freeradius-server-3.0.16-lp151.4.4.1<>,^/=„j!*1fb^NY8Vv;&y"jxQqaH[$e7' wkg脇"Șpk@xƕZTR̹͇͂o0ry$r}DGOL1P3)xxZ(6ܬH 'aDu?yrn`5B&Ws1c!o^(YO}BNu:'~v.3O?d ' 5HLX\ox % 7:  " * R <22(2ϘϤ(89T:Ҟ=lK>lS?l[@lcBlkFlvGlHtI|X~Y~Z[ \(]@^)bcdienfqlsuvFwլxyz@PT^`djCfreeradius-server3.0.16lp151.4.4.1RADIUS ServerRemote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service. FreeRADIUS is a modular RADIUS implementation.^obs-arm-9[TopenSUSE Leap 15.1openSUSEGPL-2.0-only AND LGPL-2.1-onlyhttp://bugs.opensuse.orgProductivity/Networking/Radius/Servershttp://www.freeradius.org/linuxaarch64getent group radiusd >/dev/null || /usr/sbin/groupadd -r radiusd getent passwd radiusd >/dev/null || /usr/sbin/useradd -r -g radiusd \ -s /bin/false -c "Radius daemon" -d /var/lib/radiusd \ radiusd # boo#912714: add radiusd to winbind group for ntlm_auth # add winbind group and fail silently if it already exists /usr/bin/getent group winbind >/dev/null \ || /usr/sbin/groupadd -r winbind # add radiusd to winbind group /usr/bin/gpasswd -a radiusd winbind test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in radiusd.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in radiusd.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-freeradius-server-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-freeradius-server-update-$service-new-in-upgrade" fi done for service in radiusd.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset radiusd.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in radiusd.service ; do if [ ! -e "/run/rpm-freeradius-server-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-freeradius-server-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in radiusd.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi systemd-tmpfiles --create /usr/lib/tmpfiles.d/radiusd.conf test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable radiusd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop radiusd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart radiusd.service ) || : fi else # package uninstall for service in radiusd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fiQG " Oke4 e! hE  NoF<k_6jTd "004+{ L' 8!h  t! _ 6+klfD [W#wWb!4 E(#+ni!_D<O6 F m$N  6/On4=Nm  !X&  (      ` ` ` H   (  H  P H h   @ X h  P H@  X X ( @*AH AHA$<" *&*(2nwyD 3.~n!'O\ !w@.UD"shL& :+'|;Q[A3QE.1n/yCSiWR(U $2 ({$aERK78d  ({\M#I 38wfs!l+ Y  y< /|MN hAcz <Uq~F|,t )٤f uC ` = YNKAdam Majer Adam Majer adam.majer@suse.demichael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.com- CVE-2019-13456.patch: fixes a side-channel password leak in EAP-pwd (bsc#1144524, CVE-2019-13456) - CVE-2019-17185.patch: fixes DoS issues due to multithreaded BN_CTX access (bsc#1166847, CVE-2019-17185)- eap_tls_ocsp.patch: backport fixes for TLS-EAP that by-pass OCSP verification when an intermediate client certificate was not explicitly trusted. (bsc#1146848)- CVE-2019-11235.patch: fixes authentication bypass vulnerability in the EAP-PWD module via invalid curve attack or a reflection attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549, bsc#1132664)- install license as %license instead of documentation- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes (bsc#1049086) for issues found via fuzzing by Guido Vranken https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682/bin/sh/bin/sh/bin/sh/bin/shfreeradiusobs-arm-9 1587125375  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~3.0.16-lp151.4.4.13.0.163.0.16-lp151.4.4.13.0.16-lp151.4.4.13.0.16     !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"##$$$$$$$$$$$$$$$$$$$$$$%%%%%%%%&'(((radiusdradiusdraddbREADME.rstcertsMakefileREADMEbootstrapca.cnfclient.cnfinner-server.cnfpasswords.mkserver.cnfxpextensionsclients.confdictionaryexperimental.confhintshuntgroupsmods-availableREADME.rstabfab_psk_sqlalwaysattr_filtercachecache_eapchapcouchbasecountercuidatedetaildetail.example.comdetail.logdhcpdhcp_sqlippooldigestdynamic_clientseapechoetc_groupexecexpirationexprfilesidninner-eapippoollineloglogintimemac2ipmac2vlanmoonshot-targeted-idsmschapntlm_authopendirectoryotppampappasswdpreprocesspythonradutmprealmredisrediswhoreplicatesmbpasswdsmsotpsohsometimessqlsqlcountersqlippoolsradutmpunboundunixunpackutf8wimaxyubikeymods-configREADME.rstattr_filteraccess_challengeaccess_rejectaccounting_responsepost-proxypre-proxyfilesaccountingauthorizepre-proxypreprocesshintshuntgroupspythonradiusd.pysqlcountercuiippoolippool-dhcpmysqlschema.sqlschema.sqlmainmoonshot-targeted-idsmysqlqueries.confschema.sqlpostgresqlqueries.confschema.sqlsqlitequeries.confschema.sqlunbounddefault.confmods-enabledalwaysattr_filtercache_eapchapdatedetaildetail.logdigestdynamic_clientseapechoexecexpirationexprfileslineloglogintimemschapntlm_authpappasswdpreprocessradutmprealmreplicatesohsradutmpunixunpackutf8panic.gdbpolicy.dabfab-traccountingcanonicalizationcontrolcuidebugdhcpeapfiltermoonshot-targeted-idsoperator-nameproxy.confradiusd.confsites-availableREADMEabfab-tlsabfab-tr-idpbuffered-sqlchallengechannel_bindingscheck-eap-tlscoacontrol-socketcopy-acct-to-home-serverdecoupled-accountingdefaultdhcpdhcp.relaydynamic-clientsexampleinner-tunneloriginate-coaproxy-inner-tunnelrobust-proxy-accountingsohstatustlsvirtual.example.comvmpssites-enableddefaultinner-tunneltemplates.conftrigger.confusersradiusdradiusd.serviceradiusd.conffreeradiusproto_dhcp.soproto_vmps.sorlm_always.sorlm_attr_filter.sorlm_cache.sorlm_cache_memcached.sorlm_cache_rbtree.sorlm_chap.sorlm_counter.sorlm_cram.sorlm_date.sorlm_detail.sorlm_dhcp.sorlm_digest.sorlm_dynamic_clients.sorlm_eap.sorlm_eap_fast.sorlm_eap_gtc.sorlm_eap_leap.sorlm_eap_md5.sorlm_eap_mschapv2.sorlm_eap_peap.sorlm_eap_pwd.sorlm_eap_sim.sorlm_eap_tls.sorlm_eap_ttls.sorlm_exec.sorlm_expiration.sorlm_expr.sorlm_files.sorlm_ippool.sorlm_linelog.sorlm_logintime.sorlm_mschap.sorlm_otp.sorlm_pam.sorlm_pap.sorlm_passwd.sorlm_preprocess.sorlm_radutmp.sorlm_realm.sorlm_replicate.sorlm_soh.sorlm_sometimes.sorlm_sql.sorlm_sql_freetds.sorlm_sql_null.sorlm_sql_unixodbc.sorlm_sqlcounter.sorlm_sqlippool.sorlm_test.sorlm_unix.sorlm_unpack.sorlm_utf8.sorlm_wimax.sorlm_yubikey.socheckradraddebugradiusdradminradrelayrcradiusdfreeradius-serverCREDITSChangeLogfreeradiusdictionarydictionary.3comdictionary.3gppdictionary.3gpp2dictionary.accdictionary.acmedictionary.actelisdictionary.adtrandictionary.aerohivedictionary.airespacedictionary.alcateldictionary.alcatel-lucent.aaadictionary.alcatel.esamdictionary.alcatel.srdictionary.alteondictionary.altigadictionary.alvariondictionary.alvarion.wimax.v2_2dictionary.apcdictionary.aptilodictionary.aptisdictionary.arbordictionary.aristadictionary.arubadictionary.ascenddictionary.ascend.illegaldictionary.asndictionary.audiocodesdictionary.avayadictionary.azairedictionary.baydictionary.bintecdictionary.bluecoatdictionary.boingodictionary.bristoldictionary.broadsoftdictionary.brocadedictionary.bskybdictionary.btdictionary.cablelabsdictionary.cabletrondictionary.camiantdictionary.checkpointdictionary.chillispotdictionary.ciscodictionary.cisco.asadictionary.cisco.bbsmdictionary.cisco.vpn3000dictionary.cisco.vpn5000dictionary.citrixdictionary.clavisterdictionary.cnergeedictionary.colubrisdictionary.columbia_universitydictionary.compatdictionary.compatibledictionary.cosinedictionary.dantedictionary.dellemcdictionary.dhcpdictionary.digiumdictionary.dlinkdictionary.dragonwavedictionary.efficientipdictionary.eltexdictionary.epygidictionary.equallogicdictionary.ericssondictionary.ericsson.abdictionary.ericsson.packet.core.networksdictionary.erxdictionary.extremedictionary.f5dictionary.fdxtendeddictionary.fortinetdictionary.foundrydictionary.freedhcpdictionary.freeradiusdictionary.freeradius.internaldictionary.freeswitchdictionary.gandalfdictionary.garderosdictionary.gemtekdictionary.h3cdictionary.hillstonedictionary.hpdictionary.huaweidictionary.ianadictionary.ieadictionary.infobloxdictionary.infonetdictionary.ipunpluggeddictionary.issannidictionary.itkdictionary.juniperdictionary.karlnetdictionary.kinetodictionary.lancomdictionary.lantronixdictionary.livingstondictionary.localwebdictionary.lucentdictionary.manzaradictionary.meinbergdictionary.merakidictionary.meritdictionary.merudictionary.microsemidictionary.microsoftdictionary.mikrotikdictionary.motoroladictionary.motorola.illegaldictionary.motorola.wimaxdictionary.navinidictionary.netscreendictionary.networkphysicsdictionary.nexansdictionary.nokiadictionary.nokia.conflictdictionary.nomadixdictionary.norteldictionary.ntuadictionary.openserdictionary.packeteerdictionary.paloaltodictionary.pattondictionary.perledictionary.propeldictionary.prosoftdictionary.proximdictionary.purewavedictionary.quiconnectdictionary.quintumdictionary.redcreekdictionary.rfc2865dictionary.rfc2866dictionary.rfc2867dictionary.rfc2868dictionary.rfc2869dictionary.rfc3162dictionary.rfc3576dictionary.rfc3580dictionary.rfc4072dictionary.rfc4372dictionary.rfc4603dictionary.rfc4675dictionary.rfc4679dictionary.rfc4818dictionary.rfc4849dictionary.rfc5090dictionary.rfc5176dictionary.rfc5447dictionary.rfc5580dictionary.rfc5607dictionary.rfc5904dictionary.rfc6519dictionary.rfc6572dictionary.rfc6677dictionary.rfc6911dictionary.rfc6929dictionary.rfc6930dictionary.rfc7055dictionary.rfc7155dictionary.rfc7268dictionary.rfc7499dictionary.rfc7930dictionary.riverbeddictionary.riverstonedictionary.roaringpenguindictionary.ruckusdictionary.ruggedcomdictionary.sangomadictionary.sgdictionary.shastadictionary.shivadictionary.siemensdictionary.slipstreamdictionary.sofawaredictionary.sonicwalldictionary.springtidedictionary.starentdictionary.starent.vsa1dictionary.surfnetdictionary.symboldictionary.t_systems_novadictionary.telebitdictionary.telkomdictionary.terenadictionary.trapezedictionary.travelpingdictionary.troposdictionary.ukernadictionary.unixdictionary.usrdictionary.usr.illegaldictionary.utstarcomdictionary.valemountdictionary.versanetdictionary.vqpdictionary.walabidictionary.waveriderdictionary.wichorusdictionary.wifialliancedictionary.wimaxdictionary.wimax.alvariondictionary.wimax.wichorusdictionary.wisprdictionary.xediadictionary.xylandictionary.yubicodictionary.zeusdictionary.ztedictionary.zyxelfreeradius-serverCOPYRIGHTLICENSEcheckrad.5.gzclients.conf.5.gzdictionary.5.gzradiusd.conf.5.gzradrelay.conf.5.gzrlm_always.5.gzrlm_attr_filter.5.gzrlm_chap.5.gzrlm_counter.5.gzrlm_detail.5.gzrlm_digest.5.gzrlm_expr.5.gzrlm_files.5.gzrlm_idn.5.gzrlm_mschap.5.gzrlm_pap.5.gzrlm_passwd.5.gzrlm_realm.5.gzrlm_sql.5.gzrlm_unix.5.gzunlang.5.gzusers.5.gzradcrypt.8.gzraddebug.8.gzradiusd.8.gzradmin.8.gzradrelay.8.gzradsniff.8.gzradsqlrelay.8.gzrlm_ippool_tool.8.gzradiusdradiusradacctradius.logradutmp/etc/logrotate.d//etc/pam.d//etc//etc/raddb//etc/raddb/certs//etc/raddb/mods-available//etc/raddb/mods-config//etc/raddb/mods-config/attr_filter//etc/raddb/mods-config/files//etc/raddb/mods-config/preprocess//etc/raddb/mods-config/python//etc/raddb/mods-config/sql//etc/raddb/mods-config/sql/ippool-dhcp//etc/raddb/mods-config/sql/ippool-dhcp/mysql//etc/raddb/mods-config/sql/ippool-dhcp/sqlite//etc/raddb/mods-config/sql/moonshot-targeted-ids//etc/raddb/mods-config/sql/moonshot-targeted-ids/mysql//etc/raddb/mods-config/sql/moonshot-targeted-ids/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids/sqlite//etc/raddb/mods-config/unbound//etc/raddb/mods-enabled//etc/raddb/policy.d//etc/raddb/sites-available//etc/raddb/sites-enabled//run//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/freeradius//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/freeradius-server//usr/share//usr/share/freeradius//usr/share/licenses//usr/share/licenses/freeradius-server//usr/share/man/man5//usr/share/man/man8//var/lib//var/log//var/log/radius/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:12346/openSUSE_Leap_15.1_Update_ports/98f79f813f41dca3ad2ea6d2a7b14f5f-freeradius-server.openSUSE_Leap_15.1_Updatedrpmxz5aarch64-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@A@BBCCCCCCCCCCCCCDCCCCCCCCCCCCCCCCEEASCII textdirectorymakefile script, ASCII textPOSIX shell script, ASCII text executableUTF-8 Unicode texta /usr/bin/env python script, ASCII text executableELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=06341164f523ca9c87486be8d1905171478914cb, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7b977d4cb89d0e5ea955ec9049f567bb46b70263, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=409c2101e9fbafdbe5a2fe84d1b282c28c967011, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cb89cfe055f49e3d26e6afb5f443c452e101b4fc, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c7467a423c40adc6ef05959a8f427d0a435a72c6, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e5ae3ddd76bd86447c0f8eef79c50aac201ac32c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6ae394ffb6da05ca59c3fab23a5ee1aff58248cd, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cdf7bad83a335960439f674d8c1b695c7d7275cc, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=021f8cd14c12ded7f17cdd8135781b9325d38a5c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=054e46efd376ac9d1a6a9796f0e29abd73e84b67, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5635a3fa25b12c2c99f17dc53882335afcae3ac4, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9f01443b4