libnetapi0-3.4.3-3.6.1<>,LV/=„4ßiV#%w_ z*s]xi P#g ,tW .>9?d   .  6<CRdh j l p  $$3$(j8px9 Px:$x>Z@bFjGHIXY\]^bcFdeflzClibnetapi03.4.33.6.1Samba netapi LibraryThis package includes the netapi library. Authors: -------- The Samba Team Source Timestamp: 2426 Branch : 3.4.3.SLE11_SP1L-build18QopenSUSE 11.2openSUSEGPLv3+http://bugs.opensuse.orgSystem/Librarieshttp://www.samba.org/linuxx86_64/sbin/ldconfig/sbin/ldconfigQL-$08df09a9276bd0bd2c94a20b839f9185rootrootsamba-3.4.3-3.6.1.src.rpmlibnetapi.so.0()(64bit)libnetapi0libnetapi0(x86-64)   @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ /sbin/ldconfig/bin/sh/bin/shrpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.5)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcom_err.so.2()(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libnscd.so.1()(64bit)libnscd.so.1(LIBNSCD_1.0)(64bit)libnsl.so.1()(64bit)libnsl.so.1(GLIBC_2.2.5)(64bit)libresolv.so.2()(64bit)libresolv.so.2(GLIBC_2.2.5)(64bit)libtalloc.so.1()(64bit)libtdb.so.1()(64bit)libwbclient.so.0()(64bit)libz.so.1()(64bit)rpmlib(PayloadIsLzma)4.0-13.0.4-14.4.6-14.7.1LzLrbLnn@LmLmLi(@LgLc@L[@LPLI@L1@L%@K@K@KtKKKK[KK@K@KqN@KqN@KqN@KqN@KoKoKn@Kn@Kl@KLd@KG@KD{@K=K;@K/c@K@K@K@K?K?KK@K3@JJJ@JJJJ`@J@JH@JJ JjJ0@J@JJJ@JJ JzJzJt.@JmJ_@J\s@JT@JT@JMJL@JI@JCfJB@JB@J@J;}J:,@J8J7@J7@J2C@J2C@J,@J'@J'@J'@J+@JMJp@IIIo@Io@IԨIW@IW@III@IV@II2I@IIIl@II@I1I@IHI~@Iy@Iy@IuId@Ia@IVISuISuIFFIBR@IBR@I?@I?@I6tI6tI3I3I2@I1.I.I.I.I.I-:@I+I%Q@I%Q@IsI@IP@IH@H,H,H,H@H @H @H @HHHHHf@H@H׈HHBHe@H|@HAHAHH@H@H@H@HHc@H@HnH@Hz@H4@HsVHnHkmHkmHj@Hj@Hj@Hj@Hj@HhHhHcHb3@HXHO@HNlHNlHM@HI&HG@H?@H?@H=I@H=I@H;H6H6H6H.H-w@H-w@H-w@H-w@H*@H*@H*@H)H$= 10 and libc segfaults if printf is passed NULL for a "%s" arg.- Use a conditional suse_version macro in front of the SUSE_ASNEEDED export.- lookupname failed, cannot find domain when attempt to change password; (bnc#520645); (bso#6560).- Don't link with --as-needed flag on post-11.1 systems.- Stop the smbfs service if an interface goes down; (bnc#517768).- Disable build of static libraries on post-11.1 systems; (bnc#509945).- Fix missing zlibs for cifs.upcall and test_shlibs.- Update to 3.4.0. + BUG 6431: Local groups from 3.0 setups no longer found. + BUG 6459: Fix build of pam_smbpass on some distributions. + BUG 6481: 'net ads leave' needs to try account deletion, NetUnjoinDomain not. + BUG 6497: Fix calling of 'test' in configure. + BUG 6498: Add workaround for MS KB932762. + BUG 6499: Fix building of pam_smbpass. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6512: Fix support for enumerating user forms. + BUG 6514: Improve error message in 'net' when smb.conf is not available. + BUG 6520: Fix time stamps when "unix extensions = yes". + BUG 6521: Fix building tevent_ntstatus without config.h. + BUG 6526: Fix notifies in the share root directory. + BUG 6531: Fix pid file name.- Package /etc/samba/smbpasswd as %ghost on post-11.1 systems.- Fix net ads leave; (bnc#511695).- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164). - Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).- Update to 3.2.13, 3.3.6. + In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with file names treat user input as a format string to asprintf. With a maliciously crafted file name smbclient can be made to execute code triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478).- Update to 3.0.35. + In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a data value can potentially affect access control when "dos filemode" is set to "yes"; CVE-2009-1888; (bnc#515479).- Uninitialized read of a data value; CVE-2009-1888 (bnc#515479).- Update to 3.4.0rc1. + BUG 4699: Remove pidfile on clean shutdown. + BUG 5456: Fix "net ads testjoin". + BUG 6081: Make it possible to change machine account sids. + BUG 6253: Use correct value for password expiry calculation in pam_winbind. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6305: Correctly prompt for a password when a username was given. + BUG 6328: Add support for multiple rights to "net sam rights grant/revoke". + BUG 6333: Consolidate create/delete account paths in pdbedit. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6451: net/libnetapi user rename using wrong access bits. + BUG 6458: Fix uninitialized variable in local_password_change(). + BUG 6465: Fix enumeration of empty aliases. + BUG 6476: Fix smbd-zombies in memory when using [x]inetd. + BUG 6487: Add missing DFS call in trans2 mkdir call. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + Improve pam_winbind documentation. - Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions.- Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user input as a format string to asprintf; CVE-2009-1886; (bnc#513360).- Fix a bad memleak in vfs_full_audit; (bnc#510035).- Update to 3.3.5. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix joining of Win7 into Samba domain (bug #6099). + Fix joining of Win2000 SP4 clients (bug #6301). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5853: Add keyutils-devel to build requires to fix build on RHEL. + BUG 5897: Fix shutdown script example in the smb.conf manpage. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6301: Fix joining of Win2000 SP4 clients. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix 'net groupmap set' segfault. + BUG 6361: Make --rcfile work in smbget. + BUG 6365: Re-Add the "dropbox" functionality with -wx rights on a directory. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6415: Filter out of range mappings in default idmap config in idmap_tdb. + BUG 6416: Filter out of range mappings in default idmap config in idmap_tdb2. + BUG 6417: Filter out of range mappings in default idmap config in idmap_ldap. + BUG 6441: Fix the compile with --enable-dnssd. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent infinite include nesting. + Mark registry shares without path unavailable. + Also handle DirX return codes. + Fix Coverity ID 897. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix a race condition in winbind leading to a panic. + Some man pam_winbind improvements. + Zero an uninitialized array.- Update to 3.2.12. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix "force user" (bug #6291). + Fix Winbind crash (bug #6279). + Fix joining of Win7 into Samba domain (bug #6099). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5798: CFLAGS info lost in configure. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5835: Add keyutils-devel to build requires. + BUG 5945: Fix out of memory error with Winbind idmap. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6279: Fix Winbind crash. + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6291: Fix "force user". + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6386: Groupdb mapping fix. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent creation of keys containing the '/' character. + Fix bug in processing of open modes in POSIX open. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a race condition in winbind leading to a panic. + Fix a crash bug if we timeout in net rpc trustdom list. + Fix profile acls in some corner cases.- Default with passdb backend to smbpasswd for SUSE products older than 11.2.- Explicitly use 'tdbsam' as passdb backend in the default smb.conf file.- Update to 3.4.0pre2. + The default passdb backend has been changed to 'tdbsam'! + Samba4 and Samba3 sources are included in the tarball. + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Made parameter syntax of the net command more consistent. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 4271: testparm should not print includes. + BUG 4831: Don't call openlog() or closelog() from pam_smbpass. + BUG 5681: Do not limit the number of network interfaces. + BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo access checks. + BUG 6099: Fix NETLOGON credential chain. + BUG 6136: New AFS syscall conventions. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6253: Use correct value for password expiry calculation. + BUG 6291: Fix 'force user'. + BUG 6292: Update config.guess from gnu.org. + BUG 6302: Give the VFS a chance to read from 0-byte files. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on malloced memory. + BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix segfault in 'net groupmap set'. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6357: Use Samba default command line arguments in 'net'. + BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4 and IPv6 addresses + BUG 6361: Make --rcfile work in smbget. + BUG 6371: Unsuccessful 'net conf setparm' leaves empty share. + BUG 6372: usermanager only displaying 1024 groups and aliases. + BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids. + BUG 6415: Filter out of range mappings in default idmap config (idmap_tdb). + BUG 6416: Filter out of range mappings in default idmap config (idmap_tdb2). + BUG 6417: Filter out of range mappings in default idmap config (idmap_ldap). + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Fix the core of the SAMR access functions. + Fix SAMR server for winbindd access. + Add dbwrap_tool - a tdb tool that is CTDB-aware. + Hide "config backend" from swat. + Fix linking with --disable-shared-libs. + Fix issue with missing entries when enumerating directories. + Map NULL domains to our global sam name. + Fix driver upload for Xerox 4110 PS printer driver. + Add "net dom renamecomputer" to rename machines in a domain. + Inspect the correct computername string before enabling/disabling the change button in netdomjoin-gui. + Fix join prompt dialog test in netdomjoin-gui. + Only gray out labels when not root and not connecting to remote machines (netdomjoin-gui). + Allow to switch between workgroups/domains with the same name (netdomjoin-gui). + Add NetShutdownInit and NetShutdownAbort. + Fix samr access checks. + Add a security model to LSA. + Also handle DirX return codes. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix Coverity ID 897. + Fix a race condition in vfs_aio_fork with gpfs share modes. + Fix bug disclosed by lock8 torture test. + Fix a race condition in winbind leading to a panic. + Detect tight loop in tdb_find(). + Fix chained sesssetupAndX/tconn messages. + Fix strict locking with chained reads. + Fix two bugs in sendfile. + Fix memory leak. + Fix file descriptor leak. + Fallback to the legacy sid_to_(uid|gid) instead of returning NULL. + Always allocate memory in dptr_ReadDirName. + Fix 'net' crash during domain join. + Zero an uninitialized array. + Allow child processes to exit gracefully if we are out of fds.- Enable cifs.upcall on versions newer than SUSE 10.0.- Add BuildRequires to keyutils-devel.- Remove redundant Requires to keyutils-libs for cifs-mount.- Detect tight loop in tdb_find(); (bnc#450974).- Fix lp printing with kerberos; (bnc#476913).- Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all other build targets.- Update to 3.4.0pre1. + Samba4 and Samba3 sources are included in the tarball + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Make merged build possible. + Move common libraries to the shared lib/ directory.- Update to 3.3.4. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix usrmgr.exe creating a user (bug #6243). + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6279: Fix Winbind crash. + BUG 5329: Add "net rpc service delete/create". + BUG 6238: Make sure wbcLogoffUserParams are properly initialized before freed. + BUG 6263: Fix domain logins for WinXP clients pre SP3. + BUG 6286: Call init function for builtin idmap modules before probing for them as shared modules. + BUG 6243: Fix usrmgr.exe creating a user. + net conf: Save share name as given, not as lower case only. + Prevent creation of registry keys containing the '/' character. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Don't access a freed structure when logging off and re-using a vuid. + Try to to fix password_expired flag handling. + Make sure to grey out change fields in the netdomjoin-gui when not running as root. + Don't look up local user for remote changes, even when root. + Use procid_str in debug messages for better cluster-debuggability. + Use cluster-aware procid_is_me instead of comparing pids. + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Do not use the file system GET_REAL_FILENAME for mangled names. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to net. + In net_conf_import, start a transaction when importing a single share. + Fix writing of roaming profiles with "profile acls" set to "yes".- Update to 3.2.11. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix smbd crash for close_on_completion. + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6205: Correct sample smb.conf share configuration. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6263: Fix domain logins for WinXP clients pre SP3. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Fix resume command typo for "printing = vlp". + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Don't look up local user for remote changes, even when root.- Don't lookup local user for remote password changes; (bnc#493507).- Update to 3.3.3. + Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb correctly (bug #6195). + Fix serving of files with colons to CIFS/VFS client (bug #6196). + Fix "map readonly" (bug #6186). + BUG 6195: Don't let smbd child processes panic. + Add backend_requires_messaging() method to libsmbconf. + Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf. + Fall back to file backend when no valid backend was found. + Fix a memleak in dbwrap_rbt. + Provide transaction_start|commit|cancel fns for the registry tdb. + Speed up "net conf drop". + Speed up "net conf import". + Add transactions to the libsmbconf API. + Reduce memory usage of "net conf import". + Registry cleanup. + Fix handling of SAMBA_VERSION_VENDOR_PATCH. + Fix build of pam_winbind.so with static linking. + Tidy up some convert_string_internal error cases. + BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to run elections. + Allow DFS client paths to work when POSIX pathnames have been selected. + Try and fix the build farm RAW-STREAMS errors. + Ensure files starting with multiple dots are hidden. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6193: Avoid messing with sync_context in libnet_samsync_delta(). + Fix notify_printer_status_byname. + Fix Coverity IDs 722, 762, 774, 775, 776. + Fix build on old Heimdal based systems. + Fix compile warning. + Use parentheses in if condition to make negation clear. + Add dirsort module. + BUG 6147: Fix detection of the GNU ld version. + BUG 6097: Fix smbd segfault. + BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6139: Add missing whitespace in mount.cifs error message. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix a valgrind error. + Speed up "net conf list". + Add sorted subkey cache. + Use StrCaseCmp in the dirsort module. + Document the dirsort module. + Disable dns_sd by default. + Add avahi detection to configure. + Add event avahi binding. + Use avahi to register _smb._tcp in smbd. + Fix two memleaks in the encryption code. + Fix a scary "fill_share_mode_lock failed" message. + BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't set errno. + Don't use reserved words in smbconftort. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Parse_packet can return NULL which is then dereferenced in match_mailslot_name. + Format the header check for netinet/ip.h more nicely. + Missing break in conversion function prevents tdb password database update.- Update to 3.2.10. + BUG #6195: Don't let smbd child processes panic.- BUG 6195: Fix crash on passdb conversion.- Update to 3.2.9. + BUG 5920: The length of the memcpy was calculated wrong. + BUG 6097: Fix smbd segfault. + BUG 6098: Fix ads_find_dc() with "security = domain" when the DNS server is invalid. + BUG 6099: Samba returns incurrate capabilities list. + BUG 6100: Implement _netr_LogonGetCapabilities() with NT_STATUS_NOT_IMPLEMENTED. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem. + BUG 6161: smbclient corrupts source path in tar mode. + BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif(). + BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client. + BUG 6224: nmbd waits 5 minutes before checking to run elections. + BUG 6228: Fix SMBC_open_ctx failure when path failure doesn't set errno. + Numerous Coverity fixes + Fix double free caused by incorrect talloc_steal usage. + Backport delete semantics of alternate data streams on a file truncate. + Allow set attributes on a stream fnum to redirect to the base filename. + Fix use of streams modules with CIFSFS client. + Fix more POSIX path lstat calls. + Allow DFS client paths to work with POSIX pathnames. + Ensure files starting with multiple dots are hidden. + Fix guest auth when Winbind is running. + Fix memleak in get_remote_printer_publishing_data(). + cifs mount fix for handling -V parameter. + Fix guest mounts. + Clean-up entries in /etc/mtab after unmount. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Enable total anonymization in vfs_smb_traffic_analyzer. + Don't try and delete a default ACL from a file. + Fix remotely adding a share via MMC. + Fix resume handle for _samr_EnumDomainGroups. + Fix a buffer handling bug when adding lots of registry keys. + Fix a O(n^2) algorithm in regdb_fetch_keys(). + Fix a valgrind error / segfault in dns_register_smbd(). + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix two memleaks in the encryption code. + Fix "fill_share_mode_lock failed" message. + Add S-1-22-X-Y sids to the local token. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Don't miss an absolute pathname as a kerberos keytab path. + Have nmbd check all available interfaces for WINS before failing. + Initialize the id_map status in idmap_ldap to avoid surprise.- Obsolete change from 2008-03-05 by removing the needless examples cleanup.- Update to 3.3.2. + Fix "force group" (bug #6155). + Fix saving of files on Samba share using MS Office 2007 (bug #6160). + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + Fix corruptions of source path in tar mode of smbclient (bug #6161). + BUG 6082: Fix renaming and deleting of directories using Windows clients. + BUG 6154: Make ZFS honor admin users. + BUG 6155: Fix "force group". + BUG 6160: Fix saving of files on Samba share using MS Office 2007. + BUG 6161: Fix corruptions of source path in tar mode of smbclient. + Fix some NetBSD warnings. + Fix bug in processing of open modes in POSIX open. + Fix use of streams modules with CIFSFS client. + Ensure ACL modules work with POSIX paths. + Use fsp->posix_open in preference if we have it. + Fix more POSIX path lstat calls. + Fix a bug in message handling for the change notify code. + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + BUG 4640: Fix guest mounts in mount.cifs. + Fix displaying the version string properly when no other parameters passed in in mount.cifs. + Prefer gssapi header files from subdirectory. + BUG 6176: winbindd -n should disable the winbind idmap cache. + Add a vfs_preopen module to hide fs latencies. + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a valgrind error / segfault in dns_register_smbd(). + Fix build on SLES8. + Decremented by 1 for ntcancel requests. + Fix creation of core files. + Fix first mapping of uids/gids in Winbind. + Initialize the id_map status in idmap_ldap to avoid surprise. + Fix initialization of idmap status.- Only call '%find_lang pam_winbind' in the samba spec file, not samba-doc.- Ignore return value from subshell to fix build.- Make libsmbclient work with DFS, backported from 3.3; (bnc#475995).- Update to 3.3.1. + Fix net ads join when "ldap ssl = start tls" (bug #6073). + Fix renaming/deleting of files using Windows clients (bug #6082). + Fix renaming/deleting a "not matching/resolving" symlink (bug #6090). + Fix remotely adding a share via the Windows MMC. + BUG 6082: Fix renaming/deleting of files using Windows clients. + BUG 6069: Fix build with too many arguments. + BUG 6090: Fix renaming/deleting a "not matching/resolving" symlink. + BUG 6099: Try to fix domain join of Win7 Beta. + BUG 6117: Fix core dump of pdbedit -a. + BUG 6133: Fix deletion of non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem. + Fix Coverity IDs 115, 116, 117, 602. + Fix warning (bad handler prototype). + Unify the detection of the timespec code in configure.in, and the application of it in time.c. + Correctly use chroot(). + Parameterize in local.h the MAX_RPC_DATA_SIZE, and ensure that "offered" read from the rpc packet in spoolss is under that size. + Backport the semantics of when to delete alternate data streams on a file truncate. + Fix printf warnings. + BUG 6073: Prevent ads_connect() from using SSL unless explicitly requested. + Fix 'getent passwd' to allocate new uids. + Fix 'getent group' to allocate new gids. + Remove check for sharename being a username in 'net conf addshare'. + Fix Coverity ID 848. + Remove unused ENUM_HND from 'net'. + Fix getform command asprintf return code in rpcclient. + Fix memleak in get_remote_printer_publishing_data(). + Remove duplicate prototypes for generated rpc server functions. + Enable total anonymization in vfs_smb_traffic_analyzer. + Fix build with external dns_sd libraries. + Fix configure check "sub-second timestamps without struct timespec". + Use correct BSD evironment variable. + Don't try and delete a default ACL from a file. + BUG 5798: CFLAGS info lost in configure. + Fix Coverity IDs 740, 742, 744, 745, 876, 879, 880. + Fix remotely adding a share via the Windows MMC. + Avoid valgrind errors. + Fix 'net rpc join' for users with the SeMachineAccountPrivilege. + Fix resume handle for _samr_EnumDomainGroups. + Fix a buffer handling bug when adding lots of registry keys. + Fix a O(n^2) algorithm in regdb_fetch_keys(). + Initialize rc to 0 in main in mount.cifs. + BUG 6069: Add a fstatvfs function for libsmbclient. + Eliminate compiler warnings. + Don't miss an absolute pathname as a kerberos keytab path. + BUG 6100: Implement _netr_LogonGetCapabilities() with NT_STATUS_NOT_IMPLEMENTED. + Make Samba work with older ctdb versions. + Add S-1-22-X-Y sids to the local token. + Conditional install of the cifs.upcall man page. + Adjust regex to match variable names including underscores. + BUG 4370: Clean-up entries in /etc/mtab after unmount. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Fix a crash during name resolution. + Fix "assignment discards qualifiers from pointer target type" warnings. + Fix SMB_VFS_RECVFILE/SENDFILE macros. + Change "ldap ssl:ads" parameter to "ldap ssl ads". + Add manpages for vfs_acl_xattr and vfs_acl_tdb. + Fix double free caused by incorrect talloc_steal usage. + Build ldbrename. + Make nmbd check all available interfaces for WINS before failing. + Fix compilation of vfs_default on systems that do not support utimes(). + BUG 5920: Fix the calculation of the memcpy length. + BUG 6098: Fix ads_find_dc() in setups with "security = domain". + Make libsmbclient work with DFS.- Define init_samba_module in all samba-vscan modules; (bnc#469218).- Add GPLv3 header to all init scripts; (bnc#459766).- Backport of the clean event context after fork and krb5 refresh chain fixes; (bnc#415026).- Revert accidental partial strict allocate upstream commit- Update to 3.2.8. + Fix and streamline join and DC detection + BUG 4308: Excel save operation corrupts file ACLs. + BUG 5933: Fix incrementing/decrementing num_validated_vuids. + BUG 5953: Fix smbclient crashes. + BUG 5953: Make cli_send_smb_direct_writeX use writev. + BUG 5965: Fix creation of the first share using SWAT. + BUG 5969: Optimize smbclient put command. + BUG 5979: Fix level 2 oplocks. + BUG 5980: Fix race condition when granting level2 oplocks + BUG 5986: Fix renaming of streams. + BUG 5990: Strict allocate should be checked before ftruncate. + BUG 6000: Avoid bashism in perfcount.init. + BUG 6009: Setting "min receivefile size = 1" breaks writes. + BUG 6014: mget shouldn't segfault without arguments. + BUG 6016: Alternate Data Streams / Extended Attributes seem to conflict. + BUG 6017: Fix magic scripts. + BUG 6021: smbclient du command does not recuse properly. + BUG 6030: Add missing header in Status page. + BUG 6035: Fix possible race between fcntl F_SETLKW and alarm delivery. + BUG 6040: Calling Samba print server with an aliased DNS-name fails. + BUG 6058: Use 'make distclean' instead of 'make clean' in build_docs. + Fix "allow trusted domain" so it disables trusted domains. + Fix error code when smbclient puts a file over an existing directory. + Don't return 0 on error in smbcacls - bad for scripts. + Determine case sensitivity based on file system attributes. + Add vfs_fileid manpage. + Adjust regex to match variable names including underscores. + Fix stream marshalling to return the correct streaminfo status. + Fix a delete on close divergence from Windows. + Allow renames of streams via NTRENAME and fix stream error codes. + Fix a segfault if ? is there but the options are NULL. + Avoid flooding of syslog with failing pam_putenv messages. + Document default of the printing config variable. + Change default value for "ldap ssl" to "start tls". + Check if Unix account exists before asking for the password in smbpasswd. + Add manpage for vfs_shadow_copy2. + Clean event context after child is forked. + Refresh sequence number as soon as possible. + Don't set child->requests to NULL in parent after fork. + Clean event context after fork and fix krb5 refresh chain. + Fix null pointer refrence in event context. + Don't send message to any other child in child process. + Fix bug in get_dc_name_via_netlogon(), null pointer refrence.- Backport 3.2.8 fixes. + cups leaks and crashes + various winbind child handling fixes + join fixes + ACL fixes for Excel + allow usrmgr with non-root- Replace cifs.upcall Makefile patches by the upstream version.- Only add ccache to BuildRequires if it is used.- Update to 3.3.0. + The passdb tdbsam version has been raised. + Splitting of library directory into library directory and separate modules directory. + The default value of "ldap ssl" has been changed to "start tls". + Extended Cluster support. + New experimental VFS modules "vfs_acl_xattr" and "vfs_acl_tdb" to store NTFS ACLs on Samba file servers. + Simplified idmap configuration. + New idmap backends "adex" and "hash". + Added new parameter "winbind reconnect delay". + Added support for user and group aliasing. + Added support for multiple domains to idmap_ad. + The destination "all" of smbcontrol does now affect all running daemons including nmbd and winbindd. + New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands. + The 'net' utility can now use kerberos for joining and authentication. + The 'wbinfo' utility can now add, modify and remove identity mapping entries. + NetApi library implements various new calls for User- and Group Account Management. + libsmbclient does now determine case sensitivity based on file system attributes.- Replace all chkconfig calls with rc_active calls to improve performance during boot.- Add SuSEfirewall2 service config file to allow samba browsing on post-10.2 systems; (bnc#460902).- Update to 3.0.34. + Fix update of machine account passwords. + Fix SMB signing issue on Windows Vista with MS Hotfix KB955302. + Fix Winbind crashes. + Correctly detect if the current dc is the closest one. + Add saf_join_store() function to memorize the dc used at join time. This avoids problems caused by replication delays shortly after domain joins. + Fix write list in setups using "security = share".- Obsolete old -XXbit packages; (bnc#437293).- Update to 3.2.7. + Samba 3.2.0 to 3.2.6 can potentially give root filesystem access to older versions of smbclient; CVE-2009-0022; (bnc#460764).- Samba 3.2.0 to 3.2.6 can potentially give root filesystem access to older versions of smbclient; CVE-2009-0022; (bnc#460764).- Fix nmbstatus dipslay when workgroup parameter is given; (bnc#459785).- Fix Mounting failure when there is white spaces in service; (bnc#460793).- Update to 3.3.0rc2. + Splitting of library directory into library directory and separate modules directory. + Extended Cluster support. + Simplified idmap configuration. + New idmap backends "adex" and "hash". + Added new parameter "winbind reconnect delay". + Added support for user and group aliasing. + Added support for multiple domains to idmap_ad. + The destination "all" of smbcontrol does now affect all running daemons including nmbd and winbindd. + New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands. + The 'net' utility can now use kerberos for joining and authentication. + The 'wbinfo' utility can now add, modify and remove identity mapping entries. + NetApi library implements various new calls for User- and Group Account Management.- Fix all remaining conditional macro calls; (bnc#456469).- Add IPv6 support for mount.cifs.- Update to 3.2.6. + Fix potential segfault in vfs_tsmsm. + Don't list the domain twice when expanding internal aliases. + Fix the output of "getent group" when "winbind use default domain = yes" with "security = ads". + Add domain prefix to username in lookup_groupmem(). + Prevent negative GM/ cache entries due to broken connections. + Fix crash in sync_eventlog_params(). + Fix timeouts when calling 'getgrent'. + BUG 1254: Fix "write list" in setups using "security = share". + BUG 5080: Fix access to cups-printers with cups 1.3.4. + BUG 5737: Fix Winbind crash in an unusual failure mode; (bnc#416598). + BUG 5783: Fix FindFirst where search pattern equals the mangled filename. + BUG 5790: Fix returning of STATUS_OBJECT_NAME_NOT_FOUND on set file disposition. + BUG 5797: Fix moving of readonly files. + BUG 5814: Fix Winbind crash bug while doing "rescan_trusted_domain". + BUG 5818: Sort ACEs in smbcacl output properly and honor inheritance. + BUG 5825: Fix account locking with LDAP backend. + BUG 5826: Fix truncated filenames when accessing old servers. + BUG 5889: Fix "delete veto files = no". + BUG 5891: Fix smbd crash when viewing the eventlog exported by "eventlog list". + BUG 5900: Fix vfs_readonly. + BUG 5903: Fix vfs_streams_xattr breaking contents of files. + BUG 5904: Fix libnss_wins causing SIGABRT while servicing getaddrinfo() request. + BUG 5914: Fix build failure: redefinition of struct name_list. + BUG 5937: Fix filenames with "*" char hiding other files. + BUG 5953: Fix smbclient crashes. + Fix rename_open_files. + Restructure VFS SMB traffic analyzer VFS module. + Correctly fix smbclient to terminate on eof from server. + Unify access checks for lsa server functions. + Remove the requirement for ldap call made as root. + Cope with MAXIMUM_ALLOWED_ACCESS requests when opening handles. + Fix net rpc vampire, based on an *amazing* piece of debugging work by "Cooper S. Blake" . + Fix Coverity IDs 456, 574, 592, 606 and 607. + Fix net rpc vampire. + Use the same prerequisite for DDNS update as Windows XP. + Make "lwinet ads dns register" honor the "interfaces" parameter. + Fix extended DN parse error when AD object does not have a SID. + BUG 5888: Fix PNP_GetHwProfInfo(). + BUG 5957: Do not abort rename process on valid rename script. + BUG 5898: Fix 'net rpc shutdown'. + Fix duplicate installation of cifs.upcall. + Fix _srvsvc_NetShareAdd segfault. + Ensure consistency when reporting password complexity. + Fix _lsa_GetUserName. + Fix access check in _samr_QuerySecurity(). + _samr_DeleteUser needs to wipe out the user_handle on success. + NetGroupEnum_r needs to handle servers with no groups. + Search for gpfs functions in both libgpfs_gpl.so an libgpfs.so. + BUG 5908: Fix internal change notify on shared directory. + BUG 5135 and 5446: Prevent calling POSIX ACL vfs methods on zfs share. + BUG 5929: Fix building of vfs_prealloc with option --with-cluster-support and GPFS. + Add new VFS module to analyze SMB traffic + BUG 5928: Fix 'testparm --version'. + Have uppercase_string return success on NULL pointer in mount.cifs. + Make mount.cifs return codes match the return codes for /bin/mount. + Use lock/unlock_mtab scheme from util-linux-ng mount prog in mount.cifs. + BUG 5778: Check if strlcpy and strlcat are already defined. + BUG 5840: Fix segfault in "rpcclient lsaaddacctrights". + BUG 5860: Fix nasty error message for overlong strings in safe_strcpy. + Fix a potential NULL deref in found by the IBM Checker. + Fix an uninitialized variable found by the IBM Checker. + Fix an unlikely memleak found by the IBM Checker. + Fix some missing error handlings. + Add workaround for domain joins using a netbios name which is different from the hostname. + Fix crash bug when freeing a non-malloc'ed buffer if the client sends a non-encrypted packet with the crypto state set. + Fix trans2findfirst for the large directory optimization. + Fix checking for presence of cups-devel and correct cups-devel test for HAVE_IPRINT. + BUG 5805: Don't close stdout when calling setup_logging multiple times. + Fix setting of trust password using 'net rpc trustdom add'. + Fix several issues in vfs_streams_xattr and vfs_stream_depot. + Return an error instead of crashing when no realm is given (trigerred by "net ads info -S 127.8.7.6" (where 127.8.7.6 doesn't exist) and "disable netbios = yes"). + Fix the new vfs_smb_traffic_analyzer build for static links. + BUG 5901: Fix default for streams_depot location. + Fix several build warnings. + Delete the krb5 ccname variable from the PAM environment if set. + Fix circular dependency error with autoconf 2.6.3. + Add @CIFSUPCALL_PROGS@ to "all" target so cifs.upcall gets built at compile time rather than install time. + BUG 5906: Fix Winbind crash when calling 'getent group'. + Fix logging to syslog. + Allow SYSLOG_FACILITY to be modified with a new configure option called - -with-syslog-facility. + BUG 5909: Fix MS-DFS on Vista clients. + BUG 5944: Fix starting of nmbd with "socket address" set to "". + Fix segfault on startup with trusted domains. + Re-add "winbind:ignore domains" parameter. + Avoid freeing fsp twice when opening new_file fails (Debian #431696).- Fix the conditional macro to start smbfs by default; (bnc#456469).- Readd libsmbclient to baselibs.conf for pre 11.0 distributions.- Use %__install macro to install files with the right permissions instead of cp.- Update to 3.3.0rc1. + Splitting of library directory into library directory and separate modules directory. + Extended Cluster support. + Simplified idmap configuration. + New idmap backends "adex" and "hash". + Added new parameter "winbind reconnect delay". + Added support for user and group aliasing. + The destination "all" of smbcontrol does now affect all running daemons including nmbd and winbindd. + New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands. + The 'net' utility can now use kerberos for joining and authentication. + The 'wbinfo' utility can now add, modify and remove identity mapping entries. + NetApi library implements various new calls for User- and Group Account Management. - Added German translation for pam_winbind.