freeradius-server-3.0.21-150200.3.12.1<>,l܉cp9|=^8g޿'%ֈlKO#aoJiEu0O6c<2JkZ/vESN_p*e=FQp#KU.LuYmT٢Wm?ךDQWw 8ieDq*+j /&-I\T(޼k10_'!c2X J(/#+}_{Xi# n4Q*[Ͼq(Nc@յ>O6?6d ) 7LP\`y   4 ^   ( 1 \Č<4 4ҧ4(T(W8`(9(:(=>?@BFGH4IƈXȠYȴZ[\]\^*bc1defluv0Ew!,x)y1z6H6X6\6f6h6l6r6Cfreeradius-server3.0.21150200.3.12.1RADIUS ServerRemote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service. FreeRADIUS is a modular RADIUS implementation.cibs-arm-3]SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-onlyhttps://www.suse.com/Productivity/Networking/Radius/Servershttp://www.freeradius.org/linuxaarch64getent group radiusd >/dev/null || /usr/sbin/groupadd -r radiusd getent passwd radiusd >/dev/null || /usr/sbin/useradd -r -g radiusd \ -s /bin/false -c "Radius daemon" -d /var/lib/radiusd \ radiusd # boo#912714: add radiusd to winbind group for ntlm_auth # add winbind group and fail silently if it already exists /usr/bin/getent group winbind >/dev/null \ || /usr/sbin/groupadd -r winbind # add radiusd to winbind group /usr/bin/gpasswd -a radiusd winbind if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in radiusd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in radiusd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi systemd-tmpfiles --create /usr/lib/tmpfiles.d/radiusd.conf test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable radiusd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop radiusd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in radiusd.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart radiusd.service ) || : fi finQG!" Ok[ 4 e!%hE ` No<w_6jCd "004 L' 8z # t!( _ 6+ lfD .w Wb!4 j E( +JmVz!_ ]O6 F r$N  60O4Dm  !X&  0      h h ` H x  (  H  X H    H ` h  ` 8H ` X ( @*A ABl&17 *' j) E3 p.&!]M }O .=O)Eu "#B:J+&<FF7\n;{2=%F BuQDSk?wXV $F@VRxTkrSL kR "'YL61 emh/1kc_hn  aA5f /n 3AE)lva VmL?J] &!g9 U" S L1<aZ [ 'F[5 xxawwH' [ XYA聠A聠聠A聠A聠A聠A聠A聠AAAAAA聠A聠AAAAAA聠AA聠A聠AAȁAA큤A큤A큤AAAccccyccycyccycycycycycycycycyccccycycycycycycycycycycycycycycycycycycycycycycycycycycycycycycycycycycycycycycycycycycxcxcxcxcxcxcxcxcxcxcxcxcxcxcxcxcxcxcxccccccccccccccccxcxcxcccccccccxcccccccccccccccccccccccccccccccccccccccccccyccccccccccccccycccxcxcxcxcxcxcxcxcxcxcxcxcxcxcxcxcxcxcxcxcxcxcxcxcxccccycyccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccucuccccc^zM^zMcocococococococococococococococococococococococococococococococococococococococococncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncncmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmcmclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclclc^zM^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../mods-available/always../mods-available/attr_filter../mods-available/cache_eap../mods-available/chap../mods-available/date../mods-available/detail../mods-available/detail.log../mods-available/digest../mods-available/dynamic_clients../mods-available/eap../mods-available/echo../mods-available/exec../mods-available/expiration../mods-available/expr../mods-available/files../mods-available/linelog../mods-available/logintime../mods-available/mschap../mods-available/ntlm_auth../mods-available/pap../mods-available/passwd../mods-available/preprocess../mods-available/radutmp../mods-available/realm../mods-available/replicate../mods-available/soh../mods-available/sradutmp../mods-available/unix../mods-available/unpack../mods-available/utf8../sites-available/default../sites-available/inner-tunnelmods-config/files/authorizeservice  @rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdradiusdradiusdradiusdradiusdrootrootradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdradiusdradiusdradiusdradiusdfreeradius-server-3.0.21-150200.3.12.1.src.rpmconfig(freeradius-server)freeradiusfreeradius-serverfreeradius-server(aarch-64)radiusd @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@     /bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/perlconfig(freeradius-server)coreutilsfreeradius-server-libsld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libct.so.4()(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libfreeradius-dhcp.so()(64bit)libfreeradius-eap.so()(64bit)libfreeradius-radius.so()(64bit)libfreeradius-server.so()(64bit)libgdbm.so.4()(64bit)libmemcached.so.11()(64bit)libodbc.so.2()(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libssl.so.1.1(OPENSSL_1_1_1)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)opensslperlperlpwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd3.0.21-150200.3.12.13.0.215.26.13.0.4-14.6.0-14.0.4-14.0-15.2-1icradiusradiusd-cistronradiusd-livingston4.14.1ct`@_@_FN^y@^p^h^@\\v{\u*@[<[2*ZZWQYY@YlY, @XO@X@X*Xh@X.@W@WiV@V.Vf@UĝU@U@UU8U7@TZ@TTT~@T|X@adam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.dejcnengel@gmail.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.com- CVE-2022-41859.patch: fixes information leakage in EAP-PWD (bsc#1206204, CVE-2022-41859) - CVE-2022-41860.patch: fixes crash on unknown option in EAP-SIM (bsc#1206205, CVE-2022-41860) - CVE-2022-41861.patch: fixes crash on invalid abinary data (bsc#1206206, CVE-2022-41861)- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)- freeradius-server-radiusd-logrotate.patch: move logrotate options into specific parts for each log as "global" options will persist past and clobber global options in the main logrotate config (bsc#1180525)- freeradius-server-radiusd-logrotate.patch: fix permissions in logrotate global section (bsc#1170505, bsc#1174905)- update to 3.0.21 (jsc#SLE-11896) Feature Improvements * New stored procedure for allocating IPs with PostgreSQL Rates of 1500 IPs per second are now possible See raddb/mods-config/sql/ippool/postgresql/procedure.sql * Add SQL IP pool support for Microsoft SQL Server See raddb/mods-config/sql/ippool/mssql/ * Added RCNTEC dictionary. Closes #3168. * Added Pica8 dictionary. Closes #3179. * Add TLS-Client-Cert-Valid-Since attribute holding not Before date Patch from Boris Lytochkin. Fixes #3157. * Generate attributes containing unknown OIDs See raddb/sites-available/tls * Update the WiMAX dictionary. * Added ability to rlm_python(Python2) show a stacktrace from errors. #2979. * Add WiFi Alliance Policy OIDs. See raddb/certs/xpextensions * radmin now shows coa stats, too. * Sample schema extensions for summarizing data in SQL See mods-config/sql/main/*/process-radacct.sql * Update dictionary.aerohive, dictionary.fortinet, dictionary.arista and dictionary.erx. * Added VAS Experts dictionary. * Many updates to RPM and jenkins builds from Matthew Newton. * Added %C (time now in seconds) and %c (microsecond component of now) back-ported from the "master" branch. * Add reload capability to systemd unit file in Debian and RedHat. * Increase timestamp precision in postauth to maximum supported by each database and simplify (and make more consistent between drivers) the timestamps in SQL queries by using expansions. * Option to set dictionary path in raduat script. Bug Fixes * Various fixes found by PVS-Studio. * Set permissions of certificates in bootstrap shell script Fixes #3132. * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141. * Skip processing proxy reply if there are no home servers available. * Update SQLite IPPool queries. Fixes #3177 * rlm_sql_unixodbc fixes. Fixes #2822. * Fixes when building with LibreSSL. * Fix the rlm_python3 build. Note that this module is experimental. #3183. * The rlm_python should append the 'python_path' paths in 'sys.path'. It fixes the expected behavior to use the existing Python modules Fixes #3180. * Fix rlm_python to print the script errors properly. * Bound total query time for PostgreSQL. Fixes #3253. * Many fixes to Oracle sqlippool. It now does 500 IPs per second without any tuning. Fixes #3270. * Reference sqlippool by it's correct name. Fixes #3272. * Revert 3.0.20 patch which caused crashes on duplicate clients. * Update WiMAX-MSK attribute. Fixes #3280. * Fix crash when trying to access non-existant regex capture group. * Use timestamps (request or server) rather than SQL NOW() in accounting queries so that these are stable when replayed from a file buffer. - freeradius-python3_patches.patch: upstreamed- update to 3.0.20 (bsc#1146848) Feature Improvements * Added Force10 dictionary. * Update dictionary.hp with new attributes. #2690. * Update dictionary.aruba with new attributes. #2696. * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456) * Relax OpenSSL version checks, now that their API is both public, and stable. * Note that tls_min_version/tls_max_version also support "1.3" Since there is no standard yet for EAP with TLS 1.3, it will not work. * Added tripplite dictionary from #2760. * Switch to the async interface for rlm_sql_postgresql so that we can enforce query_timeout. * Added new LDAP option 'allow_dangling_group_ref'. * Updated documentation and functionality for EAP session caching See "cache" section of mods-available/eap. * Tighten systemd unit file security. Fixes #2637. * Disable TLS 1.0 and TLS 1.1 support in the default configuration We STRONGLY recommend doing this for all installations. * Add expansions for *outgoing* Radsec connections "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. Fixes #2839. * Add %{listen:tls} which returns "yes" or "no" for TLS or non-TLS connections. * Update dictionary.lancom with new attributes. #2847. * Added rlm_sql_mongo. See raddb/mods-available/sql. Note that this module is experimental. * Added more documentation in sites-available/robust-proxy-accounting. * sqlippool now re-allocates unexpired leases, to prevent IP pool exhaustion when clients perform multiple reauthentication attempts * Add support to radmin keep the history in ~/.radmin_history. * Add support for ENV and LD_PRELOAD in radiusd.conf. See the new ENV sub-section of radiusd.conf. * Update dictionary.aptilo. #3002. * Update dictionary.airespace. #3039. * Add sites-available/coa-relay, which makes CoA easier #3045. * Add example stored procedure for IP Pools in MySQL See mods-config/sql/ippool/mysql/procedure.sql * Update dictionary.dhcp dictionary with the recent hardware types. * Add experimental rlm_python3. This should largely work the same as rlm_python, which