freeradius-server-3.0.16-lp150.2.3.1<>,ȉ\/=„k0'm~=ӧaDy {xEBND[\oM~iH`m)_g`Z5#-zmdڸ\76 [-ɴkw#Fa̟.mgSGE@VY9W vvE%^D޷JGإP뵌Ap94E;VMS?]rh{OL?<d ' 5HLX\ox $ 69  " * R <4 4_4( 89Є:Ҏ=j>j?j@jBjFjGkHsI{4X}<Y}PZ}[}\}]^E)bc@defluvFwxy()z8Cfreeradius-server3.0.16lp150.2.3.1RADIUS ServerRemote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service. FreeRADIUS is a modular RADIUS implementation.\cloud1140lopenSUSE Leap 15.0openSUSEGPL-2.0-only AND LGPL-2.1-onlyhttp://bugs.opensuse.orgProductivity/Networking/Radius/Servershttp://www.freeradius.org/linuxx86_64getent group radiusd >/dev/null || /usr/sbin/groupadd -r radiusd getent passwd radiusd >/dev/null || /usr/sbin/useradd -r -g radiusd \ -s /bin/false -c "Radius daemon" -d /var/lib/radiusd \ radiusd # boo#912714: add radiusd to winbind group for ntlm_auth # add winbind group and fail silently if it already exists /usr/bin/getent group winbind >/dev/null \ || /usr/sbin/groupadd -r winbind # add radiusd to winbind group /usr/bin/gpasswd -a radiusd winbind test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in radiusd.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in radiusd.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-freeradius-server-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-freeradius-server-update-$service-new-in-upgrade" fi done for service in radiusd.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset radiusd.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in radiusd.service ; do if [ ! -e "/run/rpm-freeradius-server-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-freeradius-server-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in radiusd.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi systemd-tmpfiles --create /usr/lib/tmpfiles.d/radiusd.conf test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable radiusd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop radiusd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart radiusd.service ) || : fi else # package uninstall for service in radiusd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fiQG " Oke4 e! hE  NoF<k_6jTd "004+{ L' 8!h  t! _ 6+klfD [W#wWb!4 E(#+ni!_D<O6 F m$N  6/On4=Nm  !X&IXIx)9JXJ(9X(Z)()XJX99P(8)XY8I{H9)xk`9)x9J99)XjxI9I:)P)X) I(`9IS)89)09I*(Z(A$<" *&*(2nwyD 3.~n!'O\ !w@.UD"shL& :+'|;Q[A3QE.1n/yCSiWR(U $2 ({$aERK78d  ({\M#I 38wfs!l+ Y  y< /|MN hAcz <Uq~F|,t )٤f uC ` = YNKadam.majer@suse.demichael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.com- CVE-2019-11235.patch: fixes authentication bypass vulnerability in the EAP-PWD module via invalid curve attack or a reflection attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549, bsc#1132664)- install license as %license instead of documentation- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes (bsc#1049086) for issues found via fuzzing by Guido Vranken https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682/bin/sh/bin/sh/bin/sh/bin/shfreeradiuscloud114 1556533020  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~3.0.16-lp150.2.3.13.0.163.0.16-lp150.2.3.13.0.16-lp150.2.3.13.0.16     !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"##$$$$$$$$$$$$$$$$$$$$$$%%%%%%%%&'(((radiusdradiusdraddbREADME.rstcertsMakefileREADMEbootstrapca.cnfclient.cnfinner-server.cnfpasswords.mkserver.cnfxpextensionsclients.confdictionaryexperimental.confhintshuntgroupsmods-availableREADME.rstabfab_psk_sqlalwaysattr_filtercachecache_eapchapcouchbasecountercuidatedetaildetail.example.comdetail.logdhcpdhcp_sqlippooldigestdynamic_clientseapechoetc_groupexecexpirationexprfilesidninner-eapippoollineloglogintimemac2ipmac2vlanmoonshot-targeted-idsmschapntlm_authopendirectoryotppampappasswdpreprocesspythonradutmprealmredisrediswhoreplicatesmbpasswdsmsotpsohsometimessqlsqlcountersqlippoolsradutmpunboundunixunpackutf8wimaxyubikeymods-configREADME.rstattr_filteraccess_challengeaccess_rejectaccounting_responsepost-proxypre-proxyfilesaccountingauthorizepre-proxypreprocesshintshuntgroupspythonradiusd.pysqlcountercuiippoolippool-dhcpmysqlschema.sqlschema.sqlmainmoonshot-targeted-idsmysqlqueries.confschema.sqlpostgresqlqueries.confschema.sqlsqlitequeries.confschema.sqlunbounddefault.confmods-enabledalwaysattr_filtercache_eapchapdatedetaildetail.logdigestdynamic_clientseapechoexecexpirationexprfileslineloglogintimemschapntlm_authpappasswdpreprocessradutmprealmreplicatesohsradutmpunixunpackutf8panic.gdbpolicy.dabfab-traccountingcanonicalizationcontrolcuidebugdhcpeapfiltermoonshot-targeted-idsoperator-nameproxy.confradiusd.confsites-availableREADMEabfab-tlsabfab-tr-idpbuffered-sqlchallengechannel_bindingscheck-eap-tlscoacontrol-socketcopy-acct-to-home-serverdecoupled-accountingdefaultdhcpdhcp.relaydynamic-clientsexampleinner-tunneloriginate-coaproxy-inner-tunnelrobust-proxy-accountingsohstatustlsvirtual.example.comvmpssites-enableddefaultinner-tunneltemplates.conftrigger.confusersradiusdradiusd.serviceradiusd.conffreeradiusproto_dhcp.soproto_vmps.sorlm_always.sorlm_attr_filter.sorlm_cache.sorlm_cache_memcached.sorlm_cache_rbtree.sorlm_chap.sorlm_counter.sorlm_cram.sorlm_date.sorlm_detail.sorlm_dhcp.sorlm_digest.sorlm_dynamic_clients.sorlm_eap.sorlm_eap_fast.sorlm_eap_gtc.sorlm_eap_leap.sorlm_eap_md5.sorlm_eap_mschapv2.sorlm_eap_peap.sorlm_eap_pwd.sorlm_eap_sim.sorlm_eap_tls.sorlm_eap_ttls.sorlm_exec.sorlm_expiration.sorlm_expr.sorlm_files.sorlm_ippool.sorlm_linelog.sorlm_logintime.sorlm_mschap.sorlm_otp.sorlm_pam.sorlm_pap.sorlm_passwd.sorlm_preprocess.sorlm_radutmp.sorlm_realm.sorlm_replicate.sorlm_soh.sorlm_sometimes.sorlm_sql.sorlm_sql_freetds.sorlm_sql_null.sorlm_sql_unixodbc.sorlm_sqlcounter.sorlm_sqlippool.sorlm_test.sorlm_unix.sorlm_unpack.sorlm_utf8.sorlm_wimax.sorlm_yubikey.socheckradraddebugradiusdradminradrelayrcradiusdfreeradius-serverCREDITSChangeLogfreeradiusdictionarydictionary.3comdictionary.3gppdictionary.3gpp2dictionary.accdictionary.acmedictionary.actelisdictionary.adtrandictionary.aerohivedictionary.airespacedictionary.alcateldictionary.alcatel-lucent.aaadictionary.alcatel.esamdictionary.alcatel.srdictionary.alteondictionary.altigadictionary.alvariondictionary.alvarion.wimax.v2_2dictionary.apcdictionary.aptilodictionary.aptisdictionary.arbordictionary.aristadictionary.arubadictionary.ascenddictionary.ascend.illegaldictionary.asndictionary.audiocodesdictionary.avayadictionary.azairedictionary.baydictionary.bintecdictionary.bluecoatdictionary.boingodictionary.bristoldictionary.broadsoftdictionary.brocadedictionary.bskybdictionary.btdictionary.cablelabsdictionary.cabletrondictionary.camiantdictionary.checkpointdictionary.chillispotdictionary.ciscodictionary.cisco.asadictionary.cisco.bbsmdictionary.cisco.vpn3000dictionary.cisco.vpn5000dictionary.citrixdictionary.clavisterdictionary.cnergeedictionary.colubrisdictionary.columbia_universitydictionary.compatdictionary.compatibledictionary.cosinedictionary.dantedictionary.dellemcdictionary.dhcpdictionary.digiumdictionary.dlinkdictionary.dragonwavedictionary.efficientipdictionary.eltexdictionary.epygidictionary.equallogicdictionary.ericssondictionary.ericsson.abdictionary.ericsson.packet.core.networksdictionary.erxdictionary.extremedictionary.f5dictionary.fdxtendeddictionary.fortinetdictionary.foundrydictionary.freedhcpdictionary.freeradiusdictionary.freeradius.internaldictionary.freeswitchdictionary.gandalfdictionary.garderosdictionary.gemtekdictionary.h3cdictionary.hillstonedictionary.hpdictionary.huaweidictionary.ianadictionary.ieadictionary.infobloxdictionary.infonetdictionary.ipunpluggeddictionary.issannidictionary.itkdictionary.juniperdictionary.karlnetdictionary.kinetodictionary.lancomdictionary.lantronixdictionary.livingstondictionary.localwebdictionary.lucentdictionary.manzaradictionary.meinbergdictionary.merakidictionary.meritdictionary.merudictionary.microsemidictionary.microsoftdictionary.mikrotikdictionary.motoroladictionary.motorola.illegaldictionary.motorola.wimaxdictionary.navinidictionary.netscreendictionary.networkphysicsdictionary.nexansdictionary.nokiadictionary.nokia.conflictdictionary.nomadixdictionary.norteldictionary.ntuadictionary.openserdictionary.packeteerdictionary.paloaltodictionary.pattondictionary.perledictionary.propeldictionary.prosoftdictionary.proximdictionary.purewavedictionary.quiconnectdictionary.quintumdictionary.redcreekdictionary.rfc2865dictionary.rfc2866dictionary.rfc2867dictionary.rfc2868dictionary.rfc2869dictionary.rfc3162dictionary.rfc3576dictionary.rfc3580dictionary.rfc4072dictionary.rfc4372dictionary.rfc4603dictionary.rfc4675dictionary.rfc4679dictionary.rfc4818dictionary.rfc4849dictionary.rfc5090dictionary.rfc5176dictionary.rfc5447dictionary.rfc5580dictionary.rfc5607dictionary.rfc5904dictionary.rfc6519dictionary.rfc6572dictionary.rfc6677dictionary.rfc6911dictionary.rfc6929dictionary.rfc6930dictionary.rfc7055dictionary.rfc7155dictionary.rfc7268dictionary.rfc7499dictionary.rfc7930dictionary.riverbeddictionary.riverstonedictionary.roaringpenguindictionary.ruckusdictionary.ruggedcomdictionary.sangomadictionary.sgdictionary.shastadictionary.shivadictionary.siemensdictionary.slipstreamdictionary.sofawaredictionary.sonicwalldictionary.springtidedictionary.starentdictionary.starent.vsa1dictionary.surfnetdictionary.symboldictionary.t_systems_novadictionary.telebitdictionary.telkomdictionary.terenadictionary.trapezedictionary.travelpingdictionary.troposdictionary.ukernadictionary.unixdictionary.usrdictionary.usr.illegaldictionary.utstarcomdictionary.valemountdictionary.versanetdictionary.vqpdictionary.walabidictionary.waveriderdictionary.wichorusdictionary.wifialliancedictionary.wimaxdictionary.wimax.alvariondictionary.wimax.wichorusdictionary.wisprdictionary.xediadictionary.xylandictionary.yubicodictionary.zeusdictionary.ztedictionary.zyxelfreeradius-serverCOPYRIGHTLICENSEcheckrad.5.gzclients.conf.5.gzdictionary.5.gzradiusd.conf.5.gzradrelay.conf.5.gzrlm_always.5.gzrlm_attr_filter.5.gzrlm_chap.5.gzrlm_counter.5.gzrlm_detail.5.gzrlm_digest.5.gzrlm_expr.5.gzrlm_files.5.gzrlm_idn.5.gzrlm_mschap.5.gzrlm_pap.5.gzrlm_passwd.5.gzrlm_realm.5.gzrlm_sql.5.gzrlm_unix.5.gzunlang.5.gzusers.5.gzradcrypt.8.gzraddebug.8.gzradiusd.8.gzradmin.8.gzradrelay.8.gzradsniff.8.gzradsqlrelay.8.gzrlm_ippool_tool.8.gzradiusdradiusradacctradius.logradutmp/etc/logrotate.d//etc/pam.d//etc//etc/raddb//etc/raddb/certs//etc/raddb/mods-available//etc/raddb/mods-config//etc/raddb/mods-config/attr_filter//etc/raddb/mods-config/files//etc/raddb/mods-config/preprocess//etc/raddb/mods-config/python//etc/raddb/mods-config/sql//etc/raddb/mods-config/sql/ippool-dhcp//etc/raddb/mods-config/sql/ippool-dhcp/mysql//etc/raddb/mods-config/sql/ippool-dhcp/sqlite//etc/raddb/mods-config/sql/moonshot-targeted-ids//etc/raddb/mods-config/sql/moonshot-targeted-ids/mysql//etc/raddb/mods-config/sql/moonshot-targeted-ids/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids/sqlite//etc/raddb/mods-config/unbound//etc/raddb/mods-enabled//etc/raddb/policy.d//etc/raddb/sites-available//etc/raddb/sites-enabled//run//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/freeradius//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/freeradius-server//usr/share//usr/share/freeradius//usr/share/licenses//usr/share/licenses/freeradius-server//usr/share/man/man5//usr/share/man/man8//var/lib//var/log//var/log/radius/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:10119/openSUSE_Leap_15.0_Update/7d12d089ca16c50549451f082502bda0-freeradius-server.openSUSE_Leap_15.0_Updatedrpmxz5x86_64-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@A@BBCCCCCCCCCCCCCDCCCCCCCCCCCCCCCCEEASCII textdirectorymakefile script, ASCII textPOSIX shell script, ASCII text executableUTF-8 Unicode texta /usr/bin/env python script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b7dae7c0d255de2c5f709a026c94b2932e68d4c7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ea231346f5236c0613f50256fdc0b3872876a4a8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=201c0bfa8c97692038c31c8ebb3a712ca4ed4330, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4383e9ffea04374e5a3102af5ff4cc316ed344e8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f389cbaa0651e6c78136c2f4cc52e838d6f73b4c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7e6cd3168bd25a2b3876232a82d214248361efd0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dbf5f234ea87e52070fbca8d40606562b49bb1d6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=922abde1b824da09cbba7c3cd764ebd451c21073, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e0708d8be1208fa84bd85cc0e1c8fcd8f5881a66, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ee15c4d728d5675b99404a1b4199fc00166f4b37, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=38b6bb82121e51a92dee3469c16500dff5c6ca97, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f2eea2714a85b03d9dc2492814ab4f372883ee9f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=65f696c7fd8400216fc0b021109bbaf8a92daef8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1546303b4b65e0f56f2e1a3dd0daa811fc3434cf, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e2980d03a0fdd618bd19431231c4a50f55347705, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bd5c8fd6be634bc12b8cfe02c952377bb34101a4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f2159f58506a6cb87d607bb759a32a9b844c381e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ea0a924e418fd3dc6a9ed283789c8bd9f8db1cd6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cac5fb343fc86d7b95584bba9d8de205c8664103, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a32c8a55310ddb219410dde7d443d062d3c911a8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=531fd68a55915216f2fc6e25a4f26e9014f47dce, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=58f6a1f439e5f81f6c3549e0195319d72db24b58, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c909e8354ef3227935dd6cd1e75e95265ece4726, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=40bd4349ea9f22c11b225f0770d7e6fee882da77, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c4a5d71e5613a4a0496ee9fd4594dee4eed706a4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=564a6cd5c1cdadea620229de40bc3a63575e3359, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