549a87984a20f36f17b2a1616095d52, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2393df3a6ede1a5abcc59367a3c4a38268fe979a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9f65aaa181d694e36a25a73dab79ad3300dae0c0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b8c2c48c0c6bdecd549082330280e1610af757e0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3489618af47de5e5565adde4ef43188d7aa2fbe6, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a3123e5fdcae42dcb5f941f276fb2ae7187374ea, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=608d98bbfab3e9e99e0592d280e5ed315fb82ffe, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=eb5f7496bc66354fdfb4c3e6a85f979e10de8d9a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=04e094e8f9c6311712aeabdff250c2e5d80b4290, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b5fe67b855c63ded2b2f2131a1976df0cfd25f7f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f737a8a8f99d9d7287be160d42b114b7bb8b7d46, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6dadef15f9910067bb1fa688b87c37f20d5ce22a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4f1a15a97bc7024bb6cb59b8a6d08ec24824ecb9, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9cbe2b333547c1ee16613695530e764b10d4bd7e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3edc8de5e838c8ffd1068d3deb4729be2a4a3dae, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=65f79dbf8e8064ea4b186bc9f7bccf72c49acd69, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6090f0aa0fee71370bda144e191bf42b5198ffb7, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2fd8a59e226dd95c44baa350283acb62f886524d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f7071f9a79c9b0594a133837c1b4e277425a7738, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=631b52e21496f1629851800abe49480414bb5187, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=77a4fa2e2ca6cfce6987788bb2cdc021ae71e830, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6668c1f012520e412df7b7be66397177193d1d2e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=269823bfdbde0d2f5bc0cd78ae903ab6f5ee56f0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=31a367b6558e8b65464b6461bf0574f4cc16b865, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f28f6e66e26945c15bb47d403eda3da22808e965, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0c5c36d611f8b47342abc62e2a6f10e7e8705bf9, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=166769d460c00de740c88ed2df7fc06e286e767e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ea989d606e6aa35ad7858e6e6866bfa2b38b8b6c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1944c5e892e6569fbf532e7ad57653f80277697f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a824850d297a6d9e81fa2fc5f21e3f1dc1aeee29, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=45cfdd339e953755f2eda976cab97da065eeb8dd, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f29c71040f8a6904e21e268465061f47661b0c42, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dc9047e03b2cacaa4dac4eee411ee6e418ce243f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7beed1aa310d12ee7e41f1d50cbb7ca6251f6b21, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a4d6c52123460b619bd4e3437b87c9cbd8884aaf, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7b32541f9490607585e6a7e09e955703792e2b16, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=33acd8c4f4c2ed8fa0b6c14e84e72a365c7d226f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ca2aae3901ce37fed8c0f2b18fa9409a66066322, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=28f5b938c95cb4110247a5d6ad0acf342b5c0a2c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=59e96ff05ecbfeff1c849d8cd1a982f2a4c0eabe, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=200daf8def440acc3e27a11e20c4994c9c10b484, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1d9fd0186ed69384723d2d26c562e84f25cbd8e8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=126ed04f052d41e2f6d4c47dff1e6730a463649f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e13e9e372f6a2944b8e76858ca5f96906a364072, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0e0369b0dac0628131ec28c08faa941f2f7f561b, strippedPerl script text executableELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-, BuildID[sha1]=c657e68f8c588588ab00e4795e0620e043f23f15, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-, BuildID[sha1]=007046eb1439448682a62648c1fa9489a03af6fd, for GNU/Linux 3.7.0, strippedAlgol 68 source, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)empty #',026;?CHMQUY]bglotx|   RRR RR R R R R R R R R R R R#R RR R"RRR R R R RR R R#RR R"RR R R R R R R RR R R R R R R R R R R R R R RR R R R R R R R R R R R RR R R R RR R R R R R R R R R R R R R R R R R R R RR R R R RR R R R RR R R RR R R RR R R R R R R R R R R R R R R R R R R R RR R R R R R R R R R R R R R R R#R RRRR"RR R RR RR R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R RR R R R R R RR R R R R R R R R R R R R R R R R R R R R R R R RRR R R R RRRR RRR!RR#R RRRR R"RRRR R R#R RR RRR"RR R RR RRR!RR#R RRRR R"RRRR R FLbNj1anlogrotateutf-8e649f2d7f4dff90ed0237429d4fe4d6d91eec81d46a24351644ba7ae699eda61?7zXZ !t/]"k%Yfm?1 1N8[xIBpW[ox[} p*U@ N>ʻP8k#C%{a)}5X Q@^tܖϺy^uuit8i) Mi0&)4X&[7?!aZR!w{_u[}Ɠϵ}74GF3Hk1Uu;h ,8ec>F)m]N]? N̦ry S2I~:IБjG\$,fm< ߎw:{AJn]6j IR}Z8CƘunbSX I{-)dIGIfԓ:wu`!X4J#F*w=ՈJO)?hEꚆ %Dg0VH^ P:V0Vqr(%S;KS6] -;_,jtziL?dBC}ce)*v*5}"(F5T/2d nN~p)V+r7SU8Tx\g6yh=WeQTyգJ}Yt5Ke0#kIMOV: ۔p;J]h)yO$'._Nn` }53~2΂SIl#CoKHWNS,M;-A렮5$jHf1mUϹ!R-ܹF }4S"DILuFݢ#.j0f}j R0@˧ض_A2B߭Bxg C=,0~@Ů߭e:-IhCqzk'Dycu!c"(dʁan3L c㢽MAadr\{ n F}5,S*oD= C`jFO#V~J>Fō]4]_w(S>F$+5OU5Kߋ L?9(ݸ-h:Eמ`$6"EWk*[ i WH{vO󨀝ͼ*8|8:!rqJY{g_I:>#jMA _ߗY+\yxEV\pPc ZѴ1*PUłAB?N^k+8B.WIU="e,kBRA`ͯ6ki~CƢW: Ml9Uj`69|ŭ)0yP\ʚ- }t\K=C59U) [ Z(Ѯb*338[`3g7paJV䶰 ؝o6~Fy "65:^S 1W)Ll\{e?,{s. wSoX|ے"kC\Ƃ~/12ퟎ o5ΕLWgMgQW&)ۮun hWj#H-ii+ 'nk0q_z\9fǞ 03X}\xdiLJp/I Ŏx#8bQ--IT`V=̜3H/. _9)I,B5YԅSJR_(kSb-kan7,r$f ǿr ؇I>/ ܄W]l@2XWH] .hGlF.0%݈1+aF-I4!t/񷓴2A8;٧^mio؟+&Lwf5.EyL\h3(luuʆyYq'(׮Ӂv}\m+Xl?&b/ ,0߾jP7ux}7bc[ZLTe+W;v1i!1OM!(fң5E );hDa* 3UZۃ^nVisI IJG7N".qRAK5 %Ah~oi v3ZMX3;%T lTv/*צVeʝxVI7YY9y)KD fj3 ;b> )b/O=&PWsZ1,* w_xUdVGx0Y~ciаq߈00'MxG%.ceBMNň+4w{!'uSvʄY/gp]>_RLCD>%\vrh(v.pVSu‚`lpwBUW.u!7{Vq v#V"#JGx 4=K-ݸkKM`Fkdr/ N*q|uAӯmS1ͻ*cYZw5 2/SH\e'O"OߖYƐeQOn!r <uT5 qĐ!tE\>y7y6G$ _蠳DuX/Hi~.A ̀ Fu`_= k)KSQL[Pa0_vzNn#F'P;xi|0,CI@uMi 60'wqԈ\!ۈӘY3 '=jT45ȁjT41\3. x}9wu}+8I_PM.5]Z o(H9/`]AYJW(ӗgkF Q| VVB6*"ԯgX"=bDdp+~=(ޡ 'rP myq%'@fBSYu:kg 1V2lS|0 g}J,&' W[^+Ofj+?[-799)pc7!Y̻\E H.eB.CŒ0ɋĐW6 *#*I} Y(xy+vD_y)WBv0FN?0sTS&~>6+<3> 4 LN1Ry+₮os +ߌwtm6ɼtPI3W*8yَj[2̨qs8ÄA;|Ao,c4+jx笛}+,??p*??)Xi$"G%HSM,vIѕ/}U'IR1m8<v *OKQqTy g,)-#DG9~f$ۣ+0͏ppE0vD_"Wӷ3%UpDS4 &)z|7Ъ3ۅ:h3h)XeWgD9 ,x1"έM)vVVivEF@=K&sʩp5[k!