libwbclient0-3.5.7-1.17.1>t  DH`pMl͸/=„?!gT~ 86;hc!R®p!yK-avu?t bo?GVIC4?9K$5J)6i'NBXߧ RC1ݘ5?a:2u ۏRsBF(4. ae :ٚ@j"k6R I?',ݘ3T'Lބ51M;V9c,fD0'>]ՆDec5685a76bee6cb262e2154f6d7f082557fa61e6ġMl͸/=„SvRJ_օ%-""I\y/-.ܦPd- X518QTq9S:t^N9[dB\U^Accki̥g\LEpca,8J2d^<i+^5M> Sr; i&ޔfCm]O/RZZ9ۋ ޱF.^dA'agdh-Aw8x|3HT,S{1Mf9?d  6  6<CRdh j l p   0 E (d8l9: >K@SF[GpHtIxX|Y\]^bc8deflzClibwbclient03.5.71.17.1Samba libwbclient LibraryThis package includes the wbclient library. Authors: -------- The Samba Team Source Timestamp: 2505 Branch : 3.5.7Mlbuild03*openSUSE 11.4openSUSEGPLv3+http://bugs.opensuse.orgSystem/Librarieshttp://www.samba.org/linuxx86_64/sbin/ldconfig/sbin/ldconfig*Ml064a127cecb0e0e8590043ba8470bb07rootrootsamba-3.5.7-1.17.1.src.rpmlibwbclient.so.0()(64bit)libwbclient0libwbclient0(x86-64)   @@@@@@ /sbin/ldconfig/bin/sh/bin/shrpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)rpmlib(PayloadIsLzma)4.0-13.0.4-14.4.6-14.8.0Mk@MdMc@M] MS@MRM5M0:M# Mt@MM PM@ML!L~LL@L@L@L@LOLOL@L@LfL,@LLeLB@LLA@LLLLzL{@LvW@LrbLnn@LmLmLmLi(@LgLc@LPL1@L!@LT@L%@L0L @K@KK@K@KtK.K.KKKsK"@KKK@K[K[K[K[KKK@KKK@K@KK~}@KqN@KqN@KqN@KqN@KoKoKn@Kn@Kl@KjK^@KUKLd@KG@KEKEKD{@K=K;@K/c@K*@K'z@K@K@K@K?K?KK@KmK3@JJJ@JJJJ`@J@JH@JJ JjJ0@J@JJJ@JJ JzJzJt.@JmJ_@J\s@JT@JT@JMJL@JI@JCfJB@JB@J@J;}J:,@J8J7@J7@J2C@J2C@J,@J'@J'@J'@J+@JMJp@IIIo@Io@IԨIW@IW@III@IV@Ilmuelle@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.deddiss@suse.deddiss@suse.dero@suse.delmuelle@suse.delmuelle@suse.delars@samba.orglmuelle@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.deddiss@suse.dejmcdonough@suse.decoolo@novell.comlmuelle@suse.dejmcdonough@suse.degber@opensuse.orgjmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.dejmcdonough@suse.desjayaraman@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dehhetter@suse.dejmcdonough@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delars@samba.orglars@samba.orgjmcdonough@suse.dejsmeix@suse.delmuelle@suse.dehhetter@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.derhafer@novell.comhhetter@novell.comlmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.deboyang@suse.dejmcdonough@suse.delmuelle@suse.deboyang@suse.deboyang@suse.delmuelle@suse.derhafer@novell.comlmuelle@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delars@samba.orgjmcdonough@suse.desjayaraman@suse.dejengelh@medozas.delmuelle@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.dejmcdonough@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.dejmcdonough@suse.deboyang@suse.dechris@computersalat.delmuelle@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.deboyang@suse.deboyang@suse.dehhetter@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.desbrabec@suse.czlmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.deboyang@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.desjayaraman@suse.desjayaraman@suse.desjayaraman@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dero@suse.de- Update to 3.5.7 + Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).- Disable separate build of samba-doc for post-11.1 systems.- Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).- Increase the log level for missing PIDs on SIGCHLD, printcap child processes are not added to the children PID list; (bnc#666460).- Do not require a particular library version if the major version is part of the package name.- Use the actual version numbers of the ldb, talloc, tdb, and tevent libraries on post-11.3 systems.- Remove pcap_cache_loaded asserts from (re)load_printers. pcap_cache_loaded() returns false if the pcap cache contains no printer entries. correct call ordering is already enforced. (bso#7836); (bnc#625936).- No longer force activation of the cifs service on post-11.3 systems. - Add X-UnitedLinux-Default-Enabled to the cifs init script on pre-11.4 systems. - Move the cifs init script nfs dependencies from Required to Should.- Recommend to install samba-krb-printing from samba-winbind on post-10.3 systems; (bnc#661845).- Fix error paths in cups_async_callback(), an empty cups printer list should not be treated as an error; (bnc#661842).- Abide by printcap cache time, reload parent smbd pcap cache on expiry; (bso#7836); (bnc#625936).- Fix race in cups async printer services reload; (bso#7836); (bnc#625936).- Don't tweak with baselibs.conf during %post if not present; (bnc#652620).- Don't make use of baselibs.conf on SUSE Linux Enterprise 10; (bnc#652620).- Don't use --tmpdir as this option isn't known by mktemp of SUSE Linux Enterprise 10; (bnc#652620).- vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on; (bso#7835).- Replace Requires samba-client by samba-gplv3-client in the gplv3 packages; (bnc#652620).- Fix Dolphin SMB share IO with SMB signing enabled; (bso#7791); (bnc#656112).- Add Conflicts to the samba-gplv3 main, client, doc, krb-printing, winbind, client-gplv2, and doc-gplv2 packages; (bnc#652620).- Add Provides samba-client-gplv2 and samba-doc-gplv2 to pre-3.2 versions; (bnc#652620).- Obsolete samba-client-gplv2 and samba-doc-gplv2; (bnc#652620).- Remove Provides samba-client:/usr/sbin/winbindd from the samba-gplv3-winbind package to avoide an accidental install trigger; (bnc#652620).- Add Provides samba-client to the samba-gplv3-client package; (bnc#652620).- Remove all Obsoletes from the samba-gplv3 packages and only keep the Provides samba; (bnc#652620).- Add fitting Conflicts to all samba-gplv3 packages; (bnc#652620).- Reduce unnecessary ldap round trips and eliminate invalid DN messages; (bnc#654719).- Exclude cifs-mount and ldapsmb from the samba-gplv3 build of SUSE Linux Enterprise 10 SP 3 and 4.- Add the _build_arch at the end of the vendor version suffix.- Provide and Obsolete samba-gplv3 to replace potentially installed packages.- Change package base name to samba-gplv3 for SUSE Linux Enterprise 10 SP 4. - Do not package libsmbclient and libsmbsharemodes.- Update to 3.5.6 + Fix auto printers with registry config; (bso#7280); (bnc#617153). + Fix SPNEGO auth when contacting Win7 system using Microsoft Live Sign-in Assistant; (bso#7577). + Fix 'net idmap restore' setting HWM to avoid duplicates; (bso#7578). + Fix "admin users" when using vfs_acl_xattr; (bso#7581). + Fix using cached credentials in ntlm_auth; (bso#7589). + Fix Winbind offline login; (bso#7590). + Fix Winbind internal error; (bso#7636). + Fix mknod/mkfifo failing with "No such file or directory"; (bso#7651). + Fix smbd changing mode of files on rename; (bso#7693). + Fix crash bug with invalid SPNEGO token; (bso#7694). + Fix smbd panic on invalid NetBIOS session request; (bso#7698). + Fix smbd crash caused by "%D" in "printer admin"; (bso#7541). + Fix 'smbclient -M'; (bso#7635). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix crash bug in rpcclient; (bso#7688). + Fix file corruption when setting Samba "write wache wize"; (bso#7715).- Fix smbd crash with CUPS printers and no [printers] share defined; (bso#7297); (bnc#637755).- Fix printing from 64-bit windows clients; (bso#6888); (bnc#640870).- Fix baselibs.conf for libtalloc.- Fix buffer overflow in sid_parse() to correctly check the input lengths when reading a binary representation of a Windows Security ID (SID); CVE-2010-3069; (bso#7669); (bnc#637218).- Use cached ntlm password in libsmbclient. Prevent lockouts when kerberos tickets are lost; (bnc#602418); (bnc#606304).- Add a dependency on nfs to the smbfs/ cifs init scripts as they require the en_US locale and /usr might be on NFS.- Complete fix for trusts with Windows 2008R2 DCs.- Fix authentication dialogs when connecting to older systems; (bnc#632055).- Adjust position of conditional ldapsmb %package and %files definition.- Create the /var/run/samba directory on the fly and package it as %ghost.- Fix preexec scripts; (bso#7104); (bnc#632852).- Fix printers not auto loading with registry config; (bso#7280); (bnc#617153).- Intilize workgroup of nmblookup as empty string.- Fix net ads join when using parent domain users; (bso#6364); (bnc#630812).- cifs: do not restart during dhcp lease renewal when IPaddress remains the same; (bnc#573246).- Fix "Too many open files" when trying to access large number of files; (bso#6837); (bnc#619787).- Update to 3.5.4. + Fix smbd crash when sambaLMPassword and sambaNTPassword entries missing from ldap (bug #7448). + Fix init_sam_from_ldap storing group in sid2uid cache (bug #7507). + Allow previous password to be stored and use it to check tickets; (bso#7099). + Make ea data checks identical for trans2open and trans2mkdir; (bso#7188). + Fix editing users' groups via UsrMgr; (bso#7262). + Fix Winbind over IPv6; (bso#7341). + Samba sends "raw" inode number as uniqueid with unix extensions; (bso#7410). + Fix printing large formats; (bso#7423). + Fix spnego returning incorrect mechListMIC string; (bso#7449). + Fix some crash bugs and missing error codes in AddDriver paths; (bso#7459). + Fix crash bug in _samr_QueryUserInfo{2} level 18; (bso#7479). + Fix 'not a string literal' warning in netdomjoin-gui; (bso#7500). + Fix calculation of st_blocks in vfs_streams_xattr; (bso#7503). + Fix numerous build issues; (bso#7504). + Fix session setup from linux kernel cifs clients with "sec=ntlmv2"; (bso#7517).