freeradius-server-3.0.21-150200.3.12.1<>,]pcp9|,FRhԍDc"zI]b|ڔEPlI/'jQ-flJ} o.@{EBki}M0w (#+8i1y1[ Ei fn)S- صNDop*9'پ eSr(vD%U@2y4J]]='"=(Jޑ4Q6 nؕ_Grh7$*~q58巕h VDdp:PF <~Gg_kjC;>O8?8d ) 7LP\`y   4 ^   ( 1 \Č<22W2(8 (9Ӭ(:֕(=I>Q?Y@aBiFtGHI0XHY\ZȤ[Ȩ\Ȱ]^*b0cdeejfmlouvEw$x,y5Dz8H8X8\8f8h8l8r8Cfreeradius-server3.0.21150200.3.12.1RADIUS ServerRemote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service. FreeRADIUS is a modular RADIUS implementation.cnebbiolo^SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-onlyhttps://www.suse.com/Productivity/Networking/Radius/Servershttp://www.freeradius.org/linuxppc64legetent group radiusd >/dev/null || /usr/sbin/groupadd -r radiusd getent passwd radiusd >/dev/null || /usr/sbin/useradd -r -g radiusd \ -s /bin/false -c "Radius daemon" -d /var/lib/radiusd \ radiusd # boo#912714: add radiusd to winbind group for ntlm_auth # add winbind group and fail silently if it already exists /usr/bin/getent group winbind >/dev/null \ || /usr/sbin/groupadd -r winbind # add radiusd to winbind group /usr/bin/gpasswd -a radiusd winbind if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in radiusd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in radiusd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi systemd-tmpfiles --create /usr/lib/tmpfiles.d/radiusd.conf test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable radiusd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop radiusd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in radiusd.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart radiusd.service ) || : fi finQG!" Ok[ 4 e!%hE ` No<w_6jCd "004 L' 8z # t!( _ 6+ lfD .w Wb!4 j E( +JmVz!_ ]O6 F r$N  60O4Dm  !X&  P  X ( ph0 (  @p `   p    `   ( 8 X (  ( P  * Ax AxBl&17 *' j) E3 p.&!]M }O .=O)Eu "#B:J+&<FF7\n;{2=%F BuQDSk?wXV $F@VRxTkrSL kR "'YL61 emh/1kc_hn  aA5f /n 3AE)lva VmL?J] &!g9 U" S L1<aZ [ 'F[5 xxawwH' [ XYA聠A聠聠A聠A聠A聠A聠A聠AAAAAA聠A聠AAAAAA聠AA聠A聠AAȁAA큤A큤A큤AAAccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc^zM^zMccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc^zM^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../mods-available/always../mods-available/attr_filter../mods-available/cache_eap../mods-available/chap../mods-available/date../mods-available/detail../mods-available/detail.log../mods-available/digest../mods-available/dynamic_clients../mods-available/eap../mods-available/echo../mods-available/exec../mods-available/expiration../mods-available/expr../mods-available/files../mods-available/linelog../mods-available/logintime../mods-available/mschap../mods-available/ntlm_auth../mods-available/pap../mods-available/passwd../mods-available/preprocess../mods-available/radutmp../mods-available/realm../mods-available/replicate../mods-available/soh../mods-available/sradutmp../mods-available/unix../mods-available/unpack../mods-available/utf8../sites-available/default../sites-available/inner-tunnelmods-config/files/authorizeservice  @rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdradiusdradiusdradiusdradiusdrootrootradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdradiusdradiusdradiusdradiusdfreeradius-server-3.0.21-150200.3.12.1.src.rpmconfig(freeradius-server)freeradiusfreeradius-serverfreeradius-server(ppc-64)radiusd @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@     /bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/perlconfig(freeradius-server)coreutilsfreeradius-server-libslibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libct.so.4()(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libfreeradius-dhcp.so()(64bit)libfreeradius-eap.so()(64bit)libfreeradius-radius.so()(64bit)libfreeradius-server.so()(64bit)libgdbm.so.4()(64bit)libmemcached.so.11()(64bit)libodbc.so.2()(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libssl.so.1.1(OPENSSL_1_1_1)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)opensslperlperlpwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd3.0.21-150200.3.12.13.0.215.26.13.0.4-14.6.0-14.0.4-14.0-15.2-1icradiusradiusd-cistronradiusd-livingston4.14.1ct`@_@_FN^y@^p^h^@\\v{\u*@[<[2*ZZWQYY@YlY, @XO@X@X*Xh@X.@W@WiV@V.Vf@UĝU@U@UU8U7@TZ@TTT~@T|X@adam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.dejcnengel@gmail.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.com- CVE-2022-41859.patch: fixes information leakage in EAP-PWD (bsc#1206204, CVE-2022-41859) - CVE-2022-41860.patch: fixes crash on unknown option in EAP-SIM (bsc#1206205, CVE-2022-41860) - CVE-2022-41861.patch: fixes crash on invalid abinary data (bsc#1206206, CVE-2022-41861)- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)- freeradius-server-radiusd-logrotate.patch: move logrotate options into specific parts for each log as "global" options will persist past and clobber global options in the main logrotate config (bsc#1180525)- freeradius-server-radiusd-logrotate.patch: fix permissions in logrotate global section (bsc#1170505, bsc#1174905)- update to 3.0.21 (jsc#SLE-11896) Feature Improvements * New stored procedure for allocating IPs with PostgreSQL Rates of 1500 IPs per second are now possible See raddb/mods-config/sql/ippool/postgresql/procedure.sql * Add SQL IP pool support for Microsoft SQL Server See raddb/mods-config/sql/ippool/mssql/ * Added RCNTEC dictionary. Closes #3168. * Added Pica8 dictionary. Closes #3179. * Add TLS-Client-Cert-Valid-Since attribute holding not Before date Patch from Boris Lytochkin. Fixes #3157. * Generate attributes containing unknown OIDs See raddb/sites-available/tls * Update the WiMAX dictionary. * Added ability to rlm_python(Python2) show a stacktrace from errors. #2979. * Add WiFi Alliance Policy OIDs. See raddb/certs/xpextensions * radmin now shows coa stats, too. * Sample schema extensions for summarizing data in SQL See mods-config/sql/main/*/process-radacct.sql * Update dictionary.aerohive, dictionary.fortinet, dictionary.arista and dictionary.erx. * Added VAS Experts dictionary. * Many updates to RPM and jenkins builds from Matthew Newton. * Added %C (time now in seconds) and %c (microsecond component of now) back-ported from the "master" branch. * Add reload capability to systemd unit file in Debian and RedHat. * Increase timestamp precision in postauth to maximum supported by each database and simplify (and make more consistent between drivers) the timestamps in SQL queries by using expansions. * Option to set dictionary path in raduat script. Bug Fixes * Various fixes found by PVS-Studio. * Set permissions of certificates in bootstrap shell script Fixes #3132. * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141. * Skip processing proxy reply if there are no home servers available. * Update SQLite IPPool queries. Fixes #3177 * rlm_sql_unixodbc fixes. Fixes #2822. * Fixes when building with LibreSSL. * Fix the rlm_python3 build. Note that this module is experimental. #3183. * The rlm_python should append the 'python_path' paths in 'sys.path'. It fixes the expected behavior to use the existing Python modules Fixes #3180. * Fix rlm_python to print the script errors properly. * Bound total query time for PostgreSQL. Fixes #3253. * Many fixes to Oracle sqlippool. It now does 500 IPs per second without any tuning. Fixes #3270. * Reference sqlippool by it's correct name. Fixes #3272. * Revert 3.0.20 patch which caused crashes on duplicate clients. * Update WiMAX-MSK attribute. Fixes #3280. * Fix crash when trying to access non-existant regex capture group. * Use timestamps (request or server) rather than SQL NOW() in accounting queries so that these are stable when replayed from a file buffer. - freeradius-python3_patches.patch: upstreamed- update to 3.0.20 (bsc#1146848) Feature Improvements * Added Force10 dictionary. * Update dictionary.hp with new attributes. #2690. * Update dictionary.aruba with new attributes. #2696. * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456) * Relax OpenSSL version checks, now that their API is both public, and stable. * Note that tls_min_version/tls_max_version also support "1.3" Since there is no standard yet for EAP with TLS 1.3, it will not work. * Added tripplite dictionary from #2760. * Switch to the async interface for rlm_sql_postgresql so that we can enforce query_timeout. * Added new LDAP option 'allow_dangling_group_ref'. * Updated documentation and functionality for EAP session caching See "cache" section of mods-available/eap. * Tighten systemd unit file security. Fixes #2637. * Disable TLS 1.0 and TLS 1.1 support in the default configuration We STRONGLY recommend doing this for all installations. * Add expansions for *outgoing* Radsec connections "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. Fixes #2839. * Add %{listen:tls} which returns "yes" or "no" for TLS or non-TLS connections. * Update dictionary.lancom with new attributes. #2847. * Added rlm_sql_mongo. See raddb/mods-available/sql. Note that this module is experimental. * Added more documentation in sites-available/robust-proxy-accounting. * sqlippool now re-allocates unexpired leases, to prevent IP pool exhaustion when clients perform multiple reauthentication attempts * Add support to radmin keep the history in ~/.radmin_history. * Add support for ENV and LD_PRELOAD in radiusd.conf. See the new ENV sub-section of radiusd.conf. * Update dictionary.aptilo. #3002. * Update dictionary.airespace. #3039. * Add sites-available/coa-relay, which makes CoA easier #3045. * Add example stored procedure for IP Pools in MySQL See mods-config/sql/ippool/mysql/procedure.sql * Update dictionary.dhcp dictionary with the recent hardware types. * Add experimental rlm_python3. This should largely work the