- Remove patch for bnc#336854, which doesn't exist in 3.2.x or higher.- Use %{NET_CFGDIR} define instead of a fixed path to the network conf.- Update to 3.2.5. + Samba 3.0.29 to 3.2.4 can potentially leak arbitrary memory contents to malicious clients; CVE-2008-4314; (bnc#446971).- Update baselibs.conf.- Fix circular dependency error with autoconf 2.6.3.- Fix the dhcp hook script and support CODE11; (bnc#442335).- Fix perl v5.10 warnings in nmbstatus; (bnc#448225).- Include the missing spec file change mentioned the previous commit.- Make cifs-mount depend on keyutils, keyutils-libs packages as they are required to support dfs and kerberos; (bnc#432494).- Fix the offset checks in the trans routines; CVE-2008-4314; (bnc#446971).- Change the runlevel description for winbindd to use "Microsoft Windows" instead of "NT"; (bnc#446154).- Directory/Filenames get truncated when 3.2.0 client acesses old server; (bnc#432471).- Add SuSEfirewall2 services config file to open Netbios and Samba ports on post-10.2 systems; (bnc#247344).- Remove unrecognized configure options.- Fix the pam_winbind build.- Delete the krb5 ccname variable from the PAM environment if set.- Move the nss_info modules to the samba-winbind package.- Activate the idmap backends "adex" and "hash".- Add version branding for CODE 11.- Restart smbfs even with the traditional network setup; (bnc#425058).- Only call the stop_on_removal, restart_on_update, or insserv_cleanup macro if available.- Only call the fillup_and_insserv or fillup_only macro if available.- Use package names instead of macros for cp, mkdir, mv, rm, and grep or instead of the full path to the binary for ln, find and xargs.- Introduce NET_CFGDIR to fit the needs for a differing location of the network configuration per vendor.- Use path macros for cp, mkdir, mv, rm, and grep.- Only use SUSE rpm macros and SuSEconfig.permissions if available.- Update to 3.3.0pre2. + BUG 5729: Explicitly allow "-valid". + BUG 5737: Fix winbindd crash in an unusual failure mode; (bnc#416598). + BUG 5751: Fix showing of ACLs on DFS in (lib)smbclient. + BUG 5762: Fix opening of mangled directory name (resulted 'is a stream name'). + BUG 5783: Fix FindFirst where search pattern == mangled filename. + BUG 5790: Fix returning of STATUS_OBJECT_NAME_NOT_FOUND on set file disposition. + BUG 5797: Fix moving of readonly files. + Fix crashes when looking up a non-existant uid. + Fix getting/setting of NT ACLs on a file. + Fix the wcache_invalidate_samlogon calls. + Clarify usage of "force create mode". + Get smbd to look (read-only) into the winbindd cache for uid/gid <--> sid mappings. + Write times code update. + Add experimental version of VFS module acl_xattr. + Fix rename_open_files. + Make SMB traffic analyzer VFS module more efficient. + Fix segfault when calling nss_get_info() with a NULL ads structure. + Add support for name aliasing in Winbind. + Add the idmap/nss-info provider from Likewise Open. + Allow an admin to define the "uid" attribute for a RFC2307 user object in AD to be the username alias. + Add new idmap backend "adex" to support RFC2307 enabled AD forests. + Add new idmap backend "hash". + Fix build warnings. + Cleanup of DC enumeration in get_dcs(). + BUG 5710: Fix changing of machine account passwords. + BUG 5784: Fix pam_winbind build issue on Solaris. + Fix invalid sid copy (hit when enumerating sibling domains) in Winbind. + Fix double installation of cifs.upcall. + Add change-user-password command to wbinfo. + Fix segfault in _srvsvc_NetShareAdd. + BUG 5736: Fix Winbind crash bug with trusted domains. + Correct the netsamlogon_clear_cached_user function. + Add new VFS module to analyze SMB traffic to record write and read operations on the Samba server. + Fix build warnings in cifs.upcall. + BUG 5707: Do proper error handling if the socket is closed. + BUG 5778: Don't define 'strlcat' and 'strlcpy' if it's already defined. + Fix Coverity IDs 587 and 589. + Increase the default positive idmap cache time to a week. + Fix calculation of useable_space for trans2 and nttrans replies. + Add mapping of generic bits when setting an NFSv4 ACL. + Some write time fixes. + Add new parameter "cups connection timeout". + Fix enumeration of nested group memberships in Winbind. This affected only setups using "security = ads". + Fix cut and paste error in quota code. + Fix display of POSIX ACLs. + Fix permissions of group_mapping.ldb (CVE-2008-3789); (bnc#420634). + Avoid a race condition in glibc between AIO and setresuid(). + Add missing become root for AIO operations. + Fix an errno handling bug that could lead to an infinite loop. + Fix logic of tsmsm_sendfile(). + Fix handling of arbitrary new PAC types. + Fix segfault on startup with trusted domains. + Fix segfault on the CTDB destructor code. + Re-add "winbind:ignore domains". + BUG 5609: Remove configure option "--with-libdir" and add "--with-modulesdir". + Extend "net rpc vampire keytab" to support differential replication and storing of kerberos keys. + Rework internal logic of registry tdb code. + Freeze autogenerated prototype headers (good bye "make proto"). + Add new "winbind reconnect delay" parameter. + Make the change to smbcontrol for "all" to mean broadcast, and "smbd" to mean the main smb daemon. + Allow an admin to define the "uid" attribute for a RFC2307 user object in AD to be the username alias. + Add "net rpc vampire keytab" and "net rpc vampire ldif". + Rework of the Winbind idmap backend.- Define PAM_AUTHTOK_RECOVERY_ERR when not available on older Linux products.- Adopt samba-vscan to build after the change to the bool type define.- Build cifs.upcall for CentOS 5, Fedora 8 and RHEL 5 and newer too.- Call mkinitrd_setup during %post and %postun for post-9.2 systems only.- Create a link to the html manpages so that they can be accesses in swat; (bnc#426182).- "Password last set" timestamp update from admin pw change; (bnc#420407).- Call mkinitrd_setup during %post and %postun for package cifs-mount; (bnc#413709).- Update to 3.3.0pre1. + Splitting of library directory into library directory and separate modules directory. + Extended Cluster support. + Simplyfied idmap configuration. + Added new parameter "winbind reconnect delay". + The destination "all" of smbcontrol does now affect all running daemons including nmbd and winbindd. + New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands.- Update to 3.2.3. + Force the permissions on group_mapping.ldb to 0600; CVE-2008-3789; (bnc#420634).- Update to 3.2.2. + BUG 5592: Fix creation and installation of shared libraries. + Fix replacement of random seed generator. + Fix a race condition in idmap_tdb2_allocate_id(). + Fix unix_convert() for "*" after changing map_nt_error_from_unix(). + Make sure to always set errno on error path in OpenDir. + BUG 5675: Fix smbspool program assuming Kerberos authentication by mistake. + BUG 5686: Fix segfaults in libsmbclient. + BUG 5692: Fix coredump in full_audit.so. + BUG 5696: Fix "force group" in setups using Winbind. + Rename cifs.spnego to cifs.upcall. + Fix segfault in cifs.upcall when it is called without any arguments. + Fix coverity ID 594 (resource leak on error path). + Fix assigning of primary group memberships when authenticating via Winbind. + BUG #5617: Fix freezing Windows Explorer on WinXP while browsing Samba shares. + Include stdlib.h to get a prototype for free(). + Solve an IBM XL C/C++ compiler error encountered in get_exit_code() auth_errors array initialization in client/smbspool.c. + Use NGROUPS_MAX instead of 32 for the max group value in rep_initgroups(). + Add add c++ guard to netapi. + Fix compile warning in cifs.upcall. + Add "dns_resolver" key type to cifs.upcall. + BUG 5688: Fix orphaned LPQ processes if socket address is invalid. + BUG 5684: Fix removal of dead records in tdb files. + Fix coverity IDs 595, 596. + Fix smb_len calculation for chained requests. + Fix output of test status. + Fix smbclient connections to older servers. + Fix a fd leak when trying to regain contact to a domain controller in Winbind. + Fix permissions on ctdb databases. + Fix passing back success when a function had in fact failed in two places. - Add --enable-static to the configure options to get the statical libraries installed by the install Makefile target. - Add --with-cifsupcall to build the cifs.upcall binary for post 10.2 systems.- Set Required- and Should-Stop in the init info part of all init scripts.- Fix libsmbclient to older servers; (bnc#402776).- Update to 3.2.1. + BUG 5594: Fix "make test" by adding and using a new testparm switch "--skip-logic-checks". + Fix creation of libaddns.a, libsmbclient.a and libsharemodes.a. + Update the section about net conf in the net(8) manpage. + Improve processing of registry shares. + Fix listing of registry shares with testparm. + Fix several build issues. + BUG 5578: Fix error from strlcat. + BUG 5613: Fix flushing of smb.conf when creating a new share using SWAT. + Ensure consistent use of pdb_get_nt_passwd instead of pdb_get_lanman_passwd. + Remove worrying warning message when safe_strcpy tries to copy a pseaudo interface name that's too long. + Canonicalize servername in the printer functions to remove leading '\\' characters. + Fix option processing in smbcacls - add POPT_COMMON_CONNECTION. + Fix bug creating files using DOS clients with mixed case files. + Fix uninitialized variable. + BUG 5616: Fix session keys also in rpccli_netr_LogonSamLogonEx wrapper. + BUG 5570: Fix bogus error message during AD domain join. + Fix trusted domain handling in Winbindd. + Fix build warning. + BUG 5202: Fix setting of ACEs for users/groups with write access in setups with 'dos filemode = yes'. + Re-activate 'acl group control' parameter and make it only apply to owning group. + Make ntimes function more like POSIX and allow NULL arg. + BUG 5512: Fix alignment problems on sparc. + BUG 5616: Fix share connections in setups with "server signing = mandatory" or SMB signing set on the client side. + Fix a race condition in Winbind leading to a crash. + Fix a segfault in base64_encode_data_blob. + Fix some uninitialized variable references via ndr_print. + Fix error message if trying to join with a non-privileged user. + Fix setups using "include = registry" without [global] settings in the registry. + Fix "net sam rights" on domain member servers. + Add documentation for the vfs streams modules. + Cleanup some duplicate code by passing the password to the wbinfo_auth* functions. + Allow SID with 0 in subauthority to be converted properly. + Set sin[6]_family instead of ss_family in in[6]_addr_to_sockaddr_storage. + Fix realpath() check so that it doesn't generate a core() when it fails. + Fix overwriting of winbind logfiles. + Fix "vfs_full_audit.c: name table not in sync with vfs.h" panic. + Add broadcasting of the debug message to all winbindd children. + BUG 5635: Fix updating of printer queues. + Release still reachable memory if the smbclient context is freed. + Remove trailing withespace from wbinfo -m which breaks gdm auth. + BUG 5540: Fix "set primary group script" user option substitution. + Fix regression in Winbindd offline mode. + Allow authentication and memory credential refresh after password change from gdm/xdm. + Allow %u parameters for print job username.- Fix a race condition in winbind leading to a crash; (bnc#406623).- Use the configure option to enable debugging. This fixes the creation of the debuginfo and debugsource package.- Fix emptying the printing queue; (bnc#411493).- Remove trailing withespace from wbinfo -m which breaks gdm auth.- Add a recommendation to the samba and samba-winbind package to install logrotate for openSUSE 11.0 and later.- Include mkinitrd scriptlets.- Allow %u parameters for print job username - use advanced sub; (bnc#374389).- Update to 3.0.31. + BUG 5504: Fix SIGTERM handling in Winbind children so that they do not remove the unix domain socket used to field client requests. + Split the winbindd_passdb backend into a 'builtin' and a 'sam' backend. + When allocating client buffers for large read/write - make sure we take account of the large read/write SMB headers as well as the buffer space. + Memory leak fixes in DC location code. + BUG 5533: Winbindd fails to cope correctly with a workgroup name containing a '.' + BUG 5555: Don't return NT_STATUS_PASSWORD_MUST_CHANGE error on machine account logon. + BUG 5551: smbd recursing back into winbindd from a winbindd call. + Fix usage message for "net rpc trustdom add". + Ensure consistent use of pdb_get_nt_passwd instead of pdb_get_lanman_passwd. + BUG 5578: Bad (non-Samba) use of strlcat gives error. + Canonicalize servername in the printer functions to remove leading '\\' characters. + Documentation build fixes. + [DOCS] Fix use of smbconfoption in samba.entities. + Return NULL in sitename_fetch() if gencache_init() fails. + Use machine account and machine password from our domain when contacting trusted domains. + SPNEGO SPN fix when contacting trusted domains. + BUG 5285: Fix libcap header mismatch. + Fix joining NT4 domains. + Don't let winbind getgroups crash when we have no gids in the token. + Fallback to level 24 pwd set while joining. + Fix joining w2k domains in "security = ads". + Fix pam_sm_chauthtok for storing modified cached creds. + BUG 5202: Re-activate "acl group control" parameter and make it only apply to owning group. + BUG 5531: Fix conversion of ns units when converting from nttime to timespec. + BUG 4974: Map NT_STATUS_OBJECT_PATH_NOT_FOUND to ENOENT in libsmbclient. + Fix a segfault in base64_encode_data_blob. + AIX build fixes. + ENODATA is not defined in freeBSD 4.6.2. + Don't reset password last set time just because the expired flag is set to 0. + Fix usage message for 'net idmap dump'. + Miscellaneous man page fixes. + BUG 4203: Samba3-HOWTO: Add improvements/fixes submitted by Pete Boyd. + Fixes to man pages. + Add tdb file documentation. + Ensure that winbindd trusted domain children keep primary domain online status up to date. + Update cached creds during password change. + Ensure that Winbind always uses set_domain_offline() to mark a domain offline. + Allow authentication and memory credential refresh after password change from gdm/xdm. + Memory leak fixes.- Allow authentication and memory credential refresh after password change from gdm/xdm; [bnc#395578].- Add SMB_VFS_OP_RECVFILE to vfs_op_names to get it in sync with vfs.h.- Call the libsmbclient testsuite from the %check instead of the %build script.- Use machine account and machine password from our domain when contacting trusted domains; [bnc#404667].- Add a %check section move the test of the PAM modules to this section and add more tests.- Add a recommendation to the samba and samba-winbind package to install cron for openSUSE 11.0 and later.- Use a variable for syslog and add missing $remote_fs dependency for Require-Start in the init information of the init scripts.- Update to 3.2.0. + Support for establishing interdomain trust relationships with Windows 2008. + All changes from the pre and rc releases as noted in here earlier.- Move header files from the devel sub package to lib*-devel.- Work around bad use of autoconf interna.- Build Samba with debug symbols to get working debuginfo packages.- Add /etc/openldap to the file list and not only the schema directory.- Improve samba-winbindd and dhcpcd-hook-samba interface scripts for faster booting; [fate#304967], [fate#304965].- Move sysconfig variable DHCLIENT_MODIFY_SMB_CONF from Other to 'Network/DHCP/DHCP client'; [bnc#400467].- pam_winbind: Update cached creds during password change; [bnc#395578].- Update to 3.2.0rc2. + BUG 5504: Fix behaviour of winbindd children receiving a SIGTERM. + BUG 5489: Split the winbindd_passdb backend into a 'builtin' and a 'sam'. + Make sure we take account of the large read/write SMB headers as well as the buffer space when allocating cli buffers for large read/write. + Fix tag as a goto target we were not reinitializing the array counts. + BUG 5451: Fix for using the correct machine domain when looking up trust credentials in our tdb. + Fix spnego SPN when contacting trusted domains. + BUG 5285: Fix libcap header mismatch. + Fix pam_sm_chauthtok for storing modified cached creds. + Fix joining issue in setups with "config backend = registry". + BUG 4544: Add new parameter 'ldap connection timeout' to prevent waiting for TCP connection timeouts if no LDAP server is available. + BUG 5502: Fix security=server. + Fix coverity IDs 552, 553, 570, 571, 572. + Shrink ldbtools. + Fix reset of password last set time just because the expired flag is set to 0. + Remove support for symbol versioning in shared libraries. + Fix autogen for autoconf 2.62. + BUG 5515: Fix empty input fields in SWAT. + BUG 5516: Fix saving of the config file in SWAT. + Fix winbindd trusted domain child not keeping primary domain online status up to date.- pam_winbind: fix pam_sm_chauthtok for storing modified cached creds; [bnc#395578].- Don't reset "password last set time" when unlocking an autolocked account; [bnc#382111].- Fix winbind sigterm handling and make init script send sighup to all child winbind processes; [bnc#382027].- Fix bug with winbindd trusted domain child not keeping primary domain online status up to date, merge to trunk from reversion 1801; [bnc#373560].- Make winbind children reopen logs on SIGHUP; [bnc#382027].- Set only CONFIGDIR and LIBDIR while make everything and install. No longer set CONFIGFILE, DRIVERFILE, LMHOSTSFILE, and SMB_PASSWD_FILE; [bnc#395877].