FJss)+ T?6& 9Gob;Kgn-`8\K޼6Mlm .g/jf_IGi7U'1>ֵ@<%P jrPͅ28c/kA"mӗzPQ|Q";C6]סfF_5/u7(7;?9kmR?'MMp?Ofx/!&\||]>jdX#ts=^b[HEmG}"?-G~d򂐶a L7Q)kCtfNQ݊ ?Bb;EYq[?ClUڧw 2^:l!S7΅_֯-ɽ7[[so>.C IՅIDpm;\RM"|:ҟ9r xEG^_5|V.íIX}Hxn0cbzX{G 0p&RK >EC `x>$[ 4'CO6(n+L]5 @jq3),Dnߠ1rvd% ,ȰQY= K6xEPIό3]H Ti,Ee/7yD:kks.>Ǩn&tLeSJDhE~&d1iygNDZkEs|>(m?5]a,\߇̱ϖ6',;ШU9,R9g%FI \Q^~ ]ӡ^kd=,r k9*WX:2FD&ۀoɠ U?)3;D, jpV 6 ]&y)SőоȿbC0S7{mQ{Q4kf8|L| t^7w_.0( _%/`[H&dFw'\szQuGa!~ZJ=A%(mE81>,KVڹX:j*㾇&` ]Br=@+ב;k6U5Ҟ7o׺ޗ=HfS/Vg_1~?tOa~eg82JNt5>&^r250iOQ^ $H“ñPߴ֟{Cv+2=O>[^5IH`hN tj:x1ze69u?8V^(9:sP35aշܣ\zWcWFl.9 o-^pd[(;^e/t=bL94sQk]$#4SlYUkN哣b,)_jXݙR/*hE)iuCL TQRAz5gE[PNR :-Lw3}i\yџ1ZUůCgQ)p'7P%qKzC͉L X'K;4?lTɮ ~aGV Ҥ!ec''h!+F7I o) }QQ+@+veOxNqgWʧsu)ya9^<>$Z*ߋ@(_ `&91!/+upPӯvgrgn1 :Su_K /( U9p\jH~zGڶ)av\ mUBgUU |tNYpx[11E ^5ucqL $w KQ/s_{uNyIyI, Arlm \$PUҔ Gg^LkSz}^>w.+}@Ȁ߷/mיb|(yC0I~g_2Y\p7QgԳC%_e!xAIrW͔8pMeBi]ݫ',.;бFQ2tzw[d(RÛhw3Blҳ7r~w-|GB~Aõ{vޠ$:VaQs[#o\"aJas*t 6dRrnSԃʱqp#[M]q&f&W.,O T!ƽbEU܁-6uXhc \:.¨E|?+#^c6Oêm}vgmMGZJثށj,Ϋ@O^L3f=gųjP[::o /pGKO@4^b_`hY];Fʄ(zX!;81.8|E|xH:r_xdL0~)A2PY+[(,B¾v)7COnH@P؁n6 K/A O JYְ -q9OIQKF|~P[7]AB8V1tr0Tt-8 2XU:~8C:U@_`]h5%^ g՟S80Y??ZC>a0;6Lt E'rI;7ƆDq'n/{Yh?9VgAi֠KPm, V "5s< ~jO@H:WD'uU2@n;jEf:;9P+''Oɚ,^m|2zQ /q=6̒P_ٌMK' .#/m! ><**uN1ΐé[ZJfzc(/g*lٰ_hM0R&=<2{~#rw̖%-> 1,]ɢ{5$R 8½=NoڹQ ¬lGva$j:kXJR`^3Pb;vmX `Pfl&<> }m"b%23<*vBƗQMAwKLa/F21ݕe Tٕ}Ε ¾ ^Wi 7`sޱ/o?:e`kٱ"zTuvۈyX>2W?Ⳝ.D24b95doQgw"ui&m~+qaJ4< +W6qE-L[=JkmBr̐GMwz[ȹ4IY{Ug#-hܠ$H 벏𑰳 ԵB[W;*CAG*۹m7$`%4!2 w Tfe,jS&AO\ # dYs2*;ܦ ^w>3@r OH{F20i51~V‚wr5"wΫ1HڼKX̎xKMwV3jC(*,7| [ 4WK!e%򻮹 _iu^nYcרmlp+s߽Jّ :9S{|4*R ĘtɘFoEC)E~w0U5%uZO-]Mv/{>\Kxy\OmZՀۙe|/nN+KzSRM{s2y? uFUZORޣH-E\,S"j&ʎ!AH#,l#t .y Ղ4Bh Ѳ}# ܨչg <ۯ5Ht7a|>h^:VYK0Iۿ=YL"Y4:ZO;vv͞5P64 Ud$;i[Y}musSyOL*)w" D\UZ89$A!8y֔=f#^Hx*Q-Nvwei'3tI/w\Y÷@T 0h"Bu`D _-ϟ5 ^fH ">[h즮tˮmTI /y.I)5ȍAGq I[[k΢Dn;pJ<YYưYSZ. }EYgL觽g ^OIi:g _ $]QVȼ&yңt R\,)>ƦtTBb8nFBӪ/rB&qRN"RU4^0`V*60#xbu[PB@yHP |Հ3;2VNǶQ~ * ZY73&)5Q!`XVaeg 082DuC{REfQm,gmqO$j ɵ P@?nm/&U]=ꄯbf}K@g*A NhUzΛo/4urD+zV="rW䘧 ˽( d.tW<D}% Pˍ'^j-ni􌪖w%Ȝi?׹uwNȎِY=ޤ 8Kqx윀 JFCȀ⩈Jz4jӶ_j ,l 9It8N{Lsn 5Uì1)[!D,ˋ@"pUC[e5]\v0$h +n<I~ 8Y  ]S!/ '4O=8ORR"sfZQֳ Ah'%S:dk4 -A#k5_PUƆ|{1_ $oU8zWq#5@cr1qn_g`B_V552&//G4dt9y0Kn:v~P/ rW"ӄA4@N2>7Ws~PbEc8niAΪ݀g_,bؾ/TkM?ݹ IեaKg!#}&\&:r7i1ODS$N/.k QR˥X2WA$fAǨ5TiNq^pKL}HTCv 7:}c*2NBhL`+zp F?z5tkɃ.Y|ђ 4*0?5Y~6i-a_4Eq`2H-}L>n+61{!#k2SGg=YS\c$퍩HbԄ4strqGQ;LV7 l|f%Ϣxd'FЦd}@m c3 GpRo2t` Y8ᝰ!"Bcd{U\wm?t Y"ks3 0O?$AkXmuj]kAm][ yYCyB Vs)s>t,R}1=bTJ2fAs&w-$ٌyRբհ34MmUE,\7V}FA_Ϋ5#h@_Vxߜnd y nջ7.'at {g~AAd)[ y)Qc3EfBWԲx34ˮLAzycxgѡ,߈a}CϷPLax> QC-OP:زHg?TLmܔ2k> t,YMx]ڢ}1SzvL̀|Ҡa-UuJq_jcۭ,T3J#fVb+C\0;ZĿ7dw(cb&b8;Wן@y4[V(b/L?+M9;58by*Spa(!&, Pnٌ]yyB>Pp-WuW)NΫOEՍF>Xr\?S敁9epMib:D0iNZ JVDVLA߃3'|wJo p*|y|012`Iy֒[N~K3Wvjz ME uڜ^|e'4 ˚Q1Y2DBUdwH,RaMD 2N.)Ot^v=HP5y?NYJ47.;aɎJcx;(kZk,!8Fـt_ $MEhpÓS*TvnI3?afQ.'(n\:k '|/L ץo+ECF<ٸsDŽߓlE(X: L#80ч^V 9TȌ錘<D!/bGܽ 3b2=жA5{5RJ-;l".-@ ^H_ÙuwޔI٠kZYd؉ F41kG5:W-tW攞nӽj)Q !"0|bS.F^]ے;wnG2x N8^͍3͢y %k:N,$Oc͚1_Zp=]ݞT]Z[cb]d.eDC}>s"G˿ba[Gi>f#XdPS On[+lRX.dM!EdVO@F.\ +1NG@NKqY}N.'>ZÚ.Sfr^bתP%oPW#)p'()43c͇=5O^8GCȌ=?^%ke0+Q<`^a+ceGۛ\% СEo *d[}9^"PU!,!b. 5G{i?F#=s3h{ܥkP\1LeVt1).Ur>ّSdE7 =+gA: c gsh ZEFID_rԧS7<6`46H 862 ]Ӣiިwh(''R㶺5Ӛ[T0JPlitހM"pU=ۉ ~YlK"ʉ[ K̊^6{R%+{g>4B;a*dK){QxXqKQֲ^$ю7bӛ!R8}erTWY6|zTĤ1i9S od-q5tuhqڐ-\N рd4F44yQnhwLE[1( ϥ\>VH$!sfdu8FǓh6]y?Z8 ^C|Ict|n *uf$_rgX.uKFV\~ꪣ5HD׮\FVTpJb/=ir-'ϥ+NC;Z3׮6}_e2(;ѕ482U*G*:< K*+nBJDL4zM8vE VNWbԝGK*S+ZIQ@B%ۆ7t)yO3QFtͯM&MT;Fy5^0BQF mmz_nxT)Od9g8"d2zXҵᔥk;&IpCI{%CEHֺ$97ռ]2st$ZvKKz8?;gs{H?d{Fi$7DjdbPBl"_rOЕ0yLNaTZUw̱/ -2#&4rh&}]%,xބo,!h mۑi[d'5_6޴>a>LkNEV@h]ŃY1ڻݮM{aBJ,(_[_$ &DXM 0l0\H:۬;4AVO#j@2L(6kVWٲ&)N9 xNVLhsA)NG{VuₛmWgtqn9Ab X4,kgpJѻU23WH1tF@>+m6s7ZO0L/d;GMT5OaDJ{ǠC!U*ct`6E\e?I_ 3|0Ↄ/Y0u./6=m Ik-9ŷsq`;) &kQu,G:JBR+/ɯ-b 6S/RmB; CN:.){yn;smhFj%,`2 D}eRRȦRȵAy1%WA$ߗt+SƊ0+8Ӂ:^c ,<fUѦ̗6:F$ R䋻l⪸hACUp+,6f$ؼ^Ö̌l rfuhJ0~]tml8oZ-@Wh~ .xOJǫ|5B%z#$CzQӀ8_lv/9!.AߒyeA'e@BjƔC`c{_"ED*+O2ûct PDo JC`)𼶈o-OXS%±NhkӘ pp۟yׁu6+@psސ hO#fgT}&7(IYF)hTx bţV1i˩p") uBtUR>%]0SˏB$CĄyyM NΙ( uQ_U9n<Ӓ;d~7 2ǩ ?ҴK::+Y(^T`8aB7?^(M ^ 'H43R>´;?yO۷8-iwd2eYNAcs+4 jOYKQfW'l_f\}!(?R?bdIpLFZ]aO V#6KY*JaWC%HCˀ28༶oTwdwsv9կm(Bѽ3cHLIJ` VK*ws@>̟Q|#㔡^kNjwjiQ i2$js[UK d;7ƆB0MRi4o$^@D֋oC\& \HsI7_~*kY--pwz}\uzLNU_vKw+n[`K^] sWasp8&Yd\n%&$8f}q:vլ _=yR^ tW>Mp{oκI n&7V$لԻaq!PaPg69$JOq= G'͠r$$؁ xBZ7~]m-& -3Gb~ּ"†qK`24u|6oxs>eK[0 Zd2&@ e:[bx#ZOOD8'!ONW"TY4{iH}f r|F-~ӯeqs @?b*>\E(q3Rp6KiJH]j$>à )}yl[q :mzɮcɦ!tzy>h;XHAYGӝɨ1jj d G*cXX84ձN6n L]ȗ&\cҾͶVcNy>ςH :+qa o&l8|N{I#+ /k mpĩ eG5F477Hd2<(kd]vvpI`9Vu`<'/,l>y,*BiS+gZ.vfݵ?'Z qhNJTΔkvl&<լ?!~4µr!>U3ݑ@Kzs Avw4ƀ5#`S1l 4 RJOع)YOzYhD!@~ײQh<~onx +0y .@?Ȇs<_6v%ڋ=|eu/*v#LSmlo%ca*r~wp&3QLjAu3dld r)caV^W5Sscb<5&C? @QXˑ_ 9N4*9)fHA?x& 7D\y 8;\q^HՍIYU"A`Um=v$5ed/Qy_ks:~H"qo MXPy&fe*tt >L4 nc|~Jd4`kt\2|r6DtѪvn }"A y* ,_&I1-\烚]5{̚lo8 cP _o2%49F>GrN (yܷ+抒o[g 'W&L!/a/ ^u|]|ja{@7- /TxߘG&L'->Qdv/r\T5tȲ3D4)sש?=&Z|3oB9+XF)lQ]1Cp]{NI`.~ 54~zx,o_R$n}OW[:iY1=%Zc{3e; 龿!D[>x'L24$Uɿisd>BK]`?xGLi :2FZP LPˆ@ݍmJJ|\Ҁ LiRf(jF{3K)"R+R=yWsݦ=M`abm[R0`Cĕ>?O Wْ"R&O0cW>Nyo~2k_Zh .s[dט|VT%B<7T[.aՉ Oݙpm vb":*r FJe ȴ!J:XV߃- [ӆ3[6?ZWi2rdRI%tV' q0?ګ¡i *L̎U#}Bt]6bU,t26t 5zw3uC!$)15+7.|* ]:G8T:KZl=DĄB?e;|14|7iuYbG]y1 ^}dk6FNW/:g}1g ̥\ArJL_ @Q`nolPog9,ؼitm WU# X -b7 lna ˞ 7zJ%;E` Yi<γ0`ALE ƾinNk a0A9lX )35Ś%dduMK;BʉbO)BO$z#?=jğ½!n0alP?D{v8wL|x xWI/G^ ERLYfmt.ė:-4zjfνc-^u (x(\{q4^cᷲ*/ԋy=> WOCڢPl0dS!Bw)9{َ!ҙ:lue\+LaYpOedٲ".#~+ef>Fpŝm?+w[awY~UfifV6 %F6 f˞`e- $"=Џ3j;=YEs%4gڿtWZ.Kajj3_ ۥ^Ǫvu[6Y9ja1uDc+0P]C!]WPAt#c’0->_stu݊P;2D:jq] 4}iQ ,sXCϤRX~R- 0PzHuN)?ڳmUq +fHl ,J7}Va$-=Bqo>qD:"/)+76gV_@u `GRDG@!{^U6kD7ւ;{`:M^+lg|Zr\%/t:mhlM4}Eol֝2FV"Hz 6[$pG|ݜas Qq9%/sq2K4uE-=ߜ(O;ߣOPD)#~p+"S,xޖ1d5L+,jǛDr__$&a]9'TCI_dmH10 )mAodqtacxEMSޢ A*amnƹdF!2#ױ2MБAjGp[sn_(8E8;Ѹg2KՉc٠Ui B| A4g+/聮bɍ>,X6ƅUlI pk:#2yɑw #R97خΕAO/Tgr,d&d>O^sLng1(d${S1yL`dU巷'<~tmMd]*jl4~bQj>'|&S4pȾpMW'z]&ܦxUy 1or*c(M#zLãbth[tؤ@Ÿv/^rB.UZ]S,=M4c<_WC'C) YXU )C݇fRJlD<آ[RJ2r O:?"nM\[(ڃ6v׷\z!(=ý fq|uymp,kI/RnY> PlUz{;eOk춧+n97߆.䉴7Io}I5e|>@z)«(?!V- j>bRCYqb8Da!M-(*w Ʉ2u-KTpPWm@ w2IARyP:ɂU1Q5; a4E[6lMF2_UNZe4x"pmc`2A m{*dd@]JO{<\wIIYrwD&XK8 #D)l֗xh*u2gT.箅4t9#oɾrݱt&rN` >Pe_XSBG`m#& 7p-gYP|Lΐ w֑ڨ[kQ:`o驈|Tmv˴s`]|]V' `b#E/ O3iB1&Tb+`s?l+D2*("G}av tTOEPiݙCIaMVM'cKpV2ߜBӜZ-1!^ǐ7Ymzk]3EQ+vq]^T<*$$VߢA R̯0k#e,N5/hRDTH0\)J`/:WizKɺmYýTj?ۉEf1k?G@$a֜v.IA܍k HҖQ+!J){\">ho>۵ע:`6{\pрBE593ljoDB}m\PqгB o*XAVgmgU LX859KR4z4 $"YB0+#M)^IheE1z!7mO!<~R9䢻|+3>=1 "eJn$B%Op$JyB\_.x:-yYNzWv 9gr #'M+ԇ5QjCxBK?ՁŮhL̺F JyI₏lvue~n0(_hSmE+ħH(7aqp甃:;X}s;̚8Ī L6$> Bq8qvA:C lzz-/1{Ƒj^ +`xP,_?uOʭpt5)un`9X*VSU(yNK aCPˉo/jZ*.I{Oy$,()(bSzY]?8j^SN`3%s)9Y9 :W w;~":/}>!),d+bzVRx\#B,O. P@ziД Zz"Jڟ)r @ENSZlL$l {d^QV'*7p04cE/"Jz) *c247#MZq%Đ;n[mp>DAz l|n;8K<SqZmQD9}TQp<kEX=Ł׉c/ΕRxlӼ80>;' ÒQ 4bUh$ہn-v6YtKgT'uFBo|tK#^IVG4,zEmu%,M慖xr.