samba-client-32bit-3.4.3-3.8.1<>,YމMuٸ/=„(ff硒H;zr{U~\FľFl86 |h2*:s#Q+>._APY?i-4QZ;HG V ֆ^Q)tJ,ϲ1C"in%L"Ul;PCX!T m4b].O-V:B@B\o1=FCx?5.y-2cs RU\oq>;8 #(f3*>8\?Ld ! 8,08<JSZ s      `&&&()809:(>GHIXY\]^bcdef l EHCsamba-client-32bit3.4.33.8.1Samba Client UtilitiesSamba is a suite of programs that allows SMB/CIFS clients to use the Unix file space, printers, and authentication subsystem. The package named samba-client contains all programs that are needed to act as a Samba client. The binaries expect the configuration file to be found in /etc/samba/smb.conf For a more detailed description of Samba, check the samba-doc package or the Samba.org Web page at http://www.Samba.org/ Please check http://en.openSUSE.org/Samba for general information on Samba as part of SUSE Linux Enterprise or openSUSE products, links to binary packages of the most current Samba version, and a bug reporting how to. Authors: -------- The Samba Team Source Timestamp: 2508 Branch : 3.4.3.SLE11_SP1Mu}build34(openSUSE 11.2openSUSEGPLv3+http://bugs.opensuse.orgProductivity/Networking/Sambahttp://www.samba.org/linuxx86_64/sbin/ldconfig(ЁMu}74ea3bfb78a75a201a2b866455792e87rootrootsamba-3.4.3-3.8.1.src.rpmlibnss_wins.so.2samba-client-32bitsamba-client-32bit(x86-32)  @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ /bin/shrpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.2.3)libc.so.6(GLIBC_2.2.4)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.2)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.5)libc.so.6(GLIBC_2.8)libcom_err.so.2libdl.so.2libdl.so.2(GLIBC_2.0)libdl.so.2(GLIBC_2.1)libgssapi_krb5.so.2libgssapi_krb5.so.2(gssapi_krb5_2_MIT)libk5crypto.so.3libk5crypto.so.3(k5crypto_3_MIT)libkeyutils.so.1libkrb5.so.3libkrb5.so.3(krb5_3_MIT)liblber-2.4.so.2libldap-2.4.so.2libnsl.so.1libnsl.so.1(GLIBC_2.0)libresolv.so.2libresolv.so.2(GLIBC_2.2)libtalloc.so.1libtdb.so.1libwbclient.so.0libz.so.1rpmlib(PayloadIsLzma)4.0-13.0.4-14.4.6-14.7.1Mp@Mc@M] MS@M5M-Mt@MM PM@ML!LL@L@L@LOLOL@L@LfL,@LeLB@LA@LLLzL{@LrbLnn@LmLmLi(@LgLc@L[@LPLI@L1@LT@L%@K@K@KtKKKK[KK@K@KqN@KqN@KqN@KqN@KoKoKn@Kn@Kl@KLd@KG@KD{@K=K;@K/c@K@K@K@K?K?KK@K3@JJJ@JJJJ`@J@JH@JJ JjJ0@J@JJJ@JJ JzJzJt.@JmJ_@J\s@JT@JT@JMJL@JI@JCfJB@JB@J@J;}J:,@J8J7@J7@J2C@J2C@J,@J'@J'@J'@J+@JMJp@IIIo@Io@IԨIW@IW@III@IV@II2I@IIIl@II@I1I@IHI~@Iy@Iy@IuId@Ia@IVISuISuIFFIBR@IBR@I?@I?@I6tI6tI3I3I2@I1.I.I.I.I.I-:@I+I%Q@I%Q@IsI@IP@IH@H,H,H,H@H @H @H @HHHHHf@H@H׈HHBHe@H|@HAHAHH@H@H@H@HHc@H@HnH@Hz@H4@HsVHnHkmHkmHj@Hj@Hj@Hj@Hj@HhHhHcHb3@HXHO@HNlHNlHM@HI&HG@H?@H?@H=I@H=I@H;H6H6H6H.H-w@H-w@H-w@H-w@H*@H*@H*@H)H$= 10 and libc segfaults if printf is passed NULL for a "%s" arg.- Use a conditional suse_version macro in front of the SUSE_ASNEEDED export.- lookupname failed, cannot find domain when attempt to change password; (bnc#520645); (bso#6560).- Don't link with --as-needed flag on post-11.1 systems.- Stop the smbfs service if an interface goes down; (bnc#517768).- Disable build of static libraries on post-11.1 systems; (bnc#509945).- Fix missing zlibs for cifs.upcall and test_shlibs.- Update to 3.4.0. + BUG 6431: Local groups from 3.0 setups no longer found. + BUG 6459: Fix build of pam_smbpass on some distributions. + BUG 6481: 'net ads leave' needs to try account deletion, NetUnjoinDomain not. + BUG 6497: Fix calling of 'test' in configure. + BUG 6498: Add workaround for MS KB932762. + BUG 6499: Fix building of pam_smbpass. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6512: Fix support for enumerating user forms. + BUG 6514: Improve error message in 'net' when smb.conf is not available. + BUG 6520: Fix time stamps when "unix extensions = yes". + BUG 6521: Fix building tevent_ntstatus without config.h. + BUG 6526: Fix notifies in the share root directory. + BUG 6531: Fix pid file name.- Package /etc/samba/smbpasswd as %ghost on post-11.1 systems.- Fix net ads leave; (bnc#511695).- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164). - Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).- Update to 3.2.13, 3.3.6. + In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with file names treat user input as a format string to asprintf. With a maliciously crafted file name smbclient can be made to execute code triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478).- Update to 3.0.35. + In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a data value can potentially affect access control when "dos filemode" is set to "yes"; CVE-2009-1888; (bnc#515479).- Uninitialized read of a data value; CVE-2009-1888 (bnc#515479).- Update to 3.4.0rc1. + BUG 4699: Remove pidfile on clean shutdown. + BUG 5456: Fix "net ads testjoin". + BUG 6081: Make it possible to change machine account sids. + BUG 6253: Use correct value for password expiry calculation in pam_winbind. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6305: Correctly prompt for a password when a username was given. + BUG 6328: Add support for multiple rights to "net sam rights grant/revoke". + BUG 6333: Consolidate create/delete account paths in pdbedit. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6451: net/libnetapi user rename using wrong access bits. + BUG 6458: Fix uninitialized variable in local_password_change(). + BUG 6465: Fix enumeration of empty aliases. + BUG 6476: Fix smbd-zombies in memory when using [x]inetd. + BUG 6487: Add missing DFS call in trans2 mkdir call. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + Improve pam_winbind documentation. - Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions.- Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user input as a format string to asprintf; CVE-2009-1886; (bnc#513360).- Fix a bad memleak in vfs_full_audit; (bnc#510035).- Update to 3.3.5. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix joining of Win7 into Samba domain (bug #6099). + Fix joining of Win2000 SP4 clients (bug #6301). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5853: Add keyutils-devel to build requires to fix build on RHEL. + BUG 5897: Fix shutdown script example in the smb.conf manpage. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6301: Fix joining of Win2000 SP4 clients. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix 'net groupmap set' segfault. + BUG 6361: Make --rcfile work in smbget. + BUG 6365: Re-Add the "dropbox" functionality with -wx rights on a directory. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6415: Filter out of range mappings in default idmap config in idmap_tdb. + BUG 6416: Filter out of range mappings in default idmap config in idmap_tdb2. + BUG 6417: Filter out of range mappings in default idmap config in idmap_ldap. + BUG 6441: Fix the compile with --enable-dnssd. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent infinite include nesting. + Mark registry shares without path unavailable. + Also handle DirX return codes. + Fix Coverity ID 897. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix a race condition in winbind leading to a panic. + Some man pam_winbind improvements. + Zero an uninitialized array.- Update to 3.2.12. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix "force user" (bug #6291). + Fix Winbind crash (bug #6279). + Fix joining of Win7 into Samba domain (bug #6099). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5798: CFLAGS info lost in configure. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5835: Add keyutils-devel to build requires. + BUG 5945: Fix out of memory error with Winbind idmap. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6279: Fix Winbind crash. + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6291: Fix "force user". + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6386: Groupdb mapping fix. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent creation of keys containing the '/' character. + Fix bug in processing of open modes in POSIX open. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a race condition in winbind leading to a panic. + Fix a crash bug if we timeout in net rpc trustdom list. + Fix profile acls in some corner cases.- Default with passdb backend to smbpasswd for SUSE products older than 11.2.- Explicitly use 'tdbsam' as passdb backend in the default smb.conf file.- Update to 3.4.0pre2. + The default passdb backend has been changed to 'tdbsam'! + Samba4 and Samba3 sources are included in the tarball. + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Made parameter syntax of the net command more consistent. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 4271: testparm should not print includes. + BUG 4831: Don't call openlog() or closelog() from pam_smbpass. + BUG 5681: Do not limit the number of network interfaces. + BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo access checks. + BUG 6099: Fix NETLOGON credential chain. + BUG 6136: New AFS syscall conventions. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6253: Use correct value for password expiry calculation. + BUG 6291: Fix 'force user'. + BUG 6292: Update config.guess from gnu.org. + BUG 6302: Give the VFS a chance to read from 0-byte files. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on malloced memory. + BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix segfault in 'net groupmap set'. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6357: Use Samba default command line arguments in 'net'. + BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4 and IPv6 addresses + BUG 6361: Make --rcfile work in smbget. + BUG 6371: Unsuccessful 'net conf setparm' leaves empty share. + BUG 6372: usermanager only displaying 1024 groups and aliases. + BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids. + BUG 6415: Filter out of range mappings in default idmap config (idmap_tdb). + BUG 6416: Filter out of range mappings in default idmap config (idmap_tdb2). + BUG 6417: Filter out of range mappings in default idmap config (idmap_ldap). + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Fix the core of the SAMR access functions. + Fix SAMR server for winbindd access. + Add dbwrap_tool - a tdb tool that is CTDB-aware. + Hide "config backend" from swat. + Fix linking with --disable-shared-libs. + Fix issue with missing entries when enumerating directories. + Map NULL domains to our global sam name. + Fix driver upload for Xerox 4110 PS printer driver. + Add "net dom renamecomputer" to rename machines in a domain. + Inspect the correct computername string before enabling/disabling the change button in netdomjoin-gui. + Fix join prompt dialog test in netdomjoin-gui. + Only gray out labels when not root and not connecting to remote machines (netdomjoin-gui). + Allow to switch between workgroups/domains with the same name (netdomjoin-gui). + Add NetShutdownInit and NetShutdownAbort. + Fix samr access checks. + Add a security model to LSA. + Also handle DirX return codes. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix Coverity ID 897. + Fix a race condition in vfs_aio_fork with gpfs share modes. + Fix bug disclosed by lock8 torture test. + Fix a race condition in winbind leading to a panic. + Detect tight loop in tdb_find(). + Fix chained sesssetupAndX/tconn messages. + Fix strict locking with chained reads. + Fix two bugs in sendfile. + Fix memory leak. + Fix file descriptor leak. + Fallback to the legacy sid_to_(uid|gid) instead of returning NULL. + Always allocate memory in dptr_ReadDirName. + Fix 'net' crash during domain join. + Zero an uninitialized array. + Allow child processes to exit gracefully if we are out of fds.- Enable cifs.upcall on versions newer than SUSE 10.0.- Add BuildRequires to keyutils-devel.- Remove redundant Requires to keyutils-libs for cifs-mount.- Detect tight loop in tdb_find(); (bnc#450974).- Fix lp printing with kerberos; (bnc#476913).- Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all other build targets.- Update to 3.4.0pre1. + Samba4 and Samba3 sources are included in the tarball + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Make merged build possible. + Move common libraries to the shared lib/ directory.- Update to 3.3.4. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix usrmgr.exe creating a user (bug #6243). + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6279: Fix Winbind crash. + BUG 5329: Add "net rpc service delete/create". + BUG 6238: Make sure wbcLogoffUserParams are properly initialized before freed. + BUG 6263: Fix domain logins for WinXP clients pre SP3. + BUG 6286: Call init function for builtin idmap modules before probing for them as shared modules. + BUG 6243: Fix usrmgr.exe creating a user. + net conf: Save share name as given, not as lower case only. + Prevent creation of registry keys containing the '/' character. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Don't access a freed structure when logging off and re-using a vuid. + Try to to fix password_expired flag handling. + Make sure to grey out change fields in the netdomjoin-gui when not running as root. + Don't look up local user for remote changes, even when root. + Use procid_str in debug messages for better cluster-debuggability. + Use cluster-aware procid_is_me instead of comparing pids. + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Do not use the file system GET_REAL_FILENAME for mangled names. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to net. + In net_conf_import, start a transaction when importing a single share. + Fix writing of roaming profiles with "profile acls" set to "yes".- Update to 3.2.11. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix smbd crash for close_on_completion. + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6205: Correct sample smb.conf share configuration. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6263: Fix domain logins for WinXP clients pre SP3. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Fix resume command typo for "printing = vlp". + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Don't look up local user for remote changes, even when root.- Don't lookup local user for remote password changes; (bnc#493507).- Update to 3.3.3. + Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb correctly (bug #6195). + Fix serving of files with colons to CIFS/VFS client (bug #6196). + Fix "map readonly" (bug #6186). + BUG 6195: Don't let smbd child processes panic. + Add backend_requires_messaging() method to libsmbconf. + Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf. + Fall back to file backend when no valid backend was found. + Fix a memleak in dbwrap_rbt. + Provide transaction_start|commit|cancel fns for the registry tdb. + Speed up "net conf drop". + Speed up "net conf import". + Add transactions to the libsmbconf API. + Reduce memory usage of "net conf import". + Registry cleanup. + Fix handling of SAMBA_VERSION_VENDOR_PATCH. + Fix build of pam_winbind.so with static linking. + Tidy up some convert_string_internal error cases. + BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to run elections. + Allow DFS client paths to work when POSIX pathnames have been selected. + Try and fix the build farm RAW-STREAMS errors. + Ensure files starting with multiple dots are hidden. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6193: Avoid messing with sync_context in libnet_samsync_delta(). + Fix notify_printer_status_byname. + Fix Coverity IDs 722, 762, 774, 775, 776. + Fix build on old Heimdal based systems. + Fix compile warning. + Use parentheses in if condition to make negation clear. + Add dirsort module. + BUG 6147: Fix detection of the GNU ld version. + BUG 6097: Fix smbd segfault. + BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6139: Add missing whitespace in mount.cifs error message. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix a valgrind error. + Speed up "net conf list". + Add sorted subkey cache. + Use StrCaseCmp in the dirsort module. + Document the dirsort module. + Disable dns_sd by default. + Add avahi detection to configure. + Add event avahi binding. + Use avahi to register _smb._tcp in smbd. + Fix two memleaks in the encryption code. + Fix a scary "fill_share_mode_lock failed" message. + BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't set errno. + Don't use reserved words in smbconftort. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Parse_packet can return NULL which is then dereferenced in match_mailslot_name. + Format the header check for netinet/ip.h more nicely. + Missing break in conversion function prevents tdb password database update.- Update to 3.2.10. + BUG #6195: Don't let smbd child processes panic.- BUG 6195: Fix crash on passdb conversion.- Update to 3.2.9. + BUG 5920: The length of the memcpy was calculated wrong. + BUG 6097: Fix smbd segfault. + BUG 6098: Fix ads_find_dc() with "security = domain" when the DNS server is invalid. + BUG 6099: Samba returns incurrate capabilities list. + BUG 6100: Implement _netr_LogonGetCapabilities() with NT_STATUS_NOT_IMPLEMENTED. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem. + BUG 6161: smbclient corrupts source path in tar mode. + BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif(). + BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client. + BUG 6224: nmbd waits 5 minutes before checking to run elections. + BUG 6228: Fix SMBC_open_ctx failure when path failure doesn't set errno. + Numerous Coverity fixes + Fix double free caused by incorrect talloc_steal usage. + Backport delete semantics of alternate data streams on a file truncate. + Allow set attributes on a stream fnum to redirect to the base filename. + Fix use of streams modules with CIFSFS client. + Fix more POSIX path lstat calls. + Allow DFS client paths to work with POSIX pathnames. + Ensure files starting with multiple dots are hidden. + Fix guest auth when Winbind is running. + Fix memleak in get_remote_printer_publishing_data(). + cifs mount fix for handling -V parameter. + Fix guest mounts. + Clean-up entries in /etc/mtab after unmount. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Enable total anonymization in vfs_smb_traffic_analyzer. + Don't try and delete a default ACL from a file. + Fix remotely adding a share via MMC. + Fix resume handle for _samr_EnumDomainGroups. + Fix a buffer handling bug when adding lots of registry keys. + Fix a O(n^2) algorithm in regdb_fetch_keys(). + Fix a valgrind error / segfault in dns_register_smbd(). + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix two memleaks in the encryption code. + Fix "fill_share_mode_lock failed" message. + Add S-1-22-X-Y sids to the local token. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Don't miss an absolute pathname as a kerberos keytab path. + Have nmbd check all available interfaces for WINS before failing. + Initialize the id_map status in idmap_ldap to avoid surprise.- Obsolete change from 2008-03-05 by removing the needless examples cleanup.- Update to 3.3.2. + Fix "force group" (bug #6155). + Fix saving of files on Samba share using MS Office 2007 (bug #6160). + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + Fix corruptions of source path in tar mode of smbclient (bug #6161). + BUG 6082: Fix renaming and deleting of directories using Windows clients. + BUG 6154: Make ZFS honor admin users. + BUG 6155: Fix "force group". + BUG 6160: Fix saving of files on Samba share using MS Office 2007. + BUG 6161: Fix corruptions of source path in tar mode of smbclient. + Fix some NetBSD warnings. + Fix bug in processing of open modes in POSIX open. + Fix use of streams modules with CIFSFS client. + Ensure ACL modules work with POSIX paths. + Use fsp->posix_open in preference if we have it. + Fix more POSIX path lstat calls. + Fix a bug in message handling for the change notify code. + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + BUG 4640: Fix guest mounts in mount.cifs. + Fix displaying the version string properly when no other parameters passed in in mount.cifs. + Prefer gssapi header files from subdirectory. + BUG 6176: winbindd -n should disable the winbind idmap cache. + Add a vfs_preopen module to hide fs latencies. + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a valgrind error / segfault in dns_register_smbd(). + Fix build on SLES8. + Decremented by 1 for ntcancel requests. + Fix creation of core files. + Fix first mapping of uids/gids in Winbind. + Initialize the id_map status in idmap_ldap to avoid surprise. + Fix initialization of idmap status.- Only call '%find_lang pam_winbind' in the samba spec file, not samba-doc.- Ignore return value from subshell to fix build.- Make libsmbclient work with DFS, backported from 3.3; (bnc#475995).- Update to 3.3.1. + Fix net ads join when "ldap ssl = start tls" (bug #6073). + Fix renaming/deleting of files using Windows clients (bug #6082). + Fix renaming/deleting a "not matching/resolving" symlink (bug #6090). + Fix remotely adding a share via the Windows MMC. + BUG 6082: Fix renaming/deleting of files using Windows clients. + BUG 6069: Fix build with too many arguments. + BUG 6090: Fix renaming/deleting a "not matching/resolving" symlink. + BUG 6099: Try to fix domain join of Win7 Beta. + BUG 6117: Fix core dump of pdbedit -a. + BUG 6133: Fix deletion of non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem. + Fix Coverity IDs 115, 116, 117, 602. + Fix warning (bad handler prototype). + Unify the detection of the timespec code in configure.in, and the application of it in time.c. + Correctly use chroot(). + Parameterize in local.h the MAX_RPC_DATA_SIZE, and ensure that "offered" read from the rpc packet in spoolss is under that size. + Backport the semantics of when to delete alternate data streams on a file truncate. + Fix printf warnings. + BUG 6073: Prevent ads_connect() from using SSL unless explicitly requested. + Fix 'getent passwd' to allocate new uids. + Fix 'getent group' to allocate new gids. + Remove check for sharename being a username in 'net conf addshare'. + Fix Coverity ID 848. + Remove unused ENUM_HND from 'net'. + Fix getform command asprintf return code in rpcclient. + Fix memleak in get_remote_printer_publishing_data(). + Remove duplicate prototypes for generated rpc server functions. + Enable total anonymization in vfs_smb_traffic_analyzer. + Fix build with external dns_sd libraries. + Fix configure check "sub-second timestamps without struct timespec". + Use correct BSD evironment variable. + Don't try and delete a default ACL from a file. + BUG 5798: CFLAGS info lost in configure. + Fix Coverity IDs 740, 742, 744, 745, 876, 879, 880. + Fix remotely adding a share via the Windows MMC. + Avoid valgrind errors. + Fix 'net rpc join' for users with the SeMachineAccountPrivilege. + Fix resume handle for _samr_EnumDomainGroups. + Fix a buffer handling bug when adding lots of registry keys. + Fix a O(n^2) algorithm in regdb_fetch_keys(). + Initialize rc to 0 in main in mount.cifs. + BUG 6069: Add a fstatvfs function for libsmbclient. + Eliminate compiler warnings. + Don't miss an absolute pathname as a kerberos keytab path. + BUG 6100: Implement _netr_LogonGetCapabilities() with NT_STATUS_NOT_IMPLEMENTED. + Make Samba work with older ctdb versions. + Add S-1-22-X-Y sids to the local token. + Conditional install of the cifs.upcall man page. + Adjust regex to match variable names including underscores. + BUG 4370: Clean-up entries in /etc/mtab after unmount. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Fix a crash during name resolution. + Fix "assignment discards qualifiers from pointer target type" warnings. + Fix SMB_VFS_RECVFILE/SENDFILE macros. + Change "ldap ssl:ads" parameter to "ldap ssl ads". + Add manpages for vfs_acl_xattr and vfs_acl_tdb. + Fix double free caused by incorrect talloc_steal usage. + Build ldbrename. + Make nmbd check all available interfaces for WINS before failing. + Fix compilation of vfs_default on systems that do not support utimes(). + BUG 5920: Fix the calculation of the memcpy length. + BUG 6098: Fix ads_find_dc() in setups with "security = domain". + Make libsmbclient work with DFS.- Define init_samba_module in all samba-vscan modules; (bnc#469218).- Add GPLv3 header to all init scripts; (bnc#459766).- Backport of the clean event context after fork and krb5 refresh chain fixes; (bnc#415026).- Revert accidental partial strict allocate upstream commit- Update to 3.2.8. + Fix and streamline join and DC detection + BUG 4308: Excel save operation corrupts file ACLs. + BUG 5933: Fix incrementing/decrementing num_validated_vuids. + BUG 5953: Fix smbclient crashes. + BUG 5953: Make cli_send_smb_direct_writeX use writev. + BUG 5965: Fix creation of the first share using SWAT. + BUG 5969: Optimize smbclient put command. + BUG 5979: Fix level 2 oplocks. + BUG 5980: Fix race condition when granting level2 oplocks + BUG 5986: Fix renaming of streams. + BUG 5990: Strict allocate should be checked before ftruncate. + BUG 6000: Avoid bashism in perfcount.init. + BUG 6009: Setting "min receivefile size = 1" breaks writes. + BUG 6014: mget shouldn't segfault without arguments. + BUG 6016: Alternate Data Streams / Extended Attributes seem to conflict. + BUG 6017: Fix magic scripts. + BUG 6021: smbclient du command does not recuse properly. + BUG 6030: Add missing header in Status page. + BUG 6035: Fix possible race between fcntl F_SETLKW and alarm delivery. + BUG 6040: Calling Samba print server with an aliased DNS-name fails. + BUG 6058: Use 'make distclean' instead of 'make clean' in build_docs. + Fix "allow trusted domain" so it disables trusted domains. + Fix error code when smbclient puts a file over an existing directory. + Don't return 0 on error in smbcacls - bad for scripts. + Determine case sensitivity based on file system attributes. + Add vfs_fileid manpage. + Adjust regex to match variable names including underscores. + Fix stream marshalling to return the correct streaminfo status. + Fix a delete on close divergence from Windows. + Allow renames of streams via NTRENAME and fix stream error codes. + Fix a segfault if ? is there but the options are NULL. + Avoid flooding of syslog with failing pam_putenv messages. + Document default of the printing config variable. + Change default value for "ldap ssl" to "start tls". + Check if Unix account exists before asking for the password in smbpasswd. + Add manpage for vfs_shadow_copy2. + Clean event context after child is forked. + Refresh sequence number as soon as possible. + Don't set child->requests to NULL in parent after fork. + Clean event context after fork and fix krb5 refresh chain. + Fix null pointer refrence in event context. + Don't send message to any other child in child process. + Fix bug in get_dc_name_via_netlogon(), null pointer refrence.- Backport 3.2.8 fixes. + cups leaks and crashes + various winbind child handling fixes + join fixes + ACL fixes for Excel + allow usrmgr with non-root- Replace cifs.upcall Makefile patches by the upstream version.- Only add ccache to BuildRequires if it is used.- Update to 3.3.0. + The passdb tdbsam version has been raised. + Splitting of library directory into library directory and separate modules directory. + The default value of "ldap ssl" has been changed to "start tls". + Extended Cluster support. + New experimental VFS modules "vfs_acl_xattr" and "vfs_acl_tdb" to store NTFS ACLs on Samba file servers. + Simplified idmap configuration. + New idmap backends "adex" and "hash". + Added new parameter "winbind reconnect delay". + Added support for user and group aliasing. + Added support for multiple domains to idmap_ad. + The destination "all" of smbcontrol does now affect all running daemons including nmbd and winbindd. + New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands. + The 'net' utility can now use kerberos for joining and authentication. + The 'wbinfo' utility can now add, modify and remove identity mapping entries. + NetApi library implements various new calls for User- and Group Account Management. + libsmbclient does now determine case sensitivity based on file system attributes.- Replace all chkconfig calls with rc_active calls to improve performance during boot.- Add SuSEfirewall2 service config file to allow samba browsing on post-10.2 systems; (bnc#460902).- Update to 3.0.34. + Fix update of machine account passwords. + Fix SMB signing issue on Windows Vista with MS Hotfix KB955302. + Fix Winbind crashes. + Correctly detect if the current dc is the closest one. + Add saf_join_store() function to memorize the dc used at join time. This avoids problems caused by replication delays shortly after domain joins. + Fix write list in setups using "security = share".- Obsolete old -XXbit packages; (bnc#437293).- Update to 3.2.7. + Samba 3.2.0 to 3.2.6 can potentially give root filesystem access to older versions of smbclient; CVE-2009-0022; (bnc#460764).- Samba 3.2.0 to 3.2.6 can potentially give root filesystem access to older versions of smbclient; CVE-2009-0022; (bnc#460764).- Fix nmbstatus dipslay when workgroup parameter is given; (bnc#459785).- Fix Mounting failure when there is white spaces in service; (bnc#460793).- Update to 3.3.0rc2. + Splitting of library directory into library directory and separate modules directory. + Extended Cluster support. + Simplified idmap configuration. + New idmap backends "adex" and "hash". + Added new parameter "winbind reconnect delay". + Added support for user and group aliasing. + Added support for multiple domains to idmap_ad. + The destination "all" of smbcontrol does now affect all running daemons including nmbd and winbindd. + New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands. + The 'net' utility can now use kerberos for joining and authentication. + The 'wbinfo' utility can now add, modify and remove identity mapping entries. + NetApi library implements various new calls for User- and Group Account Management.- Fix all remaining conditional macro calls; (bnc#456469).- Add IPv6 support for mount.cifs.- Update to 3.2.6. + Fix potential segfault in vfs_tsmsm. + Don't list the domain twice when expanding internal aliases. + Fix the output of "getent group" when "winbind use default domain = yes" with "security = ads". + Add domain prefix to username in lookup_groupmem(). + Prevent negative GM/ cache entries due to broken connections. + Fix crash in sync_eventlog_params(). + Fix timeouts when calling 'getgrent'. + BUG 1254: Fix "write list" in setups using "security = share". + BUG 5080: Fix access to cups-printers with cups 1.3.4. + BUG 5737: Fix Winbind crash in an unusual failure mode; (bnc#416598). + BUG 5783: Fix FindFirst where search pattern equals the mangled filename. + BUG 5790: Fix returning of STATUS_OBJECT_NAME_NOT_FOUND on set file disposition. + BUG 5797: Fix moving of readonly files. + BUG 5814: Fix Winbind crash bug while doing "rescan_trusted_domain". + BUG 5818: Sort ACEs in smbcacl output properly and honor inheritance. + BUG 5825: Fix account locking with LDAP backend. + BUG 5826: Fix truncated filenames when accessing old servers. + BUG 5889: Fix "delete veto files = no". + BUG 5891: Fix smbd crash when viewing the eventlog exported by "eventlog list". + BUG 5900: Fix vfs_readonly. + BUG 5903: Fix vfs_streams_xattr breaking contents of files. + BUG 5904: Fix libnss_wins causing SIGABRT while servicing getaddrinfo() request. + BUG 5914: Fix build failure: redefinition of struct name_list. + BUG 5937: Fix filenames with "*" char hiding other files. + BUG 5953: Fix smbclient crashes. + Fix rename_open_files. + Restructure VFS SMB traffic analyzer VFS module. + Correctly fix smbclient to terminate on eof from server. + Unify access checks for lsa server functions. + Remove the requirement for ldap call made as root. + Cope with MAXIMUM_ALLOWED_ACCESS requests when opening handles. + Fix net rpc vampire, based on an *amazing* piece of debugging work by "Cooper S. Blake" . + Fix Coverity IDs 456, 574, 592, 606 and 607. + Fix net rpc vampire. + Use the same prerequisite for DDNS update as Windows XP. + Make "lwinet ads dns register" honor the "interfaces" parameter. + Fix extended DN parse error when AD object does not have a SID. + BUG 5888: Fix PNP_GetHwProfInfo(). + BUG 5957: Do not abort rename process on valid rename script. + BUG 5898: Fix 'net rpc shutdown'. + Fix duplicate installation of cifs.upcall. + Fix _srvsvc_NetShareAdd segfault. + Ensure consistency when reporting password complexity. + Fix _lsa_GetUserName. + Fix access check in _samr_QuerySecurity(). + _samr_DeleteUser needs to wipe out the user_handle on success. + NetGroupEnum_r needs to handle servers with no groups. + Search for gpfs functions in both libgpfs_gpl.so an libgpfs.so. + BUG 5908: Fix internal change notify on shared directory. + BUG 5135 and 5446: Prevent calling POSIX ACL vfs methods on zfs share. + BUG 5929: Fix building of vfs_prealloc with option --with-cluster-support and GPFS. + Add new VFS module to analyze SMB traffic + BUG 5928: Fix 'testparm --version'. + Have uppercase_string return success on NULL pointer in mount.cifs. + Make mount.cifs return codes match the return codes for /bin/mount. + Use lock/unlock_mtab scheme from util-linux-ng mount prog in mount.cifs. + BUG 5778: Check if strlcpy and strlcat are already defined. + BUG 5840: Fix segfault in "rpcclient lsaaddacctrights". + BUG 5860: Fix nasty error message for overlong strings in safe_strcpy. + Fix a potential NULL deref in found by the IBM Checker. + Fix an uninitialized variable found by the IBM Checker. + Fix an unlikely memleak found by the IBM Checker. + Fix some missing error handlings. + Add workaround for domain joins using a netbios name which is different from the hostname. + Fix crash bug when freeing a non-malloc'ed buffer if the client sends a non-encrypted packet with the crypto state set. + Fix trans2findfirst for the large directory optimization. + Fix checking for presence of cups-devel and correct cups-devel test for HAVE_IPRINT. + BUG 5805: Don't close stdout when calling setup_logging multiple times. + Fix setting of trust password using 'net rpc trustdom add'. + Fix several issues in vfs_streams_xattr and vfs_stream_depot. + Return an error instead of crashing when no realm is given (trigerred by "net ads info -S 127.8.7.6" (where 127.8.7.6 doesn't exist) and "disable netbios = yes"). + Fix the new vfs_smb_traffic_analyzer build for static links. + BUG 5901: Fix default for streams_depot location. + Fix several build warnings. + Delete the krb5 ccname variable from the PAM environment if set. + Fix circular dependency error with autoconf 2.6.3. + Add @CIFSUPCALL_PROGS@ to "all" target so cifs.upcall gets built at compile time rather than install time. + BUG 5906: Fix Winbind crash when calling 'getent group'. + Fix logging to syslog. + Allow SYSLOG_FACILITY to be modified with a new configure option called - -with-syslog-facility. + BUG 5909: Fix MS-DFS on Vista clients. + BUG 5944: Fix starting of nmbd with "socket address" set to "". + Fix segfault on startup with trusted domains. + Re-add "winbind:ignore domains" parameter. + Avoid freeing fsp twice when opening new_file fails (Debian #431696).