openldap-clients-2.4.44-21.el7_6$>QG,R>8?d # 904;D p $ L  p  D    H  [( 8 f94f:L+fGH0IXY\] ^ b+defltudv wxxydCopenldap-clients2.4.4421.el7_6LDAP client utilitiesOpenLDAP is an open-source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. LDAP is a set of protocols for accessing directory services (usually phone book style information, but other information is possible) over the Internet, similar to the way DNS (Domain Name System) information is propagated over the Internet. The openldap-clients package contains the client programs needed for accessing and modifying OpenLDAP directories.\Px86-01.bsys.centos.orgCentOSOpenLDAPCentOS BuildSystem Applications/Internethttp://www.openldap.org/linuxx86_64 H@hP@OMP ; % f L 00h큤\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\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-2.4.44-21.el7_6.src.rpmopenldap-clientsopenldap-clients(x86-64)@@@@@@@@@@@@   @ libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libsasl2.so.3()(64bit)openldap(x86-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)rpmlib(PayloadIsXz)2.4.44-21.el7_63.0.4-14.6.0-14.0-15.2-14.11.3\@[{[r@[+@[+@Zľ@Z@ZqZWQZV@ZOYZ@YYYY6@X @X,X,XlWQWv[@WL+@WL+@V@V@UU@U(U3@UUn@U\w@TLTxcTto@S @R'R>RURRkR@M8#M%L[@L@LΫLwLH2LEL,@L,@L@K@K @Kg@KrKKf@KUKKK y@K>JĴJ_@J@Jv@J@J@Ju@J@JjJKOJ.NI@In@I2IIq@IFFH@H8@H@Hz@HkmHQH=I@H)G@G΋@GƢ@G@GD@GGG@GGGNGSG/G@GFl@FF%@F@F$@FFF@F@FR@F,Eّ@Et E[@E?QEE@D@D@DDP@CtC@C.CCáCqCCs6@Cs6@CJWC;@C @B=BTBBx@Bn-@Bn-@B$Y@B$Y@B$Y@AAڅ@AvA[@A+-A$@A@@6@@@@@@c@@@}'@r@h@Dw@@9@@,@@(@ @@@@?F@???\@??@?6?r?a@?L@?!?'@??>@??@?&@>@>܍>@>F>R@>]>>G@>.>@=@==z@=z@=ϛ=a@=S= =@=j@<@ - 2.4.44-21Matus Honek - 2.4.44-20Matus Honek - 2.4.44-19Matus Honek - 2.4.44-18Matus Honek - 2.4.44-17Matus Honek - 2.4.44-16Matus Honek - 2.4.44-14Matus Honek - 2.4.44-13Matus Honek - 2.4.44-12Matus Honek - 2.4.44-11Matus Honek - 2.4.44-10Matus Honek - 2.4.44-9Matus Honek - 2.4.44-8Matus Honek - 2.4.44-7Matus Honek - 2.4.44-6Matus Honek - 2.4.44-5Matus Honek - 2.4.44-4Matus Honek - 2.4.44-3Matus Honek - 2.4.44-2Matus Honek - 2.4.44-1Matus Honek - 2.4.40-13Matus Honek - 2.4.40-12Matus Honek - 2.4.40-11Matus Honek - 2.4.40-10Matúš Honěk - 2.4.40-9Matúš Honěk - 2.4.40-8Matúš Honěk - 2.4.40-7Matúš Honěk - 2.4.40-6Matúš Honěk - 2.4.40-5Matúš Honěk - 2.4.40-4Matúš Honěk - 2.4.40-3Matúš Honěk - 2.4.40-2Matúš Honěk - 2.4.40-1Jan Synáček - 2.4.39-6Jan Synáček - 2.4.39-5Jan Synáček - 2.4.39-4Jan Synáček - 2.4.39-3Jan Synáček - 2.4.39-2Jan Synáček - 2.4.39-1Daniel Mach - 2.4.35-12Jan Synáček - 2.4.35-11Daniel Mach - 2.4.35-10Jan Synáček - 2.4.35-9Jan Synáček - 2.4.35-8Jan Synáček - 2.4.35-7Jan Synáček - 2.4.35-6Jan Synáček - 2.4.35-5Jan Synáček 2.4.35-4Jan Synáček 2.4.35-3Jan Synáček 2.4.35-2Jan Synáček 2.4.35-1Jan Synáček 2.4.34-2Jan Synáček 2.4.34-1Jan Vcelak 2.4.34-1Jan Synáček 2.4.33-4Jan Vcelak 2.4.33-3Jan Vcelak 2.4.33-2Jan Vcelak 2.4.33-1Jan Vcelak 2.4.32-3Jan Vcelak 2.4.32-2Jan Vcelak 2.4.32-1Jan Vcelak 2.4.31-7Jan Vcelak 2.4.31-6Jan Vcelak 2.4.31-5Jan Vcelak 2.4.31-4Jan Vcelak 2.4.31-3Jan Vcelak 2.4.31-2Jan Vcelak 2.4.31-1Jan Vcelak 2.4.30-3Jan Synáček 2.4.30-2Jan Vcelak 2.4.30-1Jan Vcelak 2.4.29-4Jan Vcelak 2.4.29-3Jan Vcelak 2.4.29-2Jan Vcelak 2.4.29-1Jan Vcelak 2.4.28-3Fedora Release Engineering - 2.4.28-2Jan Vcelak 2.4.28-1Jan Vcelak 2.4.26-6Jan Vcelak 2.4.26-5Jan Vcelak 2.4.26-4Jan Vcelak 2.4.26-3Jan Vcelak 2.4.26-2Rex Dieter - 2.4.26-1.1Jan Vcelak 2.4.26-1Jan Vcelak 2.4.25-1Jan Vcelak 2.4.24-2Jan Vcelak 2.4.24-1Fedora Release Engineering - 2.4.23-9Jan Vcelak 2.4.23-8Jan Vcelak 2.4.23-7Jan Vcelak 2.4.23-6Jan Vcelak 2.4.23-5Jan Vcelak 2.4.23-4Jan Vcelak 2.4.23-3Jan Vcelak 2.4.23-2Jan Vcelak 2.4.23-1Jan Vcelak 2.4.22-7Jan Vcelak - 2.4.22-6Jan Zeleny - 2.4.22-5Jan Zeleny - 2.4.22-4Rich Megginson - 2.4.22-3Jan Zeleny - 2.4.22-2Jan Zeleny - 2.4.22-1Jan Zeleny - 2.4.21-6Jan Zeleny - 2.4.21-5Jan Zeleny - 2.4.21-4Jan Zeleny - 2.4.21-3Jan Zeleny - 2.4.21-2Jan Zeleny - 2.4.21-1Jan Zeleny - 2.4.19-3Jan Zeleny - 2.4.19-2Jan Zeleny - 2.4.19-1Jan Zeleny 2.4.18-4Jan Zeleny 2.4.18-3Jan Zeleny 2.4.18-2Jan Zeleny 2.4.18-1Jan Zeleny 2.4.16-7Jan Zeleny 2.4.16-6Tomas Mraz - 2.4.16-5Jan Zeleny 2.4.16-4Fedora Release Engineering - 2.4.16-2Jan Zeleny 2.4.16-1Jan Zeleny 2.4.15-4Jan Zeleny 2.4.15-3Jan Zeleny 2.4.15-2Jan Safranek 2.4.15-1Jan Safranek 2.4.14-1Tomas Mraz 2.4.12-3Caolán McNamara 2.4.12-2Jan Safranek 2.4.12-1Jan Safranek 2.4.11-3Jan Safranek 2.4.11-2Jan Safranek 2.4.11-1Jan Safranek 2.4.10-2Jan Safranek 2.4.10-1Jan Safranek 2.4.9-5Jan Safranek 2.4.9-4Jan Safranek 2.4.8-4Jan Safranek 2.4.8-3Jan Safranek 2.4.8-2Jan Safranek 2.4.8-1Jan Safranek 2.4.7-7Jan Safranek 2.4.7-6Jan Safranek 2.4.7-5Jan Safranek 2.4.7-4Jan Safranek 2.4.7-3Jan Safranek 2.4.7-2Jan Safranek 2.4.7-1Jan Safranek 2.4.6-1Jan Safranek 2.3.39-1Jan Safranek 2.3.38-4Jan Safranek 2.3.38-3Jan Safranek 2.3.38-2Jan Safranek 2.3.38-1Jan Safranek 2.3.37-3Jan Safranek 2.3.37-2Jan Safranek 2.3.37-1Jan Safranek 2.3.34-7Jan Safranek 2.3.34-6Jan Safranek 2.3.34-5Jan Safranek 2.3.34-4Jan Safranek 2.3.34-3Jan Safranek 2.3.34-2Jay Fenlason 2.3.34-1Thomas Woerner 2.3.30-1.1Jay Fenlason 2.3.30-1Jay Fenlason 2.3.28-1Jesse Keating - 2.3.27-4Jay Fenlason 2.3.27-3Jay Fenlason 2.3.27-2Jesse Keating - 2.3.24-2.1Jay Fenlason 2.3.24-2Jay Fenlason 2.3.21-2Jay Fenlason 2.3.19-4Jesse Keating - 2.3.19-3.1Jay Fenlason 2.3.19-3Jesse Keating - 2.3.19-2.1Jay Fenlason 2.3.19-2Jesse Keating Jay Fenlason 2.3.11-3Jay Fenlason 2.3.11-2Tomas Mraz 2.2.29-3Jay Fenlason 2.2.29-2Jay Fenlason 2.2.28-2Jay Fenlason 2.2.26-2Jay Fenlason Nalin Dahyabhai Nalin Dahyabhai 2.2.26-1Nalin Dahyabhai Nalin Dahyabhai 2.2.25-1Nalin Dahyabhai 2.2.24-1Nalin Dahyabhai 2.2.23-4Nalin Dahyabhai 2.2.23-3Tomas Mraz 2.2.23-2Nalin Dahyabhai 2.2.23-1Nalin Dahyabhai 2.2.20-1Nalin Dahyabhai 2.2.17-0Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai 2.2.13-2Nalin Dahyabhai Nalin Dahyabhai 2.2.13-1Nalin Dahyabhai 2.2.13-0Nalin Dahyabhai 2.1.30-1Elliot Lee Nalin Dahyabhai 2.1.30-0Thomas Woerner 2.1.29-3Nalin Dahyabhai 2.1.29-2Nalin Dahyabhai 2.1.29-1Nalin Dahyabhai 2.1.29-0Nalin Dahyabhai Elliot Lee 2.1.25-5.1Tim Waugh 2.1.25-5Elliot Lee Nalin Dahyabhai 2.1.25-4Nalin Dahyabhai 2.1.25-3Nalin Dahyabhai 2.1.25-2Nalin Dahyabhai Nalin Dahyabhai 2.1.25-1Nalin Dahyabhai Nalin Dahyabhai Jeff Johnson 2.1.22-9Nalin Dahyabhai 2.1.22-8Nalin Dahyabhai 2.1.22-7Nalin Dahyabhai Jeff Johnson 2.1.22-6.1Nalin Dahyabhai 2.1.22-6Nalin Dahyabhai Nalin Dahyabhai 2.1.22-5Nalin Dahyabhai 2.1.22-4Nalin Dahyabhai 2.1.22-3Nalin Dahyabhai 2.1.22-2Nalin Dahyabhai 2.1.22-1Nalin Dahyabhai 2.1.22-0Nalin Dahyabhai Elliot Lee Nalin Dahyabhai 2.1.21-1Nalin Dahyabhai 2.1.20-1Nalin Dahyabhai 2.1.19-1Nalin Dahyabhai 2.1.17-1Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai 2.0.27-8Tim Powers Nalin Dahyabhai 2.0.27-6Nalin Dahyabhai 2.0.27-5Nalin Dahyabhai 2.0.27-4Nalin Dahyabhai 2.0.27-3Nalin Dahyabhai Nalin Dahyabhai 2.0.27-2Nalin Dahyabhai Nalin Dahyabhai 2.0.27-1Nalin Dahyabhai 2.0.26-1Nalin Dahyabhai 2.0.25-2Nalin Dahyabhai 2.0.25-1Nalin Dahyabhai 2.0.23-5Nalin Dahyabhai 2.0.23-3Nalin Dahyabhai 2.0.23-2Nalin Dahyabhai Nalin Dahyabhai 2.0.23-1Nalin Dahyabhai 2.0.22-2Nalin Dahyabhai 2.0.22-1Florian La Roche 2.0.21-5Nalin Dahyabhai 2.0.21-4Nalin Dahyabhai 2.0.21-3Nalin Dahyabhai 2.0.21-2Nalin Dahyabhai 2.0.20-2Nalin Dahyabhai Nalin Dahyabhai 2.0.20-0.7Nalin Dahyabhai 2.0.20-1Nalin Dahyabhai 2.0.19-1Nalin Dahyabhai 2.0.18-2Nalin Dahyabhai 2.0.18-1Nalin Dahyabhai 2.0.17-1Nalin Dahyabhai Nalin Dahyabhai 2.0.15-2Nalin Dahyabhai 2.0.15-1Nalin Dahyabhai 2.0.14-1Nalin Dahyabhai 2.0.12-1Nalin Dahyabhai 2.0.11-13Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Than Ngo 2.0.11-6Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Prospector Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Bill Nottingham Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Bill Nottingham Nalin Dahyabhai Nalin Dahyabhai Nalin Dahyabhai Bill Nottingham Bill Nottingham Jeff Johnson Cristian Gafton Bill Nottingham Cristian Gafton Cristian Gafton Preston Brown Bill Nottingham Preston Brown - MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)- MozNSS Compat. Layer: Make log messages more clear (#1543955) - Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549) - Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382) - MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)- MozNSS Compat. Layer: fix recursive directory deletion (#1516409) - MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409) - MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409) + Warn just before use of a PIN about key file extraction- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485) + Fix a possible invalid dereference (covscan)- Drop update-ppolicy-schema.sh scriptlet's output (#1487857) - Fix issues in MozNSS compatibility layer (#1400578) + Force write file with fsync to avoid race conditions + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix + Allow missing cert and key which is a valid usecase + Create extraction folder only in /tmp to simplify selinux rules + Fix Covscan issues- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)- fix: Upgrading to OpenLDAP >= 2.4.43 breaks server due to ppolicy changes (#1487857)- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)- fix CVE-2017-9287 openldap: Double free vulnerability in servers/slapd/back-mdb/search.c (#1458210)- NSS: Include some CHACHA20POLY1305 ciphers (#1432907)- NSS: re-register NSS_Shutdown callback (#1405354)- Include MDB tools in openldap-servers (#1428740)- Rebase to openldap-2.4.44 (#1386365)- fix: Bad log levels in check_password module - fix: We can't search expected entries from LDAP server - fix: OpenLDAP ciphersuite parsing doesn't match OpenSSL ciphers man page + Add TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 to list of ciphers + Add DH cipher string parsing option + Correct handling kECDH ciphers with aRSA or aECDSA- fix: slapd crash in do_search (#1316450) - fix: Setting olcTLSProtocolMin does not change supported protocols (#1249093)- fix: correct inconsistent slapd.d directory permissions (#1255433)- fix: slapd fails to start on boot (#1315958) - fix: id_query option is not available after rebasing openldap to 2.4.39 (#1311832) - Include sha2 module (#1292568) - Compile AllOp together with other overlays (#990893) - Missing mutex unlock in accesslog overlay (#1261003) - ITS#8337 fix missing olcDbChecksum config attr (#1292590) - ITS#8003 fix off-by-one in LDIF length (#1292619)- fix: nslcd segfaults due to incorrect mutex initialization (#1294385)- NSS does not support string ordering (#1231522) - implement and correct order of parsing attributes (#1231522) - add multi_mask and multi_strength to correctly handle sets of attributes (#1231522) - add new cipher suites and correct AES-GCM attributes (#1245279) - correct DEFAULT ciphers handling to exclude eNULL cipher suites (#1245279)- Merge two MozNSS cipher suite definition patches into one. (#1245279) - Use what NSS considers default for DEFAULT cipher string. (#1245279) - Remove unnecesary defaults from ciphers' definitions (#1245279)- fix: OpenLDAP shared library destructor triggers memory leaks in NSPR (#1249977)- enhancement: support TLS 1.1 and later (#1231522,#1160467) - fix: openldap ciphersuite parsing code handles masks incorrectly (#1231522) - fix the patch in commit da1b5c (fix: OpenLDAP crash in NSS shutdown handling) (#1231228)- fix: rpm -V complains (#1230263) -- make the previous fix do what was intended- fix: rpm -V complains (#1230263)- fix: missing frontend database indexing (#1226600)- new upstream release (#1147982) - fix: PIE and RELRO check (#1092562) - fix: slaptest doesn't convert perlModuleConfig lines (#1184585) - fix: OpenLDAP crash in NSS shutdown handling (#1158005) - fix: slapd.service may fail to start if binding to NIC ip (#1198781) - fix: deadlock during SSL_ForceHandshake when getting connection to replica (#1125152) - improve check_password (#1174723, #1196243) - provide an unversioned symlink to check_password.so.1.1 (#1174634) - add findutils to requires (#1209229)- refix: slapd.ldif olcFrontend missing important/required objectclass (#1132094)- add documentation reference to service file (#1087288) - fix: tls_reqcert try has bad behavior (#1027613)- support TLS 1.1 and later (#1160468) - fix: /etc/openldap/certs directory is empty after installation (#1064251) - fix: Typo in script to generate /usr/libexec/openldap/generate-server-cert.sh (#1087490) - fix: remove correct tmp file when generating server cert (#1103101) - fix: slapd.ldif olcFrontend missing important/required objectclass (#1132094)- move tmpfiles config to correct location (#1069513)- CVE-2013-4449: segfault on certain queries with rwm overlay (#1061405)- new upstream release (#1040324)- Mass rebuild 2014-01-24- fix: missing EOL at the end of default /etc/openldap/ldap.conf (#1053005)- Mass rebuild 2013-12-27- fix: more typos in manpages (#948562)- fix: slaptest incorrectly handles 'include' directives containing a custom file (#1023415)- fix: CLDAP is broken for IPv6 (#1007421)- fix: typos in manpages (#948562)- fix: using slaptest to convert slapd.conf to LDIF format ignores "loglevel 0"- do not needlessly run ldconfig after installing openldap-devel - fix: LDAPI with GSSAPI does not work if SASL_NOCANON=on (#960222) - fix: lt_dlopen() with back_perl (#960048)- fix: minor documentation fixes - set SASL_NOCANON to on by default (#949864) - remove trailing spaces- drop the evolution patch- new upstream release (#947235) - fix: slapd.service should ensure that network is up before starting (#946921) - fix: NSS related resource leak (#929357)- fix: syncrepl push DELETE operation does not recover (#920482) - run autoreconf every build, drop autoreconf patch (#926280)- enable perl backend (#820547) - package ppolicy-check-password (#829749) - add perl specific BuildRequires - fix bogus dates- new upstream release (#917603) - fix: slapcat segfaults if cn=config.ldif not present (#872784) - use systemd-rpm macros in spec file (#850247)- rebuild against new cyrus-sasl- fix update: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#857455)- fix: slapd with rwm overlay segfault following ldapmodify (#865685)- new upstream release: + slapd: ACLs, syncrepl + backends: locking and memory management in MDB + manpages: slapo-refint - patch update: MozNSS certificate database in SQL format cannot be used (#860317) - fix: slapd.service should not use /tmp (#859019)- fix: some TLS ciphers cannot be enabled (#852338) - fix: connection hangs after fallback to second server when certificate hostname verification fails (#852476) - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#852786) - fix: MozNSS certificate database in SQL format cannot be used (#857373) - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#857455)- enhancement: TLS, prefer private keys from authenticated slots - enhancement: TLS, allow certificate specification including token name - resolve TLS failures in replication in 389 Directory Server- new upstream release + library: double free, SASL handling + tools: read SASL_NOCANON from config file + slapd: config index renumbering, duplicate error response + backends: various fixes in mdb, bdb/hdb, ldap + accesslog, syncprov: fix memory leaks in with replication + sha2: portability, thread safety, support SSHA256,384,512 + documentation fixes- fix: slapd refuses to set up TLS with self-signed PEM certificate (#842022)- multilib fix: move libslapi from openldap-servers to openldap package- fix: querying for IPv6 DNS records when IPv6 is disabled on the host (#835013) - fix: smbk5pwd module computes invalid LM hashes (#841560)- modify the package build process + fix autoconfig files to detect Mozilla NSS library using pkg-config + remove compiler flags which are not needed currently + build server, client and library together + avoid stray dependencies by using --as-needed linker flag + enable SLAPI interface in slapd- update fix: count constraint broken when using multiple modifications (#795766) - fix: invalid order of TLS shutdown operations (#808464) - fix: TLS error messages overwriting in tlsm_verify_cert() (#810462) - fix: reading pin from file can make all TLS connections hang (#829317) - CVE-2012-2668: cipher suite selection by name can be ignored (#825875) - fix: slapd fails to start on reboot (#829272) - fix: default cipher suite is always selected (#828790) - fix: less influence between individual TLS contexts: - replication with TLS does not work (#795763) - possibly others- fix: nss-tools package is required by the base package, not the server subpackage - fix: MozNSS CA certdir does not work together with PEM CA cert file (#819536)- new upstream release + library: IPv6 url detection + library: rebinding to failed connections + server: various fixes in mdb backend + server: various fixes in replication + server: various fixes in overlays and minor backends + documentation fixes - remove patches which were merged upstream- rebuild due to libdb rebase- fix: Re-binding to a failed connection can segfault (#784989)- new upstream release + server: fixes in mdb backend + server: fixes in manual pages + server: fixes in syncprov, syncrepl, and pcache - removed patches which were merged upstream- fix: missing options in manual pages of client tools (#796232) - fix: SASL_NOCANON option missing in ldap.conf manual page (#732915)- fix: ldap_result does not succeed for sssd (#771484) - Jan Synáček : + fix: count constraint broken when using multiple modifications (#795766)- fix update: provide ldif2ldbm, not ldib2ldbm (#437104) - Jan Synáček : + unify systemctl binary paths throughout the specfile and make them usrmove compliant + make path to chkconfig binary usrmove compliant- new upstream release + MozNSS fixes + connection handling fixes + server: buxfixes in mdb backend + server: buxfixes in overlays (syncrepl, meta, monitor, perl, sql, dds, rwm) - openldap-servers now provide ldib2ldbm (#437104) - certificates management improvements + create empty Mozilla NSS certificate database during installation + enable builtin Root CA in generated database (#789088) + generate server certificate using Mozilla NSS tools instead of OpenSSL tools + fix: correct path to check-config.sh in service file (Jan Synáček ) - temporarily disable certificates checking in check-config.sh script - fix: check-config.sh get stuck when executing command as a ldap user- fix: replication (syncrepl) with TLS causes segfault (#783431) - fix: slapd segfaults when PEM certificate is used and key is not set (#772890)- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- new upstream release + server: support for delta-syncrepl in multi master replication + server: add experimental backend - MDB + server: dynamic configuration for passwd, perl, shell, sock, and sql backends + server: support passwords in APR1 + library: support for Wahl (draft) + a lot of bugfixes - remove patches which were merged upstream - compile backends as modules (except BDB, HDB, and monitor) - reload systemd daemon after installation- package cleanup: + hardened build: switch from LDFLAGS to RPM macros + remove old provides and obsoletes + add new slapd maintainance scripts + drop defattr macros, clean up permissions in specfile + fix rpmlint warnings: macros in comments/changelog + fix rpmlint warnings: non UTF-8 documentation + rename environment file to be more consistent (ldap -> slapd) - replace sysv initscript with systemd service file (# - new format of environment file due to switch to systemd (automatic conversion is performed) - patch OpenLDAP to skip empty command line arguments (arguments expansion in systemd works different than in shell) - CVE-2011-4079: one-byte buffer overflow in slapd (#749324)- rebuild: openldap does not work after libdb rebase (#743824) - regression