~;1gIh+T29>>= lkPTF⿅v? b{~CL6拪.r}~zM>D%|V:E~&#R+rfsu3>;-z]5ޜ :_>Qۑka_Fb؛GS:WqNp`  0V˔Zkxa^TTC^ 6tVY^@=[׹k1w?iDVOs'oo0,GGv'Ɨr Qh^*'Y8+4Ѩ: tn;-4NC<-;mU{ eY3A3<>Rp{+pJ{8ֈ#@&f6f5<"+h5h[;ڼ_Xkʼv o+zʥ;0*Xy8sϲe+V$7?e9,5o'nW,GKtvq\zagyo/SM';K*ޚ-orpE)mٗ;/TyչL2 É"uhGWֱ9/2\;rߢvJmf@k\8~/a Eumywy=tt5'Vh6#Y9B>U-#œzc&%}#\ =Hΰ{BﳁdgHay! *NVmim1e*0{ыx@V G;CCȷ- @R?lQNVֽJ^I3 ă`Hjdp~oi/F#N W-<%:2 VLaKʭ(j'0GP$gjދs2coT2ۚBz`t{=$Ov΁qLӠCS~ S?CУ<9%rt0zY u)➻ErtKcTuu+p9XmZy}3[{P ?1?:Reo;e2(կ^^I@R|,(b}ͷzՄ:"key Xr(d^g$pˮbcmc9dj=oGϷ ~)IQ݄[ MR%[=OiO/]J vs,NIB"&oQaUkkh >"p?DJL҇o w<^J) b#&?݅.`w8;q6/_9z&-h!YV@gi&,&oFYaĸYa/3 Udֽ]d_;r;I-j%Φ3L-6gTDNxi[CdIgvB|XT-KrRoRJyΥ<ܹ_d%'[ b8ZD۷5RNTzp ~D^`-oio=ļlC7P7-Alh K<d9fOh#6jA2P[TѨ(6w#dv+cd >X46RuV$F i`V;,tv\Z7+C1$7JSJM i!0,@9QײeńB_eϰ k4aB ̴TvLԙ<&S Xou` kc>zη\ -hyĢjzoa<NЕSM=LaclL}v-!o6dx'-kp"0L[ ZE;ZĤKTm7w+͂ 7uv ""(^r'0kJ.{Djm.54^A/F%3Mh?Z9LvdB1@ܠ_qRB^c{f&(^u|tAG"Ь[p \vg?Ģ}֍ڍl[B"{47"Wo@yJ3o[Ctx.F^`;#mgpOl:\IjP?G\f^RX=~;VGALKscf5pƈ, pCl܉pȱ+׹JFnmC.x"Evi1ZX i@ )8+u"2R4*U@W#S6vZ,YSMǻ.[:ƙ9GM@đA$Ylr/:|t'd*5P(mۢ{ڊa{خmTLk^6(+(~`OpjM$eFȁN"tӮ=Y=! we TY`;~+^拺zRڲqD曯 +B=JCP&GK^kR;E'}CAO; -(KaPb_E Bq6QI[ M |QiFDM{PpdZ*sY|5&* O!{rƝ}ꄜ0!n܇ *N?=!9*#E") 9I$X9|LQ"{JՐ}X;  `~YM꤈#:/kꞣ}HOHtj?M9N"TB|Xgނcitgy%d[yOq2=hwhR$9H#HEOZ/* SLP'`x|;QäƂe[0*XC. Ģw㫊tY 1X(d({ciQm1] }N ih,;KO9EˤdD>Z[1Ɩ],}5vLg.K @@/tcJ"'d ~#XIr0tħw!k%C̫'Rj"uÞo+_~M?[d!ؙFe{`~]Uee.$pNLߗR4l {Ŵ񸀿cTћ_3vj*yQ/aGh' g-JmC^2؜{N$ }"3<5Yr 횡)Ψ6$.0CbtIdLևȇj,v?^NE;zx§a-'6v Rc}yT!<Ӑ%rH%;2_g!/i.>"4Ę3jr젩 dY [z}BFoNdd/)!5P&~;89,}W)HXd`0JsKV&"Ư@zJDRaCPqN@F F_Сv9]3h@F4DA^O[}0ufE(ut\"ClmB 0KKN䔠]YeE|l.B2t=)L3[ E;[GHkxe 񜽗P>?ZաM`B* 47U`7$L&oh v Kp\S; ]Lݰtt}#\I#Cr($ڒ,P,ʝS*վ˪N:@D 8W}BEEq 5JВUV@ky1рO6=z]ܓ5Cг8)wPn%^gX*7_8ݦ}Mx]= -xQ@1Bhl3Pd,[|F|2_7 G̼6_)8ǘtHk{8D#'ʓz8aH&'̈TH*zBwՉfvpY1, 8~|˂0?F adqlcEТf׵R q[ VO&aD>煰 g kS&\U~v KkD']ʸ$A;9%T0+֗kuĚm }UJO=jF${ TmGK\p2&5fwp4SV ֳ;r |\gD`Jm{̈\?L5PQƓtzTA貓W;Kzx^Ypz>%]XB>neٰoWHH<\QMiiM:Ζ2SE%M?@n) Q7e:ł˸%A}_׭!},,r1%) %K!=2n!Z}ڣ;N%i. rD%k}b 3QUr&/GJkH.ĮFaǗ#GWxҍՆJ&Qlt2szƾ̿T&dHXqi$2dCC:JtG֝\seO116{;IۂО7F  d6ͼ¤o6nZV^rg='riY=e[7R@u"YnN:W89LxHJ`!V5?wm\/?ҕQ4pR@P?~YNt XGjKJUɭ;>[nUߵ&p Nݥ8}$7%ږچ&OC75YpANٕ-!ht/rώ<430\t'4TÙhcS3%aE"ʓ)]b2}MNǎ XTsb=8g&p:=i`3%tLRs!sf7=+fiج_Y>$=]桟VUx u5v(K3WUD8^sT+^؀Pa[s(f"J'S*Q+fbNԇ+֊z ö -Bu[:'՛(ϻK~xf={SfY0 >mH%=,[4@gT9t ei3eq+1%1HcqY)僝2Zlֳ\cVi5څ-d%$;;)ӏU0F£lj2X&}vJx ,MJnoaVOa{nk2т no"ML6TW۠m]Z?t99f\b 9evqE@E7rzOQaJ:%*zR^4x]'~+&;X) î X 阘A%yO)2_/Q=\wO()"D%FԒ"uWKNx8%ͅ83Oye)B'9Gh)d&W(K}F)B % ^;L0ꙃc,Y8h7(>dELg]Y!X3~n?B;GWmtPt[ D6t*Cm5"Һt!FuuQuA4pZwB0sS` Oob ެ"_DMx*n&h (D XIG W'bZqJ&}' ݸWs40p^,P/6ðUtC8SyÙc--$b]܀hB% ӋKwnos ?p<ߔzŏ+M-ag)VĨ٬>9h_u0eb8@{z }a7yA)FB׵.$ _!js4Sš&D)ֻB^JxWJ!ɝw |07O;^є=N .QHPw<ް#cL"h3,Uvs# ͪ0Oqcjip]WӉK)+ 0>j[kM<<"/Z#=s1  ~jI@%A+]5s,BWn^E6yNBqe񋴝nLDn Mhن *p?ő1QXfZ_HwaKn*wV¨ ox1b5+nʡ>yxZ@ a-ͭ}Z"_hgc->f%T1mGJj#Gt~Ѩ~y:nLzB7&#C6a NP> <ѥSRHոzv?x<8́*ZfV3Wl,vjoZ PL.ieh/'27[OF'lˈ8Pca_L,x bsJs`l'rot\4*cN#N͉nSj2|W$ܢLGz얰{rwΫ^d'GCu'+Uj!B(Ek:;`3?Ϧvo rRjت sGaeKà ){ W){С4sba;;DȖ{g5Q%S/[z4tWUItV|/K55rNuʠ5 67BKwvwSױ3ɉ](:B0Oq ;Q:,kc4g;p`7匪,JF&I%qH뽀Pz AognC4zI]\Ӎ d̖A zFrM:gQuF2s܈y:F& ?U kވi}BLZ.eVdx kɝ; O#Lğ$.FOj<t vQ%Z/0{@o&=4`dMW#e_J݄#6^gEϸ{pm-b `fIJ#fZ&DJ&W$~Y#;Xo**ġ:sj+쐱a<~86|a1G p}9VGJ`0(æ6UrV٭|["o))"*Cd"]K/HT ,OqN+x O6{| "A-uCgY^vFj-@9{G@;LZQT[d 3@p0[Jl9o̧&P%UVJwSaY]g hX v;Wx{I3cek}ds'P6dizX:͊F.mV:j>J'.';@7%}u6Q'~u Mcs<[*n?p(lvIth+z&O9HZ6TbJBӓVu?h0*`b_"Bgh;.(B#yˠgSpD K.T=[,{_d5 2M=e , ŋg*!gYWP@wBȐ*#i 9%M!"pv6ِ#lKRj3@GD=ocA*Xkr-i,A)7 E"v nG :RDvJ mQV/C`0𜏀Ui? QE;jXޭQ@ vEE$ BM| hHus"noit*ܹL.MZSS=x+_Ƚa`eK/*y;sicl-DRty&5t\ *Yp1P-fX`\E8R/6?UGFU[0slUoEWChӀB |Th1RQ"y)$@oԭI(u .)X]~\[QB2fv6M]Ώd[8 v r`u E"*9Zpl6lûb)<*XTBՂ7 ha~%a~H}I,:%HFĐIgi H+{:G5C{dy"'1بdWqOt@͠AHVBa[oK B6ZCXT~%0ο@n$р-yٚ=uJٰ7ò roEC!1;۔LP&8J"53sc&"BKM &u_,Et?Y_<Z+g6b  ԼGe`+n˚c NGX .H\&>u)Δu( mF޻eC=hKEtݺQ) .ˉ)zLxs۶:$bJ6Kߝr=Vr`A+֧!Ho9j5dibq%@v[(܍)w*zb(fۭ%׈eizX 38sG Ģ] `Y O8UBʼ"+_NX:p/偃[rK=I1A EhWXf< 1 ٯ-(K|($NDK% h<5_&5,B*h69WдZG(pˢ+q2 c oji-qߵ%xn Wθ5wgWɤ (++ceԣL4?_3IAQF GIi,_Nj"*ڝm. C/ڷYgXs.jEm pJ'sV^NYbN*&ZSMD@MX>:q21tH+65igvE+}ʫG\ܭbZ `j=h.Qn,2le2& Œ.+k+ނ%<߰ NgP}_q7123uޙI-O|(b>l:C٩ :-Ok{it]:R|x';&YjdYĞjfXeH5M`ͳ|Mx>øO.#+n iQ/ZDh4EЄ _&6 L"WX %H-7xOI4.-Boϗ~UJgfojxJ_ @U\q4%bZ?ALAzoK?@/kkΨY zTG4G6y MI *dN6? $9#u9r . 9ۺD3E65kZIR+,v9A1؋Δ,_2eu R}Q֏ړDo` 1/$2wcӶGIHy.70#U.@ P$*Ļ/Uo+^R<]24S4e>?`)@YCU9)q'g*$"ua\_9 ݅x'6K̳:b\0T7:1H a>D%ϖ-@ [ knjN dUftTqN8 x$O؝C#.b/*h R&XNόT"Ktv$ 23 ~VZ:vBG[T:d1Ny'S c!R:r%5Wp5q:V~Шշ slXrGg 2uT$?C,U3sF)"BH @px2Wbl%NV-b cB ) 9qȬ?Eq4kqߩՉKbpyލev)8&N'?,'u 9m:+ POZa $= C pO6ك|4o ùttMNOtԌZ s,5衦:'Bm9Ֆ}^﹁8Y#$XZH( ,텫umW^t`?k ܥ]!g@%ٔo[ mqu&yrx4S/59F$ OL ZvBcG$fvY^HJ51Fl f]ebv7C"#Y T \4;$fr㦫Wfjz|*Ki6X҆S5r:ɺ|ya/(6"|%yFDЍ`ΰ=2E yK <-?MwB}dG-6ҁA6F7xG$5eFY4RM#K)jvêKDkD)-P ^Kl#B2ˎ{< /&~B)lzY S8A?-a<*y :&s^ˌVRTw&X6 %~|G!\R&9]B",=ƧytfpT>&1F9Z99Y3&JU!cn#0OwTTlƿZf7ϱM:TTJ lR02H0#N_\_iU"pEf*P_oq:-5ꮉjbYMEʦsٶl9B"NƇw|}7wюU^g瞄sИ4Դ0#k!(]@}ſXX)0O d|M+sob$ؤ{c)sS '=;faL6mJ?SnW'ߓrlWtn~~9Upֱܾ6$Y~и%O.9oP,KԀ,DfqQZfxqumJ UaY=Xᵛ0=hgy}eSVJm+h(44LO^ W5 }bZy6rW}ޯ.kHypչcʘmX qWKpV!BGry%^~gx1EN,fU{URDwͪCi؝1Ic$y>eO{bD>";l9ul / ;)Tؑvi>ך) {ΗB㞑3_vM2pF32+ O:6PxվU8W$BYCQ-2eAf&_^Ih-nIw~)τ,_r(bm?~ueoc"'nH'CM|9%Hu#\*ENĽW#=ctII)s͐͂E k=聾`5OG1I[p8)Svs6 ]ȓ9nebXۋ93g# w̬6kEP=k8TY' FqW"@ %`RwVnQ#8M)#a3׌sX4+1ν'aspPMӁI'RqHC g.h?tV`=`K4elϊnL ^\'$UB`{k9+`$> Ann?GuSn4d76^9eK-="Z-Z(bw:9\;KuZ6t_Y &b`,ArOf2I+ KR-^Gu-S(@TX4X;vn)ax}`QzM3LwMi1Oj<5CX$ECP.W7YGO-@(Q}.㷾GeMش|Ȗ? 4f6#`t~_~{M:M(P4O!y[0Fh9:L|Ũ%w3̄HC@OQH<Ѷ0G`0-?8,S/bsӲDo4eG@Pr+p/G(-Vf~tҾSNy3Fz|"u Qx@`۾K|O3+@Tu@EvcGگQ{c''STݽz%_q!5#t1K'?*=۶R D~a xZXcC$5;8G}af% 6N8Er8Q Y܊^#Up83Zߊ!YcuKjUQOu WXdmBRИ(Kz `Yx#©pL&W1< l1jJ[UӲTUYqy6h6oΟti` މ!~Klz}{'zb"}*]pPJ(ˆyv G7 h66# @(@*wm;îfH8)̕)<XѠ}?z)#~OV6lbm:+!D%zwWZ.įI/hܨ@1P9ŎI!PvC)̱ǐϴgҟNC)3,i"[ᯰueл,f1~9)$MVƁބ l {s\ϰh&"&S}}^B3EM(`3,(7Xc Ѿ#_0 D<[Q f4Őo9 Z#6w~&z$XD ސwпXLiq@\i0||d{sq7ʫ9=ZꔷmMQyeu{L74,ɨ7F>c ۨie_~#e)-JW7pT J ;[.[y<<'}!˲qUR%[5w| : >򊨹"G]b[?uO*eTع:-ܥ0p;].ӊA4 D ;WVfCvD;}X밿 ,*c%a/@oBAD3@.q7ۿ褹'k),.!2i4nF?2`vN*:Q4Z"i)t!gn>jĩeKo ܈UZR-TG Ô>v%t΀wJ 9k+>`~]C)29Ƥ >:8'5f8C|ZrfRϷTjl740*c&M5qUVg&HL$BKmk]H~_-lj?yD{cXR8lӋybx\V22U \ãd5(1HbV gy߯P cRGϳaKDe{MksV5iJHʫM+jyx'fQl@ǧ^&[gKiB4͠\V t}P8Cz3٪L4]w4iݗ##!kH, @H#c"FWjl4ONF9ckwwoHE^@dnhzq?Y _*WPv8`fQgVswN5`po)oP2ɟW,R,\.Q[O b ,VqYsOzҽFDۚ|sru Udsf"x&k%nt(ksv'L1š`=M C ܥ:gb—pv1УV!ڋ)z7]xgݝ^<<̬GOc  U?Q ~vb;"Ƞ#샳zcyGkS#@B"B_x Sc`TbTL&4k~z{6QSqNhP<42E^Xx]6 1XÇbMwC:wFPdhv `<7Zin@">}zFxv-Ր JS_!K'fFnxcN4p^Zw7I  [=M2N]U#L iMUW_PsXxKa'iR!nf:ŠpvTqAM|b\%:K`YXsYXc3mPށ4"#O4˦q"`] u0%{*1vZ鶔laSUL򳬴xwɾ=`'sKfb,S&eCf ˻};/1 nEeq}uwc6FP!"퓀5FY>v"(Cy{ٔh0$JAbZ=ޱ(jEݣ?mAmIpaav>-z GC<&uS bӁê+RQ,g]^$oVvBsLR;UE)<RJR0}%^iu_DڟXk71$n^!N@ `V@yY64ﻤClEtR8箆كI'M:RO@Mzs]XC68g㒨wy+>Ku)ܧ>t cȡ9KU|h}7Pg)zߍl(6x*%| ¤b XJMbQǼW- 'dVYYeN|$]l%=md4jK] Q0 Z]_C~!kk ҥ%Zgק5vo؜ qNiQ"Qc$m_4܁K Q.>u{P շL{^ LxC25a$o@$roo }67@I b*Mf+g"fr@cO"uȴ,B N`@QYqAZ¶@ѡI|d5JD!V9v:2;@.SWò^(K4Z_J1/OD F'i8(CIX =B9!