389-ds-base-1.3.8.4-18.el7_6$>7::Q0]`$>DD@?D0d  ; *E^dk F  @y$y y y y x%y yyyy>dyH7rLPd(j8tR9R:)R>ǧ?ǯ@ǷBǿGyHͰyIӔyX7Y7ZT[X\dy]Hy^"bdbegfjlltyuhyvL:w!yx'yy-D,C389-ds-base1.3.8.418.el7_6389 Directory Server (base)389 Directory Server is an LDAPv3 compliant server. The base package includes the LDAP server and command line utilities for server administration.[x86-01.bsys.centos.orgTiTCentOSGPLv3+CentOS BuildSystem System Environment/Daemonshttps://www.port389.org/linuxx86_64output=/dev/null output2=/dev/null # reload to pick up any changes to systemd files /bin/systemctl daemon-reload >$output 2>&1 || : # find all instances instances="" # instances that require a restart after upgrade ninst=0 # number of instances found in total if [ -n "$DEBUGPOSTTRANS" ] ; then output=$DEBUGPOSTTRANS output2=${DEBUGPOSTTRANS}.upgrade fi # Create dirsrv user and group (if needed) USERNAME="dirsrv" GROUPNAME="dirsrv" HOMEDIR="/usr/share/dirsrv" if ! getent group $GROUPNAME >/dev/null ; then /usr/sbin/groupadd -f -r $GROUPNAME fi if ! getent passwd $USERNAME >/dev/null ; then /usr/sbin/useradd -r -g $GROUPNAME -d $HOMEDIR -s /sbin/nologin -c "user for 389-ds-base" $USERNAME fi # Reload our sysctl before we restart (if we can) sysctl --system &> $output; true echo looking for instances in /etc/dirsrv > $output 2>&1 || : instbase="/etc/dirsrv" for dir in $instbase/slapd-* ; do echo dir = $dir >> $output 2>&1 || : if [ ! -d "$dir" ] ; then continue ; fi case "$dir" in *.removed) continue ;; esac basename=`basename $dir` inst="dirsrv@`echo $basename | sed -e 's/slapd-//g'`" echo found instance $inst - getting status >> $output 2>&1 || : if /bin/systemctl -q is-active $inst ; then echo instance $inst is running >> $output 2>&1 || : instances="$instances $inst" else echo instance $inst is not running >> $output 2>&1 || : fi ninst=`expr $ninst + 1` done if [ $ninst -eq 0 ] ; then echo no instances to upgrade >> $output 2>&1 || : exit 0 # have no instances to upgrade - just skip the rest fi # shutdown all instances echo shutting down all instances . . . >> $output 2>&1 || : for inst in $instances ; do echo stopping instance $inst >> $output 2>&1 || : /bin/systemctl stop $inst >> $output 2>&1 || : done echo remove pid files . . . >> $output 2>&1 || : /bin/rm -f /var/run/dirsrv*.pid /var/run/dirsrv*.startpid # do the upgrade echo upgrading instances . . . >> $output 2>&1 || : DEBUGPOSTSETUPOPT=`/usr/bin/echo $DEBUGPOSTSETUP | /usr/bin/sed -e "s/[^d]//g"` if [ -n "$DEBUGPOSTSETUPOPT" ] ; then /usr/sbin/setup-ds.pl -l $output2 -$DEBUGPOSTSETUPOPT -u -s General.UpdateMode=offline >> $output 2>&1 || : else /usr/sbin/setup-ds.pl -l $output2 -u -s General.UpdateMode=offline >> $output 2>&1 || : fi # restart instances that require it for inst in $instances ; do echo restarting instance $inst >> $output 2>&1 || : /bin/systemctl start $inst >> $output 2>&1 || : done exit 0if [ $1 -eq 0 ]; then # Final removal # remove instance specific service files/links rm -rf /etc/systemd/system/dirsrv.target.wants/* > /dev/null 2>&1 || : fi/sbin/ldconfig if [ $1 = 0 ]; then # Final removal rm -rf /var/run/dirsrv fi;&# n"]9 ŋ\]h@,8mm,8mXLX 5e~`_I.a*-.H To==0P ,(pN(+oP(^(N8hh0 0PMP=`=hoP_,@|3g# b#|,l j i|\TG3 6y 7w2') o <G~ 1A%: &.] *OG HH=n=+IMTJl 7md GEYhm}(  l|r #7A" )i . ;@@BSB@ACAGD}IIqeBD 3 '" (  IjC2h Kf O !kpVOE N (^Xp:AA큤A큤A큤A큤A큤AA큤AA큤A큤A큤A큤A큤AA큤A큤AA큤AAA[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[+؉[+؉[+؉[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[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@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroot389-ds-base-1.3.8.4-18.el7_6.src.rpm389-ds-base389-ds-base(x86-64)config(389-ds-base)ldif2ldbmlibacctpolicy-plugin.so()(64bit)libacctusability-plugin.so()(64bit)libacl-plugin.so()(64bit)libaddn-plugin.so()(64bit)libattr-unique-plugin.so()(64bit)libautomember-plugin.so()(64bit)libback-ldbm.so()(64bit)libbitwise-plugin.so()(64bit)libchainingdb-plugin.so()(64bit)libcollation-plugin.so()(64bit)libcontentsync-plugin.so()(64bit)libcos-plugin.so()(64bit)libderef-plugin.so()(64bit)libdistrib-plugin.so()(64bit)libdna-plugin.so()(64bit)libhttp-client-plugin.so()(64bit)liblinkedattrs-plugin.so()(64bit)libmanagedentries-plugin.so()(64bit)libmemberof-plugin.so()(64bit)libpam-passthru-plugin.so()(64bit)libpassthru-plugin.so()(64bit)libpbe-plugin.so()(64bit)libposix-winsync-plugin.so()(64bit)libpwdstorage-plugin.so()(64bit)libreferint-plugin.so()(64bit)libreplication-plugin.so()(64bit)libretrocl-plugin.so()(64bit)libroles-plugin.so()(64bit)librootdn-access-plugin.so()(64bit)libschemareload-plugin.so()(64bit)libstatechange-plugin.so()(64bit)libsyntax-plugin.so()(64bit)libusn-plugin.so()(64bit)libviews-plugin.so()(64bit)libwhoami-plugin.so()(64bit)perl(DSCreate)perl(DSDialogs)perl(DSMigration)perl(DSUpdate)perl(DSUpdateDialogs)perl(DSUtil)perl(Dialog)perl(DialogManager)perl(DialogYesNo)perl(FileConn)perl(Inf)perl(Migration)perl(Resource)perl(Setup)perl(SetupDialogs)perl(SetupLog) @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @  /bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/env/usr/bin/perl/usr/bin/python/usr/bin/python2/usr/sbin/semanage389-ds-base-libsbind-utilsconfig(389-ds-base)cyrus-sasl-gssapicyrus-sasl-md5cyrus-sasl-plaingperftools-libslibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcom_err.so.2()(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(GLIBC_2.2.5)(64bit)libdb-5.3.so()(64bit)libdb-utilslibdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libevent-2.0.so.5()(64bit)libicudata.so.50()(64bit)libicui18n.so.50()(64bit)libicuuc.so.50()(64bit)libk5crypto.so.3()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libldaputil.so.0()(64bit)libns-dshttpd-1.3.8.4.so()(64bit)libnspr4.so()(64bit)libnss3.so()(64bit)libnss3.so(NSS_3.12)(64bit)libnss3.so(NSS_3.2)(64bit)libnss3.so(NSS_3.3)(64bit)libnss3.so(NSS_3.4)(64bit)libnss3.so(NSS_3.9.2)(64bit)libnunc-stans.so.0()(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpcre.so.1()(64bit)libplc4.so()(64bit)libplds4.so()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libsasl2.so.3()(64bit)libsds.so.0()(64bit)libsemanage-pythonlibslapd.so.0()(64bit)libssl3.so()(64bit)libssl3.so(NSS_3.14)(64bit)libssl3.so(NSS_3.2)(64bit)libssl3.so(NSS_3.7.4)(64bit)libsvrcore.so.0()(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libtcmalloc.so.4()(64bit)nssnss-toolsopenldap-clientsperl(:MODULE_COMPAT_5.16.3)perl(Archive::Tar)perl(Carp)perl(Config)perl(Cwd)perl(DB)perl(DB_File)perl(DSCreate)perl(DSMigration)perl(DSUpdate)perl(DSUtil)perl(Dialog)perl(DialogManager)perl(DynaLoader)perl(Exporter)perl(File::Basename)perl(File::Copy)perl(File::Path)perl(File::Spec)perl(File::Spec::Functions)perl(File::Temp)perl(FileConn)perl(Getopt::Long)perl(Getopt::Std)perl(IO::File)perl(IO::Uncompress::AnyUncompress)perl(Inf)perl(MIME::Base64)perl(Migration)perl(Mozilla::LDAP::API)perl(Mozilla::LDAP::Conn)perl(Mozilla::LDAP::LDIF)perl(Mozilla::LDAP::Utils)perl(NetAddr::IP::Util)perl(POSIX)perl(Resource)perl(Scalar::Util)perl(Setup)perl(SetupLog)perl(Socket)perl(Sys::Hostname)perl(Time::Local)perl(lib)perl(sigtrap)perl(strict)perl(vars)perl(warnings)perl-Mozilla-LDAPperl-NetAddr-IPperl-Socketpolicycoreutils-pythonpython-ldaprpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)selinux-policysvrcoresystemd-libssystemd-unitssystemd-unitssystemd-unitsrpmlib(PayloadIsXz)1.3.8.4-18.el7_61.3.8.4-18.el7_63.343.0.4-14.6.0-14.0.4-14.0-13.13.1-1374.1.35.2-1selinux-policy-base3.9.84.11.3[@[@[[:@[[-[~[~[m~@[W[U@[L[L[L[L[0@[0@[+@[@ZZZyZyZk@Z`@ZX@Z*~Z }YZ@YZ@YZ@Y@YB@Y*@Y˒Y˒Y@Y6@Y$$@Y@Y i@Y i@Y i@Y i@XQ@XQ@X@X9@XP@XX@X@X@X2@W@W@Wu@W@Wt@W.@W~W~W@W@Ws@Ws@Wi,@Wi,@W_W^@W - 1.3.8.4-18Mark Reynolds - 1.3.8.4-17Mark Reynolds - 1.3.8.4-16Mark Reynolds - 1.3.8.4-15Mark Reynolds - 1.3.8.4-14Mark Reynolds - 1.3.8.4-13Mark Reynolds - 1.3.8.4-12Mark Reynolds - 1.3.8.4-11Mark Reynolds - 1.3.8.4-10Mark Reynolds - 1.3.8.4-9Mark Reynolds - 1.3.8.4-8Mark Reynolds - 1.3.8.4-7Mark Reynolds - 1.3.8.4-6Mark Reynolds - 1.3.8.4-5Mark Reynolds - 1.3.8.4-4Mark Reynolds - 1.3.8.4-3Mark Reynolds - 1.3.8.4-2Mark Reynolds - 1.3.8.4-1Mark Reynolds - 1.3.8.2-1Mark Reynolds - 1.3.7.5-18Mark Reynolds - 1.3.7.5.17Mark Reynolds - 1.3.7.5-16Mark Reynolds - 1.3.7.5-15Mark Reynolds - 1.3.7.5-14Mark Reynolds - 1.3.7.5-13Mark Reynolds - 1.3.7.5-12Mark Reynolds - 1.3.7.5-11Mark Reynolds - 1.3.7.5-10Mark Reynolds - 1.3.7.5-9Mark Reynolds - 1.3.7.5-8Mark Reynolds - 1.3.7.5-7Mark Reynolds - 1.3.7.5-6Mark Reynolds - 1.3.7.5-5Mark Reynolds - 1.3.7.5-4Mark Reynolds - 1.3.7.5-3Mark Reynolds - 1.3.7.5-2Mark Reynolds - 1.3.7.5-1Mark Reynolds - 1.3.6.1-16Mark Reynolds - 1.3.6.1-15Mark Reynolds - 1.3.6.1-14Mark Reynolds - 1.3.6.1-13Mark Reynolds - 1.3.6.1-12Mark Reynolds - 1.3.6.1-11Mark Reynolds - 1.3.6.1-10Mark Reynolds - 1.3.6.1-9Mark Reynolds - 1.3.6.1-8Mark Reynolds - 1.3.6.1-7Mark Reynolds - 1.3.6.1-6Mark Reynolds - 1.3.6.1-5Mark Reynolds - 1.3.6.1-4Mark Reynolds - 1.3.6.1-3Mark Reynolds - 1.3.6.1-2Mark Reynolds - 1.3.6.1-1Noriko Hosoi - 1.3.5.10-12Noriko Hosoi - 1.3.5.10-11Noriko Hosoi - 1.3.5.10-10Noriko Hosoi - 1.3.5.10-9Noriko Hosoi - 1.3.5.10-8Noriko Hosoi - 1.3.5.10-7Noriko Hosoi - 1.3.5.10-6Noriko Hosoi - 1.3.5.10-5Noriko Hosoi - 1.3.5.10-4Noriko Hosoi - 1.3.5.10-3Noriko Hosoi - 1.3.5.10-2Noriko Hosoi - 1.3.5.10-1Noriko Hosoi - 1.3.5.9-1Noriko Hosoi - 1.3.5.8-1Noriko Hosoi - 1.3.5.7-1Noriko Hosoi - 1.3.5.6-1Noriko Hosoi - 1.3.5.5-1Noriko Hosoi - 1.3.5.4-1Noriko Hosoi - 1.3.5.3-1Noriko Hosoi - 1.3.5.2-1Noriko Hosoi - 1.3.4.0-19Noriko Hosoi - 1.3.4.0-18Noriko Hosoi - 1.3.4.0-17Noriko Hosoi - 1.3.4.0-16Noriko Hosoi - 1.3.4.0-15Noriko Hosoi - 1.3.4.0-14Noriko Hosoi - 1.3.4.0-13Noriko Hosoi - 1.3.4.0-12Noriko Hosoi - 1.3.4.0-11Noriko Hosoi - 1.3.4.0-10Noriko Hosoi - 1.3.4.0-9Noriko Hosoi - 1.3.4.0-8Noriko Hosoi - 1.3.4.0-7Noriko Hosoi - 1.3.4.0-6Noriko Hosoi - 1.3.4.0-5Noriko Hosoi - 1.3.4.0-4Noriko Hosoi - 1.3.4.0-3Noriko Hosoi - 1.3.4.0-2Noriko Hosoi - 1.3.4.0-1Noriko Hosoi - 1.3.3.1-19Noriko Hosoi - 1.3.3.1-18Noriko Hosoi - 1.3.3.1-17Noriko Hosoi - 1.3.3.1-16Noriko Hosoi - 1.3.3.1-15Noriko Hosoi - 1.3.3.1-14Noriko Hosoi - 1.3.3.1-13Noriko Hosoi - 1.3.3.1-12Noriko Hosoi - 1.3.3.1-11Noriko Hosoi - 1.3.3.1-10Noriko Hosoi - 1.3.3.1-9Noriko Hosoi - 1.3.3.1-8Noriko Hosoi - 1.3.3.1-7Noriko Hosoi - 1.3.3.1-6Noriko Hosoi - 1.3.3.1-5Noriko Hosoi - 1.3.3.1-4Rich Megginson - 1.3.3.1-3Noriko Hosoi - 1.3.3.1-2Noriko Hosoi - 1.3.3.1-1Noriko Hosoi - 1.3.1.6-26Noriko Hosoi - 1.3.1.6-25Noriko Hosoi - 1.3.1.6-24Noriko Hosoi - 1.3.1.6-23Noriko Hosoi - 1.3.1.6-22Noriko Hosoi - 1.3.1.6-21Noriko Hosoi - 1.3.1.6-20Noriko Hosoi - 1.3.1.6-19Noriko Hosoi - 1.3.1.6-18Noriko Hosoi - 1.3.1.6-17Daniel Mach - 1.3.1.6-16Noriko Hosoi - 1.3.1.6-15Noriko Hosoi - 1.3.1.6-14Daniel Mach - 1.3.1.6-13Noriko Hosoi - 1.3.1.6-12Rich Megginson - 1.3.1.6-11Rich Megginson - 1.3.1.6-10Noriko Hosoi - 1.3.1.6-9Noriko Hosoi - 1.3.1.6-8Rich Megginson - 1.3.1.6-7Rich Megginson - 1.3.1.6-6Rich Megginson - 1.3.1.6-5Noriko Hosoi - 1.3.1.6-4Rich Megginson - 1.3.1.6-3Noriko Hosoi - 1.3.1.6-2Noriko Hosoi - 1.3.1.6-1Noriko Hosoi - 1.3.1.5-1Noriko Hosoi - 1.3.1.4-1Rich Megginson - 1.3.1.3-1Jan Safranek - 1.3.1.2-2Noriko Hosoi - 1.3.1.2-1Noriko Hosoi - 1.3.1.1-1Noriko Hosoi - 1.3.1.0-1Noriko Hosoi - 1.3.0.5-1Mark Reynolds - 1.3.0.4-1Noriko Hosoi - 1.3.0.3-1Parag Nemade - 1.3.0.2-2Noriko Hosoi - 1.3.0.2-1Noriko Hosoi - 1.3.0.1-1Noriko Hosoi - 1.3.0.0-1Noriko Hosoi - 1.3.0-0.3.rc3Noriko Hosoi - 1.3.0-0.2.rc2Noriko Hosoi - 1.3.0-0.1.rc1Mark Reynolds - 1.3.0.a1-1Rich Megginson - 1.2.11.15-1Rich Megginson - 1.2.11.14-1Rich Megginson - 1.2.11.13-1Rich Megginson - 1.2.11.12-1Mark Reynolds - 1.2.11.11-1Mark Reynolds - 1.2.11.10-1Mark Reynolds - 1.2.11.9-1Mark Reynolds - 1.2.11.8-1Fedora Release Engineering - 1.2.11.7-2.2Petr Pisar - 1.2.11.7-2.1Rich Megginson - 1.2.11.7-2Rich Megginson - 1.2.11.7-1Rich Megginson - 1.2.11.6-1Rich Megginson - 1.2.11.5-2Rich Megginson - 1.2.11.5-1Petr Pisar - 1.2.11.4-1.1Rich Megginson - 1.2.11.4-1Rich Megginson - 1.2.11.3-1Rich Megginson - 1.2.11.2-1Rich Megginson - 1.2.11.1-1Rich Megginson - 1.2.11-0.1.a1Noriko Hosoi - 1.2.10.4-4Noriko Hosoi - 1.2.10.4-3Rich Megginson - 1.2.10.4-2Rich Megginson - 1.2.10.4-1Rich Megginson - 1.2.10.3-1Rich Megginson - 1.2.10.2-1Noriko Hosoi - 1.2.10.1-2Rich Megginson - 1.2.10.1-1Rich Megginson - 1.2.10.0-1Noriko Hosoi - 1.2.10-0.10.rc1.2Petr Pisar - 1.2.10-0.10.rc1.1Rich Megginson - 1.2.10-0.10.rc1Rich Megginson - 1.2.10-0.9.a8Rich Megginson - 1.2.10-0.8.a7Rich Megginson - 1.2.10-0.7.a7Fedora Release Engineering - 1.2.10-0.6.a6.1Rich Megginson - 1.2.10-0.6.a6Rich Megginson - 1.2.10-0.5.a5Rich Megginson - 1.2.10-0.4.a4Rich Megginson - 1.2.10.a3-0.3Rich Megginson - 1.2.10.a2-0.2Rich Megginson - 1.2.10.a1-0.1Rich Megginson - 1.2.9.10-2Rich Megginson - 1.2.9.10-1Rich Megginson - 1.2.9.9-1Rich Megginson - 1.2.9.8-1Rich Megginson - 1.2.9.7-1Rich Megginson - 1.2.9.6-1Rich Megginson - 1.2.9.5-1Rich Megginson - 1.2.9.4-1Rich Megginson - 1.2.9.3-1Rich Megginson - 1.2.9.2-1Rich Megginson - 1.2.9.1-2Rich Megginson - 1.2.9.1-1Petr Sabata - 1.2.9.0-1.2Petr Sabata - 1.2.9.0-1.1Rich Megginson - 1.2.9.0-1Rich Megginson - 1.2.9-0.2.a2Marcela Mašláňová - 1.2.9-0.1.a1.2Marcela Mašláňová - 1.2.9-0.1.a1.1Rich Megginson - 1.2.9-0.1.a1Rich Megginson - 1.2.8.3-1Rich Megginson - 1.2.8.2-1Rich Megginson - 1.2.8.1-1Rich Megginson - 1.2.8.0-1Rich Megginson - 1.2.8-0.10.rc5Rich Megginson - 1.2.8-0.9.rc4Rich Megginson - 1.2.8-0.8.rc2Caolán McNamara - 1.2.8-0.7.rc1Rich Megginson - 1.2.8-0.6.rc1Rich Megginson - 1.2.8-0.5.a3Rich Megginson - 1.2.8-0.4.a3Rich Megginson - 1.2.8-0.3.a3Fedora Release Engineering - 1.2.8-0.2.a2.1Rich Megginson - 1.2.8-0.2.a2Nathan Kinder - 1.2.8-0.1.a1Rich Megginson - 1.2.7.5-1Rich Megginson - 1.2.7.4-2Rich Megginson - 1.2.7.4-1Rich Megginson - 1.2.7.3-1Rich Megginson - 1.2.7.2-1Rich Megginson - 1.2.7.1-2Rich Megginson - 1.2.7.1-1Nathan Kinder - 1.2.7-2Nathan Kinder - 1.2.7-1Rich Megginson - 1.2.7-0.6.a5Rich Megginson - 1.2.7-0.5.a4Rich Megginson - 1.2.7-0.4.a3Rich Megginson - 1.2.7-0.3.a3Rich Megginson - 1.2.7-0.2.a2Rich Megginson - 1.2.7-0.1.a1Rich Megginson - 1.2.6.1-3Rich Megginson - 1.2.6.1-2Rich Megginson - 1.2.6.1-1Rich Megginson - 1.2.6-1Rich Megginson - 1.2.6-0.11.rc7Rich Megginson - 1.2.6-0.10.rc6Rich Megginson - 1.2.6-0.9.rc3Rich Megginson - 1.2.6-0.8.rc3Rich Megginson - 1.2.6-0.7.rc2Nathan Kinder - 1.2.6-0.6.rc1Rich Megginson - 1.2.6-0.5.rc1Marcela Maslanova - 1.2.6-0.4.a4.1Rich Megginson - 1.2.6-0.4.a4Nathan Kinder - 1.2.6-0.4.a3Caolán McNamara - 1.2.6-0.3.a2Rich Megginson - 1.2.6-0.2.a2Nathan Kinder - 1.2.6-0.1.a1Rich Megginson - 1.2.5-1Rich Megginson - 1.2.5-0.5.rc4Rich Megginson - 1.2.5-0.4.rc3Rich Megginson - 1.2.5-0.3.rc2Rich Megginson - 1.2.5-0.2.rc1Rich Megginson - 1.2.5-0.1.a1Rich Megginson - 1.2.4-1Rich Megginson - 1.2.3-1Caolán McNamara - 1.2.2-2Rich Megginson - 1.2.2-1Tomas Mraz - 1.2.1-5Noriko Hosoi - 1.2.1-4Rich Megginson - 1.2.1-3Fedora Release Engineering - 1.2.1-2Rich Megginson - 1.2.1-1Rich Megginson - 1.2.0-4Rich Megginson - 1.2.0-3Rich Megginson - 1.2.0-2Rich Megginson - 1.2.0-1Noriko Hosoi - 1.1.3-7Noriko Hosoi - 1.1.3-6Rich Megginson - 1.1.3-5Rich Megginson - 1.1.3-4Rich Megginson - 1.1.3-3Rich Megginson - 1.1.3-2Rich Megginson - 1.1.3-1Rich Megginson - 1.1.2-1Rich Megginson - 1.1.1-2Rich Megginson - 1.1.1-1Rich Megginson - 1.1.0.1-4Tom "spot" Callaway - 1.1.0.1-3Tom "spot" Callaway - 1.1.0.1-3Rich Megginson - 1.1.0.1-2Rich Megginson - 1.1.0.1-1Fedora Release Engineering - 1.1.0-5Rich Megginson - 1.1.0-4Release Engineering - 1.1.0-3Rich Megginson - 1.1.0-2.0Rich Megginson - 1.1.0-1.2Rich Megginson - 1.1.0-1.1Rich Megginson - 1.1.0-0.3.20070720Nathan Kinder - 1.1.0-0.2.20070320Rich Megginson - 1.1.0-0.1.20070320Rich Megginson - 1.1.0-0.1.20070223Rich Megginson - 1.1.0-0.1.20070213Rich Megginson - 1.1.0-1.el4.20070209Rich Megginson - 1.1.0-1.el4.20070207Rich Megginson - 1.1.0-1.el4.20070129Rich Megginson - 1.1.0-8.el4.20070125Rich Megginson - 1.1.0-7.el4.20070125Rich Megginson - 1.1.0-6.el4.20070125Rich Megginson - 1.1.0-5.el4.20070125Rich Megginson - 1.1.0-4.el4.20070119Rich Megginson - 1.1.0-3.el4.20070119Rich Megginson - 1.1.0-2.el4.20070119Rich Megginson - 1.1.0-1.el4.cvs20070119Rich Megginson - 1.1-0.1.cvs20070115Dennis Gilmore - 1.1-0.1.cvs20070108Rich Megginson - 1.0.99-16Rich Megginson - 1.0.99-15Rich Megginson - 1.0.99-14Rich Megginson - 1.0.99-13Rich Megginson - 1.0.99-12Rich Megginson - 1.0.99-11Rich Megginson - 1.0.99-10Rich Megginson - 1.0.99-9Rich Megginson - 1.0.99-8Rich Megginson - 1.0.99-7Rich Megginson - 1.0.99-6Rich Megginson - 1.0.99-5Rich Megginson - 1.0.99-4Rich Megginson - 1.0.99-3Rich Megginson - 1.0.99-2Rich Megginson - 1.0.99-1- Bump version to 1.3.8.4-18 - Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex- Bump version to 1.3.8.4-17 - Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int- Bump version to 1.3.8.4-16 - Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical- Bump version to 1.3.8.4-15 - Resolves: Bug 1624004 - Fix regression in last patch- Bump version to 1.3.8.4-14 - Resolves: Bug 1624004 - potential denial of service attack- Bump version to 1.3.8.4-13 - Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly- Bump version to 1.3.8.4-12 - Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)- Bump version to 1.3.8.4-11 - Resolves: Bug 1614820 - Server crash through modify command with large DN- Bump verison to 1.3.8.4-10 - Resolves: Bug 1614501 - Disable nunc-stans by default - Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server- Bump version to 1.3.8.4-9 - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.- Bump version to 1.3.8.4-8 - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.- Bump version to 1.3.8.4-7 - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA (removed patch file all together)- Bump version to 1.3.8.4-6 - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA- Bump version to 1.3.8.4-5 - Resolves: Bug 1595766 - CVE-2018-10871 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default- Bump version to 1.3.8.4-4 - Resolves: Bug 1597384 - Async operations can hang when the server is running nunc-stans - Resolves: Bug 1598186 - A search with the scope "one" returns a non-matching entry - Resolves: Bug 1598718 - import fails if backend name is "default" - Resolves: Bug 1598478 - If a replica is created with a bindDNGroup, this group is taken into account only after bindDNGroupCheckInterval seconds - Resolves: Bug 1525256 - Invalid SNMP MIB for 389 DS - Resolves: Bug 1597518 - ds-replcheck command returns traceback errors against ldif files having garbage content when run in offline mode- Bump version to 1.3.8.4-3 - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.- Bump version to 1.3.8.4-2 - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.- Bump version to 1.3.8.4-1 - Resolves: Bug 1560653 - Rebase 389-ds-base in RHEL 7.6 to 1.3.8- Bump version to 1.3.8.2-1 - Resolves: Bug 1560653 - Rebase 389-ds-base in RHEL 7.6 to 1.3.8- Bump version to 1.3.7.5-18 - Resolves: Bug 1539082 - Fix memory leak- Bump version to 1.3.7.5.17 - Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent - Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 - Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp- Bump version to 1.3.7.5-16 - Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP- Bump version to 1.3.7.5-15 - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy - Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections- Bump version to 1.3.7.5-14 - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)- Bump version to 1.3.7.5-13 - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 - Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c - Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy- Bump version to 1.3.7.5-12 - Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter - Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica - Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length - Resolves: Bug 1518287 - heap-use-after-free in csn_as - Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing - Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired - Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate - Resolves: Bug 1457315 - cmocka tests are not executed during rpm build - Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL- Bump version to 1.3.7.5-11 - Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape - Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base - Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base - Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get- Bump version to 1.3.7.5-10 - Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled. - Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick - Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base - Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package - Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset - Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes - Resolves: Bug 1498980 - heap corruption during import - Resolves: Bug 1511462 - scope one searches give incorrect results - Resolves: Bug 1514033 - opened connection are hanging, no longer poll- Bump version to 1.3.7.5-9 - Resolves: Bug 1271208 - Fix copy and paste error- Bump version to 1.3.7.5-8 - Resolves: Bug 1509016 - cleanallruv task is not logging any information- Bump version to 1.3.7.5-7 - Resolves: Bug 1474100 - Use of uninitialized value in string ne at /usr/bin/logconv.pl - Resolves: Bug 1506425 - Improve valueset sort performance during valueset purging - Resolves: Bug 1505046 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV - Resolves: Bug 1271208 - nsds5ReplicaProtocolTimeout attribute accepts negative values- Bump version to 1.3.7.5-6 - Resolves: Bug 1488836 - directory server fails to start because maxdisksize - Resolves: Bug 1474100 - Use of uninitialized value in string ne at /usr/bin/logconv.pl - Resolves: Bug 1447308 - Add option to show full un-ellipsized output in status-dirsrv - Resolves: Bug 1438526 - Server allows to set any nsds5replicaid in the existing replica entry - Resolves: Bug 1185774 - Missing warning for invalid replica backoff configuration- Bump version to 1.3.7.5-5 - Resolves: Bug 1476207 - Enabling instance service doesn't work - Resolves: Bug 1434335 - Errors log filled with attrlist_replace - attr_replace - Resolves: Bug 1453155 - unable to retrieve specific cosAttribute when subtree password policy is configured - Resolves: Bug 1459965 - repl-monitor - matches null string many times in regex - Resolves: Bug 1463204 - Adding a database entry fails if the same database was deleted after an import - Resolves: Bug 1469567 - Activating roles returns error 16 - Resolves: Bug 1498773 - Installation of ipa fails with crash in topology plugin - Resolves: Bug 1501058 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends - Resolves: Bug 1352121 - [RFE] allow to enable MemberOf plugin in dedicated consumer- Bump version to 1.3.7.5-4 - Fix coverity warnings from convscan - Improve atomics- Bump version to 1.3.7.5-3 - specfile remove cap_net_bind_service+ep from ns-slapd- Bump version to 1.3.7.5-2 - specfile updates: add asan support, make nunc-stans default, and general cleanup- Bump version to 1.3.7.5-1 - Resolves: Bug 1470169 - Rebase 389-ds-base in RHEL 7.5 to 1.3.7- Bump version to 1.3.6.1-16 - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify - Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird - Resolves: Bug 1456774 - ipa-replica server fails to upgrade- Bump version to 1.3.6.1-15 - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify - Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file" - Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0- Bump version to 1.3.6.1-14 - Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing. - Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value - Resolves: Bug 1449098 - ns-slapd crashes in role cache creation - Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so - Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users - Resolves: Bug 1451657 - -v option is not working for db2ldif.pl- Bump version to 1.3.6.1-13 - Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)- Bump version to 1.3.6.1-12 - Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10- Bump version to 1.3.6.1-11 - Resolves: Bug 1410207 - Utility command had better use INFO log level for the output - Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl- Bump version to 1.3.6.1-10 - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val - Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous - Resolves: Bug 1377452 - Integer overflow in performance counters - Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values - Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975 - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script- Bump version to 1.3.6.1-9 - Resolves: Bug 1442880 - setup-ds-admin.pl -u with nsslapd-localhost changed - Resolves: Bug 1443682 - util_info_sys_pages should be able to detect memory restrictions in a cgroup- Bump version to 1.3.6.1-8 - Resolves: Bug 1432016 - Possible deadlock while installing an ipa replica - Resolves: Bug 1438029 - Overflow in memberof- Bump version to 1.3.6.1-7 - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set(fix crash regression) - Resolves: bug 1381326 - dirsrv-snmp.service is provided by 389-ds-base instead of 389-ds-base-snmp - Resolves: bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl.- Bump version to 1.3.6.1-6 - Resolves: bug 1437006 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages - Resolves: bug 1341689 - dbmon.sh / cn=monitor] nsslapd-db-pages-in-use is increasing - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set - Resolves: bug 1397288 - typo in logconv.pl man page - Resolves: bug 1436994 - incorrect pathes in pkg-config files - Resolves: bug 1396448 - Add a hard dependency for >=selinux-policy-3.13.1-75- Bump version to 1.3.6.1-5 - Resolves: bug 1377452 - Integer overflow in counters and monitor - Resolves: bug 1425907 - Harden password storage scheme - Resolves: bug 1431207 - ns-slapd killed by SIGABRT- Bump version to 1.3.6.1-4 - Resolves: bug 1379424 - Reset-agmt-update-staus-and-total-init - Resolves: bug 1394000 - dbmon.sh-fails-if-you-have-nsslapd-requi.patch - Resolves: bug 1417344 - targetattr-wildcard-evaluation-is-incorr.patch - Resolves: bug 1429770 - ds-logpipe.py-crashes-for-non-existing-u.patch - Resolves: bug 1433697 - Fix-double-free-in-_cl5NewDBFile-error-path.patch - Resolves: bug 1433996 - retrocl-can-crash-server-at-shutdown.patch - Resolves: bug 1434967 - rpm-would-not-create-valid-pkgconfig-fi.patch - Resolves: bug 1417338 - To-debug-DB_DEADLOCK-condition-allow-to.patch - Resolves: bug 1433850 - Deleting-suffix-can-hang-server.patch- Bump version to 1.3.6.1-3 - Fix spec file to include the tests- Bump version to 1.3.6.1-2 - Resolves: bug 1431877 - 389-1.3.6.1-1.el7 covscan errors - Resolves: bug 1432206 - content sync plugin can hang server shutdown - Resolves: bug 1432149 - sasl external binds fail in 1.3.6.1- Bump version to 1.3.6.1-1 - Resolves: bug 1388567 - Rebase 389-ds-base to 1.3.6 in RHEL-7.4- Release 1.3.5.10-12 - Resolves: bug 1384785 - Replica install fails with old IPA master sometimes during replication process (DS 48992) - Resolves: bug 1388501 - 389-ds-base is missing runtime dependency - bind-utils (DS 48328) - Resolves: bug 1388581 - Replication stops working only when fips mode is set to true (DS 48909) - Resolves: bug 1390342 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin (DS 49014) - Resolves: bug 1390343 - trace args debug logging must be more restrictive (DS 49009)- Release 1.3.5.10-11 - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates- Release 1.3.5.10-10 - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957) - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)- Release 1.3.5.10-9 - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950) - Resolves: bug 1366828 - audit on failure doesn't work if attribute nsslapd-auditlog-logging-enabled is NOT enabled (DS 48958) - Resolves: bug 1368520 - Crash in import_wait_for_space_in_fifo() (DS 48960) - Resolves: bug 1368956 - man page of ns-accountstatus.pl shows redundant entries for -p port option - Resolves: bug 1369537 - passwordMinAge attribute doesn't limit the minimum age of the password (DS 48967) - Resolves: bug 1369570 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964) - Resolves: bug 1369425 - ACI behaves erratically (DS 48972) - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957) - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969) - Resolves: bug 1371283 - Server Side Sorting crashes the server. (DS 48970) - Resolves: bug 1371284 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)- Release 1.3.5.10-8 - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48954) - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950) - Resolves: bug 1366561 - ns-accountstatus.pl giving error even "No such object (32)" (DS 48956)- Release 1.3.5.10-7 - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450) - Resolves: bug 1360976 - fixing a compiler warning- Release 1.3.5.10-6 - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48928) - Resolves: bug 1360447 - nsslapd-workingdir is empty when ns-slapd is started by systemd (DS 48939) - Resolves: bug 1360327 - remove-ds.pl deletes an instance even if wrong prefix was specified (DS 48934) - Resolves: bug 1349815 - DS logs have warning:ancestorid not indexed for all CS subsystems (DS 48940) - Resolves: bug 1329061 - 389-ds-base-1.3.4.0-29.el7_2 "hang" (DS 48882) - Resolves: bug 1360976 - EMBARGOED CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack - Resolves: bug 1361134 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password (DS 48943) - Resolves: bug 1361321 - Duplicate collation entries (DS 48936) - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450) - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat- Release 1.3.5.10-5 - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)- Release 1.3.5.10-4 - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144) - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919) - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat - Resolves: bug 1354660 - flow control in replication also blocks receiving results (DS 48767) - Resolves: bug 1356261 - Fixup tombstone task needs to set proper flag when updating (DS 48924) - Resolves: bug 1355760 - ns-slapd crashes during the deletion of backend (DS 48922) - Resolves: bug 1353629 - DS shuts down automatically if dnaThreshold is set to 0 in a MMR setup (DS 48916) - Resolves: bug 1355879 - nunc-stans: ns-slapd crashes during startup with SIGILL on AMD Opteron 280 (DS 48925)- Release 1.3.5.10-3 - Resolves: bug 1354374 - Fixing the tarball version in the sources file.