- Remove all provides and obsoletes samba3 from the spec file. Packages with this base name have not been offered as part of a product.- Fix a NULL pointer dereference in smbd of the 3.4 code base; CVE-2010-1635; (bso#7229); (bnc#605935).- Address possible buffer overrun in chain_reply code of pre-3.4 versions; CVE-2010-2063; (bso#7494); (bnc#611927).- Update of the SMB Traffic Analyzer v2 VFS module- Fix trusts with Windows 2008R2 DCs; (bnc#613459); (bnc#599873); (bnc#592198); (bso#6697).- Update to 3.5.3. + Fix MS-DFS functionality; (bso#7339). + Fix a Winbind crash when scanning trusts; (bso#7389). + Fix problems with SIGCHLD handling in Winbind; (bso#7317). + Add replacement for IPV6_V6ONLY on linux systems with broken headers; (bso#7196). + Fix cups encryption setting; (bso#7263). + Fix exporting printers via 'cupsaddsmb' command; (bso#7277). + Fix SMB job IDs in CUPS job names; (bso#7288). + Fix segfault in mount.cifs; (bso#7315). + Make TIME_T_MAX defines consistent; (bso#7352). + Re-fix a bug with smbd serving a windows terminal server; (bso#7357). + Display an error on 'net conf import' failures; (bso#7378). + Fix bitmap leak in dptr_Close; (bso#7384). + Fix rename problems with full_audit VFS module; (bso#7398). + Fix setting of passwords via 'net rpc user password' command; (bso#7417). + Fix 'net rpc printer list' command; (bso#7418). + Rename mod_name to module_name; (bso#7421). - Fix unnecessary traversing winbindd_cache.tdb in SIGHUP handler. - Added EN ISO 216, A0 and A1 to builtin forms; (bso#7423). - Winbind not working over IPv6; (bso#7341).- Honor "interfaces" list in net ad dns register; (bnc#606947).- Exclude the RPM release from the vendor tag for openSUSE Factory; (bnc#604049).- Enable the build of the idmap tdb2 module; (bnc#600822).- BuildRequire keyutils-libs-devel for Fedora and post-RHEL4.- BuildRequire pkg-config for post-10.2 systems and else pkgconfig.- Add "net conf import" error messages; (bso#7378, bnc#598189).- Define cups_lib_dir %{_prefix}/lib/cups for post-11.2 systems; (bnc#575544).- Update to 3.5.2. + Fix smbd segfaults in _netr_SamLogon for clients sending null domain; (bso#7237). + Fix smbd segfaults in "waiting for connections" message; (bso#7251). + Fix an uninitialized variable read in smbd; (bso#7254); (bnc#605935); CVE-2010-1642. + Fix a memleak in Winbind; (bso#7278). + Fix Winbind reconnection to it's own domain; (bso#7295). + Fix segfault if hide files or veto files has no ".AppleDouble"; (bso#1206). + Fix parsing of the gecos field; (bso#5198). + Fix several printing issues; (bso#6727). + Fix valgrind warning; (bso#6814). + Fix race condition in mount.cifs that allows user to replace mountpoint with a symlink; (bso#6853). + Fix bug in vfs_scannedonly rmdir implementation; (bso#7075). + Fix handling of bad server data returns in client rpc_transport; (bso#7159). + Never mark external domains as internal in Winbind; (bso#7170). + Fix access by multi-threaded applications; (bso#7202). + Fix 'net share' command; (bso#7203). + Fix DN parsing name was always null; (bso#7204). + Signals are processed twice in child; (bso#7206). + Fix returning of group members with 'getent group'; (bso#7212). + Fix the build of net_afs.c with --fake-kaserver=yes; (bso#7216). + Make Winbind logs more verbose for troubleshooting; (bso#7225). + Fix a NULL pointer dereference in smbd; CVE-2010-1635; (bso#7229); (bnc#605935). + Fix automatic building of vfs_tsmsm if gpfs and dmapi are present; (bso#7231). + Fix race conditions in CTDB persistent transactions; (bso#7232). + Symlink delete fails but incorrectly reports success to client; (bso#7234). + Fix "printer admin" functionality; (bso#7255). + Fix value-needed calculation in_spoolss_EnumPrinterData(); (bso#7256). + Fix _winreg_QueryValue crash bugs and implement Windows behavior; (bso#7258). + Fix job management commands for CUPS queues; (bso#7269). + Fix smbd segfault if using vfs_acl_tdb; (bso#7283). + Fix core dump in 'ntlm_auth' with "gss-spnego" helper; (bso#7290). + Fix smbd crashes with CUPS printers and no [printers] share defined; (bso#7297). + Fix DOS attribute inconsistency with MS Office; (bso#7310). + Many disconnecting clients render clustered Samba unusuable for some time; (bso#7312). + Make 'net conf addshare' atomic; (bso#7313). + Eliminate race condition in creating/scanning sorted subkeys in the registry backend; (bso#7314). + Winbind possibly segfaults when trying a trusted domain without inbound trust; (bso#7316).- Add SMB Traffic Analyzer v2 VFS module.- Document "wide links" defaults to "no" in the smb.conf man page for versions pre-3.4.6; (bnc#577868).- Fix workgroup enumeration, for client printer and file share selection; (bso#6880); (bnc#586215).- Fix tdb validation for offline auth; (bnc#587014).- Fix "printer admin" functionality; (bso#7255).- An uninitialized variable read could cause an smbd crash; (bso#7254); (bnc#605935); CVE-2010-1642.- Ensure to have a valid talloc stackframe; (bso#7251).- _netr_SamLogon segfaults for clients sending NULL domain; (bso#7237).- Merge missing pam_winbind message translations; (bnc#499233).- Remove cifs-mount subpackage for post-11.2 systems as the tools are now part of the independent cifs-utils package.- Fix join of Windows 2008 domains; (bnc#567013).- Update to 3.5.1 and 3.4.7. + Fix security flaw on Linux platforms if built with libcap support allowing file system access even when permissions should have denied it; CVE-2010-0728; (bso#7222); (bnc#586683).- Fixed libldb.so link in libldb-devel.- Fix argc handling in net_share, making the command "net share" work again; (bso#7203); (bnc#584253).- Update to 3.5.0. + Fix duplicate sam and unix accounts; (bso#7145). + Keep the the correct negotiate_flags on the cli->dc structure; (bso#7160). + Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send; (bso#7166). + Fix 'net ads dns' usage calls; (bso#7181). + Fix uninitialized variable in wkssvc_enumerateusers; (bso#7182).- Update to 3.4.6. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix printing with 64 bit clients (bso#6888). + Fix core dump on 64 bit Linux (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio) (bso#7067). + Fix string buffer overflow causing heap corruption in smbd (bso#7096). + Fix bogus ip address in SWAT; (bso#5885). + Fix vfs_full_audit; (bso#6557). + Use the first "uid" value; (bso#6157). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix DFS on AIX (maybe others); (bso#7052). + Fix pdb_search crash as non-root user; (bso#7068). + Fix unlocking of accounts from ldap; (bso#7072). + Fix vfs_expand_msdfs; (bso#7081). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Fix reading of large browselist; (bso#7122). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix listing of printjobs in Windows 7; (bso#7130). + Spoolss getprinterdriver2 level 101 marshalling is bad; (bso#7136). + Make idmap cache persistent for "ldapsam:trusted". + Also fill the memcache with sid<->id mappings in ldapsam_sid_to_id() not only the persistent idmap cache. + Shortcut uid_to_sid when "ldapsam:trusted = yes". + Make pdb_copy_sam_account also copy the group sid. + Shortcut gid_to_sid when "ldapsam:trusted = yes". + Speed up pdb_get_group_sid(). + Try to build the full unix_pw structure with ldapsam:trusted support. + Optimize ldapsam_alias_memberships() and cache ldap searches.- Update to 3.5.0rc3. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix vfs_full_audit; (bso#6557). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Fix duplicate initializer in the rmdir module; (bso#6876). + Fix printing with 64 bit clients; (bso#6888). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix core dump on Ubuntu 8.04 64 bit; (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio); (bso#7067). + Fix 'smbget' error status; (bso#7069). + Fix build of 'smbfilter'; (bso#7071). + Fix unlocking of accounts from ldap; (bso#7072). + Cliconnect gets realm wrong with trusted domains; (bso#7079). + Fix vfs_expand_msdfs; (bso#7081). + Fix storing of create time on directories in an EA in new create time code; (bso#7084). + Fix an early release of the global lock that can cause data corruption in libtdb; (bso#7085). + Fix string buffer overflow causing heap corruption in smbd; (bso#7096). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Add pdb_ldap performance fixes; (bso#7116). + Change ldap filter to what really was intended; (bso#7116). + Add new "nmbd bind explicit broadcast" parameter; (bso#7118). + Fix nmbd problems with socket address; (bso#7118). + Support large browselist; (bso#7119). + Fix reading of large browselist; (bso#7122). + Fix listing of printjobs in Windows 7; (bso#7130). + Owner of file not available with Kerberos; (bso#7139). + Fix IPv4/IPv6 problems; (bso#7140). + Fix get_acl_blob in the acl_tdb VFS module; (bso#7148). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix some wrong newlines in de translation strings.- Take extra care that a mount point of mount.cifs isn't changed during mount and don't allow it to be run as setuid root program; CVE-2010-0787; (bso#6853); (bnc#550002).- Check in mount.cifs for invalid characters in device name and mountpoint; CVE-2010-0547; (brc#562156); (bnc#577925).- Don't invalidate cache for uninitialized domains; (bnc#538923).- Signals are processed twice in child; (bnc#538923).- Allow forced pw change even with min pw age; (bnc#561894).- Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; CVE-2010-0926; (bso#7104); (bnc#577868).- Fix enumerate domain local groups for primary domain; (bnc#573813).- Fix malformed require_membership_of_sid; (bnc#525123); (bso#7106).- Normalize "Changing password for" msg IDs and STRs; (bnc#499233).- Build libtevent and libldb and put them into separate subpackages.- Update to 3.5.0rc2. + The Using Samba HTML book has been removed. + 'net', 'smbclient' and libsmbclient can use logon credentials cached by Winbind; (bso#7062). + New vfs_scannedonly module has been added; (bso#7028). + Check password history before increasing "badPasswordCount"; (bso#4347). + Fix changing of ACLs on writable file with "dos filemode=yes"; (bso#5202). + Restore Samba 3.0.x behavior and use the first "uid" value in pdb_ldap; (bso#6157). + Fix deletion of an object whose parent folder does not have delete rights fails even if the delete right is set on the object in vfs_acl_xattr and vfs_acl_tdb; (bso#6876). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix a segfault in winbindd_dual_ccache_ntlm_auth(); (bso#7027). + Disable sanity check in NetShareEnum for better compatibility with Windows; (bso#7029). + Fix SMBrmdir error message when deleting a directory fails; (bso#7033). + Fix segfault in vfs_cap; (bso#7034). + Fix 'net rpc getsid' in hardened Windows environments; (bso#7036). + Fix a Winbind segfault in "trusted_domains"; (bso#7037). + Complete and improve some German translation of 'net'; (bso#7039). + Fix compile error with WITH_DNS_UPDATE. Update .po files; (bso#7039). + Fix crash bug in libsmbclient; (bso#7043). + Fix bad (non memory copying) interfaces in smbc_setXXXX calls; (bso#7045). + Fix libsmbclient crash against OpenSolaris CIFS server; (bso#7046). + Lock down some srvsvc calls according to what w2k3 seems to do.- Update to 3.4.5. + Fix memory leak in smbd (bug #7020). + Fix changing of ACLs on writable files with "dos filemode=yes" (bug #5202). + BUG 6642: Fix opening the quota magic file. + BUG 6919: Fix remote quota management. + BUG 7034: Fix internal error caused by vfs_cap. + BUG 7036: Fix 'net rpc getsid' in hardened Windows environments. + BUG 7043: Fix crash bug in "SMBC_parse_path". + BUG 7045: Fix bad (non memory copying) interfaces in smbc_setXXXX calls. + BUG 7046: Fix a crash in libsmbclient used against the OpenSolaris CIFS server.- Free unused memory after a packet got processed; (bso#7020).- Add timeout to rpc call to prevent infinite loop when network is down; (bnc#538923).- Update to 3.5.0rc1. + BUG 6837: Fix "Too many open files" when trying to access large number of files with Windows 7; (bnc#619787). + BUG 6939: Fix long filenames when "mangling method" is set to "hash". + BUG 6991: Create symbol links to shared libraries. + BUG 6992: make test for getgrouplist cacheable. + BUG 7014: Fix Winbind crash when retrieving empty group members. + BUG 7020: Fix smbd using 2G memory. + Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned attributes by protocol level. + Vector correctly through reply_openerror() (which uses the same logic). + Fix bugs with the full Windows ACL support. + Add a few missing gettext calls to the 'net' command. + Fix up a share type translation and translate some more strings in 'net'. + Allow to call "pdbedit -N description -u user" without specifiyng "-r". + Add spoolss_DriverInfo7. + Fix rpcclient after setprinter IDL fixes. + Use generated krb5.conf in 'net ads testjoin'. + Add some German translations for the 'net' command. + Update mount.cifs man page with nounix option. + Fix _samr_GetAliasMembership for results with 0 rids. + Fix an error case in cli_negprot. + Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc. + Restore correct timeouts for SMB requests. + Fix a 64-bit error in libsmb. + Replace IS_DOMAIN_OFFLINE by a function in Winbind. + Simplify/cleanup Winbind code. + Fix write behind memory block in libtalloc. + Fix result check for getaddrinfo(). + Add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr() to tsocket. + Always set tdb->tracefd to -1 to be safe on goto fail in libtdb. + Add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior. + Fix standalone 'make installdocs'. + Output %p as unsigned in snprintf replacement. + New attempt at TDB transaction nesting allow/disallow. + Remove swig stuff from libtdb. + Reset tdb->fd to -1 in tdb_close() in libtdb. + Change the way mksysms work in libtalloc. + Also build and install tdb manpages from standalone tdb. + Fix infinite loop in NCACN_IP_TCP as there is no timeout. + Make winbindd_cache.c aware of domain offline to avoid unnecessary backend query. + List trusted domains from wcache when domain is offline.- Update to 3.4.4. + Fix interdomain trust relationships with Win2008R2 (bug #6697). + Fix Winbind crashes when queried from nss (bug #6889). + Fix Winbind crash when retrieving empty group members (bug #7014). + Fix "UID range full" error in Winbind (bug #6901). + Fix multiple LDAP servers in "idmap backend" and "idmap alloc backend" (bug #6910). + BUG 4832: Fix iconv checks. + BUG 6338: Do not always display "none" in 'net rpc trustdom list'. + BUG 6851: Add pdbedit --kickoff-time/-K to set the user's kickoff time. + BUG 6828: Fix infinite timeout when byte lock held outside of samba. + BUG 6837: Fix "Too many open files" message when trying to access a large number of files with Windows 7; (bnc#619787). + BUG 6841: Fix "map acl inherit = yes". + BUG 6850: Fix shadow copy display on Windows 7. + BUG 6867: Fix listing of directories with a lot of files. + BUG 6868: Support building with Heimdal we well as with MIT. + BUG 6875: Fix DOS attributes on OS/2 clients. + BUG 6880: Fix listing of workgroup servers in libsmbclient. + BUG 6898: Samba duplicates file content on appending. + BUG 6918: Fix krb5 build problem on Ubuntu karmic. + BUG 6929: Fix build with recent heimdal. + BUG 6939: Fix long filenames with "mangling method = hash". + BUG 6967: Fix 'net ads join' with OU. + BUG 6981: Fix paged search with DirX LDAP server. + BUG 6982: Remove erroneous out of memory error path in lookup_sid. + BUG 6997: Fix _samr_GetAliasMembership for results with 0 rids. + BUG 7005: Fix "mangle method = hash" truncates files with dot "." character. + Fix the build of the winbind krb5 locator plugin. + Fix enumprinter key client and server.- Readjust the _libdir/cups/backend/smb sym link only on uninstall of the samba-krb-printing package; (bnc#568603).- Add BuildRequires to fam-devel; (bnc#564260).- Prevent winbind crash; (bso#7014); (bnc#566119).- Fix processing of open modes in POSIX open; (bnc#530683).- Add baselibs.conf as a source.