lib389-1.4.4.19~git59.136fc84-150300.3.27.1<>,Dclp9|#O(Ic6J¬$,&}C_+$ZFō&8w n |#]2.Ӑ{,rl,ϡcLM=64;/q`'WGڙ#A+XW$ dȤ,z{i\w;Y _񵄾3lTSǼMMR"'CF `ݯOx5 ¡? ~ڒ 75ѧcY[Z9?fCua79‹M%,!*TXJmV Bx>D}?}d   . d7 Mj       ~0dA(x8]9]:w]BbFGHIXpY|Z[\@]h^I.bRcSqdSeSfSlSuTv^8 w_txiysWz} }0}4}m}p}|}}Clib3891.4.4.19~git59.136fc84150300.3.27.1389 Directory Server administration tools and libraryPython library for interacting with and administering 389 Directory Server instances locally or remotely.clsheep26OSUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-later AND MPL-2.0https://www.suse.com/Development/Languages/Pythonhttps://pagure.io/389-ds-baselinuxx86_64Cra jj'B'BDeDeggNN""55CCCCGGEEAA* * ,,llbb""LL _ _ 9?9?33oo//c:c:ss x xSS--''(((("l"l z z  eejj ))vvJIJI:5:5WW-) xWBǭ ;..Cmm)w)wmm""BB,X,X77C<C< =6z 69ss&t&t11"" PP)5)5   , ,0\+  (./  ;FK%V\  EE'' b bff 11 k7q *<  '0'0ff))  &O-;EHS  JA&__gg&&ggHE_b1 r>H[S62222zzvv AABB* * @ @bb> K* 7o3 #9b9b  ^^Cy. F5C ~~PP++(vb"X4U ]$.DH49+ .2 zx ""++OO  @ @ N N--$$ J JSS ,#,#    vvAA 8V/ DD&&@@77-- 00;2!2@66  TTZH4)N ) (  33"6 | g  A|/ T m SSpp \ \0 r)6n , N '$gD7c?LoLAAA큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤clclclclclclclclclck@clclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@clck@clclclclclck@clck@clclclclclclclclclclclclclclclclclclclclclclclclclclclclclck@ck@ck@ck@ck@ck@ck@ck@clck@clclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@clck@clclclclclclclclclclclclclclclclclclclck@ck@ck@ck@ck@ck@ck@ck@clck@clclclclclclclclclclclclclclclclclclclclclck@ck@ck@ck@ck@ck@ck@ck@ck@clck@clclclck@clck@clclclclclclclclclclclclclck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@clck@clclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@clck@clclclclclclclclclck@ck@ck@ck@ck@ck@ck@ck@clck@clclclclclclclck@clck@clclclclclclclck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@clck@clclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclck@ck@ck@ck@clck@clclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclck@ck@ck@ck@ck@ck@ck@clck@clclclclclclclclclclclclclck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@clck@clclclclclclclck@ck@ck@ck@ck@ck@ck@ck@ck@ck@clck@clclclclclclclclclck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@clck@clclclclclclclclclclclck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@ck@clclclclclcl({clcl({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.4.4.19~git59.136fc84-150300.3.27.1.src.rpmlib389lib389(x86-64)python3-lib389@@      /usr/bin/python3krb5-clientmozilla-nss-toolspython(abi)python3-argcompletepython3-argparse-manpagepython3-distropython3-ldappython3-pyasn1python3-pyasn1-modulespython3-python-dateutilpython3-sixrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rpmlib(TildeInVersions)3.63.03.0.4-14.6.0-14.0-15.2-14.10.0-14.14.3ck@c[@cRc1@c@b֜b@b@bEb9@aaaI@`:@`:@`n@`n@`c`*b@`@`x@_0@_#_~@_&_^^^^k@^J@^0"@^&]z@]R@]M`@]B@\[@[}P@[`O@Z@ZtRZqZqZp^@Zo ZiZ[F@Z&@ZZZ@ZZY+@YB@Yܶ@Y5Y@Y˒Y˒YYYY@YY)j@Y@YR@Y@X @X@XZnX0>W^@Ws@W#LW#LW@W@W@VՄ@VO @UU@Ua@U@U.RU+UTT@wbrown@suse.dewbrown@suse.dewbrown@suse.dewbrown@suse.dewbrown@suse.dewbrown@suse.dewilliam.brown@suse.comwbrown@suse.dewbrown@suse.dewbrown@suse.dewilliam.brown@suse.comwbrown@suse.dewbrown@suse.dewbrown@suse.dewbrown@suse.dewilliam.brown@suse.comwbrown@suse.dewbrown@suse.dewbrown@suse.dewbrown@suse.dewbrown@suse.dewbrown@suse.dewbrown@suse.dewilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.com389-ds-maintainer@suse.de389-ds-maintainer@suse.de389-ds-maintainer@suse.de389-ds-maintainer@suse.de389-ds-maintainer@suse.dewilliam.brown@suse.comwilliam.brown@suse.com389-ds-maintainer@suse.de389-ds-maintainer@suse.devarkoly@suse.comvarkoly@suse.comdakechi@suse.comhguo@suse.commrueckert@suse.dehguo@suse.comdimstar@opensuse.orghguo@suse.comhguo@suse.comhguo@suse.commrueckert@suse.derbrown@suse.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.dejengelh@inai.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.dekukuk@suse.demrueckert@suse.debwiedemann@suse.comhguo@suse.comhguo@suse.commrueckert@suse.demrueckert@suse.dejengelh@inai.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.deaj@ajaissle.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.declaes.backstrom@opensuse.orgaj@ajaissle.dehguo@suse.comaj@ajaissle.deaj@ajaissle.deaj@ajaissle.dejengelh@inai.deaj@ajaissle.deaj@ajaissle.deaj@ajaissle.deaj@ajaissle.de- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present - Update to version 1.4.4.19~git59.136fc84: * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)- bsc#1204748 - Resolve issue with checklist post migration when dds is present - Update to version 1.4.4.19~git58.9af9f92: * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services is configured. - Update to version 1.4.4.19~git57.25311ff: * Issue 5495 - RFE - skip dds during migration. (#5496) * Issue 5345 - BUG - openldap migration fails when ppolicy is active (#5347) * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492) * Issue 5368 - Retro Changelog trimming does not work (#5486) * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264) * Issue 4324 - Revert recursive pthread mutex change (#5463) * Issue 5305 - OpenLDAP version autodetection doesn't work * Issue 5032 - Fix OpenLDAP version check (#5091) * Issue 5032 - OpenLDAP is not shipped with non-threaded version of libldap (#5033) (#5456) * Revert "Issue 5446 - Fix some covscan issues (#5451)"- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption - Update to version 1.4.4.19~git48.d4c4ff1: * Revert "Issue 5446 - Fix some covscan issues (#5451)" * Issue 5446 - Fix some covscan issues (#5451) * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422) * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420) * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400) * Issue 5221 - fix covscan (#5359) * Issue 4984 - BUG - pid file handling (#4986) * Issue 5353 - CLI - dsconf backend export breaks with multiple backends * Issue 5126 - Memory leak in slapi_ldap_get_lderrno (#5153) * Issue 5304: Need a compatibility option about sub suffix handling (#5310) * Issue 5302 - Release tarballs don't contain cockpit webapp- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling - Update to version 1.4.4.19~git46.c900a28c8: * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422) * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420) * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400) * Issue 5221 - fix covscan (#5359) * Issue 4984 - BUG - pid file handling (#4986) * Issue 5353 - CLI - dsconf backend export breaks with multiple backends * Issue 5126 - Memory leak in slapi_ldap_get_lderrno (#5153) * Issue 5304: Need a compatibility option about sub suffix handling (#5310) * Issue 5302 - Release tarballs don't contain cockpit webapp * Issue 5284 - Replication broken after password change (#5286)- bsc#1199908 - Improvements to openldap import with passwold policy present - Update to version 1.4.4.19~git43.8ba2ea21f: * Issue 5221 - fix covscan (#5359) * Issue 4984 - BUG - pid file handling (#4986) * Issue 5353 - CLI - dsconf backend export breaks with multiple backends * Issue 5126 - Memory leak in slapi_ldap_get_lderrno (#5153) * Issue 5304: Need a compatibility option about sub suffix handling (#5310) * Issue 5302 - Release tarballs don't contain cockpit webapp * Issue 5284 - Replication broken after password change (#5286) * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292) * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int' * Issue 5276 - CLI - improve task handling- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query 0001-Fix-ACI-bypass-in-shortcut-filter-condition.patch - Update to version 1.4.4.19~git38.9951c1101: * Issue 5302 - Release tarballs don't contain cockpit webapp * Issue 5284 - Replication broken after password change (#5286) * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292) * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int' * Issue 5276 - CLI - improve task handling * Issue 5273 - CLI - add arg completer for instance name * Issue 4866 - CLI - when enabling replication set changelog trimming by default * Issue 5241 - UI - Add account locking missing functionality (#5251) * Issue 5098 - Fix cherry-pick error * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS - Update to version 1.4.4.19~git28.b12c72226: * Issue 5242- Craft message may crash the server (#5243) * Issue 5234 - UI - rename Users and Groups tab * Issue 5227 - UI - No way to move back to Get Started step (#5233) * Issue 5230 - Race condition in RHDS disk monitoring functions * Issue 4299 - UI - Add CoS funtionality (#5196) * Issue 5225 - UI - impossible to manually set entry cache * Issue 5186 - UI - Fix SASL Mapping regex test feature * Issue 5221 - User with expired password can still login with full privledges * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219) * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry - Update to version 1.4.4.19~git21.feb4a55d8: * Issue 5221 - User with expired password can still login with full privledges * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219) * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194) * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn * Issue 5188 - UI - LDAP editor - add entry and group types * Issue 5184 - memberOf does not work correctly with multiple include scopes * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements * Issue 5122 - dsconf instance backend suffix set doesn't accept backend name (#5178) * Issue 5160 - BUG - x- prefix in descr-oid can confuse oid parser (#5161) * Issue 5098 - Multiple issues around replication and CI test test_online_reinit_may_hang (#5109)- Resolve boo#1194068 by adding required schema- bsc#1194084 - resolve multiple index migration bug - Update to version 1.4.4.18~git5.a46217a05: * Issue 5092 - BUG - pin concread for el8.5 * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094) * Issue 5079 - BUG - multiple ways to specific primary (#5087) * Issue 4992 - BUG - slapd.socket container fix (#4993) * Issue 5037 - in OpenQA changelog trimming can crashes (#5070) * Bump version to 1.4.4.18 * Issue 4962 - Fix various UI bugs - Database and Backups (#5044) * Issue 5046 - BUG - update concread (#5047) * Issue 5043 - BUG - Result must be used compiler warning (#5045) * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections- Update to version 1.4.4.17~git0.5e1e392ae: * Bump version to 1.4.4.17 * Issue 4927 - rebase lib389 and cockpit in 1.4.4 * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.) * Issue 4912 - Account Policy plugin does not set the config entry DN * Issue 4796 - Add support for nsslapd-state to CLI & UI * Issue 4894 - IPA failure in ipa user-del --preserve (#4907) * Issue 4169 - backport lib389 cert list fix * Issue 4912 - dsidm command crashing when account policy plugin is enabled * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks- bsc#1188151 - Update to 1.4.4.16 patch release - bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts - Update to version 389dsbase1.4.4.16~git16.c1926dfc6: * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819) * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389 * Issue 4262 - Fix Index out of bound in fractional test (#4828) * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823) * Issue 4656 - remove problematic language from ds-replcheck * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810) * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793) * Issue 4506 - Improve SASL logging * Issue 4093 - Fix MEP test case * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809) * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790) * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799) * Issue 4447 - Crash when the Referential Integrity log is manually edited * Issue 4773 - Add CI test for DNA interval assignment * Issue 4750 - Fix compiler warning in retrocl (#4751)- Update to version 1.4.4.16~git0.3d31c6c71: * Bump version to 1.4.4.16 * Update npm packages * Issue 4719 - lib389 - fix dsconf passthrough auth bugs * Issue 4778 - RFE - Allow setting TOD for db compaction and add task * Issue 4764 - replicated operation sometime checks ACI (#4783) * Issue 4623 - RFE - Monitor the current DB locks (#4762) * Issue 4781 - There are some typos in man-pages * Issue 4773 - Enable interval feature of DNA plugin * Issue 3555 - Fix UI audit issue * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)- bsc#1184476 - Add supportconfig utility for customer services to capture 389-ds support information.- Update to version 1.4.4.14~git0.37dc95673: * Bump version to 1.4.4.14 * Issue 4671 - UI - Fix browser crashes * Issue 4229 - Fix Rust linking * Issue 4658 - monitor - connection start date is incorrect * Issue 4656 - Make replication CLI backwards compatible with role name change * Issue 4656 - Remove problematic language from UI/CLI/lib389 * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down * Issue 4661 - RFE - allow importing openldap schemas (#4662) * Issue 4659 - restart after openldap migration to enable plugins (#4660) * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin- bsc#1184142 - restart after openldap migration so that plugins can correctly perform data fix ups. - Update to version 1.4.4.14~git0.37dc95673: * Bump version to 1.4.4.14 * Issue 4671 - UI - Fix browser crashes * Issue 4229 - Fix Rust linking * Issue 4658 - monitor - connection start date is incorrect * Issue 4656 - Make replication CLI backwards compatible with role name change * Issue 4656 - Remove problematic language from UI/CLI/lib389 * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down * Issue 4661 - RFE - allow importing openldap schemas (#4662) * Issue 4659 - restart after openldap migration to enable plugins (#4660) * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin- Update to version 389-ds-base-1.4.4.13~git0.6841d693f: * Bump version to 1.4.4.13 * Update dscontainer (#4564) * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607) * Issue 4324 - Some architectures the cache line size file does not exist * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614) * Issue 4609 - CVE - info disclosure when authenticating * Bump version to 1.4.4.12 * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584) * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573) * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)- Update to version 1.4.4.12~git0.7b681e1da: * Bump version to 1.4.4.12 * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584) * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573) * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553) * Issue 4396 - Minor memory leak in backend (#4558) (#4572) * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569) * Issue 5442 - Search results are different between RHDS10 and RHDS11 * Bump version to 1.4.4.11 * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation * Issue 4513 - Fix schema test and lib389 task module (#4514)- Upstream fix for bsc#1180847 - openldap_to_ds can fail if the backend has no overlays or indexes. - Remove patches now merged upstream. * 0001-Ticket-51260-fix-potential-syncrepl-data-corruption.patch * 0002-Ticket-51260-improve-tests-and-improve-readme-re-ref.patch * 0003-Ticket-4224-openldap-can-become-confused-with-entryu.patch * 0004-Issue-4410-RFE-ndn-cache-with-arc-in-rust.patch * 0005-Issue-4403-RFE-OpenLDAP-pw-hash-migration-tests-4408.patch * 0006-Issue-4446-RFE-openldap-password-hashers.patch * 0007-Issue-4464-RFE-clang-with-ds-asan-rust.patch * 0008-Issue-4229-RFE-Improve-rust-linking-and-build-perfor.patch - Update to version 1.4.4.10~git0.ebdf25251: * Bump version to 1.4.4.10 * Issue 4418 - fix cherry-pick error * Issue 4381 - RFE - LDAPI authentication DN rewritter * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540) * Issue 4513 - CI Tests - fix test failures * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529) * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533) * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527) * Issue 4506 - BUG - Fix bounds on fd table population (#4520)- Lib389 is a hard requirement in 1.4.4, and perl has been completely removed. Reflect this in our spec file. - Add rebased patches for SUSE Feature Completion: jsc#SLE-11501 * 0001-Ticket-51260-fix-potential-syncrepl-data-corruption.patch * 0002-Ticket-51260-improve-tests-and-improve-readme-re-ref.patch * 0003-Ticket-4224-openldap-can-become-confused-with-entryu.patch * 0004-Issue-4410-RFE-ndn-cache-with-arc-in-rust.patch * 0005-Issue-4403-RFE-OpenLDAP-pw-hash-migration-tests-4408.patch * 0006-Issue-4446-RFE-openldap-password-hashers.patch * 0007-Issue-4464-RFE-clang-with-ds-asan-rust.patch * 0008-Issue-4229-RFE-Improve-rust-linking-and-build-perfor.patch - Update to version 1.4.4.9~git0.b09e60339: * Bump version to 1.4.4.9 * Issue 4105 - Remove python.six (fix regression) * Issue 4384 - Use MONOTONIC clock for all timing events and conditions * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467) * Issue 4460 - BUG - lib389 should use system tls policy * Issue 3657 - Add options to dsctl for dsrc file * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439) * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451) * Issue 4105 - Remove python.six from lib389 (#4456)- Update to version 1.4.4.8~git0.bf454ad07: * Bump version to 1.4.4.8 * Issue 4415 - unable to query schema if there are extra parenthesis * Issue 4176 - CL trimming causes high CPU * Bump version to 1.4.4.7 * Issue 2526 - revert backend validation check * Issue 4262 - more perl removal cleanup * Issue 2526 - retrocl backend created out of order * Bump version to 1.4.4.6 * Issue 4262 - Remove legacy tools subpackage (final cleanup) * Issue 4262 - Remove legacy tools subpackage (restart instances after rpm install)- Update to version 1.4.4.4~git0.318a3ce0c: * Bump version to 1.4.4.4 * Ticket 51175 - resolve plugin name leaking * Issue 51187 - UI - stop importing Cockpit's PF css * Issue 51192 - Add option to reject internal unindexed searches * Issue 50840 - Fix test docstrings metadata-1 * Issue 50840 - Fix test docstrings metadata * Ticket 50980 - fix foo_filter_rewrite * Issue 51165 - add more logconv stats for the new access log keywords * Issue 50928 - Unable to create a suffix with countryName either via dscreate or the admin console * Issue 51188 - db2ldif crashes when LDIF file can't be accessed * Issue 50545 - Port remaining legacy tools to new python CLI * Issue 51165 - add new access log keywords for wtime and optime * Issue : 49761 - Fix CI test suite issues ( Port remaning acceptance test suit part 1) * Issue: 51070 - Port Import TET module to python3 part2 * Issue:51142 - Port manage Entry TET suit to python 3 part 1 * Issue: 50860 - Port Password Policy test cases from TET to python3 final * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit * Issue 49256 - log warning when thread number is very different from autotuned value * Issue 51157 - Reindex task may create abandoned index file * Issue 50873 - Fix issues with healthcheck tool * Issue:50860 - Port Password Policy test cases from TET to python3 part2 * Issue 51166 - Log an error when a search is fully unindexed * Ticket 50544 - OpenLDAP syncrepl compatability * Ticket 51161 - fix SLE15.2 install issps * Issue 49999 - rpm.mk build-cockpit should clean cockpit_dist first * Issue 51144 - dsctl fails with instance names that contain slapd- * Issue 51155 - Fix OID for sambaConfig objectclass * Ticket 51159 - dsidm ou delete fails * Issue 50984 - Memory leaks in disk monitoring * Ticket 51131 - improve mutex alloc in conntable * Issue 49761 - Fix CI tests * Ticket 49859 - A distinguished value can be missing in an entry * Issue 50791 - Healthcheck should look for notes=A/F in access log * Issue 51072 - Set the default minimum worker threads * Ticket 51140 - missing ifdef * Issue 50912 - pwdReset can be modified by a user * Issue 50781 - Make building cockpit plugin optional * Issue 51100 - Correct numSubordinates value for cn=monitor * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON * Ticket 137 - fix compiler warning * Issue 50781 - Make building cockpit plugin optional * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected * Ticket 51034 - labeledURIObject * Issue 50545 - Port remaining legacy tools to new python CLI * Issue 50889 - Extract pem files into a private namespace * Ticket 137 - Implement EntryUUID plugin * Ticket 51072 - improve autotune defaults * Ticket 51115 - enable samba3.ldif by default * Issue 51118 - UI - improve modal validation when creating an instance * Issue 50746 - Add option to healthcheck to list all the lint reports * Bump version to 1.4.4.3 * Issue 50931 - RFE AD filter rewriter for ObjectCategory * Issue: 50860 - Port Password Policy test cases from TET to python3 part1 * Issue 51113 - Allow using uid for replication manager entry * Issue 51095 - abort operation if CSN can not be generated * Issue 51110 - Fix ASAN ODR warnings * Issue 49850 -ldbm_get_nonleaf_ids() painfully slow for databases with many non-leaf entries * Issue 51102 - RFE - ds-replcheck - make online timeout configurable * Issue 51076 - remove unnecessary slapi entry dups * Issue 51086 - Improve dscreate instance name validation * Issue:51070 - Port Import TET module to python3 part1 * Ticket 51037 - compiler warning * Ticket 50989 - ignore pid when it is ourself in protect_db * Ticket 51037 - RFE AD filter rewriter for ObjectSID * Issue 50499 - Fix some npm audit issues * Issue 51091 - healthcheck json report fails when mapping tree is deleted * Ticket 51079 - container pid start and stop issues * Revert "Issue 51017 - Implement dynamic ds/bz pytest markers" * Issue 49761 - Fix CI tests * Issue 50610 - Fix return code when it's nothing to free * Issue 50610 - memory leaks in dbscan and changelog encryption * Issue 51076 - prevent unnecessarily duplication of the target entry * Issue 50940 - Permissions of some shipped directories may change over time * Issue 50873 - Fix issues with healthcheck tool * Issue 51017 - Implement dynamic ds/bz pytest markers * Ticket 51082 - abort when a empty valueset is freed * Issue:CI test - automember_plugin (Long Duration test) * Issue 50201 - nsIndexIDListScanLimit accepts any value * Bump version to 1.4.4.2 * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema * Issue 51054 - Revise ACI target syntax checking * Ticket 51068 - deadlock when updating the schema * Issue 51042 - try to use both c_rehash and openssl rehash * Issue 51042 - switch from c_rehash to openssl rehash * Issue 50992 - Bump jemalloc version and enable profiling * Issue 51060 - unable to set sslVersionMin to TLS1.0 * Issue 51064 - Unable to install server where IPv6 is disabled * Issue 51051 - CLI fix consistency issues with confirmations * Issue 50655 - etime displayed has an order of magnitude 10 times smaller than it should be * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev * Issue 49761 - Fix CI tests * Issue 51047 - React deprecating ComponentWillMount * Issue 50499 - fix npm audit issues * Issue 50545 - Port dbgen.pl to dsctl * Issue 51027 - Test passwordHistory is not rewritten on a fail attempt * Bump version to 1.4.4.1 * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins * Ticket 50877 - task to run tests of csn generator * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now * Issue: 48055 - CI test - automember_plugin(part3) * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1 * Issue 51031 UI - transition between two instances needs improvement * Bump version to 1.4.4- Update to version 1.4.3.12~git0.9bc042902: * Bump version to 1.4.3.12 * Issue 51222 - It should not be allowed to delete Managed Entry manually * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version * Issue 51086 - Fix instance name length for interactive install * Issue 51136 - JSON Error output has redundant messages * Issue 51059 - If dbhome directory is set online backup fails * Issue 51000 - Separate the BDB backend monitors * Issue 49300 - entryUSN is duplicated after memberOf operation * Issue 50984 - Fix disk_mon_check_diskspace types- Remove patch that is now included in latest release: 0001-Ticket-51161-fix-SLE15.2-install-issps.patch - Resolve bsc#1174057 upstream stability and fix rollup. - Update to version 1.4.3.11~git0.82796f172: * Bump version to 1.4.3.11 * Issue 51192 - Add option to reject internal unindexed searches * Ticket 51159 - dsidm ou delete fails * Issue 51165 - add more logconv stats for the new access log keywords * Issue 51188 - db2ldif crashes when LDIF file can't be accessed * Issue 51165 - add new access log keywords for wtime and optime * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit * Issue 49256 - log warning when thread number is very different from autotuned value * Issue 51157 - Reindex task may create abandoned index file * Issue 51166 - Log an error when a search is fully unindexed * Ticket 51161 - fix SLE15.2 install issps * Issue 51144 - dsctl fails with instance names that contain slapd- * Issue 50984 - Memory leaks in disk monitoring * Issue 50201 - nsIndexIDListScanLimit accepts any value * Bump version to 1.4.3.10 * Ticket 49859 - A distinguished value can be missing in an entry * Issue 50791 - Healthcheck should look for notes=A/F in access log * Issue 51072 - Set the default minimum worker threads * Issue 50912 - pwdReset can be modified by a user * Issue 51100 - Correct numSubordinates value for cn=monitor * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected * Ticket 51072 - improve autotune defaults * Issue 50746 - Add option to healthcheck to list all the lint reports * Issue 51118 - UI - improve modal validation when creating an instance- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328 This corrects a failure to install on SUSE due to incorrect hostname generation, and a python 3 utf8 issue that is triggered by systemd.