fix: openldap built without tcp_wrappers (#743213)- new feature update: honor priority/weight with ldap_domain2hostlist (#733078)- fix: SSL_ForceHandshake function is not thread safe (#701678) - fix: allow unsetting of tls_* syncrepl options (#734187)- security hardening: library needs partial RELRO support added (#733071) - fix: NSS_Init* functions are not thread safe (#731112) - fix: incorrect behavior of allow/try options of VerifyCert and TLS_REQCERT (#725819) - fix: memleak - free the return of tlsm_find_and_verify_cert_key (#725818) - fix: conversion of constraint overlay settings to cn=config is incorrect (#733067) - fix: DDS overlay tolerance parametr doesn't function and breakes default TTL (#733069) - manpage fix: errors in manual page slapo-unique (#733070) - fix: matching wildcard hostnames in certificate Subject field does not work (#733073) - new feature: honor priority/weight with ldap_domain2hostlist (#733078) - manpage fix: wrong ldap_sync_destroy() prototype in ldap_sync(3) manpage (#717722)- Rebuilt for rpm (#728707)- rebase to new upstream release - fix: memleak in tlsm_auth_cert_handler (#717730)- rebase to new upstream release - change default database type from BDB to HDB - enable ldapi:/// interface by default - set cn=config management ACLs for root user, SASL external schema (#712495) - fix: server scriptlets require initscripts package (#716857) - fix: connection fails if TLS_CACERTDIR doesn't exist but TLS_REQCERT is set to 'never' (#716854) - fix: segmentation fault caused by double-free in ldapexop (#699683) - fix: segmentation fault of client tool when input line in LDIF file is splitted but indented incorrectly (#716855) - fix: segmentation fault of client tool when LDIF input file is not terminated by a new line character (#716858)- new: system resource limiting for slapd using ulimit - fix update: openldap can't use TLS after a fork() (#636956) - fix: possible null pointer dereference in NSS implementation - fix: openldap-servers upgrade hangs or do not upgrade the database (#664433)- rebase to 2.4.24 - BDB backend switch from DB4 to DB5- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- fix update: openldap can't use TLS after a fork() (#636956)- fix: openldap can't use TLS after a fork() (#636956) - fix: openldap-server upgrade gets stuck when the database is damaged (#664433)- fix: some server certificates refused with inadequate type error (#668899) - fix: default encryption strength dropped in switch to using NSS (#669446) - systemd compatibility: add configuration file (#656647, #668223)- initscript: slaptest with '-u' to skip database opening (#667768) - removed slurpd options from sysconfig/ldap - fix: verification of self issued certificates (#657984)- Mozilla NSS - implement full non-blocking semantics ldapsearch -Z hangs server if starttls fails (#652822) - updated list of all overlays in slapd.conf (#655899) - fix database upgrade process (#656257)- add support for multiple prefixed Mozilla NSS database files in TLS_CACERTDIR - reject non-file keyfiles in TLS_CACERTDIR (#652315) - TLS_CACERTDIR precedence over TLS_CACERT (#652304) - accept only files in hash.0 format in TLS_CACERTDIR (#650288) - improve SSL/TLS trace messages (#652818)- fix possible infinite loop when checking permissions of TLS files (#641946) - removed outdated autofs.schema (#643045) - removed outdated README.upgrade - removed relics of migrationtools- rebase to 2.4.23 - embeded db4 library removed - removed bogus links in "SEE ALSO" in several man-pages (#624616)- Mozilla NSS - delay token auth until needed (#616552) - Mozilla NSS - support use of self signed CA certs as server certs (#614545)- CVE-2010-0211 openldap: modrdn processing uninitialized pointer free (#605448) - CVE-2010-0212 openldap: modrdn processing IA5StringNormalize NULL pointer dereference (#605452) - obsolete configuration file moved to /usr/share/openldap-servers (#612602)- another shot at previous fix- fixed issue with owner of /usr/lib/ldap/__db.* (#609523)- added ldif.h to the public api in the devel package - added -lldif to the public api - added HAVE_MOZNSS and other flags to use Mozilla NSS for crypto- rebuild with connectionless support (#587722) - updated autofs schema (#584808)- rebased to 2.4.22 (mostly bugfixes, added back-ldif, back-null testing support) - due to some possible issues pointed out in last update testing phase, I'm pulling back the last change (slapd can't be moved since it depends on /usr possibly mounted from network)- moved slapd to start earlier during boot sequence- minor corrections of init script (#571235, #570057, #573804)- fixed SIGSEGV when deleting data using hdb (#562227)- fixed broken link /usr/sbin/slapschema (#559873)- removed some static libraries from openldap-devel (#556090)- rebased openldap to 2.4.21 - rebased bdb to 4.8.26- minor corrections in init script- fixed tls connection accepting when TLSVerifyClient = allow - /etc/openldap/ldap.conf removed from files owned by openldap-servers - minor changes in spec file to supress warnings - some changes in init script, so it would be possible to use it when using old configuration style- rebased openldap to 2.4.19 - rebased bdb to 4.8.24- updated smbk5pwd patch to be linked with libldap (#526500) - the last buffer overflow patch replaced with the one from upstream - added /etc/openldap/slapd.d and /etc/openldap/slapd.conf.bak to files owned by openldap-servers- cleanup of previous patch fixing buffer overflow- changed configuration approach. Instead od slapd.conf slapd is using slapd.d directory now - fix of some issues caused by renaming of init script - fix of buffer overflow issue in ldif.c pointed out by new glibc- rebase of openldap to 2.4.18- updated documentation (hashing the cacert dir)- updated init script to be LSB-compliant (#523434) - init script renamed to slapd- rebuilt with new openssl- updated %pre script to correctly install openldap group- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- rebase of openldap to 2.4.16 - fixed minor issue in spec file (output looking interactive when installing servers)- added $SLAPD_URLS variable to init script (#504504)- extended previous patch (#481310) to remove options cfMP from some client tools - correction of patch setugid (#494330)- removed -f option from some client tools (#481310)- new upstream release- new upstream release - upgraded to db-4.7.25- rebuild with new openssl- rebuild for libltdl, i.e. copy config.sub|guess from new location- new upstream release- add SLAPD_SHUTDOWN_TIMEOUT to /etc/sysconfig/ldap, allowing admins to set non-default slapd shutdown timeout - add checkpoint to default slapd.conf file (#458679)- provide ldif2ldbm functionality for migrationtools - rediff all patches to get rid of patch fuzz- new upstream release - apply official bdb-4.6.21 patches- fix CVE-2008-2952 (#453728)- new upstream release- use /sbin/nologin as shell of ldap user (#447919)- new upstream release - removed unnecessary MigrationTools patches- bdb upgraded to 4.6.21 - reworked upgrade logic again to run db_upgrade when bdb version changes- reworked the upgrade logic, slapcat/slapadd of the whole database is needed only if minor version changes (2.3.x -> 2.4.y) - do not try to save database in LDIF format, if openldap-servers package is being removed (it's up to the admin to do so manually)- migration tools carved out to standalone package "migrationtools" (#236697)- new upstream release- fix CVE-2008-0658 (#432014)- init script fixes- init script made LSB-compliant (#247012)- fixed rpmlint warnings and errors - /etc/openldap/schema/README moved to /usr/share/doc/openldap- obsoleting compat-openldap properly again :)- obsoleting compat-openldap properly (#429591)- new upstream version (openldap-2.4.7)- new upstream version (openldap-2.4) - deprecating compat- package- new upstream release- fixed multilib issues - all platform independent files have the same content now (#342791)- BDB downgraded back to 4.4.20 because 4.6.18 is not supported by openldap (#314821)- skeleton /etc/sysconfig/ldap added - new SLAPD_LDAP option to turn off listening on ldap:/// (#292591) - fixed checking of SSL (#292611) - fixed upgrade with empty database- new upstream version - added images to the guide.html (#273581)- just rebuild- do not use specific automake and autoconf - do not distinguish between NPTL and non-NPTL platforms, we have NPTL everywhere - db-4.6.18 integrated - updated openldap-servers License: field to reference BDB license- new upstream version- MigrationTools-47 integrated- fix compat-slapcat compilation. Now it can be found in /usr/lib/compat-openldap/slapcat, because the tool checks argv[0] (#246581)- smbk5pwd added (#220895) - correctly distribute modules between servers and servers-sql packages- Fix initscript return codes (#242667) - Provide overlays (as modules; #246036, #245896) - Add available modules to config file- do not create script in /tmp on startup (bz#188298) - add compat-slapcat to openldap-compat (bz#179378) - do not import ddp services with migrate_services.pl (bz#201183) - sort the hosts by adders, preventing duplicities in migrate*nis*.pl (bz#201540) - start slupd for each replicated database (bz#210155) - add ldconfig to devel post/postun (bz#240253) - include misc.schema in default slapd.conf (bz#147805)- slapadd during package update is now quiet (bz#224581) - use _localstatedir instead of var/ during build (bz#220970) - bind-libbind-devel removed from BuildRequires (bz#216851) - slaptest is now quiet during service ldap start, if there is no error/warning (bz#143697) - libldap_r.so now links with pthread (bz#198226) - do not strip binaries to produce correct .debuginfo packages (bz#152516)- New upstream release - Upgrade the scripts for migrating the database so that they might actually work. - change bind-libbind-devel to bind-devel in BuildPreReq- tcp_wrappers has a new devel and libs sub package, therefore changing build requirement for tcp_wrappers to tcp_wrappers-devel- New upstream version- New upstream version- rebuilt for unwind info generation, broken in gcc-4.1.1-21- Include --enable-multimaster to close bz#185821: adding slapd_multimaster to the configure options - Upgade guide.html to the correct one for openladp-2.3.27, closing bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2 - Remove the quotes from around the slaptestflags in ldap.init This closes one part of bz#204593: service ldap fails after having added entries to ldap - include __db.