same as rlm_python, which was Python2 only. * Add Dockerfiles for Debian10 and CentOS8. * Add RPM spec file compatibility for RHEL/CentOS 8. * Notes on certificate constraints. See raddb/certs/server.cnf. * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585. Bug Fixes * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627 * ERX-Acct-Request-Reason is "integer". Closes #2635. * Fix a slow memory leak in the file management code. * Try to fix file permissions if they get modified while the server is running * Fix slow memory leak with clients. * Fix request and connection timeouts in rlm_rest. * Fix systemd issues. * Fixes from clang analyzer. * Fix missing include for the dictionaries: alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn, audiocodes,avaya,bristol, columbia_university,freedhcp,garderos, infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus. * Fix internal sanity check when running with "-Xx". * Allow "inner-tunnel" virtual servers to work better with "accept" and "reject" policies. * Fix dictionary.huawei data types for Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address. * Framed-Interface-ID in postgresql/queries.conf is string, not inet Fixes #2817. * Fix rlm_cache to complain on unknown attributes in the "update" section of its configuration. * Add configure checks for -latomic. This helps on armel, mips and mipsel. Fixes #2828. * Add support to Oracle 19 and 18. Via #2857. * Add support for decoding tags in rlm_rest. Fixes #2848. * Use correct passwords when updating CRLs in raddb/certs/. * Properly separate "originate-coa" packets when accounting packets are read from the detail file reader. * Use the correct virtual server for pre/post-proxy. * radsqlrelay fixes backported from "master" branch * Fix DoS issues due to multithreaded BN_CTX access (bsc#1166847, CVE-2019-17185) - disable python2 for SLE15 and Factory - freeradius-server-enable-python3.patch: enable Python3 module - freeradius-python3_patches.patch: backport python3 fixes from upstream - freeradius-server-opensslversion.patch: updated- Enable memcached driver on SLE15- Add missing BuildRequire on samba-core-devel required for windbind support in rlm_mschap.- update to 3.0.19 (jira#SLE-5890) Feature improvements * Update dictionary.cisco * Update sqlippool to allow for stored procedures with PostgreSQL. This increases performance substantially. Patch from Nathan Ward. Fixes #2540. * Re-added "show client config" command to radmin. * Cleaned up mods-available/sql example so that it is easier to understand. * Added pfSense dictionary. Closes #2581 * Update dictionary.h3c Closes #2592 * Update elasticsearch/logstash config for v6.7.0. * EAP-PWD security fixes from Mathy Vanhoef. See http://freeradius.org/security/ (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664) Bug fixes * Update dynamic_client module and server core so that the functionality works. This has been broken since at least v2. * Fix crash in sqlippool due to escaping changes. Patch from Nathan Ward. Fixes #2532, #2533. * Fix systemd notify, watchdog and unit files. Fixes #2541, #2499. * Fix erroneous length check in EAP-FAST. * Update documentation to remove old "ignore_null" configuration. Fixes #2578. * Fix default POD port. Should be 3799. Fixes #2591 * Correctly encode vendor-specific "encrypted" attributes. Fixes #2600- reformat changelog mostly by wrapping lines - add missing bug numbers for security fixes- update to 3.0.18 * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss. * Do-Not-Respond policies can now be set in the "post-auth" section. * Encode / Decode ADSL Forum DHCP options. * Fix module ordering issues. e.g. when "sqlippool" needs "sql". See the "instantiate" section of radiusd.conf. * Add Big Switch dictionary. Fixes #2252. * Add sql_session_start policy (raddb/policy.d/accounting) This minimizes race conditions when using Simultaneous-Use (#2257). * For rlm_perl, all variables are now tainted by default. See raddb/mods-available/perl, and the "perl_flags" configuration item. This change should only affect people who are using variables in insecure ways. * Allow "sqlcounter" module to be listed in "post-auth". * Add support for IPv6 attributes in SQL. Fixes #2280 * The server is better at handling fail-over for outbound RadSec and TCP connections. Fixes #2284. * The server is now more aggressive about retrying failed outbound RadSec and TCP connections. Fixes #2284. * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list. * Add expansion for Radsec connections. "%{listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. * Add notes on running "ldapsearch" using the parameters from the LDAP module. * "ipaddr" attributes can now be cast to "integer" type attributes in an "update" section. * Move main thread queue to using atomic queues. This should help with contention in high load scenarios. * Add "recv_buff" setting to listeners. For more details, see sites-available/default. * The sqlippool module can now use attributes other than "Pool-Name" to assign IP pools. The "Pool-Name" attribute is still the default. * The "unpack" expansion can now unpack substrings. See mods-available/unpack for documentation and examples. * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE. * Allow for -LDAP-UserDN. See mods-available/ldap for more information. * Add sanitizing of control list for moonshot. Fixes #2318. * Update rlm_sql_mysql to be compatible with MySQL 8 Fixes https://bugs.launchpad.net/bugs/1795310. * Allow logging of only Access-Accept or Access-Reject messages See radiusd.conf, "auth_accept" and "auth_reject". * Removed Connect-Rate comparison. It was unused and broken. * Add dictionary.infinera. * Use OpenSSL HMAC functions instead of local ones. * Some SQL modules can now use "auto_escape" to escape unsafe strings See mods-config/sql/main/mysql/queries.conf. * Add wispr2date conversion in mods-available/date. * Implement dictionary-based handling in rlm_python. Fixes #2334 See mods-available/python for details. * Add support for SKIP LOCKED in sqlippool. This can improve performance by an order of magnitude or more. See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383 * Allow PSK and certificates at the same time Except for TLS 1.3 which does not support that. * Update docker scripts. Fixes #2306 Patch from Matthew Newton. * Add crypt xlat. * MySQL connections can now skip verifying the server certificate. Fixes #2481. See mods-available/sql. * Add better mechanism to detect MariaDB (Old MySQL). * Add RFC 7532 "bang path" support for realms Fixes #2492. * Update dictionary.ukerna documentation. Fixes #2493. * Add support for systemd service and watchdogs Fixes #2499. * Check for openss/rand.h, and allow building without OpenSSL engine. Patch from Eneas U de Queiroz Fixes #2517. * The default PosgtreSQL queries now use "ON CONFLICT" to better deal with issues. This requires PostgreSQL 9.5 or later. Please use a recent version of PostgreSQL, or edit the default queries to remove "ON CONFLICT". BUG FIXES * The session-state list is no longer cleaned in the inner-tunnel. This lets the outer Access-Reject section access session-state. * Fix typo in lock initialization for TLS sockets Found by Sergio NNX. * Add check for crash when home server down Fixes #2233. * Add username key for postauth table. * Better libpcap checks, when the header files or libraries are missing. Fixes #2245. * Allow building with old versions of OpenSSL Fixes #2247. * Allow non-FreeRADIUS State attributes to be used with the "session-state" list. i.e. State length != 16. * Be more aggressive about cleaning up zombie children when running in debug mode. * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries exporting LDAP API functions. * unlock files when asked to unlock them. * return error instead of asserting in map code. * Don't write 0 bytes to SSL. Fixes #2270. * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262. * Various dictionary cleanups and consistency checks Fixes #2281. * rlm_python has stronger thread locking to prevent reported issues. Performance may be affected. * Don't allow Message-Authenticator to overflow past the end of a large packet. * Fix crash in sqlippool when SQL server goes away Fixes #2300. * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303. * Fix crash with CoA packets/ Fixes #2304. * Fix crash in rlm_exec with CoA. Fixes #2328. * Print errors while parsing the log config, and don't quit when deprecated log settings are found. * Fix DHCP encoder xlat so that it can be used with a list of attributes. It previously only encoded the first member of the list, and now encodes all members. * The "expr" module now skips more whitespace. * Remove internal FreeRADIUS-Response-Delay attributes from attr_filter Access-Reject. * Don't send junk to redis when maximum args reached. * Small updates to IPv6 for accounting schema Fixes #2364. * Fix OpenDirectory integration in rlm_mschap. * Fix slow memory leak with dynamic clients. * Don't artificially truncate debug output for long strings. * Fix memory leak in EAP-PWD. * Fix crash in "hints" file with Fall-Through = yes. * Fix crash / timer issues with many CoA packets. * Fix attr_filter so that it does not treat vendor attributes of number 26 as Vendor-Specific. * Fix reconnect correctly in rlm_sql_mysql. * Fix rlm_cache to properly use Cache-TTL < 0 Fixes #2485. * Fix rare occurance of bad xlat expansion. * Check for rare race condition when a proxy reply arrives too late.