389-ds-base-libs-1.3.11.1-2.el7_9>  HLk|d $ƨ*ҸD^f&A M myuX7N+nj)`ҎgAixW䏋1u*]6QQh"bhSy֏.xњm3>P(ixZL!/dEPoc4%˪5eulZbL\KkIv<_uzJA숺GU_Kzbh$su+ qkBnUX>K-r> ,|@'+n tϺTSG7ZP߁v3܄D7zޙ6³r{mX>9Uv◼ *5em:&ͪq׈Lįez%$௞˃:E(xcsAh)I2gš7r~ڊJޫ{922c=]HZtx(QS1쁾qk)l$Jr 1e:~ Fԡg?^"I*M> U[lk6M,10dd2174837b8b8676a6e22dfc27439080960424 /td $ƨQebZ<-Z>W]}?N5`/Ao*A>$4C:AhR0nу^I:{Rg"}ٟE0A&QM5z_J ȏ%,b|<5p3tUJf> D/RtTXT ʁ~yY$(KTQz%ٽ^Gm00')g]֕:3C${KH.ݍ) ;|X{,)6eSFV"DOfpN* դT{/XXGYt#<=-O9N @[L(I֞ 16L'sI(󲖵V-o@{ux ovbѦR//lJyq>uOR:Gt>8s0?s d $ L8<TX_f  . L   0l(d88 8( 8 v9v:\vGiHj(IjdXjtYj\j]j^kblIdmemfmlmtm0umlvmwpxpypsC389-ds-base-libs1.3.11.12.el7_9Core libraries for 389 Directory ServerCore libraries for the 389 Directory Server base package. These libraries are used by the main package and the -devel package. This allows the -devel package to be installed with just the -libs package and without the main package.dUx86-02.bsys.centos.orgCentOSGPLv3+CentOS BuildSystem System Environment/Daemonshttps://www.port389.org/linuxx86_64PpJKmAA큤d ddddddddddN^o ^o ^o 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.so.0.0.0libnunc-stans.so.0.1.0libsds.so.0.0.0libslapd.so.0.1.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroot389-ds-base-1.3.11.1-2.el7_9.src.rpm389-ds-base-libs389-ds-base-libs(x86-64)libldaputil.so.0()(64bit)libns-dshttpd-1.3.11.12.so()(64bit)libnunc-stans.so.0()(64bit)libsds.so.0()(64bit)libslapd.so.0()(64bit)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@   @ libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcom_err.so.2()(64bit)libcrypto.so.10()(64bit)libdl.so.2()(64bit)libevent-2.0.so.5()(64bit)libgcc_s.so.1()(64bit)libk5crypto.so.3()(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libldaputil.so.0()(64bit)libm.so.6()(64bit)libnspr4.so()(64bit)libnss3.so()(64bit)libnss3.so(NSS_3.10.2)(64bit)libnss3.so(NSS_3.12)(64bit)libnss3.so(NSS_3.2)(64bit)libnss3.so(NSS_3.3)(64bit)libnss3.so(NSS_3.4)(64bit)libnss3.so(NSS_3.6)(64bit)libnss3.so(NSS_3.9)(64bit)libpcre.so.1()(64bit)libplc4.so()(64bit)libplds4.so()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)librt.so.1()(64bit)libsasl2.so.3()(64bit)libsds.so.0()(64bit)libslapd.so.0()(64bit)libssl.so.10()(64bit)libssl3.so()(64bit)libssl3.so(NSS_3.12.6)(64bit)libssl3.so(NSS_3.14)(64bit)libssl3.so(NSS_3.2)(64bit)libssl3.so(NSS_3.20)(64bit)libssl3.so(NSS_3.4)(64bit)libstdc++.so.6()(64bit)libsvrcore.so.0()(64bit)libsystemd.so.0()(64bit)libtcmalloc.so.4()(64bit)libutil.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.11.3dlc@c6@b=aa{@aHw`+``7@__@_"^@^?@^@^@^@^oj@^\@^\@^=Q@]]W]nU]A]:\Q\\P\g\@\\@\\mA@[@[@[[:@[[-[~[~[m~@[W[U@[L[L[L[L[0@[0@[+@[@ZZZyZyZk@Z`@ZX@Z*~Z }YZ@YZ@YZ@Y@YB@Y*@Y˒Y˒Y@Y6@Y$$@Y@Y i@Y i@Y i@Y i@XQ@XQ@X@X9@XP@XX@X@X@X2@W@W@Wu@W@Wt@W.@W~W~W@W@Ws@Ws@Wi,@Wi,@W_W^@W - 1.3.11.1-2Simon Pichugin - 1.3.11.1-1Mark Reynolds - 1.3.10-2-17Thierry Bordaz - 1.3.10.2-16Thierry Bordaz - 1.3.10.2-15Thierry Bordaz - 1.3.10.2-14Thierry Bordaz - 1.3.10.2-13Thierry Bordaz - 1.3.10.2-12Thierry Bordaz - 1.3.10.2-11Mark Reynolds - 1.3.10.2-10Mark Reynolds - 1.3.10.2-9Mark Reynolds - 1.3.10.2-8Mark Reynolds - 1.3.10.2-7Mark Reynolds - 1.3.10.2-6Mark Reynolds - 1.3.10.2-5Mark Reynolds - 1.3.10.2-4Mark Reynolds - 1.3.10.2-3Mark Reynolds - 1.3.10.2-2Mark Reynolds - 1.3.10.2-1Mark Reynolds - 1.3.10.1-7Mark Reynolds - 1.3.10.1-6Mark Reynolds - 1.3.10.1-5Mark Reynolds - 1.3.10.1-4Mark Reynolds - 1.3.10.1-3Mark Reynolds - 1.3.10.1-2Mark Reynolds - 1.3.10.1-1Mark Reynolds - 1.3.9.1-10Mark Reynolds - 1.3.9.1-9Mark Reynolds - 1.3.9.1-8Mark Reynolds - 1.3.9.1-7Mark Reynolds - 1.3.9.1-6Mark Reynolds - 1.3.9.1-5Mark Reynolds - 1.3.9.1-4Mark Reynolds - 1.3.9.1-3Mark Reynolds - 1.3.9.1-2Mark Reynolds - 1.3.9.1-1Mark Reynolds - 1.3.8.4-18Mark Reynolds - 1.3.8.4-17Mark Reynolds - 1.3.8.4-16Mark Reynolds - 1.3.8.4-15Mark Reynolds - 1.3.8.4-14Mark Reynolds - 1.3.8.4-13Mark Reynolds - 1.3.8.4-12Mark Reynolds - 1.3.8.4-11Mark Reynolds - 1.3.8.4-10Mark Reynolds - 1.3.8.4-9Mark Reynolds - 1.3.8.4-8Mark Reynolds - 1.3.8.4-7Mark Reynolds - 1.3.8.4-6Mark Reynolds - 1.3.8.4-5Mark Reynolds - 1.3.8.4-4Mark Reynolds - 1.3.8.4-3Mark Reynolds - 1.3.8.4-2Mark Reynolds - 1.3.8.4-1Mark Reynolds - 1.3.8.2-1Mark Reynolds - 1.3.7.5-18Mark Reynolds - 1.3.7.5.17Mark Reynolds - 1.3.7.5-16Mark Reynolds - 1.3.7.5-15Mark Reynolds - 1.3.7.5-14Mark Reynolds - 1.3.7.5-13Mark Reynolds - 1.3.7.5-12Mark Reynolds - 1.3.7.5-11Mark Reynolds - 1.3.7.5-10Mark Reynolds - 1.3.7.5-9Mark Reynolds - 1.3.7.5-8Mark Reynolds - 1.3.7.5-7Mark Reynolds - 1.3.7.5-6Mark Reynolds - 1.3.7.5-5Mark Reynolds - 1.3.7.5-4Mark Reynolds - 1.3.7.5-3Mark Reynolds - 1.3.7.5-2Mark Reynolds - 1.3.7.5-1Mark Reynolds - 1.3.6.1-16Mark Reynolds - 1.3.6.1-15Mark Reynolds - 1.3.6.1-14Mark Reynolds - 1.3.6.1-13Mark Reynolds - 1.3.6.1-12Mark Reynolds - 1.3.6.1-11Mark Reynolds - 1.3.6.1-10Mark Reynolds - 1.3.6.1-9Mark Reynolds - 1.3.6.1-8Mark Reynolds - 1.3.6.1-7Mark Reynolds - 1.3.6.1-6Mark Reynolds - 1.3.6.1-5Mark Reynolds - 1.3.6.1-4Mark Reynolds - 1.3.6.1-3Mark Reynolds - 1.3.6.1-2Mark Reynolds - 1.3.6.1-1Noriko Hosoi - 1.3.5.10-12Noriko Hosoi - 1.3.5.10-11Noriko Hosoi - 1.3.5.10-10Noriko Hosoi - 1.3.5.10-9Noriko Hosoi - 1.3.5.10-8Noriko Hosoi - 1.3.5.10-7Noriko Hosoi - 1.3.5.10-6Noriko Hosoi - 1.3.5.10-5Noriko Hosoi - 1.3.5.10-4Noriko Hosoi - 1.3.5.10-3Noriko Hosoi - 1.3.5.10-2Noriko Hosoi - 1.3.5.10-1Noriko Hosoi - 1.3.5.9-1Noriko Hosoi - 1.3.5.8-1Noriko Hosoi - 1.3.5.7-1Noriko Hosoi - 1.3.5.6-1Noriko Hosoi - 1.3.5.5-1Noriko Hosoi - 1.3.5.4-1Noriko Hosoi - 1.3.5.3-1Noriko Hosoi - 1.3.5.2-1Noriko Hosoi - 1.3.4.0-19Noriko Hosoi - 1.3.4.0-18Noriko Hosoi - 1.3.4.0-17Noriko Hosoi - 1.3.4.0-16Noriko Hosoi - 1.3.4.0-15Noriko Hosoi - 1.3.4.0-14Noriko Hosoi - 1.3.4.0-13Noriko Hosoi - 1.3.4.0-12Noriko Hosoi - 1.3.4.0-11Noriko Hosoi - 1.3.4.0-10Noriko Hosoi - 1.3.4.0-9Noriko Hosoi - 1.3.4.0-8Noriko Hosoi - 1.3.4.0-7Noriko Hosoi - 1.3.4.0-6Noriko Hosoi - 1.3.4.0-5Noriko Hosoi - 1.3.4.0-4Noriko Hosoi - 1.3.4.0-3Noriko Hosoi - 1.3.4.0-2Noriko Hosoi - 1.3.4.0-1Noriko Hosoi - 1.3.3.1-19Noriko Hosoi - 1.3.3.1-18Noriko Hosoi - 1.3.3.1-17Noriko Hosoi - 1.3.3.1-16Noriko Hosoi - 1.3.3.1-15Noriko Hosoi - 1.3.3.1-14Noriko Hosoi - 1.3.3.1-13Noriko Hosoi - 1.3.3.1-12Noriko Hosoi - 1.3.3.1-11Noriko Hosoi - 1.3.3.1-10Noriko Hosoi - 1.3.3.1-9Noriko Hosoi - 1.3.3.1-8Noriko Hosoi - 1.3.3.1-7Noriko Hosoi - 1.3.3.1-6Noriko Hosoi - 1.3.3.1-5Noriko Hosoi - 1.3.3.1-4Rich Megginson - 1.3.3.1-3Noriko Hosoi - 1.3.3.1-2Noriko Hosoi - 1.3.3.1-1Noriko Hosoi - 1.3.1.6-26Noriko Hosoi - 1.3.1.6-25Noriko Hosoi - 1.3.1.6-24Noriko Hosoi - 1.3.1.6-23Noriko Hosoi - 1.3.1.6-22Noriko Hosoi - 1.3.1.6-21Noriko Hosoi - 1.3.1.6-20Noriko Hosoi - 1.3.1.6-19Noriko Hosoi - 1.3.1.6-18Noriko Hosoi - 1.3.1.6-17Daniel Mach - 1.3.1.6-16Noriko Hosoi - 1.3.1.6-15Noriko Hosoi - 1.3.1.6-14Daniel Mach - 1.3.1.6-13Noriko Hosoi - 1.3.1.6-12Rich Megginson - 1.3.1.6-11Rich Megginson - 1.3.1.6-10Noriko Hosoi - 1.3.1.6-9Noriko Hosoi - 1.3.1.6-8Rich Megginson - 1.3.1.6-7Rich Megginson - 1.3.1.6-6Rich Megginson - 1.3.1.6-5Noriko Hosoi - 1.3.1.6-4Rich Megginson - 1.3.1.6-3Noriko Hosoi - 1.3.1.6-2Noriko Hosoi - 1.3.1.6-1Noriko Hosoi - 1.3.1.5-1Noriko Hosoi - 1.3.1.4-1Rich Megginson - 1.3.1.3-1Jan Safranek - 1.3.1.2-2Noriko Hosoi - 1.3.1.2-1Noriko Hosoi - 1.3.1.1-1Noriko Hosoi - 1.3.1.0-1Noriko Hosoi - 1.3.0.5-1Mark Reynolds - 1.3.0.4-1Noriko Hosoi - 1.3.0.3-1Parag Nemade - 1.3.0.2-2Noriko Hosoi - 1.3.0.2-1Noriko Hosoi - 1.3.0.1-1Noriko Hosoi - 1.3.0.0-1Noriko Hosoi - 1.3.0-0.3.rc3Noriko Hosoi - 1.3.0-0.2.rc2Noriko Hosoi - 1.3.0-0.1.rc1Mark Reynolds - 1.3.0.a1-1Rich Megginson - 1.2.11.15-1Rich Megginson - 1.2.11.14-1Rich Megginson - 1.2.11.13-1Rich Megginson - 1.2.11.12-1Mark Reynolds - 1.2.11.11-1Mark Reynolds - 1.2.11.10-1Mark Reynolds - 1.2.11.9-1Mark Reynolds - 1.2.11.8-1Fedora Release Engineering - 1.2.11.7-2.2Petr Pisar - 1.2.11.7-2.1Rich Megginson - 1.2.11.7-2Rich Megginson - 1.2.11.7-1Rich Megginson - 1.2.11.6-1Rich Megginson - 1.2.11.5-2Rich Megginson - 1.2.11.5-1Petr Pisar - 1.2.11.4-1.1Rich Megginson - 1.2.11.4-1Rich Megginson - 1.2.11.3-1Rich Megginson - 1.2.11.2-1Rich Megginson - 1.2.11.1-1Rich Megginson - 1.2.11-0.1.a1Noriko Hosoi - 1.2.10.4-4Noriko Hosoi - 1.2.10.4-3Rich Megginson - 1.2.10.4-2Rich Megginson - 1.2.10.4-1Rich Megginson - 1.2.10.3-1Rich Megginson - 1.2.10.2-1Noriko Hosoi - 1.2.10.1-2Rich Megginson - 1.2.10.1-1Rich Megginson - 1.2.10.0-1Noriko Hosoi - 1.2.10-0.10.rc1.2Petr Pisar - 1.2.10-0.10.rc1.1Rich Megginson - 1.2.10-0.10.rc1Rich Megginson - 1.2.10-0.9.a8Rich Megginson - 1.2.10-0.8.a7Rich Megginson - 1.2.10-0.7.a7Fedora Release Engineering - 1.2.10-0.6.a6.1Rich Megginson - 1.2.10-0.6.a6Rich Megginson - 1.2.10-0.5.a5Rich Megginson - 1.2.10-0.4.a4Rich Megginson - 1.2.10.a3-0.3Rich Megginson - 1.2.10.a2-0.2Rich Megginson - 1.2.10.a1-0.1Rich Megginson - 1.2.9.10-2Rich Megginson - 1.2.9.10-1Rich Megginson - 1.2.9.9-1Rich Megginson - 1.2.9.8-1Rich Megginson - 1.2.9.7-1Rich Megginson - 1.2.9.6-1Rich Megginson - 1.2.9.5-1Rich Megginson - 1.2.9.4-1Rich Megginson - 1.2.9.3-1Rich Megginson - 1.2.9.2-1Rich Megginson - 1.2.9.1-2Rich Megginson - 1.2.9.1-1Petr Sabata - 1.2.9.0-1.2Petr Sabata - 1.2.9.0-1.1Rich Megginson - 1.2.9.0-1Rich Megginson - 1.2.9-0.2.a2Marcela Mašláňová - 1.2.9-0.1.a1.2Marcela Mašláňová - 1.2.9-0.1.a1.1Rich Megginson - 1.2.9-0.1.a1Rich Megginson - 1.2.8.3-1Rich Megginson - 1.2.8.2-1Rich Megginson - 1.2.8.1-1Rich Megginson - 1.2.8.0-1Rich Megginson - 1.2.8-0.10.rc5Rich Megginson - 1.2.8-0.9.rc4Rich Megginson - 1.2.8-0.8.rc2Caolán McNamara - 1.2.8-0.7.rc1Rich Megginson - 1.2.8-0.6.rc1Rich Megginson - 1.2.8-0.5.a3Rich Megginson - 1.2.8-0.4.a3Rich Megginson - 1.2.8-0.3.a3Fedora Release Engineering - 1.2.8-0.2.a2.1Rich Megginson - 1.2.8-0.2.a2Nathan Kinder - 1.2.8-0.1.a1Rich Megginson - 1.2.7.5-1Rich Megginson - 1.2.7.4-2Rich Megginson - 1.2.7.4-1Rich Megginson - 1.2.7.3-1Rich Megginson - 1.2.7.2-1Rich Megginson - 1.2.7.1-2Rich Megginson - 1.2.7.1-1Nathan Kinder - 1.2.7-2Nathan Kinder - 1.2.7-1Rich Megginson - 1.2.7-0.6.a5Rich Megginson - 1.2.7-0.5.a4Rich Megginson - 1.2.7-0.4.a3Rich Megginson - 1.2.7-0.3.a3Rich Megginson - 1.2.7-0.2.a2Rich Megginson - 1.2.7-0.1.a1Rich Megginson - 1.2.6.1-3Rich Megginson - 1.2.6.1-2Rich Megginson - 1.2.6.1-1Rich Megginson - 1.2.6-1Rich Megginson - 1.2.6-0.11.rc7Rich Megginson - 1.2.6-0.10.rc6Rich Megginson - 1.2.6-0.9.rc3Rich Megginson - 1.2.6-0.8.rc3Rich Megginson - 1.2.6-0.7.rc2Nathan Kinder - 1.2.6-0.6.rc1Rich Megginson - 1.2.6-0.5.rc1Marcela Maslanova - 1.2.6-0.4.a4.1Rich Megginson - 1.2.6-0.4.a4Nathan Kinder - 1.2.6-0.4.a3Caolán McNamara - 1.2.6-0.3.a2Rich Megginson - 1.2.6-0.2.a2Nathan Kinder - 1.2.6-0.1.a1Rich Megginson - 1.2.5-1Rich Megginson - 1.2.5-0.5.rc4Rich Megginson - 1.2.5-0.4.rc3Rich Megginson - 1.2.5-0.3.rc2Rich Megginson - 1.2.5-0.2.rc1Rich Megginson - 1.2.5-0.1.a1Rich Megginson - 1.2.4-1Rich Megginson - 1.2.3-1Caolán McNamara - 1.2.2-2Rich Megginson - 1.2.2-1Tomas Mraz - 1.2.1-5Noriko Hosoi - 1.2.1-4Rich Megginson - 1.2.1-3Fedora Release Engineering - 1.2.1-2Rich Megginson - 1.2.1-1Rich Megginson - 1.2.0-4Rich Megginson - 1.2.0-3Rich Megginson - 1.2.0-2Rich Megginson - 1.2.0-1Noriko Hosoi - 1.1.3-7Noriko Hosoi - 1.1.3-6Rich Megginson - 1.1.3-5Rich Megginson - 1.1.3-4Rich Megginson - 1.1.3-3Rich Megginson - 1.1.3-2Rich Megginson - 1.1.3-1Rich Megginson - 1.1.2-1Rich Megginson - 1.1.1-2Rich Megginson - 1.1.1-1Rich Megginson - 1.1.0.1-4Tom "spot" Callaway - 1.1.0.1-3Tom "spot" Callaway - 1.1.0.1-3Rich Megginson - 1.1.0.1-2Rich Megginson - 1.1.0.1-1Fedora Release Engineering - 1.1.0-5Rich Megginson - 1.1.0-4Release Engineering - 1.1.0-3Rich Megginson - 1.1.0-2.0Rich Megginson - 1.1.0-1.2Rich Megginson - 1.1.0-1.1Rich Megginson - 1.1.0-0.3.20070720Nathan Kinder - 1.1.0-0.2.20070320Rich Megginson - 1.1.0-0.1.20070320Rich Megginson - 1.1.0-0.1.20070223Rich Megginson - 1.1.0-0.1.20070213Rich Megginson - 1.1.0-1.el4.20070209Rich Megginson - 1.1.0-1.el4.20070207Rich Megginson - 1.1.0-1.el4.20070129Rich Megginson - 1.1.0-8.el4.20070125Rich Megginson - 1.1.0-7.el4.20070125Rich Megginson - 1.1.0-6.el4.20070125Rich Megginson - 1.1.0-5.el4.20070125Rich Megginson - 1.1.0-4.el4.20070119Rich Megginson - 1.1.0-3.el4.20070119Rich Megginson - 1.1.0-2.el4.20070119Rich Megginson - 1.1.0-1.el4.cvs20070119Rich Megginson - 1.1-0.1.cvs20070115Dennis Gilmore - 1.1-0.1.cvs20070108Rich Megginson - 1.0.99-16Rich Megginson - 1.0.99-15Rich Megginson - 1.0.99-14Rich Megginson - 1.0.99-13Rich Megginson - 1.0.99-12Rich Megginson - 1.0.99-11Rich Megginson - 1.0.99-10Rich Megginson - 1.0.99-9Rich Megginson - 1.0.99-8Rich Megginson - 1.0.99-7Rich Megginson - 1.0.99-6Rich Megginson - 1.0.99-5Rich Megginson - 1.0.99-4Rich Megginson - 1.0.99-3Rich Megginson - 1.0.99-2Rich Megginson - 1.0.99-1- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule- Bump version to 1.3.10.2-12- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search- Bump version to 1.3.10.1-5 - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)- Bump version to 1.3.10.1-4 - Resolves: Bug 1765106 - ipa-server-install is failing with ipapython.admintool: ERROR failed to create DS instance Command- Bump version to 1.3.10.1-3 - Resolves: Bug 1756182 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex - Resolves: Bug 1749236 - etime displayed has an order of magnitude 10 times smaller than it should be - Resolves: Bug 1758109 - AddressSanitizer: heap-use-after-free in import_free_job - Resolves: Bug 1676948 - After audit log file is rotated, DS version string is logged after each update - Resolves: Bug 1749595 - Extremely slow LDIF import with ldif2db- Bump version to 1.3.10.1-2 - Resolves: Bug 1748199 - EMBARGOED CVE-2019-14824 389-ds-base: 389-ds and IDM: allows authenticated unprivileged user to retrieve content of userPassword field for any user - Resolves: Bug 1610234 - nsslapd-defaultnamingcontext does not change when the assigned suffix got deleted - Resolves: Bug 1723545 - Directory Server 10 not RFC 4511 compliant - Resolves: Bug 1724914 - LDAP server returning controltype in different sequence - Resolves: Bug 1739182 - CleanAllRUV task limit not enforced - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache - Resolves: Bug 1685059 - After running cl-dump dbdir/cldb/*ldif.done are not deleted- Bump version to 1.3.10.1-1 - Resolves: Bug 1639342 - Replace error by warning in the state machine defined in repl5_inc_run - Resolves: Bug 1691931 - memory leak in automember plugin - Resolves: Bug 1662461 - Log the actual base DN when the search fails with "invalid attribute request" - Resolves: Bug 1732053 - etime can contain invalid nanosecond value - Resolves: Bug 1546739 - consistency in the replication error codes while setting nsds5replicaid=65535- Bump version to 1.3.9.1-10 - Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections- Bump version to 1.3.9.1-9 - Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit) - Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character- Bump version to 1.3.9.1-8 - Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology - Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary - Resolves: Bug 1713361 - Update defaults.inf - Resolves: Bug 1708215 - maxlogsperdir accepting negative values - Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together- Bump version to 1.3.9.1-7 - Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 - Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives - Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients- Bump version to 1.3.9.1-6 - Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7 - Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated - Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist. - Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass- Bump version to 1.3.9.1-5 - Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck - Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections - Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit - Resolves: Bug 1615155 - extended search fails to match entries - Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy- Bump version to 1.3.9.1-4 - Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database. - Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements. - Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 & 3)- Bump version to 1.3.9.1-3 - Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389 - Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone - Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members - Resolves: Bug 1673472 - the warning about skew time could last forever. - Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod - Resolves: Bug 1482596 - referint update should discard any changes if mep update fails- Bump version to 1.3.9.1-2 - Resolves: Bug 1417340 - entry cache is not cleaned up if an operation is aborted - Resolves: Bug 1603140 - Export produces a non-importable ldif file - Resolves: Bug 1518320 - ns-slapd: crash in entrycache_add_int - Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod - Resolves: Bug 1589144 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day)* Bump version to 1.3.9.1-1 - Resolves: Bug 1438144 - [RFE] Include autounmembering feature in IPA - Resolves: Bug 1645359 - Rebase 389-ds-base in RHEL 7.7 to 1.3.9 - Resolves: Bug 1561769 - [RFE] revise the "transient error" message in a replication agreement's last update status - Resolves: Bug 1563999 - Is it possible for Directory server to reject the current password only? - Resolves: Bug 1597202 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user - Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database - Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives - Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck - Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass - Resolves: Bug 1643587 - default of "nsslapd-errorlog-maxlogsperdir: 1" causing huge log files - Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated - Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist. - Resolves: Bug 1653163 - certmap fails when Issuer DN has comma in name - Resolves: Bug 1602001 - cannot add cenotaph in read only consumer - Resolves: Bug 1589144 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day) - Resolves: Bug 1600631 - In repicated topology a single-valued attribute can diverge - Resolves: Bug 1626375 - on-line re-initialization hangs - Resolves: Bug 1627846 - Contention on virtual attribute lookup - Resolves: Bug 1642838 - after certain failed import operation, impossible to replay an import operation - Resolves: Bug 1647099 - audit logs does not capture the operation where nsslapd-lookthroughlimit is modified - Resolves: Bug 1648922 - during MODRDN referential integrity can fail erronously while updating large groups - Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy - Resolves: Bug 1663829 - import task should not be deleted after import finishes to be able to query the status. - Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements - Resolves: Bug 1622049 - db2bak.pl does not work with LDAPS, but ok with STARTTLS - Resolves: Bug 1633488 - fixup-memberof.pl -D cn=<> -w - -b <> -P LDAP fails with ldap_start_tls error - Resolves: Bug 1451460 - error messages during ldif2db after enabling encryption on an attribute - Resolves: Bug 1627512 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value- Bump version to 1.3.8.4-18 - Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex- Bump version to 1.3.8.4-17 - Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int- Bump version to 1.3.8.4-16 - Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical- Bump version to 1.3.8.4-15 - Resolves: Bug 1624004 - Fix regression in last patch- Bump version to 1.3.8.4-14 - Resolves: Bug 1624004 - potential denial of service attack- Bump version to 1.3.8.4-13 - Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly- Bump version to 1.3.8.4-12 - Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)- Bump version to 1.3.8.4-11 - Resolves: Bug 1614820 - Server crash through modify command with large DN- Bump verison to 1.3.8.4-10 - Resolves: Bug 1614501 - Disable nunc-stans by default - Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server- Bump version to 1.3.8.4-9 - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.- Bump version to 1.3.8.4-8 - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.- Bump version to 1.3.8.4-7 - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA (removed patch file all together)- Bump version to 1.3.8.4-6 - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA- Bump version to 1.3.8.4-5 - Resolves: Bug 1595766 - CVE-2018-10871 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default- Bump version to 1.3.8.4-4 - Resolves: Bug 1597384 - Async operations can hang when the server is running nunc-stans - Resolves: Bug 1598186 - A search with the scope "one" returns a non-matching entry - Resolves: Bug 1598718 - import fails if backend name is "default" - Resolves: Bug 1598478 - If a replica is created with a bindDNGroup, this group is taken into account only after bindDNGroupCheckInterval seconds - Resolves: Bug 1525256 - Invalid SNMP MIB for 389 DS - Resolves: Bug 1597518 - ds-replcheck command returns traceback errors against ldif files having garbage content when run in offline mode- Bump version to 1.3.8.4-3 - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.- Bump version to 1.3.8.4-2 - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.- Bump version to 1.3.8.4-1 - Resolves: Bug 1560653 - Rebase 389-ds-base in RHEL 7.6 to 1.3.8- Bump version to 1.3.8.2-1 - Resolves: Bug 1560653 - Rebase 389-ds-base in RHEL 7.6 to 1.3.8- Bump version to 1.3.7.5-18 - Resolves: Bug 1539082 - Fix memory leak- Bump version to 1.3.7.5.17 - Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent - Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 - Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp- Bump version to 1.3.7.5-16 - Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP- Bump version to 1.3.7.5-15 - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy - Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections- Bump version to 1.3.7.5-14 - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)- Bump version to 1.3.7.5-13 - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 - Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c - Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy- Bump version to 1.3.7.5-12 - Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter - Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica - Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length - Resolves: Bug 1518287 - heap-use-after-free in csn_as - Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing - Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired - Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate - Resolves: Bug 1457315 - cmocka tests are not executed during rpm build - Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL- Bump version to 1.3.7.5-11 - Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape - Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base - Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base - Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get- Bump version to 1.3.7.5-10 - Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled. - Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick - Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base - Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package - Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset - Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes - Resolves: Bug 1498980 - heap corruption during import - Resolves: Bug 1511462 - scope one searches give incorrect results - Resolves: Bug 1514033 - opened connection are hanging, no longer poll- Bump version to 1.3.7.5-9 - Resolves: Bug 1271208 - Fix copy and paste error- Bump version to 1.3.7.5-8 - Resolves: Bug 1509016 - cleanallruv task is not logging any information- Bump version to 1.3.7.5-7 - Resolves: Bug 1474100 - Use of uninitialized value in string ne at /usr/bin/logconv.pl - Resolves: Bug 1506425 - Improve valueset sort performance during valueset purging - Resolves: Bug 1505046 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV - Resolves: Bug 1271208 - nsds5ReplicaProtocolTimeout attribute accepts negative values- Bump version to 1.3.7.5-6 - Resolves: Bug 1488836 - directory server fails to start because maxdisksize - Resolves: Bug 1474100 - Use of uninitialized value in string ne at /usr/bin/logconv.pl - Resolves: Bug 1447308 - Add option to show full un-ellipsized output in status-dirsrv - Resolves: Bug 1438526 - Server allows to set any nsds5replicaid in the existing replica entry - Resolves: Bug 1185774 - Missing warning for invalid replica backoff configuration- Bump version to 1.3.7.5-5 - Resolves: Bug 1476207 - Enabling instance service doesn't work - Resolves: Bug 1434335 - Errors log filled with attrlist_replace - attr_replace - Resolves: Bug 1453155 - unable to retrieve specific cosAttribute when subtree password policy is configured - Resolves: Bug 1459965 - repl-monitor - matches null string many times in regex - Resolves: Bug 1463204 - Adding a database entry fails if the same database was deleted after an import - Resolves: Bug 1469567 - Activating roles returns error 16 - Resolves: Bug 1498773 - Installation of ipa fails with crash in topology plugin - Resolves: Bug 1501058 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends - Resolves: Bug 1352121 - [RFE] allow to enable MemberOf plugin in dedicated consumer- Bump version to 1.3.7.5-4 - Fix coverity warnings from convscan - Improve atomics- Bump version to 1.3.7.5-3 - specfile remove cap_net_bind_service+ep from ns-slapd- Bump version to 1.3.7.5-2 - specfile updates: add asan support, make nunc-stans default, and general cleanup- Bump version to 1.3.7.5-1 - Resolves: Bug 1470169 - Rebase 389-ds-base in RHEL 7.5 to 1.3.7- Bump version to 1.3.6.1-16 - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify - Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird - Resolves: Bug 1456774 - ipa-replica server fails to upgrade- Bump version to 1.3.6.1-15 - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify - Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file" - Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0- Bump version to 1.3.6.1-14 - Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing. - Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value - Resolves: Bug 1449098 - ns-slapd crashes in role cache creation - Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so - Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users - Resolves: Bug 1451657 - -v option is not working for db2ldif.pl- Bump version to 1.3.6.1-13 - Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)- Bump version to 1.3.6.1-12 - Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10- Bump version to 1.3.6.1-11 - Resolves: Bug 1410207 - Utility command had better use INFO log level for the output - Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl- Bump version to 1.3.6.1-10 - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val - Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous - Resolves: Bug 1377452 - Integer overflow in performance counters - Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values - Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975 - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script- Bump version to 1.3.6.1-9 - Resolves: Bug 1442880 - setup-ds-admin.pl -u with nsslapd-localhost changed - Resolves: Bug 1443682 - util_info_sys_pages should be able to detect memory restrictions in a cgroup- Bump version to 1.3.6.1-8 - Resolves: Bug 1432016 - Possible deadlock while installing an ipa replica - Resolves: Bug 1438029 - Overflow in memberof- Bump version to 1.3.6.1-7 - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set(fix crash regression) - Resolves: bug 1381326 - dirsrv-snmp.service is provided by 389-ds-base instead of 389-ds-base-snmp - Resolves: bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl.- Bump version to 1.3.6.1-6 - Resolves: bug 1437006 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages - Resolves: bug 1341689 - dbmon.sh / cn=monitor] nsslapd-db-pages-in-use is increasing - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set - Resolves: bug 1397288 - typo in logconv.pl man page - Resolves: bug 1436994 - incorrect pathes in pkg-config files - Resolves: bug 1396448 - Add a hard dependency for >=selinux-policy-3.13.1-75- Bump version to 1.3.6.1-5 - Resolves: bug 1377452 - Integer overflow in counters and monitor - Resolves: bug 1425907 - Harden password storage scheme - Resolves: bug 1431207 - ns-slapd killed by SIGABRT- Bump version to 1.3.6.1-4 - Resolves: bug 1379424 - Reset-agmt-update-staus-and-total-init - Resolves: bug 1394000 - dbmon.sh-fails-if-you-have-nsslapd-requi.patch - Resolves: bug 1417344 - targetattr-wildcard-evaluation-is-incorr.patch - Resolves: bug 1429770 - ds-logpipe.py-crashes-for-non-existing-u.patch - Resolves: bug 1433697 - Fix-double-free-in-_cl5NewDBFile-error-path.patch - Resolves: bug 1433996 - retrocl-can-crash-server-at-shutdown.patch - Resolves: bug 1434967 - rpm-would-not-create-valid-pkgconfig-fi.patch - Resolves: bug 1417338 - To-debug-DB_DEADLOCK-condition-allow-to.patch - Resolves: bug 1433850 - Deleting-suffix-can-hang-server.patch- Bump version to 1.3.6.1-3 - Fix spec file to include the tests- Bump version to 1.3.6.1-2 - Resolves: bug 1431877 - 389-1.3.6.1-1.el7 covscan errors - Resolves: bug 1432206 - content sync plugin can hang server shutdown - Resolves: bug 1432149 - sasl external binds fail in 1.3.6.1- Bump version to 1.3.6.1-1 - Resolves: bug 1388567 - Rebase 389-ds-base to 1.3.6 in RHEL-7.4- Release 1.3.5.10-12 - Resolves: bug 1384785 - Replica install fails with old IPA master sometimes during replication process (DS 48992) - Resolves: bug 1388501 - 389-ds-base is missing runtime dependency - bind-utils (DS 48328) - Resolves: bug 1388581 - Replication stops working only when fips mode is set to true (DS 48909) - Resolves: bug 1390342 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin (DS 49014) - Resolves: bug 1390343 - trace args debug logging must be more restrictive (DS 49009)- Release 1.3.5.10-11 - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates- Release 1.3.5.10-10 - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957) - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)- Release 1.3.5.10-9 - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950) - Resolves: bug 1366828 - audit on failure doesn't work if attribute nsslapd-auditlog-logging-enabled is NOT enabled (DS 48958) - Resolves: bug 1368520 - Crash in import_wait_for_space_in_fifo() (DS 48960) - Resolves: bug 1368956 - man page of ns-accountstatus.pl shows redundant entries for -p port option - Resolves: bug 1369537 - passwordMinAge attribute doesn't limit the minimum age of the password (DS 48967) - Resolves: bug 1369570 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964) - Resolves: bug 1369425 - ACI behaves erratically (DS 48972) - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957) - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969) - Resolves: bug 1371283 - Server Side Sorting crashes the server. (DS 48970) - Resolves: bug 1371284 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)- Release 1.3.5.10-8 - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48954) - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950) - Resolves: bug 1366561 - ns-accountstatus.pl giving error even "No such object (32)" (DS 48956)- Release 1.3.5.10-7 - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450) - Resolves: bug 1360976 - fixing a compiler warning- Release 1.3.5.10-6 - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48928) - Resolves: bug 1360447 - nsslapd-workingdir is empty when ns-slapd is started by systemd (DS 48939) - Resolves: bug 1360327 - remove-ds.pl deletes an instance even if wrong prefix was specified (DS 48934) - Resolves: bug 1349815 - DS logs have warning:ancestorid not indexed for all CS subsystems (DS 48940) - Resolves: bug 1329061 - 389-ds-base-1.3.4.0-29.el7_2 "hang" (DS 48882) - Resolves: bug 1360976 - EMBARGOED CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack - Resolves: bug 1361134 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password (DS 48943) - Resolves: bug 1361321 - Duplicate collation entries (DS 48936) - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450) - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat- Release 1.3.5.10-5 - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)- Release 1.3.5.10-4 - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144) - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919) - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat - Resolves: bug 1354660 - flow control in replication also blocks receiving results (DS 48767) - Resolves: bug 1356261 - Fixup tombstone task needs to set proper flag when updating (DS 48924) - Resolves: bug 1355760 - ns-slapd crashes during the deletion of backend (DS 48922) - Resolves: bug 1353629 - DS shuts down automatically if dnaThreshold is set to 0 in a MMR setup (DS 48916) - Resolves: bug 1355879 - nunc-stans: ns-slapd crashes during startup with SIGILL on AMD Opteron 280 (DS 48925)- Release 1.3.5.10-3 - Resolves: bug 1354374 - Fixing the tarball version in the sources file.- Release 1.3.5.10-2 - Resolves: bug 1353714 - If a cipher is disabled do not attempt to look it up (DS 48743) - Resolves: bug 1353592 - Setup-ds.pl --update fails - regression (DS 48755) - Resolves: bug 1353544 - db2bak.pl task enters infinitive loop when bak fs is almost full (DS 48914) - Resolves: bug 1354374 - Upgrade to 389-ds-base >= 1.3.5.5 doesn't install 389-ds-base-snmp (DS 48918)- Release 1.3.5.10-1 - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48905)- Release 1.3.5.9-1 - Resolves: bug 1349571 - Improve MMR replication convergence (DS 48636) - Resolves: bug 1304682 - "stale" automember rule (associated to a removed group) causes discrepancies in the database (DS 48637) - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755) - Resolves: bug 1316731 - syncrepl search returning error 329; plugin sending a bad error code (DS 48904) - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule (DS 48891) - Resolves: bug 1349577 - Values of dbcachetries/dbcachehits in cn=monitor could overflow. (DS 48899) - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT (DS 48898) - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538) - Resolves: bug 1350632 - ns-slapd shutdown crashes if pwdstorageschema name is from stack. (DS 48902)- Release 1.3.5.8-1 - Resolves: bug 1290101 - proxyauth support does not work when bound as directory manager (DS 48366)- Release 1.3.5.7-1 - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109) - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449) - Resolves: bug 1290101 - proxyauth support does not work when bound as directory manager (DS 48366) - Resolves: bug 1338872 - Wrong result code display in audit-failure log (DS 48892) - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538) - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule (DS 48891) - Resolves: bug 1347407 - By default aci can be read by anonymous (DS 48354) - Resolves: bug 1347412 - cn=SNMP,cn=config entry can be read by anonymous (DS 48893)- Release 1.3.5.6-1 - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982) - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48766, DS 48636) - Resolves: bug 1233926 - "matching rules" in ACI's "bind rules not fully evaluated (DS 48234) - Resolves: bug 1346165 - 389-ds-base-1.3.5.5-1.el7.x86_64 requires policycoreutils-py- Release 1.3.5.5-1 - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 48833) - Resolves: bug 1344414 - [RFE] adding pre/post extop ability (DS 48880) - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449) - Resolves: bug 1257568 - /usr/lib64/dirsrv/libnunc-stans.so is owned by both -libs and -devel (DS 48404) - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755) - Resolves: bug 1342609 - At startup DES to AES password conversion causes timeout in start script (DS 48862) - Resolves: bug 1316328 - search returns no entry when OR filter component contains non readable attribute (DS 48275) - Resolves: bug 1280456 - setup-ds should detect if port is already defined (DS 48336) - Resolves: bug 1312557 - dirsrv service fails to start when nsslapd-listenhost is configured (DS 48747) - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48752) - Resolves: bug 1340307 - Running db2index with no options breaks replication (DS 48854) - Resolves: bug 1337195 - Regression introduced in matching rules by DS 48746 (DS 48844) - Resolves: bug 1335492 - Modifier's name is not recorded in the audit log with modrdn and moddn operations (DS 48834) - Resolves: bug 1316741 - ldctl should support -H with ldap uris (DS 48754)- release 1.3.5.4-1 - Resolves: bug 1334455 - db2ldif is not taking into account multiple suffixes or backends (DS 48828) - Resolves: bug 1241563 - The "repl-monitor" web page does not display "year" in date. (DS 48220) - Resolves: bug 1335618 - Server ram sanity checks work in isolation (DS 48617) - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48837)- release 1.3.5.3-1 - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144) - Resolves: bug 1332533 - ns-accountstatus.pl gives error message on execution along with results. (DS 48815) - Resolves: bug 1332709 - password history is not updated when an admin resets the password (DS 48813) - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48822) - Resolves: bug 1333515 - Enable DS to offer weaker DH params in NSS (DS 48798)- release 1.3.5.2-1 - Resolves: bug 1270020 - Rebase 389-ds-base to 1.3.5 in RHEL-7.3 - Resolves: bug 1288229 - many attrlist_replace errors in connection with cleanallruv (DS 48283) - Resolves: bug 1315893 - License tag does not match actual license of code (DS 48757) - Resolves: bug 1320715 - DES to AES password conversion fails if a backend is empty (DS 48777) - Resolves: bug 190862 - [RFE] Default password syntax settings don't work with fine-grained policies (DS 142) - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 548) - Resolves: bug 1143066 - The dirsrv user/group should be created in rpm %pre, and ideally with fixed uid/gid (DS 48285) - Resolves: bug 1153758 - [RFE] Support SASL/GSSAPI when ns-slapd is behind a load-balancer (DS 48332) - Resolves: bug 1160902 - search, matching rules and filter error "unsupported type 0xA9" (DS 48016) - Resolves: bug 1186512 - High memory fragmentation observed in ns-slapd; OOM-Killer invoked (DS 48377, 48129) - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109) - Resolves: bug 1209094 - [RFE] Allow logging of rejected changes (DS 48145, 48280) - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144) - Resolves: bug 1210842 - [RFE] Add PIDFile option to systemd service file (DS 47951) - Resolves: bug 1223510 - [RFE] it could be nice to have nsslapd-maxbersize default to bigger than 2Mb (DS 48326) - Resolves: bug 1229799 - ldclt-bin killed by SIGSEGV (DS 48289) - Resolves: bug 1249908 - No validation check for the value for nsslapd-db-locks. (DS 48244) - Resolves: bug 1254887 - No man page entry for - option '-u' of dbgen.pl for adding group entries with uniquemembers (DS 48290) - Resolves: bug 1255557 - db2index creates index entry from deleted records (DS 48252) - Resolves: bug 1258610 - total update request must not be lost (DS 48255) - Resolves: bug 1258611 - dna plugin needs to handle binddn groups for authorization (DS 48258) - Resolves: bug 1259624 - [RFE] Provide a utility to detect accounts locked due to inactivity (DS 48269) - Resolves: bug 1259950 - Add config setting to MemberOf Plugin to add required objectclass got memberOf attribute (DS 48267) - Resolves: bug 1266510 - Linked Attributes plug-in - wrong behaviour when adding valid and broken links (DS 48295) - Resolves: bug 1266532 - Linked Attributes plug-in - won't update links after MODRDN operation (DS 48294) - Resolves: bug 1267750 - pagedresults - when timed out, search results could have been already freed. (DS 48299) - Resolves: bug 1269378 - ds-logpipe.py with wrong arguments - python exception in the output (DS 48302) - Resolves: bug 1271330 - nunc-stans: Attempt to release connection that is not acquired (DS 48311) - Resolves: bug 1272677 - nunc stans: ns-slapd killed by SIGTERM - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT - Resolves: bug 1273142 - crash in Managed Entry plugin (DS 48312) - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982) - Resolves: bug 1273550 - Deadlock between two MODs on the same entry between entry cache and backend lock (DS 47978) - Resolves: bug 1273555 - deadlock in mep delete post op (DS 47976) - Resolves: bug 1273584 - lower password history minimum to 1 (DS 48394) - Resolves: bug 1275763 - [RFE] add setup-ds.pl option to disable instance specific scripts (DS 47840) - Resolves: bug 1276072 - [RFE] Allow RHDS to be setup using a DNS CNAME alias for General.FullMachineName (DS 48328) - Resolves: bug 1278567 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338) - Resolves: bug 1278584 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well. (DS 48339) - Resolves: bug 1278755 - deadlock on connection mutex (DS 48341) - Resolves: bug 1278987 - Cannot upgrade a consumer to supplier in a multimaster environment (DS 48325) - Resolves: bug 1280123 - acl - regression - trailing ', (comma)' in macro matched value is not removed. (DS 48344) - Resolves: bug 1290111 - [RFE] Support for rfc3673 '+' to return operational attributes (DS 48363) - Resolves: bug 1290141 - With exhausted range, part of DNA shared configuration is deleted after server restart (DS 48362) - Resolves: bug 1290242 - SimplePagedResults -- in the search error case, simple paged results slot was not released. (DS 48375) - Resolves: bug 1290600 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same ldapmodify operation (DS 48370) - Resolves: bug 1295947 - 389-ds hanging after a few minutes of operation (DS 48406, revert 48338) - Resolves: bug 1296310 - ldclt - segmentation fault error while binding (DS 48400) - Resolves: bug 1299758 - CVE-2016-0741 389-ds-base: Worker threads do not detect abnormally closed connections causing DoS [rhel-7.3] - Resolves: bug 1301097 - logconv.pl displays negative operation speeds (DS 48446) - Resolves: bug 1302823 - Crash in slapi_get_object_extension (DS 48536) - Resolves: bug 1303641 - heap corruption at schema replication. (DS 48492) - Resolves: bug 1307151 - keep alive entries can break replication (DS 48445) - Resolves: bug 1310848 - Supplier can skip a failing update, although it should retry. (DS 47788) - Resolves: bug 1314557 - change severity of some messages related to "keep alive" enties (DS 48420) - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450) - Resolves: bug 1316742 - no plugin calls in tombstone purging (DS 48759) - Resolves: bug 1319329 - [RFE] add nsslapd-auditlog-logging-enabled: off to template-dse.ldif (DS 48145) - Resolves: bug 1320295 - If nsSSL3 is on, even if SSL v3 is not really enabled, a confusing message is logged. (DS 48775) - Resolves: bug 1326520 - db2index uses a buffer size derived from dbcachesize (DS 48383) - Resolves: bug 1328936 - objectclass values could be dropped on the consumer (DS 48799) - Resolves: bug 1287475 - [RFE] response control for password age should be sent by default by RHDS (DS 48369) - Resolves: bug 1331343 - Paged results search returns the blank list of entries (DS 48808)- release 1.3.4.0-19 - Resolves: bug 1228823 - async simple paged results issue (DS 48299, DS 48192) - Resolves: bug 1266944 - ns-slapd crash during ipa-replica-manage del (DS 48298)- release 1.3.4.0-18 - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266, DS 48284)- release 1.3.4.0-17 - Resolves: bug 1259949 - A backport error (coverity -- unused variable 'init_retry')- release 1.3.4.0-16 - Resolves: bug 1243970 - In MMR, double free coould occur under some special condition (DS 48276, DS 48226) - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266) - Resolves: bug 1241723 - cleanallruv - fix regression with server shutdown (DS 48217) - Resolves: bug 1264224 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in (DS 48188)- release 1.3.4.0-15 - Resolves: bug 1258996 - Complex filter in a search request doen't work as expected. (regression) (DS 48265) - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)- release 1.3.4.0-14 - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228) - Resolves: bug 1255851 - Shell CLI fails with usage errors if an argument containing white spaces is given (DS 48254) - Resolves: bug 1256938 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax (DS 47757)- release 1.3.4.0-13 - Resolves: bug 1245519 - remove debug logging from retro cl (DS 47831)- release 1.3.4.0-12 - Resolves: bug 1252133 - replica upgrade failed in starting dirsrv service (DS 48243) - Resolves: bug 1254344 - Server crashes in ACL_LasFindFlush during shutdown if ACIs contain IP addresss restrictions (DS 48233)- release 1.3.4.0-11 - Resolves: bug 1249784 - ipa-dnskeysyncd unhandled exception on named-pkcs11 start (DS 48249) - Resolves: bug 1252082 - removing chaining database links trigger valgrind read error (DS 47686) - Resolves: bug 1252207 - bashisms in 389-ds-base admin scripts (DS 47511) - Resolves: bug 1252533 - Man pages and help for remove-ds.pl doesn't display "-a" option (DS 48245) - Resolves: bug 1252781 - Slapd crashes reported from latest builds (DS 48250)- release 1.3.4.0-10 - Resolves: bug 1245519 - Fix coverity issues (DS 47931)- release 1.3.4.0-9 - Resolves: bug 1240876 - verify_db.pl doesn't verify DB specified by -a option. (DS 48215) - Resolves: bug 1245235 - winsync lastlogon attribute not syncing between IPA & Windows 2008. (DS 48232) - Resolves: bug 1245519 - Deadlock with retrochangelog, memberof plugin (DS 47931) - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228) - Resolves: bug 1247811 - logconv autobind handling regression caused by 47446 (DS 48231) - Resolves: bug 1250177 - Investigate betxn plugins to ensure they return the correct error code (DS 47810)- release 1.3.4.0-8 - Resolves: bug 1160243 - [RFE] allow logconv.pl -S/-E switches to work even when exact/same timestamps are not present in access log file (DS 47910) - Resolves: bug 1172037 - winsync range retrieval gets only 5000 values upon initialization (DS 48010) - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224) - Resolves: bug 1243950 - When starting a replica agreement a deadlock can occur with an op updating nsuniqueid index (DS 48179) - Resolves: bug 1243970 - In MMR, double free coould occur under some special condition (DS 48226) - Resolves: bug 1244926 - Crash while triming the retro changelog (DS 48206)- release 1.3.4.0-7 - Resolves: bug 1235060 - Fix coverity issues - 07/14/2015 (DS 48203) - Resolves: bug 1242531 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)- release 1.3.4.0-6 - Resolves: bug 1240845 - cleanallruv should completely clean changelog (DS 48208) - Resolves: bug 1095603 - Any negative LDAP error code number reported as Illegal error by ldclt. (DS 47799) - Resolves: bug 1168675 - Inconsistent behaviour of DS when LDAP Sync is used with an invalid cookie (DS 48013) - Resolves: bug 1241723 - cleanAllRUV hangs shutdown if not all of the replicas are online (DS 48217) - Resolves: bug 1241497 - crash in ns-slapd when deleting winSyncSubtreePair from sync agreement (DS 48216) - Resolves: bug 1240404 - Silent install needs to properly exit when INF file is missing (DS 48119) - Resolves: bug 1240406 - Remove warning suppression in 1.3.4 (DS 47878) - Resolves: bug 1242683 - Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute (DS 48223) - Resolves: bug 1160243 - logconv.pl - validate start and end time args (DS 47910) - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224) - Resolves: bug 1230996 - CI test: fixing test cases for ticket 48194 (DS 48194)- release 1.3.4.0-5 - Resolves: bug 1235060 - Fix coverity issues (DS 48203)- release 1.3.4.0-4 - Resolves: bug 1240404 - setup-ds.pl does not log invalid --file path errors the same (DS 48119) - Resolves: bug 1240406 - setup -u stops after first failure (DS 47878)- release 1.3.4.0-3 - Resolves: bug 1228823 - async simple paged results issue (DS 48192) - Resolves: bug 1237325 - reindex off-line twice could provoke index corruption (DS 48212) - Resolves: bug 1238790 - ldapsearch on nsslapd-maxbersize returns 0 instead of current value (DS 48214)- release 1.3.4.0-2 - Resolves: bug 1235060 - Fix coverity issues - Resolves: bug 1235387 - Slow replication when deleting large quantities of multi-valued attributes (DS 48195)- Release 1.3.4.0-1 (rebase) - Enable nunc-stans for x86_64. - Resolves: bug 1034325 - Linked attributes betxnpreoperation - transaction not aborted when linked entry does not exit (DS 47640) - Resolves: bug 1052755 - Retro Changelog Plugin accepts invalid value in nsslapd-changelogmaxage attribute (DS 47669) - Resolves: bug 1096409 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown (DS 47801) - Resolves: bug 1145378 - Adding an entry with an invalid password as rootDN is incorrectly rejected (DS 47900) - Resolves: bug 1145382 - Bad manipulation of passwordhistory (DS 47905) - Resolves: bug 1154147 - Uniqueness plugin: should allow to exclude some subtrees from its scope (DS 47927) - Resolves: bug 1171358 - Make ReplicaWaitForAsyncResults configurable (DS 47957) - Resolves: bug 1171663 - MODDN fails when entry doesn't have memberOf attribute and new DN is in the scope of memberOfExcludeSubtree (DS 47526) - Resolves: bug 1174457 - [RFE] memberOf - add option to skip nested group lookups during delete operations (DS 47963) - Resolves: bug 1178640 - db2bak.pl man page should be improved. (DS 48008) - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981) - Resolves: bug 1180331 - Local Password Policies for Nested OU's not honoured (DS 47980) - Resolves: bug 1180776 - nsslapd-db-locks modify not taking into account (DS 47934) - Resolves: bug 1181341 - nsslapd-changelogtrim-interval and nsslapd-changelogcompactdb-interval are not validated (DS 47617) - Resolves: bug 1185882 - ns-activate.pl fails to activate account if it was disabled on AD (DS 48001) - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005) - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030) - Resolves: bug 1206309 - winsync sets AccountUserControl in AD to 544 (DS 47723) - Resolves: bug 1210845 - slapd crashes during Dogtag clone reinstallation (DS 47966) - Resolves: bug 1210850 - add an option '-u' to dbgen.pl for adding group entries with (DS 48025) - Resolves: bug 1210852 - aci with wildcard and macro not correctly evaluated (DS 48141)- release 1.3.3.1-19 - Resolves: bug 1230996 - nsSSL3Ciphers preference not enforced server side (DS 48194)- release 1.3.3.1-18 - Resolves: bug 1228823 - async simple paged results issue (DS 48146, DS 48192)- release 1.3.3.1-17 - Resolves: bug 1226510 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane (DS 48190)- release 1.3.3.1-16 - Resolves: bug 1212894 - CVE-2015-1854 389ds-base: access control bypass with modrdn- release 1.3.3.1-15 - Setting correct build tag 'rhel-7.1-z-candidate'- release 1.3.3.1-14 - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030) Fixes spec file to make sure all the server instances are stopped before upgrade - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005)- release 1.3.3.1-13 - Resolves: bug 1183655 - Fixed Covscan FORWARD_NULL defects (DS 47988)- release 1.3.3.1-12 - Resolves: bug 1182477 - Windows Sync accidentally cleared raw_entry (DS 47989) - Resolves: bug 1180325 - upgrade script fails if /etc and /var are on different file systems (DS 47991 ) - Resolves: bug 1183655 - Schema learning mechanism, in replication, unable to extend an existing definition (DS 47988)- release 1.3.3.1-11 - Resolves: bug 1080186 - During delete operation do not refresh cache entry if it is a tombstone (DS 47750)- release 1.3.3.1-10 - Resolves: bug 1172731 - CVE-2014-8112 password hashing bypassed when "nsslapd-unhashed-pw-switch" is set to off - Resolves: bug 1166265 - DS hangs during online total update (DS 47942) - Resolves: bug 1168151 - CVE-2014-8105 information disclosure through 'cn=changelog' subtree - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable (DS 47526) - Resolves: bug 1171356 - Bind DN tracking unable to write to internalModifiersName without special permissions (DS 47950) - Resolves: bug 1153737 - logconv.pl -- support parsing/showing/reporting different protocol versions (DS 47949) - Resolves: bug 1171355 - start dirsrv after chrony on RHEL7 and Fedora (DS 47947) - Resolves: bug 1170707 - cos_cache_build_definition_list does not stop during server shutdown (DS 47967) - Resolves: bug 1170708 - COS memory leak when rebuilding the cache (DS - Ticket 47969) - Resolves: bug 1170709 - Account lockout attributes incorrectly updated