freeradius-server-3.0.21-150200.3.12.1<>,kcp9|ʀ^2!&^QYlNxi^$5Evցm2ZJM) CW*8HD gX]V#nB'u<].>i;+,67n*KS~+ڝkLky U:%> ziƼ{nuf_ބiE堄{=,A&xY`> d} j‘I%;m ̞1<ʁm& ,j@@7' 0c~ яƍVC ݩ8ښ>O6?6d ) 7LPX\u     0 Z   ( - XĈ8666P\ӈ(Ӌ8Ӕ(94(:(=>?@BFGHdIƸXYZ,[0\8]ь^4*bcadeflu v`Ew <x(y0-z55555556Cfreeradius-server3.0.21150200.3.12.1RADIUS ServerRemote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service. FreeRADIUS is a modular RADIUS implementation.csheep142uSUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-onlyhttps://www.suse.com/Productivity/Networking/Radius/Servershttp://www.freeradius.org/linuxx86_64getent group radiusd >/dev/null || /usr/sbin/groupadd -r radiusd getent passwd radiusd >/dev/null || /usr/sbin/useradd -r -g radiusd \ -s /bin/false -c "Radius daemon" -d /var/lib/radiusd \ radiusd # boo#912714: add radiusd to winbind group for ntlm_auth # add winbind group and fail silently if it already exists /usr/bin/getent group winbind >/dev/null \ || /usr/sbin/groupadd -r winbind # add radiusd to winbind group /usr/bin/gpasswd -a radiusd winbind if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in radiusd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in radiusd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi systemd-tmpfiles --create /usr/lib/tmpfiles.d/radiusd.conf test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable radiusd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop radiusd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in radiusd.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart radiusd.service ) || : fi finQG!" Ok[ 4 e!%hE ` No<w_6jCd "004 L' 8z # t!( _ 6+ lfD .w Wb!4 j E( +JmVz!_ ]O6 F r$N  60O4Dm  !X&I8Ix)9J8J09@(Z))8J89p90()8X8I{9)Xk`9x(x9I99@)XjXI9I9)0)X) I(9HIS)9)0(9xI*3Y3Bl&17 *' j) E3 p.&!]M }O .=O)Eu "#B:J+&<FF7\n;{2=%F BuQDSk?wXV $F@VRxTkrSL kR "'YL61 emh/1kc_hn  aA5f /n 3AE)lva VmL?J] &!g9 U" S L1<aZ [ 'F[5 xxawwH' [ XYA聠A聠聠A聠A聠A聠A聠A聠AAAAAA聠A聠AAAAAA聠AA聠A聠AAȁAA큤A큤A큤AAAccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc^zM^zMccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc^zM^zMccccccccccccccccccccccccccccccccccc8a5aabbd908cf07b0f2e622477e2027f97cca4e54c2d651f6cceef1e0245abb9537dc913ca617dd3b64e0a0d6726a8d60661b44afd2836ca2e3362f5232c1af76877cf91d3f456bbbfede10b2104aef6f0543fb75c4fd1c77ed5eeb817362fd0a049f99bb80f2f16b953d5c5011fdbf98a3bfe2cefd963cab58546f17da83f60eb3e83e984887067ae91e3ef36553a3503292296c8d12d3b1d0d10c34b263ffe8ae096c15cc0e12c19fc104579a775b111be461dfc954d5067a0cc568f53f14612cab60855fcbae684e860277611de20ba736e8ade46571791d6def116d5ba4e9d4b49900dc46af19ace46878a20367408156166199dc83015c0c6c48c5323e11b686b70fb8cbd7c831698dd8ec6f8f53dbee942b683268aa7c0a19c408bf3947bb0950fd01b446eebd65c3e7eac66ffdf8a7067c006a034460cb78f3d3ed36fb863be3a8ece46366d50969cf71feaf2ae5ab38fe39d7021a63b679d16b2cbeca02caeb6df36f4ef5fa8e34b8b3e860968b7704d208fa59a06daecaa83ad33714f5007a8604c6e1e9ae0052713a65890c016d93dd2fd4de16cccf8ff8ce1a6728d792eb7d1b50d9da5ed3c89ba6e2fe415c37a918a687888d9b348af4ecaff9edc2d3545e0192a82d1ec1ea7d7c2e2c3a534cff700e1f6d6c0878fec2e0a3e9c1f2b05ce22abe7428bbc6094677ac16b00c86dc4e249aef6203742b277a2cb78bb5c7433891120096e7465aa5aae8662ddb72a3dd56676d523243d38319613ae90b2c361152d097cd025bcac246037ef28a422a801710d03e0bbf4618c61f7bea8537208372c09c8326b062b8a23b5cf08ac85ca77dac25d9739326c1d0a5a0d11e947a770316146f27e90e6164e2cd6d4bbb25fbf29b2219bff150fc58e05d4c8bfd9dc1f0588467ee2fe948f7ca3da2bda2ac55559e269c48c6276f58256d7aaf7dc46c2291470b6648fc7313e849a7db0730b25064529d19fe3c4612f0367113b3f0ce376e4acc454ded908f11fc5d73ce9145b8862aff6820bbbd5cf3dddca598d0b56b147c7b6633627643041391eb33b57af2173f1278c47be5a8b35960ce1875e81f35963033a71b46cd13ac21738e608fe3006e0af9e9cbdba2a17a72797aab1fcc7e66f306e48d3de55832d7886a071c5f9f941a1a871f2679b30314c4cedf0e7889e79bd3d4f23ca80f6cbe491aa486e7dd4d3e3359e05b5ec7e1f2fc4b9e7144988b03445c239d9d4b2e3c650048c0823dedc70d1378854eed596a0aa6e073400498c189d2b34f8ff4d1c3e0d05587256fadf737b53f780c8b4caca010f402df850d5c9190872d7df1dbbd2d57203bcf6ed127d0d012f1022221d51154149c83562329f1ee5b308d2f7990253770b325827a575a4f342b72b209cded3bc6435fe032dbfbddd12b60507a9de63ca436350d21f77fa901c8d0230a775c48be55250620694124e9582b09268b01406a8b1794adf8648c4488bfd709ee04ee744db5d7a30c1e9e6f5512c487a0e364580ac9c2c155306eae5fb2911c5852792cd6172b70305150d428e48b71de06bc0a2aeb212f735128735e0ba2e5be5a7ea54c6e3e1743154525f36265eeabd68dd929dea521f126426cb4cf442d73acc0ab0e1aaa5e97f39ef896a9eba5273df312212ba68abddbf497ed5244e5f624311fb4e4427558c8ac2db869bec2ab1118a5affa190ad23ebc39834dd22274bbe02303d7ec84e3ac96ffef1e4fa4942f60259acb64acddcec78ae4b961f49eb32e433ec3f9fe04530b8212d98ce0031a0c04c94e594941691d8c27f07c7d38cb1f1f46fe063a18d6acacde6eb155332e9004c935ac861b16b0c19b0f5fa237defcd03bf00824e13dbc54143ec4e2a6a9b1733a57f02b80f47967c47612f8eafcb5dec8a34f46c350b21224d0cd0d59d246e5f09fa120d74dd8af1c885af12e25c83cfc8520c2557e57d4e5a6ac740725a7a79fb9bda736a4336f0186044036b8837273ff2e4715ecd66ea703276208d9f35348541bc6c6a1f5a72b05542d6e5ca46374e11b94d501e1d803be1e311ecda722c5baeb89bbdf0e932ac460748c060b1ee65a84b81e75d13810894cddabaf7b3cd40ec218ad90d14b0edec0abd0f4c3e7346abcc30d1ef0e2cb8f38cfbff2b5161c1edd98253b9940dc539e8fa9967ff175fe1d2f72b48df94cde8484d1667b935326f51839c002f59163af879307334ca6079afdc06b31b2337657270ea117f2d0408ea93f7e40607ff55b8817e3348dbe9cb662b83d8797b5658ad0b6f31cc4daba7f5b54f261de25be6958f728b44070859c5564db0b1c2a02091f7ca30656a845bc01d2ecfd326c1454d6e9023aafcaa93905a86701ae696b4dfec480abc9e11042aab9aa7f2015b43b17b93bf4b9752e10d32ef5aef8192f95a52e736dcfe6914ae49e5e2b70b5ea578c9d0cef6642d68af6836c7cbc4e4f2c017969227754ebfd82e55ff169140b5553c2760436c3fe44d81376fc4729607735f711230e7b3584f2dc5bdba4a41240c1234467dd2a4e5a6d727ae10c7cd2e4c700e224e94bd4b89e7cad944e638d5357225a469797a11b727ade2666a29553b7e12ed204c88235ef4e36cf025b9830c9af1d01fce17419695b6622019af2e9753b53e6bb8f3317936202a51b848e6303dfdc082d0719875a82133ebe9001296d20f3304980c838313f41cbbdd4fe25e87efb91090ea0e40023b1f6c78a3999752c2f5829bf40f1baffaa2172ee6b27252aa3bb0e14ccdb88ba65fe5a00967b2e29b25e7320a8f43386cd1edab1781174cc8d3fb50e37632e1a296ef791f94e6f78efd6221f8984d19dbb21a231e1b340f061ab9e90b76c03faa5876c04526f383fd5ed6fdbe2c09475af49596d9ef244dc391de752a6ab6500853e680e32789b8cce3b47bb057fe5a828ed3b1ef3c512d47ace6ef63feff73d84a1efe4f7cef0951ba73ccd175eca9193bd344948545039237b3c7a260d9789c298a10d55ddef8cae92655565da9c62308e70717122f1ee89183ae518f56adf30263e6b491f8d24d51d6cb253ae62f5e362346328a6dd9cd929e48488830cc24259842f13e362b227ed79c6999e5882e3e9a9bf3991deba824dcfb1c532e6d2f0b142741544636f6ec2ad3a12b4257c9f88f2bfe5f1c8db1aeb5478b03597419591ebf4633a0253b448d5b2c66a9b6eaf94e0b2d14a395e5bf8d3b6ba14995a46195739d5b9f213e2dd236b4e25c04d940fbda7bf6a271843c644bf85bef7cdb3d7bab661395b7e076b424e07263e344f270dc0000468adf57142e94726ff9d1be37236c8b100047c811864b0b55920c1ebac2222a26cae07e0dcb4c58a23f1d349de31a5181903866fd9af6cb18f32eea957be776ae3eeae96e9efc73f8a894f3942ebe3b8a6925abdd3c56add0e58cf4ba1cfb1384dc276f515bb218c810640770c3a00d6d8bf069e3a02145e4961db39e3c7a71be428d19246828d2427457805e758300ce6f0fb67136812b0c6f55a117bedabb6073df5f1adc98f67f9f67a965d3e4d85372a1a4904b87e5217c904770adbba65b3bf0207b821cfb5d139f857d846c6070fcff545ec965dc1198895e37601b9ab056f1820dcec7ef2f5e13345e91761fdf454a38b09a4da70039f0a30ca7236827b364d95b8a591ea6ed66f2d3e971b66570dcd5a3fd9e479a81fe52b0141fa700bba14374f347b6b43b6f4a8800a12adfdb29a8fcc0f4484c4261fed88a6d5c377b1f2dd83f954dd9cea1345e05ce40438f5b045f4d92db6be31f22a160ed38126cd736d360be66c53e14548722bb10cb002e2a0c9ecb3fdd1893b4e97952222040f5ae2a745e8e22f5653bbeca416506f850783083598e0758a5c0385c22b71a465eddab5ce281b400caefcb14c09a2e50e14b2d872bd168b846edc1d5250d1add9dd6eb4e9b4de2e13c271e8a13f472ee5f0cc80d6897af8c5b2e0ae90fb92f20b9cc1104b65f8097a9c194369f06c51f67173f82423ba2ee84a2cc9522d40cfdc99e68b752a6d41e960263a373ccb0e9349323527b861ba030703a02da680b764976c7e6090504cb23aad5a3defe69d8f23baa1dfc3a571ff3b6efe294d00440ae45769a537f47a00cde9a92d21f0d3c474dd65b69272046cdc4d4750bb0449c3b014abf7848b1fa3fdb21cafff9efadd1226e408ec45ced777523581ce2bd68e0c5fe7b61b745268821681001e6fea4dedacc29a103317afa86619b88b32c317955cfd9717864940adee017d5205ab68298c82d348e3ba017cc908430b5e0ca77257083eda9e428d66bf4f60c76e0ab118e567d30cbe0e65bcb869f1daf94fcbf00f18291304e553a9b3bf5e8ba73a031af3ed70cf495926c798c1998a429071c6a9a9c12d5301262f28efc78e9871bb29bf1cc19d82ef20dcef84b0c8f2ad854ddd6608005e806ca2703a776759f81dd64cbca323e5f3e1623cbfc279abcbafbad59f44b6e7303b6590b0c818afb57f68c7a97ccb608c072542d5dadc3b83299f8115154851851da96240ed8a57ed750b659b18794e90ef897602df3dd83a57df4ed17c8553a5377d39d17a8fabca93890e91b4a4c411098c685b41f89be0b307c11130506b594b822535e760c058d305a61c3aac7d758e0d7033c95945a892c5df13cc423e4febdd8050175d6afca21467af23c8b55c1f2008d4dc16bf81b0c2cc2de4726a5088127c9f60f9741aeb82cae1d99e5e70a7e29072ab68099e69484c4b7c9d01bc9837ab4650e83f55ba466c9af4292068d5c9767849dfae027be2c73d68e98fac5361294f8c46195fd2a49dc43c04544ba86a6bba75937d6758de5dd79d2017d345d502346788a8da5225bc316be774c1971c97fd3d5f1f0f2ae4dcc1920bebeee6d15f99706a309ea843028bb7c2777179c8a7f4700b8587967def9561c0a8a86a416cfa8ea2061e699ef1a2fd9ac80c05cf6c71cf8e53f576069714247cd4a9736e72e1104dfcaba8be8ccf6f8d57abeed18d584f184d6bd3b20f2078b3bfb7a7cd2bdecaabf8f1e89f8d6a61666d3907ceedae8b665db93a0f6b3fc8ef21c8f70d61c331f51e705c8c11bb8c4a6fe1cd09e26d27a1cd29e99bb4d89b880002eb54d99d5567b553ce5a6e681e06048ac884a5789f9f121ad73d86f617df48b9ed955d669b216af18d3e770b6fd079dfb3760a1e1f8976dbf64dbcf3b80c295287e5ebe6a345120ac11f9752835f382fa6150ed4d3a5daa53f41b355e72b4dc2e6f8e7da53562fb4191369933b08ed25a8b7d117a09ae