freeradius-server-3.0.16-lp151.4.4.1<>,̘^/=„ scWIτa vgkUS\ꐱֳ_ݻG M"/f7f:?n5?mZ>#R)lҜ}b`!㞌>_囹X^{`LQ}Ew)8+zzT#KѫEÿ0g LIKvjjԶ SRw6]T[H,Ow#h *P:ϙ063G+KFgώ2!5Ά7dQb3q>O?d ' 5HL\`s| ) ;>  " * V  @000LXτ(χ8ϐ9:R=k>l?l@lBlFl*GlDHt\I|tX~|Y~Z~[~\~]^)bcd!e&f)l+u@vXFw@xXypzdtxCfreeradius-server3.0.16lp151.4.4.1RADIUS ServerRemote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service. FreeRADIUS is a modular RADIUS implementation.^obs-power8-03]openSUSE Leap 15.1openSUSEGPL-2.0-only AND LGPL-2.1-onlyhttp://bugs.opensuse.orgProductivity/Networking/Radius/Servershttp://www.freeradius.org/linuxppc64legetent group radiusd >/dev/null || /usr/sbin/groupadd -r radiusd getent passwd radiusd >/dev/null || /usr/sbin/useradd -r -g radiusd \ -s /bin/false -c "Radius daemon" -d /var/lib/radiusd \ radiusd # boo#912714: add radiusd to winbind group for ntlm_auth # add winbind group and fail silently if it already exists /usr/bin/getent group winbind >/dev/null \ || /usr/sbin/groupadd -r winbind # add radiusd to winbind group /usr/bin/gpasswd -a radiusd winbind test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in radiusd.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in radiusd.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-freeradius-server-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-freeradius-server-update-$service-new-in-upgrade" fi done for service in radiusd.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset radiusd.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in radiusd.service ; do if [ ! -e "/run/rpm-freeradius-server-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-freeradius-server-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in radiusd.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi systemd-tmpfiles --create /usr/lib/tmpfiles.d/radiusd.conf test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable radiusd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop radiusd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart radiusd.service ) || : fi else # package uninstall for service in radiusd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fiQG " Oke4 e! hE  NoF<k_6jTd "004+{ L' 8!h  t! _ 6+klfD [W#wWb!4 E(#+ni!_D<O6 F m$N  6/On4=Nm  !X&  P  P  ph( (  h `   p   0 X    8 X   ` P  * @ @A$<" *&*(2nwyD 3.~n!'O\ !w@.UD"shL& :+'|;Q[A3QE.1n/yCSiWR(U $2 ({$aERK78d  ({\M#I 38wfs!l+ Y  y< /|MN hAcz <Uq~F|,t )٤f uC ` = YNKAdam Majer Adam Majer adam.majer@suse.demichael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.com- CVE-2019-13456.patch: fixes a side-channel password leak in EAP-pwd (bsc#1144524, CVE-2019-13456) - CVE-2019-17185.patch: fixes DoS issues due to multithreaded BN_CTX access (bsc#1166847, CVE-2019-17185)- eap_tls_ocsp.patch: backport fixes for TLS-EAP that by-pass OCSP verification when an intermediate client certificate was not explicitly trusted. (bsc#1146848)- CVE-2019-11235.patch: fixes authentication bypass vulnerability in the EAP-PWD module via invalid curve attack or a reflection attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549, bsc#1132664)- install license as %license instead of documentation- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes (bsc#1049086) for issues found via fuzzing by Guido Vranken https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682/bin/sh/bin/sh/bin/sh/bin/shfreeradiusobs-power8-03 1587125486  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~3.0.16-lp151.4.4.13.0.163.0.16-lp151.4.4.13.0.16-lp151.4.4.13.0.16     !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"##$$$$$$$$$$$$$$$$$$$$$$%%%%%%%%&'(((radiusdradiusdraddbREADME.rstcertsMakefileREADMEbootstrapca.cnfclient.cnfinner-server.cnfpasswords.mkserver.cnfxpextensionsclients.confdictionaryexperimental.confhintshuntgroupsmods-availableREADME.rstabfab_psk_sqlalwaysattr_filtercachecache_eapchapcouchbasecountercuidatedetaildetail.example.comdetail.logdhcpdhcp_sqlippooldigestdynamic_clientseapechoetc_groupexecexpirationexprfilesidninner-eapippoollineloglogintimemac2ipmac2vlanmoonshot-targeted-idsmschapntlm_authopendirectoryotppampappasswdpreprocesspythonradutmprealmredisrediswhoreplicatesmbpasswdsmsotpsohsometimessqlsqlcountersqlippoolsradutmpunboundunixunpackutf8wimaxyubikeymods-configREADME.rstattr_filteraccess_challengeaccess_rejectaccounting_responsepost-proxypre-proxyfilesaccountingauthorizepre-proxypreprocesshintshuntgroupspythonradiusd.pysqlcountercuiippoolippool-dhcpmysqlschema.sqlschema.sqlmainmoonshot-targeted-idsmysqlqueries.confschema.sqlpostgresqlqueries.confschema.sqlsqlitequeries.confschema.sqlunbounddefault.confmods-enabledalwaysattr_filtercache_eapchapdatedetaildetail.logdigestdynamic_clientseapechoexecexpirationexprfileslineloglogintimemschapntlm_authpappasswdpreprocessradutmprealmreplicatesohsradutmpunixunpackutf8panic.gdbpolicy.dabfab-traccountingcanonicalizationcontrolcuidebugdhcpeapfiltermoonshot-targeted-idsoperator-nameproxy.confradiusd.confsites-availableREADMEabfab-tlsabfab-tr-idpbuffered-sqlchallengechannel_bindingscheck-eap-tlscoacontrol-socketcopy-acct-to-home-serverdecoupled-accountingdefaultdhcpdhcp.relaydynamic-clientsexampleinner-tunneloriginate-coaproxy-inner-tunnelrobust-proxy-accountingsohstatustlsvirtual.example.comvmpssites-enableddefaultinner-tunneltemplates.conftrigger.confusersradiusdradiusd.serviceradiusd.conffreeradiusproto_dhcp.soproto_vmps.sorlm_always.sorlm_attr_filter.sorlm_cache.sorlm_cache_memcached.sorlm_cache_rbtree.sorlm_chap.sorlm_counter.sorlm_cram.sorlm_date.sorlm_detail.sorlm_dhcp.sorlm_digest.sorlm_dynamic_clients.sorlm_eap.sorlm_eap_fast.sorlm_eap_gtc.sorlm_eap_leap.sorlm_eap_md5.sorlm_eap_mschapv2.sorlm_eap_peap.sorlm_eap_pwd.sorlm_eap_sim.sorlm_eap_tls.sorlm_eap_ttls.sorlm_exec.sorlm_expiration.sorlm_expr.sorlm_files.sorlm_ippool.sorlm_linelog.sorlm_logintime.sorlm_mschap.sorlm_otp.sorlm_pam.sorlm_pap.sorlm_passwd.sorlm_preprocess.sorlm_radutmp.sorlm_realm.sorlm_replicate.sorlm_soh.sorlm_sometimes.sorlm_sql.sorlm_sql_freetds.sorlm_sql_null.sorlm_sql_unixodbc.sorlm_sqlcounter.sorlm_sqlippool.sorlm_test.sorlm_unix.sorlm_unpack.sorlm_utf8.sorlm_wimax.sorlm_yubikey.socheckradraddebugradiusdradminradrelayrcradiusdfreeradius-serverCREDITSChangeLogfreeradiusdictionarydictionary.3comdictionary.3gppdictionary.3gpp2dictionary.accdictionary.acmedictionary.actelisdictionary.adtrandictionary.aerohivedictionary.airespacedictionary.alcateldictionary.alcatel-lucent.aaadictionary.alcatel.esamdictionary.alcatel.srdictionary.alteondictionary.altigadictionary.alvariondictionary.alvarion.wimax.v2_2dictionary.apcdictionary.aptilodictionary.aptisdictionary.arbordictionary.aristadictionary.arubadictionary.ascenddictionary.ascend.illegaldictionary.asndictionary.audiocodesdictionary.avayadictionary.azairedictionary.baydictionary.bintecdictionary.bluecoatdictionary.boingodictionary.bristoldictionary.broadsoftdictionary.brocadedictionary.bskybdictionary.btdictionary.cablelabsdictionary.cabletrondictionary.camiantdictionary.checkpointdictionary.chillispotdictionary.ciscodictionary.cisco.asadictionary.cisco.bbsmdictionary.cisco.vpn3000dictionary.cisco.vpn5000dictionary.citrixdictionary.clavisterdictionary.cnergeedictionary.colubrisdictionary.columbia_universitydictionary.compatdictionary.compatibledictionary.cosinedictionary.dantedictionary.dellemcdictionary.dhcpdictionary.digiumdictionary.dlinkdictionary.dragonwavedictionary.efficientipdictionary.eltexdictionary.epygidictionary.equallogicdictionary.ericssondictionary.ericsson.abdictionary.ericsson.packet.core.networksdictionary.erxdictionary.extremedictionary.f5dictionary.fdxtendeddictionary.fortinetdictionary.foundrydictionary.freedhcpdictionary.freeradiusdictionary.freeradius.internaldictionary.freeswitchdictionary.gandalfdictionary.garderosdictionary.gemtekdictionary.h3cdictionary.hillstonedictionary.hpdictionary.huaweidictionary.ianadictionary.ieadictionary.infobloxdictionary.infonetdictionary.ipunpluggeddictionary.issannidictionary.itkdictionary.juniperdictionary.karlnetdictionary.kinetodictionary.lancomdictionary.lantronixdictionary.livingstondictionary.localwebdictionary.lucentdictionary.manzaradictionary.meinbergdictionary.merakidictionary.meritdictionary.merudictionary.microsemidictionary.microsoftdictionary.mikrotikdictionary.motoroladictionary.motorola.illegaldictionary.motorola.wimaxdictionary.navinidictionary.netscreendictionary.networkphysicsdictionary.nexansdictionary.nokiadictionary.nokia.conflictdictionary.nomadixdictionary.norteldictionary.ntuadictionary.openserdictionary.packeteerdictionary.paloaltodictionary.pattondictionary.perledictionary.propeldictionary.prosoftdictionary.proximdictionary.purewavedictionary.quiconnectdictionary.quintumdictionary.redcreekdictionary.rfc2865dictionary.rfc2866dictionary.rfc2867dictionary.rfc2868dictionary.rfc2869dictionary.rfc3162dictionary.rfc3576dictionary.rfc3580dictionary.rfc4072dictionary.rfc4372dictionary.rfc4603dictionary.rfc4675dictionary.rfc4679dictionary.rfc4818dictionary.rfc4849dictionary.rfc5090dictionary.rfc5176dictionary.rfc5447dictionary.rfc5580dictionary.rfc5607dictionary.rfc5904dictionary.rfc6519dictionary.rfc6572dictionary.rfc6677dictionary.rfc6911dictionary.rfc6929dictionary.rfc6930dictionary.rfc7055dictionary.rfc7155dictionary.rfc7268dictionary.rfc7499dictionary.rfc7930dictionary.riverbeddictionary.riverstonedictionary.roaringpenguindictionary.ruckusdictionary.ruggedcomdictionary.sangomadictionary.sgdictionary.shastadictionary.shivadictionary.siemensdictionary.slipstreamdictionary.sofawaredictionary.sonicwalldictionary.springtidedictionary.starentdictionary.starent.vsa1dictionary.surfnetdictionary.symboldictionary.t_systems_novadictionary.telebitdictionary.telkomdictionary.terenadictionary.trapezedictionary.travelpingdictionary.troposdictionary.ukernadictionary.unixdictionary.usrdictionary.usr.illegaldictionary.utstarcomdictionary.valemountdictionary.versanetdictionary.vqpdictionary.walabidictionary.waveriderdictionary.wichorusdictionary.wifialliancedictionary.wimaxdictionary.wimax.alvariondictionary.wimax.wichorusdictionary.wisprdictionary.xediadictionary.xylandictionary.yubicodictionary.zeusdictionary.ztedictionary.zyxelfreeradius-serverCOPYRIGHTLICENSEcheckrad.5.gzclients.conf.5.gzdictionary.5.gzradiusd.conf.5.gzradrelay.conf.5.gzrlm_always.5.gzrlm_attr_filter.5.gzrlm_chap.5.gzrlm_counter.5.gzrlm_detail.5.gzrlm_digest.5.gzrlm_expr.5.gzrlm_files.5.gzrlm_idn.5.gzrlm_mschap.5.gzrlm_pap.5.gzrlm_passwd.5.gzrlm_realm.5.gzrlm_sql.5.gzrlm_unix.5.gzunlang.5.gzusers.5.gzradcrypt.8.gzraddebug.8.gzradiusd.8.gzradmin.8.gzradrelay.8.gzradsniff.8.gzradsqlrelay.8.gzrlm_ippool_tool.8.gzradiusdradiusradacctradius.logradutmp/etc/logrotate.d//etc/pam.d//etc//etc/raddb//etc/raddb/certs//etc/raddb/mods-available//etc/raddb/mods-config//etc/raddb/mods-config/attr_filter//etc/raddb/mods-config/files//etc/raddb/mods-config/preprocess//etc/raddb/mods-config/python//etc/raddb/mods-config/sql//etc/raddb/mods-config/sql/ippool-dhcp//etc/raddb/mods-config/sql/ippool-dhcp/mysql//etc/raddb/mods-config/sql/ippool-dhcp/sqlite//etc/raddb/mods-config/sql/moonshot-targeted-ids//etc/raddb/mods-config/sql/moonshot-targeted-ids/mysql//etc/raddb/mods-config/sql/moonshot-targeted-ids/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids/sqlite//etc/raddb/mods-config/unbound//etc/raddb/mods-enabled//etc/raddb/policy.d//etc/raddb/sites-available//etc/raddb/sites-enabled//run//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/freeradius//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/freeradius-server//usr/share//usr/share/freeradius//usr/share/licenses//usr/share/licenses/freeradius-server//usr/share/man/man5//usr/share/man/man8//var/lib//var/log//var/log/radius/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:12346/openSUSE_Leap_15.1_Update_ports/98f79f813f41dca3ad2ea6d2a7b14f5f-freeradius-server.openSUSE_Leap_15.1_Updatedrpmxz5ppc64le-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@A@BBCCCCCCCCCCCCCDCCCCCCCCCCCCCCCCEEASCII textdirectorymakefile script, ASCII textPOSIX shell script, ASCII text executableUTF-8 Unicode texta /usr/bin/env python script, ASCII text executableELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f3b5d66b4a16e3cf193624f2eabff418377c4b68, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2327042cebf1a1ff585aeba2d95e5563bdc1ce54, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=97d595d4c7d75bc2850a6153500c5d2e2e41b42a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=334f05ddf65a3a8c4cf31b2deff2091a38f12efc, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2bf2de0cb59d3fd0d347424b73d2adf6962d8a01, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f8a4bff2db02efb96557cc4e4b0ce865f542c196, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0a476ed4b8b3e44348c5968a476029a2d7000033, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=45ee160287e85dfaaec9c00a4e43236d0fe5a61a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7d1e53baecbb58c897421389a693a9612d541562, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1c664af00475d44e4bf681c811755b89b9aa140f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5e2842983cb97ec3d749e63e79ea3cc4f55ca8aa, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2351508341a480f9f0dd1264da47c01efa5fb73a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=db2321e0903374f1d9da48d6363106f091e95daa, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0070fdbae290a5db30d29631c9380fe362a39035, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=53f8095b00e85635059a641fbd1c8a93b88470a3, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=125f57b255b480e767fc9bd5118aedf05ac9093b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5633e88a0b98ab3a918f8094f32c7b7c49fd550f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d18c7ad9f3f02bb8953a9455de6d8739687fac50, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=da1dfe147ec98bee2e83d90007c17369f3c0bd8d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=144ad11787a513bc788d2a240121d50931b4ab77, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=400458a288e9c58d1a857f4aec81fb1b0bdf3887, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=055cc1e75c33cab5a862565234c710aefff916dd, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4028afee8ba21b84d051f78ff3b3f6754a90a3e9, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7767c675e74e59bcf5086c0b599cecb47b956e4a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d28bc284946ddcc474be9a070f64f90a8119959a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6a08e897d7a91bd17c37cdc5486c6db4d09a40e8, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=578ffb87e83bccb8b06f270f025ee22f10c4ddda, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d0d8238a356fe4b223c9d7e3523f4ea7632f3dbe, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=542550629551b4d4041f76b773a186414fe68456, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e0b29ed5670e09716f173930982d98b5ccaa4729, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4b4a02b95a6a01efe1673d3929807c946ac0514a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=94dc903265a69d98763096840fea47a931cd198f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=47234a4ee28da6527a51f3b0dac40b5cb833232a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=93ab16e5ad1aaf9f96fede7401034f7b4cf23f78, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3187948585f969d111ee77beafce04c0d6b79c12, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7baa96974c9585906f4369a7b2c114d4c0f394a2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f84e5b468b01f74f2cc7acadc4d6a400b3b77982, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=cb1b98531722162c9c4f92eee51cf46de58c11e5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=332128d9807c68aceef71afb04a0c2a71e176bfb, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=aa5b07398f3451b843462c2021c49086b7d353a0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5d174c66ba9a6d3e9375fbd98ebf13272c02c6e9, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=85d49932a1e074a599f0bfad76ef35b34aa24435, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8c94dc2549da1ac00909760be67595c97965c6aa, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d1f7f7ac9ae2d6d129ed94232430165f3421174f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=238a56f44abcc9c264f713747f427e51cc689dc5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1c2094d2f8c31353493f047aa644aa5621393feb, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b9dd4a16c6e34dfc2ca3867fa071e32eb45fd811, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=87976089da678abbaf6f318e2e9cf7928ff88b62, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3c63417da8bc5fab6e56f1d3312e6dbed86be86e, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b1f36cf7e176de487bcb358e998810b942f933c1, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=cc29550cef153b6ac7d71d4bde911a0bf7cf5b50, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f0aa0e9748386fe85f23ea1b78f3c1560332c7dd, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=845d1c97daec11213e745d15898fd208aa3a24c8, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=facdebe824ced4dbfdacb5e917de57527a8f0646, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d15d13a3ca120347972759daf394a51d246866a3, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8f469be150f220b66fb978ec047f8cddb12d0ef0, strippedPerl script text executableELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=839c1c9cd02cc1ba69b96402c9f773a397e12ef3, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=4aa455637c345718c30719238713c78658ad028a, for GNU/Linux 3.10.0, strippedAlgol 68 source, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)empty  "$&)+-03579;>ADGJLNPRUWY[cgikmoqsuwy|~RRR RR R R R R R R R!RR R RRR R RR R!RR R RR R R R RR R R R R R R R RR R R R R R RR R RR R R R R R R R R R RR R RR R RR R RR R RR R R R R R R R R R RR R R R R R R R!R RRRR RR RR RR R R R R R R R R R R R R R R R R R R R RR R R R RR R R R R R R R R R R R R R RRR R R RRRR RRRR!R RRRRR RRR R R!RR RRR RR RR RRRR!R RRRRR RRR R W~^ qilogrotateutf-86dea3b17a761ef0a0448cef7b60dabac704725cdab3caebd007f21649dff18d6?7zXZ !t/]"k%Yfm?1 1N8[xIBpW[ox[`8Vb"2` ntnk㲣G 4,CfnL&y]k~ EŠqf&>Y{Í#;\Xҟ<}[+AG!^h, 1*@S5!.)vw)_lc"zD,/Zp~pP>iM1|WY4&b__F2gG 0.&-!7!U*n@SM\kqewggrÉcBQj tgiT<^- ߞVwgvlw a&t.boJy(X,N?lVv]CE:m#@zFc FXBD2*F-kG=S[Ak8oY C22rOsBz qK6OY@|>[ UfTAS3yV&2~ewG'p$S&`{pd;<.4zmR3{_K\XJƋOf%x&c\ڮӼw!yoiP @%w vZ4<\xAHhU7_%}dEHaH^l@ccX{:W0ɳR?x57\T܄BvrO&z4ڮ!w bc$\L_O-iySU!uEmWl< [:rMŀ+7<;JQF'VU4&[-W7߿nLnKzeTqo 랈[m$x5"E"[F뿌Vmb8d%⮡KbPcXS"wEK! U>~:R >=4 #Sգ G(8"64tlѠaj_.M`!q cUaa;/Me:Ynm[bp1(!2NBujp,*vV8)0pj}IqZjPg<a;Uծ_TTo$yg>Z*d8qE=w%4H D=Qډ.0g~KKtR9NYYC4ޕq KXl/y5WB}RDs\Ji!Hθ&v2ȈGx8\3S\nh-Lj+@|?g5e]aQ*A$NY:SÅ޲l܂smsI8snWUa `↎gWF=8NsQE쑮yK䕙G>~6zi9*ȐkfePYD v 4z;[RJOȗm PN&}\i&XB{|ocBh>kfd \??Fa0k[ΐmCf#_DqNqTTɣScx[mc88T#"|zV])&m~M^<~y39 ĵ9ݏFM&6RL zGFc_iZ-\*fs~DU `<2HICu+_!«;l(^|>68\Pf~e!h"U# ͖֒7Q0f>!aoSz⬎ԣWF38[%ܜ 9u(>arbU Lg=Fy6#kv/ztCRC%L&?7=!`Y!k zBgAg XٚĖ.@ސf A${kIo70{sԼ1(ZY ;sdOJ"w Cm`#߯Le*\rnX|s![ts/~?:YP "&\J@n<@'QbO P>}%Qb< uVK!gy,bi?st,!#H.e;zԍ6FDRzB]m†Lj QiEnNR=LeKyXnSG!i0M608dKD;sV,3/v/AeŮS!ce L:.f:%E!B<tcs6?