* in the list of files to check ownership of in ldap.init, as suggested in bz#199322: RFE: perform cleanup in ldap.init- New upstream release - Include the gethostbyname_r patch so that nss_ldap won't hang on recursive attemts to ldap_initialize.- rebuild- New upstream version- Upgrade to 2.3.21 - Add two upstream patches for db-4.4.20- Re-fix ldap.init- bump again for double-long bug on ppc(64)- Modify the ldap.init script to call runuser correctly.- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to 2.3.19, which upstream now considers stable - Modify the -config.patch, ldap.init, and this spec file to put the pid file and args file in an ldap-owned openldap subdirectory under /var/run. - Move back_sql* out of _sbindir/openldap , which requires hand-moving slapd and slurpd to _sbindir, and recreating symlinks by hand. - Retire openldap-2.3.11-ads.patch, which went upstream. - Update the ldap.init script to run slaptest as the ldap user rather than as root. This solves bz#150172 Startup failure after database problem - Add to the servers post and preun scriptlets so that on preun, the database is slapcatted to /var/lib/ldap/upgrade.ldif and the database files are saved to /var/lib/ldap/rpmorig. On post, if /var/lib/ldap/upgrade.ldif exists, it is slapadded. This means that on upgrades from 2.3.16-2 to higher versions, the database files may be automatically upgraded. Unfortunatly, because of the changes to the preun scriptlet, users have to do the slapcat, etc by hand when upgrading to 2.3.16-2. Also note that the /var/lib/ldap/rpmorig files need to be removed by hand because automatically removing your emergency fallback files is a bad idea. - Upgrade internal bdb to db-4.4.20. For a clean upgrade, this will require that users slapcat their databases into a temp file, move /var/lib/ldap someplace safe, upgrade the openldap rpms, then slapadd the temp file.- rebuilt- Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and compat-openldap- to close bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'- Upgrade to 2.3.11, which upstream now considers stable. - Switch compat-openldap to 2.2.29 - remove references to nss_ldap_build from the spec file - remove references to 2.0 and 2.1 from the spec file. - reorganize the build() function slightly in the spec file to limit the number of redundant and conflicting options passedto configure. - Remove the attempt to hardlink ldapmodify and ldapadd together, since the current make install make ldapadd a symlink to ldapmodify. - Include the -ads patches to allow SASL binds to an Active Directory server to work. Nalin wrote the patch, based on my broken first attempt.- rebuilt against new openssl- New upstream version.- Upgrade to nev upstream version. This makes the 2.2.*-hop patch obsolete.- Move the slapd.pem file to /etc/pki/tls/certs and edit the -config patch to match to close bz#143393 Creates certificates + keys at an insecure/bad place - also use _sysconfdir instead of hard-coding /etc- Add the tls-fix-connection-test patch to close bz#161991 openldap password disclosure issue - add the hop patches to prevent infinite looping when chasing referrals. OpenLDAP ITS #3578- fix typo in ldap.init (call $klist instead of klist, from Charles Lopes)- run slaptest with the -u flag if no id2entry db files are found, because you can't check for read-write access to a non-existent database (#156787) - add _sysconfdir/openldap/cacerts, which authconfig sets as the TLS_CACERTDIR path in /etc/openldap/ldap.conf now - use a temporary wrapper script to launch slapd, in case we have arguments with embedded whitespace (#158111)- update to 2.2.26 (stable 20050429) - enable the lmpasswd scheme - print a warning if slaptest fails, slaptest -u succeeds, and one of the directories listed as the storage location for a given suffix in slapd.conf contains a readable file named __db.001 (#118678)- update to 2.2.25 (release)- update to 2.2.24 (stable 20050318) - export KRB5_KTNAME in the init script, in case it was set in the sysconfig file but not exported- prefer libresolv to libbind- add bind-libbind-devel and libtool-ltdl-devel buildprereqs- rebuild with openssl-0.9.7e- update to 2.2.23 (stable-20050125) - update notes on upgrading from earlier versions - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files- update to 2.2.20 (stable-20050103) - warn about unreadable krb5 keytab files containing "ldap" keys - warn about unreadable TLS-related files - own a ref to subdirectories which we create under _libdir/tls- rebuild- update to 2.2.17 (stable-20040923) (#135188) - move nptl libraries into arch-specific subdirectories on x86 boxes - require a newer glibc which can provide nptl libpthread on i486/i586- move slapd startup to earlier in the boot sequence (#103160) - update to 2.2.15 (stable-20040822) - change version number on compat-openldap to include the non-compat version from which it's compiled, otherwise would have to start 2.2.15 at release 3 so that it upgrades correctly- build a separate, static set of libraries for openldap-devel with the non-standard ntlm bind patch applied, for use by the evolution-connector package (#125579), and installing them under evolution_connector_prefix) - provide openldap-evolution-devel = version-release in openldap-devel so that evolution-connector's source package can require a version of openldap-devel which provides what it wants- update administrator guide- add compat-openldap subpackage - default to bdb, as upstream does, gambling that we're only going to be on systems with nptl now- preliminary 2.2.13 update - move ucdata to the -servers subpackage where it belongs- build experimental sql backend as a loadable module- rebuilt- update to 2.1.30- removed rpath - added pie patch: slapd and slurpd are now pie - requires libtool >= 1.5.6-2 (PIC libltdl.a)- move rfc documentation from main to -devel (#121025)- rebuild- update to 2.1.29 (stable 20040329)- don't build servers with --with-kpasswd, that option hasn't been recognized since 2.1.23- rebuilt- Use ':' instead of '.' as separator for chown.- rebuilt- remove 'reload' from the init script -- it never worked as intended (#115310)- commit that last fix correctly this time- fix incorrect use of find when attempting to detect a common permissions error in the init script (#114866)- add bug fix patch for DB 4.2.52- change logging facility used from daemon to local4 (#112730, reversing #11047) BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.- incorporate fix for logic quasi-bug in slapd's SASL auxprop code (Dave Jones)- update to 2.1.25, now marked STABLE- update to db-4.2.52.- add another section to the ABI note for the TLS libdb so that it's marked as not needing an executable stack (from Arjan Van de Ven)- force bundled libdb to not use O_DIRECT by making it forget that we have it- build bundled libdb for slapd dynamically to make the package smaller, among other things - on tls-capable arches, build libdb both with and without shared posix mutexes, otherwise just without - disable posix mutexes unconditionally for db 4.0, which shouldn't need them for the migration cases where it's used - update to MigrationTools 45- upgrade db-4.1.25 to db-4.2.42.- drop rfc822-MailMember.schema, merged into upstream misc.schema at some point- actually require newer libtool, as was intended back in 2.1.22-0, noted as missed by Jim Richardson- enable rlookups, they don't cost anything unless also enabled in slapd's configuration file- rebuild- rebuild- rebuild- build- 2.1.22 now badged stable - be more aggressive in what we index by default - use/require libtool 1.5- update to 2.1.22- rebuilt- update to 2.1.21 - enable ldap, meta, monitor, null, rewrite in slapd- update to 2.1.20- update to 2.1.19- switch to db with crypto- install the db utils for the bundled libdb as %{_sbindir}/slapd_db_* - install slapcat/slapadd from 2.0.x for migration purposes- update to 2.1.17 - disable the shell backend, not expected to work well with threads - drop the kerberosSecurityObject schema, the krbName attribute it contains is only used if slapd is built with v2 kbind support- back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference- rebuilt- rebuild- rebuild- check for setgid as well- rebuild- incorporate fixes from SuSE's security audit, except for fixes to ITS 1963, 1936, 2007, 2009, which were included in 2.0.26. - add two more patches for db 4.1.24 from sleepycat's updates page - use openssl pkgconfig data, if any is available- add patches for db 4.1.24 from sleepycat's updates page- add a sample TLSCACertificateFile directive to the default slapd.conf- update to 2.0.27- update to 2.0.26, db 4.1.24.NC- change LD_FLAGS to refer to /usr/kerberos/_libdir instead of /usr/kerberos/lib, which might not be right on some arches- update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM slapd databases until we move to 2.1.x) - use %{_smp_mflags} when running make - update to MigrationTools 44 - enable dynamic module support in slapd- rebuild in new environment- use the gdbm backend again- make slapd.conf read/write by root, read by ldap- fix corner case in sendbuf fix - 2.0.23 now marked "stable"- update to 2.0.23- switch to an internalized Berkeley DB as the ldbm back-end (NOTE: this breaks access to existing on-disk directory data) - add slapcat/slapadd with