- Release 1.3.5.10-2 - Resolves: bug 1353714 - If a cipher is disabled do not attempt to look it up (DS 48743) - Resolves: bug 1353592 - Setup-ds.pl --update fails - regression (DS 48755) - Resolves: bug 1353544 - db2bak.pl task enters infinitive loop when bak fs is almost full (DS 48914) - Resolves: bug 1354374 - Upgrade to 389-ds-base >= 1.3.5.5 doesn't install 389-ds-base-snmp (DS 48918)- Release 1.3.5.10-1 - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48905)- Release 1.3.5.9-1 - Resolves: bug 1349571 - Improve MMR replication convergence (DS 48636) - Resolves: bug 1304682 - "stale" automember rule (associated to a removed group) causes discrepancies in the database (DS 48637) - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755) - Resolves: bug 1316731 - syncrepl search returning error 329; plugin sending a bad error code (DS 48904) - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule (DS 48891) - Resolves: bug 1349577 - Values of dbcachetries/dbcachehits in cn=monitor could overflow. (DS 48899) - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT (DS 48898) - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538) - Resolves: bug 1350632 - ns-slapd shutdown crashes if pwdstorageschema name is from stack. (DS 48902)- Release 1.3.5.8-1 - Resolves: bug 1290101 - proxyauth support does not work when bound as directory manager (DS 48366)- Release 1.3.5.7-1 - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109) - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449) - Resolves: bug 1290101 - proxyauth support does not work when bound as directory manager (DS 48366) - Resolves: bug 1338872 - Wrong result code display in audit-failure log (DS 48892) - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538) - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule (DS 48891) - Resolves: bug 1347407 - By default aci can be read by anonymous (DS 48354) - Resolves: bug 1347412 - cn=SNMP,cn=config entry can be read by anonymous (DS 48893)- Release 1.3.5.6-1 - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982) - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48766, DS 48636) - Resolves: bug 1233926 - "matching rules" in ACI's "bind rules not fully evaluated (DS 48234) - Resolves: bug 1346165 - 389-ds-base-1.3.5.5-1.el7.x86_64 requires policycoreutils-py- Release 1.3.5.5-1 - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 48833) - Resolves: bug 1344414 - [RFE] adding pre/post extop ability (DS 48880) - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449) - Resolves: bug 1257568 - /usr/lib64/dirsrv/libnunc-stans.so is owned by both -libs and -devel (DS 48404) - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755) - Resolves: bug 1342609 - At startup DES to AES password conversion causes timeout in start script (DS 48862) - Resolves: bug 1316328 - search returns no entry when OR filter component contains non readable attribute (DS 48275) - Resolves: bug 1280456 - setup-ds should detect if port is already defined (DS 48336) - Resolves: bug 1312557 - dirsrv service fails to start when nsslapd-listenhost is configured (DS 48747) - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48752) - Resolves: bug 1340307 - Running db2index with no options breaks replication (DS 48854) - Resolves: bug 1337195 - Regression introduced in matching rules by DS 48746 (DS 48844) - Resolves: bug 1335492 - Modifier's name is not recorded in the audit log with modrdn and moddn operations (DS 48834) - Resolves: bug 1316741 - ldctl should support -H with ldap uris (DS 48754)- release 1.3.5.4-1 - Resolves: bug 1334455 - db2ldif is not taking into account multiple suffixes or backends (DS 48828) - Resolves: bug 1241563 - The "repl-monitor" web page does not display "year" in date. (DS 48220) - Resolves: bug 1335618 - Server ram sanity checks work in isolation (DS 48617) - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48837)- release 1.3.5.3-1 - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144) - Resolves: bug 1332533 - ns-accountstatus.pl gives error message on execution along with results. (DS 48815) - Resolves: bug 1332709 - password history is not updated when an admin resets the password (DS 48813) - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48822) - Resolves: bug 1333515 - Enable DS to offer weaker DH params in NSS (DS 48798)- release 1.3.5.2-1 - Resolves: bug 1270020 - Rebase 389-ds-base to 1.3.5 in RHEL-7.3 - Resolves: bug 1288229 - many attrlist_replace errors in connection with cleanallruv (DS 48283) - Resolves: bug 1315893 - License tag does not match actual license of code (DS 48757) - Resolves: bug 1320715 - DES to AES password conversion fails if a backend is empty (DS 48777) - Resolves: bug 190862 - [RFE] Default password syntax settings don't work with fine-grained policies (DS 142) - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 548) - Resolves: bug 1143066 - The dirsrv user/group should be created in rpm %pre, and ideally with fixed uid/gid (DS 48285) - Resolves: bug 1153758 - [RFE] Support SASL/GSSAPI when ns-slapd is behind a load-balancer (DS 48332) - Resolves: bug 1160902 - search, matching rules and filter error "unsupported type 0xA9" (DS 48016) - Resolves: bug 1186512 - High memory fragmentation observed in ns-slapd; OOM-Killer invoked (DS 48377, 48129) - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109) - Resolves: bug 1209094 - [RFE] Allow logging of rejected changes (DS 48145, 48280) - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144) - Resolves: bug 1210842 - [RFE] Add PIDFile option to systemd service file (DS 47951) - Resolves: bug 1223510 - [RFE] it could be nice to have nsslapd-maxbersize default to bigger than 2Mb (DS 48326) - Resolves: bug 1229799 - ldclt-bin killed by SIGSEGV (DS 48289) - Resolves: bug 1249908 - No validation check for the value for nsslapd-db-locks. (DS 48244) - Resolves: bug 1254887 - No man page entry for - option '-u' of dbgen.pl for adding group entries with uniquemembers (DS 48290) - Resolves: bug 1255557 - db2index creates index entry from deleted records (DS 48252) - Resolves: bug 1258610 - total update request must not be lost (DS 48255) - Resolves: bug 1258611 - dna plugin needs to handle binddn groups for authorization (DS 48258) - Resolves: bug 1259624 - [RFE] Provide a utility to detect accounts locked due to inactivity (DS 48269) - Resolves: bug 1259950 - Add config setting to MemberOf Plugin to add required objectclass got memberOf attribute (DS 48267) - Resolves: bug 1266510 - Linked Attributes plug-in - wrong behaviour when adding valid and broken links (DS 48295) - Resolves: bug 1266532 - Linked Attributes plug-in - won't update links after MODRDN operation (DS 48294) - Resolves: bug 1267750 - pagedresults - when timed out, search results could have been already freed. (DS 48299) - Resolves: bug 1269378 - ds-logpipe.py with wrong arguments - python exception in the output (DS 48302) - Resolves: bug 1271330 - nunc-stans: Attempt to release connection that is not acquired (DS 48311) - Resolves: bug 1272677 - nunc stans: ns-slapd killed by SIGTERM - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT - Resolves: bug 1273142 - crash in Managed Entry plugin (DS 48312) - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982) - Resolves: bug 1273550 - Deadlock between two MODs on the same entry between entry cache and backend lock (DS 47978) - Resolves: bug 1273555 - deadlock in mep delete post op (DS 47976) - Resolves: bug 1273584 - lower password history minimum to 1 (DS 48394) - Resolves: bug 1275763 - [RFE] add setup-ds.pl option to disable instance specific scripts (DS 47840) - Resolves: bug 1276072 - [RFE] Allow RHDS to be setup using a DNS CNAME alias for General.FullMachineName (DS 48328) - Resolves: bug 1278567 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338) - Resolves: bug 1278584 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well. (DS 48339) - Resolves: bug 1278755 - deadlock on connection mutex (DS 48341) - Resolves: bug 1278987 - Cannot upgrade a consumer to supplier in a multimaster environment (DS 48325) - Resolves: bug 1280123 - acl - regression - trailing ', (comma)' in macro matched value is not removed. (DS 48344) - Resolves: bug 1290111 - [RFE] Support for rfc3673 '+' to return operational attributes (DS 48363) - Resolves: bug 1290141 - With exhausted range, part of DNA shared configuration is deleted after server restart (DS 48362) - Resolves: bug 1290242 - SimplePagedResults -- in the search error case, simple paged results slot was not released. (DS 48375) - Resolves: bug 1290600 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same ldapmodify operation (DS 48370) - Resolves: bug 1295947 - 389-ds hanging after a few minutes of operation (DS 48406, revert 48338) - Resolves: bug 1296310 - ldclt - segmentation fault error while binding (DS 48400) - Resolves: bug 1299758 - CVE-2016-0741 389-ds-base: Worker threads do not detect abnormally closed connections causing DoS [rhel-7.3] - Resolves: bug 1301097 - logconv.pl displays negative operation speeds (DS 48446) - Resolves: bug 1302823 - Crash in slapi_get_object_extension (DS 48536) - Resolves: bug 1303641 - heap corruption at schema replication. (DS 48492) - Resolves: bug 1307151 - keep alive entries can break replication (DS 48445) - Resolves: bug 1310848 - Supplier can skip a failing update, although it should retry. (DS 47788) - Resolves: bug 1314557 - change severity of some messages related to "keep alive" enties (DS 48420) - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450) - Resolves: bug 1316742 - no plugin calls in tombstone purging (DS 48759) - Resolves: bug 1319329 - [RFE] add nsslapd-auditlog-logging-enabled: off to template-dse.ldif (DS 48145) - Resolves: bug 1320295 - If nsSSL3 is on, even if SSL v3 is not really enabled, a confusing message is logged. (DS 48775) - Resolves: bug 1326520 - db2index uses a buffer size derived from dbcachesize (DS 48383) - Resolves: bug 1328936 - objectclass values could be dropped on the consumer (DS 48799) - Resolves: bug 1287475 - [RFE] response control for password age should be sent by default by RHDS (DS 48369) - Resolves: bug 1331343 - Paged results search returns the blank list of entries (DS 48808)- release 1.3.4.0-19 - Resolves: bug 1228823 - async simple paged results issue (DS 48299, DS 48192) - Resolves: bug 1266944 - ns-slapd crash during ipa-replica-manage del (DS 48298)- release 1.3.4.0-18 - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266, DS 48284)- release 1.3.4.0-17 - Resolves: bug 1259949 - A backport error (coverity -- unused variable 'init_retry')- release 1.3.4.0-16 - Resolves: bug 1243970 - In MMR, double free coould occur under some special condition (DS 48276, DS 48226) - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266) - Resolves: bug 1241723 - cleanallruv - fix regression with server shutdown (DS 48217) - Resolves: bug 1264224 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in (DS 48188)- release 1.3.4.0-15 - Resolves: bug 1258996 - Complex filter in a search request doen't work as expected. (regression) (DS 48265) - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)- release 1.3.4.0-14 - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228) - Resolves: bug 1255851 - Shell CLI fails with usage errors if an argument containing white spaces is given (DS 48254) - Resolves: bug 1256938 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax (DS 47757)- release 1.3.4.0-13 - Resolves: bug 1245519 - remove debug logging from retro cl (DS 47831)- release 1.3.4.0-12 - Resolves: bug 1252133 - replica upgrade failed in starting dirsrv service (DS 48243) - Resolves: bug 1254344 - Server crashes in ACL_LasFindFlush during shutdown if ACIs contain IP addresss restrictions (DS 48233)- release 1.3.4.0-11 - Resolves: bug 1249784 - ipa-dnskeysyncd unhandled exception on named-pkcs11 start (DS 48249) - Resolves: bug 1252082 - removing chaining database links trigger valgrind read error (DS 47686) - Resolves: bug 1252207 - bashisms in 389-ds-base admin scripts (DS 47511) - Resolves: bug 1252533 - Man pages and help for remove-ds.pl doesn't display "-a" option (DS 48245) - Resolves: bug 1252781 - Slapd crashes reported from latest builds (DS 48250)- release 1.3.4.0-10 - Resolves: bug 1245519 - Fix coverity issues (DS 47931)- release 1.3.4.0-9 - Resolves: bug 1240876 - verify_db.pl doesn't verify DB specified by -a option. (DS 48215) - Resolves: bug 1245235 - winsync lastlogon attribute not syncing between IPA & Windows 2008. (DS 48232) - Resolves: bug 1245519 - Deadlock with retrochangelog, memberof plugin (DS 47931) - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228) - Resolves: bug 1247811 - logconv autobind handling regression caused by 47446 (DS 48231) - Resolves: bug 1250177 - Investigate betxn plugins to ensure they return the correct error code (DS 47810)- release 1.3.4.0-8 - Resolves: bug 1160243 - [RFE] allow logconv.pl -S/-E switches to work even when exact/same timestamps are not present in access log file (DS 47910) - Resolves: bug 1172037 - winsync range retrieval gets only 5000 values upon initialization (DS 48010) - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224) - Resolves: bug 1243950 - When starting a replica agreement a deadlock can occur with an op updating nsuniqueid index (DS 48179) - Resolves: bug 1243970 - In MMR, double free coould occur under some special condition (DS 48226) - Resolves: bug 1244926 - Crash while triming the retro changelog (DS 48206)- release 1.3.4.0-7 - Resolves: bug 1235060 - Fix coverity issues - 07/14/2015 (DS 48203) - Resolves: bug 1242531 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)- release 1.3.4.0-6 - Resolves: bug 1240845 - cleanallruv should completely clean changelog (DS 48208) - Resolves: bug 1095603 - Any negative LDAP error code number reported as Illegal error by ldclt. (DS 47799) - Resolves: bug 1168675 - Inconsistent behaviour of DS when LDAP Sync is used with an invalid cookie (DS 48013) - Resolves: bug 1241723 - cleanAllRUV hangs shutdown if not all of the replicas are online (DS 48217) - Resolves: bug 1241497 - crash in ns-slapd when deleting winSyncSubtreePair from sync agreement (DS 48216) - Resolves: bug 1240404 - Silent install needs to properly exit when INF file is missing (DS 48119) - Resolves: bug 1240406 - Remove warning suppression in 1.3.4 (DS 47878) - Resolves: bug 1242683 - Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute (DS 48223) - Resolves: bug 1160243 - logconv.pl - validate start and end time args (DS 47910) - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224) - Resolves: bug 1230996 - CI test: fixing test cases for ticket 48194 (DS 48194)- release 1.3.4.0-5 - Resolves: bug 1235060 - Fix coverity issues (DS 48203)- release 1.3.4.0-4 - Resolves: bug 1240404 - setup-ds.pl does not log invalid --file path errors the same (DS 48119) - Resolves: bug 1240406 - setup -u stops after first failure (DS 47878)- release 1.3.4.0-3 - Resolves: bug 1228823 - async simple paged results issue (DS 48192) - Resolves: bug 1237325 - reindex off-line twice could provoke index corruption (DS 48212) - Resolves: bug 1238790 - ldapsearch on nsslapd-maxbersize returns 0 instead of current value (DS 48214)- release 1.3.4.0-2 - Resolves: bug 1235060 - Fix coverity issues - Resolves: bug 1235387 - Slow replication when deleting large quantities of multi-valued attributes (DS 48195)- Release 1.3.4.0-1 (rebase) - Enable nunc-stans for x86_64. - Resolves: bug 1034325 - Linked attributes betxnpreoperation - transaction not aborted when linked entry does not exit (DS 47640) - Resolves: bug 1052755 - Retro Changelog Plugin accepts invalid value in nsslapd-changelogmaxage attribute (DS 47669) - Resolves: bug 1096409 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown (DS 47801) - Resolves: bug 1145378 - Adding an entry with an invalid password as rootDN is incorrectly rejected (DS 47900) - Resolves: bug 1145382 - Bad manipulation of passwordhistory (DS 47905) - Resolves: bug 1154147 - Uniqueness plugin: should allow to exclude some subtrees from its scope (DS 47927) - Resolves: bug 1171358 - Make ReplicaWaitForAsyncResults configurable (DS 47957) - Resolves: bug 1171663 - MODDN fails when entry doesn't have memberOf attribute and new DN is in the scope of memberOfExcludeSubtree (DS 47526) - Resolves: bug 1174457 - [RFE] memberOf - add option to skip nested group lookups during delete operations (DS 47963) - Resolves: bug 1178640 - db2bak.pl man page should be improved. (DS 48008) - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981) - Resolves: bug 1180331 - Local Password Policies for Nested OU's not honoured (DS 47980) - Resolves: bug 1180776 - nsslapd-db-locks modify not taking into account (DS 47934) - Resolves: bug 1181341 - nsslapd-changelogtrim-interval and nsslapd-changelogcompactdb-interval are not validated (DS 47617) - Resolves: bug 1185882 - ns-activate.pl fails to activate account if it was disabled on AD (DS 48001) - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005) - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030) - Resolves: bug 1206309 - winsync sets AccountUserControl in AD to 544 (DS 47723) - Resolves: bug 1210845 - slapd crashes during Dogtag clone reinstallation (DS 47966) - Resolves: bug 1210850 - add an option '-u' to dbgen.pl for adding group entries with (DS 48025) - Resolves: bug 1210852 - aci with wildcard and macro not correctly evaluated (DS 48141)- release 1.3.3.1-19 - Resolves: bug 1230996 - nsSSL3Ciphers preference not enforced server side (DS 48194)- release 1.3.3.1-18 - Resolves: bug 1228823 - async simple paged results issue (DS 48146, DS 48192)- release 1.3.3.1-17 - Resolves: bug 1226510 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane (DS 48190)- release 1.3.3.1-16 - Resolves: bug 1212894 - CVE-2015-1854 389ds-base: access control bypass with modrdn- release 1.3.3.1-15 - Setting correct build tag 'rhel-7.1-z-candidate'- release 1.3.3.1-14 - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030) Fixes spec file to make sure all the server instances are stopped before upgrade - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005)- release 1.3.3.1-13 - Resolves: bug 1183655 - Fixed Covscan FORWARD_NULL defects (DS 47988)- release 1.3.3.1-12 - Resolves: bug 1182477 - Windows Sync accidentally cleared raw_entry (DS 47989) - Resolves: bug 1180325 - upgrade script fails if /etc and /var are on different file systems (DS 47991 ) - Resolves: bug 1183655 - Schema learning mechanism, in replication, unable to extend an existing definition (DS 47988)- release 1.3.3.1-11 - Resolves: bug 1080186 - During delete operation do not refresh cache entry if it is a tombstone (DS 47750)- release 1.3.3.1-10 - Resolves: bug 1172731 - CVE-2014-8112 password hashing bypassed when "nsslapd-unhashed-pw-switch" is set to off - Resolves: bug 1166265 - DS hangs during online total update (DS 47942) - Resolves: bug 1168151 - CVE-2014-8105 information disclosure through 'cn=changelog' subtree - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable (DS 47526) - Resolves: bug 1171356 - Bind DN tracking unable to write to internalModifiersName without special permissions (DS 47950) - Resolves: bug 1153737 - logconv.pl -- support parsing/showing/reporting different protocol versions (DS 47949) - Resolves: bug 1171355 - start dirsrv after chrony on RHEL7 and Fedora (DS 47947) - Resolves: bug 1170707 - cos_cache_build_definition_list does not stop during server shutdown (DS 47967) - Resolves: bug 1170708 - COS memory leak when rebuilding the cache (DS - Ticket 47969) - Resolves: bug 1170709 - Account lockout attributes incorrectly updated after failed SASL Bind (DS 47970) - Resolves: bug 1166260 - cookie_change_info returns random negative number if there was no change in a tree (DS 47960) - Resolves: bug 1012991 - Error log levels not displayed correctly (DS 47636) - Resolves: bug 1108881 - rsearch filter error on any search filter (DS 47722) - Resolves: bug 994690 - Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart (DS 47451) - Resolves: bug 1162997 - Running a plugin task can crash the server (DS 47451) - Resolves: bug 1166252 - RHEL7.1 ns-slapd segfault when ipa-replica-install restarts (DS 47451) - Resolves: bug 1172597 - Crash if setting invalid plugin config area for MemberOf Plugin (DS 47525) - Resolves: bug 1139882 - coverity defects found in 1.3.3.x (DS 47965)- release 1.3.3.1-9 - Resolves: bug 1153737 - Disable SSL v3, by default. (DS 47928) - Resolves: bug 1163461 - Should not check aci syntax when deleting an aci (DS 47953)- release 1.3.3.1-8 - Resolves: bug 1156607 - Crash in entry_add_present_values_wsi_multi_valued (DS 47937) - Resolves: bug 1153737 - Disable SSL v3, by default (DS 47928, DS 47945, DS 47948) - Resolves: bug 1158804 - Malformed cookie for LDAP Sync makes DS crash (DS 47939)- release 1.3.3.1-7 - Resolves: bug 1153737 - Disable SSL v3, by default (DS 47928)- release 1.3.3.1-6 - Resolves: bug 1151287 - dynamically added macro aci is not evaluated on the fly (DS 47922) - Resolves: bug 1080186 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten (DS 47897) - Resolves: bug 1150694 - Encoding of SearchResultEntry is missing tag (DS 47920) - Resolves: bug 1150695 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails. (DS 47919) - Resolves: bug 1139882 - Fix remaining compiler warnings (DS 47892) - Resolves: bug 1150206 - result of dna_dn_is_shared_config is incorrectly used (DS 47918)- release 1.3.3.1-5 - Resolves: bug 1139882 - coverity defects found in 1.3.3.x (DS 47892)- release 1.3.3.1-4 - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47750) - Resolves: bug 1145846 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server (DS 47908) - Resolves: bug 1117979 - harden the list of ciphers available by default (phase 2) (DS 47838) - provide enabled ciphers as search result (DS 47880)- release 1.3.3.1-3 - Resolves: bug 1139882 - coverity defects found in 1.3.3.1- release 1.3.3.1-2 - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748) - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47834) - Resolves: bug 1139882 - coverity defects found in 1.3.3.1 (DS 47890) - Resolves: bug 1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (DS 47885 - deref plugin should not return references with noc access rights) - Resolves: bug 1117979 - harden the list of ciphers available by default (DS 47838, DS 47895) - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47889 - DS crashed during ipa-server-install on test_ava_filter)- release 1.3.3.1-1 - Resolves: bug 746646 - RFE: easy way to configure which users and groups to sync with winsync - Resolves: bug 881372 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts. - Resolves: bug 920597 - Possible to add invalid ACI value - Resolves: bug 921162 - Possible to add nonexistent target to ACI - Resolves: bug 923799 - if nsslapd-cachememsize set to the number larger than the RAM available, should result in proper error message. - Resolves: bug 924937 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync - Resolves: bug 951754 - Self entry access ACI not working properly - Resolves: bug 952517 - Dirsrv instance failed to start with Segmentation fault (core dump) after modifying 7-bit check plugin - Resolves: bug 952682 - nsslapd-db-transaction-batch-val turns to -1 - Resolves: bug 966443 - Plugin library path validation - Resolves: bug 975176 - Non-directory manager can change the individual userPassword's storage scheme - Resolves: bug 979465 - IPA replica's - "SASL encrypted packet length exceeds maximum allowed limit" - Resolves: bug 982597 - Some attributes in cn=config should not be multivalued - Resolves: bug 987009 - 389-ds-base - shebang with /usr/bin/env - Resolves: bug 994690 - RFE: Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart - Resolves: bug 1012991 - errorlog-level 16384 is listed as 0 in cn=config - Resolves: bug 1013736 - Enabling/Disabling DNA plug-in throws "ldap_modify: Server Unwilling to Perform (53)" error - Resolves: bug 1014380 - setup-ds.pl doesn't lookup the "root" group correctly - Resolves: bug 1020459 - rsa_null_sha should not be enabled by default - Resolves: bug 1024541 - start dirsrv after ntpd - Resolves: bug 1029959 - Managed Entries betxnpreoperation - transaction not aborted upon failure to create managed entry - Resolves: bug 1031216 - add dbmon.sh - Resolves: bug 1044133 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result - Resolves: bug 1044134 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default - Resolves: bug 1044135 - make connection buffer size adjustable - Resolves: bug 1044137 - posix winsync should support ADD user/group entries from DS to AD - Resolves: bug 1044138 - mep_pre_op: Unable to fetch origin entry - Resolves: bug 1044139 - [RFE] Support RFC 4527 Read Entry Controls - Resolves: bug 1044140 - Allow search to look up 'in memory RUV' - Resolves: bug 1044141 - MMR stress test with dna enabled causes a deadlock - Resolves: bug 1044142 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist - Resolves: bug 1044143 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change - Resolves: bug 1044144 - resurrected entry is not correctly indexed - Resolves: bug 1044146 - Add a warning message when a connection hits the max number of threads - Resolves: bug 1044147 - 7-bit check plugin does not work for userpassword attribute - Resolves: bug 1044148 - The backend name provided to bak2db is not validated - Resolves: bug 1044149 - Winsync should support range retrieval - Resolves: bug 1044150 - 7-bit checking is not necessary for userPassword - Resolves: bug 1044151 - With SeLinux, ports can be labelled per range. setup-ds.pl or setup-ds-admin.pl fail to detect already ranged labelled ports - Resolves: bug 1044152 - ChainOnUpdate: "cn=directory manager" can modify userRoot on consumer without changes being chained or replicated. Directory integrity compromised. - Resolves: bug 1044153 - mods optimizer - Resolves: bug 1044154 - multi master replication allows schema violation - Resolves: bug 1044156 - DS crashes with some 7-bit check plugin configurations - Resolves: bug 1044157 - Some updates of "passwordgraceusertime" are useless when updating "userpassword" - Resolves: bug 1044159 - [RFE] Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533 - Resolves: bug 1044160 - remove-ds.pl should remove /var/lock/dirsrv - Resolves: bug 1044162 - enhance retro changelog - Resolves: bug 1044163 - updates to ruv entry are written to retro changelog - Resolves: bug 1044164 - Password administrators should be able to violate password policy - Resolves: bug 1044168 - Schema replication between DS versions may overwrite newer base schema - Resolves: bug 1044169 - ACIs do not allow attribute subtypes in targetattr keyword - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable - Resolves: bug 1044171 - Allow