was Python2 only. * Add Dockerfiles for Debian10 and CentOS8. * Add RPM spec file compatibility for RHEL/CentOS 8. * Notes on certificate constraints. See raddb/certs/server.cnf. * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585. Bug Fixes * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627 * ERX-Acct-Request-Reason is "integer". Closes #2635. * Fix a slow memory leak in the file management code. * Try to fix file permissions if they get modified while the server is running * Fix slow memory leak with clients. * Fix request and connection timeouts in rlm_rest. * Fix systemd issues. * Fixes from clang analyzer. * Fix missing include for the dictionaries: alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn, audiocodes,avaya,bristol, columbia_university,freedhcp,garderos, infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus. * Fix internal sanity check when running with "-Xx". * Allow "inner-tunnel" virtual servers to work better with "accept" and "reject" policies. * Fix dictionary.huawei data types for Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address. * Framed-Interface-ID in postgresql/queries.conf is string, not inet Fixes #2817. * Fix rlm_cache to complain on unknown attributes in the "update" section of its configuration. * Add configure checks for -latomic. This helps on armel, mips and mipsel. Fixes #2828. * Add support to Oracle 19 and 18. Via #2857. * Add support for decoding tags in rlm_rest. Fixes #2848. * Use correct passwords when updating CRLs in raddb/certs/. * Properly separate "originate-coa" packets when accounting packets are read from the detail file reader. * Use the correct virtual server for pre/post-proxy. * radsqlrelay fixes backported from "master" branch * Fix DoS issues due to multithreaded BN_CTX access (bsc#1166847, CVE-2019-17185) - disable python2 for SLE15 and Factory - freeradius-server-enable-python3.patch: enable Python3 module - freeradius-python3_patches.patch: backport python3 fixes from upstream - freeradius-server-opensslversion.patch: updated- Enable memcached driver on SLE15- Add missing BuildRequire on samba-core-devel required for windbind support in rlm_mschap.- update to 3.0.19 (jira#SLE-5890) Feature improvements * Update dictionary.cisco * Update sqlippool to allow for stored procedures with PostgreSQL. This increases performance substantially. Patch from Nathan Ward. Fixes #2540. * Re-added "show client config" command to radmin. * Cleaned up mods-available/sql example so that it is easier to understand. * Added pfSense dictionary. Closes #2581 * Update dictionary.h3c Closes #2592 * Update elasticsearch/logstash config for v6.7.0. * EAP-PWD security fixes from Mathy Vanhoef. See http://freeradius.org/security/ (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664) Bug fixes * Update dynamic_client module and server core so that the functionality works. This has been broken since at least v2. * Fix crash in sqlippool due to escaping changes. Patch from Nathan Ward. Fixes #2532, #2533. * Fix systemd notify, watchdog and unit files. Fixes #2541, #2499. * Fix erroneous length check in EAP-FAST. * Update documentation to remove old "ignore_null" configuration. Fixes #2578. * Fix default POD port. Should be 3799. Fixes #2591 * Correctly encode vendor-specific "encrypted" attributes. Fixes #2600- reformat changelog mostly by wrapping lines - add missing bug numbers for security fixes- update to 3.0.18 * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss. * Do-Not-Respond policies can now be set in the "post-auth" section. * Encode / Decode ADSL Forum DHCP options. * Fix module ordering issues. e.g. when "sqlippool" needs "sql". See the "instantiate" section of radiusd.conf. * Add Big Switch dictionary. Fixes #2252. * Add sql_session_start policy (raddb/policy.d/accounting) This minimizes race conditions when using Simultaneous-Use (#2257). * For rlm_perl, all variables are now tainted by default. See raddb/mods-available/perl, and the "perl_flags" configuration item. This change should only affect people who are using variables in insecure ways. * Allow "sqlcounter" module to be listed in "post-auth". * Add support for IPv6 attributes in SQL. Fixes #2280 * The server is better at handling fail-over for outbound RadSec and TCP connections. Fixes #2284. * The server is now more aggressive about retrying failed outbound RadSec and TCP connections. Fixes #2284. * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list. * Add expansion for Radsec connections. "%{listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. * Add notes on running "ldapsearch" using the parameters from the LDAP module. * "ipaddr" attributes can now be cast to "integer" type attributes in an "update" section. * Move main thread queue to using atomic queues. This should help with contention in high load scenarios. * Add "recv_buff" setting to listeners. For more details, see sites-available/default. * The sqlippool module can now use attributes other than "Pool-Name" to assign IP pools. The "Pool-Name" attribute is still the default. * The "unpack" expansion can now unpack substrings. See mods-available/unpack for documentation and examples. * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE. * Allow for -LDAP-UserDN. See mods-available/ldap for more information. * Add sanitizing of control list for moonshot. Fixes #2318. * Update rlm_sql_mysql to be compatible with MySQL 8 Fixes https://bugs.launchpad.net/bugs/1795310. * Allow logging of only Access-Accept or Access-Reject messages See radiusd.conf, "auth_accept" and "auth_reject". * Removed Connect-Rate comparison. It was unused and broken. * Add dictionary.infinera. * Use OpenSSL HMAC functions instead of local ones. * Some SQL modules can now use "auto_escape" to escape unsafe strings See mods-config/sql/main/mysql/queries.conf. * Add wispr2date conversion in mods-available/date. * Implement dictionary-based handling in rlm_python. Fixes #2334 See mods-available/python for details. * Add support for SKIP LOCKED in sqlippool. This can improve performance by an order of magnitude or more. See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383 * Allow PSK and certificates at the same time Except for TLS 1.3 which does not support that. * Update docker scripts. Fixes #2306 Patch from Matthew Newton. * Add crypt xlat. * MySQL connections can now skip verifying the server certificate. Fixes #2481. See mods-available/sql. * Add better mechanism to detect MariaDB (Old MySQL). * Add RFC 7532 "bang path" support for realms Fixes #2492. * Update dictionary.ukerna documentation. Fixes #2493. * Add support for systemd service and watchdogs Fixes #2499. * Check for openss/rand.h, and allow building without OpenSSL engine. Patch from Eneas U de Queiroz Fixes #2517. * The default PosgtreSQL queries now use "ON CONFLICT" to better deal with issues. This requires PostgreSQL 9.5 or later. Please use a recent version of PostgreSQL, or edit the default queries to remove "ON CONFLICT". BUG FIXES * The session-state list is no longer cleaned in the inner-tunnel. This lets the outer Access-Reject section access session-state. * Fix typo in lock initialization for TLS sockets Found by Sergio NNX. * Add check for crash when home server down Fixes #2233. * Add username key for postauth table. * Better libpcap checks, when the header files or libraries are missing. Fixes #2245. * Allow building with old versions of OpenSSL Fixes #2247. * Allow non-FreeRADIUS State attributes to be used with the "session-state" list. i.e. State length != 16. * Be more aggressive about cleaning up zombie children when running in debug mode. * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries exporting LDAP API functions. * unlock files when asked to unlock them. * return error instead of asserting in map code. * Don't write 0 bytes to SSL. Fixes #2270. * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262. * Various dictionary cleanups and consistency checks Fixes #2281. * rlm_python has stronger thread locking to prevent reported issues. Performance may be affected. * Don't allow Message-Authenticator to overflow past the end of a large packet. * Fix crash in sqlippool when SQL server goes away Fixes #2300. * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303. * Fix crash with CoA packets/ Fixes #2304. * Fix crash in rlm_exec with CoA. Fixes #2328. * Print errors while parsing the log config, and don't quit when deprecated log settings are found. * Fix DHCP encoder xlat so that it can be used with a list of attributes. It previously only encoded the first member of the list, and now encodes all members. * The "expr" module now skips more whitespace. * Remove internal FreeRADIUS-Response-Delay attributes from attr_filter Access-Reject. * Don't send junk to redis when maximum args reached. * Small updates to IPv6 for accounting schema Fixes #2364. * Fix OpenDirectory integration in rlm_mschap. * Fix slow memory leak with dynamic clients. * Don't artificially truncate debug output for long strings. * Fix memory leak in EAP-PWD. * Fix crash in "hints" file with Fall-Through = yes. * Fix crash / timer issues with many CoA packets. * Fix attr_filter so that it does not treat vendor attributes of number 26 as Vendor-Specific. * Fix reconnect correctly in rlm_sql_mysql. * Fix rlm_cache to properly use Cache-TTL < 0 Fixes #2485. * Fix rare occurance of bad xlat expansion. * Check for rare race condition when a proxy reply arrives too late.