freeradius-server-3.0.21-150200.3.12.1<>,N8c$p9|Q SoHkEQ0u+I/[k0dpz឵E䧒? KdGSi8jb+3JvyAjlG WB!K@;ޚ01Gq)dn݋@vS:^&6Ů>NvHJ<^|65t୸e :DNOEJHu/ޞSa4d}H*եD*uPpx#<@Y>O6?6d ) 7LP\`y    4 ^   ( 1 \Č<666LXӄ(Ӈ8Ӑ(90(:(=>?@BFG H`IƴXYZ([,\4]ш^0*bc]defluvXEw x)y1p z55555556Cfreeradius-server3.0.21150200.3.12.1RADIUS ServerRemote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service. FreeRADIUS is a modular RADIUS implementation.c$s390zp362^SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-onlyhttps://www.suse.com/Productivity/Networking/Radius/Servershttp://www.freeradius.org/linuxs390xgetent group radiusd >/dev/null || /usr/sbin/groupadd -r radiusd getent passwd radiusd >/dev/null || /usr/sbin/useradd -r -g radiusd \ -s /bin/false -c "Radius daemon" -d /var/lib/radiusd \ radiusd # boo#912714: add radiusd to winbind group for ntlm_auth # add winbind group and fail silently if it already exists /usr/bin/getent group winbind >/dev/null \ || /usr/sbin/groupadd -r winbind # add radiusd to winbind group /usr/bin/gpasswd -a radiusd winbind if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in radiusd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in radiusd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi systemd-tmpfiles --create /usr/lib/tmpfiles.d/radiusd.conf test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable radiusd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop radiusd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in radiusd.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart radiusd.service ) || : fi finQG!" Ok[ 4 e!%hE ` No<w_6jCd "004 L' 8z # t!( _ 6+ lfD .w Wb!4 j E( +JmVz!_ ]O6 F r$N  60O4Dm  !X&HI(9YI8(Y((I98(xH(X8XIH{@X8(z9(98I9@90p(jI(9@I`9x(((@I((@8I@R(9h(P9 90*aiaBl&17 *' j) E3 p.&!]M }O .=O)Eu "#B:J+&<FF7\n;{2=%F BuQDSk?wXV $F@VRxTkrSL kR "'YL61 emh/1kc_hn  aA5f /n 3AE)lva VmL?J] &!g9 U" S L1<aZ [ 'F[5 xxawwH' [ XYA聠A聠聠A聠A聠A聠A聠A聠AAAAAA聠A聠AAAAAA聠AA聠A聠AAȁAA큤A큤A큤AAAccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc^zM^zMccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc^zM^zMccccccccccccccccccccccccccccccccccc8a5aabbd908cf07b0f2e622477e2027f97cca4e54c2d651f6cceef1e0245abb9537dc913ca617dd3b64e0a0d6726a8d60661b44afd2836ca2e3362f5232c1af76877cf91d3f456bbbfede10b2104aef6f0543fb75c4fd1c77ed5eeb817362fd0a049f99bb80f2f16b953d5c5011fdbf98a3bfe2cefd963cab58546f17da83f60eb3e83e984887067ae91e3ef36553a3503292296c8d12d3b1d0d10c34b263ffe8ae096c15cc0e12c19fc104579a775b111be461dfc954d5067a0cc568f53f14612cab60855fcbae684e860277611de20ba736e8ade46571791d6def116d5ba4e9d4b49900dc46af19ace46878a20367408156166199dc83015c0c6c48c5323e11b686b70fb8cbd7c831698dd8ec6f8f53dbee942b683268aa7c0a19c408bf3947bb0950fd01b446eebd65c3e7eac66ffdf8a7067c006a034460cb78f3d3ed36fb863be3a8ece46366d50969cf71feaf2ae5ab38fe39d7021a63b679d16b2cbeca02caeb6df36f4ef5fa8e34b8b3e860968b7704d208fa59a06daecaa83ad33714f5007a8604c6e1e9ae0052713a65890c016d93dd2fd4de16cccf8ff8ce1a6728d792eb7d1b50d9da5ed3c89ba6e2fe415c37a918a687888d9b348af4ecaff9edc2d3545e0192a82d1ec1ea7d7c2e2c3a534cff700e1f6d6c0878fec2e0a3e9c1f2b05ce22abe7428bbc6094677ac16b00c86dc4e249aef6203742b277a2cb78bb5c7433891120096e7465aa5aae8662ddb72a3dd56676d523243d38319613ae90b2c361152d097cd025bcac246037ef28a422a801710d03e0bbf4618c61f7bea8537208372c09c8326b062b8a23b5cf08ac85ca77dac25d9739326c1d0a5a0d11e947a770316146f27e90e6164e2cd6d4bbb25fbf29b2219bff150fc58e05d4c8bfd9dc1f0588467ee2fe948f7ca3da2bda2ac55559e269c48c6276f58256d7aaf7dc46c2291470b6648fc7313e849a7db0730b25064529d19fe3c4612f0367113b3f0ce376e4acc454ded908f11fc5d73ce9145b8862aff6820bbbd5cf3dddca598d0b56b147c7b6633627643041391eb33b57af2173f1278c47be5a8b35960ce1875e81f35963033a71b46cd13ac21738e608fe3006e0af9e9cbdba2a17a72797aab1fcc7e66f306e48d3de55832d7886a071c5f9f941a1a871f2679b30314c4cedf0e7889e79bd3d4f23ca80f6cbe491aa486e7dd4d3e3359e05b5ec7e1f2fc4b9e7144988b03445c239d9d4b2e3c650048c0823dedc70d1378854eed596a0aa6e073400498c189d2b34f8ff4d1c3e0d05587256fadf737b53f780c8b4caca010f402df850d5c9190872d7df1dbbd2d57203bcf6ed127d0d012f1022221d51154149c83562329f1ee5b308d2f7990253770b325827a575a4f342b72b209cded3bc6435fe032dbfbddd12b60507a9de63ca436350d21f77fa901c8d0230a775c48be55250620694124e9582b09268b01406a8b1794adf8648c4488bfd709ee04ee744db5d7a30c1e9e6f5512c487a0e364580ac9c2c155306eae5fb2911c5852792cd6172b70305150d428e48b71de06bc0a2aeb212f735128735e0ba2e5be5a7ea54c6e3e1743154525f36265eeabd68dd929dea521f126426cb4cf442d73acc0ab0e1aaa5e97f39ef896a9eba5273df312212ba68abddbf497ed5244e5f624311fb4e4427558c8ac2db869bec2ab1118a5affa190ad23ebc39834dd22274bbe02303d7ec84e3ac96ffef1e4fa4942f60259acb64acddcec78ae4b961f49eb32e433ec3f9fe04530b8212d98ce0031a0c04c94e594941691d8c27f07c7d38cb1f1f46fe063a18d6acacde6eb155332e9004c935ac861b16b0c19b0f5fa237defcd03bf00824e13dbc54143ec4e2a6a9b1733a57f02b80f47967c47612f8eafcb5dec8a34f46c350b21224d0cd0d59d246e5f09fa120d74dd8af1c885af12e25c83cfc8520c2557e57d4e5a6ac740725a7a79fb9bda736a4336f0186044036b8837273ff2e4715ecd66ea703276208d9f35348541bc6c6a1f5a72b05542d6e5ca46374e11b94d501e1d803be1e311ecda722c5baeb89bbdf0e932ac460748c060b1ee65a84b81e75d13810894cddabaf7b3cd40ec218ad90d14b0edec0abd0f4c3e7346abcc30d1ef0e2cb8f38cfbff2b5161c1edd98253b9940dc539e8fa9967ff175fe1d2f72b48df94cde8484d1667b935326f51839c002f59163af879307334ca6079afdc06b31b2337657270ea117f2d0408ea93f7e40607ff55b8817e3348dbe9cb662b83d8797b5658ad0b6f31cc4daba7f5b54f261de25be6958f728b44070859c5564db0b1c2a02091f7ca30656a845bc01d2ecfd326c1454d6e9023aafcaa93905a86701ae696b4dfec480abc9e11042aab9aa7f2015b43b17b93bf4b9752e10d32ef5aef8192f95a52e736dcfe6914ae49e5e2b70b5ea578c9d0cef6642d68af6836c7cbc4e4f2c017969227754ebfd82e55ff169140b5553c2760436c3fe44d81376fc4729607735f711230e7b3584f2dc5bdba4a41240c1234467dd2a4e5a6d727ae10c7cd2e4c700e224e94bd4b89e7cad944e638d5357225a469797a11b727ade2666a29553b7e12ed204c88235ef4e36cf025b9830c9af1d01fce17419695b6622019af2e9753b53e6bb8f3317936202a51b848e6303dfdc082d0719875a82133ebe9001296d20f3304980c838313f41cbbdd4fe25e87efb91090ea0e40023b1f6c78a3999752c2f5829bf40f1baffaa2172ee6b27252aa3bb0e14ccdb88ba65fe5a00967b2e29b25e7320a8f43386cd1edab1781174cc8d3fb50e37632e1a296ef791f94e6f78efd6221f8984d19dbb21a231e1b340f061ab9e90b76c03faa5876c04526f383fd5ed6fdbe2c09475af49596d9ef244dc391de752a6ab6500853e680e32789b8cce3b47bb057fe5a828ed3b1ef3c512d47ace6ef63feff73d84a1efe4f7cef0951ba73ccd175eca9193bd344948545039237b3c7a260d9789c298a10d55ddef8cae92655565da9c62308e70717122f1ee89183ae518f56adf30263e6b491f8d24d51d6cb253ae62f5e362346328a6dd9cd929e48488830cc24259842f13e362b227ed79c6999e5882e3e9a9bf3991deba824dcfb1c532e6d2f0b142741544636f6ec2ad3a12b4257c9f88f2bfe5f1c8db1aeb5478b03597419591ebf4633a0253b448d5b2c66a9b6eaf94e0b2d14a395e5bf8d3b6ba14995a46195739d5b9f213e2dd236b4e25c04d940fbda7bf6a271843c644bf85bef7cdb3d7bab661395b7e076b424e07263e344f270dc0000468adf57142e94726ff9d1be37236c8b100047c811864b0b55920c1ebac2222a26cae07e0dcb4c58a23f1d349de31a5181903866fd9af6cb18f32eea957be776ae3eeae96e9efc73f8a894f3942ebe3b8a6925abdd3c56add0e58cf4ba1cfb1384dc276f515bb218c810640770c3a00d6d8bf069e3a02145e4961db39e3c7a71be428d19246828d2427457805e758300ce6f0fb67136812b0c6f55a117bedabb6073df5f1adc98f67f9f67a965d3e4d85372a1a4904b87e5217c904770adbba65b3bf0207b821cfb5d139f857d846c6070fcff545ec965dc1198895e37601b9ab056f1820dcec7ef2f5e13345e91761fdf454a38b09a4da70039f0a30ca7236827b364d95b8a591ea6ed66f2d3e971b66570dcd5a3fd9e479a81fe52b0141fa700bba14374f347b6b43b6f4a8800a12adfdb29a8fcc0f4484c4261fed88a6d5c377b1f2dd83f954dd9cea1345e05ce40438f5b045f4d92db6be31f22a160ed38126cd736d360be66c53e14548722bb10cb002e2a0c9ecb3fdd1893b4e97952222040f5ae2a745e8e22f5653bbeca416506f850783083598e0758a5c0385c22b71a465eddab5ce281b400caefcb14c09a2e50e14b2d872bd168b846edc1d5250d1add9dd6eb4e9b4de2e13c271e8a13f472ee5f0cc80d6897af8c5b2e0ae90fb92f20b9cc1104b65f8097a9c194369f06c51f67173f82423ba2ee84a2cc9522d40cfdc99e68b752a6d41e960263a373ccb0e9349323527b861ba030703a02da680b764976c7e6090504cb23aad5a3defe69d8f23baa1dfc3a571ff3b6efe294d00440ae45769a537f47a00cde9a92d21f0d3c474dd65b69272046cdc4d4750bb0449c3b014abf7848b1fa3fdb21cafff9efadd1226e408ec45ced777523581ce2bd68e0c5fe7b61b745268821681001e6fea4dedacc29a103317afa86619b88b32c317955cfd9717864940adee017d5205ab68298c82d348e3ba017cc908430b5e0ca77257083eda9e428d66bf4f60c76e0ab118e567d30cbe0e65bcb869f1daf94fcbf00f18291304e553a9b3bf5e8ba73a031af3ed70cf495926c798c1998a429071c6a9a9c12d5301262f28efc78e9871bb29bf1cc19d82ef20dcef84b0c8f2ad854ddd6608005e806ca2703a776759f81dd64cbca323e5f3e1623cbfc279abcbafbad59f44b6e7303b6590b0c818afb57f68c7a97ccb608c072542d5dadc3b83299f8115154851851da96240ed8a57ed750b659b18794e90ef897602df3dd83a57df4ed17c8553a5377d39d17a8fabca93890e91b4a4c411098c685b41f89be0b307c11130506b594b822535e760c058d305a61c3aac7d758e0d7033c95945a892c5df13cc423e4febdd8050175d6afca21467af23c8b55c1f2008d4dc16bf81b0c2cc2de4726a5088127c9f60f9741aeb82cae1d99e5e70a7e29072ab68099e69484c4b7c9d01bc9837ab4650e83f55ba466c9af4292068d5c9767849dfae027be2c73d68e98fac5361294f8c46195fd2a49dc43c04544ba86a6bba75937d6758de5dd79d2017d345d502346788a8da5225bc316be774c1971c97fd3d5f1f0f2ae4dcc1920bebeee6d15f99706a309ea843028bb7c2777179c8a7f4700b8587967def9561c0a8a86a416cfa8ea2061e699ef1a2fd9ac80c05cf6c71cf8e53f576069714247cd4a9736e72e1104dfcaba8be8ccf6f8d57abeed18d584f184d6bd3b20f2078b3bfb7a7cd2bdecaabf8f1e89f8d6a61666d3907ceedae8b665db93a0f6b3fc8ef21c8f70d61c331f51e705c8c11bb8c4a6fe1cd09e26d27a1cd29e99bb4d89b880002eb54d99d5567b553ce5a6e681e06048ac884a5789f9f121ad73d86f617df48b9ed955d669b216af18d3e770b6fd079dfb3760a1e1f8976dbf64dbcf3b80c295287e5ebe6a345120ac11f9752835f382fa6150ed4d3a5daa53f41b355e72b4dc2e6f8e7da53562fb4191369933b08ed25a8b7d117a09ae6d59d09c24e0ed65eb73128f866312cec1941b0d5222d8fa9bd842a55e079efdd6e287086bcaf6182fa41d96bade16e6d6f4bc0e7e117a2b87b16ef1c9a34ba79bd4491663fa6c23eedc86f7e81068c4eba56cd09a9bab6398289a50750c75e17fce9fb803ed2faa99d7c9a8687e4bd76d90441fa77920a99fc72e92e42869a9919e8381f4e8959577d4b2153370271d085e8c4488d1dcd0f92f177182b4593c0b68c89896d899bc2cbd37197efcbe8d16566928eb0cc1e86e71149a98358bde939a6e918fd6fe63eb3fc9632699fd99f2a80eeb6d48897f6daf8c718a63eec6c986a54eee2596a803436931a06efcd32ff8e9fc9338ffade69ce3c22dd65255a00f890938fea9918fe2ee1d3814d28e2414cb2a6e81d74acd62d8f6efe54ec38ef622c8580c205f4fe64daf2a46ec96819cd6ca8c1de3ffbedab5042908b909f86681c242a5868135643bc4b18cbc36af83ba9cccbe321e6c522ae1ebc2609a5fb751e91116f2cc9d11fcdf8ce687ce333c1a6d63f052cb47fac5f6ba1d744b3c08519d4f288e9938aa8da1700341f33e93ac4af48a8e3837ac6d21ddec906bf99e84d99d6e63a5dea16812ff583cb38a4e6577a0b18a809f98c34c3f7ba2d05d1995556d06d37e6ad241018f7f4d1e73fab24d534eb12765d5aefb877bcb5fa4e99240189ef8b716bce2fcc264fa228bd2b5d610f22adc261a9c37aca78ac3d23292c80f8014c53e10de98ebb40d6f302a316959c8301feb7cf29fd9ee9239afbed35417b76625d41c7ec1ccd3556fecd9ec9375b74a8ea403faddd7825a3f76fc9e3415cdafa98c5d62d432eb59c04498f3e8a46e9a7aa2d151be36072df097e8b9d2d423e7a6baf10cb408106e0a26ca1f4427a061b57dd9a2199e15d5a63e8c33f281a49fa3adf09b0d66e0aeed09cde6bb7880c91fed6e20881bdada310b6171e1977ea3d5672bd3dbc2dfe64b91cfb53bd3c9f46dd7fbe3584b9fafe5d32398c7762808f87cba0684e0ea1c1870ea92b412c21b829554d5fc48a7f825799f125b30adfdee54a4ae3865e7a75ad71b91c1385190a2d3fb876cf20cfc923a0838690975440b9e433ebd9df94a3bab38ee781f001ecc398047c68b32c79f4fc9bd4317ec9e10bdc2212f60d676f4fba5eaa291fc7e6d13711d8d780b5530f102cdb3c8edb599ef5b755b539d17f42024bac2ec77b80dc0d862ba540e7df775d55898b63ce36c6974606bbb18ba986a6c84e7b216e555f6846f8b96c74913d97fba58da0d16c4499b79a4f98f0ba16f43b518e4664fa51e9b6123d1c2d23ba0acb2cef174aa320c1f8ab09cb5e5e5248062e784513e1cd3c57f5c74f313a8d108bacec7b5a668ce8f45f6186f2925377734bb0cab6dd53b9a9b7cef39d22fc5448c800942532216beab986da0fb33d7bdda8c72d4adea0552ce7ce5e35058af93d978b3aa7763af392c9768a7123efc1d1fbb83ba9fc91ea3a15bc747cbf5ccf6c9b489b1ff57054eca54fde9bc3d0e649a7fb4fd27e86cdae2db051e6cb0cd80773fbcd075c58fbb3c67ad4099e20518dc975dc8ad48588c57c3691f107daea6ae0c8b6868708208e23788352c4b1501aa58f6b2ee9e956ed9968ccc21c647f46b42140d1a239ef7f2219ae6287064a6ab01d3373a3311851008b22bedc6b11efb16abff4ee94827b5d17d66b6959341eb97c8b2b19495297d0d92c2ce8ecffeaeb80ad0f6341708f2268c64e6455f1fe1feee92137d3e4573a0270d3e53e3df6f545254196cee9c4870d2038acc2ba47974e0ca89f7fc54d0a7e828d75f9c21e338c56f7c7896a41e5472441c292671f357d102f0a6f70886971197e195baf90d061a10c006f8bc89c2b89ae51be8c9a2a5db31f298c5b6df74641166a0185dbd11082567b0b4b1af29cd0b89e7fee667f085cfeaa2dee0326ec55be3f6bc770b2bd59e7bfaaf3d1cd428837e57915ece8d4a1e1ffdd6bba30c6f1ec1893f8bb69756302f3c822f810dbb5debcee7c940e1aa6cdf4973c1ba37e79b7301dcf5cf47b87e7a6333a6508c2fc3cfb68d84ed35ed8f1c746eb692f624ff166604a1265845c2e927faadfba627d4047f7320d0d1d12742528261bc07a8f801b587b29c70cc327ffb61a57d3c635ef2a1a86d20732f134f1836de71d46e1cd57ce3c5de5bc263955ba77651767f9eb0bdab37f35b5ac38f39e0113fcf9a7eec714b0a5114144be8242094ed587829be45ba9f34bc790af2d719f51aa605d2fbfd7a6e365a5eaa121cc66cdf7edddd48ce2548fb04b0df5bf6efac62ef935a027314d8e15a09a1590e27ce19879d83204f9e5f374c584def5ddb09b5115471dd2cffd47926918231ad9510a9c341860d71fa3e24bc18e2184decaaf51862e17c048cc53eb16313bbf3fdff8f6b67707628d0fd7849f04e0a56053b3e5838b28be4c8743ae6a70b4400b70cbd5f85722ad54c93b35ed1f17d73e62e8bbbbbca36833e08961658a21610316738dbdf01edf0918555da1ce7673690f215b885d7e59cba3bbf4d3a13725d0fabbc109fcc34d61c300b0fc6543d8cd213ab58821012054992c6df7a1b030f556db5ff7260927dfe6e05fd63487c15454f63fdbc914b428506f675a78c9bceda1c85b1444b9e69f3e74335aa1e9ce27adc8b81967e7c1d265fca60dc86bbe2447f0a6cec837f427e8ec9e6c885b3cfceb11e7b9800a55b1eb67bfc0b8030828fc7ea1f8faac08231b3f61895b62ae233e0f34784063c0278b816b9f40fec09079b7d4deb3e487145fa885334e8a0236a5586e8e205d915013ba310c54103a0461308d286904f3576f1dbaadfe8e9d935eb5546bdfcfd2e974c5e3826025fa3d7ec572627fe3d3ddcd85ecc87c33b7a3db38a53975e7d21146a89fed5d0ec968e83d798717f6fe82b25b742443eb2d5a4f3a2f896096175c56dc2ad9a4a9294ee6af055ae9a7ec16efad762631bc6bc91a918def7177714009c71029cf8c89516f1ef1fb6743d86c9feda6cd16813c9b7e53e98b48ed436d5fdf0a92e86435d939166adecf0d69bd10ec72b26ceb93dc2c2939d3b6ab4f5f9ca206c0bda48589c81fb4c993df4f1232afca450dfd8536ca65b1b922988faa82857db5f9aa6697184ed3ff588c04e47f42f0717f1e2f09af355cbcda24c538cd697e1dbeb63f77ebc26e71e0a1b3f524500953cda2fff8377f46e0d7fe93ac9295e48a113b8d9d8e059144599935ba6c9e1f66dbf7dbb6ef069b359d6f59541d7b4ba41cfc4cae5811c09cb20292799fd6325295f76cf37d7e02607a3560a4059c660eac6cee283807f8d87bae1b2cad39075d3e7929c94afd77e7e677eea29d4ff1f7b92374deee89c06a04625834b71fd584c708f46410d3237bad977dbb8d808c592580e93b452bec2f8c846bf7afbad098f87fce59780bffa260b9b0a6ceafa9f54467751244c04cab3f00e600f983cd8ad216f9cd8ed410778ba52cced9056726ead48ea4d0153158277102895e7233a2c6ccbc144b91b91a21768eeee032e05679b4a0ce9ce058fd6c30fe954405c8fa70856034689a3a56a8af376c39a1ecfcf7ced1f17436f954a194ab297c122bf2b94533e04327e0f836c097802e2253a0c4fec6404ee299f04f97f2009998611b845a4ceebd62d954dd964fc70ce0bed6d9d976be005dd4bbcbd395535e9fab9176172cf6c90625060b4507e682bea09fbebfbec6d9f55f091aaf2142eea2f9d385cc6bb4a3ad6859d5abf0bfad4842a1d99c28c1ec2554d8146f1d094d01c6334be240a5d9aa799ac3a0e2bac95ea09fbebfbec6d9f55f091aaf2142eea2f9d385cc6bb4a3ad6859d5abf0bfad4d1e3ae7c32562723ae3a56b9153f7a6dbf2518ee7844d513b5fd02043d61f4eb8170a326d03bfd275ad0787ea81ab210092be7259498aa31fa0d1d654dfe86f58f223390cadb812db96c2d8de2411e785cde5e3f074c41478c7da963a7ad459136529c207f3d537a22f865916c81b611e404a31bf7dc59de44f111fc09b1c2fa79659ba31d6e74751a223e7ff36a2d784cae1d91e965ce9af08513a80ededdd740809687105eb0164d0a52928630628505b0b1f5f75d27ebf11bf20f25dfcce04d8bbd652f45cd366b79e185fb9589bfb98b6793455893767759e68e231938f855b9cd33c20d7f953921174fc221b4d72eb8178282186728199d0d1bcc52313f4d01b99f4c42ce9148858d22db6fe001745019a74b9c42c65c533f6454f751f2b0628cac686194c463c75a008032456f96dece439e82a96bc3c3da57189828c0d4b66d923f517f383164b55fea7b67f35e77208e72bf6f8d04fe07f6a36807d342f084c9d385869142e0d4cb034eda19eec8ff0b1ed1a8082848d253c05a4f28c5cbdf119e0c504a7ea2e70fc954bb50513f2d2973f8711e239ac63be25b39ccb30fcf48340a899b72da408c56b01f8c8889ea8d70032bd8333ddd8431f58166dd6dc3c0b0ac79139f42b5bc5e2b5bd9028b65fc5b82083b61e8a4d28c8522b5caa62ed22349968a1eb4dda74ecfcc3eb54443bd8affa43a8a3667042078daae3161b357940f91ce8e38b7861e18b06bc5e628078381a2914221b1986222ec9e8fd32ca89e0068dfb7127550fcf123183cc3ae270a926105d7acfb2d3d0e890324ecab633e2021387dc97dca3cfad1c5b8887dc7dcd5a558b39e48099d860b05f15f493c5a6ab75614ad25c3573bdac3be378b21108c185a64b803b16f2a93ed4114dab3f5600b28eb4efb2b0647eaf1039d8be35c21bca13f67177ba29ce8dc68b368d67808bb073da54ebe4d41da5dea5503236c671899d28f9ea98d13079c42f07c0f1fd67abf34b7ea6ac58c950e9f4eeaf5fcda2078bd318d6598b5e9cfa4480610a941518388343cced47c80ca9348297e4a3e1d61f9a964e480d0dc7ff6f8d200a428066a2166a96da5865cc1521ed618259112cc26df867378dd8f6588a3915fef12973d8b67ab54e8c513fb7057efaaf513477ce4bbab4f1a227f069506b441b95d327dd5e268b9df1b2a8958395a3f8fd70472824a1a4572540dca3a9982bba40164dbde4085753eb058587c8f01f123324b621612a2193e9d518d9c9c5a529efca8369a5935bd95f5b2334a5ec8da7dce0f62fcd0f318bd3421f45889aac6b21f7bddf11add045a69dfbfa9f3e5e83c56fca3c659b72bc835697d2c194a7882904e6be48d1122c737d73b99ebcf30aa657c3287ae0c5000cdf0a049af584d275a6e5081841a9b7db2c4d2d7c2ddda1d9c05808382a7d50bb0b9f69244697a934dd9f7418787a18faa4ec90ebe6b83d50587f2cd99899cea23300ab2a53ac4995bc2b9450f2cbf9f835e1092678d5ceae054fc600cf647a2a793d9b6aaad7b3e770b7f840ced8f169e094246663adccdd98870bee4494ccd5f6538ce2dc320d338da3259a7f0276b0daf3358d3448579a8efa1365d6319989b303e5e463c7ff4d2024f2694b5f302ca301dbefdb9efc1eae6247df9a00028f7fe3acba40290743cc857ee6e0ee36289a7ec69292c0fa22ef4c16cb324d34f16fca9ae7a0a1415667033a29a41d2d3e47a71ef126690cec11bc3909eebc068f35a0e2dc1e8203bf0dad4a4dfa49490916fff4dc9fef87bf8d3b74c2d8cac018298e7bd4c6ba57ede9bd447603a078d7f32415925a6f60316508cd65aec8152ea0851821a5e9f306c31556f8b9d1997d8135080beb2a518e8944f547d6b89ca5a66508c9f1d4609ceaee0f4f2df85cac13f8bcbae5b1b28b1bb9beb2dadcf9b1900239670bb360d1f7ff155c27beb48162bd407c148f5bcecbda471160ad0c206e1ab4c74ce545e69eab1bd8f39f6fd138d5d3d75e1ac0cc6ff9da4601cee0b43cb516ba9b5468d392811851dceb8b538a532a595fb4c668ef39f8e9a6ea27420b2b4dc412afd1e91d149fe4b1c8224b4e148d990b9e5a70202aed37beb6fff679928eb5e4a9c7dab3a43ed30efbeb42b6014f3ff7d2832f5c4c5408701d6dff6c7114417fe3e4da7fe146a14dba2aceb1677a110ef1196122df112453a1c1cdbc2dfa293ba65126e25891f5a1e8de5cfb8c18dc2f75837ff39ec5ace9021667fde13f9d543199b01338eddc82d5ee57d480376fc548ef8ed0845a66396d60f42a822d5e43be41e47c8c5961fc2dd33678d3f15e805f97f9f7e1a67b8a2fe70f418ded8078dd9c1368475fce3d81e336031d7a3e74931bba8b8b80abf1f623f4719ec41ce860c42f28aa44029cbb1b69bc7ce335777b4cdc7814f3480fd4281c57a72e663c2e34bfd9ae2a12c8e9ed9cabcc081d650ffc52aefbb10620bf8408fbf648840019a1a6b7656fe30253cd05a5b934de6037130161a2a045296e9336c7f12b7bf2e7b3ebfc0f476a1e1e4b2111afeaa05a460a9d84f6b79033c1fae23b65490455d95204c45d23d84cfb3a6984d916bd874b8a4342f7a6839fe56ad9d4aebe7c58ab264d5225cafebd632cc5a41afc086c618fa08461a054b1e50d2d40554f6bbe38d099f899171969e8974ef6d217e90d063f5854cf4d14a1518010f323f0596daf60225db8dce8de83b7b9fc889cf301b494865e500cb5fab0febbce9fffc073a1bf235c34e44c71d1c7375c4e4a6efb3b6789523143110c313ca11e15089cd429a7b059cdc621ec20be865e51f0c0c9a539f871a00e8014f679c32b35cc946d134b81410f9ca6b4a4d1a03659ef693ae91af5f40b922aad5bcf238337a3186c72ec7d7e9f49bf7595ce351c374303ba82f6140066dbdb713032ee64925af1a1ba36ce97e55121e84abd525e300ac7bb3ec031b42e7aa289e8d18f2c7d74b23393ea0abc3c5d1e2d66446ed84c8b5c7dbb1863e42f6626b708e91e8f4bb7454bdd7de70107b720ea2fd6585475cdb33350d9178463437e48e4f9b353057beb000a2557458f63d4179238bf28f2e0ef2545612b0e7e895eefb0715fe5dca032e9f0c69d235f5bfc86bfbde1a2fb5e896117b6412511375620bc0d9a5a52d28d6bf054079093672d136a4a4e24ac4930bc80be39f07b700ed47600e5e258558bcf04476b59da329892db70fa8d46f9a5fdbf0e7d3a32b2f7819427486b6aa77741f1b08331661e3d78c9294360b4df4013aa64bade84d8526941435842381259708ed6b05892ca6001e8c3f2a95035750e35d0ec8cad9fab977061d86d530c57818f37c94978fb1a51cff91731273347681a489f424ebb0dee0ec83765a0ccec9a8258a5bd89a32b47b4576e29f716e9bee1a7ecdc6771a28673afe4ceca4d354119c913bd8ac4a97ac43a666acecfdd41a615af9fc2abcd8f47ff35c337317610efc619eb3a391e87bfe18a721cf39e7c57e78467237d7c1cf4316221cbaa71c778da7d0831a1bd5c1142f92d9d325da962d4772be7958e83576c95150baeb88adaf9184b23868ad1ebb2e7a9051b549afee519dca76e7d3ba1d0e66430a129091a82db0436c025cbfcd74fb839ac7eb538b709a64bd1468c9cd79b8b4338115e64f1a097bc524f57e1990c913ae87e8173133be67b6c58cdc913c37e394651daa9e519e1ce409ef86504ffc850490cae8b498f21a6784fa84d375443483812272a35decc7ec6b807ca3126521f0fc11fa2df6dde6dbb4ae6962a01a4d08fe78f1d243e73d5b272c863681b8d9b727cead04cfb6652b74166429147837d9d38ebc51f2f83c339793c1b9f3567df34683290de24fbf7b357b5cfb8db15f05ed1acb10820b9d9b24e36330c0337c394a8491494c4ab9cd877af60ff24c1f107efcfba8a140b3d9e6de66f995b0b0c550934a129ae045544a21b6e89e42437a4df641d15a24ac9a8cd987a2ad9a8df1fa333caf87f9c8b402f9a4a474a079cb2d78ef89c22e497a5a7dabf539bc17af6f516fb3c3302cf8cc5776318b31cb859dc696a2702c18505af6796f35dbcf6cee29f17e409546db7b7546f6d10947093d6ae0bec924623261c3e49420826bb73f3b6d7d423eb1b0f6569eced0ff1637d54db5c968b71c6ee9e7aeca25047ac769cc072b5dfc65fcee22378553e98c9f2282d8fc8bec44ad5d85f636021d98dc9709d8d384a0621a65cb20eb7a09175325d641c15b3234c758120063a46e065fc96f4100e8f9543583a58784c69f6424ff4bed69d893c08b1e19121691932d09f6ed15e9bd277e13ed2a14ba99d82b2cfcb3568de59e9fbe932ab7ef6446f804ce42b693c36aa04e85749eef29761e5f4562cdf284555844409bb277e39eb0ac7ae9892f0cb8eb94abf7f296bcc6a4ee5fee74eda72b26c8040bf7277289c1887e19b37611eb8e62727949012d132d953559f4fb050d716777ee8510a363214101f2401b4754dacbbce9d8a4f4e39b79397cbe376d218c8620ae1ceaa0b74f7a2cfc184ac660ae15aa11a4b2659662152fac731f47deaa8f93def96477ea22326667d165c4e6015b630c19c46e83e70b7782cc93f47a380a3aa412915314db98ff3a9135bf646c8dceb9b77e74415e86f57704a66005bd4c0d93e2e9514244bf5e7767f0d68ee2b112148ca1b1d4c6357391d79046bb3f576838dd6c5667bd69ef2e05ab580d2b5867d6df09062b1623fc0f41cf482353f7c6922debd93be9b9dcdc8cf9434d1882346e570f7dba5a45fbeef5a8d4927fe4d7532bff7f2360789f1290b4a3e6e9907d091b4061c9c87a1c46d4bb13d60519b0a70211acfb84fa3fd31ebdbed10779844440f86cff0c1cb8188c7e549d44a175c2805e5474a624301405ca8b5969963f6ef956da0f0c4b8eefd2a9cd9eaf1825540eea76eae03337701581d0ca366b2a4a8fb6b8c3f52f5858a2ca6d3bcfec005c3183b634810735a0f6e470dce8d9da8b96ddb8f86a67a39a70d955a37918f81499016af8f44b73a26683674457d206905df84cde6f859aa24ff1c95a23047c79da4eda1e52951c90059c80896b0885e79ae7bf7e0351b707f62d4c7b40b5ea9038563242ead18b7cbe64ccb07984c9e9fd8e822c5bea73e80d25cf99301df72d341892c709454f16c115068f93d7b036de7922cd996fcd5a67f69be99c7e16af06065dc6876167833c9ede293b7d9582266b12f360dbc3a8686a6b47989c717c8d8589ff99195e7f186aafab1327c4c0424d0a8fc73aaee79a97a7cc9df952b1d5c06ea145d113ebf98bc9619411f56fae726e785e346e27d1ae96e58b102470a42000ea9222d58a03d014c5431701a918216e87c433a929ed7f5d37097dfa721da22466689dc5fcd6572f2e1c14421a3b9865233375622ecacda1badc94b913172289f03a895a12df94ab3608e13c2d60a702706de6c341227e5e1288e5759dce4bf687e96be18953722fe8c80902be281129de0cdf44ff1893654c367541192eddbafc71f12a1c60461c87a085ea00f64a35f84cef22126bbf1905c81d5e32dc47df07094c3a4340b9b10874a0a1872b61a600b26d516a7af040451e3027b0592b7299538362366bf0a064c2c4ec067bb4d2e0dc46314e8e13cf78460e84b2ab294ab0b5db4a0186f9423ce6d8a70e22493d4538fd68b48b1ffe29f07d5e34a597830827d4c3d63bb6ee0b9e554d898624ebd81266d1c93fec58153c0881c9b6a4f1df10c4111ec26d8b849096c5945d427fc3a918ed7a650907e0ef50ce646c11819a90cbf32c1d6abe1591d26dbd93773ea20ac7f037a6cd62c87cd0bee1d15fbe7f18f8a829ee91267b432b09b40bd7b93a2aed3f8e59d9c1ebc92e6ba99da540d0f87bfa088c976df1dafdcaaf2ccc747f2c8f14b277d23abf2e0fcc8e48ba16f37e352fc65ef294f77da9d6c8fe88d1e59c23ac76c95cba97f29a890becd784b9f1c97f368e71d3ae696fcf5ca48f3ffa6f6297caea69bbc158e67debd10315d960ad09f3c9df7d367efd0c3e086a33883abddbda1636add0b8d16328f22595f915f1c05d766b68cd5017763afe39836623bb42618ffbcacda10fca203ce60fecb779a282cc3e35f5cea39092acc5f58300c20d13aebe76f9d47d29d4ce2081a9f2d93d4d749f051d206e5d44833515f014798a4d41e00f053f22e435148e91abe57d39619b61c3bfd2730650e5c9139eccfba965f36704a4f24bda33d2f4ff034434eec035e74e99e3aa117c3359b217261a254c50f544209076643c740e44284598809cd52554617db667b3339c8424dafcaf6b10269f8c9548a9ec05e9f6fbca2f59c2ddb8f6cca9a2820872a9ef0f122d8af0381919e4bfd290795d0dd5c9ba9c9cb582c22b007f088ce8522f5db7ecfa6e2237a307b14c10bd074ae9a7377c03672ccc5cf1d9c5baa9e4b39fba6ecba8c1b51b3d2e24f277c4d3cde2b5651ffa524c562e4e0b0607768f46c2505a0f5d6c6bf92b94cdc5864bd4d11a4f274001bbc7c7793bafcadd81f9422dc7123aa683402c8598f1dadc571b8f4ae971caf143f2418f2e07df0beebe2f40a7379dd9f0b0ca21b0c814669db768174f402824bc02d6206629abf2728bdae843bb26588ba4f42c5c6fe479084b28e220cd99ee0552b59ac168eeb1948776d31e48a0eeb07cd08f629c1492af6e304346369d5a140f13696bdf242cc57ea9c66f6ddf3f926398c89b782f3ab9c8fc0a21a9026ec029482d2892562e6728f4dc272b8d3d5a7483dead57f34c1927635398a84eec66faf227785d31d72127ca81713e2b6bd5752edf23dcd2f6be74884441f4d9dc464e03919adcc201e8316efaf2e488e82900a80b71ca1fc19a8dab4d95667e4f2d3ca8da770cc445ac2b8cb05efe24060f7fe5084e1bbe2a563042ef4b6edcdc462035ba31e84cbc0f3021dfee90ca78c4acbf46a3ec15312171494e558c51d56b8976c26a668d1d488bbe1280283f12c63ef3be148c38c204ff8aed77aead4d5cac3077d2ed454cbf03ccd675fd5006d9593edd68ff013c674e4169fdad21b938bd952efb4f13c2d1ab30db54ad55ce92743ea57dd8202dc3c1e2647832c5578c3ad4358cf37dd01522e3de358a16268ccf19eea0f55378b2596a9012496fce0475b962ac92d79e684c4fbc3887f23693781a9b31c65e3a2790d09fba56de41ea7a7bdf7dcc879e716e5eb61f15a1332ed64bc104516dcff6afb7679676fd329d77ef24eb1c91628025bc24001f7ea543a706418bf9a9c40c9df6c8b8632289efd17b70846e0acd5957531e01d43b0338df9d9414042bb4700abf1efef4e8b699e254b80e580009ae9247a2230a2ad5aecd5989c4014a4e45eb7c1c7090872674ef7edaf5a38eebf41e0bc917c5b3d215266a8ea8449d2a0dc840e83b7e1d28475e165bda6dece67683d363255447c415427ca66cc867332c888a52672190ee3cdefe9a55da83168f7d72fbee804d37695f6462c05a9090eede29499e915625ed99154da68806b963b3dcf6834b114925691fa293f5674a0498684045dd0cb071cb0daf49e557fcb2bb268a4da75d99d0f86f38cce76c2204cc961514f13af0a42e253f3cf1f04320316b59e1b11b16f0d930041cb9202e21a50f4fab2cb3bf35d682675dbf21c508b378748cbc422bca98cc777eb617ab0306af768ccd551d49807ac6937cfa740141fcadd448a2e3c71a9ba7c50d49d5d31281f8881c97e06a3e572ad4a1389bb21731230ed55e225fc4d84ce1cf61d357708ebddb518def97ed92db88a57fb4cdcc2698626703f1807bb5c019f713cd56247cd9de2a90ca80f802d9b73e3fdf55ede5dbc072953af560bcc542580ed663e3f10970fbe8d3dcaba0650c72da430faac7afd05964185d1a319ab86dfccb7507bf534c047b1059f6aa3db50328b69fefbd58b8d3d19d5be859732717fc59edb68b9b1ba500c3f12487935ab61f93c2efd9a1680d8b04f9c5a8213ef8b6a9b139ba23cbd39da287be88c98386e030f293343d94ebfb2c0587d2615d8088ab1193fcf0b15f7c313d10a7f73c04e82ca8c28888fda26b3d3a80145db0db4fefab54cf4d5b52050c5fc2a2d212c52634c1760bbb31b203675b1341fa8def79f23c2645411a6ca1936cc62b79f4a8de023ea2eb287b09d9638fac3718bed52b0ecd1ce2a8382d0ade43d08230aac937146cfddec8d7329c0cc7bafaac12bf430741c36596d7b64eef081c4421d6d54128e1be0638bd85a6349f000ad4e83ecd61eb57cda7c391fa54a265739ab927356e1a2135bf25f304b914c83e87a1fee3884d2cd374f12b5ed1ca5790857cc4bbcc8f1087f4517fb605403ac7de1d6830b4b49271668dca9cfc9169959a6b2c782c1f5db080ca19e013ac99592d690d90c5be986072b705dcb583e1ea8300f1fa67c2cc5fcc3857b5bd856499279357b340def18a8c6d05a52d