referential integrity suffixes to be configurable - Resolves: bug 1044172 - Plugin library path validation prevents intentional loading of out-of-tree modules - Resolves: bug 1044173 - make referential integrity configuration more flexible - Resolves: bug 1044177 - allow configuring changelog trim interval - Resolves: bug 1044179 - objectclass may, must lists skip rest of objectclass once first is found in sup - Resolves: bug 1044180 - memberOf on a user is converted to lowercase - Resolves: bug 1044181 - report unindexed internal searches - Resolves: bug 1044183 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added - Resolves: bug 1044185 - dbscan on entryrdn should show all matching values - Resolves: bug 1044187 - logconv.pl - RFE - add on option for a minimum etime for unindexed search stats - Resolves: bug 1044188 - Recognize compressed log files - Resolves: bug 1044191 - support TLSv1.1 and TLSv1.2, if supported by NSS - Resolves: bug 1044193 - default nsslapd-sasl-max-buffer-size should be 2MB - Resolves: bug 1044194 - Complex filter in a search request doen't work as expected. - Resolves: bug 1044196 - Automember plug-in should treat MODRDN operations as ADD operations - Resolves: bug 1044198 - Replication of the schema may overwrite consumer 'attributetypes' even if consumer definition is a superset - Resolves: bug 1044202 - db2bak.pl issue when specifying non-default directory - Resolves: bug 1044203 - Allow referint plugin to use an alternate config area - Resolves: bug 1044205 - Allow memberOf to use an alternate config area - Resolves: bug 1044210 - idl switch does not work - Resolves: bug 1044211 - make old-idl tunable - Resolves: bug 1044212 - IDL-style can become mismatched during partial restoration - Resolves: bug 1044213 - backend performance - introduce optimization levels - Resolves: bug 1044215 - using transaction batchval violates durability - Resolves: bug 1044216 - examine replication code to reduce amount of stored state information - Resolves: bug 1048980 - 7-bit check plugin not checking MODRDN operation - Resolves: bug 1049030 - Windows Sync group issues - Resolves: bug 1052751 - Page control does not work if effective rights control is specified - Resolves: bug 1052754 - Allow nsDS5ReplicaBindDN to be a group DN - Resolves: bug 1057803 - logconv errors when search has invalid bind dn - Resolves: bug 1060032 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime. - Resolves: bug 1061060 - betxn: retro changelog broken after cancelled transaction - Resolves: bug 1061572 - improve dbgen rdn generation, output and man page. - Resolves: bug 1063990 - single valued attribute replicated ADD does not work - Resolves: bug 1064006 - Size returned by slapi_entry_size is not accurate - Resolves: bug 1064986 - Replication retry time attributes cannot be added - Resolves: bug 1067090 - Missing warning for invalid replica backoff configuration - Resolves: bug 1072032 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53 - Resolves: bug 1074306 - Under heavy stress, failure of turning a tombstone into glue makes the server hung - Resolves: bug 1074447 - Part of DNA shared configuration is deleted after server restart - Resolves: bug 1076729 - Continuous add/delete of an entry in MMR setup causes entryrdn-index conflict - Resolves: bug 1077884 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf - Resolves: bug 1077897 - Memory leak with proxy auth control - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing - Resolves: bug 1082967 - attribute uniqueness plugin fails when set as a chaining component - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution - Resolves: bug 1086890 - empty modify returns LDAP_INVALID_DN_SYNTAX - Resolves: bug 1086902 - mem leak in do_bind when there is an error - Resolves: bug 1086904 - mem leak in do_search - rawbase not freed upon certain errors - Resolves: bug 1086908 - Performing deletes during tombstone purging results in operation errors - Resolves: bug 1090178 - #481 breaks possibility to reassemble memberuid list - Resolves: bug 1092099 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone - Resolves: bug 1092342 - nsslapd-ndn-cache-max-size accepts any invalid value. - Resolves: bug 1092648 - Negative value of nsSaslMapPriority is not reset to lowest priority - Resolves: bug 1097004 - Problem with deletion while replicated - Resolves: bug 1098654 - db2bak.pl error with changelogdb - Resolves: bug 1099654 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator. - Resolves: bug 1108405 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..." - Resolves: bug 1108407 - managed entry plugin fails to update managed entry pointer on modrdn operation - Resolves: bug 1108865 - memory leak in ldapsearch filter objectclass=* - Resolves: bug 1108870 - ACI warnings in error log - Resolves: bug 1108872 - Logconv.pl with an empty access log gives lots of errors - Resolves: bug 1108874 - logconv.pl memory continually grows - Resolves: bug 1108881 - rsearch filter error on any search filter - Resolves: bug 1108895 - [RFE - RHDS9] CLI report to monitor replication - Resolves: bug 1108902 - rhds91 389-ds-base-1.2.11.15-31.el6_5.x86_64 crash in db4 __dbc_get_pp env = 0x0 ? - Resolves: bug 1108909 - single valued attribute replicated ADD does not work - Resolves: bug 1109334 - 389 Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled. - Resolves: bug 1109336 - Parent numsubordinate count can be incorrectly updated if an error occurs - Resolves: bug 1109339 - Nested tombstones become orphaned after purge - Resolves: bug 1109354 - Tombstone purging can crash the server if the backend is stopped/disabled - Resolves: bug 1109357 - Coverity issue in 1.3.3 - Resolves: bug 1109364 - valgrind - value mem leaks, uninit mem usage - Resolves: bug 1109375 - provide default syntax plugin - Resolves: bug 1109378 - Environment variables are not passed when DS is started via service - Resolves: bug 1111364 - Updating winsync one-way sync does not affect the behaviour dynamically - Resolves: bug 1112824 - Broken dereference control with the FreeIPA 4.0 ACIs - Resolves: bug 1113605 - server restart wipes out index config if there is a default index - Resolves: bug 1115177 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro - Resolves: bug 1117021 - Server deadlock if online import started while server is under load - Resolves: bug 1117975 - paged results control is not working in some cases when we have a subsuffix. - Resolves: bug 1117979 - harden the list of ciphers available by default - Resolves: bug 1117981 - Fix various typos in manpages & code - Resolves: bug 1117982 - Fix hyphens used as minus signed and other manpage mistakes - Resolves: bug 1118002 - server crashes deleting a replication agreement - Resolves: bug 1118006 - RFE - forcing passwordmustchange attribute by non-cn=directory manager - Resolves: bug 1118007 - [RFE] Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords - Resolves: bug 1118014 - Enhance ACIs to have more control over MODRDN operations - Resolves: bug 1118021 - Return all attributes in rootdse without explicit request - Resolves: bug 1118025 - Slow ldapmodify operation time for large quantities of multi-valued attribute values - Resolves: bug 1118032 - Schema Replication Issue - Resolves: bug 1118034 - 389 DS Server crashes and dies while handles paged searches from clients - Resolves: bug 1118043 - Failed deletion of aci: no such attribute - Resolves: bug 1118048 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed. - Resolves: bug 1118051 - Add switch to disable pre-hashed password checking - Resolves: bug 1118054 - Make ldbm_back_seq independently support transactions - Resolves: bug 1118055 - Add operations rejected by betxn plugins remain in cache - Resolves: bug 1118057 - online import crashes server if using verbose error logging - Resolves: bug 1118059 - add fixup-memberuid.pl script - Resolves: bug 1118060 - winsync plugin modify is broken - Resolves: bug 1118066 - memberof scope: allow to exclude subtrees - Resolves: bug 1118069 - 389-ds production segfault: __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:144 - Resolves: bug 1118074_DELETE_FN - plugin returned error" messages - Resolves: bug 1118076 - ds logs many "Operation error fetching Null DN" messages - Resolves: bug 1118077 - Improve import logging and abort handling - Resolves: bug 1118079 - Multi master replication initialization incomplete after restore of one master - Resolves: bug 1118080 - Don't add unhashed password mod if we don't have an unhashed value - Resolves: bug 1118081 - Investigate betxn plugins to ensure they return the correct error code - Resolves: bug 1118082 - The error result text message should be obtained just prior to sending result - Resolves: bug 1123865 - CVE-2014-3562 389-ds-base: 389-ds: unauthenticated information disclosure [rhel-7.1]- release 1.3.1.6-26 - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution (Ticket 346)- release 1.3.1.6-25 - Resolves: bug 1082740 - ns-slapd crash in reliability 15- release 1.3.1.6-24 - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735); regression - sub-type length in attribute type was mistakenly subtracted.- Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind) (Added 0095-Ticket-47739-directory-server-is-insecurely-misinter.patch) Tue Mar 11 2014 Noriko Hosoi - 1.3.1.6-23 - release 1.3.1.6-22 - Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)- release 1.3.1.6-22 - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735)- release 1.3.1.6-21 - Resolves: bug 918694 - Fix covscan defect FORWARD_NULL (Ticket 408) - Resolves: bug 918717 - Fix covscan defect COMPILER WARNINGS (Ticket 571)- release 1.3.1.6-20 - Resolves: bug 1065242 - 389-ds-base, conflict occurs at yum installation if multilib_policy=all. (Ticket 47709)- release 1.3.1.6-19 - Resolves: bug 1065971 - Enrolling a host into IdM/IPA always takes two attempts (Ticket 47704)- release 1.3.1.6-18 - Resolves: bug 838656 - logconv.pl tool removes the access logs contents if "-M" is not correctly used (Ticket 471) - Resolves: bug 922538 - improve dbgen rdn generation, output (Ticket 47374) - Resolves: bug 970750 - flush.pl is not included in perl5 (Ticket 47374) - Resolves: bug 1013898 - Fix various issues with logconv.pl (Ticket 471)- release 1.3.1.6-17 - Resolves: bug 853106 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (Ticket 443) - Resolves: bug 1049525 - Server hangs in cos_cache when adding a user entry (Ticket 47649)- Mass rebuild 2014-01-24- release 1.3.1.6-15 - Resolves: bug 918702 - better error message when cache overflows (Ticket 342) - Resolves: bug 1009679 - replication stops with excessive clock skew (Ticket 47516) - Resolves: bug 1042855 - Unable to delete protocol timeout attribute (Ticket 47620) - Resolves: bug 918694 - Fix crash when disabling/enabling the setting (Ticket 408) - Resolves: bug 853355 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read (Ticket 47660)- release 1.3.1.6-14 - Resolves: bug 853355 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs (Ticket 447) - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613) - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribut; Fix logically dead code; Fix dereferenced NULL pointer in agmtlist_modify_callback(); Fix missing left brackete (Ticket 47620) - Resolves: bug 1042855 - nsds5ReplicaProtocolTimeout attribute is not validated when added to replication agreement; Config value validation improvement (Ticket 47620) - Resolves: bug 918717 - server does not accept 0 length LDAP Control sequence (Ticket 571) - Resolves: bug 1034902 - replica init/bulk import errors should be more verbose (Ticket 47606) - Resolves: bug 1044219 - fix memleak caused by 47347 (Ticket 47623) - Resolves: bug 1049522 - Crash after replica is installed; Fix cherry-pick error for 1.3.2 and 1.3.1 (Ticket 47620) - Resolves: bug 1049568 - changelog iteration should ignore cleaned rids when getting the minCSN (Ticket 47627)- Mass rebuild 2013-12-27- release 1.3.1.6-12 - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute (Ticket 47620) - Resolves: bug 1034898 - automember plugin task memory leaks (Ticket 47592) - Resolves: bug 1034451 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms (Ticket 47614) - Resolves: bug 1032318 - entries with empty objectclass attribute value can be hidden (Ticket 47591) - Resolves: bug 1032316 - attrcrypt fails to find unlocked key (Ticket 47596) - Resolves: bug 1031227 - Reduce lock scope in retro changelog plug-in (Ticket 47599) - Resolves: bug 1031226 - Convert ldbm_back_seq code to be transaction aware (Ticket 47598) - Resolves: bug 1031225 - Convert retro changelog plug-in to betxn (Ticket 47597) - Resolves: bug 1031223 - hard coded limit of 64 masters in agreement and changelog code (Ticket 47587) - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613) - Resolves: bug 1035824 - Automember betxnpreoperation - transaction not aborted when group entry does not exist (Ticket 47622)- Resolves: bug 1024979 - CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches- release 1.3.1.6-10 - Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep - had to revert earlier change - does not work and breaks ipa- release 1.3.1.6-9 - Resolves: bug 1028440 - Winsync replica initialization and incremental updates from DS to AD fails on RHEL - Resolves: bug 1027502 - Replication Failures related to skipped entries due to cleaned rids - Resolves: bug 1027047 - Winsync plugin segfault during incremental backoff- release 1.3.1.6-8 - Resolves: bug 971111 - DNA plugin failed to fetch replication agreement - Resolves: bug 1026931 - 1.2.11.29 crash when removing entries from cache- Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep - Resolves: bug 1018914 fixup memberof task does not work: task entry not added- Resolves: bug 1013900 - logconv: some stats do not work across server restarts - previous patch introduced regressions - fixed by c2eced0 ticket #47550 and e2a880b Ticket #47550 and 8b10f83 Ticket #47551 - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock - previous patch not complete, fixed by a11be5c Ticket 47513 - Resolves: bug 1016749 - DS crashes when "cn=Directory Manager" is changing it's password - cherry picked upstream f786600 Ticket 47329 and b67e230 Coverity Fixes - Resolves: bug 1015252 locale "nl" not supported by collation plugin - Resolves: bug 1016317 Need to update supported locales - Resolves: bug 1016722 memory leak in range searches- Resolves: bug 1013896 - logconv.pl - Use of comma-less variable list is deprecated - Resolves: bug 1008256 - backend txn plugin fixup tasks should be done in a txn - Resolves: bug 1013738 - CLEANALLRUV doesnt run across all replicas - Resolves: bug 1011220 - PassSync removes User must change password flag on the Windows side - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock - Resolves: bug 1012125 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch - Resolves: bug 1013063 - RUV tombstone search with scope "one" doesn`t work - Resolves: bug 1013893 - Indexed search are logged with 'notes=U' in the access logs - Resolves: bug 1013894 - improve logconv.pl performance with large access logs - Resolves: bug 1013898 - Fix various issues with logconv.pl - Resolves: bug 1013897 - logconv.pl uses /var/tmp for BDB temp files - Resolves: bug 1013900 - logconv: some stats do not work across server restarts - Resolves: bug 1014354 - Coverity fixes - 12023, 12024, and 12025- bump version to 1.3.1.6-4 - Resolves Bug 1007988 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing (Ticket 47489) - Resolves Bug 853931 - Allow macro aci keywords to be case-insensitive (Ticket 449) - Resolves Bug 1006563 - automember rebuild task not working as expected (Ticket 47507)- Ticket #47455 - valgrind - value mem leaks, uninit mem usage - Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly- bump version to 1.3.1.6-2 - Resolves Bug 1000633 - ns-slapd crash due to bogus DN - Ticket #47488 - Users from AD sub OU does not sync to IPA- bump version to 1.3.1.6 - Ticket 47455 - valgrind - value mem leaks, uninit mem usage - fix coverity 11915 - dead code - introduced with fix for ticket 346 - fix coverity 11895 - null deref - caused by fix to ticket 47392 - fix compiler warning in posix winsync code for posix_group_del_memberuid_callback - Fix compiler warnings for Ticket 47395 and 47397 - fix compiler warning (cherry picked from commit 904416f4631d842a105851b4a9931ae17822a107) - Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch - fix compiler warnings - Fix compiler warning (cherry picked from commit ec6ebc0b0f085a82041d993ab2450a3922ef5502)- bump version to 1.3.1.5 - Ticket 47456 - delete present values should append values to deleted values - Ticket 47455 - valgrind - value mem leaks, uninit mem usage - Ticket 47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication - Ticket 47440 - Fix runtime errors caused by last patch. - Ticket 47440 - Fix compilation warnings and header files - Ticket 47405 - CVE-2013-2219 ACLs inoperative in some search scenarios - Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D - Ticket 47378 - fix recent compiler warnings - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47449 - deadlock after adding and deleting entries - Ticket 47441 - Disk Monitoring not checking filesystem with logs - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold- bump version to 1.3.1.4 - Ticket 47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negat - Ticket 47424 - Replication problem with add-delete requests on single-valued attributes - Ticket 47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry - Ticket 47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry - Ticket 47421 - memory leaks in set_krb5_creds - Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute v - Ticket 47369 version2 - provide default syntax plugin - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47339 - RHDS denies MODRDN access if ACI list contains any DENY rule - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47428 - Memory leak in 389-ds-base 1.2.11.15 - Ticket 47392 - ldbm errors when adding/modifying/deleting entries - Ticket 47385 - Disk Monitoring is not triggered as expected. - Ticket 47410 - changelog db deadlocks with DNA and replication- bump version to 1.3.1.3 - Ticket 47374 - flush.pl is not included in perl5 - Ticket 47391 - deleting and adding userpassword fails to update the password (additional fix) - Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization - Ticket 47395 47397 - v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured - Ticket 47396 - crash on modrdn of tombstone - Ticket 47400 - MMR stress test with dna enabled causes a deadlock - Ticket 47409 - allow setting db deadlock rejection policy - Ticket 47419 - Unhashed userpassword can accidentally get removed from mods - Ticket 47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'- Rebuilt for new net-snmp- bump version to 1.3.1.2 - Ticket 47391 - deleting and adding userpassword fails to update the password - Coverity Fixes (Part 7)- bump version to 1.3.1.1 - Ticket 402 - nhashed#user#password in entry extension - Ticket 511 - Revision - allow turning off vattr lookup in search entry return - Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate - Ticket 47327 - error syncing group if group member user is not synced - Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback - Ticket 47359 - new ldap connections can block ldaps and ldapi connections - Ticket 47362 - ipa upgrade selinuxusermap data not replicating - Ticket 47375 - flush_ber error sending back start_tls response will deadlock - Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3) - Ticket 47377 - make listen backlog size configurable - Ticket 47378 - fix recent compiler warnings - Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice - Ticket 47385 - DS not shutting down when disk monitoring threshold is reached - Coverity Fixes (part 1) - Coverity Fixes (Part 2) - Coverity Fixes (Part 3) - Coverity Fixes (Part 4) - Coverity Fixes (Part 5)- bump version to 1.3.1.0 - Ticket 332 - Command line perl scripts should attempt most secure connection type first - Ticket 342 - better error message when cache overflows - Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager - Ticket 419 - logconv.pl - improve memory management - Ticket 422 - 389-ds-base - Can't call method "getText" - Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts - Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used - Ticket 487 - Possible to add invalid attribute values to PAM PTA plugin configuration - Ticket 502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen - Ticket 505 - use lock-free access name2asi and oid2asi tables (additional) - Ticket 508 - lock-free access to FrontendConfig structure - Ticket 511 - allow turning off vattr lookup in search entry return - Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time - Ticket 528 - RFE - get rid of instance specific scripts - Ticket 529 - dn normalization must handle multiple space characters in attributes - Ticket 532 - RUV is not getting updated for both Master and consumer - Ticket 533 - only scan for attributes to decrypt if there are encrypted attrs configured - Ticket 534 - RFE: Add SASL mappings fallback - Ticket 537 - Improvement of range search - Ticket 539 - logconv.pl should handle microsecond timing - Ticket 543 - Sorting with attributes in ldapsearch gives incorrect result - Ticket 545 - Segfault during initial LDIF import: str2entry_dupcheck() - Ticket 547 - Incorrect assumption in ndn cache - Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval - Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation - Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration - Ticket 558 - Replication - make timeout for protocol shutdown configurable - Ticket 561 - disable writing unhashed#user#password to changelog - Ticket 563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized. - Ticket 565 - turbo mode and replication - allow disable of turbo mode - Ticket 571 - server does not accept 0 length LDAP Control sequence - Ticket 574 - problems with dbcachesize disk space calculation - Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions - Ticket 585 - Behaviours of "db2ldif -a " and "db2ldif.pl -a " are inconsistent - Ticket 587 - Replication error messages in the DS error logs - Ticket 588 - Create MAN pages for command line scripts - Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control - Ticket 603 - A logic error in str2simple - Ticket 604 - Required attribute not checked during search operation - Ticket 608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message - Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND - Ticket 612 - improve dbgen rdn generation, output - Ticket 613 - ldclt: add timestamp, interval, nozeropad, other improvements - Ticket 616 - High contention on computed attribute lock - Ticket 618 - Crash at shutdown while stopping replica agreements - Ticket 620 - Better logging of error messages for 389-ds-base - Ticket 621 - modify operations without values need to be written to the changelog - Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory - Ticket 631 - Replication: "Incremental update started" status message without consumer initialized - Ticket 633 - allow nsslapd-nagle to be disabled, and also tcp cork - Ticket 47299 - allow cmdline scripts to work with non-root user - Ticket 47302 - get rid of sbindir start/stop/restart slapd scripts - Ticket 47303 - start/stop/restart dirsrv scripts should report and error if no instances - Ticket 47304 - reinitialization of a master with a disabled agreement hangs - Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task) - Ticket 47312 - replace PR_GetFileInfo with PR_GetFileInfo64 - Ticket 47315 - filter option in fixup-memberof requires more clarification - Ticket 47325 - Crash at shutdown on a replica aggrement - Ticket 47330 - changelog db extension / upgrade is obsolete - Ticket 47336 - logconv.pl -m not working for all stats - Ticket 47341 - logconv.pl -m time calculation is wrong - Ticket 47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide - Ticket 47347 - Simple paged results should support async search - Ticket 47348 - add etimes to per second/minute stats - Ticket 47349 - DS instance crashes under a high load- bump version to 1.3.0.5 - Ticket 47308 - unintended information exposure when anonymous access is set to rootdse - Ticket 628 - crash in aci evaluation - Ticket 627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so - Ticket 634 - Deadlock in DNA plug-in Ticket #576 - DNA: use event queue for config update only at the start up - Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC - Ticket 623 - cleanAllRUV task fails to cleanup config upon completion- e53d691 bump version to 1.3.0.4 - Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data - Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled) - Ticket 490 - Slow role performance when using a lot of roles - Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry- bump version to 1.3.0.3 - Ticket #584 - Existence of an entry is not checked when its password is to be deleted - Ticket 562 - Crash when deleting suffix- Rebuild for icu 50- bump version to 1.3.0.2 - Ticket #542 - Cannot dynamically set nsslapd-maxbersize- bump version to 1.3.0.1 - Ticket 556 - Don't overwrite certmap.conf during upgrade- bump version to 1.3.0.0- bump version to 1.3.0.rc3 - Ticket 549 - DNA plugin no longer reports additional info when range is depleted - Ticket 541 - need to set plugin as off in ldif template - Ticket 541 - RootDN Access Control plugin is missing after upgrade- bump version to 1.3.0.rc2 - Trac Ticket #497 - Escaped character cannot be used in the substring search filter - Ticket 509 - lock-free access to be->be_suffixlock - Trac Ticket #522 - betxn: upgrade is not implemented yet- bump version to 1.3.0.rc1 - Ticket #322 - Create DOAP description for the 389 Directory Server project - Trac Ticket #499 - Handling URP results is not corrrect - Ticket 509 - lock-free access to be->be_suffixlock - Ticket 456 - improve entry cache sizing - Trac Ticket #531 - loading an entry from the database should use str2entry_f - Trac Ticket #536 - Clean up compiler warnings for 1.3 - Trac Ticket #531 - loading an entry from the database should use str2entry_fast - Ticket 509 - lock-free access to be->be_suffixlock - Ticket 527 - ns-slapd segfaults if it cannot rename the logs - Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't - Ticket 216 - disable replication agreements - Ticket 518 - dse.ldif is 0 length after server kill or machine kill - Ticket 393 - Change in winSyncInterval does not take immediate effect - Ticket 20 - Allow automember to work on entries that have already been added - Coverity Fixes - Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5 - Ticket 337 - improve CLEANRUV functionality - Fix for ticket 504 - Ticket 394 - modify-delete userpassword - minor fixes for bdb 4.2/4.3 and mozldap - Trac Ticket #276 - Multiple threads simultaneously working on connection's private buffer causes ns-slapd to abort - Fix for ticket 465: cn=monitor showing stats for other db instances - Ticket 507 - use mutex for FrontendConfig lock instead of rwlock - Fix for ticket 510 Avoid creating an attribute just to determine the syntax for a type, look up the syntax directly by type - Coverity defect: Resource leak 13110 - Ticket 517 - crash in DNA if no dnaMagicRegen is specified - Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry - Trac Ticket #519 - Search with a complex filter including range search is slow - Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error - Trac Ticket #311 - IP lookup failing with multiple DNS entries - Trac Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs - Trac Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error - Ticket #503 - Improve AD version in winsync log message - Trac Ticket #190 - Un-resolvable server in replication agreement produces unclear error message - Coverity fixes - Trac Ticket #391 - Slapd crashes when deleting backends while operations are still in progress - Trac Ticket #448 - Possible to set invalid macros in Macro ACIs - Trac Ticket #498 - Cannot abaondon simple paged result search - Coverity defects - Trac Ticket #494 - slapd entered to infinite loop during new index addition - Fixing compiler warnings in the posix-winsync plugin - Coverity defects - Ticket 147 - Internal Password Policy usage very inefficient - Ticket 495 - internalModifiersname not updated by DNA plugin - Revert "Ticket 495 - internalModifiersname not updated by DNA plugin" - Ticket 495 - internalModifiersname not updated by DNA plugin - Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h]) - Ticket 486 - nsslapd-enablePlugin should not be