freeradius-server-3.0.16-lp151.4.4.1<>,D^/=„ܧҮcq%pUV}"aQdԶb&eȊeF VʼnCxoΚ@ `8&oW Ι-anjzaORYG2`ET@/ CPŇ;sYm&~ǣ?3!|DU]pO c @y)3)D. K p_?tɥ|"?|}F1yVzGK= ,zX(˜!"^?>Ol?\d ' 5HLX\ox % 7:  " * R @44x4$('809Ϩ:=k>k?k@kBkFkGkHsI|X~Y~,Z~p[~t\~|]^!)bocdefluvFwԀxܘyz  XCfreeradius-server3.0.16lp151.4.4.1RADIUS ServerRemote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service. FreeRADIUS is a modular RADIUS implementation.^armbuild14,g"openSUSE Leap 15.1openSUSEGPL-2.0-only AND LGPL-2.1-onlyhttp://bugs.opensuse.orgProductivity/Networking/Radius/Servershttp://www.freeradius.org/linuxarmv7hlgetent group radiusd >/dev/null || /usr/sbin/groupadd -r radiusd getent passwd radiusd >/dev/null || /usr/sbin/useradd -r -g radiusd \ -s /bin/false -c "Radius daemon" -d /var/lib/radiusd \ radiusd # boo#912714: add radiusd to winbind group for ntlm_auth # add winbind group and fail silently if it already exists /usr/bin/getent group winbind >/dev/null \ || /usr/sbin/groupadd -r winbind # add radiusd to winbind group /usr/bin/gpasswd -a radiusd winbind test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in radiusd.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in radiusd.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-freeradius-server-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-freeradius-server-update-$service-new-in-upgrade" fi done for service in radiusd.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset radiusd.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in radiusd.service ; do if [ ! -e "/run/rpm-freeradius-server-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-freeradius-server-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in radiusd.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi systemd-tmpfiles --create /usr/lib/tmpfiles.d/radiusd.conf test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable radiusd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop radiusd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart radiusd.service ) || : fi else # package uninstall for service in radiusd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fiQG " Oke4 e! hE  NoF<k_6jTd "004+{ L' 8!h  t! _ 6+klfD [W#wWb!4 E(#+ni !_D<O6 F m$N  6/On4=Nm  !X646T(&G6&$&F&L&@7&T6\&< &HF8%6hg`w6&,W`&&w6pF&6<g&DV6666&8&D,FX&<6;<&86&,6`6h&*3W3A$<" *&*(2nwyD 3.~n!'O\ !w@.UD"shL& :+'|;Q[A3QE.1n/yCSiWR(U $2 ({$aERK78d  ({\M#I 38wfs!l+ Y  y< /|MN hAcz <Uq~F|,t )٤f uC ` = YNKAdam Majer Adam Majer adam.majer@suse.demichael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.com- CVE-2019-13456.patch: fixes a side-channel password leak in EAP-pwd (bsc#1144524, CVE-2019-13456) - CVE-2019-17185.patch: fixes DoS issues due to multithreaded BN_CTX access (bsc#1166847, CVE-2019-17185)- eap_tls_ocsp.patch: backport fixes for TLS-EAP that by-pass OCSP verification when an intermediate client certificate was not explicitly trusted. (bsc#1146848)- CVE-2019-11235.patch: fixes authentication bypass vulnerability in the EAP-PWD module via invalid curve attack or a reflection attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549, bsc#1132664)- install license as %license instead of documentation- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes (bsc#1049086) for issues found via fuzzing by Guido Vranken https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682/bin/sh/bin/sh/bin/sh/bin/shfreeradiusarmbuild14 1587126780  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~3.0.16-lp151.4.4.13.0.163.0.16-lp151.4.4.13.0.16-lp151.4.4.13.0.16     !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"##$$$$$$$$$$$$$$$$$$$$$$%%%%%%%%&'(((radiusdradiusdraddbREADME.rstcertsMakefileREADMEbootstrapca.cnfclient.cnfinner-server.cnfpasswords.mkserver.cnfxpextensionsclients.confdictionaryexperimental.confhintshuntgroupsmods-availableREADME.rstabfab_psk_sqlalwaysattr_filtercachecache_eapchapcouchbasecountercuidatedetaildetail.example.comdetail.logdhcpdhcp_sqlippooldigestdynamic_clientseapechoetc_groupexecexpirationexprfilesidninner-eapippoollineloglogintimemac2ipmac2vlanmoonshot-targeted-idsmschapntlm_authopendirectoryotppampappasswdpreprocesspythonradutmprealmredisrediswhoreplicatesmbpasswdsmsotpsohsometimessqlsqlcountersqlippoolsradutmpunboundunixunpackutf8wimaxyubikeymods-configREADME.rstattr_filteraccess_challengeaccess_rejectaccounting_responsepost-proxypre-proxyfilesaccountingauthorizepre-proxypreprocesshintshuntgroupspythonradiusd.pysqlcountercuiippoolippool-dhcpmysqlschema.sqlschema.sqlmainmoonshot-targeted-idsmysqlqueries.confschema.sqlpostgresqlqueries.confschema.sqlsqlitequeries.confschema.sqlunbounddefault.confmods-enabledalwaysattr_filtercache_eapchapdatedetaildetail.logdigestdynamic_clientseapechoexecexpirationexprfileslineloglogintimemschapntlm_authpappasswdpreprocessradutmprealmreplicatesohsradutmpunixunpackutf8panic.gdbpolicy.dabfab-traccountingcanonicalizationcontrolcuidebugdhcpeapfiltermoonshot-targeted-idsoperator-nameproxy.confradiusd.confsites-availableREADMEabfab-tlsabfab-tr-idpbuffered-sqlchallengechannel_bindingscheck-eap-tlscoacontrol-socketcopy-acct-to-home-serverdecoupled-accountingdefaultdhcpdhcp.relaydynamic-clientsexampleinner-tunneloriginate-coaproxy-inner-tunnelrobust-proxy-accountingsohstatustlsvirtual.example.comvmpssites-enableddefaultinner-tunneltemplates.conftrigger.confusersradiusdfreeradiusproto_dhcp.soproto_vmps.sorlm_always.sorlm_attr_filter.sorlm_cache.sorlm_cache_memcached.sorlm_cache_rbtree.sorlm_chap.sorlm_counter.sorlm_cram.sorlm_date.sorlm_detail.sorlm_dhcp.sorlm_digest.sorlm_dynamic_clients.sorlm_eap.sorlm_eap_fast.sorlm_eap_gtc.sorlm_eap_leap.sorlm_eap_md5.sorlm_eap_mschapv2.sorlm_eap_peap.sorlm_eap_pwd.sorlm_eap_sim.sorlm_eap_tls.sorlm_eap_ttls.sorlm_exec.sorlm_expiration.sorlm_expr.sorlm_files.sorlm_ippool.sorlm_linelog.sorlm_logintime.sorlm_mschap.sorlm_otp.sorlm_pam.sorlm_pap.sorlm_passwd.sorlm_preprocess.sorlm_radutmp.sorlm_realm.sorlm_replicate.sorlm_soh.sorlm_sometimes.sorlm_sql.sorlm_sql_freetds.sorlm_sql_null.sorlm_sql_unixodbc.sorlm_sqlcounter.sorlm_sqlippool.sorlm_test.sorlm_unix.sorlm_unpack.sorlm_utf8.sorlm_wimax.sorlm_yubikey.soradiusd.serviceradiusd.confcheckradraddebugradiusdradminradrelayrcradiusdfreeradius-serverCREDITSChangeLogfreeradiusdictionarydictionary.3comdictionary.3gppdictionary.3gpp2dictionary.accdictionary.acmedictionary.actelisdictionary.adtrandictionary.aerohivedictionary.airespacedictionary.alcateldictionary.alcatel-lucent.aaadictionary.alcatel.esamdictionary.alcatel.srdictionary.alteondictionary.altigadictionary.alvariondictionary.alvarion.wimax.v2_2dictionary.apcdictionary.aptilodictionary.aptisdictionary.arbordictionary.aristadictionary.arubadictionary.ascenddictionary.ascend.illegaldictionary.asndictionary.audiocodesdictionary.avayadictionary.