- Update to 3.0.30. + Fix for CVE-2008-1105. + Remove man pages for ldb tools not included in Samba 3.0.- Fix vulnerability that allows for the execution of arbitrary code in smbd; CVE-2008-1105; SA30228; [#391168].- Follow the rename of libtdb0 in baselibs.conf.- Rename sub package libtdb0 to libtdb1.- Update to 3.2.0rc1. + Move the posix pending close functionality down into the VFS layer. + Fix activation of registry globals in loadparm. + BUG 5452: Fix smbclient put. + BUG 5434: Ensure the loaded password doesn't contain the '\n' at the end. + BUG 5456: Fix missing echo if we ^C at the prompt. + BUG 5464: Fix timeout in winbindd. + Fix returning a directory value for a QPATHINFO on a msdfs link with a non-dfs path. + Use more error-prone form of testing dm_destroy_session() return code. + BUG 5453: Fix winbindd and smbd crash when dsgetdcname is used. + BUG 5465: Fix joining with createcomputer=ou1/ou2/ou3. + BUG 5461: Fix issue with Citrix on Samba DCs with more than 900 groups. + Fix wins null pointer crash in nss_wins module. + Fix lm session key length in _netr_LogonSamLogon. + Add -f switch for DsGetDCName() example and be more verbose on output. + BUG 5429: Clarify log msgs re: failure to create BUILTIN\{Administrators,Users} + Fix the DNS Update option of "net ads join". + BUG 5184: Add Missing HAVE_UPDWTMPX check before using updwtmpx(). + Recognize and allow longer UA keys in winbindd_cache. + BUG 5436: Fix signing problem in the client with transs requests. + Fix a valgrind bug in the new [ug]id2sid cache. + Fix Coverity IDs 565 and 222. + Fix dfs_Enum: In form_junctions, correctly check for malloc failure. + Add support for symbol versioning in shared libraries (can be disabled with - -disable-sysmbol-versioning). + Add new function wbcLibraryDetails() to libwbclient. + Cleanup size_t return values in convert_string_allocate. + Fix Kerberos support for CUPS 1.3 in smbspool. + Fix printing with Vista. + Fix deletion of files when they're in use by other drivers.- Update to 3.0.29. + Fix a crash in tdb_wrap_log(). + BUG 5267: Fix for nmbd termination problems when no interfaces found. + BUG 5326: OS/2 servers give strange "high word" replies for print jobs. + Remove MS-DFS check that required the target host be ourself. + BUG 5372: Fix high CPU usage of cupsd on large print servers by using more efficient CUPS queries in smbd. + BUG 5095: Fix the enforcement of the "Manage Documents" access right. + BUG 5460: Fix MS-DFS referral problem in server code. + Fix bug in Winbind that caused the parent to ignore dead children. + BUG 4235: Improve compliance to the Squid helper protocol. Original patch from Pawel Worach . + Prevent cycle in Wibind's list of children when reaping dead processes. + BUG 5419: Fix memory leak in ads_do_search_all_args() (merge from v3-2). + Fix winbind NETLOGON credential chain on a samba dc for w2k8 trusts. + Fix client connections and negotiation with Windows 2008 DCs in member server code. + Add NT_STATUS_DOWNGRADE_DETECTED error code (merge from v3-2). + BUG 5430: Fix pam_winbind.so on Solaris (requires -lsocket). + Re-add samr getdispinfoindex parsing which got lost in the glue commit. + BUG 5461: Implement a very basic _samr_GetDisplayEnumerationIndex(). Corrects interop problem between Citrix PM and a Samba DC. + BUG 3840: Fix smbclient connecting to NetApp filers when using whitespace in the user's password. + BUG 4901: Fix behavior of "ldap passwd sync = only". + BUG 5317: Fix debug output from domain_client_validate(). + BUG 5338: Fix format string bug in rpcclient. + Ensure that "wbinfo -a trusted\\user%password" works correctly on a Samba DC with trusts. + BUG 5336: Fix SetUsetrInfo(level 25) to update the pwdLastSet attribute. + BUG 5350: Fallback to anonymous sessions if not trust password could be obtained on Samba DCs and member servers. + Fix signing problem in the client with trans requests. + Enable winbind child processes to do something with signals, in particular closing and reopening logs on SIGHUP. + Add implementation of machine-authenticated connection to netlogon pipe used when connecting to win2k and newer domain controllers. + Fix trusted users on a DC that uses the old idmap syntax. + Only have Winbind cache domain password policies that were successfully retrieved. + Fix alignment bug when marshalling printer data replies. + Fix DeleteDriverDriverEx() checks to prevent removing in use files.- Expand baselibs.conf to match pre SUSE 11.0 products.- Remove obsoletes and provides 3 for all packages and systems.- Cleanup the use of the suse_version macro to achieve consistent defaults.- Set CODEPAGEDIR while make to fit the install location.- Prevent errors during the cache validation when ua keys reach a size larger than 1024; [bnc#372558].- Package man page files independent of the used compression method (gz,lzma).- Rewrite spec file to build packages for Fedora, Redhat, CentOS, and Mandriva in the OBS too.- Add a script to restart smbfs if NetworkMangaer gets an IP address; [bnc#373075].- Remove all references to the obsoleted samba-pdb package.- Compose the BuildRequires in a more flexible way to fit the openSUSE build service (OBS) requirements to support different operating system targets.- Use _libdir macro instead of a local define of LIBDIR.- Remove PreReq /sbin/ldconfig from the libtdb-devel package.- Install the shared libraries with the same name as used as soname.- Update to 3.2.0pre3. + Use of IDL generated parsing layer for several DCE/RPC interfaces. + Removal of the 1024 byte limit on pathnames and 256 byte limit on filename components to honor the MAX_PATH setting from the host OS. + Introduction of a registry based configuration system. + Improved CIFS Unix Extensions support. + Experimental support for file serving clusters. + Support for IPv6 in the server, and client tools and libraries. + Support for storing alternate data streams in xattrs. + Encrypted SMB transport in client tools and libraries, and server. + Support for Vista clients authenticating via Kerberos. + Full support for Windows 2003 cross-forest, transitive trusts and one-way domain trusts. + Support for userPrincipalName logons via pam_winbind and NSS lookups. + Expansion of nested domain groups via NSS calls. + Support for Active Directory LDAP Signing policy. + New LGPL Winbind client library (libwbclient.so). + New NetApi library for domain join related queries (libnetapi.so) and example GTK+ Domain join gui. + New client and server support for remotely joining and unjoining Domains. + Support for joining into Windows 2008 domains. + New ldb backend for local group mapping tables + Raised level of security defaults for authentication operations. + Inclusion of an HTML version of the 3rd edition of "Using Samba" from O'Reilly Publishing.- Add libtalloc1, libtdb0, and libwbclient0 to baselibs.conf.- Remove obsoletes and provides samba3 for post 10.3 systems.- Let libsmbsharemodes-devel require libsmbsharemodes0 for post 10.3 systems.- Rename the libsmbsharemodes package to libsmbsharemodes0 to follow the shared library packaging policy for post 10.3 systems.- Update kdc dns-only lookup patch to IPv6.- Move mount.cifs and umount.cifs from /sbin/ to /usr/sbin/ and create sym links in /sbin/; [bnc#380693].- Enable the build of vfs_cacheprime and vfs_readahead modules.- Update to 3.2.0pre2. + Add library for access to the registry configuration data. + BUG 5023: Separate NFS4 and POSIX ACL code in file access checks. + BUG 4308: Fix Excel save operation ACL bug. + BUG 4801: Correctly implement LSA lookup levels for LookupNames. + Add new option "debug class" to control printing of the debug class. + Enable building of the zfsacl and notify_fam vfs modules. + BUG 5083: Fix memleak in solarisacl module. + BUG 5063: Fix build on RHEL5. + New smb.conf parameter "config backend = registry" to enable registry only configuration. + Added support for IPv6 client and server connections. + Remove unused utilities: smbctool and rpctorture. + Fix service principal detection to match Windows Vista (based on work from Andreas Schneider). + Encrypted SMB transport in client tools and libraries, and server. + Added support for an SMB_CONF_PATH environment variable containing the path to smb.conf. + Various fixes to ntlm_auth. + Correctly handle mixed-case hostnames in NTLMv2 authentication. + Add Winbind client library. + Enhance client and server remote registry access. + Add client calls for remotely joining a computer to a domain (including calls from "net dom" command). + Add libnetapi.so library for joining domains including sample GTK+ app. + Fixes for Vista SP1 Kerberos authdata handling to only pickup the PAC. + Various fixes for DsGetDcName and conversion to IDL based structures. + Add ads_get_joinable_ous() to libads to get list of joinable ous. + Add get_logon_hours_from_pdb() to comply with new IDL based structures. + Migration of the entire client and server DCE/RPC code to IDL based structures and autogenerated code for DSSETUP, LSA, SAMR and NETLOGON. + Started migration of client and server DCE/RPC code to IDL based structures and autogenerated code for NTSSVC, SVCCTL and EVENTLOG. + Use IDL and autogenerated code for samlogoncache and Kerberos PAC handling. + Add remote join/unjoin server-side implementation. + Import the Linux red-black tree implementation. + Support for storing xattrs in tdb files. + Support for storing alternate data streams in xattrs. + Implement a generic in-memory cache based on rb-trees. + Speed up the smbclient "get" command. + Add the aio_fork module. + Modified libsmbclient API for more easily maintaining ABI compatibility while adding new features to libsmbclient. + Refactor Winbind internal parent-child interface tables to achieve better unit testing support. + Networking fixes to the libreplace library. + Add support for DNS Service Discovery. Based on work from Rishi Srivatsavai . + Don't restart winbind if a corrupted tdb is found during initialization. + Add share parameter "administrative share". + Improve error messages of net subcommands. + Add 'net rap file user'. + Change LDAP search filter to find machine accounts which are not located in the user suffix. + Remove smbmount. + BUG 5073: Allow "delete readonly = yes" to correctly override deletion of a file. + Register the smb service with mDNS if mDNS is supported. + Add smbclient support for basic mDNS browsing. + Fix padding between Winbind 32bit/64bit client library in the request/ response structures. + Added a syncops VFS module for file systems which do not guarantee meta-data operations are immediately committed to disk in stable form. + Additional portability support for building shared libraries. + Get Samba version or capability information from Windows user space. - Add new sub packages libnetapi0, libnetapi-devel, libtalloc1, libtalloc-devel, libtdb0, libtdb-devel, libwbclient0, libwbclient-devel.- Fix build with glibc 2.8.- Added baselibs.conf file to build xxbit packages for multilib support for post 10.3 systems.- Only cache password policy results that worked, otherwise we cannot login until the cache expires even if a connection to a DC has been restored; [bnc#373552].- Remove dir /usr/share/omc/svcinfo.d as it is provided now by filesystem.- Prevent tdb lock call getting interrupted by sig alarm; [bnc#364200].- Update to 3.0.28a. + Failure to join Windows 2008 domains. + Windows Vista (including SP1 RC) interop issues.- Rename the libsmbclient package to libsmbclient0 to follow the shared library packaging policy and remove provides libsmbclient3 for post 10.3 systems.- Add variable to define if a share should be an administrative share; [bnc#358841].- Fix patch errors with dcerpc and idmap_global; [bnc#280452].- Fix safe_strcpy error caused by duplicate domain name fix; [bnc#356025].- Fix two memleaks if num_validated_vuids exceeds its maximum; [bnc#349581].- Fix ACL inheritance; [bnc#351570].- Fix a gcc 4.3 buffer overflow warning.- Remove duplicate domain name prepend when user SID is in winbindd cache; [#336854].- Prevent winbindd from segfaulting due to corrupted cache tdb on flushing caches; [#340332].- Fix kerberos authentication with Vista; [#350032].- Update to 3.0.28. + Fix send_mailslot overflow: CVE-2007-6015; [#343702].- Additional cases and problems caused by fix for CVE-2007-4572; [#337823].- Fix send_mailslot overflow: CVE-2007-6015; [#343702].- Added default printing system information to README.vendor; [#113759].- Add missing define of AI_ADDRCONFIG for systems with older glibc versions.- Update to 3.0.27. + Stack buffer overflow in nmbd's logon request processing; CVE-2007-4572; [#326261]. + Remote code execution in Samba's WINS server daemon (nmbd) whe processing name registration followed name query requests; CVE-2007-5398; [#337823].- Change the spec file to get debug packages again.- Additional case for overflow: CVE-2007-4572; [#326261].- Fix process_logon_packet overflow; CVE-2007-4572; [#326261].- Fix reply_netbios_packet vulnerability; CVE-2007-5398; [#337823].- Fix missing getpwent mutex unlock; [#329796], [#331754], [#336854].- Fix the alignment of 32 and 64-bit winbind requests; [#331754].- Add dmapi-devel and xfsprogs-devel to the BuildRequires for post 10.0 systems; [#289599], fate [#302668].- Fix possible segfault in winbind which could be caused by uninitialized variables; [#253862c223].- Use FQDN in KDC DNS lookup; [#295284].- Update to 3.2.0pre1. + Use of IDL generated parsing layer for several DCE/RPC interfaces. + Removal of the 1024 byte limit on pathnames and 256 byte limit on filename components to honor the MAX_PATH setting from the host OS. + Introduction of a registry based configuration system. + Improved CIFS Unix Extensions support. + Experimental support for file serving clusters. + Full support for Windows 2003 cross-forest, transitive trusts and one-way domain trusts + Support for userPrincipalName logons via pam_winbind and NSS lookups. + Support in pam_winbind for logging on using the userPrincipalName. + Expansion of nested domain groups via NSS calls. + Support for Active Directory LDAP Signing policy. + New ldb backend for local group mapping tables + Raised level of security defaults for authentication operations. + Inclusion of an HTLM version of the 3rd edition of "Using Samba" from O'Reilly Publishing. - Update samba-vscan to 0.3.6c-beta5. - Disable dcerpc-funnel and idmap_ad-Global_Catalog as both currently don't apply to Samba 3.2.- Make nss_winbind thread-safe; [#293907, #329796].- Perform KDC lookup using DNS only; [#295284].- Handle smb child crash; [#294895].- Add a global lock inside nss_winbind as workaround; [#293907].- Merge ranged retrieval optimization to winbindd.- Update to 3.0.26a. + Memory leaks in Winbind's IDMap manager. - Update to 3.0.26. + Incorrect primary group assignment for domain users using the rfc2307 or sfu winbind nss info plugin; CVE-2007-4138; [#307623].- Fix two memleaks in idmap_cache.c; bso [#4917]. - Correct failure of libsmbclient against a version of Windows. - Make read_sock return the total number of bytes read instead. - Fix error in enum_dom_groups. - Fix logic error in timeout of blocking lock processing. - Add parameter "directory name cache size". - Fix use of pwrite in tdb code.- Also ensure to initialize ip_srv_site and count_site even if we are not on site; [#230963#c124]. - Use an off site DC if we're not online and talking to the KDC of our domain; [#230963#c106].- Fix a bug where samba writes the wrong default value of max_passwd_expire to an LDAP server; [#298469].- Fix if statements where we still expected cli_connect() to return BOOL.- Update to 3.0.25c. + File sharing with Widows 9x clients. + Winbind running out of file descriptors due to stalled child processes. + MS-DFS inter-operability issues.- Update the cache tdb validation patch which improves the backup handling trying to end up with a useable cache tdb. This applies mostly to the situation that disk space is short; [#256166c82].- Update the cache tdb validation patch to support backup and corrupted file handling; [#256166c77].- Fix a bug that causes smbd to 'hang' intermittently; [#289599].- Fix event based krb5 ticket refreshing in winbindd.- Limit the LDAP expression in lookup_usergroups_member() to security groups; [253862c209].- Don't reset the num_names counter in lookup_groupmem(); [253862c198].- Make the days before the password expiry warning appears configurable in pam_winbind.conf; [#287871].- Don't link shared libraries of vscan with -pie.- Increase LOOKUP_SIDS_HUNK_SIZE for rpccli_lsa_lookup_sids_all() from 1000 to 20480; [#253862c175].- Update to 3.0.25b. + Offline caching of files with Windows XP/Vista clients. + Improper cleanup of expired or invalid byte range locks on files. + Crashes is idmap_ldap and idmap_rid.- Fix reply when no dfs share is configured. - Fix the DFS code to work with Vista clients; [#286937].- Migrate old if-up/down scripts to new names on update; [#283706, #285187].- Introduced prefix numbering of if-up/down scripts that they get executed in the right order; [#283706, #285187].- Restart nscd on winbind update to load the new libnss_winbind.so.2 library. This will not resolve every problem with nss modules; [#174589c88].- Fix winbind segfaults with idmap_rid; bso [#4624].- Add missed 'c' character to the list of valid ones in escape_shell_string(); [#273611].- Let lookup_groupmem() only resolve not yet cached SIDs; [#253862c106].