546d8f3b6727634998e610e08f695a6e20bb756d636db2a2e719ff80ea03e88aee9208741d0e242b2096fc417a9b2beab03d93f30717458b034d2bd2eaed668754bf959e0ecfe98e17ec88de7eb2ad3ddd37845f736183b7d3b5bee00a0f784f0864dae6d092e1fe8af993c108928fd679b27a5f3b043e84a1fb5dd23f14b47b5d65ae7e127eed1763b39cf7127c4edfa9161810c013c999bb8a3a49ffc34e2f3cad2c9989f660c5846180443560de3181a5bd2679477edfb92da913cc67c845ea42b87a117243479add7b27dc743172481072fc0847829075a4ffa8e1779c016519afd7591030d85f9b9605f481895fa43b1a8ff73bdbbdb8862b178ddf8969a70d14419af5b6fa871feab87c4f808b68f13ce1ad05444137266619827ca199b37ba4c7a8c80ec46b7d2a4d9b390a94967abeaaba0608a5edad8c419e17977dd96625adcb7bc9cb92ad2e6fcddb1334cec48960a185682f133fec1040f3f1b0e93180da657792b1134e038658710c249a3981a4c781cbeb6ca000585fb242836a099fec8707d836678e8f7495ebbc296874c0a9409b00776303228ad61bd5b997d7229cf4780e528d5ac69401316c9638f163a15bdad8694e628406112d4a9e5f277ab88b23cb7c68bcc688381d1b659953534f26a589244b3872459577a6522364d86e864a32d85fa99a44ec146d1ad6923a6fb7a796760f31b2e28d584ab813f0e0ae8b5e6e5ec7e7ec93d469d8090ef4467190b68ac7f0c8cd986962efdd0808a7390469b6276b7258d16d883879240f8e598fd8ff5f0badea9775fb31a932e232dfb212c223a27322758c1908703881b384576158e28bf2e0afdc7a59504b146f31936e4633555bb63c7033746d602f3b87f201aa5d064848777271d8035b2dd1523f41ce7f219aab232bb5fb5e1632f47c3221360cd090d35b0c7bb84a069439d0f27727117e8a59d06d348051a746f2432e129f60b66dbc82089d54e5bc064a7629d666303afb1f732689f7e74a7457a01655a50c18a2bd32d9573f861343be4693d7a3bb1f4001ef0713e8dfee0f45f254e10349c416207199bd38f9fb8763fc39f323cc0a4c45fa1046da746f0ccab220f5dd456220cf4698f3c38d701b1eb2ccc6f8b394c29df366f6050f3bee46b9a4bc5a2a8ee50fa860fe5a9b947bde6b1ae6a1bc94be707d72866e9da7f9c84e42348fd8919b75f70a43e1e9810f5b5c93f9b7c2ac661d8b6bd97976a71cbf00c7ee2b36b5385a270d268e3a168343b852345eab5fde4fcb902f47b87f3b1f840d57a5afbc92fbb737e6201ff5102f8ad71fa86b92798adb25daf49733ddf5da69c940d962bb9f714868a40ed2318c7b3dcf918f9c008144e521a1b939306b6e2ef7d478f7746a434722086533484651c4a69b5956f3ec0c4da8fe96e0669548125ae6382f23bc0a83ae7af31c7271ed1dd2b7c792026772411d5deabacee58ce335f7f368cc1342b70a933c2871fc71a07a6bd181e132a674d31736d6bb2cba7c35f491001b32bb4ce9a157f40f696cbcca1bf5de9ce95042f7088a3fd35ff777065d9f9ad09860784a990f7d2fd2fcd2b30ef219ae3cdb8e92fb843c64abe619db490d19230a1fea6b851fc079265eccce108402512a0ba02cf0fc0f3e64d0aae5bee23aaa53dae89ca0d86c930520bfbfd20873b0b79e08e0e405a5592947cbb7808b340b7889530a3819c21071d8ccbe1a60c8ec30049a4552ca4b0e790edb73337ae152883141cf198660d45e69cd12ed571753ba639c1e8c3889c41eac7179c5e574d9d95e78a2923fb576b0635b47f5b615a0e492c806d42884c2fdf477f2ee6b2b2a9d281dc3ff11563b6f86b697a8494f9ac3ba90e8ac4f8b9cc1e5d41938be45a368f126a6d1fda03d60a3d622dc75e776be4e90c2d2c6e6d6a009505e345fe949e1310334fcb0747f28dae2856759de102ab66b722cb490c3b6a0d586bb9dfc845b236cd88877065f84483e3bea2153b4b831c34c3055a449d1cc40adc7e874d81fae1ab82c35ce2a0a84cae7141a582eca2b26e94fce81b0f8d115921fdaeee8ed6c5f2f8ba09da74658bc3f1cabeccfc908a891b04354b2d9bafdf8fea757bab853b1cac4c7df00b2256460e95c7193a028e1917dce5a517d0766fad40dd7abb8dfc75b687bf505cea3bf4a099a14f67ed23b18b15d94ab6def9ab2eafab299f858750ada144f1ad8aa9e42828bbe7dd063003eee8189bda802c3e35623236807dc79ef77f294376add03f2970d4fa96ea0fdd4fa12235fe0f36703db6976777df545a48790a918cb27dc48e3017e5baae6c4a0917794cb58892c0b0361499056ffefb9a7a4a3de3b3044d3618f9c277719126154309e80944c93f907bff96183db70e139d0887c167d4ed6047f8c24a4e703ec34feb912fcc11dd1f8b605914b19fd67e4bf66a19b57b1785b1b0664b81a6cd2946d6d975091465cef959e073fb2ebed32d043b06727f31d316ff152731ab8d7b39d0cb8b225676c8487997f15132b44256786f2b0cb73950832080a884d31c1a66b6afa1792e427bac44a074273293fb9a1c9f7eafb75ceec91121930cf0e5e58ee17eb0afb848744651f08d895e5ea0eea2ec6e692cd11e988fd8ceb24c996fc3fe2244f9a8c0a9e09b39ea53083ba528ddb4c7d4366aead52621621b03d9c037bb0e302a80bc4bd241b4c28ed1fe72a0e4738e9c2da636b9bda1be63f446cea1e158a6010210a214b120e06fd3e478982c43f588917d1d0fbd902af162b0d096b8d0de22cfe0d0e9e28f8defb07ed3ea9566aa218619912817b9c48f2876de538f9e8914d01ed80e90541a91004b6b5cb86dc9855fc5930f1580a7878088be094b0146a1cd7b177d7b250c265e27a65b154e24f193a7ef85682f7ebc62a0bbe64aea8322d23b9784eb36af0b639c9738ad35cd71f5cb79b3acea344a48ae19f0321a8f2c8863fdc7c7efb652cd25eb62a3120ebe02c0450c30735b839c813427a20da414c79a46a3304f60b896a6b3da0bb0b63c590d16593e70f0e13cc70b7bb6cbb927fa47699e24841fb7c297355fd24f40c835d42c2fe873f8eec453cf784f32af74f6596f6f832397eab7f15c793af1a06a2dfed2910533b65a78a78a422cee268c7c30e91e3b88333dc55b86c9c472d007f86d5762f6f461117dca84de98d76fbf811c4179dfd9775d3aa635e005f4d8fa251cdd4c8b50987f5eb15bf1653b6cb7dab9742ddf9b1faaebf1ceadf760731dcb3e3028f9e89c156fad6cdc22f91501b7eb343884cd47243de731000d4628ec0620458e4bd2226e25fc922e8e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855mods-config/preprocess/hintsmods-config/preprocess/huntgroups../mods-available/always../mods-available/attr_filter../mods-available/cache_eap../mods-available/chap../mods-available/date../mods-available/detail../mods-available/detail.log../mods-available/digest../mods-available/dynamic_clients../mods-available/eap../mods-available/echo../mods-available/exec../mods-available/expiration../mods-available/expr../mods-available/files../mods-available/linelog../mods-available/logintime../mods-available/mschap../mods-available/ntlm_auth../mods-available/pap../mods-available/passwd../mods-available/preprocess../mods-available/radutmp../mods-available/realm../mods-available/replicate../mods-available/soh../mods-available/sradutmp../mods-available/unix../mods-available/unpack../mods-available/utf8../sites-available/default../sites-available/inner-tunnelmods-config/files/authorizeservice  @rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdradiusdradiusdradiusdradiusdrootrootradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdradiusdradiusdradiusdradiusdfreeradius-server-3.0.21-150200.3.12.1.src.rpmconfig(freeradius-server)freeradiusfreeradius-serverfreeradius-server(s390-64)radiusd @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@     /bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/perlconfig(freeradius-server)coreutilsfreeradius-server-libslibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.2.3)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(GLIBC_2.2)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libct.so.4()(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2)(64bit)libfreeradius-dhcp.so()(64bit)libfreeradius-eap.so()(64bit)libfreeradius-radius.so()(64bit)libfreeradius-server.so()(64bit)libgdbm.so.4()(64bit)libmemcached.so.11()(64bit)libodbc.so.2()(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libssl.so.1.1(OPENSSL_1_1_1)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)opensslperlperlpwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd3.0.21-150200.3.12.13.0.215.26.13.0.4-14.6.0-14.0.4-14.0-15.2-1icradiusradiusd-cistronradiusd-livingston4.14.1ct`@_@_FN^y@^p^h^@\\v{\u*@[<[2*ZZWQYY@YlY, @XO@X@X*Xh@X.@W@WiV@V.Vf@UĝU@U@UU8U7@TZ@TTT~@T|X@adam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.dejcnengel@gmail.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.com- CVE-2022-41859.patch: fixes information leakage in EAP-PWD (bsc#1206204, CVE-2022-41859) - CVE-2022-41860.patch: fixes crash on unknown option in EAP-SIM (bsc#1206205, CVE-2022-41860) - CVE-2022-41861.patch: fixes crash on invalid abinary data (bsc#1206206, CVE-2022-41861)- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)- freeradius-server-radiusd-logrotate.patch: move logrotate options into specific parts for each log as "global" options will persist past and clobber global options in the main logrotate config (bsc#1180525)- freeradius-server-radiusd-logrotate.patch: fix permissions in logrotate global section (bsc#1170505, bsc#1174905)- update to 3.0.21 (jsc#SLE-11896) Feature Improvements * New stored procedure for allocating IPs with PostgreSQL Rates of 1500 IPs per second are now possible See raddb/mods-config/sql/ippool/postgresql/procedure.sql * Add SQL IP pool support for Microsoft SQL Server See raddb/mods-config/sql/ippool/mssql/ * Added RCNTEC dictionary. Closes #3168. * Added Pica8 dictionary. Closes #3179. * Add TLS-Client-Cert-Valid-Since attribute holding not Before date Patch from Boris Lytochkin. Fixes #3157. * Generate attributes containing unknown OIDs See raddb/sites-available/tls * Update the WiMAX dictionary. * Added ability to rlm_python(Python2) show a stacktrace from errors. #2979. * Add WiFi Alliance Policy OIDs. See raddb/certs/xpextensions * radmin now shows coa stats, too. * Sample schema extensions for summarizing data in SQL See mods-config/sql/main/*/process-radacct.sql * Update dictionary.aerohive, dictionary.fortinet, dictionary.arista and dictionary.erx. * Added VAS Experts dictionary. * Many updates to RPM and jenkins builds from Matthew Newton. * Added %C (time now in seconds) and %c (microsecond component of now) back-ported from the "master" branch. * Add reload capability to systemd unit file in Debian and RedHat. * Increase timestamp precision in postauth to maximum supported by each database and simplify (and make more consistent between drivers) the timestamps in SQL queries by using expansions. * Option to set dictionary path in raduat script. Bug Fixes * Various fixes found by PVS-Studio. * Set permissions of certificates in bootstrap shell script Fixes #3132. * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141. * Skip processing proxy reply if there are no home servers available. * Update SQLite IPPool queries. Fixes #3177 * rlm_sql_unixodbc fixes. Fixes #2822. * Fixes when building with LibreSSL. * Fix the rlm_python3 build. Note that this module is experimental. #3183. * The rlm_python should append the 'python_path' paths in 'sys.path'. It fixes the expected behavior to use the existing Python modules Fixes #3180. * Fix rlm_python to print the script errors properly. * Bound total query time for PostgreSQL. Fixes #3253. * Many fixes to Oracle sqlippool. It now does 500 IPs per second without any tuning. Fixes #3270. * Reference sqlippool by it's correct name. Fixes #3272. * Revert 3.0.20 patch which caused crashes on duplicate clients. * Update WiMAX-MSK attribute. Fixes #3280. * Fix crash when trying to access non-existant regex capture group. * Use timestamps (request or server) rather than SQL NOW() in accounting queries so that these are stable when replayed from a file buffer. - freeradius-python3_patches.patch: upstreamed- update to 3.0.20 (bsc#1146848) Feature Improvements * Added Force10 dictionary. * Update dictionary.hp with new attributes. #2690. * Update dictionary.aruba with new attributes. #2696. * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456) * Relax OpenSSL version checks, now that their API is both public, and stable. * Note that tls_min_version/tls_max_version also support "1.3" Since there is no standard yet for EAP with TLS 1.3, it will not work. * Added tripplite dictionary from #2760. * Switch to the async interface for rlm_sql_postgresql so that we can enforce query_timeout. * Added new LDAP option 'allow_dangling_group_ref'. * Updated documentation and functionality for EAP session caching See "cache" section of mods-available/eap. * Tighten systemd unit file security. Fixes #2637. * Disable TLS 1.0 and TLS 1.1 support in the default configuration We STRONGLY recommend doing this for all installations. * Add expansions for *outgoing* Radsec connections "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. Fixes #2839. * Add %{listen:tls} which returns "yes" or "no" for TLS or non-TLS connections. * Update dictionary.lancom with new attributes. #2847. * Added rlm_sql_mongo. See raddb/mods-available/sql. Note that this module is experimental. * Added more documentation in sites-available/robust-proxy-accounting. * sqlippool now re-allocates unexpired leases, to prevent IP pool exhaustion when clients perform multiple reauthentication attempts * Add support to radmin keep the history in ~/.radmin_history. * Add support for ENV and LD_PRELOAD in radiusd.conf. See the new ENV sub-section of radiusd.conf. * Update dictionary.aptilo. #3002. * Update dictionary.airespace. #3039. * Add sites-available/coa-relay, which makes CoA easier #3045. * Add example stored procedure for IP Pools in MySQL See mods-config/sql/ippool/mysql/procedure.sql * Update dictionary.dhcp dictionary with the recent hardware types. * Add experimental rlm_python3. This should largely work the same as rlm_python, which was Python2 only. * Add Dockerfiles for Debian10 and CentOS8. * Add RPM spec file compatibility for RHEL/CentOS 8. * Notes on certificate constraints. See raddb/certs/server.cnf. * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585. Bug Fixes * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627 * ERX-Acct-Request-Reason is "integer". Closes #2635. * Fix a slow memory leak in the file management code. * Try to fix file permissions if they get modified while the server is running * Fix slow memory leak with clients. * Fix request and connection timeouts in rlm_rest. * Fix systemd issues. * Fixes from clang analyzer. * Fix missing include for the dictionaries: alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn, audiocodes,avaya,bristol, columbia_university,freedhcp,garderos, infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus. * Fix internal sanity check when running with "-Xx". * Allow "inner-tunnel" virtual servers to work better with "accept" and "reject" policies. * Fix dictionary.huawei data types for Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address. * Framed-Interface-ID in postgresql/queries.conf is string, not inet Fixes #2817. * Fix rlm_cache to complain on unknown attributes in the "update" section of its configuration. * Add configure checks for -latomic. This helps on armel, mips and mipsel. Fixes #2828. * Add support to Oracle 19 and 18. Via #2857. * Add support for decoding tags in rlm_rest. Fixes #2848. * Use correct passwords when updating CRLs in raddb/certs/. * Properly separate "originate-coa" packets when accounting packets are read from the detail file reader. * Use the correct virtual server for pre/post-proxy. * radsqlrelay fixes backported from "master" branch * Fix DoS issues due to multithreaded BN_CTX access (bsc#1166847, CVE-2019-17185) - disable python2 for SLE15 and Factory - freeradius-server-enable-python3.patch: enable Python3 module - freeradius-python3_patches.patch: backport python3 fixes from upstream - freeradius-server-opensslversion.patch: updated- Enable memcached driver on SLE15- Add missing BuildRequire on samba-core-devel required for windbind support in rlm_mschap.