fa8a30aee176516855eafb42d5f994d27557c691, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5bff72ab1af47c9bfa2cbacbec40f8e68bfd5bee, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=82ba704af5cb28bc5b2e42e25d009313f9b2768b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=aab3c865611a374f8db386b02467a09b8e28adb9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7dcc0d8e9a1f490d788950a60abbbf18fb8f77bc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b69f61f640c0c7157136358297859a28e91a6aa4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b77dc223ac00a1fd0348aea2918b773e5c02d0e9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b74b643930e5c71b93e36b124da4c20ee2183b3f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3884d501e7420f1e2c9c86212f8dba1adcb7c310, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=597d68f22b7c156b16a410ced351c09a509b75f4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dafae1c31c9736e817b672aced6bf59f9a5bd1d8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=10a3416fc41257d28e5ed0bb3b4d08f6e08679a2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=eac92ecca8e86abd82b76c9fe3afb071f4ad088a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6a1d36825dd8451bb30593c4fc97c01765ddd01c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dde3e0d36d5809b76341ed48a5b9dedc40f2b880, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=be5989da94f8825549d0c877dcc7e8e1fb465c47, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bf2fb6e3acae864f80a9ed990e38acd251f509e0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=16a7ccb1cbad2892364b58631804d031cac7d0cf, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=90c971e12eaab79df9635764e5b901f2d6a28074, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3b6fbfcb7cc5ab3f0a4aa288621a0d23c883e357, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=29e05e2f2029d48c7d238268bb53d7984258f910, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=35754999e96f79b2f092380289a4197b2486b188, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=03fc885c8a704fdb5c904a334d2f036f3abfc74c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0501f3d80df25c9e1894e52f47c4f0b5afd62f3b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4f84d230ec1b1223bad2fdf149135b80fc2d4e2f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7fd374668bd6e80feaf5f13da73b94322b1735f8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6ff42724e6b1453dc244b0ec2e2918fe7a5bc2e2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=195c4b3dcb8d09e9f35cfaf2d029d37ec00be33a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bebb82f1e14d02d10e900b30dc1f19ffafc5597e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b4f0e89c4e4eb1478e2746fae58dfa6279466624, strippedPerl script text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=369058b73405c50904837e6d7aedeaf1a6f198ac, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=3efbddf9fbc7896f5362b2e098d19a99d0680edc, strippedAlgol 68 source, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)empty !$*.15;@DJPTX]aglru{~   RRR RR R RR R R R R RR RR%R RR$RR R RR RRR R%R R!R$R R R RR RR RR RR RRR R R RR RRR R R RR RRR R RRR R RRR R R R RR RR R RRR RR R R RR R R RR R R RRR R RR R R RR RRR R RR RR RR RR RR R RR R RRR RR RR R R RR R RR RR R R RR RRR RR RR RR R RRR R R RR RR R RRR R%R!RRR$R R RR RR RR RR R RR R RR R RR R RR R R R R RR R R R RR RR R RRRR R R RR RR R RR RR RR RR R R R RR RR R R RR R R R R RR RRRR R R R RRRRR#RR%R!R R RR RRRRR"R$RR RR R%R!RR RRRR$R R RRR#RR%R!R R RR RRRRR"R$RR RR ՆUh.i\logrotateutf-851108f44b17f8f44054cc93aba64fa7d2c2a563a1585f32139bb2a1fc092eafb?7zXZ !t/]"k%fm?1 1N8[xIBpWƳn]/NQ|G{ <vsTHiJMop&kｅk̠eUH$򵁌"i7iy91~v"#)"bQ>e-P 4=S 7)n_[z)s֠Nb1 2" un. WW=`eZz?~r]u0 $}Ƞz%SjEvG bԣ}=(֣oHK &g&3|۞Z c̥{pcUFTtև2pFţkӘKF\Ң8[ibM7~[P5ҕ!fѓZ djq# =7HkYD`)`0fg⤚c;|ƏmaU`<\g`] تWKť78pfG"sѵ$|@73Q/{ MtI^o2P~8IyŠbekK>V[4JqliM'xz4+)E /+:A*ĖNhu9y]eӦ>37Jbk Qޘ֞INx9 38&~Fm "j c \U875Y+xqC`OrJ/Tp!̕-)e@XMJ6n껷D~!پ]\ /N@>,7qY9Qp9;m;×Y}z(`Vg1m, |EwH<@#3}[SZ$> tIdJpzьLm*WERαH u.<6l*}R[KS4(q8d My%5ZV]pZA0~|[9t/Z]؛~`6dV2 jv4JR?)K`Ȍ^ס~'~zrso ^+vŊ՝5 xz[3Ӟ48WiiVy jyyuPT.e?K5_I30uw b述g3 B>!^Zd1~XBP>P%ng%Q;0wM[x|ftn%WQU^|ܝ}sa2y_Rľ3`~-H1}6<&e# m%%UPs eFJyuMk3W^ W-d>;̬$P-wzHb^g`G9"c:ז[PiW)CE*G <8o۰ZBf.s;zlU#hnBƖ׍-yKb__rwXsd2 h#?W$s%,WL)ިm}Mz;ahb6Xc3 CHcci9(=ͯ)RQO"UkrÏ:ɢ8 U ji)~qVe禵r~Ғ#Ā_Ipp7?u爊+ܦ-O)}f&APlx.3%;蚖iX]ٳ/(S?R` A3eV+| n}cSA7|"Fm2 *l.݄lkx<'=),on"rnN"Qdòkre;%Ѕ",jjTi|ז/%+tSG$ە؛wd’ޘ!l^Nmjq<~Qr209MCPD8I:Sͤ5S-uԔC])4αMa+I4Ҹa1{]/un;Ơm9r e%9) զSR3^R1!1}I1\u4۶FVm$fNK(͝P2g4^.^bsc\}5#4H|r F>ZB5!F7<AJ<ٛk Ƞ_;t0!Ef/͐|nFSv o4qS֝|+=̈iђLjsIӳXQ$:3o{4%cQwPjF֏ 4bR}gPLG"bPeZcDOԶD$Y%:߫K):¾ΧB3vS]l*<5~6a)&)?-phj9k 8BP3$@E6XF5ؑ=;=1^r2 ƹ+1XZ&J]z$>IgPWVxE H,ZY50{{WjiLsGV%j͕츿dTyQ3W)<3ɇWXvG; 4* 0gup$H6P_*Tj㔶36AGIpwGӤuy.Y5>dq|-3M=P}UGWVUSrk&~E2Lo] ne*#p-ǽfnq~5 N/&y=bS.j.;/X^z?{u%/#^O!Ѡm9).vto] 3̪ZFAͬzqU˧ 0F.RNo D\B}VC(|M? !Ė&p>DJ %2$#S:nh4M<%;|FL=߃n۽'L-W tT\Kt!B*Y.MұHu.R ycA/OL)0 "Z$@gb&aaOlBC3ƶ^ĬafRD2wʢ~uA)QpȌP/]o<'-EzwH>=P "d5aoСӤ<E?յfWB=Cr eyCVht }%!Hʲ/m6踕%&0&uf8ލ/]c*jDPL \ff3#{?k|NLeFd-N 0j񉿧va!DE.>f-Ogtx p9I6YQv-ŏC â{}/GBj|w=aQ{o<L>g*dLu`uw.Pt@s%: g5ܳU$[ǧGČ(_o&2v}6俠6\*bߍ%Nb, T%j7/&L=c,D (Y~x@:⬿'KV24NgZ 21QdŽ @C] W{ql"dE" ? T=gԃ$x g7:[[aj}.& * rK2 &8뮢[ShukwF~WHNQR"k~'…Z ցY<(ɱɻ>G{.㗲-A$ .Wg7.^ZKAKiO_rg7H3>yy`8kUq6vf%ﱠx Yt@׈;ǵgBB$9;MSQ|(@-d+J$TeF8&Ϥ1O;uפTXqJ iEٿ(ӡamA{U ibw߻v?eoݢCGvqs7d$bo-G}SVs4 ;g CEXVu񰭫ŹI<=7Pס6]Z:I{{sOwNH`"@2aD&" | $X {^]xIQJCb|^M梯Cg+^5À ~ݨćVfnO&X1=YA4gdn8ІO~kx&6?Av$e,! x2<\Zm*c0bk7eOQn5q-TJO\30%مyv[&Ь,UhG Vw=d w[Q/%Niq!0θN:)ΐ߲! axL9?[{!^6;mE׬X8=pΈW #iȑ*{j:Rpv8(+mԷ։Lwr;>֏3nм0&$};!̄C>O림b$/NuR =kT,`e!(Й#r`?<o5'Z^!T9auWD;OLDHW:0CRk 4Uwhl6uN#@=YIZQqS!WJMHE=`2[qBc +rR#e26TT#~ޭ! [+Fdy3A9L^$s>ϛ]d7v mj 8%IT-r]sm)n;sXVv\ar)b~3jM Iϵ97נqc'Fc{/..bhtј{Y:oıpRA2á`3Y`ltrvm2ѧT xx$/9"hD@Ō/\ve] K" {ESK>j}R Jou;wTePv9hxvu'$DpQllvSECȳSFwlcG#rV%7Y&\ebk>[Ti#]Ii,Au!\ʲ8}C,\B >y<M@ {AL짤{|(1z Of[T:v(=rd*ꦏIU2U&LᅓSNdΣdMŠ[ϓ17L%c_&P AZ>BIJ(>j;nےܕBS>mSH:ّQ=!\a;5BГl"@PO![w` -r]iphUg5mQ|*FzFyO Ӳ.sf=QOQc)@̻/ʂR # d'xY Ӧ/N;h}[J=!Ănےa• tgivp C*[eynjq|_87T8 FIӥu:ճNY2"cwxhwZ{MKQe`c[K$vɹazjA{_0kOըi5} 2 nuM[C{8T׋4.n_)V+Mk*lxaJS,$@66QmALeTQ (¨5EAK:eǠH0xp\q E _vzU ZbaR?MYrS= I#̔}:F,GoW alH=D4L4XJ_CMXwݵ<#?q9x3Lv@m1&X}N$ykeT0QL{=EJNte8Q`5Õe,m]AXFnv4nAT"TfqM?x'ܷzV߳H>(GGicxy'tZOP>+®)ͮ_[YNtCa'Հq.]Ed+o3e=ӶQSevqxטbE Jk ȜpQxVQT4X@qt(g›cih4Iz9\҇{mn^ta"ЄcH9Ybʲ"pU&.B\m$t>5G%; ^ɷL%T=Ȼ6d|`UER`чuqP-u ahBreRTnP0 {&;96R[.B^w#^#˸֡ksvвvGfG# ?G Y_$aFIɭi?mp%'9jZ*ƭ;7`oˮT!&/?R"0C$#5 Sq_#B&d$|#AaoH (`%8mO\ gF* 8~ٌ{*2H)7z(CKB'sr!1 ӞzF\p 7ن:+$N)VU胑>Hc]%btD'dŒ(vZ; Y)B)26q. RC͋~@?doQM 8[%Jd1?$0%sSdEV>Y|vTh! D= {[koz[/_ w$n1ZY5֨_G`_SnTsʪxSzz$}K:% ס->,dv{w(gu@.ӄ<-[,|BIUPy;),،"L$7ڶl8;t}7c)nstJLglK%zM~.BQ hѥO.%"+ ?:7H؄kXh+˄( Vzq0+BtUCH|a!ҁ;4YWyKH?<,=|\V*$,+dιq#)}p,&R'ŠO֋7 L_CRDo[AB=f|qEu JDt1ѹf>k=ĵZTѳê{Gw`wt`dF#?' Tdn$lJX㰤J9=̜VP2+UʹceX=M`lp}팒B?ׂ`3 EC̳fD|A0۸tbYinGrK} *c M5OqR؇{WB~Rel=چ D~褻zsSY%yP%)TQ4V ߜJUfk<_N;ͽ҉LKm%a*L64xGAgG,!;] nf 3_ 6MAud:6S#嗅gmn|fiy!b W!3>IyQ''}{boG<5zZC"FhQ>D@wrSTͥ;らd>IBb  ֙Ƣ@]%) 39xNSSR@xy8 sJ_~/y hv|,}gg+'^"h̃n571U^f"J@Ho]!V`'.