- Fix the conditional macro to start smbfs by default; (bnc#456469).- Readd libsmbclient to baselibs.conf for pre 11.0 distributions.- Use %__install macro to install files with the right permissions instead of cp.- Update to 3.3.0rc1. + Splitting of library directory into library directory and separate modules directory. + Extended Cluster support. + Simplified idmap configuration. + New idmap backends "adex" and "hash". + Added new parameter "winbind reconnect delay". + Added support for user and group aliasing. + The destination "all" of smbcontrol does now affect all running daemons including nmbd and winbindd. + New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands. + The 'net' utility can now use kerberos for joining and authentication. + The 'wbinfo' utility can now add, modify and remove identity mapping entries. + NetApi library implements various new calls for User- and Group Account Management. - Added German translation for pam_winbind.- Remove patch for bnc#336854, which doesn't exist in 3.2.x or higher.- Use %{NET_CFGDIR} define instead of a fixed path to the network conf.- Update to 3.2.5. + Samba 3.0.29 to 3.2.4 can potentially leak arbitrary memory contents to malicious clients; CVE-2008-4314; (bnc#446971).- Update baselibs.conf.- Fix circular dependency error with autoconf 2.6.3.- Fix the dhcp hook script and support CODE11; (bnc#442335).- Fix perl v5.10 warnings in nmbstatus; (bnc#448225).- Include the missing spec file change mentioned the previous commit.- Make cifs-mount depend on keyutils, keyutils-libs packages as they are required to support dfs and kerberos; (bnc#432494).- Fix the offset checks in the trans routines; CVE-2008-4314; (bnc#446971).- Change the runlevel description for winbindd to use "Microsoft Windows" instead of "NT"; (bnc#446154).- Directory/Filenames get truncated when 3.2.0 client acesses old server; (bnc#432471).- Add SuSEfirewall2 services config file to open Netbios and Samba ports on post-10.2 systems; (bnc#247344).- Remove unrecognized configure options.- Fix the pam_winbind build.- Delete the krb5 ccname variable from the PAM environment if set.- Move the nss_info modules to the samba-winbind package.- Activate the idmap backends "adex" and "hash".- Add version branding for CODE 11.- Restart smbfs even with the traditional network setup; (bnc#425058).- Only call the stop_on_removal, restart_on_update, or insserv_cleanup macro if available.- Only call the fillup_and_insserv or fillup_only macro if available.- Use package names instead of macros for cp, mkdir, mv, rm, and grep or instead of the full path to the binary for ln, find and xargs.- Introduce NET_CFGDIR to fit the needs for a differing location of the network configuration per vendor.- Use path macros for cp, mkdir, mv, rm, and grep.- Only use SUSE rpm macros and SuSEconfig.permissions if available.- Update to 3.3.0pre2. + BUG 5729: Explicitly allow "-valid". + BUG 5737: Fix winbindd crash in an unusual failure mode; (bnc#416598). + BUG 5751: Fix showing of ACLs on DFS in (lib)smbclient. + BUG 5762: Fix opening of mangled directory name (resulted 'is a stream name'). + BUG 5783: Fix FindFirst where search pattern == mangled filename. + BUG 5790: Fix returning of STATUS_OBJECT_NAME_NOT_FOUND on set file disposition. + BUG 5797: Fix moving of readonly files. + Fix crashes when looking up a non-existant uid. + Fix getting/setting of NT ACLs on a file. + Fix the wcache_invalidate_samlogon calls. + Clarify usage of "force create mode". + Get smbd to look (read-only) into the winbindd cache for uid/gid <--> sid mappings. + Write times code update. + Add experimental version of VFS module acl_xattr. + Fix rename_open_files. + Make SMB traffic analyzer VFS module more efficient. + Fix segfault when calling nss_get_info() with a NULL ads structure. + Add support for name aliasing in Winbind. + Add the idmap/nss-info provider from Likewise Open. + Allow an admin to define the "uid" attribute for a RFC2307 user object in AD to be the username alias. + Add new idmap backend "adex" to support RFC2307 enabled AD forests. + Add new idmap backend "hash". + Fix build warnings. + Cleanup of DC enumeration in get_dcs(). + BUG 5710: Fix changing of machine account passwords. + BUG 5784: Fix pam_winbind build issue on Solaris. + Fix invalid sid copy (hit when enumerating sibling domains) in Winbind. + Fix double installation of cifs.upcall. + Add change-user-password command to wbinfo. + Fix segfault in _srvsvc_NetShareAdd. + BUG 5736: Fix Winbind crash bug with trusted domains. + Correct the netsamlogon_clear_cached_user function. + Add new VFS module to analyze SMB traffic to record write and read operations on the Samba server. + Fix build warnings in cifs.upcall. + BUG 5707: Do proper error handling if the socket is closed. + BUG 5778: Don't define 'strlcat' and 'strlcpy' if it's already defined. + Fix Coverity IDs 587 and 589. + Increase the default positive idmap cache time to a week. + Fix calculation of useable_space for trans2 and nttrans replies. + Add mapping of generic bits when setting an NFSv4 ACL. + Some write time fixes. + Add new parameter "cups connection timeout". + Fix enumeration of nested group memberships in Winbind. This affected only setups using "security = ads". + Fix cut and paste error in quota code. + Fix display of POSIX ACLs. + Fix permissions of group_mapping.ldb (CVE-2008-3789); (bnc#420634). + Avoid a race condition in glibc between AIO and setresuid(). + Add missing become root for AIO operations. + Fix an errno handling bug that could lead to an infinite loop. + Fix logic of tsmsm_sendfile(). + Fix handling of arbitrary new PAC types. + Fix segfault on startup with trusted domains. + Fix segfault on the CTDB destructor code. + Re-add "winbind:ignore domains". + BUG 5609: Remove configure option "--with-libdir" and add "--with-modulesdir". + Extend "net rpc vampire keytab" to support differential replication and storing of kerberos keys. + Rework internal logic of registry tdb code. + Freeze autogenerated prototype headers (good bye "make proto"). + Add new "winbind reconnect delay" parameter. + Make the change to smbcontrol for "all" to mean broadcast, and "smbd" to mean the main smb daemon. + Allow an admin to define the "uid" attribute for a RFC2307 user object in AD to be the username alias. + Add "net rpc vampire keytab" and "net rpc vampire ldif". + Rework of the Winbind idmap backend.- Define PAM_AUTHTOK_RECOVERY_ERR when not available on older Linux products.- Adopt samba-vscan to build after the change to the bool type define.- Build cifs.upcall for CentOS 5, Fedora 8 and RHEL 5 and newer too.- Call mkinitrd_setup during %post and %postun for post-9.2 systems only.- Create a link to the html manpages so that they can be accesses in swat; (bnc#426182).- "Password last set" timestamp update from admin pw change; (bnc#420407).- Call mkinitrd_setup during %post and %postun for package cifs-mount; (bnc#413709).- Update to 3.3.0pre1. + Splitting of library directory into library directory and separate modules directory. + Extended Cluster support. + Simplyfied idmap configuration. + Added new parameter "winbind reconnect delay". + The destination "all" of smbcontrol does now affect all running daemons including nmbd and winbindd. + New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands.- Update to 3.2.3. + Force the permissions on group_mapping.ldb to 0600; CVE-2008-3789; (bnc#420634).- Update to 3.2.2. + BUG 5592: Fix creation and installation of shared libraries. + Fix replacement of random seed generator. + Fix a race condition in idmap_tdb2_allocate_id(). + Fix unix_convert() for "*" after changing map_nt_error_from_unix(). + Make sure to always set errno on error path in OpenDir. + BUG 5675: Fix smbspool program assuming Kerberos authentication by mistake. + BUG 5686: Fix segfaults in libsmbclient. + BUG 5692: Fix coredump in full_audit.so. + BUG 5696: Fix "force group" in setups using Winbind. + Rename cifs.spnego to cifs.upcall. + Fix segfault in cifs.upcall when it is called without any arguments. + Fix coverity ID 594 (resource leak on error path). + Fix assigning of primary group memberships when authenticating via Winbind. + BUG #5617: Fix freezing Windows Explorer on WinXP while browsing Samba shares. + Include stdlib.h to get a prototype for free(). + Solve an IBM XL C/C++ compiler error encountered in get_exit_code() auth_errors array initialization in client/smbspool.c. + Use NGROUPS_MAX instead of 32 for the max group value in rep_initgroups(). + Add add c++ guard to netapi. + Fix compile warning in cifs.upcall. + Add "dns_resolver" key type to cifs.upcall. + BUG 5688: Fix orphaned LPQ processes if socket address is invalid. + BUG 5684: Fix removal of dead records in tdb files. + Fix coverity IDs 595, 596. + Fix smb_len calculation for chained requests. + Fix output of test status. + Fix smbclient connections to older servers. + Fix a fd leak when trying to regain contact to a domain controller in Winbind. + Fix permissions on ctdb databases. + Fix passing back success when a function had in fact failed in two places. - Add --enable-static to the configure options to get the statical libraries installed by the install Makefile target. - Add --with-cifsupcall to build the cifs.upcall binary for post 10.2 systems.- Set Required- and Should-Stop in the init info part of all init scripts.- Fix libsmbclient to older servers; (bnc#402776).- Update to 3.2.1. + BUG 5594: Fix "make test" by adding and using a new testparm switch "--skip-logic-checks". + Fix creation of libaddns.a, libsmbclient.a and libsharemodes.a. + Update the section about net conf in the net(8) manpage. + Improve processing of registry shares. + Fix listing of registry shares with testparm. + Fix several build issues. + BUG 5578: Fix error from strlcat. + BUG 5613: Fix flushing of smb.conf when creating a new share using SWAT. + Ensure consistent use of pdb_get_nt_passwd instead of pdb_get_lanman_passwd. + Remove worrying warning message when safe_strcpy tries to copy a pseaudo interface name that's too long. + Canonicalize servername in the printer functions to remove leading '\\' characters. + Fix option processing in smbcacls - add POPT_COMMON_CONNECTION. + Fix bug creating files using DOS clients with mixed case files. + Fix uninitialized variable. + BUG 5616: Fix session keys also in rpccli_netr_LogonSamLogonEx wrapper. + BUG 5570: Fix bogus error message during AD domain join. + Fix trusted domain handling in Winbindd. + Fix build warning. + BUG 5202: Fix setting of ACEs for users/groups with write access in setups with 'dos filemode = yes'. + Re-activate 'acl group control' parameter and make it only apply to owning group. + Make ntimes function more like POSIX and allow NULL arg. + BUG 5512: Fix alignment problems on sparc. + BUG 5616: Fix share connections in setups with "server signing = mandatory" or SMB signing set on the client side. + Fix a race condition in Winbind leading to a crash. + Fix a segfault in base64_encode_data_blob. + Fix some uninitialized variable references via ndr_print. + Fix error message if trying to join with a non-privileged user. + Fix setups using "include = registry" without [global] settings in the registry. + Fix "net sam rights" on domain member servers. + Add documentation for the vfs streams modules. + Cleanup some duplicate code by passing the password to the wbinfo_auth* functions. + Allow SID with 0 in subauthority to be converted properly. + Set sin[6]_family instead of ss_family in in[6]_addr_to_sockaddr_storage. + Fix realpath() check so that it doesn't generate a core() when it fails. + Fix overwriting of winbind logfiles. + Fix "vfs_full_audit.c: name table not in sync with vfs.h" panic. + Add broadcasting of the debug message to all winbindd children. + BUG 5635: Fix updating of printer queues. + Release still reachable memory if the smbclient context is freed. + Remove trailing withespace from wbinfo -m which breaks gdm auth. + BUG 5540: Fix "set primary group script" user option substitution. + Fix regression in Winbindd offline mode. + Allow authentication and memory credential refresh after password change from gdm/xdm. + Allow %u parameters for print job username.- Fix a race condition in winbind leading to a crash; (bnc#406623).- Use the configure option to enable debugging. This fixes the creation of the debuginfo and debugsource package.- Fix emptying the printing queue; (bnc#411493).- Remove trailing withespace from wbinfo -m which breaks gdm auth.- Add a recommendation to the samba and samba-winbind package to install logrotate for openSUSE 11.0 and later.- Include mkinitrd scriptlets.- Allow %u parameters for print job username - use advanced sub; (bnc#374389).- Update to 3.0.31. + BUG 5504: Fix SIGTERM handling in Winbind children so that they do not remove the unix domain socket used to field client requests. + Split the winbindd_passdb backend into a 'builtin' and a 'sam' backend. + When allocating client buffers for large read/write - make sure we take account of the large read/write SMB headers as well as the buffer space. + Memory leak fixes in DC location code. + BUG 5533: Winbindd fails to cope correctly with a workgroup name containing a '.' + BUG 5555: Don't return NT_STATUS_PASSWORD_MUST_CHANGE error on machine account logon. + BUG 5551: smbd recursing back into winbindd from a winbindd call. + Fix usage message for "net rpc trustdom add". + Ensure consistent use of pdb_get_nt_passwd instead of pdb_get_lanman_passwd. + BUG 5578: Bad (non-Samba) use of strlcat gives error. + Canonicalize servername in the printer functions to remove leading '\\' characters. + Documentation build fixes. + [DOCS] Fix use of smbconfoption in samba.entities. + Return NULL in sitename_fetch() if gencache_init() fails. + Use machine account and machine password from our domain when contacting trusted domains. + SPNEGO SPN fix when contacting trusted domains. + BUG 5285: Fix libcap header mismatch. + Fix joining NT4 domains. + Don't let winbind getgroups crash when we have no gids in the token. + Fallback to level 24 pwd set while joining. + Fix joining w2k domains in "security = ads". + Fix pam_sm_chauthtok for storing modified cached creds. + BUG 5202: Re-activate "acl group control" parameter and make it only apply to owning group. + BUG 5531: Fix conversion of ns units when converting from nttime to timespec. + BUG 4974: Map NT_STATUS_OBJECT_PATH_NOT_FOUND to ENOENT in libsmbclient. + Fix a segfault in base64_encode_data_blob. + AIX build fixes. + ENODATA is not defined in freeBSD 4.6.2. + Don't reset password last set time just because the expired flag is set to 0. + Fix usage message for 'net idmap dump'. + Miscellaneous man page fixes. + BUG 4203: Samba3-HOWTO: Add improvements/fixes submitted by Pete Boyd. + Fixes to man pages. + Add tdb file documentation. + Ensure that winbindd trusted domain children keep primary domain online status up to date. + Update cached creds during password change. + Ensure that Winbind always uses set_domain_offline() to mark a domain offline. + Allow authentication and memory credential refresh after password change from gdm/xdm. + Memory leak fixes.