gdbm for migration purposes - remove Kerberos dependency in client libs (the direct Kerberos dependency is used by the server for checking {kerberos} passwords)- update to 2.0.22- prereq chkconfig for server subpackage- update migration tools to version 40- free ride through the build system- update to 2.0.21, now earmarked as STABLE- temporarily disable optimizations for ia64 arches - specify pthreads at configure-time instead of letting configure guess- and one for Raw Hide- build for RHL 7/7.1- update to 2.0.20 (security errata)- update to 2.0.19- fix the commented-out replication example in slapd.conf- update to 2.0.18- update to 2.0.17- disable kbind support (deprecated, and I suspect unused) - configure with --with-kerberos=k5only instead of --with-kerberos=k5 - build slapd with threads- rebuild, 2.0.15 is now designated stable- update to 2.0.15- update to 2.0.14- update to 2.0.12 to pull in fixes for setting of default TLS options, among other things - update to migration tools 39 - drop tls patch, which was fixed better in this release- install saucer correctly- try to fix ldap_set_options not being able to set global options related to TLS correctly- don't attempt to create a cert at install-time, it's usually going to get the wrong CN (#51352)- add a build-time requirement on pam-devel - add a build-time requirement on a sufficiently-new libtool to link shared libraries to other shared libraries (which is needed in order for prelinking to work)- require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC compliance) by name (follows from #43079, which split cyrus-sasl's cram-md5 and digest-md5 modules out into cyrus-sasl-md5)- enable passwd back-end (noted by Alan Sparks and Sergio Kessler)- start to prep for errata release- link libldap with liblber- add symlink liblber.so libldap.so and libldap_r.so in /usr/lib- move shared libraries to /lib - redo init script for better internationalization (#26154) - don't use ldaprc files in the current directory (#38402) (patch from hps@intermeta.de) - add BuildPrereq on tcp wrappers since we configure with --enable-wrappers (#43707) - don't overflow debug buffer in mail500 (#41751) - don't call krb5_free_creds instead of krb5_free_cred_contents any more (#43159)- make config files noreplace (#42831)- actually change the default config to use the dummy cert - update to MigrationTools 38- build dummy certificate in %post, use it in default config - configure-time shenanigans to help a confused configure script- tweak migrate_automount and friends so that they can be run from anywhere- update to 2.0.11- update to 2.0.10- update to 2.0.9- update to 2.0.8 - drop patch which came from upstream- rebuild in new environment- back out pidfile patches, which interact weirdly with Linux threads - mark non-standard schema as such by moving them to a different directory- update to MigrationTools 36, adds netgroup support- fix thinko in that last patch- try to work around some buffering problems- gettextize the init script- gettextize the init script- move the RFCs to the base package (#21701) - update to MigrationTools 34- add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in a /etc/sysconfig/ldap file (#23549)- change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13, per mail from the ldap-nis mailing list- force -fPIC so that shared libraries don't fall over- add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs (OpenLDAP ITS #889) - add "-h ldaps:///" to server init when TLS is enabled, in order to support ldaps in addition to the regular STARTTLS (suggested by Del)- correct mismatched-dn-cn bug in migrate_automount.pl- update to the correct OIDs for automount and automountInformation - add notes on upgrading- update to 2.0.7 - drop chdir patch (went mainstream)- change automount object classes from auxiliary to structural- update to Migration Tools 27 - change the sense of the last simple patch- reorganize the patch list to separate MigrationTools and OpenLDAP patches - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema - configure slapd to run as the non-root user "ldap" (#19370) - chdir() before chroot() (we don't use chroot, though) (#19369) - disable saving of the pid file because the parent thread which saves it and the child thread which listens have different pids- add missing required attributes to conversion scripts to comply with schema - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in our own OID tree to define attributes and classes migration scripts expect - tweak automounter migration script- try adding the suffix first when doing online migrations - force ldapadd to use simple authentication in migration scripts - add indexing of a few attributes to the default configuration - add commented-out section on using TLS to default configuration- update to 2.0.6 - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel - take the -s flag off of slapadd invocations in migration tools - add the cosine.schema to the default server config, needed by inetorgperson- add the nis.schema and inetorgperson.schema to the default server config - make ldapadd a hard link to ldapmodify because they're identical binaries- update to 2.0.4- remove prereq on /etc/init.d (#17531) - update to 2.0.3 - add saucer to the included clients- update to 2.0.1- update to 2.0.0 - patch to build against MIT Kerberos 1.1 and later instead of 1.0.x- remove that pesky default password - change "Copyright:" to "License:"- adjust permissions in files lists - move libexecdir from %{_prefix}/sbin to %{_sbindir}- add migrate_automount.pl to the migration scripts set- build a semistatic slurpd with threads, everything else without - disable reverse lookups, per email on OpenLDAP mailing lists - make sure the execute bits are set on the shared libraries- change logging facility used from local4 to daemon (#11047)- split off clients and servers to shrink down the package and remove the base package's dependency on Perl - make certain that the binaries have sane permissions- move the init script back- tweak the init script to only source /etc/sysconfig/network if it's found- automatic rebuild- switch to gdbm; I'm getting off the db merry-go-round - tweak the init script some more - add instdir to @INC in migration scripts- tweak init script to return error codes properly - change initscripts dependency to one on /etc/init.d- prereq initscripts - make migration scripts use mktemp- do condrestart in post and stop in preun - move init script to /etc/init.d- update to 1.2.11 - add condrestart logic to init script - munge migration scripts so that you don't have to be /usr/share/openldap/migration to run them - add code to create pid files in /var/run- FHS tweaks - fix for compiling with libdb2- minor tweak so it builds on ia64- more minimalistic fix for bug #11111 after consultation with OpenLDAP team - backport replacement for the ldapuser patch- fix segfaults from queries with commas in them in in.xfingerd (bug #11111)- update to 1.2.10 - add revamped version of patch from kos@bastard.net to allow execution as any non-root user - remove test suite from %build because of weirdness in the build system- move the defaults for databases and whatnot to /var/lib/ldap (bug #10714) - fix some possible string-handling problems- start earlier, stop later.- auto rebuild in new environment (release 4)- add -D_REENTRANT to make threaded stuff more stable, even though it looks like the sources define it, too - mark *.ph files in migration tools as config files- update to 1.2.9- strip files- update to 1.2.7 - fix some bugs from bugzilla (#4885, #4887, #4888, #4967) - take include files out of base package- missing ;; in init script reload) (#4734).- move stuff from /usr/libexec to /usr/sbin - relocate config dirs to /etc/openldap- initscript munging- add the migration tools to the package- upgrade to 1.2.6 - add rc.d script - split -devel package- upgrade to latest stable (1.1.4), it now uses configure macro.- build on arm, glibc2.1- initial cut. - patches for signal handling on the alpha 2.4.44-21.el7_62.4.44-21.el7_6ldapaddldapcompareldapdeleteldapexopldapmodifyldapmodrdnldappasswdldapsearchldapurlldapwhoamildapadd.1.gzldapcompare.1.gzldapdelete.1.gzldapexop.1.gzldapmodify.1.gzldapmodrdn.1.gzldappasswd.1.gzldapsearch.1.gzldapurl.1.gzldapwhoami.1.gz/usr/bin//usr/share/man/man1/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericdrpmxz2x86_64-redhat-linux-gnu ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=6773ebc63bafab6739e09864d55fc4ac481e3a8e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=fe89b6cb3882fdd1a33cb9b7ea4386cf497f3929, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=456d3799524ad1f89b7e5e203d7c7efe7dd85c03, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=e27181c4075ae117225d222ae4867720524b3c20, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=696c0eaee2b832e165796f2c1f048cb884ce19c8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=9aaa545952d0aec0127763de458d47f08b88f223, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=6f502a991dd78bd833d724e479e0d90097e7ec0c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=9903298a5b2630f42522e9b9af3c330f9e9fe8be, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=bc597683f62f454f6b2924a545f90352e93275b3, strippedtroff or preprocessor input, ASCII text (gzip compressed data, from Unix, max compression) !-8COY R RRRRRRR R RRR RRRRRRR R RRR RRRRRRR R RRR RRRRRRRR R RRR RRRRRRR R RRR RRRRRRR R RRR RRRRRRRR R RRR RRRRRRR RRR RRRRRRR R RR?7zXZ !#,]]"k% .:6 !Iܓw_JJ /w"#c=.:JіeUn ڒW [mS8ˁHM'XBDJCthS cܴMH䙊*}gLb9] bzyw| Qf$m2LnaO0&"'1rV.9 (CPmaCI9b+>^sᑲzn˺W@yujY;I[Ӿ`_魡FKDl)-sh[>iGUO挽kh@\6@ok~3 񾻭 NW2)('cf' #zUndϓu/v!<` 1 u2z;;Lw\zd\C{y"*!wܶBWۃ}{{CMD{3j(;'B%%7 +J0i髚r` ]k55"a˭ zAaq?ܑrr:+1G[HaaVE/ُJϕ 6\hs xR irIYS!׿t:Q+K?a2wUšb0.ʚIPm4l GQw%P[tܦbȠ"S-cmdq#,-v\%QnxJ|*T'S^둉:PQrO)Mc>$| +YD:46$I%dҖ4yDYG ->7̐)g CERzjFϯ o fٞEʪծGu6,BOxT{U[6}ttz(p̦')PPg}Ng9S^ruQ&!X#ic𝨕Ph;ś~9xJs.'4dkj M;M._v"zf,Xb0'酼m.