&B\rՖ'?A*C gVgmެOzU)w:=w%o'+vmجA ަu(8P8^m6 uj8l壈18mr궑#$^#kQ"?,}҉Ӓ.eh=s zdjF0Oڡ{ ?z" v9G3{5֛Ugi %j$Sq?fs<54¾.5` rb!3ٍڣAmisxYe?Q~kIwK:9?OB'v1(pϪpq$_;TcR94չCP)ٞb:m闃@\6FO_=w'q;Rq 1>szCa"tuSG!AGU*+G( Ik_T^MpZ[" J3FلjU񁘨h_T*bu!b]yTG*#$bFFlFV*lr)? jג-D C{6-,S wmᰣdbxLugg qUBthZ~9L;Cu JB&x:\/|%g*jP (Tn_sī¸oĢn'I(HaoFFmz̒Dv4/|,/ߙ.;%]zW6hoVy;3dP,;>zö\ycVˢg9c=%70y&IFIvՖjS谙~B]=ڇbDžG.Pe*^]wrqcc$`/&nMf ${eb S(>E4}"^5$)[t%[v-+cuO߷dw͢XlB^uT 6SX6Ak701;xCUM,7/e{3V9T߰r%PSYxUC1u5}^BXG,nPe)Al2pO/gNu#]BՊs^$ko>@:(i7ܳQZ"w<5HCz`!kMR dM K+dhH/WFu1mHK#ZDJ,-Ө9'”|АU=0vfSR'T۔JJj%([n3=EQ`ӫ$mյ u8HӀlo078P MX!AEL{*%m}+E"qgwt wc gy';Z=%BM ևɧlA<;B/JqWOEUwM;iW8Җi)Sh1&9aUoY(3h,*fگ. D&=4㋖gf}&W-wm@bFV\Jw(2.JgW_Teo=.ʣe[!z\C+4nܿ.\)j"; : _7t秊<JE0(뭯K?#4'o`n+Bw<*XLϋLمS*94#k\se'Vt}^z'6sa@-K/(ٶ4fR_BuE)}\S{=~e}:Ìm.b)V| 6HXߘ߶VAv!.,U(d.\Ɲ3Jn:kh ksQ֠,)Qiv_T0}?JQ}yDN,mxL^:OIfs9]&JQ7& 3qWim:D{pЈ9WY4}JΉ0+' QO HEBXM;['WlI')[vwgdՇج&&\"zQif6'n#Nj\aݶIN>qʀd6$ ncM6BTOSp_fYAUDw1'#MdΝ *S,d`kܺO3ctߦO ђWC;tX}E*YolՔd'%^^f|K $x -1 }kДg\Ǔ_:4Scg0DsH ;73B3XwŀRYx^4 t.IesH M]0LT^+)~gW(Le)1y=X͚-v#Q&! w'cmor2,5%@BBv@ͯch 5E)`}e[ӥG+b4k&1z`%?WȀC"ၵqYRBL?$;YĎS4ӳV&۪>)\gt9+xٝsȐ~[&5*jƊw 0!'Rwf1iӪ/l @A < Btzpf'}[Ogmy_P]- sYMxlp׸Ԅ [*'Ȕce?@r'P=TAC>ݛ2x۽q3v:lK:)а |Մ +-TQ9 WrRB8X $'xhzR:| ӋрA2Gv LpG(p q>Ϫ\W2; A`0a_W-$+nIsږ3: RU :)wh*2rmuHzt.1 ,v`̑cpQ`޷WfQ.RZZ]FyM(IHҼ+.& b4\Yg␧_ PLάßJ#i!=Yfu}~]q?/7~JMjfOOJӰTS`%WȐ=<Dۮ u)6G.FjS1Jvq ZM T)ZдvHH<ċů M)?cfMVhCۋJcS ə8W^tf+ N/wS/c7ܻQ*Z\_`{~4,cOKFpCW~o!푰Tk)q2Fޡt3C\{9-J,µ'8g#mA/}mj#fj*s>[wVc7K|U#}^Mz G?W 󫾃;vt 8̱(F2*（]\ "hphlUSP op(j$yD/ ' LUHL*\?^@d7,KwvOQU%gn&ڏEqMU _>لG_)Dt ֎$ n"#Cg9*UREˁy$j>#^}P]a )"ln'c%q!e.K~rX5"nn]Ɵduϫ}#:JW{g)(mXO 8vG _M~ CCC@M-=&ed2;XnpSNٽԳz{jλPrGS29 ">W_ټ&%+ڍcF Hc"0F8<~ф4Q4GH{=$ :.p`2[ Z6 F`/?w;d>g2pd#-C5? a8QR(/hLv;<28%}bЪ3vU%9B <tQ,`3y@Ze'E$XBO^;mL?҃Widc4+:UMZVNi'?c]^yM},u pO?IWmUԄ)%!mmUv#jw+ |ǛV>@2fTLA 7e8uNalfe$4ʰb;n1#JoBKcop.–߲X'J߹^[^+ 0x!qLAJ}!.T$}SryJ衬Ā6?dEn.d*쀣ps}b[< tP1&!Ga\qV!2KQrmv)ĴV5S"!s6f++H48J=,J~iҁ1CQUj3AW'ۃD3aAJ}쪥s3e$~|-&1k)ـ+9]PlLX%Uof&&Ev.3s§ThI|Dֶ~ BYij`T]ivJ4 zg=HĸH=^O=64iAlqT6>(W ˸ "CѾMDdPHh )';nU|U3 c+] in;[;pbc7j햁ixo4yųzKkq엯P+,͠{#;8*,Q_I8JCr:lፅŌ9Jƍw2ҠKچlDb\+ SN~Oc$U\7racbKy)5ŬRBS~ޕ,]3ۙ R&N 2]cxX5XA7o#$^n Hv#R],1;(hQѷ 6*e^%\US[(9W9P8A;c/dLytW? b%IYLmӱ2'41E/Dmr8k#]2TUk1UK geT >Ȅ{Et^ !4ʯ=%MYXW?Ys c1bT[,s :[Mh1^ŰvĂ}fWӬexN]6s!ڦM| c]eX#mTghԀ~/g{ӕN쭛@jvߑiN6^5\(wH>#2uK"@A$6B\Y?T@Feez=^r_[iLm PSk2rC%6)SRRE_{GNsL6O/q=h]^ 8c. sZ>+QVx)=>TS*BۧЅm'|OIjqjB #vEltqIxO`)&L : \DVkû©-wBBEq M\<>PjLmCz‹1/a ~d0 M^Rzg?+Nq濝ݠwWc{eTrob2<%\g /7uLB:BIW32Y;z*2 M0~p_ la=D6Lh# O6 x\Xy# *i:]IB q=f@>r xP*V?( il9c "HV2Sn+„y 8~g߳k`dWyXlb%Cr$=|F4-oD+{kN9 ʄVabcDy~%|hXcWduG@m=CphS Lojˡ=xHgğ`s uXxF\8);gCm8I58 e--AîEO7z:$$ޅD,q _Bh%q䚙G@)4JS eٕnt*^򗎫pOBlA!1^tp =f"5q%osRYI~1Ww:XyJ&7o 6w}$DE:4!YAߔ-(w?Hsc%I $⢫YM1eH-L*w9?nA@ߏR3kwgLJk }H jGI ؑjݶ<_%mʼJkHAk`z̰7FEJj̪L~=hA?~ۡad!#h׉5|$̯/N?fCv@@T d߿m+%6hg ;~ :sDꯆ-?Me׷r [esYBp#LO[[wwNOZaxpO` cFq+kO[> "oĆ>ʵquZ|R;xޖ.=B]ҀSQez6ɔpW)^Wҋ+I c/NŪ   l(XsMعz'$V K~T@m*2~V ؏,y#n܎zh)Q\E gP?uI/cdV"⏸OH8@NզkH$*UR9tcX NaIKumD呚7 >YgܔifO\ vl|fX!$pgV md?',6*18oQxmH*[#mA%~9ꉉr(>4+sO\޹$6(0#x5.@-ܵsd?69'A:40%D d'{uH. ̺$)jOFZyrYJ$ pZ+m+#U+/.s ҖLUx YάHӐhR sW#3q͛/x(IKo^F [#bB[E}'"ȋ+7`XRpL$3pJiR]|Z>cT<!EaUq6b0"yM!+-pܪ$1$6|3lS}݀[N^h )cW ld6ިʜ 'ts C ;T#Q©&08-i 4<F&J6ΖH5<1QNۈzDE /Re IQ$/4) MW}qi:8>A'k70?bQXd) }bnD%qx8VF1p>w$ ڧ!_q6Nҁ"rDʭed{j.e ~0Q'!J#MN dwi,oKƃDZ9X_m{N?N&~5c5KƵQũ:У1i4>< FS&mYUtiDIHKʃ/PeK7_;_8;@ruڠzjlfmHgƦ>:YR*fxϹ=9K?ޏR7t=l~P ĬU`4AF&ۆ(omMQ'8eם+nan@0o:uMGVDYxFƅd#JeN0 j!JfN]+JmQ%҃'5>c$K͈+jki) ]J72 czN 7g{En%2{zy1=ezܫf܅P^%_jn5^kJ̓vhR_| /d>.S)JkMrlɆƂ@Df.Mqo{&N* hQǿ%kYl_2!FǮi.ײWM$o |HǶ샵^T8?~̔~R!Ž?vqdI{5udtb;a@ݙ.\7$NjF74wb3ݥӰ fz02LICޟP 輐bAd_?#46t{~@vT}8 +%&zߏ;/ eS]F;>}:3 u&skaO9M?n6eBaZ5Y%1-d;$&CɉYMzuk|I^LBhӋ)3=Mšj6:cMgBGi7ԥ/@ZZp*Nsn]9SD_# н?SZ001O)]!$B>!K2L@*w$`5GE|[^LXaف&b)9N6 {MTCOV )ܺ;CkgwK= A[4Υ WX~skPUK-H!~~ 2~ fIfP3d+jrMu@jIuǞ3[mᇊt.}hQwRڋrjs"z:)ůK-|>U`.uq9K4Qd]~RwT_7u$b0ZTfQ[̸76x5HX4ׅ'q/ȣūm]i-!ؙMa-#c>BKwT M!Fv '(Vޓb<R8"(<׉VLk-񖐟Da-`s]p eax 6ThI@1tѡBmg- 0~椝BY}C| ;c׆>lxrV-߿Zx$%V!KWt@J1)\&zsYy҅mD5<{#fCg 67800)^|X7Vqʿ[ZgLvs8}5n@A@z ڌv] = zېiI۞ bgmG޵qԘǚ.qR|(`)8W/o6qRH O]{O޴߁Y^aihRlQ?SJ_`)vWJV!m/Nh YABP(M^U'\XV 1bcύkS}ޓAIZ>b7= )M{WA}$ 3}^\yTN-xBNI5Ng.= `'n]!+_niD`jí~u-:bq dE KoAcp)J-Q[e]WhR]un|e/I5u_;8y٫*R{tC 6𲃁?'ޠܮg4|FaoG3.Q5ʛ5 5p6H ogB/A=ч_x-DD`|)qSj {ؕp'm ILf]{$lp_~UPB[=%4xQHe*)/؉,M-st.k-9~ 0 ]}q2˛QZ 78iVbǰ _X8/gA { 81f0?H(!uXd$0Ň#L >N(b/!ƇwzNJIP zZ߫Y; n]<+oj"zL,/!U23IMcj}]sKڗCz,<bf ҖcdW? >&jp73m`4lp44oMOyV:[f9ّleiO,N"B+ w(,Й/Z¹fW6d9z2>qSG2׸ 0ozd(یjٍh[@?] E`тZ]f\FgOhN+rHpq:8+6!ى=F; 7^ŕi!rK#x.-~uh,'5|y̚6*pgNI}Ws|CC3&'w>êh@\bQI /-:KS4zt7nc|3ڞUpGԘ |&b<$"?Y<I We{tFQ3g o \şo@ hrU zn(eJHէ&%3Ôk{L1!+'M깔ki0cC5hW9 gh-jP{Ed{>bm R?/utrq%='r_rWkUkܛ>Uoco{HH'`)C}!q굴puډ ƟK=weL!K&R{,+lhYSqkdba"./ W'X iW)I@_8k!e!4j@TR;)q֚j$ug Nşe-L?%FaO,c݊xoNHP'Ə@ lf:JB bJ`5s*1_lN$qt1BdX7 a`soepTJ(`-iJJ)Iz?=ZE5͜] >{GjUH'&9;IJ J'x(`DV}¦֯r)зȅj }fVoL'((&uO&K|/;  $fmtɳEHֱUJ:~@ \L3R'2pFz^G7˳@?Meá,K<];yK uk38j W0+s%4#8Yoqrɿ :O c(m}{5y+Pf)]"nw͎MfoQS+BGxUkImHzn3'\a=U՝ccH8<%\_\ nO)M mz.Ҩ ɡ u{!V +x )tв()(ā<-fpkìmO=`3_sy?Aj6BXӢ6P,-Rs2 h=[! 1ljL8.;GT|aݱe?7xn&o߽!86_Zw*7qn.]y|MSd*~q@Fd[g.hU-BL8]P;&L=EeV}Mvk7Tو4l (&3|l_b"[qG]1LRZp\š`dV62mJe(Ѿ/qGOO.f+1I1ݬFƘPtK/aќJ6t;IM)I6:voyeE@XM@DF `}PdxeF^?jÔPr [V:V=JP(YV#^!l6 xb/J,fw$E!R.xPdؐniC'w4i,d9J(Y(Qϙ¬)t1bp;tg|؛MX1f3~ h$\R+TpɈQ>S-@;Jn֤^%.bnXeR>֜CvkTxڲkw[:jTjox ZVeTPTf2Clfʡd+Qq"楦dT!/*SUEIѨtB+e6 k] 6`0<ȊIwBQDIJeֿ .eLmSPBWy];?l⬳GhfjmD>mI˧ťp{,DȑVťs 4i5b6}|s,déNrW=> p-_!o(cywr |7Ĝ>ߕr߼>]Ф{]F l4N({+H͒1Ik;ձ4IY2 V4E[ܫVDjoo=\uQԺKդ>d5 fCRcP啥]k=5o\nLstX%'UQqaIhN~cNׂ-*a6Lr^h-NMz)]L,rAhBIy_VɾeG cCj_Fc7:FH턝 H?fP^xz!j~5$!ŊRf/5G߲tɰPLj>T|U1Wwww )qRsC!LpI2 uÐ3j]V'DRMϋI=~5%GOL{y aL22oc# j_,KۣsA@VGCX DmʓMvhTl.[7<r5qNw-U ý4fDzOmA?sFP/Ĺ}3SIܒtaGYsU&T痜h;z4o6/ec.L|Ib$mB7 >E6a]@Vuwts.- ZBh5*-o z?^q H)hdOz msvyIL'GB!@|k7D^\|!3pA-'C5vfQ x!ך= det hg6M(EqG(Ƣ_ Pza$ŽbXو$ G26 Ϊ&@#rT5sx_Rx2toX,HV - t/&3=3vVr iAjJ%?n),-*+6v h.)QѼoQTd*ݺ2'TjD!4EkhޘifQ Y"SI'AZUh,W ={ 0Pc:hD'c K6bKǩ>6[Zw' !RfhpTl)Ŭvh>tᄁʙ{" F]YB`M= g?x-w4 " 7 _'1 !`lfdc;ڌNwQuUQk-yjŇ*~}QRl!sym "x] ?/ebrZZ^ /ޜF8Eb&jwkϯZQo pv=uZOa"Oqʾ?jAN_4u>I͌V55T2(U>5`Hq l"zKu{;c=pF*U.hw;f-cڀ:+ jwBH|eeh|qī*fsک! ~U 6(լ&C bT\ZW\cۙe(LRp΂"D!YO+ rIfXۉC+ e]A2 -}3nkw!AFw&&*V-xt|#z|9xa't/_U2|eG.l[~Bߢ%zQ/XOteƯߎ,@ A"9(z&ռA?s -M0PJc؝}cOwm?}hkl OΟ5ce9d{?Z_H-I"G)Jɿwϟin(ڥ>]LRygPkl?rs][.%2siK/-N\1YuSF˓Sw< H@cN2~0KcUFr͞h#Epnu85-mJm'I ΁~A-8o2vip>OKc@A6?2dg`@kt/ޯO* Wm}_-L2BNr(Ϊ-jL}4M"K⚴$wtCv^ /h Pf$"%J+C3lF_mcJ*am=0t>9v.>h9^z k_C,^jp+4r 87vSռ#(hO1+6Ucb3빜@h6QɼL FSFf ҮvN_D?L-‡O6 !u, ȴQG\ĭ$T HH`"s{I9'L}U;uD]tV'usD@ub1Oڕ=7oW;ϠFDVFhGL':.F 2 yrrc9^eKtafy]ny^ned8 ;D S4Pg,7B󷈁!a:g;qiSXa’}+3ua9ի-fU}@jICXe<晧n^+:6QYIZhq\`HX'^a 03 vb=6"\ ƞy*^bfOFVv|vv:gKatL[f /`"O=gDG'(H;6 |6sWcAl[?hT2BGL]جC戾twRGY[N@L>`'#@D2pDhR8s[vP@B7.]?ŧOTGEXWqP.ՠ^a(d٠"IW\8tyr y̌h[MtM%7dc+􊑤̝ ^a.hNTb ..gmDŞFd4d.|W]7\& k-)KF=F]رBahAG(#Q%nR` `@ըդ9":rd`f)m"zmE ,&'R+l G<2/kKtpFõH]E C93i}Z/jjd2>B 5o3d!8[a_x5/Ai`g5N$,ӶCsBD:3g>C\6?%>Cpea.BۊCjMIoϲVA b5q%YykQ!np;P uvjх`noYmV[Q[EfAÑt7 2@hG]i8'Yft* se)Aᨴ^`xFno0:X{Wfx8ʼn #`-k7y^cX6Miј"gf b*>?|Lbm%4"ݶmrp 9r4S6 xȫ=Kκ&OMgR<#@u>wK ݋?;"7=^ M':I1Sf儢{_Jja00 ANKޫ,〨9k1*<t_/j1 4NPVO y O$$灾Ciy}}A}tfr&nl>1넳?XvQL nՀv9lEA眪o \JV-2?gBP[vql6* ܀8JK B*f{Ms^4ܼNsӵT3,yCxz|=aS!yԝe};'v}f<)n;XԀke-B-X`DTתs Oh'94De*):zDt<6ג4'?m %2hn;#*L)׵3J{~ _/'~fUgyLj7h;E3)Ō[YYT39٨~}UCC\' I{9NOFlglɈO x ^x69Dbٮuq߇iz tYNW}' 9'8Q bS.