multivalued - Ticket 488 - Doc: DS error log messages with typo - Trac Ticket #451 - Allow db2ldif to be quiet - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes - Ticket #481 - expand nested posix groups - Trac Ticket #455 - Insufficient rights to unhashed#user#password when user deletes his password - Ticket #446 - anonymous limits are being applied to directory managerTicket #28 MOD operations with chained delete/add get back error 53 on backend config Ticket #173 ds-logpipe.py script's man page and script help should be updated for -t option. Ticket #196 RFE: Interpret IPV6 addresses for ACIs, replication, and chaining Ticket #218 RFE - Make RIP working with Replicated Entries Ticket #328 make sure all internal search filters are properly escaped Ticket #329 389-admin build fails on F-18 with new apache Ticket #344 deadlock in replica_write_ruv Ticket #351 use betxn plugins by default Ticket #352 make cos, roles, views betxn aware Ticket #356 logconv.pl - RFE - track bind info Ticket #365 Audit log - clear text password in user changes Ticket #370 Opening merge qualifier CoS entry using RHDS console changes the entry. Ticket #372 Setting nsslapd-listenhost or nsslapd-securelistenhost breaks ACI processing Ticket #386 Overconsumption of memory with large cachememsize and heavy use of ldapmodify Ticket #402 unhashedTicket #userTicket #password in entry extension Ticket #408 Create a normalized dn cache Ticket #453 db2index with -tattrname:type,type fails Ticket #461 fix build problem with mozldap c sdk Ticket #462 add test for include file mntent.h Ticket #463 different parameters of getmntent in Solaris- Trac Ticket #470 - 389 prevents from adding a posixaccount with userpassword after schema reload - Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang - Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start - Ticket 473 - change VERSION.sh to have console version be major.minor - Ticket 475 - Root DN Access Control - improve value checking for config - Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension - Ticket 474 - Root DN Access Control - days allowed not working correctly - Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas - 0b79915 fix compiler warnings in ticket 374 code - Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope- Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement - Ticket 386 - large memory growth with ldapmodify(heap fragmentation) - this patch doesn't fix the bug - it allows us to experiment with - different values of mxfast - Ticket #374 - consumer can go into total update mode for no reason- Ticket #426 - support posix schema for user and group sync - 1) plugin config ldif must contain pluginid, etc. during upgrade or it - will fail due to schema errors - 2) posix winsync should have a lower precedence (25) than the default (50) - so that it will be run first - 3) posix winsync should support the Winsync API v3 - the v2 functions are - just stubs for now - but the precedence cb is active- 8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete - Trac Ticket #437 - variable dn should not be used in ldbm_back_delete - ba1f5b2 fix coverity resource leak in windows_plugin_add - e3e81db Simplify program flow: change while loops to for - a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0) - 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar - 77eb760 Simplify program flow: eliminate unnecessary continue - c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new - a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking - d49035c Factorize into new isPosixGroup function - 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free - 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain - Ticket #440 - periodic dirsync timed event causes server to loop repeatedly - Ticket #355 - winsync should not delete entry that appears to be out of scope - Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values. - 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code - 2734a71 CLEANALLRUV coverity fixes - Ticket #426 - support posix schema for user and group sync - Ticket #430 - server to server ssl client auth broken with latest openldap6c0778f bumped version to 1.2.11.11 Ticket 429 - added nsslapd-readonly to DS schema Ticket 403 - fix CLEANALLRUV regression from last commit Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute valuesdb6b354 bumped version to 1.2.11.10 Ticket 403 - CLEANALLRUV revisionsea05e69 Bumped version to 1.2.11.9 Ticket 407 - dna memory leak - fix crash from prev fixddcf669 bump version to 1.2.11.8 for offical release Ticket #425 - support multiple winsync plugins Ticket 403 - cleanallruv coverity fixes Ticket 407 - memory leak in dna plugin Ticket 403 - CLEANALLRUV feature Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs 3168f04 Coverity defects 5ff0a02 COVERITY FIXES Ticket #388 - Improve replication agreement status messages 0760116 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion Ticket #409 - Report during startup if nsslapd-cachememsize is too small Ticket #412 - memberof performance enhancement 12813: Uninitialized pointer read string_values2keys Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values Ticket #410 - Referential integrity plug-in does not work when update interval is not zero Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled Ticket #405 - referint modrdn not working if case is different Ticket 399 - slapi_ldap_bind() doesn't check bind results- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Perl 5.16 rebuild- Ticket 378 - unhashed#user#password visible after changing password - fix func declaration from previous patch - Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error- Trac Ticket 396 - Account Usability Control Not Working- Ticket #378 - audit log does not log unhashed password: enabled, by default. - Ticket #378 - unhashed#user#password visible after changing password - Ticket #365 - passwords in clear text in the audit log- workaround for https://bugzilla.redhat.com/show_bug.cgi?id=833529- Ticket #387 - managed entry sometimes doesn't delete the managed entry - 5903815 improve txn test index handling - Ticket #360 - ldapmodify returns Operations error - fix delete caching - bcfa9e3 Coverity Fix for CLEANALLRUV - Trac Ticket #335 - transaction retries need to be cache aware - Ticket #389 - ADD operations not in audit log - 44cdc84 fix coverity issues with uninit vals, no return checking - Ticket 368 - Make the cleanAllRUV task one step - Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week- Perl 5.16 rebuild- Ticket #360 - ldapmodify returns Operations error - Ticket #321 - krbExtraData is being null modified and replicated on each ssh login - Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress - Ticket #361: Bad DNs in ACIs can segfault ns-slapd - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object - Ticket #337 - Improve CLEANRUV task- Ticket #358 - managed entry doesn't delete linked entry- Ticket #351 - use betxn plugins by default - revert - make no plugins betxn by default - too great a risk - for deadlocks until we can test this better - Ticket #348 - crash in ldap_initialize with multiple threads - fixes PR_Init problem in ldclt- f227f11 Suppress alert on unavailable port with forced setup - Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return - Ticket #351 - use betxn plugins by default - Trac Ticket #345 - db deadlock return should not log error - Ticket #348 - crash in ldap_initialize with multiple threads - Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied - Ticket #207 - [RFE] enable attribute that tracks when a password was last set - Ticket #216 - RFE - Disable replication agreements - Ticket #337 - RFE - Improve CLEANRUV functionality - Ticket #326 - MemberOf plugin should work on all backends - Trac Ticket #19 - Convert entryUSN plugin to transaction aware type - Ticket #347 - IPA dirsvr seg-fault during system longevity test - Trac Ticket #310 - Avoid calling escape_string() for logged DNs - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object - Ticket #183 - passwordMaxFailure should lockout password one sooner - Trac Ticket #335 - transaction retries need to be cache aware - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - Ticket #325 - logconv.pl : use of getopts to parse command line options - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - 554e29d Coverity Fixes - Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions - Ticket #315 - small fix to libglobs - Ticket #315 - ns-slapd exits/crashes if /var fills up - Ticket #20 - Allow automember to work on entries that have already been added - Trac Ticket #45 - Fine Grained Password policy: if passwordHistory is on, deleting the password fails.- 453eb97 schema def must have DESC '' - close paren must be preceded by space - Trac Ticket #46 - (additional) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #331 - transaction errors with db 4.3 and db 4.2 - Ticket #261 - Add Solaris i386 - Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks - Ticket #324 - Sync with group attribute containing () fails - Ticket #319 - ldap-agent crashes on start with signal SIGSEGV - 77cacd9 coverity 12606 Logically dead code - Trac Ticket #303 - make DNA range requests work with transactions - Ticket #320 - allow most plugins to be betxn plugins - Ticket #24 - Add nsTLS1 to the DS schema - Ticket #271 - Slow shutdown when you have 100+ replication agreements - TIcket #285 - compilation fixes for '--format-security' - Ticket 211 - Avoid preop range requests non-DNA operations - Ticket #271 - replication code cleanup - Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages. - Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration - Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs - 6f8680a coverity 12563 Read from pointer after free (fix 2) - e6a9b22 coverity 12563 Read from pointer after free - 245d494 Config changes fail because of unknown attribute "internalModifiersname" - Ticket #191 - Implement SO_KEEPALIVE in network calls - Ticket #289 - allow betxn plugin config changes - 93adf5f destroy the entry cache and dn cache in the dse post op delete callback - e2532d8 init txn thread private data for all database modes - Ticket #291 - cannot use & in a sasl map search filter - 6bf6e79 Schema Reload crash fix - 60b2d12 Fixing compiler warnings - Trac Ticket #260 - 389 DS does not support multiple paging controls on a single connection - Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName - fdcc256 Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e - Ticket #306 - void function cannot return value - ticket 181 - Allow PAM passthru plug-in to have multiple config entries - ticket 211 - Use of uninitialized variables in ldbm_back_modify() - Ticket #74 - Add schema for DNA plugin (RFE) - Ticket #301 - implement transaction support using thread local storage - Ticket #211 - dnaNextValue gets incremented even if the user addition fails - 144af59 coverity uninit var and resource leak - Trac Ticket #34 - remove-ds.pl does not remove everything - Trac Ticket #169 - allow 389 to use db5 - bc78101 fix compiler warning in acct policy plugin - Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints - Trac Ticket #27 - SASL/PLAIN binds do not work - Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFYops - Ticket #17 - new replication optimizations- Ticket #46 - (revised) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #66 - 389-ds-base spec file does not have a BuildRequires on gcc-c++- Ticket #46 - setup-ds-admin.pl does not like ipv6 only hostnames- get rid of posttrans - move update code to post- Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash- b05139b memleak in normalize_mods2bvals - c0eea24 memleak in mep_parse_config_entry - 90bc9eb handle null smods - Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash - Ticket #306 - void function cannot return value - ticket 304 - Fix kernel version checking in dsktune- Trac Ticket #298 - crash when replicating orphaned tombstone entry - Ticket #281 - TLS not working with latest openldap - Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails - Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse- Ticket #124 - add Provides: ldif2ldbm to rpm- Ticket #294 - 389 DS Segfaults during replica install in FreeIPA- Ticket 284 - Remove unnecessary SNMP MIB files - Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5? - Ticket 175 - logconv.pl improvements- Introducing use_db4 macro to support db5 (libdb).- Rebuild against PCRE 8.30- ad9dd30 coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources - Ticket #281 - TLS not working with latest openldap - Ticket #280 - extensible binary filters do not work - Ticket #279 - filter normalization does not use matching rules - Trac Ticket #275 - Invalid read reported by valgrind - Ticket #277 - cannot set repl referrals or state - Ticket #278 - Schema replication update failed: Invalid syntax - Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled - Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server - Ticket #87 - Manpages fixes - c493fb4 fix a couple of minor coverity issues - Ticket #55 - Limit of 1024 characters for nsMatchingRule - Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned - Ticket #6 - protocol error from proxied auth operation - Ticket #38 - nisDomain schema is incorrect - Ticket #273 - ruv tombstone searches don't work after reindex entryrdn - Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword - Ticket #22 - RFE: Support sendmail LDAP routing schema - Ticket #161 - Review and address latest Coverity issues - Ticket #140 - incorrect memset parameters - Trac Ticket 35 - Log not clear enough on schema errors - Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn - Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if IPv4-mapped-IPv6 address is given- Ticket #272 - add tombstonenumsubordinates to schema- fixes for systemd - remove .pid files after shutting down servers - Ticket #263 - add systemd include directive - Ticket #264 - upgrade needs better check for "server is running"- Ticket #262 - pid file not removed with systemd - Ticket #50 - server should not call a plugin after the plugin close function is called - Ticket #18 - Data inconsitency during replication - Ticket #49 - better handling for server shutdown while long running tasks are active - Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead - Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same - Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI - 6aaeb77 add a hack to disable sasl hostname canonicalization - Ticket 168 - minssf should not apply to rootdse - Ticket #177 - logconv.pl doesn't detect restarts - Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating - Ticket 75 - Unconfigure plugin opperations are being called. - Ticket 26 - Please support setting defaultNamingContext in the rootdse. - Ticket #71 - unable to delete managed entry config - Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock - Ticket #256 - debug build assertion in ACL_EvalDestroy() - Ticket #4 - bak2db gets stuck in infinite loop - Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS - Ticket #3: acl cache overflown problem - Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations - Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full DN.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Bug 755725 - 389 programs linked against openldap crash during shutdown - Bug 755754 - Unable to start dirsrv service using systemd - Bug 745259 - Incorrect entryUSN index under high load in replicated environment - d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere - 5910551 csn_init_as_string should not use sscanf - b53ba00 reduce calls to csn_as_string and slapi_log_error - c897267 fix member variable name error in slapi_uniqueIDFormat - 66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf - 580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf - Bug 751645 - crash when simple paged fails to send entry to client - Bug 752155 - Use restorecon after creating init script lock file- Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD' - Bug 750625 750624 750622 744946 Coverity issues - Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication - Bug 748575 - rhds81 modrn operation and 100% cpu use in replication - Bug 745259 - Incorrect entryUSN index under high load in replicated environment - f639711 Reduce the number of DN normalization - c06a8fa Keep unhashed password psuedo-attribute in the adding entry - Bug 744945 - nsslapd-counters attribute value cannot be set to "off" - 8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular - d316a67 Change referential integrity to be a betxnpostoperation plugin- Bug 741744 - part3 - MOD operations with chained delete/add get back error 53 - 1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in - b6d3ba7 pass the plugin config entry to the plugin init function - 28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins - Bug 743966 - Compiler warnings in account usability plugin- 498c42b fix transaction support in ldbm_delete- Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations - Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config - Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user- Bug 695736 - Providing native systemd file- corrected source- Bug 735114 - renaming a managed entry does not update mepmanagedby- Bug 735121 - simple paged search + ip/dns based ACI hangs server - Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code - Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server - Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.- Bug 732153 - subtree and user account lockout policies implemented? - Bug 722292 - Entries in DS are not updated properly when using WinSync API- Bug 733103 - large targetattr list with syntax errors cause server to crash or hang - Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining - Bug 732541 - Ignore error 32 when adding automember config - Bug 728592 - Allow ns-slapd to start with an invalid server cert- Bug 728510 - Run dirsync after sending updates to AD - Bug 729717 - Fatal error messages when syncing deletes from AD - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working. - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash - Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed again - separate tests for atomic ops and atomic bool cas- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix another coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - previous patch broke build on el5- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error- Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed to use configure test for GCC provided 64-bit atomic functions- Bug 663752 - Cert renewal for attrcrypt and encchangelog - this was "re-fixed" due to a deadlock condition with cl2ldif task cancel - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma - Bug 725743 - Make memberOf use PRMonitor for it's operation lock - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package - Bug 723937 - Slapi_Counter API broken on 32-bit F15- Perl mass rebuild- Perl mass rebuild- Bug 720059 - RDN with % can cause crashes or missing entries - Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2. - Bug 691313 - Need TLS/SSL error messages in repl status and errors log - Bug 712855 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not - Bug 713209 - Update sudo schema - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9 - Bug 718303 - Intensive updates on masters could break the consumer's cache - Bug 711679 - unresponsive LDAP service when deleting vlv on replica- 389-ds-base-1.2.9.a2 - look for separate openldap ldif library - Split automember regex rules into separate entries - writing Inf file shows SchemaFile = ARRAY(0xhexnum) - add support for ldif files with changetype: add - Bug 716980 - winsync uses old AD entry if new one not found - Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9 - bump console version to 1.2.6 - Bug 711679 - unresponsive LDAP service when deleting vlv on replica - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package - Bug 663752 - Cert renewal for attrcrypt and encchangelog - Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute - Bug 711906 - ns-slapd segfaults using suffix referrals - Bug 707384 - only allow FIPS approved cipher suites in FIPS mode - Bug 710377 - Import with chain-on-update crashes ns-slapd - Bug 709826 - Memory leak: when extra referrals configured- Perl mass rebuild- Perl 5.14 mass rebuild- 389-ds-base-1.2.9.a1 - Auto Membership - More Coverity fixes- 389-ds-base-1.2.8.3 - Bug 700145 - userpasswd not replicating - Bug 700557 - Linked attrs callbacks access free'd pointers after close - Bug 694336 - Group sync hangs Windows initial Sync - Bug 700215 - ldclt core dumps - Bug 695779 - windows sync can lose old values when a new value is added - Bug 697027 - 12 - minor memory leaks found by Valgrind + TET- 389-ds-base-1.2.8.2 - Bug 696407 - If an entry with a mixed case RDN is turned to be - a tombstone, it fails to assemble DN from entryrdn- 389-ds-base-1.2.8.1 - Bug 693962 - Full replica push loses some entries with multi-valued RDNs- 389-ds-base-1.2.8.0 - Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1 - Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1 - Bug 693466 - Unable to change schema online - Bug 693503 - matching rules do not inherit from superior attribute type - Bug 693455 - nsMatchingRule does not work with multiple values - Bug 693451 - cannot use localized matching rules - Bug 692331 - Segfault on index update during full replication push on 1.2.7.5- 389-ds-base-1.2.8.rc5 - Bug 692469 - Replica install fails after step for "enable GSSAPI for replication"- 389-ds-base-1.2.8.rc4 - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - 389-ds-base-1.2.8.rc3 - Bug 690955 - Mrclone fails due to the replica generation id mismatch- 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2 - Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences - Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format - Bug 681015 - RFE: allow fine grained password policy duration attributes - in days, hours, minutes, as well - Bug 684996 - Exported tombstone cannot be imported correctly - Bug 683250 - slapd crashing when traffic replayed - Bug 668909 - Can't modify replication agreement in some cases - Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1 - Bug 644784 - Memory leak in "testbind.c" plugin - Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree- rebuild for icu 4.6- 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1 - Bug 518890 - setup-ds-admin.pl - improve hostname validation - Bug 681015 - RFE: allow fine grained password policy duration attributes in - days, hours, minutes, as well - Bug 514190 - setup-ds-admin.pl --debug does not log to file - Bug 680555 - ns-slapd segfaults if I have more than 100 DBs - Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically - Bug 674852 - crash in ldap-agent when using OpenLDAP - Bug 679978 - modifying attr value crashes the server, which is supposed to - be indexed as substring type, but has octetstring syntax - Bug 676655 - winsync stops working after server restart - Bug 677705 - ds-logpipe.py script is failing to validate "-s" and - "--serverpid" options with "-t". - Bug 625424 - repl-monitor.pl doesn't work in hub node- Bug 676598 - 389-ds-base multilib: file conflicts - split off libs into a separate -libs package- do not create /var/run/dirsrv - setup will create it instead - remove the fedora-ds initscript upgrade stuff - we do not support that anymore - convert the remaining lua stuff to plain old shell script- 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3 - Bug 675320 - empty modify operation with repl on or lastmod off will crash server - Bug 675265 - preventryusn gets added to entries on a failed delete - Bug 677774 - added support for tmpfiles.d - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search es - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH - Bug 671199 - Don't allow other to write to rundir - Bug 678646 - Ignore tombstone operations in managed entry plug-in - Bug 676053 - export task followed by import task causes cache assertion - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8 - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used - Bug 676689 - crash while adding a new user to be synced to windows - Bug 604881 - admin server log files have incorrect permissions/ownerships - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - Bug 675853 - dirsrv crash segfault in need_new_pw()- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2 - Bug 674430 - Improve error messages for attribute uniqueness - Bug 616213 - insufficient stack size for HP-UX on PA-RISC - Bug 615052 - intrinsics and 64-bit atomics code fails to compile - on PA-RISC - Bug 151705 - Need to update Console Cipher Preferences with new ciphers - Bug 668862 - init scripts return wrong error code - Bug 670616 - Allow SSF to be set for local (ldapi) connections - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the - log output to the text file - Bug 668619 - slapd stops responding - Bug 624547 - attrcrypt should query the given slot/token for - supported ciphers - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any - error message in logs- 1.2.8-0.1.a1 release - git tag 389-ds-base-1.2.8.a1 - many bug fixes- 1.2.7.5 release - git tag 389-ds-base-1.2.7.5 - Bug 663597 - Memory leaks in normalization code- Resolves: bug 656541 - use %ghost on files in /var/lock- 1.2.7.4 release - git tag 389-ds-base-1.2.7.4 - Bug 661792 - Valid managed entry config rejected- 1.2.7.3 release - git tag 389-ds-base-1.2.7.3 - Bug 658312 - Invalid free in Managed Entry plug-in - Bug 641944 - Don't normalize non-DN RDN values- 1.2.7.2 release - git tag 389-ds-base-1.2.7.2 - Bug 659456 - Incorrect usage of ber_printf() in winsync code - Bug 658309 - Process escaped characters in managed entry mappings - Bug 197886 - Initialize return value for UUID generation code - Bug 658312 - Allow mapped attribute types to be quoted - Bug 197886 - Avoid overflow of UUID generator- last commit had bogus commit log- 1.2.7.1 release - git tag 389-ds-base-1.2.7.1 - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes - Bug 656392 - Remove calls to ber_err_print() - Bug 625950 - hash nsslapd-rootpw changes in audit log- 1.2.7 release - git tag 389-ds-base-1.2.7- Bug 648949 - Merge dirsrv and dirsrv-admin policy modules into base policy- 1.2.7.a5 release - git tag 389-ds-base-1.2.7.a5 - Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-ref erral) - Bug 635009 - Add one-way AD sync capability - Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot - put replication config entries in separate file - Bug 567282 - server can not abandon searchRequest of "simple paged results" - Bug 329751 - "nested" filtered roles searches candidates more than needed - Bug 521088 - DNA should check ACLs before getting a value from the range- 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4 - Bug 647932 - multiple memberOf configuration adding memberOf where there is no member - Bug 491733 - dbtest crashes - Bug 606545 - core schema should include numSubordinates - Bug 638773 - permissions too loose on pid and lock files - Bug 189985 - Improve attribute uniqueness error message - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat ions - Bug 619633 - Make attribute uniqueness obey requiredObjectClass- 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Adding the ancestorid fix code to ##upgradednformat.pl.