>J4 m P嫚*?ЩAo;>3% N9)neA *sjQ>;R =0L> 56D |#Oo=DҀuGr@}q}SwASUj pZFQ џ/*Q!Cr9 y!ճp&Dݦ.1 rZjeP]>DFοN*P~mA7T+B1/v9]}?>ء9mWd BlY W:'gFk0k1;OX4b%?[zٜ 7wz‘L4 ]r(nNP`CWDL!D? eN~QUxt7 tmӻݻQi_1Ӭ𣸜ĺOLEq)(s84䯍NJKWnۿkwA J%F (h/JX0g,v=3pDsȘH앣[ՆXP҈0rЊXEdh'& }-אSOMcqhU>E5t|'I{N5c Czm)UrF7n[lYEw8Aa0HTntQ,U99"ZpY2mƬ~u$-A@ʩs;; -΍MM貁0|&Vn8}-[BM9CkO!U=xt.76J3Ev1ulWy#@l{|r`4ƚp5Se*LcO*trHc &]P9+ƑˁIQS @ B GHWG'3 ݭ3q A3vdPgÑJ3Loe᷋؉݃ ,αmSΔCs| ,\B9"ZwuuXi6$#Ѵvp[2h6&j`$͐㫇NswX8зlQ"diѼxvd0cd 込飤nA}%1 jp҅{R,RH}Ynq nWk̐鞻RljH{)aLJhb ԧ՞I}ԢLq`%'~#{aP@Y&j2+í1"$yVn3/SA WyZo6ZILnKi[52<2 {[o6KoPjV vRV<Ȧ&ff伛L!E(]<%PF!1M0 gڑnYٶz1EM ,A'vLXsa9d)_y'&Lp#] I|; CxNaYWgn~V EPXzɸ@ wn)Oax.5ʹ}TMp҉e# D^C:6UKrڥ}밂R2مErBD-!'5R΢{HhFi|@3]=r:9A ј%]^~! 砲 =lH 0wv\d|\Z:ص(1y>[|,g#C8Q\>E[H|%6l@mƘexy Rr=O35eYNʅ a=9*|`?5ͨ S4t]iBC®:xSTu<^ rzeҒ d;EF)CEZJ媚 WE\m"[sԴbd ީ{Da PW~6"tu'vu rm:<:p.s#[ӹ$*"Yj},UbxMGk/~*gV_ mwez›㆏?&> J$E\'QP46N+al ۾(Flk'hcM ?_(:}Twdp L“bXbn#܃q'Gzdi Sr+~!fU!\m+87n1ClD OxE_$uQO0:z[Sy]/^PJ,_ ]Y۶Nri] Y@xE>X4&H>}x글hEﮚ K1NߌY>mgDb7 gޡu\+l,ÅMG S:kD^pi{- ÖgV%&PΞYaaWξ?|kh% i 5\=6Q/R:mF`ۅ <`eZKfF0$  ] }RCS3:գ̨ vLJ]8/^ʑvsAw NrQgxAʇ93ڂ_a66-{Px߬sf->=PR郆grjq5Vd'|Y+.- BPrG':ك:gUO4fKCrᘧPq 777>V˘QO9C@UIM߆ڴf_ZgYE 6yƓh[bT/\sJ[kaRe@KQdhzQz)Ph<'ufgkԾFPp+: $WڞTAg",ܹ)K7 ~(%Ny- ٫e*=mi2){ .(؍*O< ZL孆NG"߀J"EjHn^(伮I%X=TVXi[ Nc +/MRM6}#뒼hOtMh Q#H i`0l,;5;q=쐲٤„OsCW<1Ipyaɓ3vX/w*'ϑuWMH{EZog$G:@况@t rbW+!k(n/&7xd]Q}4y<>xӴvG2;-u#.Ka6P'">BF;2>H` nCZYB!;?e)N^MmqFq:|%@:DpM3T/fRCTRE $:6vdvu|UJFXCF n)Hb;w.#R`*8Ks;by%֝" y~/yƷW'H5eRVh2Sk̖)'MJd2V?DU(50KJee;ο s)?BEk`Ɣ2oCׯ`*oqzjR :kAМXB\JDꈆA9t$U9'i QAP0mP>&L{k2~jT4^):1 @km2qJ <uۂfVxORTR2hOwU:t YpUQ"M[l"8.'R11ed:їDZ d/PƛuPQ]/@+K5tiV IJ ؗq$\i7u{9qcSI>`fh}/ȫ5 ǟ䰰-;VuBXEPM³Pʥ',ezc ݍ"˰!iA[!6|t飀W@̂ f&. v RJj@g6 T᷐ '&j} ыv ,/UW[jc( o)Gs ]<B7bHcC&4D']kMeL0="BL\R=X?[Z>NB\[ാk@Zi%zW_oZ{C|К>= FDŽYQ$m.sGp] @ }G_FNn.O0btCY즕%{ǒ*bm)\ܑEד-Mgܖc2M^ULB}58fP~:%6%@=%9c@Qul:We@|YI_}Geg^i*@($=X˂Vb%JL GWxQiGC[ /꼑wx{Jԭ@1-Cƕ ?űȞi%. Wa45SvS x`]R\xaC9e꿳8s-\1< UU>ۍةv@N54}^sP%^'>\ұ3K iEs7ce$ARPz#32=qbMz[yV5mFZ:[v2.dCpȒSXIāӑBBPk,v ~ J o3 X\hPf$-Q=Kl]sT(Ƞs^Vz̉mt1R+3ڣ{!mˆ#vo| uvXh5~DlةP1 o"~<3ccr`yh.油ȚY*{=a_穭03T[Z@aD,nqC |^ؼ\E3s  8z2HsR-꿜rμLK,-ٱP]DiAЧޥ#GHv.%%`=AI3qi0mi7h GS]6L/!> NPuMsj:^[#jvR.^[\Nb&7|y X4/BP,r/ uV qǻ㒏Sh3 ZR3SeJ%]c4\iHO6AZOH5!?=}쥃dt>M 2WrRZte3EhI6h/rU/̷ɘ":_Ө=Mc7ث-b6IYR\o݂!cf8H&L22b oCbd.PF4}v/*up}Xn/%=OM1e/]?b77Eh %86L=T=M7*B!9] Dݒ_nܩḿ=24yjͧ| %)Aa6nI)f&Z_cn-[/*sH;\k :v;mN@7{?^4̛K(b&It\=ژ*GH{n}]Jk4Z1h0 Wl8FB0Ju-\FZ5l˧ 8&0>{x@fwbF<^CČ9ʱ_",z3sNKm׀\ʏA**t(IT[w e*Ys2=,ZMBm<ɵv(?+gk 3atE@:600 0Q׾ Nh,b (!PW') dzRk$qN/'z0,g./pjaTnŰ;J8P݈w -Zr3P7t<,U9u lz6AWk\6P;L.Ttd>Av `Q'!lGrz#Ng Ж9km?cK^<'s `'.UZŌЬ8e[TL]6ݎMAh-t(MTт٭d'5df1&.]+M4}n^x)-e{QE]Cl 6;UmćD_Rh{q)Vq&!Ohُ ӞOXqƯ30ua Z R ״͢DO1O )TZqIFy0J:?a4C h ޹$Zfw,w)a u?U}y5)0 Myr&&EވL˵gO H TY!fo7篭jdqbiUWr:kHVOm?_(fEzN/}M4.sT:*d?.pǑͯO@죌bl0ˍ_Ӭ[Aw\U%8c![fP\i X>B(| bn$[-:¦s`?[OYi$4KFp.o?]05~>AԶkErGXzHG"mMq]2Q݇S9Su-,Rt0mIrM҄RrNA~jnRt~5jUAH~UMh $ Jw*趾_>3qѬcEVB>ʟlc-٭//x_5A6NZ~9fQrI;-nTftvIZ)Y0%qC/HquGO6ٵQ`}Bp,(k@H#!@.@C6#'IںA}) w'\c 0f`X+aݏ&ݸG؍1f(ߵuoYG"(_bgѨkn/te)F!Aflu0wQ+<(8PG))<͂TPTȀ)Ljl9I[J}m=ӍjeT&d.6e \yUK.!>?. %#Hs戨+S4=C9=Y20^a ka$?1_-_?;8U۠ ǕF!(u,D HfXln3ȉNV _=اwqitһ'{\5@\B֏ @;򙩅>R쌣 OGm޴Pd2])Eq3pD/f[={'s_NȠ'"ourJWfd[TEkH|ښ}"fg C&`"v8Nn7cR!!x^vGt2qWE/g^ȋ6s&`aC)BOQ 5QW e!~u\3I#BnHmrqz Nvfl2FQڴ,g`8bզiDcO;D]Y'Pؐ8:4E>>|pz66*ADAGjn6 T.0A|u4& ]K6ԫE-FF^f^?mz[ҨTVμdSeNBPE-ܳ"XKJ7KЀmLB*JY*oNZ9H]9ܸk.ejPHiQ2$+B8[#G\Z&,7E{(#R5]ʞݿ 8zz5ѡن |*Ias* !7OupT1Ih6837ߛ+q"$m3}12^G賵BR0Y7[pG6fF]Q' fi.IOxdTEǓtB h @ 1?nN;sJ`Ƅ!d"Kqb vd'Fj}9Ì&=V>XEQG)3zI&ۤ/+C#c@ռs擋,Ƅ-}ċr5A/E)~sO'9;p a-;i`p>%vvC>يMX&<RdŬ] gk4w+W=&dŔkLp)hWZg) y8O=A.K|R b*aL[CH_ZA2A=6{D=[(@(A!)=ZuCtj3Eߒ% յ,Jg-i{8JqkC Wy1xDad ֮_q#lܺKAxpOTh3kH5 KP|nh|9-ŘyՄY -)Xw+>P98FwqFAd,Rr)gblԩ' 5jèQMKT3NNeOy^n<2#q%l&A`d4t3o ηD[F\z({?rO&K-WqhRS?v'z.8[dK'ꌄ5;<62t^Ԗ~wo "nTnYMrf!݅(tqJ ڙp%c4F܎˫(ɤ .-Vr+ 5"OJD&WT(=%]h(6 ҆(P47hzOsd+l-*, *Y9%Ϝs!<u 764gS\<{PY٠@$X m4_ÇwnS.\.J*?;xI:ec%"Qqj5bܯ*ZH>'㰭uN;@<[IP%ŷD!1*MK-::aCG9A|-iA0ԋKo@7Autj"iC{ WZSHi5AޥO\߸;nPz^v^ R)qy-.5֚)9:@dz_2 !<-T-)wHUAB>F<3s!Љshq?MÇSH`X %xa&%Tzg*GE̓/Gy%J݋Q0ȱ,-VXupԁKaQ:hvt8 Bj?;#%He0pB&7.\#x4ugWF/U#cb@0pWpNa}P9?i8F_68%eA @$c2]xukYؿc*`WTsRx -AXj5 vѹ(Gj腷6w"n]2oHw*8ɥw_MOt();-*7r/%Aa-޳49S)qTxupyEΏ|C m76W|f?T5):qKz"H{ah NL'1۩"!<IآfZCTr.CvMY gӚq&yuEdT2MJh˽:1$jfmẅ́igI1`Chn!/+X<>Y~W؋9t0ȫۭwHXY00BeՍM^EnY}:JHpYܙkpLo]?AF0AL;%zT/cۃ0$4m31\7[Qna#2L`@^62_:Ĺl `]Nˬj1r6c$;X"OnQ:PŇ^_59Z)KwJ㊄saL Z5$dl> 03WX-}1b$a dF2n")z'ɴjD]E'vy".5c\4pxǽ%|4HDA:q15'վkE $8؅,ƾζ-TVvJJè:VLSe) WODN A~г+o*Y$4}SY'ێ֍+ TS"3:0s#ħqzOM&.Lk}CܗM 3t!;A{GM>v<+}c̯!$FB I(fFя>l-auTvHĨ;(^ MSF9M+ ^w-ڲ3nʬ,!gM*yR"ǟ!;?>= 㝧,SE8,ޯTѐc Ž12_YLx.``t+LV؁_~'!E$<<9gqg3J1ۮSe [ff~(c|-T-C!!XU_G-@SlS>z}y.(f(0`Ye)ŬdhMV@+4s2( F.#)w8P(  XXg漡X/R57kH )9֩{p45 -߬&0i1ɛrU/[&, +2 `~et=.Iզ2 3~‘hcp%@'}0TM|hlĹWڢ&~D'1p!CT=pƁ"h0kGdKF|Q&^+qe"iHa%PGe~4{ [Fxqҵk; +&w|d3vP]XSڂ}XtYR_W`U)zjI\D+J9w!1œ϶s(R]pߓD+7-k:Wq2rY;efRW߸;Ļ pnnh=JO# KEB4~8MӼNe4(BO*Ó.QDXcrxJ+Bh,=x-A0'c{BD`\4+3DbD6 < $V5<~6cS2,e3߰#] @koC)jձ4ko)c?оX|۔}pb&h"BQW2r;}MgzBS_pFu CݛG;=Ѕx͍3sZC03wBW9IojLx"ĔbفpUUcY0/KBód1 A˾!~t:ˍQ+t򊀽k@ʵZ}V9l;꼝uHov@qi ObbD<==x-ŵ=P qb1jHT"¥][h~ ?n3 $wn8zs͔F%d6V'jS MprۂIq Uc SPzt+>@ѫLЭ% *Nd;nH*pca(Jhy!W^Y\w !ω9P0i䫮3zq 9x`LphvN0 EqZ}/ lAFg y"7,1fZ$Av RuJ#n\[/O<<ԬNJU-o༐ů  dgB/ß+,o!ztwR&A!'Ȓh6ͶQyʡ늇4!McUIǾ8 `AAK??ޙɦqdfE[iٙ3K4e "oEe i6Vr+:+$]߀JJvR^޶5 8@3;LnJr@'G1Y /}}86FJL]ҰC gBfh_w!^4oqꄀmr6H,)gBMejLM6 *Ju'EX JAEۂWyX<>SJ9"[Ү9acN4}Iw}c籟_/內ٟQSl~k:DuC2O#_Z`U{qZ+6 -ἣӺQxoiB*ᵟubb`z24M'C{W@lCg[KEpqF-}(^i®EC*HIIg]{B!Q5pikwK{єFz3:\;IP2P\R͊w7J6 v,Eq%trulkgqp,`Ǒe{ŭV}44pe_T\قص=PRG P%aOS̘Z֣,*WYZdPS]yjwp:l\$ ͍jRۮE!=E; #H&$^ͧ'%jrFU} @ Vʀ#t"ڛ* b皍0^:=#ήAf 0n[jB׉,ś8&NӀJnr3g"؋tۥλ~\oI^j[# 25-w z!KGp^qL_V!:!@NRԞ=mj3?z ض 0-k R2Tgp 9D^N?0/Ǥ%I,h0 8g6{x9xMzsbg*<<`^1J>ښA6ϙjpmh2xPW1 ^_UmR -Ijf83si5`+5dOE~*]}fw< m)d~T QNgJ FdH ub:by\h~:FZ:>66$eY%on4Soi7i 70޹5 ڄžu'>?Dsz**8Q9i#"nǞ\0! %12Qkfl)Fw>ݪnVԤ֍nz Na/q6(3 iΊN*8{푈0P1VߊpII/?\% i{vJN6L:'929ix7w Bzu5:7UBC\[0=ʂa._.#{_oX% 9oMhrN}S;=e M@=a"#ld8+OUvC,NԪ>RZb?9[<A,⋫lɮnjAd5;]/W)b`[|<`/GXR#9LU[gy^Iyiڏޫ/7.qb0@/QbS W}#mEY =lIqrk+?Tw޶1-R{2v0ݬJyJȾ*9!,>dU7ae 7`jU/ݕtTO rD!w/:}Jk?E2l_hnF(1LhzY Us~ ٤ԉpKz7,s\nSB6F-r -4jV@ܺ8M53KuNdQn͕͐lbc8?h_םMKI55g}Ye/0Rhܲ|G?X %.F"J *:'4O+giOt'E: IqQ=3+pwk&kXU0B%q?pK?<!y_BA{pnFSguDHNJa;|\bC .ubd<̄=Y\>> OKޠDz_+K֖bZOY gpۑvEV$AYvcb5ɤ+4GL9{A9t~l;~F%[M[4u߹W1Xaq뢷WFW(6,3i| `BkUJq|lpa M|6juiʊh8]5̛Z[@moV^j..瀪] xf3GucZJJ *m6MV8ͧR6UgZz_>Ӛc3C}Rw? FbzZjH MS 2+c^]MOF8Y9fѯ\R8[oI u"w&P *qkKV|h˚q*VZ0A͞:bbI r`,@ծ#66/C)rZ,5*ԢFzN6ˁ O')c&[1G#S6لki:p=l^Фkqx8⟽>]X;mC[܎;tM-*#QL1죀'lŚ͎uj`s$Vo /|!n=oq̭PbeDO@ r0rL 0◊f!Fafr0T:Sڢh\0s24.,ou%bUdl?"z3>LY'_?" Nmmr7?oI?uFc<` a.c^R)wrؓ/L%MnΝWoBPV=.!, ȊH]l<%mH{yћf! m*jZ-U#BnNYĀRzi (X2O>Jwo{L)RzX 7mekլv$t{ /y$Mgw@'_<}nix>dɟN Hu>h6'`v3A%<'>쟪>^2t,)+VU*OjzS&MU깶:RR/js?^OM쪦 [ϱb, y4!)M;עON֬wW)F(V<%=kTӐqhm@#0~\'dh2-C0O<ؖ坺 qTA]N,k)axk6Z?&9 SӐ{& 4WOa>ԓ*ir:K#W ZxbPݷ$df&:eJg':Xg$/hH$o@׷1zօ%>;ˆ~⮊x S fU&6i.d7 -ʶ]cT2dPe|Kn gG'``"aYg{B$ضFCFoY~hme;+`]u#7C1B?c9L]$=(@0Q5BzJiU]5 A UCux.AЋפ%ZFZNFOXrҟ} sGl&t7wG[HJmd5{^I>AD‡s@oMGz89mc\=A7G> /-H`yRP(MXlrBLhm#EJY~0~k(Y2Y;Gk4M~hֺ66!CXL-I;w` 9J/d<'ahhE˒xzƒ!TBl%P b?,N\^>s2veeׇt6|zx?ŀ=,Gd/$'CfgEJIze;A0G~ \6O{*&܃Xoj}ĺ=.EmbqGM.;OЭe|<$ mf5iw`p -WtRPKIBB)Lv`ã' HQiQ #[(1ZGQ#ԞOj]-ޜo.F[Z Q$"}bh\}azÂ53q u3s) ;9t#LD2"?'lQ #\ 7A||iz+qn\Je7YxƎ ;O/4pƶNzYk#S&ޙ81.աSVa mf ¦l4y!(wWMGj(A4Ӏݮt JԤy S]ya5B%֜UUmw"T޺J`3<^@ '2JB7DYcTH&,s+cE4R?uzYA&8§My1}xG +z%5!+pP_hڗj˱g~ 2Jnl%|Y?:Wjh:Łv_ij].Z$;GeR< uyʖ=,x!@pVQՀp{\q@I9-~i }Zax7z(H #쎣)8R7qrcnhCFbfgoؑhMfBui)Sk+H i+兓_i+OgwtsxHeW{4LkedFfl.y= Ƞg'XܢEJ] @Mjx+(uI{ڃ͏~} WD }nN.Zu$c6smJ[2Q7^h{-+dB7-"fn2{u!'S=bE|J{yZ 2"#p|yI>,W51vI@8Ӟg}>~$"63s-(";<|C70ޓvB<3Z"mɌ{2GE S!3|Res5|O:m.f5ԠtLUr߄4$v6- G3[( C^2Sι"WaVIά=`sA)7gy3"5"i ~ Ӓ*KJ ~]}2Ƣ̄19u#pJr#(\ZO+xJG޺-m\ib@_i.z|8x7\_E)-Qsǽ*sr]w`mq-.ӽعkJ&SdLc}D luHA>@_ Q1QIڌQ$^œcRDUt#K@JlА4/B"'>g(aW;d K/{?ZzIIt|a>|ym6_7 A׎Ķ/ɦ2%1jJ*`v^.*e )<羅 q˧ ]F&lǘ ^<[DFV oH#355b|HUyHLZ ~uL~NdnO"?,o/%g]Jk I!_3pLH%BeGe1w GÈ s+p{p!- :O$Zw>)d VQugջ~?Z..(`/m9|R>eSA(1ŻB1 !<*e'n%dFZ' };4Rً/Qo?xc_$?yߑgV)oOHJ R&RW32q0MƬ/TԾ&ޮuΜx'6K3]QB`%NN#B߶j'i{jz92?~&Y})=4./k6~IjUY/xJ%_L%FoK<%C k5@on#]Mݢڔs:>Pցl燌0:F;Ѐi.-c;h.ʗJ'06 JM}3~FE U2`݋Li GI 8GK>1)v{QOk@e"Fl2TU55H'uJl/[jd@\MQQ%X)8rѿt fs߁nqfhЬ5"AJAXX&oNTᇟ^ ]zZű{]Hǟ`!E`P{Dϓ3K/.O…:^yK<7^̃HʗY.L(n@_g=l-Wt[ Ɯ7h^4dL4qݘ;'IMt]roIؚO{"R0޼4ő IjW=*gk!0Ѽ$(m?ø֜s{.FqБO30חx. Dcn%ui"m,(#JM{ʏLMi3+Go|y׬xIMi :Jd=<> x(z좶4sQ !χkH%1RtX_g6Kx[4<6?baif9& E^+WmѬa^:yfn4Y#UAt g Nu(W*%ގ1++H'!\V>XD4=VXmUa/(^؎4.k׀P" ;vY ~fnM#`\):Vw~:-#6Rޛ0L.kE;}  WEUΞ^-#!\ ܶ|sQMW ݡgr4u.`BYSt-Y:ےkʹ̪gfffIxsUZٷ:a}_ذ>a' /Phw_uR@(ȹUsel*/#0_A"mjގa Ѩ5^#)y+,BɉƬ|1'Yd,Wv#p /#1;\X ¤z~uLg=zEg;(w&1{#b> ZE/ wa@2Eߗ"b5wH:|;Q.=?U_Wq|y=ݗV fډ 5Q8, utrC7ĠM>@4PGHSc{ [hI'k|Qn0 <.7սpNC ,{U<$@tXdg@_~̊OGaiXhY\U)-G᛾+2qgC6XO8Y!J!K0!"`M ]$[@O/Ij,M`'5jr]@~]u[6h3Rԇfetݤd]oS1 oY~ERF{N2V,ys̻4p6.8OLŒMnq[Eǥf`v,\["D8V Sr.TIB\'^󬫚:0G{1&fo9 )v[OXZtO},ozi~h[l?$hp]^s;v)_[^5 z'byq5*[F9ۊ j/xi39yKh,J-*$}[& @t/'n+u}Q;y;O;+n:=az/1ԆSs+( Q2rDbk^}JΒ֣\0yC;b8 pnxBGƾ]p࿾ 剧nߍ zzv.q6"Fpn&y%| qX`%}R6ܫYmbH9`)> <~khx ݬwa.bbQqC52Dak;6Sj`B_4E);.hz`Ct?h yQlRd-V2nGX0(=,5Ņ%.uB<0h|Q?5DadsD68i: ?'.BvOyxtWpr僶=梿f=eFJ{ 繩6IٜfuOT]6Jqvea7k]>>&is ⲀZMa" uO;S B}7U͎\zab 5.V]Z3PӍRhH¿IGnsMm: ƱJH!WW.H9 Q\ ފ( J<\:j4Fj\!wgUvЁ)]u?5UH R׈V h))592[-/v姰+c"ԗŧO'Dk E/Ƥ~84-f2OgIBIx`%-ەɸzu&;0>828u&WHsCQWs|OG۠:"3NI Z[v!>mBUYgR̻M0ӿ{֖2dCH[`_i {zUh+G-J4XZ7tib:dSye# 3^TBFM}% tQD3j #v Cxi 9*bc{9^3uQ63>o8ޝ@7DӜh?zfA%̰<<~^߃)q3fIs^TtP7% ([JMNXFo%-Ħd628UAN *֬50Bʲ| O҈ΉdFD@`fNpcyəA?%*I}QqS}`?vNSN/+Dlجof~*:]U{\4's$S<ڿA7ϕ3s%H85`TVLB/>=C' T5pz|OqWXpUU6ƀZlt:sq#_M)<ݎڏD;8&Zxg'E0MC'/yU"+O T&{y 3l >o]vqj Y . B{/xܫ|3qbE̻>q-:LX v=NI#3,`O3Gϩ}P5i{{reJygV1 TxǣTt 0 f j\rpxgPYHx(\1`WNK+w@tE(93?l/{g gFᝠ212*G|^7]@p#m)0QJk>L7t"PUf:[} LB6X\4$Od*-s+FU\&d!}c2 P[3J2_>2#9UYՏ@5@˳8 u<9^Gg-J8}zxSYG6TDtHG[@5%"gԋ׺!kOWҬ8T}%+(d*'m+&J9//d<3t5E8& B&opQv\BL@@։LZ{[i%d ]@=ŌE&8F!r4[50F:kPҞ). #wnULp0xycs3w 0s "Rzx2ݗ dQqX "tj*CVƏкS;vC$}h8<ލ{r"8d,Q~^f'鉴|zEd528h>}m970"j"ua<8We9#+M#s:<ܠQ޶+Ca( W WDboMG ,i> XA-Wq@kH]ǻ8z0 e6ԅeʸƾؗ(zVl+a<I"ek:KgH^%st;46sQb8HD1u#,Ou{wluaWt뛾Ղ3BȪ#@7d}v]scy~ m\ ) O+ķ +QmKCpԍ8&,2E LA_%7ɷÅgG]W>[N%u:wirO-p%z˷yP-pQ8[,r-URfYIę1oر.^=h (ߟ^6ZBխ&_>rAmL:$:l_؉ک-elL8I @ ѭ!