azairedictionary.baydictionary.bintecdictionary.bluecoatdictionary.boingodictionary.bristoldictionary.broadsoftdictionary.brocadedictionary.bskybdictionary.btdictionary.cablelabsdictionary.cabletrondictionary.camiantdictionary.checkpointdictionary.chillispotdictionary.ciscodictionary.cisco.asadictionary.cisco.bbsmdictionary.cisco.vpn3000dictionary.cisco.vpn5000dictionary.citrixdictionary.clavisterdictionary.cnergeedictionary.colubrisdictionary.columbia_universitydictionary.compatdictionary.compatibledictionary.cosinedictionary.dantedictionary.dellemcdictionary.dhcpdictionary.digiumdictionary.dlinkdictionary.dragonwavedictionary.efficientipdictionary.eltexdictionary.epygidictionary.equallogicdictionary.ericssondictionary.ericsson.abdictionary.ericsson.packet.core.networksdictionary.erxdictionary.extremedictionary.f5dictionary.fdxtendeddictionary.fortinetdictionary.foundrydictionary.freedhcpdictionary.freeradiusdictionary.freeradius.internaldictionary.freeswitchdictionary.gandalfdictionary.garderosdictionary.gemtekdictionary.h3cdictionary.hillstonedictionary.hpdictionary.huaweidictionary.ianadictionary.ieadictionary.infobloxdictionary.infonetdictionary.ipunpluggeddictionary.issannidictionary.itkdictionary.juniperdictionary.karlnetdictionary.kinetodictionary.lancomdictionary.lantronixdictionary.livingstondictionary.localwebdictionary.lucentdictionary.manzaradictionary.meinbergdictionary.merakidictionary.meritdictionary.merudictionary.microsemidictionary.microsoftdictionary.mikrotikdictionary.motoroladictionary.motorola.illegaldictionary.motorola.wimaxdictionary.navinidictionary.netscreendictionary.networkphysicsdictionary.nexansdictionary.nokiadictionary.nokia.conflictdictionary.nomadixdictionary.norteldictionary.ntuadictionary.openserdictionary.packeteerdictionary.paloaltodictionary.pattondictionary.perledictionary.propeldictionary.prosoftdictionary.proximdictionary.purewavedictionary.quiconnectdictionary.quintumdictionary.redcreekdictionary.rfc2865dictionary.rfc2866dictionary.rfc2867dictionary.rfc2868dictionary.rfc2869dictionary.rfc3162dictionary.rfc3576dictionary.rfc3580dictionary.rfc4072dictionary.rfc4372dictionary.rfc4603dictionary.rfc4675dictionary.rfc4679dictionary.rfc4818dictionary.rfc4849dictionary.rfc5090dictionary.rfc5176dictionary.rfc5447dictionary.rfc5580dictionary.rfc5607dictionary.rfc5904dictionary.rfc6519dictionary.rfc6572dictionary.rfc6677dictionary.rfc6911dictionary.rfc6929dictionary.rfc6930dictionary.rfc7055dictionary.rfc7155dictionary.rfc7268dictionary.rfc7499dictionary.rfc7930dictionary.riverbeddictionary.riverstonedictionary.roaringpenguindictionary.ruckusdictionary.ruggedcomdictionary.sangomadictionary.sgdictionary.shastadictionary.shivadictionary.siemensdictionary.slipstreamdictionary.sofawaredictionary.sonicwalldictionary.springtidedictionary.starentdictionary.starent.vsa1dictionary.surfnetdictionary.symboldictionary.t_systems_novadictionary.telebitdictionary.telkomdictionary.terenadictionary.trapezedictionary.travelpingdictionary.troposdictionary.ukernadictionary.unixdictionary.usrdictionary.usr.illegaldictionary.utstarcomdictionary.valemountdictionary.versanetdictionary.vqpdictionary.walabidictionary.waveriderdictionary.wichorusdictionary.wifialliancedictionary.wimaxdictionary.wimax.alvariondictionary.wimax.wichorusdictionary.wisprdictionary.xediadictionary.xylandictionary.yubicodictionary.zeusdictionary.ztedictionary.zyxelfreeradius-serverCOPYRIGHTLICENSEcheckrad.5.gzclients.conf.5.gzdictionary.5.gzradiusd.conf.5.gzradrelay.conf.5.gzrlm_always.5.gzrlm_attr_filter.5.gzrlm_chap.5.gzrlm_counter.5.gzrlm_detail.5.gzrlm_digest.5.gzrlm_expr.5.gzrlm_files.5.gzrlm_idn.5.gzrlm_mschap.5.gzrlm_pap.5.gzrlm_passwd.5.gzrlm_realm.5.gzrlm_sql.5.gzrlm_unix.5.gzunlang.5.gzusers.5.gzradcrypt.8.gzraddebug.8.gzradiusd.8.gzradmin.8.gzradrelay.8.gzradsniff.8.gzradsqlrelay.8.gzrlm_ippool_tool.8.gzradiusdradiusradacctradius.logradutmp/etc/logrotate.d//etc/pam.d//etc//etc/raddb//etc/raddb/certs//etc/raddb/mods-available//etc/raddb/mods-config//etc/raddb/mods-config/attr_filter//etc/raddb/mods-config/files//etc/raddb/mods-config/preprocess//etc/raddb/mods-config/python//etc/raddb/mods-config/sql//etc/raddb/mods-config/sql/ippool-dhcp//etc/raddb/mods-config/sql/ippool-dhcp/mysql//etc/raddb/mods-config/sql/ippool-dhcp/sqlite//etc/raddb/mods-config/sql/moonshot-targeted-ids//etc/raddb/mods-config/sql/moonshot-targeted-ids/mysql//etc/raddb/mods-config/sql/moonshot-targeted-ids/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids/sqlite//etc/raddb/mods-config/unbound//etc/raddb/mods-enabled//etc/raddb/policy.d//etc/raddb/sites-available//etc/raddb/sites-enabled//run//usr/lib//usr/lib/freeradius//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/freeradius-server//usr/share//usr/share/freeradius//usr/share/licenses//usr/share/licenses/freeradius-server//usr/share/man/man5//usr/share/man/man8//var/lib//var/log//var/log/radius/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:12346/openSUSE_Leap_15.1_Update_ports/98f79f813f41dca3ad2ea6d2a7b14f5f-freeradius-server.openSUSE_Leap_15.1_Updatedrpmxz5armv7hl-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@A@BBCCCCCCCCCCCCCDCCCCCCCCCCCCCCCCEEASCII textdirectorymakefile script, ASCII textPOSIX shell script, ASCII text executableUTF-8 Unicode texta /usr/bin/env python script, ASCII text executableELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=1c273d05450e5491e4cec3e494daede823b8ecb4, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=6b8dd909458367209dff10badd26726e06278a44, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=2ab7ce848ab1019fc63106ac17023107de4c0ffe, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=da3efba40bcd00a41e38c3c151fbc3d4fb73ee51, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=5702789caf2d4e1062c0214cfb90d459cdfba8fc, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=e0f4e1c80251de90f615b9b4985d9e78d1f4b5e0, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=ded57dec406f4b140d618171a438711a17c4e9e7, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=e618b44ba4d18e745be9f68f08dcbdae323351f5, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=f7d13a23555322033a68eeb28ac0e3964fbfc6f7, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=99a8d535576396baeae25e80949f9b5ba2c401f3, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=0108129251604ad01c4b68008c77195b3933ed42, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=d11dc984150c746619ab71fdc215133986c9f422, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=7939fe1a71749ff579d77d033561c0b3c5095bb4, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=bca077e4280a6c84d004e59bc2eba4526e8b6d60, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=c153c405e7d0e6608ffbb7e44c4f06b8ee