- Update to version 1.4.3.9~git0.3eb8617f6: * Bump version to 1.4.3.9 * Issue 50931 - RFE AD filter rewriter for ObjectCategory * Issue 51113 - Allow using uid for replication manager entry * Issue 51095 - abort operation if CSN can not be generated * Issue 51110 - Fix ASAN ODR warnings * Issue 51102 - RFE - ds-replcheck - make online timeout configurable * Issue 51076 - remove unnecessary slapi entry dups * Issue 51086 - Improve dscreate instance name validation * Ticket 50989 - ignore pid when it is ourself in protect_db * Issue 50499 - Fix some npm audit issues * Issue 51091 - healthcheck json report fails when mapping tree is deleted * Ticket 51079 - container pid start and stop issues * Issue 50610 - Fix return code when it's nothing to free * Ticket 51082 - abort when a empty valueset is freed * Issue 50610 - memory leaks in dbscan and changelog encryption * Issue 51076 - prevent unnecessarily duplication of the target entry * Bump version to 1.4.3.8 * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema * Issue 51054 - Revise ACI target syntax checking * Ticket 51068 - deadlock when updating the schema * Issue 51060 - unable to set sslVersionMin to TLS1.0 * Issue 51064 - Unable to install server where IPv6 is disabled * Issue 51051 - CLI fix consistency issues with confirmations * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev * Issue 51047 - React deprecating ComponentWillMount * Issue 50499 - fix npm audit issues * Issue 50545 - Port dbgen.pl to dsctl * Bump version to 1.4.3.7 * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1 * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now * Issue 51031 UI - transition between two instances needs improvement * Bump version to 1.4.3.6 * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default * Ticket 50931 - RFE AD filter rewriter for ObjectCategory * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator * Ticket 51008 - dbhome in containers * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code * Ticket 51014 - slapi_pal.c possible static buffer overflow * Issue 50545 - remove dbmon "incr" option from arg parser * Issue 50545 - Port dbmon.sh to dsconf * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value * Issue 49731 - Fix additional issues with setting db home directory by default * Issue 50337 - Replace exec() with setattr() * Ticket 50905 - intermittent SSL hang with rhds * Issue 50952 - SSCA lacks basicConstraint:CA * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value * Bump version to 1.4.3.5 * Issue 50994 - Fix latest UI bugs found by QE * Ticket 50933 - rfc2307compat.ldif * Issue 50337 - Replace exec() with setattr() * Issue 50984 - Memory leaks in disk monitoring * Issue 50984 - Memory leaks in disk monitoring * Issue 49731 - dscreate fails in silent mode because of db_home_dir * Issue 50975 - Revise UI branding with new minimized build * Issue 49437 - Fix memory leak with indirect COS * Issue 49731 - Do not add db_home_dir to template-dse.ldif * Issue 49731 - set and use db_home_directory by default * Ticket 50971 - fix BSD_SOURCE * -n option of dbverify does not work * Issue 50952- SSCA lacks basicConstraint:CA * Issue 50976 - Clean up Web UI source directory from unused files * Issue 50955 - Fix memory leaks in chaining plugin(part 2) * Issue 50966 - UI - Database indexes not using typeAhead correctly * Issue 50974 - UI - wrong title in "Delete Suffix" popup * Issue 50972 - Fix cockpit plugin build * Issue 49761 - Fix CI test suite issues * Issue 50971 - Support building on FreeBSD. * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted * Issue 50963 - We should bundle *.min.js files of Console * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section. * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final * Issue 50954 - buildnum.py - fix date formatting issue * Bump version to 1.4.3.4 * Issue 50954 - Port buildnum.pl to python(part 2) * Issue 50955 - Fix memory leaks in chaining plugin * Issue 50954 - Port buildnum.pl to python * Ticket 50947 - change 00core.ldif objectClasses for openldap migration * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory * Issue 50937 - Update CLI for new backend split configuration * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh * Ticket 50945 - givenname alias of gn from openldap * Ticket 50935 - systemd override in lib389 for dscontainer * Issue 50499 - Fix npm audit issues * Issue 49761 - Fix CI test suite issues * Ticket 50618 - clean compiler warning and log level * Ticket 50889 - fix compiler issues * Issue 50884 - Health check tool DSEldif check fails * Issue 50926 - Remove dual spinner and other UI fixes * Issue 50928 - Unable to create a suffix with countryName * Issue 50758 - Only Recommend bash-completion, not Require * Issue 50923 - Fix a test regression * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name * Issue 50919 - Backend delete fails using dsconf * Issue 50872 - dsconf can't create GSSAPI replication agreements * Issue 50912 - RFE - add password policy attribute pwdReset * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group * Ticket 50889 - Extract pem files into a private namespace * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before * Issue: 50686 - Port fractional replication test cases from TET to python3 final * Issue 49845 - Remove pkgconfig check for libasan * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080 * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs * Ticket 50786 - connection table freelist * Ticket 50618 - support cgroupv2 * Ticket 50900 - Fix cargo offline build * Ticket 50898 - ldclt core dumped when run with -e genldif option * Bump version to 1.4.3.3 * Issue 50855 - remove unused file from UI * Issue 50855 - UI: Port Server Tab to React * Issue 49845 - README does not contain complete information on building * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1 * Ticket - 49623-cont cenotaph errors on modrdn operations * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled * Issue 50886 - Typo in the replication debug message * Issue 50873 - Fix healthcheck and virtual attr check * Issue 50873 - Fix issues with healthcheck tool * Issue 50028 - Add a new CI test case * Issue 49946 - Add a new CI test case * Issue 50117 - Add a new CI test case * Ticket 50787 - fix implementation of attr unique * Ticket 50859 - support running only with ldaps socket * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache * Issue 50867 - Fix minor buildsys issues * Issue 50737 - Allow building with rust online without vendoring * Ticket 50831 add cargo.lock to allow offline builds * Ticket 50694 - import PEM certs on startup * Ticket 50857 - Memory leak in ACI using IP subject * Issue 49761 - Fix CI test suite issues * Issue 50853 - Fix NULL pointer deref in config setting * Issue 50850 - Fix dsctl healthcheck for python36 * Issue 49990 - Need to enforce a hard maximum limit for file descriptors * Ticket 48707 - ldapssotoken for authentication * Bump version to 1.4.3.2 * Issue 49254 - Fix compiler failures and warnings * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown * Issue 50836 - Port Schema UI tab to React * Issue 50842 - Decrease 389-console Cockpit component size * Ticket 50790 - Add result text when filter is invalid * Issue 50627 - Add ASAN logs to HTML report * Issue 50834 - Incorrectly setting the NSS default SSL version max * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 * Ticket 50784 - performance testing scripts * Issue 50599 - Fix memory leak when removing db region files * Issue 49395 - Set the default TLS version min to TLS1.2 * Issue 50818 - dsconf pwdpolicy get error * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined" * Issue 50599 - Remove db region files prior to db recovery * Issue 50812 - dscontainer executable should be placed under /usr/libexec/dirsrv/ * Issue 50816 - dsconf allows the root password to be set to nothing * Issue 50798 - incorrect bytes in format string(fix import issue) * Bump version to 1.4.3.1 * Ticket 50798 - incorrect bytes in format string * Issue 50545 - Add the new replication monitor functionality to UI * Issue 50806 - Fix minor issues in lib389 health checks * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1 * Issue 49761 - Fix CI test suite issues * Issue 49761 - Fix CI test suite issues * Issue 50754 - Add Restore Change Log option to CLI * Issue: 48055 - CI test - automember_plugin(part2) * Ticket 50667 - dsctl -l did not respect PREFIX * Issue 50780 - More CLI fixes * Ticket 50649 - lib389 without defaults.inf * Issue 50780 - Fix UI issues * Ticket 50727 - correct mistaken options in filter validation patch * Issue 50779 - lib389 - conflict compare fails for DN's with spaces * Set branch version to 1.4.3.0- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch as it is part of 1.4.2.14 - Update to version 1.4.2.14~git0.5ac5b02ce: * Bump version to 1.4.2.14 * Issue 51113 - Allow using uid for replication manager entry * Issue 51095 - abort operation if CSN can not be generated * Issue 51110 - Fix ASAN ODR warnings * Issue 51102 - RFE - ds-replcheck - make online timeout configurable * Issue 51076 - remove unnecessary slapi entry dups * Issue 51086 - Improve dscreate instance name validation * Ticket 50989 - ignore pid when it is ourself in protect_db * Issue 50499 - Fix some npm audit issues * Issue 51091 - healthcheck json report fails when mapping tree is deleted * Ticket 51079 - container pid start and stop issues * Issue 50610 - Fix return code when it's nothing to free * Ticket 51082 - abort when a empty valueset is freed * Issue 50610 - memory leaks in dbscan and changelog encryption * Issue 51076 - prevent unnecessarily duplication of the target entry * Issue 50940 - Permissions of some shipped directories may change over time * Bump version to 1.4.2.13 * Ticket 50787 - fix implementation of attr unique * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema * Ticket 51068 - deadlock when updating the schema * Issue 51060 - unable to set sslVersionMin to TLS1.0 * Issue 51064 - Unable to install server where IPv6 is disabled * Issue 51051 - CLI fix consistency issues with confirmations * Issue 51047 - React deprecating ComponentWillMount * Issue 50499 - fix npm audit issues * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1 * Issue 51031 UI - transition between two instances needs improvement * Bump version to 1.4.2.12 * Issue 50337 - Replace exec() with setattr() * Issue 50545 - the check for the ds version for the backend config was broken * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code * Ticket 51014 - slapi_pal.c possible static buffer overflow * Issue 50545 - remove dbmon "incr" option from arg parser * Issue 50545 - Port dbmon.sh to dsconf * Ticket 50905 - intermittent SSL hang with rhds * Issue 50952 - SSCA lacks basicConstraint:CA * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value- Patch rollup as described in bsc#1169364 - Add rust vendor.tar.gz as a source - rust is still an optional build and will be enabled in the future. - Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will not exist in containers with systemd users. - Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to resolve a warning found in static analysis in OBS (upstream #51014) - Update to version 1.4.2.11~git0.aff1a2831: * Bump version to 1.4.2.11 * Issue 50994 - Fix latest UI bugs found by QE * Issue 50337 - Replace exec() with setattr() * Issue 50984 - Memory leaks in disk monitoring * Issue 50975 - Revise UI branding with new minimized build * Issue 49437 - Fix memory leak with indirect COS * Issue 50976 - Clean up Web UI source directory from unused files * Issue 50744 - -n option of dbverify does not work * Issue 50952- SSCA lacks basicConstraint:CA * Bump version to 1.4.2.10 * Issue 50966 - UI - Database indexes not using typeAhead correctly * Issue 50974 - UI - wrong title in "Delete Suffix" popup * Issue 50972 - Fix cockpit plugin build * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted * Issue 50963 - We should bundle *.min.js files of Console * Bump version to 1.4.2.9 * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory * Issue 50937 - Update CLI for new backend split configuration * Issue 50499 - Fix npm audit issues * Issue 50884 - Health check tool DSEldif check fails * Issue 50926 - Remove dual spinner and other UI fixes * Issue 49845 - Remove pkgconfig check for libasan * Issue 50758 - Only Recommend bash-completion, not Require * Issue 50928 - Unable to create a suffix with countryName * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code * Issue 50919 - Backend delete fails using dsconf * Issue 50872 - dsconf can't create GSSAPI replication agreements * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before * Ticket 50618 - support cgroupv2 * Ticket 50898 - ldclt core dumped when run with -e genldif option- Update to version 1.4.2.8~git0.3aaa3e820: * Bump version to 1.4.2.8 * Issue 50855 - remove unused file from UI * Issue 50855 - UI: Port Server Tab to React * Issue 49845 - README does not contain complete information on building * Ticket - 49623-cont cenotaph errors on modrdn operations * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled * Issue 50886 - Typo in the replication debug message * Issue 50873 - Fix healthcheck and virtual attr check * Issue 50873 - Fix issues with healthcheck tool * Ticket 50857 - Memory leak in ACI using IP subject * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache * Issue 50850 - Fix dsctl healthcheck for python36 * Issue 49990 - Need to enforce a hard maximum limit for file descriptors- Update to version 1.4.2.7~git0.202953d28: * Bump version to 1.4.2.7 * Issue 49254 - Fix compiler failures and warnings * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown * Issue 50836 - Port Schema UI tab to React * Issue 50842 - Decrease 389-console Cockpit component size * Ticket 50790 - Add result text when filter is invalid * Issue 50834 - Incorrectly setting the NSS default SSL version max * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 * Issue 50599 - Fix memory leak when removing db region files * Issue 49395 - Set the default TLS version min to TLS1.2 * Issue 50818 - dsconf pwdpolicy get error * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined" * Issue 50599 - Remove db region files prior to db recovery * Issue 50812 - dscontainer executable should be placed under /usr/libexec/dirsrv/ * Issue 50816 - dsconf allows the root password to be set to nothing * Issue 50798 - incorrect bytes in format string(fix import issue)- Update to version 1.4.2.6~git0.e84bbce3f: * Bump version to 1.4.2.6 * Ticket 50798 - incorrect bytes in format string * Issue 50545 - Add the new replication monitor functionality to UI * Issue 50806 - Fix minor issues in lib389 health checks * Issue 50754 - Add Restore Change Log option to CLI * Ticket 50727 - change syntax validate by default in 1.4.2 * Ticket 50667 - dsctl -l did not respect PREFIX * Issue 50780 - More CLI fixes * Issue 50780 - Fix UI issues * Ticket 50727 - correct mistaken options in filter validation patch * Issue 50779 - lib389 - conflict compare fails for DN's with spaces * Ticket #49761 - Fix CI test suite issues * Issue 50499 - Fix npm audit issues * Issue 50774 - Account.enroll_certificate() should not check for DS version * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern' * Issue 50758 - Need to enable CLI arg completion * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins) * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index) * Issue 50761 - Parametrized tests are missing ':parametrized' value * Bump version to 1.4.2.5 * Issue 50747 - Port readnsstate to dsctl * Issue 50758 - Enable CLI arg completion * Issue 50753 - Dumping the changelog to a file doesn't work * Ticket 50745: ns-slapd hangs during CleanAllRUV tests * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt * Issue: 48851 - investigate and port TET matching rules filter tests(cert) * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP * Ticket 50664 - DS can fail to recover if an empty directory exists in db * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted * Issue 50701 - Fix type in lint report * Ticket 50729 - add support for gssapi tests on suse * Issue 50701 - Add additional healthchecks to dsconf * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute * Issue 50439 - Update docker integration for Fedora * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match) * Issue 50499 - Fix npm audit issues * Issue 50722 - Test IDs are not unique * Issue 50712 - Version comparison doesn't work correctly on git builds * Issue 50499 - Fix npm audit issues * Issue 50706 - Missing lib389 dependency - packaging * Bump version to 1.4.2.4 * Issue 49761 - Fix CI test suite issues * Issue 50634 - Fix CLI error parsing for non-string values * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes * Issue 50644 - fix regression with creating sample entries * Issue 50699 - Add Disk Monitor to CLI and UI * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes * Issue 50536 - After audit log file is rotated, DS version string is logged after each update * Issue #50712 - Version comparison doesn't work correctly on git builds * Issue 50706 - Missing lib389 dependency - packaging * Issue 49761 - Fix CI test suite issues * Issue #50683 - Makefile.am contains unused RPM-related targets * Issue 50696 - Fix various UI bugs * Update based on Marks feedback * Update to mark as skipif * Ticket 50641 - Update default aci to allows users to change their own password * Ticket 50007, 50648 - improve x509 handling. * Issue 50689 - Failed db restore task does not report an error * Issue 50199 - Disable perl by default * Ticket 50633 - Add cargo vendor support for offline builds * Issue 50499 - Fix npm audit issues * Bump version to 1.4.2.3 * Issue 50592 - Port Replication Tab to ReactJS * Issue 50680 - Remove branding from upstream spec file * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.) * Issue: 48055 - CI test - automember_plugin(part1) * Issue 50677 - Map subtree searches with NULL base to default naming context * Issue 50669 - Fix RPM build * Ticket 50669 - remove nunc-stans * Ticket 49850 cont -fix crash in ldbm_non_leaf * Issue 50634 - Clean up CLI errors output - Fix wrong exception * Issue 50660 - Build failure on Fedora 31 * Issue 50634 - Clean up CLI errors output * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases) * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request" * Issue 49850 - ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries * Issue 50655 - access log etime is not properly formatted * Issue 50653 - objectclass parsing fails to log error message text * Issue 50646 - Improve task handling during shutdowns * Add new test suite to test migration between RHDS versions * Ticket 50627 - Support platforms without pytest_html * Ticket 49476 - backend refactoring phase1, fix failing tests * Ticket 49476 - refactor ldbm backend to allow replacement of BDB * Ticket - 50349 - additional fix: filter schema check must handle subtypes * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases) * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object * Ticket 50636 - Crash during sasl bind * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal * Ticket 50619 - extend commands to have more modify options * Issue 50499 - Fix npm audit issues * bump version to 1.4.2.2- Update to version 1.4.2.2~git0.d41ef935b: * Issue 50627 - Add ASAN logs to HTML report * Issue 50545 - Port repl-monitor.pl to lib389 CLI * Ticket 50622 - ds_selinux_enabled may crash on suse * Ticket 50595 - remove syslog.target requirement * Ticket 50617 - disable cargo lock * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref) * Issue 50615 - Log current test name to journald * Ticket: 50610 memory leak in dbscan * Bump version to 1.4.2.1 * Ticket 50581 - ns-slapd crashes during ldapi search * Issue 50604 - Fix UI validation * ticket 50510 - etime can contain invalid nanosecond value * Ticket 50593 Investigate URP handling on standalone instance * Issue 50506 - Fix regression for relication stripattrs * Issue 50580 - Perl can't be disabled in configure * Ticket 50584, 49212 - docker healthcheck and configuration * Issue 50546 - fix more UI issues(part 2) * Do not use comparision with "is" for empty value * Issue 50546 - fix more UI issues * Issue 50586 - lib389 - Fix DSEldif long line processing * Issue 50173 - Add the validate-syntax task to the dsconf schema * Issue 50546 - Fix various issues in UI * Bump version to 1.4.2.0 * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl * Ticket 50567, 50568 - strict host check disable and display container version * Issue 50550 - DS installer debug messages leaking to ipa-server-install * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds * Ticket 50349 - filter schema validation * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly) * Issue 49324 - idl_new fix assert * Ticket 50564 - Fix rust libraries by default and improve docker * Issue 50206 - Refactor lock, unlock and status of dsidm account/role * Issue 49324 - idl_new report index name in error conditions * Issue 49761 - Fix CI test suite issues * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor * Issue 50499 - Audit fix - Update npm 'eslint-utils' version * Issue 49624 - modrdn silently fails if DB deadlock occurs * fix for 50542 crashes in filter tests * Issue 49761 - Fix CI test suite issues * Ticket 50542 - Entry cache contention during base search * Issue 50462 - Fix CI tests * Ticket 50490 objects and memory leaks * Issue 50538 - Move CI test to individual file * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks * Issue 50536 - Audit log heading written to log after every update * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted * Issue 50534 - CLI change schema edit subcommand to replace * Issue 50506 - cont Fix invalid frees from pointer reference calls * Issue 50507 - Fix Cockpit UI styling for PF4 * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final) * Issue: 48851 - Add more test cases to the match test suite(mode replace) * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1" * Issue 50529 - LDAP server returning PWP controls in different sequence * Issue 50506 - Fix invalid frees from pointer reference calls. * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref() * Issue 50521 - Add regressions in CI tests * Ticket 50510 - etime can contain invalid nanosecond value * Issue 50488 - Create a monitor for disk space usagedisk-space-mon * Issue 50511 - lib389 PosixGroups type can not handle rdn properly * Issue 50508 - UI - fix local password policy form- Fix spec file discrepencies from SLE - Update to correct license issue in spec file - Update to simplify rust option selection - Update to version 1.4.1.6~git0.5ac5a8aad: * Bump version to 1.4.1.6 * Issue 50355 - SSL version min and max not correctly applied * Issue 50497 - Port cl-dump.pl tool to Python using lib389 * Issue: 48851 - investigate and port TET matching rules filter tests(Final) * correction to fix for #50417 * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file * Issue 50325 - Add Security tab to UI * Ticket 49789 - By default, do not manage unhashed password * Ticket 49421 - Implement password hash upgrade on bind. * Ticket 49421 - on bind password upgrade proof of concept * Ticket 50493 - connection_is_free to trylock * Ticket 50459 - Correct issue with allocation state * Issue 50499 - Fix audit issues and remove jquery from the whitelist * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing * Ticket 50484 - Add a release build dockerfile and dscontainer improvements * Issue 50486 - Update jemalloc to 5.2.0 - Update to version 1.4.1.5~git0.748334143: * Bump version to 1.4.1.5 * Issue 50431 - Fix regression from coverity fix * Issue 49239 - Add a new CI test case * Issue 49997 - Add a new CI test case * Issue 50177 - Add a new CI test case, also added fixes in lib389 * Issue 49761 - Fix CI test suite issues * Issue 50474 - Unify result codes for add and modify of repl5 config * Ticket 50472 - memory leak with encryption * Issue 50462 - Fix Root DN access control plugin CI tests * Issue 50462 - Fix CI tests * Ticket 50217 - Implement dsconf security section * Issue: 48851 - Add more test cases to the match test suite. * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients * Ticket 50439 - fix waitpid issue when pid does not exist * Issue 50454 - Fix Cockpit UI branding * Issue: 48851 - investigate and port TET matching rules filter tests(index) * Issue 49232 - Truncate the message when buffer capacity is exceeded * Bump version to 1.4.1.4 * Ticket 49361 - Use IPv6 friendly network functions * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777) * Issue: 50446 - NameError: name 'ds_is_older' is not defined * Issue 49602 - Revise replication status messages * Ticket 50439 - Update docker integration to work out of source directory * Ticket 50037 - revert path changes as it breaks prefix/rpm builds * Issue 50431 - Fix regression from coverity fix * Issue 50370 - CleanAllRUV task crashing during server shutdown * Issue: 48851 - investigate and port TET matching rules filter tests(match) * Issue 50417 - Fix missing quote in some legacy tools * Ticket 50431 - Fix covscan warnings * Revert "Issue 49960 - Core schema contains strings instead of numer oids" * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters * Issue 50052 - Fix rpm.mk according to audit-ci change * Issue 50365 - PIDFile= references path below legacy directory /var/run/ * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request" * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes * Issue: 48851 - Add more search filters to vfilter_simple test suite * Issue 49761 - Fix CI test suite issues * Issue 49875 - Move SystemD service config to a drop-in file * Ticket 50413 - ds-replcheck - Always display the Result Summary * Issue 50052 - Add package-lock.json and use "npm ci" * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple) * Ticket 50355 - NSS can change the requested SSL min and max versions * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld) * Issue 50390 - Add Managed Entries Plug-in Config Entry schema * Ticket 49730 - Remove unused Mozilla ldapsdk variables - Update to version 1.4.1.3~git0.1f1119d4b: * Bump version to 1.4.1.3 * Issue 49761 - Fix CI test suite issues * Issue 50041 - Add the rest UI Plugin tabs - Part 2 * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389 * Ticket 50389 - ns-slapd