- Remove superfluous requires to samba from the devel package.- Ensure the returned structure size from _samr_query_dispinfo() is smaller than the total size; [#203833].- Remove 'unset CONFIGURE_OPTIONS' in front of the configure call to vscan. - Install header files with 0644 instead of 0755 permissions. - Enable build of the python package.- Branch a samba-devel package for post 10.2 systems. - Install .a library files with 0644 instead of 0755 permissions.- Update to 3.0.25a. + Missing supplementary Unix group membership when using "force·group". + Premature expiration of domain user passwords when using a·Samba domain controller. + Failure to open the Windows object picker against a server configured to use "security = domain". + Authentication failures when using security = server.- Add %dir /usr/share/samba to the client package. - Remove samba-classic{,-client}, samba-ldap{,-client}, sambaxp{,-client}, and smbclnt from Provides and Obsoletes of the main or client package.- Add /sbin/ldconfig to %post and %postun of libsmbsharemode.- Update samba-vscan to 0.3.6c-beta4.- In some cases PRS_ALLOC_MEM was called with zero count; [#273613]; bso [#4637].- Enhance the patch to the ads version of lookup_groupmem(); [#253862c89].- Don't use current_user to prep the security ctx in change_to_user(); [#273613].- Prevent winbindd segfaulting due to corrupted cache tdb; [#256166].- Use WORKGROUP instead of TUX-NET as default workgroup setting in smb.conf.- No longer check in the pre package scripts if swat or winbindd of version 2.2 are updated; [#273160].- Update to 3.0.25. + Significant improvements in the winbind off-line logon support. + Support for secure DDNS updates as part of the 'net ads join'·process. + Rewritten IdMap interface which allows for TTL based caching and·per domain backends. + New plug-in interface for the "winbind nss info" parameter. + New file change notify subsystem which is able to make use of·inotify on Linux. + Support for passing Windows security descriptors to a VFS·plug-in allowing for multiple Unix ACL implements to running side·by side on the Same server. + Improved compatibility with Windows Vista clients including·improved read performance with Linux servers. + Man pages for IdMap and VFS plug-ins. + Security Fixes CVE-2007-2444, CVE-2007-2446, and CVE-2007-2447. - Disable build of the python package.- Fix heap overflows to prevent remote code execution; CVE-2007-2446; [#273613]. - Fix remote command injection vulnerability; CVE-2007-2447; [#273611].- Remove obsolete samba-pdb package and required packages from BuildRequires for post 10.2 systems.- Remove X-UnitedLinux- prefix from init scripts for post 9.0 systems.- Remove requires on release from devel packages.- Reduces the number of queries made to the DC in the ads version of lookup_groupmem(); [#253862].- Allow winbindd to take local shortcut on secondary DCs in case dce funnel directory is set; [#266853].- Really remove Should-Start smb in smbfs init script; [#242918].- Disable 'msdfs root' by default again; [#268004].- Build libsmbsharemodes and create libsmbsharemodes and corresponding devel package; [#264623].- Let idmap_ad search in the Global Catalog in case dce funnel directory is set; [#266049].- Allow share names with a lengths greater than 32 chars; bso [#4512].- Check the euid and call become_root() to get write access to dump a core.- Add pwdutils BuildRequires for post 10.2 systems.- Do not restart winbindd under any if-up circumstances; [#227942].- Replace unneeded become_root_uid_only() by refactored become_root(); CVE-2007-2444; [#262090].- Add repository version and branch to the spec file via build-source-timestamp mechanism.- Allow applications to set the share mode while opening a file using libsmbclient; bso [#3684]; [#203737].- Fix for fd leak on error path in winbindd; bso [#3204], [#258737].- Add gdbm-devel BuildRequires for post 10.2 systems.- Remove setlocale(LC_ALL, "C") calls; bso [#2926], [#247728].- Fix segfault and memleak in wb_lookup_rids(); bso [#4434].- Fixes a known bottleneck under very high load situations; [#247984].- Avoid passdb builtin group membership calls in the DCERPC funnel patch; [#248556].- Allow pre 3.0.23 multi passdb backend configurations to work with post 3.0.22 by using the first backend only; [#245167].- Prevent nscd crash in NSS winbind initgroups(); [#237719]. - Fix pam_winbind cached login for samba/NT4 domains; bso [#4225]. - Various pam_winbind fixes; bso [#4094, #4288]. - Fix DCERPC funnel patch; [#245278]. - Fix vista and share level security. - Fix vista variable expansion; bso [#4093]. - Fix vista DFS support; bso [#4356]. - Fix vista backup tool; bso [#4361]. - Fix vista deletion on shares; bso [#4188]. - Fix vista spoolss problems.- Fix crash bug in rpc_pipe_bind(); [#244892].- Enable DCERPC funnel patch.- Fix accumulation of expired LDAP connections when winbind in ads mode; bso [#4009].- Fix all lp_dce_funnel_directory() callers; [#242833].- Disable broken DCERPC funnel patch; [#242833].- Update to 3.0.24. + Potential Denial of Service bug in smbd; CVE-2007-0452; [#240265].- Fix logic error in the deferred open code; CVE-2007-0452; [#240265].- Avoid winbind event handler for internal domains.- Fix smbcontrol winbind offline; [#223418]. - Fail on offline pwd change attempts; [#223501]. - Register check_dom_handler when coming from offline mode. - Fix pam_winbind passwd changes in online mode. - Call set_domain_online in init_domain_list(). - Winbind cleanup after failure and fix crash bug. - Don't register check domain handler for all trusts. - Add separate logfile for dc-connect wb child. - Only write custom krb5 conf for own domain. - Move check domain handler to fork_domain_child.- Fix pam_winbind text string typo; [#238496]. - Support sites without DCs (automatic site coverage); [#219793]. - Fix invalid krb5 cred cache deletion; [#227782]. - Fix invalid warning in the PAM session close; - Fix DC queries for all DCs; [#230963]. - Fix sitename usage depending on realm; [#195354].- Add DCERPC funnel patch; fate [#300768].- Fix pam password change with w2k DCs; [#237281].- Check from the init script for SAMBA__ENV variable expected to be set in /etc/sysconfig/samba to export a particular environment variable before starting a daemon. See section 'Setup a particular environment for a Samba daemon' from the README file how this feature is to use.- Remove %config tag from /usr/share/omc/svcinfo.d/*.xml files.- Fix pam_winbind grace offline logins; [#223501]. - Fix password expiry message; [#231583].- Move XML service description documents; fate [#301712].- Disable smbmnt, smbmount, and smbumount for systems newer than 10.1.- Add XML service description documents; fate [#301712].- Move tdb utils to the client package.- Fix crash caused by deleting a message dispatch handler from inside the handler itself; [#221709].- Fix delays in winbindd access when on a non-home network; [#222595].- Fix client-side smb signing; [#222951]. - Fix imcomplete merge for firefox NTLM handling; [#198255].- Add IA64 and x64 printer drivers directory.- Update to 3.0.23d. + Stability fixes for winbindd.- Fix ldapsmb group and unicode issues; [#143417, #216606]. - Fix net ads account management; [#217046]. - Fix libnscd usage in passdb; [#217363]. - Add the "mega patch" + Add site support for winbind; [#195354], fate [#300909]. + Add site support for net; [#211281], fate [#300909]. + Fix winbind krb5 ticket handling from offline; [#178028]. + Fix "net ads leave"; [#196771]. + Fix winbind username case handling; [#184902]. + Fix winbind name canonicalisation; [#210174]. + Fix winbind online/offline handling; [#196859]. + Add NTLM cached credential handling for firefox; [#198255], fate [#300973]. + Fix winbind groupmembership handling; [#211324]. + Fix winbind site-support handling on reconnect; [#195354]. + Fix winbind child initialization and online/offline handling; [#196859]. + Fix winbind cached credential storage; [#185053]. + Fix winbind long login delays; [#184450]. + Fix winbind crash for new AD user; [#208454].- Fix pam_winbind overriding syslog settings; [#201756]. - Fix profilepath pam_set_data for other PAM modules; [#215707].- Fix timeout handling for winbindd (samr, netlogon). - Fix gencache access; [#209409, #211281]. - Fix libsmbclient accessing NetApp; bso [#4018]. - Fix error handling in ads printer code; [#209409]. - Fix passwd pam segfault; [#211719]. - Fix crash in winbind async child. - Fix winbind failure mode for trusted domains.- Add realm to username if missing in net ads join; [#211706].- Move the LOCKDIR to the client sub package.- Activate the libaddns.- Add version of the package subversion to Samba vendor version suffix.- Update to 3.0.23c. + Authentication failures in pam_winbind when the AD domain policy is set to not expire passwords. + Authorization failures when using smb.conf options such as "valid users" with the smbpasswd passdb backend.- Fix time value reporting in libsmbclient; [#195285].- Remove update-messages.- Store and restore NT hashes as string compatible values; [#185053].- Added winbindd null sid fix; [#185053].- Update to 3.0.23b. + Ambiguity with unqualified names in smb.conf parameters such as "force user" and "valid users". + Errors in 'net ads join' caused by bad IP address in the list of domain controllers. + SMB signing errors in the client and server code. + Domain join failures when using smbpasswd on a Samba PDC.- Fix from Alison Winters of SGI to build even if make_vscan is 0.- Update to 3.0.23a. + Failure to strip the domain name from groups when 'winbind use default domain = yes' + Bad token creation of local users on member servers not running winbindd. + Failure to add users or groups to ACLs using the Windows object picker. + Failure in file serving code when 'kernel oplocks = yes'. + New "createupn" option to "net ads join" + Rewritten Kerberos keytab generation when 'use kerberos keytab = yes'- Replace vendor-files/tools/dlopen.sh by test_pam_modules make rule.- Fix pam config file parsing in pam_winbind; bso [#3916].- Update to 3.0.23. + Improved 'make test' + New offline mode in winbindd. + New Kerberos support for pam_winbind.so. + New handling of unmapped users and groups. + New non-root share management tools. + Improved support for local and BUILTIN groups.- Prevent potential crash in winbindd's credential cache handling; [#184450].- Fix memory exhaustion DoS; CVE-2006-3403; [#190468].- Fix the munlock call, samba.org svn rev r16755 from Volker./bin/sh/bin/shbuild18 12845827913.4.3-3.6.13.4.3-3.6.1libnetapi.so.0/usr/lib64/-fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -gobs://build.opensuse.org/openSUSE:11.2:Update:Test/standard/14f083bca426632767ace98c969f1b1f-sambacpiolzma2x86_64-suse-linux2iёMY{87?p]"k%nd響nRIӛO_L =Ӕѿ,iOTj~Lrs_!<돺>PGjuWNJ܉)! ONR̕ܕի|mTaEU}MiayTx8@3%4^/yE79sI׭_Nwa"h Vk>sZ]}K+]J -X(FM%?hLa:͇FYmʳ򨅹|XrO4M|mvt {|!Ԛ\\GMΙ?((`%n< 8'܇bQG'˦$/ZhP-({I?S7=<׿@aRKup+RK+㕤&q~ hK"^b$1>:_K"uCj P:{QC;A28V=`nթ"Q1y4nm8 +6 UYA]R*hpFA0 %#jkka,^@j߉,54B_qCQa ,C3s|ctM GxZCRk/˯oTm4%AB)4IkoԾc,5sV= n+Sm0Wc(=˜BюhV2O\ P|Qw):p,,T `cԔfɠnxO܍:f)o 4M Ci `&imɃz7978sVƆ娿C}p>A:e|Z'vR:y5&DR|*:#k3IZ9rQG1Ln1 Z=F%roo]c}sGhUBu z3;.$0@pb#KG?ccTSX~-Rj5-6>)x)>|5XT% -TTria*:cq@5?US ΀?2MMBXKq!j uRr^ ݂R9S>WvY{!ϲ=w W(7CK7y+Gy#^[ʿڶ^a3crZ4 6 ;݈;Z+ygro$Ke.Wkx˷P˱7JR'ލ*rZ- z*L߲PmZ6C3D TKH\^ٳ,9;Ȝ|~rޒ!K>ʠKqa!aA%G~[tvMGn$ 4t lNBAԸgRRvUQAVf2hLX%2..mi9z a4~>(Tm d*G7HP4N;-mTHA܏d7# jje0WZi=?m0ۉ-B"eN `f:(N J}s#^3 RUs ,BNBۃ/=ϜLU٠~X#]1_)/44y {šy£v#F  `5MMX7JjUN o`BM%dK˹~j\/Y@b'һŠ<,__SCt-KTޛחR ^W :53"p<N(uZd; sN!-h6c>P}C!~ ~kEfR5@~.a;%(w$6& ĉ@}+EI p.>c PSwSg'ʀ&#ȕѧ'H2La$j#]-mc/ڿS|Qg.Nb1Mez@ơjRګӢt. ~cR4la9]7. 8^"#Ǫ%> \>q=ib;h^5A+\ٺ\Z}5ܯ)>.tq<,kv`*?ſvVW%I6x}:puŌI=?+"-ܽ3u9z ځȇxuYwN+0hXS[dڱ^\E<6(ϲYv-U·wLڌa)luM|G[җdW}_IoՈSY+Mn'[PB1V*Y(=}hc^Zᰡ{,$Z R3n&r:*^=vnɱ; ͸ۥ+C6 }gUA܂ ٦[;KhƌQoy=Iy ]VZ"!y}ZގJOl[P&6y:B#Shr.sF.oZ(8>I?AͰ͈#v >.!`X <`աah?SȨ `pxׇY7&{ӂc K#VŊY9a lGrsO)?Zi=DL`70՝qK讅ba$rW< bXKwmaQˮZ%/.BF%(}';Ie90DF|A=AqbOB*Nw a'uto,`C w'϶Hk61+A?u^l겹vN&=~x9-lrmfo5x4O٭xQU% viw*QS;UMCLr/zf# {sn{&HȻX5SΑlԼmQ] ǐ}@j};Q AeL3٪֯'o֜^H$#XүOtbMb^mG| Kϙ3{&|@LA]MDDȆB֋ Ḣg뛃FV"l|qCUI+D)֩I.Ng*qyFc}d3#1{"}A \w6I%^qP 3BQ ,נըvS!ijExLcp'eAB1Sm{:f,iF669n5b$p¸&"rXv#xh $5 >L?ӣ-R B@oEXIR F};p )T~ӸJPh_zqydć/M ߂QfdSU `Xj֫GOpBd>ТΎdgH<WsIWXFwǖ,`dLݯpYr*|TP: ќ_ j(pl8aAgu&9$/Dڟ<틋N7Wi} wA}` n7G/F7VǖՌKrc1kc擬A)opm{:j9w0vc/)Ø+H,_Gu{ij¬>ԹD̏.='XwnMfMٰ0GI"]~Bd[UNަ9 3> /@>^AA&~  zaD_``J5šu:-[MKX룙"F27Lx0bd[@ 4iie’Z5<I- נ ;s; кAzo1-NIGFr3?-̇&`|Hj8v6W^в+,w*8#Ȟ?su `a%y C[HŇRjQac[Ҽnd]bǢ[17^yz J̖znt>l@ ZtD̽uulUwtLu^x]kkUŃF=N ޓ-c})ev0RD'f $<$K$s\_t?,_ ,ND֋ش]s:5p֝E痍= ulphTp/KaN+A~;\ (E=;Vy􀟲i P㐼Q)>,\|9Ply87c4ncvdJr}dѨog;*' I&K,+;?Cb *YԤ 8;*ԂW$DUo랁>-q}0S;)=beR; q)ڕ+>5TA0ILI楯vɥ}ahGwREݑ|FgOq_YQ?)f4rEL6 zp] !Ghfm' SrU4P~쩢%WQ01,a2peMɡ`b@ܲ;1E7H~)Ft9㯥vWMM͜L2[+8*`axJ_[kwsHX>@d )BsX{bԔhtֈ#י<_ k{GhǩkޛW (y)+ ˂SE,MGpnI}h=҃B&4qVerCTuP782 Rt,8pP!a=~-\Xcwo SP\_Jj2.~SQ X(m Hv/㲵xY}ijrW(WMb³'+2+۶5ZQ~'%,+(fK\k2ش-n;r 86\65mTL$n3">Z3MKe̢ o ( ixlɔB{[m>?^-pM:ỉ 5OWYE62d7US= D OKHDʸQ;|6V>DmLH762=6% xƹp$!{b8cX0]>uU]ʝV1,IfvwE9Uba٤^A:Yїcn@n[+O4q4j ~̴̕Bȶ 3kAjHIupD?smCkP;3U]W d/vO:wA>S DvS%)Y ^m]Ho:ӽ !?j9p,*Qө9nW_پii&@Yk y*_.gi9H=5/&WV~690Ao4ft怚Z'З/eR(DۅYʢ -YZa1땈ntF8f@+!1p^VKQ:u\'ب@fVMQo,u<Kj"`fOè#(_2gWBu/A' m$0넌bػM_FJHӚ.K7[&ݯԇ3 .ngg'3b9%yk1z).-|Pq_ij[bjW<8k˧0mwl~i;~.vy·RcR|FǔsL ߟIvAηh#M1Uta!ѾZCמ.dm%/W 0II@oA^Nfud 87=ve%vFw l=EKq !9!I9:,O=\j5d$Ew}]i(| hQ=-#M oD]^U5 ަԃɼ+G,YPCӎ3PZ&fq)>*FXCȽ2K3i/ܕ {OtG_c)ʁ.)jyg_|u ZTZz|A}Ξ/Kʺ+9G%v`M}"띨qv?ӕ5-C&TԧJԜ oV@Y_SfPVxH9 bD0":7xG,w4z^J&BYPH| =H}rO4-S6-Wn?N%*ȟN_r &{p̚=sèWp:c9jtsD,W[,A/2GuGL[M7GY *WV.ĉ[s;},@n 1l~ 3;Zc@&t ~nz?hswH h.>.I_6(.a#)e^y iV`v ?ڞc֥Yp>sfJخڈ咠Q Rɷ B 5xZ|ޑǠD1 -^j_#DiMNYGzUE2uwO ?03cr&э~A >[k3(LtɁ 9?st$s4ygYz005FE0=\1-qTkAvv a. ~i_|ю drP/Zd^шv PqSh-pjdUSרHE'ȹ⫳fO Rn>6OxV9w=hFגhρYx~ x<)^>.6!iś>'@+y}bŊEq$,A L{)9Ůs۪iop, yB;hϸrfFT 0+9\Cv6W]x^|9*Զr (SJdh ~.9àT>w z6D#vEd4kQɢOZ]%(ajgA[zwU;r1]4Gjw^HA'FzF˲N]ٽqr On'-(}ABl`n!: A:]6tAaO  GuV>ym ˻v00lI&x5/Bn=do #lcJEż#mNop"zd[<5%ͦl4f^K%~b"g9R"˽5K Ma6DRVṥ^3+Q`P7 sQGLX^F< [?1l*+<"їŕzB`OH/5LY Rq͘{K(4lM!>j;@4Fu=.4\jة\36Wal_qQr60OMp/"40nCܿ~]t}H|H0oC2+vtbryo95dܯ8Jyɽ @!e~`^~#UlN>Ip<%;ﱺˍV@9ڲrE>:ڈIyU}яϒ7GkuOH/#o*`ۇW+*邑x)s/Uyl.ዋpX]%!̀ 4,LgžǵKzs"Q2/ {EaQ1Iy]΋=G,f tw>eL݃Na-zZStD-eMZb((VhN+`~L0Ŷ2CӱCײ]BE`Ƽ$΁(:?]2m Ao^Իr}@p%Xeiy섳 U8Oj Mc{p~].Mel }W Lt5遰{^qz> p+߰ gn%d5\ ߁N2{2Z欀w BI=rOH>#D%Ҿ7wE(%so9-;̫u"Ly/Y0U#(ڥ+4YpnH`FOH{6Mx=f y«^)L,(QwGKCuF5&ו4ˎF"qLGՅW6v1p>V`-hQY^a7"/sKow&,Vn^G@СJ.|L!l3-c<5;ȶ:G~$wH p 2`ﺯ\1 ɂc.Hl]IiB\|WsӷW:.εPZ澸͜rh|'4Cjy1.֙.˼VwБiwQ_H2T2sEϧk%\L>u ml=i ?U+_nZy)O~t8~6[QfDBnSp3 z%-E#B,Or*u` &yB@K?6vvylHA*3ˡT2XUw ZfeEo؎C$RTv_šuCplLeu{xM k.:8Ǎ3K؆zG:|H=Ԡ=@fHc@TRPA@ߛ̾3L p"< t >@6 *hLA@~(m]X&K|9}&mQ1i_oJk-huM6 0AfyD:8.=q_v(Kt=fM1\*H^rLx Z{< = L/?Talw{c: 3F<1ob~UA q?wc+uI{1bءGz" %#&(:*-XZDA Kba!E PNQe2Iİ8xwu.mWVMZGZjku] ~:0q`*CC*ѲҠq)-/-WU N*w4w@)v 9gqFu—5% Q5&d> tk4Bq3 c`dɘW> 9,L rU'qjAز##o4!~蠿N-MXC%ѻ"܆]N!NTbnߵia>+b#= eƖr B[`X8B!5S%n6AW`/vokG\#%uЫZ.aԿT`2fȏa%DjNVqARnY^Y6^w]R(k_\V2ʃchlp=xj}JrE:ݱ4ʔZOc08Xu*#)v5TasCK/zR(AV۳%k,F򹯇 ٛo38 %vx*0C/q\ܚ7s]5z00nㄩ.kpEt>q2z7u8/>>-?2xg8RMѤ }(FDYx&&lq " U`$ܜi੎JJ.cΏ?Dؾzϼ&Z.BӿD56nANM4K!I x [|ԋ` kϋ3syOaeJ%lBU3=ps4ßCpy!3 [ic |pܧd1s174J@,1jXAfr`8`@$! OkΊi t%_ö%z}ݧrxg  5`yT",U68Q|H3ѡX9al É .=pcaFü.kЕ_Vu"T=}M=ۿT/Wъ 8G>&rx _G~(b+n'Sx.UP#TT:ۮK <0'{D9/ Hdu[p.a]$w48oS'N}&Ni} 4KFꥮZأ@4S&}qa̖V (Bl @PUbH#cD n-G4])E3уSK|9rγF8gylra# 4o;n|(dfK~Fe%@q{uk@Z݇߶F&(0]]ȧZzX1gW+q"C]yw ݠjqLGP\Rc o(CGmw=D @-9ۄ[c)h Kl{]/W>,EBmb)ڨpԼty]AT74J0:J\X:PW2dBsδ,r /~.Z*+HweԽN;'f֐9ri~ߤo2+s:kN~/i&#K-̾ JJSgb@I1ѯrKp>ۏmXIdL@(x\z > D^c ] "VɊ§c/6hHL$nF'pXrtsXPANxA9%oT+}m-t$`SBvȵa-;S%ەHRsZKXA+^5^["/ bl&w@e@mz8"}f.H|٦(U0xh%zAXr2$=^9 1 "H7[X:E>v_hr.zW6 rp<@l3:޼Xl0U,ǭ AǬWF^7u~Eph~a-@iLā[2'ag3BXݼ&`)M6{iK:51fkcpJNiNb/}X}XJET(g6zNN1>P7q2/ .$P˳^Ls0ҍWVt;K~фKW\֎^FZ;JUaL9`T6fK-( F4io`5XƑm ">uM &."DWZVrzY:WTȖ,߰Xe&{3SK};NSMCStMYM/bv[JK{z}B7, PӾ͔pn]#[#,ez #EOo}Q]7ɭXV<bN*hBՅeݶنmf(=r=7CjN, s-EJp_):Einj"k+X'uثQY &KySDxK<6 3r>nBb`>Dі W"j~ں x)a#&% ;Ք.beVe{Zo7Qatq;N`8V$wf%;B:NY(.?ʕԼq W~cr7v vCe[҇X4搢ڸpr$RNQLJB’C9$&V66ZCXP:+v-i~r}td6> MOaof 3!Ee3e0>A=N@I-_"kܥ7UJCs0uY>\ƅ~#~1cOq@◈ꞷ*b2}]}Sҏ sH3aFqhm 7UZϫ ~ ?t4 ֛@gRx ~AE'S' бSbeI [o<I$un=91Y4+E0\Rf9uA}G3P[j< iQÓ>K3R/e|ph/P$q*_2w #Y ]{PKmmRsQDK/)6v^6Y ^p{'+1hW!zeaQyr3&E9~uz򌈩IMO \T,})ܴ̓9s"z!$I^NNSӂH k),@f([gW03ĔEOcE{6P3ջp"Dps5(Sm\ ޑ[ҍ$IrYtk<'Q86%h52o"ABzREdGdMyB5!LN{'Yj"HÎo;1hcUTJUD;N7;yD  &;oփG> +g(r-:YLT0! ෸o3R ջTk1KFML.I]g'Q>=;}(Ih!jE;U7p&ႬjtxC(f%٫`A乲a miEY툈7Li9 Üy\TKu@GYr%eGrSI(ߋ=}GA|`Ձs(}aCv)#;+.@fB+X07ܱԁJRo V~IVn>H(ЫtsT#$۷!W M!ɺ|- !d ZkϞq4]$ ske 5f~\K ԗ;'/pU&I|z`k7EX8QoEC [U4wb3xJa[SUuSdQ,P1Li[JzਸF,͝6ߑ%y@;m jAD7:6$-1HFeޙ<9F=U:Ѭ_vm.P Ӗ wPq"l Uu1K, alҌ-X! ߡkAD m:w]tO$q+Q۔y HO"\?2Pڼ%TF>wA޾,VӖYZG'i HbY5dl-LQ>Df;~RӅML{B#ōys n\? S)NÃ1 /f&OTƴB${Mu=^Q+s*eCЭxA)? 9bw) 6KU =<0\ hulVTixt|y r`Ϳru@ahw|;2IՉwt3 Ẩw@#۵ت/g 훘VN iJ`!~PŜ>Iҿx8Q+C$0gPF4rn`Cs;35ӿ"|o([T<0.Qo\tM\kP 6ʆkr\аFgwW,oY6V+`䊮X*#mp(>U m_!T>nVxS_)8_/8c>pNCUN?{ґ0pT-JHXndÉr0.> ų|܇4gsB>y;L-[ڽ^V˲q3V\HH:/r觫gs4O0E#*K9P-u[\4MI\O(MYPۄ8z oO};ѡ4egqۗ]Vk:cɷMVXpoUg݉iAJ|,SZ|SMtn=5(CStԟv0V!RyòV}M<+f$[{- 6ˀ1\k! eoQS+k*)P} (Pr .D(, \Ԍϯ̮!:H*Vxl>g^gTAzຒa脄KdW$tCDtG ~!mQ԰zbR/+HPy\լ8roƣP2sGo b2`Ḵq3#hPD iͱ/|\": tRM,Z/<;gB-5-=Ϭx 'm ,uVKtfKW1 5O//Nr.Bshu'k'Kv ?41 +rTml)8-JXY^,fQQ f^R3YNQE[M;)i` _-3*:S:1݇ɗ& aob*Ot1pD:gs-s#N`K, 5 Y-5lV7O_:vFMzw +Ok~-TSԊUq\ۢnW(.0yڥwD TSd1[lSo/zvM\rw.TkHwcJ|\{B0T*6@7+v z2w  u J_ MtAJ8lB/ӊ mʄTYi$}_ eȓUЈũ&H.+1^ -45gAo=jΝRHZ%pō:m^HO`S!{]`k CˈcQ0l?@7 ʗ׎am0E%N"t3fpE)Eň6Rlː;k4Af'd BJ/ ?U|-M T9CGf [>A9<>#K7.nVIO&8nC|[1Ŗr$(نtqn=DTM>+-)"#:dO]Ǚӫ['y, 3&eT(w)izj'0Gƿ}1&9Tu:LHn~jJ#Hv:XM`)Hm X=;EsFWratY*, = Gc:m|NE't|#1 mvw;DԷQB\Aa&g\jyeaQ6p*AwNl۲ |x9J}b*Y73t5+5H3^%sY044֊M^kpCHV^yn4ygV"ۮ6~M1bT}}҆ΘG(r"kL3>*" +(m~TPqA=i} iRg%H|f" !Oaˡ0H`7}/qQHAL7+xף#)cMcě "HPh u*3CF>\*af{\2Y|[LY##@&BI+ʰLZ -.