freeradius-server-3.0.16-lp151.4.4.1<>,Љ^/=„ x{KZ#SQ!"9[A#!&05?}$ &9L u䨻wU&oqWPfɫ$mJJ |i,,5i-`HSj}XXjT$p& 'e<tLK/>>1<^&d,07M'LR ;v7!!aZج4 vPʖ|,8 ?{+=knvQs5kN>O?d ' 5HLTXkt   25  " * N 844[4(89Ј:=l>l?l@lBlFlGlHtI|X~YZL[P\X]p^)bOcdefluvFw԰xy)zCfreeradius-server3.0.16lp151.4.4.1RADIUS ServerRemote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service. FreeRADIUS is a modular RADIUS implementation.^lamb730&lopenSUSE Leap 15.1openSUSEGPL-2.0-only AND LGPL-2.1-onlyhttp://bugs.opensuse.orgProductivity/Networking/Radius/Servershttp://www.freeradius.org/linuxx86_64getent group radiusd >/dev/null || /usr/sbin/groupadd -r radiusd getent passwd radiusd >/dev/null || /usr/sbin/useradd -r -g radiusd \ -s /bin/false -c "Radius daemon" -d /var/lib/radiusd \ radiusd # boo#912714: add radiusd to winbind group for ntlm_auth # add winbind group and fail silently if it already exists /usr/bin/getent group winbind >/dev/null \ || /usr/sbin/groupadd -r winbind # add radiusd to winbind group /usr/bin/gpasswd -a radiusd winbind test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in radiusd.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in radiusd.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-freeradius-server-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-freeradius-server-update-$service-new-in-upgrade" fi done for service in radiusd.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset radiusd.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in radiusd.service ; do if [ ! -e "/run/rpm-freeradius-server-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-freeradius-server-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in radiusd.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi systemd-tmpfiles --create /usr/lib/tmpfiles.d/radiusd.conf test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable radiusd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop radiusd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart radiusd.service ) || : fi else # package uninstall for service in radiusd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fiQG " Oke4 e! hE  NoF<k_6jTd "004+{ L' 8!h  t! _ 6+klfD [W#wWb!4 E(#+ni!_D<O6 F m$N  6/On4=Nm  !X&IXIx)9JXJ(9X(Z)()XJX99P(8)XY8I{H9)xk`9)x9J99)XjxI9I:)P)X) I(`9IS)89)09I*(Z(A$<" *&*(2nwyD 3.~n!'O\ !w@.UD"shL& :+'|;Q[A3QE.1n/yCSiWR(U $2 ({$aERK78d  ({\M#I 38wfs!l+ Y  y< /|MN hAcz <Uq~F|,t )٤f uC ` = YNKAdam Majer Adam Majer adam.majer@suse.demichael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.com- CVE-2019-13456.patch: fixes a side-channel password leak in EAP-pwd (bsc#1144524, CVE-2019-13456) - CVE-2019-17185.patch: fixes DoS issues due to multithreaded BN_CTX access (bsc#1166847, CVE-2019-17185)- eap_tls_ocsp.patch: backport fixes for TLS-EAP that by-pass OCSP verification when an intermediate client certificate was not explicitly trusted. (bsc#1146848)- CVE-2019-11235.patch: fixes authentication bypass vulnerability in the EAP-PWD module via invalid curve attack or a reflection attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549, bsc#1132664)- install license as %license instead of documentation- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes (bsc#1049086) for issues found via fuzzing by Guido Vranken https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682/bin/sh/bin/sh/bin/sh/bin/shfreeradiuslamb73 1587125380  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~3.0.16-lp151.4.4.13.0.163.0.16-lp151.4.4.13.0.16-lp151.4.4.13.0.16     !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"##$$$$$$$$$$$$$$$$$$$$$$%%%%%%%%&'(((radiusdradiusdraddbREADME.rstcertsMakefileREADMEbootstrapca.cnfclient.cnfinner-server.cnfpasswords.mkserver.cnfxpextensionsclients.confdictionaryexperimental.confhintshuntgroupsmods-availableREADME.rstabfab_psk_sqlalwaysattr_filtercachecache_eapchapcouchbasecountercuidatedetaildetail.example.comdetail.logdhcpdhcp_sqlippooldigestdynamic_clientseapechoetc_groupexecexpirationexprfilesidninner-eapippoollineloglogintimemac2ipmac2vlanmoonshot-targeted-idsmschapntlm_authopendirectoryotppampappasswdpreprocesspythonradutmprealmredisrediswhoreplicatesmbpasswdsmsotpsohsometimessqlsqlcountersqlippoolsradutmpunboundunixunpackutf8wimaxyubikeymods-configREADME.rstattr_filteraccess_challengeaccess_rejectaccounting_responsepost-proxypre-proxyfilesaccountingauthorizepre-proxypreprocesshintshuntgroupspythonradiusd.pysqlcountercuiippoolippool-dhcpmysqlschema.sqlschema.sqlmainmoonshot-targeted-idsmysqlqueries.confschema.sqlpostgresqlqueries.confschema.sqlsqlitequeries.confschema.sqlunbounddefault.confmods-enabledalwaysattr_filtercache_eapchapdatedetaildetail.logdigestdynamic_clientseapechoexecexpirationexprfileslineloglogintimemschapntlm_authpappasswdpreprocessradutmprealmreplicatesohsradutmpunixunpackutf8panic.gdbpolicy.dabfab-traccountingcanonicalizationcontrolcuidebugdhcpeapfiltermoonshot-targeted-idsoperator-nameproxy.confradiusd.confsites-availableREADMEabfab-tlsabfab-tr-idpbuffered-sqlchallengechannel_bindingscheck-eap-tlscoacontrol-socketcopy-acct-to-home-serverdecoupled-accountingdefaultdhcpdhcp.relaydynamic-clientsexampleinner-tunneloriginate-coaproxy-inner-tunnelrobust-proxy-accountingsohstatustlsvirtual.example.comvmpssites-enableddefaultinner-tunneltemplates.conftrigger.confusersradiusdradiusd.serviceradiusd.conffreeradiusproto_dhcp.soproto_vmps.sorlm_always.sorlm_attr_filter.sorlm_cache.sorlm_cache_memcached.sorlm_cache_rbtree.sorlm_chap.sorlm_counter.sorlm_cram.sorlm_date.sorlm_detail.sorlm_dhcp.sorlm_digest.sorlm_dynamic_clients.sorlm_eap.sorlm_eap_fast.sorlm_eap_gtc.sorlm_eap_leap.sorlm_eap_md5.sorlm_eap_mschapv2.sorlm_eap_peap.sorlm_eap_pwd.sorlm_eap_sim.sorlm_eap_tls.sorlm_eap_ttls.sorlm_exec.sorlm_expiration.sorlm_expr.sorlm_files.sorlm_ippool.sorlm_linelog.sorlm_logintime.sorlm_mschap.sorlm_otp.sorlm_pam.sorlm_pap.sorlm_passwd.sorlm_preprocess.sorlm_radutmp.sorlm_realm.sorlm_replicate.sorlm_soh.sorlm_sometimes.sorlm_sql.sorlm_sql_freetds.sorlm_sql_null.sorlm_sql_unixodbc.sorlm_sqlcounter.sorlm_sqlippool.sorlm_test.sorlm_unix.sorlm_unpack.sorlm_utf8.sorlm_wimax.sorlm_yubikey.socheckradraddebugradiusdradminradrelayrcradiusdfreeradius-serverCREDITSChangeLogfreeradiusdictionarydictionary.3comdictionary.3gppdictionary.3gpp2dictionary.accdictionary.acmedictionary.actelisdictionary.adtrandictionary.aerohivedictionary.airespacedictionary.alcateldictionary.alcatel-lucent.aaadictionary.alcatel.esamdictionary.alcatel.srdictionary.alteondictionary.altigadictionary.alvariondictionary.alvarion.wimax.v2_2dictionary.apcdictionary.aptilodictionary.aptisdictionary.arbordictionary.aristadictionary.arubadictionary.ascenddictionary.ascend.illegaldictionary.asndictionary.audiocodesdictionary.avayadictionary.azairedictionary.baydictionary.bintecdictionary.bluecoatdictionary.boingodictionary.bristoldictionary.broadsoftdictionary.brocadedictionary.bskybdictionary.btdictionary.cablelabsdictionary.cabletrondictionary.camiantdictionary.checkpointdictionary.chillispotdictionary.ciscodictionary.cisco.asadictionary.cisco.bbsmdictionary.cisco.vpn3000dictionary.cisco.vpn5000dictionary.citrixdictionary.clavisterdictionary.cnergeedictionary.colubrisdictionary.columbia_universitydictionary.compatdictionary.compatibledictionary.cosinedictionary.dantedictionary.dellemcdictionary.dhcpdictionary.digiumdictionary.dlinkdictionary.dragonwavedictionary.efficientipdictionary.eltexdictionary.epygidictionary.equallogicdictionary.ericssondictionary.ericsson.abdictionary.ericsson.packet.core.networksdictionary.erxdictionary.extremedictionary.f5dictionary.fdxtendeddictionary.fortinetdictionary.foundrydictionary.freedhcpdictionary.freeradiusdictionary.freeradius.internaldictionary.freeswitchdictionary.gandalfdictionary.garderosdictionary.gemtekdictionary.h3cdictionary.hillstonedictionary.hpdictionary.huaweidictionary.ianadictionary.ieadictionary.infobloxdictionary.infonetdictionary.ipunpluggeddictionary.issannidictionary.itkdictionary.juniperdictionary.karlnetdictionary.kinetodictionary.lancomdictionary.lantronixdictionary.livingstondictionary.localwebdictionary.lucentdictionary.manzaradictionary.meinbergdictionary.merakidictionary.meritdictionary.merudictionary.microsemidictionary.microsoftdictionary.mikrotikdictionary.motoroladictionary.motorola.illegaldictionary.motorola.wimaxdictionary.navinidictionary.netscreendictionary.networkphysicsdictionary.nexansdictionary.nokiadictionary.nokia.conflictdictionary.nomadixdictionary.norteldictionary.ntuadictionary.openserdictionary.packeteerdictionary.paloaltodictionary.pattondictionary.perledictionary.propeldictionary.prosoftdictionary.proximdictionary.purewavedictionary.quiconnectdictionary.quintumdictionary.redcreekdictionary.rfc2865dictionary.rfc2866dictionary.rfc2867dictionary.rfc2868dictionary.rfc2869dictionary.rfc3162dictionary.rfc3576dictionary.rfc3580dictionary.rfc4072dictionary.rfc4372dictionary.rfc4603dictionary.rfc4675dictionary.rfc4679dictionary.rfc4818dictionary.rfc4849dictionary.rfc5090dictionary.rfc5176dictionary.rfc5447dictionary.rfc5580dictionary.rfc5607dictionary.rfc5904dictionary.rfc6519dictionary.rfc6572dictionary.rfc6677dictionary.rfc6911dictionary.rfc6929dictionary.rfc6930dictionary.rfc7055dictionary.rfc7155dictionary.rfc7268dictionary.rfc7499dictionary.rfc7930dictionary.riverbeddictionary.riverstonedictionary.roaringpenguindictionary.ruckusdictionary.ruggedcomdictionary.sangomadictionary.sgdictionary.shastadictionary.shivadictionary.siemensdictionary.slipstreamdictionary.sofawaredictionary.sonicwalldictionary.springtidedictionary.starentdictionary.starent.vsa1dictionary.surfnetdictionary.symboldictionary.t_systems_novadictionary.telebitdictionary.telkomdictionary.terenadictionary.trapezedictionary.travelpingdictionary.troposdictionary.ukernadictionary.unixdictionary.usrdictionary.usr.illegaldictionary.utstarcomdictionary.valemountdictionary.versanetdictionary.vqpdictionary.walabidictionary.waveriderdictionary.wichorusdictionary.wifialliancedictionary.wimaxdictionary.wimax.alvariondictionary.wimax.wichorusdictionary.wisprdictionary.xediadictionary.xylandictionary.yubicodictionary.zeusdictionary.ztedictionary.zyxelfreeradius-serverCOPYRIGHTLICENSEcheckrad.5.gzclients.conf.5.gzdictionary.5.gzradiusd.conf.5.gzradrelay.conf.5.gzrlm_always.5.gzrlm_attr_filter.5.gzrlm_chap.5.gzrlm_counter.5.gzrlm_detail.5.gzrlm_digest.5.gzrlm_expr.5.gzrlm_files.5.gzrlm_idn.5.gzrlm_mschap.5.gzrlm_pap.5.gzrlm_passwd.5.gzrlm_realm.5.gzrlm_sql.5.gzrlm_unix.5.gzunlang.5.gzusers.5.gzradcrypt.8.gzraddebug.8.gzradiusd.8.gzradmin.8.gzradrelay.8.gzradsniff.8.gzradsqlrelay.8.gzrlm_ippool_tool.8.gzradiusdradiusradacctradius.logradutmp/etc/logrotate.d//etc/pam.d//etc//etc/raddb//etc/raddb/certs//etc/raddb/mods-available//etc/raddb/mods-config//etc/raddb/mods-config/attr_filter//etc/raddb/mods-config/files//etc/raddb/mods-config/preprocess//etc/raddb/mods-config/python//etc/raddb/mods-config/sql//etc/raddb/mods-config/sql/ippool-dhcp//etc/raddb/mods-config/sql/ippool-dhcp/mysql//etc/raddb/mods-config/sql/ippool-dhcp/sqlite//etc/raddb/mods-config/sql/moonshot-targeted-ids//etc/raddb/mods-config/sql/moonshot-targeted-ids/mysql//etc/raddb/mods-config/sql/moonshot-targeted-ids/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids/sqlite//etc/raddb/mods-config/unbound//etc/raddb/mods-enabled//etc/raddb/policy.d//etc/raddb/sites-available//etc/raddb/sites-enabled//run//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/freeradius//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/freeradius-server//usr/share//usr/share/freeradius//usr/share/licenses//usr/share/licenses/freeradius-server//usr/share/man/man5//usr/share/man/man8//var/lib//var/log//var/log/radius/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:12346/openSUSE_Leap_15.1_Update/98f79f813f41dca3ad2ea6d2a7b14f5f-freeradius-server.openSUSE_Leap_15.1_Updatedrpmxz5x86_64-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@A@BBCCCCCCCCCCCCCDCCCCCCCCCCCCCCCCEEASCII textdirectorymakefile script, ASCII textPOSIX shell script, ASCII text executableUTF-8 Unicode texta /usr/bin/env python script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1d1975efbac36032ffecca117803015e879ea039, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6d3f0895070bc28efc793cd8ba503d56849c900f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d69f5f2c1612d08f7c4426d1666f70b481781ebb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=accfed7150c913f6086306837451e17998661b50, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=61ce17dfa1d5a9cf8f16f563c19ef5c9d35c7f0d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dcc6344fdb58f0ea864c6eb053003182a830053d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a14dee969f516c7a6bfd2b306b9ff96ac920a024, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=101e26859e77f197e238b55e49cf050467e768f6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d10d59d4ef8fc6f7a56c8982832090abc4eebafc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b6c8cb0e919ff72bcf00c045e43ca99e76dd6c71, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=84411219e13953145c57dae01a980353ea5e1675, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=95f70650641149ae5498a2a9775cfee774e53d3f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f7a1ea2488499c9bb419f4dc153521331216890a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b82b1d3b45985534c34f0ad2ff32a381aca91078, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9d0b0c6b965e86a6a529361882102b859f6fdc22, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2da470b26f31626284c042aca6b226695dfe3f94, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8f817820f823681bf459afc232c4457ddefcd1db, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7eb210513692f2485cb5d911451ba2028a176c50, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b265c4e757093d23e24bb5a7b0bc0de457c52a55, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3c13f10e0a9cbe0829e6dae1394e8273ac84fd34, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=830d05ad9c45de1acc46f7ffeccc870a93d3d2e7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cecec75e9909fc6a06ca8ee150267785f863fc37, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=72dc2c27abd243de9e04321b66bd7ed7b7f39189, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1279125258cb8576009f8a1b3e1d58bf5a5c7e93, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6c7300e6d790f8261c590c2ecaedf23babd04613, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3153493dc23fc56afc5bc1e0431deadaa8656a34, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9bb546832cf3bd2f76b0b1fd60dadb7cfbfc1f73, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f3bb1bfc8bcec8522771b689a5ff5b2c400e247c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cf2f42cb0a127b6c5a56d66e073423af2ae674a6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c1657cb37e311bc3b302eaa5f65d2ba71731f972, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8d4979d365b4304bd280f59ce14e404093938593, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=82824b83dbd772f38747b37e559db0268a139325, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d971395efd170dd4671b1f3f46783c41a59c47f2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=37719bd65c01318f15b96dcf5c5cb84dbb5936f9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4234c0fce694a43a23cb3fe068ccb230d03b453e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a3f904b4d638e38c2df769299cae0cf1ab6e4016, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=497f041bd92c2eca6d3b55c4de1cf623fcb8a35a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d51adfb9c7636fe95e644e18487e458833631c5d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2e2c6670a531e7076a42bf591941914b3ba97f6b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=61913ebd95bf48c058353ab0020c6c00c9a099e5, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d77a393d7b6beefffd970cb58e435fa7c49c3184, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cc73a62b1785c257a6494fa908b182e17071e214, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=acf13fe6ae668acfbefec9bdb162d97aef3e32a6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=916c5b130c635fdc3258808ac5d1fc010929431b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b2fdd74d4a2f70a7cfd7be61a2db4311759db90a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0480c692c140a7f232b717151c6efd981e2bdf04, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=38b6bbf0a4f68c744ce7a643738f8bd2ce520048, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a4fb67d16e5b7e27961990ea1e812d6d26aa30d7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fef8f89875de7b96624bf8cfe9006f262ff8e00c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=eb99493a22d3a3ae6b681a89863fa4e979486d0d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0a3e7a58a3dee09dfc35ca598a6f71ddeca6c7fb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c4c6d8322a9435bda65c184403d209919fd2e894, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d248b1d3bcce4d432989dbd7cc27ab7c98e2e89e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9767eaa395b646f3131468e2d25c30253f41d0f0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=348397703049a02e02a14ed88535c29f8a9f3187, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=21543fbab8503f749be34e6312299051f86868a4, strippedPerl script text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=d54f8059dc556c987a51cf4d87c01926078b6998, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=9ab7096429bb6ea5f3dece76457f052e33c613c7, for GNU/Linux 3.2.0, strippedAlgol 68 source, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)empty !$*.15;@DJPTX]aglru{~   RRR RR R RR R R R R RR RR%R RR$RR R RR RRR R%R R!R$R R R RR RR RR RR RRR R R RR RRR R R RR RRR R RRR R RRR R R R RR RR R RRR RR R R RR R R RR R R RRR R RR R R RR RRR R RR RR RR RR RR R RR R RRR RR RR R R RR R RR RR R R RR RRR RR RR RR R RRR R R RR RR R RRR R%R!RRR$R R RR RR RR RR R RR R RR R RR R RR R R R R RR R R R RR RR R RRRR R R RR RR R RR RR RR RR R R R RR RR R R RR R R R R RR RRRR R R R RRRRR#RR%R!R R RR RRRRR"R$RR RR R%R!RR RRRR$R R RRR#RR%R!R R RR RRRRR"R$RR RR @J\JMlogrotateutf-8a09a4a113c602779e3eee914e0dfaea1ff1c6e9199ed62557f0b04b0b6bf2c1b?7zXZ !t/z]"k%fm?1 1N8[xIBpW[iWP} m{B>+@Brp sB=yNE`3l7oMdccV/ cbT .bc> 49 mߜD5Hjϕ_1^ffD1 qFB|08E>c>qXy]_+r1>_w.M#L.8ByL챀$W=I(-ij9kF h GqxdjZX^oy}&$HzƧkCz_`Yc=h / V&v=lz V3ﯶEV'`6|0&A_SM;9Qj؜%۵y<*M`g`;Zo_"vZ ZNl8x> E #~/E0LÔBY;>&x!-0&D ֵ39x]*>)sEcOl@ M:"V Y7-snm/bW\ǏR[bLj:s쬙| #Oex;"jIB$QXns@K$danhp>Sޠ{sL:*oOMLU &RΞo 8־ (6{!.ߏ  \"26 *0ai)Y"=An yhkdїʩ-3{1F) !AYOw B=wWqУ\{&n!eU0IX7P>TqC-C][HX'#?JNTl]dXaUX)U1Jv*^HTj;Ȫ;گc/MpL){\VpO;6Ť*ّA{,_1ڳ53=Q@di[ij#i:$@L%p7 f)m7g$qkP7@@A+9*k\(E[iw(/NHRES6!eG"=F5e:b' ;n %loTo=LNKS ]cuaT$9mjmK9D-YޯWAj:2k[ QVd4>QYa)vʨÉK ,nA(?y.b̬DP5m6}ѹRoz3cf|g{cڶw\o}pNS7[KE2Tr"?'Lm[ (NoE2rlFy=l~0cݝ Х?ܒw'nP{T-`#l W.aAVfI^ yL:TLx+0NQa" E!A$_8B##܅}ePJs,σZZߜoRfy)dXpѯĆcfHuNH& ]Ok,"EoNB7ŵ|ӷsbD OYGr88/I\(WfL;.@}:J?T|Ӱ$|F OnW|0Im_d=zG~W%.e-g^{º1 K]<~?,Cnvin4fa3*Ob[Rv%&H} *K,$%Q&d3nȡX%D"i|&9nGvΰ8A5߭:e RG%h"b]\;ETTNG;˛J>;,#'Z!-*>a]|T<$L;A8cNec JLT0h(\NA߹s~tc?`)" |MhCϭ8 Nq#duY]}S. \,UF %8{X/ ,Wǩ? ޠio/PUMpgRNC/IE:E|K(Ym4`pqmS>S>YLfπ_گt5EZP'QVH-Nu8y2 R+7d}B"qW #X[۠HcB?^M$z"XQs9,raWx4/vǍK9Kf-`tR ;Nfj .֥Y4mɰDR#[-@|a7Mn%X:Ku+ݼH5ںh3^1ƈRqdId`j WL%:աthl_ۃwD;CɝuaEpV 5'k/\H ,I-˜9ԙ0[Q$5殬j`W[/=U^ɐHjֳLGTN0ۉy#F :|5{mun՜5 ǿ!={T@sk_ώVtd"oU0+_KL 3uF*+Qbӧ~֞4yi}c&/n`n<:[-;NI (\~B$Z"fHo^Cц,^iaR\M jm=}JF~Zfc fq“_1>7yކveXLJP0^R,$7й`}_Rܲh隕 oO;g 9a?5;;&0q6;M$)E4g|Z0)w7КdOy<"('Y!V-y{2V{PAz6ZS3 wQfz:;J5?PDռ2PiMH $/L$*e7B7h7?0' ߇MJ%e>hcNXf`0ҊF})dX:jiOylK` t + a:pK}#ׂS>IC/f8HY.2yS|4k!SWrؓHt`{g5sv^S pp > .yk}> u ̱ⰺ٧r+ڒEPo 9T\ ߲;}$vPJXZ_#ML, J4Bińf/?&fxADF0lZ'SX-hYpd2;WNit*!(qTx3Ck}=@[LZwӠD;lI"xp'"+Z蜙ѿ[ ,Xϗcw'S0K3yu<63D"Q1\L=[µbQ-J'NJpu^4]SQeM&Z>~Y\xfJ(31Hsn<*c ng W]r@ 32 GZ&,P7P_lނ]K6X;N-<]0z#|rMh%:U/V Tkro_^SJM rVOXt]A'x9V`me3dtM#97On4'BB H<Dzmn+hnni^p@`AnMbȍ7{/*e D=V&]Pvo;i@/=e.ÈMB=ut{E Hkx@Υ?# |s'Ű19&#Rɏz}Vz\F[&7h˦^~`KN$=Թ^T5s R֘۵H͞v7d%1rJ2÷bdf?pR[K'xP8uCEѮrmm%=h+2WJ]%x \ByHd7F.<3&l{M~coJ݇A01O.ŖER}~DIRw7MrwU0 ` #зU2U€J8bٝ טma|?XqgZJӨj ZIdZׁ2OYuǓ_g @lpx3PќL)zzexHw: wC(_ m>->pEYN`]ݙ#09|D85(]XιeH(rzހ3b8ex&[^^Q/s1H9!grD۵QOK.5Do!vw-֜m)9STABh_js\ 'HߘAIt XՄDP ~]Q*F]6ug *yj Ц<+ cP<ξKZ릧-Zmh\QUHtzJ9&0e9)Kn啳>`,K~gSeZV kwMXÓ_T@E7H B&R!kU!0|Ǩ43iEo^$  xTddCfҳȣkjQ1'u'XlX+dMSy4K V0+^hN/u$n%k0 dhDีcjABdQz&XXQѣTM<k ډewR4'NJX w2#?Knlsf s]{t4NA+g0!