- update to 3.0.19 (jira#SLE-5890) Feature improvements * Update dictionary.cisco * Update sqlippool to allow for stored procedures with PostgreSQL. This increases performance substantially. Patch from Nathan Ward. Fixes #2540. * Re-added "show client config" command to radmin. * Cleaned up mods-available/sql example so that it is easier to understand. * Added pfSense dictionary. Closes #2581 * Update dictionary.h3c Closes #2592 * Update elasticsearch/logstash config for v6.7.0. * EAP-PWD security fixes from Mathy Vanhoef. See http://freeradius.org/security/ (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664) Bug fixes * Update dynamic_client module and server core so that the functionality works. This has been broken since at least v2. * Fix crash in sqlippool due to escaping changes. Patch from Nathan Ward. Fixes #2532, #2533. * Fix systemd notify, watchdog and unit files. Fixes #2541, #2499. * Fix erroneous length check in EAP-FAST. * Update documentation to remove old "ignore_null" configuration. Fixes #2578. * Fix default POD port. Should be 3799. Fixes #2591 * Correctly encode vendor-specific "encrypted" attributes. Fixes #2600- reformat changelog mostly by wrapping lines - add missing bug numbers for security fixes- update to 3.0.18 * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss. * Do-Not-Respond policies can now be set in the "post-auth" section. * Encode / Decode ADSL Forum DHCP options. * Fix module ordering issues. e.g. when "sqlippool" needs "sql". See the "instantiate" section of radiusd.conf. * Add Big Switch dictionary. Fixes #2252. * Add sql_session_start policy (raddb/policy.d/accounting) This minimizes race conditions when using Simultaneous-Use (#2257). * For rlm_perl, all variables are now tainted by default. See raddb/mods-available/perl, and the "perl_flags" configuration item. This change should only affect people who are using variables in insecure ways. * Allow "sqlcounter" module to be listed in "post-auth". * Add support for IPv6 attributes in SQL. Fixes #2280 * The server is better at handling fail-over for outbound RadSec and TCP connections. Fixes #2284. * The server is now more aggressive about retrying failed outbound RadSec and TCP connections. Fixes #2284. * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list. * Add expansion for Radsec connections. "%{listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. * Add notes on running "ldapsearch" using the parameters from the LDAP module. * "ipaddr" attributes can now be cast to "integer" type attributes in an "update" section. * Move main thread queue to using atomic queues. This should help with contention in high load scenarios. * Add "recv_buff" setting to listeners. For more details, see sites-available/default. * The sqlippool module can now use attributes other than "Pool-Name" to assign IP pools. The "Pool-Name" attribute is still the default. * The "unpack" expansion can now unpack substrings. See mods-available/unpack for documentation and examples. * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE. * Allow for -LDAP-UserDN. See mods-available/ldap for more information. * Add sanitizing of control list for moonshot. Fixes #2318. * Update rlm_sql_mysql to be compatible with MySQL 8 Fixes https://bugs.launchpad.net/bugs/1795310. * Allow logging of only Access-Accept or Access-Reject messages See radiusd.conf, "auth_accept" and "auth_reject". * Removed Connect-Rate comparison. It was unused and broken. * Add dictionary.infinera. * Use OpenSSL HMAC functions instead of local ones. * Some SQL modules can now use "auto_escape" to escape unsafe strings See mods-config/sql/main/mysql/queries.conf. * Add wispr2date conversion in mods-available/date. * Implement dictionary-based handling in rlm_python. Fixes #2334 See mods-available/python for details. * Add support for SKIP LOCKED in sqlippool. This can improve performance by an order of magnitude or more. See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383 * Allow PSK and certificates at the same time Except for TLS 1.3 which does not support that. * Update docker scripts. Fixes #2306 Patch from Matthew Newton. * Add crypt xlat. * MySQL connections can now skip verifying the server certificate. Fixes #2481. See mods-available/sql. * Add better mechanism to detect MariaDB (Old MySQL). * Add RFC 7532 "bang path" support for realms Fixes #2492. * Update dictionary.ukerna documentation. Fixes #2493. * Add support for systemd service and watchdogs Fixes #2499. * Check for openss/rand.h, and allow building without OpenSSL engine. Patch from Eneas U de Queiroz Fixes #2517. * The default PosgtreSQL queries now use "ON CONFLICT" to better deal with issues. This requires PostgreSQL 9.5 or later. Please use a recent version of PostgreSQL, or edit the default queries to remove "ON CONFLICT". BUG FIXES * The session-state list is no longer cleaned in the inner-tunnel. This lets the outer Access-Reject section access session-state. * Fix typo in lock initialization for TLS sockets Found by Sergio NNX. * Add check for crash when home server down Fixes #2233. * Add username key for postauth table. * Better libpcap checks, when the header files or libraries are missing. Fixes #2245. * Allow building with old versions of OpenSSL Fixes #2247. * Allow non-FreeRADIUS State attributes to be used with the "session-state" list. i.e. State length != 16. * Be more aggressive about cleaning up zombie children when running in debug mode. * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries exporting LDAP API functions. * unlock files when asked to unlock them. * return error instead of asserting in map code. * Don't write 0 bytes to SSL. Fixes #2270. * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262. * Various dictionary cleanups and consistency checks Fixes #2281. * rlm_python has stronger thread locking to prevent reported issues. Performance may be affected. * Don't allow Message-Authenticator to overflow past the end of a large packet. * Fix crash in sqlippool when SQL server goes away Fixes #2300. * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303. * Fix crash with CoA packets/ Fixes #2304. * Fix crash in rlm_exec with CoA. Fixes #2328. * Print errors while parsing the log config, and don't quit when deprecated log settings are found. * Fix DHCP encoder xlat so that it can be used with a list of attributes. It previously only encoded the first member of the list, and now encodes all members. * The "expr" module now skips more whitespace. * Remove internal FreeRADIUS-Response-Delay attributes from attr_filter Access-Reject. * Don't send junk to redis when maximum args reached. * Small updates to IPv6 for accounting schema Fixes #2364. * Fix OpenDirectory integration in rlm_mschap. * Fix slow memory leak with dynamic clients. * Don't artificially truncate debug output for long strings. * Fix memory leak in EAP-PWD. * Fix crash in "hints" file with Fall-Through = yes. * Fix crash / timer issues with many CoA packets. * Fix attr_filter so that it does not treat vendor attributes of number 26 as Vendor-Specific. * Fix reconnect correctly in rlm_sql_mysql. * Fix rlm_cache to properly use Cache-TTL < 0 Fixes #2485. * Fix rare occurance of bad xlat expansion. * Check for rare race condition when a proxy reply arrives too late.- install license as %license instead of documentation- also fix ownership of /var/log/radius in systemd unit- update to 3.0.17 Feature Improvements * Add CURLOPT_CAINFO. Patch from Nicolas C #2167. * "stats home server" now supports "src IPADDR", to specify home server also by source IP. Fixes #2169. * Add Dockerfiles for a selection of common systems. * Increase number of permitted file descriptors, for systems with many home servers. * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs Patch from Isaac Boukris. Fixes #2205. * Update main READMEs. Patches from Matthew Newton. * Added dictionary.mimosa. Bug Fixes * Don't call post-proxy twice when proxying to a virtual server. Matthew Newton, #2161. * Use "raw" string value for shared secrets and dynamic clients It now parses strings with backslashes and "special characters" correctly. Fixes #2168. * Fix RuntimeDirectory for RedHat, from Alan Buxey. * Relax checks in 'if' parser from Isaac Bourkis. * Minor cleanups for %{debug_attr:&request} from Isaac Boukris. * Be more aggressive about cleaning up cached certificate attributes, due to deficiencies in OpenSSL. Reported by Nicolas Reich. * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall. * Fix double free in rlm_sql. Fixes #2180. * rlm_detail now writes empty Access-Accept packets. * rlm_python can now create tagged attributes. * Don't crash on duplicate realm + authhost / accthost * Allow partial certificate chain to trusted CA. Fixes #2162. * Treat SSL_read() returning zero as error. Fixes #2164. * detail writer now checks if the file was renamed or deleted. * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name. * RedHat Systemd updates. Fixes #2184. * Use correct API for State variable in rlm_securid. * Remove broken radclient option "-i". * Fix "users" file (and hints, etc). So that it does not get confused about entry ordering with multiple $INCLUDEs. * Fix rlm_sql to expand the un-escaped string, not the raw string. * Link default and inner-tunnel only if they exist. Fixes #2206. * Don't use both IP_PKTINFO and IP_SENDSRCADDR. * Always install signal handler for SIGINT (needed by Docker). * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs which are not self-signed will now be checked. * sqlippool now returns "fail" if it fails IP allocation. * Fix rlm_yubikey to look for correct attribute in replay attack check.- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. (bsc#1099802) * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes for issues found via fuzzing by Guido Vranken (bsc#1049086) https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682/bin/sh/bin/sh/bin/sh/bin/shfreeradiuss390zp36 1670847524  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~     3.0.21-150200.3.12.13.0.213.0.21-150200.3.12.13.0.21-150200.3.12.13.0.21    !"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""#$$%%%%%%%%%%%%%%%%%%%%%%&&&&&&&&'()))radiusdradiusdraddbREADME.rstcertsMakefileREADMEbootstrapca.cnfclient.cnfinner-server.cnfpasswords.mkserver.cnfxpextensionsclients.confdictionaryexperimental.confhintshuntgroupsmods-availableREADME.rstabfab_psk_sqlalwaysattr_filtercachecache_eapchapcouchbasecountercuidatedetaildetail.example.comdetail.logdhcpdhcp_sqlippooldigestdynamic_clientseapechoetc_groupexecexpirationexprfilesidninner-eapippoollineloglogintimemac2ipmac2vlanmoonshot-targeted-idsmschapntlm_authopendirectoryotppampappasswdpreprocesspython3radutmprealmredisrediswhoreplicatesmbpasswdsmsotpsohsometimessqlsqlcountersqlippoolsradutmpunboundunixunpackutf8wimaxyubikeymods-configREADME.rstattr_filteraccess_challengeaccess_rejectaccounting_responsepost-proxypre-proxyfilesaccountingauthorizepre-proxypreprocesshintshuntgroupssqlcountercuiippoolippool-dhcpmysqlschema.sqlschema.sqlpostgresqlprocedure.sqlmainmoonshot-targeted-idsmysqlqueries.confschema.sqlpostgresqlqueries.confschema.sqlsqlitequeries.confschema.sqlunbounddefault.confmods-enabledalwaysattr_filtercache_eapchapdatedetaildetail.logdigestdynamic_clientseapechoexecexpirationexprfileslineloglogintimemschapntlm_authpappasswdpreprocessradutmprealmreplicatesohsradutmpunixunpackutf8panic.gdbpolicy.dabfab-traccountingcanonicalizationcontrolcuidebugdhcpeapfiltermoonshot-targeted-idsoperator-namerfc7542proxy.confradiusd.confsites-availableREADMEabfab-tlsabfab-tr-idpbuffered-sqlchallengechannel_bindingscheck-eap-tlscoacontrol-socketcopy-acct-to-home-serverdecoupled-accountingdefaultdhcpdhcp.relaydynamic-clientsexampleinner-tunneloriginate-coaproxy-inner-tunnelrobust-proxy-accountingsohstatustlsvirtual.example.comvmpssites-enableddefaultinner-tunneltemplates.conftrigger.confusersradiusdradiusd.serviceradiusd.conffreeradiusproto_dhcp.soproto_vmps.sorlm_always.sorlm_attr_filter.sorlm_cache.sorlm_cache_memcached.sorlm_cache_rbtree.sorlm_chap.sorlm_counter.sorlm_cram.sorlm_date.sorlm_detail.sorlm_dhcp.sorlm_digest.sorlm_dynamic_clients.sorlm_eap.sorlm_eap_fast.sorlm_eap_gtc.sorlm_eap_leap.sorlm_eap_md5.sorlm_eap_mschapv2.sorlm_eap_peap.sorlm_eap_pwd.sorlm_eap_sim.sorlm_eap_