- Allow authentication and memory credential refresh after password change from gdm/xdm; [bnc#395578].- Add SMB_VFS_OP_RECVFILE to vfs_op_names to get it in sync with vfs.h.- Call the libsmbclient testsuite from the %check instead of the %build script.- Use machine account and machine password from our domain when contacting trusted domains; [bnc#404667].- Add a %check section move the test of the PAM modules to this section and add more tests.- Add a recommendation to the samba and samba-winbind package to install cron for openSUSE 11.0 and later.- Use a variable for syslog and add missing $remote_fs dependency for Require-Start in the init information of the init scripts.- Update to 3.2.0. + Support for establishing interdomain trust relationships with Windows 2008. + All changes from the pre and rc releases as noted in here earlier.- Move header files from the devel sub package to lib*-devel.- Work around bad use of autoconf interna.- Build Samba with debug symbols to get working debuginfo packages.- Add /etc/openldap to the file list and not only the schema directory.- Improve samba-winbindd and dhcpcd-hook-samba interface scripts for faster booting; [fate#304967], [fate#304965].- Move sysconfig variable DHCLIENT_MODIFY_SMB_CONF from Other to 'Network/DHCP/DHCP client'; [bnc#400467].- pam_winbind: Update cached creds during password change; [bnc#395578].- Update to 3.2.0rc2. + BUG 5504: Fix behaviour of winbindd children receiving a SIGTERM. + BUG 5489: Split the winbindd_passdb backend into a 'builtin' and a 'sam'. + Make sure we take account of the large read/write SMB headers as well as the buffer space when allocating cli buffers for large read/write. + Fix tag as a goto target we were not reinitializing the array counts. + BUG 5451: Fix for using the correct machine domain when looking up trust credentials in our tdb. + Fix spnego SPN when contacting trusted domains. + BUG 5285: Fix libcap header mismatch. + Fix pam_sm_chauthtok for storing modified cached creds. + Fix joining issue in setups with "config backend = registry". + BUG 4544: Add new parameter 'ldap connection timeout' to prevent waiting for TCP connection timeouts if no LDAP server is available. + BUG 5502: Fix security=server. + Fix coverity IDs 552, 553, 570, 571, 572. + Shrink ldbtools. + Fix reset of password last set time just because the expired flag is set to 0. + Remove support for symbol versioning in shared libraries. + Fix autogen for autoconf 2.62. + BUG 5515: Fix empty input fields in SWAT. + BUG 5516: Fix saving of the config file in SWAT. + Fix winbindd trusted domain child not keeping primary domain online status up to date.- pam_winbind: fix pam_sm_chauthtok for storing modified cached creds; [bnc#395578].- Don't reset "password last set time" when unlocking an autolocked account; [bnc#382111].- Fix winbind sigterm handling and make init script send sighup to all child winbind processes; [bnc#382027].- Fix bug with winbindd trusted domain child not keeping primary domain online status up to date, merge to trunk from reversion 1801; [bnc#373560].- Make winbind children reopen logs on SIGHUP; [bnc#382027].- Set only CONFIGDIR and LIBDIR while make everything and install. No longer set CONFIGFILE, DRIVERFILE, LMHOSTSFILE, and SMB_PASSWD_FILE; [bnc#395877].- Update to 3.0.30. + Fix for CVE-2008-1105. + Remove man pages for ldb tools not included in Samba 3.0.- Fix vulnerability that allows for the execution of arbitrary code in smbd; CVE-2008-1105; SA30228; [#391168].- Follow the rename of libtdb0 in baselibs.conf.- Rename sub package libtdb0 to libtdb1.- Update to 3.2.0rc1. + Move the posix pending close functionality down into the VFS layer. + Fix activation of registry globals in loadparm. + BUG 5452: Fix smbclient put. + BUG 5434: Ensure the loaded password doesn't contain the '\n' at the end. + BUG 5456: Fix missing echo if we ^C at the prompt. + BUG 5464: Fix timeout in winbindd. + Fix returning a directory value for a QPATHINFO on a msdfs link with a non-dfs path. + Use more error-prone form of testing dm_destroy_session() return code. + BUG 5453: Fix winbindd and smbd crash when dsgetdcname is used. + BUG 5465: Fix joining with createcomputer=ou1/ou2/ou3. + BUG 5461: Fix issue with Citrix on Samba DCs with more than 900 groups. + Fix wins null pointer crash in nss_wins module. + Fix lm session key length in _netr_LogonSamLogon. + Add -f switch for DsGetDCName() example and be more verbose on output. + BUG 5429: Clarify log msgs re: failure to create BUILTIN\{Administrators,Users} + Fix the DNS Update option of "net ads join". + BUG 5184: Add Missing HAVE_UPDWTMPX check before using updwtmpx(). + Recognize and allow longer UA keys in winbindd_cache. + BUG 5436: Fix signing problem in the client with transs requests. + Fix a valgrind bug in the new [ug]id2sid cache. + Fix Coverity IDs 565 and 222. + Fix dfs_Enum: In form_junctions, correctly check for malloc failure. + Add support for symbol versioning in shared libraries (can be disabled with - -disable-sysmbol-versioning). + Add new function wbcLibraryDetails() to libwbclient. + Cleanup size_t return values in convert_string_allocate. + Fix Kerberos support for CUPS 1.3 in smbspool. + Fix printing with Vista. + Fix deletion of files when they're in use by other drivers.- Update to 3.0.29. + Fix a crash in tdb_wrap_log(). + BUG 5267: Fix for nmbd termination problems when no interfaces found. + BUG 5326: OS/2 servers give strange "high word" replies for print jobs. + Remove MS-DFS check that required the target host be ourself. + BUG 5372: Fix high CPU usage of cupsd on large print servers by using more efficient CUPS queries in smbd. + BUG 5095: Fix the enforcement of the "Manage Documents" access right. + BUG 5460: Fix MS-DFS referral problem in server code. + Fix bug in Winbind that caused the parent to ignore dead children. + BUG 4235: Improve compliance to the Squid helper protocol. Original patch from Pawel Worach . + Prevent cycle in Wibind's list of children when reaping dead processes. + BUG 5419: Fix memory leak in ads_do_search_all_args() (merge from v3-2). + Fix winbind NETLOGON credential chain on a samba dc for w2k8 trusts. + Fix client connections and negotiation with Windows 2008 DCs in member server code. + Add NT_STATUS_DOWNGRADE_DETECTED error code (merge from v3-2). + BUG 5430: Fix pam_winbind.so on Solaris (requires -lsocket). + Re-add samr getdispinfoindex parsing which got lost in the glue commit. + BUG 5461: Implement a very basic _samr_GetDisplayEnumerationIndex(). Corrects interop problem between Citrix PM and a Samba DC. + BUG 3840: Fix smbclient connecting to NetApp filers when using whitespace in the user's password. + BUG 4901: Fix behavior of "ldap passwd sync = only". + BUG 5317: Fix debug output from domain_client_validate(). + BUG 5338: Fix format string bug in rpcclient. + Ensure that "wbinfo -a trusted\\user%password" works correctly on a Samba DC with trusts. + BUG 5336: Fix SetUsetrInfo(level 25) to update the pwdLastSet attribute. + BUG 5350: Fallback to anonymous sessions if not trust password could be obtained on Samba DCs and member servers. + Fix signing problem in the client with trans requests. + Enable winbind child processes to do something with signals, in particular closing and reopening logs on SIGHUP. + Add implementation of machine-authenticated connection to netlogon pipe used when connecting to win2k and newer domain controllers. + Fix trusted users on a DC that uses the old idmap syntax. + Only have Winbind cache domain password policies that were successfully retrieved. + Fix alignment bug when marshalling printer data replies. + Fix DeleteDriverDriverEx() checks to prevent removing in use files.- Expand baselibs.conf to match pre SUSE 11.0 products.- Remove obsoletes and provides 3 for all packages and systems.- Cleanup the use of the suse_version macro to achieve consistent defaults.- Set CODEPAGEDIR while make to fit the install location.- Prevent errors during the cache validation when ua keys reach a size larger than 1024; [bnc#372558].- Package man page files independent of the used compression method (gz,lzma).- Rewrite spec file to build packages for Fedora, Redhat, CentOS, and Mandriva in the OBS too.- Add a script to restart smbfs if NetworkMangaer gets an IP address; [bnc#373075].- Remove all references to the obsoleted samba-pdb package.- Compose the BuildRequires in a more flexible way to fit the openSUSE build service (OBS) requirements to support different operating system targets.- Use _libdir macro instead of a local define of LIBDIR.- Remove PreReq /sbin/ldconfig from the libtdb-devel package.- Install the shared libraries with the same name as used as soname.- Update to 3.2.0pre3. + Use of IDL generated parsing layer for several DCE/RPC interfaces. + Removal of the 1024 byte limit on pathnames and 256 byte limit on filename components to honor the MAX_PATH setting from the host OS. + Introduction of a registry based configuration system. + Improved CIFS Unix Extensions support. + Experimental support for file serving clusters. + Support for IPv6 in the server, and client tools and libraries. + Support for storing alternate data streams in xattrs. + Encrypted SMB transport in client tools and libraries, and server. + Support for Vista clients authenticating via Kerberos. + Full support for Windows 2003 cross-forest, transitive trusts and one-way domain trusts. + Support for userPrincipalName logons via pam_winbind and NSS lookups. + Expansion of nested domain groups via NSS calls. + Support for Active Directory LDAP Signing policy. + New LGPL Winbind client library (libwbclient.so). + New NetApi library for domain join related queries (libnetapi.so) and example GTK+ Domain join gui. + New client and server support for remotely joining and unjoining Domains. + Support for joining into Windows 2008 domains. + New ldb backend for local group mapping tables + Raised level of security defaults for authentication operations. + Inclusion of an HTML version of the 3rd edition of "Using Samba" from O'Reilly Publishing.- Add libtalloc1, libtdb0, and libwbclient0 to baselibs.conf.- Remove obsoletes and provides samba3 for post 10.3 systems.- Let libsmbsharemodes-devel require libsmbsharemodes0 for post 10.3 systems.- Rename the libsmbsharemodes package to libsmbsharemodes0 to follow the shared library packaging policy for post 10.3 systems.- Update kdc dns-only lookup patch to IPv6.- Move mount.cifs and umount.cifs from /sbin/ to /usr/sbin/ and create sym links in /sbin/; [bnc#380693].- Enable the build of vfs_cacheprime and vfs_readahead modules.- Update to 3.2.0pre2. + Add library for access to the registry configuration data. + BUG 5023: Separate NFS4 and POSIX ACL code in file access checks. + BUG 4308: Fix Excel save operation ACL bug. + BUG 4801: Correctly implement LSA lookup levels for LookupNames. + Add new option "debug class" to control printing of the debug class. + Enable building of the zfsacl and notify_fam vfs modules. + BUG 5083: Fix memleak in solarisacl module. + BUG 5063: Fix build on RHEL5. + New smb.conf parameter "config backend = registry" to enable registry only configuration. + Added support for IPv6 client and server connections. + Remove unused utilities: smbctool and rpctorture. + Fix service principal detection to match Windows Vista (based on work from Andreas Schneider). + Encrypted SMB transport in client tools and libraries, and server. + Added support for an SMB_CONF_PATH environment variable containing the path to smb.conf. + Various fixes to ntlm_auth. + Correctly handle mixed-case hostnames in NTLMv2 authentication. + Add Winbind client library. + Enhance client and server remote registry access. + Add client calls for remotely joining a computer to a domain (including calls from "net dom" command). + Add libnetapi.so library for joining domains including sample GTK+ app. + Fixes for Vista SP1 Kerberos authdata handling to only pickup the PAC. + Various fixes for DsGetDcName and conversion to IDL based structures. + Add ads_get_joinable_ous() to libads to get list of joinable ous. + Add get_logon_hours_from_pdb() to comply with new IDL based structures. + Migration of the entire client and server DCE/RPC code to IDL based structures and autogenerated code for DSSETUP, LSA, SAMR and NETLOGON. + Started migration of client and server DCE/RPC code to IDL based structures and autogenerated code for NTSSVC, SVCCTL and EVENTLOG. + Use IDL and autogenerated code for samlogoncache and Kerberos PAC handling. + Add remote join/unjoin server-side implementation. + Import the Linux red-black tree implementation. + Support for storing xattrs in tdb files. + Support for storing alternate data streams in xattrs. + Implement a generic in-memory cache based on rb-trees. + Speed up the smbclient "get" command. + Add the aio_fork module. + Modified libsmbclient API for more easily maintaining ABI compatibility while adding new features to libsmbclient. + Refactor Winbind internal parent-child interface tables to achieve better unit testing support. + Networking fixes to the libreplace library. + Add support for DNS Service Discovery. Based on work from Rishi Srivatsavai . + Don't restart winbind if a corrupted tdb is found during initialization. + Add share parameter "administrative share". + Improve error messages of net subcommands. + Add 'net rap file user'. + Change LDAP search filter to find machine accounts which are not located in the user suffix. + Remove smbmount. + BUG 5073: Allow "delete readonly = yes" to correctly override deletion of a file. + Register the smb service with mDNS if mDNS is supported. + Add smbclient support for basic mDNS browsing. + Fix padding between Winbind 32bit/64bit client library in the request/ response structures. + Added a syncops VFS module for file systems which do not guarantee meta-data operations are immediately committed to disk in stable form. + Additional portability support for building shared libraries. + Get Samba version or capability information from Windows user space. - Add new sub packages libnetapi0, libnetapi-devel, libtalloc1, libtalloc-devel, libtdb0, libtdb-devel, libwbclient0, libwbclient-devel.- Fix build with glibc 2.8.- Added baselibs.conf file to build xxbit packages for multilib support for post 10.3 systems.- Only cache password policy results that worked, otherwise we cannot login until the cache expires even if a connection to a DC has been restored; [bnc#373552].- Remove dir /usr/share/omc/svcinfo.d as it is provided now by filesystem.- Prevent tdb lock call getting interrupted by sig alarm; [bnc#364200].- Update to 3.0.28a. + Failure to join Windows 2008 domains. + Windows Vista (including SP1 RC) interop issues.- Rename the libsmbclient package to libsmbclient0 to follow the shared library packaging policy and remove provides libsmbclient3 for post 10.3 systems.- Add variable to define if a share should be an administrative share; [bnc#358841].- Fix patch errors with dcerpc and idmap_global; [bnc#280452].- Fix safe_strcpy error caused by duplicate domain name fix; [bnc#356025].- Fix two memleaks if num_validated_vuids exceeds its maximum; [bnc#349581].- Fix ACL inheritance; [bnc#351570].- Fix a gcc 4.3 buffer overflow warning.- Remove duplicate domain name prepend when user SID is in winbindd cache; [#336854].- Prevent winbindd from segfaulting due to corrupted cache tdb on flushing caches; [#340332].- Fix kerberos authentication with Vista; [#350032].- Update to 3.0.28. + Fix send_mailslot overflow: CVE-2007-6015; [#343702].- Additional cases and problems caused by fix for CVE-2007-4572; [#337823].- Fix send_mailslot overflow: CVE-2007-6015; [#343702].- Added default printing system information to README.vendor; [#113759].- Add missing define of AI_ADDRCONFIG for systems with older glibc versions.- Update to 3.0.27. + Stack buffer overflow in nmbd's logon request processing; CVE-2007-4572; [#326261]. + Remote code execution in Samba's WINS server daemon (nmbd) whe processing name registration followed name query requests; CVE-2007-5398; [#337823].