6d59d09c24e0ed65eb73128f866312cec1941b0d5222d8fa9bd842a55e079efdd6e287086bcaf6182fa41d96bade16e6d6f4bc0e7e117a2b87b16ef1c9a34ba79bd4491663fa6c23eedc86f7e81068c4eba56cd09a9bab6398289a50750c75e17fce9fb803ed2faa99d7c9a8687e4bd76d90441fa77920a99fc72e92e42869a9919e8381f4e8959577d4b2153370271d085e8c4488d1dcd0f92f177182b4593c0b68c89896d899bc2cbd37197efcbe8d16566928eb0cc1e86e71149a98358bde939a6e918fd6fe63eb3fc9632699fd99f2a80eeb6d48897f6daf8c718a63eec6c986a54eee2596a803436931a06efcd32ff8e9fc9338ffade69ce3c22dd65255a00f890938fea9918fe2ee1d3814d28e2414cb2a6e81d74acd62d8f6efe54ec38ef622c8580c205f4fe64daf2a46ec96819cd6ca8c1de3ffbedab5042908b909f86681c242a5868135643bc4b18cbc36af83ba9cccbe321e6c522ae1ebc2609a5fb751e91116f2cc9d11fcdf8ce687ce333c1a6d63f052cb47fac5f6ba1d744b3c08519d4f288e9938aa8da1700341f33e93ac4af48a8e3837ac6d21ddec906bf99e84d99d6e63a5dea16812ff583cb38a4e6577a0b18a809f98c34c3f7ba2d05d1995556d06d37e6ad241018f7f4d1e73fab24d534eb12765d5aefb877bcb5fa4e99240189ef8b716bce2fcc264fa228bd2b5d610f22adc261a9c37aca78ac3d23292c80f8014c53e10de98ebb40d6f302a316959c8301feb7cf29fd9ee9239afbed35417b76625d41c7ec1ccd3556fecd9ec9375b74a8ea403faddd7825a3f76fc9e3415cdafa98c5d62d432eb59c04498f3e8a46e9a7aa2d151be36072df097e8b9d2d423e7a6baf10cb408106e0a26ca1f4427a061b57dd9a2199e15d5a63e8c33f281a49fa3adf09b0d66e0aeed09cde6bb7880c91fed6e20881bdada310b6171e1977ea3d5672bd3dbc2dfe64b91cfb53bd3c9f46dd7fbe3584b9fafe5d32398c7762808f87cba0684e0ea1c1870ea92b412c21b829554d5fc48a7f825799f125b30adfdee54a4ae3865e7a75ad71b91c1385190a2d3fb876cf20cfc923a0890aa10f382f9cf032deb092e194c17d7588cdf2475e86294dca7f1c764e74eed85e7c6e70f22a62f3ac7d687475da182c4ce5cc2d6f19f448ab10094befd14adc6f1a2bafcd0d04b07714ac941dcde8bac591efda9f251c3402ccc0fd43602e4a0e9584e4461c5c18d146e71830f5281b00be9630b33bba20654458d23ced3678779aa926abe38b577b76fac1dabf50ac2675d791c469d6c546225ffab887b1166f4b1b3afd3ae6f301243e0e81b42d7f6563d8d92cdb93ce437de90ce7251af185d35898ff36648bf31ff5232b85f534c0791397cea1f4429aeb124f4e515b91784a2254c8107a15df5f87c417aea0bb3388fd0af28f9081b8d23d81b8dcd68f460b596aa3a2a2512038eb3e4e19b0797b14ceee2cc0d6cb9721d91c6cee1667d52dc5292d0dc4709b24527cf7e2c4dbfadcc324b137a7de18ea9ea6f937007728f43d4329b616bc19375972e27b31f9c0eb67f320a46dea73a8de846c28dbb9c586c5107800b63586220cc2b9cf1670fae4ac3557730d58cb8dd535fcc5e6f66adf08c0cab67fe476a94b2afcc5cc7862d3a0c33ea485bf942faae0d42305c8ccd9b97fc82e55eac7454ef6ee83a2ee680f0b1ccb0d66bfcf0048336d828cbddcf82ce7b7ee2883ca81454e976c61141647e3313b1564f827d840aee4f9f7f3a8c4aed32b93f496e4638c2fabdbca039a8f21373dc22e363a5323673d66780f336ce7e04fa57a077b715a0c65788751dc77067c24391dcbed4dc2def9da0a81da0f272f99d596c743235a0bb46db05baf8c9281b082af24530a781aca1bc3de78fb9aec85fc2719f0354c9c56f2bac4c23d257c6e0d431071dadcd2479dcd7264fce101a06b55be3208020ccaef69c156451bb11bb006d7d743ab6663fd5fead48020b7bcbb3d8d795eede5bae7abe463befbd51d3714157239bb496997e2f1b61c4caad979f7426497f632ee19901d26562ecabc422f709a6ecdd2e41bab8629423999ec0cfd4a8497e0de67e8dc7e00da9ac7d7805d1f25e04f0f2035bdf37d9b864c5737e047cc5989fa9d5e74a091dd6a74c4bbe169ce95a92f24d4ff947a3f438eff77d5e03dcd7342448ecdf1f6efca4f9a36680f95e8bf62130b7f8b930c7beb161937761e3881b50d5e0fcb0246a9d0385a12225f2864b09960d4b2f95f0d595306948d2c84f41c6471b89cf45450836840a5b532c2a69a22cb678a9fad02685fc2f35e4be267f399d486b887c422512a8c3b82096a6000bd87c0b5511af2f7f55dbcf1e855b728bed59b52407d5c47b6fc778d7ee166414a8ff4259db745783c1d6f93d349e86ea966b96978812c6715f8640eca00ac77244143483a7fd9df136cb1d1601895b49f240245c8aa4f7b2393af809d2c1537f466bbbb201ecfc8f8a89000d04d3d5164f07d6a94865a707c44932deeafdd899051da80b20e84e2e3f0531e6bc86f71c67d1249bdb8d02c6571598fa1730d8aca0a5e9a68f31c5149828c645473530bd5bc996989bb7f5123bf530eaed8ce10b29cc3703ec977848e38abe57baae737723bb751865ccf2df96dacf1f4c7bf73aba69d6e8f4866344fca9ed018fd999c4da352f74a1f7f19f3e8a43412e2bd11d38fcf3a99547af6fb62277ec34eecccb9d40df8883566acaff6719b755e8239e09392e9dde4ed14cf2b49f5219043b8cf5b21c3c876f13634b01469c96952c463b8531eb250f88a07571f51bec7dbb8398740cff5450155a121ad1604c548ce009d89ee31aede96051fa933eb1087d259ae8935e900717f6229cf7be87fcd9b3cc05926a0465e613091045d44797893c7a686a6fe93e021f90d734cc59a2cbd488e30ce06626ab7d8b67d3b0c011d3f10405b5f15f7ca90865ee18d7489b1d0b7265465926bce4c97415b8e62322ad6d532cd5b6f5a9819e3378984594b80dd831e26c4593a3fbf88e3bf71535cb262f2a0f50438577bb995eb0d9669c48cfbea1c04c5d78937b199ffa6e67f1d516723109c076c439430bde177f7fe6fed9cf148ed136e647eef9b4dd14c25d93aa6b02972361bb6b70231fe75a97a96bed3fe309c557656c85bf20f91dff65ff362cbf0c010aa2efd7b970ca0a8acbe0ae8cb5cacdea466629ce61595662e149346235dadada77c7305fb44f7971d352d233c30275b2372b411997c50c0e3cb978b5a38ef1db3d6d35f63f33aa511c866eb7814985853d1dc39b88d173179c0c0f2ee41e00f7aacf2cd750cff0549119723e892bd7e0cf0e9ef7663d32a24fc6a2c5d3f2b185f7dcf5dc204dba8efb64f0f5c7716d5de6f6595455e9622cc77f5ca52d2720b370d7b4ac9898c78f9bb4056a4116ecd1d121163638a16041bdff05ba721afb5330cdb731c9ae9848ef5645c376aaeb95ec77e904826f58dc2c7281e7ceeb9e6bbbf8ed40baa554ea78f1a69fe2a6912945d956285338d1849a8b0b07e8a5b6fcf4e8969b22800cd071f24b7aec7b0f5fb439dd784504fc65233b5c882d635670245865d181bb635c9a9cec65f0322f253a0c4fec6404ee299f04f97f2009998611b845a4ceebd62d954dd964fc70ce0bed6d9d976be005dd4bbcbd395535e9fab9176172cf6c90625060b4507e682b6427e9c43edfdbfae486080da36c6f0152928334dac7d773fcc47cb38da9161c0ef41c238882e1fc186fb4ce3d46684045e445ed001132731c64d054ea741db26427e9c43edfdbfae486080da36c6f0152928334dac7d773fcc47cb38da9161cd1e3ae7c32562723ae3a56b9153f7a6dbf2518ee7844d513b5fd02043d61f4eb8170a326d03bfd275ad0787ea81ab210092be7259498aa31fa0d1d654dfe86f58f223390cadb812db96c2d8de2411e785cde5e3f074c41478c7da963a7ad459136529c207f3d537a22f865916c81b611e404a31bf7dc59de44f111fc09b1c2fa79659ba31d6e74751a223e7ff36a2d784cae1d91e965ce9af08513a80ededdd740809687105eb0164d0a52928630628505b0b1f5f75d27ebf11bf20f25dfcce04d8bbd652f45cd366b79e185fb9589bfb98b6793455893767759e68e231938f855b9cd33c20d7f953921174fc221b4d72eb8178282186728199d0d1bcc52313f4d01b99f4c42ce9148858d22db6fe001745019a74b9c42c65c533f6454f751f2b0628cac686194c463c75a008032456f96dece439e82a96bc3c3da57189828c0d4b66d923f517f383164b55fea7b67f35e77208e72bf6f8d04fe07f6a36807d342f084c9d385869142e0d4cb034eda19eec8ff0b1ed1a8082848d253c05a4f28c5cbdf119e0c504a7ea2e70fc954bb50513f2d2973f8711e239ac63be25b39ccb30fcf48340a899b72da408c56b01f8c8889ea8d70032bd8333ddd8431f58166dd6dc3c0b0ac79139f42b5bc5e2b5bd9028b65fc5b82083b61e8a4d28c8522b5caa62ed22349968a1eb4dda74ecfcc3eb54443bd8affa43a8a3667042078daae3161b357940f91ce8e38b7861e18b06bc5e628078381a2914221b1986222ec9e8fd32ca89e0068dfb7127550fcf123183cc3ae270a926105d7acfb2d3d0e890324ecab633e2021387dc97dca3cfad1c5b8887dc7dcd5a558b39e48099d860b05f15f493c5a6ab75614ad25c3573bdac3be378b21108c185a64b803b16f2a93ed4114dab3f5600b28eb4efb2b0647eaf1039d8be35c21bca13f67177ba29ce8dc68b368d67808bb073da54ebe4d41da5dea5503236c671899d28f9ea98d13079c42f07c0f1fd67abf34b7ea6ac58c950e9f4eeaf5fcda2078bd318d6598b5e9cfa4480610a941518388343cced47c80ca9348297e4a3e1d61f9a964e480d0dc7ff6f8d200a428066a2166a96da5865cc1521ed618259112cc26df867378dd8f6588a3915fef12973d8b67ab54e8c513fb7057efaaf513477ce4bbab4f1a227f069506b441b95d327dd5e268b9df1b2a8958395a3f8fd70472824a1a4572540dca3a9982bba40164dbde4085753eb058587c8f01f123324b621612a2193e9d518d9c9c5a529efca8369a5935bd95f5b2334a5ec8da7dce0f62fcd0f318bd3421f45889aac6b21f7bddf11add045a69dfbfa9f3e5e83c56fca3c659b72bc835697d2c194a7882904e6be48d1122c737d73b99ebcf30aa657c3287ae0c5000cdf0a049af584d275a6e5081841a9b7db2c4d2d7c2ddda1d9c05808382a7d50bb0b9f69244697a934dd9f7418787a18faa4ec90ebe6b83d50587f2cd99899cea23300ab2a53ac4995bc2b9450f2cbf9f835e1092678d5ceae054fc600cf647a2a793d9b6aaad7b3e770b7f840ced8f169e094246663adccdd98870bee4494ccd5f6538ce2dc320d338da3259a7f0276b0daf3358d3448579a8efa1365d6319989b303e5e463c7ff4d2024f2694b5f302ca301dbefdb9efc1eae6247df9a00028f7fe3acba40290743cc857ee6e0ee36289a7ec69292c0fa22ef4c16cb324d34f16fca9ae7a0a1415667033a29a41d2d3e47a71ef126690cec11bc3909eebc068f35a0e2dc1e8203bf0dad4a4dfa49490916fff4dc9fef87bf8d3b74c2d8cac018298e7bd4c6ba57ede9bd447603a078d7f32415925a6f60316508cd65aec8152ea0851821a5e9f306c31556f8b9d1997d8135080beb2a518e8944f547d6b89ca5a66508c9f1d4609ceaee0f4f2df85cac13f8bcbae5b1b28b1bb9beb2dadcf9b1900239670bb360d1f7ff155c27beb48162bd407c148f5bcecbda471160ad0c206e1ab4c74ce545e69eab1bd8f39f6fd138d5d3d75e1ac0cc6ff9da4601cee0b43cb516ba9b5468d392811851dceb8b538a532a595fb4c668ef39f8e9a6ea27420b2b4dc412afd1e91d149fe4b1c8224b4e148d990b9e5a70202aed37beb6fff679928eb5e4a9c7dab3a43ed30efbeb42b6014f3ff7d2832f5c4c5408701d6dff6c7114417fe3e4da7fe146a14dba2aceb1677a110ef1196122df112453a1c1cdbc2dfa293ba65126e25891f5a1e8de5cfb8c18dc2f75837ff39ec5ace9021667fde13f9d543199b01338eddc82d5ee57d480376fc548ef8ed0845a66396d60f42a822d5e43be41e47c8c5961fc2dd33678d3f15e805f97f9f7e1a67b8a2fe70f418ded8078dd9c1368475fce3d81e336031d7a3e74931bba8b8b80abf1f623f4719ec41ce860c42f28aa44029cbb1b69bc7ce335777b4cdc7814f3480fd4281c57a72e663c2e34bfd9ae2a12c8e9ed9cabcc081d650ffc52aefbb10620bf8408fbf648840019a1a6b7656fe30253cd05a5b934de6037130161a2a045296e9336c7f12b7bf2e7b3ebfc0f476a1e1e4b2111afeaa05a460a9d84f6b79033c1fae23b65490455d95204c45d23d84cfb3a6984d916bd874b8a4342f7a6839fe56ad9d4aebe7c58ab264d5225cafebd632cc5a41afc086c618fa08461a054b1e50d2d40554f6bbe38d099f899171969e8974ef6d217e90d063f5854cf4d14a1518010f323f0596daf60225db8dce8de83b7b9fc889cf301b494865e500cb5fab0febbce9fffc073a1bf235c34e44c71d1c7375c4e4a6efb3b6789523143110c313ca11e15089cd429a7b059cdc621ec20be865e51f0c0c9a539f871a00e8014f679c32b35cc946d134b81410f9ca6b4a4d1a03659ef693ae91af5f40b922aad5bcf238337a3186c72ec7d7e9f49bf7595ce351c374303ba82f6140066dbdb713032ee64925af