tls.sorlm_eap_ttls.sorlm_exec.sorlm_expiration.sorlm_expr.sorlm_files.sorlm_ippool.sorlm_linelog.sorlm_logintime.sorlm_mschap.sorlm_otp.sorlm_pam.sorlm_pap.sorlm_passwd.sorlm_preprocess.sorlm_radutmp.sorlm_realm.sorlm_replicate.sorlm_soh.sorlm_sometimes.sorlm_sql.sorlm_sql_freetds.sorlm_sql_null.sorlm_sql_unixodbc.sorlm_sqlcounter.sorlm_sqlippool.sorlm_test.sorlm_unix.sorlm_unpack.sorlm_utf8.sorlm_wimax.sorlm_yubikey.socheckradraddebugradiusdradminradrelayrcradiusdfreeradius-serverCREDITSChangeLogfreeradiusdictionarydictionary.3comdictionary.3gppdictionary.3gpp2dictionary.accdictionary.acmedictionary.actelisdictionary.adtrandictionary.aerohivedictionary.airespacedictionary.alcateldictionary.alcatel-lucent.aaadictionary.alcatel.esamdictionary.alcatel.srdictionary.alteondictionary.altigadictionary.alvariondictionary.alvarion.wimax.v2_2dictionary.apcdictionary.aptilodictionary.aptisdictionary.arbordictionary.aristadictionary.arubadictionary.ascenddictionary.ascend.illegaldictionary.asndictionary.audiocodesdictionary.avayadictionary.azairedictionary.baydictionary.bigswitchdictionary.bintecdictionary.bluecoatdictionary.boingodictionary.bristoldictionary.broadsoftdictionary.brocadedictionary.bskybdictionary.btdictionary.cablelabsdictionary.cabletrondictionary.camiantdictionary.checkpointdictionary.chillispotdictionary.ciscodictionary.cisco.asadictionary.cisco.bbsmdictionary.cisco.vpn3000dictionary.cisco.vpn5000dictionary.citrixdictionary.clavisterdictionary.cnergeedictionary.colubrisdictionary.columbia_universitydictionary.compatdictionary.compatibledictionary.cosinedictionary.dantedictionary.dellemcdictionary.dhcpdictionary.digiumdictionary.dlinkdictionary.dragonwavedictionary.efficientipdictionary.eltexdictionary.epygidictionary.equallogicdictionary.ericssondictionary.ericsson.abdictionary.ericsson.packet.core.networksdictionary.erxdictionary.extremedictionary.f5dictionary.fdxtendeddictionary.force10dictionary.fortinetdictionary.foundrydictionary.freedhcpdictionary.freeradiusdictionary.freeradius.internaldictionary.freeswitchdictionary.gandalfdictionary.garderosdictionary.gemtekdictionary.h3cdictionary.hillstonedictionary.hpdictionary.huaweidictionary.ianadictionary.ieadictionary.infineradictionary.infobloxdictionary.infonetdictionary.ipunpluggeddictionary.issannidictionary.itkdictionary.juniperdictionary.karlnetdictionary.kinetodictionary.lancomdictionary.lantronixdictionary.livingstondictionary.localwebdictionary.lucentdictionary.manzaradictionary.meinbergdictionary.merakidictionary.meritdictionary.merudictionary.microsemidictionary.microsoftdictionary.mikrotikdictionary.mimosadictionary.motoroladictionary.motorola.illegaldictionary.motorola.wimaxdictionary.navinidictionary.netdictionary.netscreendictionary.networkphysicsdictionary.nexansdictionary.nokiadictionary.nokia.conflictdictionary.nomadixdictionary.norteldictionary.ntuadictionary.openserdictionary.packeteerdictionary.paloaltodictionary.pattondictionary.perledictionary.pfsensedictionary.pica8dictionary.propeldictionary.prosoftdictionary.proximdictionary.purewavedictionary.quiconnectdictionary.quintumdictionary.rcntecdictionary.redcreekdictionary.rfc2865dictionary.rfc2866dictionary.rfc2867dictionary.rfc2868dictionary.rfc2869dictionary.rfc3162dictionary.rfc3576dictionary.rfc3580dictionary.rfc4072dictionary.rfc4372dictionary.rfc4603dictionary.rfc4675dictionary.rfc4679dictionary.rfc4818dictionary.rfc4849dictionary.rfc5090dictionary.rfc5176dictionary.rfc5447dictionary.rfc5580dictionary.rfc5607dictionary.rfc5904dictionary.rfc6519dictionary.rfc6572dictionary.rfc6677dictionary.rfc6911dictionary.rfc6929dictionary.rfc6930dictionary.rfc7055dictionary.rfc7155dictionary.rfc7268dictionary.rfc7499dictionary.rfc7930dictionary.rfc8045dictionary.rfc8559dictionary.riverbeddictionary.riverstonedictionary.roaringpenguindictionary.ruckusdictionary.ruggedcomdictionary.sangomadictionary.sgdictionary.shastadictionary.shivadictionary.siemensdictionary.slipstreamdictionary.sofawaredictionary.softbankdictionary.sonicwalldictionary.springtidedictionary.starentdictionary.starent.vsa1dictionary.surfnetdictionary.symboldictionary.t_systems_novadictionary.telebitdictionary.telkomdictionary.terenadictionary.trapezedictionary.travelpingdictionary.tripplitedictionary.troposdictionary.ukernadictionary.unixdictionary.usrdictionary.usr.illegaldictionary.utstarcomdictionary.valemountdictionary.vasexpertsdictionary.verizondictionary.versanetdictionary.vqpdictionary.walabidictionary.waveriderdictionary.wichorusdictionary.wifialliancedictionary.wimaxdictionary.wimax.alvariondictionary.wimax.wichorusdictionary.wisprdictionary.xediadictionary.xylandictionary.yubicodictionary.zeusdictionary.ztedictionary.zyxelfreeradius-serverCOPYRIGHTLICENSEcheckrad.5.gzclients.conf.5.gzdictionary.5.gzradiusd.conf.5.gzradrelay.conf.5.gzrlm_always.5.gzrlm_attr_filter.5.gzrlm_chap.5.gzrlm_counter.5.gzrlm_detail.5.gzrlm_digest.5.gzrlm_expr.5.gzrlm_files.5.gzrlm_idn.5.gzrlm_mschap.5.gzrlm_pap.5.gzrlm_passwd.5.gzrlm_realm.5.gzrlm_sql.5.gzrlm_unix.5.gzunlang.5.gzusers.5.gzradcrypt.8.gzraddebug.8.gzradiusd.8.gzradmin.8.gzradrelay.8.gzradsniff.8.gzradsqlrelay.8.gzrlm_ippool_tool.8.gzradiusdradiusradacctradius.logradutmp/etc/logrotate.d//etc/pam.d//etc//etc/raddb//etc/raddb/certs//etc/raddb/mods-available//etc/raddb/mods-config//etc/raddb/mods-config/attr_filter//etc/raddb/mods-config/files//etc/raddb/mods-config/preprocess//etc/raddb/mods-config/sql//etc/raddb/mods-config/sql/ippool-dhcp//etc/raddb/mods-config/sql/ippool-dhcp/mysql//etc/raddb/mods-config/sql/ippool-dhcp/sqlite//etc/raddb/mods-config/sql/ippool//etc/raddb/mods-config/sql/ippool/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids//etc/raddb/mods-config/sql/moonshot-targeted-ids/mysql//etc/raddb/mods-config/sql/moonshot-targeted-ids/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids/sqlite//etc/raddb/mods-config/unbound//etc/raddb/mods-enabled//etc/raddb/policy.d//etc/raddb/sites-available//etc/raddb/sites-enabled//run//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/freeradius//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/freeradius-server//usr/share//usr/share/freeradius//usr/share/licenses//usr/share/licenses/freeradius-server//usr/share/man/man5//usr/share/man/man8//var/lib//var/log//var/log/radius/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:27107/SUSE_SLE-15-SP2_Update/ea436a6cecae00bf250af9f8b03f03e5-freeradius-server.SUSE_SLE-15-SP2_Updatedrpmxz5s390x-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@?AABBBBBBBBBBBBBCBBBBBBBBBBBBBBBBDDASCII textdirectorymakefile script, ASCII textPOSIX shell script, ASCII text executableUTF-8 Unicode textELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3524b60bb5334510b173e79d66f5b20a815792d3, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=cb2741160ed8fa0b69ab6f93596761f14fe9a109, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3bfa49f6886c1b1faf62fbaafc8dc8c0141dfa71, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e7631eed7993883c5b3fc8db3d92c1f5a0f6cabb, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=46c14369328be4b7eb1ee3e6f7c45dba3da32e8e, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=351097b26dc45e3f217b2994a6a22483e3256ac8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=591aab65656dbfd595eee669149449d28261827c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1f1f34e8426703d7702e706c99f7d2f7da5bd2e8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a3f434e8e120fb977c5a85c1982dc39ac0d52a00, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7d485f2384be051649b6ffbae44a30b2910b72fa, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=67c0ed71d5c1e723589649ea34c1c0f34ddc235c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f3d2c02bc9872eaffaa6343c264ee6b20466bee1, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a191012f1ffe05b48f77229a750a15473ad27328, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6bcb8d66d7651df4224a3c941523341966b98293, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=04fc3311fe2d7eb05c043144cdb09656c2252f7f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4c76530763b1e8755de8f11284282cdaa994cd46, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=343260b24d2559eb6bd20ed957601ad95f60e052, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=29ff9f89881cf3fd721f8d6cdd39ab1586e1a391, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=726433f6c7fdb4a60e2f0144de790a47b424291a, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4a3f2000fd484404927c38a0ce6b3e44950dfcba, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=505a118ac892f8a23a806ce619bcb85bac5c8820, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8eb8eab762841a6a6e4d8cf9f9322168ac7be41c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ec6f84ed8809fb49a42380853e158fd936120036, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=71c0d9403f82bc64f1724380916d02cf72c0a2e9, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=cc42f2936be04f58b15cb72b7de0f6a260f619ca, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6d412a52c9a5bf869835eb03b42e3f306b32c01c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8929610e0979eab3bdeff39e097fc2e66a0b9883, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=cca4ffe3c036c675807790863b9bea7a97c28a10, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1838c38ce8f48c3ed74f60a02de724850ae5d656, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=df2fbaed7e6bdf4321f90b93b0a6ed7569545874, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c505a25860b2fd897ad6f51996b352a84d1358c7, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=35e237aa7a16dcda789519c1009776cbf9b5b2c4, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1c005c88fe49144651c9797f1066858f7ea8d5f7, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f80485a71dcb80213964d6bb7531081459b41020, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=35776385d08a28b4485a3a55ca36d50f71c7966b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2c802fa8550554494815db0ad56ffa67d9653ff8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=20cdf6d7248bc7ae9f7f7f72aa96dcce78be362e, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=bd13e6f9232d58f8308bf994a7941f82e868d992, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=60495537624b112152e4a2842848659ef84cbba4, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=67a260e0e85f7d5f8808a304e112bf96f2d821d8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c69a37099dcc0568c48b691635db71a532d909d1, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9640fed2d954a62aa986afcec27b216773ce0ac8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=80c4499e5edcb2b526808558eb78789acf97ae01, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e6db6a331e8da747680357e8ad42ee824a32b64f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f282b06cb0672a910cc281a868f245d140184b6f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=074207135353c4874d838b2c420cdb30ff6284be, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b79f72feb63101279b527e4b3343b2eddf52dfdb, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d6ab95aef4a821c31de39575b61f4237a6db8fd1, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7c24f8f8457f8b708891fc708da57416127f22db, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b0fa9ba9610c40dfa4de4e39407e2ab80bca68de, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=05bc9fdd708d2e602c200e9883e3b28816c162a0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8fe01363324c96ee4b8d5d650c2cc4b5af2463c6, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b4f976af3d2f4f6f3c2f3d0ffa4517afa60095db, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0190d7ce6ed8fe53189f1bfd24c1166bf4cb94db, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=dc216eeb93ae7d417d1620b5189ececf6d205d66, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=329980029511f80c36699751b9489673bcd29c2a, strippedPerl script text executableELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=18345c57c97c7d5846bdc3de1c3469a36f195f1c, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=38a3138ceccb86337f6e1fa9e5a95299aedf9611, for GNU/Linux 3.2.0, strippedAlgol 68 source, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)empty !&*-16:>CHKNRUY]adilosvz~  RR RR RR R R R RR R R%RRR R$RRR RR RR R%R R R$RR RR R R RR RR R RR R RR R R RR R R RR RR R RR R R RR R R RR RR R RR RR RR R RR R R RR R RR R RR RR RR RR RR RR R RR R RR RR RR R RR R RR R R RR R RR RR RR R R R RR R R(R'RR R R&R RR R R%R RRR$RR RR RR R RR R RR R RR R RR R RR R R R RR R R R RR R RR RR R R RR RR R RR R RR R R R RR R R RR R R R RR R RRR R R R RRRRR#R"R RR%R R RR RRRR!R$RRRR R%R RR RRR$RR RRR#R"R RR%R R RR RRRR!R$RRRR ɋoip*;qlogrotateutf-82f933d95b424d680fe152dfbd947625191a7df1acba813c2806e21f286f1540d?7zXZ !t/e]"k%܍{ȳ>C9%7, [¶}ᥐՇ4L o;a=f^Q |s#:cCQNU~`ahl"hae 3b HP;Ș{6ιoV`c{HM_1u׏;(֜P]ˡkcBGp9ci(KkY10$sLn.jqߘD0[No<]%7ѥ7a**EN1fG\/L1%ݓ- df3JQ@ PZ[94l"a@o_u^iz,i-+ٻΝ^`4 0 ~-Xa-b{85cd D.υo[8ggW@tL{F7b 0igh0*Ra(n䎩{gr̻ZŠ& *Y,Ԛ!egF}•Ū$P"Z59ewmU䒶u G?mt74!miqIo&WSQ)aw}0a27zGy 6zupQV1j=nLzXX&y6A0w`l?Ո:[aZv׷Ld_\ Nm RYT gPqi`f\+ZՆD$&tK"]p),oi0,BL6)^o6&` R3VguϾJnm//'gtij#EDО aC3'GJ?ܺ+=1:0RÙ|lsISbFKZ;}K/KZz?,o!S~H~c+1Hpp/AE29"\!~P%&!)gW5#gjOv@aZkv|2f?'~Ng2QZng_ޟ;x)ŝtALt GN(?s?  ')]#ݏ̸ݕƸ EX7Ƭ#V.i7!_L\HCr}њIZҦ6nXȊm"-R7!z*3h/cm2+rāPHՅLc{tUACp#v'IZ@ 2m`%e\p}6Pܕ+p#+ʏQhER@xB,"}H≠u:E~{R׃ Ex#ff"E0n?ӨCvƉ`|!MvrV8~t!PlRVOhV&Uy) 0P| \V䃬2O056JK8iZvf',;Qt"mOR}Sq庭8!