craches while two threads are polling the same connection * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit) * Issue 50037 - lib389 fails to install in venv under non-root user * Issue: 50112 - Port ACI test suit from TET to python3(userattr) * Ticket 50393 - maxlogsperdir accepting negative values * Issue: 50112 - Port ACI test suit from TET to python3(roledn) * Issue 49960 - Core schema contains strings instead of numer oids * Ticket 50396 - Crash in PAM plugin when user does not exist * Issue 50387 - enable_tls() should label ports with ldap_port_t * Issue 50390 - Add Managed Entries Plug-in Config Entry schema * Ticket 50306 - Fix regression with maxbersize * Issue 50384 - Missing dependency: cracklib-dicts * Issue 49029 - [RFE] improve internal operations logging * Issue 49761 - Fix CI test suite issues * Issue - 50374 dsdim posixgroup create fails with ERROR * Ticket 50251 - clear text passwords visable in CLI verbose mode logging * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients * Issue:48851 - investigate and port TET matching rules filter tests * Issue 50220 - attr_encryption test suite failing * Ticket 50370 - CleanAllRUV task crashing during server shutdown * Ticket 50340 cont - structs for disabled plugins will not be freed * Fix missing import * Issue 50164 - Add test for dscreate to basic test suite * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes * Issue 49730 - MozLDAP bindings have been unsupported for a while * Issue #50353 - Categorize tests by tiers * Issue 50303 - Add creation date to task data * Issue: 50358 - Create a Bitwise Plugin class in plugins.py * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion * Ticket 50329 - revert fix * Issue: 50112 - Port ACI test suit from TET to python3(keyaci) * Ticket 50344 - tidy rpm vs build systemd flag handling * Issue #50067 - Fix krb5 dependency in a specfile * Ticket 50340 - structs for diabled plugins will not be freed * Ticket 50327 - Add replication conflict support to UI * Ticket 50327 - Add replication conflict entry support to lib389/CLI * Ticket 50329 - improve connection default parameters * Issue: 50313 - Add a NestedRole type to lib389 * Issue:50112 - Port ACI test suit from TET to python3(Delete and Add) * Ticket 49390, 50019 - support cn=config compare operations * Issue 50041 - Add the rest UI Plugin tabs - Part 1 * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS * Ticket 49990 - Increase the default FD limits * Ticket 50306 - (cont typo) Move connection config inside struct * Ticket 50291 - Add monitor tab functionality to Cockpit UI * Fix cockpit console AppStream data * Ticket 50317 - fix ds-backtrace issue on latest gdb * Ticket 50305 - Revise CleanAllRUV task restart process * Fix typo from: Issue 49915 - Add regression test * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified * Ticket 49899 - fix pin.txt and pwdfile permissions * Issue 49915 - Add regression test * Ticket 50303 - Add task creation date to task data * Ticket 50306 - Move connection config inside struct * Ticket 50240 - Improve task logging * Issue 50032 - Fix deprecation warnings in tests * Ticket 50310 - fix sasl header include * Ticket 49390 - improve compare and cn=config compare tests - fix permissions handling (boo#1120189) - Update to version 1.4.1.2~git0.9a126614a: * Removes sysconfig from RPM as we no longer create it to detect instance existance or settings. Older installs will still have their sysconfig parsed, but new installs should use systemd environment variables. * Bump version to 1.4.1.2 * Ticket 50308 - Revise memory leak fix * Ticket 50308 - Fix memory leaks for repeat binds and replication * Use PKG_CHECK_MODULES to detect the systemd library * Use PKG_CHECK_MODULES to detect the kerberos library * Use pkg-config from the host system to better support cross-compiling * Use PKG_CHECK_MODULES to detect the libsasl2 library * configure.ac: Add missing comma to an AC_ARG_ENABLE macro * configure.ac: Remove unpaired parentheses from two help strings * m4/doxygen.m4: Fix spelling of Doxygen in a message * Use PKG_CHECK_MODULES to detect the pcre library * Use PKG_CHECK_MODULES to detect the cmocka library * Use PKG_CHECK_MODULES to detect the nss library * Use PKG_CHECK_MODULES to detect the nspr library * Use PKG_CHECK_MODULES to detect the event library * Ticket 49873 - (cont 3rd) cleanup debug log * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup * Issue 50292 - Fix Plugin CLI and UI issues * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax) * Ticket 50289 - Fix various database UI issues * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL * Ticket 50300 - Fix memory leak in automember plugin * Ticket 50265: the warning about skew time could last forever * Ticket 50260 - Invalid cache flushing improvements * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry * Ticket 50077 - Do not automatically turn automember postop modifies on * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members * Ticket 49715 - extend account functionality * Ticket 49873: (cont) Contention on virtual attribute lookup * Ticket 50260 - backend txn plugins can corrupt entry cache * Ticket 50255 - Port password policy test to use DSLdapObject * Ticket 49667 - 49668 - remove old spec files * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present * Issue: 50112 - Port ACI test suit from TET to python3(Search) * Ticket 50259 - implement dn construction test * Ticket 50273 - reduce default replicaton agmt timeout * Ticket 50208 - lib389- Fix issue with list all instances * Issue: 50112 - Port ACI test suit from TET to python3(Global Group) * Issue 50041 - Add CLI functionality for special plugins * Issue 50263 - LDAPS port not listening after installation * Ticket 49575 - Indicate autosize value errors and corrective actions * Ticket 50137 - create should not check in non-stateful mode for exist * Ticket 49655 - remove doap file * Issue 50197 - Fix dscreate regression * Ticket 50234 - one level search returns not matching entry * Ticket 50257 - lib389 - password policy user vs subtree checks are broken * Issue: 50253 - Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py * Issue 49029 - [RFE] improve internal operations logging * Ticket 50230 - improve ioerror msg when not root/dirsrv * Issue 50246 - Fix the regression in old control tools * Ticket 50197 - Container integration part 2 * Ticket 50197 - Container init tools * Ticket 50232 - export creates not importable ldif file * Ticket 50215 - UI - implement Database Tab in reachJS * Ticket 50243 - refint modrdn stress test * Ticket 50238 - Failed modrdn can corrupt entry cache * Ticket 50236 - memberOf should be more robust * Ticket 50213 - fix list instance issue * Issue: 50219 - Add generic filter to DSLdapObjects * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py * Issue: 50112 - Port ACI test suit from TET to python3(modify) * Ticket 50224 - warnings on deprecated API usage * Issue:50112 - Port ACI test suit from TET to python3(valueaci) * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter) * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig * Issue: 50170 - composable object types for nsRole in lib389 * Ticket 50199 - disable perl by default * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py * Ticket 50155 - password history check has no way to just check the current password * Ticket 49873 - Contention on virtual attribute lookup * Ticket 50197 - Container integration improvements * Ticket 50195 - improve selinux error messages in interactive * Ticket 49658 - In replicated topology a single-valued attribute can diverge * Ticket 50111: Use pkg-config to detect icu * Ticket 50165 - Fix issues with dscreate * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status * Ticket 50140 - Use high ports in container installs * Ticket 50184 - Add cli tool parity to dsconf/dsctl * Ticket 50159 - sssd and config display - Remove a pair of %if..%endif guards that do not affect the build. - Updates to 389-ds.spec - Make lib389 a requirement of 389-ds installs - Disable shell script wrappers that have be replaced by dsctl/dsconf - Disable perl in spec file build. For replacement tools see: http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html - Remove patches that have been merged by upstream - Removed: 0001-init_fhs.patch - merged by upstream - Removed: 0002-use-python2-for-selinux-detection.patch - merged by upstream - Removed: drop-caps.patch - merged by upstream - Commented requires and recommendes in 389-ds.spec - cyrus-sasl-plain added as a requirement as it is the only plaintext or start TLS secure method for password auth (LDAPS is always secure) - cyrus-sasl-gssapi moved to recommends as it is not always required - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not always required - openldap2-client moved to recommends on lib389 as a supplement to ldap command line tools that we provide, but not necessary - python3-selinux and python3-policycoreutils moved to recommends as they are not required, and only give "nice to have" features during install of an instance - Update to version 1.4.1.1~git0.af9bb7206: * Bump version to 1.4.1.1 * Ticket 50151 - lib389 support cli add/replace/delete on objects * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality * Bump version to 1.4.1.0 * Ticket 50125 - perl fix ups for tmpfiles * Ticket 50164 - Add test for dscreate * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica * Ticket 50169 - lib389 changed hardcoded systemctl path * Ticket 50165 - Fix dscreate issues * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser * Fix compiler warning in snmp main() * Ticket - Fix compiler warning in init.c * Ticket 49540 - FIx compiler warning in ldif2ldbm * Ticket 50169 - lib389 changed hardcoded systemctl path * Ticket 50165 - Fix dscreate issues * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser * Ticket 49540 - FIx compiler warning in ldif2ldbm * Ticket 50077 - Fix compiler warnings in automember rebuild task * Ticket 49972 - use-after-free in case of several parallel krb * authentication * Ticket 50161 - Fixed some descriptions in "dsconf backend --help" * Ticket 50153 - Increase default max logs * Ticket 50123 - with_tmpfiles_d is associated to systemd * Ticket 49984 - python installer add option to create suffix entry * Ticket 49984 - python installer add option to create suffix entry * Ticket 50077 - RFE - improve automember plugin to work with * modify ops * Ticket 50136 - Allow resetting passwords on the CLI * Ticket 49994 - Adjust dsconf backend usage * Ticket 50138 - db2bak.pl -P LDAPS does not work when * nsslapd-securePort is missing * Ticket 50122 - Fix incorrect path spec * Issue 50145 - Add a verbose option to the backup tools * Ticket 50056 - dsctl db2ldif throws an exception * Ticket 50078 - cannot add cenotaph in read only consumer * Ticket 50126 - Incorrect usage of sudo in test * Issue 50130 - Building RPMs on RHEL8 fails * Ticket 50134 - fixup-memberof.pl does not respect protocol requested * Issue 50122 - Selinux test for presence * Issue 50101 - Port fourwaymmr Test TET suit to python3 * Issue 50091 - shadowWarning is not generated if passwordWarning * is lower than 86400 seconds (1 day). * Ticket 50128 - NS Stress fails without ipv6 * Issue 49618 - Set nsslapd-cachememsize to custom value * Ticket 50117 - after certain failed import operation, impossible * to replay an import operation * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first * Issue 48064 - Fix various issues in disk monitoring test suite * Issue 49938 - lib389 - Clean up CLI logging * Issue 49761 - Fix CI test suite issues * Ticket 50056 - Fix UI bugs (part 2) * Issue: 48064 - CI test - disk_monitoring * Ticket 50099 - extend error messages * Ticket 50099 - In FIPS mode, the server can select an unsupported * password storage scheme * Issue 50041 - Add basic plugin UI/CLI wrappers * Issue 50082 - Port state test suite * Ticket 49574 - remove index subsystem * Issue 49588 - Add py3 support for tickets : part-5 * Ticket 50095 - cleanup deprecated key.h includes - use lib389 on 15.0 and up. now that we do not hardrequire the python selinux bindings anymore- Update specfile to be inline with the OpenSUSE spec file * include future-configurations in the spec which are not active until 15.2 * lib389 (upstream requirement from 1.4.0) * rust (upstream requirement from 1.4.2) * removal of perl (upstream has not supported perl in any 1.4.x release) * resolve missing svrcore obsoletes statement and pkg configuration (bsc#1144797)- Update to version 1.4.0.26~git0.8a2d3de6f: * Bump version to 1.4.0.26 * Issue 50499 - Fix audit issues and remove jquery from the whitelist * Issue 50355 - SSL version min and max not correctly applied * Issue 50325 - Add Security tab to UI * Issue 50177 - Add a new CI test case, also added fixes in lib389 * Bump version to 1.4.0.25 * Issue 50431 - Fix regression from coverity fix * Bump version to 389-ds-base-1.4.0.24 * Fix cherry-pick error from last commit * Issue 50052 - Fix rpm.mk according to audit-ci change * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present * Issue 50041 - Add the rest UI Plugin tabs - Part 1 * Ticket 50217 - Implement dsconf security section * Issue 49602 - Revise replication status messages * Issue 50431 - Fix regression from coverity fix * Ticket 50431 - Fix covscan warnings * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request" * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS * Ticket 50413 - ds-replcheck - Always display the Result Summary * Ticket 50355 - NSS can change the requested SSL min and max versions * Bump version to 1.4.0.23 * Issue 50041 - Add the rest UI Plugin tabs - Part 2 * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed * Ticket 50393 - maxlogsperdir accepting negative values * Ticket 50396 - Crash in PAM plugin when user does not exist * Issue 50390 - Add Managed Entries Plug-in Config Entry schema * Ticket 50251 - clear text passwords visable in CLI verbose mode logging * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients * Ticket 50370 - CleanAllRUV task crashing during server shutdown * Ticket 50340 cont - structs for disabled plugins will not be freed * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes * Ticket 50329 - revert fix * Ticket 50340 - structs for diabled plugins will not be freed * Ticket 50327 - Add replication conflict support to UI * Ticket 50327 - Add replication conflict entry support to lib389/CLI * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS * Ticket 49990 - Increase the default FD limits * Ticket 50291 - Add monitor tab functionality to Cockpit UI * Fix cockpit console AppStream data * Ticket 50305 - Revise CleanAllRUV task restart process * Ticket 50303 - Add task creation date to task data * Ticket 50240 - Improve task logging- Update to version 1.4.0.22~git0.9d84a40dd: * Bump version to 1.4.0.22 which resolves: * (bsc#1120189) * (bsc#991201, CVE-2016-5416) * (bsc#1083689, CVE-2018-1054) * (bsc#1092187, CVE-2018-1089) * (bsc#1099465, CVE-2018-10871) * (bsc#1108674, CVE-2018-14638) * (bsc#1109609, CVE-2018-14648) * (bsc#1132385, CVE-2019-3883) * (bsc#1105606, CVE-2018-10935) * Ticket 50308 - Revise memory leak fix * Ticket 50308 - Fix memory leaks for repeat binds and replication * Ticket 49873 - (cont 3rd) cleanup debug log * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup * Issue 50292 - Fix Plugin CLI and UI issues * Ticket 50289 - Fix various database UI issues * Ticket 50300 - Fix memory leak in automember plugin * Ticket 50265: the warning about skew time could last forever * Ticket 50260 - Invalid cache flushing improvements * Remove obsolete patch 0001-init_fhs.patch * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch * Remove obsolete patch simplify-lib389-setup-py.patch * Remove obsolete patch tw.patch * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch- Introduce patch: 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch to fix the issue "389-ds: Server crash through modify command with large DN" (bsc#1106699, CVE-2018-14624)- Introduce patch: 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch to fix the issue that ldapsearch with server side sort allows users to cause a crash (bsc#1105606, CVE-2018-10935)- Introduce patches: * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch to fix the race condition on reference counter (bsc#1096368, CVE-2018-10850) * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch (bsc#1076530, CVE-2017-15134) * 0008-invalid-password-migration-causes-unauth-bind.patch (bsc#1076530, CVE-2017-15135)- Explicitly generate dirsrv sysconfig file as it is necessary for SLES 15 (bsc#1081324).- switch lib389 to use the python3-ldap subpackage- For SLES 15 schedule, do not build lib389 programmable extension for now.- BuildRequire python3-ldap instead of python3-pyldap: pyldap is deprecated in favor of python-ldap.- Rename dependency package python-pyldap into python3-pyldap.- Correct name to dependency package "python-pyldap".- Introduce patch 0003-fix-rm-non-existent-man-pages.patch to remove a faulty rm statement from makefile.- add tw.patch to fix potential buffer overflow- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- added simplify-lib389-setup-py.patch seems the python3 setuptools on leap 42.3 do not like this fancy syntax. kill it and always use the python 3 way.- update to 1.4.0.3 - Ticket 49457 - Fix spal_meminfo_get function prototype - Ticket 49455 - Add tests to monitor test suit. - Ticket 49448 - dynamic default pw scheme based on environment. - Ticket 49298 - fix complier warn - Ticket 49298 - Correct error codes with config restore. - Ticket 49454 - SSL Client Authentication breaks in FIPS mode - Ticket 49453 - passwd.py to use pwdhash defaults. - Ticket 49427 - whitespace in fedse.c - Ticket 49410 - opened connection can remain no longer poll, like hanging - Ticket 48118 - fix compiler warning for incorrect return type - Ticket 49451 - Add environment markers to lib389 dependencies - Ticket 49325 - Proof of concept rust tqueue in sds - Ticket 49443 - scope one searches in 1.3.7 give incorrect results - Ticket 48118 - At startup, changelog can be erronously rebuilt after a normal shutdown - Ticket 49412 - SIGSEV when setting invalid changelog config value - Ticket 49441 - Import crashes - oneline fix - Ticket 49377 - Incoming BER too large with TLS on plain port - Ticket 49441 - Import crashes with large indexed binary attributes - Ticket 49435 - Fix NS race condition on loaded test systems - Ticket 77 - lib389 - Refactor docstrings in rST format - part 2 - Ticket 17 - lib389 - dsremove support - Ticket 3 - lib389 - python 3 compat for paged results test - Ticket 3 - lib389 - Python 3 support for memberof plugin test suit - Ticket 3 - lib389 - config test - Ticket 3 - lib389 - python 3 support ds_logs tests - Ticket 3 - lib389 - python 3 support for betxn test- we actually need pyldap- lib389 is merged into this tarball now. move the subpackage here.- update to 1.4.0.2 - Ticket 48393 - fix copy and paste error - Ticket 49439 - cleanallruv is not logging information - Ticket 48393 - Improve replication config validation - Ticket lib389 3 - Python 3 support for ACL test suite - Ticket 103 - sysconfig not found - Ticket 49436 - double free in COS in some conditions - Ticket 48007 - CI test to test changelog trimming interval - Ticket 49424 - Resolve csiphash alignment issues - Ticket lib389 3 - Python 3 support for pwdPolicy_controls_test.py - Ticket 3 - python 3 support - filter test - Ticket 49434 - RPM build errors - Ticket 49432 - filter optimise crash - Ticket 49432 - Add complex fliter CI test - Ticket 48894 - harden valueset_array_to_sorted_quick valueset access - Ticket 49401 - Fix compiler incompatible-pointer-types warnings - Ticket 48681 - Use of uninitialized value in string ne at /usr/bin/logconv.pl - Ticket 49409 - Update lib389 requirements - Ticket 49401 - improve valueset sorted performance on delete - Ticket 49374 - server fails to start because maxdisksize is recognized incorrectly - Ticket 49408 - Server allows to set any nsds5replicaid in the existing replica entry - Ticket 49407 - status-dirsrv shows ellipsed lines - Ticket 48681 - Use of uninitialized value in string ne at /usr/bin/logconv.pl - Ticket 49386 - Memberof should be ignore MODRDN when the pre/post entry are identical - Ticket 48006 - Missing warning for invalid replica backoff configuration - Ticket 49064 - testcase hardening - Ticket 49064 - RFE allow to enable MemberOf plugin in dedicated consumer - Ticket lib389 3 - python 3 support - Ticket 49402 - Adding a database entry with the same database name that was deleted hangs server at shutdown - Ticket 48235 - remove memberof lock (cherry-pick error) - Ticket 49394 - build warning - Ticket 49381 - Refactor numerous suite docstrings - Part 2 - Ticket 49394 - slapi_pblock_get may leave unchanged the provided variable - Ticket 49403 - tidy ns logging - Ticket 49381 - Refactor filter test suite docstrings - Ticket 48235 - Remove memberOf global lock - Ticket 103 - Make sysconfig where it is expected to exist - Ticket 49400 - Add clang support to rpm builds - Ticket 49381 - Refactor ACL test suite docstrings - Ticket 49363 - Merge lib389 - Ticket 101 - BaseException.message has been deprecated in Python3 - Ticket 102 - referral support - Ticket 99 - Fix typo in create_topology - Ticket #98 - Fix dbscan output - Ticket #77 - Fix changelogdb param issue - Ticket #77 - Refactor docstrings in rST format - part 1 - Ticket 96 - Change binaries’ names - Ticket 77 - Add sphinx documentation - Ticket 43 - Add support for Referential Integrity plugin - Ticket 45 - Add support for Rootdn Access Control plugin - Ticket 46 - dsconf support for dynamic schema reload - Ticket 74 - Advice users to set referint-update-delay to 0 - Ticket 92 - display_attr() should return str not bytes in py3 - Ticket 93 - Fix test cases in ctl_dbtasks_test.py - Ticket 88 - python install and remove for tests - Ticket 85 - Remove legacy replication attribute - Ticket 91 - Fix replication topology - Ticket 89 - Fix inconsistency with serverid - Ticket 79 - Fix replica.py and add tests - Ticket 86 - add build dir to gitignore - Ticket 83 - Add an util for generating instance parameters - Ticket 87 - Update accesslog regec for HR etimes - Ticket 49 - Add support for whoami plugin - Ticket 48 - Add support for USN plugin - Ticket 78 - Add exists() method to DSLdapObject - Ticket 31 - Allow complete removal of some memberOf attrs - Ticket31 - Add memberOf fix-up task - Ticket 67 - Add ensure_int function - Ticket 59 - lib389 support for index management. - Ticket 67 - get attr by type - Ticket 70 - Improve repl tools - Ticket 50 - typo in db2* in dsctl - Ticket 31 - Add status command and SkipNested support for MemberOf - Ticket 31 - Add functional tests for MemberOf plugin - Ticket 66 - expand healthcheck for Directory Server - Ticket 69 - add specfile requires - Ticket 31 - Initial MemberOf plugin support - Ticket 50 - Add db2* tasks to dsctl - Ticket 65 - Add m2c2 topology - Ticket 63 - part 2, agreement test - Ticket 63 - lib389 python 3 fix - Ticket 62 - dirsrv offline log - Ticket 60 - add dsrc to dsconf and dsidm - Ticket 32 - Add TLS external bind support for testing - Ticket 27 - Fix get function in tests - Ticket 28 - userAccount for older versions without nsmemberof - Ticket 27 - Improve dseldif API - Ticket 30 - Add initial support for account lock and unlock. - Ticket 29 - fix incorrect format in tools - Ticket 28 - Change default objectClasses for users and groups - Ticket 1 - Fix missing dn / rdn on config. - Ticket 27 - Add a module for working with dse.ldif file - Ticket 1 - cn=config comparison - Ticket 21 - Missing serverid in dirsrv_test due to incorrect allocation - Ticket 26 - improve lib389 sasl support - Ticket 24 - Join paths using os.path.join instead of string concatenation - Ticket 25 - Fix RUV repr function - Ticket 23 - Use DirSrv.exists() instead of manually checking for instance’s existence - Ticket 1 - cn=config comparison - Ticket 22 - Specify a basedn parameter for IDM modules - Ticket 19 - missing readme.md in python3 - Ticket 20 - Use the DN_DM constant instead of hard coding its value - Ticket 19 - Missing file and improve make - Ticket 14 - Remane dsadm to dsctl - Ticket 16 - Reset InstScriptsEnabled argument during the init - Ticket 14 - Remane dsadm to dsctl - Ticket 13 - Add init function to create new domain entries - Ticket 15 - Improve instance configuration ability - Ticket 10 - Improve command line tool arguments - Ticket 9 - Convert readme to MD - Ticket 7 - Add pause and resume methods to topology fixtures - Ticket 49172 - Allow lib389 to read system schema and instance - Ticket 49172 - Allow lib389 to read system schema and instance - Ticket 6 - Bump lib389 version 1.0.4 - Ticket 5 - Fix container build on fedora - Ticket 4 - Cert detection breaks some tests - Ticket 49137 - Add sasl plain tests, lib389 support - Ticket 2 - pytest mark with version relies on root - Ticket 49126 - DIT management tool - Ticket 49101 - Python 2 generate example entries - Ticket 49103 - python 2 support for installer - Ticket 47747 - Add topology_i2 and topology_i3 - Ticket 49087 - lib389 resolve jenkins issues - Ticket 48413 - Improvements to lib389 for rest - Ticket 49083 - Support prefix for discovery of the defaults.inf file. - Ticket 49055 - Fix debugging mode issue - Ticket 49060 - Increase number of masters, hubs and consumers in topology - Ticket 47747 - Add more topology fixtures - Ticket 47840 - Add InstScriptsEnabled argument - Ticket 47747 - Add topology fixtures module - Ticket 48707 - Implement draft-wibrown-ldapssotoken-01 - Ticket 49022 - Lib389, py3 installer cannot create entries in backend - Ticket 49024 - Fix paths to the dbdir parent - Ticket 49024 - Fix db_dir paths - Ticket 49024 - Fix paths in tools module - Ticket 48961 - Fix lib389 minor issues shown by 48961 test - Ticket 49010 - Lib389 fails to start with systemctl changes - Ticket 49007 - lib389 fixes for paths to use online values - Ticket 49005 - Update lib389 to work in containers correctly. - Ticket 48991 - Fix lib389 spec for python2 and python3 - Ticket 48984 - Add lib389 paths module - Ticket 48951 - dsadm dsconfig status and plugin - Ticket 47957 - Update the replication “idle” status string - Ticket 48951 - dsadm and dsconf base files - Ticket 48952 - Restart command needs a sleep - Ticket 48949 - Fix ups for style and correctness - Ticket 48949 - added copying slapd-collations.conf - Ticket 48949 - change default file path generation - use os.path.join - Ticket 48949 - os.makedirs() exist_ok not python2 compatible, added try/except - Ticket 48949 - configparser fallback not python2 compatible - Ticket 48946 - openConnection should not fully popluate DirSrv object - Ticket 48832 - Add DirSrvTools.getLocalhost() function - Ticket 48382 - Fix serverCmd to get sbin dir properly - Bug 1347760 - Information disclosure via repeated use of LDAP ADD operation, etc. - Ticket 48937 - Cleanup valgrind wrapper script - Ticket 48923 - Fix additional issue with serverCmd - Ticket 48923 - serverCmd timeout not working as expected - Ticket 48917 - Attribute presence - Ticket 48911 - Plugin improvements for lib389 - Ticket 48911 - Improve plugin support based on new mapped objects - Ticket 48910 - Fixes for backend tests and lib389 reliability. - Ticket 48860 - Add replication tools - Ticket 48888 - Correction to create of dsldapobject - Ticket 48886 - Fix NSS SSL library in lib389 - Ticket 48885 - Fix spec file requires - Ticket 48884 - Bugfixes for mapped object and new connections - Ticket 48878 - better style for backend in backend_test.py - Ticket 48878 - pep8 fixes part 2 - Ticket 48878 - pep8 fixes and fix rpm to build - Ticket 48853 - Prerelease installer - Ticket 48820 - Begin to test compatability with py.test3, and the new orm - Ticket 48434 - Fix for negative tz offsets - Ticket 48857 - Remove python-krbV from lib389 - Ticket 48820 - Fix tests to ensure they work with the new object types - Ticket 48820 - Move Encryption and RSA to the new object types - Ticket 48820 - Proof of concept of orm style mapping of configs and objects - Ticket 48820 - Clitool rename - Ticket 48431 - lib389 integrate ldclt - Ticket 48434 - lib389 logging tools - Ticket 48796 - add function to remove logs - Ticket 48771 - lib389 - get ns-slapd version - Ticket 48830 - Convert lib389 to ip route tools - Ticket 48763 - backup should run regardless of existing backups. - Ticket 48434 - lib389 logging tools - Ticket 48798 - EL6 compat for lib389 tests for DH params - Ticket 48798 - lib389 add ability to create nss ca and certificate - Ticket 48433 - Aci linting tools - Ticket 48791 - format args in server tools - Ticket 48399 - Helper makefile is missing mkdir dist - Ticket 48399 - Helper makefile is missing mkdir dist - Ticket 48794 - lib389 build requires are on a single line - Ticket 48660 - Add function to convert binary values in an entry to base64 - Ticket 48764 - Fix mit krb password to be random. - Ticket 48765 - Change default ports for standalone topology - Ticket 48750 - Clean up logging to improve command experience - Ticket 48751 - Improve lib389 ldapi support - Ticket 48399 - Add helper makefile to lib389 to build and install - Ticket 48661 - Agreement test suite fails at the test_changes case - Ticket 48407 - Add test coverage module for lib389 repo - Ticket 48357 - clitools should standarise their args - Ticket 48560 - Make verbose handling consistent - Ticket 48419 - getadminport() should not a be a static method - Ticket 48408 - RFE escaped default suffix for tests - Ticket 48401 - Revert typecheck - Ticket 48401 - lib389 Entry hasAttr returs dict instead of false - Ticket 48390 - RFE Improvements to lib389 monitor features for rest389 - Ticket 48358 - Add new spec file - Ticket 48371 - weaker host check on localhost.localdomain - Ticket 58358 - Update spec file with pre-release versioning - Ticket 48358 - Make Fedora packaging changes to the spec file - Ticket 48358 - Prepare lib389 for Fedora Packaging - Ticket 48364 - Fix test failures - Ticket 48360 - Refactor the delete agreement function - Ticket 48361 - Expand 389ds monitoring capabilities - Ticket 48246 - Adding license/copyright to lib389 files - Ticket 48340 - Add basic monitor support to lib389 https://fedorahosted.org/389/ticket/48340 - Ticket 48353 - Add Replication REST support to lib389 - Ticket 47840 - Fix regression - Ticket 48343 - lib389 krb5 realm management https://fedorahosted.org/389/ticket/48343 - Ticket 47840 - fix lib389 to use sbin scripts https://fedorahosted.org/389/ticket/47840 - Ticket 48335 - Add SASL support to lib389 - Ticket 48329 - Fix case-senstive scyheam comparisions - Ticket 48303 - Fix lib389 broken tests - Ticket 48329 - add matching rule functions to schema module - Ticket 48324 - fix boolean capitalisation (one line) https://fedorahosted.org/389/ticket/48324 - Ticket 48321 - Improve is_a_dn check to prevent mistakes with lib389 auth https://fedorahosted.org/389/ticket/48321 - Ticket 48322 - Allow reindex function to reindex all attributes - Ticket 48319 - Fix ldap.LDAPError exception processing - Ticket 48318 - Do not delete a changelog while disabling a replication by suffix - Ticket 48308 - Add eq and ne to Entry to allow fast comparison https://fedorahosted.org/389/ticket/48308 - Ticket 48303 - Fix lib389 broken tests - backend_test - Ticket 48309 - Fix lib389 lib imports - Ticket 48303 - Fix lib389 broken tests - agreement_test - Ticket 48303 - Fix lib389 broken tests - aci_parse_test - Ticket 48301 - add tox support - Ticket 48204 - update lib389 for python3 - Ticket 48273 - Improve valgrind functions - Ticket 48271 - Fix for self.prefix being none when SER_DEPLOYED_DIR is none https://fedorahosted.org/389/ticket/48271 - Ticket 48259 - Add aci parsing utilities to lib389 - Ticket 48252 - (lib389) adding get_bin_dir and dbscan - Ticket 48247 - Change the default user to ‘dirsrv’ - Ticket 47848 - Add new function to create ldif files - Ticket 48239 - Fix for prefix allocation of un-initialised dirsrv objects - Ticket 48237 - Add lib389 helper to enable and disable logging services. - Ticket 48236 - Add get effective rights helper to lib389 - Ticket 48238 - Add objectclass and attribute type query mechanisms - Ticket 48029 - Add missing replication related functions - Ticket 48028 - add valgrind wrapper for ns-slapd - Ticket 48028 - lib389 - add valgrind functions - Ticket 48022 - lib389 - Add all the server tasks - Ticket 48023 - create function to test replication between servers - Ticket 48020 - lib389 - need to reset args_instance with every DirSrv init - Ticket 48000 - Repl agmts need more time to stop - Ticket 48004 - Fix various issues - Ticket 48000 - replica agreement pause/resume should have a short sleep - Ticket 47990 - Add check for “.removed” instances when doing an upgrade - Ticket 47990 - Add “upgrade” function to lib389 - Ticket 47691 - using lib389 with RPMs - Ticket 47848 - Add support for setuptools. - Ticket 47855 - Add function to clear tmp directory - Ticket 47851 - Need to retrieve tmp directory path - Ticket 47845 - add stripcsn option to tombstone fixup task - Ticket 47851 - Add function to retrieve dirsrvtests data directory - Ticket 47845 - Add backup/restore/fixup tombstone tasks to lib389 - Ticket 47819 - Add the new precise tombstone purging config attribute - Ticket 47695 - Add plugins/tasks/Index - Ticket 47648 - lib389 - add schema classes, methods - Ticket 47671 - CI lib389: allow to open a DirSrv without having to create the instance - Ticket 47600 - Replica/Agreement/Changelog not conform to the design - Ticket 47652 - replica add fails: MT.list return a list not an entry - Ticket 47635 - MT/Backend/Suffix to be conform with the design - Ticket 47625 - CI lib389: DirSrv not conform to the design - Ticket 47595 - fail to detect/reinit already existing instance/backup - Ticket 47590 - CI tests: add/split functions around replication - Ticket 47584 - CI tests: add backup/restore of an instance - Ticket 47578 - CI tests: removal of ‘sudo’ and absolute path in lib389 - Ticket 47568 - Rename DSAdmin class - Ticket 47566 - Initial import of DSadmin into 389-test repos- Use openSUSE rpm group classifications. - Remove removal of .a files that do not exist to begin with (because of --disable-static). - Remove double removal of .la files. - Do not suppress errors from useradd.- update to 1.4.0.1 - Ticket 49038 - remove legacy replication - change cleanup script precedence - Ticket 49392 - memavailable not available - Ticket 49235 - pbkdf2 by default - Ticket 49279 - remove dsktune - Ticket 49372 - filter optimisation improvements for common queries - Ticket 49320 - Activating already active role returns error 16 - Ticket 49389 - unable to retrieve specific cosAttribute when subtree password policy is configured - Ticket 49092 - Add CI test for schema-reload - Ticket 49388 - repl-monitor - matches null string many times in regex - Ticket 49387 - pbkdf2 settings were too aggressive - Ticket 49385 - Fix coverity warnings - Ticket 49305 - Need to wrap atomic calls - Ticket 48973 - Indexing a ExactIA5Match attribute with a IgnoreIA5Match matching rule triggers a warning - Ticket 49378 - server init fails - Ticket 49305 - Need to wrap atomic calls - Ticket 49180 - add CI test - Ticket 49180 - errors log filled with attrlist_replace - attr_replace- drop 389-ds-reproducible.patch: applied upstream- move upgrade and restart code to postun- make sure we stop before uninstall - build require gdb for directory ownership- sync requires with fedora spec file - build with tcmalloc - add missing requires for things like bind-utils, db-utils - add requires to the devel package - split out the snmp agent - upgrade all databases on update- update to 1.4.0.0 - Ticket 49327 - Add CI test for password expiration controls - Ticket 48085 - CI tests - replication ruvstore - Ticket 49381 - Refactor numerous suite docstrings - Ticket 48085 - CI tests - replication cl5 - Ticket 49379 - Allowed sasl mapping requires restart - Ticket 49327 - password expired control not sent during grace logins - Ticket 49380 - Add CI test - Ticket 83 - Fix create_test.py imports - Ticket 49381 - Add docstrings to ds_logs, gssapi_repl, betxn - Ticket 49380 - Crash when adding invalid replication agreement - Ticket 48081 - CI test - password - Ticket 49295 - Fix CI tests - Ticket 49295 - Fix CI test for account policy - Ticket 49373 - remove unused header file - changes from 1.3.7.4 - Ticket 49371 - Cleanup update script - Ticket 48831 - Autotune dncache with entry cache. - Ticket 49312 - pwdhash -D used default hash algo - Ticket 49043 - make replication conflicts transparent to clients - Ticket 49371 - Fix rpm build - Ticket 49371 - Template dse.ldif did not contain all needed plugins - Ticket 49295 - Fix CI Tests - Ticket 49050 - make objectclass ldapsubentry effective immediately - changes from 1.3.7.3 - Ticket 49354 - fix regression in total init due to mistake in range fetch - Ticket 49370 - local password policies should use the same defaults as the global policy - Ticket 48989 - Delete slow lib389 test - Ticket 49367 - missing braces in idsktune - Ticket 49364 - incorrect function declaration. - Ticket 49275 - fix tls auth regression - Ticket 49038 - Revise creation of cn=replication,cn=config - Ticket 49368 - Fix typo in log message - Ticket 48059 - Add docstrings to CLU tests - Ticket 47840 - Add docstrings to setup tests - Ticket 49348 - support perlless and wrapperless install- Remove unnecessary ldconfig calls- update to 1.3.7.2 - Ticket 49038 - Fix regression from legacy code cleanup - Ticket 49295 - Fix CI tests - Ticket 48067 - Add bugzilla tests for ds_logs - Ticket 49356 - mapping tree crash can occur during tot init - Ticket 49275 - fix compiler warns for gcc 7 - Ticket 49248 - Add a docstring to account locking test case - Ticket 49445 - remove dead code - Ticket 48081 - Add regression tests for pwpolicy - Ticket 48056 - Add docstrings to basic test suite - Ticket 49349 - global name ‘imap’ is not defined - Ticket 83 - lib389 - Fix tests and create_test.py - Ticket 48185 - Remove referint-logchanges attr from referint’s config - Ticket 48081 - Add regression tests for pwpolicy - Ticket 83 - lib389 - Replace topology agmt objects - Ticket 49331 - change autoscaling defaults - Ticket 49330 - Improve ndn cache performance. - Ticket 49347 - reproducable build numbers - Ticket 39344 - changelog ldif import fails - Ticket 49337 - Add regression tests for import tests - Ticket 49309 - syntax checking on referint’s delay attr - Ticket 49336 - SECURITY: Locked account provides different return code - Ticket 49332 - Event queue is not working - Ticket 49313 - Change the retrochangelog default cache size - Ticket 49329 - Descriptive error msg for USN cleanup task - Ticket 49328 - Cleanup source code - Ticket 49299 - Add normalized dn cache stats to dbmon.sh - Ticket 49290 - improve idl handling in complex searches - Ticket 49328 - Update clang-format config file - Ticket 49091 - remove usage of changelog semaphore - Ticket 49275 - shadow warnings for gcc7 - pass 1 - Ticket 49316 - fix missing not condition in clock cleanu - Ticket 49038 - Remove legacy replication - Ticket 49287 - v3 extend csnpl handling to multiple backends - Ticket 49310 - remove sds logging in debug builds - Ticket 49031 - Improve memberof with a cache of group parents - Ticket 49316 - Fix clock unsafety in DS - Ticket 48210 - Add IP addr and connid to monitor output - Ticket 49295 - Fix CI tests and compiler warnings - Ticket 49295 - Fix CI tests - Ticket 49305 - Improve atomic behaviours in 389-ds - Ticket 49298 - fix missing header - Ticket 49314 - Add untracked files to the .gitignore - Ticket 49303 - Fix error in CI test - Ticket 49302 - fix dirsrv importst due to lib389 change - Ticket 49303 - Add option to disable TLS client-initiated renegotiation - Ticket 49298 - force sync() on shutdown - Ticket 49306 - make -f rpm.mk rpms produces build without tcmalloc enabled - Ticket 49297 - improve search perf in bpt by removing a deref - Ticket 49284 - resolve crash in memberof when deleting attrs - Ticket 49290 - unindexed range searches don’t provide notes=U - Ticket 49301 - Add one logpipe test case - changes from 1.3.6.8 - Ticket 49356 - mapping tree crash can occur during tot init - changes from 1.3.6.7 - Ticket 49330 - Improve ndn cache performance - Ticket 49298 - fix missing header - Ticket 49298 - force sync() on shutdown - Ticket 49336 - SECURITY: Locked account provides different return code - Ticket 49334 - fix backup restore if changelog exists - Ticket 49313 - Change the retrochangelog default cache size - Fix error log format in add.c - Ticket 49287 - fix compiler warning for patch 49287 - Ticket 49287 - v3 extend csnpl handling to multiple backends - Ticket 49288 - RootDN Access wrong plugin path in template-dse.ldif.in - Ticket 49291 - slapi_search_internal_callback_pb may SIGSEV if related pblock has not operation set - Ticket 49008 - Fix MO plugin betxn test - Ticket 49227 - ldapsearch does not return the expected Error log level - Ticket 49028 - Add autotuning test suite - Ticket 49273 - bak2db doesn’t operate with dbversion - Ticket 49184 - adjust logging level in MO plugin - Ticket 49257 - only register modify callbacks - Ticket 49257 - Update CI script - Ticket 49008 - Adjust CI test for new memberOf behavior - Ticket 49273 - crash when DBVERSION is corrupt. - Ticket 49268 - master branch fails on big endian systems - Ticket 49241 - add symblic link location to db2bak.pl output - Ticket 49257 - Reject nsslapd-cachememsize & nsslapd-cachesize when nsslapd-cache-autosize is set - Ticket 48538 - Failed to delete old semaphore - Ticket 49231 - force EXTERNAL always - Ticket 49267 - autosize split of 0 results in dbcache of 0- Add 389-ds-reproducible.patch not use build date in build num to make build reproducible (boo#1047218)- Introduce acl as mandatory runtime dependency.- Rename patch 389-ds-base-1.3.2.11_init_fhs.patch -> 0001-init_fhs.patch - Fix faulty python module import with patch 0002-use-python2-for-selinux-detection.patch - Conduct a major clean-up of spec file to remove all outdated macros - Introduce extra schema files from OpenLDAP distribution with extra-schema.tgz and LICENSE.openldap- update to 1.3.6.6 - Ticket 49157 - fix error in ds-logpipe.py - Ticket 48864 - remove config.h from spal header. - Ticket 48681 - logconv.pl - Fix SASL Bind stats and rework report format - Ticket 49261 - Fix script usage and man pages - Ticket 49238 - AddressSanitizer: heap-use-after-free in libreplication - Ticket 48864 - Fix FreeIPA build - Ticket 49257 - Reject dbcachesize updates while auto cache sizing is enabled - Ticket 49249 - cos_cache is erroneously logging schema checking failure - Ticket 49258 - Allow nsslapd-cache-autosize to be modified while the server is running - Ticket 49247 - resolve build issues on debian - Ticket 49246 - ns-slapd crashes in role cache creation - Ticket 49157 - ds-logpipe.py crashes for non-existing users - Ticket 49241 - Update man page and usage for db2bak.pl - Ticket 49075 - Adjust logging severity levels - Ticket 47662 - db2index not properly evaluating arguments - Ticket 48989 - fix perf counters - changes from 1.3.6.5 - Ticket 49231 - fix sasl mech handling - Ticket 49233 - Fix crash in persistent search - Ticket 49230 - slapi_register_plugin creates config entry where it should not - Ticket 49135 - PBKDF2 should determine rounds at startup - Ticket 49236 - Fix CI Tests - Ticket 48310 - entry distribution should be case insensitive - Ticket 49224 - without –prefix, $prefixdir would be NONE in defaults. - drop 9563d299.patch: included upstream- added 9563d299.patch to fix building slapi-nis and freeipa- Do not suppress errors from user/group creation. Add some safety quoting here and there.- update to 1.3.6.4 - Ticket 49228 - Fix SSE4.2 detection. - Ticket 49229 - Correct issues in latest commits - Ticket 49226 - Memory leak in ldap-agent-bin - Ticket 49214 - Implement htree concept - Ticket 49119 - Cleanup configure.ac options and defines - Ticket 49097 - whitespace fixes for pblock change - Ticket 49097 - Pblock get/set cleanup - Ticket 49222 - Resolve various test issues on rawhide - Issue 48978 - Fix the emergency logging functions severity levels - Issue 49227 - ldapsearch for nsslapd-errorlog-level returns incorrect values - Ticket 49041 - nss won’t start if sql db type set - Ticket 49223 - Fix sds queue locking - Issue 49204 - Fix 32bit arch build failures - Issue 49204 - Need to update function declaration - Ticket 49204 - Fix lower bounds on import autosize + On small VM, autotune breaks the access of the suffixes - Issue 49221 - During an upgrade the provided localhost name is ignored - Issue 49220 - Remote crash via crafted LDAP messages (SECURITY FIX) - Ticket 49184 - Overflow in memberof - Ticket 48050 - Add account policy tests to plugins test suite - Ticket 49207 - Supply docker POC build for DS. - Issue 47662 - CLI args get removed - Issue 49210 - Fix regression when checking is password min age should be checked - Ticket 48864 - Add cgroup memory limit detection to 389-ds - Issue 48085 - Expand the repl acceptance test suite - Ticket 49209 - Hang due to omitted replica lock release - Ticket 48864 - Cleanup memory detection before we add cgroup support - Ticket 48864 - Cleanup up broken format macros and imports - Ticket 49153 - Remove vacuum lock on transaction cleanup - Ticket 49200 - provide minimal dse.ldif for python installer - Issue 49205 - Fix logconv.pl man page - Issue 49177 - Fix pkg-config file - Issue 49035 - dbmon.sh shows pages-in-use that exceeds the cache size - Ticket 48432 - Linux capabilities on ns-slapd - Ticket 49196 - Autotune generates crit messages - Ticket 49194 - Lower default ioblock timeout - Ticket 49193 - gcc7 warning fixes - Issue 49039 - password min age should be ignored if password needs to be reset - Ticket 48989 - Re-implement lock counter - Issue 49192 - Deleting suffix can hang server - Issue 49156 - Modify token :assert: to :expectedresults: - Ticket 48989 - missing return in counter - Ticket 48989 - Improve counter overflow fix - Ticket 49190 - Upgrade lfds to 7.1.1 - Ticket 49187 - Fix attribute definition - Ticket 49185 - Fix memleak in compute init- update to 1.3.6.3 This release contains security and bug fixes and a few enhancements. - Issue 49177 - rpm would not create valid pkgconfig files(pt2) - Issue 49186 - Fix NS to improve shutdown relability - Issue 49174 - nunc-stans can not use negative timeout - Issue 49076 - To debug DB_DEADLOCK condition, allow to reset DB_TXN_NOWAIT flag on txn_begin - Issue 49188 - retrocl can crash server at shutdown - Issue 47840 - Add setup_ds test suite - Fix srvcore version dependancy - Issue 48989 - Overflow in counters and monitor - Issue 49095 - targetattr wildcard evaluation is incorrectly case sensitive - Issue 49177 - rpm would not create valid pkgconfig files - Issue 49176 - Remove tcmalloc restriction from s390x - Issue 49157 - ds-logpipe.py crashes for non-existing users - Issue 49065 - dbmon.sh fails if you have nsslapd-require-secure-binds enabled - Issue 49095 - Fix double-free in _cl5NewDBFile() error path - Issue 49169 - Fix covscan errors(regression) - Issue 49172 - Fix test schema files - Issue 49171 - Nunc Stans incorrectly reports a timeout - Issue 49169 - Fix covscan errors - Issue 49164 - Change NS to acq-rel semantics for atomics - Issue 49154 - Nunc Stans stress should assert it has 95% success rate - Issue 49165 - pw_verify did not handle external auth - Issue 49062 - Reset agmt update staus and total init - Issue 49151 - Remove defunct selinux policy - add BR for autoconf, autotool, libtool as upstream doesn't ship a prebuilt configure anymore - import BR from nunc-stans as it is intree now: libtevent-devel libtalloc-devel libevent-devel - added BR for doxygen to build doxygen - enable auto-dn-suffix feature- fix build on factory: libsystemd-* libs got merged into libsystemd.- update to 1.3.5.15 - bz1358565 - Clear and unsalted password types are vulnerable to timing attack (SECURITY FIX) - Ticket 49016 - (un)register/migration/remove may fail if there is no suffix on ‘userRoot’ backend - Ticket 48328 - Add missing dependency - Ticket 49009 - args debug logging must be more restrictive - Ticket 49014 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin - Ticket 47703 - remove search limit for aci group evaluation - Ticket 48909 - Replication stops working in FIPS mode - changes in 1.3.5.14 - Ticket 48992 - Total init may fail if the pushed schema is rejected - Ticket 48832 - Fix CI test suite for password min age - Ticket 48983 - Configure and Makefile.in from new default paths work. - Ticket 48983 - Configure and Makefile.in from new default paths work. - Ticket 48983 - generate install path info from autotools scripts - Ticket 48944 - on a read only replica invalid state info can accumulate - Ticket 48766 - use a consumer maxcsn only as anchor if supplier is more advanced - Ticket 48921 - CI Replication stress tests have limits set too low - Ticket 48969 - nsslapd-auditfaillog always has an explicit path - Ticket 48957 - Update repl-monitor to handle new status messages - Ticket 48832 - Fix CI tests - Ticket 48975 - Disabling CLEAR password storage scheme will crash server when setting a password - Ticket 48369 - Add CI test suite - Ticket 48970 - Serverside sorting crashes the server - Ticket 48972 - remove old pwp code that adds/removes ACIs - Ticket 48957 - set proper update status to replication agreement in case of failure - Ticket 48950 - Add systemd warning to the LD_PRELOAD example in /etc/sysconfig/dirsrv - provide backend dir in suffix template - Ticket 48953 - Skip labelling and unlabelling ports during the test - Ticket 48967 - Add CI test and refactor test suite - Ticket 48967 - passwordMinAge attribute doesn’t limit the minimum age of the password - Fix jenkins warnings about unused vars - Ticket 48402 - v3 allow plugins to detect a restore or import - Ticket #48969 - nsslapd-auditfaillog always has an explicit path - Ticket 48964 - cleanAllRUV changelog purging incorrectly processes all backends - Ticket 48965 - Fix building rpms using rpm.mk - Ticket 48965 - Fix generation of the pre-release version - Bugzilla 1368956 - man page of ns-accountstatus.pl shows redundant entries for -p port option - Ticket 48960 - Crash in import_wait_for_space_in_fifo(). - Ticket 48832 - Fix more CI test failures - Ticket 48958 - Audit fail log doesn’t work if audit log disabled. - Ticket 48956 - ns-accountstatus.pl showing “activated” user even if it is inactivated - Ticket 48954 - replication fails because anchorcsn cannot be found - Ticket 48832 - Fix CI tests failures from jenkins server - Ticket 48950 - Change example in /etc/sysconfig/dirsrv to use tcmalloc- New upstream release 1.3.4.14- update to 1.3.5.13 - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation, etc. - Ticket 47538 - Fix repl-monitor color and lag times - Ticket 47538 - repl-monitor.pl legend not properly sorted - Ticket 47538 - repl-monitor.pl not displaying correct color code for lag time - Ticket 47664 - Move CI test to the pr suite and refactor - Ticket 47824 - Remove CI test from tickets and add logging - Ticket 47911 - split out snmp agent into a subpackage - Ticket 47976 - Add fixed CI test case - Ticket 47982 - Fix log hr timestamps when invalid value is set in cn=config - Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) - Ticket 48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance. - Ticket 48191 - Move CI test to the pr suite and refactor - Ticket 48234 - “matching rules” in ACI’s “bind rules not fully evaluated - Ticket 48234 - CI test: test case for ticket 48234 - Ticket 48275 - search returns no entry when OR filter component contains non readable attribute - Ticket 48326 - Move CI test to config test suite and refactor - Ticket 48336 - Missing semanage dependency - Ticket 48336 - setup-ds should detect if port is already defined - Ticket 48346 - ldaputil code cleanup - Ticket 48346 - log too verbose when re-acquiring expired ticket - Ticket 48354 - Review of default ACI in the directory server - Ticket 48363 - CI test - add test suite - Ticket 48366 - proxyauth does not work bound as directory manager - Ticket 48404 - libslapd owned by libs and