- 1.2.7.a3 release - a2 was never released - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Bug 629681 - Retro Changelog trimming does not behave as expected - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif - are not upgraded in the server instance schema dir- 1.2.7.a2 release - a1 was the OpenLDAP testday release - git tag 389-ds-base-1.2.7.a2 - added openldap support on platforms that use openldap with moznss - for crypto (F-14 and later) - many bug fixes - Account Policy Plugin (keep track of last login, disable old accounts)- added openldap support- bump rel to rebuild again- bump rel to rebuild- This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1 - Bug 634561 - Server crushes when using Windows Sync Agreement - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self - Bug 612264 - ACI issue with (targetattr='userPassword') - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager" - Bug 631862 - crash - delete entries not in cache + referint- This is the final 1.2.6 release- 1.2.6 release candidate 7 - git tag 389-ds-base-1.2.6.rc7 - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6- 1.2.6 release candidate 6 - git tag 389-ds-base-1.2.6.rc6 - Bug 617013 - repl-monitor.pl use cpu upto 90% - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors - Bug 613833 - Allow dirsrv_t to bind to rpc ports - Bug 612242 - membership change on DS does not show on AD - Bug 617629 - Missing aliases in new schema files - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments - Bug 617862 - Replication: Unable to delete tombstone errors - Bug 594745 - Get rid of dirsrv_lib_t label- make selinux-devel explicit Require the base package in order - to comply with Fedora Licensing Guidelines- 1.2.6 release candidate 3 - git tag 389-ds-base-1.2.6.rc3 - Bug 603942 - null deref in _ger_parse_control() for subjectdn - 609256 - Selinux: pwdhash fails if called via Admin Server CGI - 578296 - Attribute type entrydn needs to be added when subtree rename switch is on - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"- 1.2.6 release candidate 2- install replication session plugin header with devel package- 1.2.6 release candidate 1- Mass rebuild with perl-5.12.0- 1.2.6.a4 release- 1.2.6.a3 release - add managed entries plug-in - many bug fixes - moved selinux subpackage into base package- rebuild for icu 4.4- 1.2.6.a2 release - add support for matching rules - many bug fixes- 1.2.6.a1 release - Added SELinux policy and subpackages- 1.2.5 final release- 1.2.5.rc4 release- 1.2.5.rc3 release- 1.2.5.rc2 release- 1.2.5.rc1 release- 1.2.5.a1 release- 1.2.4 release - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif- 1.2.3 release - added template-initconfig to %files - %posttrans now runs update to update the server instances - servers are shutdown, then restarted if running before install - scriptlets mostly use lua now to pass data among scriptlet phases- rebuild with new openssl to fix dependencies- backed out - added template-initconfig to %files - this change is for the next major release - bump version to 1.2.2 - fix reopened 509472 db2index all does not reindex all the db backends correctly - fix 518520 - pre hashed salted passwords do not work - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of - bugs fixed in 1.2.2- rebuilt with new openssl- added template-initconfig to %files- added BuildRequires pcre- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- change name to 389 - change version to 1.2.1 - added initial support for numeric string syntax - added initial support for syntax validation - added initial support for paged results including sorting- final release 1.2.0 - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389 - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428- re-enable ppc builds- exclude ppc builds - needs extensive porting work- new release 1.2.0 - Made devel package depend on mozldap-devel - only create run dir if it does not exist - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330- added db4-utils to Requires for verify-db.pl- Enabled LDAPI autobind- updated update to patch bug463991-bdb47.patch- updated patch bug463991-bdb47.patch- added patch bug463991-bdb47.patch - make ds work with bdb 4.7- rolled back bogus winsync memory leak fix- winsync api improvements for modify operations- This is the 1.1.2 release. The bugs fixed can be found here - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721 - Added winsync-plugin.h to the devel subpackage- bump rev to rebuild and pick up new version of ICU- 1.1.1 release candidate - several bug fixes- fix bugzilla 439829 - patch to allow working with NSS 3.11.99 and later- add patch to allow server to work with NSS 3.11.99 and later - do NSS_Init after fork but before detaching from console- add Requires for versioned perl (libperl.so)- previous fix for 434403 used the wrong patch - this is the right one- Resolves bug 434403 - GCC 4.3 build fails - Rolled new source tarball which includes Nathan's fix for the struct ucred - NOTE: Change version back to 1.1.1 for next release - this release was pulled from CVS tag FedoraDirSvr110_gcc43- Autorebuild for GCC 4.3- This is the GA release of Fedora DS 1.1 - Removed version numbers for BuildRequires and Requires - Added full URL to source tarball- Rebuild for deps- This is the beta2 release - new file added to package - /etc/sysconfig/dirsrv - for setting - daemon environment as is usual in other linux daemons- fix build breakage due to open() - mock could not find BuildRequires: db4-devel >= 4.2.52 - mock works if >= version is removed - it correctly finds db4.6- Change pathnames to use the pkgname macro which is dirsrv - get rid of cvsdate in source name- Added Requires for perldap, cyrus sasl plugins - Removed template-migrate* files - Added perl module directory - Removed install.inf - setup-ds.pl can now easily generate one- added requires for mozldap-tools- update to latest sources - added migrateTo11 to allow migrating instances from 1.0.x to 1.1 - ldapi support - fixed pam passthru plugin ENTRY method- Renamed package to fedora-ds-base, but keep names of paths/files/services the same - use the shortname macro (fedora-ds) for names of paths, files, and services instead - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base - updated to latest sources- More cleanup suggested by Dennis Gilmore - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1- latest sources - added init scripts - use /etc as instconfigdir- latest sources - moved all executables to _bindir- latest sources - added /var/tmp/fedora-ds to dirs- added logconv.pl - added slapi-plugin.h to devel package - added explicit dirs for /var/log/fedora-ds et. al.- just move all .so files into the base package from the devel package- Move the plugin *.so files into the main package instead of the devel - package because they are loaded directly by name via dlopen- Move the script-templates directory to datadir/fedora-ds- change mozldap to mozldap6- remove . from cvsdate define- Having a problem building in Brew - may be Release format- Changed version to 1.1.0 and added Release 1.el4.cvs20070119 - merged in changes from Fedora Extras candidate spec file- Bump component versions (nspr, nss, svrcore, mozldap) to their latest - remove unneeded patches- update to a cvs snapshot - fedorafy the spec - create -devel subpackage - apply a patch to use mozldap not mozldap6 - apply a patch to allow --prefix to work correctly- Fixed the problem where the server would crash upon shutdown in dblayer - due to a race condition among the database housekeeping threads - Fix a problem with normalized absolute paths for db directories- Touch all of the ldap/admin/src/scripts/*.in files so that they - will be newer than their corresponding script template files, so - that make will rebuild them.- Chown new schema files when copying during instance creation- Configure will get ldapsdk_bindir from pkg-config, or $libdir/mozldap6- use eval to sed ./configure into ../configure- jump through hoops to be able to run ../configure- Need to make built dir in setup section- The template scripts needed to use @libdir@ instead of hardcoding - /usr/lib - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall - do the actual build in a "built" subdirectory, until we remove - the old script templates- Make replication plugin link with libdb- Have make define LIBDIR, BINDIR, etc. for C code to use - especially for create_instance.h- Forgot to checkin new config.h.in for AC_CONFIG_HEADERS- Add perldap as a Requires; update sources- Fix ds_newinst.pl - Remove obsolete #defines- Update sources; rebuild to populate brew yum repo with dirsec-nss- Update sources- initial revision/bin/sh/bin/sh/bin/sh389-ds-base !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYY[\\^_`abcdefghijklmnpqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ 1.3.8.4-18.el7_61.3.8.4-18.el7_61.3.8.4-18.el7_60 1.3.7.10  !dirsrvconfigcertmap.confslapd-collations.conftemplate-initconfigschema99user.ldifdirsrvdirsrv.systemddirsrv.target.wantscl-dumpcl-dump.pldbgen.pldbscands-logpipe.pyds-replcheckdsktuneinfaddldcltldiflogconv.plmigratecredmmldifpwdhashreadnsstaterepl-monitorrepl-monitor.plrsearch70-dirsrv.confsystemdirsrv.targetdirsrv@.serviceperlDSCreate.pmDSDialogs.pmDSMigration.pmDSUpdate.pmDSUpdateDialogs.pmDSUtil.pmDialog.pmDialogManager.pmFileConn.pmInf.pmMigration.pmResource.pmSetup.pmSetupDialogs.pmSetupLog.pmpluginslibacctpolicy-plugin.solibacctusability-plugin.solibacl-plugin.solibaddn-plugin.solibattr-unique-plugin.solibautomember-plugin.solibback-ldbm.solibbitwise-plugin.solibchainingdb-plugin.solibcollation-plugin.solibcontentsync-plugin.solibcos-plugin.solibderef-plugin.solibdistrib-plugin.solibdna-plugin.solibhttp-client-plugin.soliblinkedattrs-plugin.solibmanagedentries-plugin.solibmemberof-plugin.solibpam-passthru-plugin.solibpassthru-plugin.solibpbe-plugin.solibposix-winsync-plugin.solibpwdstorage-plugin.solibreferint-plugin.solibreplication-plugin.solibretrocl-plugin.solibroles-plugin.solibrootdn-access-plugin.solibschemareload-plugin.solibstatechange-plugin.solibsyntax-plugin.solibusn-plugin.solibviews-plugin.solibwhoami-plugin.sopythonfailedbinds.pyfailedbinds.pycfailedbinds.pyologregex.pylogregex.pyclogregex.pyobak2dbbak2db.plcleanallruv.pldb2bakdb2bak.pldb2indexdb2index.pldb2ldifdb2ldif.pldbmon.shdbverifydn2rdnds_selinux_enabledds_selinux_port_queryds_systemd_ask_password_aclfixup-linkedattrs.plfixup-memberof.plldif2dbldif2db.plldif2ldapmigrate-ds.plmonitorns-accountstatus.plns-activate.plns-inactivate.plns-newpwpolicy.plns-slapdremove-ds.plrestart-dirsrvrestoreconfigsaveconfigschema-reload.plsetup-ds.plstart-dirsrvstatus-dirsrvstop-dirsrvsuffix2instancesyntax-validate.plupgradedbupgradednformatusn-tombstone-cleanup.plverify-db.plvlvindexdirsrvdata10rfc2307bis.ldif60changelog.ldif60inetmail.ldif60kerberos.ldif60krb5kdc.ldif60nis.ldif60qmail.ldif60radius.ldif60rfc4876.ldif60samba.ldif60samba3.ldif60sendmail.ldifAce.ldifDSSharedLibEuropean.ldifEurosuffix.ldifExample-roles.ldifExample-views.ldifExample.ldifdbgen-FamilyNamesdbgen-GivenNamesdbgen-OrgUnitstemplate-baseacis.ldiftemplate-country.ldiftemplate-domain.ldiftemplate-dse-minimal.ldiftemplate-dse.ldiftemplate-ldapi-autobind.ldiftemplate-ldapi-default.ldiftemplate-ldapi.ldiftemplate-locality.ldiftemplate-org.ldiftemplate-orgunit.ldiftemplate-sasl.ldiftemplate-state.ldiftemplate-suffix-db.ldiftemplate.ldifinfdefaults.infdscreate.mapdsorgentries.mapdsupdate.mapslapd.infmibsredhat-directory.mibpropertiesmigrate-ds.resns-slapd.propertiessetup-ds.resschema00core.ldif01core389.ldif02common.ldif05rfc2927.ldif05rfc4523.ldif05rfc4524.ldif06inetorgperson.ldif10automember-plugin.ldif10dna-plugin.ldif10mep-plugin.ldif10rfc2307.ldif20subscriber.ldif25java-object.ldif28pilot.ldif30ns-common.ldif50ns-admin.ldif50ns-certificate.ldif50ns-directory.ldif50ns-mail.ldif50ns-value.ldif50ns-web.ldif60acctpolicy.ldif60autofs.ldif60eduperson.ldif60mozilla.ldif60nss-ldap.ldif60pam-plugin.ldif60posix-winsync-plugin.ldif60pureftpd.ldif60rfc2739.ldif60rfc3712.ldif60sabayon.ldif60sudo.ldif60trust.ldifscript-templatestemplate-bak2dbtemplate-bak2db.pltemplate-cleanallruv.pltemplate-db2baktemplate-db2bak.pltemplate-db2indextemplate-db2index.pltemplate-db2ldiftemplate-db2ldif.pltemplate-dbverifytemplate-dn2rdntemplate-fixup-linkedattrs.pltemplate-fixup-memberof.pltemplate-fixup-memberuid.pltemplate-ldif2dbtemplate-ldif2db.pltemplate-ldif2ldaptemplate-monitortemplate-ns-accountstatus.pltemplate-ns-activate.pltemplate-ns-inactivate.pltemplate-ns-newpwpolicy.pltemplate-restart-slapdtemplate-restoreconfigtemplate-saveconfigtemplate-schema-reload.pltemplate-start-slapdtemplate-stop-slapdtemplate-suffix2instancetemplate-syntax-validate.pltemplate-upgradednformattemplate-usn-tombstone-cleanup.pltemplate-verify-db.pltemplate-vlvindexupdates10cleanupldapi.pl10delautodnsuffix.pl10fixrundir.pl20betxn.pl50AES-pbe-plugin.ldif50acctusabilityplugin.ldif50addchainingsaslpwroles.ldif50automemberplugin.ldif50bitstringsyntaxplugin.ldif50contentsync.ldif50cryptpwdstorageplugin.ldif50deliverymethodsyntaxplugin.ldif50derefplugin.ldif50disableurisyntaxplugin.ldif50enhancedguidesyntaxplugin.ldif50entryusnindex.ldif50faxnumbersyntaxplugin.ldif50faxsyntaxplugin.ldif50fixNsState.pl50guidesyntaxplugin.ldif50linkedattrsplugin.ldif50managedentriesplugin.ldif50memberofindex.ldif50memberofplugin.ldif50nameuidsyntaxplugin.ldif50nstombstonecsn.ldif50numericstringsyntaxplugin.ldif50pbkdf2pwdstorageplugin.ldif50printablestringsyntaxplugin.ldif50refintprecedence.ldif50retroclprecedence.ldif50rootdnaccesscontrolplugin.ldif50schemareloadplugin.ldif50smd5pwdstorageplugin.ldif50syntaxvalidplugin.ldif50targetuniqueid.ldif50teletexterminalidsyntaxplugin.ldif50telexnumbersyntaxplugin.ldif50updateconfig.ldif50usnplugin.ldif52updateAESplugin.pl60removeLegacyReplication.ldif60upgradeconfigfiles.pl60upgradeschemafiles.pl70upgradefromldif.pl80upgradednformat.pl81changelog.pl82targetuniqueidindex.pl90subtreerename.pl91reindex.pl91subtreereindex.pldnaplugindepends.ldifexampleupdate.ldifexampleupdate.plexampleupdate.sh389-ds-base-1.3.8.4LICENSELICENSE.GPLv3+LICENSE.opensslusrsbinns-slapd-gdb.pycl-dump.1.gzdbgen.pl.1.gzdbscan.1.gzds-logpipe.py.1.gzds-replcheck.1.gzdsktune.1.gzinfadd.1.gzldclt.1.gzldif.1.gzlogconv.pl.1.gzmigratecred.1.gzmmldif.1.gzpwdhash.1.gzreadnsstate.1.gzrepl-monitor.1.gzrsearch.1.gzbak2db.8.gzbak2db.pl.8.gzcleanallruv.pl.8.gzdb2bak.8.gzdb2bak.pl.8.gzdb2index.8.gzdb2index.pl.8.gzdb2ldif.8.gzdb2ldif.pl.8.gzdbmon.sh.8.gzdbverify.8.gzdn2rdn.8.gzfixup-linkedattrs.pl.8.gzfixup-memberof.pl.8.gzldif2db.8.gzldif2db.pl.8.gzldif2ldap.8.gzmigrate-ds.pl.8.gzmonitor.8.gzns-accountstatus.pl.8.gzns-activate.pl.8.gzns-inactivate.pl.8.gzns-newpwpolicy.pl.8.gzns-slapd.8.gzremove-ds.pl.8.gzrestart-dirsrv.8.gzrestoreconfig.8.gzsaveconfig.8.gzschema-reload.pl.8.gzsetup-ds.pl.8.gzstart-dirsrv.8.gzstatus-dirsrv.8.gzstop-dirsrv.8.gzsuffix2instance.8.gzsyntax-validate.pl.8.gzupgradedb.8.gzupgradednformat.8.gzusn-tombstone-cleanup.pl.8.gzverify-db.pl.8.gzvlvindex.8.gzdirsrvdirsrvdirsrv/etc//etc/dirsrv//etc/dirsrv/config//etc/dirsrv/schema//etc/sysconfig//etc/systemd/system//usr/bin//usr/lib/sysctl.d//usr/lib/systemd//usr/lib/systemd/system//usr/lib64/dirsrv//usr/lib64/dirsrv/perl//usr/lib64/dirsrv/plugins//usr/lib64/dirsrv/python//usr/sbin//usr/share//usr/share/dirsrv//usr/share/dirsrv/data//usr/share/dirsrv/inf//usr/share/dirsrv/mibs//usr/share/dirsrv/properties//usr/share/dirsrv/schema//usr/share/dirsrv/script-templates//usr/share/dirsrv/updates//usr/share/doc//usr/share/doc/389-ds-base-1.3.8.4//usr/share/gdb/auto-load//usr/share/gdb/auto-load/usr//usr/share/gdb/auto-load/usr/sbin//usr/share/man/man1//usr/share/man/man8//var/lib//var/lock//var/log/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericdrpmxz2x86_64-redhat-linux-gnu   !"#$%&'()*+,-./012333345556657555555555555588899888888888888888888888888899888888888888898888888889directoryASCII textPOSIX shell script, ASCII text executablePerl script, ASCII text executablePerl script, ASCII text executable, with very long linesELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=928dfa24779d59322c8daebc59f18d16c35bcb65, strippedPython script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=d21a649e1945b4aa253ccaee95c5103bb280f4e2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=111660c7945835bc273afa9bda3f9f92bde89a9e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=97eeaffc2977141c485961dd7efe2ea2616cc870, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=71f1489850310dfad586f7c37668201499b80f73, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=dd29dac164bcbf590b4937e4a82b81da2b174eee, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=a73e54e35cf77043db762d6fe9e6f0b1faee7f9f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=79104cd0def6bbc41acc44d476ef2dbea9cb8cbe, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=7df0e5ffda3ecb70c6d40ab6ec2221e20841d73c, strippedPerl5 module source textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=21fcd9a08cffc061c3a79cc6d7519ec871a8b4ba, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=73ae772206eef14077effd94cc10a771d1082fa1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=14ea43c781d0a9876d1028bd8aa69c4678909e81, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=30346878524f664b4aea1d178b3e70a55b7fc107, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=06533325164f2ea6284b3c763ae59346471ead92, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8ce05518b0d68d8732c8b52f3a48205c3a25b32d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=931cb237bce256501967a83f1e7141b1f3626416, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b1da25b207b223e89bba244bd199c2d8c7ed8d97, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ef7df61e1f2076d89b9693a10bc3737fe619c625, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c23ffbb0fe7721a93fc5f6218d0352a25028e534, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=906dcaebcc7eb46b53d5fd3a2339c153b9c73d83, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ba2b3114b7051b95fe12118f2452eda1ac817c50, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=316d6324d6ce385045af4fa7ec135b523aa8212b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=94e2cb6d47fd250f724107fd518c4f5ba61d1d74, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d2723a3a19d652791c67f1efa16111292e622330, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e44aede0aee11c8b30c2038a922d224c1ff2b82b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f67dadb144bf0ae2b7fb4faaf5e7f395eafd1cdb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=be6afc82ba9d95c53243f4e7e04a3eaa824bb058, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ec2a36019bc7fc904c502df186e82e9f3aee299, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=47f3b613e4fbbe59c8a6d75fe87f9a12b5853860, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b9173376d3986a2313b72f531731b29810168d7c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b7e53483df73857a29870b05b52d60bd6acf1f76, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ceca8a4a9e7ab5e305e28ac3809050b65234b14, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a46195472afe94221639c8505f670d18a725f204, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fc459ed0d044f76c795ee6c910cc09357f9c49d9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e46662989dc07b7517caa1eddb1d0cc946b6d9b4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=37840a48f1fce17a80d022deefeb2b078a175ccc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9de3824756a710125662206e1b4356a97e8b38fe, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3601ae9c529da3eb9564e85d8f6306806ac479f1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=59d4f0c64e2d76280ff663d7af8cf8005c9aada2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=65fccebe432bb0b74df5f2ba3eb98622997aa14d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f2aa0177606bc017ff3389cafeee598351b01b6a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ea3e31903d2b07247a55c712ef6098869c942ec9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ef6c7c889b60456d6749ceb127a43012c314d456, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0a1388b8e823576491ba5b1e6a6f546def439079, strippedpython 2.7 byte-compiledELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=c2d6504e54406d67d824a91a590f93f66aed21a7, strippedASCII text, with very long linesUTF-8 Unicode textHTML document, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, from Unix, max compression)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, from Unix, max compression)  /EUay#&13@GKd|4Rk5Qj)BZr =CDEFITUVWX[\]`cdehklopstxyz}      !!# RR^RbRdReRgRR]RRRRRRRCR4R5R)RRRRRRRRRRRCRRRRRRRCR4R5R)RR=R,R7RRRRRRCR4R5R)RR,R;R&R$R8R@R#R"RR3R6RAR9RCRRRRRRR0R;R#R"RR3R9R'RCR&R$RDE%P;;oOHGҩ|hԋLYשQ-y$"Yɣ _1kڳG"V@DK>}7bSAUb.82qJK^q"PPNMk90qyV+p3NhdÄ(2_6u"9z)MY @<-:e+|Ij?$/jp~ńi.~Wi"Бq/}UqfuYlw%~ ⵶B\Rb,szjzL7miB6G}kʘ e2xnE(X}d% :ڑ,jd@ -Ȏcc`;Y n5f_R\eDЏB|PI(z} ia#;^2~A3Afb<>\pN'UH~f m ppLXLɨ19C>IF}Q:iDQS:40żoê!?-}CߏK\ ]1k=ky]:B7ÊjD_q=̛[WyTQx ~$UlOxecR0ޔYJPdqnYTgڼH#3ʏp^kCm]&B =&.wv?#Q;~f:p*8ӳ.4e>֒;gXO}QPbEcE;.G("{ Fe9v=DUJqfˤRtduSRl[IRQt7U@>Gw*|Dh !ϕhlԔX[݁aGҘ##*Z+e{H<%CV!(~ÍzYe`NY@<}Rxڧ7thy Q)@.JGZ%69S*P⅜XVL9_VSjlZRݫ-uV_*BR=[]X egn @/A[W/GP='h"aSʢZm- w #l8gYZ_Ie2֠sGTQ.T9"?Mysj!(z4? :ݍRuRqI͊ecc$ddfmd'A4*moCOSKR3grK݉PAK7 Ǖ sߡTYIz ^]r Qm78\Q'?n؉]J?c׉آC2/x11|H;LFb p4xs]n^F Ⱥ}ݻ.WxCCh2h+-*6# d2m&`Hm ,8*dY9_u K?{Y[p62Y1~)r|"'v>nLlFɎU2} HSQ\l}z(5j "/(]B 6HjN$|nbl]W.Z_>Jl|2gUޜ]H߱U _ GMmt0PbabxS3r%tmpg 8& `017ee-y$~7&U*."IЀ G\ pwBOQDª03Smʀx$V=r6pqJsnm@S/TLj% owl]U^&Dh=KeЯZySVr}m7fU5)]Њ7t`? kT1F`kpJ unlB>S WVC,7,u_>;?-4q׆K(+4 ˂&#vpWEn2N H[ZVWM11|0 @vݑxv OjvfM*zrcgU;T4DS8M/\GŚk66DsXj$e(8P!(XBF W'g\CwkF0 ~bFXlv;P[D&8>!*RI3&m(NejorɎYk{ɞ_qEC4$" 4$iQOѳUZT<6vi~;K, 3"ýq/U|_N4kwR=R:"zCǍ +n 8^/R80k$aIF7NQ5O;B^3 ۤ^ŰL7Z1>ܿ~:55NgꧽPhfvi:{3lDt^KeƩ "5;(a̍@ŗmtY*_XJ˒#Yy`@2#>#9m t6L/7xdM*9 U"am`[}P_~,{sRHŗR㙽|Ez";ϫ)￸F9LsN[ lE*{4|/}yZ|$J`Cү H֧,!nOU+ n1’'׾!*W}@ ٷIZx"ɫmEU.(ZBe㋶QQf""NfaUR0pXR+N U{z)}._K*|Fs6(Ѕr%g CUΒS5[}qB2끑2o2h]d+}[}Q K$N fJC[P7|>fdm&xmgMKc(uYcE_aqU :&FxI1czm?g@LKhL4,| X64sh@E "a h""^,QԆRkLݰbU 8'ap>@S-AXE9$  ڹ8'Bz5S"]ofrȪjK DQӭ#ْcP?IS d3A|ֶg, FڙK7'O$OCL5dQHчLj۫S9܂")UZ2[$LҊ" VuVsњ㦥,?^4ڪ%@q5&m;HY$""V^1%jE{ퟎU@x`TҼmuJsХeT)6\ĶsI tz블jQuV\>vC#v 1T(R4D$~\߂O~ld?!CbXQbpDҲ{K W)<7VVP=(-т!,*r".T]<+5 }HS0 \^c54n[hsXS‚=C|:ih;9-d %_]?l*YH5FRJ}b2 UX t$(Ms x!tY`kfNzFUU$,cU t`B@/tm_%3ո2UsS!/*mc%PkWId@)'mOoL#J0ϙ49Zu ?7J74#dLի ⬝)~\ƚ`!^ˡt2)n2OIĝr `~Pk;W K^{]V燜ðQ蠌%^6BNVgjBY$w֮x\ L,P# z)d1tNKQ,oR K*\.XE02 \S"cV[oU;`])gX~HciyO.!QWk9v}X]Fɠat/JB~gk@UgSbZJgUA2, &} ^'oF`G0]Yͭ9q5GZfp0dOLobhk6gTI*sڿ_ HZ2na3<ȇ4>JZ?5ᎇ-|Mu{)`#7dnŻ;tGi„IU姏X7Zi"#Βq^æƆzTzc(B5|td7!62[u2 ?bЪ>`Če+[PAy@Rn)M J,y$}g|EQI&h9F𙒗Fh-nP0éo<շ0ҒNIJw|"")nL'" Έ'H | -*B;;->GtcZɕV9U S!2ktVh(K1"܊&4m:XycJY1A7 קj{\^@MoG4Qo $=w hmؙ&ʨl)X&SU]`Ĕ0 nd smy%<\TcWݻ[Ya.O3{V:ڞZAv"Uƭmog r:d_O8~ Kp*BO]By8ӆ8ߣY+/ߞB,:8K' 5ko5J#8q< .PMoJ զT_˓TmRzv҄Iq-wcYZn_čMU?[SJmƏM#p")GR Xp~DeHsDž93gϯi !q ]vw$ _2M&#ƉuaAm/w;[fAFXjWB/ov3eKgA3]uѿX3b2XggXQf]ӣ `m/b,&L42ұa!$B EZO^ٗ{q~؊qЭvPscð彳q6j& VÅZ]#!vHz[:Ky-0ǒŜj+J}\>ֳI\&Bɏ-%F͆%X !,c{8p|Y5/7[_phfBkNw )pI$&ʯbP($g`D"֝@KA<|zY\:%`JͺV l[MgYƈoXu|ր]%u˪uT[[l7de,WWx65[HᎢ&^\>U'nǙN6/(@63$ec\o=hz,uEDUqJ3Y<̗cHE?ݫ"Ho ~c>ade< ٕ;gA㮏A1g^Y]41[ͫшǽܬΦ6u2l]0L GAUGaN 8"5toVU|{/VY|LP@u*G\e/@o0xqv|mEHl L 3HK2"'L1z_Id'z[Q!=3*Prw͵ HЮ˵zpM}DY#b881@VJb0{ǑJlD`zsrqm7 Ġ*ΦovjV87yC,kb8'dg:"pؿ6jƎlЁ6ShMeG N/Sx%0I8K7J կ; v N#UgSmЮqҔ!kX-0 &ma1 &5[EZC(}Ԣk=1\{*_在Qؔϭ!!*9P+#CDqMS3PLN(" *pS`Ş^1T?d9? d(FNOL[0i#|۳=( WHv6Vq=1 `RdG^CoXb &F 1pXƱWN0)r~(29)DxryP S Z6_! b/^Q86l#`ASlё KZO*d5&^pVQĤmXO􎣂q)E=Rq1id6~"[@5o W|! N&~ 24kebr6|i7>M}#!+Nي-itbLN5@_.mx@@Ern5yPB8i('"Y3?x"$)\݈*%>!a3 9[{xA"fS^XQ@;9"tGy⺲ Ut ?*fF8uHK%gV'͇=3EC *\Uj&a j@yE8*r^&-/pd?UpRH7sK}2. }A\xRxUn$Sؼ<@t˞qByGi#0D^I1=7VyɎ]2/kƺX2N{h0Lvd,~68=F4 p5e`Īs&Ht6rr u7F%en'RL'2 6~b@U[. FZGX&ũW@|Nf,i=HN\xF*hw^WhTqc^gb:usDZ^4o`@rVKآ(zIM8LV0&Ja@S)h}4-Vm*oSt6mD].v>JSۆUoOQ(|f邩Jd]]@bq1{X3ed)f?.(R$@4"Ǿ,[؎\Zzs[&mYn#Ȟ1>IYCwtAh!k׌Z5Էh YI/PѥV-%^F*NPhۜR}R%GaV'२Xb 6V Xd:FD8Hke֙V]rAN˫غqt 䰑$jͧ r#}ahLU.-꼘B!{U_QYAQM]>|bޓ dz`h3T`a9Hn41E/螭UCPs=%Jk޳ vtM6 @{,ȷӭчAfq KRdlB3ّ9PTʰh_xz~d u)'M9e-ɑtQwg'R9k ˹l(xbYٮk$ ?̍:fu[n;$8"ËPT*yU3\֖__Wo hg!jj8XpH_͏k=FAͳPO ,rty{ Je5ik abU+Kh@7 jwkK>l_q+|mlcf>Lt:<wHZy6p&T `< % Mzh!0}pk}ȓ2Q97a۵p`lrz,%DqLMDxN2թ&%mI?uk0 Q-E<"ivk}(j]ZgٻHV:&a,%'sy+Me hOw^b0T z{d,UjjfC~) Y_MX;(F˴ֈxÇذx2\D{+&xlT r6 ZO\cjhyd]h u4Ohw)yK6Ɣ}XܬAJ֍ʽ>f;.>])A[ SA~f<"j] c>Uz`:5\o (vSE,u3RaCl/2lIy MYaHA 2_icuEY?',K0p~)k5(EYkAq-~ْ@@%J7|x+n}2:$ Y.c3G~8znwyC~SU"* $C"67vц,\i"0ICe=%ХNsBkW (-]x;B2Ly7ZH8ʮ+gJоHxs;{48ا6긮trҷOhz O˧/;nS6*?S\YC(u@F]^.&CP3*}:L9X9mQUiY 0@=;%OV\~ /9PIz;}ڇyk8+JY$ow1?" 4tw}I0"7/Kz>%N}=sۂ#eң3Ե5rA+8 K4<WrOğyװ~-lCz( c,O>k:͸ri-vc@\Z*0ʢ20% H喼@OZI^)WMsq’p*w9r7*,621{ ǗJH&7hͱ6e0Q(_38gd%QIy{{Gܥk-=(oN]Bذ_n34Xo 5ly2gP݉'lА̦"L/%WꏂHAh ޽vdWx'f$IjlrRym818kЕJ_|. *o S)`QOx.EihdiAma"i,ӎHʧ# +^e*y*jX  UmX$*mcP[0} xj*$Y1LGD)W, ⶺ9@yR lpc}*[rSLtN2$ Hrwr?rL#bO;:1lg1A 9( W`e}CPKWgѸyPATp7`N2\?.RW og8~d(tq{3v5|^q$Ibd ` 2\W.fUO=s@,u0rlc죯 'WS+B/M݁jRiq])\ǠK- LWwDsdOl}A!%9WL|I1`h·*ϪMET,nvUdBY+gsZk&^sp.B{S~*~O{kŅ?XY7!+#^5wER@gi<ۤ-piCc<B,jN֠N@OiYV;0bE q1.o4CmLR{xπjTd#@K|jN~>8نviRyV "7W:::H J `aF=&I-<PN(lybWpYO,cqMm>yYEO'! ;_kIM{_Pv"3E_α9!P%קs0' TY"¶Du[|r?^M9u cmd=rMؠbQ[cEWR>|̂`c?JF"r:YI! )dat>2;0XBtTcRW~,*< < )!}?!@~^ JA3vߛB\.&@o/ Kݪw߲EmZe$3Yuȥ2"Qed{%$O0fXKPeH YfWfj+:':T1vƬ ˠh9raQDz3?n`'gr+{Qn@Kmz8 nL/c yv&zBs5?{͛F?+$rSf6<_y$u߱&̪`c5*|B 7RwYG|"AbDTғ4Sax )1 29W*ETz0*ĻD]`iODlg=5PZv\g'nJLߑkR.EO$qKJ GZf<"ʓ ^NHU^M 8)HkIzK\Ð]O%DNÆeu]DDK eJ""Pf{Jo=5,09 Jm,<^\omx$Ehf87"tqcڗߖ<Bu{Nsfp}-A&6Jˆ_F5#+NtbIMf1uSDكX9=tCl^p4Kì YF]o4ՐVxZX_0;.e^3]49Z}HHNJy:V6ul9+~!e:͍\/YD.8>رE*()rxg4>u"˪*k<̅TBv[Byc6t-+A9ikm3?C{OGԥoUY mz2zsκ8@(]=rʔTu]øշ,[!]B ߪIem/tl~/1/l!ReH02c2>&yfyg+:AD aw W, DVC(ͣTFt_n㪐-AZ 2 V 6G:v h˰%ؤkؤk_LOc͡Ztsz C2<֮2*RV YsoҿR݃Ndt@A2m}h&Ռc, e)̾s {rX1``nFq^W߿]ňYz BBL+h' P298ƃC,Dّ=u_YG<~.Mƿ9Nے$ 6EIL^TOuDxV08ҌE)f¡rsB,h$]y>@nYA6b_l߷ݨh1T'wU~7ҟa:^ƍGͶ/S9۳TJl9:ơ~MA ף?0Lޞ~\LJ÷0Snx@Uo'|$D:RFo =_-s0'_a gwgsI((xO7d2G*4 өb.RXX/2ڢTPh8z!;.($xC7߃2W4>;[3$I="wyPV{t`sD*w_J7)SKZٹ5ȏ[_3eח Tb_>kBg`;X5I#0k9n⌟uiAߒ4$:S6+#| ^ V9hX~~[#pkر]+Š4W[V>{oՊċ[0{AvFqOaBz~ L%hH36vȨl1yN;7#0qNLk(ns9 ^^GgV琅YwťMBTRK25Xd,kG *I6T [mG%KLvO>ڀm)L=^Ƈj]諞 ,Gi@/G,;H=0_Njx".>D㍨a|,\nNG_oЁvz$Da;&z~q b6(Z(Q?q4L֕z.'Oӥ= Gʯ#LuFj "=d[SHAdQپտUZj1z~뙥҈)~tC[)WhLN Kq=d@9Qf M.h~b6_|VgU> ńUxw;{u [0)kҖ+,5i JMp?`H B"X89u羬7g#ˬ(R~46A0[Q+uT7PyVC x'vI1p~ d40%p)$9AkcBw-iNe.r@6(Lvbe؀x'U~H (ӇQQf =0Fnm3_gFӆ>}Ks<3ڑ.#j~dP;]ߐ\S؏ƘbJ)-7)wT2"@l!j/}3|Qz:{)U]nj>i5i_w[Pinl iL|Xh~+V۩Q7k%ɭǬo4Ÿ-$KcewwҘ|:5~ས@u|Ƭ/_d-B05ta!E25v&|k+% V{6r`x0W9c#p~~{oN)`\A}͘'*9ʇVJ~2uRylp3iZ51MzA>=#7<܃pJN-6+dAgVͰ;=l"*է"pevbE@,yϛ C#>3[ >}zvm+phLKŅ$I'YnZ: ,J{>15r~{dߑÁd%\]Ur+[PBuEe?חE y1p75o>TmҺ{1 .Keԧþx uMǑjzD H{b=:.}0QhkT8 (KݝAb7i%zyEE`exBbўLKaB饯UlC=c@s5 }b;A骒"ٍKDo—#`_t~G*l1V4t ea,aIb xJnHyYNўlfN"P`K"~R4JU,tщR!!ZKqg͒/QUuH-yp>~6ᲶTT^^^YwU^oH+v0!/.GySUIFƠP더lQ)z;-{Sb = #|}-lkO a'1R)NL1B =;S+|>|ALR)8o7,5ǂ(]wh ۖ"(Nu,cw~_axt C - uaik!gt-3OF#{(zy9|[KIN"5o#9E\'k T0m.}f5SW!D:Qڨƹ6v\|qPv/6N6oP _R?P9vꨛGi ͭ%뱺tvAEFMj:͒T2~#@m)$>T>or:@(( Hlݣc !mN5k+4JmS#h,W <=q˻5F+;!*+gT{&MAֹ݆P?ГRi-ziHI0寃"mη^4/|@7w׍!,[6CN#gbus_k2R}Д D~&ڷ>f:7?Vc޷$r'jw:A:8~9W,4'9 5[Ӑq_I>ϜLTs`ս^~=գ9Q'!X"Kcձ}Y4u>!N =kK7 żsC#:3 ~ɱhuTMzC_`ɜԀFriK?-!s$)̲B\le(||L!#Q+'ީ0\% YIX] |ճ@ƪ%H ޿;I8sJ}4+PCߣ43N*@+qw ֨zzoџZDW(#>BOiQJ|'u@7Ŭlܞ n)z߂ϱ 'xP \k&Dzh*Ea:c;_ҷ9nI*X[.;:2TNޜBzjͣGwt9BDAA5g N~k i]}MT!aѴx&wSȜ^cIbJ@}ɵ&."`W:' \4@lD17)d;3 ~!8Fwtp pЛ&Vsk%FSf I)ƒ%jRr %0/Po_f=HHjqB`P2<񟮦r( <{ I9O |pU6jZ#`WLu^pQKT$\??_rA37H欞,e2:5jxݍB*?|NuH02Op[m0 A!._,91CˉP- .Ez;hRU_ (UI(592ZDeOBazb7{w_Fi @Und1:$ޭ4NI (׃OT}O|ܰ}X*MB]+gs xgcEt&i9["7ǀ%y`'EZ73rGb??AEmbn 17N2<&|:PBo$ʺ~TtDkHopFLvV*2kCmքtz(BMŏw[ShMy)0\Pg ~@!řL|ؖ7v.|+ڿ\St /g|p1a[\eLʌ)$Xt::ND3zf9 h΂ xb3MZmZ^n:eɳkE=ʊo&PB7]%NԬ9R~= u7P/Bd>Խ\CME8 kBvg~o}a[42W$|ipr&m,zV _crzQFv"UϺb3SVry3gxs=;#Ոh5/4,u Pl[$\$Ǯ+i^ĵtX`ZY!/ "7CIE&F~(dI.V>p!ͺŶWes5*g_}n}ly&ϮGfNIM_&XjZvL˚Y1V\ Qrqp j j_F t\׍!FGY[_/yL|jpq^M)C@.*#28_|<YB~8Yw~n" ;؈]Wecѫ/iSPH9vҀ*K $vsJm'4 Ʋ%,ryq9jJ8J.'M_cF5; 7E+5˞1L32Q%eldr#:LES\t8/?R2 ׼C[.] jvZ:~c* )м5hQW<[SThCHȗXOߌ&& s1eDQ}.'9 8˲^q5$Y-m!wi:P'2 b딩)u90 (KH7nVFL OIр6Y,|Ѵd i+QXjKX.o)1>U5N #Ј.pH4@:O/N= \ХEJ^X@z܎&f܌5iz:ga{:S#WbBnw!9{'p *Sw:ކEYw#yVz)CXXD킩hi(Rf7MI@'F,;&B͢kY| N6s$8&ɴ{. G:̗g){;2hq<}~ˤ{"wm% +`x^N4W$g h/aIngr#|;VA2*NS.G˷<57*&([ސk&.շS8G\#5\7ŠCuP;Xi,Q[& HȜAJC|=OUcXQ='&+F2B5Y *KFфpa֓IC66d.PTQN2T /̓Ԃlq YxkiVug$ WΠ<︞V8_9)%򅓍:zU.7|u oAɱ'1M\Z꘯7BvVm,=:?Q.5mQ]pQ*sstE!>^ɮv*8'B d/ݩL[r ߧ+ *2Mhu3a )s^swU Ǒz稃fR3ZfO;DD;a?t>+)4XD8 Y9SD[h캉P陇`<&;_[L@l0Ѯ P#8b="@^m%gL5i1!.)=G53OPLe޸X0(&< NGJשgq ,o&>9J [RqI]̧bH~ R$fP$&׀Id*qRY7C qo,Zbܹuԡsx{k{Ł2(|_)AUtn57} T'*aF&\dzIJU,!Lf;=!pz0dm"a1n$?~Ja[h jhR :˅mM'O'y U(1{%:TًdKϛ HUC^7c* r w} 5i, g%8""ƞ͊TUQx2iL7a$VIގe̠&*/вe&)oX1EnV"h3qị=E Tmu~ h(҉N:mX|h=~Oӡ*Vڐv9[Aye+܀$o};B2n.U$>`y$uN\m\4W֗xi>HnJ:GON ?| A-ρ5I7*iNAh2Prs禔ꇼ\N>$1*-&ȨfͽkF4ON p&cS8rC=:Yz9ejPAxա5{}uxiĪ]$IUtH9?M B`~%Q XK_WZ;(s٨,Px/R;#5Ȁ:h|8Nsa qy(6PMuk!ɮ`Տg^zn䅙wӂqRmD![ rѸMيBukNoAT0%P>2Sg<<7L+ ¿A}U*gCw,Slےtǃ_mF_}Gg/j&3샀{:U>\V(_pB5ɇzg !r!5£6 rGghsNzꩮ*d1.>J[m<# uTa';Gؽ{w8nQmLWWٮv& Exe[DžoeFg|lիv/T[tNU4G{p^7{õ|纃V^w a N].kܦiv3lU dru[ SbM17?AӘg5aYsxb)B{OmCiW RZvP &lp[Aueqh7Lж:}iǕfVt7mEQGeG!+k瑍U1qN`t#Q`y<ŽzA!u)e52N%Dx c{Ӫ8l]f|HlpZz1/E*cy&gjAB̓BY|;< ZOzDHAQzO# l 9g|5p_1YǥPzQRj^%Οt|lAtYclRl˃w5f?')׫6ه +zQ{)N,`HI0Q_mI,Ҡ/P5VyοϼlMͼӄ)?h~)5p@HWNu)z?Fئ-KcG[Ns{Q|ׯEK~ڥy=O,$<׺|aBR!U*2] R'6^A ] E/ץD˖1uu^v"v~?eϬEAׂY9s3<{T@Jlp"FiޙWE#D67k,ޘP;$EXxeiBW>z0C#nu.Ť %M>hx Wc;hJGW:auJ.㝏i@>T0ʤ:ԡth3dz~ɨDWU <$WzY7ot]bR}O٬‘endJd,XgA:FkzW_c;[=4#9!j@z6z%ƏK-bߪ0A3{/(6a}̀.\-s}-cb1lUҰrJ o-NrlQyw36cUnF.W%.5N)7Pp"5,?n&<,W$#~pB= ʫ@ȕP'x2܁̀Hړ(pwRn[O }/d,}Wy u߻DJ]W6R)( 4>gej"! N8Dsx,Id@ݑtTaܦ]CIO86*? ohڍqvzm|v3+㓅燫.m.W >l)kɘ3 [t`~\}Ļ9 x~aIu[Zli/!_ޣ`E](2=oaFC}[I|XAQ }ͣ@ &r:[c9u * zѸ}  a BEp軡Z5&%ǔ%jn)&|53|X<d!rZV~U+J |@}/V,Xla~אy$ 9EɈ b ? BC nҘϹ*! uV\]]KWQnrQv4Gkx>|AqiU77(Pb2,}C-q8 )=qE$;jRKͭYX<ԇoz"p:&#,gI ʊ#y]Q]| "~4ws-SқI]3Ђt_Kx?J hTΊm.f*t"Xrv@dk{W|쮫E*  tS=4]拴)I'R݃PzjP&x"8x!G0Kwo{0S!22 i[(Lm"dpck7v>8ܺ/1RL'DOeN5Au#3~pN~=TXzu>YVRA׷E^¥gIm˄}GO]Buiy0/sǿLTiSs/pw N媌,PRl(Pԝi/%;W`(}DbxP,`8dUxڬf%Л/\Ϝ~>xV$\<\o 6vp֔^&=܁k]t+-{צZ5 vG rc bP Em}8K{ Z":Fe{Lnа1n*_"CF x3q4w%Q)Db]Y9UҔa6?)UUfB=Pi9bF\cegEk |Nܥ/Es:ѾoQyu|sj({*(Po 䘺 Wx-ȿ2А\|}.x 'T p-حsD7Q&Hi̗=.W}@Kg)9ȣ1mHx=Kvfj?[t jByǺ}'e;pwq""cOk*y iY :95% p,?,h9Ci9EX\WX{޹iӱa,[RwBqr $f] }M S>T9֮+j/#'l&FIJdɸcI?lWHv"],}W@j z7S֮>*@^'Z.CrE{o6ˆ:e+ԭ\z[Pcc8:#73:>-g.