ԇ?hUS[ڛ_ƌ!QWtjQZbvƪ>^A_:LJ9Rx{aEU Rpe]Ӈw#}PuRVx1~m@bs`og_ڽiFeۀbYL wwcS"xT|9der۶3յ϶画!iPMOU-_/eA?HtV8%04é9Ubr⾢ȝKHwMbqJ4a֜ˊ?F2ə:)Ve\V ɵ\@0j361/CEL@% c5b Xl@Sz(Vn&LDߩOcQ)>v&CوKrKfED0C^ܣ&Y|C‘߳G!E7ۂtxh|&a 4_$"@@5'O8'Uyz!S|ČBdmȱry63zCCQV ɡF%Faf/l;)&V5Nצ._yJ$NEP(>ǣ(PˮtzĚ͓AFelIS|o-LNO:óyՋɟ@YYS£X*/nn{o"p{ gM%9&6 hR#A]KygB0=I6I& 47VNN2cCR" X& %_!4+ vC!LΎ5"pjۨׯ{"DGN<~B睖^+żw5mػbVx[#r?#7+3{`qKEc٣^v8#%'"̋'S7O+JIyX3jIM#`4xo=ZIۛ]`> p3- F'qv$K(p[9 _L,W=zXJ,8Hv t^ *yz.?Җ X@:BcDEmG㡭zйpVyt t.߉nm9(7faXPepeG j}-@#GD !M+&\UJXAB_AlO9gM e=n+PAaiyUR"1Z3~nFKX21c~wu5s_9S`k~y)De> )LJ茺+eYm ^"S/FЫ0`{Ym(Km]alW3B4S{@B ^;$6_ROYu9đ1IS}XTA쫒^ix`Z# ‚O3f$@U_ |IbCuIu.6ME(P\.< R'=\%EwY_[ItzaC< 7m4f9LHw䫸9h?Q%99ZP8={#t"1ii))=Q+!n ާ_XM;Cc ]`,*C:N#JN6A7:Eq\Qڔl]uq&W;풂 "%?zJ1i ֯&fXB]{LJоamsZ!?%< 1B@aJ cZ uMe2qmݳh*7dx%PN,O:^}B%s|hy$L(Z2 Utn۞R\i[79:!&UȻ=%<ʈu;e;ƚC }ٖL?g(`8*Uls•ܵ4fdv% b[ZeBD%-3!+Uˀ Bئ4$bCJ=WҊ2hB/|דx&طFMPgnџ,y/ ɘ6&h 'ۋ׻\s%?9펖~}KՁnWIv*GE~q`كFd`h #(5~(J<Ȍ4e|,'nrr8)ZAdUnbnEYy>uld|0tOlK~lRW4(J~TE g]c^!qX/F+qq{ j KeӈhزA;t߭7s0:+'GEh;piFk&_ X:Yeϥ.zgUEy2d x٣rf W2#جטWJ3IW24[`BwHh <0Fmy䶣(D{p#oH'|_`C"ѝ2؁d  >މF'0tRQB)]ɧ?3*mvNEF*Œm`P[5UƊ=.ٰ(>3ƙ#e=2=zotKOQw";08LdmiAޫҰӝ([cn2a~L2?hF<'^˪z+܃wTj6,Mtױ̉FAڬ+>Eu4kn*՛ иD^rt XΩ6HJУO˵W;s\L`竴5)d7ŎHT7ž)67V!Ġ)ݣa@ 3bdLIZjq|.v-`dvDȡf´GX-Z&Kxb]{h DÓq}Tn)#!./m[F:*@#CMV0*67$NewjvAO\N3 #wMwS@a6譾P'u4S=qPaFW{>9<+ Q0UtS2g_ 85/cL!TgXߪOF(KYky2t**j_sA xR^w 3XX曝}-]t?+ |ٔf/siHկWB%>._C F|Hɐ !r#ԇ s5ƽ?E2v{O}-j: y JwWJ\F.O8prWʒF |Ե3l-̳' شSv-KEivx+Y)]wt3cEE1_sU}XIXǫJXB,.-p^V2 Fs]; DJunsc!4~<E-blç#;Nߧ.IE~}YMlzH- ;c2}WDiPvxtNؿ묈"E M+zc8 *ʠ(h*fq֏ .;bi cV+Th$A 5쮼]`D5= $r7u+O4U$p:0OM<ؚPmq ԖCZB}V{\@b;k^;氎C'h4[ps[}.tfxt+>}\40o+~M%2ReZ'N6o!>VujbH; 4:=匽[[AZ1@11NI|L Ą$r1FIL%=q(醚m}3GAP\ 3ُh.sIX*=.G(]N[$S31<߈\pC)Q^$ JwIV5*t `e+4A&w,@DV)@"'!,خ1\/lMtszM%-ې`r͠{,~vSC?EXy~#wmWxDq9|VQhסi&JB7AY۫.GI’gxKԌ9;ʁyT0Bi <g֚K "}c*Ccmmת)ddPuC^ ,JrEZP #- kʉ&\Dۅ_;QtRި% ddjIcyOE#sK% N8C|Def$+itֱ o"b|M^~^.GVl͇-<2`42B()Pw~p-\c)kA}{a(eZx+A8uЋF>ZnS4ZObDm,2uFKjNHm9쐩Ѿ[ʴYVesNY)I %쥭,mFXS^PwTP~=q{5.!<+'cw}ܯ8+8EQ02IJR),&0ikB0pL@)/8J-Nn0S#,#[|?i5}UӇjÖ^w񷓥taq-+!ED< Y ثR#{^ߨ{Np2c+Q9v3̶\,TC!;q:%? !7 >Qݞ p>ᑾUeENJJ-އGºo5.N <ܞ XQ*]6o -2*ER]`1nRdPvXt}@A_(m}Zo@M>17COa~Nc!aḑ1ۚBqXպy:y@ \y\ Q :MzdRY:͎lH(˽FV,B]ʁY1a<-?,Rz~/:NT*+m_96,PVSZ .f J1 ,sq޷@).4sg 9 _sEgFHHyehV7oޑp?Q_lo\YlBu9[! B?l̯[Cd"ޝ1?QNOp.Q5zm  z7qɿZ&f1]b*%QP %?ъBTS q1k]]A0UGb-EZcE&oW0dz{)A1"^s2sq|5h6ӏ +FPDڕ7:My*k:#V- p4@\CPteVIT:r[xWG [| 7}Wn2~+m=^ejlu!hX([t)YL[i52 ǸuA:0X+kkuό:'A*«D `{'es-B% spV jT1U`h7VX(jĬTxl|ۓ>3MY XϨE2021I!@?)+Bn:0"eɍ-=ò:wvqea;~{Ec܉Wm+`.cfޕv Ym4<{~@zP]z2D)Amyi=S{WqhIZ2^&b{6 ) 2+H kZ1YG 5@Vs` utTp-)G^ߒ89_` dN)$O.`IT֠H-S9b?ZʭTaH8LH05[7%RK<S`%tc6^ EbEY{J߉h8 hIh?'P]A;v{[JZU>%(F>E4ZubY3\i6BtC֝L"xɃT;l;3nS~ gQM5 N&"l'UV@Nxr=v㫞-ĕ(&WZu]^^ѥb"ީ<ƒrH9hV~3)RVLq;Ki#h 3]̠N GȻP6Ѷc5(NubO'isq8c͕AO7"#|xO3Y\]#gv,BlUY`͞W#xwG~bڟ/&O$pGXE".X`({ޞW60x?-O΀vv ÜDc[H rb+-[-IہGR#b&&xfTP=ń^%(.yCMY QH՜M\7Tj,g4frןdPY,@Еݎ|8ƺaǼ&*ˑ +lZOBT$5M0iaF'A3PGp\E)zY[ؔLgȍz9(bN H U!= 튁ydN@CH_K?UT"-<ҍV!8yiT,ڥdIa?JҫilA&c!e$"F> Z?Rm"Km3u`q[2EJt<&# zbħjejz= +])lAV3zv#gh\} 5׾6ڇbճS;ULE/0Oi+c;p}أA²U Y~-J px^ |1o}DLI6M:ڪU-^k`9̈- ,s)B؄--OUd1Hxt|t(~x̠βkUe 8>`Yc;,zSD2*՘ڈҿ|ڄNSM¶Am9cJ$čIperWBa)(5vyj,lbhw=*V}0!t1ߤEi X!D8$̓RW\]p!qP)D?\0 -+m̷=QLHֵ_KE+Rݣ$lcM2~;?1i㬩lF Y胤@qǟ=(AK&o!J`ھ9j9̤+Lw bx8xvC69^sOrz{QJj1A_y}S`1:w~{ln nColՓVHs~L-} yf;^,Ui[<h݊u4fF1G_&uڃ[݀DHK~vGŤӏ"W-Tz(xHwvSݠdv`ry)li?pGbΕ/ gVPڂ<Е*)ȴB4`汣Ys`&hg-3+eA0l=w֎6H@S`>.hQp8/}thrѯ]HIS+֬ J8Swð)N79aF4˅ⅵ$-_ZOm 0IAhGЖT+D]%]36~l[::%u3#llURC,u3#wc+ڢ Jc87:Yc@ċbgRzH^([Q]bLt{`ǒhԡx@ˁ>f[EB/bdD%BY*ĎIAtcӜdHT?K4ʞQ sĬ ?h<[m4:W@Q'`)Li ]ɩztIpJ-_>oΟYxY@`As*TAkndUH0n+zSŪ 3͛b@%#,Ǥ&z8g/ɀy+o:=X{0aFחamӲ%Jش i 8$ )7ݕOeaé4+WW&apqȜa " I %F`?ЧMa> k['I]-]`|U*j ۣQr!a~9=eU5%ehT+[\DYD_?'́mEk.W~9PqlYi#$_j)YA "_0F:?ibW/kĤ/MIӵ]NM-@m&="ۼrMo.Yl\iFd&M?\eŧBsqFwC 2Di3ԍm]*ήJ}ܸc? #fX g9YÙH O YY[$i'O6n^P$.Γ]p9?;]o‶̾GQAAXA Bnvuv.i@Pjtc͢:{* Ƶ^t0ErQPZZ4'CQX`f71n95156Rct!>i5t) Mq.2DՖpimȽ24+5@42Fo՘ki?!-1m -_6ԍXHO;%ynb4~εb2&sO [t+͖8;ϸbrJ;B2Znr`ukg @e:x TiOy$T!|- |f7|թ_82ZWU[Vv}6^mhdPMr)͚@M1~eYёn`Ovp1p^ {q}(|\1\ǞWզWSزmwK3;a~aT;&殛74]J8 K& 5-wϠζ "}T67ؖ1 !$Mk4<د BJ`+$l·༳Qϲq.߅Vo =gd# 4mVz4(0bt²'T2fNuư8UvFۢ,)>pTyH"IѸ+ a Z%.\Narh[s>c^?]!oz(ՂU<5%!5y>hw ꩗ĵHv>c.'ub0Jsxr?Z\kj] u;tN4$n8"8k/oSCk#*J!H@EʏpyeKpGZuZ,1V, {9 CP'K$Ҳ2*[jKwv fֺ bMQ@( 3d^քA^I½O԰qxXjjU:*F~ \tRAl 0"9WOK$TDysR(p匏Tq>nԾ[e`_pY2Z+Wh?HwN"klN;KM]ᄎg^l/m@%Og t|U^OLsTG=󂮄Fcߘ0B@:f)>f]ڒN I"K\I:Ȩ"",P_c.i&bLA "MK=ډ@pG;7x &mzOIe69Z[mBǣg).JvVxQěpAׄ&f6Ty 55ly+jK^L< OX21wjVTbVCRSړIb62@]֤OA/c#D w`\ؖP L-ZWEkپ}{e5ZJ{}OwOҫ|rw-WSON.cAURVB^2Y.xSdqf\UFq :As^&jR#O ҍ<Aoa[dREV O}j;ۛ߰jd)Bs)WSl=k41j;_#<17Qny^Ynv &x/`j@*!g> `a"K ,kh 44$;yᘻ-C= y ‹bg.ZtdZ:-07}dFhA;rD'bLwɕ8Mc+#_?T$mɴW.A@ʯY3YLAFQjuۃM9><>RW%YAzs rZzDp 2KL#YW%nubj?L75 Ǘĝ\D ⾆{sRۄk)c:3Fto'l0mJRq24, OL#lYm0J2šuu yrHi^+4u$~6QU8xYot-ƣ9lH0~L񠍤L?unBĂ{FpLȏ'V c8C' e$dZi)N%YJZZi)M+$4wMnk翤7WSd|nM^UCwpErY尡[2z~'R6Lwҡ$ Tv9cV([s]2zn?j&_3>̞+Gq Pmn/"^xGWXk&Ie֪ hAEG*vBT2"|ITGӋ(nX=W7ֳm-*T4mwR7)_H)HގU'_">>bbhV(zA>BNXʽ\7h>;:?HET<Uq,+z wk꟏5p}ohRgV@2X+@HJU`ʀ'kˣ ŢEe j:.C}%(֛[';6"nG&."O4?[\t'TԋF@ aΙPG5UPG '=-cim~mi6\ėKjeM5.k>'tMMJ&ca4d pK(m̘DO,pd`C(xcM!}8&T RqtaOCL3oC{e;q췥YbvgzJ93/#l .*3AQdOg׮te;Eݑ須Ѝ0KZføv#槣DAV-bk4K>Px[hhbgn[Zc!*wA؉VSL٣3ɛsQ[0M^'1/IRO':(blxmM> O~OtK-mz]Os6:kn!ۑ}3n25ЮEm9hj{ӌΐ)YZ`4w([oѳsr~+!cULeRcΏ%{C һEիdvQMyύ YZBZnj֚DBӠ)Y.5xISeqy"5猇eO q]]݇*fFq9:gG r߾VCzq'i;(Nt9Jǎc_z,ܜ}6|n׽u֬,U'Z=XH;bĂ]4@stA\%t*.Ò w6V4['U%zXx`$ gh)O{M*ǡ:YI˞\BGg x`3ai,Vm~Vkt OɳO1 a>D}PZGNn!<7#BhH̕B@)0^w\L +rk xwxn],4f5CT\MT2c|7̺D*9ɗl~g*0}q0%l3qlBj-_:0z3ZM;)0C$k.!//$uAǚ%|d-` y1Y Q B_P-hYp7egv_%H_+I:l!Z7 ucf,kMSg#l▝㼛p`ٰ "-@| g^ 8ǨDq6%/?Rt1BJKZn|2g' \)b\}{%׳|0F)r/#JDɃ֛Zz/*!O\Қ]PϠ )/:2q!.fMcɸ6gVwiܤZQ0#8_ ecVgKJZEN\N]$ cW~X6U3{{\/sEzoq7U x6| a/~jG]a9 /v(@&RO[ rT#i0G`5oP^{s@tHhHީ*aagi2Yon;^T/ 89ҿ '+zWTR('krj谳H}$H3oT qQzـ_ }ojV@*nZ:BJZ52L"b֨=t[YDNBN :VcE6oScASyYeFY5HgIqtr)q.vtu- =>O"KY72Nme$_|ǒWߨ_<8k4e,Kk5uAX]x )KцDߜw*IF .ԡr D燶9zvKYR00l7z{ϙ*Z"c^8mdѦ17T:ح;!qXvѺ9*rw&c wj\PaLG )-[!BcBíP3IGs#[݁|^*qČ-V:[Vt̬WZLXe ⷋg 0GXG`bERO}:>O)ܺsE;Pg_Vlb6Kym*#tgÛhoě$_gP wŘ;K}ExCκu&p$6#PǧHc`-8B LS!BHiq՛Q4ݘՆ%%B }^UFkѯ*1ʘo3D`I,wSüUxr)& { +5u4 ;dNFr/ZʮV^~@ L"S=ɨ-qü{eՠ*ubOFu$fVɼimou'Ob[/gZ92-1 7SMRE" (̽-{q?E:_ 96oX+Į]u]HNbsa7|[fK"@{&h`w w~d$9x?M2J4jTn 3)i4Bm ~d>S?y:t?حU_KY0 ȏL-;2FR} a8W{we: di40懆۸yoewt1ojSo QJD{]>q@+3[ Z= w"IڮKptSe Ҫ0A?d> ryvP9/KPp%hWKGy6WGi3ßdpJ<v4'WHGemwIV'9T/Yb4 poWU<>GssHGjxn837zTU᠔_F `#Q3xe{h6nRV^G젳 ڼ(֊(J'D-Z}o)a_!a]zD1xaOY+TVq3V$\2RvNzbA` n,(4s@ QDTD] n>[x.>wRRQ𦍚t{ 3} #%~8bXyBYW)P{vH\ `q-N rFhq=ҚMVgx{gJh:|K"%O=BJ|]Fo;R8}CyMh+` !\gPlx1 N˹ӂc}tvRKl+$7/&U;'۲#&d(IerNPi0QQ3_H6 {tvl rm?#a *.1Q4:ŶQ2)ulx[92#=]vG͵ Cuw*%qxZ G^ZL#>qQKX1ы~گͤC ]mUHe|w<Ľ rf܀p|a<4Ўto@h6`k /r$̍bAV۶H 9c::^Cl2v}d`fplQq"ǥ[-֟,.-e*` cb|`*S_I"2O9=Waԣek]O^$q֋iG.rm^?"zpFL%Κ鬇~D:"FD㏳+PWsku^\^}#<=UVT da"尓)~,~0*aL39ٮ\+LY,㹲Z-=v@ﲏ~CxʱVC=R>?"=+[Jm٭ Ӱd?ChV(C1aW$cnk['f5z 6S׽1-2h'9jWs(tw ~pH $(! (Yx̄i+;ţcqQ]Դw@]Z0.AҔAhoU`6l"=F/G@"R{,NF.6DgäW8Ds$ y{T_aǼ\ROi=:.^ؓpd9X N@p,8"cѮj;s`IӟxFh9"<32u9Z(*QqE6%^fEcS>2Clhߦ,s{H m &:bnQb@3'mFOFCZ*7%UMoY_,dwةue"5QWHI#E`τ4llL!I ƞby]gX%l?X0$B[؁XHEFmqN#zqpuwӔZ rO1}]b棦r b3$n8vZ"٫ȽX1Y( "sTZ!v _{@(t*${Iwozh⺤ s'ֿc̼ئe" oTJ|K=ғv'꜆XHQK\P@5- awViI=S 8]D"ԋg$ϣhed +H 3en(ʜmI*[0^rAORS(, 9FU[ߴ,^ܜqϪ94ªRJv,}*Gz]è ȦAlq_Q #,N/ljRO@r7rg #]#a3}@GT$FmJJUp_ǗL=ȋ 3B9{M= ~ha `s!st?M$ fn7Tdf(^i`9v^G~kGsmt*N&wKa(Q8Y"pPoD腬jmy@\m VN f$gsѬeEIYN*FN]#%(رJrC:Ԙšd3"2"=˼|N J[~$`ԭ+ڰH+fG7d"%V$'MO #, ]sSX]hCaQ'l{"D 6p%ap,0D]s)\n׬Gvx`YCQ,bB=j K5ULjۭ})=0U*ʔ=,o^֋._yRHL ŮfX͡WYgxbssG Y.F"Z"),qIjZaU; 2.:Y]O9}&!\EM )ʵ"hAļ fz" XXHZoaqٚ|ª` jD3:AA *_Аket0LlW(CPհ<#ob hҌH}V`JI?/D}mPkO ʡX҂×N4sJö_LQz5[nt/$Ьע F+*7xP.dd]#BQ `L.]`$Km x'{|ڬ'(dJ ~Ki#M04anQ#i_Y)hYBPӎXY6>K{Ze-Ε C$Ij;fmCN\*߫D$:e¬ZJsN]RCB~D7%#+jS٨ /#J A]KU'NS{g= d!T(I׷o yRjgHβ 8!Ÿ M2pѫ'{Ŷ j48 [DgJg+|wXt6WB 6k@4*A$u:GU{y')TȪU}wfP9 b@N&Ĉv<竞X ^MUEk*3 u:!D ړA}P>=LV6du {YCuB$fe~S4{4s ?G_bWlp NeTHɶoFqB)ɱ.;O,U)|.paJU;rЏ)$ @&X4euPGWΧK2 Z ZfRWaCk) yb5P J:]~`pR1hkyOyD'7֙<=X{½˰XFb\1Gͯ9ܞt N-6oOF* g7 \WߊNKOs}tf*Ya8cwlS RI-LB$G6A[}o#^#MBgrߜˠ*3c+̲ucܴA,`6٬IY] _V$K.>ɞ~Si<;g&=$A[$AW"EoTw2 Db6Ϙp.X>]D?dN`]|r ~OAN.&oH -ɋ <8I# .AB1DtWz GD^9&~`&ظ$O lTLU6f![cL_`T$ؓ{bƣDI)\-&ް;uXڀ__;#ͦ3УjCYp*:%%x$=i,"`"oUC_'I@RFFH֛#wD;ܵ>!]䷳/WN =G<%hJ!OTmݻltn }ho#Jֶ=WHCv𺆜ݹߗvh{LedБlj7d_alrq-5G HP*k=wnNG$s6;AH3*C4, Cɹ#IZKO(Hzq_\x Pi۫?o=щB%ک`jyUmk|w Īyijc&hpَ:GpKp\RYNR@1o~B[ ^s!((ƷJ2[>᪗9 ްgrZI|cS#G>a x6֐\n;ijGiSR{0Ɨ' m*9e]s'q%9:h |h4$fcUPZTH@ _ts3`e+6ma90:g>֟CwbEsf#Ǵ KP/ޑ:o/m۞|NkB"UᝂvyH8sᜄ𾴍⇘96hLHy*a]VA{>zj#/粔wMSuk+z&z D#gt*R6 ŔL+^ ڻR/N)-7^Cn Oh5xSZ!"ØXXu^˒lCߺ{q`^z69; ܷPv"4&y'h MR +-`Rb_B"4 S"`Ad2RtgcnT7CݡGhNnֆ oH8`>p+ֶƨ[A}j|;b1nڳևv#_})7=oE;tch'Wd v q~' ܸ*{7˔-G*36]%ć7"¡Td 栏&LjQp0<.[N;l"IO<*UGs=Lݐ@l|”vb~9H5+(XfwTJR92xZXT/x|{gUp D9A%}>0뺵ZOFئ[X9w:L?4b.:"]oפaaM}_(KDLQiezMdͻ<7^LrPՕG&S%TlI)Cg_wcVC$P@̊+3Nume`{h0j2%LFL *7-+b@ ^-romBQWσm>BrTHؑ|sd~Ʒ7x5`x 1c0m_pM2\CF|4ІEA""i?G f>۲<=,M6:;{,0l^$W6l&=\uXA[?i"j;kss%È;ۤ7Ϟ"A=FLZEFL&%'ARD=3mO HXm$jӸPKtwgnkmP`Y>0Q$& h$Ba+3&i{^o 2- xH}LmJŨ FtyfOz^1u2ʨO&떤^mӋTfM0h3# :yDڂ1)=a:E1n1ϳ2 ρm 8hBBvH>+n)JOq_ 5_3o˜i8Xhc.F'Lc6XVLsXu`1Jˬx;(OCd_ąSmw@NCЙdq ;M)M W W1- >Bs3Z>k}Z>!_, E/U]̓j*Zsu=vQ-WQPTyICy,. r-./IgDK؏ACht0O݃y0}u5*RRShjĐ+S[o:jSO!8E_$_8f~C}$e:pyޤczĢ ,ΉL9WJn6XGC)o7K5 XHB![(=Ցi_Y8ԕtƆK8'$ 40h Nta6H^.bITlI=s2ۀXXh*LԎ %Vӈ4bex7a~ (['&pyth7Ss{Q0BppE'{5PNEc.7%7>"suk3L?5"x/3. 8Z |v]ߢfGi^ }@}HNM tA"]l.ZX4?6$tC Pᓬݺ3Cm>soO_nm](G-B0F@,9f)Hɵ{wHl>Q4$\9'ae=v (>Z7v i[gg8udRajX\}0XUԸDj3f5ZsS4빵%^e[[,ٷ3 !Ѭ9p7Y㬗W>"oR2!28(2_,ac蚉1%XRLK̈́TpZG̠B1YQ<ߊ ;g &F?A_wSs?  N3[+JiI+]Gs!eT7¢z~~{!fr'޽9:܁*ɯ.YNԌ%["f'UliszʼЇG?hsz֕:IWV2 L7(6*gYʼn2w{O 䝡`y! c)ꧢPlȼc4%gb@_PJpF3ܼx13)~IgҶxM`4b>"Պ0#@&%AS&#y7;32GHfW 4mԠ{ DЕ8 rخdƂwF`JQԡE_]S6bPԺIUeVGٟԣ)Lcdu;5M= _|P(<)ĵgGHhٮ)*R8Y|Y&jG_ΐख̠RK/3'AEs!X,bTzR hPoݪn&iIŎW+#5^ѱn $r R3 SUBNqRp;jfMƴ= K=V+,Tq]EMvf-q\~O{{NH1joD8-ŴP5062TDו-~_D8yW-tmO`qB6Dϯ* S򛰧 r ǖJ!P ):byڗ,;I?V>,^ۘ B~ @CRz Yi`NnV;d3i։'0JCg1$ʉC$ ){=WvN"yfe,uȿP'n$F`}wPbJj< %&$|pHAͲӽ.8[LkYd! o']{w.i:(9j9Q"3b]D=_4sL{B fiP eU33f`A;!6*#FG;O1}x͆kotڢ(cW YQORBYt!2Jkġ2\9ȑxVss@Nq ߱P@TZX|_8d9H{QK14ql+54Bny$dECv-PwO[r`$ER=4FD(>9HTKcƃf,'w;!Vw_>T΢ Ot|;IZed?= sᨯd}6KQ.]Ƽm ti PyL冸TeDuԔ3Hq똄>-YD>`YfZkIu8iLxQ'Ƙ݀$W N `EyY l&R/3P}9CG@܄ÿ~;ԩ\k@JN@^?=-:^b  }"qRADRh/S-pfFmM~wݍ/'$x'^d\q0t3z<.2\W)KDjJU>W+R _vN r8u- CJm͐n+P&%|K)'V$d>HZ}T_£MwVnwħP=3mtV!mLi}I0ܕ۔>wTo '}=ҧf_ {=PFsfT0E ˥i}IILlrJ>gF%oS;N>i-I6RnQh(;B>\n~ƠC*PىJMmv.9h"ƶ'Exm}BJ'(ԜR&1KoP77{%s 7Hَ2;:;fV ̹sE+pxV4M<jHa%uS@E3dqN}Pr3XS>S 3TzKӌp2m$s1z /JUާ`-Pp-qApWikh?