- Update to 3.5.0pre2. + BUG 2350: Add LDAP Alias Dereferencing support. + BUG 6288: SWAT adds a second share when changing parameters of an existing share. + BUG 6435: Fix minor memory corruption. + BUG 6710: Only install the cifs.upcall man page if CIFSUPCALL_PROGS was set while configure. + BUG 6802: A created folder does not properly inherit permissions from parent in vfs_acl_xattr. + BUG 6837: "Too many open files" when trying to access large number of files from Windows 7; (bnc#619787). + BUG 6860: Fix shared library build on QNX. + BUG 6879: Fix crash in Winbind. + BUG 6929: Fix build with recent heimdal. + BUG 6938 : No hook exists to check creation rights when using acl_xattr module. + BUG 6967: Prevent glibc error on 'net ads join'. + Fix vfs_acl_xattr which was failing to call the NEXT connect function. + Restructure the ACL code. + Refactor reply_rmdir to use handle based code. + Fix the build when no external talloc and tdb are installed. + Fix detection of CTDB headers on systems without system-libtalloc. + Fix several printing issues. + Fix the build on Mac OS X 10.6.2. + Fix net and rpcclient after setprinterdataex changes. + Add full support for level 8 printer drivers. + Add more spoolss architectures to IDL. + Fix enumprinter key client and server. + Fix crash in EnumPrinterDataEx. + Prefer posix_fallocate for doing "strict allocate". + Restore "fake directory create times" as a share parameter. + Fix explicit stat64 support. + Add support for NetWkstaGetInfo 101 and 102. + Add rpcclient wkssvc_enumerateusers. + De-deprecate "write cache size" to prevent its removal without a proper alternative. + Allow more than 1000 users in BUILTIN\Users. + Complete support for NetWkstaGetInfo/NetWkstaEnumUsers. + Fix the build of the example VFS modules. + Fix crash in free_file_list(). + Give the user a chance to change password when password will expire soon.- Store the smbfs service state if enabled and restore it for cifs while upgrade on post-11.2 systems.- Prevent cifstab from being overwritten while upgrade on post-11.2 systems.- Give the user a chance to change password when password will expire soon; (FATE#302414).- Rename smbfs init script to cifs for post-11.2 systems.- Allow Windows 7 to connection to samba domain controllers and member servers; (bnc#551811); (bso#6099); (bso#6100); (bso#6680).- Error on joining windows domain (invalid pointer); (bso#6967); (bnc#553622).- Add PreReq /usr/sbin/groupadd to the winbind package; (bnc#559165). - Simplify the winbind package %pre script and suppress stdout only.- Update to 3.5.0pre1 + Add support for full Windows timestamp resolution. + Experimental implementation of SMB2. + Add encryption support for connections to a CUPS server. + Major windbind asynchronous refactoring. - Remove using_samba from the doc package. - Increase major version of libtalloc to 2.- Fix kerberos refresh chain; (bnc#546162); (bso#6872).- Hardlink duplicate files on post-11.1 systems.- Add BuildArch noarch to samba-doc on post-11.1 systems.- Use full 16byte session key in make_user_info_netlogon_interactive(); (bnc#551811).- Update to 3.4.3. + Fix trust relationships to windows 2008 (2008 r2) (bug #6711). + Fix file corruption using smbclient with NT4 server (bug #6606). + Fix Windows 7 share access (which defaults to NTLMv2) (bug #6680). + BUG 4675: mount.cifs: Do not attempt to update /etc/mtab if it is a symbolic link. + BUG 6529: Offline files conflict with Vista and Office 2003. + BUG 6532: Fix domain enumeration if master browser has space in name. + BUG 6606: Fix file corruption using smbclient with NT4 server. + BUG 6690: Fix wrong error check in profile. + BUG 6703: Allow smbstatus as non-root. + BUG 6704: Fix syntax error in avahi configure test. + BUG 6707: Fix an occasional segfault in config file parsing. + BUG 6710: Adjust regex to match variable names including underscores. + BUG 6711: Fix trust relationships to windows 2008 (2008 r2). + BUG 6726: SIVAL should have been an SVAL. + BUG 6728: BSD needs sys/sysctl.h included to build properly. + BUG 6731: Fix reading beyond the end of a named stream in xattr_streams. + BUG 6735: Don't overwrite password in pam_winbind, subsequent pam modules might use the old password and new password. + BUG 6764: Fix timeval calculation. + BUG 6765: Add a "hidden" parameter "share:fake_fscaps". + BUG 6769: Fix symlink unlink. + BUG 6772: Allow outstanding_aio_calls to be decremented. + BUG 6774: smbd crashes if "aio write behind" is set. + BUG 6776: Fix core dump caused by running overlapping Byte Lock test. + BUG 6781: Fix renaming subfolders in Explorer view. + BUG 6791: Fix linking order in cifs.upcall. + BUG 6793: Fix Winbind crash with "INTERNAL ERROR: Signal 6". + BUG 6793: Fix segfault in winbindd_pam_auth. + BUG 6796: Deleting an event context on shutdown can cause smbd to crash. + BUG 6797: Fix a memleak in libwbclient. + BUG 6804: Fix hpux compiler issue. + BUG 6805: Correctly handle aio_error() and errno. + BUG 6807: Fix a segfault in "net rpc trustdom list" for long domain names. + BUG 6810: Add support for finding alternate credcaches to cifs.upcall. + BUG 6811: Fix reference to freed memory in pam_winbind. + BUG 6815: Fix Windows 2008 R2 SPNEGO negTokenTarg parsing failure. + BUG 6824: Fix avahi activation. + BUG 6826: Don't fail authentication when one or some group of require-membership-of is invalid. + BUG 6828: Fix infinite timeout when byte lock held outside of Samba. + BUG 6829: Fix displaying of multibyte characters in smbclient. + BUG 6840: Fix crash in pam_winbind. + Fix an uninitialized variable. + Only ever handle one event after a select call. + Conditional install of the cifs.upcall man page. + Fix warning occuring when building the manpages.- Let smbclient show special characters properly; (bso#6829); (bnc#544204).- Don't fail authentication when one or some group of require-membership-of is invalid; (bnc#525123); (bso#6826).- Allow winbind to ignore certain domains; (bnc#539506).- Update to 3.4.2. + Fix unresolved home path; CVE-2009-2813; (bso#6763); (bnc#539517). + Fix potential denial of service; CVE-2009-2906; (bso#6768); (bnc#543115). + Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).- Fix potential denial of service; CVE-2009-2906; (bnc#543115).- Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).- Fix unresolved home path; CVE-2009-2813; (bnc#539517).- Don't overwrite password in pam_winbind; (bnc#515444).- mods for winbind (when used with squid - ntlm_auth) o winbind adds group 'winbind' o permission 0750,root,winbind LOCKDIR/winbindd_privileged- Merge two fixes from 3.2.8 and 3.3.1. + Adjust regex to match variable names including underscores. + Conditional install of the cifs.upcall man page.- Remove supplements from baselibs.conf while %clean for pre-11.1 systems; (bnc#520579).- Update to 3.4.1. + Fix authentication on member servers without Winbind (bug #6650). + Nautilus fails to copy files from an SMB share (bug #6649). + Fix connections of Win98 clients (bug #6551). + Fix interdomain trusts with Windows 2008 R2 DCs (bug #6697). + Fix Winbind authentication issue (bug #6646). + BUG 5879: Update LDAP schema for Netscape DS 5. + BUG 5886: Fix password change propagation with ldapsam. + BUG 6105: Make linking of cifs.upcall and rpcclient --as-needed safe. + BUG 6222: Default to DRSUAPI replication for net rpc vampire keytab. + BUG 6437: Make open_udp_socket() IPv6 clean. + BUG 6496: MS-DFS cannot follow multibyte char link name in libsmbclient. + BUG 6506: Smbd server doesn't set EAs when a file is overwritten in NT_TRANSACT_CREATE. + BUG 6532: Fix the build with external talloc. + BUG 6538: Cancel all locks that are made before the first failure. + BUG 6560: Fix lookupname. + BUG 6564: SetPrinter fails (panics) as non root. + BUG 6568: Fix _spoolss_GetPrintProcessorDirectory() implementation. + BUG 6585: Fix unqualified "net join". + BUG 6593: Correctly implement SMB_INFO_STANDARD setfileinfo. + BUG 6601: Avoid global fd limits. + BUG 6607: Fix crash bug in spoolss_addprinterex_level_2. + BUG 6611: Fix a valgrind error in chain_reply. + BUG 6615: Fix browsing of DFS when using kerberos in libsmbclient. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 6650: Fix authentication on member servers without Winbind. + BUG 6651: Fix smbd SIGSEGV when breaking oplocks. + BUG 6655: Fix 'smbcontrol smbd ping'. + BUG 6620: Fix a bug in renames of directories. + BUG 6664: Fix truncation of the session key. + BUG 6673: Fix 'smbpasswd' with "unix password sync = yes". + BUG 6680: Fix authentication failure from Windows 7 when domain joined. + BUG 6688: Fix crash in 'net usershare list'. + BUG 6693: Check we read off the complete event from inotify. + BUG 6700: Use dns domain name when needing to guess server principal.- Update to 3.2.14. + Fix SAMR access checks (e.g. bugs #6089 and #6112). + Fix 'force user' (bug #6291). + Improve Win7 support (bug #6099). + Fix posix ACLs when setting an ACL without explicit ACE for the owner (bug #2346). + BUG 6387: Fix Winbind crash when multiple IDmappings exist in the LDAP directory. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6089: Fix SAMR access checks. + BUG 6112: Fix SAMR access checks. + BUG 6279: Fix Winbind crash. + BUG 6291: Fix 'force user'. + BUG 6099: Try to fix domain join of Win7 Beta. + BUG 6386: Groupdb mapping fix. + BUG 6421: Fix POSIX read-only open on read-only shares. + BUG 6476: Fix more smbd-zombies in memory. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + BUG 6504: Fix SAMR server for Winbind access. + BUG 6520: Fix time stamps. + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6465: Fix enum_aliasmem in ldb branch. + BUG 6484: Fix searching for users while adding them to groups via Windows usermanager. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 6526: Let parent_dirname() correctly return toplevel filenames. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 5798: Preserve CFLAGS info in configure. + BUG 6382: Case insensitive access to DFS links broken. + BUG 6481: Don't require "Modify property" perms to unjoin. + BUG 6628: 'smbpasswd -a' uses algorithmic rid base with 'passdb backend = tdbsam'. + BUG 6560: Lookupname failed, cannot find domain when attempt to change password. + Prevent creation of keys containing the '/' character. + Fix join of Windows 7 RC to a Samba3 DC. + Fix bug in processing of open modes in POSIX open. + Fix the negotiate flags. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to 'net'. + Fix a race condition in Winbind leading to a panic. + Add workaround for MS KB932762. + 5945: Fix out of memory error with Winbind idmap. + Avoid duplicate ACEs. + Fix profile ACLs in some corner cases. + Zero an uninitialized array.- Unable to browse DFS when using kerberos in libsmbclient; (bnc#528271); (bso#6615).- check in .po files for pam_winbind; (bnc#499233); (bso#6602).- Add ntp and network-remotefs as Should-Start dependency to the winbind init script; (bnc#515629).- Update to 3.0.36. + Fix Winbind crash on 'getent group' (bug #5906). + Excel save operation corrupts file ACLs (bug #4308). + Prevent segmentation fault on joining a very long domain name. + BUG 4308: Excel save operation corrupts file ACLs. + BUG 4370: Clean-up entries in /etc/mtab after unmount. + BUG 4640: Fix guest mounts in mount-cifs. + BUG 5906: Fix Winbind crash on 'getent group'. + BUG 6066: netinet/ip.h present but cannot be compiled on Solaris. + BUG 6099: In order to allow Win7 to connect to a Samba NT style. + BUG 6279: Fix Winbind crash. PDC we set the flags before we know if it's an error or not. + BUG 6085: Fix build of vfs_default. + BUG 6098: When the DNS server is invalid, the ads_find_dc() does not work correctly. + Fix logic error in try_chown. + Correctly use chroot(). + Fix bug in processing of open modes in POSIX open. + Don't install the cifs.upcall binary twice. + Fix mount.cifs handling of -V option. + Prevent segmentation fault on joining a very long domain name. + Don't try and delete a default ACL from a file. + Add workaround for MS KB932762. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Fix a crash during name resolution when log level >= 10 and libc segfaults if printf is passed NULL for a "%s" arg.- Use a conditional suse_version macro in front of the SUSE_ASNEEDED export.- lookupname failed, cannot find domain when attempt to change password; (bnc#520645); (bso#6560).- Don't link with --as-needed flag on post-11.1 systems.- Stop the smbfs service if an interface goes down; (bnc#517768).- Disable build of static libraries on post-11.1 systems; (bnc#509945).- Fix missing zlibs for cifs.upcall and test_shlibs.- Update to 3.4.0. + BUG 6431: Local groups from 3.0 setups no longer found. + BUG 6459: Fix build of pam_smbpass on some distributions. + BUG 6481: 'net ads leave' needs to try account deletion, NetUnjoinDomain not. + BUG 6497: Fix calling of 'test' in configure. + BUG 6498: Add workaround for MS KB932762. + BUG 6499: Fix building of pam_smbpass. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6512: Fix support for enumerating user forms. + BUG 6514: Improve error message in 'net' when smb.conf is not available. + BUG 6520: Fix time stamps when "unix extensions = yes". + BUG 6521: Fix building tevent_ntstatus without config.h. + BUG 6526: Fix notifies in the share root directory. + BUG 6531: Fix pid file name.- Package /etc/samba/smbpasswd as %ghost on post-11.1 systems.- Fix net ads leave; (bnc#511695).- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164). - Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).- Update to 3.2.13, 3.3.6. + In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with file names treat user input as a format string to asprintf. With a maliciously crafted file name smbclient can be made to execute code triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478).- Update to 3.0.35. + In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a data value can potentially affect access control when "dos filemode" is set to "yes"; CVE-2009-1888; (bnc#515479).- Uninitialized read of a data value; CVE-2009-1888 (bnc#515479).- Update to 3.4.0rc1. + BUG 4699: Remove pidfile on clean shutdown. + BUG 5456: Fix "net ads testjoin". + BUG 6081: Make it possible to change machine account sids. + BUG 6253: Use correct value for password expiry calculation in pam_winbind. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6305: Correctly prompt for a password when a username was given. + BUG 6328: Add support for multiple rights to "net sam rights grant/revoke". + BUG 6333: Consolidate create/delete account paths in pdbedit. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6451: net/libnetapi user rename using wrong access bits. + BUG 6458: Fix uninitialized variable in local_password_change(). + BUG 6465: Fix enumeration of empty aliases. + BUG 6476: Fix smbd-zombies in memory when using [x]inetd. + BUG 6487: Add missing DFS call in trans2 mkdir call. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + Improve pam_winbind documentation. - Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions.- Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user input as a format string to asprintf; CVE-2009-1886; (bnc#513360).- Fix a bad memleak in vfs_full_audit; (bnc#510035).- Update to 3.3.5. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix joining of Win7 into Samba domain (bug #6099). + Fix joining of Win2000 SP4 clients (bug #6301). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5853: Add keyutils-devel to build requires to fix build on RHEL. + BUG 5897: Fix shutdown script example in the smb.conf manpage. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6301: Fix joining of Win2000 SP4 clients. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix 'net groupmap set' segfault. + BUG 6361: Make --rcfile work in smbget. + BUG 6365: Re-Add the "dropbox" functionality with -wx rights on a directory. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6415: Filter out of range mappings in default idmap config in idmap_tdb. + BUG 6416: Filter out of range mappings in default idmap config in idmap_tdb2. + BUG 6417: Filter out of range mappings in default idmap config in idmap_ldap. + BUG 6441: Fix the compile with --enable-dnssd. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent infinite include nesting. + Mark registry shares without path unavailable. + Also handle DirX return codes. + Fix Coverity ID 897. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix a race condition in winbind leading to a panic. + Some man pam_winbind improvements. + Zero an uninitialized array.- Update to 3.2.12. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix "force user" (bug #6291). + Fix Winbind crash (bug #6279). + Fix joining of Win7 into Samba domain (bug #6099). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5798: CFLAGS info lost in configure. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5835: Add keyutils-devel to build requires. + BUG 5945: Fix out of memory error with Winbind idmap. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6279: Fix Winbind crash. + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6291: Fix "force user". + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6386: Groupdb mapping fix. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent creation of keys containing the '/' character. + Fix bug in processing of open modes in POSIX open. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a race condition in winbind leading to a panic. + Fix a crash bug if we timeout in net rpc trustdom list. + Fix profile acls in some corner cases.- Default with passdb backend to smbpasswd for SUSE products older than 11.2.- Explicitly use 'tdbsam' as passdb backend in the default smb.conf file.- Update to 3.4.0pre2. + The default passdb backend has been changed to 'tdbsam'! + Samba4 and Samba3 sources are included in the tarball. + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Made parameter syntax of the net command more consistent. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 4271: testparm should not print includes. + BUG 4831: Don't call openlog() or closelog() from pam_smbpass. + BUG 5681: Do not limit the number of network interfaces. + BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo access checks. + BUG 6099: Fix NETLOGON credential chain. + BUG 6136: New AFS syscall conventions. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6253: Use correct value for password expiry calculation. + BUG 6291: Fix 'force user'. + BUG 6292: Update config.guess from gnu.org. + BUG 6302: Give the VFS a chance to read from 0-byte files. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on malloced memory. + BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix segfault in 'net groupmap set'. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6357: Use Samba default command line arguments in 'net'. + BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4 and IPv6 addresses + BUG 6361: Make --rcfile work in smbget. + BUG 6371: Unsuccessful 'net conf setparm' leaves empty share. + BUG 6372: usermanager only displaying 1024 groups and aliases. + BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids. + BUG 6415: Filter out of range mappings in default idmap config (idmap_tdb). + BUG 6416: Filter out of range mappings in default idmap config (idmap_tdb2). + BUG 6417: Filter out of range mappings in default idmap config (idmap_ldap). + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Fix the core of the SAMR access functions. + Fix SAMR server for winbindd access. + Add dbwrap_tool - a tdb tool that is CTDB-aware. + Hide "config backend" from swat. + Fix linking with --disable-shared-libs. + Fix issue with missing entries when enumerating directories. + Map NULL domains to our global sam name. + Fix driver upload for Xerox 4110 PS printer driver. + Add "net dom renamecomputer" to rename machines in a domain. + Inspect the correct computername string before enabling/disabling the change button in netdomjoin-gui. + Fix join prompt dialog test in netdomjoin-gui. + Only gray out labels when not root and not connecting to remote machines (netdomjoin-gui). + Allow to switch between workgroups/domains with the same name (netdomjoin-gui). + Add NetShutdownInit and NetShutdownAbort. + Fix samr access checks. + Add a security model to LSA. + Also handle DirX return codes. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix Coverity ID 897. + Fix a race condition in vfs_aio_fork with gpfs share modes. + Fix bug disclosed by lock8 torture test. + Fix a race condition in winbind leading to a panic. + Detect tight loop in tdb_find(). + Fix chained sesssetupAndX/tconn messages. + Fix strict locking with chained reads. + Fix two bugs in sendfile. + Fix memory leak. + Fix file descriptor leak. + Fallback to the legacy sid_to_(uid|gid) instead of returning NULL. + Always allocate memory in dptr_ReadDirName. + Fix 'net' crash during domain join. + Zero an uninitialized array. + Allow child processes to exit gracefully if we are out of fds.- Enable cifs.upcall on versions newer than SUSE 10.0.- Add BuildRequires to keyutils-devel.- Remove redundant Requires to keyutils-libs for cifs-mount.- Detect tight loop in tdb_find(); (bnc#450974).- Fix lp printing with kerberos; (bnc#476913).- Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all other build targets.- Update to 3.4.0pre1. + Samba4 and Samba3 sources are included in the tarball + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Make merged build possible. + Move common libraries to the shared lib/ directory.- Update to 3.3.4. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix usrmgr.exe creating a user (bug #6243). + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6279: Fix Winbind crash. + BUG 5329: Add "net rpc service delete/create". + BUG 6238: Make sure wbcLogoffUserParams are properly initialized before freed. + BUG 6263: Fix domain logins for WinXP clients pre SP3. + BUG 6286: Call init function for builtin idmap modules before probing for them as shared modules. + BUG 6243: Fix usrmgr.exe creating a user. + net conf: Save share name as given, not as lower case only. + Prevent creation of registry keys containing the '/' character. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Don't access a freed structure when logging off and re-using a vuid. + Try to to fix password_expired flag handling. + Make sure to grey out change fields in the netdomjoin-gui when not running as root. + Don't look up local user for remote changes, even when root. + Use procid_str in debug messages for better cluster-debuggability. + Use cluster-aware procid_is_me instead of comparing pids. + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Do not use the file system GET_REAL_FILENAME for mangled names. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to net. + In net_conf_import, start a transaction when importing a single share. + Fix writing of roaming profiles with "profile acls" set to "yes".- Update to 3.2.11. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix smbd crash for close_on_completion. + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6205: Correct sample smb.conf share configuration. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6263: Fix domain logins for WinXP clients pre SP3. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Fix resume command typo for "printing = vlp". + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Don't look up local user for remote changes, even when root.- Don't lookup local user for remote password changes; (bnc#493507).- Update to 3.3.3. + Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb correctly (bug #6195). + Fix serving of files with colons to CIFS/VFS client (bug #6196). + Fix "map readonly" (bug #6186). + BUG 6195: Don't let smbd child processes panic. + Add backend_requires_messaging() method to libsmbconf. + Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf. + Fall back to file backend when no valid backend was found. + Fix a memleak in dbwrap_rbt. + Provide transaction_start|commit|cancel fns for the registry tdb. + Speed up "net conf drop". + Speed up "net conf import". + Add transactions to the libsmbconf API. + Reduce memory usage of "net conf import". + Registry cleanup. + Fix handling of SAMBA_VERSION_VENDOR_PATCH. + Fix build of pam_winbind.so with static linking. + Tidy up some convert_string_internal error cases. + BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to run elections. + Allow DFS client paths to work when POSIX pathnames have been selected. + Try and fix the build farm RAW-STREAMS errors. + Ensure files starting with multiple dots are hidden. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6193: Avoid messing with sync_context in libnet_samsync_delta(). + Fix notify_printer_status_byname. + Fix Coverity IDs 722, 762, 774, 775, 776. + Fix build on old Heimdal based systems. + Fix compile warning. + Use parentheses in if condition to make negation clear. + Add dirsort module. + BUG 6147: Fix detection of the GNU ld version. + BUG 6097: Fix smbd segfault. + BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6139: Add missing whitespace in mount.cifs error message. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix a valgrind error. + Speed up "net conf list". + Add sorted subkey cache. + Use StrCaseCmp in the dirsort module. + Document the dirsort module. + Disable dns_sd by default. + Add avahi detection to configure. + Add event avahi binding. + Use avahi to register _smb._tcp in smbd. + Fix two memleaks in the encryption code. + Fix a scary "fill_share_mode_lock failed" message. + BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't set errno. + Don't use reserved words in smbconftort. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Parse_packet can return NULL which is then dereferenced in match_mailslot_name. + Format the header check for netinet/ip.h more nicely. + Missing break in conversion function prevents tdb password database update.- Update to 3.2.10. + BUG #6195: Don't let smbd child processes panic.- BUG 6195: Fix crash on passdb conversion.- Update to 3.2.9. + BUG 5920: The length of the memcpy was calculated wrong. + BUG 6097: Fix smbd segfault. + BUG 6098: Fix ads_find_dc() with "security = domain" when the DNS server is invalid. + BUG 6099: Samba returns incurrate capabilities list. + BUG 6100: Implement _netr_LogonGetCapabilities() with NT_STATUS_NOT_IMPLEMENTED. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem. + BUG 6161: smbclient corrupts source path in tar mode. + BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif(). + BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client. + BUG 6224: nmbd waits 5 minutes before checking to run elections. + BUG 6228: Fix SMBC_open_ctx failure when path failure doesn't set errno. + Numerous Coverity fixes + Fix double free caused by incorrect talloc_steal usage. + Backport delete semantics of alternate data streams on a file truncate. + Allow set attributes on a stream fnum to redirect to the base filename. + Fix use of streams modules with CIFSFS client. + Fix more POSIX path lstat calls. + Allow DFS client paths to work with POSIX pathnames. + Ensure files starting with multiple dots are hidden. + Fix guest auth when Winbind is running. + Fix memleak in get_remote_printer_publishing_data(). + cifs mount fix for handling -V parameter. + Fix guest mounts. + Clean-up entries in /etc/mtab after unmount. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Enable total anonymization in vfs_smb_traffic_analyzer. + Don't try and delete a default ACL from a file. + Fix remotely adding a share via MMC. + Fix resume handle for _samr_EnumDomainGroups. + Fix a buffer handling bug when adding lots of registry keys. + Fix a O(n^2) algorithm in regdb_fetch_keys(). + Fix a valgrind error / segfault in dns_register_smbd(). + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix two memleaks in the encryption code. + Fix "fill_share_mode_lock failed" message. + Add S-1-22-X-Y sids to the local token. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Don't miss an absolute pathname as a kerberos keytab path. + Have nmbd check all available interfaces for WINS before failing. + Initialize the id_map status in idmap_ldap to avoid surprise.- Obsolete change from 2008-03-05 by removing the needless examples cleanup.- Update to 3.3.2. + Fix "force group" (bug #6155). + Fix saving of files on Samba share using MS Office 2007 (bug #6160). + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + Fix corruptions of source path in tar mode of smbclient (bug #6161). + BUG 6082: Fix renaming and deleting of directories using Windows clients. + BUG 6154: Make ZFS honor admin users. + BUG 6155: Fix "force group". + BUG 6160: Fix saving of files on Samba share using MS Office 2007. + BUG 6161: Fix corruptions of source path in tar mode of smbclient. + Fix some NetBSD warnings. + Fix bug in processing of open modes in POSIX open. + Fix use of streams modules with CIFSFS client. + Ensure ACL modules work with POSIX paths. + Use fsp->posix_open in preference if we have it. + Fix more POSIX path lstat calls. + Fix a bug in message handling for the change notify code. + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + BUG 4640: Fix guest mounts in mount.cifs. + Fix displaying the version string properly when no other parameters passed in in mount.cifs. + Prefer gssapi header files from subdirectory. + BUG 6176: winbindd -n should disable the winbind idmap cache. + Add a vfs_preopen module to hide fs latencies. + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a valgrind error / segfault in dns_register_smbd(). + Fix build on SLES8. + Decremented by 1 for ntcancel requests. + Fix creation of core files. + Fix first mapping of uids/gids in Winbind. + Initialize the id_map status in idmap_ldap to avoid surprise. + Fix initialization of idmap status.- Only call '%find_lang pam_winbind' in the samba spec file, not samba-doc.- Ignore return value from subshell to fix build./bin/sh/bin/shbuild03 1298982291 r3.5.7-1.17.13.5.7-1.17.1libwbclient.so.0/usr/lib64/-fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -gobs://build.opensuse.org/openSUSE:11.4/standard/716ab01250931f88f509916d07037345-sambacpiolzma5x86_64-suse-linuxƲK(溤 M?p] c(c@ٛl56KQ߆^U"#Rc/: Et5l 3}pr\ C"~kzΣ3zBcoL.\t\gcG%z%mDX,(tϭ^$e~tUw>][HgϱCSuBReq=?3ˠBR2YsuucKp]ny+w2#)BhQԴDe7!˼T"dvzO cvTPgpA=K!񠳌޻I,o"vjM\iLnv{ G[ K8 *R^eiNB Di(–CSm_>˿֨1Iw YhU2g"!ˍ:TuM;?q筦Dq,Mғt.+UM x8ͧ9M @@_\\(Sr7 _9w* !vV5?hbg|"0jxӷo~vlIҋdE`Z; )pVܓw>`Rm "L8}z c0 kIf h϶;ob~\ Q R"D5kֶM5U[g6_V~aͦ*Ry>L1Gkh.K[vs@-p5 9l[>G,07%hgnӈ~R0"LzG"nBI -aA# -2_"̘Ht?aq?= T@< 3W |XR(_0տko, S 26B `% y*IR3Qr2/|N2x.0e8!C_#/O]T?qW`2rs [eX~jsRH6 oܪ&ȶ0*-rtIRi@r"sטٴǜ-Yt\=j*Y.VZ`+NNU< 6 -wy%a1/5I{Ңh.Q t%js!ezV,*>^Jl'\/UԹ$(kN⍅\ql%@r<2,۾5[ʑI:{_'$9RN=|F sAq\*X:Z|O@tb9% l_*L~ ̠2k!y:Q~ b-+(LN$? uMt߽oZ7iboDCX4tLE; x%16 l,_δMqJ+ػ>QR_RGQw0AZfLF\#d?3QSrš Y;`-ҟ"|P MǍؓ+ M-ÞQ-!Ch;u6+JB#IÃv'+&a ߣ= PVϨF?xF o*F6tOpC.WmAt>/H > Eٝwv(âRQ]|PB뻸RY*~΋Hz5uZ(,{ŽY H%k22s?hKaq#ʐ,iK?17Ϋu*lr=O#,! GMA@[b?Bx]<KG';`FRrjtjh]sE.y-zBIx\Re"x^FTHRP$j[&(!5Q UM6C/8H]:#"] <'e^[rW3\24Vc4U0mL}cERk<˱H@ r~9,e OՆ[c)1A O}srX*i%Y mXwr-[bUb^U*v=U.[ᕐ1+T2CInU~Vǀk[T)  d .E!s4=^Өi[:8P#wN` c'UCD}V[߾Lvkɠ70ux'cڸq:|6LXE*#~vY;'@Yﮑ :" Oϫ](\D>x?j9 rP7tJ:7T`"*M m=0Y\ng͠4brjJIo =H7Q ko/nͅA2&74>皲l-y=U]tX`JfC,GnN)E@ gK_N'jyS6Uݡ>!.![HӐ#:~`eB|C\H|+=U=륪eD قaxLvwXG.,:Mh,+k6K;;^]dfJs`AVJ+MYWLwo zٹidmq7؆61q#R nĐ0Pd?Qz&5.0G`ڇVTxL"g o^:V~ Ȇg/'Eo~i(TCF8ܱ H! ָڀLr7(UeˀHpC O.`a("̄_"QgYw,1WogVxO;KۧPj<uXXa/T7VOs5i1-ij?L= &6nAʾҫW\IJ|Q _xUz.|p"mz PC: TRa޳0@?"kZ/q}LxȓgaQ7$Gl8 A)PuYQ<8B~Fvo,;_5VlX͐!bx2+y!QUd]&)K˴jNE~I"[$&̍'HZeS:'d f5G"|&ͅQp2<.rmݫ3;chQ_赏dM`f\Ӻ7z<1S^ 1ivx @9Fv"K$^0rtqM9TqL%BaН=~QNѻs]%6pu~Re5z-c{qX5oʌ~0]i',K-hV[9|]hǗڨۚĨp e")i ^mx ~FY߱}Gi78T,z9Q=ߙ=哞H9e6#?ƒ .#PPO-KW͝x%/DŒ >zӓuL"\ܬ *+֞j7Gu VI"\.LHP#ʲй- ,OM5!Co2p;=[gd%^!3G'/dӢD5ܱ\/Kg oV]aIHvk_|T\J;|1KhcCO'dD=j+m<$8JX"rt:85?ɸO^:ʰqN^.B~~5}%Mrza (\?>lK#z_}Кtܽ5~~8!kH0b;̕a 3Ð7W{T3f7>'|q?tǒO^22g%X^" ? oRdvPy<>͋i}H9KM6FM{N5GZ"F&'xO_)DEs 4})Ϋ>نrs=LG}l3vg ){DGXQ>g*k4[-_H}ζПCH;A;R AΉ S:jYp,HР3h7V6ɽ">u xB`g2pE#E"X l:@m{^̀_|UB0Hy_g|\ V>- 0.!evO-v;4V)e^Lx[tأO n6/|vH/01|ts52BSQ#7y=<{#VLDY"PT3 `M9: { %yXf#׵-aSoLq3ala_* w]?).IrQ"k$k r)ʻYZ?#} Y-+{C@%'r<C膲zbb碚QtfB34;8+j9hFvՌ=A aڵQ}&ǣBKjR2؜ Dn+P`ڠ6nFQ]C%՛{Q"MP S|# P&? /v i-Ц.(v0-%iFjq~iqĈ -vTىY^çoL(ekC/]ک7f{#%qsdDs,8jSض_X'W-;%ЧH\2 RQGlί2^U4< 'VUfy+b=ɤDۼBjXB Ȗ[nݨ&;>Q.MUB8rM^ ފ6b%]/?NqN$֯Cx!ppXh1;o50Ec*[R}5&?'8Πw/ƮY `陿-%row`NkBD@]3gkzQg='=1(M,I3S+=,GEy\,38MbΡL<'ُ9*,ʈ`/귾Do"ML@ҝ5H O6<:b_u>T0嫓 M=Ƒ0X"gsTQ|vm2Ｖq0OUP?©[dzM95$GMe6ҐкG^t|]+Ms'D@w ɩV4Ψ:ۛ4X[-yoIšf,CwJ,ǓCpb8;jG |&N<@3Q=~q}a -Bf^mlS`Ͱg\czs6Ȗr(q0'߇+64u{1?ӹ A\URP/^R jL-7[>g25Y0e" rEq IU.& #^I ߩ'^Sy|cW$dI*t53J)xHY<тCXl.ϝF'ui/p )X`R4w] 廫(-]Kѩf(8ޔ=.~" ~6:D4)XKfg垘~ˀtIq/nB,ӣi沉'"27 WB5"iaktzpy'Sֺp$ukS&_ŰňT`HhM *~n }{*bLN-i|^ӻj~]К$m X|h5weɱ %T]gsnqvDwAяO+yy̸v6ϪMJ, 喊B:<'Ep^A5 U6ԏ>!8ЭA_.%k(k0MQmA7k(PpF'qy B <Sp+0-]d<|A ]:m1C$ýDDdjp'B R}jlkþ ҭaUsSʽ!Fÿ\ĥ( >?."n8hck8z'^qK{K7I9\$}_nS0QMMGD Y~}>q@9aqa%r?=%al^;;-:6ڬ.q[M5Rǎ#S7|QKadmʶo X"֊hq )ly[MIbì1p@ %ZBEy$5or_(kb=غT"]Ƹ{YϢo=9;w_dP9ϞO) mP.Lo0=H_OU&)csO_ջw҆}eͥ9ˀ-:.teJt4ɃTztANJ$|Fiڷ&Ŀһ+{/_Fl'0NsY.݊,47BHymM vc̢4t~u8|v*ƫ}i"7&/QD,# )%yǕxqTBR }ye*nR ]i\?d#z>z-Yjfd k݀ΡU+(=f3(Ꟗx []Q 8~.9S-[b|(,@"=1IfMUd}JՔѴ] y. 7fс7f?1tȽd~/N7%osB^:6BO @*OX++egEćDdVh6{~EFU8t^ k%Ys?۵#Z86>g/*E)`AE\y&P]x="b&u-3z+sa#聗}؏$ vߖk dhTE7ݺm^v&̏5uЎa hcs eət c#Enx/+geu չ@kU ⃩f^WJKWe;JT8@/!$$t;*t(ߟ;),zct{7%Pj ?[JF,=*cKcS~nk6HT>Y~H7C)h8EcKl,]`j0DM2{_à94㹛o2?,شDvoVCa2L~ }ԧ ȿsJ[4k!}>Tv\ }L\KTBn{fyvmߒTKq_kMIT  1=Jcvv[\"C÷*؈j'޲)LR(E2=ɡʲ_N3(Y/-=AF6mG%! HGEOSbXz$R]fe=A<$!j÷?_1A'>|51j˚dc' NuqS43dk0iА#"XϛYD(=K@:8a:?Z7S3uL?E4>ۗK;A p (JհavLy:UدPZd1(.O9|Mc;{{ܼd$C~$Ec+&$k&E ʼ!e@ʹ5Jσſ0v̑j&Hjfx'΅ /`@g&[]UR|]`ˎd ѪMݤCşQ EIX!U{*jCAe! =H:Wq-Ӱ{@c&3  x>(0 I])aP޾ |{i첫Z|VG@'ݡy5u%^ lLqEQBz^u? 6$8}#>|&1`qRpZu~hЋYO^J%0jygЊ@9ɸ,K?@Xf?)uK׶G,_HˆUte$zT6<;%wo0&Fo8Ax)2K2o>&!T-Tl.s^ykbVXlt w}9:AQ! eYyhNhxe.Mö]ζ DY᧙;73@߶?2Tڝx-ZL.Ek G`YE1}ZfBڒQ& Sl j}a2 $rVD_V: $>Py ;WBֆ p.&m-^q9'MбR"]_Ћ GΤu|3^ tYG*&oWmf[?"}0tI345GjoC&2\4%;D_aF[<+zXHK~rExCEa/8M`x}FD˱A ~F!/5LCȲ cAj'D]}Kkabt'\[h'!Tv3>'Px"jh)KH6?}ǃ >9X@R+O S#oWcy#@+qR2SW1ˣc "T\S.+D;ɷ(>j|x,W(Ke^V& PLA!dBop h5ΤnΦȬT,9aJ(qLy~8jL@Wij!s(n042Ih"s&Sf~f?ڇ߉=oD;k|] "[W>N:kڽ@eI((n,~!.ZYAGnIi x؛8槮:@0ESW}D6>H%-}O=L?+-ZnO6!Y]^Q%hK,.V8\˃ zL-)|?F6ߴU<|x˨/PUsa5vg£M "RnLV)TUFܥOSdq!9?!WKo_2ZqΛ:Mލ4AcZ=T3RbmG='R썰aۇ :YM74rpLvtPǃF jBLIKIdSN=loV °8Et=]_M'qLsne':kQF*pd9 ~p!/sG<"sq߽|T&~L*[ʽS)j]bVVSWI;T`=SDl'>9"JD/> ëLKe$!R@Hak~߫X\ޤ}qD;Bc$ ^lgb(W&nTWU'l[|R %Z@5LߝEAUOa՞B"HwP>@ )A'K(X? RCz$ ?*nK _ ͷrWH$6-ap&ؾwGɹFYf2xeh"|ABL6ɟM5:|fE$&qF4 7)sdj,>RPwЖNN)ʌ3sKʼnwcyPK huL:M mQU i mh[r Wo|^`m ,.{K+*]̏,R]B~f;(x(T~{[0)(k TDK}c 㻗4*EO1WZƸPQδtugsz=ʒnQd"J$x,@|aj'"]b)Q7yr_a/nR$eFxi`c_*vVPBmy7qm7AVᷬ3!+Kst8P~p[B/>zww"&T;J 9Vt^:BGOL~ AI S?7M|{ls`E#D.렯4wnf&P;$5 l=kF&3((1RΌ$>$qWVgZu+ 0^0#C)NaF$Yi)+7y9 P! ms6`[;aJVV)i+C+tVm#;Qqc >6eG@lp$(B?y;'r2 Zn0M_ [-Ϛf7J\y(PYSɄ-tHyԠ@q}_C6|q9gUÒ _N'͝Y]Ƀ!Y {{ؒs=3#C'+;PuΔ*8>@ `1 d@*} ,$7cWə{Q'*V Yn;Ϭ&ݗfV H5!1X- 3V T/qԂ:./7ar,ߔ CU)uOFz-X>ИG90s6ZP\}f8YeP޼ Z`Օ6@WirLvP8,+ kv=*'zU~eIS(K5Q}Ց}]*y]xj ft m aӆh" 3oZ6?qqN5_^#;\豮 ]i1+" ݯ(od3[5!LNOi)ŕa+ujM)4 {] qq1C/:A;DuuΠwr}ާK\ ۭ.z'4$Zh-^.WMZ{Gv8ťrAzAAwRg*ejk:Ȋ']SŖy;G(KwSp8fB`~EDqII[ $&} 9f+~Um .񭌔<|.gW;/ӹS|9Vlp~_\>Z6+Pϕ7@,KWdz ߩY9+L7nt^,0-t8ԙև UW_0al+u W4N 3^cխ=7"gZoVH33 X/vtG <]ӽmWJҔb̓rR;ҡV`Epn<كkz7Y2R&~nv:J,HgW^jAgx| "o} |)PW,+ZMU2+%ڜ\]Aw&Q}3/yh=be3m.k>!X R ,E`X[GgJ9^!bӯ)-9G3` rxX\;bہa#{* 1w揔MxșM 8CULlehPZaB~Ct #I472T'3>=JvJⲥWOuxE>\Z(&eJň-nMMn|S+W-} S.DFRJ^~tOeS2X v3+흉%هSTQ:9A(_Lpe'i3(25ّYsAx k?}9sTR&dMaeT9s;|9^qeT"۪gL`&_Kglʠa-VJY~J& MЭW(o[Qo>=b fe Vn$[oׄ5U4p7XlEtCPd3Gswn^2,/) oM9kM9BJ Q.faN/N $]ʤof0~1]NK,DwjԉCi¼.`|~nfZ\ae n4UnH^"x)(q?bZUuy U|\E2~5N<emR.m(D{f'cٸ%^9fZ:$ xg/x*؏tZT3p}&1D%)vFvtPK]t I{or 8R0, f`xѥl:o 6yEi,MR?58!CuU8zt ((#X .]'