&?eۯ-4 Jb@SvI b_+AR`- ~ZOx)Tžc|rDhq꾗[j\GHkyC#MSSBF$ }]s Yi3 $R,jc[&p) H\uL{⪋V9 Eg}WD,%,4?VLjΣW^NnȲ8? NOK '6 W^bS,|Ɠ n$+WvDruG?!=< 81*-ݓVv'r^E,w$MQ|T ΰkJk򥅁Eɽc3ȵO<τj3[l4Ktj%"*!K oD1 E!qjʊ:y6"΀D`f͜NW8MW;uh{~g%Ht k8;koU4Qn/eY?׻]^0Uljg>ܒ$ U2TZs SZJT.հ|Zq]5,=Tba""('":؀ЍsS>hmuQ޶JJy i@d8=qp߱Fp=7^>wsS;TozgW:OvexC[O˓e`Dkd]KGAhPx"Ic 4D ْ5WI2vgw]fFY>#~`f*\#No<v;YVXF*qFaCk.2 l}+;7IbgȵIٞG{=HXq"q'u@MGz ILq^DH(;)H/bG8[l' [`M ,Gͷe)/N,t1"Lz59ka66+>|`YWErdP]O0o_85_b Ȥp;8$-]vewpE H 0\]0k|9Cbr ~Svg 2qsp¦{*^K*2dlzoaǓ,|7+Zr~oD0dV=6-gJ5wJ?tt6e7Gl@7PnRݯsE'Y"셒sZ`_\hh?1pQ뤊1ZXZ8cU],EۊϨXɻ*oo& d a @%:>b6RZz[j~:ibwvO"S _ư9<13!Eb?{ZE!=>.3 .,.v0JJ%m\%zn.l5s6zϷ+ R/xS3y<@۠GgPU pLR֊YY52}bk6X| vU) /A:l3)?jڣJMR1ti"%'%ϥFIA a.7׫DPBsԂXaǕ}cSKH&#SŮGVJ2l3i:\"{^P)kD \&8^L Gi"ܹ54B;i\9ڔH5axs<-U=fRd&vS9ᒘܯ[?.t@$.0"IǽX쮅Q7QLbjb%]sQoܟ-?\lX5iM3LsP`CQ!Eب#K B;#@El!Y ڞ`X/[+ZuÍ q #k9*Pٍ!% L=lYu{DS"uO1n3#f1$\f Y$˕rZQPHݠ]9 g4 e3UFOb3nrE9E1GBnt|9\^.Kl=,n[GLT"07/E٫ f]쉋M Bz#ohXBbՀ{DO )qc1e8r)4~sve-:9nj)(<mNyHrE[;C;\TMji?q_SV3 5Kk>?Oޮ7#$8v{85܃`hւI /+8Ht1%M%'2Rv]nZ7|\U!P7y~2_xȔGW^Ce@HX {P A;ON?L5VY݅\v  I:*>c ^b5Ze78}`bۇW?Y.1hQSQ k7s]Չj1N+ *Ƭf&cիb.ͧ-W vjx+Q^.R !QL+X%{<&qNL!Z|sbHB7rK^ * 8фͱ]z  0,E>嵲GuMr0Lk'8dl!sH0 w|~ᎽH?/SpDy8=G5~}^Cm:ohEQ'['و.VؐΑ+:L D |S3TIxt w P%iUe9;C:G<Ӱd/ocZ? UKEcbI_gf $bE(Mc 44><D;hw_%ivd|г 'Wnm]`g"uBRE&PI!'{i%  6'||aFu~|`tla0gd(;5Xd)CJHQw&U4*D#DkY֙{L2%.v"=EmB8T1Z2Hħo✩H+|Cb>xqLWґݐ;h A }Ä]#Γ;@J)_ >d=mMV/Ul3U &uw/)Ck<)hNx7)7:hiN#N8,|8qFh9 ~6-@kWs'\қ@> ܴojI%B"biK_v[("Ca%yֵ@/A2! > KYM?ZC0{{HǠ#l"D騉LN7%` weKÖAׁ%8)MEL+IX\2RhUg^Rbߑ0:ɲ8W?^{$+8?i^y 4P O!-x h+<IjZJ Y7Sj: DUuR:QihAc k y K/֗ߩͦd#?ave>; SF[QYgsVV>ɕP"O}}lEٽ"6ƨЅy9}YBbޛfےT2X2[1c=]Gx+BM: lxEW/~zEFTߓ <-g~Pg:I>#Yzڗ+윝^&]kﶘaV*5BThzKNڍ˼ )q}yKLEm^}3)b{~ڭ2qsKn@G{wz(L.)\iy9c[hU5UNwYҞ;ԖKL|"%ЖyYFmΣ)ig345z8=v]aGOOl@BАęO?-@42 S)!ttEkV2?,_rP6Y{%r5uy;l.yx]Pl-,% ޡ;a~vFz˦ @srBD%EY0h@CU,ݕwAקּ_3vↀ0;XU% C9TXdu.)v DyXVvfWy B N}A+N٬V ,8jeN|mB֞Oqw7ˣ)`|E(T7$^ JL4r8vuEAOE*6&JEMw|?x{ ؕ[avڍ*$M?& "Pm[١Wn-׳NJ!jY˖(R^9RVc~B N"vGg,-%7.O(,{nIJ}2&n<%/||5$PÀ0$$:-^:/??|muxk  5pثyx$FTJkb\cMMo #@=Bbj(8z=}!=F piOnL:q/Eyt7Jye/դ5 O/:c`֠|}JQlEOsvI7ʛ5ٹ_ceIDvTrA P3%WڴH\3qmW_F9&/44S3Bx[[jvP9vkt7'DuVo[\_C޼1vRc OfZ,tc_v`8Z\ NgwZ!lyLC:6wA '6*j)h> MVܜBC旵gV}v 2~x%.6 co_J OXЧ9UV2/R_r{tI 0pPѮNj(!^lP=z]%qsn#Bz$*`[4Kh;s{:p^[oW;n ]p6Irj⃟/ t7iZ>#C jG0}Z of&gYJ%GK]j)-O-Am6ݙZ\)79 N"qdߎ|1o>#g `b}SUEWPcX;ɐ믦okM@nsk{XҎ9*&\K(x kK mDSH]\1M+=U%r,5a5դwW(7WJv)7BѺ,X j8^)W7 A2?CT{1gQFoa!$Rw{L"+**), Z1ؠˢ*NGIazè*WEK:=HLJ;vhX=^z=36:?٢ɑS>ZUHqżц6$pÂb,ft0'`Z[[DW1eY4 &S~b5u}Id(>*)$eZ@@,ެ5-2B5ݫV*_ħFRk9 Hm)T̓6 {s2yo [⻿Ǵ~D1\`ƪbJḱdͿ䥒$IL=Xsq;n{ Ì0"!Εj6&7^"߾5ZuC}@8/ZYU>FS$]Y ٶDUڝp|rz[!l`S/}y.xXŹ&${K5Nr|Wѩ0K܈؄JxU8PNݦ.?D`kc>ƴmoCWpZ88NlRVCv++##f\8./2S_ J*7N)xHտ͟([ E-ίs䎃ooy8뒟7]?(keOKŹHe&8޼sS]v_&Jo pB;V\?@ԆӒ(C20e7Dn"(c `Hy79Elోɵ#:~۝쀠ϨSP!c˴'jn90}xHd@<-U ۞bp!xX{4H6a} SV)YC#݃z"!h'kA29rL_XĄ/_uK[նzWB*!ӘW 6*¯T]/n所Q]i>Cgr'Ԝ;Ml9`E[@um+*5+4uDɰtA8dRm`kQR(b&UnGU1 Q..e.8T oq6hm8.X[.G-*N2ubRl8w~d{e b Ac(;_uLIqG%㠐c!ahBBs&}n'8~b{Ȱ kUo &%iMaqP,6m n`}X(erev5}5$B![ljB3/z>b=AVI4䍥P:o&X[)ׯFR#T#%.+&$m'g|hv$-jaʮ'B"8j䳗Uwxǀρ_ O@-lrGW.]ƪ0vaI,]hM<;]5Te_Mϔ%֫ nNWa&>z/?SǴZ03|\jd&s'"&w6?5iHxTh{oDi?uqkIgT>J%x׃"J1^!k^AA8YT$ua]OYUvP.S"}̽=w=ZVC0ɉ{.ϒŁŒ~NCja'h>ֈzg$CwN[6iGټNɜj b%swPz{/H )в&mXQ3Pq옚x''\$0}6gA@B]],2NﱱBZ<\'#kns8Ku>- ͿcVqti=6WMDSFPE*V@d}u- u"JSjm))kԶݵfۡc6RiX3=}/n> ?zWFIsbq"3 TgY5Kp+Qsӥ71uoz:1ȯbY'S/E+ʧ^AKl-J#uM|@Z5K YQBRCuc_Β%k+Uo:^Rx':.-pLB ߧ| FSy Di?zx7l7 sHC$M-~:f9(-)klm`Ē;GC`c7 m}M|E먥XWna5+Hd&"x7"42Nڝ uGRT*,OZdij!415 &`ˡ06Q1I]x-V&Y*2cic# iS}WTƸVPoR]R"~乒5E[z7;R,5 q6':S2Å ㉫_LĶ\e":)( #H"?ǎHסmvM8jtQ[Fw۫1%fp%۱[2 \Shzv:_fCL'zF'’]3'VgkBy(fSOwk.1 ~Tk aؤT5(ӭc=\6g; ҿqte4-AyŤ Oťa 5ok('Ad1BIC4^[U'4}:oΔDr>2n;:\(Y_?߉_NJ̈BSc㏭`/ճ.Lx]p褈cUhOܽmt~O#5e ^KyL1%|m67cPfF0.W=Hs#N g(UrZԽ5E#RbC8a<'ݵ9^yXM&1Ќt`v 1^tqDo{ibdQxsZʀ1^tEi^ҶuXNމЌRYGevvU>c8'mxޕ-lW J9cA^Yby@ƙ5řk7VIzνHf d'>QR9-.0jP @#n2+)nF_ E$µDⳌ,nɌ%!4F5^Yz-fۚ5ʁK@`4Ege0}=U{=Wzl 悘JYvk]n55uVv*m6۴w+_:jUUL(/^_ W5Vǽْ߃yet:KA?i 7:0QH.Jaul8 /@9{3֙Ӯ&<jS` rkP.%WMLkg7b ǿYl&s\ʛkZU&,7S]R<b0 Vko!k[g=Lj=\~Q" ]0Lfj7AJz9ˠ6'Ē PVݭg;!$$L$^F5.PKbHo[ u_Jfr9,#) 4(8׉ߎݖJ~= JEd>G,/ % ߰<Ħ%kxs6S ^vByf෗h{%n{ rӞ(M÷j6;Y R]I~]~(]|?(Ci;Csw3 sx6E KR%3Ogmv4˦mj&Ep}~tE_ƨEq)DrOHHͰS̟6m+ ds4*DhP3W5'Q j2Z<3=O _l2WwiFC8*7U&XN.5UD/[\O)~ܮB~O[d/q"N2W PgFVTGR#V NLd[fRpD)$EMZxk~oWh_N ;P.$ϖOreZY}Ibx6#n`yuDLGt^.uZ(.Yхxl_6D "āWo>H1f]A}M ~1YepD]΋N하˙͑^3Kk8sЗMQT7z]Sa rOa>71SMx:WDFF) \Ak|CeՀM ^p8-[ScZv;ӏ)q\p61|[(:[|YRౣz5 XIjO!8 _S DLۤ.mR:!DZ~Ϫ~ޚzsM>-ۿn,^0*WLwsSlLUQKF/07=2vKU$9k2f.ouټ;뎋e_K\> 0"]xf$!]J'>؞x #%DI'"ĖeϰρE)w@]X9 ȳŶ13.%#"=_|Rbx:}Ue3P(|j|'qp ˹;#E]+٤;yF)l$%d Oq-NgnN)jTA bLF z2fǸ] ݳ# VZyj.!u|x띖x.<<=ض f/9`MS~#2g_r@^C >̺eK\1Y!.pdPhlpRgGTԼBb?q`:#5^꘦y='"<ԍpFg<|92?0}b3n;'8bZ`cӃh^eAʘxS_=8 ?nտ`ֿ'J KWQ&o*f[FNthIѸuՃvSO$2ҡgNgnY=0L%VH;MUSN)jv1.wڢ2n6|ꂛj@|m0sC8%AOV?3q²!ӢE}i*+5CX>lOa~ϧM,]rw洷3اC6&*)M P^kޒGm˕<$a >?͵\Fm,TDsբnv ߆7/ [%x U$sءmB V01^1eyᴬL*V\r{ Md`;5W4B ¨4RQln3rVW7(! yb V̀q ϖ<wrM|n NV>T}-VQ":Сˠu>ML-\SZ( jEցu9WrPJa48Nf؝R(+ }c5)}7m  on)9J,5MVdUDiXMg<&* ~rc|!4*+#-!A/" MԜ82˾4W>D"}jWPp 77K ɢp!>ʍ)ea+裡 SZbXX؎8_^ eԒ?`iC GLUؘ>TТ,ͮ5ovX]`V+a{w/Ы+|y z `UEOAiB&QZO ̑^qP,eRAp-ҁwV8^oc',B{k#@X$c{#ԓ PC.O.K0,PAE ʺȞ-%!>YSڦv8xP|j#ȿtF>fR= 88StT>&6ܶP-9l#p1a*z DH Ӗǎlw51MHo y$ϡ u~IN}4Ye !^gǢh‹kM(o*bˢm( =~VmςM}-1zx$?F41*$Rs`i4MxCQ\z.f[~Y}@Tnkl,YY ~JU@#>rVNJ ̺<ء}e7Z^9ݨý:Ħn]1gD}qO=6<ͽf3m}sC@=ٷuKÔuSFjy4:r3qUr[!y]slyދL턯Pd+X^ǮʭpV**S5Bw/IY p {]) #<۽&j!`̆y/,5sPʠy_:dDU i`_+K^*1߽^ ShEo̮NMlM|8X٫QUhf "ZLWnxx&.Ƀ]q(}aJ쑞,"ǽJTOnO>JwưZz !#v y~f<d&; x"h? B[GZm}I.Uh4'G1,$$dQʍDoB} J-`xmgHz7Bf@f۵m)$ٗ2BJx Sh fbT"2 *EmpyRܝ<=4B5'JSlŎRtl27;bWIֶüT^â\Clr#b6؀FKυUx{Sʗ Z!3ͮr$;lx?cQR 5"Pl '޾JHi cPJrrAg#[laS D73eG#["T-6ޟ֨,s`P&yKHeb <|-:'uD6%oM EE7$I(J7&Z1btϿIK#D}S .P= xԍQ>}"D˾ j5h*A7wDס htwZJy򣯵a^fhN'|`4c=‚>!VWp,Ngpf&XH ;#xX0V[E TEnG0&f*&fh'Rq{VD$Sl\WNͭ,#;֏ſ|׈%twυ9'^-aFf3ߏ($4(-,[nW!hDE'*@dwޮȿLiCqF[?Eti5DI OXvA6 !³;zZF¨Xr()"?+?+Ї$Ge$5DD6 US5ءK ^#.veP`\pbiUΨ*0AΎjgh,ќȃIT|}b$ -iLUAyTnQ~ CUCq|lczeY>F´XBF7i۝HPa[mIh/;"LFYC~5tV.jRݠ{O=[K~VsE.).m[_0&}n-jq5G?ܓ61Z8(X+^j2QL\B\LbUU90x>Ί>y-N+T1 Rigd9/rgszVO>^4L ?e*dtrkHȰ%8j̅3}B,%uD7vBU -"VAD089lvvW=\XjǮ`e_?ѪI3H8.D=f{7/q3[AgNٺ8G\jYmndɝ"ԜƗjEBU =zL!P rdzO[$G kFwc@+Z -m3  vSe.}9/MMIIe?`I#/g҆nbN;xAw1v9b*K}R{@f -$t=Otg*jbk ]RPJN0DG^DqtMX>ehQNߠlsx 兿mAj:7D=N7^4:<vt/iH%ZChmuÌdqoj/jn"~xCL귓K{ĐķɑrB u0pB9:^_۟>tI2E9V8vgqBAW72c V~ė3ЃzcI5oi^slq;ٌzBl ɓ.4UO6^LOֺ\M 7]G/51#~t` ԟ#:|F GW֡VǠ1ndM}ȀԿP5vu`F"}h}v3'iG~_hĶ|:J[Cf:"a9 1 Hޕ-BTGdNnsꨄxFuZح{Վ|/2Z"ޅI3YYDM zs5>IS~Y8H 8݇5_@EI&%2] ץ\mA$a@,lT΋& Xˋ?g{6,%_iTokti$lW'=NEx+XP&bGTKsI,$ 1-tLZ,xҤA˝ 7\8J5"{>1-Yܱي, l5Hg8Ncx-|T|Sw$?=|jy]<(hilyA<ݡ/?K7u򍊈֨ Q>Th־,g1pj5rߵ_>mfiYs}K 7Z biERbf._Z5c^MNR4TBQfwD}UMW3ϩ>-:7sJғzӑOἨ6ڝ7qFڄ5-WKg"[O"‽nge2a`x*)gGU}ųLkPUhb.zDՇxD炒jםC t*ƑcB-Y0zJM% ~'@P6 gX^o[)`"ku'g`V~rXpgqL^Gd{jVY$䋻<&$i"a/G(F<'lvF9a#XMHZN6vhYŬRh>s>Ŀ/VhK]"0;5iS8`":cz&tYvK4+  O/kzQf B-i?