389-ds-base-libs-1.2.11.15-97.el6_10$>$WC5U ~>8Pt?Pdd ' O<@X\cy   ( H  Dd&@& &( D8 L9 l:AGLHLIMXMYM\M@]M`^MbN)dNeNfNlNtNuNvOwOxOyO#P`C389-ds-base-libs1.2.11.1597.el6_10Core libraries for 389 Directory ServerCore libraries for the 389 Directory Server base package. These libraries are used by the main package and the -devel package. This allows the -devel package to be installed with just the -libs package and without the main package.[tIx86-01.bsys.centos.org{CentOSGPLv2 with exceptionsCentOS BuildSystem System Environment/Daemonshttp://www.port389.org/linuxx86_64)&FLAA큤[tG[t@[tG[tHPaPaPa[t%a2f3ad094cbcfebf92879c37fb7ca03e9e1e0dcc4b74413edb302c450e23a71c18c4bed873d4b37ca369819056cf9cbef47021eee1e9bfea01e8bb6b2779705d2edbdd4febc24cda9b14c335dd2ddfc2e07ec19a362a7e7b222afa69f6674f42a76f3347f8e2221d9b6550078ac57a0a2c4e8b1da6ce1a1a8aacab93be7e8e231525d7a597353477148023386f1f4ed0905ca6d31766a4a9608d1e090838711blibslapd.so.0.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroot389-ds-base-1.2.11.15-97.el6_10.src.rpmlibslapd.so.0()(64bit)389-ds-base-libs389-ds-base-libs(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@   @ libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcom_err.so.2()(64bit)libk5crypto.so.3()(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libldif-2.4.so.2()(64bit)libnspr4.so()(64bit)libnss3.so()(64bit)libnss3.so(NSS_3.10.2)(64bit)libnss3.so(NSS_3.12)(64bit)libnss3.so(NSS_3.2)(64bit)libnss3.so(NSS_3.3)(64bit)libnss3.so(NSS_3.6)(64bit)libnss3.so(NSS_3.9)(64bit)libpcre.so.0()(64bit)libplc4.so()(64bit)libplds4.so()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libsasl2.so.2()(64bit)libslapd.so.0()(64bit)libssl3.so()(64bit)libssl3.so(NSS_3.14)(64bit)libssl3.so(NSS_3.2)(64bit)libssl3.so(NSS_3.20)(64bit)libssl3.so(NSS_3.4)(64bit)libsvrcore.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.8.0[b@[b@[{@X9@XӸXX*X~@Xs{@X lX@W - 1.2.11.15-97Mark Reynolds - 1.2.11.15-96Mark Reynolds - 1.2.11.15-95Mark Reynolds - 1.2.11.15-91Mark Reynolds - 1.2.11.15-90Mark Reynolds - 1.2.11.15-89Noriko Hosoi - 1.2.11.15-88Noriko Hosoi - 1.2.11.15-87Noriko Hosoi - 1.2.11.15-86Noriko Hosoi - 1.2.11.15-85Noriko Hosoi - 1.2.11.15-84Noriko Hosoi - 1.2.11.15-83Noriko Hosoi - 1.2.11.15-82Noriko Hosoi - 1.2.11.15-81Noriko Hosoi - 1.2.11.15-80Noriko Hosoi - 1.2.11.15-79Noriko Hosoi - 1.2.11.15-78Noriko Hosoi - 1.2.11.15-77Noriko Hosoi - 1.2.11.15-76Noriko Hosoi - 1.2.11.15-75Noriko Hosoi - 1.2.11.15-74Noriko Hosoi - 1.2.11.15-73Noriko Hosoi - 1.2.11.15-72Noriko Hosoi - 1.2.11.15-71Noriko Hosoi - 1.2.11.15-70Noriko Hosoi - 1.2.11.15-69Noriko Hosoi - 1.2.11.15-68Noriko Hosoi - 1.2.11.15-67Noriko Hosoi - 1.2.11.15-66Noriko Hosoi - 1.2.11.15-65Noriko Hosoi - 1.2.11.15-64Noriko Hosoi - 1.2.11.15-63Noriko Hosoi - 1.2.11.15-62Noriko Hosoi - 1.2.11.15-61Noriko Hosoi - 1.2.11.15-60Noriko Hosoi - 1.2.11.15-59Noriko Hosoi - 1.2.11.15-58Noriko Hosoi - 1.2.11.15-57Noriko Hosoi - 1.2.11.15-56Noriko Hosoi - 1.2.11.15-55Noriko Hosoi - 1.2.11.15-54Noriko Hosoi - 1.2.11.15-53Noriko Hosoi - 1.2.11.15-52Noriko Hosoi - 1.2.11.15-51Noriko Hosoi - 1.2.11.15-50Noriko Hosoi - 1.2.11.15-49Noriko Hosoi - 1.2.11.15-48Noriko Hosoi - 1.2.11.15-47Nathan Kinder - 1.2.11.15-46Noriko Hosoi - 1.2.11.15-45Noriko Hosoi - 1.2.11.15-44Noriko Hosoi - 1.2.11.15-43Noriko Hosoi - 1.2.11.15-42Noriko Hosoi - 1.2.11.15-41Noriko Hosoi - 1.2.11.15-40Noriko Hosoi - 1.2.11.15-39Noriko Hosoi - 1.2.11.15-38Noriko Hosoi - 1.2.11.15-37Noriko Hosoi - 1.2.11.15-36Noriko Hosoi - 1.2.11.15-35Noriko Hosoi - 1.2.11.15-34Noriko Hosoi - 1.2.11.15-33Noriko Hosoi - 1.2.11.15-32Rich Megginson - 1.2.11.15-31Rich Megginson - 1.2.11.15-30Rich Megginson - 1.2.11.15-29Noriko Hosoi - 1.2.11.15-28Noriko Hosoi - 1.2.11.15-27Noriko Hosoi - 1.2.11.15-26Noriko Hosoi - 1.2.11.15-25Noriko Hosoi - 1.2.11.15-24Noriko Hosoi - 1.2.11.15-23Noriko Hosoi - 1.2.11.15-22Noriko Hosoi - 1.2.11.15-21Mark Reynolds - 1.2.11.15-20Mark Reynolds - 1.2.11.15-19Mark Reynolds - 1.2.11.15-19Mark Reynolds - 1.2.11.15-19Mark Reynolds - 1.2.11.15-18Noriko Hosoi - 1.2.11.15-14Noriko Hosoi - 1.2.11.15-13Noriko Hosoi - 1.2.11.15-12Noriko Hosoi - 1.2.11.15-11Noriko Hosoi - 1.2.11.15-10Noriko Hosoi - 1.2.11.15-9Rich Megginson - 1.2.11.15-8Noriko Hosoi - 1.2.11.15-7Rich Megginson - 1.2.11.15-6Rich Megginson - 1.2.11.15-5Noriko Hosoi - 1.2.11.15-4Rich Megginson - 1.2.11.15-3Noriko Hosoi - 1.2.11.15-2Rich Megginson - 1.2.11.15-1Rich Megginson - 1.2.11.14-1Rich Megginson - 1.2.11.13-1Rich Megginson - 1.2.11.12-1Noriko Hosoi - 1.2.10.2-20Noriko Hosoi - 1.2.10.2-19Noriko Hosoi - 1.2.10.2-18Noriko Hosoi - 1.2.10.2-17Noriko Hosoi - 1.2.10.2-16Rich Megginson - 1.2.10.2-15Rich Megginson - 1.2.10.2-14Rich Megginson - 1.2.10.2-13Noriko Hosoi - 1.2.10.2-12Noriko Hosoi - 1.2.10.2-11Noriko Hosoi - 1.2.10.2-10Rich Megginson - 1.2.10.2-9Rich Megginson - 1.2.10.2-8Rich Megginson - 1.2.10.2-7Rich Megginson - 1.2.10.2-6Rich Megginson - 1.2.10.2-5Rich Megginson - 1.2.10.2-4Rich Megginson - 1.2.10.2-3Rich Megginson - 1.2.10.2-2Rich Megginson - 1.2.10.2-1Rich Megginson - 1.2.10.1-1Rich Megginson - 1.2.10.0-1Rich Megginson - 1.2.10-0.11.rc2Rich Megginson - 1.2.9.16-1Rich Megginson - 1.2.9.15-1Rich Megginson - 1.2.9.14-1Rich Megginson - 1.2.9.13-1Rich Megginson - 1.2.9.12-2Rich Megginson - 1.2.9.12-1Rich Megginson - 1.2.9.11-1Nathan Kinder - 1.2.9.10-1Rich Megginson - 1.2.9.9-1Rich Megginson - 1.2.9.8-1Rich Megginson - 1.2.9.7-1Rich Megginson - 1.2.9.6-1Rich Megginson - 1.2.9.5-1Rich Megginson - 1.2.9.4-1Rich Megginson - 1.2.9.3-1Rich Megginson - 1.2.9.2-1Rich Megginson - 1.2.9.1-2Rich Megginson - 1.2.9.1-1Nathan Kinder - 1.2.8.7-1Rich Megginson - 1.2.8.6-1Rich Megginson - 1.2.8.5-1Rich Megginson - 1.2.8.4-3Rich Megginson - 1.2.8.4-2Rich Megginson - 1.2.8.4-1Rich Megginson - 1.2.8.3-4Rich Megginson - 1.2.8.3-3Rich Megginson - 1.2.8.3-2Rich Megginson - 1.2.8.3-1Rich Megginson - 1.2.8.2-1Rich Megginson - 1.2.8.1-1Rich Megginson - 1.2.8.0-2Rich Megginson - 1.2.8.0-1Rich Megginson - 1.2.8-0.9.rc4Rich Megginson - 1.2.8-0.8.rc2Rich Megginson - 1.2.8-0.7.rc2Rich Megginson - 1.2.8-0.6.rc1Rich Megginson - 1.2.8-0.5.a3Rich Megginson - 1.2.8-0.4.a3Rich Megginson - 1.2.8-0.3.a3Rich Megginson - 1.2.8-0.2.a2Nathan Kinder - 1.2.8-0.1.a1Rich Megginson - 1.2.7.5-1Rich Megginson - 1.2.7.4-1Rich Megginson - 1.2.7.3-1Rich Megginson - 1.2.7.2-1Rich Megginson - 1.2.7.1-1Rich Megginson - 1.2.7-1Rich Megginson - 1.2.7-0.7.a5Kevin Wright - 1.2.7-0.6.a4Rich Megginson - 1.2.7-0.5.a4Rich Megginson - 1.2.7-0.4.a3Rich Megginson - 1.2.7-0.3.a3Rich Megginson - 1.2.7-0.2.a2Rich Megginson - 1.2.7-0.1.a1Rich Megginson - 1.2.6.1-3Rich Megginson - 1.2.6.1-2Rich Megginson - 1.2.6.1-1Rich Megginson - 1.2.6-1Rich Megginson - 1.2.6-0.11.rc7Rich Megginson - 1.2.6-0.10.rc6Rich Megginson - 1.2.6-0.9.rc3Rich Megginson - 1.2.6-0.8.rc3Rich Megginson - 1.2.6-0.7.rc2Nathan Kinder - 1.2.6-0.6.rc1Rich Megginson - 1.2.6-0.5.rc1Marcela Maslanova - 1.2.6-0.4.a4.1Rich Megginson - 1.2.6-0.4.a4Nathan Kinder - 1.2.6-0.4.a3Caolán McNamara - 1.2.6-0.3.a2Rich Megginson - 1.2.6-0.2.a2Nathan Kinder - 1.2.6-0.1.a1Rich Megginson - 1.2.5-1Rich Megginson - 1.2.5-0.5.rc4Rich Megginson - 1.2.5-0.4.rc3Rich Megginson - 1.2.5-0.3.rc2Rich Megginson - 1.2.5-0.2.rc1Rich Megginson - 1.2.5-0.1.a1Rich Megginson - 1.2.4-1Rich Megginson - 1.2.3-1Caolán McNamara - 1.2.2-2Rich Megginson - 1.2.2-1Tomas Mraz - 1.2.1-5Noriko Hosoi - 1.2.1-4Rich Megginson - 1.2.1-3Fedora Release Engineering - 1.2.1-2Rich Megginson - 1.2.1-1Rich Megginson - 1.2.0-4Rich Megginson - 1.2.0-3Rich Megginson - 1.2.0-2Rich Megginson - 1.2.0-1Noriko Hosoi - 1.1.3-7Noriko Hosoi - 1.1.3-6Rich Megginson - 1.1.3-5Rich Megginson - 1.1.3-4Rich Megginson - 1.1.3-3Rich Megginson - 1.1.3-2Rich Megginson - 1.1.3-1Rich Megginson - 1.1.2-1Rich Megginson - 1.1.1-2Rich Megginson - 1.1.1-1Rich Megginson - 1.1.0.1-4Tom "spot" Callaway - 1.1.0.1-3Tom "spot" Callaway - 1.1.0.1-3Rich Megginson - 1.1.0.1-2Rich Megginson - 1.1.0.1-1Fedora Release Engineering - 1.1.0-5Rich Megginson - 1.1.0-4Release Engineering - 1.1.0-3Rich Megginson - 1.1.0-2.0Rich Megginson - 1.1.0-1.2Rich Megginson - 1.1.0-1.1Rich Megginson - 1.1.0-0.3.20070720Nathan Kinder - 1.1.0-0.2.20070320Rich Megginson - 1.1.0-0.1.20070320Rich Megginson - 1.1.0-0.1.20070223Rich Megginson - 1.1.0-0.1.20070213Rich Megginson - 1.1.0-1.el4.20070209Rich Megginson - 1.1.0-1.el4.20070207Rich Megginson - 1.1.0-1.el4.20070129Rich Megginson - 1.1.0-8.el4.20070125Rich Megginson - 1.1.0-7.el4.20070125Rich Megginson - 1.1.0-6.el4.20070125Rich Megginson - 1.1.0-5.el4.20070125Rich Megginson - 1.1.0-4.el4.20070119Rich Megginson - 1.1.0-3.el4.20070119Rich Megginson - 1.1.0-2.el4.20070119Rich Megginson - 1.1.0-1.el4.cvs20070119Rich Megginson - 1.1-0.1.cvs20070115Dennis Gilmore - 1.1-0.1.cvs20070108Rich Megginson - 1.0.99-16Rich Megginson - 1.0.99-15Rich Megginson - 1.0.99-14Rich Megginson - 1.0.99-13Rich Megginson - 1.0.99-12Rich Megginson - 1.0.99-11Rich Megginson - 1.0.99-10Rich Megginson - 1.0.99-9Rich Megginson - 1.0.99-8Rich Megginson - 1.0.99-7Rich Megginson - 1.0.99-6Rich Megginson - 1.0.99-5Rich Megginson - 1.0.99-4Rich Megginson - 1.0.99-3Rich Megginson - 1.0.99-2Rich Megginson - 1.0.99-1- Bump version to 1.2.11.15-97 - Resolves: Bug 1563539 - acl_copyEval_context double free (fix spec file patch)- Bump version to 1.2.11.15-96 - Resolves: Bug 1563539 - acl_copyEval_context double free- Release 1.2.11.15-95 - Resolves: Bug 1562152 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch - Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (fix cherry-pick error) - Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c- Release 1.2.11.15-91 - Resolves: bug 1437776 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages- Release 1.2.11.15-90 - Resovles: #1435365 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax- Release 1.2.11.15-89 - Resolves: #1421512 - ns-slapd crashes in ldif_sput due to the output buf size is less than the real size.- Release 1.2.11.15-88 - Resolves: #1413692 - custom schema is registered in small caps after schema reload (DS 47973) - Resolves: #1408976 - dbscan-bin crashing due to a segmentation fault. (DS 49104)- Release 1.2.11.15-87 - Resolves: #1391701 - do not treat missing csn as fatal (DS 49020) - Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)- Release 1.2.11.15-86 - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 49049) - Resolves: #1400997 - ldif2db.pl script shows wrong usage for -n as instance, instead of database (DS 49070) - Resolves: #1403754 - ns-slapd crashes during tickets/ticket48665_test.py (DS 48665) - Resolves: #1410645 - The "repl-monitor" web page does not display "year" in date. (DS 48220) - Resolves: #1399600 - ns-slapd segfaults during execution of tickets/ticket47966_test.py (DS 47966, DS 48987) - Resolves: #1402012 - Importing big ldif file with duplicate DNs throwing "unable to flush" error - Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)- Release 1.2.11.15-85 - Resolves: #1372420 - DES to AES backport issues (DS 47462) - Resolves: #1391324 - ds9 backport 47411 - Replace substring search with plain search in referint plugin (DS 47411)- Release 1.2.11.15-84 - Resolves: #1352109 - Replication stops working only when fips mode is set to true (DS 48909) - Resolves: #1372420 - DES to AES backport issues (DS 47462) - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 48983) - Resolves: #1382386 - Directory Server accepts a wrong userdn macro ACI (DS 449) - Resolves: #1382519 - 1.2.11 only -- coverity fixes (DS 49004) - Resolves: #1387022 - specific search with sizelimit=1 sometimes returns no entry (DS 47703) - Resolves: #1387772 - trace args debug logging must be more restrictive (DS 49009)- Release 1.2.11.15-83 - Resolves: #1327065 - After updating server, component nss-3.21.0-0.3.el6_7.x86_64, some client applications cannot connect to server (DS 48798) - Resolves: #1266920 - invalid message about write_changelog_and_ruv on consumers (DS 47801) - Resolves: #1330758 - add a nsTLS1.0 on or off new configuration parameter to cn=encryption,cn=config in RHEL 6 389-ds-base (DS 48816) - Resolves: #1369572 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964) - Resolves: #1371706 - Server Side Sorting crashes the server. (DS 48970) - Resolves: #1371678 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975) - Resolves: #1370145 - cannot reindex retrochangelog (DS 47619)- Release 1.2.11.15-82 - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 48983)- Release 1.2.11.15-81 - Resolves: #1368209 - Crash in import_wait_for_space_in_fifo(). (DS 48960)- Release 1.2.11.15-80 - Resolves: #1316869 - ns-slapd general protection ip:7f570c56afd5 sp:7f56dc7edce0 error:0 in libc-2.12.so (DS 48944)- Release 1.2.11.15-79 - Resolves: #1358560 - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation - Resolves: #1372420 - Backport AES storage scheme plugin (DS 47462, 48862, 48243, 48777) - Resolves: #1321126 - Replication changelog can incorrectly skip over updates - Resolves: #1373734 - EASY FIX : dereferencing a NULL sr_candidates pointer in ldbm_back_next_search_entry_ext resulted a segfault (DS 47858)- Release 1.2.11.15-78 - Resolves: #1321126 - Replication changelog can incorrectly skip over updates (DS 48954) - Resolves: #1361422 - CVE-2016-5416 389-ds-base: ACI readable by anonymous user (DS 48354) - Resolves: #1360975 - CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack- Release 1.2.11.15-77 - Resolves: #1157799 - replication delay when server is configured with multiple replication agreements. (DS 48636) fixing a backport error- Release 1.2.11.15-76 - Resolves: #1321126 - Replication changelog can incorrectly skip over updates (DS 48766) - Resolves: #1157799 - replication delay when server is configured with multiple replication agreements. (DS 