={*h10).a+зT}hn*+m{B);qd #IsLY"C{_EFX*mAʊV%n0bmL^1}+;q+P ˷:ػhQYvDb'E˸(@Npo4 9Ke]Y@{\U Pnw$59kcܪՈW6 %97~ =32IH80PP`7=/NA^<{ eANZԑNyeěS}pR'7N|B9IXK\{qoA6ͅvA,z9Їy؅SiQ&ii}Ugc&cd7^>M.!uHຟ0 w/s"uJZL E7x4qVd3f'ja^1-8~]@Q5Q1x,L'GlYB?{Yò3ܽ ,v2q(G' `(9ֶ˵߀MY{x0|6gjJ>)T;:XaW|$n0X.sw!C Gq7UGI״/ `T#PmX$A_.}p Z2^H⒊%b-ᔎriTÈ}Ww17#uH nZM|C]^׆ߠI45בvw}󦭫7>nV [7G%󝗱!oBL3P+ Vh@QhГU9d13di`|[e_VpmlMi6 5Px? 7ztף'@9T'@Ku*vWK㹅GˉU6k*z 3>԰}:$CvNAB(yqFx %u t5l/o"9O; 6$hg A@nhiSкꨞ?Ttt}^`kԺ_ qs]M u4љ3h"}2Lt)SI\g#j@[/` h焥CĞ #vgoԶK*wS>s$A-6F~ QlzNŶ߀b^r3 +sl_a7| qFYתK}0"tԮ3p[i4JGyyH(b\ `a߂~/7Ck#10a~N|ʂk:p6{\`3ACȰ_v/Dt>=>i{|#8aV(Mwı6f}/ =+Th=qmMG#jyg \*7mr܀+UO|׺@4DX֓U-K-M/h[xyD]d g+(0nQ{BFU,ӡ/8a)<ߵfI,h $:BZXWxЦ$e,[n,F QFG1HIx"YӏJO5j b"mncGD !K >4#& a[eYlWb'1QE qs3X IPi8R7ZY]Bc@B9_D=*wjڭ9)כhjP(C*Ywx<&h vo&Bڊ~TCnHNLc9> ҽ`h>ˑj*&3KCcae4^ZJʒ6Ѯe5piaG!Җ3A>PEj?\n}Uoa-5"2d`$U[6^eP-M Xěb@.rv3^+QI&) XS4&@/bRB$!^ ڬ 譕H%׽^ȕ`DSK!'ɵNjs 2/S GQ}rqH| Pd(9hBŁ$'}c'ՃPUcX2f p5vbLmjP*(FXtL>K(X-'`%af1{fx, ͛Qgn.?i 6a)P֖\ma,#+ީc|MKU&z[o->' #C691zF6 a$υ*4y(b*ܕ!L6@+[hes.G՝'F'Jї|+[@!.L/yto.e4]'>t>ß Bd9/^QC]垈q4Z8QǬ E:ufpXe]jP:5jY\}DD@špZ- $Pȥ;|}3wجLhĺ 2r;]@l3)@o){3>3Vݕ!!{ !iqNy| 4#EUL\5I,(7S٤jMO`rLyAKwhY]O2Piʁ]AYs:qe[Do]`wnQmm^,io%?+tA0)Tݼ>W@.B`>㉼eQk?ܝG٘lk\XOIհuo^g2!t{gW-&JvK,sk|M+j1~# e;2zzOcvlE X_j!I89*c )gѾIWl9Hf3^d8ECLIAk˞{4u Bi%OUXG2*ܧOC)&rhd1VTPtSLt~$mys6mHFz<)7Xm\DUBS]1 q.$G RB_I34]<4HL$2tˍ=;:8!s 1q:0`0Yg@esy6Ev+cqzf 7- RT62|V>G8@Dĕp<Kusס܄Kw{gZ^̈)S>ݽT 䱩# t;V% +h+*V[Gg&a8j!0b>6{g}fUfqψ*;v;2C{VAƢ[kikKY⩃&L '( bTW0%T+-&OufS|n}(43_h'kiy'+k[d$;~Qz\J{}&UwcOXED>G*1(=AQ;r)~HFEz}B77S~hcn36w۵2 L;Q}iPnGRُǣ3wʽ '[boohb\( q+yiK@94m$G6JeCK{G_&WAO-Q2 3f%3حbE՚d#,/R]Me^` zD\1#ׄp2*2f==liki,sӴbGK!0ϛ}MmA}N *tOS|\p_rt?sp2h=UKpü!3-7z}7/(. L9_ y26au@ /rU@Z΍1T!_;1 ]z '`pN# t.՟Wv`aSGϪ1ڌ cb42!ݡ/2ZV$r;ь7h"wm?3\f<+ R9jU{GvFM-0N[QEozoDt^z? sDToP'g.d^PAsF,MAƛ1YR$B=e̦,zN 5xTJŬp IGe%=?Im` 36}ܲ Ʊ8JV87M>jC~!;,) &mQ5$w{]dؼax?&r [;D"4}D 5G% ŵWN!Hb4lS!W@G%6 zL,'/D;髹DN[qFN/=>>ʬϵbfsisbv4Ժ;>՜\:.7duO 9좓jKn&:/޲hU_G NN'D 8k 7x,P1Ԑg939)9+;4i,b23hl[$8g! M-A5>PC&-6Ar$K"6ux(A=V.Gw ;y]6xyb5iԦJ.];oCu7g pfV |m?Zdmͱ祤8M9>{K#WNߚej-īlF4r N1 IһO l>?P,,EXbk``> q~Ew mL;[?bك,ͤnn-7ߚ?O9zɿNSM1z;2..n~ ; ʣn y͞A;&iٸ JMpfD[-l$rk_J"ԈؕD'ˡzJr_ߋDykE\ iRhxS gx Nh]^jk2_!b tq 9 $a݄;B)i~ru) 7]>Sgjm@- ,˻=f%!Wh^Gсm$։a+6&cENشA&_~;[gRxx6Σ;|mSuKQ`BimsѼnZ0﯑ ̹\}zTI ;x eWעPDrԡι1V ԡR6[_Rs_ZBw. (dzHtR?Mt%7)]ɠ)."f7L|q-0CSJmV5,4t`|C0ܿ׍:f6MTyL\חrL81)C5]ϯG-ꥳTYB5̀::HMN:?E0{h Xm=0:C%|;VS?ᚃSg$YEUmdCnܒm+ A![uC{cEx1ofxX[88,e._Q9laiPg`{VkJ.8jA1Uu`wXS@hrؔ;\IV/9~M1Bjw'[ۍ*Fٞ첯M~H"JfmQth[Ҁ2b,K]b]ϩ|[_ yRA/,/hVi=O+(HH,hndp}Td=ؠZ60)ֵB~4?I;pg~)"!t*'Q fzָU.eN1wJB%ι=7_wɹI9cyo}9w/'D&XadQ}7^WZHX'XnroY$UM{3͕}QMHz!UmHҰ% ω\rj>(u_Z /{ݨd?j Vesoq*vW~Xlңl^aY%TUf|߅sK'Eځ2%Oa;\N3pf>Zs8gO  Yg$d3&LWoJDrӇ\ۉB+گV2>gRbuw]4 M=ZkԧX9&}B` a%}pi8M?0I"+vT[(JEhgk^`)7ӛZ\E\u6n( Ud^}Mrmxm ްnѿ=BL[IEFDz)I'3/g-un$̜6 [t2p}¥NHl`Tƀ_L|^LA>˹GcH-ED`Y T-,^OHJMQ(9 1vbYj"P,]9\r4v͸)ߋگPޓHgTVIX9eASFU:A;&&2>0ոID\+m?7bgZ[@lb-A%DURQ|B@"w|>86݁6L1C#n܈:`-=Jtق߰y4ygDf;kSJWkXwOXa?Snz:}NUV WB)jCA$k#SsJnrp - vIiʴZ{? ~ysm:yc2Ub -"m/ j)Oq9;{~xE CӠ0ҷe{n1yWsdٙ߆}XsSs?bQ\^XEwDWp¢C#8h~W ŧ1mC1ޢH/gGVRԎ@K3CM*#ɵ=*j5epyM\Q4T<ǫ ?əH|#x`,$67hqP=W{qciy p E0j*_O6@>PB( M=FXF/1&"=sl2Ƙ0/ |XO(vߦu҇0£L%b1VJq jb8n~y0)ٚp v1Kf Lyn6ڛQ랩 <0V((l}Q Gq t OeNxb!4m!T AS( 1D"5Z^4l lNGY+!*|&n]r꥗^B-e( EHN!ع} ㌐ɑO= `6_&m[Wt>ܤ't8$,/dA |eDY=xQ&# |R:cfO!TUD U+y*nU0XHViv VQ|- ;Fū9?˕03t[+lS-e9Fj!*c6ƵKMWO Q!,ՆjYeڎh>gƋxщñwvFzILJsNSO zFrwg>TU *hfLsz29JgTyi< 2M> kٓGnu`l#Z(\qB(d=,JQDi}N_W: M;ّ4E439Kn-GXjzܢq"=h`+l(.evEa1ՔY |TMLoVl/o&r}o8#vRʤ&G_Rwl~I5C'! ]X\I;ࢂ#Ng(ھ` M+j,]A~Ҕ gl%@ m-.B3$#y,q>m!o0Ļj@`3Os:?XR-Ж8C*4+54e . Uj3RY/+_aL79$LY$m_]O3^Jֻ6 vnn$b[jN+i,$^i 禍"~FoAkp`YS'!cG(OJ)&>gI?6GP+$Wb|@WELN(!y.^b00%Z!yHTa|;94Z92\LdH<d۴ܞ2^)d䐘'vG74\yYs VȆE٤Gadá,쳚Rn4*2:y`I/T7j(݆\eRȐ<2U *k诒@ .I\0ĩc@h:lYRy`*ŢMLN%Ã,#YP߼TwF'wG3 NU)A+^QHIlŖW,u/C EEm,qǻ%E&)"4?5> ]#YtiXue͡ c3yWoLQŵȆ4+yOHm/Dh^MZX_e)rnyVw$=&t{݆G`hXR[@e6*wܙ.w5"oV) Uhϥ'R(4ܼ"rLCR=FW"wT%H'I@Q,Ft_ (g@xč{ݫĥXCį}-Etw 7 C N451]OډlwsWA+t~x*TN,dT)GZ;AZ'Hnw: ֙n s7i3TSNDLҒ`]D Rj8D:X N҄|XF+#ʩv~ ?poPk&^W(ajlE8'Tw{4zpN`okRh R">6n#{^2+?j -r-ԝ)1,FݖtE3fuf 5BN,HBK X/rҮUr;)}nb荎f545v6mηyu]aV1(r, k"JV-pg kzeO-zɡ&,Lm`k[j e~WWA EbdAl¬@2 `/AjmeB،C9{vLս,i#KF7풻5sH01r ]٘v>hpQURwKޏD2ߤSR!ǧLNrӭpq 2J1W^pi_w-g%;kw'w5iꐘlt7 :({YRN˵EX;Pj#紶G*}k8Jq>Q^@<ȐՅ&@穰 `7x%[7M_YbGCQa=wtu}bꅦ{P=QmVΡ#%lT[~iDvۂ3=I-3*D8w$uZ3"5^zos8Gh570p]>~񝺂\:uԮbnv}S@1Bfi7%G4>"A"d& <]%9m}; hVne jPi%[u|@e `9& Pe| lM&|4[˙֛vΕZ|ͽSPω~WY#G hFUP~&R)61Kd2Je!D?j)c'kФ@^e,QC}wWzpC*,YPirjt\7$nOWNsDmMtrRI:x-_d#vN]q54a0ab"Xj_*0(病t9%۩ҙUjE-dYd& e;@[I(=#pkrĿ^ TZ~=Yt#}wu27Jx`՞aVKkbUR%N?DEwKGs*R:274$$p]?QX P@~,8j/|aPy]`M-3oT %{kK=9nD(~9$4FNE~4¯]&RR[u3ht/N^ު t3M,sv=TuX/N -d^ų#GK9QTZOz>g;gS+ ~2h& HL $>i %I̪\G%j3/oľ#"[;t,L-/ϻ2,UI޽I= 4Ppa ߩn+Gz'9Y+sh'W#.oxn/hZN"{%'&E'w)c*wCпwkH|^%X;׎^.e,N v>\<_VC-xTx9lU "yx9j3)/?\qh AJ)@fdA0!dϒֵ[$|4sЍ2 \Vb`[ZEWz?L2g|8aR5 72N8`4s{{!9{$+ "µrXI8lB͔[?Ir9>F-y[F `Dd~8UpFR ̝\PXl1Y }̈n>[LIzyo#) ޜ;K= 橨ͳ LU[7 l7˸c$z0zpG:)Oe/A 6X @c`Eaә ز,as}dơ1k̭T' rtKJOdp5VU0ENf-\4]ϯxi ;b\MѦ#_I=Y{xr:CmxO4V cG qa[O S ǣ׺]=WX&2A]e ޟϘGӽۤ; ONW)w1*~)6e4saEyT R֝T׾b9 <.,È*VuXOB.{OA"%=# 2]ثHn]3A!@. Lpw쏄`vGs}|Mݘ.KƆXPBy;>Sqr(fPduS,ugB*YJLq(f56n?f3`8Խ\.*lkdGDR -lÖ720@`J&1e.0&$  _K1ڋK83b=jnQ␶ӻj8{";?"|8jB$/v,I+1N65NtDL-Wn]֒M@lld+ <ڇ}Hmnkߚ;h}y^vBk y)!E~ӭ0)p_$c4X;!;Ga)%A.) mĻ\^\ˀs!׋)Oڧ^sHs$_YTWuy#8ó4FБVĒN<2md9yӧVAHJvv_1{쎴J){tW3ʋ#WtcE>PN,Sŗ:V~G7ȄxS<:_1ל~ l+t/5񂩵P;6inݍ {״ ޿Z&;!hϖ`m;-UغibA "ls [#LA@Yюf8x%'S[KV+),ەGz;C۠5v/A2>e/ҀY3,OpD5?h4N~M19۶cBW[7K'~g|5I?cm ZL 0I.|AhiW򛕁_J#Weζ/t ^O|=@eWN)FKɀjq+w~v3#4{lLԴ=c $AIB^\SymZPl[nmMlBH^Lř{I 6'S7g)5'5$3wqɁe,5Ş |$; ͌]U_ۧ]YՕCDLdL_C}VSTp} aᦡlKz]=X4<)t>4=4fQ$l ?KL› B<a?nFCbaUÆ<̶6t;*>NW fNLb\n^i e[p@?j4DG3uվzN49 )k4x0/,<IJ2~E3<)LOU@$Tt)2aU"\}9%b_qZ -i޺Nfů +=O3S.gx>铫J #'ņ#:>@V̚soʫn5HUw1T#rXZ#Bq@M=e;&7 >w^f9f'$`dŲmSgf}α_4$tSUCCT Ϛ)6`f]aMc)8 o5Sщ—ە!m뮴ɓvÁ!l@oOgJg_埍+_>=IWk/!C7 KDssw6&i$Ō$F.ٳ舤mx7\G )DZ2;]\[. jF(17O@Jn +֛޾ YH8ÜKn/hk-v666J@8i79 s Dwnvv%=7NgcdeI\KGkLd6Y[ :Lp{Ru,|wbH\ O"h$#0퉯z`M$yPtܖ. .XGүM%V\d$^=Eǒ(qVƋ-(uA} ,R&,ۢawBF`n`_B2fm;Az~uO-b: ն4ba`kXb:%c)gBdWǚEhYm=HLަ6"r *,aU7lj+Hr>\p"2y9yIX=y%m^KBIp-TȞ㧦X}AT%q)F2wΛŤ5kt1o5|r'逩MZP+:$,Ol4xG'g/&(+( 44cm6-턿c~V/ŗTUB YR'y)2P$-R"&$ u rh屏s=nsAх,/.~_FCR)=єKkTpzLAW#wh*'R"V[I* ?xOqL7xD Cj+Y >8 > Lj{ynaLe lT\.$f 6ZNDB5i\(!63?ƓpHq-Q~$# _ҼWg};=, aKXfp.4s\~F\GBd8){J{3{Am:_ AەiMP(@K3j8?-s m^q?Y~V L$^eSpHkEk%YBڙK/g[#/Mi˥/քX=w>򛱡 f^! \B,yl-AF鉻haу .ddVh8*^G/`^s nj PYehfdݔlMLWH29UkeG@6ةjhLTRE˫'ZE ^~IspG2Y,%!CCi jCߚc,Y s bᕠ#nK=h¥RvJᔂ6ϳC$NѼq)l' 7$$U64DHQ#gaA?i~YBXQ##X|0܂C!&PZI{ܝ70,f-ţ6a!+ܽP2\' 4H y^ 8 j$L1-O1 =` n%Gb9kV{i gqHlz01oX(ͻg k¼._n*QJ1k;I1S ' C ZԸ4ʘB~J׸B Kq)&~=B2bsM[/nu`N x4c 0tX<+z;%nvk_E.45X:|/mn+j4׸['ZN*B" ~T%]{Y(>3ѿ)(xOlU KW:BdG#w5)g5N"t-OBxϼC1L WPA2J:{0)$=Y0Gd's̷W.ez6uSH^M5? 5?ܴvrTC 7G*:=2L ˘?̧}s OZn[dLypwOAX3Ώav 6} Z]v#p &Q!KN{3L_,p ,ka,?Jة9RE92e=ԟV7h$y\![jZ{m'WtqjRʇ|F~g-,Bq%j 'Ets\^I"?WӸM ̗Uf.X'RJCw|a!a}]MsS3}Fl(jm]0z9M|(ٽ eMYOD|8"G&}ӯbqsUQ*ˊfdѷU9}5TϿ(O/6X6qrÜ~ټ+:)`nD!ĝD<ȢXɋ/opQu(݂UO߾RJ\oB:9mkz`[x\1P"w|2V"i.L\qE;Nhb >-vXm̜z[yo Uq!