&>T ŕQKx x|N8y霳~H/(M}N9=>m3G:}QW4,fuǒ{CH~/RXݿkWx .ٍAFS /]"v) IԔ'F>접UEm-}hd>? -#b>PgnQ[VR"σ[^n R!t/m?RcX3h6☈v<=YE[TҬZ1Z bO^T2ʒa*@S:Et Vi+9"&~[XҰ3c&Jpvyg(:ހvkO"c2MI=?‘&ຝdCS—O,|6ղ<^5Ybd ]5 s@Hgi?2Ш{ySls1ug,Y#`rn3BֈҤN_ КIq=-qQU'ي&wcq@ R|vnnݵ){ɒ+l ,j:n@L|HqZ|y`6"-R I:63[rL5e Wס?p ]" OP{3ѣ1Ool R,Q\gAl }+9I7$VA#,itQ3rWEL׍fܬJ ɪ\jϲ$a;{Uɀ7ͫ1sORc= K>W+?V>JlM(~5[+J*iWO/Ⱥ1\@ۃ^c/9ukCn6ƻ>~^O*tw^1.=bo7[A;(/ԿV:q`eppaד#=6b]%ly6A[F m?OgG6dn8߳4dx5tT ; Y{}Ֆ}wC ) Cb^.Pe GVzl!o4.Hs9JBE*j黌QAK;hWT.ZWE]foЭ8S2(L\%KEw%xInɳ;Spgrq=ƌk 짧4)Wk k4x9؊@aK~/zRNoyG,ecM9BNRj1h c@?JtM<ɫĶٻO0S &Z2Բ"d1"U&|𚋀G <3}Gn&Z1[}E5_G9u& No7μMP eHco{;v_T( nϦHE[&!军FF3Z6 ?wF2LN6xDŖ?t5h_ 쩾Z\ s" 7}qp{j7t1%[dMǍ7=@2ٙEuW A 9DV9N>ğ(,U_~i<,$ cV囁jY F6 R}  J7G*-H 2U,#f76tH߼El6˚c%:R4 Mǰ˿~Q)Grm.y3J}H b`+[Z~l:*-@dE8i>-ÞVscnUdlv'3d_*4-x~T$nŊTd[s᏷[SOt|RWj'ek\igO՜n%Vޗ)rd[Qbb1Į!pDm_+⵲Ѓ_k QL׏7uɄs&!w.a4WKTq|忷)̍Q,S>96T{poZH#F Y"RzDVXJ/Ma, ^E!c9VA Sٓ2jZDm#=~"E~+ =Qn|\E0%(v#[@ TT+z0r>87rb♦ [|TDr͈@ptAxԸ$.q_-u1g#)k";t)yLĨL3%\ -1BQ(|S,`<V4_\.߃qW):m S%vc T*y>F}b)Fy٭`?uXOW$sHJDlc.pl~26EI}J>=ZFx"WA\-DZɊ26Njtz[] o!FT>Pޢ /U\fKULNowgUIRx(/>xR*7`}ezlCWYȣAm⃓?=LD &r׶pu̱Tbn;E-MxmYq9N-v;bѼ殈kdߑ\@o4R] 2H'\V;vݳ=qG ^Vmwg T?x]KJAr~kBhA &pA枭cyXD0k N8+f:4l " -ycJ~s|&I-EI%eJ_fKі[_wP7\ٔ(5"qL *LTptKW4}Ft (Կ}ގKSQl[{|嵅'#YG!hb ssVe)]ĩ!(u`KvD fzJЊ/E7{B t//&Hj!0.6+-Gs(r|5 ׄcU9%Alju2MEЩR'R^|<~ t:;!]^`ArI`E& Do/` |4A Z GP K(6kv @kOrNSڟ{?L=hvoJG{d"Fo칏-2n0nT!`D UE/`Lic{Iay\j"g 쿛/nL3A@p\dwnN)a_aΞ }ǿX00T #I'wV=>zlEl.+; 0-G8654:E>4L܄԰7:k5NNK3@aWQO7$-_!>2Bu7F'|"W#GHmA$s<(\ yևhbGn@;MDqQA~P)d< gE,0GBX k,Y G~ͽy3\H]Z덤 ջ>õ$diUqCdr[p^mQ U^RJvxaXNʐlF|:hJP^HP0S t"ұLlץyk3 W~_Hĭ}tVS&o斲ag0 ~gve&mƀ3Ljn M[a(j[ֹ=$d|ڙF kQ-Jn<\ OIzZf_/)]%KbV(8YUkCQF!BeDgm;R("D/VJ>ݛ>RL;osDZPŚz~sx W!\t\j#vs;fm J6ԥh)H1NFeBFHor2Y j:un_b@gi,T#,>2ai" ǭc~uRfGQ-_%V'>,*oΐ5q&KLr=!!ߣM'C^c7e7k% npd^ȗ+fFIfZ3Xv[8i@zlclF-?CɧZBc[xjIį4G>\9n;|;j0;^7e p[U5+VN\o:)P۽ }NQ$jܼszM9 \bFI+k,DX/5.ѝ$8K% ȺZAM|xDoBFPņ禺4iy[X_ȢhB9OZ?>ކ  (dg{o%%WpE*)~θWtboWcIb(޾ժzU:,_XZpl6S}GX }tO\޻n-ބ( m8J}J@[ =,P6ŮtUtY$OcyNd/k*k"S ލF7q%i?GD될) xeN̜N 4si&5[}B'),E{}@M4ZjC*HYXОa@R5k͘,ʿ|6TV׆6y==Tw|[FZ%&^ZTNËsqQǨB&cnlf/i s* 0PƼJef}Dxt:#R>5]n[ImL6&K#yB+UT~ RP>4WTU}/$gNj;*ͳd Zɭ9e"׫csJJGca廮u0yqp΍FRolK@^c.Xnr׊i MW]Q!)a4{Z"EyKUu@: w6W3 2hL`.@R^-nuٻɓO>ݒA)onc{r5%gtid}7ߏU.k?zDz vSu<Y/z䝎R hMvAlvo+mZ TǒNVK8&4})65- Y} @+hþsHH4Fv,:Ci:S5^^5#_7GJud_R۾lLu54Ր5ni+kKUHFQ`3=#Mvۓ K !Sx퐇@1\x/(@ _DUb{v~[b_i>DɆ?-'WEv[ClkEep.,Ee{>MUn;}T"2jcbErU͗wt^Ԯ:+PL_9Ph|fo9L{R>#$|s ~=M`܅;~ I͊g[hֲתx.kU:*5 w(Yc2ʫRYŚbPPi)NYz>Ll-4Kk6 mx.VL["ؿ .2p*o(3ݴss\f Hu0)s)$}*6UծM҆h5 (Bsk#Hd&M|U4=_-CC0~t[$/ƿ 6+wLpxt 1Q;v°K)LnSAP|}9:k"Y:4J=B{+V.ŚHX̣wc6e?Na`tAPGN83 hROJ>FЬ,_jB*B|+O透 AM X+eW`YV6bӮ I16JC(* ԓ8o8^4sklt }@m~>i09c X;n9׾ \yBF*+OF!ii0TM2@K5Q+V:Xr۟JYSpW4,T |jC$. q p txr;KyߊHս.:Zq*/3VY$K*bm5e{#pK%5^'͕p^[Hnʄczq#4$P&JJC]0JzR3P9^6:9@Jf*xRBRznN%K<Kc݅&}dǢP[I|CTp;Bsf#rT5]ѫv*'_+mźB;YԬC>Lui@̎ п`DérBBMHDӝmsC[L[ͅ9mm߯2>NE8 mywU{dzn_>V:wgq -Xt CK=p_%QAEe7c \5\Iz\e-&oƇ_s;Kyl;)nb˥_0Q$ \-õEQp?1.aT΂K-vn=F??J$ {{牁M[`.9J9M= uvorc5[i'5)7 E]S0VEz ^ij_6(sY_a$Q83#K2!Ve+г3% Rх$>U,G 4c₷6v:wA}<*jiyhbA61q;H4z)d^5D#ZeA%֕ÏiHBhg j"^`ϥ4}h[D\#?+CVW[,jUy~I>s*6:&<0 Uq:Rjal̵)0OS_<}2ؼ]Gp悒R@ܑ]QǻvU)xZόj#5o®XKo5ab4Cb# Ä5v'HKm@#dh'y"&g^ƇPkˁoSrWb)GI+oD1H$#$9S3+-c v`;#b(SL,̔` o :di=ջĪsrO6+hhs56rbԕjRK{BH[n+vaLN:jukU"~#= \$Jql: tX*b5AO1O. r0`\.nyA*EҔMyJDYAW+Uӄ"0>?m@&0Zh +Y9Q39}8& PgV&Z7FOJ!X!jjePy)0[uF/<1c;VSb= E;e4=,E]brv$߽1D+Aʱ@  a V=FNM $V68y ZZJ9zHkh7AsUQ#fMQj4Ô=] IG{O8CG1a XH=.4U)v@Z v83P& "zHjщ#>u8e\I֫RmCuȠʖca@: Y`SKႨL5Wulšc!&Th>@(P 2C[q0gȊ5}@F,A wTHҽ=]B$% a2K7a嬛Yɂ2C/[w X )8['Zөi$`sq:;^MyI:Qnu]N\/+(#a;@yCQ>\DEXqkDŽw1(̬"3n Ys4iji妶HgVIcekTn"ޣ=4`N-YII'f}KKB|RXXBr5FNw9לQq0fbkvǮ9l*w*y eev3͜dg]VX$9Wm.Tc N~NO^a!g&xs"ŴϾP*.y/p-ΖC.90j hĵs$8D[\[~ӟ~m^'?ԅ01{2W125(%0A9ؗsZ=;J7D8t㦼aR~cpO~f)sVV2K6.M헥<g}S/c> Cя\ET['naqjS+0ZE&xIo8dz.,҃[W.Hb@.@03}Fk 9\w)Vȼ0zۦM7_ۻK-G|GYGKuQ[^ trwF e_Zuպחݮ 5G2"f!'.+ZFtp>8Ƅ:(zAiGs)\bž_Ʊ ]x/BkLȾ zzj9P-߫g u\zժ&o`!Suo#tO*$7@+ Zh [Kmwp̸ExY8c+oLa 5sN#hzr%,/;.ϧjp Tauk:}vG"\2ަw ^DłjE{8-i\C(3oל`'"H^nixC_pHlnhRï/. JPlmŃeAr!J(6PhcmփvvH$bLc[JGҡJTjw~S_ZQd~W,NΩ <^^tz orjvg q^V891WAL[963YX5XJ"N>ֵ1:~"C#gkt#}Q"f,]pm"]zLU~ߩ2Y4B!w"32xMu303].y賧4 \'(PGM[:$MzWUn Y"4V[Lnw7ěƌ뚜]#a;TJtMfN6-W_tLc s.w<-䕰BY"#9pquh<t掤yNHWTS{a WEW%: ʼ!Ԉ}<:V\zq$-+%]4e!vPd(#톜~->V4BhG3rE@V0 gbv74)Ҁ7JͻL4m3ZձZJ֬-q<&I+V2w o\KDGc*&Q d.-yB}zR^O9p|#*$S]M?3Mkt=P?gKኩn܂>:kʴ Rnwzv`kCYpI])e=Ƞ ͷ)^mZ.۩ V FEKwchh&Tϻ2xRLc4lgzw~KMWgf,0)lYɢES*kTG,m=C7m]Tup3U< ٹ:;_Oz9K˻8iFAWGPƓH+jgI%ZqkҚN0QTV/k(1^M<05P/,9 WO^6V{v l1Lfj&\P";E}ztqUvD\S Vԯ-lj zYoRzҳfsVs0/xS%cMDm0ݮ% f?dj[4B/P2epqHPB` Jxb3}/)1e'GN|tScI1TNǩq.Uy@'_"@%Zpw9`~t3ڊjtxb~ҩ4߱kN 3hp(+/yui!Lo|M m'#ƢX+'?WW}2?O E}e7HUn/۸\_(#H2Nf,[ʒc$Ku۰.Vs3F_,UPAi,ˡWҽ-͞7,&t%8؄KHaYϾ C4a:G%#E]s Ep:5+ $Asé)\ WƲfac=~ goЂhD@M=E`Ƹz0S.>XxC]$f3k) gU>.~p+:d׎dθAkDHa s:/R_*3L&2k]_ b 3ғiNNATrh-\R9jLNq/Cx_cE>MD9K25$,u.;_SĸEa)IQ:i{v9j3óf w%&Y_K'2V81Ƒ"nt]p,{)bC$w],/vaꣀsNZyYla| Ļfo9|u`Wy#S.>GOD8NƇO h5D!/ آ t\V \=pP:҄ S| @JΗ py%)*wݿm0gPg~s& ,A fK++C%ޞoWE0@~mԉntw Z.-Nvh ƍtV٩0(jeQk<0 h 6g0oqnc8u1;NZLݷp(?F.ʧIM~56ߥ_D}[KR3Ww l6WA¬%N}ـ zb{/8uJܜMV) /%,[WNce{Ϙ)~a(;Z AH #k\P=i"2-ã]ee13grMLuyHjn Z#,ER~hM, ݀X(}2VW"jqY|@T-Ān{鴟9SI$Y9ypLzp_^m`У)T7^QZ'T!ɄxQʟ7ur&v@].m.>9{iµg}9rjR$!>tZLJ}mѾqK+yC_'N䚏A(*GEEyvC=[3~(#z1Z2 /C[pkB\u?s!d^tw λGDwh(g1>-*6J =\VzGA|g GCLyEKmk K=w7V;"QmfiչcV$ ` :l,u1 <)A"gwhHOHSNFB.#F{S?4EX.N^!#5H27ܨ);b"0J"U\VA]>$>6Rϸὸ-}^ҸtU[gV\Uvbal1a؈aˑGzn "V6^Eڧ|&)}PФw$+竜D2*3oĆ31k+ɓV2`8[.l9M+x&фj6W=8{Bl^CtJ7T  J&9#HR{XuSk r EcX"s0.%.T8Wj+W`d"R{7?Fx9*]PatlG@~8CY-+^.d ? 33/3g3k G(~`죦x(3J(Ȟ1(B,nkzͤlM}nl V+F h~gMAK6:Q[1Z~6B'KbKY8x"Z8nz`= мJ~O$/`_ѳg)}'x;m%Օįj̡,-Z"d2Y}\9B[hVD1z"v~oWALv\ {C B>Q|.t{ֲ*?L| {ه4vDH4ף*KǓL1DcG{dI}k|b/dQ_0H.158 ?Z2:5snp*i[s~\c&WLw{lT|_TxY,qO/ =/ 57M:>~09G1n#xF34CWe¸pe%<m\z5\u%%9g_vrex.7T\zwlLb|K͞DК:lua' CUgV4}֌>~OET7M;7&5GnqW!\gnZ )X7{,[3hkjα?F*=vfG"/G/m Bk\vH\֥m_b =]64 zMӇ 0IuYpj^UxH;+E#䈪ȿggk!GxmX!~@^ HzVD;ړ) տ)둶Jkҹ;0po ϡ7w(e'Gfz_5rm?pS LbA+H&}'2yrA@GoԤbqё_l0M[RZ/c#wX" k P)4F=7P bN3:09OJDJH 03W ^1&m'IuE s5tڢ x )diF<37dJ5"mͺ6/{vx+{bGK,dic% VpvoTaѝW3(5޼/kFJŴ'i$?'0qvvP!ZHBJd/G\5V=1>aI}d/|\-DmVLU3 M#ی9RNmU}a&O,V2 !}|1E3>I{5T湰8_QwVe{ZAQn_'Q}WtKoqꀏث'3TUvwz.~;4Imn纝G JX8w{v)PX(jl-Chx~"9l`!=rAN@84;,8P)]6J I=2y3,,"`-X+B廝п LrJ!0p|MHwm#BHx *z>qIwBH|5LGX]WMz1쵲J!]#XE֛b-E[B{gVH & /dj0Ԉ.omC2DLSg%&mB,DQSFc"S~D%ʠS! `>;E=uV~Vi%Hus\Bرۈȱzq,񀬯5ni`6A :mN(gqX5$ǧgbh||:@*?gI0,9^߿|xӇ(9d/( ̺8B.f|MH2Q-o@~ |z)s@ U߄y"oT^n6Ƿ"jd5#~#h tsM5nO!m 9틱w_*AA6-0&9 *_IDݦ TM$!X.bf-+X!pxolZu%nQvFqx[Y\͝\Dw1=v X-ߚ;ڥȧP-¯0J},{Зh>\P/Vyedγ̦{SLX~l1`VgNgrFPؼ{G}O~WWD340e 7 qOxw[iq[;*)ztM_H(9..tF=~!MW sDٛ 4,봊pJq.ZD{QD__zYQYi ʪV{ۍ͇{;? 6Q.ܥ/[ nuHwNS}HKT u9Р} DaoRn2v7OP{pq1,oM7A+su킵gŻ=SX@%ew4:i<.Zf2s}~'VMSe2˷3"x{Fucw n)D1x'Q>^*a\@GXNƧ~#QTg*E$'p7l>\1[ZbJWWb4v׼~běD53OՖ@g WL7.LYй7b5ߖ΢3L{C̷#<̻_m1> ,P-N5eH ϱaL[qb )a¢aA $%xj%"+PQiރPw͠?قʄZ?Ek5׼2嚿)ӱ4g{H7eۄ8Ö%{N"/>{r"ծw:H^q͠s+*+sL^QPO]P|au{ҵ@j?yO2sOCA77y2-D{JW ⟡,OPd>,uŲ/nÈne^ 04|>\1"5\hI7 bZXT`oH_lxNrE?c ?*H2x̵z Brd |cj6d4FЏsFMn6d=L~DMm4Մ'd3IZO:m1LgYbR`H vXysp^g@T> 'pF30$uIoR 2^Iqee|Euem^i[En Nҍp9@,h7!KIk&H; Gu~F7 96!%4 ΘLfE5]JuO_59Esɇl%~dÙ÷ Avc(Y>ji4hEn9d4M!à/JUA@$̚63=CBww+x1^7sA":<<VUC23u=2띳p7Yf̫L`xkv )ەRvme  cX>2>H6?ZǸ $hEiK06-݊)'$<TdɚxQ#?hrڭ-qTrFT5J!0oIˮ8gjX8(o'UUq]I|7Dzz 7,?Ri$b &rve#l~~PTcx89yGv{q UY 2T/y@.V K}(Do Y|GOSYw LGqi3G~?}6>@rF`ŶaOƉ75$<D0 [:Z‰־1oKu]$(K0,UO\J?၄ȖMl]LńhE쮬*6ǤA3Ĥ9g.8݃ЦeͭSxa`z6ZݰqYdAeN,׾W(ӨbZl24AhTv urpbT.O:sy ,jTsqҥG;l;.MD-g/*PܦNxgT v-;W#?~N-؃J63یSf7fqC`y8;H ..ڪoaGz!^ \nc3*u8/}iE?fp&RR ś*#"P0$Ù0 ZLR4.mX3q T8iiEֽmrHND CL 䚫7kjDn{\@u|I z&L  adW6sbe-lׁK fES=isjB)^-ۤ] Nd{tl7/p"Í)@J ?:+]o g l5q\e!&V)M7e#Jݿkvc"y Uke"c$tߐ"ID+*]ʊ,lt<ԂcS4,ꥡABkGvr"3F Q<]p^Khx9Laط'G/*&.v{9o1(-@teSbqL7hgFsÏIp#ΩT4 ɱiE5E E,oiNOMP{N= +aw>\YS/ ET4yg5oC2s DqVbrO S9ZJ`@P~P:R6b0**fAtQu-"*d(M5Q-B jC6W.yjp޾ŊhXt13Ox't:5\kƤ%|N) TYmW*T1?sdR1ZBj0)'*jQr(/_RF,YTPr)],&dM__H1,"rh+o[^Q3&*Lr[-K s2 +,LjdEa&4hf!D訴 fjL`}"Qh jr N\?t]_ 8g Y['8u"Zp|vi$bV׉vUهGz[d4>V:yiiDӆr#&v{m\QLNڷ!dЖ˄ ahbIf@y#ޑ[|h;h.2 'f3(Eo+<=JHy=q.&?"N̢#8(G?I)Z*|^ޤ^VU ;>L'~@`K%Bw&\P^clv&gr5h/S NQXmFby_\u Q7Ncy:}'j$qyY=^;PŶN+~#5oyl(ki{qce'B'amhLtFҗXOsig3yyE -.~1#Z.Y>!Xkbn?|E% &di6qdۯ,B'[dl Y<|x\F5he]8\%B\W0 ;Im+~^qz2DlTs @΢] ϯwMƤ"$FzC Q [JSK:ķp9}}YWsd(oy޷7љXᨤbZZM꘻εq Pm{ SID +dq_p?P_Ə}13"*-q2sM|z3u@k}x^·~VT\FȂ/9 UW I.g4/H*#7rzty=veǶ@`z6u-Q;BSRzZضb܎cX޵Ue> LD݄e}*7^&iܫ$YɥhOMm$fj8zgHfTs0.jkM$lR%[|C ߮gpFl| j>L`:f6OJߠ+Dcil+Y$P!Q]YbyDU,=yVؒA_JG4W).|'.${iahe ly'uݠdזq_4k9]CT? %wRفU,v3)^!^'@{Αp0{ ;#s2 fGL#bhTw8QTC=/^b OhKiv- _9?#I<,n]~H\l9DhJgb\ʔ]Jʝ+}<-4Ol)UN;{tN=:9\xt&c6RYJ>:K&Q"f̀Vbsi^S\COW5,?We5df%^&'%3 D#A$诹gX p6.K4v(Ó9[nHt.?;Q} |8%JRlQ0m/Ĥ5"ze ?s_3#COǓ |^C;o_`1 =7HF9!b\ O8/!c֯#[ K R#GFĉfuOZz"/)6kS#0yJƏq(ܮc,GXSJ(MٻrXTҡcav:婦mxNn.nwRr(稬HgALm%VLdnrThlp\"]|b7!R =]+ WVE梿|>O0i% B_ RJŬv}F8c. L.Pw[5 2Q y(A8JR쳄NL[b,,&DǯULJ#y`[<~"7 [Qȶi'L[C}:.LS~ *(R$517ax+3sQA\Aօqby sZ!NW:hirjvM8K54e;A{MKhkXƌmiŽ]P\/F%@_ssJ /|{]27{@ZPLM>긞k,0y:Rm#T@z:h2؋njVεcU[bE'IT9svk쎰hqn4%~)+1bXuhxQ @_ECi/1km$Wk#E_\Tz`v#qu`Xtr&oІ5h pna7<] zɸG6* U0N8{^R1Y@~Lv)º3 Eœ1 xa~4?tM0܏Fta#De]^g.}|8 * -,B+CQf.բ5h*ؕ2ӌSy?g_x&c);=ۃ^yZ"Ao;|?ڷR-t׏\GC~y^~̷ ⊧O6@o{Tajn+cUM *#rmPΧj4(┘F;@w"dX8d_.3Ǥti.~#o(O79*ӌ[줙8UfBN g-I3o lJ0U1$#m ׌H<9%JkL[Wǩ.`sAt\>*"*t\3ƾ>ğޚŽ-Ϯ9$qH>lB7V#PEKF @Ajq mFU٢IxtS2{Qd&?(zP2ʡF2Z'}Jl>23<IjUe)XI^c>ql:F3qQ_/Ea;'_""M1yےc)98'^-q8VLltn7P5 ʹd2p y^-V7̮ D0?B C6>ȃSM{>1q8Q/5}`2k4DyL;d^VOӝfF] ɫ a:wc/ɴ%ooDp+`=䟚 ]bϊݚȌѬ}F?]QxPx)^p;X*Y{P%+,qd:.k8$ģS,ROuK 4 EC|fIqDgF ! =VD z*(V5[N[.Ш8Ym0ԫOY}vSAYGc2JYsHj|,d͝c cl-{iGS8qֆ,Y]9}BT{>?w0+)U[G-J.LuVƘ!yۣSsӐid!i 2W);92 4JsYJmX~7̂RD%e5xj <y8V0) o+& $aR۠{ 9 C;zՙpp$=+ɨQՃ\PEod_gTD-K^2zA̡J>Ɯ+l#wOclt֧شy‰2AKˎ Ζ3@z` ]Ϝ c{B=:y;O; ',מoiY/\חhHWJ"w{hz/7\m5Bm8A ,Qrr.Wo7iyۏd _/>[[xCMWmf(GOQ~[<00Gc]Z,[evw ׍~<7ʌNХ3?O):-Wz\dQ7h)'>EWv@Ƴ1{l;y+zK÷]vPM,g^6UP[kid2O.+j(SWP"Jy$"{ Ǩnٌ6{A>}MOw١3'֗oWps~7N Q 8e8 ; Y#?߻߶Š|D)W*'g.]3!dlk@=v`育g%.M;Eh}񳥠)$>Ǐ Óuf;*(~p5[$Ger/Ǘ=CJAl~!kiO8hO6C ͆%it?_)wrvc [m-+/srv^'Lh)]#nCRFӴ Vl\#L9;8^gεQNwKPYRbYR@q̒lj05H+2&P4Ī֙zHX(9\4Nfw`[3!5;{EN?}I1̙=m ZsCp~3]Ywj$MjYeq&6`Y& loZB&E;/Sr긛DF5vr}22vgV8v^`V1 -+7\ԶeW,'T"_IyQ*R?aa\O%xw%:h1WlU-s%g0 #%6'oM?O̐GJJBV(u8 j-o縶G* Y!4yO G* s'mޔ:-Pb*bW Ӷ+,(A&c 0b](|nUB!᧫0V/:?죈Ik#).˪#sY.I'!tPїQ cЗܶCٛSW<*$Cf*(]p,`;ݩ:"Ϳm5ĵc=0/4R3G|ec8ߨ`]N> 1ĸE>&.[޿ kȫviѯ/4 4"& YZ