- install license as %license instead of documentation- also fix ownership of /var/log/radius in systemd unit- update to 3.0.17 Feature Improvements * Add CURLOPT_CAINFO. Patch from Nicolas C #2167. * "stats home server" now supports "src IPADDR", to specify home server also by source IP. Fixes #2169. * Add Dockerfiles for a selection of common systems. * Increase number of permitted file descriptors, for systems with many home servers. * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs Patch from Isaac Boukris. Fixes #2205. * Update main READMEs. Patches from Matthew Newton. * Added dictionary.mimosa. Bug Fixes * Don't call post-proxy twice when proxying to a virtual server. Matthew Newton, #2161. * Use "raw" string value for shared secrets and dynamic clients It now parses strings with backslashes and "special characters" correctly. Fixes #2168. * Fix RuntimeDirectory for RedHat, from Alan Buxey. * Relax checks in 'if' parser from Isaac Bourkis. * Minor cleanups for %{debug_attr:&request} from Isaac Boukris. * Be more aggressive about cleaning up cached certificate attributes, due to deficiencies in OpenSSL. Reported by Nicolas Reich. * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall. * Fix double free in rlm_sql. Fixes #2180. * rlm_detail now writes empty Access-Accept packets. * rlm_python can now create tagged attributes. * Don't crash on duplicate realm + authhost / accthost * Allow partial certificate chain to trusted CA. Fixes #2162. * Treat SSL_read() returning zero as error. Fixes #2164. * detail writer now checks if the file was renamed or deleted. * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name. * RedHat Systemd updates. Fixes #2184. * Use correct API for State variable in rlm_securid. * Remove broken radclient option "-i". * Fix "users" file (and hints, etc). So that it does not get confused about entry ordering with multiple $INCLUDEs. * Fix rlm_sql to expand the un-escaped string, not the raw string. * Link default and inner-tunnel only if they exist. Fixes #2206. * Don't use both IP_PKTINFO and IP_SENDSRCADDR. * Always install signal handler for SIGINT (needed by Docker). * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs which are not self-signed will now be checked. * sqlippool now returns "fail" if it fails IP allocation. * Fix rlm_yubikey to look for correct attribute in replay attack check.- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. (bsc#1099802) * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes for issues found via fuzzing by Guido Vranken (bsc#1049086) https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682/bin/sh/bin/sh/bin/sh/bin/shfreeradiusibs-arm-3 1670847455  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~     3.0.21-150200.3.12.13.0.213.0.21-150200.3.12.13.0.21-150200.3.12.13.0.21    !"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""#$$%%%%%%%%%%%%%%%%%%%%%%&&&&&&&&'()))radiusdradiusdraddbREADME.rstcertsMakefileREADMEbootstrapca.cnfclient.cnfinner-server.cnfpasswords.mkserver.cnfxpextensionsclients.confdictionaryexperimental.confhintshuntgroupsmods-availableREADME.rstabfab_psk_sqlalwaysattr_filtercachecache_eapchapcouchbasecountercuidatedetaildetail.example.comdetail.logdhcpdhcp_sqlippooldigestdynamic_clientseapechoetc_groupexecexpirationexprfilesidninner-eapippoollineloglogintimemac2ipmac2vlanmoonshot-targeted-idsmschapntlm_authopendirectoryotppampappasswdpreprocesspython3radutmprealmredisrediswhoreplicatesmbpasswdsmsotpsohsometimessqlsqlcountersqlippoolsradutmpunboundunixunpackutf8wimaxyubikeymods-configREADME.rstattr_filteraccess_challengeaccess_rejectaccounting_responsepost-proxypre-proxyfilesaccountingauthorizepre-proxypreprocesshintshuntgroupssqlcountercuiippoolippool-dhcpmysqlschema.sqlschema.sqlpostgresqlprocedure.sqlmainmoonshot-targeted-idsmysqlqueries.confschema.sqlpostgresqlqueries.confschema.sqlsqlitequeries.confschema.sqlunbounddefault.confmods-enabledalwaysattr_filtercache_eapchapdatedetaildetail.logdigestdynamic_clientseapechoexecexpirationexprfileslineloglogintimemschapntlm_authpappasswdpreprocessradutmprealmreplicatesohsradutmpunixunpackutf8panic.gdbpolicy.dabfab-traccountingcanonicalizationcontrolcuidebugdhcpeapfiltermoonshot-targeted-idsoperator-namerfc7542proxy.confradiusd.confsites-availableREADMEabfab-tlsabfab-tr-idpbuffered-sqlchallengechannel_bindingscheck-eap-tlscoacontrol-socketcopy-acct-to-home-serverdecoupled-accountingdefaultdhcpdhcp.relaydynamic-clientsexampleinner-tunneloriginate-coaproxy-inner-tunnelrobust-proxy-accountingsohstatustlsvirtual.example.comvmpssites-enableddefaultinner-tunneltemplates.conftrigger.confusersradiusdradiusd.serviceradiusd.conffreeradiusproto_dhcp.soproto_vmps.sorlm_always.sorlm_attr_filter.sorlm_cache.sorlm_cache_memcached.sorlm_cache_rbtree.sorlm_chap.sorlm_counter.sorlm_cram.sorlm_date.sorlm_detail.sorlm_dhcp.sorlm_digest.sorlm_dynamic_clients.sorlm_eap.sorlm_eap_fast.sorlm_eap_gtc.sorlm_eap_leap.sorlm_eap_md5.sorlm_eap_mschapv2.sorlm_eap_peap.sorlm_eap_pwd.sorlm_eap_sim.sorlm_eap_tls.sorlm_eap_ttls.sorlm_exec.sorlm_expiration.sorlm_expr.sorlm_files.sorlm_ippool.sorlm_linelog.sorlm_logintime.sorlm_mschap.sorlm_otp.sorlm_pam.sorlm_pap.sorlm_passwd.sorlm_preprocess.sorlm_radutmp.sorlm_realm.sorlm_replicate.sorlm_soh.sorlm_sometimes.sorlm_sql.sorlm_sql_freetds.sorlm_sql_null.sorlm_sql_unixodbc.sorlm_sqlcounter.sorlm_sqlippool.sorlm_test.sorlm_unix.sorlm_unpack.sorlm_utf8.sorlm_wimax.sorlm_yubikey.socheckradraddebugradiusdradminradrelayrcradiusdfreeradius-serverCREDITSChangeLogfreeradiusdictionarydictionary.3comdictionary.3gppdictionary.3gpp2dictionary.accdictionary.acmedictionary.actelisdictionary.adtrandictionary.aerohivedictionary.airespacedictionary.alcateldictionary.alcatel-lucent.aaadictionary.alcatel.esamdictionary.alcatel.srdictionary.alteondictionary.altigadictionary.alvariondictionary.alvarion.wimax.v2_2dictionary.apcdictionary.aptilodictionary.aptisdictionary.arbordictionary.aristadictionary.arubadictionary.ascenddictionary.ascend.illegaldictionary.asndictionary.audiocodesdictionary.avayadictionary.azairedictionary.baydictionary.bigswitchdictionary.bintecdictionary.bluecoatdictionary.boingodictionary.bristoldictionary.broadsoftdictionary.brocadedictionary.bskybdictionary.btdictionary.cablelabsdictionary.cabletrondictionary.camiantdictionary.checkpointdictionary.chillispotdictionary.ciscodictionary.cisco.asadictionary.cisco.bbsmdictionary.cisco.vpn3000dictionary.cisco.vpn5000dictionary.citrixdictionary.clavisterdictionary.cnergeedictionary.colubrisdictionary.columbia_universitydictionary.compatdictionary.compatibledictionary.cosinedictionary.dantedictionary.dellemcdictionary.dhcpdictionary.digiumdictionary.dlinkdictionary.dragonwavedictionary.efficientipdictionary.eltexdictionary.epygidictionary.equallogicdictionary.ericssondictionary.ericsson.abdictionary.ericsson.packet.core.networksdictionary.erxdictionary.extremedictionary.f5dictionary.fdxtendeddictionary.force10dictionary.fortinetdictionary.foundrydictionary.freedhcpdictionary.freeradiusdictionary.freeradius.internaldictionary.freeswitchdictionary.gandalfdictionary.garderosdictionary.gemtekdictionary.h3cdictionary.hillstonedictionary.hpdictionary.huaweidictionary.ianadictionary.ieadictionary.infineradictionary.infobloxdictionary.infonetdictionary.ipunpluggeddictionary.issannidictionary.itkdictionary.juniperdictionary.karlnetdictionary.kinetodictionary.lancomdictionary.lantronixdictionary.livingstondictionary.localwebdictionary.lucentdictionary.manzaradictionary.meinbergdictionary.merakidictionary.meritdictionary.merudictionary.microsemidictionary.microsoftdictionary.mikrotikdictionary.mimosadictionary.motoroladictionary.motorola.illegaldictionary.motorola.wimaxdictionary.navinidictionary.netdictionary.netscreendictionary.networkphysicsdictionary.nexansdictionary.nokiadictionary.nokia.conflictdictionary.nomadixdictionary.norteldictionary.ntuadictionary.openserdictionary.packeteerdictionary.paloaltodictionary.pattondictionary.perledictionary.pfsensedictionary.pica8dictionary.propeldictionary.prosoftdictionary.proximdictionary.purewavedictionary.quiconnectdictionary.quintumdictionary.rcntecdictionary.redcreekdictionary.rfc2865dictionary.rfc2866dictionary.rfc2867dictionary.rfc2868dictionary.rfc2869dictionary.rfc3162dictionary.rfc3576dictionary.rfc3580dictionary.rfc4072dictionary.rfc4372dictionary.rfc4603dictionary.rfc4675dictionary.rfc4679dictionary.rfc4818dictionary.rfc4849dictionary.rfc5090dictionary.rfc5176dictionary.rfc5447dictionary.rfc5580dictionary.rfc5607dictionary.rfc5904dictionary.rfc6519dictionary.rfc6572dictionary.rfc6677dictionary.rfc6911dictionary.rfc6929dictionary.rfc6930dictionary.rfc7055dictionary.rfc7155dictionary.rfc7268dictionary.rfc7499dictionary.rfc7930dictionary.rfc8045dictionary.rfc8559dictionary.riverbeddictionary.riverstonedictionary.roaringpenguindictionary.ruckusdictionary.ruggedcomdictionary.sangomadictionary.sgdictionary.shastadictionary.shivadictionary.siemensdictionary.slipstreamdictionary.sofawaredictionary.softbankdictionary.sonicwalldictionary.springtidedictionary.starentdictionary.starent.vsa1dictionary.surfnetdictionary.symboldictionary.t_systems_novadictionary.telebitdictionary.telkomdictionary.terenadictionary.trapezedictionary.travelpingdictionary.tripplitedictionary.troposdictionary.ukernadictionary.unixdictionary.usrdictionary.usr.illegaldictionary.utstarcomdictionary.valemountdictionary.vasexpertsdictionary.verizondictionary.versanetdictionary.vqpdictionary.walabidictionary.waveriderdictionary.wichorusdictionary.wifialliancedictionary.wimaxdictionary.wimax.alvariondictionary.wimax.wichorusdictionary.wisprdictionary.xediadictionary.xylandictionary.yubicodictionary.zeusdictionary.ztedictionary.zyxelfreeradius-serverCOPYRIGHTLICENSEcheckrad.5.gzclients.conf.5.gzdictionary.5.gzradiusd.conf.5.gzradrelay.conf.5.gzrlm_always.5.gzrlm_attr_filter.5.gzrlm_chap.5.gzrlm_counter.5.gzrlm_detail.5.gzrlm_digest.5.gzrlm_expr.5.gzrlm_files.5.gzrlm_idn.5.gzrlm_mschap.5.gzrlm_pap.5.gzrlm_passwd.5.gzrlm_realm.5.gzrlm_sql.5.gzrlm_unix.5.gzunlang.5.gzusers.5.gzradcrypt.8.gzraddebug.8.gzradiusd.8.gzradmin.8.gzradrelay.8.gzradsniff.8.gzradsqlrelay.8.gzrlm_ippool_tool.8.gzradiusdradiusradacctradius.logradutmp/etc/logrotate.d//etc/pam.d//etc//etc/raddb//etc/raddb/certs//etc/raddb/mods-available//etc/raddb/mods-config//etc/raddb/mods-config/attr_filter//etc/raddb/mods-config/files//etc/raddb/mods-config/preprocess//etc/raddb/mods-config/sql//etc/raddb/mods-config/sql/ippool-dhcp//etc/raddb/mods-config/sql/ippool-dhcp/mysql//etc/raddb/mods-config/sql/ippool-dhcp/sqlite//etc/raddb/mods-config/sql/ippool//etc/raddb/mods-config/sql/ippool/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids//etc/raddb/mods-config/sql/moonshot-targeted-ids/mysql//etc/raddb/mods-config/sql/moonshot-targeted-ids/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids/sqlite//etc/raddb/mods-config/unbound//etc/raddb/mods-enabled//etc/raddb/policy.d//etc/raddb/sites-available//etc/raddb/sites-enabled//run//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/freeradius//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/freeradius-server//usr/share//usr/share/freeradius//usr/share/licenses//usr/share/licenses/freeradius-server//usr/share/man/man5//usr/share/man/man8//var/lib//var/log//var/log/radius/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:27107/SUSE_SLE-15-SP2_Update/ea436a6cecae00bf250af9f8b03f03e5-freeradius-server.SUSE_SLE-15-SP2_Updatedrpmxz5aarch64-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@?AABBBBBBBBBBBBBCBBBBBBBBBBBBBBBBDDASCII