&N$E7@ࣵm? dGC8kS, YSX @jD_yg$@A!a#~#Y٢Vq1J:JD6y7nrh"J-( ?ٛuG@98>wR_,='s2/U쁃>/|J 9;*3@2pf|)URZb&"gtsS~LHϋ(9~<$ g[_YgjC&j_&eu 7Md:( wTu! x66qYFAQ5fBc)&т/#.zBtt>LCۈP'٤¹@bQPҐ+ːLr+J`[$kC (<!:,z8ڿEb怄1\6"ٴ;o',7q ׆1>(EL%J5cNFog{AWTGo7c]Bmɕq.+zxպ yAfwX-ɇM(M; ,jp%) ~I Iރ[rtr?rMFAF-tX$eY%א|:w)5=$k^j/}=5vV+DɊn1-pӸ A"4}4jIsO۳ @D]䍯Z)cg=TVbSѿ׬CP7<ֲ4tJH⟙ ̂ 6Ϗa1^0ob y4<m4 {U&QUkJ$e-Y힆2:؉P2) 3:LBiq181nyo)~sH< 0fIlvN0[4U&8' zo-<'|AQ?;x`)V&/;asE8c価,w߮:([*LskPMgRt' Hpz\D|a'o`[O䰓=e? LGh3$!anv~3xd}1lz9W3#^ˋ!K"L\D7Yɭ(}0~2Y\+Wfԇ.Y\ `,LPPxLHzIZ3811#谜+'O`@.>>TY5Rpmx?ׁ4,_!43qkC BMP|=A_g7hc;9x61z (acO9u;ׂҡqXywEY}h,iR4C?!ocE8C9\i~db;^m(KT:dY#xAY3 wcn&fUQ@ Lb- ./x1}\)|6&Zڬ 02m{L0<@au}L 1J}2 ^dsǠP0Fz] 2VCr%ʵqj6K(\h"s1UC&i"ߒ¾k$Z7m& ]$}J#֌zߗHC311*d;x߷*CDPժ#BQ:HijƾH* CmDC `[@y*A;]RB pᑉFu FnLe˞;iMrh@}Sa ?:grvoKzpaYR ӶŞ%!N<juu>/T&<)l?rI}:`B/]!١{;Va SgJ\>O&3ЮzRem|h[@h@\.\m6UMʇ2ot+9C҈:T,ߡIT=뮵wpkQ Eع63Jz{cqLr!\1Y砋w#[rUl1#Nf)M4gB{2ń2/[=' I m ؁=vbJ/R'H[t#a/zFrb,.K] Q#ġ9f:dL~mrSlh/$ww,$z.R^lLw0Co9ࢃlgQt֖pUUxX}mp+ )/wcEALnڋ"e@>~+O^m{% :_mk3ܢȔCWoΤIy(5&ӉOWN*=OooY:5YJ$O qB;-v=@=@|RC)/(09) &k"6Ĝu&eftJAY{Hj#u3LHxF(v&A0#qufzNHOr8|*w C2 p ާbUYNxbr*fe"60.mt~r ߃Oqp2P7T:pyO "ҤD)tuwN3\Y/ʹ V*DcuһSS-ݖ|lPY D@nLIB  S=d:oKgwMi zH.oƺ(^? {hlN`^R&RI'{4`qˬNؔ4o?\3u]B]xZy@y36&/9Ⱦ$''δ`;S"bN,\UK/$Ίp=Z)~1w{I\!Ұ>@o8m6,o"H[6>bo@e2*4U;wb: @z ̟#-Y|㣂 1zT?[һ!N>Pr~b*TJCbӂ+3ߣ@7A1HZ .ݮ=V5U&(+* ) IAJ5Q̑ɋI6SzFibƳԇc@ҪJG2csylƭmEu N+C0wItE i/֗F}(VOw ]|MNHa30c<KJh%lS*jM8xƪ0W`fHi1̰=K@0oYQsu!m)::Z<5]tvO-~u ': Qqrfiۋdb8$*\=‹5n{&JT'؝BW qٰڛ"YqG9 k`8V6@qi3]z;ƲcACY_mT]!!SМF縇3tRQSߗ%;~lA@  @B@'ry8 8op=Y.҇ɯXm~k7]a5K"n3i!-HD"tG~" 0Fv]emre6,i}Z4a*gׯeP$䪒= `DkHM\X7DhO?KAbc盲O{˻43zR;s%6#.n9{|Vm 3M9+T& sbhQEMjasS^Ⱦʎs\B>Qޜwe.(l*HwͺlUh!M{BH}&L xcC/Vp˻&6x Պ&5mT1?|  K[K6h2ͻ1!HcO"<i2mwHंo7̶9cuaIbT/uIE ނB=@[\Pjk+)\2hp+r@Pb>l|QY@ֶd{VVs5dY $4Ѭ x>^)_}젌0rYn(|ϫ-I7WVuĸ]ස³1^Z){+Zh*p z"'_- {Q5FI7lhs#jJK s4sHEsΝ>\$3n w#RY%>,!y}w/d+c[q9 !e IdQ-E;?.7WH,r`&95Be^u(kiWn"\)n<:E!u^_8 zJO᪋jz8+v\͋`@թz#d;(> G/^4>\&uKYjFlIUVۼFBDxP,0]Mg&u1c9E rJ'uQ(`*Ճh3=rǂǸ[]RcDݜ}AbtuMȶum_!6{DW.ir>ujpb\mj@da!@SEf\f*il[H<ޘOx!'-oYL-'y߼\W@6"ܴF\hhq_~uơM䞿PrxZp1:az!JXErPaWPRzǥ;6kO89Rᜏs^240Fj{v3'g#.UH&XS{56k-MMdf,iBu/s%D\]Tj d|@zb,ǟ XCP?g{,*WDQp"p+Yc5{|LD^xOؗ-u;2@yHLf3ȡf T=IbZ!XOJ@rJP2S} ~Yͯ֫_ɗhPpc]Hy?[3IA:Ti>%%_{ V1?$~=F/OqA-Ŭ5z.f;m4=Y܃H`v;2봄dֆ$].:74h 5KKNtDW_w9]] B+WBH̃v<|%oC/H*ePz.'Vd]7Ku? |V. rhcAx+'۲/2-mUWaRQ=D| < -1;\Jiן- j閕\᠟J>|Y,c3,r%hm!re#H`Ţ@2~** /%ϲUHk iRFff ׆[YR-ԽSJb%XM_"cE&Ё/vUz5\R8GZcM;NRu J tsƫ=|qP`ܙ סEX$i{?Y]4 [k\V0唓gRn*T4ifDuySг ҁS1~5[(βKڞb i!J'<:Xj[^@sp}NtB?V]fLbo$ )9s4Ɯ {.iY. *4:CZ<@?jĩQ6fh6 (LCy-|"_ϡ5ގW[_Ȥ</H./ujuz!99qgd"݌uP=%$ɓ}5={\ԍ=QH{)5#MT\rH-RݴOeya%U *(2@ DuJx%q UKcXX:8_k놎6hl7i{YXX0 =ir8ߵ M/6b5a)r6i䩚E5v AzK:?--nV=t@_%ei0F܉nd]s\BF{FpeM"gUGۓNQBD5~lxMأhm=|AS q +|!|Vu/G7EC ɹA͜O~e 9M3⡳ÝyLi?yR8N{sw:҉}]*ej, 8>5,,$nHSikRDžǹy-68fھH|EAR":PAS+ >mviV e@9,@2iWP<4ۀL 0IسݬaakiIR.2Qw8l,QmQr wS#Y. lvL 6ő5*׈QSdQԮItNoc%H΅PЛs= b*.`axEQ-kES,A{|y 3Cӽ' 6>#+@7= g$a>3QU8CLRU4||\<9prVdc s7 ut'@* ;OsdJqp@*JLT,,u q =>oX">uRoaާrJItCF'+mn,$f[mr v^_h uQ-2H{p!1$;6&ۥMmQ]#韦#o?4̑k"ه颦6t]8rp)U 1ŶQT@ũZ2͔`}m ?:,/Tڠ!w b"]jB-.\4f`M_C2S 2Ý+*kqcۛ'h2aMX4ɂj*6'$yCV" #>BC<'U S@dVi,WYK}wSf(Awxy.'gk0ĎRQ>(@5.0~J{ʼ]XK)@M d]MiFbhC–^:zB g}X׭ IvZ*Ӱ83i'p?U6@Nl0 B^O5ΰil"Fa =LzWnaf5ooZ>ygbB<]S!Dhv>y1whɠ r?n7Gg{䮛ن֪YEH`2/_fY9Mvؓ+ĸ|Hv{Dm=H_=`'$X!B|!u|7fq Ȣ0{ kiXmNo{ 0Y?[~zEH*}BYN4 i8i0G-#kdx@XR 0M+T4œ SR5|nSZ([aVaw|x;m%0fwY+!aѴ'8lFĮtޑnTpjH-`P;F7qydH9\;VN1A6@EM3{9"&p"мvY֕+LYTRCwUZ/d^8ToGmjw)ƴ>**pLRȾ]x ?!+A| 5k}( WWrWVlW-`݉?Uٟ2),D8fNʆ.-hBS@̌h3jrGS wCDIg}ܧ񇞋 =EeK M'mN=e@o<ȜT=6%r6)qkuMJEd˚n}i~g6;;*H$@V <kU ,:Jjla3{zܴk)IQ'aK(5BVr^zjJ4p1Xkh$KXvʋKO͚SL46S?έ${` Ze=K|:#Cyi~%^pr2$c͘sKx yrE)nH ZB>١mBn={`7l-my .:񲏔\\32as7H#Wz3l ' e&>"95-O|F/U/U5^~9ɗ6MdH͒RDPb2cA61Z5)WmNV¼0iyA+E !x*r =iv-PwJG0HWBxM:8D}QV]]P FgaH)ٺ1XV >t`uv|La[V1VڼOl x u p`1J%]^̄꽖 D &Z_1D,y g9b.CJŝl!L1KVѭ1%Qqf}X?/2'Vnv' +4e2} ycЙ6w'Mh_7>XkQDG-a D眪70eL3]&dP<B ;^;M\ׅBFg-BSǡƵy}3!j[*ZSj1q7"GW:֛hs@M`܊e!fUU9c!.ݪCq 0~pb@66HԹߗf"(zRm|CRh-d6/[{u˱_]e˵tˢ+k) ;wi`͗q=gٔ\ ;˒Jq_b 2Vr1U(lnmK\4)~fMVdo|ɋ؍Jc .as~]!$H'׼(F.I,՚RGk(J+V=ۀKDZޞf-mJ,pV<`}N{l1J᫟7i; bVGiUA&?X̰Lj@韚? ( ( `&=ƾl[pi0[5ԩBnaUu`^3LN]Z9k"kV{ٛĄqPIN^N9 ÏЭ|`''-:܁1m dV; ͡`|(Uh sYrBhJF1;Y%gkJ+p tQ3{+׵ݢw ǝU]b&#eO/e. c!@`?+5s]OoNE>`^qb4G?6,_B^1~,ddf20hȤqE|[]ng- `gd :@OAˆs)qI:lRyF)\\{Afv` E`U4tJd}̬ʭM2:n B$;j5ɱs#$yxkdSR%Z`0B3,2sUejPef|Ge.'ZsvT(s;q S 1Ҡ(ݥK8~.Z39B0d_Yob֙!]g+OH_Y!dRtIF7vkOhJm77vIY@;&FPah(Qf¼w(aD75:fSc+Qny p"D:ʥ30k7l)RN1[?O9;~/wҶm&_/;,Z* 8l4 BHɅ'>%.iuh~4KEן&ǰd=r;^!v_eEK#[Xhs*^*TE+fgz$(<܆&+t2 [>5#v9y]6wUJSxg2qV~]GfQigɢ _ RW`x`tQ>K3vD\7ΤP\~FuSQW%ƾ!WخCa1 [a!QXDCrϑJ6&6duƳL,(pN$͂@%a3#Z& gI2}sN=>92\6yG׌b"4#KhB}'36M*m x`1j—E"%M|f4C*CMmT& tݓaP=7v~#Eu_1"#tHnԆ:a 0\Z'O#j.b4\~±5Ճl%;P/,+vt1s(5Tih/.U22=_Rplƶ hC(jSbqk ԇ쇟02'kQ:[R\xrȈUlK,'HQ-qFwѡYefqaE{s0+k?d < Pm$%s FR`Xuu]%&iY_Bo(۝8UyVnjS\5!_^ʰZ[D] >(+FH~ h/%;p"i)`n4Fj!]HS$v jf5t#lnݱ/+֗-[lE`Cx&S )x_4`;nF/f~#G6nŊUo~v!ZU̦ F˒xJ%RGW^23@sO<򗃜d\d/*4"!ߛw++QϏ $,g~5GlɌ Pޓtx]쥑,äǴlzޞ 5*{(ʵMx:EY)R^3:hs%d#hPޟw54434{%oпu:Pl" 9:f|;,DvIlB"G1 YkE> Mw(L h~?ϋfy?& @ŹmD\b+ȗQv:Qkrɿ篓l}{(R??yDp7 ᰺bhNrH8z@*u؟ɋ}Ldɼc\)_>l蓡]Fa. HWLо`}h+'| =vp7Ϗ?e8~ xQdFMZo#ea\67P [E2N't5AbҏcoMss;}m1p̏>8Hfo|v~eɘ(G&tUm6z9{R`;IdJ'"{=ۼT7 b%{諞F~I̻Hjq`Ŭ1ȟРӻV 9dufJ|>`i/"ӝBΧ*t >=HSdrR]h1#GZ rK&)ڽǫCBWڍωBaNL|HޭN-DHD_ԏ. ٌfd|G&8y0.ݯ`7*'И@8.u݌GK>Bdh4=^fZcBuٸBFS7>5jOKS[P@3ۗU*y7=xeU@d$T:2RcFлҪB1M8Dъ:A~&E;~W  -;|f΢Q%&M>܈I?45OpJϓ9 9W: ^{ӱs3Onv&ZDJ OɮJO]-Oʚd3t6'2*-j;a RY)jf;cLD5J~hxg0IJϿHHu} X6>zC_ 3<~[YÇD[w!n mzzcyt$V8 mS̎42gGJ`H}z8}/@lp|k:ɷ $KrOVoR&)foC:[ֹ@L:_VMN`=AYT*7MEFI`uL!-jF.64lrl˚.$z#͝;6BK j0c9[ e3+a?=0E, %`(. 1-|DS ' Tz 8jg1.&#**ջ&mSDBӥ ZDlb,#e '9L5Z 8DzW!*(R[L?y(-V턋ߒ*nȼg.X`rSU \&C-{oF&l^-<͠;3)(#A4~qvpt#n9u[9sVO_cO RuA&zAZkM)Vq#w>){m-W[8<nRu=*Ǽ7 ݖ4YmSj`7лGv݄a]b, }^"FCoea.2l@mDg[f&; l1x2ۜYFQR(#vahKHZG!MN(+kNp<|)Ȗ8ZA z,SlUiĴ5WGzdC*DmkaY8:yv5p:'ǹwgE=@lC'J4T2:e+v ~]e;D~A-5cUUu6nHm80&z_M#`!Spm*w[X4? DWbkNǪEZŚ?^of2ϛ6i)Kb(fĐ~rMe6QNe]T O5S O_E{@/#"7K\@ɉ@/'5O\'ttxz,>`}6~;}Z#%0CT"[ 7$}s6x@N%Ki c#@,MWp7LDWM K =3yTk˒TpbՌЇKJ]$D4H0Mducؾ].z3PsP`7C2AAєy*֡tbG- p ?TeƤke(uE|i>>ǟRO;KZ(x!B8P?;/5c|9V . >G۲ or h{m0=+\4oƹchY|j9ríJTEgZܹ¢TxR+e2T.=y;4_*B>xMKw M`"~F>_$#chM t_~:uC7!Tćsv'-/xݔt4bgNf$,JGX)-C|P2ƱpAB^   nnHPG PHqK^@h9 "y&⒚஠Љ|s֙5A`u@9Yrv ICnzY@$;5(tVu'ͼN'|w\L&Y4!e5]brModzy:Q:~F3Զ~+ Z HxWnϚ\0QTTUg܎tO$'q uFQbKV~ї&eq,lfo1lD5=V(W|9GPMX1u[6# ?X%bH?M,]c]%IﱟzV%^Ep]B.?2/ttq3bvj}]G^G',|̯CR4^" 8BreYB4nEe*Ga g]DS  ?gt]_/Uk lsZ]qg1kicIoTŪa.2ƀD; Ɏ&IؿR*\pOxx"%|ɢ[oJ'Qk)63_(Πl\Xn> l5.fJt!Kg7@^ÞtϠۿu),z;dî16ʲv+cȟ'yċֶS??iw64 Eݗb&-kM}m/'K='pg)?2W&W~B%믋?͖] so=h|Ue` NTw#Pj%?RE'W{=:EN LK _]ݟD D1 a(= R|̢n JYLF(| shw533-n2ŵ Qr8;J6TX!x;BNZ/x_!]bOY\fwtͮ+`G)/=};1Z|'$jc!{7bD /vnm)QJLʭP_J޲"z_ U!N<.TYK@hLN ow;4T+0oOϱ%@"8|F2^;(8jmnjg|9 ??