@|ո&~EZfBXu7*T|-}b҉k̈" ji+%1)E5wt2mv%UOr^Ã5Z)L`zF^ESr{ODy3Mq C~i*[;Z/ùV 1<(C42;iʧ>t.Q:W\ZVkЦ{vYq ̍IzrG räԋq9נ# OI!7QcFg(IɲߌÃ{TSQ+1.f҃C~Qu6N2Y#9M -h9ڦq%tPg߀/VhF)OLSCE;Zɖ~Amrc8 yH%"d_In / LRڷe]-sgS7sߩU|- ד*'e3 6%?^` RHT0g-<)ˮy{,/Hs!VUaDca!mh.Ζ}:Ȼp C>mD0zdlßIz"35U1q f\:)yyXJvx@=Ի*pD9٧e;Z,($Sd Ć椶=w(H2 9t<_$M7cF ~H mP)Bzړ]jO(?*ا e5勂9rfc縃9_tG=\a~R {D*01[Wl/6ZVeX2)mѬگdj>h?y"/ePl0W#F(õ{ Ե91mzoX`=9wZZEwOnff h܃)MJdv7czUxJwzeR'G6-sn`C:.cta( IXf0+.~o5,b3}G2x%maf1pneB`HsrKbi,Er%?Nx狑Fl1 sB\ix(*UxlYeDPۏIɭvb$$'ăzrMVL?jA%,e86ןᳳg({ܚkh` ~ad݋ :Jn'39D19jt"3uHdG '8|GeD¡ǹEk=D~S¤zmf3J0{Q_䎹qS؈E5[{f2PCRyL ǢK "8 o'd S~hBUPEũQTR&.Xuh3q_eْ(9yA2UPǙ̱nx2yeVL{)&m 5룎W9TBy u] . ʙоŲoH ` tRepaQm+yL z{ oN◒Om" Ru\ObRA ںE2"W7y{ &[:n؄f݉,WU(#YhSz A8O}!#A =LW)d,Q+6c\я)/@?ĭnت%"V|m]^WI7 . u^v@^RXzo4˹Ŕ'7LGP/X*_Eej}PTTL!\PI( e'C೐B fh֭Oo3)_wy:BZG$(X"rh{ Y`^rWdq!Bsbw@VҹVXWXl4:(cWr Vu;s䇌 `3\:'"`g O1f*/yIRt+74r 8uWa  p uNO% b%E^$9[&[DOɺv:dтQT<|>0<%n:˚?uĺ4@kL}Q mߥQKR{:Uf3q:K0F'ERD ֌>gEcG }B)aI/;1iUťT7|G{1qOPm_iD}F80h~78w?K,st}"VO|0=:Cːd?a{WG)lqωʰ Jf1s$n\SH}o6:l 󡍱pjUl[ Q6a.ak^R]VZO$> E~| _7&). X&O \Hqq~BwZuyёi}A$4qqcx!qz;N# .4`ի,SҰ$#>g&Mf—xh9| WI#qMƦ jGWBjWdk2E$z.6NL =AάQq>MJ*\Wx)óD\__Bz\P}}Cuݏd=1('Hx9D\B!(0^_Rv +y:k; 5'S ʦ/P%m`fo g~ͧ p..2T E),jiIS2C<]ٶA"><*k^g̛㥻.HmI"TGТ +Xhsx!idfz$+*=_#я\'(2g e=pdN3` L(w(fJoJLGYÃT{:-W}w[o={HO&Y_[Y/XKq $H}!~V3Y0U|a:oyp S6lHi;uլ%_T: mk1 >E>ftðnjJ빾BjvZ3i ǘ}+9c%1Ș3"BkB6r6FwbM&\pa0)*K(^^tci$]śwr" Ӣ;wT?]^ڭҞ|Ri"w' $d[b=95e>2'0'V_M~HV,1R,7 I!o‘ˈ6cNxYF#P7%˻4^퀌"B!JO4bϾ< $;{<v!ԥ'NW]Q:4caRmS|mWcU١UkSYg/1*iU*+h6o5jL<؊٢S2Iʛ?b? B! 80ũ{7(=i)x,~Y/G[,3^׿e⾝7^-9' [6 Z?ADr>o5T¤/C&79;[lNS'v[0Ѕ6r*ϣ%T7kˑհڛDt7f&rQ\2w=;oP\ K 8 鍎y*^D{wǿs^ 뭍0TȂ^wv| 1/ <4ji?_tM '_.%@[ ׏ʟS}Pp sjX[j Wvk݄LTX#TY t'˙%hGQ@=%[<(6;58#ҞWZXlL8@e &}h3d/{E&wQӼ/zVZ jk~`7_n 4+QXWrqKhtg0/eUs \ѻ&5m%ͭ2  uK 1VyI5.) z(^AJ|όڧHg$7#>ޏorJ޼t^BcɅV7K ,.mh*}R+@3C/̗.Jz2?s3CMѧ@'D%q?P]#֎^[~8ur ^3AVS; 䬯V+C[A=`ZV=D hw"Ժ_JƼ*Yw wB mh&s0ևk@O}k: ,QcK=;P-RèoWAxW<£aB @g #HYNh9ɻݾv+~zAf%|XIhVWzCu*sC80]ߞCb9L2@XygTaOe&1HpDv p;_sf5On4T h]]?US#TY'4S W ̲9I` ~8GU,d?x)2<`Jq1 |bp?]KXP0-mИ~~ wGLC_ŰݫJK/ɆށEL25a Xn=5=FTKUNx]SkWW+wX$-NhNA`:+ •t44e֜=6+iw?. F n'|t(SAj$^OS(첔oZv-gftIoϗst/rQU.ݰʪ#9?#j!;:cW(r3r2&lEv疦3Ťdd,38'qx]w#BK3p:MLY~Byf{J(C"@m}pO !6,j#5x1GlCDЋެ}N7'j++% Τ$5_՘27|kۗ8_Cr5NiHkPAMG"(:I &j:`ju2_%kcYi +&ʧQy/ku`[hz ǚlwkL̽0 O:ʭ(7773@EolLʝd,́$3$ Ƶ&gX8,ć]˰\ě@UD2Fݘ=i7'әk8ʞYҕd% $?*L?YZ/ wN(rFF No.CeM)Q jsRT_VJEp[xq;N.h侷=d NKA*Br! ՓiPڴv=WKGm&IдIG1] _r\gܘg-SB* xArYj΅5ޫ_вM;T ' Ioyzߒ">e=JX\:^I ,t ~XK|j;'6/+]Fbu@Ҵa^tE7Ѿd]7,r28r)m酐IZԱ8Qx2}02-!Β%s\A=5io RZq)ѩ =YؾҁRő<\󄏁^ӵĥ4 _<3Em}CNW{¸73FRimwŴ*U[U?^|fn%b=FFz?\xڇB*KCˣzqw+2t* JG@ޢ.(T%*)Q SGx46 aٓʬ6fj\/2OXGT3I[" 엺yUTa1M & B%y7ҜC[mehh!:8@'(] g q2Dt=Z~ KVϽa‰|=m{ÎNv0T2BDg@:u'f#'?fndmXUp^C؛ K0-0( [(N K"y?<\8.% _lɄxel`fnoi%BrmZx13 6HISC_@2g |+\=G`jW]%]$+ذ UQ[N_Oߵ[[~g.6Ĥ'=4n'u4PH,19u㳿/^k4;z*(MNh%MAs !Yfr7]uhvߡXxDŘ:k]kHy8h,wzymz:trvqM)1uTk*"l"~їg*,UT6XskчF!Pv(5Q ddr!qTO?nh Hf)0B({8X0KL(IcmJ' 1b^:BW,Dq (wWrCv(I83ahW06Jz࡫Rwˌ}PڈLS?eAvpZfŘIx! N3e>k(wcJ^N3fϥIcIPZEg}ps1JSg1V!*n],BveFZDj} xIkW`|H^TU@Q}[_x=~^eJwnC| vM)cvɧ/SR6m ]OTPd d6}p|FlzUCq}LGYLəibt%dM\{;IZI*M,Xt Fήd3ܢ n%;_1@x(2{u{Y|`N2`& H0CNR;My -U%+7w%|kYN>'/H c s~:+/qʯNU+!qUbDfXKG%ӯqd76zafM[#c-M`y`2Tsy\vWnD$"g% p<0W `>}#:>"iB9l:~Ő'ڣ LdT5hJ$Ojtк^GY!T +qpeG#~6ZIHrcc!A2WQ v b#L>a?큧ʫHRI{ugS͹'庒s2t hX℅5.+mz\P;W##suu%C Fl*\R,OA_q̔m\FhgEWkh®@44TEu?s}2Ad V:@C=t B .APxƲؒpwwLbBGג o?&1|ϚG |Tah-w`BЬUS:b̯> ZU_Pcv)Z~=OQ%G<|OiTasVL!}>$!͇I_wk}T߹T#]ӶwD[;:Wz {a^VnAnαsnDSfcâlȡ U5Xh ı.8k( \7!p_I5mB49+vetFgTL*Qh>-sUpR `=76},"$&JPP%5cL٭NYEb5 ]g U0LL=rnDjCA\ Qk fc_*} <(7mKv ( TExũw;fp&THᾜAqB/V~j9u˱\!em |j61Ⱥ8oy=lDRdz>FXљ8ANM2 ʱb˵3: Jo"f، Nɷi/dK+"|]8ꌗ,<! sɠ^?{X1\} qڝd#B;#"*t\J ÙsC0| ET4Ձ_TGFOn:fImG#$64B b6 1R&7bjȤ&s?8~!2dW-颺U.azZQ͎C ֖/'ٵ,"-zܼHhuѸ%,eʱ%3b>p<0+G dbxuFؒBۆyS]U_ +2D\NJ"!;߬08`84.lOSO+k%{4^Z]NEd`59'zv|ȓhid(ɢ RSS| αTykiQpW^|JүrMs Ә$D0MIZ5{X7Kq*G#y mӘkӁ70V>ui@Hi.ʨmn֭1laI&rn{蘻x'!M5flhNZaBһ3PjHbC")uH1Sͱ7Fљ3B-o |dzѓ&e J3p}bЪ)x.qY5ǝS*z 'xp΃eEՈ|#HpVܠpZ.^_`LvC?6t8$EPF4$>gYhFܦ _LsxAnӭZ.|}4'טmkQQU`h̳]1}³׶mӇ.: o* aC4N.D1C+cg2Y1"¡my . A:>k2N]J$}T.{>7wI>Y^5}ޣ+BkO|ݾ^ƺ{]^xJ GcH,uJf2c:_\Y1S.%9ܧҝmx ƹM%JtIh%?6<=)#4*RgUʳӶiَ(p|14*WMHJ}b!a^ 6Ī`aRžQ6C|4[TSO~FQ|{9W YA 2@ewөC!xоp̈́F(>jةS=oy-bِսԕfw R} DR2_@ЕznUZKӂ1dp2p ]6#5:J\OmHL__KXލO8"oh\;7?Q {}}+ u&VsuWc6eN~T^t+@$7Ś.o?T$\g,1H]'2owSȘi@/C>w8{Y3+/ρGKscG-qqZ"Kayz2daFشL(\~I( A?hos>m<"^` E MkL5U}Z*#Y$ `oH6 ^}ROe!Qf'/̃x✘;Sl- ~.R>)kBL!-趞94͜E1f0-eܓR?֨&"Byy"62"NSet)*+5XnؼO8AiEI@[6yBO>Bjn5c%#2Ua{\3&K"=ku & n(Lnz|`N0TQM5|vaw)Wgd_4p2ҼJhQjƾ v0O+~%yә::mYQf# % sqK)gQ3{K%"xL+؝A޺. kl}G}zVN+km\"j;D ڳA ,>͇B4.6!;܆O@ap'Rvo,,:o4}3Pq]8 aBxbZ׋A#syviN3OYZɻ/ŦKEao_T}j4:-MUQ"C/v{wx U&_9Ruf-tU~v =~F6a&n#AȚE=:8eKnt%N 23qX[Dc7?aZs_ P%.WL>t@VUPX~Q㔢%+͍C*03J#El\Ty.pid#JN9Ma/d &al XX[%ـ8շ3~\F1`&%,#gaEC=0͟7y#%d~x,PPi4.OQ/2|duF^8D'M{g[RspsSԑ'*W\VGC]0aHUEy5;YM m۳C`33+#0h0b(ݧ\lOn>{Z38ޙ}鶾)ˢz1PjnKvH{ 8+ȧj:.-n wg>ς$z1kfnbtIj!]$DMDo5([9ۭ1=I[.Hֲ1I$Exs 󺪝8c>@ڙa|`c?HqB\lXAM;_]HӇRId--ej{* -\9F^D!ǙO-*ʒ)r_1~ J4 9Önx/MdZFF!vn\@Ud{8a::=,ep+gWXkxVy3Ik v†ҠXX T[$W2JrdᓜfiXwTyo6.sTUt@i7Uǖ#GwBON(I@l%^C.wܖ_x0;hdN#@B 7' O^g|XY= A/l4_ tM3N+%ר_yYpi8̛.)C[D9~۵Df]2xL%奆SzS>^=a3ī4 l$}\0H_RYcٟ2YKی i8 uDϣ -Ji0l*TA-I8j"|RDP[?QEo\@:QwTg|'nI7hbM0 "[= W/u^>>PO ʘ]V%cJߋV4Njo Y0%Be0Xݺ=j(KW/m|â|'jJPNS))"y#J yiK34Nl::ɒz6{kIA`î3#1Z6_sZdIAmеTRt*4oЂX]KlI {JW1$ Ⱦ#oą=&^~cX)JU.qVB+ʶ2Q؏K!`oCkʚ ݡh(iG2CD*8`&k$|\t!ΐ\oZy5FJPA4:JN 5ci[ -oоȳ28brLR;{R#ƭ/ԤGͽg]E솒s8"&KXxQ%uIDɰL\"֥ ῊްE0^ VL~*j~3v兺^oY/iS}~z 59:FTR gyRʨ*-"rwKO@n )/ ?fW)vݧ(&KP;IbR[ J980~ vݏϝgŬ&R;$Gքpw6D%۲myZjJ{# A}-]2= 'DUeٱn\)rJ8zPsT~Ï2$?RzV"֛wY+ X8 b'9Q,Iאnjۡ;.aBJ2ZG8܄d Jo rgx5ngzwI2]mZg5B>q 72[r*΢"8Z0ZtpG5M,S{:d2UߎΪa\}HW-j$rɷIs4ԮvQC@TXEea }jM磛EoYKᷰvމO%dsd۹2>=ldm~8ہSpl)vPog( *y)B7P#+oUs~._ݐt6ܟjYs-M 4n2?vjd6`)~>B;ߕ5ΦƔ܇Bv6cy27 pPeȴ"@P2 Oģ%#4$? ,E8t 6ِRv3A)!w#d`boG*Q_.1\ бZI?e|lHb>P+k}n<,snqT>Ef$}w}+Jt:)-\~M"6,`hXg8|dj%T">'Hx%sUsjnMocF Ū&5WaI:x= Y$ڢ\Cg"K|t!l[[m{._ߊ+%U㻯Lׯ$LC.>K@?c<]˾qWAH Vr`WV+Ů1͢8LQXrZ:nx6Ñ a UAmL5iWytwk&CV3w<Ҹҝ|G)|. 㡙zLjVL3)j;"n DD!O5\o[uRK+ qP/.Y*Pkqf42j P_E) bImҔJrcDzd58ٹBEU<+Q@IɧvM8A&Zz j:`UԷGLb6YB:$ԐD BpW MfQ\psqgn. @6һr0OV| Y-;n?h+G1o+gI RHC8>z*S &蕜^TǹZ/jnPDXPtLZgSYf~r-JXK<hv?? q#35BQ{,X}!ď?ٔOd3UCK:vqU'U R;7qXӺ I))}F(>G`В8K,>8T 2Id^t4F|PSH1aX5ZiKzAvy2w#Li#ReM5YXҳs"ߒ U:UGl BК#V}–b %oo2T;R0%k/Rqa~qpV>e"uo@UؤzkàY dI$Pp# p3ܚ}R-kG7 ۅnQPR 337tL8Bv~E`zXj&m?0&ZvS|ݒԊdOMs/ H%0@șR85Zr0B؛ (S.~|DAձ6O%8*H:$CO{7<5Q zc(01jm3.-ҺwZb~58q,\ҩD#k'&[fta%M [46 ½Yy Cjc;Y/ڂ]Up2Z>U14)'FCy cl4\"_4ćPŗ[`v | p-tAmt.,yhp4Mg^aЧsZUÕ58+Z /頃de˅_~ 4zytw^q4uc~r_8U__o$aG'r>'O"pRi ҈>;  ݒb X ѠBќsu7Z-YT1D4{ƨdgku+Hai|ʮ/&)tY 8(v8 h .o"󢒞:eY ]1#^.OPDӞCΙcDȩ/)6W^Ζ?nsP'05ת4#VRT]A.utn$z|g% 5{+%I; {EN/R[,E@]z" 'EQmɲ]ո `/ VtSo:, y!)z Eq]cY hk*^y!S;I>xx`CFe4 _j?3UTJN}pOŀi͎`ZKxov0s+D '-k3Չ AH^kּJ%;t* F3DG뿀svagS)|H 7Շjs&(*d5HчY+?T^@Ոz|/~F[{!Qfm+kV X9l]([_{;F~]̛qHE  䉸Z\CrCc)yVfPoSba2k&w= ^ʬ{]H[>X7[mƓ2td wnIi. (wT%38E2XlѹmQ3d{;~ܠ ןFwm1?0;:-K kC8nPdT1"ΓNP\0EC\֢Q7@ >T*E\&  ?OmU߶%t|K4(obV +%:{=fEZWic>..