547ba0, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=bc53530696644dcf44b6266599d75e92bbba95a3, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=837b0f0329bb23a3827053ce115ba79f707922b5, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=6e391999cd56fffe744742a373265d7700707c5e, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=212ffa7b49cf6fe0c4f3a3fac6fef1f0c4a03dcf, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=1e4c9ebd0625fc6401aa46c04639b0f79a1dabe9, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=3bd39f7a4a46e328bd5657d27fe04babfe5a59d8, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=75ce40bd5dff1bd41eb744fd9f19126d8eb323d7, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=284d9d85189045f16850e1a3705e68056f186b11, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=4d0c28db45677dcfdc0bb4fe0eb1dc1d7d069131, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=637817cc2f84f35f6d39ea0fe520d67fd2a31a50, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=6db28060a1ac21d298b73faac00469b67ee334d1, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=9bdf54a8ce3b226217f3f082aba3f56318df6d46, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=860b59e357c4eb3a3f8d2b79f55d2d0dc108af3a, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=d2e088435cb33da01e92aaee2932b77d26babe29, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=239a103050e61d0079d365318a97f5896386e964, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=05864a669a5c5c9052bed6e1fd0c713c105dcc15, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=649a47f352fd9d643c1b20d0d671116ac3834b1f, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=aafe40f324a7e70d046ab2b31c9c534d571605e3, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=9aade9942dde5d14349eadce0fe33d3d3dcda202, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=47193d39849457b249ebaee028c82c04d5390215, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=0c90b2d61e85a0b8ce26fa34e89837abec1339a7, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=8b7ce2c251aa8f075a2f8d14985fd269d4a7a99c, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=c413baf876eb0f12081de0b31dc520c414e3d84f, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=8aa0c2919324380beaf9dcb9ec885d6a40804573, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=6cf15ecd496748acace16a060d5df885a7851ded, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=f41b2dd3b6fc3527c1acf4a00cc6b0a860c81157, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=3952b01b3f9a0e4940c9f3e30bef0f828e7d8207, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=196a144d11785287139fd01bea7643f9dc026c60, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=fe83a50b459cda525ba61b0684aaceab5c7b7eb4, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=caa985316fa0643ef9e9391f0e5d319bb70dc28c, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=8d0ebd6dc5da188d35a4618fe74d931e0d68680d, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=356f344d0040813f83b4e5a43d7741d915d2f993, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=6dc9088b8bec10722f975cbaea6c8efa231ea1f5, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=9be7bb119552f6f79010e1afd0de977157dfb96d, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=3b4f0c3e3e759b2ed4a7de407c3c8a084f796ae8, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=90e92352d3f86019b59f2423fcbecc32be187e9f, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=7f9333c8f34c83686f53e71cf2ff63f0004b2510, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=1efcfbf32fd1413706dded8369c04dd9213c398d, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=7efb6c3b0a7812a8edb2ad23ac2ae8f21eebb833, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=b63b5d7a20f04d7f9c645d66bf5d61910d8ffe25, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=8d59aca9813019b2430bf72b4f1e49a81b00bb09, strippedPerl script text executableELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib, BuildID[sha1]=3312ba2db116b07d2d9b5e7d625ab49caaa86ded, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib, BuildID[sha1]=a30998a04ef6106827776faa0bd5c9976ffe5b59, for GNU/Linux 3.2.0, strippedAlgol 68 source, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)empty ")17>DHNU[ahou{  "&-39=CIMUYZ[o{   RRR RRRR R R RRR R R RRR R R RRR R R%RR R RR$RR RR R R R RRRR R R%R RR!R$R RR R R RRR R R RR RRR R R R RRR R R RRR R R RRR R R R RRRR R R R RRR R R R RRR R R RR RRR R R R RRRR R R R RRR R R R RRR R R R RRR R R R RRR R R R RRRR R R R RRRR R R R RRRR R R RRRR R R RRRR R R R RRR R R R RRR R R R RRR R R R RRR R R RR RRR R R R RRR R R R RRR R R R RRR R R R%RR R!RRR$R RR R R RRRRR R R RRR R R R RRR R R R RRR R R R RRR R R R RRR R R RRR R RRR R RRR R R RRR R R R RRRR R R RRR R R RRRR R R R RRR R R R RRR R R RRR R R RRR R R R RRR R R RRR R R RRRRR R R RRR RRRRR RR#R!RR%R RRRR"R$RR RRR R RR%R!R R RRR$R RR R RRR RR#R!RR%R RRRR"R$RR RRR R %όAN L!logrotateutf-850cb591bbdf965049c7948209d410ed546a8990b348666ae3ac47d8708482c36?7zXZ !t/]"k%Yfm?1 1N8[xIBpW[ox[ཾ5z(LqK3LHĸ?!vƼhRfpL3/܈ )*PǷG)u[4}tLBr$c{`Pw̮A-?աWZolTAk}،q5bVTfm֢ ``,n1΁ìC,O[T5y}zMc6g'MZӨ|ՄlP'sIrN[ 7jxEm4MA2j D Y|ure(Q΁,qc,Mtjbzh{/M0TӦ> ~8VO|+S" y<[DoZZo7CΈd0t/a>dUw%YG"!3iqavʥ/ΥXTKvNI/vz N,Kltk@9bX\^rK.ßuV5)H.d;bU9oؤ1If*FofVWyl×G0 _/ 'm+ 3 ܊Z#ij//gyB-Bjxfw>ྀCmqeC"Q|׶aZ,EI|v+<ޚtDH[,9S߂WӼIJtz?u4*NZc\י+5{ǵq}3 *w(*'$vLv05 ѾKoJk[$b0fj侾 Ec*:nYB0Tmsvf,v_ ˁQvt*.}w<^VzHZ\ޱ5QpW-O~*~ՠ?hz?P:x`MCωyxaQB#oWf-,Q0xnfAO! A ,r)&ifL{O8z伂2?Ys'inv?GG=n}4 "%.N+?&:,՘HSbs@7ң(%QXHjݘm~qy%(6ΔDv)V+nJk.Rҭ|Cb RosA[TZq_LoCMI튂7y9SK1)M2[mFؽ7Q} jX>fa'o*hOKl]0iCД-Y\c WQiU"2giʮ ol9 X#ٟH1Q2o&_Ɯ k@#d??1 &!T Xjmxӳ/P'2̎T>1c({QQ:0Ծ9P6nǯM uinVoCI-]b_%!OX J~}c!aġ!ҕ&c8[n?pHʾ80|i y=ش%[&_Hj'KDW..PπY A-35 < *bKl "˼1BLA!d+PpD,ŏt?|xq32 gb^ ފ;oƳ<.S: Ug$Odm؏$Jbw-Nh̩$rAۍ/3Gg*'1U1D`?нnm&?gcTž;OқdIM%H[KL *ZA*6\{BϟKPs]Yy1jłɬ%Yc4AOq_N%ON0]@Lg!fRLiyl0hmP" F&*Tj o:4mQLurholHYE>}ͤK=Gs9Pf fe|¹T$JM$Y:o̅p#'8SW?<Y;Ζg4wȟe/$dlj mxJP cOqr0z貹`Y+ P 0 7KY }\&'~DW\ޗp1i DK~JL ׼ï}I/Vp8mʦYz9j^8'88g =,x$eŹ!G˵&~R}H PkM|l~f Y?cX*y! !P]z UIbGT3dvE/ѹ_{#Gҽ=֑~kE,xb8#@]iKڞhXS0Z{d+'QT]7 nE()6E #}{* eԔIQX'ڸF(MBe7M5>c2>"8{z(lJWr9UW ;$ CUB!? gidS`Xfb}WQ4ыڕ13C O5 j$JZN3{%f~qLmnaW=+?0t/W:<ʀ ECͬQ1DpJ`1%=*@H69i`s=fBYX`)io[38|&gj]Yzt׀iګ H]XO`Tji?W@ @F;7N;ڍy}΍"%qU9S5Dt v%-%rCb1ۺ}ۣzDG}IhqAT>,W9|qC$֦#qUz\qP\,~K1.W?r(LzMc{?f `p_ k0} H" K.Ow[w[E7)GDBJ Y͚40宩QB{U:xS]ljPH[~pVK¨Jk)T.ZB< (,[^wIE*k-{4-I1/3ĜB< S83Kӿ2F\/GsO.NjRs|ww⇊ؠea4IRUԋa* 284FؔG>&`VmY4|:=Y<[4- DA@^k>s>U ѤH:u?BH1'b3vՔxA㎚u ihF.d#pfCiLWQzX6 @dU֝6;Ur/T|àSlVhjr]v^JM΋KNQam $sj jG5yUʦ"eWNa6c9! /9Ui;#ќkY)ڬ!o2"l!ѥéT{z x j95\bޯqq9ދ)MֆHz0?[ TyJ0S~ۘXSv^`؆dFo~Afb*۞79}oHn˿*sz䯡V5u 30;\TLpnZF.o}* "-f9#}@(4z{N{3mZ#Z;X5żlP[BUdplh5*L64NFuW?aEh2܅ժ 0TqP+AҙU4V]Z~|},) ؞hvB#:?MQ'}JH@<C'mcD뿀iZT̘b?