(hVT w9V*. y|Ba;\wNDi# o5~Wj6#h;#+H\޻=C Op$DW:I5 ~wؗnQ0Q QDN\vҊ1b L+vt %(-K˄I0pycRh)|^UCzHew_Ő'qW. ND}-,˻ڒE*6xV=HK =B\oǵ^9{6(^֯kغţVh:.c875D+IͰ1MmGl(*KU=w^f0=`sRC¬Fd.+1F/(p'>X"$P%&SBxfqtӜ~kܠ x \[;&L*/夦gzL1?s, Tɝ)v:v)%vԒ@ɛwfLȂ*ͺu]l"c[z .VİmiՐ jջŔkʫ_>I9 8R҉o?㝦_AaT:6Cl3,rϽs~`rv3S:FyEr r?rko*?NzSzDJg#FF?(&_w[p\RD5d¸^=0ӦBF;[VZJ~#~k׀z."R8tw!q eӡ%Q``mcL) M^EZYbf0z;DF'A bVZ^)sLǮ_ī?"@wjZ4K!X(,UQc9RB '{i?nNdOsO ,ϋY"!o,Bݹ#ؖ_riƸhE3j36~<qwB95ȷ64ͮAj'Mon͡"WTdb}q /ٺ~N]Ӟ'?vlƒPvo᪐*w!G-QHY4Yjzc3ԣO$C櫺wYuUMU[q}oI?]qyTH.nznW UN`T:+%w^y=CLxd{rSl(N}pjR[*\yZFW i>^m"TTcU7(-0L5l(EO)vI~uZw1XiPXg|eLBpu(Ӹ LV]c#Z@~bĊ9Z4S)Gx4v ݛ}bP޳w}i=ge +zp Z-"yV9#62HI?NfJ<d؅I$M7942T+ `RN Q(&T p}܊;"kk0 ۛ9*/յ7z-%aب %w)@Jt)gzcڰ1Y_"3nj& JzBg>R?!(Ig5xfb wj[H^tD$/Thw9^FMi;J1 k=a:K-wU;ԺJnzX/GI/iAe%1HmO[ly094f""bH!3Bb\)1E?Z!рKN.LXQ+DN+^Pپ'֋ `)CK'0|BW$lyjR|{gYot+"M'K/=$9Z$m4 #:z߲Š1DCUSIm\* QA{y 1j|Y|T+nt\>FU5_%4mZDHl?FJd2l?~B)K'E",t۸βg/0>;\[=ѺZ5!NJDgYmP'B˳&r!IZ/dgٙ1jWۋE+?0 c _a[8<ƍxn\Î}1sAr*u_H%&H?$wΧv֙N| bdJ)D&{-@Y{]! Î<;-"?A*4n֞^nEC)AF7܊<5f>?"s4z2gja(Fk9(j˧' Bg.EBėKvz(x:oenK8Gu_O5,<`_-┴WeħX(3ρieq"֥a*YKOb= hD..xJ$緥߁Vy5.tlysr9VQ?nB W{$'KiA5ӝĐn Q|~/!:|F$yk]ĺϟBֱstti* g+{ WH MIR>L>C[h@Mw,k+RͤJ&-ϟ(B9 KG6=+wkJ*|rNNdv\6MKoJ.*=%A:Ɖy\Bt_Zߨ?2~#J}Yj uj8Lf$' l8*>hE|a, U|?_ʢƋy!¡Vk f[X+%L9RiXhEZTF` cV7 6h )>rn2 _J5ɲv#n OecG쐉31IDi$CřDWd#=ԯ Ȩ] &K}]ö3]6fXY@hdT3( Oz`E~u|7D6{9sՐ.C>@)(9).D6&"D$5w| -ЧՂK[r WdmឡL@ST:]ƧOO5${Z{+E#,r ە߶LQo}hqs MNnD[T?R˸*)' m ]%Et_b2]̏/+hB\|~M`]d㰓X|&]&RzԲ {OWü5Wv-=-yz8sv.k˫#5@EvEgBҀ;CǴROH[7  pF&6]"VD?S0WN2D|E^s<X(m]}ևn/Z0,HLROFt$4ˁ[Z l2=aNr̄ˏ[z <`[.|MEQ[[NEu(j 迺V B랉i:qYxVD"޴"ݶ[yƕ㩱 RIw)@6DegagL.Ԯg9׳ن3\Ԟ¼ʎ༐KT,6g?XBFC⑌xHVm G{A_aր 2RW#@N:IKYB;+bNgۨ/yqy 7UiE0{'1_ >rb@+9`b`ll7fE}ܱFpjb'ׯtd_ xͤkοy# 0+vk^uRfQCs!F"K$PqpK9(OUF}L7%ՙK 4 s==:bVu9xM'c7|"'⼎-AtJK=LÍJT^dg |5c)PPSʌkMcDzQ-y_쑇L@~Ҽgtd1aCUmjk +(' Qmuf $'nwd{g{0/WkĦ7U=3Gm鳯Y)=6nHxpvM=-͵>)' x{%NN"!_L_uGiw}V}M`wenk"@yg!uY]eQw:U[8F <ɇpFOVEMCZ*GEB/`|k.`W8C:;ìk\A &]_LAHH foewcXH=婌eX-bH+sNh 0m!ƊCͰ#ec R,(beɕ V01CjK Y*J(4G"kDmG&f^JTٓd>_M"Z_ D5]'hJ ;e)džf5_ciOBo]ka]8 ,y`?C"L*y9 y5j*)c,C$9H~gpƩ?f*P+הm|UY-"@ 9MRYBu' [gtpgelL^ؐ[.^Uq$Cnɡ9;ϭ5V&"̛m_8溼oB~b}olI-1)\|7lNNT:j8I_@!vx6(#ϯ臋IT`zRo^Q#}8]RjPD) A 8|$!Q9 []/|[y(8.5b3. Wh+d|f,K7<7]=uA2MCF~`^T NtS=pTuhnNI-;'  μTF'!Fܝ`- Ot_C*0r0wf$`eEt+k#y;M 4UDp e~깜؎2fpnPǏ@Љ^(9)~RGȯtS >Ȉ_ m/+m vQngqu!UHR{FyI-}9 +n3bky~:.D[x+>[=g!t$%4sos^_ [nor\9W E륩}W4~ 3Nt$R74H-Sxf-u2H)D!vDbF̀ Yb(榐#.{"zOi57CMS-`akh+Q'ہbUfbj\~r jmR é[EeU+s|MP{ 0aY[ِhgG`풦9'wijf%ąlB$u:LߍdzQS;Ӥ;_8-67p/B̦v! XʻQLE_O# KCFdm̬ aV\OO9е2uޏV|ƴc@ݝZ_ C9,㕯Oi/):XFK)?jJ0[ݥ\.Q=KpF^ځh}vB-HTPf1Yqә;[J6.=h`~uGCvD_G~9uץ p"ٖBص61k }^ ڠd•>DYՌ!*>:jIo:{ĕRn5bs3_8Y<D8K1Qe.e4EqL2 ix )xLڥ]YMӺ `>h]~OzL "Mm>Z8^#Ri2\!*SfxKSR3YeB8_fL%/wn$Xt)+X)s JS75Ǒ}-*>%bqoZ }[^Njl ೀ{a«皒u@*#fQ?1$Qj_G\Z}̀9d0}W &hܨMEg-rE#+j~lk nfQT=60EuN&  6B—S=DO?U"$<*.};+:&Ajr~I L7Ηp122N8&cs:ϱvL6r|uIz7 6!k +n: 6}w @'NLQ A|&}UJ&fIL"ctWT#/3/y>^Gy;m2JsPm}|uQՍ<&͠1-&!I;1M4_`,/2Nl^m!qa9Fgcp߽< 1Zf7:Rz _v,KOfl F2F;֜LYӺ,ŻIrًtE_'/OPl5ֱ(K@DmE7 K^m`9"P;-TP1/׋BwƥugU8rjhegҜ$ 358m/WHQ %)W=0Y1S6pu R$ EN;I EYE͗k~lsVY.*c2Rhf]nd.Фגgx)C+OױnHcx[h2X~6EF"rZsQ&i(8% [5+ڀHuu9upgcs6%59h{)Tw^nԙvr?ydxٛa3\$3;{4@O>PHXXŹ|7+{ߘR4|88;/-Xd/a!@Ze괽2o"qHHB\/عJOe| &H OEt5GX%3E"mCFґ>x|1[JM_NO2Sb --;pˋN_"^Ԃ 6{ALj Ka ~ QO," YД&B"Bj"/! W/tpVi?5}o>zw(]Ϲfa/||\!-5Ū1_9|?Bk6TӚ+:yhbA(>csuP˗p|Y7 =)yT)sqnY_7?f<nLBL%;s2OQ ?x ݦz{$v@LCȐ}^K7pK+I.嚣_t,Y2;QhҮF(g -dQ'LM|8(ة5w5&^% =ՒiF6ث^gu8yJQvHcj Y1ihe)Cӂ@s{–j) /#=.sl-(ˏv$ 9\-$q+7KʎF[73P)T5+ͅ7/&T:$My0SƲ -4! 8ÊNMHDѝh2ʅa<^+6D^'d_C۽:=݀)?hM&ْM1F#ɮR+%Lzr)bV0\E3DWE$tIN'Mo"X)S\OhJeyYK?4k (TC^v|#RWt'*0`d 0Y -^pQ bC;Yxyn[(kKר#*o=Z{CMŠnlOBx&DP+ HΗc-[Ru]1Q*#3$qV7,[Ȓv;ZlejZ3(y+$I@8&п)G>ƨH>D)V<:hbJBiiDRXX@')/ f҅P .܍yzg9Z3[~w 1_Ľo)Vs/5(ЀI`>OKf([HL(_h<={n]XgipF%i./ {+#5ޞ_ _J;dF.<ٖs}2GHT3lSߗMXvx4cH\!Ȣ?gk=ZSܬR0ILiYVzt%yχ8aO`Kilg'G?ې=w?aSj⭅_P6'=Ϊ% _6A:r~PK2ITHR"ZEonWO!_xz nS>A8FF{Aqa!ol *^G@9¤[򗆧C2׏~'p^.PJqBGUA+^5ހήe'8QS P@f)NR|2{ cy>IjhDo/h!-vZnB?\atB~̳d!ܢP(9{>//yBfer0SKnu-% F&\F=uk^qiYnI{{W .^IVvMVn)cpGL2WM; IJi윚˭a{Ii e;E !gB+ {V[ lW#̻ v0yoRN rnV5@vJI&5ԩ]<#a#ԉB1)R4S쫣H v`"1E&H C }=~iXR?7ŝe,#T8<w=(4Kc<|Todw`}giP|)/[jmm޵ZHv<0a`oڗ]P֨сIAgRk t>So(p>0_ _B u!GhHc5%u@t"pC7F4KR^Q{GTmWa$2IMEcEyOHRr+Lk~{_Lb_d C:;"%₪<r[IyuXN5 f1b Hq] '!+cRc 81O 5GRG&B%z53'>!2Yn=l%F7~}cيá?ek̄PMaK,PZrqtEQvߔ{,/7 EK+ƵJ,S{r@?a\5I&a*cD\ʬ`)(_3}Y&K)zjL4⁜Ʒs97mFC[~I__CZOs:" i!~"g7k&`7}Ew̙ؤ >zIM:^G~;k1g >Fe-q/`ώ-4oZ弧A#D(e%inHW$3kcjڲ2u"iMnfWix7: c},n5~Bvs06T|l]:sMf`^?V]:x~D䌴!ןRʯQL[OVVG1 T19)Joa΄'A" +Dy:˚KdMȸ#͊H .%TԽ 'gb楲sH<,  (.W'Dƌ섔ﲥ-gRtXP u*cYl:(60)b~ %HɕЌ|S}CˎЖuP_&~C#O/lx-dԗMTd6tdSk:yoxsc"9~ZTN@\R'z~r??I㈞X ƭ!\#khedp B\[G^<Ս:oU@©I?@&廓}$;)OG#c:%:9vͭoIDg#}^>3ή [744J9",G2eϴ5>_y/OJ?U t.T!RJ;@0V' / l boۨ :M攷-%'f?ƧrzĖb#LBiJAWv`̎ߗG,qKѥ0 Ihi7aRw2¢\h+('R8 ^EH$okQ&YfV+̎&J_i6CaZ|#TD$:V:"겪FPF"§ bn^+#gʱ:Yq#)ӕhK;.tV BTCV͇g¶2{3*Or5d&o9c Pc\?7l 3vQJq%zٱLoIznǯxka#?W1IT@B@tGz԰<1[Q?GόA5_z0H = b!3Zd|Y^)G\`*RW٨0ӯ7vi38 $+>V_$ T\sN[/n:c^QQz5PK3fn'񧺬Y?LuȌ!FAn+5S,]7ﵹ^B)L|rѓb4gL%#9/ce(Dcv?Wb:s@htuX2rPh!6l-XoL",}y!s9222 }Q2ҹA+ ڧh?BDcq.nw'BznWD(( gi7):fԐVѦ(v 3vIo|LĢ6=0-e`wÈ)( HQ~=3f{k$&)6ˁ/3s߬UqE 9D9=oߗxRp@Q,QSGy,kYs}NP`ԏf ~ _¹L|mRV~OH<]w} S\,{ q᭑: "###UaDLU&4=H9žs#8jX۳A[Otڣִ0 x!|EtQvMO qe-YNK3. E}h b9)|3L`ポtV޽A[-\NcGwrň!.{,6-~p1_UTunaի K,sy 2M9G;ǭhF"i\5,MrIi5 D`9sPD*(}szk)jh?ٻǗ:*tIidbB)!"z[ 93mU unDblTm= &%l\3ŽĖ$Uͭ:!eEH+`:bz)':E?JKb/ͫ'qMb.3K* 9]'1s.0•T^5ppm)4ŝ+&eb;I Cq>ϴtjѢte䋯$|B k/&sfZV<˴Eh٭ mᙗkS0uc |_Ws&okMg[?~$#/msJuw16Iǿ+@Q<ʈ5),e|~ rRF ~4XDUdnR<+P !ho71} 2h>fz;=R~@8}ゑ9^|~Cմ$n wq28baڸ9֐tj=& Ԕ޳|b0:bWs#ɏn빇c?3c| |g}=a /WRQ-'2 ?e@,"xŬ֜9YOs |jaݑ,۔uFsӄnYcBJG3L s$|tٓMfk_ɠ(q3T9Iŷ^Mf<:A j'dHWHeJSw}#Vv/iә0z6I4Q/drA19D1!0/oE䩟ZKjV,GiӺnd qnI:պo5m:m^!1k &Ko>Zlވr e [UV,r+JqJ*)xkS< 9^jˆrU瞐hO` ' AK`TiAGSӘ8$Mf,/~6,Yc+=G]x1)uD;Ĉ, w{V -Ca\n_V>]R}w"?Kf匘Pw [,)닢2z^qQP;OQWAWzQ 瘅ӗ_bitK$GA):ox)B.-c+9n8-|BעLi zv&E :pǰD&vo 9 8p |z5N^SgdJ.~\߶ }XsZvq8m6f'Pz6"  -'ˎflɟ`J Ԁ}2ܷQ;ts%mBB7'KOcw?J`+- pb#,hhy$eLsG3܊1=IzݯA0 솤VEqE,X@ Ł,l,(V2pZh"u? bfLlh{ȼHF:ikPa{fq6qĺEz?OS_0Qb%lU -ZɹaT,ME*hPhazhbDsPy9(Ƴ-xѐ:9M認߉J؍᭽빐#FRnc1N*is`kD+ \jك_cib^:] -Ir0$]JZtP!v=`6ܼ5 *UдQ#YH)ZVu. tw+_ki6}4o$$TfgBI O]ԏ`I6Ԉt%.%&vqQxȅ7-6]^b5?kVo:E#U>@~(2Fx_^݈gm9d,s zDwz膙/#8v׫_$O%˪[Ko%k1g(CN:-[@m6ޢBr]J9/s\fWy,iTH]\MňcnHDc{h03NB17ܓvx rd'(iC1} ?mki*9ʐ>1˱'{g{7L°.jK:3qyזdUg> WbZUIar[e54o189zANZ1'ك*dNiX}hƆA5Lofj>UP,C&۠jk:|^K`_T{7sFhbuyR T<6WZqkyD|Ʃm\"kVM@o#| ȸ_,u@ @ǕSC߿ρ~Ξ,(+╧؏|F!7szi {r|ѷ;U)qm3k"X#M3+.Eþ/xOk1oCcQ"O25`CP?hwk9 'uebEtwup{_ M> &9* fAriM0 @6fF8=H%KT±BCp'f?bKپAzD88H4}ߟNBZ b4bN^ h=vJ"CjqdpyKu\k,nE`|>-;O ZZ+YC}`!caX V1\pui^QM:MNG:*Jʗ`}-u1/yh$qdF#/-RVw:]$`҇D^}&iЊb@,?``ې6膼AgU6N)-h2&ғ%^>I#~̤ 䎀9bmGг]Q$i> vqu髁Ha۳/jo$,PXVH% n;kJw`Gcwfhmyzs|"sQMPMG'r-#HTv#OSbm0n,)muw,/rΤH y0{nw807_l1i0`'ueƋ_`R- 3,OTVOw2= cML>- V 3*O8gu86*nGXSSeJT8"Q<4t݌rv1W),t<}cDU׺٦QB!?ЛCCQ2^? rs-rRԯg_c(D弜H>.[8ꤾeBLIh:]EEDɁ.3A&ɲKܚ%Эnma?m9녙#꽯g\~JFwJ(Wfhc/~9>ȾP.j=M '2AOoLB#СM޽$!׵ CP6K^>e{IGV7a|N 9ݑS:[..biyD70_6N5}(&ݡ~tj:zXwj3݉e{liqV2i6E29g}?1^k"g1)I(hF2RpƘ#W(RnWYy1sO ^Z"HPQ' VE6$N,-V>u"w$+9!Ӧr/{!RQHrbe \>V@j ~eZ-uԩ<)@`RX)\ ^mow#~ x/ a۶og"v(M*Ip3rc'R 9?FdpU+(19عW,_'/7yNY=RFX#qV\q͵5vI{ԟ_mxs ˹'PL^=-_*Ǐ~IO@_$ ~;O×qw#{_%GQnRjgsT]] ڀhꢾj Eh'L'!mKZ8w-|vKb\!303?DFb|G*[09֫fal݋y(OttZZ9lČ2ϸҩlJ6t'j|5Lmc>X>j[BջǒAϺ!F :^$wd@0 \BLS~:XY'E&į ,ϭ91j%N5%g) ՒL:Bx@%`oHZ9fΔ`'ټԩ^]?fϘAbcuS%l"7gܺ2gw=y4dBQwMi.^]F5zQ˄6bTXk篣i55d>0:gӼSK{>(p.4׶{"n Ė߿˹e~1·\l'ÉK$\(AR9!OsNlk]U[*yF_nivTZx9XZuG#>8=0a*c@d -Ft^z'y$<XDL"aۉ5v.c-"g-^qT8*?pDΌ+)S6~ XS-=VX[U!_ʃf9)QCZVO_V@ !oa%ƻ#z:'?滯`@~\\N@-QpƯ8يEz[)9XI{,Hvu`$ cI*ǐpfb n^/~h>p9Xbr= !^S+ЕPGbpaM ҧ"ln uoBN-*㰩lTݩ"Ā7Pф.GCծ8fCu=Η}r >)>kk #Àh7;'kvPeUPR=YQNP IZF\j5C[" /j0n7I*HĀ_V*crN>{PTʨDU;Sҭ8%'TTlb$28yle\#qQTPQ%+fY7R>NQD_ݐᴣF$twO(LxRGU5w4 ecu.62̭[i&Rb~` 2!Yn$IGŗat6d8&(b\yrvLzQMė%֛cFB@$ޚ~'L@sxDn7.%Jn %c+:L z)CKt8Kn$o R ׸X {1|2Y%@Z(ntK1vBWp}fKDtJx|$ /z=mD,CIf`E5-j6zHSJ/Q:f|̆.q›p9h@,<KlɊsbf{RK(z1NŅE8H(u _;#Bml ,"򭷷BQ% YܯhĚ3E,WUsG+N]̧)J Y;D9.MCa8du E''mcɲ*Z@yS"/5qAm#$)ρ@3/*wlQDGUp9; 29nfjCH,g%1XJ[|Wcp\iˎCjSv.;kꇪS+]s3Me*EZc "Pi z1H `~ʏTdꞪCo7ANH$cʾ&=o'»Vc-Ix2$3KJ,a9$ݰki=&O0mJa<URHHU嚠A {s!xs![ʍ AguOJAfTxlBd]?Mys83I } r&fዧ~bmAWr5.͓h@"aAǃ/?7& oA,tǍڬcm'zzyv72Wݺh,K0@545`˃9g;W>n/e'-*=V2Sg; TR/)/;fGH@Plc(\h՗:2IU0qܷ^á=!Ut&kw7?q+fS4ap㬌e;&}%'iR~ts{`6m t'T?X^=&x6,0v#"B,F^洆M6fwfurwU %umdM:`c Gˬ*ѓhZJ fS.olD`]!`p4v"Ƚ?+P5Yw`6PUê |*Z65ϰ'5D6(Yg606珂9H7JoQn)VL0?rc ֢V)ģt'6i"X k;KdwxX\*5ďbJ7K6gr!2'sd@ɘ doQV61Ϥn68 cXesuN+f{?4o61여}֟tU{h^ Ud.%DlDgY|I Gr eDa/LVT(y\smIz+28*#݄~K` \Y?{qhizy668~ Ҙ^0_P-6bl#Oo3֕H ;člLVo2z280f)NgJjc߳E.12usRo|^DAqp1LyԿ{lY@F%2 qRsPӷ/`bZ0 "9>PB 7"Q`q.%2S^l 7 H߭BꨖE)x-ʺ:u`%Q煶 Z%?NP.@:GJr]aϬ.xT]\hĐ_ΆZ 0TI> Jh ruזM2S?GV퀬T\fv^tS?\i`ocF}VW|`<^!ܬ63xD:/(~.n>gx¼co.k詼B?,^Qj_@Qlzngm #CqNY+kEz^#v-|%[yF/[dgJњG='dUt͏>Z}ZD)bi:%8oa%1)pzM5iQT K`וmI^ <\KSȦUC>hC̷B!}Pt@􁽟etTAo x.*üLw~|J(r6@WMaFegXX!Y|40hHeG<?.%6|3.t ׮*i4`O#Wx:Dkl= gxy7T.(y-HpD}[@ yd~בp_*Wz[#mfLIP3IUae[Qé`ϻ)R~imc jan2dOe3䛼#bM>E+R,u-^QuKz8+v9u{qS( ڔx[&i+\} ǐTzaG%i,9 Ԕ^bU5K?g9*xhz>Km=n һc;xpPZ-f :E9T5_,-pQۀG+MSϩ^C٬]ձx#=kb!V?oҒm SR$ ccċDExV\!@ey+pAPn6Lk-s ^d2 ]7ʸZ|]עY3̿G$es!_# TY7go pb.\(NNA#jB%hqT:~#Ԋ@j =[ |,^> گu j߅|̞4L-@0{m d'e)k Sا9eನhs)ێp= Ւ˷M46yqǮ-L)xBԪX++:}zܲ61sF3J'kNmq\TI8jڬSPV P IՃ}w{w$2te7 &AȈ:NS-dlB Uvnf&Ŀ52c儍"TTQ39QSvGnDwx'0R3Ҍ -S4˭؇ C=%$<"BzF¼w |>aR #lb8A׫sApZ^=8)8">!uۨS9>t@+yMⲟw-U?W]a7l|vVn|Gq/R/*0w꘡:3 ٘SQh {FHQyyxR<}Bd?Ct,\l{5ltVj} 0W LEbX[FK6{Λi1_1ӹU#1y{z23mHS^oQaU( lo4GB  UQ#~)u׼1mSLl"͕n{b} KYw 8k]F gn}`'OFD֚"Qw(-ú1N+n'`S oDb'YC0Ϻ/29 K|K J3v݅ O.'8QF|T6xq(e۶Tk^dX< JYx "숖nVz #.П\<( f<ĸĤЫ$!=;5RZ;{qrȼQQE}rH(nJO_jh~ ~VGmPsL $\/P `CѪJQ22og"+BELD~F!>i[> ~2ֶ(LP#q QJk ȫX:PɈ-ܸZ2*Z4zp-U{D_~VC\2^vFjxFu2q8bB@lRc/s?υC&yi.toE#xWq1WB<Ou$'5OBybU[|4m4-ZnMsBzx$g p.m:ul&8Rl\9CaC3Z\!MN'q}skk aGTNxDGR+b]|aP{DlKP|ʥI0b>Bwb܎E|4i9 paS@nΔp?4C@rG'"6#ә':d'B "nԖXk!9_D#`H)%/A3K'7M" e8d'^|n 6~}HQ]5;0ZRv.%7PAZe"KhN$j|SY]nmghIo/(1.ڛSK)35.BuMZyblf63dЊyP!m4Gѝ) Rtt1Z| UNf oMD)!og5ﵱ̃#wrI<`eHDFDhv_ H Rӌ,]d/ t1>-:| ޼ .QAf6x)+E-E, 9N ͔nCϧU1%W3vx5Y<!+B7!Ip}&4HY~&֕GL2r5Riі绘d̀:RWw_$ ij~!)Υq\5sA9Ц5?g^2BFzJiTcoK񕛐2$д5qK|QL'q"3b*=HZ&۽["$fE\eZ_"!m}P KM8S+i|JȈK[rP}0]K"(h35rpfQO~h *ׁlA~8R(?i&y ς3N C.HO2S 6-MPJu+4{"k8#d@_cY MI yHƤ!ia"l[Ƹ&PS/3S˗)/fPB_GD<*^ ,tX^Б/R9eگIBĮGWsa ! '] 0zJS#K Վ}@crahUIüX1*1) 5R!SGJ!h=?-J+j[x0~s~Y*~V*tsm!W? MG+%O)DY HOE]@;]SX:1#VX71P`-}\62O+(/G]1sT+_5\ ԿĀdSEq[ە]fǯުZ$oiQ2!L ^Dﬞ).$U6)jn3R}mld8I>B}D'ފt[=07B&{'Yaxqݳm1A 0{ʆNYVHx D/#bᇓaDsuܵzro7z`|]A;d #@_J!oA R2G2ȈQ? {.*Tw~ڳhq;=1\G_څc˽ѩ9ʾھNS&ۆ\fS8"p5 e_<p{r^ v N\Y&;PMY¼Y-&li1StuK =\Mrb2FiWa8I$f%bad2%pSyƐ:C1 2ǾYc4D{$:V ;6ܱ7XLրsY/+eM22xz4ꥼr =PMe; REMj {ƚHQ},O-q(?'uК@CFQl,\\yXZ,EɌĴpl[i$| L1:=-VDsO՘Gmjܹo4H{ |ɀ(cw)Xbsl\Jx*j8؅R& nGYZ~f1Pu۫NމQ,4sx Zikf<(9wk>BOo/_Ć/7$ ziS>r5SyzZGk-Lҕc[g"O, ?wQd%,h`ea`c0s1;nÿCY+j1 9-v|() %͜Vjq {Hď@};Wz2S!Ikv; &OY(pRP_'78򯌌׊אWY ;OV,Ar={UʬF-+H( JBJF/o%.DKir e+O!<ĥZ;"?cx~$cY>I1AT^Ҏa4S(TfP &gUgie=qZk\ WP郐f #)iBQt:ׂƨy>qlP8PS]c6&)Ĉ~Smo/t&.0 .oX<ՙߑƄt)YRc.#w#g.2V^5ݿJzf)| p|4譓HsS`:)#nI,?aCWȠbɹ:hxm9|ZK˵F/?`1cz&;g D9 Pò""Rg:V=$*~mHϢQg z<W&5`_68R)z#Շt y͵:Y {◻61|1X< ε ,mcg&+F9%Ǧ4Z._zW,S ipQrU ^>WE]xf_PA1:BK}':(6v J2cdD̦:(yۇBχ0MQ|[oL/vu ]w+AvƘ|k.)~B *zV G-!iyb*bwؕ|0U|Sܤ+AME=fdlv!y"?oA0>iB|Zg/$$zvNKϞyFzHV[p"F!EP<==ϣ3̌#ߒ7׺]y]_ j7eMVW?(>NJIzS3(H3K%cqMN0.C=VmPZbv2R&D+XZ I?uHGL +qi|1~b0}d5I ŜS]8E]֞#BH*OF ,*+sOG%3^}`Zc&%oi4}P,v^o`S"/-6gq9l+6 Լ6q6b7֪ȵ5k6Y/|(F2õ Ӛ-~J[$ |J yhoWJuS\Tq5yD4{ _zBB(]甍ƞ"ju>d 5H-Da=t>ᅔU`7>Mni,냝)iBPR'Yh0B=4[]vLATfk0/G-9zV^ q'R(38yL~o7 ,1=6qɺ.*haPwb8G\&R(]^Ov3 1s%J8}6P!kMed [L 4ԩ o-h>N02ѵ} 18&MJ-hyL8;f8R*Zk$Ze܆p020dӂ>IOڰitۣyL$C1+u?6I\? %wC*; ssH 1z`01C6*oO\q_jҗCrk#y\jɦͥ|7͊`'er RlQ]4;Tۀd{be6W_|ɦǧ)6N=\T=t|{Y@N;hZ/().V vf= $;5ƯH?ne$!;΋L_MG5X`O0Cq* 9飜@+%9%)0J >awO,2kEoWd`7L$:CA?y2A){T6avl(%5&B x)H&+.hNP \[upG488՚(w? {(eoa%C3 /Vae ? nХ!*4oDW+cftlHwD J.wMVfP g{0JK#8%+^ {|SGĽ6{HZ?Yre[tv$װ1S.ALy5[niXh3?WSSfqQ9P JkW7 +ruGcOE[&{z̹yZ> 5n2cRqʲFg u82%G1gǶl/r !VkMqы9]* 2Rm::kK%abFHw|_X?q<PM3eC}lA+i-|z]*mB2~"-]N/-tqj`7`@0$ЖDW~9>[Nɵ^VeK[1E6g1H),$dKC|Gg.sqMC#6yH 4_Â_֚g3})D+%}$=38ٽ Ɓw3""* pjJ&eAeQ&wznW_H1[-#xY(H7\U3Tv@c7,O2Ǘw lѓ nC;: Ԟbj# r %7A2R/C=RS O(4*^ r WXDAE!W㭋J.m.<-&!j 8tT߭AٗC;ʿmP0^?88pMBo͜Ty5oǶ+ TN߬U5YBǜ{3 , |b&:zwB~;#SZP`-s s +q${b'Q0F\p:W⟿ϧ›@:Uv!3D= 7 g2x11=/BDW󎣟z$WB ؝VYw7P⟿) ᒏVFRT#\R7UZdX 6Ù³8|.-az2`F)6$]:P ƨxB/!\Ux nś+:U!Տ%OT9kF>DCVoI>c~(<*N@= y,¹wT4]QW*>u.f7U9í7)c_ۊ?gPd.6 υ ut]80iuKHD\su[RՎA_0HRiA %~q9g>S7 Av|'›͑@Pwe}Wў'P]ÊoE" P [%FMDҭ2Xiz&hՊ?$'5)[wjp|"ĉ+>x rAq?00k{"Řۧ3}Ŝ3?uW0dq|09_?WZaJI N+'W' 1d Ɋ77mZhDF!5Ti Ƚ7dAY^\Tza1s- [t'0rψI2o4L+3;Om 4 FtMgea {kwlg&Dt֤Hk- |* ,DZR܇5BgŻ(IMB\?5eYog/#4~N*r_5BX*VL$9(=BO< I,.iQ& pvw9$fEKj:kA`t|I6B#߽O;Y^O##C=5I8K4cDTʼnsBEo \;k&8<*P I(M1Sc _ 5#Ob(XqfЪ]vʋ2~k< saiLu~.N,=St\pϖ_0䛧ŸV/`z ):XY*p EGtGMW8p49AСHbO7C|!Eך~C|HWފvCYyl1u^ J=O⒙-5z$ۭ FI*eECͻ˲fMٷ˛,Bg$oi,KcWQcIp穮8pQZb&?P?* 4Y0G)b3R![ӾL]ݦ!&/K|L;PޘDpY5چ []X. d^7>( *4,*1Ǔ O7+v[eJG;C~_qu/tK_B#YT|' mҤ0~-AX3LiH/1@?=tyQ(. j |T6 Jqcn7=[)0}3ɤW.X$኷C!Q n9Aėc2jo)ez"o7Rn7vR+aG{FC ә=VDAm)\DX`!Gzo2q!knE1WEnpH+T5a5DK*ox 3S)l+DY~Xհ x˒画/YbFtv^"/¢X (%ZK'\2$սz?}s  i,t/yV{l(B6B@6 v`WIB|5O$~2d4>W8jj(" ;臉IYNhlt]W+\i8Z*YfŒS$\eL<H1' =h`x=jE{嬕 :7`3-Jr!41ïv[wmf޾W6?tG}P_pۖ6 g9 X{ϘWR֡k-0<[FfvMO NƱ 'oi-8Q'x o~^ / ~Q(ӡ$hX)!.@:7xrW:vTx^Dد&x9W:~艱"3$}S.VIs ㈩W{(uKf!%^"%K?(ח?ZF qîG+Ѽ`w㈜G3ht0QR$Ua4M?n d2PtC]&!@7 6vz)eY:Zf|%C", @L )n)}^o6^gc_㹲B5_zѓp3 )bPhx#a[?N̸Bd̫Ggl-Χ'b]no9+,`5``WvZ!shWnUqUèڞaL[˧:MT_]NɽW.{ IOiKo1qdMHZq -E Y%P{R `#1IN5?#$|:Qm5MhTgg~\qtt4|Ӊ_6kç: Kv='uP bBu:K'x,_Kt8Xқ'oj4r 'w25s r/U1_eyO`AN)]Pr-Q7žp L.K;DN D%|b7J+զy"cңy7}5[2\t?#zQֺa9YHr=866-(I!dfrBLXvIк[}4w{U{ivy6 ) l0Ht ΁ h&?AL ,Nbs؄W+C^>0S;ԖC!Z,0'e!*9w@ b4mZ|SfE)nWa!ZFέ:\\L<L75 ȬZSӶPj'\XPA|?& [&ojb~s8.ҝ*l&Rp?.:ZX~.!-rJ%̊){M\{?OD2ѽpkôlcu@nھø&<MaP]vBQSbp*m.d͹.?lO:UfeO)jcFp ¶-VgBs|n@)[d|jC T$mp &`27B^+JW8iLDd)Wo[T)!@8V?TAC[MD'"E瀃{߽7DvQ"OWO ",mA)~k^۰nX=agTKJ8TG9UVgN gXoVi1mdk ]ic^Vt-`4QO%۸%ՕNx2,φN oԊՙgρŐ@91kuÞS|~\,`~RN3ĝ!n&465bA !f~`UD[}q46=&٠%ZR2}uҊ{6 @,?ղA!3b"C .+=I 0/D(żݯ]&뮣ÊD!F& K 0Eˡ0G QGٔ+MX$Fp?&QY8 ,͇Q YFт`wĻ7Gܷ/j XDCygbZiASa1.muh 6EiSZ V>XHUF~,FQ)69í_BW7h -!ǒ`071M1 w5huҲd _z"yF!&Y #ԯvVO) <$Yv~Pp?q/-:N{!C3њ&aW2!&H)omlrȱw:0D nZNn1yޭE&0(7߷eL ĩΨǻW9ާK{) *2{Dc%(Q^sil) ڗ7._-wqr[9@]!)9Ԥ쿥ÐlCV9qkwo\"l:4 X JQ5S/C'?0@alc?+&y-"Sd*D%}UId]YN$[0EиNd5Pt.ᆳ9pRlq 6+P~'X(Dv"OS.7Q&y%V8;q7rgDi <8TpDN 2K)a_={QIU\Z/,rQ#Lj?ʶ0C'*k f+2z!6ֽ"y {kпdҾuX.Sa8@,Yw[e6V"m@b_eޚ`,b5i:,/c'Y'1 C$v>t߽olEi38e0MWyHTqMX@CK%@BE5#)4"ܙ-]q@fQxtTi[]s͗ "ci#1' g+u!)=IG3$|Z{^6w):ca.[DοLWGfC=U*[ot&V*xSEB4fǓ/ɤ 4p~Bvw<}@_~wX?ߞ P|0OWD3A+2Pj_,9UJ1e۱C ϭ69ݣW(]r*_6U͏},f79N{\WGR,ڰ˦f#4k§(ƹ$<#[/u*g3\"%> `>J}ؾB_Zׂ0Èv,3iyڇ\z.($vqF\$ aS7ͻ,~|wx}j8DsΎsyW7Rr:l{q7\;ɓm/4;{9[Pqۙ$XIje*Mzr8w0', H"%H=;iMRi w ٧ڦo816&}hcPA8Q&hHubw8zn6~ 4Cϡ+, ܺt$$0R:@(yDb]_qF(YPdrrlN`Ic{#"l/JYg hC_Td%^].Pf=յ$@%bo@=LY%#QKzR.ro2<[baaeLklE:y>VY:e62#7V[B`9f~PlJxDL{/:h-It_6OZW^;12 A;i暀v^ZG@o6  wG+bf鸪՟GB6S4Pu GN9t/3G/5@EA0Z$AIHE툘* .%12zZ_,:gi!U4:|)|]VB5>LwN%'n,foY0Ρ [g^[>P"y?)תD8:aPj0؇5x۽9v^kxy8X,Z]:.^+ Vu$Vqi=œV Z5&WFH$lM)󐆟+W BlDr]x'A8ūnP~H烹+&"**ʦ@lTRhC΁1mTĪ A*90֮Iy.~?To❜,,5~7OAڴ"3+bpx䋇̞ aMu+į*%5>W E`M&utY{pMU^\6A!B_ZkFX.hq^5y,>4U5ÑNഺѐMq#0[o\3 g^L*F>N_$s=qts]Cg8\S`aU hdlI(|(P0wv+DKd?AlmxϦcPN7J/t*u~,y@&'5-ݭЍkY.UVǕDu8[Х@׽D3R{FLûJa+\pqfww~)#'UhLItNfNju)놣CU#Uƭypo9/b_~PyKFVw D̼!$SW`7ncTw(XB#N̼(îG!f CIع18 "GhO3PK]Z.(p_&tEprg-xLO&h

]u{,@Pf[Iْ|BI.-ͨ-důmY7>bcDo] `ܳNDF tz };]iM|!i1Ƞi>+PM|q%:ZMS-QcU=!rJ| (E@b6ni"W9#^Ij "[UO0#a3ofڹQ(`Cޛ  ΅|s3/5WӁ+?!"S ; rN5phhb (6V 6?1'lDIk nI^3Kޢ9d+3IL'!EL,l8KZ*q2A!ӥXѲE1%y/|: 7vg=ҍ.ķxekF-Y)ܩe9AhZ1"0DcB+{7vD+ric' ံ:%BaHI) -_[\; O~g5+.vAmԻQTh}h/MX{hEIhMh)Hu\ξ+U_6jK!U}ֹ?i8@V7K/"PlN9lb.`` :/!Y4}hLSz\$/?ɌBR-:}`sATg{KKOXDtVN7t6F*4_w` ]'. x_М.,¬O6TiʛRdu$([jR˥(%|̭$WUH -ʣ4A"T"o;4<|q"@y; ?;ȳx@c Z@4W:M(mqj 3HxXQD,rVZ8(>J># q;3 6Pթ{VsMMR_R@{Lg3K3e&k@uv  S)¢2m^GuoQ+|,W.= | T߉u9P*3HQIBm,p$>XVe4)L:蟫 6 0ٚF}sN.bM*zzK YRb%~v6 rĮ~7,SdE e6"|cOGMEƫOH#e<)ۂ܆o * MN֪ `aV vL7ARc9re_Hr6t;;EC`YK-դNZx0p U5/aod?F.SlAr-̛{)0p\_rb2E/Kr.ٰZ24]xDj}rN@;xa4o'ߪdCd!փ;ҨF:Cs\}zhe˂u{L+p?e{t}ĶEʭ$ZPnt Zr6V3IPY$3AڏD:\,],^^_ɮQ(r@M#58P-.C6`%&u͉R+#{&-x:CH:C`nqX:D*-%lxw4M0#5.%kD=g/w” *nSwA|/P5E29t/fk# hԄj#]KZ,xаIHdySߧ{]x>`Mn;UksEBTdIA&|CG7xۦ'+M{,&| 9O~ q4qFW5"Qjԭ6ز9В^ϑ8Uv*'y;Rg<\`/猌NR;Mw6Ƌ9I7~ի`|eXcL ؃txr,e4@:y w1D+?h!iǀHH{ ׁ()ЂJOPgRIZt@$08U콨9 b}V_xmy֌{b5⽂_cq6z!bӸ_Z̅ѩyZ"F=-:*iժ` { {VDt"XkZɏGr% Z*a,iIcC+$`%v 7+%i'q.JV<˶Ӭni[-/V .\B1s%}m+HOxTq굒n'fNU@K}XeƥXk_NtC/Q*sWr"U:kmwMaQ{Κ8wOYU9ԱQթAaC$?j78z; |;* .:U6|Q-rX SFmH-KLjm*A#p(R) ԤL/]Ğa[Wp"TЛ_E2<53T.PmByj<~%>mGK)Gڶ q_KrF&ivP`?w7D1jD`tco۴ACT#vu]iixSb۵%d᪞|8>'e-`P}';KZ6r]G8]8lyAlyjs=Bm'^5*켏*wD/fs@)'^q|F[4s8mܐ2.)UWzIRQL3&󓂲.뜵،M=MyN:t> ĞM)}q_ҍyJ5UԵ.U[Vp[[ubx K},^)Z2<<ˀrUCdց9?gT>[n@$܋u⮑~L{y #;`U╶75 ba w GGx!7଍KW ?GN@&7{)ΰtc1N5Fe::,LRP$$if p:|c?bs+9tqHLϪ FW| W-]A=B%/ 7( ,hos^s{Bߖ0@#H(B# {b[vs_:lA#=ld6r,3*Y-;*kϓ%ѕRa7b!YsFR{SRe)`bL4NojAS: A'hX02:j$՛bq X'V/Y+QW3fI(a)߱μ[zҠ&M ̏E8(4Ҍ ;)sSjLCͦ%yRƭ\mjZv`'du*N㰊uc`o?Њg%֪i+rO`>f{[͙oD(@U!?gY.1N.ȕK XLyO.m 2re0^\ $q"@ OX(Ρ9I+xPwzk a[_ wVf(x43{Oߊϩ?b]2U7W8Px~{ PɮHYܽӁ.{yw%|A,? n׏/*ŁNc5`OOLC@'m4%Cs9qn:xжފAФn0b45:GmќL'ܬmj¢ w!̥ˣƂ˒Y\K(V/-x]HƁݣ'!S) YPmsv9dR>cO/,aLֻ\|xӬ(GYAs.GSdwʈ>SsM8~?{"ˤX94 ʼnɸPVٙb:D `aHt]Qz}&~/eI,Q LRʎAJBUXb] 7 }^8dCWo~L`4zOx݉NP_!<-03#zU~BbM,NB I(ң[{@jcdW2QLfU 5 pTϿuʥeH f{[$kӗ69gj9xU{Pb8QNBXo~Sv{M~aKV=Z4=iN LeF{t!QMTNw[͛g/%`rK|/<42Y:SlPc 2(o%N(Kи];LcX$kF9u,m(+=܊T>G{U$Q[#=*+ՆQǙ&۳_;eΕ޺?.}=]c Y o路YDsCҟAPyw±5zNi%,ԛGpb,dī6rwd|"[pЊX?mkZ%eM%M82;l{Q$LhioCALJ$|e7UQ$'?h\y~|afB>^̮2N墽q؂ߚlGfcG iCe =P8 JO-fcѩ#4, *_pd"4]YI3Q=].L-nk8|_K27%vegU Ncf~`(c6P6Yi%4'Nϵ0U}-ۋS{w7+*&px"MndGw--:^=P1XdzT]}F EYƸ=B mR\Br?E>F&*Uj?5c/P TٻROݦ#[NP$!숵oT3<+M  Xd'M 6޳aϠY%Xp})h#[UQ5^FU#Yx.;Ș]PS@9<:tw7𵖨/i?Ql9i-iBAQ9U6!52`-GPu2ZAqJ8& Q馔ay y N@"G;>@&{\D5@( ׸$%:#h͸v/NA]/능`sTNE OVkĒUC~V| M5IAs`%iP/bsN[;x*p+Ae8 &ȳNё_zU^f6^O`fE2n|C%H@%J@)$pg3lQoe+ "K3Yx p sq?RQh2T ك@ҭev갂i:0fjʋwAQDng6)oВ' s`4]4A ƾBiէ>NQ'ۘ阍lG'C>g[rmE1d$JlƅmTɭ \DE⽍@BT02-O&{/!hud^rI&P+ ╗6Н]4NQP:6K~/ǽO׈)Su~I>Rg2:*F`}vֿ3V9־ՓFac_6ԬkSw~b ĄGG gW0R|7ɖԁjn8ٲJvwӤjK9J5`rңOPYne3{p\Wr;,0.ޛyЖ}$SkYGp` /tS|Ec5!INuN2,aπh $ ضR6o.o2V';4I3%(27^$9`WnRs]: mgm][S[1 I=5CȪ\ga:B *i'_ӥR]b*T\v^6Q301STo1} +7| "HTvclKDv*t>Ɨ8oN 殷,؁6ycZࡀ{b`Eo.{ C +SUS枢?h9p[A* P?a,r7\ƣ0m(it*.Nb>/qON9];ѢҡNU%x$gAMg$OpbٮGz g(K?pՃY /_؅olXIgɤ"hj /吺݀o-?uhPc U[fKvѐ={K:QRgi0Ϭi;3ٽھjo¯2i% *Tc#@7WVe^sʖ96#Hϑ|О( 9XNDS[VܙcUv ARJő/(P'oVsl : E)o ^pB VP ]Iœ¶@ea-5!)" c|y\>ML+Q.Tǚ1T%-%P'[scGnaw`~)PDrBA"d/L+Z* r]6ͺF, rQ12By/!