after failed SASL Bind (DS 47970) - Resolves: bug 1166260 - cookie_change_info returns random negative number if there was no change in a tree (DS 47960) - Resolves: bug 1012991 - Error log levels not displayed correctly (DS 47636) - Resolves: bug 1108881 - rsearch filter error on any search filter (DS 47722) - Resolves: bug 994690 - Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart (DS 47451) - Resolves: bug 1162997 - Running a plugin task can crash the server (DS 47451) - Resolves: bug 1166252 - RHEL7.1 ns-slapd segfault when ipa-replica-install restarts (DS 47451) - Resolves: bug 1172597 - Crash if setting invalid plugin config area for MemberOf Plugin (DS 47525) - Resolves: bug 1139882 - coverity defects found in 1.3.3.x (DS 47965)- release 1.3.3.1-9 - Resolves: bug 1153737 - Disable SSL v3, by default. (DS 47928) - Resolves: bug 1163461 - Should not check aci syntax when deleting an aci (DS 47953)- release 1.3.3.1-8 - Resolves: bug 1156607 - Crash in entry_add_present_values_wsi_multi_valued (DS 47937) - Resolves: bug 1153737 - Disable SSL v3, by default (DS 47928, DS 47945, DS 47948) - Resolves: bug 1158804 - Malformed cookie for LDAP Sync makes DS crash (DS 47939)- release 1.3.3.1-7 - Resolves: bug 1153737 - Disable SSL v3, by default (DS 47928)- release 1.3.3.1-6 - Resolves: bug 1151287 - dynamically added macro aci is not evaluated on the fly (DS 47922) - Resolves: bug 1080186 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten (DS 47897) - Resolves: bug 1150694 - Encoding of SearchResultEntry is missing tag (DS 47920) - Resolves: bug 1150695 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails. (DS 47919) - Resolves: bug 1139882 - Fix remaining compiler warnings (DS 47892) - Resolves: bug 1150206 - result of dna_dn_is_shared_config is incorrectly used (DS 47918)- release 1.3.3.1-5 - Resolves: bug 1139882 - coverity defects found in 1.3.3.x (DS 47892)- release 1.3.3.1-4 - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47750) - Resolves: bug 1145846 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server (DS 47908) - Resolves: bug 1117979 - harden the list of ciphers available by default (phase 2) (DS 47838) - provide enabled ciphers as search result (DS 47880)- release 1.3.3.1-3 - Resolves: bug 1139882 - coverity defects found in 1.3.3.1- release 1.3.3.1-2 - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748) - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47834) - Resolves: bug 1139882 - coverity defects found in 1.3.3.1 (DS 47890) - Resolves: bug 1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (DS 47885 - deref plugin should not return references with noc access rights) - Resolves: bug 1117979 - harden the list of ciphers available by default (DS 47838, DS 47895) - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47889 - DS crashed during ipa-server-install on test_ava_filter)- release 1.3.3.1-1 - Resolves: bug 746646 - RFE: easy way to configure which users and groups to sync with winsync - Resolves: bug 881372 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts. - Resolves: bug 920597 - Possible to add invalid ACI value - Resolves: bug 921162 - Possible to add nonexistent target to ACI - Resolves: bug 923799 - if nsslapd-cachememsize set to the number larger than the RAM available, should result in proper error message. - Resolves: bug 924937 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync - Resolves: bug 951754 - Self entry access ACI not working properly - Resolves: bug 952517 - Dirsrv instance failed to start with Segmentation fault (core dump) after modifying 7-bit check plugin - Resolves: bug 952682 - nsslapd-db-transaction-batch-val turns to -1 - Resolves: bug 966443 - Plugin library path validation - Resolves: bug 975176 - Non-directory manager can change the individual userPassword's storage scheme - Resolves: bug 979465 - IPA replica's - "SASL encrypted packet length exceeds maximum allowed limit" - Resolves: bug 982597 - Some attributes in cn=config should not be multivalued - Resolves: bug 987009 - 389-ds-base - shebang with /usr/bin/env - Resolves: bug 994690 - RFE: Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart - Resolves: bug 1012991 - errorlog-level 16384 is listed as 0 in cn=config - Resolves: bug 1013736 - Enabling/Disabling DNA plug-in throws "ldap_modify: Server Unwilling to Perform (53)" error - Resolves: bug 1014380 - setup-ds.pl doesn't lookup the "root" group correctly - Resolves: bug 1020459 - rsa_null_sha should not be enabled by default - Resolves: bug 1024541 - start dirsrv after ntpd - Resolves: bug 1029959 - Managed Entries betxnpreoperation - transaction not aborted upon failure to create managed entry - Resolves: bug 1031216 - add dbmon.sh - Resolves: bug 1044133 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result - Resolves: bug 1044134 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default - Resolves: bug 1044135 - make connection buffer size adjustable - Resolves: bug 1044137 - posix winsync should support ADD user/group entries from DS to AD - Resolves: bug 1044138 - mep_pre_op: Unable to fetch origin entry - Resolves: bug 1044139 - [RFE] Support RFC 4527 Read Entry Controls - Resolves: bug 1044140 - Allow search to look up 'in memory RUV' - Resolves: bug 1044141 - MMR stress test with dna enabled causes a deadlock - Resolves: bug 1044142 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist - Resolves: bug 1044143 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change - Resolves: bug 1044144 - resurrected entry is not correctly indexed - Resolves: bug 1044146 - Add a warning message when a connection hits the max number of threads - Resolves: bug 1044147 - 7-bit check plugin does not work for userpassword attribute - Resolves: bug 1044148 - The backend name provided to bak2db is not validated - Resolves: bug 1044149 - Winsync should support range retrieval - Resolves: bug 1044150 - 7-bit checking is not necessary for userPassword - Resolves: bug 1044151 - With SeLinux, ports can be labelled per range. setup-ds.pl or setup-ds-admin.pl fail to detect already ranged labelled ports - Resolves: bug 1044152 - ChainOnUpdate: "cn=directory manager" can modify userRoot on consumer without changes being chained or replicated. Directory integrity compromised. - Resolves: bug 1044153 - mods optimizer - Resolves: bug 1044154 - multi master replication allows schema violation - Resolves: bug 1044156 - DS crashes with some 7-bit check plugin configurations - Resolves: bug 1044157 - Some updates of "passwordgraceusertime" are useless when updating "userpassword" - Resolves: bug 1044159 - [RFE] Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533 - Resolves: bug 1044160 - remove-ds.pl should remove /var/lock/dirsrv - Resolves: bug 1044162 - enhance retro changelog - Resolves: bug 1044163 - updates to ruv entry are written to retro changelog - Resolves: bug 1044164 - Password administrators should be able to violate password policy - Resolves: bug 1044168 - Schema replication between DS versions may overwrite newer base schema - Resolves: bug 1044169 - ACIs do not allow attribute subtypes in targetattr keyword - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable - Resolves: bug 1044171 - Allow referential integrity suffixes to be configurable - Resolves: bug 1044172 - Plugin library path validation prevents intentional loading of out-of-tree modules - Resolves: bug 1044173 - make referential integrity configuration more flexible - Resolves: bug 1044177 - allow configuring changelog trim interval - Resolves: bug 1044179 - objectclass may, must lists skip rest of objectclass once first is found in sup - Resolves: bug 1044180 - memberOf on a user is converted to lowercase - Resolves: bug 1044181 - report unindexed internal searches - Resolves: bug 1044183 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added - Resolves: bug 1044185 - dbscan on entryrdn should show all matching values - Resolves: bug 1044187 - logconv.pl - RFE - add on option for a minimum etime for unindexed search stats - Resolves: bug 1044188 - Recognize compressed log files - Resolves: bug 1044191 - support TLSv1.1 and TLSv1.2, if supported by NSS - Resolves: bug 1044193 - default nsslapd-sasl-max-buffer-size should be 2MB - Resolves: bug 1044194 - Complex filter in a search request doen't work as expected. - Resolves: bug 1044196 - Automember plug-in should treat MODRDN operations as ADD operations - Resolves: bug 1044198 - Replication of the schema may overwrite consumer 'attributetypes' even if consumer definition is a superset - Resolves: bug 1044202 - db2bak.pl issue when specifying non-default directory - Resolves: bug 1044203 - Allow referint plugin to use an alternate config area - Resolves: bug 1044205 - Allow memberOf to use an alternate config area - Resolves: bug 1044210 - idl switch does not work - Resolves: bug 1044211 - make old-idl tunable - Resolves: bug 1044212 - IDL-style can become mismatched during partial restoration - Resolves: bug 1044213 - backend performance - introduce optimization levels - Resolves: bug 1044215 - using transaction batchval violates durability - Resolves: bug 1044216 - examine replication code to reduce amount of stored state information - Resolves: bug 1048980 - 7-bit check plugin not checking MODRDN operation - Resolves: bug 1049030 - Windows Sync group issues - Resolves: bug 1052751 - Page control does not work if effective rights control is specified - Resolves: bug 1052754 - Allow nsDS5ReplicaBindDN to be a group DN - Resolves: bug 1057803 - logconv errors when search has invalid bind dn - Resolves: bug 1060032 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime. - Resolves: bug 1061060 - betxn: retro changelog broken after cancelled transaction - Resolves: bug 1061572 - improve dbgen rdn generation, output and man page. - Resolves: bug 1063990 - single valued attribute replicated ADD does not work - Resolves: bug 1064006 - Size returned by slapi_entry_size is not accurate - Resolves: bug 1064986 - Replication retry time attributes cannot be added - Resolves: bug 1067090 - Missing warning for invalid replica backoff configuration - Resolves: bug 1072032 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53 - Resolves: bug 1074306 - Under heavy stress, failure of turning a tombstone into glue makes the server hung - Resolves: bug 1074447 - Part of DNA shared configuration is deleted after server restart - Resolves: bug 1076729 - Continuous add/delete of an entry in MMR setup causes entryrdn-index conflict - Resolves: bug 1077884 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf - Resolves: bug 1077897 - Memory leak with proxy auth control - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing - Resolves: bug 1082967 - attribute uniqueness plugin fails when set as a chaining component - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution - Resolves: bug 1086890 - empty modify returns LDAP_INVALID_DN_SYNTAX - Resolves: bug 1086902 - mem leak in do_bind when there is an error - Resolves: bug 1086904 - mem leak in do_search - rawbase not freed upon certain errors - Resolves: bug 1086908 - Performing deletes during tombstone purging results in operation errors - Resolves: bug 1090178 - #481 breaks possibility to reassemble memberuid list - Resolves: bug 1092099 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone - Resolves: bug 1092342 - nsslapd-ndn-cache-max-size accepts any invalid value. - Resolves: bug 1092648 - Negative value of nsSaslMapPriority is not reset to lowest priority - Resolves: bug 1097004 - Problem with deletion while replicated - Resolves: bug 1098654 - db2bak.pl error with changelogdb - Resolves: bug 1099654 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator. - Resolves: bug 1108405 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..." - Resolves: bug 1108407 - managed entry plugin fails to update managed entry pointer on modrdn operation - Resolves: bug 1108865 - memory leak in ldapsearch filter objectclass=* - Resolves: bug 1108870 - ACI warnings in error log - Resolves: bug 1108872 - Logconv.pl with an empty access log gives lots of errors - Resolves: bug 1108874 - logconv.pl memory continually grows - Resolves: bug 1108881 - rsearch filter error on any search filter - Resolves: bug 1108895 - [RFE - RHDS9] CLI report to monitor replication - Resolves: bug 1108902 - rhds91 389-ds-base-1.2.11.15-31.el6_5.x86_64 crash in db4 __dbc_get_pp env = 0x0 ? - Resolves: bug 1108909 - single valued attribute replicated ADD does not work - Resolves: bug 1109334 - 389 Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled. - Resolves: bug 1109336 - Parent numsubordinate count can be incorrectly updated if an error occurs - Resolves: bug 1109339 - Nested tombstones become orphaned after purge - Resolves: bug 1109354 - Tombstone purging can crash the server if the backend is stopped/disabled - Resolves: bug 1109357 - Coverity issue in 1.3.3 - Resolves: bug 1109364 - valgrind - value mem leaks, uninit mem usage - Resolves: bug 1109375 - provide default syntax plugin - Resolves: bug 1109378 - Environment variables are not passed when DS is started via service - Resolves: bug 1111364 - Updating winsync one-way sync does not affect the behaviour dynamically - Resolves: bug 1112824 - Broken dereference control with the FreeIPA 4.0 ACIs - Resolves: bug 1113605 - server restart wipes out index config if there is a default index - Resolves: bug 1115177 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro - Resolves: bug 1117021 - Server deadlock if online import started while server is under load - Resolves: bug 1117975 - paged results control is not working in some cases when we have a subsuffix. - Resolves: bug 1117979 - harden the list of ciphers available by default - Resolves: bug 1117981 - Fix various typos in manpages & code - Resolves: bug 1117982 - Fix hyphens used as minus signed and other manpage mistakes - Resolves: bug 1118002 - server crashes deleting a replication agreement - Resolves: bug 1118006 - RFE - forcing passwordmustchange attribute by non-cn=directory manager - Resolves: bug 1118007 - [RFE] Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords - Resolves: bug 1118014 - Enhance ACIs to have more control over MODRDN operations - Resolves: bug 1118021 - Return all attributes in rootdse without explicit request - Resolves: bug 1118025 - Slow ldapmodify operation time for large quantities of multi-valued attribute values - Resolves: bug 1118032 - Schema Replication Issue - Resolves: bug 1118034 - 389 DS Server crashes and dies while handles paged searches from clients - Resolves: bug 1118043 - Failed deletion of aci: no such attribute - Resolves: bug 1118048 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed. - Resolves: bug 1118051 - Add switch to disable pre-hashed password checking - Resolves: bug 1118054 - Make ldbm_back_seq independently support transactions - Resolves: bug 1118055 - Add operations rejected by betxn plugins remain in cache - Resolves: bug 1118057 - online import crashes server if using verbose error logging - Resolves: bug 1118059 - add fixup-memberuid.pl script - Resolves: bug 1118060 - winsync plugin modify is broken - Resolves: bug 1118066 - memberof scope: allow to exclude subtrees - Resolves: bug 1118069 - 389-ds production segfault: __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:144 - Resolves: bug 1118074_DELETE_FN - plugin returned error" messages - Resolves: bug 1118076 - ds logs many "Operation error fetching Null DN" messages - Resolves: bug 1118077 - Improve import logging and abort handling - Resolves: bug 1118079 - Multi master replication initialization incomplete after restore of one master - Resolves: bug 1118080 - Don't add unhashed password mod if we don't have an unhashed value - Resolves: bug 1118081 - Investigate betxn plugins to ensure they return the correct error code - Resolves: bug 1118082 - The error result text message should be obtained just prior to sending result - Resolves: bug 1123865 - CVE-2014-3562 389-ds-base: 389-ds: unauthenticated information disclosure [rhel-7.1]- release 1.3.1.6-26 - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution (Ticket 346)- release 1.3.1.6-25 - Resolves: bug 1082740 - ns-slapd crash in reliability 15- release 1.3.1.6-24 - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735); regression - sub-type length in attribute type was mistakenly subtracted.- Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind) (Added 0095-Ticket-47739-directory-server-is-insecurely-misinter.patch) Tue Mar 11 2014 Noriko Hosoi - 1.3.1.6-23 - release 1.3.1.6-22 - Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)- release 1.3.1.6-22 - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735)- release 1.3.1.6-21 - Resolves: bug 918694 - Fix covscan defect FORWARD_NULL (Ticket 408) - Resolves: bug 918717 - Fix covscan defect COMPILER WARNINGS (Ticket 571)- release 1.3.1.6-20 - Resolves: bug 1065242 - 389-ds-base, conflict occurs at yum installation if multilib_policy=all. (Ticket 47709)- release 1.3.1.6-19 - Resolves: bug 1065971 - Enrolling a host into IdM/IPA always takes two attempts (Ticket 47704)- release 1.3.1.6-18 - Resolves: bug 838656 - logconv.pl tool removes the access logs contents if "-M" is not correctly used (Ticket 471) - Resolves: bug 922538 - improve dbgen rdn generation, output (Ticket 47374) - Resolves: bug 970750 - flush.pl is not included in perl5 (Ticket 47374) - Resolves: bug 1013898 - Fix various issues with logconv.pl (Ticket 471)- release 1.3.1.6-17 - Resolves: bug 853106 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (Ticket 443) - Resolves: bug 1049525 - Server hangs in cos_cache when adding a user entry (Ticket 47649)- Mass rebuild 2014-01-24- release 1.3.1.6-15 - Resolves: bug 918702 - better error message when cache overflows (Ticket 342) - Resolves: bug 1009679 - replication stops with excessive clock skew (Ticket 47516) - Resolves: bug 1042855 - Unable to delete protocol timeout attribute (Ticket 47620) - Resolves: bug 918694 - Fix crash when disabling/enabling the setting (Ticket 408) - Resolves: bug 853355 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read (Ticket 47660)- release 1.3.1.6-14 - Resolves: bug 853355 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs (Ticket 447) - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613) - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribut; Fix logically dead code; Fix dereferenced NULL pointer in agmtlist_modify_callback(); Fix missing left brackete (Ticket 47620) - Resolves: bug 1042855 - nsds5ReplicaProtocolTimeout attribute is not validated when added to replication agreement; Config value validation improvement (Ticket 47620) - Resolves: bug 918717 - server does not accept 0 length LDAP Control sequence (Ticket 571) - Resolves: bug 1034902 - replica init/bulk import errors should be more verbose (Ticket 47606) - Resolves: bug 1044219 - fix memleak caused by 47347 (Ticket 47623) - Resolves: bug 1049522 - Crash after replica is installed; Fix cherry-pick error for 1.3.2 and 1.3.1 (Ticket 47620) - Resolves: bug 1049568 - changelog iteration should ignore cleaned rids when getting the minCSN (Ticket 47627)- Mass rebuild 2013-12-27- release 1.3.1.6-12 - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute (Ticket 47620) - Resolves: bug 1034898 - automember plugin task memory leaks (Ticket 47592) - Resolves: bug 1034451 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms (Ticket 47614) - Resolves: bug 1032318 - entries with empty objectclass attribute value can be hidden (Ticket 47591) - Resolves: bug 1032316 - attrcrypt fails to find unlocked key (Ticket 47596) - Resolves: bug 1031227 - Reduce lock scope in retro changelog plug-in (Ticket 47599) - Resolves: bug 1031226 - Convert ldbm_back_seq code to be transaction aware (Ticket 47598) - Resolves: bug 1031225 - Convert retro changelog plug-in to betxn (Ticket 47597) - Resolves: bug 1031223 - hard coded limit of 64 masters in agreement and changelog code (Ticket 47587) - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613) - Resolves: bug 1035824 - Automember betxnpreoperation - transaction not aborted when group entry does not exist (Ticket 47622)- Resolves: bug 1024979 - CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches- release 1.3.1.6-10 - Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep - had to revert earlier change - does not work and breaks ipa- release 1.3.1.6-9 - Resolves: bug 1028440 - Winsync replica initialization and incremental updates from DS to AD fails on RHEL - Resolves: bug 1027502 - Replication Failures related to skipped entries due to cleaned rids - Resolves: bug 1027047 - Winsync plugin segfault during incremental backoff- release 1.3.1.6-8 - Resolves: bug 971111 - DNA plugin failed to fetch replication agreement - Resolves: bug 1026931 - 1.2.11.29 crash when removing entries from cache- Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep - Resolves: bug 1018914 fixup memberof task does not work: task entry not added- Resolves: bug 1013900 - logconv: some stats do not work across server restarts - previous patch introduced regressions - fixed by c2eced0 ticket #47550 and e2a880b Ticket #47550 and 8b10f83 Ticket #47551 - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock - previous patch not complete, fixed by a11be5c Ticket 47513 - Resolves: bug 1016749 - DS crashes when "cn=Directory Manager" is changing it's password - cherry picked upstream f786600 Ticket 47329 and b67e230 Coverity Fixes - Resolves: bug 1015252 locale "nl" not supported by collation plugin - Resolves: bug 1016317 Need to update supported locales - Resolves: bug 1016722 memory leak in range searches- Resolves: bug 1013896 - logconv.pl - Use of comma-less variable list is deprecated - Resolves: bug 1008256 - backend txn plugin fixup tasks should be done in a txn - Resolves: bug 1013738 - CLEANALLRUV doesnt run across all replicas - Resolves: bug 1011220 - PassSync removes User must change password flag on the Windows side - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock - Resolves: bug 1012125 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch - Resolves: bug 1013063 - RUV tombstone search with scope "one" doesn`t work - Resolves: bug 1013893 - Indexed search are logged with 'notes=U' in the access logs - Resolves: bug 1013894 - improve logconv.pl performance with large access logs - Resolves: bug 1013898 - Fix various issues with logconv.pl - Resolves: bug 1013897 - logconv.pl uses /var/tmp for BDB temp files - Resolves: bug 1013900 - logconv: some stats do not work across server restarts - Resolves: bug 1014354 - Coverity fixes - 12023, 12024, and 12025- bump version to 1.3.1.6-4 - Resolves Bug 1007988 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing (Ticket 47489) - Resolves Bug 853931 - Allow macro aci keywords to be case-insensitive (Ticket 449) - Resolves Bug 1006563 - automember rebuild task not working as expected (Ticket 47507)- Ticket #47455 - valgrind - value mem leaks, uninit mem usage - Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly- bump version to 1.3.1.6-2 - Resolves Bug 1000633 - ns-slapd crash due to bogus DN - Ticket #47488 - Users from AD sub OU does not sync to IPA- bump version to 1.3.1.6 - Ticket 47455 - valgrind - value mem leaks, uninit mem usage - fix coverity 11915 - dead code - introduced with fix for ticket 346 - fix coverity 11895 - null deref - caused by fix to ticket 47392 - fix compiler warning in posix winsync code for posix_group_del_memberuid_callback - Fix compiler warnings for Ticket 47395 and 47397 - fix compiler warning (cherry picked from commit 904416f4631d842a105851b4a9931ae17822a107) - Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch - fix compiler warnings - Fix compiler warning (cherry picked from commit ec6ebc0b0f085a82041d993ab2450a3922ef5502)- bump version to 1.3.1.5 - Ticket 47456 - delete present values should append values to deleted values - Ticket 47455 - valgrind - value mem leaks, uninit mem usage - Ticket 47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication - Ticket 47440 - Fix runtime errors caused by last patch. - Ticket 47440 - Fix compilation warnings and header files - Ticket 47405 - CVE-2013-2219 ACLs inoperative in some search scenarios - Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D - Ticket 47378 - fix recent compiler warnings - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47449 - deadlock after adding and deleting entries - Ticket 47441 - Disk Monitoring not checking filesystem with logs - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold- bump version to 1.3.1.4 - Ticket 47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negat - Ticket 47424 - Replication problem with add-delete requests on single-valued attributes - Ticket 47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry - Ticket 47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry - Ticket 47421 - memory leaks in set_krb5_creds - Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute v - Ticket 47369 version2 - provide default syntax plugin - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47339 - RHDS denies MODRDN access if ACI list contains any DENY rule - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47428 - Memory leak in 389-ds-base 1.2.11.15 - Ticket 47392 - ldbm errors when adding/modifying/deleting entries - Ticket 47385 - Disk Monitoring is not triggered as expected. - Ticket 47410 - changelog db deadlocks with DNA and replication- bump version to 1.3.1.3 - Ticket 47374 - flush.pl is not included in perl5 - Ticket 47391 - deleting and adding userpassword fails to update the password (additional fix) - Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization - Ticket 47395 47397 - v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured - Ticket 47396 - crash on modrdn of tombstone - Ticket 47400 - MMR stress test with dna enabled causes a deadlock - Ticket 47409 - allow setting db deadlock rejection policy - Ticket 47419 - Unhashed userpassword can accidentally get removed from mods - Ticket 47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'- Rebuilt for new net-snmp- bump version to 1.3.1.2 - Ticket 47391 - deleting and adding userpassword fails to update the password - Coverity Fixes (Part 7)- bump version to 1.3.1.1 - Ticket 402 - nhashed#user#password in entry extension - Ticket 511 - Revision - allow turning off vattr lookup in search entry return - Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate - Ticket 47327 - error