*sYr |tٰ+{2*Ye/ kŤݡ>ʜx3$=} z ^LڳM&R$\HpS:$fbzCWYT'RkH I Ο}x"LmxLH Wf!zR?HznD4=C橅XQXaT>Zj\#F,;iKTtm[\W$-8АYAs0543j:CqѶv|a tORBi,BQ{aFDn{]聩!-řb +;afЕ@d.&YJ _<fŹLT7gVEcB:rG&dL&tY,}!mmE6?41eBCݟ3a(uQv}zByz.J߸=#:ƊuFkn3ԩ"*)l^idqpTj{^:' (g"k #^ǫh (U}ݎr5.s"<|ǟ*E 5 @J)"L\S0wee]-Կ܇5 AHT]Di4V䬃#?!לfQL'Ek|+n#1,\4/l Q1 4 wMɹ$hTph rwզnx3 6crЅc 1 z\p e9uƇ-O&y* OsR%3ʂV܌ qW6D e%q?ܑS2ÝEJi C 9Y"r?a?d?%|ఠ1_bIU/5 D^A?0ͦ ˔ˡmPr%n';X:}*,lli#2t9^E[6Nζp(A*]pQ(xa~j-833|] 3Gkk䆼vņ;x?w١㚂.1 3vo3G} T#&^ZY3&DOW&mXN6) a& }s4Lʟ3aʃڧB *m~ ژxzzUya$#<'$J1)r1ldFTkҨTn/CMV d_K9ggQAdN5jf&}x4fGnղ|/ r{j8,UUfV)L^ȋ$8ʬ qcg2ɀY]5R:(ui7Yt|D^kb֖JV!(MK8⏵@rW/f3:| 1׳ӧb`Q!?xZ0wa-_tˣ;=KCkJ'c>50?sbx_J57QqlDC^l+m.pzrX>Ħ~:Tϛ[ӡG\Gyku#z&b ̚[P ]__FrEmb{Ľ,e&LVUxqˑuk.?1I#2$ndm3q M[sլEJyZ.hEbEi<÷Wx#O6["Gp2UUXK]ns3z{O v%FG5{ :߸IY b-򯳫*1mwWwAi#s* O~s艀X(1:t=nG6N۸SO{i!s<,&apB,T4’=Mz-&ޏ>y/Yd>eeMRBB"㼌;hE Z6m/_z —]"~Le`l-4st۾e@珷g7K~r e=.{k%p6l".!0/Y3GCG^^K:_EdީC!4`88\ry룢[[}?e R =⥈D".f)S@W2hyi RĕZi5*WW$ISЉ )gKNģ2P/v|aD2偅(;cF#!XPKgmj Åu.lE,>mR5ډl~cH* O쁡t)!`h¬[Z& s:Q5[w4XFa`n0(3g{[]uɱ}GKg\ߩ$.ۆ(bj_![~yM/z8h^ \Р:x9(8훡/pf!T 2mٸzt|yO~6 1?>vۀ޸y) o ƎG>\沥.:b0=->~ &^l08_@\Fu׈ g @|y7f vBoYܥ#bwՠpm0pEש@?T"&; :I̹ nPYFW30eх5c%T~%jձ65c kUѲdEIPtϼAMTD ZO1|Z<ϨR6 "֍FoslAHtYiR33[R`:UMTVc&ЯHctR h.N/~DEQӱH/KS}Er3V {="zR: j{|}nz~+'GKc$ 5ˠ'%exqރ FvK` yash_uH#zjL|pgVM C gRgg!j{R_R՘t(LIh†+,wPfY S]=3n D4K fϾRSz'~-v`СкG( ''AarY3K ~ϗDy fd8O&0%k/ Ls|ưK'jEFIiL=ɋW35=w| קt'8^[`(VJae& 16;An!;p}5Rof#M%c:VG'(xOAt`©]e})y ]dGSPPrR406F_)3ʏ3?:^ʼnEK'v.3@"eF]2X1J#D_{vm)ռOR E-ϸ,c<~g|'=۝S9"/%$|eHҪOcݒ zߧf;ڛ  ,zUUΐ)07}% DNa86~n>6r>¨ H( 5eKdKѽ ԕk!ˆw*Vr=ba8PW}D3?}`չg%)GhA+R1_ 1UA~;`b:ejxw Cz{'MlM_R9ȜD |!J(dۏ07c%lb]BWb Z f~Pk5IWFYd^!\7އVjR7B,[#nQ#(Ҷβv&eIӁk w<]]RSmCR mz=^=D}\AI[4&-m@Pw_ߜE4<*'츞?@Cz.!#[d+$'lߖHK?=L+&N =>¼CN@c1*#@^ٹ/| 4]MQt]$ vzm•i X !XyVo.Ia?4R؏UtZ֗A <,0ʡL7u${Wҭx$y+qzoYtܫ>/]1*M3!9"-M Ae:r$!)Q|3@ooFKvMj~Ll{W5n.j6@P)Pf~ .8C,Ұ#7CϸӍ;˃C.V{%anIax=b n8@!#Xu@ubUVS!r\3G`$* BzjO tA{@Ԅ炍emڌS$jar]MqhZq{n$'i<>H_ufe'Y+#;%xs_ҦΜ3F(38Q=﬎&0~n2Z+MQR!~ ϣ!7pF1݋b;6ָw i'6%kZdb'@g"#[Qj*\rEJgLJf X ЪhSB#(}gi`=n<.yiyY6! ōuEu;\/XA67¥ s+d ؗ5Zw͗丨[&$kb`32z՞\J%ί J^J! zJbCCEΫEǎFq8 Z^fYY(7;;XRx25UvҸ֬C;۹b-NhU>vJf{Y(I@OR+ d+4۲ ZɓD/<юGbw!#)agf=ns{#c8ܫR6QW /ΐr $U`Z,`*'}'Ð牃h_}x(i|N!CwYKQh8)}h/-*spՎ$ G~}^ʉZFgM+ , gչ|,rήFLR*/ K%~(XţÚ aC.JYڹj5DL@eN(OB]@uQ3>%ɩ\]z4G]!󚸋}t-kh!<UHn]ap+i"&[W`ה( 㽥ט$WCM? QS8;۹H4'2̿[/2SucuRʊs rmP;sB$a.%{@Ywbh`"|ݫMh -YHFeE=T`%/켍gz kҜsUuYU姟|q @G,#pLiWrZ3mɢ=\t0Y W+B{_ :{1]ճ~0兯AFwL؎\iʶVa3z TU@QJzC5cJ_z+Wɵi`Ԣ{AX|(p] duܷ)q$oI}*I$8RYnĺ_;{݄=s"83@կ؂^ vMvTNn藝$Un SP}uIʯl77ӧxJqHJO*Se>d 75=K.!q=sL9ƒ4_O%,VshJͬ5zX-bشXN⁖ȽleFr+=5U@3wVIs` K{8Z<԰"WjYڛ- 3(vDOQجX$y$`8w 8߄f5T# W~[ bUCֲ1?O>_(ޯәn2`\OxiAݘԷ\Z=%.E;Bwiҩv [΀po 6޻ҡȧ@Jsl,ᐅ]lEт>{$ui$Fفs'ߋǁʭO4 i^1lcmyW8Z]hɁs(\Yp&lҨ#}S{ꦚB&/&UmaʔZEφr^$(X/{h D|13,bh?KϚ Ą' y*n_(=a;ʚSSX/_85?5RH&3d:x10ĶxW*$jwKy`'l>K=s@\Z,1~zɤFy7u?FMb83 M Bze_JlҲjʢXUC0>W!Fxh)`O&Klk~}`ޢe@[wQr||Ⱥ/)Z.ê և⼾MXÁjWG745c  >9@L%:g7@ Y` )nM|yQFNRmN\}$-tis˚'*+ =M%õIŏ[`9F*сtïBWmQ /ipo ~6/7zbe@+Ū5E3HУ*@⚲ck6R!!86Z&JFHYbٝg.뭆NkS@Gs3H3p%=3uE|[,7 Uo۰4T뎩 c%Ka`PN9"at*<:4&` ]xGl~hZ=[̚ЎHEi2~Dő5JC&Z5#7qa,w0r"ՠqcSs9@FS޼X βjmf kPel$|\%cokrKX["fƧR3~x֟{4wVfaq̞F2B&՞Rk ڹp_u!@N@%'2nLtʒy$k Nc#ȭz=B;˯ۚ/0k]{SPN!܃[)'-y"Ru+.`#1.5}j$j_ s11v !<6Ww!F&=]w8K>W9V" Bsv[Y>],"?|'F^df6+ ^R/co(2XRBtk.%Ъ:Q|HvN槷M_~:K Bc O~2ZGm˨rCp`Y\:!SQ7} ɜ!c#+D|_}Y%x(ˑ?he3s j.Z<{A"vWV!fs_G13?ĹzAt w< mӉ? Z9!JQ $Qi]"faIZ4b \$ѰN$*4v6:"ƫVݺwitbOoK9笛Bx 8ĬfA16s(=Vh)XG"W/:|0`$'+}- aFsA㊛L"~sW>;"nx, vՂc5:~=,J ϤQ߼= 3tx,JGMճ'# QslzfK-[cI("6cm jkȐק!IFH#fLiս Y`iPKR}c1%fyV+yjys|f#b^=O;|~:4V˒KFw D2>I %rZB\mɦf' IuQy˯LㅼEхkVwA)˘~m*%MpYSWplp䅄'oT[տi[lk JC)v"fX[<;6LtŸ0ш㱄nLϗ{F8"j=oMt5[t0oz >HGRRynG!Sڣ: poMîO@5?8 k+SqÐ|]D:&n?MňKJUmvK {||u36Cvf-3%U/ 066y &(`Ë{wȔ8lvh{R~@u< [+F"`0O1`W`P\Q#7ČDpx4NV=| M!%ea? Y ^irI}}7 'F8hV T7QdCj;ϸa c.y9(A"19*!ܚ#Sc k ueBp綁Dk:ŕ1<]f}"gMP I8)Gb+_W]Txn]-^&K\m>Cr^Jd;MAy"*lPOTtyU} ;O;7{(ΧLζ"lTPUzu~H-ms0|sëjNk٪T|-U0~L>zR1yc!ИiW:f>0NpCO TA!S;mnW>_@zh 4L-7xxM@N0{74QAPU0D3_D/&<îQG i$|rNb΃ϋ*Ⱝizʍ(IOĢH.FS] ~su'Ю>6;0{8\;u,gLP&a$r7'iD(iݬ>ޔ#pxӣpgLo⊡V>/,ö~>.#%O; eqnP![Hr3{7Vj[9WZ ? `Vj*sJ:R[â Ū*X5.Wc[S &N{W Y0XFз!1wI:k٬o!D0vpY73 |TnbU<4n_f[ LË Z]XGLJ%j!)F.p??y=ʺ GTNX%ܻdibڨ㘩ֻ-ßfLfSF pu1N3DZ1oOApTb&}?0/gl $A=?ŎV޽ך M}ӰaЂ= b6[m T4,OIhŃo!BYD bdN$e_.D{5!p\6q7t-,">~*FO"("@?02!l쌅{nUy;ʍm}u h~i0smqjHk9%RV#UaJ fy@e(ݼ S!׸ R q.51dNvo2%4ʢ-0eXt}lL ^t+' )ͺ*] P>]iPg N9淒~JڗoL19+qsspqsH2ew}Q"2#Isu_.H#huK?g~".K7˛^% W__Y͒GH*ѲV8xksG^yP^9E|RSW ]w~:z. 03Ү+ f ȶ%$}0 $S𳒉Q+T"^Ĕktk#ZWXKH@LubFH*'Ig4`9?k*f;:)~907L; eSZuݯŸ kInuD4آXf/{C~ oJOCp B\H)-бL;#6]x6Q*hEb;kSB͏?%0hxf_'4ޙD=a hs_4pzF`46Iᤒ*) u1S y9$N%z[zя.lIX%8z *suLQ."b>/~[w$}%ڿtsXRKD.Pe]lwA {Ǵ}KL4&D0hZ-WDlmPI&!S5ʆܲDov~4`EWfP $D}e3}:mCFGZSZIK.MiD=cEJ9%&ȯ3 GncDh*ѿ1,Άҥb`U!U߀`n3i.'o BNRАŵjhI,g!ۓw Nevy}f{x@RO7\2)6☛z(gc"y-iUHD)į.Yl$xv'A> @|HSHRsC Cj3R7ҭ8Xԯ`r8ϓTmB(_IlT'L45TcGC#UǬ<3Q@ssQn6Eb@*h$jmdZ2>U'! S-8[ەr}4 m˕=/鹛7 :l /+'lxR7],DQK@MWH0gzt(P乭MC FAhڬf*|*L w?`[ ]Д-O-Nq7BȽhiP30e,f|ek' ʛgëÏyaUqZEUޒ=VBmIhQz/=z/'b,lFgM(d5#}ucpc2 w+M3pHAz +n7r.!ؑhlo4FoV̳xyЦl;ʯOp&n#9MyM4h-EllBcFf @UyXכRp;djӤ7#c*=EӸbTYŀθ}PHxLDbQiӄiCJYQTҌux]]ƫE {çzepʯm@1UIR#Ѐ?TC+ڊRIoZUӽ#۟ό K=K/-9DpJ6c\js@u2Li<9?<{ŤqIذA9,;4޶;H1͉hK0d\K a$+s1C6jZƬAyQ \`5A6ɘ[4%B4{.S(`.?uҙ¸~7Lh;B8.~q1g; F\s0ş{b$rpFe^8.~@ʩH^[N78|w Mf_+=?vQE)g Q ϓsOՑ# 51Sr1kxʐ+qMk&"y=Lv_rjԩң h߬.#*iGe4a6fgV C`\*U`ƌbG͊ͺCs/#9iƚ_NE"-R,uj_[Y] U2[fEMs@HO1*7ؘ[N;ą2[h~;5EvChX#`x3(l۠ Džt)j{HBKrR1;eL"@pݶFt:*7fs|N8Hem &Ou] j<>zIs|zff5'M;,0* dj׾j $pE'E?t]x2opYFhN2p0=ob".bQyREt#R c޷3!3ZТL@ɱΠc{fWbTIf4kM8^ځ3iS_|POC:P0{>TcemI97BH?o]l$J,$pk;KȅeEU7mÌJ)58m:YvJ1p q)`uޙXaz/ZB;䎲|[Pr5t-RwǓڹ .=fwz):]Ek$''N`SJ:h7^Y>=\]h0/zޙ(^YvwJu٬kčz$yl; {8vf6[҆$cC#]=B1Ʒ3eOyY胥ڪxq}Luˉ.E QiT)oV\aձOne*jkX犲+!9k퐇U*},PhQaGq,X),ǰ_{"z$9B]v_/eRq"rOTh4(k`zx8f ctS+oXb5rBYbC %m"FځKr>6MR'U+Ē ϩdNZ;ce&Uo_B .W3)?^d^YD`ԬtrwҚ=&k#KIz&3'! lA Zp8f<1ܙ(tDtT\1Zѹ»ui@g}L. WQqd;щ GvlFQr(.\)"6-ǩ>q k6ZqvQN `O8.҈j %|1/gԝJRWI)ag+%#GpR:Wд̚tgl':(6HJډxKFӽbVBVTXrek[>N]?.CMA fP,S/,ӖU%BVZ'Sx㼯1woR/ B M#[eXFŒb2 sgiae_H {jA-xADU vVu1I(Ҧ]n)|DgwYGta!i\YFbQYG\F:]&()6mN2c6Xu6;8l_`z-%c2 dRk5^hjCW$yLqڍA'@\;œƮ0 7?c[i{zu"`/iOq V/7U<)Zz,aHnq~ Oi/ġd(2ρl&(֠W)Pe!7#C2Sˌ[tHRV)dV&%#OŁQ]۾ԫpX-`u1,!&dE K ߡNA7擯ytt4@`%cAb+*~TC]H7 7}zGont֒ίAmCW.,UmN Nd֣E"pr:9ڊhR J#K2P%%U=\[=1tW謦3&a*u/F1|Q% X؉0ߧxD_8;4av>aZ'&ؘ Z+$۞4)iw+ܷY2'E[# ! |CN4ظAQGto_雱_Wiz,K`Ķ[?zm(8O> m3Ƨ&%Nm.ܕ@łt慯o[ao$1VZtu@7WǓ6iHgd!8e>5OlkoJM<;KEM7 4o. I jP2dRa=bǙR[@9}`\"."b].HQm!"̡{̢tJ/]y;7[AZߴd#~zebc<ЮFsMG9- 2;lV \Dgԑm/:ǏǦQ7w %t>NERk\häq㲙VA~?MQ .+.ZhV ^]!#CAl&P-4 `6һ{4MXA+jAXvR7DzUQjnOLF9ǻm .gkq&f?祈|F VP*6{Ih-ct?1gH\_88nter;'.*7"slZ8m#H\Dvtyع.׾`ܦ>?w)Njok ܬ["6\F*X9"g]5CJ V?7&XC_ɕY=,.d~LLtF蘱2Q\Lg'4'kȿ,NODrH]Wax2Prb+0_?eϰcNY/s Ni,*pEx/E3t@KG2a<;[\Y#6DmVZ 5U)lkOU`s,LCbtI8) P=jx|hDfRNݲy֖zi/O Q&cV5ѹ}Jχ}EZ<眢/Á Y@b@1ƈгKw1RCFQMl9i)moLptÂ9ū4Lb=WލP^mcC:ϼЮzoADя DJ:&pg]Fw`~7)Ì_b2| sM$gu椮bf;Q&B!Dk7E-FWwHy/0B.y4d84JEH'fM'Ƶpb`x+eJ"MCj"bɲF<ˇ8,k^˭1Z%s<| b0yY3G:>?B]7ֱ^Mn.En>W׬PqU|"53Hed6woϲ0DcA4ȴx؜ע|&l|쥉'-.f$D&6^p:I̺VvۍDg(.N;%n ?w _tXŠW|Ӗ&-MxNj)Ҷ[<1Z~O ֋uktOPVw<1Xꦺ-k8D]J1x:o|UfybR9۟GKBI)bļ ^q@_1qLGY?