textdirectorymakefile script, ASCII textPOSIX shell script, ASCII text executableUTF-8 Unicode textELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=298d7d1a49e2361e13044048e0e23d17f6da8367, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=68a7a3e5a9daad7731368d08f44b88c7a491b53c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c110468c5f72576a3a28a70e389c187d45a6acde, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=39b002f4b272d0bd1f95f4d0da6f14351d7e164a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=67c661a671e4bd37d901abf4b99810d63049ee07, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ed5866cc22283d2dd414e0ff1f1ea11c95e8d9ee, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bd428368b600625b81f7d09cf012f49a701d090c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a39a04d4aff0a51691270005b7562b840871cd19, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1e5e126dbeb42301c148ca0702cdceeb6fd62901, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ab22733d41b134195973cd16fcb7c1ba807721d0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d03c1416f50ba3d3d0c8775f82920638b825e1d6, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6edf01793b841f003bb292b348825a390f4e1066, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=982d71ec96af28fb5f33b1551fd4d26681a0bd6f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=716ca71213a5814e859cb8a072eee20501628ce4, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=051457da169a97e19f433e6eeb985a692e3b4c55, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3e00b4ff24b82812d1245fb36bc5a772de701712, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0140f05d4616740c3681e460ef030a103d03fee6, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d9daf82ec70542a806213b3f7400dd021ffd22a5, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bdf6c0bde525c65e14d895e6db5feb279fe2f41e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4cd2df1153ac0f149aa0e0025f1c050edbebb28d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=71d223df90849f413421f5726fa8ca1486f18331, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=34dfc9361b51fd096f11cf35cdeac776543a2b4f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=47a5dbacfe546ea9b83a92b5ce5e3f1f5c9e8f3a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=de016ca6ca865c5475f211c192f180c5745cd368, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8b43c2655709db4fa14e838aa1e9be6e03bf3976, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4e1b61cff86aef24836437891b42438325b5a0f3, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=292b9b51db07e6b60bf8a6f5fcb3f2e76bc9eb49, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=19a3adc0410bfcca7a7a7d212bd641c98eb13638, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=616077980137325fa6c22bbdb1503639b5970e83, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=55252c02e426b704ca26cbf64630c8c12ea1eb90, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b101ab9284d5983109b647a73737bd450fc459a4, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=123502a3ec9fce80271bb5670c0906a8b99aaac4, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7b76d2a4ac54239a20cf9da787adefc928ff21cd, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c1a153d0f6aca2000d35271d18dc975672c1e963, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e67ff5cd19d0f32e0bcd8b43e46de1c7f240f9c8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=582e26b783ec413fc0867c4dcdf7fa7a1e615524, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8169f9b7f18c32d1ec9b2916c4d5897161a1fc96, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8271ad94ac09831db5a4fda8c5219f6c6c5697f7, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4d5a63d8d346539b115340e66a91916c8111c4f6, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d3819a6018f062b01f04507242785ff328dddd41, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d31f8734c9fe8534930a3f6e563cfacb9f634418, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d9ac44e90f1c9cdd6b120d74b0b4468b1ab1c031, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0b2f93b0214a7679bff44565e9811f10aa80ab46, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9a19b046a7e1a2121e454d6c930994cf32b713ea, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b6fc6f1c781de43c0a8a2b5e7d4a7fabb41922d0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6443802492319f0d84318aeead376548b224f307, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f33599a87c243dad1c58b6f8ceee06ff600ece6c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=435882434bc82aade51568314a48a4607ae588b9, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8da66ca91b5fbeafa82b5cd16196c698f3f4534e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f672144de80093da71eea0cbe92344792d54192f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cf05d8e26063b4b6caff75fd539c02069cec0baf, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f6839a2468bf67f47a5d02a3bdca81c0eec69fa7, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=043e89920d47140f54c16f1169d154b5bbf169d6, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0d049e3c140d266cac08a9a2fbd01a3f3fff11a8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=161bfa81f9e92d47e15d899333005141992a2c2c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=84fcbf8576db93e0ffc09336323295359c9d1487, strippedPerl script text executableELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=b9a6aeca434ec18d2afa1dd2f2831d3028098f64, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=575c97b946379f1f25088349804a5e34baf16a45, for GNU/Linux 3.7.0, strippedAlgol 68 source, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)empty "&+/15:>BGLPTX\afknsw{    RR RR R R R R R R R R R R R#R RR R"RRR R R R RR R R#RR R"RR R R R R R R RR R R R R R R R R R R R R R RR R R R R R R R R R R R RR R R R RR R R R R R R R R R R R R R R R R R R R RR R R R RR R R R RR R R RR R R RR R R R R R R R R R R R R R R R R R R R RR R R R R R R R R R R R&R%R R$R R R R#R RRRR"RR R RR RR R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R RR R R R R R RR R R R R R R R R R R R R R R R R R R R R R R R RRR R R R RRRR RRR!R RR#R RRRRR"RRR R R R#R RR RRR"RR R RR RRR!R RR#R RRRRR"RRR R R qaxdElogrotateutf-8f40457229b2048449610f9484b86c076251bd58d9f7ecdfe3147c08a5c6b4808?7zXZ !t/ ]"k%܍{ȳ>C9%7, [¶}S?{;(h],@;ÓVI358LG$ԙ*.ꆆ+|8[J71jgwa ;mOsJaskR>Qnayg˝~RWN O$BZ)I}C1]~7x[}]=Yq& Y\um\NǢL.k`P퍒[49z ,"6F9ЉVR8ˍ:dxdj+'x|g& LhVv!!~`*)yC 4/r;2=ycgJy!\94 1d5vпsk/OﬧŢHZ4ET/ߣ6|'_GE4MQ9Uwk:YBXiͮ?۴Y(:J6OH0f0׏$}<#]^$>epѻci@7ʅ5Yr-Ϯ<+3֢fD@/N7Uȟ9nf{+ Uv8NҕXe2o(\WfMTIb{!J =39MKFWOI J(J!tATD~b|)H[v|Z}VK/yMǥ5=8Gu8<.'>}>24i7/)SRlڥH _gR5bMF*-TGq}pqSob3Fp]b%L#0B~M>qׄhc/䩪ƿ6SqZxO1JadZ?ꆡd~N7\~ݥq|c[0ă?v'>. LHvNi(7T5C߂(#=[X iZB.}d *-H;Kk"Dx|;RPРMZhp&Dp>xrId?8`͔ 5Y.fc>GP^3vdvDd̋NcG;ePn>/ #2ޭ(Z,Wm_HI^Zx0:.(*.ԮgJ CS,Y `x;`֩C9d&k>8nY^3@b^ DJNk[ B[5,9Xi&qx1Q}Ď-mCHnj4n*jSȗL**eD$zfl{u< Ýyoygԕ&1WgCy)fB_M։|&p2(_G.?ӀU/>,[ MOHp;g TC}gL]B,!;]! |RgեTwj89aim%ur9([DTcw0cj|c p$(NIsoPuw@/Y\dڻV䒿'뉰 #K5X۽ܚ 8@7&"jV]MXZ8+5"KLD|sJ@yXShaox䑐?CEE$a_!<( `{e㺟֋Ho>5|W;@ 5X<:wAsvF`Q?D$:ai~=%fulayUJ g U]KhVQeA~_kJag!l~ٍ˳S癬?~VﳓārVM @ܮbD*(RmǑ1j<:ORRNT֦="-ɡ<)j)T9cRP"!U-d=YnF ­#+N%rf~$F7p6،$bϜ˿i3YV<Bl3?\}+t[-/8x[1.20>jC4k{9P iJ^+g[! Qw hf#V8i K`T@,-М8` a'@rD֦Ӓ,= 3p}E BAqWtPҍa|Cvl5{)wpⵃFh;q-M.z9Òe܁P:O7ѱ\4^蔤XL;CALDQw&[ĺI&2mhbyLgI,TMԒ‹N^*.Cx$;`ʙ^&ƃFmiLִfn/܈26wc9s(\WuER&J酨J,BpZA/Q2d-E%ŪCqvM9aƻz))]02]O'Z'VzI/ZJ? ȥ:.y5bGn}W5o/rϾͶR˖C=54H(  =<8g( NGDm^3D'oK}s: ;yj Mcc$t?js[16_\=RYhYU ;zOƬdy<'Iű^cb%{.D[JOk㫇 ʊAzZ;hTqChh:Y׳WG&HDi(C߀vMT8aY}E:$v/ͺ4I,a,&e&߯?g.ƛ}brWX>hrvtm tz2[Dno6Փz;YJdaUNvQDp4WY躲2XL8h8dq?,WnItzmRm$/j4HP#= Kgm_HSM`[XΰW4bA9(=*C/V6sG?_+=|!, \o]*9w mtp*o^Dάjwl1:0ΟMZH_M0 'k˳Ci48GzkK"ˣC\ױ/*Н˒0X--e2@N~n6jK+c'Ί(S\N5ңشKXJSЂֶ.ti:\yd*@i =s#vOdOId6$B*##fN._ܼ´C=9<{ua+<<\eTxZ-]j4iHS5>&̻捼ŋ[S}R SH Yr1=,i ࿮j@خtsrTO.N)/z@z:2ט݉C TܳR_M/p؃;= `#kXl,{R gОISO찲LrV=υJeZw^ϳ= t]N\\ORUFMVjykWl[tМCn_L4}N/\,8eaQ wy;mBb# (++mfh]h% ]nL^]Z+|#Z4nQ5_nz*mn*YcGZuh(%ZVQYꙑQuv+ha8WLipIJya@K7 |(OBFm )w :]ן;Ck7؄.x%e;sG{(e;:Wj`VZ <:mi^ٻ>14 Fx7XMv [䫆-A=76J{t[M\Z? m^|rw?dM.UKwWKal,XC[ "ŖjB9]՞ rj")k=73f .2]5 lz(BNJpjvB}߫@0VIbN3+7wi^8JҰ?9/)tio:w !0"庡O &3Փz N|}'ܜ/I7g&|雕@ Ubȋ 30*AFdhwx fGCLBVu0̅uy+AGNm~lb9$:2OvC ?={T80uO XMLujn鎧mh&ږvTv7u+mpf ,'EUg1߭|݀H&Q`6Bơ(J-G.Q& WMg ۵X"ǝD'RCͬ .E.rE%jCl`k1JmsnYRMc yU V+S >gݸ9 BXd#a.l|&K6 P/_d{`xJ{8[;0cdvܮ T2:T{O5K (vJ_īю@U/;„݁V0)@);zV+c%M\)ŎL)ƦEA#ZSn?H@M=ٶٻ7lũo(j ֕];eX44ƧkZf?@C T `o DGph*|+ JCh+'9ij2B{PNq*oZeyU Q$Qk3Z1 ]IC`<&;58_־NjaVHe…%)ZU\%1 |Dt5:Ř鲶6h!2z\񱄾Q]P X&4`JԈِE`UȖ~DB7}@]k_p8eHQsluAkD5Wʙ5{G _%<2tqH7\t:,wʭ'raAq@']؀N9-{s&L"+l&fdcKXg6gU=fеOɞ%/fӰK|&_4Yif(Q\smi;Tks$b}ѳNń ?#dc+jn/=C>ʘ\wD%|m*p-UVR4^S`!yRش5w|Fb&\߽Ť00] ^a>;$'kYe- 1331H15SH%c Z? :1|GfIr1^~1\uݘ|A+qDEY#M ˳uX A0[)E2t#U wKU>qYB*CZ_=Iq}MS NM4Y=Ko~A Š*YM(wx=Jp0Ȇ!Z6slZ[qg=c5s!tҧ'"8YR=ڲ?tMd𳥉8Ma8MQnAFG7# X~dƁd)ř6CtP[, 5@Ŗkc1Do9M:bXSGىwޔk12,Äg%yJJB>w"ygK.L XylM`/6:y1^_M o»~3Şq:SԾg" ]bJ6iϕN1jղ+}8<]ʥea+ f|㈰V>C3Dc{ߒ'mdrY-5GիKm l wXL7sTXBdx>,k?dyưP8xAĆ`~rħ֟(i WL-ICߵ1T(VøOr_"3bWlw+r=ѵ?F*$2ҟ~8޷ "[&Ny&?ҬakfTBa O߼U}(m eCå,mE'TJ C"Ta1IF>[@~zP^/L8ч,0?Y~؇–dW Defv prK\$|j$˰" @S>ԓgy\IN4%Y7 X @_(5Uvm q^$mWZt{aQL4y[߬Pd݇kؓs_qLGdu:Y|=)6j\GM^+VhO^ւhد:NrPt-tUAk pSǵi)_< @P6nj)j‘(.tÚ#:42*+8Z 0K_8f m`1?8“eV8l:5R|zs(ؖ1V+SXKҘCz.:B!:v4d*;`^#<6z N}uFմ6{)xVf3>M.,%nYpW3-yBRaVNiK_Ǻy`lRpM%y #) O/[;™QK4֗7wوƣo! كeF\[͑*>U48$>G.ϥʓ HPa4g!\L7Pwĥe Hf;y"ˤͥQ9=ױ\o< S*4ӽҩ`Qҵy ɫZFhm)$$H'@#fH5o2J/‚fi -X9^seRO 'Kk <3}Qk2hGA't/ƖV.C@v?