}x}h>|Aϸ7/Xt3߱l܅#~;9uGʹo>lMr eq{{֔R &Z*ڰsc:Od4B͟ +J *]B~z^, yU048LrƾXKHT5waehtҠ=ߐ.PBWj/f8s8a-U)#ǀbd; Cre}xcmQ1L=8|׍.|߁ rx|[y؅wT8_^Y2EmHY,0iZq>]G!AzŰ|_MUy}4͕:y&}6Hr2h3JB_< 5{0f̄Rn18#*LI:!V7EPi)+CҚ,QҔ}%y!LDJd'%N~R;T.t}+v)G],leVx}!H9"pp$8ʻ-~";^qW)~h^,b]6@)ĨgM% cBGU`h'F,O2=ϥ! j]a ~F7KЅ/@FW'Svk^ybo" nԌ/ ʥx> `@UFPf`Aɢ0UJ䕌{D Y'2t26Ogӹܹo -3ї*0Srk1#3i{I,'$ڮ0.# aURRC`Z߄!Z /{"Wr_ӖHEDp q3+ԙRvJjkQ ьԅ̾$1H$ z.Zr{#SAuuY/8 s(q!RpKZHe b '3$n"CB Mgl 0_kO(<&)q5b$PE,BR4xe[af[AH )TQ/悇4*RT<.~9 ūHohޞ8بaPk~0oDfgFG Xu߅ܵ&Ta8UŐh.w GXk~}`.; e ,LO^),'ǛSQq.%gqݮފ we3TYn3ʕ9̌>b4ìuؔ0ex_͔8*\Fe;Y{p'p&Њ!carCŽ!x1ܘkBr;qx]V mÂR`jY U`JJ+GvWm.ĸ?ν& ~ϭ{Sb(ӓ nx֚Y̠_;13І/jD9t8{|W:ĵFh_?$#U٨P =6Iw t.)k( _lܛBlpxPDJ\p܌0c…Ƃ /Cu$m7mrEub=?}^6ZF Zם0q~HP:"\uoT"{[py~wGH8D˪u*/1(a(hκ7Zb-dKױĴ1v?u9):'G!lcE^{DO8jz$TBK6.8'qisGi=:|Sվa_b܈dCaGclS<)ܽoT*#RNת@B\zАū3`N9>ęTB;FԪR2죌\Oƽ JSePG)s RP݊F g^'q{d:*75~9@$8=V_C^hB%+ϙs F+|J*ɲ(ONlJPٽ"n dF"P{1dN7`,ZϯS6*[4 hx ľvxpKXzh]b"zs9e gM>.ߕV+.y|-[x2 &1oLZhY1}Rf X^n 8ab'6cuD|! gEhytS/)SZ{l8.L)U&2JnGa4sjR?ys M<5 :}`ПԶ2MJlM=J$odf =ERf ܪWj}dtƊscTS ZTƐkbxg~`[DE=T@*D>=A$ S.;ڜ$"Nq*vy~Wq>8@H aBfnbcO\$Y:1L4 =Du$Rk^?,d0Q8zbck^~uMShl,ˍ)$y3nCSVZtR_rHATda`kd&̃zxJG/S6?(40TcV~u/Đκtw*gDF7 u.+! &G Q5q#egBPAu%wvRb -= Gh%PKW\O!k)Eh +ZȐY䈒K+7'ptdlcnwep#P$]z#Qg5 j[9k9RD&\=8F(R=ȅ}z.Al UI*s|٭/Y~70/~@BVMHn1_]\gj=~mǬ)0- erQL,wMwD[ a3 gE @20LC,B+[SdEMہ3 hᗦP,^! tT/һO d_U8=!:)RJU }!/>rͯ5ai9]nAF^|y:5-(,zzV)eYF6wPKĻZhf^-mԀu1sy7glX'Lc;?1,=M?-È2(M)2NCT{b V%KC`DިȦ(>!2\;||x5HQz(v6|swm=DLjKDj I1IJ2=1eW6=V0n"/4"$:xG3'M a|=Rwpw BϪ YC{L g*q 0V5ov!(?x9гNe̍f~GP-߉YoIʂOds"iU;1sxݣhlrzE*\:JUY]€.e7ؗa2ȡyr$=c3WUM; ѼIzeU?G3-M&&hyZB@)pnCٯ ":3@wa@RڃDSK#e5.Bji *#Y$ [K7^qq/Y~cp)_ k6`cn/lKӱ5P=7E{ъ8I ǒ򵆂SIn=b[ W@{ae9"Ln0xc;{h5y˄z`A@?H$#hV~Z`hWU {hj-,MF;(طE(J)^+Hi@o@O7x7 /-Lr:]!QVBL:t$nwz _re'@˔hTBe!')j &,C?"W fIDה<7 3(1-ՓzZ <$dD;L];wWˁ;Y!لNY~v{jn!zagυ@93c72O+uЉq+[WϠ X&REJU Y*%`,kT5u$RWfv{߲/°V4"snnY1e! OJ<+y"3!ƅͦ*ɲ3K"yE@l|d,;˄02"ߌ-k ~>: YOc`}r (y1g+/2db{]-%%f+t#U>p/xUVt 9bu7wwj`%2neq \ lJEc8G Ro%[e;~F}3jQi5qZ3wݚUA]WHraYJ)K[*ExI4@{?+%[嚚&3#yzkf(G(rK5I,a5WYBwV?d+)OsNB[o*f韗VV@HЃuzCʖk7+|صWP#h #-ՔTw~Jܚ7ΰ# i8ʮYkEEΞd߰͠Sy}(Cj$F֔昗^/ȔQYcHQ|I clPَ9;R^h]w`LVDγ/?t_F}VZʼ'NA/UKz Ѻ`\}h%k}I{ΧT[ Lx =` Ts!о{pI =<^itutCV=!4.b&'ȽcevdQQ4 "K@w}HaeY+<W7Чeg-/C2Ooy]Md(EHk~ QXN}n뾭ݜu@h,2mm'ƽjٺDqosM!.W\'h8 c6(= nO(YtՕ@_4o-٫Ch!d?J$`isO*7ɞٷc`o%WKג's-?FD$LEAPjW 1"WYo!NV&D #zw7تkb׿xptL?FڽH;Kn6i:YNA֕-'rN$@c?#<9'hÐ!Q ֠h8AO=p 쿯-#`AlRfa .[ &) /3*fsztT= κ"Eק%Gu?/Ac {(/wZ+L&a~oٰ.hV \h0T+8(֖6FA){2,DF!pН?89N3 ֐$Pe.pe7KZUɿ|g_WNlP{,x,} sluXūoNܰege5 HÓ<͎0[ּoʞrT^çډfY҂$qTߛ*ܭ'*~$|uBVtA,-V4.`0G!P{V39nzVM"o>@LF]In+hj-{:G+RxzW΄}ꀾ 4^^>-ݸx%TX,> _=Vm&쪸Žzd(a#s.xU]~4Tb8;]/k ոvB/|]R V=jD>uȹ>D H%Z~N/q ~ń2TO~vs@ %ȇ<|n65Ԑm"范U+qb-i9 õ.qS9μCDPj"&<ő.Xi1DF "V $CVBiZDZS)Uy/BIMnTCup]W5l19uywaS\\F6Cj+sA'J̆#0L9@|P'*l T8 z_|~ky;E4iҥ 6 ̵y@HϪx*ja?9#~W|zZ@0w*W6&]͆rEfLrEAR]ԩ)X# V< yQKm9f[Q԰΢#+* 4M&e<7{3K@+NS#So2B*ߝ#g6g;a}Én3bZK{v1 3Pj(D,vl#7V C\7z\O *1 KI;=ZŃ#xy.;9RB9M^[d'D.ε) Q! q36q1p/B *-ӭe. Ҟf  8Y)ni͟8 E' 3+-IT8L)#?Rϒu[ȪWV\Vɨ>HWiX×}([-,ngɕsqW|8*Po6uTr6zGĶoUgbj:B+VsQk ӎp[}qC w)6s$:1UXi\W=,y_b& Rlef%bGwPZ4`۴1JsO;_\5γ {!pX`G=\mN\ץ8%"m|<oFIX%fi!EQK5s9rΚy]a |c?x1l{ ȳ_vP-6&dH,t7!1>8G'b"gk6βFBYD;źNK嘬c'oMҐйZT_d/=oAe6CEUzfUy5O:GӟT9:71GrNE;C)o<5PI!XO3cϳaWE&9,x4Qw suo\oIsbЃC";C9_s 'A@ chﯲcՐx?nS7>X)Mdacg$s[;+x9^+W|{vp|m5 l&۱eLHٸ6nE(3 AtwN`9@^*EJ">#]ݷIfWm-bZ ddῚϷௗTZPf2 t5S%6'a;5Ec̶)2pt|21>5]2?(P#Rdd#ޘz~\#o&D'~ds_z(cA4,ΎGDju}/]D? ͵ 5GI"7Ki|NH:$%Ǽ;0^\/D x+kѐ z`H+)aay { IA݀=bwj 8?8/uv1w6`z)]z -2ǝ"c ;)&A&gw+bwD;yw<1U!sgz$-19lI箧0abu`҆<eևt.[I2G]th+(œ~RF z+=W7*y vYkjЛs9 @No8 cЂCx Jx[!"WPS'5[^1ylrTvf\0_&u pp#0Dmr}WP83lod2rn4N"T0WwulI, }ޞZ} Dֻz⼦8`*{r UTW ڟทRp\σXlS3o,@ƀu?\/ԂSor!W2ppxWr.7T(n:' `/6fw$@Z٥[%:ʼ{jlSNUY RA`4YLq[b`8p XŗA`X|mb6$C-. öT(teMnxIRE>3 _ !Tϊ:2^ r\>_rg5\ @5{ ֜U{fhvH 5D cƆZc !LWkѵ2zCgk㔳9QTa r֬PC{vA_ǖJDP>hGj=g`=ݗ,1ş&_+1J6jMo yŏX!6NWxz(QEu~`=k0ѧ_&b.O&}J\-c!Rx(?!vRad_3!Lls s%zQOL2UX g4StN#$R`oǣ$r k=k%9[*B)>2SЍ VPrxbuIp]v!0}*MMLϼPgO/+ٴcts, Qրt ӋR/|Ǵ}S3%R5jWFֱ\{yA fU!2꣎ɥot 6]'?F%,1L 6ƣr՞ѹS5쑶L|;s85vuC0&Fd Kkv?6+ΈMm'k #eH!%zAµ)pe-2QCxow`Up s%8/)~CHX[[ 16騫=(_>J:aclӑw`!ۑ=-NbKHBV1R,(aK}nSۮK,l vb.P9gkE2_5D6|L;4!{G>J:~޷RAhlm/yPU/ S=R/@U #Bc[u "LeaD])Qszչ%8ˤJ?~+3قȶبsPPw?mb.rnM q]eآe·|kD68ߟ r?9*qM3AݱSkEb yoV_fFx؎5-ĎVNv$/Hu@(p!XA^Z$Fk_Gl;.aD ń=?dCXF͚ϋ.H mŷQoWX%,1vrծOCVmpDuPbE>t62$W+-ATn_Kbb#t*i}뫲d[ nHb3CYwlOe+NU ul ;:srڠbR@hfQɮN_>/~ȩ8RYGk< jrbꡥ[k9IFwm*3+ h`M|V -[`9xxđ[z6'eg4ȱ\3r:'ZUJWe=4udֆ/wYۮ5{G?KSS*2I#)V*Mޞ)gӅa2sI53m+HnDp&Αfϥ*[K9&sȗŒK30PQJ1­KuCUFV16Dx2m[aD Ta~4DJODzCZg2Ҍ ;~դ1wDbX2W(QC1eLfFin;3BQ>kTϛtJt\MU-vѹL%G'sQ4 /d-3#V6.LWĵ>0bFvP:P\9ո"|%O|pr'L({LiuG[>Aq0շN9Hu:>;Dgt;'CUvZ\\rdwS^TQNvEܳC_rۘA!=8۸з*-3x*,Ҟ˔R[#Ǝ gItBqT0O,RpoP[:DrG#:PD ]m7/N~{6`D$&$# di˻G^j,'R>3A\xS얺cRPB_Ք!  AK-T t'I>Kb&UOR"Gn%n8^i׿lmWԤ0N#ͶfM%V(&帏ٖ6caa@ơ4zO&v|u96蓌I-M{)p:,LF7O(zbW%>Jm-;)iUE۔+ [HY\??$&v#.z텐IX0(Y׻aEwP4L)ZU3#Pǹ(}3 @tBh4fgCHUŹX 1(i.OD_**6|gTjI|[wN $uKeQӫ6#8)OzdH޻ir?^ٿԎЫ*92tdTNcFľlb,cmf߿0FyS&SGÕ/B}1 GFB~s+E܋oF ;`d=D{{Q)б"w2_+Xvf0_$f;(aZ"}/+N "_ '08R ggL GFBCT1n֔\CD\HJ>k/]W dI*.aZںZʋп9 FǒQݶSGwbG*}_s oVDuZIa|MN[c7|m,QLyZ5Z'G u(PPMEW;< ]3P<S8J${Γ¯ vTFFs*W1kiO"']Qh5JeNCͿԟ _эzk=$=EޤJ +/p'X?$]ceΐ"ʣ;2U3|QSxed,l@|=.{(){JN@(zCjTB,\?VWE!3S]/bTB5i3x Kbs *HRw<8k]B =^WV"Cٙ x:B Lΰy]Z$xmqDCYB͟ɊS}:cdT ُLwmƆ.ɻY raL)$+kZkVXk YO7Hޔ|u{؁(? [4ɣw38Gj4-]*+͆Sͬş[eWNqA3V^6N 2-c(ҭr)i`cռ /_'> qe_I{4}αQ^RM4 Ur?}Lr0ף[weWPQ  ?zk4~<r΀W=S+ zQ%CĚbko|'WP \ 0ζbZ1p kQ+$Җdߟ\T?*2za[С1;9 vѦˣn 뿓4ԲYVZ$"Uq?9 ^ޅY*uf T3KWgkYNV xm5 Ddϸ6{RHීY@*mz 5>,f*Խ0lgC>@ v׵(3~w [Zg;/)H]q], ; PL!u}{"+h 6/xї-_>N8ó+YeޔgX Y?vW`V[ʔơB#JX“pГ#pMT ECѯPQo ~Sp-` 2nm\ƒx$6niu4mȅ?y!7)v|828 ojWBM;s\{ܵJ#+Y&t1s4\+#_UiZfnsYk*΋mf7 [kFo D;NyװWy;pw8}x1bjd*2C^U”dm%Mc GWHTF!ǶC"mO1;vg%Eù188Z'3ĂII,db'.pd3={@жb5c s6><Ъ6r `7Vz7bP䗜ii A6Fx`eMp=#EDg 1emkݚ+K`? '%C6ʬ,溟HV=4V9G ǾS(9[ɞ#kqoD N1l@~s0uI^9ydrاZ9N'A "(vKKSv8Ue@}{UU qh.A1X9a]}Fuw"#ɲ]1Ciؚݿ&çeuruga!\; ?)07wzt\j["L=םwpЏÚ49_}u*%L\=E*"8‚^p4)Vq*5S%0_` 1RkB|Jƻ3gPTݹ4} #6|K3T m^a#_{Grn^QVy3݀' B5xS,G&޿)z<1t@Ia\NJ k>O+W+$--WkOM~ёXJ*&h\B\%OUcW7O n]r=2)Y|4*tkJǃlZ+;q_ZR5Y뇕d3vst>A|DGRI{%/l\'<{mw k[jӽv k阐nd>%4PNwA)c֌m^лa pO9KSrZY'a.Z77*'l'׍?Vo`J3Ϊ A+w. /7CbI9O:<˸o(Yƪj &e`ؼJe{܂4vɷ ЫC*1Es">-R 2w-9Dp+0vxox8*a൵?vKәi{Ĥ)i29=0D%x=aNÝ+[H3 9o->u&b&X-UXC=55ts$?Pk;3pVSY~,E%9/X'E)9wVæX)?[;e S'I<[Nr4"_{ANT'N f E$%yJ>˹v7ǑiN\TNji"9)qdy"ޭ`C5 X|:\n˥Y\*D>+*GK`0Nrn!xYma>a+[ \wM{Q̄R@pމ/vn(Ţ/FK5K=Wl_N8%;C?9edI"5~oPe 0? /wdtԶGӅnns\5OMk90a.с;m;6ڦa;Uu+@C7ۛ$g(,8h)deFFxExtnGpłm9Zot|)OcJ?yZ~gNJwqoDZa"uwʛ<W׽b@W 6L>_m$b'38Ln挷~Q*-Dzw<NGU1S ir~1ՐGمR3e'! t\+(NJ--T(ի3sfeٽіo o$]_Ng."n9eiQ{JHPO:31"]!Mc|]!Ƃ|i\z!ұB')*#]+5!k eOnɗ9@gjgk::GwR(@adCv#-T 60$)M'jWoŔ~"-+Q^:eQ0M_Wx~&.6j_RtvOgd[]4-9Go( z\*F$ (O{M`V.ɸ!kf`kGއ,)?bPЌb'K e9%QLI$2vbl3Pv3pP4k~>jDs͜_h#,,U;-l6ƚڼ~Oz8nA͜:wEqx{/>sΔݲkc3y/K T#0|el)n7]ZΊ9OK[xKѼ;Nk3``ט2FqL[)yq3.