<8a/f˰e>ݑ&VmZCl', D~=b~QMX`X؀t^}_k\֭(}DZp2JwdAOa%M\!2FMgPYTEѨ$=PRY=5YƁ/؏*M,CLCfpqFbܑ^&{sǪy@x-vs90-<yg*t1bdbi ɺiG];k<NYa-h49't| ~)>nߐN5|" t",.+uO'zDL^dsSՊښ}& C$:榌][_(H F3Da09{L/UES&vaȄ?h mrhFB'\"!FA;.z|&biDS`S%߆R~8FޗX 0+ 0"b1x_lamrxf+66/ܼ@P$fh #]|qj!->J3}I 9M34?b EB5|n!XSanIT+<1M8E# `C~.̳iE*y ,a=1HYdE jC[l|g퀹 ϛZx8+a 3*Yo`^ʗ)1VH=bm2fRcG\/g1Z3,Ktڗd~{xq5X|y2aVas7GLȩݙ-)Gs-iC<= &…{ x>.ʲ'4~AdX1_pb!eB;*K[Uo Ufz6MaHNW+`IExpGY,>y{{;aD6Dimw[P41WWnF,>eĂnTy=L듪%')ND:-ĄAf U8T\6 fئ'RZŦ쐧D[Z/"dLB{Źչ˺;l{`3-2u9H@rB2}qͷ?-?[DG._Й-Ǒ:C0~gV@a-qњ(۟p8m(ɛ~Kj_'GkE/ώn3l ORoFK"W>@ƙawD>Ԕ S"䵍5qz9ln4*b4͘$nq-kvU?} vh$դ[-IR Xqކs!(Vb(`6qk.X4W)聂u]ލde%]-c~R>g< '"YSՌ>"јjlTᓭMKc^n1 qT:ԴH L\Q3p%e^xD^0d ՠ{˯9EjG˜:B[IVd{T|jT},c囿H:r\,@OFU-R*Xmhgc!j!ǜBֶ^f'%LNp %n//C;zbh` Ta}t_xC7Xb0T:VH%Q:(4(nWgI9cU'?cU{YʴNnĜI#4p@Tl,^^\BU 3o8o̚xHDcP8ӊmٞ_e>.'"\VP6O֖~6ҋ GV$]u1K|6tG8)_9s_bZ1 '>\۬y3M! Hb`8DjJo8yF3Ipz83:R5H5 *8B!:8k3XaTE~B>\_t"ZO2H;4c"P)*l B(ݘ-T]ܔ K0(& Q"VXlv/g@jf$=ˍ+16 H>tkky騎+T @^ ' lYZfDFX?ؕ5k\~HծdPmiqTG(kmF!Rũ’qGHh5?kRy6@HjCQp+z?^?6j .hIgCϻ9}|M6#]$Jh!>Qu\GO^FR$!N"brP 3-u{jC9}`]T2T}/ֽr,-&U2`?b7#{ y\%`#fu碗m/\:cߊ| &qm슊:jeFCۿdAAD 'BPx58b潺lJ`v^g.Iv evtx-z"g޳M4>Nk!R(}TWVNͱ!k+!sSQp:g9ѯ++R \ؾqtX?bDIg_D,-uԉp袋!U%AĊrH*\QgTߣ#N2;dydhkgؘ<Q Ɏ&1ZGH `{ͱYPVaO{ :i^!Ĺjx'?l*.l*!v}zÄQvL1@O)78\oyGP}ȯX.]h|X|»n( y݌ `!A;|b<2H1)^(qc#g6K䳁ȵwԳQ:S0@0s -H&+:Q4堸G%EQ;<+Cnj?Y^6hﻨ@GIz8EO"8%VFZ $4}E?ZӴs ٧5"l$$pb`ȶ<ize͓K!:<˒cҞzz[?X%;ÃqYVe[Kr{S"hUF4ȸD BBRgí`KXw0; C_%H'sF1=̯c%B Ƀ6.Y8HB]l`)Q=o4aO)2F=s榌L c:i N8m 'O ~hbn۰);n@BoÓێFP,3 &miq$kYP*G5D.*>X{?}oQ(ZnB3V 3\4pڳ7Dmu{̸j" "=L:SoOh taJA,+ˢ4Izђͭ2W&2k|zau"&~eÐ&*]'Hb2#l5SQ}ScsfW.l~`zcDkK_?ۯɓu _kt<4=X\krPϫ(z`rs9̷ܹX9U-5D/7;H+\'agMdK}|s*Lʼn(g03;| A]rߘ  cQVlx3ncjjg?vۘZiǎ}ڒpwX'oUHBf &^եMD!% vDjj _'h-A)% XMN20@N/YcJ0[xPP_jlH?D:gHlT/YPT9O}Tw?20|5Eϸlǭq>T+k\nwy@'EFYܜV-7np$)F"'SӑFy^G1^.S] josLJH D3A1$:I҄Ml}`|i{a2Yr* Vb'@)j5qgu$k^Ӓ'$8)G:m=AdSfGf6.oD |t0֖ à)xBhKy%g- !EdF@jw;Q#XmQ_WTեy" {kkQϙV͞R-+kc7 )K.؟;s|A;7q4̖hCTwM:`!4K>);T-'y<&W׹tiC ao̦B.R$`pPqJ˩tcHNъ 1#d<MF>%kN  /4RF GJ9:ɢ#E;[,˕%tI4dO: Go!APvKsJce2[24*Q׀U>ƬG8]8OWI)X‡7EbjIrAP ";GrU]IgFp{lɔpH޵([ǞL~ vΑ晁daTz_CU RۋӈFt/ -w<ôK%LHv dr /~Qt#w  Ϲ(͹UK% C 8\tFԡwFdNI}L2tRe*z A&GO\RC*yb,VX4=2 ׈ ]xg y|p/enaJеZ<|9XmL{4\O؏ݤZuzkmUފU= 8jڼ tn/{#7D_ xw'E$µܓqXa3?Vz.&31eHEexNwH/)zg`,' 7 7 wQ_@ "R~ȅe#!I ?c;BYT"溁4jC+ݙ_i<Ǩe bY|>2[B ,HJqPg6t#9C6S-er rJ꺅LݚcKMϕI-5M'i(Ց(S̋毽3QCPEti5Ƒ (F`\OTh`̓!'_?8!69d?9nݰm%L ytpᄉRP4aiأgOoE~?DIXzofMj=3Gu@}U9Yܲ^c3@3| ^sAb 1,pv*\ϗlMZgStOap< j#;N#ڡ~y6v٧ P G"mpɛ]>H]#~ 0)0ɸL^Ru_- 1Jii(USV"j+%ɖ؟*~E;^n).S/Ž*G?B^?o2:[v#k [rt3 :"z,(R,k^xH=iaZtQ(zuN ʏt!=d!%<vGʦ'ɹjK_8Z餕(;KtZ btNh+$^d֦}Bcqu }4,no0T)y'l`;1jV|+NlLrÒՎTp)OGsyٖEn=kk\qɆ|*tu^;u<hկW9UsL)+UqYϯ|)$2O\;4PHJQ`[h

^&X+2܀qub^_WZ0rvGb~'cjqA(Cdp흆A  ڨTE;Ql</n-Ff}Jst~XE+L>O{_Ojw$GA"opSjCea1,"cqBLW]{\wk-Mw[޸Tݢ{SǽZVBFen-LN Y% 8R#J,6JwO?o+~oB¤E.zx9Eˠ4)A 8$29W,g21CXOІJ_VMùWcu*gu+$'o[AN9)ƴ\p8NĢ-pLو"J_/L:4MiY/p)ſm *fpF5z.0-}fe#,\/N VcBglݨOsJ=vT шvkۣ;`m*!d Ur`2)mh95Y =Bp")jD)!%/V*ټF\i%~z2@֛EU'4IUܣOE?r"xEaHFs+௡{ [3Ø=dNp`8h{6"<,1s.~Źzկ H刚,D{2IR)1 ;c0IA`_Q V/c:^2=&Lи!@D#nrf%G+' fiq1@u"]er)Êd{*FaaqšacN=lj@R"êYP>ؠY{vSݲבC 7NJu Q-]l4C#osoePsOSd0p+I;N7 DPQC-heRғ2ud8s*_ ŠCn{"k- ;;wi18S Tm~8YɳPl?@L\b]p*g|uP g/cg^0}dUNk) kRFMhٛdqgI4/+%*ܺn //R5J1'㹠EqExR0)?Ʋ‘OWp.]$𤗤pvjpBcDq5Ӿ>Xտ>OZQqTq.oΛfw5tm%Tp䄫+P sH' hpY_䓢lji:v(%? V"Ufvh/Z+4M(yE0 dL2vaE2[ggL@ov&WM*-rH_3D k1A̺b)߽5D5oaoHfXϢ)Æĺږ0E蚨܅}qW6+7 7i ݫ󻡂>*@}y!ʊ[@@Kqڐ*_D}J;LZk8Aku7̱>R\`<p'0k!$^c%a|ʆ_aGc#S3v?[|7UUxP:/l =XV{2LA,Tli1\mRɾb]/p#.򡷍QG@߿/Z_~ "N v4lj:ksIR|=l#TƴRz7bh YH^= ˾!=] 8!W  k\jE:qÎ9q/3(0_YC`fŏbi`/Ht#caܩvtSbO1,%Nh}  <{y5QZQ8@ gF}Q5o {sR-C !a^98Ap.QR{v=RW;*N %|>{P(l}&:kGc;'ZXzGW'yM5 m6zF[ 6V A"I8xK]a:Ne3psy, ۴ͺ-SfO1ҹAIO`i S<=dr"T |'R̊F}24}# g3X\ }[vrR 1{ܦ8%ckmχu?s&k CxU inZm:ߊmx-zfo5b tDfr:Jxٿ# D?0d\Mc3 JdAWuvUt ,4sDz@8W&@dǧ_u.fL N?{/1N).|iE{Y@OrQ[lwG6^R ~|Yzª Sp;a4.YГZM?ZGTDz\l/q%3[h>> 3/cSf-X6ڡ*]@q }Lڐ޶ؐit22*\16N3 -Q䌕!!nWP1w5tCcA8=4!+-i̓s1%Ɉ2{a`oۀZPoǺ$vx l3J?  hQbC4fj6մ b2Ul5TQC֬`ܸ)=&Y Lm5n r݈ҨdgCw"Ld#sF޿qFE,ϭKh;cxQ?4#FEG/dz:D9֞r@HŲ%˩xW0xDEXA,Ki~-ڨr!XPt` Z ,3zG9%dclB <ԫK&hxҡѰHDHXXK|Gz=rىGٖvtZX"^%7$Z:p N5#OrlDaU!k:QIA|Ag,`0'k ;/:8h V ;`F|,)L8SX,(_I=/)=T^dԮQT"郫0,&awɔȚބӗx>I12D1B' NI6MKݣ}[Jc2.8u`bsz3MGE`/-U|7 aZj>ۆAGL诩nNLu_ eE:aMW23v ҝ!K2h)ȕ{,*HS7)]{2v`6snJA-xb4$d* XYs8>?5o*k%au,\:X. +nE2v6nZ˲='vG4,Y#ƀnEwm1HL'?̹n7az jU ?=o&N[j*,$$r <^00m?x egˍSõ̆<9mg-.| 7"y tU7N QG rrNզ)[=ش&؉tK_uZ㗹RkStdU4 DŽ=ZAɍ:Ϣ҅_ JL:h~f2]eox{!6Z%?[xjk@Y?9١57y-v !q'㎕KS \(B3^BH7r¸6$۽fhB3eeEwNF*-5,f*?tEfa'hf4?1Iڣas{P:MwԸ%Z:辡0 AdMzZO0/ 3C3)ez YF"z@,9\OȀ=Aa̺:E RzyLp!;-wPf]c* Ò nDl:N6byW-@C 2DX .kTņ-ڷ?ȣX)-{'{6!f&mӑƁHv^5jC5%Z-[\a>Okg$2V]D( 㐢mqHt}_;T'Q>,f#p „Zn۫g_ Zo>u֭fLiCkTHĹ#@$g # \@ Ўf*U(,xf4sbx|!^#g ˔m w;->٬}BVihhJO&&4xѬ>6W,ZKa*[KieģK&IRPzIs=yXr)Dҿ@@7.P@'>W $1EۖhBH 5[]Br*Oabb+Y;HbP'Zj@[s!Ȍ8nZ&،ROԕ 䝍f|< w둈R_Tpd jcXym%($] \|D2JKVY=x?NOUJKZ+=MAϑE@qjO0ZY%JpҶCKtH*O8{p4PS5t՚[,[Z,[ H)mSn_Ao&&ԨHzxZlfʃ&L>]n5u fTLᲷfͺxȂ'-CPެ$cTסonq -4 i XHW*FJ0} p:9G1po+LV"= x<]P{E6w]6^B kHf7Q?bNq-X>g<هbg?T|');]8bCs;= %\)%_D W{8q`5"@o6dz 0<}V ÏA\<B$%&Ci[vsnoxKEN2r"2^z=4^7u~Ɲo2=2JDm&T,8,[!{|jjI 3l$ dJmǟG]=0zͯ/Pvd6:`Jr2WF(FAYٲYQqF>{J/ݬ@~:+亥֜QW yEo)RHBb:n:XYLzCw4|Ri"kTW. -ml}ML5 HRo b`[ ;8o h5q$pp=ڇEYD$`\¯M,xAcW%! *[˘-F >,lOsn\ps!fjƟz5|iH%N:7eWSZ8 x#{&M0SO1&Zr31R"cTRIeja۪c^]H8E6ka4W_pz<\#QƱO$\-1׊]?kCF< yYknKO [q@~ZAޗ4́H9>ĦAW ɲ/6!!M`UP+On B~(xP +bS7!q,E$ &ɰǟΑ|Y Y¢af5 OTk ݳ o|QTh^ f# &wLMK :u4:-$[Yo@.6 %2(y~׫]81./=ٔ[8I?snLA">:^Gby Ԅ\xʑ ul?_ݬؓ^`vC餯,͉ʃ= Ml$ӡZ~TCpاB\XlN@G9`s=$0h WZ X`Za)(-{qm E hM,\݆ a L;M0i!-C#0C&k 3T rZqh\N\>+nNʺold|0PR ]M: H.JK;Ч.A_;d2䓙oW."BO]d o~x>K#b%#,Hąb{=OaƌBI쳚ڣ֟])L8+&O@m agXѻ$U.I,'mO?m](d^rE!s~ 6'<4 9"R@pNce .Hd|{me VCCӥ>0[%iw2J. |e!liuBT$}ɏTH# kF3J<ĥo=#vIGbHZ@zBW-5iL/iZX:nj>DU]?Xw4՗'Yʌ` wGMYbHϦAe'/(ߚz3oa+˭Z<._GA" M)cNEJ+rB zEDi?J=R)mW5 4bG GItgIXeE hv~AO 1}k9.9vA EMY6'^퇡0\-{kjoǧ{l7+u"Vbn:<`sNpX KXZ~8% ?UGBk7 (sibA 4]| MQI~ )KıNy0bζ~W:dߊɟ`: Tiz;#KMr7tp h1c%i tFM#qaƘ/$%4$ږQɁs(q#D!7"N; k;I% <כg6Z%7D,Tl_B4ft]c*N}?76#8r[^iN')h-x mЧ"ƀGnz6 \9GօGs.7ݐJ58.4}2M+C*Lu_IF`17h8YL1ME] |oFLpwZr+?Wf•(yV͏5Dlp~xsU H.~$$ yZ@1NIChEJ)T+6uB;s_˪qV}#XEQXC,,ty 1CXXȼ uNKo֙uCnKR Xb*-q|ıʘu7{ֶGOEU|p MK #NR.|=QLʅyF7ԑxMLz4zlB[#o8iV߶]`hfGC}͞Mg1(vXY zw?'UyS:]*XmN_T޴' Y9 iNS*0D!z6Hgp==zKT{ªl&Zq2ƈHה2Р >l-n{)5 ׯ&j+5y))_ROaޭii-:{E]t;` -i߹gM}Щib(t\*×.KF7_C8T”E8!,?f毑+OYe.+is#+_+I6a='d P c 3+ l:WSDZӔZ [ ],+9k3UFK2C;GTB2yF0*anj2ѻnOK03|t\n [HJOHM[9WF3&i\ܛ5)wo8ƪÜ:B[3& (xև,tP0/][Is3VknC}7j@{<Ƚ ā~"]?P`HCbċ,.A0[Wvg8Ă"DEkb|y@8]ъq59%w Tz+Oy+hS~0l?7RfBL$b.#Ct ԕ9w52:PsYY@p EDᭈ7H1%f[_/^Rn$Z-@;3f9̾[j ĈFGj?Qsx6ب@gBrR.G'QD`Q}K'>PaLYAP۩w|:#0I3tj ^ʛ1fM)]I7rECHdx$&/Ȏ|F)Cҁ5b,aflhֈ UlO He@H7O\.teWZR6iEm'jwPiO=>Pr7KaqUx,lE4ݾ%u`oqt:nKQ^34YD`b7;P#YvMr(VOW 5F VQ\qMC'DbZca^c+7ǀp | 쾱آ5 J}R,/d{m3RǮr ր$1n3 _'ʻ>cAQ% ÐqW< E坾&R+BZjGbe.N(6ŌIj'$qA2YD#WKc (?漕K< <{QxY`U䙭%|>8 Qg'L;}PnCDst'`䞷qk~ ZF,|"agSt^?>zp3pq{}keu=ukj;j|ulD9}fףn3Z6Pgbj'uq>11?NSiVD 烏!u={ bIM%ʄ±\ꟑ*&":hbѩUm$si`]wU}Td+6bo2)r0k4.oF=DHw[eoBYp ]K}`ި%4 C^<;۲-WOU$befŸLZ]K{G j],QTzģ4?X! PEkEWB(\(xe"0gH;¢AȠ j"@JLYV" 3rOR(aiV ~K6$~@(&𖵉ءlX'-njS>1-[ԓ6Wk.5}~C 1`sԛ ,>ضD"JaRO_-<"Sެƀ ڶ!U?C{#3`|Τcu`C-NuPep`Mp3koV"P$\D  3v] $Z8Ym¨l$S/AW8J%Aa~:?No/iNٮ~ƙAZ ht1L8͌3ĝo=PR\6t{PXLl Ͳ4!fԯcp09Ѓn#\P.iܖwLt[$eM)VR1 VoAeN#X|(oI SvFXZЖO<(FKTx ~_}_{pmuDr"i$\P'!