܏L8ySkmk稸+M`uOģob@_=&O_CN@GǼPN1]p1OKJb >L\UsHPGUEE9ƈ=*U i[^:k `܇v12-+eWQ[dɽϿ gJa%Vĸ=ZdfPtlYߠ9 {jxX1Ύښ W3n>p-e (A%"rkN銣@`u>Bir_{Ap@|~ pGq+'Ot Lhc7EtV69M}V2 j)δbb@v)<7}g$m S$o2|7&޸sSF@'eE`;##jY'܊H*1 2KOn<+ >>cf5R\fUDygZA'C-ȖWjQab0ZOZLtJ +߂k6M(0LC+ϚWup$Ik/iΑb(cⰯiFf Dc ^9D 6u̱kwHM7(V)HsWb9<6h#}.vȀCJW L_ѳ meIn'1Ej)z@:3 J4~9&bLe (O|\fG͏$ msəPm$)"C;2S(%40@e|'/4$@^Ԥl7u y40e8I+v Ē3s8Ho|Xhx!Ivp9]G܏h˻*"h'~o5Iv*IR69w2G4 ̠c[\Sʖ aBs&NXx d&0$R_{F: O9xxٯ-#AEG\DF8WU$GIXe}qTBⷘTߕ=$,e 78@tiD-dW֣2NGmV^_i`ydN'{ga$5ƶ+MSS_ٚ6blfD]{7]ÁF5΃&=萓4`/Ѵ3Yr-K<1#5N0` $BͶ`6|“諭;Xp. *>A|ؔs 1)m$³M=ajiwhɄV@|3eF0UIw mCTPX/|0u@j:jieQچCUT868:3H{F2ٖY $ {~S \7BɃU o&O!Xa`VXQ*.'Ǜ@Aϥ,\FO&ͳ~~8z^$|W*h %ݕ!gN&|E_ۊ!FϰAO|:O|jgDp>mZ<Jm)3i RlDb3#%d--FGJ{kU%RS ).b)hhg%RIfLEx#ٳ,^'[6fml!6Ws#u @jb,4ݟɌoc³knO)֠f}s ;}>o}d*#Z^>뒻ѓSFcVL;$bfo^`%!j{XHjݨNF9䓧=8o-^$DH#oa B,ˌy*~M"Z֗EKLBm)XA&Gn+=L'ᗿ?XA$#5J ;)BA8*aѓӱ21/Z懧t3rIҶnY3.Y-?we.0kɅ(`CsSFKAӈf !O w©9NjH >862T-gK94ľ!X.m^ ߧ%[(O"0fI(qUXhhTWJ]"Q 2S;@IG`c&~ʭC~k?!뙐y)ri|L"j#?T֩ˀP(24B]k4_i,I#VvB jtG1Ր~`g!YRȬCIG[e Qo c+!?z~JlrƌYO 喭%3)SFbr-KΓ YÇßed-/gFLVWB\uɪ@A"w2-&}?>ӧ}w]-oq43"e`Bl&16k!E23z^g9cĝ'\+tU3U&tc֓YUjZC}˶Oó῝w` *T)LB+Uqm{\Q@yɸU-IĒxn=V^3ŀ 4kB?wahddw_A@#y:m˵P#CqTpn&!7~ܛdKp;ɩts(ZC:*ނ.JX`bVc ']=veG7%UgD\VjmDB@U`wjZNH:J;s6#PPۏ qu<+ݚ7ǞLÖnL$mU]~%s9%`şq 0>U?2aZפ?Z<|>;DS2YE\̰<,"d "C[ٵd.ض8v+ȣ\^E&UҘw^67U?ֻX}TbҜLdBU$Nc jYͪJN$-.JLJ 3M UB,zy,ym&-_"u05&uW#DГӜqdR-]J)O2?yfҨRp~vB X(9KZ8X$kCY^U0p'^1}M7~vYGڃ/ 3G[Sm`pS~ H0t?W~h@YE1Nov_GV{Z vVVAjZ>%ya )1Pk#=L_ְYқ TcVkRwVp\) Uy云^oh Cr6vUDO% 4q!ƍ5طS<㺨ڇ-Utܝ3J[Z֌x,m-OͣN^ş;Oo5tZgӣb)"j+*(y؞ >t*}^u%63<|w"{JH |ņMw(sCjF1vjTIWo_YAj;t Y4c3k!ŤKw^QXbt|IJluT-, if|iP@Ҷr }ޟ̫>Owp@x,29:V+*>IzO%1yڿ*Beu?zL,GR4LôU1-6]Yhi=OdlM?)~W|pȯ5<~ ȸy1!Wj?)+a7у3thFmd -lI: _LUYA.׸uV%/MzP(Ĉk&ɦ#Eb2(5KFg*9{(g7-JvL!zz_ ==5j{1ey\)љJ^ .@S0Iԣh``K+ZFݽ2Q͐Չu竂 4 5&.XL\T=l[rC3ȱ BZ 88¨xy \r-uD9ohgxP/չ6,Ҹd}"NX*ܿW dLXu@*eLEM hFF^;j,M)ڼyw=,%x5vhKw+z䈓B+SIOS 72\ k@{d;#TQs ^^Wqk;cǿ_bn#n`sѲŸ\p}ę@e@ L]R1-޹ˈ `1p$qswwr;͸WZ?rKY&t51zn7.s~|fD$? ^R&œo`?r1A7˘w4?*+a-Ec?--KT?k iv2qdr_)'dXY25=9͉rlr =S'kz/*L&wE FXrVsΈe47 їYβ_UVBNhGJ~x:Fpr !QmqhfԼ&:X'ҲJ"#|5M)vسK]|?BLAzAl$<v]0O{U\g*3 w!x3Kf-ziW]Eke_ =kg a^^=4q*m@&^<jR>o?8x%6K9=<$O3يXGhY'|5Wy]Cf@q/Tϱ/$+3Ù}YdQFpd(xunh)_.sKcFXݬ-]30aB]SxZN/!Iʍ\c|-*C@9uIfu|>U|JvphpǛ :nS\G֪*Ce.YNT`*X]׳>Z: @ >xXҁ\=';\Xk4ņ2i< hY|)6uaۃ> u!JIL'{?l|#Dޗ&z`rwA/rBSxChi-&8+O-ʬ!vV[, {/lzn=3Í&1 On8}m3QeCH2ZIAۋe:ӃY0džy]3+G ƣwFR3cWYnH5.bPF(7]V֩W6ޖ}{?G@APp:۝n ~1WKMa:\Jk%Ûix %Co53"?k2 u$wCw/۪nDAEꨚCs2Mu/}{ %2P ˗T 8\0$iFInpDׄ74.E)4fKpI99@  1p*#yCH+wxpN1~XW vpuk/kS qE}^TsLe$,8&x0X["}:MƩڶA J*ZXrqƀ-;kt7WJLLo<$s3 tbY %7I+s IaGj9󑀽9ڦ>8pH+:I3r{I;Aa LMY&rN*MmΝ1mUc&2jlj>쥀1HP7I˲\Sﮂ^),Ceft.u~ /%Q$G筘Nt^rB.hVv,{jqn-1 UzS#&a ZЛY,̠>,q!5 􎖋/a#TX (RzO}Pv0)l#Py5Db.VIIƗ_9QpW̠/bJt3< #]"H~]F(\sll[mˍQq ?C/B1s2.*&%kQaZ2 ɳaUwD]@H$[Q^)< |CS^8Ro~sK}-m3 U _* (KuFfRGt潞O[-: >oo8vJ #B1 :[Kn V%؄ L,LU9>$[X ˹C yJ:Z&Vg,EBLp{Tf`ș# R_F잟c/(z- ;(OiKZNKkkP [)`B\IQ#۟bQ"8Е'S.<ڽ<%|HІSKX :WD}4FbWEV6#gz2^g0 4'ghW`=m@>O:GpĐM{x,Xt1q9UŦ\{*P^r|C |VԳ :M;'h{T%o8]@9D" hL1~~%.O?3@At$lC9|ؙup;Ќ%&(ImjaS*^i|P, NنitUW?&%B8"dx. *x/i5w4lQ;'9&1a̷/*a -F 3 FǴ/t9E5+V83D Q+m?S*u i%c}JBP $&DlcA+:0PBaRlxr"2,ǝW X /ʇukpӰi|"ݐ`/$%=D;fn[.c&O~{n>%:`mb\#X 509(4F*" :´ o6>v()wֿRske5'+Q_eҟJ*mllm[O7xU°S͐sLcO,kWvtgh,I{h\ 2HErYT h,d&6ğnn2B,t Dr}:tOXa-\&HsŻѮ_ wx_5%ֈ{v~g?e)EGå-aa{OO1ѐ@r4 gXX0`Bӥ˧J1cp 1Jud"K}gBlzf|M݃Flץ +dloطRg+V[H8 4al S4Ǐ,!0e #ږ8=\]]iŜ/cB0}lZp m+,r'A֜ZbĜ( z /X-~ ,A: $5b4_m%׊0[I#1/G+u3qD4)8l`膱ɐʅ Xrca0 b  [|`^Uׇ T3/xk$-Eg|zuΉJ~h35x&-'Thta8^% {ji634Nj²sL3DZ*m=>.L&yX<3BJ0j+#qAÐ6XS/O[1Ia0fgn7)^t2`I;ג2HHguܽFh4T@DՅmt [@vS+~nYep&7r;I;dAdy*P;gZEȔv64zf;=Zn]Q}V<?k֐H5cU'adk;5;Tst )ǽM޵oNG|؃$$?*7km.Ş|Kx$BۈO#T ݦga zWX;]%hVlwP PA9![9ۦ\:e۴nr;0{⦘c`/` +3G# R7U}Yۻdp\ qFei)S-T^ipD7a%UCHFGޒ"zLvpKA|0<”H\^,۝/7y7gPMp:- O% !f+# HrͲp; ċSǡHi8`_ݤޓEpH"S0*n@.v:k 9j$zOY{:ތ}47n_p5EV3ر(HLL 8$8DսHR:T,WkԆjUXeH]rH0Em cK_B>a,LwZW|P~1vo5 پ+qxL_ cr?8Lvi~P] !rgK%AV!sܜ7@pw^^8a7[؊8^cgJ5Pﯼnb$oPTS"݉Vx{VI9"6'(M`1 oL#'겻YF!/\KM,Ƨy4ni`, iaTZs׾'i ziҥ#þHD_/HUNv$fr5ZgM*d>2cF煀JFO r |`JVS0߭y8!h*濶s$ː7uK0LA%wF?iPn%#䵿! ?pnRK<|&d n9>h i6Q/!]!XUp6V'\q 5 Q# O jm bcxxy?c/c%{N%a3g:Ǵc<X--[K[>.ČrML%%jzn(-<`#/ZډSgBh&K5 sC*OU])G)I;+zZ}MegWe6}h:F<=ʳsa<(jzmbٜrE܅~ nBeoL]{J fy_ ?/VsZ^zL7 f4Q$a| ̲ր0Xh=zc.VyͶϲ1a1=\?(ӇK)^"y'oZ @[d',/y[;?1tun Z)Kr⩨Ѝ"q.>c~nPi^;Jkjc+spOKZe rMs87kxOD֨D!'sڢ16yFPxٽfeQbxs9QeD. ]PYmA+s:9>|"mkb n<+2:p*EꞘ}j(s.QnhO^X+jK)ﻕ1c"~xp+Ii 9,6B}%NL^^uWl&v,PzhDSS>a;Y;GKVqNOJb$\H8^fHzA^/-!"qiK-@gYNjDөI95 [؟0]sv:'Mj-iB)*5oUI=TV{uYSR(PO64:v$?Z ]%aIw^rÐ#L,MnԈtA^XI@u=e5>.{NwST~`?L~eBū[9bvщ`N<:-!+?[O|n1;F&b-sS΃לHT~vX2h{QK dL4jR m]+~m_ /8CIY7EUU扷L'Y ZzԱ{o,r+V`8S_p7wj̠=U֗-HC:l% VrRÀ}ەSs6ĉN1g  N mn$:_$"wQ׹i(:_Rw@ 9yv}ل?G~㞶X+M7m^b§ORcOcnE)'x{`> r\5d\f-gO7"yxaٽ0VVW/, V&i:BQdDuYa?OB|M6cL^]'Gnn1[! BI5lFX9[x`KuTa )z +IY7lJ2l'ꚕ)ry]%AzyE(w*1S\n\n1m*! 9&{|v9'Zj;jxV'IE y 71j'&' qg0v[rP^{BPϱ-Ԇ/V=E^E]cg}M~;$EaZȈp&yQdv%'"!ٱi,zگ&r= ͑' H`UCT?x&4ksY 4L3}K[g k j1.Tr4LZx՛W}e!u`5]Aݽ 7E'۫cV}  #y2UQ25[zG V5~wDlKc5A}L9[OJq4RccDSJR\$1WNy'fggrK\=T1Ro,}mv;tu,ʡuydtG`9-U\K˭?ݿzkC=`JYm\wG'L;Is6Tv%$NҚ^Pϳ f7'q_1_^\Um$:ʢΪPh汫 :9KڭLȱqLwJgO o ߰ ` `)+m3w ǁIĨ쫞9 ([/XӠ5Efdt <9JvEu|E-f!aE@񎩘}d_+wG T,uj{\0mEtw=ho C;yxP(sqڒE zҲz.<0|9A}ml =hsANEu]دAN\PL𥧥7ذֻ=!<̺= V 4V $ߌ'r+}(^ҫ'*Q Ћ )eqB/uݏ@z bČi-uV;|_TN7WRK ?p!fd_Dn*F0LʗDMv:zTƨ'Y|C„bR.+n WgwV4̇IBU'y\]HqWמ>y'F3%kزp"t_ aUּ![4&L({RMycxEV ۶W̞*ÉiJ\PRNO4̘=ies*줵 RI,`\?wPV[*7C({NFc.8GH5B,]pm*ҟ^y;5ߵj+(qG%ZqUІ;r*x0 WPS=BjV".Y37 yD!2՞c‡Hڧ ;t̏Ri˗Q03"@#N*ץHEC-/i|j41ѭ@o~Dv$Ni.6^ ׼GX}GdvH(f*mL'ݴQs82|6+t[tE7J!`<9_q獌@tP6ht(ݓZя!:]ʌ۪:sҞCW/‡OTEG%c0Feĥ#_-Yː؎R[ZvJ-zi+b9,-^驿⽛/J$(ֶn`Nz_o- PqHSg-X@a% ^C_k=hʣݎ35GuZ~5C4EN-$WlL֮KVT?$|Yғg-c;t+Zlh3C@DДbn0';D?ҬnvQ S?aDz"$G|(qQsnlCS?`p0d[Y^x ~)4ƔoBL88W(j 71+n H\zqM~' PV`ŵcYlGEkɲJe+Suvהbdep ]A *,y[! xGDG>,ߞ]0|}^i ŊUp3IC 9*&Blg#j $[Yƽ<xE/SJ#1d'1T",ou4JTP(W;JÝr"nz.\sWeAȸMvxθ1+K|nZP"+"=2*˞UFPu-xVGMCO[Y ƴ`b3/s-Cx-) V'>Lu"C&ot*lP 鎃%NócĽϥ3CsX$7"+ EH#UO"/|<Ц Uo!? ލs5]VÇ/~ x,kx0` eSKF{`Q,%/كC_NQWK.!ڸNfvLqBE wk/sL5:]#g3s6ֳX~ZH8z"a#+7ˆR@y!(BH OPHǹWKW}UbgXp jBR^ջG& ^ upӳ0Kc#K{l㍺ґ1UvP ޶OQ&LvHϙWv^_:r_cwhp2!dqavv#zp4hgdrHŗ459~0~无DVi@vV"d> . RpJy: 5:=>!s"a#`EmQh)2t5eRVzsGjsځlnaVdF#@*Õ2Fplv;PHMZ\Fؘt&W8Wr|V5 5yUȬ4]%8Bt]w{\{è؇eC{Y-9'(B-d"؏ЃnVC "s /xPg@aCu8Ȫ.rQI֛*[;EV."~%ղp &;]x+TSցl0Ɣ{D}[]+;*ZBUJHMKK4HnamJwqgn t7ב%F ɩus r,+tt.4hrd?MӅIBOp oDu-^I0,tRYXKTHh瓥oeBL>7mItBVs+ҳ6Um޺y7HM&,T'>W S B>*N8ۢ"G(BzcM!cf^Ntb=>s]_w CSTqwi/HQX\}cTIk@-vWq%H|@Q-/x\Q?{BFKT9G[ݟfΪ"TӳU7xTl|ܶj:YqIzBTKy8,jO\oWlab^75hlwvr+t % U`环p9(0 Thw̄w\d7 Zv O?3|˛֍<.&e;e e𺰣u#v0N,g^;O5㼐vvzeny5'%C;80=3/1pN\%;FjQXk_E::'rf;o2Sm'ک4:)xlwbo'Ɛ^513s]|m.Ǝu~Y"lbX6)*x4,׌S|a>^!e[ O“p=hmnNہ*^О? y7xбj\)X)9 1xm>X oԬv'Qt{) 'Sh,(Rz9Ux~"5DZ<RF * ;\OWnh̡M񿨍&viod.tts\Ҍ E淐F%3gL^3-yZ4w_|%`Bx+FAѥizV{i Y|L:$(Ց9,WࠣfD$s@O$$zh NTMt;h BwMB.@3kN&.