-p,mS@P!1Q ֏svyg.2}ޞ3+"$p; !aK|Βg,u|'{U4!Dx #HMrfpKإN\gG_i3h)nwva~>IrG"GpL@1@ d-tL?pg9\:  V⏏9IFKcsN dS` IKC9zH(:浘_Y{|G;x"E`|zz3s4z_t!N $P=s,4ijw_*c.`i>\^H.נkᜡ;2DC"<m̾I1 33\btk9X9臌ͧ/i-!ayw?MɊZ.fhig(Kwps oePm'<'oS/(KKdzSmN.'"s1|a 1;[FgւlEL|j\{'צXewC i8ij|1)@RҜIZQ-vŸAG @2|R=}gC<f~_ln$Kuɳ7BS_Ś Ǝl.54QIfģH,ⳅ%pE'zUG ɃOG&(?b̛'#ڧ}pnxeKAz9v+$$i$֤d !kЏdeQ}F(S@ k>e G$&WAAā|2CpJy}-.x5}: (HAx ;⃐UZ {b=[؍&@QoO"ʿՇdPFTҶ*k1>AWӉ82;J.y'#qZd+dɡg(&^t}\lGsb3tre58B=iWPMwZUqmQJ K[.̽G{:{rX]"065Qx)q޲6;]q؋[4Wn/K\7` A?LbnW?[NQ55lI FYA$EnFՐ):> P'{ɮЫ7*Jy@͊Y|l# 9y7N,DAⷚJФWo9FM(^`|kkw]WԻ~ޯe q\v!z@(xoJ8W+K Jc:W="\2L!YkWϣ>Rj{ G]FKWA{xZmt-izVXEPCg8dX 8n9.vPX!鏔6uN'>TW*J^5SQi3jȩÔ'ح6+sl/ HL{18ˇ~N7`ͳLخ}6V359sjT-!RPDoHqH`'CLҲe"s HeX'6XvRTl=$gsJgj*WPvrdG5l}Wj~%ȱ,2+osQD{ڑ/,V^Sã>[zYpA0TR{|<#}חC_~E - Jlnz N] E"nhpVJ 0`')u5TU1(WdE z6)|7I;&*/P yy EWTbiw[͚H|3u \lԋ]jJ`R+hGԪ;6Qd33$lc6PkcE!`蠼Y]鶊R!ZF($ˋH: D >-VSh9@ij k=U*Qx}UںI\]m&FyIw u} cc1_/⊡ecc8 qY!pI0ĺJFu2uPRC[of:2j9bэa W@h#Wk^y4(k]If_[acWq$9zkq) 'ݾH;)3e2oXq 449 r . ɲz+X8O|s̀M>}66^H|3w䞍]ᑢuPmD __mu]vuGl ϲ `:z*Fq[w$@4wV8ŧ?zP{LDyv+CFw^a|КƉ(~ik $siX+n.mCR^Tz&µy㺘Hr8~:=X:J-0.%s% /~Eg&UvZkEgd\{It7XOHIV-韋+Ol Sz9k?9SV~YiU}VT<Ɠ)LiT ԟv`?B|nEOfh'1UW+\`yW!YwA&DqCp"Ì\Us+TшMbNMAلIEM57 ´={6wZCI^jnd]7itY#C'nHd)J:{ *^*aլ:/dIs =+uI\* FA'cQ;itaXuXrJ* :DˑO,#~}/aVOhwS"b12B` #N(SԒLiɉ{J&4Ћsv%L@~@/T924=p(bLsrmG)k`kg'E)M]WdRNknW GMMkֳ!S7Jh٦dKq8.cև@ CLp3C~BMoQIwq! a{b.mӢ)lyts"=WQ//0X!G-a55*Gd+|0;\,fT{ J1 }b)# %Ӿ.+-yt cGHYof2!c`~8% _1H{ ՑAORJZ/ϗ^і+[4xry>0{3c(26Sbz?Ҷ$lS0$)vJ\݅hab҂,Hc+.#x;&UV jz8hiB;tb[7)Co`lRiנ9 r xVy1#p ]zJ$/BH[8rbvl*@@< rs41Fn`B{=9 fd0WsQ2 zb:AuoT(&i"Hml>'PcmS;}XYbZKMo fWSfZH-Jh'B2 Yx7]%xO_%Y{NSgS26΍݉)xުYQ?S.([z.?ArZODW V<ǘ?bբ]lu@%7[_g*yUxGjR]x45sLV;I3gV1u旿kx8S8η')t`D6}IUZȉUr8Hb|QO +.8eV`g9,knO{z&z_@RD%>YwEX/etiϐhf'Q)eףMb` ȑ%ݶ=XKo̥7JhjM+NQ|(ܵe ::THqjᄊ:!mOJkc+&/ˮ!c>ZBkIۑ8*@bvU0ʡg Sh%P%i_k749L(Oږ0:"X?(iѝr.7SXyi" OJڥ9q[4nGQ$,:z=8(~;ϮZE5P64|Nyt[.{Na%4lôV^jz9$ZKrBo\p(!V7,*幬jRȧPʥfμ;b#RwJ ۲;XšUJw=q@27헃i8|Ђ~.~cb ~#T3s#$h?O3A_iׄ]T^'9E2O" w{+iMK8MCZe}e}DC}_-/ꚨZKi}9怂%I|(.q4%PK|m{7k:OAzY-P`B] '_Z-h41=FPݺ\O[|J݀S?s Dyd 9&um }(ʒn3 ښ! 6wQFcDZa!h i+${lW.L8dǰDA VЦY82&p*J;ԨnНJfv:B5uU=Κ]R  |Z=<.SPTE0%HlNH2E+|VkI">&Sfi2#ԀAf'ZO1rg8%lFD x$:K:9ԁu nyDC@!rhTC:4&ju}aNkt$l'qo쟼>ƛ"h85_x+ldR3S'%cjk^,8tר >n=K FFg`X&Y L?VJy?<ʠ [ZlZLJˍ&! ҰVEsWkD𸊍JLĻr8Tjʻ5TFs A^G nF"Xb;n HkҷĞ/&sTbF^\X܀ {}Qħ@7nK/о d_-ēa Ro?62K;m-yjHh2>1(݋K|]ťdYqO$`奄Ǿ dGNvk`I:ig}M3ަ$qyI,FBȜ8h[cFO}וn3|F<$?*kq? rI2C_?c9%\"zÕ?h_ݼ{|cnhqPCBg4R/]cGnģ_PFOJfv)0t'R5lR4y[N"vا)SU5iWeWe1KL IUťoma=ED^7%<5k(bn>RwUŹjX%sڸRj~30AqkgQZ`됏8=֏, /TWw!? w{/ wvB "nHZh`cf5ubH-Әh,tRG `@o@9Gt ^ie\Z ԇ)eW$3=zhDw\|*9ZdppkKSW"Q"Y#xcj1(bݹ_.ᦟ5txArh~O<'3*nYYE͍CTm˧#8NdN18N?Iסט;:۟V}k rY&UPdIg@6@6}mFAi^6IN?LIsB!F|?vw]Pv:;16Pk)$ 9@Ca|r*b,v3+!A:P pEP|g֐ZaDL;iWwoǼ-x~tBjD@MfԵ|`:Ld. W,:DL@)qZrf87yMr&ҏʬH*)/ #70 DJTPpPvU ki`3i[ܩEs5#gf&'Fɭ*=1+gt댓S-OoMu}@rtZr#As8πQ /c3X#6tanZg5ÿN2ĤNq.4 .ٵ.W);ּ6=],Y>ODZ NTk1Z+ijJ \q *:|ѕD`b们g.HL x ~=;#|SQX|גmJ'хqPmKB ik#Ưxn (.}'_L~XO+\=iYp(\ChӬ֝c4soO"M.[n33V x[K '},4MqdWP|d]uv vw'{b5rυ g\Z3~Kaú]$7z\> }`CJH N;Tmn:;KOQ\8?՞pD&3 #(;$]}+3,P:A'u%%ǟ^ky|VY.]I2z3zRbBwZP8cɭH([qң\I!9 ravK 7"٥T;S"WH*=6'ɱ%+peE9`06Ө3<o:mnf<E6\WW\8#ծ%SFHh 'eXN\ۻFz`~_ϻ8e)Mc;L`C,K9U{^ZRYJ fsK|Nqd(F"lMB^?`7!}F`A|1xO ~QEJbtBiҗ8b:q2,S0g: [N^;r`D1=t>O_=]¢j9𒝡o 8 @XidIѵDт{% V{j>eH"MGͮ&VH1AD]QO@X ]2̗ٮ&TI*A#Iu_Wu~63idB|e&iS|+ʗۿo[q]_9Q l/?I*6w3̺:;GaH[!~>?Mr ! z;Ͷ@{ X0)R+Diȥ}mqPNLQ;-87<'*E ۔=NjS,WUq[('C=%ƅ]2* Uc9iOBcpPNq'=|dTk={U0  i\*C5HsD,0pF}#ɐuCRu72q։DLOj,]`>%ZEzyč)t޵TEa3׭١VTD|)>ů!c }֕h97S'\kM"މ-Dxʘ p&&y?2n6ٶ@kUQelHևp؃Mg ;ŠkN"){s~E!qFtgE&n`g~WjzIg4/ߩ@0⸵p^): ;zuAS˵ />{ɉ^R{ QzCMGz~5cΰŎ)z߽O2[3\mܻtC hIcϪ=MZ?``W$5 T+uwM?i@H sOI懂-ƪYidE^u!D(^?6uy rC \zAӞ rSclh ~mҗHɡbIjl%z91bB%4xA?-l$ߨ;<2h|EF2gΫ[O\bhהmC qqgM֖w>fdsFd~;r؉48O~Fĭ\ݟ)~HJptlW@H/:[]ݔ^+Id.^y,J\&4 *N! V'UD|kGЕ$M:%ђt$)Kߴޘ"?zX@eݾgC@ߒH#h-D\w0xȫZթر}xp7\\6'C *`P9n31%q:!JS3 Zσ*^2eFW@:9A?$ͳv6آYpEI [ tţ(-j=rScNтi+d=Uq?IծBMA_d}8](HA@9ȗ@&P@UU)eyBpXY UҁO#XZ{uÓ_ߪ5Rvb4'i%P}|qV`ǎ@O}NmF[ xcoxGV}6 {7- YlR'hv<@3xN `ʼn҈h;5$,ц&C-7dN6Gٟ#JaMB"Qi53'! d|Mn@H(Rܘ::7W>ΜZ'CEυpfr6tyNj1*X-vϫhz%@(jHT;Hz#`}ԑm?prZ9ߩbu @<VՋqp ke&[`#Oa | {Qi 6+YG2G D{"L3KIQgs .z6߄.*ߓX.cg@[ycV2Km$fzNn}W|J ACC"`Ӈ_`G\t΁/NܧKZU+G'0/Ed;8`YWu4~5lF0P󝺻KlYpRUjts`ʇURsTȮAkXZǜ8@@A Y]}Y>%+F^ޑ{/A>"lGI'SXf7~La^,"qo¹DNseZw#T T7CF*Yl[+a|mo/Q*v@6bAmK&8JSy .vK|  úExvoј6̜w 9aEda4x䠿v<[Ct3<6,g\pH>GdmV Gt(Dҗ5SR ӽ91п͍\jyNp>EbN'Tp9<9d5vUDnJ@gM)J1 [ϒ0$f7ĉ”EVzo=DT& NqGm&g63lNivCd&RKcD.NTh7<)9ƑB41Ηq1Yink_99oِ-:0WTɰ&3t)FO: [' Q?@戗rf?ϵ928Vyðޡb9Xx G@!8GQ 1WjE9RAE TpFJ6[MF[I(LQ\ϛ; #J SWyz[<\w46sı_`}Аhxhoz9%.Y_'\~$&2دgjpKRLRĭT+M,?SڷR؁ Fb.݌2m9*V wzY$Ab&fiJ3anו/ 4OU[@ G$~1""hOkCp9~=E~WOX@L.֏YJ;Q'b,w`xm6``3,v zVڶS(6jJEyV{SF=t y]n? $]9Zã"-S:/Ȝ|w1-=}WsT} !@Hu8T覴jW1^\"w7rC=+x'zziAW6yC{",+(LQ0G'xi)BٸXi&Y꜌@*3^}k{oQR|%w-30z\Yyֱϧ+ JMx-{ٞJ@,x{ҽwk5_+гX4eP4H>AZ4c _8 3=8;͙@J嚻xIuca|(- 0 #z޺}WmQ)AxyG̉hάSH|{9nd,:0x8O(W1e3=7<6fZC >hs#4P 'I4_CT çbtD '098}Q*U%Noe|E{1;"*k(?s#<Xކ5AHna"o!3a`y|OT6)`\aFE2a%'NdXZ!rA)-Lz C@:5DpJ*{WR0͐ ż(1E^N>m}T.Fb0E fםZhO_&.- Hͻ%1_[4-eκ,+=8 H$LW~@LuEr\yC37fH ,JX{k_CLΑSJsʲ]~ImUfJ-[Cá qtZ kGT\$r3߻~ְNڒElSAkd42,s$ʅ Dqłe)1>Q'`[k@s?w~`%dKҊFD}aQ( kFBQTuuX ܊﵌Uk6H--D5TpƑ8[څ.P'54m_@ SojT͇I#y㊾)1Pygܣ:oTRd]# uv A&`Qg>eYXfSZ oC< [` zJH(ۅ0ۖsڤ?x%Bמ?b'ܓ~~*ɓq^g;_5t]Zo$%PFgbpQo|3 <ݘc4^ULҙ3dc1/ PJNHPt:प 0|KRܦ.$gzѤщM70%x>bPS sD& U{+w9%ړ a rJEϼl]'f=1n+t  U\%v̌$;Z ̒&嶮n5Hr+}6&g6UMe{&VQy0b|x *I|MLWM/eFQiĔoz\$df4SD!<0OE<^+RB[7kg? qK'dX <:̃A\yux4p) k;(n:p~7H+!H'$x]v<{-h{y+ _䤠3vq"oK1<nc[sf:i=~C4YBLs>we|Q7Cy u;iLgRsS)xyo8:7HIvʤsm!d9bmhJqΔd(J&(up,kǤ,P6bs4ҞkKve@ҏnMO`uqx9} =|McJ 4HچҬ?U*~wكȺ+om'3[*ΫL=qz/&@2 Rs b]KB5hUH64Mڮs ΰ|_-KwS t6M eE1zCݷ$kqT߮spn(?ӥ_Kĺ$.wZZBu XlANs$e:8%fYj183LiwװX+jBEJl>ݰSvtG$iiMֺg,(i}~?zBöJ oRA uEP7ٵyOGӥ;h ?[" Ǿ O };zlS_x֡.i@f{Ν9HE=o>9*5C}hJB&hxf;Ã>)uAusb>Y5+:\Kbp{ -+˲#V_@ěӿ9FY $eъ1$$ȋK @`qdty蛳ͦwUJT\7JnSo4=Y<GܮN7?MǥRpOUKegIm:[^"NoN~ӧAj0ʯ݄'yH;^ɡaLS2FD?+*>[d%We']]4La9_.5pJΨV*uh1 BZ |"40ua|2cAGqBU5 |VO>k"a3Uף̑à5!$- [Fz*=}7A5 hȁCUO|Žyʾ]2dlظ2 :@59"#l#2j.7c઱C"~6]nnŅ !٧;Z*6Oa /NqUV N<$t}JlGte;nj,ŕD.1f)5o#f2l#7Fg( rsy2 s|{HL/ó>l ,wp.\4ZC ]I$#-㤋8-o8y[%!4y\&B5hp4'9*xĮ[7Y.0KT-L$am+-'"㳲"BwY\]O7aUv ]GB ˋQ*HDa8_nIX//''T]PDNvuȨ{ ^Kk'JEOyb'ɇAvp(0UtXq`kco$ [b~اjW(_)tkG „G,?Zd( 4 ZsHSQ)*0 ȏ3(}={~l0 .{@nw6k8.pRU['M>eQc!kTOE{J "-Z%7GU,Ožx4e:k 3%a)9-}DZ5-:HNx`m| *n5s.!{9Ct%ORBa4@sOQ2-PG;YU!z-0Uz4s  4`UWi wxF&\^f@Nѽkw1.aqűA2P-Z1G31y3(u?RQ[e q/qRHV}̧Yzk!VQh8p$^"+&5e}Eq;| W)/\[ĔL eKTQΛc@ʩeWUih].l9@*0z pz߰L[KU]Jţmr>b0bj>a]Z(rð 3lp0"rr=g~M/J΄._gIn^Ӿsτ c+'i¾;x˶ZD%t 5L]~\m^륦p:z`1V}je`9HF&3]#8"MKQ[^SΖq2 pNE j窗a3 tx nk̢tff R+/7!/_R:& _=UTIoȥ9[iMrΆ5Ӎ2>bWۼ)ٴ X[LHN7)-g9`qik(+4\H$7nçy1,-zVwxaH8dB8^sLv^lYګ%OpcmyaA LSnO ,񔃟лtOX.xS]xgZ&x6id:/?UOg$do!+i|nx$!=1,坛IIQڊ"y/Oa*h@ފYLjh", Wdg_䛌d)K&wiNNÁ5; 9SU8$_h?BC;q8d,SfAl>f#{}0W5%ParK\KzۥDb2nrF'>MsQz󧼋IAC4azqx9 4bP3+NyK9)l<")n?@eb\~&֔T'jzfBoHtגɕQpx!6 M7Ҡ 0*&h\R81Ael!vgF;בr8uvoխfe|!8au|wTd 9?s#_{k^14GW3q,IħAܕ =5(˲Q˴azݵՎE8mm*1dQA?nh׷L?CIDMCmlۅ!jUc6n`&r)g(~Ys /A5:ȁ3oFϬxDC.VJy{$X]W4̂ٻH62c3 hMZl,8gf^v=.F<ލ<2[`>3KMVoŊS9 3@ $j 6C&&uş6h"rL-4ڮս㱞oO׮X7,]㯊iW@[AwQҡ]MH`"*G"xD,奶,Yv_踽υlIs)zd1IM~]CW81 %G,ߎtF.)1>< (r{!<N;!^^LQh+f/_(Bb&2قn'C#Ut"{2V-$N8qjSe}0zv1ȏc0KɾWekI~L#hA&ۧH}W(7%[wM"T?ZXssDƁI4GexQ:t!H%b* x0٘K ؒnҤIק2JUԈ}ضޑyCM QTk`LSJ2N]l1xJQBFRiN=ٹ19o Ec5pRbrJ Z2SlPa+G#>52Cëo3$S(f]2엵d'")A\AN̼QZ-Ea{3*AMl-53E_-WWA~xβ GUƦaNNGHóI @F-nuJ> -$s[jy!8]6K/C%~nR (>ƕ}ҥT@DFS:UȻ,z񈃪/6I:y.^DB}n>3n`sO{} 1-PFjȒ2Ra%O2N+fQ[Q׆E^lF6X k`3Vىl9(C D0lw#OJG27]rBH>Ox8(yr ic |t 9u|'i$FQ8hq8(_{v SG詓Fuo8/ͧZBQf[ts̡Ca[o=ZVvVgںg+cYdu}WoJp˱6fgUAy,*&7x6L16wGy Oםo3}ReK]+V߫@]u+O󢣰0eأGp|E0(vAQb@=dvXLjws1{͑jC\ ohXܙl_[[֦Fd$faZ"Sr=n͛6:0#tEψۆ\ fu wQsv>&j8ǦA{wiy}rN=(z(iPc JN.LKxS3UbbL3=+w޾MU ̯2Lf7 m7+W=.[SP FC::ǜ sdƊMj0썿 }א 3PnbiڜN#Rb-.OTlLF:09n/˕4K=| P՗ -6h^J^8%R6H4ؿH|92y.Q$#n(/?u_#|qGZ(pO1hS%w]tb.QoٱT% xrw10hW@FbW]xl_>gts8\u4}3E^['~ڝb.uE )<8 щ.n*^IBmTs• PAħ rfŸE#`e<  uqf/g ˃!^eh,c~BMp;8,xF]2V6>TT^z։8Em侪ͼ8Ywd,,{ dž(@͇| ܁ŏ( 1B/֐blv{SLk)5DGh0ֿV{鄊yv9MiEاCr6L,CgU(N{f(ە= p[UnI1 Ojܦ2U͸B(WO_ScX܉Gz7UlhX<ِ4rj `~77S@ j@v?G|'BvI!^rȎ?T#~ Oq$9 =O(0is6#߽v.:wHH+P;(Q4`$'a7Eo;h?5҃:Ģ"R+(Y9q@4NQ_ L}Uw+lxÅ굝Y,?/~>K!ؙl|$ɐ _40 ir$C{bVOc= h}oKd/5cCZvBfۻ[M;͆@YmMka>u:}pۺ}ic0TQHI p?%:mo';kڀ.%d:OJ~=}+E~AEgf 0TP8˹̕j|hw %@:<Iҁ&쎽&J)#6&5VYJNJ7h +#Uvd/*z$A+F62|^(3.bݚY˚J)yD]rIo*HҳIlʘ'.%~i'1S^K<%݋jJ0l gwsa4$@4K D,U(QJ!8øR•p V;<Xxcyn4 -{ݕP#k.H ¸iUʓ@N&ݯam#u Ff[񉕞׀#YfA>^!;2t"qtK}=m(X #袗4|x #M OĦFD(>6܋$X2X/j !e*ʶV'[b_ ,|=_c:j2H0]@Y0`N䠓9M$kD}$*t0ThUHE)u.c1 5Q/<pҗEΚ鮼 V.;fr8j1|wwy9~b 9 {EJٌ&Tet!6Z$oxuwQfٛ}bWpLЮ )taRKx`PvDlf4ٱ2Ӥט& *=/Y ,hx*lfX1Z.FF]Fŭ+>eh^p1 =[wͪkgXwEޒQHUK:QxrSvSKD,wK׭RUwiz|U\a EʘAŠA!?/8>BE<($~P2ǁ(s-?kr)×߁L9}d鑻e?jJ76E1pL|=%4*>ۦDXN[&11\`tpS=YX[[=p>n:oZq"hŌ ̀~*ZX b9e k- q/0`Ymu]uL~wwcqA@$)K+RW4 Z+[bjkyx2Ŭ;MB”&%e]L׵}E}ZHvWG˪t Pf!]Kn+!cӶ*8/"m`d[e qO( ]kڄ2Ÿ ۘ4SN+݃"c4(Dʺ`L rK={anIW`]u5X 7-QORU7_ Q觫_`rVLBt67/HiVMET8m(v`Ք[S>]aY۱.'S<@,`Z:^P=eay,G҇zP'C-r[3/6^3aCi4d$GJYY QWʓ 9 udKr0[JBEXKne ߰CL zY;Ժ#g"tcVG5"QB!5ϧbӀ=yt.,a^7lVxgs%L1muu[l8|j;"/\&5]NB"ꖵ;S09Mq}95N5[.:ⅷA]2ONj!<{rNΩt] MmJB srǍ`3ؿZG|Sۅ#zdYlf˜ļX X7̧DlٲIl;U1KGyҰ;[>m~ê5nհjrp?O @  Ga6w&#oк(U插QD&bY7I=>Xz{ G JRmX~U29,D\άt}>x, v2\2Z[@&MmM۩!j}yBn$_ZX/Sua+wٚcdΣP^+Sd)E2xWn{8Z&C|V\fw}8 !(q׷' 픇&Zbجۚd&4?,Z&I;JpcAF1ϬLQ>*OZjl"Э>^Mi9quspuٳ3S5'푳nM OW׭j%t;d|#TT +z+HNAk iy̛7=9yHԄWe%S .0'nZ>gK]X.iHm+4h AP 'liV|9sliqׁ_P80%uw|}m#&>(zrll`4]NJ%O7^Z7rߖN] ކ=-f41\ºo1R`ۥ8[|"O*ICߙ5jٺtervU0rulA{푄$鳩]PmS*>C(܃[O"\ ӂ;t٭;uģE`c ,=h6:4*^enk\V>5wͭUN\<[,Y>&07V /bBG+ܼ#8B[0Ɔؿ )}8ya Yp6{Ͻ)et0H΅]H4*S\ k6r^(DB2odsn{E!w"V%7 96%[J@iC&73Mz|/$ŷ14gۡl!(ڍ9;X0orG"A"< ST9Q+_8IH D-lNHs#Z|4fk57#+8.{4h&3̓:9`~ȡm3C-̖F*܃j0zvE/#x ҧ0f__:M\I$"b-يpXsjƣ0u쟂t̜g(.k |@@D$n)!X5⡜ȧk@oܮ@Ev&Ya}~W]#ҭa' Ss ӮSX B D0QsFv)h>[0->;|G3Qct$%BN1pψ[eܿ2fBa-Y:_fH=nrJ?(N3iqP)YxҖi Mlvp+r"ݺ=ɨ._>PKEņYx Q|{Qn 6OX {_q0w T8G2{mUGjdNq.Hjbt2:i}UX34x!N,[JGuBPWhgYh$N-.oe=ٜ)6p1Z~~5v8\1]vK2k\ `񊎯l_pܗL~* ^E rq.Uh2#~PB}oAh-eV՜]goY=X>5J`1 b| c/ #-[,ѳ݄91Ofs,ӖDB@U*b,) VKDƆXE> M]}GZjӧ]%,%CHv4¸ōY 2/?P{Yǫ(}8#P6aWE@ZdVOHS<|NՄ~|71l}UYI*d#8='.U.ۇjQE hʓìan 3u Y"r4Gӱx'xfA-XzK[(3{ lFbR}9^p+KVpebÍ&$eZ4iUm>KRDJ{WOWV̪YtZdSewd,,Oc== ûEM}xB|2Km6T*mF,⼣S0 t6S5]`ҿߏF~?0-SaO3!o*AiS<({3fP`1滍;1RS\ac31Z kKzG߆/&kVS)&ȮN6N2򮾶]3z5B@+5T /j9BY" Y:Dyw btu :uQGaGG+fD5NƂt/tӊ .1ǩjnql. Hff >uIͽ]]јy/$RTwKpi1a[tIEHQ4~A6Q{1@NZOR7|kPH۸D3P;Vkkng9c<٥>HerT-ӪwBo?`ŜS'WT& khݕXv$$=,%9 dͩ"k pE,Cؔ]hTd'8cIѧWϱFkԃǡ"җ!\^u ]0=YЁ8Pop41M\LHY'mFk/7o&v;3оNaxhIJJjbz"c08N}mĪ}BV[DlHCkd ¼e.r oPGCfI=rda(@0:y|nuyKIҖr#ȸ͇]9~51wK b%,k Hhz{١(dH%ZdT" R{Ac&pj4y_kSj)tYN-qd߆9i`j|M??/Ӫ N!"=A y^cQ_c!C#j=\z4ɬ^wVrYBOAbG {I)CQnσj9m[+V./1CJeH-2}:G T#\Kd=T]%hE됞7B]~Tsx|oF^vo+Ya_nmhY<?;>S@D V11 VejOt$Ыyx`@Ҕ,1Bi IV0;%$} {}]*_:<,Ehhs1f`U3E?}re{#q8aQM ֵ6vn~UxٶC# MUdu&2]аZrSLB'n5>]pt4Nhc=T-y:rUF>]xtI_⍎?fm?r~Pedu*`⼬<p )HIꆺ(L++9Z#r*3$n[-W S`6Ա~1bDVjxxVn 6A|s8/젵#{DT"zTlZ 7 liUí8r%)Iˆ3}<֐KX ): Q@(^ abDg2h-Eq=&C!Ց̓[Jj#JEH!^[ ^Y(RSZΚevh& cě\(A;I7= :zbd~m\ FN@߹l_t:8єzॎqk"%KA>G6}/n.BWA)38\>l.0L&_f䇸.ZVI-iTi N⟒)-I/@C?gg--4K8^-HT8GM"Lg?2 6T|Kq]m5fԧ9;.ݠ=]Y:w3!XzvCFҰX_Tp'ɩ%O*Rݔ()vȄX:x=ez](1(;I)0A|֌{XIR۳ 0z";B8 q2͆EþͿ3 " Pֲd5bLv$Hڵ*Ez(&* B܁U.6e o I 7]?;-9i4hE3$h]2'Զܔl g'ݺd8Dmr3dΒ1| 9Rb}km&X0Aui|>Q Y)5+N'HmMs\[}aY|d];%Ʒ;UA]maKq,FLUݫyí)H;f$ q! xxĀx㘍 bt${bZ6A+a5" 8J5C kۍ^g+1Z!+>E/$<^}+EIzSH1Myc7 q$bſ;1VC"rhU0HL_,700>eksMƓKeH{e&LS=&{~3ЁcRP~ٱNM*훨)?Wz??l!!YIG@`рC+AR4}K{IkxD1Rtt )ٸtRIGKE?R Ŵ<(0$$F} !SN\1Q8Y~ yB>-%ʘ4buypd7#HS\njvv|r&'HHdkg0U;GQ9?% _S(#C̞`)x^}ˡ )=&<(W4Py6?iR2kQxۑ&CV/aT25;>jXP٧ ]EwJ(fy^kWt>Fp6~]63'FAZ0 adxnPxz׹o ÌLO').+=e)= /XNtNPq3TH'&1񻎫m/(=[n|lI9F(xN9BQ}:-QLr̵BCΧ#'}ipnlNBm_U^P qx|Qua5XS|KpkNu}p-?ñT%L0j/2~ffq(jU^Av0ksP$DKJЦb`\Us(@"ذ~:V3k"sLAV B/ՙ Y;)WY%5+g`]2&4Eιҗr).5uxh1o:QkAϸ䁲O>D'9r/t|Zy>ŹC?Ol;jJ~ԯJ4"(\s!xnBn6!/H7; 8{)G, U@@P;iV-?~<Ŷ`fjVξYk%=Q_^Hkx NޟS()^ `lU`fm]&Nj*6CbntkK>/... #; ^Zۤ4aŇLJᴣzEBMGl>Rn/"hc!8ԸXfՐBy}MuRe(Rq&+Bg#"tb'"Y~p^$YF]ͧ~8Xn>Oi:gċ?iE*{o,x9 % D\R~]ߐ5 -nRg}x7 r= -L#OqFŽKB0UQűCDi8F} pM5v|D[ކAYDlt=e:_=O࿰>Oוf+pwS+O~H\ z3ZY"kJ nMM<(Z`Cyn ДPETn<_ /*='޳>D*+-n|O-N/@pR&EydJX;>:d=c#a@ E)A& Ȧ6s{ ?D'лnLcjUŸ&+|\U泇$s#b^n@y[898d[Z ~cgr {$!_~~ѷy|;04ga?^Qf.3z籜 r8ZF-amR!y&UI>*iطtzC_j6e..Dh'h! }7Ɨj8exu@[:@+]V,M6qF;R u`8PЮB}-in̓` ٲiTd~x B~æ[GV6"[ W4sJ񳆧1:)ӁhQ03E8V%^";A-GV`Ɂ2JZh 5ǔw|qT{,/'yno5?c[RVfk,{^.h>o7?J z }I^?W'p츬<1g/x P܍^Bj^9y 4b\)|_cJ& ÖN2%KۘKz~}fG^ǼJA6FʏE}D0j&q;)J^N':ųIώ3w S UZ<`IAg{n)4##pK_Bk8֯}|@O W6 J$'W<3}W%(Hb p:+%{DuPĽ~PI0eE`QD94?^KzF2,#'ሦ+ $,OI[7 2*quyIOCc0Qb~:io%Ȝ̕!],n:o9mloѽ#y jEh: l*Y*,i??P[S2λ!=J2sX _{{PGmi]=r=t?, Ili&{\f|6^nz ȸ.CNZ8CrF I'af^Z.>0/kK/-PFrn<"Zte%62@va9lbbﬞ UTG>bP&+"RٹY )G;4b;𢡊s7JkiST.,p$, 5d&DN2<+c v8t<%聻hIIz{fNo5; n倆Yؗ.2Q&aN @X9 C>ٹJˣ$ZKZީ=,㿀t b\Z{> 3 T:sɍQ\6 8zO.M0̷zn3ڒŲqt M{kO0_E? TG0>-(`UIٝ!# p?Q:?@:4ri5Ck!XIcǟQ(/%U[=OvQُC}z#%QH0-J9͖oA1$Dtn>Ȉڪ`쨝lD9UZd {c!ސG`# &"i?p05ZmVA*@#|pS鰸,N\:_CJ6N%'kOl^JNM^d;^+t.kjjji#Z^־{}9Wex;n5M~Lw $βuZ9Y[f.b(%ᬭi#iYoRP$)qi*ؾlꅟS#0~OYt5jtP;L@kvEmJ]zFk2: R({D$Jo_&cxmppm8փ̡~cO:4Wo\F&CVRG32VsY+VݩLcC}V^O,tV{ek=(h_&[b!XrUwO 'Љhx<بܳ嶔9[[{TzZh2jkDӝU% bHv-3paDʤX麒F;%z&4 rX<*Lߗ޾hVQZf, ?VsO|Mt r=3{Ø>UDq vG(8I51M\w"?ZQ>Qȅ:'%1tF 7EZt2MZ37;#q (ka8 8&TykanLtP8E@x!Îcd ; ۯiZ93(ڊA S3pD)+|HN-a4nKS!kP)zXUN7u>3yh`J 08aI,-+jCcP*j;+Q55a>Gu2^#:w+8٘y Ei &SdOlF_U O֌^ flW3xfSnCTc8/ZQc1,XSB'.䥫FHsFuB,$ 2 sZ^7ӄ]}7X`&~`VpBT F@o5NDuDuyyP-t\Nk̮D3g@\vqӂf_BNh;/?_b{PӔcPuxO'I1!C=U-+c>pn1~/]tF}q)^gx]4ꪙh\gJ!:D>X`;D3>R7H\+ctѷ)Cd=֕48>6}Vyv)#/F^+maQ Ƹbrs#6CaK~a.ӴL eGD8hzoWWQ*QqWڣP3M}^[Rhqi\e b|=cpQ2k\i{ن!Șd B"ĸ.UֱdFd,!"O\Z$I{[* XxV~LL¤UU JِZQkѲpW-K坟yP oKx@XVC~<81b=W\5r\,8) 0K rZK1ttnE#vp+ ٘yE|#^2\2#`_߱B(k)dR*"⌥/:w1\w! ܙ\DJ5גNNw ` p}bW~#u?e͆]Y*5,ǼLHRd12'o zrǻS}sZ=x~$"r9 }mI3bc8~%l7_i6ڔ!>/qbɮ d~d\ަZ _mt F{Ef9YywlSuB*Pk#`3]X?G3CTz⟥tXEtE`xp9rsY^j" =>;E%06, ]I:*P95 LԱZ{ |SR1Fݼm&;5nBX:Qh(s`@>D{ nE{KYRj~m[ 3saW^K*G +n2 f*~^ATXEOK᝼[יblAr|Akׅ ]缵̀74n񰭸lO;c&ӫ}`!m)Sb^:Ѷ/}6~ N8hc82-#Fw6d %T,y3u6 (;cDf} aX ۣ+Ў&ەyۭbpبݼm;͔ +*JFYp=Hkuj W_zݏM1[fyQf]NC¨H! g`#:|Y*]5}pL6$smG#sD(bHD8q2҈r^>p*=w =էNۨ\Ɏͪ4-) SrAA3eNe*gl,^`HM&{B &:sVb1P5M XU1[Lq7f)~NHQ?y (\ڂ󃼽 N dI$ *=);Rc|叞IvgO8,E7/ҡꇐεK5fgJhgJ`/8ME%XzU-Q|7$Sq~YɨJ4ol4Qϭ31?(UJNz $OPRI^!aia8i^r~Erfٖ F-NH(lݲ7 Զ3C'~aҫƬ^EEarĴv293c `] F2k=Qh2Ff^XF\qf|lzy Ěg\Non7,Z]56awҿ.g \{mG˞."7 x78pXhġ<.ߕ=͢GYEPgvնQ94}G;s\Z r4{۳wӳ&jF`(Yoj,zxIT՗7 \NWvY8V> [&rNծ"3#zBUԏɉ>jQZXχI@沞e]RW 0EkyV /峏5xV{eUf/+lCo5O a ( S遞 SL>E7-#i"#%9X;%`4*->e lz#FƄ;k˻6D>[#~TuwCdinyvh/XQY7NOAC75g׶,jKy 'k3EI-H6_d&rUx:+# x9 QىձRN`S,Xqf\5Ⱦ9j Aŀ8 ot&rxZ39/x0Yۀb!źRknrHnhci>|aohfS/=gNK@[,p{(*MMWɒK/*C'QKl܁0[LُЁ 0Jrz$+ȿt:#Ӓ .;o;*HRMȐbT7c^cD-G͑S6qW{o#ėÔk I*GT8:2XBB)W%GCICJZ0[5Tq \O E#m5RVkF y$D W]%u4`)yI`KSgGvY]| t\.4йo_APXOS!EhxB{32?iB-ࢫ_o4Ű3Le?j.SU˺/S x 6<|Go3 S*FNYBc67jN z5ur" :d7Y1($]mNf3\ĵϐ2W]Ǔ'$ʅB֚Z$(\ wPﲂkx_%K McH\( w!_h]p*l&kBBM;-8cGGzHkŸW!>=pdAW~Hp i$6z¥E.rT5]tn:+L}K%GPhdJ:uг5.Bbxد'Y /uB["=M]Sv RZW}3mz;J!Ұtk) ` DUQ7SUW>:g1FjJxAnL%3wseL4~?$JMmc1pJs\}2 r>j/a@IT)S] u?/~: OEUW D6LNb3$3l*}9d0)Z+L/Bx`+*,?:+3n")Ic+hI#30\{41ҡY(Nk(|>œ+l"8@1:`?Xv ; |Tc>""~ٰٝ Pc١#'hv&S<3D %7[XDsy ,0KG}2XwdZ?@y5p"md7UMB%+Rnx΄icYaZ.p!Z\DiOѩGWdl KX̑ '9KAAs)Z %Bd)/r]֍cHbEG kc[lGĸC9Axu: w:%ߕq_SаEݎإƓJDueʡQ)<<d.c&{䦋vi[,J=RSqNRZ$eB'e&`Wg!0UROF#s)hrυJz]jpݶ3sD"wִc Q7kͅ=bO6&Uz`ӓӍk1awY6ID!Va!5ܫP? qM9tJpuDe|ϵ(qR?=$y<+>zg>כЎӣ v8l=͖Biמ .탮G$awD? 譂U4Gm:MԹ  !EZ ):uʹ~+k~jᬰ$qޣk >}LjXB"\.!!oeΣ/̗O'Dm˒$Bm+Z=c[ń}L$nG8Ro3R[edD۸錜[ c6:G=shmswNX]fԷ:aֵ֕z$~_F}-rYjE&!&AIkLIIw')Ȝ"X}C֖ eE{w(He_*I тKs,]dqGIڦ)!jʤdx4 %Dӂl0)@8ړ;=ǹlrAтc} $T*"+t%"o5zt=+=up2qK  xDyD6/y^tßnb8AdFYH]h(W12X/cشau}ݱJr;b4uafM0QvIUɡ3Nڞ!wPzOBqsP{js=pJ thnEzxN~(2#!8>q,;JML`(mlgµ",I+7b>M='l:͏bjZHJ.n@3MDŘu' )ycQ@W>Yu94k&pV,45+3M`uSUTUA,:Q gd7J{X O / Rf$ɯ;s850( n\zkK 08xv-IƱKE.ĠlALNטD2a)[~Ԯef.hrrʫriAsW%~Gըޞ;=}iGm' zY +_ J U"׶D=-R(3yC L'1L7NUO顙f[2[ԶhJ5UݏѳU*X\ooS#l\{Qͱ7Oε&#vqJ&4PLƎiA#}fNu-.LLcSZmQ- W:%Wy7f:h9$%zİ;eR_oُ֫qIWi%*__,9w N# bch404$) ƾ4b=TqPNʙ#mI;n7gPp١E\#aь3/|Z/hkm~@VsoUUG.m*^ )*5 xS` x`dGtInSDq Fhs94 N@;@t8IuMN(&\Q|`$0Hg@w5`xumט1\Z|a5T?Bwhk0lELV~m|^Az[,:oTu#k6Y owR.qx˼xܠ`B6ܡ O?8lqYO:"Afywh T{C{5`^dS"H՗a0 )Ub`xWk]9OZ#Frs ^g4F*hB I/>/G1JIMRZtHt/g4Of }luh )۾ntWmi-䟗qӸ ސ n "USxLiRSӒئ}pК-􈝈ucLeك:PGnrĸ#>`BZ0@ <Ҥޖ_[Α?yuWWuBp%&cpƋ5?T&{ٔ]_Y +92{>4qbkaw_zIED}Yr zGQ b{4YcX=U[ t,C܍dSlvc^ti\_+ \ ~<]5}9u9yӒ< 0˾SȖ&SMdr*n׳E`Qpenأ M\9yiAsBCŗ NRQtL,aV`OLC=أ}|v|0?S cZwr@[7k @pT3&rCQ꿢} h14(d2?@ ug_D_{B>Opn xYDbqsJb%>6):z#aQ-9e)HN;mMb3F -Uy]B,{K-u{zIΰRa3 /@(*JoeE(6^`Ө~@^#:=±x98opSl7brq.w1.j ! m_|RMkÑ@=09*o9IgCJ~M;Bh j{3eO4gY; a:&]m#KX+QXsԠᠶ7+HD!L2WEBaHX'9$SG91:T#xؓ7rakDRf%w, ED鷠ՑwƁj0ѻO 8C$/EȠ׷ CKX eF04agYL\%]C>֚gOi.V[6QVTI7/NC,8ā39΀HxH\ջqN'>j J 3?oBh<| AC_y@b>ԫZQfgT93bTmdÎgCJiu^u4 @ay9O<Șw(Ṵ%Sd)_ s\C@2Uyԃ$5ڷ=d!UbU};1LDW/&H hA`> 2ޕ#9b1 !;h\v Ŏ}[Nt#v̭niڠ|'ԢM0-XT* 2".di 2kU:;=Ē^tWACk@ PPBR^m BTJYI ;1/=q tYh+c7k:W{`U5bꤪ[\}FNsYadd& ϻ>>V!jf~,a,2oa=$ؒO+^ly3&t,lЏuRB:_IӮ4*j%#GٮQ5&kb'Qq;hקaWR uNHF f_3Y=l0{x[Qa.Awx[$3u;? ְMkrcr1RlH'tYwJ!y 6ଢBy_/mǗj5!HNCjlqm`[ҮN8+IJ=Wf[VW&b=l+i5r YC"&_Y"񩿺3|Zů{W+«#oivKO;233R*4$(詴xldhiوX^<=*֐U6:IپҢv3W-$ ve$ʘ`T5:q:Cjqk-x__PzsX?d0X"~+:ކ> Gi@%-4ܿ?4 ;}r ~kT6%gdqcp깻y$줗mK}aLBuk8[O-W`eÝM[ !<zDdJ{4U q,E*ɪi!"Ms;]7Y`u to#Jx3'%GA,u i_\gH">{;ِ6/%B I AnWb2-x J#m^&ŗڽKd&vMT̃c|3Ѧ5EVb|?=1TL;J'Vw:Ryq#i}3(V}8Tn>8S4[,N]EOnop  l )Һ W|RPc\ݭT6KsJ*NoZQO/P9 R"7iL}1@䫷|Ͳ(9ډXv'Û˅~Ej`zX+EdZ/<6T4:mIp[*%+[[ΰ39өKy7_An#|B0di]Hr1~NhZ\y= R1syn9"} YV̩^0sč Z8kw`s aٚcd'XI>ݸҧw: y7^Z{mݢ7ºOuΏ%ݢGCN2{v2N9{mUSt3\ly.6M%;nҕ &HǶo)n*[nd"]I:1u$q5yʚut3/jvߒԗ#.íڢ9EU6 e}`HRI Ͻ\`d+3._ 8c kiNcˆZגՃhqte_f.Cd%珏,KQ0+*rfΥKwug%8`Bb#oj&jSS Kw榿;N+q|! WOc` ꇎW.&T.Qh9\Unش(SHѴu`ꁚ2#:dtf/!B:U$۶}QdՄoW7r. 课5NkYսhqN4`S`!/qi!X슄zBR Hp-;"|P63xqr-2@W o 7v4NΝUu dalbxi*4e]!' u٪z;&p,_`g}琷_VFҠa ڽ{Au!f}EKBQ;,˪r^g6S~N=뎱m,bE6'Y QP,N^-9)9DDBH!1#KJTC-G6_vpL'=|܁:z 4ET0ֻ/K4+ԯB^˦`7uO`[ we v>EQ)#yޥ&`eLAp8ȸX#Lz<J1Fd.pTTb)iN} bM=hՊ [$uVks.)9fv0x6.;p?׹>zҿaT R[+&]j`-t#fpnX;><&3jh>WUkXUZi8S@l=lu-3/hbm(#7R/x;zzٵL9l~=ctڌRb[YN*:aa؁yhIݳp $Cb4nfQ 8\^f&Oi G1 MT7BGЉW3:jR!hݭN׆^sMl`9&TP2Qx?s:WoVe`6@yS<{M9"(L!+Mûkk;,ao.uV1:p3aQxgttONNd̿%. 2 蒊c RugQh>2lB['Uv`3=NBfYO˚ }=`G2O/w$ibyKװ'T'e\_S3מDƣht@"%[_F9xn2лŠѼjx9@V2{{r]kۤ?\mֳ<>@ ,g0nA/Ʒ}LcB1OǧPͮjqhs4Š-~@i;xPJk8)6(" =bbNC>+Vց~)3@}Ax^W__1vNgDr D%z-gL"qdG1.UƨCNqC:=+g`]Hgp;}Xn?̩6cQH(SDȞdP6w߶#Lx1H [z -؋e=cn D򀚏M\J%\<"m!MLLyM0qv#O],W>tI[!e`fZ]mٮPs{ *NYp`ɊbB6Tp &KOÕOPO\U-btQ"%-D_t`QrVBff3q$Im5I.jz!2lJ|x DYG8c^;DpwtrϷ}֊oNAU>%-`F6[Bx:M WtƍB) *ьM,*GG‗kKPK\Nn/q! RJ]3θ"ݘ('wT rmӞ2p|"W*)i& y|P43OFfAE,M\e7+WYK18iҤ f/b0i 4""`bvUk݉Y~(q,1Qn$z$g{W{˖q_rsd|mO]]*R܁Do)aQѻlݦ:H$N1I4Xf+%oo|yye{+zsEaBտPU;e_2 ;:= R}KQ8+)-6q"u 57]x0 ĮB2HI"m1\2 l} N%fTHf\ʕ M2s2 9"Qaj6x~=$ *<vN5w*&N%NSW8}} 50x0%0E s@iqi}DV(8JtmoIg$g>lLnԨB4}?N,!~uRYl%#^K|[ O Ek˂XeC$,>>F ~+&.TG( K ܖAZU@+ X>ac+G&a5l=uҾȬVS=W>7 W/9pG#ɖV>Ve!pke3֦:3`O9_f\2z~<uUYEuqTpVC3]́Z#V3%%P@|,&lv߲UؠgXQXQOP@C\g:"U_Z0e2>}蘭j&~w2MM~YQ3)i<4FwLS\ hq{ōJV5~GO|蚨9\e%p܅p}Z1M@ fP{a>&:jR ¸>Zjuf"RRzbt/ n;8r(IgWepO2'u{*چpO7di>o8M%Q7&7W0S ڦ 8{Q!VEgI(sT-fp+!Ҕ|n 'Fo0lpt`Yp#Qvc*I5[Ep)rs;p^Op̫ļFj ,i.<Զ(%Ȥ;SË|`|f+~@U J].%M3Idr(xd"l,> zcs5NY2MO]4tu?-=eAb$̤ k|6ªoZxx1x vfpsg+CIj=ٛ^]uy'@5F~YLYǒ@ZU Jt,|ǞSgy8LYF멷ZٛsJ =b dP<=`)Թݚg~C0@U؈}nHR|OԜ{BF3)aW<6چm~ k—_;cT0=脤Ƥ<2w͞kfGȇcYde2|[?[k3UwzQ99Y#eQxzIՉMD8OSp3RM1/ZπF7fu0(0k4S16I^֥ ho,;@;u-z: 'fP9fqA(|UJ~#1fUWU]RuSa80yo< $X6HXZGWɯ[uMڄ_!_Q+1+TĤf=(p"}[+YAЬ7į]74E`!*XeD5Evo(|-OwY,3<dT8DkN\7(%eQfFN zظ#RgٓiW?%1;Գ3m>*}[AN"W PLnf|7ӝIKni"|Hk0E>CdU{gkkh E Fތtl`'1n%h Tf:u%$YSRm^u~`%Gj8@*^(0 !1cdS4#|Je/;CRs&Z$,<IۗdU 5Gl@GD8%t\i4-VT>jA0Pup׮@ f-N^mueq.[tsUx"0X{Ո}dD~~㢨u]~ai8[: ƁIM/2|)u"gDoCfĞAc J{ރТ<<,QOvvꙸ;F^2pٶbPK3^=/0]UyCbg8KܤPHa:[`gp0/\Z/KcvN,~3~{0$9 'ܵک&f5jGX!A8||gΒY GE%ɂW1hݶmvmw=RCv:95foV;H&KXkIjJ$Diop^qf4&K#_K#vInAZl8[okO#A @siVsnx~>TT_M/M ©~^_%AZU]^  pUt {psķs14F2r p*xˈo0{-[O3:r4wD`+ nQut#lHvAF3b n? cXH,ݶDJ[KyY_ÌӫM}ں:S.ZUl27AΗ{*,}/K|ڡ IIғ-7h eVp/4D~ƛ~qܩTE1 $acm8d ҼxK+\!*=tݚTCƆjz3$72%{}mL_!Rd`lG.zQ?Sߦ-5áŜx4$%GwҨYXxZec::N&4Ujpϖj L<]I+=χ-k|{NܤtP$G1FI5Id)-_#'EHtlwzDɅw}UA sjK@gy)rF,QeE8_F1fj+diaKĶ"g"oEe2 b1W]IGܟ{I V{~lsoGJK&"zsJS({bB%3P9DO;yҒALQ w)c"qgyL>VOܫh~C鉼VP= VC0ysskyO!?i#n146X?hFnO$8^$1xՏ,|B&v˻:bQL``JCHHkH!0Gj"r'L2ps괫͐ J峻.^ rB[Vģ^w5Ku0u/k^ Y 1Ι%.ⱺ~1#aD(t7!+ ]o/2 =)AG,<}GU1lI6¦p[M0|`#?JSx/>A|PLgs9pT^tA'ç췷OC\6#b,*R[rPrt_;VײdTaa$s/e { ry_g˄ f81RT|xr"^@GlN~'eЀg/L`aSQ;R$o6 K7ƞ ?_x@5zc#v$!nMC2b9=Kbe3f*hWy7xx9A?F^dF`,U2CG15SWY8qҫ W4 ;!7!7=|S! i$Ɯhy]db@)mƲH-u,N]ՕnswuisxuT4p4U2_S|ozMU)TI+Bi⡾Hy_fKxib,%p6)ǻ'h(0mGHr}aB&ZJhӶ~PwV8ٝUzY/dLF{;kpn)_$DoIdS\.)AΩBC3,H&㤿M%d(ym!R}w4 {KVZvǺڴ㟞M޴I^*DŽXf^^֎ uƫ[4VLgJ7Dkl-?i]3Bc йK3VMkErF]|W5HҸе !9WZPb^bd b=sߔ>=x㯲h$攵Aa)'s4ʴ { |$|] V`fL8;u2 [9DU af޹vU@`;lY%ꯄP y-]IRv 'k3?vWu4dx֭&?=?wJN7(?61ʎB >@He*he+ySW}Y=;[B{z/?+*hA;~IX#{TS-3=rٮrG3s`׊4SamIvE*U6Q5;D~+Y=zYfDh<.GO*%|e}c{p1`I Ѩ@?.p "s<ԄTa󩁌d@x #C/k! ~?8ĹfЬSb/yEHW %ZJ2 [%e'!>to{ΓnJG~: [6Hqltc>S']OC87r#_>ZV,?5;oдz9/OH  /u[澖SP)>&ᄟl/bH I?@a[IWx2<0iVox*;jڈkCKT'wxwm,/MzVQꆆeإ絔@I ъyv0iOV5r,YM=ބ[׉.K#H)Ugef/j9P-Ɍy%d{0z#oNb$ 3w T} ;)J@W,[j T/+U)MA~ *Eenl\GѢ@j|O9HgMsXck$zij*ʵXb:5l̒hU?8VYeby#O8ۨr *,d%M<:ƌj(8Vb"ᾋ%Sdؑlq_ J,Yp02X s5TtEG5xnAFJtN\~4W!B5Ѫ1#t֑E Te6 /f@Bd+ < 5 ݸQ@TkZ"=$E扙n==}LX?[y]~ڜN|dx̮͒eHC/p5iwAYtP~fBHrr%AɈׄO&`yZzvD13p9 sz WMř9Y8&:u˧*1߯#@%#dj3!+ꀘ"1.8LSƟ2*=ħǐG\sG5L4(i،^sNlmҿha&Q]@pSԗMB㥡xuowFxgJ ӱ,5fMP4  fӤ[jp=gFT޽"@s q*CR@ khՇKqFoߒNŐZvePI}fD>9\.$Z"6JMi~fЇ-ŧgJ ڳ4m 1$fNٟ(P+۩< *=. PӺ* N!ȁB P鈻}GV{FGYJ^t𲑙Ev!b]> .(^! z!$qF=)"5t<]֬*1 Ux_&@]-" dq{VG]2UEN[e#j"9NMIzp׹Q(F, PM?UlX%9 fўXZ6̘N`C\Y,I1j ?0O.XWȳz^㘍Bا}8^Q4F~R+&r.EGtRh"'w׬,a$hruZA}(|iб͡쨳oq@ǧ.i靴б ':Uej?/N6S_bN#ݯT#YwZ"%Y좓9ǣF$ś0e)s$u6ʰ8#^ /op/q̳I^ӕײmZ v-ª z%_t<,V`ҩ@}nLu9q!|= \MF{!܀dAg"J x&4Ln̰C _8!RĴEbȉ$C*%\uϨ( mSDk=>av s0l)(~*Xj08T^x$]HһϯuHx{盭oEFCl9<2RA%(^AcH.(7C 4I}Y 0#MV!ŎS1ENjX 8Aþ@M!$[fzvʅrP K1ҵi󐔟X.c%*Vi!XfExY/S-KsVj!zd7<<bZ6nZRdžڈ.Ƚ%8(`@ >(7pzbo? .45afb.oN<8xy1IٿƝǦJvu*@xCQj{bUc:I>Ց;3 Nőw`SeS]fk!H{ɼG4G!v)K]!?zWR#lb!,/#ўwAu ZWpMhu?Dj`x_tYd"wRMs$ owRίhYc_ΟHpy:ctǭŨ/d8~Dv?U_q PZ5'wEggݩ^wq⍍rJѕj bdzG0p1Z{H}yWz%6. zkԪ*0\KKjɜHpuGz,0x-v,؞.]H rFӰ1ma&Cސ~ _8WW)yelOS\Պ(SVr2ЁocC I4zݲD''*kwɿ9^4E&jv/2-#+voS|[K凹wLDdo m$F޺p &_ H#ӡ6+J)\bF 8*$Wmh0lvʢ2SFauKQ^yt] v^ /܉ Xjq:\ldW'Po13Ếv[AfN|eT=Q9u\ūx8%eV1D) 9Q]{ zYnИ>qzJ6J?WGrwݵUcFNK`튫&'nOVM7\-ڰQ:<.=걉`*edw!\l+$8 *lʹj&WmH""H׋dƙۏa;A,FouUoyn{b|eZM͖(-ӆ.c9kc932Kv4H0*)Ӝ0GmF璮&:X{ZYm%[kfKz!nE>B,>hbr}m;2'I^Pa2bKkf?C򋯶+[ C!n 0nۡzgЦZ-y-48\[ݢަzlc'}G*sdpuusPwwS\y˹*LIވDOxG#^tfuNU|BX55f% 5tV ;yGɫfG"KD%AD (2a)Q-`?j\qBlp=!pITMr'8lIAk1&p חQ慌#U^ EG6 tǜ9t^vcW,[i>6HW!hedeBX{Î8)-oEBVop.^;eƨ櫂+߈A asly 2H9ϗ8;}i9 [3m[^-Z}tbkzmrb.|c9W}bNV>*8!=MK+> qy' :k+ \_Ocw&_fByT$7,ķ aG7;kTVx.]'r#d^tgDjA k,AhEN=Ƌ6qJkb(+ ٛ{gb E栌غi>ײ Ykzn \qD?A|Ulil~9+ Iuϑ}7c^8xC%I=uRL ~`# b` g 2!f+zϵY P |hQC~Y[z,6)/TTZ|[57[o4+8-9XpV0xn[z^Ilg4~ءM._A&ڋfGBg%'K\h>" 'ʯɃ= HKnyD^Ew'lLA iGTI7ޥ'Xka}s +Z!qyٚ55~ Fz:n@$%UȾ1vE;n tČ63[>A^1FEɻ]8C`yˇxpsp9k^;U<">VÆ:3s 9]-&hUO&,х3 іydJ8]&J[&dPh G+,IR ( h'or~|?i3hm jwد#7b/1 fwZ5+?q◌4pLš55;R\RG:/,qUqCnC a% ]d$_FXē25xP@d2[6hKNccV+# r87-XrW3qq~49^jgq$V}0%-9K1M:)_a/Z;萢 O;`8Yq =ȶxSF 0v. b#l:>xQU{tX Žas:JC',aw`v!its6:_bQN8ԗZU.l縍>>â"N|8~SL pYx>*nIU[0nն.I%o\H]A2nE2Z,zβY'A ̱CC݇bx\[RE6x275O>",s*K .hr:G[j }8˫xu#Ha{։_%= v4]_M@4EŞ-s)~p~bH(- /a냐:2̅+}až64@ʆ04Pbxm/O!AҞ1f] +ZG%@1+Aؽo+tv&?ԞM"l1G|ErT,˫8-; _Hp6K2&0?oj:ڢx0tX(cM6q_$(a>w1::Z/9JwaQ=P2n%N9~mhh?$8-k(FT6[) ;<8hv@n{~XaB睛jSCN-ш9:r.8z`Mp-lDqETLCDnMr]L[;͞긠ڞl̏.י79aC,sAC!#VANEg!/9:tzXp#X&!"|)ߐ3"츇§3ln"uaœJwMM)nTMRe&-0b niK;s Xp5>qr3WWJ FUtgJֵ]K+Q g65rq `"on0CL.-B3K0i_ /1ջxx]-,OqQLo,\t[ETR(~ Zʟs(ӵ>fZځjsSٲU)?`_˨wv0.=+ì_yҐ~]⛽8Nٔ,³Zh /dfO8?N$ʉֶkF-#6?Xsh{ŗg1DN+K*c'ڋg)%94~Atų ^V"nt5!NdBYQhDo5Mo+\ҳFOJYWo}xD^AA-tR-ѭpM nqc1滳yĠp[s/`iFx;0Q.9n5We}?9ՎQ9jaY04RїOwON[hyDLs "6s$ީ;ʼi_wJmL0]c)~ _ͼw8XSs)_5h9QXk|]Vy޽/AO7]G0K |;XD 8qg+,c D(@|T+|G;3 mNV]1HYv.a/6:ьɻq[0&Woocs{$a= $2K":Elޘ'D[g**],IM2JYX.'3SoG&Ra_؉ iq-lZgZ*btX"* (1Yt-^;oЌЇywd3ċc[4|A^;j{=l!@0K:&0=Sծ1^iF`?`S@9_O'l LdTj)s4Id /L tYnf<5-BcayN.ZhXO' ~F?ωKue؋bnNnI2%A}Iɚ.]$av+<{  8AjjxC Ƶ&]J/%JBL$ԉ`FH Ēġpcb\e9BrtrV!NC # vkyXd?˔z}׊:һc? e-J) 1̊I2CkwUه-~s@CetԫnOu^SI0N{#~meJhsdǻZwJFՌMGaH-#0nPm>iA;s!Grf+Xk}٘iхeGyǤ=ACvItd VF 8c#w/F/xRxd(psy8t;3҅-sSs=\o,Xb~Nx6b5e0eB͙FacUIVucj$-.n N]O͟ u5AXԱ@)Codi+ݔ3Fa!賍mNSŖBsF5D[3Kke[&c;2avS埝2u#g%ђc$-1yQ&Uz6Ҹ=#/po"VСuI引nss\Ȋj ?]OH8C;)&g[:mX,O"d֝"W'5m8Lm)n0H Z9jD&0A K[F;m:RHi9tGx n%K&P x.l'~wä[%􋅦t̛<]Fl |l~ZGelxzM-%ϲV;.2ˍF¼~,{Ӌnh'.cApVߝ"oʴNY}Ho9aXh5f MA_rSȅ޲FUtJKT%],x.>hܹGn E$e+L55ӖNN3u2H3Ld̫8kmG^pn ơ2GE4a҄jSLRqJi<3(xE;' ۱yQE)'x ff?mq䚔htLj" SEOc$܄|>Wn,7|9"Fľ3 #Ie $#JJo\5x裊Pۏ&PCcf n7U*q,K\q *meO+r#U˥lȮ mxӅ m$*'1@@gץ>a%DJGꓮ.Q hN㻃nK+ jx”H 5ևyB=,:A]+1s5O2\phc \[!Ĭ t_ x/zj1i`5՚)'B0BǃU4z>H]Gq7d Տ{ يŜD !9)o&T$V"bYRػ¼PM|T9U#pϪԹ_64$2A5.{;K/.s!z9iof \) oⰡ9rcEiJ{ht8 /y@"Ӗ[! ZLPq ȼ+A2Vy>6W\w!'e"SNk=X.&\k=E iv&ϔkfqUx o?gIb('v#ғCә{GQ^!;5L:鿩w6{PK/Yr~?GgIJRAaVQ3+2p~Y톞kgi4qVkaY\'lVA7VnK޲2#1Pw&-ë: ٮc;&?e2) ^ժǙcbmqM)8Ͽ4=Vذm-niH>R *A ȁ޸1Ըh&$e< n i(%6YǠB(~~RǍÈiuw?DPDv6W-E{ڐQdejϿIK@o6a%[P}|v'ovEv[)}!dK6s`f=HN0$Fo!*Q_]7иWc*Pͧ|urZ=2r?/iSPﺻ&uF~a|7ei<0EX϶k&цzY'ٯS;|K:a1RKٻ ʒ/ŵ ؓD3 <#$ȅȐ9.YԘH8W}|ȑGP,̬7H߈dóA锅@G6YSq/? 6j:%WQZ<ā"^Q @!C1QIjp&%" }s+`L3>pnͧτ1Qj7uȃR #BWJqPe@O̜w[5H <]>qGjhKK4j*3l? ӌn '|nE} W]&Oe`/4>lH&EU,9=Rln9?a_Mϖ*d`7[3[h xNRX O$IG\˜=gFgDq-$$O#8Y*Z\{:C5W>>G~y!#+GFߨ ٙm_lgy`GWe󋠕$GVպ-LDh>pGnhi]9Єq1#^O%LoҶO:{ aww+z%*PϬ ѵ> IizύM# 19noRtˉ47prԴ(e I)raCi]:VE\G(=,9iªfP},Y9Oj-}^VVl fyiEpݼ ՛UtPb:<,6h#qI\C8ri"?)NJWZE=np3TD u.HʑTR5KL PUe90m |boe)Y fP\iKo Pn`*>eBx&(W6+Wn⯅XD/F{73ǽ9ӵP!y jΈB3%=Y*'RW#xU1h9bSμn<=V|PxpJԮ2fU1%yBtTkv}Ez10FHK"Pq9oqA%eL0.$"6x79o[c{~5r*sY:^Kt봹Sn7T@;(1Tw(n~8x>e8Its/3 IKoZ;@(0=2tb r\;8d{Ulm$a߈$!B{p8K&}і(^"p!0NIxctAwgA!a9=f:ܭx n@+&9am22`˦Dy&bh`dVA"qUQ\cc7C1ѤQzԟMaqXd+}$oD,KlA҅[CH@#Sgbgv%j"'-*tڸjkOЁi4)N{ O@>/$F 4%cjI*F#>6`W)\+9U.C2PBIM97aËkl^}A B><cO2dXYfyPUŎN&_oo{驋CGҥUWڇK<斋 btjFY;yɌ9lDQ:;}6;LC&vt3$)Y^_H93z g0yhdb7E~Dc-ܣI}D}1Qa ݧ9,&h(H>7Ijeb'~7YbdbONg.3Q&ywq>Rƃ.ct -EO G>G#mX.e7+`%5[DXiu({~ u(şΎ8f"s~"3^FE^wkgd8Eٵ~#4D -\T"plc=}C`f43ɧK MG19\cJ`޳t&$_%)d^ yO'^\Ltwbg(]=ڊq XsOe%:3f$pҼ\ b-Ȟlv-`gzRhk@u sj,Vm6к τ,X#j wV!jգQ>S_Bw;Nc &[7:+Oj;HkA9OcЬ v+$Wx_a,d{iDvo 0 [_CcAߺSFbr+0qvNؒďdlk=Q`a3翾V:mFoz/|7dMȱ,o"P؋ܸ Ti$$ʖ%Zq[ΒyLST"*Wx?.7D/ӨNӤĽ^Q\|Vh6-]K&\u AgwbnNc߼̮^x617Hd7[3n l? Bc{5b1(d=>#_8A əlAωDo5ֆw2Xg(~Wk=Pl;ǿ&pP1ŋ,j|UUGȍBxK]e:!0%MAΒQ[b]5FʺY ydLu 7"$)c05yȀqͱoYjD<63`XݥwDO\#G%k+: jk{szV弊'#zᇿH\T-绿+r`y.?؇~taxZ 1Udߧ4 Jfra8Mv"cGOGZmQ[I91yق}>9h7Bn,ePnE1t݄Ҍa+,jӴ`lsd*P> ᥸ L.zq|m16RwcS<=0ѺC?C!j|zө2K*G(uȵA"V,pe@ȨesFcf @l}fѱi$~\7,Oi,PY=JJ.';1xlߌ"]5j KA? m-qZ[݋Qt:(v4 | |3֦W-\[Q%JT.G  3 :B5% C;<i2jH5(>n$-67{Pa ɘhۀ\~B̓2h4q.~UB뷽j%24ds\8~HMz>qI IFdE38d!8\b7cpp ZGc&AkxVqɄiQZjNNw7sʒmAf~&g/>Jjaw:iʘiҺl,z̥/Ig~ ^tm~op2Xf9!P v7EpHT,T Es9 @.S:jF%bfd1!C:e>oT #lU#cFLHJ?E=1; 1%EJ'֦FĢ2*#焁1(O30ʢx`U6*xZuim$/jCVL{eTm\!S:d\x.LIձvGԨφ0M,">A"`t;&Hqd@.*FzH!?n]{' |*Hd1R{e~ʚvPu1{` /%7obʳc|.bm uQU6ƕA(N3al:YZ\pxжL`m~(zn($8/9}:޺ۆ-1@<!@@9G6*lK9ܕV#hY+ݻ^qtsxV ~:(x=,n6yyi %;Mq2b~ U"gxN"a߽$;cCvdj< *w5Caq'|C>Er/5$9>m{gS]^<ei:^L}Q5B$S&+ B3Z/KrKcIY^% wQOiaR7[\xbX%%7;OrCM+ꮱvAPQ㉤U+ m6Ɗ|, 7[Utb|*Gk!Vs߫yUߓ w丳WeS} D# 뢰eDv}hzOSa̗B e[dk!4SΓjWZo_cOH8/U'<c(hIDVpͅKx9<l1АB"t1t5}ոT/tQ[6zF2-x4cEQa$+RN2~E(xW~^_HҸk}1|ȚאDbDhx% f:&vV}r#SeLTVHHmZ:,vI&U!郏f0vsTKB[k5"¯2H}"䱸ץ4D))GKrꯣp\@{ sհT !!Ԃ/R!\^2xWT/ļA}ҫ"-] {5zdlq%V =W<:8Bg޶_ط&qx U4d6qTb#nH3+kv@TİD!sMr.O<1.O3kDzx6*AEtm\q]ߦx"zO^m`%mD"~ׯ^'}fE [ᥘWb+T/ H K\M ^~y،$"FU1l$+z.!Yf% uD{x-۰&!j, Ned, GUM3MOa4>gs+ұ-R .toB7l*1{]*j2 uc4E9!|ipۚva*S/"KfC+«_,{-p v54"+  -5QCkDe]ZXx#kӐQٯ O>oԮ$hϏ#WGV0T'Ȑ@q1dg,C$y 2́lsB9A7_z/.)@0;oH حp0lve<Ĵ\5 twؒTJ8t&Pq)l 5AAx\Jh咂LjFbw1v+P9k~,d6Ȱ_:'$ē@='3"1?h x,nٓʜ]zɯCNVyd!N*@B[[[ZwiMijSX- aGL_E ЍxO$D_G+{˝U8 #8^ugGJcG$MU#|"Fg<@MO* JRnh#7~A`U P/x J߶ZIƍ* @0OK$u߼q&8{3&WhƻǠ'@p >=>*Qs"LJ;;j]iT$&Fz4"1U:z" ޳=ɢ"1”O OjCgXS P%8Ľց\Dv'oA9 }X7/pg|6>)1JzaIKCܬB&YrBujMW.$mcm+W4 z#nv# /EEOtj)P11Ҥڠf0sD1؋iR^z}AljPpCᘤvA~ -s%1qР 6SXTX:ΪGi]u2Mp=3+:)),v ج"yI08'ru: lg;2CCla\¶(~+6햷./>Aǂm7Iu >-hiovH=~v)}kÈY (H,TwʑJL (H>VU&%hE; @8eSxbl^K#,+)CO[%)vv`>zkw/k@ =?g6?a#65xU1 ط dMوYG|sV}ېLԜH^pD@uJзІ! C[_P;gtb@L ld& Ky$PtG0A?KkRJͧIX4U6 '~߰w㒡Iȑo%̹S9̧H'6`agoAh!ԅI -` WW 81g{`.%>3qOԃ)2/4Kw?zAcTe#%UŎ(PΆ 1],CѡO }U{N*djղܺ)oJ8 -윓w!Wz8y젟lW.3cpqYLRGC;BwZH=#MLZѦ#\vo zǹHԖJ9UyOe-)6 GJ+b # Az":ҥmj:W;Oa \op-I`^ئ[HBe[)p!)&:ٌVU,WYYp6  iNv}Mu+ I2`K!緤϶HS9ѹ ,ݸ d$~"19V2VX6bs{GicX7%0cqӓx")zs@\vI9{gVjXv;|L;p xW1D9X+c: ,xY8Uf=4Q^5mG~ғG[)&g5s 9Gr pIKxS[橾4֣}jbo DUFY 3R;Ić3y꡴GiRZKj ! 9}+>G~^FfM*/լ=7i=,~/|f} 9 0(ivb"m${b⁃z+}D7gie\ =q&?ZJQN=몝gT -(0!(է!XttT1֌/bM&2CR:DM ă9<\`42"/1pIn WT93c `aϛn؇i9?,n_X&H" XZU[\' |E I EzGB-%:|ȒCeF@g.壩8?JU7*=Ǚ@+r{kgQ*AElP#~pIqp9Iˢ@kWi9L H 6p2.7af5H֓ą;vݩ]M',W!|4έ &/#{R4@z!dA d"OCrC-iCE)Dͫ$?_ 'ZDT"D4 }"L~ب~;%b/ R6 cTVCvcd\8d4+: '+]OH7^4衰hJ/2}jH ae7L-/eST*vѧU}lY9EP/_ÊW邎@V:Vsk}?wHUY u! alY1;*ɾz{;kz摰{:-27 XrSJ НֈJwqYnd+o yy[g_*O2ȴyŋT Vt!t:.%g}'xЄ@Lm GLGw݆|ZSl\D|7Tp_G$ރmߪ wP" Ԅ cu'Z8<2h_E?8 ]QV UN<@&ALzH˙Z.{mLW0yGO ʵZhFy'uZA?p5zU'%ݐ17-%y42J ?9;n+fujA]U\Qd sxo% DFV"aNlv|_\qDz+B-I%99&Q9LJ\3:͏U=O]sOfHF۷c]{0u^wA-wN#+O> IuܤNj1[H@&>y("VjSlenә ͟ttߏ]}(f}NOj;k,mB7jᏒ3Uk?ơ[|O:55.cmfi0eT^"Zc6Ҙgz $V 5n P/ѧ4:JZ%ט-҂R۲E$Y =='iSHYf~CfIģ 8enT'YFr頺۱~t&v-h8,Vzb>De LS麿ד6'5#F{Po&VFN5Tln-e#ڙy99nhLkErOXFe86; .l bQ\û$)Y#wx1AR[LB$v/ \qU4[YR$aۥ k P*,p|XFɎ񪅁Q{7λw;km6AIc -KPw?Fz _%;[P+XJz#*-K!;B>f3zʼ_nYL쓫BMZw:>>kM"C`)iI;`!:3+^ÙAuCHMꂂA1LtyW(b ud:_WX(;T=!ӊsL~AGȣZ:$!?Mz+Fwڰ8E=![tkawNR=1q, (uM4[=* p%fh+q@i7Pޘ?DR }7AUHL7D<!^y !D:kjv6FAg=Au]G&+%0+ 9jpL҂_j̜=ƴ!PUS]\*A,}xDn8M2``-b,S~9| {dr:*ï* d\ [@o.x 6edrhҬTn}x?M,U>sz:G[dceWPEʞYamCa()uމQU]^3ߧ"ʠ?d݈~Hl~Dtt@™F@Rq^6PKv@'j>ă˭>ix@m[R@x_>\=dF>8F¿ g)yl*׆2mAt{cNnm `[z}8(Lu&￐ ?eO ݃6oY:pG{ohe ;suf>1J$Lxsgd8 {?\Q|/XvXXL*UfA9B5q}WOh+ 9i ;]$wrH#N86O7+G~s6*v8\gl™`i4 \\tsw売Cbu˪XBj[o(#-u}g+ UgVG:|̉\DBf_.Կ\QRMqMs_zO7HMvRhX\B$A.{Zi2ҋ)x,il)5_ !rV}uv;P[ZԖ5( hBe#Bq{g+GL<]? s'A-dZnB*7)uF %ޢh꣥Uh +e3'ﶚ3rBaOƳ)F(k 2k3)"xP E\~'&R)C4ٷL5y>)C79mi 80I{n(CǶHРT;pG[Y58 oӢ改cc&;N! Uf#Ø6ő!0Ů}yJe!9Yp;}쾵n^Ǭ{yM17Ka˛?TO瘕I$o1GΌ1z[݀ #VєA߈ ~NO("/.~ycupyj|MeIbs1 YwC&| LcJ3 u\fwS)sz2ŀ=?~66y,<+ۺ`CM@ҺX[HpsFN5kMe~A3 {Z0f^6yICL.`Ҧ@\Z[ ʐ KhjUa)% VCXa^y ,& lT≋oAh0u V* 0̎i2e KRQ:Ʈ9y`oc$aPԩ&k‚@sK,g>Ǔlp߬^ֻiQ9Ƈ MJؼ ;M:cOzy[=dd-`L7J.ѕRw>D)E;?(YIrw썾짯{q+A\JPAL^*BľqPјՅ͓bf)yz*/ey>RDu`Ow^ MV1Ёw34vgLkuY]vܬ؊ҵ|N"8,՗1׆L)]D@/HSf1^療4ٯxZsfZ:+o%J0! (9'T9hӢ 괾8UE*B~$Dm19AEQx˳j''@ߝ8F[6M=S@D vRCR l6l2Y.U͚ 4X3N s2cBrGԇ8Se0@{3承;Age[~ZMDbyw;|a-#v!