1a1ba36ce97e55121e84abd525e300ac7bb3ec031b42e7aa289e8d18f2c7d74b23393ea0abc3c5d1e2d66446ed84c8b5c7dbb1863e42f6626b708e91e8f4bb7454bdd7de70107b720ea2fd6585475cdb33350d9178463437e48e4f9b353057beb000a2557458f63d4179238bf28f2e0ef2545612b0e7e895eefb0715fe5dca032e9f0c69d235f5bfc86bfbde1a2fb5e896117b6412511375620bc0d9a5a52d28d6bf054079093672d136a4a4e24ac4930bc80be39f07b700ed47600e5e258558bcf04476b59da329892db70fa8d46f9a5fdbf0e7d3a32b2f7819427486b6aa77741f1b08331661e3d78c9294360b4df4013aa64bade84d8526941435842381259708ed6b05892ca6001e8c3f2a95035750e35d0ec8cad9fab977061d86d530c57818f37c94978fb1a51cff91731273347681a489f424ebb0dee0ec83765a0ccec9a8258a5bd89a32b47b4576e29f716e9bee1a7ecdc6771a28673afe4ceca4d354119c913bd8ac4a97ac43a666acecfdd41a615af9fc2abcd8f47ff35c337317610efc619eb3a391e87bfe18a721cf39e7c57e78467237d7c1cf4316221cbaa71c778da7d0831a1bd5c1142f92d9d325da962d4772be7958e83576c95150baeb88adaf9184b23868ad1ebb2e7a9051b549afee519dca76e7d3ba1d0e66430a129091a82db0436c025cbfcd74fb839ac7eb538b709a64bd1468c9cd79b8b4338115e64f1a097bc524f57e1990c913ae87e8173133be67b6c58cdc913c37e394651daa9e519e1ce409ef86504ffc850490cae8b498f21a6784fa84d375443483812272a35decc7ec6b807ca3126521f0fc11fa2df6dde6dbb4ae6962a01a4d08fe78f1d243e73d5b272c863681b8d9b727cead04cfb6652b74166429147837d9d38ebc51f2f83c339793c1b9f3567df34683290de24fbf7b357b5cfb8db15f05ed1acb10820b9d9b24e36330c0337c394a8491494c4ab9cd877af60ff24c1f107efcfba8a140b3d9e6de66f995b0b0c550934a129ae045544a21b6e89e42437a4df641d15a24ac9a8cd987a2ad9a8df1fa333caf87f9c8b402f9a4a474a079cb2d78ef89c22e497a5a7dabf539bc17af6f516fb3c3302cf8cc5776318b31cb859dc696a2702c18505af6796f35dbcf6cee29f17e409546db7b7546f6d10947093d6ae0bec924623261c3e49420826bb73f3b6d7d423eb1b0f6569eced0ff1637d54db5c968b71c6ee9e7aeca25047ac769cc072b5dfc65fcee22378553e98c9f2282d8fc8bec44ad5d85f636021d98dc9709d8d384a0621a65cb20eb7a09175325d641c15b3234c758120063a46e065fc96f4100e8f9543583a58784c69f6424ff4bed69d893c08b1e19121691932d09f6ed15e9bd277e13ed2a14ba99d82b2cfcb3568de59e9fbe932ab7ef6446f804ce42b693c36aa04e85749eef29761e5f4562cdf284555844409bb277e39eb0ac7ae9892f0cb8eb94abf7f296bcc6a4ee5fee74eda72b26c8040bf7277289c1887e19b37611eb8e62727949012d132d953559f4fb050d716777ee8510a363214101f2401b4754dacbbce9d8a4f4e39b79397cbe376d218c8620ae1ceaa0b74f7a2cfc184ac660ae15aa11a4b2659662152fac731f47deaa8f93def96477ea22326667d165c4e6015b630c19c46e83e70b7782cc93f47a380a3aa412915314db98ff3a9135bf646c8dceb9b77e74415e86f57704a66005bd4c0d93e2e9514244bf5e7767f0d68ee2b112148ca1b1d4c6357391d79046bb3f576838dd6c5667bd69ef2e05ab580d2b5867d6df09062b1623fc0f41cf482353f7c6922debd93be9b9dcdc8cf9434d1882346e570f7dba5a45fbeef5a8d4927fe4d7532bff7f2360789f1290b4a3e6e9907d091b4061c9c87a1c46d4bb13d60519b0a70211acfb84fa3fd31ebdbed10779844440f86cff0c1cb8188c7e549d44a175c2805e5474a624301405ca8b5969963f6ef956da0f0c4b8eefd2a9cd9eaf1825540eea76eae03337701581d0ca366b2a4a8fb6b8c3f52f5858a2ca6d3bcfec005c3183b634810735a0f6e470dce8d9da8b96ddb8f86a67a39a70d955a37918f81499016af8f44b73a26683674457d206905df84cde6f859aa24ff1c95a23047c79da4eda1e52951c90059c80896b0885e79ae7bf7e0351b707f62d4c7b40b5ea9038563242ead18b7cbe64ccb07984c9e9fd8e822c5bea73e80d25cf99301df72d341892c709454f16c115068f93d7b036de7922cd996fcd5a67f69be99c7e16af06065dc6876167833c9ede293b7d9582266b12f360dbc3a8686a6b47989c717c8d8589ff99195e7f186aafab1327c4c0424d0a8fc73aaee79a97a7cc9df952b1d5c06ea145d113ebf98bc9619411f56fae726e785e346e27d1ae96e58b102470a42000ea9222d58a03d014c5431701a918216e87c433a929ed7f5d37097dfa721da22466689dc5fcd6572f2e1c14421a3b9865233375622ecacda1badc94b913172289f03a895a12df94ab3608e13c2d60a702706de6c341227e5e1288e5759dce4bf687e96be18953722fe8c80902be281129de0cdf44ff1893654c367541192eddbafc71f12a1c60461c87a085ea00f64a35f84cef22126bbf1905c81d5e32dc47df07094c3a4340b9b10874a0a1872b61a600b26d516a7af040451e3027b0592b7299538362366bf0a064c2c4ec067bb4d2e0dc46314e8e13cf78460e84b2ab294ab0b5db4a0186f9423ce6d8a70e22493d4538fd68b48b1ffe29f07d5e34a597830827d4c3d63bb6ee0b9e554d898624ebd81266d1c93fec58153c0881c9b6a4f1df10c4111ec26d8b849096c5945d427fc3a918ed7a650907e0ef50ce646c11819a90cbf32c1d6abe1591d26dbd93773ea20ac7f037a6cd62c87cd0bee1d15fbe7f18f8a829ee91267b432b09b40bd7b93a2aed3f8e59d9c1ebc92e6ba99da540d0f87bfa088c976df1dafdcaaf2ccc747f2c8f14b277d23abf2e0fcc8e48ba16f37e352fc65ef294f77da9d6c8fe88d1e59c23ac76c95cba97f29a890becd784b9f1c97f368e71d3ae696fcf5ca48f3ffa6f6297caea69bbc158e67debd10315d960ad09f3c9df7d367efd0c3e086a33883abddbda1636add0b8d16328f22595f915f1c05d766b68cd5017763afe39836623bb42618ffbcacda10fca203ce60fecb779a282cc3e35f5cea39092acc5f58300c20d13aebe76f9d47d29d4ce2081a9f2d93d4d749f051d206e5d44833515f014798a4d41e00f053f22e435148e91abe57d39619b61c3bfd2730650e5c9139eccfba965f36704a4f24bda33d2f4ff034434eec035e74e99e3aa117c3359b217261a254c50f544209076643c740e44284598809cd52554617db667b3339c8424dafcaf6b10269f8c9548a9ec05e9f6fbca2f59c2ddb8f6cca9a2820872a9ef0f122d8af0381919e4bfd290795d0dd5c9ba9c9cb582c22b007f088ce8522f5db7ecfa6e2237a307b14c10bd074ae9a7377c03672ccc5cf1d9c5baa9e4b39fba6ecba8c1b51b3d2e24f277c4d3cde2b5651ffa524c562e4e0b0607768f46c2505a0f5d6c6bf92b94cdc5864bd4d11a4f274001bbc7c7793bafcadd81f9422dc7123aa683402c8598f1dadc571b8f4ae971caf143f2418f2e07df0beebe2f40a7379dd9f0b0ca21b0c814669db768174f402824bc02d6206629abf2728bdae843bb26588ba4f42c5c6fe479084b28e220cd99ee0552b59ac168eeb1948776d31e48a0eeb07cd08f629c1492af6e304346369d5a140f13696bdf242cc57ea9c66f6ddf3f926398c89b782f3ab9c8fc0a21a9026ec029482d2892562e6728f4dc272b8d3d5a7483dead57f34c1927635398a84eec66faf227785d31d72127ca81713e2b6bd5752edf23dcd2f6be74884441f4d9dc464e03919adcc201e8316efaf2e488e82900a80b71ca1fc19a8dab4d95667e4f2d3ca8da770cc445ac2b8cb05efe24060f7fe5084e1bbe2a563042ef4b6edcdc462035ba31e84cbc0f3021dfee90ca78c4acbf46a3ec15312171494e558c51d56b8976c26a668d1d488bbe1280283f12c63ef3be148c38c204ff8aed77aead4d5cac3077d2ed454cbf03ccd675fd5006d9593edd68ff013c674e4169fdad21b938bd952efb4f13c2d1ab30db54ad55ce92743ea57dd8202dc3c1e2647832c5578c3ad4358cf37dd01522e3de358a16268ccf19eea0f55378b2596a9012496fce0475b962ac92d79e684c4fbc3887f23693781a9b31c65e3a2790d09fba56de41ea7a7bdf7dcc879e716e5eb61f15a1332ed64bc104516dcff6afb7679676fd329d77ef24eb1c91628025bc24001f7ea543a706418bf9a9c40c9df6c8b8632289efd17b70846e0acd5957531e01d43b0338df9d9414042bb4700abf1efef4e8b699e254b80e580009ae9247a2230a2ad5aecd5989c4014a4e45eb7c1c7090872674ef7edaf5a38eebf41e0bc917c5b3d215266a8ea8449d2a0dc840e83b7e1d28475e165bda6dece67683d363255447c415427ca66cc867332c888a52672190ee3cdefe9a55da83168f7d72fbee804d37695f6462c05a9090eede29499e915625ed99154da68806b963b3dcf6834b114925691fa293f5674a0498684045dd0cb071cb0daf49e557fcb2bb268a4da75d99d0f86f38cce76c2204cc961514f13af0a42e253f3cf1f04320316b59e1b11b16f0d930041cb9202e21a50f4fab2cb3bf35d682675dbf21c508b378748cbc422bca98cc777eb617ab0306af768ccd551d49807ac6937cfa740141fcadd448a2e3c71a9ba7c50d49d5d31281f8881c97e06a3e572ad4a1389bb21731230ed55e225fc4d84ce1cf61d357708ebddb518def97ed92db88a57fb4cdcc2698626703f1807bb5c019f713cd56247cd9de2a90ca80f802d9b73e3fdf55ede5dbc072953af560bcc542580ed663e3f10970fbe8d3dcaba0650c72da430faac7afd05964185d1a319ab86dfccb7507bf534c047b1059f6aa3db50328b69fefbd58b8d3d19d5be859732717fc59edb68b9b1ba500c3f12487935ab61f93c2efd9a1680d8b04f9c5a8213ef8b6a9b139ba23cbd39da287be88c98386e030f293343d94ebfb2c0587d2615d8088ab1193fcf0b15f7c313d10a7f73c04e82ca8c28888fda26b3d3a80145db0db4fefab54cf4d5b52050c5fc2a2d212c52634c1760bbb31b203675b1341fa8def79f23c2645411a6ca1936cc62b79f4a8de023ea2eb287b09d9638fac3718bed52b0ecd1ce2a8382d0ade43d08230aac937146cfddec8d7329c0cc7bafaac12bf430741c36596d7b64eef081c4421d6d54128e1be0638bd85a6349f000ad4e83ecd61eb57cda7c391fa54a265739ab927356e1a2135bf25f304b914c83e87a1fee3884d2cd374f12b5ed1ca5790857cc4bbcc8f1087f4517fb605403ac7de1d6830b4b49271668dca9cfc9169959a6b2c782c1f5db080ca19e013ac99592d690d90c5be986072b705dcb583e1ea8300f1fa67c2cc5fcc3857b5bd856499279357b340def18a8c6d05a52d546d8f3b6727634998e610e08f695a6e20bb756d636db2a2e719ff80ea03e88aee9208741d0e242b2096fc417a9b2beab03d93f30717458b034d2bd2eaed668754bf959e0ecfe98e17ec88de7eb2ad3ddd37845f736183b7d3b5bee00a0f784f0864dae6d092e1fe8af993c108928fd679b27a5f3b043e84a1fb5dd23f14b47b5d65ae7e127eed1763b39cf7127c4edfa9161810c013c999bb8a3a49ffc34e2f3cad2c9989f660c5846180443560de3181a5bd2679477edfb92da913cc67c845ea42b87a117243479add7b27dc743172481072fc0847829075a4ffa8e1779c016519afd7591030d85f9b9605f481895fa43b1a8ff73bdbbdb8862b178ddf8969a70d14419af5b6fa871feab87c4f808b68f13ce1ad05444137266619827ca199b37ba4c7a8c80ec46b7d2a4d9b390a94967abeaaba0608a5edad8c419e17977dd96625adcb7bc9cb92ad2e6fcddb1334cec48960a185682f133fec1040f3f1b0e93180da657792b1134e038658710c249a3981a4c781cbeb6ca000585fb242836a099fec8707d836678e8f7495ebbc296874c0a9409b00776303228ad61bd5b997d7229cf4780e528d5ac69401316c9638f163a15bdad8694e628406112d4a9e5f277ab88b23cb7c68bcc688381d1b659953534f26a589244b3872459577a6522364d86e864a32d85fa99a44ec146d1ad6923a6fb7a796760f31b2e28d584ab813f0e0ae8b5e6e5ec7e7ec93d469d8090ef4467190b68ac7f0c8cd986962efdd0808a7390469b6276b7258d16d883879240f8e598fd8ff5f0badea9775fb31a932e232dfb212c223a27322758c1908703881b384576158e28bf2e0afdc7a59504b146f31936e4633555bb63c7033746d602f3b87f201aa5d064848777271d8035b2dd1523f41ce7f219aab232bb5fb5e1632f47c3221360cd090d35b0c7bb84a069439d0f27727117e8a59d06d348051a746f2432e129f60b66dbc82089d54e5bc064a7629d666303afb1f732689f7e74a7457a01655a50c18a2bd32d9573f861343be4693d7a3bb1f4001ef0713e8dfee0f45f254e10349c416207199bd38f9fb8763fc39f323cc0a4c45fa1046da746f0ccab220f5dd456220cf4698f3c38d701b1eb2ccc6f8b394c29df366f6050f3bee46b9a4bc5a2a8ee50fa860fe5a9b947bde6b1ae6a1bc94be707d72866e9da7f9c84e42348fd8919b75f70a43e1e9810f5b5c93f9b7c2ac661d8b6bd97976a71cbf00