}qؼFPHcy`JAPk;3S0COBROwv`A}^nI D/sGQ/KcNEƇA K,o(Uu|? wYEoR&aKTs@"3c_B)5y"SKKiB[hV~b(j: -;Q/~~"eeʦMu0R-ѕS%TT9JuAYdk?jGzOpvթYd[#_i~RN%G9=d 9$s';G|]v5Xn룵ԙz(B$6dzK22(-ʒS@b]\7C1QDmL*,L/O,WUt"G9?]6^mܤ:6'HxY|9e0.M2+(T@!\>I:O/}̑Cևj{ۮQp5@0Au7uYͯk Yؾ\)OZ9$u#o&[$E?T/bjY`Rxv# U/ĩΣqoK!sn=6GӂZ5PǭQcϞ$LeBڈO8R,ɤ˫^p:Fj,;=.ZBRI5&fBk9G8$Ad""ښL &>W 7?CamUt^b N&Nso>8ֶrE (i?:}ͭڨ-5)YWPAmwNfσtd~HqlM 4oK7&I ~NwB;!ۜ=4E8"ts0#zzq%B =lky(.V i_Q#fA+[T] 3uFlOz6̥9zK}0l}ol8l+a\F蚐aî2SZeFAM ћN( G I Y?H 7M !7k?bwV|FUלj'h l"(lɨp`=Yg R 7+ʸXհlCLSR_P4uh W JѭIo<\PaT.>25Haɂ,VACqU4 נ0έ ;6D[+\Ҩ4vV9,s=ǽm@+tsފnk#݇+x쟷^=zC:vreUjMEd÷UoQ<i ExͼLBz@Xwj؇KGbSQhIpނS9qmm‰8qca3ыkE 'w-;bU)RZ:L:3/:!o+ "hEV@=C*]K7Rjw>S#mw> R[::8؞DzwORGyI(l#QI༷##[Р\J/ -z;8aP9`}.P6Ci$s8hkF WCcIEyv~DJ߬ri<̓dtA Q[y 32q'5=? fLx' a~ {_v9!ZWPr[/ ò6p-J?Щ2J U EYb"pUx:}eYМ2ytؘR q<Х4 >m# DD&* CrO^"+n8X,7$KvM ns`Xw/f}RH2^hV*N[! L8!?$i)xG8#h 5ȏƎ>'`H_ (\?ێ%4tPȘ)R8{V #ߧ ٯV^pڮ*5ȾpX+[mvbS/Bmb+E& yb">2HџJݎG['$er[ ,8S|h>(1e2P'EQXlA4<*>{RОD% )Z{!p1t3xШ}T !toeUKpQ/]NOǰ{L=cp/~XT`BAE;)>d\gL2\L^@i5u|Ea?m%=M$p;0$ftg1҉-qrʹUCG)xQ-og>@9E,: 6YO2l-ٗ  ݬRӾB:>FPq:ʚNRjM E4)uY{S=N%wJg׌3ESlm?$T|f@T%$QLGJ%GԑiG^xqa=6=,+ toT pc`4bDJ~Av67/Fuvy- #fV M@"yKSycUj{xmCR!?x\R[:^[P4%pOu5:},{%b#'_E]teN;d:Zʍa&ɇv_o#X>j,e4UMBMgqſ;'eH?Q7ejn'ɨJZbQPw;)sD;ð]I `t'ϫahebt҅Cbz^mfÍs/.RuQޮi뼂+p]pV|GL+4SˮaCF3 |$z>eOF#9~qvSJfZ~h$HR}#'hEr۩ Enm̝PxKҋL:fϕ9fJt0^$ep!ˈz'PX=BO3)#.R<=}ies@a]+!u$ T'g ytf(s"GӨ,2xʲ\1Oh~U}cG_'|)fT7k^]XhDocorCuuN_ Tf#|֗'a:Yc_6W[?*Xqd\ {+|>:^@֧nIH,M$)eg#ވ\xvm,i کY;_|f^ q#s-&W2+w[ZG!l#Ѝ_v|a ؉ÐDGվ ȍ?a>֥ͮ_kۅ ~К_P a:2qA!<@j^ϹUN9c䯪"%WfNk fm'} .Qzdy梈q ԓ=\!oG&# ?]PM֎יҒg(:HIBŘh]2*5ݛG5xR-4o?E5g>tk#'`I N rm- ֯#K=$x.4(8>u7/87qf!v@}9)}avYҾZe'+&M>τ|:Ivw/猁cX$mYykWYr5pR)i&&;59M F|Cx-pwPÌ6/!@-_&ueU5p$6!6օLJboڂf(4/V쓼 ?%ϕ*[4T] L!(g3%!#PցG!7sgnB \&h ޺]Ldž^5mU%[ٻfE:W~)we?P]@51:;`:}kn2MlwL_s-mQ &H8D~x7T MRUY^AC'#{Ʈ{kON34hnl49n{g"Np-Ce/y488Q](IoBl&>[28rt8Ք8 žhӁ_3^p6 + iE+(gqxa;k`p횝s|V(&9 mhR?(m>0_n$\A1ePj(FLə)֦Bdtq͵ҵx*r-{!>h2Iз;QH[ĊeȐ`i;̶7q"ys32Wv~=yAz_V$梺HD)qҊ+Â1 SdM!wDF&w*Z%,*GTZ6 n=Ay^BVN$%s>OZ :/;e"o& tiRF~,ԑcken[; ~Jt4u3MM Qp12k}9'Ges4Fnk~]͞ټ6򿊊?:zyV5'uhɿN x3[|ҠZ?Q$;9 `vgv?7 }T~hcygy}fJ7L7$ȷ=)]q=AE6>Lڦw6}s3h-&D\Yc޲U=9qLMkW1JFQ.ip&qpOwƑk5՛~8ŊEtq77<.5_# znx;J˳={%e(Ur%Hن{`¾z>?9#~л뙽אb{!^H%&169W#a%&u;roo?0췵|}w̉ Tתry08O)RhH -\]N&SJɀV\Mabf?_(-H-,*B3L^j`d˒&KSϘPF(qyZ2Wr4 !0ᾮ?)qc,w#bQxy' .]JIq4H- -d]1uj̛θ)Śa+Nh˕P bƇa!Ϙj|mSSG\ )m>иxfO"!$GhDH@-4_!$u;dt\Z7"dd֎BoAj)dXEo߫Ma?Ud0gԯvE5A/P{b\ώ~Um Min;J] cْ)U`.N6RgJڭvP NBDlPl~t=@ٟgzc5K'F!]:A ~{!zk>g*7L tr .4 I"MR[UH?Liu}CpY-ч\2&.\SZ1GmrgcrR&Ȳg걥PQkgo4ƪJ)u):< D7>AK(V(F˶;5 _ 5#Gi^Ƥ-IZ HMtx/LJ1n?'كYs1/S돛 9Fx HtԬ2q/@J0c܉}MN ]\A}hHMʑv8^ .sDf@gj>0%M9AcN1HU>bhF F ;l,s+*v Q;>!L%e.P|NcϸICMfm\-6}L>x(&*W}L'7ZAk;uz~JҡF ",NnlZ?yʔY؁Ȝ&yE- f<]ܒүr'`|pq=pu;wM{K5ƫ^A?lO‰% /c@Ke^G$#9 KJl>/]] ; 8KVD .gzƞMxbNƳ]+ԃ`3tfQ=-}՘T\6\2 HP/Ǥo4y}0F1%џbM؏$2SA.uܮQIg?\XgF^)UhtDNaߝ%kZXX(vp}iu-W02D4Z^C-V^GIt1<DŽ b[HqeZʌz5K*Oȥp9 è,&YK95,a-Gh.X^{s`ISkXѷ?CNJ%*Ck|UuzBNIRs{Z0%$ePφt.Il5-s9>wZ;I 9K"zLj#~]dU%3CLlDʥؒ!50kNhe!瀛wO(%\jҴd6%5Q| ,]zXbQ)! (_s4VWXJchUY}Dk k[^ jYU $[[j9_R*#FF'AUzhq/Ĝ+b:isٯ ɫV˸f㑗G^aN,wuBD?} `^%j=i,2,"C5y\.s=KǭwL"r, "|Z" 49ynFΆH2*e47 eMgB/hne^ u7'7g]zeYp4\.  @ &Ž]~*`c~ĥJWuFG d 4ҁ60 UkƃTC\m5D0gj8 %tBЗ=a%$ǿkBI6=#p0Ըv© `?8 Ƴ9}n?*'kʂq|&ٚ`GP2}Ty^x9rNm/3Ppx_Sp|+UH,4rkeA?X⥨FArqR| ] Zc/0b 0(5pSRuSǺ_?dX ޽)btȩ\@M[5vߗ20G5hx7v_H9ueb%Ss?|AG}-~aߥؙ'i.Cg⧻?o; j{mMrM~?P0%Bߣ Uƒz4toJ"3^:v⊰ B=Np"v؜T|5ڨ̭SJ I8-I5n-)r ݚ I.LYV*2]*&q[k"D8|ev?L:Q 9>G#abq 0J{t%su-V/-〝OYyRI]g񰺞) Z8DH\2 .@&9 \{*էB\<7jJ73EjoAKgkC70Ӈp0pʞV#mWM`Q~^:¬MLhl6ݰv2֊ [C xia8F-4*6ryE@c=6-6ʚ۸}!ÌXS4*L*Xzie'^be Ak*b#,Se;7Qa9d8xwvX{FȨV4'قڋf.4jr2Nf~IB ʊe~S ~ > l"]n(ojc"A44oν pޕ*8D_Y{X^7ڦŻ,z;[pf %V)ώaH/ZŎ@ 0M;o gg>O%(1@ǐc0Uj>f0rAu钪:.i]:&֔( 2 .klXb{nfܶ+o u xr9E떄~2R:AD_5H@' 2T@zpz9U8,)h5yzx((oIbiUn= >1їnf=«#-ǫtT?oh3r;K\YcCO@1[ϴdU=r`{Xm(IG0~cѦ | ?x?G4w@&!4:=Suwf? A:=Hv40K9f?z\,W p][s%ЦKucO SeṔ7üQ.V7[ E"X|ѵRUep*!b5WY)Q[0'^5Gz(o=ϨϨ4aرa$(_g%88v|zR@;-w8uka{iYyW\xNj6oqfd NL?eduF_4XA k[bLi YwܡݑfNmhRP%!ۺ} {."TF@-!waR*鿱vXY9WΙ6Z:/|%43YC xܜpΔ@wE2fa~燄g2GWQ~hkoUn{l[dKedO.]Z& +PK'#ɠIom0mFG4ʶ[dm`ps<uļ +rMu,4nZw",hc}dc||n"c-¶ Ͽc̈́|,Z#t,7AΝtҪY(3U8a/D  `DˢUؿsDQ>w @į{`Icp5H3IDK=@L/lgX'ac *'˩GTw 6oP@#8/S=dWq nhP Orl:>ZhaaA3z5ԑ T}#}d7e :_VءbgL*(Wɢ8^vRfv7yChBSIN$|Ե's-V;>_-Nb9؆bY)g]O ''3>l7/k#B\mCOuD9`bJLD+:vvZhPP߄}*,ˋiTho`[$~r@WMd1{FLT>bF:5N#JG@[':OېJ\)to2q*wnU{K_/ZM23s!φ0;ٵjХnYiZH=S +W.2"Q_ tXQJ6&Y%R`I+݊@ȋ]!&﬙$iԘ"YA7+s ="׶8$IW}!lpe [;U0@<ܛgm$#uW[Ly_ZmDA!7 qDq^PT^;lƭ!3JjwN+}@rӮ#Λ7*o52V9KY\ﶮIOru D?mie~'+B8?**l|pjܮ| R&pfݦ&uwu|XI#`LUNƠxC(+W2鵫s~geI/zK \ m5DX5UNOV5YD (ϼv^ЁW?F!"v̆%㗊" bMFϠ͵u#q׉bS[rȓhwVQ5ggԁ/6-H|.! ǦKGMV6~ϵ1bM|]so7RVikLuB3b>R=3umɽ"WfG/ ɰ׸BbAF/WWy8~7=yn.UUP9aPuj?7 R\67̰ތ )ҽpeaPċtQ=Hz@-pV?m=Љ>dn|,۩I'PBP=*漁֔%>Yrx>iM[J|/[ar i"L#rJRe:2'1*Eܼ&M15 l(u%UCAEIEVa:t[uY ?7sFf9/r$$O4xa°rGټ7(4[[➔g~֬}][a?7ꔤs )yt*\RR4a=iT.08(]?E`yPMHc ;o_~?J'", yoeo>$<Շus׆:/k r%Ubc}_/TsXZKrא8+fRzH;)ȤH<^i* ha+:bG䭷pUҫP 4/8ĮFUrjݕDcT%f) {~7lqDMZԈ7Ё=L-J_zig;j3v6JfMҖNQ͎l8彿] j"3 =/iJj[ }tNCm Aї0tg7ڎw{<(|Ccs:eO<^C) cƄ5kTҲ_$,i$є8eq8`=\wdvѰW.+htĚ+y2 پl|÷*INJ;uQ W[`Pm6G#c? T6[9@t˱ҷȨ[Fv D>z(8%3>$ZDHؼȫ_ 4Ė`g`!(*qd#H?y[Zí2A?>"XZWliF=8i(!mJ#Ѥ9'M_* .>xGŒQJ'lGS|܃fm-R?⏯QS:cmXk߶R=5Qh-әȜ@ 'H]kϽ0'cȄHszr DZ^-z w#@kȤmKhW+:̉"EUz~!R[RS$f=ޑ]Դw+^=. 4$]c5yW&X{oj]DfRnN&Ek^%,}ШUGU0oKڋ9{G_YP &ݶ8+rg=hD x?ޤ H0鍤Iߔ+YEGm lN wɟ5MDۃMR$ LQ6}ssB),)fʊq=T K-`^d578E͙>7c^R4U+44{k (x;a2lKڠ^Q!8e`:nV́0@AM%8|r E5Q.K#,!=! Ζz!ow=jt$jR|y%~*.-)-ιjrʛ8T[(Y\F6LFs*Guޣ*͕Y:ITX_HUlcG{,)m{*Xw蛸 RxI5ݜuYiQn 2o RC*7EC!RL Or(8Ek'VӻB 1[ ̛׳kG%xjNʫy`_3UYx0gᶛYŢj_^(qſ.FJ}?gjaJV5`^w7"QIGq;w l-$1#ơP&+e"* SGQD>p<ʪ034x/U$y0\VhW'~)F86䡖;[^|VPwQaG w(]+Bj/k9ܐ>CAsCz=$A+ p Lޑ%$|@ɈRC"fԈ!y r$4t`RL7L*e;l!ew\/^ITyu\\݄qfZ5K|yHu}Lrh9c3摘 rՐZ}Ш3:P+:(awӫ-%eDퟡYݐ4'2AĭwQ|~$ A>:6rD?؆iփeW?{$% A[lWQ$H?'ތ$e9wa6D'T33H%i:>?6hR󀓡 SY]/B?/WHP(G/^4ɡ /^kgV3 9׶G(ׄO>0X}XgLM%am~Y3#sPU hQ Vi+Q,'[zm5jQ7OWn/=i{3[|s7mhD(mSU\V, Ja_AF&UjJHc*4z<O!AQCnML{lmŽyධ ibA rOZG7/tҨ$IiC Xo/ǁ~ٿ 9rMST3stj|덯4Nh[DÀ=z:Ð9?itv~AɊ&~RF!g΢Sf(8. ҲMT=Uo w\|CSli.awUYZ(#Kbp9N(>BOUCדP_ǭ"8h /?:UMPC> K߷1o屢 +/M1$Ml.kW}I0Y_N=EN: h^8|!ϜB{²2~YƏl*WNP2ܧ=w5/X@D)r7ޭͩv!ג+eE5 Kbxfx4.`rHgMTTrѻꊒ#MkYF7 lZpĪ oP1]IHDEWs2%$=|u}BVWĀ r ]#"yw},Z9 gT C{Y8"MX!cUX>=9=G:W(E41 ɥ@^ l*N9if{gn`s$rt&ڪ?2-`kjZDF?x bSCqG{O]"ѢJ=bvwxc\OmvTW  #!@0'8 i5'k5 (e:NqbOP`o'؜ ~XsSU cxG B\"hg/ZG/lB ԯ +ПAl2(?e8miLv@ /iH:U1f2wϬ2Tj+&X9dzmy]tn8Bre޷\"F9iӋ\TU3C*i \t!뷖<ǗMͬ`_tQ x 6,E3n_1?%]` ;(l<ڦoR_yFkgaH=|Ćd炚$[Ϣ15Rm#TnYjϓ~.ff b8q1m"=Dk+9t fGN^~.0XӽaTX௚̔Әյϔ*atnfـ\]:qU(MU.Sx©@85{H, x8ss3/Kf* >A8$X67Y ;+8oo9;"liʌ ]F4Q1@:&g94UtImc9dr e*ɜS϶1)} +"YAw߃k0ph.y$hiz1hq(B,Etq"$_؍xJh̐-8E c>W 8<*cJmK]ϽC>ȸ(3?}6zpSQŀ%6!LΤֱZ*˅"y*v8P@ɇ }h'/υ蝚L'J$"ÔmZI8 W`V 6DgQ}*PA?+i' %ޱl ;O0:LK짏Jy+]ύr޸Cp,ܘ2ަU|`i I/{~쩴27:lm3Z=d bv{DZ;Z+Q\AΎl7v;*KX,Ux«% 8*85bHejQknQKLKD7hV MS`9 ݟ U45:-K&d0}ǡx/rmR?7f I~/.lC &nU95dX :^w^J%O5 R֣C<$@sν//6~%Z©zK*R JIj #TIl]aH0;PM[:߾O, }>ru""h>ZP{Ҭϡ{z4qi-:+N=rE0hxPpw-}L k̅<-D'Fj- 7huq jxL8*q:D@st.6B]"OCun]{I4ԙ.JC^\3iʚE &f@]`yeE X9lЙGڸHMke3ymĆ$:q&=311F~yil|b|mt:jQ b0.H$F3V-HL-voaS'i8!!8OlҋʁMԟ4. X(#(Me}Rl"eIJriWJ\S!7/uJ ԈOM>P5UO^PՒ=CY&4G!lYgP DŽ $42;p} a 6Ԗlrbq0l[;͌{VB\B [gIa10cp".n@2dxˤU9Wv1ـYܜ_f_68EwZ04|!ibq_aBFfY߄4V5iuIIu6hGs:i8B*PW`niGEhߔ/ .l=O:a@ vUʊh waeK4~eK`~JN70#%D WCfg5BUr %jy*\.,xgu'mQ\-6tL+|"dc9̬'9P(8[!.j>O5upT^Ҁh2%tVZo@Ro"x8aTe^>(/)ᔄ7ȘE<ά~ jqJ_os FJesjrjAa~ەa+pVl}>`d19e`YM< Fj$Ґ6U_qk33¬k[ E/fm@:;Xϻ8㨧} V|қMkXmh:`FnF`@SWa%!if͆P bRN+5^ .(a#N"eߧzNu ;%B~ov*'5{Ue%EHэ'?):}"(g#_IUbik=]9*m!+kyU/$IR k΢aͼZv)>1D{vd ety׌Oc̱D=NnBCCҁh|`rĠ`eYuƖNpZE}{Y+ey IrH:ᐭ!֔EST/ǥgTbu<u;0B~`w j9{N֧$FRsY0哔g)aOXݱyc;zoM^JZB7TܔGg^Goe3V P`EtS} k;Hfh+12. eLJf8A1AJ(HbJGd9yJ1m.Ӥ\5'Ef ߖ0Oy>t$;Vxl|KQ!Up}GˮQE\eeT||a}k =OUsU])@bԱ8ڕ`&aFU{H>LRS#EH1U:r2BC̳ƿ|vz+<ƉˏZ,/} $|F1=籶~{ҼRm]oPcs_FFGg?&i8 &7%{kѫiXKm{U3L~;ûDcH}1Kۥ[^ﰀ[ ٕr Rh:(/ q%Y Phk>~O?gdS4W~F cSM>@6pydPifP힩$e{:ӵ:|1/% nWeZ"=g-5Yܥ^ `SI&],!F^X.. P`; @x>x%_6 E #|W$՝(-M%;vʋxriwiMlWގ>k뗪OŰPuԪ'hthUE-n5sln+F o_S*o^rL&]m =Pt3J L#fR?z> >JP/.@-$_-"c!0ػ^ǗvBjyҦ1 .0<F֣U~d%͌ciYW꾴3 Z(,ߩ Ux}1I%v{)MJ]`,,ru_7ѹPߪN6:qqBr RaH~e0&|\#5k˹c#Zn.ߟ, 60 7R~p3y[zhDrpOJaBM+>),%TIڸ\ 3E*z#-Mj7 ɊPsx(ۥ:^4&E~S4~aOx#^uW(Le0u?)hᆷ$.{qd# r2֒eLQVj{z[bחS|^+Z  XlhN8TSx˕ZxE>q;N$R\pg[Lj|3'l׶Ddd\&!PB:e? 2~|̥"i{g&vaVaā~ ryPk(`ծ~f~unt_ak4+R↭M*  _ߵSmezKckb.WALW`NoRRWEX2lBW0&{-fc>oI3 *53bI65nm_,m BqR&VB s> rS0j@] T7e84WˑԢkKFxmYc9P:Q`sPDm;A֩ݒbk ?Sa咭 EV#jO#ɻ5XRnk{z`=.f] $*{b\Ai3| ~PuF.@ Po7.}9h ccWƏd҄+Ls2I֘LjP<>єIܤCVUmR[]K/zǒ{LG[w .^~ $,Y8{-Թa9z` ┶)FhQIbM)=,npGHQ)~.6@yd.8Z6Fz UoccIz/hȄ J#@dK#ܛyEP!:53 !87bH3V=WS#%r;1yF_ !]r$ #9yQ8+k<8JwG@1[͛И*`E)ڱdBn %$_kV7MKrNV Kn *wlmIX(>ꗈXgE^WߘI#񶨍M#{w[%*D 6entQTZI ~Jn;qm9 í2fIӿZhga=<?j4 «[&0983(t@&uȱo0i0nkҐs`)Ų^B՜D =y !65>̌A !|k̀1yGI~<έ>kHb嫘^ȕzɫϖViԞ#_!]Dڰy9j$Or+wc.&0\J8 ,"t$AZ=J'7jޣ9:s,zOw"ym1 [bXpAg^佄r'rp ˱gt$Ovzdà45Bx$K & 9U1b;I9*uWV /CʻX;ȷ-wb[|Ŗݰ) :3g/|#1!8B.H6%o@\>JPtZnZ Eyh#=|.T_*qMG߂i@Xfy]mIJP DU0ɹ%5J.!*%)l/ʟO'3 7 A.h2:7c bT{W~ $_YE'.1dյ`bEȃ}\|?v\6`,([*xgaxgM^Gg8陮vzO,gUN *:ucPX\뀏bř6<ӷ3,nMw E V#` A.z#؊M4Tn1p^Լ`^ՃZHkK47<⭒ vʣ:?>uͤ-wSzNG0U |Hs: MD*z?1+;  #<" Z 3K,- EHb !*Pj1˦s )&{Rj֖==*[4EiPQıU`=n3ElPB0Y㋪~?oCAU/ukN d').DV ܷ~o3ΛI ǭ 6z0ds%_Q=nĵst4't;Ϝ J0/IJHvfwU߷(roUY>hXsj:čS=*pKw*YxNVk3-OL HXp̑QuDn^3b"H\Oejc@ )Y8oy;6'4H.喇9}Afl?'e ia~8Cbf0$Ŀ{~ tu'pEY)ןŰkArx{kr Mdd;=8$^$Ń'>o賳٘ -Ws%:oIP,~*3=u9cLf]h]$:[--ě\[$}.Qcn,rMl 8e]' 7JEBQḫN1ů<-]%[Wr96 i{+ۺ䖰}V}z"k͗%_15JzKϛfȊ$ҷ <,7/ vڞ;HS؂-rOr*q* X  T@@P8s<-qo빕{`#nN\|\k8y562w `j5$$cHAٌXԛ;:xEɼv_1A&bldH z-֜c2^U# 0]5s'=ӡ*& mƱƸw%OK6 1%+^|2 XouҚYB54l&aJM"& xdͪw0!fXM>՜m~QVotJ~(U$NR~grmG$1Й#sb>v@T'Kl%) 7TGbfn/Qw'm۹?f~*|pVWVw1/ XNdY,8tU70ĝi{KVSȏi3&h<4QH%n r[)SE4[;IhlU$Zvuaaۙt ^ZƤxZg Y/Fzx<捁A{XԾQ3\ cLckCr8EdkEmChwһ{];Y%ikphbIQ XxqxA Z NцPX1b%|eG/}󚷘@Ć ;\[ȹf{,\) a#\D"pYG%4yLEPn F6S_5jNrF E^OOMCTR/,5h+#\ܭļs(L:vdCᔃ 0]By`fIã]*%&ţvy(a9Xɪ{@y6L.z@[i.c`Yk]/,1=aH=ѾHE)ag'ĦRqeo |IUES H%Ӽu5X񎶓 N BDI^͌?ix-22ƫ E"1-)7g8yDZ^%lD}li=nj" yqqwQ{:f&Gu7dM U'+A* c X{&c˅S!Q+p+ŰJ1pTOOoj Pz7 ݍ"Utn#jEb8!,."#!T"ʱ:1}jA=8Im(9 D&iPd,? (?);:(}>dK WK+$)#%?{6D-8`2E;R+/N?{Ɛoۀqz@Kz|a w4 ʧngbC2RE=+gMosxp1}#`g-Ի`emXY;trsL&JpȤ|#w'}E|@Z=J;]H\k6N2:J A<T R%Pj0I4d^D,[nYC bo`4ſZrh@S(Ƚb?Z'i1G )sK6B]b%u)1:Uڹ]adz]|^˻iIp@GN0GoO]NTA\@aoL;SpY&Jg ة߫EDqJD FtqƇB-d~lj2FcRہOU b\lǕ#iXƍ A {iF˜@GGDilR*xmF}dũfy f$NLlrp:$*n՜i^6)V\QLծK[hU~F[NR͆KiPP{iDTnwO6I1ЂP-##qS82-L50]5ꇄ0A޽M >;[He;_-oa=ւ}*/fb7VnUd^J Y2PԊ5HUj$$o:Ip N 1nQ$nynԷ)[ $X IgΈJ1Y1b~ht*^$s7ux9uPtZ*۟rpB~&ɩ Dܑ|Wc`ޢ(5eXt̶1NH|=++P;`sxxXF1>yz܎_l)Zdu-Z=pt,;iڌ$Lm@9{^K"Mw$Jֳ do}!؈,v0FDUf~:p JU}F<̴c5{FFiz#t3 )v DO,Ք_uRW+0=-0YxgqDlPN3eĤWڬ"9>LepOGԫ.iTeDokWva І"o >^%l/a ?