48636)- Release 1.2.11.15-75 - Resolves: #1331599 - Paged results search returns the blank list of entries (DS 48808) - Resolves: #1332710 - password history is not updated when an admin resets the password (DS 48813) - Resolves: #1150817 - Running db2index with no options breaks replication (DS 48854)- Release 1.2.11.15-74 - Resolves: #1313258 - change severity of some messages related to "keep alive" entries (DS 48420)- Release 1.2.11.15-73 - Resolves: #1294770 - Supplier can skip a failing update, although it should retry (DS 47788) - Resolves: #1298496 - slapd process crashes on entry modification (DS 47964) - Resolves: #1307152 - keep alive entries can break replication (DS 48445)- Release 1.2.11.15-72 - Resolves: #1292649 - allow users to specify to relax the FQDN constraint (DS 48332) - Resolves: #1294770 - Supplier can skip a failing update, although it should retry (DS 47788) - Resolves: #1296694 - ns-slapd crash in ipa context - c_mutex lock memory corruption and self locks (DS 48406, DS 48338 reverted) - Resolves: #1297385 - Interpret IPV6 addresses for ACIs, replication, and chaining (DS 196)- Release 1.2.11.15-71 - Resolves: #1284791 - 389-ds-base: ldclt -e randomauthid Segmentation fault. (DS 48289) - Resolves: #1290243 - SimplePagedResults -- in the search error case, simple paged results slot was not released (DS 48375)- Release 1.2.11.15-70 - Resolves: #1259959 - perl module conditional test is not conditional when checking SELinux policies - fixing a regression (DS 48305) - Resolves: #1282457 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same ldapmodify operation (DS 48370)- Release 1.2.11.15-69 - Resolves: #1247792 - SimplePagedResults -- abandon could happen between the abandon check and sending results -- Fixing a regression introduced in 1.2.11.15-68 (DS 48338)- Release 1.2.11.15-68 - Resolves: #1278585 - deadlock in mep delete post op (DS 47976) - Resolves: #1247792 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338)- Release 1.2.11.15-67 - Resolves: #1234431 - Man pages and help for remove-ds.pl doesn't display "-a" option (DS 48245) - Resolves: #1236148 - Slow replication when deleting large quantities of multi-valued attributes (DS 48195) - Resolves: #1236156 - Avoid using regex in ACL if possible (DS 48175) - Resolves: #1236656 - Dynamic nsMatchingRule changes had no effect on the attrinfo thus following reindexing, as well. (DS 48212) - Resolves: #1240451 - Individual abandoned simple paged results request has no chance to be cleaned up (DS 48192) - Resolves: #1244970 - Crash during retro changelog trimming (DS 48206) - Resolves: #1245237 - winsync lastlogon attribute not syncing between DS and AD. (DS 48232) - Resolves: #1246165 - verify_db.pl doesn't verify DB specified by -a option (DS 48215) - Resolves: #1247812 - logconv autobind handling regression caused by 47446 (DS 48231) - Resolves: #1253406 - wrong password check if passwordInHistory is decreased. (DS 48228) - Resolves: #1255290 - db2index creates index entry from deleted records (DS 48252) - Resolves: #1259959 - perl module conditional test is not conditional when checking SELinux policies (DS 48305) - Resolves: #1260622 - ns-slapd - LOGINFO:Unable to remove file (DS 48304) - Resolves: #1265851 - Double free while adding entries (1.2.11 only) (DS 48287) - Resolves: #1273552 - Deadlock between two MODs on the same entry between entry cache and backend lock (DS 47978)- Release 1.2.11.15-66 - Resolves: #1270002 - cleanallruv should completely clean changelog (DS 48208) - Resolves: #1267405 - many attrlist_replace errors in connection with cleanallruv (DS 48283)- Release 1.2.11.15-65 - Resolves: #1259383 - Fractional replication evaluates several times the same CSN (DS 48266)- Release 1.2.11.15-64 - Resolves: #1247792 - ns-slapd crashing frequently cause is unknown (DS 48192) - Resolves: #1267296 - pagedresults - when timed out, search results could have been already freed. (DS 48299)- Release 1.2.11.15-63 - Resolves: #1247792 - ns-slapd crashing frequently cause is unknown (DS 48192) - Resolves: #1259383 - Fractional replication evaluates several times the same CSN (DS 48266 48284)- Release 1.2.11.15-62 - Resolves: #1259546 - regression - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)- Release 1.2.11.15-61 - Resolves: #1251288 - Replication not working for "delete: attr"- Release 1.2.11.15-60 - Resolves: #1228402 - Individual abandoned simple paged results request has no chance to be cleaned up (DS 48192)- Release 1.2.11.15-59 - Resolves: #1211006 - start/stop/restart-dirsrv utilities should ignore admin-serv directory (DS 48148) - Resolves: #1203338 - ns-slapd double free or corruption crash (DS 48149) - Resolves: #1228402 - Individual abandoned simple paged results request has no chance to be cleaned up (DS 48192)- Release 1.2.11.15-58 - Resolves: #1223068 - Regression introduced by the simple paged results fixes. (DS 48146) - Resolves: #1203338 - ns-slapd double free or corruption crash (DS 48149)- Release 1.2.11.15-57 - Resolves: #1223068 - ldapdelete fails with -r option to delete a sub suffix (DS 48146) - Resolves: #1219990 - bind on db chained to AD returns err=32 (DS 48183) - Resolves: #1219208 - cleanAllRUV task limit not being enforced correctly (DS 48158)- Release 1.2.11.15-56 - Resolves: #1219218 - fix coverity issues (DS 48151)- Release 1.2.11.15-55 - Resolves: #1118285 - Lowering the log level of "Configured SSL version range" message (1.2.11 only) (DS 48180) - Resolves: #1211006 - start/stop/restart-dirsrv utilities should ignore admin-serv directory (DS 48148) - Resolves: #1219208 - Remove cleanAllRUV task limit of 4 (DS 48158) - Resolves: #1219218 - Improve CleanAllRUV logging (DS 48151)- Release 1.2.11.15-54 - Resolves: #1207983 - disable writing unhashed#user#password to changelog (DS 561) - Resolves: #1207024 - IPA Replicate creation fails with error "Update failed! Status: [10 Total update abortedLDAP error: Referral]" (DS 47942) - Resolves: #1211077 - nsslapd-ndn-cache-enabled returns 1 or 0 instead of "on" or "off" (DS 408) - Resolves: #1211006 - start/stop/restart-dirsrv utilities should ignore admin-serv directory (DS 48148) - Resolves: #1210996 - Disable SSL v3, by default [389-ds-base-1.2.11 only] (DS 47928) - Resolves: #1214074 - Need a way to abort a cleanallruv abort task (DS 48154) - Resolves: #1212657 - Password is not correctly passed to perl command line tools if it contains shell special characters. (DS 48143) - Resolves: #1218341 - ns-slapd crash related to paged results (DS 48146)- Release 1.2.11.15-53 - Resolves: #1202502 - memory leak in new_passwdPolicy (1.2.11 only) (DS 48135) - Resolves: #1202062 - Non tombstone entry which dn starting with "nsuniqueid=...," cannot be deleted (DS 48133)- Release 1.2.11.15-52 - Resolves: #1193235 - Fix coverity issues and compiler warnings - 2014/12/16, 2014/11/24, 2015/2/18 (DS 47965)- Release 1.2.11.15-51 - Resolves: #1193235 - Fix coverity issues and compiler warnings - 2014/12/16, 2014/11/24, 2015/2/18 (DS 47965) - Resolves: #1171308 - Don't add unhashed password mod if we don't have an unhashed value (DS 47752) - Resolves: #1167976 - memberof skip nested groups breaks the plugin (DS 47963) - Resolves: #1185025 - ldclt needs to support SSL Version range (DS 47996) - Resolves: #1183820 - Windows Sync accidentally cleared raw_entry (DS 47989) - Resolves: #1155569 - nsslapd-db-locks modify not taking into account. (DS 47934) - Resolves: #1145072 - Bad manipulation of passwordhistory (DS 47905) - Resolves: #1144092 - During schema reload sometimes the search returns no results (DS 47973) - Resolves: #1145374 - WinSync - manual replica refresh removes AD-only member values from DS and AD in groups (DS 47884) - Resolves: #1193243 - ldbm_usn_init: Valgrind reports Invalid read / SIGSEGV (DS 47659) - Resolves: #1150368 - provide enabled ciphers as search result (DS 47880) - Resolves: #1153739 - Add SSL/TLS version info to the access log (DS 47945) - Resolves: #1118285 - Disable SSL v3, by default [389-ds-base-1.2.11 only] (DS 47928) - Resolves: #1193241 - logconv.pl -- support parsing/showing/reporting different protocol versions (DS 47949) - Resolves: #1179763 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981) - Resolves: #1175868 - Incorrect assumption in ndn cache (DS 547) - Resolves: #1159124 - perl scripts not returning expected error code (DS 47962) - Resolves: #1115960 - Nested COS definitions can be incorrectly processed (DS 47980) - Resolves: #1175868 - Backport of Normalized DN Cache (DS 408) - Resolves: #1174892 - During delete operation do not refresh cache entry if it is a tombstone (DS 47750) - Resolves: #1174892 - Need to refresh cache entry after called betxn postop plugins (DS 47750) - Resolves: #1193235 - Fix coverity issues (2014/12/16) (DS 47965) - Resolves: #1193235 - Fix coverity issues (2014/11/24) (DS 47965) - Resolves: #1169974 - Account lockout attributes incorrectly updated after failed SASL Bind (DS 47970) - Resolves: #1169975 - Fix coverity issue (DS 47969) - Resolves: #1169975 - COS memory leak when rebuilding the cache (DS 47969) - Resolves: #1170706 - cos_cache_build_definition_list does not stop during server shutdown (DS 47967) - Resolves: #1167976 - skip nested groups breaks memberof fixup task (DS 47963) - Resolves: #1167976 - RFE - memberOf - add option to skip nested group lookups during delete operations (DS 47963) - Resolves: #1171357 - Bind DN tracking unable to write to internalModifiersName without special permissions (DS 47950) - Resolves: #1162704 - Memory leak in password admin if the admin entry does not exist (DS 47958) - Resolves: #1162704 - PasswordAdminDN attribute is not properly returned to client (DS 47952) - Resolves: #1145379 - Fix backport issue to 1.2.11 (DS 47900) - Resolves: #1145379 - Server fails to start if password admin is set (DS 47900) - Resolves: #1145379 - Adding an entry with an invalid password as rootDN is incorrectly rejected (DS 47900) - Resolves: #1141735 - ldclt: assertion failure with -e "add,counteach" -e "object=,rdn=uid:test[A=INCRNNOLOOP(0;24 (DS 47907)- Release 1.2.11.15-50 - Resolves: #1130990 - Problem with single value attribute MMR replication (DS 47915, DS 569)- Release 1.2.11.15-49 - Resolves: #1168150 - CVE-2014-8105: information disclosure through 'cn=changelog' subtree - Resolves: #1130990 - Problem with single value attribute MMR replication (DS 47915) - Resolves: #1136882 - default nsslapd-sasl-max-buffer-size should be 2MB (DS 47457) - Resolves: #1161909 - ACI's are replaced by "ACI_ALL" after editing goup of ACI's including invalid one (DS 47953)- Release 1.2.11.15-48 - Resolves: #1154766 - ns-slapd segfault in libslapd.so.0.0.0 (#47889)- Release 1.2.11.15-47 - Resolves: #1138745 - Memory leak during Reliab15 execution (#47750)- Release 1.2.11.15-46 - Resolves: #1138745 - Memory leak during Reliab15 execution- Release 1.2.11.15-45 - Resolves: #1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (#47885)- Release 1.2.11.15-44 - Resolves: #1079098 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748) - Simple bind hangs after enabling password policy- Release 1.2.11.15-43 - Resolves: #1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (#47885)- Release 1.2.11.15-42 - Resolves: #1129660 - Adding users to user group throws Internal server error.- Release 1.2.11.15-41 - Resolves: #1130252 - dirsrv not running with old openldap (DS 47875)- Release 1.2.11.15-40 - Resolves: #1130252 - dirsrv not running with old openldap (DS 47875) - Resolves: #1103287 - logconv.pl memory continually grows (DS 47446) - Resolves: #1121596 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (DS 443) - Resolves: #1109381 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist (DS 415) - Resolves: #1128759 - Performance degradation with scope ONE after some load (DS 47874) - Resolves: #1127612 - Filter AND with only one clause should be optimized (DS 47872) - Resolves: #1014111 - repl-monitor fails to convert "*" to default values (DS 47862)- Release 1.2.11.15-39 - Resolves: #1123863 EMBARGOED CVE-2014-3562 - unauthenticated information disclosure (Bug 1123477) - Resolves: #1123863 High contention on computed attribute lock (DS 616) - Resolves: #1062763 single valued attribute replicated ADD does not work (DS 47692) - Resolves: #1121596 Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (DS 443) - Resolves: #1014111 Repl-monitor.pl ignores the provided connection parameters (DS 47862) - Resolves: #1115281 New defects found in 389-ds-base-1.2.11 (DS 47863) - Resolves: #1112729 paged results control is not working in some cases when we have a subsuffix. (DS 47824)- Release 1.2.11.15-38 - Resolves: bug 1080185 - revert - Creating a glue fails if one above level is a conflict or missing (DS 47750;Patch233)- Release 1.2.11.15-37 - Resolves: bug 1113606 - server restart wipes out index config if there is a default index (DS 47831) - Resolves: bug 1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (DS 47821) - Resolves: bug 1080185 - Creating a glue fails if one above level is a conflict or missing (DS 47750)- Release 1.2.11.15-36 - Resolves: bug 1088171 - revert - 7-bit check plugin does not work for userpassword attribute (DS 47423)- Release 1.2.11.15-35 - Resolves: Bug 1111404 - 1.2.11 branch: coverity errors (DS 47820)- Release 1.2.11.15-34 - Resolves: bug 1109952 - memory leak in ldapsearch filter objectclass=* (DS 47780) - Resolves: bug 1109443 - Server hangs in cos_cache when adding a user entry (DS 47649) - Resolves: bug 1109333 - 389 Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled. (DS 47793) - Resolves: bug 1109335 - Parent numsubordinate count can be incorrectly updated if an error occurs (DS 47782) - Resolves: bug 1109337 - Nested tombstones become orphaned after purge (DS 47767) - Resolves: bug 1109352 - Tombstone purging can crash the server if the backend is stopped/disabled (DS 47766) - Resolves: bug 1109356 - Coverity issue in 1.3.3 (DS 47740) - Resolves: bug 1109358 - A tombstone entry is deleted by ldapdelete (DS 47731) - Resolves: bug 1109361 - rsa_null_sha should not be enabled by default (DS 47637) - Resolves: bug 1109363 - valgrind - value mem leaks, uninit mem usage (DS 47455) - Resolves: bug 1109373 - provide default syntax plugin (DS 47369) - Resolves: bug 1109377 - Environment variables are not passed when DS is started via service (DS 47693) - Resolves: bug 1109379 - changelog iteration should ignore cleaned rids when getting the minCSN (DS 47627) - Resolves: bug 1109381 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist (DS 415) - Resolves: bug 1109384 - logconv.pl man page missing -m,-M,-B,-D (DS 47447) - Resolves: bug 1109387 - IDL-style can become mismatched during partial restoration - Resolves: bug 1028344 - Slow ldapmodify operation time for large quantities of multi-valued attribute values (DS 346) - Resolves: bug 985270 - [RFE] Add Password adminstrators to RHDS 9 as in http://directory.fedoraproject.org/wiki/Password_Administrator (DS 417, 458, 47522) - Resolves: bug 1070720 - rsearch filter error on any search filter (DS 47722) - Resolves: bug 1095847 - CoS cache re-scanning severely impacts performance (DS 47762) - Resolves: bug 1103287 - logconv.pl memory continually grows (DS 47446) - Resolves: bug 1106917 - managed entry plugin fails to update member pointer on modrdn operation (DS 47813) - Resolves: bug 1048987 - memory leak in ldapsearch filter objectclass=* (DS 47780) - Resolves: bug 1077895 - Memory leak with proxy auth control (DS 47743) - Resolves: bug 1079098 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748) - Resolves: bug 1080185 - Creating a glue fails if one above level is a conflict or missing (DS 47750) - Resolves: bug 1083272 - RHEL6.6 389-ds-base slapd segfault during ipa-replica-instal (DS 47448) - Resolves: bug 1086454 - ACI warnings in error log (DS 47670) - Resolves: bug 1086889 - empty modify returns LDAP_INVALID_DN_SYNTAX (DS 47772) - Resolves: bug 1086901 - mem leak in do_bind when there is an error (DS 47773) - Resolves: bug 1086903 - mem leak in do_search - rawbase not freed upon certain error (DS 47774) - Resolves: bug 1086907 - Performing deletes during tombstone purging results in operation errors (DS 47771) - Resolves: bug 1088171 - 7-bit check plugin does not work for userpassword attribute (DS 47423) - Resolves: bug 1090176 - #481 breaks possibility to reassemble memberuid list (DS 47770) - Resolves: bug 1092097 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone (DS 47787) - Resolves: bug 1094277 - IPA Server Slow Performance, high CPU usage of ns-slapd (DS 47426) - Resolves: bug 1097002 - Problem with deletion while replicated (DS 47764) - Resolves: bug 1098653 - db2bak.pl error with changelogdb (DS 47804) - Resolves: bug 1103337 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..." (DS 47809) - Resolves: bug 1001037 - WinSync removes User must change password flag on the Window side (DS 47492) - Resolves: bug 1004876 - idlistscanlimit per index/type/value (DS 47504) - Resolves: bug 1008021 - Self entry access ACI not working properly (DS 47331) - Resolves: bug 1009122 - replication stops with excessive clock skew (DS 47516) - Resolves: bug 1012699 - DSUtil.pm needs to check $res variable (DS 422) - Resolves: bug 1013133 - logconv.pl - RFE - track bind info (DS 356) - Resolves: bug 1013134 - Improve memory management in logconv.pl (DS 419) - Resolves: bug 1013135 - logconv.pl tool removes the access logs contents if "-M" is is not correctly used (DS 471) - Resolves: bug 1013138 - logconv.pl should handle microsecond timing (DS 539) - Resolves: bug 1013140 - logconv.pl -m not working for all stats (DS 47336) - Resolves: bug 1013141 - logconv.pl missing stats for starttls, ldapi, and autobind (DS 611) - Resolves: bug 1013142 - logconv.pl -m time calculation is wrong (DS 47341) - Resolves: bug 1013152 - add etimes to per second/minute stats (DS 47348) - Resolves: bug 1013160 - Indexed search are logged with 'notes=U' in the access logs (DS 47354) - Resolves: bug 1013161 - improve logconv.pl performance with large access logs (DS 47387) - Resolves: bug 1013162 - logconv warning - Use of comma-less variable list is deprecated (DS 47461) - Resolves: bug 1013163 - logconv.pl uses /var/tmp for BDB temp files (DS 47501) - Resolves: bug 1013164 - Fix various issues with logconv.pl (DS 47520) - Resolves: bug 1013165 - logconv: some stats do not work across server restarts (DS 47533) - Resolves: bug 1014111 - [RFE - RHDS9] CLI report to monitor replication (DS 47538) - Resolves: bug 1014351 - Coverity fixes - 12023, 12024, and 12025 (DS 47540) - Resolves: bug 1016717 - memory leak in range searches (DS 47517) - Resolves: bug 1022500 - Winsync plugin segfault during incremental backoff (DS 47581) - Resolves: bug 1024337 - Overflow in nsslapd-disk-monitoring-threshold on i686 (DS 47638) - Resolves: bug 1026956 - 1.2.11.29 crash when removing entries from cache (DS 47577) - Resolves: bug 1027496 - Replication Failures related to skipped entries due to cleaned rids (DS 47585) - Resolves: bug 1031222 - hard coded limit of 64 masters in agreement and changelog code (DS 47587) - Resolves: bug 1032315 - attrcrypt fails to find unlocked key (DS 47596) - Resolves: bug 1032317 - entries with empty objectclass attribute value can be hidden (DS 47591) - Resolves: bug 1034265 - 7-bit check plugin not checking MODRDN operation (DS 47641) - Resolves: bug 1044106 - logconv: failed logins: Use of uninitialized value in numeric comparison at logconv.pl line 949 (DS 47550) - Resolves: bug 1044108 - logconv: -V does not produce unindexed search report (DS 47551) - Resolves: bug 1049029 - Windows Sync group issues (DS 47642) - Resolves: bug 1053232 - modify-delete userpassword (DS 47678) - Resolves: bug 1053766 - ldapdelete returns non-leaf entry error while trying to remove a leaf entry (DS 47736) - Resolves: bug 1057805 - Size returned by slapi_entry_size is not accurate (DS 47677) - Resolves: bug 1060385 - Logconv.pl with an empty access log gives lots of errors (DS 47713) - Resolves: bug 1062763 - single valued attribute replicated ADD does not work (DS 47692) - Resolves: bug 1070583 - rhds91 389-ds-base-1.2.11.15-31.el6_5.x86_64 crash in db4 _ (DS 47729) - Resolves: bug 1073530 - Enrolling a host into IdM/IPA always takes two attempts (IPA 3377, DS 47704) - Resolves: bug 1074076 - e_uniqueid fails to set if an entry is a conflict entry (DS 47735) - Resolves: bug 1074305 - Under heavy stress, failure of turning a tombstone into glue (DS 47737)- Release 1.2.11.15-33 - Resolves: bug 1044218 - fix memleak caused by 47347 (DS 47623) - Resolves: bug 1071707 - rhds91 389-ds-base-1.2.11.15-31.el6_5 crash on paged searches followed by simple srch (DS 47707)- Release 1.2.11.15-32 - Resolves: bug 1074848 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-6.6] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)- Resolves: bug 1033405 - regression in ipa due to patch for ns-slapd stuck in DS_Sleep- Resolves: bug 1024977 CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches- Bump version to 1.2.11.15-29 - Resolves: bug 1008013: DS91: ns-slapd stuck in DS_Sleep- Bump version to 1.2.11.15-28 - Resolves: Bug 1016038 - Users from AD sub OU does not sync to IPA (ticket 47488)- Bump version to 1.2.11.15-27 - Resolves: Bug 1013735 - CLEANALLRUV doesnt run across all replicas (ticket 47509)- Bump version to 1.2.11.15-26 - Resolves: Bug 947583 - ldapdelete returns non-leaf entry error while trying to remove a leaf entry (ticket 47534)- Bump version to 1.2.11.15-25 - Resolves: Bug 1006846 - 2Master replication with SASL/GSSAPI auth broken (ticket 47523) - Resolves: Bug 1007452 - Under specific values of nsDS5ReplicaName, replication may get broken or updates (ticket 47489)- Bump version to 1.2.11.15-24 - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold; Changed CONFIG_INT to CONFIG_LONG for nsslapd-disk-monioring-threshold (ticket 47427)- Bump version to 1.2.11.15-23 - Resolves: Bug 1000632 - CVE-2013-4283 389-ds-base: ns-slapd crash due to bogus DN - Resolves: Bug 1002260 - server fails to start after upgrade(schema error) (ticket 47318)- Bump version to 1.2.11.15-22 - Resolves: Bug 923909 - 389-ds-base cannot handle Kerberos tickets with PAC (ticket 632) - Resolves: Bug 928159 - CVE-2013-1897 389-ds: unintended information exposure when rootdse is enabled - Resolves: Bug 947583 - ldapdelete returns non-leaf entry error while trying to remove a leaf entry (ticket 47367) - Resolves: Bug 951616 - error syncing group if group member user is not synced (ticket 47327) - Resolves: Bug 953052 - DESC should not be empty as per RFC 2252 (ldapv3) (ticket 47376) - Resolves: Bug 957305 - DS instance crashes under a high load (ticket 47349) - Resolves: Bug 957864 - Simple paged results should support async search (ticket 47347) - Resolves: Bug 958522 - loading an entry from the database should use str2entry_fast (ticket 531) - Resolves: Bug 962885 - RHEL 6.2 to 6.4 ipa upgrade selinuxusermap data not replicating (ticket 47362) - Resolves: Bug 963234 - When integrating with Red Hat IDM/DS, an LDAP protocol error is thrown (ticket 47361) - Resolves: Bug 966781 - new ldap connections can block ldaps and ldapi connections (ticket 47359) - Resolves: Bug 968383 - Wrong error code return when using EXTERNAL SASL and untrusted certificate (ticket 580) - Resolves: Bug 968503 - flush_ber error sending back start_tls response will deadlock (ticket 47375) - Resolves: Bug 969210 - make listen backlog size configurable (ticket 47377) - Resolves: Bug 970995 - RHDS not shutting down when disk monitoring threshold is reached to half. (ticket 47385) - Resolves: Bug 971033 - connections attribute in cn=snmp,cn=monitor is counted twice (ticket 47383) - Resolves: Bug 971966 - 389 DS Replication failures due to Fractional updates (ticket 47386) - Resolves: Bug 972976 - ldbm errors when adding/modifying/deleting entries (ticket 47392) - Resolves: Bug 973583 - ns-slapd instance crashed with signal 11 SIGSEGV (ticket 47391) - Resolves: Bug 974361 - Account policy plugin fails to lock user when policy is created for individual users to lock based to createtimestamp. (ticket 47397) - Resolves: Bug 974719 - rhds90 crash on tombstone modrdn (ticket 47396) - Resolves: Bug 974875 - Attributes fail to be encrypted/decrypted properly when replicated (ticket 47393) - Resolves: Bug 975243 - DS9 still observes altStateAttrName as createTimestamp when attribute is removed from the account policy (ticket 47395) - Resolves: Bug 975250 - Changelog deadlock replication failures with DNA (ticket 47410) - Resolves: Bug 976546 - Attribute names are incorrect in search results (ticket 47402) - Resolves: Bug 979169 - allow setting db deadlock rejection policy (ticket 47409) - Resolves: Bug 979435 - Replication problem with add-delete requests on single-value (ticket 47424) - Resolves: Bug 979515 - CVE-2013-2219 Directory Server: ACLs inoperative in some search scenarios - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold (ticket 47427) - Resolves: Bug 983091 - Memory leak in 389-ds-base 1.2.11.15 (ticket 47428) - Resolves: Bug 986131 - Very large entryusn values after enabling the USN plugin and the lastusn value is negative. (ticket 47435) - Resolves: Bug 986424 - fix recent compiler warnings (ticket 47378) - Resolves: Bug 986857 - Disk Monitoring not checking filesystem with logs (ticket 47441) - Resolves: Bug 987703 - memleaks in set_krb5_creds (ticket 47421) - Resolves: Bug 988562 - deadlock after adding and deleting entries (ticket 47449) - Resolves: Bug 989692 - Sorting with attributes in ldapsearch gives incorrect result (ticket 543)This patch is found broken and duplicated. Getting rid of it in 1.2.11.15-22. commit 2b3a50d55707ffa281c922ec188850576b757934 Author: Mark Reynolds Date: Tue Jul 23 10:28:45 2013 -0400 Add patch 0049 for Tickets-47427-47441- Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 5 limits not displayed correctly). (ticket 47427)- Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 4). (ticket 47427)- Bump version to 1.2.11.15-19 - Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 3). (ticket 47427)- Bump version to 1.2.11.15-19 - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold(part 2). (ticket 47427) - Resolves: Bug 986857 - Disk Monitoring not checking filesystem with logs (ticket 47741)- Bump version to 1.2.11.15-18 - Resolves: Bug 970995 - DS not shutting down when disk monitoring threshold is reached to half. (Ticket 47385) - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold. (ticket 47427)- Resolves: Bug 921937 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627) - Resolves: Bug 923503 - cleanAllRUV task fails to cleanup config upon completion (ticket 623)bump version to 1.2.11.15-13 - Resolves: Bug 923503 - cleanAllRUV task fails to cleanup config upon completion (ticket 623) - Resolves: Bug 923502 - Coverity issue 13091 - Resolves: Bug 923407 - Deadlock in DNA plug-in (ticket 634) - Resolves: Bug 921937 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627) - Resolves: Bug 923504 - crash in aci evaluation (ticket 628) - Resolves: Bug 928159 - unintended information exposure when anonymous access is set to rootdse (ticket 47308)- Resolves: Bug 910581 - dse.ldif is 0 length after server kill or machine kill - Resolves: Bug 908861 - Error messages encountered when using POSIX winsync - Resolves: Bug 907985 - DNA: use event queue for config update only at the