- install license as %license instead of documentation- also fix ownership of /var/log/radius in systemd unit- update to 3.0.17 Feature Improvements * Add CURLOPT_CAINFO. Patch from Nicolas C #2167. * "stats home server" now supports "src IPADDR", to specify home server also by source IP. Fixes #2169. * Add Dockerfiles for a selection of common systems. * Increase number of permitted file descriptors, for systems with many home servers. * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs Patch from Isaac Boukris. Fixes #2205. * Update main READMEs. Patches from Matthew Newton. * Added dictionary.mimosa. Bug Fixes * Don't call post-proxy twice when proxying to a virtual server. Matthew Newton, #2161. * Use "raw" string value for shared secrets and dynamic clients It now parses strings with backslashes and "special characters" correctly. Fixes #2168. * Fix RuntimeDirectory for RedHat, from Alan Buxey. * Relax checks in 'if' parser from Isaac Bourkis. * Minor cleanups for %{debug_attr:&request} from Isaac Boukris. * Be more aggressive about cleaning up cached certificate attributes, due to deficiencies in OpenSSL. Reported by Nicolas Reich. * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall. * Fix double free in rlm_sql. Fixes #2180. * rlm_detail now writes empty Access-Accept packets. * rlm_python can now create tagged attributes. * Don't crash on duplicate realm + authhost / accthost * Allow partial certificate chain to trusted CA. Fixes #2162. * Treat SSL_read() returning zero as error. Fixes #2164. * detail writer now checks if the file was renamed or deleted. * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name. * RedHat Systemd updates. Fixes #2184. * Use correct API for State variable in rlm_securid. * Remove broken radclient option "-i". * Fix "users" file (and hints, etc). So that it does not get confused about entry ordering with multiple $INCLUDEs. * Fix rlm_sql to expand the un-escaped string, not the raw string. * Link default and inner-tunnel only if they exist. Fixes #2206. * Don't use both IP_PKTINFO and IP_SENDSRCADDR. * Always install signal handler for SIGINT (needed by Docker). * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs which are not self-signed will now be checked. * sqlippool now returns "fail" if it fails IP allocation. * Fix rlm_yubikey to look for correct attribute in replay attack check.- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. (bsc#1099802) * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes for issues found via fuzzing by Guido Vranken (bsc#1049086) https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682/bin/sh/bin/sh/bin/sh/bin/shfreeradiusnebbiolo 1670847415  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~     3.0.21-150200.3.12.13.0.213.0.21-150200.3.12.13.0.21-150200.3.12.13.0.21    !"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""#$$%%%%%%%%%%%%%%%%%%%%%%&&&&&&&&'()))radiusdradiusdraddbREADME.rstcertsMakefileREADMEbootstrapca.cnfclient.cnfinner-server.cnfpasswords.mkserver.cnfxpextensionsclients.confdictionaryexperimental.confhintshuntgroupsmods-availableREADME.rstabfab_psk_sqlalwaysattr_filtercachecache_eapchapcouchbasecountercuidatedetaildetail.example.comdetail.logdhcpdhcp_sqlippooldigestdynamic_clientseapechoetc_groupexecexpirationexprfilesidninner-eapippoollineloglogintimemac2ipmac2vlanmoonshot-targeted-idsmschapntlm_authopendirectoryotppampappasswdpreprocesspython3radutmprealmredisrediswhoreplicatesmbpasswdsmsotpsohsometimessqlsqlcountersqlippoolsradutmpunboundunixunpackutf8wimaxyubikeymods-configREADME.rstattr_filteraccess_challengeaccess_rejectaccounting_responsepost-proxypre-proxyfilesaccountingauthorizepre-proxypreprocesshintshuntgroupssqlcountercuiippoolippool-dhcpmysqlschema.sqlschema.sqlpostgresqlprocedure.sqlmainmoonshot-targeted-idsmysqlqueries.confschema.sqlpostgresqlqueries.confschema.sqlsqlitequeries.confschema.sqlunbounddefault.confmods-enabledalwaysattr_filtercache_eapchapdatedetaildetail.logdigestdynamic_clientseapechoexecexpirationexprfileslineloglogintimemschapntlm_authpappasswdpreprocessradutmprealmreplicatesohsradutmpunixunpackutf8panic.gdbpolicy.dabfab-traccountingcanonicalizationcontrolcuidebugdhcpeapfiltermoonshot-targeted-idsoperator-namerfc7542proxy.confradiusd.confsites-availableREADMEabfab-tlsabfab-tr-idpbuffered-sqlchallengechannel_bindingscheck-eap-tlscoacontrol-socketcopy-acct-to-home-serverdecoupled-accountingdefaultdhcpdhcp.relaydynamic-clientsexampleinner-tunneloriginate-coaproxy-inner-tunnelrobust-proxy-accountingsohstatustlsvirtual.example.comvmpssites-enableddefaultinner-tunneltemplates.conftrigger.confusersradiusdradiusd.serviceradiusd.conffreeradiusproto_dhcp.soproto_vmps.sorlm_always.sorlm_attr_filter.sorlm_cache.sorlm_cache_memcached.sorlm_cache_rbtree.sorlm_chap.sorlm_counter.sorlm_cram.sorlm_date.sorlm_detail.sorlm_dhcp.sorlm_digest.sorlm_dynamic_clients.sorlm_eap.sorlm_eap_fast.sorlm_eap_gtc.sorlm_eap_leap.sorlm_eap_md5.sorlm_eap_mschapv2.sorlm_eap_peap.sorlm_eap_pwd.sorlm_eap_sim.sorlm_eap_tls.sorlm_eap_ttls.sorlm_exec.sorlm_expiration.sorlm_expr.sorlm_files.sorlm_ippool.sorlm_linelog.sorlm_logintime.sorlm_mschap.sorlm_otp.sorlm_pam.sorlm_pap.sorlm_passwd.sorlm_preprocess.sorlm_radutmp.sorlm_realm.sorlm_replicate.sorlm_soh.sorlm_sometimes.sorlm_sql.sorlm_sql_freetds.sorlm_sql_null.sorlm_sql_unixodbc.sorlm_sqlcounter.sorlm_sqlippool.sorlm_test.sorlm_unix.sorlm_unpack.sorlm_utf8.sorlm_wimax.sorlm_yubikey.socheckradraddebugradiusdradminradrelayrcradiusdfreeradius-serverCREDITSChangeLogfreeradiusdictionarydictionary.3comdictionary.3gppdictionary.3gpp2dictionary.accdictionary.acmedictionary.actelisdictionary.adtrandictionary.aerohivedictionary.airespacedictionary.alcateldictionary.alcatel-lucent.aaadictionary.alcatel.esamdictionary.alcatel.srdictionary.alteondictionary.altigadictionary.alvariondictionary.alvarion.wimax.v2_2dictionary.apcdictionary.aptilodictionary.aptisdictionary.arbordictionary.aristadictionary.arubadictionary.ascenddictionary.ascend.illegaldictionary.asndictionary.audiocodesdictionary.avayadictionary.azairedictionary.baydictionary.bigswitchdictionary.bintecdictionary.bluecoatdictionary.boingodictionary.bristoldictionary.broadsoftdictionary.brocadedictionary.bskybdictionary.btdictionary.cablelabsdictionary.cabletrondictionary.camiantdictionary.checkpointdictionary.chillispotdictionary.ciscodictionary.cisco.asadictionary.cisco.bbsmdictionary.cisco.vpn3000dictionary.cisco.vpn5000dictionary.citrixdictionary.clavisterdictionary.cnergeedictionary.colubrisdictionary.columbia_universitydictionary.compatdictionary.compatibledictionary.cosinedictionary.dantedictionary.dellemcdictionary.dhcpdictionary.digiumdictionary.dlinkdictionary.dragonwavedictionary.efficientipdictionary.eltexdictionary.epygidictionary.equallogicdictionary.ericssondictionary.ericsson.abdictionary.ericsson.packet.core.networksdictionary.erxdictionary.extremedictionary.f5dictionary.fdxtendeddictionary.force10dictionary.fortinetdictionary.foundrydictionary.freedhcpdictionary.freeradiusdictionary.freeradius.internaldictionary.freeswitchdictionary.gandalfdictionary.garderosdictionary.gemtekdictionary.h3cdictionary.hillstonedictionary.hpdictionary.huaweidictionary.ianadictionary.ieadictionary.infineradictionary.infobloxdictionary.infonetdictionary.ipunpluggeddictionary.issannidictionary.itkdictionary.juniperdictionary.karlnetdictionary.kinetodictionary.lancomdictionary.lantronixdictionary.livingstondictionary.localwebdictionary.lucentdictionary.manzaradictionary.meinbergdictionary.merakidictionary.meritdictionary.merudictionary.microsemidictionary.microsoftdictionary.mikrotikdictionary.mimosadictionary.motoroladictionary.motorola.illegaldictionary.motorola.wimaxdictionary.navinidictionary.netdictionary.netscreendictionary.networkphysicsdictionary.nexansdictionary.nokiadictionary.nokia.conflictdictionary.nomadixdictionary.norteldictionary.ntuadictionary.openserdictionary.packeteerdictionary.paloaltodictionary.pattondictionary.perledictionary.pfsensedictionary.pica8dictionary.propeldictionary.prosoftdictionary.proximdictionary.purewavedictionary.quiconnectdictionary.quintumdictionary.rcntecdictionary.redcreekdictionary.rfc2865dictionary.rfc2866dictionary.rfc2867dictionary.rfc2868dictionary.rfc2869dictionary.rfc3162dictionary.rfc3576dictionary.rfc3580dictionary.rfc4072dictionary.rfc4372dictionary.rfc4603dictionary.rfc4675dictionary.rfc4679dictionary.rfc4818dictionary.rfc4849dictionary.rfc5090dictionary.rfc5176dictionary.rfc5447dictionary.rfc5580dictionary.rfc5607dictionary.rfc5904dictionary.rfc6519dictionary.rfc6572dictionary.rfc6677dictionary.rfc6911dictionary.rfc6929dictionary.rfc6930dictionary.rfc7055dictionary.rfc7155dictionary.rfc7268dictionary.rfc7499dictionary.rfc7930dictionary.rfc8045dictionary.rfc8559dictionary.riverbeddictionary.riverstonedictionary.roaringpenguindictionary.ruckusdictionary.ruggedcomdictionary.sangomadictionary.sgdictionary.shastadictionary.shivadictionary.siemensdictionary.slipstreamdictionary.sofawaredictionary.softbankdictionary.sonicwalldictionary.springtidedictionary.starentdictionary.starent.vsa1dictionary.surfnetdictionary.symboldictionary.t_systems_novadictionary.telebitdictionary.telkomdictionary.terenadictionary.trapezedictionary.travelpingdictionary.tripplitedictionary.troposdictionary.ukernadictionary.unixdictionary.usrdictionary.usr.illegaldictionary.utstarcomdictionary.valemountdictionary.vasexpertsdictionary.verizondictionary.versanetdictionary.vqpdictionary.walabidictionary.waveriderdictionary.wichorusdictionary.wifialliancedictionary.wimaxdictionary.wimax.alvariondictionary.wimax.wichorusdictionary.wisprdictionary.xediadictionary.xylandictionary.yubicodictionary.zeusdictionary.ztedictionary.zyxelfreeradius-serverCOPYRIGHTLICENSEcheckrad.5.gzclients.conf.5.gzdictionary.5.gzradiusd.conf.5.gzradrelay.conf.5.gzrlm_always.5.gzrlm_attr_filter.5.gzrlm_chap.5.gzrlm_counter.5.gzrlm_detail.5.gzrlm_digest.5.gzrlm_expr.5.gzrlm_files.5.gzrlm_idn.5.gzrlm_mschap.5.gzrlm_pap.5.gzrlm_passwd.5.gzrlm_realm.5.gzrlm_sql.5.gzrlm_unix.5.gzunlang.5.gzusers.5.gzradcrypt.8.gzraddebug.8.gzradiusd.8.gzradmin.8.gzradrelay.8.gzradsniff.8.gzradsqlrelay.8.gzrlm_ippool_tool.8.gzradiusdradiusradacctradius.logradutmp/etc/logrotate.d//etc/pam.d//etc//etc/raddb//etc/raddb/certs//etc/raddb/mods-available//etc/raddb/mods-config//etc/raddb/mods-config/attr_filter//etc/raddb/mods-config/files//etc/raddb/mods-config/preprocess//etc/raddb/mods-config/sql//etc/raddb/mods-config/sql/ippool-dhcp//etc/raddb/mods-config/sql/ippool-dhcp/mysql//etc/raddb/mods-config/sql/ippool-dhcp/sqlite//etc/raddb/mods-config/sql/ippool//etc/raddb/mods-config/sql/ippool/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids//etc/raddb/mods-config/sql/moonshot-targeted-ids/mysql//etc/raddb/mods-config/sql/moonshot-targeted-ids/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids/sqlite//etc/raddb/mods-config/unbound//etc/raddb/mods-enabled//etc/raddb/policy.d//etc/raddb/sites-available//etc/raddb/sites-enabled//run//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/freeradius//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/freeradius-server//usr/share//usr/share/freeradius//usr/share/licenses//usr/share/licenses/freeradius-server//usr/share/man/man5//usr/share/man/man8//var/lib//var/log//var/log/radius/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:27107/SUSE_SLE-15-SP2_Update/ea436a6cecae00bf250af9f8b03f03e5-freeradius-server.SUSE_SLE-15-SP2_Updatedrpmxz5ppc64le-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@?AABBBBBBBBBBBBBCBBBBBBBBBBBBBBBBDDASCII textdirectorymakefile script, ASCII textPOSIX shell script, ASCII text executableUTF-8 Unicode textELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ce50b10ef4406c3bd5a958dd7c863de389cb3469, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1bfd40fbddeefcc068f0b0bef2b6ae4c47cdef1c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5574a26dc24da255016501bf7ffaea905c1e7106, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2ab261c9f9649b4b88d558594b82c10ba78a65e1, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=091a6ba3b5acacedd167c44e5a890ec98b7b82fd, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8913e83f497b3cc6d49dd65279b2c8bd72b8d177, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1c82ee1724a8e10fac8a54735d066ade9c93d8b7, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e475b5409c0e3686b7d1f5e67e9287009f2ee354, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9c2e622d54028b2f7d0a0584ba845cec36709945, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ec7cbd419b370ba08064d7af6629829e718f5b9f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6d795cb169fd2e88adbbf0fbbd2dfeedfdac4aae, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ba8033ac67010fd710224e411d1e8c7909539519, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4d8f5075554395abafd5e89b209c4e25e7e16db2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=23b7ee99a92d20fe01c07f3ad171eb593a4bde2a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e05a301d9c3ebe3bbc6620aae09b5afbe37130f5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=50ac70097e53993a8b614389788328303d197c52, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b99e15af1e904c7bfe28b559fa295f0b518c1427, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a9b3d87d14c43673f9edaa69a3d2324c366e265b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=faa09798a440c4f0b795ea82b3598bc0f66ab087, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=594dc5abfdff8330e8db05d633a176e1a454eabf, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5f5e81180df9fccc2f17fdacf94ff204e5287d42, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7d65b3f88cbd3b70dcec81591306b6e34ed249ca, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e57884c4778b40692df0103468f4223a5aaf8e7a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a12bdfb914ea1dbf99f245abde4ebcea65cf2ccb, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6ace9d1d56970fffdb1a54b9aca478b5a04c03b1, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=fc647b8175b32261b770940f2131230c34f789e9, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2d0bd2e46d6c233598b0341d77f8c14aa40dc28e, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7bc2ca1836d427fdb08c6645340fefd3c437b1c8, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4242c7cb5786181618e015a44762c151cef162c5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=41075c27378439cd6e8b92968b67f622cdcb53b3, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=abbc43ae75cd75a68610826c97d17d4eae62695c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9dcd92a749353cebc7fa5d1d023e0fad42876cb6, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e218acc96e5bf4797aa3726597a8a70e10bc51c2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b11ad56d0ac5459e3227e6648abdc5aead3ddbd9, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5692148ba53e2ec091350473e9d694107516aead, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1d4009366ef2f00e61f9359744eb6b91b5aedcdb, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4fe396b7812f78d878bbc2d7e900ecf440b856a9, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=523d57fba7e28f01a4d0a42892ead0e3eb01a8d7, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=65cecfaf9b099cbc64ecb52b4ecb5ac562dceb6c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b5697aaed7f286934a382359ad3e5ebce24d582d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b5ca0424209e2bf76ba6240d60651f88e8e53d2f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2f8ca2585f49bc96d19718835b6434fe58ecc3ea, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=68f4cd2e041f480a469bb5b62c9c07b1dd34828f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0b087167286755ff08b8fdb1a208307765301e89, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8ec7ec8ad7804471df77314777a113bd17b8a495, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=056a1d351be5117e2490eb6e964a02af44101241, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f546cc7c536025e7ce257616f1bf2a880e05efb9, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e02f3e336534bb8cca974343d1578a13189e6b05, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=396de635f9f57cd4e3d227b9529930e2ad1e5559, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1c51f9d91310d75d370d0b87c307b34e3669b4a2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ca5c531101842bb992448fdc5d8d1015788bab37, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1c3c875cb51908685aac64fd40bda7b338b1f09d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e7e8f10d3763cbd8f0d64f215cae2d642dd21afc, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0394ce46bae45b29a6adbf4ebf7461dda81785f1, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=230b7204695150e68ecd53c31f372fa3ad806f4d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=42ce58d1148a6a1dd7214ebf638504411e55f318, strippedPerl script text executableELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=ccb0bf5f4870ccb544039c4a1906dda5a9b345ac, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=8391fcf0af076f8240b8acff883c66a1364c8751, for GNU/Linux 3.10.0, strippedAlgol 68 source, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)empty !#%(*,/2468:=@CFIKMOQTVX]eikmoqsuwy{~RR RR R R R R R R R!RR R RRR R RR R!RR R RR R R R RR R R R R R R R RR R R R R R RR R RR R R R R R R R R R RR R RR R RR R RR R RR R R R R R R R R R RR R R R R R$R#R R"R R!R RRR R RR RR RR R R R R R R R R R R R R R R R R R R R RR R R R RR R R R R R R R R R R R R R RR R R R RRRR RRRRR!R RRR RR RRR R R!RR RRR RR RR RRRRR!R RRR RR RRR R rs3\awlogrotateutf-83dd3290b17766bc00c7b4b2c7c35a12f2de74b1a0bac2c4fda1c8675815d7579?7zXZ !t/M!]"k%܍{ȳ>C9%7, [¶}hɕ!*Aͬ2:m*A1༊ZУJui4 A[b˜9qӟ#P+X1*~&Q0v̙SO]%0n38H׬f/]|֑߳x0'W.3fb&Kcά834S@e %}^n{- Y>͗NH@m^1r;F2oUJςj \+vhaܴctg8Z9yk4,'S#BG>1yB/90h(]끄)VM~keL龂ی*]usA vUF|AO!GL_YmQ X*o{$?Tњ@yQ`J5׌Q}w˗wI =#rzqcrV \#,< /|BH ƀt(`ލ #23Z-jP뉡o3-WZ̀KQrNJ>>ǰz17'm;N(iA=ħ,JAO)Vɦ媍3XtxJchK.I7$K0nHRbWf[txZCs>7>ü: rɶ/ fICmWz>{;,66nj?=Is2|CޠR߻|2)m]Ys (+X$d~'ؙ<Vk45ޮwMƴiZ`CJĩ6˲23 i_.0)W7 xp i,D PO}XآfQ%2%XUch%s 13Am뉧\8%%fӛ?h$5ض-F#t=d)G7nƩ 4NqaiYVV#-N$w,65qOG@Ze9焄 L\ⶇe<+xwb-Q`UV#c;tՕ+eUz_dF`Ppih]/%AUja[eodrؙ&JOaQxO2u]Em(LE\g~I)a +;cܘ^}]}c'{*^>/NB'dlnc%ՎFaIRY?8nTN~^;A,MNQ[j*ϙڌ.kN-Z~E8~ƀyNQ>U&@秇b_CLA sl(id ;]\RF5 + G m4O;sS"]B)=jmuiN{VqJWarOrUfdckq&!(ܯޜSa\fK)J$J%q pٍڄ:47 >'A+ 2DD5>9_IwL̇أdq92iP* dy{s21śuGPޖl?|S&Jb : \6D&4 {jA #ƈ_ADr>7*+mȯ,j`3sgn(@KTs @yfl!8;(!2dMΪ$/Y`x8 D8:8U# Eq4ܙ>9wV(Y=1R2DcNTqnA$ǹ֧Ԝ˜NqioJe|85`Qy!9b7Α]rDɝHV7<>) evPU@p:?؁{:9:%=fïX_ Xyl#W>Oht䁢4sKI~nC5%W1[J2nC۬, GmvcJ̃.`bqXL?S牌qKPlT>! ^ <Z>sPQ2T. cmlQXBoh$#9@fC!m&$8?BT1!}w~ f+:Ҫ%x_yql/j>VaQ͠u%u弄mzVgAѺwVugٗ kH"lW%jj;B}`?/ /xEm=ֆ1HiI :ŗRySYXM;SrI޹o}f8DsQ'ɗط4[jĽ;KLP0ݭ+Xkt%ABҋiޗ,=i>& %S|O:4߭_ؓ7Rv/Y2>1u:?*@۾wo!~|!XSۗK4L ,FemC&cuH0!th1A=8/JL(ܨq3)ոGZϦF1H}Xs`=R 9r`\lS3IQVߪ96MBʭn|oYhFzvd #MgAuu/"ǡbJG!3@YW#Ca@g ̂}8{-}%))l;,:?nƔ" G\]+%(^;oMɷJǠ(˥`S>:_]kl|脳9(ˊqaHs)^jLi͍x \ M D2)|`freQ3i N7sՂZX苯wX_۫` jviX3A7R˥hH~9v_ mݡGa_+X gaJBMrB!cr f^nɎ -O|HC`IJ*a|]85ӧll0"-x BK4$+rqBV%s[̴4f/?ݶsw e;E&gGZ5 t ݕ3?= 0#JC^] $w+}(Ȑqwd 0K=4 ک ljg @L*P 0){,Q3RFN9 Nqcq3c+78I2F*e%7!xy>'#FkҺ)Y6gAXX[&"Fw?Umjj<򺭖 wmQ_ ї6Jh a53aeAdM_%SIT1̩q bWyM.W gژո›ߎ"ANW7 Z]za =F,֜R6X?=;v->L2$% qebjw.J%n"?iߨ,YOӪYF/[z\M|:wJVPlI]Q?y9|dTޯͶ|UdB-0 NyDnj.QwL0VekX1V^Ƈ ;^e?