+&",B$p0ŗ#^ C*ud xƞE2>Gs\ ˘"Q4#$TU|/e eb Ԭg*`![xAϥR7PP[sm0-0t}ڣRxRm.Q7"_d|;1TH;gîj-/>``k$.x=9vxDC܅c Ԯ"|1rl 2-V3]v D8 Tg_ XDy$YvwD= ĈRUr!X\d&#ya?>MHѕ·& Hi.s.Kف*6cy@Z&l|NB-Y'E9m|]l`N>D"hjsDUי>0=&jzF oJy_^Nӝ\j ZQdR@"}N 1cMZճ8<ꂞA1E`f^m2 *ib g-s!; f0_L>M^#2[Oط7"A(t|6Y%ˆ;G#+r+oy1^dM[N`h_o@^lroְ]8q)_ŧbيq èߑ:oz[?%F<} A ZB,ʁ#=V{kpհ_ AҪvYo#Jpki#6QPgl'bogJuXJ9<€:mVUR Y%e~ISOL̽S=QmP`kKÛd_>ǍJE9Dflۈט hAvϫ7 c燐N#Hz/f+ŕmWaC vs) J5j/ E W[~S.fkړ<.ڧĴ_[[6u*##?P`!vܖK O H)*_)NK/Zg+[@fۿ"bMPYn "Մ>Щ[RJ~R)+WN'q|-I#c6ܤq&ddJW8fX=J_Avn33Nw A`*¹hzt&>Q=wVIzԈ;{죂oY8$^ݵǥE9nQZ9E RO{# 1M ӎc$)ŘL37Ёtn|2îOA-,:ce]l2,ZO['+X E&+Ybd`}5Քzya$ LȱǹVxE1"Y~1;@M`TtP-rl7hgxA~Cn?(Ż0m wD11(FdЌMКl v@[uٵ,A[ڴf对x]g|M=10NsE_;G&'ZGz*AX5Z$7#C v`U[9Vqx) )vM)bIdJ"uu0l?`V8vM(“`eciFں *r"SW]ycDe dY;#Unn |}Dut؏jwAbm"%ȿ:@D=~zxDНtެrҀ)[qE2O;E)a?,G,q?emԺq"!S\hϺ }r"bv2k8&g3||1 0IJ}mH6rUWoPN vXÅZ=ظ e\Xr{.ts@4.V7%X{?KԛGtzt8+ ÃL$+Eb{Ģ8-gMV*Oྉ<`~0)$ NW ֔rʔblέ5zP7'Z2D>!MRoȓkN:V,3"`n@EXu+s$e7ӗX2г8\_>rj$ur"6pݙPvw~trCF_Kȹ vefP_! * fX*0~m.U#>U ` h$Usw."W:?RSԗ޵ď -a& )v#/ѯ1q aDľH_x6}gcKLr&_C32,CcT ޠީP0;q +/ `;Fyz_XOyN+ H7J6C&Q5؛y)ꐎ0yd#R6^:ɟ mxkK4(&bC6L.:Eg-"up!P4O!"xIeh1tyLk/ Vӟd#aur^KUU1=PdÜ7DemLa {]IC'۵2ιPa]VQ)QǮޝDY},' K0cޜ=Ш9 (bW?j[`"(}^㸨7(P'9.{Eƴ0i-t3{#ڇ6*8mMeOXݠ$9 jF:Z ?JyکFX̖Ejځв9rŗpr< #b~B^ {{׆H֝98k(Oj bbDz恴z={%pT.Ty =R[J X[0դDl4%tN3N.VBNCqʰ]qj3C[e`F&3#wO%*F^'fe駣#; arF /فLO M}#'g,P]]K֞l_?55@Y?b2vևi p֟ay >|n+>3e{c16JZ)Qi(\84O_?1v{ϑ ~,nS6~k/R_X)i^} XhioBm~[Y'&%źO3Y˞q(jPaoƮ.:CS]AL'.NA 6W-;u.N}O34+6kxǾBmlLwGՆ '-7E0qƸ`~A `ck͘{ҫJ-{!g9lJxW\ֻ ^9PFB(B c!(gR)3{LiVH 3>s7AH4܈-jPe?p$QӅs>ɺ uDZ阪%ܤ3ն#KuSfԀcqLZ,ڃp(r^CҒt)'am;&MtFh7|쎔x`g[hsyHO*jyܠiPX!XW2(jLipHDv1~ R/bK+ $ÑH ;>z\_qJ‘nzIBy$'¤՛Tvi \q m;VRV!H"}T0>xe=S, ̈́lroȣD&mүbzym wjRٷ+C#~ų?pmG=mIh~BҝP{ )Ш6)n Oɱ T5+Ei'W>!n8F.%}Y"@xDo ]Bf!Z\^B5Q֞udՉ _<#9M7tJp+L? {wx4Ö''0dcXldRmt@e ڃ5ڍb;o3@"Zӿ!F<$YBS' zr]?([>GryGڹcF/ V\Se(C@/vNGenx`R˥n5 YM$0Rg.Da:Mw9l,x8W's3?dqϡj`YϬ[A8;~i-0kaDXγF?2%;$hVgD>fsOCPɌQqď3/p(6 X z33BDat5c+&@Rv2;$uO{u뎤iCů'=V:p͂,y J1^I5I)5%Fy>qvO{ZPrb·pU(c$Қ΅嵣=c` dpL`B˫0c@sC<A}J_sINL@{Yij98ĩœ.+p(3 p*ؠeH^W`/EJrL+L  :QH' 'T3-cǞr;pzSF<ю4f=Ca߃U3BWx+S11(il79_n xY?vIJ4Lw%@f΋}*djG3@'Nl6|I=AZ[r_b e01zY&cC$Jm.-bj`$[c-~DJ4m8+Eg%vkC^N-dG `;,>>>шSZ q~r?d3xiR@jfKÍ֩+%h bbqmAgi>'P\G_?` /RBѰё00xs*9ճ^*'9Pu GcPzt)շ녋[C|8bއJݜ$rT\Hѐ9U #UrAr͉t2DN9'~# f{A-T8 I}c#qFpQYM2P|k_}j!O|O*!Ϲ]Yq=K|F܈36 *FV2yA"5):j \84gh2-H 3òCE)" |B.}Շ0,I%`VcQG~[m*!A@J^d*F렆 NkRI-%r.~`3tFCI(a较x@TnnqY ^ yZCciZ_?IB tj|9L*U*_%];`>rFdu f~Y'M#AaIT-]F-R&z~sO2s}.xNfDQo TyGwX,: rTS65d|1Q S0@xiF|$ҳqu|7IG^ӭi3i;ul5s8';{ktL3YqM'UgJ>K,(ʐ-mi[\i. . W } M$e&tD}/Nh:TG;H2P]DYYB2$?1?򼽒gud)e+R־3. ZJoGp?OſȤh|rlWH" '5"@=;d~|&R@!S+$]Ql`(D>[#Y!C䉨l+^kCԴɀvB Vpr+1GDcdnG#X˽E/ei|DUS~Vl"':YVIQ:|uiQR-,Z)m4ה+3%_BA'> &&tnO9@*sH8濹}k]=PR;rtR]I5NW^Ζ Q$FOQ7WS2SO-lnTvU 4V i++pQfvB>q[0ިt ŸcXw]]AXLV*#HK =}!!ъ1m,y:rT_KAZ>L:3S*SUcx`_e;ಁqTtKDMD5Ud4 |Zqi ?tLLMueq[8ߠJEg/+_2ݨqIlf4kY1cm%=,L2J Wk ݵ~4cRuA"/I3q!@wHO*.}9 0(נxQx\z^/QraR)Uvfbk+lo)D4[D=ԓttv)" .6unvNo!RNP=Z8]3cX8ќb?`K[0\Rxv%.0(lvճ y̽RІ!*`2?e@ )AN׳NHqu[b9lBH= U H%r^y*5n.@y6!ת2&]O5HmI FS`]j}Ɔflzۤ~I:/2٫@[]ni/˞@azm:Y6=ܽt7j:.5,=Vt:^Uӧwd`C.f_̧Ҳ&Y_1|qtT)lo{\Loh)6IRv$Ox3:ʓośKm<(6G"\y0(d]7f.nA< ӱ)QSeНdԧRd^l2l)zk*wAйhp'uI!#1۔b-٣pSXanͽCR*ë"p Cm8mF'žT7@ym: 7X P]4<4T S}]:ZٓGW!ΠuYƳ54?C5 @@B} G ^sԕugW{ 4nN<S^X(H >$fnV_ A߄bn|'qg#O~^ A(.T]^$hCeqŴG%{,3J/>S,0X O!6y I|2qs^QW^9B ׎qbqp|@:H{@o(XC@ vڎ\۲xC2-GZ/u3yG ]s CKA<\X*Xmf,_śm;17ORVvh-!bVfy6=%"G[j澙1']7{Ȥ\eѱy=LP] E~瘦.G AJJ7v7&kר\M c=vFwGy3,CHY\Tk쭻CAKp4,2(zDzx;4G,􆥆 ì*-Y DţWvc:|]nNJ%;vl'o@3pl@{j]\L{ vXC $mM b x- MAoHzlk200@(\CE%4CCǰYPTJ̖\ I u3uFće^q:IHR,hlʝq\D+BZ"1K0^ZXґMdƑy_u]}swghFd(ɈJ]wZ]jYc~ߢn6϶pI'E13ˑgkbѯ1>dB;pՄ5 T VmQi~7v8<4Q'|j51<o`'4VsL@i~\J.^;Ce \49-HF#/$tB&>B۟HD#YQԧ5#pjfGAG;}=\|U8+42'QVժN(ym9&-/D7 7(MOEiC 9'WK8y7O=0* @3;,KÁCUZ~PtO*QT|XRA+Sx E&6k>to_ QKlJ r~6tx8g([Vɐ~Ev{<d8KGfwF2o1:xyArェF><Ʋ;SM#k\ O8N+MӬ`ZjSiqr&\޼pV_  1 ^RG/%Ti<߄v-q} h. /N5|M*#Fjj)F9}ؑ@Yw^MwdtjTV+ Bz,4?1Mn*ԫ7qi\KpON q\$>b~͏/l P ;5guNܮ}Gqߜf5'$*߳`. (`Ʃ<Ղp @M H)LK729=4ޫrK[~0&~Q@J}L5ף̒fqe~c6FY=QܣGdlB6"Ufoף0Aj2.˿Bv T* ?\/XUaIQ}z EF7{OԩF+tܐ o}BCZ61X=B?EgOєrM!dwD^JtPcBF"qK??R"Ae9ĺ4#8s#'nmIB 'ɇ+rQs=%oE?n6iw:{wzc7.U8uYxjՄgʭ4K5Ey6F 贁J? 6[ =>(>/sbrtzCʙkn;.yIӈθ@:$iT:S?е')'{jBOe~ч<~&VL+=jA'/,0m ˏYA,[D픮ۺ ue.Wysg/d@-V l<>uMq(θ,5|h6n߀h fWb0?kYs*nM^0ۑO=xXM+(?؍6bBi;!J7 C:zcl U 15YC^1Ž.BR#KPgȃ鬂\ċg*Rլ,y[}5eɩvPQ,Z}M6y >3by_x\l381&jWyD5OKW7;2E:~,QNo ԗ_9DH]q) +p=gDi:yOX@Ӱ_;:- Mt,AYy*P~΀U{%VV E]sPժlCl3l0f_1Sdsgx mD$`>RMc34D}TJP?hM6zӈf__ux RTi]Yr טV\'*޼`v=J9.]&id=DMܿcue@THx`?tB_=y^cEh4 7ڗSk0$m wY xA AFg.sMY)@{MhJ +)3AdePJr7iعG>H/Q*^jq)/Fu?ho$AU=5 7yߩ>čcY;u_ڥ/P Q3C$E9gŪEwJm|@:|+Wbpp7zxXMqnی,f,^(u16}PblrO(ЍXH '1Rl㎙\ jw"GzkՄO,¢E`(XIizfs2jfMB՘t=u[oCLsE'\wxX ŗc2|n췩>˄+ Pt+2Тd5;ғ3gA\=f(m5׹/=i _r> I#ʌhkʛd4HԺS.s4CZD8eqxL=ba/8-7w?yp1 ڃN+p4}I(nqmMhssiXp:LHKO4N݌3r?͖a\>>R-f:Ġ+I 6&bEGm,/v;¼BDId @hҒj¾4C\C,H"YE'W'kLKgS%+/7h_*fnjqh$un?Gt,i(pX2a*Z-4[ J+ ?#d8q$=G%_g5/wLV9 x}j3[yK՟ql#.•"L QbdU~up 4VqE!TB0ES8Y@P@LvR0/&6֧w{؎GQLao@;k:<,s?ϫ >$ލRr_LB8Iڕw F̉(%un\%`$it^.F n|,ٞۗ͑8 TU 18o#v?lz͕`|C#Z ty"M(AlX[ -k'XdDp{jz /o?6)(BA/kKϨ7pbT4ȲE 杆׻J D TK .1"Ugg _q?e ^:]yoͿED!7uYN:K7X휀]/mC{u1}M`/ {n \UwN/{֭-(wYL\y; #lULqwmbTgD--TaMvo(LMOa4BǡbS$b˫h~p_FS=W9p 6,D.9sVԣk|}9qvs3@3Uz{Wnk{ݳ-gr"M m5@t]hx~ D긨y$ߖ+K)Y$:tlkO,C Z22Ƈc%\1hL[ɣ@JiGEGB~zEjP y:Y.)/KfjY hDF֫ο(WEl:h6]d f0=7wC0ǞoJ>h_<8Fee B7b/,3WP#0h@Sܒ څB% [$^ghk75ĶXX1*XQ ̌ACOIهo :!?sәCɇz( r5xb1xIjKTQԶXdloeKn$V<Y'iDzh-\e*jr~NMx]iݩlu2u㽴7V +e.Rm&chCzI_Bu/:(>rBtzJwf+`,^$I֝ @awp>Mڲ2d+D{qX5[]Wœ=4=/&qF8ٸziġ"ѱ?¸ԒaƄG.䰤l}+=r062>VL ~ha?72.,:Kb‡Y-ʳws8COP .+DEֱ>p634Bk4'jJ: IaxcPn3Uh[tŽ z\޾[ wI<{Xsb̑10(DNU aa=k,˴*zv: 2Ea}e9RsHu ㎂j_f^B)E$S=6id{q`cH>~*#D$ѩ'1i)9*^gwKB"aňQdS .ړ؋-b“5COL6i=ɻ#)ZjDuv AY<WLGN+ǼvŲf:rv2et,X.UdSK;|-:?哩5ֽ*C@QUWn܇^T"e,[ b2onE Կr7 dWT8\8:Vw{R+C̤kc3SySi ̖(DAWmSH[U?屜[fd=U7vPfRt}-9@lULqМ҈R>Y^VRI);+a6%=9 ߌr.ƀŧaM_ZK,`p(+džz~6=CT E7.pN*ǎvPB&l`{ ?锽cDZ7c0p`G+ F#ZЮ+hӅ[l+2wl/J CŹ9`En7jt%{E p)NG).̗`|w)Y/Fؤq~L೷ U v_Á굖/j! (~hY.RѪp'3.7HTLd:-hot%)ko*-vdEAY h d5S׮OKbF\_ eƹeU)f$fB0ı61I",Q5OhUux.ģ~ViZAp6"T˘TqIлaHg:(''`+S- ш <=g<^͌  Yv[WøbB[vb\0ƍܝbiP.<~׵9/i kpvOVpAu>F˳QD@)qy #/jeߵ{E:~HTyaܵj{_Qg\!3TTߪhgd~'%caEu̚/"|g+;5g,0a}k b+q^6d{㳢k:^pU:`+O}L=K\#\Lh>|~}K-m|MyxY8\7!!z>sЀ C`Q p>K&ֳR&xZY5q{sxNus΃:(K 6WN58Zf!Y]gZ{ypwق#ͽ뾱kX1GnM et'4W|De}I)PZ `y,s'q[)ݷH8%O/[պee2qV{8^P>hn\ϗYe5+WoH.ܽs3yY6"$-8)m'8T!A('e!O([AE# sø`%N[l-?&XUorҪwa8cax?IF\mG ,ja8̀RN~@o|cV'*[zS^ૅv*vof68nxb"G܋" zm8蘜˖}ޚ 35<($`V +Q:qY5 q{^@ 84͒(dX <&ea"3'7Xϵ6slB`)qǨJNXEu@sX"w!tUcU4kw p1bl ?%9,+ԓ]?:=W#/1z*̻fNbYʎ HiZ?!lb3m{<5A CwٽfA_xv!]:SYV72Olh\u`HTs3TΥla$AOU\⪵]X:Il_%g,h7ϻȋ݂͜S*.I#kժEt|)^g-V{ąDC[Mߗt=@So')h4]/֔!`lC琵fJ R=O!07ikZK ruLl1xBʣDQq +H&aq%,KW[:6/?FcWeЭ]g^{ TD4ƱF`=PV^YSڭ^$/;&-g{94QV42Lxl]xY y®O3rENRB3QzByg`Xq ـ[ng0qF ԌTC B߿Jl<C z^om;z=#'4D;~o֔xƙ #t`*bO!.ւI,4)KLhSW'=۱ 8b3XSj[fW)[K6My'+G# U7Zj+C=ȑ(G`",;c3Kj=拫eyIflpme@/KќsڬrdB`µ8ƋL 9"f{Sj7Ö%6"s FeIKFo[r_6r2%@_Nq1j՛+@kˡ`V_&K\۵$aRngtuuRn2=w ^GЏ lel'Y<$\k'q[D" "gkuNWQPXkl{↕ g =7Ѿߓ;:;!导*ApcCf8];ɫEEh̓7Wfn$_utD,]"C8n85ِ֛޳%BGDE9ew 2VձCpӕ@X45MS&*Ƅ<0H/ 7,F`AlϱJc{iI[(zn9Mwb՝0"RcOت/&W?gzɬ r[4g q{)]a_ Ҁ>kuk1RjYuct҄ÖBX`G5r3skAQsʕUvG9Hiq&dՠld`&n(m dOgJ^^A8@ɎxyZx 3396, [<Rp4;Gq]۔<Bp'r\#*wTK!B_ .=v_7ƂWEQFoȞWO{$]nwrzl.wDVi(û5gTO!\~C0> 3}Ge odxz?*>1Zp^$ggqIظ?ܫ 7#ҳŚAN|^*{C*q5z+p-BXGeXE  ?i4+@)bxMD]3_[x37X6ŤX$wgw-4 Lz>)Ɇ?uciR2hpyQU2Dꀏ+>pڜw{"\o/:d5w HόAEmEl(!V'PC^ÄÁ9E@2Ntqrea4QƎ&#Lᩧaez!P6b娐Zigm]fNfXWZd;oxDb@;[{F#P$_;@ F]T7yg]3 ЃV8Vyz%eSc}_bWx6`̃r>Np @fhӉ9,V_ F |].7h`tޝm7;d6BP6:6o4ˎW!ZrwTDT,=W"Rjۤyx;0}WxҪE_`& gG XO' [+d$nxx_gYَ醜3,x ~0[IbDĕ8̅Rmgp pJ$%T LWmгΊ?^_͛sYl781皈1yHn{yy%ynN4i4P oMek;9P,m WDG:,+w1(}/da"ZkF+@{FϘB BMI8˶>p0p+bBؿ f;k GRfD^-IG/;Nғ SՁ,pˆSf>{68t<'1 =s8HMe sL,x 88j]5\@RMS܆L{q{b2W:!q Xöm$v(oy|THHV^bB)Fbmuz>S6DpBeX~{ѳT-/iY^5=qVdM:Z7*D,"q1Sduf ȵ", j8r<39UޏK@grp '@Eu";IkJ_v)Aa#|U/^$>û$a HV]+nrcsoϢݻ{3p. dZr@4u9NgeԆ%[9HFXu|pd/ jnˋ /45`'HGѮF2$dUϚ>U@dI]4[B>m d *b_D8ֱ`heb_acenÒFm#N=6ݰI/#1?Z4[ 2O^IdC13 %)M8ϰZe?aLx 쪖HfAX1r,^'J'/L7.*reXBY[ʳm$}Zفٗ™E$lx&o 4L~%CIn¸^q}ܘV\k2BU?V0 f_B{sL7|/F(4.LjbGAV@z!u=+ksN0Y"5I;6W0-yɅETur"qdKwQ5˂ DdW/kov_?v*Eخ ΄} SCmRT;eU9 E1G 8EXV2b$9CG,3v!˳蚿Up ?4%r#jNn #HJ .ߑ}LxKԃpfe`x=LGNـKJh[*HS\&A%)0kfxO,RJ\8/ReCQi՗i@dR9\]AjWhX=[#Άn},( 0-/~)94 [@|P(ɠSs|1fܢƍl }GẺb}b6@˺=nE} , Щ6(ż<-+ewEb>WdpniX >Wq]I‹d#oa!*Zҕ ;艺ۧ(?,ohjW <K{HgW*qI6UI\ّSV[oN3G(oh̫ +#]$QIliN(ϤM!1pz>`elQuH!*&2H⌕R n w-4cc-^ĩkp8S:`Qƶ):PEof}0w{uQwUuGJcDC!3daSN+n7O2hoѮQNݚuu)uJ2fֱq' iE /0k 6'L=D9Pы̉ Zz]H9 |jUH~'Ŷ- ӡI4'ʶĒY%\hsE؞-OWshޮ&3>W-^b7{q3>:78tYt+`8[y0M㧞Qja/?o08De8.-쳳 1R$vv(`^.`}_k)=M-O ҍq pkúUDãic ߋjN=[);iL~%>R]2fs3rFf#=&nR9M"e@Kw3bֻsU.)0jj|{a5-e ʡE`F` y$IԱ:>D Y`/ۼŸqA4K -eRTŚsu&ܷįlKK]4Oz R b }/ucq K܏s/ߝsƏRt>Ed[g#̒j al|&P_sV 4dd.c좮dj@ p ijA^s2qh5tm +fǴh@#~5^yrvTTp"EaVNwP;v}IJʝ6KfxIQ`مž+X ap%f!ʩd~7Akf?mqHY(8L9ÿ3xێtxgޒ@eB|<gQ\;z!M?t7oők% `k|FD;s0B~6~LkSgo s6_GLUKX^#X@ G;7F.4Xܘ܈l?Y 1p521e֡?zn2=E2[P¤ kKlIx`;+Aj,~P ESNU7㱱 }.1kfʸ4~`5旗L ?VuX0v$pB%=j<Wyq%e(J^tA(qwXR?0YP (Gf%FK:\D a_v '2 z=|tc^q}:ȣAH%̮-%ܳi1CcD.QdQ?PX]SW66eo^PZXT Mj{9Um3\lJ,FjOH\zٮ?2GEqdäg/ W>yU GP A  ZjX(w=Mz+*eIbUt hj/=ƀp _nv3`AM!Bu|w5B2>,Ow$WgNFf¨$eoqu >CFHnp@Œ%Aw!9i5aYc#^nHyyhs-L#P?p7rE-OVK=Tas+BR?&Xא1Hg¤UPHÐ lȅ]g杷~*.6jd\gpEAP]q`,ClR{>bŠmyj^\n1We:4KpI\oxSx-Lj6|呟>};వ?kf=#4*}聃צ޷F-*Ĵ %8E 2,\ZU'8-h8?-۾y4~"gl3) n#b /k|\R@ȉiߥޑ\ ڀ) 6ѽ*bDgB'}#hL7^:^=N@ƞ% {9AI:g%f_n2`'HlʟmdT.?Fj+;{nnz/rlnIokX{,23U&.u D6Jh`U{+E)75QGPnɆl=d-}XAȰ%WՀߚ]ajBnzAkn.0-vTlӷ2IJju$ROGt&|eQBZ[rro'ฮsĚ1>[_U8z0ɀuD>hfm:6~=Fq5BYb 9U.)PK6U?JȺ:({ait\Neiy?vq$^u?$H9W2e=ŚF )Cm~BvpAzkħdBUQ%ܽ䕀*&j: i٭芐zK,4F5c cX놞rQ N gaHo5YN섋 8' 墴|>͘]*Tҡ+hۡ],~zH|wcbϏJӱyم.d}4=dl G /mQqZ+i{*NU'qW[Wߋ9$b(DZ-!Ueٞ YSm(}VN&)٩5D{{Z; y \Zxjn?z0S4Hv|ԧӰ_us@P;r.F/S?NP3Ӣ\p55ᤁ\ J|%'E9M,2~-l") "]j)OJQ^L[CfF`"XJRKXn7uϦYeY+[Xt_{3xlj&Ax0Ղ^;ea!y +#_Ѥ}k?քThEcwv|jpG%n\/$gK\9J5]ʵrşn}PG߷"P4}i6%m$uKXX C'ocrdqh8+f3]m|l5a7D)SC$x ;eFTB2q') ]H$J.W[x] 6lNߑ`ɐF)gg>+xQ{RPH{3% ]Y(]gzCE17.]b<;`0wdp̭}rΐALFZ }0$:<ǗE ^IKF4nZ6bkdA!zo|)FNklۂQ>OliE(l+T_&@$FdUUñZ(\4>}= zF1Ȇqim^ ;93en e#ou^VA2{4ݞfCF)*#(@3}B0-Mj;=y]FQ EBXbϰgVd<:z)F N_>pHo}@{=h?w*ש, S_"n7Ё* 7aCF)( __2?H&m uzoկ}{jgj?ƒ[ <" ? WxǺcxGnsq FϜO>02/Ef(l&4YןvV@'t"R A H@{Rj#[`SօI4ؽ5+k@/`S ̊-cN5;ܥqDǏU-o~mj?dz th~*~u΋[XQ]`c_A0eMa+ghi,=8hk6 {&ހ HDZipPb2L0/AS&_ crٟ3]IsT6dBL/rР3V '~*S[>P5Y@ZˑMXU3v-=Ry$Z 0 .:ߖóucSæ֞ ]8XO/ g Q{HOE"~j %jSyw|v2)7y#@1倈^)σ!s7 >*zfqNƾ(]cڊV˒|OŢIZR ]=򽹓Oa?HX;uH-^-75*.@^EU݁'c4wsk*YVXVm)yL;E{4sjؚ7 JE0%D&16q]E+u[-8{BE{z59 £lBI]ßj-]jݪV33 ~vG{7`[T"t"5~)",sM[aO?\>a=>!`Զ@c1ܺdG\d.. 3S-g+%!aC99#ܯ0|ݳ@j@uݧo EQF081"s(-U]wS 1>\1j䮻g:CB+3tx*3/s+Nw{~/WV)_) SFYFaRj;b!{,zdG>ݸ55O^)tߧa9EY$|5O-g{AUWB_4ZU[HN*>DEb硓H7]6[G'(7eK$9&rn<~z\ cGz:#_#EϥU>ߍ{q=lDyh)~.1lz\v~D\BHC!g.;XmW~wM)Y;*!cU5RY#ChGAp]UoǜI37\J2] bJ vU*qg,zbk)  #_/3VUPfcŜT6M ΅뒲<)iy]ˌ6[S[MZH\MQ%)8>jW 6hG1Mskb t+kgQa3ҌxRV П=(w H7kO^f&b0+<|uALж2!A!!dW >+*,u9nE#.|3yffop<jrLR=zJD#SQwk³*ǭ,=.>G^G;aRlEOE'~k SdkXK7˻{K!{Ʒ8̣N&Ճe6w1i;d1Azp,wۼFոT&%+mͩ}ԕYHba4Y Xc% ;:?pmt*v)V.jubAWxY#MT¦;eF?css.њU8+[~"Zc!W[2Uu-cP*֗Zė1cqcL"Iyז$-rƘ+EWBj".CRSe{Դ?R-csS9WԦ[*I +WeydKx#83".ǚ |[ũs,Uň1 k˅X,0:5"*dcPT.c8mi 0z<ϱ{ο${k͚\l:D_S/D8\#䞗9-yң:kfLxN$Z}TĊUx'eߤAqr¸QD5nQOQ`Ck@=3ߚ $Ƣˎ'JLYIJqW rUm<Q-O՚8>tT(laK 8pb!g49 ʵB`@-~|2 /k5pFi/SVV K.֖!U 4a]bq"[Jib-x_q^ӵS `:E#ۭ<5v;(0Fv'Eۏ \6ϟ!2N(K >>,k#>>*{ENemQE-\+-rX}k?.V,N ^ճ3ςםlnKɫԓ6U M+7*ض9xSV~!:̼6MV^(v'!ѴXT~pFS2üD;8E ebtIVM8#3i`:+ ڗ3@G܍*J]~_Igt튻w[Cȴ`-iyW~U|%Uw0l h @W*v/C lUaG)`+WoR rƘO cQLY|ї6ùdyJ_L%1~) P" FFǜiZy/ bߒވyp1EF^X-Dp 3"F6m$~oAg6*~y_x7aڒ+LD :Ǎ[N͇CdLՖp"-eѐ=זY-;x Dvs},1]5lmL,$+YRI;2Dzȡ*Wr E&״j!g4[4ԈH(=ͽ|ףE6wU!a;ɻ~iN]}DGPnD%{RϩMU~UcP7WMtyw0E"G/6 }T.Zq8)XDqH~=ީ cW 5Ũ3S؛?ݰH 1h1B&wJ _0_`E A+`!'\S5gF*^5[0q_KAO鉟7JKc- m7w8I͂ ]d>o_Ř!q JP faدs!/rD$-݃ \!Y!v#; N8XM4˵BS) U^u59²–Qpe,uu~& %8zuTJ6IŭsgQZ[`3lM *&9&@sk {2|F#B妛/"C60 G<wR5czܪ0OZ ޠJzSq1dؾDդ, XnG修9Stl)&ar؈QXL7RL=kB?\<&6z(ǶcC0Wы݀eu :)pAyaΕ$pϿ^f-N^$H=2tGS-"oe43S\?R 6LRTX1&ɉF"Uvs3#xv ѭpZk#)B9pi!g.0h%' N6= ꃙ_vf|o8l9( W$"%$Ր!t({AL*#+w; Oj$qx 3C!jKYLYRw[:*xHt-LcǙq|x8|ٽ+: t2 1r xԑH <5f5_W.n=\bbԚ3mr.p e.cW73su7BT#d\f67z$lHb G!?"kKp}l{#z=!X'MYyt+9 Œǐˣ?'Hu)I*ٓ +)@ ÙV?#:Ssz]c%FqಹGV詺F?z9FYGVbM= W97[V[\#ϭ 7k=EyϹ86>Ww՘-xHORYf:(2I*~{-Yp0B^fwHbjpS`x~E^ȧ ?o1#EҟVO¥t[i&зڠpEVHW xDfqGU=P}+v|Rpʍ݂M [a(:(nѺ-9XGxYBs_NDWzrn̗ܷ{w7F-߃QPS% h3"jMHff5k@CD^aD%aIr1TU7ɞfO)QwZ;jZOEε1.FE, =PtIu;rȿ G+[)<ޯpͧS#3J14weP$ve0ӌ>e(7Ll3HYE CQCKbi|+B Hk[D`Ia\$+8ALRf UlP9x3bIc˻lFͽE2rYx]! (oXէ,ا z}(MIнjBvb8{-H HCcR ݃u3kU&[uf&NXY yY 7K 7_KoէMH-,ĊKc'%{@>1Z6 jBV<> nh\oNv#⩅_?3ơ!XrK/T^vsl 5=&ڄH)7do(M 8woŹSf ӿ2w+v4quda0 "PY,mE "&CzniK#N${H;WSV,;#dOnݠk?O59@Ud17u~U'gSRi1% Eo~Ce HB tv*k*qhм\݅SV7Xgi9ɯf5J.R!21W#avb%l%!e./HДYL"?jA殟ƁL&@mwŌG`_Zi9A: ɝR _lj PuZd=_¨3 ڬj(uv`7J:DX>Q1c4=Q+w.5u<uPBȃ+ u)CYKXBOj-eFB,B r 9Tj7r%~8D /LlaGke2NC^ y~cΩ TNik@:LuLA0'v}&]y3ۡm \BM: HYeO|N⸮*[ɜ Av6\e*<߱>`Ln{rv[?q>"+f뭼}zx\K4⼣iXH^mba{Adk(_uA1[KsN=_EBRw} :P۸ JSEJZ!_0>ED! ӳ1CT!ZZcX*y)+9G"hU I{+1O%R/̔*H`&PȚh;pNgvK@wJ &FTٲS OeVB=vd7Ԗ'Vj&\߾ COO[˜+54߳\_ jT&HFfh=9 WZ1cIz/L-|Ahsu %.w:6`SiL!u]l|N{ +-' $g%y>7*3hz1R&B[1j=%.N^nS佶ORJJ۹&绾GPqڻOB\O؛Z2{T(qIe#*D ~ /%e(>I܅e8#i3c܎ZsG!7Ӏ|S:'YKH.~: X_R,~ w.PhLz6@Ȯ|Is`gf}Kj~;[s('\y:l=y9SڈQoІ_ǭЅ:j(jm , [8n$PMk?Hf27.wI,Vld h_~q1y̒o=Uں htHfCQ\[ l4G&M?.Iv$[ӈ:ݲ(:u)WM˩_4P /R~[_Tor5:.:*RzoJҁM˩w^* @D2+;t3wIJ3r&e.i=c no썊Pbe` Ic_ea^oܜOΙvj2*S#5!􉀛@;ex8T An;>C]-$|VNo&[?" 0"sig4&E>< EmG1\Ag`OU@OZ쉦Eʚ|d[ԗxdFnSi62`,NS=g0AQ![ M2ĜAX[ vTw80^T,3^ Ț$=FM |X0ffqlvHaEBJvI/ &m{z4Ĺ/Sc_!ii>֠|o6h s+7 ƘzGkF'BHy,Idc]~ Lf<f#M9 C7j!ִ0 Kى9w 뷆RmdbZck+TN>bQ ɨ0)A ! ?ߟٴCE]Ӭ\k]]9Z{#k"XL֤_[Qrv%-w]1T.֋J, [pei`Yn/6j wͦdZ4m'BOpTnwʡg`ZbdzÅVUAgY|3})jd̫}웥<8 ;+ɐл%eȥ{x4adj?EK۠m1]/K4dt9۳0K8Xn7Be@ƳGrLlt#oC+ht+/- C֡B6qre}i 8o| ZѢ$:7MNxu'>ͳ,"g*6=zb2ք_z _#?U0hKn烹0hJŢK>}LK88EUWf@G$UZhr$&{\x .[FĥJI$MZUEkbL˂L ';dע0F5/-t=*ˤȒa׹֕ FXss9mxBӥv4$KPA/oohp]df?t]TESɫ3nxn-@.Yzˈvz:e|ؒ[?;Fj` ֚@ {r<ahX' M5Mr4O2?KWEf_P^(;siXy < HC];bG4nt(. t1mu [e\E5jj"d:gu*Nv<ڏo/b ^m@g&`{Y>7_{Lt-;K8馪+xW;f:0MtuKîq~!0? cS%P?+O]6{zw2uj9 \iĐy##@|rzk~m U-2>;ʭ&kF@$̗9+㒑KbIk^yeRc yb"Rgusv)jY[10X<Ū: MsM]AOp"pq-vjh3Iغ%F<(s>~c!;d1m7QM%| pVc%l0vÌ(2m<w7BG5]zUtWW66X˶ҷm Bګ]wGQ!`nݦw7#1IhRhCTbSPn7V9y <<~,C q٩3 lLqE3L<1b䵠2oA c١-nt{;}sѿc#ƍj{+xSRQMEVNBC -];#ʾr78 /Aĺ=_24oct|Jρww܈_oYxO}nf6N,'EiAIs`q_Q/50"d[9FmʵJG=z!YF5.J R=6aV}SwlϐxXOE~Zto}U9綀Xȃ5?3x!-⏘|p /F'߰7BWcxjWm_V/^.׻c7YZdfgsꀲ/bM"׫J+?2Ư/D_"=/3s-1w%m`Ӹ|!Osáρ(wg';ǯ ~(}V8Ժ}o%<ƺЍI AS4"xHJA*ɇ@մǯcPDC,HfBRYzhekf62TB7ט\}nGp@I k'L8JE[a4|?tk= ?h Arah63p p \7$t<Sl"ҍ{I\{rL#d,p'G/ZZВxY)e?} j3CHXZ>޾ U!Xk"~'|GDPa:_mr̈́6Wh!>g ІWD1I>a >OP(JxPZZ) gzom>|g1f&\z>Ɉ9y}uw R“աPt(^GcM3=JUt)dUxc65z2ᑢ/+~~\"G7h<PaPAM$yH+7^~(VM*~ZTWSc:Ʉo#&h?E)oڕve;ѣ:RT0qJ: _/Euh%u@!2B׊5#r$l {Bꒊ֎͓p49m2g(K,Cj,kG< kb1l 3A"::&Ʋ]9DE6Y5сz? M]ZV91V O`BfJ̗&/4Ch"q@2]=9#g59,j- %CRiFtMYff躅ET"0,c:06&:A.Tu6B1υeMu-xʱ èzAFD3a/(,`#g'2:fcpT!>;3O(_e }yaHN믘q:ȭ`l4'<K/uV&950$_Hf\Ҁ2z,"3ox!6(w0aODe|郞UCڋʄҹoMs&a'%,dnyI*K_L>I8̎Ѽq?ƈ1uҨ)WHr˧|TP&/jü74s[G\Oԏ A ueuLoMCy'ERe2'rG8? p%-gi )23T&4 0krPV;[9;QV "LқLRvH/YcM/0ldAՖ#) DhQBC<8AÚR>u:J*o1{jy[y /FNq2q !d9|Z^v :(_azQ<UPU9,3VNt髢Sqѻ1mƤ?vl# ,r{*GaRO뿀岠R _ǔ8v8> Whzw$NyH4P@uG:zm. @P 1֚۵Tg9fG6nzs"G%B~;A[ ^p5K k:YG4Gr^wM R\ȹikI:69ȂRH>;/BZSeu'f:ف-{ݻcOTac<]j/i.v~ ^2jq_SxC[,s`rtBG:5g#I٩NQyiUK*IEuGxs+`TIJ:=Z^c|?szdxn (] e4$ :P/JMq6~bR Ѳ}_t^ODC5+V _XBI,jvl}e?,sVgv)!$r.92?!rc h|TacߢgW}fZJu#%JDD+j(98j 4,;H+)U+t 3?//#EȂ^5 ؏P-2A"g&i󤝬} Z ϸ 0D4`d BRROL/M9@-J a֖Nn=Qm0 \TҼOD%u˪J) 18aAGw1oօk/Jx*Έ`u4X,j%B B}ꦣvB h =äg7f uKZ>꣩%cS}ُL_{eADWT[9Q;]C EJm5 r6@=([j$i̴*w3yx, MxdE~-آD dB,/w(dP{+D5-?rIt10)G•n\ԭ]Z:U4^1_zؓ'#^uѠ ifs9GW_( 8q2卨`c,$u 5N9 hs5U&p{ՕsF +g5xDc4vYi+}ѯo+|F i tZ)(Vhrfx&r~hdq%~\cn=`z7apLK 5_xۅݣy%_=_FgGA(`I}-*>hF#|a2`^*VT 7G^FC_P ڪ'ҌKnhz2Ic[/Pثo屵&D40l6FL #5E̷񗣔Yfi lEalBp]x%=J$TDctЖk}U*LF Y{aZS$F I1O?Yn }dh$M Uv:6X?^Ⱥ|KQYx*ՈY.eR\/e*R rs tBS&93v&H1Yb1."D1fh PFw>:ߊ-u!b gW;sBRV!WfXVgWr ʂ̂?:|3)rpAXMC(U/tWi{H&rCJU86g,oKdٲJB d` jm DG*%h ;ͯm_9HrF%DqVH[A8 -=E;r/RqeŊjcqkYQ;cƺVp`$pB*Қ\GJ]fV4;i?W1ukͿ?JNc;-(_{y_^:wj5ɖʴSҋU%>_M*dx#dU|^Bz.0;EkrAjg0|IsϢiߜhr#ܟ !";݋|*VPzcڜ˜w\3g4Bu7IwD[fGmsdEG1wLw>"XL7e24?#98|Ÿ|$D 8[lRϭP,/C䧁mo'ǐPg.| 㶻k+gxo|M#_=栥sFR@*̫7]1-Cמ MsqmDmqoWLe79KZ*;]W|=eL!wcsCȑ7t' hwSAzc@&.CEf/k/D,bMp[~׺ ߉ Kf,ˬ7yN+)͢3*`ysluCU?6N q w@ (IKmMvt8 Edq#DWP@ӽ$nrJ3hdos7 ^fsWOs_" uaՅs)U䲬Hцk !Ķú P3"BˋC }EBQqKk?RQoĪ,dSL ۄa锊"˷FYmA]A4*֯d\t"7 HX`/gC*5k'hLȾ;6Nk~;?(FAhW*+(y$ ziOBkeU yuu 2'7gpOR@Eha kBF0^u@{֖oZrICY+1Z툃uS<@ *+c#݄CLh,^yӔ~3'In׽ôƀH+>+'Kp͟szaݓ~C7n}v%W v4U'VeEK.|C1yӋF/`;x+5+A{9 t6qhy&R__GI3zS`-=ݳc8A٫Ff⦌ rBNUXϠfrDĽ!8Ly l r.ɧ/4)phmM ?.˜h!nbmI-^a|"“FwH?(4٢Ƀj 5R4| ]ͫh 6O~Wˊtb鯐i8] i"j-;vsaz^OI8+CEn# ϿZ߄ eNfCJzG9NşkP:'~>{7. n'%c@m]"wQ<۽]%Zg Q7wrA< ?UB֊u.h)%mq[6qMx^F5p!\~0;_s ,J[C sa=Oő|pi5#oi9t"7͸]D=zZ(fHf᫐YT2zw;6l0Ücu5w↨zmCP "7IlR6TL pj|=pa 4u]Cbhfjl >K^țqs#&tWGcV~50 c` ) )klwN;`/ f(Xa gie'OTjpR+&50EҮpoT,,-9uwx D /0 F Jn, /.W*4xTA,u^~Z,ySc tL럅ڞc$|tJ:/μ4""'}zJ]W6yI$Pn<+9+"⿥ՠ1 0ᾷ'SKilǒ2Yjyۚϧk~U5]^qªyVCyoUICw|ka(YSrIQyBTH3v{>XGyKt ֞%UKq97]D..)aPQlު|LtrT/}Ӆsˌ͓W~թB; 2_uwuk3=4v i5 JP" t<.q|!8YnLo`QM&P^&!n5~~mg 61T4+D[=o Qxa=$0f-ܓ*{; o)" pAYau=*S%jZX7r<*8խ_Sfk(N?gbo\\j).&PP .SDqq6ɷ0kTYȄH OD p-$Wc uU~]XnuxH>13Z4rt;χˠ'dQ3朹[lշOX:q^ǸPdW#'Q"; ĐDA{PIZ(SO i@-`2*܎i}xcO$|)#~'WܮM^/<Q[47'b/uӽo1jiXjG2`(;jCӼ/h3+7zun(!;@b/Lz3nX5.c_c ޳.L( aa%F]0ٰht mi;BgLzb]^:pdFzռ,]i ۾^ƉgQ|]AZ䨵 /Gk56MZC wz[㋁1Sk9SһJ>%#RaƁ(uOs"^3V_}" CTDT,pV5vD#y ~ ʫ@lz6MT޹ct]d=yȒ} m"=9O|kr|><5f٘Y[+pJ4v|ؓ6a / i" ǓXGq;~5(D7|m.K }gfqX#vI ]"5x}jF 0C|޾07K)U69RZJG&gq l#ECcבqX<[ OĦ!@&ɥZRu ֯F_CEB^;ϰ532'4̫T3 V4K l8qKn'K(uΚO>up%"rg_ck<묱e:U:''lKPu?@-O\ 3{$ls?-!n,0I{& HN|,l:X$RZBqm˺l%t"E^ XëR542I(O/@o[!;`Mؠ_x;&Ӡ"/y;l7X ,m3%ġiqiS,c2M lbe F^I]<"|0crvlP|Z1U郻 &I1]FK)x~[S+Y^vmZIwZWzjՙ@7`W- UEpۤ{\( 29[2{ 10z$8#sK9Zr .Dg#Hk$/TshUC޼348Op[%P|@G+>Ac\VO ewѓ1j B"[(g!X:=g]Ҡt6QPi Bi?Xo&_-Kb#vM j?b_Tבq"kWsC˸I/擗"X3+Aƌmaץ2`ی$Z4S& _ L(rrT փ6.ahGyqʵxJjʩ-}%gj<p̫k64'0jO8yfu>Q #ax[ MN9)BƝ (ULxbUo;{'$\rFGGɚRq#jTH'%Mp*bQ4pcٱFctnR%nTP^*ʋso罱uYnJ"2oKëfT` ]lB;R\X\m}g7xpI䩻-u:ςじBEgQy)ޥٶ63϶^4v$L@Tcd\io@ \l%{k~௫zۂ"Q8ۂ۷ "43Z(1`|,p ,^lwo!F˭* ! zaY1ckإ_@rHKL&l\de {յhaHj2<&Xd0D$Ao9, 㑿@^xnko^ٝ˪u`*iҙTNWߩ$m`pR Ǩ#6O:kˇ(q႘q蓭K ߴbWKU*/0pqaT=g;ʠ6r>pl#:D{x 7XMsL{ٮA=a2LoMs.**iӰ߼8LNEb g,#`UF1Q}% aSZ @ҏ%~ @f1#e}\OQ#2 Ѽ0otԎS)l Z?(S)v$̤,1+d"Atŋ ScCG43bWk ݼA-DډSE<%@4 rD?*E_{q SoM}E031fG:1`@Ke2l[5sTL`8!jѹk̛{LaȤlc4Si8/*D2esdgM[oivT \iM40vȪYX[?*,]P;&[ǯ|YJSZVd[ k.1Ug 0SL:Չsi|\KٰoD’Tha!/l/CWykJ?u/Z < &9}H-zi{2?T|Mf*/mOќHH'*]vDnOQd];ㅗz@'tJpϣT!}EP,tWͿӴZhSPZIHd:ۉɊ.p @vGbW<0*KmxF%!2ޗ :NdtS@* `ﶿ`ɍuy e UAj%9 K0oJjKQ_8聮 h&MCQKV>G!|DZXkwɑ ~FXA "A`VlS^Y=MWZ{=ߥwK{dlm}OdZ˕#ӳ_v^-GRRp_vӜ6sxꥲl#ZI*\%wsb*o{uߩ 6=)hj-1t7%=QBtx% 9l.nЮ^JRL4Q,M&0Y]Jۧ)bl<ց֘K<Z-Vy4`p'-<<<0 af!Ŵ.@%lrb̊ bMY6ڇF~ǵ ?DqPhVl !CQw_C7W&;}vWt4ZށBT@5G >M r^DZ=2ʻ(^@ 7 ]W-ʇPww EqzO.o~uAK5Ke4 fE$EL$2ʂ#޹'r* 0ِ-\{BO4#?LWŭL2L60#*7m^c|} ywa:üscnyrCҎt/1u=*/<r@'ʔnhڦ $C-`YL?8Y{V34⁋йWuZrmP O;59/7&/׆% 9.ʙ3H:jt #KZ"<bn~*䕔-`) I=Ѡ=lSB:}X6Yx xzC+3x! ʤޭ#p瘫 ʼnB)P#|l+|_"!X,.۳GS5E^瘄*n`=yЄ\v0׿wVlķrs$*ޖk$Rkc禃 ?6"99Z9kKX%iL|y o_fj@ Iڝ ܤtwzGZ&pL2Tnom9/'GtxehdzCb~f%흏9!<^N}یľ13OzM^^%G';nh&H40(mQs>N)I,٩y{ed'd€4Jx^u ?#B0#i\sDf;j2G\j.ec>kI8|("C" ǹ{+D?@GÄ^J0n? Vd)Ծ&v}Ubw/t.@fЮF(>< Yf2q; ^)a8eg-X!̇e[eR^s$Ȇc3S@o֍ 0 ܌yLT8 >*1:?Щ]heJ%LE+!a O '>2 7b(J¢0꺵Qެ:>'s'Ecu}d2V^0'릾`( o1|yn-Rʹ\ą~%<y4g_[\JrEQm TVa`f vzXx X"dPzէlFãw@ I|n8 2cgx ]CUpw!H.{Fy>\(b3`ŧ$+ޭm`BcWPKX| Xuzf/4OG&5ӻݜBUa~k2oJ} ps*tO[LK6f@5I"˸$ňeD^"0 Q̆mjtl G;t1>_Og \5UՇ=OJ+}+S+KKKC\x\cWQkdɨ ->0%|Iups\8sḡ|>׾zILUK >Jy!'sf̈8p >:Ku^!3r]\hTX8ytzyKsoۉ }dA/'JZ8)?Q)yzdh#5!bўg4!l@?Jon&taM 2_wVerc$:PZ\!} `}e)dnz!:Td i T]y8bdEaq{KS2dY5*$<:QX7T+5wڛ =At]R!E\r׽bSk6{_zyؘ|iXpǹwK?f qV0VLͷk+Im3zd-pgw[.KܒRXW+.z3.pgΏۄӰSJo¾hk/Iش7B?A!{ R*ZV:4hQf,l:Xs>de^x?'*"Ѽ(%W%]-AVz\JugS&c;\SU|C_D;C*L1zn2:R>,FP{I<nR7LRW*~r~~@=/|uoHICq4 /iρTGhNAԳG2`xe5 LUс^Aᴹmgu Wn}%XWJ}F*i0^k^Z]# n8HWz?viR5oaHF7NT:S.QDNp`#߂@>M2*{s#t/WH&\Fv) eԫpJIˋ{Kfq0wJ@ZS`zخhh!~ER _6Ұ gŏ1p̿N䀺~Q4fKďCj[,x H\&wסHfy3;W_@/,lf:Ǔ@@s^wt!^b*9;`}sӁ#`m[ L wᆏ߁A,JJZr]sdK\U=iXx pcL[`6[ZJIX߲M6aۊ1p4TV$XЄBYRC,-gk'RwTT6K.h<&Ŕɏxr#i#!N}^3S3vx𴏆mJgk\- ds^ΰwn2ҽ[[ߟFj[0mHQSQ*Dnbg0xM @ u<@aF:|sc. %d*fo ^ ﵅=25IX*^ͣhs-kоm6l=`G~L>6)zŞ+7P2c[a *E 26A#%+쵤4j9|0`Rg ~xpNf9_ zΆ467.z;',1KJumES_Alds}$2`kG w{ d+Z NV]$6ء i2",e}!b8]9]jE~[:zB +OA0‹&čRI38WtڜL݃*jYymQLXs+pޑr. ~1)y.Nuq /M(P0tl$s,rXOKxsLjY ssA4:7p& `.Y T-՟i z=!Y5jvw1HGh2?0o h?a! ?7C@Br=s,Ez2S^w)KYCvſ*%+fy =UUMJ6Q.>'Rcǿs2f K(ɨCgC*a+ЍqЭPɰliU- \*mCK e.PGD{R6KŝF㿴h7(ua\4),$m!6VPġ<-RUE$2siH!<^X0npFws%ۺdN@ ? u.1kR \;Kq1=!]v^7[(^;IzqE~F\lŠW:y;H,C>؁"p:Lؼc#Nj0/wեӥ0{ب'.dh8SM5QI*_P { *,FSBbOuhT7o+YM>'zGG7p#Տ ,n阇s„~+9A3kj/o}>Xiٖ?4??_;qw/V3)fZO N)VX5їrr)HcM,ymfQC4(l֠9 vY:"jNB::wE?tI $?ԀOT]'M;Dܶ*7n~ ~}lI eӂGo1A^-,%v}Gs4+A) 7c[v܂'`=:B`W.p?ue%uްw?m1XZbK ά#dلl7QR>mp&CTg^#Z5F-QfA~>\P -߾u$-'84 EA QQ9`}n~:I/!8,SQMēlܱ y'. ܇ge ^-L!@W="m' ''-! V7xgm@\!dIY'>qel31$4*aH%gz@TCx)IXݪI4~N06Gڨ!:L@6̷pVG=xѣ^$/}mU:$t%UIΥ ivQ.8gsmÍm.͟e\ f![b,)l׼O㡶,Wz zr_S չT ֧)%vDwpЌYV6V-^<[(90 ҁ0Olui>u8vQD;g)D cS$C{d]RTP3rPj%=ئ o ϶e;xZV6ՊƄj"XgS$_Aؤ:fȫ8Q!Z6`YH5Rݮ dN@]9{_M48ĈilG~EowamzU}%ct%}=Ɓ2oVS#|{`MҼWy0EĚZkop+? EHv+ob.&gHxj7Պ'q+Xɸ~.ٞCf6 i~5op5pLuM#;;oFzo>t n¸b=@XsAXzf.d46'I"MU]YC fJa6׺U'j t 24Hk({n{`[=X751c3k"=uμ iRþ0㋂+K)w_z-^޼S& ش `z鯉:5V#QB,n4QMXgѝKrdEhRhBR͝>[ MI9#ĩ2;c$b٫(0O 7K~J'6_!7wH_"CL:R"$-EM2\R9o sY@ \>%MJhHD7 ߿5q$d_˽aG+Wћ2I4Ŏ M7#l>MUiX>~ԪgY|gF%SLB~a_^OK3ۯ!2ǻhaQV^7|eV:`cP1YR]+7%Oy,@՞)ݷXқ=V!U>K#0)?`xeN#(2CQIk 9cހǼFLl2UK)g-Y(b.E#qX@Hq" [ F^fR)܊VxJ6v'H(qVқ}# *)'^WQ-:FEש޿*kB MTw$\cHiFNsCXT+~$[H:XJ >NxFtOS%v;OKHWh`؈3}+h5m}yC61w-\7®זf 8G 3UZɿQju <+6Lj  \ w{;8/-xܮ'P>J[&qy_*g* ] [5V:F*kus\  83A#E-%NRJAWb5; %[fpx.O,qx.MTnP;^n]n'9n,)k Wikx,b;/W{[Ŵ`z*ZbǯAkF*Y܈FD;uS;zN@NV?jE=ϡNXA zR1!E-Ә{:QϪ$ ߐֹ 9Cׅ^|&oU^aBqr{_d&M /Л~ ՗4FBd>u=&]Ism'q?=lu2-MnO)*ceOm zeF$ΈBHڜ@?=\8 1c3~6E+]gOOw^Q-("SWmT#!zyJ!uƝ {BBWBL[M0IёlHzʚ( WF~>1R_!4E4-n>;R8O;PׂP~OʟJW0VON[5UP?{PTB%C퇧6oЗ=翬76M2,2-喦it(-y] sNW]: RvNJ~*P3"p=ƝN /`9)ߐPR̵vX.,v\CfT#(٧'PBWޟg##N,-@]A4)vՌqau%eT[<>94ʞ x-g͚^żϟvjvIg|*b%`GEz#*O4cfȏT{/@F~rSXⷓI@3N]|Nm2,}d$hles7 rR֔CR=ʖb0yw4#zì %ITe~P  ~RrjhRZZNp٥^ϩN,ن<F;OA6Lܺ 4v9$\*x~RqCZݦXI\fh%3 m&YDP:|Va 7@״)瓥vcCdD2rF$kvm_@ذ #´,J8/ѧVuhlITKfx gZꉐְGMOc2A)D~mX ) #b=I'"* GcZԧ;\.Xqڐ6F'FTKxoV'l|t o1"T}5.ZX+/6!b !y%QsV$D&֊UP|D" ݁R%ΰcM`e&rR ĝ?sƪpb0:QPBV\V kkO.{v>ŵhӿzCJ_D4bj% 1.?mRVطzg俔o 7뛦ԴvZpI #V(ž{kA

w2#FO'~'.#&-%|Dɺ0}ԔC;9!ӴXO'L:x2ylT20-;( ~'rx j $%;vrfcF5tRT\kA53;|H2]uYA6BTGN kS0]Gh6!Tgb̲x[x{ uvKX_Kͭ2(>?̥p~4`V<HiW)>'4 Zy,דsjsӛl?DFJhYtR]-x/x87ֶ|uJ%; pw&znr4XB S;_oQyLa G#&@3TvF:dpNud2*UFuIT1p [!v̕ݡ3!qz o^8^I m8c}T]wmV=) 6{Q%3@z'#nd]oenXu8Jf/)5ܑخ5VSu%h nDZ= Cx!Et%JH0->kZ6WbwYiV6@?CZ9;fߒk?tm)T)`u:{)&p-N.QG{u=iCN×Ίeh! j[aM 9{q(Z9I{NrOgE~1,szE@U@u(RT Z7jr݁FAGkfbX7V/̴f&ʺ%͂Dt^+(N8<:/:MhskM2pˉ籠[<Ϡ͎^f hŷNxpL'_U|n%~pZn NG07k|[bÚcѕ֟0j}t83H:Z^.p[(|"l| @:#%U'4Uyݭo*0y0UB!5kl>\森E1`p)>q LN7mcFʓ) %  O.IlAP Ԧ)jAܢͰ=j%A*W@#gԝC' k7A<߫ykE-`Dl*RCI7G t\MvG t'}Z.wA1-Kóri) C_ T)FW?=Ppf Lõ m{=)eLf$;@{jT[lwDל=fsQ %e.zut{)g'IU!$?XA`l!`,-ra Fs6Ț2fqĻ`n1o\$2&)I/6K4@s~ ޫHYʺ"6yPV+ A5c:xZI5[}g{`xX- ;vnS_'Ȏ9åۏORX`dZ ZyClNCk~;O А%C 7]У6l5w鮶ߋYgi8b~kaƫڅ|/s"m<{%u//DG͈^k0gA44_ r> w[X4 kYwV6=G#-+`sco'I#<);ҕ#wSt8:y" G?_YzAp7%Xmd.iL(+Of#٬%/{TA+"urp_ Ɂ`6Ӳgh]-!yf& 8fy%V;INnX]`XBI(<v`f =WB|1l>?cyzDvZȄ:]ЗͥP)r$^_ˢl]wN=>èVOXr2>.`K=I)dEr=}CwAr]qHQf3TW54 ">D;vØxEV.y5<3dUn b-GH3ETRG#\V!_ D5h^'3"XvtW&Kc'k:NuNIlI ++~H*Ѷ>znu#*ԍM\ &lэ@>p۰2(P~L$aDKC ,1.8l: jÖUlKu>j#|ďRŸH]BF5c9;NpJ@%PQ(Tڇ9_Dj߁"\.ۡq_#Fb359H0glb0H}]L^ThJ3PG@F!RwYua^5^/[AF+##4;T(hDm ء%O8kϐFN^G6>z.<ɪ+ȚURV_91JzwF^6q o^ K[1#/-\.+I-zrO^ ӳ IJ?~;XWgT4;+D&r}TkH_ 9fX'|dT{O?`Qyᖖ)vaЍPE-/`evG Z%*B Rj u\MD{_0횱6.$f_7y}YX1Mz)zeL%zHHBTMfK@4 G{hLC!j< $ўZwyH1vp UXSSZw`2WmEs'u[rK-,\i}Qa_ϑSaE|]<]/v@*3&ƓUP̟k/!n b ?OIZpONTa294*3?yKf&wd0 1AEm܎kc7 V' 9بnrG3ל"lKMcT}s&hWa5酰pN)Y<ݭM0x|E:+ކZшȋ73''CFe'*dg) )~A7E>Hm}o0?lM™@_(pg)A%@2E$zqtVdXU j642, 1>@J_qA+QhSV~,v=Is\s^Qg6T2 5̚Ců߄@47uԥd7D'+Ʒxj'X\#D[.zp> WêGg\Jq7&kAkQ h8 /0f>x{f l%squ@0ζ&&FS%뾞tZu_:>]S7Kz[\/ܳnzo7[E^-pԀJ)l'&Pg `k%3FL)5db?C_ʶM`WlTLAx&cH]A˂ -:םq|wSڨʖDtS1u&QGh,r6aLZ`gKUn}'H3]@r:s:t%6y!} c`/ ǼGhWd,:y}TmѾZ֒f)Ekto ~ۓb>yJz.w{o.p7e6BvQ.E> P$} WɗS Cԭa,Iu)d#4κ{E-Fܟ"^J {@$̈ o]~p򦫑}}+s/g?dFi|q,axUdgJ4|N oΛ_e;\xP7q"ii<}nʓ/:(JH8YsD! /(Ij?w?o}kcۙE&t Erm ȔL}͸_Bq:1gz$ wJ=O 1YRgO2KS(u#qVsv]UOUC> jƝlw*Ob? jNibߐˇDlhVI,kYC 7L!aaRtsAFM7)J!x#t5f\m]묋@6)\EIގ0d\`. 5PtaQB\>}`HLdM-T pAp% \XzГ:oy'X$GW qRusW_K൩Ԙc@ oLٙi.E@=7uH"IUF3gX78y<~2f!Ur\/1ù Ĉ6 iHM/PU|EmUS"1oi/͠}w+S|Ţ7Uʆ},,Ӡ:SŽۀ䑫Ŗxg|JZN 6AyV(T hWuej`C1Č}6|2UP˹e%J-W~*yEWL(O<GFڏdGȳ.!b}! soS mi:Fe'`͐$aAbDXО t[Y2 ]VĂNB_5atjyqʣH~J1GD`v0",q/wvbChre'ݟCd8O589HyGե[xrf#6 -NZpf@OKkx<AdYܟ#Tw!_  b0 U43O/2Rlœ~o+,wFjimA ]p/A+9$~Ÿ|65H3~'I̿4 :DۀyMY@i_d{U%ts<xMf[=[FL]00;ہ3mYnPELaw9󷆈 F"JI`r `(9H.LX|2G_w+U;E5)QyXyJ#К 2}W$xP{4_'ggb>Akyv}P g75)q.crS"D.,q;-"B]:zw@xF-x{S}`N,37L^GHοxkBзI~RRbT1){Ev݌s(i[_eOC[?'P}ǚCTb6`3Q Y|v/.)URſa+*2\-3!L{Sl :϶@nӈ6M4ʟT峮 URǃJzY@E[ ̴ =|^` `2 |&U[p$~D]kPeGn.s$m}=}RldEEu^@JN+(ב~I?CmM;/`WK+;_oxu= ror p ZZ f|*~+M"nu}9s @!7ef6^n>FJ‹GsShz.' :(8*YJ=fCkq4^`A2B$G\iW\9CY*nT.tJX}Fa qBWs{v\6X@ H"<Czi(ٚþJ'ulN:)Klʻ96o$y(X('l[v$Ըv&,pٶK( fjeop.J?D5 ,.&lBI22)##:^䋣~!ϝ'-F!!N($n>$ c'")V0 EO[tɘgN}Sꎵ}٘$(7\h0m0#1}bIC_XBhljW{Ɓ31 bkv)Jbo#oC&\EA R^a:7B܅z^١Щ0>seϝ/sB/g{ЏJbZwTlG grCpN <':E!K]~O̚tu4/` XR0ggy&jvDp[3nZs)WOE)61WѼPa?U=]KPJrX\`0E,xB -,CZ2^N}̸lM E]qk|f3UשNkv״"@0}:'wd #\,ZK0k|Ds|/ :2]*_+Yh 4gtp+&LqoUykilRuON6+ /nOTuo9-ښ{y&=g{Ic*dTO-cCzVk˥P>s4Txtf$RcBh\mCfBMMrXEm6Kq{P :(F}%+NY)-a*uZ8F\bbynFKpkMd#KDl>RGfv66 d^\$I>ٵX5<8BqrfwT09ht'.'5BNRMxt IQQޭqXs0|q?@>('OPrxh]z~wпFzr&%桩оXa?׿GѪIpQ8!`y@ōSwʭ@"Z % {PѪO.T.%WξugaX WB*t}YJ'/)bqȮbdȳ8D?3Tg-Y0%ERSത3,5]^c'Ix# &Q,,K>0e$MwiC-+(KiCgӾ)\U9OWz#]L@$ՈF'l8}:V@;zrU g MtaRb8!RςU$|.d=a1jhޟDBpJمLͻb&:bP> &_U"B ֕p-v^tZ utc1)g+R 3ݒ5UbٓSU9XЉ=+ 6#fF#6uq$|{:MºPw_/ ܝڏ 5ꠈNwXSu{k!_jA7cqGx!W65‡*1Nd,[UQX0TIH=|Y3gdKCm_E$`jx<#97Czƥy@1>$,R~_](azkQbr+]¯A|S5Ll Xl+]1`Z-LyHftm/߇k(~[EU[3,L%k0?nEB ~FhA';h%ߥzl]W ť9}CG-fd|`Ou㌎㴛H`KSBKNTP"7K##9(1;$T [wkU4úŗWA[aLୂa5צFzm@Gt)A쑗"2OU4YT~dy?[Y"-8j}͉ڷ˱Tcvt赝qKl< -u2д?'n'_ZnNU:; m  ?n+Zԗ:eNmu0,{dvgJXp֪Fh[#)OZpE`w~EJiwbL7t,-ajyb6yPޅPb;i\-)Fۖ (1uh57$c^Z,842, xZFGcҥ<%'lLrAˆyz;̂_4B1 'TIr06|rrSH7Ogc| tMם ^#]BmZ@H&grQn)@~N%Ec0_72`r蜍G,kִqAGy@4Ápj>Dxb}O=eրD;ѐkBN$hl+ahP~M(qa 0+7]?+*p{2zcdG^O|r4tƩhWIhv"hԡC/:o t3BL1t6^Y%pK BhWLDW%!#TW]arqQUD!LGTXM lJ{] ?WQLwN_ ( ]QvߺI>p}cC鹪[3 npͿ0W ʡ5醞렰jd..$NR`Ь]Z<}@%z1P=9'M;P*ař'Љ棤;E̲~-2bC5*߫2aQ.||F @j*9F,{!Wz\(BsK(^-G3:Z*FfҶ/~nѤI'jq_۶Te_%֍uO μC+៿̛=xj{ -B]_՗Ds5ްe8&t ^D $m`O3f:4Ⱥ֮yHE܁؟QnJUf"# * 3t(URlpI9sQ7D"9bwKnkJ/R;#*T=^KVkH5l?zp@rE1hC .* E>ڱIYd0ok!4Ïw.YXqc!@ޞG?4&x e;g)%)n䋮iD[(-[og Heƚ&\ݲO8)Jd(aq3U,z`Gt" @cXAJ(i_Pv X ;o%0{TbMw1nF.ȫ[P\D?"]Ƿ̔Ȓrn -Vkc!9K'hӠ-? (A43ˣo p?~`VhsQnS-yo{Gܜm㎉Ǔ+GpMs ڴJ$#B@ $\?[d[xkbi6؏j'CJxY&/0/ \.2r\2wn?3|zuxOlmd,0@J.q ׾4oP`z\_ޢYlNAkApqM` ljtU LV ):u^x5$X-9eW2:T`HȐɁ&kDY](pڱQNvF*a+hp׎49.D}s|q~%_En/Nn(CW'1ɆߛO^&/4 +4 K?"˖?yHS+WMpSpTT3k?8]Ɠ"!y YEz=AY#$f \YpHxHw P6Km IJ`Ur)'߫ d砕`Sߦ* qZ0v%j'u+ 5X8u^Zrִ͍֕\Řۢ[n3<֢idPyʍR2j0}X@"l3U=BO_/8%CʶƯϭ*@ ~*N#cL+KIGX$y"2ed ]a Ր=&&Xdt\p3upUҴ6,̙<-b$ D=A#c C3jTw 83HFE{2B!- pyPNJedm5Kh4gw[RYZu/XŎc"b>XH h(h} >4_X\Zy;pj9abEXEha  `)Oyܸ/Oݻ~LZT3~> KFzphW[*^|hZo8#uެR-%=I7;"Bi B%$.>;w.O/*: EaFhN02AFeYzS[L YnAa҈LtjO֭ĭJ`m6Ic}pC]t<ޛ|t\|lG }%}52LHhu_1a޳Cg5DmyC[get,ғ>g}_)9BUIfyxRI%\j-S{WMeĆq wG0HQ"nK_%{_`@F*,P&q VI5*3c9twӑ^.]i}0vAHfnTې,4OjL `BZ 0kHLeHr^a:7[=M Cduvc}<_.ڝGE{4̈́>|NIURӫ[Rz[\Tl7ǟ|kA4_Q\k0 Ig 8䃰N91G}qBA9շz%NZʼnyȮrZSoɞS=*a NtYߢwrAh@錨9G[Ŗe01C|@2(&֫5XSqHM2-Ljۅu,špJ2G1JV•4b 1H94J͢\t`t}c9EҎ4>cmUT[hPF!u c)Dj*V&cvfHln\Qh2Ldƾ4i%3̕)4`UZ됷bqf u8hܭT4)zeHвX񞡙L `8TF\-z2QkEjo6k޴XAh?I\1:66JT^+`g]H=/S>Q=<2kV]1]C|=Gq ne(a}4S^ 5K՟;z!\YzHq)HCSa&!Mͨ)B+QxÍ"4Jh)}J/e ːoŏ5$i9QDKҰY , ͨƌ"CNx ] ϲ:جf:x"0a2zh_~V擵.q:8Šm/l #uSFN;F$AL2\.2gbi%z)rv )цQ$Ũz@P0\/Տ <])ZRՔpO_čfx /`e@%+  ՈGe2libq;b^y`37,3,ĸþX\Y)rE0-+;Ò! !Tnl/7W϶hB{b+M\_:zWyf J+\hGϲV]!lC0hk9Vns!sL6M" \6%iK(?8x9SXAeVyɝzY0oNbɇRęɱ>_^} &xDK;e/`kt7[;g:x’H3%;BpdZRG20  )>]bi6+{j~ aVCI- Vb P\7W*ykkf7,A8wӇyb|HX3MdV15kr$˖2V ̍nQʯ|+w3%u瘣A*Ҵ._ jj L%cD?[4D3h ?\vi8R Ȫ=D1ŷ롇0;cjŹ+*onQ˞7,c8Cr6/tZ!P])bkceK\-A5tuçٍ5q8oBeiGMÅۍyC:%+(Fsb`8`E5gӾ# (Gm78 ^dx^uh֣A Oa}- YJ&}VF \NupTl rV3 CŤE /dTdR/ {P3 -^~['l2 _O9́`%v:?+ ( OE)`W P SoeƖ,{FG"ܣ3s+-'!YSKar٩<gz|%g'UAĶqɽ細ؔpxs ,4I$hťORz j }p嚲S&ni1@R XV 2L4%B* g'&sthxڥ[|j=3r⊊{aYeP0"`ڛ4.b "mYͣW&a0S.ɮjX3='R_5WV=íoڏos "ss0^52"2/0ֶasr$4hj6޲u͌oI>!pr7FfwbLbH0 `+jQnu${ŷ9-/]FPR[; DIcc`j}óL@=Ұu(EH)ɑ Wl.7QXV0}3p\NG=Pe;ϲQԨg'7BΕj ?1UK%)=vM.'⢇}(cGm1pjMDm_/kNBnW~˫玛PJ/ g$}@w'ٝau>9BNVvQ͋` bO^YʟbcGe-DdG·߽tV4#{G u;) @cgΥ$0ά 4#pL<IVPp,|")K/9Ȅ*@s_:)5Bn0TVYt:eHMӘލq)tv  U< mje8cr,o4s]P@974ž9G+ɢ*wAWD2`NM[2y#>E0<}K!qM|b_cB- Etg](ՕD.Ԁ֣c) x"y?.h`~12'R8Z&+sɼ">DNMqbی^#蕪S?s:]^oKRNs|md+ګo2|0U=m u_| rfم>Gޡb}M?#r}p'kI\8[Z~4hͮ74HTk0ءx/) l;-ڰ3 jQ8LGUaVRW(_ʉg &a:O?ECjǦJ/iwذBԮ,!rüY j&[t,GDh쵆Z&&jP?ڤy,l[ŸYh .' i)pt*6>@ߧj}JJmaK];RhHb>٣n'm%ar~y`rs5ȷ堻$ܳ{FTYX '6K8(( XNlzSž#}ܞ*HHDvA}D ʭ!TT@"nB.92k% S[8f Ow $=DZP)E3I}dCbXErvE8e@ +oB7D UwbOuޜڈqXWFbcTeqc`0l4Y|#a}'W0i7D9 ]Q\}6E H_.!)sZ3VtЇlH$y=9y΄(r+buJZ斪WTCU΄{&nwwa xOFd3"5GzdI.vK_ i&( WR@\Z#햋dTƜ6+4C_,gER!ST^qWDߞW>eЫv~a ޿!'){Zhky6~Abv}>s櫄}(TƥrgIę:siIưlц&J@` ~,H>*CFw"ƂFI˗yǴY.Dq8UsΎZ9ag 0mÞ]0 qWx@ңty~ ]'gZǃ݈?ɼlQzrvVm EMfcjmʬg9 `h#qIU.QU{<ێ帪+eDߓ_4_vu dNzZW&#ty{:dTNAظumLA%xA25-.8aEXnܻ`(6f{Ayqn+@osPK 7 :uL@u( 4+fϩGD9O}Sޝ<{dt/rUCY7'\Һ,inJe,mr uH^yC[>N?yr$v! Wð`J ׿MZ2#Y[ oKO HUvҨ֜D}CwUZa#W)*W(vˠ+uŒ&!U3Ϙg b+/"VuXki2Tswa5B7bL(RPbuy",䜡0H}cnWQ/<ݏxVOW 1;:.&:;zn$RI i,=aLc⋴)&-stMD;AGi# pcAZw%3mN Ob0i,R5»E1k0׷뢠=  +Ks\sb̍N< A c[ا*kNuLZ{*@Lqw>HFɡ-mr µ?c^NGg/i(x J~1?5t.lrW{cDyIͦD;Wj(Gښ-DՆRײS:TTMY&a L<Ƣr>Qx$whI0)d{ R`-H#h 's5zxV~r]Z3Sv•t@J#-:K@ZCdlU6+U£GBЈ^Ln՜d2LR6`Xyߔmb]^Wma8:ξN/% ئ7(*r1)9 oֲ=wbBJhRu|hF~Kh9UU G_W;u퓡-Z-g y?;kO뙹kZp޲%~\z8.'H]n*.M]Jм ѬLgP׋[YTQ%FL + VÁxi̺Jr}*^Sl <xUo,޼F׮{G]$8IWoLT0^r[j\x"B=mtT0f`|&gP#)Zc,7 VT]՘2ܸ-s*Nb8dJـSu!q]OlhUg][9th٨SWP1CC[9X ':gIUbFC8k|wҾp»]Dq_MnfiT/GȬ'tʲb5^Ea;+4QeP0zkip?TYٵeа&C.oZr=?ٺGD`Np%J5>ei@Ӹ?FBe >-3 #ȏ.Oʆj|r?Vxo 3u? p+@L˙Abه?XŔZ"0hܺ!('Qr\`*j^>o\/'nr?S_36ZtqR,g}NEM4!*.Ӑm!ytcL8nZHᬰ J2tR.Kn?뙯{3OZ#OCP}DKKE6z BDbP/"K%ocQDWehȢ*jnY?S 2;qgA&X7G?q=4[H5ț#n1XK kTc0Wjmz17HblFo7I~Y<C[擼rRFer!|St#费{n瞌:$n ]ʈm@RՕ{fӃ8lY7V8_V~.7/xQR#YUX.~sG1 H|-:#c1X48m=3Ege9 E3:VUC_[]Rywdr7;RH K޷r}U !ڣ(L.)k9xƧ`ʾ?"/hP(꨹Bi/4;٢3Ƙ(a^q[z4f硅YB&+?|rFQK#];R]\29x&sA(PUcM5\DxMuj ]ҞD.%1~}[#'3-HF1@PrgÄ)]cM:;E1=,'ѰvNyA1tv8l1pr74tb4>y? ; MeFN^%-2Aُp2UVG. =Rap#/kއelt=0  kZ] \dyZ TK{tuy)Cg2x%ZC(W!