ݲaWF`[KtкsXʜa}MܵG \~b#d`Ar 8ro A}'-tepz0\0\B9(,q3i(?mn6 Gѱ8{%01BԑqQ6+F*֪ˆw!kMV.D+]YL.sư3(iÈmc pB6':T1׳ksdr^cU3"j0MtJK1su#RId҉a&-ng"lxo,ctjFV`^" Kh,[ A0l(y5 7Dx_й|Ŧ^r+ C9*I3 C#2Ug*KúFWOq^Rp&|d? $ބ>;{ ߌS3~0L"!!six"N3ěn}$M ]&$[`m@iLaI`uau0Zm@ IԡM|MAu“)9F('W8v麼D]A{9BAso50\p0!ͯvxԕ#]6˩)b优U.c/d2 Oѥsg (d\PCysyAS~eVwr7i.f̢ojՌڙOㄒ'?e)Kfv:+Rc9e!:DB&m J `-Yĕ| ,C; o!ȍݓr[ב(V4*iEu .;sFٮ'eŦt'O:"2L}&f> 9v`sS] i^":1aRfX $V7$ӷljѫyl5*!JYVO k_A@93x6,fAՉH[ bJ"!lŖjp8btKh!$K[_equ9ұ>a.FOBWF'G]}/ְ? ]B'R.4Lg3t_rjI)$t*C0@XAq^@(ĺ=C]Tؽ|/qbn? 4 bn*roNjŨ݌B*l TK;D{͍t.rzxn܄w{bji;x )N]8fX9=VTO 6 bOKV'BE\co}{l..VţU""4Ҕb3}?n?pVx&R]#g jT[ƀdwdؠU "l8 Õ9t$?Һ5W㳷*F>U{m0:NǑF'0-ڣpujeavb'SV,xV`Wu7RPH:}۱/A 8ZWWrs^ Ex@8e3i|fL.3ΣL!,s DMwSXEsM04WRG6['vbLx?WV:b!P·!PZ3{'2;/$.U o~s|.hQyɳE7VN4 }~Ƕ*݃ v޻fg7p7Lc|0).p[)~Ϯ/u `f(^F:$ƸĞm^ G' N],~_ћ+72xL׽G#Z?k{Iy,dOn`N3ܹn^ˎG?v+n-b2߲Qs,px|G생N/ y<l"l"v tJMރ1SlQJH6WRU`9#v+q>?RgYzlǂAF([~\ܩ9yx<bp4 ù]Rߣ8*qřּٙ `Hڒ؜/Mo8^2)&L\GBmsqHtjNn`a5ɇp^+ :3!"7bٌJJ \H 7QzVoͤI)T[NoSm Y.gD~HvJ,dVʬ1; Z&OPX"Jܭ+'$˾?i=[øBZ򢯀W'-: Ƭ&.G1 ؿ l[f޼Ehy~kϥR4 19Ax i(RB$՘[e6r૫:1q6jn->[V ȍ{ɋκ[yfjZlzx r"r ,E֝XP7ANgW #!_m0-v _@Twѿ4ceģHX*xn6lTn句 7Krj hwx 4/Vϖ'|ωoC yppFZ!{*ߦSZ {yqqZz>*L@X1r&tdqt!a-\ƞ04xǫqm/7*OmpOI f,& ?BGwSXo4a<ۜ|+ad VZ->֙J8ƅ/ӗ.z^~lMAV#6YL:fIpg]2ih<,Ysel)w%;3[eE4?JNǒݎ}Ɉ>/ fM[nԃ2^{~F&~L 9uz؛ (\odb$ň1F.yL/Z.haݞ0;j˝lň+wNFVeT] = aߗ0xyV,zMc&tkG#`$A'̓ʷ'l&bF@M|RQbunfI:*KlN]cw <[+ѳkric0h6S=b+ZXʽzya52# PQ Ǘ} gtBtW5#0y~DBX|B~ $<i;+"EC#Sl4\4}˺o5]* 使XNH+le[[}YGgNMXpod-kBjjfJ%,?^upo|w@0(fG J6u*fo=8OR ]LgkfުM\!L2|u jaexdHrҎ:~QR09R Z N?E3Txg}*&ٺf2\`@,~;ܠ{q[KQ0ݜe!ehaCثYWuxx8D9_"y2$C G2s4kIBt}-fd5K~%E]VbsG>^E JjXHchHr ˭jP|s99kZc7ٻGC;1ƸK{Jdri+5H7RzLH&IQKy4H(^?y=k/wI@#M֏}]0u\25fa PpHr:. $l-l(w2uy# { *DܤW?ēB-=/4q\/T[1dUמ,Gg4۔TT) gtwLjTD?ypW3nتn)5/Oq혘Y"i:IIՌ{p_ɱ193wΦIM` "b7t #ii/E,uEoYpz8*WSSˋ]2@qF  퍆0xbU^! ]  Yxl3^WC\E&JG;ͅ y7!CYɂMp>0 bBVͲ%)Ngڙ<'V W-J͢aBԡĢ/?*iZT:f~]pvXZ+ռDPWPu\mٕm=ݛ|㟅M183Lո:wKr? X=C Qiz.MFD+LЍ/@T#ZzPF0aUsCߠEpu7_$2-|Cl0&z5R1FiQ [Llob$ZFi|b&ӅOc&XC9\~Tw@(σ2n' QG8nn M;;qy뤀/o&b*- WYUyonc_=ȦјY1YJXt9\ /̐`&w%m܄OhLJkC3U'\z=ʤd ~X=SW\Ue$r6GrψtG31LK}D>>ab[&}jx ⚁^]ELtC*M;L{'Kܵ~Pnu`qpLp@ǿ Fh\YA8 ޗ-h;hlczJ݆h?ZnuWu!SՖe-OIx_~o.1)tJdՅ!٩Ne1MlCP0b.C(yXE7Qߨi 4O5,vҰ ×rp(/.&HKیcܥvh'r:7;c٧ @"Lo" D?߱W'״^wRUT=Cxv tk ]PN b?9]n;tԩ'.=i $VwLOZF#"B99.@p \T}.s!a)f7PzCMC k-}M]e>ďΌ@LPy/s;f9zgX%Fx״|MO5I2N;M1P1bh#mh 0M6qJ#]|g2SurۼyLF#MPP~A1)ljF6IwfTzؾSq07$D34^cotچ>nԋv0s‹ga`;7@Z)˭U0hM$`ycboI`0Jk\|!ZؔGR/k>?Ӕi"s[M MX0Uri=X9ӧ47ɝh>a]ǡيF;x'C$ x=ə}P*ثJE딅)?ͬ2n9W`'..I3/ *]BQazN %{`c&(]XW.5a[|ƗnmmcAf[uѧ'[㥌efǼ=58Gt ͵8VSB6qYI[r@+*8H2+忔S 60Q!c7B j. 8L❧ET5w淵ϥ4اK*nVUНM\ᖽDLåm9!$lBu.0U>CվQM=!tP X' cqX8/JmUz hs(Nnފy#sT~0/@Q4Y7:tco}nČ0 ,><^@X* `\줹Vv74 l4iױ$=>n4n1$*`[W)}~=/e*GmTq@nOPrraBncdjiZ&HR Mt˚[Z we5 PghT m l`ߪxeIWwj^d.8F LdYQн%*GqIYf2e5NQrO1#+ݨe'p, T{)7)ZS,h?.Ax©4Av- 7h-LΦA'4~&"j]z\vN8M)6s轋hZDU-+̔lkQnW{᩠֢,(#?|VWF{;nR㵨r@ nN) ] ⸒B\"No{Ac.6$=_Go-( `*L ܍x?}=5G:,1s̝qV໏\zEZ};|Uf l.H|S!p] C Xw]W;1дBtt&_5S_`90ʆ5Nlhv.c1ZwZk/wMNôipCBaūir',P<#j~GDcdV 06yxQXY#CLs;wC9[C?8E0v+)rabo+<"hU} S{T s';;'j*8WVT< g"))ԑGr3;b5SrBb^,t@@ ,JC <^>릓W26yyRi0r90W=~ j[Mg] dSUUAjCQ) ΋U\.ibxQD7&6~@4=1AM;6ψDϖbCAt5AxuwPe";* 69f mPw>Dz_=kzQ aG?f݌BlW8*0΋a.U=iF)H~Zo3u؈KPj^d'Ը?mV/AsT`,zm[Ko2Nܰ78T,%McLjQ,` oڅ:r7q}h"=y|.yT6UM7樏4CxD|AN6C;M2KZ B$fG<bH}sG$(8p8iY62v:h!l=="eK.a/fES۴ ,k)'HgR{#q׉FLo)qTa(>q]-qg\0B=ܳ95tok*wP']y!lha6ZZj|C[+aKrp\W ˜Z렡J_ìGC/D mxlߓSCeM{R(ك*w_s:D VH^kms8k\F'/;z6 1Ez=w<0s&;q}#߼o,JG\Z($>Q;hjCp7 5t-6˥qmiv+vS!o&h[g,%֯95md$h* &b@r]z3%3#(@;JJ'^nKbÝǟs?"nOб!xOJ@%uq9o Xq˿L}ҫk^zJ$!I1I>y[o yQt"M-517K7>omQ GMx}-+@dcqy46ZeGϊ\m'+NG'BiIiݾfQ/jC邤n Ƨ9 &N3S\ӑFh*[(*Gn,_@V"`;ZGj0J:ȰS^j-z8e&l7$}k@VN%sN b"$ѫjiޡƇCg'5WI)Ǵi,nSm`dl.^e vF {wr-t'?'+GU0sCMT;-g=v2bD~DB5@_܁$'\߈<3ƤؙDy[,qII n/HGgp%r5>eX=i5!5Yvf2Ʈ@.ʉ\~=uhpZڽ(exfcN!<.^ IiW?'>u,!14⤍}`"V2)kZjx)!40_4rJnfLkx!x(4k=]!Gƞ:d6m `x AJWpDA8L^cV(,fHQ(ô|rutM Gd C;zg( XhcpwA(-bۋC)_;Mɟ%t ~oWluh𣧂Vók|E3f;u!ៈht""PGԭ#Lv3.î3*q&.~99b;krvA,.&+9`<_E}g3$p-m<i(.JZtoW/R 1!شɦƍ@b9+6gف1jcK;}iil L>Ҋ$ɯX)^B-l7LV(ǠgIg6țCl{ /ie7FL\b#碃}8m_``\@t$*gwDsRG̼o j>ˍʩV|{` t'" D@._?nj0VxOXG,<]w9?,Q`%eL5H]~A8sXbTξb@MX&](>/>)x[0 Y,Oe@-~`ڦȆC0)!Sʦ)l8Ϝnxۜ^/BEouGh Y?R)(F+_$ {nK?Fb3} 0*@~{C'@T:q0 7ZXU/  >goV{l^{'C&)9T1"Eqd"E9eZV( KzJd(I3X{KlM];%s bTynZ jjpr'*g6)ãt,D%-{_991lv E@rsYǫȅ{{WTZ"0Xo.uFm\F  Q< q ጴH.4nqQ[fȩvDCTˡ7d<=[#V(ʛJ)+h xR(&,0K6bwL;-jA]%T_LFz1:< 7 j.@.Kܐp.q03 2>X,?lpMpU63F/휈zN) inFMH7ohO9+VchU 4z@FN<>P?W=zw?zG!0Jr"zH.>XS} awRѲO@3iqe \ԳopS W+lHI)Bʶդai@OB? "b@m2X&D┷ NuXO[['F{''78%"1XM:/Fi}~EJÂeezMW*ct p(!:"jT#K5tAv{8%o7n@ ;K*qf)^FTeeF#r"\ln5 zb/pV]IK{ua9;P6j s9r &z?IfrRj/yJ-$T~l2l..h(eCa {11o@> _€[h)=RX5WMLwk֒]*r$VQ)I(m]I|dVi]]gMo,E$&\夌'}pѨTyr%FDR" ]Ҙ(fSyo.SQ'<=CjjWKL΁F;5-# f^pٽp$٘>`agj2&C%{XB"@\OǬ;Xk2smnCH *i)EUuPt)zD spX&ֻ5 #(Ա*mIZPǏ'N9Lވzb8eU^Elx\zRНjځo,&#mŲJn Pj͆jL-V# PK'M?QDDP&YBBe, >ǫ7 G'cP9O&?"fx-ܔ/y<+k]SG \\2cFխ8M$^ڎ p㛹t٧ƞ9-Pg`|~gE}^6uEOyXxtG\z+W3w'a /z)i;l4u-xs8IJ/E|@4C}^1ZY:]G R_]es feJ&) n6әo-8@mV뙜 {mZ[5Rf A΢GԑšG_huUyw|Qf7샻B']Q71{7>@'U`bWo%Y7ݞwJuJ8ZCĈ?(⍥WQ2mP(Ĉ<@y!{]s.F^9$Q|o  `.V4p4Vik׌/JpB*8 N`XQ\wnI"{b@0ڭ٭SYҜ=ZɂW_LHGe%"_dݔ) *8[–$¼NV[ǼySxS֓@n(sKYz 6SRWHlЄRW8*oUL@ǩMpu'+F@K=YpZ 7dw!Y|ȼ$?ʲoO"Y!f}j@84?KCqSjV9тUs0=7FSNNv)¯|~t%\eodCy6q*-T&C{I*iprBǬuMGwAŒ rYts!W+$˝X ?_#YJ56aTBM/1;%Zx- \}UqVmn#aN47_C ia%ȮBh'wj%vF Ңf#p@[¬wȫ. (%`uUM8)Hݎ$A]c GH\S,~~\lJwne_n=uߒMPɕg" 37O!`K-F8Gpߩ5Ex=V*=2/e;lS_%Fŧ5x؄,0Jr RSk0*evS~=: MQz-o1䢧I8dz݈M"k1(TWϫv a!%z `@0d"2$o/JHE@ qBۮY.pW2otA#9z='a-;FZx.hOvavW}Vo\8OEvaiWELMyO=4a#xxs-񲫢}h+{'3:W dt~-Qi珟Qp`W5A( tCgB6Ɓ}PPYCaXhĐjDd6 D{-^DH6|aZLRN *Ì쮄2 oqHF+0ط@)7YQ;T|D)q>n֥5g6+LM7H XޚƳyWH\%1]!s&վ<2V0ˈ8WW /cXic1+Ej[-bײxz NRk(ny% +\ܩ;wvy-aR \G":Xq`J[o{^_'FYR|Ԥ54+^#O"27>}YMnl4~8.$:3Vy=dTȄ}$d&fӁ0,I2_rxxir -xBLmp ;\5ȵޢ ڝ:j4΋ۆ&bC嚢 (~ϐm޼?ևoRWd>+[uk]VC_ @7-ʍ}2}|׿e(i}׵j!3M:1EpRZt;e(70cd\ T}}|6ʞ~Q`ϙ;8j% ۯk9]\n1v• 7M _65d#҈np?5,d46\L^J:}H.~ĆQZnȫ-%Z||7װIłEgZ~F87ԧF]Wvu1utn[w視PԼ_l"Q/⿓݃tp1aau4y{%Tj &Dҁvw@d?`brX5"9 c\鰈\jaS_10u\b_@/5.JJE⣝a SEуH뇷zRm|[_[X \h]`[@[ 󝓲RWSbs(&rN3Pެc_;\Ao؇jaPZY~RXJ 3ӂk) ]Og5qGdԕ³vT>2\$dBOlY`=FSCB 9Dwsyt!y4#cՕ㧞@j2Ie9tx>җ']^Nf_.{V)}f`Z'bwuO(=]`>Q zvpOeoXhygU(W^iXi9Kv7G I{`xeF#L_ŅY$ܭg_YZ28V̚[pݘ\`^)ig`ܓV5VC*ܔ( L~-h/dž! Po&P{N74hIph}U=Xdx?&NcNLۣrXeӬwDw@8.h*Yj\K 9@:u9u(-l-RaonxeȁT,F?3v;9@ktWư;?=<*6  N u}dX˟3 #By,es`a4Mc0]-"(ʡKYYC]N:~N"ѨQL5B*IFg)nC]m[ZkKiMDӫ:Yixeu4+M #˘`*\{vԟ0sTm 1Gx8"RSdvdExuo͈~/O{uJR/Mi`0Sh}MɩvB[pciW /AR}|)PMZ &G jcKC^7uZ"y7.ϬD?fy˰;%#D/A}47 < o呂c8:bUB[ab"QMdU3-Q*5%JN B_#)iY2itWKYl{]XWAyy+ Ӳ-ո " eȡi?\$+3HxAB< ./ϡ*1m3r[A@p۔A~!Ic ~Z&>Utx߯xYMϸ `q{+ "^6b/(;+6}Wr4w?ƕPax 5za߿M*As/f kT ͷE\mEao oݥ+ h 7bW8)'` ݱ^*KNѥ?߁q^-=?/dB>p-S 8 0k?>J獏Jר{-A$%nwާLɨ8].w Su*Z}2͹O`ZM"1{;b>Xw&DzUK:$ٽHGXU&lFbT0XKAe جL9p9{%#f1;|6ʊCG<Jܩ%I>dp:\hDv NmAD1)@0qAXwۤL>c*uuѮʇ ҙPrKiy @;j&=k{?2H5A2t.ҜwD?N:>{h4KdMZ 5r;l=Aj"s<\1R/WQL/S!