start up - Resolves: Bug 830334 - Invalid chaining config triggers a disk full error and shutdown - Resolves: Bug 906583 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled) - Resolves: Bug 906005 - Valgrind reports memleak in modify_update_last_modified_attr - Resolves: Bug 905825 - PamConfig schema not updated during upgrade - Resolves: Bug 913215 - ns-slapd segfaults while trying to delete a tombstone entry - Resolves: Bug 913229 - unauthenticated denial of service vulnerability in handling of LDAPv3 control data- Resolves: Bug 896256 - updating package touches configuration files- Resolves: Bug 889083 - For modifiersName/internalModifiersName feature, internalModifiersname is not working for DNA plugin- Resolves: Bug 891930 - DNA plugin no longer reports additional info when range is depleted- Resolves: Bug 887855 - RootDN Access Control plugin is missing after upgrade from RHEL63 to RHEL64- Resolves: Bug 830355 - [RFE] improve cleanruv functionality - Resolves: Bug 876650 - Coverity revealed defects - Ticket #20 - [RFE] Allow automember to work on entries that have already been added (Bug 768084) - Resolves: Bug 834074 - [RFE] Disable replication agreements - Resolves: Bug 878111 - ns-slapd segfaults if it cannot rename the logs- Resolves: Bug 880305 - spec file missing dependencies for x86_64 6ComputeNode - use perl-Socket6 on RHEL6- Resolves: Bug 880305 - spec file missing dependencies for x86_64 6ComputeNode- Resolves: Bug 868841 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error - Resolves: Bug 868853 - Winsync: DS error logs report wrong version of Windows AD when winsync is configured. - Resolves: Bug 875862 - crash in DNA if no dnamagicregen is specified - Resolves: Bug 876694 - RedHat Directory Server crashes (segfaults) when moving ldap entry - Resolves: Bug 876727 - Search with a complex filter including range search is slow - Ticket #495 - internalModifiersname not updated by DNA plugin (Bug 834053)- Resolves: Bug 870158 - slapd entered to infinite loop during new index addition - Resolves: Bug 870162 - Cannot abandon simple paged result search - c970af0 Coverity defects - 1ac087a Fixing compiler warnings in the posix-winsync plugin - 2f960e4 Coverity defects - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes- Resolves: Bug 834063 [RFE] enable attribute that tracks when a password was last set on an entry in the LDAP store; Ticket #478 passwordTrackUpdateTime stops working with subtree password policies - Resolves: Bug 847868 [RFE] support posix schema for user and group sync; Ticket #481 expand nested posix groups - Resolves: Bug 860772 Change on SLAPI_MODRDN_NEWSUPERIOR is not evaluated in acl - Resolves: Bug 863576 Dirsrv deadlock locking up IPA - Resolves: Bug 864594 anonymous limits are being applied to directory manager- Resolves: Bug 856657 dirsrv init script returns 0 even when few or all instances fail to start - Resolves: Bug 858580 389 prevents from adding a posixaccount with userpassword after schema reload- Resolves: Bug 852202 Ipa master system initiated more than a dozen simultaneous replication sessions, shut itself down and wiped out its db - Resolves: Bug 855438 CLEANALLRUV task gets stuck on winsync replication agreement- Resolves: Bug 847868 [RFE] support posix schema for user and group sync - fix upgrade issue with plugin config schema - posix winsync has default plugin precedence of 25- Resolves: Bug 800051 Rebase 389-ds-base to 1.2.11 - Resolves: Bug 742054 SASL/PLAIN binds do not work - Resolves: Bug 742381 MOD operations with chained delete/add get back error 53 on backend config - Resolves: Bug 746642 [RFE] define pam_passthru service per subtree - Resolves: Bug 757836 logconv.pl restarts count on conn=0 instead of conn=1 - Resolves: Bug 768084 [RFE] Allow automember to work on entries that have already been added - Resolves: Bug 782975 krbExtraData is being null modified and replicated on each ssh login - Resolves: Bug 803873 Sync with group attribute containing () fails - Resolves: Bug 818762 winsync should not delete entry that appears to be out of scope - Resolves: Bug 830001 unhashed#user#password visible after changing password [rhel-6.4] - Resolves: Bug 830256 Audit log - clear text password in user changes - Resolves: Bug 830331 ns-slapd exits/crashes if /var fills up - Resolves: Bug 830334 Invalid chaining config triggers a disk full error and shutdown - Resolves: Bug 830335 restore of replica ldif file on second master after deleting two records shows only 1 deletion - Resolves: Bug 830336 db deadlock return should not log error - Resolves: Bug 830337 usn + mmr = deletions are not replicated - Resolves: Bug 830338 Change DS to purge ticket from krb cache in case of authentication error - Resolves: Bug 830340 Make the CLEANALLRUV task one step - Resolves: Bug 830343 managed entry sometimes doesn't delete the managed entry - Resolves: Bug 830344 [RFE] Improve replication agreement status messages - Resolves: Bug 830346 ADD operations not in audit log - Resolves: Bug 830347 389 DS does not support multiple paging controls on a single connection - Resolves: Bug 830348 Slow shutdown when you have 100+ replication agreements - Resolves: Bug 830349 cannot use & in a sasl map search filter - Resolves: Bug 830353 valgrind reported memleaks and mem errors - Resolves: Bug 830355 [RFE] improve cleanruv functionality - Resolves: Bug 830356 coverity 12625-12629 - leaks, dead code, unchecked return - Resolves: Bug 832560 [abrt] 389-ds-base-1.2.10.6-1.fc16: slapi_attr_value_cmp: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - Resolves: Bug 833202 transaction retries need to be cache aware - Resolves: Bug 833218 ldapmodify returns Operations error - Resolves: Bug 833222 memberOf attribute and plugin behaviour between sub-suffixes - Resolves: Bug 834046 [RFE] Add nsTLS1 attribute to schema and objectclass nsEncryptionConfig - Resolves: Bug 834047 Fine Grained Password policy: if passwordHistory is on, deleting the password fails. - Resolves: Bug 834049 [RFE] Add schema for DNA plugin - Resolves: Bug 834052 [RFE] limiting Directory Manager (nsslapd-rootdn) bind access by source host (e.g. 127.0.0.1) - Resolves: Bug 834053 [RFE] Plugins - ability to control behavior of modifyTimestamp/modifiersName - Resolves: Bug 834054 Should only update modifyTimestamp/modifiersName on MODIFY ops - Resolves: Bug 834056 Automembership plugin fails in a MMR setup, if data and config area mixed in the plugin configuration - Resolves: Bug 834057 ldap-agent crashes on start with signal SIGSEGV - Resolves: Bug 834058 [RFE] logconv.pl : use of getopts to parse commandline options - Resolves: Bug 834060 passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions - Resolves: Bug 834061 [RFE] RHDS: Implement SO_KEEPALIVE in network calls. - Resolves: Bug 834063 [RFE] enable attribute that tracks when a password was last set on an entry in the LDAP store - Resolves: Bug 834064 dnaNextValue gets incremented even if the user addition fails - Resolves: Bug 834065 Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied - Resolves: Bug 834074 [RFE] Disable replication agreements - Resolves: Bug 834075 logconv.pl reporting unindexed search with different search base than shown in access logs - Resolves: Bug 835238 Account Usability Control Not Working - Resolves: Bug 836386 slapi_ldap_bind() doesn't check bind results - Resolves: Bug 838706 referint modrdn not working if case is different - Resolves: Bug 840153 Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled - Resolves: Bug 841600 Referential integrity plug-in does not work when update interval is not zero - Resolves: Bug 842437 dna memleak reported by valgrind - Resolves: Bug 842438 Report during startup if nsslapd-cachememsize is too small - Resolves: Bug 842440 memberof performance enhancement - Resolves: Bug 842441 "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs - Resolves: Bug 847868 [RFE] support posix schema for user and group sync - Resolves: Bug 850683 nsds5ReplicaEnabled can be set with any invalid values. - Resolves: Bug 852087 [RFE] add attribute nsslapd-readonly so we can reference it in acis - Resolves: Bug 852088 server to server ssl client auth broken with latest openldap - Resolves: Bug 852839 variable dn should not be used in ldbm_back_delete- Resolves: Bug 835238 - Account Usability Control Not Working- Resolves: Bug 834096 - slapi_attr_value_cmp: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)- Resolves: Bug 830001 - unhashed#user#password visible after changing password -- patch 0020 disallows users' direct modify on unhashed#user#password- Resolves: Bug 830001 - unhashed#user#password visible after changing password -- patch 0019 fixes deref issue.- Resolves: Bug 830001 - unhashed#user#password visible after changing password - Resolves: Bug 830256 - Audit log - clear text password in user changes- Resolves: Bug 824014 - DS Shuts down intermittently- Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress -- patch 0015 fixes a small memleak in previous patch- Resolves: Bug 822700 - Bad DNs in ACIs can segfault ns-slapd- Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress - Resolves: Bug 821542 - letters in object's cn get converted to lowercase when renaming object- Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress - 1.2.10.2-10 was built from the private branch- Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress- Resolves: Bug 815991 - crash in ldap_initialize with multiple threads - previous fix was still crashing in ldclt- Resolves: Bug 815991 - crash in ldap_initialize with multiple threads- Resolves: Bug 813964 - IPA dirsvr seg-fault during system longevity test- Resolves: Bug 811291 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - typo in previous patch- Resolves: Bug 811291 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)- Resolves: Bug 803930 - ipa not starting after upgade because of missing data - get rid of posttrans - move update code to post- Resolves: Bug 800215 - Certain CMP operations hang or cause ns-slapd to crash- Resolves: Bug 800215 - Certain CMP operations hang or cause ns-slapd to crash - Resolves: Bug 800217 - fix valgrind reported issues- Resolves: Bug 766989 - Rebase 389-ds-base to 1.2.10 - Resolves: Bug 796770 - crash when replicating orphaned tombstone entry- Resolves: Bug 766989 - Rebase 389-ds-base to 1.2.10 - Resolves: Bug 790491 - 389 DS Segfaults during replica install in FreeIPA- Resolves: Bug 766989 - Rebase 389-ds-base to 1.2.10- Resolves: Bug 766989 - Rebase 389-ds-base to 1.2.10- Bug 759301 - Incorrect entryUSN index under high load in replicated environment - Bug 743979 - Add slapi_rwlock API and use POSIX rwlocks - WARNING - patches 0030 and 0031 remove and add back the file configure - this is necessary because the merge commit to "rebase" RHEL-6 to 1.2.9.6 - seriously messed up configure - so in order to add the patch for 743979 - which also touched configure, the file had to be removed and added back - also note that the commit for the RHEL-6 branch to remove configure does - not work - the way patch works, it has to match every line exactly in - order to remove the file, and because the merge commit messed things - up, it doesn't work - So, DO NOT TOUCH 0030-remove-configure-to-get-rid-of-merge-conflict.patch - BECAUSE IT IS HAND CRAFTED and not generated by git format-patch - if you must regenerate this file, - git format-patch ...args... to generate a file in patch format - remove all of the patch matches (all the lines beginning with -) - get the 1.2.9.6 version of configure from the source tarball - wc -l configure to get the number of lines in the file - sed 's/^/-/' configure >> thefile.patch - edit thefile.patch to have the right number of lines and have the - patch commands in the correct place - PROFIT!!!