syncing group if group member user is not synced - Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback - Ticket 47359 - new ldap connections can block ldaps and ldapi connections - Ticket 47362 - ipa upgrade selinuxusermap data not replicating - Ticket 47375 - flush_ber error sending back start_tls response will deadlock - Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3) - Ticket 47377 - make listen backlog size configurable - Ticket 47378 - fix recent compiler warnings - Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice - Ticket 47385 - DS not shutting down when disk monitoring threshold is reached - Coverity Fixes (part 1) - Coverity Fixes (Part 2) - Coverity Fixes (Part 3) - Coverity Fixes (Part 4) - Coverity Fixes (Part 5)- bump version to 1.3.1.0 - Ticket 332 - Command line perl scripts should attempt most secure connection type first - Ticket 342 - better error message when cache overflows - Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager - Ticket 419 - logconv.pl - improve memory management - Ticket 422 - 389-ds-base - Can't call method "getText" - Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts - Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used - Ticket 487 - Possible to add invalid attribute values to PAM PTA plugin configuration - Ticket 502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen - Ticket 505 - use lock-free access name2asi and oid2asi tables (additional) - Ticket 508 - lock-free access to FrontendConfig structure - Ticket 511 - allow turning off vattr lookup in search entry return - Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time - Ticket 528 - RFE - get rid of instance specific scripts - Ticket 529 - dn normalization must handle multiple space characters in attributes - Ticket 532 - RUV is not getting updated for both Master and consumer - Ticket 533 - only scan for attributes to decrypt if there are encrypted attrs configured - Ticket 534 - RFE: Add SASL mappings fallback - Ticket 537 - Improvement of range search - Ticket 539 - logconv.pl should handle microsecond timing - Ticket 543 - Sorting with attributes in ldapsearch gives incorrect result - Ticket 545 - Segfault during initial LDIF import: str2entry_dupcheck() - Ticket 547 - Incorrect assumption in ndn cache - Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval - Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation - Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration - Ticket 558 - Replication - make timeout for protocol shutdown configurable - Ticket 561 - disable writing unhashed#user#password to changelog - Ticket 563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized. - Ticket 565 - turbo mode and replication - allow disable of turbo mode - Ticket 571 - server does not accept 0 length LDAP Control sequence - Ticket 574 - problems with dbcachesize disk space calculation - Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions - Ticket 585 - Behaviours of "db2ldif -a " and "db2ldif.pl -a " are inconsistent - Ticket 587 - Replication error messages in the DS error logs - Ticket 588 - Create MAN pages for command line scripts - Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control - Ticket 603 - A logic error in str2simple - Ticket 604 - Required attribute not checked during search operation - Ticket 608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message - Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND - Ticket 612 - improve dbgen rdn generation, output - Ticket 613 - ldclt: add timestamp, interval, nozeropad, other improvements - Ticket 616 - High contention on computed attribute lock - Ticket 618 - Crash at shutdown while stopping replica agreements - Ticket 620 - Better logging of error messages for 389-ds-base - Ticket 621 - modify operations without values need to be written to the changelog - Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory - Ticket 631 - Replication: "Incremental update started" status message without consumer initialized - Ticket 633 - allow nsslapd-nagle to be disabled, and also tcp cork - Ticket 47299 - allow cmdline scripts to work with non-root user - Ticket 47302 - get rid of sbindir start/stop/restart slapd scripts - Ticket 47303 - start/stop/restart dirsrv scripts should report and error if no instances - Ticket 47304 - reinitialization of a master with a disabled agreement hangs - Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task) - Ticket 47312 - replace PR_GetFileInfo with PR_GetFileInfo64 - Ticket 47315 - filter option in fixup-memberof requires more clarification - Ticket 47325 - Crash at shutdown on a replica aggrement - Ticket 47330 - changelog db extension / upgrade is obsolete - Ticket 47336 - logconv.pl -m not working for all stats - Ticket 47341 - logconv.pl -m time calculation is wrong - Ticket 47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide - Ticket 47347 - Simple paged results should support async search - Ticket 47348 - add etimes to per second/minute stats - Ticket 47349 - DS instance crashes under a high load- bump version to 1.3.0.5 - Ticket 47308 - unintended information exposure when anonymous access is set to rootdse - Ticket 628 - crash in aci evaluation - Ticket 627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so - Ticket 634 - Deadlock in DNA plug-in Ticket #576 - DNA: use event queue for config update only at the start up - Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC - Ticket 623 - cleanAllRUV task fails to cleanup config upon completion- e53d691 bump version to 1.3.0.4 - Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data - Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled) - Ticket 490 - Slow role performance when using a lot of roles - Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry- bump version to 1.3.0.3 - Ticket #584 - Existence of an entry is not checked when its password is to be deleted - Ticket 562 - Crash when deleting suffix- Rebuild for icu 50- bump version to 1.3.0.2 - Ticket #542 - Cannot dynamically set nsslapd-maxbersize- bump version to 1.3.0.1 - Ticket 556 - Don't overwrite certmap.conf during upgrade- bump version to 1.3.0.0- bump version to 1.3.0.rc3 - Ticket 549 - DNA plugin no longer reports additional info when range is depleted - Ticket 541 - need to set plugin as off in ldif template - Ticket 541 - RootDN Access Control plugin is missing after upgrade- bump version to 1.3.0.rc2 - Trac Ticket #497 - Escaped character cannot be used in the substring search filter - Ticket 509 - lock-free access to be->be_suffixlock - Trac Ticket #522 - betxn: upgrade is not implemented yet- bump version to 1.3.0.rc1 - Ticket #322 - Create DOAP description for the 389 Directory Server project - Trac Ticket #499 - Handling URP results is not corrrect - Ticket 509 - lock-free access to be->be_suffixlock - Ticket 456 - improve entry cache sizing - Trac Ticket #531 - loading an entry from the database should use str2entry_f - Trac Ticket #536 - Clean up compiler warnings for 1.3 - Trac Ticket #531 - loading an entry from the database should use str2entry_fast - Ticket 509 - lock-free access to be->be_suffixlock - Ticket 527 - ns-slapd segfaults if it cannot rename the logs - Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't - Ticket 216 - disable replication agreements - Ticket 518 - dse.ldif is 0 length after server kill or machine kill - Ticket 393 - Change in winSyncInterval does not take immediate effect - Ticket 20 - Allow automember to work on entries that have already been added - Coverity Fixes - Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5 - Ticket 337 - improve CLEANRUV functionality - Fix for ticket 504 - Ticket 394 - modify-delete userpassword - minor fixes for bdb 4.2/4.3 and mozldap - Trac Ticket #276 - Multiple threads simultaneously working on connection's private buffer causes ns-slapd to abort - Fix for ticket 465: cn=monitor showing stats for other db instances - Ticket 507 - use mutex for FrontendConfig lock instead of rwlock - Fix for ticket 510 Avoid creating an attribute just to determine the syntax for a type, look up the syntax directly by type - Coverity defect: Resource leak 13110 - Ticket 517 - crash in DNA if no dnaMagicRegen is specified - Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry - Trac Ticket #519 - Search with a complex filter including range search is slow - Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error - Trac Ticket #311 - IP lookup failing with multiple DNS entries - Trac Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs - Trac Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error - Ticket #503 - Improve AD version in winsync log message - Trac Ticket #190 - Un-resolvable server in replication agreement produces unclear error message - Coverity fixes - Trac Ticket #391 - Slapd crashes when deleting backends while operations are still in progress - Trac Ticket #448 - Possible to set invalid macros in Macro ACIs - Trac Ticket #498 - Cannot abaondon simple paged result search - Coverity defects - Trac Ticket #494 - slapd entered to infinite loop during new index addition - Fixing compiler warnings in the posix-winsync plugin - Coverity defects - Ticket 147 - Internal Password Policy usage very inefficient - Ticket 495 - internalModifiersname not updated by DNA plugin - Revert "Ticket 495 - internalModifiersname not updated by DNA plugin" - Ticket 495 - internalModifiersname not updated by DNA plugin - Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h]) - Ticket 486 - nsslapd-enablePlugin should not be multivalued - Ticket 488 - Doc: DS error log messages with typo - Trac Ticket #451 - Allow db2ldif to be quiet - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes - Ticket #481 - expand nested posix groups - Trac Ticket #455 - Insufficient rights to unhashed#user#password when user deletes his password - Ticket #446 - anonymous limits are being applied to directory managerTicket #28 MOD operations with chained delete/add get back error 53 on backend config Ticket #173 ds-logpipe.py script's man page and script help should be updated for -t option. Ticket #196 RFE: Interpret IPV6 addresses for ACIs, replication, and chaining Ticket #218 RFE - Make RIP working with Replicated Entries Ticket #328 make sure all internal search filters are properly escaped Ticket #329 389-admin build fails on F-18 with new apache Ticket #344 deadlock in replica_write_ruv Ticket #351 use betxn plugins by default Ticket #352 make cos, roles, views betxn aware Ticket #356 logconv.pl - RFE - track bind info Ticket #365 Audit log - clear text password in user changes Ticket #370 Opening merge qualifier CoS entry using RHDS console changes the entry. Ticket #372 Setting nsslapd-listenhost or nsslapd-securelistenhost breaks ACI processing Ticket #386 Overconsumption of memory with large cachememsize and heavy use of ldapmodify Ticket #402 unhashedTicket #userTicket #password in entry extension Ticket #408 Create a normalized dn cache Ticket #453 db2index with -tattrname:type,type fails Ticket #461 fix build problem with mozldap c sdk Ticket #462 add test for include file mntent.h Ticket #463 different parameters of getmntent in Solaris- Trac Ticket #470 - 389 prevents from adding a posixaccount with userpassword after schema reload - Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang - Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start - Ticket 473 - change VERSION.sh to have console version be major.minor - Ticket 475 - Root DN Access Control - improve value checking for config - Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension - Ticket 474 - Root DN Access Control - days allowed not working correctly - Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas - 0b79915 fix compiler warnings in ticket 374 code - Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope- Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement - Ticket 386 - large memory growth with ldapmodify(heap fragmentation) - this patch doesn't fix the bug - it allows us to experiment with - different values of mxfast - Ticket #374 - consumer can go into total update mode for no reason- Ticket #426 - support posix schema for user and group sync - 1) plugin config ldif must contain pluginid, etc. during upgrade or it - will fail due to schema errors - 2) posix winsync should have a lower precedence (25) than the default (50) - so that it will be run first - 3) posix winsync should support the Winsync API v3 - the v2 functions are - just stubs for now - but the precedence cb is active- 8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete - Trac Ticket #437 - variable dn should not be used in ldbm_back_delete - ba1f5b2 fix coverity resource leak in windows_plugin_add - e3e81db Simplify program flow: change while loops to for - a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0) - 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar - 77eb760 Simplify program flow: eliminate unnecessary continue - c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new - a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking - d49035c Factorize into new isPosixGroup function - 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free - 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain - Ticket #440 - periodic dirsync timed event causes server to loop repeatedly - Ticket #355 - winsync should not delete entry that appears to be out of scope - Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values. - 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code - 2734a71 CLEANALLRUV coverity fixes - Ticket #426 - support posix schema for user and group sync - Ticket #430 - server to server ssl client auth broken with latest openldap6c0778f bumped version to 1.2.11.11 Ticket 429 - added nsslapd-readonly to DS schema Ticket 403 - fix CLEANALLRUV regression from last commit Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute valuesdb6b354 bumped version to 1.2.11.10 Ticket 403 - CLEANALLRUV revisionsea05e69 Bumped version to 1.2.11.9 Ticket 407 - dna memory leak - fix crash from prev fixddcf669 bump version to 1.2.11.8 for offical release Ticket #425 - support multiple winsync plugins Ticket 403 - cleanallruv coverity fixes Ticket 407 - memory leak in dna plugin Ticket 403 - CLEANALLRUV feature Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs 3168f04 Coverity defects 5ff0a02 COVERITY FIXES Ticket #388 - Improve replication agreement status messages 0760116 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion Ticket #409 - Report during startup if nsslapd-cachememsize is too small Ticket #412 - memberof performance enhancement 12813: Uninitialized pointer read string_values2keys Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values Ticket #410 - Referential integrity plug-in does not work when update interval is not zero Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled Ticket #405 - referint modrdn not working if case is different Ticket 399 - slapi_ldap_bind() doesn't check bind results- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Perl 5.16 rebuild- Ticket 378 - unhashed#user#password visible after changing password - fix func declaration from previous patch - Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error- Trac Ticket 396 - Account Usability Control Not Working- Ticket #378 - audit log does not log unhashed password: enabled, by default. - Ticket #378 - unhashed#user#password visible after changing password - Ticket #365 - passwords in clear text in the audit log- workaround for https://bugzilla.redhat.com/show_bug.cgi?id=833529- Ticket #387 - managed entry sometimes doesn't delete the managed entry - 5903815 improve txn test index handling - Ticket #360 - ldapmodify returns Operations error - fix delete caching - bcfa9e3 Coverity Fix for CLEANALLRUV - Trac Ticket #335 - transaction retries need to be cache aware - Ticket #389 - ADD operations not in audit log - 44cdc84 fix coverity issues with uninit vals, no return checking - Ticket 368 - Make the cleanAllRUV task one step - Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week- Perl 5.16 rebuild- Ticket #360 - ldapmodify returns Operations error - Ticket #321 - krbExtraData is being null modified and replicated on each ssh login - Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress - Ticket #361: Bad DNs in ACIs can segfault ns-slapd - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object - Ticket #337 - Improve CLEANRUV task- Ticket #358 - managed entry doesn't delete linked entry- Ticket #351 - use betxn plugins by default - revert - make no plugins betxn by default - too great a risk - for deadlocks until we can test this better - Ticket #348 - crash in ldap_initialize with multiple threads - fixes PR_Init problem in ldclt- f227f11 Suppress alert on unavailable port with forced setup - Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return - Ticket #351 - use betxn plugins by default - Trac Ticket #345 - db deadlock return should not log error - Ticket #348 - crash in ldap_initialize with multiple threads - Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied - Ticket #207 - [RFE] enable attribute that tracks when a password was last set - Ticket #216 - RFE - Disable replication agreements - Ticket #337 - RFE - Improve CLEANRUV functionality - Ticket #326 - MemberOf plugin should work on all backends - Trac Ticket #19 - Convert entryUSN plugin to transaction aware type - Ticket #347 - IPA dirsvr seg-fault during system longevity test - Trac Ticket #310 - Avoid calling escape_string() for logged DNs - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object - Ticket #183 - passwordMaxFailure should lockout password one sooner - Trac Ticket #335 - transaction retries need to be cache aware - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - Ticket #325 - logconv.pl : use of getopts to parse command line options - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - 554e29d Coverity Fixes - Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions - Ticket #315 - small fix to libglobs - Ticket #315 - ns-slapd exits/crashes if /var fills up - Ticket #20 - Allow automember to work on entries that have already been added - Trac Ticket #45 - Fine Grained Password policy: if passwordHistory is on, deleting the password fails.- 453eb97 schema def must have DESC '' - close paren must be preceded by space - Trac Ticket #46 - (additional) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #331 - transaction errors with db 4.3 and db 4.2 - Ticket #261 - Add Solaris i386 - Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks - Ticket #324 - Sync with group attribute containing () fails - Ticket #319 - ldap-agent crashes on start with signal SIGSEGV - 77cacd9 coverity 12606 Logically dead code - Trac Ticket #303 - make DNA range requests work with transactions - Ticket #320 - allow most plugins to be betxn plugins - Ticket #24 - Add nsTLS1 to the DS schema - Ticket #271 - Slow shutdown when you have 100+ replication agreements - TIcket #285 - compilation fixes for '--format-security' - Ticket 211 - Avoid preop range requests non-DNA operations - Ticket #271 - replication code cleanup - Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages. - Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration - Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs - 6f8680a coverity 12563 Read from pointer after free (fix 2) - e6a9b22 coverity 12563 Read from pointer after free - 245d494 Config changes fail because of unknown attribute "internalModifiersname" - Ticket #191 - Implement SO_KEEPALIVE in network calls - Ticket #289 - allow betxn plugin config changes - 93adf5f destroy the entry cache and dn cache in the dse post op delete callback - e2532d8 init txn thread private data for all database modes - Ticket #291 - cannot use & in a sasl map search filter - 6bf6e79 Schema Reload crash fix - 60b2d12 Fixing compiler warnings - Trac Ticket #260 - 389 DS does not support multiple paging controls on a single connection - Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName - fdcc256 Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e - Ticket #306 - void function cannot return value - ticket 181 - Allow PAM passthru plug-in to have multiple config entries - ticket 211 - Use of uninitialized variables in ldbm_back_modify() - Ticket #74 - Add schema for DNA plugin (RFE) - Ticket #301 - implement transaction support using thread local storage - Ticket #211 - dnaNextValue gets incremented even if the user addition fails - 144af59 coverity uninit var and resource leak - Trac Ticket #34 - remove-ds.pl does not remove everything - Trac Ticket #169 - allow 389 to use db5 - bc78101 fix compiler warning in acct policy plugin - Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints - Trac Ticket #27 - SASL/PLAIN binds do not work - Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFYops - Ticket #17 - new replication optimizations- Ticket #46 - (revised) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #66 - 389-ds-base spec file does not have a BuildRequires on gcc-c++- Ticket #46 - setup-ds-admin.pl does not like ipv6 only hostnames- get rid of posttrans - move update code to post- Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash- b05139b memleak in normalize_mods2bvals - c0eea24 memleak in mep_parse_config_entry - 90bc9eb handle null smods - Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash - Ticket #306 - void function cannot return value - ticket 304 - Fix kernel version checking in dsktune- Trac Ticket #298 - crash when replicating orphaned tombstone entry - Ticket #281 - TLS not working with latest openldap - Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails - Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse- Ticket #124 - add Provides: ldif2ldbm to rpm- Ticket #294 - 389 DS Segfaults during replica install in FreeIPA- Ticket 284 - Remove unnecessary SNMP MIB files - Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5? - Ticket 175 - logconv.pl improvements- Introducing use_db4 macro to support db5 (libdb).- Rebuild against PCRE 8.30- ad9dd30 coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources - Ticket #281 - TLS not working with latest openldap - Ticket #280 - extensible binary filters do not work - Ticket #279 - filter normalization does not use matching rules - Trac Ticket #275 - Invalid read reported by valgrind - Ticket #277 - cannot set repl referrals or state - Ticket #278 - Schema replication update failed: Invalid syntax - Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled - Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server - Ticket #87 - Manpages fixes - c493fb4 fix a couple of minor coverity issues - Ticket #55 - Limit of 1024 characters for nsMatchingRule - Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned - Ticket #6 - protocol error from proxied auth operation - Ticket #38 - nisDomain schema is incorrect - Ticket #273 - ruv tombstone searches don't work after reindex entryrdn - Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword - Ticket #22 - RFE: Support sendmail LDAP routing schema - Ticket #161 - Review and address latest Coverity issues - Ticket #140 - incorrect memset parameters - Trac Ticket 35 - Log not clear enough on schema errors - Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn - Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if IPv4-mapped-IPv6 address is given- Ticket #272 - add tombstonenumsubordinates to schema- fixes for systemd - remove .pid files after shutting down servers - Ticket #263 - add systemd include directive - Ticket #264 - upgrade needs better check for "server is running"- Ticket #262 - pid file not removed with systemd - Ticket #50 - server should not call a plugin after the plugin close function is called - Ticket #18 - Data inconsitency during replication - Ticket #49 - better handling for server shutdown while long running tasks are active - Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead - Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same - Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI - 6aaeb77 add a hack to disable sasl hostname canonicalization - Ticket 168 - minssf should not apply to rootdse - Ticket #177 - logconv.pl doesn't detect restarts - Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating - Ticket 75 - Unconfigure plugin opperations are being called. - Ticket 26 - Please support setting defaultNamingContext in the rootdse. - Ticket #71 - unable to delete managed entry config - Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock - Ticket #256 - debug build assertion in ACL_EvalDestroy() - Ticket #4 - bak2db gets stuck in infinite loop - Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS - Ticket #3: acl cache overflown problem - Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations - Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full DN.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Bug 755725 - 389 programs linked against openldap crash during shutdown - Bug 755754 - Unable to start dirsrv service using systemd - Bug 745259 - Incorrect entryUSN index under high load in replicated environment - d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere - 5910551 csn_init_as_string should not use sscanf - b53ba00 reduce calls to csn_as_string and slapi_log_error - c897267 fix member variable name error in slapi_uniqueIDFormat - 66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf - 580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf - Bug 751645 - crash when simple paged fails to send entry to client - Bug 752155 - Use restorecon after creating init script lock file- Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD' - Bug 750625 750624 750622 744946 Coverity issues - Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication - Bug 748575 - rhds81 modrn operation and 100% cpu use in replication - Bug 745259 - Incorrect entryUSN index under high load in replicated environment - f639711 Reduce the number of DN normalization - c06a8fa Keep unhashed password psuedo-attribute in the adding entry - Bug 744945 - nsslapd-counters attribute value cannot be set to "off" - 8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular - d316a67 Change referential integrity to be a betxnpostoperation plugin- Bug 741744 - part3 - MOD operations with chained delete/add get back error 53 - 1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in - b6d3ba7 pass the plugin config entry to the plugin init function - 28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins - Bug 743966 - Compiler warnings in account usability plugin- 498c42b fix transaction support in ldbm_delete- Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations - Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config - Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user- Bug 695736 - Providing native systemd file- corrected source- Bug 735114 - renaming a managed entry does not update mepmanagedby- Bug 735121 - simple paged search + ip/dns based ACI hangs server - Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code - Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server - Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.