ʼnHU?HUPLC Fjm0w/F÷IP'])uՃC []PcύooE%@5%][OD A*IjVZb+5h_K&S-/*17FdFXr6N%e(: g%-7Tnܙ )ZLcuyʜ묈 ^&Gbb~=U:w1aH4~KW\s73:zH>SL8OO9bB KڭӠP*BﱔSuۿ _!3hwipgRu?€C垯8Υ.nҊUÃ3pl< F 6==n$+|쑽Ghi +>Wʺb9H5I:ɌJ4dO$??uJ&ËTyhqU~l$kǑ"(KVS~.qܽe <=0]pXH#)&r,ҴIbw%-j/Ѻ>:;R6R֥yU^rDeN/6 l{BX`}Si@ c# |7D)֥"ϴ>HC绨ڤ#58g {$"SLi׃ӷH8#35k–-qy_ВriGr @}ho-Б8Y=*/ad^A{bFWT ⷵW?S?d),7՝dG'`1Eҽӡ 4ENk3JpJ6l)smR}!#" Quݜ g vnBzK`mD56 D n3Ewf6K`ȟ2KEn0&aB3:́?hr޷5t=ZC`v]yƓGd?k]SDVD>oN̾^۷|*4_ad5_>Gz7Ԭ٥|<_~}] Sl gMvqN4y$qTY5Q>u*7Ɍ %j &x.ZZ1аb (>?Nl@m )F …e>ްDSŽV\_˖3_} MX)8c`])g5I#1ӊjGyBtS̕9sM7*Y@QW)p@r&:ϒE 1NzjTB1g|Q¾@M~_@ Sjjx |MB5'NJ%ni.pR:8ƴ~o!F%аoCIȽ,Y5z(xIIq" Yx~<`k߃4)Ҋ"Ã9~K\?q 뗁{"al)oWCNXōOsa߬ke!bX߰7+7"ƛ#{7y+AQWV} խ?+XocFѰrQh&l/&-;p؊8b!U nIܪkNN2S9( [%ȼ4RRiQsPM΢JsI4'\D]>wf$ƚ.:,/lIG&d +Uw Mcp2ZPlP+r|1uL},|K;KmGiSEh^OIq'I*@K}Hc6R'u];kkCL ˈSsB(6!GQ ;˲ 0%4KX}0"@r\gk2mҤ S!R Ք7Ahm:mĈCW,øg`W4R`L{Ole8X`sbP>׶lإ8-PQ?ơ_*VAߖ(#J݊x6v,;2<k262&ۤlG4cԨ9·}T_< U@nMIr |Xgoʯp]KjEF];pW{A 3h%d'.N[D(Vq3_&ե8iN TLQQR-dosYKq LF}8i+nǒLd3!W6)LĮqld`~] ~>Rta9.d'<ܖ Y4 0/>VrHeHtՌz$o(!ć e6üC=$Id9RD1g-k"0dg-9+`I&[87/V] k*J=$2%/d|w."gNvgV1BՊw¼v_Ώ*08n×Hю tq~2M=>gݻjɀ.Er} jcBs=Ü횂lAR TZ Cָ`U:RBzsJf&&oE/uD-gEV+#;㩮PE*ԩzD?XJxhZ+ssP=FF{"L#bFգ~StP`ʬ@$#I(w1x}.ۋ2"E?ʾm_$AF %a)+:+x); 5tYf@ρ)!5XXFܽ|9ދ!]`{h7m/o@1!(jO yB1$ɗye/"$,@FFe yX(^`[j=לPɱfW7T4W[2P QoQ^NW[o%Wi$Dc2C~qZ==DӴwOXHd6X)Tu0RMff>m /o ε8]Cl_}>Q}#`$0N 51:fUh7n4o!꒕8ugT&Nx!hT2}d$dksJ.齂z(MB\lzئ~"OƗ&Dh;5\1@B;t.^ [5[9i[/scsB2rz zb%^[@ ?Iܕf mxWj/~0B<[@Bl/_{0cSoO~CexhA#Z ًvJ`N|c]ć&PHׯEAAZ g$~%E!?"Kʦ(+}N9uuƀZdܶT%Ar |Ӑ1]gף 0w|"Og8|=`;c I> Gaܼ*D"k_rwptTyAbdnB!$" Yx\Oh?5apm(bƩB\:xy.{l 6ZJ VDb@|G%5r$.Slj#/iKeU=Tjv' +$A+7[ktzREK:E{Wn}٣m xRݿj+UDu5.) ߮Nĩֻ$%1Q r$@ER?5C[ԡ&B+uSM"hזAٞ(O)͛G9xzsc:lMRzB= 1]?Y'e#HcmYE|ܗVz`+ ^T{RŬpt5+ -8;'[o}{7w@ Zs"5z5 pȜʃ{/xV6$a`ݠ6n[,kV)*$(m-Ѽ ~ɋa )0Y>@"N*2"%]^ xI11.`xvEriQkYS>[ >J,ƞTf$g Ga!kan ]pMoʼn\h<\uH*)sMάREq\91_}|KMC,·]]_:r%N#cl=~z+4}=e=f\9=`6m@G͍S菠QVU 8>:-  DS,rdw11/l<}̊$%VsyU}S 1&Lg0h׭ (ڏi\\7Oa7ni%yO{AvsB3iʡI-s/0an,;_*]D+J7h5!>N5Z'(p)MMF)]IE%o-G0Q晘[j/)Mh="?dT?1fQA3'@HxsuAݕ{{-j9^oX'w9&HSƐS?<pGY>rC76uzC?UYruTH.a |1B*z?^yѸ% Hv_Įs,;UϬ9G{ rF@m(Q6HXħq{VKfn6U d^gR,nt.caB#7]{HY|ܜnJH!սX種'VfdDk. i> hEAo(IgG]}!7~Fé’/:_l߷E|H 4 \DLl$k[#pˆqm5qځ3͵'dgUQ0`dx!19| /JOcؖa_ 5\8J:3!+[~bwm0C\ڣz|%,6f(̬j{_6ҁn|p SP6$X^tKKKMȌC\(ɱj2F_ =A++ Mz?>Ja:""xNx*Գm`q4ZQ/5,6-"tP:^$7pzkHcHH_vZ+db2 ؀UrJPeoFE,:^::{f>@ 1Pi}vs\Bבo 5KV2D~*wTH'JՑHRL^wOLW*:^F!J3Z~hWd j$At6'5UnԽf]U[j=6E\SOgp}j&IJT'V緁` @Y"^nd<k~X\~piRe^ 롄44Q J%ZζEdڵO&SvH ~QfL.%9nN3a` m]˻n*ccҺz~V=|Fs !vJ{VQ2k<;}QV9yuoh4#*ё p *yCeaC:Z ?9r (K_Wg>gxs4KXDy˙-P9UWúV%g35!mIe9@ЉIxTt $?,&b5*q=n'<rj`D]?aYZ7kGJDY{`ȜiqN{bϳMlmbt*ҞܗN]F &ߘʃcrWcO1?Z#9X|`抻KPrOTdj \yM{QĴWPn;m6提tB]ʣfY4Gt%pk%+!<'ZMY;Y_zK$[ zE-R3v Eo`U!;Az\ 7As Aw>\5N.oe.r0Dsc7 _a&O\=!M]l]P$z_O@bpԾW]RozIK3/Ԗ 0˹*jR{b9ȭUrp-pGThK8Qpۻqܘ1XQDs8xl3E.lϋO|;6A(Ҳ9/\lrf(m]]2DU˨R aR@;\.Y| miP׸Z MR@xyS2F8+eڧzC~ VV/|V{hny"+tp馥oH|j0Pzk@#7vP!$U7?|\ wVVfB&1~UڧVs1koxsOkSA+Q}<@ Q~Xi8 u*C:Ե\U)־Sms3#-^}ck=ij b'7o*5vг G=2%\_ CO;8}˾ T+Fb}OaW!Hf4+br3.(Dpk`/=StlT/R)x!OC/}P*}tVTF] oh:\[ s4Yq;f\Uۍm8UkHnӍZ`X_Za"7#N]hBd0afFt=wE3.EÇsTX;ym`& F釵?BCsoRFqIqaVM?qws{.싎 3 /og4 &Ľ }"!#dSKHLKXs~-(i^\ t+q-7N MQ4'_U>hLD/k+gr8WQ^|_TRG]j缔u% Psh`8NHR6 ?*"RG/WT-'R GQI)|; KA hΉeW]|M=SQBi?[j1LvꂶblZߐ.Ɨ3K B\k2KLWb*`v3 ksG(kz'qpDv JD(={=HfR%F%'8XLl ;. AM2wP}Pw驫C#kL~=v3ķ,(oEY* cJw> ; j6a\о؀9z,#xK1[0A"+ghq RvĐ!B|9T5+(OI--T7nj5y;}:ʹ1V=2,9ҶksL6wD:xm -yLE2أ+W ťC^~ExLeۿ9v:F$B4ǐ9lEe/aC46, ﰉn5E3>-J8e9s"+ :h\֑%̀C3`E]s5ՕJf|ΡGw~)xJ2NY 6HjPa OF,4x;#Y.5w71 gdh(,fkզ[Ck/f糐0"/Q}Ѝ6-P]D'I\u?.c^ɦ"0&gOfXrA=x n?EoVʡ ځ extlž',죏c`x/s֟7l6 9;mh@$S . _)li%-魔nT*JY8Vx2[%Mϖh/7qY6k.J"IH~X_wW"Cȃf>||QR]F}=Q #]ZRwm!%aڶBKWe)5~)1w(; ]}[gāsI|Hg%wCw)RI|ҷPV/ϓwm (1&ǩ_U_UBO>3fQsLϓ1m2t2*%REñGn.z >c󵚒jYB ]JŁBg\ff(&5YIݥ*$L'XuVx*M85;d<i#;;C*|[[ӄ~NRkkiE9;R"%JF r8sA*^KݬV9yP[o1~Ga<>ppځ  bPݰpЏ:,!PdG 6I~]zO-_ hO).ZBڮ V苐JўhBy{46L8\,;tB2!Un +UwVfom pQ9BDt6ud<""!4p5O ֡l`vBZ;6Ȑ:uzDgJjl'a֞OHJ|t+|$Go~QV)rkCڧ: mU-=)NZTgWI9zɨI(=JrR&WkZN۩ɅJS Su֍+s3A'dġM.SmV'sIhzyj)=V¹;y[JjQ)B7s*@$k]oPҙΝxD8C 7&E zgDs&ҫzث8ߎ=e&ߥb6fٟUi\G5/8 Vp,>2VGf>qCX._Y;qWNɝ ј p_q߮^BdƞThR`9Pey bsjܾlb_W)oAVO)`Bn‹ԢjxP^۷XE[`g>{LvaF #q;yf\sR}Y!Uk>՗& bӅ_RsLXn{v]wl-9Է ;Cㄡhuu1q6 L w"/3'50S46L =7o۴9QG\nP3 2E/`ÎDb#Mh(<% Ek8%`]{ Cs3w߻eF6 q+O|b~Y2E"Z̓XqTz.єrp UXP[ ]Je[:<~gJE. F̉3~|(m \n+=BBkiEr8 ewֵ_5?yٰғ{+,'[NC0 u*"BL V|܃fE%~sc[p9{GwDU<˓C&l/=jGf5{[kr 4u]69Jm PBz) PQ )i'3#w P:jP)QŖ`tU6H57^іƦO~p.s?t3H~uV[!SW;@AQ^.+zu x=g<͡ҲKߡn=$ 5;=ݳ;r1s@D?\[mB- 7sMc>)"*eX5(ʳk.tnDu}VeB?jy#oſ{IN!:7_5{&#QYlcj4dkfl &}uG8 ((HsAIҵ]FPN/xB%gx-L M/3EVSo?ң&O}B>U`yf`Ʒ86GDL>)'%2~]5ձH`xM@!8YSj.Hh$N$uz_gZ5>p^RB<I%Geѣ\. ϐ݂?O.Y2P ss,AI=t]-r}z/}[S.9Nw\&c1J,p^u(SSϫy MqsH >bm7Yt]Xh|s@6]p[ ̷aAgJ¿}{6$}cFZs~?N"sNCXBF| )dN+7̂Ű9%Bmd/8JdߐƞX) SKq$>%z)nip5x\í!},¢{`Ѝ  3bD<7rgw ]>3M=_?-2iGgV`\=?-7$wiRZѥjE4h o@ bɽK}:f.\dWL&'<0SXBNhH8HG]EbՈ7^)BE'xfN2|UoA⊞"֒(Hw=i+M(op,7tB^u `jYsȺq} uql>p[֩ފ-=g4?-]3ek lN9v1MP-WOK} 0rt]>0X?W̎NUfSm=ȊJ)U P}USة_8.f25׋nR߂ɱ`^Z1Mih ;I!0ŎI#s3.E-RcVF%VyrKtaFK1[^veK@ )@[J\؅@ c@:]C&nsH7[4e#B }?vRMuo#&ً$O<#%Xe>]W7B^x#!'`&B5$?3&;@lD/\^wueR;ҽXnNs0!Xb6ѵ#02R4 ,l7l]TE!,QF)uZ+'-`(HA[,E^FS!"m#}ł\Ǟ - oĕŘ/) `aNnͅ'mFV..ŊNx Viɬ@5PYQƑǫ:gX(7䯾O3CQ-lD5S{,fw$[(Emy@GO')<"Yf %E-"dɜD/r@kb&~>eّ16;' `fK|dcͿyR8g;sA̢nޏʌwZ b -Kb\>c\WziT'=\Z!%IJQ]c*oib2E&dtLpD)YJ!#W˜4"'g η=i'',s\u?DA:b^rTFpe (C}LDFXr, "YX\APoÑPhoP`HY7?T)wxJa "S@/U%q_,9/£#=1IYNFzD6: 'z) h2睅ihǢRfџ߫ ^5Q9-ߪ/E'ǜLᗶg"(Z"UcĎF:0ωg]HY2g1e*_KW2@ߵJihB[ 0ИK%(Z͚L͵D%AL̔4PhdC:!7->Q`AN(h)6V3~HખF{'|_ttNmH0F)IJ73x+J5~,T3cᕘי<'L '-062~ۢV4g.?° 꽼8]k ^Y$cף@!?y0TGtXXg- rfsMi>^:sc#*`!C+x8I'!&fʨ]ɊY70׏QW<4a]9i֡euuS+V,7gt;*jKdϘz0sز@R5+!f \3;\t|zIv׼)Y('uCt&r8?_WÁzP1Hڞ4.0noyRCuH9ŢKLd!VJKp!Bv(*FdI iR@/d\@f27(xis52c%L2 {y۸5hxkcrXSe Y- еO俰9BP [JH Cr~{MP--.shs{`ZՑ1N{o;*H8=[82B]{X%[EVt[HM\kd}%e+ϮT$I.t&|=Η@JدM_t5zC*SP@*ՓơBZStWJw9%r=AU.px/܏_sH{>m,1̀{,]bx6'g^:w I0kVlOT )1] vRuJd"y'D쾻 ѝ:~3|q<QirpxZZr6WV9Si3-k^XZe!.ާ$4&9Cp-MB0whVx n[u)VIC 4>rqjS%ؒ.K 7-4̿D~RTSѬyjV4쁈P D e({&Oq8*-Nҟ nC;#bQaU@;P#Ёxh!c3U* C _Kb.WEq"<UD2lOԗSa#O!%T4ƘG 5֏2>xV %pU1$j|Q%'W~Ϲ1*H ,E.7)@l. (sR[/ Bcw.{m'4hIz1˓V@MgoP8eg`Q;^ؚ\d $nէn"Tza7 "Rg|*E\,>rl+.TN%i"Y#ի9%%__aNtmV:UIdc{\wm$ ist矠G4[axiG dPzޫʁ4ZV29e[52QP$L2o.Lq[]9.(ʱ#D|N՛' Psa>6,6Os0e,)Q$E'kOLyrus p[jmV%N#XPѣ67|MS[KY07+UDW> )'evSY:LAA[1`OFBtr}BqWXD`ZԭK_iޙ^iтTR:j6^MB6N|:r طX Ge#:/Y;P.^[8E[<15;fM$ T `4LB3c,wוjaС64qVGYZv5 {w*l%lc6<9J2e b)=k7r \K,u&9:v K]<}EeqVVOSmE`;0aȌn/vXWQ?vb^3uCbS&[$X.\;)R:PI }Vn3Ec 5CSEO;2h|%l H&@R[ kc=.5 rrN/;J\GGFߡ:ыZn>{iǷKi>B0*(VebZQH, .!5? U#;\0 m;Md|U)y_X&^:͢_<.[ܗuu'EFQc;0}(D#M΢AZ Q)@f/d "ܠՇH[v!d zGGfӄHK3sCDUЄm3IC=DKo$|E~Q ƦRO[T(`KZ mn}NF'Č9(8vE( w.V33l=3]vv}$qu67BkT-Xh–)S. S>pX\Ul;hM -^p̠$U ,Zqv`|qdj022Ep( 2*;nun+Z2OFg)#I8LB+1(gz\K R.