- Change the spec file to get debug packages again.- Additional case for overflow: CVE-2007-4572; [#326261].- Fix process_logon_packet overflow; CVE-2007-4572; [#326261].- Fix reply_netbios_packet vulnerability; CVE-2007-5398; [#337823].- Fix missing getpwent mutex unlock; [#329796], [#331754], [#336854].- Fix the alignment of 32 and 64-bit winbind requests; [#331754].- Add dmapi-devel and xfsprogs-devel to the BuildRequires for post 10.0 systems; [#289599], fate [#302668].- Fix possible segfault in winbind which could be caused by uninitialized variables; [#253862c223].- Use FQDN in KDC DNS lookup; [#295284].- Update to 3.2.0pre1. + Use of IDL generated parsing layer for several DCE/RPC interfaces. + Removal of the 1024 byte limit on pathnames and 256 byte limit on filename components to honor the MAX_PATH setting from the host OS. + Introduction of a registry based configuration system. + Improved CIFS Unix Extensions support. + Experimental support for file serving clusters. + Full support for Windows 2003 cross-forest, transitive trusts and one-way domain trusts + Support for userPrincipalName logons via pam_winbind and NSS lookups. + Support in pam_winbind for logging on using the userPrincipalName. + Expansion of nested domain groups via NSS calls. + Support for Active Directory LDAP Signing policy. + New ldb backend for local group mapping tables + Raised level of security defaults for authentication operations. + Inclusion of an HTLM version of the 3rd edition of "Using Samba" from O'Reilly Publishing. - Update samba-vscan to 0.3.6c-beta5. - Disable dcerpc-funnel and idmap_ad-Global_Catalog as both currently don't apply to Samba 3.2.- Make nss_winbind thread-safe; [#293907, #329796].- Perform KDC lookup using DNS only; [#295284].- Handle smb child crash; [#294895].- Add a global lock inside nss_winbind as workaround; [#293907].- Merge ranged retrieval optimization to winbindd.- Update to 3.0.26a. + Memory leaks in Winbind's IDMap manager. - Update to 3.0.26. + Incorrect primary group assignment for domain users using the rfc2307 or sfu winbind nss info plugin; CVE-2007-4138; [#307623].- Fix two memleaks in idmap_cache.c; bso [#4917]. - Correct failure of libsmbclient against a version of Windows. - Make read_sock return the total number of bytes read instead. - Fix error in enum_dom_groups. - Fix logic error in timeout of blocking lock processing. - Add parameter "directory name cache size". - Fix use of pwrite in tdb code.- Also ensure to initialize ip_srv_site and count_site even if we are not on site; [#230963#c124]. - Use an off site DC if we're not online and talking to the KDC of our domain; [#230963#c106].- Fix a bug where samba writes the wrong default value of max_passwd_expire to an LDAP server; [#298469].- Fix if statements where we still expected cli_connect() to return BOOL.- Update to 3.0.25c. + File sharing with Widows 9x clients. + Winbind running out of file descriptors due to stalled child processes. + MS-DFS inter-operability issues.- Update the cache tdb validation patch which improves the backup handling trying to end up with a useable cache tdb. This applies mostly to the situation that disk space is short; [#256166c82].- Update the cache tdb validation patch to support backup and corrupted file handling; [#256166c77].- Fix a bug that causes smbd to 'hang' intermittently; [#289599].- Fix event based krb5 ticket refreshing in winbindd.- Limit the LDAP expression in lookup_usergroups_member() to security groups; [253862c209].- Don't reset the num_names counter in lookup_groupmem(); [253862c198].- Make the days before the password expiry warning appears configurable in pam_winbind.conf; [#287871].- Don't link shared libraries of vscan with -pie.- Increase LOOKUP_SIDS_HUNK_SIZE for rpccli_lsa_lookup_sids_all() from 1000 to 20480; [#253862c175].- Update to 3.0.25b. + Offline caching of files with Windows XP/Vista clients. + Improper cleanup of expired or invalid byte range locks on files. + Crashes is idmap_ldap and idmap_rid.- Fix reply when no dfs share is configured. - Fix the DFS code to work with Vista clients; [#286937].- Migrate old if-up/down scripts to new names on update; [#283706, #285187].- Introduced prefix numbering of if-up/down scripts that they get executed in the right order; [#283706, #285187].- Restart nscd on winbind update to load the new libnss_winbind.so.2 library. This will not resolve every problem with nss modules; [#174589c88].- Fix winbind segfaults with idmap_rid; bso [#4624].- Add missed 'c' character to the list of valid ones in escape_shell_string(); [#273611].- Let lookup_groupmem() only resolve not yet cached SIDs; [#253862c106].- Remove superfluous requires to samba from the devel package.- Ensure the returned structure size from _samr_query_dispinfo() is smaller than the total size; [#203833].- Remove 'unset CONFIGURE_OPTIONS' in front of the configure call to vscan. - Install header files with 0644 instead of 0755 permissions. - Enable build of the python package.- Branch a samba-devel package for post 10.2 systems. - Install .a library files with 0644 instead of 0755 permissions.- Update to 3.0.25a. + Missing supplementary Unix group membership when using "force·group". + Premature expiration of domain user passwords when using a·Samba domain controller. + Failure to open the Windows object picker against a server configured to use "security = domain". + Authentication failures when using security = server.- Add %dir /usr/share/samba to the client package. - Remove samba-classic{,-client}, samba-ldap{,-client}, sambaxp{,-client}, and smbclnt from Provides and Obsoletes of the main or client package.- Add /sbin/ldconfig to %post and %postun of libsmbsharemode.- Update samba-vscan to 0.3.6c-beta4.- In some cases PRS_ALLOC_MEM was called with zero count; [#273613]; bso [#4637].- Enhance the patch to the ads version of lookup_groupmem(); [#253862c89].- Don't use current_user to prep the security ctx in change_to_user(); [#273613].- Prevent winbindd segfaulting due to corrupted cache tdb; [#256166].- Use WORKGROUP instead of TUX-NET as default workgroup setting in smb.conf.- No longer check in the pre package scripts if swat or winbindd of version 2.2 are updated; [#273160].- Update to 3.0.25. + Significant improvements in the winbind off-line logon support. + Support for secure DDNS updates as part of the 'net ads join'·process. + Rewritten IdMap interface which allows for TTL based caching and·per domain backends. + New plug-in interface for the "winbind nss info" parameter. + New file change notify subsystem which is able to make use of·inotify on Linux. + Support for passing Windows security descriptors to a VFS·plug-in allowing for multiple Unix ACL implements to running side·by side on the Same server. + Improved compatibility with Windows Vista clients including·improved read performance with Linux servers. + Man pages for IdMap and VFS plug-ins. + Security Fixes CVE-2007-2444, CVE-2007-2446, and CVE-2007-2447. - Disable build of the python package.- Fix heap overflows to prevent remote code execution; CVE-2007-2446; [#273613]. - Fix remote command injection vulnerability; CVE-2007-2447; [#273611].- Remove obsolete samba-pdb package and required packages from BuildRequires for post 10.2 systems.- Remove X-UnitedLinux- prefix from init scripts for post 9.0 systems.- Remove requires on release from devel packages.- Reduces the number of queries made to the DC in the ads version of lookup_groupmem(); [#253862].- Allow winbindd to take local shortcut on secondary DCs in case dce funnel directory is set; [#266853].- Really remove Should-Start smb in smbfs init script; [#242918].- Disable 'msdfs root' by default again; [#268004].- Build libsmbsharemodes and create libsmbsharemodes and corresponding devel package; [#264623].- Let idmap_ad search in the Global Catalog in case dce funnel directory is set; [#266049].- Allow share names with a lengths greater than 32 chars; bso [#4512].- Check the euid and call become_root() to get write access to dump a core.- Add pwdutils BuildRequires for post 10.2 systems.- Do not restart winbindd under any if-up circumstances; [#227942].- Replace unneeded become_root_uid_only() by refactored become_root(); CVE-2007-2444; [#262090].- Add repository version and branch to the spec file via build-source-timestamp mechanism.- Allow applications to set the share mode while opening a file using libsmbclient; bso [#3684]; [#203737].- Fix for fd leak on error path in winbindd; bso [#3204], [#258737].- Add gdbm-devel BuildRequires for post 10.2 systems.- Remove setlocale(LC_ALL, "C") calls; bso [#2926], [#247728].- Fix segfault and memleak in wb_lookup_rids(); bso [#4434].- Fixes a known bottleneck under very high load situations; [#247984].- Avoid passdb builtin group membership calls in the DCERPC funnel patch; [#248556].- Allow pre 3.0.23 multi passdb backend configurations to work with post 3.0.22 by using the first backend only; [#245167].- Prevent nscd crash in NSS winbind initgroups(); [#237719]. - Fix pam_winbind cached login for samba/NT4 domains; bso [#4225]. - Various pam_winbind fixes; bso [#4094, #4288]. - Fix DCERPC funnel patch; [#245278]. - Fix vista and share level security. - Fix vista variable expansion; bso [#4093]. - Fix vista DFS support; bso [#4356]. - Fix vista backup tool; bso [#4361]. - Fix vista deletion on shares; bso [#4188]. - Fix vista spoolss problems.- Fix crash bug in rpc_pipe_bind(); [#244892].- Enable DCERPC funnel patch.- Fix accumulation of expired LDAP connections when winbind in ads mode; bso [#4009].- Fix all lp_dce_funnel_directory() callers; [#242833].- Disable broken DCERPC funnel patch; [#242833].- Update to 3.0.24. + Potential Denial of Service bug in smbd; CVE-2007-0452; [#240265].- Fix logic error in the deferred open code; CVE-2007-0452; [#240265].- Avoid winbind event handler for internal domains.- Fix smbcontrol winbind offline; [#223418]. - Fail on offline pwd change attempts; [#223501]. - Register check_dom_handler when coming from offline mode. - Fix pam_winbind passwd changes in online mode. - Call set_domain_online in init_domain_list(). - Winbind cleanup after failure and fix crash bug. - Don't register check domain handler for all trusts. - Add separate logfile for dc-connect wb child. - Only write custom krb5 conf for own domain. - Move check domain handler to fork_domain_child.- Fix pam_winbind text string typo; [#238496]. - Support sites without DCs (automatic site coverage); [#219793]. - Fix invalid krb5 cred cache deletion; [#227782]. - Fix invalid warning in the PAM session close; - Fix DC queries for all DCs; [#230963]. - Fix sitename usage depending on realm; [#195354].- Add DCERPC funnel patch; fate [#300768].- Fix pam password change with w2k DCs; [#237281].- Check from the init script for SAMBA__ENV variable expected to be set in /etc/sysconfig/samba to export a particular environment variable before starting a daemon. See section 'Setup a particular environment for a Samba daemon' from the README file how this feature is to use.- Remove %config tag from /usr/share/omc/svcinfo.d/*.xml files.- Fix pam_winbind grace offline logins; [#223501]. - Fix password expiry message; [#231583].- Move XML service description documents; fate [#301712].- Disable smbmnt, smbmount, and smbumount for systems newer than 10.1.- Add XML service description documents; fate [#301712].- Move tdb utils to the client package.- Fix crash caused by deleting a message dispatch handler from inside the handler itself; [#221709].- Fix delays in winbindd access when on a non-home network; [#222595].- Fix client-side smb signing; [#222951]. - Fix imcomplete merge for firefox NTLM handling; [#198255].- Add IA64 and x64 printer drivers directory.- Update to 3.0.23d. + Stability fixes for winbindd.- Fix ldapsmb group and unicode issues; [#143417, #216606]. - Fix net ads account management; [#217046]. - Fix libnscd usage in passdb; [#217363]. - Add the "mega patch" + Add site support for winbind; [#195354], fate [#300909]. + Add site support for net; [#211281], fate [#300909]. + Fix winbind krb5 ticket handling from offline; [#178028]. + Fix "net ads leave"; [#196771]. + Fix winbind username case handling; [#184902]. + Fix winbind name canonicalisation; [#210174]. + Fix winbind online/offline handling; [#196859]. + Add NTLM cached credential handling for firefox; [#198255], fate [#300973]. + Fix winbind groupmembership handling; [#211324]. + Fix winbind site-support handling on reconnect; [#195354]. + Fix winbind child initialization and online/offline handling; [#196859]. + Fix winbind cached credential storage; [#185053]. + Fix winbind long login delays; [#184450]. + Fix winbind crash for new AD user; [#208454].- Fix pam_winbind overriding syslog settings; [#201756]. - Fix profilepath pam_set_data for other PAM modules; [#215707].- Fix timeout handling for winbindd (samr, netlogon). - Fix gencache access; [#209409, #211281]. - Fix libsmbclient accessing NetApp; bso [#4018]. - Fix error handling in ads printer code; [#209409]. - Fix passwd pam segfault; [#211719]. - Fix crash in winbind async child. - Fix winbind failure mode for trusted domains.- Add realm to username if missing in net ads join; [#211706].- Move the LOCKDIR to the client sub package.- Activate the libaddns.- Add version of the package subversion to Samba vendor version suffix.- Update to 3.0.23c. + Authentication failures in pam_winbind when the AD domain policy is set to not expire passwords. + Authorization failures when using smb.conf options such as "valid users" with the smbpasswd passdb backend.- Fix time value reporting in libsmbclient; [#195285].- Remove update-messages.- Store and restore NT hashes as string compatible values; [#185053].- Added winbindd null sid fix; [#185053].- Update to 3.0.23b. + Ambiguity with unqualified names in smb.conf parameters such as "force user" and "valid users". + Errors in 'net ads join' caused by bad IP address in the list of domain controllers. + SMB signing errors in the client and server code. + Domain join failures when using smbpasswd on a Samba PDC.- Fix from Alison Winters of SGI to build even if make_vscan is 0.- Update to 3.0.23a. + Failure to strip the domain name from groups when 'winbind use default domain = yes' + Bad token creation of local users on member servers not running winbindd. + Failure to add users or groups to ACLs using the Windows object picker. + Failure in file serving code when 'kernel oplocks = yes'. + New "createupn" option to "net ads join" + Rewritten Kerberos keytab generation when 'use kerberos keytab = yes'- Replace vendor-files/tools/dlopen.sh by test_pam_modules make rule.- Fix pam config file parsing in pam_winbind; bso [#3916].- Update to 3.0.23. + Improved 'make test' + New offline mode in winbindd. + New Kerberos support for pam_winbind.so. + New handling of unmapped users and groups. + New non-root share management tools. + Improved support for local and BUILTIN groups.- Prevent potential crash in winbindd's credential cache handling; [#184450].- Fix memory exhaustion DoS; CVE-2006-3403; [#190468].- Fix the munlock call, samba.org svn rev r16755 from Volker./bin/shB3.4.3-3.8.13.4.3-3.8.1libnss_wins.so.2/lib/-fomit-frame-pointer -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -gobs://build.opensuse.org/openSUSE:11.2:Update:Test/standard/2591f43e10ca21b09c0e54395c18811d-sambacpiolzma2x86_64-suse-linuxpackageand(samba-client:glibc-32bit)?]"k%6 ZE%*]N vU M\3N*܋)c4hQw9S2ԉHL}l؄Pճ{`E:6)z=jsR{i= ~L-(K:(ofL'Tn)91 RG-Ä}05Ȣl+2{g`LDzaԕ'zbq<_s#nlϐ.oY0u̴q-(?z͘xd&sL~.()9h}a$:Yo6~_gsbͮ(ȇ<65 n-MNY7OjVIf:}.exk)ӄJ+|VBLm+-;mGi-]T+o2 'i1ܬ:߀7AUaC!}_n?L9^I74f,Ѧ_HsJa?} QGCtcؾ)wo#tjGsQAa+.T`O^X vEc]}-%Codki'Zk%I~k~4E%_"7WC&R~>gyk&?][#3s4wL<a [@7Y q\nv^>eUVG4_.̺n#֧^N4[d;^_q%/3ɽ{YiJ4/%i21$?(CƝ݃E˽+6w {$=gmF G}6wyW6v)-Uب8fnڊ.pEx+cFzKݐ{J^(}[i פ.a6i<<, c2/Z#F128r$F hZ0"VHT55d*ddF*H)%\`)+ 9][?ӭ"P"ӅJ(KϮe"SY25R/䪥Xŗ_tHfo[ro1O"#sv: @L!d i+,"C⾕B4Bs;DNEt#";/$4Ϭ|eJܥUzJ4ml:Jٸ|nח..i8gNd~_%&;էс܁ėxH&e/gJ2jx6Fn>Tp4)sXF+X B>oxtT Lhl]coR#:iwfTT!;D`GH`*࿵87Xɶh5(V Z~2:.pȯǾC?3Mk(ۓ2C8$ۀ9W &&~fL^8x~b~%_cm>a-{CM{a$udbm`xQz/&JH zE9a֟U Vl}&ձU;]t*T̹mLbi-x6 ÐbtvJ6$@`#< *鬒vB׶;a,E=zgl3J/ YGse~s]0Wl6X@]~& x!NnPZGtQy{] W?Q\߰K|qĪ qBAz*ZT)XjJ}u5e |80t MЯpk/{ k!A]8yn8acZq l)AA<"+.C5*Eys˧ +HY4HCeѦY@ XuCY"gk%y֓'|_aTflKt?gl&C~K UȐE%Wiys0Z[Lwy^8YTn !VRrTra[H[|1(Cxe\#ws o2`y±.E]η\75K#Śuĥf!Nh*-8ANvd_wآAx&r(vymNتdC -b';`}Z,Ƚ;@Xc'930lAӘMnS :L2TȰlXLF愹A\@:"raD Z+S>ۻʫw_eSX%L:[\UI˲Da4Q KCl$HBT@G|b'mr%0Eީv*6UgAu lV=m딝_x ^K?]Q <nn-p[!ύh9>jh+Q2X._ m`οdgǟU61|1e@H(B"ҏo(@[LLcKN!8^6y]jŏjg[!".۔cؔN4l._(ܗF]Kְww|ZUi}4q жJJgJ~)%9?1¼.\tMnn$hC~S" qz!D-iLJJq]U,j{ ;uꮦvss?}m1hS>pQN @`rS\+fR.[> \O#}Ԭf@M{[͡:u:qN9qJ6ڸ|#l&9猺#(m8=C<.Lk@,EHqNV*IcDWP4=P՟c85F?W'Ϲv* 4_hD.S3ep |J+!dޔB$lN&"#`ZQf|E=U]N6b2tMw5םD%=L<-v9aS韈QQWяN ձB]P׾QSOwHۘt8G bn@]be3."@'aMz51^JwlhV՜S6 'ʅL|.|k.%Af7nP;w$/id3sInHi{ ;dU/xjgwb%qR? y:pلx?Xl;gSNެKu!%RS0³.ewS[y&^OwG}Ok%jg5K17$wNaOKBU7IՓ^F >]VCיZGg)οR@k7`0ș^S,Xa4 }#ܶas~e@X9pk7ɶɄ tDdq_}0u:-y)桉!+Zul-zRv-W\f^w_'0ƻJ=<{`?٦>kqH'3V=1zRF˴|-gKy`cʵQ}s ɩ/M?< GA67!:PہXHF%vVL+ߡD0c`nRqr){*\ׂ@&Jh6pFʖci׷7W4xZ`L)uHe  2^a,$Kyi4m3,2ۈs^ zf]cC9v)]JRUE Ryd;x:M}!{wk7!%Ζ5;XnF <2?b,pϭWx >i4탾{b\ÉU?j15z3|RtХpikS3 mP0#FVIEZ$?-uѢ  z1Nd Ncj(m0sa<7JHϥ)⽊X!dW< OZga]!Q$iq 9 ]iNi3QPFRG 66$,j{u"YR[^Q$%PpJL . :߹85K;BiJ+=%W=o%LaB/'4_tV9-4[ZMU77=0Xu_J3v4M)^(1V:&aWp֡EH, #8ɉv ]2[&L-f> $A('c\z` qKX=pÂƞI3@u'8F>6oFp2xBR(lwZ}`4G9\yuBQA?4nA-E=qLS$P*X :QN]j127ڔ:~SPV!,{ǚ)u3Rm|8KQuN! 0cvd+x XWMv#}"LQ1וNY `^t. #+'${_RZ;{Fr׀51ma^|l&`d6CbSLZpIcq ̂S]V6SؚgXPOs }w09U`St A4C|D onAQWɋT. 1/z5gq  W\'TF&{!3}ٳ9mAeKQ+ay!҂NLŖl9BGFSJȍ 2Y >ͳVw?+5~qo[j'U -mfr2aO8QO> ``kd M{ɔ ~AF 9Egù:'} ޴wєc9:54yhWq@LÓ% 4ɛcG̈eRM/,zˢb/l^XÞņTκrCʴJVh%)bwEt/,roi DJdCTU|qrI(XE1 \Y3ب^<}1/NGG @IFR!zKj2vPr,hitoz]YkD^ iͳTڌRv!uzKQ|-Jn;E[qO{b^%P>'gMë%G wuY㑡D@n)vZA4spBK {D9vRsYkv_ lıw_8xw^nv C# \98dZO?fFS*DBo~Wqj( 8uݩXm0ve`AvX;2\ %6\>8t^,陖lmlƜ!\,:o%Ȱ@7eC꣉T Rz7dPRNs)Tr?H,qvz|s06eEOJ4߀9׉:?tx2޳Q]u3iN_|4UzE 3Vs'M2加=߱Jҷ$")OXORQR-D|=Xz$~J^KÄR\r7}X] mc6/}N{մh0 VJL7\&P)x l"5‚d=p4F?GVIiXaGQb;.CkUYa-i&(43[g S (UœmܠQ7QY* |)0$^[2 ޢsȍ-.[^hnu4BژUL"O" MfO2B!G=AkN츿L^CTD2趩>ky'tێ29np=|t5?ְcƀk "=>{r8+ʄX[XL#n`NэӢ֟@sOCI`>%Y+wVe-lUY `+SR&){{3qA@ǻ":e[ڂ*4*C ˇxsnQM C i&yE4 niNR}vyz l Bup5H V16 2 tmnׯAoKLEy"wTE.%u-l33!sBH|ZӇ ޮUrEuBhh*8xaSwz5bXAo qlE='e ؞8+c㊃J~ojV?)-y2zqnFZVy&etq>z!7OnW~G@l:NcKmcf_Htu Vԛ:'(,G"GƠ7"]HMzufF-62ur~\D bmXeJ gʥ\;Գ0`SE{[]4Ab6BѳlJTb3gȤUwHfca$JwaD|4 "W+$ю΄rN}d]p"8ȹb*]O F5x dq+{""87b%6.Q:݄_5hعv]z ;#Ϭ*G۟.uYGC1< =%gd"ҥW!1`! ۳>.Aù+D3,ŷޔxV+/ơQ]CzG7}f&WD~9f3gr0.4רEbiC;_#J.7ܯޥw'0sv{C+So8&6iiU~|t@Zi-*[>0jУ2!` dΦ[2qCE;ʠVF"}-v*n|7qYOv;LR\􇊓Lo-<[j} K]P^rr9aGW^pK+tC) ?;Pl=é<5+${fM{π8kjtz֖> v2B3J]8&<~gqw>ǫsToNE[Z@JLBRn$=v̠Ttmp~ei+tYWM՘`aͰxM*9P/Aef}NzPY (c);On%Rv(vur~v ~D:XS-0~z#m〪V1;ݖ ;P΋ z/#g]jh|z,;{e:f{,r E69@Glm׍(\~,- bm'T&矲InÍCJ|@Fxq-;ef[J/*[XMv <ѹ$5LﵮS$ 8wd->ˁ_S8nK yxBr׽A0lTӾʷKJ͹`ډv ؂M!6$5au c'EHA&b}~(`6I,OGݦWAYCs'U%ɋ,nJAE,3TܥrC#rFyrefJɨuj 5Nt{rkDXċW0Ľvϗ% |%Hpo^{Lw` 0n8d`G:m"~9v֏>s]_T߸)<&RtK`z3rm$=^X;E37*ïD^{oC 1.dѩwhx S٢}U3=A!-چ*P``O:[% E EL ׶>!+Ύ/:DI.FOKXcb%P5f} mVXz`Q࣓PMP6zs~QU~,P-hE)c:;BYJ ϫq"\_"1֩-[?J3v4;@ ČSh^AVdsw41Q#~V:LK*4^}9q'zыqNoȧ4&AX)0!>^a;Xp'ATl/-`j%Ra,cMoe//h}T vK G.'I|f]L?[nrrg^/A&pz%3?oiTT[{ Im+`? nJ.'SչfH?$.Qu:A>5:!E7s¹7eG :Aw~1m= ߲'erObOxΤA3TPW\TM:u>؛Bq`Ochp# ,+1~_j|wFoUr"0 8M/#0.wF}ƞU[@Z؋us6ghHT1VAZPV`lvXyJxxFq-5f |4ѧ %iNG1SlBt z+86V8ZB `C8ӡ9hb§ʙZT/P2 q&Nٰ uM ڗ:ȗ#&~_.ݾ!|]Q+(Is '//`k=uyoRC 3cVHR &>.5(=Cs~L=A>'챰,1G7J(0Vehj"Em9R2  :9>R qEy[rS9r@-S]ݠH|əPBhj5I8M/hޮb qm1԰Sj8^4$2n6\uNF0 E~21Wlsr>^*(G=dJإ4Tmؤ4(\ep_$#2aC@H+g\\~Yt&ED{}hm_y_ !'"}+^t+L\QgjiE {Zҥ(y_ >Dk߱XK>#I|CG/3+z0`.yaE6 WjqB2&A''CoLDf'+!="0N%o\u$YeF5dMbn56I^rFj4/O%LM e&(V[` Dp." mH\[/cM BN)ʰ=m|] l1fVŁteB`XTFA*]+—_g:dw"_~a:x7UDf wvz#N:=!?D+ZT";t_Z5:WxF(kMQЈNo!ŹAr.I] !+r5M ]_ne }+6b>!(15> bc-K®ұ2MU݁vv0mLNoq]";R 6zm]I;G5M&KnӜ*kkDW (>[vpo;$؅ W/pX`iMt/NZ Uh2QU(J#`^NPb#75>Fv[y 3tϯ֦l%Vё=4Ot-ܗ}]+^'0 Qml6 =vqzu7 ?fjKk<ѵqu"R[RBłM 'E /?12N^nK^yc> fi!I+j~1D]K'#ہ7?g1! /SmHj@ʾ.E5hRwPJEQ]2׫4!-'k.fRcսP0mD}YD2j iIg)9>ɛīR<^Q9'd/+,kYCF>3#昧o]htv~ "N{ )cCfgA%9$[C35ۙ3pQlǿ'US^:9%1M~29n?0I(.J2z䏣gyq#B$wCXhj@I'[fS̎8d\}s3$ A Iժ=Enh9&PSE8 8K)k ~dUJf="¨:4Co.hbҞS(~Y.Q4~ qA*(.9x'dlG^|TD/>ɯ~"H@ Xgu&j^8sh)+2P>bvYDh*15OώCc'' NqPj[\0H9FF)thCL̷m /I R-R|$B&`oݭweTܮpJx7gE?̸,P⹡59rAYS_jNԚ;Lq$,4ڗ[QqX~6K<#!Cc(KP]w] 걢=jX:җ͎a~Ȥ9 ('1- k=2~ ܝݶHƅ"O2I˯ylu9 faVʵ4Iͻ ﯣLb۬dzv9qOcdRgKD>(ml"7]%>-gZ{疫ewү O^vXC7# Kkp\B*MN:wa/hVt6&57%"C߿R5kzn|7[m$EfUoaFlV/լj8c8c X90篭쥡qi=lg{ iy^sO(!N.|k9b~ﵧZAH1_'OU^VPg8D\qg{m?EB8K|]Sz<_BrIkўrX6I+&"رw9]R;uj V<~XjNl'}KXM9KbME kTٶ (2aI|e-Tƶ]?im>wCoKnնr_`~낭u$C=͊6ԁGPdEiy8=^liY۹NzPOw:%uG40dg(/攉-v/ Ɇ\Ge(RmL ;"øKMC|e7b*iFwҞ @̠60Lx7UBܩgb@gp8y(@+'1Kg 3ree<&{nJWs;&xj0Gndǥ^hw %#D]Q =Os_:0b# z-޼Ci,sy=J;8A+( AQܢ`4VN uk,%mu4UŰ+{~eD5 Z$5~~r R[FiS92llUa}Fx5eRIC>({[ܳ ]Pj4b6xZ^"_Qvl2V +ٚގYls oo8 It iqڈ`e T ׺x'Ouch<]2H FQ$YhX,ф0"kǐ5 PczrVSߕU%[X~#X\[gBnlϣD,lr&[NǴvm3*ﾷ+`m8Mh6gT6 nN4.qcwHK=MwlI?FI 2ty`KnbspI$|!^Km{ޟNOˆ^/1P2Ä"޿q \.95#Nz<;%43q8RN5o28, >"YQ8| !@oC_k]S-xo[30jK]2|ρIJ&jMk%rc٦ziF(na D=x2yz?Vj6W;3.@|FpُB.X֫)R`$ ЋdlG~cx"?Mo>z2_Tꝑm@OMirD|ġpRPgY'Zok9f M+N켎LW7We//_ك>pxLtv&ƳrkIvG^hܳʰl#YVރ;( Rq`8$ y}L( iXmM ̅&=4D\N6̗Bfl¼'XH5F uW?a.iʰz{¡ߕ o]|vКG Jҗ@]@!ƚVLI;nMP؝"FBFd43;I.Qf +m$]՗Hh2"G*vo*8aol;H `pƃR0b6/?Y$/(s->hм~-NC#FҜq7xS˵s17}:\+@C؊?C)b(%s$Te֗J֚,ŝir>ZD3Bm0> ^OKkpE0N;֞Y R/C~Xub$}('ruy!^n.'AUJ<;T!j0@b!Rw $։?ƴ`MÒ}k୏BZ WhuE-Q!Ac.`p1s k>tH!;Kk*ۇN~" *u+Z~XZH8O p3|.]N ږ*9\K^Wb蠨ZC˯~/HM8(Yr2h'v֫e}:qǀՁcJpԖl{ 4g\K*2"\gYRV p%.J*Udny ւP_z&`-CRq %JuRAܧBvz{VJ wscvB_L-a!PXuPshVm2(T$g UQ3+ pC)E|ւO`*L1V^)8/=hLvR- lgtnIQ\}p]6n2be b|J&-Z 80ZK8e NQ_+T31&{K! )3`ԱSL[%_P2l9GQ4&n W,M=]o''?%C*/| ޸ ΅E0D.oAl1 A|bݱ`Y6²oV74mWwKY܃>a߀2|.;@70D&B]E>Y9'#$SH\+u ԁl3Hi,Hih#vdwrA{ڄt`(8*-d>.È<.m]8jIemhĕ[)=8DjQѾi)2<./ןC`! 2R<_ {KYC)4RBVgГ0:cu[ UV=s#PFUŃ3sc/?wh,hw.utwZ~5\_ HMusRb^b_m"QFw48IZbH/Q1I1{ӎ'2^++ +S%b:;v2'/uTt,ctQ- v/yn8{$GfoSܢou#S -Krt&H&@W!;2r"ej*CKf/Q,-@ ĕPqq`^7!U6X@&{Ֆ<# C43իl>%Q.}bn_uecdÁHZ".j|7tds(Z=yVJ(Kfsr$j6elp&Q!id}w!iן;3铝s%t(J",h0q#csݫE+H?Q?KmQڥ;WC}8XߋcsT.ڟ;1ͨ+㱔x7ZVN wkUeZ9VE-q<0Qz z$2 VHjkX bq鈦N3Qdt ˥t 'E}*=21b',9ᨢi2H<Ӑ|F:\:VE?} GA6^ sT23|ğ|?x2 ':Ejۨ,~zsA=@,6zcg9xWǯOA'`AXSz͕ ~!1jr`ډ&"@cYYM bXLFRrl Ǻ+iT +/nj <Fj<ir/giVoFe;[:oR}ܨ(̵ [+/]ֻ_;0P@@v gŔ>8i8_s-տjnQDyUZa- .ѓ]!b:Z`Y8 4?TB$E{USbcBto3xF5iykJuUy^V'@?E }bQ+}u)<&@bՉx\-e4t&T[s(ф7Hz"< u)Txm?mcã 7V{t%e611+/ л.8 2LqWxV8ge wncjGh|]K .ׄsMu]q:kJڱtr!"#.Pާ"e zrmݕa^f0Ti@ͅEޖ6LB,琮7VA-sPٱʍڙ"K2jbPlDUʾ[ +._x/xPJ- a(F #W}Y <}e~CQͪ;𮩎B6`V%a#fTFG) h»Gj4Sm|آF+<) ьV $m_T P!#VugUb dmEaiaJhn^sej+[bq,O#ѽX^`x4? s R~λOߏn:*Xm"\0Hdzsқe&TҮX#GO5RkG%xrf,x}o(VڞD`ڧЎ$U$L׋܉>~cHVine2y֨6Ĝ~Vigw1zyo%FJ;T]q3;0-dT3ݣboc`v)(eWc/5)sYѶX QQqCM$pq([Nc9ӈ KrKV'{=3!nK!p*M>D#I/li~]+ۅ(Ч!\yh1lɖe1n/1n@Jڎv2 600PAתz~J/X@n_@'qS=+64Iw&Esḿ~;hxh)hbjŶV A/n,Nnhujk>b@y7#ǕP me.id%57B8CZ*o?idӫyk}O3%^E pspFƇƴ>o*T笝JNL 9ԠOkxƈq5E 8vi8Od…WYO3f`¯]^CkkWEń\5)G٤PI I`z(땪V} %}.v@(󱬖ٴ^"L#λ &;'$ۖ N1 \ nW |4_S(A&e.s7dHf6b]{R6Hc`8;9oСVZ-hMF,Jx~_8);?3`:V|cHǙ &p)|wf夗`QtlewaX[ NB got8¤L29#}*RIS.Ri&tl/񎽂I~ϳ,ކZ u3X6Q:f^W~gUE)^c\թ𾄶L"-rX֓rjN u=*jF73I`ҟ22Jَ}@}xW=U@*t(Ic$c"cNx݌7*(=6ܣZ1b]Z^o4oF,t=O6w@)vyx71rgX#z,xfW?Wߚ7}4\AXiuuUJ=p'vQ!|L5fh! yP6Z,z=K>[oft3a3vەvCA#z?xfn{ƛZIoAmX)2L}e·mxv&rź/EvFG38E\rHíDXF0 χz* C{D&!@h1<$LxQg˜rY_+z_hֹAB6bXO2k ~8yxQJ2gLE7R ?0KH+|n6 69sg QWF f$t0gQ?Ͼ~&eQ*E+StVn|WzwϑsK*t5N ! Boz;qY\#.XN?ջ3*K̞LnD|4bg'e1N\)y߼/CA(&d(0̖kk (6[ wrlLI  ׌!،Pq(v2Kz[l7<($3H"[9I hYIߐO0 kLH* + 59=4GrWC(.Kά17\$ ӎ<7@#A #V!M5%" BQ(ȳl-tꅠb~[.ovCІ!M K56 Yo9:w#tgm2}ofN.тQE}rl.,Y沵A|Xo8Sd-j5_+6z$ٟc( b%Ƚ77oQP.NG!U?3 a"G9N%<*O8kxp4 [W`K\ Da-"z DE j{H̴EE ۖŅprWVif&ah*6@$ H]fPO `z~VQ-$ꝸN}u}&8>#"w˽Gt~QhD iȕymnE W8F@ASQ~ ȡ4̓;.pۃ,:>t_j&eq`UU(-qx^Mh.pB6^R`WijM~N%`]rvZchqXrhUN崨2xhҙyyd07>y|ZiwmnydӀrD՜\-!E"RJI$nu +V?l Q=3rƉ> ʫFI%cz82ZPRӰ~vOL4_>H26Q.ƚj#tְT!!.uT!t4 &0-ةD!2,IX?Of(NtXM*3bn0ɫϞ!Ea vO\5&Xq?, ^D$ƈ|wo"NEFe!$ܰz!CѾpDURAJ ȡZZMU?~Oݚx9+y0CF_G#դIjAv; [0ЌF`^%QQQTni6$[ӊu :#h4L;ӏA>cjŔq ;8|j9fwӁr$[}GTV%ݹC̄xpksv5 +)%qCų MSEEOyJ1_͵omG+C̱qIp<Ԡܑ[aO[OV[~r{% 3I{$PW΄xeq]=*ˡx+UE?E%Ba?|VypRy ϡRbt$ =/K./XBSN{U{ʂdb(f'ŃŖ{LK<9G#W@ai nr 5USXel8EnCy#z+f8rM,1waU6o= ^D}sHߗ~]2\f#%v5gfLyŴ31oDeU>&exkKWV^a:AM jwF+ n_C&8N;QV97U{nBq=2@#g*W2駥q`|?o=2=; 'Z"o[Yl̮\%E9t.XuH э@>\XUq7\@\wƾBtrViTxӿ`N"ݷ\B;KXy"84B3K9lLCl.[pf܀fF֗vYk|U"Q^@!i 7US+aH Gvj lf-*lG 3T;w@S&E2uw+vVZSn{է=(FAƥ l>)UN)Bkt;[ٶOO<2rĻ⠰ Rs,+>s %ʭA}l]/@!kz^ߥ.xFdRv$.k~¯`zS }Wm!+<_Y$8(9sv@X2tP(.v:$lAà O Bx4BcUiT$F)gotAލKc 3ݣHac\w%^_6 uen20̒ V|/DC\ jP߬a.uig7Du' Q(VSugZIq{xƷ:X_',MQgC NG^MSWmƥV+s!֊v(ʼaQ0NR! @*"COw- $j{lԫ[U ì/Bqr rt(>qR,53X89U.1gׁ9Ђں˭)&,a‡oQᮒ{ ouX~%}83_ ) q"K4^̎a*~pR(k-I$7OZ nj,E_5VsN9}mH Nq@3a ,bC#We,y u1`іHCRW[\N@5&ls~ΫR 8 GEw<)ZSƩZ{MiY^Eّޖ+?RgoG 8r!+& 0d®'TŸ *8 q0MPR՝lZLx`"mFf{Ryh,KגaX,0D J{WĚ{hGl.Օ7"ysNrWj|F}W/yF`JO.P`=vuig mA o3t,DU9{C-ڙ\2+[ned(;`%J{z rJ-S՗zR,1&x8X ~j1uJ{i6 c0~jZ&Ŝ\]B#3'RPT?7Vd'/>[߸c  &> ߆,x֞عXy9FI[ti v6؛j,VW""b B +1嘢@7ԭpHw/.*+{*vP\5`-ːSيBm S/2zL\|J~aؗ*8<ѢZ/RſΗ78H4AjAhyo*$E$jXMU~ zg9S=ZLg+V9VY$4@PN,.ߡyӝp?#Ғ|'3TjD̔rh P34 MPBq8ݒ50K־Z-!n+-DaWn̒Z]\ٶT!/qI4-{/~H% s3ay)"Lm[*{|EJ=ugGԘ2ð L|x bFm OS52}8?[oJmO/ۃK#'󣒚ߥU0d F {Bc$(̞Ԯ~CTčw OaidZ `-X!LIٺ;dA4,գ+\6MSy"IW\>q鐻PNCR1ڸBfm9"..8p?n6,@ [9{LehnQa$^(,rQ`+@eҶXt<%pjHX\{"/y(cx`؜?!1(V~* [Akf[S'-|eou,!.PIT  pxX" S[ëTM u\|Ir/|G[m0.-ahW㋮+J066Tm|VWqiWP8]o@&Y*=93MU 3ݮ~6"mbMSf%KbY Tg7Kh[Gs5ghMLIƚj[̿+ȞTun)NְvF>"< l8絚rA2*>8x00ٯB`7D46JΏQ4NQ0d^7,SNGٞt/|Lz 5yvLl4d.xEb%)L7s_w9%ݵbeUKT;V>}&ztIE# .o!a'j)ݓ/5ψ.?pJ}ZLV!l}Ou7SնֽFF'ss4oh K jk{g;j=[=-s@?;Bٵ$9'Z4[7wD,L^fj'`{IzRUV,+4)a !W}ce6(S9V_qE|SOV[/39*B-Ͼy[+Zr>(I{C/Ym6%L'6%&tDBٶuO׀VOa&Ch.Ϯxqޢ-Q"T)N-#R|=FIZ/iٿ&-JMUf(-5&W 7ƫ M}2RJXWFǠgRuӂc= Nm'XR)3_\XӔ?4Lms)y/iT 7 ~9*W,+wD(ݎ9s g>uܸC"á>k;QtC'PsrfE"yʱ$uVҐdPڕc,.4<>~tKUmn+\(DD) #_h{>\aતTΑim/|d﮶ijyoQ=tFv UoګMGxum}%?ZNyW{gSD".Bh?ȏΎr OKk)DX9 6ibuInD:Rl7fv]t;ؚP|Su7 \ǖ1+p쒇q!&nWNjS`b,a#'땧'q1ƣ6Ν[) ^ņ`6A*jQl'dBVa>} jв|lj>n0ms(0ufya1RibJX ͌Ix plkWyˆj <~v<<}3ݙ3ĝ ƒE2[krzĝ۠Jw^ص&WN@?f'ݮ&CvټV÷0GH0? t(8*]࿗9vJRVLL^,f0M҃ b7~GMAW6Ll\[@ f>:PVsG[n!}5O]Pag5R{F{ 獍 R|ONDO@%SԪwca%"ޡʛLvӘTph3+Q}e0J埋ho&A:4ug59Bt$)^R~a& A{ػ;|Ty ݦ `=PIINfb:LtL{,؄ZsP۝"Q8Цwfjhͺkͱ8y*:҂d$9pAP0(\乹&? OT_̴)ݡ+5hg8HEhiJ d| =}Kby&E':|fre7F2K5]Of=Fj^GE[gПzeM6kE9/H A*e l2(R@Euʸ`y.#t1nA':d(GϦPZTN%ڒ: |$(jQ`XZ!Bu {g |b $j;P3 p >@k[3DM@½w1G:"7@^tˊOM\rEuzMQڰR|X}+/_ś\Ƽr0w¯*@O{dK@ِIL} M,Х~X#{= <&qD9?,^:f"JVꤖ_HwGl63'ah<sƩtwiht? N ]I!.g!Ї+FºDgXl;$iP$x_E8mtf[V-b'Lh:Gk0YfA͗V=p,]n5: RκOa{Td֊Vf%+z?bj6#  W/q6 Sk%{ĬgEgv u|Mp"k='h%*8P_O=v#]g>ibiVlfֆuZzU+K[oP`:_ r= ]&w]xȹ*k)4r(fs&f}ykwU#1k'Uzǫ6>Xt?2UAXgx\<#7kc@cP>Еh5Bx,%P=쑡'Ä Xu' 3BCg &QoT+"Ŕ61>A=jWz̛ Oj>KbAz#tEYP.(G+ sºم*w U g<_/p(ؾ慇k}rfor'"Y݁[ܣhMįPbAoOw~+KwU$[P֗ÅzWJ[/z@m0ͽjVS@ ȼk L21IO*ρ_rtoWub5ZKwIc C_: XC͂'зMx>! _gѲx0wʮwya{ B`*8-Xqf_PWЎg8FDRΛ˥G{4S\:(F'l"[O}QIH7įq3}, dQTXqƥ@ ܱT(Gβr9:E)2]pc` /p\@)dm2QuL>u ̓O|=ފD6DZ/xxXx"qwQ|P !.=Z$>3Gp=@Dc~ dUz!@頋PC@+y(v#Ѩp$l~*VeQ*c$՜ UFNJS֏l+ Rͼ6; s& )IzjJEgw 96%(G>*B$o 7~gܚФUGFN? P%\^^Nw$Wb"M[k< R( 5KvGxK1mt8kj|G3=YrcT*3?Vd0?/pN&o߁̒J%\m!m@Gn9 bhE񋁯p/;5tAޫ:@B iebY-Vug0.L貆CSݬYXHq%anZןG]⬈1o(!<.i*cemd6WFdr]X$pVm p4 *qHڡ!U¥ J_C_)5o]̓cI_J)egb+-igG mvCBoƉ '9Ks@aU'3a^ΧzDu {Hc@,۱ *%0T Kz{CvE#]d;PolVUْÿDx5&D,asE8`6WM< Ɨ$u)#b L$5vFnͽ5_b)Vd]_.Oq$5<^x,qaaWe`Ҵ2J6՘srS~gbP`WW~#|ڪ Ԫyf1"kl1v DS \ĺtoL} C&k)]cp//ЫẄ~ Hpfo6y:AC&%!r5X$1jakXT"bpwxtgL7橤"O?83&fax{*G#wkf~Ge+$ˏMyt(!3)@jX `+KG#?[IuP̃Az~H=祥SœY@e+rNL} pϫEIܖp .:ɏ( $y'cܒsVr5"s2|1h1v>8qǠCOn3AS:W`X=R/ pXD v$RcRM̖-lpzpeF8[yj|!W(O$YVbo_E μEZZK!Eg~31ݰa#2.ȋv<{[tW*P qLB&;2`(Hb%N"nk҂i}\,g bu˃L_t"@A ldl\%rjX~E1SӮRy{Y bLtt@#T?8h8 ME`h2 |.byVSȥ򬪠~3߿ ^i$w8ؒ-Q6 Qz@0_R]@7;Br WTnsk=/6l>Vا ;z!l]+Amw"WA$?V봖KrV17`yK2@0ZҴf!/`d"RԌQ[4߲Q)2n4_5p)!|0Vh^[%>mS(&iK0:S?ʝWk+X!n NI4jXO4驈wqBk!.QV#FFWi1?~w4ٮ|NuRt&Ą̬%Xxnbqe2\oWZ3ô_/Kv!$M8fJJq*V.EeÒ:kq# Q'TZF fkS F8H=aA@ܚUk!Umv&Y/UQSa^P_2Oښqƴ.fWhטj2QN#vx PJ U(pel4녴i9$'F{,O*i>H'wPo2sh3T=XN4GWZ>Yet)[l>v\w fzmا5()4( [3zQ j4N 4uG&8 b/UYR>v `S䥮1o `*ρ`OڢEs7 3{nn83["MmDyʼnh4-Ihv#0MpRˊR7o.33z n2 `A)mgwmh8n&/akAUȤDܽ/CcC\P~U;m24u _2nHsH?nGjjEw$\-ϕ >!{?j RK[ _ )|+JZڇG8$i.o[>lMXh.7RYTѹh12Jg6߅.jdOp* iͺ;NO)Peg4(ʯ)ÝZŁ= ^h l1hbԊ<2C@:|Ff6[ehr`03[]%/S rqc ˺s)rm!O' m*R~p|gv/Lj Weq PO4::Htʒ#]t}\5];l <.R`oЭ=Bc˵ % 3ԡӛG0 Y#L@#4,zÛ$I#Db[H@?vRaRsR-sl_peύ(p=ast;(qZՏx%٪Y$\*ay]{y@5NL()mx9*ͩWpcL&F5.L067)# Sr* H|\}J֐V`ޖGgU67kŘ1ыZcL HfO"fM.8i (BT܇d\* ]bIw2TK/|M#Lw=~@cVL5cS6qDFj^v҉Q@ ?,Mç&.L&a6ބY8nوH~"qDAvcdP0?ޔ #!J=phyVvOXg\EL:p9)VzSڻzDCj1vbo0G$l21Vxus4gKѸU<؝h+(=$~Փ̡]/8ѰYjqWeGO8Lq\2, ;-GRUu4_ZՇDJN܆M4bX iTWqNm#DtFY3<Cv2٬VnDu甤-}H6.yGP嶨d>MxyP=!]a|EЗѢtLr;헴f<ѝ1֢N9{4xI!NS["Xϻ&/=b47R#gE4)E^P̳0b Z#=si_ݻ} ?|޲ Ǩ D$)wgi}hL&`'Nל[~E WSKԮzwHO9[[inE֩Q02>2+Qz*,!݆'t )LK`GM%Z&k933YRg3HpXXQ¸#K|~T$\dvશ[t@ ,>b3)lnjz(}uݳUGi:Ox˧(6{o@n/@lէlb[E7O>BR$EF k,:r|{}b'm"14BeۼEuSQ nZ}`0 Wĸ,l\dHꟙjx8r:]vl !4ՉzDf{v8vu6  [ǟڅrG JAᴕ?Ȕˉo*#frew(Ϯ lRľZfZ{ T& -,q&/ua4`ث}LDnǥbsLHE !O1AU<g0%ܕ<Q ˶HEx5]h"_¢;)=wH.m7YՓ=QJ"aYq͐Pp8H|zσh'`;jqL#AN,I%9^Id\˦&z6:?Joud.4N  x-ҿ[ yMkex%a{={"< u۹WY #ci:4 {s6!LƈZ$]o[ש1fX]|`>a 6qu&U(R'pVe+3[f:.REȅ)8h8C}4A zC,0 3:k ļ̚bocM% l{ hwB= ]L}⦸V쬑ux_T'߮W8q:1KC%L˜Q^'e1?DO/wGn5ǘ0!@n\{V'&Swym4< NԲُSAuCTI:.iŎPh'q@${P\C3"7$7 1qw6= ghH}\Xtс E,kBޘl{ϱu0֯ W#E-Z`qYX$c0c/LCwɛ6bw{&EBx{ð~ EB*G*KgV L0 g6^n;;< xE LaS5zkV l%]2 ۿjm \V 9< &0pgȲꂁ♂&qZr7goxiNϣ[рfV^a7jJգ=qaۍEz?&xkwXÁ |jVzP,:YC)Ɂ8>JP[$Lus6eu9\-hD.#\q;&#TQ"{mKqApA,3(8RV*ұs][|1xx+жQ"=3{c@'tbxȋBgC9nmH=Z]pB?! -E+q ~4*-()l-ITDû؁%$F@hpl uqgow~Qs/x%YMvD.hKy\<,thBv.DV?=u/){.¥H;1N> Kmh j3 vw}˧/ [2Z)'8uy .OʐW~ymR`l_wH? "En dJ~k(7>,"UoV"y%[h7O ePfu!Hq9Wex-4G|ykznИ4V.\|.n{J:sgGt=QX*"+*"c9vRS0e5#3Ynh$.݄Vіn6 d_=$1ޘV5u }{=`VUT%P[fc_? jʠBT&Q$Sk瘊[m"&xV]F!HAy6y0ar BR0_tXR\5վ(Bv=7c95_?ϗ= _ e@$jroSh߆V4Ϯf>gJᶮX ſ3Dȓs;d>Ȳ7**<@q4lLmC:ǟn c\򍆓Y=XA` ghaڥw& pCM;#Ug.ǭX豍2N}nȐ*bI;訃|<ñ7F˹lbutmk%e2iLjGZǃ!i ?Sۇ$&c\ҏ } >Z_8\̼a)Cx,K.I6fbXT ܔdܠg/\Eh9ʲJ0F :}3 u=JWIf˪.s~`k[Bs-P(4/4u,OW'LCd *Mi1L mnOA]$h@Na<s靭<j|{~jfC() +֎V y[pz ;G"gW0J)H|BXhź#+L#?z+Nҙ3*p/9o ntk>/e -gG(KqEWu@,g-[!Z5 B{cߡr*k& bt-wC"%q\mn(.QugYXH JqU(0N%Fu-"8gFF"'9؆ UAWInVJ<Ǘ-‘b鸚U_ΨEɈ)^omQRݔ(]&׆N$i`Ta4hb$%HŔZ?RԼ·f̈C.uLIFgwR(槚sM2D{?bK#uv<גJ{΃"zVM#]@.I/:z>x?=]y+Ǟ$D7>0jYyZjZ ĸ|Gdw| t HƮ\vvo2IlA;A\26uҥD!I*4MZ⎝%9>/J'>ނF`߰MEbCUqлsxpTN \Q1C]00,WN)69s 9$JcqD2ayV tX0\f p#Cg`u^+EDUBPwg )u Σ/+Gޛ{4rF&$d7}0=*)acGrF 歞.(d1ifl-h<`2T;SqśP} 3|;=r? =js`33&|A;Υ)UUO*[R. }mQO9anaN]_yx <Cվnj'oYL J 0B`Y!_3;G:E/FHW*AD%vqt:"ݣkMLgEqV'pՇY:/3Ƕ37ꆽ-{tFb,T V#(Ҥ!(&CQ[b !=MnN4]||)-lќfcnD#-2Q dΗC0~ <՛N-`h݈b]%!e6y^SHOxN@Ư#O ܪu[ץgde2W3ٷ1faDt-ʉ UC8hxMELElr|BuT=dwP$$ǜ{ȭXhCa]RCׇٜ5e|$؏,k~ʦ/AAc)nb48$k3Ceg\I4*BE=UCyDG~c WY1:Nd/uFlr 3;7lO$R]B)PMH[Nr";y gljeCjO|RhH3)m2/X¾Qf;[ȂJnK:l8l2OMQH@=<&2LZ*79@3 j}>:(F9eUQUE;9D}gDnvF"@S#( `yi&B0qSDzwΈ7/ӻ#10wf{Ne?mc9il 2͏l[Q9_nC7s'PB{5N$hQ3 qUVDd{<@";g -Ț|ok1@Ϧ O)8?Ò3jݏ24vU$tMxbDg)Ɩ{4)b\J2&arHh1SLkཤ</ZoOMM}nZo_19l52yw:ۖ,K`4Z<:V ؘk L>qkPg;7n&kJF^2lr5ªu+{Ktx&95Ƨ߄AIaM<Ǧw |z\WKrVobs \D^\Z8ҴbxET+A [0h}+&NozߟcNZFfOB*~,DuTtǐˌJ7ԽG>aR#uQi"zS?i-Ŕ*aB{zyOoRR *~D\g◬mq}Voyj(ؘ<? dm%7׬H1X?!VՒ18wQro,hFg|نC De~8 Bt|YUYIEPs=8G" mBzZY3B'#:k >Oy9:.Eſdli7hKx Uskn:")ҵ@|T"E|ef{PTup7Dfܗ ίX؃PSðCƑФ YuQ:5eA{H2~s""X=%]͎A@6VE t}2Bܪn$Df|[M%i۩?Gǃ6J yw9\? }-ԋdoLwec%8H#ϹsLWV(a$/r 5F'$]V&wZkdE,uv:Yػݕ`AQeS-?@ŦM1(uy+mv*ܝ#N8,\oZnqJXL%A6rTh*X j5lJqY lG>~ZU-0"5D1忺?p{+^3Tc|V:S-L-XMlt$m\AGZ"P0wa/ !CZD Lu\Y:)=#fQ/O0'Ǽ ɷ$eg'b'ȋ&JHuOԛ!;^ 2Gk7ޕ*]g@Chy>%XӐ$qAiڻJ[Z)8->hVkG+TMMTSXn+&7(h 9cUL[ Cp x}45LWi+0pGo,Z{Z28]lD!S}ZB2[O/ ݨJ>tp̒xcˠS>ZQ^QMhe PNWD[E5U\$.l" s.Yܜb;*q $Qb֫Hߓ_М_'WzW-oqt)`歘~Ւ=9+zȈ|hP7o2K\ WI23<4͟(?"EYg:\͖Pm7vi2OVшxDw+|feYzfg8`C!jDdrh6'L/_y-t0}[cHzbͧ[$_L%Xi@Gy<XoQjJ[o3r;o:G C o u/z 6ϸbyK*$Ӏ^z&4𯿙pr[󪉻*;wΜb M\mY_\8:_][3}gp/_A K&U&AvިfM9vgLy9)?vc~;6r!;UFS\J$T ǯZPj8:/W 8X(E rɓ]KlW[ㇰd5J;QOZ#98Q`DjY[X8 L@a(@ Z(?(5-AsYx^x*c?'Gf3~I,Kx8(*#JOA5麇?S׿+B?e7 &/6o&pђdz'B sv(%yOž'jANK(;X\>BkZK_]X%aH+1O]jvCb߱ztcg>%&B5{UE^3[a#oE6s,uAldah\_Pá $Q76 JTUeD+ޮfpf g3 ~RQ{8Gn35gvz)e=`Ha#t{b0>b1!rcOM=j1!_v<?MG? fG@i"mD-r0XZ2y-y}DžsƠ 2o7po9.j8}8\>-.l 9ŕs7"q*G_*=}m5S(- !J~c7[| MH)VԸ*eCW0#r;ᆆF}$1X`mq*$YT 9+dعB" 4η\ʖi̫6$|>+W|6iaM;oK|"mUpmc(vaCoOq$ÞF'-zȝ^<>ǩ=oષ|ܼ* =wYm5jz]x6ap(J{ :k [&<z1[ BܹBcz{(^M|M"zr2G$E 1~@$b%M^o8D}`r&kM̜TqI;!sÖwW^jCtuMGxdC\l4Yd-q%?19b]?)~'# ø+;BO/p]iY6 lIC q|#/ў%7*4RgƁG "KvhSk)wO!\܈t #U?K V[Cz!  㡠*Oa[F쾡̫N jj.4C=G #4l.P-++)ߕ&[Y?u\E`vf[҂姯Br ,"cA&*qCbgHVݏsL|n)%I;W$1hAë,יQho78D#EWZs]lvC.q7F{=?`$ C'UT-% M &0P,w*TZ>&rvt )]ϩ$Ͷ 8\y(TGk>um̗ :V+V#|| XgLFM[[sgyS X-Rwuk]X-솦<? gx<ȴJ(sڞ2lYbύ|v|KfQ(FDͺ0-Vi4+VW R-aC**9&U8yTx.ݥfj:2;TuZ *3T@a $P'>.*tC<|[n\UFdl[H`C\K~] BsəNDvHL3h4)j)9ͭ3FRvk;3ﮌ8?` Bi<{GNC/W |};M:}ӫTB;6Ë5jaWՉ{F#|3obQJl}^)eo6=ǃ#QʷߛJҀM]04.ֽGQ$)2.SB4J;Hڕ4!8Sw<&2\g0Mpa*C[_s:îMhAߵ*/s$u:$¨ uSoϕ~M-|\5tzV@Pn&`O3+WTTQ^ʅwgvyGBW[jA6ZtgiHJv~:yR=?+9#5gzMn›$f[6a# Mx h6P`/܎wCwYj|{p"C0YѠ@Y4J΀}_ME)1t汖ɑ{iVqIJtV8>7xCGIeK , ~՝xMj`!R'EUc7H_1 }hN]2n8wEhu ML:\!0-p~x\sٙP5T(wJzz?%ϕfZ^4[xALcF`j=&S,'%Mk>a&-+%g:Kd.^ט_?fNɝh>c=x⪆q3:5'bYiWcX#͵ko 8yXF τ_W9}#dhHrnߕa? ͝xL=y3BLa1Pt Nr9Q]q)C4diTLtlr/ K_f/imzZ^+\inغQڔ&Q: ['c.Sn'@whK"iۑeu A0j `:|e@)!w&'2K(Рl oKi5ÄH;Wy6A3.o d6魘P-mdC9%B jMa@yB¦L-]J;1xjIn]wg8- J=$WeMV w͌s'3d\>ሼa ʔY8/_ð;6S>~_Dx)pSX.{(%˲Qי[`_ѵ,/*-CR*%pDY};ӤTP]Ph"UrيAcVBi;q5w$=ZW(mT>&إ24oƁq_d-$6R#M Gx;2tgj!UAK O+(Dz2L) c((v{SEVzװez!Rە_xa a zz$M%J.uե'Eg #1*6Kj>bDPo5yǂ" ^} 50uWFյ{33}ŽoW.G̒!FR\ࡨicLMU*Q5M4UZJvbY [W+Uڽh^BB±)"%r~vj1Іq].L+\Vn';$%hZG4"'8\lf@;j  n)5IHߩy o"mB5͋VZ@CN{1$+tlO6Dz  >>cm5}91.x1rĻ7 AR?^^&֗~8Sg0юo YZˏ|TLlwb |g2țZ.@Av'vR {X⯮R΄.$ppOK :;`CP,< xV71o<.c,ͽ|[ю%1zx@kl%}6 i-rw dվ#Eob̞R?ȋ>uϔ |6wKi0U`ǛұnJ(8gsSpnEeU~G? 9Uߕ?5syĺ o5qCDJL^qgE0P_00k- G9CiEg(ZŲGop%v )yNHC#EVfق^OO 2a?eh-kGmpc9 $s$ ZUƹeg/$~矦ߒs5JP]o>< ǁ| 7WBV=Z4 i]9ZISHxA~w {#ݔ!z D]w}ET\RP6ZwM`ӀuN[Zi4`PoD+ʲ * ,kபȱs*'$c 6\zv_ } ǬГK"ٺ&(i] uSo[u݋*R9Yn%ӫTfz2>6w"Q|GH]`+TMhAI\ިuJN!еڷe. 'Bp[`wQaړ<_V# !Z!_m<A\Y햞×;Hfqc˹毇 Wjh:˜DɘәX\Ÿ@ Pî83sTcv9+?1ʅ ` RMae= pʱjZ%a<͆¶cRDƺm\ `3 ƞIG|MZ-^=V(Z>X,Nʓ~9eօv2^w'] &-_ Ռb2Đ(5@P=^Ob6*_`f[gױ z~H5NT,>p|SaHRxf02C4 J>鈘sG%؍e$ȨV&`3S.