c7ee2b36b5385a270d268e3a168343b852345eab5fde4fcb902f47b87f3b1f840d57a5afbc92fbb737e6201ff5102f8ad71fa86b92798adb25daf49733ddf5da69c940d962bb9f714868a40ed2318c7b3dcf918f9c008144e521a1b939306b6e2ef7d478f7746a434722086533484651c4a69b5956f3ec0c4da8fe96e0669548125ae6382f23bc0a83ae7af31c7271ed1dd2b7c792026772411d5deabacee58ce335f7f368cc1342b70a933c2871fc71a07a6bd181e132a674d31736d6bb2cba7c35f491001b32bb4ce9a157f40f696cbcca1bf5de9ce95042f7088a3fd35ff777065d9f9ad09860784a990f7d2fd2fcd2b30ef219ae3cdb8e92fb843c64abe619db490d19230a1fea6b851fc079265eccce108402512a0ba02cf0fc0f3e64d0aae5bee23aaa53dae89ca0d86c930520bfbfd20873b0b79e08e0e405a5592947cbb7808b340b7889530a3819c21071d8ccbe1a60c8ec30049a4552ca4b0e790edb73337ae152883141cf198660d45e69cd12ed571753ba639c1e8c3889c41eac7179c5e574d9d95e78a2923fb576b0635b47f5b615a0e492c806d42884c2fdf477f2ee6b2b2a9d281dc3ff11563b6f86b697a8494f9ac3ba90e8ac4f8b9cc1e5d41938be45a368f126a6d1fda03d60a3d622dc75e776be4e90c2d2c6e6d6a009505e345fe949e1310334fcb0747f28dae2856759de102ab66b722cb490c3b6a0d586bb9dfc845b236cd88877065f84483e3bea2153b4b831c34c3055a449d1cc40adc7e874d81fae1ab82c35ce2a0a84cae7141a582eca2b26e94fce81b0f8d115921fdaeee8ed6c5f2f8ba09da74658bc3f1cabeccfc908a891b04354b2d9bafdf8fea757bab853b1cac4c7df00b2256460e95c7193a028e1917dce5a517d0766fad40dd7abb8dfc75b687bf505cea3bf4a099a14f67ed23b18b15d94ab6def9ab2eafab299f858750ada144f1ad8aa9e42828bbe7dd063003eee8189bda802c3e35623236807dc79ef77f294376add03f2970d4fa96ea0fdd4fa12235fe0f36703db6976777df545a48790a918cb27dc48e3017e5baae6c4a0917794cb58892c0b0361499056ffefb9a7a4a3de3b3044d3618f9c277719126154309e80944c93f907bff96183db70e139d0887c167d4ed6047f8c24a4e703ec34feb912fcc11dd1f8b605914b19fd67e4bf66a19b57b1785b1b0664b81a6cd2946d6d975091465cef959e073fb2ebed32d043b06727f31d316ff152731ab8d7b39d0cb8b225676c8487997f15132b44256786f2b0cb73950832080a884d31c1a66b6afa1792e427bac44a074273293fb9a1c9f7eafb75ceec91121930cf0e5e58ee17eb0afb848744651f08d895e5ea0eea2ec6e692cd11e988fd8ceb24c996fc3fe2244f9a8c0a9e09b39ea53083ba528ddb4c7d4366aead52621621b03d9c037bb0e302a80bc4bd241b4c28ed1fe72a0e4738e9c2da636b9bda1be63f446cea1e158a6010210a214b120e06fd3e478982c43f588917d1d0fbd902af162b0d096b8d0de22cfe0d0e9e28f8defb07ed3ea9566aa218619912817b9c48f2876de538f9e8914d01ed80e90541a91004b6b5cb86dc9855fc5930f1580a7878088be094b0146a1cd7b177d7b250c265e27a65b154e24f193a7ef85682f7ebc62a0bbe64aea8322d23b9784eb36af0b639c9738ad35cd71f5cb79b3acea344a48ae19f0321a8f2c8863fdc7c7efb652cd25eb62a3120ebe02c0450c30735b839c813427a20da414c79a46a3304f60b896a6b3da0bb0b63c590d16593e70f0e13cc70b7bb6cbb927fa47699e24841fb7c297355fd24f40c835d42c2fe873f8eec453cf784f32af74f6596f6f832397eab7f15c793af1a06a2dfed2910533b65a78a78a422cee268c7c30e91e3b88333dc55b86c9c472d007f86d5762f6f461117dca84de98d76fbf811c4179dfd9775d3aa635e005f4d8fa251cdd4c8b50987f5eb15bf1653b6cb7dab9742ddf9b1faaebf1ceadf760731dcb3e3028f9e89c156fad6cdc22f91501b7eb343884cd47243de731000d4628ec0620458e4bd2226e25fc922e8e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855mods-config/preprocess/hintsmods-config/preprocess/huntgroups../mods-available/always../mods-available/attr_filter../mods-available/cache_eap../mods-available/chap../mods-available/date../mods-available/detail../mods-available/detail.log../mods-available/digest../mods-available/dynamic_clients../mods-available/eap../mods-available/echo../mods-available/exec../mods-available/expiration../mods-available/expr../mods-available/files../mods-available/linelog../mods-available/logintime../mods-available/mschap../mods-available/ntlm_auth../mods-available/pap../mods-available/passwd../mods-available/preprocess../mods-available/radutmp../mods-available/realm../mods-available/replicate../mods-available/soh../mods-available/sradutmp../mods-available/unix../mods-available/unpack../mods-available/utf8../sites-available/default../sites-available/inner-tunnelmods-config/files/authorizeservice  @rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdradiusdradiusdradiusdradiusdrootrootradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdradiusdradiusdradiusdradiusdfreeradius-server-3.0.21-150200.3.12.1.src.rpmconfig(freeradius-server)freeradiusfreeradius-serverfreeradius-server(x86-64)radiusd @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@     /bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/perlconfig(freeradius-server)coreutilsfreeradius-server-libslibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(GLIBC_2.2.5)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libct.so.4()(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libfreeradius-dhcp.so()(64bit)libfreeradius-eap.so()(64bit)libfreeradius-radius.so()(64bit)libfreeradius-server.so()(64bit)libgdbm.so.4()(64bit)libmemcached.so.11()(64bit)libodbc.so.2()(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libssl.so.1.1(OPENSSL_1_1_1)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)opensslperlperlpwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd3.0.21-150200.3.12.13.0.215.26.13.0.4-14.6.0-14.0.4-14.0-15.2-1icradiusradiusd-cistronradiusd-livingston4.14.1ct`@_@_FN^y@^p^h^@\\v{\u*@[<[2*ZZWQYY@YlY, @XO@X@X*Xh@X.@W@WiV@V.Vf@UĝU@U@UU8U7@TZ@TTT~@T|X@adam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.dejcnengel@gmail.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.com- CVE-2022-41859.patch: fixes information leakage in EAP-PWD (bsc#1206204, CVE-2022-41859) - CVE-2022-41860.patch: fixes crash on unknown option in EAP-SIM (bsc#1206205, CVE-2022-41860) - CVE-2022-41861.patch: fixes crash on invalid abinary data (bsc#1206206, CVE-2022-41861)- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)- freeradius-server-radiusd-logrotate.patch: move logrotate options into specific parts for each log as "global" options will persist past and clobber global options in the main logrotate config (bsc#1180525)- freeradius-server-radiusd-logrotate.patch: fix permissions in logrotate global section (bsc#1170505, bsc#1174905)- update to 3.0.21 (jsc#SLE-11896) Feature Improvements * New stored procedure for allocating IPs with PostgreSQL Rates of 1500 IPs per second are now possible See raddb/mods-config/sql/ippool/postgresql/procedure.sql * Add SQL IP pool support for Microsoft SQL Server See raddb/mods-config/sql/ippool/mssql/ * Added RCNTEC dictionary. Closes #3168. * Added Pica8 dictionary. Closes #3179. * Add TLS-Client-Cert-Valid-Since attribute holding not Before date Patch from Boris Lytochkin. Fixes #3157. * Generate attributes containing unknown OIDs See raddb/sites-available/tls * Update the WiMAX dictionary. * Added ability to rlm_python(Python2) show a stacktrace from errors. #2979. * Add WiFi Alliance Policy OIDs. See raddb/certs/xpextensions * radmin now shows coa stats, too. * Sample schema extensions for summarizing data in SQL See mods-config/sql/main/*/process-radacct.sql * Update dictionary.aerohive, dictionary.fortinet, dictionary.arista and dictionary.erx. * Added VAS Experts dictionary. * Many updates to RPM and jenkins builds from Matthew Newton. * Added %C (time now in seconds) and %c (microsecond component of now) back-ported from the "master" branch. * Add reload capability to systemd unit file in Debian and RedHat. * Increase timestamp precision in postauth to maximum supported by each database and simplify (and make more consistent between drivers) the timestamps in SQL queries by using expansions. * Option to set dictionary path in raduat script. Bug Fixes * Various fixes found by PVS-Studio. * Set permissions of certificates in bootstrap shell script Fixes #3132. * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141. * Skip processing proxy reply if there are no home servers available. * Update SQLite IPPool queries. Fixes #3177 * rlm_sql_unixodbc fixes. Fixes #2822. * Fixes when building with LibreSSL. * Fix the rlm_python3 build. Note that this module is experimental. #3183. * The rlm_python should append the 'python_path' paths in 'sys.path'. It fixes the expected behavior to use the existing Python modules Fixes #3180. * Fix rlm_python to print the script errors properly. * Bound total query time for PostgreSQL. Fixes #3253. * Many fixes to Oracle sqlippool. It now does 500 IPs per second without any tuning. Fixes #3270. * Reference sqlippool by it's correct name. Fixes #3272. * Revert 3.0.20 patch which caused crashes on duplicate clients. * Update WiMAX-MSK attribute. Fixes #3280. * Fix crash when trying to access non-existant regex capture group. * Use timestamps (request or server) rather than SQL NOW() in accounting queries so that these are stable when replayed from a file buffer. - freeradius-python3_patches.patch: upstreamed- update to 3.0.20 (bsc#1146848) Feature Improvements * Added Force10 dictionary. * Update dictionary.hp with new attributes. #2690. * Update dictionary.aruba with new attributes. #2696. * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456) * Relax OpenSSL version checks, now that their API is both public, and stable. * Note that tls_min_version/tls_max_version also support "1.3" Since there is no standard yet for EAP with TLS 1.3, it will not work. * Added tripplite dictionary from #2760. * Switch to the async interface for rlm_sql_postgresql so that we can enforce query_timeout. * Added new LDAP option 'allow_dangling_group_ref'. * Updated documentation and functionality for EAP session caching See "cache" section of mods-available/eap. * Tighten systemd unit file security. Fixes #2637. * Disable TLS 1.0 and TLS 1.1 support in the default configuration We STRONGLY recommend doing this for all installations. * Add expansions for *outgoing* Radsec connections "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. Fixes #2839. * Add %{listen:tls} which returns "yes" or "no" for TLS or non-TLS connections. * Update dictionary.lancom with new attributes. #2847. * Added rlm_sql_mongo. See raddb/mods-available/sql. Note that this module is experimental. * Added more documentation in sites-available/robust-proxy-accounting. * sqlippool now re-allocates unexpired leases, to prevent IP pool exhaustion when clients perform multiple reauthentication attempts * Add support to radmin keep the history in ~/.radmin_history. * Add support for ENV and LD_PRELOAD in radiusd.conf. See the new ENV sub-section of radiusd.conf. * Update dictionary.aptilo. #3002. * Update dictionary.airespace. #3039. * Add sites-available/coa-relay, which makes CoA easier #3045. * Add example stored procedure for IP Pools in MySQL See mods-config/sql/ippool/mysql/procedure.sql * Update dictionary.dhcp dictionary with the recent hardware types. * Add experimental rlm_python3. This should largely work the same as rlm_python, which was Python2 only. * Add Dockerfiles for Debian10 and CentOS8. * Add RPM spec file compatibility for RHEL/CentOS 8. * Notes on certificate constraints. See raddb/certs/server.cnf. * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585. Bug Fixes * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627 * ERX-Acct-Request-Reason is "integer". Closes #2635. * Fix a slow memory leak in the file management code. * Try to fix file permissions if they get modified while the server is running * Fix slow memory leak with clients. * Fix request and connection timeouts in rlm_rest. * Fix systemd issues. * Fixes from clang analyzer. * Fix missing include for the dictionaries: alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn, audiocodes,avaya,bristol, columbia_university,freedhcp,garderos, infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus. * Fix internal sanity check when running with "-Xx". * Allow "inner-tunnel" virtual servers to work better with "accept" and "reject" policies. * Fix dictionary.huawei data types for Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address. * Framed-Interface-ID in postgresql/queries.conf is string, not inet Fixes #2817. * Fix rlm_cache to complain on unknown attributes in the "update" section of its configuration. * Add configure checks for -latomic. This helps on armel, mips and mipsel. Fixes #2828. * Add support to Oracle 19 and 18. Via #2857. * Add support for decoding tags in rlm_rest. Fixes #2848. * Use correct passwords when updating CRLs in raddb/certs/. * Properly separate "originate-coa" packets when accounting packets are read from the detail file reader. * Use the correct virtual server for pre/post-proxy. * radsqlrelay fixes backported from "master" branch * Fix DoS issues due to multithreaded BN_CTX access (bsc#1166847, CVE-2019-17185) - disable python2 for SLE15 and Factory - freeradius-server-enable-python3.patch: enable Python3 module - freeradius-python3_patches.patch: backport python3 fixes from upstream - freeradius-server-opensslversion.patch: updated- Enable memcached driver on SLE15- Add missing BuildRequire on samba-core-devel required for windbind support in rlm_mschap.- update to 3.0.19 (jira#SLE-5890) Feature improvements * Update dictionary.cisco * Update sqlippool to allow for stored procedures with PostgreSQL. This increases performance substantially. Patch from Nathan Ward. Fixes #2540. * Re-added "show client config" command to radmin. * Cleaned up mods-available/sql example so that it is easier to understand. * Added pfSense dictionary. Closes #2581 * Update dictionary.h3c Closes #2592 * Update elasticsearch/logstash config for v6.7.0. * EAP-PWD security fixes from Mathy Vanhoef. See http://freeradius.org/security/ (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664) Bug fixes * Update dynamic_client module and server core so that the functionality works. This has been broken since at least v2. * Fix crash in sqlippool due to escaping changes. Patch from Nathan Ward. Fixes #2532, #2533. * Fix systemd notify, watchdog and unit files. Fixes #2541, #2499. * Fix erroneous length check in EAP-FAST. * Update documentation to remove old "ignore_null" configuration. Fixes #2578. * Fix default POD port. Should be 3799. Fixes #2591 * Correctly encode vendor-specific "encrypted" attributes. Fixes #2600- reformat changelog mostly by wrapping lines - add missing bug numbers for security fixes- update to 3.0.18 * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss. * Do-Not-Respond policies can now be set in the "post-auth" section. * Encode / Decode ADSL Forum DHCP options. * Fix module ordering issues. e.g. when "sqlippool" needs "sql". See the "instantiate" section of radiusd.conf. * Add Big Switch dictionary. Fixes #2252. * Add sql_session_start policy (raddb/policy.d/accounting) This minimizes race conditions when using Simultaneous-Use (#2257). * For rlm_perl, all variables are now tainted by default. See raddb/mods-available/perl, and the "perl_flags" configuration item. This change should only affect people who are using variables in insecure ways. * Allow "sqlcounter" module to be listed in "post-auth". * Add support for IPv6 attributes in SQL. Fixes #2280 * The server is better at handling fail-over for outbound RadSec and TCP connections. Fixes #2284. * The server is now more aggressive about retrying failed outbound RadSec and TCP connections. Fixes #2284. * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list. * Add expansion for Radsec connections. "%{listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. * Add notes on running "ldapsearch" using the parameters from the LDAP module. * "ipaddr" attributes can now be cast to "integer" type attributes in an "update" section. * Move main thread queue to using atomic queues. This should help with contention in high load scenarios. * Add "recv_buff" setting to listeners. For more details, see sites-available/default. * The sqlippool module can now use attributes other than "Pool-Name" to assign IP pools. The "Pool-Name" attribute is still the default. * The "unpack" expansion can now unpack substrings. See mods-available/unpack for documentation and examples. * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE. * Allow for -LDAP-UserDN. See mods-available/ldap for more information. * Add sanitizing of control list for moonshot. Fixes #2318. * Update rlm_sql_mysql to be compatible with MySQL 8 Fixes https://bugs.launchpad.net/bugs/1795310. * Allow logging of only Access-Accept or Access-Reject messages See radiusd.conf, "auth_accept" and "auth_reject". * Removed Connect-Rate comparison. It was unused and broken. * Add dictionary.infinera. * Use OpenSSL HMAC functions instead of local ones. * Some SQL modules can now use "auto_escape" to escape unsafe strings See mods-config/sql/main/mysql/queries.conf. * Add wispr2date conversion in mods-available/date. * Implement dictionary-based handling in rlm_python. Fixes #2334 See mods-available/python for details. * Add support for SKIP LOCKED in sqlippool. This can improve performance by an order of magnitude or more. See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383 * Allow PSK and certificates at the same time Except for TLS 1.3 which does not support that. * Update docker scripts. Fixes #2306 Patch from Matthew Newton. * Add crypt xlat. * MySQL connections can now skip verifying the server certificate. Fixes #2481. See mods-available/sql. * Add better mechanism to detect MariaDB (Old MySQL). * Add RFC 7532 "bang path" support for realms Fixes #2492. * Update dictionary.ukerna documentation. Fixes #2493. * Add support for systemd service and watchdogs Fixes #2499. * Check for openss/rand.h, and allow building without OpenSSL engine. Patch from Eneas U de Queiroz Fixes #2517. * The default PosgtreSQL queries now use "ON CONFLICT" to better deal with issues. This requires PostgreSQL 9.5 or later. Please use a recent version of PostgreSQL, or edit the default queries to remove "ON CONFLICT". BUG FIXES * The session-state list is no longer cleaned in the inner-tunnel. This lets the outer Access-Reject section access session-state. * Fix typo in lock initialization for TLS sockets Found by Sergio NNX. * Add check for crash when home server down Fixes #2233. * Add username key for postauth table. * Better libpcap checks, when the header files or libraries are missing. Fixes #2245. * Allow building with old versions of OpenSSL Fixes #2247. * Allow non-FreeRADIUS State attributes to be used with the "session-state" list. i.e. State length != 16. * Be more aggressive about cleaning up zombie children when running in debug mode. * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries exporting LDAP API functions. * unlock files when asked to unlock them. * return error instead of asserting in map code. * Don't write 0 bytes to SSL. Fixes #2270. * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262. * Various dictionary cleanups and consistency checks Fixes #2281. * rlm_python has stronger thread locking to prevent reported issues. Performance may be affected. * Don't allow Message-Authenticator to overflow past the end of a large packet. * Fix crash in sqlippool when SQL server goes away Fixes #2300. * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303. * Fix crash with CoA packets/ Fixes #2304. * Fix crash in rlm_exec with CoA. Fixes #2328. * Print errors while parsing the log config, and don't quit when deprecated log settings are found. * Fix DHCP encoder xlat so that it can be used with a list of attributes. It previously only encoded the first member of the list, and now encodes all members. * The "expr" module now skips more whitespace. * Remove internal FreeRADIUS-Response-Delay attributes from attr_filter Access-Reject. * Don't send junk to redis when maximum args reached. * Small updates to IPv6 for accounting schema Fixes #2364. * Fix OpenDirectory integration in rlm_mschap. * Fix slow memory leak with dynamic clients. * Don't artificially truncate debug output for long strings. * Fix memory leak in EAP-PWD. * Fix crash in "hints" file with Fall-Through = yes. * Fix crash / timer issues with many CoA packets. * Fix attr_filter so that it does not treat vendor attributes of number 26 as Vendor-Specific. * Fix reconnect correctly in rlm_sql_mysql. * Fix rlm_cache to properly use Cache-TTL < 0 Fixes #2485. * Fix rare occurance of bad xlat expansion. * Check for rare race condition when a proxy reply arrives too late.