^yL"3n[h :(X{0˙\kl7_ceQ\c.R/s&| =u)zCQ m2ÜB_MYNƷЙ{[vHo_NG쪀>4A^'xJɺ8͌Nů̺sF%FEMrlOQT'&6V(;2&LH7G<,|t˅2MN~O1Mbߞ"e#9/jA=n0pl6WM_f\THﴛ97 39RS1ݗn E\~ϺŅ}B>0$BÆR[0-Ts&`L\Ǯ4n/` :#O6J'0vmv<>IݫNtSq2AEJ)Ѷ+,VEIsiONS%( z{Կ GZȹr۩~(nbh8 oyl죥P}-J(&HW$>[:7(u~ /MbX@_y(y,^Yr? H0"_|; ϕd32ge'gġ?Y|/1 ӫxp:g?2si'"أi;,ԥh=r*oO`h CY"n-S Le?l7)ln{+i>nȡ UG|ܲbi'MK>"[ʛDz mޠ](VK8/Mdufn 'NM9&{~jh8v 1cFX j!xk.0m8buF'*ba ϐu[K6_g| )w*AѢm0{Ռ@1y)w`f=RqJ-/:ҟkARxL^y9O4Ry#쵻 8 Cx'^6qnqƋ4UWԿ;7"WkZfo[ew4 99%gٓZr7ӾVo9f)GҡcM.^DMX/|>I<.tBY5e3yN|qU|۹z (Nqt' *cb=r2. \I/݇{щYLx+ۊ:l{ɻ"zД'1nMbC 5uƹ.Noʫ!3'3ظ:jm֊Eg̏BHOg/U'^fRaY4f(Uh8S0[:&Q$6P;ym֨!}H@V3 -yC٣ s ;oԕ=#0)mw4οsfT:Ft돇"[Opkfz׿_Os>Kr;B3hPcdx_Jᄧ3:hjҋjiρ5b6 yR6 h^W\dƐ4H9;CZ/Ao9%Hfl"eps;G|ǓcbYfdsR>`/nN͛bюHݬq2<7$ ;!\Zi^m"߫0io/]gO Xg>Uhi 5?+u#ʡ#4QV8?2%RA)@W YȡU܂TهQ' 6D(8 aOvm+K=JϚ8޼d]64K\{o Zk+4\Vnq>, } v|ݐb&l/04Bxϐgk3ZA0S=)yXWucQt;S0t{}-Z^>ɵK8'] 3fnLİ?Qg( 2歼,a C Npn\bq@1~(,?KA_ܖb@Hfl >w"ϵvt7z )#&1n yJI 7d'D\adm_d aY=ΚkAE%x̒npb23f*D]PgKfw54)Ҵ^o.Ί#׆'FA1Mp{ 6ԕ,X׽ /dfCR6!VSG/$$uK7ԏ^ln% XDiIa. q rL:Fsߒٙ~WUy&0t o@`9ݴ&YU BHiQG5.#2oţk 9 D(=(%zQq9|)WE dʷ'ʗjBLe]dJm"ߕgC0AXдQFV6|Z8ЍCqV)=15>X}{ԏhr$doGB(qzfwNh-=ǽ+19B,3C$i:"[J&s,l3WyrEg9p2:B("Fa @IYSz!o-,pV76LO]/?I\I*~H~c`z}Kx5d5SJ oVx-fQ Z(F4eidQi8(6piixH 6fNolW%;RCzms2~0PAg:#C=}2f-gm3}]'Nf ؍/#vL~p/X@@ylgOIܼ6X^p =)vU1ʨcTHld"tY ag,O]~fn8sKaZ;Z͛<#JoEnJ>Gev*kN,Ý< 6ENUާz \h&eg?WSi 6[wF%*rssF℁ Mۚ(jRĂld_|pt Z;=}8s̽ Wa`3KE1 UEϘ6J Y|&,xi[1#ws-. %itc+uf$u] Zs^rBTgF AaS9"Y22u [4B;/ 5f缑%nM ʚ5uG\!_)RB) J9v|^סaA?bvivINnux3k1J ;"vY5g]A߉`"#,\nd(")J6=}k\O WIJcUC(e.s'$o]}00jmGX7' PQC0&oKI;u* 9ߞW"᏶yJ 7 OvxPZT9ӛ<ŷ]XY\T* ,ς~"#v'nʡzpW,YҤ $ybՒ0[Yr\ agi θ"kqsi0q1}G2j?1g0y@onu4[D0Q̩[ ; #Y-͔Sz6Ӳo0N3oWŔVk=aTzBKۿÕdY)$jB؊19L8RK lɴr듶֎|Y"J;-X/)DRoor\=( H/YP4wǕ'P CբtOCU0U)r$&sKݏ9yF%O39-3r)ɗJ]uURzz$P;2}'=iq\Mx)_Ibz+!to.a\K*Np䚾b~v,N|w?g!%"$3gw<᣿}cht~.+d[` o[^'aWJk%uGэvf{qB:8j̨yf^n aP, W  X 5#X)Po C/Ĝzja0A6zP1c:SRFFKwḏGv& EbxӭJ?8ޥN*Y驒R_wd$H%>(NOV[23m&A#)qNB6WܥbeX4!QnhΪ\SP YvIޒy?j42vq^#ڋ3o{tҬxe Gv=j('tS;hGrN؈dn C|܆G8k\E 8z wlF&9ܤ|wk%:ܐ80ֻ-1'v, hM'ih vP.}XաTy]TbE |[wd`ZZoh&+v+*~i(.$ZiGgR1.xXQW:60*O͙Fv 6 6Ե0\ 'Rr0o߀$,J'5fhwč4NE*EANd8Q6Ҽ< 6$x+>HNANzb5i%F%y }F FJ AVFK ].`s0G mVq+I}r_( @;L$u'k񇯰'І3Z w-Vi=&LU@"#KTSKBYJ~:qOynB| ,.:_8xXEZHb4UE'Tҩ~Ռj g2 љssR\o Ra+DWsƗhc^N,"$@ Nfc(KM몳] vHy0Z(+ɵt3O ":tH%)vE'ͺƔbm.ds9UUB$F^W+yNh9_7)i<X7ogzۺd8G9.t̷M}%p}_m˥ܔ'<:A,YOPB᜜ CkЮ +;>8/Eθ"?&TU`4.!m?JU\/HcX[ t(Y//u@"PTΉMu#+oׂ떄z(7v[OPە+aZμ&.dP&ў3 3l%ڊ*ruFKBՐh>Jۡ!9_ѣ-FHAhix5{!m[KP"LAvJH;ЖsSc162(Lw瞼JoV+L&>j֌>fFfhӳQ|ЅlNy55A24B5ޞ}>B8io74Yɘ&8nG& sC'ܚ1Ν">{}QAbh[lo+CFbԧ*<GIi xCjKH4U:&+P۶@\sƸ:+K@R6䆐;a)1;@Z]Y'DO|+~+X t5RR$a%ZڍؠAL6wUHPi?2l!l  SLN#'ӃȡJDSv\ߔ2e<[ЍkVoL{EOq8H<q5?߿cX&>ř9ZƦcaLg7!Dv.K'ݹ_$mK&c;X 9ei$tCG[x~+K èAx^)@щo PoG~6 ʋ]ﺶ9ǎ308"IR Z9!:t%ҮQˡSN8)TC̣}Z7E<+.k3 zE1+5p6v^Çlݶ ,1aX_/-q%ǻϋ߈|Pʱx֙|}#N9Kn*-r82ꡡFI q܋H r N6{^n5Ăl%{צ[8ok ڙ :M942߫ש.YIwHα|'Aԝb- c:!*4Y)"in>MgkzLZK2$> + nV|aDF]c;-~tU*H(h6Pv{$Ή'5!Rxq(|6ƨ鰇L]F\"Ǜu*3KZ.4 $ {t=;>ZtI2ufnoSOŶα$65gI^Gi•{cE%T㼲߃ :ۈ`-PiY'O^vkx)ƍ;ٙ5Q:.9i/Mƌ x`h98mԹLĭdSpY\wg+ %_E8s  s;@WnPv9?|A:GdL]84+k~qXhhDw+X*A协/SOZ-VU L33y.1W*%M882Ҕwn:EI9cES0AUljWV1+rh"@.{{e*өG$EކcɎHq]y.%Mg6VF- w-puAR܏)SD_iOnj"%$[7E@]6Ldȧx$"E4bR~.MݑɎޞSlx5-]Z3`(ew)Rwecc?ܟ?55(F$ lqHxNBSNge\9#uKr=ޖv#9VM[.of2vE \P& y,  bgcRAjkM_bKͿALP^ROӆ%tZX&A+a_r #V;Cq)vJJ B1u67|ff[1![t[ME5 a']KbN9 q/nn]" y¥0lB$)B$2Q!p&p^2jyxy&w߰Lr7&>3YJ9ug G9l̸X-CYWv.`0 ?JlGsDZ>.80h%Wt}B5Jw̵JɵLY]/X> f{CCEa[Q_C(!Sln!mlh_x^,L(_FIYv^d/=SxYAX`:ij(mB$LsT:7Yz=OM5[.q(;B*Yi`yXpt{mOtpQtdŋ7A;q-NlB4X@#Xzng98%}HLߜG75y}ì;}|`(0y?(WjX̻n(+Q[ Mxdl.;i/"3iaRK-S͞(}j ī sRYH@(w1ƛSYȑ]c1jn e$J/%庬$i,4Bۓaf~`՟;08\rGD,bNAn!ҥR'3EORezİV [ 캴߫\riZ@f7֙F>PEˍO3Я<2T\::G"vhIoH kiMdX꺈=IY AP2"JEC̹*Ucjb! BBxS:HPkyX>}i {kZ%[iH `)Qjk%T0͞ֆo[^G#Ш<%k8+!a@ZN>{ƋŽy%Q :TXjEq'TEQwNA{TᕇeI-RL;Q-BOsNN.iIEϵ͌scu=MϼK[R\K-LL RJuLA%u_'y;[Or4b|hx(CŃ۱ g $edn>h셩 !"A@6>`6>bukD90iC2};~,$>oifCws5bT4swu 3V>)mg0yeH{iD#Xp 鼻K3q?7-mOw>*d!4AtLznM R2۝(f>$a|To{Ƿųf}+oh[)_n5{[j}TПYi%bf[ݚݕ Fe:G,%ܐesbt=H].e ?|WaFA^m~B v,l_O#9{F'*(H ~Qy+{"؂ܦ*ga ~;WJ ^ C r7CIƇ"z.)D!}3q@`i~#LoSd$+ 7\RUbnw߷~ߥܚ "9!S%DHG=ʪ t"Cd0.hnBT)/u\$-D?9 =xkJG1 4zh#ZGEyxb*e]_wjU~fW=dH `UĮݙbq%L#)AʽNQٺuɣ9zID !q1 QV3,TJ FC]VU~&!8YF :[x]V.cG^v ۸D*95ZV&wo_dv1r-A<# 9p""(H˙L"XQ3`Z/.ܳ@S|E%%ye帶WeO6K?iyvCmݜ?:دupZ7=癖ąy$z#vmW3WlgM)\\<jϤ?o4@[T=|xK&{s2P>OankX-x]5{g:a6BвZb3hu hU!~\ơl2@ҷ& C~u} dz";PHһa§!I^' ^` 1jdwɄ7LWW1L5 qREQ/r`8 ~qg׳&SIz26VM U+,E%g.5oeLe=\E;-ƟyrRZ/@Rܮԃ,(=Z%INb@7~jAi2ZǠ0^. `:To"` Gi5meDϴxH֖ m_Q0kdT}KMZ@64 o߾06 tiO׺ע FxVu鲭 ^;ٰnA)vi$.0q_y 릢TL"YM\xj6AXUSyv?V/Fq>du_CDM7:=j% |Kn@1 2*FA9*$ 1%/X)x2h8̯{8$ca2d*`4ou 9B|K}%p!٬Z.{Gdck  ..X?.+ ǯhxl@EID#`oP]NKKx/MӌB&#A;/CE7e'mv2A籏i|X837Rߝ  @柌8L`Vi\Q .>?I"Bl_ϲtBmԟ勘 [O^=h8'm9]fMկGU 3()sL'|(hA jqg.LLxzR,< .Hxw׬zC3ke'M/&,vA ۗƇd9 W^c]OM[VC^6z[;mHUT.cBbi&FŚ&BS8FܒngT; Ff9ԣ"WƜ:CAK֭V;飅k_k$0(։sY(5iy)Kz&p;x'͐nRIz!9VGJ )J6]6(QOD>*qdt[B@ϞZS5hpCvj2n^@+˯+Qd':xE sf De#kw'n"^T"Qⓓ4 `Z}60|0]eŧ  շ ]N1[^@ݥJA7qևp&ZZ}ۮmQEuag9deȘyv-ѷ8`Vz`o jgmVAmrS,𧜞Or~lۭt#mmiƆ&kn֎PMm+|v'SPj־PK7;?K{KdVu߮VI=N*xK)w&p09[y{ b) 6UH0DBXʇ3JU)YmNBC*Ƽ4N6GO'A|ćޯh`aD}_}N5rp:$?JZ ''MQs$])t㩌2L_qEPVWK'a3CG,*jxЀRVn>~IxTNraM}U3qyvu5#z_ݎǙ`ksTk9EYpUt|pL[sˣV(0h~ tYd7/]Լ:; iCbmwu1C) 5A3!A35~ B\ e2KHc<1*jĥxw3)7]a<H@k|[r9^)T BpnPٗ%5T^ʡF5uhHYliG1]Hn1om~0={#<" OO~2; -sf&VIJTp}4([WDWoI ť1!"NBz& <ӗN23V.[O;-0 (uЋoȵ!j3"Nz*aÃXۮARBD THPLڐvP6BJx,eq˺uE yF%'+u>S]Yhߊ ^JPU;Rn.#PL7k-9f6#lw*H,0mTF`KƪH5xVAw#cSE25ʳ-7Kcg[QFp̠hiuZ ~ab_o~LI9v JvvN'Iiasz&/y>x]*S23}WלQ_ }[Rhʉ t=y3N \ףN43=C\Wk]WAx4Ub͌x^LK2DZʞ.KWS{mdQ7`֪# -A89c<"עk+T9aS;"$}r<\F` ਵflD /_I}ʻoP}4dgjA+j\ ;~h oKk[̯`&i;ʘYK,mm+s N@PA\_`v3¬M܀4)U3EtDw?߈SjM~Uri-Fe6.*fbBhi=L,/<iߘ\ggg*EY,(1Z].N+;Y) eE=!_] dJx|+n 5X)B;[e7DAi,7xf\\aacAfDz> G(f:}ji#,62&W:/g@@q.qD Kν >̔ݳnKO9<$sO*oF?u%oZr9Ll~ؽ b \78X5b!ɱg$ pdͽQ`/YF|k8i%Vmֻpˆ/HqΌa\C~*opP0|omaiȭރ!АIHD (Ή^𵩷`i Я$izH=`kRG4ZŠALw7s zEhw]\28|$AصF [R3kۢ˰ ("+ĊUݼ襪wb5 ;enU^0HKL7oT?U4L&S+ro)7zxT9l wƱs8RQ#U~Igbv4 X;7N)~@n ³d~a$sMj->98O~kSȏ_ꬾ* q5^) lq\(Zh s9bg hd-0we_߸KOr'g <%`VPӳD xwF\pGjݖpP7|-(oݡT{+Mmv&ErƅIn}veuAw8> YqKT{zkd@3G<n{:v\=Ht+f .DR0=_ƈ`T\O=e /f<qwXwW-r=jϘ:uTtI-5 ~%-Ѥ ȕ;Btkc)gR>ܓ5>7xdaq1'J"鬽|0ғm^JG{\m%!y~V)VsiHoU|Aϡv;Ch@<H;m7mvpI0٤&G(Ifc5$qG('t@}O}LRs8'KlFd 3!D!1"}| ( WV,@,vpYGFEQS먹zwڋB%,~іVFQ?9LtkR0^ZwNWC"z̽e7iSqEOAsAO_2%M C3bȚTX9oK\g8i[7`wyV$zqRYeE9xӸHNܫ'Ӄm5lf5r˳1 VUeqo"̬ Y`>1MX邑KFkaT @cBT8ԉYL4TJhv_@˃W*[ ۠n0ΖB*ۚ`օ>zGoy[8H>PCn=6]',lp9VDs n*|}r.NbŸڸw7l C ]eulp2h܃䋸63J3>L%: 8>;][5>Ty Et:?Q?U67wӵZҒ5 u[m@3h󎭦$;9QA $X7Z?RrܢQu!5ݎviL';'+L[H_~癿w5nw[u*Qɹ={ cb+CsԑceِZM8U4KQ'ע]dTFYs;ܸrvF;lDe(L;!zt dw_]N摠mP̨ڜIYGHh,ʌ)Vy&C ~u P =p7APf% Xw@Xӄ,Nd 2ұCmX:2l XC B6Vވ>ıWg4?Y@+kJ;砎r0`+ЈgZȺ*#N𛽉1ue#=^2}x\x8L:p6;4 -^[*7F5Oc_nIleNwa[~+)2|.%&UhQKtQ"8V7X-;6!i%_Z|^|)7!٘ oj٘֡t}Q` zYQd)*@>./c{1o _+p؏.ȱ,oE^;F!`Jhm%0q0)>x9sV,?2XZ H? >O4)"s܌ ի .KeD}s?XXz2rgV"9dXQ{*VP\: "^6)@!Ƭ Qi& [R{^EÅ0-;od>Z\'x[iVlaD@J&nI+JyV6f`h:+,ZZ P0l](n-ܤ 2<a6?1eIfO#h:&*0 H#q2D|D~y$^ Vm[,ryz0x*s /jRW'\[o$9P78H-)?m'Usk\4߀ʨl[>ʷߩXqҦgzN"bb8 i TT} "^SJK$EռWUAu:\lGv tfŪ fqo).?ɹ`;gr Rp~u}4b{KVs~!