휈Z PSwsщ%0oL \EOdP^ri'}6w)l=+0b)?R 7h0ݣS^IC#PDufߣS kb h–I5(؈Q2v*ҕ&q[P}ŠmO4 <&:ҍHi#Ej:@oz|pivbPO:ᡬN׼JK R&qOe/IOVz$SâOY ѼPIc,.HfÖñmg\xoڦv]+rtB\,N%qD+'5_'~*PCG`dzqh2f]!ٍ"NPgVxQP0WbC&#C[I߇1t{iM}<_n †`h*n.^ G R_{4dn+3 /2 Swn7=`},8] xj+]6B9Dw1xagl7 &E4G-V"XƘ] G˒ I+n!UiMɢnN>E}o>b@.bVKe_ĠB^{?qn2}(NJr$n%&.T*3aqAvʳn Gu>օa3O GEx,>[R=H7.7Ő =Oh$6B[/er- ڬj"T{\ޅ~x*0,#!/oh]\.wbd=r[TD;l0U~^à ןϤfpgۻaw肧// 96 8R$kQTcw|$/X 6ǂ NVH=pW}ʀEkޚrug2Z8ܮq:#c6q  rD:=F9T%$N_vM̟4T~@eZ J> ݃M=k:hisND68Wւ63čiI/9u Pin / L?hՄa!>|$ mԙ @hT%8ߚE/*%Ҽ2'Uӟ*rɃl:]ߙ{J4| ?&NAm ;iKG?vupF{: ԉZ[+q\tpMb~to0w_2=B4R=DEahA$>.K&-xg"$ :5#ic9$7b[x^R6R ATi)4KrHv%t@\0c1pj!b#3:[SD!5ځ8}R%9~K!SKiS{;wh1o+3/@D jFZTUq1ю3d:μ~ 97e&PM}VYa*%79ڥ8ه Xֹzԉkf5UnqW sܺ'K*|PWGQR'%1,65" E-:nU>!Wa~@UOliBM~yCcNuV3H4:f.>UGD؇ݷgŪC"cqz/Wİ(2"jD`ؘwj cX3%seH}V"H&3JI@\OꚧNFyL/DerdVgvV4R<}VT%FJZW#iQ6 {D{ª( `6hک3x(BR<[gE&2?kb"Yu #rESxs<'71 25v}nkaH '|r3$knˮ4X/|'F瑇~]wEGpI'?rMBDԨܸ}f6F$+ R#mea"vpHYYKЙyXGbp%.ϐNƁ*DXg64?)vT"EĦϧ|uSJ!ԫ!A'cYf栯Si9fܤ ~ȡ6:"#_%ܔSN#5g4~B|*h"ࠃ X:_YdE@54EZ^ dlfD̀>եk~UYMΝx])T*͍kVCĪ@ |;ȨJxGsmBɠ{m1ڊS*`\ia@hZ2!W&U aDE|l|S 0z7Z(4NÔ WrXk @< Ons}tq!0v%0w_tLKX`,a@\*;212ElW uq06%|J ^8g[_C6is&a䠨Fcf<0^Z- WoǞjDl':{ Z%{wعqٟc41K$/ʼn"3/׀1..h@rreϩt %$.Jȷ {pw_ 7Ztcӯ^'2 5 Z4c/[:@OXIѮ2-A77a5b2+etvg$R@>Ap@$Hړa)/wcG soe8QhXK\M=ꓘ)\2#G"Չ~Fu.̟Kތ^ q<|=e.%Nָ40% / ;^(ć? EBo61OxtNgC.k9|lڻ53K*'DLroڭ^"MeB0 ]q53ڭz~UIc)#]h(ReEGXVib!xj@(SA  g֔[ 4򬂁V< 9߼-fwX˙iO/Q] %w2#k@2JC<;-4d*odJ4}ՎlO yj~\5c3 p[r-2\wBǠ=Zؒ=.Չ0哇ۚ)tpX %af&\{ SQXGC:RԠx oGVj܁@uB̭*jM G~d/74g_fIfw^1;Ɏ6U/h 2/6qX ;H/:'XZwm[n9lhܡ´bc'cL%WBp?2PCd>#h4p$d+>AzvMV;TeUf԰ޝz%~y+ qcOWJ?!? ۚNF]vn=4LW eO8Sjڞ9}(3K4|dlx3Tge`yE`K] -tE># n U1\ūL$> ^?>ر9Q!]IѼ1SȽYEwVJE7 O2B1qDPv&* ̧ Txg)T&1MiMALۂo~ĤGLOߟ{BQu`'LsuTq^૖)!wQ˨Jsc]*Wu<'٥ 4R1DSPE~fDZPߑzo ) @XE`0J*у_9jNyFzk#W?C dy{ܲ7N!Xk>V-h^&kNă[A߮R#xi.R.ƍB02(~7H>(<.`S%zx)8_M}Cݛd7kseUg4WrOv\țF*o>=RA D*NC2W \%ό| t>uXt5x(HN<5M8#4h,,Q [b\ 2yߡ,r&A2aᎠB  .}^Ik<;r$/,sBd| "DdkBĦX(3|y;}=!ʽq&}R5Eٛ'% hirCXD6h c3)~f~|ZDeZ˭.o.b,4P℗Lp$:7 V}=[H3;>t7hQV!n#s;&`! T(ywƉHV^|!D-K[vV-AkW!nVAe?BWnkZ̩,pcdQ=s Mb}pcAi74Mzw2+]T& 薭XZ+>g'ِc-_o5b|{~&TzG7ƕmq:Xwˑ)<+㌯_]'U"\6H%*DW݃ʩIV@ ?1ur3DɍodVrs ɰIkP[^!ZYrU2--ǻ"tju|ZK,xkžTi>eх# ڴMdӂ:-M &&dyn{z ;=eUcZy? 'x}?zvCGKOY4ؼd|x?|=-_kb1N'gQ4h^hv4'xk8yVj! +jdF)R Ac4 6ƣo0ѝ3D1r2`ּ@&`H 0j tc>&`B'RGU,[EŤ-o5UtIVۿ4%4<1wPt[X wșn;nt-*,XTj](]"M}Z;z7Tro)ӎëHIʽ܃1DJk&- +nF`|ҽM} Yt=C{:tShTmjnK7ϑq.Һt}QXX2jD39'UɁê+1()&PQxҲRfDPHpi8Zwqf@#Hn" +v=n[$){oi&z vbb>a k/;J C&ܶFO%`iIjjkaÞ{W&iْp-7\d)g-[5ǧ37@谟7SA9OYtLgF2|2VPƜ ÿ?u<آ4~lL(|MP[G3AVR;ًNIU%[A.$&g^ .In['+E|~pC}q >U}e!5LC%;L,1i؝J'k.wk+d=O_"-^kgֳ.L{wqqVn êBi-o5bg 8A F4D [EYіm (nU D{m,AM7yGfSy [{_CsLrқ*9J-Q!F+6L_z +6I\ [-B A]\Y(Lwus}iN9S*/uckJyuH79T(8g(4"^M} kOBxE6)ڍ2UQ7_,hEOr1P?{\P-.-=7ee]ĮfI>{4|*.4PFIOq奏1&M$/t1ѽ#]H2 aiA> 9:+9nSQ﹑j,}?q9A-J-+C {X٤襽;B"^=toPUNˍ=P|qPSG3f-s{}J}Y N_YwXc+p&5Sݺ ہ:vG~Dp6cdcg@2Lpޛn`zaJ4u(n{4&,{1#&@Aj TUH_Zhu H #lBѦwY5Ei"%&iBuvd3Bc@x/gW7j~UzV+#3?/MpkڷKG~r<%bVviɽb#^^Qn"+= ?5k%tu>xT CNq]{l>E1oѻւvϊDsWZJƙ^)4:nY00Wl  [IpkGj?Qi-Yr1bBYQ֒l_m4T#di/ܶkd %>;HVN5}pnw'xDg&hfݗ:4#pYT_>G ܲt/PM l2 ~]w7"Yo񑆠Aޛ`B֭0R:Z"-Ԝ%&}N}dSó{ k<HU5JoKs?Qo&6(v >Hr4B]qdV CgkZTdD`|*W. -(nt&fI[v(I]F37!3pbtǽZ}0 6dE&4G%Zk#ˇ8nFtRl&"xy󝄖4f?,b@SUaq 4:}WvKS-ZUyTs!-B$='য|^ՃfA /*s4}^S"]njB|Z6] *9=d9uLR`lG|ġpDM3JU=:"^b`ؐˆC(. '=U=ŗ4aٹmW;lXe.]_f0cKa[MP_4fK˭AOǥAUzTB$3\;4D]`NX~#Wۈ݀Eq~g> qƌ6`>Uo&]DƙHâ@/vwEk}[/2'^a!~ [ǔspvOf0묜 [~A [ Sp&!c.WP-B8ƘITQ{=7Q# "f<ﻬ @Y |#,]G#ڗ!Ԃ*9!e`-ۻPe`*݈pIt%0D-wѡƗ՗$C.U8sE4gyʎ%$tK}eÞ0nqt=z|x'VFLWjdMPY[ -ER^k]'b͋dٝa4 u :Cg;>;Ҷ ʝ᣶m%0&wW nz wb1P.&b}; cU1 ?%UD9VXͰx۔Kq8Z۪uGRX;#@g"}$},  G n5L-QiÔ MWUw\S2dW<.y  v`Hqw &-B7r۪,ӃgGLډQ65&J. kA`Nb'bEbʫ(ae331 WGɚ~f6塈`y)*sbw됷/eB\ j5'8y|x$eyAsOJ GF),\v}ӇF:Չu- Hy" dٛ;( exRwg11[Jg2̇:!,VL袶?)9Fzٚx-͙i `*3ifIw}u`zj!?,.wcʝ6d.Mw vf.3P,-T\@6:hNq  46ȟ;8ߎ b;Ń2rY @؎ke5 L-v&U9mhn8uFۼVjsO=[ިԋsH6R!ɐ*FTfDNegO9ӟ A Ö . plW~hiB =k\#7m2(K )R44 PLwg P+{u:=W$Q%IZ@URn~RK)O0T&Pld8QZUm$AHSb܀Ž0r%OI=00%2Xh6o ;F >-At8'7̴lbn] NOIۅ|#FQ3t3@DziEQ=)9j W7۾nz$ 9X 磵{K2+Uʺ扟%~izZi[!eKz;$Ԉ)-d-wk2Z  ɜReg!*hI_pV+&\=3!G)\lڂ\r#2Dyk{ ;d)lCƄ u{D oG+*gKy).ҬQ'" >,}8jۺ\Gq% _X Up2*C ƖkW)T23pm[ `PencefN5s?8SZ0OƝ$RsSUkPQK18 D&d-<2x|LC̖.]2lwD.#F=&FY*oh.9xA-L|/QrA Qlɾ&9L2ji#G2z8;Fb1j710?G}!치Ma0K]ȿ~iYI+tpx#skS*g8XCة BzC%(bqӘ{Eǭ/}iw@#cs/ng:uV6I"["y.ʨj% u4]+Ŧذʱ\96wςm!v7lp ),{Ry{>D /nWC C1P6%qʕ/+WHq ؄>dܭ}Å;°dܼiBkZ{ 8+L5P ʋ"fky5 ka;Jh4'#*wH^8Z0URdϧ ztL+5si[C(ui~9&%mf$("K{JS||& m5b_"Qߧ.Ϝ_v4u3r J ȸMT+; mAs*uMt\kGB@7iG26tyLE=tİ^+O1Hѿ|44xNHd#PdĞZ!cX)b 6l)UGMA5J~8?&m'[(_h%/g僶L~,eY8KCoK "2N6دa >)%<8;ޘ[q67Ϣ擔ޛ_w鉕bç 7 DD0, ݰXB#ɩ5#=ڲc|3iG"3q0Rij`->,BQf{ڔ=J(y&Z?N,Y[Wk?j \R~2Yۺpw?(T@د'trRU@xm|=)KsWMޞS0n(RtCPsV|(rFQK9>$'2! d&#;šG&zTajR+/}> 7/0? OE_>$N'y#5 s:+p1'_܏Ծ*Kwf%wlL, =LSޣ6(I9Iqޘ<3G%*N{@x˾[lR5qXcա̀5[s١L̆ ĤH 3$h|1tib<]9G-Ε%uSHWմB Xލ)Oal/ׇ"+4 K%:O] izc67u.A Jc8pjBG{a|s)Seٴ*ٮalVk$,.6MSw#a!3zhD&KWjYk*\tc7C'qB^12%KXv QY[Dr2Nx$DT6+h/$weFPk:tcy|+ٺ{ Vݹxp shW+|x~ }q,S  J s]yqbkU6L5'.4zZi 0Wɋ7_(3zؚ24ӝ[}.[iSOI@uk(EAs72&OÀJM?}k7=-GkڒrCkG}v?InC0kD5,dBFy{y ~廭51N:J/H^B7l[6D2~B: TtUo/#rȅqfZ*f@hNg?zE2h;O}-VI1Dǧҏ4S}OַW }YʕJ7ɵIOjv S'9NO1(Syp-ku0:}a yf> b=HwߕA2%R:'$-$2Ud-WRE47Φ\< :ȱ%,o̧L OJc0+4Ͳ I4!ޠɆpSeIH@YI,\OƊKŇEG[ s "7Wdik|+Fu jD%Bb+G4 7u=P%vfk: Pb?>oﶿYt 5m\n}q@g Wm+zfX x5ؓdpRF$O _d]T-V) Lt,>iR7G:PoE hбg-Rsȁo&c^KՒ=*dq, HV#3 gՇD)%`#@|t M"_j2u<9捻SF3׽ٺe.MaGgnRZ׊ks/޺6< _c ۮ*&]^ZD!*ҧM϶DNO&P$NunAiv&*48hiJF4 ؑ={̖ ^o#'lzLr\5e_5 LO)S6Lbsnm_=5w$p+=Pu }vIO~](X֙^*n K}\qN_p$ )"3^ty,%H%x4fqY1 L2mR ! IFEKβ^;9 m$ t:dky-6t$!ZQT)H`^Dzm:> nمvpfsRau4QdFďz]]X&wF+:-ݿ sF*WJPZ9rӉ18*Qw?,5̴gX%|#7%pz#6p?bKG !BƉh}_x`8o,k*l?%VNF8 .T'L3 *Cȏ/`JT<8n9=M q?RGdAv”DRzi܌>QSy+Pb){XޜHs;0a<}g0k"2 5උ|^}BYArKl/,14$ut"{ꢎzG2hfRFEIMn3%h%Tu,L|&OfaadD᤭U⫖fުDo<4K૚?iv' S(DiIl*) @roœA`9D}= RQÒ(-؆1 ݘQ%&۶ mxIo$lCsAM$lp.ѱDQj'$yRmWօAE#-lR,*!?9 җ)!xoDD$z6q3{zkt?-@ŐEcdOGsW`){|Dy^Zє( Hq>e-dg&ՆewE)1Fɡk1 魕vRn]lo80ٚݫ0AÃc>WlhZ`# {'N/?|+B #5kHb뽟Goj{u >l0SVxYt+M 63@B'˵ :kUS'bE0!fpz$IǣꍚR.*O!Nm!cC6ӴB'r.ι5PQq-Gii aw=cQTvyl v$jO| Wwϱ1 ¨W>h\Lk h/eR DvԶhs]>>TJ 9J>K{0\9*,O_qJ$_kRi&;͝OF. O^cĺԏ+'Bh⓵D?'ȭIq>悠t8Ȣj F Xm5ֈ8p4W3D"7v2Ϗ2lG=ܖk)q@ԒϖUqKHz^V lJ^s61XV>DT6V`\:V~gPbn7׆mנ0}sȺiV`1nt?oP &4"?mltC+}X^}%/)_@}7IqOyclmkNOf:av8@;P?1L֊2͊ByV^d:r^.lHغ1/1aKti3M!K Q5WV'% wrQӤbRH5;+6$I@3 ="FSu(!hjL{hr8A *vq `]QRXŬ ^E#{΂32\`H(ZǴ NYd]zBlHLoJ&"G`+CaLhbW^`8ĄϨ e@@S?]hq*k@ Ik ㆋ ޝL,'~0%dI_yM .w+G!h8~O?FP=(a> 7x];~\q|Y,~:(xBFn)f^%~cNMi]fI/LS3ljl3^c d<:S+S]߸b3,mB?*uH Wj޲?>p_J5O^n{S3!,D+q)X /KR)E*~3ta_m@Y𩞯fs p<2*fV7>Ix/wQ 6 %w|xŒ٭'tCuSߺ_a6I_yf Ĺl7/ukwQd,NV(ŮQ'Toǐ/ƃ5cU Յ m ΚTLYe By{Ў(%.o(gVlMzaQ.XϩgEWۻp W+rm-!+qC¾,sd^j tZ~VAsci5@{/2SLtVc3Dt}[PrՁe`?95RJ<{z٫F> hmӭ 8vz܈qƸHg>h&# d@—Hv<*4AQy  zD>;y''om+POGyDxK֭f(chO FpHq9y@`}K ιnE5wF>Lۣzw#uYǰ,*>NW ksfLdfQhAJxxmZ!Nq#=<@( D@Q]$My#pT)hbS\A%(^Fɮ"+UXs݌%-%+r l>ݗ~_.Z93'_Ip7mT){] /OA 幰a[mf7vͅx(lM$K"T䭦sUމN=MY=0. Z͠F՝V*J[+ ˻7 ۜͧg'8 OgKii@oI/42:xW%2cd`6Ye-ICT4KLHr Cn#}cYOFDTLg$'L5535z ˶;Q'`>cwM?C :gvlO<AK2f8'+N$b{, {5.VG w4< x_ ~B7\AB!Q`PtBIcQNϜP@][6^lTkI>F7}xȄ5.y9T@vl[N _H86`hf:`DiuԺEVbcp {abC@zoDвPf]`6ZG!|CPf rE{!͐[V&yƐ_|J-o.H?+H|*Pc K&T 5,҄;)h QMUse7Ne0n~$ 4p#\5;Hq0raUb3GI'VϩMHVviԽtL++oc;h2(-Y:kp5{ ,$.&IN;I[,P!u2<|:~V{80}weûCPQtk+JyG;#XOiw~0}||_y59-b~yAb-+UCoȢ~ѹ?(݀vv =Ni_4Er͇. /$!P9FlBTn`1Ū+}kP1.~Q{]*i(S r!Tf^35[5f_W!I?DEU{ T͕qnƵ|r2.{3{UBS_+kUp@iȹbA#zL0m@P]CDX7b 9&Ds¼7(D]QEJnLXvٮ?#wSQ֑%'mUThQ^!XHNq_Ķ ų!vFuttSXӬ'/m !aXQ ,Ϋx(?В oai~d#ʳ"QNT5/?XtE4#,-I.O+Q?VysluC2pyia{Z'زL1%* )' ZxDӯ,J$~ߤ G`Q\ↁ辦TBNvʢ5,~ 9p Gu?Ѹ %VKr? L춟"UwNȿ0+]kB҄`M!jc/7W#.E { k/Sk^ۮȽN3rHs^%mc2b~O "^#~m[dƟCK.*CF@쑋ɼ+F΂ mybcpHѧZnZfpU"y+G  UOsHt h4};U`4RyO >9%Z!?^gv܌ȺmүP8g£%{b԰Sqv%J}fzZecVcnX'o7~:Ngo1E0.Գ#2mr?w€,h+$1 (zV7=#]Kێ5x[oP(->L? z.o1PFkv _'Kku͋h[f ..l\ \W)37IMↀT䏺֦&jKV 2Vj5ʘoP0?ʏM6X#h%$PyWuJٚf \%Nu ;Q57QNJH" j@!P'D|U1n“_` kuup8KryOaTK8Qmzsv\5/n:(|Ƥ?ф 'ywn#}УJ"R;. =@#~Qp9ʹd*kW-%i%*PZ(`OO4Y />7oW]hV:m Չ l˧݈4#eWB~ǴFlJmj7<'$#X)(<0{bb/{s dAM, 9\7QzH"V,5fntGY^٩;g虖F2!.˻kAq-FYpuu3}C"&gVm e\E8KJނ&@Jpspj!Vvt֮;PTm&?$>$p se@ya~gY;jL19*x5O>")ҽC;Hٹ9m3ԝ~#KV0hPF Ao>|#ro;-1(y}]Kx1_Sٞ[S cpaӛ~Y~cspk&VoWr^ 1|=! |\C/Z)~jOJ[ِ2 {r!C-U|8ÏTך$uPص0 |YGvkYmϨ^reR=aҚCUJW' _NTLZP>Z25w~;ggEY"zL#W m[ȩ/.l_VL`20TZ6_BEADpfM\PxC BHnL%~4ãv1-N3Z*?9ܗ{ 8W:&+O)O_4uP$et3Q:ԋ0|+5z9*܆qj< վ(@=T )G$ lF\T2ݪkh]2 4eK|m%dr?b~} o7 4$ 2{ݦW# ÍS`ѷfJ7ZȤ}Ԏ z=eU ]vD3Qf'ndNT%l9ڛ&Cf}&eZW& m[3:`[i/W}|2,\4!nH~1td]u GY`c-jj`+eI2K< E?U7{ⲧ\x #/?t{sP6woCm.Ph DGd4X/0Vb +"[zbk.X%뒶hzH2 &XpO1(fgh 8]* יuϏxpg.RZ<B>f ڟi+~Զ9h[4٨rX ψvi7Z톅Dsz  )ZS6{0ogq4oT]WBށiѷ}+[gfT(u<5 s mRݏ{yʣ p[x-QԗelV``l3uin̚.@lVcvl% bi3꾞gG[A,.SK>VӃvbG<qaK>LD+.H^oHo8ۋYWmMl^b|!|/8B;XI,R"+}lov4-/|rzCrAIqYd`CSsH7 jMBN({(ZE%>&n6²Rhsh4FAV[4FeM9٧$ q睌!V3S0@rkL ?'c/BU\!ڭ69f Ϧ";Ԭ6Y T%qb1C'˕5gj~}WR d!@Y7wcGj%T!Wkެ'7)+^/+}Xomeg1r*7T- ŭ=UMjĺmr*m/$`;E'7lM&pNpu՘hhpo0Y'#Nnbla|tb;OY}}œo PřEQPU1ZUӷHPBM-6k}keJ_c Fp_f1<IUSER>h¹VQy:ݶ0ZtK`ѫZI=Q9aAZWƂwg2X~BW6cPWs|k֦ C>6 :~zĥjîleZ$qZW%(~{{׭P4å}cpvDB+Hebr]SqO񰶙K;:2;}"b&ׇkiūxԼal?{nD8JS^26̙N}҅i\ui}nyZA4=<γ$$yߙ6Df?͒hl3r`". jyDy7r(J sY5kLy &#SȒ.Ap=krn8X_&6qH8/M4[W &J42zL5#)ߠ}<is_{{/?k''-$>ϡ>DȯMU5 vK˞a(6|i:'];|T=$vNAz&?fbYv%_.`Ni.|N uKdp !^憗{Eoy(9wJLa}/ᯏ@^?YdDФ?0P(M]wAJyP UvM%/oAgȴQoZ^{CןQ:x YjBEN<*C`<߱˥FdwCgC%%ՋRV$2rTt2A: ^ Ϝtv|9=Wc,Fm TWyj#KhI5Hp*2؈ƳxbAjŵ6HS( *wآ@;(ҺnGWf9roNt,9E:׋mȼgHij VX(#夀^O]UP+M^>;ȆvBR _;p("3RV:qEz>cYeB,_Bd^@n(0h$LbI~u0!DJ!JKv,՝W ϱhVXY 7Lu꽚#lA!MS+gӼƬC 1[\38mSL6ITh 9ːhX+\^6C'PU贈ӢZ3uN>W-*vBK:*x]n7sŦKOiF.W^?dC fx^3b Hw1L Ǿyhф%+uʴ&ԭV\@/_yࡉP._~qI߆}4'݌{A T/w+ L,rO8aK k~Q VqBa^*T5U?ܶԍ9$iILȧ@U۾̈́taCLKo>.yGDܪ9烄?(چݕѓ훪} \~lÝak!^`l o!0XAL!NvM7TAEKxׁg0y1 Y.ވGp'_PB4[xe -ju#,'s7vLLn;0km&UF86qxQ_*;k:췣m[BcB/V`0[?ɂ"A~ld'Jemj^* DgZc6WK>rh,a4i'Ę.fʟGȓxq◆}pOC@14c=Zع025?36~TLNtјm=&ɕglynMv J祊;mqjhN&w|GP/C㠴4J~ o ߜOH[ x7kDdέώ3k3 ܩ_|#gDsd_|=lش.iM>U E=KD%im;8jv52[1&2p_/Hr;]|D3C=}H꒹YQIZ2 k 31N0'eK':/%KsZre?g&H'0.,kx~ :D#0Y&&%+c0j)̠sPY' 5.fIP\?px4w?AcHBycL1w6k<@1֕M9ѵ]Vn`E2LjY2+7mm;>KB 6F$>?3 6E*E²G:]/Sضq+. ti 始 1tYbsٸh?ߖ >mN6ܯ_$z:èlaEQ@kI[v,]Ͳ4NW\h߫0Mdwv*'v҄8 ES(b 4`3k(]bvJX%ekļKbVMMq!*ZX ,[*ϰ7 &iSgtbc;Q-Z1eI?Ӑ@՞ЖpXV`ʓTgK} bX<& EJ)VbS((pe<Ŏ(}X k$I\-`^!:;9 x> Л s9ּaƅkLmGG2 YWj}knAm6AHEu8+LEl-*곛4dl8\CԶ,CLXS~]Aw P/B@SU*Yu$lMS^憰a=Ή  }ߙ,TN(kVv Qݛm$,ŧΜFdXz&^7F?gLo_p3;jin}d]8UNUe\2ٷ4*r\gﴭH PrEY>$;/wW??\~ Xִs_QvLJPe栠{onLcǃ ߦlL*&kRږI(w.q?\BMiC, 9Ixad{d@4㓞]K 3]|:wfU?IAv~Lh" g\X_l :cbX4}4,ɚ';+YRq&,ڐWf/λTJx0'/r&15kMWNJc=0MQ;my!jԫ'$8`riJ:S|c+(RO!ayj WZ`;3l| ;Kk 9U*U5ҋۑp=߭jm۟?}tu騺bt>{UK | C7U}#KN^#bgxR bt#-P=Podxo5p)]{Q2O(̎ W#weRqzU*[#b̦|uW>h$ĶJ:R†\f7R'yڎ`rz/V4Uؘ1-NIPHNeMnա|JBV"mCC)Ф1%~Ig M|_LSOu1X8۱D ^$Baqӯc~4ߖ G65 aޗE󞻁=oʱwoRl*\X/tUѿ¶qQKՊ`ߵ}&Y&isRB{D?#$d{+{($Ñ c[p$([b,CU0J;_vjhsk7Nц~ ZD?V+heʨlLs^-ɾr*cL:d ʭ\.