- Bug 752577 - crash when simple paged fails to send entry to client - Bug 757897 - rhds81 modrn operation and 100% cpu use in replication - Bug 757898 - Fix Coverity (11104) Resource leak: ids_sasl_user_to_entry (slapd/saslbind.c)- Bug 752155 - Use restorecon after creating init script lock file- Bug 742381 - part3 - MOD operations with chained delete/add get - back error 53 on backend config- add the actual patch commands for the new patch files- Bug 742661 - allow resource limits to be set for paged searches - independently of limits for other searches/operations - Bug 742381 - part2 - MOD operations with chained delete/add get - back error 53 on backend config - Bug 742382 - allow nsslapd-idlistscanlimit to be set dynamically and per-user - Bug 742381 - MOD operations with chained delete/add get back - error 53 on backend config - Bug 739959 - Allow separate fractional attrs for incremental and total protocols- Bug 739196 - Consolidate DS and DS replication bits in one package in RHEL 6.2 - There were two patches in ds-replication for RHEL 6.2 that were added post - rebase - the two patches for 722292 - these are now in the 389-ds-base package - and have been cherry-picked to the RHEL-6 internal branch- Bug 736137 - renaming a managed entry does not update mepmanagedby- Bug 735217 - simple paged search + ip/dns based ACI hangs server- Bug 733443 - large targetattr list with syntax errors cause server to crash or hang - Bug 734267 - upgradednformat failed to add RDN value - subtree and user account lockout policies implemented? - Bug 733434 - passwordisglobalpolicy attribute brakes TLS chaining - Bug 733442 - Ignore an error 32 in this case since we're adding a new AutoMember definition - Bug 733440 - RFE: add option to allow server to start with an expired certificate- not released internally- Bug 728510 - Run dirsync after sending updates to AD - Bug 729717 - Fatal error messages when syncing deletes from AD - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working. - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash - Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed again - separate tests for atomic ops and atomic bool cas- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix another coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - previous patch broke build on el5- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error- Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed to use configure test for GCC provided 64-bit atomic functions- Bug 663752 - Cert renewal for attrcrypt and encchangelog - this was "re-fixed" due to a deadlock condition with cl2ldif task cancel - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma - Bug 725743 - Make memberOf use PRMonitor for it's operation lock - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package - Bug 723937 - Slapi_Counter API broken on 32-bit F15 - look for separate openldap ldif library - Split automember regex rules into separate entries - writing Inf file shows SchemaFile = ARRAY(0xhexnum) - add support for ldif files with changetype: add - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file - Bug 713209 - Update sudo schema - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9- Bug 726136 - memberOf plug-in can deadlock when used with other plug-ins - Bug 725912 - Instance upgrade fails when upgrading 389-ds-base package- Bug 720452 - RDN with % can cause crashes or missing entries - Bug 720051 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2. - Bug 720458 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not - Bug 720459 - Update sudo schema- Bug 718351 - Intensive updates on masters could break the consumer's cache - Bug 714298 - unresponsive LDAP service when deleting vlv on replica- Bug 714298 - unresponsive LDAP service when deleting vlv on replica - memleak in previous patch- Bug 714298 - unresponsive LDAP service when deleting vlv on replica- Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package - Bug 713317 - Cert renewal for attrcrypt and encchangelog - Bug 711266 - DS can not restart after create a new objectClass has entryusn attribute - Bug 712167 - ns-slapd segfaults using suffix referrals - Bug 709868 - only allow FIPS approved cipher suites in FIPS mode - Bug 711516 - Support upgrade from Red Hat Directory Server - Bug 711241 - memory leak found by reliab12 - Bug 711265 - Cannot disable SSLv3 and use TLS only - Bug 711513 - slapd stops responding- Resolves: Bug 705172 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory - use ix86 macro instead of hardcoded i386 etc.- Resolves: Bug 705172 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory - cannot use wildcard in ExclusiveArch- Resolves: Bug 705172 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory- Resolves: Bug 697663 - memory leak: entryusn value is leaked when an entry is deleted - Resolves: Bug 699458 - windows sync can lose old multi-valued attribute values when a new value is added - Resolves: Bug 700215 - ldclt core dumps - Resolves: Bug 700665 - Linked attributes callbacks access free'd pointers after close - Resolves: Bug 701057 - userpasswd not replicating- 389-ds-base-1.2.8.2 - Bug 696407 - If an entry with a mixed case RDN is turned to be - a tombstone, it fails to assemble DN from entryrdn- 389-ds-base-1.2.8.1 - Bug 693962 - Full replica push loses some entries with multi-valued RDNs- added srcver because the version from the source is now - different than the source in the package- 389-ds-base-1.2.8.0 - Bug 693523 - Unable to change schema online - Bug 693520 - matching rules do not inherit from superior attribute type - Bug 693522 - nsMatchingRule does not work with multiple values - Bug 693519 - cannot use localized matching rules - Bug 693516 - Segfault on index update during full replication push on 1.2.7.5- Bug 668385 - DS pipe log script is executed as many times as the dirsrv service is restarted - bump version to 1.2.8.rc4 - bump ds console version to 1.2.5- Bug 690536 - Double free in dse_add()- 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2 - Bug 689908 - (cov#10610) Fix Coverity NULL pointer dereferences - Bug 689895 - ns-newpwpolicy.pl needs to use the new DN format - Bug 689889 - RFE: allow fine grained password policy duration attributes - in days, hours, minutes, as well - Bug 688730 - Exported tombstone cannot be imported correctly - Bug 684349 - slapd crashing when traffic replayed - Bug 682897 - Allow maxlogsize to be set if logmaxdiskspace is -1 - introduce the concept of the srcprerel - with rc2, we did not rebase - the source, we are still using the .rc1 source tarball, so we use - srcprerel of .rc1 but package pre-release is .rc2- 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1 - Resolves: Bug 680575 - Rebase 389-ds-base to pick the latest features and fixes - Resolves: Bug 681720 - setup-ds-admin.pl - improve hostname validation - Resolves: Bug 681611 - RFE: allow fine grained password policy duration attributes in - days, hours, minutes, as well - Resolves: Bug 681550 - setup-ds-admin.pl --debug does not log to file - Resolves: Bug 681379 - ns-slapd segfaults if I have more than 100 DBs - Resolves: Bug 680290 - setup-ds.pl should set SuiteSpotGroup automatically - Resolves: Bug 681351 - crash in ldap-agent when using OpenLDAP - Resolves: Bug 681332 - modifying attr value crashes the server, which is supposed to - be indexed as substring type, but has octetstring syntax - Resolves: Bug 680305 - ds-logpipe.py script is failing to validate "-s" and - "--serverpid" options with "-t".- Bug 676598 - 389-ds-base multilib: file conflicts - split off libs into a separate -libs package - remove old crufty fedora-ds stuff- do not create /var/run/dirsrv - setup will create it instead - remove the fedora-ds initscript upgrade stuff - we do not support that anymore - convert the remaining lua stuff to plain old shell script- 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3 - Bug 675320 - empty modify operation with repl on or lastmod off will crash server - Bug 675265 - preventryusn gets added to entries on a failed delete - Bug 677774 - added support for tmpfiles.d - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search es - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH - Bug 671199 - Don't allow other to write to rundir - Bug 678646 - Ignore tombstone operations in managed entry plug-in - Bug 676053 - export task followed by import task causes cache assertion - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8 - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used - Bug 676689 - crash while adding a new user to be synced to windows - Bug 604881 - admin server log files have incorrect permissions/ownerships - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - Bug 675853 - dirsrv crash segfault in need_new_pw()- 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2 - Errata Patches in patch files - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result searches - Bug 671199 - Don't allow other to write to rundir - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH - bugs fixed in released code - Bug 674430 - Improve error messages for attribute uniqueness - Bug 616213 - insufficient stack size for HP-UX on PA-RISC - Bug 615052 - intrinsics and 64-bit atomics code fails to compile - on PA-RISC - Bug 151705 - Need to update Console Cipher Preferences with new ciphers - Bug 668862 - init scripts return wrong error code - Bug 670616 - Allow SSF to be set for local (ldapi) connections - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the - log output to the text file - Bug 668619 - slapd stops responding - Bug 624547 - attrcrypt should query the given slot/token for - supported ciphers - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any - error message in logs- 1.2.8-0.1.a1 release - many bug fixes- 1.2.7.5 release - git tag 389-ds-base-1.2.7.5 - Bug 663597 - Memory leaks in normalization code- 1.2.7.4 release - git tag 389-ds-base-1.2.7.4 - Bug 661792 - Valid managed entry config rejected- 1.2.7.3 release - git tag 389-ds-base-1.2.7.3 - Bug 658312 - Invalid free in Managed Entry plug-in - Bug 641944 - Don't normalize non-DN RDN values- 1.2.7.2 release - git tag 389-ds-base-1.2.7.2 - Bug 659456 - Incorrect usage of ber_printf() in winsync code - Bug 658309 - Process escaped characters in managed entry mappings - Bug 197886 - Initialize return value for UUID generation code - Bug 658312 - Allow mapped attribute types to be quoted - Bug 197886 - Avoid overflow of UUID generator- 1.2.7.1 release - git tag 389-ds-base-1.2.7.1 - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes - Bug 656392 - Remove calls to ber_err_print() - Bug 625950 - hash nsslapd-rootpw changes in audit log- the 1.2.7 release - remove the ds-replication sub-package - there will be a new package for it - remove the selinux policy - dirsrv policy will be provided by the base OS- create ds-replication sub package- bumped the version to get it to build in brew- 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4 - Bug 647932 - multiple memberOf configuration adding memberOf where there is no member - Bug 491733 - dbtest crashes - Bug 606545 - core schema should include numSubordinates - Bug 638773 - permissions too loose on pid and lock files - Bug 189985 - Improve attribute uniqueness error message - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat ions - Bug 619633 - Make attribute uniqueness obey requiredObjectClass- 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Adding the ancestorid fix code to ##upgradednformat.pl.- 1.2.7.a3 release - a2 was never released - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Bug 629681 - Retro Changelog trimming does not behave as expected - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif - are not upgraded in the server instance schema dir- 1.2.7.a2 release - a1 was the OpenLDAP testday release - git tag 389-ds-base-1.2.7.a2 - added openldap support on platforms that use openldap with moznss - for crypto (F-14 and later) - many bug fixes - Account Policy Plugin (keep track of last login, disable old accounts)- added openldap support- bump rel to rebuild again- bump rel to rebuild- This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1 - Bug 634561 - Server crushes when using Windows Sync Agreement - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self - Bug 612264 - ACI issue with (targetattr='userPassword') - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager" - Bug 631862 - crash - delete entries not in cache + referint- This is the final 1.2.6 release- 1.2.6 release candidate 7 - git tag 389-ds-base-1.2.6.rc7 - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6- 1.2.6 release candidate 6 - git tag 389-ds-base-1.2.6.rc6 - Bug 617013 - repl-monitor.pl use cpu upto 90% - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors - Bug 613833 - Allow dirsrv_t to bind to rpc ports - Bug 612242 - membership change on DS does not show on AD - Bug 617629 - Missing aliases in new schema files - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments - Bug 617862 - Replication: Unable to delete tombstone errors - Bug 594745 - Get rid of dirsrv_lib_t label- make selinux-devel explicit Require the base package in order - to comply with Fedora Licensing Guidelines- 1.2.6 release candidate 3 - git tag 389-ds-base-1.2.6.rc3 - Bug 603942 - null deref in _ger_parse_control() for subjectdn - 609256 - Selinux: pwdhash fails if called via Admin Server CGI - 578296 - Attribute type entrydn needs to be added when subtree rename switch is on - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"- 1.2.6 release candidate 2- install replication session plugin header with devel package- 1.2.6 release candidate 1- Mass rebuild with perl-5.12.0- 1.2.6.a4 release- 1.2.6.a3 release - add managed entries plug-in - many bug fixes - moved selinux subpackage into base package- rebuild for icu 4.4- 1.2.6.a2 release - add support for matching rules - many bug fixes- 1.2.6.a1 release - Added SELinux policy and subpackages- 1.2.5 final release- 1.2.5.rc4 release- 1.2.5.rc3 release- 1.2.5.rc2 release- 1.2.5.rc1 release- 1.2.5.a1 release- 1.2.4 release - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif- 1.2.3 release - added template-initconfig to %files - %posttrans now runs update to update the server instances - servers are shutdown, then restarted if running before install - scriptlets mostly use lua now to pass data among scriptlet phases- rebuild with new openssl to fix dependencies- backed out - added template-initconfig to %files - this change is for the next major release - bump version to 1.2.2 - fix reopened 509472 db2index all does not reindex all the db backends correctly - fix 518520 - pre hashed salted passwords do not work - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of - bugs fixed in 1.2.2- rebuilt with new openssl- added template-initconfig to %files- added BuildRequires pcre- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- change name to 389 - change version to 1.2.1 - added initial support for numeric string syntax - added initial support for syntax validation - added initial support for paged results including sorting- final release 1.2.0 - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389 - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428- re-enable ppc builds- exclude ppc builds - needs extensive porting work- new release 1.2.0 - Made devel package depend on mozldap-devel - only create run dir if it does not exist - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330- added db4-utils to Requires for verify-db.pl- Enabled LDAPI autobind- updated update