&$KT\RVgNɷM9.f#Y]@,E<EjXw@K#PeB|P1&+.uX ;Oz"]3|P{Rƈp ipX*minmfgOtOS&Y')bm>2dPKu;w7;GU;pWDނz7ݠGMn4[=%,~n(}TKV^tpk|xcWgE:Dg)jĒ=snnqȐSA9 mjXmIWW͐lĹCzy<i&0 ̙ ݶxpjʕh4:XQܮIj)ї Rǜ> iHuoinJxU: 0^wy) ڍ܂}Sbͤ.Qʄ7>SQ,.nfo?9@5(e`ZH]uxV3%UE6Q23kgC=Ѓ ͤK p&ƦIRS'*x^_{^ԋZ׻~fPcQZb5c5GXʋQ%$vтiNt"!ƽm[ qാm9Ӯ%tMm3ov  =7UuR}D7p*GX.Z Ae( +K){ENXnXtA<H4Avt۶J=\Mt @_bl@'Y@4ǠHtsH\׈"-ux&#*Jᩉ'K\q̫( ^X% U 6΂.χX %aa^r94qРN=ˁu'ztBBBdYP%"[TF~F O]z| KNع]~Y|"- D1kXvb?V健7+2hպ FnXA!]DF+cF(}WY2c]N\8i YM:9rوm?q,̯\. hܽw 1C BWf8y2[d}n7iʫtLwYl* EP-iJRɝ!N- )P/KBC->(zR/UdY0T;hhoLLW9EȍI좢'8G˂Sw1*FS[ Ztc!x;Mhou ~UB5{=/Wwl h'C˷sfĪБ՝3tJA]b/CLiGx!;P&G%4zO]gFgz!t!QxgӧxxS—v"hs@( kџK0Ei+qh&-k)ke顨[vjxu#KAYbAo%WƐLˈvzOzF:SCzg@ 씝U_ޑzz&F|ɲS|l[>kuc ->{eҀ,BrC^n6ƙK6u-_-{UDzxHxi}M5 ksgEQە O?]p 58;JG{y]dA칙׋g-A'^"C&\G@ŕH*pL :wGд'Gxus&YunE Bjb$ I!辐_1g\\0%g}HPm#X^Wl<qI[gIn#yK\I>QimiqC\V`X-r.@ ٙj7`wJ2#?1b[)jM ܄u ğہ\?㲃 ! +FFl)=\ w))QpӰ-]Th.ܐ7NEl@}AiPJ%UmbD*k46 LR%Oem1ǻoȕyoｾ]fH%Cͯ`K[47L|l⻐eو)Yq{ޡ"*.`svH^JeVgvJ3~U wȌ mD\q=fߕVx An(&zV1 etvX7碶ySTSLBIXGnW@3vDc͢Ki$́ sz 6>aznI.7& ?h~v^*vBO`bg$IO "[iaXHEv1ڧE!|KٯY QBswތLRi)$`hI%j9H*B>&#%ۗ]V}_is'TISE3|',; B3Tyy9.f h3Vf3'g6,ḑ@%XןRE# G#1*\\ G?b yP ZH3&Ή<מ$ ؠZ| ՐNo \5K3ĕ+#|!a~9t)#g% K666Vɥ4E;6\H@Gơg?R]K_pKCa&Ѿ@k?3˻+{ICԧI9&|{s>e#e]R|!T1\SWo%p}Bdp++DcWa5&qSH ӵ&E[/. 4"?XR.6Ѹ޻>=љnaB!e )"΄pZAo DVxCrS7'Y fro8ИSN*o9x~8Tuw~P(^YKLaMqx!_Ozy<,L `kd7N zx>6*\f> {vaTbppwwJ׻pU)sw{ʐć~fi)T=>a._K,٭=ׯ}"pX}(xֿVxWHۖض>ݦpW췤!]s ,): NVkcWi,j[m+ްs|ywZ?Ie׶eamlweF=]$n뚁ܓt5Ҿ>W5`.۪CkN؎>CWb?¡OK^,N1uzs{UDehaP=` (Qoh,\ W.2J{eWFS:k޻!I xM͢dKJNG.!T%ŜN1ײzDЍ%עtA"">r8Z֋?0NRU@ϑbdq+S*M9j{qڋ_N5am;] Ov]9N셉a㤣'&W܃L_ Wl唀SE#>~0 cng"ZN1\ޥR^e@3E'-Qs;n:~Gŝ#.P@͜W/jZuaDYTY8`RԟA7cXT WY=NrUz!l@n$=WhYIH]tWTר5`1hϞFv%GMePh9|J4•k@8y[ow}b;NUsQg(=pB:?"e7.huJD 85+,"rG3)Dz}?:WAesj!(\Wb # (~~}6)*D 93Ԓ@UuIa} -ʩ7l gFK !l<܆g>\HC²#H#E[ū|Cz~~1N0B ܻ P*o cVi?]]D}R@. u<1' &q( g8g9LrHW}̦ȡ3vPz켶~,C9`/#h3q;@{m¥~T;tB8?U';)"-.SE,чX36XXp[Jl8qM66ZR :}QUD,ߴCCڜ(Z~ǩߪ`wh-|'a^3hj[(3I)׆pxOzy4hn'[6gYOOy8BVMHr`Z,1/LLWFP n&gͿèR2KFŒ2TrFz/qOx$h-ڑa!mE'n2$n,#H2e}Ѯ|HT>'(q.w`[^D.AV<k`޲:νЖ.wU|;騃.+ z.)@Mi=RX-yUK ƆN}&F=yH}p&U.omL+D&ږA?IK*|o.p zH(/0] tm>, #.3VHfT6qLU'Z}:!>&̯ :)Wp3p*< n9s]0:M,~k㧹e#TSQBPԼK*qa>Ѥ5T[k:X=s€L55 DVɌ,aenN%@Aܞ8Hf, {bpt~`T+Q~MjK_R): !,4ݰq0Bi&u_\8OՎ3u:ڗo5]jz!_ͳ徆=(_P%ijB:@|2Zn;|E U^ V ;$s@*Y[ҍ^VqeBXΕ')> `db y-أF4$SgafV\AW?%;jnz_U<'d6,pZU5ByDTϪφ9oP@aJFyd,zؘupmƭDJ/q{*Z@Jò.Ei?!f8}Y^}OߪG za<+U (-Z]dcWХ34&l 5_hOd_xyyQ %^^M(TG1oAg a^ƎD{02<_eb ]RAA9(8X彠o,~Ws3|;WC=[Kez/θTWG{"[r d:b.d;3 (jITg=wG{LYaW$yIcٶ+Cɀsfl4lmN1f#=B`Bbkv~=l`(v1 pq (j.a ݀_#~6A)Ktd/'?A<{~Y,J1;U3^BfYL7[MC)s \=5_>{]fG27g?&OcKK'f!k߽KY]$eɑ~ﰛHٯḇ?$I^f+m&6Myx\4eء|YXg#|DmO;i,v~ 4Ef,D4xDZ"Ԟ@d.~ &un,M~_a!婮]>+1=aP4WK+fC<{KyVՑ.@M?*2!PsςɷsP D< Q">$G ȳVP%Y2Kk.,u\䱘hHGG"DG0j f#m:@Q޹?ZD>>8PEfsk.X{zBQ3 Ee5JÐ~o^  s id6 s#\2Sb'7jIfp9&[;R]wJx h_wlo,?利͆,hce56[R{;#.vbfФOjG'r8ڟnFhR1QM#P7@|M|g)L[drפHӅM&jcPiЄ@yiXɣhqdB>ZT* #s*>ƯiRfH5ENnُ@:S\ Uq>Z ȣO\O0_P> EBt>aKѼo z9/1ßfFkKFQWD80#ye<(Hoy(9Cok=GXlNr= ul/A(Fu%iaހz\8EhXMgnVsìq)h%ُ\В!ڐ@] MNHsw̕B=`LxxJ>? q# kiwv?8XX4& rôD^^ϭ%RfIH|,|Ƅ{ě6fXM>Ǡ ,TC "23Ļ,Mid &&XTt3lָ|myQ^nؠ;6$*ʿU-]fT )JʾbnrҜKDTjnzĖ؀y"&[whq_Ǣ:Y>:KI˭D]PlQ%J~ʂPCoBQaP&-_Ux-Dz'ápY4Va$&d [~n{qHT T` Nơ]r*Rr܆NVz4dʋbS=_R\ 3ys\ljNk#!7FWDk 8}vs}rXH8<躷Y2Rsʉӌʾ,B 5y&s$_!Cʥ=ucJǴ D0 #$x~0d} &gP޹v7\UuCgqM(xf[BqBLIEe.4/q LڎI >rS JWs[S9j gsya{fe )a+2x%w 19Ja~NT=sI ag;*gLN8 mh:{]Oeg}]5K E7.\}%Dw KW݃~V嶎h]F`ʞC*І4)*}.N˜pUByk4Lw颂C*a>KRPǁuMYKDbҿF/\蛓Ć_ ]- SF /qA_Dy܏-1W(8> 0? B^D)nbQ\=? ^nn2ir=rJAkr7(*+CPzLK6/7:y-)Cz撔6b'6|A|1uO9oԖ.sYJ93䶐JQ{ =-z"2}Vyf͘+f t\r5RQ-oOi ʤM OyŜt5NrzF+oK?E K>R^S09Ϻ6[ w}!bMgrxo6YQW:N3eRC2ReX` YK UI_77W>T9bTl0=Pt糩Źf@z:A^-$g,eZED?gڜ6x)ZEl\ 43>¨l;y0W #RWkZ2[EDM#Qwy &f8zLqR:`LyMR2@7#J;pPPi8tL.e$(OZ Yfak7 0-x;]u.?]O73ڐ3Ow~f?*es5g\p x2@I" 큷u#I;10:l3W>@F(W: ak_yԝY Y`^l-k/4j^t$6 :3ԕ&$PwS r"+lhu<P1eaaԗ"x({>?3}Wm-`nߜqp ga'EYdz ,4/iV"E6C% 81-T hQ&w!g^Om00$'|L6־HHl[XiV\ b8E%$\< 1j-2?OA܃ؓ KL^r~ZudSOJӤ}xZ.X:2M$@Ɣae3K :'%_cژL0^B(>v*=h >۔Ǭt?M-J`-k<(}Kj'r4ϦhGZdSx'G]\h|*qA (z*[~ٰݽJ/\%’eQX+]$)+ŖMaa`Z@?"i`Ǒi偃#0Nܤ%`uyuΡRsMm ka.Sg+/`1h C˚.@B1UڂXc3D8`cE(i0% 2DTBXL@*ɍeY6J$7%]qLi1=BCc+MQ2:ߦ9fWXX1b4!&#}^?Dr*TC_Su_߈IYn;z&MX'v VngjZ:RK0R;SmтԎؠ4g T9k+D#k~UubG>9k"5n+OMza0w0Ržk ǥFܑ Ǖlńu5O +r1 I 'u`] H7@6˯">x=FB0jY949[d>]W m|蕁Ti;ۿZW\Q a1FEWbݙ'D3R~QO4k,RB 8؜Bո(x7S~Lwbcm֓|?FT&M(P[ $̽XKh>}V6~o 2Eß ?.`7\Z@ }J=]8 28]ޤcLKob " d[M }ϝuqk{ydgCu;Wz=BTM 2B˸b ()c=%5]SP|e[)@|1"}fY N4ꑈjL Fﴖ}lӹpfy.R>cx+93ĚπSTϣ/!zؕi lk8qW8l^/f]!,QZIv?a"wHsIZqَ70MD/Y0Iq%G_8;>1D0С+) ;Scz рWiJŝ!1'b%鏄s+K$3Y (\1]Z2E(.iI˦ p:ڙsEXVâ};x@2i,ƅd#A!㾋"_'-[Œ5, \Djeir$j)Bv]ܪr{Ιż4jWP R.hF`qz6tcv\Y(,Xm$ݻR1wS`l`w6faw6M13da~>ѻs;DIFc峢,e nFI[tsrSzX-H ⧙.{am8H;'Yt{ݘqVh,"ܗ˃uDIズ̂xF-h C 2=zXKz1 F}ten[:-- I!DwiyPE.85©gŃ><ѶV,MyT<"ُe=5cVV(aK^/ReMavy-!ĪI !</mI|l\nr/`¸ ,jB5G$QQ`7*&즷8Ur&~>xge,4647v̟ tgWwHG}vd er]o(Pe`굏rPt .>;?11IHKf`.áMw Լ̌$ȐT&nghFC4= &RFp:G;Ypgҁs%"}ك6N rP,*OƷnߎ .Qtr T#X1Nj]yYKBJtC_6g#< JeL ꡊڈI}%5Sdx~DyJ$`HǻOG"51Њŋ9{~)](0.X(F ?sru/ ugbO1W5]޼zo_^}Uv( RQ:ѭs} B;צ u^DBG*YeE&8BU-uXҼT7Y{Xm:k $ T$:hZ}ѯ22,d$ rPz8 xI͘W˂;d6<Ʋk[XU7y//JDf+ۻXQTm+ Pm Y\؇ wzؔ{Dʉ$cts֧yMZ(,h>N X헺kiOj*3<Z/g%,^3R!yQӑ4]\)iR5tGY6$nBo,Č)œW3ws/\xg6Qua>nr&F%WV$#v->2j*6AL>C7ߌޥNkнOrW8wtp"#n2R!lbKJoBC^sS|@WTWf'ኽY)s ?!{~O"{n:O#ZoسpðDW@@r8\ q?>*.ʷw\fֵ/pڍ,DzKvGB6($;5-!̝@ޏc&I-,}ѫ`, WLf󾈿7Pþ:qT5ŵbV9 :9O)Ufg*fu`6vOj1,eoKF5bxz;NGOD~i\Episx/cZxϷ"+|e鋦.M4^Д8?(FefcېS\"~(wh_߱c7C9 W~K!]k;{eK`t17(pj,rE>ݱ~wN-8E6 `)&8#́ ]e\O,}%k2s=pGu;g;pދ9́mTyѐɧ>%W cNXZ֕+to0 GuNz˥2b&yϖqWZgn^n2^^6JH>htB zkkvFH-)aZVdM#+}G7籭(Ĕme=j{VC?RЅ3-c,HE_8DJjaƂ\S#&V]>^V>UT(~ 4,sh҂Cpo#wI oo xWQ!F @&~`c)U?^eʐzWyU,Z?I7Jv ymKz}le]3ք[ 9 x߽D,~z3%+̎PWaŪizFV ϕm!_Z峅+2!O$R5)΄n/t5u^ g^L{Kl(*(i儓BuΟ]bS@Eaiˆ.w'>)+;&¡yφQS21Q;žo8˘~EJ2֞(b)[..c+eP1BvJ~ɤ,}ncȡvo'E/.+Gڮš/͗N礔 ^ N ^^v6C"_fsR߁cƌ (]_Y0 PiXIqB+Y>ץB~Z-)kP|=_7_`sFqdPK xy[FêΎ q0hM1â%cڗz'AA} `yUlVw~!#FqM#,\?V`aSD ZXTn[::EknԾ$6Lɨ5x? MfRWe*Y被m!:x:-{Y |7oֳX=sӺ)1YnA#1*Z]FX53IIly&)*miR+)~%t+$C:3`v7VZɆ-GDRh7g_̮>o3$ܖ.f!r;/(a@كeG!c=t 4R1Ƕb 5H 9FV ^3%E#1xv԰w)Y2殻[c+bt[{LTZO*xad(7žx_9/  mٜY,LN%am*߰]1qAVk} u4ԭOtp2- ?w* eui蹶\]:}s?#_WBO$o_$xCTf5@?zYUD#zL}9>V)&yF|AD˩T 1d/ b-h#$gdX=20{!W%>Fknp*YK7뀽~HAM&R#}'gV7QtYmKhSܡChbz ڑLϼ:yҰĻvB=B Jp5SvFT' m*x_}慡b$pftrn(SS%$j8$cәbF$u~m1ӟq໑c;V6Oi"Ly^5v)'͌8L3M-3ɽCUhp<[TBvA >faƹq;='Nꯈj`8'ה>&ǐ,3!,yp)nȨ ٰA>9Lk[ \3{@pn4 ؼ QAB$6v\o"5q @4]H'!(IUtGZ-9YJM|@UA71Ê_NWBu*=snzIUA6Jq}L^C߼&nFgm-FϦYς_ +7b? .,G6SYH/vf(-4nfWSԓ>!tqQAq\_ 87$a_/(YKU AZ",\r^.eXrO]Weyk]g}fRZtgLn. bl,˸L<),15l~D{g9>gx(#z8j{,0)Zuz#15㙄yLt Mׇ5[BmzM$DTL f.\tw'5xi2;GY]DwoBMXV1~dh;eR=yf}k6P#XxV`]=sMd5>{9Ymf۰Fg] cutOnDMwAsU$ɷS 7A_bAOBIȵo͉c)LKx}oG$>*8Fѓ艍@I]imܾU\{E,Rs#-&0{S $87-KOf]{kC|_lxņk@)uBp["bREX )k](Zq N\i*XMTh&$%o{|yMY~q(S1 |VI8 =\(^0HT9`sTYPkr!uālR;an+ɝQ{T"3=v!SRLBCɻ>6(R뚵3v*-#)^|KK|L+{~{ifcbz;6Z_[A'CŠ<1J@q׾r7bȚ{&ѫKˌ4~?4ˆm=.zgP7 qS@4s'Ef䅵Ww"-˟ZdTA5 EKrWZrѻ347^D.>8]j6ϾȪl$L ȍ@:Z07b~X[Lۊq$n.Ȝ+8C|p룆W^/6,N"Pi ",\5f@iebb~A%<,0 u5Wx_L[#dEm Cjz~=b邍:)vK+!sE_]8!yFI?j_b itSѬH@9|#|e4mVv,{m_A×!.(IUa">%d9FiWc3'}C ?gz@t6M= |#fI#YxSIU.ulg=Z-N 5?WU^3?w1M.vQq0$=Z;icSqdAYx<{?vVXHuC!A,ۇ`}?x->(OJnW]Xݛp1kZa8pYTlyQ]0Bplef'vJ +] blbY9l>k~PiҏKRn fp1vDS|t&zKwA"5*|ծ2s$T0בâ4Y'@u<,>)[Sj mƦӧ?74>uX<=n2r@I3YG'#HЛ(6LDAV>n[K5o!_[΍_dLd]~O=\pa@+`D%fԀ3,㟤 D/rbQl<%S.>A9;^vyhnRmyҳ 7mCq_iVQVV@*#ɲ=!_=!#Hm::Ҥq*ʿm}~w)ٱIhmҘކ|iL, u8斯->$U6h28bjV+hhK&A#YRn gm'$$a Q+]c>=VzV<ѯDO#zȡ B^%#_*-p LЌwP ͊{͊AlSA_0J5# <0W/)$yŠagf ucozC,ަ [+,x}kzF~ %h~=kuppAH]ܤt,~4?<߷Hr^HOڹ\P4 5${#"8TWF8aula"./sGY }NbD|hVd@bT@Wץi+ed%]F 4bPljmz͛>՝y MPK*0wˍc9np!ˇS`ZZy,U#ڔ' ) 5mĺӉN9?j?AjuZKaBB;v3JiB^BBa #hCf9D[kCB!Qvd)*tԚxg*l"g3 ,t+.aTMA{0w`g8hTЯu;g~d@;{? x@丢䂲)ћ4ZiRdn9LԳWbPdc+4F_MlU:a5 a27i2> 9|{zPw,Z#9 1RjXX͵_iZ{EĠ6!ޥU}F>aEwo,!pO=!BO6I3ehJ[`N8h 2a\P2Or%vTEYG!HAUb^I H}n:?`'t-{V X0;"m{>3֌ZMSʢtJ fsz^D/ Wʖn(燩U}z?US5_W7'Cxڕp*Ќ\=8ր#.xQ~Dz8 T#T k 44p94"1QUn00LtZ(1@-av͋F>#CΕ<=䏂1^_73c;=':CԵyzxGTӸ{.ҡxc(.~O;F5`p<.ǔ!C}֭ϓ| ):Gե(L_ -SA#VV5u78ᩓ {a6cdbE~tE ю*`}57:%ÕF{kΑNcLL(0L5'N>gG0TǵyuP} |H.3gcNo>cQ\ oX'>h) )8@(O7M[x)Vp/$F^rL\Fͻť (p'+Ed".^/B^1aUԷM `V4937ARdD8B{z[󒘧3~=@< J=%]q#zoe8"4,dm`Txk#܀f !fw h9i)|O,܆[-BⶴR[NIi+iݾ;}fl}UK{2ii0zM\pO{,a~ZZ4'e!_R)}\Ι~ "Cs2d"#4a$dq#,i-jRi\ ʷp"?; it%P(-18N: Kz@^h:J}$/I{\$Ȑ`50D9+ E`y}y5vG1jdHUbhqD'YgMIGQTvZ5u|=xȬҩß{ST'Py;a<\uPKJIEM*[BY.ΕQ %xol+Y[oo+െ'd4rzCϵ{dNg~dB}3v_]l{Xo@So !o48_k$zknv#p\ -~ݛ6.m_bs ~:3\RGw<C4Rú ã꽫 ?tPnp1r!MwF&u8`5+cKx.83H(pIN̽xCZ D,Ԕ=pϨjS|Y(V6U86)6wk>reB_b+!mSuDa OICyPzXD㽲.''P \&xT H~V Ɏt>8]vڍ(E᳭%xpP't{6WB>GT6ʠ;ov=*0(4=, rЋNG%իpmux$gel;Tb'(7%,]&NV,)ִo{6M84b[֝5G來g}?a[&06#IgxnFy{ܗ0P}pL)b|ʌ@, q|ur'L"Pܔ., `nVbl:'6jR6>a1m7BʌL_}p Pt+{0LT&Io*\;T$D{:jgl(zўl[}4154V'ŬаXd.Tx3v fP_-&qA=B "r6uܙe]A.*QS(ne j[e1nk[mNb#v l ZB *^?o|qmFrC;t4{>"/ 1AwiK$+P3f{fX_M}x=ӢQR"I:l{,E"ZQ9 [,wڶVvXDA/GggTP=}8z<:5<(ŹҐRJ9p!eK]u͒!Qzh-bR7N5}$AGn *TH&$pJ#LMP]e#1?z {Z:jā<=K5W '{7kXtiLSPRNew@@{,LKȾOU0k8as{Ty:#G,[/''i.d.C̃ $EnKGJtpw 6g:0vu}{6~C{։@>J'6%0gHE̋w|)\ͷx~\-=HuEoA+E| "On6e"!8Dޥ˦SlUmctiLa5SP5|C:QD6_nLbK(KY%oc2[&Z2CqvuCG$ۏ4xFSaBbXmdԂ07 O<$̼=Rp²=ia9L[`tS=wr/1{_,鉍d00& BtƤ!m# „4lCn]1}!>)*1-2_Q2lSA+QCǚ,ƨH:V<0wWz &HGN;{+- \=N7,_v3܎44 m-=v_@#H7f;ЀU;|a6>:u\h [.n}qƊ+␘B!k$2aX}MEk:evm7q9Q^,^U]`HЊVX_Yu8,vqQg3ԜX;IWCRދ v8H&K eBwBϹI1@LU;VSGg c}qM1#P >A2i)"`_uN糰'<ꠟ.\!wy\D(%WHО.E.=ݎa<|te<ܷX#! $E5pN puɉd.Djdw75o$\s߿{> >|iOL[oΖʅ?ܬFQeK==JD-E6/kND)ZLPm0Ʀ Yx[ i'̫cm #rg*|!Λ{jTsY?3:}$m?< \_dʺxE>)F^\l7ɠN\8KW2;Hp7}DŽZt |K+27HYe#`w#_;9v=]$|]JB UES=\y=aQ{`_G|M|%lFg)rh*$"ZI5s?7[6(B^c>c+=)fBe<@{LPG RXF+f%TY9n.TolM-I:xwZGH!P,^XV#|l4+ ߃?J\p8bp!['2m/mݤخ/{AY(B߸%7wJ`h2 !Xxe\^?Yc\DZ?TmOtIVtxFHqz_Q{Ϧk>MbƐRR.¡/f)9ЄVA'dO9j[DLf(Wk𫛄Y;I1WnE'r:c"Wk;B!4;48)a;g/Ƥjj|&23 p&P,cv ՉZˑ00LW%LdRVK'e#~Le "hVэk7؂hvׇ έv‡aa35!a5}2|-U u/4lC P~v'e S_ X֞JC_mfhPBbVz,?s0uCYfd ZD>bpAM{@(a!xـd>tﵶds?ڽ2&x (aĭ^ѣQ^7w0FVpWK`};#[ěeR6׊$%o zt`Iq;,Jx~[fD{PfˉN3:mCz*ZZ NNg}Ks!FiW' |" ~@Pn[c{JT^r[:[}sX'N?"7gz$Zo|Xyqs?.6z0&QzV-[Oj6mADXNcNWX\'o7^RBrCv~56pm_J[b !`ik9EvaRJf8f%x.=> MZ[}Ju,O"qdj 9[El LhULl^&0q suVVDE 05Zw.3G/ qРr,(Z!b՞/)q]Zpbm@zخt. o#ޫBHڢ˞~蜷.NJ%&x xhprAޅo+,긇 2ãM9X7 b?"":P̽|E( @N(m;l]ɣ\uJ<EwдȆ@lLb'ſlHڊtCQjovuЧ4T6bgJ'dN~-5;]h÷nܾ40ˡ-P W>[fWn+߀n_>mfSQ@~axXzQa!cXn:"N?l ZBG׷N6{I[" celLMz1V>3"l XGGL%Օ3,v̊}BKlCȱ߼ettr|ׇ`!@,^.0>#AC ϗuf w"xYq'M:iOɏXӫk\"?MpབྷFYd"%Td*5axAxy--nG9*LIw뜽<,)~Хt.Rae.!YK2TTMܭsn%c8,ٶ"i`il-X%"Z_V|>8ＮFu 0c;%IZ(4?2^)94Lݮα7A.k񽄄МiLpD'/ =Uc=L-Hy|m/JUu+-n܍*˗@}ݧZC|Gۣp>]nr]G9;uЉALhY<嶳0~Ol~tG03dS`6?tvohw}S}`DTo;3^9]UWjD彭 0&q qoz yOB*pKzĸ :5غ.5: +XO`whJGLTnDplьB ggzy s&[C#\򳵸{pW6!$|9hLl.ݺQ"C[KkYjLsIV<pˬF \sU݊dEt! ovRH{&+]F)D湾4_7vp^]MO_Er9S$ ")|j}]6ſ]u4vPD$zsd !H{ҍ5"MjeGԢ7L2 p $+O Ml"I37`g nT;[Ս|I #*uvOc<Ap;b䯚QO~TL{+9C^,pR*(w\BjWDQ]P?6;DkEy{9oV ΍˸7_NztRJgI259wpp0T^hq-_{wX^g((~>uӔ7 9 i>4ZtĸO6grH.)Z -ӎ봌Th6(,stf{ڧzC1jA 'x ;[N$sVEޣ\r֐+qT֥~nSb$?!QuU`=dj"_g+*. ]%UzYi|anDemz]VղezĦǖ 0+Ď.H` -bgd|H6DJg{c |uu>ym0d>edá"$U/lQ!qVA6T{+p=-z6-&iGJ=yZzM ?kQ "^}Y7[5R!Vfn$a:'3(skW:tZ+5 Ec"h͢|> 2ZYSyʭPcf7 C-DkIBvʺ|8b$ƶ%#`D0[lu1~fcL湖Ϋzv/'e y2]5~C)1SB~vS7 `8ML2sle;E~L*,`L"Xbp^4g xPȑYT'O}h?dUOޭ#cQ?U 2%SRd >n3h3윬gԥ^4$7r@!`d_B S+G;3coʶ B02тsQ."8KN;PwF @TPBxCB2M<§?jD#WL1-ײ@|-o7LWDyidͮ&׸⮒*8m7w6pVrWabw-Q(u6[phۜ(s["߻iL{?r*v;̿ Ų[׭9DӒįnßBJL_R5΃%]YT CW)p0i'kj'{`ܖMHn؇>iݯ.a_Kڱ廘,1] bg}øe폱 y+N1& QƯfo;W Ah5q ~ySEm:LʹACv n/*,%7M O6[\2J9}W}YDocw#_bm.]&ۺd^䋃;9G <ȁH=ʹ\t;wk^cysJG9Qx^49%0rv3kaL^dܾYzSMͱ mK9KKЊ?bݏۆM4|i(nnjrk~[aC.-kne)jrR+ pJ ȿ爬rJ")*(cy;DIOg7ljT8[~vsv)$FDwQMV(KE[g 1cM ܻyO+kέJ$EW鄉PcSdRk,foytv;'^Vvb%o}N#r,r$15)y%u@tn/{=G}GHM,x)S6e׽u]1k=^Jr8Y ET\?~~w6VbscĆ/m`#01$r[.! }kO8=Ijs],ݳc|B(z5WP# 9[&&}ҟ}<M(_ LYGN3a9z(,1v2&BbMڴ^o`1:l-AuEgJ[*AI1&FFmlr)zo,]6f95! 7VU`=FN?U^2o_<,ty'uRbz>>#y<T0ӄq(Ynkv%ث\z࡝Zx`jP䀪,2{TeֶBEݓ Yp` ,.P,6(KDw c%jN/#2*\5P %~I噌b/~K$t;j7I}epoiwƫQd~jG@qA=nx/ף`ꞱLQlBlR\rytwyqBUw 2w#0D?s& AZHHBVW!C>IfF 9-&\M &}B^<kNYRV00nuiU;ײ.s/%7V5ob*ʨs]6)!xg^y"e QS Ȥ5ƥ?t,dY[Ѓ\jrΕdwRC>p{q;KZbYc7T͌hɅw6etlX&V1޺\IaH m[2.M}-?hƟLH_(_D`zS&f gF…^1B% Z}QҰv$Ƣ:%>TPF=.4l FjT|pצɭwI^E搻duO3ʁMl& 5C٭9|Hg$݅h  u.AwR vER3`{,SV+`v[)J4=$=˘Y\{y] *\},%"Mb\[ӱ/fin*"ޟ]E:iU;"bph?j;;+*)"i2O 6@*9]3D $ČFwM H$ȘAb/jtM3@ IꟌ;G>ېLٛA J/ +{M5[4ƞk7iL卢Hʫ~J (e§ZrԲ& \GAQz֦P7*gdYP?<Q5Zgv25n/} p*ȌHY:78{;U5i+okBGL4UgqCp臋[r N=T^|g\Dj*5@iO\DyYY2LVBɼuZOX:hGjRs=I]oG-+M)`fFg~7;zOҷ1قv%ڜEmG ,hp#5Cx.ݟG kDwLQRd=!#B߮m2<ѐ?)h>m0<:6[~R{4)G&f"23,ځWxȪ 0e͹豈G{{!/` >[XCYdΰ";i*1|3:Ƭ FT ›^""Y OXN{*|#,u־&!̑H[3' j#}Ce/M>(eGp[, UbCk$YjNdhk)s]C2 8&A"LL>Ul5ܢ^9UC'8CSd6txmL[ׁ;OHF( 8sTбɼ0حYy7i@Yܾͨ˔<X 9kMEP5]'הZP'`8=LnlM#b;mԬ!rA>Rώc ㊚ d_V=OʝnlIH.vz)83Ne$kƥGxfB19ix ]fƫO>#~?i: aĜK# l+@y\0Jʢض L\ur6q7ڽu%HtLl*-t%[qf@jRHfW;OJN'oik}c>ˢgʈ F{+~>cICTZFĂzRBvvKz[#C঵<>XrgS`ԉf 䏿ՅVi!% DI<oU>B9kj )pTuƥ&r~,̶s` y@"'U\nEzH,70K5$ˌɁ%:V4ZԼHj.4USj\ !5Z:֢?F;}(z ߤTz;A7@GG XDhĿc8|OB`<Q"ʼnK -܊=Y,jcSPpg/+Q˒H=\ L[\j,O 'E J?૝zYG%"A="^΃bg/Z^A,jZ\ȧ'DWbR*Jd8NrJ/zϑ3OMsf05WKeuu)r}geLXNƄ"wl~xVFQ_5~ZozmrfuO:vɣ5FO)m2sFWʏtL{qԫ< WEOM"z)w;gPyYL9e@Y Fa[ްT>`Sy kB/a+O/"2!aSZ)2.@ #Xs_h]x77p?BV uIK,2ak!⊅%P &˼tB7N#m1 t$:8rx.ŗh ;/ ѷKfzO}u;S1ᾱeP%etpXvC8_REĚ[-;Ule)6-Q;j1DNXUָbp2R 9LrX׀5qZl5YgBfyNNXJO<\,trQq-5-Q&[(_<*COwyQEJxl1GVx"+EH7>~v`R5Uܿu$M2/ ص勰mKC_'v9 kr{?'^̋ף\/&pFrʳbm80ӝ>I+XsM?^wÃ'B1Y}{ڷ͍seJΒxm)Npp4;&|f]r?oA]B$;ׄj'Hj[q 9U{XQb$ Ij TK`C gy&u(V-8_YK%;c0rg )_ x$j Ux6O072Xp%Pb28$6 ִQcU|tiw(YsAqpVo=X3ϗ{ysGM%B٤@uAxmE:kxh.崱v+yĩyn+[co8QP`.aor*,JJXi aːc<]2K 1͓>6,Sv֔n;7R Ż]fIyRWS94.BC{$qUbRI0uW!]\N܁KXfH,V>x+KZ<57bf2ӱ@#O#@|*6Qvu5ԗ>9\@v/meUpOk_%W!qq5w rJ@̙L2U}?GC@2 ~&@9w',IY0j-Vp_ ,sm< Ĉ1MHa|H)tp1S1 fp`\c%2 q p/`c3LcF()KuK" m i%_b<& O@=ejB9,7;F~t2$bvb@ =E&fj^X쟳^\% f^;MRTISad$z6zgxي=x4(e}FHKN-< -}̞ WFU")`{ᑮo ު3h8koHu+ ,䞊e!@ 6l+w,P5B,#hhH5mڄ r.X~g}R xX(IManV}+BUBtNL?І.ڝjU#%vL|]6nH0J1Gsa=$0gr3j h: /fōā}ڙL!n>|V_jtX> , ɯx#+ҸHZck13='ȥ 榤[^Y2fcF_ik*-5ؙ5@o2C^Vofd"_gk'|fHF"5Oq52ظu@ir76Pn4h~; ۽*p#:o3s# ;& s_ 慬Q,hMnn\PuPՑ@ gE:Ƞ`ۙѶYmѶeX9qIha gW /n*/?zC'c. o m+۶>ܜKN/p;DO}5rU=A؄)4҇=WlI>&rt)tIޞװ`+ye⋗f(5_g ΅A?V%z{]}s\WM3Es*w!'h7g"=/SC.C*,퇮(AR-'|2cWč"p*ebF+!?[+)AQ3W6cD@Kgu:.aIC#Pk9k93,#>HNٰ Ω} ( E(iS&oO!3qI_8WNٶ~8?ɍQ}ɹZ*G/X/rsCׅ6<IޟSZ0r]oHR)ΠB<FKԑd4^G/@/)Klxu\;ٚߏVܥq^{W|Ou }bݰ;mGؗ7wm/  i>=Of.c\FW9]l!XjT e%bFo!L 9mƦX-;t5ì1v;sjYKA(+VWϫ(?BLI Wn7*{KU͠v@!rCٍUM)wafBzi3Is(hX\(|LElv,/*; Ɋk.