- install license as %license instead of documentation- also fix ownership of /var/log/radius in systemd unit- update to 3.0.17 Feature Improvements * Add CURLOPT_CAINFO. Patch from Nicolas C #2167. * "stats home server" now supports "src IPADDR", to specify home server also by source IP. Fixes #2169. * Add Dockerfiles for a selection of common systems. * Increase number of permitted file descriptors, for systems with many home servers. * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs Patch from Isaac Boukris. Fixes #2205. * Update main READMEs. Patches from Matthew Newton. * Added dictionary.mimosa. Bug Fixes * Don't call post-proxy twice when proxying to a virtual server. Matthew Newton, #2161. * Use "raw" string value for shared secrets and dynamic clients It now parses strings with backslashes and "special characters" correctly. Fixes #2168. * Fix RuntimeDirectory for RedHat, from Alan Buxey. * Relax checks in 'if' parser from Isaac Bourkis. * Minor cleanups for %{debug_attr:&request} from Isaac Boukris. * Be more aggressive about cleaning up cached certificate attributes, due to deficiencies in OpenSSL. Reported by Nicolas Reich. * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall. * Fix double free in rlm_sql. Fixes #2180. * rlm_detail now writes empty Access-Accept packets. * rlm_python can now create tagged attributes. * Don't crash on duplicate realm + authhost / accthost * Allow partial certificate chain to trusted CA. Fixes #2162. * Treat SSL_read() returning zero as error. Fixes #2164. * detail writer now checks if the file was renamed or deleted. * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name. * RedHat Systemd updates. Fixes #2184. * Use correct API for State variable in rlm_securid. * Remove broken radclient option "-i". * Fix "users" file (and hints, etc). So that it does not get confused about entry ordering with multiple $INCLUDEs. * Fix rlm_sql to expand the un-escaped string, not the raw string. * Link default and inner-tunnel only if they exist. Fixes #2206. * Don't use both IP_PKTINFO and IP_SENDSRCADDR. * Always install signal handler for SIGINT (needed by Docker). * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs which are not self-signed will now be checked. * sqlippool now returns "fail" if it fails IP allocation. * Fix rlm_yubikey to look for correct attribute in replay attack check.- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. (bsc#1099802) * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes for issues found via fuzzing by Guido Vranken (bsc#1049086) https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682/bin/sh/bin/sh/bin/sh/bin/shfreeradiussheep14 1670847468  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~     3.0.21-150200.3.12.13.0.213.0.21-150200.3.12.13.0.21-150200.3.12.13.0.21    !"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""#$$%%%%%%%%%%%%%%%%%%%%%%&&&&&&&&'()))radiusdradiusdraddbREADME.rstcertsMakefileREADMEbootstrapca.cnfclient.cnfinner-server.cnfpasswords.mkserver.cnfxpextensionsclients.confdictionaryexperimental.confhintshuntgroupsmods-availableREADME.rstabfab_psk_sqlalwaysattr_filtercachecache_eapchapcouchbasecountercuidatedetaildetail.example.comdetail.logdhcpdhcp_sqlippooldigestdynamic_clientseapechoetc_groupexecexpirationexprfilesidninner-eapippoollineloglogintimemac2ipmac2vlanmoonshot-targeted-idsmschapntlm_authopendirectoryotppampappasswdpreprocesspython3radutmprealmredisrediswhoreplicatesmbpasswdsmsotpsohsometimessqlsqlcountersqlippoolsradutmpunboundunixunpackutf8wimaxyubikeymods-configREADME.rstattr_filteraccess_challengeaccess_rejectaccounting_responsepost-proxypre-proxyfilesaccountingauthorizepre-proxypreprocesshintshuntgroupssqlcountercuiippoolippool-dhcpmysqlschema.sqlschema.sqlpostgresqlprocedure.sqlmainmoonshot-targeted-idsmysqlqueries.confschema.sqlpostgresqlqueries.confschema.sqlsqlitequeries.confschema.sqlunbounddefault.confmods-enabledalwaysattr_filtercache_eapchapdatedetaildetail.logdigestdynamic_clientseapechoexecexpirationexprfileslineloglogintimemschapntlm_authpappasswdpreprocessradutmprealmreplicatesohsradutmpunixunpackutf8panic.gdbpolicy.dabfab-traccountingcanonicalizationcontrolcuidebugdhcpeapfiltermoonshot-targeted-idsoperator-namerfc7542proxy.confradiusd.confsites-availableREADMEabfab-tlsabfab-tr-idpbuffered-sqlchallengechannel_bindingscheck-eap-tlscoacontrol-socketcopy-acct-to-home-serverdecoupled-accountingdefaultdhcpdhcp.relaydynamic-clientsexampleinner-tunneloriginate-coaproxy-inner-tunnelrobust-proxy-accountingsohstatustlsvirtual.example.comvmpssites-enableddefaultinner-tunneltemplates.conftrigger.confusersradiusdradiusd.serviceradiusd.conffreeradiusproto_dhcp.soproto_vmps.sorlm_always.sorlm_attr_filter.sorlm_cache.sorlm_cache_memcached.sorlm_cache_rbtree.sorlm_chap.sorlm_counter.sorlm_cram.sorlm_date.sorlm_detail.sorlm_dhcp.sorlm_digest.sorlm_dynamic_clients.sorlm_eap.sorlm_eap_fast.sorlm_eap_gtc.sorlm_eap_leap.sorlm_eap_md5.sorlm_eap_mschapv2.sorlm_eap_peap.sorlm_eap_pwd.sorlm_eap_sim.sorlm_eap_tls.sorlm_eap_ttls.sorlm_exec.sorlm_expiration.sorlm_expr.sorlm_files.sorlm_ippool.sorlm_linelog.sorlm_logintime.sorlm_mschap.sorlm_otp.sorlm_pam.sorlm_pap.sorlm_passwd.sorlm_preprocess.sorlm_radutmp.sorlm_realm.sorlm_replicate.sorlm_soh.sorlm_sometimes.sorlm_sql.sorlm_sql_freetds.sorlm_sql_null.sorlm_sql_unixodbc.sorlm_sqlcounter.sorlm_sqlippool.sorlm_test.sorlm_unix.sorlm_unpack.sorlm_utf8.sorlm_wimax.sorlm_yubikey.socheckradraddebugradiusdradminradrelayrcradiusdfreeradius-serverCREDITSChangeLogfreeradiusdictionarydictionary.3comdictionary.3gppdictionary.3gpp2dictionary.accdictionary.acmedictionary.actelisdictionary.adtrandictionary.aerohivedictionary.airespacedictionary.alcateldictionary.alcatel-lucent.aaadictionary.alcatel.esamdictionary.alcatel.srdictionary.alteondictionary.altigadictionary.alvariondictionary.alvarion.wimax.v2_2dictionary.apcdictionary.aptilodictionary.aptisdictionary.arbordictionary.aristadictionary.arubadictionary.ascenddictionary.ascend.illegaldictionary.asndictionary.audiocodesdictionary.avayadictionary.azairedictionary.baydictionary.bigswitchdictionary.bintecdictionary.bluecoatdictionary.boingodictionary.bristoldictionary.broadsoftdictionary.brocadedictionary.bskybdictionary.btdictionary.cablelabsdictionary.cabletrondictionary.camiantdictionary.checkpointdictionary.chillispotdictionary.ciscodictionary.cisco.asadictionary.cisco.bbsmdictionary.cisco.vpn3000dictionary.cisco.vpn5000dictionary.citrixdictionary.clavisterdictionary.cnergeedictionary.colubrisdictionary.columbia_universitydictionary.compatdictionary.compatibledictionary.cosinedictionary.dantedictionary.dellemcdictionary.dhcpdictionary.digiumdictionary.dlinkdictionary.dragonwavedictionary.efficientipdictionary.eltexdictionary.epygidictionary.equallogicdictionary.ericssondictionary.ericsson.abdictionary.ericsson.packet.core.networksdictionary.erxdictionary.extremedictionary.f5dictionary.fdxtendeddictionary.force10dictionary.fortinetdictionary.foundrydictionary.freedhcpdictionary.freeradiusdictionary.freeradius.internaldictionary.freeswitchdictionary.gandalfdictionary.garderosdictionary.gemtekdictionary.h3cdictionary.hillstonedictionary.hpdictionary.huaweidictionary.ianadictionary.ieadictionary.infineradictionary.infobloxdictionary.infonetdictionary.ipunpluggeddictionary.issannidictionary.itkdictionary.juniperdictionary.karlnetdictionary.kinetodictionary.lancomdictionary.lantronixdictionary.livingstondictionary.localwebdictionary.lucentdictionary.manzaradictionary.meinbergdictionary.merakidictionary.meritdictionary.merudictionary.microsemidictionary.microsoftdictionary.mikrotikdictionary.mimosadictionary.motoroladictionary.motorola.illegaldictionary.motorola.wimaxdictionary.navinidictionary.netdictionary.netscreendictionary.networkphysicsdictionary.nexansdictionary.nokiadictionary.nokia.conflictdictionary.nomadixdictionary.norteldictionary.ntuadictionary.openserdictionary.packeteerdictionary.paloaltodictionary.pattondictionary.perledictionary.pfsensedictionary.pica8dictionary.propeldictionary.prosoftdictionary.proximdictionary.purewavedictionary.quiconnectdictionary.quintumdictionary.rcntecdictionary.redcreekdictionary.rfc2865dictionary.rfc2866dictionary.rfc2867dictionary.rfc2868dictionary.rfc2869dictionary.rfc3162dictionary.rfc3576dictionary.rfc3580dictionary.rfc4072dictionary.rfc4372dictionary.rfc4603dictionary.rfc4675dictionary.rfc4679dictionary.rfc4818dictionary.rfc4849dictionary.rfc5090dictionary.rfc5176dictionary.rfc5447dictionary.rfc5580dictionary.rfc5607dictionary.rfc5904dictionary.rfc6519dictionary.rfc6572dictionary.rfc6677dictionary.rfc6911dictionary.rfc6929dictionary.rfc6930dictionary.rfc7055dictionary.rfc7155dictionary.rfc7268dictionary.rfc7499dictionary.rfc7930dictionary.rfc8045dictionary.rfc8559dictionary.riverbeddictionary.riverstonedictionary.roaringpenguindictionary.ruckusdictionary.ruggedcomdictionary.sangomadictionary.sgdictionary.shastadictionary.shivadictionary.siemensdictionary.slipstreamdictionary.sofawaredictionary.softbankdictionary.sonicwalldictionary.springtidedictionary.starentdictionary.starent.vsa1dictionary.surfnetdictionary.symboldictionary.t_systems_novadictionary.telebitdictionary.telkomdictionary.terenadictionary.trapezedictionary.travelpingdictionary.tripplitedictionary.troposdictionary.ukernadictionary.unixdictionary.usrdictionary.usr.illegaldictionary.utstarcomdictionary.valemountdictionary.vasexpertsdictionary.verizondictionary.versanetdictionary.vqpdictionary.walabidictionary.waveriderdictionary.wichorusdictionary.wifialliancedictionary.wimaxdictionary.wimax.alvariondictionary.wimax.wichorusdictionary.wisprdictionary.xediadictionary.xylandictionary.yubicodictionary.zeusdictionary.ztedictionary.zyxelfreeradius-serverCOPYRIGHTLICENSEcheckrad.5.gzclients.conf.5.gzdictionary.5.gzradiusd.conf.5.gzradrelay.conf.5.gzrlm_always.5.gzrlm_attr_filter.5.gzrlm_chap.5.gzrlm_counter.5.gzrlm_detail.5.gzrlm_digest.5.gzrlm_expr.5.gzrlm_files.5.gzrlm_idn.5.gzrlm_mschap.5.gzrlm_pap.5.gzrlm_passwd.5.gzrlm_realm.5.gzrlm_sql.5.gzrlm_unix.5.gzunlang.5.gzusers.5.gzradcrypt.8.gzraddebug.8.gzradiusd.8.gzradmin.8.gzradrelay.8.gzradsniff.8.gzradsqlrelay.8.gzrlm_ippool_tool.8.gzradiusdradiusradacctradius.logradutmp/etc/logrotate.d//etc/pam.d//etc//etc/raddb//etc/raddb/certs//etc/raddb/mods-available//etc/raddb/mods-config//etc/raddb/mods-config/attr_filter//etc/raddb/mods-config/files//etc/raddb/mods-config/preprocess//etc/raddb/mods-config/sql//etc/raddb/mods-config/sql/ippool-dhcp//etc/raddb/mods-config/sql/ippool-dhcp/mysql//etc/raddb/mods-config/sql/ippool-dhcp/sqlite//etc/raddb/mods-config/sql/ippool//etc/raddb/mods-config/sql/ippool/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids//etc/raddb/mods-config/sql/moonshot-targeted-ids/mysql//etc/raddb/mods-config/sql/moonshot-targeted-ids/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids/sqlite//etc/raddb/mods-config/unbound//etc/raddb/mods-enabled//etc/raddb/policy.d//etc/raddb/sites-available//etc/raddb/sites-enabled//run//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/freeradius//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/freeradius-server//usr/share//usr/share/freeradius//usr/share/licenses//usr/share/licenses/freeradius-server//usr/share/man/man5//usr/share/man/man8//var/lib//var/log//var/log/radius/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:27107/SUSE_SLE-15-SP2_Update/ea436a6cecae00bf250af9f8b03f03e5-freeradius-server.SUSE_SLE-15-SP2_Updatedrpmxz5x86_64-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@?AABBBBBBBBBBBBBCBBBBBBBBBBBBBBBBDDASCII textdirectorymakefile script, ASCII textPOSIX shell script, ASCII text executableUTF-8 Unicode textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5e3856e2389eff2ad9bb8d8af59741a54d1119ff, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9797d6fdc42d9fbf98e17f87253fed30c7804247, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2055f7ac163ef3c69a6281722cefb62ddc37658d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b39fad827a25441a5dadb8cf6308140047c3747e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f9a12303b33e60ad0b615e9347dcff6b5cbc4c45, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ecbed8780e4c476f2d11230383f8284bae9af202, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1a7dab1b5e2ef844222106417aead9bd787dfd12, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a289dd229903c0396bb549215a5223061d1fea16, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d6a9c2ed4a212bda1e808fa62194d0a36068c62a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5ec96c8269528bb1bd7b0c00a1c9906edb7a9921, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2194285039db13f922e8a2eccfd83f959bedda3f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=eac19ea37b7eebf1930260c48cc5cbc537e5f27a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2432cf76e130d88364701ed27314afe019fb5b8e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d6ea631684e8df86e5ef341f43169a4cb5136592, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4fcabb205f953203e5722596482d3aec453dd686, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6fe7737d483124a03927e6690786eae705b8dabb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ef843186a89aee1504bcc0b37273d6d3b6e6bb49, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3edd88e905d6efd8d0eb1fecef012c4347f1914c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c854464266b88534ace71d5bccb22686592b22db, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9b1a6d0ff2f680fc33c045ce7cb5820aecf975c5, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4831cfb89a39559ba0be80ac67304e6585634cef, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9d18e7717572fc2da0d09b3d037bd09e6a098515, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d30d24cbf2c5fe8bbbbaa3a649a9788e105a05d1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bb7361cbeac4b221a028785f8f0bc06981a376b8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a7a7fdfe47625939213fbe22e46846af4c06ca48, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4074cb4482f49c69fd60816570ba9dbf184127ea, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1ed90b7e133547e05ffcf20012a41f0815a8b9f3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d6da9099c9e785591e3a815d625d328f7b780ce2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9a54881d98692801ad89f9c5f097921e8de87ef1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5805b6f094dfc376f5b67d45c7f169ba9cb17eeb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b16bfe2ccb12846c8d73decf02a78d4bd86a9d6f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=36d57ae0265c031d6eaa5838fd6d9563cea2797f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=716698a5e36394988e099fefdf3d65b30ca50074, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=048a5948aad0436b503740645a725bc1453114a6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ef08bd5d36d9d8a5aa25c05c98d364385761bbe8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dbdf2f1180b4e8d002ae8e644fd535fbea96764a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e96d2a243add1d18ea8c990995d236b5abc12df0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=54bbd7baf2d9be31c44c33e13250925b4f8171df, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=63ddeb224350dd7994c913e1cb6071183020e49c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=234c9f2f289c48dd398d029e40d96f52efe162df, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c8d57f03d5ff5f9395e1e5dabb0f8be7003b8993, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0cd5b80745a31b670106c7a33cc41b64e061916d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=29ee3bcd6be78c80bbc9a4513d6abdf27ba680e3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5e846cd01a37746cb270cab7aa89b51ac9a72f8a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1caf012d327ddbb9a0060c7bde328bbe809b7d31, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6629f33345764aa14d50d1c8edb45ceb98f5c49f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1bd531dbe23845d8c64d434556b580219a9a41a1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=da4ca98cbcc9b5879b65c48451b89aee79d11181, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dc3b8372099e9b6a764395d0d28ad788d017580f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0053276cbc72c6bc527eb9b52819754f10d89988, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4b2fa7874a78c88d742a544c2a50bc57c3c26318, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=77b370ad0dbe50e796f0a611ad495b9886274a70, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c14028791c992889fb44e7a0fb3d2c1445c898e1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3f3ce8f3c62e407b8c6c34817ce33495afc91883, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=34293bdf24ef0ef2e192ff1eb4bcdfe86a399847, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d76e8e357cb6eb1e332a3f4c241e95f563e4b8ae, strippedPerl script text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=0cc7ec18bcf38ce69682dbdf8cc16f34696599b0, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=9a367e826c6c9a48831a201bec545fe44d3c5c93, for GNU/Linux 3.2.0, strippedAlgol 68 source, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)empty  #)-04:?CIOSW\`fkqtz}  RR RR R RR R R R R RR RR%R RR$RRR RR R RR R%R R R$RR R RR R R RR RR R RR R R R R R RR R R RR R RR R R RR R R RR R R R RR RR R R RR RR R R RR R R RR R R R RR R RR R R R R RRR R RR RR R R RR RR R RR R R RR RR RR R R RR R RR R R R R RR R RR RR RR R R R R RR R R(R'R RR R R R&R RR R R%R RRR$RR RR RR R R RR R RR R RR R RR R RR R R R R R R R R R RR R R R RR RR R R RR RR R RR R R R R RR R R R RR R R R R RR R R R R RR R RRR R R R RRRRR#R"RR%R R R RR R RRRR!R$RRRR R%R RR R RRR$RR RRR#R"RR%R R R RR R RRRR!R$RRRR ۀzQ:logrotateutf-82daf77bf32e2686cf029cea249730dee54da5c49fe7ed4f4ba727ec5366711e1?7zXZ !t/']"k%܍{ȳ>C9%7, [¶}a)X)c[~m&U+YF3|Nٚ;ֱ3g.QZ2M?:3((MįꨈGvF)()났b&1&3N\,%>r@}yrV\# ]lmv.YvZ(l}&xQPS>YvZz&u8 A.i?5gz2+aA7ˆͷG|v?6[[/AdqdMtGf#W6O4]֔Gs̓KH?'yyы4.d|* Xp'&lex2rfeANQ垑zN7 KYXb̄.EE&!_e&waOÿAV-܆S'_I‘ID-ՔEq̶=Pc3ێh9ď\עuy<u!WnA5+sAj=!N $_8kNe>83r̞[W1/oxʞ{Z>/: rFOoJ_H_vM8&$N?II.vt6WҎ/g7̴ќ*:DR6iL1Ub/g>e !%cj0[Gp *⏎ם`qΫ-0CUvJS${-6 *"KG>~q=!$!jpy f ěbYer8 :K.