@>)|*+g o?IF + a2zR6A;f wRh DC.n~՚ugȹ,KH)qcz=A񨭛ZeBrsYlLpTbW˝- WFl}r q>7_TI? "9%&-W?52gU-je򝫾MX #9&:LJ ۹W̊8lBvnjb]cX*\"5 sЄU9ɘS:izX$2\:ꡮWH=yYxGA/`o |.nk挡E2,=Zu#0@YT xZPaIf.n&|vTM?0+萓O\7~w uO0 Vg p?(;t+D,;L59[1{(LSBfp qf,MA/!7l)kEAp õLcvIFjۗ`ߑ<_8m MN_ a HEDXU>&{|Kpk{O^/dTPk ߂ka̕S)a .g:H?m=|0 Cbq5t`))Vk)Տ;5%9;c?)` Tti# Wל@Df|@n<*(5m~FDr%w %ç5#xC.0ikLKy`U*,e HGB@"=>`P)6)I2)}+yU3? o^I'q%OԝoT.Mo ^iHF1SvJ:gX7fK<Ʈor0fΟ݇fv|ZټJ]R~ ܯԬͬE_fǼ2$ (Aٷ#ms۷QyM`l Է^] J)58@&m&6%U~EiC0"Mf^kSܥ2~u zб[$ZQvaIiBN?d@?o $  C5OjhC$2Mj#z2Nnd*̓ -jz.!/:|H6*Yvj6}> uUKi&k/;O= 5aBq? [Ά )ĢT"v'Zk)39N*>=lX{Gr<ɴmqKȬ% ) tV^bVW` 9ӺήBJ\`bҁ(";nݻV=Ǵwv4^' Ou ~FTyVG_Yq8Qd>d(╯6'KW6L&ݬ$>.!t2\Çbjy&ZwNs"G^8MMJ-وM+h_K}&Y (caO/P(fK_bٜ,b1QF'?R^ ΐ\R ՙaz&wƘ/U"f2kx6VfTA5E0WԻPb d$ȃ8v @@qKfl"(yq{q7ɫ2RY222Ђ8 ɴ=kGLsCCMw~cc­)micO==T͋ݥV5'W`nOzjSR_Z* ,XdHvN$%-ϧz4y`yŗ?ȹPP9-3ՃokJWgi 7l~܀_$Gc w3=fȺ"u,@>j:4}5jYDrKGEceVC=E,y;5]-|:JjudW5p?+_ؤ:G*ɓk 3a |#D8ԉjc KwN1`USBtA76k=Fڝ|F;v`̪M6'^ۇƚ/Șx~h?PAԹclm wXSeJUwma2wdp+u }U9k] ":fEٌey7@dt#&TzYFazP_n/ST)V5gW83Oa&Os@-4@2ʇoڪC@'^Tg荪F?)27a]e!ʱnRzZ0V{_iRm:(FAinDy?a3Nd،^d zmO罾=r5}Zۗ=2YAJ/J76r\\eO -]!D9K\MO IMbtz4+8ĎZ( .jP4ҝE%B$jimܐ?h&_u6VI6Y48ԖcV_C~Q˔=IDzTn!=\֨rʩ3:1&~SrwxIP݃pv=ŊtP=j$!] jbqX̴S.ХP#{ن}&6G7N{HG+x_n -8d(Yޖݪs]Wx*neJ椱yy4ڮPy  5֝H(8`!%_fr>fM[hJIwяS&pD5lwtܬOOhG]`Wr"ԳAkm}@ݓ$iu0wkh +q?$Iz627cQXn"\1Lt;|nylWx$9B \$0=?y: ZUY6pK/.V[%=m1H%ɩZ|@gAkjO9me!C`5#3w:nQvbgϞ,`x[XAr]y0LJ~\A.)?FAmlU9]>,|\N`EnL1+$4BD ukӔuv2Osf&/qV>.+0I\\s띃oǬ0h'% Frs4 i51 n D F Zz v}\[_΋a8r c䀏(RvX8)|?'#j#=c_5rK~{uE?HDL O'3WtȐ-R*: Oz7E^whv:-]xdycZd tl?od쒃V'Ma%z :cBpWw{mVN1 ['hdoΖ@csDrX-; 5A9.,CT(S | *HPHqi*)du pjGc T,/~U XZTx!?Fl}tq]vq;eo##sf$6"?fWMrHEcB|000KlS,K/ժi>abҧi̸9R#قg) DsܚЭW?d`7GA3TxJ87#$y3A~(<٧ZfAV2h8ʌƵRWmd]xM ZP_{E Ѹ*i;KYRt:pjJ;P[L]"\LKk8]DۃǂvX@!HpVU˜ƙ͐B wjQ'PpBiPe~\k(0gonuQXp%'=Xv]-Nr"97RAkP;#X5]~"<XXNgw5H|G *v/zK26BCF#˒E== =3$Y9:z~:R>Wu|ؚxr;t/5EWdCM3iз#At Ǒ EܗJ@0`0G!7fT/ "ĦȴVS<<G2[K*~<҉[N;3[hSlbL!Av@pΩ$.|h hߟ~i ^q;hyŌ)C<3Ÿ,v@ HάѨɽQ;YIGNt%&¿{R@$wמ&{-3=m>[|2%Wlpr&Qr aqKf*H(|y-9\آOZN\#6x 3}}| &zX|Uޘ@"l*3t'j&Ʊ2Ιmj\9TgaJ%§ ]ŨM6]yq%z]Erܘ$] 5 ߽|f{21KAQ[. `f[]4[Mm> faH$0!$Ki *tt[6agL]:F`ߍcu jjXDhta6bLd% XP*ր6}{@jfdsrmhÁ'8 KjMim:!]MWlr# dű/Jh?ڥr0^}* l^ma9%*42.vkr'#bq~QX∄_,~m%~a0̶CD@- E./;*INsIbؔa,Sp]MnKJt$  x0&qF(ܕIyB䧾sq͵ov0_E&N-xmc@Y;9CW€?&jn[Av3?Eat&B[{lokD3;1fBKZT4l*w-dj_KЌãZ}@ HaP8\?N^p9rPsU˩/ PqUSImɹ-?~|Xwi3Էp`PS0#Z-]NDm k(u8B-[2O%qZ_"rUUP2L,&忸FpXv^wyq6Bd k=3 z*68,_U{ZSJ+2Q,-tsg%5?t{G"`:&?>S26Ϧ>+{v+! _{@sRc/5w V;Z%VЬ7oЎXs}iصRϳɛ=|.'Y]fISHO䷔Yz Q _@xV2c>VeH`ABmM3Rh}QO|:N Kn33`Ű#7R/F/H}ހG{|dF OL:XpFGOlXo*,eq#`YI&H:**5L_"UH@_[ Y5jůr%F*|0>vܫ^1߶{t.usjA^ f8Nc]mszL}dS c成>jl='>*[޹tx͵6) fpueF7f[3HBwѼL*[ vN3X4AN!8XV;фH쯩VB?j(bUe/ҺEDoYڡNL^uRMR3t#+12>!¡Vvm˧7_2OnM'.22ЂPVi /-WdNHoTYK SjP_|ou^?dzcvNz1Ģ)X5EaF؏!,7ߔ'r.bøUAU'AsX]t-ՕL:l'R..T?}yv:;+x6awU#J<2e4OY\_z(΢&PL;Ӟ#Bgܻ|FBTt^b0-](\xcHXm0˭u{?T؎rs(*5hsn|XW dO2SEo`$A4Nh4n#5{Ai!UXa5r=`Pn^ֱd`M<OY9tU.0tkk.\}[_rЈlEI*UXkFy )6˥NTsvJnV27p?AH58KpC!L=-aMۿ}hje$IE/`_ȶ- ߒ 0,ƧB4fi_$@纈yvQqyn@I-hcp+?0Y.kBn욯Ø&+^mqpr9[|v![7}^",Vk(h7MW&Yun=ɲRX\m3E교LPwgAuݖ^0" g[(I~IclGJוYۤTpb'MKk=i,^1!&\0ظK:=۝ĂE*"iܢ̦&T'ʡsܐ!зpa6}7;׺PjYxGOoם P5KB)_N2<ИӚHvv} ,N;ciExÒ8XiW9U־ц,;rh{_ PJiMdr /Cpo V3SE*B6LUM˥fS+uh;im7#Pw c;mDCVț+-ݏkY]Yn!99lL6_'Ҕ fh~/l6m6HmCܮLK27 ƱHّ*`+ ZvoU?},cvq;{,b!no-ʹpB:IE `(JbtӰa= mTn?AL9yka#L@/ڵLZ%HUd+my7J& 㰓a" `0pOym# ? 0BaBљֹ :}ޜ3gqz#c" Gfu'gu8 u@I D[,lM)t3x* S[$.|#EuQ_ڷVIxfFC~fuKS^+ 
A'#;twb^H OOiiY*KGIv ]Rgzgp8T"T/ mDk %(91rӓ,j#eq6ϒ13`f3p$\*Nj"yiȩ+_z@EtJL ~㟅(Q ŰLb_*7H0jj\ UdYA^Ղ'ȅtc֩`r#4ݐCd~9H-wțUr8*1R|Oy?ғRctә,`XT3 M?]V S'0cSez"W5K`7J`@CyqsU D{CJ}0JVXcMu#.kx^I5sň6>]BE8Z ̑hnjȋFfn˪iV'Aq#E;ZGY;jjE /K5Onր=]> wCt18e -Oi%$c~(=4RYy>#cE$ Wr: ' |6W7Y0rli/1e.iEǑAufcrԍE bDEXX:G~ hс (Qh'`ӌP'[B ) gE!F\Lc}z7c~`cq3TõsZwhdペE@FY&[V DYnBluؠ/ڼI=8L=9G=!\m(8{-(pifP2n ԜC8i,<TiK iiUyblnѬaR2yM_~}^jrhzzжBv)J砮2g0g )K0,%IB8u#5 h m״E.릐V5Pn-XϨ.jci٧6 o׹fɻi]jdƨL"."͘I'R8֯i]kTtSGsʍg+S8NZ#BO[-ZY`-BqxlVεSH"!}XAK]t3KuNt) XI"&66VǨZ9Z5 ,n0/T66P}oAg7QU{ +j]OqfIJVKOZBX3vzeoMYtb]`*T!moG}+[d+M.aPlj8p3&g~L.ʦ.C!? a7JedDҰL9z^Jm GxYB-2S_WsaH#|l(*'q;z:%Ohb+ߵ 6X- }@H1Ʌxb]!Y-^ǣթ#)Hr~H"{pF2'1CJ,ȳ'oY C\Cڰ^C>ld (E CN^&F ݗr)nc jǗh+s:-LS;zFU?^yTnN٨?ޔLE+#zPJ*ۆFY=9K/V6bjq)gVfƧw鶳Wq/qWM`+҃5z֥m⓷wWT۝w>%8xR ^s^;|[,\W!„TGe-w7.e#K[WA( L(,N(5{Y-IF"vT) ߥVG7qFK@bHֻ=:uqE)ڒQh"+<& [BLr^K\ ݗ\k{-&?i2Lx!q6kqVH@Q2W-y-n/;쇨 3Gpda{ٛ dIB,iH xP;ϵG9_>ݧO ݿ:Ab͉X5^^3e.;mqtң<,{5 :p݇&yXCZYk,շ=$ote=RXgԳ|rII½ nЎ]ގZ휱' /Wg kgS̚X%ڗ@x4/t0_΅zNhRy; 70s?EcGV_w5|+@n1u B( sӠ8{8pcg343e2mP}7M{(hy1k)@-nc,;nNHB)bQ(7fÌw<j!AKץATr:,bؼjj4VgM>\} =-:)&"?$B+bz{Wwr5aUʖ]HCcP>,)ll2ٰϤ\ "^kgtfhm?]b !Wb\F(#!yU"EI[t Xzܳ[6{,Go1JSt -O!hyQaL kr8>k $.d\|@PqO;r#IH8"EhM->HtQ 1ʟBu߈y&gP$B).Sfȹu {ishA\Dꓙۃ}(刌ty.FJ$|w=L) " Aӣ+T~sDw,kBۉH`;Ja,< 74uq d8 湷aR:df9A6>;얀?J:3,E-Dw/4=WQ"(ynYbyp# x؋)yj!rG5+]C}h^^?a"|;pP6S<%ZY GxP!xdmWK~2,zm{n6u(/[/z6"=iz1*`ch`^vtQ)y h|㿙$ߊ1FrrSgج^級8//73T\%Cssw4ds b8IJj^j ja}*1࣭u$G >ߊ%x,īվ[hPtچi*l]%CL)h.ТWQ2M^P9@~ ]k nHi=~-OHz_ka>x8b%ӭ0 >AGmB}/&|ndGө.MB'lA;SG< 3)HgՑt8zQZ/5Ym2 p3'{Ā2fؓ?ǘ.М^?rn?qא`az< Y:|>hOϭ{#E+@s2C^G}iƙQiDl¶"XsAML8's!DX"%-Vvt%"esҺyT@ַ%%'Y)_3 Ba1ȤٳVif{H=2|DTԏElt`Y2ɍ9("_Z!.}+ r)ӵ4_9@6`nׁeK^גxa`x>.!&Zu\%GX@ʴI|ӵ|$y ϧ6Aʖy1ON?I3xLU?S ;pqT,@l"hFeQ(tH=AXQLA#'LQ쿃v^Vhxqu' K5ȑǻs͜xL -0lŐ–|dC_;By!Ľ[l潑-zkz'A582d~*̶U@- %b[ٲ<`HwI0`A}n0Hi t@{lE@,jŠfઊ?ȋI?SfO2a46hp.쒷~zw:麥^D~lv sVpGh63!rE:* 'aX+ٵϽ.\5Z*-ܹeq/QI%TQaJSIEsOM `\xFRɨǼ_C " 7jūtQ-YV>Z K Z8j0T"ICAɓ~G댏_plEkvKQmI>1wqÏrfja5j">YQ4ǥ>6-!łD*[IxLUf?YYG3J V@@ 1aW{(0a"Hg-b[|^ M7 jlmգH'gusѠmGy1C{[nK3s YZvS4iP?G<Ք_]# ">뵒$=8gWQ=x&p˛ʼ3pn5# HtK0pShkSI%rۙ 7n yĎHA)/7M=87Uʍ6ྔUȾv$Yg;q"|li%+zWfēͅOChӚf2C?w5 `<9{XĤȐ]w΁K.ȇ΍[tȻ#[J(8L}q|f }~ w%rS1nw*ЕYO,5@T֤"]YԒ. - 75c25HBp[_0 @p=f۷Fn+[dfc&> ̶G[* kd -z|) ;HIpXWxLT;ƐD7m>LMu:`FLSvZ;LLh- <P Is~zR@K3<9T0)ЍbZ5C}6W%.KoA WVU'%V~PAnUғ-W10=a`WOdW\E'N\:{u,8>C.,G7u)^ɛymh "ټ AԱ"-7T{D2E%(uM q}o]E[$FQ$ <đ0OS^>_$Ҽ#/;/2hUghPn thz31luKso3Fxh _[3–(>0m>Ӧ^k!GUw4d)J}Q/S!7n"!<d|i\(v/*/]hPJ< lbf}meCQPpL,W/PЯCIUFw˲gNH&zyi*ƾf?f=~/*OP M8UNK &N /񂣡\SJM%}#oPޮ EÌji$7 "\uF!;.<h6fۣuh ߆( ^M+ZQ"u6gLVHdp,2OT|0̟K((i8VH>UB93Mأr`̆.`%CSf diMfN-կ]3th F1S_{Mc _%5ZyRZ*uyۙ9Z-%pH0%d}/19D:#U踈_Un_J(ɓ -RFD4y]\M\±{L]:fDu"[ArLx(:BrgX N_j[Y=Rf : YOj(O^e(Lm*\K+uFܴ#0#-'H9[ڊ?O.Mٸ1CnԐ?u/t&m"̰Hb]{UU)Fj,4[bKҠ{7?݃RqNZw/tʗoB?]`1 f&~Tafu2),7ŒEsTMWot*`]ixbEڴx4_AHbv nj8 CzRyZń`_x!쓞۔5D.Y[@RK4 J;>9?ЂgS MCQ&V=_ƼZK9Z( V}oY_X xRTf.3Hx6нW;9| Ud9~,\܏vxr'%>vq&|[oI&Y;UndnHʣm'-f2H$FojřR^Lh?Q?^-&ZƬe q#\\k* ~-2zuppp@nxa5PY&[F|ET)Hg3i|iKVYntB*Rd*#[8uum}3= ^}ÛaMI8Bzr>/\Q9uoJl P* ƴ(v/EduNzlv@kun]y7I˞al5=$a -HdDaK.tfg8IiPCIRo4oARY&M4@]]O6w"G/ ]eG)QӘr=ؔ4.*5f#Z)cЏTzh^*15ccVJ:äx 9SwfDŽF/t^WNwҁk_׌f:#QB+),Xړo 9\^Gʄ ❎z5dXхmIUTj~GU}|ڿ$ˇQSIJ%¸B'!`8Rـ=+?XIi$ I-^U&UNC{0q /5GMmz"Pnj"YD`ZĵMU&yNQg<w;.}B1w.t^DNrJ~.nǏSoG/T1ij5YT^o5k'/Tծ!W^5%=ɸ2% ho.]%LC NŶ(_o}t&N_fma.+/:(w=IImI;rF?}.j.Z6[CJ!b')H@ӵ$o@jRgQ@ڠ7`=6Jh[Onoc[#zrƛOgbY=$dE&15D;3:9炝4A?4ſDKLa`듀qŌɹX:XMf%X)%G/yLpHJ7 dKeYL2ۈk ct{q`z쑮;jO41Հk.W;]Vk͉ؓ{yFj[/r&eӞ x{-,MKj#ra5b>VՀ|Hŧ+ 9@>Svv ot~٭J&t t }<o?;q$ݏ krb_am1h-@ӆoWGc`|=ɢu_Gfve"o&rvQc1wSO|<8,cOka+|/2r_wƊ8&TuCIbshHV_pL2˵7;5l,`o>U#P<d+qTd|4,+V5*ؠr}oe_`246( = L+x݅J[@u=~1߫e9a&[8^xtؽ"f2OGPIO[o#":w=C8sϙ ;D@E vV4jw>ID.SK ѽ"c6VG"0eXCR 9up@qLN]/PJZgtl|y'MjQэsTN.ْA{?5pMt?J3TҰA0f$S/7y̘G}—uzM!#u:(6g&”֕x]Y/t(D'B=E|SYȮZ"+τ&x740mQOtxE2 u5[8mYi<-Z&% @dJO*D1HH..?:~\}>Ow.K ؂{ ߹Vq2|M``3Y#k`FV9d .D?]Bf۴q5ekʆ k5Epg[:i"vاѯpbV/g~`jE$} jc Tf bmuH<,o"|za5+U]MEMmMhsm_$L$э ;L/<";_:tZ0ř&GCbxz==s9~RwCSLeh&ĭH'P;.4iDM m[G\*@*KfTVY$Ew}X8~^x_\2'uy]RghUZȜ@gOc=ޱM:D},WcJmKRlL6n<v;t[RK-El6|~؟|雊o>J-|;b.ˇ"[_PٞT(DHKpOSāʡu h˾ˤVrܫ@褛vstK.tz|thܟ&jTս}4KH:eSWsÏPC<'H3f #@NG^Oi>j?K1fTUD%(&>{iDV1 Fs ,dj۴04U$EڸM4X>( 84ӛCn"gDoo Q\լ ;Hdf,oXɟc:9vbҦkVB%Jpz # 6#;~ATIYt-Ht{o>1^r=-۬/"\2}K=[sSQ]ʽwcu Tz+0^S6CѤTA*9LdS,JҝMYzPҜ5R ԋw)rw+:3McZh+@ ZEFu$ЬnklLnkhXZ4иyKqh hwqzT7GHhxhx(UKp|1><ZcOXY {lNTnS_5.gՃ4N41B W#Ý"}cxL'ok~$+EJEKCH2V-|<$ += BeN@jgX-WR& avpg]|hΘӉ]=<=/+wki&{M$[+U5z SƤ8 sMG/ m0D ivw; s VB7իxfW29`Z*̫Q)3W׷l R3eVdNL¤M!K!X=gs#活H q06fۖ#FֺC34 ݢU_׀S/BÕ< o-o H<j}_zW++EZ9AE<^ qbx}n/% 5w9wf1u餒.䅱Dݚ Q>5r/Waq q;)´Q_-w-9I(!|G Qi;{V`i3<$Q I$%ij)7yJoA- yi>60J| ")a~cA7Ts{Z㑑'43z 4yU򯘍')@ >5dzQ=V.45R\Vmy|uc5 ˬE|h<8 VLxEc*3cjU㱎!$\ZWBn֧xA}3vSN>,Pn(4aw̚0Š#ur" NGa~tږhA8=`5LqV F {?65\&``:dS.(hMT={\5J*mpLj$4X皒i6.kC+QDkH1CMG,کDm=Qq(Z x 2C H - XSbHQz=ţ\7,ZNt~o~!?:Of uV$oUg 卟Y/!M@@$*qlq>U( h1&C]Hȷ(=sN+ f:lzV4[XD7Q=7>zwgd5b']b`\7j5SgV1Q&= uw~B PVT*)"m w~'oOFDSB6i׷3ԯ15`>2FuScKh=8|Z h(fy[XuU-v4ǙM&)TɬXX̱o(TjJP|.4Kay#k'ɠ2+5:3$GEU0rhE&mHkQ6[TJ"ߣw"<}k.qB>=M =e7Zw:pe0\ԾM"giї,~CtqBNᯆ6 q\e|_p?A֧n3kQT6hmY\u TIdRgRwh7g g݅`¢kiaaϋ\:rry*-Paj\RpX"_BV\w% I}D?TKYF*q5Hӿط2;gP=SA9']/d5KrK!v7!p`*N%J~݀)o )Mˁ[kf]leyy5Z]=_LwaJ8꟩^};SⱮ6qBX5̅@p.aۂuV@u3SJ-`=D/[0Rh7-=IW]Uͯ'NZ%)^1|rySD=K{1%Tzi+v@Tch@J`u&CcuVMVNi1]Pk/>mNfd?؀4֖߾Ã2ʥB#~R7 @c1HBp`>6O =WpT+93dtږϥ RPojRaEӁ].]5>* 鑧ʝm*=P oruCȐv*1~q\b#8Z hs-A'0BC1T;IgeSU4XmsLVќbw8aqx9} Ru3lHb~IJoEҨAͳn\S`94k:&$pe1/LR5˒S(}=#Kʰ uW tK]罤M jD+ (9|M5m8P/OBi7~/Mk |4k]k߯4JtS(V8{)d1ͪo/B a||G%j#Ѡe-k8+0|Lh l*}ʩIBA;5tkp#zPۢl2,l-щF3I!<͔~j H~Rޕ]O[%YLR].-yx/L_npﻆ=e(t󸷹|uauvI4 3$]PWduWÛIAGOq5.X~1eCn(>+NUTvD<|`oFN8R@`H+8`ԭcd#A?$?fWcqs4#:kH2KG@#g6!4F ð9(dtvP V&3ԋ6qIoX"Jwa9,ΜU$-,Bծ=b ħ"$N W *c C :(&6|Sw<ۘǠ~Շ)%=@dx!ơ6b <EA*?S9ݺ2+ݎqZDe(^&C2yD]k!}*oiZD^b< v{Ն_oYVLPrFa{mEgNeGg2)l!gkٱBw!PD84U'b]/"#~ OoT~OÒmL 8߼e@`.ԌIj78JzEq=7CܷS$(=|^)`=lžm%Zm~)'Yrrc<^L\ᥪM[_MG\)"ƕP*L8k_b-q@bjǧ R`ב1mI**0'SxŸ]5-f˃ЌHȹ'gE3졾6Tb P#f*RsB5,]=wXQ!Xӽ/_i@ i ;./n]m 9g~ܩt_T7M:?АnF-u'g ;xqg(m~MU (锒5wĸ#.^5|}+jv U{{GAFf§rʐ$<\PDϤ,yٝ:̜B2~-1'U KE~ }bsVQDgHpM@׎:GfVfkiMobl%{ '(.-5\o+i#04z3JB]# 5웉VK n iylQuZ:"DRd5Gޕ&|1"!\3P N،^FbY$3X|zaql11ӽ? %2Z&xYο" R50踌Q2co7HdkI>:`~rw6ohVJa;;JG` al@n8}J*_3d&[!Xj,DwB 2Wk-iNC`$ll~WZI⎰$TRm!c%t~~TJdhԗU4#f(dU܊cnރgby8Or$d WUm=i%Zyz;r<ɕb|"L;t?q.a^*BGNp*:/5$Sg9/͝3v֐}-YLL;8}VҧECDM\ƳtkTuP֎ՠJ>kTi%M4hLht߂eFͳDCN Uigs&j Y' E%2a2R*(/i,d̐:l3^=XԁȐhǚ22*0țx le)HZ&[~ ;\@j*mqsM3Q "GGM |+I8@ff իT6 8ޒ,#"[fNRvǏ!, H/$y*#ōo_%tA0-Hha @=?ڥPtJH~~PKwni)\2^>X l#Mn6pEV 5 wA5 'r?xf_f[=t,flwofH:Kj>mύ{{S.l-Ϯ,orp0ՠ n4X> 9rvڶ|rnr9"ܗz#~8"!#D]ӧiZsq}* auy.x7gW.]򱽞6ߙ1^2f:h1'EDIom#M@!ֵY6,0f?