~*`6BʰL&7ؐ &.'< Pi)rMx=+>+FNgEkQ0?PK䱏t!h1a=8A ]7âڬGOk @|9Q~U8 &/*>S*凭[Yt=r35 9^MwѳaհAm;OvA9i܄X߅{}3#U٘D'8ZkX֎|1`DE+a4H}2lGNUy3#0%0 vYWa\dNj׽kq }\zڀ;9 TESofsP<ӞJ-^ǿxإ5T4JbMWJQJ޵|cXO-lwB'20 `HoUtd)/Ă8:8;@io="0#GӠxo8 Y0Ua7܅aPH}ښTHc;qu#c &p+ޯnŷ9g1P &I VHth6OWInϋ0 閷5q:@-5>3Ă>Ag#zS|OTIrS}%"qn6cu./91o,Ra+|X^w;U}VXkŋj_%rB-yi-. !9;_Jΰ'/լwHh1C)€8uL2r jb}B$L.m;>9}/dfSo̖qwCI`f 7uϣ)쟳33S5_ʆ_l(ѣcؒ tMZIλ.&0>Nw9%Gnr⎠*a {YY@(Xg*Pg3#",kCb:f>:mURKg k^pqE! ˹L&m 'KE)-2^N0 Vڸ2yE\[A3&ïklD#E~Z*(>S5^{`rS0~{3r4)]y/c ܝj$2G3]y+;12l Q> "LTw@Yׁc'0]pr&!s^T:8pOq2M戍V ؃;9TVՖ;ԁQ1-jmټ'Uָ}_ˆ;۟_ TnkǢ=7zzn8 DiczT|d*ak; {Z1gX^[MaS`5-Q5OY%NN$q0!G|* s\lrSeR@!o\lF1ނ5!sYqn.n(uc RN!qNK,^ay5ԫ-. N[}&S[Jܟ .e)8fl17ch0Ad2Hxr9%QAO)Y CmBad|CYQ^- 1)~Jf䔎s[Z=KȐ- Hr4&\AiPS%{ W J6 + rq}=D [ + t~XcQM+@W@]v9^GfU4zy''iթݢZ]jO~N# 3y;r'C w)g[Fۓ~6z@.UgYqG5S:/G%* @ (R `ں g2NMp@Z⢓Uo*JE]F)U81w՟t )+6ސ>7ꙍch+H"-(W\ZPZ_^ ;^[W Ě tj_]19Ϩ @2sa҆oY_6a߰z¯> I'W(77{lP YrJi s ^(;̥0kT)C@t-U㨝s}~TM?Z_@ _ =*?nL>R$^X1dĿAC +:NA9P ua-4٬.',ILhI ̖W}L೤kd,lxR/GkPr8Ȋۻ+We-0K骋~즔b Yi<Z7C5߾#p0A$ PEV'1 WWџb_&鲹VPGG]_(gc"9>Ǭ"T m8}pt#0Z^=-ogs_ZJV#B'za"B<-TjXy17OVf/N~Ij=͑aanG]u &4{FrWw&VenN"CyAetCkPk@pw&,L–ȣK?"K\+#":/$ۤ?~t$6uD+o__-`;=(eڙʙ|b`'!l x_hṛfqD.mq" m.VU- OyE5˛y34BJsSC4.wy=>kvmw sNJ7d;T ݷ R+'#̆ύQ&i8b'^CD #XG3H080>o[ױ] @ :NO腤mf 0ue9=2N@g+ jɎVt$Ś=GGk,HtPi{Lu :sXrz{DOϙ|G-~X =;_No_,3M¼Ռ4L rt vM ㅘH(`;z}NB_I8<{FsޙdAmA5Xu3*gwUpf\_دkI>E.p-)Ho3s Ϯ*]>ea d|KW>L;B}}=U 8/9k6G^%X=mK!Jmݰ>D1ÇJXԟ3?*a{/Hꈔo~#_G(p!kI沙ʺȜ-Loƒh m _04*ȏLc+ғ& ybkfǽ}C'ˁy2M_~WV&۳>d"fע1Ԫ)&3R`˛ؗS~>=_@Γ*;WfNBK 1 #cy"2!mvBK}PrFZYPXi$*s]*m_oCyg\#cH!!Dž4 Z˨;;sNaǿlA}1hMGdWUD~q ~|na~Xv,C;1qlvyCe "i yEs ꤹR>ʥՂP?@-fVߝF?G/i,M]A?v\sJgban8E`̕ru3HӔv.G޵vldHE?J>5FUy]1A0e_DGk(/u>7Mk&2B[sZ&R6/c c/v^ k {Af/kL%H ͹ "lP>qsT m6$ ]. *UdUu-WwMpB=(=0GCP}@Q\ORу$R,'bY(*Tͨtۗ Mװ/ 7y1{:Ym{p Uwz SSH֯x!ШsF: `%I:q+ʪs*`%!#gΠf'spϤed 71$\=b@ )[J$\ +"q슈X%isX.A3T 51,4?]IJ@"S1-dۗϽd[e v ȃDaOA?]&+YSʸC6!|@>< b+u)?vKv(WKt8 S[=R "@2[14YtmCzKlm _@J kMkqz2vJ3߳qv)3qs[oO7xsFŘ$@K{[xjG"}1!GJV=&7/W*4\X2 <_u8OM { k=Ƞ³|~.>kJcnJ7.&@#acNx"sJ7q*5 `ȧކ'ѤdYp穻zNH5;Tnk|4}XX/Z%Y2hexhr![܅rY: jB<},0lPBC"E ?s+n PoJm < ݜ4FPuZt%?8@Us)t1*04# ?z46`9>EGfU\\&@ʃ^ a*Dbv+dyYdalx8g~CVP {X.G*:v7e GSobe$po$ b3-6yqtld&F^Y!bNmXIxoS3SȘ*z4ZzaK=#$e<ȫ+`=$me+sG|^{oiOzcH'!{4[2l~VRǐ{,"gp·$Q,1v;!5&kgeƺ:ji`]HZ\hIR_v#ࣿ-KWqEcv{f&M:?t_WAq+-j e!WNcd/&@me=w-=lʰ]r+vj g|b'橗dR͘EHESRț! = IEDJExalfP$P]> NV^AEa]>E8VEEQĖ B]eHμF=ĺ 4RrCCKY&ot<-AF'ݿǒ[Mia5 mW Ăy5wZʝh$d;ikƲ /ʝf90X\{pG/]yI(M%[U*nB]d0SV4_ZQ_$}DGLCV-C&I:5$xlm>G~Yݼ:KV|-|iZh$͹jn6a Dߌ#nlfW* vECnN4A["95@f,)HaG$"ˬ? *S^_iE4!tvEJ>3M iηz"s5'gh^ZUǚD^ =B¯Pmծ#OgK> 9Q.EnXLBV=9Ta` fY]W{S a}xUP猼s'K ,9B;(̼3#=Dwq!% ns%W8*ޔ#bfg-k/1>-,j>=H/g@pp炓tѕmeC=rw׾7M ٩{ 5rmURǓ{DeK}s+mF0$o@˭@QlT& /[2wIYݼt Gv0|eL1L3r}SߕU 1/h $a3hMZWŪ-mWl'a,r9?'gUpiq8*9X$Dϝg{yNY5W–n|![ouTD\37n']wW>:!muʽŸ,G&#Xh2Ryg.F:QQg2WPv[հGNj&X[>*KAZmhel:">l^,ng\E2o(cEVDap Eox^}@Csy%`"f܆=.'bIGY,=/xhk-HQ.v-0Ph?$6J^~j*A0@$kP۸أY­‰[6҆zI}ԯTy} +Z}]eP0=z!y͓Sۀo}b|k6dMROkn"]?q#!a rzIRiNv.ck,Dba^Xcq7@HD:VNWUԙY$&$}d7;SrD__%qR YMuMXڙ˘0ιímX]}a}'F&U7hFugFeJ)rp;#zf>d 5ך`I>Skn1;*dAUǎx'/0g^5A.Gc= [l/>Z(Ү^U\.KHfkSXZEdW. Uo'jlp՝#Ϫ=H;j uH\܅&Fb;H,kzdthfwpO֕I\Q osve}Bh`y5oь4%)Pw!j~\f%{ e.>Z6^KAHBba'c=EɻWK*)"l;ozo ky*}q5&JJbQC۾-Leۦ['R-Rg^;vs;r 'bBxqݵ˚=.%0V<͈nW m炀LV+X*Vpha II(QHxNDhi[]:5D1A8oK{&>e@36ނ+WbNHg!t j6Ly%Y&[,L+wOb Z>mR\P.~'P.<6W<73a%@'55x+gp2m7w&> lƐd!,WNf^e*[Y㑉_bJ5pCwZ=@l5 YDb/ԓrcD6 #saV]WH魫,(̾q09WbQJ)1MKq@-5k(곻"(I:/A$Z7ĭ9<L(sIq32Z Er@ꁍ)1|(`,o|/xr*.Y&L Pdg*/nVA7C&nˁjFg"u5h (I9u.>V`zG6.VBY y)sIvb"2y<$۞ k1#Yr Q}2ΤuC2]9N,@_ W/cVS֗%ΉƿƣF0&l4:5!P쭿@[0?T`C/ui_6̑r䗩F '[Օ}PBd93 էh*u]BķZ>Mp+n%$S5!J0QVU27~+sk08omItH{zrCִJGxJDZ&q_.:09.uq|)R7\NީAB)2qT6g_:]PxnN=h-\7+\BߥJn@d A69sA,ǁMUDW"1K=@apץ H]aŜ]W{_RB9#'1#~n:;KS[8 j u+򛓗K)0`MEu8I\WЛ}( iW𪩴j湌UE$8 Kvؐ|"]3' P܉`Ms~@ H^x"ka@9M܂j tWK) b*ש#p>U I'#X I#Wa(q \z߀ֆXٲq'P3BUQ:2s|E.̫0[qf0RAHg4oYhk+yqQa8j1{H,N[o\ sBi}ĝiF۟@e#v鑒[Ӣ$$ӛU񺌮;T ywpۅMIEBˢieYjSpc(HvYP> mxwA ~b Ưº9݇) icJa1y1$`~[ E1((B| !(QU=(]oAs)d;({5KrD'/nofh2S>a0Mr^м_{"gPAtu2{W?d/GR~RX7j/#lǧK~A*ŋB<:p"9COP~yIEK*CO߈"B 7b…K/b$Xl1.{lhSeGRO!Z)~k:㞐Jaj3Ԃ7Ǫpz&A|& e2H1k9[4IwՏ~24]~k!e+(CB qA|ߨz;XԭB ?vtrň1@;,2c5KH6PH9;Vvz ZH1]/E};aQt0+u}H=Aܡb"$̯nᾛj8%f񞟗 ՟=[5dh|R)mw s<8G"70)qs74D$q>5 ^GRn֨kYFٯϬXie1!mײfLgX3.gt FtUk4o!=s |L~{ yB2 h@EmҾ^GBcpU LRҮȎ@be'_m:1k;`|Y!:qtxasn@ |͋ʙ*߿bsdG~9jb_aksU/VؕOJ>hBvKn{ւRoM $q7uzTlLr'pZb1sc1>aǼ!2]$U |'N S؞8{yB#_Yni3@GG,.s#Z @~kB)R{dO7݃>]]+-%?0+*ДA9:la *3_;5xΘ&ѡ$WzԺ`m 3 d``g5y/R--I౥^<6pʛ'uF}A2Sgem3X,azrdFP@Kg昴vk~9޿l+5T^}de"~ec%Jtwh=D L3g)M\sp34{v gC*P VM4"F)ʏ|Z<4Y(+xabE pEI?}d)͔wvi }u&8$WM*{$bf\ K*MKiN%5/M̆*"';:?)jQZfw&% /.EBc 3#|+T*Kg{%"P4\,^fj: bNe課/PxHZa)X G M%wQ(T! 4++ڀ\J pCX#RJu0,Jj;PtdQgKA 45CN `_Nj|d*-]rZ5*|)#!lMcf`4y>0mԌB$܏}%;5QTSE=_NYW)HDЖ.쪇"|H$E S B_4;ԫ6֣nӗ.~C/_fw'Mu|w,mtN0!Py 7ż%@kF%kr$-jm.U -Fb.A/, nS*9)0?XP_ Y|kBw:Qh)X鬧4g9=ş25_+897_#2r/i-IB|Uqmp>+g~frKu%j ĈH#G=)̲BIOW΢?wRڟptP#kY[ {@ 'O۱]RگPp0--9gGa&C`LWچETh`qJYA;vs!VV=~ӠǷǮw="M&{m緊0R9|c&YރM@},S'a|3@۫%Y %`y!BüP X,b;-H[$j3:!'}JIYre jbiS ÌspZt]?+DQ1ѣi0>G 5ݎHY2`cH__OP|I#\wOt=9[@ː I/kDano{}Phbw872% ۝ߓƐw{*27ҧ{+IG~:LO\g':u_[x*ў?A=fr5V½b<;Bg%8?+b)s^M͈7y*7ߤ9b;-s w5ᶻйTs2M}N~c;CqZ5ҜggÙ|z! Q2.oֳv)r紉tufֹxSL4u4 ڊqcX]4iKcTIE8[ ؟@݁ :#w.ޗÅn(!4^| 9rlW;\6.Md>:H{[qHvxCB+idi8{Clh'j:!A/ST^bZ_'s\Xwq]e Deld:O')/^XcDxswnpX) #1h:1aj@DɗVY_d:`D+sB\P\kV͜nqzC[釅RNRJ8r0yW9&*Qp2̂wecw` Ec<|DZGA>A9s`p0 QÅxr XS/{CL&b&fhM:pG$ܓ3WCJIfޝrl{ћgZA0PêzdƬ}P0B\&Pd ZEdOj}3_5-\wǁ1Sw4B)`Y/Su\HlXvڣk,~* Z6܈G$95‡XD" $+3uiLTM;4;vƠn*x'!VTİL7* zm*N&z~~7˫CoSv<ղ|w $? 6aKZeWt;BV Q~+u-i/sf\}OƆVsF1=ـ3{,A6|]seOŃU6i贀_\TaW7hþ`#NkYuFzEBڜ>z?3DwrKhgfYuIi_ 4GTi#e>hwLrja͠BB)dIj.0}K~E:q܏ȀxogS3t9P2!Mlީ,SA|Gc,,֨I B 5 ,C287'=k P/^P?l蓟 DHRQ.•l%Ndi+ߋsSW (-,G(^jOM*ys"ȋ-cZO+ e<[{86r0>FU;j؊9:hn aHZak|Q3t^(8഑v mMl|pz0dSA~s;+Ѥ%B@E\I$zZo-m̓i %E_{DJpȉBrG4V ρIpݎtIRm`/D~aѡ)ъ2#;}ZhD%<Iatz48ܯI]XYV‡w(,@;yKPfNΤ!ǪnX {zׇb,,/Qv'C Վf d'קϽi" $ $⮹U*%iEnhlMl+J긓\,^b=Gj S0w쒞![KQLЖ T=CC S)807"Ss*rk./S  l OO߸p+OAtRm <@H=3CXъ* h]UYQfğ }F +; '0v$8Gg&^tOQՈl )71gv !fLZdM4F ^/X*KdJ±E*s׌Q!&vlM{wKbm8V[Vӱ@6'jFmgnXfɿTu" ఈ=1 R;C3xWEc #w$babImt5RHQL]9irDEۼzs?[rx[KRYKI# ]nhE 3ھ9c޻,VO(ͦ0tMRi_^yAT(qu=pC$^O19'Rx4_3ZR'bCl熓{yFEx*00W hQ9L!p8/y `OcV~fCғ6Sy+7}8JȖ`5&v$R䬵c;_"p@c9TSQZPhQV:,-j~BӚI,q]edo Jqz%,,YJVmCߊbSG?Ͻ"_9XѰ-N@A]E&2NmM\n]a̶`jr|SvP'5\H:Mi_$w; %qs(wEX4&ǔڥfy/9/ !ZL!L&ula \9]Cف/"Jj—%{Ho!^a~{1IOpn06~wVH&)_bWw<0& j3"iJF2P>hLu,HkM %ܷxU{?5[NNCheQ_S-ڭ|zh(bķ^(͗k1BGU2ڿ W5`zgq_{Ϳ3[`4oN E򭔧.}sjLڠp"/x獏#z%jfPfM{v![TZoQuVɨiGm뜑R"vڅBE ʉMBFƄݟ+srwGboQ뇠B!ϫ,x)[IUs]hISa?[OUW/ P4񹯵ާjoH׃v a1 E*e7;QԣD[(&WW|( FL9sVt r rDKBH{(rL DKI(HkJ< TNeiLH"ԣIbʽ {J`v( "[N+,,\ư5'I#Aᒅ-hq):۸*B\A95.,zZwEcC6 "4/G}*u.xwt s.ڭ#lmcΞ] P.Olm.l I_iw=7Ȣ 5~h_s0S^Ȥ~6c9>;<1cyFi4Ezi}.fqp9*E\w%exB/{Acm,! @_ԩRj:"%t|J,xv2M3!K\ɽ4 3EŽ;s+N)'7ۍ*rh֥$GӢ.U'*78̽E%ԐSO ŁM%{" #yc!8]Կ`X+.șpxujv+}?6(D4 ;|:N5yz:O|,vf{)t1ad\D (x1}85 Q#J;>2iH\Uw2h6 1/ҡmw)̃mU!(=d"@ D6[S\ $I˶Lt>^j"񇻝bh] ?teʗm)@ǒŤ3qzgR^+ZAp& i5޶&=_P}hK Xָ+AØ%- vsgs-[g7~+.YvMĻ,_?wpbPڧ_q:!fp(cQG]M޺91oDM!sP5Kfڔr)\7WHA,[pUpz.ձEA{LŬ(BƖ4aNiȬAYR5 ݖ hfQO%lܺEuEn2 )諷GN}mܗ| ;4Fy؟e3ǂ<4*E:p+$1pZz0.lvFA>:P3ޡc_r'lPz *EX"N;PJm:s:* &xv L;@mkФ񷬌Fξ'}?MwtP|nxaҵguڡ CY\>=OH oݯ=y4걭1F:+7 v2/(B;^Smr6EeM!YoTw`+ O_9H{д*N.shyHpL<rN7 XW+loUp’O$%VU nX$M(eEJUwޚ8R<'z6uT;T rዮ\]9x0p [v$TG2tXRDwv Mxj0OV.)A-{aм,ԥ=!߶a:m3HHvĞ~>U΍@mt;,!NkhJVJm5[4t&,7 %gRw֗-[#T񶝆.`AKh ץݬG')t[b;f5)ҙ7"fzl [rװΑVD9+N(E*k 'VB(LT 8UȦp7Fy!r\w;QڄaLx&3 s|iy cNqgE]3,4轇-LF38`3" Am$ Bj_HY)h:|#>sb{"yL;%TM$n u).;B9%Q]+r=jnV |RXE)VKYʌFi9N%u3ONЊ ׆< 0q,tj6uS/i:7W)SѪU1z}oexe(\$ʍH/zMD?7MNZGMgns PKoE<= v: r C/_"m6-FT**|9j 6 ]6 m[ 䧫XϽ\RNSn]l1PXy0=~@`cM!'2+!&p0>wB71 aS,.(,uUh_g;~oSAwœ |49:79OK]?Q ]\i_|[ށiTl2aLQAR(Pb ߘ%4DJ( ٦ ʊb *]yv ʲ]Z8h1 7Bi:fyi+@ (VzA}lX,$j`dT:E{q4<+wM@ YsS(`_}/`ɓyDtU.#{Bmځ"1 oj~*?pՋ qtD!E5_G.zxĸBXxαH"G%="n%?ytG\h%ep Aw^eO4tP~%a'2J &f:nO32x~#9.(~iqҁְCW1U' @QY_`2?-O y-}$b!IϺ(y(2:Z0ŮEww# +:3u6>\)w*)s(Wa~V^oN(b]]'yK4},I1JD46X+bYy=LVunpjN,mǺ(vvvtݙg,o⫆ex1y/[tK9z?hl*Y% w1,Mbd)dvUx1Px_Eb >?̋7ObzHw3f xUfJWIZk}ÆT]x j0j,%7`H..˗/./Jf Θ; 7b)(uk~Yڭ{i3%E|@,J֎lٗi,$TGG%@ECX95)SAqa=g1H&:>!zuЋCrgR3i|,0@w.˅R[ Ӻ=e J@Fܩ Vp8vP@ ) U@ʭ|6CL;e+MXOD~=P+?tu-ݥWVk6|22s.6k7mz7r?J쿰ѱ~VҙxnOx`U2bGZ˽J.[8}^ 5zGԡS%~HP^DvUf-T GmBD3`®FF=q{@;@GY   J)RSU5AWT֧(W4Ngݼ4gedF?s܇Q;C(>oFB(ݕ1LЬ!LF(E]#sQ. IBXlXPftlcWdƳaGXMHsz|kO]ոTԈ5>m Ԥ,TƮ m4].^dZ]lu/9ʊl|/gfYVJwD js&W]gLOFV3)1;L1dȆ5cso% 3BHP3f[}!т4*$nl Zvy0(^ȧ(A̎lwl:Sihwd<҂*n'+qMH2%98nbYBB B8bϞH%.ati}?|eˬZm,Yi|'@,*tBËA9i`N4KDN!(‘BnE\z/OxonQijlh[N7Ƴg@#O.Π (4tc]$'BsB׀W1T!nU'T;?R5g{G+pA~P!6!:&#Z+f}e_otwwlҩyۏ3;d.Y;݌SD%оs1ѡQͩ})jIQҀfjJvc[R䝳şO,if=V5VЂ23TFncO~ib65_k~l=NIo55֝B3v%OXЬ*Arw m]2?ͥcMZaSY1U# **[K"sotKxUF/w>7BԸP 'x#C`tRd 2ǎTAƞexH#^=vC}mT^3{4ls"L9V ~/PnAR0w1,sjVٶS8L{ITXo`[ZKV#v,y%e/'O'"Ҫ~\/~тջEa(:ϺEFނ)D2kT fڀAmFWa3^dIscVFi]e-&˛ WuHEp|k%T}bT?F#4.ʬQ`6&}M(J0rӍƐt ]fm<]ދW"c)xgygՑm "9mibx."P|X`jf Z/UӋvҺynz Kڅ)Y8 l$!ig2lWu8]́ߎS]|>}-l,8S4\Aw9륥o@&HpN Fv\l7+“nY9 qG>""ۆW? 1CIuZ.kQr`$Ο%+w1\أe7N;E|~J )eܚMp8LQgiGeE4pצO\[0H$*.Yӻm fl/\*#0͊Jd6 ON'=pV^}thD{K[%jrM tK8;FYSYE 5qdKyBӸϙdlU&HŒ6&BNXL/͑-4kb@ٝ󆊥.Y^u r0P7Gk^$<8!uڮ5u\dW:1%}nt6&<:o{d}J 4C8wH\2&O oݯ6r*%$ޘo)٢@wqG$B 2e9jj%jAϝJktz2O.U%8 v/@dg;_/{0!CKATMfyG m.s CC`}.‚&Tt7i"" 56I>;?Lh5HaoA1üA?OW]tTe`iC[ῡ @* 1mUlI 8*E4퇖WbLsgPV.=aWoȷp$[< nɕT9oyʯ=i\"jry9ݭոD>Ff2˓'G ^m;AoA;;j~.;P| x1KJ.0BRWeyg!)6ώ}[՟*jt畑#i)_:#Ɇ2D½(@ZmrTWř %Kt1GQŻ bX`l#ƒv`d8\Dr|Gs7ԍYxCL DjT|7n` +#ʫ`W yv[p`jTrʼ0=m·' %Q$,)A*E@`YWΟsi7UݠZp q "[@7> -:uF^9[ؾ;ӏ?{4C*("-Hk gV{%:tu>ɁQ,ŏA$ FI|X?!|GQSJ-!ciOKqz}<37n4٣''Mؑ#+}O0O#^Nl؝qs.7EDzn x8aH#>= bJd6۶$me69M(j`ns"ieE~K$щX+sTS`} R|0ggɔ*R*m3~ϓ괵C;i3J/E ^Zl=Ɠ#x42!{=mqh)nn\ a4Θd,潡ƣN}$M~b[i$ĈSW'/G^#a_S$XpB)U<& # hrE8΀= ?q9B1P^Ծ;Z90HrQMu{-0^Xt"365Og7{ S;a$p x?}5RZHE.Z:#f#$-QaT:K"`6L_+Aium dCCzje9e&T ZwSӌw߾/!&${UԶhg&'S3["AgsȼDFH 'u-ʿ8#OGlub4?60 ;eѳgI6/f BvJ.Ӄ_'*M^ Bk!#0Hǘkv݄ g{m<:4LYN?Kn Ն…q#m헸Y9i'*r嘍FP?aIvH / ~h8?'{Mq\{|K 4 9<,]*?7ՠQۂ:ToyhA^T4BAQ jM8{uxZ$1TQ7'YZ] n0:[r]?7z2itVM:ҙ8e3ɽ\(! f4`jXQziڛ/ÖU4* r\;g9WWxA"WM\cpp=C-=S[h [(T!H6oJ0H)܀ۇݡR3)ܥacx ;V 2#ply+꜄5;1¹'cPt08,oYb}$#tI OLѕP 8E~ލ{Rv!coMY!{]^bҊ9܎J;s& ;HX4wà u;9R3˫8ǒɈa=H byYuLf'1?fcQ=-u7ߍ/mKyL(D"L/ohʗ&b+4[Yt~\7Yr"a#8-/e{]1jCJh_ vB%V& T9"c藇/3򩀁9zd6SET ޙGŤ$24(4D  : @+'c3`wC 8VyV[+_.f"" Xcg{9£WQøqw&(j=9ɠ#!Og/Uf4>`5xR$LT"f%3Evvc {B.fxͮX_)ZZ)=W-0 ?ݘD|wثwJAŶ~ϭNkγXء7+YY>݉P]Sti\]3rw K|I[ yliL7^@.({FŨ̩9(x82Yaf*~y,,{2pP2- U`]whGsM/UhLѨ6,SN?(HԒ><6N8Gٝ‰ފd^jG^ #>˂أQwN[" (ӳ-o\ ga?0Uh~!R{Oϭ ݂#pjqHrH}c-}dht4f4kol_9<@ =۸S&^sװެj>ps_`o" E[AZGug.7׭#@,vrl <կAlkna96t|mڣ@B 186yiۻRdqj |*@Qwt/Ԗ!*"8LN CL-8$ >b*DOaBڊ!ZG9B8DCJa%DԬe&D} j#cl'@>mZL4A35 $ svWs $Dn>yth2$Z봛ػNF5`!oA0+*@ߏ6 }TW4Dó݂M!Fr}rr/{iE9Ov&,FȊ.2qoju-|JYo2KIM1]ʤ+T8 |@i|,Gck>o2ͳ#FDWǰ8=}VNVuhZ*/=*B 2=LHhCr>HPW"85,8}H`9,7}s'[–i:%Q%Q0=™B͓Gqa1B"4 Bh IٶHT堮q0窐]bK(\1a<2r]ݞ3PM oH yN,20_"0`ׯqR]d}G}@M94^ (/:Ћj&<~˼1<1rB `iS#ɞaCyR+ PgZ^A2=kXrNV=˔SUdRҌ &Ji#00B￀vj.A VO~Tg1Ο-$aWũ.]5Ly,wHp7w8RZSdBH扚I8>wl4'4/|[>)%J%ĵ[DҵcdJ봔P Te9vY=\NA$> [O'Kgh -EG:ֿ$JSKlza0/2x94x#=MTl"{ ke$dp\=^U}zĽC>}2 i"ľ<M^IryLI_i )=U 9a,i_l L ]0m+ )"nnF·cq2L#Gbʸ t ->MzRS !BJ,7v~+\9za}RR +p#t*(lL ZVcROYHkSgsd oz!Y=޸pZƕ]C}Y%lQٵ׈9`^.kgqLĸSϏF3s*8 G`!\t7F o~)wdž쮍IPglWΖB[vŵS ;L6~ݪOf K^@V7eQ {\,U]z ,'/]SSnQ8٢z$"mTd! rz-)X/O⣄[&h#u{WL 'T1xt{$25٬.LPX]ceߐs|L; F:{ޝm[x@ F2~q$"z7j cFDwCej.JATfvz5$B*S>_f)1%o$iX5 4n|ˎ `l+ }ϔߖg6g?fHoƦv6YEhm&V#ef|n70t8SOM?.gCz9IbW&b'$]7S oHNZȆڱЪ!*5S寖RmLDGh`%!sn+uQ%LI*gr13_IN ߧwCmeI&]f"j콰;졫> ][`pwk pϚ9/{٩Ӊ>>d9|ۨeXٴ5?nZ*]LNe2J NpCP[j |b$UKuVy9"Nu ךJCVÞ#E*P^U:BwSKӟsݎDńz]I'8IkPEl=N({ދ_=3`,@:|BImR(b xCli婒 YgLZE ,|*)Auyi [|e0%pyR;Ncؒ<@Yv9A^;'Р*D^bIu wCg$ΠTטּQ@"<=,ȑ@Vcfڹi˄hPr:/Q,`(i[҅sKPSLOK7s( `oC fv I}/@Wf\AZjl=;X+:#qͤamJ\cgj4qKַkwzs"xmb)Z?Vr\2!kHTQ`H$*Ob+Z֟w6Jxq cr;TI~6qjoʙ#KI<v=(cxb=sR樿*~5Ig2ZD)|'0ķcs'Z75n^Qy" ; pAĸCi o6XЂJS["nNfK5ec2L]+)Ƅa7 jfPG X5śIS{oyB@L_%&m|Ad~MM?gT z[Xa[Bţ*j*IETh k_% Yx;ll4zFT>#Ǫqp` 3Y6J~]=h$ {}Q 䠘 I\$*6h*.^~,:M;@R(+#¶R'ϺVU{AS\ZZ9䡶*ټhGw}K$> - 1CXh>aKyheգ 8b^obNIIWSnN7̲Ri?*{+2f]C!55t^CmZ@@hT݅:^H`c|fV :l1@'=[ ZHN\-M`#ўվa ʧ2K]F5hs+VQؙ)=5em#T25488NrWboP֙,ꃹ@t]Jk6Zւ (D{8BeA}nooהt?ЭV'}NPET3i JǓiJ{$ 4@3Ey/YS, I Ñw߉ũc" =Ͷ^gP{+D^^}tj+BSϢE@Ou&vy'Tnth;:"h5dX4bN&'4zyAW0|C6CgFH3yU\R0HTfG:ؐ q pjّ5`ŭj' NO9V6G1Pvd _K n5;n}K~``%F 8bi*ff4=3L OҨeߝfWLv8JM:fge׌ɦYX@L ܉oHb/oJKS PDU@`&QuFgt\)~)5ɡ[Dŗ](0})`eA'0%wݤUz- CY 5s)rC`}ik"'oG$h-7̧fpY/HLK PP)ƌc=Yk/Zk!5J! hL9oa\ A*,1fT+`|.(ʭw:bjѠ /;@YufYS>9:t^.dM|0n8i#/PGb4Ox3%f+1ZVmckӫoMRm l^Vgj hzڅˠK1P2mf# <`*T s ilu<= j¯Q#V56#({YC=s5);N+բ;P} 6D.Vad)2 x3"bY .o{ 44 `IJIk*I=]YN48ĉ]CcQ{:}M=RTj1kn?wxwuCM gq.~UaD\ݞ__.(c LޔO?R+Qyb21hT;V̬"N$qĨCvp lC7r66n˰(n_ף} 1 ^_Њ=Uџm@Sfqo5s|P@27YaL?Βi>w22/\E5Xh.+@ךO*2(@&!o*h&ɫ~U\"Be-U1ɘ,yLy6O嘳 qHqb烑J\TLnNFhxY"+;7H]x52'WG+~)!ҭc3f!=o/H~%c009}xSfP+HV!% {*sCt:ٗٮ>|YAD{ЊEֲX'o{^O=^G)f\o &1tD /uC4Ҫ[Օ C4Hr\(RyuNlp57$ĽˀUe&]L Km.FsnC>ت|Oִ+ٌ{k"^KV\m1Z2ccD痽$Лa}oDb!?Lc"޶^ [6P֔V^>q 9 Rk:Z7ES0/<OwLq c<:_Y^+;}J@ 濓3%orR$2k核{uNNN/D $MGs1šn"Wp:4C _ϏDc@2bȢ0SJw:fs_/0B!@>C.m @BB% +Cp=aLڷg׫I7RufSVjڵRIYn6ðchi@-@+" .SVO/-u!ɸ4P x#9BZ#?CC&TOZ4Ͻ$_Z[(F#*$J t+vk3& .Q]P7˓Y"(g*Rheo*C+k@j~5$zl}h| =#:[ҟd>Hd_ =KM;fŻJ}mw3Z霖amR}$r 15/g+gjBXih:i6"RLXhBɤ4eϖK1]PK;`nw>>d EVṙutG|(CML,8ȳiֶxm>)Cuq ܄a\#~ꡎB!f˺gx #"gEHۏbW,hiMu稞VyXKpEH]r Y JE{_ :6{穀Ԕ ~Ƽmep?Bv3Ui G<rV}TREC2Ɏ8#^RR3?iUᳶZlI"ZԊMXiɔgO&ĕ6\Dm9J0޼-ՂAAFe#vAP_̟mJՃTE*w>P@D>()Y%@0_4km]~ ߇\`˛vQq#Ը\=AA\ؐ}8!Ta栁 *Սh-{fI݆WVzI%.R㼮l& c9SA ;<׌oV ,\l|2Z=2e Q06υ1!ZIH,aާE_ՙ"¼ s)HYI((fj#p/E\nK=Y~K qQxm(/T@@% !8I=ݬ=y7ӿi^g± z_;q xb҆O ըz,09/htuų7AҨIc^MfgXj\g>͙}Rm ;cSp ž`M*Tmo8I~Dǭ9l !X2v1g#q|"]KU< y%i5[2fj״9Kkxݡ,Z2FI޷&+}f8*t(39Dا?y 9mQzHz4|!ĤdOǢ!SbRt1lb%q n[[nf 6{*+dW{E[>YGmwsIJ  <( 3E, AbMZ"Hv+k"0m(FdQ.)R ? .^car *z]NkqS'ۿ#gPSJi+{8JxI #1)oCP/? =jX^_L5Cՙ#ccŤY_p:anRںGd ,'Ӎ|]z;;pYH/i? "uaIG۶X0? 8ef}\Rw2AQY`~bULcX ,LuC5=2"MŒiE~x=eED^;ѽk=X4?GWm|ƼܦN )s7cIï]m 1 )>L20 "d4 Ƙ 'o& 6AY+?#40?hdDX'b;JYAc^ÁVa%Qi.8T⮣u}bP#(^d觑i\Ŵ.tG+zgˍw%aY^bHdu:*cPC3`Dzn_TؽBt۱eLZ{Lr8ｄ' 7q 7NKhUi1,?!ilS'j^dL`Z3"pÕy <=xo rd>[_P(wzu'AH_PJF(X7^?k s fd 5^A!J]ɞ9CsXqQ~r΍&D+K>2<"ɧ[-slGyF@KJ3IYX% :*P`{ '*JXӀ p** 1iA'&]I fyGB4`Zcd q1ǩ.Nww\B']zn2~~!c٫G*dzI"!GgA4Jo\nyC)<T:fpHX paVbCuKPV(Yqi[p C!Fpurhg%%(=GJfB%hrs'Ei7fO ug%:b ˛AbǠx0Ȫ2lNdۥ,HB/nTcgY DTn)6!;2E^/PU(9ɍݾ{:_yF9O;JO7#@{;W M\' Iþr|^`!G,_{Hɣ,F=G6YÒ~9:Jը ސCĖ;ufGʰRҹ ܶ2FIcuܴ I=y&ElU 28Nm{pX!ݧ O]qdajiٲ6as&E5rg9 :cL77;X,#_K4:)V&1F/B3e~8.54a[VT ^@.tV{Oq+<Ŝ{ _~Ns.t{Jyr{c9hj/r&mp aI-1'4-> ̆m-9NwfX3bEB2|?8Txd`(N轍'y]:4Gɻ#WфG  f:༎_ :*^dLq"ťŚj!EM\+I,\|k_C=*,OpkH{/j%r;Srm(;!&R/A?9zWCp2{!NM%ĕ[ƈYY Od*!ԅZ(mYXŐK7.i~O)$-a<O"6CfN6D`۠ #5+G2p! G";h~2l/n6MK^."Xci}3&m3=;N ɝ"€ЕZܓb툷u{eiE-@zy=E $1Q{.J®g=Cʼ BT*ޠB'^]/j/wNҶ/e|][]Ɔ8hو#{ZqCH\`0uOB_ tOn*SǾ drXdu[@OT#mFʱcA4lg!NOT-v#\~l5!Ekˁ:6g[:j&kHα9c3'C!sr"Hw^dKs&j8Q^>`fäG%L< ~>!t9 0&K_3S;uo ]фݒI8S_$#E:{fP*Ve;<,ځ: o*I$ 65-PtK"@NjѦA^[ڰ| :doqƟyMPIy!C Oxyk,D).Lx.LFoR*([| tWЯQb8`ceC} cLuVO̫OaH% 2 s6ʴӌ}SH $ˑ`'RPIcsj||z<^ V:e<Q;<40nE];%S;TH ,_W6j^C8 Tkn㿎^~<}"f$2NƘ^)m&$2g!6 3uYxzD[mi9قy}@O_tЭ(bfpv4{„ }U'*- FIg,C,<1:8[ղQnA-I!ۿ ОX0Gs^WBB8:c6QԪ-Tagߵu[Κ\~ :{35*] ?юeeMsu)vFYZpnx# ٮ;m+5q %DI!q rqqɵ^nX:~ ?sϸnVNS KRk\`c%hz Ո#EwG©wRA V-as[<=&kh_m8ڋpFB׋fЕ A )O0 ~ID9:/5`$m'?ȟDj@nٔ rA8؝Ŧ5ɩ߈? Nnupc״%"v9]D ˤ6\+;J*mEe&of?ǎGǬOE|I{ aǴQ}5Z,ߺ*u~^QJF)Pv5Jlq(; %i7r8-F_ 9iBPjCQ|m;gHIsW|5͇1:Rq^ тѤ?E 5jA.Pc*)#GȞU*_& CwN8=] .P|鱂 gKEeG5.޵M8\f)_ 䵠[ٵ@jE-mY)q3ub l@ cl顪%1Oh 09b>౦4 )B39PYkoEKTA}4tWp&ZNzL+`"7m@⇱Qr\Il/DQȘiKm]C8/}oO:{oyW|R /dYe V uemvaa5V_Bfb5OpqrT$m*z8^WB[Q%-wBr/8"U~c1T> vA+@ƓM4CtsRreEd$كO0Y,O|I/L [@;E.*50X t+03n}8iG0""XG75DLي>"A!H1fVUP?YNZcI3<<o#<|X}(7KL%ݽ‰@o [~#8nϧwp;x^NHBl&+ab3fnVĀ1 flK1=Cx5RC(6PlêzOO;݋jU2q6Ig}.H̎, .f<\T!zd]X|nă i#h3}LƑW- D`e׈ĂQ)ҹ+isTP|65_k/0$rƉkVYMK}3пGa> HEqtp\2I9~Ds+:`UX:Ip;RF/?&fqw= HJ=_Kc蕒o)C&}!!<ᡶ@P),Z:c395J(2DiN7;D{u\Utx+qƵ>KfqFR.M5~8IWPhU߿0ep0S)o^/1jқ;ڔ~)ywEb4xVyQ{+O5T Ij\*S3]T)望ͿOwjd⥁1mZ,Viw!"s4Ḛ`񎚧e ̛5y"{I0!8ⷘ# HYԝ:̦hU"_MP cdky.%X&{JdDCS{ 8WO H dt@=2RV0|ES(9}c|V'oȃJsP7+CvMsЧNOi4W+S쑨Pa/ &v\Ba"(pV&W áKQ NRׇ #և`?nSvQ窐[Z,`=mBs|t/TAT "\Le]v~)E(PtU@F{a=CWBөȺ>_׷=a#t~M#:W$}O456NM&i+ɪ&K L;QԢ(aKIJ=0u25kVusč #` :(S1Se)*a0 -^WUE7y}QZڍC`D>"moq)ړx UtnJSmk匿!Zkؾ[-m+3_X-z"`__8䣋hpX׎T'@:M*=S38߲z wiJׅb岨P qxitp4_>|#qu,'ŐCM#Ƴ٥`Ԅ!@,UQH7\ KSl/ԋ<T׿Ȥ %TR =9[r&bl_1xDxu^8:d *nNme"ߤgBbl!{]w*cP% `N i~)ˋ21f@R[Vem>l05B"K#<0qDbp{} bRV_X2x8)]>s'/OE WY+%QV8 w43 -xLApB6+4:9Wi$˅ʝS>oKWIq?'p䃫`E(ZKH8\|JhЏ¿ *rxA"k>KZ;Fg/$=U&hx>qա Px7|V#B)#*LYqDT?ZA*$LLK9Y<W$& P_%b~D^꨷dÑݦ41ܫvC ,)LJLȜ$bl~sNS/vӹx$'{"IJMƵ7rIE8z1B8tU ` _` \8)-&Aȸ!n`f9O!H9< { ?a8D)4rtaIfF]56 `#jxVs{ Yqp*G].ğ]6a+o;1rrwU2=CϽNZT4s!%J4xH0娺#im78ޮJFnw29,")lwޅL^[ urZ:e> J溅?su/إdczFQlBhJ$V}N9񫦺21-'@ڌ6Aل3EtIږF9~)el"V`R~EL5O{ r',aoTT71xh2X<5cMPydm҇rOj1eC |R_ g,=ЛώQw?Cc/JH9+Ci bc~hCbvW6[@w?ŝt6pMPx;Ut_̈́vѨGvi\>ZFd2 l[NJ@# ulu(҈.S3o}R0_7z}%Hoy _]G`.yEW(7'z?2H?ԍMRC|ņ6I m"Q{w1TeK# DS_GSJP,zv;̎j ~At>AZ_~Qjg.4m,hԵSY΢[/}^!U?) ]6% DР?cV",adtR\ |CYLU6ra6g%7k"^T>X&f2LS@:9ɭ`Sq$P{RK)/WIcSxvFt9o".'Hr Xo۴`{xa0>6JTP#@^WmN8"h?uǸ>Q¡2 `My9~_ w'M }TkXvnGg1ЂAnN XCԉw \A%EZ9,ZI(4ϚW138D\ltdTz!g+|/п| Gގ] >g& LyXWVu#K܀K$="m[S:xgm;--U%e;P(И|C\Rtm19eeĵSc WӅ&?b@yS۴=6c"6Yj) T7v XV _O?\aD,=j2 ic"d߰P=aiApwV7H}1XH*32y"\-:r FVǰ3@=x&BdCJ}hF([twcB$;A  \H#tQw`jf!q:(e"sJPa);+Ɇ}1yfrҾ _j0401Do+ɗE$kwFWoI",8OL(PS>,.h;_`UƂ.(u}!–ӵ'("$O?&+|Pn[cɺZ:겢^$vڙ-PsIkQ_W,MFSRH9UdC hDd6Fea>n!\n0d͡ߨ`f&ܷ"X"+6"?ZGBA^)nwU+YAѹN +T坆]bَ+N2[`'7V~<5M1ctKyPbV'˦Z)ELy7+9؀02CSALh$Jf:hTJLۿGL-ņKl&@|}HT#~#Lс/uk `POD9 -=Z/bG\^.uca豭T'a:~+?qSrxCl @a!(Q'PWaFkPMi\5G[mQIw[y_?Dm:@BvQ@ia:6;pF$p;grz; LlFA5+Etf́45Sѧa:xTf6*+CdV<;"U~`{%'T.H/\H0@RgqLI#1Ȟ %qob9b*Z=? *a6H:zVFL摎grϫ' #$GL^pV ~Qԁa2JÒ=C`Gm(5|>5nsᢽ k>g(g.<-5HKV( ftXxa,3Iq<{gz9~4P]z%w*a!Pq:@8[MOHe<Gb븉h蒫P=QR EcYq=I=@i,fupvGLROsm L҅UHZjTQe6`\/|u"W=PPM8ۘaіkZ-KjPȴVq#9m.AEߚdRg7 EGo !ܶ> v I#ٖ`κt$]nUm^aaLӖtIS9Kot_`Ӄw94BfVw8؆vA2 &ij~l = Gb\{oi]^󕓙 PpXѬ|vlg+KHQ#jT[(~rjlY}svK6 ѵ ת X/\?S0ٟLhJ嘑4 Y"?D\Ȁ saOд `f54-zi\_$GP\bh6*r+MZ8'O3*FrH4X=Q_?Ct(n'9ejgO Ψ8S-'IO,ʕP@2Rߩ]vTan/٩vJB17 +֚Sv^ q k҇vMӔ5qQWӹ6ڌHImtʭ^#mbf_$ oE][[;'V= S90(6thk5m56IQdcÉp7yPVS@ :1zoZ:֛஁w0ض5Tֱ!WH3)VĽ$DY9Ymu,-{'|yyÊWQ?djfCkN8f[T06M3ĩ45#)o{|u `\[MN _h&1^hr` fՀtX-~l;;,ĸj | C QF 6?dv{Foj%F#ViUݕ:9|]_nVOh..|&KaDjv3BQK5-gxL |ǀu@BA6=;8ΠECGD,o!K皌:EHίq(r4+51RPT{X{{9}(݅d"L*7Mw#u+m}2fōn|ϿϷmCu@،w,WySh߬7VqOٕ*ƅ-sD /J̓"K\jJBg2.ƏƸ8j (E7"b=+W1zN+128(FK8#TFvjDuX۟ .s_nuus7ҍ nQC  BeVL?