( JK%I +=x8s-nkk60!57g>J22>Ì9o殲S֣EAȖɑjzɶH3W`sl)=1ZF[^ZB'{Aʹcl Hbvgs8Vݡ/Co n哻}!'Aޗ]Bb6jusxk42E:(8 #F炁T)V©Tdζ;D~Wү2cCox^Y wnWcpFn[{sS> fAF[lޤ\bz"b [`W:_:W}PNVBi=gVkErK4]gT܌:;.DVN4:psm\R{޵W}1WMX= '+`x/BvrIBp]c(`a=>.։/D);8;nJ"~_!,da?Odm:V \/CI.$6\|º$ _%(6c#5yA_JtzKt41 m/q|VsG%MfKN+w]v4P%OF|Br K-ol=%$]Aߌ̔]DŽ$T{*x~*ǼN5G9 -7#Px)976^2hO5o2 ~M!tB& 賡5E tqMQ6δ9nԶg=9Cefc,° 3lrŸ3o6PyΙ;[(wW,8y8y%A?vBɟ1w ^X7}n:\UkS#GPo)wÌo FSY=wWH.xS"'\rvWSo}2 if`tׁ8:ԐRC!`4y/B*Ә2Gl84F>>'pϽ> rmCCI9=`@hDA'&AiaCFAN{{c^1Ճi_{_aLEU3$%0ŅH`'TTR|5uDFG7D鑖 xd˃" uZ=7HxhE'Fw@4yq2]!Amɯ"pUi7 \G z$=ziwyQ + (T;)b-kVJ.Q +PEF+"SKtYfPl(}@x5ޙME lff𜬎X+MƳ<*C *ǎ݊hV˼KNEl7jZ'دeNr-BϨn(*ՀjsdwC3r9HY ;`QOѹ:v$!WDwf2`2WNa!iUnm[,i|W"4<*~},:<,F;koξKjk\zN>U2 p< rc4$뵰Ku1:L[rӦspJd_)cTOۀw+ˆ&AҸ#@9@4u\Ecfkh.Ota u/1 تG|3Fm/GD {ؘW'TԸGH5<6\ԍM*mAk爲xS y9:`+ 95?mAfWfI`?$BYkC$qP&F(^۷OS a_SA{a&>lŦ{A ~ a& D˨cbiLJ03}i?rr܌X F6}Q3) xRCZ Z!"(T:d:w7W lՓSwxiAx XkՌwNÄtnYht6/b3C\'=m<~:e[s%HvIjT&/ʪ*Mي! 6·b= Y% d l:*tOrUdV½PGn]Wv]vڥG*;e[U' []0 KC!@ɓUDx'ȱ/OW}'"&֩9 8PV/T65cdA/u<ωݙn'^vd*>b#;ykw  D*xj擿#ęy&|ǾJattQq:s I)rC@];a<:⭾Ua@ZJAH"6L'XѢkgvmvd`4Mu+۩nY~Ĭ|V*2Wz(H,9EF$;MA=ӤFӁFgZ>txPO떎WUt/#0b2,~뫷f7ѵ̿vB N|kC ./$x0i=e} V"YCDO&VV'lTo2FwlW ziIdͨµIvªVBWˏs;OԮt+_ډ*|>&2X: KgnP16KD̓e@kb_g}I(Ci( >cj[wn{ZB|6qza $;2ԡ5ˍCa]x G A~є ǖYv5[L} +YO; ׇn"\6BIo0'|$"R{Vjd2i pW3/,,yjZlP/܁Mo=W|g +w" uJdR)%Gw+;CpACA.^-+_y3Avп:3ʴm3.:f+Ъ*!vAփnx9\/ DknriOa DD\O[?/(jt7̽øCV6G>X'b$(E -H員h G@ &es&೹ w"u >ע &{aFEYNRZnv!tGCT}8W ; yXpF;6Dcvz1Avi2fw 1Kye4Bk5_{OyO|,_XVQ1<>i g_DΩk䮪jc.9a2OlP#׈/e ͸]9`/G5*TQ%o13X4QXݨ9q ;tvu? ohO^>y0dG ==ru5lqJJ_ǩB0~BP Ξ38Ym'>5iME8r Yp$ G~+$?y9R*+myڧFT5å¶#9S!$-߹ki᝕l&{O`2UNۛ\v=f:\I6NO "\~ q;$o.;Ȉcdo.vs5If)}p>jīp$K q,edw$7 RZ›9QĪAOX{w2'HJwL)U\٪0,ϓc42zsZC^m0ٽkZ>}ƃ4|8rv%7G~,^$ Itu߹6%[f3guM2"~z?Ǝ{MyevZ-aD=1 fHs}>Km yh qP&9^q nX_ZqEjx ]n.6!E-㤳/I~i;=-P֐`CoIBJB~jFX@apN!Uᚨ=[B=mx 9z؏5p}<1^?&u!❩/M k<9=>Wa Ne{GqpF &,d*yv"~ϟ!zzi6Ͳ3pe1)$^9OZpTzԼyvIA:)@'# 7kUx,xg5:{U}jf\0Gaɏ2Ɛ%0@62o3 ݨ68KKppv䶇5CqfZhy̛cy?P@ Y<9?qh-q2T7@kt+_ yp1+ CcK0IP"Mos>,' \:fuzcR; tD߁Tn%ǭO]e&C%쌶!J)3 π[jTOw~\8"}\K6M {ԝ]ρ2lk'zyc-S˅(sOV% X=hE^ڒ,tȏLvT(^+ܪOVӌxWRor;hPU[8&*j= m0d_e>.Je!zRFGq-[r =`:9Ĭ+Ĝ4aXugl(v?X7"RR[B dMmfS?C2Q}~Bz ]lΏY6x<qD@C:`VڬTGC@jz;|@z+or^\77DjKn4@XF*`dنH]>LoopxI{2x_IYNC.cئE4o]͸3Y+Z0fTyTEl\×nřq'%^Ui6f%A~ηP ƨGY;,kV!fSWO R;Tѳ%@M&Ӆޫvq7>w LK`1@"#vpQ-@@%8Bx,%|&. ?'Lj;V+l O΢膘>78~v}@"0cv2t-nw[܌ a8ŰQwsuC'緢|p@cY-? & dT0v}K~رj.V7H)B{7Ɉ<>˦cmIrR6_oiNęZkOB O坲c ɬj}Xi4=^4JPFЩ^ Lt;^kTwR*ؐ?T{B({wޑlDqR@lvsGsc(,_#N2%Ƕx.5x ;]iқq=k9nZqXOdA(gxwdks|`k ]⺉f ${ԓ\RҮ*%fK# VM&uwa_cƙ eڲ'aY Ct()jÉ^g`3U`8@Tkߕ!-.Ҧ␎3 HRUz2Hk}˚gx"~gib-YNV) G_g7}ţA}9ÔwtamQt -.Qo.Zu)VZZLαD9.'wq1>~9Ǘmt=\o=*5$JPP/]*b֞j_(,+7]jgSpx >G)iB`]CV6#>(㟫֟9 @93߁SAA:ApCsAt=7ǵlhhSKlGa ,>PBz~4Qi(J.s) oqeZ[yʆkf 6Sv` Z (Œȍ!ʷ)_$g|mIM$D>j(͗~)e ]oEQ)'/lļ X[U1~Io{=)2+HJ z6dk% v`, Ӹf%iLjY8L,V- Ic.XYoo ojڭJ 6mCq+jePЭ*%lh!je2^?\}Vuk"7-M;_ASV S|;=MPO__U2{LXd0|?DZluyjpYVVF6iUFZI.C7ҁ9?ev|>f~( K0?X tػΜ*[8 B/eboAJ5?)L=0$UMHwz`Z ee ͧ&6I;5h0ScpA$5%S(bAslߤ, ir):Ƹ DwYnjcҎFaDy @x ^H[҆bH(@y!ϻn|JGVwj#?'l?_7vwʔȨ߯63ipF%;lǡaY3JTn. Gô֞ĝ.V(5z\ӎGnc鄦g Zh1 w3 H!KփQh#UP>v5X\/8?0ϳueia @g\8PO5̊0䜩e,#eՀzh}g X3^q:U4I.Խ8QXxwk*mܤFDӹ~wiûRLb w,1U!p59'$2;J sm%4'c!h- CYH8Ț]q yQ5uD!A&䤖- 19tK噫G-$azDLV$׽:ɜ/ϲ^^24}A iw+oG:$H;ĥEq)+Sn}(^W.A4GR o%\nE16KRsb &a}bw"HeoKY"OW]-L;4FT` ׁUIy c"?֜4j) Xb u-p .ް&N]jؘ:r'ѧjM"!{ɸs= %GL/j}iF,>KDp% uG,mEYXeO@*l^G y3S(LRn"$Wb \kֵ¢ LlIsdAH&o~z9|s̠D:rLze"./E >A{[JM,x29ք_TGQ-ITnX1%my/?Z-VĘ|ztuh߿Ģ3P}T99EՋZx\bg=3rAkC_]?^QjYPZX!XڑVzjAM$n^u,^7Ewuk_S<[} j/{ehJ\Ъ^̒hQke]ĨUd^z厧^쁁1Np()N'M!,Sss;sI nq- X߷$ض&(h4g%|8_4HU9Z/%,Zpt1R>{Q ~ +fQxi"jYu| K7Rc8¸%0Ғ)XaMNm*\9oKd<",=èEm$M S˝!O M:a33cM?Cwpoe3\ld)TDh 8I1š Z#$TTdkK_RAQ~S05XK {a.Vz)rG, qSF8=Q~rNn[77EV?4@Sس>Q(jR{PBQ@0Cd{2>zY/q'q}l{$A,IFu+ H"f/[À\/.=D:eh/NPRpNQ%ؔMH嵚C%ES,f\b-Ǝw>meD2v>)LL]n_pv}`_9O E׆"(g޻Hmz_Ĉ`-]h_ W Ѡo4pKr٭ǭ:BaŧP`Q4ojqy}u'<1ژFp18KWaQ!dWQ'd,"z0s8䛍59ŪIoS4w;mMo:ڊ[;&L,!P* 6UWE;Wʦd~XNviFQw!cA /;k{#¥m<)KgZUh-+GA11LEtLu5㥯 ?l˄n(1@{鞴JoBX_N(W;8HDS9(_~^oLp.صI" ]4 Oe> "BnfyrQ?艹q%@YJ]ێw@YSc\@k$ mҍ;X.vE n5eWi-r _٨dd 02`[YeTnDK_v!d#\YO>Nf+3ǁi:Sok nWTd|:8X*NxmfthRy2yL * Ϝ {S7[ Hc%AZKfQ[G(mj~QyoyќjWy})gL tTkE{^1\J$$(Ƨ*N 0kPJUqCMYd+ BLkT1?r^Wa鵲 ~0} z0&LҼd|],L!DY Z]\. ;xĕvLaܐ^+|ZNyJ wsON&@S'|^,4m)Q87 R2|v'n=Fcd9\ح`\E_ w}.u>u"qHB.nr0G=㳅H<@U~+ŁoDs0uF*D0GW! ^_K( ^k+OjPwX >fr1}psוRlĊ˄Ip%_g_@Ь 촞NFѢruNoڡ 4%Bw?}.+[{M:+&Ly dUv̐*c^{B88_K_Є;S;`ay~T uBYz l ]idWYlOGJ= -݆uU[T(`OʳTuѫ)EYOD|ߜ9B}CB8gd amz_yxPao&B5T$PQ+M K/PanlǓ,1"Ͽ %~Otxˏ-S, CN&E8[DfQUPQ z=PUG@7^؉@jd?D6|I&MOۤE%t/'$ʶ>6OFz~3M^^ czB \,#K2 #.FŖUy=O#Z3tuk 0wr\v}" 3z*h5Y_v2: @#W zaB~2]\2#*ഷ߻G9X!n{>w,Ax-Nֶu;F>@5FgD,5ݤ9Xb>?R5b)1n AN m1^t!^Dτa ïo%׶5@wU >b%VbD֛@`w0ՖWG>O_R `9Z^2D-ƥ9] ;X_Ӳ/_(H+T#yiZavpA;VW,A;+1w9 y7TXO5wK#f4i4ejbAM*SgRmNb%ɰ{ue\-pB(!e2DVp}C GZM}'| ;1Y]g:elMM'a`@1r"P111:qjXӇ+/'Mm8%Vʔ:i?":5ʰ|`/lwC&2'̉3Pҏn{8 4 2W*K*jx\"k8RӠR;?gubzm7נ:ix%Yv4sLB?jd$¥3'J>ecZhV|77Ա MJj eS~F };Ҥ[bGcE2q[:i앤2M8\d>0jD*ٶ(|tq~|foo3|>L ][d"+~.1vyII$=|4Kн"Jfvqx*١-o@ʴ<:@T(($|e*l>ӭ>?D3ʘAjg8)5uϽT Zf1ן@}|9Iu CH^IxQc7,]%0Aphغh ]RN`94 ζvB }=aWY+Š\X)%~ \Q3&D~ڑa ܁ٜ@cD9 AfZטϷ ϯ\B[raҨ(=Yv/"0&ϿsԜ8l)^l0ǰt[:۞A40zoV\0ܐɳ^[ŎEN{.K`VoLϔ,jx?G̺=h?ZWx14'"6ܨp;\=5 C׷4*`cn ye*M/̸=F=XqT$j}@F .& Ӈ(dfVCT%%2m?ڠ/HGAμ=D|_a'!âQv3a|Kz]bC$2Nt =s̟dI֒ЄΞGhE3`hYS ٺ-q}4ON> _mqF ic?o?b`QQ֞%:)^@Xb3|0N7tx=Oػ)MpxL B*vi 'GϑhmDBp"U2j#?c1 l޶}22;,5 tvyy7oPy8@,YmQ1~PmANƔȵ~|:1 @2){0cK~Qƹo+Z e<KUZ: بXiuּJ>-@alc?$1$%ӈLG+˰3PEA+ ǰVFhds}c9@P1o .8=Q9t3N=BIQ/oέuӔcdb]R-pګW*2MaԷD\{"12hEZz'Y~paD9R_ .v+3ZZ;6[`MtpnZ:GcbRBJ MڌWdr*No0).mU VRb -Hc}ee|8VʪWFI^Ai0"NU(3R<sd +RtL!EhocGA V(ssOVc*VKm$<ןFEGb ֿ `;m^Mu 7_,\8hd Z#O `i%亂hZ+S]1 %GYaD:<p3z0Pҹ(k_ Hטyޜzb,(1/zgɥŶKZLF{H-g܌K>X=L46Z3:@/oiB=즟|(N@#CYQnwD(_1t~%]KGDh&C| Jބʫgǐ[\Y*~,%-]s-3 GqX cdͥ\3 0Юgzs֏~L_~xAV/< JD-u;ӿ FShICVO8mhEV Wc^"\̹. /IX{7&*jit;Z a̾K*ݭhR `p藜eΚȂ@PFx%U; 1\?CIEw36Rc5nza#9ِ3? N@)`\\}=(& U`rWF&kh*,xg%p=Ҁd)?y[ |gtt} gGP?Z eUZek2: *I(R7|gy§c:SCuo<ҭԞ0 C& F<(\.S0LJ\,rK+v$J}ĸ*?k:`2>[Z:$_%[F$dP{^Mä[͵Bª;M[[cڿgnj,>ݢ_윶+ؠ#4ZeN 0{}^bP1Ek^yJaO7cd^`+^MP[.JҧTJ\"$L ﲷ7PeM Fțxo:q2sry`bSp'x0X Y8=Oqzsjx!!d:H!jvm sq$p)-!QO SJ/>v0 oJ*]1c 2'1L ]@sNѾ{F0MwAxw \8=g/g/1T 䎟I@UIpф/aB3[]| >73D .72XyIWV`kcەW<&`K x>09bAnh`/}qrx9%級cP20$3Dї ؙlC(EUw6nݰ8RpU+l;ٺ(mQÐ-Ou…j:yH0>]R@s_(S暤%`Il{S1@Fw"Q1ΊZ#tಿZ+ Y5++R^ D %wV]XZmc:L"̛ˡTۜb((6nrtoAgtLM|ePy2:ސ z*A0]$E7YՋ3 6pu)>hXP )gg6hw8YHٕ[lږX!NH}vFVp +]a N#zleEl*eh#h7}:xwr]3S_]cտs04bܮPiOv1^&^j,Rd,g%Kd~ch}(m͏8/sqGbK%Iq cn"rN>q%)R'5圭pm#_Yt\: سy\iɟ#[6rE}Y)mMYWepГIg{̠T)HSE "fl*9Ŧ?lCnϏw8:K=fp 0(Q )-h gO}}e4w< RQS :sh:'`̄SZD!ݞ#\8jEʇxRcOlb*(zeԔGc`"|v3&YT~11S2 ᨥ>gBy/l%&,kZkn )iM }u{˾ \ ߣ(CXQL.M):SH8$fqԉԇq] H-Y!X2I2mgUl "|PF zWYKCm^FN%nF~du 'Հ{cC ̿jDKa.KqSNEO@h-9M(4:pF1P;.\'-p\ҮPf"ŤgmI%a Z*utOjTu %1ҌÙoxr{TxK[;{;8A_2ІznּXzI4NKAKNr|O9_"/?eEFB(KgW@'aЗ2dQۂ /-i i-1<.Љ.cVlB~*= dձeSG%Zpe:z 5T|b1Q=?T{6ti#+;y8OJ%f=j5r/?,ʔ1#.UJ1K/Iw4;Y0$8U*c̓ X6+^(cTFTM_ Z3(&I[b=gX#B@u8QM;)B٣%ljzK()o @"w}^XN05%zZYW ׫Njl+tƶ;W X}ɜkG|V?p/# S|̏f@teJⅫ.؀:w~82ҹͺ^azUB!6[㠻5.j5T%⍠ac`gHKWڴc,t|ojTdsN4&4Yxr.j-ll~^E9>}ml Pb5p΢Il^u~Ds8͵x٠ 7Eh#(vGݼ]E{ -ehBr4pbUU#RI!7(JO ʄ/W2(fZfzg H: Qh qť7*$:[Vad$_ʹE@zNDUonP_øgs***\1ؒ  PTC=X,; j/0[Yw b#v~l ɻQd%li=2ʻ6@Vl'~b.bWe|?oH*]`>qƻ!u,E=fi;3*Ѧ^ ezHiŁ;sI :`!+eg( mB[=s܋Lx갑F1Rbv9$˿j;늡gU'o~Ig;X h Ӻn?;{)sE? L1N(bCtK򻝦ESe`uVY%)}/j`sp.]2кs.miȦlq2 E|It~1 #[ kA ܓ'1IGjӳ܀7TJ|WEtݛ t ^+-9,48}<`B?8'DqONF5T7Lq LDS8ުW@ ZW%q k2Pkgo!GrZ򂐌G 0 2ܡ9 kʛ!5o%8ml u 'ќ|HVT VdX_H;׃gDeT, 3rZ?]2ceuh}-tsdSb"csp,E 'u~]Nw`\oie& c"lBYE'6KTɡ!