~'2F(ξ9"'lId!d3rUs2Yr#F8#qd;zMhG7&RlQ".>S83X7knuK3n4$+(l6]p ֣ÉXq`9fO,'QُL9Ux5 \W ?Y)`J&I/ou)`:UFHA$ߙe )fKˇ@<̡wѹJw•">z; 3LϰߞT2S{װ9)n?hL%"'KV[gѝf ިpܚS2Ta¾BV[`=A e/)6ƒybֱ@CK,wM]1Ф"@U" clKP"6ɭ&&h#Dщ勞oZrDL?dTc^3-e;R)3B52l!B ,fԶߛ Gg0 m5mp#b̜8D(7>J1˵T6Ƕ'~6WݙhvjGG#]lFYD}k>8qP?0fT҇ DlM^BҔP6 (H)Ty $p93k}Aګljo@؈J1W75 0TݚA q{fwa[ ۭ$ţ_6qF\)-a-:¶VT\}d6=;f\jd61ȿŞO6hJvu@pelF':e[.]@qeTV~᤺1Q|:ҳW9ijӴ J^Zҳv~˴zw1ߛFy@;<Om#f*ubNGϠ} TQ&kco3]ύ#+ r-SV)q<ByFԹ07^y&f)W^զ;2 (<9;jҰR֌Z+*ʏ!%2aAtaSyh_|&qAmӘ|& mz!(,z-9 %{%CGZK|?)45!@̟DVF֌xWԗi{%៭x99EpFUzx_.`\mpm;Z=&DHfO=תU+i{)!Hн8;ԭgӝ*3]>ϥ :4ġUkm[&= N)Mo¾:+L l)Ձ59@ݝOsѡn,#wǸ 8Q=Aգz]"8JmǼfJK4.USA| v΃NmM$Ò[[#؟2_}k "|s[\s$SG|j Sp;RC߽qxHXu䖍oEXf^PLzw tKǥkY~IOL?Py,I,/dhP73V1F8[Fct_*-+ X2VϤpʬ (ԠwmUʚkqR3Ye,7PL="(z:Iu݋UΞ(&1+FFwVnL\]("d=W_h9$:o_?|9: Qu5k |FK+\x%-1r'G~:Nhybfwx0)gIIJYZ1j`p6"3t鬔cr>U`zT};|1QYAʽ7?31כ3 *X^TPˁc*OR#Z=׊m-;]Ne:3ӫ;elTE&7p]}hD2>X3 :r/ g(pVǖ\z-\& ;CVN`I+ rꇃzy{Q"9/W\;Ij̫3)G$ XشP.lq>@Y.!HQuIfP=2!Β3,\  ?8- ?3LjjNkVAW5/sx4vJO #c@QKt䞗GJ?Fb~ hxCXӿ{?UFJޔW8d<iߊa@ϫ/xYDe>Y⯗@pF$7]Ⱥ+ ^ߤ,cV&*S(9py 6i2m%1zv7z&v}ʠJsR]mL98}0]+TH-%܃hg }ҽ s kE6H8؏6^&w*Wwٸy|Wi =@>0 |߳e-@U* \̪ٗz᭯[w:R}'?*cQU_ݡ5'Lǁλ-A}7Wt 㫏kd /zU8ٞ's:đOİQ6%Z+ģB$n%YՂD5& #AZ䂢o鳄3+R v'XJUDlQ a.A20]Ɠ1G6*$&n%vi|G EkL+6PkO 74P  F8LMy'Ӹb9i6ukTOϭse Ez u![:SD 2Η3ӝ%؋ɋ z9m)XאtY3Ckh'#A2RK ±B4NvgId qmFşP:r.LR4x|WLe!\`q#4SޣECʗ(B ǕL7"FCKy;D:󈜍و*d!xrAYK+@h|zij}~vC?-qI H6zaviVUͬ |=Q"adDqD冫a4 ]e/.hv#t"ȓ_sO-O?Xٜ#?4:|m( OQ A9[zgij@>~,O;)$Iөe'c%"54&(Ӵ+ʎb|eSUcriAY~N$yӞ ^#W_ ҍS*hwQ7C2<<|G\7nX@9dHLyC{Eep/r4ZzC .j2t)E~hMhCCDۍ&k=?X_c{r!7sRXQ#P wly\/-"zeJ}XL/j#-!'JfăBbc 4a5R~n|8~i21#; pUMsM M`U- mH-=-7^\Nh텤2mN6!4VsVW:yčMF?Gezq~0+>95M0@PeRaID4dlY:`}ՉCk>Өel=f[{Wퟦos.j Q&/ [+c< s;,[LyaןB+DhGt[O+QHP5MN}Bs) bݝc!ʕ6'rmqyE9MՌ32Me5Q%xIƨdMa]YAB#?\4>ghiɠ?C, _j<{@ƪF"CSdZEP/ui- Џ@d=j㽈s'Nn({LRb@+yܸܶ ܅|JoX:ҠT_ٿ~lRpf ۯFmQlHd\҉8XBbnUh.Ԃn Ez2;TO|_+S_rlf Is6Ҙ* N wA?iKB}C>8Tdޙg b៴aH S^L֐wiҜPn 0:؃Vp1g(./)7EDŠѪBƠe09󫼤 $O;̂2 m*>S2LEڴ 5@!6fR)4ΕZFذh5CmBbo蠔,yA~Y;:ԧi  F.utOzl@ O醴2tл%nת*~h5uy7l4k~ u1)u!%h -AjRO]?)*lߏz' [zm/, r:2^1Z {_7?`ʫUF8'ZY5 Sqr#et<l*z¨b?|vH *t24˘Ws)9~tU-ND13e%(HT$]2[Lr@=4E1zo^LSGݯ%nzz OgW f+KFڱF`Q;Nh߮M0D}NWf7<dl~iuDLD9C]ckw ?Ȁ744GmFaunw$`VTjY?V,->ʍ?:둨GgF· P]2 ,eÈU'ܱ2A})`!$aDHYF(ԋfYPdvOmdlƏʿѤ] ^Pp +ilI|4k&QXeԔ7(.̓ظU,t;B֢jfg7jU>u2w9Be\VEd})6<3 # H>N}X[{$hИCqYJ[Hƪ%{u9UjBrx5qe9}P@HlhؗP9ZĿLj.<QWCi wyDmDJMo%a2g#,փ g^z]6j bWHc~z+TY]lC⚓C~sSO=Ǜ7FY/}֗&rs~gE7Z !`[|P&Aڋv65`rėA,H>ʩS\Ge:9|R＞I/7k4@3^N|YrE>} 2%2)hQ!+K6W _-8)#VG1?+Q͍K"1%QoGچMZ^eIv&<|,mFb{MvoYzj1Zh  04a^ggb;"!&I?#y/şי˔ArJ1o[5^]l5%l a+f)P3P<>柢.SB(ѶzP1]cb, !l,.Go%Pv[ _k16-E~f?s 돚RE O7xL%NNǥ%X%Z0Q>TIJ%44F#& ?YwBN$̓ʧ2Tk1[fD a8ygApYt7q,nR@# j\|=xtJB߆T֣n&;W -F^#S E[Y/ k\Rq 5'm^"j \}u_^)|I u[=hs('Ar71^^`+d%7qTg2T}ɹ ssW7au֔G|M}2h3D}3s72U<}Ӹ:KG*nihD}J\} ]16m3䗐ix],OY'g5Nj5!lӌ! 'ٱw_߬䞑<-&`+z[,; Q[E"{7UZ~6 }fd/0쀢 ˊ01) ڸ!MFADS$e$֡ݎޡ7 Oɚ |DBB#Bnw2Bކ9qe4H?d)~i{H!EIۊ;%a|7:#-K$q56dm㖌)>}Ղ+QE AoC/N!8!]ohx=.JDhѓnalM@P ۥ[t^V7/lvTAQk<Ԙfkpj1B1B"2ހd;8:5>}}wT$!y rٔuD%/bPgQ#,P@9ې9nMVg%I&9A.k'iA`I#%YTlJlˌIQqLF'ThbBzN)QӌI?7]^ _W壏sR]-ǥ]9\'Ie$3۪`|1Hyj.&,Ox[Fud5;_I`eMB'8lslt;b)N븘*,F[6HzILjP Ʊq޺>a0fyuRY~7#쨬x=!-sCG8ŏpcDs QuKfAac Aop@誗rLZoNs89M(p|eEg *~3FJ#XSs^@n |;^6,"^':TH]:܈My Yg7?9ߍsbVmVSċy %P$`x{ot$~&^g ˉ ;u*PÏ !ٴb׍clPZD$7@"e|Dl;Eo6HBW4 lCoxYqcV-5c `8!6ޖ$cxNM(k#!)r찼єw|7q+}9T*VnlHlH^^]/~NxUeǦRd<lC+.*|±'yϩa]Df(EM@yeR*F'd!, qg ь@VV-+1DVIʃm0~HѺ'Rv;11b[6_I("{emavR B-dUJ[Z?>"QDGXA3ĠsyEl64P6)>h նRJ"H#JFg7=3i{8z)jgG߭{hue6'@{ц#L:yfнĒZFᄤ4sꔡJ԰(^ Rz7e'r=]߫o`4uadLpDEFAͻ"\7vZ])\ok{@[ߴg"`TjYD L9nu#m"W|60*j{DVHL u\B}XN$PĽ?k#!KNDcRHx \hUTѱ/O(Brߓn9CkUVנǕiJQClj9I0BFtoEBhH,KYO fFq, jL7*%wN5G &Az ߏ~q6p`$O݈q8I>EZ.8MjL{+dKmѶ&"cGL{FmGĔv mlj?I$9_O ZW"ꝕRg_JJ`ER( iB~.PhѺұ}$ꗙwVpyB&Qݟ}ʑi`}i醀Zk'3\TnY?vuH7yU<)o+u耏5ȨU QmYPd YtIt̂Utzcb# }UH p$O㩑nuk~gSR4_XfxIA+" Lj3ExӢhkoMx)?tqH~-yffEZҠ.M[>Wx^k Rt>oF)-@!Yϗ]= W_U`#웇R{бz<"V #$;L] B]'0}KPPDQR$yH~|&ϼj&1/jNlf2[ic Iyjqē(~{ZyQ$AvH&ļғ  6wX>hzyvdJ*ҠHigLm?RvMd,7]g:՜'l܅{}ˌFg?_{JRR3Ԭ+]< i໬2@2ҝF ׇu9x~ Upti56=pQzԵ)Cn/ 8us˄E)ZD&FI(8|dZ-8 [V/qqq!] ȜPRy"YN=H&,me=9|B|ȱUw"`;Xr2ͫKYI]k_LDIM0s|A4[;x9tU-?4K7LEb<.߃*.#+=P_3f*@=zNIiC@c8[/K (9'Ѻ+ P:pHF^8>?mqU?A{2?"+៓rAJ֬RqE88h0cr`=PF,!beLoOx(~RۂKKϷch 2.n !(p3u˛(˻5v#;7yqy:0=@leG^R$ ͸1lD &i;R?q!3Vz >>*Tk("YU~7W`hC!LIDMR^ȚwSkє"GTAz2el*#9ML}2%aW6*9OdmJ5>nZXssd ~@K 4ݫ`rL)Ɯl{+2Ă*N!%%TLkO/tu $[@I0~~CG ~HqP]NWD ڶ R P!L\k4rBS_(ko +7׳δ;T' M&onVr1p\?9p2<8 cQԍg~m}\]ъdbx3JmB@v9I F׼.W'(S5֯̉D`Qq+\s/l%$1SbPU+(e2hf;cu5!EW`ƫ: Ǖ7ĉ۝Jˇ;0F625uim4 |/}P6>@p|um"us kDwŲʗԕtL#K-5eU ѳ d8k&8.I[Gq+gv_/BdrB}3J3sGYNx"æV.W#8LPB[ (=0~[=iZ?/27@Zvo&~KЯj.ih7 yXo ;<.:+=.:=R(aőT N|2uЗ!c$ *Nٯ*b#J{v?t!yӍ*B՗̑D~t#$´7_cV=ypA.3|:T6k 2s*)$ |=@ߡjOcrhvރ o4Tb ܫ[W(C,T]~c&86[%AYQ1v2;7z5Sñȝ &)UIT)rjOvXlI.|NǣVYy pjh詢w[ 7yAȻ*r ga >AZ7|pQs39L= v+WL*"GgXr.V˷>Pٝ+%ΟZݽ:6G#NS'ahcS:#h4*46k2 eޟ mRgd%v~>`~OeB4f]X@A ngpDu4?pߺ< ⮥ۀ"j&{jn3LI0<V 5"HNX[ bJ 5kTNN8R*c*y]IvI^af)暈[\KC)21Op'r]@b P8Q?ZKr<6d_ q>ۜ "l߉FnMɠ?L_XΈy[mirBt4p݈٘/Etҩ~Kj1g1w8TmX+^J 䡅0_lOW]>ngtnqϯQ#}U2$ᨽOJp[i=ޗ+7l_Tɳe G V0ux}7(K:;bHcuӯ<;Dzh7!;!pv35,[-\?mP=E?n= I%59땬1#^Ga͂4dk#ջdoҕ7fB Gd5B #'0Fr,F) ~@^+QJ쎔;a >'T;[ ̫ _~S(ZA<4Ժ3iQUٞ+窊XXݿɀ63Q4.ٶ\13w]+Cʓ':#;LKSwNGGs 0a@þ0b%ŧ/:6ep&c>gYS`^uUdu$"y@(RN0yYJʛ4Q =["B\)˂b(Ә_WNNp[dW/hd1b%M_W2(‘Ɩ xіG%iixB5AL/݄JrapO؛f*EpC[N:+hw1`uEU.֕r׿iM.\I Rv FetzcM 'e]_,2tJjDPzxEόNu"Z`ۙ 7?t 'fZ$A_ް7rC`t 9WB@lIynkߔ0( ̒? \0:-JӤH FB ,BL4-*}WگIwƴXun/:h:GDZAscxY:ھBx4҂V0eE7IE*J %\uu,0]ߓ+%# fNL}ed$h[Yޜ 0n"QgGhC:&'싽+9h^MOaxcU^sIilIՇ|Jk;$ ^3LO\BE X"ӓ%s#2sO\^Eْ%`.(@X%]xf["5wÜGN 8`RpJè;nN y:UY}uF}^}Iyn\+m$ ﺅy'/5j%2GaEk;9Β@i~biN;Q#U@ŝ0V1=D/_%p:QvnAӶ/V&`NӢE x9##GdxnTz_aN bzټ`fX,RaWQDO՟ISpRwC<2pJ1RtKDR6KX$άF-j3 VQ"!\_lt>[ї:'qc,H}1x=XWޫ"Bzz|@oXS*̾cM=͊1?XPugJS-c2؁,1+sޓޝ* O?EiB0U٠wy9-3Tv,s) Q/ O_<{0x['gql#L4lSdEK*o?*,!Ҍ ÇN\Kջh/gL2kJ(Q<;b4 N'}6-wb7vd3Cs|kS{/Q9؃x$(dt-7Է'jn<`J) +8@>6%R(MLO4g_FV񥔼[9I62s@ y[_IJCwOWmAΈ{qPC@Qۭu,?fO@9h #ȕ!&57@LHWйFiklp(%hUuǠ$6~iӞHB L$[s4ObtdNI{iUP9!+WagvXi.=0hSgjpaL^Xv,}Jm4kylvJF#VQ[d)7׷a錒O|Y跩P̤̑Z\%494֛bD'E4ob&h~V`UicrB^O vF+rERr&a:gx,a|UEQ>X; '1_3RcSru\΂o;S D& ?!W_`#> vp_F~Frr<+8:W^ȳ}$45]? p@,6_)Zh*|'ɟY| ;,ROmantmmWwFR^'ZTBo{ךϟx*Wͣ5AT9RbddL4} c-W0kuFWJ(􉵂?ur`a4YQ8*x *wNLzrG/ Qv۴ $WطoRAA Kr@w]ذ"(F1T!RM! ML,1nWf6,t+76vMID`1ݴ$ `5|#ܴԚ&іN@;6Yh'ir#̃QTɆ׵,/ߖA He7}SE72]_prgi=TE4Rjkno=h.]ݲC` Pj톈{+/,nt8VQ^@Y`uFEurk]A_$#6_$3{iS!o7"`ܩh^?uh#BW$\4'莭g(fտO/Ԋ֚sϪsrV0ґA}Ο սlJd\,J$l<BPe3JgH@Vf2kfېֵZ(#o Й;%(VGfuz %yAW

]Kd_RudM˗øg\*ua'{ngv3xaMk GpXfM6IcĄ1C[NĎc3@c 9S\e{*|Kb!ZՄu'}xR.d;o,BT,\'ek;UokTW=#2ԫ1Z{Yj6IDekE +FC C`Ȼ;;=坅`ƪ5.遢 8{ti\Pԫ@$m#vo| wإtQ:b9*1*`Y[Wͩ`ǡ"c/;95 kq,3;wJiJ-NjJɌ-1=ٿtV{]~c @V0Af]LSI@n~!Q<Ί,7A${5cC\+ p1WVq_Pe'4yj7M$FK-0UEj)U4՛?هd\ʓΆ]Nq ]LA@P4 &W LjƼiLanxUறYi?Hդ,7u !j<Bĸr\lFiB*lFsӡ&Kw潈[+O?)ņZ2 Ǽf4 %B[UȍlġK2x%AkؚT4%1h@#?#`GbN:o^TI%զ h]k[ t˲#!,`hXgٳMƖn/ˡ&(]|%QKt[x C~S`R:; [bd^}Gw |bK}|'*RCjpuM#`*LZNsN3?.BڦwJtH[~$L`XSUγ)5└۱_XM`S9Wzt;Q)Je'+VSK{Nͳkг"īg=Qzf5h(>CcNѸ=B&fblrV%M?fs8 A_֘xKv_83>/TTrP&ʻ<'5s.-6GG컑n! *:V|I b@0*cHM9 a,Kz?ønLr>c 1<\2jjIDE^Eʥ:KLjdW ;SP(}Ċ@*4`,n*0A k Gt$+:T=L5ɰ,U~9cҪI"'Nv S?HdDya*(.tbe&_Y/%/9ȭcK؏{qR_y8XaK8#_ST&z11MzH_a:)dztٯu9|P_k'x,\VN+yz;Nh K1G/ Uڳg?As$jwKeo>enIgr8oigYu?vsd=%J ܱVP2ccoV‘[Pɝ"0Iju ZC-$,qzVX)_\^w?0(xA,?e|(Y܀[v`,* Km k.C˾nޣ o1 3 ̞2P({\Gܤà xZ~O/x|3%X ҒRZ%YK)D?Mb=]JrSsO)kȬ?>up_EH]RpSAYS֟m!vW A."? BΨb1ZUvLq`)4;\) K'bW772-+/˭p-rr]:Psj,KDhgF<1ð =Ap\ة!\wXZ-v%RFBi;^! Ǣîm(ekb:þNW8M.FlOӉe~ؙWNHǷ3`y<_d#]J⯫P7r V6PMc$̐"!f9R-O. ^]䖄Q틔dKa^Xbu Ҩl.oZnyZW] 8lͣrb*Z`^¡sWuĿu.5,riWQ6nr'S(__ 1E ¦1d.{fv-+A2 ]kGh@Bx?atG=IZKPyyطG((R,D&dc#pcQ-ftݔ䇮'aޑE? m4XT&`esp d׵I4bogJ]s%c̫ny7 Mkz~Y%E>i~!bkND :U~88ߩvVLb#YtX&#gJ+㳝m#T^Z8A &c3oa~g9¬NpдytRN(2r:g[w]Cb\~FRɧ}TbYAwFᛈj6{򡉼""٥lJ !ɧ*FEôۦcreH| 3aP>Xk,p#T+QHSHv-U3(d@R<\p@VY}R {_ł.(7x0zv'XSy/ΪNs | cǃo@6qj?1|n2 ވNޟ87a)x-/*kM~:;V]=ӕݼVK|50wǧJeNUIַ#R4#r@0LFt58HPT)\;d5πQn:.9%Kѡ5-͙w{~'X5X$4O/z2 Y4r)>LiDڡetvp:0mp/P'\6t@:fYG ǒHwmykl$8`7>}iht`OZkcܯѶ/s īb8KmOI8]({/5$f ިx8bu^2mDsLS#&a uXi"2 vm7񲾓0̲J+3d6G-yi-RN-^5K$h8\qCȈ ;zV--[ͼl1tP'&:/,!:T/=q[oI_]\Ԯ.aqU_Qa,i`-lׯD*lBH YL0w= X< ںDm s{g.8`׵V5{BZz+(0g|MChZ 5Gz'bv:]/m~TïIemƢ'`ZYA5zk,:DZq&1VoՔmZl$ה5^&.lHHg%[]fc&M,hs1I˙3) /xUrIFK~bd|bit E K~x3xVÕe/`fGLhMV~ZmCN f^\8X d1K^N;`jqUtT ZąPnmm% #?Ej؟Wx.=+\NyEl ]q\yTu}>0+4@q5F΁F[)$s8FUsJȹ""Õʒnd8 tϒ._7:\hq>ۅ-c+E^aBh2"uL$f@oN`Yuͤ)5K{C@0ea;5Pnz 0dag q֯.q2fe|IS)ۢȦmG7Y׊ӬY2h,2·cSo⽔ظ:TEޜJ">YBƿ+j%]C.O%Ga6+`!*5|:_Z)&Ԙxf0 MKI PNEϳ)U|[GBvF=x$lF++AjEMjS2,ӂe 9T҃7mv3 d C6Z CAVkӌQL He+RiֻGUo$nlE[뻀"B ^:gP1k$R;=oVZw]TINuGfɜtY҆TʑHH'k2$bIW<3G~ϐN6"E" Vv[Gu[7FA? VC3dRBذ0YhkHž:hgWKn=L`^ug|͈4$ƞ÷fWK zn l;aA@n7E6=eyro#FkYJ ?oT-B=nc?5‡*p ɇ#Ҩ BC=wlWkvńep8X&`R^fBӚe8RuWB AOK :beKZ,iom*Xw=9lJv5: O fݺ8iP+vua&$0SX}^}Ѻpec#;DYcTR݃MEPrp]M`ME`t{7},xP^=&(){n)O-lpZVw 8OP]i4l֧8Xlf5] LVuEUdְݺn n(os.f,A_N1|-zswch-ҩSVL%?8# lЯ ̼ |W]R pq=);`plqd<9@N #^C/2ziMW;9?˽KaY6lz6"V DH̰{$\ 0Km'g}FuVBu\N -$mawX goYJw, 2Y;IIŨ˻-6gߩ=u5Y&u7c!KJlK.X+# vn%; ИES/cIV/8@6*KyG5%OxS´CEYPj:G>[U3e<ֳpHy0 O'˞ƅ‰WM Nd p)v#l!^|wI4sW>H!chUE>P&I:D"uHWjmևҮJ P` r\{vs|%S/ÖOU;u^e_+MM,?KF;k)"EDJbm / (WKvu@WqPžFo"Ձ4OJx_Ǣ:~6̡:a#A~x:)%ͧթr-i/VqruvGu{QXglfe<"׹xS,06]~@Z-=}SoCt3gbUviɋn!jZi,GPe,)1vX^k;0* e}аtЫ6l>;+/ꧨ~Ϛzh/ Xt*L Zu2˿Nʔͦ+5iJL-dZ{`r\vCJ+3ĭ}NO %< 8˯z zX֏AO58>3Z#p4!WoF5@EwM[UⶂyZov0o&&iWd #4cC-o(bWo+`?d$/Ogm&scL[v(ų:"Q$]ao)fjN&P)nkUnC le3q +nYJZoE0{y昇^N~Z@'S _^i|]Dܿ4t@Ř9)%i~rOޙ=Y3Џ1kzjΆ5d<[A?N]󢫝|-h)dpCt*f]Vh&MѼG)S*٦o-vC;L3+oVM2,:B>JTeYDx ?,ڥ \0F:,AH e/a|PޮoƳyXI =K=I ֆTu$ (QbF*/FEՆe=S(2` ?C2\&ZOL >V'> eԝl qiFZo{ Pܼ~zϡϢ>f40GFYt&*PG;˰{/!i2|瑟&Gxٺ-g39~9ĤӁ=;0h Xd(> ?rHDU΍襵a931p| 6h[Q nZk>Wyf'1c3f/原 0f,ٳ#`P̿9Kq/-!l0He8gEݜty@fnBokUe;199Lq׉!UA| qeK& +'q 5<ЗYG+˧Op\%[ 8W x1[Έ puZZsp};NiŰZzpvY%z0Jܵ8<;aX)@A| {)7l/롂4s%b?vFA'!2??V1@$#7dPQ#2w( nZ.vNbpK~'3"vYUn^kzi>w+ޑښPl4d5|J 6m,m|D+]^1)ver|83diO tF-'J0@b'5+\)> K煁Vf`vwV\m<ʹ^r`8* D@M.Cs̻-i['F/P|^0<i !]pXO{! nuDt#@d#M C 4iz 2p*,\2*PKAP\;;nUgP@y0@i_@ (p6yD3ɳU(,T&4̇XI6YvhpC(8<5d{s5_.? e|5N&JġBO?W ]"){tGtU OF,rI'%nnDŽ$ɺK*xv]ג+ N(ΨKϬF LYQYHO#&IХb7|낃rȢSn-;\7'8mMD#T %`}>zǒL¬i]wH{D*4UT$d'-cƅ;DAkb" :.ROqmgW`"K9^ =sc-@t 0$ܾ+W kIY最/jC{!^1 aۜq*qkNdh*ƣ/ػ=czŵ q|{nQcjz<ix-m{^VVa lj.jJd|>b#Q7/?z޵GBv d(~]yz罆٢ݸB֣]oդߌ9eC #?j|EImeA𠼯v%ΙCLXk%ʼnJIL [ @hKPPSpӬ7pı$dqjh\ X}͞ǵ/X/2&U{"6_Ρؠ*E+bɄ;Ѩy.R/rdŔ'wBt#4i8EIv u`0[<[,n0bce(PEhی68mx8n@?'UJ23Ua:8ĹAqE%bG#Tjs TF,S'?c"' rqDpq?׿9t!GK2uϵ1 3 E?.)PE޺W8檜[VP6* 봨^=׻'C!uB+y˺ѤZ+-#MkLY0sA43=D :;ԤsR# *iTq;6Р;hDm>|I&bE-˸L,R{]@Z=k>5m`9pt2RTʶu4aPMژplK;ʗ7D'prʔJ!60kTSI> R#ףns 8Z81z3GG8 +l'LBz::wty%^WM^t%phb&'~^,Ьͻn9C0ùWtoeTdܠ$d؊%:??y?S_|UV2q6CYё> lV[yPaE2WKȅ,R)8#T҇xVϓX- ~Vn gٚj1VF&p\=䆫"Ԭ;X7=Orl,9`9z% >%0C7On" qG!w sVH%г,+\Ry1!!-OkEٗ)mOaJnw! 7*-YpH0eF[A1r YUA s * I=M!'[=5Yȹbo*ݣ:FݛENܪ#f/b/u` 6 K\ QQWЀ^۽=]b.nFdu1}iׯ̨a>zȤg# Y276Ngԙ:B:UƋUED9zKmťR-Q=DH1w_؛Ya6l̪ k>K^N|Z |⠯Խ6!74Hw|5=:by({l0fn73'<Ⱪ:+^ jA~HI;xF*#|[%'J#6P7h6 a]9u8j$J0T?V"0M_A7p/WM_f1 !#X310Ci*@ֱ Ju ]9͈nD'-A7}Ntu]hҊueH,Ns d; 4ו_hbh<̧8v8}Q sgxe[[3Hއ|Cװ[kpɴݚ>Yٷ6JU|3H u])!J n)%Q+jdl7Et|#;l9DV!GMu6ZyD떪 "R*TEtv;j2GQoGWk'a&?qԳc/'GǮ[ :t'6w:p?̗ ٷ(Z{ćv# z gpBt"[ϸTq݄;~i&臚\,# 7В 13BXɛJ?颥eB"W2 #i->c1@Bży1QAV̬x, 1M&[G_Xc둈0XI>lf>ޝi";"B=!v8= Gp^(D`0hZ<@R, !GQL{D 2WJP؇? ,ẗ́(w' Dmӑ@.m(Ў&\PHp_-*<,ȗ4xF0  o].z8ftmqDtds V %8wIn^ ,zi1ǚMLXذ]6-2S}qϚ=MT]wqAu+v "nd9Pf).谌JasQuC^M0\BB4;pAWg~};"Dž_sp''{jtܜL ܶogj{UD)ÿg@XL4CiZySX'p$7 Bgj%"yfp'rp,6T(k%] A-4 m#[Ev&_϶Ayhr[^mE,7gd8v#EFbܶ7ap@8)!Ei9ڞ^RdYJǯ PLt mJ6+8u ޓ|VgViKe36{@bEw& pQf> ov׳ަT`zcᨒJnX[#X9VG&,G%V(Í秽`~ BB&fnQz >(vOo߭Kyhtsހ\1TGR6_gA<ҋd[ ] i^o 3!XNĄQW:\a5XSbvlvxncEaҽz߃0BҒ>ɉ8R'7EXo3*ϫ<%-$4x V/erg4i#DQ*hTYK{Dh\ DenqWfY(tkuq{^ BtI[kv[8 j nJDP 7bEaHlۍug8%s>3˳B,z&G<̤\|izؼHa0_FGĺ7MMdX磸<Z%XgbN≚H1F1y949;U=<تh&R-G_me}/t*R$p1w¢,&3aX:<Tơ\ j).ǯ{Dv>MעI_QHoOwӶ78Y5aM(|LɇճcN8nk]ih3q;7^1u:1LP :>G½['}Sr5 ;ʗO˜tr*r ";a2Y^JIs1J4K5{qWue\nk AbQ+d{(oH-ky}2Q^}N_Ŀ2ԧmJkض5Oj"y48 څ̘C(֗pp՘Jχ\JɭW[v, !HڎDdpʿyB^Ox)O!p-</9BN%;T _gwɕ;:R9ǣ"@5_MLrQpMOӟFt~UT{{k=K$\yJGE3Wx)^A2=*4[7X Qw^&]Dvډos2S6h(M"1O5 gt65QN6do˞D)5𐪳k#)||J(6)Gۣs,F32G0TeiaFC9a9iZJ[R7ι?sIuƬ?*3 Ɯ&'-9Zzfs;e2fN _ľ20#XnE]6id僿=`3eKypy9;QnrOtB'j\[0H:Z>YEP JAթ 8#x)1Ҏ@J$f6q? L֫} ]V7x0Vt߃gvD.Ae+t͗XPLQssg̭O/5`Dd)% ̾^3|'GAٖ'p~V$wp>j-Ӱ}-u֘ZѬ)P/ͳY]:p^xu˯,{\@X2'o#`vD`}N~]XSGNS~!Y3)~o^uR ̛͸BsFji9X!,;wzu|-T)u|1  2>UuP`#bk F#(>7T -*ħ.3XJWE4UY[^%'P0nRLbFD.u)05S'OE~bd\T"A:-٧9%i.*幇 %ޗ~&"S̋;!Gn  n MA{ 0.=UkY꾾(DGAh,#R7H[OԎy-X/wz8i-B!U-_$s3Ɉ ;;9rw1Yߌ~F P`QK#i*M G|7rK{5ZPtT <=#GEBGN8iQBj` >Ca[W#*¢HL8xL*>#E3|rq0@_l,ܣw\zcW x- 8j 7|@2L8E\Wl>Y+,`Z~%1D4&$eGeOtEyݺHlى&洧}#U(șڐ \ #tIkP7%BX}L H.+];-? O|0ٛx9 zh3D:3kCUٸ~pۜWƲ=NNcY_QR u7;C>')YS`8}u9q| T_/[a?.g13-hE;B^?/J :wYZcԭJI3'Am>)NQo?|B6μ#܈r#\D^3L1ldLF |Wd#=ڪelsommL |j LtjJ8gH[WxܦP} Zs sйWf[50zG2ky>&c覬\w/'ԞH;.Qv-3"~Pľ!K\ߦ MKܖx't.|+oʥFrN7 !Fpaizd-䓺˛-\%$%IV)Y'tyOːYR uˁPjaB;X<]eEkfSׁ@k9Sz(Vr=Z`V<R?}hD&5ﴶ]J nr?{:KXZ`I6aI\s&➢df3w~(QjPNL$H%dx~NbLx7\UmԠK,{Q$'A3?Cp>j7~>^ƻ^fb!VO#$ Q ֽ .DNE㏆A?J*fhh;|5DS=OPGk|rEWＫ>KiR;l,=f,fMkl"vi8g*}"ݢxEwbMOZ視HB MB3 סݪp- tW +nB!z{g&=skUQy#*8ҋX^ Lhd?>f=a[uhi$R__k&ty1fQdzX2FM IJg=Qh+{A>#5ň;na=Qd`1M%GN-J&VaoE+wf7 ScSH7+8. eC}QWӂň!gLch \}=L'':"ؗhrI`˜bF}C Fh /B)-2•#T]  0$Vv+E+ ?| _1$~=x?{R Qgf:tӥ]CLuzž@LS`gt>:O3{݃s 1Kg8fcяS_M*tb:(OH"ov5K͓30P:FS/Dt;sys1,?*5,᝕T< a$uɋdf@]‰stJ'\CakMdvN~+%1%Pit>Zl0 ITY0wqE^[p*1HeofOgŠ6Sr`/C ҡ{򨊠e=ԩ`Qk5K1US;(KSZ%y#Bjb[gJ՚ɡDYU9k8xPHdͤWrk QiѳX.p9J [,&q$,d"NCi-CKL vϢq |ću^R)B&%viڸ_{P"9T^i :Bt4\6 ,4o"[J&XV(^S:.ܲ1tB8sEׇAK37[ۗVܱLt789JxSQ~=dB";ɴKweswd:*$c # ʢm%9jW0e҄|>n}kyO&UOβ!%,_T^eLX 7[L=49OXWKV& ߄,vW&[N=g!3e u(R ^1]U2gav/V|fY&eR)omT@ <py7WTa ) dk5_6v RNMQת}9}eP^JRDan3`#]u/N._F>DBL̷o~6DR='ZyN"_%h1Y5Uoɑp2Em4?IAGb (ho#!M:ViE8pL JU`1@Z8W8K/J7_  Ւb2avh팻*xsI̵|D#dАWIWL 6uaUߤܯVR`ZB ')1|vmqTE=qJ 4 8,[ؑrCIewub"jMŦj(#6 Ma7 4k.h"^ q/ [[%rbY5YQ 4nA^f#͐0z>BU\`W. 3gs#qՍ'TDL~*:SM 1to]X9mMXd  76.=2Or#g݁XeRCU ڻx'}k\dPB;Jdo$fᨘ"DŽgأ n3Fo5GGD/"#$23Cd'.Ŵ<!ap5-# u9,겟V"\#ѵg&4()3VMzvdA 0; &oɼ&/y`Y+Ѽ]P20 2LXF?$ʄGTW96hfA /en ː;C}@uSf#'$Bq׶,rl?=Fm&VsAz*\:>^*%>1be*[jU-P(CB%[j@',Uav?@_G%c̦$^Uc:ӷdw 2(VѮ6:rhVAIX0TyctgIU!V=@̷Uh? yC*Q p@ B4/ ~eSݗT3#X`m9hOcҒc0z[-v:-IfG:G9*T1qf3p-BXɫ7&:/x ݄0DV~]^S&b1g3jڲH9b+\(aޅSR qQ}(/'܍6 C;dm5dSKT۷&A:+v_흫|YA^€0jiW \]DQRG]JɠTtP[&#]ş^ʰM$4ѿ67TAt2J6=&42;JI1lDBA-cUPk3^i߉|&7a:­h5'/SO~7 !z^Ǘyl4mmr3g)o]3Vj?i%5Ur^'f ¤ȂNAd:y> ŞJb_Ln40 TXGlS Y/僚*}a]=78ERAEg6y@G9#.A\n&{*#0jÛ͠ݺV{U%б; W5z\(V1$t$$n`j{ qR& JuGYąx/ ct^eW?NYf}qN {\ˑ \2Z(>`iqio7B7`eq=e0s<0-&҆&S/_EޒqR=ៀ52L:rljLM6ls7LëEƸH \W<-NkQ֟9qxZ,ee >8m~̐7x`ͤlva|O)Hfhu f.nAR#5~f˭Ѩ,5T@$gMgkyz@wI"NT(_¨Y/)o9JB|8BWZVZ@Je< ėFG w0ϰb(PꭓE"]K"G[#I9TAd+h%Z>OE]*tis6y ġۛN2%^bNCB |$Es. ?XsNŻ>gT(zN`ܞ^tyG18IDۭ̤",l:ad@ o,1Yͥ|m7P1_5^1K8?~ kgg7@g `Sl)O!ŊFyptJtwukow욒?wlLmU_ڔ>"OD{S[d>w̞x/_O]@rLRNjT@ R^|a--m(Q[O7Yܚ)pFxc*fi00xS-Jc9'ͥ +?z iVl'_8zȌ[l͆2,U=35B(tV w"V{["? [# ķk6sM{SJ]߯wV~w 6nQOsX@iR} )KMkgjL=G{v' ft$2KAljR󵭷66A ]IkwѡͭgG)i܉yKƓ>ب=#~V2mU=e;<%eTY~6ǠDVJ54 ^=BUbHsˌidX#͕; ʽJ V~pA&zbf/+DE#Qg4 |GVzxM4}3:*)*=eTJL8_T=ȗ~ZM,MwY e9o'EOzL^YXn՚5{;uI8mÙR.N ZXo΁ܔ0vӴPp@jHѢ@"~?o'j,<RR*A3IzZ60JHJCw;-|Eha6d -D'$4ķt `nx=` B}P\5D_TA0ss#pK⛕M'mxu7WWv "ƽ%P Y|j5SVE&w[#AU~Y5ءZ>_A#[9Ơgko| wq{a#|HB}iS"(_RP_r:Wq9zOy/ Ⱥ )3 -`Xg)0ePutcH4n@ghN1S¼?^߮Cd|TḬ̂D{-MQHmໄB@w8e"3Geץ҆ƕ@JltG}ݖC"90 \e:lQ!e(πuh~$Ӥ33"3LPgO , :P J'nXpi,1t Y ck֤f˗iڪD'x33wn0\sukl*G6wN'MdIX7z9'שKe*/T[dc51Cee3\a.1axJĔRn[$k{ʌԺ i,xkx] @[eYIE&˲',0: ώrJ@Zt .u:Q)`!P1Kbεg|6# Ckhf0ӊ'۹DOt3NX]_.x5$jX O/ -Vۻ9-pv0;6j$5h&a}P-J 9d fS1VI %i_$0u/F q;kq0VB;#NlrQ$@e "etW&<}txNnYnF!6cR=Y/-C4jk-%*Y{/ޒsuT.Q ˎ#rbA/<ԵI;X;_ @YɽU+A3XdrSOVQ]a |ur /M.<Čc,Y-QL/swFu9(ñ 'BGAfhs"6wa Z]sk=ck:m 91Z)2o_ Э1:uKTOѯ7)t|6r!!!5 A޿2k Ӱ͙wi.PhveMK#MaXL64]kPP~CqeJG*Oxk]}}v;9w Kk oU䢤LS-@5M`P-3uѮW~ 5Lh_S&jҩM׈Bp5Vk4/Ma)(ȬGM KIbsD&IZoTـOBּR켽zO,T ڢ&\ =Z߁UlMW<K^s}@Req!%NrW@$}SYOH+#wux((ؘޭ/xgGExTlݺ+rhXl7㍺ߣZ^ }T+ixV}y^ C&k~j.ylP:3#,Ϲkc-ʝНf52&F8X8לD 1"2%ȚGtvhkƹ 7h].`f!KҪO6$$곙ݳJ(ӓ !(q16#>6n,mHQq Ɇ|5,]+ ۝dzZ+P)ظ~-uL0GN|Կ,H}Fl*7],eM9Uwg[9 UQS&M&h6]zK 65.*xam *a{Wrn+cJNt$vV!_?YX-gAAWJI!K /Nu$*tmF;\q`3]` 4*'ص<,!}nR;}4V B\p{PlFGe86[]xZEa\_%@T{D{~9t?gui_nX$&#\ŜS@C/ +UWZV{!Q]w芶x !"逡chh0U:dGP|u*DUJ !|0%' !pǘQ[5/ R\gÈdb6Shށp!,׊87qL}.lٵWS(92þG/C4֌ iw0jRRPc=-Ȧ R H5c3lK|blh)A\Qpm"FG8,GHYV½fZ,"+7woIzcXM1R д!a#0abE[ؖЩ1gBTx29n~nޕuW(qbq@ɫ(5tDF[vf&" 2Yg+.O|<}ZShlOvK l!=ނċ 8ms:_CtZ bRD&Tǫk^~O۶͞Nߥy!BjK:}`0Bߢ;n(KM ǜt|b)$tġGn0VW]1ʦ%\2H8-vlUwnJx6)r^S TUlGYƔȖjR#Lʹ*]Df8AߠJ}P~(U[ W0gQᶝ07|bYr0>$a@|J}_OrfuLM|fˉ9(E9ċc6K1 #`B_E:&#g՝~țiwbZ 9@gcxSzgL|~?$:8rkb!.#N|=Cv7 x)`[p|0#VkQ! {dHUȀnI?Kz|vP4 gY;LJkҺXJ TFq}KiJ394gCNTW`7opl1# ߄&];4 "vQ^c#AmV1rŒvy~3liՑuZ>Ǚ9Z6raqsKJ\j4eii|JtxSB!'s|>Uw\2ƞ7 ,G,A0hL(ՄÙ8wRk"%9ǮѮ$-d\Õ6}4.)2juyW&"TF\>L082{8 ;'P DԢ K`~MȊ7|Btk`r[X_ҥ532_ՠe- ydjt$ }Ҟ\=ۤlc`KKْ6e[&p-ŻAnlap/.[[cter L#C0>r⌑={77=.֗'"W!RGeuR:@[HU.̋(X]oQl2kZ4r{'!(5{yD<Ēqo%h)cI5%Kzf1,j1=I-޼E<".37Au uP2)aۼbׁ3|CDM%B4hnp9 Lc~e.$}q"ɸ0~(9ʆ*"v@xߋz?Ԓqubr9U~?v8cC :LBAqb[Qn@OS3A|6^:,X4lxIN_M$|s /"4o) =m01K1F4pIpL&*(M'!84f,iqjc+뺕8[˭ s KmJ/M*kֶ;ϓWDi _lB(_jXZYпqh O $014k-ի3 oUo<$և)* y s$iI]}&ۯi6?v= G|tA5W%G/RHij!_Э= B_YQ[&WamswZe4MF:9mivjY2ǸDE!qIX*w.QN#2{We%T a '|@Rm|dR:utG՚8-jYo!%YbQ$6ҙ Yh;dY7+ ^FFPr1j~AMcg@Sfg)ـۢZw6F1L1T9bE2ҫn;pY_(1F+͹/5`Pwa,0I;DhfeMnekX2_>2kgxg@0?Ay0"M 4lA66O챎,Q"?^qmisEʥ7Cpy", ^ȴ<{X;!~6K_F5 J&ZbQѰe)i2Y}KRXͭmLX5X/En*i鉝Č!=21͓36A-[8r*7[VκN5=POvr:DC?fv5TT#^D@A@%LO.bRI/(T"4$ǣǟv6$gz?UL@׍75(b0`"2~ ^ub_NV\ Xz֘c7HoUM%rimʌ ÌΊM : 8'RڞmIUoԩI?` 5J/MO-aWHAQ S@$5۩+0Q0 Y'ʋpb_ʊ $2JqK34K5b5ZY`V^c֝?xu.F^[y3߈L*y$a=c'QXã)Ҫd;Z[fIh'E;&ʫHe!ȣPkd* i1UaS-Utռ+ ٵ ;2xJŧs.Yr<=i <4QCYDvEb;:f>MhoQ[63TRixmˈ٨H:.)}튬mX( aUhw*HA?