*OU9?=^7+9TH I״!uҿ;+ >!I+Y)ҬN:Mgi~wjTQW&$#7$V(豘`KA"szP~`X% Iڛ { %ņj!NEG`H3$fVo vSL,Bkb.a2xd:y_Odlf1("<#m.ifBG.?-`&2 . Nvj>{SOE֜ ܓRۮw]Ta< &g Re# 3+_@RC҃Jq DLA $+~w5|q.7:&Iq/mqr}ռ.Q!qR|U8ܖ:ٮ ).өXFz44ƪ>:Mzˋߵ5;Nѐقiһ2&#o6@g@[Ta#R΍Va+֘tjhBI7jT7%'[,u/3x>N l0s9HoGR[3w47loRr$NnE8,ոoQ x-Xzq{$"&$zj1~$=ѽ95G7!4sqVBD7^$Ht ϨMH-?<"#fw:)ӓ}S[uq?\VYb<%Lj& #VOL`(I ߆lAr Eoy#Ibٲ{)h#n,ʤv.[=l,8[rsCkc?V\;eū2!I& (yJv)pĬ5^' ׀R=BY!8k;v= ڍ/MYkmh׆O4;4##Xϑz~hrɐ[)%%vV_;Pn*}GE{*XC, `0&jfc5Sԋ֠B4hY" I!NFrZfyNpw RauFn݌̨6XaT:̐^l(Ntqh9^[ o.H5SJ)3)ȳx"y| @O?74$]ƀ?HD` ɗ"KwS0&kQ=N)sK,sNB S,%gļkR-ȇKSL5X3NM`pYjšhRj&;G |0"hX.Bz {{uN e{oCOct?,HK7Ak[-{d2ق b'`u=A"Uydž;_Ip wmypk_R*o9HOf;jjypz.ZxJIBlP>+- P\aR@if[hYB\ikqʐP^9[&@x㧤!-5QSU_.cQ DkhSȭq4K $n ޑ]x[vm]u8d$zwf\)&{PFL5u:0ebo܁}{9C+C.}|Q|`p}1t*k߇15q@D9 !e/KMs*12X, QYs#*kZڼ*\~fSk594lS}WaFkMtbn8*5'65*X)?$'f9(RWD7p<3d3RF P@WXA(x/~=jkJYh&3aȜJn_o&6v6Krp΀-qȮIKEεx픑#SB6)P `}<": 9ͨK(ۃ1ێujv埻|gO gnRb)Em0~k:lyL+,KntTdDPE(.9d53NDzWJ*5icBS {T~s4?AB4[ݥ%h1/ۂ _MC:12+6Q#8R2 |SRM'(y%٨L$cLMtv?}r2f.u\*e/wUjYXծޯW(R fTLzXtɈ'r9WR=A&HFUqZDɜytN((RQvoSQpe u>i92`xdsC+F~ }dLs +߿~t> #._EPH/JDh>5,*4&μoN#ǓыA$,ԙ˙krʧBGZy=c3׹f 2Z3!b3W} ɼ#9D[imd.-^/|8A $CZ"3&CV].4 2!ƲhR7NiyC9Ga wvk/g A_Lx*0w 97ց G7рa*9 E~N~Cz%sb2x*ٻ#1y̍;j.|)^^1֙$ xb_HTl2E#Ww>-ҏ-yAAVȃtD4m@P%]8,<PZ]fzJ, 쟺Yr(76ph!wd&Ji7wn+)H7s{2g .X_.W-H5mo`YI PS&$vJ?`Run͵fZGE$Kڑ JeWavu4s<lq<3 Cň]p5 7h2}IQ"eq;v7cpvO`4UvUrbdjƤ<߄iDŽۛӚ LS6S b<ǐ7]vލ̭OK6cxbV9r+zPfGtxU-A*oQejŗ 7tSTg061߀+r C wvPFu}|r3ߦqLLa'C {l³p{,\u"kf]ymbWHexC.jmx_|tJsqbTdz[{٩D^q]EVJ]}M <[6fr0.p7au [e01,6qU 0^tgRukē)ňKcQ A׾:YoǕ̙ʂNej2*k(" y:pT;AL际yz&X29\?E,镜b,䈜ʬ3݈ E9Uue|J0jXϙUc*3hz ;EwNUg}2cJ~ЋD0Ͼ,סDDTz=(VjqolS&(LMp !+DfCQiU;TS,.:ŧBN D.,Vn+R[@{( ֊者=(p:n`9\## |xoʈۉFد!fz C5CHm;}D m)Y%C#*Kl+xR~,~}^|̦[kq4 7 + Dae{AV9<ט]\=3).RC}94vC8M ͍* +3=~hy>?Ѡ1ٿqNVr*+ AXJjG#d瞬پ )81gP8I{$mAf^Lvdg4jyv54/s&^Qf|f=Y[Y_LIf>Q`x@Z?09{++Pz{liW3yfօCM~ֽqeTvdBITVW3Ct}~f&λ,u)$cϛ\拕( n?Ski}nټfRR;W\6*ݡx^<|Sf9,ْZ?aFVWFay47WOyuVAo,dLَzinOY=ZAk[VF9yihkis6js(Z 5TKoyUAzLY7z4e=VhVtE <^$l~ d_{ ȰiD8UϭH?ĜA-ď/< !旨yl;16KtUtڅݶtb*JĻJC m۾9 =u.3n1r]FQ!. 󉄁M$2\DP?VEWgg)dM+OT־mQ:I Ths[W$*6J'Q_qBgnr&C;@B8J0g]Q09posct+x\r̗q>B+M-yd0s>[CCyD5̋ϓ1ϚI~C* [kE@/}VPk%Mmt68oi4'n\TK.>{}%;TCqa%}bhal Ш#B)-0]I3a$߾,2&S7.Ӎc&{$5sN2o-ea s@J'y11MXjB|̔jҰ;8-`@{=*EC52ͷʜ8jde|\>NC3U{F:oOT9/9Qt~ D*KJ2ŔdQNo.eH\&SXe:s EЛ?ַnzL|N'*7*qsOSM=wW*䀨@qb!̚A"g/8}Ce8By`~gh^d&O]; 6uϳ-xeW*)1XQ  K6|A?wF4ޮ%LBvـJG{Yn7?b hqQzem4oGjXP$`+ [ nvX; }WPA' .^ #" f+pJ$cwnVK{㕵khK-,i0?B̮7Ifm^X@J"Ea!{hE-d:7D#(  w@Ἓ3HvF8/zqDq-.Թ_]3ufcYuP!W_;1Ӭ-BwgA慇әD.}#UWMߓQԳ4,d?0 >}B*aV0^Φ:v@MC"68"@+" ^J9mdb|$a0iw";ȷۉJN+JG {wm0z*_lU,sA0lk]{@VlFy`6ŵgvPGD_CS*nz\Xd'I|陘F&a xoZ":mUspM1H#BڂƕǶƲyv'&$hGw--,fȲX[/95F@8 $42h[dT;m/ @!R׬M5Z8wJ2p{bII֛RwzQNf;QgMLaCdy\l2=ĎOOvg F(@h\ײIp-}X|&$@ZgpIP1ОV!I F;YM}+|E!-sp>]Q2Li;=1vo]Nn@ n N gƜOW x6 :5}{ i@HӘuX /}h5sU̡e #Oz#I{&7oDB InˡTcY$-2M:]g7m\lv[➹84QWmfu-$:7 ⒴\'1h.OuRV}WAd[)tu f:h*%Σ ?5T%y<RՇ鈒+!cIDc BC3h?ewGU$9B $IZq fIqN,n\ !QJՕq#\> r@\.o0]ÞQcQZ$/m{8.ΙN(3)YPadFDСmNn,dhVAvv} ]S,3'19X ̌+a)XH ~GTTNڠ",* [tG4F3T-t}縟%enX| /([2GGl_q -Ŝ\ 9f@?<%//"Lw6IDu.MTָya;$2F^*SXAv(+錉 0zo&Rfҿk Y!}g#.gh=sNGdTVGAB%FznJ Gipb*]r.`S˙?ngPm~Fn2KwFeD]Σ[ANwxdEi04 !P6м`&-@,%XFU;5 .ҰX7K8]0=)Lˬ$6WX7&!V<Б ꎋMTLڛx>ۜ=[9k#6f=y Z_>]A^)f~zqxvAWN\ECv7fIgcz4- :x*_6kccgQ^35}7Ep#uv*@ n1ٕo wn3 y|QH"Hl[I~[uLЂ^7x|JytetMne(BxQC/H yyW.@u|F頄!<*#&e49u&3}k4bnF*%L8eY͝bEZk>{ /#zm VYJyAMSoo| hi>"Szi&`b_(Ŗl:omvCT>o:} Z20u "De+s_N^wk NWg}ӿ'!έZJK1SLᦹjͫ>);`gC/"6 ޴_ϺX ˰u-UnLOxлL^P2 @ۛWeMR0M : p{R!Fn+q X)p7a=*}}4=I:^qX ر]Q?cQEo(sf0؝J1w$l(E!R$Jݶ!4$Sޭ q^+'.𮄉ĺ\Tɍ1^0ZWju>6.TˎramєH-G' r6kw= dt?6\'.u%k(Q3 A+IZC1%DkՒ[2.n*v-f8z?\DҊJOkx EWPbO{=uEB4*g3{[_}&|bz-;GK\ٵuh:#ª-t;re%qڜ|@*qpxY^8fpޥOoto|@.٤@z2)j84M3f: :z7io m=gudD}^]߸kxᾘ04z?quem)LӒ)킧d 8T 8ۏjCpf =|C0ov wm lѸ0[\}+N1Jg#)-nکIm^fնiO?(邫E*$X@q|SE.{`DsP嫟\}ߊ)/3U kEvH$/:KN/D tU۶=*.Iqެ5l$ҡ"&uٵHjvǩH])y*6z~wow>aō5XNXQB:>tԟ|Lュ%J$>.(*Nӡ?/Jb51o/z jwe%`'͆!rl5^8'j~2|bțҡQ\)EJT„f{cصm`"&ȣ@6{%AXY"Ω"4AhH{>~PRi Զsfы+tHߏnjίX@Y8U[Fea#AZqF F-w9W2ʼn,lv8 Ǹ*M~7_}vm}E!ZLOW3)woX0Ĥq)Ka~7=Td$+,PcDOQ.gr¾ o'5EZ*nSxr斶6{>-h8A.̭S4cGͮZ_*y>~ X1pIUʩO,,Bi<؜J~ge%)fP#3$p\.bzWAhkVˮWO1dT( kؓ:82A5oYeGJηס4cG2EiInb@`DW~Zk$2wνǫӜ"Q &,IEJGFRubmJeBd\\DœeGjt֏U任E.!\yPٚF˂{'i7 3SYk8I.gE9' iA랑gg({9)+_̌$I#֗wx{S plIB3*܉.k0X;1+|+[XXP'%^qfֹXW or @Za$_Z9sP!֡ SfWF "$9Y#g/@7uZH*vX bΗ`[y 35I]Cz~K }1oQbSFYuˆR/Rk ߐ7ZLھޢšYN+ނ@~/ju;J,ߔe9B]f{0fڼ??*N-rOcMdĵ\ ;cYFcr*vdEќ x7y:JE)w!yQ;@e=[旓ؑfqiQ'q҆#[jo&2KE,kV5`kAr7Q֣{PE`?d"P17{&h +(nǁ4l\I^=5 FхHmɕXg~avy5exFh /v4sW\hV}Tbn3W[D( >͖Hމ4g̅ߞ=WOv(l']]w6H_n)KVi(LllMqnV iew%Gi?v.DMu]bw$LdJ~ok˕t7R^{XxeMMpF~8"8EXe\~Oy(jvX0,۳r[%x鰂8iuIcS_ny'P0os,(x b2yhWsrb1[ `$Ic%e[_ ҖGdM[D؃zhְ0ZOZq|܁G؏ -mQb)&`Nbņ5 0P|tr(v# ^G\́ヂ1$:|8'9MPzσs _w u5##xl^%qϝlqfL3W hh8hb3}z|Wc4KJTH< 饸 >sFr XJz' S3C3r>nX$p/S(ULbr6Tq0olP o_h\a!ՐkeU|3MԐ'Z)&NM)55ǴGF"{Qm!Y-9W_vp7[65Rx}\Ј u06WpR4^0C)dB_Ą qxm a 4rT(-ò_oU5Z\]'6~xHO-*vwS4j|n[H5YKԌ/^C)^s / ES5[qCܿUfZQH0Co1oOkz&?ɶBɜ0%|iX:Oly泷SWxq#Z꬙ӣ–+*>2X8QTP0jiqQW 4vl% |ǏXdgF]5i0!48(p8_SNضs +ԢLBݢ*76ẽ>"h9!1}`{v_{uʣ>P_i1Kg4F4x*7w$krŽA'$ՒU2n[_yJ՜54Qy@䦜i\y .I_uDKurO}jzKmʢLL81>r?f͉eD!QO(kKr9B&!lV+Mi@ ;/YZv $]U+ '|5E c;UR]}X?}]F =h9um5^;cYõP1ڍ=2S/Wӯ3qD Bo, &ɘ0H)#&2d8$gꉜK6{CP.Ak?f 7Uw\$ARxk~>4C˰nҹ{n7k"L3xX\)V,!V*#hGPaQV:䂗fg]=@]P5*z]EidǻҿXx^K?I% :2"+y4~=COK\ 7^xB e6$`KV=>uHbg1$Y)*@%]5/`>ctg1w+<;%Hۊ#3ڋInxrrԜ5K/l9w^g%hc?^$3TPQe|_`fj#ŪM6]'Y %KHSV S+#vΎ@] sSpQrUpKS>үK5e4PVO4+>` |~dtK/$,( SB"Z`w*:#/.j$hB_Ѽ:̀Ssl% 9'xGI M`fV8xz( HЃI hA&}w93%m ;|v[ s8s1~՜^ƢYVZҊ0޴͏g6òv]eI!=\`ivdx x Wlt !ns$^lFM39 oXbsNO()5F'䂣' @!ɢDno 9EARoESy*>˔͙9 >$u`?^61&8|S(zh zU, #!1#6J/\1 d K0tIfU(?M,6=TMtDak|cʪ )yQ>R<3.6~PFAOc35ͦl⬆c7 9`oRё% jcTT7Ʀ(2V5^m>꾝m0<&pN0ٽ!~V\khcYRԈb#FsP2pq8h&/5 [i,1 Y\-=q[:wqkQ޾Qf:³cSUy>48{D{1/{bgMQLM Mi}ek0?(oy9H(IA7=MyTvrh)=dќ 'tAF_  .{hLJcRwߚ 9NqfD۾NK-tɥ) ^l49 1LDWSOniB׋ȍeiMR [8`6ki:R* EJƧ 1m2N 7gomM.z2M KL/QxNȲ'^{F[pM "lVvr*gqޕ! ƙY1j!gϩӮ|㲩ZcFl/ iAHigEtXШTjsж"wuLKުKyذUxwZrˏQ3FOao|i}oҔh߀ʮ(`~[aSu[2J>!EpC=3T )+3i۾?d)[LS[Wrwmh绿! H+1)&ǿ/v.aN9]hxa5  &㢲5D`\vS|F-Nh9ճJ;W 45n3X9EYtNцV\+?dܬ橕S_h8@ɉpUŕ[Nw=۰l-hH2'GŬ~Na0ŨXjGaÌz6pn( ɐ\w8LY^R?R [\e+g /~">'Nu 8͐UN?߱/q,Gro~z 8hm rpZt(R2?447:HWS]9!3H8 #hJKcCvXcpݞ)k[uJ#ݠ/8WU;_+)"PVZH,3NX1\*KZvceD]if6Ma_Q4x6s<4yfLocsd~ْyVX`K"!)u,ts*(9 D&UKV:uCUt'ocYMj{y"?kH誧v#OoF؟:-7 ;'\}j3AösA.fkiy^d(N!CX7a.Њj}R ٟwgbR'j𘜸x4\hnb|^ CrߍJf0MD.W4\Й_@vOU) r̬qFe$\*[Cђ.6%,!p'_1"1YnF~PW HKh7̏ 9(ݹud$t |tOW3Ux1 0]=fDmȓwqy9@2+ .իWO$K#V ::EZwcC$aIK8ܯtjr=R~c8Ip (4ċIkM i'Yj1{r扪wc[}U}w*u!2^+g=q!S)]H?PXOnς/K"&Qka.>?BOD7҃ ݆6 Hv-cAO<]G-Uj-GhZ_!3-ڈ:Қ11xnFZ'&?)Uթ3=3:oO VMR9dyq9t@=qDؠӞCo*9xnC_*G[dC$+` k}%wfn*Ƚ\q!p'ioYD޿U%8;*FmI7e_-#cA6;K(Vv2'#49Mgsd]]EbpS)4:j"͊bPލpjWw' !m$vCMAJiȗkN"4a*5O$C+v;@r3i,X'DSSϲUWQ\UQic{'KSKA\doSmҼK~ʁP={=bJIb`_Q1K2q%X>ۀlrui4;&DscK+\@~^ \[-Cl%L*oTdflXueRKܔ^NLkv:Gx݆i{‹ީiU~?9|^wQ#?] ǝܝ1X!KRU:dĪ8XB(6W&BњVlbXqGQ[jf3+{rsؔ an%!2@c:2ipR 3{lfԄ ?dֶZĹ nq2a iµdwLG09<TL#NZЎ=P^(^<˸ۜZ:afHsv(d)#E_*Y#4˲u.#vSx[btg\x ;c Q -Yyd+&v[v.,fK@ۖ֍5jJ[CoBhMzjZ;~dtHXQ5xuPRi4"b:0[ee=[78m(PA8^Jot⫕740Wݳnoϩ㡇-p,k'/[W4-xP+MMh2f9,Uz"l眣9:&"c>dJB`$UCVV~Jc[|>r+\38-U7~:?