devel - Ticket 48449 - Import readNSState from richm’s repo - Ticket 48449 - Import readNSState.py from RichM’s repo - Ticket 48450 - Add prestart work around for systemd ask password - Ticket 48450 - Autotools components for ds_systemd_ask_password_acl - Ticket 48617 - Coverity fixes - Ticket 48636 - Fix config validation check - Ticket 48636 - Improve replication convergence - Ticket 48637 - DN cache is not always updated when ADD operation fails - Ticket 48743 - If a cipher is disabled do not attempt to look it up - Ticket 48745 - Matching Rule caseExactIA5Match indexes incorrectly values with upper cases - Ticket 48745 - Matching Rule caseExactIA5Match indexes incorrectly values with upper cases - Ticket 48747 - dirsrv service fails to start when nsslapd-listenhost is configured - Ticket 48752 - Page result search should return empty cookie if there is no returned entry - Ticket 48752 - Add CI test - Ticket 48754 - ldclt should support -H - Ticket 48755 - moving an entry could make the online init fail - Ticket 48755 - CI test: test case for ticket 48755 - Ticket 48766 - Replication changelog can incorrectly skip over updates - Ticket 48767 - flow control in replication also blocks receiving results - Ticket 48795 - Make various improvements to create_test.py - Ticket 48799 - Test cases for objectClass values being dropped. - Ticket 48815 - ns-accountstatus.pl - fix DN normalization - Ticket 48832 - Fix timing and localhost issues - Ticket 48832 - CI tests - Ticket 48833 - 389 showing inconsistent values for shadowMax and shadowWarning in 1.3.5.1 - Ticket 48834 - Fix jenkins: discared qualifier on auditlog.c - Ticket 48834 - Modifier’s name is not recorded in the audit log with modrdn and moddn operations - Ticket 48844 - Regression introduced in matching rules by DS 48746 - Ticket 48846 - 32 bit systems set low vmsize - Ticket 48846 - Older kernels do not expose memavailable - Ticket 48846 - Rlimit checks should detect RLIM_INFINITY - Ticket 48848 - modrdn deleteoldrdn can fail to find old attribute value, perhaps due to case folding - Ticket 48849 - Systemd introduced incompatible changes that breaks ds build - Ticket 48850 - Correct memory leaks in pwdhash-bin and ns-slapd - Ticket 48854 - Running db2index with no options breaks replication - Ticket 48855 - Add basic pwdPolicy tests - Ticket 48858 - Segfault changing nsslapd-rootpw - Ticket 48862 - At startup DES to AES password conversion causes timeout in start script - Ticket 48863 - remove check for vmsize from util_info_sys_pages - Ticket 48870 - Correct plugin execution order due to changes in exop - Ticket 48872 - Fix segfault and use after free in plugin shutdown - Ticket 48873 - Backend should accept the reduced cache allocation when issane == 1 - Ticket 48877 - Fixes for RPM spec with spectool - Ticket 48880 - adding pre/post extop ability - Ticket 48882 - server can hang in connection list processing - Ticket 48889 - ldclt - fix man page and usage info - Ticket 48891 - ns-slapd crashes during the shutdown after adding attribute with a matching rule - Ticket 48892 - Wrong result code display in audit-failure log - Ticket 48893 - cn=config should not have readable components to anonymous - Ticket 48895 - tests package should be noarch - Ticket 48898 - Crash during shutdown if nunc-stans is enabled - Ticket 48899 - Values of dbcachetries/dbcachehits in cn=monitor could overflow. - Ticket 48900 - Add connection perf stats to logconv.pl - Ticket 48902 - Strdup pwdstoragescheme name to prevent misbehaving plugins - Ticket 48904 - syncrepl search returning error 329; plugin sending a bad error code - Ticket 48905 - coverity defects - Ticket 48912 - ntUserNtPassword schema - Ticket 48914 - db2bak.pl task enters infinitive loop when bak fs is almost full - Ticket 48916 - DNA Threshold set to 0 causes SIGFPE - Ticket 48918 - Upgrade to 389-ds-base >= 1.3.5.5 doesn’t install 389-ds-base-snmp - Ticket 48919 - Compiler warnings while building 389-ds-base on RHEL7 - Ticket 48920 - Memory leak in pwdhash-bin - Ticket 48921 - Adding replication and reliability tests - Ticket 48922 - Fix crash when deleting backend while import is running - Ticket 48924 - Fixup tombstone task needs to set proper flag when updating tombstones - Ticket 48925 - slapd crash with SIGILL: Dsktune should detect lack of CMPXCHG16B - Ticket 48928 - log of page result cookie should log empty cookie with a different value than 0 - Ticket 48930 - Paged result search can hang the server - Ticket 48934 - remove-ds.pl deletes an instance even if wrong prefix was specified - Ticket 48935 - Update dirsrv.systemd file - Ticket 48936 - Duplicate collation entries - Ticket 48939 - nsslapd-workingdir is empty when ns-slapd is started by systemd - Ticket 48940 - DS logs have warning:ancestorid not indexed - Ticket 48943 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password - Ticket 48943 - Add CI Test for the password test suite- update to 1.3.5.4 - Ticket 48836 - replication session fails because of permission denied - Ticket 48837 - Replication: total init aborted - Ticket 48617 - Server ram checks work in isolation - Ticket 48220 - The “repl-monitor” web page does not display “year” in date. - Ticket 48829 - Add gssapi sasl replication bind test - Ticket 48497 - uncomment pytest from CI test - Ticket 48828 - db2ldif is not taking into account multiple suffixes or backends - Ticket 48818 - Fix case where return code is always -1 - Ticket 48826 - 52updateAESplugin.pl may fail on older versions of perl - Ticket 48825 - Configure make generate invalid makefile - changes from 1.3.5.3 - Ticket 47536 - Allow usage of OpenLDAP libraries that don’t use NSS for crypto - Ticket 47536 - CI test: added test cases for ticket 47536 - Ticket 47840 - default instance scripts if undefined. - Ticket 47888 - Add CI test - Ticket 47888 - DES to AES password conversion fails if a backend is empty - Ticket 47951 - Fix startpid from altering dev/null - Ticket 47968 - Disable journald logs by default - Ticket 47982 - HR Log timers, regression fix for subsystem logging - Ticket 48078 - CI test - paged_results - TET part - Ticket 48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance. - Ticket 48269 - ns-accountstatus status message improvement - Ticket 48342 - DNA: deadlock during DNA_EXTEND_EXOP_REQUEST_OID - Ticket 48342 - DNA Deadlock test cases - Ticket 48342 - Prevent transaction abort if a transaction has not begun - Ticket 48350 - Integrate ASAN into our rpm build process - Ticket 48374 - entry cache locks not released in error conditions - Ticket 48410 - 389-ds-base - Unable to remove / unregister a DS instance from admin server - Ticket 48447 - with-initddir should accept no - Ticket 48450 - Systemd password agent support - Ticket 48492 - heap corruption at schema replication. - Ticket 48597 - Deadlock when rebuilding the group of authorized replication managers - Ticket 48662 - db2index with no attribute args fail. - Ticket 48710 - auto-dn-suffix unrecognized option - Ticket 48769 - Fix white space in extendedop.c - Ticket 48769 - RFE: Be_txn extended operation plugin type - Ticket 48770 - Improve extended op plugin handling - Ticket 48775 - If nsSSL3 is on, even if SSL v3 is not really enabled, a confusing message is logged. - Ticket 48779 - Remove startpidfile check in start-dirsrv - Ticket 48781 - Vague error message: setup_ol_tls_conn - failed: unable to create new TLS context - Ticket 48782 - Make sure that when LDAP_OPT_X_TLS_NEWCTX is set, the value is set to zero. - Ticket 48783 - Fix ns-accountstatus.pl syntax error - Ticket 48784 - CI test: added test cases for ticket 48784 - Ticket 48784 - Make the SSL version set to the client library configurable. - Ticket 48798 - Enable DS to offer weaker DH params in NSS - Ticket 48799 - objectclass values could be dropped on the consumer - Ticket 48800 - Cleaning up error buffers - Ticket 48801 - ASAN errors during tests - Ticket 48802 - Compilation warnings from clang - Ticket 48808 - Add test case - Ticket 48808 - Paged results search returns the blank list of entries - Ticket 48813 - password history is not updated when an admin resets the password - Ticket 48815 - ns-accountstatus.sh does handle DN’s with single quotes - Ticket 48818 - In docker, no one can hear your process hang. - Ticket 48822 - (389-ds-base-1.3.5) Fixing coverity issues. - Ticket 48824 - Cleanup rpm.mk and 389 specfile - enable nunc-stans- should also define the username- fix building systemd stuff - create user and home directory for it- limit gcc_security to TW. it enables compiler options not supported on leap e.g.- enable more gcc security features - enable selinux - fix the systemd options to actually pass some variable and also set the tmpfiles path- update to 1.3.5.1 - Ticket 47982 - improve timestamp resolution in logs - Ticket 48759 - no plugin calls in tombstone purging - Ticket 48665 - Prevent sefault in ldbm_instance_modify_config_entry - Ticket 48757 - License tag does not match actual license of code - Ticket 48746 - Crash when indexing an attribute with a matching rule - Ticket 48497 - extended search without MR indexed attribute prevents later indexing with that MR - Ticket 48368 - Resolve the py.test conflicts with the create_test.py issue - Ticket 48748 - Fix memory_leaks test suite teardown failure - Ticket 48383 - import tasks with dynamic buffer sizes - Ticket 48420 - change severity of some messages related to "keep alive" entries - Ticket 48386 - Clean up dsktune code - Ticket 48537 - undefined reference to `abstraction_increment' - Ticket 48747 - dirsrv service fails to start when nsslapd-listenhost is configured - changes from 1.3.5.0 - Ticket 132 - Makefile.am must include header files and template scripts - Ticket 142 - [RFE] Default password syntax settings don't work with fine-grained policies - Ticket 548 - RFE: Allow AD password sync to update shadowLastChange - Ticket 47788 - Only check postop result if its a replication operation - Ticket 47840 - add configure option to disable instance specific scripts - Ticket 47968 - [RFE] Send logs to journald - Ticket 47977 - [RFE] Implement sd_notify mechanism - Ticket 48016 - search, matching rules and filter error "unsupported type 0xA9" - Ticket 48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance. - Ticket 48145 - RFE Add log file for rejected changes - Ticket 48147 - Unable to enable DS service for auto start - Ticket 48151 - Improve CleanAllRUV task logging - Ticket 48218 - cleanAllRUV - modify the existing "force" option to bypass the "replica online" checks - Ticket 48244 - No validation check for the value for nsslapd-db-locks. - Ticket 48257 - Fix coverity issues - 08/24/2015 - Ticket 48263 - allow plugins to detect tombstone operations - Ticket 48269 - RFE: need an easy way to detect locked accounts locked by inactivity. - Ticket 48270 - fail to index an attribute with a specific matching rule/48269 - Ticket 48280 - enable logging of internal ops in the audit log - Ticket 48285 - The dirsrv user/group should be created in rpm %pre, and ideally with fixed uid/gid - Ticket 48289 - 389-ds-base: ldclt-bin killed by SIGSEGV - Ticket 48290 - No man page entry for - option '-u' of dbgen.pl for adding group entries with uniquemembers - Ticket 48294 - Linked Attributes plug-in - won't update links after MODRDN operation - Ticket 48295 - Entry cache is not rolled back -- Linked Attributes plug-in - wrong behaviour when adding valid and broken links - Ticket 48311 - nunc-stans: Attempt to release connection that is not acquired - Ticket 48317 - SELinux port labeling retry attempts are excessive - Ticket 48326 - [RFE] it could be nice to have nsslapd-maxbersize default to bigger than 2Mb - Ticket 48350 - configure.ac add options for debbuging and security analysis / hardening. - Ticket 48351 - Fix buffer overflow error when reading url with len 0 - Ticket 48363 - Support for rfc3673 '+' to return operational attributes - Ticket 48369 - [RFE] response control for password age should be sent by default by RHDS - Ticket 48384 - Server startup should warn about values consuming too much ram - Ticket 48387 - ASAN invalid read in cos_cache.c - Ticket 48394 - lower password history minimum to 1 - Ticket 48395 - ASAN - Use after free in uiduniq 7bit.c - Ticket 48398 - Coverity defect 13352 - Resource leak in auditlog.c - Ticket 48400 - ldclt - segmentation fault error while binding - Ticket 48445 - keep alive entries can break replication - Ticket 48446 - logconv.pl displays negative operation speeds - Ticket 48566 - acl.c attrFilterArray maybe uninitialised. - Ticket 48662 - db2index with no attribute args fail.- Update to new upstream release 1.3.4.8 * Various bugs are fixed- Update to new upstream release 1.3.4.5 * Various bugs are fixed- Upgrade from 1.3.3.13 to 1.3.4.4 with accumulated bugfixes.- Update to new upstream release 1.3.3.13 - Removed 389-ds-1.3.3.11-CVE-2015-3230.patch (included upstream)- Update to new upstream release 1.3.3.11 - Added 389-ds-1.3.3.11-CVE-2015-3230.patch: nsSSL3Ciphers preference not enforced on server side [boo#934934] [CVE-2015-3230]- Update to new upstream release 1.3.3.10 * One important security bug was fixed: Bug 1216203 - CVE-2015-1854 389ds-base: access control bypass with modrdn- Simplify filelist- Move bin/ and sbin/ to /usr/lib/389-ds/bin resp. sbin/ - Removed conflict with atheme- Update to new upstream release 1.3.3.9 * Several bugs are fixed including 2 security bugs Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all] Ticket 47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly Ticket 47451 - dynamic plugins - fix crash caused by invalid plugin config Ticket 47728 - compilation failed with ' incomplete struct/union/enum' if not set USE_POSIX_RWLOCKS Ticket 47742 - 64bit problem on big endian: auth method not supported Ticket 47801 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown Ticket 47828 - DNA scope: allow to exlude some subtrees Ticket 47836 - Do not return '0' as empty fallback value of nsds5replicalastupdatestart and nsds5replicalastupdatestart Ticket 47901 - After total init, nsds5replicaLastInitStatus can report an erroneous error status (like 'Referral') Ticket 47936 - Create a global lock to serialize write operations over several backends Ticket 47957 - Make ReplicaWaitForAsyncResults configurable Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD Ticket 48003 - add template scripts Ticket 48003 - build "suite" framework Ticket 48005 - ns-slapd crash in shutdown phase Ticket 48021 - nsDS5ReplicaBindDNGroup checkinterval not working properly Ticket 48027 - revise the rootdn plugin configuration validation Ticket 48030 - spec file should run "systemctl stop" against each running instance instead of dirsrv.target Ticket 48048 - Fix coverity issues - 2015/2/24 Ticket 48048 - Fix coverity issues - 2015/3/1 Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)- Conflicts with atheme -- /usr/sbin/dbverify- Update to new upstream release 1.3.3.5 * Several bugs are fixed.python-lib389python3-lib389sheep26 1668070076  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~1.4.4.19~git59.136fc84-150300.3.27.11.4.4.19~git59.136fc84-150300.3.27.11.4.4.19~git59.136fc84-150300.3.27.11.4.4.19~git59.136fc84-150300.3.27.11.4.4.19~git59.136fc84-150300.3.27.1    !!!!!!!!!!!! ""######""$$%%%%%%%%$$$&&''''''''''&&&&(((()*+,----dirsrvdscontainerlib389lib389-1.4.0.1-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txtrequires.txttop_level.txt__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pyc_constants.cpython-36.opt-1.pyc_constants.cpython-36.pyc_controls.cpython-36.opt-1.pyc_controls.cpython-36.pyc_entry.cpython-36.opt-1.pyc_entry.cpython-36.pyc_ldifconn.cpython-36.opt-1.pyc_ldifconn.cpython-36.pyc_mapped_object.cpython-36.opt-1.pyc_mapped_object.cpython-36.pyc_mapped_object_lint.cpython-36.opt-1.pyc_mapped_object_lint.cpython-36.pyc_replication.cpython-36.opt-1.pyc_replication.cpython-36.pycaci.cpython-36.opt-1.pycaci.cpython-36.pycagreement.cpython-36.opt-1.pycagreement.cpython-36.pycbackend.cpython-36.opt-1.pycbackend.cpython-36.pycchaining.cpython-36.opt-1.pycchaining.cpython-36.pycconfig.cpython-36.opt-1.pycconfig.cpython-36.pycconflicts.cpython-36.opt-1.pycconflicts.cpython-36.pyccos.cpython-36.opt-1.pyccos.cpython-36.pycdbgen.cpython-36.opt-1.pycdbgen.cpython-36.pycdirsrv_log.cpython-36.opt-1.pycdirsrv_log.cpython-36.pycds_instance.cpython-36.opt-1.pycds_instance.cpython-36.pycdseldif.cpython-36.opt-1.pycdseldif.cpython-36.pycencrypted_attributes.cpython-36.opt-1.pycencrypted_attributes.cpython-36.pycexceptions.cpython-36.opt-1.pycexceptions.cpython-36.pycextended_operations.cpython-36.opt-1.pycextended_operations.cpython-36.pycextensibleobject.cpython-36.opt-1.pycextensibleobject.cpython-36.pycindex.cpython-36.opt-1.pycindex.cpython-36.pycldap_objs.cpython-36.opt-1.pycldap_objs.cpython-36.pycldapi.cpython-36.opt-1.pycldapi.cpython-36.pycldclt.cpython-36.opt-1.pycldclt.cpython-36.pyclint.cpython-36.opt-1.pyclint.cpython-36.pycmappingTree.cpython-36.opt-1.pycmappingTree.cpython-36.pycmit_krb5.cpython-36.opt-1.pycmit_krb5.cpython-36.pycmonitor.cpython-36.opt-1.pycmonitor.cpython-36.pycnss_ssl.cpython-36.opt-1.pycnss_ssl.cpython-36.pycpasswd.cpython-36.opt-1.pycpasswd.cpython-36.pycpassword_plugins.cpython-36.opt-1.pycpassword_plugins.cpython-36.pycpaths.cpython-36.opt-1.pycpaths.cpython-36.pycplugins.cpython-36.opt-1.pycplugins.cpython-36.pycproperties.cpython-36.opt-1.pycproperties.cpython-36.pycpwpolicy.cpython-36.opt-1.pycpwpolicy.cpython-36.pycreferral.cpython-36.opt-1.pycreferral.cpython-36.pycreplica.cpython-36.opt-1.pycreplica.cpython-36.pycrepltools.cpython-36.opt-1.pycrepltools.cpython-36.pycrewriters.cpython-36.opt-1.pycrewriters.cpython-36.pycrootdse.cpython-36.opt-1.pycrootdse.cpython-36.pycsasl.cpython-36.opt-1.pycsasl.cpython-36.pycsaslmap.cpython-36.opt-1.pycsaslmap.cpython-36.pycschema.cpython-36.opt-1.pycschema.cpython-36.pycsuffix.cpython-36.opt-1.pycsuffix.cpython-36.pyctasks.cpython-36.opt-1.pyctasks.cpython-36.pyctombstone.cpython-36.opt-1.pyctombstone.cpython-36.pyctools.cpython-36.opt-1.pyctools.cpython-36.pyctopologies.cpython-36.opt-1.pyctopologies.cpython-36.pycutils.cpython-36.opt-1.pycutils.cpython-36.pyc_constants.py_controls.py_entry.py_ldifconn.py_mapped_object.py_mapped_object_lint.py_replication.pyaci.pyagreement.pybackend.pychaining.pycli_base__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycdsrc.cpython-36.opt-1.pycdsrc.cpython-36.pycdsrc.pycli_conf__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycbackend.cpython-36.opt-1.pycbackend.cpython-36.pycbackup.cpython-36.opt-1.pycbackup.cpython-36.pycchaining.cpython-36.opt-1.pycchaining.cpython-36.pycconfig.cpython-36.opt-1.pycconfig.cpython-36.pycconflicts.cpython-36.opt-1.pycconflicts.cpython-36.pycdirectory_manager.cpython-36.opt-1.pycdirectory_manager.cpython-36.pycmonitor.cpython-36.opt-1.pycmonitor.cpython-36.pycplugin.cpython-36.opt-1.pycplugin.cpython-36.pycpwpolicy.cpython-36.opt-1.pycpwpolicy.cpython-36.pycreplication.cpython-36.opt-1.pycreplication.cpython-36.pycsaslmappings.cpython-36.opt-1.pycsaslmappings.cpython-36.pycschema.cpython-36.opt-1.pycschema.cpython-36.pycsecurity.cpython-36.opt-1.pycsecurity.cpython-36.pycbackend.pybackup.pychaining.pyconfig.pyconflicts.pydirectory_manager.pymonitor.pyplugin.pyplugins__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycaccountpolicy.cpython-36.opt-1.pycaccountpolicy.cpython-36.pycattruniq.cpython-36.opt-1.pycattruniq.cpython-36.pycautomember.cpython-36.opt-1.pycautomember.cpython-36.pyccontentsync.cpython-36.opt-1.pyccontentsync.cpython-36.pycdna.cpython-36.opt-1.pycdna.cpython-36.pycentryuuid.cpython-36.opt-1.pycentryuuid.cpython-36.pyclinkedattr.cpython-36.opt-1.pyclinkedattr.cpython-36.pycmanagedentries.cpython-36.opt-1.pycmanagedentries.cpython-36.pycmemberof.cpython-36.opt-1.pycmemberof.cpython-36.pycpassthroughauth.cpython-36.opt-1.pycpassthroughauth.cpython-36.pycposix_winsync.cpython-36.opt-1.pycposix_winsync.cpython-36.pycreferint.cpython-36.opt-1.pycreferint.cpython-36.pycretrochangelog.cpython-36.opt-1.pycretrochangelog.cpython-36.pycrootdn_ac.cpython-36.opt-1.pycrootdn_ac.cpython-36.pycusn.cpython-36.opt-1.pycusn.cpython-36.pycaccountpolicy.pyattruniq.pyautomember.pycontentsync.pydna.pyentryuuid.pylinkedattr.pymanagedentries.pymemberof.pypassthroughauth.pyposix_winsync.pyreferint.pyretrochangelog.pyrootdn_ac.pyusn.pypwpolicy.pyreplication.pysaslmappings.pyschema.pysecurity.pycli_ctl__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pyccockpit.cpython-36.opt-1.pyccockpit.cpython-36.pycdbgen.cpython-36.opt-1.pycdbgen.cpython-36.pycdbtasks.cpython-36.opt-1.pycdbtasks.cpython-36.pycdsrc.cpython-36.opt-1.pycdsrc.cpython-36.pychealth.cpython-36.opt-1.pychealth.cpython-36.pycinstance.cpython-36.opt-1.pycinstance.cpython-36.pycnsstate.cpython-36.opt-1.pycnsstate.cpython-36.pyctls.cpython-36.opt-1.pyctls.cpython-36.pyccockpit.pydbgen.pydbtasks.pydsrc.pyhealth.pyinstance.pynsstate.pytls.pycli_idm__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycaccount.cpython-36.opt-1.pycaccount.cpython-36.pycclient_config.cpython-36.opt-1.pycclient_config.cpython-36.pycgroup.cpython-36.opt-1.pycgroup.cpython-36.pycinitialise.cpython-36.opt-1.pycinitialise.cpython-36.pycorganizationalunit.cpython-36.opt-1.pycorganizationalunit.cpython-36.pycposixgroup.cpython-36.opt-1.pycposixgroup.cpython-36.pycrole.cpython-36.opt-1.pycrole.cpython-36.pycservice.cpython-36.opt-1.pycservice.cpython-36.pycuser.cpython-36.opt-1.pycuser.cpython-36.pycaccount.pyclient_config.pygroup.pyinitialise.pyorganizationalunit.pyposixgroup.pyrole.pyservice.pyuser.pyclitools__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycconfig.pyconfigurations__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycconfig.cpython-36.opt-1.pycconfig.cpython-36.pycconfig_001003006.cpython-36.opt-1.pycconfig_001003006.cpython-36.pycconfig_001004000.cpython-36.opt-1.pycconfig_001004000.cpython-36.pycconfig_001004002.cpython-36.opt-1.pycconfig_001004002.cpython-36.pycsample.cpython-36.opt-1.pycsample.cpython-36.pycconfig.pyconfig_001003006.pyconfig_001004000.pyconfig_001004002.pysample.pyconflicts.pycos.pydbgen.pydirsrv_log.pyds_instance.pydseldif.pyencrypted_attributes.pyexceptions.pyextended_operations.pyextensibleobject.pyidm__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycaccount.cpython-36.opt-1.pycaccount.cpython-36.pyccountry.cpython-36.opt-1.pyccountry.cpython-36.pycdirectorymanager.cpython-36.opt-1.pycdirectorymanager.cpython-36.pycdomain.cpython-36.opt-1.pycdomain.cpython-36.pycgroup.cpython-36.opt-1.pycgroup.cpython-36.pycipadomain.cpython-36.opt-1.pycipadomain.cpython-36.pycnscontainer.cpython-36.opt-1.pycnscontainer.cpython-36.pycorganization.cpython-36.opt-1.pycorganization.cpython-36.pycorganizationalrole.cpython-36.opt-1.pycorganizationalrole.cpython-36.pycorganizationalunit.cpython-36.opt-1.pycorganizationalunit.cpython-36.pycposixgroup.cpython-36.opt-1.pycposixgroup.cpython-36.pycrole.cpython-36.opt-1.pycrole.cpython-36.pycservices.cpython-36.opt-1.pycservices.cpython-36.pycuser.cpython-36.opt-1.pycuser.cpython-36.pycaccount.pycountry.pydirectorymanager.pydomain.pygroup.pyipadomain.pynscontainer.pyorganization.pyorganizationalrole.pyorganizationalunit.pyposixgroup.pyrole.pyservices.pyuser.pyindex.pyinstance__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycoptions.cpython-36.opt-1.pycoptions.cpython-36.pycremove.cpython-36.opt-1.pycremove.cpython-36.pycsetup.cpython-36.opt-1.pycsetup.cpython-36.pycoptions.pyremove.pysetup.pyldap_objs.pyldapi.pyldclt.pylint.pymappingTree.pymigrate__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycldif.cpython-36.opt-1.pycldif.cpython-36.pycplan.cpython-36.opt-1.pycplan.cpython-36.pycldif.pyopenldap__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycconfig.cpython-36.opt-1.pycconfig.cpython-36.pycschema.cpython-36.opt-1.pycschema.cpython-36.pycconfig.pyschema.pyplan.pymit_krb5.pymonitor.pynss_ssl.pypasswd.pypassword_plugins.pypaths.pyplugins.pyproperties.pypwpolicy.pyreferral.pyreplica.pyrepltools.pyrewriters.pyrootdse.pysasl.pysaslmap.pyschema.pysuffix.pytasks.pytests__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycaci_parse_test.cpython-36.opt-1.pycaci_parse_test.cpython-36.pycaci_test.cpython-36.opt-1.pycaci_test.cpython-36.pycagreement_test.cpython-36.opt-1.pycagreement_test.cpython-36.pycbackend_test.cpython-36.opt-1.pycbackend_test.cpython-36.pycconfig.cpython-36.opt-1.pycconfig.cpython-36.pycconfig_test.cpython-36.opt-1.pycconfig_test.cpython-36.pycconftest.cpython-36.opt-1.pycconftest.cpython-36.pycdereference_test.cpython-36.opt-1.pycdereference_test.cpython-36.pycdirsrv_log_test.cpython-36.opt-1.pycdirsrv_log_test.cpython-36.pycdirsrv_test.cpython-36.opt-1.pycdirsrv_test.cpython-36.pycdseldif_test.cpython-36.opt-1.pycdseldif_test.cpython-36.pyceffective_rights_test.cpython-36.opt-1.pyceffective_rights_test.cpython-36.pycentry_test.cpython-36.opt-1.pycentry_test.cpython-36.pychealthcheck_test.cpython-36.opt-1.pychealthcheck_test.cpython-36.pycindex_test.cpython-36.opt-1.pycindex_test.cpython-36.pycldclt_test.cpython-36.opt-1.pycldclt_test.cpython-36.pycmapped_object_lint_test.cpython-36.opt-1.pycmapped_object_lint_test.cpython-36.pycmapped_object_test.cpython-36.opt-1.pycmapped_object_test.cpython-36.pycmappingtree_test.cpython-36.opt-1.pycmappingtree_test.cpython-36.pycnss_ssl_test.cpython-36.opt-1.pycnss_ssl_test.cpython-36.pycpaths_test.cpython-36.opt-1.pycpaths_test.cpython-36.pycplugin_test.cpython-36.opt-1.pycplugin_test.cpython-36.pycreferral_test.cpython-36.opt-1.pycreferral_test.cpython-36.pycreplica_test.cpython-36.opt-1.pycreplica_test.cpython-36.pycschema_test.cpython-36.opt-1.pycschema_test.cpython-36.pycsuffix_test.cpython-36.opt-1.pycsuffix_test.cpython-36.pyctest_module_proxy.cpython-36.opt-1.pyctest_module_proxy.cpython-36.pyctls_external_test.cpython-36.opt-1.pyctls_external_test.cpython-36.pycutils_test.cpython-36.opt-1.pycutils_test.cpython-36.pycaci_parse_test.pyaci_test.pyagreement_test.pybackend_test.pycli__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycadm_instance_test.cpython-36.opt-1.pycadm_instance_test.cpython-36.pycconf_backend_test.cpython-36.opt-1.pycconf_backend_test.cpython-36.pycconf_backup_test.cpython