=P==>Լȳ1nP;^ɓw}8,9t߀[Jf w* Ðm4U+EmGxFBI!'8 #RDy|vTBm҅ɵIˇ:hҎ7}e2SOٱ ߪ3|5d#[쇪 aH ϊP0&BX~7b#z@rovyw)%ٟ^sR7kX3\7}^Aգ $ 'o 1EUP+Ah%/`/B o*օ"W;%?R־'@6OiX\FUf܂NaH ߕL OBXfoSS]TMt"G#IEQ\->AsŪ Y+}<[JMfTT9-źk eF?-x''Gf)+ <'̆u6 qP&.)Y4Ws@Pe4x p^@,)( ųP_zqh>"]|0Tk%q< e.ڠPl! #d-Y =CutzeuBڞUȹSH;wØD^Fhv#3hx 娠y2R=8'Pl:"FX9 !(Xv춪 nə/p)h_%$X\ܲckOʷˢR8/ͦ#r^e h jV-ѯMrK7e[aLv(lN$-+8)J;M5,i~iʊ*ݵkwzEvG̿p~S愘^Fmޣ+G>A+ƿ4,5ۅz` lacvPmdzaPpju/ [_W-=Zߨ ƭ 'yO w,vaRYbaϹf.ٞKrX:YZ+*Qn7\Z]rFdؚC59 ءw>v՗QY X. 7<*LvkcCݧ}Dr[ظ)rkAξE6 yE TZTs`&lIWCXl[̯=Q痉/$2sgF)a("pg$'Djq!Zm44t2tY]49=U K4cd惎K6B$bB[L/g)$ZNj.GBa& F%Q6Z; 5Sy! eÜ~"ቈ5g$$?25!hAS8*{\j3f`Mjj֣;|ƀKrЬ#LC9e84{4b#0At 2fZF&HkJCOsEhYa%} ->o=Tk"8I8ޘ魨틈=f9ʊ[1atumyZ$Ֆb{ =[tM ܚ;Y]U$Ab ,/&HfE P6Feu)S m{;P%T[!#Hmd{҄Cgc`|(e[4ψyb"]2v#?'R18l'Zǯȶi\h97-G}wqgut#+H<HPCje5iOCӁf{Fޫ|ΑVTb|G:\i,YK7UQ㤓z<9Vj[Mv¸HR`A:V5ɏ6oCM=uE\} @txh5 ?n<ڡce8$g!svU>NSN,&-U穻ISH$&\IڂVp)7 GRSqi @EY8)ܺ{rM*Wz] .tϒxk\5bF(x`h_1xZ =Eçr!t}`/Xq}OTŞT#uNި3{`?/zfwjgP\8鲱ydWE&e i69MMkEt 1:m޷ &60Z(G14@xu^ ݊F3D4NGO|OM^[N-X-x΋K~ ^ZKK烼@=adҸAՆ_;U:~f?M5d_s)%knX x9 ؅\EC+T2וUwBCkD\tJfyh QYFE*)>p[Xeq3(ff@LN;q\[ 2Uu[P{@dܪY+'}5g`h$f˜,}<`NW.UA1gÁ+!x dQ m.ռ+*|TW Wg^ΠR_gΞKd^-a[m3y=""/[8aQvB 2"fkwb Pt!Ee™TA|pM ԚARN؍9;OՊe `BWqO.D; gH&hf!oF%kEMy WZ{Ԧ85ͺqN(zgE זׁA9rvqbD,\1Wׄgt<:;!,pLǤv0OrS0;'W*5n"*Э7ya{{rb9t=lU2?m(?N;D ] ` \0Y=W5XwPF^Hb=O8M1 PEM5𦋾PP2'pե}ԐB:dJ%BLӀ_5]ިGI)gTxga:e@Ury~U{e(M>MgZ^Εv#]K ^⸰<# .p[xBQ=S:SNv3z&KdL :gC DZqx#ح?R]"uT2tb/OrR<1s⥥ %dDa_sߣ.d"1Oo¼bI } VB>@|LmBgbQL4DP*bD;D@^8k酀hE; 0Y;Q lsd5$L@ d6?P (3(2S!p3yO܇o01"҈F 5b /jT|=D׿]M=*KY&%gs0IB (>7'=4yT5BcEp`B57F 3XfODwޫes2@>7/tFiQ:OgBl2Ds8N:8Te%Rt+L(Nfxl'œM:*n\̉q\pt7ūdY0{gX4Hn0BP-͘l| E>-ڗFߑЦ-rZZN>_UOW4Ў)`RB ViQR? Ekw3J+d@y5wJX|S׮uƑ-4|~3^zWfz҆x\O{~sbjX0p} yWؙ6~(ۆZ("irHbׁ[&>S . JZꭖጤ?Q6-o AlOM1ˆV0#,1{*jZ~1䥙֎+m2ofFU"!,hGI*gZzKA,|b`:2إR{-; >E27bIC"9#槍٫*c$C1\1S0dž pl},TK0Br2fZtԽ9Q3KӋ X1\쯀S1kʱ 2?V I}9ZHQP|ɹ^hD":)J (^ 3L`fZuĤ%f{-m'u Be]^)(; *hu΀K 61{{fiɤ 9@@i.qIƗְRJϱP_uBZ]+5(n1&8/Ϝ|]Yyosu |we\ym cCsX>j m`;F4Cj,ϩJ=ˑ0тn}K^<{:`9b2L7ǚ k'Qv K9׳YXm'G'b$TnmyO+lc\ImF6x#B_,0Ja>~דLU"-;eJ&v^1٘Ř4/]!O?qIj*\ ǮgdF/GEŃGQnSVگs{9Lu i FJJvb@70{Pxi8JHo 1š6Sb?. /.]X&gGx *qӃWNPnsY8}|g S|xCKTY3V[:A^Q4^w.._CٴZW)~9E]{$?m;ÞeL%GM$!KMWY#bc2+sCeqNLδ)/# Ip"JKp{Z+[x4m=*p. =i8LnˠϿ1yc@Mm/ň1=B(rS񄗠V -7AoklVl$9,4`䊈pI:sccn+8e{,ݖ;|E'Tu:B0 m't*͖)~ eӀpXa\!6; =!D ie_ "}<ќQ.tw"&u_dػv=rzXsqNBA?aݬ zUA)i?5ŵ],Vlc@'"5TA J P=xR gl9m*88;/^UO>s;> W~ 1I9F*}Z_Ԅjn!YB.ܱ|CUtWݢ4]4- ݿ !c}#6n3B܎f(a=E77e7hP=ΝR q1Á@PKpdM'e{qS\o^ H!%xlP 0!2mb^IMx% 2S+ rs YLXΦkCW} ;8N@&.Tc?Ti;{܅'cÌԿC"'1=C$fwI G%~.h$=Y.ܢuD PRL`!03;4tSeP#% GyYᯎj yڗhw.AP@L<8K*9'5h 0 !jz,k/ܫ"4B- Bǡ9l}#Dv$r. /Wט}1[WJL85:mkI0^Ro6Qu|0^[,Gq@ C>z4;kWNҌԼrH UϋOq4?/^v+|'$ J#̊S0T _①b6DYAR(.O srLfo+؞u9&~2ZGJ{)}uZe zΎ+@n@duꈑ_A|i(1w ' "@II~RV7.A3MV+sOt_T6>[j:X"*ĹāԀ,T8:*f3FLŖQ9 JSO# 7-n qWĵHZӽDh%dz=[h~oX[HM&IM{CRn !)}բ2 AKͽ.du8nnq3 f@ѷDaEv/LjIB>ϻfJw|Nw2jM;.]Ioag[s-Yj @-Gi/ku NWFZ12: Ǎ!hwA QPLa%Xkx!їO՗O]B#i& x /M?6x=*y=Q[w؈ j\|n>MjF Y>qG(Ijcw2ң*~>I哴,A=DD0p@b\}>gf|3AyMB'!/f-G(2umxhi@J? o VG8~2%p~1kb7$߯*?eϭr^5׋pD!7Le-*/q,5@J3`Ѿ`ufjrS s52!febBnA@WmPHs7m/o% ũF:Џh5h_ofv2֩%r v!Ut ?Y@8ݬAEI5魲 3/8tpk+^myO>gRm? #.zy>i˜x(jzyLRCV#Y;T3ۃړòc~m;1,bp M?JjE < 595S!|BKn؀y\0':BXr`$<GVNj.T/!)t<hM/RGZag-k@]5".H8H2+ IffHo,[KA]Jvj ORs,N̍$[b!dpeikn FfV|~Uwg8xV䓺V> z E20MMjD_~u5)QL\}yx{K2#'C~ :?=~!)_I=7P&lݳD4rXP )M 'rv'm1Ii /_Sl;9+H4^qhYI!# `5*y2oqh3?TW9z5/[JU}sILYH``muTn1Z 1Dv\sҟh7 H,PGoӑm,Q!7Go L XzYʴi3Ŷv]}% ,iWK 2liUq߰> 0OF05;{͂.--1c.}, U)$ 2f4LjPWBNᚷo?eO0?l.UD*"_Ĩr} Bbݑ5>Hz/4~U0 Qx7˯ZP=0#/EFҎK/_&͈ٱYRq:ޠijb=P5U<?Ԯ7Y 2$-ދN~o(SI =( ~4twt` mF9c@XiԎ+JxQ3SĐ\'vN_yBDZL<ϭ #?xzXHX5s>(:`Բ !J)>)7UT5tpyPM+^זђ/*lˡ%@)'F݆Fu;%o%iPrnQ/ GFVvе ӺC ڛfyfS :|tȐVɔU_/xl_rrI`@PA &XVH.>ٸLwiϝv{cGl09^9PȜBV 24d85">4#Gwn|SyA帠",2 DO_~' ^'͌ίi۱6\LB=۩WmN~ AAFz)_ {^kRܓ: B0g8R6cIStweUKKAB,km4pp7U"1 p9]h$蒦W˪Ϳ-Jޱ01YdTv!̣0_N'o%麷qt4ͼ-tmp3%%6f0ctϞǑ9l `풳akD_mLCΩw OI2 LmTy& ӂ_(ޑVj2T,]̽v0 {A"WA+r~Dw#o [+yr/I9#NKR(uj/Wl4x$GUR}Yvx>tNqKl|ڒ[DK=eaJkP8ȝdDK䶨`+#BjW®ϑ &xtŔ^U|w8E%ReYܒY<\+B"ŏ~KmpR@3n+ql6vr<|O/Eycz mW"Rz. ૄ ]v\s?5V5Pxj<9΋s֡#ʹ֋XxB v| zQYDml/M4WXdEW?n)p1<:(1\9frR~ %8Ep̶=:!<:'$.=$a Ruqin;C6ؕ f&L[Ҕx;6[̭쾵Z$bKw? 8M_8 fCe-c-2l{h()jsC)x 9 dH2EY<݊b%zBUHA/ޔ( rəp ^ٚIHs2P6ƳNh>0kL +T-bV0&{Q\x`80YH(`.L'+NQgh{(_seI!8*qR$ *OZS&R"; >ISs:YC~POԵܖl^nNCu>mC:*1W+Ei|g鮹8,_Y`ۀaX3~W7I[XInV  aD# D8` TO(R闇iU#XyjZw>F9ᖒOo {j@CV ٤5 ˅ItY":wxt`6T1LFmW/^XW!-7&-8"w, @_uQmyh_0B$=DgѶQe2VAqNEdEF;AY.}MjE]=,`5^1uUer]fBxP،1ׅ;Ļ2ιVDGT kM\+j/?8zF&i:'s|GeJ-ޡu s5&8[-,ELxR@ѲaS%GcMP5S{.XȦo@{SDt^U M`E^oLYgȅve&Ӆ9[Ipp:iDcaX!yKNGߟf-wK7q × ,~}@gĕcOgCbjVHBiz;m궰\-SFݪEX&,/{VO &җG9<[*3i".N'Ϻ^ ƶC͛J5໢]Qn+Fug3jP3otVA=3>H(bMpnqπ:59}P_^ѷ /6P\ÄU z{īT݀2{i@%e_wZaDpO+(^l8 pv㡡@kp@rhs/ySoç1oK1i$%^@C$R8f׀)Fz$`F$gZ^u-h'Ɗ,L-W;ii߼tWw/%'/ϔv@ZĘEoC+KilM% akJԹv$fz`&#>uڂToj9,N2ΰ} ?z#d v3QT=!92茶@& /.{&Sc mm7 N1>S h:3 3WqcA)mS[w\QDc{ndcxmIT7) K͉$RW~^+n{(<8ח׀{6XnESX&?i+Bɸ~Y&/`[sb}B_M$XS9UC.>!kh^KpI'xHiFKKtDeKx!WXb@:!;g?5w"4; D_.B86`3%wPU=)jxS)G? $j|v74}`bN^S@R)Uϒqg61esHX7B&YS;~YmcuZ\[mP +k:JuȔ2do\R xta)~GepG.:+px'K\ r ِ?py3S4cAL+wWh)uZmʣx < z, %p  Qޘw'4Bȧ}z˚[/4yp5UCcL2JM=Qzi3t"jl9h6|P6Y7LswAV7TkBEEYnR88/`Ԧ=E πx9.%kmDaL˺  q"xl+ ʏ/c 1ʣjs`5 NX`]|]L(< I oRFM훆h g-ǩ[ih|bˉ^ ߔu 8 U4;pp'EHN@89W!"f5LI( ou)C& N/VҲ5:Y+Tq uQ`򚰩nM\Fc3\Z!RHϺA4Ӕ[BA{fvRQ=" D8\ݜ 1 diJؽx/v1+2*dY{W@9ʿh`z/柚C[28Xnx3_ֶJ 疧L?04Y-un1<CXƲO՞Q)D"B˪Yu=EJ-I,Igf8wϚ&^*]6 "|9f|*(Q$2 : l~B/e,kBYJ o͜_ !Yuj?!WuX1#凶sϪ*iגI++n.vP4rGФe vt*ߪ%rULƢ,⃲*+LihL{L^\va/e]{ ?&(BuV(qZ-)SoFGz:G(4i]^u:VcZY DUɋ6c0@gge584rCVNVu Q[OO LT,ingz1G땐Oj6/SNtjV8Y gaUYό lp2y ?ddմYADِU6S v`i*^Vt$(~իQHZr|1$D~虣Ihc7Sm_FU3Yge;J(>Cgc?]q,E,;o€KϬ8(Mt{ADAǍt\I~ǫڶYHTţ5-2S6\D?)K.9ݞ+Spwb 1Np!Ëς1OwRJk$,por?dָ0Z{4gхI!M6J[QFߩm>3[Lafws0iƗpgG97˥7JrwUGԜ8֢ jD|zWdg!| k"2!Qʻ2;_gm^[*Gn*;y٩ln(euB&|PtsZ^X4#%.$E5Ϙ[9rjZW>[zNq8ÆJ☡L%P6wqIR14b"d; GASM{RNGyT[@>,~i^]O%/Y^M.(9R/>c/ ڡbJS ˣ]Yx4f|%3@Ԙ#CHu^fAx7R[ۋC#xy3N,E;H\#ݖcMB23aupAkb2)߇nY,wxQ~LUюz3 49Qpݓe}&$gx9L p:k(y'ߋG{+w+2Lͱ:`"4(ay x( z- )]se ػ_Ԇ3&8G_+U끣kYPLAۇ>^G7Z~ʂLd5_oG% %>EPȢo_1aayX~_I;RY+U8J3sXD쓢c`ehv,x=F+ܔ+RbOB/vQCfۋmsG\wI?z@m} @x_:s\!jߌYb*[ŋEyregctB:#,d\@RsGa +DY) ZP-#qT&c֖pwh֭19h䘎[ѧe,S,nznF!Iml> :V8[Jb26m4ރ:z)myGQiZ"ZBjxUov'BS433N3@\wA{{槝O}}ũ3FƧ!p#o.|V*xTp[+o$4G &`FQ )چ6u~Zʙ;җP2O%V]$ބΕ {Iu)DOq~LJI <%*[{ - AUI?VwQGE~mri{Ϸi(}T9Z؇C"9^ X{:~#uyM55QsEbI77ݻ`#kSo~XEjp3Fklͩ:>"/ Jׄ?^Zr<ۉ #o$sf`)39JҘ[kG< {Ut(3'7Q\AlVz(0`ۦrqUT6`!ս? 3ξTuZe]F?VٕB!.4#Y=\VǗHotV_bp*> Ck>=ELz X/vQŠ;sB;JGdqȩ3C9S1n ⣦xUH[(tJ7d3S N1:XMҿrg\m#'6Ah{T/׎}<z9an;!%h ԁy6B"M}iѾ@@s CmLsYh}mMY&9 ˴UlXK4}-R8HصgbGrȽU1p,ml*9"Ԡ%¸"j g)ʖЀ>- B1T1Ejhj^A*10] l GޙXV :5zԳ2BHr6 M@ `WJPX܀m*&i^^(#S =wh$;љ<{:Hl=*ϗn2 so܄NېM95y ]j_3r惓eY1j;nSz/OoL%4(ACN몳 ].v ns?yޟ_YViYM- 5'))]eNf6s}I`3o;QıҁM_2Y7KԒeQFµ ̫ᲂu$Ċ^ʺJK]mE;s}~|3\o]kR]ib.Ṭ}@m"YtHsśaZA:Y3X(_DUa@ZYϩƲݠXVuzbyfnT@sߛP>{5`jȾte1ߵbE{µc혉sbU;c(} iuJ(w #rБr0c_~5J,ou[j\}Cj&W'ewoĬ@5F<)X孨` e4g&2;l!SUn|=dk'viͽu5UZXdp=Z.{ycx m[SIGD fwӌNubO&v/&wB|HRH,ZT6h|h&Mk:İ!U܅OT}OBa@2HF?O:.gwim÷4 "=a`4!\ HжAVW]"&+0V6,mAvɖ VE1͚XML&t~.]sOmw=qzmo*)їr|G߷`-"xgmtRA&{s%bFIj *.2+G wsfa ){X dגD8uOpm[w s:Ib}Sf{t%F4f!t0 1$,G7@F/JD 3q"7 ϕha?T7^mvިF>Yˍ47ob݀F Ly̌ht?(jŅC(ip5OwzKGtR>OZ}ʧ}U=qug>5@/)pEiN}674Mm/ӤzZ1:%FN^$SLá$Ze\I$.X3mZ^>j(UT)bJY!wxˮ!m>$)Sw dD~̨M v j@W4DyI[܇ݶةHꏛ[!-Tɥ6oAwե%2Qj< +"QX S4>LS3hYKaˎv8 Fzh +Q8X* !FKq;2(8{h(`psT<M`@1$<ahr7B6oKn4(0§6f%5HbTlq{n>eϟZWS`k2vOo;DG"g2LXèD^bU~>TQԇ Řpenk!`@03mVI,07E/*Śvd}ڞվ@|1/H$3y7xS& ’Ug~9.Źr.[7KYζ/l@JY y[lYM0=h|NaMI_!7х.j?u:%  K_=M7̼-BD!_dkl0P9y~vMD1KL y-I85ֈR߇!4gűlJhq22#SpJ_vLmXp d#KFYx` 4N^{yb*'D#ya=c0e˗3'Vjnk-,R^ ŝ~ }U(ӥJ>k>AՔrG!ҍVl@><} Až32G<7DŽ}C;5jj9Ɋ$ 8۬Jмg??d?([k(޸Xs<`U-QSO}h35KP,c#+CGߨ*c$C֮Q+g)) X-1.=OH5!-\LecUE]rE3|2y6F [{YnLY(K+rޱS:qĤן,6AG_LA]{P3'|$K^# 8Glj0TLs&WC /8 uܘuyĮ,=YkM7mЃ>KO_+|_@a rV`<0f5Zʨ8ٷYH O/[v4OlWi'!8L-1Эf=G$FWSʭsU<=?)f7ASP5lfv? {j /릪3JMʹqO ΀z]=ִT yg&GTv-M:!䄊/ |>VƼ3S qQнڨE4Ud5 l+}>"LD{d1iҢwX58rjT/U^Q vG i\r1z?be` In6ڗt qK z<՜6$)T/C 3{ "e6<;p8;]ʂd8쓁Eْ3س[W2}d=]eytrt4Z%O SoL-1x7EɩުU39iDn}֫Nn%F[pUzI\ݕgO0O=HծvlI㸩[ ~5ir7vl{*Bu8{ X鉩-dBh_yNwXJ8];X%Fkfd iO6Uw5t2)1t$p>u'FHߵIѨri}c^dZ>|p07 `RWLˀy^#*WXiah(ǯ08sOdxbG !liaߴO++l oJv~V0ȥ0thȼE]8^WXcL.y?rҺq(i~1RDs@|InK,1"+>?K}p-b\: qH1Jc8U[Gc/H4a( 0)Z=p, l.a`Hcͱo\ǴHFDU0b8^[߭::^}/e tOʯ/-s4Sҟ,O6cJnUXUұ&;v9q[V&$Z_\ V?=4ɅR'"H=o Kpt+%b 9; Y;hh2]'{!Kؘ -pWw,˕*N3&|n'fDǒJרx3]j7ʐgZt :}Jq9`-d"`10|)Ăho94c-~>XlGU͘s>GbBXgʖ#Q1v}|Z?ny=-2(!C6u~xI$._ΉDN6dFjw&+ VK㙄|^hyu냊2;։!ږ<eX=j`21R ܿD V|YbT4Z^ɬVܟ`wbQёCv"ۄ刅>Qf}>)&ۥ+Tie9DBf(I;r.wܷV?6,Rz<󦂴GԼ}p8\TˣUI9lKyRQ}:'hz[ҿ돍M$haKRl XLpWQo<PF,ƢIK4tK<f5hﮘO$yOҜ~'nWdc2|jlʎP jF)l>‰xW {?$P֌ٿOr5Phg*;t 杇 N"L) oDVԫr.Ht٪m޿ =P<7h&e 3LeӒ j|'cT(1Oji3_|WvhT:i=8kJFgI(EѢ՜j2 ?Kc0%ʱG+rj%إ' *(zR.JNyNGοiZ#` <W)lr^ZJ( iߙMnLn+K{p1&&Jaz}0A\i3K`.'E\ 12TB!w,DV6Z+3ޮ$-s"G \'>ދy` ؝ǩSe#н3VIl(:gG.Ihp{HsËZ:-#g$%ݝ=h%AlA.AyEtvHD\StUFWBd,ckgBgy )uȀ% ijF8Jyd,I1؆i y& [VǎÌRک9#58R 5i:geT]eaQaXӭOEo( |U}HS9`?t^bGr7+f^Yo{n6}Y,mi!709Gp[E[K @@4j:Gcv[U4[rФ$-ŋ"J23E%bV9h{bg5wRRleS55-LɱMH[5<~vM nrYiHFc"tVPp9jf+m bu5?VJ |6D?}DxPu A ^( CMn:+P ?r}2@!N%otAV\muEg0š\o:E|[ LJ8|kW\K+Uec*7~|&PPZ=!s;ѫGB_s|jhy\AqD.Ê~GOǵ5{z5*hX5( pEkm$wCq?;B1]88ߴ+]jMgX' 0^&f*br&|)^(Bc؍ Cg%'ٍ̊GELMWOlUTC n%*h8wbo=sC!.`u<']oD{KpY8Hxl]* WGn kxF l}q`w7y4ƈ)dJXaB|+0SA/MB+T稙v(.e< Z\kveoW3*),Ü 3m O:` K9 q$.\9dR`,%[;@=qՊݼg A̐˝?qj^#J"Yb9K.Nvq/ML8sILg&Jsp} !0bd3qe6OSH7i9 X4B` x2ĮiuZdzV󙲝:keU4)>~y\ZI3 B z)W@})z5;}!J"}ΆNҊ52SvhK%$a)T³|Np2?yS(ou9&X^„$$!eŊK@ u<dgnCNb\i;+/$SNa+v3Bށ b :"I$<5y<$֭)kwLis}o,pF2,L fB=Fcڶ3k 4KNm~蹱|Wr*w(N*sj=Ҷ 6P\>$۶_U#js &L$Ǩty̍weuOM#׸Lм\É|4fM 1Na@w#[<@bqӪr8 z#o|%&z{>c6\ok>yJkS#;bsYq܈I R@n(TQ\,Hl2wqv]ۉ9/h4sMʁR$y؈R|s;9aD?+ +r F 8W8zi[N py#AjVz;-&V3sn9nlH^Jyp1!I(ZI^5nZ6jѤDV]7҇/^wE84tkh7Ew.lL|ss}Ci>߼<[QMڱ ]|/+t3/-eJ8|pyDW:j„q=%IJ$@ڻ fwJ8u990 2]<̘'oםfvy9RHf@_u#vEpV־5yHi^[e{mоA%:_|bv68=CF .jZǷhXۼUЭUgZ.^ddͫ$_U%yڈ.F쟻9AW<3cPazdFY<)?!l'ǤZNSplcJ/\][*/n^I\a Y;Uܹ>[qda\bA0UQn]M5FdmK&}G"GBH8aH7^k<(bk@a6:lPថEAװʡ[e|) w9:1Uݹ8Oj**!o5XϧNNwsR&r҃q@RhάGmt #Xy6os*/nKg*|LCL߳ը"xhrB{fMfL| NL⛦ikwhکgvu M񹖘TD'lKn2lYq74\ofW8ՠdeF }7`7'` ??.ǁ6%p|$` l&e0٨g}&{"zY=دzy:0VC.Vbk/YT?o1.ri{jȺtdS6 j\fݛJZ e?T kurH6ꭥ/KS~sXKv$p)s ML270L?V.Qg&1&"ij6ގ|M)]C]Np$EκW&M>M'V60M0#\ra7- mP%UQ>No$d o2JECHơ3õ67B)1Ď*["e8e]Xw!kܸcRA46׻~h!wݢp9F0B#þ61+S31 qۈp|vIqId(kIW :edһ뗢+frܐ?dJv 6>V־,\@_7@*28,WIGx݁>Ѹd0tQfG^qGeGM6vx-jQQ|UV+-l4ꇻPqo(`y1ސ"w-# ƥ$Τwٸ(2]^܇IXO2 uш8@XșB/ZV̼ɏ)/&fAӕkOe KEg!6?-&7oG4B3z\;Y;]\!w_@gݒMQ.P 3)=״3 99ٷm;TM+|>]pz %\!hҳ}./k&pTj2Qw:?a7FrXgls=@1s$IdznIc "Q,M(&! _L`RھzV7_#+EVjd \Ed YSQ/kぁi!龎s 55>e/pPjߠJp׆7@k4 f1g+H˵ך9&i&IeLmw3#LqΕ\Rֹ6Q?cf}^I%Űu72Su?,~)l=V0׹]G~&>nu]N|s#\ r9ؗ/LoLd1]G5.Hb 8C(ؤ+UkR@J] t23^F !9gI0[cKmY\V o&@l.-x\I vSEl7؋VfzC^`.RUZfG%4.o''<7|"1Qm-xı2 ѻ,bA=@]ghQS u[ *rUo(-1Cܽ\ߨL'>Rm)}(!~452P$ ,0u 354#鰔՗]f4v߯`ewwݔDu4>>:T-Cf8to+8HQ2_n 1f'qm qzGO֌ru\"%؃:M951ʁpBBʆ9&.EH`ӌn;^=`Ƶ45k̊I՟\c(^Msʗj|I}8%H2%YHPUIsްqe|v8ԟC^C-"~aǹPnA6c/[Anӥqg5o'V}l'z~*@Qo/=W֔ě c>NhdJA},HxZ d.Na2Gpw>mI6~EWǪF[D۰RoO"ԿSEN;Ǐ S} !:( ^߄Z{#sQv귧0zK}XkL+E Ŷ"| -)οeBz䜦O(ST}Q:L3Zķ`2VU>1AvqMwio/C훔m3coᆏHIx.](iBͿ֎qXdi4O.xV&@[>fT~9_N^"&8"L}5.M8{P1)S$엒O/+Nk'gn%XV -OkQH| DƖ}|J=%p:J+Ǡ\O*PPfE/sNX1`5 8n?GiŇ&h/.D kgaVg<0(ЃbHKe~$l}m4|W Y_mt*7I^9,O/:Dq^7}]$wK&<Ƞiǖ1EE "TNg"b3 T%]n}c JwМBj=&oM, /l&D=Ğg<Ɂ͠U5S혻\B%{FX_a;6H{5 J9X wY"h)q:3MR[CezxI lw V;v(Tu,U6 t%- {$F9W҉m~oxCP*zL/ȷ񜐷.|kA^LrOD>RX~kpZXQm+dCS%qIr#+~4AXTzW5 ׉WGf T۔#D>ƉcAbMq߆xd]-6f9@$4̋'+ *MfCBY̔{&7f&%1ӳSϜ&#%WJYe,ߍ3ZŚERyI+c #_ܧ^,V%b+ơzΓe4d'o;uHժۘN6fWp')(9&uU,Zޝ \[ȷiv*,cBao7PG9CxL+4w)@SwQۉ <&[g.nD{n ?!mTՄQdmA{95.9-c{:f*!Ul(_\F6oty7ZSS(x0L9*# vyN@Vţv[3MR( } X83xji9=";1Y`q86icDzg: :)pE}]e UŔW>Z698x òzF'Ug/;8_<\YǦtXZx1o@%,:SBQngm?,w"b-3mI=.9Ncޓ<¼-3nCb8:`;EqMӆj)EZT2\ofAV@7*m\< I&O'C_q>S&Zuf@g9$^5 V~+GGx,$␛Hq +J6R/@N.9`Ɔ̈́g  JYY4y/+,u"$F(TsYVnHZ;$^[RPi;i22'ZRRw B¤;yEK&uS*/b]ci4gkT,UQW} -t+dzj[+rsF9%p_eI#B,_ЪNFC+d{4 a#P; AZFD?[qօpzIu':ÑbBY:Ygdk^'~E`I9,vʉ+w6]}_UMFgZ? &4_"_ⅿYʻhL#/mH^<,O%2nJazt`ߗFXhú |CY&ሼwϬwz%'}7Zl\S㮌zkf kLrP=b;%u Hژ7,z`{KT7 L&c5/BM }#ZJX\_]G0`Y4xu!5v``)=g1f$Fi!P'KGE ~ZW`;Il{(c]?p-,:,I˨a=$1:7挣ɷxt[&+wZ/MTEx9!m)nѭEC%;#2Փ` %&7?D|b̈́HLk/[;(K!ޮoa z o6~82ͥ#H/ǵu{磧ȖhN;~pe{cq~c+ Rx"/lW/gb|/Qx=}mA"RL= [ ɸASajniAb:lioGz ='j,ըmM_Ǚ{$uO1PCF`uEP `L4Y9MU ب39 c[ISLl!{ @W|z2Kɡs&|oʇ `p_K?2z#3 /Jgy݆@Z ]}xbCיP({ bqKUx[[Nt˞ᛩ0^yoGtde/%RH0wrT dj)6tn2HBZ;yE`?7DSGYb5^Aw"ߋ%?YJf'_5dž0Ww'.峴nej7{.6]\ѿ6՜mITpOM;PFω:V(1zt*.1cq񑛟ْK%ltδ~xF.)lvk.T:7l#\/j5v<:p#o2zNI,Vضldfٻd0drϻUTgꎁ 9[ڴl0 pg,Gbrُ`̸|RM)EEʯ陂^ {,K#=ZTnO/~UXNɝi["I6;M@!o7C(twj4۟ŝm0qzߛX J;jG(Ӽ^88z8P^Jr4~3 + ?[S8G?kʁ)vYЭ0i$b/ e Sg"H最 6B ֕%I_0XI0b8+ȕS%ΒÖ:2ʶg( bÙ'J-VwS8G:ۀ~$6~焊 6qGߡR(-0+yV6\xq741͔S^֡>xö(+e (x ,/+γF4 l_@^$©z1h2O>ii_,jރw7 | J'3 3p2Xx攁Ёȡ]ݣI/ 9_-2ߎW۳) RX~x//D3ķ >~ ?"6@;Q'by8һuABp~ލ(j:(|M[y֞4Px>@)ϳ㨬d/Lz[x.iKjIU \ PnQ}/䞐$gX߅RS+RxwyiZ.6?SzFi ~[/׺׀PtYڀ)rΏvG>n"RpgG<1gcYaҹf(}Zvc[Q, Ozl.Yy.cE Xca+دXb.w KNT]_ a=!0#9nO(רz|tU=2M&f#1>P51= kuba7>Mz[(=wdm^rbxUyd9Sz՗%ҋ 2S~9 gv,4;CErD;F;*vE[<71^1X/1@֌ :8 {'JB; r]n) 6sṰH]SIPJzrp|*jǦ+PP CZ攳}.am<ɺ2 r>Iސs2IWM|†A]*_P"+tS>84bIrY&wRq$dZeMi /D)iڟk SnI/w!?A>k M xx9FOx?y8§\XYk~Swvt{l+QHS5IROޞ}Ozx҂K>BYvӄC̳)dys6W9dԠ^<%wbq^Lk@}t1l+:tv`NhBˮGKmLޤA@`Dg6rK' L~} {/v3*!Q]${~U7?@y};(792m ^eGBƜ$ G!6.9g[>N3+lm?Kt$1{3QJv$C` FQ6 '޽a~OmV]K׺MuFY-n:}Y8@C p;47wHjq03̀',Q]zOD<>3PbYdVrIt|NY(s gc啕„) 4,FWc*h`NIt 9|nPid`},.^V1@sG2_]%5ެG@fThES˥`KeNco;-8WS6TV'1=7q'] =0th_Pe\ ^Z＇C)3;jE s` 9j5MDȿI4BNl5ά01W~=]k!pp+R[%zobFc%W|Rha~kzJJ7,hH^U@3É0lŠ所.OǬ O;j9VXDO`bے@MᕰyfAyIBVO7]v0YήѤFzRHg.7P$%QhEJB`Xb~_G+QT2{0\rI"<^%xzMqsvcH5^{8 $*W 3m7űa mWö؅GO %Xs̞^kSAdb?1(11`;a:lmcTz?o~}Fbat&tm(Sj>fnH*[tqPsAbv,\z6Yq̧2OW\ 8dj&r;rUgqB[rgǽ0Fmm|!*V#  7 H j^p^kAJC|Pb+0UW'+t EH2)}& @{> Řw|HQ"ӱoǺ Tb<r><;3Z342`G*.^/12X)y\. }9 o]}#[E۫^ 4H>E3CªU-+鎺+bp!ɜ;4[l CcS\ѹ!(KGN-;||R8V6KzxhP B`e=u?2/U3^m]:v[vxFѩ$qJg5>1U/OVՌU0zE4E]HW&M@9>.8-N은|?<(h.ԥ|t#MK9u_Wb >Dd7VK1܋FkcM6xU >4.:G|Dk([sAGGRfQ82W藋msm a A_|ב7SC I]aU3}) TDՁ=dv2o0\gݼ0*=8u}z}m!y̾]pG"+mBu5[PFD}sZ5 e¦oNWoeP@lD>Lw&%hw,Y?)dOZr}Y fk=)6vYg0x< p,SŽLW* \oNX rFl(l#Rw(Z.uǎz!2u+6ڭ$kM1L1V[`ޜXDxNC{pKv,Ad mo)0-:U4ڲ.WmkhZX/t )WGJeԳ!>Dk~T*OKLYv $X2eϪg[vI{ՖV>>uO\/M-S/,$IDMl?/ԓSEHf2;zCC fq,CB<8~z; iCc<]W}UYk.t[ 0.kZ/f5h_!$"ZʔSzcڇ13YLOm? [8w,BL2<)C[%@=)fohQ-O'o ƽZշ5-DHiPXv ^$O{քFfI(&͆ކ`~"џr`a.zH D\œz(&vvqr❔h4$$}g>>O,RDӕӞGZpS5#M k~i\lAHm?,t0vv8@L:~rތZ"; VvRcƆt_),R#.O<_9Teo|4E՞M)k߀.x2+UobdLfKL~^JO܎ЦX°.ZE/$'Cj]" '(d۞'U qlԢ*EۺJ3KfrZ c4ғJOʼn3:MyBMh;xA).77eTf[Zٿ2l9Smj7ÃMqubBOPO+LbA;Ss왢QSxsuF@iG@w\d}X^uQwXY O˸Ѧ#NJQ9)a10l'DŽn8V YE nN\9-A̼آ>gQgwB:FI  UqmDrr׬ako#>.<`cPIL6ur%fFc$LY_mAiUQ#T 4=gqQLqSwN3(֧Ld)Oxy7mrwz_ykKNx ,pSvT%Tio?w 2sqKfbU:aԀE66 ~w- vy2 g,oXdbL%nXDk4a.BRIa;w: ;Bj.J> RV$@%M+~[~<_ul?Xk$nB'xhaZE,Q1Lf"&[Fu)Od@U_|TBTU?`;⵲&fKY?o#~"e$W B>/0,خ=.9r@1 ?iQ4Ҿ滰\Y*(Q)Ľ멵Cn QQ\ە_! Cx–z s`6w&)0!nCn}Kf @ vgawc,8l/[kYu5Аbͫ%t)N=e r9nk$<3"mZXH5fMF0ʣA!'05]_@Pbx* lذ?k2eӋZˬȎyxv;0r9{Ep\=j0zpo * Qv[9>b#Oy'Cf~'P`X"ta$tM1; Xur}|⧕Qm "%s$7*ӿT| 랷="+g51:uݰi{xE~-؋GFZ).y$u5'whJaMoj|y"ټ_˔,> ͷ)oUKYŲ ?z+XJh޿5yA::Sb3܂ f& T~*(ɋu^eOg{ONVXQӕ+E:oH.cC&Gܓt)N/SZpsQlUt7\[-||TogdBquJ0T_5R7u9zW(?5Yjʂr6e//`=d$+.͸g_܄';w*3-90ܻpNM ejy'+귂mԚ|feӢk7`ꈕ7T'C¬t3O󢟎3"||7[tNRL}/ oUX. Iζ icv3彁'{D~mvMK)$r5hm+ff~Y# F[7jhuZ%5~R`̈́m.rXBaY^M5:;t yHo^ZN3S#n2߫C{F5x-:P93v$lI<`Z.C1·;dxU0Wܪ8ޤJIH.!18<*]3YLϋ$i0V =te+Oy^ÃNf+j`|!`1+*`UXXX3WZqo@+F .䆌:4eklhT74zɿݨ>TDv֕TL(ĭg1>pNwe3:*&=X-E6 k]cZ7pݬNAL4zITBr*Նnc縿Oڬ!,e("+H%ca[qgc3Z@Wm~hSr6u(Aթ$y{|TuH&P"H*ao9uu:,ЬTKsնBiKo#B6> y_ &T\m\ȧuD P(7Egm}cw8׬=9ڿ{e ;/;7}m HAXMx'w?P|9i{-qeDWwpΜ"xomb<})%ET>3,`7|PTB+x (Ԫeq !c *Qٌ⓳..&p.ev= ,{\-=<|-w1X#:=:&H/IʯeWڮxa&1*+O[DPus} WWjwsKױ\Ǒ+ۏlg s[WӴTTyD?JP'q@{%BfQSmё:Jpۮ^90`'2~~/ slؗKVE\A1]U}b9'!8I= CsM6Z@Gw":ǠPhӲ`^<$r*i~ns9Uި'ȏ[SfEt hCH4F nTt^D[XKe{)ϣLڧ] óxЮHxMϛ)4U' Ͷ*s`AʑNyX B֧Άe+9&^M.$ΆpjNuw5 f d!H4Ylp=kR\'(*UA~+卲z>ssp" 5d0kÅvݯ8N7 nhlCu@$/o)鍧S)ֹT J.siy/NvUkFìɎSG܋by=߅X&{],h@*.N_ho$\ %#tW?+J2xj; 嶼LPv Ac[tO/%BT݅AA4Q4CW0$|ؒ2_o}kD8e!M-r >fOn@EJm.SyBA~8O3SY3Cjåve# tЮ+ T]YСZ 0^$9ȠEp0־kGwϯ=$!Ȋ˃y2{nJ|ӴJet+(hT`(sPo}܋RA@. XZ_{(h-!r):-;ϡUu0-3>wQ4I/v\2-]Rp[ˊV;AMYP>IE=N rp<țE2>;FoUFK@r~(6ydaȀne\i~_&+CAm)Q@bs8^~ rzԛ价 -8SؼIMqH:ݩԸI$|Q\F~Ӷa{>x5a-&%H<+nP™M0j2o"}xȐ*z%,L6Si`UG|]7hAEnؾ_PwC}Q*R!']LTc+$0Fhx:[1w4^(wcOޤ?=Na)#AWGS %xi( 7uφVrYl!~=#s6 T鞷X ?XfͲ<+]o"(ܫ@ŷ Ei5bނFFE}M$H FȊ7O9+fK vZhv@ a c&A?υ8;iU6vv#)ׯ@@G~MsUoaɗ?Ǻ7#\Eo!? &=*[5+BXу`.j .+ʼX>>.M` t bl;moՎ _,d R;rP ꗷtX0Gihj q~BM_yFz6w{Mh#pD0Wmҳ/V?rsִ-aOvh E Ip|lR\Os KJca L4ix2Ԫs)SFV=n㨍]3!D'^ޛ_ ť(OYGR|!SїC鍹#DZ̤Ɯ-)qMHޡ1KtsLCu >McՖ :蹽M;8IuLFD$ +jlǛ`H 8+oiXC~>%ţpKs( J/Fy^Fh2&j}M((%%tϛFv1 lNJ'og!; F\U#Q@mgOچ\Mt-w{0HrWɁ<[~s^"n_|Ͽ6Czp70f9H!=ttѼwH>#N;잰s R.C7$7ic9쥘g4!:+enJ cƳ<.0U"~cѷ0lyhg@pY7`.Mbkg.J,񤫬wa Cr wb Dc>H_K|x 2cN(odo2b!jFvwL/e:3_9jD/x$x N .L[V`|[%nMi%EjSߐeAR<mԚ^3B++ 4l=UeV\Vxm,骡Q+s@z`Lh=+[g $\Fd^ h8ܳ^YNOZxxR^m2ر W2m U͇x}0 THǬKq:A4֛*׭n̢R%r$1zr!+)Ux<հ}B)LWdX^-ED=zR/-RLGgPi$؋m}=:"C@N` Afe3KVPmL)yjACF" 3P8Zba_NcDbU0? K ELVKpn670W+!M|MK3G3ah;aP基#FwLmiev/Fgm 5\'p{Y@l<֎;IÚr(2d!j6[~{5PJ͹݂[ sa=`7'F ppoQ~zW8 yIja4 ]/!UR8 ` L,sFm DՖh*7ZڣV)˹8: ¦(r+j'{ߚY;Z8鄺$ʠf#yIHp_Xb1\[#2NEfa='ozkXv.%󡻊"nO,yf(ݗ½ܖxCy\ǯSdJ.dj^HXG)'5lVYO΢>dxY<[,,O*=YsqR c]:~C r@HˆY0_g: {{OJ0i;>\d u bqr3\ަS{|5)e+C-O),zR}JvUEeX{D8$ lWdA`֏u}?P{sj]skpP+{D ! BpGW:)xsHV} 3p$ȖiՑxT֫Jd`s35K=*b\Sru wv:oF& 糂gǿ? @)2Y. s;XXr&*ĩSbh3`ON{Op( |ʿZ?*v00lBMRULSi_`H_LʀE܅>3(mL_8pӤVH~p bkA۫y'\^?=Hc{yP̽I;XG_J X3{tfTU8+V!{e22/ C9AG*O !O vP4u:㐡J.SwOսR%Qvsfk6 r{!L0o}I7%'rapϒO4 \ډh\B? yr.R᪭x즕Owľ*dKF4=]sjEJ/@%<;$(=Kb0IWɦ#y5 tnkp+ '{ee96LRp Iۻڿ^6Z[y.?٘_Rb)sK[n4\O3SfMݥ* cņK!_53GCaE7?tf+ 〦`(\,ve ,et~+Աn҄7EתB~x՜VBلM7z9Ř@eO%H!&㩲@@1i k25b5{@TJzabK@XӕH qm ؖfR$0 A`B)t/'w.镥tTVGA}PIUxm ;ю<gaGC񧞻R\5E)r(fv0NaD(8ŭ.rbfa=ܓxEu`!P=5!.O(sw]*fظ/YUuМD+_dzb?|5Y#{e=d թ &V͔^{EŷZQR|~3[J }j7;Q }蜽Q>ds_PQ!Kx |DV۝\Oe)B@kX[z(K4\$6Y; 3fv7t}|Oe|lѤDÔ`Zc;Y!T!LqW#P*8 밁3[Fd]wa\H1$GLUvs{Oz12Y^6ˋs!9Fx^>&V5Hw$`|Q L$J!ù6*&s8! =!̎(Zf?Q9d{klhSV?nB KelkoqSztb'16r<"8%12#5ZPt[ˬu6+$#B.`^!Ɛ_&7iP"bUlB^8($HGu:u5v;0./L#w)B &7L:ۼPg ӻ{-.++GxϮjUU@g3KvKno2 nܣiNn5iZLD0$˩:Y#X̮nÑebptf|qҲ1Qr&܃4&P>L??j#l+kGGU& {m}SXm.J,=%hPT譥= hR 0ߝIw=ϸs2a:li?RAZ9u6UH 'n_m })W1~JpM!D3C3lK.1cS]Y]2KLMmjTδUfRx}SG w UWr<+O W(SkQ`)Qa=Nos2@(e[\>e vļ)cГn{vjWɩcf Nm߉OcFqY\W0'7*wIv3F}Ōf9F|Mb<']FN>g^$tȠ= 2NBضUt-|~_1x6}E&=s4h* mW*`Mޢ.颞SrGHTN^kFt۪N|o?=tvAr0쒇{RX1%K4HK @ο|ܾ@|&a5p3CQRg熙Aj!"{3g19?[N0~#1iy~[ExyFOWZ,.T(0ZMTACOOdM; F4a?ܬ(_z3?[7B˭2@37J%]xBǨՂ}r9>R7& { ŞlVeqJQ&/߳P;=% ba-l*h|%IF.QBD"fl,fj(z Uu|i68~^ i. >C|,.| F M?xo`^4VD k"ЅN}C;|fkH;^7Q􁈦GRlX$ev=u[qBL}2,4K!Ȋ:ggGf)E{ ^y$}9ɛ' Ɋ_+ 8e|W:9-NV;p h ȇ%f&;b]fWؼCJ9!0Y z;>^ H+lzl9ѱ߈k`J<12YWo@|VY@o{b.IZ ƐIyDpC"!{i^wtF)!rTP>J~-e )@}0Y|=ZiԱ$OG= x̔F]u@G VtG  7E?vIFK*Y +2w !VDןXMdeg h;l @ZS;{kjZ؛TMOXS(&Ϯ*U}{߆$/!N/<[4NN7{%Z7\ϊhVx[q FK M )o6ʭ)IA{M ~״95c99¿4s$2AF+!5ӂV$-t\W: IŽ̌b=gasg6Gq*L#K0YTJ羯-J64~Z{Zf)9vie.1'Q]4ar-bz/8aDHփp0U]א%0&ZCADJ1U( *cGuvS}2`zAzy&&fHD+^ qx3wǬZ|&SCP{t+]ư7m˃XX$Zng"DbX/1FD9wN19BҒd7f79:ݣγ4"¯۶Uģ5 %щ D)DvQqV+Gn`1ΰPU' IT~eeB }C$}h6͂Q7U݅-t fiKKwYOpL0 [( uH!c@JrW}γo1:A˃N~ʡJ+Aez Qt0&*<5Gs<Ӫy_wWVr|Ů>w9v%g4=ˋ[}RFS,m jtȈRKZoGt-  >DmRQ/ G! "vT̈i~.k\&fR蕧gȀ3nYy?x+zPrIЉGl+=%dY>GBLjp颳BPl`cVZU 'JΘYS"[Z1JL 0~sm9*.Dd]&_YUwh|Ktj#$sJ^n,k*/fVi9T[ʺ1[M9X( vFN!~4AbOIa=fEZ-6V, %m/ & t'Ô{™R{( qK}L jO C` 4eO%@YY=DU>5:UC ւBkl̺ irL%{NhLzNp{ď4ʛ~zhL'5]|;;dc7M27>dkw_|PM3+\DS9"#:V]~dL6NnE!&ƹ*TTc_93ԬYsayO ō=ָq  ]%GmFh$KSvx;]ՙzT%V lh yo#$Ns( 23b]X1P 6YmclDݴfE9"3qAr_yPạCY( M)2>Qyމ2dZ~y&Z0<;%#:<歗r'FI;[FN9Y,xR>C ^&oy,nk+; Xp>|tfqॅk+IOw ,9ʋ ilIJE-!1$9yǠX]=ǁRbjf!4چ#=to+rRU"?|A$Au3'{wRgۘʵw 'kBn>Og'QO$rPKwt[52Eqx侩&7'f9G鿞:>+֯ΖfuAPxy3E}'hs/Ԩ9W=gF'2j8,73:RJOZkљ4وD\my6<,&<~gzعrG) "\f.[SA-6$mzW2j>Bqy7`چy{}Ow婤xi33;-`g=99i75vjody"q2F9x͑:rt 0C;C^rJI +i`LB&Vyn:1l??k1Aɨro6ͦpfw^?P Rs00|>TZó%9)퉬H=Pe񼝇xu^ ƓwmtġD8(}pN<,S^;`gތ-rfc,d9F>;[ KRffoeL;X*y.o_'B>(n`« &mF7Z%?Y) ͤGxL0s-6c虜kOkBy- fȯl;fgH^vgu8њ a/9 vzRD֪!uRR\f: D &0~렲qZ9.Ok+y:OmQ xҟlw9;I\[j̪g`M50EMMSp#$w}fo5oǛq%7*Vkslgy0VM$pXf,LX%i0lLrX]Kcs~,FDK@}ԡmЛLhBTEZWC^W$%6N 2oŚCv@Qizy zϮBF@[hC8*[32w+byaDmEh(E[1xChf/N-\1SNƺ/N?j3ר{o`"7, s7Fr 5+o?M"g\o|g7\A!pK$iAhp0tp,D[ kx_`n- ΞcɛS;3hY 73 [#xЁ #9 ;0.93s:p'Wj =~QAZC?|R4NIkYE™^ 2doL; ͵bF-|P4o MhE(}}]vVi{ZG̍eg:,ƤZ¸ rO nCs,ߋ<.yw+[O9T~@Eɐ- #d$,>0I۬R-PԜ nHZ~qZ#LH (dBml,2 i bC;$"~m?RdJP,+5ؾ`#G:lb eϚYKL#x|Ww^L0i>xDB:{&Or̢3ad5ޟ.ϔ w(gyxpBJxqEJU֞jV- +^E <QSH<= V Yеh{ǔKg#i}TTaf^/(@hC`~4&)id4;_w= R=V|+T0UmDw-m>/]}*KOʜQU\Í(o)ϭqyR-m(X {b.? BPM4b.drtj{Szw^F(N7Z C7K? ĝ`{DEc\޹nĜ{{.@Kȁm7 WtoETbRP.P)5'p=M}h\[2W*#گX:NJYMSy!xW}:2>c0|:ႾXOm={ 8RmF;qYf|_?‰fr8zLR `U5i|{wX$x{KPfh4LI.NOLm ?߂hlܢX܀WY?_Axr\Pw'MAJK\ݦW@}maϨR#^D;!xGP kJTpɜI?\igd5Z%yP=nhJ({y#$N?Ωhyo52DwW݉Q4&k l9o6 ?L+fWZ[ [kcTz.|!sqmZοٓ RҮ3䠃tl1AuwvU ial͜-dXQF G#} 7 Y4iSؠ&t#+*~x4)@.11rN2% )x$>fڒ2 l.0$17fAF|A[JHa Sa5l}A8 N鏊G7[|ɷSdXxG0?cCLi&ҥ9`Ӷlii­Vx}ix"0eq \PE7JrG/3zɜl1ҟ97oРjZ|}4?ߤzNޝ e,9ko m%쫸Vj<(VN1d{gl[ 796JF ZSzMk[Ͻa}]u|!Y/8+Qo0;zy1k֮LKGW]JJh,Fŗ:;"(!Z %t'T x껱*ōD@Br`szc%VMaF}eIkGJ_iɾVpMţ0R)KUR~s>.Mr;ʽ(u_]=Rz´uTn"q"mE cV7VUp^87N<zRD#N H4f5c02]qWGKO陑2t\8TXG3ؑ<HP|(9˝ eěcqT'/MNHp>@K5kcHJnm:HUDa.CA6&E6@C&juuLTV(\oϼoY)'I D2y.*ٞtSN dHsx:HWvon0[A.oOTJzby κBճB! aAt2n>^ר-ÿOX>$AB[e ]Y:6F1ppYgm*]1!393RS3JT!h.6 4iw-\ZA*¡}a!ܛ D0\|Jo0r۲1ԧr? ~dAnہt,~:vNu}ЋlOB66Jz q|_}pV+<Ȁ0DEҨ^~FߡA#BQүJ_,W]~RF|l=Ls=GJ{M3QlGN%pwIӬ#|q 1=Z,Yk/O\:6@43pB3I[q9K7o5g^890| qlL|)ha ?t^:}߲ ,QʒL2 %whǼQbZ_i(ИDw r1㇫po?6"D96-k;/崢*4(nג?u6| 9~[h`iG81 k@7 XWnPoPui%EH F &#2OaĄr<Jwέ 4Tg;=V_β^~Vu=wd[|C:~VmG 0ل< ʲj`' ~ʮ^>ׁL9.#nZ_LsA$&<f?uBklpn0ሯ+i6q&:=9I AX)C1wV4Ӂ-+oũvnԩFx7*v.~dn bqZ,{W1P[}A]}Y 8+=SO>MPȨ?HtIwi`:F *TVjSyJì`kv).N"5 czAj[)%fkB59)@q8'Pr!tr;KDvC WRYuKo)6TʜNO<5<>p^ )/4숝ImJ(ww6sߗ!ٜwKPU2szĜYߏܸ dBxSAu+}nn0`#E߻%SkB 8 v[' -b фb8jk>lxTRf4`ӣ?E 9 7GG!2_I=CX$Q2r{ 5_Ds:^|<@SlUu73f/_-A e'X8Ѱ?OHcLBsӨ&.Nϊ{aBbhxsICsCB*eskv ڃyi`쀖Kc5TVəs>8qxRf/f˃}Ӆ=OR6,6gݰ@EhE$v?rbs ņsxg-mCeyj A$hpCac"#+ g['z:)8٪ EbH7ӤM3R=^OUAq B!Q6)%Ƅ'edoDL %-#=["܋jiR>G%s h r/;Z~u3ʅ9x@,n [T7RZֽ!5H,Jym,&g*4w`?ow476S fhU]X|']# wT6\8n1WΫ.We+BC]:lVW5)1fN A_WW6 CAc"iwi@~KNCa%~E9V".%Ӹ!|Օ%.$!L m iuM1UsI-W;AiqU@H 9l˄ŧUqof@YG7-o4_-ԛӝPnTk ֍DO:/D7c4{JEx5$jID qlۛM&RӇkQ3/!ky]zxuhu`oG+~(]BJڳR4gS8d%m*FnU> 5)|B8!o؉oG+>#CS#Up_Q&f >Zdb dHޮMgDv6i%!P10') o4Mez9.cD  k \c%yW[cJe l{}pF8PRdSvsbl;ɟ;&ֻw\ڞۦIM(C@(qiJO-F í|Ynus`ӑMzdË syPCdžAtcTIK>8: 4+oPGAUωJ?)өȅtm=Sc7ZE=.q{ /du# Hl#J v+=եOO;yE?:$BvU7*0 a"uZ:Ln˪= K2$f܌[>T4D~x UGKe)ore9o.SCfʚ9zQϿ"ғ$f s %ӿCn})hR")zAMGIg)YboWM wbvG廑WrȕDR۹2%XCpKq}ZwsVPne.͐N|o<}!2wK#/`<w rƻN9Q}GJ=;G5\3o/DPiW*hdX#lRǷJ3:T ea#SŇmأ69-߇|{ߩ)Stu0 aҵKf!dd|= o_1{餄‹aucBHy"QX2;s).h$JT2ba&hO W:.9Y5'>Y<`2#!(ޥP?:f妌IO$IKFvL[ Rɾ,@Ni*A3OxiD58 ~v$=Ry|N\b nnmW@3mZMlN'UmxDhFB"B-(.X= HQ/q`kcZ5t ׿}փ'4r!9|klvI`>ft왎ʊ4}?iPT΃Euzyykg)_m{FE#:tv3] m7&´h%tpqyjUK%.}|[ ^N!B/%MiPY4IF OSV M$;>MtCY'7 Fh @ E?Kt_ogßrL\{Dps(U yHe3eJ67BhSce{B*< (2O/r\Y7IWꡈiHu%X;p$eݨZ@es]K ,OGATYZ%Y)F RZƜ_Zf'o,j^-oͩWl !qAW4O[Gm'}Vi&%^AdM?-p&ҰKke+1$5M$2YpN SDDjżAyC.D@WeMB91z"561=K_ԩ(^o N""Uq,Eu^ɣ0'GkeMк9z~v}!/ Z)KN0eoB;{iP&.\0FL"aq/1oUM@BӁU@`ǖY8Dg˛vE$Gy4cj^P׆[RpYKyºt:K n|p#wjO1#F7B<]zj/ʍ;)ٚlS=Օ1X.OCmZLiY gbt%. @P:N|{NTðnlȂ GfSE O^ChF]|llU%~SoAnC-XɈ+Sݪ Ψ|1%;f!~·Q[}+#΂C?D(pK{1L~ ]Ex-2WJ?,W"c z-G*\FGa湻\O:{zotD˕]({6[*۹3YC(+`hYy%ufGOCۼRVW`V"E゜Ni.1~]:o~{ٿjYCUZ fcy-Ʌx%_::&$m~Ud 36Ck[@be.j{=UbQ ÐLXu~4B B*ox$,9]iN2OJKEG& OcoQ<;%ȯX TN"a\}Z R&ineb ' †sOi^{zy%ug~g`}d+D7E͗^L)e'@ ;LũK4w=S)f(#yGCjE2}tqDd8Sb<|Z>#ցlXG(5*ijv& (hT:6!]ol2<jCJ ,:BaQ&]f#1ss_YPN+rYutƺw1NKS޶N}Βii'r4ޱy 'aXKl."篜'kIEj4Fb "1I~fLNFnz<[yrv*wV6w$0֣ PlɱRsPk<ؿz[wΛiFD#lȞ_4GG~5e:]߄9x.C<*~ O xo+693߷fVK-<΋ $ےYE+Egd쮱[/Q [<׍c0P\`#k5O`G0wj= 0(B?ZN5dg}_FP:[m^ J  D\*n8;L1S"2A>P:O8*UC FkH]_m"`KCK5a-+,D&/D^1@WA5V芡W80gfxwIq~L0jdV k~[WVYwZŹM.aV躯{5Mm1\E??!>zv-k/Z5GupȳeIulFd::k.zYs% )ZsJ $*aľt`j#.'3慛JEolUU˵%MraN¿k5uzVJ7ZK^5r`TGhzu2o-QƐ;)S~p&).iv:{v3 {/A/odfRwLJ{"/okYHn|Ato Ku 'L5KIJ aN莄z'WTh-Cx@6wOu_$'$+)$Ӵ#mG/ͨ-7e.78|͡.9(:i>zWM b(ݠô#:(X7pR|3= _y ~wxK`h:e_)WUwW a,VaZBVw/UųHqExCF.EiܸEω ;˸b?Ucݸ86=M]@3 Pr&VWX5cZ{p;B1')T[2.;y{Gn.tē`9~7g`,hGyή7]@w P\QDL٭ςbڲXAɹF;o)~"b6O&X>M>M5o-\`z gϞ+}wtم/w>s~z(ba+~DqOG<uRzw#Q[1^Wjd|* Ž+iB,qΫp7K5@zRK.7wlY?L& \hf b )(0RpԢ@`>IJ4\aTeڸ4@rfc_b jšUv$O* k&WH3i`CrGu%oydF{)F½ ]D4S{@LPߕGePX#'iƸ\b]X|e:$4M'*;s)@`hEJj{5QPnTw v\s /aو0Ye`BXk؊!Ёin8&oDCjhD;i[&L;!tIjRcic if  ۬9@,'򐳳iɻc~zlkxgmGd[,m\MC,%ݣ[1 իO7.{m;dlhUQ]O4VH5\ %-Z(҆{R˸ n蚠in3ʸ6BI$*~5ި{* Jçs_OVnO i})9$󄹻{q8R+Bݤ̻΅ ?c8kOAR*:>Ss;\!';gC¾6FYQvze y$Γ}Y(-%6WOK6揫OL18,Yo_&R lyC\^ [g(ɸkN_^KK䯩pV>hP1н.Esf/B +0D* .xYyxDSzL~ H3ho)D'REu\l`Y%X`}.xey+@v% +{y'VouH'O&; 1&'8,|T?[*?GmCZeon)\fSUMaxoPwR:P[rtg4ӽ{3{b"s[Kr._y>ف'(m-F2L!^%Gl_|K=c{7^)6IG#Rz&>H t N <)1/pRr^#m: 9lcE.6@pҼ9$$L*?_^tW 艀)$Z<2b9L]^4BLKÊLZnthň7 Iab O3_pye9,q[S/ef % 6,eyxEIb$&>zq/~Y1^%5{s^NXT?'P\<o$C*L%(~2nĀ%táW*ClxU W/aEUϯ:saLV0)Ζ &O$ԉ>@# >U:[dQ-WdKݯχHT/eC4N?EjK Af_Xa&$D64f>{L_cS_+tvdê>Rc0Ur:;SZ ]].|4e((YIskGs&<E=#AO$V+6a)SM lB2'FŢoqO/v4.b*}/r D LG.̄@z KITL$6Nj^l3t4F*-VD9knAH"~Z#J)Tz%y2&mEq?.R|8i`gmIQg?+]s- QOk'%.ŴXwžwLcKvo[>ܭJX!5/ bj})YթAlLLuy ZZ3dgjľP ]=?!8@M'}Y2$u&_R}lHp [H+>ο.}b +W7ehىL*f 8 ȫC Y2(Oz<7\u?jd^LH gvU]BE+M3k8_+Uv1/\4UUX+h@AF`~j65_6,cE<ٮ<E3tZ!tSTe)UljYRьLX'$R[uf>K{ӈ"YP`LBvÓV,xnGC8ɷ!vf!o!A񆯄MH9΍ r|9OJ"͉[Y rT /i(iè±P< MN`XRmwss !7Z,@s;SW0|&FBސ@SO|/QC whTȪwN@IP 3YPK}mUԟAYPD^R0LL,i*;dKIBW'C荺PBw=\FuRӶ), _+i ~K9h .{USy\-G|Ƈi9$Zxs|j.-[d`%j֙r 0X}]'-񎊱6ndΜ*M8Zp7I^^sHg7] !V.$Z6t#C;Wvh$9cB)`=Gk<)?`b" jOνӷ- v,R:j}`N0肍2]}Il͗p)MQ(HL xTi/}I5x ]DO9nmADV4"b=m<&H [DL9ڑ7gb{KnpBd /aƽ@%J4Z# Q/@]}djBQ)/+ #j|z• IY``k)pލhtLx-7֬Ɍ "JHᗗB+9{1XXI^Veydx@z ' ioLo MCg{iA0΁!b:v^?i3wn i_:+f!ry*.87*‰0E򹌇"T**=trciO f&xrˁ%@U@\ŋL:e]7&S^ks ArsaAB̏oOcf]IxK@j3y1K9"Q9Bn[4BqN]C=vnv:" mqO/zٽ=:.{Dxàh 8DQAu]^ڟwO2j>LvbE|}]Z˞#Yw\C:]V2>/`NTp)ծYTF. Xͪ$I!^BP0?NU4&oo+iEN7P|A_PtBgk!$sG%X>\ĉ7zܿE."'E^ ?,C]eCd AQ@֥j .>3?uUYVHGg.ma,{-UKXդ3oV49sT PT5_DYu"S[3Cg~߮9gg݅ha3g36mNM_FQMXD. .2_|K>&Z6x`e&KQ@T  q׺?ŭSze5xh\K(F򳷀٦cGIޕ5 f5D[>4)^P0Ny]jUJk}u"+8dA4{ww"03xذtfFjTƯ/ؑjvHlD-kjDr7ˮ'FS ÛHu%vbh_-V̹0O.LQGJyt0r V*ͭb}CpֿAqI(!=1@KpQ3Z,0sIQ82̄׵#)!BZ',AyJ5.cs2U Hx \3N[Si3VR Q<[6/)ł,_ԎiU$nn &K,__Y;=7Xｬa}5̟s]ka;yA~Nod*R1bilm5j$X}1#( 7EJ1)T6xN#L*0Ϭ2ndN4mH ]K)sׂUTa};~3%PsAdY,TTtyׄ*E:QʫA_5fy խ pp/iE>e@z򠭊]~`?ON)}A@pgK&[I9V1*.M#>)<>S*VfnB=6[BM3u0flql 8%41eQ1ºSп1ZGԋAHd’ UY%NúݝbPp( 򾚳gu|cPN%d"xFˌoW㬞B}';?_t"| =[k{Sm-EwdqN EJ> ʻsm|UL$ĝ'UB=頒Pz1>RL9ۜVR4ʌU;C6|`27 L7pxjj]N]ա\EJyqTՊXk;w|ݞæOi:y06:53Esm)Xzf&Ķ O2sx]I "1J3ؑwpdڟ'w̾رgێ;vY}9|ٸtKt Iek;'6< cY$K S\D\)MSHN8tjJq!Զޤ;юn;A qm'%k.;ne1uLOKX6?%lrәF[2zC[DbB+Yճ%v"KEY/gF#0ԖJ|e**4iA1㡞M" fZ>z9+W~ !+P~sҐ1EREם'~J_jVƕ5`H ᷒nic'nqڷtDQoH_%Ҡ G;LD~?En3Nֺս}wyu5J#rz~$rʣ6oJK{r f(]RJZ"-]j{:[Ę`wWXQ?Nsi 4C%Z[]Ep[^nOʉWϙHcxƮ& -Et0:Z ϲonWh~I|طǾc(/;D[+>X[] |mH( -Fx A.$86g]0%{I!%8Q~IZM鹵8^,O?ڪ*Wʾ_D֘'`OrSS0z@ m3ٖZ)ze4r99XhHA {(x,eE7>P?U~BIɗ% ?,pzb o%G%Trƃ-eɥ}I2'w,,V$Jj6jU=^]3B''UDi[Rⅶx<=n" ],Sm\l upْXϿ/եZ |5^ر{/=kYtzi`Y(]thE#]B_4qazw5 qu1 'chtE~PLCU>zX!QǧFiЫl3l&t=!{aJ$pohJ=V o!LJk?\.Dq-{po4|gKuT-z0sz>raϾ-ʯeSGʙ%)Փz8Cw;`WLJT;E-IeKA{3a.g|o.&])?DNkaۑW /pKD#yr~GwdF63 ?,@7vՁx=hiL=pg4s#$JͭylP5gz?c!XG(>ER<1nOflv,AlPv}@\"nk{hmgs xtZS~n1Kttµ1/Әfm&RrmWH?1x||zۮ~.q*f!8e~c=F^=[vΖDWʬ***24> bDT&_><: _1boFWG/ aP 'Fμ1WoXNJ CaaP}cO~-&of̹Tq|ܲle姞h-+ipei̹uǩ>滞@VrgKU*~>27WPġDz]Yh 9. ̘ _3ZCd| q6 z(y O" IGOKřg4n#s-DGwx)4rOp&Ô˘=gL] >Cuov54B;FilH*Mr?43΁ JA}z̈́Q-G- b* <5ە0X0ژ!7L=3fl6la &1ؤPx"#TE(ފem|f2:Cn9[x0m%4 {=<'(H Q NX `F9bK C[ADWLf HE 9u-M3X:hgS i@cš|CP[ ;s;C<oc.AR9"'b7tEkd<9Jb2{Uw 6.uA6Z$sBGH57pcѾ8o^e?Ո#*%ypST:\!K]%BbHHsoJk7-zuSTqZb`Ka4zVPԌfgAbX ?^m`13GqutFJmv}h0ةVEne+鷡 Ny* Sw q"v}Vm;R| ,h:(k!.=ݭh;#$_z|-;,AG$3@Z_V`>M0cVyc/B4VDNl!vz v}Jb_9D{臄?Yִ^9_5nEuރqZΧcs#2t}XZfq6_:z7c,/,[dߴ| Udwӂ0x,Trг0x{;˅|M7GEA $0Ȇ3J_FKH_ʵ-N= ~Gb ۃ8,Ii8u05 a$v#kk>a:l#0ubqHIۤcS-|@:'g,BV0w$W*PRꕨ%wSxyP !􍏾\7[rvL߶ ]p| s0a>Q|)}WL6Ŏ7rMeD@ ]`qڡ3 &ozx3Yw[YʞJ(ߛ~vCFG~M`T>}رb#>X59bkm% Ckm;ыVi*c m{\?,S Ӫ'Wրu1o|4%3=ͬJ_D?],IB" BA/Z#X ^WGaO!>sN4&ZM[K6УXWXQ+  ROd K2r .ARIXMQ`tgK/!t¬⡐h.x!l_kbhq3N΂H+"oC;A* xl<##Z`m`:C=]#z.`͊]B@3kP =WvˏtGѝlX=@,`$1iG.>J!1ocyHVބڅJ<: Rcj}~ְj"W^A,*Lyo%Iuw,\,^q,NC6Ghe~M/yV6'yVRJG%4E2 '"f!X2V2|r+ ֲMٳ݄"&k.09LSU6kӃJ;P3Z6ĆMXLUZO&5 [(#+[݄Q0zS,k6]DH\A AH,+Hnp*OC PkՊ2oK/Jƺ }VQjoH)^usT Mն/*E=~'HVHa[5JYbB)e~hF֡hʟxqSUdћbo o4/b8~h"\? Q4Ӏ?N=p'1Qdd8@%]MqjWM^ ,s2\z/ǸRd5:LKOJwmuW܂e-0dPѡ=Af1o23u&pKZ, ٺ? fXCLbp5wD0jT0X5E2A*sܳTG`+g{_,%k$ wz0XG'ao-iޢTVD/m4 g*7#dy&MmͼidbHlCcƲ~RUO* Zhe,`Y+pݥ~B(=2r}םѹť' |l%_,ͺF?u"UUX Pucmt -+XCڝ9wyTȈ f'F :\L|^]tq:u~-Bt<愁 fvX UN2 `i),Rd5 v.ЂZTKx| #़yaG1tѡ_?ooNݏ~;l)3{ H*ذڅt5H0q}ז=ɂݾeΟntۃ?ESPb^b.kTB7I/*0$=m&Q- ) yFhUdfIr੎ _]P)vu^% h\;[))RXݙ؅acZh_FfgfΖ usBU|Ijwj:nOM9pP6N#ȇSxPvG"MTցC-OҲ]b-2LwNuf>KTW hcmR$/@i?Du!jH,˽ƘWRfDƼtKY<ۏl}@h4a ¥bt Nm hLckɶ< " 06Ƹ!#|~’eaz M(};hZxf-S=߇HB>QA6^D <]ITG0h wϕ/X <@f9jUW$O2C 3axSoh`=kiɥ*fOI9=$%5JH}/\}8yV!7)a'*`h˸hA8Z!(h9i,V֡"T |$ -P"7/p0=VB`^12*dx丷]1ܨ4m^Hϰk" /:=JyG6L ⛖gGPE?w⧚Mxnp<9RPNfZd- +5 Kax1X*8ktǠ36 nܟ/#Cb[_Wl:-ކe[0Ї+6q}3J hfz>9=ZWoKlHkH=z.{ (լu:(;Ô,k9l tE]ʆ~B֔|) ᵨȽDŽsY]`x|፺Iܱ1-'P_D^6/RR%&HO `Ê-\bG$Nkv萓?1`l1|xOql(q:e(:}Pv '[x}f!lgLsX~+ gbGc|sǴNeT縿BRI~E0awB/"gQ ]~R)˒ 6'!QB7jHUؠV7M*Tt} Hl3߁" ҊmY&5휡 HюZ|fR3~U4 O1$iBab-|mA[J vG1Vr{T*LmK6oTΐIN xs hew| w!sXCh5$qN$Ҵoܵov$F3EL֧fY*d;9Ӗb4>rؖ^KA2GK:. 8o7G> ݦl7fgTE#cH1 L";2:2 2lf{SxU}e')=̫`h $D+A^W;<'n#K6%t{mHmߗchCJi ӦkJEe>J?bN}#%Rp5;7VbP!h^ {C&zpeKudN49 qϬX6n&ڗ' B"HV_{\PNʘbP+{Evmw^w_aJd<~szK Ԓ:YV| q/EJVԩ'_FfmBWӃxo8X Wi<[#!jHjEARY+ȉ*EeSpza }U2ѱ6DO^)#Z{&wgET# DÅ)_(hjmbewA&4,ڴSϠO2 f`-uGm[65 Zl7;()vϮi|PAKᬯV&يſ͙~wy fZN> Bngz{5uɦ1<3IʘԷ^b+p'9&J -2l1O0-X/rgypH쟩V 4 |aY_&!6 [ jtĹa._ fg!;*E%֑>86]dZ^@PV34NؒYPiSUq:p!$=O8cq.: 8=&- Q2tݤW %(D]x .8Gz 4A_ vĸ?Tһ.8Dh|x_5QŽ r2YϾ!"&OnF0Ye>6oT({`z#r¯үL\vUS.nw<[}J n8|/܊K1QSSkZȤѹxB_l??(L9#W׿' \DŽ vrb1@SP;t*@IHaoS*dBv~sIUo Si1[4 8'IuE?d{ Bf:7>u9#y=W$flf|,MVuA-\l\>*t*99?t}5_cB7N?G['gm˼>$U3~C-t)աz(LO1]]3p ],+g"" |JZ,yI=}7ݟR$GUB TZs3tY1#yO4=[G7\S?aC ktJuw/#aTPaQnJO 5NPqH($&|=:=ٝȸ̹[M%WtʹsSVs{cz4s(x$k0eoͨQ+_wמ۾P|B'6K`JQ=ǕLLS\mHw"ްyjrg.̻4==1嶢?\yR=ңީzoӳ/K>[ճ3_v{9?ta.~VI' >񃣭ŧddo@ V4y1oz$0;.G7qnV;sWx{ОeMǵo(eLD;;%VTo:1NrW |r޹N\u^ (,\ OO54 >PُaminR=s'5hk5Ec:76)M_@)op]lF.Yuۍifu'rqЦŷL1uvJ;pbJz;ioR0*Vib)~2鶖˺$L缫!kd{ܶA3 !__8@e|bK?ޖ;kr!EW3'I-~%۔ ,qBC'ڧA hH=R)욶t@;ܫi-=fl!lMs K*PI:2NT_o[cu3lCjg| =4$*#21J>"a,q  F HP^ZB-YeB{xaca'f9#Xe!,(pfz9Yӱۂ.7 v-k^gjG]F @BD:ϯ(?gL~a^uO&qZPPHj:͞L6"m_q =)V:̭G*&uRX ӖlϏDMiIM{@% ]:vc ,,#po69AN;W⍨۸ףz%T!q }P_wVFҠD(!WOfƐjK>S?h:<$_0TvN=!hV9D0? 6ӒЇOX&־jb{zct`F h]zKz2d&Q>K2β}B0ܜM ҽǪf$z rXL:=tPDbZ5zȫ+Qp]8O jMO=2 Vs.Y)@ikI5FBnfXH{xa,a%MwY* ޹ yU7ѯl2QI&A77J]k|mI2->GP~sݸ[UJHa"-a`t$ۑbLFdUÅ?VEAV$2 b`c"R ўgsO !.";cn^pTSZ#AdxFĸ&bt\gQC O&m5 YZ