*bq=Q[ C2o#"/PSӒX=>y12 t <;I3N/ʥQ+4ʬZꀱ*O=h{?OC}v uQ57ǟw^m/tO6,49ujka/j9HaoxUUAl?A7j{dt\(vsiHyG0'DMꃷs&dS5mVے8UMRrWfkPS禶o݅ٙbZ5<5ܛ~d K˴{5 N(`/|uڦ`Ysl$ף ͮ|# -Krz%Z IOhi% ;ב,Z ~ǤQ*c@YVl] , (UpSN;k;x=`%W3X6ԽJ㴍)Ե:eoo:$O? H& N3'솉77`*%=RDI4;ٮs}0cg.xg3|yn5cxzy rlEI^E7=kvk]>9|au9wLr>i)dd!_(y`װBms` -RO1=(v5cV $xj c•A{m$+SEP¿I\N/UQ2hęϘ8{L,Br#})[ʈo.tqziPzFp^[]Gp0Xx{hCPN F Ac"xItWқ/fzh 2؇ekhh{8LOCPkOitKfk s&'kvF&9rGBrf[]6CdxtU|v}Gs8@&-3Dk3$L+#;c僽|՝79{!eMY`5=3̂/CӆZk$ݮ\6.NK!"ZGˡn$(dU־ID;k*;}*?DSK$`āW}FQ7$.{86+ o޻m60=!3zqN~,ytҪ1dhgsMxS?Oo( P@Xp>@/*(|h4}@S Shݤjg)aY5~`Ԑ>r l7Kȼ80L,D@5,{ ׄhpsxj h`z笆Ua2r}k>4&0GP 1XlpόVk츻4!~_Ze몥 ERbldOMk'~5y oEeSz[{6->l¸~Ϡ!M!w:靋<ZK Ҏ=_Pt{ GGͳ=P\⍷E*y_`Np}VzY?Q˘[8Jx~^Z~XI c3hAP+Ǔ"7:q6Q=}Z :~6Y!R̆F>9rB90ggkih\OLȈb%raYQ%nA>\>8IE#r#7.g׾fpۈ/ycA6EYx">Z3Y"IGW̏=Fe|P"zFMJ=f5‰iD6X"b@CO ֑{5^s[}4[ԤGQΉUgzcfe$e"`cLk3;kOXZl/JyN' w8r/!%,lݥ]wSnZ@$Ѿ׍xm+qÐpe1.$}Ta&_.Ω8u'!(oLHZ: 8}L2Ҡ{C8v7v²,iS0JhIN1 a7uҔQ&  !"۞r; <XS!'њdJ" tmi}; ViO&L#ۇU./viE|něhyjJK@h<*(ņq_דWrKUv3i}]Wdđ[\'gbfPXЌytox/}`xYб;ܜ?i"R xyϿCf]KVdo\fF&:%3 m\`JkEmh@l"cq^A]L{F&6ty6A=:QEE%%gg^Ox>D:et9M]X>9`LuFLL&B1)s4$JUOA? +JM4VKڞc+t+NPj'y|V+p e04u@EpʨpWwAtfsX,B# SWNbdtPA4 Pj#[N;8gmӊ;iiwz"&zȎǨɋ&~ko>3#z9pB(a ]&NBp ɝlpˆDDWla@X!bJp;{x#\#KLD sS &$uU)#&m *nLLLE.l^Z66NbK( {(,,_32H/j]au  V#J!eAaKo[%sު_uI#;X8$ˑ=,7wMuzc2mfySV˄7lشKG>I2 m(O(bs(;e^{.0qf,b`n!Ϡz?3-?ⴧֲ8!o~-n!L~C!1]@q~&__eKaAeO拤L+0C}s_[-F)sL%S@sT#vpe\)htT8wVEo@cF.jc0Uꂾj=ZaTU:CISLpk/xp*uD9tAc@1kAo0PT<<~)-h+HX| ?j wۅۭ%]Gl ο6@`Γ|([ L>^L%㞗jfY,p2q=& $1)jErdE0.3n)y%Wg(*snqxF7 뉌~ c9Vr& 驨7Mŵǜ;O+lmyp@+h<:bT"i*N4^5VU̘$ij0>fw:C|~R]>s"ي٭"u֞`.񀐰O&><jv~;p _@#~.(D{ec&= %b/v3II=%O߽t*d&0NcTKaTia_8{$r"Q":__p=-LE }QV%KQ̒I4$̚)O&Od0G#~d3"uNQ}l[.bsp rP4O][iE=XV|*7*؉ibyw\C`*m+vUѲPrV/x!vgB;L-MaXBT$]QtwFؾ<[ 0׸'!rMѸmo[uFDS Fg3"33 U:EXKJ+r}5Ī\DӣLjY2ڝ̀7u?N;8>(uS3@D 1]" -fG#窧yPU 5|ĞլA|ҋ2yn~NJމY!'M;oj܀.rˣAaWRF3ӗw<(@6#{F'I{"CNMO+ 1 S7Wd@it$knĄ3ŀ2vp~Mu{$BLRH@4@:(QrO܊K9:)җ<6r^eb߿JҐf=,hS< ,DӼ>S {]k ZC|#GF eǁH8(rRC3{%ϐ=md]pt.  {e^-ۛGX]IW hGE+˾;}.Rsw}Ćg[Tv}k#Cro+%VڎwmpX{2n>x4q@k!LݮbJz4~@HZH}=_{f/mYsi's"zʂzp0q (J= im A- fH%'b:(;*~Р-Y0ߦ>\[Y0~ [IpD-U؆/V"> s#'NOhU z6O-Xl; jne[p/^ wl:%Qu^Ifœؒ-ө/OxxuBđXvqrYs^6Űt}xҹ NKzl1(f6&Y6bV\Ed;ppхuDL9[n>W}AU_ASMNO,TƵQ.tcoټh}6B(I %6@8[{J9=yc D.ҹ%"v\3xJ쒝z#ATTtY'/Ӌ,ϩ 5quk-QX PW.\ N|T#Hb:'#~F-8<ϒG4ld kz %G8I~ֹ dRVQDqbA.o;Tb{h,Р'BݝZ+;MG~R"ņ#Z6QClECl?NGLuy ֵ 2yjyM̋U3Ong_r_DZqEj%yVoTz+X50 GO.u]8+ZCjKЂ<_HW>BApJwH0zو|/u=DRd¡dVư2I A<!%u¸#3q(O:ߘ8/8si3k֗ wwo.ТգhR T WVSI2*\EOF=-$RǦ# 7ĠV`:ZE]'OW/AbT%Br |v1҇[nWc[Ql!_6phoG4oq`ErO,!xdS``ߋAa\h; @\ OEwYn|Ƣ/V4rNڀ#w{ 3_"Om%5fBe.n YGOH{zo,h#H':Ա66'K?KN6v2v VgXs8bVw Ṇg>36P)@d'7vCg$7]j9,$X1]7 `_캮Z[ꊖ ¹woZ`j߼uOrh߬:I'}. 9)0<7O6{QVᬝX\O/Ҭnr-lx$~,| Gȑz֔?ZM)`q`G,}އ0\xj,~8]+F QcqdBA R/vjx{N7=T~W|=Ha 5Ҋ%WOP~$Iɺ'QmmPlkd_=&+iHfK "XsGOB(O;&z+?XLXc WTXDjMs%`Y^+NƶͣVU^=:TtB2&@ψ*N@rLr=2d|yjHq1QSul;5 E#t,T2wN<>=(2YdvzM[8C>\w%@N$'x?0Rлdm^Εl9q EÚ6}ѫΦዷEŻRErSx:N3e~Bu!u=tV)/tY1 =sC*TLH_[}CEYyg}`hQ*Ͱ/dHMNJ6T޶4xPo6`D]G t#Pvuy]r{aW"GUn1D5׹H >n!d|Gʅh: EY/dR⪌A//,̉\v '+%:Eq/>ٳWneʵCZF+qTl+N2^ʠ$p/}}ڶrz?8"1O08lf@B+*^r3,'ͳpÊ+ߔ~5Kn0f"_Zw!O0 QtL̹~'63c_oQ;mY~L `IXۗlRwfAQe au[//@F OoZ00#Hf^7[ڶ>f ?mSD;KM1FH_ ]1rj0 ,7GTUMṒ[ hƛMiD(l15\} ѫ|KdӋz!ϛ۔<]4y+Qe 1W6u{upi|aCxpĬc+u [3Al$} QlQ ݒ+L1xy̽iqCQ L\ ;u2U2?Mrx|9 BY-T̷hsR{MVE)WuE&F\xU+z8,t:fh/AZE2J$pߌdÂT$-7(vm{eh#$?Y]R}Ga+ܬ+aLIi} UK`C&E [K"E.9AxW>gȢms@*9`4lB5}>D^pWEsFUh~4l&p%"G}G;W߀y>ޑD 8*+;m,Oًqd# i,JI^ÓKp5~Qt\ n|cͶ\ L2W&0q^莰M䂺Qi-n_j^S"chYzٗX Bx)Py;gF=kʊG?h)&Bzi5R3(}L)KJiXݟk e.x̢TY@D$ӛϑYxU}rrMc$&}@2PJ}{>D6F:[f;RՀg{,/<ނB=z?P .ݢxd|:'rpp~dꈑ-QQߐ' xe{QA:(dLz`=~pElJte^ U/Ekk 9DuOV0qi e;p'2+{N]tiq:Ǻ@ggd[sz|`vmp?(BV+~H^tg'ȼ R˝U;Ɂg8t9>{r몱ǒ_RE'3^xԤ"/EBگ8l.l V&`s<;jvqΰgHQ%7TC hΥA}5g,\ [Nlf+mG;kel[?K]K'5EfSK1B'myF2biҼmkV^Rv6M.zSsax,[QD]Fɢ<Sio JE©C%O@l;~FХtS6p\rU| PrVė(rJz~_9`_}bO:&=>>n;ptp }t\z@Y0e޴n k? sC03mI>G̑]ΣA\h)<ǜZI8:`'5MrĄ/0/MG:T1#!t=3UpwpLEFK~Z8ByOE)gv^ ki7GdȲ2'C*i;۫7FX{Qeo'vvm([Mr㨾(jD[%eU=q\L(5g!O֝X\%+|QW lbn+HX!tTҊTlNd{4\HV]eA,K7C ?> UJ Z~#8-pB71y[\H"a=T蚨.˸9L /SmypME;MDI4_cbbTK$0 $%$vđƠWfpqo!a0$uB\2x "3rr)-k4k}|b`A ja&`N.p; },Wk JÿZ40z 2m"2}^2tj%frO:sKL.vTqOi#$‐6V=$.kis]bmBY@q5$n' 5q^VG]r{:uK qCyOڥ$E^l帖Pb]}i®/6НNCCJq13_ϐE:%4[,ξ@}Oݧ`E<mn;~fPa( ѶfȐ.!D>š"@$TS&t&6#])A .]r㵏f{X.Lù2Zᥙ[ %ΑIEKiY=0& ^!!‡l`D-Qt'mrO[e <ʨU ؐ *xX.Qi,E8~p@Wd+onYH;j~ya& N RE5W8)~7Wh7}={BwouL9T'/`\0.=`ɑVkK6K`3.{W9NDMxB߄uiւSiKQ q4~ř D^-=}YG2T]Vkɡ lsic`,c *՞jI.`2Cw#B70*z܎;*D;cw'qA$V,kS qVbc?Be.1.nG=|zdfdCQ+7*|ڙhj%K xl4D\J{Plfc-z'x@^?nzJݘ?8{mn9_@4gf*g"^$XIt1aЬ Knh{ozvGGdcZn`QS23s2RĻBb:Tǀ0oG:X'Oah[A./!/-UG )N}1mM y/L`?ɐE_/˅`_ui$JAsz|dyUɽHR8&c|OfoyHL qK(w: NZ}m=,w¨a8y\de=f|̛8%>1vVȲJ7+-q|^qMMR}ӊnBT2o+t86"dX&9Z~<^1t`DNzW[Zj %}-0^RigΙc9>r$Z5ДhJ6wԣ ShV'0EXlS|  _I/  Yl Mв#2ꈆ,06< 8A}cbojq ~ =;Bͻnx)ѹhM1X+J6лAzI,BM x7xb:4=eeX|.Ar JR"> a`T(X6$$ Pm*t'ze=a @@K;ĝG髋qFLjԱLI5 fYޖ.BT)Ln0SPzPagʑ˺Mu(z:D'Îd ?2xG+_݇T4^6yeKt44 v|W4hlӺ#C|Xkpd`@F;OUՊQu2ux,[>4Ysx!3rpgL&F_FoMOyv|=k;q+D%tꌆ00!wφݽP(a_/H_Ղh::\,LRDp g-.hn JL(xo]& S S'g0[$Ivv`$i6Jg2 SwC[SE^4733v&_ĖwJdv2msX7R"[z_ڭAE{CM|K(٣Lǎ鷏n''FlRĆ PMJ#DѶlR[鸺ӧ5Q_iQi* }ehFY0[p ВU6a"h(b]L!_,@QwMK!XSu s6/_ 9o*5WBb:(2\%h-qb%Ǻ6;BEU׾4z$ -xQ',Y_Ƭ JX.x);/敎ǒ'iW6/(0YPsp01_vM0C#liT|&9+"c~2^aT7z \ªN2:6/N^*'Whu"9fwk:Ey(u0 (!bAxOp-G _P^յEryvGG[t%ɢ0FHj5bd@qoh(:nE;713"PjRK}W LaА'3!E:YOpܪ=AM,kgߦ|Rm)Dtc aVN0j I# N2kNT+}&J%*xʚ+5U7kuRLҦb#<=xgB  U(ړ=ڋXtuCmep;;uHVeѐQ[!P!,LF*x%Z0%`2';as*A[=̻:waMF_' yؼT B,+ad8d=A{'n9z+ɾ{lڳ\L‰f)ʥzn%Q/ښ8`_á gou;ͳ TԌjr1p;ʈ hSOeI6vG9SO%ۥəfU>)c 3F&2 UɼN7N6Vخ u ꕾɖ#` Pラ聄y1Cf{9J_o8͡E۞ObM2Uy*:* Zwb%L{-"w%+PH7R]W$󳷂KmZ>Co~=z$KD\N~ũi{'@L]N)F‡P?Zފ*egt|l6z|]Na0hm/ ?k䐂*]3vZj&^8R@JHjƠ5h5̺&0,g=Ӫ/0sͮt~mO Ueq6JsլPDܚ rFh4>I7-ؓt+yi $*X0E&GǩoUf_SJz>K!&ZLj*w\ݽÔ.5,$A+S۳Ry>}#\ 8>]vBH FBڂpS1,;fa!,Er"._ކ $ '`Eyf`ژ"O{qGe)0dYjВjK12JdV,0՟0M$5Odb|iP9@{GxEkod,Øs5.Lgѩ`;W} H{B駉}hkkAz ᇅáBI'ny}\!'! V'RюmPI9`=ʷȑd41 8Dz"\A:)Va\ g$bðV3u>%:{:KOHtЎf3Z_%|?P]^ p[]Zv!I$ _Z@SHۨb R~(wu=W7bC8&ۻq]zWm:oѻ&ytvtԌG_.dk!^3[m]/ o'dm >7Ñ=uY_L& $?F`e/} sXkE؇A!qͣU|an)-\bHI3""ҝepK#ctZdz~{IL.'Ohs@[_9$q{=HrQ  :pg>@ͲH\^ OƊtP6^CL';"{7bu9<+KDO} u)]c&^!;_ɡӡKuNuZ~9 \iӎ"ِ d$NJ ieFiVt~x<D#ghoB،J+XA=klx"Sw,@#1F *52&$Od )Or9b% 6Rw B_L=ހ&_ճ=$e-^?HEVՄ]ֳPdlwfRО xKv(b_N^슄7)uyRͅpܑll/{YgN\8?;C.(e3щ= *YF\NcHpRii|2#m< /F/3JQ`ΑI!T'_x [Zj2yKO.7搀+_"/qA2us %J F+`eIR"ͱDGLiekQިr׳^[wI*'(5:g?{ PC\xXt/QrD o a60se+΄f 8tl,s &*U͒'7QїWDSYzGѻj~\:JG٘%bsZDbEW/m053.2oQlARFٹ C7NVDz>r">yĿV~<%G\*WaD*P %Ȯ}9a@MQ9 FWX, =UPDiYVǭ E~"X'Nf%VK ?-=|&nYE6:4a=yK4I%kq0a:C[s)>m<=$*FTa UV/ĺ-wwAۯ68 ؝p'v0`Fp F<2mp |wd8"rU_;[ڂ)rx +e]fbw-u9W| A 9KqY1[}(ѹ'zMjjob!|efC ëQ)|]?>2h-HIǡ$&ʔfOMY C?m*XaQD7xOaQB]'v-?ON9k̎N J^83h٩(|Uftcx⹢'?zkvn^3s B,&~ 7)0$BPWr!O^FMqQ((?ul b,bc)GTq0zyirpVzOιK %|5\O< BԸ<] $+SbiR=Ep]Gm*~'}lDms֍'NaZUFSh la +0K΄>W Y pVxDQZ <ޒN2&cƯ'~@Q6oݮ|)L3y1]]?d74d gęG6:4I>Sqz9@p`㇠s˪˖͓sHr+IO QȖD<9rʟ.m켆ԜeD,/ ܪ QTO~Դ8$'@$N=8Ra>imݱ3pזx)01faX t"K @76ZkĺDd{uWQLƋe#|;_gᕇ O0}dᠽ"({12f;<;V)%m vV!N[NGz_ +Fv9|8H|V Bgߛq" 88bb p^u6u.rz%WNfS|;V@%D2ȭx Kv%4TnɹIq'2>m%E _c=7=Vb+pᦜRe xurh5@ [Jys}'GE*I?Jr)#iS t@Ωn /=hUv!Gԙ+!