-36.opt-1.pycconf_backup_test.cpython-36.pycconf_chaining_test.cpython-36.opt-1.pycconf_chaining_test.cpython-36.pycconf_conflicts_test.cpython-36.opt-1.pycconf_conflicts_test.cpython-36.pycconf_directory_manager_test.cpython-36.opt-1.pycconf_directory_manager_test.cpython-36.pycconf_plugin_test.cpython-36.opt-1.pycconf_plugin_test.cpython-36.pycconf_pwpolicy_test.cpython-36.opt-1.pycconf_pwpolicy_test.cpython-36.pycconf_schema_test.cpython-36.opt-1.pycconf_schema_test.cpython-36.pycctl_dbtasks_test.cpython-36.opt-1.pycctl_dbtasks_test.cpython-36.pycdsrc_test.cpython-36.opt-1.pycdsrc_test.cpython-36.pycidm_group_test.cpython-36.opt-1.pycidm_group_test.cpython-36.pycidm_user_modify_test.cpython-36.opt-1.pycidm_user_modify_test.cpython-36.pycidm_user_test.cpython-36.opt-1.pycidm_user_test.cpython-36.pycadm_instance_test.pyconf_backend_test.pyconf_backup_test.pyconf_chaining_test.pyconf_conflicts_test.pyconf_directory_manager_test.pyconf_plugin_test.pyconf_plugins__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycautomember_test.cpython-36.opt-1.pycautomember_test.cpython-36.pycmemberof_test.cpython-36.opt-1.pycmemberof_test.cpython-36.pycreferint_test.cpython-36.opt-1.pycreferint_test.cpython-36.pycrootdn_ac_test.cpython-36.opt-1.pycrootdn_ac_test.cpython-36.pycusn_test.cpython-36.opt-1.pycusn_test.cpython-36.pycautomember_test.pymemberof_test.pyreferint_test.pyrootdn_ac_test.pyusn_test.pyconf_pwpolicy_test.pyconf_schema_test.pyctl_dbtasks_test.pydsrc_test.pyidm_group_test.pyidm_user_modify_test.pyidm_user_test.pyconfig.pyconfig_test.pyconfigurations__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycconfig_001003006_test.cpython-36.opt-1.pycconfig_001003006_test.cpython-36.pycconfig_001004000_test.cpython-36.opt-1.pycconfig_001004000_test.cpython-36.pycconfig_001003006_test.pyconfig_001004000_test.pyconftest.pydereference_test.pydirsrv_log_test.pydirsrv_test.pydseldif_test.pyeffective_rights_test.pyentry_test.pyhealthcheck_test.pyidm__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycaccount_test.cpython-36.opt-1.pycaccount_test.cpython-36.pycservices_test.cpython-36.opt-1.pycservices_test.cpython-36.pycuser_and_group_test.cpython-36.opt-1.pycuser_and_group_test.cpython-36.pycaccount_test.pyservices_test.pyuser_and_group_test.pyindex_test.pyldclt_test.pymapped_object_lint_test.pymapped_object_test.pymappingtree_test.pynss_ssl_test.pypaths_test.pyplugin_test.pyplugins__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycmemberof_test.cpython-36.opt-1.pycmemberof_test.cpython-36.pycreferint_test.cpython-36.opt-1.pycreferint_test.cpython-36.pycusn_test.cpython-36.opt-1.pycusn_test.cpython-36.pycutils.cpython-36.opt-1.pycutils.cpython-36.pycmemberof_test.pyreferint_test.pyusn_test.pyutils.pyreferral_test.pyreplica_test.pyschema_test.pysuffix_test.pytest_module_proxy.pytls_external_test.pyutils_test.pytombstone.pytools.pytopologies.pyutils.pydsconfdscreatedsctldsidmlib389README.mdlib389LICENSEdsconf.8.gzdscreate.8.gzdsctl.8.gzdsidm.8.gz/usr/lib//usr/lib/dirsrv//usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/lib389-1.4.0.1-py3.6.egg-info//usr/lib/python3.6/site-packages/lib389//usr/lib/python3.6/site-packages/lib389/__pycache__//usr/lib/python3.6/site-packages/lib389/cli_base//usr/lib/python3.6/site-packages/lib389/cli_base/__pycache__//usr/lib/python3.6/site-packages/lib389/cli_conf//usr/lib/python3.6/site-packages/lib389/cli_conf/__pycache__//usr/lib/python3.6/site-packages/lib389/cli_conf/plugins//usr/lib/python3.6/site-packages/lib389/cli_conf/plugins/__pycache__//usr/lib/python3.6/site-packages/lib389/cli_ctl//usr/lib/python3.6/site-packages/lib389/cli_ctl/__pycache__//usr/lib/python3.6/site-packages/lib389/cli_idm//usr/lib/python3.6/site-packages/lib389/cli_idm/__pycache__//usr/lib/python3.6/site-packages/lib389/clitools//usr/lib/python3.6/site-packages/lib389/clitools/__pycache__//usr/lib/python3.6/site-packages/lib389/configurations//usr/lib/python3.6/site-packages/lib389/configurations/__pycache__//usr/lib/python3.6/site-packages/lib389/idm//usr/lib/python3.6/site-packages/lib389/idm/__pycache__//usr/lib/python3.6/site-packages/lib389/instance//usr/lib/python3.6/site-packages/lib389/instance/__pycache__//usr/lib/python3.6/site-packages/lib389/migrate//usr/lib/python3.6/site-packages/lib389/migrate/__pycache__//usr/lib/python3.6/site-packages/lib389/migrate/openldap//usr/lib/python3.6/site-packages/lib389/migrate/openldap/__pycache__//usr/lib/python3.6/site-packages/lib389/tests//usr/lib/python3.6/site-packages/lib389/tests/__pycache__//usr/lib/python3.6/site-packages/lib389/tests/cli//usr/lib/python3.6/site-packages/lib389/tests/cli/__pycache__//usr/lib/python3.6/site-packages/lib389/tests/cli/conf_plugins//usr/lib/python3.6/site-packages/lib389/tests/cli/conf_plugins/__pycache__//usr/lib/python3.6/site-packages/lib389/tests/configurations//usr/lib/python3.6/site-packages/lib389/tests/configurations/__pycache__//usr/lib/python3.6/site-packages/lib389/tests/idm//usr/lib/python3.6/site-packages/lib389/tests/idm/__pycache__//usr/lib/python3.6/site-packages/lib389/tests/plugins//usr/lib/python3.6/site-packages/lib389/tests/plugins/__pycache__//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/lib389//usr/share/licenses//usr/share/licenses/lib389//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:26146/SUSE_SLE-15-SP3_Update/43ad49172a15b2176f9f6e2a5de56302-389-ds.SUSE_SLE-15-SP3_Updatedrpmxz5x86_64-suse-linux directoryPython script, ASCII text executableASCII textpython 3.6 byte-compiledemptyPython script, UTF-8 Unicode text executablePython script, ASCII text executable, with very long linesAlgol 68 source, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~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o($יW瀀openldap2-clientpython3-policycoreutilspython3-selinuxutf-839a026037eec1fcba74f18e42a43c5cec59ee01b997134e29e8c251883989490?7zXZ !t/.]"k%v ְxTi2QߌNl7`FڞMuW|?* (5pwZmWNc`! D@wL %y } i%asߜ\&F&c_BsHF; mD@11&N{@M}w} ۲S-ةBtyY*MHf!F%dc+)xzPG˻Ҫ|Ԩ sbCK|>o,Hz<" |C9F!cn+=!1p„MQ~{ę `at&sMgʙ!%,{pg D# Z$z|v-A;Cd@"+i%CT8.H֚6fy}pwCf52z,w1XXIAC/9md5ޟW}5~KvKd۲klyqO2mF}$oȭcǏ'EβC9Dc~K7 !,&NIw5W~l8t& J-gGe[P^__Y\D:Ag)*ŐeK &~kq3!"P{$E|OD>-i(!0%BLrhXwo^B ſ?[\v,i<، ]]L7\ǝ@YMybb'o.^OD @3RD*oҭ츟@ԾїEy_4ܾxM|z{ɒ˜_,ʹA寧7@0Ts{b'YfōBw=cFE4̩:5,"x 2&'t59 ,9qD1^.ig鄴Z0lj Gnـ aAlyr @3oNG1eYDIOK-0K`Gsg} G @[X:A 4b/U!c f&O.Rl7UFTUumn"zaՓS,92)qZ\N TimʬE"{NaMJ jrE[xX9SK@%]]a&-:7A|']G4ݢZ ] f-wP n8e*8 _XF)W=u3kdz``jbȺw1Oy,EKuv;ZE.C78р"ɕPkލժf:<|w<'Qg"_~EV;Y${'4IG[;5>}غ(2ĦqEäLd=:CG\EN\.7 [f%!Hr:Y/&SOp8 bwuVy4(f[Xs22W'[y!iF3ͩA¥x7EDy%$47)D*9l?/Ec`%\hv.|fk|>W]oE'uD/*^ l*2CКAs\`{՜Z<Γ<7]T_:=B]KzLp'$;ˉAay!)H2ƼҚBeYJԖ8%G5Ť8qo}N+BAeOauGz+k?SVIԅZ̫`?7mTGB!1 k<_.i̩YL=1ꔷ/+&R5989T+3yJyֶ .,}wBd VD+Lź(J$u =={cICᐭ"NH'}ֿ|uaCOq b0v{Qn6DoBNȌVX ,E>JUr9/ <DhBaLCfAp sOT\̕gq$c(25;$riFk\e,bap/9J"D'q+5yWN6mWI^@_v4n>MwK0ld>0<Ax}욜 &/,G bhu~(*UDox?YcnkzƻY rI+MeKUEg!)Ib`Ciu 'Dd<λݨ\Dc@ұ_1R0]%9%@}Yz `_S5@-V`}ݢYT<$Ewؔ3n񬾵G1sUw%ZӲ0zK<_Y䦁NiٟGnL*F^Ot5WAMn&rC 1&1]\ :\wL >5 |c7,rӡ; #5dV)oL`9Q1[ TopXn@s]8QV}I=('DgX1zޕ;䳮k ~ o[!["\+S81C{ ?ݛ%|xBw. װu}=JՎ3/|ll'~Mt8PIQK5.ܣ|_i޽ɓCIn}b4v|W7RZMbKˌ* *#SC'zp v"> &Z *i'w`+S /NFNalh+&yz6c%|X&gU{;]sptLK&FE\ͻO ~ӠvPSpa_o4ˑb]rAuh ApF& -{񧸮A="?g1OL[w `S!/O]$,4Jl ] $Q&1XY|+)wi iY?V9<^ ߔs̜(<:?C"g~HvK=%ƒ00z -ػǡQlyw_$Gb$Z溺'ddKhA8a[Φi'f`}8cS!oCE S1 3n`)AA7 ̘(ؼ&S`+% Z`5 :Zn,jOU~`!Ƨp^Xoz nf`F5['C;JEzД ɸ^%Š,P&;Zn_j0'#JK egds }^x"7'GQB߅hf PǶqe1 ߮_{Qh0?)4\k(?|XxAwq/zܢR6xS׭@k% gNU6=9{i|Kb",cu,=4J%51YR>X=居eT"_&##) rW9D k,ry+ 4C)Ʊ\Z,rc"̈gYQ$o>*zT~%{"+Ҁcm˳$Fs訁M:ctq%git"ۏuaM&>ŦSgA3҈[ޓt|WFTpðSZ yWĶ3 ]+P ۯ! z˺.hy]t8 @fPyA%$9f# pwcHo|&*QE2y' f\Z3}UlB.V#̥!^RͲ_z=HyϚ8 KA0XQ:.,8b" G:LUp^( mִR9 f6 7"'β P)קFq0hB9~&mxFAFWu߫NKHr8G21޾L-!##޴ Nu \~o&P19|nm \Wd<ݢG0V[EO(}&ŌZUf:eϵ4{Q(iu.No3}3ۯpyzW֣xv|X&#p!ۂY:{1ݠ]NKTc:4cdՑׅzARmaEz=dHE)+ctm-gBcgo53+ s)G?Z8Xx?mN#U0]E0$=֎ 6 Swv+_`{!B/edE:Q少6N;WL%-44SqSQ;7/sJJHL zQ|&z__OFY`0 bܰ;c&þ8_P8ܵfͱ⣍9GãEVgV,ˀhz)!ELa1aƞIQMǑU528"8QK\0U֖t篬1ŒIٓ9JV/ۛEimD7hS$', vkb/תb|rw)&m}F&Iv_S0C ,*SX{!>͕ba۠z/Y/B8 A~JL)B: ]A,T^ȒHN/%dEVE.Kޗbo ]JTQO ኯ{!)h"#}mHd^ӕB" ь51a o%YW[z<߯ðWɉtQPĂf]"΍44t|w0o34LByHJN_M~.1F&5o݀IƏ)yɄ0y@,oWK` OƔ5^un5A-δzSh5y7H-ɷyZ_TExţe'ZEE,NWJMB>oUȅ^rn/%Zz%3O`7מ&6 $L,>VP/w jѵ,8eŐQgYMV)%.o̚I @'>s+05at@<`{!:ĿpVOap]xd>)֨Z:"B x d_6| =͌~)D6oo= yZĔcAЀ]2nF,Y8Y(VY~1_>f 8^i)SjŤj@4 aK!߉@t꞉_'X..0ޮj¦67f!©Fen^bme7l*CӨ!W0t/ xHFVO2n*= bk T+ok;Tn}#yCERtdStϬļW O%:%- CE?[?`L PYU)!7; 7Q#&ŀWf&hL] ńhzsIlkgHz^=dUODHt ̈۾0Qp0=U::8Pcl oǞ,vGiCzBU..8T78A&keʀ%܌. r$= wW^F\څ**PuIYѦ5 JP>/+-EA 9cruq?(j:7ʑ(wb=(,R)tywNO:K)3M90BțfWi D}TF ҪNULRZg Mr庙^d͐Z@33 35K0Td+d\rkZNK\7d礚{"fJbPks~+)Bh_4O; C׎1s89*oA-bO&V~H`zދ6|OK ֤lWopptCt>ޣQ!]:R n?Am: L`RE[ĴyOs6s*/SL:=?|SYϪwdIhzi}q"wAqyLuOk7y!4;PjYg^d]T]tj;m&-bL]Y[o`sbCu&v48htp|Y%䑟YE@.M”B0*,i7LCĝFf2؁J)jBi(}#67 Z)$` qi1[ vI0xgZ_ou7AU)gw!XyEfq3C!owuA%4PN?= M0o8\SNݹ>\f"n(>Xt:ϭU:MA0iv!D^lUZߤ 7hwcbQ`hu}A7sF\.%Sv$gbӻngedz.EM + \;]R-*f䧊*=O +hwEVRFxD *Zb,YhxFFyc$kg<J/xLP\#;'Dd"g[(~L Y-@~mlNTtʷZNȋ⚡pChOZu{Pcqn&G P8*N޲b_Oۉ YDKɺxoBYc<콻zK_Zd4ULII1Ԡ>rgOzg͔!1B$ M/v5_2 uJQSLW`?J?bj}}{<^-#uGMB\\Y*P{QjiVz0\T0}|jߍI|}a7-1İf7;fGR{1rw} g{3f'b8& P^ϊIG4O@{zЅjӏ^WTF]W6T6iџV7~L~[kRDfk FiM <-;K<%u}3>}×.IA.Vd ~ r1%!6YkuE|ɔ_߸:rp)RSZ%E"VmkO#Fu`ܽn0dw߯[p:Dq'Xg ,<$~GZ.JHB;=(0a!.JKiNÓŏiA-}W}רx׏}r~'y[U`:t\:Q!80ж9xi"e XL{6&EkJ Mi-1(Dl hzA@LpZܯ. (+Qx)6 tDJ>"+UNpOj=9Å`4U%ڄLޑ0CoH6p"lp;9?@N}=l`spBFPB=|m^/`j]:1e7-jtapɁo7Hd@ɨzS*=C&+d. u\f+K<$WGMul~6 2.2 )4LF mwBnTG cbw- M-6 dk"1xc#A0ÌNcJAPpD?6EH)՞t( _7עwf83竵V :)wG-np,OxJR_Us#IZ= "׀ʔ[v2QV@MUH_4Pʈ>FCW+Hm#Ҵd;vI|H5+&|=&CT@y'yz>T)U\Ev:12b1bP{#wEѪ99<-YpJ0b\`%:{Ңtxd0 & y_F`AhmL1;ZS c0e,B!%iP^NZ> i ]hD 5Wn >Tq3EKL'ʲ |Dipsq_VԪ8ņ]8cV{.^ ⥝C* ʟFĊ9CF8ևb|͊^U/;e PZVq~/,P=" Mڼw BXPFv_`.~OLKcV~SMftT#u 2VN+6cʗTRY4A`CAh%&s^&Q>ͻ dyX}$;dv; ,lx;`{ kQ9B"cuvz;FGsC%>F2E;(\B Fu.p4y{BT=X ݜ4}8t+i03BIO|&5?Rխo Fra|b)G7fv㷉>pI$Xx[8^ \<( }|CdũliҠLn)dVLL87CPV0'IE0ő6D`t:фN `ٳY?pt̀&NSĺUvr~b(7~rDO H>3H8d7(M.#!sB局%ز zwyP&3ioT $d= wyܝAf Ue!# ko))=ovtS O8]AqsbGJX!ޠkܚڕ\]*3lTǸ Vפ)gr9%Buil/荃^Ћ]THȖoImňܥ{КN啝o>/Q9L$i-:;1#rf`D7(QG3 ; 4g愂q*IwSCՋ][W^@_iR- ͕z^7HB>!U uqS ]{bصkaҋo* wt{i3'U6HhTp#x"lܐG! v0Svٷco ᛗZ0BAx!7Qz<}~!x0)JnqA8{e cMO0y޳VI+<̓\,WI\  3د)hCv+O j5>dgĢo ^BxuB򤻃5-YD&-:gzH!kZ="䢭h ,4OK*$Yxno bŒѱMv'k|cj=brZWN>F ('`ĊkD0+H*N N VW¤Mw$zoSN ḯl-imqĺb u3HV6&Cj'畨2wܭ*`%XR]GGl6qeB`vs 鸪I0Ilg\B)a9ʦ ѧ)EB\NOFs~O[I˸95|O/EĂKJL6MWnwFʤ5n bdNؔgi|/@& j8>+Jr߉ޏ0a#;g2#^bzyrFd[|ۆ|㯭B+GrE!k!eYcQf,V `:#/⻀[X J DPҪ #OJѸV!̣)udQ;I9 LIR!bGg¾Y$6Yl^҆Zts)_}2s\cp 2bbxui,U:rEh΋4,OM̭1n!&\ވo1zgp6njvt|K5Z~U;Ŭ*E$b+%b( 4H<+XCj9uT63Ͱc4dou-r8X@S$KP+@58&~#XMG"r{uy9/e)xٱ=B8ǂ&DBkSV 3n硱HP`qje=bcyI yN=wa§Xڣgbj[źc7W$x  7f5YT } SdRȪ5&j  du,!6tYZ|ҵ^=җS1DwIunqyU~AnوHmZpuGAM#RN.:o~F?Lc/͍`R6̏fLBjw^ň1X](9=Z%N}Qz6 '?Ɉ8q)0;@GCW3I%@ճ&0`[\uJχ'xPMU~UݥϞۙ nk=fm07`pͤRnijspju 3zK ŢkBnV% M6y@ΟncdcR|Z3o0p7nB_O=ϓ.<9CqKܹj Htą ƄɊ&sDDzu|D'H OIk lD2'pU]ݠEQ">iUJ$~_ZCB^zpGdf;~5d> GmS/fvdB}ځvnEDgQV+A LMV$=C0':G ܰxR~W/]لfA#rtj>Z FT=TЉm" sęIÖӬ&Afs(1vs<粥1\WN$ J&f>p=|.&Hbh7+ <T#ZkAg׃Mi!V35 ՖTO[9 YaC8y͆)y rilb`YEI89-8 ]Ҩ qLp!e4V9*om)ꋙ=ש,rಏ&@\ӆ(ĭÊǯmE $xn lǎy)ś$Р=9t٩DyenH8ZeY{Pe]9t& rHNR1ÚXL> m:Qlįy޹Ea ~P| CCEd]Cm$) ,rk &dG" aIPzZegZN7I)m&__+Cf;\GaE)TvWRP2yPBë}9 뗐epBaa y͏S ,ɟK"h;4ǩ;jٝyTrFT =SCnV<'sId2?lqeCb7W/ X Jru"B@ң"y f;de}9[œQC:ێMj jHwdDaE 9ά,TS<DŽ0m%[Ֆ0 oXT ;T.փ2wECzUĹD ^yg4Ʌ8)@XSǾ>۰Eϓj}?e 7}"N'QKLO5`-u)ҳ!5/ ;|8|H rCOTOy9sҍr{TI0RX{M]%*FԷ{z;i4v;(-$rV"mBYtS  ?{b >d9+WȀf|KY4SgM̵s<D捩\jg CLQ@_FzTZ+#47{a>A)N.Fnb-#B2Y{D@t:x6w2k4&5O,uG\w6W$:^3n9ODEN("-ο]`| .FytPعOID^^1ol}dٮSPF yڧ( sqw:>08KHѓ%q\iEJ˖$Hx7[wS?;`~wr[8_zWnW >Ts q|=V x!k:Eoֈn{.dW[>'/Mb֖OޱyY+'cv|ߓI6^Ғ xIo_gkҿ;cl[̟ ̐mKe(fŸ٢@QY99!bn3"gTMoWMG{i)W"M{ X@fy$!8)\)Qs1d' *Oܪ+!p!@qD[1И7쪉}G y b-LF'kh/$dj;B@wȦVI}, <%tѳ@Z6زV ~?0D a IjnORw'1kqqtgayY=Qk.Kч9SC=oX1N@L!YvHޔHq?P\!3`R=L<#(VN=0!mo􅙏wX2;W*E!; rd&l~zӌ>lєծľ07N--Y#R a n֣(g(PE19_z svT:A7&$-(ZS1sdKNnkɜ;zI Gmy\3Ȳ.i ] UTfxmyM&biSP h) }gPAI^xqEN -dl{5+1vYZhV=JsazFQL՟[rLnlvieï C) #QDuG^i# =ɘ Y8}{ %`h[7%U=tX4-.tlfREbxxNr"7\{U3TL7y%a Re1 AwKe>}S$Mr2&'k9Uj+|;FC+ōc.(e8#UE-2).cGZam JGq rqDVz2Ďj/ܛ|}Z(zAV@zcz#;Y/IX;cqbTQغ?as#$YAqI}d0U8n|*zֲᏈ]9ҭPlQ۳8㫔cxOKY.ev>?CK,RɬTR;_7%c<55s~OK=uX) ~IrY]iбklˡCJJIO T4ȩ(蕗%$X6-ms )f7S{Ņ7^^'o6q߱&™ss*.;;"AU:yJ`B@:ߡ:mcZ8(3ͮBc K^ FhucЬW{(j"[0N9:%8<$&YIdr!( h:Ťuٛ;9Y({oO骚},lUs6sRp椫~y}K4$ߴ @)j3q# lFv].8/zܴjP-'-e'?P"ׇԦKV#gx[S%_&, 5_itpȨQe<+u=؏}m>U "Ji҈eikͦbM0swyF3]h{wl&Y#hT=_"5!S+x7O⮛/Jgb>{]G{d}Zǧ6Oр3W%sW00ȴM]y$lpp6.ō*8-#ViP!z|Myt<!IEx6˫cTrg̩pNm$NIpeU*jLXZDQdv{f8˞IYS ?L>H"IjwmDF!"PZ :uI^|=,S 0g?KbsYv~:aNWƀgQ!P؞q俣 }h=s 5[K6w8'U^"X(=U%{V  _Яd \B#^B>B9SOAa>PI joN Ǐ9J.C Rmc3Hz&f1^Ǫb|@;u-Y2C$%Q:ȷm]5c|p-yuPLrd03A4N ~7/Ϯe[fk[r lk,7zJ*ʅ;Vs=m8xO7gןڲT0>]o*VX薞փ=Pk|)pnO Ռ~j-е4` \ztfe3S<9tw(꾻.) y5q'l]Jxalc@lɴ7`rg~LĊhwuL{8!9['B8zu5 b3+3jC .z!4ܕ[v@QM/[0*YV[4N%C͚NY㵰[-"~>fΩ` 5bo] 2+`ekDg`t g=٨[fUWi$KI#XԤ% Oh bJ27Rj~g0Lq^9fF*V'\#En./坁zrE]4ƋWcd[\8G lSܴ5i ,meĩ5 ~<seO!5cEKE29 ؜_v6) B'Q5R 4)? 0! uwWn_0? A9ș M!>dEf `tt/ Rx&t;龜uV(3x?C1oH; 'se5 -_SNF#JffZ6d|_07Z; }r<\JB{~Q~h5ֹ(Yzn/X~9c]֮U$WePՓOEf>WFffx7c~:).L {An/פc26zh,ͣ⽓/=*<L8Iͱhis͞4zzۊR1 2m RrfJ~W5c6#0q!QEgǣPn3\'Ќ'ftU.{*h:|z!VOfayӂF:s lzEHzv7O'<QܐB,{`T*>(B4|$*~Xy `Ȥ??e:"dRUh0|Hn#$HXLBߪQ&G"2 I\YR\Фk%U!L*:†jtG}rgHiԋ,DY*2ʟ4;ڄ(yxiui;x,6siKui6<sWiZW K.ȩ~FNEhUqw#æH6@`݋Vt @w$J;L+zzF4o'*${Y#A2t{?Ǡڃ6=Zl(,VܫonK+sԬGؕ& t&4WXn h+z~W Q E",XvjٗT!;fMnC"hR]!g@P0qY҈`G<::t?Ab it-lZ5kc!Z 7|1~XqY>ra kS)grl$NsJl?" K)|?%ЀT!\' X D{Zv\C Ϩ#ż]1X)Iw!(qƱ`EY MP]鲠1m<=e= 5d]M?D;LE[+tꔫ3 "R&ws$xUD;Y fMT&<(9OY9 |0 ԪyS&=\>F.;'T\դ +Qh>j8&1ۃ 2=$醵15(+dXg4>[wѰqn`\ߚ@3E%vInɡBi}4uIbɧh{Fi˛箖c;,#נ$E5IwɠYJ 1C>dtju 3x hm=A >E ˘ݐ /#*ʚƔX-Q~YtiH䙔r69ʄU=LJ2*|Ow8Qy R'*?ZV:s?$~^0tJdq?1o`Fm=[iM4Oa:DS>oʭZMkH$f]W6IK`ez6ֺ?0w~0X;I7ȄZ7Crom%Im0vRuƏhy+:[F:,MM({Ywj-*)& ztג_i"ѶHWF~ƺM8%ze _ƒKNHiWLƗͰCeMβ+ s"SN"u[OhgZo|?Ժ.SAKI'Z|s8w5N4d_މ6~q/sc׹5Csp'%rUakWRͫ^4JenAӊcrvR+}MdC;7fMfA@>r=x]P-u~^JAxl?TroBqԯuO;iɟTQcbX-߀7͹#Y8 %n!2n ?stY44S!zIf%7/ )C(jerkdn`~:p :f %CXOc` ܷyPis@!AR4.zKH"i_W6Qz~h/,TK4?SB_p|)%*])Lc Ԅr`KcZyR%*/ۧ5(._)u\N78Ӿq2{PWcƒgtSvI~QOn5 YUKgV}U}I&!ܓ_5@_؊gňɧ<`%{y瀵9-2._.]7frBͨ^eL .[NUXU[+CucQHToO@.m5(D-#^q#Z BQJsΕm0{"CD$?6I~cE=wF [zR7rA5uT(Fce4.*_DPJf}Inڊ- u %q6cZ4jj9U$+)q'uIRKt2kaWьe#ƄTKMwԼD:z4k'ĽYdG"*OBB|_W+(x H~Gt<͏r^;PţD銱N}@/E 4A9H<{g  .֤G'> KP9ߣ ǏU%&m.̞p.\85=B~+pm~z}xNcO[,SaR=rb pB:%%Fvڤ=цncBg+g hGFoZ{ں0 MMR\,*xxd?`Sr(o:[f~$_6[~I5#4zo_׉ɇKXMw%u3Wbet暞Ƹ/H", gUdhBe鏝nlVc!4jrߦ_x1L%Bq7F)Qۤ?\C *2^"}-|3B^Biu0S-^LqRI KC_I>r%ѓc81_#{9,C#p c5XNnC7XB({PˋJUl[W'KIP6SGR <>A N;z /PL 6-r༡ՀoAR )}p4@4k4` yd5\0؟`qmJ&e,m݋]w!UH[B=gRCō]:3I9ʰ8bɧ)U tGTp@jbd##&9Pkrqg na.C `W6d8):uIq]k5q5G$t3Q#7^ANdݱL %X=Y|E<ugi"iC# CTjUѮ4ƉW[B0Ǝ0"ho!2+OX0z{1ûa/IZr̂h>iqmx/3YXR5Q `DV3ni\ •j?cB:vl莁+}^Pr!k=;J{`nÜŀѢn s ߲ :~H&~o(DqDјЪ i%'&:>ھ}7<A,4Iac *;mo3X~vB&F]Ֆ&9(-E$pkNN^# 9-?R R"Q J(ZTT ȁ iK ˥O`~7~L˦ro6{(EGȾtW^j<Y^[Vq )xp(`i^`dQDV6f懰|[eU<dqnNeMYJ"9Pms>3v)xO75ZeD IQ]veG&Q|E&<E~ڿ3ʳZV@A QyQ+R j"r6rmt&pkH注$#]\9*,WwVAqb "hX3a0OJ } .t=KRPOH@<섐oER ]H ɤ͌H:ȵi#oJa0SAߓѻ3jq!3!;TԕwΗ{H_"Kc21w 7)hSy9]Hq НW !ҟF$#M7ݓO'0"MKKu$0z[\jxJ)EłQѬl ~X=Du7ЈA\x6#$SԹ/_HN,[&7q=ګ䄒Q7Qrzq+qK5.琼rYTA@NS4 _amKyw³ =G8xڲ6`Gꈴ̒ɹ"‘x֎Qu@t6LrV Z$ gYT9£7 ŧvRF7d߆mš \inR9@=DHbBPr䓫%} +0xj_ش8erkyrFwh/5Y#QQ1H3#K6T$~ƨf oiعv,v[ F;gx[ Kua!8[Z5ʶ%`fl>ZY u2\nCWqcO{n< ҟ@o& _;}5{-7M. .ߔ, S}Ch.1[8`P.횎[֫O#MǛԎ"yIJ&e'҃U]X(!$ .޿'UE -x|)cH#;n.G'|l bt?-% !/\@p tsPIͤY:z:Em2NQOeJHP݀ڍ@VT)+48B.BgZ1 <3ޏVs*~:z?ArY9i,;\*'$ G|Hᛠؓd؛PKn:f)7XF1q1!)=ΗA[ yKd,8m\q}˙MS|>07⏃S \PU?^B @1DwukP4̜6?N&&VV>+h<ͻNBbՒb 4P^B# [z`ør/zct$x`hskk 8jv)1tX5dHgFy}3N]up4T^/M= t&OeG.)&IS$9"K/g-0j嗊~e %n7 QL ^g$K3Fs:yFS™`@62ĺۜjQYBG:TTkW |9ԃYdjc,YLCh3 #@J 18ܗ`%"~G q3p#5B3l`S q㸘sΰO(Iە!hÏ Cvˍ'kך=QPUe9HCD]F#.K tK{%kQ- 7PW&0FWP1)\FkU!1d |uѾ_&@eEREgP11-H(lV#HNnݳcB R͵γc7(UG|x@Ch_9J Kvy.7C@rGKnt~C@<Ȇf齺p<k<ˊgo<}r͹+`R&,Xc.p5Fɇ,}vk"3:͘%ڱ V .|6t {BǯU$@. ^MmᓼFQq TmErIXт%0ej[gP(OEEt+ Pc3$rԓί^K%nd6֚-5n0:=/et}J֗5 r' UY:hc]|X$CĄkt (EO= u :=`G S<Xtfcl'nD n؊|&yF *2V t X89"$tFdPvh{4YоIQ$\*M;&x#ً/0K.ρQ*`oU f~ZD +qiU?/lh%TQ/@x `dQXNmQw{{5`Cj|[Bc izTa|rg)A@DsHӊW_@f䈸1~ե. qyS'뭆##j1hG8Yuz612Ck|cʽ B^X4tI`GBrQny`e<3p犞,hL}13<=ajN))-*3HYѾL (M_iI1wDƳA'z[q"A]SoǕw^O{W,W>prR),F/f,fRJ\6~\Ps+{U߮Ҹ 1KGLzfF;-my'HVKm nĀf06pJ-(ד3wʼnPbBzSpj u0@ U_C L6S2'-5ٍ}*֟} F~RchTX_!zcu:!;I艚06$˥= ў A'\lЎN0mld } _Le,h|{ !pHYox' Lj/DE~ZP`N+03fHʮh@b3'idi[s4zj˟?xQLt Lt2~`;ax+4h6EH:u]2ˢuυg=s5/frs<gZc ;_P/_x`>xVC2K)@Z|2x w*}MzxAUV98L``bVGgPosTf#%δ {]W=ܔRnMӤ:iO['YXHT&,+}٪fcȹ>S3_6̥WcʵcU @<G*[>Y1󔔈M0S"ظ`r7vqDN_cC)ٿ,&dNcImTT&Xd6 D>DU.C{ʦ 6 =kϱns b# iN"312'ް4;E\X\{'> rj~(  hfҎ]AdVrbP6Ydsd*zTr]lÑnLN˼DT T$t\0L (}˯ T6jt͸qN5Žeg*Q[p0 "d.TI|G,~iT{cRICVL-2J_Lb/5wlqdrtw)Zԭ*¢3Q%7'8@y}X,(# ߤG/UzD b<lfiϤ@sV>*in`i8*x@CեXJbAj2ti*Wa7|he #LEy1i9`-;Ěy ֺrWi+r j Hz7/':4e,0r~/h>V෨g+Uצ:Zm]߱<7ұ^)aj_NQa_喍_\Bf~fMGS}1C4"ĘBk9r NDl~[xPy0]l}EfLe|HwT 0Urn_Ae\L< 8M"F& F{  x[ANF,Y$Y3|)Ř`jp$#FGvգv4JFh{/掺ܟK]/$*:Wa|dG5q".ǃD@8]XIƂ0ǟ[&.~ؚQT09` {>>nj}dJˀAJg2C"<}'EkŋfgT{14 Ƙ;3ʀjZ3_E yyAʼL1M1hQ vwS!Y~egzGW2&+*0ljU}_홻UIVUS_"dfk:d5`%-h2v.;uw(Qő.2rBO Go=Ո =&O_Vg&>} }2ց5o %oX7{hސbSThܥ}_K U jU'E*w^6A.OhP_j HHyFh&hޯD:}.K##W;9T8;Y^qWWST2jNG]-O2w:sһPdm){JЙӲ'~0`..Nn+z<:I_@љV! R[7ԯ 3JGL +oEh\Hl< T wG"ICj8u.vļ;of)SPx{UǬScpgYYiuiőxa =+Б6҂N7#5AlF˳zcfI3;dk86մ , +dnq87msX/$T1z˻u403Ff{Ӓ`kUAҐApUC[( : Xgxx`+Zd4nL} "bi.b_s$ :F(tPW:꽲ci |6Ϥi/ǔ#pXbn_X `j|FLo)7mD63݃u8zYK~.;ZC0%[Jtէ1a~-ba?Ve,zxy;B˛^0l"Gf Uؔ WXG(Nz94l0b ߼a uJ{RWEWJ=V6M;#%';ȹg'W٨ %3v*j> ?n=6sWP: u5F/t)DnAx蕊aΪF̌;D)cRP~+(I~76N~5p^N>] +39ȂRW~+\uuf!Al|ܳrQJJ R2 u6؈pө F #Bw A5Jaf?MNr:傋`-6L9b6PEh,C!V0^B Ek]T6iWV^\?>uhQŬ-3&PYb'AA]98\Y/|vkCa^h<06Gb#EQY|iI.c̳Q\BۓPU x6QtX C F;"<ź91[,+sF@2^`{Bm~Q51 Lp$ڕvgLPA5HkTWG](&>$eEC?6X5[آmM4ೳ\ߋV:c*.¶(qs`Hͧ&o+Y:< ߽|/>-. ?31E+g=ꔘLrջ A^3~fF@1<(Krꠢd~-<JM'3Ә jd4;""υO֏-A[5HNʦ0AB]-]v 65DC~f_6$^qIowM7LQ7whI9%N7^ / HTW)nߘ޺oOvP̴˜.#N?ZUIMR)]:f evg[G>7$s5S$x$@+(#tcCʦfϑ c/_sBb}IQO9;a̕yNrA->&udr( y>ܓ *=Sr _U©}[o9'3}"[Gv]\-D6]K!օċ>}ZGAo{1hP\8~ ,H!7Bkԟ y2 yvO_lJ݂ ՌR/ ^]&.6_(S@vCdTG7 BY;!dv>sU1J4ciԶZoaX~C*v ZwS0*T$P'qVW<G}S^N FljB&.B: ܦ]@D~(|&Z}5/;[MF IgpPew!8يȺ6Į_+')|teRk,pg4> v%hak U3^OEOeG`RljWʙ,g+cm9TpAc6!'LJW a<(?S(4a Ol^@<`E4ˊÎFwso4#v[3G5Ux}uulꯤeA2:GdA6;oVUőkuˑ޾|GDvUZ*8/ Ns#jg˪Tn*RO8`ev)=sтaZ}~FƋBlt 3V|z_,,k hL#n "e2D*'V88f+yPMiU6M7 Nk?YYי&-Av^+O\ڕՋ{#1 RߒuZm++Wy J˩VÄs?>Q-fJ\y&=Eőo&ފ +fGM̤`''FQ\C#iV: M"gDFdd~Q :z|L+/WBa]fkz8mN嵞XuH:狴1ƃ!`E  7~[8rwf0K-)o#nӵwz!BL'Ny>B% iEWpyr׋I&oe(Eת#bz]AJh pd|)>E*͏c ~UcZ o<6+X{5'@ta Gf ~|]F#;:6-W:6/Is?<:u\w5‡QWqhCAFaJgTV_^RFZ}J|f0PM@_ 2+)V[6 D{ju{C;j 3w#쓎xg {T&î:&_wȳ.aכPt$9z!)cad1쾳ϭLV=b\bJߐ$ fmiy?}SE|3&uppN'?i ߛŭkh#|67]c)k#ר0=ԞG`K.wE"J1lxZ7Uy4b ɬ:Z܂Wc q[I<0y?){2^GV%t 4oo) _KvߓD:Xk`@Ј5Sq&CHKylLV{Mߍ&Y1*]f`-r&R~5UTt:.mCGil'4dh Hj&{GN*~P[t#> A[!0Zt5؈>j0g 46MZx6_QӐ]2L_Դ]Y04Ѕ\ yj[ik[jFs PH5G5r2\Bm4$#MrmgnKTDgvL@^C6+Pу4 f>KTAN=;ZT=iä.ۛZoUG%윘!u+=w.5^e;]"q,>fv Z6/#1Gq?ӘV58-YC&{jO(pDJ))[D-7+CS[Z^] '{nK~ܔ -76kĨeHesobAGG:ȵd>IT\YP8/~Cۿo<%>:оYs#۳($h?!DVLBL@_jt$T3<:u195+T4Y9&EEJV~vبdn4 vVC=-^DG Wv#T1WCr96Ir+)we|߆'lb!a.~%d;#B"1%Riߨ 6V=t'8R }/nԌצք9銞A_$ٍZ2|6N R `'ڡ{4-W  YlAhMfjq"gɝNyUmn" o"FܿT$Zd7jz7Ezy ')D!:l`Kh6SxO`SL7?uWifoo3. Yx]IĠd; BSp=.[R?z3-޺X"wY9FIRÚ^{v )06zdG;$a-Ty#$({2`= !N(FS;^n)ɠZ`/ˀ=?}7"ǿ$"Lu'"M Zl| T }YpuK5Q#ͼI ٱX4𷒮omZj g Uw7.Ex_0\F|Dz$BoD 7!+}\Cg&|d4,4kRL6dQ-cq"q}$̕ƺ`IR]E 璥P P94@jNJZ/X1ZhP+ʆ-NƁrAsx?_#C=dLrh&(ZlD8=tϵR+I\<vQng`1 ~'*mQ=5hakv" D8u[~|nFnbAȂ$N 0]faɂ?Q&zðՌCy{Ov -O)d5hz)QEMpDQkAsFtm0=(Qk;T: {JY쁸\EkڷFx!=R~_ޑtR#і+XWSC_T4R~h if+Sԣ\6AGk0Z<ucnr>9&R= 2؂t7o H=ySf f%(8P~K%?iW~!@ׯ}B]W=~]Dqu G*¯6i@_lB~!W6s?%?o֣V J+zVmǹaׅ=9B>GTdzLpUv䑛u͞.]b|ש9Q2 *U}tYgV!*ig&̦,6LO{(6?OI;aAti#{;og[^uaO.94$ L7Pԛ4":*T!i+lu"۟M+Y*JJOtv1G)]z[9|]wtyo%*o6ȧ;yõ݂hV(@-E4]( o⦙P^_O13%5|#0`C?|~!È]ђ\ߧKܡCc:X>1 Yɹe4Ǒq֋OjYKj ̽*4ś{' s78 zv$AN  6h0xS<,. ֓9u0aҭ5Uziy[U Ѩd";|v#R8m?'%!,/[w -$Q#r$ ˦2K7#j陸gj ict@`u84X7'~ykǙjv7+MFd!,h<eD*q<-7{P7w l`e"5oQ+ 82Qx7~5悗 ` [װf5AfΑdPzso˃.V/$'ugĥ#jY6.>c?rإl'u!/N OQrXKiѺ0wol3Q,G?i|} .6ʊЇ_*msPHQFG'7'ԿPhw`brGr9o FՉl")B>[qe@3=:N0ǯ`k2j+{ 6/$4 =U M vw1a (ޙL6ɡ_%Ik1uAO78Xߕ],wg.qVP8D`*l.̣e[Mn4E0_9X-sbm/Y'jʊ5m*٣=&?p%0[ˍ}igSRxƓ/X_1f{Y-unm3s|;`JK4 FUzKKu}4 FRDQ̲FAhH%j|-Գ|nAO4oC\9$dI;UIING"o zhWR&xdoG:-N%c)r60/l-@kf7wPnpf›mDNo'dIxC/18>byB(V#ȷJ0:}w"(V<|zڔ~l27hPeu(J4A|bJM-g=\BHo\FuqX:(U^o,Ȍ҆0Z$냴$ï!t3gfg06Ҩ.-VŮ1E{>gZR&pTW 2)p^XQkK?иo̍ڡt])fN&:La 69YRHV>?DI]"S|!cL\=JӉ|x_)1GL~`#Rc78Պ6W4MuEp8$%Vn-JtH-V>`8/<v*Qj`{kz馃dH,{P)H{ _0cRcw\ /%m7^4P.!KQٞ>9䳲2aDB )Grj{' E6d\Ľ"f\O.$@DktDcR%["h%aǧTO3'GCi8j% v*ڼH3m_]irңP-4nMi5 ;?7lj$;n'~D3Φ|Pc_mJ Umz׬O@ABq}~Ǎ=kzF&K+C+0 XYut"}+6\xzmMz ߈!*oΌ#pg`qk }Gω3I}5XCv@B0'l`y= = Gl"Yسs\k#A]xˈeT?Oɦ 6]~oTwEBFA@'4G92+f<5"8]J饷, FuɑDMťiєMKSLi^ %GJ5cWjcFtxRS8v~E1ğT3jq%o!  >ژ q_ʫaf%~ѯ'0t#Wl Gx瘎_EqY:<z_`KQ=Q=!{9ɴ@Пaٔ~jjoSWLЋPͧ2[WT2ɬyⰬԠy+:t0)1R*UeL[|ޅaЇXV]8F!Q\s:5\a6S+t?K3vģ~ *btVLm>i&=UM3-YbrR!Rb1_OlwBUL$?&U b@gyC~a~_D@[8<.%~!"I9Uz*k(ےSe;kR|:WD~JMC(ʬu#M>AhjFĨ{K?I<۵倠='Wsƅy%WZ& 4Z|yݟ)\xBZ;,|;{n)T)WweS"yj#niVlIGG+yU] qK=zO+D{O\MPF)2H=HAl\S^k![ǪLT$$Z{oEM,w+aW^l {2<^A[ R\)War1}.]`1>z;t\^띎1enq-Y:_MB^:g{N ~+}2tꤡ/l{Sf5rz !QvGbB{玮Q%HM΁,V/S 1w L^=隝"ͮȸQa5ŸD4c>Acᔹ+PEjrbvJM0QkLjMjFU, 5~ ^&o$fz3]*Ϡٴ<4Etȣ7 jltUǭ7V Cg̺3ï|F(7}i(,}"`X>~oGiï)+4G2F}(FvŌF_ph\M8l5N.5 ÊOV*#o}:0VX% w?W IɏSPTskUD}W؝wzP-~Sqm4W^OQW&|\f_m U IHf:>Xǭb{]p{=1QW03gmL5K|13gbI~imm?U':vPןgoЙLu ?v"Rt"&/nq-yG=*i$5Fx8)u7-Ȱ>+?u>䝂]*: ' Mh3A7.Ao S ]ԍ]*rU dVh }NOiTK(H"3, qS:Xy"_ZZA}]L)Eu+D ..p"u')Z8e Cks^` Xr5ET*\)y,3;ԩW}S]X=u [}V0 un ƤqzpH|^y.%8A0?1W8jWE:aVegۆ#!#Hh86ŸoP11ޞ3꣼GbuNE1E').žεL)fp tf7$}YRfj"K5dŽ3‘x;YKXӁ#^HLBb9\~{"N VI~0{6faNش ̖;`gMߟ\]";Pр=GU 0//)evϑkVonvѦۊzEQOыx*s__1ըI]XnΙ?l*84p^ѤVΰwD=?Den=ktZU[DG::oϛukYa2HE+Zy:zOlx~Jbb CM_8B7N/mF?ށKxz5v:&?!6/S XY(Y.J0dvpvX߷eQOJuri0eʥ~ڪ6&vfBrP;ǣ:+ԚsvϨII r7-KƇtt\c4˰/L:}?j$R8&Ju28B.3!fpQp@ uɺ/uy ۮ5{_KE +ufuj+ ^>R`k (W'DVMnN>pbvp!5jT ŠEPզ*Qv\LEBOEB9_ B έAu_|eĞ+ˣLMfuXS^3Jž@e_P(Wf9T>?ETJ?>r AQn|rE hCA%<؉<ҮHS`#CB\}̰X>έ Aؕ< %1eSeJ_XxZ d">7tQN=EbCN8Ì@iPUnd}V3 QRPdCU֨sħ /}\M VP5Hlű# :;pۗ =]E76QQ+JI/ah/=J| ɘg\lGԶj9 ݍCv@drIm bT,>m˱!ElT,D?ᴠq]c|ېpRE]gvֿ~2zدT[x4kǛ lgLt*pYG.}}q ٠$hs98ߠ$e~(E1 9B c$f|rtfĹmeQHG@@DQ GK@#q~ovR%eq!cof~i#I9eZߐ}Ӑi<%}oa~-N%\m{TG"g[m$TҌU*YxG$ 7U.i_ʬf!#!^'ΓtN\ KvFĝ <Z:p}[*`\\7ΫOhs3$Vz+E@T8<:t$ [95Z6?"8Zi ؐ>$xw/)C a'_*\&ᬲ{ ^lX ?"uR^^eMM92+DEBD~-!a g{Q &R&rݯ;Fݳh!;3YRaQIjʵ Qn?N;3Yko :B5nRHˇw}O;mٚ(e84vA_t+>P5{9'.]'RN x)W;Ij3+aK,]t''Hi8 4j;Ą sX~1> ப47cKY'#d$jv7w;Zڤ|*t QTTrk@Tv+0J ̂K9vŨd5> Ǟk~+=cF|k;2g|QeEڅ$_ߐ/eJ鞜pcdv.X7C¢8=PBۄug[*x309R{)v0N,I xvV*%>߄[ NY5 $<<5h6dS4j^e@ 57<#㢁K %k}3\qEl >iTD/=b-jB?@R(ܹL;B7#u 6"U\攒 IrAoLt @(|(vZOGj$͖FK ._I##b3SAv2d+cM&u`6>{;Nc{88Mw}>9w&EY0ΩLl!/9Lu60fV_*!\ڑQƒ7NrylWSl8MrA wR?nm#:J;Ӻ|~&kO#g\1\d~+L' ;E+w8fn_ ?qG&ף%`<7Zf<Dpr WuvZz@r: hJB̕O)~4T53&i,.ϕ@TZonay;gT5Rya |0G&Oe'QufwY!zY4U?rO@3͍A$pvlݷO` Xƣ1Fb^~.yl^s5dw[BoaEJsRE59}zHz.bJC1ΑVq-+iF) 1>+R6cvO] !8k,JS>=jAjt9ryaa{)씜+ިf`aLkB!OGDzYC*U:)gWg&mgTfR`S8w% LNR\2Eb6nB20@`GGhݴ@/:\Ycf{YwEKWCRhQ犍`*gw)["*4> @xf6xP#= ێ1c=ǾW> s`ܚi;d6RQʧeԈ_ÄK|3ovhms'؞- Ӱ  n ]i)ql-j˛(J?1 ѩ嗳2:Wta}4..r;KSk{kW.lZ::4kvF?YJN->j) |$F✗0J@bX,ԜAJ&~Kԍ C=h+b.Gpv&˵Q qd]*tJl4F}z:6'G̬;MV*Pմ[y^S/?S+- 9`Mf [Dt̟Ohc/$E<"͡l.y"΂,WAL\FƄ}(:xm,d&`\ܽVzOW,g/յPٮnY?pCON;~ì0 ,2I<~(IK o\HO#'K9FAs2ư=,q䣡;'Ńȝ3KC-PN x&Z.Lr5pa'm[;"M%볲zal?핔~$!%}ml3]RQ$$_nʏ$ZF!P~~TjtE}=IkyGfo|`7 tK;}GwWeY,?ihZm3ݙќ4\v@!r! E9Qۓ ːpqv\RJ(&:ZeL[tA&F6d3{R]gE'وfUTxT9we`C^nw:.2_$ca$=_ ߮p89BlZ ٯԛ"N|5,mwćn96Ώk6J7CsT2yEgUo'jvB g,78\ım[tk,k-V0hi(v}?1"9+ UWU#e?uT |PxFTo\\V4pIٶ@V%A戶%@itogX&N)dDA IfrXk X.OT2&?$LapUwrop;E\'lFzvuC_`z7QfQ8-Ë, 4{ "FiS[oX85QR܏7Zr+ w10k=v_5#2 8[V.ӭЎm`~ زI,Vq HYEvV(s9dg.e;^K=#֟Bwrhԁ-hzڊrF/Basc~ʄA4CXzD8Gf6_WdܠLYVQ<:%.ݮY'qȰQnjlxsbWVd9" h3I|۵zd9뭽$ Tgr2/ѬRs5)$\oЀp~'\SO|ԌB1̾N Ǣ!',uI6a+dεȿCg4* 92zg%g*qK x +ܟDȘ P빯w};>wK;ydypϡc87{nUlL~uW'W=_4 |ĊgFvF2Bρ+*ps獨@;ȶbƳ>OFCdjNh[5b "z!_7 sF ,/ᚈ"9CRK=>;&L*dNιHYw"ǟT{ iHj2_e|}FSX,;c&ʞ=#;ΤB}j.䲗=mB6 >h&Z )k&bm74o <c%PCѧZvv ?Ԥ#STnvJE!++X756ĢYNg*J|l{Zt?tBV'XJroÑ^-vֲ!˅6`؉/j[k:f<'-=[v39%T<CÇ[axnO4ͶE PL kXQ\,8ڟUzoPNLlzK GVFVt%*ʻ55GyDۄ=$YMĘzk$ϐ2M)äLM}e2!e{bqoi<,(s0(ӛeh#7+b"^Aa-w>m+V&3XY %j4 (ʳjqSkCn)c~+jf[j/XIY_ZǗ< >>@/aP絡'p. K7Wv-ŵ\;#jaf_u( I@Ⱥ1gSWT ӵ ]ybTK{lc4]bL@n+B)cxA"zCG yz0m-5 SYܧDmwK|/~%p\8Zx<:s/$ >)19 _e]Bߕ{%}*g0 ɩ[n~BCdMYzPxa)`irI*U"vϕ(/уrݑ7K_;m;cZYtyKJXZZ_4ɿl? ;^9cɖͳXm5h-s.r)UPĢ/MO@ɟ;uYQesWp2g #$0Di73˼jVUD:a53"c&] Ru(]r(2: 5Z^X- Q ͠[Ԅ3:PyVNb;v6~"-O~K7xQ JȂ;M΁O+3%{+a`5b?iIgQU!ޒ##5̥֋ݖqBPuXgp xJPf-g9._}EƦUooo̿hd'(\J-=6 ! *}ԜӌߕnIՁܰzbDEawh.Ja>SmrwMXS5_;;t~ i)k8#Z!;2f\;P-ky^P~ !Pd}2L@*cu7um҂`vD3ף9/,BI,ቶIꆎغMze3Tͪ葤uE_vrw(]ýpu8,jY3|9{V1!FJ \Do xɢ2ɤhyu_']viuE{G'Q)X4N@0^,be&vbsy3Oc7dDXwFAkE'a 8.`s䯱2a`W!\n}0P3\/˼C9b _=܄W)Ȓ \Y)L\D;WJ4B%BW^G=f"<["WVW鶊=\=M .41V.:A*[lq9$2TE9VUuK (9fkܠ?ēC=H+8@yI*ж"NOGykx}uS@Ncmo8({m>?񪜼,ޯw:̔Vb'̳ͮ,!?gs ]{3R;9 hDRY$gY͌8"nӥq %':b!sgЁۻ8q"6Ocsi!X йGʛmdT&Ȩt%TJ{LW.ՇOe,XcK\RZ -A$gj&X(PW+'y-9فuǓ_h3EGay݀\]ͣ!mkơ;QV3Rז>XۄOE븨CUW57D#p'e{m'VGYjlgq0mCd!i;J̐΋6%X_1/d5lp0ߢ̓-uOs5Jqú5N;)ˬ-ADvjP*ie'$̒\L͠^mKcHlvET!(rZ1!08K>(NgQ`hd7Yy50y*1`0G[#ED[!&Az٢UѥZF8/P2nԹF߈ho"4bJiK֒N}^((ҫ'%>KF\b-FF8vg ->7~>EJ-tCr^2CU dW)*N0.˒p|wq ?fp0 ⯎X0T_Vt?晿O0Z` EU[_TRms{~LN0eЛzݏDdtohZyhMt@gFd.M v^*"Zlp޴^ E*f:^<ޅ&Bqk%QL_J"0(!eЉv?}Nr鑴Ԋ](n-2RՀQ#|Cg7J ;ʆtk)sӊy#} kЯHzLb"JUrȾֵKVj}aNYrޣ:;C`gw \Msr y^|ɕ?VY/zBlPruL0Hѯ92Rz{==O'@`"kq!볂2HO'J{33]̍p)綞Sϣh~HՖ>z$4 KtVXG@|eE zЎ{Xq4eg"RbZHd8nOϪVQ/`;a64M)>QJJGNTHzkā7J23r aQ-ó%3)B:`\3ZMպS)vR^o'=IZy%G_jZ (LŽ¿\K9;F7.dMxqwi~|(~fѺZ&a d|6L1FNUƾ58|9| U~#t Kb0AݲB3` ͶSȎ/6/k[֪ZYyê&w"TC[3=(7Miw\Fi0Ţ&RR.1jrQڏeVݬ*MU(=Y 틙J~OF(Tzu>f&!I[6#U$h uM',L[?%L8"*h➏8bTP>`C#z0M j6r- B0!Ĭo~w,x[T]FP OS5Ã}keGÈ%6sP2/ͬ>Vu=.s\ߥj첉y _բ\j bpnR>؟%TI]Ub7]Mv*o^798{~ZƂ~AoqruӵnJ-!$SW?}Dcc)^Ϯ֍A탸{e\Z̀3;Gx,ޡZ Aɑ\S grhexSjAisjNx&y BxQ CSLN}3lQc1D0Ii0J8ҟ5լK4uNWJ2 r]x`~.gJ `Hd 0:MQrjÿDzV"r+= W'؏T^Ɔ0ڑnHZQQ kx^|@[wq1"竧rճHR7{v\ET T[^GMPYғ/RtD8aIBg'?}rJuW(,L)830-ؒ龁߭LB*湎%["Lo[J134SQOB-zdmĻ 0A1qW/CKg]UF:YŊ–<=``̩N,.9[[C˘z8c)P)y'ݴ|J@xBFYsnb ѷ6i Ax9@'A-߹;R8۪_P*q&f;Lу*Z!V!1U~.'`°B}Q# nK.}:.'leH~ܭ[l%R  cTHxh`6"cmΤ!a{GT,S0']ouHFJi)u/iKWTjKd5ƀLФQ;;&n??2{3 E+mM504<"t!L kBbP{?k\#nZwLL}]lTi$EQM2\:~<&ҳۆ;eցe;B*LG'Q NCݐ{|`/aҌlũ"(cC0-TE2͈O:k|՞B/ek<ndݘ.Cye\ }­x&OZo}m:gv2(Z`!~| O+&ǾjZiv 8oFUcT>NJg4TGr྿Gj!74^SE8ɾھ&@aoD9LA>aaЙӱ;S9(Sn5PGyh(fۻQonFX\b|f&i; L#fIF'?`R -SPAArz{܁~_{+_ gpyGЙKI|M_` ~^kCױP^! )GƘ:V#L%4U3އLe=?M;v`'SU')'r`:fs7rXÅXB1j=}ԎF 4g-wpuk%ۺ'imK,剟_{Ȋ{m~f ofWlL=f89hz4,: @HŠp㘯]|dPM*+)R_ +DqD`A ;g9:MGb~Z@SWF6SJyiʕ1aI% FXhj:BafB;`X<(FVCb0 m(SB]pSwI `kWȎ U|goL&{V#>aǖ#`v"ܱ45]ZU1֯ .O%.yG!ǛxG'ocѰOXL6ր=pPG&8"0)K& ǽV-R%!A)$R ѧIS,^P#3a0}risfIg c^O-U˳ڭP4iy쐭%cO"AOHAxB Ggn6$ΡPV,aI3䅧O{itxZ[caRoTMbbt謠.Mzށ}T=7mF?r"XG ,tG|}n~֞6F{<')E"LGxO6"&tطLĉ1 6l|tii ODQոȮ >vJ6]J;z% pf/Hv%~~lz\7i{6ӛ61LO!sΞɓm bߤ%~7t1+⏵xNJ~VЬ 13' _5 0!Fܣ5N_:x!"spu~K5ޓI ̥^Z MB49~]tn0ŋ1koPLV2iFTW#DXJ.4ى*Xy*-xɯݶ-$e JaIP9 p~6i$\йbJLg4lyh> qPXM6ir`!‡[նgD `ehv?16gr/==2m=znz"KԘ.Yt1 Hc2!D3TBGOHςRr15T* VFʩD HX,F%bOCH%{ѝ .h%Q'wE,rk 2WfDP9 &.FКVdq|)x oyŒ80x8y!KȐ|v Q\AS}BQ?CdeoTՂqu?Rtm ;ejfŪeYd0pt dXu3۱De*~;AwvM*k÷ƞegSo%HL &qeQ>o-:v,s׫PcY Ʌ\s?؏XN*b%$:V^kJ`luߌW&M_ɕDEu-87QX~ a!iz+VpREfiJr0~{r?D=sGdOBSO7c/W"ɌO_\y#g۔iAFus*x2Ц\E<@gZ^(zVh_^_Lmsg1rTgD icɉ}AXm]1+%1>|a=\r: àoZM@F{l DQ;8o"|ɍGmsG$DG 53edxzAktə[ĕb'eaO-r˕̭7QmDt Wiz#QFgr|in@ە@̮M:ոܳh,jW903QmZ$Fc3We*.7=qPJ ?MIo0> oȗ~Tb/dn^û{;']d78{h6l(ZÕh^j7}@^#YߧߴKzsriv=@+?HiW;pŻ>RS`Ɋʍ'=[i)rE] H1D[*R9Ts#c#k"w~B uN=S\[55v> aG[ +T=M+4+0_!!mfKΨK`$76`C|7l3Qp[W:+8ߴ.