_{wvr\ۘu {t4 X ;*a#%P7rsW@gWF FFCsÁqhCe~rw }-G 2w`.'ljbt^: \t=JOꁣ%Ƃie\\+%`a>ᔄN̮4]nj+g_LPPo]%p]ruh~M{CxA4no"t@o]ʱ|/;ѣs[2d-8 [y$0k|Ǜb+tI=nP#C0"xθtkjbr8(ap9}tعu]ŞptQX8e[DSkȢFW*lǑQ=㤄,eJ0A!;F5^un]HŹډ,JC[tXb]HniAFKZPx{Ϝ+TiTS8Fb<3?t:qh1ᕑJ8UhNGe(%5R*E=?$6NB6U9d~7+;QZse% y[K0)׸1rlH\1t2W1`5x˜;%n>!R1@Q [;?q+uz9!J2_uc?!E N dvIHR:LxcLv%^\e#P|hZ&,q'۬=5(Ej?E@J$B1NA âEf${Gg %IwΜwyd`DSJ(؃o$huIT.ӸhIo+)5ُsR>(o:?\ݺ;V(mYqVyV 3ݞǪZ m陽3Ucjf;uLՊ7BdOG]r@ex 'nʛG ^0`]6zDhU7wyGɕXZ%*.JUstkD)7]TK!lĮ6l롉[..08ꡍ1OY+)B E=[cON2z u.0nLv4;7*֢-Z7C Io7~~QVlFx ^b]i*; '(",7?~ mj\i6Ŵ:'moޅwpwd*]3TJ Ξ O3l="&LWnT9X |X j =&YM;7w; R^iM$! {i;;ػb,i=7W: @_Qo!MA4T^-wp\U{M4HSIT_L~ `w:FU^eMjm8,1/ŷ,pSt慯o ]웛@JZqS9fb^lAiK A&Hd\526chɴinO6{/i&#o%XH} kb 7Kw]4A;Q xP]*Vb ʬGhR[G D+'j>.8F!PI:q#6} 馌]k-Vy<4D:0pE"UTFaԟNC"Eeb|qI㟉x.=GG4vi=ay":"BCi~8Lv@0 fU)NZs!õV=d.H gYeÓ|$^ edDtsdXK({J܇;>Rr^64w]5ZÎcLjNT|+?quAJp}ڣ+vNGG̥yB_o,sܙ8@_Iɘ0yރ6Ҥ@]5KTf42l*nG4G;"WIɺidPz60ΑBֽ:}EK7qA J.t_EP?AA_GYzư!,<6{9Pv7r@M!;TX^]̦K㆙7)`ܛ?( ӵ0HÿZҥfJɩ"_~$"TX.Drž3l[8)OraX9n/YX9l#LޕPʰ}W`ٲH\G~m)49PV'&JS+5,ך1 GoaRԀvjsl Z5imݜ(y7tي.s![: &Ҵ9rz@8NkmA1IͬJEG1zcL}ch^ɮ$ ~3[2F6P"yN2[DG `4ʖ= Ç@ma,i@%`bl/\A༺YG-͢.%T;|,"*85] {+hIdeY)O8|YA.Z^GajFbGWIUjUs(67RKD ‚.}F۩ J$p&΀|AhzvLG7WKsniNB GڹQ[~%A* 49i`Ie\FO^>TshM˻9^gtX[WN{Ȥw̋:KK(a321%2݉ML-nG_dHUZÜpAF)g-bz(Dsw[ 1.t`*'p$b>6Anq}M$˴><㹔OpN7 o_w8p JftXkJ1ն[Gktx֠!>!81x/L qrt&Αw; 8;QE ݶm9,\EJS:(Mה[kYz|xguY ׯ?*+x;#]g>) C⍛ctX_2JXT`' _/ .̫YRe~91|w$Ü). 7#*i ƪsk!b7yZTH mr-cr7Nc]|tP;=r+KD~XlSa7l]gL8~VKo%PEbi>duwND~1 F9r*ș2Ǘnfpht!nKP2!l#ԡEhkiPd9Gm \kˌtd\ϱTlv kn|;T>bÝ$a=Iʹ C;= t@F~4Y@uœ I" >ȑ<>R2Pf,bΛܯ71ުr-Z̫ CORu==P,06'w(%TW,xӣuQ](E?YjSim&K7JNNg3LQBk|={6}H*!6sƣ s:i#mt`9}N1Bz"+~e9W6 9 :vIȔS h}+H c*]C;+L3\PjAl|ΚU23,GX4VbK(ac˞?-esMY0M;QS)|WU6dY=@iZp`?w{/WZvNm&$(Y#K;GiU蠼:IF@ t(R$}}m';0''N(f#$,ĈfEc5K(_UD4}0:րE9S7ipR (10?{B]@E0X}e)uCXt{ƗTN3snrƆXusx _DqאIA+C)UMΩi@|~j]Tbq"4 YX? z$ZB,C<8([_-0#A.FE _p 'mGs6NS: U47wXbmrd< #@E֛t D|ys]e$;b3]6D XLo=)he\MCAcUT~TU]BtFЧi` &2aDzIA`&c~gv/_@%/ޟ#w:ҿ]R4MQ*y{5&"</Sl,ǡ|TWG/RGF<]rTg9!=gq~e|Ⱦcz2 )i̓]r\.>Xb?C5D<2@ܸ|FFFߵ^"tP?! l!rߔI..}3<?6tԈUC|Ndž{:(!/5BJԀ@J6댜ۘxAEuMfP7ifH]FhGsrϼy7w Ol}raSOR<&6p&9s(ا`h`3oX.q(pBIZ=5$}P-y?1qWd`{/LډxUUY87j~EU>](=|LJ 9} ?+y|b0ce!1-&{l[27ƗD4Ƅg|ASN'0(6sc+(ܴD[}-^TM ȇ9FMjLY?ЁPA#6LODnc;1,ޕvZ;ml@*? h"ҋM:#6ɠ$*mi' _<ѶĀ]ska%i f UUˣhn0z]bbY 5`D󠴡cXy.7INUF
    TOF V٭i\X5UR/95Sڔ,a@#0"Hq.2-9™s6[ Z L||)4PƄȬQ*~$9;-a+Vr˶_u;4Ea{D=P6%G.zl}{xS ӿ.\'r8zm݉پI+&k{ 7 k 3u|1IbH( ! |u-HxoV(ya"}9Qps lX9K&anZmXLW 'SLZW~ABE1ی͖`@>9P\>KxP0S:jHgd"_m\$q59 $jyn7i!2>so5<{` U/܌x?zTd'^O5rmw8ŝ~ʄ xƮL(JV袕JhaJs':-,9G'0G#xv3lg+A<ѳŌ -(a[2m$v]44ضEGhۺv~szO* 8iG6MOFKF;Gkm9^\鈳z _~?a^ }:D8EB/d~";9 Y) /MԄA"L"WgڮyQO֚Wm7ddCk/C|{Y\.aٰ*[RWʵOA\TdL4(:z]3J!'"9SV(W>cɤ RI$|=t;m7\`K]",6.T.ז(+\x5ȗ{TZRJZlҐVHt@> QZۖa_kBXѵpKg޳1tͭV%J[G=uE=d#9q8N^ӯB˸ԑY!gMaOU52w0&%ER:]+NG>B3J7;죆Lxe{vo7QE^~:z7栣z;k tEO׆f4U҅hR/ tvJ,UݽjS7_|%hƬ|n_&L ~rNb_wTCq^v!U[֣(P]Ӏ_8SvGƜYWUeH6JMqP-t]z+bDT-KMI QvL e9: DYZYPF@܃l7ͤ{gQ&eX@3-#뺱FIϘ 'y:zτ4*J۾m"\`{#l^ד 8Ք5_Ioa5aۑДs j:53d.lwtpo7t'cX DofܙY[J* }ٰ̛[Hh_zyu.N|1-(""M^Md4Ro/ -~ql66RTҬڱjV]>[x;HH@Jzu24vwKF¾pM?k2\zRg_-,ј%*!kc2f "~ Ȭ N|v\СU:heTw&և~#9b|UB,Db)^M]3q4x`}8RRUU'c y} )'j0q_luÎ8{;լHPe,}7^]mɵw wu2-݇e#(ͯĢ7:&{= 0wgb""gQS\|7'_ܛ-),{-m)96^[L;X?hS뱑A|z1¯2p͎<qiHOa~G^uz8[;u'LjDFu9jΎ 'Sk]36?L|7`Gya6.cZ0Hhh3db+z.LGhBKqEf7\]nE#qp^' mFҪU[\&!U WdE-WGxl O &Ad*fCi^d*. p+x %ҦePԘ'Φop>%Qe!~í$KÂ.H;c_ϟKB^ZS?ZpJ+XʐӖWߓu jaȅz>'y7w4B{YgރV"G.N$_gO Էց+ KBv0vZ/ X' XC A~!>7҇셤wTdӮ%/f5,g`G]@WQ+i"ooy1&34'vSr?}}\$3X￴s D!uӃ]:8ByT R! }W&-uA8DJk6 ߼ojc `ޣY Ȍ[f3Ecam$k@}xxSe٪' Zbr{Ro!f@a.Da2qc)͇_Y-٪ܡ (HOyM`*NH+$ޕ|4#=+ki 垆0=,'sЪs&|Zāв`ezp8d?FZY [bA%5=2qX iw>w H?ܧJ|HT|oʳEPTs`w0 վ$| WVT/EcsYR02jߴ27?iMRǧjk>_伅xb~ta vXA:.c-p8shEJtZJ8)TN Tr/JjYƍfL v dhϿ/8{GM㲸KaXyO+txvypq]3%FŅMnr : ҎFBZi&pW`}y,"*a* 3.Rb\L1 ͘jY?U> 휻 [ih}} ܦIEh t[):qF7y^߮_lyf3bbһ JkǕd[RM#}"]ہ^(D7CFUKBTH+_B|R 6ul-:i-bsBf+F\LkwUEF2ldR2{@@Dm5jÁ n4y{[@P^SBVҽ@m9ntBYO/]؈2V],4R{?C ߿1!aǮ"8})NݙmHEwj7?ֻbCԀݢM3e܎yO.eih{dAǞ2ã`Yv+yq*|D YX'8=Փ[)n~8x.PhNof=vy4<@X\E 4鞧N 4Ìk~^̴1e5U}O0:߈v$v-$-DZ̬] Wf$K5G~ے,Zd6eU֫0c>M?ן8r(ǫ$pbc#|@o+'pNi5kJ{Nu@uP5^+q˭VSRUمb>cDBiZIEHST(Q0{Au/Y~=[mR((wxm0m<} 1vǬ)+oH('+q>b!YA?,ZEߠV~'Ũ#蕻u$ɑGHų7zB[=`gBCǠV^9Z 4h y 3&Jt#jţ.AYzL5-RmgkH ZLق x/_EfTrzqv,Iב_!֓5v?㨜Wۮ)FԻG.> j{9yr,-c|AwCM~6GbZƢaӗKff8)vNy#(X jbzD1 *6dz?O>ĎGVV0%9VOX5.a~^0 ,Ñ6&ם_Hr ={x k|,zZW"f_=D= +[WF+j#{qvo4U%&.&!bJ+F`PAU*V2Sٓ:;s 5YeS!Tc;" NxX)҂m<`"` 32U 5HɨI3?_fǮ+JS'De''b%]Q'E:` JteMxR|sxkW%XgHoÑۻ}jo*\/~;a;υ"#XV{DPZE3>+)a@&p25`aKF.7gB8;{;Y)/?a՚!=D,-sb(x8m݊ Z%:i8]<%x xaxKA%h9Ft1N$In vfGqhg<>6د17y8OT}m_icNDlԀrܸ mY:K )dp"9Ⱥ/hPHPJP>ڌ4p`\J;}m>ElNO9_V6QijdsCR<_}uO=puZ#o>+%)/AM ~7XBxD`D^~D\̇oؓΉgeUGco0Qg"vNUʧz_,2sB@6ۈvdћNa8b,c^W/3kP.[ K1L`1~H4=d2?1_L/"pEFզ:Nkgv#ʎ"z(Sy^eQ)y/֌JgL|WMs1}o`@50Acv`qS9ߢlC>ꅆx /9XAXiuV4; HδAM8]c|%꠾Com}܂7yإi71Q|~G=b|l/*W(P ѼqNHέm3_Q-ͅ2 mFlm02&EcJ#  S/@>%"SoῊT16n[@~Z/YE+uT[`bzcdC=zaUъ~@PUG :?)(tA\ZV{NZe̯

    WOufshYsZOf2<:&u}ie[Ȍqqyz@n)hw8 ssaA9BqʧO$f] GqFqnߟx+4!N7;]]hT?$҈~muO(k.V@Zs#BRK Y!xA6MՓpL 9B5q!m6xRnAłFIWF;֊-lfִ/zxSbQ>w*zO-zGuF蒫# v|bu8JnA8*džVkh>J:8+1J\Jk079T>"T&=# TwhՄhTBsΨ/9at=0Akb|UCXVLν 10`x~b$Z,.;!g'G!KL;Qb9giJD@M/O[{G&Gg4 6psj9Bp>H}»1h+*Q& lQLfe gҨ9.+9Gsȵ̍FJכLQuTg$^-=WGfzg'h xþ $ ڝ;!f.|fGæ5'(i }< O8uF쬭DDuTP]=r2 "!dlRE7rV9=B! "ˎgZϟP1YOO>!#N舡;, #A%F9LU)5GZ"ZIvImOxw6s $E ~vW4edAظzckH!N[+Lqݞ[ D*_6VsXgFCXV= 2AC^ӏŸ2įNۨ cɇS<5?or%B4]GlwYLere>e?meGl<eAn.ITY1͇y 'f2tn@ 9Y[LVtd6۹lBag!1AUeΎ?즏¾-3H7kǜ`ciBЂWuH;,CD=#XPbe˓_af9!w, Q*=y5?oiUP. [3zO#E g{cfaEtԠ IOq$K.TOT @Ȳè "E9reDeG\ 0g׼"m(UJ\(f{'vkP~\dpOb0DոJ?,G49vװ ik*^HvoŲA)GGWXszef˚t?1( _L!\\~ȓUMeiSce9"@^$Yy8݌8 PU5EĪs gKxS@boie0% L8Ok֟+pX\[pﰔٵ;ʱGcbυ]U[=q%iJy@,JELH(d4Sm)kj#ЦP0YI25f$eUN},wde87eYoi$wA9 @:eЫgr0bbivX=%@lK?.Yfx-ncVL чP%OL [cw[܃GCݟ0m>)ȫ⦥ ག  垫6\݋ItD[;1 :2rKϘ|)x\H܁vI[2{.іOnNHO{~kŵT$XSGD_~y,5dȫ ́B &\7#h~h"(sZ{4~-Bi5w;,vCNPw4J;YC 2A`P|$RwU6i>MF`FD0Ht+ \[s3J枰q =_tia7U'@ J K2lHMt=I9tUR"1* :W! f $FXZ驽YpAM@2Onj~p,=#D WKhQK {.ZNooǓzlXM ^ {V"9;J&{1żv?6> 8HwUɮB@=o!*akF!ZףyP37UOA6yȁCpҒ8tnH/Y!>Ѭٙ\ 9a@Q\Rͭ7T-/؈.x SH7wX[ƒI3 :g.< Pt[DHתn G-yJNxPSIS%_Ck@?z IVtFOf9`Sw(!S^-OuqVb\$7swD70aNRٯ"iKɎQlÂY.3#ff DRH/;Է~!|5 kBDRLW/tYNYKܬiro3'^ ̋d1osǾQb5LaA|%;B8%K}M&J* g?T,R2ihxAS5*s*zILy "m},zLeV4]C*pG ~o%@%[J&?4o%EMrj4QVt|EZgl+>2'O4-q7dɦ|@7,j(T//o Gp|uy4K?s˿(ē" 2 ;.hUa&b&9Ybc+=fߜU \P%9뽶]ud{?fxC*5Q(JZP7[dLTnw1y8Wi>jՄ[+4CޗԒnZ$YHMbԣOYm~ujL\g%1M:W~N?ҌV;F|qmƯ?/ݽJ{ϊR(NЄS/W Vg;W5yhbL0-FPxNf=ңǬm z)8{}_duJ /2VW͔wJek*!V5Vp4*kEo%wH/7RcFv 'c!%C8RieIPOPL7!ؤn1Bߑc\2#Si.RHќ>>~%^0EF$hMV3O1XPG1S=ȅ&L@ Sɜy? PС4FZ5iT^#fg 7˨HtNRSH;J{V:IJpf[ԣ]jl] NcV_@4J5}k25W2AvV$k֘RQ6{,ww:AnEƗ;yja(fuoq]AuQ7R8蟨>e)\BW3}?L]D&%4|HRf7W)6ײ8Fŧ0`mM/5VjȘ#Gq+oxlOj^@vpَ +Ӓ^k1-`v*Qfũ uӒ(j 0,,'~i&a%TLƾQ΅'.s:՝湾nqu3.(lsp%E\}w [? uW~r>ˍfd,A(_mAja.5|56̞Hm9lͩKOuQyh8缋vH&ALجa/(&u(uAj©|=+z2GS4a/屳Ż } /QcƎ}v"j/ .'#ɺz] 1& SSMieL-ҡI 3E Gs-r⪿k>]=ǥinUuT[,*C x}1~Ȼu#BJ.UY0t9ȱ}DhgWv9zD[>(K-6Qd)PEM^;E~;iqg=)Q][(Jl,ȳ<'f-YS;}UgȻ5 91sf;ь[3pqf/9(h<(Yk,IYxpi6LB4Z`bo,.