(= O6{6-Cgr٥f=v稴=WX.0 .2#_bx4bM序¾^c)Y^XY9!'C=6(#}Zvu`opDG=NJRieɲ qΗEBqcP4=Y7#7E]C^*r`b<&?=ߤOASO7Ex8h,FRz["t /1js!|M]Z_hdUifҰӴ)A4@gMj$!.[ =@*jXc[@|v^rp\-r0gYt 5_R@cq_S^hw`u!-XK\W ͽ#8 %B_uKY;(ɺ7W6K=/w^j[ * tD J`tr_iaĘrMy8z){:ET ǩ|: L[w!8xƜ-U4iq͸P(bF}h{ڮ\!dLZ+\~V,LxrՄw#<v?mi@c*W߫W*B؊O#֓V|18~}8l8^tk7.VNnym=E->"ɽ0$ Y&&>yP.&x$T >? C)U1zWz rr}S^ ȑ_V  Л.']Oхg7o`y0q [j8Z% '.}>]*laBw]v `t\v_cD:vn޵&@Gj h̅b>u 3 GX¿wVzƀ(hکi'~ ElSUѮ",}kUݜ`YrqH-[H:)gPͯf,uwË#YK6[Ca>zcaXV_tLMKGNs=;ZErZ:wc}фQBKsK Tc $0hHyr9)s~{w)V*w_#^d]xWuFxyFQBv!껠ܻs^K-e GpeK[nmGZq]qPƋE%ʅG$p@Q;hfLiQpݡ ]s+5uh9e-^2SΰmuI9E@ITF6|%1՟LhUV"bEBu|ۈЧT]R6:fcA%Tp;dNםlӁG60>J)zX#c40;rx^GÞ=v~PR6U4r'.JyE1;-ʡݩ@/b/gjCA|VvxOj?N$P.4'ԹK$<5`xmV9ڇ]%& ܂YZ VP2>! i_7zW0!3=+>8;%֕T~þ* w*gCRc=hZ^\u;@dV:ْu71q]frZ:0-;&Nu̅ȡ_}Dl2aˊ6dEJYVD7\_ g3R+rNrrHMC|&*wY\YCh\Yjn`<^Di袖*ۘH&~ CE9qE~ ,7  x#sen/{2J;Hf~7)!VS6C$Y|Y(݂hG-OУQ/ysSNBlhpLr}R6ҟy6`4IچѠ$ap>?M|牂Y\=P[C~dIZڍ3z> %haZ Fr:AQn!YL^t 6~v^ˆS m7܎2wHFZ_ :~CBvCwԆI,>L'e"0z+yo4ɦ@q=z[|7f)p؇shMhR٣ymK 5bY3d8ե&C,.mlNI wj+3"=显?1v.Hfd%锸!Z0wz%=9 K"D8fv/fSOmKnk]^;:>eG/6}K!cLy%B-hz@ǧ6t|وIE2j,G򾏱.j9jB%, ov!ݐz:ya\t^R8?(50`-W@m9kA϶4Y%i6繖ҡԑLKV!:u經u1RC^%<2d}E*T u'{j.gkP?*3w3trG10 Z{OFNU넂zş 01;saN!Ɵפ-ȇϫy DŽ]7p'|Wo+*Fd R5fdMI LtcƖke$x)+ˎbVwvepytcG TOi 9ץzU1t"yCrϺ*85J\^(@:l#δeaضTfzL.eh+2r3iR(SN#0񌣂7*Q$Le ^5-)Nc3R}KeWIkam4=.M"_'-+h: B;/ Sݏ~WSn͡AB`yͬl[~[NInIk]gO6hۮ F5uN 䊬@~_icHhTBom.A!>-\_ (z15hD\ŕ>E 5KSşspemeJ>TLu\W/NFLiCJ;+ظ.i'iEqEG)Wߓ-wSd'KgRRJV~Xx Svgvl_Zy{kȪj_ $WݕMmR CCg@?D/~GokMSqԻ~~EZ;]k2b@e=" .99-r9|+vJBe/ճQ;hMrjVHM~䵕zuے?:{)xX[J eZXͤGi0gmhU~#6Irw0F]?wJHޓj)--o@"m@lH p/FqRۻ&]9/QYw8moUuVotez_LA/ɇމ"_wIF>%+4F'b+ '[v= n1L ҏŵAE;n@t^ko`:=ʡLt] AZ4gpSKy.=nD_ł@8I=>,VF7O @Ɖl\!o,,:Н4Q^2GT Z]d*V\Y}+yJlD=l7<L ԧ {o%\~0O݀j̷p1)|+dZd%N.S+[2.˹E|b|qs($]<'8i"Zlزa$?q<;?Jʡ:!Ghfy=R*=qn[qgιF1ɮZ $浊)] 1^:]I6悀YEV?AO̻ hloEA3u}VL*&o.XZ 'A8uP'RNԱA!fgeT#gu'UR~jkըItǻ$R)oDxe-8wxʠo(FjѦ"j~8{B=x $VUi0V9UgWE[,H@hgD2Mc:>l$cJ}R0֣U*զ8ԗ`q} .ig5B:-7 ƽ~F{73/y3?Ś2!K1QC[@H?Ӹ>HXĺI rܧ"xD.i>|h(!YMKs>9iz;'^ >Jėw6uAD8\kV}ilFIE!+=80ZhQB=I=XeEk,% ~  cG| `Z|@7aK tPT-FM̻OnWjX6:H45Yi{daxc:oL2G%zӖp>>| 1P 5^ {1j--@a,ڜtcX}MkvW`_KkD+a~YS@mTʹj_wP o; vܱ)}TyƷQ ZzDFKq[; 8Dh:E&w=sOv5!C;R N$ Dd9(l:-x*L" IXϻp, 'fJ:XuG`I;=u7_,o?*"Ւ#ǕyKֈRt#Պk4 AbkTa@ SQ2zO9B O= ۶a@tW 1V>(f1,#m#q&ZJlC }7 #ujZ#sc@.T _&oqpcg)@!h5h*c#Non{LpR Q3Pb6jg%8#S]4roǒP1B=T"<3I!_MW6Z +,8*ScNbRz׻y_ꙛe[iQRwHG@Y> g*Ay=iZv'E>շ:K~F aݡ]HC =5:86(RCEu3 2:s xשΦ|MC|cژ;#HN, !znmc 4D>+M֠DNūQ܎}$Ptfɧ;s>D9]Yjc8$Wȼ"o[Tv.Q.qUr~.# ZOk>1q^ԫSn'cDh"סjvXd9lѝ"H_8u}x/́p>KraD#Ņ 3Ѭm-ib}ʽ|7m9xh2,;{sRsKSjمVpa֪R1eJX(*:ZKrzig\ю>n}i*PX{j( 7Z Mzt3  -9W0D&==)<\}~* G4 ?9FF;|;|bv5Jsm4'~2خUwSzסyi&CB8lJ>5]MAۡ=1'wxFxTG]*M t/kÜc%3ҟ,AJQLw;hwo4ڠ EfE=ۮ^8f Y <;T8?7DΛ4Cǚjpsdh 5n4/[bx5W%w<6ikt僘\'Wao.lIN3+p<At4nW˧zG70^Q=HY/ % c_ w x,'74YweS<G%K̛M;JCo'Ici6d.m:G }"!~/䜊[6idH t7 a='ٯFqIIz̼W4y| :҄/"ăU5K`!<,h!9ͣ#UvѾS6!AN>ΰl',YRR9o䒟x+?WJ4(}I?T( 1fP\Ʋn16X(x=^.G'AR43-a3G<к| ߔi cp%OI_.g9E 194qk]ٖm؆[\`x`f;=ů$rAsycO!AGWg9htW&_sne : !򼨗նRCAh:'O̷Qhn z#)R{ Ac-YkE ұc"?!"N崔Is>+BTz}XLcur!;ټ&Idv,L5%$O`nUHxRlXb}T i077 ba`:& Z#n\,*W(H!q>[$G{u0[hİDnqf(:5"bHc=Qn7+,QYN]1~9*@`:TZ}zYUXÃoń&Ii '帲ZBgBl)aVihEfwN5roJ6QgTqOO[skc{p|I޺ӔYhKћN f,u"t$K 2™1q@rI &ISp918>֫AuYxSly^Naa~JŰl]9}R}`[F#LYsL, Op-D:n&)~Ueʩf8$$:VܠsWtӖb8Ux*>{./ ,AZG;ZIFKIR)--g6)<ۓ! "ySk"NlWemI}u%qT{•gBw*#:VzCLJXZTmJiW#>Qw N^\ׅ v. G•}b])<f" lmryx!% -~2$`68pXlg#/'pObYgݤT9eUN#d-8j'Q5Ț.Qh%DUX*' ||16~«wr}鑇ܝH/p.o-Q_vQ|u\؉_PU#хkb="3Txs ,;vd3OV&EcT;f5Q~4w⸒UƆ0fD0 K$mD""hDMZ% xo7oἼn># Ǭy߮C*!?Ir+Wr m$^wǼiw3rwU jߪ=놡};lGdae=[Sqcik xO)ГtA%RmKfjl%U cq<"M 6ZȢYY 7&snPZkEOt]rg/$}<s;Yz5mBv}ETZ\ЙM`/v|7~>+hoi%߃y(6u&*aVi6W/ul4P3G oݟҁF\oN>'tl'ivj9\5P\fPsY'ظTӟA>ȻåT%˖lGX_L2Y ;M (z|"|Ʒ1;d;>΃% xv;ŭ;&U-`Yxn{ D̖ @Âh7zAs[AŴDfWBT(]-|C +w R.nQzpz=T+D%y!bg.BE-oH;FI0$D0WE`*ԅ|}Q$EN[꛷%j*J {[D~^5)Kޏ!V.uX{hms;ռ Y{"ZiL)D~~F32hDiV9Lmq|?ѳD4`/_?KIJe);L f^di%E8,݁C#K0)M.dfrXCAhZ<#nH…=b͜"P&: Md{T3r>,ojV1n~%7*(P?Bo;նWMɚP!]`zⱖ[eEBM!(㴿9-F Oyxi\ݹ,GD.8p/ɢՌ[[Z#W_'Ez,2n]ycKҡHb*>CEcQOgt)}/>&nWq A\}ecF+B ɸ G ♾FV@}ƥl&&M[.q}uμDT+λeE_MQoe䘽u323qpbRkxuoPAs!`^D>6kZ$*̡j˽EΈ[qfOZ&/Va$;o2ΑD])<7y9B]aMuɋ hKG+#, kJe|PIDN(-On 90q}%ڻf%tVw)֔g826 8xh!U'>])8{P,kGơy[)x"ب%x le(woAzL#5tcL nєx12!XQ/15(v/ {g)lt[K~!X[W x8Zr ΁O`+3զOD(E)9O [Kz:Fc Ju*(sW9BP។eұQ1~ayQ]ύj6;=]nt|#<.-!6c\%Z(s>)w7tMbt3͘3+'ݏٌMOiBc pJ|^yW,8dߦp񒴴˟+ +tùJ:R5}nU$V86apL=>3(*V`-8#u)#=AZ/oxUnK/i[0W%ұU;@ Ij'QW>7-*Zu_L:IT!d[#X^8e|̳Tq+XMNs8oPtld1Q'n}՘3׏?7a! T#bg#`yuNДՁ5J 6.x/cfm>j~nc/IJ!V"Sx ³b- E}Ιt[]}7eSHbd'P 쑗c "7AQ3ӂSdi e}W̡a0#W;F#TՑ=-WmG }wIi{-.AG1uW_>/?7>xKguwj/@׏`;gm _h3i:jgڳS` v- md&/Mfr2j6 gƤ{;TFkWQV\e7=m[/?߱\p`?i~xV,;0N%. `%&SbRPl5&pOK9En{Kp08?D4IӱJCEbᒤ(!Ԑ<6K}ayhnF$xT[4{% KFivj P#O%2TyDsE!_|ϗ5df f64~[w9b 1"a·5WVY tdTtqs`3x3[^9N9Q6A77& 70Gfic%۬a, S \ p;ODиˁ#xTzu&QH:k+e$ըԩCі?%*nj3|:F8$KVHYu)p̓a76S˂EY(Ҡ#n=gWzq("s·G402Ni_ɚE732Bz3y*/%:pHFIns6le]rl}-O" ;ВA<3cЏlB\<G*~N ONR(2G~ؠ,jVmׄ:t2$uf4Q)a.P]  4Nʭ:+]{ KRք56O*`ǡ}/JBϏpTzJ1d_ȱĊa{7ERt *vAOT'BiFJ09͏_ ZN} j\y|[4q3+aZg^Mޠ:"`υ:ʿ`Շ)q7s,ؘ.Ja+-X붰j5WI%__iLLr@/= ^w^e^{;\Jvt][PC%b@^Z:8(-TtJvHVP+!2b#~M:{HQAo\=ӏWr<H!*HVin8}ض3a_]X_P}Gށ*<e]!7 b&$CSaQM("$&^$X2Y A< 9fvux:"DbXۼ*Ng}hwvw$@7EvA&ݲQ JBGzJh9,^f}J^oR x-G/=t$M%FcF=EeDEmxѬ ('Gh>\7cm^xA96h rudJQ|{c bh[@q5@dl}=PiZp&G-YcJj 1igɳaWխˆA-X.ww(l2بBVo+Һ-$kKtqOG͋\AŽPD\Ǭn}q 9rK>H`2ૈ~KȜ;{y)Yd{_ma^ ݁lGxve*K,ʦ易*b5hFUx><Ddj s񳵼>gMxnPҽ4LYHHə){D{EPXsTF@6/νLiq PhNSP#0V讶 A>} OmnZMB ]k{Jb´W#FR8NbJ]'I{יX+Ӟ« z2n̙O#GoGEGv5IlmK{dFt2t(+ax庉;Xڂf=%dֵF`!.rwoZSl] 6UN1rIK@67IS1Mu $$5^LGTH]+C*:}P(#۰*.g2tN 9RyHč#T#vQe.y>*߃X3 rTPu}lvLFU2e#u*3 1<`uN9Ja麛v)LD0Ey&T)!ӻ 3{GtmBs#vݹG| ĭQWiB?aŠtxzPic.IUZO#J:x4Ԇywp?y ED'sC4b` H=z ꖃ h` S]̾hEOaCxbGm6"9.ΰu A) f3, *pKF[pd 2^ .;( CvTyzzzCȠvX½r^Fic ,mHa ]n2i0f,[Xj9bUI~3).sMy5ijo( I,QJ5b6ffN ?hEOx++2׃^vBry ,́ GD|aGxCˮ x4'!2_Y<렵35pDC5XWgaB 'ltO|Zwؤ@ tdZ|sUQՑZ4C2Y$a ⏶CA]j !Yo|d!&سhWr, "Ƙՙ*Q{* >+nofĢeUdBV2 aȑ$:Tlk|KewLCkZ' 7%W _jU# HŃDS.e :)\nKųEP3J7iCx4FuXU9oXf'Xj)K4-G9% yfʦV!QZH5Fm*\Bɶtr\LAK[A"! ~T^EĿ}=XhK,8mp{K=s'$f-5|};\r6#W3i0tU!znQbSxG/Qf<8[R*L70goŽgBHVшqa7SCE{c#n:4Tց;pSV޼| ]&:um@t>N O ".TsΊ~%[P5Jj8fS\utmD6AZc;]a(jG "cʭPur' ?JX >Ԩh+.ǶDŽaWLk5;j>R&ܬL`>k!Xb`u1>Ky%EKΛO.G4lHj9T(,@EE%_߭Hy+5\a[>:dLX{-jqn-f̕kD׻_yǨ_;̇4!(*ueCXdȮ=AtS?-mm3 n20IfYlL{嚸øBSb t5Jل5Wսey#r#QnPmi6(1 #ΑVm(}pW{ 'gY2^jsi#(`0hy dqAgq$oZN3/QMRW9řN:6 REr'(l<; @Ets*OC:m:%zAY+Z9ߤyJ*%;DChdlāM8{nRo 119|ItR4*GLF =(P̾s%2 >bb%2 7 ϰNL3 4mYSêl׬jl 9snNkz4 g5^r\7aAy:P8|/kh$TЌda~@z*~hX.uC\|g3j =͉d ?5i`v%hEQv y9oKkڃ9ub :EIjIϰeiGl[ @70g~b2"ww9 >& ! B1H*ipԟz=҉,ඍxTo[wF<Y;n#T eL_2 , |N1ԓ c;\0`F!".G7m3[k*\3;хnYEsxU_B+|j\T1J$ޭe0.g'= Bu k46¢ic RHsۈ(W$E`n/|JЅ~\ζtaEn/-2N9 'l@Gl>$G7؍7&I~u@Z/VPjvAx.|6ZAlELz4~DUfJTnRƉl3@Yڒ?8xZH>'|x]3N\nJMF?vzrkr}E:,5QA˝DrZ }\K?B) E,V\C(j`qi3XX SFsi,sP\+y'j4bҦJ|!ewVL[4^ҳȁ) N(VށĒ$+8 *5/b< ]NoXllkj^vH>gJdPLu?x!i1DO '`cu[AYk\Q 4m4"#?.$\mղ1 LgN[Mը] ش|L.o$iQ0nMcô>#Ns97M :RҋXsf7&EFJ`Io0+yWړSc{[f bQx%4gALfgN+.ShQ[Ԇ?eƸy( bw`Z*ޱsuȗDDu5ݖjS[Q$];兕>뚃.};GӞ5YtyzC =~Baw iA8z2%a~9 t?m1ARՎMQ2+ת>q|hf"/ Ft;&co<+d%CfB{ye 8GzaCϚt .x#c~!