}7 -:6wE_SS%3QO'OgGNa0E(}}niKc&1HDOT-$u Z/?P`y,_M- GMz;ww"oVɇGj@t eK+pnאwU3SEMP ~ZlJPqEt1! | Lf gF"]˨l|D8}CR`_A략`ֺlEfo]LG[ \H~WQD{[X "y!D/O8m,ms&N(P6b6È#%zPqH` `n_BUx^逈`+7Qpe8Crqlo (4mi?6Ʋ\#)0җ|ÜXw#߹hm5_C(ͅ4Tkp'rܥ%;oUL]!J\z4\6wj+(jm_򪑜SF'"IgObp{ni+ܘb~v%e70Tz#0`Áyկ'p: Rғ k`5*IGt%_Gl׃hOQE÷t>:?`zH7X_Egozr:Oy7mZq#p#Bd|5i␀#NdƫjџTy*vU*I Iz"#sCuk'-(,E[4wܾ|,e)tTJϰgFݭH]޾Jt1X[ܮkG晃[S=i]1*a.:4eB XHV(i@ 00V=Qk+|ԃ>P^e_kd.ڿ𽹸Sz-67=Uݱ נ/H= sW6_e$@Ȑ G&`CPDHʺO_~ː+)ȴ! qg`#{O[ȃx8Q$.5 uCv!DS#4=;Ͳ-aߎBF R,-XMG~bmG|V82YKvά^<Ԇ 0i-]vp[`R*'uް:lDSHe% cm}F6%2_[kHyWI28nO\?@>Ut*`v7 TʮӮKșFz.o~ mw eZ*iƳyPdL6x:GőpFuQhkrĿkNarހ6r+Z6ieo*=ݶ}H3OKƚ#!v͉z4D2B{[aנ [+@ZzѠL4k ؟'bWR Bܦ&la;*1(ћ+[]('YyB'%S Vx} ^yPh'zq@1f.vk5f@ }/Ԃ2SEuu;$أLN< 4\8@CĨ_ucɸՀ~ Vb)2\v}ޛ::̿vAg3hZņvUbUwhJTõYW|I,,uėA3;8 |_&THiPKHEf îߵ}!n^u-&z NdreX>-xƫ6)/ OU4.&4pR1PJ} xnMMGLIPǢt,H(%NS~Xn34IZdw&gwe'+l#Õ Ғ6IQj$kKXŠ RR4f$?=~RU]ښ gmaQzOmE[F%RtѸDl|Lf#6ۛ\*oS9%!|Ӵ3 v('Q4GcnXxzWO/BA"OҮ[E{\L".D(U-<&Cu/0x C]IE[sN;ELDγ8??W^tXVha#(Q,Ue(À ei;n3{1`4@#>6 =A<=jFٸoO=p:st'0,8+υ/}hWq`2-&m`kqTC ӨW> YEl78|;Ik뛟fRIΚ_p1I~cz6#ˤrK/S"@p[8w~SZ7pp60[%LER_i»7,dp&'(4;"YPs:q;Ց(UkM &0&P=.ΰA.{V=k*(?5eBcnj4&P#O!s¡I'w lK#ƨ d?tXdcpS-JT4_qpk?)|BH,%/cH qA6H\lusc"F<4C%7Ƃ DEp6<>Hs#f\cpحAx&rə'&sHUچ(Fu=i? )0]%&kfmofE/^%֝1=1uk"(`a?eEG"4ro4,즮5Z-Uo_h`47['osc{vg/tZkiMA],Iv.؟ Z6"Aw-Y3mXAvt'JtIԐ33fw_gV#y%3#BOOfm<;58ϱjYIZ庂N^2!bl9{ʪ-ΰr˭0QJ <ƮqcO@)[h2/y-~#eE>0%-e pE}ʚ %_z9AeSTD>WC~3Y?CPzje3V* }[t2z]Cp'KIZ@:lEjԉ{\B&$8ܦU(suiJ{ "9 ʯS*`,\dA䖐T?*?cyN9]'$ZrXL.T)^ w$tk5xHxrOQH[e LSNR@KǎM]'4vk!}"$T LB0yBVl OL?{n}Zh آGxƙ[.#eW "aMHDd Zh&z|qEOX{@=]Qb(&h3{M):>>{964SրDP+\yXihFيEJU >`7N2{p QO}`6-"3vů:%&EpŘG'$ߎ'wݨef!&8⽦67"*cH B?0)̫Ȭ%J?_Jl%XeRFۯ}딒x'V \ ?FrďfZk\ӽ{Q5B*k2Lp#Q9ci >^I­:iC=Gmt^LT͗8<|=#AjXk4z]=JY^B& 0M(I'r![r=bt15zV?7MU|bq#I|gYD`& ÅDss/R);l5K0qckJo-(;+Kn脖 X?4rm2E||[UعfĀƃo7Y.\cI'cVjt.Oyi>BaX9/2z'Q՟ Ѕ f65)r"5Ƿer^fI_~4"۔73V:hmZ~GAW y'pordעWRlӞ2qwպM$QNc[d&X_kU}4I{hA vm˖>H%E!k_XEq񶕦0w @"hZ;9%QxO׏_'a\V3*}X(B*-.NXvYh9jiҿ4ai "ɴɞ`Ɩm]5~O%*0?q}Z 7192=/Y.i491e#.EE5JPcK mGʴчA,&; 2D&Œ5FO] .I59w]r d 3E BސEĀ553%DB82Hep[]FqLeC(6yk@lF0pg_: sܚL M6XڟGOxj;5xmxg*&P%a8-.l2$_PKR?Guَ=GqĠ&H{WZUUɕ#ж@3lK<*W}D=5{ 'fZu9UvZ%?JtHwLRSoX-`@ a| pVkἦ.MW"jWn]_hV[$eكp2 ,s:?zQ1ta@iwwC [wr tP uƉIcYIw:*pBxLi^}7\&N7; &`)mx25^7:A"< f(U+#PD4IK>$nE%E` ҃o<6Ks3[L˽(Ny< laT_HB3'V%38GkE d-᣿V)[sF9t 2Ȓ$ŀ4?qe JEFNʻkɎ#"YW~oލ<49Aj'ٶljD0mچI4@io+w/{p?EMj_ExS(7uJOQ(m3`Eml/%.l:r j@7JpB.KLUCnqdim"ɱ[#WN))  4̛PSS|(m_MPZ~aW՞ $K)sF*Ef}s߯cQ'U`rO4.|+vR~|R(|ns٠glJ+ԙ*wʯ<'Rr2D}B+ZZWZ,p TW5 ;T)jE0F"ݵc[#%itG傶HEjkر wJ"&CM e^yHttcM:ݍj;TY@y ڎq~>7Ͽ:d j1[KSD;[*/reikʤ>fEZρ1R,Z:+!$D9O&6"q+®aNRo0_O_dȜ+ (K2,tPX3I+qu`D1s[Ӗנt: Ʀh!΀|MƬu yiHT"s$No!Q *F/Wߥd'3V:S1doЧ"Ĝ-"O55-n􎝷gW1 ȼGkۼM-NJ?IApM&kRY0r˷wׅ 3Ϸɖϥ?R&"BaX䨭O+"ș8z68xPH*uX2oJ:NZ*2WaXΝTEж䞸ŀ-CݞhgjѪd5% Vz{WQr=O[:+r,2 ]VTe-wEgir^]X w*܂uI}|n%Ta";:"pc$\ ΒnDJSR` ^./2Z,wDQ(y:Ip90٠E}.ua ~hh/Ipve.;voXcNL(p$}c łCɠ6 > j'wSw~ ˑJPWGS: ]s-馔Ȉ*^-Qܥ >{:㺂-Z9Ve/Pk)Y(ͅ5^]&pjCcI>'at1?R4oj]he'oSVgjA418^m5nb^Ǚ &w{QU>!ٴ$V2"v,)2˾μRUx(E#B3r:rps$&ŖѾxh;a~9Ѣy3Ĝ$z #<!ڵ$&+\"j~+Go'DMd$K#xE1V7>:@JM9}}Y<4ǘFosm݋x|A d&\;%53ϵ! Cg;Y,6Үz)^&^k ),[nmPɎnGHd*mRj1Ǔ{1\? c82"a3V\V .yL.he^<҄^9zqNG>*#6!RIg o"W7rĊޤ )1:rLZYGḀc#)ۤpvrxPZ8|p52q6FjLbm"U4 R3ѕXnHJt7#eՃf'썪7ژG@-{K Y=0`ܽ}:=Ќ(b hv)!!Lnl.='k; % ^|Zz8T~ڲV~c}ᴫhGi:kHTSS%3($dh' d&I3qӗ9 9PFt"5+\~c+rSt=aOkf+칼c9_)T fy΂a48Nk쎎]Al2;4#'ںJe&˳P`h@hizR?Jq\YGJ(h` fIk8@GYAAHǿF8V񓳕;? k8li\L{jOVis4^3okX,X%93mL]x0x-%JYµ: qVyf_V·{4kPڬ cYe F寿/R$LC+ ]GT?S2b,d>eU})h./Cfq㘀 ,&vS1̅xaY>L`Dלc,(>3D-9q%۷6SXf蛘&$cj3Z[.혐)p E8\vp{f'h9i&@曏ւ@p*Na;EiwK7dO6c7ܺ6 p%4}bHOcR\Bh79 R$UU&BG8w +Ja}~rӵ$}Tv=5I7?i2|aT;sKgD:ԽPrygT{֮:-$ƍS]HU[Jgs7mRקؘh?5}Î":,!ab;qPYn[)$3 } tBņ[rߔw:c|~ذܾsɎFjv5uPUD:FAw'nd ` 2 xr$;Ng-Y̸%-ZԎOOA\gz!@HTd,3t%z*Hj @Gi.)(1RIjWfc7Ō- m Ͼ_@.2@Q6C@zҜwCc3*(k[*Dn}-/?7%cN U&;S4 D9M-,ҥcoM!.wQ0oߕT֍ؔi?88咜¼4Hv>9>om;P?43 (1)Ui< XT>ﶣqR3+J_rיϷ(aY|鴶*SWb0Kcq=㨧I_& p%>WA`sSB٘4"lk%ђ5x@cˆ[Pr"&" ҩC$v6h@rudMT 5 Er\ϝ~U چ[ֳ;Zy[8޻ zͫL$Z G*i֟O3Q#U211÷;]>K swO%ʭއ 97"l wL-^BKkfx~jMb q檂Hxp0k>keYjLXtTTv_hho#K+F7̞K _FMZmyv}ꩦ8zsqbܼWGF ֲ+u'D٦l6t(0$ &*ܵlGa:K4"ԧ Xc!\K$47tz.O;z|` jQ9An{l:RdM2m )QݢI`V!HHjn XtٞO!q1K1ڻ-Vݨc>UM[+T f9N lk_xO] C Sr4 UrHwz?3^ N䉬pE6kVӟ{X%l " bdxmJnct:,B\} Tڮ: ~ d~}ԳULS@h/3hmp̕8bߠ; _BtW?K>^ };SY{~QyנZ-U-I_.@;>m晏[mxӚS/%daOJ w7^inVE?(CXUZ;"t׎Z'O_ 9/~DZry}ےZ'7NN/B\&!^$GouƵr6򨣉^~15U\])IpRm%,K# u7z> bg՛ y۴jKF8H6'Ӊs)GbAY姜0֧Y @0'fII9"~\m1'M<* 2O8D I/cEeW'e XPMfCBu䆡h.:గP8TbrQGěٻ4AJ9=nx)ѭʿ]BZ^^|MՈÙ5iUHJk:b 6-O0-SrQ8sZW\1ۣ"˖TQ󐎼ɬ@W'T64U:&上jw[rD_?!4*׿@r69h ԸoO'GKr+H Q)- I`'n|hķ>H- YGc&p~k6)>%* MQݕ%WEt) Eam^ `}ա͂2RS.rfm5QR H~u.M.Wã(T!H`cdǤYD`ϺOŢ5 u7,]fA! IƎ @3!;p$+H."a>ac2WVzX#0NEfז9\oOg|@QŐ{?*8 HYLP bz99큥)蚭Ή$j_~*~݁8FS ~ u$l:c#f6;܌O2UCnM=ةīޒ~?izPnT8?((f44 jTQJ^u9;ci7``/Dj~Yނ ojF-J%%|QYjGD?-ȟh_.X#c!QFQC#fC >cQ*7̉)Mڣ"ڥS뎀KWƹ|'Òn'fGKS`4{K<*DyWY8>AɢuV(9DhB''浄oy/yU_55,`Tv }3 m&(~ߘX#B#?n/y`ʄpŊ8z}i .> R7 q\h6s3~95b{8"Jy>O:/b٧3즣GCEPrA-"$sFp㵹^~Sn u nr h ]f3@W*3+f;W0;Dxʳ p* #2/ 9r5:ضSe8/t^zuM/^mǚM~'P -(JmKy>}kJI3̋yfkp/ 4[Q cr I'ٳV^GiUC.*f.rMHɝN"fKe&I8aA"t1& i)hZyPMp PhOS漳CA3 sPKH_)+H6[mD&>oU1 EsX,;Ŷ[X}/>Ds HܘeZEWۼu%$?}h1 Ml4%Fr}od&V9RW~ODeZ[*秿C'VN?BpU }9oofY3R [ޖO(+ڻk|UxC9nJ.$"R^6Qgweeϰmc*HGf].4M$*n"bGLxvE*ZY?Rv iV,>}%PpKK[Rt]9'킷]g/rsuqK97hUu6a!,$ @)Y/8UXd Ki7g dx2vC(;\n"E&!K(7alY )̃Bp "KݢkHd,M*')Y=DD`]r*ʂ)ka߃3<]u (?Jw;B}6+KbomyY?, )GTN6i7ڎnRr)J!vAe>{-o;gb>E :iV b"*/P:/xP^L Ni~"_9٣>1G]6%%:R?F͢/(o`R}ΩtKc6QR_@.#PH~A 峔 hgN>*QVa9괬(ȫ5Ѝ$25睊%7Mw%qZЃ5{9>\sjΨﵛeVyd Dj)!y(#S=}Ee4Rȥ"Ipc$r]#KJ s/gaW[RރbhWV^2R4væPu+<0'.Ë hE:k: ##5"7T+jB | ɩa]5Ԓ캆w"!0mnMƘ^#G|tj|#1u[ctzьYx,m(_3SBxxPߘҼ6x(tV#hW)V&4#Tq6\%+`Ͽ6ڼw&Ca{ݖ5QdK?T 1v5‹E>=p_"<](+GF ;nK%(Mba7{4:OtBDm꜀ϐs.^RRqӇ5CΣP (S.q|_|һ҉zyީ+j#$<΅*A%ĂS^W:E*}~rIr Ycny%_UA#'% >첳J1p珥|PXA@.R6h~mĮ]O;&/ᜉ^4;& KڍF>"z=;5_ /ƃ~TVqLk6?~X~ e@Tuak|ؘPXt|&r̭;ET,/Vy>n$6Y~ĖvyB Ɓ:. ?JNi۸z0N_%L#y F=YM=h&H^H>ҢT[3\]AdogkuY j|*b)jTB8:4 QaH1U'ecyD+|Ds1O#/7J cK:HE;BÉW^!6͞5ʅeIR5H'&$'Q,UTɵ(?s$5e}n ~ԝOG"l! .[NEIyV*jlsas+vNg3޹Ti]2:'Xl.a.U0}-'vBpY(J~Lux'J*Mܸp|zb@o5sxZE ۔'yAjn4l2`#$5\⌄J0qX1T,_b 3+D>K"Jl9[ʌ?7͜X*Lu)=ۅ}^->/[OP*i}B2cI?;싧d'e"Rb90:N%b>ľvZ51% ``\-˶v%7ʽ\e+>zقF4IT6z>) [JqihsKB,ܹ͂yX\$P$G=y98}ۦPk†ާeBE`E_*z2SFsņJ1.&ċsv15:P(KrU/Mxwz]?k J|_QD{H&&QqB=WF5u8bEeD82l[ LTPH8mlNfJEg1E샺e`[-`R#FG-we $  I%$b> KR{ c74R{QixҽQIl- hjU:^-L1gozLZڰ}z9nn38vAeGG%BlUCXO-5g(9RWn9 :GC2ά۪>((T]7y[辶P\31qr~EPdqԟi|2YkS74r@ QB_O48F>^Q{џ;`VW%EgkRI!DbAʠ5 -VM7@N7~ߎc1V,rN ?5ҲHm~GQu̳p!(Ґ L&@h>&‡6 U6|2M{>3]S fXgzKÌ0ʪ|/_T_cq6E0xΟJlXGl z1_c!I'=Oi_9EOӚ}_.e&Gkv$sh8HREL2>@{wq֧~8ai@(M{j7% @X}Z]/5{ qpzXF ̽Ku7(kW2~_fhWiglrkh<놝SLZavݓjLog޼$wēcE&eqCam"]?7lY"݃Mz皘T3pp&۰`$`Xj) / HP,~łw1S5bU՘i+֫, g&t4JP&G o +܌b p=-&WYlsSy($B]=#)vAZLרtpȋ}\ mv}\'uOYN wkn? Y=5b[_Q+hk@e֋dmfK5@X^Oⵢj}*:NBz3*8X]YȖU~Qǁ|0U#ɧ2#T+h#S@sYZ@L{D-mgH >UM̦)FϞ @)g)Xrȱ8!Pp9_E -^l>po5@G:rc`@kA {))k:ڷhvG?/Sxկo9RBf|δEõztQuxƸkyi\K1ݒ9 GZ RA؅Jۻ,6c}"8jچʚ0:Zgr>zTG_D3y0=Yfz꤀/ԇR35,]"M*8ѯ;;C_ڄZ݈ƽ4F _"E܀$@"T66ky*em*n}/#8,:SoM31U%D=f諐zTm:a<R3pTvrwT @a 4`eO10Ϧ7'ܓ16& 1Ԓ{$r-UaT:l2;A|yݱ?fXǿn2ɏ/.