ٱR]io~$@(bv%1"F_͛F/r3U;H4gS%֮\V؜P*!N?Ò(4_9r1b/avE#O7P40 OAwBR6YZVLܤAW9XI@r]k5m<ߩ?$NvE,Py j$h2;CBݽ-Ʀp_5ʴԘNf2:IEs޽ ֣OWli鞰uQhZA*dyIwhulAFC˸K'Ǡԡtք㮩Czq<*%ih/Z@ 6_OR$xscjb'ď2cjAI-⬈ ;[ 5}AߓNv+]sXQLf-J0'W=ry!ak~2ɍS!#me.Va\?E"bFWHkz\70J |[0NF+_>`smGqu,XRL3E`5:큰H0B֞d݂D[qkWA  ٌ4+4mAu`HP#]nM }K*w[ "Ѭ \?@̷LAFk_'zv;?KRIS]4rB.#|ha3[-\ZDj7)RA.Bl PRCzLlVF,Gq,ÝKmw|fc*βf >k: :&MOPtgkBXkׄw-1 w+d~Yvr"Qǚsp.V),E2wni~|%erXpy/ٯ’yHN/>@ܜ10}+hAw[-^siGj'BAyQ"VSg41}>R~'*˗at0kξ"ȏglO,e|IsOAj¬~%ӿ"N,gՙ1WƺL#٣-OBw%+qT&לqg)E MOa$F]2v#x}YTv\=%GT>=rטϋ ,`觎w„|)-`wmp/@R(uxRO%]7)ɃqFō0, y)F=7c\Qh 鳺A:6MZ͂nh>q;םT :;\ s_s&,Ng^L;:6Yh^,*;~W} >0|k 7ab{@I3!FoX= Ck^  U3,mܽ3R }<N;r|i eb8H[;|'X)yȻL[&Z5)߻,vBCU `4('Y)iЇ$CL(}R4䌈# mpu鯫%!2ġE [߱^<\iOoIM> 2hg[{xڝT2/ӔM Isfq|d[?EOi%WܠX{ yl_¿)D}y@ [}ehS˾c>W9[Ef2ܚ܈xڹѵ fkC.J(T&*g2'^`7+C Q$ b,pnQXXPSC#1Cn$DV.dajIAm22O@M?1ݗ WIK % Lɷ$ r/B~g2XW, h(d?Fy#mvLQImu$V[VƅGS~:dЬ0JJ,~߆4̑:oB;݈SuG_H}o ?,fڦ!耟71ߜ5?)(֏X! zdd'FJͯPߚT;rje/p;١xCsGʼ\/QcFCJ^8q򨼝6U Zy #{ (}c|]tK 5>X^!<22Eu{?|;.mMjvq}j{%ѭSown{Вw3[NvɁӍN6 de&ɝ1n19YmyAGF^fhL"k%3F3p7HԹ~ " +Hvmj:r%K TQH1-;$~ifugF-FBN ێIߣנɸf3Bq%mm &ASL$7V;sjBU!)ZJ$Nj:f˨2aZx(@)?hev_t"NE^ZUQӳIvƛ/˽cCQJi#ɬq,F2.EnmSqP JγœnL.Pz +T[$//xn/#$AP"Mc!_3GxC.4l'vE=t0$Ku0vR3n?"&Jb{CM/'Lgu;IMW9w+Q;yI Kv.m :ӿ7} d?ht~5iEFf"M+"Ƣ`OJu\+uU6l8Uݣk[gpLofuTG(}! 4?ףO-Z~* w'~~|y Ns8OR~um/e4pu{u*o])_>3vh!r]&Qւjś" $ w |d3jIrVg*YԭlRfo]~4>@*_ej .t&](*䄕sIۨ{B#M(눣ޜ &%f``>S_ Up_ųvͯ `63ot2R([!x?\ 8.&̸PTQ$6ɇ4G6#[W~%MnD$1_$ 1܅ί;%=Ak:>]HboH89`:Rx+¡'u0l`hH6.(FC,]P% hJAʥV * 2%.!Hxz!}J]xHP?jH4"9h}/2giID"Y$LaAVjC;]xu3 ܨ`t,"FBR8Գ:TDQ$q0)ͫ((RAss8ρ#y֦h_4B=# ѓ`O/3鴖^֮B$5WŐ$B;kFN~itan@l4N"5O7)@>P JKNӹ5N<2.j| ꆃ1>0-,F=y#)ULx)4[oZ"#&AvGnj,Zyߞ؃ ɤlU^odf <&i 0*Y %H_T'|Cg:`!n4, -_b `C92CZ}kW޿mfu>%I9|^>Luks #;rnnTyV7QjԐwh}] RB;t*0Z8O}#K~HY/Vx<\>cXB=}]G[=hL˙s>k@޼( b%vL u6u&pn C_,y7: |GR4dL`"&Ue]*V٘5o\a)ՂB-I'xνfWYDfIa𦂈 "R@nGv`^^z8g}兀҅_ {]\B2r3G ~㻖О\ŝ1"V>|֐쀚uJ^~ol2sTw*rA mc0φam:B|r>- E A4z( O@;d[+Q xh٤9.}"ѨiuQHB'"74"H' 2υSz $s_A?x3{Q6DrLHɦZfXYwSk](5C4AF7!_oÐ\9g:[H/8>B.=EIb +5E6 8%gMlK 7+JWo3L9;,3c<"-:!vnMk)M`aXp@eџ+T[ZEfC&hN ޮŶ,Jbğl]1l\hٟ60q A1RY- / hhƫMT!2&6UXeRy5x/aaR# AhL))2G?cT+EX2ʉo*lt$wV(kb|3"fRX:%jPZ1RC88?,kqbOv|6U6т&uT<®ceG씇嶦8jp{V4&Ao'Ӕ3i]BA$}/u^k1 snAOq;~@Km0DŦZT9#[͕bKbh#T$_ x[|{ T|]C# \3j*β>&"0ФlӑT-jpY4}-J\qˑH04ZDo<լQEDiut`Zf:P7q7qOAя~Da܃_Er*ς_1/NZ/)L8fljQ2:iYx=SxyPbLL'(stwA/QaWy=he&]WO>qxy2Wr[@fv:nlY*׿^Eq@^i!hܚ\ XB5*#=,,ɍ!j/+؄ W<4ԗz5}S!mt-!  _e[v#94SD0A#.'or ́حgP/_|cMV*%+$gڲNNzx]Q,!F[v<5VX_=$)tҋl?,zP|LܖHy)34>fT5puE_nO8xnԛg+"5-0=_6>ŁoyMYF-%jYfQZCƤ E*vEvE4}Z  ^ro=^AhYI\Xbr ?4T [tNof (M Ww_Uӡ!Q>)2/_V:&tAl 71K=c:#8xЁH9p< {0=M+?FkM.drqmGeg󶤓|ps7"d-ZsO+cŮ%KtX F<mxafI(+2[\ R,6K Ku9ZPa˄xPEkWDصSt.`4JN03!.>?yccg:>5Vax]hL'sU2E]/ٛZ{DkANI֕:ytl ~Eӝ5 vF諵+b ԰vwpR.FhSgbiuV?Qqt͉j!hj/F,uXr=X!p;߉Ns 2z^LjznT Vo<+o#@g0pNa` 6sz$sL<|ϟ˲_ 5B eNB ژ0>Ʊ{^Β6l׶g}~{ ͲR*KBV: +*cS+~ߘpk`S׫hl_Ѷ'}n\&DŗjbY]_XSBouj/SaNEj--w=I:YR)1"0k4z4컋K9~ oGۉ{ԧWCTFpI*h@Gzq`^d IMbhYIC_pn4bjBLت,2̪n[t[+b`9njPU )TΤ!->x'_BÂ5ZW)Z8QOĞ3pyFy,-8XOeem',`5||6buJg'3MSӇ$k%F=#,JHtH pk`?$M޾%s?A+ ngލ54 cpWc)H堭W'ۥsx TtFsGd46^| , ;wVB͢@*ka ;wkvwܰUXH'RJR`Ilc~ xÇ`gTâN؃+zwrAM2Gb

n[9LKyR|ywJSK~C˥+rm|XP,jo*|}BF}TvVd:j=T^D//rpB}m;]%۱ZܳϚT.WREwR]!j'hP9½' ѭ/]LcomӊZn!WAoɭuZU^{ IJxH*U6QHV-)Q-7]i--k"E4V 㬣@1m Z,~9uaz^ p9aʋ@]+-&\cc;HKlWs1et` [mgƇA j?:2 dG )pewô,?{$]Yۓ@H_,Y\J?ľsO0^9$WR`E󊮇WӅ'~; :y{-hؾ,ޝp>m3臭%^'*ihKpDfU4 j ǒwGb182 j&ӡ2;EZPy^S.StϭW{M[Uo$\W)Oo}x'X<Ԋi=$}Lǎ?`@zX{ɾמ''ylͤ̀=>^ʄlF)OnrDAT9 ]x_ lWq޿U]|u<מ˽rs̎֋>%8 ̪zbTWי! lԺOSAL]sT~hN n7ofb*)6ILwmL#rE}_,iPۇ ŌZ{r`{n*TlyKP9NMeSZ *{ĸ4k d e6dF3V6a>3=F~Is7};@vꗂrGc <(_T1Tص*شJXݡpI%WO6 yJ;H-oty2,V:!lpNkj-;Vņ~+LPy^? Q"xKWr|3 d_)zIw";,R{VJ.k' Z3$uBgҚptF$$xri8LuJfL\"_-i0Tjj4~KnTc/3'j=lM1ݫp 2aC\.yq$,p{X @wm//!+YC->:8%Xޒ 1DY3X >S^[teG1eDRħ8KloD\#/ mqǍ։ X[0YG j\۾3 4U%!%vWdαԚ%ޱR`_[\v,tca{e+t@4Mz_H:sucI%Z trkTBdq"%住VLj=Pu &ݪՙ.˥r;Eu9JA٘L2R98#*+ o.ezMSN;⭉&(dD6rO4鯎X4}j: t^geN`r.?2ÞBOAݼq Ͼ#d8v]6ā7+&*A6Gn]c{qK/@s=<-#ϡj笠JC)_q7i4G^z~U h #O`/N3G+Gbx<@{WSYR5!hGphUg*JXiZ\bQ^?Wź$vK]ъF1FK{{bϣ: MS+& hsL0-r]axAT.馅p82}J/ebks(vs-vl?ؘW-HXmUs;.W`u*eG2NI5L St3 =ؐ4W5/SA?E4.M\sA&*C}¶}))tdcS82G3ZhA1W>vbCX jsA 9:rU l3Sz 2b ?i(P'd F| 0 =ȄPC`BSUҔ[EyWESc@n1C5ʭPIcC?@Ij Aza`oHL,{{>c`lztV'3s r{գeJf%҅%ak6,'bB<91va[ a̫aҋRvAJB]Ƚm(/#+{&"@|؏{a]8 ¿<n]fmRz`'bmlUj'V]-胼;ax^nI$GzxR+re*5Z.nТ:gס;o8>ȅҩd /{e#ԋT,ezf2n3EgQwHS96e<u:%N߳9~j莚oL{["'t4uy0B62?Rd9iL7ӘgHgFq3<P7tbpjOenD 2 jsɤQf( {Xp-vLur '^akK6Ư#)M,i)_^֌7"XE{{ JAgp@9СY'\ NH/Sż=P;>bAWN'rVⴻbQA8?ၨȏt3Mx|ӎDuVJ.U#؝c[˾Xw+lPN/׭2Oh5(ħ%뮖Gܧ J9ls$=+MA 8Yj"q({>gkôRf)ތml '*O̿iB}}edo5hSi<5pjX~]ޛ67,%mX9{KU l ،]gp)kfإm{N&um_;uW7[CVD8@=`#j~p[x?QRBIk}+$Wj? \*mʝm`T + oFGF&3G jҙIyOq!dDbqV!.r3&dfcP=!SJ4fV h]\y$yLXk"Hpߚ@v_\t/KM(2g!&xp\1=PW2f :{;u>7PjJ-%Ձ V==>?^MT0 PxV238᦯\ ]0}>,!HT\)?3E{h۞=7@L)e(}3ßeq -DȖRY 7Ǻ'8h1vBJډ%TaŻ$։0 3q E@}qok. T2b$RAQѪ,ͤhUU G|xrFB?sQkF.8ohߣPKÂ#WCO_ݫ]st BX=paeskXk|{JE ,78 al=сWAC ]&g}о㜮'`8.jTBNj ѩ 8#IkEkFOnTX: W^7ssj;Equ p ڱjGCC{[SMo{>?-rASzoĒ7_D9ѺC+m8l &fz1.$imRLcM{n!"=v̙} (xx}ڸ YP읡75x-|[W:D2u~mAb*$|jP?ļ显?4kve-:? YɭA,+N^-#%/BlF ]VMԐ#;8: VJ1el2*h/bt!mܪ(N+ѯ >B1xًb; !7cDËGIߑη.k#R|@y^Rz|y{lNuwy3?6!DdY.C%PX0` EjFӗ" CW٣+;&wCtteKLl9Z᳎-Fo\(EM3nz]BG4FԧQ~^^$`r:i]R*gpvS WqQu\nKFx{ÔZK:-bd<{O_ MTaz+\ezh #UuV\[R&N:JeRץA\(di6F[ȥ_Bzh z41@ e~9Cd<(檠QӛGaQ3rF?н=|g܇żuF{gP:t9GC3ɽSs&Vyʂ1D`Z4Zw~/F@!9E?N=d :X!u w1&_ODD[dږ0"ցvU.Ke4+Q4}Q>UeCHoBq)4mGD)TYMي-ZIГ;E$6k 'cWqQJ$D,$f0 lwYF ~R%bW`h'>Tݽ2A4LTi^2[[;L/0_^`kOIVP8*ioƉ!-Jxm١'@0u,@I#p Ѹucey(%%{"9)2>|Hy<>X'rrdz&ķ! xW\;zi $ފ2Pww0Xһgti{(ӎKSf/moDF f۪Pڑu41_5,IXs W"ͦ+|#=]Zɟe-|zTt;#VǪ]Zm/*ǏJ'd=|/h> ,y$Fj 0"EVDKkT(]XD~od]t ӻsKK˫Gq`bL/\&3JMq!a|1޺[*zTk*:~ggZ& tfxG%O^lmaaRJ>qnv3y4Gv@x 4cy?޳LSۊ馒:1}:pg@q4-{ ;QAiq_ tvj&=D&4404$&r/Hόp ,{wpxɺ--5"ZVJ4$;lЩW!kBpԨ(,[-̂ A>E? Ry;eY"T#$5Ma) ,=0ZhAs-Cep-. M5s T<deE [;@4Jlddcz3 _!OWQMpbE !--*eJ<ՇmwײnJ*)LTqƂJWHs,)_ \ݾMY]~#!Sal[;,(c\g %*ֈ4>Գ>s;a5Z KvA ?WOxEm9cBUJa^QH&mW~p@-0X8 !fk{IL?I>MZD+Ş\1ǵfj|d "\#9+DPADCKQ_wGz1l7 ;\_5Io"&t$r(sΩ㼋 ̩2y0`*IQ OR(7`Sؙܾj;r/2I[h؂ ֜PNWpU\Q4y"%î;u' -[ebaJ=URFa >!m~HIsqU qxIL.؆W}V]K9dvcSEwV4b>eJ"Xx ג1\(7Q]O[Ia xet L۰nT'TB#* &{Tv <],:|eϜQNWk6]E#rcu Pbqqwd'J ׋6rjnw!ȓ rG8mΪ9{QINIRXbbR?Sv:bZB< ?{&ցU Zjw_.U=^Ka6t>@:w ,U߁s$U~\{ O1cd<l9Qx2/.Æ}S^Mw45epЊ1@ ^Ia]V-b7{<I5N-^Q636"eVTIHf BY콕MllPZ\wt-sq%i!wu pߪ|!֑S厘@/_FBqg0 f{\YYCoԌPjq@!c#%9+cq ZQ Os`" {ߧn͇A㑊Xߟ=.\bM'H=~/4fћq` )j,9!)6rfϦ]>lsP<;Bx?"(.}:\E\Dz!sT#{i)O@viV 5,r=| %DM;1S4R,YC~i۫:5Xe5n+;ys! c}ܡ0֖,ܔH+*bcwhXfDcW`ڼb%{;3_ ԣߔVCóq9Ƣ;+NC } R;3Xg1PYT 2!w~χV -V4i˜T30&7 [IکJYX=G3?e0'59 6 2(ȇKajG$Ŧ uI',gn 7Luݔ4삑,`#X=0ټK.