@UꁔI.E&K{hݒ B.q_AJ9V[ d&rNgӸPkL, 3t#tcK:¸a5,TѸ9!2G@sD:W9${~3 %Ȇ.e4NH{ݭr4+~P"r$|1xLv#GACtbû7JQW\9 RV7/,Yz0ۯųZD_Ы8',bj](T16'U;R0'ht=n8ПxF,_ʗnY0UWip3&,pdkAboJr*+ѻ6{aL&v`̛hܢ^"4TC#vA׸P@^qZP>GAt vZ{){G/FR-IfOߵ+*X-e׀%n&fOF#?y/k4=h2wGu"&=×NlU{%zǥ '2قFqQ{WEyezѥawU9c^vjU8=7z-aF߯%ܘA bwΚqj1zӹR|u' YG=$V,7pH_k UZK+RYpx@ ÖjP6 :=ɢ*ȓaE构I G?.Zwp tym'w4B xҾi9Q)̼vxB}!2UN5ѲڥkV6.bCU#luw'y:at\~HB=)KFM?w:LfFIgaSa*~7G{LF,-{ f+hgq:RQjcb`^@)öZPIAX2/2&MLAm‰{q8Z%ԴF- X4b /3lJWHܡc?W&f{eՐR۳GhSs`*߻ Q=_{_.S0^9oÜU$eeD]kgBhPؕAw8ke$d@х z@6óxq9$hcpM|lx\7FnkMMF#CIdszD4k}1WNn"Ҫ{vrE^`#309ܴO^'(b5ӝQU?:%" %$c~gkZsJP T1y=dS=- j;7]~0w'lG>I1(m$fH .(f[n HM 4. fE=)| M);^ƲS-âXwQn~BpᆃǑ⺛08jD} c!DŽ֪®V(}bpenG32PBU^q>GCge~W9iRu^>sixTn]N?[ /̹pQ2>'uObd7UoBiAۤ%EUJL-qA Cn_)s9&yfZ!$bָgF62r?{zvUׅ^Kb+ǹ/xE>IF7xa1:f^W1H<пgVxXn4׻0<1ߡq;f1H$ U$cz= ~Q/ loh87 Vzxfƨd -r+Z*18˭cv~QP,!*rԊMwL/ok00;4?{ ?OQn3*#7dν˓刬rNj ၦO*WJoAhɭgXemd~vS7%"sZ ? /:~xNK>1&C. ӧ!e[:cUChz}"o>C~ɤCn='M1X5#v6I!\$ ˈt`}(gOV頋8J0un:PAͭNλ O7/6`ʓeT15Jd^&tՑ hj:M_0dnCa߅a?;EJXvPTtsIr/- gղO񎢄 q޿hUj8 4'A?tzt~𹶅me/zK]|k5cnpOe fXv/j & ǵ1g$Xaj C AWRKL{UJajʅ\.nʻQcRvpO:BSҐ ؼJ9L;ѧT$+%Ӫ1/tB۶/IgnD{zv'(ʹQI.^aK_cAyݙ %aƙ=:b86$Ĩ03 UF hGFZ8'4ڣ-Fplyv )GP%yϒxq7I-rϡi~DނT\.lbf{zmM6e4n(T38g╖7V}gr6{%!~NHVEJ@5QhyEQ1Ʋ(slBD=i9rTΝ.`/Ovf4|3Ms3rt@c^EcL\*1M&LJ17@Af媤v</ [AzF ]'r}?b+ fP!9%,@n͔w'Ӿ 2\* N*t%jl)K?6NL` d]4Q39=5'YxHFd"%{UԔ MNPw%LM^Jj1`j/yw> 7`6>7'D[LbRDs&͎42-HDLỎK -.PDe6-OWdᛒ]^x%Ϡig u_p)QpˑC#ܾ˨ B+(n\Xl=12zLNao>e.iN4= n&)h{N 8NЄ>RSBb: ?I2tlLE{ᎼNWtpd0ڎw[?sNꉕ;_ ]CS9O|X}sSj,8_Ocvudj<0kTv&I1.vzG`+`4/q,?{[Pғ1~]~sB=S@}g&6z u5 5.:̋|]r@,}:.57J1H__GdJ?PyKH)Sh1&f8[&&\%y᧖lS祧ցe{LdZDm:Y.ak~s-J%~q"nϴƶ'bB^OF}u:bЋ.H=9]*L$v8dY-3?#kWMVQ ݫEuciݱ~~kPIY)Kj\VuЕy > Ӂ+T q1(ZP;5swkOOT5#ֱF5YtJKYd6ף!-U;P=K0 e)c{PU,c%M/3W2oؾUQX({Sw`ƭx#Ta|8:ivfiߓv@9=ZR-'q5Xfj )0D|"vBu!r,= 'q{[*.{]WwayZ@XQ˲~Z򹽬&H-o;rMZTikJٓ"qvh-NFl*hijz\¹{|Kr12HQn0꩘TUsup4gk 2lF2͎D p8%```VڂYoUSa>.\9熄iF /ٵ2=*-35},k.9i9ZS0$4Pbg!Mww e7 `3N9>^χ-xh_<,Aҡ~xeˇvnkof#h:VHRȳs\Y13TnM;) 4=xj@)vK}4^ߖS18;_rN;w +afnG>oH-'9!ܖ 4b(\rlsw*?Ef*Q*iP,wez;=m*; O]n%suU-I-J $ky^Oscc;jw\Wu&xR>O4гΚx_ʋscE{C݊%@<7>h֤#>CSMY#4d2[G%}^'Gd0P0iS7@\f\u:w0]F%.-eeWB,BCZ m7<=G9C&36ߵoc&,{!cAک1 =Ih|Ewwl(ttT j%ziv5+dz@P3G^1Rra<}[P޸t8XψԈ U!WbR'c1=n.[mIRv)HXwZn3Emu2a^V 겆fb0bGJژv҃"= .>!?h˗ƹo,Uq~q[46A'pwN26+M\r pz>M0dMsqo Nʞh&OoPJ-rV*J߅W3>砈K RxͰ:TVǣTxW,$N~np^ h!nxuh%LG|5h>W\nZX[ќ N wH;$^vAvqI+Ao!yx)&5%4up2Bb39XreNՉ>Ĩp%r.Q`DkXyA^Qdc1 l*J(]4#-rQ4o|* ¢3^.*<?8R:GKjcLÖ(̟,oV>߯1+NΟxuyp5-Km 7Ogs8^et`\I_UUXѝ(8`K/ ZoGtvk 9*YL|hpv +dz})CaFùƥW}@lf rK=ԴSs2ӳJ,^Ǝu;cZtang6t %6m8*Ιԣ jڽ֌;C~WE: W/1x9+aoZF]㱷sPmH nWD>kiTN-l⩧tn>b@ .Vw3u H< ?@߱E6oH*f"`4L68",Ng03A<<^_uVPw,~ꢍO>YQB<mSBTR%Ͽcٷ+ VBč26; h:Mmw|K߯[(iJο1>l៓6ڣ&s\rop/{<ԛ)\Ԛ hIo׀VAry?YҌ<3 g[j rNԞ?Nv}VV?O3=v ,yu'AN@,|UHgk\{X,(S+pgu٥ 7i1]ln9Ybe+eؐ"[݅jo2҅^'$ٷd׽X>Gmzg DV^bPF}f;5`qX._Zc2i2ާl1rL{OxWӘg^`@b2(3 m<AE('vآ1\a0"8[ȩE>\d$i#OCQx9fL}nXB̯),iB:n<(< #9ss6T,%ʹ;]մȶ&_1aMd}HĪEVl&=يPD_,o<Cj:Npu,y=nn. 3g8 O/1eu㵔 A}<6-PVI@=|#:vx/)'_A(+ƪ@><'&? KRRyEՏjlg: ppNǗb 0`: `+LQ] vt2Jݧ'u>xuTkwk+"BnLQ0~Sc\aXc;F>QTE"H±0,5@g"OM.1REŽ= ]D0i7BxV{9-ٌ$u W}@*y걷OsV3xY 4GSq/$$c1phh俚cWn_9k辟`>ϴ)J|<,l#}Ӛ;jWp{#.op~aɽQR6y i 8L!^֯-~J<}YOzWA*;8*Z~i$x}@zm Jz2;3c ?-'6 m MϼjX57a1XAЌ2g, ,VϭmhH<" f"'@t {!x}ƷWx\Vh^nZ_THnxç\XZdUէ$V59iΑRN#Kbj&.pb=*3%oQ'vH75DǑ}hR_ZR#77FI-DZ[Q럣]ʳf+ĐHzt123.$}+kys_p69E4>k= ~slՒX LnHH٣RP<TX5Sdnh:> c`F_먳ƣ~9d8PSzϽ#Vh[>Zmd`U1k[#ӑ.a+j[~T)E^C/xйg'k(L#>c 曰ne;Hb|Zb&^VdhDDOf\AYi= XrKLGa=h2 Ҹ|Ufd w*QYVM yph_1r"ij-~Ε]H_o/ c }.}GQ&G7|ـzo~eJoЬM#OH&4&"&#8U|X4+?U=3,BiU%P^<`w7O u <>;(R t;ί/M!4wFJ]#7pyCp]ƍhA%-G ;"]ՙӑϬl5S_'S'U_dN3v_d'VVuH(26P5ƽ!ؼ158D&;kCs2 ;SW6Ud3ޫ8D ݷwOb#4kRaΗa.K%] (25h.6$cgcnWŻB/i r 13F-;zt}4 dB}wޜo娒3 +'dmwI'3i!ד0~6\.s;pˈC Ozh<8#U=8l]/ShJAAA=M*.4?jEѡf4i%lTbIͭWpz۷q-m Ħ10bMh*_S6bM5g9[s=\ަ$;?%>_Hu1>_"_k>߉N ?!*!U8t-uw" .U=;2ƬU19ʫD9p OgXel68;^Cʼn6g' =(2Uo +LH=Ԑ(iwpD]:YDMo$M,"`d"백^e3`I+3~'$Q }&e霔0sh0=喧]rz P5 ϽS d !az(a6 <9`nJaRaж@o/]+*7nG~\}NuܞQ^r5K\]of#BhlW'bĚ3P6%BȨ ) *b3֣nSJ9B;vuj+GWg^'PkZk=1r3&r0uŖH OI$R^:<= zKB``ٴ_w<,aZD"TRT;x5-HN9p%*9~>:^w>_m1+$bbY }O[ۦE~/JpC8Mܽnⷵe:Ohx kL,أFI{ v0 ]?h/c;ћj)d~e~?mgPe#m$PcN;faI_dICHٱH2T5"t z8+w*| >pݱG$V﹛BIjS:w?xޙFYh;hXY>6:=Y+iq3zC5 %+ iUdOfW -d>*TBܲ Ϫ"e+f'/xAh7hA~Y?c|;]S |o"q2vwpZN O"B^ Vd+C *uݎL #u"0?IIf9Ƈd 8DU6`%?|t/ύ߀0<͉ߍsc/K{1`^*ϓ9ږd;mz{IJȮVYdtwMtȜgAR lJ"2OÒ.l F(y=`Q$^EJ$),evx٧C ̀6$}њ8՜Rߍ$tH3?`6~y_Ya=vƤ2ܥ2)A`Y^0Owp+-|"WfNPl3@nߙ੃r4/E<, P'l,pKt,+渝]fYQI3@1 {,*?xK)x…2If n('ϤCrwK;6e~ڮ)Y-+9Pa"œZа]e$D3hl1>DjނHl^7ۋ4DFyHB鍕!ť9'}5?6¿7TQlR;;j,M~À{AakINR~E?Y⾙h >|#IDY{ny 6'|6˱ɼz.xF|uM)_Gaw`X|փ'A xIr5yﳽ{7K(C?oxˊP5n:CK`45;1|B:@M`o5v(! 穧cE)lH8H]-ùxؖ_g[eR/rŢ\ތgv0:CHg*J6̩bԝilq얔'  ctET9{tjy+Rr aj*U!:V st@k~Yțj)P\Ux])Zo iHb5=fo n(̲ J5yUsb@)O|!{R9: ;>e$4mv >`v:@0C%cBKa; dఛ1H -(| r5d&,b/~j7X-1'֘_@fU_Jn7r'6OR0ExB1{F\_He\ @J )JBTh(FoC8d5qO*V1a9+6rt>U^u1i[TcPGaזPAT2&;wY3rYND~fih~4ѾYMt7G^T[ Y &UXZw~yY=mY 7*_ȤY}_@kbc7ha/?60Q4qdVfqAp ~}UBW ¨F澵{g=T7O(Y'TXw$(ʀ#qUe۸>(c v Yg:"tZ+8#.U I33#P=~qdr urʚjzBwRã, Wu^$*2GZ{,cu@̗@ ,W"HŽڸu״cL`@OmU: 8CQJՁr44v0E+ti"Ww!񑎣󴟲w3 7(eVr}(sj+"xYY c$WkZ-Η{:#@YgJ݌ٕ#Kҧr7 sr 7gϭC*+8%Y9̶ŠMZ~~kgů0 6:^0,rxU۹W2A*]Ex=tk|-j2le kD0/4[ Ǒ]^>;#l7 /Ny4Ux U<$v91Fz4n`T)2^ϔZ 5I/|"IImã8#i7;&s cv;Pݕctjټ@6aw0ge镟o5arnO To~sHdFUC8-sw1||/@40arxcHi tкyk\*h@klGh v vznVj?Dݹ?¢kMVn9m1Z))ܞR~qv7b΢Zp|L`0DNa 8u Gk~IsUՌ썒ɒф޴_YO40Mf#vXAċ\B5B9qVfj8USǞ!8}Dlfn& 67@\}Vgl?Y4sҗN{coXE Y4ۣ[e~u0<|߂:ِR5Cap{ J(2*DtRgй_C|z@,r1%Ce^<3Md& 6SzbmGmlD ?@,[ Yu a< t3YQ;g?x?؉݆gt Aξn5"~PȺT<?}")V(X<[鱨$%O)x`G./0a-]RT? ?Z5 ȘKۂ2"'f0Bъ#A}!#]dG~?AteNQt. bٽ̻JlXa @l8HHC޽N,fmB }gҗ E y,R+u 퉑(E%_ ҕg*s lM4 >~_"X֘Qzxf+%NẂ.Jh*-'E${)"BgYglihQI]g7 ],axۏ"Z/)o+z@S{$8x\2bx#QSU*'z7%elw4+ҚL*/aaܻyc2CqHsU.yY -lŜ@NBph0{(Y/19PØ / =͸C!zBp}c@.z|h\LbK}ͽv24!1Z :xqB˻ wDefRcOo}kumzL҃Τ C^x"BPRE#cϏrɥ}:Xzd%suua О#%_rlJvaxκ$mԸ1VOs(ӣYU*wȾL<7] 6I@@-]0*莺Y =K긔hLȻ-.͸!{kBN=2mow/f]`xvk Ԓ`Yvt?Em~ú"\)/5K:Hŗt\_h^ƾ<";#ry<|`P?cj5VNT|X`T78RyƸ ?qs (t|!s&*8A,l/҄$!,(XLlf=M:~e7X|J$Fo3_V [iGQcdB3l~ZUKwaEoAq{N+cޕCX-|&C|)LDg_([aj5!ߌF cXUe%ggF#>zK4xpu\4x$ѲW?xY&,>tg&4i\hP]xQ a9+J@jLض]yR $6:㑗`_{GFؾw0fBF0Ä\ND×liۭ5ϝ"wƩ&m/*n3lvelӈ^rΪr{YBh 5%[=/ޢ:s=QNsߢj:u`:1-4 [4TL͉Xj(F w35cC>Wj/\+YF8/f.PGZŌF#>2AC-(x&T@"XuQSԍu>>k~IS6W{K`H>TSC5֖tFA@Z!6=2x*eAϞI$ 'Rp̓#-KE!p H'^FkpfsjeBB\}Ņ_8oec쪺$ScpD znHyI@ 5N;L>HS.ݙ_5i̐H2[C6ݲv,9MIz;!Wq}TkYFc:3߾zQ3F*?mogCB|_op$d}Ԥ2)wm#Of1qy.ɼ`d*A ]rOyU{.7b2؛ ۥPXomPH)6H\B:L1< AfRCZ= }+1J+z"UempִJ IsZ&2t=%5^RڣP9׎$I$8}TF跔 ?5o>luz EFX*xSNm^ބU 5|*ޱeZypW@cd'MÙLIx>Q 6 p}CG`QLzL-l U!pdWո d">|Lt?Cx1k%jRh 7}؏"b}Ra[?  ["d;zU0Ԁ$v:,),ZK e_e48eM(K"#Lv}Uhaq5WI<<6{=GCR2)L_J#Nԯ놅gˢͅZ/iZJȥKś肃yްe_!v;ٔm#BY|ړWrV`ڝbgДke@u;e4⁉.} bW:0IO++Ds^D'5U)ń\?䅺x!{eXYcD׳{aK6l|-h!<:aUBk\C>nb Ͻe'-w qW0DYī^[ڛ };{[l߾gUBܩcE(AmGY5WIt9 8yZ>vXݫs-xE|)= +[JGlEbIYqkd@?8fXFGF}F&Sxc^f,WԒ'$lfvRo.ږQAwۖ1cN3I 3s8.v"@قY1kwY9;?;{Yp<̌*u EAXGGr oƹ>V7u(Q[XU5۴MwbÏr)/Tk_wj _{d-eO*v*$~w4׽B,h:ׅ<\A9Q/KU#:=q\ƞN=}{nAgUdw%vU-4A~jŜP=#cK2WȲV2|;\\C(U^u0Ed(5he") FAz |ZcBŋ MB PW{g!_ ~'7'u%h/ Ȩ5!3FZr0zq^mIB,*6ǸW.ʰڏ|4l?;! nZ}apX1CQg$ݚ==@I;<?lof="n`u@s햻1%/=Ppɐz4gXk:QOt/r]bsyz`H3@M@ߑ'Mll٢g>GXni!xgh4 d ysxtjL5t/,-a(Q?D>ƴi=bu)2@c;;KW)~bp(ELahbݬ_lſvv߻B2SSs{^1j!_~jpr#Ko|FVƷMFD eS F%T*V*N>_qV7 t޺s1EW1z(~<@w>ۦ AO/HZԦviJےRUF8]zЙ?9& g^}8~ ۟y| =@DԖD$Tzl ~AʣD=|x-1qe7o[5ǾHo~o