to patch bug463991-bdb47.patch- updated patch bug463991-bdb47.patch- added patch bug463991-bdb47.patch - make ds work with bdb 4.7- rolled back bogus winsync memory leak fix- winsync api improvements for modify operations- This is the 1.1.2 release. The bugs fixed can be found here - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721 - Added winsync-plugin.h to the devel subpackage- bump rev to rebuild and pick up new version of ICU- 1.1.1 release candidate - several bug fixes- fix bugzilla 439829 - patch to allow working with NSS 3.11.99 and later- add patch to allow server to work with NSS 3.11.99 and later - do NSS_Init after fork but before detaching from console- add Requires for versioned perl (libperl.so)- previous fix for 434403 used the wrong patch - this is the right one- Resolves bug 434403 - GCC 4.3 build fails - Rolled new source tarball which includes Nathan's fix for the struct ucred - NOTE: Change version back to 1.1.1 for next release - this release was pulled from CVS tag FedoraDirSvr110_gcc43- Autorebuild for GCC 4.3- This is the GA release of Fedora DS 1.1 - Removed version numbers for BuildRequires and Requires - Added full URL to source tarball- Rebuild for deps- This is the beta2 release - new file added to package - /etc/sysconfig/dirsrv - for setting - daemon environment as is usual in other linux daemons- fix build breakage due to open() - mock could not find BuildRequires: db4-devel >= 4.2.52 - mock works if >= version is removed - it correctly finds db4.6- Change pathnames to use the pkgname macro which is dirsrv - get rid of cvsdate in source name- Added Requires for perldap, cyrus sasl plugins - Removed template-migrate* files - Added perl module directory - Removed install.inf - setup-ds.pl can now easily generate one- added requires for mozldap-tools- update to latest sources - added migrateTo11 to allow migrating instances from 1.0.x to 1.1 - ldapi support - fixed pam passthru plugin ENTRY method- Renamed package to fedora-ds-base, but keep names of paths/files/services the same - use the shortname macro (fedora-ds) for names of paths, files, and services instead - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base - updated to latest sources- More cleanup suggested by Dennis Gilmore - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1- latest sources - added init scripts - use /etc as instconfigdir- latest sources - moved all executables to _bindir- latest sources - added /var/tmp/fedora-ds to dirs- added logconv.pl - added slapi-plugin.h to devel package - added explicit dirs for /var/log/fedora-ds et. al.- just move all .so files into the base package from the devel package- Move the plugin *.so files into the main package instead of the devel - package because they are loaded directly by name via dlopen- Move the script-templates directory to datadir/fedora-ds- change mozldap to mozldap6- remove . from cvsdate define- Having a problem building in Brew - may be Release format- Changed version to 1.1.0 and added Release 1.el4.cvs20070119 - merged in changes from Fedora Extras candidate spec file- Bump component versions (nspr, nss, svrcore, mozldap) to their latest - remove unneeded patches- update to a cvs snapshot - fedorafy the spec - create -devel subpackage - apply a patch to use mozldap not mozldap6 - apply a patch to allow --prefix to work correctly- Fixed the problem where the server would crash upon shutdown in dblayer - due to a race condition among the database housekeeping threads - Fix a problem with normalized absolute paths for db directories- Touch all of the ldap/admin/src/scripts/*.in files so that they - will be newer than their corresponding script template files, so - that make will rebuild them.- Chown new schema files when copying during instance creation- Configure will get ldapsdk_bindir from pkg-config, or $libdir/mozldap6- use eval to sed ./configure into ../configure- jump through hoops to be able to run ../configure- Need to make built dir in setup section- The template scripts needed to use @libdir@ instead of hardcoding - /usr/lib - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall - do the actual build in a "built" subdirectory, until we remove - the old script templates- Make replication plugin link with libdb- Have make define LIBDIR, BINDIR, etc. for C code to use - especially for create_instance.h- Forgot to checkin new config.h.in for AC_CONFIG_HEADERS- Add perldap as a Requires; update sources- Fix ds_newinst.pl - Remove obsolete #defines- Update sources; rebuild to populate brew yum repo with dirsec-nss- Update sources- initial revision1.2.11.15-97.el6_101.2.11.15-97.el6_10dirsrvlibslapd.so.0libslapd.so.0.0.0389-ds-base-libs-1.2.11.15EXCEPTIONLICENSELICENSE.GPLv2README.devel/usr/lib64//usr/lib64/dirsrv//usr/share/doc//usr/share/doc/389-ds-base-libs-1.2.11.15/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=genericdrpmxz2x86_64-redhat-linux-gnuASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, strippeddirectorysymbolic link to `libslapd.so.0.0.0'"RPRRRRRRRRRR R R R R RRRRRRRRRRRRRRRRRR R$?7zXZ !PH6]"k%[c7B♶6? Aޏ 7a瓹DM|Jb>s\) oYWj(pn.5V^2]BV9N' Ѐ!zo裍 \P:xLk+29]`̄Q`b/g=}}\JzO?*EvWL7UD#׼HM@]Ph o2*\#pu9tdbd4=IWQUAɯ2#1q?)8p$I xF[ Gm4SelaK$, ?̵?=2zHI >3JTֲHv]Pk j^oJ+6NBN4k> Z~\E`9ǎ`9 yBY; bTG܋gWya>Y .AFր9({ޤ#Ly:X @/7A{DI\xyiWkSl]+fCtJ2 ^C<~quo_δy95^rL;HV&H_a˞T'}QM>hQp.w}|R@+[VzB@EdY5I+]`#D. 1:%'"'mx\/Cɑ)C/6ǠFFH,#r<'[m۹ "SAlэ+)2v׭3Ͼy q.C |\l&'%4+7}/(b 8jP9 jec"x"!hI= rL+qjxB2y>SbCcfJآL !M;cRjV< r6:bR z:UP]#ڛR[ZuZbL@_7ڱUPA-Jq-}~mqy _h*h' [-z& d[Iq8QoLyh"Vy;T q9A'b=~CY\yݎ,y:^I(Ic&w0_)"f)R(4\~ڻ~v8 7lqGL5{ǁLZ y%Ah(X^GH΄Iלt&X+| +OPvCwQh_\'G] }&*IZdJ)=;:T)|0AX=|sJ*M V=[$\MvZ*@Q]?JssLsۗB*CDl#H9I#fg/*G$)#8F=xY" ' %ǻ,0+zPAP8G@ܱ3Y;S+(z_Uje'wʷϊ%רݳbG$Sm[B HOݟ'YeYQS&=<ٌyᅏU;tAyVY~:׎V^O|Y}a->{]XUC"3N0yRs)rllP$ոFĂ#(1 йHbKȅ7r̥c-Rz.[ϘOIykA-_ 8 ꍳBBt#gUrL,ǔu!ߗI[ўbB1>8/:unJa('b Y22]G8zZQЍ!M<*`0>gBN4ںYI8Uhb9Ju=WB(s7nX!OSy(ue!Q5i* 4Y+}IVq閮]Y1U՜h.q)LC?M9rWud{}6B*%I)H _,V֘I(@t;\/(W)c+UpqVX!a|R _+5?_aH1y 7G#}Y qJ* _|MnwaoS2iaDi) k͑G(E{{O (VASA?=|2@bWHFzGTJZOgzфUx͌zە7H+uӄժ<ʶ>|u&68]re^j>K U_Ys7ZV TrbtbpIPs@7RЮ9y4|7Bb)L{0Ndx:,n׫ڸd u*6PWmiB=G"%s^sZ"~{h?N i2&T1l1J6b1[jd+4e!SV(tH %{.[i.E a6Au8nU.W~)ܭBKt"$':ݘ).RXJ.jꐩ;!AGЊA4Sc0pߣ(c'qjIrǹ⑸Fm+u$sNJY(QkAU+}HH!FǦ-'x1/n~5'g䬛Jh8CwsqF~P7t#=*XAuHbQ\mS4k4jHf,Pi!7::hd`Oݥ,n̜l`.S_Qi2NؙmK`MEȇDvuUPN|Ib|18a<ғt|lj~Ha쬏J祊#o 1wwBi,pR'oEڰNMexXLes'D+l9}hȨ/pcIѶT[ڹ\{´d݉}KH颻MӨf7d U]oZgPϠqc%NhCQZmfNp\D!h$ }@k$St sekQWQ1|dُȪaq}?ɝ3UJAݣ^aW2Daonn#ȴE*wmro"!H{dBx zAKx_F|s2v3yWȏ}u6״.etoaķM?;I C I^jNFO+W#ʚ/f>;|aF خjжlK4=S0EZ:(4Y=9|0`_1@9p;~"l0n{ұV7cp3C'"^Jo/ܳA/PESyO(kKXs$ Э;hsF_B]6cR: bM@DkRI;$@̂$2LAsIS4:S0ǤqM7]JG\2T3^R*ȄQ ^YI 7.JGZiՀ7YڋiKKb>H|5 @X@ 3rl臓Eguoa'٩ j'}ڢs9*wPCǜ.Wіl!׃֯;`]h, ߂0El8v.]+jCdD6Go iRƟy䱁YYXu+O|9r4%oAEk#Q E&4;lٕvbi 3؟z33:{0.-NZgэ&/͓1і'ZhA R(aLw$|wKM9sE  sʦ"\,oLYDM=2Qǰ,;Bk- m;\rv.;f7- ea^EWӇ| Ô'ILa_x&,E s,LyHȳʺ@!GNލR_gb`\˃C]>{m^@y(+*Sˑ%}E_LhᢼWc9=,v;j^>[0:9SbUKr }ȠEn:E# _*sy!65j" ]&GF:szu62ڃ-P9 H#¯|o=~C4}~U _>BI}7hgy-wOB<Z!>Z4I&9Y E0t>^Q^J}nį&)l1 9(("u4Hi7k60l= X:3H.AZK/vPlwC|W !+9stD_GŝCC6eBX[o@7a{+$U4jz=p0䙹& ]S) !m_Y%ݎ–O'aR$WA=Pz5aaܤBmHN";l(D%{g_`N3hʬE)NU<8m!hSbvdH%w+ܣ_υDx͝j4*stj-:{ѱGQeYy!H PfJ_#TnZboh1Wo H[1!Nipy(˖4=Cʊt.a< HyR|rQj6H1؇ sdKWuC^Z@ ݣ6htýH]rUn]fpia-Yhѕ #=R+P.\H>!*x vp&ʪ2Kud+/,KXbePz Ι4 Ƚne@o.PJa*~F\$rq:zf75Nt #G`57n :CS&k v:kv:<9[ qjcu>*vC{WUM7!bi? <1F{ 9Jy^*ELU3LPˌ&nk&T;Y@rRVg0@T,f( sP.LpaTQ'vGP8#H2ZTrea6&`;p/jr ,Y+DTAy$ڲ(sRuN EٗBB~n?%P3thE\q6[9 qO8ZiOlżfǣ9rΏMC8F)%f589sKlj71S_\O#+1 i6d1S,S^h@TH٘L8Ne4 8z(jx4f>* p+藳F/UV]h @jh/rD`óT#_5$ŜDg 9j?|cR[&"Yʕn[Sk*Eܟ czoTq=vBExh"M570j oTw1mV (D l8σ[gJC^^E H܈ɱo fM ,{l&@3P1׾۟Dg}ȑb˦ݪAmmxX~g\˷o{2k>_Һ X&f7q[$1:h|a="ܲV۶M-X*]Mi4VG?&_ZzgܟB*Axq˲(IHKa)Aj{uATYM8ٽd_ ̋}ָ &#x81'^|4rf~j!@ ј:fgp)-NkX+.hk> Z"D-ԬJ \*=-f(txR8SvcxG#w~D?i`elx57wbqCi48Z\N1L!ۢ<LM7A:i\atM/fR(7D X7Mh>~KB}Aȱ3 %s IQYeYB ާGϷ&ikp*E x|濂l;>\\nO{ɭ-'L ?|U`J㶿_|G[p3G( O HqP z@ݧz * 3Hn)Btd5Z*PiW í4Vd@_Js,*Sk[Ų u˨BًY+Q~Qwf`*\q;P4D 1)__.[A3zX>]J䔁SKP:Ve23Zk"nĥSrB~:PofWoOkr?8 ~*EsK}K_x_zw;9d=ZLtJx>#Zr~MӱDkR1b=hU#ARaL@GD248떙x(A̺ pݪk}w^6D(#k'c:a""LLo&_G bsQQ<[V J8'_o.L} ,} SsG$cGO@y@cHk~j [X3?4)*mgh<V"^+zט_S6e%{YPW e:;l =3:f p}d evB.BqNen*xc1/?5q"(-Jփ׾j7"RT8 59w]GZ=8@V{i@\^_PgN a+|R[c|",PS~'cV]hic8vL8Vrc9@tczC Y6'Sh:mJK+|9ѷN_pOfMoMkt ab86 (+LUOD6sϱ.uPO1\"Ҫ?ɯ,)8)$޼pt2mrd}HlN]).ERV'.t )sR ۔^QFדrJyM="r2T` 4-J6kpk& BG( 9;vf-է(=SVZg}ODNyZ ?M Cy!*ZZMnoj[Orw54wb Bg5rA' !}(E+t 0 U)OLrsSySDJQ]B؝~ZP[xK>]TlPp4ٵZjݕx#-{TT'$&;x&_C1nNַ<j4 xt3*gܪKt;e}$ B0'CiB]j8m=0!"~B$#?$_pGB' P:{Ix"~:"V.;~G«3e2(b Ƣ!O||JYVX;!vo+&C!Qz놬25DL?iZAw^՗LW$~AD%'9PM*n 3A-U=,ľLF8DKje#zu@̲t{)3{&}@'҄h9#1`-hh:(*Q@F% R|PnԂ T:Ii;ɿ"Nb-3D1]94 >j<m],e"=ne^ܱnjUщfD5 聻ʽVM6pwAah H-Njwd5(U6·/ݔK\@0P9鵈l8yNNt2Dgoj4!%$Nr3(jL_UK99'fۓ5{6b߮}PQBϠ*E8wZ>0c55ît@Г,mؤiZ]lzoD&dcvKZɷ˰3E?ݼPKEńy 2/h<:gHSc8 {{|2={)Րz`нXޟ\P\wb[[ ޔwV( jA;/brC&nPC QP wQ<w<@R fKu2x Id9a^"W _7:"r_UN+~qrZa{ 6n16AWp$?j4F:iOc(o{{-\\eLĐ+"H9Qc8&ct&,>oA;Lŏ%鿿Nڇ~?1fNM=;Pq(=F崮n+1M^rr)iTݘXE aXg /c-ggGFj pj@h#YFqX=GS&6`ܧt82ۄ]ЃUMp:솲\zÚPbQ)T/(U69S8M){S0MpDEֳ$k6m½93M+klK |aAY``vC >Av[!9L5 B3p A]~x~FZ(##\_EMٙZ+l?`g^ɕiƹ# 4~MZ-KYPlD'4+HAP4A kL9(l,)K~@N9u%>,NU_" wqj*^Pt#A1Do0QߝPbLNACK!Ҫ#),z{mu54 JgH;{n۱8Bڣ2 F158!TgaQuy!)\C"'%Ӎvp*=@LgH`l=}yꞼz܏/ 6 澇z\Pby6Dbe$3;{ nrnVt5~f%/źv5Szy? 59}$݀[ƫ~K7uHDNΐaA)ޞ-Z'R.OQfc*iHmk-d$<bC\W8;W~#pm; Ajn`buSz px,i~h}U&g{59aҜBYÈlpc=[K9 C nTnDUAkert&͂YF'蘱gilCebOXRA7niK}O*bS"~|2Ci<`]_F%stU #e(NYPMI(X1DHYO.S"d)5Օ*QH>F[|b&^LҬsqeef麵ݷ1=5(/lgK&b΢}߆ҤPbjQIl _[ O"jt]M;2έ)9!%v@l)OOM.bKˡ~g*ߛjlZ%% xh(;P>U sicD=\Տ1",̤F+s35-p6/LASF'{ϖ&Lv|/(8vv1ؕCnbqxg 2jv~= g8:PO~\oKEL6)&;}}],'im?/8> `4Pj8 ;Pj-=4wphC2$4кIp@EQ&OO{Mo`wWD}dLUW@e}3iόLƦ`vsG#SWl@⒯=.~<&ܻ (?hfukpW Ju$i0=;f?xzzQ{tvX΂}urk.@TYZ3O`m1c6BvҀ ymJq\W*9[\QHD Ku%g1}yM\ͦ轩G~mLVJN4m1꨹\=aㅞIC\$BNƎ,jU)sEM Ql 2%Q~lJU3MS(9;ņc2PqqOe+av::)u $px> 5߂ۜ >ƩDܬU |Jm+<.Hq3܎\v g\*N} :%bVb͍sHÌ1ji7)Lh0L҈83S0q$>ά}FcxApS{ávۓ@ "3Y؉U0ImrGQ:I69C<{\洂i1;;5$_g^lfĄK_&$&5 F?W58-'ަ6l$fBZNPq^j;(:UJtc0GDJ k-wLpXA扸rVZC&izjit%Soҿ A.nt`!ze:?|NK>X" hK}0 ϲF~+^OIz6ĬY_X4 p/˼_E̜_-e{ M|j%MPgWi2(}tOc»YBIKp⋒Ğ1h(cYh.͔2 3dPk\CjKy~-$T` jr>9ڢ^=d*sp] O:bs^:a;g#naxFeHH߄#K7Yosd<&| /3Iœ~+Xe 'Ǐ~8d/'O!Bt󄗀&ML3f,pbgg%UZ3o;K~H桺bV5b\4ZrYۣtX=;P`[6K$8sחo{e`QoFFcVF q5ǩ+`\ӐF؛ā)'Cuo C#i^ D_0_1ؘU :/k mݡxT4ALq=,? 0"ؠU[,M>[3Ff7 iGjl\|3p|wjwfLeZ&nUdILOB;ͱ$!q#%׬fuCVrWlILIVE+S!V'(MU@x?X|vFGl L&҇. #>cabљELK8dkQ4%QY. $.X+䬳3|1*6҄jv(ݭ TO 6j<>qJS+2ּ=茆lmTyvByb7бD GlS.U pp.'.^b⾛N&B#3kL8'Y904AM1ei&w{b7 ' XltSvyFd]|]‘@ MY =0oa\tm&[X@v*4M:sB/x0 | s9+{oÌ,>BUDFy5*x%1𱯧tFDŽpcmUڝi#4L[&8q3nު| kÿ޹^ dPD NcW6畁EyOS&GMG160NΌzl'hgz| KML&ŵN>`V΀hc-if@v=5[<:0 PF Y*6y4T92AhZ a^J61nHANu&Gv}W3JpnQ56``ޟ@ +x(<ާԵ5F靌qpSz?18su(vp" ENcB/*Lj=iIN&$(#t9I~J4y*Qx\^U2pW>CZ:61J R,U47UTg!NU nՠ"51}"-MX Ɖƅ wN/J^ UWB|u(P4Vn g\Mf0 U6DC>q(odBkpި}&QZfpHL'rE܈7kkKήXŹx,=vF p lUv$}Sʓ+2^l&a,G\i\ Ao{+yJA13 T"zoxRtS.[/5FKH Å'bPCBmU렖mvsjj$p_a*!ݵp;1'i//c]bBFzbĠ>L=3]7}{68?1k!d +a.1*m;^4BK]Mv}ļ4>NncٺMR~xr.E#SF~o2MN.f+`9iG Q0G; ÿr$N{܂<y_÷cyOPB7P*zMd D,!ARJ}sg&3t9Q~ xS>G]eܡbl(&!$Q8t`~ *>0qf,:pjSjZA9Q$D(1:~qAA\1M (&kIѩ츊2FJXӺ8l+aE?&P"~C^0O +VP`S6>DƋvq♨,..*jXc_ .]~]wPÛ0DE#|ʲ'z\?ab OdM6# ŝq#b~1g]6g R~|!f&@$ !Nw+$yFyA&6y+ys/SƳ/* $ōeդ9J}4]elbK"Nix.:I,]Wm5DYp /ujFf4 ,idMjkf]2TUD]HA 9yGacK˰/+FYpDlFsq-W{VcZIt4*h&͹e4&W X3®`T)@GێB>g6gV k/OP//D`h$*#+!1՚~$ K*Ȉ$XV+>pþ Ky{TjE2W$Am*:rI/qbJe&D'n*xinC奵EM(FQnCX|R'WMt&LJȓ;GZ UF+B"fs"2݄6m7cG(F& g7墮/4&ȤἳͽdAMKwB;r:l$6zOZ݋Y">c){}#Б[ߑxe$/?#s* cರew̖!ttcdzaʁumP⊋kj+'z4CY+GNv #{T3vCT*7F"hm;nDPd<yG:|(ΰBR"GF=Gy 08dt ~}quuu>%(9&&OqzqҸ9PFɁ0krx*4(Ʌq'574 %q:8W EVhHK^ IH+yo g0äG)~AH*@48(6Ub\^y3%녱%/!%jzꫝYhSpUHD);}鳔7.u8ՒV+pcvOÌ#ש|WЀY+Z@,cg& g C# X? S|<}9V{ ъ& .Aڶ-wjg9Ƌ,"LZ@0I"tz`b ,s?IH]N׺땤 NgRT4+2G|C)_J ;$9pk3ʣKds"%QP>+̰. tn\MTD>~&^m:J]OoBz[cDPZˈӁ8AN71s5nIz%6,`)b#vz A_m4?okSrCi_⊪2;_8] !ICX H"za!1N5A \n,zHyU7c"#6t\@ ˮ"tV/!jȕpq8yi%/v(E$6p$|_9{j $fWBJb S2&w+zjuij+84T-Eh 9 :d-'ׄͬArl=r2*\;CT=R!ю`\)$8,}hMwoVMMܵ4ַw<Ϙҡz{K[ݟWޯafciڧUU+*`zA[lE@iR Po6kBC[D.&:ݓ/mLkI{efҿݩEuD#rMSO6ur ̔R-LRd9,uaU^˨z4C5mRೠ: #ձR6ѺP ښb`uk7Nzuu*YdW,D۲Le`들@.vD͉=SDrF=hld[ME,ݒ|]< VQh8#A`Lu*4y/nfizOf,&$cB% vd}NTX4189ő+ނlӟ =+CoW=0y:YwXݿ3ɺme RD;r#PVy$.D< azKD$p =vāq^)ɟa!4v4XWe0vK(}v2 ~C@R_'?=%/aю*:3=j)qE YQl3RB?j$>ڎ^iTǑd6罔< *6Nƫݨ|u#,dZ:lbD$kIT@0KnۋhV0tT90 [©~-F"7d˖Iş{ș ~̷䄧ӷ72Mg%!!ꍍUhhO,V=.M>h/ , -QdT1pS!:Q8iSÇfK:>duYĮÚ'dz3RXВu* ͪ;n^Q(4ugoJIA? Nl]MwćzDfуӑ;zI3_O.>ktgDUaLVf'd@iYvtLVn2T@A hi7]IOnv%aGW *&z@7g#7WP~bhk߹`"!" LJw3)CLG%"EB 7"Dc_xgSY?\-<K9gy+Jm_xn.4;$ Z8 .d2U |+JH i08f/RGm猪v{;S͈׿7WlC[$:nI]A/ֻbF, W<21-ݳK^3s^QG$MO&]D`4_gO9@>^7;~?/.'T)*/-P˧Է3Zv6* djCÎ ab[17"&P~ΩԜdƔoT?5>JX$/-c ]XމZl{o6WQKws(%ׯ@1vAiApwUªP\ tjS{h%]\U @U&o$VVb> j3 - "ᴖhEVEBS9SL+%xx PwCL[J<`*R=.&#GgBL# Vwy2C!v-as6v7I*gZi`wcl7`[#N}.4$HvGrTw`u]~IBqt`,͑zFT/HG vbh2)ez_ d+{q:8NOYQA:ɦ:"[F}&3۾ g1q\qOP".Dh.V+W^^ )ڈEzRLvSKXU>LW Hs1F+'> m:p9|{+f;22 FxH6`?TΙ9Ew؍ D- _oc/ڄm0O$%`:CC ܁y?1,Aܗ{q`x|0m噗j^وRC dEUZ`dH^QҪ(Ѐ^)+nNCYr}\5HpipȜ찵+8"qP|fqʴKm6"ׅxb+Wiߤn%Gn•y$ŗW 8rQ@g745ԉl$\x4XL@7=~ҖKM4 W6P)6 W?}yމ@+N?h-prV6`Ө v}ՋأARS3#P[KJfiBQ"L.N$=n$]B>MvPG.IJaPK٣@5HDrz0>w>gptsy PW.m*m>3pLDne zS7zXKSFh=G8Wa8r]I <`LQBj"9@]œȝ(/*j2D=eBT~ b]%{{HH0G+ bQ7֛岲JG') 0y}Fٔat~&1bG}O\hS5#ڏb20)B˃NQj|-| wۛw(vuH.r $K) rmwz{dg a#K0MH: Tr/5{542xy5^/NOЄY=/O/X6u7Aj%{xV4{+>C%sr5UNkn@,{a ;F-]c*t݇ $EIE?kVڊAa¿3#D}D]~M-!qnvlڥ`$X;O#-n !SB~vv$H AfX=pjsU5:dY 9CjB0c\C=x%4P~mJ{Hv^?'{ˆI9' 1&CdwK>k)ӗ]cBTrJ{TT.=RenX\o# eǒI; R)HbQ9&Y CuX&4[!Rx`"4sACj$eS`ydP瓫-q e9.ѩ(v9 /_N0"%W836HZqd^g a[%׏ u <4H 3-÷+#4=#(0˼8w [%><*@ ~-c6{`ao&œi=L5m4hvS`֖`P 7vaնqON~O'dN kɌtUVCKܼO,|u 2У+pSqpAEQ-4~Z)U'`K 3(5悷l4od+b}rLe0,VԻ gi8U7->M`DNVMwn.ᘾaw鿒'g-jRri#݃MdbN oFf?] ; (*oK?p$Zze_4 tY n])Fަulﮙ[CĂ?{>HpW.>5AoYQ[ l-ضTU{ymn~4˞[VD?\{}YD#4b7'62ZoV.>FP+ `tlX929}I6)uPnaw~b=ngI7:bb 5-i.g~0s声2;rg.;Dc+,<CMg i0ë(S\M5ia؝x܀`! uV$<:Q1"NMٍzit79)Ye2 m#^l4`%Nr}kYnL}}CeOGT.i۽6m$t4 %CBfz" MX({^ XcWJ-JcԊ)~ U ]nm* ?2mLHwbVA*[%GgCQAKF3mCxY,yw+*'lwg䖎%D笒tayC2ɨrRum;TjVhخS=rGcá Z-M,}{"[[qkkӿr)Y}3>؃w$ .xU#qk~k G\2JY:zrDn~i-6XpPR=Ω2jc|每qڟܢ ~ \Jdݢ])^'xR`($o zT̼AhLwݪ}k:Vu+S~c@ #g'bN;ĭyUmj]G_ip{k";H2@w <*\7jЈG]qd麹8z* xPv")/"f ̊`_`OK/NdKT IL;U+ fPATg쥵׉#`կ;s^r 6oD9|lap?9gC jT37EX/IMcȈOnsǁL, z9|dͣ_E4Au5} ="nP o,f4%^^L,Z]U7W[8ؿ// #Z.wXd 1x} x5ɭk]:v\wSi`+F=,G4Nd~qmA]b\%kT$K9[XʚNj;QxUq ;|Vdhb&+mSU(pM1=ȻqO62޵#8gmC`y JMO# R&Lz| L 5P$%Ԇl%+D^d ) qDZ'zޅCL2 lQ%[GXCn d)t+\~.48!