#h̼|=46;cGe5S"o**=ԙ6<|RZXxO~SCLYL YČ] z4Ѵ[bk~*?O*`7ёKաETfv JlFq-ge+p_zCVIs=Kk'~p+lbTu֓:sE=p%S{;D"/Jqm[bWʃ |gX7y ;ҶMA1p'+5eu'r!7|Ì(Lb/_n3~*Q#{ڶQ>K&輠3&tN~(.;]` ?ed<{'nSϣ# ؁\VSQ1kt8* FZ !)Q_l ~[$bThqlZ*sXjy6lj-qU;;KZ5zթw"s%@4Up)~D3.*c8C`)6@aGrT c kt[>)eWn*& 6( łݍPJH)A[w"rӶhVF bd@ ϬI,#Y6id1"90St3kwJP/A ^_l7$t d ! :2x`.*rߦ ]Ǩ3 9c%Q44J!jzyYdCҳB)R ~;ß@Gӫ)^Ge bژO^Neix=V[=PQ1x6s i,ƀ$LT-U]ml{_i;܁(g/xK*ҵdH4Lf_Bs YȃYi izPbKH%5A`igBI.$u @u&Mc[҈t\̱ n!GY oܟڤ Dp&EÂsv)5 mv̒;jgTO>u&lیK!`H'@,gJi3ԿƢY@.fĺL+3ֲgI0@mo 4um,|ÃKزgQ1 Tޓ ֗hܦq r<ۓhFZFʦ 09\"ߒzEUbkJ#|rU*FM7<E<Ӈak?6ж&u^ m&OW!{E;[ԤNOXZ51tdϐB3)._+ Zym9$b{]E C$ߌ}->cM#`hYPx2oj Bh ̨ ($anBÊ#+ܦ|^|ɛQQls~yi00e?|=QƄ 7C$7?@ *M^R^>#Y:Xk=/J(߰0C@ ي&S?+a$m/+%+Wm:#K ,7u5̧ $d2Ԅ۱փDeFU[`H!>0UZFJZv3D,iZijoqUleO:z52d\92j;r d6U1{}Y 06Ȓip}8ҭZE=!;[`s[Oh % 0סNWR36\EHcY:|FBқ}15fff1&(]\UޖEٝ׊,a|hڀT[Z [쯾A`9FKl#g7r{$f&xqd3Hcyb:?nvX0N)ݙ6ZߦN@<|. 5؅Rh(^ɅcA*3o}.h^Y0y1 egU$w)nЌMkܶv鬊KZRFM={[G)i clGIa!T[D\_lx1h'zYD =EiH^X T1"UoKU_ Yc;` eJF.=8qqX5Ld#`V(w8]8 }S܎('ʂ9HEm)l*9ۖ!\Y;r&"{]iP#j؊#—y@V0Du ɒL k+_I1ek@&1A q[- xlvaˮ˧Ek]Կhg!Z霮`˹Um  짖vBC]ye޺k}k/?r^"xL\¡O$Ђ睖{; ]m`e'1: ٤]1G!ED:s0gQ=Or$ qp.gQZ+>nSA`GB{A2m;|*ʎv*5w-n#~G_.Fp]m;|T4x*aᤁ~4qw/PgCy졀N}@]ۉJ+#phJaMqeӁ&c}1&R蜬>Dۃ:W! 1@#WIvnϋM̻Ʃ_qb|M,}`L%!^wnrǛd8b_:WG' `vvҴɾNO|9DŽqHJ/~z!Pliz޳&Ml)DIu"]{vDZcF)q~%E+Ԁek _Ѕv M{`¯̮F\t)J^hqCԍeEޤ :I?~(fXRcnu.R^>26`Y9t07Zg%pI!%4>T::iR_W:S}o@<[<:*`$9\EE{&ؚj^WKiQVI^'Z][gUa# ׬^϶zu[qeint^Hy1Ty,_"YU%N;`c6tVK'@Y_qԑYG-DF圌:Ӛ X%%9%FR]`yI%\g.#Y 5 JoDPЊY#UIPcp`FD/%rj_M(gv5]쌣kv X%GdI/͇ɻz8*DM9ӗ;N\ ̡?ĝh_J˃D\9a]؟|Ĭt6O`TLmD7#P"=hK b,1[z^@hp.8s:aVm.w' j{4KIXSM< uG$. 'j%2Pc0i i׎E[@\L?Fؗ9B !L}'44GQAou8:qT)(Lj6 [Jv^Lc\Kk%u b&lc/C <> \6Ql~1ڟ%nmh/n^RJ;yWqz"q揯Gd>R%rGT4lNhQǵua06-"3j<ߨ@/?6sU'_Pw–88, Ϛᫍr1 :cF/vh#!;}@޲bzav0e5s ,ZSE޲<3uҖBf&/+. BY&S2) ^_cF sl6X7]UO$y:}bF1l*F߷QyFK:qkQAYDc;x9Y 7+vbV)PWU\'8ɞG8p6ߐ6NUƅ?Ծ_`ֱ}.{5>wthUBUx \&,]˺ dxĔӉ=N?\;&uS06{rH\W)aBRފ?O9v#m`;Iy6( 6ľ[L0?|#le5YVHr8" VPj }9B0C#}z|)l <AffC;Y,L 9>Uub?\&%(ٿ`'VD22fqKW6'@'1wKH\kL`a_OTSa*QTKӛ/?hP{夺0X&U)dCRI -#y{9o˩6P{""$eV*%/5dl>2NړpMqYgab(_Ḱv18khӯ+֢(568ZW#ObQc$6f~~MAl|vV$p?yRY\RHuud޷;,$**0 {5ų +G|kCGnEp^!lkGx#P)з;" jS^^FGc)QҘADϵX|$hB8Ӫ= 4{HS,QLx'usֶ*prG<]䪪GRYW2#%<kωH~HainI$zvEѳWrJ_SxwԠM='QQ/ϝYlڴ2 3 I):qK B9Eēʽ[بGbW?#kafJQp +P @'irںt5V2mHӈ;ظVuH8p nXBp< !+|{XTjb*out&W,_AQl0`uѐۀ/*lCa 8д…691d!3Gj[1¥=4$"@ `p կނ4ww G2Uժ])th~I~̏Ļ.b>ՙ ];ȫLQZ$O}v }g C9㘂{U4wm~/$̘[ OQփֹļ20mZV;kc)% 8Yyknuvwsq|Kmpb'dJB储pmC6ONw ftvr` ["FǴ| ѯJOl.MٯySos.4oS1(b^4Jɪ*6%mPB!s&(ְ9 +tžSͪM|| E( mFV`$]ԑ@d &$Tͱ$'z$ٯ޳ᩗWXOzaL dekkS.=G([>2йwTz;WJCT09[ w%= cLl:=n ^#$ /(Iq>ji.spRsh)?fA%uAMZ`]{NhZA5d/jiϜٷ:NY4}+u K^X u.ْ1 I;5߮߹Hu[ySRX#pT5TŧUZ>)'$"v[_"e[G8hiWw#'U'wZ5e3eHXUCSqv-)BF-*tr=5ǙZ]&h~'ǽ8g<"#O.l`'U٫%adeiv|_NJF+`OYR݅{RB3HfU Deu|($[=T:BzSJmȎ՟T[C8-Ѝ~+^yPÙ[)ry.jn|ػ<( +i!iG/a#n^VLNդ` EacE tCl8tM&>kk#WEeo oWxS To05CxȢ6TZvG d CBH\ d7X'7UXnvRYw>͈Ѥ +a],D93{]\Hh|Sgyկ NԤ`sUZIoz :H+žumAZU#\mj'^],*FB jƏ!4uWA>C=}>kHbjk thMgا7NY^c {jrvղYkc'&A| /Z4z_P{>Lu1Eql 7B= K\4*wLN{H{He1aq*/@>&pbfȘ`367[D͚ G ƷzuwIySRrT_(jK@ANÈA]mb 9 +C1x%k/zih 0GrFHtNo0}g~5e7+͔%Z;~~Ha裳"Aڢlf C5Ræto^ 5ijKy7MS(!NU뎊|ݰޡ|-zk -$U4v.P]+ƕ$(Ɨ!(  @OGK=iQvy荹Cð`]}-DY%bFABŇwn]ք1^C-/ AEjsAHb10h&b~+#I\rH582y:߬ dih,f?YNjAqMɧ"F딋 0q/&r?'C|`P^*iyP= t`Qe۴T2VYF id()09BOiѯ Mߗ]6#(-B2R38`~НWWuN>V;#;C8=D^#7WԣA~./ٷ^NzzT7nhVIACߙ=|H@Xz|ŞdNJV&kS_\t ) 7w3a?lfn:T.4zL-Y#NY*+$]% !)΁9ӳ4 F+(*NC0̽]%}txQo6o`m6348Uw)e{j-2Q}7"fwº"@shFpQs-BH;+[hgW+VEN&Mx]2D 9̅  T6+i&YW 5zJ0:SHLFLKܹ]I":R=4bG[";ڥ_-w@alL-vy`eB7Bu5g7vͤJ̩:ퟻ,@qTV2%!H-RxoOrHEٵ8G |9v&5)niMF N[ H=0- j4L#qJ>'1F" CYa N<ϻ*Gy_GBųIڻ͡|DYAS݌|鐚i MWIDvK>RZ:IGS+F),pb۱p҆-Q8^h_"UE,,2fbAxxdž[+V|/G>HR-lᖃ2 0U9;ی~ua4ۡ$PtY?BE ahNPG Roλx E?DĨ叚t?R YN$tx>' TErvI \v}矬 Z|cKB0 ?Tq|CGeypZ1Tx#\PTrR[B1 WL w-fv4cHz*(Vth^T at(~I@wp9T)`٩D>!M$q\p9j}$ 懆k^ߥ%}sO3xztG :[3 *i5ݦ5sl" կsIԒ>t'ՁcCW;S#8I1!|3%Ce% ^t\60Cc]@Ey6߳oڲߍøY:i˪a׼1XV*G#wy6ŒwpEE|@^Yb&[Gc1). j1k\0 S0U/{WO[%\ڟ߿S19|p ݡNC(NW@&SubY co 7`z-N0d' 0D%}sLﳬBj^[}"Qckͮц14ykkWCҢ9BEL0O0h r[ZƖ[>IJS`]2n 5pj7 Bbh%Ѧ/Y|$KF#>:wrzty yR~8 / 6Nl+9ć*XwBFxVaG)}n%TM+khkSic颔Fs# 4L9WZ%j/9Y.bt 7+00R#懪An4QET^;hzrSD.ٍIJկڎ?'*#hfċ@w$JұU;J*r&LD34eoHi)y6v$ZUxxyR-~NрJ ͍ՊGТ,9r A!U Iܧ#>NJ%\)K p̈6Ѱr%ǂfM*Xo: }S#<]e1yzS|BrZ׌xb*,X 5學A~3+J +)gc2~OLy]ڇmP0#[9] RVU-WSNT YS=(-S L ]&9s'v^u;LlHYgv}^nx,;+oG D.qtWv$x*W\5= \El du/yM1jO51ɖ [o?J&Y1PW8w%Λ.܋JZGWjF+d|4w 69+Z u.Oͧ68 4VBߵs3$Qhc315DB 7ھh73F>LJZI06嗢 W/~z!wBJPՓ`W:Թ$Yv vd(q#=h!zmx&gW+_Wy%yT$}W<"Q:xGj;l?C'}B&K1_I\Iz1ØxQ;c#4xɶ7?#/,Z; e`^h.}Z(2o\\ܼnT"vWԿm ?o54:y&n!#9P'#aќpyڮJH!qdHaZJE)xڡ ehvEIg0p#/r߷#XWT^w>LtEE7ZܩJJl,1~N>l!?^ ֆEb J7%7Dh&?h9Fc1jih#m9rVG=.I ?DžPOR(`t;Q2o.ѕ3[3ѦJ9*֬Ύ[&eHP; zZ|_#OmŮ*'"S)MSNכ[5X;OY<ڵya>؀e'54g]pƌ?tG|A56 +PZI*hv*:eQG= 56!?UmOsruN۞Hb)]uF O !'R~@cN oGp1 ԗ}0g2w|ZYM@O/O7/Xz'f Uq~&_NO=;D k;g1EA\&A%,i sPOP1xYa.@J)!`1GR_?ط3y D!4N@_cb,M&2k\!}[91}a0[OK65=#ҺϱOC$N *ZUK暤)!ⷣeWfDШUNtŽ\%΄Ӗ1D /NI{x|$Nhsxf.HSܚ6M'0{~*J,+%b6?x+VVi[JTa_[ّ!>W[B~l,E3wnMqR<:QY션ESI?;Yzsn[t<#I9 7rvQAxq,+޹ ՚5qNX 9+Q.r^^6Y8,d)ˮ NGy0cbgJݍKk*ql؅Au;Cbs%.|s@Hi[uzt%r02[6^%}\ sEE gnqm ^/v Gsb)tF'sd] hI᪅-A.![&Pg5q $ŒJrF?ѪQ2yL7 VF(3g9Q˫X7RӌvX0umS:г;aPt*M0vOArƐz`|jq Qzu##|7t;^l(>B[}YޟG̢B=3 p*>PZC!dRS%ںg] Xd0gFy:xϔ=o0RcJF~n'h=;wcCzML!O_"af)%SsL\hZ\D`x{-q4, Z9~<>o _0DCyʬS71^mW)]]y+ʀH ֧o_&79xZ{+&l]:x Ll H܊S'a!#XcGg "@O4@ &bN*{߶tSS%ږy+ l5Qff؁[YnOE\|CtV'0NV׊کhX:/VqbO\3I@\lX2GlTH?ւ\g=)j^k`DRNY1~<4΂is2s8͂+g:ELp|"@ !%-l@tXЂL%T" rs`U bE+KB\kɱJmp2>ƭX?Ӻbu@IdUI;+M>37cq6#lp*#:OظsXSxMD mL͂FtQ8d|Bov[ȼn Jܣ@!jX~(#Ann! ) 8-;B%$njsQsoX tJkbjؼlJ<{ﭴ*_y;td_` ^[VQ36h`Q]{Pz7\)?qׄFq}zqr;ʣ$~ʩ1kןCOJ!.pq؍e//Pee 9CU2aA j%nRBW۰Rssa x<5vڌV .sč .bZ̈=}^kL*䂱Law|qur;鼼)Fe"w^a?e`F0L!3 ;م@Gjl/~Er' <+]Y,/K:/Vd]93T]a+,|[V|UU)ndm)mu*_iQ֕C̞ 鶷ZOnq-bZd #]t|2X-k@iIGQ(lMmW:X[p>=P)h8 a ܪij*qGzz7&{9Ro_ i=wZmݲJ!y\kM-[&õWjh4T7v 3`w /a0+PvvS^b{_eXwX]{WFq:"jR e*kIhxqՑʶsYԦf(H Nl 0WU*2@J[jzѝ8-ۍ^FܻdX̎&)R^r)A5Red@K'Dk ww2_ړK!*8kD՛OYaI6 DB:DUQP^< /6H >bX 7"+rGy‘z`ɐǧ,HH +kܡtV@ 02<3< iguK׸/|m)%)k|lT,]5XDsͩc*}@X}Dվ &CgVZ ۗoC߆@7ydM3Rզ+v69=z 3wK:>K pӁI`bC$JAAb0m_;ore|ZS;vQFV,c3//13U#VSH4"+a$_a1toeܭu "|g螅_-O `%_iK2lY4B@f6WÔxpHYH X9JvFK'))f`OTT; CHA^'*ۛ~NL\ a ,R +y`_Ơ.,%RJ+$|<4В.8;aaI:+Q4 2Ze,QJACPO*6,dy}S@FŐIr~V<~M?UsFo4n0-*[Cvm|h ׅ>^tۘɏ;d,V`֛MDýqkU0މy?i K6rXoEx@w ``!ukAEs0Fϩ-K?Qǣz|]NPvh\1n:Vʸ,xbƱbHv¬tb/Zw/B<&Ʃ(Y, tJ6}o8'gh(u}m}JӘzڑxf)k#xӐhCQTYj*YȉyA% (LqVjQi@s.d0;VgT2 %.A|k g&"K5rVdo(&e>C^ d;T%^Ͻ7 *iy^.'ḽ&jBTlj''zgg >9:(n=WT,[M>ˡuwL`I+nЫ8qy|Ztw#2Y~]_lQwmaGsiLX6$v7>;u8&l$J5@'(?.Hїth5=T"~X1kZH4깾*j,Q>0&tdgXVAcvßclh3DJ }:`#se g%iҍ7Kō$޿1| ?L ,>I-,-$ % lB\Z's$%u]$ 8Kn=[<)HcMv5&}o!dJ@++\N&2d$LJ|NǂvAPQ=KؼOٙFTs t<,N-lkr .j>ul0 éuܑ1fu 7kJhkJEU&Q3/@Cވkpgj'v\RY㙆P@ha\77 )z>O۾ӛa[4i8xH /DMg!BG ^{l;ϙC\y,(n]Jbf7f-⍈b3p0y1^0Φ Z}ͳSg7@IHJ%7A u֓-1CFF$_pV=%4jrTC^9MqoKL,>򣵁dG..Z8'k٤N` MN|I)Hh&A~+Az!j}z-PJaL|+Lcx~w1lOZK,_gܱ5%]VT8N?vyFd8ZxU;[Y[&X)n=<]'a= yLJe+т?} /8#&?Ae>orζwUDDuɗvA5.$4IV7(p􉣭^HX%4 ;$ nq%**`*p33>`pxnY#Yx".UҏD jZʂD 2;t+Rz#3ŋevoe@uA`7X81Pf];Uۊ<93cC]ܹyaAmh{%ɵ^S#f4rEۄ+jo,h2q" b{ DSAX FCΊq 4^^}T'ЄhayJca@j، e\ Ob0YjSg=:ͩ[⦗Ed7,g8 5)BQpdqk*S=[k}u1722~ nL;<\D7vKͽ˥½|Z@ҧ*64 N*!k`+LO{:N!~\YcLiBN0*݂p HH D2 }ĐJ^6Vem)K VݘaWj ԥ>2:%<5߶̒ K8ϢSt l.2ۃߏ-bcyNIgG#:ǀI.E>R =F(7-#P&m>nNQ|?m4sN-aXZ6Iu;X*m-#A¸Ƌ2K&NIFNQ TH=Z5DXWAY8=5,].ƱRLSN89LUV^X[,Rqbid y+ XpM&mm+vɃO|b~<* mu zLh7i^#9Uv%IJ IR }44z0FјY#n+h=af5̌3ܽH8Ӥa ! $~+/;LQ3ÄY~8V֒g_W9.lO07a)])kK14ǠXC֗~b=1VŃ tm4Us௻gҺ &^9l 8=Ij%\VYLB%e7=a2祊Ω#d_"lKx$R6錻t@ S*,ɥL­c.+w}8v)FKAnwoILld8+zx{ay^gi~ވ:gP/M%KCg\|AR?T]7TWcH,z9,o݈z?:AxE;ғO`[j`"i뇝^Ӌn)ƲD:BC9]?%#0W0k/96Y{:h+uNPB $9Y{1T1~`ʥt:Ol i?lv)@!1W=)KZ;&ZM)7QHɁTQ|[5wuφ+-wWEUA~'T7dT6>gw?^=|&A}k@(LO}w3螊Ub!rN_ OM\9hb:P[~:X>T|rI֌(rQjIE2z'ޙ& v᱑:Vq}|0qƸO=]R;H͒Զ mR)&o=6:Mq`mRPC8Bt= b y(#*߫4tZ+q*hCX@l!p>ɕ3Zz Wۀu`e/p#Žڅj;u;^KmRo˩yAһa2[]S <,ՈM.mUA X[d^} +kE, MV̠tǝ<c0"#x [Ƀ$ ͓n\\R4],H啽}ANqJOf |K 2A6$ǒt)a8։Ej:t)5gh=bPkbJӰ72t$s+#+r Xo9c>0 )8jKaluլ",;s_ʍ=C:v.c@8_&'6<[~I9.@?.P, ߩn]s-z|ʍna$2<"K#Y}rMY'@$~# 's&4GJ!*CT63We?ue9-z@f[S%"̿|֡= aH.a8x  'qud1s Өx!r7 ͤQvk𿛍V *#T$E !} w LyUyɐԛӂw~Z58'Dz+c3@c@ZG1*W _>ÅXx@`I"v*j?aΞQH&#]e.Zyz(xz}͍9È*^c7[Ћ< = q"t F*ז:<7Jo_[!FB, zO;6l֥Sq}K\uR}:[juc#ΖaB|.OlEouY$h&(qCN˴ڷP.4Z\Ta1| T QnI&,:|P6$f@*Z$4wUkTvUZazwźt-. @|rcمп;%FB0d fvXF<ԮV@3 cI:yF?pB={a w"&w|v!Yh(ր<_f!7Cl4Dss ? Y"FVO pnH ›D%)g6-g*@ ΘIOw>"zd% ̄1mGMfo326a-XB+KgJƺrQtmd5\L,iPŏ v:@d mC6kJA>hڐYe!xWEwSm3T$&Sb"5c~$9I9c&f0k]rZi=e c(l=?ue;T,3\*f-Yx6C5whyyH"3Tn M<Tjٟ$rZn܁^$"O>> ~_<8+Cȇ!zkfkރ"_M`>GbpXxpoa TaJvFYڒ\M`ڶeU:owE1fRD-GM>JKηE[ R8=ʖ ,ܒqaD~?K1%0ە!/kۢVFb~PzњKjJl*B@4;kK"ǻ|rU ^%#8t =)b/z'|xu! ͆ oS|g.@\ F @ի *^,D@U=<ѼPo{}c_wm*wǾ)nHK@b醌u[ʖ"a1ʄþuѻ`%Tk#dw9Ǚ%7j25h-b [ggKv SUoup']x#\ Ge~{]±>UdivQjF UZF1bvq%{Ty^CΩݑ sMda7FHEڌHɮٟ2YMȽ9{xm}6ēcSYUg [XEr#o\ #@w~ By L_#ƿ" 31y;|E >߼ _XN\xm`e8(( nt~gF|G7~ް YDGF٧,{Hyy[V<"._j=t'80+mNښfȭL? ~֌/[vH(55)"+e[>#D-IA ճ%DE8?="w%TRjq]g&y_s& *?ƋB_AVZ'fbulҘ'EEHMV?/-P_g(]8DD!AG.w&m>x+;HM:ayɏJ HRPS 'lpz4vdy\@O+^7PsZu1D\wAs wV{vLUTLyx>"_RpIP Ӳ=,jm+!;I궨R )Kt.cF)C~I,r̙|l(L)_c8c*kVWR+C e!;Gw28aF(Vips̚/YɡQ6 D3Zg J΋3Q!࿥M$jiq`{ nd>AWp߉]}S^u>(@$T=%@&82l.T;8R. ;pB f|mX:f[-'J\+m#oaJ&#mdOUM ;AhV-\Ȧbn(e;ja 9(~Bw?XtSM~ *KA ٧s0x;hsJ(G$;Ct]g1A3OStU*SvW2@U#,QfQ!)\& @vke")O?XXnؖ:aU&p[I|rWF佼!@GL'xyfT|,)$K\?ដ?me] MY-  HH gЄ,R]WL9_M"XR A *G4Ȼ]٤z(<Py@ao;֬=FNk< =2' z{ Ca 1rfXV٨Icv`!Ee"{LYpb\ӈ#|#>679@<Ɇt/1atn?pW~э36(!:ǵ^pt$yiTvُB {:,cR=p.+EUU挻S|6 ק;-jڦ3~KU!9(iV\znG5B'aLEsrQ 6ۤk'扅eDݲf\/d%=U4;RCR7kfZֈDtq/r$?Һ̅vFEow6 H_@PT-=3Ș0VkC¶\Xuv5Q#+X]2 FfT^Eoeo5_DH$@&(dQA fK>ӛX"M2pIې+\So:ؐtO%ZA~ݜO5Jn4P{n;(畛ErH,TZ.jˌIv2@Cľ!I4/m<$Js d`i!"],~u0sh51޲孇f-?Zp6f`iDO3ɘB{H E*c]Pze¹O\UVPHbq͒C)|;[ qW1 F@cҨ*mTABz8wB% P* LInreQ[mOb-| N/TMV8Jeh[gj)/àq~(c] )v1d{F0!G_%/|6ʯeUL29e!P1Z_`]Z3RML,%bE 2v)ɏ,qp.u#lQC*U6,  F|#,6#s5A:y{pk?Ww#&elDS:(a3=g dQT-JDG68?E+|6]'l@"ލ_QhdP%B2[)ĺD!W]Pwg RhLJ.FX`.8=KV,S׎W4nK[>GZlht h^ olQA 1f"~ٝɼsM(Eᜲ Bu~t GVܧ虦*BÞ3D͖RnT}ӯsz@-JC\MFEM8FLvҏ:hɧwdnkk$5[f\*"<mRKRB#3_l]ƪ4%^$:dlƴ:.>H)֏-M$P9 >{<`qber_N]xA_(Wt`$6yƄp}}wo.Oܪ_ v+]mzFwU/d04 RzO sۿ{|Yі'P` $ ~=c~̣I:N9k#B#_ 'ITYA|C@UPM6@^ !ș-9Յ:iXdyB?KJH91m*u/bzgf 7Cիѵ0'KI~W|%KS,2' ssoWĵ}m>u rGK~&t!=ԕ.Yfe3Gk9j6u a{G4,!X#!%`4%¿DLj _!{뫩!ӫ_2&ڑzˢ@|Wz&ĸ8 IB[0@=Ґ7)י=KniuR-) UHmeFy~&S?hKo nd~qM6o3|R߫2{S&sU v:sa+pm 'K/v8edRASn"6&y5 +&G w":F8B+ʞPEp"w; 8syK姲Ƶ cİvpt cvQ4xR-Z+pγ&7_P]Liy2n*T_6 URe^eT#hoYw/ȞDYp{#&mh=phtM9j=0 o_pPs65ihv퐐ܒ1؇ڶQ0H)-8^>}W OCSGtm+O~>sol'Kn{.2k@0қcY$3y>Y ~qhvRp &x/{!й`A4$1[`K 6n{TN)vƀ^/BZ:aYR*xE%7!:.ڦԆ6{bH,f`I6s.6!kE%c߹® fŲf˔J? Da*v Π3 Lg9q7eH.3FPz!g?]PH@fKN9x){_NaטxS7c4"fHs³%͐E :HUfeSb 0GOw8[TiZ5`ppnvIjC;@őK]ONa\&:5DO?0Q+TcaD3?O!4'P=U5фQIz6\()4蓼d,?u{xa$F`ݪ!sE9 QS|0-dJ::k6غĸl+( s"sV:B0AA6 %}%C=~FAvp>,CnaTaX>=W46lC5927ΕLf5PfPhqS/݆kЃY|a,h5 &1R|bGJZ|>\G$SwDP.۶kTm3h#ǝF㱼JS?I\J-uYH:z泰&>c㟱+x%f\WNlc4x2r*Ũ!ieox,Rc(W[ig 5zl;Q qM-JDZGIcT೼}h^je'BҿK v`T9)<)Wuh~u|'RvڠT wą@[]rEfѡJmClSɳ٭(}m%>exUn 6K]=kBQZ.1WգoK3䄠;[*0:'t|1g#(4?x  N;=bͭ_8*媛"eb'^ԯEhٚ$H-DWyWŽQz6i'g."4C\auV9 f~ na\_Ob@N I,Dȸ_-5@izj,d[bnW2ޮDMD[LCm*M!vk>d#dXѓ%VIԱq{j 8} CgYT0" bz#)9&oF%[O2N9$1O r|nD|$n-QApnDO9*G#я#p2/mU=I#]]rH xRsfb'j.qޙmV-Q@r@f5%:]XĐ+Zp@&,1:lߑ!mŰ!ﰎK/Zݡ_<)1[ B\yǎ )p*usϽh6_ m$Nk26L/g(v=lTVle#AHP!c}㮕m[1pc,*N@7y2J^0KjZJ')WTRh^TYw Ώ ~W^BI7t/0PnSxȫHs@{v@ifMLjm,k(My_%5_?ET|C.FF IqGx5X>_ZM.`w} #,p%֪8Pd-sokY ʋRRQK W5+9DHlJ@1;bzkdޡfkZ},}YS*l0yY'zs%Q &ç4?K_I;7'*9מeͬi9wR m'\&+s#s_Ej7#= g.ʼn& IJ !D(!XnR@jЁR"Qj@[(%ٶ]uΛ(R`w- ԞCKt@UKѹt/,ounqxj>>N\}UiC[ s z4$B.D׹,z)okj:3~S<S˝bdQm.?sQ( $oƨ<bDe;ڋKGό Ts.}ay+E_qZ@ohVvKe2Vl*̪n~>2WPYuzv6hw%AYb1u)7ߵfCeu"zԃsakR ],4q&LpM>,׉LpoSݠ;]R3zɏš6Q0@'ٝs|IOT{za)mqҦ4tllXE~ׁ {TP}f 19vK^6`\OQ㡖kYd)QCz,ς:,29͡-.,j CUEoD5&)/3H)jw7*$1-ʨ&^Uj9& Gч g+T:kz휲4%} TOL$YA&:=*u֋~OrN:%dQckr h&y7q{A/A۩j[?N/N 8Y>OMtmR̂帾lo • !RjE R,T{Wg$l>ĕ<ةl4<6PfJ5&w6ܢPa"N |$i:3olQ @hg@=Qȣ׿%(HMGW0ЃqHPr+\ّ'(zmnݛ₟ƈ}УC4#(@4:#"NᯞztҏdX^]xtK ?Fv#BI3p3GKJXz˔~@'qK(`K9G OivTaya_3^u׌^rKFuAz17Bk,4_Yy;#~ׇ4Oյo`ncƖy# !:@h5}k7;R[,Q=H*CVszr0Ӡƞ%,0RGTZҘAylj>Cn'Z+?_ -xx*>뿦 xYb8| *?J]6w?G""߽$^3T!3 9Q?g3.|f0m^>Hd!4=@ )?Ujkۭz>6׿=]-x5nh@\c pĔ^x^ = 2nM*c1#Kpn@UkÐ ?yc/"WbB |pHO襴;\ aiЏk=q~{|./Z{<.=\!#w1Y^uE{g}B?G\Z\b1 -zЌ[Sww׳ :o>ﵧlk+F سON@ʍ[]ԇ_"ѻ|Y_5 d&5q=Z ן",y-"XBѠt<O#q}R+hI/b%Oۻ^b K%br=Rj^Llao60@|;m#pzk<բo,NM.ȗ bzi\"s@MN\WhBctV=[!qqv:ےNkpd E|.y .nt{:I~:%JiŠ愎GKII`0p A=x4/|r`DjTUkM+ҒPW: N $IYhՍ~U`µ?LVh i+]tal6wiU?#{(e ڜ L#kUu]`0sSJj/m/{9#x\(Q%A"6BeyMʑ\Ӂi""^3Ҵ(Tpc_ ;cis,؄]gg6pD[j8ы4 Rn r&tzw:h3\[+ h]ɭ1wMR܋HIV.3}RߐNܖ0ОG<> 79+!3 KOn3c0'I)[CZ(]~O<ڱmq+}/7!٭e-д66ٝa;]U =LTv>*8#Qh7r̜${W%厳tz"eds zmv˟Ash Nb_4gNT! +@~:(Ni?Nam8(J :DUODp/0r8=RP]Wu9VidT^ PAZppekM"~2swp 8vr=~`ͼƊ bH(J!)6"cS,k>q`\$O>}F| N4 (݆!PQ)7HlbJF~(n8Q Q5u @KË 2 _/HZ+\ d4jyė&8/5;n>TvmszC¸d\zW( Inbo.`sir{5 h /!_>9H>oI&\`k=`o^>c:ǘ)N vH"u_9/K:VMd̮'k1ޗW_[oQSB1'ԺrB}ؔeʨ ȮZDH @U>Aj9 Uy=\b4=G:7b!5\)DY%2 =5t0~ =a<~ea<VRʻPBcjspӾ@W;gһJċ4O )s PQ*h/Nlax0d3ui+%<&tn/+Ji^\ g}ؿXaXZZ-j 5YQ]y+?ͭ3o.ڝ]s CeVb+c n-nfqze($)fDs {dQ HsMГ5yFACt8s; q"Ymζ+@NމAJAovByW'D ,Z|b#?NxUٯXxjsq4hR*꧄)b@LL$d,wN?&A{O^aVv/.$L˴P6"WydR5+مj$k:/#r:=@}7_ڼ™=r!.M`ο;1 S6քAI! -+]3sUp?$RF9e]i7ʨ\#,BN,-&>CWhVp9YT-9ðEc[H<Q9?Us*@o2@5aضgTE.j qӫb==XGH=}li^ʨA~y *{ ˚*2f+6%{2D!> Ju@_:t JIYb%ILnV  ["BQ &;'AJ+]ukg="TX-Y{G)ȩ!ݽ+=hX^߾X Oc[|\nZNl;zy^\gPό94}[(b"YE;As,R_|E 11):ᢶvbJ}5ROm=v C,4R9&j;vUQ\)6tk BaPH) RQJ0νy%B)cPCŏR%7 i oR,ޗLDP؛$9X]r({ŔLI2]%7/U8 7 P)칰S&2,c]`s̏sb.i>=sGđPhY*(\Pm!1(K Άg |{VETڍEV58_g]>Adg&)ַW"/MLMV^nH+[%YvOǕ>Gfn똉 ԛb$) @L>u][*(ƏtIQù 1щNP}dq_KYP>4}xԘ^qt/cwcb1ّs-܆ e8C) ŵRwi^~ ?栎yQIYxj;M\娞G0Jh$C')ϔFnѝ~׻+zk9H{pu<g_rW,(( &D h߆0cK؀Ұkm({.`/f4NC F˕k4ց{%̾Rih :=\oGlfG_6Sp 긱1S <+\vM wkؔM7X<:+]I:V_ppˀ-Aj<(k@G!M3gzxEO;s g?7x.p&+HY2l:^m=,Ɗ&b- R)KqJ Ma~!u6is8,{60B [qPJٖ ŲXeOK[6R+xR&_7 V >(l<I7PgdtpS*ַt5l{Cwt3\2ʩ{S I%_+ 5]S֠yGeS+2bFNi @T~O"#R2q0:xBnKۋ*-Ra<+#6HӜM-͏ %HH5x@JfR^֛X"ƍn%Ͽuۀsi ,gRԇQQEnAm/ox^Ha^FL֭  s- r#릤"dpe;K Nf4I1b'V/Lv9Nxpa`MA/"bq@I3Gi ټַ{£97u2QudnuzBFU WsRzV,LI0ʿ"1ۦ~!khH34x"%'=< !W e7Ix\t&:L 8q3_ 7!-x 0s0>8V8J@^PnW#9KPp0t0rxƂ㔃?@^6#OG zxe1C'm"LzPlh'xo,>~sUL47R]G4-Kхv{Ʃ)yeB qkVWMcm3tKeZU>,P:Kyy풜 =ͭ@ᵏm7WBRR>+Y[\M c#vjD5[ }M8 ZB@6E2,a`jCN3rJ06;Ks*0l0C]KmJphy;ΕM&+aZWқ9 #pPCDyOb1 j&K5{ qY"r-RUf5)TD1r@PfDAдi/y+.8вG:  ~?BDA>]מ UTiwHN?0".$5󞃷UXhsE"y6ymo z%(ՙb4o@IK B]ύ]w N@*[ILe r/3J,u sռŐPɝ@n/?@C~ ba%|^V[tڕ%c_f; zma+]ഠop448-Tz'*~9 nQ(BmA3:W4̷`=Ms`jx[G~C.xK >&I9kYob \,_@unmu=d0>'ƭm~v .:p`Y9pu@4/kofcir៻`ƃJEloыw?3piƔL&et R@ 2 * <,ޜ9HJ{=F轤mcjbY&)$}vjL-] zZʴD(x2ГB3ܯO&{Cy.RхM_a y%ѳ\]И9̌93dXB$>ks 5Rֹld2gRPE]fr\Fn[zfHx}?gfkœ!J*E5* 4r:.T>y.JlKN5Ēo{ z0K;ť. aB}(sAMRι"M'B6+ᅃ<ʿ0ٴiAׄMG:;7a |=CD3" q ڵKm\>Ba ȏ gVVGOT=VV>m+wEz^ia=8$Y(4R92BתM+l?+l WJ@bdw)}̟F$6k[~utNL"0,* Irb Xa_#k!]xm /c5*l]Ebe'):Uןy8dBc J!\<(~wzτO!EүDUoϑ٘B d[Wt0^>4EGRp7l1J'Ϗ X|ܻ@<ꝕ;=rdNSÌ [D!`"> Cxlg[!Z9:ojX{q6ш!{DŸ͑NU)\ɔksk E@ĥvQG= DSrN=aPP<I^`ĞT2\'U}USuVvIϸoS ki#3H ''k@Bҥ.Y:.<$ʹ#%s՗IDA  u>AB/fn'ڇGKMv8R^x>>ܢ}>P]eGؠiphApj=06K&y̴{*Hj%K[a1E$L?,wJ?c޳MXs!uZ 9ʳ%%ۂ::I/d7=Ӽ!V$l Jh7NBwYl8ySf 8Ja?wͥDG +u?yCUlUHW~_h5JiPUeY^^эvTZxhYã f'xRuO^;`_ElmU+8>xGGc/ I$N鵐~])5DB%}]D5̦qrmPBѰLA.3 Nsצ8LqS׍Iq'B`8`Yz=%TW\XO\ԠBX֙ym45=B vRMN-{?K66 OʅU՘Jc?fj*jXK|DcΝkbvBwTAM'۶G@OAل**sYj6uaԵQu$)-T-b!cmzↂRe5[C'wi~/sOhW,z+ 0dƒAis@aВ̘Fٰ|" !K׹~@&G6.yz`jN$A!z{|G݈‘!582o ~6yJ Tq̈2,~wL BۂHTPq7\ Ite/wy<¾?+;O} ]L^~V'-bl x#3Aoг`w%$hꬁf SV< Iu|+Tt ]_! t7a']GG3wvQ۵m?'szURMsm$l}Dž}l8س"\))Rq`m^Mhc`Erum^6jlq ;ogitOi9_i"[Dܤ_T).ݓ$ʂhhyΫn\h.aqVE16Zk!{݃T`awu^x\ TL\9kfP-Hx?pS:m݄5k`2wX8՚"~ꅯx!{{_x6ԥG;Sa,85pl Tq'*ݐ:Ox#Ɔdi;M)sxM*Ue^!BfޫRq7;}pB Үž%"*3{rI̲Sqo&I>_b0ޜmJ.ϙ/ DJ>ٱUE&gpkhl+U,pQilIQRY9glH5/tG[β9醹x%Tp_zUP*=%y*[ QpA}3t)}l-K3Ql&.R*}u꼬MSQϋVMƐ|F9濈bE*QQvy+ؚ e.C݇67zTP 9fGn+CẐǥKn+Y7rǝB%~FqÞ^a%@Hniy/4SRVr*M 8@< ZްEЛ_@ec|-tDNb:vd㾞2E ~ 3b_30(}]Uy7 c#VCj3({0bxSBr)rL1cLISqJ_L4e- (2*Ti-SJ%LpsT0B\f&s]'˯aڬ+$z0[ mW&t'B9EÒB)s!OuΦq,cSSfH- &G8ވ}MgJG9j7!^ 1GmX錂a5TӈAo &C>漣@]WUz!4N-j 3k?1{wJ^ 6dM)9[}4C[~8;(G8JPp'j $ j?$Yn ^AD`JwU!h~ \aƊH=_~.|`9./u*ĸ*uELlj.  y>a^Moō:DA$y0m2yF_ugcZ4K#4t`=mITYg׷KS?,t@8-b>m7Yx.a6ZIseBU׺pL /Ρ6Pi~j:/JXhgҕFzL9!%$ ī޺k('G ɜd"U,:R)Rcp J^TْנR[PٓeLgƯlmHC>Wu.V>:5, Z'PCXXN4x7htyE3Bb[xj;}r 2)ݜ.VAfOiC0Rښߪ@Pȼ8+A9,Oii?.Er)u3iLA |'˙ϑ,::fM58!$ϰ@ͨmsriYo7u\޷Z_n} 6%_C/܃B|U#t?(~,)2HU M$pE;)@"\گ#T]&&~:x*wu&gĢQAG\az+*%5$Y'1cn;%({6{{$ɫ 2U_v"遴mwshЦ荮 A]m#!V`N-f'$~]&?a:L1>G"Xؖ,|wfJ?F"\/6 jI&OO&0lleGTj+5JH3⽢وk&W ;~!gQ{ $Cvsj]ND9EJaqc!nA5SADW-G<ѯ| ~@G@Rj "yq,0{OJg7,h\'E +L\kKAa \֓> r`O~>E@$7!%dG_c v`Ǘ)DrHG dn9U8’MAhFMt6U2@·Տ ɄVt]#"޿vclvL@~q VOQ[ 0w, Hi H~ :p^a|sݏR҃E"_31Q+G8c}i{I%Y>le;"bum)j1w5Z\n 6#j";eǺz4E])#{ q{b{ETCqc5#F񅓜w[hʣD XӢ1gy#ڹE}74 l%Q2!m:98x>*QYr-b`8 2qu/fNFa,Ǝx}Y8c߱R(v-٠ʱA!U{^l>D(Yߩ4j-?%فD "}e<H$(fqwZJ\J] jо_%@? кBti B>Nι}v [ 0[eIPVh!(X4@7Z]& =4W ؠ:酫2 (aÖ=`^5`/ ƹJ!7@E^uIXEf[xbiorynR:51$](zz5VÞHJ>zߎ+=ϜWy;6˷WifW|&BqD 'h4u;Qٍ jW.ZXJ: \mj#UUҥ)bŒ<=m/K*]-5[AfkWba%'fX> of׆B?h^xM\HLjnc57E,s2犽IPR`LrɌ11L[?0E.13॓ZY>ilfp;KY)}ֱ/u;u=WA,@!#n*t$=B|H#`l/%ם+t奇*O.,]y8 eRB[n[?"!`W|W<+q H5{P2b(Dn'6"1R梑^rSD`->풚^۸:׮Bd^մ{/DU@tΉQz9}3y;JR˜+_NE3e&]vF oa? 66ƝWdx`}# h"eI2o>]*{0yְv5kBI7eom0 Fe $=fid)=NkW5:'soX[+4U0^SY7 ilq t_Ž-{5q,7in/:u s2pXuW {kB˂ĥIҒZF6MHg2Baս*nD;4+|KCQ_+)vMP"< ^l$U<[!l\gH}(U\Md/D[^q?^&q5.'^)te1µnG-i"=dLJ=lDI#C휚ztqeI#=XQy6àW{X; o\eK6Xd[qdy-]Oe"6UM֊4bjm#t&n27?4RG~,761G:xƳEMz ;Ej"|}([DЅ YVeB7/t3B'")!Յu0(|o򅼯c -F{ &Ei:Ӄ=[-\|EY-ʣiHDB2NR*e[ϳuOrx ʋ&>U ǏVQ M_;&29I=P3haH_ A42ޞ*Z̧8 .O( AR"8JHyA\sE rDLB+j=D騄- j 2Nwg\YXiw{ uB{\?OG 7CQ7"=_ E"IјYWsa\a+,-$&lmcwu֏L^p/EP*V2n^"uÃw/;ġt|]Qb*o38b?<Ǡ傸r3[9H0>&aTG.`o,x(.wZAlMk f@)@+e!RAKGBN5% ڹ2R) U07FbTwxLd8rGrUA#0*m5I4?bixeju+eN{7 F2_r5H x=m_gcO}%aF]N'_I`X%W7IcX87s*ˏ,=*8B HXzӮ"+?b%k 37r'JV)+<9'At-nk5 y;є/+{5~aQm*Y'Pf^SHJ~ZpYǢ 5o2$TdJs#ϔUx6>zUt%Fm$jT2dŢbGH2g d㱐 z/ fN)e"1v'&1b|6yXpF9a77]}.r|]<%3Nj)g=02 f]`?-4z@vꀶ9]Pl*~]8-nN s1BzF`ѧhA!u7a;ZuͺJ3D'U}덠@hrlI HVN^j<}1qk:iRu&iWDbo]36,WOrBL_ /3^ SfYL2!jӆ$!K]lJuҖ/S19k`iYVK5DpגVWV/`lRbq9RNf uE,%|.@cy]be#Q ;X[wAN=S!ZM@Js|sc}D1J,xf/`:eLָ 9Z Ag*e+ ӰL.Dq\x;ΰD{agx~cW ThQ0] ui2gpg S>zr%9\!"_[-2#AP^`MVvdkH=Ƹ’e]7]6" öE'fx+)Aʶ ځ9OaC-dJ͟e /@L_X1Y#U_c \I >n=Z y4y9BHh_0gIM)l9/AC6 ՘r m Ԃ웠3.=Wa6EN3`b2!)&xA 6|3L3mjO^DVHp# H57$fZ4%sݵj}>h{ HQCCES@Vf]߇)/H;7'O鈞.F696cqx^ "tz&ݵƓ/)v9+zbJ vYEY> 8EM}H y7?/xhM-ry`el돉}44X ZUu>Fu btVNR|.-I5.i] %M/ohr xNrߚv30IG? 4ãzW6U{ h$EžT_;_68ƒgѪ2HL@5 >g0i]\4r[CRA_kh-MqBA`&XJșZKBup(S_6I@j'I…i&R.Eq C[5<̅F*p3-!vZ[C10_YS>Cº ȘSaoר:FwfܿJY$ sW4ESYFpYCIC7x5r(C2(b1?7㫸,Ö"@5e!>B8\cD%n8TEd+@C'pLK9n7(9q6``b|R{&aXd2DAF=QxyFӟ 3XdD}XTqh)r4!|8FnV'i.W-⯠`M``om *TJmgAx&dQVZi}car`R86ُl屐~cD*m?.B)>ШH ʗǝ!xјY؞KI3(sx]U7A5$]3;pol⽕ɽZc3^n2W,eB %h6Ckt9<חY|g k֞bK="ć V XhȫX O>rf5]"6GE+ oa/ 5[ K}]%+bs^ ,έ˨@4 6'lohE3 QI2>y_8_DP7ȇOy]D53O!X6"+{;Wx8(hT V$YB&yb"R6?h*(5o~ o03!!?ѬZۯF3@uSHGc#@9S^ xi`9Y>Ծ"W5YZ}ÇHw.BӞ#lzsvS:C^jҰb(.7rh6J ، fPȚX5*FsϷr1P2t3qɦᠭN_hk>m1k`H. (bou  aEvÆȋ=Bm9樅ޑHjR7Q9[*ro)W@{OoRV:lD٢a)!h~Ÿ=͘SNǚkL8#̝oPI w︄ nT  9n`UɿrW'Zs\b:Y3Xy~۟F郋>7Y/v.atix ZUe~ƣ]9k\xOϯ Qџt@qIF߽5[ _Cxc'}؊P=XU}s KQ;QS_/Jr)34_Cڀ^{l7ojMi*C9Z3]w&ݺΐ au!w1TO- RUk1A3bI{ ض-UqIa9`;Mvfq[ YX(hpW#)Uvӷl/#Iɓ3*ʢŝ 35*DUGLi>sH,5 <.!T%ΘQwe4 1#5:!5mǫ,&g{y_|beL6W[#^atdRP)4|OJ?V?3K) >Pmph,p*?uSnW|nuI[ L. -H^w|G\}sW4XZS{jϝXe-4,rt_Ǜ) L:Ŷ nBjf4壑걀UГ,s=t= L zMQ8$b`2O8<4~oM>T}zV pkㄹYXh1cُDI~Jҋ9 gg=5N3)mirN1wNޔp{Z_zٜ%pSǦV :Y&sB^ĐK-Z>~G]Ȗ~/>ԶB;RZ iEc݅tkU?@n 5>D*Ȑz^ Q,yr)Vm)E ˪ "DTR.(B[րu U=_{o_93"j.CWNjU hL:'\X~ +L){>ettmPʹI]HU&lRVJkv\g0xQ A\&/ ^jT5Io8ׁwKTP*VqQ@Ͱ6V=:B'rYoľ*Y.0umH+H%V fiydKA'*{Ѧ>Ie:>(B6֝cE2vZ"y)b2b##_Z4 0͗uJ,5KӺqeKkߧcHoգ?Fl\QfG8%l@_3ύvPK O?+.VGJ {5R Z넳$?RĄ:jD@YrYR!thOr]yLudH[hO]UHUvuuiMVnn٨-F(<p\vq"{wM[ym]ON$C/$cw>ބ{z5}8~ʪI?6BOX $pGq-*jul]:{}WYxo-}TgXϨhNA,G2N<%gJ0g>N*cͬ y5ݬ.eaU~*1Xhbakp/ 3d-78v#JNqv??@O$)NȆq+B@zЁ;ʃ0]$*@)G=]9x`G֐++_%#RbϮF\v 5<}H^6k7!T$#q%Ki 9gφ 2k%Lѯ7U9)mϑ@ +TIh;RHXehy6}H"]?4-u󭀃7+Įa-p[6h@[2 åj⚮5oh'ه*jHR![>WW"gr4&*t.z .:H ^cyyv.cxk5OicH `^8_f"s2!$ʺe~*A [[9 Qx([ڭȦɔ&qŖJ'=Z|⭥im7fW,kl^QXmWDX?~`e;YU5 RDh|7DjK&$=HR=:%'V?Zό<_:f+!mB!g`EV'j5gC7ƹo Qغ7usQ D}r~~zjk3AT._DZV,;Rtؚ:+6câ}Q lX7[N9+rX NJk,ԞdlÙVSI&jf8/;[1xd]Qyק־z1P \ܬx^sʓJ4x)_L@I͎{M#/!l$ez_>ӷ T#>&o@C}KR˙t4|OƓ ~K~IX+Vjʞ[=r(nJBZE`słA2VǻqWX+XFFY1<(m MTF[y۰3. W$[UnEhKhEߏ$xΨ?ͧ$g{;q֪W <I.: jyF6r~Mf[登5=#Fk\$:RfnHd{ؕ&wHaE]!Eg.9`sayWbjMCNcȪpi{QL=UkXz$e7Yifx"b>=KNcǁ Rvx #r;ƃGxd! 6z`C.֣3`pzBQeJ1Qf}TъDқ`ڞGcf:%$z r~R])9tN'TSO\>6Gڰ2-I]93߶,o'L o֔l'hJ v4DpNNeD=;>**KqG6nxGgz6ȫ]\o{+-UTa]c7;Z3R3#J ~*M$"I>g5`y!Z l~(]_ }<)~RvsJCZڲ1@̉FN5AL|F⯉)$,Qx5. дo[@*!biMtSu`_*wp !fG=A_#wmz=n[gS0Y XSQC WJ `P B $ߤU?%U }H o[-tߊͨ+fbIf|DX/RLmgA(qNA Eiū(پ_=FK~\zн+b)ZCsz1 \ׅ0c,KzrPn 9KJnkWJ)j/,7]%#!;E =XYԍ9-Ak2>F & 5N\ AS/56mt]M9ТH{hp^, >B@א7 8_G4$w $hWA$웛yjSTF~@Q57gx1SqG@}Q(M:M!|y)ðZEu uO%i1KH:+JzCC-گҋg_SFDd y˹>>&d4fn ,r"̀ȑS2r7Hhz. /oH^ Y,T A> [cJP "Z2}7 x`"˃*K/NE*س#yGp!hpP/4'G}bBM Lp&U yC DP2pHZ+F*2D, ֹ@c-)ji3:0d_-xT gf̝3}xff]ǨZ?xg%7|-cupf:qyLPS c|6>Y{:n @(`HBcّ1zNrZ(dP%9FcP/X-+x pX݋QW2+z q3zSpP}J le9Z"r¤&]_WJ3˃d\lH|P򝸢 T) ֙$w$wj%f >͘3<4ɂ4y׫+B6%CS:M{k\ᶱ)ªBf-Y!%6dmj٭ elf{ 8qP2B:u)vsXG?1rM6gou:Vn5Ɋ-<v-g'LU6y(a1χ5sz#V UPWaPWI^VNdQ V9 n@L'رs*hM7 5MgRoh# u)du4Kݪ$zfbѴ?/ v(] ]K$^mwgG nrzҁHPӜ7IhF*8$8ad)W=ѡ\twQD[!2ThsѦw^qHC9oe!e$U dS{Z/W/_"<Y+[Ōwk, N=lC?6„fTBIqXԲCo oC"qh(䞨Rm$x.H8ɲL9cq}ea BMm^/VfBx/7Hi;ܡ%A*|i[ Ш$;EFh9=\nǮrEy{J1wkyQ?,<V{j:m-t[WYhq&5ľlN}U&U2eA'| >gՊJd.ޟonqϙ@},ʞY"񭖫te{EWU$xUm a=_*ۓ`SAWt<6'@(^V@8*gܽ뭅cٕe2걦 1&1-A@4W+~vNm!b'ю\fń]6}6AOnT<!, C~h(5B.t*.[>}Ͼw=D8_-|f,]!G褘p< 칽;Ә!:uU{ŘA%W9tB>;yx#M. ǣ+N'S W_W + `B{I``R"#G7(1%PXh"#S_@_)F훭ZV0In2Uvn2Bf3Ft1H'c~b94?tBc;tqhH& յ?n7RhbnNϧv|>TkjVQ|bne@F+p խ\P?Xp;K;!Cj6]{<rK%C;viճKQ$(LbD[ߏ ߜ!XI=tgìki)㮜ڢ׬.b&oW K0!)N/<jPi1. +*RF]?P?~n ҭv4 -#bbCp~3[v&" !I" Cv2VwP짟$JGiA@<_F2z8I9>1O)]w %[ρuβ7Zze>ܫw CB }F_>".DO[;$pDDM}:B3GBvpP8Ce=PZh RȆVr4n6뜙>*` 2+V 6o;^\DG-#X1"qA^@O!gqߔ^-_([Ii1JB>]0/8' tZIcI.u!j`\K#\}-ey]6wO5Nl|9MHŇrT̕D|l~ ?"2 $Ja(@d/0ۃ]Tb{~n5ctb(Ƥ$\Ґ|WGxuOFHX*<&3q] Һ ~ˮˇʗ R8b*2Sx@=}Γ)NشGHֳ2)6"e=_'όx!,^5foN 9CAʬԊ+n?l呝bG 4cw╪hV \Mfcp- %ճ okDbݭ/j+-EXBb# s c_bF@w- FH AĐ(8LѵZL9z.T+eLӘ5Nu2D%ᘎR$<aɪʤYyߥu3ң="zӟ@^\oN=d5uuRR̙_<z,A6|p>*{`yk75IruLnzTCu"yzTPfA􏊵J:<` ~rA_<7}EVV()GsoLWXln،!rӯD&Ň8F!\OGO״'B&*_[1xȎi3 kNcdpMer@+ 8P)N@I#5jDaLe5c.qBF`y@X"4ū#H rO˰bt ަ6;Z8@)%s[#REWhp$GMa6>qÎqWgAtmH"t%IZ"aJ?Z`OsRPmlZ_T92qFG\zm-y~M}twwW1~r)QnC[;."+/:siZ:űR 0;\:9!&)n+j/aS6ZY @ 6~h$~.0G4ހuKj LJ l\ +pv9NN.fMBHBɆarN[Q+=+~eMd~Mƪdv)%ޡq5aGO9P?GtAsuW7LoS0K/1U6tlKX_W8cud١3ER:{Ҹ* "V_HuX+'ȍ)/UNGwLë.j Qᦕ1' gK,Ó\]o-Δ3XړEwo{.`(Ozi)}OJf,?/ϒs(Auӄy$ a{juw\|* Bm=5|䚖8-0D8En|UN~-?-~XO[M 27W1@`8`@.>՘'˜ߚYgH3ʉm)Nb(?/~M LMSEPꔙ a&1%Hhx6HAno~ 6"j }ds|l*ƀX Nw9Kȶ>v.XP 97TRwƼB+eB8aۄ9;'.󐥖ɔXLlfmOjіVew "}FLWrz솴MPPٿONMBHdN㙖y(Xgc,$8yG*5&Rj#u 3%ܘ3eNО<Œtt9b>X^~:j>02hm*kʭç+6ot7o% S=*n=^ Wi`L})٠],u VWai~_7OHwSMqL'v5&a``q7𣸥3Iڐ?6QV炄V-h?Y÷|/?՛UFyy#z>W7ŠJX7Aͫc,pyjKBGؿDa/l)4UVۆH 6#P8V͗-GMhRZ4R;_wyN[")2JW(\ ZMg;'* MO Q 󱿅=Q xMrv[,g ϰ$$J hʎnG*&^&[R9ׯٛox;rki; fA(sjٍ͞:s+{ǒ}fOy(؞P5lbrsMJr)eu.L+Ww t-dk#7޸ܦoG:"ClWWom{P.-@ڈ%5-C^G9J=7 2h쮏鄺l]fsTds>"Z[\ne)*@͕6Юdb1Nۿ ,E"dЬ ~^YE*+qј7䆜/~\ĝ༎Ҁo\ DFK*'v9>õBVFyj105ά7El5zd onŊ䐑O ^k^*ZdLepW4u_Vc bXHP0Ϙ&n!HUCckOھN[zʔ)# V=G=&TKb_xz.&sRBS/ E.ms5`@W̕) z-/?*f91W3sHk:IϪ'BI+pj^+P(1ZOe3Oz>ϫV lĹ T].%mߍSW8ӍMQ&#LB(J1f:qt٦}R{Oƫ0Q,·[UTS12+S,<3-vY毓k1j &BʫMٿn(@o4ֲ0KJrƮk8&i9'ip.w]~٣TC h6B^)4nl+3 3<>:g`)K`.f 5 HLUHb'cmL*duŢo*e[]H9Tx,=|N*5eCNǍk_e{\ fcbC}!wu ϽkQ]`h Qd&qw7!I csT14Vtk5BzQvWp>dk*nu;Al?g<)LE?$Mdho@m.\` kݩ#pxDqn.١3@puzpaQ4l}%E?Llk?ԏ|x=(X oFS2Y53|Ƃ}K"*7 Y;\(v`F>m8;B:#o݂ #>ﲪJ_/)ďYY%9>vdj)# 1֚j{4 y } &J"<[|`3$9n=^}ｳSf;#1{ %Q%O/BJq DLKyX lS&4J!MujTvjBU cuiorMYBkOj+)^JCFd<%?3rd+rT=ͮ݅ Y/V?:1;UN N-RcqBw ERPdv!Q6$W9n !4?oIh_aBS56HZpi)CIH y:;X Y//]́d˓) /t1 k2Y Px h)Y|ɷMDǿxM$rŁޣRݠ^XdvaBs">L})L=\ ~C`K5 o!Tv6;).G0s6s 3U"ߓ})p֡H_Rz8U˛'ԑS{cEwCJ{ߠQU1 ŊD6XVQJb2Wq Iq71nfnYOIOo˴z %S"lBAoc8@V!jW(@{WJ~?mr0kksbnn}npWM">֊ /?B;1 BZsqV:$S՝&ˣ#<|F*om/b`⦤q?N4Rem=]3^%X^=9ÿ NIoeQĐ|niq%83'e| $S r7%hZW`/__t+bg0Jzt?"G,QF[Bc|S+ԭÑnV^&v9d{+Fhw½þ `1> a@ms9NMiV $jǠ>Rj9#W KGӎ5!dye[' JRONG L%ߦ Uy6Sd=Nmpf wUA*3 R,-nLR٪H-(G,{ëÔetf& 97qt Rؠ`c+b`Z:'U.(|-0&5W>&]^)4 k dDJc|E1EpI8&ew9ys|W+@Ԙ ځNr&LOXr9/qR?BCx gP-a,r87gUX^O%fF\ |l56;y U(3ULπ)R+üqWJGeC&úO8[Ӷ 0'',n \ǴmAXoPh3E O!a³q}|QxIcIpO2myߊ@>|}R M]u:N$)I;2^[V2:#"NXaA/IWK?4c{(]%y |-`zibDBRԣ<]Ǻđ9EpET@9DTyX x/?'#h[A9} VRfJr|!P?ԕtjVO @>tlAYU^5hTQjӏXDže9LG(U,XO>}R]=Cҋ^ d-皸7.!V͙!!tUuN VeH1 -Yot۞г4`!9MѤ*P7FO){qꨄmhV+/a0+s(DZDiY )O 3 Oh|?"z(ɐr]pߩMB)'\^> jOzl;\s''3ؐo 13JIoI J2umrCr|.'y='L෌rɩY*dq('A!BӤ{  0u /FZ**{|@YI*$z>en )@GC47%: "L3i~Mx 'n]?= `_xX?qW܈UՐkTX"og's=K3i H(®:",qG9dŎfE}D|x}x%=60r '`N/yAY7$u1_d>Hƣmc94.rT% Cy /j 5#)?nM#6PK0~a(tҌV5u əݡIUzϖثYM5Wn&ꙭ>$G$&aJ;'FŇi.IP _9ͽ{ Lz̋[3nN ½>ĊUbPAa4FW#-N 4O9窪̓ ~9M{gGGE1@u p|~찦(px#ẚH cVf$̮ՇXٝz7I꫔n92e63>_dɦME B?Hr+{o3giJ|Ft2,nwf7A%=nG2|ptC&qz+SCc`Iq^g (8".L| gK]A4F%a#@B\>ո`'R"XI:}А^:>|Pp2)Ȃ|#ax^N" O!͡Pa{jy8ݡUGI2wIIR8Oe|* BcIZֽ^,ifQpkߟXP*h!CVWfJ,QFX}2J槕] 0]f;q??#]O_zYeSwnDbMT=6vkv֥qS(Mj*FBYSx3ƒc?E8KsKH햎䜄WEަud ;"Avq'I<[:Gu;IjzR:oz)YϟV(nh hZ{J:vnNiވsL$Z!cOAؔ A9dO /L]B$G#!gd-1\2RJY' XƤUμɃl|BT}`glq9g3>(t>;- s )߶+T278^_kKovER 9T`/'c6OTn|t#nQ.&o޹/Eh-"Dـi~t@rmdD87#.Gп3R(t_7HB*FwjTq0Z*A_vΎ PWmJ]PeyUT&v-RF{C*:*Kؤ"G>A_ay$m&@0co,*9 /uX )S"ȎlhO>tƪ|`\ 7m~v v_ٽ~~2&};zO2n ~tyo9զVb%)\ нɻʸqKG0$ uH&aW41ve!yfHjW"Q7s~W u|y =LγC{%ʞEpM SjYt!3(dmarf/B(dEYlL"jC6vL:n!%ygmVlc!Ecm_SxyNGEc1mpTDHL]GGy]nDr.emӀE4m2H.c±5c 4S~m4gɜBtcET!?)7cN}RDG y8ay#g3"ԃa.UcEWzcP.Ӏ7]\mܕ*$oy^gss/k[Mbڧx֢`Pd+Ie2mr,ZILwle=:`5C_၊+iP?Cw^f;џ>gH՚:+mWj<' >OJ<4kv}'q4)*۔=}Q& }Q58$.ۄXwJtcE]w̟u2+%9SS iP5 M@a 8_ns3iا`񊬸6A R&]` Zܛci_~#:Y;p'o>W끵ufYx%1#"8) e*F|;uLsv!+u$^zZ7 Dm9= Bt$c\ͿӮDAsL.K2xQ㝐JO< Wq C戶΄xk Y;`EHESvй \A$n&眻4:5HcrEƬevH/c)r Zmڹ Uo|3|eheem xwբF?oӇ&o[eeYX̡:",x̍McVjfiNz|{bydt ˜{*Ţ%# j{/Z|%TL*nW7pMDM8ʝ: 1+J"* q9iB~5~H脘Dc K)]%5fadM,"ɫ'/R$R (;<_=G*}!qN JҤ' +ՑX}c75{rȗ6|pD]Q#逕ݕI*K$剳{q6swj_nl= x(q)f*9,ltEݶۄb;@ tVb!?OoI7==I&[M34qSfyZ-?%t/ƨz#//.8d~kF8NR]T|ˠ"̭O* cbGXIQ gWŗkkXPBq$MlƳEqyHXTH+C=y~&밦Akªe(:&:&rކˠĤː4Jv9 Cs..%xO% TljSaG7MZn#Ds]!0fU)M!_8:RR/>$l_6txg,ڗx56o٠ջfUt ֏;R h^IAP: ^}S^VE7A()Gfm}m6öWܦ. %n( aabTtZuMV(b}m/ bh΍9Yz^ĈQ\6_M_+CM_^Я3Hf}|{PԢWv=Ŋ=Gnh$RDxmBkicc<8G;ҹ E0 = ~<bΌhM`k qg+?HJ `3z $zo!vW j7 BE; ~8Ntp[> 8hs7( k|;"#씀S3~~eՏoEm?q RG3e *[S]Bg+  7jsl_6M7ՙu\у஖v1ώ̗DQZ3X I1J) ) es=(Ξݒ츚VF]\v~GTRkd?fn,MBk_X[-G<'>B%2tl)V W= ?3Q67^G>DŽMqó"`PX[?VMh5Z-bK Eyz/ `L݀]20˹]r!ڂ;Vxd QQk 1&8q{SK+6Ȕ-(x[wh%HB" fk:钘C|rvfj mCU/Z\@qQ 1NW'6@2I4!t:0?Km08 ,H"QbqyxsVMD5Bʵz}SOzlM;_aJ1w'Dr,˸ۙL4?3iw]@תnu_\Y_gQ1vMT(!ų֢;I:ki8S4 {T,3h WyβĐDaEW^UgRuVHH+a5DR$ب*BU䋠 އ*-L֧祶Q^ģv:QCo5rYc/u}n2Yga Mr\a al g, a*'ª [>Zw`șu W=Lr.Vﺿ߁43?\/w"vBZ] @h9I5zҏ:뻧 ٿ} 32y N鳮ILPD9[>A$W H3:=/{*'Xvt}CCo1}=S<{(Dj1 +FS3߬ɔ|įjZs"|e4hO-#|g ƾՓXe<gN|sjs? kDn9&Ff-C`8cNa>!&dbʟZ]A-x!뇤t%  k]`ݘ\@ěZF̅׿zq;e<ƣyx.QDm?RL6Ɖf  :[օfM^a0,0ҧKm)%QJWj4\Is-U<{|bEw)"h=yaNv͟}*$ʣ4XNY)L[3c/olS5hu WvPAxxD@ȇ?-Ns=q݃0+·vI5;Nݾ:[jp_jd=Nس-"U&CƘO)(])Ze;R9j![15zwP&pԱIJzRGӵֳ1A "|?:RVȐeX9$Z4/=؞eNu]T #w;8< *\mI96xI؉\hMGsռVD|Co \KB*08Ud)9·6 +ל .@,O:[10WP2`nNT LTs",u[ä3I36#5y }E6N#8/~F xCP h;^X cOZtھikrMG& |5щ6$Mb_Lh*VGj}0V"|2"n!y!e*{Gܜd3! |Zؓ+? ./Rhʴp$^;qMR>[} DweSLPwlyj*#1J7Hejy,fTx?cX48Pµ "'Jkb Zz.! gt@|^efT: k*URK(t;Ylq FGl !5&u0RAj6dQ׭C@  $+,K]yoD{-jC1Sw1YRpe*AD}y~t%lA=[g?p|JFb4]Xh^eBڦXQbh~SRY LH4AtArVZ GtgG][{[dx1Ya@`UB2rٹ'%KcM *Ĩ/yJ)#S >ߑu3;/u1VFZ|lm[M$Mv-I@H: X Mj#` )źDU.YF>/J s}Xgł.Νn /n˟Y #~ [{'>P9%EXL!/f$Vݑ/$c+dQ槗Yl*߰UX?C{>eNzЉ#C އWa8J!;!eb0 ,!HB^LTch(1O^Gk 38NG+58@ŀƠѺ;;.c7$ׄ~L-zxĚ3QE+ΓX!Vbn{`vh@)@4 DnXZWdz9"c7fH9b&S|+MG] Md*15D-a|⹎2/@}B`J~"?1~obNdP6M+d<֢H6oEM{x);N/UN6[aio&t*w_!2ٴt{%fZ(!=QMo aJ?s&xi\*DR 8T!9iVy@{AW X;6[0J̚#j`u{4F P$L; 2"F@4$ ,B/i2DH1E]AN X=Ppҁ dܗ.\_%Enb -HgjVn39Ex3Wyqh#eaߢ%k%M 8/Yqcph3^R} \"HXij !d>+%O&s׻6_!ʚ(;iWD`Oi-Ah{^>D<Ǯ=6"%l~|GO)04 :Q+b iCB| ]s/{5 L`H<Jl|TR|VA:ӽdzSԒ|Rc{6Sq/\3IlY]Zn ؀Pў>!OǷ b[ 3iٕ.