>&y-hS pוֹٳC,>wG.7>z`efԖmJS|c%R 0wZ,ߔ)hRВ] ʲxsĮ `M\@W%򡙰Qb3?E:uXK Y 6Ҍ(S~GXlזw\b4Afz)fNpRS?I*%`ӰA۲XKA=LAY\\8Ő 0<9=(3͡p#7vM<BR%#xrw]} $Q̜gh N5[HGRHxKk!#ioc Vќ+' w^h 93 މYbapLDZHp5~?1&^'߅|ݦ P2-Fg \ۗʪoDU=xX>n-HImxـ77hp:AbyP'@Mb,@Dl (X$% m"A'⎮1:KfKr6G1cf;+VeX/ C9wWX5IT%wV>4!`Dp[ R* ` ݥsd68|BQ=V"Ul 38rpn\F[ Yq'Kd`5`ɍRD0,nPB*n\Io3&dPM }_t[׼o$纜Ltsi~@',iG>M߇q^h8S.Z.[m=xI>f{{F1_E#00D}CoR^AIL۵n&|11Bʯڏ:~>Pp v;@B VmhIy c>(y4*DMcר^5]Gcgh$g rQ ^Kxz6m߾9*9!L51"(1jiׄBH"c`)h\gϻ->C#u%{PxXaDm X difz'N0fD,@(!0Ye\8~aUk$emml E!;(f!xy! uyyﾘiBitaᨋ^+家Itݠ:ё#}u ]?Q/ pq[2ޟf (*HU3>Or+m孵G HnL~שo ='Yaq\ӼV G)K.M;!YY^}ė}0ySÌ5i4ʛӴ#|Ǻf캨=C6ׯ?BKT2r%shZ@u(Y9πaJ @GܤF'>z 8̼dI]~-v,~詐7ŌXQC rR.Z&: EY0<%fZ5A\-Ya(t&R1W[;A â#_.IL X6rM ڍ[ݹM; «U_@! azDoe`">›]~ހ0Z;[/c3~5X|\{& oZDT(nD*"x;\ 4Cɀڽw %7& )JPCIQEC|' 7 oB% [ ^`QZ"aڅҐ7TZa_f7EVSffoAn}KfNHC:K,_r6ߥ6`ԧ> mNڈJ R5iUBsÇbbqh>5' ;F/1zJ$*-fO#WCA ' yO-nE|xGAN& 'n6ѻEvEf.ٴ"8,!&]< PKmQ?^=`9c|wJ4_U (u4h4pcjOX(v)zd dU 1I{'h>Qb6|s߇ Υ<6gb{70*i1^dsLN72"-ЖS"^˹/!E'=ZV}i ܲ;+v+k`AH8)Ť5/X [1%ҨhKMCy;KPY"@ רX{|=n0p%.8Ԗ|xOf=eFS.WwP>. .WLF?6?&?Kte0bc.Җ/XWt2vH,k,iw=iHK y;я 8W %J&d* z^*=+a4 |saĹ%cڷ8n~GCPcNKڣzǓ[G/|*?3h~*3'>P{ju+@[FkxHM}ZS?B;2UaO{U|ؘ{CjaF**k/t;c7'_:U$TYJ"ġ0EM(XU1% boF G02a5asB֨,lr"l؃¤;.u Uz /Np($f`|ntnEq=Iڟw;@45@CU1(g L'3{JȗcĽeaĚ5 %~pQde-64e("o\E*Z W.5,|U -z:^jSs%h{ۥB%4V2c|p ۍV?-o膚wj d} #Q d=ՐV{j-t-"2 LRVNR@"!3Q(aCkɇ'9)I_y巀SǴv\<aoMzx+/qw!%dwfVl{%3) 1,P_ =cݗTċ K Ц"΄C*&6par_AOY;]x8c??na;ZWY8xu:FF TJ̄\zϪzdY>dOӱF|nӟP?E ]4ٴs@_E}P'ʏ癒,@K#+VEξL`}/CS,"UXўv޳bYiۍ s.I\pWxxqD!ü VՓbT0RO@Xم`"PTm:P+&lz^<`uΣV0&%a3e̾Fv+|UkFLȀ+䅤R&2^iPML55q a) gk7$} vn8Q뒓Z#z{ L*MqdB ] `Oڣ<$q ދ^1?M\,Qг BX_#r8Y w8pA@bB 6A翮ޯmp3|jYVC{x?Z3ez9pP:so~G6A*9C_\(~m!dߖ2*݀DupDӷi/Qj1:v7vJ-'\', r\S/-I|={p@d2a'* - }+{Do1~Jlެqa J!s"ZjGGM;* 3 Oa߳_^r&)cB$Ev#Iqelw(e>2D~G9MxÔ)#ma'w s9W]]}{inBqb4܀ɲRQ|`cUCzIPB݆+>*Z K6lεPB|d*y&<_R޴c6tn d a>%XVq:LfcU8"^\.]mtO8|uC ٱ,?d A$7?Kq5i㊹޸QO2ER#&kt^hiUgQ^NiMN -S0b= Q,'/Y}/O<YU7~g4ͅkUD*:<I]=Z?3wR\ bf~jc WZor#R , kqTdN@0wq,0IGAM2҅I3- {)WbuX^eWg v5pf+czQۊ*05SmWpKPmdߚ!;\)8B޻߻'!V8?XBܹ`&}9cH60# ɬDRIaLa;5J;TqryٰPYƭr_zl:1kŝ{M 1%3UϔLĹn@دyҩS hb+[]߾nu%"p3x\ hBoM=qk-҉X[@M\frUQ(3Ţ瘼_1@,o,y[@{a8AHBM?awSMT8"sS u};bA#ʟcʷ`t.DYߙv'ńF`OFD2CnoDg̓`p@_:ngB0Mv=eN6y(;#3ZjHJb K$eVl=j "M,eܨӑ|bzx"h=twFp}>$fAK%_b(*p+ud_ի݋Ai mWfUxye$=Ag~0Ƿ؟9@Jdbycк.3t^$. #`0GrtT}tJPcۮ34q9yܾA/9Ph#kk IS:̑_AiWK7z& Dɴ񠱌٧cXrgjE;߾Ī;r QrhbRCTZ4*,Wy|BU6VP݆ԴrIN=Y!YSV5*^Z|q%~0*#TIIZnﬓ'ɾKѹd'4hFJItt=6@^bx u_)U~OS2ѥXB6}e%ϟoϴvghfR @ޑy^h2mf5`569y6\鵣W=]]lj:@2 Hr՘,B"!өF56n{w땷lI 7y :%Xh$Dw2s49ELXyHT`4@>,C;'&պ$&+nj'-mk2_`.A lMN8 N#7{M#ZKSM) cXhݥ^c״T]9y"/Ax8bzM@3G Ge X~.ᯑ ʾDrfn|>L=7(xs9D1+*'N@Wp۽ ̀0 񳢃BlT pnA$G@l)Bj}V}N2O5aI趺讻/߮L$+5VI"G%|#?"@/O*NsiqJ C9Nr(\㱭 =kS XYW'#bg,xw\ ,1)S!SI&Y'cPJs1%~rNJ>,[h [w7vn[Þ1hA %toFqOaElzs͓~FiwoidR*[6?m,K -1=E`' _&0nꦮ6䏆yea4m$w,.dwuDNidpܢw#}J7f-9w?.h&b. rU]lOC<p3S7QILe٫Zo-EWd6|.teI˺d.a#b6Xz-wͳKsu9%k:wC-Z;C+9z'719s2Մ&ɨIY)wZ<"Jf.r*ulSDldAO_Q}=f";ub|k{Pמs/K=`i䛎(s|9A(Η,YlĜVM[h^0 je!(lcae|":x66}@.K`Lw(Ȳ`Xr $si;va^h1dL3MN+#Ko<2mI|K@z,s$L\$.Six"?\W-P N@4 [v?:̗ogMWP 1K u<"X1~W¥NANѤfR7eRrBck/aCW2d.;OZ:xlєX!OJʫ9F8I(a+B~ vfv`)lM j M'B|}<|Doӯ>Y7l%Ȥ I%bvC?-b[ߵ~S}!Vfg<^y.h @>og&x@qKlm/]:d?J2r{h[0ڿI aFcaIgdzpmN#=r3n-]LC 1ք`iT-ۀp9rM83[A!;SDY (@gYc~·(='UNpܻw.ʱ!F+&Z/^ǖe= ˦dh@A+T %d*ld^_nۖYb@ xQq qAZY,H6C?ُf?ipρ\3ٕТ (7!A$9qm9м!z7+sAh  / [FZ[ {IU}lo{?,%_$€&nW9Oo3*1_]Ѫ.D܌Ԕ:^/Bn75+%:F?Tb;l <[`C %qCb'Vxùρ`]ohձV^7!r]obph0é7~,pC{TRP,X4ew!A@E( 6ʋ"]z|7ohP-[M}[npZQWkrj~[틿o#')n( .7VUC_BܠӃqO\ŀrn 1AЯO`f 9ouKkwAb"G#$GAbC2G'xkAyY XTN.~qr,׾N+3a)9gȭB`{B۟yƞc79j".)-x>a L\, HުhEB}6ON{4ߔ 9 5/;_c.4\إr$F]~ď,NwĜ߽? {[LfZ L Iʔíb4ITk,f?D6u8X|-[RCbҒmn;74E,:U>Qϩ@Kc,vN̒8ѴdBn>>|H!~2+Jv dUSfrJJ0s@MEfGv"UVt Dg1(bb,'~i𷤬n(5{)?tJVL!uD 槯J S1Ϝ 0Fu<[jՔ Wj ~3YSyȰ8뷭po9ݢI\Ouz!i֕T%ۙúfPI7qW'k͉e} vm'u XDoZ/`;xzO{uІ:ԌJ4rH#~0%BA1o"gwW9>Z^}] V8omz.b[*[\ Lkš=N7e7jϙBVx9˜&>8Cf8,*G*4a^E쎏paor镇r9S}krB=H;-Px:'GmdoBF8q#IX>q𨿔rn}"ǺIwaR) Tr Re]I+$^mLA+w'|ݎ;7~~V!0}gݓ0^CBY9I(Y`|`{ ;ɸS;"\ID,}6m*rV@Gk a Ěf@rV-~:xcFP"/<<?ĪȌ=qkgQ/7IySŔV<h&Xʹ== TLϟ+_\O.: $Sm,g}=Y!oUig8wAM2x@,t(+AѨ=fݻ@yDwWd!uVe4QӼXikFr Y"_޲6pG4Nu0tж.~) FsGuIMHqǤ':FƢ~ct @ ' ؗQ}~ՠ-56b'~^"_cko~bioÚy,V74shȽ }y<'緙e {dCe>-2m̢[I#!W{p 7n$c#(Z#>_',#-ѧj׷ N/g\)ĖNz~0P0'q*̺Y6M ׻$V7"F^ec3|Hڋ UQCfj͞Kҹ/H Pۭuf{974fjz;(q=t&oed ̭Q=GƌONjt")!Liդ(!q1cퟳFp?NyfH(`\l9|'JnRg LHr|T C~QhN?WBgT/N,ju9CԪ_/nKWީaƹf5!NoOF =|إvA h.Va׆{U sqIUn`ة;uogOeUڀ {(+Hx.Tӡj4ZP9gz< \ȥwIa64ş45-'K<${]fo 'vᶤ=h\[үfnSd>5O9-1,'yqD'8˫򋂿?ڀB eFdqnF?^}2Hd$9;W_{׿~wm6cmv2= QdvIn)uzO4'KUCw7)OGA+SDx27Džq6w|J˧r_qZ4e+|VCia ;n(}oL^VgidI>j?s7z۲ץBqi)T&ql"H}!S^R&apa( <ԴFڍ':Ofz9[*=4ĒsQ6(yveJ$$̖׷i ]N$©l@yع A`ZfKrzr3DO>qU3I/1 `1* |L"HZ%)"{2 F 񮇑d\2֮PKvįUIh:Pl<tQn٨sm't8cK\!NM (~}cc2.ppG>oOLE!̠x (c}\QN/o_a\6Qgf5!0S:n:rV+!C(3A4 Ɖ{:'R/9ϙ`!} қSSF~5gQJz:N"KOt%5H-,`|Š^Gyֿ~13dqk-8m(NQ+rԓSL9*d|wil ˲*B{W05+@SWK*̲=V9U2{T𩀨O+Ē& Np4ƬFEw\*MxMh`|dzw5 7)o]v}q,; WwMk6jhz#IN+i&-gݷ⮏R)e DڤCV*t[٤vX/X<; cIqUwJj8dE8ƳlC(3#]-`;VkFå5 +w+oQDLemVMKQ1 -h4m{ل1 H0瑫f4i3ƢUo曣j'&98K;kFQO;>Kk#G +75&Aс+{K7r>1;^ Q&u@23Kt](~: waVReSq>6c -6(NyU5y?G׼'^w(!$,^gjWLTw:w0~ri`lA[u(5J-:歪]y>^Y! Zw6rv,K*]?>\%&XB8юyk8H z5 Uv A"TԃH'4]A#Cך /''ly;T7O yClAa<%D0V)2h%'R: QnME5Pƽ1SO4þrYF= qzݚ1^ꌖx7/Pb_\V닅eŊn:kg4bN4i.b/ U1fwmuGQ\>kIҤ1+t ӣr_!%V뢦PF3oq EhcW>xM;7 jXL4m..6pme#Inī{%DW*^ly\:C9`V!9π?mhPY w1،d! A?lg: F\R73skD)/dǸ7A`uY#DHN-M@+Wg}V LW f5NkmD5j: Ǝ'PUsv}O|q8|W ó-%}:wgapk> |&z(M}~)bQ7Kԭ_^~=@vF(uM( Q|AooJ r7qMUW1Zu+*D9J,˙FNϣ 7&#jjLe O@lf(p4W|4-O쫯 3z˔ZL)|;0/X&@[x%A5vj.T9 HY=]@eJ†)Y~WF;T֌1%poOYMR+70@B{&E܊ds$Ϫ1OHW5 !I2ǸBu^zBTcR,|/9Ĺur$\0Ed #R!( 9\ISأRRqʥRHKD'l#,hATYjT& wƺ:ʡyXo.]Ҹtf畨D>/;,`PK%xZ^x@Mq^ۋuօ]/$h&&u*Ż(~yy~U}&@T\b}PuU#g[ЪjVy wɁ9@EZ(,ZgSwFx1 gJVB`T3%_V8upo՜`1u!`בLT}f>V ]4UIq<̑lY1 0;x?vΓ4O+!T;rKFZϠm]<rbCwfzHRoS8 ׃L}]NT2!P&+|d~\nds>`Re)!1Nks6|,ou+3I~Tף+oՌ0Xݟ)^U ]PߍY\᫩ԡJ^6D)L86 V`m "1b@&~tj$O%D`yVJQ)zGME(J@&HjP?m\,9ssWkV6/l&rGke_dj$uZ^?dSJwh* CNNǻcdˢwr{A)_W"=q.* WA&Wc dq`}h]FW?s8w{wb"I&ָAMO[sqՁ $R_pÅckoχK fC'5h tw?1d?; 0LzL,DEE"FFcu AZS؁|8ioz-H 0M ƅ~e;FbL";yzv%4ڦN5-e%\7ԛEf_:},* Qܦ0a _>=Z';s(\!K4Jܡ5{FF<ɚ W[ %3A4*a/puhD+^'q3׌`~Gt9]tGZ@w%24O UrD*k5쯦F *Q){z`d |oC3w78x/E ce+$Y<I{(Kk'0uMS.Ry%z39w']U+e *iN~;r4.=Bp(6!hC:bj #rckxW.xk8C7tcFt4ZG#ʯYH ap8i:1W:l[>0lM>r1mu9F2Tx;ϜD^O-1dnܙv@pe>D-UQ );،K-ECn>m xִ#pWnZ2ldHq|̘z)s 8:ݾP5ZJ:=>~xlBX5Y'Srɜ (L^Ƿ]6S!;ХR#XXx 5Iބ5YblUk 앧qd>frEG5d?9FU|1VHN2W؁U6O dpEʵA# %iB("KU 8s;IVmiNBۙ.!&lĨY~E-M&'B4](ʳ2|"Wj?-4c RD]Å^n,0䓝X=:M ;htW6FmE5}?`o ^x ![\ߣnY&ݽ+Zg9zXۆW3ai>u4-:qi4ՍN+  I0͎p0ğ*Eaٚ6uA#Dd6D䖀 L 4b!~e,1XZn(-赖ګ^XԫdR+GS` d LXbrI۩6hyHCF6LC< .4e%G.wꃬFKcޠpǣI{_'O4}X2Db%Ɲ}0.<2feJcMID/<]r9pX+>*`10}{u&]l[G8N =+aCݴasjXTǝ8_A]/k5}}ys\<ȃh6~5ztLJ,KaDe0 fa S_:u%u$"GorJzz25˲ шzO$:RVM:.^ f綆]k鲏͋{CI]t%Q6uռa,"aa2̇lꬾK p+|`&.vbn9wYSԦyˀTabgcjߚQ6ɱi_F<<3zIe\GFw!f( 3b @isq=a"u3S{g{@~40~ۯ(f4vO8r}VT$lqRuJ!@UFTrb<|ʕIfBRa# ˄֢L{8 Uo7.3#趐tnGDCnЎN4^ N; /m@6\fvK1a۠9 PA(QH$t|U ]H 1E’aAX&v-FLg͉X []ilD7U:zEֺl`*2C˼nZ9^"WE^ӿU*@  "ҕ,sy{|IznQscJD`lbA ٴn[$!u}"MZ&O;T Ԉ|&XQp !˹\=8OޖHK߳l:J,-1柒ıiN>z i5cϜ;Fh]$øjhZޮ"auOڙ_"8eZJǧzh0&nqܔPI|=TtC2k}7ԭvͺ6^"a5ixzy{1HF#?EbBՐS@I`mlӁ)Ϸ1sk._$>.p(a݂wd2KQBuS/0VFVr>D.hcje=Apy@KR%6C"H8}@eRrCIbEȡFYכe95ۃ e)X O]R/>bslxCwt:ܳA[oyCZ.laoZ,B ԽU2z %{A\aNX.@0Lƿy~_T"w2íoqi#K6վ'6"i^¹B; r\9[F9⠥ tWī&ؠqsES;_iӗ%4_Q(S[\C~1N (8ܚoE^I@|s7@ta 1]qE}vq`<*F r>rr+@A"!3O1#RKtq2(7ئ-ߓKq"aRFcumMRaBk׼Dں/@#=U!,KY;A|#ӐM#"`!ʤ/"er'iao6R "cwD/Lhۑ-iW&\I/Z7:VG} Jܽw؉&{//QH`VͬVl$h~] bq4hq4Ӷ~3Ma,7Җ)޺ۜ\efDžzT9 Ed!̬@L8j'-]@QPGvOܛoL*/*GI gn9[h2uL?KM()(CF ߩjBOG]:Pᄰcp-3&`59&NQogΥ &c~-BOQko*ӕ!YPrUӵ4ip9k&\֪jOKwmߝ5󒂞 |@-C0'B(4exAԼ%M?u(v.d7yNwk& u H9cFlen!%hJ_s 2Ԭ O/`wEfovJ3fِ/#pQC 0 Ƅ1Ft߱@,b"z}jZj8Eհ,\4|@Gj9cЏ ۻ"|mv2.qRK!wu#ÌA= 4L8t?cH?׸'SH 4}s` mܵPV!g΢l+?ʈB(>jZavG{` ECoǏgEa3[|s;o0 CƂP9T'+&^2eN$jWٗ\P?@Y_ fqQGlqw.uSoGJm}"vD#ƪHH[ լG))3=TnT"4C($ȷ +3P[Ǥ:іΒ-$\IЁTW`''3nfJd0V<.< ~vk LݣˣnJS]fUƟ(u Qpv+ Hh!_`hߔ N+G |=-k.3~Tl:Օ<#<ԠZG>({!$4(}  /{ bq;W+NjGH"q6cx߆ yXdm $l夓-+2E+ԻYؗvnY-}k͟'3:agWD;Q\q?Dm8:Y0`)5J <> 0mEx򠏞 e|kd,R+7Tֺ׍P<C¦ϭb ?~C QUN FxĠuA#,lQiw" jҋ-Sw÷wF8(ݥvò M*;#-7|X;3|RB2j14gO۰+7f:KG%;sUw'ms۰+Cz'&o uZievT,qf1FqKWlD%fX+}ظ+9u.qJtǨ;9Ò_+iNϒMWᄯODOޝ[۩XdDQU⫈C?5 @4xΥ;555B%U2ixjNJ`߬akC~>DO0=#Y4䩦%'St^75$|`t6$.6E/A| _<9%cߧ*k:%P,U.=Ĵs|Jpo.5{ 1drBM*1(-VpΑcAnd=u"k+#/)f2vaE8ż wiNR/1I,On,q]駞zMI娱kyj6 f9!s ċ-! Q% @ 7c s*)sw~S`qgDM@IAY۵7\"7@bhǞs`)-/>/߷69Xl gSj?z9:HNئwb3iڟBR9!d_%#2_!>oiU"I?qQtj! k Vc;cڢIDg\#0F\R˼'yq,XGhIHPѺŚkpg~ǖA#7Mrdk^ȑqjH>\$5V.AgAB>FhUMzԧjp4SQ%zT%7O2'c$s{yBxd<3@։::?bSN~Ԕt: 6z"ֳ}n[u v62g>fqGY;1@M=-{OgRrWCN`ASmFv DTBcb9>Cf\y`2)>/y67sf;5k$`Y ս+#v!CR*ú]q:&! Gu| K(O_{Uh#1񠃆:e0X0IV,sjO].w'?~K =S&SOe5[IL7E5^O61|B( E?쫌,&y/j%:כ$LP4Ϸwpg !@jH0$c~MRNX削 sQhO̖Q"gl{O*>4LrzE~@W9:YtGԁmzPVCL͝vfLcV8y-y!2t;G|Xs{~Fwy#DE &c{]\fqF{k|m©AyRW4x$Z8'c BMwdL5W\Qn*Tչkе[ߐJW>ͼ# 8 (\;r}DU k NU|KoE[ u~.g~z h#-1W֖r2]0FcвZI"@?$:nN!Ks{bb0%/f!J6z`Oo7MCOmݼ#Ru @VAaoCԕqOCF(BդU'_" #8 |;ם:~ 1ݶĐQFǷ#rY༹d|,Dl>HЩ_?$6!>Jgm啮h /Wޛ;+ jnzmUj,kRnP徦[(2QJ& AqvUD:̾on?MAa5LsQ깬I\NcaȦ?jsHkL+%qɢWӯ7o"(qdE'5vL;mI|l uekS/20\ffF>Ieh^YPfCOr_U|1Έ'V`W|xs}i)3z3 Y$&5 \"*0 KADTkR٩iT>uB"@?2c|+۪ؾ ҷ ,Ćg_FD,JOZ4[nX^oyLC%!9^F}dU2~݀v##yZJ@+Ruu.syTr/sf`%JUG,a0AmWkl! M)i-م,}6t$ʚ"_(nu! q6v{۞G-f (W[H Nekxig!5Y9AzAl}