[ viOJĵMኡd0H?KTa O\ +wS=2&m@տZI &l̽)>-[Dr{y *LMŖq4pn%(^cg7W#EV!NEN>=9"קG`vdehėECQGou&L|f^<|/Vf9#<^q W6JCc S,ԡm;6GՒx7 ?MiZlHzsoizN 6M캠2UvtFdv/B)QK)ǡQc`~ j*aL^OghUQgN5Wsʓ`O'! ,Vk%~ΏFb??qSK ę BSZwD̠hż}bСk X#3 3ñBY=IWApE˦)4I]ԃZ}nf)9Sd~-M~[,0XƸGِUҢcS`fw"i2,}dnG|'Y詩ԥ;SQ\fJl6/jbPTU<|P5I݅00^q*\7 ^没Z j<(x1& (bҐG#{\EItOYFGsS\nIzS3F<YF#DY3>*,kcΫƺ-p{|nvГg#ȆDt/X!A_vqgΓ2-_;+N`ٕq:zcslQX.IDOPߘhf|c<&w~dORBSJhWFC#UwU?&3*B@}|Tn%]Ӽ ۆ{o+; ,*a\un'<̘wZk JgSv_Jaq-fIÏ`A}xpԼͯ'΅&A&Bf(oTlҿ{'څ MP6i>ߘ {[MaGoN2GK®X=ڒ~0%ya-SN3x.[r *XL蔪)yO-)?4Ґ(g1P3,/)9IbiXl ` o~^Y%ba":4!]0ߴT:z=n{c GXHU:nMFOEf  eb"fI8iz`.~؏WSG&77Sƫ1;YkHgtx0VB,T&€ ӅA9WE:]\Y iMNNP"fP(soNu4sb\XK)9j\o:x7c~@ סړS=OD/$ #Daҁ8@𭉻"~d%#K ; 8[v|&BL¶KZ ordӵe ra%Z)E)=QZCzNt1@-#92c ޡ&5Ǵ qycS&ݒre#~&%bG璈G@i,x^,|=])TAv{DFhޙ{JunT} Zsu0qĩ;n\E'ya0{a q @l{1Mi"PtC^]Ʌ@c/m.G.oTb],zgfc. hm]fCIf J Ar;.d6(kcF5@P5¥+ 4p~{3]HI>"!.s~(h_=3oYi0 B_/{| W$@+Od?)Wߐd( 8jHG[55 APhwXVw~!@!xMu/qy{؍_,ȱM\pwk=HЌAWrH77wdZǡћJ}ZK^5.15Ι?=0]$ Oc"zuk'PsHX@ӋF]yv6Ǩ~% ')X;C8רvʃ:#z3vXgb_e{5rϠBAP"Ro ( <OlA'FcMf2_b,e6n+PsėU5|jvD;Į6v ov7{B"5z':0uJI`Ʉӳ\H\cNjM4].F b+VeA,p)6tu(nO5hNGWu$SX/lϔVՔ{H%IKNqͪCc`7N>PBKRv +ۈJRiPvl* 0^KW=ul/Ő/jKZ!a!A ,I~R e@=d$;T@78+jQ-?U<`Oq8ئ *?эzQ2Llm0Teߎsh5~ |K|HJN4lrh: /* W\7h}W_9d^ ?߶!(0YShAs Ty @>MA-'~EU!?oCIyHȩ~4cS,Θ=uM*hB5ݲHbD( 4Y#< Q0 P0eTh[->nX,JsGnGN<ļ.g&W$q@xܛ96(Qё"ODzvB}VE02C}F/FΪ\ ]TG8] /Y}oNx}u夨K 4b%~xDޱG©U|>ĕ>mrٻi4\gS(+X0ڶ{yJBV/͟/(*rr"o݉R6<8 `~;9\"( s,TUڰB7c>WĐc것NGe0 }ZM꺖sWm.PwZGiJ%嘩^w}xc^~.'lpSV):reyF@HrFdiɚ1߇ h\o/+8,~ttټxR*6/|e,|Ы/]s[ H_p_y_> >B~R=5,Uhc9EfGDQb/˓q]ca^nƕPpfpaﲫxr'b\Ճ%Yh)u *6":S) EG4{miYtC"(NR fCSZ!949@N`mVŪ?{:0%v"`2΢:k+oJ sy'z4mx\u4r]͡B=9 ]Cd;,سiF?lGPh8u)o6lTU,P!nj6[-Aژߋ,(7\+-0<7SWB$y1s73Pф9 OF?r/wgiL}?EkdjLz;xCoH+ ҥêI(*Oj+E7p7SF 9N|JA' T((;Fh*3N#F-FK< gm7+nyNQ}{x<:u%>0-mhQlӤǿARHF29@ܓ:Ŧ]$>9xλl;f[ խX륄6䢵ř$SW0ccaBnI댭;ka4XƨG̰ѳoIY$ȮV  J1B3Ц?K>u6iVryE").p=ָüGKxr<]Ћȕw0nt=.@q(A6v+$\D:tҤ/ʰNf2i!` .' U9H>=844"Y`{"R\1 u 6h WްG3A]LQv^;2y&@#(qwž5!zL?? [#}BµpI~j W 5{tTI`C^F.̣'NP;z &JX^zV R>>asm>>iJ F9;}:O+|)(u)NOSGNc:AS;MзKT%q:OlI1Ơ/F?OB~pts/(̒K |PKX|j|2PW_&?6`k%Q#y}_@x7PYF"%ZѨCq.ߗnʴCz|*|gEҍbdU U;_7ANNHm8I6~jVh X5P"9/c)+P;oR)n1{oBNE ü_j:Ŧ6 eVTbYgFS=Yee#}_V\&Ia@ף]Gv5򵦗}~%DX[D1ڒc@K/x"/*Scqw!=g4= jh0 nEhRAu@?ʃhfh]tLë'&Π _j%4цV읲l_ž@Cq6J@ ^#:~ #* g]ey-КLNzca&Ugҏ+^8r{anC"@| B(\8*dxNJ--Ʃ;x^Ӯ ꢫ<aZji~;bToRlEZ\}hzN,O.imzJՆM@55}뤜=^0\p5mHe?pҐotsʜDUT҃qؖwBjim/7ti*SkOFaF5!`|e $%7.l,|XץN0 Iv,QCޞmb"DI4`E5HƻsZp_"wr^Qa=IՎF?5ʩœ D+híc֔QᶝҥC%h 4E"r%bZ)m=kVIߞ@-ԙѴhd'k_Gƃg(wT^-ex䤧\Z8R !J$0QS!{=DR2#(5۝J-Vc$V@gk~(S)Z1fGS0>8*@]s#bwULZVW9۷Qճ4}%֫tkoJٲ%FGeLz2Ha_*-, (Gi5=?{s\šv{_RB_tXN[ ܉%MB9yN>M-PRU\hR0(cB ssQ^;U8]T0:Ozcd`r9HO:}/ʩYF%mddUXKFWRE,)Ž@vQO:9 /-*{gJ~|':ou+,t<μ+E‹|lv һ#N@: ՉIL|%m툯 B j-3ұWeLW7M.38&'~M[E5jr.p^ m;em-o7ދ>2<:P$uLX|K~tbw۠/hYkKtwcrχ9Ԡ4XO|}\ 6en+VUQ^FWn0p:1*gZx>(IDYl'\͙,Q]kK\HoqA!f8 'WbM@V%Qdwjuʚm-ZNu[S,객>s! `~ 6L(C1bYq-5ݚ[U+t 2@eHskdU1ӊm֩M#r|(A鯚EXv^z]}yV绽侩 \'0mc=0a`H2UĭjG0 MO=<׺ieM|ʹ6=7<:/׭[^!Kcʣ^q|s?@@ dl#QR8hͻXw7ɋVXlL}"li[z9dy5bI^>ГcYE3r!57DEQVEKO!<$ޭaGI*$:+n=޳XkkVӰ9 QFfLxVk4(D,D̺͟CrRYclu$R4ĘGREWlLR/`[Ac.,ǒRMS*n[ }xpGàMj3r^$P"MI!F-'E>Br3d{zNh!PeUl73f ]UGRQLγWd-ԂUuw)|\"iZh`Te*T{(SG6撃"w͞^ \x^z-ζmcL [!EOۃc #:SUv䤣ԷMme_gKba|GoSQM4OR"k}D]!(n(>Rw*( 3.@n< p3[3`/ahެ\;/^åg)(ł9a$FVд9 )qJƄ!ь-8\6fl%W+qh~ŋ+ic tH FO퉮 U/l௾_%lZuy)q[ ͝ ;s&]" B,X4Li=sʭ\%#h+ZkUz^L9㸕BF )$3ZeIt'$²bw;€s s *-+$ޱ<]7oby1HuD'|wgy i )T-|Q;4GY⃚'hgyZ^5#VnaIZ;A;vnwi'9*}1F=ٸm?xQxnE6\EJV>9rmq)Ttm2|EjReMbU5;ubkpz|vDEjw$T)uڼHO'#Ѳ1= ׁ;/In(-1Kȯٌ@lfz]ሳm;N+So4Fm@l]а2/Np}?$_?6xKrQ_yh4-CkqnS%M_VXz."({BFF#A\h7Eu7Di2+feI؆OvY5-E *gvcp3'=Zo`oHrX MJtFS_PV& IL)`0QY _:xoPVWmJ:vU1ɻ)v~~-C.aΘԞCs tSSK|~ ">w>ĽUfnV;+śNbQxۦX,ˇ7g-crM7҈! E12M"Ru")#og7k81Х6C56wst 6JI p:T%dt8$2ʖybQAAcJgKY/GX4Ivox~€X񻒵=2`>s=t8#Z07#$gt++6Ri8k`Kmll{nଚd( ]3ր#Jȯ(q'n~ TUN=ƕޚS7 1t0g/%Xx~%pzg P}7ZQ@Y@]R*א -kAڹ9L?;pdџkY&c.aM:v`d~AqUq;pa7nyI`ۅ] +ԴnKi\>xW[BPiy[n"*'VE5{I g&cp*As|=ށ/m$|9~&>C xOeb!KG&:څahy=11[ 璓QVt,;_XDo F̉ٛ-x+NԊ+GPstX1j/"?&,<}^,#ğ_ƞ.~B;AԐ﷙$#Rl$n_z뼲:L}g*J=c蕵n ВwyI~@ӟR>4=|Mm%n֏ӓ_na'\S?ϮIjpZ86]Ȉ")$}E7xL;6uKQlAX$꨼i!(UΥ =TN-++{-Аj){nC(nJv=‰2(wKgbg>l +XfX`@ 0B1 e$KTE h #8%44FӉpe+>bQYZ>Ru:,1}`|2.U/40mwGҜy\0h꿯5jK? $ 1*zo2;-O !'G)J5Zԙ9r-Ͳ(/A~r  mwZfls^XƵUiM1`'Ғ/@h<."Ȋ[[he0*[E\@E 5ߵ純`TJ(emz"~34?zĽ[@F57@X*3Ep^ zsO[fu˓xپ]!%Z'{<^Kmw(žYE=~ 48r|"lEL02)3 !1 $3g4P6S1_[")0z]BxELk\Ni!.c0T}OWͳ=!Jǁe- ѾGoËsG7{,^Եw[־Wf;fOi;}%H2|+ז}u濼sm@|U_ Rr*;@wtj&D 9#9|?nL1gdv)~ۓCe&2R jW}f7z> h-3J~gUv9SߜK. שBIx,M`rA!pV3"h5yP I6RP/J!-t7m'xOYOU#NsGoXQZ>4Ċ{ܧxof7L!Q'A Q aU{ISNKfLI#0F[iy ;Vm90xE _ jiфXv 3"J5I>B:9PQ" `_Q?:(GJN*\u Q B&78Wb+aXw9DefGo+Z}HNJ{=iAnx`&ɞÈ$x9Vz8?YЌeLJ08g-g)z[EHոVrr֦\kn*,Kf;IȬLHM<@1'`Zѓ e';:Tvz6 sT&"_TSE6y0?!?]ni'< ͷZy2%R2GA =Βed@}F$gL]aXc¹9GBIrN6޿ޕڋ9u2*e'domq,})wh johd{u-caS9He$1. \P~/:@}B˅_d6Q\LE/6GO*0 ҉Hg1DF!M}qҾȓO[ fhiXK>W,AnW3ʉHld^ڭz3Rhmg^vj[R-z!`Z "o); i@tXU+I,s5l㤀 )۶iRiG=p5>/QrLU&]%=UE:'u X׾;r{Q[nRmU; >8.@~$L ر*A8O>|TixBhW6XdW`T])GYid'J_Ij9yt]NiM?ѶxG\Z๞r^K3 / ?%^ .g\=nXY QX3mδW/ʼstеn5{7OBR[ֽ<j>uJуrѢqsp cdr'z湠3gUSN j q_݀nBC<[pE_Laa Pgxld~i,j׷X I/w2Ja,8*YIƏ> " Q'YHtg?'5*`&-ۈ @Lݐ_!?h {d%yrl)*FDLrGIAių*==.[{do|0M@ȫؐ8+Y8`e={jI*b&`Sd>7pK; -rI?V:~YɅYbԉc ꛤ?;x4' p\0 P 9M#u K9~M}_6wuC$i/_ BF Qx>M~ߡ*:|?)ڮLpW']|'v)R\|A{ymV;jh۝D$v (5QVy"d}#v݌gY4avvvr9pXgjD>N^ R!=A;<9B4~oFs$c8TI7We:.aJgDn2d[Qio6^+ۧLLl; @/x{_ş7Gׯc3Wn?yLcbQB k״H~)+tC5³(Zq0*K~ Gc"ջc^w(iC0g;N\+0bob8POqAخ'5ݔ%ZV1ʭC*W+--c"aR1R5PßiG9:y./x7 fb /r K^rfےBar_6w-XD^ާ*M Ӈ" "eiՈ>:}o>JNld K؍vYj `(zT᷆/4aCUkGn~:uvסJ][}g0X5-פ|uqnjd| F1bqQ7%|2> wc:D87!j>}vz4DEѩ-gݲXٯQҵKLQi>Ccr҈5=`fvpyY wIY菥'F)4c*l2T/_&q W/A\7S'8B)5 gWzۀq6Ze p FJ9a9mYŠ0L_qxx]8#7~I}Cf4_NB%y^m2u|\hĢPzc(,q?I^I@Dʘ#<7-!]4d ftu fiƟx= \˱#YU*:<殅7\}WHR{MoKd:š*J#@z Hds`ΣDqlN 500ː¤Į}o!5$Uj\ٿu5C rEDۺ%fCp/lfuZCM66"z8fd|dv<aP[#"\n> ߭,i,o@}]XY> /%k[ a.qyfdJqզ">?)Ǒ?g#{kɊ'ht#G4%>{Mch%K/.,]/jWid*at*yFJ (>{7Ei=?c|l ?V ߔ^+M Ĵ7ƲSAJaˋߒ1&~F_#sN=PhZ -x/TkU]ybuzTʫU)ۖeטԟv@zۉPCwZBi9oeN`wYhp B$~ΜJs3re)KmL3s!<-;z&p!d)AB{`SAXН7)Nȍ\1ix"op/so"|J}PfXq)|.׊'o&;D^*CuxΥ"]|b ŹǦsIj̞ @IVÊ0wUQ=?[AO/_fgdDw̙ ]uY=@O~b*1+QH4x韥 a(`VF[zYc)b\Sv~  U ǥpz__/4vs; XbSН!&B1[#E-*,}3еnPoR*5' X>x? nd; E>]6N^Cp\СE$:CFՅwK-fy/뼣r1WEh7 Hf J=ԟVmd.Ϥy5e&Vb&F=QjR0M3\gAAJ//Fרpl2GOŒ«.̳^ܠaw LPXF:ΔGI`pS3x z/A$ʾpo<b!,*,<^dWebI@,\i;,vh;aZmmس1Fyװ yp>kvDeaQmΖ`?߉ت-8o/_`LU))<~%Va,ZI/kBRg]Awibw_Fޙ+-YGYtf֚kȧuZ\NyEc50W=UA``rbtݏ-)JuDw L`<3Jt k(Vcî .X'{HFk{fS[t`@Qii+hQR$d;I8)&=D#Xyqm`Э] (?K]Nsl`wtu'Cc]#שCɤ'6v]ų dW{p̜P10Y~'6M5Xh|eWm)yjd'c.]êhRW%lĥunϩg'!uphixNkoaUe>od>tErYNO_s{kCnA6r@ 7E>sbLtvz=Osܯ Nyт\Ybϗt7&v`d,苻i2TJ#:H~bomLCL-i(Lv&QyeN6$p .cl0T"ߨw sQztNC6{cPDJ퀡c;IXU:3 '{*,rgoTRD.H=n0R7c?Bʐڠ雕uBCPocǔ?o)HNfQ  hcMǢ}N֕5YbquЎ*ځI.(HI--#YxWsP$W,johex+<<7J6_XA9df"2F+xFޅ=ϲ^U4Kgwz-aQ!k"GHAeԂHid!f>S/7pҩ:ɾ`#4C~&R_cdy .}ԗKpJpX$jݣĸ`a"}utHǸMe)DGW3@b IVH8$-EKBNCzDee@F>y,ٮH1'2ir {wfAF5kWщPlxd^߄_>㬭26asK3'z>M.Uu ui|(sVl LT }mhAYH+#8w*{k؃م4J'v77<Y9Гl~kW9>ތsȧd; +(@Hs)9ߟQ,akpq{1Di>Caw9O9g>\61A:W dHWn$#t$1 E )WkMw۸fvwEPcK秈2o'_0  |mG8ccdxU78MV q(wttWPvh3ժmO0 A.tc7ahɠS L[&vʣO9_"i2lb#Ÿ/u$MF ^(ɣgDnihCpg0KJ[AwmfkcjLs[92/^$cYJmj<V7Bƺb"یQ)Ɂ$/!*c-b8g(6-q&LJE}Ϣu?frOXc#`g)o΁@x:_ZAXDT:7)Ε5r]{@C腎zF rIh70[ ݳ旘bp5A-pwaLt_6$LdKQ\s*G:?…c$CEfP'sqL +$M G Ū[X[DYB#lg#T}u2kHA(7̶th;1Ѿs+Xo >qp#&D,%/J{ݒU6X oIk .\|4{rmysk1o#E E@h1--LdH׹#Dh{7bli~1gu<,m~Xdl-m`NAi;5 cO9B-6 8*3Lb6CCxH/c^TtꟜm@k8Y%|j6 U*LljMjV̋Oao8IE2W+~`w.98-N4}A!lG⃰~J([Rr RkQYo,B-Hti,D(>unuy@r[,"K,?;K܃OstϞ7w@jcfIߒME'oiLhԜ)qU"N2LK.&O]ԅ>~4նT);^mpp9_aZ4oGM{i6<A4ZbwO]M%_!nnY\XgծΧwwk~@W-E"vXe5/_8zNcCJLss5/c2ͽ$3xR<;M%`XQxNkdYX+IVtצiR`,⨌ɀр֐@%([TUȾNuK 50$٠/`IIZȻ)]]LFƤ<]0H˿ڞҥ9荟v?0F* HDքGNkyl^v ګl#ObȰsfi6/EJe[+j:gv`xPcUals n{tpq oLcl]Wb7(n2w=$>) ( A. E ZQ+sy@@;^M1K-}D{ۜV6D' Ʀ;:e/W /=)oWwznJrcN_8Ay4ZϺ[['A/$1uFK}G9y .S>Rgy1?cAtx%PGӝZKWrSu,k@ H_[L/Y_ u㎲&j^KH=CR8ۥ";\7 5Z YuTRة3Ǧ4%ѫR_EC6@"3cjİ9N t7?G\(X| ?):.Kd$҃[kƮ:q.SYi?4f39 au2|^X`}⯞՜dțftKiQe2`eb4pX祼 Ws -⋲+{}M\IЧAi1`h1YWҏxuYPGŽ&!E'ZiuDγw L "klǼ/`d|ځq"گ;oM'+Cfh_?)wGbi(Y:-օ-5()7??$S&x_fY#e>c[k>ojzZ~; p`m\[c 4ќ܉a M-v nlC O;IeP})nOxؒ!?Jҋl_8#Yь8]y@Qw!dVʍXr<,+$) G Y}`9(gH^i@7<0AkF$TC0 zZ;>^b}Y?ݽF ܑR1ڞc=М=Ӗ7Ē&SNA:ȁfj(3&ހ@"zxG7dn|;-<[HH0wf&ø@e3Vbm۶67ݱqxQUn(r7:=|tPn.e*n{9CM!io F;f0g9R@3?rU!LHJM35ےG%-m;ya RaB~ȷ ʈ{5ɛCjȿPdU>FWUqa72VTQè: ~fIX='lJjwa,tȀVpm}PJf%\T^N㴤pC `%d?:i1@v dZpzR^*9]-~ ,j fB]I1rW-`Hh;32X\՜sHJrp2tc:YK JŐv߈~R# 9,vģ?'v6Q,p&(⌍Cma:SOZ[R׸|w \F𷇬K:bjj%v|ir =;bmʞprP-"UbP=n6\IR$_jp 5g:M$#οCdyUG L'EALXgYTI\[&::|fPyi\93P v\\Qa}\su\D*&#Lj\׵qo2f taX+Iw X?i(\o7 JH7Y!7-]1)gqد Qp5&b8z6"˰t..o ')GCW̥(K :}YYϒ9_Hyco ת!(auEfELGmkj ? X!qnr9Uuc ZzTAxNQl2#RЂ*EK +7y 0_~Q{F^Hz'"O}qȝէ4}XUM"jW¼u#YCz#TdG;HoM KS H!pYGX흜_6ʺ( Єd E+J%t4{Υ)߀ߑ.9|оTu%p£lPak/s|% 91^ed +ȶ?F1kRW<ɲ!;wrɠJۼxp pq@-an93&912-o$Q ?<@۬3(qWۜ:$R7p=6P ͠ ڦ >+%{ +3qp 6c5p8#qz7tQ|Cb.}P.%-y2٬kM',l;%#B\÷4Y;SGވD>;($l6{Nj uWG-/K<*҃p”[iT#n8{= yq.W7Sq8"H8dW1]/w7wTԼ 7uF $HVtX['/s eG t2s "w 7?iܱBO1Ze/iCE3~-me.2-N>kFd2Ғ~-5fnUqs`EHvG 8>9퐲h*&+a/ՏxǏjÑ=H?Hik{G,D]I! 9425Db봷ka1MNc׋J5qܟR#ZU+Ul&)}ɷ8Vh [8ۆ~*$'0DMCVihv-]YA)-7숷W>0NORҸdFIMcʛ9pfx Wnt0Nbx+ lC } )XA\#JqH,hGiO(Ojֱhѷwn?޸%,|F=->UpQh6~ilk=U葁u,I&\$B kѯL5?>r%p9*fo]wӭB;M+#9ZxJU)!f+<{! DZ5{}NtQZ,PRQ֗SsⳊ=!:; Ibd;O=&ͿݣMhUN#]c0ﯨW(a#DR-q3XX"dѢ4&PN+4=gPk F۶P Z̒{>\5J:3&7>Gy^BL=!i% &0ٙkMi;soG?ȭ @W$FfN'9pm3p2M}>_`9R#?oɞ*OfXz+arTEi(t 7 ϱYDE64wjߔ=aɴ\s[8[{qCZGDkWn߷e۞f<ˉ31WNߖ)U;:Mε4BӛoHl٢~&uOΏNNbΩҐþԳAJŹ0 M9z;/[`/6c oq \L,z܃@gSo|fjU= k߁o(mS zV1iq:؟ Lcglu?1v~Df*v, W³Rpv m)&{;WN~s =t: y~w7.{LS>U^0yB5'8CصЅafw/ /I yQnk3<\tbL'ܙȔtLʋ)͊$׵ztm [( (U ֏u;ܥJ0Rw`1%/O̗gj=5 pt!U(_RUU{G"2'ݦ&֍'҈}WL| LD0G$>%tanx..r'ԦcU9'D2!v }"WKKYBS$1{YWcae嵵Y^X-͎"gm%Q|Ѷ噖 xR٩Zեw 8JV842^>VW&^PkN&*&~SpV+BSusLK[gjT >ó d^֝d7L\x@)=֣2GI!:6bd1^fTD ajMfY!` ;o9`{|,9J}M- >hj] 6sh m+X~X6~eFg|^덥6yAc>' 8q2^B/ɝ! `f`dWֹ-Wu礀В; &w.:`&[JQak]BCϞS4(SgW}VieZE4CvQjZ$p$IXGSGDMӰ]J}*2raeФdY_t,h!1 G&-ttÔU-j%txFŠ#kǧY)OBn. =FERoe}wB Rl߃/jHf"%j%(j@-g eMi$caka{#b;+AԔ|[FC30Ҳ~~DqZSuuxV&ݔH1rQLjOvz qz<) `R~yvI%;=Lo4k0hU)ɏq~G| dO,imtV5Q p>KΚ[eX}2l͕YABӲ0ucΞX8I(qa7k $[.(s$! ȁMsVCB09oX[&r5_ulyΰK+=ѿ~ҡ쇖LZNM SfD5mV*Om|MP!eď%P\b WJ "ElSrDS-IOdn]\pB:G .-w3YdP'2iUs7ӌI(` rl\N7-1FׄFCUϐ$x͍8v-4e/Aa plnR={Գ!ޤQڲ[m*poo&DM#)H (N-Nj]!6 k!*.~SaKeo|QqL"̘.ꐂ 殙lOe"&5:P;1b $"Y(7EjCZobۛPOlq \A*c` urq+D\]ZVN Q@Tր̨~nzš-]Lq#˯˖ۙK@;`1Km܊](Ejzb&o%_{08+IVR tjnP27ސ7M"("ؽ^,ApS#4E-I dennf7o*MuQvV֪ezˋ(]M:Ã|wx=8k{lCDᕙE&bP'p@qYtV- 9kV0( Ipw:?~9 rNˆ3I1'8`.e?oj{'B ta/Cw\C:ÿA3x4â+r8==$ ]E=-OpK)Mf ߔ(8g^)~O}+Ϻ[]e&G@6 a& XEͦx<LA՚%e_ZG<$Є1gx l/g0p P{a%hQdbmcM{DC=͸YOFlA|h:hnA(/ ߱}KIزa)ipunouV~9=6k F)!!x=r̊Tj0glBE>"'=huJOs?ޣ zL$V5(Eùz/L-% O`]t9u]I&`.aP?tEd7XӣS!7W;+7CM杄,T6ӌ0O0B>B=#`>;H=z4Duժ0ߍ8P@SF'ڳ.s $ULvI3ۗPވ^VUaAiy=Ŕ`uDVex8쉴Mq8=sW&$'Zc@dI(bZȇ y}H01l^>G"ఁ{CetC(G!33>Ж9 \u7PuR$`5Rh1{yV+X +zJ'8#{e3=}}_7WA6T=tqH̳ӂs5 0>Oy`wӨ[w67T1gxCu?1)]eTe>F7Pt1ۖ x'Hw}!