%7G\Lٜ* nw{I^z~\J@~;vF߫apg_ 7ax^q9=ׅC!yl6ny S:^RߧISMA@#SlO[ *ΒЕ]lF5pщ5a6FzV$y:1W|!rDMŔ]>z%V`$3g qXwҵ:*pXbcSA7]fBbdb[$ˤiˎpV,DdF"̆}Sd48#vİo_ڒ(sIӸ2)./|%k`Nh:{݊Tyo&[K$1cb=1&i:(cerZ*k.җ-2u 1E%XݥM+n||(>_isttG3U Y$1WAo*5)L5vHC+|؟c2y:F;>Ud^kݽ,3_rNUP3ev6Qjٵ1O~z`}rœ'ήS|' _X;&@ЛѸEx3}풁+UɐoJ*yꇸNGKk=ERdF';7Z<= Zͅ[ѕbQ/] "iiSFӘ'oUԽws cpVmxE= Q?Q3 s=#ͣ=B/cBy*B/rUonL.D\Kt7Y `'{ S%E=WG% Lnc9֘NXKHLE+n%Z'šTӦ Yd"[!v]+,l;OסܳyD2 jjc{%\vf\ =:ӳ|3xg'σ$WL:6njra{:*IS< ­P2?=*yl>p[70Rpm8K-=]pVUTIվ/c]X8lAGZN|&"F:+DLuINMʂ!K]G_8Ł,,B}>(a H0H!s*iQr_8{?Va ńZ[yRӪEȝ%Ԅ0W, ߘMS׻hߒ{4t _OHD2BZ!$XЋ\9ￄӋsy P3ƣBvX7zKӆD\R{LϠZVpUM< _bK x距dr.-h.!]\@ fg{3.+D;|VG 3xw`o(lҽcvBZk%xY9I^GA[ ۑƠ?FW5~_jue-M{ǩpbה[02kKA$u^!g0]HNi ,n_ 6Ox,u:: }l[ u$BW\/ʡkItm12Rh0-FTo^xCJmBv/U/@E|n V  +oIqvBK"0R6[o1iEȱLru8-7$ei` SRr[JtW˃2*C^X_^ϢJ3S$6V-0o-wCj$M_/lz/(ʄHDg|D #!viOoîk%%*A|pGK9W5G]&ݢCN6<_dR g5&BkQMmM=}:X، ٟ!_JQ]=U*R"kȰ/"묵vjm*c mT)6Fh,l*_T̩Śi_pC:⇭adfek I间y{M,V::]kBkI1 (CuJ gr;ۘQosN5fxѰ`Ó FX\̵ΊނH<OE<yυjm##j.- Y P!!Iw4>֏8?rFGYuV06MRF2- 6 CCIʷyV`1tAP6֭ YEtE 3Lr(r$-M.j<{ux8A814,uQTh.Hl SZ#zG Tr#RunM wrmN Tr( W pP]%DjIlj҉pY2[tCEv#?&O5FUSUpr ՅؔH0'#% lnpo>/5kUeq.,XRnPWFJLy@%-B]ִ1EEy 8(m'V貼۾V[bu7 9 vLF_7@cd;]c 5x+۟{o9dqt?6*ھ5"?kgޚGFGӫJfSx.W/x1#H͜|EiK(1c]co vOlw=ǣqzBKdӊwx>EfqΔI$ps6?"]gbup6alPTds« _]KAHJ*Fm3jo+tt 4dO\|9p0`&s`qyۧk#1[2S;-pydĮ=Ĵ{gX|2iCB 3+R:ɣtK%ppv+3Ue?9u$I ]a4%x;ncKI^V[5hO-d#J_HBOgc46SBKS+>_0<^3h#Oh2NuIi(p/E+Ὤܕ+I~U)8 Ex ó _Z]*ݧN􆗕4Evh] r m/(%qvkϭҭ6M7)*1wmF)LՆv7h(`>kр$pZW8EͯkU˴ڊn,v[{qq?n~Ԉ['+ʣv*S4T.$1pҡŻ wVgUNB fE~Yْ19D嚷z X3劘5AG@5.7sN=)Ge@>9Q#*%zM}dmArf VBئG'k\} L1ǕJЌAN]C_*5eOt]skSEC@b~_p! 60Mnk7#,_U?iF*# C8hQC$&* IC Qmk 2*pGI舯a5#w,ӱf2N->6J)Oc3(Ǐ8TŞ9ѹԪP#O+u]-\Ni ҙJ|sk V6 S~݈R Y+[φzŽ|OFCdźKTą*fo2%SeѸٴHjZzʚڡpYW7"b l#?B@{&w+ q ;f~_pyѝ.FGt: r#AEEcN1~s?i9J#iNjK ANN2Sdv ź<7m^ehriO׭^ mC ?۷k?dLE~yJ͛`1,KG}>1۳#EMR^{:dzG#C 6)cotB=;N|!Q=(Yh)j .hnQ3[+T j3v+ÝTRN ?Koe&'S׶Vks 3Hca/%ծ{->jZ`k.$영n<0ZI&k An c'iu*@0=;/P @̫EqQA9A9nPR uzٙHphd_@.H\ |?﹒+q卉5BԱQ/gԗs<};g>-@*, }.cGLՔ -+ \xئC&+sÔhiz}TL_OZgkH r:y ,sZLթ|/MpG׸ctք%{lZ#@O_r=&\ebB_.If?ݹ0zyH`8k0UN^Iͱu>kp/Ou8l!᭛rޥڹLP洒QN7ƣ;!<Hf D10yn0{yB]7MgQG  "r$s~7VDߵ䪈Ea*"J0P-XႡF"h(cB|0iP2B ;tygʬ__\U3e(&DhF^ ('aNjX76J$[%|9Bq{?yn?+{` '= \\ɏ m8)O/8pNDYrQ`M,7Ri0ST $FOLKfbM볖q#bv0^7jHaȎLg=2 JIB+O%w$'?9򌈜k4۴$ 墻 Ό }&桸vC$70đOS nͽ.7S'SZ\H.;kKF/gk78UKdfжi O|ˇx]pn ;r7eai ˃+\f}gI߶W;\ځ#A_~Ƌ9Ʋ4 i0bش"c-ENd" ICFhi%ԴUS lDn0ܯƊ^Qeg GMB~~o|, 0G`\/B(l's˥ )a᝴Fl6.Zo>׮\äs7O baHo%@f(0MQt|ƉmJlj8J$qpY@.:u ^̴dNuNA᪀σZ_d\ٍdZ<rTIQq/"R0ev?X&b0H>~~,F/#LǑr<WghWԣA1_:!A^cWRuR9Lekޭ3ol +CQ#Ԉ}i8MlӸ9vITܾ7| # uZ3Pbn n$PU O>5a+|Tl"PQȱ.8P7@sٓ<9Datm:W ,N#@&L3;&#6f,BSYGbӶyv&f/[̀itC^d,n#\B8)9@.6r(;Ku'x !+zQkubTCB݇lN[FE݅}OP*=`e95u8%q8<wh9^f&x |u piTUph n7#cJz4HaVG~iCሪN  -@!qq42@aJ_/:u )R d=/yDe[r2!QtµΒX1y@#{p5m̌DM.2aXI:]5o1X}w0ӹsIfcf_#heUh; qDP6,s62dſ(mXG`Pny鋮N0{b@T漓d{P~Gq []sp;|E|{-JĔ6 =N|8) i&3AisSF̪PB7X_H3f``pLϫ< ^I!JXt>#g1'0!.BA~)!tBz;3|dgUF<5N(CC_6{f E~O;F9')ax<(!Fe?TC3nBn?Av ^_ʢ4>\;:ӝXMs\1>ɼol@ܢe; P7I^ER u!C/yNϔy (ĪP<458NRsC]U¬˸O5gK)ɺEv5=̹Q:05B $?E#SCQU3RdU7iU ! ]VPjN5N6$.l/nEAr&|a4kOɎ3W3V++_ N^c,r%6ag74ܽQ@vn\٧j-͗|6-b7I-L &r'@nA[m TRw$8w2 fpE'mlݴNEN7A~'IE3ƛ|c4NqPofK=\Mh_ vAC#,* !LLr#c5,i$dbpdZyJ?h8'Y12O\ɪUOJZ#rw}e0NRMGK%ẫ5>C M{\PS}Le$=?RZ^2>Zܨi> ig=2c".l,8#cI}LŮ2BDbeڣM! ,/waf:dL`NVb|%HDO[),ͭfjɗku2n07UGWOZ,G#dT 77#ZZdR11)gy7Yhư7'fE5 %u FkP;#Ruc\eʥ}jij3~H,?S| K͑|\ )w|! ް@XiVŖ֍@` GC&)<)eA!֖[A3xwZv~*g NcN{ID_|^8w{igDzĢhi@ΓM sQy`9.Y=FT||ۥi1jkdBYdCgnV $ Nέg2TN3HӰgB.J3VCk^XzCLS4"^;l͗0އN,CK7k WSaZH\W22v*vwD6\yZEs;C$Q%fYqm~nT& bgP 2sːR[+{d _ye(3l;!fÕiz+9 ,МRϪG>FpfV)3b"z4 "1bH\u^_޲E %NQ BBRv8oϖɦ}Mh.ډ`sZ(X22܋7ߣd}2ב/4xH@կu]RiZ%>}_% |~=l\[R1j֨Z@@N3RYfAD%o>x,9][d{2ZZދE2PoG)+J'lBף{`LîD;V?y,#O X$-rr I+G`6O"IW'YdۚAg3D!Жqf[,kHiS/mZ }͜2蹟Ki t8q4mPKS<[.bY!6 H,jKҹߺw, nazl4$ݩj:4!'DF5$5d·΢ #\ UʨN8gAն=ES/f)gydY,?9 na[plџM2[D_AFW݌|D;9\(ݛwOs{V`?"w-iYTi$MD&}A㮋[ Vt0+GMCXa{#&\V7:n)f_Vok(*]₥yX fB?!sH\- ʊ]RФ:PD&,0_>^8}!,ާ˲LyU^/^{KY@٣Z Όv݁$ff3Ξ蠣?}8F{J~}Ew?Ou%օ6fz笋J&> pfL!_qam}IFWe % A E+ϻc~O2T3@N`+t6OI5P se+DWvkKoeI;ǒJ&^76$gَ5,w1'o$5`ADnjY?Woi{5\h)ZX-gm+!o.#wE*dih霸̄Ȑc+#:WZБu.,(Y'܂G2g3ΰz`>+{WX9Etpfn/#Z韑sxm ^F+ lLt#۝ݙ?TH! NY3:#EmYkYDL1 x'\. 3cdœ6SFEg /X ûՅMďr2RX8Ms#a陼8@#wE^;@Qľ=,' yJcV|CE- +#c%ܾ tn!eun-M̦ OEaIF>^QbZc"o[{q$+iB|6;N)"Ċ5c}# CěaE6J0%=&=䝩˱;da0y^4<ᔛ7we[?RG3fG$TȪx؄5 0i$;,-ZiN!i:?v(ى@P"0olTB Lq$iV?f,93]|6ˇ&C j{,eAN)`p]>p/ !u?6N|=) 7?|(Sz a%&'7lE̼kߍm~W"׮B䗛;h$WY$xC bk 3 UʎF]4?l&U:A/#jbq_|_0<%bdްX߯XdİN\-|zXH6YXܗ;8EI=#]j3I6֊gdZ2 0RɿB#mb>@C!+E㍲4`h:MtG"%Z9HCݷ]}%Wdyx.k$_!&7#^04k=ޖ0 7:4DۇIѮg@gmYH}O8):E f9,XaTtRˁy!a73J:TZ%Ǩvdb GV\%~ -+wDw(ula,hvNoYcQ.WL @IvdjuKDžIǢ02"kվ)m,F'% N$'dGkX'i@'&-涾bo(J9AQO-ר3-7ynREGὢ:!Ы>?,ӻ 5,[UR5AYIUws+XS.!"J鉏/DVSd邾rHj| $jL@IϯѹlDM0Ӑ!h9~Du[+K)ȝ^jȿ́<ԈLl> PQM,a,7ig#%ā`Mq.!7U'$"O-X}>Y_gw~<԰N [Bvpi~^6򃇦 D\t4r A!W]bFd9ppT%b]Be>gU"JQN($o&U"%\h]ェR ScY6b."(hįd>-1@RwEr3O{j ~74\MB*NZuK1CZ`3 ۥ $oͥ_hr<ڳ:C?Y!;^ʹN9UM퇐8^ 5:KoԈ-R#eF16P>,NM66ok!n|ºNAQ 2]ޫ߃kaŸ*MF&9m-H}*C<0`x8SAS0Gۂp Ry$!g-D40lj17H8AXu_0FuwXUs*]RmlcciKuY(EϦ 4PkR1t찧;:Kc'͖o p&~U\V멀" ]aBN).NXvPHQ&Y>۝4OZ[;Q{r4 ^3NIQ<L4S8jVp !wy,Ț9 M-Sg;'\Ad3yH8/ KXwG`wWln/,Qp5kSdaG=lפ/ oh" ij\|Y7,u3_`D3t o0B#%8좺? Io&V^0*v)joE!uȠuʌwj- 8Ȍg6+&Y߸/GW{o[]/_W3ƛ/"Յ8 fY[pD0z[Bf k c>"IYcv69hx]]:6q\E,jn; 'O!јqۜ0p2PV:*TECHD/ҧӗPFbՇL&VV'b.AjEhd8`/sۣzðkWb[@ X^9[}R Hct]t}CO%K]E,U"o{.&tt@ h*:3)} qϝʘ8h hĴmD^6T[ dw1Dk_&8JZ`8Zk#3_WZל*cBfʳuЍlwtM@YiٞBqB8Mmbwp'Ψ]m-hG*9;X:4ޟ갸Y+vg>N֐b7K:Y)?{_`#!LIQWG1XtadY VPHusAz'D=%XjM<L [eQ{m X<X-iF} KQ~qLv FtScpL//D{{ r9jJs!r+d\~;.#dǝ~ 9@Qo ښW4Z-Ҟ`V+--N4,bfD*ܶIdEٿD+"p|zQ>Q ىNƷ(31:k t6N I aGau|zD:c;⎧UbӠ#8F,}PfiBP,[oo@6ܗ96oʇLl9ax/Xh;HeJLeԟjWqLqEݰ|iiYGەu*Swʥf o2vZsSj|lUt ¬ZnQi9d}~ݮys"ǠPP{Җd 4KӚ88!òĹ=ϢY f:!=E)OI[t![jF3GD,/ %c|ȐM#lG\N !K Yp9[Hwaķp{`M49%ͳ5D`-z)rqbE$Cz]v@NH|͗xPqˁycR^D!r<4MߏI(Ro [T9Aҩl7;ܤ`?0yN c7$}.J 0Gl @7 `3q,(`7Uy}Ce+x{(ʍS71򠻄KhmpiT6FjftJF3_VyɱI]Kxz=0ǵz5[y1!,q_y |Zr0qi}t1 fT}1=o#j y%[Buslj䎏n~}p˛p 6:Wyn_|B`ciNzK2c ]$LJDiIW$ndjߕ_WΓp.;(')̿z) 4wmB):D\&y$ |k^g G"i̜g!3 pxhmKB/bH*DW=Veɵ9T< c?ZNh>ɤ\: G7s[r<NZte8zѨ=S Ӯ3ڕD}:AmvY6j ٠p=Ae(n@#.dW+e 륢UDV%==$I1|ykZc~z|]=HE묢fNta%ymB0Xt%Q)xBrIV! |gԊ5*jN!ްgr]h6PFC̰$UgZJม%J,7bXv:ǹ: $%|pȧSt39oi*'`IuV|7ٜeq"@#%V նDžW&vD[wj,wx{8 FQx `UypN@Spb"iyt8]bDpٰ8cHtNOD ,gAP ,&sp|PEb,'.9L}aMݸoA]p̊exvi]B8!pbnAkx-)BXm]ʽe-`<1yZI^w~9;%Z-Zϣ90Y噧H=8ofL;f<*ozR'mюL6>ί*p08E77+gDY2͉63D["I惐l ł$#L;+KNTFd.֊Ķ{1 ˒arEL ??<] ˫$Q{AxN|6i* -w >\m}k,xPlw.+B -+|I3%,M&JjR39s(A+j$R(g-N*]S{ \#wkvL\Y)pk‘+EE"]!T4,&#,;Թho!Ae\jduCI)5?`8x]ϼ^n0&Z.R_A@pL7ٗb#=^J_I@*.]X@}HPzMqU߽:΂sC60BpӤ)Ptf֡εcZr(;pRmOD;ditZwf lXoI)# 2;sؗD*N!J \DTʌ~x=LT') 4+:VWkN3p ![魟ed+[s ;pYVwx/l+DT7pLp_%}qJ񥛷0Js ^֔g<8>^8HCApnrSl $?Ekܥ<;5 [/nh*N,wDO}XC>Xj5p߶fRoQuGcR۱֛y¹ Ҹ4Lz<]]&Ewyö'yaAìhed/sY#т + O|[:*b,oMSz ;[s[˱ -n'Nxx,Z)5sy!ӵ|s9СgA2 rv vAR*|:OѰ-J"wΎd N .K wk;YOH$4 K2pj5iyz^Z,l0KM>_kl@y#k/u}4$e[\f;mDYPّET0޾)(Vci,TkrjsHr0f ^f;,&0bJ(OTAyxp)e+2\m1mF)RER($H[0˽A*iXGSd OCD}OY@&erTjzTgeq\{yХ @NK TEGKA&U`d >b2Zy;I%Șv'Bx-BAyr/yF|q"[)_5p.R8H,˻n{32! h綪Z s9n$EKP#);H< 1vM=؉Y!~rԄxM{є8aEal[]RCai"[DU+'),YNfCjS,'ٹ-V~%f|7 %us;~~ 4 cF!hx)B{iߗz*YV9Y}|NOHs/>`kI׋%?YfE?|<\)1j̣al$5J(J(}\HP>؇w, EVX}.+`fHra/y:"#x8Yb;qe_UFaIpvG謾%@yTJNaZ1p `F$c;3R ؃ksV fH]QPMHz|qj*ڽpȉpQ+q 9\Y<;`%l`6 (!\6NNƚ/OvI&oaMՕ>o§WkwKgwƻ~;U n^rOjmV݁xNq2Cف˩Eel@_ &UrSG ^f6T,+Ԋ*AJH%[ A&v."׍Wi$H8h;٥ߩ<ΰ,NhWc)Z#^h=$~1̗}a.˩й/QCMN(fYt%_ cr6iei`UH#9Dc`оEH*^Iy[3 W*Nڊ&bZCY.ُb,9⫿v\(=VTqHoFGrނ`*4fSQo:"?(3:z ye$+o钢9dMPwZ/4w24dT?Dg2lOώV*h)+&02ml+}$֥\D=Ջl% -mؖߚj[6t9hgt۟GA'-N;8#N|g:JWֱ>~s۪$8ȸ~ 0̀zqŤ>e9o{ch:8 o+1|§x9f}23oWW6|SzJu'5%Mcm0AV.*idl-r7]A<],i6hw7Ԫvx'*jv=R6>7olX6T#p҆fV[D7FDY{ ࠝrpn @rCҰQ`$F`TSjV櫄Cw$ ,-Sm8f )pΉLeqyZ5o\m*,eͣ@awDGY|z&[C*=kVWhIk, O1X!og2# O7\C(Rh:҅dm81m\Ӹ cgWhî }%`|_[ \Ÿ9mL'מ[\3In>l+T#2'WwVϹAeh_@A#]>$OJJaec;746t(M$)YYfIEyvC|0vf:8f$SSaDg,xN-AF\.}!+:g aHCH1wu֔ɒ"x4zUwOpa#~B&$ͺx߱`qm#VUR\O!e<;lX=22&%l/ŀ`¾mvME\LKj`H(o,DЀ{%hMT3n|Izg~xlDl,vDa2h$Wŝ'faGE^bՈ$j5y])q)M4@A{1exbHfH ZQ0mudNKk@C Gof /Q:;#VnfYbej^8 F|{jVG~~ѷ2ch5w+ ~>iYrXc""f-H6tWZ&VL YDn*^>EAVe%zRBE WŒ7ΘPʒf?5Of/Z3f#l@2z!ZmVPךD㌻4kIZ~QʫJ 5] .;W ʀ},RgX-q}=|%Xju"ȋUy1Ie 5*g89Uk) 9RJocs5{lW0s}JTbbDOڡ\V!u_&( :F$#EB'wRMc?fp[c%yD8S.YQ2c]nU;՗ٰQL`p'r54Ba.neݡy'̑M~ݡk[dL8sO?v@^*)B ,-5`yP xK5 e].툷b&lI?OV57ae>D5Z5$WЛd0GG(I6g@K5F<;{*"':e:0_[pVINtd҂ ;`9;(bEH<RB iQtmZF4$>ܩHiѪ >V@— HWv{j0΃fiv{l#MMROLs#,ol0p3F[䜭epMBu"k / QkdC?j69%S@ċ*mŤy`h}@'R֭cl,?k'CI@WM*(%dvPnOE@J2"ݳtaqW 7̶)vuC- ft,Zr<.lzƺ`#e aFcqu1uܫ*A.kEA2 e. c&aQ7cf×8`z4wNHYҎ֖y{T@L_Z[-' g UrO"Mfa:z4Ξc8S9Sgn}!GpC+"oֲUY(}F~"8h6BUɮK!bgPJ~7ɞ:cx0dS& nd[u$GXΟN USXe΢iLiul]>n`[n=M mE$ki4!&(b;%ޓz1g;U|ar"Sp[6#KK(ۆ轎V3}aDэDfE@IVȣh;l+=pX#vm/5~v4fG!g!k$g,j+9a 7?\/E8A}~ z*bm-n5, ;2:9 Q_8S4-ż<Xɣ !B+gCmƠaP!U T=֎o|$m\E=q!C4VMi7@|e3 A'!fYMkėz;bbx6G€Z-7~µp$ >3JQ|KJޕ)˛ oFg*!RbGGڃܯ(\.{ejXeCN7v9L?4p4] )^rJaIz@=<3u^*֡/G z!+i/:Tue{wZ.bYRtc};~h.O]Iڃb7'Ym @fHC@=/1k^1|P\q# w)p(`0K$ب IX 'ioP24bmjrZt3ڥƷgZ=2q")@[wt"!ɫtΎ\bލGM>=V&L<;3s߆Ue{=u2?̸}evQye*%}ׯDHbh!SX.[6>ک]nˀ,Z p7J^ (PchATw;̕%A,z ;]W#/GiV ̑b~FU~<$z!Dl|}dPFl|ቬ:ܻ8۴8$ejyL"x59LӚ=Du7R%\$ђFA pjɜcbiN5愩PG!{" d"?H/~U(.+[ 6+^ x9gVzԉBs g]϶zm9з,`k$S~#RnbjsBtSa)X3 il!WV8"+PjG>0KQaآ|K)f ~D+S&\VK-qw, 6&v/Cך^5$NNy}-P6mqs3%\_$<ɆK1 64i:nҚc;R,ב{2Gf^b} 1<(i a7_ڢ@ۆ#JV5o:o-aE0\M] /t<9~֛a^өV.];|Ǣ9]Dbb}4R>|F՝=ppnz"nHCXS%@cTdѣ''@q%[=ނ`q*^29lƃ͛ip’!!%ZL xn=u,N.y:9xaS͑XgC+odc\p5^IG(2ArT)du_{h}"wz4z&^zgfl+ TFWtqCַփ)SO F?:Iʶ'!f xuNS#Kec豱%;Z\VfF<<}.]І| woLdkMAC~" 0FjxwnU#}nIu߰*[In_~>iq;&[_BJ4o (̾Ax W9fL_yOEmw}@4D'/J/HuHt:l8ٯ(ɡi@%?*?;11jt@/G^흙vYHq2U{ u?)CtɆC7*dtLX0#N 5eهZ'3;B|%ݿ /:wj^eO3($ȶg8|+QZijd+&w` Q_8^(D/?89z}sk6$rnc"Ad 63reܾ85PI~:^֏6LNUh3 &z$L!j .NO{r^ s"rt3#A*)zu^k"o;6*V|=p{Fӟ-h<x˼YTUIYbseZKq~MlW?F&@DIG*h澸IQu<;=Q~-4$by}#^C9lZn''Zt7P7]BF2hf}0D-ɽ̉yߕTod7VUPx4Ϧ%a&7Byx?[ƬO@,~.n/$c&ge0Ӄ2ϼ$B=Fs s{֣#,PT26W<<@2vk*zLod aAQ!}0 +Җа'7kAxCZnj:UA4x6W_*2=MC!T䳬_G`CQ&z_5gĐ)fd"7sEZW֓7m> 7U&x0&I0R蕟Q]O,z`R'f˱U!ZԆK^F{M]JD\w%}Y6ʳBsB>ષo(zrhƵ$WQ ēXotydcM& -;JB?qA- ]$x u:!@ W|&ܜeP9f\c(ys#D%2CÈjXԜ?l\p78Fՠ*?}!1/<}qbfo$硥>0#Q`;0*\"` g?TM, '5o~ bE5aٮ*abs{4$&||;?HD+͗pIb8؍duܒ@}G =Rec#"r+d, ;!LۅܜOcCK!AU&QZYU) o_pi#!0q8}Se8$wvh3p)xNiUz~tqb%Et6 nAJ6( "<8 RtjXgYކ̉k$}mv<2E%㙶j*?g[U9T_08¡0<|<{9f'~8d %`v0q"JA!ٗ}IK85A3d$DoŹ X}l/х}RQ͙1 AtL| ?~ ;-^GESNK7(W EW8+jbG=fPN$J ~I|^UzqDm6``BUV@4{[)pʠ;k3p6?/:GUx:1̰yej x&/xJTЌ+u/9XJkV'eE‘)Qi/ 21g<(,vEw4p:ֲv(. js4$RpH$P9TEѯ߼x/ ^Hd 4"D=SFc}@/}U`ϧš.GMU;w1h7 oyʱ8h3YY\+kwG%b&:fjjJAO) 18^SKC oi-Y`]~Tg>eGMz^egɍ (,B 3٪4_͟'= oJ1U/բt.}ޠ9Ŭ"3Ys.g5oP$tZ/eK=Vs ٱsx{CG@iYcSZek U_PPPcM벪/7cD,!- '5\M4b#h 'owGO,e A] pзu \_yRx](콦Jar+oUB7{{4@٢ҞN2,=CKD]S6UL ӃM;=bQF9fK!L! -p{Ov&o"i:xH7'O>J˂ I#JHR%1%{ SFe n& ˭P`S5-(;HnTL^2%y/T{Ɗ>VHOO4IH߭4TfL.´:{u~۳BhԊIC!P V]طkH~VLqesNtٞ3Gtd 3䂎!>%JcvG0wHyڞsUዴόBi,d`$‹$@"UUVyԉaPRuLA-Lܧ`YFk$nk}\Bt IGhk c_4Z- *ݢ+H O'9gmhzsf^>yXa[#7~2M >V4bol%S<\i,AfED!be_Y5R%)T6(R/lG8{C%uΪhgrRd.9C3*=+U;+N؁dȟ՛!Y~8 |fpy _KK&F:Q{\J+qR@uN+1e/u 30!ٜ<>w/^!l&> =RgyJVltJ#-ThM:B!WNn߯k5ʙ3P I MD2Nju"J Ѝ_2% J <癲CJ1=0S]"i}Os`\P =pXփt 579 ]4>Z(`[> k>èF*j3p=~`/\l%$^ [JAf=9df iuH[nmK}s8iUd2=oIz?0$^ɸ3x"Ȼ_R+;^R-:$|ܑ֚Jbx& by>܍Ail?9[=]rpl'.?jzҽbʥ%N'Nː8H<喙;,M̗?=cZW"''i4` f*Jѧjȯ cy2))[.Ϻ581mxg&,MЫ<by35؈cʝ曬5i=.vGC4rƟoZW`:<6pflP&S.6=n Ǿ1l5ٔ ]1JG q"Ov)i!|SXedjNO q90C@ 7lj;%,Ĝ #'较#U9 f.Np̢S<ɮ!08q,mOAϏw9?C޼c{us ;rCsDfNɠ8pw!84pEa]6ygJԳyVμZ1a=mBT[: Jw3ˋg|{[?{w6mϯZ:nxj^t4͜[YS8 6Tb-|Fz; 2.Yt > < \P蒿;}Ie h&lzm= t;%h~' y1җ- :_\z 1K;*=KA>L}p12 %no~(OOC4mꓫp}q-0Vi7usfWBȜfŞ?ߟc 8I;c7G,cٚmljO, th?vR"2~ZL:5oITDT">_xd{'ZyR9|s Pm ofI|qL:u~TRĤ+!wZaqS'"5`^妓]3{?t |p95Xȕ)ӄbd|pWG# MͰ[0 SONpsSvɖ'ҚtE'7W&3GTS/M|_^yTX4 HӤ>qfUT-} Wo5H-jY1ޗ2JMR(e)޿1$\(Q,ژfz#-UfڼV7GML.l(kw}VgqYJX=ږ WG(\W'+d L.ObRi'L:${»ڜn-O٥Xpj~D2FE%LtL23tυA^7E'c>mw*qo7m' VlX9A>s/Яd_̜\'n\w}X @m!Oc0)汤{*H+s25#٨ٖ{'imB{v@;;M@)U'ыHS#ʢG-j!~E;3: "y?(Qd8B5PN14cBAwawf[~o(m Llil {NփvjT?*U5&#P>+8 hUejlZ=7, M-ut׃YÎv,@>rm_G;ڊj b*X C{p]ќUQ@WQ%*O1sGɮpwv [LUFCsxWy˙8,O8]t/mLl 6I~!O=YmʖcH vx2tةR9V^_,b|+2H"D[NL6k+ٽ/`ceCsokE|S^.#AS̈"]8_e6_|; XzV25Ydw$ w)[׃|.ۯPhE RaxC x!m#f,{`z~Elqv!$!֗8{e^* W:Kbb%e ~E:1T`cm CL$$܊ѝ]1<0Eju?c{=pXbF#[y8qfֽ}[5ݟzJy@hk8Ղx2ZÔ"oK1F X3sU'$k*hsN^rO2~3t#QMa0 ӲD( ݒW03HŸhH*YNB{s*1=+_Q1Ud{%eV%o u^ޣQK`ّzqu]β~z|Svt ZD eJL+fB⺾#\z>pu-(בܡ+*L~c3I V<㩢ho>$sȽH:[T3ۜQϚcs1ԢҡkSȀ--Ou"IvwiOlUЅA&j}ӌ)E  y@)ގaU1?\]u׍kt}`!Sc*D]52!Oȥq á<דf1( L=kRf??{[YT0(Z 0euoDG3[֢Zk;*;ձf`D%MBK eɓkB- t.'y-~gA@!3nE O%Ӡ!Cr  Vś7;DBohA=)وТg,녅ҁ|<<л##+ zk?X/\Vvb,DFyn'w38*-(C@-݇tV 8~la2bZW fT^F709d0u^M&U`g{p?~|㗊uY&7xngLI"~lu$=Y%0uiďZi-0q׭@97A_,VXU}bHNvhZFb ĮGE"*)◸,AlM`qiMeȘfb3~ԩ7b98J=4?R$tMx~u{H?k:87ت-^Sd**Ct߸.g oƃ+1 EƟIcWߧ ʈ-T=Tߕ*SoJ"#*Ǖ̫=rH6U `gEd6IG)]!NV;±kv>Z\#>J;c*},j+H7y'ҵw.nkq9Oɫ4!+靤~Kܣ#خ Uwz喚yM?{t7و06d*'fR+,]Ar/iF$c(S*3 ƄW+ `9u x ˍ&\ga(%!0XrbSŚH%>1HK< ssc})n \}ɡEI kJmY_7xK>vl3ޜs9Yb۵$2Բ˅2zwA|k+?`rEqsY/N0YT1XT6ן'iF2#Vw0z!0Ua[ۚ d jh&<8,1%vMݺFnE_5 JA3Bwx\l܀x[ [ޯ r5 >_}ѩYr|ԟ4 Zs YI,\4U2!*C5Z0 #zg4,QE{6͒FmRY8Ki#ii f%ົэՐut<%4Gkh5H|`H1J?Cz- ϱUnȂ]hps=;nOzwi*,dr$9~8 O#B% Cr׉mh _O^{)R\-܌!k HН^颚bq bCwF#_v M&E<ẘrWɿ w_R(m55OPOYzծuj souKbBg+L[y+)Ucp'0pꤷ3 iѬOh&.-c3Aa~w_=a~CRm4?'UD@g ]1 5@U!}'H$n'RI(q3l#qϮ7m*ݡڏd{"JxH|eE{k;Eېc@u"\:-B. ijԮI=2w9՝P81pej ETIc=F`Uc ]H >Ww<&`w^}?A՚}~4.alm&FU.Zkj~ïf1#H$ 8th`XypVű3d8:mˈG7 2H0f9S+5,(xVdtC^KaqU!T O]Q+=ݶæ7~A՛ 1@>M/'>;Ur?hꤟĵ=]A.eî~H}撺g_Q+ ͧ _blk$ܴ =esvbVXKilyMQ4_9eBZ?+<6X"Npxq/E,9SNޣ3ni 6#(ۧl7"Q|>!gSjLWNH,$^LӦ}Tk`b7?-yk) A0ZC5QHoL& mC֦[?.LXS钍l3e6SUǰ .c& EuaDFSTZFu7Ob{HU=Z:tBa 'ُvʍ`Cb"PA,SS#)?PL^UfJ'AErh^g|\qk8ߤ k=, [AqT|"uˁ#|<z\Ul82#>UB׶-WO=yt圿 ́nϵEIќU4z&Sr `X135aɋ7=BÒgBV%<۷Z R*CiRǯTŵܽir!3S;1Ao>nuP/<@Q _{9fU]x3%4ƿ gzɠޡr2UxL AQ/SLO<0R3j@=%Fx> n1ܻC; ,aeǽ Άԓħ_c\')?ڡSn9x8q8^| Hm0gH߅nQC@\ L{\]r.KupY&~浯J1KMyiԉ]+ MA^nYe!;JЇ9$@hMkڻ"^\0bʸnypʏbJWGpNKFBJf w`͟']-p, [ڢ,VeN)̂/1tBSV74,(m)bD%¨sVܑF[10iEcapT\Z)\bzi*;­ykD::r` AxW"CDQPc_t`⺪ ^О;e6r7/I86,d![nj|qo]H%b  @lE}t: nd"nfƦJ#e.o:&} <p zy|(-Q-],#t[Zglެ+:R5˼x )l~(-$:*4^I֡詴:k0Q8n(X0E,W兦InȒ`r`Sj᚝-[ Hzm iL={(un|w6I.!o<`8?Vd2fJa3*  0˕Ǡս])-,(tEFqH2E m|v)}!W2/MC4Hڶvɦ2䣻;;d%m N=0MRh{ 4TFJn!-QQX?ο񏃍z&vz,AxbD%nl7 D/Z8bVi9!V3RVlqxg1q 2GWC@)vhb贑aלPd̫9u*L;+q_ Ba)1&O& IX~:K05z{-/ y"4(-P<*,YaLJ[͊c5ڂ qHz/t0e;&sΗX?>, /Dce'F ;ٳgqhzb;!ޡa H,\b*k!GErޘCRJ~i<..wsz@J[Zi-;#M@5r{FbBPFLRGØÄWOcQc̯S9!_(c3s$\&!)9)G[Wc0"ZEd4i.YRX-Rr!CbYj$arBK޴X:QcUhArE_4"w}:zg v9Zj 0(,gpN?f/xUQR C㑾ܵMgX kAcDQ=v%>hMUibmF~^8/75k!ִmfCpΥ䕈rHOPjW( Hd]v<%1kˇ{baLD޾J~ШCpnPPJ »6sA vWr+Q]}&*HCZuLvwtpb4v!CYе3":˲\+:'%S v<T=2pGCkIϬj?4 ]&7]+N);xc>1kV4 (2"d$,T#ʊpcg+T7 DX^\d~}R[P l:zY) +f̰QmնXץs W,Kމ~uD8&!ڤPx.<+c!]~愅4*TQ ?D_6z}JUg5!F>ؾ$ʵWj* uq nLS0 V 6| |T ˏ;0nː, 9W 2~$+UkkHWIMVO)/j!!|$|Yv{bwC|"myUBլ4Pʰ[׋='KjBeh%M1D"?(#gDd-鎞w%읔FON4 ]ʋRǏZi4Mvu4-kU^/ԛKLjKS'6 l{B33JK٭&<ѷ%&C9\.>)1 KLNe ']Se?(=9$ *D1ZֹV9Mb/2ձfNnZKq5p0 B}ڥ7AZp,GmkM;OQ5%d-ᐔe݁SSllWs.:aC~ >H fziu7Vye6:$8c;gFH®nAPN}=vAF^j=b;۰}\I:d[^ۜfE3Qu\ ܦLs~(MhRҤ*fhҥZ>-ׂ.=2`ƶ\Mx eQWN,[ųK:Q̷S.t!.&ne$ qx^UGЂhU8Eür}+5v#vg}&YLITd_>BuV.&Q(,d\0m|]5+jkj?; %-b!qBH΅ ힴj6eI%|붦KQQ)=36t=Lg`17wCkͪu]Eʦ\;0ߪ= Rš}!fM^@t.~#K9C 1у+m{UaӘ+yWkFiSM/V>(J>-vSlIy* Vr]11+$)=}H $P|XƲf[I{[@aBDmFJ?$6TFT/LdBW1e'ď`nD汖]GS$ ( ;4i ,>4#Y&P1 w=!*)7-`ǁUv!* Cv] ޶)vZ+kxhKxT+7 !F^vW; v?]m#}о\܎-:T&9u)RB2Rם.hK$LG8>#VK[6z"O KI]cFd]ӑؑHgYt2O`ȪV(H7ߵ '"Z,XliR<5LgĈeGnHts `.cP!Bl.|6(d43 <ځ y&Q.3v}W[ U `IӱQwd䲥@GOo_}nȡ4%j/^g*U Nyar"{֦[ω,t2mǞnKp3v8Ĝт@4zt>}"!wBaq;/]XϾw k uaPơz[/xLyq8I]1澰+R1ݬ&ZLZc7T쬮&ANJmotH$U\WzZʏQEEHA[oe6cH"<3.S-[l:r6!@O&Q L LI{1=8,_n632.>0 oWEcL;`d291;"_XdBcNRQO9ϭꍰ+v=#c>m91Wm@GYƖvϼS9uC0CL#9ώ3v',߂jvaMd*z{ 5TٴCx^*ѲsT㜜#ŧWE$9,|ghvyQ'4 cEv]ƩdXMșF.{s~NP^ưf4jxz,bng> vl/ ۪WfSSCo3Lbm7/]ۛEWWAV7o+)?R'*Ͻ+i{[mFr};ܣPR ƀ6~!e6-\J_ n_נ R-:B JZߦҼGHy+b+MItC~ŕ⦏3u؏_DKBelۃ6|[ꨖ^`v{@ Tqaň!gBC L\Q:L)ԱॵlQK!(gT$~=,⣽m_xaa݅9j`B vo+7* fj.[aBF!O ۯPs}Q8p4$f r1"`E,e4ɥ5!ߺLF1MŌVW h#7IhzTzdG9r-YCgD'W5mOm$>0os1I*&d[?]Xw=&n"@Ft[Ln^z9B{vFX>tz |0l'շi5fe73o~i y`Pf<:h,U߸KL DDG&d633/>a/.Kau츌65L!n(Bh)FNc8&+O!R vCr؉Ǿj,;@;E)c/aCr1 䓟 4iӻ%a\/{1︂,&|ZO&coC) -¥Eu| @2TIa&{%vVxO%~֠Ǐl%SJE:A~WJcH2 =ϭK܃"ϔ'p+i^Fhs ,xыLVao R4=s[9#DˬQ]pEQ7 Q!d~:˥Fn&Ss}7BE* 5S5?Jut81UIf8T^AM/cu ʴڶK>ZDyf23jtdKF.?!|IiG0ikq2w3;\ͥ[lMZxEJ>Kpb09՜3ml FfX,E*kT}œ8Xƴ{c>8ܧcr$6.GX/Rܽ @ٴ`ZBWfdREJ0gPx!h uē9xO2G&8e@Y=c◓(fxasAX7*Jt.'wK7,?97|0ٺ:Ժ(pYP'ڒ &|7 ND2|L}s]WB%w6dQPa!OROϢ ܨnM.TzeR!7GjiUGj Hm pOO^s׆Ή|tjiSp75%[磂{bu u/[az|roʺif yuR}-ЌwJֲh=f/./n 4`ej_CiiP&Df& b;g=nk{BMYNP [(BeQG#쾹E;^UW{$h _4G5n Mԇʰ[k<I:QzYȥ̓ ӁG3QiY̍n. bM+4f-w7Jׯ{) ߴfzX" :q9>=De ׵^FLYVx_0?-CFUxe?inqy+8iz4[R!# ˗ [u=;z63_|{ ud OJ2 l|O̰65zC(L[zR+CG'*HT`Ņզ%KEFcY27 ˜`F=uQx2yHHmU GOg ח𴬕+֑=9҅6ΘaKO.Ě(~+WUs%\so[ ^9SDm8.6VITc䩜}i-4M&BF3I47iVpD*ɛzm9b׻͔uy`!&bn1T-Sjj"&E%~OH|TG" wjE{/ 6qIeg%˯hw-oH'SMKmnܝ0J ꚭ. ̶2EfZIX:t3dxS+33?ʃwA)ȠγpgXWMkVh]@VUl̓"EV9 )@l1";Lb{KmS8 YʔTQ k #DX!.0Lğ<v@d>&vV~½5eBiT,RD=:\?$sN3yfʶqB̰VQߙF¢Cw܌#fѻVk-k[Kea6k|r !f'Z Maf뇧,4L0:z{^|GH?h" ffƹSE`c]r7R&tKK0XҋA BeE( \\O]\v`;bj*ϨG}}w7V-#vPЋ(~/"ZS::r7B]2B[8GoY@Yl?=y*v&'`T.@G_@ s.T|)[<WBKl'V׭$4o0r̋1٥p̨yh,譭Y 1dkMi)OϲMDIwA'I[e*#~fzl{AQts3޾ȋGw0G N5D>?GZ)t %_Sj)}ŸaWQ*kChC5?kZ^.\u8b [6G>5$&ChϔddjMkF=).}=ZPZjkJac/j%. C Ͽ}Ĭc<J(DwxTmЛ)qV9M+K4[.AJk[9-O,u=\^K;?2]}TQ{ǯ6M?_QU81r*7x=TqU/*InѴʐG%bH6yƾrO~lkawz( K %otZqLm\L!4/=\vG]I80vgt)johFs!CUYj ex!6a9`30n7oAd͇,qK!Ι (`)L6v-hJ\zga+\-QOp O[UxEERvpl(P RŨp!olWā5pl€r9A\(2jaNm(zhy2F'cZ[֋h/a R+3֍lQLϑc5IK!~h?+z8_uHñ;]JJz7 6pnN$,!mm)_(+q7rӶ,0äC/!2l J0y94 c6+EϳCZ;]^DK6<[N yk b;֎~рw[}] RrRzY~'TtOpU˰:< רjGrKm `ZŠEߨ8{ Di&U jZh4UN,gvMGrjm/$7MD~љv)J9GN!t[}LWiIG5)(a< C`ysQ 6Ty2@&B0C[[|+i3>II7}AFȂ0q'/Vjk/Ks͹mWˬmF32z%7UP UJ;8`Qބ6-D2>(.!\30Mc(2dxט2nn?I|YɜVhUay`Sĭät+Dj `<ܣRUpjմ2z1vSP2QbδłMS+K&pc:~h1R\YwypG#i5&~w[w b俯Q,{^Ҕ3\C@6Yi`G?$%jgFL]̟M {G ׌˰V˂ vepN1ކ{ihf臢>W,gh/|PsL1]όRe77_G7(m3Cv(9g[Nj"a0[s?r=s[Buyz4:>.:{xq6:MBie~eB%m0_λ&b99TgG!TD>x)KHS|z;Wjץ&ҝ8 έA7l& Lr7D(ddHmԹjr* s(b2j!IrйMGMLL R4@N4o Dž؆%MJ1Mvh#Ei?~ fZYHG؟{(T{wCDa|.*ZKDJ!A@Ƙ$a%JfH0C0lUwք2B3G7K Хo~E~7%2A.V^G 8FD+fn6aldysz㙡d6K߅BܐX;5BO(9PIO;p0jWNP+NZX?/GJ"AzAv928dž h]nʙ <֙<'墳-i4/(X*k)fȕOҕ}A1O nE!>S` ˦;3Wؕ}|?Vhv~PpyG-^bbzt+Ve&E_gP 4k$˙<`{jm\ޓd]' ZHnb{UŕTF19|Φg2ꮿ>/ fBIr\V?cu/1נJg6]ۮ5&ʍ!2`e78R(ޜ#?U# w~șFbe3n g pq5_4+If;8c2h[K4e R}lM7^-u|툲ĎDR" {84Tj.#wk5KE m13 oU&f1q)N37gi*f/D ϟw eJB;dF ǰGM_K5Mj %k2m JO⻍K";d Uf+š4˼`6ڌ??ӹh $A~FUFN˳ۄ" R[a6a+kqMuZ8]'U7Jj:+I aIcHvh'P~H( x$2g]mDsa Yn2,] cH+s4bɳrTw#_@j'kU77Y2ߪꩼ\y;uDX֙㔢LțIV :{ďwo#{ܙ9WH I &0S:)qة^|Ph Ţ+KGD>cL6wdS_Je5~_; w=)o3ȦB DoЗ#OtC&%bI@D?ˏ >& ܬ`zr{j{Oxԇ 8l4|2oQ/:ʕts!u]@ʟm>yTȞ$.elWjZJ<M.I^S׫צ9zSұ+F ,ad5/Nc51tS O P8N ʳ=( u:feoa)U)ۖBf]E!{*T+ qgz /v»:ſtWcөd)#C2ќO6E[ I2#V` m[)>n^=ŹEKu]6zŏAd` I{ڢZ lA.Ib}3y+可Ĥ䆷8:Yoݰa%n`3i5GL' #WZXO ",Ln^JXq-,DpFozEA%Sb>\f=QW7dP!Y{HC8H4_II ']uop3>j7R&xA4 Ć\p?wvR#f54)?x#DCN&mBF8*8?Jt ߞ{N?jEqJ$B!2x1:J N1ȊϱT>뎪SzZmU~bx [Yu?qK]Ќةm>&6HY:JHSq0/:Hi/l%2mG&j%uQ:߾FNBSpEޖD-K| XONztƐ*/Ý:G@E3RZnxl~Ra䍬̤qy'8m}h7ġ"݆ E?~U0,@l7F,;_]&MD(V.)=*oBbW+!Χ;MDZLjxGn34z<%Л53صMHG_^N6=ň~C=eL푢8K LOu1ecs8/"_NPg(6\V^0' %{PO]s?Wk(t3[R(9\x!=$j9ɎU_8.q2.) *#7KvD]RE;NR}S WTB>[)m0%طk?U299/h\ @m&."lY-hPx71.{l ^Ó{K W~#HRjMu ۑNLuU!oL-όJK/fPS ^=" _")hNBҒ5n`hWTOt=$"bZF;KGM^<P+=(ރ7'U,*&*0!wLE.)콣SnEd/2H2[;Y48 7O7H/|S\io.^xc5!a_OIeu__s 껋38E?޼f颋 <&M9I줈?D}Et5:,TVAg_s$0iESmڎ(_}N"F|! APf}6Bdt٤,k3k JɈn3=`fbΧ|!$ybBbLK_x8׉'6jC /Č⿏=Xa.u]t1Gs \4Gp|l@Vr˷ȭ 췮&XҲ_RJx ެ΃иݱ|M̩L$Xq QRfg6怵Oxa<_J+' ̤TEN@^!9,@&vWܐʚXmHazֆoyևyj`rDޔY{P FZ0M/awq+Я},óD>.7L46 XOxEL6t FkVfVxnb5!EaX\F8jJ_F_VBHXà Ѩ6 T_5 _dܞQKw>\55I=O:~do^g~Y=`SWH'AY>qƹY~~*!K2O")5nwظo+><n.XX6Rs!t9DભEnhqgH__nƿk0N@ge+bSsU$8eZ*!+ڟC`)(Ԭ\~vhJ)nGgç@HE머pWR:>1E'Q2 `6"B,.(3T2-D<8ϿM y9)#о" c%&إ@"*30E]aΨ^v\\WMCNT -0|kLC5@ /Q', JkN">ZŒ`=& J6[{~P>|*ZfC[z\%KZI-<^1tRn.5vS hR7*EXgg[ic~[B7/E6lY@^(Šp>!C"x mP4p<}O~YoODf߮;-IjK蜫3qӳjjZ'GYpUut#ǗA\Gb$֝ڋxpា6U߲7O]AHöYM9u5u]sʁ>P;$6鳙UiKu@Z'#ԉ޵*nE,!uVӹ¾"(J7LIt] p}ADc%B`E QĤwJX2uq f`o*ʝC} @>|7]u/Ak/ePND7a`pX)g)QxWJ8 g,_ B@) :԰p!BMоA0hc'FAKiԈ, uwdWkoq@ffpa5X~)hA5pI e'D7=yȆX=B?|RsxMs5p,-fl¹'Sp1^><)=<_8>W=00mgȎjn-?J(A\+7D9c$X=l'Y:/u"=eq5~$%:@ޕnQ ($#Q9Pw0Q g)גG{hݖZ`xod{fE-%: Q V!$L}l_Jup;9~AZo+4 pAF%ELaX#>qz ɖajJ[ȱN"SSm9q~J _,l#6Yg٫3N 8o1GRo3 |]eښ5*o~IkͭOe-#}{h9}G`ѳ1~ z^技-E,@2s5 `dzk/g7fAwXoqk{ ^qb6:;#/>6* yj3mqcV$Dfsҽ-jJ+yDR26J;m[W?82KQta1J6?U ӕGk>?!=Z&mu<mCDK !un "S+͸w_N^xYqZA".b{!C';^VY͜h"TSPPR${^ױ\}g$h2Q1:qݛm6P[5?YPL,Jlt k6ϕ!H3u`!=h^o>=鹲]_ XɆdp@j?#FV k68Q}$!X>O QlȕJ%9 JWȱ _Zuwj+V!5oH4B҄Fw}TEC)%%k;'Pl0'f}y%Ӈ.sa0#KNZ03KՔ&ц ( cXdձ2# yta1j>qSg[?J370&?!lfWQ0k8PgC3J/xM 7V~ͳӀ9imEsdkz[[m n ‹U¶{uL#<7R&//i@>Հ>#دRP,d^C'Sx"u];cdj. w¹pŇ?+ %U\!"Ĉ TB* fuiZ>"F%B3A.nҜTMp٧a  F5}w̽A[0=cz oCl^ӉxϘR7KU|mN*!_b!؞PHy+Au*H+ѩkMIJ3si@RzpŽP5}G WGG-aYA>P}0WEO2MNyor~5S^ ,3Oǘ;RReh.BhaJJIg"A؃u42$hHͫ+"U< PLҽh{'4+x Tu6MeQB{=%]؂jQ;,ʬ^=6gmUb︅1=uzfSDrg@a !X*z g,ҾNj39Zͺ5ޤmϲ řj,k M+iBWD~D\,ǬE>BYЧK7ۚ0z"t.̠o*iU0'd:4xҚYP'+OE s>B#ղ,8&zS}uO8礬 O,ԻױvV*%XaQbsX(.J|k'W5'`oVDAH?20f~AMP:칔kK&o%[Nɗ$l:BMAwB"g0XaHoc~%ZΰN)I'D4y1R PZ2ם XMu~I{dpM6DU)~+#/IçCb9gTCY zݾW7+1&ug3* SlDQIB]w]d[Ե@:M}I.&⸂.B[qY)Á37!ę>kZn2 [Mg9cF.RCMEIGF^\-9ZN5_փcWBty`*Lw̕vuIxZY$O>Im۝W fGid*)ϼL~ $&NR:>XC7R87mj+5Ӌ;ib)UxG@iC+M4cL甆Ƀ#R= ΄l|T no3pIPiNЯe)sJ$9&$!Z`r^ɨmo[2ds]ŪS .߻4 YWol.ԝTp~3 bi@PwM쩣}T/N&![UtBeD$ @#*խ"=, l,G_=شiҀ%Ѣ"xR" ,pD` ϧiޗO "tr mOe˗"} .:e,E j7J+iyD>O ;GJ#k7WJ>ɆOy|mQtIr" Ehn"Nn!YW@T3eJrxϧ 3tz TZ^nmDj [Gl tffFKfv~_e-Pn3e*aD'wO.I.*y2/쮙,"ayj'I{8@Ēf/;@xK:f$`C;+[+u#^eod7g1irVAỉY7 :W(D^6?nsNL-,Y=oܴm 7Ւ]a6 Hٞe^4ۼ7'4/"~?KL hl)1iitQWzK?7\ҿtS5c&6yeTIh3RD} &rdtc9d0л)v0I{jà~v$U.Gi DMh{fX KTw룖Miv'Sm,^'Q~,pi;gSu"ljS&`xj1nt*l%hH=Sk lz4pzn <&/-Q AD ГRҔUƴkȳ%֣ÿ{4?o2jRSs4~XyRIjZAN{2!V1 ~Ls҃`ʻ|L%O$3 ꃱ$Obrמcf\`|Z=_ .2YUB} C%\bpS?NfE #\nky ,?ȮMĄ0.lEU')1:.O <ѷb뿓2v@b`M۠u[HLKQv,vͦT$$6B2O0rbؒP$˗@>LF^BP9LJɩG3"`ޡ<$GN鵻h)[2Ze|=D9v{T+"FKzUJ\t="aj,mPޡHqS u"nIZŮpV5mE%D#sHpR(%[q-[ ^" Sik 5*alcljڌ;9KMZ'o7ۻ0 I,c_F"z cړHC.,to9Zv7fW1_4G8KAk夻"NxʹY>K r'YyB7+$AVO]lEӚ s:bz1V^ҫ [_bs<,,s&.f1Z5kG[ya@X6Ɛr[r!iw}eX9~o!1 ~tQUa/$uJ2W[P]A~]u3w2ڛbJ1GIѧQ#&c-m<= NZ+ҝׅPév_0Fr}}$ ?_G5"wbFZz6s\֋"Y yуRn̎⅘g:wKRt3(9KP5hMЇ!z ǣIjtTäBM+gI0"9B``d~,i&) ڠܔ#so櫠<\c4ZTI&]y#kC:/M '0=O)l/u)U1O |ե4 U{QwNh:O;Di(ofRsew _17WQiKR ٩_=9xQ*K т `xMY'H<&MnRtjTGm1~F=sb p?٪XRCQwЃy}+姫u9>{*ޏZ[y~5.yyo[`9ᘭ3UNnJn?|\>P8Z9I@4RIIHY G&O2%sһߏq4Lyld%γvI9czQ59=Z׃4]lon[N-&Q 8~dV kes ijYK6."ȅj8CŃnziZ8 ZL]̳G@U&Ԕٶ#9*'ꫥD若?o É}~˲yT ]DE|bv}KU@rpM4! aM@V[Ә(E*Rl]pV@D0ak yB}-VĪ.*(}xXTb1">._+7|vE"n-~$ C0H{^Nq1nk2R^xƒX q5<(yCș s+Mk3=^4vaIf〢iž5^~r9v9V)³[aMY!|Ԟqs ܇e<-pom&J@ᖣ}ӆا\ou~}q5} l^UKGTړbŕwR`-@t!{pNZTce߱iS41iFP/Z#FZIP#?JT'dgi+^U3J 0tFƬ,@%VJ׮&Bl[ Y1/շ{ Sv|(B&.a^Tdj+"~sI.lI梲OxK"w]^8n3iU5yA1_5z [h\Xr2QpsӨ ߚ]p үJ/tun~t!Fr"Id1#6ݶ|G6`؟P}aLop(H~`X\8]նJ 2ۤ?_g`o} Sڇi_ Lh`쫣0,{gbWO4:l\9!U7vy}28¥.^2c]ڀ<[, 1)8[i*gFQ!Ԅs*Ҹs-@iCCo~XcUJ[X?5zM6&SO7< ¼+fhM1idh~m}ڷ}ZNE!Uvg Ԕ.%Z.c J9?uM)>qj*fDz7AE uܨ&vQ *E sC$7NC1?<OHEF!>~Tn?2?O ;|;ƥY4efABGi6N t8WC2k#de3g9sIs)hcJP \$U=O~nfҜxsj? Yhv`帼c4mroR<^GޠH^/*%Dj?)p΄BB% YbA1_~ Ӱp`̤ޜ86=9W1khBwcnƆ48={ 3x#MTFRL|ϺLZq<$tH0)qouY\˾Y26-qr:8x;F> y|u@u @\WxzpUneKoxEb_!˩H %lp^l2w98Ͷ-,-&P_!ԻXｿhl_#NyV_>? ޕBҳ?|i7coP| E/9??o4=x@GgJ:m6g&B4cQ=T5'H@y'^͢WF%IY>8@WѮWGPKV&LC jKMsl^kS֟$B1ݸ=_OY~!rU9QN&y)7cQ#q5t)cf7ge$[T6 %M\2Av@wgfنD~r)v @m!S,lME\0@~7~?_"bdIJR QQ%dYFG$VI vpݮG.mIzP!(9`"Mx=1}DYo+NCXJ"bu1E%zT %u6[32^aǞfD=vR6>h7*Hz,Zm7 kI3)r$I?߿{[9EÀ!̤-RW5I*MMڀ,R4c 6BCӗ˙bl\ߕiI#ҰX+쨩E'_8 +7_<{SW~hFVIM }}s7ݧs WPcZ~֓J@ģF)$8k8saZ T%ݎt:9#^=:;؝dgyd$[O%쪑˥҃ {L ExEj:0%}>Qv;Vu`UD J8n:љb{|&Ǣ롯@l}H*膰]R̎;Y]E"cՇYBKzQaW㮸_4Ho{؜zjgUD{ l&umUKJJ_FSe(ӘЗ2xdh0$*DSi. yM/E71K훡)<QBGAxX#cɯxX PC*C&G2s 5`p)>b T?SO+L,0l4 AB“ydSMLWԚ!E]"B=wAmur؟(TLhO3x{JPFjk Ss31K_w3 >ZPK#(&ͥ`K RN'bh3l^%%/Gf)AEl!dd%EsյQ&*bˠ>0_C?ΤcO>J͜`P+ Q x}ŻNT$3}$es鞘@ڹ^.ŬkC%%6a6l Ƙ{oHnU7k` $4!s,jlΤ?{f;.^\ vS }^XS{\"LDm:ƈkA:L!]c(3>B>;N4;m%1J )5{դC˶n%' <Ą9rY?{"~4i`=ݱ3mK% F@}d85WL%WԱ|>̟۪')f}Շ{wv+K >ɁB C Db%38ȋLM2U Ơ,-'+v79ٔnGҍ.rRK׃C[Lm[:g7 >LE'<apTp#&8mFVS|jS%xxS#`i75NGûĩ.,o:GdyojkNFQaOd=@TDAD{._HpB=ԢQ=jÙ w~fn7B\g.'AE_mi}4"eG+^L>q0 hFcSG4i2gv3Stˋ~j P"#B+.K_.P߰uV"޷ԶC8'OIŰr+:!D&U+YU\T^?$ъ;[ЌfpfC J z8ؔ#B]i|H72 ,LZbb8HGG5TA~JY^ |t&L3cTY֔(a x]{g=-%o_f@\;άoe 'p'=зZ^x> /d *e덇)?9 Ԃz1L|5n. ?]6f!ARdJq׼gOu ^ rOx?#&ΘW\wG<*~y w<(w@!?l_/9۷jz,ᔿmrWfa]{ǙS$'Q&~G S8}w^z3!'jhT-p% HV˾X̀,tޮ@ Q[O1 v0@\#v/숈1fM-]m.iC2[ă[.bx(JyT(VHńm.fBJ%! /HD2 >ЬV®A'&~(d/т6_mJss57k2/AQ(DX4|B叺m՘܌\"#x JUqJJmS;4Qk3p]rΈh1GlmKxY?*Fz0)/d?P{8}u/A nG,xfG\QX.:"F: X%C8 ,i` U%Mz&jgw;aXs/7+m$MFO1L%k"4ޞit՟G9uZx}L΍Q6D Eg;kIؕNU\]69E\؟0췂!c! C_P1x-[t b{ߦGsĦf#cbquL+AY@BtDX T9Ch.)d3-dI{MsI@L7'?@[NF{ k}u$0e]2k5&Nf? ށe \DIw%6seYI)Ŧ/, J+VUXrtܛcZxApC;qֆ"Tz+!A%בʞ"BGRz&Xb ܋W Ρ̬DSÊLOνJ~w6_a6'-.f(,ҳYχgHPobgr@/F1FYL߮% 4a0+ wAf޵S2JlU%IHRđ(3[Yӭp:w⧧ O}t5ّINYquոg05LB%BQZm ٞR #JD|kG)j[#Y0JL"4B`U lKX]A&hA r`3IW*Ĉ`:Q+VC9 ^@e qm(hG0-5kP* hwMëdGe7uIXCd4K?_v Ou!M~{hm]ʏX@f.iKx"'luܜŗCSI֌waf{]hx#Orƴ%mm 0,i9g ݊sK]2VVj8o5 >R3e{iѳIv]F)BFB;f|}ǐ=՘W\Sʔfİ' YYo1\L6D-_S%>e}vѫ}v~?U3уCRR t <.~ΊX,{/\ACN Ja PXBʙW(WI!KRl<(Di.`2ڼ|VZiu0͵C&Vr3!}MQdPI coq5.[p&v 1kAhiN}!zS>Ar֧yݿr0a OD`^P΢u)p} ^p`լvK/'ԥ޻dzoҥ]M0ۨ~\ yx+T-s^(*`NO1ׄmi;Z`Km/ n`BNULX@V0_6N+~R8Nv;?lli>a!Y*\ IRP`5DNGR=MPz'Azi? !ׁ"QH#0)r~ҹ'e m!a>)`S 74꒡;;M(/e7HҥLEPEUp?E` '-{ا/G$:vP{R=pr!1A|sxLs:q&qpO^!^z7et;?:4U'je(pv3L)Qd2;P cc).SXcwS Rw.:r᝛b0<D4z3ò'*j/0'}L@[ތfĠ}+[S6%t8VQqe AD b}4?SUp,LNݩe^0 7-%7h>$!Sꆡؽ։1-qyl6BxW5鱖FztH9h|ƃOAc+τCVӍs/tgT1N%\ތB餰-B51g֘%1V?qnb\YqG֞נ:gv~:DOU#Us}v`/çS0AkRSھ!oD$gg&(4X%` ؎06JO1}RbO!`B~ycYK 7PH⻫\#)xHjd|#7KW-|nB!rO ?YҷY9B€T@ )[SdN)4? q>m5QAM5Iؕ'mq0pԄPj7;s{ #>HjN%m`3'F=L ̾u ',q R[LrNvRS1ƔϮas_X i͵D(1JטUx9VЅ\n ӣU)]a?t{,PM2/i=QhBlWO o ?y#wtn-?'ko*]]NxܸllZ8ƟHm`cD( |;zNA y##nĮW{e qsUX e(;cd!uVxykDSBc8sYI*zO@OhTALe*b@eq 6#P-spYK=_˱$}~F7FQd?>",9 g*IJyWụBedn?A| Eb8 * 8UՙhFdPLhk3`W$cèHܢĞ*Jw&Ave,Ɲ;Qgh6B~N3EeEe\-6c j2.8{hٷ7Cfi~ݺRՅ봤?I!qjŊ%``v-ubvq݆ T jt'x;HTA*=̚oWV \]9<,:OgJM$bNο*)*IK:[#5VN&&4'm:|E{qF5=^U>rro@AZ9T˲Y? V zɨ#Fd H !i4ϋ:*Sk罛f\߯_yqAU+NkGUy͑[W}(ʵ}P@n$9\[:K~DE#J0jw(irozΝe*?_=<7 WCHSb<ĂFP!Eso2~B 0~+Q Lk'jNӏw1,5Op+>yp7b *eи\fj5\4վ4ReG]2AdinQ࣎ m@RBN[$s'e> 3)hzHĹhtů˼Vگ}-O0`-=A4Y;j1o=S7__zHN3ڿ˱^ƖsB|w>E|j)\&Tn!^YA1_\ы|K+z?̌  C'!e{ȽP,M %y)+rZ= ,m"lPO(~H}$ЄgV}BY1W$Q<'&70SW r05g@"jw&ekF-y 䴜U鉽2=8`zw}a$S7[Zk,ߪm7tX?1&NRYoMOTmjtR'7IziFR^v!mck1hXcƟ llrT)58,Q5Cy߭7 W"RWot5i4;g2*bs 9_:LspcPh1x2 $_)}'ĜX)S<?Il 1)gM]-7[x-|Xs2j,#sv]vA3GGpq@Nx"89'tVk-ѻ  5X.꧳>9U|קFN94EG={EiHZS(K- )[7 THȢMy#Y;Чq8mqvRoBj28s/N6Vm7BuSƥ_vD휕cikj ,!i :V`n>o=ԞyY=fS[1wZ&9.B`C[u6q@* 2j{@ rLD\) `n@cǸ-PvEf0-MCZ y T꠶!Qs8z9%4@bfqpgiJjsTjBȚ,T9fj|8wg%;m{ҿ ZO2JNAN9;_8E V:> tw/`jLZW8+E>_C1_+11})>xYعAzI(p,'6[mwrsG.HS[qP݂ dRjmJ*'Rl$L5J[ꀠ}VeX*uWВrFȸñɌ:}r*?+0# i ;E7%,^Ώ) q3n`ܥG$`b-?=TnE]d_N)Ib~3A\$>u@7c,E ,aqvN;[D1SXoB4{w"b&Ȝ\F@L$cƩϯ'? =\qIޞQ ˽DxUejݝ| ]DZ L K*@f^򷫌-ޖ 4⣉^5VQk%a$KD}<+тYt~`ʥ!GcZ菼=DOyj]&JVT9 v*]yrl.sQ=(VOKU:|c5}} K+;(Ʌ6˫mӎEؗMSv MX2(<;.#!'?#I3}3[$QY aV48Gnu?K?B8B8̯2" -0|mutۦzy=Rpkkr96ذ0$? ^ߵgo%J)ZFmb$'¶^lgwWwY%"MSl9ڴpsK*7᪲ZdVXr ~p==P`C5|H|JXy`sxp@'IbeXbJ[(>Gb(sS3)gHf|(ɶG v#:Gk*}#]?;kĕz\/6K3J;;,z̛_xb pV֡#+= RnWzU/Me e,~ q#u2VUm[8U/ -bLv>EԈz~wJo[tgty *6`qcP?rܻc:֣ K{+ r:QX2Ȋ?(so\^©+h ;h>,kӖ!AEW?XBmTC;C8A =.zFR]peKGZb֟zduW{H6*vHp+b1]G!e;!pqj`{)9L&k T2(W"uIb2Le ח۰}J"R̠cw,^BoЩR!..xAHּGy`+ŌlۥH=x]x5!y9PY2"`B3|G]kJS5b>LF*MY #wu&fkSz _^zyEyeЕh$hm mzB 镗nd1ӺQI쩩sm^Q䐴'Zenn=GQLrG&Zhߑ3J҂lqK @4σ;.'Nc3KarY0V*j)/]Xjaۻq~=d'a+tJ)j.(ҟpbqA&coeɶ[ WV🆲ęAƣD_ZSHiT2Ѷ@#xjZ~wYPMDp sHVaA2fL'gH|nT< +,I0.޷.JT篈G?QRЁ d6Zn:;Kk W yhRٔW0sصWfCP,.Hh}֯i2sC,;UYrjqCjTL=5oB % ~7S#+ >2ȐCC!5>orW?$:2ObA!K-m,u@ݿ8f@ lhĶAUq^&\2s7vSṱcQYp4T 0n2(+Ey2cQ8 ϻcjQؽIŌ>F M%F0XWttf E')V *@K dfeޜ7n#<顐X7 $ 8Ơev\b~.7Um*rT ~@Ȑ}lgkmn_x;I&g>ci m eDGZG ~ՙ#g'اs'm6)X>EGZ纣8y3L~IPbv?]t5@Fv( ?eV5h!֍5.TB Ь:Ώ<6׈dshg)6ۂ̭{3+ U5G Atˡhс8z!cQNkz]>=SŊ?$_fsI$d%ϻNJh) `99)b^&8mOU֨T\Cޢ!;|lFwݽ&s<~}m.Z-zI f.+@яb@_'D !hk|El8fTr X>i`˖'&^ST{xJ1#ͽ2tȸdA-Aw\ ԉtt5%axb\j > @۔%")rJ$A_p,X݁}]Wj,{o٢OD@}RH&98ROe*7^P>Ym r[myby8ٟ'ą'nݮpv6 u5SSom{]@ ~D1z*,TjJ۝|5El-WVsyNEEHL (L֗pmD5~%=x%\-O1Hm4v\e1I/TwqAM5"q1r@rm ~E+! !YL*RjGuJ_,_NO5\ПzA+Ar3`Y!NFsBeUiJ_]8ٹ^