_k6/-ȗxNl?e9@J t<C* \FN|68rrR{E1)W!h^x;-gZ3@^ܫ~S$o;% 'VU4P9,NnQ,)s 5 .$A\ ۘ3uOJ8$:= 镯)mwq y~rwS<*c9 $f[b35s ND$YP LtAȏk4S&f'>IR1^fDBNRqGǫ]*py//#A7CƳC RٙI^R/ߺY@;wfXcLdp] )=y2"EC;Jns%Z['HhKƲ85j3!aiۡdn~ћNbDԼƢtXZ-Ɉgr@vqўyqoDž1Oك 7X:apb A"N)A:="yño6W41bJ=Mse&8o9 X_J%>^!1]` >72\*F\Z5wn<_GufBr7ˋ^S;ϏL)cD1v>cPKE]/`JKZʨ)'VOl|*6J0&J 7. 9muGѯBHߐ9w͕jM-~*? F0f tQ_.ީNB 55btl{D$– =DZE[Cwu՟ނ*F Sl44S@lx>@J*Aњ 8ko[k ՘飾vOO~)È[6"l6Ovڦؘ@jCtx%W 4#`yqjGBVV s#m>ݡf+*Y(uAY oZ0Dw0)?I@D.C҃$,T5JDŽV˾ˣ]i☺-bb4\w#\ˎ7vʄWT@3\nVܙ p=.tW"C&:{W7W$JCUJf^ʬN.!VL11jmKzQ>B}dj>u svmB0 a*'Rp}3`6J^  wt<"9w VlV'V^=eR _y8;è٩ "|/0I* rmWC1%!gIvhWܸlj24G<˯`S+݈^6R+ ZX/H\ gDl+-'W z"uPWOqc3^FYHJƘ-D*в'x_>tY>B0mbX6CCaiS4|Bwa2,}6nB Fu̗}j;W/Hkv%햂;)hU#ͪ 'CdT5G.<z\ByCي;)0 \t!A^Ckw3dG#5ڨm% .OU& ^ &y8հTIY_uh?>`]lX$Sj_S i4U ~ 5D_&8&$^`4hvM,d;gDR*A- ŗܯ t6x-g@ypbn?hoi)H*Mz"&j/}OWV,H}:[k$bQ9]'Q5!i+H/o8@E/kC:yX)4BőX1)SE9u{/#կERm^}z$ֈ.qkX =eaAueق"ƿ% ̶>^vȋ_LFhwHM^L9g`KuI[ A9,,翵Np.=!O;NbvOodmrVmGGkv)OΫ Kf5ͯxhtaJNjbSoh\~ T&lzs2xU}՘RN:v]bU>]~Winb Fl%71Ei=U]fJQsß:˓zg!uڵDb#Ȼ}5(Ogw@n4',殑9{+G[zo-1G4G`O(4AZv.!,. gٽL'3bX-p]#?0$UNO;ihA~4ǝfp4.cdepE,HvXmZ=ƩVUO?ih#UvOEwe>:Ra׊W_ӇvXRf5 IFXp;yϴA6Fe!=tkMH׊"}eH<(V#_:/4[#- =9|/z֜DێC:G2rIs_{=EU& tNCdZ5Ќo=+cT>=,o/. Eo 12n@r.8v[,K@gX폛 Jyl׻qgdATuܬS4jU_!N66Z('h7j1oNJlksN)6`ݘH*D?9$:s̶b~.w G \UZ෾T?i ]7]6t$cda>|oj(.%P*F* 7N՟ja}gᩑKzdg<)#ka/||R)>y@U]UU=]lʧܸF5eVZ!hu72wW ^X&{aRv+]&NJK*h, &o;V>:1[u4^H)0CGE:ɡv ᴛb}7`NLxw_}>\;9g@Ar(gݎ 8{e:*W uqu~ jKUBdO <!DD_fCfƳ3@cA_q9b̭)KthMPu0$H;Jb %W[A&! +16p/6?Zu]vQF'Ǎ=7M$%iaYm'H1j ハ;F; C:˲2upDhӮ !Abf$d!\d7RSrŒ^Inm2Ms -+g뷁SiQ{:dy,8bUXM]WoF_|ɗiU2'2Kht}%psPp~NVq=]"{8r"ӧ`9G/`>m! 2Qf2M\4!?B#-3z j]zD*h*գ`TTb%a!qpe&]]c Ȇp̖|Tн?T 5l` M.hDť`9e~2^zW)yRB-L yUѠFOΓhym(}@lIi^؝[țp*W˼ +TH]G҈Xgi!0T?uVŏ_u?pv9Dl`ϧO[|@ Z2WUZ[ǜ_=_f ʂCQYWcRz_Ⱥ"f^e'|*3$r~8QO]DqE*=+moRT &vc{ys XLS(uDu*5L^ٯ13葷`Uo 'v*ߊ򻄚=|(> E ]lM_I)ʝ~oVػjM'0( //tdi\B/#Oe8yud[l\lNQq)a"E|}Prr,ь\IG ,AgpycXw51aN"?H5BGՉؼWL{"ńfwG!`L&(̵+qEЬAo$-:׾aP3>ͯ/o(2 qR" n<@T< jTtZ~$LP7Ζqɒ kbJ:aiRUɪu&WT[A/6 Tj /(h [+4 Mh& \mWEkޠ'_8-ͅ`|&@lEuFvq2/E<6O]Nw h.olk?%HGd3ׯՐQux;S uNpwF}N} qt^cS KLNӨ u݁q 栧h%ï Wo6)0.sHl_yn|q0/𰕵P^OpFtwKɄp`0H֓:_3go=KN ݋7Y ,#_ds[A>Zyb뉳jٺp#QI'ʉ/eBM NsBVT.et_nm?;h=B_ AHQ*!NX<+uY_8fT:!sk9l^eB7fED.2=c֯uĽ`{Dְ zAeՐ$=Hq&7&(yF8(?lѕz\9s;!7j幃߃h [Oz`]!׺?>N,a_˚S^yr2t2f3eql+O:lQ+S3m̾ˈVxY%JB9砲7}21t' {?l̺_"RSt'pL|6<<&l*xS5%ťfT/ZT8_V.lp5=;3Xepc<0`mވuҭ\kCZܴR>ߠ 0-χph+ov)"G8>~WC8gprRP• }FNņqAzRM8'᫨Z R }N,ӺhqU),DCcFm\%n;c رxt}P3 7|cŒ10Q^*Lz9bnAjCOUg} 2SFJZ-SOJB8{`, ] eA4ޛ`h~!t5 P$եo'rI5 TQLŒ%Yk$JӶe  Z7ɭmQE!Jm, %Yvy%k`fcZk@$6A W֟^Q1p)l9\H:# dZҩEcf @ʳCM1 >FeC{+WԶx"cɡ[-A]9uE-4[ 9yn|GnŴe-hsĪLx)*`rdAzg^ïբLw]2]9uSEh;!އuU#m~ 'MW?]Q//1ދxRxʠ qI?=yc&ϒrQ;ߟc%jRօbp)od-GJWE\,Ž9AIuK|q^.H{Y>oրj;OepCr={C旊ܠtׯI,FjņnʣW8V gn(LЩ Șv-w4lPk_=ؙsW&l0po#cx`^×ؕCkQw@4)nBjTuU E  ![NXv`9xxa"q^HIK \• 2AJ鬒eW+& F"@Y[LEw[=@a‰ۛRﾫp??"ݍ T`;i<tNnR|ɒ}1,r*fn?xM)=ZqxC1,U} }]L V=*dgaU`xu(rEAz'?7? A<j35/IC2N]OI sYmsF+wQC;9@HumBHk[C cdj\;5>Mhf_d8*;1xexC-{f#1ZȴE6m RCes~(jKAI8e~F{ҡ;żI_yKGx#\=Oоwfv ȷ0n je=X+9pʑLPiUL DTnJlYHg wG%#2x2<4ryAFqHS;[,XZ l ;~" U]OчmH'c -H,V+SG- uzX&a)3( g6%Z^Vҩp5E  >4AJj Sg5 Czjn/oൖC QemU2jT/PeCGEFqO}i+X.Er& 'o0-ğE{27(!c_xW%2O u 4`.%(#ej \#{4%1feNak6x[t_^(֌ ESbc9xƒC+[/i)ρ%_xк= iNU{ٕ\2kK҄e-<]1߄]qm %R$Cu)9J h$L}vJaR˹ s +xb .]MFzʯgԷf{}'Bў!6Tnkm<`\nLs E\}g]ם#jck4eW ,Nx)dUY+iyջUvgȷ9D8H.eZl%5*7IuDu5s& B@m=ZKÜ(D;e'i=ʈ$qYY}>cέ+Ӫ?UeƗ<2bYDmi$\?h-cUyuS|'O f׺MچjUT5< D(ͣ%˕!|K=77*oИ0}hȝBeZutižɑy=g/><\OKT4sdW[S Mx/qVY%w.q$WO>(`i^r JQ"rX#^2#|;\ʻ#40Tr黟@IB=1rԁy^IqK ZTCp=OĢoI&o=m ={;-]'}*}`yVG uh/UkEWg8ЋN~._ý*g܂ tr. ry{xgĠT.& 9.xE6e]rs G)ŵ5 .ɦ9씎%, ϼzTհa+OdDC[hol cHv5\/z7[ C/VYO.lk&VLS2mq9U:xoHil]?R"1/ZQÑU Ѭ_hXƉsb99|҅Mrs&' *jr2܆|dtBGZ;V^-rJVu%pyP5PMX'<+z(P@)xlՀ!2Ӽg'~agz'.v3bNf|7Sj)pټ] axȥX;S菨$pEvat@v)h*>geh|QXħgXRhόP#9UG٧农nd(b'{ц?&.@qVndO!d;w8Cx5DZ.qr&Wb8T#?j(*CQKn߈Ò 5 @-͸IZxѧGgT#l$Yʿ:O&+"Jn(LQEJeR'>.OmN?$ڿ;m9M=hq>R,4ĭv6qFr‡h r8o>qbq0vqIveq<՝ S?SS&)E$T7ʼғ~x-/ E6&.='4فӂ`R+Gk>W+#$\S \0lwwt6ĢD=uwò t~,iNjȗ`FarH1qgdCʧ^@EG;t8& \%v[+8hNd.|l(q~wK %^Xx K~?vIGpz&ˠ3~CZ/jvfRvfA*ݠ S#ޕP+xgH =\E`dBI֋[_/3u0[eDMpϋHWv!ggYJ5TEw s[,p泀m"V-1F;`ѯ_'q&C )`#m08}ӟ2[C݌?<\t?`Lt\DPt0[3sh!qd BcUtD9*]2J;6" _I,ţy̙rm_&ˇwDh@vZOɍNObsݎ1ئn] fT=euZ0Fþ|9dɔT/!l!,.I>Eɐ9a_D~og*CKh_U.{dcɕ%@BD0ř Un OI~!Mez]@q&jBD{Lbq:M "J9v :Aas_C ih-80Í C~oӺx_f]ځ/o[ZQ#vXYSa b8=#jp.+*cO7['gh1INw5/oLմQրE(ZéaT?{lp!j{s~~ކq"X`UY?';b),207 fS6}\t9r?,\6EnB"5*ӽ_OnT}+5c\FPұ?ʻk0 .se7"pZs|yq,X+' "dOuu1 kWi, K!Cg/Pi놺X Z`?Y#m@] c7. /&u2d諜Ql+wwQ'Kb3X4j)wie_pJ/՘pw,v)va{K 8Wi)b]fڗHx2>Îql@K=Z1x9|94rQi+,mGsԂfWD+c'C߸M(ƅgwSDw@ D˦/0`Ox" O7GDʏ7 P.P!CNN y/=]S`@PT/ aC>ˤ>&`1m}|H P*Q6lE'A!#!uwѫYb WZ+/o&5vVf %I+`VrL`KK͞ohpkDTxor+.!+~ 2ʦ^؝BwVZ^H+gnT4?Em"W2xQ K8k]* E_ OqJvknOeX\G]HxC0伛VEB˧/*Ȍf0Zn؅hxyLcFi8GfrY|='ڄJQ%mx:ޤČ0c|.>z!-) G=|$]~c:9u_uŸBww./DQgti>eأ?Ѹk/|YX\~o؁Ej6F{9$ %#?ü_١N9@#"|JXAZ@?(>O:Ck|]"C46nߓcP<}硝V 7ךH4K 31 2*Ö9]n3 `6x 5`Ub:" 7 귌1ya91>E;jp>CD<ޖ:R I|AN_"L.2)G n&-Z5 9#%QJEBV_{LVh '4G G̡kޜڲF/P^iH]uȐ^5(*퍉lxHw4\+^Xb`w^b 9f~W $@Cxs%d&q;W-ƕF45[ڝB},/H/C1!p>ao$u)sq75ʫ68a yu3D -ӉJTn2 68n9 /feQ[+P5? Y@<}:6+3d5`>k_"}$ASVS&V,&?r@*Z͑'Y+Ј4܋rpFt9_$RwbccGvrh2@[ -;Hɵ&<T)>#s`bk(Lo~#Į 5LOp DB!pK3H&aUkۘaKcoaFGƬSlO ɼ҆#8+k6V/a4inH6FdN",$'.y9CR}ҙ+–@LPac5F٧#FCaMMt.&ҽ~ b|u4J!}2A& ]J&qmfeutGG[d>@%BxF3g= Jy@2;s Ʋ`:%0'T32`Y^kVs=cлuށc'7U@Sm] "p+3\I!|guz͋z4֟-x.=|[I44MuXО4|x>N@4OCRUk:y3P.B/燡ʺIUi{kW?FԬ5U_F~v)E{ PID`wvb7KWj)dyy\n`@o9d薎h78ׄt_?ǗyZ{QmTR<؟9xyd%¹ 7@yTd!]H: lS͕&W8T#5$V[ը/'9 [ ӬdBU*$ce {EG$B 1K+:J](tBPwɒx[LgM@"+ʘ6Zt:ܦ$/ ڎ~p$C[@v%vJ!I?y۰|p"r(gƮ:7zU1N,9A=0IQ'oZ{}fԏ? J<A_[m]r qFI~+s J)=8k[9l!eGuseЌϭU6SB YB*aȒߚx~p<տ#u41/-Gh=mf#Z7 I98f(h {$LCcw) 5:SI >b0-v| /ߑ省ZS/ec1Ϧ4u}^%TXJx"9)6V4rsg+qď?w2^b ɖ%mBlN0p'FufQfY0<ԈDa/kF"?8)nLk3NNsZc.7 ׹Q&;!1FG0ޑo3a|%Ty2ǗDozM kjdm{)yLҡEUz{ .P &j#_G@(̙PPٿdL|)b9&sW<W?y0ώ)W(\$Ve!^MRxJ7Igu 42@JtZU..>NK4n-VxdmOe/!ZB|uxtCa-P&J^QA154.|4UY(#x^:ExSXN8m"`N!X@;9ra)fQ.WAX[+N49~,U}P9˅V {8FۛŲb2yxœNsvGjƅ֗cebN)ʚ OՑ׎@K?+]<Ք!Z+6 ߮ǝVclYɺA TdͫϓuJ8qXj酐!Q]M0Z$lu8o>4/E913$ޑRMdђ i1<*S&r:Wxs:π"o}"&yM8bE3}/Jۯ҂ҿBNz5l M UFu#js|VK|5n#fo 6^_׭s2Bv!vL0_\Vq6U=:6hchcfƱi3%'g>V~QW\NJ!L[{*HxݺOS !: \jE o[粄s%օ;mW, [K Vc|Q.Jw=(ǿ>ViSOQ@%2:)D ᆠVm9ѥ'Xm3jUgƜr^Hn5k,z8oɚ"Y{;Wk92`>iȚJ|/h Y@o _X\df3bO|Udw4a@{hHyZ! Udr&@Z\vSmUe\Dnr9H2\2["_PܱR4pIݟh :~N WT0 |;Tt"@Ed09$' dzOxP-`uO ~P^i߯keub7cH$DGfHuu)rvQ =+jQwJ÷qgg] o%!*ter!%}};bg1_F /-o-4F/;F]$&ӥ9RDC!#m[UTP|2!E/1T60!$i=PJ=_z\˼,ac_'xfL(%,9O+}?FYdk=9aU!n"*ot9?{_RItZ.M`72 te%񔣤zb=YFO}56-)zRG&u%Vc((gsd; D22Y5&Bd0bP,:$#5H׭`%#+&D$d4sܿ#!?J 1ey}D h`V:Rw 0zDuI;772jdK)Q8Ĩ$ ܟǹuB)8])&A7ꁹH>|-L=.ϕ\&KvF`zѷ*c 0GT#Wx7nӸdf^Iſ:FV_o˝K~Bn_cVj f(%@M9g\A<s A N(#Q<ÜiN-SdT1D 0=Q$نѦ =~ V$;gq$il!Eh}&cfvU!UA'ӬSCy^'!c/+~.MJ*z &jqEJ6 ^_'Fd4}4dMwCxܧZ>/kp?=t6E6 50>ƉibLF %`à7=F1UqEGPvIõ΄7:3nqhA'V&91 &!*2Ӑ~$<$sސSQ$q@=S(BqCŹ7v=z{ÏE{tLXmT4K 8gG/,> 7õG} eCMqzS6HcVڪZucťKOo\讑.rlͲPG[lo,{Cʙ[}jI_AUe ?1|HcZ!GFQ m~ ;FYv/[J,ǚ)HՂe`Î｟l0!g3oo6eX5 v j5ӳ @VhI%ή-\fa/EhX'^jq_ڷN>kh2.4)A~<~{?V*;;qAM?i NX6[@U>RF2=u1FNJ2fw+gd'bvlVqv͞4HȾ"$66#ؙт967DZb@Qw7vz$?b[J<n0 /Ttsԅ$@{W9XMu̽V%pS={xZ^F oGnZuSoFBw qAA L`;yunZ͑zz|ؖ,cnYOx uJ@'AoiA5٦\.;\A/A%YjRO}m.c6nu}\p KcC)ҽD PLԌNR!&!㥩ҩ9Nvi8ޒQȲ1嚮8k)Y % D?GC"7TOyX KH]1^ c!rCC B12CP5)ʣJ˂Ђ9eUmXlm9z0T}ȡ!M;Gȿ.o`@?'}. ` "E VO!7Un%Bx+$+f񔼎JV֊Jc##l̷RJ5l̬SJcM!p=)s@WCrZ P}wOgTl[ч̳%7w "(I2z#).=0sp65FnH!P/,dVtO,ܕ-eWr:FחlR ss=s&b0 6_nM>` PjG|پ{.KKzBKFѿ UBRL(B.k;,4<2|GIz=,?F46w|ʼ¡#* hTJPl_XXL V Rn T&iֿu )6g=Guz!crJI&bKf1SFp>:30{kpB8& bc{גa_?Ka952e#$ƒ9.s##UѠ J--2J?::@ $M~CCs[ʄ9#T} mTAsr^s1G ?a~s.ލغ/I RzNNc2B0KeyPd6I܋qfXS>}{[tůr_50y>-alT(>I}݊ 'g *U]!boqrI9x'au;U$)]=S #m&H A'1|5ttV-ߑn˸yD^U07o c8vFcK)56yM$Mcw]M*|ND!_Hq܅<QuANb sDz+Dw) 9lϢM5v3 k6ArLK.0f#L!۹JK 26zӂ2P->[qߺSRF5xvw_M@LCGK ALOnKZ\,piJt0Xͣ苚23T_{S1.FH8[mNB~pэ&˴}3!2-MZ*1,RJ,Â6OhvX9k|؄_AApxжg)pU!Ȁm.ED֝h|g0?PiD$ DlHџU qLƞB)Vlק6=CtZ~JzRYq(sT䐹V=f Æ!L/A n%Ȃ^\QDhH7GPfnLٲb"KvzHx!ly!!Β KiNVktC½Cx\d.Qϙ ~}60;`4OoXeF&},f*z&:>tף;Q\wt;m- ce sˉy3oIq< &5b  c{y,NCz#f>;:C:d״0z=w0kpc>Ąg(_|y&\Z lCOӭ北J :׆=|IڥV%axc:܎l/ d `D^9h,1x h*cU;vH[o0WxpZ hb7ldnBßžu׺4]o|'/YT:)Z6L(""wCTZ&XңrU,yzj 9'ß%1#vP6A֤@ Zu+!LΓtH⣐4\h".P;^90+z5]W1Rx^+[]XIR˟:wHZXH!ŤwRB6HևO'xMb(TruaGojLM oMnYKAAu0"d0k2 r1Q`yRt2!,*2+rKBH_+T6<k@s-HKv #immJ:a K#?;ku˶̛$7Mt~DZ[7Sq!⛳mU ȹnϏ E0VYO&J6{(g1ΥuC=ԃYs0*j))4hlBx=! cPeՐ,:1tz~y,K}z.C( կHly̙e S}{>m(~ߣdh 9-u{lW  ҵ.HGNO8ߔa[D ȈAҊdel.3>CY k]|\2Fepٙ_KІzƻjY^fRjrp3iOբ%a^zϜ5՘gLҐ{c\X~8Am!5s dP  vF-M;Pn%ʤia2 v{ qMt^I•þBTR 楖_2UAp- @^ġx[+MKr} EB9Ix厊Ynb<7n! =J^"W+LESclD_\` Q>YIRolE:|MiN;@o9_jV%W+V>:WƙHIMM/~ee+vƤB(ٻAy0NT!.?>Y-iq z @㮼Fv d9VeOa˲DO&,jsO dH3۞e)5/,v4wV&c_7qx!`~fptPq00""~7b;ra]ѮHb$jO;E0O!u{nƨob`FwwAVzgFtz]/9 naϬHnQHtf'{SO6j#d}o1kEV:Xx,n2 7g\,p3#ѫ +#rmɸ0k;C4lM:u92dzx/DTj7FgDca,~vZx&9.Rz riq,FS{AkGZ&Qc bҫMj~U{0yMW1}A%Eh8WЮV0hXaYrˏBuH֡T.rjf)7yd6VЖaݿG,!(; $C |5Id[9VK#eWA%:AU86hHBOyCzF}8X5U+7\>b&O;{W[>kʂZs`vEWO)B:''hvVSys,QG39Xe=M* R|%>?o\ .~X;EÛ!h!=bZŦNH5651(y7{8_F/3_pDz/p[E^ ^`jK<|f!_9/W-+7;O614 BaxM~y1#g*D $G3ñ#q"~LcD3t%6FҖFΔ֙Nu?Vߍ 7*]Cͺ^/1lJ=f/;<ݕzG}*nӤ=`n&3+rC,?F2X|]_Hz? :n\`߸)sm/ws 2[tN𙜛Q)STNOSf-퍛 bA*NJs(|up?d^FHV 2>T'3w㏖{Y]U0ZEL@"B3PjܢsZSAPH `,Ҹ`:_5=gJ4S4BjFPj m_-w.缯<>dqs!$5. C!LʛGb?"ό:(@:z#E]EfΟQ t8+1Wvćйt joSO"B'`L,' ~&Q<.RMX1zX)0{Bd'r:H.6ɨe]xT*W&Jl~3(ۚiN(a. D1_s< ]#5nLc`Mk[XY{jCMcUo٥ PԄB?N\c>K3$Yg:T`+օDU ~ARM5 2@ ( 6K?&ijW,"ZrEEwW}bM+Vyā ETe*rU>-1L% ʈLAf1E^DKL ː8Cx#SamoXͻ0H4~^dd FQ58-0K9NS)[,&ܭho) ,bH2ے:AKC(Wھّ(:l4ojm+. ۩f}kG}^od5bkr^F/ &̅.է'B4f9MY}QWciήQ)$odqo”GptL4 nvO 6rSqtVNnמG3c ca8CcFTVO!@D Yr1f͖3s2Z忱k"u# ijJ"p-H6x++K9BʧIMd,]lUccYeV#6`}BU"ɜOUR$vV3(.ӅkF)8bJ- lj ¹{jF:jɣ+s_Iz9(QY`fLXC 0:`@.מh5PFgeԫi*Gu< K҈\Bۤ; \63uty^}/ 쾹(UnܹfהFSCلqQ|#i):F-9O=902ޒJ/*wqd9K{>*9,C2kܺ%=X?׮ܕrИx$(2@[+bAtF G̼EJeR$HIbhq޿m)j>S$'AZ=f"ɣhdAj[=IhH";oRpA3H颙݈R;L,M҉ܛ*_0t5#cϚ1i`W//GSׂ >/)0xgڟlBW(jRa_#msgQ%%/{Ҥk~hhtJ_ U>=ƾPkrpM_QΤӍԤ!^od ֔SEyRARRzG4Dys{]A?ϧ o>//^b爟秣B_{vlmeOۮt?`ʒu\q^ U8ROĵʆ#n(0@78 m/ `^|90@:t 1r VAߠM!${y(׶G"*pQw1 wWE]kF o!%ngJ{C eEqyLvKO;>P/iz0ҫ5,@x9>V,ÂtG?ӴU'w1=qkCLgVB  %ϊ ]86Fj56}IUّ'L yMaUhCOjp7?\۽DfFdEؘG( kG B]xyy@HR.˻-3**ɗĶHϐHX& nJ vԱT>?qc3OD(){b$XjziPBt~fK$gJ5)2)G6}<5AYT8 H{|{lڪqɛ;rWa]7oar۹qsAcRJ=neeY&}A+H{◛Aq"­ 4`6x1*6r+?