౏nۚuP Փy,w"/t>J)6aMy`j 6S7Q y*)iyc Ĭ-pwF4[Bd<-t ieְޭ6(;wzGmgn3ʡ- Q$<Ŷuu(ov7EYJgt9Y :/&7}HpTsTVA%yn!<_S5x ]`hQֿ=ay5 >~½*yVrx͍^nSUnx&$d ydK` AGr gǶ 1a&px+1k52/0;xKj(;ySO\uh"`kG_fLάԆ,{`ys~ \*N+#t} XtiЁ^*~p׻@W-CqzF/ R;@,2S]EX7+bYteaHu.m:{YnF^!sO9`Ji&Pz|(VWqi/#suuaa`'}ĸm.oҊ *ɲn* 'NZ]UV.8.hq}3`#U7V,s05^n_??JՠR֭<(^Cs8c[řήDc[R\^r+”UUSbc ~jzZa;S 64J4ObcfU~gfK78!Y[=obZ.Nbe*y0O3F?|LmR=TmS6u?[%m`ZoS@ʴܘ*OnoK 2H랸QPhZPŃAQ`FRxݿJ0&[ec(w7f|Ph!/=U*}͘R:̾?/T4p"jJ! HEh4ܧYdTmuN(<F(x %sl``6dd0O =?Pw>~ŝp 0 ڒ_~ҙB ҨmLh4t5 =YxI+taCh:1@L/-Zkýl LDi; CKxO)f~E1*!XC]/mŐLȢ); y [#xa!"Ў+&e~ɺdd IA$-+ g)2G 'On|bw޴@f4\^EI֎_i@+qˇ'nPH6MVBEnCy3G:JlAeţc,+t6*UʱTGg`BiO 9V MfMx(9.y(gYZ!^r3O!nAU$KR}68gq.$fzN ]_T?L2{l榙d>6I\Fֶ, 's*)={(xen9/R2O3_D*x&vV-f労ũ/>6DHS(!2TZ.Q3xrwvs]QKyci HpΣ=^wGhXK9e>6^chz`34PT5!S#çG)-.5NGUbhʲ&RPaб۞ʷc0aM{YMjSdŜe+u*;(nviڤe* .G тs bF7%Hyə k:~Gɍx4q FN~]vU%pxՅP%|\!CUS2Le g8ަQ)3vɜW@OJ\ V-}b (?Z&=L5LQz1/KqM,P4G$ݸ(-ԆF~*n'dFOJ2B(0V8:9+MMp2LnFP]%LuܥܝY YeS{bG q@wvqQ!e֘gun#~X;hp*e%{@FNàF΋nsFB:/Z\ަyws?i>9'U}}6RyD+1T\r`srܱ^Ҟ q;IS4޼rJ.X?ƙѷUp]e { %mo[ahQ(|2eߥ )m[SP-&>~\5b_ѷ4Lf- s rݓqOX{l:i̿ڔX>abEbh[sP7NGR9UNķ޶S|˪3NT>jimpz)nShxЮ M!7Dl QDS7\P:YJ#=V~(|ُ BA7"HMV, , f؀-gh=g QH<?&8E>C3RU`W>ڰ5@5@tnb"ޟ]6%. IIzh71RT0䓡d1,L55kVT_Wwx)zFmA%&= );*ʝgx"5Չ 9~oL`uUěcK 虊O,-̶~! :~+Ee^fw, oH!Zos3w?pZ㐃ApHZʖpY( q)Lў"HV3%&j{\ދvzf #@5Р8%ְP1O*owA+ȲicN*LMr8*(~--wi[N;w-{IC+*m'{n~" wIV#lQ n[I">ud [[N2 \ya~T#~"k% {i|7n<:+Ҏ7%=;m_2W,R7~// >d[(5_/{ޒ!>WVNrFeVA/&zN6%v0sHPGl 0z^c4J 4.32dH=$9PzTLޗ*!=qS)K,-CFZun}qi#;vvuB<ñp=K/+MggBta S CDnjm`!+q@ 5:Bx`g@5aQv"ߎj$nBeg@li.A?ѐ8yS;ܱ-Z(T(\m}e:{\t}W":/ɹo`eϵlƿ^+Gxte`%@v CZ%Rt8Ѽ0@]mg"Dk5Sz Ed!O($皢[ هf&!gGzyUW;r>*2\l,K5#*'7b\#6l3y L.p*7B`ۈNO[ڶ/&X#DQCPT5&FKV]z~R }#ziZ;ZgѪRCQ~H?hL=Hg,FA>2|ORDO0W΃PJf%դj}6%(g{v> B)%|,IeϿ@xXҶoV=0X*杣H#1oy7x)52ې=( q..U,]ZŖ\#2}Rmw+iiOr( sqg=4$Q62.æۢkzѩ%վпgsAxl/LM>VR!"wb̝ ቒ,|~kc" 8|. @B9H[=%`B㇦ *l-K`qZϋMz5>$ԀLgڡ}CcP?"ݶm&l_wTB]Dg*UW(qO)C6hUSg zo0u7\\pĚ˰56",m^j+Mc~<2d .\88*QgZ+%Q&.l kP+E* ^8ƇVh 7m|D8g5_'sQڼi.گ]k='u 6rzb>+0IQdO/[9zDA m?Letbw9Pw"S=q@Fw G smVbKzbESkKz{6t^i o3-Dl䩉ݺԆq\3 '[zmkIIq5[*kGQ>R׬F_އx oDSb'9-Wqۆ k΅*b|.>Ҷ2!S(lRPOޣV9"hމjEdZ┙|6<׏2 ?Xa/zsپ65 M)Te`~/"ϳZ3:5\;ؠ*&g$YD# 7@[ (i(!2IF`Hv,Qqi+Bf,#'ڤQ*$峇_, 0JS8&ݣO VyjJ(_Gk$kЩKȒBp0հI`29 jNXFQF3&c5Ϧ>Qdlv/2Iή2b# Z .CW]鹐LCϤپج 7$3 0 b nz!o7-R9\v?uDZ8@5GKGwkL="0[ϵEoP A_|#otRG=8ݣlJ FhBDDM It[7> E^P!-w碡)h=n[58j* ﳈ~u8,%tD*xul®a(h)()phEHCuT^!qxQ\[3[NlN)UY)'kD7X&s*WMOn.Ǐ-|k _/^E1ud*'+sݖ3!N(F8Xs'(tk <rAʢ!*Z3+)5 މ*; k_^_ jJ_[IR #n4["Ze2n-zA. BրO]eԅ(6M?ʳ ;=i@r֖g;Ƅ8 RZyJny#d.7]U_/0s|e!A\M&f Mj0o6僓WHk ]簎9h:б/fKl5flX9(E ~"_{4kF.mf0%MrnbJKnCWd-C}v^fnjx$m+/A2m՝~xv,76 '8 |eW7`"xp@ 5_. H'*'N6۹B7D2xg<[y_?4³E@s'[g4p2[x 4h3=i6#`t]59q/# o$j@9ԽKdʇrj{ŃM/*dPqQ޶VD˻,|Ru6[ MCίlGΔhz +_g21T0Hp컧#6ett}vqiG4"sO}ChZevNA,GnW=a#R/~iWm4hH:y-^M_5Ȉ_H\ :es/:0J]<+?@gQAt6rjlX 6\p0$f{7bz:t 1& <"bS>fDz58t_eг>i<Ÿm#l܄{Q#%VQwC?Yvn#1QMulܽ۽yf=:'v7^3 5GÌmJ+U>-Y$׃bW٣rNk2.&Xp;YP竣ZD@,Uc\4neqQ*,#8BsdH\+'z \wl=*7splj![o,#<^ BZ_P\#+gr֙6p9&#'߯[c0.1k||4z>ඏH-qyCe!u7o]aZ0oVb OځW yxTfj*X?vP򭭴d抔2'{;T`xcDgν6$rY&|w%ƒoVK!A/1p?R~T~5q:9feb(+jZf8`ءuWUl(R@3-ox>߮ Zl,5k;F:h2td%Qr6؂]{j/U+O miyO.I_SK! 'D޽\C,bfO2UAJḺs@ox DygyG>hTZ8o2=؂ +4~hM' d}O_DDd3 ]Tuek!@P8' ya=}sB&ywu5y\I_8h{8E(^Znqm$#J >!7ܟ#fL@ɗfguxmniX?5ںb@_@.F _gk D)2;y#>Q;[Rh饜O-I BhM&^ UơڌZSW9-qEl9aÿ*pUf_Cx Wl;5 wYwWAaVw,_n~.9PvsU mľg/4&ٴ?LYG2_ԙ62,zz*C79j^rJC nªv zZjvъ:Lڋ3Į"zC&U!M7Xa$4,^I`@uBdAVvZӂmȦ'pBL7TJ61za]B5bb_I#;gFa'3''㴝l34иI$.e K'cMH$ o1ƫs•9&]61!:[=y >XNwpǏyg K٤"Hj':tI =ҕfeFϺu un&W5H#MnEcp>ؑU;y2,vʒw9ce"Դ,M}Oרߐy7229~W U<5aeT:ڤa(5\A3KHkJJmh'-.V;HPÔmImDDaƤ\[m+rM4=sCIl#] yUd%1L*C p -W6=NxzLUrT5%B;N-J(.r> H9Z 1F)؅6<ew|s w .Ca\gAԋM.in7/GRu#:dR&Xx@woKR $x%]a)C@ y3۝x5Xw5OQDD-A P=z{k5:~"E+;3S\"w ]^um6D^o? ~nTk4D2"ln_r~e3"XxPW+ ,YK f\aoU~gUs]H0eoX;X}9n٫ ,:vTs#/ݰߵDRsFwk 8oh5Įv6H5+U 8^sb|'~~]G_D@z t/1dL 3;DNלx[̓ߋ 0!`1ET>z0m+üŶ.rHP.P\|"- \lPDS=z۲9c9ބ*@X>05x'T,jE&b 7C͋W%u||ĥBff1KvBr#fmx H0[^FՀdu0~W R-2dhG@݋RS03~_7e2|6{Ⱥa>VMC7_b6 yo)ZfSw/?ARim!+.[" 9!wMf{xm1ߙe| yzM6գ^֊"z&J4A^Q|2n[@CY`XGFl\[C#+m-U9Tُ oEو~9KmI w)q5-.]~mzЀ硈>N~3\/V}Z- [LϪePU`aWcO$)U#)kYvY$X\nW;zsod`iW:= 8Me+LYPM.&#tl#Qф<a]}K}oA䗎SZr0AiVr`PH񮀙S8Ql*{ba%[,pg&TPG)4꿗T_cm{Nm*ʜfXkC대2mUBe@ę~j4xa <5DŽxI%2lվd%h؟@qQm7? pl"!FbvxN33WoN'~ 0rd?//Olyl(aH Yl}j[\BW@|4( 'PO93mޢ*}٘eI{>To$. j_SH`]G<%qDabj\)dѺd ݮ?(MfxܕsyTњ!_ `r=Y9] Ƈ|Wn/8^B *Us hswMucb6R w~N)&OMp{^zÓ(a`{p V}e{I'vf]2|. 0Z-/toE,4GUnȡ]܊X/_ۻs%ኄ*|myy3J-V6L7=EWe˧Y/s/EQGKˍfv bj_t.@|RpW=!ӆCG@/2h%˜-}jm*$h36Nj›ILdnne(k9Nb&^( ^?%hOj"I5fmϤd=9_!乳;{Fuߺݏ/{/E'Skˆ[k|ywuUE)߮AiV#L-l3ֱc*~eNV9h9!Bz9 uVa[A &:AƉaH[^ }8eJHYixqX ?3;Mʂu1],C1]!FR v"0&Huxw3;";?U'0 o'QAfy8Ӵ6uA; vQXPHe^E$5{҈X|,`<jY+͹Mmapj'^i*r/x){{[J{լkǻ:ٿ}V*.$眮X#F yjgSv +m5<"=W}Pλ]:J5Mt-#aV-+ 8?^#2Un?]U2+G2f@tK/8Qt-Zf%+ryU rkJT#R6jfQXDɓM֢F~Z3VrL.6xL_€P䅝3~{* |JmݫĎ)#5&R'J S4o)k 9jnń*fĬitg B u^"Ά'H)' w.^-rl|#N硜 !^dHMDsxB;p V+ Dskxx 戀,4?@Jm!MԎ2/BDkS#P|o)qȦњ~l W8]d-iM-r[פ|T'6CZְ7y,Sv:#ż0Di~R A(0TB>;$lĺ}ܴ@h8aHorlPHeoǂt!WgbDqfI9/.UI_jfIF4q rq]g `٠\P!::G[> ;  <soLWgwZUwɨӉ|M2:^US)=D<^>~tyąKJᘃoie<)FmF3e\\~ʣ9 x#p@Oi- L/ ,*lVn;%Y#0K6FʡcJ" zF^>]<-nQD=f d'C<5ʽLgz%Sc¤m͊ $f]<@ YRBHMW?hI7>?c6I[Tȝ0[zFB! 7v7ZF< a5dߝ0G%ɹa8R߽Ԥ&ϛ#ء%K*Y,FOSM"ǪA9 `+F16,\4iYǽ_O#l5yn={eF) y?O:~^#-$bJ3}%=!ë`~zϔQOn;!r fyExmxGNR=<묩)s5*Rn^k2[{ΉM|D0/F14#7PD3cgQ7RD.=r-ܤڐ!FٽE˭JJؾixC\jۇ,}LP3H]%dD .b/?E\27-rg)0S8qt;xUx j)Gn6~GEBx17H_O׹DЪ;Y տ t"?:AO'Ӝf)6gČ:Ό4,*f:μgD .)叐 [$!×>nc Ճ'{I}[WV.}b˛0܁E7+ow\Tx[&E-/9p|8ϰ ';P2:jk2L >l|y4lq۴7dڡ|1R(a"Cލc#TXJ_LJYDWn ԁ"Z0q/JczS $;=[ Fm'%Fu ~g?.f^iʮ&Bhr05^VzIy}H7 ^mc;bd/J% V(U;l̋[K(Vks#.tuHM.Oe1f9N؂%rvJ^!Dɲ\#iwpj+ǁ'󆙣F01G@@s%}rm-}uzGr끉a&mzo> mXP o#%䯵Np*pɯIJRLcfޏ9}{g{B?Kev "N@}3 6vgg<o%|3I> "G"^]o܋inO Lf.z,+hS *- \?A6Ŕ1>Kf\anpH5 #&wM4۱h0V]('hKv`ʦ t/r-FUԷ4}滕Ah9e %xZ'Ｇ#E={Jul+롂';hF_p$[\?Μ6tZ |k]=87udWC* \['-nkpЉ#PC%Ot_T 8S5ٜ_`΀y|v_11jԴ*L8)ю{׵65؜D84C_h,.eff2~Y<)h#:1Cީ|YdlrS"b:~uK@qs *Ocغ@1q.&ttH~#VgS"^ŽcEW\x <6.>xl&åmg>Cjkw(X&&3X.« , * -g\.s߃ ;pPvym*hmW@cCF7rT!8eLa:bKrDU/W,W°gVA+5yxaTU^ET+V͆eNzarpmd (+s{*nkh1FalQul2f< 8 Z|>z@# #n,]Csv5+_x/Z6 P3 Ep49s8(iU珎BZe25G5ʃ5Pd s.W̢G."&+(YC/ TSR˜Z$ ه(j .aW JC'E®b8INRlZ3E;RV,;М!TP*ӧT-X5D*L>֮Sqx읕XR6lӺH`3xD˯{_i ö,˸70S+sW]a j.Rotڔ*mRKHc55RU8'\;okاAu 栭)His +&+Vo1AY0t!J<Ŕox6Bm:$&B3%7DDU @Զ䒏 KQƭ/Mjb g&7@ô;hш$]-;s>`xjBo:*{"O"p2KP^mo%Ħ>W9?Iv~ -Y10SܚN.p* bYiAhg%QFOewT[FYK3*nՍ hFX^PVdU8;Rοdv3<YT>!*Qu6|? 8kbr!bmwlͨKQ:W2!*fia/ZS= tjGfV(MD gDq;K5票 8M<"!:S]d/Fg~Mz|8DGo"[sojX%V[\8c% :L58]l!ZUqWCm7ݵ8!ZJB|72†~ёKIyAL5W3G>#1.O@,xa'AOLX͞ZИB=ue{5]V"HFCkH9VG/HZdE6ك> a VtU{X" {0EE91\1O!MCEIui ? AҒo #8.~)V|aTAof=UN >ӅKvܿKKǁ ݋-KgTj*?R']F9,sx> @_WWe?>WȖoTuzإ6 w '#GIGԒ˞'5M4fZq Yd%v5lCȼbrCD{ jO݀3T1Locg`m8G E3S^S$M]DD Y<~h02>4e펳RB)zREF֡YJԶKBYp1հ3/z[j8d6lM9%Ja7{4%d"x]k+zOEe'J~i7; GĂ<ϧkl#F=zL6R %A#ҮZǭ&:am9[Yg@ _&yO4x:P;EsM wV2d?a5G,g!NZ7u*di|_ μe{::%S6!GR+(Ujyke [6FUpX4F -)ox7"JwY o=gLrzB aNr ̳ ‚|Qɝln\pTᅹŔJ EovkD[˛[dFHљv0ziRl Uز@4P)vaH>?oq؞@fg=lƭyI0<|KƮKD6ORt[÷jLVnޘ)OUjo3(M>)}:xIͻ֨Y\3st(]4$jH%\Ϊ/- .6ĪO|g.LǞ.%N`d5[L>)}xn웻Pu"0g2%uҤQ,̌iEhPAg_I9Ǵ3gmebʛ@ʢm?2M&vfN7FRs3z+ݎ*'fuݛZ_sdhVƼ0% /CA~܏\A|U3qT*~W֬PxQy>,-,KHHߥڐg\j5h, vκueEbeh+xD}RP1whi2wW)* v@}Z¼q JSw-_oR?Za}^;]k{B[" +5|K:j(&Ux|=TDPv :f/R4@S*sgY1#6=hYw7KݤcՄaPYQ1g-" ͏(j |58G(Kqt3׫C84!ҵe.H^sc*?ݦb.mWXK)! Fj#!PDgz%~-0s=*-)4z>r}L~RKVy}yb:/oRfcbSbm>^ZTPTܕWcl(^`riF\Q8]yqOekJZiה6 îPivLxil&P1=,XAr AF n(^)ڠ[sbMlEt ҶdQA0*lQVj- -A(ic1NO״!t Qm Fp&?40<)*@А:߶ ԔeQcoHY|.BYSg bO}ڃhY_A823yMD\ThQ_t .]▵>F? }FU3SII0?]~N޲؉wn|l?VlԄ& J<;/&Ijp"Δp4~:eSŞr1SOZ;8u ]a5BisQ_(/KlLv !B?OQF.\jeUUL R.y5\ycp߰/:!LzқS+)7<9w7i 1c.1`%*p?H} Ÿ܏]?GA6FqƆW pa5)reSȞ]_4]׶èLM>qٹ tEo@%d\c 1nTo >0ddw_QtHCŮoωp6{Mv@ }06#yZ3e16Qw!zbYZ\pꪙlohށraU.Q~J4]|=krH#WJ6Zb_TgGB_|s EJ5aL uؑm-5 e7 5(_@g:.7p*欂@99Q/鏯 ̐F>I6Yi`W/Ss6tnHTq khCJb$RuM&vb AqLG&}HBnyWc>-7m% #Ⱥ4\5!qTcJ 3xWXvr 7;cwѧǗ[ļNӄ1T"鹙t%v@u$x~Xlr# 4$U(;cz"8;HoFdԩDi W ƀU9wTjpAey&ŇΜpߚK0I߉2׺2tRm0[ 6+r +]/N%X#/yZIo\Pmwݏ#fU\ώ hm׍"(FmN%&D\Kw(^Fl gPgf>5O qpcK"<#`{@8N}6Hd9˥5晛X+or\‶OPrC5+՘n]s  {5RdKM+RhwTJ!➧VOیD \"3H .]˷Θ7 adC7vu@X40Yb20iCՙZ]^.̩[m%⌫3&hq'.䢫W32z/{J'3\s eF#-fMZ=!H C F*D}gFKGh^p/I]$r Ueo{grTṼ#8i&GGJ/еoW@6F93~P/%(UVJHsueH~ܿT:zOHʹw8~\1+JΏؗoyVtEampZwEw }X56Ϧ eY{?zx dhC5WNz*MmqG}b>DTQi>Ag+maQs|l G1\I7lC9R-S,! Y'C8]˂+lWAnT 7,F Ȇ¥ނgzH&YFHx1 ,wZ$0}{}lNٞJ!hF)B3ihn|*ՠiG(5+J ,u7 u^ 2sIa6ˣPp,)P,|HGq [ap[x^IieycA_IɳJ&T!"%~`ڏ mJ84{L0Ki *k2j,u*iڅYhڃ|C`I>9zpvYE'ƳLlC!-3xcsϾԭM譼} r8+7a4MYgӻy1JZQȕKȰZ+҇_,@S3К 59r`y͎ɝĐ8}JaIFۓK /}xȅQ}p~=Unr9>].JŌ.ިbg};$ .d:3>Vͭ;ũYNlS}=*lP Qm[%PiDk1F+RI;2@(W*{7a?U>H@Dx3~h<3YGX~oVoLXXېCM+>V:f~?SL@VDk=?pBlk?ް,r/vt5$IڀJ1E?ݣOi0\:|,8ǩrc( e2fx抬J}9XnH>nFVf9HrX^xcVՎqi^<]ut)4{k!Uwz%LҬlzj3y,UҚ ; ˙b\2ZP&L"BI`P?( IE~#пX0x: "&n3ycgu7L3(Ħ^hOla0]X8[O|F8ӼIpIvLUHoOCp9p8vƚ@$HW,Y. n!cve>_*S]7 TTQ~D^s&K&B #( u5^(nS\ I $5/?`U7M}rE'ɸ[P=Zq~pM7ny?f=O7wΨ԰{ ZȾy ev=c7aR/3y4ǁ[Jp9HH\"_{3sL\ulP|ɛmO<>Dj "3.h_qB 534)\C?ѷdڿݒil{̿+yKP-Vj,0Lg $*!/"1?\W#4ib%Y J}Ww2ͬ/ARO[j}bssSPXT}80 [=JIߧFS8SY -QI(Fjk[|ubɔ2Y;|,.sTjق`F(/: {b莿8?C>$*%̗Pie3n (m7"f- (/;}V|J;F&z)ЋF8uiXGb:y5=.~W*1̖RJ@*TKcWBz@a@38`=gbтF11H5{ł% HFrQ^_G* ӑ7D9o}v;pY[$0ȈbC;ìFmǰKF  !1ߺYޯA`|wH X:ae*f^Ƒճ4/T!u`KqHcFttp\MN6p stUmPq8%ڷv]f[K/*],6o#| V K8=8[b"gKf9')՗gջ8=;ߖ?ew*\ApLwXeI2wx/#-7og1:QP$;aF^mSQ=&qH> ݑ7*Ӎ{k!$Fth86io@ZyqWBqᏝ^ڷ(Gu`+buFfLGFsp3PnWB[ʪUb%9b5XoEsVrH檱`}w2_IݶU[&Ks侇` ؊ĕ')5jRnx'v18bSx|$IfŽ|fJ HKjLbfƕ} XBoI~z'HPw6_a.ߧl.NPF/+d6NqUP |Kj8]B|@i !6(KUܻ_pE>9sK{^)-Cgj58"T]Zzѧ## S90 pQO{Zx) 5& r1`JlE (oYGa^ 6A6Zcm!C(;LIpLd! #" ԣ55t |VVHOhO$),jN3 Y1#"n8ހkzCPN*V"N3t'Ϯ(Ւ{&u%8u*g<~l@ꧡ#gu`kmJ`ّ9f|[&C쎮(YxcC9bß,=-egYUWo>$F x䒃/U|WLlbFr4KNErz=YmHu9@KOE;S#SL\o fV[`v=7󑾱RqD8پ$±.U 'ZTMsx(jU [V SWfV@k<2b5 Cvԡ5ЧĘBj(oէCǿFh.FǏ߉ҾGs (lkbD-zCϮYg}+7xU{)7_ ƫ\d?!,ڊ;FdNט 3~eY5-MMU)Y\:2ѷd8:=wt&T6VfsqsvH5R@,np;6 g+;`)vdܭQ3!yCh4VrcvBK6ˇnN9腡/V*%=)[u잜FhUJ.zh:J]^26_  vT@Q#-UG$T!ǪLJ*!0e\IiYZz 7TI4((tyd' 4`J@;I+#@/?̫hiȄ/]ۼ*3U\Km54MLL_&4jf0VLŹ>2Z#3;dl\)̊~ rRQѧO qBhJ[TЌ3yWjb4Uuޖ Ip$EܹKNb$f sM}GIZ};CA/RBџ4ɳT3ۢty^8Ӫ4q1E[ZZ_DͲM\0ndE(^5DḷHGYS 8"?_34_^|l8dkkҺ J<Xz1.L]tٚbKt=\#/t;軲%E 1C73 ^qҚՌ,/bf7t-otGOZ_2GjgDϧ:j, ]?Vf5>rhl>&r<.IEp4yØwvCHwcZHL;U[$6dm^61VĊʅR=ċe@C_]3@k7D)W)vְw\>3I Uݣi:8 hںA'+fLds֏8(T4ooTiK_b/g{Po-P2d"nR >wFC@<hB~t.q^,r?ƦtzI]4)pϭpb'uA,ìqbr"f|[ƢD$DZhkF^mh*ہ  j` [[;J/>l cA)i1>7qr4N%l.Sڱz1 U*HhDiWTdJB\Z!7YP?)NOXP0J=pބ8M,ђ;l':ʉ˛<޴A9Z j) -Kz?m`>`K5-p{]&>ul Hi)3@VQy naT4Go!>?.mf$` [tApq[KЋWߍAZ\ =iiW܆(5b=c:։jY.\>L$lH{ 1FYzᷫ,>^@\}i!QfAtwGļ y,Lٽ|%j qHbSM5+~')%EQ+ ~Ő 533S&hOir)Hԉk@!Wg,f'ϲf!p33/_eo3vVII h)Ut9yrYe9oK` k&oK2Pj~H%L")W ʑ_hY|<2]^MywPL =S >EP6v=}껎 +uKB_r__6Q{yѐI*<׾Z}][t,(l6G8QQ* @Ee; QŅ/"Ӡ 50n~BnL0g$@>iXb[P!Kk3hhTpaH` ?ۇj(up.~ֱT/U9 ԶlQa>W|Ȼuo65,M)7Ǔ"S9IHv0g-0#L?,&̠2M<ڑ'Mpdng'8 *q' xӟkk('7 Q܅6c(^@l>::Wuy[{qr= ,rٶR jմA(ZP~+u5UfZ5")c:07-Y[coqu ۓeg`ty*Es8˒{Eܐ3NpT("h8;L #[N/v('iMJ4z?>AǨJ"Ώ?53+ߎ kDF*SOTߡ=-Q0Vk .[ ;X]r}y KAű?P|U["k㩏*F߹/#߹)"-}tƷσy$d0ʚ/a ŀy["WfOyƵp1 CFQIbbI{ԋKηt ^4r%gIm 5ԚXiFqƝYI=8ɮ(Qkhj,/GN ;Y[PLjٝx>r~44<bgkT<"(ӆC^~Awxƾh2>l# #V3Gs2*+Z Z[ 6oLyIZ*YD [J3 O BwMKaWq* - wv]Rb+D  K`:]7^F$Q __} 7 ط3qXh\d'oY.J Æ1NAvҲ?a^hypF vKJ5W'".w=?Ю 0)U2U"! \͍nox oAhCZ`{j lJ&8.ǤH{ kh ex}m3F41BI-&MBɩwbtnvl5mշ"R#ʮdio^ 2Y]1/Ѡid/bcVP&~&1Oe mp4C īBQum*)QOг>dx-rTι8;&.ϒ:_7tT%obhݛҎT'p͵h?RyU%:"rOH.Px;8!#r RӄrAV#6L/M` k9xS׌fnalW|ۃϚvWxɅ0ScæaYlEX8m&gZ/G ؀-oU?v4o0\Ik5-|LQcCJ$O`9冑Ï%=8(<@ʌbO * KEr8U_Kƽ-˒y86 0ғ?.yiO1$HQ/̻2pXZe& B ó$ZŚX;- @h"m7Sl@#l=5s׶ IeM߻3~K۱;k@w2tw/Mu!ujeb>{KcS<@G^IzB M)2P5t:;H5;i 52T-?&8.xj{&+ϕ1! iݩG)Knxq܊",m} ŊJC-_oͨ_d*^5#6AڊwiU}j]>3'_ضUAWt="/|Aʺ D/Ѓ2#tPB!3h_ט0`z”mmSKʰw36xn19AԽJ3!pi^|Tg<1L4g}XWwq:hmK诙 %THCYew7J̜[ C)12." Aat2X,"%DGʈʂ4]>+'rt$^lIޞ2ܐI]?n1!pVA]&ST8_ſ- {7ewK .=g'IsS{Ucrl$wĽ*܉t(ڮKߔ ab乷Qq"2!9얛a|^e pV5ʇ=x׹ {q/.r{ow \!3~3'|Q0^]R IAuK=\1ʷiYKS |cTmeof;fIv œi"KP5q[) pSojbObŤ]>4R^f^ā=/ mNF,bvl6D@v S ENlVKYIcU9 .g%'S*tew`D!o^:1fz:%;;vOʂ3[ea94%@=9vD_GAii"[qPBߏ-f {p29 4|Vts^A梩KGiҩ\2[BeW ||xgLޚ{%Reך;J-$SdMM1% $r/)Ԟ&jƍri ~lttZ5BB mmg?g^e)= -o#7_p-BPe$Mt:![^$ưan qD3KhG4{'=KA.j<7SeN u;1o^>i.NV"@KKk`śŸ 'T}YxɎÎqCS\ dW ]+([ԥFFĎD?;0ߟ6O -OǺkh[. ~0moCdHjRropVB#vC7t.-@F5dYf_sgwL|BW@oc.M_,[>b3Gg{:qV& XliWQmiq=Yh b3-F[ ]uzPMR|:MeDCy=^LJu81:6r #,_dDFú-=C[YrCv mv禗; 1˚hPyn- s3k ء]c# P~)Тgpv(ʹZfO >Y1\zR͡ ~&Qcc?pd `zl4(C'd[ 0ca;9@m*;5lS=8WT[~uϱ[eYuV5Jlմ!k/>X:S ˏ߿KIj3c2Lq@zE^Ke(:#vפih9Wŕ.V~JΗNyr @=Qhd.Yb<,v<݄vȩ=D۲͇y@B7ib_9^`m):yDPJ Gj"2ӿsYYpvU4ml$r<YBC#u錰IIE"|,FL)4qRAv6w]g>  ]9K? q5ZVٓ@F\ީFpʗa={Ƈoްۇt$wׇ6q)@'5Œ/sn0Ĭi,pߩ(Bb:LʶIC#dڞ#OObNof<S(jC ̳7RS{Q0w Ƹ?PS1p%40<#]}X9'{퐤 pa'/ZHJSnq4tQHa:1 AְH9$u56u=/㮪IlkwU*4A}(q0>㤤XMB$BK>/4pv;5Y&: z2z6 =w5QM>M !f?emœ:kY#~B}Y#&F1ZlbEoKZmX8_2?R]HA*||UA\j6,f"yrF 0# 5*.Xzl8i᱑t-$qWe&A bMO)Wӱ2[Iy 1Ӧc6 k 2  &;BE))lKj2 5Qp0C1 Qh\wc7:֋-rZG=A,8=Y-6Ѷ Lm"ΣN0 2 ={L/-heص nGDE?-?lOyY/+V̲9Dzk~tacV4T"o it:YF!p6 [riw?[fNaOX@C#jYfx{*S" $\47N*nQg4wV6=om>Gk/[>N6Zlc1ň%h "ѺŜ7l1hMx( K(tIS׽ t8JN>Z-i+e"ojwsUl4wta⋷S\w9JE4ۅY+pk +ƒpIۧ*O /puzJIQJ8UiA{?"9vnN{1@N*EN9SX̍¥D'ƕ,6~(=_DJNN a; ̓XV#Կk)pt;1?v]ckuMaC*SMtZf:3EBIΫDh|q]/ڙ:$c{ٜ7xE--jӹ6fwBku'7m3-,:V*kA*b™ V=aT¾9S|& d >3GDsW@탯ȉELbP;1Μ "+.ά{X XfA Yոk '>":hMK[NtFՐߎ)߆+hKgvc!rcXxP͏0P#(Z[&b-h}Yn@fr-Me  +ıř'CLLO]>ViZ,i]$|F|"ؚ\%"b!8 *ۢ?RFv6xPD4 N{=6 ֚S%J6q!-6fPI.W\]$gZ6Vvܨxb2VK"TJ9m}j̀|N0[aeZ,#(on{?Z:"0NIN0M^ ɩU4kG3GgPҶ䝻7?|Rf3نL+k9r imѼ$~͈݊,38<.3.@AH Mlnv=.Sx_F=%Wjț鍲T.WDÑkǣOo$gV:qH bD6A9bq206>u1z+)c % cծ1D[]]f ć=D~Ar`>Ƹw;JV('cm-F.ٞ Z wmYtPh&y:v Fy nK 9I}u7zz8C_ &m>ޙ|Ж= H45.eĨޘTM$-GNW e1#1z3 fF :ac$f cdcD2ou,1Q`)%o Z˽byʟG]vu)řK%C-pZce>ه,(,B[*P0؈;j1VBȂݗl'B%t45Ȧg:8=gp`[ҕLasbtY+ݺ0!s W D%I|xVQC8#q圻T %e(i!ws. yŮ E$7N#ި#w1iծ-6j] sMI~Ί.L8f[٪ƐԝyGuUԱ!(g1B|&@۠zKwMZ#2pbuYIlH^8\@~J\dM&TlAA4>ͱٔJB֌lJPl6޺)p q[Ei8]OmUrZ֍ZtUDJ2߉g&Y lMk߯WV7p(ow &g\:2^V @+fkH_M=>e/_sG.ϩ.SuM-K9-=gYK&ԹXDl )Ei;ȟH>}9zIA5y⋱ q3`h):\aʨ^= rB 4#Qc?BZ'>i3?6*cN'9F" S)soҰw9vbv" SwmuYN߱ {m8RAsG2.iҁedm^rIiz$18EaRwcJ %H}U~i3./9Ռ,qyeT2頱ac 4&OT6i*wU9D\P.40WOUk53rc5{G,OpRqeBl9Sd}THxQ O1Ej ^8bN4t֔E%F>d|JB#ІQ/WHd.FbPz9񏩋#À9$]>1/kګZ3iS 471mU$(K%ƦoOZzӠ9-+=@6@};추*ݒ-rByluIͪAT` [(H<̖`u;2rXy슎si1A5*&BzܢtH cgf!]:v1Yj4y)2VZy,/mN;|wvA(M4YR.K5Wa2-Y(4'ڜ1VJw.|I߹'1W \RvJG'o#PBNGzϛҁb ?ejAZ!b n2FuScl_wP&[j DZHfŜ.?پG7mpHOaRM}Ϛ3et&\=j[ EScx)w7)8&)h9膝iLJjqs97;R q{r jz MxJ? PtjT1mNs3w yF?VoEįC& Yʋ2 #ߘVnoL鷩Ly=Nx%*fZ&Iw:kS_q8CR@Wl#ۃkoYRtDN:G*XMn^ 3 q: m0ѻBb5a 'K\WNgο#ż=%sǐB /.t\/"Xfb_ ok*2";TC(NZOA/|8:9{&G!c݄wo^Jj89c#bBC3,|ɓJ%6_=f٘2^(} lٳӓa+/l 7u޾*zu׽IStͲxHjfy.0bJhoz"R >j/A^` AW{/.