ᆳdYef22r(],L @ ,Vrs98ݣ-UVMU֤f 9pk/kmt 'cΚLMg >f ֭z)&Rj(oJ~OSQwvr{ ؑfd2 Qo4WWE|3dv6pF%Y!Bk7CiW/e>ȬrՙGžf"?z9@FhdyلX&F_ڦ͉<)oFNyU Л)gC^u" t+O^{ KK~+CDx$OɐlxJ~#0x8s,v=wfCo._gd; >I2]],$/Q<=%nOS8p]s7vV-F-֩(ק}]k&81Btǝ2diU u1qPB%DLdE}v.s5r}UA\%Y,m(ƻ _Tp6&(ge}H\/Zk"$NO|1b7!'Z[wV{\(R oz}WskL H+' R? | 0fï QC$$֎ˋ9,5gBTW wDWYW5ѹ"ђo+ 9/_]bkb#ݱf b+ al3ߎ@(Guh(I#Jw>s`}WN7t:eĞI ,0%0S–|4zȝpk^^xm+ 4&c ΛWS<(h)4/|6/^0.(1DP)3K960B82$ݮQƺ[î|^Q# ` Pb,jsmx9.VMNb~O#V7yؖfteR=$ō]JϠ׽5ZWwIVsoj/_SҠsaT ;'G̣ \!^79[ifƃ;s^sIGO.F pP>&۟\ਝn4=O/!1^V}D_=~`OUf EL `l̋ȗȄFcƖB ܡOҚ! F!Y(JT]_Vd 3\1F3|@)jAS=w4*~ɷZKk̝qٴPI ݢ@~O ɿU$D]WVq>e!{BS"&_roꉌe}Y, )()[|\L@ ?ժ99i%,LKS|BQ!Tv$ua­DsRV!@&{`3IR&F oƸSp +otmD%ik_%,$<}46É}k ++tcQ%Dn $dC^"\}l؊)h6fx;gXފ>.(ᄘWRfAm2T5F|q[ZP.S^QeшvcL: cWPGQ#ԃTXQevPtfFр$Er=AEL[YHOkafNG'%#Bo KЍE#S=D>?~Qsc4Go7w lsub \Eswqྭ(v4XigJMwӰ2nj+~% zw(cK#tw-%)[JT3BWNc6\;Ā>/s4@Il0.iwp q'^|j;s5 \3٧ɩg?~lN ^F:pf6Ad-% EH`3&gDQfNZʯ ֹXeslOiϳ)Er kQU?De FbMX,* ȭ[|N٣Q&08-*!:s6&|cuq-\Uuwedo'o ~6&|n909~wo&ꋁw.: %kty}[KrwTWD. ,t|&! Y׽Caz>ץ= jhˌ`W!h(Y!9DTwN{g둏_Tc|v{'1ؼ)VΌм57tan D `@G+L~o4'ӗ(RiR@u:=?r}50oOKkl l.1M^BTt꺏DC_H*g"8 8!?P9l[ĠwX` 5]$JG&irБu- XȱsZA}O\J}Ck>:n#L`]BHM7q,䭪jtUZ=w.dnP@H6U8}@ KO"6kw,:]ԃɟ$⫘H9*\/ ]%zk+^HT.M&1B~nOLGk,|9U ^sjܐC"/M'5D$ S~w;4ZG]Ed`?#Zlcq=՚;>n-/>ZPjR,̵Ue]QNW\dG d)x:LD;E*b4< 'ϟTcu Cdu'do#m=3t{IK9Y4wSYaoEMȭ&C i( !Gsn,*TRXsdϲgh0- K:.@uOXy"EN1nktVRP.!'#Q*cKs:NQx>t, 8oV&S+SsХ 0Dw",->=݃uKӤ(~P64c_Cd7"od8OK |֘e^!;{H.rXH/a؁12c.xUTkx@i>wBUWׅ# L?R)W_: ה^=0NmEaJ=Ӊ=otr `>z7,9ҿڅO_^ pl0^ CMP/~tN"P)qQ}BqbZH肽2E{cԢ_( ~h@mV K7V Lt 1I["!;:޴.-Q]B贼Rzpn ımB }R/̑PPpY}}.#Q8>nu^ Z[ ==hq>iӗ11BTY$Ab~ F)ܰ o{ƪiDɉMn)]VCВZ`1٦!\fgmf%~ WMWS(ScK53ԹflK\2A%n eK9vBeE`[c4cuڕgrmd=g YcB J?Of8'3`a`!o VG-^ǟ?vTq d6N`E[6scۧBx4Xҁ+IoC*@o?ߺR; Yo.qOبD`!(Yݑ(˪,,L ee\F>J`]rBlZkJ04(-jIwIxn[9V%ONл]UaoXm;> R'qT:n <ҹ!HAỲVuqpۄB)$Ϙa5 FL4$x9Ѳm>mTQ$ ;TegEa<@Cg[8*0Y-q ;bTdm |dۉL,"i +W,gXJLuX OɉP F#o;^ .FYV*94l7Y /hXO&Gx$bh\3YT&I8| tК=t865rGv@`4P翩톍Nm1 !{#.וqy'^]5m`*_O l0FxPN㈬ 1 (4dvT bqx7c4ch:3jݩe(ǡuQsٙ3RcI1A`GG eȡM]xsj(F>OC;)x:0GO3iPXcWdMD{KU{UsT,_GUY}-'&6 ?qAVd*>\w HmV@gset5MEG!5'ĞjSWqv{7;=ڂgޡc=Tm 1VOyd\o_{3ihS(4'%HYG;8RBgz%q&Aەv;)vYM5-hzSeoKr2r^rEM'`a-T[>>;-6)"$(K1o=+V:{;'JV8FaQDƇFȡ˖Wkne4=HW|i Cy)W=gv)+x4=ʜ}~/wJ#MkT~0b i"[Ip5JmBcFI1=JQӭ1NMX^~1BK-?icAYE|fo L|ĸS3AĪn$}N"^@ {7 $cY:~\cBKSK|fV׼: 2v Ӡ9Q\t5c8d|9/M To]7Nc5#"+鴩=SO3}w!8KRMwwd  Lεw?t4{KZwVL3N!0 p k9nWQ}leU 5.8s9&Le:D.FG{I-b~wX[͒ɣx'V;KحZ~ /@7zU|EVCqS%jYݩ-WiE}ZwL0ގs(D=6,&SbBS#<̗OKg!l>̒I@Ү:^E&w=>-aڎ݂=r};6WZr¢LrF0̱fʾ( \;D5aoG1.MJVCTeH'ĴQ  |_r+MqدvFȤbEp&ݏOѐI P1Mr g H>E+s}8o-Fjp)c9T?Ȣ(7= < L8 ` °V+M+VmuHh@5 2i0R;OxOMQ2~Oz޵ȌD:kxR]ZN6?/ #^AcSH$j9GF3i@ҫ[\ s$fq12)ϺCܥVC X(~]H Iqx%ڈ| ÍXU풧g&f&Stqkݢ#iPrRwv@#~\v7Qk Q%$j[ōؽ?oF[?-4%~1L߹l@[ky-\Z=]mZ=AHt]RmXȁiK/&ctk^B_QʮΥx:;HD90d3i Nv|ݢHǵ+ b(0em=  FRdF/q,QO}lq/uP@9=ӈX` v 6? {>nR,2ǚ|D3NhΪVLiwAb z  U`rc]ĕO #]C{E A 遑r!S4WQ")2oiȰIlDwOǦiy̐9ˆd̅//w<{= +ǕXߥ/س;6o 髙̭ _ҥʅep҆Y~JC߾YlGŌw߬ɢW۳)RNsF=BwRT)tqvQ qj>GlzkFHYU/R^ۇ&FRa5#Ejƺt'I|S̓.$%ZymU5rLƐL'Q e?5xi-{`t"_VP \ e$0w]廈% @{wشea ᐸkߏA\fkK.?J-6nVۃjQZxrgD^<|#4ɹk2-l@yRoGmDt8Sɡ5)&aF'oImUЀ3]Ĉ!on"O8X9󦷜?%p@T{r6U}c^/*4+>YAb 0}MdvVd{# 6Et#ò=E.wYh;Λm-oF& MC;s]$mAbju wv_Op#ׯs^ڙAo P !yKV_eҰ~Uct(bf)TcTu ۷=ЊdVl:}CkQ_i(ݑ1@}<QO]>e+Ёr;ׂS"uaT[m3,$ĉ,>Vݤsp7U |TS%hȏiP?r %8s0 R>Y^̟X3xWmgi q6ern(J QWӒ gLbs, F6:Zث)qQ[[ȃcF gi.&Qo!SH@E0alq@5&zӛAT-1К.FdtJ!j4Qڎa/(KŜ0C5$~Ɩ / g4-.U$%Pam,?2)t|!-2̱ʾC5JF&TzȺt77`xqV/JTh5xq]6sR_DVGn;=@C Bc~f_G `a[I C}fJ<%ye7|nO)65~9 +d{W| \nQpH$,iC!uh.uh@Ŷz-Y٣b-4Ǩ'5bW4GmO遤UcݤJx cæԵXm/|3b7L~XD̂:G襘U\[jdl8): a5CVtOMgacHiIKLu}h"Htq i6t檺qOŰЀb'GIM$[ f1=<(焊g[Ufu1Ar֘4/٣nпi٥vt2ɡH G/ EߵAuU9JfE# x 9:M HbG?i 9z)΢~3j>pP ]W(AkBK1B.-k_OlFxH3-\[Lxl5_,'7-SJXθM @!T=6oAR<@ErR83г/x)\]:satQ0un>⏵,Xr졋4K~a gMރwPKYP0ؕʲT‘.7N211;1z  ʰg6F:;T%. ho,iȝ*o4QIK5Ȭ]ZUy=bq€(iЊR4ܯK9]ɝ (uHuHȌp̹ l{ә؜z5JcMJ|6>oAv.[hoO膑3 - wꬤ]>NZeo 3Pa/#bqnK,` b9XHivxp|"nh[b~jV$m𬖨;BT_M>_>L!YԺ P=Ҭt"Mf;̻ݚfe@#KH(K;I9W8Z08M,!.r1T)Ev>m\ S|4C9wWot.* SlYG M#$vƥ=ds {wQdfq׳?5s+˦;`$/NߦXux$j){F ԫړڐ *8K&D.dXD5@"̆WK1ip u!>Q=:mܡ ^?8FA{rpI328Ư*-R'VP岦',,![&f6J#AH 4[1med3$e<'? ZTQĹn u|[;Kx!Zcm=Qg->Q.(j)!|mõ997^aJn#P`N݇6n~MJ119kN]WB'ea!4xm NyHޡRVe~yE#\hUEɾ04Bzj BqE-g֙SIq5nl+27'#őVpu͌ɶNW? M-hJ73;X -;|Y#I >lT@^Js4Ǟ^H\hT9oRe` UuzԐ4~ @ cQYEU+@991Ws)g] !umwn Ķ 3M+ ֨< ]t*@굍H]$EĀit VTk?(e $3G!(tې=܆9Se)m|̑>OK=<((Z^~ }s\avH)\aV3ᮩ֫yy-)%wbžYĂ[R\NMv3.wi^^#Axx;3۶J[Fb:J,VZ-;y \\D/XKhd~?h9.:}&A_rV_NcWKMi;u}'PcY"+j2GW_3s,JazIõ2|m=g)OJskbWCH 3 e) ٭7M3^C%܀ ic6@Pǥоc($E݆S9m[W$2E'e:>ǥgNEU(KczKɭ-#*53{S dmpUBs 2/:B #f-ppfRKd<䫟mgXڦM \NF$_ '4'zSl*XdTἠèuƼ3:p')h#aòZ zzncե+V%QW˒죥)yt9Ew`$]!QυDɘhCt-_I\>5!~LれY*mUHѼwEJ!}fv{jv.NЬ e_]t29bFDXwvx\!`n #Dhu^^R0Tu hPM~>mRtUݹE:`sjpEa[`lMa^8pO{h(rCz#B.#0^s/L DC ׅԛ3@n$c"`Ou6>l[]G_-΋e*'H܃Y>c_l{B8..!Yj??ato*R\YEw{7S437|n]]&1/s?v20DB{pΫcҜJxMM(oPKa?߹1=,*}Gra-E3]+FCR- `WW*}Zׂ>iQ_b g!-8iLVIm.aϋ-Yū)5ʲcB*P?pq(1$'uDYMH|grV#5{Ýwz{-0 /8xk=eSl퀧GYŋqUIKJiە]UB: W$i=xg;jg*лff=,"bMMm[RA4c^ 3sxܮRQ0|sTsRFTeSj"$ I2 ^Tu&^c]K@Bңj@.. X?YӠ\Kh퓌aІ51\dp55ዤNPqX1|3aEv=땔]!&<7 Nq}Ѽ0'Ǭ*:|G~ ]]?/vy-NA +>0 ٙa;dS`4fj l47!]m^[ew Uh'@'K_ fHUڢt1e1xxqImIK4fB4ZX ǫmXm"n9rQ:nkښc@]Ú 㹱i0Ɗ;KzfK&C3|/ G>\Rb~Dr;dxFUe+IF8!~Teհ 8)!4Oi>0Qn5 tsk/F`) ; \)e/95)*D:r/駯ƈ5gU6a8Jd;/# > _9.,WrH7yXSB87٪m_ _n20n~(=-6x[}#@Ś\)*"!cV7&2Ģ\f2V˾:='u5h`fgn EeʿUa [ǵ~|^!_v ص.]7 {6zK` 5 #X~a3/1 W@~s; bbs869ꭔ,i NJGLckA.7cOO2ޛ.nyO4FSLJlL y~[,pl/fWƁdɵI fou)Czf暅>5/T <RoGW V b1 .4$JWڇLcɸ'M4IٕrUdx_uP0 /gn;>a([GjZW4K;#5|5b~"5cz$ 6[9RFr}|h9Ջ[!Þ_ϛBU:_c)᫽wCύun.܃[*=4k٣7b4rcO@/7cg„o؂HJQA YR#浊pG:D |e%%^׎KÀZeq3!,BI{phj *ѻu7y~+(aNri@wz"BDf81 KlppSz?6bB趬Ȁ2梑4 hVr^\{ѸYe,(rH8-!ƙjC,ѯ=BqTs슴 ! awD; ʄ\dd(Z+yaWM”˪|%IyWAH'lqw ?u%nc14G4˨>=Zͤ)Elԋ&8^SA/W Dj 6!3쯢]U|и,_Ǵ꩞r^wv+T_ҝ&k{I(IM.Bsm.oo8_W2S&:) gY G;U_ۧꟗey\޼2X0u]:DVXmɁR>8|oQ/w1 6I@\?6G^Z(C0 Yz8/}'_8"(:;HMnnw@O t6Pm-;o2VkRhs Mzvzjڗ|V72q"'!H`Aw%w3gRF=-[M* [+N㼱)H[[|.z DnӮT::R@&2I5o;`AI|P\=( "H79w9c96umԼ$Lm֨,k.Q CD2-9Vү{ W?I|bTNٴ :8b~t$ax"21Y}qV.ٛ[5k25yU,F Hfh$Ex_m#>9s8sa8c*L׈THyй\⏒2M2VǨk sv6)H ɎQGf'G,'$Q>FL:8sA>_ϬTL )NdW_fZK6iZ-1-V(fGǙ@aSDR GlUS1_st ' ^\Zrԇyd#ZJOCao3D{p_v_R]nD.ky}~ XaK|t?oXիJqLK$ldƪt~ 8Ic³Cfv90-a!.CT3y4f<ŽBnPk旡ꅇgp;|ﰥ#deJ?if3 %'j1*4rޱqI?BBx ȏwFGt$zo>:Q}3Pٜh|&C}lcvzE{ݣD h+#迴tHk42y, 5 x16dFmu݉X^[S%^ ]ս{[Xj>A;z3TQ#!PQJ>H7*]x'?or2dS9KZ/2N%3Oc)=fa%❨u0Ja2D̒D)f:}@SS}_]hGlmשR#A~d">i 7TiՍ"#M'xA& #rSq;To&0~@KtB԰ۧ_9x}ay'TZet7CLu2 F1sj1Se C3Q{M.G\%%b˚ً\bpܥ[0q8vBet miF~3~6sSʩTXc}qC9?Lb|Jtb+6heU=r onb6pi:hCl!bѕd>9C_#|6mEqFP9ASMIO΄ iezFXI5|!5~åhQ4mu}r`u:,n;[%;NhNvq&}l(0d^@t>Eݺ [^.^@٫6sJǓe oNrnn:im1(SʒTf?ԳL# d3 +\I)?p3X02Iy &%%u#۾~Qy꤂bN4A3"$e%ԧYocy,̏a4HgnWr m?&CۉxFx:Mv]0R,ڡYK- P=Leb)wA;6~sT"'kHKMmBFg"Bx6zp'tR:. X3?$)WhX a!up1 @{x <\JMi1WSKVD^F?1= DR  X.i;G_UCO+OpԪ{ -H0t*f%QH#f"(mi? ΟUkЅtI.޶no7d":a (k=4TlR=) vKJSn$k2.ObĆ6Nz$,Fդ=zP|5_ Z/c,*F}0M6{{E@o9X,D0+NF'%+rlEZ~TyoFmA/׾o$(⒙}CuļF<*Ըc&Dw<\^砒ViPhB1*>'ykft.x?G|Uſ[- /v,Eד|P,.up J._/M!{kbC\; xq_z?\`HlP="x^o[fè}N&(`װc}b>I7u;8t 4dx),? Ы>E=4;v]fRҡzkI)qB1r`jLv }L7|S7|CjF[$czu=|'5L[A h)s0'| 8͜ʫ9<7H๭K:bЛd `Sow`y{QSRkI=j$pgFLGs`gIxva7twRW"'B6{.AJFK"K/&v^V?lĨMHP!t#굯T~2Z!9KqcwufL4 ZKZ۪M3In'|'LJa2;k>DrW}7\]aWOUߍ{TV\Úܭ\ ?%ATzӧɲ;/[:B-b-0E*xQoyJ5\Gw׬u/$8#e3ca=:&KOsl-Km(3vyJorE^7)]>AĤϜ$@SE"GV>˗q4#рdTv0 14_|p#Dӟ:{NA>?h^:Grǂj-8TxMƞ\y31N)t13DZO9C!٦9Db}(m#8tΊVdycj׬nL7IJ[t т5y6Tg(R]k@ B$luЇ#N9 J!u`;&xlس ?