- Bug 732153 - subtree and user account lockout policies implemented? - Bug 722292 - Entries in DS are not updated properly when using WinSync API- Bug 733103 - large targetattr list with syntax errors cause server to crash or hang - Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining - Bug 732541 - Ignore error 32 when adding automember config - Bug 728592 - Allow ns-slapd to start with an invalid server cert- Bug 728510 - Run dirsync after sending updates to AD - Bug 729717 - Fatal error messages when syncing deletes from AD - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working. - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash - Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed again - separate tests for atomic ops and atomic bool cas- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix another coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - previous patch broke build on el5- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error- Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed to use configure test for GCC provided 64-bit atomic functions- Bug 663752 - Cert renewal for attrcrypt and encchangelog - this was "re-fixed" due to a deadlock condition with cl2ldif task cancel - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma - Bug 725743 - Make memberOf use PRMonitor for it's operation lock - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package - Bug 723937 - Slapi_Counter API broken on 32-bit F15- Perl mass rebuild- Perl mass rebuild- Bug 720059 - RDN with % can cause crashes or missing entries - Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2. - Bug 691313 - Need TLS/SSL error messages in repl status and errors log - Bug 712855 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not - Bug 713209 - Update sudo schema - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9 - Bug 718303 - Intensive updates on masters could break the consumer's cache - Bug 711679 - unresponsive LDAP service when deleting vlv on replica- 389-ds-base-1.2.9.a2 - look for separate openldap ldif library - Split automember regex rules into separate entries - writing Inf file shows SchemaFile = ARRAY(0xhexnum) - add support for ldif files with changetype: add - Bug 716980 - winsync uses old AD entry if new one not found - Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9 - bump console version to 1.2.6 - Bug 711679 - unresponsive LDAP service when deleting vlv on replica - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package - Bug 663752 - Cert renewal for attrcrypt and encchangelog - Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute - Bug 711906 - ns-slapd segfaults using suffix referrals - Bug 707384 - only allow FIPS approved cipher suites in FIPS mode - Bug 710377 - Import with chain-on-update crashes ns-slapd - Bug 709826 - Memory leak: when extra referrals configured- Perl mass rebuild- Perl 5.14 mass rebuild- 389-ds-base-1.2.9.a1 - Auto Membership - More Coverity fixes- 389-ds-base-1.2.8.3 - Bug 700145 - userpasswd not replicating - Bug 700557 - Linked attrs callbacks access free'd pointers after close - Bug 694336 - Group sync hangs Windows initial Sync - Bug 700215 - ldclt core dumps - Bug 695779 - windows sync can lose old values when a new value is added - Bug 697027 - 12 - minor memory leaks found by Valgrind + TET- 389-ds-base-1.2.8.2 - Bug 696407 - If an entry with a mixed case RDN is turned to be - a tombstone, it fails to assemble DN from entryrdn- 389-ds-base-1.2.8.1 - Bug 693962 - Full replica push loses some entries with multi-valued RDNs- 389-ds-base-1.2.8.0 - Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1 - Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1 - Bug 693466 - Unable to change schema online - Bug 693503 - matching rules do not inherit from superior attribute type - Bug 693455 - nsMatchingRule does not work with multiple values - Bug 693451 - cannot use localized matching rules - Bug 692331 - Segfault on index update during full replication push on 1.2.7.5- 389-ds-base-1.2.8.rc5 - Bug 692469 - Replica install fails after step for "enable GSSAPI for replication"- 389-ds-base-1.2.8.rc4 - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - 389-ds-base-1.2.8.rc3 - Bug 690955 - Mrclone fails due to the replica generation id mismatch- 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2 - Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences - Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format - Bug 681015 - RFE: allow fine grained password policy duration attributes - in days, hours, minutes, as well - Bug 684996 - Exported tombstone cannot be imported correctly - Bug 683250 - slapd crashing when traffic replayed - Bug 668909 - Can't modify replication agreement in some cases - Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1 - Bug 644784 - Memory leak in "testbind.c" plugin - Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree- rebuild for icu 4.6- 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1 - Bug 518890 - setup-ds-admin.pl - improve hostname validation - Bug 681015 - RFE: allow fine grained password policy duration attributes in - days, hours, minutes, as well - Bug 514190 - setup-ds-admin.pl --debug does not log to file - Bug 680555 - ns-slapd segfaults if I have more than 100 DBs - Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically - Bug 674852 - crash in ldap-agent when using OpenLDAP - Bug 679978 - modifying attr value crashes the server, which is supposed to - be indexed as substring type, but has octetstring syntax - Bug 676655 - winsync stops working after server restart - Bug 677705 - ds-logpipe.py script is failing to validate "-s" and - "--serverpid" options with "-t". - Bug 625424 - repl-monitor.pl doesn't work in hub node- Bug 676598 - 389-ds-base multilib: file conflicts - split off libs into a separate -libs package- do not create /var/run/dirsrv - setup will create it instead - remove the fedora-ds initscript upgrade stuff - we do not support that anymore - convert the remaining lua stuff to plain old shell script- 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3 - Bug 675320 - empty modify operation with repl on or lastmod off will crash server - Bug 675265 - preventryusn gets added to entries on a failed delete - Bug 677774 - added support for tmpfiles.d - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search es - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH - Bug 671199 - Don't allow other to write to rundir - Bug 678646 - Ignore tombstone operations in managed entry plug-in - Bug 676053 - export task followed by import task causes cache assertion - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8 - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used - Bug 676689 - crash while adding a new user to be synced to windows - Bug 604881 - admin server log files have incorrect permissions/ownerships - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - Bug 675853 - dirsrv crash segfault in need_new_pw()- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2 - Bug 674430 - Improve error messages for attribute uniqueness - Bug 616213 - insufficient stack size for HP-UX on PA-RISC - Bug 615052 - intrinsics and 64-bit atomics code fails to compile - on PA-RISC - Bug 151705 - Need to update Console Cipher Preferences with new ciphers - Bug 668862 - init scripts return wrong error code - Bug 670616 - Allow SSF to be set for local (ldapi) connections - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the - log output to the text file - Bug 668619 - slapd stops responding - Bug 624547 - attrcrypt should query the given slot/token for - supported ciphers - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any - error message in logs- 1.2.8-0.1.a1 release - git tag 389-ds-base-1.2.8.a1 - many bug fixes- 1.2.7.5 release - git tag 389-ds-base-1.2.7.5 - Bug 663597 - Memory leaks in normalization code- Resolves: bug 656541 - use %ghost on files in /var/lock- 1.2.7.4 release - git tag 389-ds-base-1.2.7.4 - Bug 661792 - Valid managed entry config rejected- 1.2.7.3 release - git tag 389-ds-base-1.2.7.3 - Bug 658312 - Invalid free in Managed Entry plug-in - Bug 641944 - Don't normalize non-DN RDN values- 1.2.7.2 release - git tag 389-ds-base-1.2.7.2 - Bug 659456 - Incorrect usage of ber_printf() in winsync code - Bug 658309 - Process escaped characters in managed entry mappings - Bug 197886 - Initialize return value for UUID generation code - Bug 658312 - Allow mapped attribute types to be quoted - Bug 197886 - Avoid overflow of UUID generator- last commit had bogus commit log- 1.2.7.1 release - git tag 389-ds-base-1.2.7.1 - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes - Bug 656392 - Remove calls to ber_err_print() - Bug 625950 - hash nsslapd-rootpw changes in audit log- 1.2.7 release - git tag 389-ds-base-1.2.7- Bug 648949 - Merge dirsrv and dirsrv-admin policy modules into base policy- 1.2.7.a5 release - git tag 389-ds-base-1.2.7.a5 - Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-ref erral) - Bug 635009 - Add one-way AD sync capability - Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot - put replication config entries in separate file - Bug 567282 - server can not abandon searchRequest of "simple paged results" - Bug 329751 - "nested" filtered roles searches candidates more than needed - Bug 521088 - DNA should check ACLs before getting a value from the range- 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4 - Bug 647932 - multiple memberOf configuration adding memberOf where there is no member - Bug 491733 - dbtest crashes - Bug 606545 - core schema should include numSubordinates - Bug 638773 - permissions too loose on pid and lock files - Bug 189985 - Improve attribute uniqueness error message - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat ions - Bug 619633 - Make attribute uniqueness obey requiredObjectClass- 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Adding the ancestorid fix code to ##upgradednformat.pl.- 1.2.7.a3 release - a2 was never released - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Bug 629681 - Retro Changelog trimming does not behave as expected - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif - are not upgraded in the server instance schema dir- 1.2.7.a2 release - a1 was the OpenLDAP testday release - git tag 389-ds-base-1.2.7.a2 - added openldap support on platforms that use openldap with moznss - for crypto (F-14 and later) - many bug fixes - Account Policy Plugin (keep track of last login, disable old accounts)- added openldap support- bump rel to rebuild again- bump rel to rebuild- This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1 - Bug 634561 - Server crushes when using Windows Sync Agreement - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self - Bug 612264 - ACI issue with (targetattr='userPassword') - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager" - Bug 631862 - crash - delete entries not in cache + referint- This is the final 1.2.6 release- 1.2.6 release candidate 7 - git tag 389-ds-base-1.2.6.rc7 - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6- 1.2.6 release candidate 6 - git tag 389-ds-base-1.2.6.rc6 - Bug 617013 - repl-monitor.pl use cpu upto 90% - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors - Bug 613833 - Allow dirsrv_t to bind to rpc ports - Bug 612242 - membership change on DS does not show on AD - Bug 617629 - Missing aliases in new schema files - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments - Bug 617862 - Replication: Unable to delete tombstone errors - Bug 594745 - Get rid of dirsrv_lib_t label- make selinux-devel explicit Require the base package in order - to comply with Fedora Licensing Guidelines- 1.2.6 release candidate 3 - git tag 389-ds-base-1.2.6.rc3 - Bug 603942 - null deref in _ger_parse_control() for subjectdn - 609256 - Selinux: pwdhash fails if called via Admin Server CGI - 578296 - Attribute type entrydn needs to be added when subtree rename switch is on - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"- 1.2.6 release candidate 2- install replication session plugin header with devel package- 1.2.6 release candidate 1- Mass rebuild with perl-5.12.0- 1.2.6.a4 release- 1.2.6.a3 release - add managed entries plug-in - many bug fixes - moved selinux subpackage into base package- rebuild for icu 4.4- 1.2.6.a2 release - add support for matching rules - many bug fixes- 1.2.6.a1 release - Added SELinux policy and subpackages- 1.2.5 final release- 1.2.5.rc4 release- 1.2.5.rc3 release- 1.2.5.rc2 release- 1.2.5.rc1 release- 1.2.5.a1 release- 1.2.4 release - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif- 1.2.3 release - added template-initconfig to %files - %posttrans now runs update to update the server instances - servers are shutdown, then restarted if running before install - scriptlets mostly use lua now to pass data among scriptlet phases- rebuild with new openssl to fix dependencies- backed out - added template-initconfig to %files - this change is for the next major release - bump version to 1.2.2 - fix reopened 509472 db2index all does not reindex all the db backends correctly - fix 518520 - pre hashed salted passwords do not work - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of - bugs fixed in 1.2.2- rebuilt with new openssl- added template-initconfig to %files- added BuildRequires pcre- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- change name to 389 - change version to 1.2.1 - added initial support for numeric string syntax - added initial support for syntax validation - added initial support for paged results including sorting- final release 1.2.0 - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389 - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428- re-enable ppc builds- exclude ppc builds - needs extensive porting work- new release 1.2.0 - Made devel package depend on mozldap-devel - only create run dir if it does not exist - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330- added db4-utils to Requires for verify-db.pl- Enabled LDAPI autobind- updated update to patch bug463991-bdb47.patch- updated patch bug463991-bdb47.patch- added patch bug463991-bdb47.patch - make ds work with bdb 4.7- rolled back bogus winsync memory leak fix- winsync api improvements for modify operations- This is the 1.1.2 release. The bugs fixed can be found here - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721 - Added winsync-plugin.h to the devel subpackage- bump rev to rebuild and pick up new version of ICU- 1.1.1 release candidate - several bug fixes- fix bugzilla 439829 - patch to allow working with NSS 3.11.99 and later- add patch to allow server to work with NSS 3.11.99 and later - do NSS_Init after fork but before detaching from console- add Requires for versioned perl (libperl.so)- previous fix for 434403 used the wrong patch - this is the right one- Resolves bug 434403 - GCC 4.3 build fails - Rolled new source tarball which includes Nathan's fix for the struct ucred - NOTE: Change version back to 1.1.1 for next release - this release was pulled from CVS tag FedoraDirSvr110_gcc43- Autorebuild for GCC 4.3- This is the GA release of Fedora DS 1.1 - Removed version numbers for BuildRequires and Requires - Added full URL to source tarball- Rebuild for deps- This is the beta2 release - new file added to package - /etc/sysconfig/dirsrv - for setting - daemon environment as is usual in other linux daemons- fix build breakage due to open() - mock could not find BuildRequires: db4-devel >= 4.2.52 - mock works if >= version is removed - it correctly finds db4.6- Change pathnames to use the pkgname macro which is dirsrv - get rid of cvsdate in source name- Added Requires for perldap, cyrus sasl plugins - Removed template-migrate* files - Added perl module directory - Removed install.inf - setup-ds.pl can now easily generate one- added requires for mozldap-tools- update to latest sources - added migrateTo11 to allow migrating instances from 1.0.x to 1.1 - ldapi support - fixed pam passthru plugin ENTRY method- Renamed package to fedora-ds-base, but keep names of paths/files/services the same - use the shortname macro (fedora-ds) for names of paths, files, and services instead - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base - updated to latest sources- More cleanup suggested by Dennis Gilmore - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1- latest sources - added init scripts - use /etc as instconfigdir- latest sources - moved all executables to _bindir- latest sources - added /var/tmp/fedora-ds to dirs- added logconv.pl - added slapi-plugin.h to devel package - added explicit dirs for /var/log/fedora-ds et. al.- just move all .so files into the base package from the devel package- Move the plugin *.so files into the main package instead of the devel - package because they are loaded directly by name via dlopen- Move the script-templates directory to datadir/fedora-ds- change mozldap to mozldap6- remove . from cvsdate define- Having a problem building in Brew - may be Release format- Changed version to 1.1.0 and added Release 1.el4.cvs20070119 - merged in changes from Fedora Extras candidate spec file- Bump component versions (nspr, nss, svrcore, mozldap) to their latest - remove unneeded patches- update to a cvs snapshot - fedorafy the spec - create -devel subpackage - apply a patch to use mozldap not mozldap6 - apply a patch to allow --prefix to work correctly- Fixed the problem where the server would crash upon shutdown in dblayer - due to a race condition among the database housekeeping threads - Fix a problem with normalized absolute paths for db directories- Touch all of the ldap/admin/src/scripts/*.in files so that they - will be newer than their corresponding script template files, so - that make will rebuild them.- Chown new schema files when copying during instance creation- Configure will get ldapsdk_bindir from pkg-config, or $libdir/mozldap6- use eval to sed ./configure into ../configure- jump through hoops to be able to run ../configure- Need to make built dir in setup section- The template scripts needed to use @libdir@ instead of hardcoding - /usr/lib - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall - do the actual build in a "built" subdirectory, until we remove - the old script templates- Make replication plugin link with libdb- Have make define LIBDIR, BINDIR, etc. for C code to use - especially for create_instance.h- Forgot to checkin new config.h.in for AC_CONFIG_HEADERS- Add perldap as a Requires; update sources- Fix ds_newinst.pl - Remove obsolete #defines- Update sources; rebuild to populate brew yum repo with dirsec-nss- Update sources- initial revision 1.3.11.1-2.el7_91.3.11.1-2.el7_9dirsrvlibldaputil.so.0libldaputil.so.0.0.0libns-dshttpd-1.3.11.12.solibnunc-stans.so.0libnunc-stans.so.0.1.0libsds.so.0libsds.so.0.0.0libslapd.so.0libslapd.so.0.1.0389-ds-base-libs-1.3.11.1LICENSELICENSE.GPLv3+LICENSE.opensslREADME.devel/usr/lib64//usr/lib64/dirsrv//usr/share/doc//usr/share/doc/389-ds-base-libs-1.3.11.1/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=25f8cb7748417eff329b0bbe9e9f5e3af05668f4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0bbd8759c09a2d2b6cb62878c25802fa044bf98d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d6caae21c17aed06603897e60022d84c4472ee1f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=26f1893f120ca8a12d2eb1dc0dfb7bb67a8721a9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=847a612f048c998aac15ba684d29d74b280f48a1, strippedASCII text4GY%0PRRRRRR R RRR#R2R1R R6PRR!RRRRRR&R'R R/RR RRR0R%RR R#R2R1RRR$R(RRRRR R.RRR R6PR"R!RRR R%R R RRR#R2R1RRRR R6PR!RRRRR R RRR#R2R1RRRR R6PR-R,R)R*R+R!RRRRRRRRRRRRRRRR'R RRR$R/R(RRR RRR0R%R R RRR#R2R1RRRR R6?7zXZ !#,/] b2u jՉ`( ]%#ut=>/In#g maALG3[MNq="K "=,dbJ'""/126;`A^E"2̆QۈMs(ޮ^$[inZ<)J~p_PtM4$$*1)il7!!i2@|,_y߂Hjex2ʓS1Q4[R{)!8t!4.0S\3{W#PqnC1TM.l| rLJn33GT 5I#-$k٣ .P_ WNkDcIq_\u^9uM`}9~Wupei*kDy]rQ ?Bp]^cs]Ա`J qzRcQ5[9EJK Q/Q1:<` 8b73yĝ{+Ms~ȼ:ъab':]7fB]\s0AZ 񫰛`4@J:6>I/]WwoǩfP/Edq>}CxNKt4 vYXҢ_t'I oiq^*/rvn2xV&JCw K;kw,^ټ#$SՂ6yT^%%8i~ػu7 ,d[8# %>)ִ)ƌ:gFU؛&ԡ Gir' w5qlKvA5A񦞂"m ={K 0F@}X*>uvD`H$v+ЂIp)\b؟KM`gNW঍T+4eN01=4^7EipI<;tEfbTKq}Ǎ,#{M:C<Ш"n5 k_ԴM,ȸq@b "h n3(E𾉡rYσS*F!z!O;Lk(-m}̌5Q r h_s;Nj<})b;#|RW6kcDCnV_@+ϺZ]ubDLe궭9r^ bp ^Ro+槊|\[oR k=C 0גcdQt~m^)\3"`w%\}d~yzQ)?Y#u9,Z;up'+GK*"=6b|tm!cp^pN uX0]Gp!گ5- ŧEvqϒ F)Pv1`+ qOs}+h+2 Pq>%ԭ{=[_s%nxw߅Iwwć[ұZ33-uEۿaLx* ԉ̇dre|8W̻2H}qf ~l^B_~0\8Tv58?˨xYb#129"i}*+}A|拱\C\Y-ȕX,MhϮ_Uw+p;{ " \r1{#9d {s75h]\1b#hȲz>'B%Bͦ 6}{quBlmqɞf2CUVHs1̆a> ҧ)~i+챭62hC v8)NFr֢%g 4xA#* ,P5Qsb*mc8^Dnxk>o7)PC./֔spTfKQCqK;slx3<~|0VKzEC2P]B͋̚qukĸ4ʡ$~ q'blk=` 6!ɪY &2}W^Q)#wo`Tb6U%*,~M!q/{,|B>SzGѬ+r:=7+$̉n~ROAL } @pT5\n)<*NlVaS-fqe+Rq1щ?=:e@s0UvocB]uY +7uYU |Se5i} "CQ6Gmw{Y5P6- xV?+T %^enܴ&=#HB-I^L% K1BMgr\O;YZ1Lf1tizvW$(DмXυWنtXQXsvTUOgOZt26}y[ naʪ}ɵR("Q?jBmߌ2FΟ3$t+*hIX 4r^F4Af\PY Ap+ (). qޝWAZqľ?;Soq+-GK)8f2ҝ3 /֩o0 a;ؔzϞEbN.3!Bȏmǁ^s3Vq4q;;>H8"*8O&Lɯ\0`U b:@%6Wx᠚CgER\\&z# "bQ8w6!RAU4q:P_eOs.I4cn ˈMGt6&1@Yc!Dzޞ|fG&Ϙ"LveG ^ДG'/E)Tf'=ĕQz_.ʖgR3B0{G܃&H`9E{2RV[~YEhK*6ԃ.%*qME/S7{Ԥ% mIkGtguz$)800>Ԙbtw e٤sGV@,D#"+U%TCKoH%?7ۻ=>bj kdb@Q#JI28 ,3ynxu7[wHc\uK P${rlksY&kLI7I'9" eÜpa4Uait ;!M?&_/\oҶZd-V' 5=ݨWB{H .! <ՖI8d>-iUHP~=guRs: G@4cOŽ4_'H kɵ}unHх:Tn Φշc{@ǕvBU& QC4WHrNyƒ־pؓˈ;ܽ 7Yjɚ1s?1];РSR>n7C<EG#t ryܿR'V4MaRf;M4X#pH<_AkkPZ ϙ/> ɬ@WuVNt66Wh:^Q1E\%lƩ׮r8K1NXmk<54D٤BylTz Bne<1OټtQ(z:ȋS'~)`nSCq1Ҥq 7NØBs? &"rg#:ucEA:ݮ#)&X]t{&GrT j;ܽ8o飨)zMQBFC'_QURaD~?l#uH{tHԊBAҠe?U$/=& [ƛP):-!0!zK/>-]PO{Ri~W~a΄ sR#,ie8R933z\9ZRR:ܛ&tTdۇ\#aFK.?bs- {vy%/8@$_VW: J75zӅϽWw䀖=i WdLQFp#fV]o=эd7T+Ӱ^(-J9>}3ndO&v`DTWRݦ\q7By ~!EPfMh%m!@>ASC_嘵{dy:EkrpžCt޳fz%hJqEƓXkGI|$piV'ex0FϵE.ESҚ{}w,ġ' VjJ3Fs6رwm@J{JbK~B4'k.e:__P#Ncc1}^) ɠ=;I @ yb6MG]Mz{-T$? qY ^ QAz"{Ŧ'r@{U]ljmI)~=5$dy w A֓Hsahce&h>߭S l#۳=f=Zjp;:Nݛ8|IBF$H$btR6rlX=zȈrPu<T/Ey~ A-m###/mONCռJazwt5ww A@e*,c'2>eI䑶8fdѶSqhV 4r-lebC\oIJ9r 'ru8K91~0w&,,+P'xQZq >d.a-EQ+ƕ`D,8QlpwWg$:Laipl&>R8QE5<8Kuiw^x8[/A [eSdk JE59d"nkB1,֛q@~pWe6CeRK.m-n&F$}C< bb^-'GI8bKh҆RI9J7u,8þg/$b^zAW6&Ȗw2j_+C`$\9غdO/ ~.f,  QH9D7w%BښW>VM(m_]B+RIcҳN1dM18gH Cnal'9jg)yo^t9@,G癟 |zfYlh-R9s<Qn7`†,A[w!ʡ iXWAX獏ՒA+[^W%H|YL,Ji'=2"~gWoԥOuKn'l/2$0J~:DB/&N_KoiFb sT5}d.OSVB/eQ' % YpG(iQr٪d ڒOYr!z\*C9L [(PmB{/'y.& HMz(*[- nPFML?RVl/eEƇG[bNgbH7[jru42V5& /S$P|y&uf-T7~VbH-H ݸR:9:u=ث{3@n`Y^zΨS" ")K''kB77J(sz dnIMD޳o#tZsyfEdkQW‹`zB33edeÁ8en! P:YO,G$::DS-6BR][@51QJgo9Alê]_(I, c=Ύe"O=\uᴐ8Ќَʫ W]'J UtB hF%~q"#Ŋ L!2k]^FcV;$c,~z|MKzma)ʰΗ󩽮i5vᘗ,Q|X#Lu&X)'⣵ /F@pV+BmT2$JԥȐn5+mL6KS+*h=?Z̽P̒>1G>)^0?{a1MD+p>^==_=z|@ɮH )I ,?wiZcU} oJGI-5N <(V'%HY3?c pڡZXL<\#RӁ?3"R TNNe ]jʙÎɟ̡}!Ea @X|{ r~CGG骋* &榞nUCŨ?4dQ׃KlF&E7Ywdk>Pn7y{0KNx <"qպF-ѻ?w%d,=xRq]M存NKdzz ;&)R8qCbZ:_Ib|gyZTѿ(+R>ʠ) T&@bغ,0_t|+mokM$ 6 o>l~tYf[P&'WSoH$ˊ%db[*h;Y=ckmL%<` >EH}{iLUz%52ooN6zXPMa|uCm]kLcs^c[_}td>͑+t&m-H0\ܚgpUWq=' d]끮ǔnK ih̃%4FImkIpF5;ݖ&{Vn~߈v`OVXCi9'G}\{) $S[ OԥeޑB4q-l*AQsc>BLYubhNMQͬj"*2l>KHS2:TTDx|e TDۄ+tZPy:)<2_k7 G೩n,lx`QxpQH-={MX{"qO5NoU$6tu7pD5LWH4WAn̪k>l9Kss,7 kNS\wSէ{-r44v#\6'v24oA>\MϬ{5%yyLc+ `UL`d\E* 춇k d)^ pcB6"XN~Qf}mj!B]nZJs9`L5u7(?x@+hLst頀_E*Kyw$y)[buN|DhDc'`;;ow]s&\߁c U'~qVW)UnTpvBY،N רwE s[=S|~RdOefc6VB#I W^y&}Zs ⷤ=Vޝ;CiKҍ@+XrpQ@خg9X%H^2M[dml&"u[lNF(`hEwm$+夑\Kny1 U@x!H9omjU'\8vgZżSu#~x w{׫UhqJFn| 埫Mxp- s0V suܣ^QXLAéd3]zNA{PP])ۗdvz'|ٕd&I@xI䥘mE,9&Be{(kU-6,c3dJXG23|R&>TMmqQٶI ϓ)@g/)Tk`6=ϳ x% &5StJZO㫘]o-qLP^ ntFI [S'jɤs2%7ߘÂ_!S#IvP <`TC-D' S M2)*~G?FH;p?(C8mͧB0@ZBDptM<{ Ig(ʆtB*.<2, hvJ9/ !)ɎJu SyQT>5Qp)8o ̅ӋP~Miz"+y(Q>0L^³Ӷ@M 2?[+,I]'l^nӁ)`)I=%)V>t;FnϸL-CAD:C8־)#;bP4f^M:oYg奭SBXyVh x[.~ j0'38 OSh.~igQF/ >.-lGڠ6VEs'gua[%b]a/,)O:LiYzCo'+_!0 ԺAIڦ?/?&%w \Wȁn"mI{zmXAy,MQ_| 0\^KƧVenNkC$J␧ZVU9GM}*&90^B!at >q5- c׎lNeCqPf_;|UlO@o#OW٘2k @`j${o*p8VEI 1ý  PJn_O̐=u€6ɼP&:ſc t_;yܜ75s}_*qq8Ht~VEU} IlH;1́r 23 zI-[uUUxqDP~B&}՛yQ>F0ps9XKH'$-ɇ/\ݨ[+0DlW1yCF<=k[~'1-pssGdC$a4mtx3n=%LP7"}jm$ =/"S K3;/uVK;ʑu (>wWtxgJgԉI{8=LIHT)OᦸW-DWFf7e bT2b[Su'3Ukm z61p|XAH󺎺nR^ r|ūW@:_+5)gƼuUXL|+~@⭤E.T9fˆlʙӦ0aXtIb2t8WFៃnq0Lr4t0'5\uZ"7J;ZB" zF pԣuz 8 W!PnTO(2DN8 lHv\u@E;q47߸^V'gMY}Ag$}`2\`G^~-irF7Ё0ENdQ'U Sҙ?PAz/q꺒#djm^n2iS AOt>,;.zSHbu ^Ӯh`[tTy=[ݴatS+O9V rt8SS$cҁGج#njݫ Q;_W2uonK4>np!e~Enw,+TE!xW'n8BP a,dկ&~Ob_BOd03&Ӳdך.FK3+/ק7u 5z2dmIZ 13Xyǽjt' 梣DFZ g-|g^dt{yנhkCԖOe6XVoavYm%US=C~ڇmt4J]'D\H ]H)_sjhp,V]_n֖9t.-X2YYcf A!_Eat] "MDm[pQ%vi1Ҥ}^#֬O̢r冝` /!f1 AzJib)gL@`v?60e/[1`=2V"<~]0FQ)8(I9HsH>93[սV֟  *ȭc4LJm;BBkߕo x $m*f>YeKk{c>y)C;5ia,TAo!J޺*9P2+JY`z.oCduMMQ_ä2AzPlXǤԿ::, Ք6ЊFϼ]@0?K#X{N._ĺ!:9Ӹ5)Q/$/M(臆3M,,%QǐfճC#"_*ߔ4 hJbf8Nx)3qEuw..DOl:DNjeP1?R۩:ۼ)Mn`^4&zQe$MKWi߷į!,ZB}fFrdd[2t9ͭ{֏VUiǚN\oczhrK? HR󜀯 5֩y X%[KHq7zA%#9-(;{yJf/jW^ƛJh"3S(H cTNۋcRf$OQKIG: N𓿦)KܤgJK%d8;p?VZ!]XqKR6P'aÚlϿGr5g@S)a3H.W^Fqa: v}/)U7 e"H%.bU worRq?2+G6̙HS;O[sQd:31g'd:^>em^ '4#14V-w@$f]X@PYydP)KW@8qs1jVb~`!u^XUkؕ6#~BS?ZׁO+ Gͼf-܏$f`TRS+*ί_!}JG'2.,Z?!oK{aú*߆7x} cU]h4iJǖnC]w$x'X. é>D!6~ak$:da*-m3-.i]h,H:ÿxc1Q˅}_03iD¯LxT+u*b; P O?nCΣ'$.j:Wq_ړ%[fߕJjjy&P*etOg$F|FD,t iLgGK!#Ry}&{яQ 0Ş]۱$SʟECtA9e]Y+|bP"Rk`# -bK dͯ QgQWYNq0ۼ]1b^ŗ!1aPZ"6.5f~r 1;\N͘m9y/M_̊zf0~E5JX%/s3=k{^0Xl j"^9/)~0*u^ x6d-8j<0P+B:2W2>;DŽbxII(%C M52CCޫ5JJ)]ɠ_ a2Q \Ӣ{k |ZjY8sHEW=ffYΔG?jr5i )띞_,fXK5(~4Ep=U.veԣ#[4`e>}y/Qk)Kf@Px`lMgDy`Aٰ9GwUO^vHW|{Kxt2$L FjʴIBnDlW3xE|dS;5_1Dpl RꟵ )$9] ˆ'yoFH"ɉ,V,A]齌RgPq[ZfI e;tf%6@a*;:^#aЦKREtى-RBl~i^zI_dIlҊη @"U%Ke؇ #74v a?/ݞ)#B :GN#0pXACqαT9I'YaShgIW 0{qr2UnmҘc'ے/出4j-JzMp!oEzx:%i2@λww0gގM ȅcwR*6$n֫nuiN ɭ8xfP 8_{ه9Kk-Aq'N&C=U{ӖAomrYz;Y/oWN<]$y!^qܵbP7:Qv9NGW)$-\V~"7nd^kΣ_ ;0JW󣚀LTn@,D2Ѳ;GMOH %Q4S2 Q]t| gh% YV d 2J6'?Ot<_&??σl秠+8|;)zy5OF|vvY}O:\7QR QcWPҡ`*DV]gz dǎ2*r^޼JEk҄d 'x?F`!Í3,BG0 r0>05$m%HUobmuq|\yb [ O b V!l?eti%b~=l7]3WN}Cu(JEƮ崤Qy{#wPqZ XҲ.~ƫUv^)kKrp80FQĆHm0((6q4i~SWB.XVZ%^jpK@68?fIUѠS#gt4ޫPVRYz>uG J*C>ԋCuOt= y]q9?"7%#tĮ