} caJD@@'^bgNWHp/Ss J?2t))fJ>g)wS`uAE0"X]*] gc»deJյ&"Bs#nbv]1NtQbeA#=R:X JUaTE7Mo0Ф&Dt&f ǏJ:"w0̺~כ.pOED</2HcTf53hX ^l?Aľ $Rܿ{JTxa"}~+ujrqM#D|\ɒ+*@&B\l8)sb3i-%$q~I^oCR~v1y>wn7aw<eM/qHK!6  HNcY .Mw }vR!gجEqƶ,Hʄג 3֒ZRځAh!+ZZ`s~E';Gm#7yTҘ~o.Hwdy7X;62ǡG7Guvr$?]1y1xDSΠb~r`ktV95(n=(aJhBȶg/U!\́Y5.r=cbA0.߼Tr>ˋ-OOfv|W&ɧ S ΚwgnsrdfiB8y84lELnzƢwfB1ɸt$9lpHQ0W %H9ۮ)P{+vNA)E*(M0Vu$1/lKM~謁x$z=PXnYOc&C'}rAVPP$>HhnZ-2ce7Aܛ<,H >&3evM* vPA ln5G_/za\ d8vۢzBR-*2b`5| u/E`,+A5@bXqTLQlE y 3ZȼV*}{ *d+[Id;Ieht; $iãM,)KL/r0ELeK[/ĚV;MC$䌆+̴4>/3=$jvHȮ3 {fhgs^6p?jךz"/J]{җDBP "%" k6EFzG+=@V޻"r|\ E#%^(ބ]Jdzi{$c8qnK=,sTEIt(11 f]Sof݇KvEe(CF`a01Y$ed]Ĉ1^@GJ1$~6?`i&Hpd=L'"7ΞW\oIhV6w*@c[lNY_zoydF-_Ɉɱ1@m0+dObsȜ*-7ݩև.>AXMxL\CF/<^|a9;K X.wv=6T٭xgWJ Rw}Vsk3҆SG|]di\y[ౌ? p-{4_{1pPF47SEv,wd甒xCؕ:ͤէnz 2J` zUKWAuXfVZV`UMʕ+qn,x 0O5[@oMHjy-6&gǒUbNDA+xDxQD1\Cfٗ"娨|ŨKW4nD~̻k <)hK0u7$}St _~ ?WP`S,ڟX&6lDG$tɟ6HS١<ݬ>D.`ja/ Ɵ^ ;q>r}I* Q ReOؔ2`Ĵ. JQX#ٴ"!j+~aŷ#aQzERZ2$B,1vtctZDŪ S$',bCj#Z4Z2788v014悰fN(& {@!bzN>e*CT| Cu6t^Wd0IUSc6)6[{ൣW{8(j]c4C*:Ȝ*.M pS*q^sH1 DWk3 ђmIiDi_Q-1b^Mdl?m9 F5Qќnv+T?צt4o"n Cnr,tk b5^BLQ"5HSY/4GZvM th=5HAAi! }`דgXr)ƘBk;GP>֫9k GټRYR$UPG2@K *@ElZvl>`uv}¶s\"5*-eBcEZ eJm[P\ĚTENZ'5Y?u@I%ku }:: }&Qιsw4&&|9>!룽Sn7\T>Lm1Ƴȹ2pT#!t?iLk2n{'oBOԳp됑-|ZpCq{H/t )3Õ՗UQ@Y!{h\LM]%wӟi3d3Z'r@SPŕQv@&ό ަ" bSC꯫NRO*L:X*č5O6WH/\qu5zt#AvDqxx.USՀW9KQ=~HܮN~&,AH *kx?ƃ?UH$n1K*c#t0ibl#Y_KA*mV)4,%y k hOc)L BUN.L>{G9 G媃Leh%|f@V⧛[s3f@?u3Yܲ_^RڅSxhH1NU䬹x@|lȼY@ZHsէ<}^[c/KhAǬ˼UV.:]:Y|; QNUd{Clz#}$Gc 8(^+I׏c/4jF GL7iCy7$TZZ^{wtVNt]0 'Z$cS`Lc< c/z4Yc1C[9s '}iB}( ;`<\8C%8Ѕ$t(Dɍv~5wHؾ,n^+V]EjPؿ{]7`Ѭ腛2:-L_TfKj ,J`WxsK{.a&0v1[쀢RlLlBԚP푝_a Rmo˟egγ clk"C 鳔J5xALذr +Z^wE.2۳Tz8[h7Feby|-v_ ӥ2b{q/g"G(ql-n`K1ހ 3Be>yiYZ*eRz=I#C rsЅiw!.>a2ͺ"\m w@:טY$ DK q}@2-[ޝ%_Ks 9GU ɸ#ۢsۅ|`kP@wBCïl`J;S СBTt1(4dp1D/U I&:Wd7z%QT5f}ˍ 5Zb}qhJ([zԄCC;{@bRaF$I+dICnV1tkdlRs!܂ؗ.r0vbt6bzV=m%mwr4 #ČY2涫ඌꏯZۈSCM}\c^&S#sI@1l ?j6<A7>G$=t"Amm)FHS.6l_Bp 1 :,tt1bM ^i..aK(Bo]^Gds\E͝Ñ)3.߅=Ykof Np?To2 *#]# ֒[KXZ u 3sx}.*iE{ @񗮹 Mʁqz_ $O+VB+fZc1PBDzRHX{V5ukcAcn_۬vljm||;LE4[1HA0}0Y#Z@}@c'8Y ȔG3yU~%" }U'33c}!=aah{O ;yC m!n$d&m"5K[mALLrֿIK`e~<6=8u#t2`pO7-ίY!= h$&vq}!وy]hn=_o|)4:KU9bxC~LfcC%d8єՃEKihR'Bn{٢\N+@(#{a"jPuf%,˯btq%p鎸W3ssY (Os6FHԚx Ld6>9IƳ]vڊMb$e D71 yiNdՙJOvJ|L5 r_ޓQH_J)FV_P9m,H;' p%зɰ뇬sЦ뙉x>aV?_ASs@#]÷h;;Dj{)Wz,gR.|th;8^X8?V' jI*\`mSڈʬQwS{)IƠUrnx4g"jfvkaZޙ _]H4z&Л.TW/l{ON׿pa"9\n]ީGE[KlC% ]>VxEZq4Rc5Ǿ៮;drc8 )B/E]FCIB]ny:04q׃uSWjNe P}.e?2~C"%`4/fR%3j4K2/K;YA/I3qh6A7 S;~ %Ԧ~m8@% ]Z-껰LCZ#iDW0H_ZwUD!PPQv~ݙ?iktxa; g6'aZ}t'2d(}7#R,>mFY]ݸIJ9Iݙ i5j$p0]pJoµIzDw;$44R9LX(F@-ؓw[.&7A>~0 ! 2(> OB^XfCǁUC8$V:k- ;֤L8S8ܨ|v 8f!k~ :&@6Q)vFqmjH7Bl !e73R`[KR0-un߱uuđ{oJ&!Bw5^e%('`kCsK"B*$ d #+J#}No$Lǁ֪4\~S YGh?Hqd]\v[MyQ9w)DN3\f} \{a+:*ߑsM䄬XM^o z Zn7 o`ضU+F+=L$1=s$.N*>c@(`M< ,_v:CO o3'CZDO0eg}-h[6=t-3|v}2:{W,j((Hin"өLN nG崎0է5e{[t]+[s ` CbVѼ-Tk ]NRwn<)OX%7 !u"y1r5wJ^o:WzV:?X@H+'}Ǽ%-u<#ݘ.zJ)6fۓ^UgUa١ȖqF7aߪ-LCVZ[XcdƢ3g%Fn hv9ʡPOvcODCI{$*C[%97*ǴVX&ulE=Z0ކ_e\'}O??|~(GήVB9:Q0dR~CV pkP0ӎ8pEJs8\?clRL,^b\=m*b`qO_1V4MC,2_aO<.^빶r{ CK6is(`4@>r_0|RbCj?fnSHfs9j|ڞ)8g`__FBǁ/5oO3U]nk[2dq3GۈHAhz_ln\BrPȮlt? 5$t_Z픡1nvH%p5AJ(ZPSAj v&dA6N7D~~kdĀFXZHp^&H7;kqI5gK@tJcմiàʁ<˭g^s%#W=-!ʩivMjH%ci>W .{QϑD,(E zMq`"H_8(48|A:0.\={#ep uthQ nrk BEVX];bV={>z=46Y$w.Zy~ !"ڝ:s̤L#ћQ)d!vV^fO0Ӻ_iCҪ ~,v`:,Qp5D]-=kV, A&ĀE88qsZ/7'&/Ƞ@5#/od˔[ a l}Z雵({[",hn)Y"5rQL;,@g눝TOzX6{ c5ƶ5mXjdnkJS&㋁ d^= (sCeuN-$-uKԫ&cRi 3- PAG*1T|$3OʲrrdA\Xڦmf_ڊY9WxQHmTj7!]V [@lKtzZnt\a(3n/!cH?a{5*/pQ,b^$T]a 1A$^?_$(e:;0DijZ1}sQ"#f%H1s`0kuY69} PgP~/ W-JSz렛CŒd7۹VTDa>5DU_U*:gtȹTȡ c 9P7ƻ=$j&<1@o,f鐁82m "޷kUn6_p=pXQ.әhR6˘l#Sx'l9Y"CLQ%" ޒsyv#V"2-|6u2vm, lxq08mloPDm1bx+JTavq,$`ln5 07.NVYrPn  !RK:;O[f´bl#\D@ƫVDmII( f콐Q7Hׯ_q 1 RyVfv: !|4z a|Mx զƕR]oGOk HZZ0yiA{s40ļǵ]noT;Ř`.6%+Ij`n[).R+8ĻwND[ڞk yfSTrQ%+nrzuP hLr7ZƦ~%UAݣ?wEWRUHe,z%:|zAgύ FC\@bVvZlteNn= ͞EX86D U#Bm` EV ~xgߑE\7V+$$uݎhحy8ɿ%d|s \ };p_vc1KUձ7$Kμ{P; lHqқV`dA1aqxHqfÐ:X2#1:ؾϛ,cPQN/~6'4|Jx/EPu BBQ%מ#Ldc%6@N3A$О!3e5d؂2;tU4srܳ7?mo.;hHJkY.NqJlgKfv-NXA`GeVjP:J,tW'P …[r]nf.8ledt LGkz^y }*d)7v-c98$U6NB->2#J8\q}؛7tPzEB?DPRӥgN_ +6'$'fPUR)n7?)TƿLܨ7_PZyG; 8P m?(L%2iסX Fi/Q|O0`Bk*]CR z,~bӦNYζm$S5%(8./b깗,zSOT!Gﮀ 1҈@)j)'AT(~~RPs5d(PUFs>Eo"lPHftfz⫡y<\[ȧ=|߉k+GҘEOd\'|˵UPy\0eN @F]4-5rZ 4=eK[Z !?x3j줺@ j~)T > cQ7+aHA;눩xÓCmI39`}ys'M1˂/ha# 9@J r< R$q×0t?n=7ǹ24_ i'9Օ=/=qp{2;NÿX/]IL%YG59<[}FdՎ27$%/ZQRIC1]^NAYkqٶ jk+qKAB;;=rO;m` Dꔿ&c*E'% h͹{З*7b9dy;MODŽ{b K{ό+'Y=8=8JM3*, FO/Rk42}Ov'<~ۄekDe,w|6&?ìW3 :%js"y&y *Y+ɍIv|6 h$9Ȳl]C9˿jH.,{!5kaO^n`J?ҭ1 DofMBLc;hܢoO}sTn&N#)b%5u"A\gϘ=xukcp /)D%ULE;0x@O+Px $]68)uì!hCRHPEFIrIKX?>x3/үm>6I2{tЯ갍j_y,Оz5%mH2Rd~n\VȎbQl$W23oq=QnXpJZ0VApAJNxbBDQD i7zP͂ $R3Uk1$Mcݖ]^%i[#S)a l>~؟ZBQ[il wmX+ˎX'&ȝ@8Qet?D狑6Fp ?DL{]a89ԥF{*HG1QUꧯCÁZ+ejJ0RxxCQT3uFDEwcVcO E :" o/יNgnn)^O@鵻ҨFF2߫H3ne-k n ߃x(TlNˤ.sIp3[A"ՊR>cHB"'v"^ڌw}Lh9ӻ fD1e$ VMc">wA@'a05 [k۷t:ne "~< J{@|~"tt^K-S[>sҷue#[|^>slu53~4FRHڼIl&p`wi>|I|0ݿ|}yrVbo1=*h7u*e'cCkD;:#I;D/{p?cZV rwayRDA*N|WV0Y[ KAyԔqMc;k%`XyzRGEOk0h? D"lbqߑOusK/TTf#0Z3jBmC]B AV6 =K`b#侠O"8j*⦙^#Pv +2[m&VC_Os^/˿ Ͱnbt3̅|I 5FErHFcQPs5sB>&M\8A1f7zFيY%TD ӟM/ezri>8lN!SrRnPK[2 KΎ<Ч R)#kҦ'PF@& IA-dM=,K bi=f{7YS)B)pi鏐A!8wxzp ãS=%∯.mAmj]k4NVRFD=NYq·8dpmZPEF3[ rWsa?Zs`VV#_ sqQ?f"RV[(o(Ind9Y^d@?]ئqi q(|8lrɷ&WG2Y9Ԝ!L`bkLkWta@L1Nh@7 :O xm96?%g*Fs!7L;&,8ZѪ ykPR#_1 }ca' 5DȑAM6B)8 &9P0cp֙i:=a=dfO A?~u;)*vR]`ԫÓ81P<.ߪI2 xk SWN>{uy|X;עvlT4>FV~@2nV2I \V`Y˂)jNKũ$on Iًe3ٝ}rДE݂l f D,TwM O}k%>u0Mq(g#09:Juwa<\0uUa쫐yP}Wsھ{rX!0(8k憜a eαe5Ĕsvy6'o=[{6_[20x,"T$jrUpz[)m @鱟;sv\V^pj&`; e5Čj$(tz=S&9Zq~LPJxpuzSea ?[\0 ^ˏ.peW hUhrd@Ώ_!wlU}7YGg@Ir̘9!Xng= ʘxӽTi!deš\E5_O̩Dž&"/%P وS}BuDZ1mk_B&+~IgdaU |y/XB2t7}[7F}+8_ph|x_mdt~vngP](j5yaG.jr#‹dSw& Zsdb(HQMYģz䫉a3^RsQ`VNq4Cb%3^BSl\[l#:KSؘ?RૈA; J^Z( 6'6SQ%8kZ0̲5o-m}%dGfRmt/8%.U*Tc,gb ],O<``dI׍ vp1W8|igT9="haIʢ0 ԩb$S9NDhʖx^͐_ Cp\ZPvnPZ,&?#4Ń w;VƒEuQZ{#>o ܻ,]"-O%UpƲ@ `(ZJmd:\x x6}\F, X=*礉_`6dK^~''O , nt[#0}:^ϗ?Q;3Bew,8OIIзH*-,DAB`ք9KV\'q~@IToF?6AmG!Y)?Mߛb{>/򝗏ᰉsfiDɦ8dCXr7@ $diObzow63g=3(,Y~cASDaz.ΠI_V6sB!TVqMJWH6jhhP7~U$<=ƓZ-B4&6C)\_&ëc'׌c[H,F@!&ShlufyWټZ%B;o9WmWdsq`=i܈v_V0'UfcZ=N $]_" 5sV%UoU֕3SS8:?Z@5 _3ρ1%4syhkjD< iN^c2~G\_rf 4)9i^e :Ce7ǸOuKEPz3<Qe5T"Rxwo/72wRCS,iֿoJ#K bYvR%JG$2W*dX2busDvو_'8_l8_}ݵZI%+L%lYPrWm+K 1C&"NPU+eId#c]L-6%ho͚ /G'~~S#BhLnUJ^>Z%4aWuLxv*1¥c0?\zH%L> X!.qҒܐJOHb-uy9_Ef}~EA4 ~e*D, 0\Eq8 ,JUSc=݁4-'E(ḣ68Jȷ? !B)3G S_XSwW?R'bsu[ V4{}"{]LWO--\ UqPRi{9qz]<`~xd .){׌ktޕNU`ú 2dFO< |W5}өJ+4M ; GO,umK2/0h)B?e`dOY)~3Ѭ"AO9p>]81sNRY3IStƞRBP Ùr 3/Ɗdpkz4m)MK  +5Ix&i)֨n bf*_G 949PuK #)@.`MvZc8s/K^xN&?7voͫ's 4Z1NP(`y6)xyRԑϤ E-y+-? Q1 }VvLFmK{m[&_?nDJS(T/z-H`-u5 omg(! }Ҳ3׎Y*(yֹaӯU礶q0twN^FkZ-8~y/_e~_%x)Y>J^mÝ?nxW{֛@^ݟpwhWZ"z}TW# x,k2pp ȅIiՃ6I8$cJW4g?3ș+\yw.=,»i`tM15lc6YQ yq)ԩicp'^Br fWd17ICGՍk sw ۂi&)0ice;y % knPHvedA\`eW(з8ljz%eWu[A]J_4赡13XKHB݄.+7$GzX#3&Uт P&r<1 ]=JJnU1R-&S[|#{"iNAgƌ<$,3M&|=íÂn8-5=Tce5Pa$!c/g:7ay ap86O&ƉyxvV$')Y{@wbJ8i$~sL8rY0J E1j\8+?kR+y5HB7&!y :W$W'|1ghѨ5`\< yP5B-y7YDEpFV)zΥsCfB83Hk,ح [6x SucѺ@5v^BͯJ#ԛWr>$=U*4vF Ã@5`Z!zaY5`ۛh}DL?@@HWׂ$w?bYZ@ r𛿉MFQ5OéڳRz36 PvSQmBcͫqQU6aƊb-y=sW(:"¢߉7,d\5ozrrv}4̾]b\gΪ&p,4t'5哢Ecd>+4l2BeLU&o*4)Ug`cwUni=sJ~'QPztLʣr(x ,Y^If@zŒt }F\D2yOy`XhoxxrVQoP"ҼdyMKA# /׫ptn3pU!lC($#3oP0}]Bb.[3C= ^xo:6]䱥*ֹW+~#h$Y&rI P/iU@Yw1$8B$vEZ)L, p?XkH2w,A<N.!=syVqʐj_ Ƹ|69b;G9}m+{fG?2IQ^O6aӢF([[I\3A5tBc<{=f PY0xtH_2BQ!,beOߘ5\dk Z;% rQp,_y%5 J`e=#a2ZEwnW\/`732~q =~^^Ć&Gî8?%WO >Po\  _,ۚ\o3lLQ+FVީ}T=^D=@8,2ǚ>wu& [}<`e<Ϝޓ R_< 5RDHPm)@< 07tƄJrwe6鄿懨0uOYIpW"G82?n~v8P 6-g#Yz^$AJ*}ps8Knc~oA% sɬ^M;J*UsαtOП3%6ֆ?E+3(ohJhM?a:V|st/H pmn}<- eҧn%V\ykyOK/i;d@K;$I9qم P$JڙB!gKi iL8g!qK#_$O }V9#+4Gߟ$uྔ28 M;ҠUݟMِn۹' ĵ~rM/Y ĄRº^x(l6pzPMl.aClzpOE\#bO0M,otS`e^he$A#NRE [ >#euHKӫ:h|}uj3.f[n^eS 7zjD"٬~~[hŴGgc~XEtN%EL\C٫"0Oxo'ZP'Enp c㑔CY~FmVg8꾯V0ɛhjcQ@6M uZl\݂^xB=jVm ۄr'ݔ[rxՕU{+`>{p"GCz4P/Ic˻ WCN`zM )pgAԤ`- 36%"s 2/|~/'0_vߺm+ŋ@a+/`,GY9^|G+pWu)ېna{Ym5jDi"2K_l+r_UA~vs[fVZqK7rV}%2sG"%M?W% <$| cHzbCQI8Q+oD6+=7㭫|cgĶ8zTSi=3,*JQE9G(|e HDܷL|YG%\thřApOhsZJ%q Ypi 8P(iͼ쒴x|4 Ta8 c'"u,1(v F7%QY;6} I1V{ +nbGq)ZҚ5Ui]αwx#!,a6c䜨85>4':j+T=[SD֜D/5C*0i%82YxݱW 8gKh\N)gq ?2U1̤|K'C=8{[(3)}# koeLǡRDU?>ͣSdvW3+N{^iۘfZ 0`yڨ3~XH4EӗdsS)W[ReBznK@s)bt j4dƼqxgKBDSinIfhwӒ0tFf./D-1zj4~ƲKQvғzMF/)Gp>!I7`[%6J)+daQ:C rwPP sKAYu%\)1jXnV"WN&aA>xÊ;P "4K3G钊EIogDiF]E2# z Gzo"F K{NM%p6fө!uCo@a2 vg{D XÖ3l@o!@b8Nn Rれk(`;t9>|Cd Pz2A[k_R"S`qF;;VVK5& {n3li?@= ( !rMqA熓c:i&7OTETV0K ˧{TZ^P^ǧ0#qajIl\TEFxzDOܮM["$)m Tn< EڈT#zDԻQ6~";o8R5 p k e"ow{̋6 !Du^q Sp I:xdR'gA՝ - 8o;kGkd´":'P:` XE+CZyjK3¹h聀$?ձj(WN?9hDəL #=jorYzuhc[c_}$YL;1G$bOsjuH~,4xY%u<f&DT HmV]1ՙK"úJIsܮ|)!>ǴVns0:QxD`d_icz+xxW(x"妊1d -cP> 4o{*~%ty, ƲC 6M}83pDnrhѮuhp] ː{Ԋ+(%nMm awʺRlHON^($0wCJeMf 8]NߞX/C2^dP?cyKg`욂\ z^Q+hXLZ*;P:=Jf#fh"=o˔ ߀O}/@!׿J4:=I&_H+5a"NRLVt&Kk|!m; )vҤx+`>\U%y`NT[љWS`p:|/itBpoEWE1-E6ܣ;blzbRTnO6ώ. |@ɧ*§ n;fdH?PvnT+]ü~[j=[L-"9AiY ]^._/YPAJ$Ľ~Ur3>Tb"Ž^9HXCx04hkCXMKչ&Vj0'yoedΤQOQo I0'֐1@<*ðab8^DųP*fͩza7eEw->q $dH>ғGFIЕsfL!-_6u'da R겵"7~pk<+q 2IohG/̢צB;mI?q"X7p}fQtŠ|9#Ϊ0]k:r9Љ[ZA+2Et4b&א<>1sB _yQYHwаLy5ܐ6.+v kx(J6[4H hT+)ygA5DtWpYIӏAsY<ϭ)F60,R*BteawgJA̤48׃tkxcO+\u-OO:]h:6]]707|VePzm\iKxK "yK~z;w2|Df\2PCE@JqS]A]p_*>r4%Y&sYO?¨]AҤ0@0i9SGA/?V=D6Jҝv7CqR^tEz}ꉟ7tlDW FUO X,%8S yrd~JKejٷ+0' /$rnn CgK뷕446aPUr)ۣ;=Mڋ}szȠ ǿ6euWdaVxrKa 5g/8 61MF`nz ޯS4V3i"V2m/FoYS;WIDE[dADMXU]ȁm /"D$5Ib G 4wN3JHSq яT:ءv#͜Qϩk.4s"BZf'm/>g߯za,v+GX*YPuC`,#kxk!+sg߯500jdp7W{63]{_"3%۶84A[s>)V*tOQhxބb [;Z7Đ4ihD1VgXN@xJvkr_$9Bi 1U;Iq]"5,7H p!>_,黳"Buq]M GKʧ ]l2}uTLzOi'R>`vsXcМ,\nLY$!c̒?TiCz]J;,pOt7E^LA/R`?{J.">`#%T4t'NngP[tGqT(F}4^NsSUcql(<#iV9ow趱oa;6(#-WZ uvR`kWc ǵUar5?$OuXDATrA+TCUvaҢF ^mudTxaJ\l9R 훦XJ 99k>,Ւ+tN9 W ֺqWT5/Nv7ːk%qf!\ZFMV a-rE륈Fϊ'3NI%2g#ON0h/6V h\#41&8!.$Ƙj,j;/Ĉ c":5ǒu CaMK#A}i ('?2Jk$mPv0{C^UB ֽ,tG`aC#ܜ;F@O& eT%GG5 M+GqL%9$4M?Bi} B}Oa =Ը5 x)|GT)i3p|Ovx򑡤[ji ^r'e\~u0DnءqH?e"魙/{9a2ь9ӿGu'+_]]嘋e~ ^-McuTUbя;Er98.+ZT9dw5gsgy 4x ևoc7{1㣺7S~J?CxZ&,w Qi̚ *hU\3gHuE# *u\a.a7[ϬWq{=|{8b$T4 F :$[LxU-hd:?Ķ묐5ٶ(]~1m[bI Vʺ)3gE LMZ,){McJ_8o)\8kN*}MI쏽fF+痕FBX\zwg]:J%,MϽu;0+-9IK^ۊ ~ցMlR6p@J̫ KHOQ\^8H7$'pEZ>RzT7h1`KLwjށT3Ljɵ_Ο/HplJ=b"AXؗy`M*㶅-n !n׹jď+}1;vJV;YdyU2d&kk\O;!}2uq\,k`f稏zul-d )[$em5٢Kϥ@޻'Tk`j' h'ѽ[ꇻ(Z#Y?H ZKJB@ll-g$sVRkfHBM,;O^efvdy^:"\ O\}m'Eۮ(I>(:rJ~&RsW|Y1.[-@Əܽ}`>gsHS0*~m̛M{j [p*.SZ6bP6iAĸ?Ayٜxmq:Ѓ< 3'Ud4lM類bQo}%s;V mHl4T6к(ʷ`,̩+a7rQ=LQxa/|C%bK 2hT5 8VpGV@ىcs`K[x'aGΕGv)d ǜ%ݎ~DRajLs8vuX@*N`[VQ`+cw,f!ݼ{.f˦&Q;LoWvm:XMr+P;4jrfi9bХdd6\Oh -IZ_  ᫠>`@g*`z\t[nJ ?`Yr˗ `vPGQJƬu]JSU=yCAB!x3DeQz!CPuAɭEq-4c!8:4.Mßjh=]'hTe1E^Zʛy.Sܯ sەu_@Yy!eN?f`M'GPyoӞgڽUi˺ǁqK&8-.ՏA[y}խd7k!I-DaK 2&xR>t~]DA`Qa9Gt0 uAT%e<=hx kw5H5pcuYxrjSSǀ6|XyÎ$PS"YfWָr| G 0Ӗbs"l ęqkpCZ>B8J*r agH]YgE_tokB"6AOR\=EׯH Z+]*(Wv_.Uג\Ծd߱AclKx:O$HKIRƔ -"_#jE_36NB4O{ }/b-l4FwknļsB׍&qM0DS٦j#ZʍrLZ6"Ȕ*ü%&)DُԲfxE۸$r8͂"m5ҙ;]q|[c-gG1Hu+%ЙZ n4ʡڅQ 5@bq$`_MX;Չkm=|娦/+9)u eٓ /ڼ)|ٌ&4&gjrt~ɶ5\C_( = p\l̠gR _ɥq<w1.~h%l Dhћ!OM[J3!^!MxE\qPlh -cȔY$q#˦ށr=//Bw] 5~ "XWwSBvDyܵ"m`b| !Ɏ&Orh|r9( o*1>ߨՎEGa$ɜ!`uz$u{0 Bel}N %>Iwy+m6W]uo &䥪Wϸs bkvϒ<z)H*VBl(2OcIsbCE^GԵGIrz5RQ+I#A|v-!Qo _.N:ǔO2 vG)dBO_gh]25"'IT>H|ᥓIji ܫ Z/A0 z+ߩ[wh> Q^>gRL"bmpC7w4$ ?6kN@/6ܩTNZCd 쯮M2!ro357QF%Eq:ID7:vΡ% &0驍06Ob?-ZČ%_($mYwDXi0:twٶy*>p"W%:k%(ɂ]~QR:0ⓦpw"cX Gh҅g'ؐȡ˻;7FbKI2-Zpj }ڬ[Prm JRLI ֞N |_ro6 3yX ,x5q}P炛3e-D(1WzŠ}Qg']N>T|Q׬*tf v%T`[ }[S+'7so<$eҷnpM$5fJn~lIﾹnݷ'z1*.BS Mn-sTu$+$<ӡORH -_ 395SP 7 [b: ъԛݱK@eѹ4E\<󬞛\B e,ba17쒽VWqs1&xN%g2~׽gYVْ(eqs%:稅~:^G(# 緌5'F K/Ú3OK=B?]fpҩ@Ә8QN$C0yƌ-`* D8r?)^;#slh`)GIVCuXG;EҥJ0{4 F՜h%8s9^in-,]\վL6'ܩ8.1 7wTٔ)s{GMKo81Kn@E`U=z?d;kر5sN2o G'kL J.9 ]qVœ`U<_࿒̢1^}| b)SFz}KO~0,[PTY507I(i& S*Ѣ6 (<3qf\2ϣhzs`K{vT~&ZRx#ѦHd: wTŐ{ٓ#kbHx0:.mw*8ܯdʧR/B Qkr(J(yZS] A8z< pc ^2]j(WWl]nOrpkP݉km'DD\EPw!D~Kմni:Pٴ!M 9{|†Z֍FgzjV$5>?Bg,'xnhۅ\gz ENmS9(Mp聐e܂ u%9A͕YKDJ ._,,![&4 Y2hBfY[oAN a}_+;Dm> _2CSrx:`J%&cɘ  ֏/[}KFsKfR\-ڝ#""GITWa}xWߨT,̶Loscfjb63,nd2EkOh|;vvUb[oy秏иI&2rR8YiaɉSF/ Z r$MTFV;Q PzaOBtU8䯬P}rDŽEjo}Ck{ȇ&Ƿ}4ն52tΈMMz/LkW~p.}#Yzn}ܘ|@3cWݩ<Κ?|c5P5ŅE@0j e[0/ȤϘڑћLĭ7BUM0T%sc337`HcZ )qmD.͛"=82l1-%LO3ct+LuS(9H 10iD#U!D@Mβ3:iϪX4 n4F[NѮ]GlCzuP>Q,dYԍ^cHD_yqEeä:qyydb6Nk^ m8F?@~߆ad4l_` S XO^`O<(n }# ~=0Α?@%t?kF'3 $d-,Gf &rZlV3?MW$iFuTRbtcqN1}&nf2- yt\Ói@@O087zwm CD,(ƺo+ƳXochǹB?J_cc Gne׳NbD(z`_c",ix+<ևVvCL- i&B'qz?/%G0Vʠ5 3oNjT,F֜jB @ћyʾoR/Wx NDSOrxyA+,G;S@H<<$ٰ wϭ[JϖG<|<G1)NE;Ǥ7്siX |BXEPΉ73=ްau q~3p~LZn[Tԅ㈨&ppv`fŐ_YuFA ! '+y{T?q9n8b3Yf] VxEYjb{KW3FUOcĬ;i%k胣 =5Ηn .fGcEs'TE#Rt R{cKȇE&3+]d)Ѭy.F(\y Jpyz4@a[2i4ZdʢvӓRJgNjhf'y6.K_Nߋ/%I :_&mw+&"g94iNW󱦛&O;$!b̻ ˬIb/o]}?]]}AVQu0_x)G];)?C⼉xTm ê@'sio>|(c?Pf RB) Zan1)ʶک N@#Ї %N ]b[@E$_!S)VqӅBYOY#2eߋР#Lskj*&Γyi2&+ӸmvAӜ5)Ac{<]]$ |Pm =4C８,DD,YHwpӍԵ %%ge(\BeP/~;WIP={벨׽6G~que@ w rd \9+١X;-儃0s;4˯b;:| &k41XIiΓ< 9."L)cR~qEJ9l׎$ \\>i"DIjÂK@+8z%.ZG*$e=a򇔏-C Ekmlda "9^Lǒ :ahv^-nA}Gr7?%ԤVqJWya#E>+E  C-+yGAk(je*n 4Ubp9+",SnsC*R"`MLHOiG#DsLlO_DO>+rq&$IQVG{bLr;.vxӣ`p+0-bFbR;O t.:]ǺcVH'Z3 ]4/39pf}V]c'_]\(XI_cqsptkv'8ȜDAEP6^,ӶCՂc?T8Uz[;clm̡;E?~R%ts9/LxP\BqYd"85&ңO!jm<5#ɼS#AtEwևe%3G0Eq6ѝ CfaVW9c:$$77چ{NkYJw>@{Tʴ"͓b1&)͓VU᧟&} NYRG>DIłB|E܍Ytk))"jej:m1L*4rXcvG-|_p AhFcI8DiyJ8MiPRlY\@F?1.vfPk4u(JW+ p^@&9ܜi U&n]+LpAǁnʽ<#v}K6Q?%g>L[*(r/n껆8|D`3-9É=qzɩ3 :7t` ζ}{6$93bt͊Pı|Ɗ5xr_x>l9/+\ZO[c'da.a5,FB*fYnx:\ѫPl@x)/(m=$q',=+'T%p;6?n%F]3q̆oY7ke`  \ɁR$fNlOcۺ%r-a@{uu8'\AU l32R9^d'I9$>]}u >;pνGMh{iM #D}k@f|NJFʿNmYȠk\L.1Dl*>;MwY@r#)4>NNɘ$o7݇rjR/IoYP!P3g1A3Q WHt˵dl,/y78.TKz ol&!BУCdq;:lxS:Iy(3%IJvg!5I͠LFJttśF%Ȫg$NZV6F-2]GASPQЮ &$Ay2+N$^jνšQyr0e)X.qQ,ϴq(yӎbLQS" ˣmkle 0$$ ˌ ЏMŻt0i"K!B}2gF%*Ip]9:) 7Td]S_S[ME3PIŨv6fNN#HQUXy GGQ3 Cy#<n'GCq+: HfD 0em2(e0H!\D`(/f|XUUkZ9xe?Af 9>+\FbrĚ -`--CrȨ?!O,]qDqW?iIxuRJCv@RQZ?B-V[nf黰-9^隵koAj$C sHiYF ?2EWI-+B|8•&*V#i* l.Jf-^[V5夈o^y>Ը%JYpHE Õ7_u򝾀ފo| c WCB괈"X\Wt2au^h\/w %&"J?oϥy`KuS=uq|.x<npfY=]*eu A0WvbOtqZߙH7So i20}PVo@Sv2./O:˜! O$:> Jw P0TY=& `QcS\kֶz)E!gӉ5Ҥ$nOwE@%#Ka՘]~ p_g* l%I[ zq1+\洆Ttx`E/N~ nhӊ5 qI11(Mɰٖ/@غ6\ Kl~g"=chP>ékyr&lrsIٙ$Cʊi~Sx>MOP'N5YeV-N)J,"Vs9T3;wdShrt?OܰGx)ܮ@$@ ueptg6@9)2pJQ&޲Z) 䤔2*+ KV R嬇eE\K 3=Xk\3#'^/DpxܩRoB} Rd}uԆJɹ \u t6}h Rq@ҿ?a{F rĮ}}O?3mFrmpiNA sYwiq-KQӊI@˔/a]M Pm#)}ЈMhEB7V,~Ӑ:ھFy-Z ta=tȊ NF!N!'N--v,v21,ڭuDRkҳETN_Car '\oϴ˝=6ˈYheV.8.w^m%) 0qJ-@[QMh̩}__I]X\ ?4 m;ž_]&ڪ. rCh ۉk+پ>y?4W,p]0CbUQ3AifwןHۚBټe,qp;r[""_LoRm; M($;;lT\]ߚ~XZc8Ӌ(n!^b~#r5 W"Dޗ%tRNhŧMnoāIڢ΀QB`8 -mQvd[%Pt c򶘰I sljƄ%G@C /OW?Y%nprs_.~ g LDPv!޿}[q+א>]8B^;E< /TGf/ilCXIK?5;LXCSYd'[Q~ί.wkП!Tǂ;az+^<> $L?!5æ4-Tawt-fB/hxz\tx+65}_9=~?gRf>GQfi *a-N,F@KDgǫ#%D(e@s\bݿtxRSz}D"X.EG lXآԻڝc3#ns{BKf95abk/VE,a~Kɵ굂A trfta/ L 0Z@Tͮ 2|[ qVvRCF}+GQ"&-k*݆y8͚;ڮ~ǽRO$* b7'7/Ԏ*eK<}6|q=}x oq HIf9/M$dLd<)G]c~uwF*l2R >QJGSyEӶ̴4mc J%q8+iyxYé}" e]8D>>( y76x\PY%^dQUuY׾g` 2i|VY}J &YJm!qX&ã7ܣBD-l`uh>=~QooIT(ë]C>#l@Q E"Z 9^eqh:ZC VQSo܂|cAzmұ >OoTekH)piK|)i;;rb 2^2g םߟ};/-d]6bںhEr-B z2@aK)/71yj9j yfcլz5I"lTu7Q=p)&[FｹzZ6pjq9cJʖ}QP5^-Bǰdk!yC1&w!r6ͩe NfKW#Me#ʿ48=LB(R$nbA V[E\@LO>&M_9t4]80lJ^ !)7;Ũ Tԣ8eN B.Zv@^(T/>kN"zZPg̒ř…b.U3?p=:sӚC@'RԒ3z% ßER:01F9~)p1o29v,وKF,g:ƾD5i(}*mje x n8PfFf%#46?d\sEgh"~l@`T`ؼLj}KgÁB{qձ /s>8[K`L)&†03^IGd;b[ndG k\3::uqϱ<@l-+CAx SD*7̱f08[_0O!8"bu{ZN] ] _ 3.3!ܵtc kZ Zղ5:PXe-Mգa}Q70D/O5f ;,roX~kRY©%lXq `{eANyzCa70)y0*+٩Qz,xfM#odXϽ~=fa_a5 K=;5Gm&qU&3ccN{PņNnmhqY {{M#j?4wR̹h6vIұTFJh-k`$y/˞4{/Pâ=fɟ0t.f4@Cf3e`kAFUkS(OH $Ơ0d*2{J" MQ b=(:4h>[vP/_J֐S~W!)F<%hI;91MH.Qv* '[ >n۷} H2i6hBjZ`QЀ(Ua(ya^i*'mz,Ϫ05I{Kn({OL|<,@YoAwK=)wI+Jޣ~r5t8ɞLBǎ&'(&z%rC/M, c@lgܳzitj-bޓ2v)#:h& Avqb948q)B)dxNSVuLhO(tJ?{#m1'nQ8^eՄ vJu.r6Rhl{tx?$Srzi>ZDYiPG.输;p3Xk\o̓kޖ0_z(ao=±ι1y2f=sl}]A*-?]?W݂E&na_/tY}aZ)m L3_KQrw t[7I*hI\TҘ¼e9 ѐ%`9O"Gn5aѼ9:궊6"?췭 Ppcw+H;JHA`Mږm}Mٹ3 炆c[$2 gȧ+g.zRw #@s5rzL 9 1+GiiKy–ɖ/Zf %_ :-WӍw4<47Wq1h?0_wʴc\ @icFX{91NO2{XdnngЂ9Wߟz.4)Vg.qN *@ѝԎ˞al Nк>78?S;# `'NMGGb>\+^G-b53(A+L;@\;/s^82sv܅-̚Ac ԟ[9YymX 8θ`|Iz$74 vZB؋w)SZA(;8y$(vfEEJrpb |9-erН*z3v1s{L䓦mbرؕZLzMc/vbo=ttP=G Y DR֕#wΓJ]fm3-Ļf/9T#Y~:LЈZ)qAf(3Q]USN9Y6̥~}g{ Z#[nwRz)L\'VKTJY"/`sbѲ$H 㼷5G2|]f+p*LSƕ*C]zJo:9A%,v~Q `oX8 Cm}Ӎ Za<򣢡nub [N*ڢf10Jpv?_Xh\:1̈́nk͂sTsTgDY<&j̕(@bؤT*Ptri8&<~@U I:@^nTX|&vo5 Xuh9ʱj@rO%|ݦ,:@M˧(>\^lHU,*yZobDaDf51Hh>-^t#@00U=pwD E?K!|g@ `5diTFe)R[ũI ʍ, ѿIQlL 䨗Ă/:hU`}Ί3>!RIKTښ.U=*qc^;7aK }~1sWZS!Aɪl֫/[;&pܠfgI+mU۹ tqDHȁnE0y˫56 |ov`~(D g4cԬ Dž_"T,Q(iM釉ɞÕ#F‚(f&w*}O\F3siS)SLiT߬zO 5 %iNf^d?¦OsV?YI1?)WrV p;u%}U{M(&SH4gSH'z/UHو{X}5ʼnR9C%loӵsftZJQe՝BoLp$(/v)f#نUpeƷmnLbg&|.k9%/ Bv ' EF1ߖf]ahւ*]ȴ;`)3>0/Q&NaFmJBSyujޯ9oW ~[}\`y.(۶:*0zFQ@"#y}/YĞ:,5ܹQ ͖49=NfQ)]tÂSi* K\íe4RFѹg1ÿJJ?c<s}&ﳐ[*Y' S{ Nc~^:^3׮P'߯KZҫ4WDD /DM{6zPN5C1R;/0[@i }0ھbŁPf%)g#0JBjT.[|Ib(\?^dYZXqGNdyu}ӻ>;9ApCK: XCteW䨄-H ,=$ѣMg8bl q0}1s|i$qkƂ++n^[~_gC\6YVOXLM%2 Bod webE1k}3~|!k?zri]T#z^:rΝTQ`1baGYPJk,SmT's鍌1괭tߋ7p0,hI"iOk=jnK@ +wŔz-0ӦX^G'Y1u? udO6s;鐔['ց0w!ߖT%mk8tHwlKƏdAi:2I|ƥL섘'M ~}w}C\.Qr/:3-\ۂGM)7A$+RlSnmz s!CrZ~N^j4 %/' _wV1(^e~\D،b[i:0M=vQg?&l= Gzb=te[u=x@`Qe!0g,c MAW-\ ;8dG~d(mt}%Thh*߹JC.G7P0 :M ]bdV;G~ Ij 쯎AN. @O^F'etBȸQMz&j $:jyr;+8oWx=]'^!ޔg/԰9@ki$%^r VK谙5Ctmd(c\Bm@QAw Xbh&v|> ٪iaԕz-A=!bE5Bϡ9c31FHsL;-0!(9I8d{ o!G?~gEg%2HO_a-+va ~B eK!G68_߆HM6)Y@y(>k9 h_=)C= ei%t(9K=R*VP5j=|F1PMFjx6JWU nSCB;o \ 9Upd J~Y)p!UN8R\[$72*[T6_2KY|6Pp/#ͅɟd ,. xś%6wAk(uvOrfʶь\ -#Kw'Q]q Cޤ(ծ{9Cрcw%2-YWQBRd%DCx_ d7vWC`hWȂmM)O mnA 1)wط45|/T$'2F9s ז :͘lƇlq|:¡c?k*bʢk'kY ?s )TtljjrVْDG@ H컻HߠƊ_(`(/L.oE "a,0,Q]zcʍIY1ꚰ) Wmnz7itSwZz&9a,=#oJ>,R IyUAcAm߿ް4gxCwWT>:{o'䂑cxʜCYd6fv>Ơд3Aȴ׮_#s^W>X{?09}L=qmT~=&FA757_L?SB*4V 2OrSd P辞ϝLk1{8W=d(;jǘ-Qxi3XB7 NDX~ƫˀL%" @_)#f潛yЎu:XqIfO[H~bBeX8V! vYy /* ͂~ TYb2"&g3sL|;T,0%ӿ{RvEu$62ɹЙognŁMj0f=Yߤ(XW-P<