ŷH!WfjIY*b3UT6"Bׇ/੷ά'h?tCPh%z+akzTj [_MDCi'I4Ac{֪SBH{1$8QOQ(YA!#gͯŒD|lk&ɑĕ)5{?qHｅqi)cuo[b95!8a Erp'qq)V<"=eiOYB'oCgx5Q$s][mR?.r"}ڨPԜ` J"rcrPJ9Rԃ'Vk+BF%~\)P0'-x&P|o`:9t?[ĸ49K{uFrM6QHKH{Ҥ˶B6[>@>ܥ?l:dXELD;ω8v7 OBӔZaSԅVb7ΦSv+Ȋn4;oCc^9Ulyh,CiQN"gc.XxE>-ߔ>ȢF6_#Ujj8zc[X§Ag1=ܯSlsZȥD2d #qh@G8y*OFAfuHZ6+hxr@P+뮇Zq)xP8k?sX<% dsO%R$;mI$L oY;7ZseG_ّ%taZ-ƖKPkڮD,P8}12eۤUЁxKNZ gG^$`ijzd kcbw&ʮeq"ԋЅfV$ H8 d`)Ig|‡>J $ͥ.`%0}aIEr v@:%$MVP.;7t4& ͘dS8jΆs|-h \g-ZFI:6&ȁS#vOۙ'[ZR-Qg?#y/#Yʹ~uξc\UM֐]V?Ui)l&pHށ$d+t{6xjtn9Jp%r4*.km'O^un"H?!F^ 8V; ?>V^Nst \GDՏ'C7EܨVT/ Ӆ|2vzk9`A4O?i#!D|Q%P/Eꍫm_e ]F0Avi6v Pa">l| hQ+lS,zhӰRb./C67DQ$3t@ VI WO76.\.OdeirsʦUD>tgjA>=3M%snY̩&DJyWá-} O]1ӵE舉3 +%ǐ LG{Z[X͕e0-MS@4q `[9bjbG}k$VM: }ZW3tڤrfZ69ᡩ2V0=DbvJJkֽ*m-'wˬRzd{T:8ooUzo{ FpiȂU$zg /izy֞4nFLQn*`z^p>̎NNZrTrP@1!OHhYd/qB8=)vt#K%X0qv!VVAt 2a*<*>aڙt&}T2.Kj 5UtE x)p_Lgq<-m'at)9u{wyC#\oɞ*wTJ_{b8vһ~ZUo@O}f M* l 8zamu®@i g'+ctZE+lU2F}, +}RI.Jdz:U`1/`G͞g)o<5.UALud &16&^aK;YqfdKeS$ *!)g1P9g}xLd~3=B$h:4ݳLV=)9 c6K8$N3W~><@H4T1Q-Ѽ^DS!;r=pWjEt\n5vgb k~*п|: h;Ɩ4P dpq~ĭQtA搙3YaHKI܉fn0f3| ݊$E+HR%X h-_ClRWƉ@C{/eL0z@ޕFhgYN/t 8$Ļi vXuZ]E͹!RnO\e?Ҽ8n̈3>ӷ=Ftt/z)sRZ\WT)U[GοL逸EiX;]1^IAVquqZF6fŬTBl*' &9@@$1Fv9XWLlz@9gpcѡx#CtC nJn#a-1oY5?ѷ)`uez[=Qj?`n~lO;S<ODz+Ohj"`t4s8iR擗GB[$;wrSf+Esg!ѪiCӧ#A(츤{(6A}0%61Yxa_Myzt@m/ ^ĪQ@3]TM^N#?ŷ) R_=NI^Lx+@xvxu9e=IHG#W]C"2L:_pP5aG~M~ƄЎeE)Hr\<^\k+g/@-j,f 2XHv"7.!$=k;g0F>hq?g2UxĈfdꗡ6Bg2=jQRFf::::uVwx=GC04UxRtBjO`r}hg[.&4IFC%"X wIԛ ܇$CDD ΔYpKKlP)5Fן!5"`jbe ]N${/{@CL?~~>BQ0}Y<#1$ȋ>K6)}[+IG~3U>Xbk -zU+33$%ꌏEY&SZ;qs/1)Y;MOx$te2G rrCbWt0PFߋ@>IT[ ZڐLqިoo^ڔHOmِdڢ/J,=XD9v23;cǖ 2d a< ,%"|LZ>gzC,H"Oj?T(`I-/1CE$hiŔt՛a_[ndcXV;š=>jcghձ{GYQYQ=Fou쇂 "~nBp ({`35DP"-:hCCŎA&6`ӂñV& #ֶ nVJGmЌzckՓ;h5$1t c`vJ}7o1M&H =[kCY 7d6}a\-:p^uacnp2୅"裭w5ʁH=Fѭ?>FWGK75ZbM/2BbRB v (9mEg)q`}W0rU4J Ե95fF|`=^uJy6e+0 !.`.^VMnMUR*]0LRЮ9ۋ;(CtO . $4<°G{N; kj[$~WTx>xl>G0+\cvfc-Q il#'1,(B5ٰFJ8 rlޔ{OYC\$1JvO?SԢWfEbz{k 8\֧c\X,)&p!T[?JϠ^ɥJU=~A`|8mE]޷Xru{C<>g..ꗕSzbGU緇2rt#LG LRU5i+&w~V 4#wSF53=o ٟ\ܱX`#4R5F@J{)R3Uymu䜛xm\9n]A@[fA>RŴn{}cFHH'b{#bd\'h ښ):{c[}a͈.~лҁ XPQSP[@RjD"H1҇6C&"f̻Ul=$xm+$v~yTm|shjAzQS\\, F0wV!aT >xqwgյZ5DSPnRb`F#Tpw9$,2Hyq}KƊG> <&<pI<ȴgH;n܎?{(H~okUN@:WkQaxk"glNдAJJ=˟51nJ*Z`Y.TK#LƯ@aJCRyPRid:C:V^ ǽETʚt`Mn6=ZةKNX$}ztQ K:gwG{?ک2m\;`}9`iֹ̩ IR\z _jApp5gtPPOF_:ogLdA@R4<Ӎ[wh1wKUE.9f F+=O"]oݶh!.ۧx(AU"rX% Pvpi'澅'( /hJJ!{7Ԓp)Jm!@vΪ9E]ba?jupHa[p߿e$l.շюp/>h>y~yP$4E< WvO[y=uPB16ShfgnaFl<oSMx_J`UO1L㮖P'x8 D_:<@Sv tkDZ $OY}C.M;KdRg%\X E1M 8kNlc %㐉aDqᵟF kZC p֍Uv;jG+ e@Ǥ'h;t/k\Ҝ?mctWg DpLo S*UZ)"TN{-mu;HUؐ}X$;Eg3fn.5<絃) 1_Q{`NAUܞNlm)NqCMHد֎ѺR.-u~I2Qa0{ތ"a)8N8nXOPK7Cջ,6sEq9Vc:ظ=k(aB~܃V T:vŏ{=c6 uԑH`Db~t1ڲ}*? Q`%+m9Sѐ:I^R&,^_)^뇏,9J&![*n^ 2䩰 G#FZ}P!Hu(β˥¢K56(G_(8YqۀzxЍk;ΙA雮@?5Sp\d>.D'vG8d@u9'<+'& hE oԍT0l^Q_(){1p7Y0g 9n-L[Aڇ{ Z B["g;WOW}g .meuC?|]g@9o>tq4 W H#1 fM.?7Q /:(Q#2v# !jP9W)0=xcM > 3WY=$  O':e>=.fмAZ ?!fޘ;h}1\AVР&F`ݓiGBXwIݸN'V鐤^7|э 5>6W=K~S7%! +!}W(J8VY;OK x2ƙ0Oδu21$ +:[IƯСqXƝ; c;?+\߿٘{og@wRYk19o=h0Cڗ};?ΛOe՗xk&ێE޳غMU=)vr^țcJQ JD;N=m;ৗY3"wGXOٜ=(CjΎAs0be)R0nS1 zeް1ah߉BdԱO4I&Ì#~Ln$7T30z߷DB&sFȈ"NNWHWW߬ :@mG@1`AV2GN OĨ70" ]hA~>+/ 0au9Y6̙iPƟ*ɴ8)b~!_li!|_P/ؐn EEm9] cr(ӆT((-L#T2n?J5Fq-KJgbKN 6d`cA:&\IO e}g&uZCDUZvfnww/T#LiR/ 1$NwKYPچm'V$ۡ֫o [|`T{Ts>BzR"~3?m ;>aZu"No\EەN(ɑWuJ8J lm41uVX&CmiPF?ϜFL*~E;-,MK_4c[Dh inJy@<Ƭ&-A?=j"{\ )>y:;8䞺JhQ6 [Js7<0U} _ܶrx'nYh0QZ:|]kuBS:սJyFS /zrk| !Qٱ 5ݎ^eUfiAJp}aa$wN8tyP'{?N2}eѢLLsZ-BH 64%s ]=5sk~g5f;Tݕ {UxW:¥5@-ؕv\w|gʼ%7̽im5 jNf_u6* , ٬*.O\3D~Ǝ%*qqHhaq^40深eyG/x/z s;lNb% CآRTeLgoUN6|>uw {dQVy1}}K)DV!+ݒϴ @zWN2 ]cU=Q`h jIYӨeV޺R Y~ ȼ[MR;X$0HMb>& A{Ss c┢lCT:l=-*XWxe0y RgFʥ,4v#8Bp]8T'!BN{؃wFL7DH[Gxő-:`=-&Ƕ9JZ6o])}y]=]EHZ'`,m!.yLZA%iU7Oȣكf73}X\zrfWBdaǽooNƒ*P0OڿR<fݪq22w[ʛؕ?-mbik4mZPǭ[ o+NiZ6#zo"8= kn{\VE3쿰©|F pM"hQF]EoQx֢s"R.2U kЪ'"Q^jKomӗ3\M}?7<%jpՊ/ QL>_ERn+@GK =aN6fhl>,E&6m{ RoHis&p|;'B9q \yfwq\<3P8`uDa%@8i>G͐~<i4>k8gwƎu蠜)M4X/m?-pܤq\`"w=UhbmO)뾣 AF\M2  !㛝;g}`XY)=@p :P'δ-,2*7ُPC(:q8P>$Kŏ;#-/_-B8A塏2,$穻^G 1UWbW S- %(@WF!vl×TvC;?>>\/}$}Èz&T95)]GH f,'A)E=Wج4[<v`|*?% Mkn מ4'/0 JV /jCWĵ3k""|90 6K>XD5P#>T,.¥-bg89qR(D(d&Ѷ ^asdeg5(ˍ`[:'+1Do+s@C&o7}Fw1c{WB-k4%b4F:YF|Lx ) ҝVߤs%bUx,Rٗ*a, q6&`<133M⻽G?' ,{2ϞPTg$ZOy$58{& ڇ u Fl 46)Q{HGYd*ya3STſٔD*l8v)kg _?F]}b҅S+B{b#ap;._=Si8n;`m1Rextak 􄒡~k_;A4 x.p]\wE@^xtNц5e5r-Ee)筒vFc3LJ}O=]^=|&N%`7B-Zve!3{Η1:Nwm2ȍpĎ1+wS?K&w +d |_6?G0mtn㊙,-<``6dkl.N>Kǯ3 lYޏ#o,坎ۉtuUnx`iqD/yxj{іĤb +B(_yS֗C~ Uy^ZL4n܏\M,5^+1Xf:9]5,FʂB׀?WZ-yK&v-0k'H8T*mSJ|ߞx9.70dLY'ǬjP!,$V[QtyP'jEl"<cj[H FMY(\w2Y1xk1138Nup!& ǫ(HRe++tW-Dl/RލŎE`؛Iz ~Z:]Aja+w eso>Ki%Pb}2okj']nji*eP[Bf;Z悏[&_'[NZ~ͪQWLFOwKzztmq 6A$w7% :V72r2ŢS}C (oDڼUv'H_AXE:a7'*7 xWDbjN̂D y&=_7)qXLQɖ}h*:)g{._O_32VxRsp29蕡Ym{ĘX惵Rz˝EKFWU`HZZf:s.As-!!ԊI`9haƨ3RIYq}S1,傠ʩF=Y W+Njm{#_g'}VonvjATG1$&m[e}ȍ:Ʀws[mLB5(_>dpu!AB06D+!MYBڽ؊W {}k{ ).NRHb_R| [ 1>T=nUlɎ"~ZM ŠevrʹOvZ@,Y0ފBhſ, 睫֒VBCP `V+ ͍zpEPXCߝ x aB EisU'(nD%4(7Tʳ]lQ?{LBCпypHI3ebEhqVzR rV)] Z7"":'91:@T*Wޛ#aN3tZ`eg)4=-irW'UXX N'󂷘-j4jʚglኺ G?^KLE˓9'j NPM?xvڊ)9Jo[(``]b}!qxXMxhÙ81ٽ 33x3d}FtA 4+lof{? -[D`{BSlLrT:H!bV-|K:_bKI!|e+)"OZb#5iZrp  k$IJq7jg<Ǔ+5$}+, 0"rǤ֤ё1E˶PXTQ9 k's8_ qF |>'4T-ڌ1u__@EtJ3ҒdJLHE_A8jq& O䐝"ґp+¥CdL#t9s~Zbh=5GrJѠ&~@  )1}a_$BF:na?\sbU5m$DcIqN3ds R퉽( 폦)a+sjaqwiKK -2&?mFl7=HޟfCDjGZśއX慁%$E@oin)rA}ЊB. d:OQG( g$94y ބXN[S,WC aOk8/;%?I&yjQ>K1L8j5kq_eڇQyG*wp&dJ+ĂU`'9s"t˸Q{zbmv_߇q̍2F] T~$j i\\SGc ##=X瀝Ĕ߸WЋm|D8bB^CL<(8Ąi|cH.isazDdPU:NwH;pClowfRv*k3b!K6aVFmaur!6!jpDqhq''E|%BSPӇFUo[͇ /`.aSv%LkiUO jljg0͝6`lC2JHAh=l[XGD8 춾I fV[=?W_$B0ehBAV(>+kzs`وy%ɢ/xr{H/Q\tS\^)whA[6ZrF}Ӫ6GhV`'$ Yh i"1b]_]G&jԄ:^C0XJ 5sAʪn0y2QKhNc͙q6gmJCQnH"B%c$pl|H=bǜ4Jh!`Li:n-~3蔻II8 L ?9e;յSnyj_cP [ g#%yF?=UH!p3yY}OhӨ5+>fRR K䩔e_ a >r Zw2RhI>| 7ˑ Optu!qQZ Oq)r: pщ`_$0po'䩍<Ȉ= _ݐ#k{2hnŇ5C~Hc6GHs?GeT1L^Y&EWuۜF>-Eã4ĭr@xN6Zl-g`&ԝ39wPlk* cnZ?TUs5ŜVr1 ԃ^11N|5=!7+Uw+ւہac*y.#l\¥&ĝ Lv/ɑ=19/FVKΑWG& !/*, Ja+ l&[O*Mn#jYo}nڊ ]a8kY =XdDE'ͩY/iS~%6D'Gz}^el0? -%;_ v-r2hK)dRv6,2ͥQH&Ѻ{O=t[SkQUhő(|Gw&f:irkf4.'2,Y'}nOOh62HD Cy5u#n#/c*'XttB%8y rYGE^9ZTJ! r+A>٭9=C~xf43A'ap7# >锿 c?2k&ޘr<|F Hxk2:hkI1wC85pbsH082rQA `lùGͻdzs2ڤL=7sq? 4P4Ȍp',, qi?`_,P7 :dpdChmFJr~eyS1-oY&ZM&VkܝÕS񝡝cHvF@pNՆDC# `DK,96uJ1Fg}oFء !}zj~S c)3#8aMʃlWEJ+4H'D@uJTa5Ͱ[) @]K 5Lھ"*? D22޻"08<+ I6h*KY XIs?~ `F"H~iʱ^"7k즘K _ I.Ä_h+TQEa=IRİtԥ)NP#%|. ] }zh,M=Ώ>$?rNMc`d?WݎwGu6+w$$)e\y?wg- HH韾mA;ݐ'G)\8#ȁ},W/6S.ylzE2(N&g拒i_{TnA@v0w|aes:63Eeb)R[sFuOq>j's~B뚑=oW(D$MB3lsĩEvC7:c?'F3 -W78X:99չZy`(CM5 _V-!ц>*AAA\X݋F]#6_{oj[7n!.xZ6%aF)52:7Im9óE_C@2B:>vQƑLh/3C\(Ahg=a}ٿ݅eHl^3]5Sƒ%-#In,]:on.&L;ڡ [&|NӢw/uq AJkN_D 0vNﾊ*NrpO(κh:>%mҬ&A]mNk+sdEL)mZbm]h$Tu{-\%sCAu;pM&JͯǧY8(L@9 񗜾 b&FKΞߦM$q`8_X툚zoOc_X,윫T0|{ Svf\f 79 ?`&dp%MZJFv -XKL#̐h}f n|u.Vn_ݪJ^ BBË\aLD/Z>Fó.![K:. 6LJVp6[~7}5J͕Ğ [|-_rCZV*T&HκS|AzQXxs4S(c,ˏ> F́/Vwg7v9b-CR\ kE_ QӱlwI.c M= ,XqŪ$DRq}f-cpKu` .ȣ: ۤBա5(Fo@86ZD`@[WMFYZV57oM$~|4#j9^}dlRHAP} &|!i [Ijm=:FwNiSDng]FkuK]# =r O2xl0dIKJLqN%bɯ-?