Ѕ7uosO^idq \d6YіBf|4uޔ\ &tqyLZ1~8Kwzz9%jX{]a{C9kJA耞FEȳ;x&WcA`b&kah0%'am Q㦳Mx ՊimLJ8d&gV`􁱺+m7p=U7xh%9a4gѫRx!3d0M SnE.%xcY^VY({-Sclh~\b#TC._ eWOVI$&$찎eͥ]VK B5X!d)t9!@BnHFC-M9ZXK=;Q3uUӴo]^ <&_ȭ5Jֶ'rP+3H} LxFOsZ r[He;:~؆휁QS3YpP B׼r6+,'選z 9LEkQQWm@/i):P_PY}0y2n y蟩Me\u[Tv'F7M;Ac Ȗo!>f2)ʊ0gꧻGT->4 g ';{]/rM.E%߫!h; d Lz zkgY|i4Ovz+EMocw#,>y*;բ4q&TsV+^5(?eGe<\EGRgµzBEFwzq$m+& R%svmgHƘ BRibۡ У ju35xt.Ae54Δcc"eҙӸ-SE/d\cZES>Kx}̷ sɪ'ŤP 0g8*JK(Y@)NX,MùG|mNcr|%%ҢkU' X~Os` P0G}00\DZ34Ա*W5|iI20o[qߋY-w(3Sf1˫iۯɫ[>"+k~h5i=16nn}Num|hS,)f ep0,=tD(rF{?P4du_AWW(ֲa7dt}w7dhLAn5,A6^k0h|Q.9[:?ҷPfHM剥]!x-WY^kN;sq1NJ-fSeApA9L֜G,NW|>9z][,՛Mg2DT 0, vR]Q>OmDeGG{;-:Vѐ(iu}g@&Gs] Yt.ZࡕrW FŤwEMȸ)a) WX^CӇ79BR1*CFu`q ܎ARGJByk+VЈ{ګSW7f< =Nb]@3fSAN?b,C 9q.)&X񴹤Co@fMAg ׅ{ 6s|68''k(+8A,,9iCZ0r<Rypt!7r\>.b/B]$bnƓK虮@c60.Hu{uw7H W,fpI 7X)ЩSfis53 6 9xxq] 7â1:2 u0tVbaMK9b cFOojX?jC$W#ǣ=O-II3&@01i׬@YJ6?CZ{,⁡kE'ŴG7,idneR\V.|,i :”j#_$&Iky*5~!gՕ)ȑ6D\2?3m*-PG߭ZDcW/affZ39`Xh_Č8-'Ӛ&杠Jtsj+shS^؄C\Ɗ;Z~!pgʩwyjFxmxa#[TλT3ZB$ˬC'hKA ~F=)"H@N=?S}B!iڝ.a#A@H{Kc[P׻hJסjZ*0*~Rݙ>"TG1.; B:B, ֜DCڤ6jWw+k;tA?eHjRy+*zm[(-;4BwRRt@ 3)fy8Y"'0x?k4j&Dj)n;%#&{$/`7DCzNhV5"p~73M=$1AG~y A?A;Y+NJI򼿧cQLK5zdw:9 (egFQ,4۵%2lpf "-FBO%IMA*\ڲ_eé1k"q^L׸&uRˡK}n%W%8b?o3Zy&1C}dyŷb.ց|)L;b2 (f*xd1h1Wa2$ GF"'`xaT~֗Y$bb37ީ _H8.4lDX$+.e^JpZcN3И%'V|*ʪյk``)6r8ȗ@4oKu.@HNJ\Vș":XWn=\v`Rc%qdCR2@\ejqsNؓSlۡQo뉙L⣚ D^C> \ GW/5bRL(i~=bÑ%0_[ Amwg-wg"ˢAS$ݛP2݁jو?ɑNx!.E%_@lW:`֝,P5q#x? 30G9g !bX|'PDj?&QrhY- *#Y>w S?HHRc"/]@[K.)CRu0w'p7>˴:ҀQcEB#BL %m(k XYj˥T.Z5!UǺ3WjBD?L56ܷ@Bj5rUd쓠/G l,XBpoW7YLLƸ'#pg_M SS1˷N`r.neh5%l6!Vn#$GcKc17]ex ߋ;~~_gv>\zzGۭ wtv=z&~qS500#+A(̇0[ .BeL BMy2Zϭ!%>B?8%晇)ׁ;8{Ȣ1&rѢ{b, Wn0]*0b-^~+%ŬWA›|95;{DŽ~Q)6ؖ~JUZxRհkDr%a '|ʑ$=.Q@)ˢq5)+v*dZ˪ Mjgbf!,9̯͛ёx$Fs[e9._?@SƏ6>h|6]qq Qx® *3ꂯ=|ĩ?_+: 17Z)u>'7 YIR<KVDYs~@['Gș'pD'ߕpb[$!qM4#1U-H웋;-.X5SS4S!Ȓ mӪAi6zӆ:]˼ж1s|Oj/%~s,Ur1*.4M9YebAO9ؘt}[B E'Prغҟ|]S cBnz}SGW8(mRbzrZ?Zuyb(B(3SDi_,KgNl7U^PU= LLmJs|;qOI}_u&2F.f umᓹ۞]# _i/f#Vd3 [~#~_+wG9jzNi<c ^@;{mW/[УY.WnqWl%-Xj^ XF=L l *4xъ[&!*]HBYl,2 IM]򘘤7!5Ii)֓ W^Qgqj^v&2.#"5qC)Q<:mԌ2aN5V7'6%/sz^ilH|<—&B&ExxWl<-%b\iH\0Em_[M#bxox}-pi@_o N`)mVovcН˲5HR>WtL椙 (0Y5Ѯjzv(mgS5?Pܙ9PRup'TrQT!mO29]! 8B>g[&{<ӰZ#2o%h3s"pp:LQz9[,;7~#,Z&EKIᓇRO,E26LM n9;l[9RLEoAJY)suNAa04|Pz2iگ!3n2۴Mz!OI0 ͈FP]^"k'as4@?ZtlIsmIihXڗf!b5E"#RUt,I6iH##(jL˖ =Ao%ֺJ{deYA TL/1\~pd[ ;zm$@jI.[/x3ݔ!,GD- Lg v"#O#<+ R V`/ϸbOJR09TfCO} xʿ}Lӊ4uu0.[z9xo= a%,ūYWrQر <+9I)ʒ A%0l_s/8M|{Pz"Rۃd E'!O􉥡^=qJVBn5aK='kVT[-$Z +,*_x +ݷ7c^ )y<%Q=@]CF6pŷ^)Ƞ &;SHfv𝔱,f,_tToׂI'[*hii024{@p+0 3dJ5~W3(u{؛A<煮BG'fDC2^:ɹob9ՌBC[N}~U=k԰!V/*"p~f(y`Pa_FOMنO`(o?be 5?2㉰ y(֣2zaǏ;Q9H&wq"Jp.7߱ɌF%o;dRbMu7؉N;t,2@,kbxa?H(ARPwvq Ūޠ%)H.xIF-'$UIG'Nonjbx.Ѳ+LdR2w~y*n[Uῇ9ޝџ_{I!&?0K_),$]4:a5 BfV@K[:1?(aoP1ӯu& {} c4B$BDZFۈ0;AeO_z֠T#*!l3T!38W"MoɅ1{8_,rPDI!=`ﵞu!Fi =|T#S>*ӯLD3WȁȌ*Rf ~zR= /(;Ƕp@zN嶞 Y^#p_֧| ߛ eKຢpc:BngV"!p@:ȇ~[|9rQ4C IZqF[vd-Ff* `QyA[Dvס¹_!lQQj3k)Ix\&\-_MY4#5*}C~EN Yxzdp~n 肈KTXTT=@0>Nyܣ*qoP33;}/7fp11Օ"0織c"{ΘmNw^Da UkAڝ #S"k_.ߡ|x H:6ƴ+bO7G=UHmX,mPBMB]"EypgIc€٤ӆ!dJ 1&eD@jr2'|7x*BW)j,~Ҽ" q'Cp`B}/Q2s@bM'mw PO/:pefK1 'pc9UjFBQý`N]eR"h?0i,&@IЉ|w-)tO:z^pC7:_z>{maSV ]Ӿ:´cY.Zi#ϥF٢ G: %l)gq4[*v#A;1+HZZjYFm 7_i7F:(9? ?'$.t59=yy~yYF̙lw7QnĄ(ԐA]ۂ{-?f2Z}G !ўVj(˺i r^ݷZTDt^5rS04Au}Õy$SczTُejF ߘ*Q;p^@52g=x80j9Bfg׭*"]4#OΏNuخG& G2c/P%yʩ(S۪=\sA\BN)+E40 1,sԃHP*P".4- cS v? o%6 xK~ =U/-۪6췬=RM0=#g?I@.1p}88 _rٹQsu<ed%QkݓPwsQIR.Lp鮚ʥl&dܨ>/t ,U]ѠFcF9st~P |hg[>TX@sT{6 `q{gTwGzfQlկlr'R!+2y?⅔;7Mc ڒf8ei,7 ,/g($}.@ü ^\A_:m&8}~!t /z)j r(7_񞶮(~)C6}4!%4[>|JL%CLOu= KвI:s L>yj؏O/l1dqCOP8Y5AƁwiRKG%<}梁%Ǜ7|MJǪ^ ;k&+xД\PWv:@j$pT},:`ԇH䥖4S|܄^AYue~ " vޢ~pݼwSNCZJx!q6`_ nQ'Oñec6sMqPi*:icSjqL^RD[=+E Kix[DMWذ mv3%t#R0ԥY1Gaaaވt^0I'!"A//vpJmPYd/}?M{F9S$ܺRÅIw1o|c.'+}x3FΧB~sud9ҶvƩHgQh;Jtά3s3X፺=%Xi;`_`lD$=.#v+XUw,*J>r*#H-I_~ { _$uVqH}CGuv:3lfjքA2y4_nMm'3=dwsۊXn2Ț"(B^8B A!Epۀ >l':+$Wvf{2$ձW"> xJ@l\[?_iםmoU%O̜QwrQIa1m${au&*WgtM (N,#X-MI_xs9 cT2 ڏ2|q1X'T˯̙zqN@68MmބH?ETQq11%+rtL)=Uu]{(78LY`L{%(LR6sY fa|8 G)R$sVޟ 㚚q "nv?$՝('_X._`-t3Pc,tl%,㸮nLSAzS ? ϏX)&ρN@Q,-e)Gwtmc^=$Թrx(DŹaw=Vڸ%N ,@.;w䲶ricǁik"Q } .b@'v%d݃gxw=#r=M]3 ם5e0(QbiЊqt~䐆8" :nƴz%5"sua\Oni?2[oQE^]z3y0Ձbl&A= h"3|=At}QvyCkA~_ѳNio-ְhċ]R%| #Z*~_uIa5h*OBS$g4ҁ@Z6 O~SCɺ>" @L,ojū\"cgF(ib ~bO̓ 9*iA{ Hyu".;+2XF`;?"r(Ū0"(P̼9XY-p<b=%ɃF$t.Oޕ? TUegDrC&BMFdƍ>%gZ}(ĥoOB92Tna.-^~k#((sGp{i,=!쾘. ˽OhC! `](<:=!_[aJ2VUz4i0^?)Ly\, RӅ+bVw@QlhՁb<|v7ft- ]h?76'I¹ fbnE?t&8 MOЪqY٫ SWxMZ͸X 0mLhyQr% a8@{y ^d i73U9d.78E k9 z=b r6+4 )VIJ.zWO(qJ.`ꕨBWc_XL3Uο蟆d+/?n%#k7.ϿJq:y`=d{T T ==층glnBvo||E.^eֹlMC,fs,8-Rwxw[DՑ2Vasy(33#(j(V2W6ǂۍe:"Խ9}.W~jhӎWjFlhu,>Kۿ 4^BP䤺Q/&?LGs3{.4O4+4#z9S_>>]ֺrX/**_zLT6:r; 黬p\ߒ)n7G՘s.c*4EK9Kbp c. ͢__;N'ub2%DȤU=1(i;|9#H*Pp9> ߦzE.bp>);-MQ rnd韡#.\4"\pKSs;MvlE2j1K(j6+c:&\cu'\7ԁ\Q}78n؅qԗdmثAŒj`[p%Ch23";M_I`LfRk+-<6" GO7M<\;7ʈ;POcCFQnOkb-EՓa\{:n-0x_="gmQѥ*[6Su@+Jcy5/1K~&N9 i < 6X:5Kn˓p?}5cfk!8]],詫Wmint-Ћw^^;z+ݧa©mQ3'i.=cTiqS^ ?hyLn snzjYr^\G_p5Ba5" *YA5#27iV H=Pu 7ݡ\n!H4~!Ty+S˗$q?KkG1w9;К}"@s?c4P RQf`FrUZHUVKw{xVd:*u)*|D!ʻDĒ)"ǐϩ`{BGC?4/&X,4nr5Ϝ>ya?̤m'uho3Sf.;- Dkxin(dt솖 ^"R)ÈC'GJ/P{c.ӹ[`0uTzQK\CC>_"Ě jk0nxW2azBA2Kيx@DA}ZL9ŠQRм-.7es\SPapBb^'ge]n蛇#NXZnچ`zq¢%XΫũdT4wa%QfWPp6X S348QYiݖIDz=&.#I6C!i Be$fHTSǔU"'J۴E:6-m;=xN>R)@IX@Hɀ]wn=:&^e3IAAB]QSAM^sW^O2Ii`H}b}@s3z{ҋnpskh!tO^ӽ\x,bo؈&x65_-6+"_(~阘@N5Jk2[ i eLW~+﮶7]m}kqm u79Qߪkވ w~))Ӂ<; 1VS.(9'km #߰)ؠ"#n¥=ɯ$a6HˌpɴYo9m+A PM*<7pFTΝܥi]WU~`t@ :f`TV:mp ND~,8=֙Z=9,*atteY&~udc?,}Ӷ@.kjC)}%/wiŬh@鱚&(/&yz~OB ]81Ј? $e%GCJԏsJ?EDb>5X3++hiur~;zt!4AmZ9@@8zŹ jk{xQTiJk;zXTO_1S|C% O;Gr؜G]}1N%bzsN(إ :”>"5Xr̗\c\*lM/4 SGNL\2r;*OTFBD^Aç qp{@#t^D( Fr:t&&0 1x]E^sd];p1td ^o#5WV?Czg5Xc3p4Y^4|[DP-O_ uGߟ?)fwСiA sZOix|Å58TSeExi%TRiO-Evf̂xzoh0@ަXۙ: 3BmB=$Sv)ORo׏uU~0(vDű3xt_s/Xu+e:T͔TSHx $t Yא+ b#.kRƧ-W/fep]GC7/ ml9=?gˍ|m0\w29/n^("> TTn4iGWH*5Q1˚A%F62 UP:2*d[ǷcV- V}@&\I Vcc%$J?ݸxGW63~+(7<.z .멤S-VGNɎqZ4 ^B\nIpR`(R6 B|1L-9RJ7,,[r&} %P ؁0H1-\hF^:-$uYm=4Z^HC/b:Wqm=|'Ɋf R6+=Fc"Vb*Z]Bc^;wE.%ޒn^XTQUX#b?B+x6}aʣ6;2p%Y$EB_ ~+of_}`vDgv8?#ޅ #1kU:*SEMwA3ĈaimbO# 51M,Qww청ęgkBDz{3¦Ђ;pvN鰐}׭mఐ-j\ۿ(ע#dc׎Mm{ ! jvl0 \ sէǹ< 3٥ɡU3Ρo$4Q0 B Uq"]zAYRo!y1m6 %wP$֒+oz2X=22oJ3'YrC{T :74UzE/퐩``X`/p @ !I⼃@>{-mֽ^|B\3.pkǟ1exqحu@|Fj4|4PןN BNdk 6˝y|/Ĵ.zm2Y䞍~ϑKTL~`HPNd1y30exgR thi\$*KED;C8Sjn5ͧ6()MV"P~𳹚EvIN|ųZRǙs ,ի$֋ÁC_uwuOJIjlQ,p6¨U78xC97dYSKt^Mܽ˱)5}|eBIV}`NF"-/ffðSS]E{8<em3"l$#oHB}KD vE$7~ sz8ѽAȰX^nݶ#}&I0l-=Hd$+7J_9$XYW%`\hf2|;8JQ0hiĮNtyebbRv6Cв(d֧ril6}SsLoMIwvtciØ}[-un/EK>bmMbí` k]5v;6x0_Zz,lM;+WŶևgqsڭ[>Fq_ E:>)@Rk GYx ,"BMw~XXUSr4*ݟC֚_z }\?зrÛе*EjKR'I9Xug!zqA PD*$uny2WKU+Z#$?J{Gs^1Bԓh 1/ڨ 5Fx3liOZdR3L ED]kg8R 9Ή5hP}99\vk9=k7x'>U:h+3oVmXpPt0ex"7u Zr7~ jC=KJ`7+;g _)gޚB&|ʡ3yD1C冈MX8oѻ ~{9@ٺ ׻׹6wzKZ LRv\I G$ uwD`EcvdK]#4%bօK\>| 0l~þbU李Z߀IWUlZ n5/ⱏ3TUHK০^[}GQ!!U`y=`T=? h/7gn&^1䅖b@פ$;Z@Q/}($]db,g·`,~›cUO%̢MuS8K_Q: q] 2܆-(>έ^z$sijz\ W˓ ӫYKLiGu>]1ի7eObhM<̔\mݽ;ͯc׷ڬ\chh\p5Z 3nnD؟ڧFx߂BCp5F0$jcτ 0m=ai'EEKx:)%reߘ,/!)!jz7)[),5a7NSo-JIUnd`\4drp,迎I+UT@G!|"JXMaѿҥ%C?{?ԃ͆gM0v2L<9"HTD6(x聱i]>E Fo]YBo^$&c̄0Leت]#C>zc'c~vJI+X~FO*KT刂9,JN UhcFmi'f8m pHN;^8?"d"1yQ \=[:[-b?\Mu]?sqgԠF_J%|䡅PKȥM߽M#Y&?c*%ĂZ&{^b@d4'^"i.|13ݵ X%GþV&}/!&xN:Hu-75uU*g dwTlϏTS%5}m#M_%J931t+m7  z+tҘj6LG-YJtH}8p/*LDh٣Sv_ ŝ\+d$GY:թqO=E0/`Hx'1/"7aU{gRO}HʭT5ul+gVO~<[3At<E:e+Cma vM;V9^e~G1˴)BKXO\ǫ  o} B0[7g^T5G~f0!W *1LL䗳zI>, Xz}lM*"3y+?K@wv(ߓ(5pliOUY[I0z bFM^ ȷIdH'"v; 4b$awrBoQMtTॉAmytմe)"#>m݉~AԭP,ׄ&GgQ=EʲM졳, .)00'#Р\S^.:MR~i}m,Ю$+1(% h*C^,Έ;=S\oǯ' 2\A@hɩ'ul~ PFzܦ ,ʓ}PD;?C?] /F'kc/+erό5硧I{x2 T)M_Iy2N5TZ-1"\s%=6!YrTT _af auэbkvȂ[/Mߝ(nZCl8 !¤_ o`L֞Cƹ :}5BN?0t 7A\Gޮ)2!xđm%tbaf 2'UCBSse#@sC2]iimN$ۃs߃oj@KHƴ -V6!vfZb Hwţ]%` s5ҨV+~ӵ?W{GT˧@nCMyd% 1[u+BglM]ш΁"(g)1bp9Dq>@b( c}`7Kz t|'Ȝx:^I70 9!.3#nB6,c$g 7 TBOYyd'.(\>~G JȠכxB' qsMRm3 ݂]P)ry) tc/J2=o_ {.@#ǻ8 ]>N'J1eF':o2{筓o!G$gmHq^$\ةJPM"wMvhii޻(XOO֛f(qOa<!9[Ça_ ˨;I}":+9Q,>}@2J@4}[ %DŰef,ٙ'M3/\fK,!o"j;eG1scXSӴ܎}(T LT0C@x/5?X bWB%vLu84UQs0fg( Sw7WtdysoF\(tO2%H4~?\'kN0H/ʧtWt-E)Q=3֌RKU@ּVAH5Q`.KH3'PBx[oszoc4}hF粧k$3 tB^'>FRPEH{t$Jpmnи 9+ JܪC8ǂ'КGGUs]$=&o>rs !8JC+֊vbg؛ ҳx!%Թ=cv*r\0.6B޶8g[T'+}2+{A_V_$܁RjB |Z׵%ZT>ۋw36wOK,B#+ ?vngew"G9&%LWH ;޸ hLCUFIPS@2{1,Qc]wЙP,@)"^NxIՒ `cb_=K):}XDq"l;ߪ9xRWFwp8uJfL+<'A$k iT`yv&/8vE[8iYD]_FB=xQ}vR‡RƪkRpJ1~\.6t DimڠNgqeG?;*9VZ۔IW3 RaOLsrl#B(,0ą$OkL˥iXpH|̈asA?gyq~EФG][@,Ѡh&aDh65><^oI39)ٗN~?`|*k;]@7Oof~Ք.`}q  -FM@Swy'!+uHy-嘨ï-^?Rp{x^I ) v;,+qʳB9ſC"ҏlT>yM%[XH+cQM`4(`B{U{]{EƯ(\Yy&.#̿t?0yOSuCpBXtL'<^};p (:Θ9^>9@uff=qً b2ך͇F$}ipm9ʞš1~&Uv]С !,AVFO縪^*'^enTV#Ft":Zn EGu9K=t&V(T*D 15*׾bK$*.Wxd4]S>I=l"#NPmNV00H(si12K-a4!}1PJ!K̄}I&%8F5]ߔuqvN[d[+8gQh"q R]2> W4g\\9'XoIfd[cmo蘂U"Z{|FYmW#k fΨ#i/Y$ɡi,\rm2'd Yey^iFT5W|Հ)2PN654AĕKG(E%:ĥӯ1Ata;7-x6¾xln?/J02(!f[h4jiEbom.u)ks yž6-9K7(89EJsa%+>Yj_tuV$yB6]B)䳔vz1ɭҔ뉶^_S k-Я p-S)ëԌj88)l''&؃4P>S؞[j;'OU0$hO[ІPؕ B„Nv-nm9aFɟ4ʭ؆!\<(w~j}h 9Xeog@=9-2#9&njxRc /ȟ_ ^>{A<@lUsQH9΂[(Ap˶2b2˭ g[K:MImő8co+(gTX-:5\JYxEƿ»R%y   #!l΢)\b4'IjuC;`40f@ םTp P!ZV~ )%㍈GFِSUu 1v` lRPrT sPLtYd&Lӵ择f gE:KI`zG ̍eϾxN>u+0}sP ?Z A-lz>CY`P:~P)2[rg,˯j}wrHҕGA< :-J>F}Gq2q?e")s`+Qmեv>H_ANh= S)͑]?\l•woGu6NanT]gfp1vu+PzyI'$ Pf6,D')5giY;q |a.LPɸ?Kna\>͇ՌBd٧Oʟ GV3uGJ 2ölS'ܮpru)2SkN?X9R=$/ߤhIVtoch3N?+%î+MPuKh"^*ZR j8=MDT2*JI+_NEKJ{hlڳbl R&I ?ӷBa҈0dI0w0e#QhZGdtrP+˗4(j֣ 2/O۞0K>9s&5/gR9eDU> fɣ^IJR[TCp|7@đu 'PPG%d{4,D&hMS]z* ɏA,CɾDN<[ZPI7?E6eHi Sؔke}2W)VqN.];T?c*0XZ3RG`kRIZo4wIreRr]hl bIl?4b۩;2^A7 . |Mğ"/>!3AKl(7$ߓ0+fZYdץR~F쏵<[>7$GXOF"yґ1 d f Wۂ/(C.bA5zOT~q7`s (G32~3ѻKVG{Nǣ{4EMU]E+I^^],l+'v1iLݽKR݀AM2\C m#ɤ.d|Z=QaB劻Ito]o6K^ٳF˓a\Ub83\Ir=eGO"Y7l6JuKgbI&#`tG@mYlg:8nz6zEhA=q*N#s'p $xЖ?46@56(GdxqQ)J@H.V|SީqdǃH4>){WT.Sfl>~~[b m8k.vHW EGLmq&Uk+/I4e¢[U/G+\7^|#S[*PlO:9׾0i06b9_.Z \Wޯ>gU 'zO' VXF*L3qK_Fp-\&1Ѹ:ձ3)c~X(4j۪^dB MrC Ze:SV>-6+] qn\ 2 8yf =FΏ4Dbf[?J3 -]uSXR * e.K= $Xݨ-4V;bl;Yf*&sd~v)yY]. ~l;\_HpM G],/G~7V` 7PbCn*(n=f=Ő=SZz_x=|♘-&C΄w(8DΝ2hɮMѤFC1; K.t 5R-- lgkȨ򇗀< ?t ̝Dr: <D*`gK^Dн{pS";nMown-&0 I E4[F•=[A1 1.+c v 8g܆K25gk]},WgRc8@֮ 9}N8 w߮w?f#qg%diPMҲyh_8ȲıʧRsކDWjO0{"x iPx([!LV0_QWQnRfʲtf+bې0Nr 6ltq5YҮ |+-166pn +bzb8z}v y>!n] jx#8"&60L-(kUgRuDzX 4V87'~y]UNHzCbTe>^Ê!, n]w\\lfp.cug{gop4z,p! ceSԍǿ*3;B]m^]_YOLOI.,ѵWfa~1AwcM]U# \(őQÅhkpg뙢(Cg|ѽVʊJ=3pirD[)e+;jq_ݺ\ -(L$'`&-ӚNUd|EήM~AxykplMF ˁ3B..+%XM͇a5rQы<&_>r?Xҵ珡e+.TNnlB`P?qkԌ"ʯL 9N8"B{As$=fK|9Qu&^;+iƬ۝8Ed)GOV  )q?a}:E0a=$q*9Ȟ6h"ѲkN紭rA^_KJ=tJ߻_ߘ1mW-8kH wKN_ QWJ/ql؟P%,:c֒f3a +ŴsMJ[Q^,%>xm)Q:9ezve(*5N91"Q[\!cj]i637+0@nĄ*+#;:9NK\֋G!V9iHڴ~~FZ VhذFY39zӺRqt>ޝՕ{89wqy/nQej7 `,eYl^=z> O2y)`Av/y!W[wԜ˥8 7@]lm^|*\gfzƲX]gcFz=z[4xDeY qƇ nV~B _iWsN4mD6i[N+ 8Fcޞz9E8\ (6Eۗjfz#.0|&7k/Lw:GZu6$&2qqy>\;éC8d7 f5EYGTq谫LMwaBbEx| ?^ⵚ<PYR ?\BXN⾺Zt.,(LJ YZ