&{Z\u"T5tqk$>!HS~͔~Z+I5=KmǼ$ J L B(GU"Hcyl3a7V$iC)K~x8$n IHp JN/2o[]#; '#p"N0Y+BP>թ\EGi;%A0lH^.o"/S'yۗUXgQ~%t 6RoHPɯX`tVc q9C7*zXo w {[ Rj㓐KTCEjI]V#Su#C2Ҷs3+׼]U豞 MFûW3u.؜xCF9di׮/sl#rؕ}FXG?LzK OK ̗ V@WbPΌA/1?RI]#qgd\f f#1RѷXYC-?f|02!ǮZ TvUOdWO\qw)_\T'KeRzǥ6YPO|C\WEehM(_(lRh}h|ԒYhC'WWkk |%%Х$pODA1;ybs2Cc \ռ@H薌!ЃBg{>u%g)J4:yxOU^)]~G3m5 yzg q*sUre)X~]J1<n?"dSfY4bBh\ m[cjj]k_I&6uƥQ[BUV-**-ݭ窈 &A+xH.y|}{An`5ѧ5O:VFaa}>Oz/[F%'*kJN*JǔT;lLlCmfm41͞fk9D(9ᘒ%Og3Ş#tZk,+w%V^A̋3kl{B 9="Dh5aз)x+S`B!Ïyv[vo*BI" ๓:J?X#9DL{W΢FftW罏dQG6aB' 5rֶ_~#nBL;ΝKV%I4YuIA=0xtqI^6^2ߑ|`pOtT𭺕ߏX Z=#}Z\2O4#osNĻ.kh$mM/ 0g0Rk'$!9yVNd#5lbcÎB ݯN,OM89 y"R/s{LFJvLS[pz ;xqh^Y[^' ,[(<8.Ay˾&*3f ;ڕf4PRrҬ|c~K̯ݴab9ֈ~ڼ%8NnAR5.p0A@ LIaLlZ&9 3{[#GĿ)U'&wV_;pT!95AEd$t1?"1ȵ£ &)pۊ lIsOD;6 LOR6jڧ7&YlӷfG]YQqGdƣn7Ϯz"cƁoѽM?=go&BQ/ZYEN{O3kyj]"@dv ,Kݾ8Ty^7nw2saE\Y.º-A#QdkqD_;7|Ub@K0F?y?ť1ӘJLD?ɌM27]B7tXW{F M>xM#`nz4Cǂ%}sB_E.RBIwZi%bu7nA IaYVKT7/ec_ofDp&Gi8^n; }/թb()ÉIR80䫰s͵0@q[>‚ҭCaWOlzjoWݶ3@rt˚g85qqD*P_[j\<>ze>Bzq} XtW셺 jXVY;:td5h<'zEuGcڤOK"Y{E/Jj_!4.jU73i73EAIH4&҇(P3{}r9eoMŏPfΐd7҈+_fۥ~(E^ND:IkB2n|ˡ1rzx T\:L&+lcNsPzv<\El1֗_͘J#J_eE9Qt,ϴ^k#-`% F \0etwلDP7K~}czE,W+"5mCŌN((ύW N nPZRoa E%a[0Ȱy o$ckUbJj:rwܛTބ γ\+uJ>8:?;%5~N4px84HBy4G/2*6v e gH#_XomxݙsvrT1܄r^2gX413s)҆ԠWmĊ,QP@R 8B\HO3)kMED =wM$󷠛v]beHInS@"`" 0{m%6A ȂUYɾ8=XyAV%qO^LeemzpdE}[*ɕ3IV|uhc.:pu`oWT&{:fmͼ M&q(!}Y 'ʥ@npX+I l*u:b݅v?ic@CD,V(_].#Fl{. t{l *ӮUه.ʏ5UD^/AW$L| %I t?p]r3Dm4"}d :L2_(x;4v߁l3 :t)6`5|a"9BHq04G̈mEok<  HAkڻq:8!zLB$w0#M%@}ͣ_ 3YEՌpF gdY6U˗9RniJN4:h&l6Fނ|W9wu?HO^2AD-p[,)^e497= W5M|&}R=jL,h82[z&T< _8Ȥ#SVvfyƉܔ;L 9Մ+ͪC)l ;t7C9-rS& èb: w:vW2Rro{#uD7 ۩W~vzpU0 4K<ߝF+M@˹JBXa;B(#͖%Z%"%3D +M;L»t9|=^i9Db'um!Yj&vͲw`fXMTkr#7UU|Tz(zSR >gN`NsX]Օr}y2UŹ{cknJ|$TDu0!s?HszFh;$C*;d O_\4UOQ 3p:A(&hes'>bq˜|HۀdL[V We‹~ƀ:7`1_}Ho\F'+u4[4om֞'gQG?g80SswunQ_ku\t.u-&J>RݿuD1q&ؚ ;P: (B6`=, FFObdo}/9i VfmY]bx˓_ Κ`x(L@^cq҃qtX^7v{|eb~ CwGZJ0aj~ 8ŖZw!^"= ғ"ysbĞfF8lu};0Lu:f=4<3Kޙc{q䙃 yYKUpu9mS<㮀ڴOdG0D+KjIIUKB.fRCi/teǗm)i;?3o+ ^z*`2SjR*-Ztr'Cr[rx)E -Qf5 am}NhW(=Dx"SćabKe}2Lab4 Izn%mю}F^7dHB7k3arUɭkNpeKHڍUSrGΒOb}h^/2u-~j"_[f 7l:^%5MP(e(cDz#W0/[abѴP۝j/gB6Uw"c֕+RJ.̭_pVٖ,,Xq)SIj2(x3ty7w%Cg}"$v`S3/Eᑩأg8)Cͤx#@/g;vX-}?pnL- .^$m.[\)ׂUO|/#xH"}c0x<7Y?ɻ^$05f{;*|lUYhE&-2Y bR]  j#4ZkZ`Mj.#4n&7!Y[;>1y#Ձ[ %]0/!crN./)nh &O+zmt'<~8=gbkK. bxV%7|qaNXЁr}E|1dEˊ;@?pϑ38OFLn2'(t<00[n]{[fs;5!y*mCy$05͇b|Bg'M~ Dz)-(EL L`C/vGU@{Кs 3kWvkT-izն>W RиJsgcvsַ7_K ۮr%6H=A B)V_oO4l: F߮D7@p%c"HI[RLchD+ս +l U()Ox|/┩Isy!ń9L4 c0_zI!bݪI@nhw !::[6 BUPhHmQ`Z&M'J/R4O :% 7'~ZcXd*#Ybƻě~s o+rJ{y%̼ Ob1"|\ey\͙_C* 7MVx0 9g.tJ-L`̫_LqԩnvSNE<+3rcrj_@vhNصAﯢ@JVs"Z@f{ΗCn[J Q!_D[8Pa )˷a7mL?RjQU5`RW-ڟ1 d־*!YQEh8U/H0=a-*2t Xh![4A2~''* |gh}z_5"č8qT~ٹy {J4gxf< :{(}"ݳ@ ͛"mD[@kN/obanNWp!xˆYRK./qo\zh` Y|/8ZН.ĦJ&oWc`oܧʇtj]/A+'R$K:r E@no, 1йIUJSEzs=r۫R mڏ"Y9L*W16ֱRlɼ+w .xqgt_EDӺ~ /kɧkO c48ETSly vپ~RbbBĄChoֈ7W (.BXimMzqѭ+@yUxdX]v@mXA LգFQ^i%5Q-Bbb'BVDF#.k+ܻ,:ȞXϦ;\SBl݀T\"jwQYbLI<W ,5"NP{@0oFL@g_Ija+sdxQ+F%r]u P0PE"q+Sޠ$aW83X|3^_O5wI ,cJ.5*KiiIk+ ^2yڶguDT@[#-KV7F*A~~3* / *̳Md?rCiH:S*Ŀ4`Zp{+ZW_5;)5zȧ /b%X f{+4]x;ׅÊaB" lXvW`b}9#VOjDgzLƴM(pd}U`N#R7OPWU98p`h.cPgDy!^2ROO:es6Ҳ$=P$ׇҧ P1xAUD3'&~'sC'oSXJ@ݶG.o'cԵ !W,8o"v$6WVgւU pYQ^['an^z$J+̘e[6xoK)bӱRĠfai tW'{.3\X[,(%Y`5,cҋ5aé "j}KB ELR`v&ޥ:}븴@3t&E72P#E2qOα/7NB]F JQ^y1UN~I<f7.n%}{/ǴO_^aU%n-},Fɗ6mVCnSXסf#y37c(ﮨY@6& ~,6,%`^*1_|&^rXհvX{ 12$W$ 'аmd'B<( wUحvL=\j(GWզf4LcOZh)w:l|fX۾sĆ{ږ%Ii{tKVwu 4~\O!32MPk#OЛdb{F [_  Y VGu^YT:i”&y,~U4~'[CqpaqV`A EP5MhPl@VCl-xbT:B GD$EI|OBD:qT(c1c@5&pCťً$G.wUb{Q=ks@t;Oέi ))*fdHwG`-Z1L+dF:nu=:\#Bh\ΰVnfxsx04zQd߯P~; w4)# ;AU >a , <vքe\x4]PbsǸ* <7]m½$6gbYg&D}JWFNffT<r-zNAr=a//)JU=^SxUbÖz3:@0.O]L NowY?O\Mc'\Xv? ս5}f l/2Fke413D$~m%~ZdFs}E?kX؄DywGXX'sRq9QFofw)҅HVoy2 3q܍7ml,ݜħ >?vNS(OYubpD>˛`zQ~ P 3Į.}ƔnvRx"8Y[!#j|7d(Fl\34xf2⓷h !h&׌(rTʶ?)V{pl!*4a"̼3` Ք{Oxπ7: CLZ9΀!^ݨ(<6 wGb9tE>B{X j򻢐oTֿz& 96Cb|pH% k,pm*.Z@o&v[PS?:q(EF(U81V6Z³"вoґf8ės;A!ڤa+ L)͒lVST2-! ցt;Qݵi✒WXŰNZMofy^ 4>1IMy$40?'/AGz"7L_(ÛFUɦ3[@?a)?DU9_ݑ©(' BΨ+ɋ0I%a8H-|/ }l|jԚ}/Lp <8N$v1OqW}W- 7 ͼ/EjC} OCsh o ~&N̡UaF3 ؠ! _e*X֓e:[_ΪULZgđ>T;ϋ߯` ,_Ɨ m+gKıf|bOvʦ*,9k=gFG' Y<4w::+|#"Hc&R5io^eYc"z%-e6e츽0aooPw;=m^=c,! U:*Ɨlތ>vOz(uYwt~[^ ^1M}g54a#-(T4YIL'ga8i#VN;2Ex ߙAlYꇿDh:Q6M0Jm&=&5^;_7,aqbRM$٤󚻲SVI#xsyеp:P܊N+1)8ĕq[-_JA@ Q1+5a|qTd_jKBF}gz`ꆜkKtca_ȅ@bn?P y .>-R_" udMt' WUʿa+ntit%T$-MNa?ʢL{lkFGܾm2Jf6Ɏl'xײHE dF W.jBl5#P ietgWT8<5 L58]7Zn['#[@.6Yu(YYG :Uzr2oN1a|jt,4 F.urҚb! [C3Q+s ]ߩ%fh8WlvTD'j _vD w-%^ {k=RWZʰ*$0:pJ:U&_.e>Ј8mOZP'|9MB 7YXp..r!'x=(@S<|U#{#oIl7/թu_cĬ½1,$ۍZo v2DYȩQ`3gۙ u26|`os,bcJ"2àø "͖̊hGsMkdt& j۝-k-$8C21}:w:H:A_PJ7cUӺbe;yR#2G" <ӨR2 '1dVFFѳ^ܬI]K?-uv*()É>-i\n`, gI?ix<Ҫ*/? p" &, MQ @e98^JA VWce(?S 07j2R6n'&kX/@*de('#/ h~ڶV[95 CȫRDP>ހ"_mQ>-f4\0ݷw+>" kh{iztه =?ف8d&57ϥ%tQhJJG>3hr&s+HoS_EjC|CeE[ oý0v #Ɗe^wI/pX̼=(3yF׆#0ƑPIբ(HE(<T#9CKG85~"4>SN+ CsѶT\.3ʇ6\Pewt eek (snBCЄÂ|~ kV)ngYg:!/D(rTVλ!v0}%C}dᜑ?j%z6ճba?~D{xfLqCT]gZW'qLqvCj+jqX)i)^GO,n@8:`!jRD< q7T{-(1q :eS2}>@)re.&\W `."{߀[o|{hfypiǀ?\PErtzɻL#!!Bj%DN'O_}":v 4Yg"P?|l2ëdr>PPMe!+[tj4 L<@VBs<ݹ=Azg <۲WzΆ>-1VjN_x jb/hhs?V 399C\iȾLCpA|ALC\ ~]UVe1L'`\ҵQr|5HN27<dlA{qicQ&F^& 2}3j煡Tu` zK]4ȿ Q-91rm18 Xd˕V81wxr}T*g 1̤.FvWp3ڞ? о9pU1^D'Nn@C9m8I!#uB|/8߾}Ul`Dѯt^fw3?`%w'=tjZfLC깥d4bݿj4S{.wHut]@a|j&"A`yץUWfLtd6&2oX`TmlY^ogyFH?eǹW]$-z8;I ʥƿC K}(bײr0zjr6j E[`J/7H{xߠJ<XnrK,#JI(ѦG*"1ѝ}nwMwjf^ݺjǹnb`S 'gd%k޵S4* ~OOmu)Mw}r}tMrķ:fƒG(];PBcn~bXba êjHAP =e_kͰaܙo ?.âlarwP(*i%jndiO?&IB.Ny%:00 Zr"| Ge4L1GWbtEph퟈u⑯tJɉ$`Ѫ7%զ:۵yQq+Q~ &Nf<L?@9, &.>ei~l쾊4}]A]BEa_L9/ u2%94u U^r {iNIjz-ˬ](s O\u͈t)ܵW :nnXQላ H˹mk]њ췀$SC: Cr-*wɴonjU4u YIϊb{$k@qP_;,'M㌪=B-3Cяv:_tV;P#W-WGܗW TBd/Ac qvpZ5N6i`?zo]hSQl9/1_6lIca]5iI,Xj5怽ɋ9ɧWthSʺ+b]zE($mD7O%wgG0=hz0xIvb[+ ؝Ꞹ3UǔZ6)"o# z~,5 KIw4|XrrjѸü,I.H}+ވ-]ӏ0[[R=~oᖍ14GόF&Dؤ~ #Q\*n)?p}вpXrݑ2r⼵B-0xte|oRF9A1!yx\q$k=[K ǣ"Py ju~nd{v4c-ĦJ%?a;ܼ_"gjX pde ǩDoW{YƸ&ƾ;PDtt5+S~#[c{,w7o"sWu&9qmn Ɲa؜tU.޺I9#_%oY&g@kD eVϩ" /C7[uGimds]Ξ!-WT4 S} u@%L(h}VoS 3M1X˗&Vъ )Z;r-zf0!SDՍdVDݲ8OnSks<1}04`d+ѪD0t*^C L7Uogh _2mv R&dQ zjpVYt6Nf}YO  sEǓPD]e֣ĿdiY"꤫ !fhEuTLY ~wDKD'30Q$bBt<2lE0am .Z~9ZUOA6촚fQ$,#Z-; y,(jN,@঱-$qUnٹ:`=GGʍNRf'-MXPuvWV }pDdex,4љK qyt>1)F+> Nb[#2EĖg`ddBc vLJIJR׮lGR1\T6c}@7c4^{8 la| -7(縊Wb<~d̽UCR䡆WHƔT@O^uˀ֭BҼCcVk~c~5[dLQn-?.GJsC}sF@|&p~n(  ;kL]x3]*OdH}UBGsKVQQ3 bݶ̊^t/&)j?֛p><p`Nn죴R[$#J^ K.C寞¾2M^ixe١\'3DnK <֐0cݝR`=hbCԙg_}`#y HށwBF,IyJbgC(v}Nۇa Nd^$e 0eݹDL C\E:t]8iC[tR o$t34*`LWTi]p@4'ZǙV~'JsJR \C'Z,:YӣdkX~;EI+[le+K;itV";`ؽuzES/21+ Шg j.'ńroM5M\]#|t wR}'td.p=x{a0!B7;7Z.J,VqѼ3^ T7oc}=2M+bb !ť ݀Qj=֠$ns|{}~QGinҾe-o0'p,wt%W4W_Vz$ey^˲>8H 333 .B!Q' wܚtMMeҳ 1 `itkS[=*cb:qRTwe^!Caoo_ IQ 'aT'h1\,3B^,}Rji}NQ,ěa+}bRIcaҧK_E8ڍVM_#@+ <&w[lMf!\C ^ )feG CC4(R~B ;];5/-[>۟{ @:}`33K{ DҧP~`NxSwuKէ0/}ńU$[xm,po[t.%76?ItZ6Kt]l9~DSVPH``׻a1VWqB#bg ;<^NCh|?&4AVV׵dd$nSJQ%JIDG m FiK|uQ Q?J4aTojpwY9}!4]`1P/Q^GUkek6)G &3HW±ywٳK6 Y̑|Q7B?pF*!BKu٧VYneHFj,럊ȼ qX4,//Z:%@|B*8 E#Vgp՟ḒceF<cڧ^H'4r>,SUPsŏWg ?EOb7"k,?-Vɧ_L@kZ0] γ@a|:/Pϵ!wv Ȗe*i:-knY%~$/}k 4N, 3Q[q9MpMϷET3{9M^4"8e,.$7oiЧJ  %PZ;g(NűU'%rj/U<ٵ<TM*(. %ǐ;??.sD@r-/ә55]z!zk 5?fʡbE\U#7o>mݤqR6s {STH؍3Iוb3g˄J^-jS|tUn&bJ7s*,_}E?:b"ts<1QcрTX;=+GZ&U!hEM~LݭY"?