ݓ;vf,Jrw n>@jMcZl.nHj3wݤɳKDhNbbe[y+ ě$sgkEI,~xHIc6Qrr3s`Kvk$~-|nEE1ȯQj`Fo`ob.̏|SY(UȟRUлI!4⑆ ='.SGTo03Yr@~+-q@҅D4R&oe Q;#}.61u"e&4h`%*%5_ i.6hC6Qt(R?Rio'Xs~K ҊĒSAN 7w5bi- \"l-c_'^١76[ fך{d0c6);W8tB,)NZ!Kמ' qXRr_QEorUk8{=f  ڑ89 n<;B`'#|3LNBÒEfCt5MDJOT?03;3k|p协D],9)趟&jsP [U|% MvEi亂 ?K&ꃦD譈qJ3#xd FWcS!c@ G»:R6l3ZfSb}!>\ڔ$<^è+ Uپ[MEC%>n[hjjF.b)SY񄈤qgdxwcx'yj?㓸vK,+F\fgقucwJ2#V/=RbT=qquHtУ~Bv]R-Հa Doβ}..~6l\-Va3(9E#cUq+}ls)w!Nk|:䝣 t:5݄JM~ݨœom.]n"39`7k0𘉉B$[#HG9 TJ'\<GvBoglMJq>㳺^"h]߬zvU^fUIs,tėL#d"Uc$ e|FC~zlTtV>@O(A/ ƛu l\{%TR(+!B<7#ː'~/`2o=Uy*Fs Ъ[oHy/JgF*5*Cv#md.Ybc9Q0d'BӤ)UF @ `jx&- Ovk[̰-/ G!fkuz\Q' YᲜX5M/06‰F/7Jgx"p} VH&McYu rF2ᩓȍIRb]K .љkL \ǜ6BkYeGq!w3dCed2I2́WD%<Ǥk'soCUaߎO`w>h'$t̙>Nt ?H^gfhg:+V׸b"4yj:fJa[ %9NKeG|JPB7o&( ޮQ5}3Bݷ-W&xʧͲMn<샽m'ˀ30&YǠe,&`qNFU.9?lc x|yodUmu|F.G YOQ*'> JJ~rPH_x!6z9ԍh*X 夤.z6{(Gƨїew/x3KP4K3`V/'ܷv_%Ȯږ~Q$&\%hjCQ*gapRZo^Qwz.}H_9np}ˈp ǭyQ >^N5c4#g\PȃV%66PU{;:0Z;MOjGD!+Q)*"Cc:Aw#o$}#Ua! );'Fgc!Ѭ.v`6dgV-/ 5H]7Y\:ljb;x?COyulƴ3XEqE寄wj) ƪCxq^:;x$pMy&qTa{Z2bx"~&FY" Y!YQLvV EQ3JqUGE +IFA^}{/s}iW_ B٘Rn26eAj^$,nmY "B(GAoke^AwW&yazQ# @p몢Zׇ /[aGGSQT(Q,wyFzRb0FY-_E];>s178۱VʡuUԞV wvC$:k,K/I l;9&s#bJٜDk V{j%K$Yibqkqg'x =P=/ZԪӋ9L)7}yPޙ6crc:Yky}hߛ;$`̚〚dY6HIHҦX+ls<Ń݆w#lň2Ic.QK{qM>o"KE/|4nLPJ4,w̴y=VfXJf=1 t p> 3C6_DR@PpERa9tS)(V(45 _nlo?Է'gD4<_Uڮ| 4B>[":oQ@ @2)O2 H]>[,wE1Ow]t,a;`1 BXO=B?ԺAvwnR D6ԈLdJmrN'Axf?rUmx$ 4Gtlq]V*U* ԩNFmLS煴v}7r<͙O{j)m%2RsױTi+S& Cty)e'@kwN;lXo 7KW2A,ע*IOޟ\JʥJX}ih0T%oL[de4N&<~wS:8DFdTu$!RZ{nM&w㒿eP^D5n3ndWκEȳ#wk$KM*?S.&xtޛ\'}e-Lq>&ǩáyDP}xr` 6 U>Jc_3ʛ\XyU+I .p\Υ)6n:8"U*'4 #eCWvVd$J^r5m,|_t~pjR#'aMd9J.Kn=Ahj`E?5DU *|@=}XŃ!Ht 2uXR]NC[XwmV!eR7Cx@*)ΉxK;tLn2T>88 6c&ߣ-; !N[TBwi'aw))nD}iNYX w.Ph`SWU'rcso߂ @>3Dey^Xȹ:=}v4z-bD Dxaǒ6 "sSD5-QLHbm| ҇|ތVǕS ZH gGwyVq\s Lfy%-*i_;=:<:-P2*PITGKv֯[!IϨ &aL19:+Tdžh@9X::k5Lr09o`F\ ;~nY2}]/qLz|3]I`ZoɎ%$m}eTX%kia^8(7]1<^&)Cډ8D %ygStJEq 2dsn.rn"(fG#; 9X"": u;{D)}[`_9lUzZv:;yQ:(M`]QR [g\<8Ɍ)2ճ_߅7iHW;:gw`XE+V[C}\saar$Yӊ ZF7Az*Rxi#ݏyd USL~v-Rk ^(^vs>\,ob.S}UH[{agnx0 vu(Gjm=L;h53~9 l7:^tBGq*6bfkxt (dج l~H)Bb@Sry*E>ͺ,`| O7Qo}q8&',\ ls k^S] M(_/qJ AZC8} <8(;.pC󌣫%@o$T$~CNnt5Ez@4q1ovkT=AN{dK1oAf6-uHeuB5TY.oQ!yD<<3L!ts6<7rLT3MLr37MTxi#oHW>] 58nA6Bъ5]i^%k6r;&k ZK~jnOUm]\&<Ӈ 9QMӂE&XxA U\b'MkNw“%YKfdy m'@s؜f9`DΏ_y'T;_,r2Lds}s `-R֚>$u ݞcE3HDP[T|_^?8Vs`vKߋ¶E?,k0#42d|:}oM6;@ \ƃ_qzw`} :4e񫪢jGQЇl7aȜrȣv4Q(ƾ#mstUȱW?4(H&o)\ߕ,*M *—ImHRfa:s'SBh 94g/!(D;D';!kz;&D~و@BW-[JaQuT} :ӐA zƽ1j'+t>}Dh|`@VBU, ߐ}mfZMfzWB'O峳zRR w+A2cta  C7j(ަ9x 8ל\[}F|#gj}mLC %p=>Be_ݒzRjGܰGFɥ N@$ t:P ¬55C?-%E\ PtR։zQ(|7v !(P MJv p%x>]~ќ̘Y+ئ^'ZmVB@iz {(A6Hlxs|< N 5wl_]|WA᱓f:ՁS0W48|U M(څfmU,Q#pe |y |Ѳ]koz"MT8AدZ\r8pB`/CLH,JdOM]Eԣ/&[JY:+1RuzR+!uX᭞VwEЁeb: FޱR& eF|C]n>K&D(z 8(\EWX4`In~yn'F Õ S#/GVI#(2 #P3b6\\;k!qga4ލI҆4<.tj#J'PG[gz w@#eKn.pC=\ɟs3!| ߼ɤpY[ݥgK' ?9H \87W{s mطS( O2Q;2T9r>}{DH4oi7ǤxմX}DL韙-*ywM)_ A|w9C<<720>3ٝ {Ҿmwm=Z[nB`:Ȋ|]hƲ=iaXk:`KvK%(FuSt_d%$~ٛVcz)^0yZx}Nql_1ϲ2l]i[Z|^~^7nd$T32_Fg,jBL-tpy)t:JIx!ɗRu^rڒw Bo@b9FRﳥzEbg5PDu큽je`(IHl€R*A劲瀽Sy*EZ  ,ם*no#PqnO,ɡۥM[W^)B?Llך:\Cdk8ŃOq۫do\vNb, t},6!$$ EJ ש.SطB4\xt}6r]v&vޢZVXI oZ7cj9ŐţȝS. V {T1섉9i++y׫ۯXk%I*):-܀mg4$ OBP[qYH {G+9K !=j.&Lxi1aB)@ coi#nkzsÛ9*>t{"$'ZXГuyLyŤɳYn#M#xGg$\*r?SP ɝk=1..Η\s2o]+&i2bP0Mԅ'LMZW,qޭinH@nwՌS-*~v4Aw;`œ B+h4׀бѲ ɋ[8՚IF L\wצ^^+akiQv?ǧI B0;Ż%,1 kIt*-aHbk;KZ8mJ΂@A+R|gJ!DqпUt,<_<9Yr*jYS6#z6n2pZD#K sd(P`VQ $W'bliwyCK g#Yo7 e-^ǚcOE,mGw1#e;b?v hV  W &Sy}LNaf *mڥEn[ʆQfcMOmm|dp E:9` r P=c>b-Dŷ]6Y#I9f7lX‘ҪU@$=Dcr@BO+2R~~% Axmr܏T{ WfŪMX1J̌Áa'uV"tPzoWzG5M̅Օ:<Un_\mUߓ&"8*Kç.2[&.S 1c8L-?lV,jxӟͣ^ӽGQ,kcRUL W.1U3A[fb]ZQ"݆R-&x׈sw+Ÿ)T>G :y-mc(udswYĒtYОpz%.xڕ750Y3$Y8K~Ik!_}䐼>9KxER Sd_]Mab,'X}J-JAav}#r.)׺eڻJ8✿);6~Z ڲ?0 3H*FulɌ+"Zx]r׃DX/z((IR+0޲MQչp0v4?ƌc]nzpe=T4(IQO SҞ)eFzٹ@wFa\6(H1ZG߽a(c f(}߱e@6ƽ;pZ:,P:VB>DËT]x[2` NA|Zgaſm=\[': S%Fݭ1;v`a{@q@9od/J~.\pOʤ<=NQi_g'!x(WL 5s [Иc?j9Ϧ{w/C|⿴TaC\8$Nơo;c)KXN^:l+u\X߾+[*tOf֜\W:r`)"_J4&\?z C;K9,ǜb^?Xx'|~5gga@RB0}GdjZcKpE:ɭf/Q"㜱m +6#}|bxPNZO2(coD \ ]R; SzzY'&yo" oo^؍`P:\ 79?iY)oʑTTjELRޙFv\u.Dտv򊝚C;<Ќ{n&Kl{C&[A{sPN7eߟ@[)_3#rGӏd%=xf I25?%nJq0W@{Z'fvցv(CB>bY/ȵH-zk?ؤA!} q2CV=ӗYP9 n=7զQ?'uO{-HDzOY)3)xy*V'_%غ(xʨ2۽s0)8%40Mg>^''HG|B3/OOq-~7G]Z.W)\Pu/p7(?:&M7՝(EbμcPe}x3H:A0l|BI9kR"lwsz15{l^{&Jv+I|;['76!~@y;:G76>YZpZ{137#z8\֍j۱/pK↩Dq|C z0~T=bhFΡ" T'_v"aiP<}?1q6@5s􎸆Uh -R# TϿip9jDƻߒŜՍ`G^3 W/ͺ=E:OpNd6;[[YWP5 4 :_ٻYx鼁NHH]$f_m! qc:Qٝ:el{Ш g泝9͠\sn5'}׾HnKL8ec K` ūG[TŦ!1X\{+n NK;+mD7(ZpZ &.?vbХ"cD~GU Yņ!s]w$F,VPydDELUd VrnoJP04LmzWg7<8ELO V_~ ^v^&jxUjZ(x4wWhp #{z9Id$|BBrUYɇyvvGh#!bGU|{{k /XQ BcgZqauDbUkS"]LcblM3#ӃO;.;kB;ZGmIF׮V U׾"Oζ0\m >,rHP}CCf0uᔋXۧ&wE /_\-.Gx9\[5͂DBY~8lB0;cK [F0>*/M^ %`k^d6@!iǃUJs˽_uЦ4F^%Cfma db1Gp-F4Q'@xF8央٩q,&FeI͇.{=uC죟"ev'1L<*]J ]% ë0^L~v +_ud\t1z0\TqxGvbTGS0o89fXxO{F6q*RD)xw/w ﭨ5MRp୊' yм: X^ s lPsZ 6m/e<,XB}C?V ~V%^nO¶.?rZ7\L#zP6Jɧ ylҨyڐܧ{wNz?rf"3 q 2:4cO96¾1c3tc]` c wȀFv;>h[?|/RXSyL7Fg@sfeMh_j<"Lu>d9KK8YHF?PLsb;`M=J ]T*?_[,TLeʾHl2wjzL^Qߍ8ДjlC49=1=q÷)#"?6XpWMIr`<1qd`x+K~a3Cv),Av7sTiH DbL"2'@f-fc&DQ.h>ZhG~q v3mƬjOzsUol[svb`:dѱE)KnK6tJ5)KY3"2:jzP!s&VC J'M t='>k7Au6QnHºs Yj} {GE6/{O P~SRLa~E\d\tg/^G辛(紕.$?/OOO,Dʕ՚Q3)tQEEΩMյtJf߰"I\[@0t2֮X8E)瑱|󧧌o U+xSq!R:Ta1P[3Hj[) VF)TJvU!Loa /FLj|{2Zq<xnK98;>`qb8bF@wwVX@wh4_CǒIk:(Q-m%OАhxk? t:u9e5&Q -ށd3O“pqp]UG_Y'zˌd mε<ӌ$>Ma'q48$MHK?>pGv-NW<Ԁsq I^e2)ww2g J)b- >wRbL(O*S"hW7no?J0 x4;Wۘ?R^.7M%oĹQYuՋV0SO 7 RkŸ-HA8i w#nnKsg' \ (ջ qxA%4; <QHuRg^U*},~% SsK(UID0m+⭌͠Q'߷ёF,4gB*onAٷ2]~$5*eQg4:|3䪖벺㺦Vx5&(VKerT7;Ҍ}bc6B[aW.A`j Gy.k=Et<96s)% !klˁ25W nccvt+HC@^X!7Já]Ula~_ ɊTq4KZ8!CAvr*?8,z)|A7wk~/U4[.Ue_t}f7B'!]#Pix_\7(mԼJA {li-r#ƴ d;u'20_B5j?k2SOO6:%mX=V^pqhosJ(MR>}Ƕ{*`ifR=TV8)3qvF)~X[1 lPeόP%헏+9zQtm$CijOP[{A$c T$A*+v "iV um=$D> 'ץe(+'e E; W,;X2 Ueij*~ًk| MUH!'o>noُz.1奋9E=Hc~{ODKhP , INbj>LF= Ymc\yx'~>H~*Y)6"P )'[UFeEu)P4EU7{_W 6h EIjTAU}S\i̥B77;*g{pćE 2=7A( !/šKhs\eac^1Ouc-8H )"ց!WEN(M R!WWy#=VGfٽ)M +&@ϿNmi'Lo Pn#7iu@1oH7ŰP'"JfRTđն,'=7Zz 3-D+QBT1CM4/V,>mqU[TV"Ʊ#"/WVJ`0΀h >҃(Z5;8p}Eu!TJsȔmXgw㓔1!h0HLXLˆ?#7'@}=fCu#E)q4Hg-HxQ$]%hu~q6]UCBKG8oUSq}O^r}0¸=L7I:>l$yը:vgKm]" <ﾉ۞[hfuqٳ_1 xԺ !,2M{}D*wM#8r]fͯI ƍBlT-X JFVs㻶J8=<UD&22FQBl>3>u&5?^)ex nn_yXxv|76@ä hiٵ/+FrUyw ?7VzbZ$z4V+U{fADVړ$8,d՝v?sAtt"n-w2$.]Uhv`]twe4Z3TjmIpsoAieyMR퇐lI ~bP7"`)N~(lGJ}qM7Λ v(wF$d87K$gND E*wKOk$记eEoIDEܭ{@d ⊰CfrX#D q-cXz*NOHc'imC;q3ZsÏqmY;DҨB<:^AN@+J,FzcL?^sOUeWKQs3:m׬55TK#+'V־ 8Whi76%7iO/'S tK^7D|'q{@>1a(=ۤ:(w$buc~@1iGc* %&QmQ;EpmD0v)I/قT2A=zዢ.>W_5K7AѬ Wab^S'Km<0ѵVWތ-AY<W(f|j#H4O8ԫ,/&ZL.qI8Tc_0-DU6jT&C_@t; nxrǩ)~A $x|%ag`{EOT4َmSf3NpÕ]wU'7v FMn=Z2ABh9 l'Il?Rg`6}3PM\ !%޴8!qd 𡾼}_eZg心iɊ"<~[ξ}&L [J:8'z;](uD Gw'lWgaȤF%Ԋg~G:Jk\iiqIOb7(e%7>g`S.LS\Mw&a@j4 q33~_yDi2``cf/"MVPXĢ8^\WX(4@T/~:>QzDW-rډ!Pu{P*PUikj8f)D; w>Nӌ>6jf*0;=9NRKiρ_u: 2gB)T|:hsgp1oKҲ{٬7̚D$y0F6,Sk$_嫗s8ᔖ>ѻ_ψsi ṱ ]6s Xm6+>FWpO0M7;'Cƾ JQ'A)̆аs.C6C4\5y4%ofh7(N!\UU X? E';4`y'$D)vuhQE*fGLd!IMl?T`U~NtrZ?z|eoUW!Q o|9٦KOAefFxAMUԼ5cg3[c'-(_pU[ ir}C5jW%5l%/CQ0cRT 4FǕ@zqtlu`Y%_(~ C[UrRnM1 )2!C~ΪԀ&J[|ֈO Dk~6&{NeS;Z*іGO!G]ܛS 0|׋AyV>ؗK=!