$Wb dosL=ɧQS7ϛv뾰 =6PCITEڳ7} 7oEWn-. oyzRueR/sViJzc!8ŻSn'LhKjFWk9?3ՕMw͗ 8FLMә.FSx"δ3$Cjkd k(Ƙ04ybYCgym=cN(LMRA;O~f|QAPY>B0ko +]7|̔˧sg-c,#^Uswڝ|^an~!6%?W# Pt:ff^ߔg, IԽQ\m\lҗ< 4 1>*!~)a!l[PCw cqMHO1).@6R7]X1ƚ]ӱP!{G&}4*/fv#o]۶ăAba'Dc%Z@:Y:y 抐,ʷB@AnzK2lɁq(BS"DIOC;zNzf9c3e^ G;p|9I}@}pYIRagۀVhS(D0p AOiϴ6m!0/fcE*\a68FXyMY9\r).;ݯ! pO6x&UBE(|N_'(o+lW1ra:m\NlsZ &(?eQUŦ BZч߷.Ls6xNco3g=.ϕ~r uB^wҭ:E.I)9 u"w>BT$T3Tz/Sb#(Y!xِLH<%]Ñ<픒mӵ 0G˦a1th o 31\iAsfƛm-x.P (ZkEq w(P\90jX]@[cYcjǾ,yJbip)CCBiõ%.y$jm a~9srzg䌀[GXᴔMXzK% M-QgR""3(AڹŸ VC c]Tج`ӷ b%M1B!,DΎ~!/atsnD:HM$_h+:sp-X$ >lB> C{ޤ ZG KLKV HzS}/pFE!c`֋͞@)MZ6`n(Y"wڔ]6΃}VxQNB+R+'[).\(k^OM::Ci6 ehKz)ZP){BFtbڈo5*(2HNvkt;z~w =5qi {|+fӨwF!{wn'/)‹4~`]]GH5Fƌҁ;0U jD: A="ԓ^RIj)tr=8R9DW{a 7>W}cԜx:g]_Hw+'rg ~b5}dhO Ɠbp4A)r0tS(z' >}% jr C*W}ViP(i? NCMCCL,}'-EEZsV!@d *:]z!}-K2مCORN-!ҖVTS|R~ "wO?ҥ|f㟍wB6Xv_ .cg"ު^f?xݗϼK>1w,c(P2 ]d=׾ m"/Pͽ1OkzKfK=o#t2W;xJͬJI46J.S,&nYD^W] xg;Dw9`1pVqqd8"BK{y%*g?9 ~kn$W`̑HU /d6ω`u7mqH>>F_$֨n(yEk/,6Ӎڬ[.+O|Wohc@oUflм%+fE=g9h|/xC֙Xh`M$m0O+Jk V D3 G=6R~m(-;FK)&`Lz:0Se]w <=i m^Uc%`Pd'4Xy9{*1*::D{߶ea[}$>nܡ/?  l`&suMZ7;aXde},义hA^o]DDY$ĬpnFo B5viX RK |K 9:Un)ac1f;q )C.%="HIE=}&)1j&lzȋ8SM=ߤ[>Ce򢎜yeҜ8"N0aaD˓Nj4klUNvKA{.:pKGW&:a̡5/ZҀh}T=?\Ju &zE]>z'\gOZ,[aJXKU3phOco_q9مK}ʗ^ju JOvޡ hlB6: B]1cQ7jf`&j JSgxxk8z\aRqlY_ ݅^O 5_ۮ尴vMLs΃c>Bܗڏ}#/8ZIodC(ŶpWݤ5e,vG2#Z!_U&B_GBu"|td)طDt*菹(v;ƾ 0JzR9C(2vlYYSvF,2H Ej/QÆE 16+(z[>Y35Z9%+L;5\iԿo$76T3 &l}^3d P3ԛ XpFҏX!Z|QhfvLߍv4 o rL5;La:eP?/ʻ(ѯmh@ nWV(?0rg|Q.e$ YπZܥyo1q3CÀT 6V=FT|ݢSYCJ${֎4xL3'B丰tk*KJ="\z(0kaJNAU6ũv\iⲿ*ƻCؕlaΒHZ͌h`Z,B;Bƭ,Y|3\qjT3iA.y֪[{6dZLOz ͓!?ʡڕo_ņoNr"FY1Z>p;@ F޷ȩ{7cdYj.+@F,f0JZ\-![:7Ժ9"wjra>c&A1e1lcy ].I^#!g?P\ۆ"}l%(S^Ɋ9֛89۵*Y1ސWt5u;Th*P3sYaą& '%c-0_~g9VABױ.^o@4;|m*/,bp|-ۡ|(h|Q%l3m3)jvh'l*ΧXL}*-{!@T\oG;~ gQP6bQoHn +D*L@' َ-vHvs<|{*3`>";Qmp|Q b{~LcUBHh$7M]Q2=Jh[bf;>'^o'y4zl6r~l;iR;Щr$޸tY *4@ X?+ u^E8ҪD"Kw-Qy ফNtsThґzp+\p-mgz ڭlk)DD^5͸7y#rt8f0BVAӕ<0߯'Trю~(VaF0i=O% `N*#k^h["Q5#W6ӴTlڐVC Rķ}gtnV4cs針A.b2۵~Y&E,n<ͥAGܮ1R6jɠ_֍}`E+.nɝ AVK9lk@hʣYПzupf`x<Ӝ'c/蟬Xd؋E=H9>Uő_ya? 2z)qT <316?kpkUxg%¼#R.NUCɤo: 4$5h|5Ќ'_`d2.<2{0Ӹ.1M_/h`dduûڮo +Nq7WcrLrq.4 }3&QS ;Bd7׏5|b: fPa^lgz_yMƖ:Ke?(Q)7 jWFe5G%{u?M?vȂX7i-l lꓧ(uhb-Ԛᇕ[jUct?D`+V,mqS+O/ ;2N(*,cаWUP= 8^j&p)*3 !>6DY%ܝKj/cnϵ-f@rl_;JĪEM !;Tu@/PrHlsu"N^wrГN37P DU^!;*yWJK;ג7="z獹 bo;U?v0Qqνp,~ZZ%CQ RqAe\~% rcw6_ )61KkQN:U{:Ty\QasGi"rȭh 3IF]^S Ӊv U1AͰolh0k}T*bj@@-d}g#;ʌ05Z4bmH^ 1y-oMMk(q2TGi߿s#^wE#pMtR 'c]ZwޔkhBpC?zZR9T-_elh/kigGx 2>P&B4h&;8Zܪ{*^F-ʳ37HI?r.I9SdS/dd6)WszUu.ȺC d)Ry^CkRJ*1k}T*Vj.Hh Mevg ]=鲹Ԁf Ǻa H6WjR囙!ڙZ;lɝ]]$ٖ72$ҐaYa~u=9EEl u.3\% {=f[{8K֘| .5憴HeO*VR.@b)4W>&9CLV<- W!LiR!}3.fenj@׾Ժ]`}vw܊rą@̣qjdn-2ot +smy.2R7->nУ4T$tfq8"@q5g[QZvh`; 3 ! OBi:4N2d= TAC={֯ Y=ǚsҵ@O5bHȄqe MFX@Q]Drq ?SCZm?0#  @ N19pocr"=xAi/!?"j8bffѴI~qL .5/ sWv0-VĖ#dF7?1V b0ncO덹5{  A1n+u1a|n_B5eG(1*X ,PW< nwR&i4q ɣi + ~Y2i[?"  kqz[[;T9nO~k2+F1F:{s;C_V^>l$T+ cN|Es`9xM˕@f(%]Gu ZWXFl 96͞(K,gqi'md ts(ÙӴ{Jbi|͊N1)R}&q|Im(.Kz: !3/y%Y"ZW,}SᔱGou=hrMϟRlw gr=(>Iȿ8?% _ 3x-CUY& / }4}EnI̒-c$R1H^jS?ˬz(6hy^K[.fJ^B]98 yCt!_4HV[5r mA{XREg*&YD,Xy  @ҳi{sp~ t[m*zG){$*";XCHA̭|R΃qbNfel^?Ssg*F[zneJD 3)4&V5뢫h'gk4[ǵٰ05M:{-u BfǪ <ۀЀ_d$DWaX"w)@sȉGA O63aS/xR{\-L_;^hzBx5 CgPm@1vzueᾹ|?=s+f3bh=(Bo^kmwttnO*0Xʤ)ͳkzeHyT >OXp,73yIvJE2߄kuQ )t$9S` ïa~ $$-NBŭV 7״7UOt8ݫ"5`_ތT7B0Wgk \8jkqY#ܕG3}>߳(<SLT Z ${RؓGF;ҍ* ~~^Paׇ7^ϔwrxV; ]ӂȜx< մu Y P\ǠeTAyb.z-wTHLKUlF^(>PI}K(j7>*Ω'zSzE_FSK=ݝN,OaO43R"Ϯ 4<(i}i#u;"&fF7p^ r31 Sļ`5'OKhhmSGlF&oEr'"zԍRӋb!USPv-%*gEZ,8`j, '6qì\!s`FW@κn{b2 a-J5o}MIQݙ8+%emxH2*[klZbuSr97J41bC CAzFEa? eu$BwRg<5^9IIWPT4ؑj ʱJwI%Цrɒ_7Q2ޅˀzI5duq0\#ւ{me D:11_laY6L1*ĻˎEYpb'&8ylsvv{dyN:mt t K+5=@T >5$k5Dߡyk>liP/"8 SZ eي"]q&F,z:Q_uy 50e *=ּG ӟ%~]egbRe@^8u!fL)hiiV"Q0Tvei'|б A ]hP;!$ګۤ A`ohrQL dd#ž9gWכCDM(n]&n]3D | ;6Td7Z9 ;̹-jd~5W]Gn1tW2_:^;?[x!I\Վ9w#["ѹzr5cJ g npa K1(7ڙpv fR][+d/5S3ˎHYV!1{$ bi %G叕>(syNeΰ@>յ/WoTt^'2<,*lȨwb {\LbVmnWF t CvrO5#34 -eT tLL &G :))5#9[}Ec(%xL 7@ae( A Ӎt8ho!QGJRX bj8-hhI$btg :vG,00Z9p=8o:A0@PR )S$ҿrQT~){*m5R&h]Dr9oM-zlGVd=[8C)nb'kmt&6k2Q.r#6MfjtK0 Бa{0 13M¸ 4 sR |T[ρtE 'aA1>3 &;]\lQa!t&PKl~Fݡ??k$FHwh+Ŋ;iL~#,.-'1 D/qsW&ʰYj Ju LO[LDsA*}R)Z h1tWE쁿PLA85yw3mܞy^}.6^H[Ni'@L[! g*z,fl }怕3M $A{P jYUb3XeoTV[꣚-?MM8kԀT9?(M}ĸfB1'shy܄F j۶(׀#iZ~KG8?Mމ]#k6'!0e# FDNlD7ȩmM罱@YٱȩP @QlE~E& oț b<6zFҳ"P J'?(xĒc2T)6&/B[}]W:_0Zc>uUiD9mѰY$5v9U.S MׁQ v~-su8ИŘת%%irk_\V8kXe }ݍ#MbEgLԴMX:u{[#xlsYv,1ozJA`CddR!;wބA[O18xPJU[W#M}]ʼnK:t1Ism Ǥ,۾5 <Ƅm{iEvv)fgᰋR.܃}Rn[~Ԯ - =R֩|B;`U#zהj]l!t ["pV-,S]DETzSEY| (1CJTIQ Ɇ{n%G,KHϬt:ɱDl>]^U]U j7f-J55Srz.n /nGB(wqVSʇa\>ݾm=MZxċoкTܩGTMEmh jf$)>v3}F3H{{+0xZx+U I5QX_Pˤ&"gVm> hȂ$+ T O/bB dJ:1Ё(gG(>׆Fx ppRQ۞x hd rRJ^ka/42F6gk lv0 nV$O'gDۄ&pY~ÖM:Дhk 8}.w]1u9ыD +G7@2L3CH ,;C-4R>n+8!XRD.ZI݋{4E1 ( ު]lt_VӢHє9#FY\4=~7alڼa!pT~b1{( jӰOdYva[Rz5N̪"fba1 hѲٍPk<48,˩q1KYf?'x>LUaVt}_/?gb)do]3nn+V[Ѯ g|鼃oy'Sjݗ}p+Si MNLڳ l7JsWl+٘U.ك庽e<WxdƁAI؃qC嘥|Ľ5Rl/* >lș9.sw$+c79̌:kNa&xw&(Pgv5xZ,[I[04ܟtdp|1UyЇ#5GxFMLf6U|0:ؑ}Nѿd9q@\M񂜚qZ|7PV禰=ZPsHh*ZVPIoe"c!=IGBu"zN Ԃc b]|+NZxs`OIh;Nğ4fOb$`|yye_l -e?2hl)K\ҿ+qv"HBA!}|9GM!/y`| q^*` |0jJ6hb "0Q(Dui\ 2C>ѳPKi6/>TnhkYYI)&=hp_ .!bQN'STC^(qh6Z܅!=%ktAXKvުIr7:O"kS;_-כ ̐졄 `bEulc;کFӋ̓"A*U.^"q̄H6修fgH+tY?LY搙ybK@>)Lk01 dȐJ!xFxEtQY ϰ0Fܵ~QܶX{T[ ͳ#b<ܡ lp%ކDC ݭh!H KUH R9}!{LK5^GenAB\ZA +VQQZˤmi BI 1*9tp+V4xJ#jdyw(Pl FQRΰ(^Dg:f )B0;g3;ބ%Ƣ46Q递/Sv?1%O`5EĥΒ tv؛dx<^^|3sf=;wb!s.zqQE 'pd}:5J3>Qϫ'%s\EM|dDSny5F7q t 第Pc N/0v;ѹc~"K1`݉ߖ{g2e9 Wl%^ܫ/f| a6:|s舂CvQJG.2wci1-CT3S< GrPID# eȣAfkz(ӒRK[`{I#ȯGN+2\W{)0s}xj1P~k3BPLY C\]M&ݐ@" Vo25̰~jOt(.][iHs%Y/{ߪEtn ~{}۲E+={ t٨+Q3OwTڜipn56*L'H9 b{iGCҹ%$:ioњ bqm}R6+~.+JF{R[{] 9I3EX3wAJ."aԤj~l0gTRXv:Q [#99v^\7gSKd*UKa{ ٻ(ƏOZGESWF&R2,BIb`橙T\8&GwG;b0CW2,َ.=bGac<4F"XN[7^섡Plپg{+UIϵlD<8y: .#Acq]U* ͸'PVLsCVW)76e'^OG=!L(!j4pAP¬ {͌ /uy .;??Xv7?`Dq6i{j8}"/?L]~h=Clf;-4qy| <2\S`{tی@s[PG(@-]WښoDؙ\UYߌcYSJ x4!+?ʚL==<=\T;c8E^ޱHR3{W@C7y[ Hupk rՅvRZ 9RҷE7;BX:*r3+u+#֫I^& Ynp%5*w4}wCq Ae +%I'L?c?iom !)'>o%s p@o(ȄŪUa1颓n Ux&\<j~ӤyV)гLJ$*l+nڿ0Gœ G綶"/rĤ26=`tQO9+!v^ f|(x{%!r' ɜ$2ngTr5 `$)}'홤rb{WZ&ql{ر<-{-[r`7 /7m]}YŖp:e=CjӿM)8L1;^iascˍ5~(>[DQx"JAR .r"nM4҈f@yb}*(fY؊XR\a٤+46ul8JqxQjgP4Hߧh3ۮhі'X@G(["jAYj:l`p6@w(AE`YU#7^;fцObC!G_`WPsYwdJ[JJzVQeŢ|uHs< 6$鈾c,T}En{ׇ0>sAvE br`ہ@-FP0LDZR)Usc.]9&! U3n+ υ0os4O="Xӂ mG+Qԉ=wd&] .ĆVI:5g:J{j30ة~d/d_]iI/Ć:&ljiˏ?m?2pN#tp#_0>߼,L{Ʃ"yRDf[y::[ј[(oO9๤P!L+@i FGΖY[0ؕgtXicAҟ1!X\BMJ:)WʖHŬ*-* |yu~}TR)SATGOݧ q&\u>&K3D^cCYz,"z.~bM5oDcWVns>c 3'Jq@/f.d@0v`,2UGąY5Y0σZ&~ Ե84Ui/*6ȵgZݭ_@8Iœ?P*UVV-?ߖxLJWXXQK-]1UGG6 L^JdFA9KIgLIw!S8k(1YF;ƞm0J¨x+wCj (\ z=wuPtA,,F:R1IxR([" Vmۛ 4o43oL.pMG"Ogpi8).x|e:Ԅ](}'Z_(P]>> ᘲd[eBUWwjJ4D: Esc.|S4UcC蚂^\.vk4/8uO.CRvHa!2gaZ x}f`6W:MMzO(5.=c05<Dd4#b c2ZYXd=-Ufr~ 9di&e3P'+{w'h \ކ6Vɨb/rWޒ%QD0f4zO;j.aSaK ub,RҵmpyZ{d+D Vy(T+mV>1yZGkJx`tҼC tҐ+,@dqo?jyɻw~1[%f7f  ^6>ί48%}Y$7^,RYOe߸{!PfNoku~- 7jGaa69EǥѢ{P?t%/V}l,qBdw"HZ NtkVlR 0ՕMذw9%J9RXK mZHqqF̥8S=2 >@܋ͼoOo_^cP%knCsZ 'ǖ'3`?{Kh;UJ'e-ܱl=}2n*V7jH˿7uG/Px "om++Im~40gS߈դȶ66 ן'B@"ܛ}GgvfOQv3O@*v jo nCӈ!qHn2d@ -}{ӂdJnEAKt#ůUQ3Hzy5 3( *#%,"fEGןsrWxi5=<]|Woq%)۲,^0:A.h'KC j߉FWŠg+) KTưdw朵$2X@GTλ]]Wv!Tzڂ#j/2FIF 4 4^ e9܏tN6f؀ZD0ͮ-LIm9+ē5#2,f%rw)tڥVK{2~XQq11uqy+t{skʗe~ehVts Us|b&oT,ܾrJ]2:AL@y- ۹MNkJ B dpgBE| d3g9n;,t_J[0Ӭ.uJ[\{Djte8^mCͬ9Xj٩0]Ҷ^TؐG BcMgd m[66WLɄ/y)ISh^t^v7VV'},2Xl׉̤zJ&ԫL'Wʣt4*jA7 ۖ@1*UPՐ,"yJ?9g~ۓT`کCM>7wANuce_K%ƋYҒX 5Qcc{nSl'[*V2*dh^y C7` N_(nI~SYښ $B-pX8SXpw{IԒy'3ifĞdNC糞j!TR?3_wznZ) fN ڠQ%|kip1-kborw\El(|өZHLճi% \2GUP}st$\ЧHlTAЦ (j6- Q@H#$Ku௒^ k'$ L[(/, OqHNTFfg x5dRnef;H<&'>B</9ٵ-rn} l:@,^K ;Dq,._W'1RDb[U)"IeSD eÚ#o-4cz;mzQl#}dpX!ؚΒěs߫HE8i =}.BeW@kJ;dy: 1FIŤۼFA(aw\ `dyAL y$;?II($ϵSDb'kȽehd~,keHgW-+A-&űIU%U쮥 jAEHN9lRt"&@G3S|YOܹQE*bxx] ;);Dė]yiA4y0?4V/TʊC0P[Nţ()ĚC ʥjgٙS%J}]u+Q QR`{zy,ag):nrro+R2"%w@MȨHL굠̷m'@#I8}/)>|ы1VrGnv󽠤^_hR͓m[ŐAv'P֌C@/ R& w;A8RB"TK:zc]@խٶ[D4!@:t?,ɾty'U+i WQ B/`cYc㠹Ox8'V}i0C~Om+kal*-Y%.~qBJnf٠H޾vPᘆh Ve8dáJuy#Nx`[`^Hٸ5om>a;q/-n* G&: G?DqAVK|ECҬ6Z_~ot%Fg^>g1 ˙39&ӍOwN3pl`R]{Bژwh߬ӗɑ;Eü }ݱ7e"azYm%~>Oo~gIgm4to!bvOc. 3ӖAf$.1c2 y%䂞K*:/,_5Y>KE.)c+d$k^rz->ݨx~_R =lmL]=t#z~4@4nDeJ=(!^*s EҘCE;m(fT1UĨD9!PbэI.ejyc: ]HN7zhV7 [U?qU'@vh ‚: ,𪩙% B$k`MCU>F/WňYUd/?31@nS2Z1~]ρeAZdxuJ.d.=+RCcl?ށo]raMܥHsN 5md4.k-~xI=f,IRۗa)@M{c嵪=Eܼ{a! E@:VOu-&/1ci <Gy ,?`=;7D֧@Ղo*ݐN! Dcϗ,_T.ع8ߌSDv?H!/ 2q͵J6Xf:J~%7O8),&ϴ1s}/eU   F@9dGD_+ɘ}w)f-’~vfG "K>6kRZ2\c (Bvp[O&M(gWXIO'eO!lcFQܑ#25S|؏Fͥ WhȋGӭ89W=dr]NC>ilK(vABQ( u6VhgMjT$׾f$ɱnr ldNٽL)`ǣv=GvQi0|5#u)Sd+xYsU|j|vG{ oi'l6b`W nH҆m #dJ;[Oh=p.oDvH tHsZ=kbN@}n d?'s>%2mVBG^ɋ',$7(dƼhȋ woGSLW2^TT0\fbr>LFI~Y.H<"j鍩DQI.0fVme|%$^XwB핰d Q0?skM ,@7ѹ^7CU?M e0!G'08YsY~3T("F %PW4N9*Ϲf" eCQ¦e}׍0/δa:YjFT>C0b( 5R.9XuN<MէǯEAQ4*PFaʧ8*ЁLalFv@ A`oJDz ITՠgγ3: -, ڹfɈkGP%X! |N97φ\Z ɞ scE+Q]h̀lblw "a;~[m?~QFSSՆ6PS 4S#z.ȷho>Æ)SOLhY닗܅5EM?X)cޯ| bQF=ĩ.BhUM! ~OfTN=Bgrw̄ {V_8%@ք[(ab`9$oXbI2FƾU*hV+PB]W{rhtg9h ax{E 8yǛ 79xc`T=7BbKH,mVE1%LcKf_m٨.G&M%NI˟kqp6WJ{4+SNqseq?VݨPj;ٰLDaܤ*qY e;e8˺uD撂U[tHo{zCpp܅0c@Aj*9j`_"} 4޻7kk#@&1-o<ߋͮЄ a뙤8sǦ8Hׇ-;R▣;uQ/"7bH-c gUˆ9$+ 8'=OZWܩZפ5KPFHA YGhZzeI\W#euMn_yM5uU ǺѧlpZrB`q ;FQѢ,3ցcQI 9VJ+^EOhc-*/`tfaW`tTsQ?NnD !x7y_uBږV5W0v!&6˹N4zv큶4,1Af>}-oy7 Xs:(N^qAl##vdE~KMd$襤fibWƯr$A{#&%]o7KF/xQLZMk[eO`v.Q\'Db* R#3禘é*gv&W|xGI4oh܇n4)%bE\%qG3Tܚ^u&u iY10=>)\6#5"e>2I&i4J:JKjtTLѻ4?GKJ=D[jpZʒOkO.(kgu,C$Qo$h 8AM[폹]{A@U6 L }Dn-Jw8t)i]F|Tc>ŮMZp68nwzAW*U/SC ּB Ziҿ# 'eWb $U/RjC/} Y)jPf=vbx0cIkQ)ƹܥ' 4IX71UX_OV`Kkc$ma: R#/ߏT)QmYէHI:8 mOdDء]{J TY̅֌v61]noBp*"+&P^R{ᰥe`pt#;Ȝ 10DOܛ3!Y83Rk98!&- Qu0w,xCcU}}ؚ"v!~9YlW })F웰zލLəCT;=8Ξn|(c8l3ꊶ0kǧf-2 H=߰eC L; 2 g=@w:j|rnPTylu2MI?ԉ!+>7QMp Sk7dv6y6@nJ/m 8z qVnj龏:ckV=Lu)ENěD(\GZDnB>:370~ >#ТeMzLiv'cXlF%NæZtDS7VfeTp=Ӓj7 !CKhxs";r˩4ݢ)cu<$7b\]YMZĀz0ɾ w]} |Td%زLXOmԑm$0$&h55:jR Sx/`ZL% GqGSK)#y5cQiEn&q(J1!#74ۙκ+E>Ư7ay&=} 2CB⮱h,i>[}yS>ݙstfZEY"=ķUaoTԥu -䷗Y@Q)Ck0ʹiʿ ucՂ!;a9yNYqdޅ {q+piFMfDN0&iؒeA'!gh1}65EIz:7fMsc^ERsTYݠYVbT}{Nj4?}5Ka$kL3:k5N_%rg.eF gfh҄Rx\R3`l pLw 9]KS؃˟ρQTo6.(z𵯈VWZuwT +oea0Ne\uj- =k"pd,r#H pј'~o]}C'T`+`05|jQWil?zsOO7WK!&jJFo n I( t=yiɵPʺX/,93{v4}\Qχc8؆30y묶+޼E/Z3oU%5SRs_eu8$F3?gvt V>QP XPnÓ ҔȵQ ;<ՙ8ҺC6Ym_M!iNv"Q f'QI9zìC3?XKtU]翈6vf(c' zVb:v_lˋ:@ IrFx8f,hJHMCMq~i6 [LL'a1\º@HGMYxvO(!d,ZQ_^2i(}yYo=ҡnzMmC-Ò/f\T-և~!|vB)t\.`>vPM^zF>7ggthZe}zC_K; iFkQ?,&%u&&9̕.:mQXSކvj$;J #sSD 낸;!^z71`߭ kڵ%| ?BtPMʪm~Hл,3KB$" ,[7ʅ [+gG B'Tۏ+_|ek ˖es(}Hn 揺g3!>Z!\`JՍh@E.h0ŽWDkA-8I+MVbkTCdA}ٸ|:Z`Q5 .sgud@b DERtOQ9@owVWηf<("8ObVIv2(8,܆ MM*AR-U䒋zBMzIRc+LpekUTTSRz QZyx~y=FˤWX;3qxblZ GvHʰZJQbNp%[le}+9s&7gDO&"1&L`%Ts;F>H2_@|V(f(q]C7Ac.aD*^P]4=MƩ[ek:^Kg kvkUs}]Qg߃V8Y_PldUCa!ܸc&Qr#&0 qAg-vĶ4drau c6\\o8?yr9!ܮwHz#U&^ojvr);%F&.(a4p"6},Y#$h~w|x.'3oAEl"Nd#1N9Uuz^veqaui*'Wh5%/ulaJ/AFdd&bZHU>pHkiz8aX!TEUCe01QјF$T&Λ~Ⱥy}߹;뼭wSo,ydW&3Q07El.4BXLC@G 0 u"3?!^PX73gOM1ߎ(6ND?9+ @e2('/*KS ԲDaHӘ[Ei|=46G *M } /jhHS%zr }3jI պ5}XM ?k;s2pXӀR+|\y Ơ</P`=/DpB93#K@CS){D+@a%n)iiTCr8 ]a~2E:߯aӵ27mo)-}X>_A7S7QG*5cxyQcӿ2$(c)Xgy "4:\D`5 (7ȼ8^P=t, FW2d!aG\vp'ubC4r1/1n^SU)aJ$wqJ7qRԢ |]( :I}}B{,OAS"T,_wC$q#Bhrv,+/nygB: R`{FD.zS=n J}^vO[5Q#iijx˰ێp|)%ThJJ kknj!Y36Up'>RDä!.jl2EŸZ=EVBH-a3 ߻Bu̶oC2wMQ=ًbBU!FrU37+^teH0Xřh$]y8R1s<5ixFbwBQO Ŕi+1FS> z^(&'($ V( DWÂEe?sߜ01`05(X`GsأQW9Ñm uƽ\WI U6u5qxʯ _= ~9>7ȲqW9a4O˸>%,ָcJe^s'V^,3Į $_EOx"3#v|u‘ұ~nZG}JWNc3{lE6N2P&*OcYϡ%DzLs'>Ͱ!j$XQ~)#/~ttSEzuz I_ՊrzJ8_;7~SeƬ;ppR尨-_ɧl[N US$t!R[`c`jכVӤ :Aۿ;d{ί w|Y/_SbeD{ogά3Y94yC> M_i;ZZ}.kA"Pr8FneT5L>ZTL%66կv>M@F^w++'h\WP ^?CaZ|/33G fo&mܾ/a[έn B$r2E?pxz=ЪV@IpٞJ*$PdLQ(k+e ̓ #be:.w˸96|yY!v+_j5JSkDyW60jxcacWl5{w֖8DI64֡Sr鏜>0YU !q7Ln;e=c.PCZia 8=T:_FG2^8:t&+tReaƻe29\wsڇU7y Q0gONګ.4DYʒO[>:4>U9bjS7h3xw< ͬofHM :%'7lHJM: VdDf2r}cd48`WpQe{뵉7=lx|4ጒ+)ox 'Y8, JU9&7Q>B`9yא 84G`o{|j.'T,uPGs*3ۃS+.NtnFn~ =&sݲw$BG.E=iyhN&)uj汊.@iG  N ?)u4pM U7wtˁ3xQH*^hZIM&l<2kmbbVq/(z?i9BfD $;x^cQafdRm,QRxʘs1qMaժDh %yG،g0@N7p<<և)²Ev o(sh̤ ?In%Oj*/ Q% dE[I};8}bz)^B1#"hȮ|h|JχfNS=|/X\6<Cqm87#|o>~J{rsQ'[4&:*dq"YB LPS;2e:׆zު oONV;RbmE%-6_wKjg j3ۺ28δ//(bϽw:CAQ2rk7?q ׳C(6F1ۖeLS$.WNYgawTϵCb"] +_/ר0!)2! Q5AV1,C 7$KYF`Ᵹb AuCh°FABO1<y΋^_ʠYڛEUCy)z{~_P۪G"鐧pE{8*՗_,.PXvxlI*=t(SLN??XsnT&7oFqѿqQoabYe0,% BQ6,Y'L鋉ᐓuǗ{}_D0"`mjL/Ɔć_<$ `"|׫a" EjXq cЕjyL nfo~RwlDxU96mK|ZA/oqz4^ Q<Tq1ɘ=P'YB^O>{\څ|a1 33;sSi-6y߄̀ae+\m!$R;?:_gvg]Yr>e:kTxBY\m|ֱMK[FKR df:/¨MaγlN)%qoK-N[hƒr+ lLЬ~b(\5Pa ~C[eSXrYNԿAX{@둋8oh0#[&nzǰugU1܎Q{z%K ׬ia̔*xIr)x!^H* 9tOBLcBJ1C [7ͺBDB ' qwƎ 1ͭ3XZKKzIV÷d Ňd'πxGV̺آ$7cc1S4cngp lk6%w)maPDqtF:Ήi 7M+ .*Py-1DzY'4뱧&T_Z=c(wS.jwfX^_CDO]ܟvTXݞH;*DPB.99tD*HRfU?hQfZTWXThwSLhe?%7Un W(IھPnp3GL dP3_!_ 9Z[oے,W'݁J:c+jymm Y[I/2ր'diJ2@,HK':H+eMVj8ģf=SWMx}TlD-gHs,IJoGP.[z$̅'=/v A>\y5JBzg>q P)]T_R?9 MLjnaӍz`m>0}%= aӁN&B`U坂 iv!_`Pž836$J7ybsjG>cVyнQW5ǓAĕH>K2pA&d'n(k}j$u‘pi(AF"ZCqLqزlL $0ȔH@pU]+4d{} %3Uܘř J~oZ>Mem |4V ë򹦲Ov<#!65 /fꈋb@kLmTA52 $W H:d 2fQw+iOGo*_4uٺ=,`pGeKb̳Cp,&߈hl]WycL o&AKP[G*ϸm*5Ǟ,Ut=lՄO|jL 9$[Tw. 3@#9!I'S1;,.uPY6;.I1p?Q.)r{6>QOל'jF(UQe1më:\,vR%cQY{qzQ wd^7Y78_}Y?&OwpWQ<-Er3}zS;9g7j 0Wk99,}*[1<_3ai yisȩ/fT#2"Gć[qi < SГƦZkua/%Flx˽;eS $>3*CJ)׫F :1dx|`?eB'4d@Ă;H5:B$#2@]p.̗tڌXfÍ[BE ݣz.H{7r~0fdz3^!Y;ho˫؜ Gf>_)yFF1tًrb*#RCj_2e&ATl`#-.-DB!b](1Ǯ4^.)7nRU^}0]ǒl,QC@>iZwK̚eZ\ '?xfG2%r)!C݄ɌiJħcW^H(f}k|?[:i.)%ifJ*8iEY[ƺ%B FgN'bZQM4&RTnސK161P]23b=}&h AKUk?7ȃ@l|$] $iҩF9N)qYvFՇRoxAm3Qu&ovzxa &ۀWQqk7ِ1$KZ{9'u=G͑(2aglzA&/€ކ)6詊PB\,f De? 4fJv)ik&jl{nNm+B1LqjS"NQs fa4ź>?_6 >>$k2&w(zZ O3ӥ|+5D+kO\|)eNNyoPEu; 4Gb |BG\Ei ڷ6.i}p6楾 hpgn14U^ WrkQ$4? `u3H).앧ڍ޶?&3cj"XhE CEҜ-O=3D,]]`FކrQ4)RHB.}bY+XWuvdOfQx=щHb|?t--FM:qyOQzyu-LЮa:t`z /DJƉ#'$]½)2uǦ^LHs}#j'dI3VQCkV9ObWp[!S|/b _hxT%ߡt4ډտzww' R訨c*] Kӷl'ȜMs 5HllJm1̎!?06qBVﶾdicYV;jHz\ocH~"גѱspl˺Pǻ>UHRX^;-s( _v5Ή"JIF Ra9$);V}Nq)`ײC{$yykUVkj~k_~0/ oH,0Tki lL<Ƕ&4F6`AJg8sٲNdYw,n!>hg%L@oP.՘jF)wj{^Çe7G9bV^p+&U0$Dȝ⺣ȨP|]y9}DZZwueE4&Z)g h~fB ôD[c@S*!P^Hrٱ>AId)zX?ǿ+zjVϯ-b娹WOBԀaߠ;52MtyIP&}F(GدLGc'@u+1^]C!Χ$6Ou if  :c]۾ yY1Or+Ov[GVf[A&"ȯC4?3"a) U>\byd¹=:t :",lp*'WO|*_`{wF< 8hPMtNuŰC,x*Z?F.YMUy8 EZn񥇫u(E'aF(Aw@+ˎgv2q>Ӕgpt,'F -p0.7cƀdJ)2Z8~"]ؠ 쵊[P økSSTf؊`itob ծ{2FK2* !V#E4?+^XAŅu&%*pbDM0G8?86a@ͷVG!7J o<뭟MAaJ2w9{lq;Sg1T,>X-&U.#Mvaq}}1?V6襘׏"9_.<\|+|nwAUvO=P|=^l!,A|Kz:%0D,M}`+#匯PdG;7= }Ӣykq.HrXpF-^Ŧ1^@"ЄN<԰yٳ2"(7o+'db݀'E<'UcGTMݲN(D_t{QK];-B,)s3*.M!M7sV|~YPFzX×@:Ľ7b},'F4ﯸh: OoqN[f& n4h+b߸ˣ\BCx_-KIuano?zJ`J&HE#Ncќ-C2ٞmt~}p1c2B {r͘J\rm)Ur]}G3* /-血 CЕRGstN-%)VKdEc4?(qOӜx}Ɏ%Mq L~vD1\?_Vz_ѢYS&5jܕuigm^ 7:.