=>ɢY9/7:Y]LؔuY[㟩a;l=zDF[x |?t&S&Ρi-#{ѹ Iv%,XidxUz5/OV݊$ _ot^*D`ۢ9Ex[庽9dz 6ה^nIȈ5>^\ :`#8ӒH€@gڡQ˅U 9-n \-ͬ)a$dreD~}_faU.o\~W X(;T, ;I}*zePq@ bQ f!pXSڮYw XTs/)gdhpse[kKL윁ve<;ƣ,|az1twg9<n%Q0yw]V8H8~N#oУc|y@0z:uo][W" ,bZe+u"  [>{aԑ[h26?^?=_<ĽM` ; QLkovGjLxfωT tg1r&GJvڷ@%4`! aDc|?(J\w"HT>*Fc.sNї=}:J_}R T.edVLv` =0A3 UL& Vbu {k4ӳ4JR{9ꇜWNĘE,@8I,*`]SA}- $z+7*aفt`;HР|tHx۔i 1fH@(KllR%Jᘱ z&̊܂t˔faaNB DHv.6N2?t(s-*uslTOGs<Ѯ"&!oh %ZN`Z}%*F)w| qlcܻ/s.@6Ua U<r/z7E\{+ti- Ѩ`$[Yƥ"'T |' 42NJ`b$1yR(s&ynG s0A­j@m4t4ut )nJѵʉeƛq}~N(@q<9KOg|aSsdu;`a_3Nd=w /MTEhTM'@Ż bLK5]b|%%Ts4G ^D$%<;{})2ƶGiCZ]=q컸ai8|w)<,+Bj @ -QMIE<`ݑ/RVi+A| qʹ9pfTܩfY\kN/mxT=@!U{ޖZ]0)F#5,hֈCHd@ 0~2 AEP,ǐCU0 ;U 4t/ӈCYDGCc.yx VjN7bW~o3L RwZM;c 9>L..0TBζV j+sb,kˁ&+qwGjΥ4p-ѪV]k/:H+gFKРEk3񍎓C '3~oɭuxMU|'VU/9bhBOv5~/pR]3mh~Zd+ޟ ITÒ?_e-OFiu 7uh % NvԆ`#"]7 ~Yv*V \赨z au[}@synT'UuùSW,wدF֖w?.sk? ]ΖEYga1W-mLי$b?5fnj=;,<:H4 ,g5ʛvy; 4P6vrr}%ɯ"r{P!5 0j! Ph$@wN9i`Ү{@3 R3X)S1ުH&̲Zи#߬|UT{nJV+\ٺ3*EO77 @?[ И6OYˋξQFBD"]M!Lw Bbƴ%6kןuK6a6ڋF{bܜY.\eM^{Ae>-xOIVz:y!4aUӘAM5U&|Ȅ_UM}-@os|@"ɾunsEW'*R$rm2"X +O06aטDR8c^fvmw@ț@1ϊAyj}:>c Ey!{! Fg-69>}8gpws=eN'ηê,[i+*1BacROsްdU?@:}II9%ޱ)T .:=u)bкďRMY|Yʍːo߹EtÐ1.Z"x].:t}ìfq&|iA뫻k *3T%;d~ :? CKqB R(GM:xOQ_u;$ hfs hv2c/ófYSE߆e^{mI@G]U$Ɓae}G3XaZ,!Ass+U?J8^%32Sm[L/Qm`'._ 39wpN .Vn B` k@-v+њvޅnegpDS wu֧P`Y&)t`/y\ru |-~A-%\}_rx X>P$;Sn1Tm-b՘f$I]@ Rا7ܡ}т858j;u?JhB)Q+}DW'%Oc®$Z!G_8Hd ^Gi(T5!lo^:ԑ ћW9ggO9qUpUS%kR\E8|S˸{W}.[P }|O2';"۬!S?jўcW2UlwpR#mm_B@ަm&)!$/c`b\q՗ :>WrZ6K!=56SE)=apB b $2D 2#!_qq ҐUIS~}HyW0s(@`\OUQ,e}22$ _Q֩\^&d&9![HzYG Khb˕wE[=</ֽh-FHg, >'.ȳw|01u"'*5Eܻ,DZv!x^M{ˮN bqEhV!ǟ$Ԥ3K4ςh+q˂rDLDĆ!YS5a5G%O}Pse;: 7ogԑS!\a2َa)ΕFqwY+H.v }ӧ|M:T:&][귗H, 8EẈ̞k*D(bU { ʍW)~Z~aך0?.j=^$sSB9AT,<Xcɺt3of@rTluDQfQ8 r;;, hA/C$) ^ .cJSfxƛ5B46N-l\cBՇc|_?DPq r 뙴?f3ڷţ3˞j?)ckxS'LfԃԼe{? 3t8J C5DA3(;g+:h:>kX3~^qJbnw%Fg~HVB7ĺ?Zm]IFJޱ@@I5KΥŢ8|Y L9y\ 6UG5E3go7/n0_3>l DUj2Vf<'ƒCiDIÞf&q%ؤȠ6wLL̀>ZY[ 8Bµ8зvYl;Id W;8$<-uQBVxͳj"IBY% V9T{UE+!e r]tжHbuޒ{ז1-鿢/K}hE? w54:u-juj0QD46p-8 WJTdaZ dj4!k.Gف Vt#ZolE 2#Hj~ꌽ6 s-j i^]0;Z+ %[982cύc?`Jp!ڪy!:!N҆ ́7Ym}8B1!=+L4/W96J{qF+GVoٓFaF"6hnW8*HH1+a:9LosL ^{jk.LyNGT I/( &Z3`. !4kTAn Q[Zr bbjM 's'5t0o}v@Ixʤ-Er[Hn* VtZ-%^W:+O&@þ|9=E׿W7tAc&ȩd|ZZ1C7???~Ewvd`D@J q=K+"jvk$/H=S|V?3BE$8x%@!Q C{p(w_u;5Fw9Kmscxȵ}$bx=1̧+j`_v:rqV̭)3ҹΝξ==-ľٟk=! 6?Hc|0ŋ\`>MZk٠>7P-%K@ٷ[rn=W NNlQKTzЃ GYlMmІY0[s 4r["2q}19} bQ'3652ʨ=z~AJ%/\k>$erra4sOcJEˉgQ@a">sQP=&z\TNa!CF78}97_z Tco_=O.G3C3^yՍwK@8Z& e8!aVFɩV3ހ,m^rp `@AE~؄5Ɏv}tׅf^tB$o%jPL02@X_q3א5␉Ǫ鋠0!'ig}h?ѝ}O8D DΦɊs&Dg$Tݩ4Ym eT)ǣ{JZMIא??AшI޳;3sc'QC5sjEPwȈ\.\}t m^#JHݍ|F$Ic&*U-7S:hҀ]BdGܦ]KҤ+)S[҆A&v"S74pt, AUYlSn2qrM]КvS~`(Į(e-13ɪ[ta|_14E,: NV,z6>V4HYq `}5pg(X}}7l6E7& xF-*" V0wHWFe2r>S1pgl ]t9D.vKcZZ?VW CnJKG}X0ٻDzBx8U{Lk*Dh̞82JRD Q^iiG1B[!URAfE' /؃)(=])Fˮ.az~&VߋiB7띓_358+BP7/\AĒ[+ Z`1vIqT@i]أss[w:$x\EZʄ^Tpsv"i %Z]!n6ڻ1b).Uˁ{]cu("Ƨ点]zU̶]+]GH~L+۹:1k ǻ}u;Ix=,e&Q!$ĭWWB.wN /HMUQįr_4:όCAVK>5LX3J`-mi9Zj OM N#ق2w g3jc4ey EoŠ ʹXGfENZIpnKjxmW+-ZD15ըyXqvqT(p[7+= ot!!Ae UxSA S@ 䠓+S#6fl&6dڮ7[NJdjqe²}cF3v%LFx}Fow ̳nDŠZHMwVܶ+Ѯ5f=b)kG`,) p ʘB&:xy^!DIXp W1~.tN-Jwyk"(XFoY;1eQ77̈ > 4 h,:n8R,AT|/S-B9nKN@H:gy MB!{mҡag͊r?5p%aT$Z#؝q2`G4T_j-_9VK+ 6ܚa4pzUxG}$pQO<8R,g1d+wwK|3#ZJA[`yu,nzuw s,/e1s5nnH@3冪w=wx%ڜi謕” Ma$pBvVmߑoDUaP<}L1 7`? aRV ( CBsfRHsY,? lOU8c22 ]6tAf3N"Uk| DBO7a{.@5ŕ:mV@ I^4Ax.#&F8Vaz*=vm!%slbdwV H9tv0rW[B&.(g&KN0`S$;+،UL#c@e*6 4,u|i@݁x }hXZh :Y`Lkg51 fȐ\ st"䁹]}u9‡D?L hTְ2SCdd[TxJj!VؾJYrQOϒ'~?Jct`3]h~`]WhU1p!z;`aEYjC<%Ue) S]lԑlX&gqbF?'샽xݞJ]`7\r39# 3ʖTj"GBJN \ Aj9O r`xHͶx^=eE ̰'-m ĻXxr=rS@6IC߰6#1 'nz]SywIR.IiϘfjc1k;~qr!cY];y<̖)yOfƳ`҈KI4KKl$ta{r,QgJdn\N#9[Aπ01y3i.>{ri÷wݟ`幒isJ&u4ClyR-w{|s k^̅+q!rcvLĎN^6PhoqOoBfy/E84n şAC bmHl;`3M>[i!'^n$TȀ~D=%8tWU'3-Vrrz^/vo1*n^'ul'uo:zc3Lﲗڭ7/_|mIˋ+-=+0j8UwHެڬ(hX|3KoĕݟtzA#jYGbVێg6#b^:NHBm֕ gwEd2RyyIʼޏW#/ VKEk75=>< 0@ӏ2r7k[:`^uw7VkCn4t;hcY}MaT͈y`p5bPshGr%WA0 += ?6 <B1?ף޻1gr̎>I 1iZN4.Ehf^RPnu+PzݟGOOlGdJEӵx9`ಽRK=ࢴ@ p Jni<8DD?Ʊ;G{4f|ChiQ3@ d5st +Uս.C6 2P"o:9jހ2t;DD } *0M;@!COT"6u3e=vښnʰ>3oDu'~;nEK3Lnk.{Ik(C\Yt:ph¶&5xQ76*9ʼnh]T#d\i%6g8]xs8p[Őr硽Yvɉu.WcZ}9U}7ת{"}glO-G-qM mSD@O#Km$IEZ5XY,aL |7t&̏p9A`=R ?7LIPFu6*RdTZPۏk:v\ǥ(,S1e`\zkC!B{\,&\kc--h =IFpZu=J~e@̩_x`A5gTAڸ#3ag I z/Q`-ƶfX ȉjҦh; A-cjCmR.v]8egFz+C\q\fa %n0|wO#U6X>SyC=gM/ˉꖖFllؖ2HlUQ7X0oyL!`bԉG41ɋ) W]%|@)պf˲S 4j> %G`3V!'m4[7ԭ5C)e㕺j{vNuR_d Ẃut}V / "x~-QJUP$A!҉R(eDŽovSb,-7 6H cxdNmĎ.)&TΦ5Oc)5Ze>ZI]Y-:, mT.vNc$43f6Ͽ& qfA8C>~ö}Y-|"f*n@b.fS T IS07I"3QC1`m ;(1οInT 'G y=s[@8ٚAR+R'`" TĿ (tMhm𹱕oGW32Tlkr >cPhԐ_յi_W t5 sN2{0$h=fόZuSa-£9Gs~2Ve>C7"ar~ą,TwŴr[6ygs_^ ZJ L^ NeSFfb]݈m=\q.]-)[. 3e݁*8ie'hN}t9ESټM1S։ yٺ<. T؏R f^+k]hÀ [y#jP(E~ˬ" wWb/`Q:za]?ÂF>#' }6^ڳxG9@LGt dR"nvC$%h`'.vU3:%߽|K3 4,q'/e.\VߎL8Xt(פsx9*{E}|Y؊;W(\ero$\n=#K;iȯR׀\LC):ͪ8vtpq/ܲj<'_i\8nMq¯%`yK&_1ƀE}-}PHtĝRbf*(6nP#iߺ[)(d~`ӤHьpAbchQ0i ^r1,Mr Y0 VTWs`nX TtrhXXlҒfm׬*຾4,bwW69 b.4pg 3Ӓ>@,uY mg&>KYuBB DHV~n\! ̄! ]h*#k/`GhhU_?M?CS`PGqNz葿Qn]6i=cCc9r ѻ[gEY !"m# Z6Gʐ."6m_XK8[eHB,ZGvXE"szL/CTUƎ]/f.e|4'2ya(=i8Iw_a 4#Gݮr@P"!>JL%9loNY> icE7lu# -g~@uU JLJfh z" |ca+4zu!:gjw)\ls,IUϜطkW!F)w2"Oby:˗uk2ҍzh9:5y-`ah0,˗ϼש%5^9\?Ϫ Z $m=p,jfO]k-;$4$z,Ý]_Зg7ҡ ^9!{6ag! ol{ b>Ҝ6R̈́[>VZ2X9ퟯM,/(*m!"۩JׁHEW4z4 PPFTw]3q Rug6y~/<55osF8E_9zzA[fSEKdtq%EuR +x3ajr0p0_EzjOx~6KHh!{9I1pԳg^\3x>ZVCñ1R㵰w8:O6~_rkck~SgEHĮ9ZSnH"T͢1AƯg,DΤniƴ+JYY1K7@-32T(sk.gJL j7$] T!Osŏ Vl]sSx +`xxyϬUX޽z)x-Ckҧ7!{?[=I##d4EB8IXmYpJUk+񱵂`ryV5So6F9&Ɵ%61s>G( $wd6yڜle,>|Žf sFgbG`!ooª!|T!41nZk0Z6ryZ7XqwP͹J^Ҧ3l[|P-x`>19f:6黜Ѝ>Ňu+_FaYX7ԺPw YXl׌V%( ӇK({u "1RϡC٠Ӏ(^!,Bk3ΒzhFYJ=<*JT6#KC6}H>9V)WIjt>E>a[<18ag x6l#lxȚ+82@P/TQ2|܅Js i h빙f*Qb%^ټFfܡI4[T֭c1FK)HKh:AMWx#֛Eb|ٞ-![CC}܇.ɷ7hQpix.w{iNT)'UF\f%1UÃ+U+z_X]{61 !/?B =$D}0?`tZQ }QJd~@T5 MMOQF 2u{ qHߑ2%-'?YcWU5dњl\hk{DYfD)j҅,vѿ#Đ, ܂*QGUw+C8SLxYR5hj5Q+ny} ~qW)p#u7 #|]ZXtjm-[2pwLc\GEK%㟿K4 6-Ñp)db S,#;y/=lzV\c(rt$g=v xnOdPc,As8IdN Ηkk<^NJTm:fF6j:I[S>?$x9*>]={.H|~[EArHtO.|}< Yl3~P>)loʘkZd~Fbshdp!ϒ ӊlbCM]uFk(ĺ_xLK"K3B`7V3A6ӑ!@|@וz#]죃j ֬NU_(<$IU`qtTjgRL&|LL.@aNw=чPƑP Ţ7G(_j 31~S[ S;iI#߽P DZ09= _KRN!ey5}<Kɹ_߱xj&eY=ƱJtRwڲ8ovjS*>ͿAa=vE 6cƊ\ xK[mŗ+Pa)!88{`>c'`1%~hޖ;3B|IF-,,Kxe A) on|C.E")MLq4DXp2xtcڰr"K˼tݱ?efE_2CVHvj|Lmƚb QEG#A:̍)]S"ZM (a`7Xs`X'1j*ϴc  2 GSsU%3U8NT\;˥TMacF~ȚWYnj:E i\9$KJݒMĘ7g+ZS'9,yA2>{{=?f 'ő;#y[ J%8QPh* fC{Yq&m<{}"\[ VL%Buz ?Z D9hD uVd-egtS'_%T%fΣKN)ϻj^F'd%1zXQR+$ noEao#Hц? 2s";ىXz6p˵UyV1erzn=@,akȎ|7FMBmY8T%lm|ʾZL9R;^Si'n,ו- ǭl)z$iU"-Rhrhx;HdD C)2CmuK' ۀ_*[ iO$mp ~/X7Nb/FJ걖n82job:IWsW3G?,^O 0hځ)0<@yAdV5FuD:'U~|N'blQ3ϿuuɬjZ7{r* Z ѵxbvhz]斚I˃El_-}Ʀ:'5ޢNv.,UMG?[H݅t@ij_!.VoA?iӶg-Kac3Xlsc[34=+ϼ]!xAK ,r$߄o+J> E"xva)"Tx޸/N 6-3I@OUv-AR*9}(;$ꞙbFHae;+-y|U4!/9J4`mW0}hO"ϟ4{T/=!1i}<- eš2nwV_>Y~;;]K38iälj񆅁2܊3.E)"V H{vPʋS= Z%eRG&H` 3 Rr < <#BF) {hfCR|0stɆ`mЀ kvZ|* ""Bx݌`(Ѿ}yx+։K{`0S( hJa73JLiJsAA E.Lp'݉.