~}J9s>lQĂ>eid­vҒC\Jn>2)ھwy^xo/-F^8v2|j"o pN=x2NcKfs  Y5A>.֟"b.]ެ58~9m>4(/ p1 ;v$ĔOPFy\aU!Dzw0)*iFw6lc)J=Tf`tRzId8 .^%~~5IRׁ zWE|=$ƔS& % NC=5@ lc'5.I NB.ϻ șn *5E꓍wB Y|?g\eA컄p-tY".3ʯ;>3Wtcx;AgK)Vf$h>8LcN/eqs~c⣒s|^],V1cBB߽p ,60MHD^χ!-}dd%"wKP$Gk,qY-=@V>#4#l$Rr"qq-t̊9c=O*o NQueJ-7v5NM ӆ`IIZ"Jak3le٧+WfX竼%Xh=y^<&@42*`.qbiC`qv7`ds4V" ֙`1^R9*Xtl!p8Yid/ a/ APSVHc:ba^ט]P&?Iޖ-ЮTɝ~KըB Œ:5Ou|άX{B>)V?|[MK9joWt7 ']:Qz˹%g 0V+wR,5~ƫ"~+rI=t}1P5/GV|G}OZ̫bzek;e=^OmWf)!̊ҏa cgC#:oJꯃB%/c#E?kA> h8']عѻ k[(nx~|%YIFBslǁ e`4CK"-G7Dz)V^u )+ kNFXi 4~3e*$Tab,Rl17tF[F]|Bg/s8L(77,d v+ LɄO=nW#2(QUq-4,|L\pm>x-JNFMOwR8%yI?ƛ[A4e'a#SeR(cS`uoP/-evqB %f-EZ' tnm*債WVٟ\bK[~lO~ϮARݤ)=fbcK4bNXEw]/co Ӎ PTc3%$v1x xJjV˭4oC4TBo%|QQ-K~eŸT='Kfؒ.dԘXZɺz3A)x/֬&SVG,f`b$No;{L{ɰyZw¿9dz͟D9bqho9"Y8g/|!&m IL瑃W(w,|˙GXT~px%冨(iwx,d"?9!u*@DO)˵b[_r\Wgs.{b Y9h" + {5\݀xVG*u~7?B" } g4gnk9UI11`9}ְ*jȤy2r;Q װVF0}} |f!eYoB)b+  m7s>&o.<-kj"ӄY㯍AY47*2_~IL͞P6&`ą\0ΉA_.P~_Q~/.Jj5qw'?.^d;@v8l8M -w m*R `VŁC3@d?q$]Q 1pgf*}%0E<*,Kʾ'.oZRH6EU)0ȹ'L082ߗi1+\hÇ5(6@8 m`)0 Z3oJ_Q =&sqTcxD"Pj M9%'X6i_Q9Sw4[S~FyE$\ -'Ⱦ#.<~=mM4Hb)mKs-;KYᕄDKxr#qI9,xz^ &*ϳ t-?t[aP94x7muC eXx%ؾn]ܼ2,oŒ=Tc­.hˇ xı[2{ lpW-;_Hhn1s}0*R8|9qUK]ʇ~$Yr|,:VZ@PTBQ?}$G,,DƏy#jnhKvt16sn .'1t'z Ɔfw͍2$JqW볦ӛV"cJf"0U--͢S,!0F7 / d̎0UL @goC!g }*y6f ̓DpnOHDkoJ*Ri2xmvSᢡ0v٩Bg NofflDJcP8q7-:42gFB~ 9l0(_U b)Ry,}uW@n tw$[U}&_?*YWa|YBP| Mr8͢&xeA7`W.V}Eo1 <-p?՜CNڙn0 1/ƊY `.G*>X #٨]o|24B[";%eAWSh^iog0YdQi4zdR'Ʀ-fe ,zu$Zyr^ ϭ'IMf\P q#; Bqk1DT#BZic Z Q\!HQo[ ? !%_KNXKA.RNjWE|I {nCfc3DBnD95fl|2q:OJ@. щ1h^kO#{I)Vv>?. S l7&u>^.Fc\<̩W Z6_c Pُ¾31zc/k&Q\G.DD_{xp+45Ch!]k:wc.35 ` A\Jճqa.Ʊ7wM#?_噛?tpgC͈wa5-"i|?H_6|h!5W[X_ɄcM{$l)k\|TMMZR$/>tu/u[{G{21pa(1m`ӸJg%wkwBʧ:̄a A>\*p ŽZ720mEQ̗\yq؃/0Iy'UOc::pc-PDכ w's"`&me[m/p\,ׯ08c N ny&t`nMd@_{\rkƕGNo =z]Rlk#HGlbgKp)BxNGk֝~THC~M \eCcXM4?@\^KJH6bEM ˰'J˚Zdt> ]ϟ6(YáLj'k 퐚6٘@v1ؤ f8[x45>x,Z #I vWpL! >"h4Wo:.``1o.x1TQQiUOUdHȧ.pV@#]mِw !snzPp!rvn6_/ŝ?Zc_QCH"vm7|$.~D+50C7G^;bUQ{=.h\"eǿϪH_rB:q*c teSR&Oa%`R Eim,^F>f=A_MB,+UgטD2 ]tc]I1BÐmҋ=DsSMqKĦISBEhvGUs SwG`T[0 gx^7DgPUM'bmZ>lSzjJ4@3BM2W Qg8ceso*K BMy^5儋XJ('[W;ѥ \ƍ 5LqwH\Ђ~,* w^%Q\1 *ﶱM=IKNĸo/xOu'NW*x2oF?\sh=kN kZEe4LWF&gz[:f[\vR)9F&R#kcaPxwSHH<{` >a4}B")VfGts?uih4{`D Iq6 KMGr\w+ U돠d%q^(+aqM^T 9:0f&_j2X #Veqn?yvoqclq';בOGes+gUnY‰dRQ:I$q>X~ -/Qr[)|2σhD^]b:+&V a ]@PHɣهGyVwǁnxPzWeݍ:MNTC*湲dtKֵ%\=i bcpjqUg[d'uė祒Gk#u?XB_Bd=y(TC'm%$啝آN2糞`0ҌwDX9QS*+$.]9$;TZ۸G9E+,=+&85h"J,sQPڄ'{XiowW|a~+4y\\ZRvd'Iܫ Zx\L2HTGh|+iIy@ӗƇ9]+Đ.2ź?Z"GCk{ (K^Z=*a*ʺ`6Ԭm+@!Eib_7 %rO-U51 @hELXc3匓Cj\Yt'qBw IL*Q׉G)\VGӲwT1\ ' "2"ޱ | [0]v=.S䧨U R_ib F80.˰_ƛƓ+N_A& _@4 \4nmw5̀fC 3MtocNU:ܭq 2>.C+f?2~!/E?_#HBL79.[4uvs$ۚ^fڹS?.C8~3 CKmN4޻40{,yg+?|&TIk$R-圶A[oZM|C)p 8 *yuUWdE]Wשu-rǭ;h.v^ciH@(U@oHN^20QΉGOʮ66U |[,;T;|ƛ̬nKB.p ,f9D ˠTS &*$HP٠wDuA;"S-3߯uUj ,Ch }A܋jޜffa&rqV 2Q05,Gz!1wPa?,1Sq2\v9{ȌG4C5;2 T@U?GxR?=5{>.*́ICz.W#l}83̡G7j.[9ʄ7NPdׅޤ7r%$R̡╄m8K~6Pcl{&)IȆ5vo Ēoxq&]m;jKA7NS!3Gm.Gh1mf2>.$OOe2RDtvG/έTXURP8vuyM lwǖs}X:;_&o} 397kY*eU>m}(%ٞy/uxecĖ,_P:81㭉VN,&,R'F*`֊4z9ׂąӚoZfȝgIbfX_"V|8%W4gPԆY6b.˱bae(t0auVWHpiWt]W.~O\z FKלN/Eԭ'>15㚖L:. a.3.Q¿pQbȖZ?-Xt k_ucjz,NJ#XK:KsYwG{ ;h T)?Y3U]G.C\A_l<;ck}X=~z 6S;ҧ7>7Qs0@A{aB]N .0GiW-!?}T45[D1nmy1yRp}h[FiQhKQ",#L1M§o˸-"D':-G h iîYwˆݧ2;/B5D ⣡-dy S _?EWcShV_u~Ru)%$|Q<^tk=i((&QgO,-/{SۊCl]}Y;ZW_ 98A[é|qej(sVIHf)&ªX\D!ڳ 0&,yӬ hq @WVm $r> ; C%rSl` 9p>6dhԣn-ˋ,D7_&瓃T&tߤ%oT2v!BwgD:.HmqM`c:$2fZol0v]u ΁M/r!-4o0M`:tj-r{}G|„ex'¬lRWRpנA aMt S^ OGi(M jZ9ѐ ]<O@!A6w\=L@%ϱ_$RFdLq:j4{&!-9r|_ :h}D-3?XqIMOyb=W40'u+t ~RC%狴|ޕ12YPvA]?bSwiEhSы.LRd7^_O٩*ȺRV+w`|{M`T\!1o*z]JJ1p BW GHIX>Ba$KKdl}cB j|go[HˬC #j*m,q,_:/ v%oe ~q6`L]L|]_VIhu(k<>55[vl4~ļ'p,`|N3|u/+l}kjBPo<~,Jp0oGn7`6,L"b*T8_inL(`TPw}UӀK㾤˯J VFәȉ(*p}t CW] VKok"61$pJ^T)GI5^XjC<홂fIf[$@e0'"ߤۮv7eKn׸h#Td.IfFUTpsJnga@^yʨ B&IdcV{v p^٤g<#Et%ASZ.hXGY#M4u8 "m>˼LG~|X" $;5حff Ks~'<3WBw jx@N\|z7 Pp0r=l b9W;+$ZPi}#[ yC Q#!f_>c2+nS1\ St Xn<#$/MH挔\+aY5~~)k՘ DL`p_7HʨT[^'7N5?!j'hI"wǕs pG4p)n.^[O{:k6l^̅vYәc"J'<%m8a'xgTgOt!Z8 C)CR<|g$ @rR/5>&r)R4 G>(L~FÔg^Vx'|>I @Z %hSY3ש@9@ r%afHcq5vL3:r˿>n6/\iGU/ZMf6-SIzĮ6 8ڟ۹yAZ'~U_DOa[&\CbZ?/?>Dpy8~KT@I)40tTI4]+ㆬO bJP"b7y1U1H'U>a`@@K=ǁs7nӨ-PT$bk7j*]mv(1&ָP$9~8^à\g L]7!#Td߁c؈jH[Őm yc澤3Aknâ6Yv\V8 m c&vjt{|qqbq;yaruK"?'(^RO&Cn<G,'y'\f΢YC˹}jH[LQ[԰ln8"FrGEsP=MY~RʪXphmġ_OnLk}) g1*/}F p;J7P lqE6gi6Jp~˭.~0";8+Xj67 *ʏubHwCq<Ѭ;z)O]f:^jP_-ڗ5{bSa_6$߰'Lxe0oaBT{"̳0snX_a4݆Gۂ.oK"r\[gՋRp`"|ЬцpEE-Qs_jV78fs lJV֨\)T~'\h>xzDF cgN(oC[?N 8bXq5*\.JO)jJsdlP9A#Iyj9%KcXș)A>)6 v e5雥Lw? Ij4|%T_m$Ʋ,Ouði$l×>L+lRz/} /* #"!SIn'=V'X0جzNRK +o!ȝ=e247g1C2nQҊW`?Y;0Ļͣ]}/#z\) LTU=:LdSa%@POT:mf@*2Z,tf{f*4N[U8a*8|< ug^]ya{%ы]fN;q2anWKy^J/ZpN c&SHx\7l9jEYi')vրx2p+"!HgCc8@'$+*ӌ(%U {QIWO`Шc ]oWtb3 Hہ^]0&${mdQyGȩx-e ,,]{B%_Jz@$&KQ`YZCkq+ί-1PGKMJmREVh0x>?-!MݭYhqY{ݽ)Pc:=՜%ulw$ nNfXHx6 a0$@,3P̤|<]'n$vA(RIzG&ѵ u+"/`s<4V/k ֹ5NأHr _knFVk'DU !2x/p ޛ?"(7X - )pPx?\2m4a YԁBTlP9{J U0{8= BɭGs dzSpby 28Up^ȿy_Nz[$#$X<ιxZ AKt׷';3bݫ9Ai?-6N_+N^'( =eQ_ˑSZj?t!b)3贕xtVTDrsq$ Gr*_weyLC"8􄼳°4kv BE/`ic4fhDцDVRgƳl NZpLz+Z2 }+u}`knZTcN>hvcWM,pk+ZTo,ʂcGH޶둃0P_}1ϑFDhfRfʗX'hXޔ4&VW>"ZcM ) 2٦fid!5ڼAPөaV0`d,*R̺le;{$qDk (\/t8sgD0 $ޞK*x¾6je$(&B]#}F Ӏ;+ зԆeM9K=-.釛e 0#t ǠIc[YNdԍϖw p5s%?\{;)cb SEtw6OB?!|8MV`7ibgL IMAaGdu=F]vعW u|z=J#ڪ2~y*'(c =YP%|ĚE 'y?Nc3sHΆyd+/k@>2q{DeDL4 R"p`㧌I?Eua)2~|#ud&>LٍaVĆ @u*3C]K #mLHE \}m^^] En`/\g)* NWЈ=a Gʎݬ ʦ$0Cl}y%Mn_H14?D-:`Q6tY-c+.V.rh\D[ِp zp#S(Qa lyVz/-/4fKH8&eٕv]ד0"/D3QM"{ ' 2X7x BG*ϹJRr\zpp?:kVlEѝ?`]1z,UYazk:/TݶtCifMJ71>jftEAF}=&r6E֊;R},c:#̭k P^!G}wwC&ec +uv&'w+Ṉl֐sw2Mx&/ j'ww(Ce(mdXI*cuTMEYgB6&bBp4IIhyO_L5 sM6q3_-@v ;gqk3qW$暊*r\;W9I1)Ӂw3OEU{42}V: YJ",qAdц> v%%`IYXO]Ig×zCV#&{tj]/Fy v !Χf/Ե+{+}c¶ *'%k{Ѕ/k ؈ZSO\z8JS>՟;~:;,w}?N*J?~xʖd4;jхАm,$O'CIYJ3|vH@'~S+wp\͈4i5HB #n/΄ʴͰfQIYA+r[G/;ZCu âKA_+T*f.o_@Si?|WSڊ,1z%( ?GgZ&7x$+C_en&bR&Dtunn[M\0 M84ϙPʖ* JiAk"_ X1_tOZr~=C{Qu5]2J0@Aa/|FPr'oRz@FH^w'bg$HPL;~'=dl)*:_4wòߵXwػ\3)>R򐼌eףp8&㧏DY">G_=I6%i14"*Ό :З^%\pe R-%ʮB:1X3 ]JHPC yoAe +RA EgPt1Q7vߒNE~~}f_czFX@fȔ`bp',4  qUu>}gn:&y'tȈw/@W:= /Yi$QhMZº#z(*d'@ψ(_4o  /wFcπFeJ֒}pp0B8+G^XFzOz۟_)&,qy%dQ2TK)|M~[qdՏIn}9Y`Sn1;dhLB  ĎkQFW:-Bl~Oݣo0X I$`;E`c s۟D`kYbvlt6S8k/ãi_?8[w%ͩv3c*\AQYEЃ|j, v/ ܙa$̈[h{hhnG' LGPS`n?xJCЇKr~KAu,~1r!MV]t7tڢFu{XzgpR7Qɭ]\$$K!AѸ-Г6$`0YڔIE=kŕϸz#N# ;gbʺg\˞t%@ŕ֜{/bcلP@:'v۰[`ȑ+UGڢ]:ke)~wvn=CqmM?|X+Ds hQ Io h}xs]cG]w'2M9pD抑rp%w CJc]1U}4WօzC[FZy?|cgX-{돩c2© @.t>$]6A֕ 27*V̧zڏA= ~vd;fcU tb|Ɏnzu 2 <ܺ)V+iWrvNt ט8"rUr mRӧ9{䱻()6J5@*{͙R dwbYY&[nxA[Ep]ZHV\IT-#R+;̮J̣-@Ꭷ泹ۂڙGXnj%yO{9e޽/v~Mpw'Rlw*\-8Nuqv&MU@5%S\ڿ[β{D.:aPjvpEaL|Jz髀W3=_;%u/qv5b::ct'fi|x)$`#Mu{-+':ƖFwonl; ;`T4;˦1pS{\mˈB 5RO^_seiuyŖuvŭ_HJ8K1 (kr ןt«Z~ϽDm)Ou Z]Ov 9岄8.=hB8M2O8OC.3./(ۚA"1 lM:そsX*r*٦O2E`ݙmuOnhPPJ+)?R(@O#99"R%-1ȇ\ie޳FpȈQ5hr j;H'.)<} Bxq(\DJM7&-A?*Y zb0':I;ijJ~2b:9+6G"z־JnO,5NVT(A|`-p%cRiD{GkFhisca$|.8q3BY>UǪDbɉ,;rLZgmԥO*` ?X/^u9O;1}TlʟE̻ Vr. Y 5g4ogWm,WM'5l P'y%+uh دoaMKji(zx S2UoX9,J)g#;QZOzy}Ɔ"Jl 71AA˺Fn*޹]Mc4`b[ʀ|cSa- >C C5OH{>gQ6tGHPLj<~(f&FջۅaZՖ<%k0"*,^K\Z}EWi^אRG&JrfCSݭ kꒀn2ڑ\Cu˙]īｔm ͜9.VI;}GgIcEkRBpa$O?;5pU]N_*Ct#zޯi:+T *S}:eEI@?ty֬x9q{᠜`8S3%ޝXV'HMVhvÂ,MMx;eςgy@b)BKe_"YQӍvЁtG6@RoC8Q.ןi7L# eTtRI6zM U7w-] n6|;Dp}?>ӌ|̓2IdG-9NW)cݬ)ŷRaC,0OSSǞBer~ii!(VqS6k%RFAf/I.x #5~K@mԿVO C@C;:MD_+? g~s,E-౮+[:5l^Pwdw @} )ZNjkm ,.xV MmkNoUkv]<OlٯJy v',MK$Ue2ZRBBC5"噇`n"|qCQN|H=J=eeI5Mi5K=}S'/ [u;n[ TS4&ۭ$n 4 f@E@,bsյ, YhU GcC)?N|NAx+.<b@&|{4/~vth ~Bw#)*!=ħ/Kk3v~mxt]hjhWX=D.(UDڔwi[L % _-&xҴI$yJ?'YQJAfZ¤EZ2ؗlq8ק%)9!sQfe< =;hCBPyxZX!+wywu8T!/3IBK.y[R2eMU&o-+JciE]6H՘D&rlp{aJ%a~ wi!&ʱtiR}˒x T B;$ΙN6RrS]cJbO6qqՑ_imt{.ω1Ye\k)?1>e2$iq<> cu;*ۻϽ(P"]FB\:fu\ dPz#"ևD"I\4ٵ^võ`+(. 5Uzu쓟׈S5AT%%~;?~˛ܦbO[ZŇCh[@|gɛvS*u'f }#ҥV:pHp3Ԏ=-E9fa ( }*I0Ƒ)fO4*l&Ikh GDҬ->_,SkDBC :Y &pWXK=-~]ctZeJ%Qn 67) *51Nzl9o{҆}Ӡ(|ȹeG/HM)TUW=O+~]X+;0L{#Z&Q>Blȉ:y{5k?U#2J"s >0?#hD >szQ^}g:bbK!giZm+@֫ I&m=)M&r]@_6)9or}u%& 5l.+32LcoJIn55g&DOS&u:~u 흝TP^cQޏg'TFLjG]~RIjvfSrCc K6ER(V:QÄ֧b>?A;5ewL|_.,DzyFBH QiBj|`8,,CdV~7Ȭ$d9#T#`}gHs]s!fwu#&1"|w !<ӁJxXF 7ՕDC H?I{d3k}֏{ydO }1`T f?egf3~ZWtӷcVGa)t/'<b(V_1HHڼ$j>{(Y&`ׇ$gT|]Y{!ǎK:#p<M>-2r!oVt-u."fb X3IR}s6 oVV!„bh_ 3 +39nTV l\̀|`  VJ@dWz f_C" ?~14KڡzjjW&X|md-X sΦiMR;l< 8^4ioQV Ou.yfdk@l+godWzȁYWڊ./bYDv1Z/E"UHʿ;dygB`)F54ׯYM b麔&7X3 2b(?ֹޗ iPlgԸ8jP` Ô;,ؿS!o1[?.Lc<\m[ BQqvO*̻IOw4(2i8S$~\||{,{ .ۙf)c-= JRs(=Ĵ\+=Zr}pE4p@,BբcD(` ,'9#hN02+"OK<_]r8-J{*(i ?Ѽ}̓J۞ 969{++G(D3gԄv?W`N'%/]O]y>CWk`z$)8sZie6k+Cw$,  )Th6SJ:)7|j-rR} N]^S%Wjj4" gDMߟ BWͫoȡsoKj+]5'uK㓔MM -~4 @-4vscէOEp6yť&*FLSt NR=q\;t\li(yX>YX$`{L%7-1ֹ%>sU˻*. =yMqHA {~LyH}b՝('+@:BTyjgȘX-,U\; tƸr>B3hz3 l7WC܎n"]_2(aJFgЧ:NGV6XiBU EE~\Y2ɣpPGE%B*q #Yp/?$㏜ piBw;~0;PWfHa;j\0XhG&TP5e6(ݷwgNX*ŰA,ca-xbVK2{-Z dN0* [JUN8z]9%j ;ì?# < gi_q᩾œ^'^Rq0寊 _9,^AM#IW Jc'i4t<(ij>bͱBAζiuaf#!_]>|H&f6TP͂&;.4xv1OZ~By%kAlţNpte#s:5:^dͿWM5hPdqoh :7 m5[BSV޾8#hSn@Jۀ俢XZ/2Wώ?X\UK"NS߱Q6sTI S +"?Jz;4t6' ?m08 -d}yCK@m с0rZ4f [> rgsk|z> }JPDP\eX{nrmK{Aq: .T +54-9P,;Ȝ H 䈿p @FVMټA$O`?y+p0G荱ʌ!}ㄪ~2m,.!:~?c3&{nX '%(k%Xdf$Br7 enѰ;3ncO5Aåj^tXGU27dZim7x4_oGu򎖀-;?p8H3q챝Dk./vMR~ SL]LKa0x(U鴝+4W /\AuVl8<={Uɟݖi?4i*a:s] @`W;[fUjq*Tu&un.uTctW-^F>Ydj.J*n;4ы~;#*P)wܸ>t3\Hlz_wi5X#() Q;Zm9nL Dàz^U2o q_vL1PF!v/QSz}820I aZÓfT㨷5knֱvB.|_@hB lTYbѐl_RRZ^{C,Ց x |aT.XUL$3~F IVS>N4/5N_A%L80׺#$r bѪ.6g |I?Y\5GA tҽ-*4;(V5 bLehSgGEèhMCa%p:aGdĴLv4TPQH`3$ǓETb@{ssiBVKBRO%CU,ij@Uh׺bfxMS/de*jss;|0i2l*L,HD_ְ6]3=2% ~HLn+``͂}g RD׵?Qe{k"4o*n!upr7 hlt-Ҳah vM)wE十,+>7|~7 {*ܴ[hknʲe kK,T c W=oHrBWvE׋:!bpD>ܵ omԊo 4&=22UÎJQ!+M٩HJyCڥ{R r*f !*EO!L;pݛ b}_ X/4[d::dl}Ҳh#/)|nf3՚-x;R 륐r:@ȱ u  x}n_'YUgFs\2| ̊)V!cnҷCxS"檌=7:n,:qn Eu`%Idi{ݟˌ$fhJܑЋ6>Rzm:dIvE!{^2‚CtЈفRJ|TC &RY0w/ n,I榼1{gT\ &u<Թ۱u?"HfLLBLN7$\N9]D\3AGWoT!C Fѵ7!~hwV,|$n;{4˃&)UKI;r\Rb_-'mZN T2TJ؊Nn<^Ղa Ca`K^ sg0a) Q_0Ɍ);~{'oc0*mUn%r{}Tܜ),{zsjHbߜYshuRv̰!Z3Rnx[/ub+΄F.aX>\Mж>̊+h9˂ݩOG ;oL>:B^#xVْѾ~1"޳Wpꖯn13>$4j:8,Ɋ5k9,(*` uD9_T4TwbPW]MOL1o]\qhi2כ-J7 ]Eyu(5=L91Vkb?wc-֪=Gy ,D@t%7(Owil.oZ:QC?dw !S>>Lrr+Mo G,bgDdz(G,*bQb٧9뱊iL'HSIPc$Al+Q@52L)敨Jg'QgrY#@g4 | H,qi bB,3 ?L!_ Pېgj;՜ovg"w1` zAK` y!={.Ap}G;4KN^ ɾ_d qK^gf܏c@e73\zVo`;`غy|`Ŭu\^*ZcJ6v9ZJ#|K>Y[1;=:jFvp7s:V}jtwi ώ\yƱmK;9)fpR~R>qa`Jì׳^;h5Czp cU׊Y] 9m#c~{rSiN1n.L~`ǏmwmWqH18HZE>+f# k!ʖv,V2?;p"e&u"Lvx $%}R)k[jz?|u@xaҁϨ\y] ZĻ/[i,|S-'Λ|(l!sT^osxbrp|I͑8tH[f)\cE_Cڻ儵K*'pjBxֹRLeR3}Zd ߩ/ԃi#:B[IbP-0 ḫA}s-ƷMcakQR%Y!^KSKa=MV1$d=Iq$-R+n&Ţٞ F_:b2+a%[۱SѾA#/ ͳP~`T6)kxA-WBvxG qL5P[b}T`Tlkw,P^8it&eԶGCt(r(Iѫ_lȅ!aH{"i]^MċIr=v^}J^U8=))g,Ay\U5o˅pAFOAbh#Ɋ!2Zp7Y;ǫuAѡ|sTkQ~B>醘 _X[~"DQ]ň CT.2s6Y4_Zup]~Jw} .KԨ2E6[ -5\]R"_;P_x0%Nzʏ%m%G % s[jW%ۥorG_8U%yU~TX\ބi\QFu.~ʳSrVܩylekբٕhjH  !wXƱ`ODVQ=n8ͯAP. :B#5.Lh& ?֖[6\w IhR<*L7Z\j784?VȎ. #訰5Aa4Rm ~yPay~jG)WnhBOk=-*SQV9G'5܊1 މp[\jco3F~@~'v3KV3Bxs~Ы58o-8SƊ^`Q%R(9rag?]] VL*sLWϨ bø5 D'"HdJZ G^rkUL] j$ EW,WST7݆ħROR`Ӭc}|.$R}3٭(p\m2';F]V.8 ZZp垿HyM@<~',Q˫l-t}ݝ )m[{"큺|| s61'b ]cv)C J w.?p&Q7ӪÌ!*BX9Jle[5#I|]R{1MpvҬQ*HQ"eKg!kD":,)=UMR*}'L5t@zY"پd [9\ߍ:_NJAsx`U GkLխ( gE$%gl#8bd{(TƶS<`"QBYЦyx_Xz7tcwj"5\p^G6nYDՀ_u[1~,T5Tٵhr]nh*d>oPU0"4GRe ضx#xg[P-~G^&&35X ͸'(:A ٿ[T(rt*;&v#Q%,)(8k"ۭ)\(# o1wq6?Hv㵛MT t8^?~y2.i6 PPL;޹3[e0ӍSG%Y.u]d+ҿyEORuijܨ4Yn@ *Pi/7e9 ]˃hk3Y4i[ﲺ,9-1Ed{` "-H)^V^r#.ɕ|L[P`[2t n.iLu,͘&q .ƾwd^b~1$ ֺ;lKT֯"c?a.~ݚ%#Z1a^{$&pPk]/Q*^yiԅҨrs3lq,鑄E_+U yG''@yf*}]: tA^(KqM Ig:2C"R(ﱊE  w$4~"F $n0OX.o̫s*aoT,wLoZuW>WfD;AsY!74J}0+Xƃ Q7UKP)֦8"5`r2G"3iU S LdRz]> s3GcrϟpY|;+k :$qU? o)Eh;CGZtSg%,#R̈}fORgJ aY4T]d\ }󙨹w#_d׍L\ x\:uibk>C䦈x! >滗Q,;H%*݊\ztq~R d|Uv)ٟ5ĺb6W$NoF9 #-@ GwtǘPHpšd\5c};JƉR =(uٲ>&ߞbG oUxx/P]V}mu.Č AjDȰuo!ɸ^$8a.R-%bKq2H$dc_(N >:.d)  2C7#9E$8KzYtyŒF^tDqw3x%֍,/ގ"ٟsܱVtnñ M\6WIxgB9U7]+I8mouùvbÚl ׹`WQ'A=48w֑L#ՒݜI:r5?K+UB;.K Z~nx`&˸wv)Lq_^hk󫬽 :s6m?LHǯ%' @ga GpkƳ>l\JY*<[:$=qȅpPSX>IIMmOkO06۲~hXTp}Mc!d-NCtiڵm{ -O4㈠Wxxy#QwIhFt`kFQ;L4!r $5\uZŎBO"DUeL󦜈ʓө,D3w&w"r#` Bw MaBFE/O-I1,VХ .(ݛbEx>򎛟민@%( 8g MZ/x0"O3gJN7Q `GWȟsa5E~4"R+v\GvhpBa$BAZ0gN <$0܀}ѰVGNKiPPg,$γ:}X ob ,/>)ud6p=iڢbh$s획gY6vc}2HH;1O} l1S& R+Zܮj7i/p>*a?7j0kDi‹;Ǜ1P[a˂Pw$jk\+ XP{_xp_^<:7pLkM(DqbvNO(Tع[$U68m>3# WJvA Wvx~89SNZBZBsP\H[#&%7ݷ8-,zlS&:ɅPjxq{5w/swHDZsV7&7R [ۛkX|gsbrkEŸ=E2“s^R$r9YI'ތ#f{GM<:D)הBXuň[cm,(} ={Cp>-AGDaMV}.\e?LPٶmB;g„&u'ms/q ^uH~ 6%JΆB̝")R 5e- |nl=i*2أv8QPFxG:r@6_p53Y=(׻n揦`ePsۓAw;Zњ\?Bb˵)S&a"rp+M*}AV]q:7w n_:uV6:0hA2Xlj^ !i*R 7 M6Zd=oQGi(`䓨@J_[4iԧ/k $KT-k .&ֺUq~VtG!ͷZb"͑}LNQlucZbt6-r!t3`铨u:ITWI<̆Fj7W)H/vs%p嚧60Q,+ :DY^(7m~  0RYazG楻2t'KwYf:)\ G/E<9!/'P(J+rfm.w-c8{O%>ͬX,ܡ@Me[0!Aҷ\ [HτOh K mАPy2iS:o`Q-ܲo"`|gT!?Hr^aU@S3*`IMFX0|4b7WmlMpc *f*䪕sZ6+un`@xd"֥. ,yfVhzhW_J-RUe~$<ʩHi]r~>Z&"ccۖg2:(yQ`F3|,kZl"M.W ÷#z;,K_Z_L^Pd`ڒvMГ2mUB3A;nޘ} Qtl7xz%&t1`,N)%CZ{$PLTS܏]ᖭJc[<յg-hI T/jVXgt-=_ahmk̐NC`őzW{{8/*$/J'A7`YF8gwAH;0w3i+G9 +gByGW~I0TȮVqw,9̈́J0z~vnToWy}Aq3r AqRo݄R,Z. #wm>P\eߋt`}DvOם\?gFfwC&|B+n[2{ /GxY :盛H]2hfB jj쮙D>W3 NAHgĉCwpPjW(Ys]_@9<6ܪb4j',#YKSMtߏM$)3/WWۓ ؔQݷ0`@?7„w$ mUɁ UtD¶`{?(V;-lXښw5I툧b80W.sIU?r3z\GW,1a$IF2Ujx>+ֽwp  H٨Ɖ0SfBN*]n/0})p[ؕdW ۻR33 -CIjp~ j,6(]0arA`爓%8aafywIiB#~;O+fS2TB^-$wͷO}3UԢ)FSGS Qyy3!MfbV""#=XM.2r[!W>-X\ys=jAB=퓨Gm[Rx#,b^(ϡ,iDݳX [sq$$?SI' 6`}7L!gP%c3q7<.?yiP%DFim{u7)W g\ȒbJٹOj?WMx* Iz|Vg֣@qq`S5FK,MKW:Ԉ\hjQ`Rbqi9|s^eY!_eIU;wEa*3ꠒTWbfPG|pdC."# ,;`Z,)$1q{05vB6yT% _*\޺ Uգ0{̈́ \5Ͻp fUh`i3X4.<@q#6HdLjCkhi}Q /xhmbE/)!yP|mk tVc8JM!UEzwIi%jfQ}@Lo#u9cߑDÌt*>8?xcsƍXzJQKCKV/Xwg 8 N)WYN`+VdtH päGt?3sSe}\348T86Rp/ւPvn4,#-Va:SoeO|?-ZB&k9-@tNÉ6ߺ&PnjwF#9%|PţB[ab4`ںUf"^бtnlw ܰFDcGnTz6(',2`6.6Y7@?wnbUqH5.&a/_vxIhX:뙯/is?H* 5ވ.. l5&vE2MPRoCi5xWGa0D!J-C rZܢFvZFK [NLB z-1M2@V]۪Ęc󯟃A6bmiyBtZıϹfI;\(EHbgVlFxz(b%180q0WؿmZvꂅƢmjo&/k:M%VWHor)/ *ía{~YiюjWMU]H/Yg&lLFʊq_[jkdѝ` z^F]F X[A|`:uW26wWcΈmw{:KTTuaiP`aׯ×q7 0s0 Ab7WR*C"0Zu{9J5ZUqYBLdrE~(0Du"F,,B >C3@Yw@i@ܕQ[KNq|:?S\1ž30 #@ z\|{Df8Ajo-Echd?5/46`(\ 81>"((l-} Dcj/@{~0q3Uͻ>S]ª_0)EXa_U\pRxw!@+\ oY ˵ W"3ҩ2!?T2}4ŷQCE*ސ6P2K][ZzwKm`ܼDgu2+.ST0>zv$إ|vTbWXo1c(Fߞ^Ǝ\),x҄Kvp Q$3QH!MTbYu IrvL1!C*)PnNćd:}3Rv  TH\ykCSC[Օ#HܠQA?j`lv##Ju t&4(-)DR1Yg%+]}\GC %H|![3BbUݨG*Ej>,$޻Mʼn2L'jx68(yaL%U V3֨LeFLsŒg8Ϟ$>v4#a:z{iFh~xA}wɂgUNP.z'wa(HsΠLZ4IBmeޫwi,;gKm05)j ^g#Y,0jȉ=`D,H%Si$3JgC1ьMhnm:dxv 2Ry QƿjoMLbNNBSK&jʊ/d0Xn6vCi<+$y̘wll"`'iY h:A:5#ɩq: kҺ\rv1 70hM8L5۰K,iF3^$N[fwh[H+ǥ",ΐweQ -l}sp&aD!;'9DS3@#3}K, υ yib/bLj5n\d=F]OYʙ3?\{>\kqwԬH鱐Hkta|T:I48jH Jvj ~|BN+gLDA SU3 dಐ+>!d.Z?&W05aztNaG^!MP_HX(Y-ŸdRy[M;/* ,de}vJ' dfE=B#ȭl*MSjx@ xlImdD՗v y:Ɋ:JTG$w`3W~#F__i:ɈH4RY|o[H$[TiNҬM|-Ok*Ru˹B ՜@ 7f]{@X:\}ZWt/?铞cF lyg(+Rڨr>wA|%ONNMJ%qqr0bd.c{xCpZٮPެA xƥd#Ő: "R$<E&롤\D KKOShHJL/fX˳v,>gi|˺QŜ|]uOal959Nwn_=uvE/~tē.\ve8jgg%muWN20}Gu+gOzEt CLT˝⫧^QeM|e#ٷ`ѾZ>YSN#}PY쬍즊ѹǽ$?bWџ4٭);_-kpsG$yN \iqԘYjhOgv 10(Sy^֪ 9#tUj(4vRuMd+ a"S.dp uhmz5 "΄Rӎ 4> owK۪-Ue.qʒ{I~dI(4 @ƂйIY%ӓ^}Sz <M* iٌ3W'Z vrVIMbV?+1qU4^^'&KdS3.f* )R!Z$z|G f-C)fQ욐|"m8tisV(ҦcS=@>Jg4 FR=Ż|L^p'h~*/H7Z(vB}oJ\sD=w=/_ u}n魨uѺJUdD׃"ɇZq}aiwQ6٫=U0l}#{^'D 6u}4_/}eŭ+#6p>߁;d^~ "lK.lrk_ț.qyLeC2ݐܪl[сQ UbRQ<,pcvrZAwt+EbV? bL[\Th# FP٩y@׾h`OCX[0~y|/b"ot-;D+Z6Ј}g)Tm ~w(,XMF ~Ј3?VͩXCsP:2|~YR՗BYCZ~u.DOeaSD_`vC R#8zMv-j GK*~vKD@\)V\{!YT3=5 ÊM4y}t >#P_^BuB4Rt [Rn "V@RN a%F K`>,u7kIEA ,w=艖sI'T`Nż^ws[ J'>oѲZg!J '揍&R4»iXce?,w-UX~<8U0į[otZ(Z<#Y(ŮbN?=\؏qQiKdX̽K~6G5^Bʡˌ -fצ{FJU] ٳ.Qbh"Oz#E;&|&[nFg\Tԃ8H꽪hM@Ƴ O+`X)@vrI}*"w^|uI,!'R Z,*S-RlXMZ&UTFYXhʭȜ,⿸|~y#$>srgJN VT+fA>(9P`j-MPhJߋp;, ? K|tQ>gg+"2nDf˒XZ%~NbLV_SW; '*X|N# grBTht{֙нL2B|V[z[݄ۣMW(o̠ 'Vf'X5Gv3َ ^oԳ;^ H_ml3T^grH:li)< w;ƛ+ L+hVݘ'GGXAP⇏Y0t V ;2oLmtJS/]5X".*T[W +O$v XOi.E>Yf) '%nGwTy4zed*.gלuEj8<"<ņE "!iY]G3c< I:hM7sAӖQsTBƣlR;P.S醊tZFBC m-B Hm9V{qX!*pB$ҡo9mS$NyI ߭‹ȨZ*҅Ѿ5RM/њf3& !p" {~x~?V'r>Vؑ) B)g85{ăxM2 6?%!8ms0 t:Ւ<5ϛLAn7D;知[ƹ/"O)K?PZ&BS(IZn궄8`H &a%g68/o]M$^+>8xZ Nb`~#[&vq!5CnkIk<ّZ䨤(LS ^Y6\4pMv'f(cr|1K%2JKdʐLRW#k^J dx0Nmp_*LUq[5*k}7AC)`Dh t-D *R)bA]_7DY]3FZ|u6Meb󱢖F/Ԇdd%[}o{sbtDٯ4sW*1~:|\s$u9Ğku)63vTd=.vOMd6=V^<RC#@eժCԮ&ݪ l+2A>J;Ia#a!V.)H;B+0/@7>FuQN.~#p%"ԤM.x %^v҂vc^q-fg>}lnJg- m@VADX\ϔMD%τd0[;ri5$kȾ $nр0ƫ#XJ0Ǚt{S+l2+=xS> #A6n6Z}2/)fZ2A{DG] lyQf@w,oI^`ѥX1`qCÞNjPq/ *o~_Uh_pH^ݱGy&dӾly[juϿ=:R4z2Ii3)Kfvx1>GEEOU>1b^h3p#w6&}@%}(2oȈaXv;M?]zeFX7NRX_(dGB=:"зuٱu?fAv G`8gh.y Jyurh^d{L:d3oǓ^^f]&&\(Q;UG< d;zHboBP[HU˖H1<+{NY,"D&ɥ_M:=#j=1vm(HYgљdEEoS Υ"B<&6*7hUZtj>c$ zkPucDغLRW<*9)Ils86 $9П}bV>"ݎS\Ț 7v?Ug:6?l̝utLx&;/}j*d}oy :I˟1 -D:k%0S+fAWb y݀G#s3QA%Z <ƪouTc ,1 Y]Yj1oul CÑnb>jFݛ'A܈ _%&lX9i> p}wɭr׊.QMɿv`1z2)FߡjH>E/"ƑUOTa`%{i]5  uID/{eدhwf(ѕ?&k̒*`)ָj9

n~-P!KKr-Ll,*9̟x\ +\䡉kҒ9GX(D]yu9]UqqVKb[éb*[1 ػ61EH0*2["Ƹe$ -(PhVТCΉZs_I1^]> 52`k.1iq&akѧWwoY+}x9n6pc!m [ޒ|yt x^_])}qAjLk$ =emU1I"8ش]q,uc'0(~`m[P{a[.ԞЁ/EVvٛ&5+ܷBܪx-zu "vw$qu#{]P*Ŏs nu.f0]D}F x;x*ijiC Ȃ!3HzN6fsC4a&9&8qk#Ih܌ OtPKLjygwH'Jg$Sd؞<s-1&"_n2ck2kyI*^ihY糣 ;o7ӝ<(rIM>E2̪(|9xHƏ O ^6 ղc:ZYrpG@$N WBrcS&oXѷND _}9nݞ8tyB|_sQTsD(GL0$1!kzf0iB("p=! ;. c~)YjN չ`1_27Iqp6z`G=UvamT<$${%ހ {8N9}}UpmF(qŬV?7%V!/Ce 059ނ1Mu+v%]cjd_0o ER]g8YJR?uv{2|>4~YDyqKq\ϻgF.n -Fp6uC"s)-tRU'Èz fpHIBذ2V]%g$Q4L$-iªӰsI 1Qutg_ML^{>q!jL_ZJ΄1n_2 lB !cQ؉-P(]w6ouumskCvBAp4uS k+_p]yalҢ!r}s᫳fPt+ٺV"Y9C'<D-/'Eϡc>fa^P\Ư O~-n 栬ܴ'6V^O y c%1\V,K?Tǣ뗓 1sWWM˟+.o{-'ߞbBd(ݾ)SPWYn/ ~Ąx82]me?2ӁDL>|D=?`:,s =|z鍧|bn^Y/ߍz$j~[^~A0ZmAyU9(UBH܊%Q߮jFg =M1a(t ؽg2%'$Dta-sM9* B]|]? D'"n^q?4}絿6mf߼\R(%0ê6TLϨr^ \O _R{E7J?=@HtO:l¡{:yPdͦNCH,HFʏMվ5޵%MقqY,Hmpy6t[) 8 e9l(j'md'pIV[1#Ca 8{uC9ZOBGz3KɃ Q։;gʹc ܧ._n UH)/) ~B}:WKwYk=:B!o Gޑ:TہW6 ڧ1PfԎpƂB>9Xd&lnX'4JYT0#Z3>vX1m0y?AR96Npx),R3b].+YNAdg2#y 'ps7#[Y1Z33Zտ>)cpp0{wz%U@pZg7-"ϖӀGM)4(٩f"w)>'y)?"/(+bYeNÁfVԘv+!Z7G`B燁rؾ5pU]xu<)e-Rg?]woo' Pԯt<Zhc+=IX`cDW\|'KEi=BuUmxj;,~iCV lE{^MK`?BC!(c\rFwZD.Fz=!iʪ5 a”.}خ%lmϬAT,x$:ź%ˆupI8{(lp!B]'U,~3Yuucqa~NlsY? o92=7_x!1\*inrU?^b$e5mxSbQswV׉)xf=D"Pl&]ű _m̤X=8sFU3qF:S|G)d= &wͶ^9LC& szvXsVMIQ_Mz c d9 h&w2_o0aܮj1;M~gae ~~vW,_GJGqЮ}R,f5Wyb+:AmEMG@Wm9@(TFw," \R+i>\VUgt !vbYB'f&݄97dM;]xV3?>!ɍgGm\In_lukvqŧ(9~x_=APPi22;7>Vwu)4GRcr/*Z#VHZKm~ F-U,qeoG)3Tp=ixTC<5hx (Ig4~ژBcS㭵(oyn}zN4:QpJx'Ohw)[I.d]K˄prdЂ{rh\X5,꜠]nyDnD8 9d Ns|` ?8\^שٌIm0W0cɚ,B>j1ig}{B٣H%si#oެ_4Ǝ}8 8j \jlPنXXr[|#{ٙbƸ,W _*b׾vwa%&q~8>أ+@(`8V{7 1T*6‹'u7[_R} 3 gb7}) 3j Eh2h:a_}_j"jR:aVӗ~6^pqBp#s*u!%l#s/!k"^&7+hx_9-ܟCyQ¿%($i50IP& ܥʢ 2BFR$Ir_-i\4$*)df^cG"ɨLM-Y }7)-@nLߋ6%Fj#*V(-o ĝz$t~Q;)bDyEւm/*MؐWJw'& VMeHaּF>ΗE:b~9d~OhަRtp3S|NJ^\*E Oy=!~޳y3JRI|_/IūgK4EWvpY j^0OS z+;º>7)8g0ڣJ52a3>ٴJK$67 1"9Wl'$4eGV,mx7 TU2_36M&c͎с%;<Ďy*uV=QA=_B90YSy Svf8!CE{&$:Fx Ҍ[aCI[611HY~MuT>}>2?n'UdWG)(Bx2X.g9Dl=w2u 9QHfP(8FWzYj2#&P+L̒9T˓M7M_6:3^h@gYQ$*}@q;<e:1u3.D4Zi<2{8gEEWn AzVOʁOSiW4>sb;Gǁw5@U…+ȴUFz@Cc3@Xi܎Ew>lP ̾X=;h07$m4~`ȭ_dK"O8t RV,jb&, I;ژ8ekֽ@ =nHؾkv^rٟ5D#M* ; ehvWUJM^y5H>23E$љ&m0 :X#U0 pHߗK4~Ԟ(R I>4N7GNʲ&a9*&d'1\YGlrb=`|.դeK$ sپ7UrwՁUɌJgNчV{f$"ȫق |{7 eN\][qDK~ Y< \F Cz4s|?q>1i.`0vCأi0p:643%3) *VI`!uˌ@8Qh:q7X0I i`1v|G9P5 4zГnT"2# *1Wqo_c em~m⊙ۚsfZHDz+ Oe)`"&0(A9gjgzzW~ PU !2Dq9+3751\\^H Hf NZ)& ߔ҅[ֿb<6Io4g[gSDy,KtI:Y_GB',xdPw_1rA(/!s8=x+5 {TYZѹ^r~@hpn][״gN贱AL)Y<ʠ1fUNA!8 r.3 zIxb{{p1kuS2k'1 [*O)1<`٧ оZBGF}SdamvBzWr6BeY2 ~M$ÆerJƵr?22஽ AEzxF"6znjPVOfOto9+Y7Oٙ%e%.5BW fv6H j~YtU'HhQ:Y&w̎ 1Ð?1U?oB[>)`ޞ/Y[yu晼.y`$oQyD9 C!$O9: @~o^)kKK.Nԥ[dͧı|gt aօ!m^,7ϫ[#ZSG. ô{qsCzJ\ZŢ/aS˶ j0o]•]ln(D'>`E`!v򈒄Y:O,74|1 起Y2"ͅP#-{bX3+^p Ij4EQ*QecPɚf0+?=q" Rmv;:pNj8[ ,Lm[!!je:,\9_1qO2%<ܾU:erJ)顄-2Z^dsapo[ XDo3ny&6)Uu3~RX%gf̶%<]H;̒/4fo!RW;<͵ANxs5pJ&Tq=ToӋɝdT\*s0O1[{ޑERd$_&M=?^C!D = ^K֮BK|S1 Oi4-xz:v5/>L5 XM@xNzn*m"t^%Rh 3*\ʬ Jk( â} l9%, [W VGg=l@12[$T(Δ?!i1,y[W?SŝKzITEr(T#T /|%16)T5A){]5Rtla53F@U5 x]F^j#yn= Lٍq>v-- -gvp^ÙEUZYe*"yL-I'۔6E*1V,clt^rꮨ5k躊3G-w~ٰW̘ *k&Rj/?HY[JgoB$)mpM%d]~ۍ: 6:?>mFcr]H zs{+iDn] ^ )iɢE{S33D"J򟨾(ؐîNNiVo>Oj= ]|fU.a5)qzOSU9 JUKqKTٕ؅Tao4I ],ײљĵXW9RA\<YE*;EAh-c|?o {!˗hW=%4k':h;!7`0Vc& az9nݡLk%/|ݨ=]= G04,6 7&ʎD."ۘS%+}JԱ@ *U a)t_?1v҃yZv؇9j`Y[,8s)^Әr\^.~I6ILa[gz3;nֈ HBu )—~d,v+No;n٫? Ɉ͇0_i1)qHxj 7Yb4P{d4ޞ \~UOAhԘrPYZwZ}![^]c:sWbVvfcȹh*39*m Qqm[D)ܬ)[I c1 _`M5$H:P/}CnJ=gγnRHC3.TQ#[eOs׿c}hut>3-:F"HaS]#pveD|ǴJ0~,ʊ|prK[R NNs"yk[2c+Mx-QqYBLAu>ZfＰ낞t>#NjJ?<=5bcrRX:tͰ&PNNa"uj,< T#׻1yh#Z@XZ1$YC1*\3nmO E(:Vd+7N*KĒVwft&fzv),m DVԶ%F+!-4IKK,cIK25[Q]5Bc SB4K11Nc:r p|S4\!#@ESųo$TTmX4?g$25hЋ:f 2fāTP1x@ ]]6}4 ˍiNڳmL@(C7T{1__7]X&Iyf8/9~c h].->imyXLU0 *!WmJti!Ôn[1Y zxBKoQČ7_Mj6-7[#g_,"w8.?97bm]oC"}C{UO|e@5^`tMh|V%kG./@>O9r܆s=6-:G]BsC*T#6@]*eegJ}rB4KЄ5DkܡyycUrӨo2@%qu=J\7&mφKN~/.?쀛6nGˆڔ i#bcPCe,1\O}(\P2FQ@]S0nRؒ"OzjdJs%K>޸WHƢ8Ya\^ec#U;z2waMʰJV&TkUQ'4 0u0J BJv8"V*oW^?^9Lm;^O8W"2:FDmVo%{<70;JӨnYx>牋+jg#ARՔJnoqnj"b  ̫:}7(ѮME&Uפo$PIEEֹ``Mm=# >I&h/TxDWh E|4ﵿ#7+Z.6Hy1(>.k a o:? 3eC|Uu) /g_+GcV]s-t=kX{gQ6l4Ь(837NT菫D9d07L[ 4JϏiVH.+l% R4`&15xN`ĭ?_xz5C '؂ ]ðQл{]L߻s:\&)Z'HM#Dޓi]`nO@^os9"+aA=}ހ3 jWUY47|M 3B""ݬyzRz'3P) }TjjI&$.V-RX#ݐhԐ8JWx9Zvr# UJ9~ j9"x|:ׁ22ڒZ! fxGn d}(q:5Di!J<^V!(Qj0CWb?%~0)|qEZџ}e]# j`]3 M(:bANbIGJA*bY.^L9Xotw`L^0:1#x1TBs%+F/ K)%Ei%'M&:e^۱CBA<0sK;KI"/ZƪwXNuWOkHO,x%Ϛ7}8 wrV}eM:0 զ8s!mCo ;c7kgQl}s߲ȺN.~FI* W22(kby 5I7o8"}+Y,KP LY D^̤"(r}լ\H_Mw=rqVdf[MK.z` {0mN#')҉VVr!~˜gd׆=anmo "NjtE*y, [g1 K!ǝ,v=Oʄ<ͷ֫c$ R1AGf7Jw'>f9USB_SS,ڔ󭣘:ds{cmJKdt 35vO/S$llM/I4ؕ17`dRGlw;ҔPfJj}ty8Q(K.)vq:̣|U!V.D-pZT! |!+ݕ)=!bR@LYW7xҋ%(7;r1랣8`PQb 6a$Y346-)N'ƃ@ӓ' یھmGplb5{AR}jaо~Su.[:殹{C0ذO]`rdDJ[;Ҭg(I"vcS3njϛWxV0cU%(K8d$eC3sW|C_Rf:鋄wp"iO \~ \ݚ}9\ݫ4C*B!}HƦ]>oN9bmSN6ٸmN?ą(y9 x|(?몊1]0bf2S{K=.ZK[3^bAɒ;`28 EAf7^C虄걦Ek-B^BT:rv^܁("CîL[9{9Lv'$ nJS~,?h9&p+VŸ)>Rm@Uo{X-8F~w@3L ,M~XvS) $~=Pw/T5e!Vԕ[ T5[lxLT s :d ɏeoui_v,vv_g58\F/3oD0٥%&bh881w rl^n^%;ϫWgf<9KiNFRDiY(l\I=Mdú%R+[༐nt@CPM%᪮늹 #2.y۱EsPfNFy0Vwyݵ?.ק\ww5 fk R5[j}ALe h s&!e`hagp<1-WBS\t2rO-' iuPyB(p_}ܬ Gh՟qcP$Ca]D F˵'{Ʋ5e`UQJM_,7KY'hUGԂGPu=4tϔRtQ[L9"(7Dev~cF*tԑӯt>ۍH*n?[Vo]ҹȍ`9(,Fkm)ȹ2=3zO>2Ĉm_61سij(877)V .+Nс[;F}'hpQpS5j%ӟ+evlEqh`jmG({XUƗ%7d3$zߠΎN=G"H5tRsGLgO_L@x-–{Ҡ*\XK52?c֜؄dBL<MaJ4؋b9rqYQ ׽%2)LT 3Wap(h.u}HB0BJu1yRKWg#8q6.SVhXubR5B]>(W).|ewJ`'Oe̩N0B'zNjh.qPxK_˓1 Y12Y띇.EZ r7f?Ir{{8X#UFdF6Uau #\$46x*kA|zZxfT:G79sz8`E5>a͛ iD0 g"f&ΰq ܨZy Dq8?[qRc[v8irdR>R^2a}. { G0R4@C,UנzӇ/"w@-jwg0)>HEuʡXql*l $zVa Bݬ?^2rN`6l:7It慛& nYQ刲wy'X]M\V9QH1_S8vi`J[jp9H4zy}'s쌻O?[Cſ$ow:D$jqXJlpIH|s퀐Rh^yb{D/Fc Mf|5*ԠAeIWƉ`~KAUfVaP@މOSߍBݜ}F/+[U)4"+9/r5zٔQ$).8w$s-@k&N:N]g;6x-6"dZ,{1Y9r[NdMh(s*h(upvʪGš;Xv?5*?&r~ЍԳ͊=JtL#U xgM-ۜ?}x]/GI"}r4ۙF1fx>?#zهHEmlՁ]_ M\tƕ/C["4hƢzCׂoL?! hX~nac\A/g_S2CeD(_e2;3*`hhv|>}8m<뉴t$7.r>#h/' wsO;i?Uxr?.NŇm/LX P|6kZ4gP0Rِ>PܡL eHKik\\jRr_{Iƣv/*W)}yy+e59=\  b{QvPpF[LUhj#` .>g'7׿JU}k.U*m!#v?oWq)Ӽ ^*EVJWSG|`/pr SxF>zfޓ[MN}'i=D uweIк@ yniA|xk" 0PJYΆeJ !Yy}K#Z[7c2ñl6jpZ?Hpʹonyrc"|oZxp,cl 7K qCQx+s!a7JN3@lIr)լiZ5M`AytbIJ~o}s'au!lEm P4[;He}ϐ: F4vKכF^ <)&'Ҥkzlf1ȷ^VX KL`M(mcEf"cTvCMˠxJ43L#kDEqaUY8/xC:JF}ѱ.+DEƜu ֡*1A+Ę& ]4k^G83%OLx.J },343 I0 6M!+\-4{Xq*u&Vn^P{= {=qO- vt끑Ua/S~Q)|ƪ?'ΨtpVؔJ(SWQ`b4"fyZŬ=2҄Xn:$y[jNJ?}J!3Ί7務'},zB.ʳMn3+|>R#B=!fNB[fW>5n>_R$>dag0At'|(7?>hڿZ7kUK2ww#QZg';-:Fט{-j $u;|^t34SI]pij/Ȍ$$Gh;O2e2I9M!$`5Ӧ:Lކq'Q ?h6dBhK8`\0pVyO1F冴2mM4P ̓30 jĥ.5WTS֯l$3zvttI;6 ". YN;g4>*<1PLLqQ#9\:r'ԗ%^ if:pPX\Zw֗Q0&1XSN6 }g[ZgO6rS>lDϩ!\'g7r)2f7ۭ@I%f' klz+Q!wjd)ZIu2/V4K%,b%\"$t#/>SHqʂyhz:<[JPA^*RNe{)',C"hX[cՖB7T2'E39K%ݿ| hpT}s`K>яw~rgtB[0!̛ӿX.>Ri9c6'0>(c\u6˄߱X)I@uZ `?v! @6U7Ыq^]9eu?Z*/&g}(V'J*Hi&^˚EۤI/RB梲(g(H>5㸑dsWDI/_aKYa0=(p8LCgkS Pj$4 z`9~yN,(<p(V_`)+, h7X~y^>GA&K$4MAˆjP{ pX&4^c{ɥ.#Id>^&FWx/+z4G:ۡw3 Wy_NȦV&62R؉礧_ (j6*j-CcqO9uBSbs|д@,Yyd+hOsïc+mՇϵr1P$(B8lXG;\M⺷fnNq.ii-d j;{ 8ζt|*`b b;++ 6Ǝ]m pbx8/\=+lAyӸYf԰s)6,N(@OO"\G KR.0ޖ$R㼎w @A4vdeS#R*i~@psƈ  u,m3r#[apJwI0lܱ7c~pDOfޥ4^eshf&勗q8#i$]rWGL P^1ժJyM}D(qUaܿ? HK!'Ssٶ5cS_혠jYb[c >Vߑ AexҖIf+e#̕k ~ӄ MPk(z;Q`7%L8ZtwQA=A&ft)ho^,i?h%ԁ :ZTP VȩCK,(e!wbKS] %SO ab1a;%5Tٌ`q&)cO`"uV?"0낊BGKH_IhIg2;^K n(μ$~U$xnoK1645j=VGt-I']aENP|-5 !S7sq3טXV6h+Y1F5"P5/m)R?g8d8:J.?IeMZ sqRa/=0ac'Џ[ibC .!x#`mk@{KW^mJaAN2`FDmqs(-&_y ar;17<BYeXW`6ovAݿHYfhK/nTD׋gOB]˘ $Eo}@fd,Nw ^\FZJ~,N16T\迺F-3 ޼agl-Efx4ޠ`8 B/}Ͻ:xa_U= }YFsd{݆j|f;~cxބ&#Y\xrˮ& 2,;+BaXv=?⧝ռVg@AaHd*u5u}Y]n8 %{h8p]Ԏ;<Ab0+ؑ|ˣi6 /&~'K?=)w?Q~aIB)0h*<,NY,AY~۪j6EؘƁĠ(h$ѹ$'=?1R(&H)sVmPGeӠׯdT=?Gٸo^mA+M[r `syJ ۺ_M>[*7/6u\V)*=`<&gpGˌx"Brye`1rUyK\`r:aNAgU5Sd46 0m,|z*AM'Î>Z3TЄ2rsWن#x 9qzH0kE($3pI^5 1rtyG;Շ5>6xyG xOߥ߆B[/+Џ=w2ip&fکy+czAQ=4ß#9`JId¹]#H8+b!s3(ߌ=5]#[yIfR? dM?,trN>  dfL"Q=؄SV9u%f4jh PTص4 Te\Im`"?  ,;g3_0;+,c\!Ow=zWy4XMpim^WϯnDQ&!dfYɰk!J%E pΧ0j-ܡ7=d4G,owo1@}zL#/GȅRI } R*,a1u|,xqT+ǃ u{ ,pJYJ8څO% Lq8KqU~Οs0:=FQw~wpdg!ۨ0NK|%fho(K_U/آ!RRV)ש]+)P,+Ҳ~g <ü.yOPj5l_Z*8Yllͦk[Ze[ fpUE`gEh#/FQЀ `w,Q2a83|21)MxF:é\U„m#{I jf9TziM!qJ9+5ў&Z$NlYTKM5Y+ @֫K6|Uasr'i]r^.W!3Jb< aݭ9@ewT/U3~SL* Rk{-? p;U# RH:aJg{#=|̔y\,#UH~q3(V[ <#߈ x;2^nes 쎃`oq-#BtxC@nӘiZhڜE>-7G V`IlMsSʡtVpB`hjzuM#e IE`^`\J4vC55G|m^^7w3j["1. d ݌᳤r32 kɏbx=譢L b I8Y^mT *kiܫ.k2.> i*PX4_>$ H|P}Jy .:fZךӥ"kYxDCs .qm#? ^(&˒r łU6+R7(W# 4LA2 `쉂 ]͗*9YKv]$K bڄ#K,*?f5BBRd=<7(79V.ufHNn]΂rxW JMޏIyEhplG_3F!,G'ڗ!>j> %wq]+)YGc Eid٤)hcutE0((+|m[xT *US7$[m gȪ7b_E,OR9Ɵ8 "` "cl:#`Z]};^2G=PEA,u94(JU:{XD>]/Jjh4W}O#Os72=(8~XOKӼ3۶oq T2G׬,:jx2H(f3{40j]q*i֨'BӏkOk{8w:N<&F%I)E"`Pspgޘ˟-L؟q>`uci;ˆKcgja}IB>Jh';@v$JX5/˞(\R~Y[{[yе d~hjs-*|U&x1:(f$XuCT_*JdjE^u ht/ @AL"SVh7 n[0k~;)Oz*/D̝oldSi䃫O=oJP>?yz$wE.G P|.o0h*&]0_i\ [S4 } hejk LpwJn瀲ssbme)MX۱$쌈R+Mڧ `/KKH<sSF[U/iul{3" n aoPk )d_+d266@D9;H1Q ۟Ш@dJx(jBi;VI(i:6ٖ`JU}3A&G&sxopu|i5`ڌPӅA(a~W*:\MtU@\)*+MUb&%z*Iy#%N>:d+:n>iAMZ*J}0(&W.Y^Hg$GI w8PY.ZU#kO$x;ӳ[#7ɧTd&zڤHDmg(TkTo b\$+ s Œ=lOÚfYJ#۟&AbxʰGΗU|yZٓW[v?:$}cgciL␉Mn=#wcɾ kJ½؎SX&p%Y""qku9TiJy J6u;Y)]L 2WñdCUT[q@k5/"_-dy‚ElvuD|S0?ɛ[Ńo1'(LmY<>cvf3*i(Θ}bRS"bg8΍LjgR!^gBEB)[9P"yTWE iZYvM:IM:# ֌v 7bvFaѼǍEⶸ|dy&9ΡSՀտ5tߵ&ڪ;;y֮x)$L?dwrR^&*乫p fgLQ9#p6Z DT ul5K SXy$iɗ*zGWe#x5#vJm@`X.^"FV%/$r&: &_+\,I~.PߔiևОЩa"tuDRCIuhaj]pWhH^^ɗ-7B?Qz-axG2>41 p Z?ǿK7*!M~9iP P;!qռ#y%OdL=Z8%wA5ZDJ/RRM '9 o ]1z-7c]i 6WW}5Qx(ޜlWzg陁+^>$Dgh\VHSnFԧnpC書N~XG%}R!Vl݃sIMM@WIa*wb/Bsއ@듐mǍѾp rE|6C?$Sy R2%nyKx XTmgq,ʂ4{Ab`v elꨀwUNN} e%X:8ao qi&0얀v%F^ؒEU[[g:^tJON05D%ja5w C幽6G둑Sl%x*1ܱs-L fZ,Seh)5W3E_kN*Ю58jso|N@$ߣzx/i<ԪxDF-403gZw/OHPm3Y:_*C}[H9+E5VzJ,<24GJ3غqJ@sU. l!_`{;/`X IX9G#jG uTHJ6d{qS)?>Q;.);٘Bqyѓ0ǬL  sEpvmu6*Ih,/kqW6V\FH=tk%8 5'fbOÌJ"յ#)Nj(M^e"SUMF>GN4ƣYnAXmDkh`PP#E~0 `x]s:YwW/ Ef{HUz|$&}Qrq@}кe;C OD|hܛ0ߨDsH7_2sI5+ _N/usI@=F> lj|ڦK+(Bc4co7}3ѡk䐼:R*]-(h)vt^,غ2ze0't{)02K6ș;7U:pvFJפV$'oӏRpibo(${!B3Մi sym.0xr .߯))BbyV!0-Ha-v0ǖ:t*lbN埝W[cYi/"OdGut䯣]G np@Tལ5VP%% tcw3m(Oͯ\hN̯I\ CMz]A"ކnn-^,0˂}5U~bHTX9ojdRfw`PK: lU%p Dj>=z`ܶd:<拒tEE@(?u̞ə9L/@h52\ J7uUU5 ~ fqIXR2VJ-nMsMS_69`[ѤՔ!T? E5L:ZvG#Q$w׽ayNSNU~js5SI~ɷʊT:0GHڢjZ0 [aNese>2I_Y7?|6Sf9o}w7}!Wqºq."=vaLZ*lifw(yۧ?)]{#C'NcUHܥ7շQhqАN9%dL@P/kA='hl_;iqT.ѢphE>1+EsOMALDzNDhЋg),zIZ_scgVwrů!/"PLPX>O2Az+<\3 ϢV`~ѳWgaqBM&>'y };7σKO|2~20ғ#_LHLTB5fSDU5AbM]e;@'JHdR UёAX9x)".Gr~)TigBSk{?S73gV鄚eFZ&nMbbUٿ"Y7kԞ7̒v0@?+ _1A0R_/VBWfc8؝l9gESby :Re{d-{,̗ +ψ'1V*1BZ#Lh/p7{ 5m[,F} Oy~χ`~+Js(R w*Eb`|P`ufP N`zwz#EΦa,>+EuCa3rll6T{-${WFp+`j_>V 4Ga>R`ݼe` BŒ/呬E`^"=]}ogN,>JH,\}vBx]">0'c + wVLXxُPEGtQ1q/4 < =Cj0޺FӚmSLtZt{9LÂ'`<`0xс ,r|A&(/+XW0v@HE+c>ӆOZ Q5ܾdGJwVS#ieAQg z *q4^U0Z5#\ MS0@\1ied}gOlQ҉8JuTeF}@7/Mu8t1E   (G `=Du7*> v"0@y+^V7DS[)3?vsZՔoʔ"v(h٢NLxi-A e$t)@ i!74.D#Qo_^w~M66I+W1:-,?efP4h,d3_r߿q[0Gr~@zq~I䱱x}{+a~rE`(so? 纱"Lw׌@aA?VZHiwgl9r[mzqbu]L"]Lü3ѯwلu#60 a:6 $?Oe/ Be=>@3S͔f3X S,V١GڨF)36K~䅔|'kKTN}5^[v%RO"JGu])Z<(5kJ$T\pC%З'h}3э(SS Gf64^f騒WA{~q-u]ߒ1~gf" ߹CiyA][ &۾UBUa 3/j3ω/5vә! I!B`Q~d5g 5 !7qQ:KǙ1 '}Nzz]Uj H1(N2<MG)O*^.Ը 5#̛/ƿW`ƺ/WVEBWcO ƐmTӃ:;4uP8mBh[7fmӚ%P ln%{Ŋ+nwΙwJ}Lg"BoyNXo$dmWykʅ=MMSi-G:[xcWS`'>=z 3& oOV6 Νr7'!îh B3o ik5ӘMr&Ca=C/mhGdߧ-FV[ͣ!dvbJ]%is8;P".!DLW{X!]w_A%@+cθ3_hA~d{]e|JlG\f&qLۜ viWFAWqՏ07~G^eSMjx&s?oiδw,bX4`DMR `Y#Pwvmծ_U,L SxisJ\b{ȪluH:LPX8;6bfea8k/"NJ}uJIG>>.FXjc։ήvKۺR1s#kv%x'8 r`W1jtkG>~@ Þ؊,&M \Uo; /%/LYSEw&>’/pq]fZsnOe$2md|`wݛjmLXvR k^ږ$4D'BmQBT)I0j ßgGso佟Gk@%p dܧxN4j5J/I1T.IыVbȀ]Ȇ>?-94^>݀T+Gi7@+#B%kuT)iuvn-XQh>~d%b)v.Fɍ7XC5:Ͽl_\\#"lw4I#DEgnt+/ޮd*EBtBټ9xuFQB:Y_,s .nrg&ЯQ@LZ*f1=ŦW^ʸٙ3oY4e׶c:NJ4c/G#qPRj<= !ہFWQ>!:489)R b7}S-Z# V Jm+k9ZUu`|ĚFpn|AmNq6t(D6>ʺYDbWtU0;{K.LlR!o0(ɒl3}T0v aȳ3 nY r6Wd_wA/0 P.K|P&>S*fy/VTРs&>]ܾg7>a#WBPFkܫf7 caIi iWpppإ BǾKȏWp4v 6nKf zs}dHQw73iJ߄^a IGIM,W c|8.SXO/z2id]uNi8hf<( |idF5.BJ8,̗S8s@x$aĦivې"g,>b?uӦB*k #b t`䔈*9@4>Bv FuC/TzM ۸loJtlNUSY"AMzg#fLtܹP@kݝL6(0W_1cS|[0DL7"WDWx7yFľޙ!.WĎQFə;cH֑bB1*m x~K^֡|Sᇛ"QY(XSȓZ-BnVҊ:$9wk&,GS2=ϝf0biݒ6iO9s{jɓ5 ^&a^Z&}vaOFOgڽGw3],Ӥ!]9h_ سH+H`]|.” vR8a4>W5H0` O]"|_2B92g $qO_ghީxLέ h'jvoBL雐68A}]k?] ܆z#!3Kqcxf?wsŤ!k @EmĔIBЃFiὴ` A/ŌZ'8R"2vW4 K%vP6ث@`()WrI}ԯ *J((kW(@ꏎ7Y˯ߓ9ӌ?\Rl-%-E:LW8{9ҙ(K^uмZR;d\@p)yqZn; խeVfʔ7q3kUbpԋvÂm~snwS8|xC6krrcmCAqp !ʼnIBv[uj’c`ey%  ;[gNlȧ'GNvW1IiWme(M!r:UVQO^Y]9Vݏ0rsS8'w!>:QGml&j xAD,NIQD8b7q2LÐrU2fBT D.!$U`910ݦ,Yڧʩ2V|A6jPuw# Urt<7 [Y\juoφ ? ,n?Nj*Dg[T J7Q/oYS}6./pR%fQq%A}wwk on=+^-dA_V|r^'n*ER]:W@׊eI[s5k fˠB\#0'Wѐ͹Q i͕2,Ltw1,᷄wipK.0] =k5J]@N9#5WhțW6j=N^ӣhٽȭBm)j`R:v+g'Zm1CcqPD)"E=\!]e;!