|/# _M#iUSTKu'j%Դ3`{e\N0M!' gu:u9LV|=Nd!p4-{kjοp" n+s*Oj8RVȘOxo+P!t|@zV c3B =*8]2*lSG2=/ePYcSXX5$^5x"PO(+RJ}(iњzHP-LkU"8 T? ,ZPWK!G?B+fN Vwvc(ȝ\Ih9PXڜ? ѩ)Z0L1e̳N{XI%.1L3Z쟌>h!hVpAHs 'o&Wk@QI \d.-ޛ~YxdtJ_q9U9ɮ ?/݅4aL#%+Xp=&L #e'xw֍tvL ~o< ul뼢"z/SSJ(,QO%`0t1DDg{H* [cHL{`ʘL5zb(|O3;4uBD [6SWu~i(6Kb%v˫V [U{orrE7A2K\Ff%8#怗.i,ŧq~cJ`Q滜 p9|h'a%`K[6Dx( ^yXӑ+iYc N`x<L=A1U^)&!CN ͽ+b5gJ;)H;~"y6_W'~g[/c¯ptW kP0@ e)_jn5[y;u-zEvAL5LiVB!c3<wA\KږStP@TmyIӖx0V1c9ו(jiC/9&w NIȵSӷ*d,68v :O@yhqkT]o+"?}|OI Qt1Ioh0cXhah=Ž// G:mI6\4Aڈ~|^c)mjAuJ܊J+\#jdaל19A*`x? 2IB=Xٔw;>auEMHߤElw2mb{XG?&N)3 R?{/I,872V0y,C=;{{!G& Wj̓id cZ0kv!k^F[=h6df{=)#v,5&t|,oj8!Qò;zjg)~șLW {돲 8wHZ(*/Q*+Z|Lt3ЦTlEn2IJP&Rx6j'HhwbԜSRGg-4-q2*~NcGcGq|R[TJڳ%~&΂_젵ᮌK Nڎe*vae|ղENXƢ3qOGM+zPnFD+-3Ե`|_D4D Y8{)7V-Fn-GA%֣B z2;%;NLqq7HH3oYS!uoObs;363:= 'iIL w HPsp{^6i<~szY,ĬgLM.N@SS1"n[aBE +ͷ`r .-0z>#EH!f/Q(;&Zo^3Z^D%t* vÍOώ9*v&*-.\+ۊn5UQ1K|bg0h' A8*s3՚/+Mq,(zxqHTn3>bcHU!q&qz%_j ᝵Cz0|Q{,eKO9PN0PfV:(,֠QKchvq axή\6sρ5`4 KWh/#7dz*pTbCPQ 5ƀlZ#'4rh;"-2@ d"];R"=83d`JGTCQMMq5e[x &J(k<e ,vwp#AyO+b*Tzs=.b"rST^3G~VS+ Mՠ`AǟP9EHml)EIp&c6xocpI?,%HG{LV#3_unhj֥Cj HR#yW;]m }%_;(\i ,y@k&qiy;fQa[G<*1E}A 27jc(G`@ic%l+f*6ްp9t*۶F=h<cLᖢ'E7fW㽄OS*M07F#~i&EQu/ː ZFXl_cQ`b C"{PZpɜፊE w25N׭=$k,Ն1% X{#6qtqAcr6Bt{it2F]@tbq[9N\X'Gj0V^X*eЁ${2$XfowxӃ2?FkVA! q@>!f ՙp,hY.nLQhJ';HaT{># b~٨+H{J]/|t$|G 5WE rraFjm'm䭘W~.IWo}W'5(H Dx摜BAW8΁UnI6־c.9=ZI͍t2HJM:BJ,[8^{~/s28xDgr3\ޥuN' ?C*rP&q~!a`Afidv|d`k=4ޜ8@.K #đCwܟH)}Ht3i.5[vf:]#a_2YU7 HzIԸt^b/z#Xt3|qEĹ͑.1)I92SaCWϳa7s7N$# gg2Dfk=[H)Gt+UEj"^5FrhrE6A\8IM/D͍WEDXWW|1 ]VeDaF԰/ b(IP"@Ƞ !O+T-ԈzPEeM%b-drL2XB4-3HJ >򆱗*c8|"Y~]nKjl_6'0#vЦ8j ++BbȚ"h>$Q*ݕYͅ@蛛ٮu+p?_GI^qݔG?5[qB-"hTcH>ئ}'Dv!~$!@ડ <2Cv\zhgucwH>Q6_At̀c )ۛ O#+9M,R케fL"6LUE6~4Xt:uT3/|[ZeM8'z[c 0ìɞg urar7Tv²@ m> sҴt@CtC܈3ȜNSt8)[Q xf^/RR)q=Ma .l*Kۥr*\ U."oL|){hlt+: HR)C$DVP:=J,ɋ *_ fަca8![[ǵ΢Gd͹W};2Ozߋ/WTaE7BvIxR\ 5XMnB=1N`PXZ'%~IWs'Sҟv ~cf8ֹAX?q4V""]@o 6ppMNf&Qo\MlN 9LGʫB N̛w$(R;:ݐzl^Yw4E}V@OXa=D7:堛td KY7 B600 vccrnWy<ү1*Gz+ngdR,:Ëa犷fyjTтV . =Ou54Hv07 ]_ӎzL4CR'%ؼz'wkr~gˋ3~6u7*v 3B†&[_B59{ mu]q؉5[&;Rn?S>*#-[Ht\bθ'+JT>FPbL\z9<*2!oIJ }''Cg?,:a JōE>c%5?"5#f(UE YB2GV5-CD8EYwӳjV5N3Ci|%j('+3~%2Mrb;$F2"S7N5} (y:d)hBR]—zUW,Xne']tqrJg3yhp`빜ٚ[cz蔌l`F*b#S~qϽ u]1s #2Qm0IU$.߱Tx%0WpIJ 9'}-9<--YU*A΋|'H8xΟ. ũ80);C麰R8i3خ[:y |ݷq/ /WGYwGoj㐺PYC/V #gw MI!],Ur.c.ꟅC({NJ;3%q6ŊXD1&2wwUXpTmDtwݖ <%Bg{DEuG'?0J=48Cہ6;oq1W|cigM_=E?Z}AWnAZ&( 6\DziɼQg^udݱ%6ĠUW`4ߚPnڂc?_ w+#H1  dS_U;,VJC\=ZX@Ǚ\&uJp|(2ߖFqG j 0ǿI ]E7S Mm%wq2`QQ11O]NqXr tIO$m"b:POZRwNCW R u+vI%l1ƂdZlI14d4&0TjBBvݓAg@2J_Gk$Xӻ'oP_0&AwD=MA9h2T:@ꉑ~H_EVbaXA`Pn(jiP1zWc gJkp-77rKuUx-R)'l 6[ {@F ?2`NkH:AD| ӂ P }c cc[ Y( ){425@ų' J6L>{יQ]vʎ:wڒ'{fVd->/W5b0R z̈́dEb;G }|k;Պv#I% 楫mHgTVи૵-w} Xb@. :,0픓]5 BXqاq(hgUp|}߰QyѥINk>WVZv/Ie=2&wD'\i{i9T(UVS)!⺌ +4T>2!]LkzNz-}C5:'!+U^:Y|[]Q|⮬|a\^SpJ엞xz#ìj!OPXH:揣y{@Ih}ze" ^"Y)"Ԓi_#4Dϱ+1`>2} ʛ$n|A&%'49}=!V2w,J 5DuQ {!2do-6D*Ǯ^*&sj1C׼nVԌ L34S:l)-I_681{^TjAVys5brfe^߶Åc :: F nVx$EhVwNS|~gs/iդZ.t* fb漕%#Oݭ8}b؈bR`8dWsa=Pˣ?zd"ܓ#V^9ӅJg=H }1Z\ƞE/ES)P{4X=ͻ_W䀜v?oj;5_${.۶ceк3Ml0++SUGϒ 074HMyf  R)5p9"feQlĚ{B>t+Ǚ&_lC,Mѣ(m~bV|2/zĄSXh#nBt12@gFbŘ|%#u w_P=P/~1F܀,."aYZuwIܱ#lav$#2,xXu@9K!='Yfz>HQdQ'%Zc@fLo։5VpZ{8 ՛9sAkƄ33W!Z#+m_-WҘ"„Z_a!ddHg#z;ieI%q^>>b-kN}'gL>fD'M8pע ꝟ" SЬlm \cդSL/w&PϾcJAi,

1(1^%!PxŀگH!H,Pc^ v"TQ=3y R2ս2q+cskck3Ʊ2?&Wᶝ1ΰ^Z6=H(BoΩ4wDO\m[/Ax|v!hojP? 5P G $*s` ٫X Nq\C˰U{:]ѮQmRF?9#H]Yz>P~C4 )=lVx=$\ե8$h6ȅ&V|7J39cţ [[-0C*@tQ*Qt%>c7}3u _3ljMI_S|-z Z&ǁT3TEA XM?2ꥯ擋їQrW;͹@R(<%rqJCZKF82 F%z%;-o75z*Qw,$!!Ot>BϷyobMEzNȪtJ?ލE ׿T)],L̡dk]˽GxDa7RD˜HӥG# O#<|EGNϲd ɧq-v oMܣ*3,[Hy2H]W*E+2)7BAEYt!Sm`JiX> Zڍ a1]5N432~%IҦ /_[府%QD<'&vvJNGXx+G$y}Lxw`"2!y4%3"*qp*/ ʧLI"_C`㌅^dm+o>D '~:?R5C[n* =_G!>MJrY*_/;ZRl /}Ҏ#ySP_rʊ@NpKRs>L-1_9]axFقZw~sJiűb؋?b%_% sHG9~mAsNKT2_ 333vIJ7) 3=:le?+UЖ' ,G(PDlQFW[Fs/" K&57=ᶜJP6zX_4lP3gQ:$/!V:bJ`9C2 [m4#L8*D)D/s_-09F"(\MJsb "~U9+yBI T_>rAc :8GMn,RiVk u/"ű:©4R@!7k U`As;bZ9 [p _juW*Q>:xn:wJ2WC5;b^E4x#ō.P٩]JC\"l nTY5!}ZbEǗɗc=qΖ5a2 a0Sƪ:sMnUxQ0slèFqf(Ñ7;g%ƾ RfGlZUB"n] U0[+ō"ќzs3twXM$n@zG҃1͖(s,^9ڏh蜻i oC:g%O6ROJ~uQ\^H0Gcn1N?qq_NV9/ p1$lNB0&D HW{]&kjdd}[9M aez`/P4dSV>3<[MaJ`W* FD%SIiiiE[mŲ*fĥ,jlyPh+n<]U\YK\J׍\۶d__H~R̤ jɗ!X; O uzi^Zdc8֒`Hm^8n9qݱ,J"BYTI87C'v;w !v ɯ~):t`aX9_wgZ50.x/ÏZ<\ `@Đ_rZὄ 8ҔD%Ig tݥ'(|bHAQS&/9,:6j[ Ef|rnfvf=CcL6 J>,|1xה[,/{sު?dO}&蝅M(#||D} 2dptMmK7Mj{N5h8.G__5hEX^4r ϾՒlRDG% .g. EhMWJ"~;f=6fx^~v⤸JZ`VuDބ@UW8w "LUǘN&3TC~qi{/^j"Chek,9x%ZEZuü "י+r0oMdèa_hAb*ym\1"}U2$RF` JxMt%>.9`NUڝh&'䝕<}w%aIln `j]_Rs+ɱE`.FcV%$}} clUSb?@UG}Vf ?Y'+3 ^Wh5-G$ս76151j]_r\Vu̪ȱ#)`X_`OAor !TG'@[g #^=;mq@{IWLcW*5Cpڅhv@aAd;eIպG+McA3iN;h*,jiSk.L7C 3go/T pM$Z ND4, ylgLkǫ<-N҉$<`Hbt#7]T_(^a oUmS-wϴK|mkd] ߸ZJj81{ț{I D~F?hjq,f৊$ ȘTmow31mXZ9:xz6lUMC, VBo嚐 +[%>yefT[?Гr)" T-ο̆*|Q1/LY|!ւS͐3} jb^ݸ'ZE>AЏm֑!+)ȏZ~6,y{d :{!vLXqGf#ꆢUJ!QKjS+L7~fۮPMo}GRײEN)bΟܶSGw=8O3}˕R)P^̷xp똆QQ|OSlb\\`mt6j3J.$Gp 15r`w-VCx =AkEg8M8y" ٫pdkUFĈ^񍠁ƳDGlRq{[7k0޼Ǭi1$Ri0wY O~!^Ƶ^Cѫ-ܢIY,  #Y7 cH&Qp _*W(* VJ+/],|6XAL7ᢚER FҫAk8yIB[臛]/=r{in/v=< ':'[:$s^{LN{'1%OsCp4ѫX0iAnԍBc!0xGho'&l?L)BMf־z;Nn~ lkRڠbl: TڐG FSG<я*mV%ZTE@] }ImPJRh̫כ*aPw4+3\96o&[/u]쳈FFk%4 V:\ou&;8jҤ%RGʡ'nrB/221Vu/O;UVqձpIJ7m둿إK`X61j47;7wor40:WIfeX/De15^sCKx'p"z`j_~8} G+0D0U؟ԃ/~0kr`T{{?o<&Р$^~OS/3ؕ'$9fs!;ȂBe)QJ((SP&8sixBYǕf]lwЫo4wrR HÞt$@=MFH-Spӥ͊@"s2}FQ V\5x6 (*j@FJ^ܔ/M}Ѩ/= iɊOKxSU{7W l+R L=IKʄej[A],屜/}S$WiCL nB<OQit y2ЇMׅ5ϧdi#مb"7E{8P/ 59P&gO;p˂GXFSf^y. (59hh 3"@ `gL{\9kո \ߏ.%M;$"{F_\ickO磶>A藍f6@}mF[DŽO(Ho2`*-mF|1RM6c#HU&"yyn̠L(p3pο{K0L>.3/smPvR"vT_mp1)IݗFgƊ;M{ϔlĩ=Z@ūRRr`5fuW52|?uKBnQ^/tΨH-Orn,Ҫ?S7?Xތg QDT8AiäQTT讽CށT/"5$\+ wipH':-vROBO1g3t]Cgum/Jd fW߷7953iS?TlxhW 5̀~E ƴMlHB,D'cPDU{4_z4w2׷N1ggFI;LhT])c B-&I]aVf|sUO'k\߸o8GKdjw[0A+q2yd0rXuYEf  /xG 5&ş]q ۩?Cl:yxóG\A P" 4Gq.qmŃ]Im>m\?6Ġs(_6d%@ )p ˃ށ) J?M묫_on?dc6$-j,t6/w+O[q.*Ǒ~XBjPL*.gmz္{cyiW֭([Ng1'`"Z6 J! 7VgGfZ7:U)H+N+>nP="Msn*5Lל8QQ}XH>5| Z A99QlPr(1#6„rdZv[jB{9v1hHXMgvݿC 92}MIok;/s$MsxR 0 4\ODմMRl)Ti\+I UŹ[ҺI1(TaDVUf )Zv+f8=e56xI*#)CHf r8MN7VmXƨ3P<]T9R"(a;=?ݧ_WР`fʺRޤZs)&|5%K}W+^ʏwb*k LEYe">޿-t% M[~&Se^1,Z#J@ӽ?Fo#tg+e,_F@<>UUKiG"߅`$-N_f<+F*vJ%u(1B_~'%*v&D+yRTs]`{1&\0_d1ƘQ_F!K|{ҭ <=ۧd=b\ !HujllSB$|Ȫ^/N9!i]LzeAczbʿ:`O/J)>0]$:J7+L>|$*8saH&d2 f\}XUi(/z*ĔR~ҥz$f#QA]ۃcdѝeTtʷ|(*w ߤ!x̬%8E-L-k?UpӖ\~ fPwyLF2>=>8*2[fﬕ:  ڞ[أަhΠ?B,d ;ꝢVA'[ؿ U-l,!D~y o8$S9LtZG.^ّF#=E%KUz 9s*X &3̞Ҧ$”cs?dkz&L=,N'jVfVS nhPMPrm72bZ6y@Nr:MziQs-D0oɨ^!to ٟDŽ2wҹ _r=~`;߫ gLOWg,摲gpO$Oť? MΨ->4BLj sUcRJGSQ0>VӐ4#F HN>FjmA+"z]Febv7nKX (17)nlYU O]Zx{;a2A6&[k*IGos IWaS(ҟSҮ%G')zDQ[%tyڛ/L)Rfv/ٗg+:媇?<΂ %\4:$Ԁ@āw%HH@5`E^A'J;ej(ݽT"!P{ҍ VYiL$jh -& 8Q{DJ[;ba*=#p;o  Zz%!Qh窱vc{JSGKYO^(ƪj9%x 5fKCD!u);g U%8?T/~h@aS7{ݤ'na曗DCpAâERͰ7l.TKNʵj0Qİ ZnJ;U LNp h4 >ۍ-3Vc,wtUl#z:)Bpݤx`}l*CT`[,A_R2ؿTa.zAkF|FHu*uYSIJcSVџ%ī@VF8bw{;?Eܒ@AM)fqRTok"9HZM#U&L+wzE"P>v_vB s,iOsN1ڥc٠)+rns3l}4yJR|'Ң" rGf6 qK+%7/ /b9 F)8M *[4JaUAlf)}!T{c`֯ 1ͅE-S>#D#R8vA=j Y =+=$8~ljzqSGTu@멣Sև4m IiONBvbM3ڭYe`9WR_9K7 ոkĩG `s3乲Zsf*ЧH63uBg1z(Ix ,P_- T@ia3`8(O \f$O36o-iaJ(wa)sy/vW}:^<do3:>ѫުGj;NM .vKN?pI}=aB fw{PC9*:N]6&*To)x!n3l 1tSR`gtP'mrb FG^HRd_ުѓkH/q_s5 l^HVF?-FW}LB`NJC'#+ͭ+dnO*Qli$6Q?^e`7 iL]l1\Ujk.Dv|2S'nJU ͖ail0Y#`/Z q3[Flb>X&#8r熼[ ]3OXѬ&U3IOVicPbf6Rq)3Fag5 /JK`a2@Ar̰z7飄xh50X5kpziurZ;QޟDžˆ ;Ǟɤ`6GNl[+[L5ŖU1^5'Mvw2.I'ȭys$Px9 4ܗ3S)ғ]hE:@%}w6tƘE-Sp21,Ffc1"l"E.kw'I+7%ɔVnH/7B^ T:s iVёiU;[Oݦ#I L(̷Rg;&_}I"^vLoq#UhKdxO GVLzΠ}mOKu3\H&rGhm ZHRc6Lc0I9~zn? WeJo g֚#chŲs'ezp:Z # '1й:BlYb]C!M Ř$~}|R)[h Ɔ7?@הBn(R}xkL_&he6ʸq$[_mNfK̓!1"GMYz| o[^X|0GCаv2o T' ~|2j+j5wZv$Sb;^1&& Ѽ6IOo0 7.qSVcvzpRܻmcDx89\ʯ b`/+*rcT\G+f,BAZ/ΐgĸ~$ZOl|7'>֏$,Ë[P{BAHL|ⅣMrn׎J5Dr]HQk8JLJ#, 9aµzYxڇ&A>AD3@ 'gF Ô3UNAkyyQGEBc݂cq-SC73Up_<ů tZ?ԀlG0#@OE0[.90v g@vO=QF]Ϭ] '$dmЙpiӊ6ߧոВD(#5 ݙIBdVVR[/YmL؇Q*g֞EěsKh|e;I+p5.s\N | ZAի"N{ {qp( 8J9̶ۀ<-w5QG~v )7H*"3AvdA$nb5g.V1B(Nک'2`, n#LXf>a} fl#"4Mg9"Y"Qs.:~k-g^;(4Ol#iHfi ,,\k'*ϽJՋ%؊}԰Q4=N"tF\#xZOF\T2N7T|w>Tƚχ 7su{h(k/-T l`f/\6<l _L: y08b~r,bMDž5,V-4g9<!Hn–l!bKBwUo)1rCChґ_~hLJɇ\$)[㹘D,a"IT w,ގii }AX晝Md G%iHޥHYu`}+k pg@'UnGg5ybSn7 ÑU%{q쫕šǦRsAʉBR:DѴKce=(v-|Gva{Wa HG⽵JAMUi`%迺jN.RL{DU nW[ds/TEiV>;Ը3t傫EtY"}`kɃ5Ak'Ҝб2B`Cǯ h`Mmɏ3:AYqחs[4bD$_7+QƫO݊Kb3P?\z-֋ tPrh(Pέb,#.+{X-go8BkMc4"eɐa!.>67ɻ1u_Gy}ZJP+xBR3[]~Wk`Re2`ua%."0$l$ζNrn$!Áצ5w,z:oC0/BҸ@TuY!u>2 A~7}7ec؝J=dc3bܢ:\NhB# RV}E'|ڨ([yM"nBR*u -CUKF>w{'Prw}hU[JPڼ{U=E~bh+{Z^U 6Oϣ=%Niٔ8 շZ9?PcLXQx1Z@P+'N3^]vA - 7x ?L˩6m{, DUHn?Ye q/ȴQS?+=֟~X2msC &j.3^e{!X,*ոG nzebV z`Ek<,+# /47k*MfD3j܆{Ȍ=ǃ|.@0W0TEhjgP\j?>Aҕ$E] Q32jutGP4;Za)T),n8$`A,62:J c?<uP/(UWsz6O>=ah;xݜx+n~'KGk@Ũ-?X8sX0V.1t.>mIk`; WF ΩN7x, 0i*E1SZq'5|!}'AaF@EfN?6"^bPaV2d.lF<T^|qd`EO^2 /l B9:.I)+e=o)H83V׉ЍvMȉmNIƥώ0O=u<@ΈI[C4]kJm _YFQ-Bv7c'4EU'$7qkq1ÎB4KE@ER?#z;q%KsӜx jfIdP~Gz@&$1E~~o>[e(*z2+ WK9bHz<_ߨU_t60$j`PB=\ϯmĄH]y%iDB&`d-Ҟ _|UW[z~~1E1vEH/{TCq18\_*󬺜U-xϦ\(гBH2oNm3*d3AjHOPv,3VQr.PT;l$frh3"PdfWͨ]]AnLyk:8όR CkW@q"D@IG+nB ]= .FӁ.]BE~"|ʛt1k0܁Vr*Yl^]M >tN/d,qH_Ԇыo-DJ!ң &>~A_'t`[4E?n3ȾpMH@FRbnyp6XGN۫;u!yP-:ža}~Xvf8w/oKpb3P]u-hXVOQfӃf Y̴CF4mࢤC)jFf:^]! ->@sٓ<gC_414xi8ѫ/½hň&fR@)9T(.CN".iRx F^Ktҏg<,,4k)ʚ O_B>X/8aGfo>#$F.2V_!YQ 5#]v><`[vǏJEyYk;AbC)]qΣGN81^t6lZnr^ڽ:;?~UֈwuYwޣS:>z|?Rp~զ9 kfD;zcDxf?}^ԷbS̽@$@>rfĒײ]R$euB ߩZZ0ڰӡJً+B]ш^g ^)φ'Wb=>S^^5.T5,[C1 ~W`Nfs=x2 i#>|LK*ƽkR*٤2ZfU ;a3z$WWSfLOb*B-S WtҦېl#&.V[Y˯/6M,u?xY-EL9{kƸ;{&o!2!̝V0k ziD;I1} Nt"BH#AqK v䙰p\HpU>gC;|{}~Qk׺_Ux@6Qt,FPfE#m,Xz)CbRg#ɧl>ڙ0>XR#Fߒ# @!l4?лvao-a˱|3! p5'i]1XAC_q@4eu61A8bPSAgtj&ֆƷk`Fi#WF>#)A_GۥZ&SS`yuB>3E&&KIhXr yw?FVϢnLx #Ԇ8KE=n9d#LtVCVإwPIyUƿ4(nV4VpJ~F{R]5d14+^7ʃH\k8Xx(ȲtS9&ɠE[%4izTO2>,%- _??O(J{qA2Z,:UrNbJ)+]Z~t,Lj'{]ig`kd?@ӘؼM34bAsͺIcO \ ؅Ph Ҁ2Q X ܭJ}GYQRPlT!I[@Is8~-Kt5's +h7iy>)Et 4sW&{&Ǔ.nW%J![ڂRz m&ˏ+6!0Zaqաatѐ\Kpto)J%N w>k!-Vt!P"VEHpI$S8<ۿdRܺ9c#6~YSk~g'e :^C ot@QW ޜ6!ư-nW /x8%_ח1yf1[U; ho,gH *_tA-f(f鈧5EB@xP.դ2y.:jzԗw핬 ]QOb?_q$ %X\`V671[WD,T xtn۶ylp֕]\g"*Ek~LIr%aLQuP-,1u/`![ bǞe3l7<ƍK= r,Q>̘q~< )nQ)dE|xjÜL0>>ղ]=létaH $IÓ+l d]Ny$wch: +͹=(q O>/3B] EzHiTx sa1[/RAM;( +!7ʒOdvj;Kr>hLJa+u>%s}>b֎CzURSj tnfy# (yK5t\"HV7o)} u]D:Z1reϴ.?p Z4C \fjnqg ;yyq9 )sw՚M]}99c|2A}g11)78z%E5g +F o %UF}*3K& خP\׆̮oH~pJĶ[LZ w/~B"lE4 n-kU+'؟(:HYM28QB ŋQ$ "vt[y.@荬9U:j3ˋp@@/-&fH \aKȘtfQ(;#j QhxɶD'ฦ,15~cb<0$ wr40S 4 ȡ\; `P=-o$Σ%xmxm.#4y^*6[v) ]kC3l #H1_RJ$DW"w=z}-9ǃs'TG׸AC bXOQT/Qwǐ쿠`(xAem&@eDK Zj4VL*uO*]ŀt4fwwW.&vOM bp8+ŽэA'X]֣ͭ>5覭;J?%ЮwhXH"8o_&1b ;IW]@~ej& &;}#9HݦߴT[q ^ulWށFR| DQd>>ر~E7~/v*Qz *3P]46 Hn)pY~VN,wG-RK1y~0S/0z=T:<@E@ B3T1ꋐocG͇%-txZQ~%6$H*L1!Fgz)r>/{2OEX'w]6W$k,!̀dĊt-<(QH4+ašvC;%舿QXoMg&8x zuu*lbVoy8]叆|=d(RhWh0l9m>%*CY~ԢQaE\ @X|V13'KcO3,x_!]D#^i%~z2 &0s :َM\ H*qO͇#ߢtDHR 0O#*+`J嘥 \NIQ(T'<{2WOUr[ec@}&^8rs`!ZnFR ?Zޅ`{ȲN[|Ev 7]r$)@aBC+֏_P}>@ߺގ!O.o98t$z#l"Un.y"5_Nbev{EO?I!.tJե"Crtbk@GQhv$Y/*lK,zMZ J i:@u4fqWoq6I[]aVh@z ffS(2A-Ktʔ [ixݶ=Ax+9|ӐGɾȖ%ߩx֤q$Q8X՝y:7 n%&IEU"b}bܴٚ6õ;ZʆJ|[)sgJ'| [@W1hr !$Fj_f)ˀ2kZ֝#)}OIE{nqLNqCkEQ0D3 0fwIevajcoԷ;ph" csYڍUdhW!F9<āe#5s2{v!W)aqU*+%X͹#C `e3te$jc#6蛶3a'L6;\i+IYE/ji,{@Q;;AQ"x'IsغUykM{`OF.,~ ܜpnraD՚#8Z$3hJLsṗ8`l̗+fkwNkva!co{])3# [-BkG>?Xd\SQ8e JuZy)²X~q uƗG\iR֓:i4$z9̩bk Ұ̕j2|alo# ŜhiG;b"vcA"cྈ#ӆs{Hv\qLul\m u3xQ<7Rԯ$kī_${8h48ӕXt:FUp@osh$o HGYD< *NM7#g([[NXb=ψ㪊8}c֣mPb@68ܦ)7_$&6:@Fi +H Zs0 baļ1JGC~PR7F\HS0}uJ{[Exg>JL,lEwlS ;lv@V3]ٻ^b~.zywd"l65/z:JBc|{R)V xZ){$]Ҏ܌):?B!_r]zmMkpM:Ռ)\=dSUU,vթW'fea޹i$&UnCRK4;^uk#|-J5ͮ&h&Ibv^N`>TaZ>&L㊣- \uag)?BwǪr=zF:d_l^S,-=T@2OURL`DFƢ&ajĔŹơoKfu0ҧD9kF-Z1ǏRΓYiI+xf#p^nzs'kp5 i>/Af,녰rR ˆzu/5!./TT:(w"F-V(p|^ng񫗘݉#APǹ y.NHQE;⏫svtR T69ļ]lSVQ-Y:?Co0$dnoyE(x)B= 7w(S&zHC"\#M!XgGċyI[iuQ;-cꩭ1ߟF&kX `Ϭ*蚟ٕxNs3qW>jGod;Gn ;)`|$WHubK d{Y]_'qBi!?#آ*Wc(KVŒI-4ۭo쫘&/MkG;\I7..E:CB2[ _U 46h#p  ٠d0rn8\d,ReGZQ74ckt[DD۞H {k{;7-Auם/e=2@dLZ7˽ i[ṫPbc#SU1'*6j}9߳A9f7-W}(SmLd$)`.Ʊ/YC.ik@E4~rNA wo0J'2*0X-QE~i3ms6ͤcO2qdXZfB":v,,OB BFkk漕"28vUn&kҩ29JG31|m !pkـ2;(7Hl{zǤC,i_@m£iqDZUx(+ҵbyndW=<]-|H wd'9kfEٍ/u׮QyW*I;;fS6s7JK ]i,u}{Hsߘ8-3Pю>'JoZyUnx|4l2,ӗ[bzZPWbz- )$/(@8_EJeפֿ}Po_6J1!pzO/II;$ŤR+7 u׼!5| lyE7)i&t:!;g>U`AIt:IyuIӈDbpGkf${=Z+vl7;?ߝeCM y iPwsZv@C>\n"-uq̓D\.hph݄6@baCPDls(<f* m vAj=K^MGǖڒ.0ыǮn#J-P̸crVv(&o)~ѴԥI?*.R~U'Fa΄ò4F[9BlS''0r7{Eo-\DH4p+R?J50 d\O\^3oUx&5'JFW5y?T\V ewn;OXVie_P+?B*RS.?A|f>Sn*4TP4ROsyݗ5T덈񊘾,,>mӻ+#-bE_av|H'jeboZ D߉UneۛpyC$d3k@` 't6EAjB@ˮdƜeJwZ-]dNc*..{-x~^UV5e-יj+%% bȄL3M1 $gzB1_sϵHrc4ÿL 5@G~oտG3T0d=|"F~8X',uqQ5Pxg|;bޏ"|س Ұ7Hky9UV{7e{_Q U$U{d {(r(ܮ$[-ռv٢e3fPpna`VRƄ2 g4_L} (vIW_\a|MtGT"ϡ ʹVUEq,|xZYT/vDjX5ևHt ^=Ѳfri[J91ª4gaj,~~4|B2s%gW`=vmb5 N4vRebC6|z,WYɻxu̙Nw·3Vދ Vľ~s.uD\/pEܸtdB3hE VB ֎4rv2% ot4Ρp"]z| 5WW+%h)fYě4T忕tSe"~b Y] 7K@xbRL(­M \_'H(L{|: /Ҹ{Z4f^Nua6tUg5|h/2ה6?ý9EhfZ)Gݒ=,0=YyXdg=mKEFJ<;(sZ@PC8?Ce.avW'GׇwCClNLAjuY.Kx:D4PpD usVyn# -)?7֢0#١X21kꜞL?e`ÏmP.-u2W_=Zá X to*Q6T46J7tZT$X|"e/jlla)qq '_df؞K`q/U,ZFQÀj5tJ*a]0ZD btȄhR]GˬѮşl|iq=ECI) EcYl38VMMlV|.2MLȅ+;V1GޝBBY!u>"h]{DUղɇ|V>ϓ%T):C2;q?]8!R,zM2hHza`{WVS\*5^! Z57#xEޖd}+{nf֓99-›p*q}H9q=G=P[G|hu*] N\zr#$0r<]D~@®бK SCmh~ J&hB WkM^#8ZOr6kщŴՓ2aLg.)v_|dyUWx43EE:ZF9pqRVA˚%ˆ^8{qf=H+TdIu,أ[Xs~ʹn@5bGbi ZqN˲n)%$PJ<~#eI gE>^F\k+cZA&-I< =(9-ھ^⍞r=J٥y^5|?zn#0c<F'-S*rF*e!7tqN\ר֦[r>@8r@P5=ODԳO/Y Bs?t*jEI؜a┚ޝwTȫ;sft*!I"V X@5ԜHbB|t25bT)\ЎϽ^2q)ɞڌV +y]ZUz ̫d(y4!FDaRmZq:Bp%x/$lsM-Df}hod)ٴg?Y9;C^S?6f hMV,Krw9i*# ϹATZxqB%\^x1!7%EًO'J6ڢ|6ho E|+d gDszxRw⃚^4Ӓ.țHZ]C-¦˙DZRJ brIk: >?@r9ѫi)Iܑ}u +?93z!\ZLκґTO1aK @-kd,9jDrCyͻ DQuʔeyr@fž~M?{`xu*a.h+*#$[R!3$;2]HtMND<.(7 {N)5݇Vq@5UZiHq{ouA\DBk XlYlX>?F[K_b#R!3;D6yUe~]י>rT~R;nC]?7*EJS7C", ڙNjnK i67X ^X 1ٝRz DzG1vfUHUX֯akmF(f`/wzrm.(@gN STS9F";oU|9`{L"O)U{}@\nX 9D#?ˠO=صxE Vx#j0lxxf↥ώ!Iכ0/)i P{Hh<~'=9ư|CD,gE,~ۏ}jy2`-tkrw?nx.L՞0;(끒+XƍȻbЎ°ꊚB8ɱAl:M+JSrL6i֯VBzkMLfƚ A;@41d;g8DBmJ}d.ٮ[.lUF4}sr}wڏm>#{^[ K8|;~Q0Yc3HuJN k_ϛ/1 .,J,}%׶z G &D3ݟg,0Ў=XԋT"+t>O!L3^qhZV|'"GWvZIE5f_YTD 7$7^5w9*=9w>q7KOF nXSwߍv"I\*er*[+),ŰIjkvїJë3j '^\)-dpƄo:e^ -U@4 x6ŵ 'UTBU!!kiR${Ed M@]o~}v:`* =N)@S{W vC0g S>a%0.l4#InB0ȞXsBM]eZ#}#EKOܭ2n>A47cqԘ +l0ԋvo 1ez@s\ZBCgɗQ%eZ yr6=lmVNCyƵaڀnYV{ލ(1,cΊJ=$"|c,NF̀ p3MȖ#P-:gW8/%`pdPZ@t+16yEo00м>"A ,%vN5&*Wsk"KO C)e=G6^*pN=9 ,uڵSfCȶ-LC&S0ޛ ֮*(TC[G9Dz:카 DdHIvS-X8B~6ōm_2F~YI p4Y S692HS!Cfgw$u@cPw 鞖M1mݠt&Q@DW`0U$$,Ne}]s(&/@HdzBRT+='>:EfJxgW2F/V2͞45 ,WȜZjL-\o̩xG,s_ NV$p{gJ. E7#}2w(΁EX"?@|-#g?-cbV}tu!7XWp]5!f`5_sf"{_ґVܺJ~cE$˴tҭ؃N` y2ؑ_.cf,Y]D_%V߻חʧ$W+'mוA!ےSoZ^*E\keD.*zq.Y:(,?C:0023Uva-%Yc?,NDGBdPħqF +"̍WL~-|,M2qn7hrDE ݈^'.'K]FwBm_(qtmx>@I!ɤ q'o(2M]_&(nic*56(-?o @ud7 ǹ1u6ڱkP $0=c h]1ЯOvO J/k:'+ͮS%XҊ{`oNf9XpgCAm\)`:q^~e!FXok_ܸeJ@C&{94d~r`i*"ntl@ {s@i[a4kWPrql: BV|}ݬz&ܪM DXcL2~CR_-g1`64g?E|c+׻fe`l8%nD8&bϖyZA4W-(#LH+[ll`!vg=3-7[FC ȷvW/'Xw3kr*m P**:VȆ܋5sTw #\*- Yn4,-ܚn#Hk- \.&tdjQӋw v75,+ȪG]8y~BLF7-Z %3[ [^Ʌ+]H^&=^RLfL}NEQRی^?>T0xk^ R?Zm:@1 FC0grkAG[tXS0LGGʼnK2u'Y&ZXIz&+Vy[ro[MoG`!+Q&3pۨ'b` u!_Qu6ڗS!zQ0 ^ԥ^2~ 'SCe۷h&DI2WQYFFA3xxOW畟P9HP!C#X6qaRSF&;񣣰A/-֊y+` mEפkJFo6g%A$fm7kGUnbxWԎȊt48s=K%j:ωEVrL'K嫓 12ڏrFcl"}*RY-a>d$p^JvcYm?ЦZꇨIid])_oWL CYδQBx=z˴)ьpлzB/`gEj]*,c-|{sdxdU%(2pG ~&QQDS-'-h1wo1FCov<9q;yrEp0֠sNiX'O'A9S |]] TـSP?(Cb},R%GV؀dttD 3g ,@DU kM$glhhwC2GkX+pYy<"t}ϞE(b5q٩h̎iy>F2O57.x 7aU8\j4|30* ʟwJ.%TL((mG^͆DIiSc^:}Q<'R񳬘~3lHsEʆTS?f#Vtf:7&6Z"05xojf#OT`8e˶ܙ`LtH/l\M O&IJeNy@O1IH/sѮ]'3n8q[x/'pp~b9.S"ٳGDGpLjՑ@ܨ*m@Т5|{jե`2#ܻnAtt3+!#`r+6 L0˳~fy\,n;@ۥ N`{v mf`@9w:]Af^`Ac.1| d=G+B("wV'P/].BqŇ WiNIM3V]!zGEvfq,;D#=t&^{$jh$=#ƧEp[V+>@ 'V%e{hp;dejBj8 ,HźW5+0A.zJ Z$aOc.v'= /|/+M"hH\>sM>SXJ$s7#DI[L)9ϞJRj 7Q圝S^g]@چ@S[+UuDvl[ -h=֠@saÙpͨB5oKOW t`[aVQ$1`:\L{6E @y nX/9X\7CY 5-%JTn±>O\KѿE ( Ĵ/-G _r{Ψi~t8,Ś(-2 'sHJs_* _p FYHhdOMd¶{epƒ'bD9HyJ`̸`\4\Ѿ0Ѥ%':Mru۟N;;n[ "$`x&OVh'軘׷QўG tەdZ0vE, 7$.8a)Oq~3-ϴp\ o>$A"۴)|,j ,yiA =ZZ|U'La=LS(B8\͒/{m|o~ڛ=j m u0oUO+Gʖ% bNF[~|oFK †,,J(0N=vPVU<;rn*2y\Vsa6M?CyJV")Ati6u>fpjWߍMxo~E"e\baYȒqBZP@UFiكxxbnZ/N8: V߲,kr4NZt]x#duQHkxt- C&=n<1lbq!q ߃;ԸIY>;%id:t>Mo?| nν%@[_īvP5MrM!%[92G= |8y9u'gE@mYb@hd +ٌ( DyN~ :|IQƏwI*F!kg$}K5B"ܲP7akx#Qi20aM)^Ǵ`Xr ȇ}7;L,HkKC|dZjP) 9vUpJZd֙@ޙ96I܈33>Q 6J&Kw[3%-Z]ctMMcPhoS9PhġTl<$@Ř֤=]jM>ิ`mZ};uT2t{sȴLɳ*њO<G bJ򦟝V`\BsN闌H3Vm0, +m ! xdg>iP''lridn_2S꾔n.勨HFyWk_Y7©1h1XVw5Y}:> \`n?s|hik@_zw57geXrbmV a/Gi lm0*DE׍_VANO|YrX:LT ΗB6'^] Qg[ 羱lezNtI >clzuJ}Ú\L19~޵Prl؎5^!ble+3cۡdߊ"є(2[bJ9,W8ЗYK5#Tt jXW>6[#_c:ixtBwH5m'ha[M-LZ(q̈́/D{gkz>FQΰУElDcWȦ<_of<Ք ֈ)^tD_Ipch%iEfUHOSz3~M Dv8f`9GFGqjX9UzUlE7yڈD@\"Cy]\l)S%/: !e;&\w 1E>]c6ׅRESc  ^ x7}g;R)27aCwm 5-ٳ74xN4fgErDGk6oЇ}GS >:@@[ad$Bepu)uEi {ڀ}d/!(wc1.iNdq1'L!*d`~lUlE^ӊ36)yol$HLwHu h1N ^ ZҤS\q+Qnz";Wh;˘ё X5z4^X㿄c*? CB7 &iuH^8SN2D|lo3{7G=D,{KA?h II)HKs6>n/ƽ!\\ ; YBEiޒ gUh$ܴq঻Df2nF%ZHQ̅{8]j]D!vpl<=+fN>rъ+TeF8$j41񶝔 'us29Br#rs}!|hPpF {*`i\[0Y/ ~hM0,6(F?d R5--_\Ԣ ah7īP?E+sl / d\7P&>p)ϗ*TkыkKlÔ)! 'zݵ( ؕ$jc"l+HC75S[l|Lgs,QkB#=V*yirQ7y 6eoh||-T6h (_/wNqCa}$_75Aa 2_;eh(VjG?/:jh%) bh01m[#D]>#z˧ήҡL&bnf#˯kbJ9O.|:o9TVpM6/QB0l̨h7,d,N/Z`\N٩zy,m%3I[Le_Og?}@xE@+;>g?QUmvq~6 @?taL*9C |job7Vq^H੊*dMyN&5+L1^v eNBMJUxeΙ MsrC %3Ph)hIͭQ;# ͋Ld,'J͖c}UiyY1## c]qVj;Ҵ#p;!;p4R6^-GJF IFHwo7]QOo!&gqv.@8~P"釐)o|#d\6`Uay{*tW!0pù-m>OeU|TH;^Z\^" 2SH!ފcE]L@#N.Q1Em['X֓[Rt_,0eȨu+v|oͲ~7]'-,qCk`ad$(WYH=*?0aq]%-`TUp pD"nD0^Oڒ04)`O>]r\ze񊵤r72T})2::/Qd2 OY#̿c:r>| mƖ9g[j/)Kr5nDSn\(CT=8iD&a}~TI(lcfilV+ȑbwYbkQ먦2?^踜镪߻GJg=Uc k P3^lLb{b={q1*C=W70"(Yf7i~<;>TLKlA#`Di1.NYIeZ)ggF3:2Y\Z(T÷m*IZHHHf/8 ,Yɏ0@ebTDm4()Qh[ S 㹘{lS."vv6cǏikxɇq8(ydaI%ڿ 8瘏b* nM{̩_wry<tJMMUm{*JD3 kp-TkO mL2 #<|bцGP/|+ ÆdgTZ_IB%хi0r\.$Ev3#v3 PeCG5@ۂ4bY&._t+.!<eO WyIoW M2vW@0bw39@lֆ HnĽ%4ҥxWUPdBlX--;e~Ҳ PhD %b'1"6pbǺMb:$Ϡߔߝݍj^~vz#kv# * ߨI0=&oHl:]D*Hȹ( ,]r2J <;&k=NFʂ+g.}Couh ֺQ2P}HLtӈ>5D-J^W@jS0Ԧ:,QQXk „0U>NňkbD٢ 9t%>1U|bZ֨*~2# e0׏oj7C~̜xQ^]5/ZJ5&0Wɢ/\x {M8vY vZ)p2K<;Pp1کn*\;3f]Sr|{nw\ 'axiDzTw壄'';ή-nZ+U>Cy X͌d̹2(nvx( gW~:^/S*(l+4>xe.䍆G,g+*o (LAbV;0kr94f[źX݀s hR]Uh}h\]3 .CC @b~= )}/Tgѻ?mO! ՌseQEj^||iDe–p=q8҄M*7Dm\9/}V:kqwBhN 2B~Jgh%O{%A.p*4+ ?ȋ;`4FgT fGL$(xifVNec6ʂ\y?I-i&b:}B{V 9Uc)+Xv!R,SIԍͷacc{A;q"z=[{rx2nځKͶ.e"3꿴gE#t?'IN:9fNyigP*9֥.BVW}Njd$N ū*^p2MMa8 Mo9˰4 5%h0.YXٔ3-kE7}OH=baؘ nQ3D2zeն" ) \߉\4ltṠfJNM O%ͩbk[O|l{ObN^R|Z̘C/ی"Kό}Eod[y ?D_L )񶺠xt8C;->ȫy䊙]MQqJKz2Ǵ!W: HfOfoG!b05d?gco6ܙlS(Y)廄yxo=E(%J-j)zTPZ|H$sZ@ Qs7l *{C5PBL*ԹYǪHǒCם-ZERbe5V4'G{_ ?P3YHfvb:[d SD+ֻRZ(i$ݍNBy*6rq>0Z،\(0(86Áustd)!B>%'B땵/onֿR~yóW(SuPa/}"s-F}J{g/ NpovDzNSk>C :H&fJqL4x-6}n\U='~31Zh<ܯz ɬ-nuzD *4Yb}Bdd5֙%##RDߺȾd-^Spn鰗خ:QHIkAe^6yuO!l hV%yl0 zt^_3N";kb.IJ6K,!95*%z fǻ,:1쯮 էY mqA2sMUkL&X>;*w:ydX|WRGvQ .Zij ;r[-ȍ3Yލש)̛^{- QW=Я#_,"q9vo,\hFكC 7*c}Mf~-"lh@+KH! |=Q쵥;(C0<Ok"! ILP֩)׀4Mp`dS%y(nC2fvb t많W"CnBlK_區p24Zc!&^jR <GR>c~o`l*agaF=mI/[2}OW +Mw</(6R͢ǒuMt&/Lp5FTa]2x>@jX2W`fBVyg<&E&=hMmP%&Ïtx=;N&'mz}Kif^M8%gAfGr@&ԫ/x¿f@}I4ljתv[ ι:');nòʵx4M6@%& ռ2l*