%9 GXdVlWaQ:PuDLIe<<*h* K.2[c_~ìgr| nվaxާ%r!ٹo39áu`s}1_ԟG?WaDXw)TӳuRw:ݵpy4%o.VҎns_$o &UyȷAz!+``=Lֻ6 K :b"0,D|)*iaNMV|zC))y"9Ů]~J(u"䖫)U.źKLvDmaf9h}G(^pmXJk"7X 'WgGgr:K ezt֫Օ9nJHߙ_W{pൈ P7r^9m&Q|Oף*7LPoS_oI]&s1a9{Fq.hpKNC\ǻofQ {uBA器N+m79$<_гGZ 7zĬ9WAo"r@Ⱥ97ʖa^_1]8OPB-6 3Q!_RV\(bx|U&)\{gaܴ#-P_V5tN/y1j^=\32J18m;-4M摄=Ӳk(xx={T|gQUBt"G){QiZu-fur1wJmO\-Qȯன~Du;GPPE<],-ou@nES`}ZuJBen{&C㧤Tmj޷5022!BaN\7duu6Ut&~2 _X{uҋwk>qF8u'&!1tXcIXL!(mǮ=T[`BsOk̯0vݏ,-$ GjMG()v3׎p% <xKDS.ΰ+eSd$?`J[j̥4YY6:*LoKͻ@4/9NhA_闷kc 6M`VؐU jJ!m囏ww/.r@2%.{%jj:RMml9 zǙe^tM[+E U.̗VB<cv.ł W\A8[ʉWG~F0Mя7'oQ?/vKwN5ޅSL Keuj-j:S ^RCJRP,G^Xsͩ^݌ v[uw_P jm0ynx7F3myzw1ۏr/Q:M Ǎu<Ըx y|_>/l`l|]pk`'\ P~蜣GxR`qE.jÄ" 8ym"(Kɜut`4)M&ȀzcKjBTU"d,Kd{%vcйV?U$0(;ս[8\\!^am5l\W WdƚŶ?ߩ(6@fN~L+,bQan.HwGyMD󘚅WmLC'1VK*;!fAt➪ þNWPw% *)u83SYf7 N܃puh1iVR^=\a0SQ1%35`TFEzPb,ci~ïanu;}ۨSE"vc7P[Iw\RA4uoRvwT*Ǔ.6^5`Jd_c:6 w)R`#!bW<2K4 8}P14Q9Z&FA@ٴ|] eLVS|-Qps ? =dZF*\Ljeٞ_S~/ go!&ED~9ma!p ܼn' cA(|:DأhG!]D fNjMtA\8,J`]nWL\~TsdX06EȈd-Qs`?V9y[~jƤ)s;yrfBBMv#ƙ~87mbkǠ*@Wx3á֖WfĮrV6jȚ\S+q|IiEBX͸,hr@ 4#;wwF 'Hq|]a{j-22c ꥑKrYyWh_m^ɛpdl.4#6 ,6uw`F% &z$jC5>:Y>nhT70ed]I8oS7?v{5GhNS_Ŭq5d_2$DO^mDTk .,BNZ=hH 3 ۂQL?@pJ/3h7x3Qf2F4}-9hVw?8%υyg59H[s^"s$*=CHI)ڕCYYȐe{DxW\I_K fLW3S&ڀX|UJo&nX̢ 5AOIH؞T[y0Դ`r;kgU `&}Ȯa9M&Is/)ؗ: ~!^K&&A5YmyJm*$VecWN=0!|g%x\U7cن'ZB886b& p6ʹ1\Z-7<.v8ʻBf Ne7VطAqC?ki:W^x?"p(_MBZvAlR/^}Y+}S/J{~BEz.x̵yw ՛^7 L`;$ `O z^֍ Ԕ..{`+«[/Dm?mwHtpb67,o*!лfOw[{G 'rB:(\Y,#kXC /v>]-38a*l0|<͇gR8sH:ڰ"iZ [%Ǥ&-XS5uaGL7+tƏ6_k.II /~m#{l]N";$`~e̖i a) X^W v`aK ,`)ꦰ(A0ہl)L]w ;ci"䞩j\l$E:^~;(^Vt5Q228d? ړ,&ZC2vLpdB? H5XQϥwv6IcC^BЛ+Z,j GZ}†bβUxxf7P&D䤵?~"(QlC D0w4@ 7="Hϼ+ݘ`&oiwM#qXөhhPR:d"'}Mll^ȡq ϼI߁.-'@dReR3U^1FIu/%:)FIsynEMir=w~[xEӪd\*N~n4EY%bΧeLaeИ{MRd$/ fĪ~L1zFR91ܵ^ZWT:>KGi Z\(kKQzJ#n2@[2U롃`HR7Q3D~ ~h9+g ݝϲ T4N_- K QDJE;8'~&"3Yɣƭ6K =˝Hm@F\h?qͰ'Both<@QN`+ߪ4TekQJ=9K-ŰU~5?2_U:1+nXs#.j扳_>e|ož&|}xس]B39j[W8URVK +̓܀.S0gYEVGaPD"ޜQO❩Ftq2FYh] [#27XIۓ fZ(*,D2 _FK;ށ\WZpn PQh3 W{[`Om폌Df@d:c0<2mܺ:<2qMۄ0)P#0+'Qu'FX`}%?#AƅZ*x~;M~$ ^k)AgT:3S)m|6cY12&dCH[Z/)Ֆޔ/HlwmpNˍ&oKJQ!o4 >W=%!NVi%5vr!}F-_ EnG(߮uG nD24rⷨ2_V8=8g~$Yܢo+o#0 o̠{1刎gi 2>jnh -So?d88+MXdqر#1#P`g{aHl@șΓf uFg165WLal0сuMWKtq2򱍔e70vͻ3$BEMlJ{!kZu_~8XHg.(}|I`nӶi~8]oz*_VʲN)_n~G\($'Zἀ@Ofc!Y2R5yWe501X&xFm p:V ;^VQ%H[JadIoQ$3}eYγïNϒVeZhl'54LN=KNC gBU1ŽXvY`g9M!`7[:aBie5xgz ͪDGpa6e_?Y)֚b,(4'- ޵OԀ?Y].ɉnyD051;yuzDi{u1cg`%H[208X""ӄMd^۩G58?ǫm".yhҸBLlR,#G qj'"A0cRZg7%;0E8*P^Lx":i+TVQyJtu7-ry$~蠷ۇh=n"֭C\ƬgY%":N0XuJ5PhgɅQ(F \Hl;oѠכ0 i A.;<=/Cjw>$<@X7n|uk9ۈRZ+yR !…aH/9#V3s9ֽMRWٖmHizBO55ِІ3T[imh1-8! r{D'y;h@ 34S879Ȝ=9SC %Bkr72~ Yc}ADk4餻5ߝ+7*A-q \Q0hl>BAg -O1s,4?xK q TltT<y,Uֱ%E0H•'{lXd[寕#a-ܑ rm'&^y׼)u ̰g8m L^sEGù(Z+1~zȃ7іU(Gؑl_WJPi~<\Ճǧ"a ي ej.&޷a}SMuW_Fq4rb[~|o;)j9O3 ͯ &<hh-Dt`WǍV170>70!9T倕k\?B#gM/ a)Ě rs%XP 朢a@.I)Jw--m+7DtpwggxsQr}ԠF鹿y,BR_wx=az cYSq;Q+3琵HQEdC& Ɇ!Z6w{, l#kpó6U~#pƤpA -:H@VP{l⏆pt^Ü؜3a6,m8g\՛>^<&>}X vN+$=yiy@;Ih&TDOdPw, E&!Zfț9[5dۅ{y<f'`H]ԄNM~罣4# \j-s&/us8*)d0cc8/Lw \C+ KBa45Iq͛,Apg֕OۍUAtcLxA)xҕ#(Ԓ$CM_usTQ(:ozĤco,nϒc~"Lf/&ʉ j& k~W`x&4A||uc4;` kom+0>sKkq)oxM:Ξn7<"a'V"4}67t7{`:(P ;+LB^&6R먯7`n\cp]jTEY~ [E ϒg;+>@x\A*: #3vC$VT''fM45hNu/LuXlQ$%1 h9{oiGwxK2#*2xOCJv{Mkz#]>luD0\m6rLT)"{ _!Yיhq`tQGj<,H١;=I]9zSa4H|s& &q0Ol%d/)ǭ^mH٬UW,c+&S*ӽ J|U?Tȕ&iTl tTj Z5[ iM\Uւ([iM]=W1"c%DY IԪp=G>V%/rU]_>4 G* {lpBc>/[A[:V[;an}C\ΌV){%ˇ^M%Z[Ѭ9u%x>i"Q"k&j@" UBA{F0 p$$کXW_v'/l(BS@gPJ\/B`#Z"A 퐭?B|yt% -eC#zuiu4"BQV6Z9`GI$7YmiL U}'?D_|r|u cџ+Οiw5R;7BG#y9;{RɂlZtx Wì,,XD8,*bhe'|oQIRm瀬 Z-U]HCpI5C#<\]gP#=V'KlDBSzH¦Ư5su!OO~pTe9;^[^XX8=$gvD 7[pj폕X*jmHF*q`f!Ƒy iƾ19ٷ1X1Q7}f(y~Pc km!Ы pM==*Fȇ=`nįX)Y1}Ty(!튋Bs_7s|Saއ jXĨA`*+e,{WG* 6w*и2CwO54:gL9~R߉m7{n2=G`ڨ\XJ&(hboz[kqO>}VcAxqr cZ؉ҌwbuK|"Ԍ <>V #EVXnpORNb 2n<CYE0pU_p 2Άoכ]h&7LԈIlp~o<6ބ"vIVGv?Tp&l\\Ip@$3o xK<#{)-GɰVfŚN!Vo@vVYYBΥ{&Q/oƃ4`[;1T88C־RӀ!|e"}sA k B~ީ#t(-a6l~sjG/!)zJz?5!rV]j k@5dT@:H̀],:Sm ׍H-,/3q sEn+Us=)dLaɪy*lӰTF@}CbGΕ^=8?OwhCJ.Vxs(WT>!VZ8۶Ƅ` 3'!&EST[ uޤi*)܏`t-Z*==QgTK0]Hon:pGy儙ަ<)5 PX%8sC^5  "O{hN lل$i*Pc!6_PIqD1"o@$nA}bm1HAipp+Nݘi J }!Pǖn_TdÙQq:RsU0_"=*1کJ BC}H(y+8dm;H\cO=' mBS)6_ 8uઘ5.-F_OfFNhް-8fB:O@%/v[q%&[oK *ImZpև߼6]4A[v M AWuMSW+%Eww2gOW>yw=þ@ڬWŸ A@輛ɻXJ4H6el7–\- e{7jVzY$b.PCˆ#h 0k3[9E fVE_`?d4 L EKIjY "֙g"\l4DR |c!ZlTOHUUϦTfvuO""E=H"BP<+&5k}2)?K(cτBI kТhwʭ\H蜖c)pp#D~?:fUc)]@f:FM\p`wJHaӴy.G eqn0 S(j kemOKJ*cZGjûXZě%:PE8^o'94o}F=!PyQ)LieڍB|lPG $ bxdCtY8䶶s-l VB_"2sa+SG Rpq{u;Ty'Dy7>14} RF7x.`IEԘPcsiٹG nAj`}Y+ -0d4"?%l2 ȋ|L08}AW^PYY `}WLĦ[J]B4I yQQa4!k?d.dZڔköV { ?`b| {K32uơS^Vt?Sp1SU&;{@*i[GT4, ;:c[Ob1Y'FRFB-k9#k@'5 R0Muk=~ nk>g_SE*@AYϠ|l/MįD.IU XZ=خ6ON9g?5ecTW>$¥NL1(5UoxD+)%׭2Z 4'bh V}kk"$Dd8{Tn?b,cq&^5{-`XaLr>ңlPou(`_07Yףt)2ߏhQEcL3axْu3ƌj*ɟۏxu6uLqG$Ih^-JtrY?YGc//q88-ö,q9< Jtf%"ƥ$}OX)^ܴ#2#nqhCh95ht.1<$2{F e#~z^ $; T>cf6mi&:oʩ6zC # .d CsI[s;!]2Kb8 N)f!uHސdSAiy_A)rHw@ۢK!1ͱcY҈٨9܏ =!]UAZO#$-D#"w՚]֘<MٌGhhKA@ڎ~*Kx@+L?+J8SޱiT-ES˗"X Y +E-W@R(#vH6oٰu؇Jy*8"1I"'gcLƑ)D',BUn:HinGW O9/гAn *֣H(PԺH[NQO 򱖳13ֶפE%̳G$H+ ,YGeIZZ6kaQVK-P;0seH>BlB׊)OD#vpanQ& UZޗ`+fPo24aIwߊ?hޕɊ0R5?E%r;%f ka~-ةYK|?m3;E4wDV0<x0O/ٷk"fv\֭Hi"i9jBY'W=-y7`YXΒHQq|M=G+Z$eU,4"g ir?O@C=}ߌG. ղɕf% 50,aA&,𓘞Ar8hF̿Zк4y~Б9~:¦xˀ^i݋R>;>tLlc%EifR7^ C!vK{;X˂H@V(e]LW05sۚ&~ȯZH Wd_4ąLOڃgޏ6/=}]E4,2Xr2^o[s@`ّ%aw 5ʬ7S@YMYI5KQY >o!>MƉ3ȟC%ųr<*t3 Gm5Xhg㷋x}L\8.4Vo@E ]eK$my-2Τ׷>wԥq)WѲv$Dn=ҩ{m=g2bq=d1:Q|.eRsR+76r48R o^iǮSmtzwwt>~J2W45JrV9z}<lT9 슴=w n%ՀMMx98RCJm9`#YiDS3 ua_Bj)'}D FsDž[alL'a0Eo 6Fw:48M~3.,cpF9PQEI(KP},'y!kjyp0̳0ڍi%4v$Ǜ^4 6}q.gC',&ڴC̟>V3ۥ (i1.o*ٔQ@]a*ujUZwvyx ;:i^\X6J8|TpaHqbukYP .GVNrƗ)rؓG)$dzr(I4ZHOc7\})IވVD!\ &xÒ70{'1{&Ԩr1n+u]-Cr h<5_VZ׺MupL.fr}86' _]c7CgGdtoDM7_  ʆkO NQGA "+ 녋qʫŷiZ>z\- vj,vzۆiLpox)0c`,9 j{\Yԥ9~}YTOPCD}1 #74Lp@n;{f0'0*vxue0 h e\ ;ɖ? } ?:}p沓t+030l2ZKu{익S'˜P)m{ 'W7r^n՞ )1^K{h$uhnN}/`v9ZKq UCAsvv[,- M9^1iҧnW!Ϸ 3aր.ѬQ3ݕ~Q~sx}Y}L:i렕Ma t拠WڇE!S)BzԲr/J^rlLqǮK33^`ŧ*T \m^k!awfD.aX -껦&/jjKP6 ̽YQ$uà`ƆH2u#Wgnwf]шِ1ֵa8*쫬mw "\Յ'4#?c<%f@)9%M͡~(31[HSoK,?qd@"P="Dnen6,c1)wM*QGgxf ~]H'cL`1eE ՑOjĢWYz(T_xͷg)] C)˨"z>f["E9WDL]>NY *7ԇ+` \gcA>Oّ{2vb*50-F0}x ňv\c1S^OPXzv&i2lE S|@ۊ&8Z?sPlK/v/L0]EV|ՠ]Bj6vl4(V=ܡ#E+:CCN@w=ބ18p$ӓ jhOF)5hd7*S~mVxe>Gl]56$T)BĶQEˇQ)D Հ6hOϹVO$-{Y)ut-!Ce`' >*3H =_[yut]\AXKѩeuyQ4/ hQ{!eiAqT+!7,k\YC@K)I[i/G%H;;}ۦ3#<䪚!˹WWro4f] n|vf́'Ҩ+nX y"3 kpmt5Qͯ6JnC= &igQi[:`L叮's ܉[>RNK%!ej_mRdo6㭢vGd-ңgpw0eix"f]*Bi:1-%xThjqFQ-\!O`ʘr ٸj F܍gcv2uΣ~h4)[T+ծo2+7"eqcz+Av%$bC]gt]9]&ᖒQBۈyD:@P~B{!:-rG'>`ze*6ċR2!|5eE 8g09`Tj <#2+񵉍<$~ .DgXK)s8<vZjo#G2+#t)K ۡI.8.*@CG# rAjעM=ڂ*/ʴ`. SZICPzeE>^}ufK3 ﳕ|j tgB+q ÜӤR[ڜC؆ۘ]w;I:ot-ϋS(Dvfv%ʦldψjOXZG7/˩{ &`{h6"oUubݾanۚރpjj9 (W 8L-] Yʗ+x-<.QeBLZK֨_+A$c+(*2c+< u1a  sSY( (CT/;IqS RkGg x>Z!,q~q\5A67::bnHcvTOoz ؔMl0d ATAh[Ilq6 %7oi,;GR$bz:wEzF4oa=S\,P7:5GpMqM1uٻ4کEQklxT%WgҜQ C{<IKuyY  Re.8G$2Vf*@ Y 0)u7e5H[֟x<ߥN0GeUROK|j+imL} C >bGeVuj[bs pW_A7#uX0Y{תկ/@ *YL{2T>`QF1tqG Q}]/Y@ڥEi9Fҗ}7j`{R_2gLIa,x t[Q?뮉v64ɞg,laI_f!9L}I8j)_ d l[u 3?|+OԿqRQ նtzí~౗eLྒྷ*=V9eF_78,EcwK3Ho*ћ=lB@ b2}%pVY PI|讠nw>3C܋r! vSUE c݆.O oO,C['ad=_^RqOrݚObhwY koE6L]3ˁ9YWxawh1lNݞ׌Q3RJD=^#+j *i4/c-l8ad8зY&l#`D%MS&+A 'v!q'$dXx[MYo+!,f:wJO`Z̮N!Pܱ0~i$!hcXEGX?5`W f,8c e6mVy=Fx4Xl̍&9yʘggV"iSv [fUus7pш'V&G]Z+ j@l; ={# g%I*,O?47)/Z|H=n4-~Hg$ Y) IIm$kŎ#S> .tj&>&3::5hUPv~}2Wl[t6? |6qlI; ^)+ſ+0WP2@^G6*1)Mߛ4܅].mnܸ+]԰um"CT)fpfl,/NDq1Yϛ+)lZe^"rM昡ldhyp+s\"Ҏ ⧝P`*@+} yW֯fiC%f>ָ^WȡjU,fn GN$N/luaTC { H~*^"9| f^ 2 zxJ$<(A`(/,|lY1IfH?6Nv(~lQ.