[RW6l;=6 rVFZݤzZX%?K27\6PvcE8Ai@lk}m1 ,Ͼu TDCc"%2fw]mQv1E4tnj6 +^-X5:l@/Tn~$I.Qc@:9-(@1)DC%׊*/e33fKJr +dAZ=ߕU&Ukpu=.Mx1ЩL+qVxAKá܌W7Hvp鞵I*2:l/x{&㤤&J9 TH.LSXZ@7ʹl;W< J BﰂIAaMFГ/mF?:Vro_xEnl'\XT]Y7Ohf<-Yg?w#HK J|)m)1"X'|ы ?$iQ{?6ڞV Éhqyy*6*i{Z ٺ *"&T~G@aQԀO yZXW}‹ pޔ)Ih٫/1hJ/qdi5~3=mZ ypJ$*8`qer*lg`)ωypdYT1O'ea>!%7$Z crJ㣢){q zx5s)`^I>EItwID2- 9ޏ|O{=pߣ}IH s7A8%#ʺdN#n*2Oj.K=l"wٹ|\+!}%SQ I 8>' 6yk LjĪٝ/5?SX)B^*MA΄˱N6~˧vԪ!~ P2/PE?T V$$'qP˖E󍎴No47"漏J?2XbmRT<xdtb(jgmy|=|W{xL(X b 5ALC4Bn:djiT%i]cbwq`=(sPQ1_& Hj)1Ռe? *W|;#F#.w9m [2嵯aZUt);~ c@<:{<$[(%q5ft`/y;ju) c&lDillB[$A5'7CmAh5wg_IJ'υYQ`,x%㝸gugkj3EpE*Iaz5]ew*RK^E3 7a0lɓ1aĺhѝs(ك*΀5sr Q{I1—+đn4RHh=8&m<:)JSE\_AR<Qg_0-RPpljk a=^ ZCNFuz(7d+n ]AC<74"+}cX,5x.m SGD!6tbFـ6~x`{+vf[O@1B>6xu8Ϧt.f&&FC\h?U5 a!pO6| |#9@ ,HOgH5k;ޤXlqP{cyҍ^ed,zz!^qӯ?A#WկC~ef0wqB#{)cDr[va`48>05E`R~eL#kE=y.= e,=yߙyoHux^пK̫x<]== AMV ` X1e!(AEVzN1.f ;cHp8`xԛNJv9>{K.ʃ}dŘČtMWrY[wQ%fM :@Xg:9Na}job+(GIi^\a\RWà@?cY*±3Y(+21ͷX敻ohRhZjnS선 YeW6c[-\B<=[G#k 3oݮ.:, -Vvx$CUj;嚒Iվ fTm'/CRO^o`< ʦG{k %_l?:֜@{ ^vWO%Y SNFZG7#/'Q*|t0ÀNU-ǝd,K\ɢ\ R  ~o鵄Rǀޠm6N6n5iE>6*~>&I-])k$K/Zz.VWj H\eɠg 7aŶ&@w9_a-Ix*Fب?]x: UcxV*7ld<>ŊՐ>(%ԓ; bߝgk:%||DcRϽT }ҜI_-XZ8$| Yϧl?]1K ^@D f}D"J5U-& `| S4|-$К:"Nfe]\т׀$Vd6S*K;u{Ҷb)#A%q aEuu*ݕRBv ,w$&>38BL8Jaz"֐$lŷSҪr ( Dj#)NwyFԫE SNgiJN][w Bnqg`| u]?QǓjDcLWC 9= %]O1hPX6#S&Yrɸj?~5]{-Nt,{y5(uJU7q僇 0~󧪏p`c /}NW\֧g K҈!&$_q1 'rs3!A8=R^S: #F8!S{n^uWWR^`:Q!RH.v~m(0R4:f%OXڄ+О g T[_aQ3+z~W?k;8Jaf~d?_#—PQZҦ.|t&_H_۰q qJU4{~7UT;g=9Ji4xw?ZKJ VŴ4[U:Rġ)sP`֨_?0ܺ:y4-aj K'3n[p{6cJ9V&Q(ҬJpVTjQBsZLovE:K$XtPk"m˝\ \Jw|I<1[CqAW^io^Pp~d̞2 7x^;r%מZ12jU&.}|f]z ſ^ӐGpFNkְdgo+NkR]NWNr^~0TjƖn|ԍx:20}1 a HA\s`RVK] w2^u,rQG"9 L$|5 %G -M- rp)VQ_gK<$n:Jե+@űjk (\L|tD6&qoeꭰ:ASb\h"d+c`sAR[eK$ia#;_6;7| Ӹ5g4g=јoeEa16f1W{fJiά7?1D~+yo1j2b(:v#`WKe.jɏ_b w_dcPmVFop , TQ3<._a ٢BGVV}]- d+1wP:+J*W2\[ռo!%{jڸ1:\%>!0V,VP¯B?ءX *]Fe o0+?{OAwi|i13Ⱦv'V蝓Ŗ⋥RLt15MEګί) dHItNס nEK銛ܿ⭉3lQ'+sGj UV9r r KgMWRgB)I%UN={ۚJ}kWz/zNRj#>γhBq~tb9 TF1pU&ɡG姱~t~vGglÛXi xpNRQ X$O }Ω4m;2Q})Xf mzI?tqnh/;>DdN! }=+'~S>pS1)_ID$@2C9ЉEZE(yV`J^/5%++%2N\ +5Y5?o᭖bՉ H) 1.9̎u4.x~o.@L;y!@`N0+`?tg~ptul]i$zc)H{%ԝY!̹CBĪ4m "&@P=5_񨋁Ss/Gkm3s̈́ C3-dc vi ^xw9A(+tppUkiBZJ])ód~FM0Z!'DmgG!ews n'nHoY'-'t>ZtSHŖsQf!vSڟӭVti|b|~Z]#xrmc i^\i/uSE5 41Fe&Șx >G଼Uttr6ŶN-*zlLD@!q^6F%JOK9CJTԸJDJ sB%GBqkv$WyO@> V4"`.'Ohwu-HU MskkfBl`۲rO\[\i/h2xC re>(}9.j8ql R0/n$p|3!iaYa}B%Jtۿ:6BgybOA#LK5L!"H4{251.ð%ǿf*(xč/|ϠhYȓ߳{đ ꕯ6!jsSMz-Tr&Wïi61tr'uoi{rc]c`~t= fPa _;ʅ2d_S +  V4T&p"D`2H<^0HX}grw( PKPۏ5 ]*|?5A_Qb;RDt| .jMp$dYs2wJۑ[#P>`6&0|m݀3dP Zdh͉O[}f+0!.xWrDav膠zл+i~m !Ԩ% 6RY|% dMs>@-R"8c GZHҟ{t^yY4.i0[1XH\}"[p*~~} KNܚ֦L ξQK z8젱ݲ׏@1%T. FY?# Nh9DX/O4T{s'Y Uu`& M EMSJ{Pu.{L H2C+ ITIܘԯsԍS (~`+'ڸ` { u :)-/d!`,Üe8;2(^/nY)#N78WS?/^yT߶q&$xOhI2L6U!9uwu>N6p_~$5xw0ۼ͂%Y, e ÎʿGn^ tM? ӯ,!-&VGHn ;T[*RŔ:l}:‹$-fjI.tFE5\Wh)@ˎ&zM#>޼ӌM ?| "SYYQ3' 0GVBv(0a[mkl_78B"k5w:_Iٻ? Pa$;1u3q=0-gt%$ Unp ` AoW;>}yA5N7;3 }ngdF6`ݟ2jl~E=I;pд. vV$Bl!'nfXT9[@r0m`t$ivvO$1[ס$]PX֯BԁnjA뀼FH| ?UZ.6QzfB߽k,^Hw}L[Šur>M%DM;-B#(hB^FqJ"OsÁ,8+nc7=f8WK$AU7p0+PNp:WGpo|6IeL]yh?^G pV#VgW:ﭙ3qN:>b y_go[P17lp-;ޚ y$<& o`v|Ϗg-`Ե!`4[=Gc~͟Ei~,ն6чå@Lѻˤp4xnCg'!h綮Lq#9DvY߃n;șT);I 4=IԙgӔ@*?!E3B>o}qV7Q&b4 XV{>dD|Kvr!TOy)~|_ښ[H6ĉHW(p7'b> p_R\M?LP51jpMGZ1tTȠ+U.=0ȬLz^DL4 WÁ!I3m[ʈxU_ߟFy0$|u;ZJhVm37󋩹|9ɎD)R#mLCuZ\xD]Y]f&Xg$a0!>*GIUJIZ1 $mr[*6ݟ\3ʯ<(6PQyh{Daݚ|6H`~lKဧMSJ0):x Q\/ O\|i dJ)涤׎zId3 ΍ Y^='F^٢8;#O-t}!{:X@bc,WP/s,WjĴw ; ,u~^,"je|Z>?Po uoȨWZjmtXoyꝊKߕ£q+tPXy@TIDIHK{&5o<+22hBFL;"Y\ts;w|Jn/a)c%u>xL٩0>ti0pՃ{PT)bB *'EWwsJx0('͓\I8llՏqX 6o DG;+ jx^36@gXv7Yxc7)9;r!/b?¥jz; !jemo(.Pcx _{nR{z0YQNiWQbN­˳{6'иol;ڸb+._|ɦvӽ,T@۫mPy,aYY쏸nI6=ղӞ A@\s71B3G;LS;:>؆ob4^kC?e*.L_,'j:E9jt⊲w$_FAF[ x.b}wvCb,0I,݁w@b,n3Z'R7<z3Q=!ڵ3ae7fF6L)Q;*QYyP7Ⱥ2*]4ǰ2LNd9 ]h=(uѯX^4} YL{JPt&S`mɻtT)ESs Nڻl8'|@1bxo! `Z-O~>M\,3;NB,˔gGIf'AƓk<  ,ױDtZI Wv㙥dLz;[iޘw׳?&y nRe)1tHcﯬcj% hu-Cmy[#^52B-S-VpO( جahouIZ։,;3":,S=GkGqXՙ@oꀠ6ʩ:80ұ,IoYk@M_JG'KhϯxR 1sp-SYC:vmgնj{NWs#dRF9vܛW+|-٪+g;Z8ْ\G߷̖l ?hz  ڂ!qa>md>`t^*z)؍xg)3|P1w3lڬuLT@DИ_&\#ʚK6vP^㣖k[F3&؋,A4rK,K"ɤoe@61jEF*5(Fg`]Lc6EZaxI$TMk^貃PWU#)^f,Q긳)͵8}[+ĕYS2Ƣ&0e>MsѩF|V1|Ghb,nW +d+LVwtB xpi蝕:@v`e"ͽ 5: 7*?C/Y':%7NMi)%ԈI |Dǁ}4IEYuD6 ̕G@xȫtͿƴ{tm+[&eq"ۺ m„. +YTfj^9WU=͑~K@[;KPM9dOOUfzxs^^YZ3VӤ{bzКPEk8^<h!o:$kZ.E "ʃ.场S$$ {( '/VnxOk&E@?@%s7l"$R.D\wz ˹9?0Tp[mg,!|) gziOnN3Ȭ3 *oPI,p&Pӑ O{ G6%1 u.6Lu/[XMat>{8o] ߭\}aj93Bش,L`׌z䶂$0zxs.vG6Hơh3w!cɫ K-'֡ ͅ\C(cU ĝu`5&]W3{K~^<Ƽw;_ x*桼[&67.ƨS.+& 9W Gl!]S%Pkax5C sA| `N:&?._u^i^^f!$z%mȐyퟀ#,Mig5(jݔ}J?`ݕvk=V6aN4qQ}۰歝u]R,|LҬRts0XhZG O.R_5UMb ciZ N#FhXZJ`6`[\SD;>gC0>$/'.ݭnZw{]OTLW5s`J* %],>ūʆX.^<m̞n.bU'w_O3mG̐ \ +cW|!kY,j%+; mI gPȱSCB3$Y.e\s'黿ˏosQa)4e "%NhAK]Ohpp+j)se $qZb8X/!JNұFsTſP-ؔH,fanJLsv)OXYKCr;HHuN[A@BrΒȓmmudv}s x/I]FaHIccNJL5d(Ds JEKӰny\FDPˏf]`_Ψ4;i|o;z-Z G,_ȱM'ˏt bYǼu`d l7(58PS=lA?4,D2,G:Tj1]]KS˟2" ulHm ~Z'ͲT@Qt*"D $1̯Ӏz3rb(RV"&a؀- 2u:,RǫYXϐg;4o撫b6z$ي({ 5Jr3.3mzGќ pc=f[\bE: 9A #N6"qÚۅdmƑ21;B s(gQL\mo3 5?LC38?br_~"cD::}y,VC S7jo'&H^Ckz kiuY15DZajEժNd'1Neʫ:8kܱQmyH+po^""3#5LN TI#L﫶=&_Oł W#hlJg1 SꮹHw%!K|=?6QfT.,Fp74yk֪5?'ۈ =dz_7'U ig^CАi99Uzr@H6-}/$Br< t| [LaaӀ6Z?Y9;yɯC]XL9Et$>o4sV{;P1xUhhd "m\TMJ7 )t|*8!ΪCDZd[6iu<>-8k6a*jlXs Tp\ 9"Lkf.lo0c Rotp3`a \m*|OZ^SX/~Ǧ|GO*⷟JmҖӘE5m:p8miF8 xp! -JpGxR8} 2הW !U5tPzY%pnaC¨&Hxeb ЕZk; [~2(Da%Hq+eSY)aA!7Nh5õ:m= O>w1 7~GNf '&6L`WEvudppx,ϪnL>$[az,,pmYFI#9128e)NdXP#;"QCP5j'^} u_]&pA䇩'j$(yEzn]TFC%/zk2`(s=+'912+ mh2A_2Mxac~ 8mXNSW9*)ԃvؔA &ixs3W (K}pH@:~oEE#xLZ\bF3Î_Be=e cC pSr2Let<g/l#Ŵjچ6ؖ]guȯyCA;.*C܌X ݆r+2S2}Sn"-mwiTfX^srL'%'|Z%M5{Rd33#nV~E9f傫tOOxX|r%x2]:Is'>:#哠\~vٷ?=>ģ]Їm~/K34"8$Soҋ=bgßP[hG|0tӊ=09J2V6$4b,E=kr\;{ĝw:-L滢P1ȷ ]#Q,Ʊtu6VR8QJ̉y a?zB?\i:}L)T_DqXQLm$vuv5;0 5cHYI>q8[{xdG4ӳ0PmZe^A[nSӭ^cCMswR}#SRr 5}t1}&3ZDf$Ւx@ۛAF 'էC͇JYCOaPiҲ&W~ŜЦ*y^ErB${$]}4&N2Иk&[aEZf&eI-(&*kyd+ů)qx阶8F|8. :N7rg4:ݺ"WHGf5!!F໪)~Ѧ٭(՞7D2ed*>gl:2*䑯˪,røݦI0TwM=tp*}WpgXeV%4{1 @!Pv ɕqƴw@~n,tvC"7-bo @& 2}ҠLB:ITHS!M)I@* x4ic#v ol8~ 0NV:&%zD&ҙQjn. Qn?&7\װOUl3Ay4_BճXBUtb&SM\ T=1~=k6LW}$,v"d&q\"wQ'!TYi/)*^7~m/Kw)ag=[t  fj Xơu6~sNZ=tT#5tɹ*3HA]ʷ*1l;EpYEWd:>bk9?׆Czvj^>`Tjo&VJt(4/S46&O.)Ue:4B,oPR5J#'k*VUŷ'D7&:1ÁdVsE߁^p:ɩ#p/6ef^f%J탈{A0蛤ߓaJIhAQ-u4ywCTgE<T;ο`ؽhكUbZy^v z 1Рe}suѻDBenQ ikr38]>+.p+22S釺&~8NH%_ 㘤f)zɔ(1-UKRJӍ#ꑡ3.S6 y zbr>ĭZ 8ҥЁX,&gd!cϠS M lwTN;=v_ $,h^Z>wwx"ڱ a7p+ϣ^#?b+BW ^1&\q8wRӆb%/X,ESV;[;ocpb%K"0@#G_s\FM6?7(c4Qc<;\I$Y p'JծT.Wb:/ryWC"@o>:dM!SqHΏb4S5Ǽ &D?o;z0KҝcE'[As@AWaҢ3ɔ1᮷PeH+p~³wFWddy@Y@?ǵsVCc,Y]Rbf7| ”ye/cGrLZFųSLftp:'=Ik-^p."K1-#Q)4c9$PxFӬbl|, wNGJ*0KN6c#0Sz8jt\+؟U(b&,Jr|oJ?']4V.B8rCNP|YNt3[;9ߏGH̸&Uz8k"py_b72&ZUˆ߼F%#ݍ*Kd46`>!'ِe//=/G("rO5ё錛kh؇xg j+&G:R :wBݩDظ 6,-Hi]s@0S[kZ{.r#y& 2Cu!nؔط<щ\16Xv O\Yl;4>Ĝvl mX.4jACZW.bGu+F-(T[ ?-f!*t2Rѱ^1f! .L~Fl9N":"`e3 pl*E5.G(}m"}Ӻ߮]ִ Bɳ_)̾O |p.lbT74悁q ʟw 7)f,}NOf f).K`>VD HI**bXx$X]i-NCbG7 ;zuKJY@9хx&5!6TNɎj026Xd YZ