%ro䪞'W \srciéM ܍y_ 7h P ZOPN\k%-Qxr n޳I%]$8V8j=sRySp؞S$u&ŝrY܃!Tvc㧭z꼥Ι GZϗ&MYOtF98.5MG5wv v7}' Ň$^v ^Tq Y5QK%ό3+Ur WO;l:`5&  `?3PdXɑ Ys,JAnED}[E401Ԑ/YZ]0F 롎ZPA=T1!T2ŧTfUkr5D$2ā>7E,4A霵UAƵWj'Dh%\׷RkQ9ީMn>h2~Ӎ!G_lc] ƶ*wWc-^w&{/ U ko.@6 QvՑipH/wXԤ|D嵾/]/$:;ΫEO˚Þmj_.r.GlҕthJZ2O\ց/ +Wo_ˊ*Uu¾?4k`i/Yت=I^14TM^O]*E* xW]U +)ԶǷ: VrAz>}Be|{~$>dpF҇wmV5&NFGl.jR>8qoʹy KYʿ*asuN|P#gѼ>0#Yy iԞa՜U/O}刘 +z6Zϼʗ#; Nj" +C2I:h4R>XNGg@֮(=M_jmPDuxrH|i~{]U,Ü {Q gm~,gI@!bsGWTO&])G*"+8'4^=mxJF@`0:8VohѦGT춹Ŵc bc~ǹD|3aԟ3t֑VVf{k t"BW0cH玒9 QsF ˋۡ})€$mpV[2'S *J,z=Ub;{xH^u֑S0s?pf~h[r(ulkW˃b,C= ٽz5Ç6]&e,j` \)qWhτM2cq{5a }!f_H"I/{ tT5e*$'B:vyjD8wnPkGTZق9B6u9ʿyv{8 X6gș-TxG`UWaP ̃7&?XH=H: HF'/msUy٦1- A(=?դVl䥅|NțcO(v_#wD^or,`n] n΅Jy>mY74=Fs8h+Lij(Q`>u'{vUnLΧJF2,oثKJmK w'$ٶvˊ9,-P<%e$;~pzBf:y/ʵYsZ3~!1٥xƤtw.!!cVx*1r&¯!Y2]G '# ,R/*Ò^R5}ڊOhzId?u. =%Zq9|1 *i}}$hxT `i  ]9. +wurSz@gk*d10_'(pJAȠ^EnL zZ}k3 ,س$ԄexU´C< ^\EeQT.c;4;Fsrc7ERcꇄ[mi$'!`e6ɵ*ȷ-`̹.9D/82c2>xde.F2ZNz9GAѷ; aapI ġoGMa3U2q* dDħ(G70=oXN rܵEaQP/ BwG [^fԀ+E| h>'6EUAVrLS6Mu|"A,0z[WWA&@z>bM?ƩP5NMx[?G X)QL`:6@R@W&'IjZctQsFXvګk`n J:CyW8ގd< 8ZlyN?׀X"g)MFpJ;$Um2y9b7z|@ X1'v:֮,8 QQǤ ZE:+;O=>m^W͊`s 7I%"08CFQr!R3;+-V~¨D9F}X\-ɑ~c͙Hz؍̪` *3hz$j^CfwSēzxxq,R睊_ rbA{jKU]~\kJC [Zeliٵ( ;B]\tPxۆw dZ]=Qvh8cs|ۚfy :W#@ E{VYvJ _$q~w {/$2֒XgPpn]rBG9Լҗ7Wh!;>ZomQ q~EБ]I8L7U#/Cxx6=ZBb~݌4eJbVIWy]r\ -gI? 2;]b]ậnTǪSz*1f__GP,կłD?|jߧ`!o4=ß0ϭ{ZT2aRP*s)}7M1)B~{ IX* zm#TFU58Ӛq_ zsMgC\MeWBj}nnDZZٌug}Bԝx;uB "7OzC#&Au&Ud4TI)0$jI7y:>Ny 1LL3ǩ#}dj֕$!;$(>C,%0]"G5 VU/PXaN֮F.˿zBJ!χZNQ^p{m\~^0O0qXTpe!6 #uػ1 kkHRYq$@9Ù@{-`Y3`Υk/'Փard/Z4^WzK3ktg'DqAITKU[Ғp~@>*Gu/v$21F`ONNt.dY!RObǨavc[gQ+M x l ^Nf%NTcߜƖQ}PzZP\tI9B 0*->9e폕͙x:gr3E z>gyGsFXiҦXRڭY |^+hjL6G( h5FƔw=fJ^Mz)~x%r@m}['Ji?T+NpWfX$Y\,HkI!@٤8,թLQqB.{雩kwHR13VUQӦɯ:VxE2\"L&<ɱ3WC"M)lvGnjP2U,lӶ;>jbh-<3W:]$)Ѿ^آDƒ CP.a0HZCLt(#3j7 ]uէ}놜mHyKRo7BIB^l=5-ptk(wq8R;rJ#Eܚ2$ќk6#mɣj̩J19MѰ Ng5%6A"j FQ,ƷS/_bq3o:vΖ^LԘw.@4Co$ ,Cdr:vr< FK$ShT|FTgέM< >Os} } .Ͳf@ts+:i;Yu')y3H}D:Mx|&N]^1;$6Z l e0N3ҿ,f14iBUf E{M=3?kbf,WK*wajoҞN}PIn@iD Skb]X lx4ч%a>G>-5ޥ3 _34R,qÈ4`C6z3֐<ܗ4!Jp5xySAZaƢ:`&֛{ƗH5Aen#P:qv8}>OM4u1IOX ď¥2YxADT W}WC֗9ajU$-U1>LV٬[ȼܐ `сΰ8][uܫEVtԐ!`cuJfuO'Ҧ$@9H*,V앛GE?}ۍaSV кe$P"xİ7Gf|!7C|hcZ- ezSIjFh5Du[w֎ dR#"[.='RM:wS Gj7dAΑ32W0xq8ޖKNz!VF7~b![xJda8f蟲x|ZLHזGrqU\\JN/L5~'0K]GX &GPLYo\v2ؐrCтƋUT#y21cR; g6=hiƶ)P_0d&zŸYuFO9wQ#<.C8+ tz#mMΖFQ= ۵_ds"d w?Ck*lmE3O AE2#H]^9CrsC%+1IMWy iBc0< <@BfmRTސXt0 \r_CxbBS5RD!,wź\oҫ8Qpq{.dg[4G*gS!fQ?4}ǁt^}H1ĖՈ`w}3te7uΫѣ o5ZGB|AT dp'ڋXnHCЅ=Y!Vt|\>Qh.Sb05qm; . 4ԝOsƷ887Bț >+if|BdžtZЈ&/{ֲY'aVbӢ,mbPWda3!"ąS>hyܡD [qOgo  |Pqfl' X6* ZgAq`j{'t27F5x(i0?&6.a2{u)`4·&ŭ;VB5 Dv0 )n3ϻ?RYl pUs``U>5^SSRM04HśR$!EK30Dik^RNJY{ U<`޷Hld„6O`;/8*xu0XWG+?-z`1WjIYŞf3t vO8˚(+|FRiASK޵ʰi+4T4ܓy0f1_Y[2,"\br#ؽ9\J}KʐeGݡ`²_3)1KsZ_+]kU鞶l\3fN P We3}z4Ƈuh$=rf %jX plWv_r 6n<3mUJE\{IK!Fw%m`-'!G71*Q۟\' unA>^-^fsH' ^4dEzi>wՎ bSq_Z ,4u?]ā~>T DwVPM !*XiXZbs&h.ى sc%G&:,~D#!ǿx,NրVz7XTLŁNVR+fI&WX dm ۟(5@LG6D< ,ZlETT qJJPigLu%ͅ+Ţ(G5*Ff;GS#U:brMXt~<1=Sm㽲cSHW RA0kJB"7ii 2jܝWٞZu))  b 464LP,#*pnjBd#ZDD{Ch葲aB,Lw; \0TsRFw(`gE6tDǩbVFUl&6JJ$qDT d A#-|&I/cuna+ǖSBubkgz!QԾ5!OW "aL^9 HAJs?@-r[hNhPˠ_𽪴eڞE_L ϳwnLQ@(1bj]5:G_Щ}Jz^Dao լٯ:>Ot+R A\SP-g 79V_U!!ў(LsB}$wKT'Zn0o#0^L]T k+5 ܮBn 3N-瓈J{w1;",.s`誄A7cDWΆJ":cAk6㼶7}9R0pg93[rnt4ͳQx5jDN㙨`U3=]^)&+9նS?4GFfY4@;70~G߉u{- - pqйzLqHA"zM5,Bm('EsëHARYN(rX2@uj*`R ]lަfH$\i3dظX A:K 7zv {*gfi#RK^Քy QϪROEm#ԽΡ[3Eibv&PLjS趻jL)ͭ:6 YTލAPyq:LMc ]b}0%6+"`&|tJ ̯IL}RWeϺħ=}$y_bT!+p`Ŧ l8nsnwrGoCcʼ(@ wA<4Lvp 5y M[x̌fQ=u4)o]"&8ړ0i5Vz<+@ R+4?aXwd] Ӧ=Kq/$iH1=, Sb& |cG9A2P-`@=]15H\(5ZZVVhsC,%&IT}7ͧ4q^ß?,( ſv[j O{3j.kӑ #s$#/)-E-俻fÓy]IY9C[ sL$ծWuYs6Td.޺l{͖Ep7|ʦ6*u䢀Ի5O0EdcbwO˝ڸ+۫FMGf g0yf5jCbB3@ Op$WH ÎkW"wq⦙"P>HCvx i1lvL#L! ZOS'mJ qw +MCVY$(8HjHlrCEw  s9ɯM3P?"AdlrXWҪ Y18T ƗJ ? R'ƛdFHPcv=!&K߿PkH|zy[6/R؏;$m^_ C?2q-D 6CsE\r1ye{vE%x]]9+N)5-WcXY"hRԓ6k7@|ر)0X8H<{1gefQ׸);=`a`d}_|թcL@q K*:-jµkF:&XR 2!vր_"ks KBڂz40+ j/F̯{z$PҜ,m$ib Epi{faȻC0hP<#."GT2u!K'y-]@Ehw!r4Y&^޼f{^b\"֕dgOX=ujI@s~GAr=!g#3{_$_-N#IՉ ,~n|֙j0Vbpu< FVCa xxf,-Oj~t;9嚟lgRψأ([@jF Rj*oM$8~YL i∸g>W[{Ÿ~Q$֒/;@p##V\v5^648G }x`IAJzurG}X1BgƔXhnYגG8r*ó;E&M<he pϔ#bMgI%"VToȣ C虫H ?_<ŌW= ȟ8x@.Ʉqϭߒ^g>atpqhg:/s.OL$񡁎`; uD}JoN^sT:ُ]I0^QԽܞ.hǑGAi̲wZZʯ08}`DF[*dPV\_)eص}ķdvz%*nj8}{i-l?<*Q@c]Frai ڰVݱN܅3 &4u$Fprd9Pe.dZ+.^SRJ c(mNuQj=|aH$O\#v"Bi"v۰ԁF@8ͬ^>£^y;v ,i FU{2%}ahšlb!Qcue#XGb\Q0Pz=k̿ A:[Ydߗ9_)L2$/Nc$ߊQŊp-G+դ.P%{dBtQNmy[;;^sv~)HPK25> gv;\c@_1.k F-kwҔAJnĀ+KcIzbC5%_*h4q, |<M\j:Q,xm9€KV&;iu̝zњ~:k'5L&lq柅oO!FTwosuzq5 nuift9Cz6, y"<ץ.+3S[^FơvUn*L=ˤl6>iw& ؄H~q?Q{N;~: XVkdP'Ku)M?K$DwfhFtq_yCҟ&kQ q?o$P僚dtڊhڱ_92^8I)ۛ-1U*r~Я5jc-W#?f!|乐3*6qJ=@ )~r4ԇۥ,J2(wn%9. :Y-^o&wS~5\ 伏[3{(!n^ࠇ2Wo@/V?©ZvO^]%F nDU$DOBUNҩ(G  &ZRE@ҕ{-'ǔuj%ʌ"vl.LGU&KºmjR>i8 olC?y3LzH⯠& J3%UqjBއCyf|RX80Ok̗52脀Ϛ-SU;Pe.uF;(#⭍i*1f/nqMMq0N= )7`{!ZfB{/q^ah/;>|φClQNWqz}% doH@S!,E6QԻT2,!e!d:8 sEYmVfj5)4(|$*6qen~* z*fHC_i;qYjYx >qZ%^U(Q Gb,ƘlaelL#~4 ouTa&ja' 13F,"]]POGD~fl|Bu|Rh{dN`Б ܡъl{1ZSy s0m +Mho5I׵/pi* s?gXH1 Ė\`4Z>ͫAjBu35q_\lU}ڞfhOgh 䰁Ewg\렅Ն%be 1d߬m@.O1GcꟂIXVN#rLZvQ6# $KTAz˰ӊ 3*_#w~<2O5D .hl 2))=CaN,@I>28ħ"62:m0GzS$7~YUbveZCVk0 ^,I"S 1ДW Rd^O}2G#]>=cLsG~eU75|J,~}ziI$\O(̜℉WO.mRd'| eQݵ4$#/r lN87D+5.*mN.&uv+ Yy[τ3]x Om-kO!WLE:c0`(Q#qB,v m8r'-)>$$MD _+EF#wom ܬUXĩLS6||٨ؤ"\7]O)AQ8ns`Ea[*n&T aׯY/5w g?I%ZbW$( $+k:Иb4k﹖TDIJ=Fm02SgB@}R~9$М--f'-PU0 '547~/go{H~ `̮0k'dho^?t!܇6Zi]]h A!rĬ9ёM4C.JhȒ7/uR5 4ըTTA ((O̡? !Z$Ĉ"q祶M-9QIܯ@Bmqe Dv3>7ߎ#a'NEGFX5#oV*HGhWi7ĒUKdNg4qlRGd} NAw].P8EuR۔7(v!yQ6en،],|Vyi]qᖑ7ҔaR.El2כm8B_% 2Cn%i2vc"qf(=΋A1as-8TܵLg$T\sVBR1Јs_ WrSU $ lbh6l8HFIHPGv{fge^A:mjꢟJ@$32}TcNN/R*_ AA{%„@l5E5x Y UotG ns3}eH<_!G$NDqi.+|q-jsfpfIӍʑ$x:՝8]"G=Ϧg./;ӥ:ȂLάU 4itgqVvXc%ch WB|(6Y{ց!UהwD《6u~tk3;~"ů+lC}GhF /4Zqp@Р_+؉Y+ ZyWLWh-ŬHe4#wq}}Uέ12QT+_EPUVf.GX̥ɟ`G;|vF3'rvx⤁^EAn͈F% ehop5Z3Xsdta r( |M vy|q+iL}'_Xiea0z !'֪tٛkx v5~ K!8E{zGiC,$eQԠ49#l)虤z-!STm0a`Gt}qIX!+/vўY>"حO]RlÓv(ܘW:^1A\7ʨߧXgyM A}XjmY\M%R8\8n]RZL#D8>6xeOѕzwS>%yUCnf$OsBx,ENr3+Rv8_g.QZ]MCH5T2vfNW4ٗ]VC6'-хAl}QBi٘{`}I:G_^KMeGx9q~y 3,.tWJ I~ Y *Mr(QHWD5YK/K8DR1ЛI&S[bDѲb{1a>ELG҄;ӌP9B$/Uy[ FTX@ڙ ȌL.sөb`w{H%*Eko UKgK 6o s~=l9 OuӨ!/?), ['*46tG)(>n ,0!]P=27ӷ)!Gi2Z)̎cƜEk-gS |)^L0wp?BB,֧waoyP8P򎞓΍O֞b*>HP@ EWrRDM>]LTM5@ LYdƪOޙyBCn^ \4^s/o8I'N&:gS7L$Σ_S$FLG[5:Olsxxi{ $\uI3AfNHrlK (ʖJp8faMr`KTLp?,tkآu]QݙG[ [=L'

    Vz덱È%gD&*qk}˧JS~BՂK C.GI*|NDפUF.c0]7]\PQS R}h?w#Ba%PR5.r@kX+~wi"Z~";Jh} eI/Hɑ[ eYajr%k¹TyorZZpBӋf;bnBѽ˂AػU*ya>Yx_[u%`9vNuQ#+M41)X~";3&;b́yj\eCQ7,i8༳|[[tmo=fj-0(_'{|gL$V:jl;\}(?Xjb5*b8T=#ֿNm>?s>Qp{ ÉՆ-IHQfE uKIlZRbk d .ʛ3\尓K ! 3l"QoYAadLt&Ƴ 9I8z6MtL tF$=}ųUf}FaVfZ4>C\>=(LWoHjH6o<|5.+(`R!?x/2;gzQ&h Y\cAqS.@t%ς~r4^,.m5̛RMly-4_y @ JZg1Gw+sCc豁`3K\l뛶zu[?.acL䛏0bw9XͲWdbY+Q^Vw.$3%BT0ͽSL>LXD]ѶҵH&263Umh삽2Λ~N5~;XNO{_)kP'S VOQzx.) d7Dz,0*)pcꮀ_7>]Dh f,y /(+=|-+tVm]Q: )fz,HB:(`D_f1emA؋擧aFӀ)vׂK칒߉Ú dė`~=|Tقg]g4 SŎ)wAt'N [/ za n@o pMN9Γщz,v:ִ`:.D2#Br 8J 7{̈́T̈:@"qF.x%YIBgp.]X tنWn*M~n!ks\0򫪸G|%꫼ q|NuA YZ