}|E 0{>fG/{r(+n[`ꖍ11F..{_9댼6u^jVt*>/jXӧyvoݙfb`%H,J5Ћ{IUx.MUl}ʹ[lX i<2j4k*0s &-MT'EM_D]{;B-PoZm<a9/8JWCx1VzFmo͎K |*FWvC*eS&3v1IUګ\4K[?6bUˡOAiyeߋ3״e~=fW!w^[[ʝfZ$5.g81yqьdz0tO^qKe0S_e'-=81s[wt۫*T~er GCe.n~`p%W1CN~z'5+Ci*Zv:t.mX=l';j1hɐ~!&uۭnvJ%D5uZ'>4+1t7g!cέsUnsN-$Z޼A>ϥPMfgGd*sPq/R0ud2\3aCYg:"ٽ*ah U0YIdQ!NJiipb4w s:~?Hdr&*?Dۣh-n۷;(\s}wTy0$)0@PL^p18Xmh9~kx B Vb)? J7K{pK)B짺SGnD3T>+EW3*[pHjBrt{W\#8;}hɑ|&}tT)Zߘ9~8>ZFz˞o!7jklY̽z jm!nŴ(t#|&TiYLB;S25+/y) wᕄ/|P:54qSP ]Gv["uOӖyPQCYP5i5#I&0>bR _$_N/xl =tgɃV h|$ĿzСMr4z5nhT6Y;lrGb\>g ^Gf3\:v?!)~3TҪP{ƒc"Oy kŻ Ff^[?PΜ$AD6p<ꉅLҴuSlaNo{G rX5-y% ~9;m;ΘɚQTuh.I%05d!Lz-kF)oeME[0lʫ3^naPŜ]ئ;g 9.;S73`&SAVuZخs6B$j\뉀5ppb| ]}DMq ڤz4s [}Ѻ/VrDh6h:S8ڑmϋg]8SR}]G(&U8LL>2 nb[%޷SyLZR㷗5IѠ|BykV4g[\p"@Ԑ}(]ȅvƧ#\ =(P y. (+Q[xC"߈m4B d(Uc{T$T:uLnjDWo X<K!^Rg,][wK2g3 ZK8,q {]wh$^. ƿV@ޓ}<'pJ)Xd6E8ǩUɫ`<5 +8"MƭR32(٪6&"?􌙑 2K)ޔkcnXjI\[@O(@F شncV%Ɠ9Ciq_`aW$sz؎@6\6 _ bz9q=tf6wOBR) ^ͅFtvrHitCOu h] C: !Z!HEa> \+ۋ 3p~);:T~aܳZ[Y;(-Vr.Fjd#[R^~pPM U,3ԑƦBv'_T8g&BvE8a*پ NEwDLxئ)UgK24P93iM6Ikws0/>@R"XjwV$|Lf+ԹOQPlهMi=~F?J >_J's:A]x?r^[mZGWZ?MtJW%sעV4qͭ0EY3i+h`.z}U\_SK[#_j#W`2m0?s.ۘ\[}=mgIR` {\7_Ϛ/qedUWTu<)8vp\E+`ΛJ,H>crFP5A%U$ ܙKHo6Uq5&=xȘWS5ޜ-M*?ev힪:kg3`iBG(f 0JrmgXY1fyn!"Q+4@N*Lf:=}uA\7f@n#,UǪ8Pzq#"VU\͇k9ʰ.D\d~E 5A=/Li2h`*V=7# Gm \[e%3DX=y_4@5I A %u #l5k4IkF2{7HC{_L*S !qZ09 ToD冀3|$ 1K# J5f}I*uh%Md(`BqNUkaxἭYQ`&>XYz{h זF6Wo}zyjV t>o5?y8K&Y,vxh{{nO<>.Wi2_i. 27]=~}ˉvaooT]"YQ%T[+ڧ&c/y 8#k⅜ @h CCF1K"e:O<6w5TZpG+jC% |w4c@ Utp>^G}a/H^h-9ҷ _Q(NRycw֚_ͼy6_Q.D%MP#`c2?jEgđ֋HZ` rGZwvO6m\"Z-MD OJD%/.7 XŌ ܩ[ $Daڑ؝eM%2B6w"FaQ9۰/[R&}~G/*wQ0,Qr$0 ήNP}Ȱ#{6TɗEadN%}<5`&dS{_hbB$:ЁH:y BLz(.7F~^$mMz9]JθIG4˽1^n7yB в/V;G$9Vi얳iA1g|AX|ZhgbZERAJsdZ ΊU+ǜ3~<{s*=~ьnpȾ bR4i׌ZRlȟdݗ 8e-&x';6Fï Bi:03+1/2kN_f1~(S9O뽵f=Y>p889+alnƼױ? ҂\>yS z֭*6ޭϢ6i|* ;@?wܿwn9_ OC)^ !N^].L&,s"Ϛl|g(uIyEO1*L ~Q}iK:F)G r,c*2r5%2V-0 [y 9i 7?K]BjȈ/Xl :>`C-3nN1V)?K8k)s0D:^ dyWbqp= ,O\"Yʵr=-L &q+i Lܸ9M$"POXk%䪕%̋eUlqٯAUCZ"-ZdIppɾr8=ސ}H0zx&Tp'u>ٛt2gTKT|+~1 ȱTRdÕ4,)4 o\9ϳɔӸ g K F3S:Y 1 1Oٴyph :=׋|e F dcn(3F!ã·j(!.2L<"! u2n-7pP>dSi[a$>YGdBES%CAP"Z)'.3D1yԢ4*޴zǓTgwS.`bKvN|U58* g]i4Լ-uJί6!ӫ"S9c*rN!Y;/ifn^joֻӧ/U oz/ r6+_m ڇSx$驟!6i)6fP]Wධ4`rx9-RaS۪i_#pkOC}72;3ݴ-wtd~U^r"ˮ!Ǧ Ud )3?ϞT_e`ds1t^e{7sZ 4qmIFR'p;B~czEd%`p +ND$&wV^a\jS%s0F 1?tW3KO*VcSymx^$c,VFj& mOE5Sf` z5GI6CF @m:e8ǭUK:\ Zڈէ~S8|yJJⅇ!z4:Eϋx?w(vtN6Q{ T70~X x * h{~bD`oe\8w{,1ްǴ( `i(J=0yzi9Ēf̄B~f>0|Uw଒+RU`aIwJ7Ywd@`>$w\5NPZL)t}ydiwJB  dwIfp.2s"U`&Y[A6|ݹaëҞoBkZvg2;|b!3 ~@=bY[15WzJ\щ1T댛>g~䥍#_DWwT issuJ\a>$yw9K5RV ȓ:`膘*?82:h3~+{cQW%R iPd{d`5rXBVtG(Q@Gv ,>@&\ [t ks+=0:mA]Zpwf4g\j̈́]ܠ8J. ac-]>bT86[9;Y D+MZu"Ͳ"ecDmԼ^8֘^d!9r?h԰sG-$C%M^J~4s{ ;_R s߹t˸gK2eƇS=cr(_ik5w E|8%lbufVCc'hgAaH<KdH  ^6԰1jtoXT9y:n6^KʸOε8I4>Z1ILE!8,owckֶڱVBVzu.'daUEKJ#hfOk]'&V9Lwt\A!n]:~4S-O+ z%'JYiu8DEǤ]q5}U:xU7ÒW%&Z%/Ԟ&eiv>CAԟ_vpM'5n1⊰ .P# MoF\uoKΨȄ  arDX.ISӅUj磻i59=B~Tm2[!H†N>&PEKi)/ٞn s 襐J8ɑ6$ ~PsIjE2bSrlܣyeF;K؝aCC01R1YF&GZ$Vt۞V^NL/M%u_r ;8UJm.?u>M]{,,Jwv藜SLmM<@P5q, LnՒUC[ӸswY(H B!u0nXp!EjU'b= Yy\㟛Fg`,|x@4XQ%o4ξ=o/FREpAP(b%zHL{҃Q$=DU~EmS On-!ϾW?um9mӗbkEUI9 v )O$"Æ *o:>q` v.T⚤dX|F| =]~& =MSk&"bRUL2%`8c`E0j"XoX3.̊Z}nOHM@ vrJi}2FO`#8wiWsN tg_0<ɠN\ vdK$J #kde 7Z5Noh+yoc&`ϯmLXK!]ux@ID1'ҘeŏF(50yGC̬e}rcxѷ mE6uGYrv`{dh* D_>9<9B D5?b ՛ ߝ ˄>. iϺrcT U'4tnMPwBbvO[2tyn-mKqJD "HYH89*.T};:h8@2;KB: 18__"~%ܬr?\ _)MSڙZQRHⲪ7ڊԹ%/0lMr58v"ĵo].%:WCbj!XNwҸꙬqPe RR;Fhy p.$BU躊ɖp卧!owͮ7NO9GJΥK7oV.bۃFT\aid^ßV#*_&E1:h3KĜ"RlL[$t"@gxT{LlhZA.D&vbO-pSդf3!0๟7|#݅^-dp4hnj.E{KQ̚|FEI9["Xe`xuށ녟!T'?=2k/{rXGꙧg"o~&ĒObkY{ q5nUu[5V&ԔAFsa W y,v# q 0K\~"+6u>Aui]?np~MX;VLRTmRW +|"a鞲hEAUv=\sIMXB +){&{qN#Cߌ9r ?5Ip|bθ¸SGM/f'y U<%d"m9ڝd;]+N6+i=?hs1=% ډpZ#dDNVaADE3\ԙDK ;$LQ>΂ ycQHDsQ#|"+Nxݿb''9w ނ Xft-XoXqء&>R3;;g{X+l*&?訌߆UdUmjҪ_~,&P{Ȥw,rf] 'ǎ&鳭r!~K\9wasP m2QԖcA֝t;>w?vy:j]p0f)qT1B b 7,|IUȹ߂鬞C!ѪQB2sǦn ;%AWH]itKOnцANV}{U٤Ƥ6^vL$6#4xˉt.mGJpD8/'24ԩܣ`C!]Hq>&&!*nhBl+?×9#WP:RG g PDJd%Z*cLk,U ۽IGHZhX/^Dʂ* 'dΩ=N^W- {W-*5IeJC7߁1*h|tE֮' s Bo\,k?bh[ ZikJօF%eKuF)+gȢʩ`TnUrfpACLGW!ZU@V9(~!0Aր€& fPIY&拏@%62HASp;2pDÑYҼ^bbYU Cݷ8w[Yvpwqevj!/3- D2VNV!Yx#L)PQƺPecJ9ƞDcfC>\ 0{aGKas^@q?I/88sP_ݩ~r||zGh9hp Sk|G=Lgނ} nx-Wѕ&7gu K9x |5m'VhFW8G)+dI mI(9XuC1>(9cD8FX+%z1 @nh<ё kDWHL# R_[Qqe[ QC оe#oYl#v?cJ="܁/ x}K9HzqZr*oF!BbBE[}Ư9浛OmG0@o,4u9vf"I sUK7؃pFnO_TpN|Ŵ6 u_arq?V9nmc٪D!Nip4)& Q {TC -51GT}ެ9ʮwKɰD$NS=;5{Ŋa ,|Y  =a_4Kв,pf9B)mVteY _(GؾlrFC3 L13aVxg50bpZ&Wd!"tN!uָi }zH p-F.9lIw\_r3kbM_OXq*<*he5_p>QQ`cN7̧KקBt1@,Qz>mF~Vc,W}_Evu1*S؅M$#k'hzK.㤖#T_]C>0%xT|^Qf(& ϼAahWc- ԝR+.)y>QKHLF7Ǵ$ Mm#`Ʉ#"quӡ2凳|F$p8Z,0 ߦlqu둤)^n!K]BCY̦ч-bRqxB/dP,-co?*zi&gSL=,Lֹ1^#A.\W_6_!4jUʾ),8Ŧ|SԄd 0,w_rP)p8ZtS uv@4|34gw6ugU:*w4QzRG3\L[Z;kO^d3kd; wdR@?r6=xꀏr=u}}HFKȳ3JBm9!%^]%_e<G$^oS+po1nL؎ 28i,G%]Aԣjuu ?e@,.寠 G}%7^#ڨU=7]#r#8(0(_;`Ud,/7ɶ24Y&'MBfC܀C׻+_4(榰 O^GxMECN,Ɗmi0UBR @_6KZ̜?"<ڝ64>ֵ/隀OB*4! ` SD zTZ骷v~fW.) 05P)㸄(*By觷lNgyRJ{T1!GZԈֱ/\0x$)ϕ9~+ݏy*viF<@+>aS5# HMteLwDkull/k|7u$ze%=aߍH^9ږa9-,25˨x9e+=e}62J n(w=YACLbJ(_Kr/2qB 6'OIY{M8%!2i]2R{(N6~ЛH |ڕP27XPh.ޣb6q4i|O!PEv`x [l8.Q"6Elq<79=jtDFMJ,qA ]BA@sŗz](P@x*I3|ATw^$/%FV{cz= !ֱ~/Pg\ )'wwSyIh|+jת8KnBGRvӇrBSs7sB.| pZc@z5wneD/RQ!Y[sK)7ص(+E(Rʥl 9L;UwEICh43X/q!LZ^ҥuh}/(WJ3! [0 7>V](] Ct ,X֫L\Ol\H3UE:G ʙN#ΟwdtnnUl@KoA 9/NK!\">l"G ^0V~SnLݙ DV;AW iPP E[ lƎZcax L(E'Ёbe\S5IboIV)n®o_`f4 `˘>&~MGբ^ˌzP#`4c?}^#њДLc*2u"nWΐ7ozgQ\E f]JS˥t樧 S8UֽciW5UKPX\g! LGـjfK\!3}X*UgE v%ɼ T^kKĭOAb uݍx|K/1o:!h@ZbMhF1^O]É/2I_Y 5FmrcbiKYFJ( E*#xl84WX 2y2_uԷGbV5s!CrmN3y], q*Ppn[\ixO"u(f`y?.mcc6J{ $fDl@M"b(gaR/CB|-dwQai^/r9To3yEÂ$ T$mN>rS<ג[.bp -aD栌!YǖVl_SUҘ_Z)ۛ{EγtCdI*WHμi+й~ׂ FvA4#Yk5[L$>muQ'Qvti)Bhv fYk5Y8rJ S;ZVmQGg=>نڱ1>Ud7T$1y0ycF&NgXFT -7r)H91)U2#"v+A>0m۷|d qȮPaHkt/&8ɘ.ZE wc.n2j6?C M C8a/@,OTEPJ!A&uA rJzjDl톃V{oV!2IsL<6C%h@߾9-ؼpeL7Iyjۀn60Ao^[i" `lK%{q˃3,b J? :-f>.HuDC3eM8,lKLI:ISй@c9*L1L t:KoW&sz4o_) ,A: K`Ɲ"gyd"41n@O?c%:l۝lԱ?4 \sMj,kf4q!gݟ_l <ͤ72i!\M_633sF$6|BKx#K>jFogb'."Do~]ƴ";!լ[4WAfld^@yR9VmRmeaLWc5Ez]2|. [l3s8 >ƿR{ 3h>1;+7>9:-K\ʧA8.\a}\|l(Qʙ](Ces BaC-Y=$l:Ǘ3qKFzމā<"b+v6N~MTL ]~,^3TU>x Z̷"EGS+"ӕ=k}b% Od<Q7DŘ ax  jZYfTG ëi{S[yDey=]\o2Jgyr'[ :"BTH-ݲVwзp$\[:FmD^HT3~sZIGLgI5g8UF;\5Cy%WP~j?Rp ".eِ8(& 4"reHxr}CwM$6Z)<[ra؀EjHY%(?ge#8VG)[1a.?O'h?Yk-QcC8P>k5oaVaheO8܏Kh2@z@OZ2+IV 4'Q;eF[)GkZҒwpi'rGڑA+32Mq3A6aIqן)=)߬g%7hgS\!7#c%a 9mJ ,?6GS}"عB_jO;X:TP~H j.;!Oƌd4MR{!PgǨ`kN0{= _[Ҍe[U/ `m/Ǻx% uػNt\H25m>?aq,05]MbA7p!}Ӱ"gHg|У^Xq__ i" /G%=ZR rFH0eCXt66aӛ8 k_iu^bG"*-ep[=Mׄ^[\UUG4yB/PTݝZSa)Nǹ1/"^PѣoY-Mgd˚p(1E !ԣ8Gw p|gn黻u^MDA-TW>:A-yd~?n{m9vJ˙Ι:AH?!\UAr>3ploǴKi- f̘QV_]|BQy%A\k{s蔨sazzJnzuB2|1>bvsfG_K4B_BKl{_ѩNNx?MP10t׊eʠO(F?; (bsqåV5FbI耟Hw ,IL#A7 {wyP"XaަMݠ٣\@vBؒ~/ӖHW#w 7+?Zk^$_2glE%|īÞW\Y`?Db2-D)76q(okzfx=/(l% @]ERȹs㲰Z?7`2ݯ 1@<'#eEg/~kNlb_EE]s(و<^(RS0i'>!d2k&IkwTflh:euɅKz㡂,.eIF*Ӱ߳s$YXC,IS TX=Fl1i`qC;H5ܶ k >a2ߔ!ks6KԗA ZI8a;nYA|8Afsx=pkahCk[S<µۭ 7D۝Ckz79v_tL]d1@D_O.l%_!g}6U  OQ_g-tuqo_G?B YCàP`WjkɥZqgJ ;wyiKP C[RIe)-[ʜ◽%t('SK;|oSc^9^ut4W`3Y/f A<{xX.qlEհ}:K+n.F[,JpB9|KLRo0>wUEf747@1gûwm}F=^ˈ/02:0mZk3(`80z)9vN{!C$4ސ64!)=Tmw"ʼnS}!d*T)n-\2ĶV 53ժZ7 ȺiH!e;u+"q` Q)!c؉HDD>[m(gi'0ItoØ6E" (_)F &zi٩م!ˡ0L -LGU?4]pb>ᛃ@7СF_ üW`RR+o qO S4n6SXdA' #U 4zkz{$ր6 :atjۣ !n`yQ|,,~܊=F_ԙr݀sC:Uz\5*q°P E0XkWp)vZh $rwv36W$ !p3Tif_OK}S-Tj] -& 98W=lx.7'9HKbn: S׈$_?ulgS_VS tk%MwBJc IkNr_2wh01Od0/C]-ZJ _KϸV,5 +QL[Tѥ /(]yKG9uym r&E K>/>XnS.qijx@Yڽt֎/]v<ŽNFls9 U՗T`qZ/bEQiHӿ ~:ja]yXehYVL&3 +)ҺٴhhUdA~(.pn==I\)!+i0Μ:A+m|h/) ICz|‘V41 H5o sƯБ dN~l oـߚ$ ;Jb-0Ao-%Y -k0+ hj)k֗VLsG/g[3REƑ$djlmj!Z wkwԀy= jXDb EÁk4sIyV$GvN"#Q΄`$E3T>VJYLF?DAN9ANqaqY=qLT@j-󯃎JcrZ7yAMLlrATZ++9.=`wv,~! n\4s:F6mhb&*25ʪIAG}A}@:ˋ[1u IAh0{PKxVK3| %N2ֲz̆S.;׈>$bS2Ϟs\RY0]@ׇ%]Fhr~e% yYUQhq} kHAK)!PVruխB$ l{JB޾$+^O meBx!)wy }˗`NMFBz_b}J^e+!9Q:yVj҆@*Ʌ"/Fx6O+! Q^Ќ%^4VJ|ɇ}qV "N3Ȍo&u;b^t;gKv܊a!Y4Xѹ):JhOP(4:/IO= ɏ̰``#R՟tֱ3H $n!LmT5V'r opNR1xUQ^0`Np5F%tuJEU,t ݶ'Ȧny=`gy'\^Y!x'a boĺnd'jrGS;Αg[l9{Q^gKl>gw-S[aÇPTI84RK@"Ӏn"bm$SOk>f yjk#ds V59*ܢn.x:srTݕ IƠ+Z 9_b- _ dˋ(KEoR~by?Vr(|? g{$+6azۣ~ c ui4X"[ȣb&B%K=fY2:IJcPz%-sk6(>B֭eY )`6{ ;ԙRo˪Z'' zt[G(:mw#*REMۇ5)f;Ů jsKC!?Q(ZW[_8 -[F-TWDΓ_kn?pa^xbexjZ&]o %X&fڔ˜QlyMZE[;e7#!yp4S`mm+Zhw{#X2vu=.⹯FZv10(dga<ۥэ=Ndrϫ 5I‡W%4B;o{ 0X+&/CsBHAqeڨxdbJRCnf1j1(G`ד?`/~Vߕ+ pu#:q7q,Ms|9`NR/6(v5e^:ǙŃQ|cyܽhjljdُʆ| cmn$[>!pȏxjj+,ЖP*_sKpx8:_tA@#Z#Om(Ƀ, q(;D8\4}ڄ_ {*'&Rϟ1k4a&s "+epK a-L=+R@p Z-ovl3 \f  xxs22}<$ t[:fۨ(]@t?VhCCtV2 4ig "~+XRȩ¢9+#0VUÒ O#m H0UXtZD~t !gpKP4~"1oPJ[L!Dsu+Wf"i0-R*E,Ky}Rf$4^yS5 1n"Iy _fz[kd \͘KM:floRF5RUr{otKnK׎!\J[׫OSб2<_MuP|F[:ԙF^-eiNTJ |9QCQ8[Ju {SþGD1|U)oζ{ &QV=2ݻoKC,v 4dZ\_c+Wrd8⾝#Գ5* v_މwG!),ŏ'jFđF.9ꇰb_Nºg 93d19^)-B6Q`uZM 0j:G ֏E-IzP06v4KSi%Ŭ2t-N-˰.#}`q>0'!e,ٙݴKE*l),8Q$ Obb)B8 ޸7KSeiseLօ /uyls<ۖ?cR p DWE~w‘',ROc]mHk'.P;ogjC#$E:o_ؠc/euDA( Wđ—%NըqarA ;7#,䲼\&*"wY6wU]ėVw/F ƛaM8s1,݌p[~TSWWt5}̔gvٽ|+0ZSM){2*ÎqyRMCAɁ ˢ(dtkYvcpfun7oܞ"_oI(Cމ`T&bP86*o-W=qs-H&|G߰ch#LVԅR%ܿYܚSۘ8/lmOIƵW EC(B,Ŝ쥜d$}5Dڑي*1y .LE(/sUIH,s5i%%8!R ^NŔ/r/uZڙ XƗ@Hv7A+:t lE/7e1(;H--  (%w@ пZB6=6 +Ao s`_k6vy}j9'E:6]Sd7_g.4@%NPK}PHƪ`߲Ly ]߀,I*4Wl+6^ eKoK=mFZ}Zxi!Ҡ"Zy V1)'3'i2/My.cVo9ʨ</3EXcQ4wאgh\_?1 5f{B> DY vXv\(37zp2AgOޢpT岃S/22`nbLZVZD~R@){+0,5BކJԍ<}cÕeV,Ew/#f|'s5gа`x!& OO[g룿9HŬDa`$j'XnjW ytġ|ų3Fc./i>(A{PMыQ]dЈ)&yxօ_,8xma0 sj}Z݄ׄBO쬵j"+{X\?fDꍖ%GlϯTO">Me QkU+A&- Rb*93S)W}ee*BKhdu ! 5r"`y& :}QA0tu+Ă -&`GLjO/|.Z~V$נT֬ЩSȓѼ' FFAKS6$9ǾG \;E."/m sx`7zF|u~82,̎5#F%~+NF@Qgyin47NA*wCŅZY)A7+g--S`E"ؗR r5x6g{D1AmE>dBVM5`̳lҚtcވd6ǂxf\kx"wȬ+ /TĤdӾ1>bQTZt&Lr1M؄9%j*1SG>,{jV3/CڙgI7_dw*uBfW$os-A(8d6gtTi ;lf 3)i ︆| )'yM3'ק3M+sn!*ݲ9$y9+Qĸ7Xm'@ 9W3.4G⅃Q.ZjEXh#^n`ڳ+L4]7mRtnSOSisDlE%ڣ[AՕ.De{zd:D x¹nq AF/|8:9DyܦDgf" IIy |PpIk`RlzA!(E(񥁖ӂ#=Эd=ί!Y vvdGGg=h>^ )Pez+DaCE?I(3na} ar{$Úq1yT,46`QV gZI6 _{)-I$D$M79I^SD(Lׇh]voz2 ?gMw#QlѴ'\jV%{jX{uuRay ?{ P`tR07M~~5t-oaUgKjAt#^M^p}Q>ƁKNN^;@fJ5w҄U׍D#q CqTH{NAtzI=7Υ b`~NK77T1x4!R~JR5UD츮rO cDbnnWt,K"@aouJAl䀨WvSSF0 1GUxu LcNo.MJæ ]~o UI|GtDDG5@6[Bx#:0M(Ց@J╍]gWbO+8$jv+_`G!] {/Q> ꓴ͹rHJ/k`%U_lINf`#>Wu$Ug|6G٬`N. l;)dByTL3;ĆAr$'shcHZѫ]Zv.&:@˫U_X:z@|RjgA7Bt1>SG3]v4͉H"jqU|77Yd?ݢh2EF% ͂3Az1p,#I"o$@hd՛P܇f> <Hwb)4N1H;hA)[vl5gOυ.0؎ûFA.y fH٥dv $ uLx01-71a06$*@]۴cP<C1Ǩ_uc {|H3]3-4>arG lc*g{o婹ϒ y45Z*bY;),kQIOg#Fs0f-aBP dAt9jӨHpEs ӷ)`>M.