ԅP|F*礛#+IisFd(mnX᷶`e[?TeٌP|P16$=5M+yYR~Ϗ&LyzN!!d+>7vR ^6U}5TT^ Xߌ|"S#~pؕ,-&WHv\ yuhA:(/)RLHYS:ee%ɽ#~QFzTM[ 6k13"9-* C'|m|~CIdT_?B08.; LUN&[2Oѳ/${fUE-{W #/ 2]5*z,q@ro$mM5S*ql 5zK5^5GK63p^9 itv"{ U?4 5 ӛXVz5C~ (&"ѵt0^;Rxcm= ^ ?$ZhiOvcѳ$v45IO5k65VK:ՄBھ❕ pJ_jbKi~:"~1of+ =Q;b\ WORcY{vFq<DaN-gL T:4e_'oe3n:z ]E!'Dn6A ReB! [4(pCOw~(x 㔥S _X/P+H8CO%0)Y1)rWT~|o%fCwܩ;lsMʣM2F }=ԍ?atT l5VTN_`IW"O/vLpI'a0tJ[])Иzg}%l,E( /-y ?9ՓLq1)(-nU8$' 5S[q 2(D5>ʢ=UP'xKo"bAƳ' EON?ż1 .&{V'rdlyll}<Yxy$WP"T5;8e1CCJ B1,-ϝ m.0wMۧ&ydgU9AVL5$@=jspT߬Rh, n]Dr-w1:ֶE11ok RQKq1{1vݟuUx4:ÆH6:f--"l~'W7.TVC ?r n4g l 45zytgq=S$&3#lYET ,ӟbi+4Dp]~y>ϫ \΍&*о5 )l:80wb0zmKJ`k5CD%)wN_`TY1|LVvyefG !21҈!v79By.GoIQ}S/ΙenhAo\᭡&`}5]e%\Ð!UL/>fwdzK8tQϯ(|iOY~m#*R=B2s>Miج;QS)s?1v1M\B ]VHu}q0N5LnO/arUQ4#Ʉ;g_╂/N9kw%:Ξb ː4ۊ4ȓ :m vλ^ٸ=\i_"ʜ[[`kݼj\$&d*)=T 8܆L[q`d}+[W̫莻hzCMq:c%&F Uk ۘz̯s掎7xOmَU;ŕf vi; zBŸ㛗^UByuMBNp}⥂\!ow|-(|Nz=ϘG&CO2 qc `rsLzp !>ᢈV߲V7 ^{*D l=kROh}'-*8EgVIe)~fHo$^j I]a4lƯj:r{-8D4JjM *@&[2:?abHyE>am uy?hסjg]TBIן}Y6C}>t=Ej&=B3H3RgK۶ŴTB9Fn1zjggh]:_2K??>ܴƅLd?"mX}H ]l_jYwB6ud h:T>(}7J8Wb+9Xbs)X?P>Ggg!%z,k3Tb_Fg>U.S/tZ}- lܻ=O|e(!7>>XPG\X㣆5)tʶC JT܅+ .wHN-g1ĴrG"3E1k-PaHe?K,¿X4O~%b.? /GmjtlȀ3s!4'#Wʫ;y<*yԵ0#lT;h(Ĥ}qV2- srڨÝ4kf >lۺD4Q=QږDq;LjaPwQ7T_uF{p/I(mv1 iDβvpA{8~檇Hg{i.~<!=& O%F*! dvO0Pl'k*q7K#gjBYP89hp=Gl[䋝gA)mp3 )3aYk7ī3(;LY.10)ZK&Aa玡J(=`W jLLlBQ5T&?3N$4d i#}즈aIz&rmO ͸de}gVf%KPD 19tIQ)TdU>*Qd: K ^(0)ea0uT o3Lji| ER_a A{#,:O_^!Zw$xM ,S{K otۦuQzH.8zжS^<UMyM!.!:̤tW/k\O@%a+W7h3Xt=)EzHZh~/VI^+ ևZHܘ<*Ǣ^ 2;M^# jC*I hg})K.@-Ra2=(R4DaRVJG>7{'f[َ5 &\XP/'{$LyC0*WG|!XԍUL3tgiBݓ'_˃őɅ3\Lp8kRq_6U'edbw -C8;ԑ(\= :c"rVgɲƑT \0p.PTs@f*]r3#ױС BSqkR:ӣMLzʱ %G ' 9RltN:#S~șzŐYʸBJ1II^9\8Vnܵ1VI$[f&i05KQ ~l g^͛zIZxzxl7(L:{;WoG8w旤A:L]ļF<1~4t1uU"Q^eo~UKQ0g5%ΡV4(E@UA9}z=]CT=խ.`w`/MdK _&)$~b|?trH]5Ol^I Rj_F[1vuȒ[_N>&s*=03'k+_+9dZGT>obSYQr-tc5 2\܅ƨ[6vN&3`DƸlt5hL34Y`{2G8o!~ Vx޷*1njxVS`>E6b({aܤ:kEZHk屢k@f'< ]IiMdžX#iu >ѸYŋVUgwP '5Z+MAUr&PǙY).5s9Kom@aV(ҳA- }@_~k7Dt 0̜ۻeΪh,H$ELo`Ng<>Zkǩh!Ph_Hf%D'6iTu(bv :dP;׳x.v^=9}? 0tr .;#r n.Ra@;-U ^QW:Y.E$%H# MW RxB@,J( >Â#Y$ai/^,E|YnMO$Ր4֏mYڧl#ujPETC[8/G>uiν'Cj F9\$FC#ykuڥ;ŌL_`WRm=?:r EOaS&fia!%K>8NJ$ePmKU[1Vr=yO^ʙR, )o\e=Ou)L&Vteƨ4'ڇ ?"J xQP fS#B OODYIR!7&5]tGLYf@Sȳ$!=>c"ro&*zX֮~l4XanWɧRt>03'tj}l|b7͢(8ݿ $iBz F  f'w}۹Xmr]AN57}Z3eHKG%IA~^(sP^?pƞ†\{շEz-91qMx3|0@'MxCAr Fn&ɮCv!{{8=/Iy8:P ã`Rl'~Kڪ|*`G;HBg $ uiKMY>fMTXutP\8% V`FN Z(EBݥO7v%MnP9ouAxaFƖ+LF|7Zc6 nZlv6j0lzgB++ 02# ҫsX->Uٸ*Qh4fY{J3Fp ?ub-HmY&rHLTWl۱;%eڽ=΋m? xӍUnXOkՕ0FshP*3Z^|]m<]ǎ/I*]e] *'F@=z6ׯ[ܴeb1D%~nv̇2a" L;i]sjT [?" 絬/{[ SN٥k)'*PlXnl %[FbPXh?4vv'[tȡ|.=ou)+ȮBlu~.ND]39?ax@ ha)VK.Iȋ/o#OD m<N\MMC{)i^ F=δZv)Mb!&Öv+TWTϠe[]~z ٘QǢX7tNM!nTz T,|}ΧLw,1gGc$\S9kU{L .M:~f%_-o,^E2 udG$|,'}pn)筆>>jT2g %< ^*d8BxhEEOOЕBمv^Ha-ֵp!cM(23yZi|IOo=ӔOR"lAxB0P=a~"AKs,|n:x?N$3@`cvĘei(ʥ _sV8eŃ)T n8g9mx0u2ɂqF&[[$hBLYU|Kr׈zr M%,Fvǽ7W@:6tTǪ K`hZElB%+56KRoLK{O6~B"O}vzI]Մfm5om*wtTL_P tč݆ ]D]Ubb J4iu?K[x~a$t-CwK-+W?Pc{R7&3Vx3xW[vѡ듯}[jѰ G+ipBN< (Ij+9nF}Ū.nyn7f>&i)&} ĕ)8%zD um*) d|a$%'# O&>ȋʘ" ~B2N4yV|.E&y5U;i} #|)Q@8wD0Ξ(83MuCDʱ }z(o!Y~K.P?a|n_(Ed:}ewwTg##z ;/MTJ쾢]4{9;<,&g@|Gn*gE!k'  ty2 B$[9r@O 41yAWFly#K *־yr3Qlg1)<@0CXX*#:%}/ *n˰73S7)_Q28H.D>d{M'eCygwܴ&˛e39PEFVe ^IRsXyFʟLu)U:3A}~Ϻ̨4K M ,PI>5Zf2Tw8>\p.4TsO#q>/ZX3㻢J|+t,-COf)kJ ӓ{ug3fl&WE)K9hN)EI29>qY?4S>Ƣs?f nUI>-kj].Z1/˴LQNAF$f&4ceDL^ٓ65b:qb[Wxu-A5,Wvn;K,^[ :R)A25(Oi|d#Ŷnppgѯ'W)IƿN4/ b-)p3@{w:`@hqcc 83va'H&`*0+XƅTjmSmWJwȪMX?0ESݩ8 b3}\~z ?PB>xeX $8k-b<slL-dˈvהnbOiq}Eoۂr? =R;+w'2^=ޚ g-^l+gODU[*ыhT`8yy`(c6Yᆘ ^Oqrx| 7\8`4M]2 op28A0Mbg]{`> e+ls(Ny|J%U=$9sIo βGzu_4N}EI]2ane?rsv3 p_]̥w}f.Mԛ>SW#[mi60LVoYKle4>1j0(afZfFN?y9~(S ABB=Kvø.x:5bGiI*{xЖA+/a^ҧyi^d $twk J *~PَP٧g Ua> ؗxyK𲔺ytAR$V4☏ Hj/fc [K,Ť&DOXĺak8 )z3Un ՙ$٢d! 'a*f-x"eaW5gX)NKǷ.xn<u@<, N}4Dj( /YUm3O$"ah20h sߓnvF@lQGpHو.DeN VRuBZBqscV!Voٱ,{fruxBeF{V#=ib}x!xjNJ&zl%zX6j0׾Xݒ& >*A]~}66 9 "܌6YՠKܗ\e %vhxUagz9.ιzw9xʤ#;:whUCi0B%KuL$yh&.osnz8iy3&r2~9'ߣ^'T$)T||);I7I"d!9hx:+V] .5e#SmCd9h%_H۰ \ѧll_Stf'aMQ:Ͽ= K|*^.NvH|dY0d9nӋ t֓V:ȼSrka'ߍ0Sm`3:O1?pM᠘tILC-ґ䚨EUЀb$w"Z {)vo耾j̀ҼDMCkaSFbBIHM;4M\cO*EhAh;U{ g '7!m?ᕮ/E<050[ 0w? ƾaqaҙSss6 = ΨSWcNGWm3k?cQG5ϿY)F.ZT\%+Ȗ߼cl?.A teGo-]Ռs9mDyc2Qpy m{CF⃾ˊ ?-߳!Rb/UPR  Fx#_m,#_8p;24']gcLjzM),yAw#, s?0>Wth籔0$,miCd E0_Sat u^~ߑq<%=^,5JdJMTh]"cM(Duc i9.-3HOeiNwB j v r0n+ =az@ʁ\m'WZQqu81gURQA34w>'u6KŌL/~6/,mbJ7nO/AU_XiMxo* NMoX0yuϸn#Sjm/mj 8Z^=̥ډBeMuP 0 7x< oA:%6 4"_)| @I ǒgy o$5(çك^`8*VwW 6:RRt5.Z*MIiR<~ 0H䊽_a@>śE 衻iz~T,N S#FRB,|/ $EO }(*8Wۮ!`77ȏDlαzG נwb]"m)ڟdOl4RvPoFac`ɣTEia}΁k暍Y[@`#/Kf{ASbM2H:}w䉦_\pC ObڣTvXA9:Ijj8҅Lg.uDt ˋH^7YRăt]BWǀ*}fX*|X@؆C+9q{I,fkPdf5򝜺?GLbugWdy6A' D i~g$77 9n W2w=}C{3"Iu-}[CJ PJbBAHN^lq1%Է'qQނ:,&y_܇O?<،s$醡]Pd4 9<{bdIndc9 ok-Ah"ֈ;MosCRu[E: Gm`C}~#orN!*ɞ`2dÈ j4#6D0ތe ,&Bgwt/dƖBՏvLǒvsǽz~Dk~oNg嚫-MTÜe݅-X /: #0, +CV./z0 8ɕhB5Tĵjt:}2vgrv&j\ YVO1iQT2fKdܮ0rnhx(9?)z IX)}|O{#?ĈY`TiMoh JkgKGȖ=HBJhog+e0Kau0Nm(F$aOAEmt{N_MzG.5Uك%C 3hwb ӚL>^~yN(=ÿ'CD( lA8 s~ư^eW !Kk]!7ګ:~: K$C*e("m1됭fsV>Gf#5յ?1pİ_w"y$G`=۩J~iqxж o3=( k%#(}nNX^K[*uF3B0@@^|DH4v 3#?b]PyF ka};}`zb?KN.)v`tqR}iUbO6ʔrk&+XI USO!0Z͂/SxFʟśJړ&4enj k< p(I5eaI {У0U&Pݶ +t;%۝hs8%|&Y24z}apP Y嗡&N[I3 CQI CL9vVH5'bV[PS7BstT8uzP*?`B dcO].G`ĩVנ7fW(.DsX qn{a`YwI -1{54ʢVe$SucSw@Kaafv,rNkX. :v }mv L ?n MBJu7GoC\$Uf d1?724"QF~ 2\Mll.I1 ;w-Na~ȗx¹g/[bB7[D%2.K =O0Jf""oO5sY~ůtP«{!Dڼ5m6\9Tb g>Xဵ2:mi,/nr?ݽ`othLegL";\=l!Ѷp$&p !ƴ5pϋDUڕ9@aX,xxTү$t·?"ym%49n!y=[k'T`(]=5J}U4M+ 5#۔GBk|4#ȸi[#P .%YډN!97%,UBen8y9aiRkW =n)f{0ŴZh^=]i._٘0=h"C)oZ"kFՎX hْD~bl՝It d*|!Qċ.ڛNd´B7QShqjD١`"x`7(6 S,.4 0uD_\3gMO*0nL PhRvtBbԚ~Y@=;sK4-)WɭjW j!t3^sn3Cw \cGGp& WsDt"0]ȷy@MߕDȱ$dmwR˯f0XC`Nي"A -9.$EH_WD L`Ƕނ Szڠ,/[Vr W? qHs^׼}c-o%̛C g[lIނ=uK!#ra8-wu͘mrr(iŃ#PQ/-AZ(-=]iɀ"Dr#>/e"ltK "<8FkO1} ql8sm_O zb"tX Izx:e$&isQ[e)oۺ @e3ab\jDhGuwVWy:뎝 QI]΁.\+XRMiO4# k2+Tx]*i,KCvwM=Uwj5sNP60B?HSh3W;h~  gp쟸D150rAUǵO@l\ 6-/`v[>xF: A./Cw &o^6@fXB̍.J|d7 [{;7LD𥝑'؉f$b4@uWCvC/MZϲ(d688iA9،Ev̮<`&V1ⵅ$w yqh?!hYխ1`@f@aָlld`]P  R,=\zvEK 0j5),©? LęسP!uJ3;_Nс7JĻP~8X-B\Slk@ x !{rP'E'+$Q1jYT{1\DnJ*VZ֭Ϯ6 <{"9 iޥ=9O,Q∣@8 yΨn'9>BT: s >TB隖*lq6ۅ @Ucny0`}3a]CE_m`X?bCOY#˜^fuk"+ ^I6Xu:ktrW!رŶ aJ!8ϥ䕬5SCg|:w3_ @^z8 mCAᲓl ,UT":@f`GXe;6Y!Z>^<ٺ:Tޥet,& A65b󒒲I3cӲҟX 7KK61 = -d̊ﰸyǪYKe{0`#>& 4BsB[<}$S 0! TK+5/>{RJٴvRz.գVЯi}] `޻ 癏="@|WXy@gORPe$[;:#%Ba4{'`omkT֮ق}Gl vT3톬 % F(3iJX];Ι!fX5_w8C$V\cY6 IwYh {ϵ'&/K0(J5@z EzhjZSyL٬<;z}ip*CD wn۲d0<0Ʒŭ c9H'ʜY6tr%HYv$06)po 0O&(FMrSmA؁[ii$Պ12FvXƒHL%ni6JTp;o]R2W=En2۸*3ں;5NlՍg XrCz"(W5 BztD}wo!4[ST{asGO;rc..x. lw2E%OY8|O:rnEq=-znn>.uM*%~Qzyx#Ie _V^53?x0MCwsJ)N25ү`PKf3"U.>p}i;HCwaC6Ѧ5(z}HFl2g]p7;0J扸_9;h栤(4oh095d~\` x$eQ,uSsՁ|l뢠ߛЙ"SkiȭI|">W#BS [| ؿ Qܠ,yH;V}@zj d.0vy2Yv=ăTwW'8Jm5j-43\7˫[QqĔM1Uit6r(ÁgS#S~֧J )"5&k;`G;6ly dM/Nl2~^N"s]h0q`m5.)vdUr;.> ouLQ 9`G I}˄+pd7to?5޾кͫ_}JZ9}OϷC&;PܰN]z):ֱMV VgkdǨ*^)i 8yÑS|HvJ-BwJd 8Īs֝auNw ;~wv˼P 8}F=8jnZ8>SR<ݜJs{RХ*?*Hߜ˯^d~*_*  f0qӬc\Aq2p.BcdGl?"l]c$tx+R2'@s098pA!IV#vB _/ B rB=-LpH H#[йaKGPTWTF.OS]K<ݵ7S/{ Y59<:V^\f:j¾ҤOΉCւxJ\`r[ 8b[ 4h]o IPe#x?YVGn|*,nkjQ..(dƪ{2`6^d*ߊm>3x8c<*,uW!W0n_uDǭNehaT lgxjGgpBOESaTY߉8#8l:n!gOk0YRDǧ9^!S5E薤RpNpx7urRZ`#6qbvÎ0Qh<ŻtkyԄx"|zq'0,_B<3/Fx#|덀ߦoL5hCn}zWɃE'Py l6 \츇z ba#Vh3/wy/Nf&u;@i?u$"o7^Eg.=cAlKw7ų䗐:ׇ˛1+.;?ǶC"թ65x;YFJK{)G^蚉H=vh|i(e KZcbC{{UX~:4MUhU).^Wnh㞌k5C}TqOOH5P_h,_lE=L~8krִft4j沷ls[Κ/s kך|>9?hNcƅ .b7z1Lc9a0Z4:ϸ)DU%W XO"R~|ё%\X,E+HLS3ǹffgpg52n&)qQddj-Z)˨,8Axᖸ>]u謔W2M o.pqmK@9Od[x)"twdRXoGLc|wgAeCTao.1pd9jj|Q!pl@GHwķvm]8)a1$p+ 's,i 1 i BrybqQ|%f/#5w]VJwE7_I:Z'Nޟ wb< ş٫o dTg$lD[V&B r]%S&.*k,&N#9候@\k'f3d55% x\ #݇@B <[~BrF\jmbSBVn_T&{;g8ѳ9}p(฻Ɗj ,vI}|d3V(8zG m=JBO,Ta>9S&77$u7 CIck+>02] ؼa7~%mB%)ki2dMahq0R"AЊɠ}@\%J kHXZנV8}{Ŧ0*ܔt[tu~Am` ƫǕ/,@%!~ -i mԞ}iݤ AYv,  @xDآ䐭 %R)'o6"r*Yjߕ[E)ˬ3)ogi 5DKu]eY:i,EOi![YѤO>zs<͂ rsnkGC[Z2r]炮N/hv۾5}=xM#s \"v ZJ,ʊPD5aٗ J ϧ93!C9WLhT (etúkZ2pFj`iB&~<[8,-u`O7 (i>&֡[ kÖH?R?s'6 Ӿff;v5:@rZ$0hn4`c;T]Dn?vT3ߠ>~KA5Oȶ h e(-|yO~Rkڸ)$>7(#GJѬz#z1PEXG 8rSV_ 16/b\5{p {3ShXZ&q,xJ}+tL:߈=z-+h_lC( Uۀ;iKGQ莰nA+s~ٲE"7Qє5*XI≙׏n14> $do6D˛o獈>?Tks26Tq}㠭vn0x^^\,z^a>c@H ΀=il5@My2Dfn΋PVVUwqڱǶAg!&Ӿ䑏@bffK]#[y x݊1 N.zgyH7sG!ZZ9z #tM-[ܒL~[@TXx:S8 c\&҈0h&dfX#)w&r蛤fEWáffB2埠XejOeo|0$L ,P#k[xy~Y42r o&–,;LAja#p3g rydX94r\b%~#4Avi"s P) 0=T:UeD|TV̍Ԛ>prNHC-SWB4c|$Ò OIoZ/:}5:cgd7W #gWT|Obѻ>x"\&\e}{UQ(C3ZT8=I=ҥJդދW)-|W#0(rvKepӓaO@fq|gyhl%P=z@ƸK̤xvQ5v5)|P OmN5H;#gI7%hH 4Si@!<7InQ4 +H2J-'c8CM`UHS >CН'_wȭ/ [ Ti(\+*"nFtQ Tt9g td )I I gK2ǙkQeȓ#M(s:>f}"W; 7|ڣ+-|&k zl}Sjznl¯e0iLhԁV[`J?"zytHg  =P7XvP8U 3'BwPy$8`FdI?O&`Oǃ%Y?޻K]?j;{x仐r #?[Nd2I?,W%LԌ1Y[zNO|oՔJQuy|ziI>6Kc3E:9 SJ$!0<"Mu j*>5;C?qOo&'AVS7y$ݘīw$T)K5 0F oOj2:j4i5vY;]6^YǫL,頑*>.ks05=J8Gթsmi:yo⧺IZQV k1`85D\4yQgL%x։: Adq-gT O`݊x~/,gwl EN дt[u)|$[0h/ .+$&)]; U/EnRe`*= 8>m!:`QVM֌k <_9FĈ"f]YSwZlD2c6Lخp#໔BWu7mI¥aqch o<4?uN5op$U*U|͏YyzRfcưY]a~45"¢DRnȢRX>+y+EvȮug:fܶQ%6V>zcW>=wz~9X v@;ح`kdQ\3=n|i_.d6,F `n|sXf17 @-U!A|!37ϧ۪RTBl:VCWYX=Op?y'ޓ|pޠͼvPisI`c^2_1ۮ/ 8ΒڸTzMB[MGiƜm+h,ٙ7&1y3C5pe霤UՐvXYDҏ!͋ȮN?\t܋ڴ+qrhEJy|@!r+)U<;UyEỰFe"$ėS2d0UQk^P1#$g3bQ+?W<~LCXH ŮoO-!渋|ʚb`T!X!~%-e"DSQ)2kgxT^G~9 KqPG?^U{ip7_jQLr6-A,e2^ Nj{4NAW9 Xt-.щ,IxY;v\6 νKVrc)T=Q :*'g}.Ufc(o41 ѕFpjBL;z&>,& j iUlӝ>S ZB=vfGgOC(Ζo %vj"y=񵜇"7)EUͥkGyƗh }DЩ^o+yxN}&Nt~8*#$Ösob8t@S2p%G`Xfr&VKX1W;ŲVI8f$'ȰMbs{(; pF4=A\.?n,&R3fXL}~TtmN.s┴*t˪Pܡb55X#H=1ԷV9,N>lK>wTUWCΔ VrV"4g峲s2&H.,BgJMYP@{BB<4~𘧹+aP.`2.y[Ui򳎀(wL+4y@jn}$@^%wbĞsC{QWStnmؒ =H1h¥'fCT1sx}yX\SI^H( @6|t)[ߕQae 輪 `_@a@:U2r7Vᬩ7PKf݊[9XB)S H5 acz5Da8 ,m5L 8ٌuM e($h@PaLsa; +4 nQk.B17faOK)|(66 @dr';R`”˹` Y8 @RŒ隑>ۅފ=8ӖBlF*Ox. Tz5Qm=Ore2 9WL"}+ e,p.Of@#mT颌0:f/W1/;'=T$/)K$F7Z%SlR-?& %a y f̝o񔽫52w CҪYTPEծU``_  9wwC(MO$.>Ҽ6PcT>pdkS!#}kBW͎[އ DI} f$]D N6($5{:d FT,429)0عrz:$8+?ߗ+9?8F+ EESg\Nxi$ clSLvz1^b:=ҷ?jM?C%c+j"@mwr*dY2qy_#=Ҫ"Avo4G 򬭤j<J7w;SrUǵ̀|p]}Oswww*fY3*|@h~-b#KTTOfL4N3r;4 _zQ3Dt阷b_@YEf{,Wo0;*"B q*{Ѷv g4Z̍>~{E$k%mӀ;U?VzC _ JtdiFBrB=xz(2hd$ DE8tU/5b]mGNDpqg(JC@9&Ff@B+F'TENN[)ܜ ~IJD)|uTܻTP%U?M =UBIq/.5<R"j4Y`ԺzM{~ܶ}VTyCN9')\ފ>g?[ #6v&|f7;k}3= ё~Cb eSф%:]SMo#P\b%xݺ@ѹڕwꃓG/n|D?Rd[6iDJQ.^嚡4R$B-FÏ۷:0$`5 /+dͬ` (hO[P&~<\<8rbeL_"4tϸu/pFdB#SHFJHUT#7V /`{Wv\*$}[?=ű~q9%PdűY.m﹃n\jQWR5xL٫-:DZe-;m;:DN6!u)&&n;f~QaS8(W&s5"{P D@~L~}aPZ9C7/| !ON-C, 1+03UxwXPekPF]gm`H#Q&`p^VFa2eDDv:kq2X6qOs>1y9&B 1.Waʎ͗jEW}ݎ}Mm]6ooi8oX]K b~7 YIpdp [0gLk fP6,DH~{ʔ뱃~dWár1wx֯5G[Vc<܍pT}qfa &lgke*Dܛ|^5xEH^V.sYkGUߙn!_T%C—9©Ņɼ=~k &+ʤV=_@J_FIf)8ZA~BbT;'MBBOh'X]Z&Uݴ@|%BuVybFqW3+F%Eo%]TtWcYfUn`#~⽶x7 2)#7A9 mO^}:f$$޹c³6CG*YY Z0ol;m;(n3ƌُ)̱*yq eט #a:A\6Y^i-J/ Vڜq7<8v~etW1%h=muw?mVgC=]q7,<[Ͽ1u0,˛ώ1T|o~ +,\@Oh?@aCHtk I>SvQ/M)xtؼS!Az>&AzZI˛ղc۽] [TC yo6RYQq 'x9)l98-Ìz,~=c$sLPG ly1Dyqi$L$~ι=07J.b{܄V OWO_ia/&J!wmB(xuȤ eDD7ɋ=G=WB~jL߁r lp2KX9P*v)Lz`AVh50W䨉HJeR飫õ__IY%oFֈEF /_!;Qy)'rz-49N; c"2>0hL3YJ)$mEHz@[(zCOHC MQaSHy|glvCyTf# ?=8 ʩ9 !Wzj9f\t@q` kDLϙpLz<%!?+[VrN1JR!!D1zIiJ?ݚ]=42X7 _܈~Q3AkH ZPt0auZ}YcSR-ZC'&=edW$1&5GvWg4Y}ņ ڐˊ? ^z Ɲ`]>Dm)@ώr\0e7QO|.K3sBX'˕2ɏ% &Q5 гee3iejGXIkV}iN *юKkIK>K>y|?=P #}>TͻlNv|TA{SE|>a?f,>ӻdjx_@ϪxH<7˩Sh8.z1`~Fo1F]L X?&˾[d{}%>#t QuI?SfGٲ4*`#: $5 ]*Xt{+N##k)C,|ok׸e,?0P'u<nHa 9w=rz*v8p9֬BIO$y!la#wdZgX(6f]?Tzt`W B,᧱C݇71T9%DI~{G7}#*v%\c2ѽ#W] OgBa`ЄtyUI35FCb:4U̇p&`"6u=,x4+w_ >3(Fnp{7hJ5'SYs#d39$SZ<@E]Wƶ :BÈ.‘O?ʩ;-9Dm8}0'=Lxp 3˷ĭ6;C3!V[XfЯm s ٰy/.Xxw;sV!7] $YfGPdqBM*aSwTgx ԍ=nӀ0w+Q u&r(+E#L1ɴxcHΤ0T#Ÿ1U'{]Kݍѣ⟫{-_)V sƻ*s H!+ %PzU o$vGU>-nSfN4F}`CJ2]%,|Avade羌@{sjBdl%g#W^aǧJ'p}u}jWFR$g C*2]ԟ A9/3$w yDHkzwo ]P,̬DQGNu̩Z(wp'4!9#8:jlA/swϛHC. ݡsYld15_ $j:=g74`׮:0BΖ,\d+իmHyf-JᮂRv[N ׅa8e9k#v׻lPNU6蔢ؠcj~kZu{8v =c3KZrJ;lK } W"@,8Cg$ꓜ~T)3ˮ6ߒ}˒"g@@`9^?P8_J:(Sq'-'%N.](C:Cݾ/\z0CJ9{hVtSVm \3r|„m࠾B\>Q~ӰT*IvR5x1<K`Y!ܠ32n|Izѝ` T#xc ̼|l}[M2;g ˳ۤX.DK׹σC Zu齰g[ʀk{8ƲTlgY. t&uƼ;ܼ G2Ae"kȭ+&KKe_WX| AP+Ү 2R؞p{8.?<$/uTt!Q[\<h]؀wlmz+-U>9ྚX wbKLZn3 og'EU|]@:=T ZveJX0]=\l)\6{%'!VܯdkcC _`h,"0KZDOӥCRcb]hCF.Hi2 W8V s2j "F1'g&GݷI_쨥w>`WjNn=}ad5-ۂ*\ h(KnrB)qE ] zZM#msg1TbǴr2C4FLH.yhǕ54fm' .D~8xϔ@P N >PV~Ҁ:b:|ܛI=eF) sPdZao), 98>N @6bȵ>X9v,d\}DW炗jTV0 TCt[r$B5O p"x&7ç!ɸ=릹XUGg^EB[m;SCa1P>#9H+e+v3NvJԢQ x3Wn]6녹3ReL߄LJWgՔ$vWa"VЄfI:~aVXO'q D"?%IRvuitym'NDx}0b |Tz .B2i D\L:E<,v5VzX{"ښ̕^/?h$}`X%8pzvNrg];ubBϧgT "4.\+=$5."97PxqMQ0Nb+P:0t5D6ה~ >%#hVΓ PO%ML4VUN,,قSV; VK6BkAXÑ~"M CV=v5+"ppkTv%W1D%ijD mUp_ o2o'ۚw].Z7?4᫺"\M/t|=`'~pOkZ)J& &zol_q6 B2R>Xʋ{)4rg|3/Aէ 9nDm̢$fDԪ3Be-w/lucPlbWN.ްaBf6V 'Gbl^Hb|B{Zwrk1J@jtN+=_A`¤}-Մ,Zs)8fWdT;rB;v,uk>ʺHS:tw9NpgZ6]:k1ƅF,ͰMUb;10˩2N`Z&-u/1 gYL[KL}foy2ʶ~C-UBaҍMu pn,ww]q2Ih.6lK.Df4^`UmV$')%chҶ~YxxR;L?D /UwWujӟor#5'[֓Zɬ[}62 ?Ly|xLH7,CPc+5KtW37E0.˜A3 .%H_ ɘB2 `+Q:j-l5I,H6SK뱂!ҚSQ׍ 4õb*\u^fZrY8ZƆe lW=X}rł͵5i06$E.庘]95;SBenejqsf ӆA: c[տZabI̓X \S֊ī B4 !iy]&U(5#!kq\i;S/Zݩq|~-N%]p։客4CQ|Sl+/^osiѺM橙1{W~0M}7XgXFE>ߒt گc[Z&=G>dqIVL>a*H[΋LZ._ՓpG (h4|$]^#':(DC|i!Aə?44N,@e$e^d3Vqcx`Ҹ_ ҆il_O:4\pɸG]!ţ^ٹ8%f*=~8[㎨+c 2_E(F8B lh8Ae]gvϰ M=M66I F/("훮fc0X:Jک) {؝;bZ~R `3J47IGIL1m,!hҤغSo sӒݮ*4R2o_m%Еa>L%~!؊r.Xe}++Tjĝڙd[*12M(U)97],]c;#So1gzsF%-tw+cE;PŜkٝY68k4-΂LdVgrۦ#Cs4t&ԃ{W3>"0biR-*3XLR0R(.mOۅAf @](҈wa 鏖XӉE!aAB"3Þ0և)!dz=ݷ:^\l7,;>Il@?3h0'0DŸs2zn})\9K7ѳCR)c-V6ЊH2pSNCl]%v,,:;㰛?SP6N?l|=c.^'Dcd^::_!1~- .=M_טx`RegII~LW6]u35HJOJ{N1 1n^ldW9(WXLBcR:Mf0vGU}XFUێ@O"9lw%yV1dVO6{ 'Z`Uo tdܹj] T_RsL~ M4@$ 2E98n#=85bNiV-M?2r%@jCHt`C=(i!8s O U+Km,%c"?⯨؀o4Ki Ly̫PGic 1a6Z~@JaATtb l?m*"%!^C"q~Yuae1fTon0R.=D}2_SM3DvZ[푕L }…q)#,! LֱYBuv2({0u[NZs?yo|~_a=(SũF"Tso2"oAǴڊ#H7[aM1Pvu$oNoګI Fݒ3~2l&Dd|(pjr&ƕp#V]7/8)kYb[Swnb1ݸp{B.[@ (9G5* ƼX7"L‚ʃo,GykVXь׋Duk;eN踌6zrCvGҮO3;Mnc\74OGzYPVޡ|3lҢ$6ס3.($.l ds_nGGHK9֞y6kRJ)XskppwZX qaname@5;Kr1vYPہBO~K|8dDYvE:b_*jJfw~K> {[Urxxrf"UN]C= M2lUUx&ض[/\a%PP-J`QP+=#@6*bmA~5i0nK z\+pbV 4q[<+|ov,+b\$O%wіb2"ⱆ5no<$p)-RhlYK"!9c?.xsznJr6yX.RrG V^虘Ё &>- E!;ݠ~hgCXU8cJL| >9 qvxP[Muf ׸^]2:폗Հ z&x,O&; r9aҷ̥9f~qq>!)B;΋`f*sᖡ1 mP#FTşuAK:xl jࣙ/ w[~Qca4j& ]a%fmѶQ`>j kB-YЀêYKCј hAw"G!nq)l:57ty&P%C[$Ĺϰ,3X3k!6^s_4qy~}.[?UQ.?`1>\&ձ*o|K$0s-eTñi0<ꋦt8Gya Q/O v@6Yn37?D5V)~(@DcNWk#EVL9 T "&BK9(qP1I6bn ϳXYKWt`JP鎄̕'q3 lH\0'XH{i+a?]Uz FaGvQʊ΂ѓcbs襆_ws=!"O s,)Eaߓ UF ͠dImBba^~@fES#ؚ(vQ7߅dϺ'ʏRVxOe2Y,fྫྷ$Zfmp|"GNQϷRIbVEE{WZ)X`MP6Ln|*5RXY,1ڵ)t}kn%W6+>svJA7lIOi;;4 0u` 4 $4:Haeb[O6Gby% ~#VZ;^wގQt+R\~ \ Ks#/z | Ƅi|$npbj*#%ovj!nC4*DPUtd˙y6uוugBx+;k#cs@r+c+ӁbpCTLֳ)@չQ6 Ew JISkY0Ujae gYȜlNrbJ~,w06THrb_Wxi_g":ESЃM 40VT" Ndu* ׹ DNƥA$pn=1"=cKi~DX؛\ YZ