_+z:N-1Kk׼KIw 0)1":'n/AciAǹ*`-jr?R0䫢O<|>(X3 h)}+-RxwYߪQr7Y=:P\k%֘D?o!v0|\\@ʽgY"*N@PD;F"!KJic68 XQch4<Ap"{3U|HF 98 [dY}hI˘V8AOt nJJ12pӗůgC=D.aK3BH-0ZtH#氅[Sȗ،c텳w 0݂x ~Di.3 uź>fuH0}Z\ݓ{u^K߱\)&s6q$JEW? 4{&,?}#'r$\V]7pc[ݫ Bm^O*d-a+v]:$^0=>],p)̾ .ӗrH $lJ!/W$,fPʹű. wItɨU?ۄZoTaKsK8n,PDb,i}n9Y\K-QZЎQH|\CF׷&ؓkQ!{eKQ(0LZXGmvJL3``'0M$כM|zȡuA*2`]"[zZzh~rWmqrЬޫkd%.&_ ,kEk@Ҭ N6&Ҿ1tč"āaJ_LWW>27OT>sڐ)D4֝sG I^5Mba}sJiۣ"NiOHk5 *]ҧ9<熺JeU-TzѬ|)JN>T0)0S}*=&`'Z[{xmŶ,^b Fg'az8RTKlf{r3)>jho’8*7W]hOT!@G.L/8o Zgٖ\5ayUk]hc M"Iݰ3)V̚2{5|3lFQ.q2>吳s5S!M4EFԺCiﬦY. ZjԷ-9'?Q&i(rfD^FĂ3/*K7dDb6VK 0R^)x Pc۞w'¾Ǐ=[\R$| qZfvhQj"r,.L> 44p?L8kk{s{kB}/Ƅ> r+2)AK"j̩F}w' M%h&O_8HR(B9O*^m(eѫqmD⪴w4DOW/Ҭn t ӄ VUJқ(VwRƧ_=c9Wa]Vp֨{}Qix ,WUFV;J!i&oSfFW8v^ۡyPjD'46Pƣ J!Ώ=Bʝ5,orDg-s |]84_s=Nj1ȊrʓeuEѭRmf7>W)iG<3cH%q0Lwt4J6Y]GYLyZHCz○nW=>se,@_&4Nx];^װҋTtFbr&-1X=﫳$ErWQ67wˏ.?@ވݲHFg^e*mLJ"=5j@2 B(-U{850s[j$8M֩,͖˷6YXh!)й(:-Ypc%Z+̴bVA(E@K! $[bo2t_ ^025sC-څFuAǿuo`(!osVDucg#WI\o|T)Lxkz^WCl{J侓y 庯[=MzYP hJj%ŧ.@{ZEg*jςo01VŨ^Tu&Ԇl X.n`*}n{#Gɂd~uکb bC.Rnci}taZ| >ќb;2' JiGOFb2OLH(Ƨ<[鷒3=` Owkچ#AuҨԆ؆>3l0ag"yT!~c1sp {&eQ? -&\`;Qc/:7+cQ#u0vx [`7=YqvWM~a+YbLd}#ũy3Hk/hcS̭۝hifer34/|! yzqa}Dgυ7# (P˚°ɍ, uPEvEtjdiH;-$}`ilĔEKqͱ{swl\lLժHR->@uC;܁i"20&øEԻ PwJvKd&qqWvR 99& qC>p"4g_J-9H%7t6 4Hm-zlF$*sӵJ[|aC,h7AJ# AٞDtU4M rmRz|l>KN#*i%uCP04[t,&Vnp9;(DsXW3#"NZ+kg$bд)EF jLAr:hT Znm0Za S}!Ӽtcc5*؈I2μ[0ΜM|L{n 뜽$CF<?rY/rn)vNCR9.uGV$4h#N 遛A=>*? s=C1*=Y1ɮ&*,\䦑5JQے.0u Ap ċoFvMZkkGջ'л,# }s)qĴR޹ 56Cx:a)m!*ly, 7&Z9^DS5nA8:oⷷ0wl]I=i{FC6A39.+=ֻn!St#-.E(5^%1A%F;$gB Z6_QtJ+ojKry'FRxiQ΃=V$ڦYbsD44- 2`iIWhOBfT~ğ귱10Jl Ay(9кrTѽ{ԋ}Y1]+ u@ۘ"k:-|ww TƌL-RSPXj?D:g&M(]ua0GOSy |$r-{M!:Ūua\q"OLW:/p+op2;FVq2Y 86OC#*o!Y=1`;@K+ c_N܎8&kZFKӄ<>| e v]: UPۉm,rF鸽)OnLuRS?SI)B K "iԬqэzXEZO' ^*5'jgh3!HIsn2 Mln6nQ&PR"rhٽК]AJbi#Bj$7߃v\ T87>@ ̃VnM"cSm ւn-R _v$Y9z(f+LoAj$yۆ-z^IITXQ5b0m Oڧa'r5{q9Sq &_rÇ'8N~E`Aa͡O`;PW^j'2wJ9Qcxɣ}dՌi4lg*3.*q} /qaQ~ꐬ\4V{wfGj"~ Ej1FiE]7HJJ$rك<6HdUƀruj\BKτ u hBPl,sᑘN?mFC+]FBAZzܕ ՍX^:(G%#P kctOy.*o\U&/[-SJ(i2s,(Q8h,9 :?@PS8IcG6N\5Ioʿ ӎ,W} :!KۍnYMN7b/8a%ihA()o%u&~iX9OyuǀZFނ0PKn FT ׭V17= ڰa`vf>|anƜ 8]5^VE!˗iM<+Ti$.QMbu-mвZ8|+; e8fټ~Q*L|PVn1N@:MN:S/oJ3tY*#Nuw[!rRH*u0+ʌ%*+Pr_Cqː)[0@k#q]C}%ᎍm``PҐT"U?)KJg&$gt`4c&>wؽ^NcR|4Gu6 Q:DwC ~CWmYF?=W<a?t= tXbM-vH:`h)dW`;;=TU&9D_# |'{_ Y z*NYpԊXia2*J !$yԯε!͈ 9XN!A:;737 X@ }L<.'} hҺ~6p=`}qErבI689_e:I#Ut H ;6}ulህY'n7Kf>G)p;Z,z2JnRR Ђ~+܎aZѽ@8Vr{JqM.)@y]smv& ks!ZTq?]VBg<9#ištK("KbZ֛]4x?MIij=b"0\4UˢLW"glTi?C># 3|M RnjZH8$o(V Lo_|gY;ddbFgqaL+rP`ItW}>iOUE:kq)%C?VE]V?p$u x9SU%N\imA4Na(0||x]ACOp<߆.LYp_h8 Te8(~̤uG` XoO3Jqt_NZ/e "3A#kEC~OPMx r=Sw8+I,h!KRl>ԏ2IB 16IJURHc#Q`9Ji9x SP0A&N6[)FUN$L xh&>? _L~d<ƌ\k/:3^߱Tj Ҽ>"+֜P?'Cr B^},c)2 0nD)O?v͒;ԟ>_u .J _Ht^ m^"f:,VVdz!Pz-rRۆ=X3ĻhϾ%ڥD?4dtBGC_C"q\yM#"]45Fr} yR` DM¢Ƿ k # pz1+3O7V԰[QzC}m0^H{TN:@v7`nD ̋P1ѼRSla's="; u!⾏eiB3ti%SW&'}p-=jhz>enIҘ.u21X}ЍT Qqq MیYgJeULEAB2o!<YL-ڑ òg+"_;3J8^YCP_q^˷?{rb{{9+e7(Gw.N¬[]FQ~`Eq> +9cN\^\]^M{ЌK',Ձ{[[A+Sd_t UwK?1%<Q8ꪦYiʶzq!wʙ EB\.`jq5kHGA6~FH%~;i/>D |gtņ/'dY*(y%wZ:_aqK V({>ji2̘1*kÓg~zJQTPEUzxwķc5 &^2h@Z?ljجlp2cx#+˂cx#pZUcT /F{0N-[UoEybւ%+]Ɣk>/GmajiR2CxCKUj?Wf^_)KĖFdA1I&Кe#Mזη7{Hn.ſCR&OAļ=gV]tjŽo[>|`Žtӟe` |VV.cDw69s*b2$KF&}xh>2[*+ŪN^~oJM(gƕxL&L8z 1_zLᘰ۲kTh0%^ ؽg$IZw~,ɚЩ21e=v<~3s7PW\={~NX0?( ;VC %q&Zlܢ_u(zu!ԅmPwNC(tc 1TMy}UrLQZ/)s ^p._Mdsf;H-U}@04W7aσˤE˲.>QOEXr L]N65!m eNGwhߋ3[I& 0O穀ՙu:\ rJ/Dʲψܸ"EOv@2[*"n0,a,}CVmd)h>U\! T_olBS+uNYݪ;8ԘtwﹷuiWn#D2Nat1H uc=z8|7oqS=Gt\mxc7EDm>zኜ'5 ք/=hl{(H~-6o`^i~u{~h7v9SZ4F7Qdzs_$Rh "C{ ;tZ 5QnpLB}+Am?'&}Ag[bǭ7]IG<}Jiu2Q!׿UQZ*Y>&L:۔7? *ɼC"zuJu{1e V%& $6Zt@".ᨁSsnϰ}kÌ7"{]c"ǭzюљVI"ѭ깤 /3g]H'043ROgtfn5\%H\Wt뎛%! !`a'*~#dz#eY ffyhH/teƣ6(a̟4^2%vm9&I m?[If ZAA?D̒ڥ|vgKsoknأBwaQaf<ȉ:$tK F(>0?w[БUK)+þddluyMk\7>P ڵ[rU/&Qoe_( u*zDb>zom!}xpn@a͍!܄xăi$3/;MdiAO֚O~cgWdןy~?]a4^>]a <}g@cp8kB05[}2\D1ؼAk0?A|( c?Q|k8ҧB8i<}دaב#_;iOh RjK$z-OntBs 0 0ɶ17_:uvWWw:t"RPd0.绔TU3.ߠP[ն.hVa]]lWZ~*J&+h⨵8U؞tY -+\>t[?ZTONK1peBU@?eh *<}KJGQ$@6Fk;$tms`[)#)<,rdUd fKinڇtP8?éG% BL/+1kRS_(uk=j$TK>mނoJrc ci. + %j 3×Y}6 hTAaYbjzݔ @|O `#כ8]/Қb*BebRB㪦%2۾7OVk;Vb牉2}oQ,8@=q?)4)Cꡦ0}]᎜uH'{\moQP g?vbذn\H`h)t-xdPFO!)`x"Jy(wI#xNoKM&. Csq~9}` Hٴcmj{) uf=ᇪk|  ^7[4WM <1dO@QNRKL\l7:0DӤMuTeCI)erUV֎ /__Yښjgaȭ{f+c%-gAc" !ӫ~KHS"!a= =_:&:C>8ڌ5Jq/Fylr $EK'+RO$bA )\L qӔ:/.NfHB#`?EIv= l}H^ɾ"- ZVbYֺ"xqXm^ѣ|m]lD?Fu"—"X:k0xT?@LV݌|Vv}$ 3DDK+?޵y!@, mb#.s=MuE$KE3>B*CJwn}zMPU_ 8dS%HEc_‡#elzSSIÏS3 a6rkx;koqp‘L'N۸]VC/1F{(LEJ'"Xm2tnDba&hk7ӕ!-)mna%Y۞|Fqxq0K[OPv~A&'.6=8t7ٓh w] ö:=Z#W Vh#UX"G\ԍ ([<wOv>2 &]9G S 3'P}9h ]7\R6˝TI]nP]Ln9i7%6T* :ֲ5SȤ'9:x p0Pa QqQ <` NZ!ĻL 8(<Cۼ; M & +"x#SaP:|(q YF3&yCA 8w:^{%r{tc_r#sQVWEi<,Cr6e|b..ιj8<<~FWLjepziR&giD\f"rA,jh{L. iE7<\_cP<)"_@jG|ȩ i-l97rc@`;$X#UbVk 7| #nV[UVgj!7+dzAy׋6C%BQWٲ6;|I&􊸼ewEy7F* d.YdVAk[>nT8*$3vo)][`,x+%KyiEApkwQ%P"Xx S%k>"=CKȠy1'o;,hw49 Ě.XV͗Ѻl??@E €1,Z2=3s8efp𫡸^;ּgK]jJ{@ QW5N5a &E IuFPI49Tk= Sb\W؝ɟjrd Ź De )׮IɦcEQ;H3r;pEЃ^c~51vk꼯ُ25GO/ⵖ~qr9*ys|GUXNwy 0N20zyaI%yE|wĀq]"L*7aY *=)q.8vwk 0P#>ʓ,}+@`di;4%kރS7.*iMrң!"8]6aߗ`^+O9ԆܢI> u|}TӒY XwγT֢ h-1MݩZbqattĦctw.Ah`1Vo\,,F3FwfI< aLʇ `ksM]W!"8ms9$YϬ8ؔg<pd@j3n]_`w#i#^[UO{Ż\_^MTHPn'7l!pŽcBэ u1(׀PWcxDa=̇Fot+:k 1Nu%+^K6И=}::o1fa#:͛vAW$e)^e`̋<3U4*Y=M,7qH`?1"TgG pS- } d)H? M\w|]EYdD>J m=GVINI|;}0G yDϻrn+SWIEc; {,V6Mzj~#sȒrZ`঎MHn.?ܚx( 5@[=( #JPTo0;Kޔ]꿁pExHق-!… [g:͞eY& l]38wJʆ2_g'Rũ N\,hybk;u9r_.؜lqa_ \|^$Ek}#J# Kog4*^/Qx+E DYC4j8pܨ]츂 2RJ&]bt[VG: aqF)c YI6#7mk۹`Ҏ4?l%mC<|d Zt3h b^Ai.C)ݶgkB/(|bp`Q;# xJ/:q[n웪liVRF67+ڒ$@tv6LZM,  Ư!C<yfRrq0^3#(RGGtfm2zxNWr;%-?6v)i3GuRjII> qF`ۡS 9̲ pZYPpz%%߶ݼ C0AԶgGq G;bpODHv@qT@66t/[Ǟܹ:^JndDxI+63lM,.ꩇw|ԷI%c-8+zJFYY?ޥCZNgK6>bGʀnpjZܭ" 0nh&u4ŤELLHR!?o'vovsP,g1c|IkLzb"b 'R܃ݔnBa-Tsc!lRY[wό RPBhz!Tr9C*a2}D-#Cixߞ*hG:zTɔQG*1oX$aVS}[(&[ǜwLiƜMnW,O/+%o\B2HfK~?`b?`AzG4u C@31ը8/Iuʒ99@US#\ȼ 2jM,tamGίdj׬ʜXKuj5DMsyW:@I 2Q-1J`nVgop$F/|? ~kj *W`iX6 yasIj[FPDDXhBsz Fq%<Yg,f%-T&KN)5OhWUƭ Bds'^H3zFya LQ(8[i*8Ղ"een ww,Y2]ΒfInaH?ɁM,vO:իvBv[G_Xrq RTWNv3Dpiq)b?PP@aXz _ÀC.O NQhZP}'Ou?|L.85u@ !<մP[0PcGE8VrE]֛+qXXVsGci1;SU$Xmy1>PȌ JZB8x؝CJ&}ա϶\wM Mus&J1Du6$X$z3rT =R#;$~V`hG/#OpA ٲyS"ioZp nɪ|vw,_7?ξ;*J>>k[~vML-䗷Zk|gp6H^aXFi:% ><1A[“+~{:z8`7PFhs~)OJ[ hwqI:Ik`y2M|[Ԑ >e78:Tp,)އ dE|=QWҀv3R]SX~[?!>/t' fOll53FD8gk [Ʌz<`4&i ؜2*L֌O |BRKpBse5P Rʏ4%nSͲCzwKN[MsJ`Cս%921}(EP'ܬ[A|8FOMfkTgUth^Ebx_h_0O8fZ zcHAxUCpktw1?K>_CmѰ}^"Yv%_:QT :)a4&F"ie{8k5 cÇ6юl%V[x!uбk4{䬭q;5),0OV6&@MݻGs M7d2Y7p@JÞaO\^n)~$~~57}Uc|@dDP9$Pg&bւéC]B'{tJd<KKjWuPQuwhL@ٓ7}zo| r~˔KzFaJ&{?ݞ0h;$~M/hH9z?ChCq_ 'YtD4("{Q]LlP9V!r='R # IAY1A:`@!^OP ?yz "V} Yc4On.GI+"ӉP_Sim<:>Fշ8m鐈Z`)\n-]+QgX/;fFwnYUuruEzW>,=4p,–v#6[Š,W ֻȭ |N8Y'0jzF/HW2818m^ ͫEQwمT 8|GQw21G63x=,-b5̻娳. lkCZ2 g UYCpbi)OC?Ff;@{E$вO)Lf6J("ajMrVCP7 o9̅4Nr%:B5ԬZ4|Yt<7 __W|Yk쑖Thl{`P+Td·xjSWWErw`2@$jmnZD#y*EHVϜQ8N3Vsk/Zs jrm|ͭ&_ &t2rnrxEA~['Ahk4 AB_Y+R+AdNQT"N-'vX_/bZfM $ne[~㷘Lde\Y ViMNMW_庢/{!qFJ֯=x)i`oՀ 7SB4:iv-92Tzn^k }v}.*ՔAEAY`j3 o ILXm_e޷ZzʣV=;g&0,A>4{XƬ21M"7!Rfp[Oǿ)*"q 8ϐ ›(_J\Hjt߻ua{ӭ1X:4"8կ;$(2|? -M֓g|cJ_E$~v>w(pwCSdm2H/Oc%iJRB- S=l?d/ )eeuc|O̧tW0'̣To&prƸ#O@BZYo[x} xh52z[cPg9Tϒ{>Pգxҫ6CۣGΣƫ8)NW<{k Dክ]-gu%ėUI&1*yqK,q\{(TR[eE>0KA Iޕ:.D z H(WMd3&7ƤrAN@' (=\ !<^U-BU;mri?tv?:T!JI͘.ź=mb\R5goy?OmRa bl扱blrd{0F -*!gcۤtIlk9~]>Ɨ\t?*/M&"F4edau>}kb#>/P6mtAunW|zeOߓK)1|HRrؾNkTWR c#c$?* 6l9O̥[ShiҤ0ǖ :8'Ѭ78I3ᤗ! iuHQiTc+":]%XI{UN6;2ʒFȨ܅t (8`CZ X4Fr9/N*߆ضv{@XbDǍ`S/_"{Nr~(iQNB(z>[z{-X3@p`Ws*ѣF $< 9* F2-PyyMKd6G:i\^d4Be$sQЀ>HfeS^]ti&JiRg>_ߝ!y5pBA%wa}nD"%jQ9 KIG߽p;vJƘ>K@D?ppMkr룍Kv|d+w% z7N#<*mc=Vk#b}=r!N50g};U'O\&?țhU3)t ovFH&87ɗǎ}8i/0KL*祫04X ]m\!Ƅp6wKxVl0-QqjJN=D UQ #sK7 Dg+-܍<ԐEeЊ\ӟi "cq,ys" 'hʍCJ6K'ӽ:fx BE]~kM IֱV]Pe}Y1\OOS`o `bcFy^|o'FtE7֎-3ҝ%`3~j4#wv˄PqAG3)Q #.R{M/F-۾aRj;"\̅Eܚ®ZS0#}=؝{D,(83C^ݕJE2!NBaìlcQs]amQIYԈHhL)It.g$2B#&j>*Rs}g΂ۨZIKB #9-C sKDi6p`Ԍ#]^QΏ'z3%PE\r-J!& Ŧcfi+mUU/_E.yiCvTJąV"0)y3Vm4#еT3ΝD/ [WFH!ό^ I7boZ5TO(ͫIYayMpaWGvOZNXNXb\$&S>K_6NOs}2?;\GШAQOeZ̿ky)uHvŐ5`#NO"DF[&৲7PD>y 1ܯ32yTy""^3}rcVziu2]E[/\p${%LP;Re'$Seei~K\8++^Nʺ"enZ@)dks ݰit,-xjGk/kíۂK`'N_@ f7EEU%X&.܎k  'P'3- y)BCb.[;fXNyDS 6j/IԽ rؗHߞM*`+V2lhǂoBJI1sωVO-/u$$z9&;[K41l*G\u&b8i,C K_sLMm=nhDȎne0!Tui; $f%l kdmZxL>7kmwL*]3o{طp3`8 ?cvm?@o&C#Cտд~90b}EƧz,j*%O$[+q>픂Ѽ Z]l =CxnPDHP 01KSuEНKŁ"Y1, }.H5a1"|o XrQ[#8OmÎ' 1 >? ËS+ jh+(E*#X@efLU-;buXo [MiSaaXk:ʻ&T39YRC {2~xA5A)|Eg*;">1f%xUadoV T(FQ8݆YtzQGH7h2`F;I#,R)֑K;؏z<:rg8 +!i d8k#ɾ HrY$<<#nyV>!f" |l3&A/Hd.|CAtc+eT(ZV͍էtȖwiq)ԗ]A L=[8%y*qxQ!~pmq;hx4uBKrsv8P(GG"w'x7**->Y@qqk`x6y7: ~ ]L״,l4'O۾.&hHzNf&)%q,qD޷5>w_ ӋgPF'C?- rN!f[KHKmhn6.\֜'Д:; 2Qӹ~O<k{T&lh/\o6GpZvrRjyx:L|Q0D"x8? 4]7~A<1+ۏVay7D ˞4^B,ΑlSCsVwAH|H illFE?9n75! ۑ2SOVuf]9є)V/".Ȅ(.. 7Xzɲ>} w[Β'PSnԳ{XfWxZ}6g n_a9^ '~eP?].\C2Wpsj6b~fĬWeY6E?pH~GgYzP7xvT/.s4F'.̿m$rGK-`tgA3CIȳ'ZbgiTZ:S> <l>5UO}|TJN6nÆzlIV?rn8?b=@x6%ߴ|R.7Wk [SVww\A" R4Φ@bJ/;0~S6cKR UǠ(]ڑ?+$m;~[fW l|]24U`32r@ 񒱕Z!_ri~Bfٙ=\Ә!?pyV0ÍpӌzGPKYvᏄ즩Pc~6lHbsRS$Fkp~ؓTO Z\F: {1"pcjk*:8WÖ#rQbbpлht=] ] i!ٲְ6!;6Œ+keXCN1(>,!9~i%`y2AX@6J8bTcfpA'R|_},i^fkH,O/2 7hXSbM- ,s.X7HGFa$Ge;Ɍ0/GJ,0m}J?f\X2O7#b-㮵X4~vϕ&G"F=eP5Q1'V40#Fݳ )ᮑ_< ҭ[X Ϥv5Y>/=?1*B e}䪦IҘ&A i!Kqkaf&B~:郜o(jddy*odQZT=911">ҹOqb%h{K Ƭ_,lAohGlҜc8w{cXADn?\/+51x܈`֜QX.;>w(H]o7J(z] !6/q N%I-ܾS U73l?ۊ!2j\9m;lTɟu 0d0o!^/|%jtC#^g\VL͌XعB qK/wY߀#ƺfua\flnd4۩>%e"u 5sXh~Ro.م?@OuVWɤT Vns[)Dڌ^&ޠBx>\qZe%7RӬZr퓘CK׿"I b'A^@N6 qkjfI@,ǩ-0IlMWYԀ6A$CXN?\l#R"O$c~LhOm1 tRts?CM~LN2)TROJo3ȤݺY@w=ɬ-UYǓr#~H3v1H?|39uBH\nҥa9种\ܑT5gH嶱-s"JH{lA]qkۋ39Rǎ8G[+Sa 5Xxr.Y= LUk}zHMpڴt9}x7完i6 zmqCX-dc3jNa:IOb&y#8&)"\M 荊%r@̟|zW[fi9'qDG yCXJ+Ȣ+i1 gV,2iXqwhCJf\ѱ T̐mft33-x9|P-NIPq(evl>D4n\F .*~IA"h?^m>:76pv"Mf67[WoU^=<])F|GEUܧ|́ywkn2kP|zZ5MXXR2،|shj|WސKDLigv4ԃpsKo¹a8[57oMVqt"@ǃC)X; Y#8gh2j`x.(NR-aj>։G0oΊn#Hk/9 waW_R)֓a|a&0^_<E=s"@/ep|KQHEhVe)[H(eӭ<ꏄ@^M8"V'[*.rK\e}v ҈atFg (ϲE@blY0CAm>=ОLE]Z dT.Oq IϷY.L o^iv79ˆk«1J%\K=}C]>g k8wI9"$otƓ.3ܽJ]fЪKЮh:3χ>ǾLC  hBbdF;pʤ4[dP=쳣nRF'5-9Y`S=|l/K $i6mK2/1!ϙڮGgA,/MMBP9]PQLE rC:z竏jW̝byi^⌺Sr ˙=iT^Fl,F:xꘂW+VEdInFH+?+PqAfNJ47OeKJP>p+_&_o9]IZ 9?Ü冥\vąe%6iS.m*7$K;XfRyjPa͛mp HbNA"3m:- iK;%=WY?~p';xg7y{qy0GE*&*^!`j6us#yѲ`{>y KO8n`;IQ8n'%nAAk5#b*y_q.pckޕn;4X %xl[pZlY ,GKst_ .0G$V0"&$b Y귩i0l7'D_#I:s,E2RUpïkޞ&zWKqP`μ"Y M󶔢M\WcLWղ ?VQK ׳+e]:HEh~tM"9eriܨQjpidNiK:VBs?7UiRѐ 1uqqLdǎ-ikWIVC9͊u8u:Fj Fۀ\Tl~7Z6Xiҙj\q슂jPZjlz>|Prhak"l8U]%7S(zQޯX{,uV59&HW="+slFuv;=Y\jguo~䓛1;8ˆ?O2c{׵'u(aLRԨ 49@#;{eb1fկkwԻS̾~/}d˞'z Rj["$vPsVCc7J\aC" bjφ>Iڙe8Jǔ)G'O&j+t^NX qL# ._w7m'"Uj񥙻J | '>8fɵ-D$z.s5q8b:o[ K&rL YnЂW܋4eaJeAC/`7QhYK4WP*!rR0Y8 mͬE;RCx{*-\o-B?| z򻢅 z 3{~wtZ!iBy3; ( `>hzQ0:^4T z݀z.Sݙrfx,dW89o&|ً}ZY+fJ#ɩA@v[ |.4D-[?*l4D^%:^G2{,.ɠ 7ܴ47:ԕa"XMf:c/~TF^[8C ꕨ'\NV3mANGwAqʡq`d.N{B<vz@G;  ƈvn1*#F"NNWXCƶ)i(#ɩ}LĈ6뉊M$TmrFMc^BхG=NoxZS0ƛXL`QȄ@9-"8"i#ӗ$<.eOz_ψ@瑾PoĨXGEdQ\} >.2q,,VfrTvL{[ P)RH}þ[jI1 jA@hwP.z%5o 96 J~/Bm\W}p]j&@/?R_^z{'EOI1Sη]봚:MVQY`X$ռLӤk瑧MtB*L6U}ÀS3l43x9 yKբ`YEl>SO)W[|+-.mc}P\ BPgL-cR;{4SX=0s[u:b5JN誩6:Wrɓx&3e5$b uF/:V@:JBHF?zX$OAG`Ӵ4UJ}W fXXs !>`3u2`evj>۹eoTtFZh-܄'Iub,-OM&JgŝgqH4UҟG99"."@ٺQ~t1 ;؄3Π "E,81XJ@ؿ(9Q?f$nG"&98*\}0"\V6dj҇>)(h 0)LN8Ǚ84nS0 u2&r}|h%{E|v̇1A9,*آ]i&0ǫ0į- 1YJm剝{?W6 lm1'ӧ~J $\~кw{Vb[uu, 'Fٻ{F(TVcGLAX.B|NH›p7'e(]Li*\5>p| [f7ݨ5MKKJkƓc"aM jS]jZX)77+q;CQ+pzXh]$,NRiXdA{Vٓ8#ʇdgqߣl2t$;M,h3\V. N& +|@xV:)8Ce,Yۛgy,<DQDU^-K%ES4ڔAѾպK4b1 WmFC}oB]Ũ.[xz: n$F2%3"O 1 t|k^TPdN_$4(,!Kc_OT$b*U_ .DJT |E-Q, .̰F+| Qjsԥ8։5 $:&7=gp }'[ښ3 -R4lRMDCX2)_z9 V?mG~)Nuo6GfNs\/Ow _bKLyboC6l j5âK3zoM0A1n,5u|➲ڳ9NE*2wt_I2Ciz2yyK"e7R t~p2t[\E^}Qt]qkϽy{gY>p!YU$Xz ˅0Tnh }$"[(?Z1uCb#̼" s =[zZ0҄/8ݼQmξm4*53h')C6pDc >y"21P'I321bKBc?Qe0K\Zӎ#L%(9JܫS97]O:E lYe#1 c8-?^wRO~k@t+'Ht;΂p`AqXuѹj2-Y "h0e@[HR)W$-ҰV |))bBM׋`-[ܜ?rayg#b};U.F:WHR?*Bui\'`IǩBh=BG9bӺTa  jkKٔi2|O&K<Бb1`?u%a3n8R5z f.N%|;kJ`̠>.^_iY̎jljm1-,w[m] KIi׍/3I e<7uwJt#qW/J;@,^_&@6Y}<=>ZV^fQpxOyꏂN]GMV3)C<ԁczoRG%X}P5Wg8T$.Wf?PM̿v)>*68ŏudgQaօx{mp)Jh!֑TDRnX:ў_^eϲ( @7lI}=Htdp:j7XR^'AY=Zsb6_nx4E+"/Ҧٓ$ABt;q|leŋc/"A)Q8FCgƕ9тuL5˚Cna]@we6Ў E[%A2ɭWa]RPPdg_%FH @ok/m*48ݝ 'rXQf s\%fO+pGor ~dXM}1(7M/STw=?O^Z@D062}Lp{2be=)٧,޾ q#N4Dй8lz]lr2`g(g|im !O,E|l~a- `W%o۵rL]vjG@(p SYETg=[QHp?UQio@&%gNTIut@~;;R_>%AӒՋ1yp_%rOcvsꇲ{dQ|0eb]_1df=P7(n"t:A6C2Ϭ҂k;Bm|>3r+N8e(MϐΏAQI0`5qڑgŝ rıUt]׾b$r V۬;:eQccQ*!݄Nj1́ #OD(&j+-L-rT| h߂:Lc 7I94_m" qb֊]ŹxQOJw$/Wp=򲻜vpЦd2$s? :E6#o[6RI}z8ѻ;>' ga<ƭ֘g˔~Z X9n12z!f9"kDH7L9*^c 27$3@z^X42S $lY<%ZBЯw1g(#͕KV)*V(`Xo;t]״ ŴExދ~e~.dHws8J/:H WԲsҨ,< cI\R9NLQ]rw|GS$8,<$sD߆*(ȮXn(!fdR.M-Gxy;QBڳ1F;smyl>Hd=KJaKcCԚa^G|;…޹|)W A]NE1d<(%Y$"!k/+U:ON2^*Myt"5F&]tZ2G/)][hA_^ΑJ^]zy]1_oG @"¹.qF[vF}qI'LK.sZHk`F02 g)fiq]mT>sT z^AdD\_(m´iG~)k#jpagK85f7#tp+),1/A4E)>A6BY쪋 8|a ڱ؏ bcPݳ<b `䣨vǀ;XVto,E6fH̏ P I4a=%jnj#-WL/-> rz؟r*-960 פ[}}9woECޡ،3#=GYwߠY6Uc|!uu1L6kp|Px~Y^.G]!2 w^hҞ 4-h:sBX ͡8?neFmZWu1Au1 wՇR&h;,d%3K ̦{Ofr 4\KFUM`{gb9έ}, _DCk'>R4Zy}Ğb(䞄w]o`$>ɱ*/T = =uqk5rM"O8yQB eb* RTpyrTh`—\XH Ez-lb[VrDZrTzQ[ATAaey~HVI=oGxJd9v!+$LǧDcy5`}b VgΑU| oO.6 d[@ Sk2^C̆%Xp_6x(Tur]SNSI}9Stdr3 Gh+E y?@3*:}6RR17FMElguÝXD:RPWo}"dPvHic ް,^ #2@UN1? ^|t#&P y)1oo?Isd)L8IqלڢTerXa悫dV bR8-  >LalA P@?Fi A{//uζ\<&Gbv %ń7h4[/=[!M9}B-̑g?BS6g33[Q_ WŦѝj 9ngyy䷉Og\x`E}ǘ#;~ʷ8t! :Jϳ!J)\FN6E]a-:}bK$6giFjG\Pce4aUAmj[-]&_(GA4LLQ3T.Xsjff73kaۀ"g}^LL-S8@]//}\i'Yb)WrQmsYjge؋7#$P±.U 7ex7+?SWOMI2qy .@{C Q}wK $?_`|g?gb3;e'\PҞzά/ G*QÔRƍvL)a[22>QO I.Iq59K#,'Whyiz5:RBmGAE0[{Mw&4j3n,u5 MWn}YVjIv]}. ͔HU 6$vm0^LְohY74q3 8ceC I K \^A ^h<fctASm 8&p{ÏWA wAXƔ*#ZX5F8\S[%_R^%K.AԤZi:kQ2$<;ڭ78jgi$Mqٌ.(j>m4/һ/ڲ1޻k1{rQFuoYGY a8ZlAW!6KGM&ݗj 6K[VVEt?ww!OͬfW.)뱍\X3KQDT%jS/G,eid4;7ƴye&*jTM_\'lu;NQf}Z )u;ic\1 븦)f5d 7脵yDu, 6yyC- ;TtR[c) <# zE_>sc۞B ‡Kx7s'|8)',1ыZJ|5u7aDI-QJ-T@F@FpT`stmxdDTW!ñehl]YCG?.CoN՝tI|5"bOSO>9/ Ymc5 FʔĆ`]zX;uytJ|sA]=y[UFzTLQ"V" l/ײ|v.[&4)~(nP<N9/ 3{h5pEAΛOkT`T$t,NTmJ}gB=f"ptѪZwfP1?^-(>g=EOV&48JHd@/W@r-Xdн.Z>Fb YVPhCT)[>NBh֦7]rƒvޫrȼ6! f9tF"G*<ɯ`/.st* V{BhwͺȆ olɛJkxEhBA4w]H(d"Z1|h1:kppUƷ";hlf-7"ZVVуT:CM'z6=IhC@Wk퓻-5N.NjHb % F4f֮y.+ ="LQGTR<|b2xD;34'. P D&o8 6DТJ=MV;&<' ILa'P6l^mv3ϼ"jJdoZMYfz"y_9B7kE-Wej>+d#jF'\  vrʺC0=zRSX"RJ=Jl%{U#6s<~g/j@`g{/OZJA~ z%6Jn/{sc `wCP{^06nm3$Fəܺd$!^_Ra?fvMG+:Tλ_ " k}R:xS|Y1ԮEOFmXߴ&<5D4QPŖ)cx.6j `!!3 7/MEO mK"4&A^&?Uބiᔜ6Xp% FsS'0k(M+(*4jg5 a/1 [{Q(,0KB6dTv$;VH3,\+r-cufelM0YkrX/S Hf*a1d]#O?ZL:bB94q%ÀY! '@b_#02ˁgZ~ΦM.^ GNbC4M$iA঻BYs׹,clQEM<-./.XH(WbcB̀z;f v/ ښ=A9۬"%E` .U%4j%j`aXpReդ d#i@[gIEAU#,\{$d`M|%ѤTj7gwf1֑^?Iuz%TB%HП< Dh KVt /f›6oior/LCm ;n-uK\/ aG2a捿;*erL! f[zjk';MZ\%0ܱ ;{¶FP, u]6%RCGKʓ*0%st#Ry;!XCok@q-/DJ\KU/uV5 d9[ѴL"MO*(j4aZG 3b^d#Ҿټ xh=h4W ]TяG]!:/Mf1 3M>}KQ (r ~&Ѣ)RZO${7 &?dVTO.[;dwjlBgpNP- MJ-CgtZHuDqW$5=2 iB-;^ELNw̑NÓ&En!,k uK |5W*yt>W Fq* !mynB#R̢,4Z^ *%E9o=)>g*#0q{ȝ5jth>x]SD7uڷLͿG_>3;!N p NdE(-܋lvQܭg!4L\lOኢ= í2c_mjTq~3κ> ܿBr$qUok+c^H]Ƅ`*C mb_oQq`1ǪyҶ!g"35Iw*Lt6oGQC ^-5E7_n/ 䖸P!/-_}畭0ӆ^ arfӋ9ǫۦ%>0j:+[%y(xf?>Yw߻a4(Qtg f|xG5là`Cؓ} b5Vı6m{n/WRh2iQ1g˅|j׬U='w,bIuEJvEotJI{޻i*+O+Џp6XQ/`^60}#}{ SBq[ta78Iec9[iSi%ҮIi=2})r&]o)XdBz@s%B~Ô zomDA$ٳ9)otVww~mC\.^:p'D4nWlx6#UѾLEef]}'va &f`.]ڰʴS68%<88FO d{Q*mcr 2f_;ߊVK&Oj#%XKhZ &T'+3X0}AHɀ-\dfZ@X'"Xwq~{ݾ}{[~ Ɂe.۬EbZ[/.E?ųCK:aFK)^PHo$J[k]ҝ{ʿJ I^!?eTcc(,/:=3Lxs1rn-mR0`''."|滑:kf(w>sHiMևc9?y@kx#ѥ-A¤X >v=T틗ˇaBă2='OyZ!Y&12ʴӫV$Q"+fb!5w4IoXM .d[L:G3z+~k7VvmЃylj /|[aX \Aj4z7ڢx;dȭZL'ݫ;E܌QNIda(VK+q(uUQa.ZCB$^:JL*\o!18ҪzB:z|('em!rJ-{Zڜ7MhƁ 0]h;ee~k]r(81 >ry{쏀OSO6GMt5M|Hx^#E Q+5@#ۺinexu!' )1@% ҋ\CgxJdc0xP2{&ks+L8#Jߚװw}eUQF΢r`+wOaD8#nNc憎s+ "Sjoc[rSdA&LiTLxǞ֞z !X(=%# c} 0ӑo\_O7~6pܜIQf;ꦨX~G!\L7asr߳=uH۾hp('p+" 9=?KLP1GLp9G=gQs+C'v. áHԈ{Y3hٝ \ o 5CBqnJP.$Ϊw{JZU=lxa u tk;Z#nᤞUBN+SC +dac9mw/xkn cCB&yVoc=V?{sZGLUq}VPHZ} NnV@}2,us*:)&AYFڪ1sXGUb&dI|5/:y&!˞zԉ$;a<#8OܼA[Q;IhIĨwXv%u7 )tgM2^xC ['1]S #QIԜ UO~leI)Tv*׏g8䢨Jjbg"PBU9 8yI 0bCr?;%4D%)eXz^=|Ñ)&Z@it. 4'wZq4n[6,ߋ6SfGڱBBi~BbZξLm 7>^q)} KT0wc5{:;B-įeqV4v0RUyDV7B8nnUlQ(=_厏WeyeR'y E5k5"?Tz_{8$sC "UZc b' 1K;7p!I -I:ɢ-(6[evF]&/&2|o;a0h׳"bbBYq$٩ˎVE/M^\ǶHy1-8hi\L×SY&WoG@2ebek{|b2@D *<.t0FA]]X^ Ӳ];e*wB/kn6hNlRA,莁-Lv%S +><2tڢ)WtQ!(#.&=xWIT=]H$A0IBFuk׀lze3i=;:3)bL`O?Fd)B~Ak@icD ZΡzy[+S V2S&dBEE?EIh0Ю snh9v XE9knӦo=A[(B Ka/'\;h'\V'.9?9d}X'"R<`1͘%Z-L1ŌڶmԂ%{)Fl.NhakPÎ-s:#Js_U־X(ƭH,@ѕq=)?/x(оB5jaH80;'d.4%:msZgmu)~zĐEː@ „s} t/_ӱ8h fW~Sd F_8sv}y,9ffp`*9t +Tv"&k'91uhU>߬BtD,O~ G}$7kD;AZ`Y}Ac<+K?O%j"uU+JqZqNIPPĜٷ?",?KLACWQͥFCt3ΝC䓌e":HOTVP/V!f^0 +}`^YHG%~9+ucK64q.ESQ k(F|%MwI#ER#t.RR8B14bu.f8IiGëZGbD]I | {)#B*l}ZĊ4 i`_H}A#~Ձݐ†a'ea-`4AUpP=ı,ڮn?P{6@:tX,m@P67@]dZDefAd)7Rz\Ҳ6#?UJS'U5W٭3S!dZ5o(o@})iSz"#P7` =2[x3}jdYrqVxkDl ۽'1*jridV˖߭V}K4[˟5 &Xțy o!Jw%_1XW,.טz1)`]e8S!#oެzi./"J<=X8Z V6c7 ،seB,ϬEsQ$e5Ux-+HOã ovJ(~u؟#uHJQhoЎd$ VE\%G߇wB#4#f6^vqM Z 5K/Mgc[""l"v梺ߖ92})n܌3ߡR:}YJ/s=?P%!T<4I~itʖx:3*p vpV3a# `Ֆk[aІ 9)ry&J<)dSxeO^02KUƒ~ Q' .ك!3Ŏ+!qOQl]ʒŖh`OuYP{*Ft ށO;?G U0%խZ1X1*:3OØC:7֓^}V/K/"8>p$NQ5̺I V3mEEWu*1!+(dAcp"3H"镯T.ch(/e(+-p}zEt4r >h8+[i_lޭ't M sב{ vP/Or-2FXgI4m=C$ٵN^mD3_ fC;Ax{ v Rg~k5,jި)d*<k{vaRl![ nÜ8z[yɷ8ʧ3^^Ov>> ie݈ bUbHJBL` ^8XP}}sLȰuY:*?[:gwWW$`q2$CE16Sӥ{oj7>;?(u"\eu~JХ} `Uμsѡ`]x Q|k8"Y/O}L)=Щ(b%اWS,7$ӖMs>gܓCR9~8yIe5/N8 tk)#ffD@G"G%CJ=BKE0$wc(ĥ-W$ɍRE$feD:ju d'ϫnp3r57܈MoHb*pf,M fڛ()% W.ױn*?! ;ςy˝ 5Gw|wsŐ)RB/QidWL̻>M?1WiSFک? V~pw/?)I10S)(=/.랦ETLyJ=.s:k`U Tds^U2-Xil͐E, W¿c'5T}Qs;W@#w힎ĺCi @$ҫZ϶ߺ& yЛX\.^RCg YB]j&IN`qQİupJ艶z)y? IA2Tv0BMfҴgÿܪdkwwT&7i|Y!CԳNַI*- 8pƇn$tW[)\ -`(=3tp #(p撰F#җP_pMbWeiPR^<h`p(#.F[ \^ _F!fuۊm"U5ORjv20РϿ^C@Y®`nx_ TX$ <>XogmT6>F;J e\$hnKyv/-⧋DQ{^7M<0 (+1sAh~P0"5 p B6OzTT>l*6M^nY)1;)'7*%y$OlI޹QRQzLȥ!藏vyVj6u Pap<^ GA . X[m|4:xmx;Y~B oJ](15o`YR FAPjȔ"V"mz]f|$_FU2Q2P, 4WfEIdVFT|<04p;9ƯkL]C}֏w"g lN/Õ |mˑ/ہy{7CFA_Ma#xZ^Z),W`89*L caWj!2 !h({~:)F0u3w{V~vl>4=&Ti~A >LnL^Y6Q=zaΘ{v?ʸCT q*Nk.7307 )e"tsܤAzf8e{P#N^ I&M J;]oAW҅ͫLTQ?3OSRa6.t%!g10օ; {A0MnfLal3Ĭ#+graWǶ)V0GTFA $KWfxXC;)V)ĺ.d 2ZY qc< V?[}-pj޹̼k;@՛~^Vo+\ E} _s/a}DK@}hA} ~~nXO@ kEꌗ&[~K(?ݟg?#cqq|IhlSR 5:ޛ ]4$]*w|[ĈgkvhP*U<"Ne<+T?TfUN²1e.*U-Ẁj?e,C.,9f~-Y b*2RRBq򵬇{{Q2c{ۅUhKY[JO9Zibm^cJ!l ϒޟ85.`F@ ;ZW$ NW.)@ lR 7a@4AVKj#P_ =Ңr(ر߳,jwϽQ4^Ļ{m(6c뚨0 L~nT Tssrzd]9{,bY Yo/Ʒ \ʍlT 6hc"RZ=rʯ(40*`cxX 3J~*oEFM'5sWoƞ+cv(6+6BP\N\S 8{ Z`Zd޺ŵi!+z=X f7#Ccfk9>Hɻ\)ߌPE>߯a%PăFNf\c([?F3L!g#-*E5N՜{tKuVv߉):}h/6\m{d!>IK ) Pʤz򘰤%kB{bu XD|XnvH3%?:\K*% 4 K21~QaiEokM"GN%]sWCCp:۵:uʻ$0R~Gl<4RhC|O=9g\:&gk ?T G){ţٸG7bՁ)IwL-_a&{Ϳ͗&:2. |bJתcn*R1KQ`j`-$֊寎S @BaU _םUKcfv+zPևl8GFEe0>o/k<}2wׯ6v/ϖ;^m{z}c=I` ̴S k^ &LJD)bw)U h(p *Ik^b@\Wdr")k^ x.qNIJ1nϳx};!6T+048m7vz(ǤTMDWT9!h.~% kc#kZٷun-gp~ C0 SbŲ9Νhq| 7Z(:XS^y+ۚBoo[cVґ)A@],b_~X(J|AEv_wZݱ( .=Dɼ!{^T41i,U!H* Y:n,!뛊u E}ڲ*^;NbwG4 Rww&h}CRc* E tV1R/~S~>J~4b2zxPts9tˉߦm =,eT4#!X(\JN \$;fY`ij|FA M׬J[V0q )3~%]S$0jn`Eky>U;4]a`&[+x#3;Vg.H4}9ȪbʦS$#H>#M0wO)VBBS܈ wp|!/H'.LP@<(40OD|vh5*k[fUV!Vcuʄ4bjՖ3"W[ChқQ'-]m+NT?<[?w%v]SV=P䧷}A#ẑx ~(b6.(uV 煴4~謼t' m$-NLt*GAj(?C7n]f<[,xוZGO`<TC\^GV2 Cg{~ 4 oDk+N UP T1 ة#[j-}vp' vKL(4{͛qϛ"g=HpZ?.0p`bVh%$N)G *|\Ch}b ɗH,L {/.l$&u)u^hK; q7KbM2 BYW! @WN a_Կְ ;%V_g^E@7ݷGp MH\;0F]k?\/ǜ?>˯c]y[}{(dwLW{ZN!ƆA }BR(F'>9xk ㄲLӒh]ڴ+Bsc6G&N+rSHiBݽmK$ ]nK h{0>F? Hv!minj|Fl\q6q!wE7 fk_t/ Y$zِ:6c/B&*'; vTv {ŞU91-.j<\sc||d {K424ޗxVupsTMf%`v`itN,{ڜj.GuVv1!^B$X 6ۄt=w>#eFp3ƪ; k@{?Cwm큰n"wZrN~ *ihC005hرI$fﯙa|{'UCRWDyk:[ $C x|F>wSY9GHNfz,gm(Q9!08z% Zsr :kY('_RD '`a]?F,|$oO)5_ٞ% T>˨97}&=< h 0a Mxd"sIQ$A@EJ^< o0; {"m4 QErAٵUSK\-j=_tՈ疫IBw$9X8!@ԎZme?A;2dqiI+3QX(ه/.K(M `{쐄eTffC'0F:?C- ^bF1NUF_m+4+%gS#;%32RZF:Ɗ\;8!7#OS **Qp]J*,DK(31z#cyVXMRlwP1j&3 :ɶhY( ˪TZ7y8Z]0ګR,e (,6FW`WϻdPyHsmVɈ.]+{ jՖ}c {Ђ^܍߹6ݵlk>i͖R%=W_1eK׏̐9 *Bs5^(<z2CEflFa„/q,=3΁oXSF}:mm; UJ/Z6M֐x ܂ڌ"kuGY^>jϗ/H^skf2RծY:g0=)Oy:枱-[L&'~>gƉx2'n[u"1_oZb]| HMQU#$5y㊹4mWBԱ$ @j?c-`'ߡ=غ6$ wk6Z9˻"\O^\Z-Υhfok99Zh:([8cNk2wL 5GHK Si~f#~^LeW Ly 4%-dYaw]ޓ $i6a&qrӮ)` :IGE&&R<LR_7w.d5MFƔO)CDiHm͗`U }Aʩ$$W2(UD AbP' У_9LE;do1Pw$OG 4?wř%*maBש|*t*L]?f-@:\"t ] t <%թ%îʌXVvtVXЙ*Z˜]-D̩{AL+E%s M.(%4@w 27~ujUpŖWlC/BέZhLλ*HB4P$;'&umW&ۤ˒M9@êcVoܖ{I*䯼ޙ|j>fIou%-Y `!22|JW bqacSt}䂰;ޫWκB:hOzǻ-Vx^S < ÎIҁr^ҘEx4 v(@ ACBVgM:г*1_pYHfHNLq1VԢK,q0d0O"Bz|( UEʏIkYxm"8~MyNXC 3(vV8u>`u&\iU_-Yt֏[}X0F2*BԍG%WR'랇hBA(ObizRoOEiP? tq :751>wvxNVmt=`\ׂx20:I,J=i\W3_ vQc50>i['Ytg4kȸ,#nժ)vheBJ})ǻ(ή$6Z ?F}aqn~] x$q)e?rK\@{ˣȞS]K>v(²oh¹D38D."'A*dk8_Nܤ,F[%.?߽*.39Vա=tصSӼCz%n*u4ϻ kQC 4dPv1w U8tc=$]w'n8Hԧof*S׭sa;hG$ Q?2yo  **ʵ"0x&Rdb, 6͈,q7@ }_ )ֆmDcq`=4!ϻ<"9{p"L~cUFW5k  qi ew kWjśb|eٌ斱` .;o/KE5agkf͌wiƶГF Y `H+lwΰ3iЕEF!2;p % b__Lb=bS*KFh^ 2zpj#N=LuGBt& 5^zP| yYbC4Nn_xroo<il†)CVXNZsaɭ[Y(LF'?cH]fAh=Au$2H><]fDZWZm>3²RKQ"MԤ@J0MG;` 3U~Kg0qj=r"}~Lkt4HRvUcZV2a!&JPa8h.)Fȇ1hPJΪ=QN\$/'a߹#Ʃřϸ4ydž>ag?ʧd#@TO7oq왤/q!T5!}z\} mJ~ZPvqN3=z<7\k D"aP&kҔXRݍ3r|ͱk砭BeL֔n? t¯ kd9*T˵7+줂/ \xxcÔ:Ӓ]$h',(3=}4[ڻ(GB(a9nCpWƖqsβQgx ` !L$3A߬w@5-R'pH g ʼj'}j2Vi Z)u6 }$KR$)r~d޶MlL&mC41(dvk}xdơ6 !H:4: eQ`h\&!RϪ$!Bi֨L {<qGxLuٵlxgQ5gPRP|/%~DJOljrn|^4q\&-Ȏ@VC EZjsluNK6@ !zQ19 ٤':ee(ncs9Z`,,,Aji?ښHݷHEl:)A OQ\ShpԔE VXUż@TgrN@Nд!ypUe'ޛzXMޘGF\8ײDn!+ Q2TSDt x%!GǤ)<:w3خa,E1xg'Dd8+MX?U 1Λ+¨Ǡߗ縶3d紵.[K*eqO+PW!å.EEG;𨬬=))MoP%}]v L?(h`,j҆$CK&U4 F )펁+(6MC!mi8AcE!k11p AVH%k 0xTĩC, ;_u1EMzXӱewy̩+ /CEE+י\OCr2(N2X\U P0*⧆AaLŽ|kG?5E}AJ0W(5[ŰU_- κͽ8Z*0?L\@jRo4_PˁoDYAr+˰lE7a! "\;ygL^Bmv~ph>`ލy?vԾ/1H&0=nkpO/M(7xnt;P3[@qHL|g"A)JS]yxTڶ>~ZOAC {jMɒ̩ y^gW;;UP6]UabÁ#w ͼ_{T@IduVPTnwȈy0u|< Ծ ⵛǗ,'S*|/k}E>/\&q,6|o!L~@VI Fn,{x23E fs &`GHav[q8>(ƺPp$)9 os,츳j " Xٶ{t"Dmf;y3Gۙ]mN8O[VԦZ\i}h _2&eu+nUi}C섪zZ xy=ZJ E;(L^~ J#BKrJ+@gMSb1 XϦޖN^82єys.˽%řNny x랃vXƮ(L Lפo<'\cxdI3TʾvG,S&7qT]x*w㩍>3?$16wXo *1iu{ۂ+4rRgub@$ %x&csGӻbwRIkuW&s=Z"+`"Bʧ =@XNZIx{}1̊Gٞ~O2yAmv6u"y%cՔ@C 3+?.šs@y{SO;Fo&"ڬMs_U'TkBR,8ՕH{BA~m7&5ojTJ3ȑD1?\w R(ci7*w0H:]0?=8)wV) Rɍ>pORn΄r(ynથXT*Wgbt!LS"C #IJMS#HJT%_=ٹb+̦I~eH`3wZ 1!e, &.ʿA?<}c-6|K3˴t6)LwObA}؈ pH=DuʋI6Iည"5, wvSJף%m"b_ma=:lDyq7c(M,fbxcSt!V0s/?P7/U#zFr1!(Z/lpPGv@a56GᣣkKQHy(u׹jA #5D9%bՠs1YARܤ|F"eWm+QAu\N`&B Pþ^mlRe*pr}Է P*.WlS (_fBS?!ۀX?Eiٟ(gx(p'# c?!*,7Pj޳_R]u7/B%ETxŏ$霕=5-WG^q-&ZgDJ M/RhhI$T>>E=}<(Q}A85|pq[>[mVmwǥ1ʗ<'Hힵdl[1Ae>T E:5FY{yHd sztgCSw"F+Sqֹ}j"l`!]O}] LSH-i'E])Fh5HIFi$ͻ\A=Tz(60m*P#ACŪMӄN8_%wx`yU fŚ(5lØ_gh)U߿FyUY|]wFuMLy |$Z}"cժtw%ҩUY"R hˋpn x3,ͦsrjž!r-7.7M\&e>mɅL#Amd*.]…5}HE_8>]Vy+4T*T"*UVJa:ǿc`"\ b-I4ptWaQ%CqVa44k9쥇<7Pb z z9\UsZ:zv)ۋN)SP|qӮTiHk:)Oj1 2h@.x^DFVCM+5 / ]pmyIKI;P TJ+4ŸPxD :yh5= `&kJ|HC2}wLǛ` Uv䘌%j--dj*\ݾJjk3s/mnf(\aE!P3y4U&?ʀztج@- ֤ud]agt-E/򣯝t]n\x]Z$qi !odXMewІjn*1]9τjdJXhFa^O$/F% r aA2`ݑ26ʛF~Jl/ܱ#'| 9× "8{,R=6`H@cNtՉ'klqiV:D/Ԏ2f)ڐudu+'zo-u}\ՙFhx9NSDGG>v +d{/_jJ[cV3םU 95 3GJw-'^'0ͬDFR7APKx#RJd})ݭYƌL.KmS$.HU&GU%Y(^f O',]$&]TQծ_꒥"r,(\X1%0qzr&T;)3Z$ = ԋLfz_BjR]z< bnV"bW1Em.tFqTxz *:bU4b@uE7}\F5V}Hn癝s~AqI8x;ba~%"/9b /j;q/5kkLy2J c s2%cT&H)}bƁ0hEk ]4Xۆs3h( &Sp{m˄V:,Ai"~6}C,ǮZ#(dti!tCZHax.U#ڪlMBP JbG"U ISzl谓zX6|W>P*FݳHaq^v\ #(觸]2x'Yk:^8Aִ,"-%υu7}T_%unQ>)ܵC`B :^,2G*n@Z?0Jv]J~Z>& W{+Hxj "/Z͢W^Kwg|rIOynT>"+V 9|E<އQ_2.BhfnC2V=~h%:'7"[a?F1WG'?a\Z18fj$v݁PC[9^KONfØz|bpoN^s%ƂM{-gPފ Qjxqq:*% 3 BSvm@(8=TQ> 7Gɥ[j[F}ԥh]޷$/5%74(,+/ߠ0PmR*(Ix~H aN3mznR.TvҮMK _{a|H/-H E>X1RN lX] I Գ9PWfx1`ZK.V-ڟZtC 3ds{ X/aeT&FX'QnX<ywK Vڲl FUwnrO̍Q2Vs9Lj-Fdm;1(oeލ#MH*lxX^zFIL5"n,kҾd9.JZ ÷f[vC7׵l6V)O/QW(6TڙgڤPڌ,Wf,TuˠZny^Ӻ>uS ͓v4]SUl /OH9ZJ-n '}rUW*xY%|LeXvya~fd rmTtW,*E \?=K /x-6ȏ e[[6{䑦ʅ/GB&qH.[rHøx m,nJZ4EH;JU{}[bD nEѾ}܊8QDk#f D*. HFupxBw~ ~+JBK*и-wTX6 (,U|3l‡"++q]5EwzgBvDcu0"0$?NeX#hE2KJf D\T, )=֧f0:[aUa KS",{4jƺNHl]*"۰ ?Uwx=>%%Ruw0({A@2ن9BMObێEx+B__8h6o=VE4N0 8kBM20AȺ^T 7U5i]pWx1"YYX-}")g+!/ۚTgM cr(%)Y#\olIѱqad=/`9vɤ> vt6{.CgqN377P[|╚rG5I32h|3=oUQF j뫴M"ۘiyMu{X 8k;Ip(~sMG-݄uсD dCwr>Jy׏M$ӵtokhp#}2O2U~ 6˾}Ar&?4K.mu,P V;M *l*1k=zѪ]\cNvykwxZء*H8Z)GEП V٤,W}]lǂPR뺉-nhA7쳖"LJ76B6囔LO4'| z%=)Ѥ\lkit0Їʾ",9\ݡ{@=/R>$,rʳD3|C)V1d3-U ֟ENi ؤ9?$˭t orb~1Q]*˒ \w%o.0|q C!L$ w\BS%=6£@|dƵU5be:%҃܎,NZgZ+H}A;g\|*/4Tc0ž4ts %m\$3,JrY+!; :]A/ W{2o{4¶yJ̄[flRW`gO2MkD<ϫ%Ɓ'kXJ ^.,7kAߺB4EܗCOd+>1aiu1=Ծ0{wJgGSs1~ %'^Y?6_١)ήn>/B ïݏ(s#Sx Otv<gwi&|7Rv8]bj#{\;ޡG}COV#i9)d*΋44(x 4hAfTĽE;j: ?0> Db񗝫 _np!LiVt`!i[Z&2EOtK:xAa>7Q&y< I6iu&G3ߥVfLΔI59XLhG'1=ZN Զ†+8g/fČ#f03F&\3§; Xݿڭwl5#-.M9[B2}!-s!FE a͞Y5vpBeq in} IϋhPo&=2=noҨicՌ|a2~'ʆ;\{X m,Y|>Hϣ2I9 NY#OZKbWc*U7e G r"HeGU5EHum~:B|b+e)I73&AT`S|g"< "CdU˫4su6^mC07_tJC.ⱎS\ ܶjx+ã1ٖ1p.Es4$V`Rn@`~MC>ƒsDJnD4`987n3HmPZ5=?--Ll U pdk9TEde9bTU Orj:f)O"k^;EF%XGK4v0mT ~\]k%xSѶJOX4CTGUflі^@"n#jQΚ(=#mwb*8m1 #]E`$ Ŀ8Բdwx~˺iK)7 ⮐OX-f-pϷV+L\[TԳtOg\TkކlcW\^0(( F ~A-O-6÷eaC@8;lK hSh76]韵i IƑ&b+fad>x kqa)8?L3dmhNtP͒i%2RvdI*䫌.z`K'/QÚ g5cwRl׷co#BKq^Э+4X߿HSI)cI93te}Me)8s h(~5"+HBUI7կ-lt6@A"p'7c5biAOM=Iɸw% ^j/> ^]fKhuk)Ѿ X|*vcNJ6Y/+b3͍L4Aa䇅 f@O ` N^o,r>lSչ?&J^ƒQO%L(&p&Eg a,N]}tKP3_<C>d! #N'Kj#YVl V.&8x2Z4ʘt?=xW&ŽEm"ʆ/%vi^!bMaJDg%=H G8\B!S'gfKʕ!F:`T;A *N.޲aHZ rmw4xn"v/3RY-57zI}= Z"U1=UEk!SjйʹnrvI]=n(hj} P*'#bf;'ހFKf9!SP [H{i=٣9.Mŕ g17Q.i#=@n=7—WD:`9ZkVMޭٜk>בz9vEc\Dr^Ob 4{ ŜœRjI_ [*P_7\5;7%#d)  b@™XŽ4Up?ׅ 3H,b0V&iJ"]6نvJye4M{)SXlc fJէ1B|᧻L0ۯLB쿂Eh0T=CY> a_zq5a'ƹH" Sr6\qzX DnAy j.$؄pQ~B$''/h )E5K 嶑Z " $Izt#o'*W|rz_jj,y&6tc#FmB`}u=qؽE O9y^ZߵG,b{>JTg'2q]*<;(BqM^-^yڔ 1u wYֆJɡO!9q>!VՂ8 2g+?[XGlmS5勯Dd܂Z yE N/1l2IWN_}3jֺV6!j%:Ҝl_2`RrGȔTovNE(є(. x1iteRl)P0xs% KK]&^XwDsV>x-'.p aD-yY?ԟZXQA.=Qʨ庌n(A1 e{_;]id P/˅\y D=Zu _x'hlgcA[6r_}^WZZo@ fgmtX*"M7(k|4}YJ0Fw(T@ ӜhmӃ1PXWPRoU*uK~,T0K0FHTzuXb=e_ag1P )2]bʅ/$zTboWU̮BrR'pqkSl,iRV8f%Ee1|oVw*] n(9f:<`ȨlZ'ICqm% [0AK:q">w87A_;LsиRhxluH`lx]) ԏ٘>`^.{JX"mfƶ># ^HsE"fQ˧ue2O<+/*%VFC,,^A ?j'YIcbsbAvW8̠6u#œgm t#0Ny*FLQ-֢81;C7@zAGŮ<uCfE_QWn1\]̠bB} vﵖICҚpx BTnU3o#iY;*ŷ"g_>o{*SWluI{BiQ ED6ߐVFI_RK߈LF%IdԼA$ tlԯTTTT`԰*W.mPv w3fbpUn8k>$QQkoRaDm2a0DE6sKX|e#~U)Pޞ v;h^3 `A`ؘƻ1gA, &fYc m[JLgo98{rqN?9$]6ˣoIςМZɵkWL+/6[,SJ hq]㼙8#\BF^(v\3/qvTS=ɶt{޵Ƕ xACM#TA#қ +iyת~ k=i,QC8ىv]S@+HO2̸)6jz}cgmoe9D_T['Qvkʧy)o?sGbxa"sOmף(0WSBAO-c5H(m QNk\0*zLGOݺC#2 ?S[֋qm*yFݗp찥alg)Dsmh~*_|5[5.?v4yY9RV0\ yȔqAMAyrlxN![~,ruvb·ÍSɚz*Cy0K[XOzTiQxpa-8 Iֿ=.1g +~1oa27"W7A6:MgVu|ˑAR4ʩTD#N6ds: ?Pn:i# .AT\}љ*@1:!)os2܉=K`H@]}cnT*Լs6?LT~ k?92";(O}1~v>e3Ϙϗt@2;nڹw%w/[D04q3F-f_S\΋L) QR,H|xW:S|buP: m-I屧:B||W M"}wNQyW#Zp ty˽]=؄Ða3FښD cS2$3zF xY˩w9.tBZ>1NxDsĄbpHb!.*1F\5<(}Q͸B=A5+ tݦغ5)ualڠ>Y@ac~^:rhu*WU_Ͼ 'kr݁3+ y'v>|"kLvT?R/KoLVXSY'!ƒxB⨾< vn$;xo΂`: M˺>U[ϔ mh쁉_HRnE3(&O F!N> Nh?: )*{Vʹx3IQsZT87"!`nբ0FaLhmdKٞj騣,V-c\gu wQ>>_E0q .20*A6#v*0(<Ҷ!6x`³7xiclu!ubqU ʘ<<5QV!..[%v¤ūh ؈%H)F~UWiN|UqLScߥHkilʅwn}?ðдv9hV>٠>~,e 4~*:Sv" O2idިӿP#e@(ir!18*uK[?xҬ'1-_ s*l["V}ۥSj#[%93Im )ߴp ·z^FQ} #鳄<æ#ݍU+=6T%B\}I VdN N}?Nk*"Z߳0?AHVga?rf&U$v~48H~#^.hjC#Z[VL;J18-9"6gD2-Xu_,eW݆d7B n$3.6|@E#+ z=_ F.&acs: K1VBB܆ d6ﲪ_N,"['TacӰ0=j?ѡ^`jnT:]T!Ԭ2P[>{!/"3ە{Cb.M"wǺ>ӟmeUHSq0 ʳ̯1%g&ͧ&-Y9(2-+W͏ƸZPc9[*; O䨁W^.Irfz>@ڔ{ʹB˴c6ПդN3Iɬ^ŰWu P4*iXF.5+zgjv8{hI%Q k>U('69eAQsą6icEd}!z}]0#>Yl\RThrl'P`{-'ZF] ](ĥLufYKi[g>wbQ;ۤPMzꪰGeܗaq)i7o!T*Bad]D~%|O@y1(_dbZB{NY}iJbKAJjw-2O?79S gpDgW9@/AY#'_ (IKЄ8A;$ؔ$]j_4C٠.I0oqQdtgEvqJX&vi=ac:B.k0NGUuǕ28&Pm+#3!QjOK:g`'c)EjXI,/f]K;j#(n(}jn].Pn̟׷Xx„c.C1!%HYS&AuϹ{ZVƌ '3Wk?yF:& p^0&dSgjMZfbTq A*۴u/xYXbͺ EMi,L igyՅ$RJP+hbW7ɚn]CfdyK2 0cH8xVoKwr~:.1bt6,-QSJ _֭U-R/1R֙̎"jXF*?m2}BҗRoJU B[&SkOQ斌08b+xSb4&u>~mlȼU:-9='&sB6Y"TP'W\R5'\/ bƆA^V< 6!ߙrڿ=n(X^9Bc{8fCO;UZIQ{͓s}… ?-C2.H>meslS8L;,VE@Z)2 -@pFڜ? !I; q ol oX20ij"2+X|o18tܼUkpu)^{9µ q߉ ^)$c\c3 ӓa8@/ڭ N\J-؁)ZJqUI Z7ƒ hT_U,"(Y@Ծm/k@`y _68_Jnx0D]gZI2fMTX}&E!77m&__.Vz;ҙeq 5~S;_;_7~TjrEsB5cK, > -tB;MyYt%$+F>iodR 3E# ⪟vU B&,q_d<26R m&{,s^vȋWn0Eۦ/)H;M%Tň  rȤkDdd=2rGTN>,(^Y w4 odufot%zbO 3F+lRTA;|USjLgSe_"%їa/7PgYa@WWq{s~inv16@ m"b eǰ=-ÍCJm7n]i&*c6hr W\lpJ. =CJq~4u1*u_tDحa"+~#'m{.K֣ck` `Ӕ2V!6 g HO`Ă~2rygE!R#_=^-:V/].h4iܜm\& -TxUn/oIzS7J&\6HLN(Ael V.W 'F''[%;&_^5_042=yqZ]$(1_wonE2 ]m*dy OWe3__i˄1gIy8n}{``<|n*%c-=Gl{+@=L)d#|jhNگqV+q(FrZ2fvY$qHz 2%2z7TϣtȄW,+1_l#N6pXW E&}0w3}GW\$V( =4Y(2c!P-j?9Xuj= "(1q׃[ %(&eDN& %{Yarx~X7DwGUKgyIf\,I⚆`C@cġ O(2!m>?Y=1ST[@>jP/7_4]UdeHD÷5{`El[E,Lƻ+d\ >mςHϖT\L`YW [i šQ4%cGjFP]X]5xV00\Y% svTF+tMpƵ>~ov }Va=ډB;~[NRS"՝Nek ?S[4+D1**۹B&,^ɍC1xzF> .Qnxg%'&bgx=_-U8w-JVTz>;PRlɫu(XE<fjj)JtN/Qi)z3~H<}.BNw-0YܾA `FvL5W'*Qa3ن}I|Ҥ{tKڏ/H:;XV \ƫ{2D#I:cbqK=@T0_.iNN8#Ԭ5Iz߁I;h@ײ`^~7@us 08k՝3ŹC4c(.2zNrgfߓ(Yŧ7L]Ķ끏.q@3'a3 )@n;9p a9TW9m]6,4Ma ܥjq̤@]V!xcd43AFB/.qj׊knv?b.\@4r͂xQa5}":rZ g?W\{ZVx4%gBӑ/{Y+b;=[-&D{19*⣭9\|ȱ`:Z7ɏn! y _>~.3`ϐXy {´rXmg;<'|a n-t_RҢ=y۾8-&0{x;2C28#ޫbLvNZNp؊ŭpbړ$n#e[˪[ E9F\QBt1.fjL p䷅'6X< AcH_BBFDUef ɤ9P,%'9?.YS: n@zsMl1M%{ylY# -'&>~*cJNa23ih %zbŸyy 8" }z%T)qnkZ0nO#7H'‡ u %/VjB">9;E#dVs=jߗq'19mAɧ _߭7)d -EF 2bT&*ăg׍#&XgLwx~Ut ߏ̴%љhd}[mDQffu~:֞o@Gu,)B6e;;x Xދ ˲O'`*K *Q%:*6me߂@E0$]\xrzvI᭫WiN3a 9]iznX9uC-更:Up~BV1Ṥ;RH as7fA߫7!| ,B>R)Vy(cPix`P 3 iuPhAbO~_u$1H&ِ~xHXPKg\"x1,XZZMG*$92ڈ=@t$=K*#qv;#Cub zf#XHq5@а{qfdF'nyl6OC5%@lz,}KW|-QE"y:)!zlO~>W-}I?Ky *Y}f;FXizN`K^Ff`Fh"_>.J^ &$dbs{`zXYo nt9 -x AMeBϧd܂DMsFD |VW7~mU4Fץzˏ=KP_k">thπq[BOHk`Xzx;DB>$5.lmqF*83$`LJ А$!oU;8]4K&dW;߽*R`br gMt8S.OtxFN,5Th&,c ]`*(ˍl+us*/$zڜ@T+YHHw{c odPH<BQ6RZLg>ZPtD9V͕CvER-ͩml$6iƫؑXVr9ZqK~8#t3~Pbe`<ǓlMm\%0d2|J֠ކzR 8aTc%45s;E:"![߫Ç#;t4(bq@9yv4ۅ|f6dnLѷ#Fsl+Mċٞ]>R>zS#tWL8} E`c,6?Xě57OƳPhVh>RTٰsz}" & @nH5aŒ\ņcY=@uN5ld?dy 0*X*"$-::~2o7GԽG jn:1E]p^@1g7q7jBܼ]5剝tL.<'*wg?rI!qR۳YfNMIJޗt!K$cbcYl+b|֨Ȯ+K[ C=~QB.,<\,`ۓLޒ":m^^͙j'׶?\%)(s},>5,CdC35#*IaJjvϸ__746;#*F{DoN1KnhCtyhJIeufUPk Q p+IpFl/[#W{~R0>p7cAM27a\/%@\.PK( .L>+Tܗ%e5õ$NhL֞p꥕n<6;yP>()!jXeᓘ,Jv74G3O)CtLC)ToffC.˿Qvf~ //Xryl,ASj'ySVXW1Z)s20dK\&z! >W*6wES~0ّ:Vj$$|K@>F,(|PEӹW!yxaC\Izp@9'\ f߀qL8 ߁0dn@Ϭp'm&"D W?__.7JcON3|q5q O}߉aJʐ"H3 Y:WS)ǧ'Y[5HM|OhͶl_r(p[&Ş5C3K>x 7`@irp ӌvM,S[8V=X ю`(^f OEm/Bcb-ŻpɆSq # @r 2XlG[ 60GTП(;w}~oِ;t+0##/ΪE4I3j-2߸d .!("Au~p6 KC=뎲6Ė r?eI3/͌Q X+X&E%6vlCdE*w9h|z]w`%i3ؤ>' B0XJPH'`WI[Ѭ0i4HѭA@DcZWNDad yD?r\VL[9Ǔ-ArEC#P@Yn N*kU*:%!u;aų4ߝWH,4yLc{*cSEp&,Gӝ`OZk,Mq)jH Rd<4[ /.--lġ#:_"^? /Yuxƕ-=A)M9 Y-+K|{3#0ݬS/;;%–[{2ZOD>T;)oo nǍHq衯yA}\ rr#y(5,aY.tDL<յe'1csT0yb+Cv˭?V|kj燨&ؚ+Sv4{l<  9~82|Hep3LK9O{eB)mz27HE 0!ҧ4|l2?Wȳ`+>A$}NAOcsO|۟tXJC;0L 2bTkk ԕ)@>~:0`hL͉ٝ"PvD2>ʀH|Dv[`6gSgc; njT$Fp)QRrO? K3^>Sn _otD PH]蠯)qW]FJ+6}pA }__@{h "R.v24~өppӨP ftUzH?k/UW-X}yoRd/m {WȆ|{V2*(<o;;P=Uth7SD:bi߲3ШP7rPϒNMÄqIP$&#Eݩ\d$6/ E MNF{1f;1YZ8fIEi⑺4i#rT6oqD'mR,¡hm{+4b Q9a6'klRX]=! (Qֺy%fq%J^meBaWM3]i+E ╃q!ܺ=63IYУ@_=wN!5=>;6*ztMS5ɧ(HQ\)|K9;P[tc)}QaN.[jo[ +3]i :C&ݓ`MZv͂,PRCr1VQۨ? 4z14 14/xYK(5ELY@( V>08h_ա,c +{G }cFyKZL@cy(rymKT\~ J̉86(ټe@)+(_ xTvWӂy=ȫ|3A нJqm~nK\ey`>P"lGr8YAC7ץH[lCtp7p`c~Rٮ)`R^~yy޾̅Q EZ S?#WDrA7~WF'cM(ԋkQ8!h"՗-7% @5 a@D)yR1kin=MX`"S1lB+.8w./]go%/| UoLn%3cONK2&bh}/JG|ˑB`%QzbfHxewI*r1P;ZS)p\ݍ`ζQʏ  :CA8Ue_j[Z*FK^]&:JƓ|^8{p<\ASGxSdG@-5n/M1xk#"آ}A!\}OБ E "bfOu a ^"53Edj\1|'i\drO~iHbB8^~?-BRS48Pb,n?i"c?WIS_E '_l^G6+D,\X`.{h.Y%\Ll9 |{3dLݞVO?%BI"Euad47Jk%WyUSHmUi"( ߿&c"l>? 68Sϓ/B3ʖW{Ҝ\90Mb,I} Vg +mmŷb0YM $=/xJ"mMglK|5]#|g!}TK4$/ n\#կ+~ SǾJ#u?5X{#~ [taU~+)Q/D`v*$,V:"{=Ev_-hC:֨O4Di?azoX(J\PRCZZٲ"^ 6w|·0 CcpI6p~E5M4Faqd5 I[SZ6^䝋ݨbv!.MC3ܶĘ'|X; :v}K+u sd*mE>DG =R >U'IcF 7d#d2|lrrJV-% ^JP&z{ vo 2R2#7~ \E{]0d`',*V~VZը'#4.Glf;ϻGӶZCl5Jd 厱 #1$Hο >s"ck%dDom'4Aa+yB.O~/^=]P6ȤLkٸ&# ݢq8Dϫz(]V*&GjKhgKzVcU~i OC\ՙrgq2%ܒ_F8ZUl~ΆRpթq${/\ec Ć `vij1A˽% zCaO#Ĭ>'%וh;Fd{©ulNm_FܬZ }|ocЮ[.\K9k6UEWMw Op&L' }g!ts)>J%Lg&㣓].du9e>U{1-KˀH0꾀G"37;t-1[󓕀N 2,fÿQBIf (@`lʓXt2]cXձ6+l?EAI/vkb$y=ίW% ;Q *o) P(\?d y{+LY{4(gMGDkAd/CfV cgL +/̤6%~ƶ&Y6T/c keG[Pټ4ҤN2"9Q!P,b?~l_A !jDZB|2Dm&ㆂ€mҽȤ٧"\.Y-hޔpIh\HWM]2LR)HqVup)F]I}Kٯҥ)z`""_I- =JOƧ% MTS:ֈjx h*_iwYp|itQ/KU操^~%}\ս)l?.&ō5WN<#$hߞ~ָf_ y'Tg{gcTfؔ;o_l(̠;#ob!_|D|w@۳BBpxg=шnX>+>`p٘EJ[ z2Te/k mFJF,3NJ-m֝K]#K-ڞrŜn) :;3d1kw(@?YRxM3|d6¢lE4Ŝ%f`223ȕ㦃S-'SYt;ɒuV5UA &-ŦFƺw@IHGF[LlqSp(Lm?%ϙAGfY6\rʟ3f9/vEYz!KTTShqbw'tX1OSy&NaǤ)M.yy6h0N+ S%`& ժ@H 1@=Rr']ay#`YxUVW?;u#PJtMrFa!T*160Op| LIIفYRӾL]aQCg9cFFrN3 I$uirm1o4z*#X\4}8t˽KD޸ţ6Ϙ{.?D5z؋ʡ2r +Lv\hzbFPoj"يE ld:!ڐCFER,M3F<6B7Tq'Y _fG؍172\IѦIl ` 굾 Eu]0~$<lEihU9o17G)锩߼= $5g#&Pﳵp!Ţw0>3Ԗz9s84EBjeٮ[O,~o.G\Xz%ηhC#@cb~H N3+W caD{we4_\ڞ I?[ so ܷq1}>#q$t=׃܂^6,} R5b+utI=AsM0IN֓+4~X*_\}/Nǥ]-ǫCI#MPN$B fx%:OŊZ9g- @>c|a;^/ /wǼ@3!x灨[6@<~9@R{)f{sWn6aRLzݣs-Lŧ";#MKN5̦jp l51_V@Nǣiw<#Q/'2.ig;޴Pi%;!QO%c s dx8u[0k6e(tփmi;6afqFi冢n*MrKKBeyosKd_@6<.6+3,8. J[8N- 'wraRbn2m Ԅ(\n /ʱ)@8g~:=/ Mw̯(p>)ξNߌ a{W?z6ڐ[TUT7B$ Zn43aX;WnsQ34;fԑ}љ "2_5CL;B噾Ue6 ->9O#V,av=U4;Čt1_B\6n ˞ SHɾvogC F_#y cy#eL7C6m>&oi뙜PK|"S. |/h=,qG* P2A,27ʏwh4O,gudU[؅ٿhБ`TIUᑢnܟֻ> ^k@69@J5 :}Vd#_P8@@3+l4TYP:d֨ #Ɯ\ma:ƛ ?>z.lVl&ve6_,#'_"l>U&Td]ZcfmEuQi591:Til+UTHWo%e4bkD$ B_)c``%P,`vPB#$8//Pmr4t j Zgse=R1$dTt]O*Ү$累xZÊP؏A*,?ع4KKT~wuvN$ ^oR9`[G qpqVw37u`C^>hx( R#&ɵ ͉D \>t#Odr=7e;.k FX%{AyO0gb^'O jO@NcϨH&6؃.M[1ߠ8hR-qnhّ貉݇J˅e w#0#)Jg'": !FtJ v̹sSMWwMw7\͓&4ƤF1bXBD=E[^Ѻ-SY+?^^xZ'#OgK AWx6ugjC/Gzcz8ׁ)۠iC @ 6G̅vn늉5|9d/]#kϭ 晎oV1N66 #LMwTK^fȠ|Y:+CR}M@\Vg)0@֙I(gFEq`U)\;)qbi&ȼ\vǰ|Rѹ{=x)֚ƁaK&P9 Kg\.Ŏ_xhGD;^\ Y=J|+WW=/פ3XP`) =i#G0Iy8q*9"NF܉R w>VX8 dE&_wJ#Kv"D'{xxT#c[U }KkH|=JhHظ^247Q aUMiuu5ASԁ:Y u5fl@MϸԶۭXW5v~Ʒ,o~ wB3]*&-X }~@XݬEŕC 3>>m;a;m~)p;٭58ʢP068ĩ Ԯ)9=m_8ΉjLF.upC>m]=jlYac!]lUt9FS820Qn?̢VvݙglRv_֕ kX]!S=]zr:Mvy{=br&\6} jX >gHʴOTYdYWr?w*An~_pC'W e[$D8A*M˨*~Ay5vLM.p7K/#]r8oa(9:._gtmE4M'ʑ c2zpBVj->WAV0Nr5NK*nۈ8-rV˽ʠWӓ~IQcRoM^6?LR @9- 62_4-5Z) DESͳczpz`e!AafŒM]/4a0\q򆵣VʜHEtS@5&nA15&+lqt.{+Vlplc^r2EUPqֺˣJm s HYO yR@C6`l{k6:,0`k׬RkZ zπbh_ǔdKT-:J37b;ޥw}M>y(SMn,ژLXz1եHHd.5ݚ9 ,pa&ZD83.͛}!{rE=] />5|%j#,ԈTG=m 05O4mNȞE #6 ]nqfuD /zo;ŭ=:#ޞ7܄K-('BL~pq=DmƂ4n|ǃꇻ6l眢A vfpT^ \K7x?dGw'F.Aiec1i#A5DS%ozSųS/ߊN|W6EI\B>D*뻃B8MzAnHK, m-_ Po蔘+Δج/:q5[VHNcUKDq <~f P3r\;-76QVmMI,&bݷt[+Bc&fˑ 7bp$dB)M*3Wp'MO1|{&c]rƂI)N}~plj#iI'a`Y*Q2ʥfiKR`qV?o-&M pM/[Ԉc!4z޾EAֈ5/zTQ8,p.3)Dc}Yd>\q=xFwyU9\PWM 0Bb5ʧ!Y t\fsDfn K(cT$<{5`e%M.bw)uӯɵݒI 5ʦް%|9?6L"a$]CPL]^ˣ[qp/9|F<0N ȬU w'Dg uT9{Ѿ `EcWw-9)#(*ZRm>G=YkDk3PdynaTua?AW v%H[9:ـS@ 2F$\$ ;^Whz+s4G{oiE uJsX$Cs<㧄)I"-aD!;*yGдΟ䭀:c.V |>*3e O'/Wh{r'NrC'%9r ] MQz&T~wyōT'Su\V(_L.u`0(pڡ"Zĩ]: 1B %DY`%lNoPMPcX/$b̚Y,&?|ԜT8NPbݣn"t}ruPt >jbՅB@a;)vm{(Bu*J!Sm9 sCOz"֤ rAuor5+؊hHp'0f,ʈOO8dB*z3ѴG튺1k[rQ LR$%6AwP' 5Q׺VDQ*>3 ҿ"}$, V*sNO xPrߚę$q$p֓h_>Cce40e@ y=>#jh@@#nn.h-'n8@IA晻@P3SҰ*ộ8's;bNVU(}D2ȠH8i߳H2Y9ipĨKXLqȌp* PL쐕į췁;ACKFsΗw::Uro\t+5 M4QQFCa9:Ᏸ !bCm.dgU% }&M:d@C=!\}*jz݅MibW%E` xθcC8?PyHk ? %k??]99#2g|م@t{)o95_A+u0϶'{'0IcR;= WC݋kOyB,֝J꺢ŨVT_M#4'JIm0`m1Er!yH(iziJ|ğ9OWی h7P=-vDz?tNtzڹ1v=Ks,~ 9_15>XgcӃbAhWVݞyAdǕj^ 2l /l%B-x1'z?'Ip 1[RL?5uk`P4zjٯz5JV3",d/88 kK&s”>ջ ;WC/Tqڻ66U &ṱ@t꬝ڂHPh֞Y'N\xq1?T5cNKC^Ԭ/}-f!O@\Ulb,1dv">r.֖Q:v@LUZԙ%ݕ#gE Σ~<ѩ(X0;^@8hV}m:5j?.r/HjppT8+f ;[5>&aiVVzj d`}I)i*1lJ~-H9Lm%UQ,+ v݊^&sW`hUyD宭UdJ+^p]]Ufkq2 x+sI1 'RY< Io:oY8;Kq\/neq q;YKR*)9NcgeyoXPbSⓨa! 'hrHN~G~-I[a>:w..BZ5i ۲WCo)rI12\1% x uWO(@)$9V,}1ȰP!y[2*;k"B"Ph k<ſ?ϱRX%Q {6Ld4LZ嵧#0`R;|M\Y>F ǁψ8"A7WذB:15Jc;ԮiI]7!giH祂W7=h 8EfY}6uGө7".DJXةOyC/HKXki(kǸ[jq|3-+jbt7+΂qUJ,631`,~ℾƨSDJ@j1Ϗ<庱+;8uCR1Em%ؗTd0#Es}&M*`Xvg|Po2;2Hlׁc5dk4֤r8L ɋ7m&"`d!QP tҔͷ7d?žqʍ5095B99[iօ^X8W,|WZba 17V8[=aHy+_atye٫Aؾgtx %'fWB!YX[ݭ?+I`{a)6HH|Th(H|]4cy8%MN*y:(CL)..8kH]\Od_a4?XLJ#΀\MUlWYI_G{b0Kffj<1jfi hț+S>wm +N F=`fMggDpW\"4F]S ?Ρ_w78[bhYO5n.TmMzR]urk"*oLBanIT$Cؽ*5aG0s+f5N!Lce/r#W#Rg&,?QׄUQ72Axn;Q/BCkߏECJ4k?)&{y>QMh] N<ԼLFSvn =\,u)fV~b7{c!O  )!7/s9 G.3Sn,IE쁏jܡdgZI- =THbҙ+G*W^A䕙a?ѪȤj۠;[f[ rK;_BSGAc9+F7EI7xZ2o ڋK?%96 j-d6GcsSNk:Rs6E3w@YY^$' $}|!T0+E^g#MyT+p*|@YGhGJyn5u,q&y]OQILsAff9*\.dd90+뾸Uc3*.[0sG 0>t@u$I +<O <'QSn4)spTI3j6yz0LYOkH*7imK@ j/@W(w%1#nOHgNitd(ie]9`4w ڳq,t~,OUħ4+9Ub~: >tCW)7Kt*)[uk6?O+$lncXJU3g|d%N̋x(8M{Dw#ujdOcjgWs$cќ-> }|[P[: lkDwt7 o{8ov +;(_[Rߌ _@ %AUe42mUʴu=98zЇa./0fA[Bvya$x6,(#ПW{3@?E)Q5S1nݴd]PD G̖kQ3gXqp+s0bnA%Rve˰]-8@xфf.Fok8e ]Z ǭSֿѵK~%~t&>oX&G`m嫹&[)}\п4w& {D$/9HTĩrYzD!i*>N]5BX{7PIT%,0>xP4c=񳡻U$RccFwXٻ6|p6tgߴ$MBܯKV ?Ɣ-eND& 5UgiX%BYD njb ۈg$AWK)c\ВQ$4q/Fw }q/bv KB4xu 5tM(9+NĥéX}MSXXrf/ݢEHBq`baClLم^HEż :p?Ըzk CZnܺ^޸%F?a-u2_cc[,gj|I0@~:"OSЮi3ĨA "w嗝/P)VI'+\DQ4p$sr~ZHCl.pBs;osb!ɗ m{iFGvq|a_ d~e[&^)S7aVx;|k?K cߐtq1qhx a׫4Df$rlyĒĝnʨt7 Q0OysI]s$cݡ$TIG9ˇ9pE՗@Jl!;\G%ҽXV Mpo!\)UF6waU ]uh)PW6-"cU&hޙGy"5ɳ1uFyzS<> SHjb_I%*6L1zw+„ZR\ıw3yGpH:&ϚAmbEGڦ9(7q0@b3GakBȓ:r+ ڔcLM|nw$uA僅t/#FTuU@ޮzDlKdѦ |aմxo|eDmEdic)a2qhVC03ճ n1yUN"hF<1 FS>p)~ ӣKuO3tڷSrmM6Ow"м&V,J3S!ԱRzE \̖@9}' [ei/>a2Q'XШMGTS-̣f -o~ZbA䧡3gňb:[H,gX\) l}|n4~dK HO﮿L.4&|LBpyw_yʆ|,{(V@I ǻκ:]b5G;;3 ^]V2 m0^ȝȆ<_zVFv>`gX&1 QoB^`K-sj:*ڦ|YܟP9$6>O'R rJRS*wDDݢη6!jTed>d5IG9R LR=KH 4#&iK9}P9B_N3}}^~h$q&bѠ\wТϏ}@ $2CY(D?`oF !!eO zJk!&fȓF:E^i0й~{b8ƯNČDii(;"B&ga9~23|4]! K vDOӞkΕCU=q]466y\ f_P@$OGp/\~^!9[i2Xp&㞌ԇp ̥sЭJ !.-E݆ˇx/l=L`JK\:cO;;Nw}pc>as 9?6Bh@Z(&ܫ9X5y'7ƌwI0SpIJr \pKq (0o意9Z טxEB9 HO&1\jtAP#xH ;[g# 0I%lHv}>Hlj%cW1>J?B^O!>h ?>R%kL+rc0 [Ы=hW})Q ʄ|j_qb!..WбjhIizbJ0pe!FDkyXz;ajuZӲ{g&N&wߴ=h[XҗYŭKhL%)ZV tEC}_JIEhfyYnmXbv#"޶b8y,fF\>wKV33bD w'|d8h|OјѴgG.ex`K<åi ^(^s S{EPΕ|:Bx-g.uH?UWS{ R?}Iއ$臠;:a9Z4B{Lq ;pJǜ e-y3:Y%a/]tؐ>~ ˌdֵ:la;̚<Ҋ 2N>5Iɱ^DZڿ\Ny>UXm+zLD7ԻKWc3ixg$j3qtM%P` kw |x CoNOE~u* E,QJv='^  3:hՍuw$4f HK,govXa;D$Zi}"kaSs$F5_GV$0eر@FcSqFXsma '񗦻%MX!(ӄD46lJ$.)&W+f GX\yZ_KI AYB} Y1W?FJJŠQ%h@F2/ec񺞑zJ eQ14IQ]Ol!W%G sγ.z%u sۅk:p΅D=Di$/і$ frh]/T+a?nejgqo %+sԦNܰrcA RF>/mwmˬ5fwpDPwQV hAZUll?ÿxjM nV Wt2HQ"VCR 3ua`n(& aUvyB|I=k+rmTJ;(\a9qۿ1i\xYOHF$_5Dӵ)L &tp{WLK8?0+jm8Q+ƛ{,VXB%҉Ue4/Yk&K ]^ hB,a|U͖q]V1?@IT^+-U=Az׋5  ncffk~A?eua#x]QUbڥ@SJسOjMdV(!:{J0z{ O:k$`@*^뇗") [;tU$b]Z~([|f%˟Ʃ!N8EGT0v G9529{ n<DA ӌ "IW~ׇwM*ޠRy;cfw,?xьx@-K,Xjl"], <lZWlGA~k DG"A0sU\qPU-`E}p mO"4nwb_*e8܌SϬ "IlK }' ̹AgZPJ-ȣEO@XInÔq-?R1dWQwYPiâהoaA_YM~H(H U\l Pnc1v 9t4cS&+Dݼ1uj+hzlIBgok'V' EnwP.5ۦJihǝ`qC mRZEgE{}ɺ3/B}AqO:OJ\ \VIZiz_O-Yx0pMsС?ڋQ)j_l]?硏2V7NDpOzd3KW|z P5SW0{nJs]SޘlUco_ɷ_7nm;[>IĀ/; w7MfUTA)*/3D*k|1`H:u(Q?t @ĢI l^w2ӭhz.=*,o IYiwZmb7!YRF-.d`Vs `|NFAJgh%݄* *}̲3FRRD~%$+=ڏ"S˙PGSY`r9 K^4&2iΊc]IW败 Q(+4NLzi>3_[zZqX"|,~Z+^MJm{NC1܇&*3fNؾ2L NLfTΰx*a~/*>i;q6;>'g) +6 \=ojns1B3DqnSfqZ?DFgG\Zre߿!e`r*KdV5u?DMO<9 \%`o ~gU:9ݹ -Y ?srҔn@R8q>U dm-"2fDͯEMDVzkH v.iR7H1i ٤B1z<Vب~.1Tu2\jM ~Vd _5}8tknO !fHd[ ]jhz[L$ZO_:ܖ1*w*~dM&Su%FĹ&SVs#E5tb}(RhGXm'sᖔ'?xZ6jT+߽ ]JO۪|:^ZZ1V}rH\_0ykg@y?} !S&Krcq|oC~ю'0tgR:^ Jyp\Et7/['0YT/ԋv5i}_+.[DׅWףuZA9ft^(;X   M54iPVsWS;ym~"7[9afU&N$|]>p/+r+BR'GQed s1a?2}¸waҠYX ]tIa*6 ' ybS 9cTw[#ꪖbĦQ!׷p~),hFS'Q%#՜} )M@jN(w|'ǽwGJt&F+4.IUd{J7 no ee1#IUK;%WE Tjg5#zq5ȉt*<(ؐ{Li^:q.u>BRJIeuy'^4D/6vE{LM,2pi C@ZZ6Y0JH#bc%)ֿ}{d6lLe'P99x"Ux]ėz.nBw0apBdaAd/zj =[No7`j8*hDqıZ %bph $/-n+>,a!΋؟)(iҶ471iD1ҡ5l{"zpCQ8_Df>{9ν+LT'+}qDǶ_7ThmC`H4+>6z2J)&7̗s1`a<,. L e1qЫym.ߣE5RsMDۡ ͽ qbR*&H3c߹qd'JMP>F 3iIӒ1fAԅ%;^׶Q#?T}Œo&'b8 dLvTֻ#M y%2X|zr"! K8 `Q MpP%/\՚/oK\xs7Xm| CpJB1KudC$C\WkrmLR)1EWk+(c$2xS=n5 Q~$j/BulB?tojOP'aOpc7Fx֗,TVl-e榙;0.c[Qfìʌ RKz"†v[IU@PcLjŭE{,#U@yws?cbYA|ZDG[Éd+Tt'Pt4Ʊ!7 MA'ց~gqz0N9`n뙞!,igL1=Ӓ@As?4 lD '8 XB, k*׎õOCI F?2xRR,s_5M#,lѱsM0eѺy^ DOmF3@D<yΉ-De1e&bbI=9?#OdR8Cs6z)(> _/ ][٢ʊ7Ueȇ]dӎy[s4 9G3Ppَ慠f,A l`7KZ7 /րe})+sTIJx( unb2Mr-qK+Rr>)h2VH՜/oSOk}+:H-2 ]ZAJ qiIMy4t-tw ]-B ZƊMLA+Il 隔a}6< (7:z9y/]+ϝ|,᤮h4 ~* E"O5K+@ſQӼ*\B%ٛhDl\ Zk=h ԩ*)=c# `lQhD)ubŚkq?(R: 9DH[N;1Ӎ e ݒLt;yYNdj#qF޷xAch:X2'L6.6|(Mgsq#|}a/XPt%V(< kƔq~Lz^ECYղ@% tǬ6|#! =?íIV X:l,E(ew{xgF<kV,fW Z#Ks* (w.JѱY-{=E0HQ s3 U<3 C3A E}^Y~\od^,4ă80 PE;Wkk"WCu Rg([F)P Ba8zlk*ist LbiD*O.7үXdY`6jޒ =* @eĩ U[oʸCPE q]Ί޲(IW)޹ߛJ&ܮyEoiՅ)퍝ɸDOrGuM&] $*.#WZD5Vt+-d3py+S*ɷ._ +F3 D^oz Qm昶 _;+AwԹDf1gGmG&&b?ke[]+It B^f'6p^NrwPA_o_3,/6^/ '(1D?E vid _Z M~w,ҶՂ^2BJ;}O]%8v^OPB."UZά"DͶYSɫut?vl?Bt-STP0a4NnsܙYot%UBD2C4!w .q~k̳Mm 8HoE2yϥTJmzݙpS^'Y[=!;"đL]ōac})'U"~%0XY;)w1j4,sm._k\_'_3:[\᝗JdQKeXօKDT+ƽPI?ŕ~dF;1#0n)!1`*vXY;º.Ug+0 X*~+i\uyry-:jDңw$UZZ찧,JlXj$ɮbӃXF <ײRK?'.l>* l7Zz4k1&(Oi/n9 oH [=85++`aeF].]x[_F2F348[t%Ã?ԒxGz80u z`բ3–9 : U֛fv:k.p8(ؠяΧBCQ7 ٥n3d6%] 杍 /,c|B >:\q, >QņLz-IQDH%m:=-VT%"t%dS &`KUde5X{kg,5nE X6Z&{qWp3 Az8ܵ15%o{&\8LƗvb D9m==r̥92'$؁F_PAOB35N"90}#YI"BjyB/6v:Mtdmk~y% 8*_-DHpcIC~  LA?sQoD#h)ͬQ 91r29Iu7~J'=-#NγnU)9xHүbPkh\T%ۙt^aֽC龏_|n,$al ?}#+EBI OGsv9ex"-|=kyz3KR_@hDt@+nFX<] {|`.z;ieE2`J:\"|wXu5O.>gi\In+6Q jܴ(cGu}z)Mb+K+{k bJ= |Dd!=>\AϪ:9*DeT$fk7[T`{oV'VD鸴ƾu @[/񎣴Eu@"no攗0|SUPy{ e@I7׻/t)` Tz8dy":??,|5u}fzA|9`"v*"hw(uMX?/ޞk؊+Dl$Th! [G97&p>$WFy.Bm5%̙c^MJ7Zl.(Yw➿Ɇz (E mhk'Rm wa?aڜ&|Z M'&LFj}F6I20g]j~uf$=8pr}Wҝzw/"PZI#jFBq8r6[ȥ;0'(Yu4z!91MLljlߙ%֤A;/f]O;0stۊ9]|h,΋ta*-B7&+ >vzأJ8(=9GٿOnRٶ OgaRe#TyZ'l{%Ņ /Iie|/F1Dwc1Be;:\Vd9%:I4/HTftWz 52)\uȳΗ]7tWڽ[@Xiv–͐jqFJ= cf^B=٧ 5aFR^ ;[2cOa%Ndϫo88'ΓBbl:SH?L~x,͠i ,ZBLmfwJڰ}T0yG&2e/c^{#KOoVIflz-quN|+O띔qmedoYOq|`[Tqp6ms82ed](^`~D;J0`OQ! nbDTu%޿~doS5gRϒhh0B}Q'ԒhK[ͳ\HjdgjM`ev#s6[f$Y+N9[fYۡXϧ1+{^2˟?s?eGĹǭإFWГ@gO3@~=loԘJ/;3ȭ_x1UdKYIw爴=$] 7v@Q泯+- }uӐRsD?2P r0C6 'X_@<*;< ~lHLBBi9w]gxg؆'eP1=[.XP KE薧I킌M:#dLDG#`0>R֝ی >u_qSf5ĉE4[SKQVKtՙZn0Uc -O2ɷD^f'af46J\B{o:bt>R{ 5-B%!dVyntK?GN/34F@&{>LوUVLfv« (߃Ҳ'ArTR3C8 욙]E)O4 _6Snj_Mxw{jg)W7(*ޜ޽Xe!&vb[g;(S!*㞧dl l ĞQ\~E~"7dgp#d!rqFX[1|9#i9tfwsc*/Cܔqm)Lf :BAB2#qwzlq@Mn4r"̔&w\ؿ靑5p*b:=TYAi!.`+OA6M4?ebzư={z3rU(3e c]hV#;(@[jpgTJÅ߰qs„= NG1"zXH}׹6&C-i?͚64*[-!`s!1 O9ɔ;h*۲BO8C+_1DZIW ij( 9L AR‰(ؒtZ?waE8Gc%΀)2Zm@DK m;AYxL Tw{؈XQ0ˇ2\>vCU￸e p|['硤{1b$]6TV;{xHႩ>Eʅ/Xk#pFZi@JLy;ΪVCr3+oG%}3FHu'+\.țO#8YlP}A%.PE ]k%)nth^z#_0o>,^+~c }o9K hg|Xw=к-:rԩiDϩ~tEoz/3d+KwUE>~,8 Z]vUB T*c;PKzEipFB01,.#c㏷a--d"@['3Sdt{[`N[D‰탹>U#G&oRcl U> j {/%+3Bwvy{̅a1 ~^]W["}R=kʒiOG}~yIǧ*mr _j˄q8N( m05>v{E}ѝvஉ ooY8QDIAEcv8xtÄ}Q:'{'VYtI|: \vYx萭b|AyP%| cXQ|{|'i${|+Id d';FsA{v,1qŬtTΝ T6y -r3tOۃKWf~ @-&Eݎm{l guOGVMKmXKtҘ)z٘!BD~{lWJJ@{op)fɘȹ i2vci! ~~&`v {0]E؋c IuφMnի.=>@YO!qHZ,'|$u!ӽΔ59]6ˁK5 vII9yﱽ&6gDž7"3 B?#SXߦL9aeE=ӥ[4v\I%BFLl5EVDvIiSͥxxrtH;3J13ehtKx=u;2Bo+} Gho\ǤR~ۭ.$0 ߊv+ i)Ev06C* "Ё8<Nip/LsJ~ڵuofxWPk-fTq:rHmN}?յlN 9ܗ @^sMlvY]PgBij^ɺeA[n ^c@㟰~\j7s:ozXԗ2,W 4 *"62M e䤯$)K'ғk‘5D~HNי[qwL{Exf' ߋs8yYg{I% NI bwzrjsh{<`Jw;=4Tu0&8HA2yў}vS KUZE 12it#D[iif\Fb<Ӫ~w&!%PnF1IAS]HÖs}̷lו2(e6 RTULZWŚCn <yDzAD&*O`zwyIHGѩDv,3|);") f2]ꥪ6DaC6:2;.6LLduso9)ylci aVzjD:Za1swؤ>̯&cg-ӋRj̻ӄ"C1}"~SR"a;uL@A3! {wVo z'11Y%hxU`K4EVkHNOHQ]]@/h6BBB%@l+㓥1]h ڏtEIbvl/1x ŭcp!s]AVR?a7[>TVAJH6^ YK*JҨmV;>ZRzKo5}&˚ldo=H~S?͇Ė=nHr646.!͊sZMb~]U2 ^ p'DGdO[maQ7x1'0ܛP=WbPZwF:muø봀n,0W6ۉ'SH =@B2v }ᚫo4!]<#8[CQLwըUxVIgyU!oL] uŎK#>hgF$ssgzhHs9no|k7^H)Y|Sp:h:*'jBL]%O0 bJqLRWduhb(4XD8w5 ޮ`^D,Y[iu}D.bL;|FcK+F΄2p6pBV*L\`ނ]Vfwc~`HI9y/7ğ;E 6+?N4*|!gȗAm%]*b6䛙lhvQ9LA?TE+Zd81^f$:+_"E^(x^QR4RL,HQl4 "̬0CvCaBSS2v]',4}{%`WUU 9zvss-ي89T+QF%6Y@xh,'.\M$a,~ . aǽɄT&"3":Arhзbg3"=_4 M6! ǘvgX sQLNeӖruaVɁF bY|gEE/*DADxanbfpH %0ӱvjHu*WLxr*&!5q48mL;gbv"۩9xZhcJ ẓei5nPil&ԧfC&^VMϮfX1/cN睫x@e\(ozt:'ÂG ;>=b Ďo><듲Ca-@\ s:K;-u=oຠ$Y޾8`FTtŠZ l ;'ݩz>/u@)TMH%} |qË[АZ"+  z۠+.]@N<3r\eW[ݬ<:ࢉR}JOj&Fh#9-~y&Tn/AoM+ -Hb] { nf m1|Wi@U(Wiŝ`nIMόJ*7i׿*5V"#F0{/V;@#BmW7Ią.o>ܲD7mS:v y6(8?~cc]o¹О?p\ k$)/Rܛ9^0v4ҽ+ P'˃3(!́vM'Hk]Hfnx]Gv赚~]k;m;R '(ky]yv2i=$]6J8?F27ȁ{0ZeU/*ξzFC:{ںUgƘ ~s0)d^c&]X_I*16U.ZjkCdrA;aXVt^~&l5v8quF`(\yϣQ̔q g$1kcQA λ 5PA.M g -`oςd7_yJHrEs6<ďmCVfa00|3n-3HQnv_KQRC;8>+ޛ[탚vnz'h"ndiQրMJwU-)h%mUVJi10dzHk[A cϏ./ܻ[olNHEA) Vj\PxօNjW""Rv{Zv?+0ti&,x2M؟o<'XYq&Ll *?Φ/t՜,Dp!Ya`ε/xjeٝyڕ=Nߪ9`쬧dF.CH6w;'Эw/FY0ha(fsW'*K^K'tn'7!J+ϠH^q2\2q P/TRPloMhHZB9Vݷgxk*gJX(j_u=Clp0. !ێN3. NpIg&7Pr .v33G&ыVR~R0ݹlE ier8Ep 2 PxܴE;諊H2O`"QUA ʑ f;3O ) ؝ H8"87b] l̆+E?3'Dv MԘoʗ($t :ڋwd`6޴Yg)e{4HB4QZ´,`a(rUGdՓ b8A˭>{z:cyܬKA:}ӇQEEL`Οi^4bg ȳ# eOޕ'ol !s^km+š@ը44~=z_e^,'^9 @='~Z4j>[$D^/:Z㥿[XB/ mob[RU*cC3`͂#*z0&+A1kF ɹ#~bos֒{ӱ ILQ=QglW!(/qi s)00C85}dc P]k׉CPڪə48\hA n;{56t%Ъ :P^ DnXK|fY2"PEǼYlh_|E*Qb]ޫnP6̜2MS r)׆[ 6\ƺ,Ŵ8^Ʊ3n>I(6]5\v|:Oq WW(]0IaoC~f#,dJ pL_,BqåL/߷;_x7$ 6IZp۪=Jgq)9qp~,ޛqYXA/|4I~w :Bjf 27)Ү-8PNd`pYd]tcyLxPJV~+LJ+lK d0>lzp籴OA6u?9iPQM̆1ҭ yn>vyl 'Y=XG~<bϚQWiФI܅%<g/,;<41+[(ǣ'E/xEcTp85vciC\eqlW;_`B^&r >hD]Oc~;$-M0QTNT )ڎPCmrӇPa[GWltƃ~ i)CLn"O|cm8b 2"Ph?)=s_Am ||i=7bYmȷsld 21c/KHr&<3é &<mAM _B9o"VjmnO2J eNǁ8#f3@\rR^#"A/\:?v[?ZOQD&")4 lvjֆE5[}ܗA;|8?ߴ{W"nfR>z}z$"ePQ-av-A'TiAj2_͕ -4vUJŃʱd9V UpNQSL"?-dzYhw!z坃X.ҀBr$kJ {@IBi6CvGùK `:6߉.oBZA &a v^Dǘ1kVkCagP%_RG?DQc7â%RM #!{ʪ8]b'mWE9soG9P~ ir{/y͑"9/;_0}~ ;AY5v8oύi{|ypW`Ta(OByU^ppt|C[Jr9c^}vP ?ao;NdL׶3qm <<Ѹ G!B WiO{Sʺ"$)DÌs =7Yhއѐb:{ma7WO4"/D C6)\.%D96=Gu-4N#<ͬ(J^T71+A#lz=o,oRcHTN 1Hm;9[fcS2u7X OS'g>xbچyƠdM.ȁZ89vB QH'K2 [9Al}SS#&7ErojD`vqh~ mO^BMFP0f{jHOG;{rCg 蠊VF:QLEtCTj)WOu[mJQhGooE;YAuwic?bNn,~핹ԩ8u5)Pkڠc@!O!rD 4Zۅ֏2>}Ͼ`G$6DP6vfBnʩj$#.ѝj̓ȮoT9b`?#jتV ŀ /{6@qWKy͟D4m(ws1IЪ{nzlbatR]b!]`^{ D PO9v]yԾ8zo+&Ħ~}Slۿ$+ڟ0mHfi@ۀiqا[P'GY_$ԛmjo;BqX(HA 5ݑ>>Ǫ) OE6^Tz\0,#esאZ=J'َ{! Zv;N[J G%I:1}0qJZGKI~A1solBFRG* 'XrrukQֵ;‡"ʸi2$k&bqcہ~5Q0V2xVoIgoYp9ޞ͖i|~u+q)ry?W ǘHbL/#S?9IpIyK u1dsyM+)u@.{ݮkJ#Kyc%/κisuf9LrM^ؾ,_0Ռ]`,}ҋxl[9*&*u]7\˩nf^q䮌@~aj},DCpxd3wzG)t}}gJ7+I`%KFm*6t5/7Ι•**> fuji7(5se4w^H;|M"*g۷xk/z!+PϷ@LE㐟^g4+a.w}Ovxڤ_ؕKjRIR=e{7쥖AI&Ug'P9(Nj&.CBuL!PeMn{")E-O;C]bHmt^ O᳡A)gO򩥱UI%5x[s5iB.h|͙({fR:0ss<;ķ: YU$`޿fB(AN-ޅǻcɽH," H fgŷ1Wx9]NWy'tӳ`R3kE=JՓC&ruK-J},Y§K07O8t9*Jt㟭qT:yjD(u%<8'I=ψh67!"!do,ct8n ~a0i5Eżsf):&[{ïGt^~Reш]L"ud(xnmFeH,r c0XT1-ZhWtŒZ3z#C[qu1<? 3?+r,US'e"/u=S̮"Jf}:Æ+E|!YcKV4I;^ZffJls:igגgojPqGDD'9!\s0^Hto#g|c~dI,wbŒУa漣}iR2pc?RMQST.3ð*z*acZpIèJCxp(sIWG9_3rK|7ևx!Qd7_\zB*c(|.zf =G R^7{(, zۮԪASE&ytw،³p2*[0s%\GۄN"RHԳ,xXTWFH ``p< z*s}lGk6.|eOZm(>P͂5Yn |W~.Upf&e>[}L8=}Wix!56WxUbw+Ղ AEUuS++! ë*S潸?*B\.Y\DoO3 TWCiVCy~C6 sd{aB(Gf?'Jx>BN|7%~5Z R!(UdA7j2C{!YݲҲ1Tg3ka&J!a×\?Ns #a'rڷa|H kysʾAK4!}- )8q]3BuTkg8{H6z\3EUSPvsD8hw20_4h Y+3mZH_RV]V/8lꝴ1qkW61\df5:آLL< [KT*+S+ʹ.Դ8A6Au+͟G-sO] pT&pۈI~%v߷S7M6cD1=m!eK\?oث]77mG'wjZ:(EB 3?v3 /cvCcIo([L=&k`v2JiV()Z*))}/ e.#!)0ȼ&1yp8 (P<0VlGP5ep?n'Jo054Ф4 |^gevEH7-}9Ce[jhek;Påk3;GH!p}aBy%#%-pgЗ)̮s897X4 , [˵LdQݚUdt/'*@ʯ,\71Ke6dPz^<Gg}KvgqwB|f%Mm}藈A n,};B SaD>d. ]f`]~%.^ϳ`dY;B w\j!͊|Ij8/Icȷ:D%0wq K!!eiMDĹy DD6qw闓EhPoƢ a?{KB'vPk]ioѮ$[Hjp'(e L g? l}!peZVCI\Ci3AF`4$\;t#r6N~\o64fJ-n2 zY#:a4WfBt,J\ TG9ʚ(hɪ=iS'^Cdk'ChV%_dTGx"GޭG?mۈGÞ ){\ K@PwNxv@Ub;H~;^ |8) Zj)UDno5>$Z9Zo}`n#/ؾ⼳ɻ3 bB~̪41Of B?sCᨈ|%[кV\#S;% κ$N&e1 Oܯ=~򏨒o~v{LZ5HTycߛA$TOKf 8#5$:QM|\" M V7kY]Wmh:LxiIh6'IEp?IyEH9D%ѻ|g]@ 8Q{%i>sIZ @J شa"ncadċl^] p]fo2@gGdt:ฒtL#kNl{yoJޅl2=tj>+qD 6tت: ?a$ْa4&hs%;Ьrl5h2@m^)1Z ۢ0Puy"k, z$2QCe%a͌1Ufzul|],^1P0+Fb 3U裉(s>3s'_t+朌m8N-̚)GzpnuuYs\۸bdfCI̴=iAǞZyOˌ&\Q¾i??׼)O҂YbhVԊ/X2f u^J.)OJ.̼ش6*bN+ǰ B2%ӚJUMʲhVA!!Gd)4./E5}ɬ 8M&Q8)C8{ Q ^BMA3 zr `4dd;llkC>-̣Gi Uzr㒸&@ E\ w%woΩ:薮B 3.Og .D:K&*T{Vds y*R\5QuZI<%K2l rq|1y 8?"×!Nʛ&TRx.wt{.)?M@FK7wz^U܋ 2MKVGb;he1ZxbĎ}Y24111N9L3\hΨ [\?(Ԭ*r8V^; ?IuEߣ{gX SZD^W齛`P*h> eT'vS6a6_oDֻY ׂwu&LTVo )AsȿLZ]'qb(`V:^);ju9sd䍹8'tf忶虱'YyVg"YYj=nJlzq"N[~zZ(aiARLe6с] 5{d@BC4]p.WHiNu ٖ@<-v)d]Gs1P^R+^3'YadI!`k=u"E,)LwLJk"iq.g;E=QFGCerk.0fx%pOWT ?h*{v[[dz4xhn~Bk0[~BmnwЛ8:5weD{mG[xr34w!wӐ%n[,e*)( UK ֶXAg\Q=>Nw=p !-J>36R;%o :E/A[3]S̘Y=>v.{ u^sB%6?إT%۟#iX잌iWq2y!@j֘ɠCǶ1Zt˦],e0V9s}iA?q%[:04M~ϖym2d4 `Jc­]DAQtϽpHyKjҶ"Z kr n)2\\UPA87V{DˆH2InXB&wÇ_9փm5HZ͹yWRZZ vZƬfGޔoII-ǭѓƼ.;i +qu+96;PSxl^SwS'D0hn=+N0s@k/U=2['4 >͂ҢADH w4θ0=>f@S"ゅ$Ыp&M_,y%y*(P$ZӍJ9Nۈ)17~Rq$EUy\gJɩ:T:U??&q[Hb F&w{wVrV}Xd)gTXmJm{bL-<\Σ82I__qOz&U#]FF;cj<~& -R@:,Y5x%|2G}Oq-3@ܜA&G[#/;#+Sym's!aiwIw:#7@@sJRIg4X~imDX޶O1;LQoG|o74!&̡ƛ&Kbݘ:t N#'?Ux5s_|K[vC# }'ĢVOVZ3zuu\-'qS% zo;&uԲ!pqrƾ!T,96HJ? 聜 V E />2YT?@} ͹>3s *(.)t6_퍨5XΞ+k,+\[9Ey Z6DWc/kloU Na;0siboo3)Bo[M`1T)GMx!bhQ>8_O)s&yfӢ؅;AIbTd}C"fOfŎzY~+*B9Bx1OB^{F<΁7jc"cC"kPy Hzn7Lm {v? \5QĜRܝ81pWXgIkfs^wNtwl)S6~4y{_U44 \{Hm)b`~9/lf>k GE OlNޱ`Gz#6?%(mr++}2,PZB#$m{߳ELD!炻lD %淄A@E`^>}1a1Ay5WO`4dI^X3h1"+6gEݰOb'+jx=o/]i4NrXʣ_lT=&?'?gW|641ʭ@B.J~WEz;tmHώp:@$L۞_:JmN:X"Iw2Lkڜ`[1L-26@\+x;,ZD:'X,"N.8Q~qaU?S+! 橜D,ˎ"'ؾ'L-!P*hٱ|v M>+77ڔxu3/!f&ߒpcIiSt{Y(1:|D^\pI2)- b96=pλܣ-Olhs gZ`W1']h EDu=)[{z^ eRl嬯vG *5.Dilǟ%2Lܡ*+xp+M&¦TS 9lBT.:+%G$]\u | Cd:1?JGQVTi3BQ@Jl^5/;1xC^wT4>ͼE]p*r #/S\i?ZH"i/A= wG}U1E 4&A rmtp̶>8}0{I%e#B?ãۧupiץiF|tFgTgu`3D\G%6{ \b΍=Ld+grP0C>f&{@ѤPUSh>ɜP`_ƣ?@{Lve/B Kx>^bS>ll\EgxVPآ@ +gb(:'Z%5caiH?,q ,ݏG&ʇ7/e*ZƕL)~ǖ;%ŻB `*1p0E <\Ⴈ|U b(CKs~hprtEz>8͏ۢ  4[ BXv"]'όrkf+Sl"goP_z(!ḫġ>˕5^ X]sȀjGlYcs賌0 km(ZFϧ(`eAN29Or/?e[YG.dQ TqȊXh&KpugƊ.G,'SW-F>}?daIG2)OT$F-pńlD]^u*# bTx'm ,eRw7zIH@rOnE[ M̪+5Fi|5-cgfar$=b֙n;Ҝû87g fσLW& I*.A.t'o`I঴'#rY޽ҭ`M|yjpRO=yWsѪL:R;&`ˁ=RtwRen̝#9{ϖZf ?F礱Zؾ58(i푙<7o$P B#gn֝'KN>rqV#)i xELeDN!m.û=ǝBlP 0nB~Іv';K@3?Zn  }B͹ྃdnjԠ?/R5+ro Ҡ1e> x*-4=Dr_ Ŏ^ƽw/_8bOArBVw)%COGPEh޺]) \+cESKhpNVӉ꥓ȒN"f[mn¬:!R=i[""+9LIODl Ah.Y~ ^c;R_ %XydnYMg4c5b%APؚo/9 %'E"{Ɲ5_ &`4#NB`5cBY% w`꽂ľ * _TO3_[;^Ʊ4__*iri܌⩷.uWU'l8'PC^ïnuU҆kW:?(˓B=P_٭(#A@f㘢 c@+q\O\nI>#_~x{F+46\O:ph]iAԧ$B`COs IHSggPȻð*D4*L!DWS{&޶*ߑhBqët6<|xABJCg+p/v Ӝ5ֵ2RQSdj1vV+[[X($ף LztQ0, 0yh ٪ ]?Z!8:1]/'UEAzY(sܘrP32rf0ev}:*0N_ibS٨l*mЙ8MJ}75^=KKuwf Pu_`rXCA58Cvةj1 ,Q^f5p[a utJ)^ GH<}iLucaǤ\_;ykpcҿj5p Ӥzmޏ‚C^*5OD D%T#zWɎ{YM .I_/?.x9,DLTqqͷl=;/e[?-MCjJ~O9,^[2%/%dYןMa֛E?IxF \M"e/iYs1yw[O^D>8 E+/e2f֟߷RHvJ>9UetJOޒc;NU+k#6N珙3!Ojh5 rv%z_yÄe5d#4\De[!I?q ګڨ5.R4 ͱZo=C].T ˩?oy)kuc0&Ք^s5c3JI#&QqGSpÜfQTG1%PL{|8FWiVGfեl[!hh~@(%]2 li(EVi5/[&xegep‘l1/bjOljF°7uZ_T1䜌y׈_8E82@Y!1odOU@x1ś+6[^J"m"\c(e+Kd-ɢ璿 P >!@0bf9/+̗BiLȍa}F[إPwl\:aosfQ.89SFM'%2E8ʹsR*Xsm9;]t,jقIoNd%cS_Cÿei+'E!;JyAN2 ,!PqXI=3volJ5'EѱdLrųj 0O2?*%&7'=x N~r-(S6WbtZW>.kĥȏ|E;><=>cw-RU ;l ^+*V35ߧ5кƚXW_¹EQb.{xh9,8]婈s4'~cU6CVCuL$A?nN}ԑF3\뭯rӳ9E*&^vEά0Ys]!!/YiVyٸT wBGP xkq2aS_F<D 6go[L~\X(λnIEDbڌ&C_`]9_Nlqקx,^egrݼn\sl8IbȂo!6>9jY5MTpWY|R]~lMLN=.I+iSCa]_9U=EJ^2]zMŲr`a.רLO)N@m#LVQxΗngt;[!B3K]+֌ /Q?GrL3v]"![efFB"x~]InXj4yaT0eRUrBXȨL+V^Q(mrYYXEPlHU yU]j{0=/`/+keuHLgV4^}//#!]VXW1 4Њ=d~>Ao{WpQȝ ߉${uSn,IE٤mq4 Xۦ]/=҃u99 Z6T$DQ;y 9x%$nS|i&=jRO$Ys! $uZ"14poIɢiSV(nfd|ysb WWt&Ea_>ŏLLdz:UZm |yRKb@GN~<&QƏ!zs 03xMT#Eq zgǿG9#2GXg%d1CO6U02N,3I>R8P1Av4Y+05= fY 4AoR6\)QͷezGvb~و )7NvZy=.WJ&lK3'TWmϾ/.xJ;ϾYv-[ZXp䙃@ӌٛgtܹ.tB.'~^@M_͊o?fRS8oiX3Y]ҫ.ڄ |ɞd0|$)gH,'h)%}`mWZ/ ɾ?[C cmvt.$lKZ$%V-/~)ZIV#)PlKZUz|f-hВݖJ`8D> \|?pibhh~Z(Js)#v\};z , mab}ht^>V-c"UsGݺ=4X~øɮ:Y+rW𻔅o㖿uRpKQ& 2Fr }bw`l0_ @°34 񍏬đs;{0GKIzہseӐC!ƆMOx%R`ixtꦨgIf9F->ksqL%롥g6͒:YIځ@6 FK&IRn~K0EJ.& x+f?\%($t-az7dX5V$%Q;.9gVYg ߐ(vg$QOJˢG:KM tCO9-rU=1Vum+HȓU`|Z1{^x?ԛw\[s\pI剬c/m:%Dr-]SH9j$|2Y``;J:te\2{[~) XIzxpK"> '7IE)Pr{ਪ;>:2벓cgS."}lS ."%JGW^iZ9e? uy sqC-wšT6" mHP7\!ڨ$ydC'' Eeqp ߋyˮ9^ωe)Ǹ(ư`@ᒕ\:Pȅcn-O#!) k9$A*' Ԛ>F"BOՏr/sueNXd9ɩ^+ /AOЛ?«WZz`QY^R>>?kbH*my%@vSj8dm ,E*B1_y#]xU0nn8 ۞&%^FYBuYE%ʑY%\mΟ%#O|$뻫6 5E10rzDWGn:n`t 'aA.*D%kz4/(nO'=/C mN=j24︷6J0A2;™ uRv1JaNq/[>=ybԡE{p@a.ݟcvO-߬]$. د)C&T*=KSRo4lꖘ 7ﯹƠp;99Jc7.Zq.yej_AYzȨG 2ljJDk)1ɬ%`y*mtl7򈊒KEƈ5Ŷh. [D)\'i͹#OŠf_C2 quǯXozpn̚Fd*Fyxzces| $~e%V\qe,] 9_#&m$18{SL$Wj̒gb dWwB(j9|j+(T2Hc@6T'󋫮L"*MFU; S_r9o΋][_O4}8z1-z8[j'˨2/J["gAG3Y⽈V k85qW$]Jې -*<%Ö&=j4 bH|ت4LDu0LFuXՔ|EԨNaN)UTFKB |4LJUb֝emfssǃ?4n U7Q~Sw);TcCpmUFrK-P7QUTf,1/ j{E(Ԑ]ѶBm2ŋM}RmpcEnMbZu1;dQ@o-Ӵ\+\R@4MzZc;XSƳ=]#;V>y '6uM:g'+NB&¢UKK } \\Rp0hiԨQO('m!r .e΋ckq2Ec}Dh⃔L\"ϯ[4ŠU}XJo-hyE-pY|Y'cYBW~fS_JR-txBoo_S0Y'3sl7qA-Lg==`jPMs F_?2Jѽ `A=rQ lܵzHoۦ>7h﹮EZ6w[E4Vd'b[CV;PW3K",86ƅ.exŇ(S $\i T.@*T$ch4tT 6*m8*+EPB`c& Yn̦`t{hҎ]SVpʑ!@jQ3k3C'iݱzDLo1_v>Rx*zMbXFu =; t7.pz!> FId 5z`r)IoZ 9b6@\L+`X-kJ-`](3]0~t&@`v1.HfJ,}Th!}JY!Nb"XvilEZT+݆L%sCJ38@HBʗZ#< dyNvJ4*Xz:uηLkş"92ʦ6]f6DAe1{dIy .[LzL&'rff-$J)}C]& ҹrqI)6D|EZpmM=ɻAs/Ѵ&F(6b?m(LSpp`\B֤+{=a8ѫȫ-:ɶ3e3jHU6UŵùE+$ʵa3A"Aɏ,_Pi.vAhQ%GaO{H,\uObؖFĸtQ dOQVLon/eUh L8eB8䌩'#up(SqF 7V!,A Ñkށh9S5xb1"( ^)$hyE(gʥ%= \RnEcdJ%N}qX˒~j~Q:I!j! qejRLjgiVO2d0/󰫖lD ;/Y\jcZ5%dtQX ]e&wc^H-}yB _NAm3MArkMl1!!sFz>뒢]>bb۵A D~OSU.Oq_1bQ"f+~qޔ襀s_zӀhjW/OR.CeBl]eFK1W.ЛAD7eusDQ9 AYqh=+XnGGzҵZ絁W3u )jO1HgQdy o%8KoVҀ?!l)U/V'(~5Ww0eq;w#ׂq`7qCI41lf6PIkPA4..;/78IH!T÷lc$DT % ٌ`tF Ԕq@_2L lĖt9̭$(\dT B),8*$ ӂ+˱$!}`5ߨ݀5iHo pw5ymݡzJ05WAW橳(mVH*6?歎^:gVs&1$2(g>C~qxDuDWH{5 \-EBPǒXV|_Ry-v&ks CeezVQrT~TS~y\Z>ۣ>^J vO9=d"d?4FNM31΁]} 4Gjk]zNBOlIռ0I& -z 'cuvΘ/FixSŐlM %*1C|ZnBarLni#(>ؠk{%+C=%@+fG@( z>H7d3=\@!oWBʕuX1=4Ry8gΩFKN+ճ W_.p 0hGq_4t:z9̓iyЇc~]4MKN1DkmtJq'xWnc*Rc?>>Ex0aDO9QOubw/O5u[6+b^}M}A[EKAݝ>6.)#[9 ѐQvfQRdU]ϠcڿP UR7LU-._If(1%NSnhFPVGB"&,i]#=_J@wU9 fߨjPKhN5>&zg'0Ob"掑n W+ˬ$Zu3Y!#OI)+;y&z'RdL:}9VAsR0s@|JR D~(JQTG[ھ\[WΟ9 ,0/fiyc@r; !CkKBXlRfw;↠W8/#zr ZNKYѼ4Qd2Ql4aIJZAz`bi儱S$p4} R(؂kQkL(:l5|3Q? ˛E4t`'V/A51A<-L/wan/}tksTj%5{n&^A Ȧ{]&j2ʚ(ײyrn 3` 'i᛾W6le fJ=͎s7vNw),\S߲/4cLnN ӫXlT]%pFpKeqPK^ vzQ5UVuY[qo-(SX񄦁XcԮZ}|4]JoVM"k-UԸo oȏG\r}KgR[ݦkS(a T7p5FX{r` 7x$Gi# Cs… 9XrزFݫ#vSI [[1NCsz[T&i::e)UĠVB{]zoPZ dS)V"8SosBv J˗Q1SyrD8C>yeu0EֈE1gM]#7h!Ry麊"¿kǼA]a '>Ēz%zO_x^` Ub{uh{ m Ii/ Uz8跕D-G F':=?_%AJ F$U8אW p 3Jd~ >3K)P¹HռNK'U:sG &g] EoVQ[Q׷r_71)C$OV{'x"znkL']3(rR 49n mڅw<;- ϗw䟪[,Vnor GNpQ v7$34)Nj/>j8X=}U:ZZAͽ0I `%2qR|GY26BRHxcQxUiSEaf`Az$Q֢Pnc ~RQ`am\rd6'% Ӑ.UF̞ 7AM"^nњK- t ,gKPx2ƞLAK*dt6}|N+MkcsdTxیh{>Aq[|'$pU)θ艸de3ΓIMm|| Sb9H ؇򎓙ae43i:m)J@^P6 Vc9઀{D'>3ah(pMj~\b͝#Sy]l@5PhiowutP1CBo 'ru3JҬYN%xBdn@e.Gb{s7OX} MY }wBю⬻V{iﯟey *2ω!/*#Q7|`j my&F`b CXJ^ 4ycpIbpl CC%,}ΛeRMա4~cI#l&Ͳh! XqE\LK.d9N *oi뜊OBFsMw|1^%*=iꝅB(hz^&FyEj( :PzG 5h >@ H N'/ s . !ֲHFD]W& Q{2uJX܊Yf}U^K#k:h -P_5 CC0.8MԀHlmKVW0dYo]ZmnsœSauq@EJu)X"~9FI\ޝGsIp"𝺊8>i[6Ezw&xs 6q^BKSf]@d}$EMRgϸ{-׺Vd Kglz:[jMʠtq4αl D4|Lx ǩYS:2r}sJ̎{O",aKM_FEZB'h|%bܓud!eeRvS\ZxʥbaVg2L0ӎr$vQr.SD؇R [ࠝr[{߮ hy{б!s:OwDY6MzG>E4_+kfQC[ ;V4WE3}#!u IWGḒVt];cABmTCSmk$_7>]?ݸwjĪ x6 A<4H7N7F,މi6)`\cܦ9C\_a-)oG~c] },d 5Z6cXR*F$g Ȯ,0gRo*!C( .KVeQ74*L)r^cŸj蹌Z&+@5TQ p|Z3 `ELz(eӈE3XɃI;K4blzjJ*= ͧ!^e{!T|ہb9)([/P8b;%P~i ~cl[ Vcyp~)ˈ7*!hA6hur T/r/jW! d)pP!Qm?ul4?(\?A%ui<`JnAJoQӪǼBb*HuZ摐sB%KR$>zaԪ܎C4jaV|7pv)Ze;T=u oɈw%-1%S\1BS곳9Ғ>0/]W2Xγ 4ۉVBՠA,({Ȏge<V,LMV$ | K\ۯ\zMCZ6QA1aG)I o&,Bν&yϗ#^OqjGZ߈2WS KeDF!2>x0v6E~ws &֍y5a~W|X Ma p]ٛ~/12%+N wܔof[gdq}6ATo]Zi9% >}C;7pbJh6x߀ xEaReߒ$MPl2,t#$f_snjo0V,Imj#׿W vvB|د: ]LQ8C l~<܃>=rw QD8=h +zr! 'rMɁ;R n W,.#da-yYyKVHR%n}, CV kYQ$m_Šwa&EehlEaC<͆6 >"g.PpyB tzNQ 9)Ѕ'9'8Ԥd{(n(g c[\3(uIOxe=GDHIZC[ /hDHb47_';Z =])1 2k-< E'(yde} CST9QF jzLPؙF鱎 Lm@W3eWқYnɱƸJVdp52[:aj!qaRn"ձNSX2 T1kΦd xR* w0U0}˿"ZhCܸPI9 RdWHK;9RբLH?ޚ#x%xBfNθiݰ/mM>)B8fښen[.^w^QJ0;ʚ2#To 7+eg(cHUK ,< kopcHZʜSP 6HM|:xMWn¼RQc5θfYlY"?zz܍<5ki֔2Z^ma^nP2稼v8" )*lLjOH K1I6FX@ mW9>Lj3U_+he0i\MKU)(Zx?ꞗdY7J@#?tZIf:kԂ]a۩$cCt^TGْnh_۔B,-ѢQ\E2R/f~2*)߾A-k< :'hA2f~ž@s{z)-1cɂǃ6jPGPpza+5<ܲL^= |H<0 x<+օH˹.sjNND s"&4[y傧@M '8@4ԣo"ҵ)ivK*rXKt:Q<Kx jBҶrV418eB40[}eo;Ә^btVD2s-1Duap!lԤNj*( 3rM|_7J>LBYo3 ~s/¬l<.5oa q) [j5ŷ#A؆5sB,\vB o"Ş=bs-Oh#Dϱwi_/?)OAT!iTh]V8[.,ҴIYx;WœnO^qQeCGrJ'8@9H3D|t(t$> =?Bokrmj|$y_״;H)po _sIO~NRTs6qG ymi._M7:m`M7q)7d寇֑)8qR#g`8W: zA?׬֑*u{uV xg2C(8C͜ҹ[ o2i˧0 QBWG\>noA8} % IranF=dxM#EXQbgNf9ȨY 0m_ftP3_U1o r9WfVOW qR_yBsùЧhDZ)BG!V\1P]6EUi@AgfhX1s*tm`<ω})b.1"5C b`$n~,#Cڅ Qf&ݓv{j.'p Bg}ulKp- 8mӼ.W׼2 })kEr`5`ȲqGZ<+ hoD&?;F3ME W겤r,d_/ת"a;qsݠwr?v0ZC`wVdΛf\)OakY`LRRa.::Һ׉NK }~RGI/*6MJ \r6hL)P4A9tή*|ǷelɢrT7,1.UґlaSPy*f]HX8jGSݹR_ =w3_llqH1"o*uuGㅵIN\oKwC73tesGH̙s<|?h[p5fmv٪嬪WW-Joh<]:NJ Ӷg$M|W:62>nH UP\Cڈ9ŭ~N (>}rXˉQ*]v[. l۲5H!ݜb㧨Pэҫt[c,m:hT!͵g؊ %ﳬ.I3!{q4)40d@ O~7a`-@=iJWRDa%@qs!1Ͳ)x~S !7/&eD G3D2>lH[C}^պ!c/Dlq7NeQM [sDً [45`C "X_HLl1$4(#64=A9D!CWY ž~f!:CܓAbx)#~2a"2W{$!YB)e{5PQ@H3ydAhTau߯2y~?1**gk[x Pp%|A`-*Y:[ eDZޅCHn*ࡀ!X\8/ DFX$"31;}o?qe[m>ՖWOЪ+5:>^PT1ob$3ϦN>YwJNXQ (ĕۡ!xڄak;ł87XIX Wjxr VrW v@ղtYVT *E8@L8ΛvIW:7sL"~e(FQzkT{/lHjY: \&{q@n*]sM4XĹ\aIUuY+3p9ʁ@ [5STD%Tf?H;QfM ;Og/~Lx:䡾C )ΦQnOh=?1ɳll3-=hk[E$ gU-l( -IINo]`y9ێL7q(Y3P8jv,k2غhHt_(/eȆS r=wR&8nҠgךʯZYv]Jm8T.JLb0]rZS/jK&w `NTM;spÏjI? "YV#vy6l9Ɍ'27iO Y_oȚ%jyb7I{ $7ow"6DwoO_gqD"=WWup !9q \>¢z5x:'}VWh>%1e = NY5_>MGvg]̇=B<$O+9/X3N$LM'A`0қgZz/t#VxcSZskZ*<01Uz&h!%Dx(2IPh:W ^3G;rEdc;bcg`&Vc;uH+a瞣Hbo=mY],/8_Zd\ *qv# )[C7wgw|^s4~efg)P2oq>4ρwZ4dk!7\s*,6 ,P a/jЇIFe/vC &w e&> AɫH6ƒXWu.]*q tA*X0eVa;!V5h|?vS5H(Bӿ݅V6~(Q@PFHC ̧P?5>Y>ENE)'0Ȣc(ϑo½6~G;Y{NV=Y hs:%.iwB{e2gb& z!OT4>8j_r[@T>!59xQ53ʷc!hz]_Ҝ5m,ZГKyꟙ8YVM};C6K|]_]<羃=]!):[{Ұ/hXkp*q} ;$wZ4w!>j3\GD}ӌvCv儁hEH;X?)m\kw*+s `J(;@3@JC =)i$c}Y"I4 e1`(rp"[y 1:V׮81+/ 7 ]R9v/W;cfsp2L+N7eJ-KǍA/R>K#QDtkCŊ#')1k?/4S\.\PE1v>>nصh%9`ZsۼwzW؈cZRQF^x(}S~{5|kJ6`;\- Y8P{O;L"ib'M]d[AX~?.~uDaaCz-!F%s r( 22Kݯ5[]k@gabp! -B}]kYI!ӴSG`Qay,n/_t؟QHٍj@*u]qCK17R=xų(2JD"GQd Jͭi; =">$<~Cy3'2MFоuʧ\v%#czo^I^wDm=iwpX뗡tF,T]1otRA$@l'qtk9aVr6T&Z)$W}PAz.?=:m%fIOtI{vD͠Ij9guHʪW(u  if}i7Cаq֛5j\,Õa7l!ڎ]h~SУZ?CG.z_'{^ ȨAe# *R6 '"3-`KX͐kU 2}h&0ĩ;j{bښ1`lV\(K}R(_pi;Q霍페9pFt!1+42mӫ!dկ k5 J\=G0ݷ?k4}VZVuY8(>EV O&G5ll[j/,>F!Oc:կ!GaD ghtg/ɟ[P#rb[]h?& f i|+ߧ.5%I[+f;10;sN1&bY|>kb#1ȽOQ9G3gs&\(ԑlcE"@&]Bpc?ٜ$+d_lCX^Zz~b@icsYb ,[t"o,6L ZH{Bſ6ʑqyew7ڄheĎ3f]DCS{5/!t}!9 4}n,\x^ A܏Tdc:nvn^y6; >՝:@IJ*H;/Ej]g~ ”,.nIϓ`#lZNhmAT?@>8N|v,<۽p{鉏cA({$?i5 1d W 4Se^2AOli%lzɋܽF/ؤS)7KhvaCHeܚ=Æ|'ׇmXiCďuHf8vOќroD @i(뻙ܫYN/LJRc@KdS=}qWlMAߓ.S5A_pP@fTՈo- `ֱK;on89TFGw,:,Dx̊@Ӡ$J?ӄb+P.cI9YçleGZ+K,m'9|oE<"zV45uڲ^;hM1&kx رD_0fe&OVO_B>2Nz6LAk,xi1ۘ6BI`.;MBEh_CQc aYėh(}3%f,Bs6N(;9ı+;Gmw_ ȧ?̵o4ܙqI Gi'FƲA[+I 9) FCpo2!뼔6b ҂fƒze 7W9w-8 Nxu>s_3L ^t(΃c5V>T ^T^s\7ߩu2\[1㣑J% Y;ou9dJA~doԚ/ZVi+Jkh$9BL)>$*ޏ3jBhZ&2PQY- ۯJ'lݤ L+ ] j!o%ve h?hbRA>\˶mL 쎞ɥ z pװx[uWxË3@E-Uhezkl59zM<5+s^7%+|=HBzw|rw m!:*] 쩴r >u؇$۶>?q;$m:s3SST[n,dFSuیIKL2f#)n9'r 9O&0LW2W^7)D 6p} js }@ *O[|{iSp<>nyv\ʢ>F/ܹ cAO471