#"쇪N䮗nʢM*oMKͻ( 6yf"YJ`jzw]!Az ލhsUt6N npi-*s{Z4Aɬ5_PR0VPm{"%;1eHt#nx#,yΛ]hIҐsy῿VGw^k\DcG?pXNaU J^퀌CXUjBJwH3]'P3لC<<1b\ޘ=,{CfhN5CG)y˜Sqc*8F;_]YgLiG:Q+P YVvۑUE>p^O{ŧIMCۉN-. 1HW[~+]eudK>@(hr,Gʎs؆PHvX+/r`^dtkTemƤZlq8Q[|Kfbjd늕mgd@ FB{Usaԗ"ocݚT\ *xxd) Kܻ寗0HzirgVC6{M&s.j8LLTRm5{_=$|K\?q? $.?TLߩA8٦>:y_c&C,C Njݗ<],p`k<Ĩ?le✟Ikc!Ց$d@{0h$03Y`j$;ϗ$K_T+ރxD?ep3soZn p!XMynDBr_C 5 +^ύ>$Kk\Bu98EzCsURMƾ`-aI v-b8IߘD,}F燽kKAPt,&e1< ENk&Ax  btU< j,2+ NmH'IT$| X-]bQ;("!U?J)<ݏr!& \3nf ,!8ELjߘZ .⺸{)&V!Uf;Q24iR(Vz'<]J%>6Q{f퓒)ivrL؅|n`"WMsfk1 |Պ\&-payӟCOodcL 2;!k)݁ld-/_Owȕ̬d}an,,ь܎/XpBAu\D6*OV7Ր,K%ߢ4qhYDgz- MlwWa9!̕|xRچ"f5?DCrm{6R(}b9 Y(:zg@XTιgFHSVFܿD0\EAa J͓{>\$y%y'dѽoAVJV"?Lsޚ6 | \O?wz JE]FW^gG0Qf!v=@- Q97AA-3!8,x{q=#ܟ%2Ӂ#^ 3! tӍ>smhש^2caYV1%VJ]Z)=̆D!TC 4[CȟL%j3ˇR,.Hm7uۼ)3ElOPe"h,USYjxݑV!(q ›zoRl(~ jshnh=.w:>˜s'/ȏrnM 8n@:K`q\?5-o] *s\rDjACכw%O0Di/'L5.FApT@ ;|d( ~ @PSxE "@B?sTJČfj3hKs2z7T ۚ_fA2ifԋ\7UDXY`)|6Ÿc6W/DEZ);5g`1Q#{Oj1Zիz>xt,yu, 7p$^4Rn90NH4oaf#{Jh@059nhBU&%Q5^,dn!\H~.Y ?}.hvI}dnq@_!OBlql[x.2/uC u1ѫߡ0GUh狷qδ?\FH. iYٗ`G[k(h\DƋm!C/ggB3܋ 6NGXܴhź'}#F4 e_{MY`#ԓO4u@0ݿ{o;'4ݵW@Р:z5>Hf#%Uk #Q=}zٞr!0ad?&!^K)g >}9"t746Ɂ,V%uGk4@a\^m0Zm.lȣ\"?GQUeK(Rh$65\?6o '``R0VxPQ!Ühh}W37uys;5:am>//a6S%f?q031STfLO0nB #te+K:=l5Y;uб\T@h[a! Y 6kS#? ty#BBun tMQDSkf+ܟ*Di %d9pE71׷.2;0ߝm0b4qƯ7(U~>v üU̒lqWay@jr_S.R@C,R&_ .EWKCK~9Jw\I28Xশi5~ oՠ,~yo 7];#l?XDHؾ.Of8\Thu1}lg ^[RSJ`03V!+S%F-.#s9I4,r@Ejf 6qEPvpPGQvK`?cg5{/z~<'ldc~Uk*G*=r*} <]!9ߋQMZL\:% . [%[2Bz>Or%kKC )փ2A"ε ]=Wi>"kdnbfV0J;%0$>]q~%2kgvPxt؎f^2`|x)@xQGm55Jnh$d"A!4jRJ}ó74,R'IҵyW5mc_*.},xm!tX,@ F{Yqq"޲`౳w J-晝TWǴJ3E5z 4Ir݄]I0Z)uy@(5YW‡*s"?rO%||NAG q3^ΕSM9͟H k7ض3 dq@C*6GX;8t,pɺN1糅#.EDd MC6RL#ߨs(oEK2.M+~RCβ:afv? UlEb,@ UQ8rQwHCcWtSKivyD'M(ige@hPQ6ׁ4-=v!N:hk $:r5 v|t( ]ʨUzz[]g>l^l|(7(qoLEd#xpqd*}Q5h߻~Q|`P#\VVߎlq]2WC>MlFcʤ'' %um*TB|,]0_+"\j5 YG L>c|έ yA .iutK;4!I״Sen\`ԧ]Y+;za8gC@<`q"Kƣ[$0>Wm&܊aZo۵7W<yy Î/ȫKIӋ"h=6'1^jÍ`tz?-M'm8=VLO~$ Rٌv!ԧ(`$QV,]yPrVquѠGWVH4UmvrKm(KD`+ G'IQ/.0 fw+{<5꭯[qשU5g^74gog?rp)͜RЯ6'#y6z_ )Ih7)m'3q>f} kG$_0 . K1>]2 4r 'm5ؗ-JSCYvoA0ϳt,V9RY}tt9yO?戮lvݝ0Q^x][rEAw[z#c/Km\rbm[ضvR&F[DFAqq$ 0wV1 &ꇕKc#[qn\| ,ȋ)<6u[mn<} ;7TCZ3-椛:,TT7>bX >W[wk]rzLC+k;{G8W3?X_%̾1H_8In=qL@ɪt|$ۆԾυ|d'^ DiiN*SK" VKl'#%=gyIz<7[ldx NBv L$8 I&8!jh?3iXE W{%}v2;[g>>Oaң1> o2Qut#3_X=ƽ㡁mNTAWuu*N8աA.dwb{UO@ʻ3 gy2 A"0U#4%n  K .f=ej ܄h>3xzleTodakC@ûq!aI/m1e.~5P7{XYY}0lgYe 4m77ICx FQ,f?sjI 0!=tֺoSLm/rԃD sBX* #8sArj}7ed$?5N\t._̀0#~_1?~! N d4U.+b6ZL)%p:)㕩'L29+abyW+K<=bɄq"Pѕ$;%HJx.%'O6Nrfq,ї5{]ִg&cV hm5tt;ry~DGPW)VF.5L]93@F]plQޮ`k†]bČ(Pk9EZqzmUgxzFeXc<y r:k?@җIɡ/ M(c+{Qz:@8cG."$>\لH*y F/}@OR-l5swaW>Ge te5@pU:z|G|uSyaz3sNMyܪ0/,xg\\ /_ZeYCH43q1v :2K8Hf*tй9|۾)Vdʲen`{2rJVhk v-*?Ad Gc ỔPȤ rm+&rXsp̆r4flc&vvUuGV:d2%\Ǵ{& ϧ61*¢iRаAp͘3#A]^ $783; h,'^iHb&JJ[؜ewչ>KS)5idt,A_niD=%0w؜=Zs0{B} Q(`qn˭m?&*{‘F.Bd>kJΗ2ŹDKs[/j)ⷓ>}͛ƶϟ lgWMַMrI=4ypOׅ+Iid@oNYK?:{RI$smJv[9ݫx>ue۴nNpQ]ny+o nOWousqgOsCcu 5QT9ʴ܇k*uٕ<:0Afd }' eFgB | R^`/+k.0,'_ޝa2?F@R!d`E$с1HǕmLӼ$@CՐu,)kXdgB)=])l^mU]=˧-w`p{̵p CU4ZC'] WjЦtXWB/J-sd xzE &Lٛ[c++xQHO{,* S0`xVB6=kOFLSR tL>~#yƚ)2yhy[ B7vCXmѺ8oPa_ $L_¹dqV=˺8^_~CUjgtMtqJjB7)ex;Z n.^ywԀwJMPrz+xTJXC9l"u*ŜH*/aMV%GgYا%Ym|FԷg r>uPn-*mo&:Eݝ5buJ[ts06נ /?Q̷Bl[Sˉ22 p(N5H.wj"f´1{b4NT%rٝ(Z0OlTKʚ'B NSut!}|ͼaEҊYZcIPMT~'tb2eOaRsתMgUrFD`Ih2iϟѴu{œQ$݃ebow.&#,:qg2rvb!h:We_a 0~RVZo!Qq"ȐC qo߅)je ;G yT .e甧lJ<4Ldہq돔Ages>OLy{:]<2dijлQ𩟵-Gg#7yݾ~@mLՙ%ZbTѐWm7>^'|=n%ﳡ*O(&, 9bըS?V,Jm]qΘpOuX{_Uz+sΣCi7vE5&itxe"SKQNGOQ"PFcaG4uR'-S&G^M !s \ udɪ"І9c ɮ4,~Lo3 8М .Hg42 tF!cqb,=}zf:=ڹֶ X]tG :|WNZ,vg"Y Kaeuq۟(A鹷QDLXՐɕXhiLwPUJ̠/jiiV>vjDB>,вMqW$"BZ$.~JsKW41V=T8l28jK̆Vr ؤ S{.fʪ3kZ[rRʿV;洄Y(F\ U^K&mrFɃ}ɛPTQ3 <3 T]U["tvCFg!8lX+/wll7q }9JL'=!Xu$ fStw#U̥޼P鴡3D^c3z>L=k;]Q$@>>R9Kiĕ(v3UE09D<{DǏ9TuJyHg]6I}hd ?3]據-wbeAֆfVC>ʱ.,!u8v̏)jMT|;7i\َ]57|  4/H P&?yw`n7Ɖ#PskiXRxy'Ysu뀽+r#Oӯ.bv80bI"sjv Q?Led4?TPhPTB7 EAF]cYCQ|ek>iYٿh2YŨ?VU.]0gVQpJwCq\jl<шf59O"CF2[uP l&%\'AyfOJY%r'n:gv':>yXwBHX畘S$sDCxE$VX޸a i"i"|JL k *yQ{(=k8˃ffSi$^Kh:_q4V`cZ"(.ƹ~%3`i `g5-^0,; YWŇڂje/ODil4Af4 %2 ߟZjY:g ;PwpFN B?2M;YF[a@t_5?VC'툉_$_|DOjyճ!(>گ!Mwr ^i9oIjﻜ)76!79x$-Ǫϴ{- Cĭ-N%!/6:F`U0i3a=<}|C:.zH ؘ6("ZWoT|b3fI{j&t_ 5PƄA}C3U%MJ$Wۣf~~iEGݔ)}3C{C&X]CUwag`{,94Dڔ,s] \5 r烣.: V|7g|Xk^4}ܩZry[L,ӳDQQ$U׸t9dNbvԧ `"vB&tі5^hXr1[vc_1WT=42`/K&%XO4?.]N=Y|>K$h|J%i9sE^n&s;A^ul$Z*+1/~:c{h'b@jmܐt%bݲKkh\/&eQQ6T"kA y<]qn mBݏQ"T#̡4#xTՊ &a&wɷ{X -Vn{/1YDa;׍ l, 6JL&n׀3GY=ȌY-lm!UDi#l^x*͠MSO#XP?!V:3c ބGYj^ N ngaЙL^]8^O6(?[!o$ ͡t -Th+T}iJGޭϿ)q(rZAsVl+^f8on8R$>fnY$, LڰAfyFr5Ӷ3xVVA/]FbjbIGݾb-rV) YK-jI/{EIg7%8SQm\eF-(; HF)`q&۞ҎCjx3:&|Ñd<3е^i[0S:"n √t 71yzyғV.ڃ;o-2ե R[ܰ7̨zܶ }6$RS!AP8,xsx̋hF?ޚPguʪqQCfa8m۩h yHe_~wQ@M* ?:uaEa,~KiJO,x=&!\7NE\yc0[0Kybs`BⅩEj'hxChRߕM5)  Ww>L,x%ۏ&˥kH[ް~ ZR-źy@&cn0jĐg A;Sq(#M#1SanL]fb͑kXvaa3*VIfnQ7`'Ogqi)P~oIS3$kSDQ"_{#} F$0U[u PNa# R,q1^1OZiU9 $߯R oZuM&_8x$eSU[H U$b^P Ns^.쪽 gc5_g_^⋨%'BܫZ_& S]3taQ>woH)xATVWM_X`J;]p),jT{sjzr%vGll\܂P^co@Ӯy!Vg;`/- .84V| 7jb R(@T H;w!8<;>HT.^uaW n>? m{ai8X+٨U=B戭(rLĆQᅥ8 ܚf+M/BwfBtY"zO< { ?njw2O:7d:$>PP4 8!vkcR߇݃~[0?uFȊ XGEIR .ZÓ36LD:i@]7BNs6U>n?ߨwJJJ,KMin^H(~nCo3{N|iz<$ft(LQ6Kg=/?h#@uL+ \%,5;q |%ogyuSdOS X2b׮M~h!VΩ܍״4Ua(ѾWPWȾǪjD& r\I/mI"Y9=eڎR`8fGS,׋V2(Y2Vn.X]WH>RtōD[v|LGYLlnP_ _&5l1kfַQE1~Z|l07zѦ۞!T&6%4A)Z=%˔;)W?Є4&I}(VF`7IrJEO4-j" k'u}++4o~915dɂNtHzdX)ӪN-_J,522%WF\+qI<@4aJgE8\qXA Ϯn>1Ŝ z>G71D8jhbt{M4kYj}.4Y'N'@NjGʷJe{,OWՊFy "}?"N3{xQ_dDYHkFO=#6!|uLtN~дHfdwFZhQ*k 'emq[rZa.btDFs8y/F1]eSjȲv%/DMx@piXo2?y%/#v>ZL+8&=PL(PzFFZKd2"UomP G*_=`ܛ* ,lX='V6D^.<@i:~eBk,jC_9|rSͯq٬8MX=!aȴdy?T$d}:Wmit~Z%X iU\Ag-Ҡs퍿b)x~$0't؀NbWĐ)&hW+ZeOۼJAXnorñiV2>KN!3 Ӗ,&4zocB3/ RBFO=G2qmtHNEQ:'"JmRu>OӌMaHuDH-nZ3qTV,pPbնaGcHBDW<#.YϡP`qDmm)M̊ )"Ý_s5OO7g+,L: T%kmec=sP~ag8StչX"?ʾNH\y%Iq$WMG8 DqC-˴ kAD8 s `{HE[5!VwfY"6)g) 8%@3@tlRG> "̰o;&U*~KaU=`ҏsIp"V^Ăl;Bq9$ӃڔBGkµ=O5=nKe @Yb 7^ƜZD=v^nF\pn3 21B&4@V[z}{ Q@̟a߁\KT:ʳ@քQHKT \9G]7 R[ơu%rv<,1Elbxoử0C%Lr08-V˕`FTN9D{BU=wr PFl۟ X4b*z nQJZ/B`t5Ov(D0<J@?jBPZHm[Sܿ %d0v&SQDɳO0 9]0eL% <}8s<#{~Qv8?_> cHiw1%Bݮx&!7m:b0ξZ⹘4}=f ՊCcyݷ}  hG|Xyf6dr9cNt~Wqs+ފX ` <[:ڍ\مmҽ)B8` (3&KDς:?Cϲz{hˣPIڱ?o`Ss<~Њq,|.)!9_>W/aJHg*wZBGsM0Rd>Z ?:\0.]1n"oQBs)H"TB lWz8k2<(vʺG$L OmАosF$ۡU_ٜwt^b3&aӟTWf8..\%XޘKJ1?5@>{A2Ukdz\tòe|ZPC%pCEYjQag?-e]N ˕gVKjNm412^ tx!ȣbCc-e|٨,c.+ȱ=Ċ,ߡZZu$x1+x9 cƲAb! ]ЧbHG\zHVC4TjyV %*BײPR)@9-kDkV՘iCܤMSD Cs= */>xyˆGhp"?Ej">&@6"Pv%Qo`[ro68_O8^{ 5jN *nKmDpͣEUoFscF-VVX,qAIE~jn9qWdn2zrQ2)m2I><]s*rϊt=Y73a؜@ur\/宁G"r|m&=7ѤSM%!!1GEkަ2P(:W,|[]Ž q^>rZ"_Y-4_H}^6s@-+/䍝*\b 1 w .d9EXXfݔqrSbPB$updʗvO;6tՎ0=Քܱ쓷(M`JLjSw\l;ڠqS ~l0a7|`~D$#4"Mαg;B3ƷRqWuɴKWCP]FW7\:xWj qX=C7)mS5E10rO@"_7|Jx%NQpE_yh-RDʼ̓_E=6 +ƅXŁSpŹnNWV7u: tY snzy 8dp2m3{o!!Q) }  =Eݾǘk{ 6T r`Xn_v')S&.am~7(FX.iѝ&m[BCo.ACsޖ yڀ# rCCKO5.z`(LN"}u@P̜ɤ.ߠ fjyeiU6y*׷$+fd=[5q-:x:{B 3txlvhGXZAP=_e&Bdo94)tk_j#g (߅}.74vd%9C4ȧV3D|3m;DqL^/%ن:4h~S2;u-A^J#qŒ,VWv}*pJF#v1& 2AJcc3㋛jz y\_2ğqⒸiZ|")8}g65DHXGUbJ)rK񎳒g3IY2,墲ΰJR2" v8@h"z؎(FED&zbˑ\P_ig` d!HeuҿGe,6s\@}\f7Ɩe@w1x\ap_5y"4bxtd4I1No0&(AՅS2fܓ*=Z}"Bd&>i+7 s?lVOQ+v@IG=y~zSRWE= mƭ:Qdʼ8j5P {q7]^<&..#Lg@i'_iÉ%ͯ&g[ee݌ C< ?%3ۄ*TY;Pzgm[ TZDZ;"=z螄O[EjGs {;+Qdȟ& #[ȌUi_95eGrKkcnbS.Fv?D7+Mu>5Wog|pVrv=0heڄxB5{TaZ%4kNJ$ B䝆;y& l8BJ1-'Q\+Yhe'AyVJ$ΝĐވ , @%QIBpB`v[^5A%X[ "Wn<Eז_51lOW8VF*$nݥ2j6qoK97akruEY`YdjG76GVfWɱ ΘA @ Ts+ )u GHZإVo1:k 50<86hNj1[',b~vm?mڙP.4PԳtRV5H^]%2w_I赛ˬjz [̒5ֺԾ3ϥu`X QX4h8v^[:kOˠ}؅uө~:1Բ?HVd}XɦF~A;w =w&z'4 ELq agR e5T¿޵`'s{9u9{c$fWC@`ㄑNWI/-c3q8O[T[Ls'ek'6T>ьn-''!05< jF.(>wnU6gloeV΁F[ɐ_F waj(Nmy('Ej