}E]qMN;Oº0ğ9ҥWi =FE)TH4o6pX0Κn_%75_u sÊ.LH3):)lLM8q.UXg]d,!5e>yM9ߜ֞tB,ҋ ynJ3@eU_:Nƚ!.cb)4#4%q%5,a Hr62w4,(]j2uH+7CHb8v"7E__ 75mChBexjع?`q@5 au |Rc GMj7a4v zO(:)1@p+҂=-24%bGx0iofP%}kC~)|=9ŷc`tb\ }, &ɢօйiY>$[Eț.o5d۶^}z]՜>rͷUU<;@_uBRI5_֪{MݢPoP>:;ˋ̂_^S;(gYBӔCo1mмPf# Q/~CF ޗ<@x$٧?_C(Z?3Ǔ]+l( f9t2LT$J'ol*= xjgU֎IP?wѥH4D@a>7x;s UAKo/U&'S=y-S>CIьMg}ŊIY wl<~H$R \(}I9,5&&IxuL2`|dgWfģ-g(>:NOu`#-B@ 3c|p%thŒ\yJIFI:);s\f-(+"f*LW{1n[ vlknQ> .NPC2[tdJqy({#ճ5x%(94ܹЄνn5Mjyi~;5Z.2xL0M6ށ=0V 9tTy,TzP9fO%,I0mI~S%* MJM" }׮Idox`A[zk4gaS1}OalG=Ʃz.q0Xu)p~(OV.nK 4&;O` V1R7Sκ޻dL>qÏ L%Ö)J YGV#1*N"h?U-O+iC=Q #g=Jg9mrZɧ M0L߅åg 1VjUgGf+A ƄZ~n˻ 6գyI:qYM^^ nܒyҞ`Ubhk+jЏ;34U>x˭ڬf'J!L8n a r%GIQ8nF-/ky 17( J McHY~- Nы&M^r;ɓYwe<@NS-2iduY#;Ǥbf,Z>RPp5.0O9!W?qI f cS,ɥ|ljx. Pw5_F/FI!=ƞ^5C;( ]/YdU3RQn;]2'f$ J/kPѓu><Ӗ*A>cxg9٤^o'VHq}=(2e2m_|fc<6͉{$"4Vp51c\OXZKȚ'bw1yJE P< ](5)m.}4iS,ޞj/3#WE/o*rIXӍgt<93=X rVC NGT{EṇPNP@oZO[ܒ(CW4$uRQH@;˯qX`sKXETHB@ a׊mmhT_JZ u"$3 W tGfRМ-to}OT<.X+:/8y-Y/P {=V,R}82I{ oD`Z }G8J:<ؾiIǒ݂rۢ%o".g6'52Se2 R.fD'\oHA/ ,=с`B{gާ|pF9#eG?Y2!vO%ЌشGõ Q3DkIHT;D^a={{܉'qc7YUlw-sj^AR[!fSN~#8W3يSBFߵ6q:7Q&.tV0:>kq=WL]̠xq#T7}0} bzSzB,Nϭ T =^Z+GUٙ1/wsewl4rF#cPm27|km5)}B&P N&R1&9l`g[Mk+s{?(i*e{-;yTG'B&rek!n_83a,ΤrbF 5uU`TJ>EDՆ EЌ} ٽVaH`8\sr56QY+2פ h&`;rӉ4r{ɾY귯 xiw:Y1Ɏb+|aqSrD8562f&L?{?|k60gh&:1Qxx|v{ogn ;n'Cg_&E:dyyQ-ƀ.kTcaZ)HJr"N$>8jn+jebb_"(Meu1BVd¶ZrYNO{<~`{w<@HĿeB|ߔ>`w\16grr@ fꬤ~h=xlwhPTt:/ۂ$: S: t ~Яnj4&ebϘbH(@5QB/(ΝÒ;Ջڈ2U%#t9_JZN}h6(؏8Zw d}iZ`[6 a"\ j-tpYd"28XƘt; k4׌̓}Z{7$v5gE t dUN(,.O=(7DUi0)vvwٸ;<:?U7e"ʶ\RDgLՈ'QQsߩ#!f+}yM3=X闄S_üe&idp4}.iй_-R]F(U Y_^6lOD6}" zhd! (ڬzR5 d`r^ӵh_o ?gՒ~̰Ue#Ʃ4B4Hbс| Jk 'HTFY1 [Ѷ`=5&L`%*܃ڹجe#j-\8WͳN/`0'1NX:D @l-'>lo]y]@;)ᄤ9G{KUZ8 J+\/fK6WWA ܥ7^#S迺[APq#j.quvrVo=4Ћm;v?1qR<&Pl'|FM}*,f΍|bIV(0dS/ƌOSA<ҧGn'>]}/v; 2pOvXk V8";X5`t,Pr߄Q ϋA-\?Oܛ4-fϺPM'׌U:N7[4C;XG=9M0S pyks^xJMafj7WG1@+,]:̻:nՉ'Vv` ;DŽ]w1ӊk\FC75ǀ : $)k<.^>eTY\w'iM?^NB72p*.cf^> UƇ d`ѫIGzZ51$ F.xhl:8̑_c,Y< *(o-˶c?~gF+T͈PJ%'=hPLh`7 bxǕ-JT0~ A=_D@gE,c 萔% ]3@8m ΄2;.fƆ-0y#^"9kܓH:]Ye{ =6}>i,l*_=@;@C}?{Lk'G`|3~D7Ƈus̟ԄKF: ty|(RDjbD 'Mw.5 /:BM/8bhR/qOQ\Ƌx$.1=QޒZW wKS\Lc f%cZagmUr[ D=U[&Os)Yܚ.@"~}"1G"P!9"lq{d%;/){p7`Z9l_]*qa8pjA/Qbm>"ϙ.#7ׁ-%u1 i59ӄBAIN$Lr<-dakl#j!ߋ;2r]^/Gt @#] ma ^ ؘ Kp0:j@G?y9N`X}l<ϲWMε 9͔v:buvN. X䗲,+|'Ds 3EtO[L`͂ۇ,9xafL:_jn(B*d i3C}N|(5TήeD;i@\'u29װotV2PS\3o/!f}NFsˣA_hL:-dN-B@$TϛOLJBUc؊/rUvտe{]!`+ W16n$ Dz&`'vX$j)>[G00Ej5^tZn:;|[S\X%ڹ$0 $aZ?*'pImٺZp򛦹U_Y ޤH4uw8ʯbFU տaz܀? *p9Xu?4yDuҎ Lz#64/ĭdpWoSM>u,k|wvʨ KP?l` 8nFw!u˫IU-lJުIk>rL͔{v:$ q+1k+U˕qy5^ÉȇzQ7Y+Xe/R:Q K+Ro*$yyTd{8XohDbM( ;fQd ,zªG'9T7p 7U4 h1n(6l-`:WK1j *b ]Ge]L7v{TMKu_k[=!0wuB Nb2Dgn)*E6ŚEs&;ALeG y9sia#&<ު y{ } yfݨY|.0ieYع D,)UҠxv jl2fnmi \T~9y- c2:JC֠ړG<@Jͯ3"'?*ȱs8)u["5E(ZN8X5:SRU"_Ӏ>E<  ׬zx[E/jתE CD_9J[."QbTW[?4 Jm9~.&3oN^穠d/]:CxldAe8rfV-8.$\_)(_ + 0\OKUdk:Brp2LphK"&C'A"ڈ!r2`{ctgOn,Xa~zZ:9!ǚ|qy??_T崛j"/=gG_oe}BL9$)(aenR)mN(lkP=!tyeu`g_5[/0^P03y' J.GIB)eob@U@Dc|_6ǔүFRJx l&̿UxzXhwOQhZ"GF2|?ͺޝjM,h\ߙ97֫ $c)6#a``'qƖ bn@^ j( DEAC2/ScrA>_dto\j +yf16tIG˘Q۶2#g)#kť%^wwk({SKzr>N h(OIp533K:j|q⏠ qm Ucֈ84sbQ[7A[m6]f-9hcu ptx_AI O"#/g4+S'[= qXR3U?[GT/ 7#g|:۔$⸞!IM!)10#(fdKLJ; ц~6Hf/R@MEwjͷqgb>i[#GF k|y/^ڍMn>b &,ԃ$wdwB;8y aGȶr˿yqD~4u%]fΝAJ2P} 8G4!4xDisXi4{n%ɠRjh(kw 7B~4f~h Zgonz6ӑzbW-S"; rU#T(VQ&! N9 =Pt#!GDI'Zѳd{{ e)FZxmW,55%ղ{f JG|Κ() Jߤ]8ivi,HmnG&:*Md`V;q&r3Aij23DT@^Mr32"O0~C-GQ>RyX+ãCPjt~_"IPC$c;oC!~~%+,sQaEak/"41$9{EƠ8^Ldo< nqOOłMסwyA!} .Rxřdz0>Y%EY>Ӄݩ ot(!J2?r5W P@]bQ֓:US?[!pm|Ua]DRWduMZ`jg^"?$ 8O 3 H7Ҟ ^~pg%E01"}AC_$6d|I KcOp" >ki8tw;JF!V`l5/DeR[oeM Ȍ7N{QHyvPu];}.hrK4*b(g^ P4CTjtNG*0G9pн>9-O, 4@H;˄@<lәMnz*&$g.0 BLK+'l/>&wvgi~u $`=!!JY텭z/%H#?`" wT#-ӱ=42n=Yȃ!7~̨ײJOfyPקzD =ui|xWֹbLYT7)MUn=vFV&B)e$;9?4.{e0ѓM})̥.vk67o\k_ K KJ \3TҴYw'Z*C%6[~# _=9c>I'_nH>Aҷ uQe#?G5oNBۈ.HXrm"A QL4_^Uu[s\Y&=w1:eO ;``_ @uWC!r%Uq';zߒhv|R41PT xKɊp֝6i8t~IduIџE ک vEl\zʋr,Nޞ9u#a7XV ѱ'97aw L`vPԣH*n1!m|ݠwf:}g=6e#x[F05:eUO(d- NÄ T, "C2#mUK^Q8G͖ 0#8ǒa'*ڑoÀ؎wJr"0nŽŻbb0X}r{>4wSb "Qcz/AWE ]r}ѨǑ:eIk+yU#ξ֚MF+ߝH#6x[ؾdTO? Ĝz]족:}ZHҰD=@Grr _< .[ ՗Xix.⻪:|bIIA%uߍ߯r*y9J *IA7 7k˸[J`$c\f֗yV^̜?%-f%x@m Y=-P>v;KM. w~噞 #_981u&jݗ\4U)U GOfәuۯiLdG߼W*N+ vMY*YLZ~b~)F 'z- NM0sT&,䷯.yto StIzW9.Hx6o6bSY&T7 D(FvI~&׻LC/!m@Նc~a}VC4tGb/<&M2}I[|_&;$x(5o؆c4o kUVxu\>-4l^IϮRnWUw'@z`j#,{:ZyK@y|F]JO FEՔ4Z Ps=F"KG՝1R@Y.[ea\EdMM,|gnR]>tYhK\z=S̉4MyH#yK%.K2$,}Zao,0́G/@o%_%N2Mۤ;@f`G7лtQ1OPԡ9HM+40C=YU+1 | sm7q 1d9hEj: 1W&~ͫpHPZ9P}6{qa% BW3DroL^8M)Kja|}aŤe׼eC5F,$TB%lCS?6׋ѣ48{y/dAciNF9/*A6eKQTn3Ը-0"oSpXG؎"fSF7y@wh3Y2U`RǰYCYZڈxWTDԨ +}Zh7scM-=c}5@_2EQ.=ӎ7E;xڶڄӊ"  ;k3m }U/n"'Ӌ0bR;0yCeBC)6.RUWՒ63K163R "zd߼.Oe`W$2fkVqp.G99YVz^@#?sߜVIj;t̀ޟG9hxMt~/)]/D WŁ#Zl NO] L5V.+ {@Es8\^'ț4'&d)e*)}nޘL5;֊=0C;4HT<>c:J ="I˝c*rU, jbv>Fm- Q Wvpā\ppR3`/>F{z@JI*hJÚRx5FN^/COK#v b79)oB~Z}1|e`"iǤI͇Hbe2l EK.^[^?.PGT({-(¢M  Y%N¢z,Uרudi\[dK7 |OvSiYKqnr^Y.ib'$װ}̳Luǧ>/YCY:?vNCf: MLs9J츄` VLhr>~V(*xX^}SGydjY)*]ȅof"t*i"%hC0J}I `J,7 {Da쉂SV=hW(`8`0ysu,F'')v %QQd2x^$"$&&*#HbhIN VP Y1(9 < A㇃XqԋbKr hv4c Lpt%8VNWXjqp@/+:-5S;¥;Ox <4˜.a$UDCKaZpQf-[˄9U<[*6uoP.YwmC??\{}LOVQAy~0y2?F1o Flz^&k d59.%jhS[(I'h^7ȟ8:a絊>iszLvo 17w(^w)#iۮ`ʦXL(?0X@ҥ'cN5*icBbT!7QaS3 'G\YXb +DpGU ߮lz`,+e|TN&URX: \7ؖ *|G XҺ0t>ۗ1@o?Ar&cCRXÛTN_I,ipf.,ն,݌}Ic4dUo >d P]UVO6y 6W"+TOմ>Bij31 `޲$h? @GQyDҞ!u}ϣ;]۽91by6:bm]Ν-v5nca×|JDH"jJI`g%`,2 :υ+fm3jtxB,gLc`LISCnL,u A=8\3ˢ\B᷀)TӚqA̢^)/S8$k!W?"$=6ak/_sfMӡUBT-Fbm{\RzH{Z`83 'ٸ  ֡5>@"l-˰^4:*5Q]kWЎWmʁ6DQzhF*&` {AJ߫ ;(4^a ~" .1F!' F` qqz|Ek\S7ޚgԥ# _d #TdtfزFXk3r=)\PopA⢦+ -3$B4v@ D~tP*#Ɛx?_W=uHQEvEz#/¹9]Y$-?T߂N$l30@_Cb“G3=z%%G&xKb)!c#c?vbBg":˧OT#o<4j@^rWS.}|fr.hWhfHbײa3Q@mǀ_fPhj `J?gq輍(S\@KS{}zpqpJ"κ^ %D hikQjs>V*]cY54.EM)ᴶ+(?lD ԺIBvKODQ윋Y!y{8N COi-m !1Y~mCb}sL%ф]!-nI(ߥgHsqrUZJ) wQ;e}`,-DAM_Uz2Y-ZR Ws'Й{E.cpA܉h&΢QD(;L'hmG[z= {)(0w/٨|\,<6}|uλfxh&}N2p~`sFݷA;¦{XQ(Y,1)腼̌H0hL~AĂoIQ]*6"!&h[@h5DM?:gIEKGmK$q,חɫcV@`rYDžc:0TkLq刘=[9@b*hCmy82`FHj94HƱl4\+<5 w?a g/:J@KЗlh;GEq$ͬ!15s(vzY4dctLo,P^1c9U x|NU4Dc8"yt 71_mߜT&%%FaCf4#xm !ӀygEߣ?'i,5<#|B*DZA{ }@ |yy5vA ]dSkq;zK _eBtCHh{x3#(ߒ_z`ίÓo+ Ǣ4|UO.!v0; rD eÎ^% &{$3JAo>4<)X0Ay!0YߓMErLKb>@"%iT֢D:*׃>o#t !@쎮/}$#䚏sq']ttuilf }e9vF51{":hD=%A:1yfgD:WR`A6VGBYOVDҁfS!/! ZNqRO5af5:xR谪EoΝ|CS$tŃqLr1ysMJd|jB؆sG{+p)YC()ir9 i^jܗ;!dmh' =eQ$\k|!/Du-8"n$@NI,f;GH*NM|V<-Cߏ`XI;g>0mgZ\jKmvAm5=@<Cya6zmK}ӺI|wN-g < *KBDbD0S w&PlPD|HEU6cD3| m@u"5I{iz4~ې1ei#U6duXؠB:nm$X\ \C*a UrY2ْXTH. AJ1~F(`v3`.Nl>PId5Ei<alkZ?t5;=[V]bw2%8z #yUF*] |vU&[9M8!^!RCOFfUc7JӲޥ/SPKtΫd:YP1Z€g Yzj+ghL~@iJIރ'qq,+[}$|L:IYS^~.]֚:LすDޮcydXC*Yoʨ`sxJ#Ofd>D6fM?zAC <Gnnj- m6#>S {׻zFU#bc'۝  ^8[/1}LkI AӂZP3}(e`癖7NBlUEd7)'*ڦ" {1+OhF)tr9Ygð;B~J_XQ* թqQ:mlFm#t]wv}^d ݒɁڗA"쀱ĉX~E[r/Rt}3pt/iqZWAom/20n؟$ +"Q9"`=V/'/:dVwFՔD>\Iyb1umqsåfŠ)5mj}Wlr = k(Z@Eͬ'mFX!h(쯹B}!lϝk;̸"kXKouRl[[FʼnIYtr*4AY'})b^DOUˮs{v}&1b}x 5:uA/.{~ɒU*5,{(:`%DPk gMl ʏ4#cIBDR1?]1;Ub(IA&K1SQ6a%VeDC\;Gg{m}@Tn5Qp8yGto0!=5khXZZ!K}̴<-.JF]qI6@yre'=ZjWtH=эWI{A fFS:rh QmHֿ? +x02/–"pvۉr/*NWvL.rᣣD! H#,L$?(M4oAqH=z\359Ϭ4RHRnMtvD|7^ Ʌ5<F?ޞq9=MU0>3X1W.6n+U 5nJK,j$/ÈgPy.\N;&'9EVQʔ4a3ewf8 `8stk"")[HS=I|4 ӭGY5EUx7b]^\;uIߗ+jhT6/f| w@L] q[ Ȯؾ$">3wQ:757ÍL~q0EݩǴu6Ի ,3! :'g5STНՔ |S=* Oxwb-Aj?K!)9<{` _GIUz0 C..!֙ e_&;|wSJ>4( S߂gTs{b9/^ J+xXaщIɷff sq΃+ \͟2b}Ԍ\aJJyҝA(ס%.l^Y,`Өj_?X&~좠`Z;Be*Kx%aMG?ys"&o]&݃5  orZSni(/ W0c2Jg~)\W(A:]bc B+@FG?Y8f4ZRWL: Wj?5 3*ⓟ]vʏX&OO`k26>~2@^1VcRiVt0q}SS7x;MULp,f9]Kh!aCeJ_]ѩguJG[EPPXC_DQ1bR+vJ1yNkKQӼ}wdD} }!7@5Dר_psv=U q&3E1cA?9}xqE$7DHWT ^:XHzʖBLo*9=!hهX+MrHQRܑ4:Qnҋ-N yѻTQ_qtRz^PE}T0vd ?K4 _E:l?NK2zEj瘚u|]p٭H`e]YΣvh ӿWa^,t}9@Seo=9S(_Lʅmh^WQGU/Sr|A<+7PRS-^;3\252_y Y_]LeN+Žt/#.Ȉ9U(hR jc2SEh}v)^?y̴dhps BY9fU(wvnj3^; LVCpf㱿sЃۇ5jl*^QdκRgH%Vb#,F4u9"J@8hOнA~dO@2bW)/uim58rq͇#˖0i%x~Vt!艹"CJmNMiLP>bCZtFuρߙb>ܧ5& l.WSDE,zY_8Ђ>Z_ъ 0 Hdr C>V^R6v9,C /k\ TRsv]x+_?_*Ć4 5BNvPin!?p4s_ڈa "+E( B-WNo˷%1r1F=OS öpj$ӡFݔ{XCƐ*͵9G5DJTtY5$*J{0I't8OoX 8ȍ[vl],Ӣ*zN&eã-;F|XFq;WG|p/i<_鴩Ht8M }P~>/zalquWWX@iz=`} [c?#w+RdyPX2)#b+)By )+*wU |`d$C S+2ëS~ymj:`iz  B ysФ#='URl?ǿl{C:zf'kEE!v 7;%vQ!i1z~L աs⻑ i at!.OӮ ,E)|زu_3aCs}_P^$oSaj>^.Rb"xb~ O6e q̐Sձɼۙ/)4 )}FK~&*y.<͖p} 9=)w}wJ(਍S'PR#7ĜC3r4>D?3cz@ȕJ"' W-f5üKkF!vEۚS(_s'/Θ}n*&)k?EMkƺh61g`DG 'TM?4vy nrG}10sOH|;FV# a)8FER3^e~g}I85^4Y<:sqUʐϦity/Ζ7-b/Xɧ]?N-Mv&W&'jU] zLjKm8z3 ՞ nv;mQ/8J@>=ܿ06(ϬrpJ]Sޅ3qI6oA;N<)Qs>oޘK~CeAiR R`ˆ]kp'zjSۃRV޽ uv^/i~R¶i9LALLƒ񿅞`)S'5_dC#Flޝ%Vן}D$D#%-۽qs\LH82mZ;Q" 3ôP7 3`#s^j"X'mytds5"A L!>V;}|јszkH`Տ5mUO(kFbv|R@QWrY@cT}__!4IT]< Zst:^ TiW7!3JDU0Sk&/r%j?'"ʖ}2ܺ=}L S$Pښl\3 L>Kd;vMwڶuK2q}Й6F$D-AI"V3oW"8#Xx4(!;&[bӻĕ m N Mf߳xE6@OQ,y|o. aɏi.-m@W:2P` >25֛gaH8tt;17Oo;!o:Jބ?=8|(v={ Tcڿŏ2M@$\VF(/wkuϟ{s 07pP!)3]+ H9[ɮIte5 &`쒚Ne*{ ~r se\ȧEnjOcJut}}TW1@אF%H`쫋M;Kl$gL *g;P|fҀsD:\m#GELQR_e Wo\e4f2- ?m=mv#mcIdBK1'L?m 6mfn`"nQR 4eǼm &(]u, %45j'uNF[`.Xju,t-.=~8Lq2IS6 5)WlG'S At27~m#5u|杔אSPCxl,vWre`/:L=:d;oH9E/QEVWdEwg2TC=jM^xS >x%r Hr&ktưѕNgU.xvde Vʵ̱pk Z΀BHU!}hrG]Z+w'3b4UYAڀQ=Wo.9`Pco4`w3s:ʔgQLj:I$aM ;=NRČJC^›HNe{(nӋcHfRKM5$C>sn6YSɓC}L!5_9ii2Mk%\HmZsB˛avTRyeU$DMе&ۙ tB@  QR)+R[G aozDw"G_z6Li~X<./djΈ$G?14⚨}D ZRk եъ5 |':aj+nkU+AQJ%[XLj~mcOmrwS?Rt}m@ 'c qv>Djyt8R?2y ]7EVi?J<4rwUW_TWCE'/& d91֫($81uW0',K,2+Mo5 a OS[ U؁~ٲXHCn+@HQ?4g'"]\밿CKDzetUJ g5 \AC?>/dk+Õ.WI^սrVl.1xAqoir\Ne0@xK"B!'tq%_B~dp)sV eC -[BԞ`n0C0f%2uU"%,@ec?6;|CǏOo/[!ĉ6lY} f<X| :Kw?ssY5Nra5 $YWR igLLs`&8?ȁ(< [4{`\`:vGp|8qzJ!2cN1[gc >!Z2 ]NH/c~0߀5ʃ:M\-<Jff?k  ya{r^QU$$*zIsl,rm1#Ϊ/2s>^J%u \]ox3^WW9p )(Ix(yK+ TDYl7i0xtH% ||]ң@U4$r2Z^@Gj _Fg$\>Zi.Ep 9ShOǪT -ʽXMX5ocg`@ @8kB`9֑;;j ͥgw&XMji@ǮCx:1%6NEKrW)-GӞedMIY+esbhyg]F?n-&6)/md&5P $  VCc LIA+ 'EDu#b]'Q? I}a8uɗT.LUPx@ Fr26c|_Յsc~琵/Ml%)7Se]YT@VQĐv$\-$yx5.sx{xVV l@ON5ŸP WW&́桃$_ =>dN g|mƓ, '<|5 :cbW5ק7΃1!]huV \_Zq,X)e>k^ ʑ0E̠9-Q`v7m$xzph%V3!tE)u MM@.U$\ TYbvt֋k bm%c) =ʷ}'e9H3/Taՠ?|ih2w3=6ClqËbOY\beQ=g"ԯ:{l41Di̺[G؈L[8rm&}8a><^SI 0DRDg [)-q^3-t˜VR1kV H8pf5YZ1F+3tB.2yp`ϊc K OFԨO#`<O8BI7׊MOEȠٷ[f,-R^juK~wK@g|o'31bBIP(x5gX vd}bXNtvhv }ڿ'Иg¡i9o˄kz3EY 7 .['ܪ *~y΂}Pn%[*kL~a[Z*:QXӁ OAPZUj~GPU8[`x Dz 8s7K~cբQO=(v?]4*H#O nCm"֮dYڴB b1Ա?N,{]<ޯig>_8/F܏Nym%A#˻*9 C :np[m#y/T=/>Oü|(gl*Mx3L`{xGsM#bM2c#1V9Ksv1{O/`&B0oo20\׈tTYa9+^ d:uG 1y~XxM