*u ĸ1mx>fg0i|_۴5"#Æ`hha*\}maڪ`V<ɷ'\K\ ًZM)\[L_3D]xjU+]}drzIZ?o:Xu ^Zw0Jv;xj0n ʖ7XlεiHú})W??L w̑%s;88 r@i(&sCYr@ɭ0*]h茱gpOO(%'k}_ۋV5!FSỔx09^SF1VoH/Y픶Osep@"&z8g?P \VARӅ1:Adc]=\!odTғ ],^*  3XKЅaX9F =,bXq=VuGKu ϊ5/-5esm3&3dt 䮠׼kp! 6U  KqNA`GJJDW={ =7eL&@((-}\++&N+ T[ aDw1zS;&f5f {~]m}.;Y[/! #Zy4f׏<=CeVOσ(GMZ&帵QuF S>Cvih$sRA->R66T*V|)j%tzC%&wf$SLR@+֭E"&8Ra؇ϙ$+g {.x4Hj܇.iRߪ`'=R̻ÐsŷYDkfx ?$v;P-L.25wDARRomy'،9w.^UC6.|==잕)%F4&]N)eTuoLDD\Ѷa_cQӗrpj#RoG1:.EU%2:O@O%YbTޅn\-jOjGLÌ4yjYwon?@Uj6lc2:&`6NLqacsx_)Oˌ iWnJY,4]H괙^*O 㫲O&{;NwlV<ɢ3̏Hn@̂D\̪/5 kKҽs(t3,$sQU >: 1J*=NOv9B!oTZ;x)<[1s:^+5 c(IЌi%[ }LFTt>Ssv8Ln u\7>Bp6Vlܭ'Ce)D!]YQ~ g+T~|j)寓-SKdLh#Jڭ+7ОqNBg"U;d 4\-KN|i1IY43>GÒ}BSfe S`i<6˄VK/(JSew`-kTKK;pUl V\$1dxN(U.|E+RϙIqKj '1e4%Hxz; xB?IBQ$HEƯ1ϡMU*tt09#9FK uh$Lasz0O!ඦ%aNj&= K} 6u)'iK_uT I< YxV|a ^^? t6&H,vs UC˜|uG,)>N#΃B[f+ؾlpማ65:FgFەaE'=t4'q3tAzh稐J|r)8C#^ 9̒k Cid< _;vhFrRv >p(OApk6-"I{ѝZ(=yWt RHso,v'زW]|&9 -rR!w~%DaCG _;G/vx о1ti&]fmvK `a'?Rgī2#~)wQ>J}F@~K@5?cASˮh~X[} Uu W C6'eM/by*CB/;B0ıX"5$n.ȦE]P骝z;BZi*6QIAa PWご@ͤk!ݥ4*a}G^2o ᚎ)J!Z VYr۷Yݝ OBw[ "dA ݏW ܑ}P4m-<MUgQG GJ;$KƖ-RYDGag]$f asmߙ򩃝c=Ie卅 fT {yrGO})"GNXT)Z#B݂\ cW~Avu3x>N#Y}7 X<" C: C2 5:Yɼ wv#%O Àqwēx 2ߋ ^9Nxl(.L@c:?;r.Z(]K^f\5)EcUt~(b9TN/#ݾ_6e ŞV1T%f-/l3uzܙ˷쑞 1dzOqΊȒbB )H(yX"=4TV"Sq]u. КLLg".yLtkTE;s3\pp.?}Sa/ԛ46y>=7 Z%0='YxKi;5,g3<;u_!:yND=|(Md.!ޞ KA$ICr ))j[2rWٌc݈$yYbs~]J]էkbtf_23k%DAD "?HZK_ڹEރlAX) z O@S#<-Ij$K$<'<'ϥ|g+K}ґ9q]\{x=D9Q ǚ=mq)|QB4g9KcmsP' Ӱes3ad24M<:x/q--KAKuv*-3QtCOWsl2wx-E8z{mжpz ̈́(L^Cv+D'9r4]DQ'elЕ}_kDiFH CO .-4}5ҲX4E?Z;{_`f'sl*–"rQj_,H7і]0fGQ ^M(9Tv-6Y&Vbxvk|ۮ AL<$,IGχ( qZ'"z|ǣ  n Jf\X:?IRT+rileăU:x 0!m<9tx1$ZcFuki}G'6w {?` LLDG0KEdg4 ]37p/jGlbx| >G%u^$z`ỒPVJt b ȷjV(5%A/"-X_ǫmN3 hft,߮& w0|}^V1oq#cvYj"qϛ3nMíR-B$WfV}U˜AKPӹ!-q% MD| 29'%YOq8K/cEG~%js^#_piƋhT#9$2X.,_P9Roğs2az|rG(-|9NA.gR^s#ϙp47pm}W8%I(A!u^Q4%JV,&Xș+9"'z$ րcea"4t}ፃ a ?gTɞX7GZůka!yL)4o=\7\;cHxcDRHh*([LМ~wLp-0& I5E-R}f멡=UI$y܇NPd}\8b.-~cfa>֠?zҨ}ߔ*=gME^4L-~GL\&ڒݷ& 1P&҃#(E֦$Ɂ[MYpD^EDD3Yɴ]o"RB\u|6n|I]4<O/B~q&l^"Wնp))CHyՐb.[V3l+Leج|=XG/ hʌJ@myvCzr[ X'Eey32p-&]R`o/YdiIы‡'2`_=5B_tl AdKZQY T`!]Β"Y8$ʃ9)R_v6D_WCę{ܩ`LX`ɮzqn}uKIwj8|t:m?fkg-dɦGWݶ3-{2%Mj_ijl܃(ϕ-j 7JQ )0>IxL-|LQһۃ ynlS/v$~3[뽂&T&Uӽr5HD<Ѥr=!7iH~|j Ѕ h}3=H!7ssH]C"b~ N*l|L;y2"PI *>UA\˞)t*'E5s0vSf։5tb%;? T6]ݦ|Yx'JJb&K: ic5&'=,VKcXIJҰ8pL-:qc#2y4?pgSF*zN54^Uzf}^ fhQI:Ej+ e[CÅg&wq9<3d_〭\>fEo ][Cpc2v!ssøڀ^љx&}98'Q&5`Yϓj}pP"r:s"*&uP3{w'A6nkM_6]n#ڥ.3@ɫ;>DP}¶aX?P01ϱ5* uW1)Nv])" a@)|z"Яq[&xκ!+,)ga 'ONmn͒!1~֏(sPXTU9L!Fyhv$S$̗R<=O:~'r&GG^%L=.-~ڭ`$04v8ts + +VL#_!,J2o'gvç ^օ69{k>j^JbGGlNXQ uJTP;儵9˜,J,&ߜ5p9[ vV\ųjZ2hMx`Q_Hs(VRuV|_m@H):vWڰPgc`y~)(yzIԷ1tn X0n D5:(ؠ1BXM!f!:$8)pF['u;4t6ZXC/'J%Be{L2&`5M_>;߼(s)!W9zVbԬֵ*VjeT==jvnښh&^YŊM1E霤5X5B VU-b=ĭ;1d|YR+'('ə%߹JF7@-nUE3ȇ:ߒ' 2 "f[{*b*S8Ȅ!td4~DqGX%LtM91V`ȧYhj[VX+RMZ~mAC򝹗hfw P𶪀0gk*/@f3WC!޳;jƹ->Y)BuJ*/Y- * \Qm4S(U]{p}YB`t јOM=l G_:W{ϵD)V L DI-X,/qzqr0[DTr_0I԰C,mz0[vv[rlY8Pv)Oh;ݴxuiϣ"e=0ٽk~\pV"Cwh!۵f%)/(r,ӗ9ǪfQS<(54P%5I_-} Pe}ejQ /yy<ǷL[`+L{t0E.}bᶁ, itb}*ED{($P9 c zLer썘ji}qv[u^U\CmI==`XM4.qVBֆ"sJױp{2/\ -ąNUW?-C ,aWLvWt,YSZHDݬ ~c5=|-@wǐ MDC##N?N)Ⱥ?|O?]05HJ7D!z$tjsRą߭:QI&2~> Q<"xzF`y^}BD怖bS%9sH&UkoL.],/oiZZ/O*]%Ŏ`_8x3-@ ;H\%Q4X]ăCj:pA(u< x/_S5Sc&-MFWpV vI.!U Qg@"J+s!媬8 H1oL:٫Ӳ!_H^.qAЫNX'ntIb ?iǝ"RҞϡ;cPɯp ⺘AW<֧ife] ;:,'-@|m 籨|njk|dZXO 4w8FTFZN j~"VRzpbǖ\vuy0jʱ5-Y 2q{6JཊnQ_hZ<TN_*R[ۺǀ WG߱vZ]C]\{B+?zZ)I5Cr f< o*^r=l!ԏ#*y+'?:Pp4 ׋'G42L X9dj}L(]Ze/~` o->4堜wV-=L,lZYVWj5ш<.(zlD_hiARSs6u+v x%Wѽ0iAg2 /86v@i|z<Dw X97b(o^st3' ƩvKNy Eߪ3i}6Og/P@QjgU+De2LwUTۚ6"g"ì5e@u e8X9LHC$Z3׭~`FKIUaCϾ9 B2GZ嵪jG&#(L D  +aOb^љ$Z٤b`].V#^Q#sNb s}eآ!S%l/2ߒ͵LEh|PBiMnJŋFF>oBhQM~)CCǵ}4>:Ƨުq߅;97,X0wm9Qtx>f2̔!nWn~B-{W۠^ h"ևu]eRJ2)>aMm(@bQ~f`VI)β!a%l ƚ)-1r|T ٰ\sת7pu$8)Ca>i4IWʆeKqs ,$e3{˶ 5KFBYVv/7 Exoz-/!4ovr]7ndne@ -ݣ]M<ͧO5Ȅ9͛4k?y@_UMS&~gaŰzW<`ݳf ~mjS|?HL^ܟx[0K ު8>n#ۉ̓Ӧ;y] Ʉ՞جݖ}RK@.b50,ڢi'8ς_ 4 l ªJO2Ɵ~27p[JEPbif G9 .㇁DNw~W!,h ۨ ak1o{|K_T)X10 _G~đ(+6T& RLI?;ن>i'0t;o3flf8czT9~E)Q,!Lx>5/XbIq_AJ$wí"QI# 2LY+Pzyn՝YsO/‡lnfW](}H r7?搠f:Ra@\u|p_.h"' Gz ?^M5jH@6sj|EҾ*{4?"GwsB?7B-u{v!rOޛ;k5G`!y؞ъN |ҰE̟1dQǞLB^wrYwhǠ, ‚&y`cɲ"?dRKs;' F(ŤgYb#f}̦]'M({KT?qR:zOAXFí.bI2tB禶`S"nT%6,J?ލ˨c, {[(\*{It44`EC$p=C^{`4l D=G"bb8HC%M+20,-K MIتP$4I]&-,Da4Ϣ *5RLn^TozQ-Q<ח? ؀,0J -YB|(gB,2h%*UVR/ڄ?b*!;%N!3Lپ LmBLb)˘ߦҮ94fbvX;u|+ :HS<k kf]e>V58yaJ2^ざCB Ε|f~wa/>r s'LYĹat'LpErW`XyTN=5)4{(5PƁ My x9M}}|;\~Vݘsw uUTə \W;%wBऒnNcN+O-Xm&B>%Mfr_бtIonJ(uϪ+ o)o>+*7muVY#Yl(%] f‚*9Rh"߬9yҩݿ[Qgo"E=|(xŪ,w.'. .L[:z Y~eR<ż n&ŵq^L>a PR %64Uw6=kh DT@89js+2fZcyKYMa <}i[kox7RIHHʹ}ܷ-`بbT^hDNb:*SꃃOs{Fe6M,tV=.fJ^;n{LMP>*`7?{_YW}@(6n?y MKBB[Mth_ҔvGk#lJNq#S>FG*ь]F⚌@ )E腵W֓syy/:Y[fA01IR_qҏZmcfЀJ*#J\f}@= `̑/W!žmMEP殊{Q.mec_\Ӫ{ {7էICr1-w=RQ y `sSη8DRQh{>vޚS Ъ./ M6f}n8voV^|20dA@'&'qoe(_٣qSeW}VL@`PBr&$/HV!]6No£}xo|aju#ZJbǽDp}W6җlßIGrN8"pFwsaz:?0H"8<.o1/( Eփ5?chHçc ^ hb[M(XZTm_>AsyT\{B7˙4M됹a>%}3g(fܹ|8e"J l-o #K1!WFyyM d?!OS-:+MYVxkxX?^O]0mUZ,Jٺ 5@̂pj.BԌEWg^l2V)@#f"r(ok.s/^d E5` miѧZG VyW]P'k`=x qyxzC*::-^gVIƭ- TffP.sOG}LL#8romdpc.&$*tJ`op3wHvTkI1DL-тS5ڋa1 AAۀ|x2fޘd-HaRNiW ,eJ֐i gg*ٖ[VV0qgHsƝ!q!ڄW"%phO/ FX *qf#Q`}#i&bnJnTA3fڹa؟4+1zyzw#t-U]knQCuወ my\pT]gUC$sA^^TSSvvh[՝V sVMZ&s%t#}ǜ;g%VAWC`9ƹ\Kw`ql:3l0H4, Rw'MNF :蕮iMƵ}eT$=N SȼAByI=Dz.d?ԕ/x 9M;#bq;ZW;{Gpo^A'sãR:;xqQxѺ}hd^_ε|Λ j~CvT1װT[οNn'ej4;d­_dօ^;e0 =. ٙJH}6lE[n&T))z\T 3Z3|*}KK'3ᷯlPA(9QueVtdױfZeG:(-hD>Qf0)甦U1`J=yqwA+kJ9DȵJ1 W1p$ǷqG}o.k78k2SөPOV^[vE5-37E1cs2 *e15mϋGc.B u V*26Hitg(l(X} [$SEa2!nc@:7hn_@:mXkǠ ~Q>+zJ&m'.e +hI|fe6ԕYohB#Pw XK$V6Jo ))Ypj<A;( WMDx:rJ,WpZn { >\3Î,g so/^Kfaht[޶x-$qq4Fi3u%'YX(A't4w!Pe=D^ǧ)ɦ(zn 4ES uba[fhy#rl94$ҐJ* -1 fC$z?nfqV 3M m+ckk,o@|J8LhN[ż~rA.lemك~(:mw߂ǍiQQ*1fKl_EvALa 7J\2rA*P$P*ƒ[872`[,qȅKgT$#A B޸ka/]佬7/K@))f8 +M' g"D^toeР/7tsCL07p>=_0Bl;̖GsPfFw0.J5~?k؄Ӧ ^:׫lȎOudSo/}UW|rsޕc]93i{ q=kQ_ט exڤ8Z!k@N=g>M[U ?JJ]@Lĺ 1~qDb\lqq78~SHx5e),@ӠK$>O>PY3 u>3Dq, F_z9"J\+AD՞k}uŲUTv4Nt+M 0hPEo~cNRd E))Rz65@5(3lwO'vTA'}"ܐ7BT2ÿ29yI.!SLͧa2QڏgsTp.:H1q] Md߸u"5BɌמbūX 6ac8us+E)3]-)#F\ 5vue[&{YC.H k~Lʶ5VY(s>**ZpݳдJh[}1K9(y@L4xU(.BcyQ^unpL8f\Q N&[ܹN@7^:LLNgagR5M5O(ϹifQ,;*wAHik> h׷|j`-2>qcwuR mT/Wsz̔k{L MܦB+m8LT)x:V 5JE-‚#Vv"6C'0AIUtQ@O0)ⰉNR %WX8.d%X6ر2"$IXڿo:#B$?{e)ExDcIcva{6Aׁ~ ]ɉ"<02qUmdq!-cR=߂ɭb~{Q)Xos ːݘBhȌiި{iTL9s5e/A@YLuڤI p3_|C27bݟw;Up#~[Ο{ --@h:ЛKI`SZrF7im /1Ґ0(\܄:՛5Ӏ~]tZ܀P3i:RjQFTJ]!i\aeNk;lf %-IDG:e+(ٖy%,-~H$2PXA}jȌqh"B(7%bKxt5_S9TztP}(8F$Eq#O}<|+qhQ,Q]r*>ҢI3*ƇN,ɪAuj%d}A{:[nlIڒ7i\#(\)ؐ&Nײ!*Jl.=="z@KK) h;0ѐ%3շVtBW.$W]H#ҧlU\+?x 2PL&5=.!XOV\ݻJ5Qu+:H,ajc[ (>\e}Ek: mʃ|Uŕ v(ޮ>Z*kXzQzW*px-{9K9)2P/}&F7.8[[QW C0ƼtVO⃪kV S!Wnr[p,>S,iGsȔRĸט˲Izd| 8gen%_{N*1dsM4z XH, gQ vS{4\+ <V# &?s5`<"]kv45rM0_<6APƊ3RjH갇1+{734Y-z,)]Γ'n2s|>(I}bGalB*jȏj96KNz%Jm{`Ʉ&𓆠yo)>F~DKO<S=">\LiBNK{<ÛOth1· "h,j[(n&f)ĭ*-ҪjN0i0ڿں @zJS!%Э{)ҁ9'%Yx['b_N"A.!mL\W /C6i(_2tzì<)xJ3MT[s |s@`ku}[~KNeB \u\1fbKl6Z/àA܉j4)Ol()y#-.de[mu2$H.Ge5'Hnx2"Uȭ w/dkɜyI6~eaq|=3QP{MGۃ*D_>&0QՠA^~!QX穉߆Pt;\Xh % 0B ZB)˳ԜH5Y^rj2ĔyYKju?AncNf7KL Y-"J-%7)QS b~ sNZGo(jYcsN) \'F{yLb"彖l=*/tEj5[ nY[QxdRqR7n|/ļii }``p{ߨqӴ'{X6n5 M7.v@p4s;rL1֒'HtL+&1liJMMZ0NWDŽ86"[s %6"d=ȋ y6> BW">aHۨ˵|h:oIdl(f}7J+a^\`*~hG +,02( ž>1=t/I?.,!VSS˕vпß@_R9IkQf۔A cZ눘z*vܟt\+#ATqo;/R0lv=U Oށ(-glq}V?a^􋠒j\>D VL*[0P՜3im YH]CVB~Hg6\(r3ut1SH2"4F~]12IUH:_kH8K9ޖm E: = p B?EX52qե>9 \g@tsRfd9 iYOP"E5r'eJWp$<Io*/1HVM6$KE ~ݸ8몤1ح/N.q黏%JV#LwV1=|6-}LSN鮅N5^̤?>ⅱ  .= j(=? 7k|>m dA)BWEq|{IP]n ϖ".R^ 5] Tr hk'*CD=6u5)ww4]w W$q7V뿿#pM@w5Lr %6Vs4YI+sgl)"[pL9a7tBy~kIϋɴöPB-߄V4f@EUza\߆@!\u8r9v!6Koͷ?s00@=p$M,’gL[1 ѕf1El UiJ5at:Y"NF7l>4g;b;|{&Nj ȿ|L>x_aѯ]$/@y:FMRo ͼ B?SRu{gM`p[HqJ X5 j <u]O%tj5G~ٺQCEpR{5-"CBKXtz&՘٢̍:=#˕NjI?&hc{ ]3(ӝZdcsq}&[ʻͬuo#Q=T[5)$G&+kn@IJpc5MT7+˫߂hvL8UΌ(Z9#i_zS`˚ku2:d%ƒ D"29r  ZMd է 8/ImKU-v'j~ ع]ڜ0BS~r uqa(QE1;z/Ёva7+{y^‘ۢpFTE>u`qh~}WUC%2  qo6^ `Z\1˟a(0j 9؁M=Sʇ<ګOߔo+z<\i%FRA~s`L>6vR5gDb%:12 mi "WeM1Tiɿx)Oţ%~To}b1٭}Ni ETA>Km\DF*GqkaqՌr(?_V7&ⵇgXz!ޡWm%} վ# 54^8ھ),v[L]^t @6e)K5-߭2:μF'>K FH93VefRl*td,RPI 煹( rO> `,[rQa"^p=U*'rM@"\op*v5]Ѭƥ>B"U&C:2D(iryD mBl͛l@P.BǶ>`?:ƟҤ,og! k3يkݯ#+q8 &w4yv^v3z*+L^v5= geamhiCD4Bo ̫ȥ*ӿyЬD#G|Zk!FkZ9>esD&5=Ԃiحc/Ja\Skzp`X!K޳ĝa-]KV!}I ~"eŐֱRYcV&,|:qې% ˧GiV&M{[6U'ɤswpl܌ rYۚ?F{@gKQ20?rѷa!|Ib3Сjm4h C߇%ԃr- ڗs\ǒ @72N%5=k׾Ĝ8mehLP'Iyu}r sJR"ap[7#3 { ?O kw̰K^ؿWc?ͷ|cĈ2"lUaӡA4x{.TXvGHiA{vZqmFp zZm+v<zvqeAan_C #[LQxe^(ܥKlFhi+.vmANȶׄ>槩d$3ʏNտCG?7l| r U25ƥIj>X"Bb Dv6}4ZA@Ы\9-+[gD1$Evc::{e6S!Wۓ_ttb+qkrLVaK$*ðFy@qΡ>ZX΂p&"W mx2 ?5gCkaԡCtQ*SDA='xz*9bs)3!ti*77󽳷D \d4cu|BOsz-%D5x :iVVRöp1Z: a\u%-daZҢ`aYH E]CxICQ!>ʩq? gK HѸ.U&*E ΉWu( gb'3uqm 2<(z@ƂI:JLbua*ŨbY;u̓lv='7țQ- .tlQhv,C&q7+Wf8EYG2$^nI>{ ݯ ʈϾS <}Hʙ^ey'vT|ߣ)+W1~#-c>zS+󃃟z9+`N%t?\gg} 'hX 6 Q]!F3DC%% z@ΘzIQW߈oq3Q)c5Z~(vaOQˏE-!iI_^ $tg[Y;XQf˟.u*0`=xhXqמKH&NueK"pnV} f nk:8AZ8 6تF8d󘐺=i6Et?۸h(C:-x[P)zאo0ᯤV4L7̽'  mu;tgL_T=/GiZb'z1w_~*1B׉~}~|%S4jvEBjx{jx?B!daۍ|n`V5!ҨX|X`fִϤ)%@EqxsNj 6)B{y\:GS 1Z:j寊ھiqM,m:D u̒-nR?Z"EZхw* ӄTwDѫ-P$Ӧðջ>՘Ǝ$VAjiZxc2V6sb=},:ڠn"u srOdO *R~˜.4v#;?p(4~vO U. _B?Pi*9*Łwlak˶קMn#ݎу!$eZՔT["M~ZWANwX9K2½`UئxE2xl)ӘDڶVBcEmkZm#_!ŗDqDկ}%@E}|Seqzl&I ~d1+((@GnkD#B _ȀbjA^zWl{lB9y qqw.D%+23q#=#ၞw9> e9}GXvHOEV̈́I|z3~Rʎ,] b Vӝix< 86F}6lN%W' w?"4X5O{[,<#&&8XX֩(6">-VY! Bq'G '+/dIQ|kZJK_bջuE' a|ĵZ3D`lzIX;y0 B6.h"J7 ~R/_>V?{;c'0RQXvWLچg '?9䃑_P W)0l6i4ƪ!IM%pF?^ke,lD\Jlf);ׯpjZ:#O婣x*aO=jPt (X?RŽЏ8=;ZX p]$C;#QSJ^3oFkwY ,:_)U,%pvׄ $X8/9J鐯wJ@?K+#xk17P":k̰(+OJmμaWAT=qp' tu+p(jEYiބ$G+aęHUS`;#2z >J4I\K";B/;= !zbAG1!0&t<@~Xl@MP1/5M L mҐHZ8sѻO= _buHolf#ge<ak .1'?N-Қ&g0Jb.[0+|e[n+琟јU:SŸ[^|Gg5W8fWک|7ыP3T%sBlɅPGk.ᬻc6vf5;J@w2)2(KV ʳiڵ- nhGtB9s&յ݅>~#sC S4,ը4zR#@2^;Yw-|Nh UYmTPss[11qYח^feWֶY;[Czg <B-zQrhDKP (ƴ]+B 9Im5o~LsT b6 gx4]o5*u$}ޏk TGGWX}Lȡtgڧ䫫l4AV*GVkҧ0Ey]@z5WSM$wz ;^0hCY=?[^;+GdFa|niٯ@SiuY'Bt +J~OF:>ܲh٤[> ُzR#3wFzMdkrp H]ۇȕGTτv+S718ڵtZ{8WR$ fF2A$%wqemVL:Ҝ4V:4|w]y h/+TPl"bS )KIEOcu.1S8؋b1%쥘 7ů 8{O0q:3PՖ| .[?Fi;z|cN tw k 2$4 *=uYsH 6eBJ3£ ؏pE`tvGY3 Jk^0ZSYM?\ @%\ŭFtQW*FAVư3'C7+4S<ȼdbڞ2H.HHi*5 _Ov@OaK̪r`MxYxޒ•>Sv#`p.W-2PIfnoM}P)Yh Q辔&H(l铗"%2,1Iƚbp, b(M7* 5߈֭8&yV_,X0+ΛE' { ?K.jmt'q E_}:(KZr3{tB}#3TGS]JG^ ˟_h_KnL;rjUt9 /Q=D0y3/ܬBh.q(vduWcIՓEf4+w WAx^2Yy(4eex#kO.u+SY"/+qm}c$xۏ?aKF3o~8Tejh(ҿ&|}wvK4G8SSP㱂El>׏<_R.bzoĐ O78+H' pX (J|C_%^3;zѹz%\u,b̧ӪcĂG#2hiU#aѾٽh iŸ/S!LX\ͥwkt=`cpaW,c>.//mǖ~?΁]Yx֋g@_6Po$~eԁK.T^"RH!G|pCSpU)kpD;ϢKvἾMbNeE݂7.i;ћCsv/ՍoZ":7D&|}X'E|HK*s島5ξp-ǁWh7YgkUi8Fj%36*eOEm=Zb.o"+Iğ{Ax]HL藻ծ0(ty nFx5P84Q n{~E ZAxz2[ S^̬bMhZK(rų1sŦl*{5op'Y&Q>zg^8q!]C&jѾ(GA2x$o;"ɳHmn  IU'ɢ19#7mh'ξ?[G <9{W-F7$`Qwm7d +b: 2%д% -,M_$ԳhjCO&1EI[+R(lE['i@>uYM?Y(6AZɾ?{jآ7ֵЦkS,5ҘUX)AS8, Ѓ䓭@f^JK\MS&K =LZih#k Ka2w('JYt3u1NXܢ8BM`ҏ;o[oa2a ЖvO&YG(Y"; ft9nN'أ5"ǟ9H b̧e9,\ @k0pJ_8#֬%yxB̔ p Ӛ go3©R̢s~Wh%}>J`\ >i0?*+HM~JaK~T_Yo>8]M-T9 CQuꥭw8{lI%{'!cWC+OYB(Zo]'Ͱ&uZQ5}h_5nV4f.~;НoLWKh]ٞ7iDy>b?Q}; ,vi;̜xN ^a ;ؔhn$tp‹=4NFWk2'< V0*6Ûg<B|_ȋmudG9˻PoQT! ,\"ҼPk]F,qBUukd'), 4>'MQ,_ϰ }J,82.Wr;P<0' 17ݐE6)u ,VVi@/qQВ-S]BL$gk]xxx>XBK^c'4^Wb 6b0kTDi`XN5ȍ[9/J'u\v ,6OKٜ 0˼.UR\W%)^IKB;?qHX8^Ì^;[+ϖkYtuh>BJvOE!B%l!Ù0c#niYe2byb(p3\- b5bCsQhu$aP+q(7\PC7:N7;Fk;ґhsKha7WÔOWDfz]`_YwAA{RbehԎ#G?Gbfs [Wp/2LXjIPy0TӨZRv!Şw0207 :OĔYbI|Z͇]@vn,xHnM iOMU`1>DT*~x鈚m0؎*`rqa@T&r$N`T ЦEۉb55.yx-s +|;A7 K>pucUvѣ JfS਽* O/XBKe#9Z]nguy|װ Ux]a;o 0Xm"6]+[}pFb) 5bdQ96)3c=Md0@coXxn8!_<]Ojϰ-ƥogƱ˜[.U$/Xᬿ ԅ7Do\N<]:3v`9^RET6^xk%2 1i p#m ~hoKykHc̺4RJc{|N -VV'e҇ JZ=t8M\x1H^e1!9qZ M IllX'ׄHA: E. 0̈X=47z/+;ɏ56+|?s%˥f;: N pQu sU0FֈjnBxK~SũNMQh "YX.\y#zS(1x4vT_X;ƘG:pᕇ4E"4. :֭U$Osw;BUbM4=6Ym1q{Q ݺ4N!O}ԉxrMtӯ $cS̃y\8˗r*HoѻIO;zܚ)ʼó#ȹ]Ƹh iQ؏~͓k$ـlrA#=uYơK],%by"LX|o0HDH8{;hgۈ5HHc؛ eSn 2P"jȲw,8I"xO (%۫GJ=ޢʃn,KؗOV+SWZVGĊmLU= FT^ŊYQH]qXX^?;WœL1ct>e݀SZNf6vO7 ]ZU)D5|xsS+JӣCD+VY"WM ,8Mt=T%9*Ptz_o3++N*&^mZOщ2G̈́K 99b bx#R?ˈBx+xH*;Ⱥ?Wz;PQm7fkE;r,wBm~}G ʍ󝔫M圃 h[7F lzh5A6u`'ت/imȉl]jKi$IG}5`] ̜Boj'^& )T>Ƨ" =mԈg5~%PW!qmgxCFG<&ģ=|1}sRc#ոAY, r y#q᪲TUO/]i'ҢKی@=h1׫B6!5#ewՖd Wۿ?SwF"Ef$I) mƫdqLPW+=iB4vzXcuek ;8A/+6}fމd;FFNų@iDb"k2ԪUX(dm:Ȓ)Vckn!Ŧ1U+ Pǖt5#|e3-tzgͼW>(ok eDwPK]H&D ]tˆ [y7 [MS- Ѿ|e/?^yA˳T8RNr<đzS/*;=v6lP m3-pO&'(Z}R׉4K!ߴl=go^ڬZjCi5$BORBR%=I$+]^z@-?]f#ŷj[+ѪaE ؟*HE;1 B)zL:b4Dva|?Z][d>]p$'ѪKAc|]y?µ po;莚#ZWbzT^=>q8D}~&Z w:SQعɈHRRJ#&oPb6ؤVwMmY 6{Kg) X?t5Wr@.7IJpA.&}6-}rH8mF<)t<a[g߂=YPYpա.:m{y1\ bDq=r8t qn\GN!`JnN0dF]Y$ U,ɽDFX?DbsĴ6Kwb _սhIl ڌ@x2ZoQ1s?;p96wnNя#G3A]aX|!wn s.~h}C,a+b 8-h,Ò۞zVnEټBKYA3Vůq["*WZd}aK@?6;- T Ggg̰,Fa0A_pzkj꾩$pZ> }jBMR?[3C!(4a.&roϪ彴%q ե%Qzg=BIC>1/4֏K\Nj'itCXNlL (YD[]G?#-Q!d¾wqkRr$LVWV9aKձ+Ecfd."E? ׿y B:+jDž2v>E+Ģh<~< gHsKivKJB>dSr2֭xV<@Wf 72%vgaZBtr?d#uNGiwV{>,L&@{=Qzx]c%a<$tC||[Ȏzi"G2crc ^z!)3ZHt8Z}lCM LsXw[8iA|^̑xUdncʸB(X#HA@">XFe><.tgtKE,\1>/)~eք =zX;M96Y({*]/ ;34-o=n~ԨV8l wnm!=W":Ź#u!ҫH83 ƭP*N_ X(;k8^e:%ؘ便+ݥ vr6qMRuق8U6FC^ n"^ M/`ԢhOor\ASdžz0^L}K\vDsQXT0*$!:C.4>o,bLp4"}4&yq Un .:v[;rk]n֍kh66Sb3@0Lq1};ַYiƆ>-A8`%ג,x.R#9ǛQcC]dž9W:hH L97<@䍎)nq:~8FUe0m&'')'t$)~ iu.D?̪,$yӎU"E&=OTf-(CN=FR+̟7[}*~g.pz5,X"*Qjhi- CAE>"ǚi*ń;c fcoYTh- (+/I6٣B\YRt{dN5[]E"' _@ 1`GzÄ ^U;C(\+`SH'عiy{kKo_Xju< GI)B ]4G˜k|XvWŎ`Z!!W50o$ژ4dN&G7z/юQ3jG/ 1zʨ^8 lqI/tFqa<%8r{K|pګ:فe1u{W6SuufBϏhn`7LKndfC7Z1jm{[ 5[ּ`_ZϨ4Xx)Yђĺf|q DDL#5Ȧ_ʡ$*/y֗HT]}(M'@Tl|me6EGy.יY G ʅ{0qhCqQ[k\lE$j 6N 3#j6#mUu8|?g /t48Hkh/1B[v6D^=G R6Mt 1}3'̠z tib VeED5fXm3=Qac$#8H<* #`(D~ ~Tn' B\*d9HIf2twU9"\OJw7`,"y)&?CF9Yjhɨy4g^1c(M=CM:_kiכrZhzDyz3a͔ܰm7?+CWiS EP@T~rklc!;>YM aniJ1MuUyW@u|W3Cߒμ 9dx0w q x᫷;XZ8YOzd?F?92 Fz s-dmz!P"֣ӭ ;=fĎi]+>%ƕYqtDLao1]uxm7\(h3&NOrWwKZ=Tp}0HLDfnR9$r#1R TwȃIHЏo =<BӘ%?uJ NU OA-"zrIGyuJ7Pxz/Vʗ rP1-1}NU Z2L*==7TVې|)޷DFE=?P5"\qr}4);aeRCۍ~G]7QgBײ: +̘S\XѠFWqQ`Tǃʑ o'#v n8uS DZjdB,x7 6W !(ބw֓3c6:Hl*}DQ\{xl!輁<ҪG-H0Fv(1$Ip)TaH8[?a[9S=>kܝ36R#̖ʘ̴Ue;X 2HnZ-b&FvJ,U xY'/~ @Oܵ,S& iBDJ=͗dяhX7hp#T _QL2Cԣ-\#4asl%>.'y64>ey"Q2ꡲɌCbcwu:dvteA sNlNKy*v~~d)WpIM*M' ߡKiM/6HU9- qq1\3T" 3z3^Tl6WD"?K/TdL'Li <"k@ةWl3^{Z _{ *dފ߈"7$\~Gq *8JIGn"l Ň#-zȔCƚ`Pl(kwL4/&".O= r#=݇ú aǛ @oR?ҋ{ . H G蒜~*DoXA]aWQn&C.ɰ`W˩Vˇ^6Ť\J'C4~<% S3@GN`Vjk {-P5J8Q8OW jsEqfdTќ  hnf$Bݎ*5n2E;7RghƼR~sE_OylhE4=ëSh4 u98[ueJS̾l.}}m@ȓyT}QQj`[/,{Q}ɤ4^~.l> qز+, 4n U  YJg~c&Skn{./mRuh9g4_v,{J T wrRn_ ESXj q/YuͽQʵg(A (]+`8o6V}];__M6p}X{1e5b?DO'TATSOϺeGd&9VH H'̧avrZDf:FpI8S馣ӏH0R(ŇS^_w1CGn_ؼXbMϼ4_Fď=Of׼/(Xa>[6a2G+D+D]|;q@/gO,hQGQiK9!l KkNP72H׬<{[=0K@5׽>V p6#Q; bRGk1,zy1i3d&%ߦ@}~vXLOeBМ n>mHIқ`nf`B~Aaq ?mh-M61j3\jF@f?*-tod3f˛f"c|,[`* W8j^g*܀Fxh̫,ZgLm!;+q˞x;dVq?݄څ|f-|&ۛ4{G,APw gƟ:M<`,fVADW$P[M`~v@7PYY!E-u-!? dOr6@$vDLlgvGHfzCkdsc w*"k<XBaПZFL YZ