_kߦiwUQ(Aw+))-y SjTbfͬ1[ Ns@b:=Rt ըAQ5WcEnsʴR'ң<(珊s  4+^u" mg %\'g 6+~fzaS1Z;BNgLJAP/G]E{т>fgM Pn?H/iS:Fd0J:zl0t@9X17:Ϥp yҼIՉACR z+ eLv0'b&zл/!թµ`iuá^ uZ(u[Ty)mZ z.t!Tb5xuuo/s6'QO5b w!\r,S$čZTY>h4tFA1S{Uf|XG YuFbZڝu٥UR.i\t"ތKSҿHcHՄ鄓ue 3ZgU%$jYA~ԷއGxg3[ vSK:6ϳɁ)Ŭn_e(_cdXHWF הi_VŚ}*T 3[8Q)SN=GZ C33.nKƓyu ,n| SBQ{-FIFnHhH5zpsdY;|=JPb )o⾔et=;0Hm6%]=@~ړ+92& S]{d 6HGT.֦2QqMTxs̙^\sObx)oMB+"\Iw:^ rEm.pD0rޙd 3^+k$$rk-_y0}{>:g_k.bvGK$ޏ%}cnvܠ L˸{|Mggˁn*-&[I. {[*?zz rc"C"єR@ C,ƍdb wݤު nܴdpDBa6J rlNcn6Lk=7h]}M7d7~8 ~Lڥ0 o e1_E#53 M<'[6L:>XZVe5ᥢIV3GMQ}iytaIUC"jm%F!\:Swk]d` [$ u .([5~ R߳ZR:eD=FAܯ_>/m=`΂Np:FuHE<6/URe /,l]>_؁`b^VT)do7C}eN~K2k,q Ir}˖d lZ.馡[L(4s:l4OtYXr)w܌@^}H$j2g|7ҹRC]4{V9]Z$o8eRJ%TE<#|%Ex$yx[H,˛JnO[*5l]7߶Us;&կ3%lMʱ@x*7iS_9./1I*d&41;RZN—d;*z=}SO.&49j1isP!p'Q϶v_Nc ݠs'3?-u|k'c#b?X{BʚBny*1|5fwU׏] uwR6km }&{@ a~2y993 6zttrr5}ᥔ7= EK;(M-6ʛ^Щu|1g# owu1zτkUv|<2ݘ`j:Vg3>$uWbW5է0CX (D{FDs}o %)ϳB5%8I(:кy` :{SPO]=gA\ ObVh9\Ǘ..۬RndBЮ'è:h,>zYwA>qtnY#N'ju- D02YxYlN0lٔ _gvqF×劶#<}xjRa}m:@N!л StI>qL)O)q` z_b=KjMqH9ä#3uY@ H*c}eeV$VA:I Lid=7MlrHlDfF 藉r$}ejW/uۋuUGљK>K2`ͫm%Ɯ#/Ӯ=~D]`IrS"&LxagTlLC'anօ!uœQ>/+;ST a&MSY`ڋ?Vkj 1u:4!}9{Z)oIt7ؗԳA2<$?{&r} HTyPxR#K Di a@y-A$#ejڒ50`vv k}h;o76jr/k̆4ю_YgͲ>WYF Gj6Ђ WͤsY;P 3ʼgvHj)\ubtr-n7^0`z^t8 kI8) oc8M~ge1)5a|Fצq&C_q7;v_?i L?Lc&ޤ:Ob@]n2ӝ"G qJ)L.;- kߣQQw+٦+\ c.X'X$tb|R(^aj> RQ 6s (s3Q~J4͓D@6ȺD_#lEYޚ̼KQ( ڝi}R;eJA!i6J76n6'6[PAzh^wX X.f5 %\ $_y{xzAK_leQĒu"xqMGp}z*3hY#k`*v`UJ>աs:5p-D34itYTr2+Ѩó#&UEiq2贒s^1;rjM{}. ?xe$6 b7*NGϿ]$J^H[Z '-WN N0OQw_q'{U!ւn#~ fLAa.:͛C]bOq%S,G{![ H_@Xh5Ql`WMͿy6LnRvcdkN"? w+.Pk_0AaXri9ܽ1Rfu/PBT:ޓ̖DŽ3伿 c=^XuF%8ra&ףT@<3',>}3 I&ǧ4A3"r"ED(2-_G-lR`X`)K$w ٠`A@^fJ3D+*=eKr=tNqVkgFN@Lê_׆x Xᷳi\@6ű U96㾗 anz8t,״d3sBAU%0͚NB01oUdyP/&]P_ - ׎DcG:C[o.Onى~ţ~Nm,mK>z諁uPۜQiomxN&R0)WM;Ժ'TVk$TDu H7s6$UP[CLXGLCQls6ws:v7q su9/YogRAhy_O aЎTT+q*"mc0?h?\F hm%'ܙv| jGCr %3w' DI 󎜧{؂Ƨ`=})w.D? ҺR g:At\!Єogmu z<5)0d_.21_#K0`B<'g^ӭڙ2P8mw^bJ!>; On5je>Cb$SyTX*> ]fs[3Z5Fi.%lwDL j` @߱(W[_O26C<1m9(.=i ULvkYEIW/e՝6߱VsY'(3MQ^̇H!0\}}[-\}w7qΞ Bl6Yk3!mYcV*q#viG@{:US#؝|9C6(~(kJ6@>q:69TV#`˟We"0:uy[^Ķ(Rfebmr> QQ9T%UijoB "o=HZO(bt ԕ5́" ->;)܂,wvi*ZvRRUi6C(,:EB);hc)Ri3W^>ʈߺ0`Ύe}GyC6'Nk6<0ƿ1E K33I~@NcAFU"ku>fvYX<;R<^2$!ǘ߇ Z~ SwÔ53PQRLH$$c aĎx}so@QޱUK/!8_ Ϡ΃yV軬iPN"Uy0f^y@'k;.Rƛ2-+1GEqԁ>>ZYZFi?UvzEY`6b]f=8@֓~ 9 >]s߿7P,QbDg ҬLEO 3+KxBݪ{$uԘ]8LPu x5% gږo;eZC>v_PSb^h|9N%J~I-ΔA>: Hw%fS4ߋ wyJE6?(;?o{OLRkU [>c ;yS֏\H6 Vb&n==/G[oƷՍRXeAID+c^~av+~=AGvR&8%nsR X3B}Mt6 &2aGnԠ(c}?^*DJVKͧ,@.^ЦGZD%(K Xi-Jy;|i=CL[!3B ,߀TO\ް[*c@`^)x+DŽ* +c 5J@轡1&jgA 08K_z6PbO3%^h#s&:cтSXI8ΕxDif_gu\G| 0XStyXڴ0 w}]vTGymI,L\ b=[QMՅۻ_~ cnNhdia |aߜ]Wa k77'(tT?2dkذ ]Qxckk4q㚃LWaP^XZV? DXX}D6"W*%mb..g@z1򿓶?NzSoX_U0\ W!/=!@uG\L7s%4x5+PʕS^w˙8S}Fv;`dOeA_v;&CCY; ]WJo!hxRh!<"[._Dж'y Hnѹ'eS.fĢ-J[5ڗaim՞RqmEx27)-UTמ|ýI BtEu!. ȹ3XTI.h%AmX )+ܮM^o?a"cM(v3WNxv8(F֑Z6w!"n]AZh 4XR[XGv/&WǙbskIj`)JȣYʎ뎤n=7FA46uO@ ԥ\'#hQ(&?Zݒ R{c܁^_ˢӡek?h+$}M1ԵaZB)HYX4I!`͔}7MJL3B{(}bbo}﷟P1/?/J!1Qf) 7S.9қ|/ ғ1䯐; }g08uLO(XPƢ~AQ*_T+`=w/Jz@@Wmtr]Scqȴ ĬkTb%5)3LzV7ݪo@=kfS"szŅ$B:n hép|xy䆚sυØ~k?Nu( I/#YSplPtVivO偟DO<{f}+ka3OŇj !4C.|'98ItoG;*Vʆ:41K$bR59 6Lf-`-2qeC[r#Dȝ@=rQDQC 4Sn^ Ji3 b8$635W3d !}$s\X}MCȶFxadcOD˧b*!^F/TԀAPDüEzt+0w8&k!t.\.21=Ǵg7"It432Lm|D/FM4B'>{ ]3BZm@ARΈh*HR{֖sex aqk`>!үl8:,]Ӹ֓9ll@9役I/WkUR:a{zkѭv˗G ځᄙq!̳}|ȨqB!FLR"|*5D2ѧx*?,:BBJq ?v Td &i‡oyUxԕAd·' %e^lvCxgNP]$*DWY$$ p$7{Oɜ֦p`^+GVI|'X!m_ا^z14iS&OݠQf0a mmX#+z {rZF%#nAR=te w|e+!m@$ś-c[43vڱ(FLdx,Vc.?ץ.eެf\-_U~U"u:FG(:~/'w*+DpJ.O[|Hcix[C"GZ˶єَ=%KIKW;ZÂvЗ|9 J)CQWEz?m27bֱhdsG%/edYl^(0̵GC>Д@ ٰ mCaKKfMgd-nWl!DF#4FJ%ڗg;| 4C(&_U}Ґ^uue<36]SMhSi>Ly &'f0F%gwXIb]"Lg+. V3kh%čهO;Kȟp/ݵ|$9z .BC`8޲>0p:efKBhk% 9投%G)0!c#)?n\:&^4"tX+v7axVyv~U+nmp.aEe!oσɨP:=*,?LC.W&Ty5n8iG' 8hL^ƙ ' x9U֡ ޫKiGЛBjAdD0>ZCwRqq3wmjCAfp0~Fzt=y;]G<s=/esY)<.17Mm˗:BnD>Jn8ܨu5] 8*[&8C& &FOTSd9 # .``T?ËY"n y,Rc+D3 ܜ%2,9LeDrr.PIdN5 }wPm4{r 绡o"XמzS`vDpHIcX'Ee/@1'rcuWoF=ʬ2߻6]RfR0HiUkhPV2ʽ!v딁H uΝ3>r@E+$rOǂfdd,+Զ"6qeY#՛KÌ0XP"D4`(_ձ ;HrJxkMO1ƔjmZ/١1WOu10VRպ`DtR滽6]Є<ì,̕%VQCL 2)$gA-yKØ`ꄝMcL{lQ|IE4 Epؖgd" xAW[T:͎2?f0-ўMTrtEv퍵m>@4pT`2F y"늛M 0 8#h7v{*kٝ)3}dy3D[5kf HC aD:\|a?I f|q"WX$I~$U:D @,cer#teF_.ͫ6k5E6al F ߊ6| )$L=7&s.όcLw+r}ԏs'N I/[JOE(m.X Zcg30Ɏ_g|.zJl싁@ijÁ喳jᰙ1ƛg p>n)0>mh%tpLa;k{}Sl12\$aM~sȾ! wG^n͘!t3y)ߧQxk 37  t0RSyxk^P+7#܋h <yhR {ΖAeʯӗLxO?v@Kǣ]?68N@,\XDE"'Y63WfܶP)SqaW>'Dg3ܯGZif^ȥ={L?:Yл{/& VlZY='as̎TebqHY^#%.0r)71LZ50rk܄xR'Vju 7q8Z6P)^$>Fk68'G4m(m.͏S~b wɳ5j ]T4CyC9|g B`}$ "` 8Ai~z>9f4Ƥn"\,"c=0"*?i:`JFK,>MqᴏB Y/jwesv}Rf;~Ǝ ^3f,9`tH/ =3a. |SϢQ_! s dPT"\l 9=NiH` }&9rpA>_t!ΆuÁ QܗxύN]D0g= @=LAJƪYrR(in]>ϫ @%l|S{:2 +2ۍU8A8[_ m{CTE))},j#>b<-2_P VkJ[O^5~e!BYʑ"]Tl CVbIqW@tO T;ΩݽFmG0Hg4A%g2 wN+ 68a!c5%~'seuWΰ\( `$'oi66{Zco0\nYn<[_sgc0>^W`Q0z;S .֞g0J S~c4<{wcX{xw׻DNa_CRAox di-E)qGCa3dgA!+td'GWjGF-Si;r:O֌2^L y'N{V {$ 1ķq3pd27њ_1d.DXnb\܉  L.)3r&̹7ϰb0t+D f6G㲔:odx !wJ1X븫 XDuXCHè;T03a*:BY"'wlůE4yWe%$/bHi0hk3O^{B6.ә-;kMAE^Dq7 ;hBrK7?Z;Ӹuբ.{`n\I`eKqC kgi7\&wI"+{JGz[߫ҌFۤI&7(~ {O3g麝wd@J9_/.%S%^ vyvP=VD=-NgBta Jŷ _LD0vr(FW,ԏW?m9si7Q_ 0qszr{&H48Lא³@Bv ?r,}<+6?iUcم*$0ǻ= kscCWkGXE*{GJﴵ_SiU [].Y=āEH5樢Y] ^?ޜf.fa"s(K"x)G JXv?Zv> \eL׻HOʵeg ?| Ы8{N"aX~TǎQ ~\,b1w"4c|₪!v8\{Prw ܭ@r]kN8 Tn]/bh"R0N!4s@S:jR=xz;iuMJz8A% qD-ڵG$_.v! A46DW29RDbFv`l= Owx3qzt9[eA%)*J[V cr5>NBIڳ7-뎐O>h #I#csg$##>w`7i110ٓ&y{o8"5E^<5 2d_Fޒԕ9 3݄*]gY*1G{KHj k44gr*  $,kgN3vX6s6WBVO'CnR=Kv)KV6>BӴ2MK/)Zd]}d?:$ڿb[C$E -;}6*NP-u,䟬bSFAH4?5wphȚ@}bax/aǙ̮Z][$mEr70<0x2ϯDMj*ٚm a@ӟٱ7vSwDĒM;W4M#U9wuh2 &j佰(+ fSJ(3;⧥ġG8:y Ű Ci$)=w2V.pi k@34Ҍh[wg9#]Al_dzspb9BB.y}u.>l LZk*蟇,H5s1?hX\8L&˞vu^͋IA@iߨ3rj `ls8 >]S?@{b$ːHöPJLm&Cߝx` NmtP1{e_ !(.ηtbAu:L3+ʻ{0j o:@AwbdY_#AXW~]O#;{10ulnm n*d2$e AkT3tPX'$X3 jM3>if"d[c?~2l$b;qC%6jYSU jѴ蓔)‰cWe j`@!~`kzg mEA;3ԯv/A j EJ9+5$X ǣg<PX? kL #cl:?gd{.ZUXzi}ol*G!@N0[VZH9Ǟ?"ifFZCvD#?K)2uoy'Ǟm%tng*E&zg <J)Eoa%ZpWqL|: bZeF3RL)*|)buXgLZ~ÆIZ`8$D6be\d{^{ovd,q}d؊Z$њ~"BU3$``S>qAYVxۊ:().=JMg1{CHwB׷VZf , a]* fAAf4QJg& ).6ZU\nD] 57GKFFyj)ƿ+ݽFw\& i(n\/ ;~m dmb],IL$nII,5u=%rBESصׇSO:))*-R/;+M%X[/}3I,Eθk+tӦU ܓD鋤#mDt3$e"T d˃FΕ_IB?-|iOiiP 9 oq"p@65"qS C5 K3[0zvO^D H涣\ʘ~޺U2𳔏ޝT9A{0k ueo+6n7k6Dn1kiz04=%I{%໳]lZCsd/v{HsV, QɌ(~'AC!I8qvW?+2#ZC7ƹBmapvIGXN?hUKvRYTx'v&JYq_K#C)]yF#mWsh!b '1}Lj(}K4m5÷ɍCU.S2Lo*໕sԻ5i ޝڈ$NGQAJp &L a­Zƒ[X(W\KWl= +Rhݸwt[|k|#Y7yo(rj9,fӕɍ@8iWL9VģIm[pNmlwhCvAsϱocKrPlg={YWVA%w >EՉUOKL $vEg|EUȍrR}J~x3%{zIU Tgl%-%ܾ]h'R/WiuN 7*)*dV6fO D~$48 ٮ0ĺv1E)Rs2Ѭ-!xZzz6m>0@w1t˨M2vyzL |p[*G.W1 GE&j#Km۷P]h:fbsM*Wbwy4.+PD߂ɹFꟊP&kw296ݺȧߢ_hz5gG(sOIUXMHؚH~>JќF=>N"1`xzj!Hymz%]Xf Wiה3a5=fb#2VG, vQcN' 5pqi9'= :M,2/Q !j3C,+Tm4ШiH&K+Ƹg U2Q ۙݤî3fL4J9g|QrZ[/W#0 c1LRttГ.ZQ!Ql$|s979&o\XM+*ER8 7YF -:[3 {r'p@sȸ/q6).[U(%DՀ W{B,_av#K:;^%봂 YU,D,Qt2j2| |If #\.yKn u굁/ySdq.*ur +ng?$6-PmRN+z T MM%d8rFXDmc[zD<+ ]> .~j.0nЁ] ʶC5%r3`2XR؅Nv14 Ft14SXtqWDO$Q2X?%ETs4ciS,cG<;О X]b.d#Ȑ8^$oӋU=FٚtX<;[Eq3LT ɉS1ѽUD9_0~8U2׆vM`ה iɣ*h͉~PI&EΊÀ;j$> 7:t=Lj9xj:+{N. 'IDz֠Kh@zEm@l*P;V7:q.B܃^=Pet(Ѻ#jX ~I7}ߋPѩ({Aa݊ a=,&DmWg(rB8E+&U%>F۹ AJad *C9.:XӒ7T%=w{cIW'~}|*γ#JQFmۜ4Tly|ZV%JK-ҲSNt1b7`сX0K(K@澯3Bqnͅ1?\ K^)jYء~}$O, 0