**qKG;\' ߹ص' ҨC֐ތf:Z$V!z{g]nQ`ҴG_eHr'/B`7qG!zo-xMUnkgCVA;'ܨ@ɓZi|v|KeaL?iEWP"TE\|*|3ߩʲ*(Pu'38WOm%g ewR:Z(Ȣlxmɷ & Xh`{dDk\:O}O%kߋ j[2'j :2׻qQ9m!2&4rxv]^i`Pwk\)~;IR^?iV2/8QՎ[e_9Q'!z duZp!v̀${ ʌ,՘5!0r`!"7¡9StHyBLQ"{ <tw,IDy g>{ aTmʹ C vAF1"$w Bcc? vK=}wCvf=5MTGw0;@@"g] {,7ҺNq_e}+ӔD-򍫇{߇,śZw(y&c# )#&CzZE$L%_` /y5JܵAK#[pvC}|7X 9hboTIwnP[,/VsQoi J…2WG7Z҇UQJxhc/b%.M2PrQ2ax%t4ڑo>MF_|rHx,3rK,}~Ǵo$E8˛n~G+,{+P V҄k9׭I"3r>rژՆJՉŹ<!/XX[fS(/IWoxeNh^B'k)M~'t%F_1QNIK#r)XwEr Es[>Zd2%x׵ xo ZO>CrbՄKcv6I͢=jT4MQ/FLlؓ?)@[slS+ޔ >T#`PI-*~ %1@$'"nE%%qo;f^w0f3:dڊGBWϾŘaU|~$_F?b3=f6ZfV^ f|sUpbq Wh0B]%yNМ^ Pp#z"#kPIPC˖)5I`+VGvmm>^|We"IVoAn3HFۓLo5*) Z)l"Zm*YԹH3  / s'Y/eKPW[ЁPSzmweH}z^Iُ{?@oJ_85UW9 435;t&2.~qiwZybm=# iw~T\a۔+$( +%B!^Yi>: LP6Yͮz;b^8ˇXRaFE z9,mSmÒŒ0\# eEH=L} ܊\ V-MQ.X/0;V+BZg4k92sET< ̬KV>&3O@[r{ s4V8:ɽV+[/vw!Y83w.*p2L8-}ylXT!nf{ ?Qx1rޱ8$@`' fM5MXh8V_|wMf (ЩфUX^ Zbm,`ۑBWɗ:N#Y ccz#TpƯ:e`u3d.BT%7[/5^,7<ONZQ#=1S5ܠ]#fi^TdNCٞk80ݱU$M% ǼDrM[񧕍)'<2ӝA+z8N3h0b!KVKԍ\5SxM|GeP~ mUc1NdNz *]XOZ'YȫWE ml/\wF1qw >gё~f]d/>$tOGQ$RD=G:;ToImLmnӎ D q'˚mq$>TWb4Nﺲ:/M(WH]ZhVٯ 84!]!}skUJ;`!x=ue]sgYM*OXi*臙UPywSg !n!4䩌R1GS)p|_3r*rڒ _+90<7o/ǾA#~Ŀ3  f1{VjdO1bZ#y@ۙzG|=4[V1x'CT8A&iE^ut#V^5̨'6-i慩e BvF?dy-͐\[79KԞa P~=&"X@lrO, O/X@7jy l'0׹X_Gx r<9c{"aJmmQ o%} .9H*,g;Rrրb14[ ZZ)DrS ?O#i+ezWz"T] (L݆4NL] ]{CBW^R}z*/0TGKIItKpYD1tHF:4~M^ahQ&&<6ׁV XǼO ^ &lӪCgx 1%leUC$]&\ )$r7(vK#z}!$!ǒOˏ3H ӪZ)#YCTfb.a! ȤP}Kxh%V.yN6pds*xM+bjQ^c1:`SU{b-o}BXv$BfE#t!ն|1]d߸Pid9`Pѣc,yP~/A|bp4V5ejbwevdG-E9S_ tKxY NCK0Z{w ӱ5 gPג8b"Vᆇ"!oʼB\ꩤHaD$ rʌXݸJF"nh͕akMJz^Bu8?=d9O2ѬaD@ O'S2nsE{ҡ3sd\2'{H \i769 9 yk8QS2 n/Ga385]@}.7AxxX /U@ OAW'uB%IhHugtZ?۸P1tKUbB1+śmV fry0F~yT& PTLNf8Y`P$>V;/-0[BjaB ꊑPwtd6:ݚ%%Џ^ #DS$y4ˌ;Ge:@]mI m%ص%U)-{'\+ YBe.$)/o@A(ʣL(Kbbk$"#1PB߅Bu")!;%*sN).J!׌JZ$8aȝ2ưɶ"?4J{GͭK_e豢~RVχQ0x%O<#ּV;D jF3 و/ްG$D|dP{-nY{襺&*3G!pu: @~0ޟ5@fT?%VrY{ڵR7I' sOVDk8 ky0 #L9L;Cq@7E0<7$ \nt}sC@NMlN-egDTE_|e~m {.G 7 W] 07AiB</(-vt5զYΟycf)=P!DD#Si4淎&1Pn=S0 ׽΂6V%MfB`#eF_!ٸNЇyȼH7>Vy)%:H5VGkM~H|'o|ʼxq+4\ѷZ[.|Dsk>PCZJA 2a&i|<^= fCʁz48a_C[6?3ԭ~Ay3f%cH=>}yG/ &҅BimJez"ٴcEer B/0M?xo~ `  $fsi#/jb"3Gw>+kgd@n. og.\7E*ƳhFTtͳV_•ˆjW_9`rR~KUwt %% 2 c&:K: h՚;S$Z&{-I)R ^˿^TN%h ĘVM AQJU;?[+ɭB^eT/AZ?S x JފT 8VSnˆ J|#ЪC&y"[k`z.dܹ@ = (,l֟n(Vo*x+^p,lcKl~ϳ;}-.G/c٧Ro>G$M~ : (6{ŶYwv p W5*vي eX||-'ԐZnBk0/$UfZ}ߑn:5܁`Rh*Hal-wK,LAS 'ILEpJ +]k֡z& ґ\Ea#GVE-'浀(P4JzIUM,Hg^8޷ߏ&Pyy_tr?Tdgx=jӜysMSRzcȑ[)qڹА6_J4J4W #>bm'DKE?' 3X&K  5]XúԐj9]{(pw$.D۶$^ci8pУ;P_V@u8ZSn,r^u/bPIq9 wpb508򫑖Ѻq RZ;;dXRO)1)}A13X90ѫ6橉ՑþjRЇyǴm=@"rq91o}Ìorۯ4sZ/."@!,6kp-c& kSrN"SU!I@}$ @NHBOG-s^vxo3_ICz^LC!#%{L\So C%+#?4W^7.]|8D2Q u)0\_{d"V/W]UF7`mB9Fz"fꦶp d"MT?I 霐lU/#U Q9"k傈 Y6^3!hT">.X(J>B"@llh>rep_lLЩE5^euv5KkAtNzN~Wm@jKW1Bf`@KXLHC4~J#JWq?㵁>2VLQd@KRtV0HϚucJf?6qkr`ACGř*ţbDcAE .KXH0k"!ilU w(s"g%WQ탵(|Z20Ư8d{H< N2̜6}zBS;qc/6OI\VcoddI)cT'2 $rBEf@J9^-uIh'E/Ž.6 &>6\oR"/Q]w"҇ace4?ұS(\:#Qxtv>y1 JtHtELmܢ~_ d5KIɽѐ#^0B06UrIեmN91\l?/5-n%(\j* ڤn- Ò6U ݸ-0t8= 1lG4!-ijeTYMN`,༮ z=ވ@5,͇=\ى.6ֿpb jLQp&8TX9ig#Ѷo%4z['`6vym]@ &fiU#b!ꉗ*dwvqk4b97Ntb["4ZplrQ3Q9<ށC'poa B)]aXը% 6vvO}Cg-M)dK': }ZZ+-peZr!J#7I^54…Ai_h}6iux,"R9pbuxt z 2R kxO ^cVY9AWNdž E(d Lx!ַ[^(.Zoos鱕+o=Ol.kѹңGC-2 : 9,;<"NޱaR(.Iz"]#"7`륯爩@YUJuBA^F!ӦӸvTU4qvEq>GZNLĤWE`oև~`*L+!baN=d.3fg8!ODB' WBO&r[QٹM) IlZs78ZGC6pZx⩔?$_F)3188xI6c f_HSBDKA\f`p Fj;,\C%@iJRЅuؖaRϚ| {JqB} q5d^ZbDR2ͤPtjmN S)䰃DŽ:T adž'*Ӎ}kX& 6ݮc޴V UVkIocuG` Fk).rn2ęOO^OZ[łj~@2.o8_$L/o np ޴Q8 R۷% Db ѲC4"Ła{&;ONʅOL2\Y>7m< T8'?~btr/ۂD9Ґ9ProAy+Obfd #p0.FadE#g/uJesi0O : &OIJ6/} CD4 Vհ=^Tk5 m[yd %h;S'#1fn&3:Nl[:eiטV}o+=SyԎ#WE nն흔 3t>dSyWs'{-hn ^ K^Mu Ai&@( lk;vc(j^eC e ks{F!Ldl&Hi;i'hJyڎXC)8-;UD CREf[Օ,4|JQ+՗|4p \I9m7UH~n)_TStDRtEI+Ҹu0gKߕ0QAjyHa,Βmnb긭t+bb2# D}:;*bI't`D![],()ML{4h["&|M:*!򶻇xĤP~a}$mg aK,noHy^ѭn,*|\D`fOM`\Pᔱdn9kS]TS*[qzdxmaMO{o4f/Q2y"!Wepñ[3rzgZ^/Wћ*^ojxJG& 2Z煥onp\ H :B y_81Qj""\hqCԦ5-Ņ%qGQrO q-Cne9>#:DW*,=bkSi2qwz/iXV%!jN nn3EV b=S4YT;ډ1PP~C`8Irn`D$"\!\4LF(r vx[i :}SB og_ƄIOm&>f qFXK?{Y MS2Ճsiᎆ>EN7TI}~bp3ac|"7R KYN~zH+:ѯ9˯ȁ]BT1&.X~ﻤN( .͈ szk*Ǫ꼥G5SKb5j{q8?3(~ֻ9xyV @} T=%HlF𬙴f *)>DXIrճ黰24$xdȍ^Aj|ʱGyAB|ԤL; "ns @GklT#0g2 )>/qV4D+Vэ$6hb|b^uwL $n9nFщ"g1!ADc"a32_#wFZOXCׅp)YOb*N%:xq u'MU*q+k:^HX,5a2j\l Wj| 0[EzM (= 6BGٛ໘ʙ 8yK*0BH(.3`L?OZ#tĖO:ss6QI(ՁHЖ n`U\71 ޿ "EHGʴWKC-('>!+DOP^ƾfy-.d[:RK5"ZJE^ՁkЂJZ"'Kl#|h3%l ӻeN|{7\ȗ'ࢆ_+;mn924z`UM@?*;GuάvYL}hy4`A"V0Gbh6C PdcPO獪Vm4NeKw#ky!z街| Ύ9a^oBdQʀl5W\W>P3&2p-|3]}g'doYh5Z=0<W=wnpί)ߜρL͞Ŕj^|o:YȪo]^J:W~;fRǘ>qc|&nux ȌئAh+; YH#D~",OL)(fzmgqxNBq<Zs]3I=Oφ2!$`.LOOC_E34H@-:!wgb6j6N^*Z<ye{TEDzXi{k1{EXtx7Lac `f^4kEa]̋?͘xj )x11.^djzDžh!][䤷 W0ʔ/ʒ|č Pch1&<x^?F'̱$X <G _i"Ғc-Qz̅ZGO˵W.Lҗm1=~?fy2H6Vx }[p.$UN>b@e_~zĥv),.4iW-&< T`CkswIfrɵVxKh5*?"TF"kvĨ鄛g#U zf=[p두[:~C }X(H8t*9 z-HE hƻN,j"udR$JuqfX-s&e뉹U:m!h EYUYm=x!ksE:@ʀbZ|8n{3=$sBYuM6YxLJL=qi ّ!ݛJ?M3n.(]L>ubCuwF-6Dڪb{A- @ÊBtS@¼bE=̓$ sHHY3wyvxTLEJA  =)v)ہ/]<`qDFRC>ܣ~z MY̞?ϸYܤ/W0YxsG\َkhbg(@X cm%M~r–ʘ"eToc見hwB+H?'P(RZx,[DjItט<~3KOBu s1M]]Ś%u#nF*CQ&:IS TXOnC`]btikBgTJ:ərD1(Sk!昍h]P ~ GO!GaEIxv˔XikP̚P e1G:+B!i&z1mrtU=[ǹ-Q: ĻokB.ag*a u Eb L<z @g#NA, Kr+N72u_V (y3g)UPǐCPSx5X_6~;l ه |MzEU3p#эD{tt?y9t=g*WEߋT?VED^2^rnW)T`g[,h"ea9c]K^=յoށ6D~j܇i'N0S5~+qtϔln̈́P+~n) -}JS>s1UB{qFT&I<@XpvE㷓ʆ (vأߡȜ a gI/Ō|Z=4+ Z׫gA;{~EM?fcd*d׽;Dͷ[ }M]źi'D!V$6J-wܴk PT(*M&OxEu^eH%d-w+~tБ>cV;X(?tSWXS9HˬMcQX*'YBOGZZ =t)5(W TW %wNVæ@)fZ,Y;&O_S SA!PtVi NNE"'kyHЀ`\UϳUetx>,dU SBԸ#s:tؘk#$E9. gli8c@n%>O-}(_+u QeزL}h|; +B@X&rO("jTЛS9Fe 9_D*a$4,?: 3nznP08: M~Q"4%/rk͜&Kq 0Sb6>^4QߞuGH̶zȶdԾB]zu m#qzl{4e.ZN=Bɝ%frrV{OL&R+G "T%w.:B&s&<:OA Sˇ7!\U JI|ImB(yT߽n$tjJ;ƒC&;ozDt,P8G&;΃[=6dQTZo=)pOiS a  ZУ[=,z~e@gR,,$fxW4"F4W1M9jcc{`6NZ\?0lu.>Pqm56!|4~TV4 0=#.t@J%,^eдL!vJۑ+-yѣ:/C.#祧EP6 p:sdm$=N|&urƄewQnD Г!ton*€GE#^,,\R{ e5DS,m,C- ]dOh0N n bӎ.س?#f8t,O^nj1o}SPdD a\bEB>bD]ӀSYtq&u^0$s=Y¾R[/R|:Ts*}͌ BZkw8HJVS!_%OM%N}} 6ҘuNS) L4ӼwpOȾqAmt;%pp0 j3LTe>HƏ7u(6ۇ⹥Qr :lg;ҟYM>;Z~J'{-'#A*~uwvdqQWwYN`&GLޗqrK!j_*asuŋ9hfN*]lS(Am5/r!v{WM1'P!_l gT}P oeuoJ'E{f<':K"j fuM攓^!™&%&8D9X]U=9&GE?X&88{D\5-!M v6N}bn^e!`+͙up7ՔА c0$^8tCj&b@7rk:ۯEe{Kw:[8J"9Q*rPsz` l!:yLV\t\1aΙg@DHm.6{iؔ /;[܇ ?cI?6 ]C Q_fa 3k?FȨKWC(8¤OY׌r=6ӱa]^чʼn YT+ )Fce0& }=乌diVȝpvt |\ӞFZmk'A4ck k-޺:cH51zza/Xx:lMeM3)7Nċ2:Ûa. aaڹp @oMi/K,W, U48cyp+֙X*bq"poC6850i Rm7Hu ZgPKZ"mlOY_Da8vVmKPJ6qHxT~s͓%.b{ nU%_Vш=㋌,5}piEP|,͔\.!wX&90 GJ^OK]mnqmfy!|@8ol5jk+줩R_R~hdĐCJӓ= ~*c QhU(H9;դ?G_cChm؛lm)GU.RƬOI28iOkWەulmFXct3+!C J~]J\ ذ2)hyᬳI`n%wX Vk`[i#(B$g*&@aOےjN^9c}Lj't2Dpj 4~IxtCk&|ůȑ"*z v{cJA#ig 2v~7& bVY U@ nMLC(WNz%O$/ B)^`ĭ[@Pf ' f z%ώ;m(R6Qc_;B0[njiGäp w|':?/e#YV}d8Ms\cKl[PۆOaϨ.}}$-!˸6{`%;PﮅD=!kSXX0B*8f 6$b3^\LRkZ'8xhV,Z4 rgXV(bK} A7t®)bR!ٞѤgPg(^Q_c;Mm~f;*W +c8l=M(e1/$мUu;ҁ?Gsvs3Lpgi?izѭq$ Ⱥj~?[}OoBLrc vе[R]u=+V_l㒗܃+Z|aٟ艵(E-%a.tK^+N5EJ`>G \WޜvtAo?fi$_?āU| o}e6d+Ex0᛹;nS"sc/wd3R*u(QCkx1Vn(++WXt٤ !)1H7vhe6pK3 <~2J<,:`}I̖YhHAYMl%dV!=7* 3[pf^~& 8M`QT)F