}!Qyq;FI%*CS`9y_T;nn^PTg ]q55ga'T1݃8)cK\M+WIQlkRP0.n=שvw~|eA<цS*M! uƱ&߀XG,o3il.B?u1B,mGS 3*ёh:{:Srgv*V$ܕcuL?ȆN89.$)Z!?ǫ#G4mgiY3Χ8չS !H!4ԃ(]( x]Eءfn*:wВ$p\6@([?^Sw3o*nmśʒ] 4瑄@_r a}pgE8 (n }\hf\mPkߐ5%%ⶠ,Y3l},NRjZ䪔5(+A,2t3"aQ0lNQX?Pj2ԏXMFtqɡ0f9 ó@!W[6a).1]6n_^B 2?I:Jm(h1}Rdsx1nN'y)Q Ba+ kU~sDxmUkMCu-z* ` =8- /yy0Sl쐐J{^Du73XHÂ]ۺT#IdUMH*& RĪsֵ ̧鳙2ϠW#!?x{gvdO'&3УGMzYlv:g:K>-Sq,lb?_l2waH9hW)Hj2"pŸMOxʪuL Fcgu4ax'a;TM/[ }nBRûpbEX_f *aqxC $ PXP tXa(%NhC; 'j.+`A_z=VF&9jj`  }|C17-/ lU4!`eDе&UjPIk]Ǚ! ޘ5#8ݜ]e0' d˵11kM6~8Kpkm,^?"yܘY+v5-}2v =M8[VW)@] wܚP'V8dN=D+0r"ux/C?Aԍ$'}ғ1.}-f#750ٝ1z/ViZL+bVXeŽHUM@|8 ?.J7R5+A}֭okntM7~V~vDAR7Ȩ}.5a}Lu&+(ѫV mdiHv=VKt]š(Q];%cx1d3haC9BЖG!5!Fsq\PA}/\@{b};?DNǂ4,OEvӑn_ g.~3sԃVn{(/jzP@BBSBaAs1\~JY=!&]#;(؇>YV 0-8b๏?rzOR x!ce?(^ ٯZ"%8Io^s* =ALC')\E_rJEGPf}}ShHER WLآ6X䫩qu""yGzDݧ <^njJ,: TtH4|QRB,E>YS_NG"*cqQnPxW-cfNo?Iabքߝ}SHѱ4jiֈWbaXa/ `B/PA{G+zKSaC1LZov!EZ?jІn {s`ˋ#yn`W(4ŭ=,#1s8C?q96Wf> K.\O#F_GOy&" 맮~e7_)@&C06Ыn?֠mx&q}حg|Y>/T Oe`"0ȝx:rZ] ?5Y;ue(y`Hh+wS42\%$CަҭcXx8\!ƪ%|-XdF}$%$|9XAK$ER6w=,ui0Xb3jK?ɭ{9kyT|̜2$qEFX$ބPϔ_mWyq$%"Ym-H_79#óMьT;;NGs@׈SH]?%3D?>ǺZ=4mƅh+6ˉ$\N>C-PKWdvm̙ ¤"5pm(airh[ԕ$?&%&dJ6?Z,\1\++H)th۟`k "_h$ ba Ccǫęmo/g& yB=wD^~s|/߹Їv k&oQH/Dy/d $@5{@w0ng?͈&h,_ޘ8\ǂz6njȼRjdzZ >3}}zw u2Nڠ?/ZwAۡ{!Z0ttJyLģ7W@,w#t Ea">#z2'+SBL崱$ƊbWiRk]Ů{!~}ީvL#]QѲTFmJ>Ny +?_J3Y=1ڵǵqI1_6A Ϗ]nj'h'ip={k[ٟ?IׁCҰxXiRH&Ufݣ=vx] ]iJaT"AD[*+'^'}iȊ3W탎yÚ~2:i53[&qwt^꿹u&໇mj.fg'?,xr 5-H"A{$p]˘&ŭuH}9U}EbQ$uffk)&$EHTgΞ'&Z+N 鍱J]-bRG*TuM~&0˜7Bk{v]A3481@RFGJ y+/مDgC€ 2*K~(KwBk~Z7o_[ '~v|gqh^}xgPJ+6c7OZ 'HHL:j!R|q/BpFNH27dYj r~U-/ 7E/Gbnʥ J4~jg# U;ݜ:/~c6BN슎{p&0u+oSEJt,Q"P  v5i1L/H":-J[#F?3>W‚*`X".] a$†V:W)ʿEN}g{ܨӫ 2| FsߘPǶX,Xk`~(}<2J-A4w'8ES_bNXeDt0whYYkh?bRGp0݊5٥?n|v9%eBuy0}Nd7RĢ |?iX=>h3JQo)hiAQ YFp9Lz?:"h)ӮwZ[Ѽ)O_AR+I6PN)zTJ|˔M0!ZxCc^ٍB.D;DKIB*tw,,%0 n3 865DۣLu HnOKtNӡiI\:2*RK@l]E/"ZQ8ߋ:n[X.)#KGO|lvHdLY$::xM. B])8hiE td^ʲ<=mp?Pm+e(uSA[nr!T+ViX)%:Mĵwk_ J`~*}aB[Ax|_3}D]~*8q;04UBfz53 ViӉRjT֤>j=ŇLBOM:mZP5:gϯzZ [{DnJS<^gCZvnsA8Ջ zu=Ff9,d6L 3N.APS8B"G`EW> bǛK ۱&NΒ67 JPG~د"j]_$w*11}IEEGxm3"_Q陗Qfj(JHO FLJ1̞m{Xp) 3Z p?mf1~k!_LdWS!-zah.)_ԫҫ?h18qBK8"_ Cw[ZީjU p`VsWtؒJVAN17B+,vVuX/wjij '_i]+4E6`[%/FsWp̨ EiBb]b:Rw"9@Kw^-;o ;i,t@kA"Cƞ_Īf C\HUXҴѰ(@04hAMœl5nJhp;8"*0-hMHP.n)#bcj*Hx9o1~TD{LDG 늂푢4HW7g, 3`/S80>" XVL&bzoK<_Xo`!;L޸cAʹtDrU= _"NZI`ln-)~3J/qE 75߱kSZGϴ>a(U)gMԩםAo1IrcF-W0N~.}qs`1TT8ݶzQ›O~N 8 חٛ8Հ,CV)K(A Ja3_oZRŒþҟ9-A^5RF+:`>oPJUZ˺rnψu;œb>7+:ϙYNfZ(l`z}VQbp%~dA r^wtMvCIQp,c4XH] RdbfoU%qCzA즇>U+2Gζ$@RqBx*1x!uW)"h:ɓқVXuH7(>7.3į](k04:עgyMrtBC𥉉eypD@-=Z9#_j90 -42fu qh쁓ΕA5lo\^*f N ANʆ=/eKYiyv&<5jcnP?٬#Q"ݯ. u;qj@T$ I4a{LeHA2c1 zʭB"z9 >0B:I?m:f1+ GAR芐>h.BFA?e&YE gM"8 #\\xN:I݃9oB:T2egVAځ'R3nf ܌cy~3Ʌlq{pV/A^k"i> /3}W×@{anKᩍQ#^ppɵ' y9&јzI+xYԛ Wd7ޞݷgѱ>&9WoऴU6et*"B3Ъ/`{9)Ee~VVD`YfL߇2ssNb. +U;BCrd-Ac I䈠q*Sw7{-8NW~ss@`)g3[n7Rr*\ 6Tml³uƚھfl@^:28IHk}y`  A{9YJLjd8)] "%zOO7~b+c fyr JgS|IW&Z!cV jBEOER{bl RG߫n)q>IO+!8OlŰ*yOJV3`O獩sC $h`<_O lkOfbѐ9`73f:Ym tW7ּ)@#\ MLa >iGBF)M>4fjSN˯g9/eh8wHeZdQC~lMh>5CIzU(֒ zː_}(fX'1]L;髛jᔌwӯWj[ ; ftA`4 y AN*4U$«6all1f3+;Pqt"JAxpVg_MC ιI4VhQx~rm4Xv5 Ԕ(,ߋj:s5$&/Y a/o8CL %_G+]H`;*Ŧww{9clۨJ9w}.Q[sPLMAIDygKN$H RB8+{^4T~НAM1c |  fVØ X]Qgr0vF׾118/ZY b&9' d^t!`O ٭Nӈ+XxWOwX֢ƬyJa%!O1!2`FCaT{8Ӽ1N@ x}2KsGspuuY,KAwM8}PrRlI RhY5@M ыH(@BOҟg 6>՛J2?<1ZqT$ݾ5 Z} 57xQ`ƟV$}O7 w_ƟmTh {1IASI%Ncfpf}wjJ30oQEm8v'eSB5#mT׃+r4rv4_RņI0TeN֮ ;6מB|}t8Im1#<4&,EM wg$Ydtc^ݙ'л?zYd]rK2Zװ iDL8I [n?QE9"hVƻW\n8a]{itoԤoQ>mm47Q{^ŷQp Ū%bTp_2Kh\.ݲ!&bA_]e@Q4<ƼQ (l0)!ü8q}g~߲C׫@kկVB ,E?=Q J+yNZ&&zg7uX ~22à!οzWŻŢۏJrcFa`oI5`ЉAp;!U[ 2.|0FE Kx tv`CiR~ൌ4fxd]fѾKtI/sp z9b<6{Loj.6Ċ@\vm$VN0.޺(TjӦh$3I[Ɂ,CVYzZ̷\ň+GX=J=OelYrFtiCh~ͩ& y@m[] ɪS5m u~? ?6VsAI QO yMoApGDtɻuPmrPIfll):ݐ1sի #>zTjL9kgr-;g0GFE0i͌0y. ЕN7>}SjGRԬ~́aQ0V 8oÉ>՗zlybVdnjݿL{VSh-V59?n3@Qcc%fHfsbhj2쎻YY}zʚR&{=>Zw)(WAFU5-ז5mwǤA1Z= :O ˄ 8hUD,FaF™JkOR/Y r6 h5S&ZFc@5L HDGd_mn:UL}L14/dы^qO[z1 r SvYR2bqP&{Bg.\%Υ3R\Ez-^ȴ2K(7՜"ngfb*q @V Z[['6) Ȗ= R`j 4@{@^j+EjQA, v3+1dSdww?1*~gഛcǶ}EtPrJK)\ϵvoY0Bv0@Q CWtm"<T;10ALLt-s!cڝ2[1(U`}pe?iFvT@)]Dk\A2g(id)zQjq~Eˉ7L^.667V<<4.LdQ]XX>Y kb7:i̜9ډ҄K^G޹UxA02]}!9oR NU9޻QW.UfhfK *T2=m#]JW=l+eZwP˷)afcsv7^yXh"da[R(p?a5"+F~ͺ2b'P 8_ƹbjU}jy5C n4>N-AEbإ8.\">ryP5T `@F|qҟFt.R@۠gDc{Ah# S~B  6H XNIݰ-54g) ?@,M~TU8kfQ٠JFP xYM!91HMJpe{euf{֩"%Q)"N36x><}f>>'_@kЂ?yՍ [s˳ެ u)pNh_7ٙy;w_*\ EV+C ytC]_>~dYsdpwN6m^rjBCh5W.+ЧyG%>S{pL}Wr ֟茖+nk{l]m*R+T/ JJ=sTZ R!Qd3Pʩ~/~BW;/9(VH7!vN;Z5ln_ Tk OH+D}S]I{*-f21jd-?e )Vo\yhk*pF/w !fbiup,,(OBE FGacƽ9 .+ͅA/[aE2ƆEe^؈[9MT7^U+q+z]U|`^MWqqVE`K^Yz7դz\`g\Q村 }͕:xhQ5l^9v*Ieu͘%)l~ ~R)Bu,pb7e}3ӊIT1))<Y:t湼ae5}<#ws.f=UN=Evx3(Q'Ui{{#؇>?3u_:ls@,7b`^[Jr/CLQ5z;ɴDUW(bkOڳtăW` N ;`G.Rb?RHTD~uls9&:bTa*?TG Iz)I50 ( o˕ϬPh+IeKfBSrtlV߁׊TKDTw {g񡏊%8(C5W܇/ܹVTy2:kp`?0r2xr0pEpSgNQSֶ֔L:Y;p1)O prSKbXfMv L[RSYZ/=RRboYhWZ葻\@@g|7 + vh ܮ,g0IcENЊR;Ea Y .F|wh$^ fPl׺sJ2;Vnי!H…_;Q.ݺ?vW3$a tU5Vägf6g5lk?kzs4K Z:sDI%JMϢU ZM!*:Ɵa ]_O[ܨ4N)@oVߛ|hr3zZ`%K8" s4h/6]{A]^%4('[gg)usJ=z kE%4-f.@yT/}Jd$+}aC=HAI޲ǩ9A/"6;l$9k6U{ykJ<FHMW%ڊ /;eXM{Нpכa&\& >6U2]ʥ_s>inCVgR'{:Epp6uO^x{.u=p:v1jeV]^Z=՘OR^4/kY"YH߆ԑ 8͓쇚51&t.Hkh"4>WQWxsp`.:kq CU.iomh7] |[Rҷ/8!;=aJW0eܟ6u#rGj42$hN@#- 5KQ8{ 6d\x؍='jax{B%\y撢* wU▽S&9Q^D-)ŊyLGib` ۦ=rQow|l t9\p{|xۃV`۱d?oO=O`t$Fg-uofB  Ōv0:-eyu2^F)LaÒ˜"rU>}F/I_e=ơ"#)aP'ml'>m{ܝb(E~=9 Smڈv́@fa]h^Mm0I2nI.;d-n'[_!270MC r"\Z'h-'a.Tp4+ӧ_|w4H?2YFAdp]גfU9.mar$1]AN$Bk_U JWH}2o Z1gVoHUbjz.ruqp{Bх>f굯 Dn*1uݧ3Z5fZNvb(фH0 R-1Y4[)z՞`cA/7,+,C"JEZB?!:\_p,郚|yQofvŏUGf)hdVDeP[q<:FP[NJ᫛ r$aTOa@IUfz%q/#@_!2:\:M`CUIWDb{:N4j{Af2,#BhY,hLY {/ .["rK)CS :vD[*t>.T h ӌH;}-cu\vaԒG]gtEY{bfYݶh{:u}=CY:dۉmOQd 45BapLdʬ%JUo`gwo {/ L7w<ٵhScaP_ OPWqw\MD 9uhY sC(p? 3)~S!˯$j ό *ÿstA4NSzZ}fÏS7{]Z-w|@mPhdUh6*SO?aBM'%[!>\jgE3Hi<!/»RA8kCmbv%݁mĘ}4:PSŬ%j}Q#uӉ;b.IZ3ϊYţg!8[DԪݝw&>hbYɋ.g+ܾOHU=R ݝ+*yb_۩im#_$5O=I20?y]ۿ{1$_]WmJӾ}x^[f_;F$OG|TQXg Ö.A2gƗܮ&.;,Th/AyEAUj$e.-.XN w^gˈKM{|^~P7 o\}/N˜1/:kڿbeFf G w~+K!™[ 1ˬlgCLk RiQ}iLaqS雇jU(a 3s >ttޙ/DևA0 NThy' $0:oT XBN˥a2kq) Ni3sSؼä 6aRljLә.Iv Zn:,o) )d4y&()Qt{iSkE#!ax)4* q*![]Ƶf*rX^P^4ƼB\s*!fܣCeNn؍!dtjXai |.4ڜ9{%\=t9?tVxbU&U2FiݸĺAmIL4k]!q ˏKk-^BVw#Q/gj^ ^T{P')tH߬Nz͎V[X5V3MeM Q)ir2cl*~dw `Jt)uz JK0-ō1Pt\QWpヱkH;lb~F Dž!,\ljl&A~%ll xLGw:4A2ӰE8Nʤnl.pWF #ⷈ_F+5 C'--rͫvdž}Uy4w!Ac!82CA3(yİ+me >fಝv?/˷96ok"EB je$͉?lW{gCpXV7ueW|y:P.A'/N6' |~2pBj^/}?7h$DO; c(-dc*>"69gi48Jٛ p}(&9|o|~[eoˤ0M++XJ&pB!٪Ãq6wE r TqEbK 4 ICPؾpK@P{#m=5t.L #* j'/QhdUZIpJ);Xf9ݮK<$j0!ZQ5?20HGq2gPRԺDDȾH;g>c7(۝fM# GmUjOxy*x\0Ȋ堵BOu;<xTd n$qvߑγ(o % #7*?䉯3Xf:9Ws HT֗!~O 0A:1ҳ*u7};CʋK9eyϋζuLPKKr=(ӧbx>L ‰rI09.C$\3szo$6i0Q/qb[; CIzSfh)~F3"˜mҳ{,,DS"mC@ $ǽ ֙ @$$Цw!s :/ ,R^zŠsEBp߰Xv<)4JO%[ ˶KO c6լM"_H _zٗnKh6j|1g#L yjW? Sz4QΫn,}^չ(UdIh #a:KK8}3PLp>/k$ ,jե|^䨓L t= Z y)n0Ы_ĪDк p[bHCvXGNcΠTǘOqnMagtSL,Q,{31 $Wܖ tIA5?!6(&AkeG'K+՞NuԑdXY}L3/wK~Y|mɑۡ*l1oXnB7|P` 1%|~:I%}F'G>;dE8#(J315 Y0Nxb鸙Q!+@m~=ʍ})nm俒9Ⱒm{]/$-4MYGt‚G]}%{?_2SQm:/2ca\"גAw:@nȘ$ $/ЕЂ`@%B8NO^r<.<"34G;(b+]yHK}j L1]^T' |Fao 0ljUlY㸿)'WR%Khe}nEt_l0DݓHI[otHk*0dA9"~ێ9SnǤnYԉH" YjEOJu] dZHD u%4b$lz0@ c'$11nG0M>)\Ze[4`JOYW9P^?|\mGL(,YMP!z{)Dݶr *pΔ3't{Z4k{v!0awh"6ЅaSPT 0hj=we۬okv̴gt-@)̷sa&VҢ;1x Mf5' aQϒwc*WYx#%a0ą(RS٢Q>pAe9VwTd>`C#*M$ TRu'jmJ%":8GN &g"h lx9FnADf'ӛ :^ε6+..efXSHA]_yd p֥c~J]1 F^2{R|lf\?hiܹ }i`Am//o/c=V u`Ğw͸N)<~ (Rm5Sԧa ڿ,[5=_7N/E>9,[Lofǩ8?V'ӏ&ՔMx^ıZjGsO#ee07T'Z|U3Ti)Uۗ\¹'j= $!ֱUzJg9@:{B?'28=$ % *_C$Jl`Tl?9ȥȷ8%Eie4J1ub+*dRdpP DqֶKS]ӡ2>-Qpۑ>mwD׏ВRP;`ЊQ63pwwˉc>;g][ɖ G.:t&eO ^Dekw Otw[u5ӽG!ǶN𙘿"8X%Rg$OҀ_=ۣ$=;t( D ^0}.Q+ Y% ؜{e?/> ZuEqV5똼+ hAؠ]W@-<>Ubh@KXF7z])"ޠM5MiO΢mO"NrIpL 5ut>3}$*Lui3Lk4W4s2uqUfp$3B] Yz)ā㕿9⾏ȭ3FuXq=Fo 'c@d)ǹrQ_EvxDr't D?HW2pY:aES֠mCa9v}h2a4F^Ob0z%%f}᷋cp;:pBP=kJu;m7)x݆7Iڕm VS@*|;fl:#" .6hWoMG6 zmwW- ; T^g9ZyQ@չ3ezd1L )*%1͘wqqEo',rֺB7{ou.hX =V<[5!t5\|$U~b/1g&ЍK{<<`ҭFI-ztϯH9M>,1fϐ&fUlwJ*0l A˳ɡ$Q%-;MC}r5Xgi^Ic;#pZt, (K-pku,s&Fp'@!x3uoJ֎=L)^.o~@Z5(bdý9M3(p?AۦQ T AӇ>F΃t O?5`Sxr 57b1S@ڳ(|Zеޑyc.GeR=2&Ec骔gO6n!Xn#keZk۔!(R6.݌i@ysZ 8*D^s{ pf SLY3. 6+9 bLLm [/f]` DQ:9g8S;T>sUC&*[s7JkgŁ$0YYv5"䣒pcx4&zN㦟0+\4Yw|:TtJR8|U GVwc=$ԗ5_Huqp dq)+~ӭج-F3a ׭eR,$?K3ϥ2D-<dBb^A tz@6w/_S)] Ur3ʀNØ dY> EizAɝ ԡ>ؘNLdD`9q9 Bu]~:T:/G\,oIOaMā MKG|'(eRSx h!1k'0v3u:]T6AwUZsgH%j09c݈ddǍ(Bʒ}{ZP7p"m3]&(pΛؐ5Bo.E\\3 `2m I"B{>%=]W2p^d=N %cW+e&ouʝR! ]yh DeC <2g=}#K*nț #~t9k|9()\6XXxt fnyZ dV7]^N91^YwE*ExyOpH_\T5mHY؜txdœߟD=dB%rNjv%P2Ӛ1=RKGsIA< F*(f#grXYB*t~ PI2F 4ũksP |olCC"A|jzO9!t heN67+[!>/4JTw٬(|C+k)}2^?Vϼeeߒ#r(Wf ua1 kY ?-R4ʙv`ůY?U*=Nh Oq.{M_sf~E 3RḲP-?X-2C@Oӊˊ{T-ZFܩҸ2hh Y6iz;QR/cGD=J #|59RI* >27,2F5oHHy:R6:A vWexr wb? HH/'Z>%@wvDJzHY恶C/ ) Frzii2Rm\ 1^=&oMYLF!_яo_4 e_~UCk(SzB)<m(\,- n#?9tm䶰#@~6_uz"|cN$4>;f֥vDm|KTR{1*`n^NP{̮_$vEn Nr"9BYkIr>T&O0EDfKu p5W {଎jB,%Fswpȉ-apscXݴy &2GðBt=jV aA0"R=`r֒gP*AH(t `7{烚6L$`xd%Yf Hߕ%ξ5µERq-)}D5r4󌯥?-bKV]oպDK0vR'=ghnԾp&ΌѬާ3"eJߖ6YAf KYP5oʳK豸Qq|;GT1XN~5 ZHRw\"WLu0lKzqY*0ƫ,.s&NV0T.b"3go\p/6"R֛}mdIK'|Qs07vQm(kЯ(& =;/{w(<*dJe5^rUx2 (<4(12IG^M_FW%_PH;R#ɧ?t34d6#Ⓙϔ Dޟ)mgMܴ;̕޵qiLsZ7򲞪YЍ o ^5́e~LOBYՈE_v%c9vhl@E&ύ&&2__H b1yO̸Jl&E RyW;WCfkLC \|.3Tyo '⪼mNnf۰sbPdAGoG-МŝlNcGF2{?dUv9{GA*TPUÙS.lؕ8aLh `'BEا2?AO:BI~cmز7 +N]0h 0[_\ņg# AnjEX+mUN|oT U:2gq¿)йqp6&2Ħ}t7L6 Pa Zk4&ʐ~>5/%'4faH.-L v8cK[vXJR D#Xgڵ]bnԀ Rb;vPX*C: 3vb~i*)7@uhz3p6ZƮEcY&uDL&BM. st@9 c28KU8OOݦ40Y UaKl=eP9IZ'BjV7T-߄ʆ:#h$K=h{E@~)&,V%M&˙ʵ(AQ}W?T!I4x_qKR{KWkI2:059Uψm() ,ɣz,Zt1}6F=TteCxqt@Kh\gr!:hs->v21{6垔`xo,?V9$v:.V:RRh QU~+q%v`lf`_6j!I4- ߳!RD_+nSt~SM_[>Et~kd;"K0ML RMVogjݜQ+;jvTsWx 5Kz /BOG\NP'_QS6Um q0>JH%:JɊ]]|<'>`Ԛ H?0rYAPrW~ڢ'j~rc# д7ڰ2SJ){O4Y7>w)SݩtGCkh@/Ok6yQbu# ۷t5!/@8ŝLW~u4ʭ iw奡ϊq'Ա=JJ/~hs6`(Q 2RwQrxMT, \~$G>@GX;ɔvة&]; jqp >hBF- KIu}De]ܢ0k~-DJMj^ ީ=2%6oWMSd2sLYXt>NLb$ qšɛ3 ֮tfnW$6[V܊2[ Qic3T!5z8KSv(87i _[.w$YXJB> 61`"͆ ʟ|)RSŨĆؽ:ৼl.6m`f^g2jMrQ%TT k"[CS0}q P% AhwyH"5`Ϳ@ )I5k;y¡!g8߹*juH|N@=/  ݜ\RTJ1ORIbp Fzx^_ dlGժ;lΎs )#^gT3cxy).N5di%аU.k$JuQiݥ{i!1,tM{׉Vd20/Uf\ |'. -b 4(՗k]C>'ȟ3wזtƕ45 C|MiQ(z#i"S͹r(]|+~6JM`T,5>.jB#ךm+\fcJ3YdvZhkFW05RQ{g,Uzb7m`3[ V&wN&h ԡ&0y.^CU>ky<xQfS_)GK|5E~#wF mfKB*BEӀL GetAYXuZw^W8G#!܆.ճU\dq.Z;+}́>ITyUEutS$D\~BqGE[|TN\*].@ J+k%T{% s()ꬂ3n òyRLͯqfߕ#!J.ZwgT9A6[m<0!l9^N:A3ZÇk6D5.Wf%JZAhz^cL;~q zܰIsH(?P;mIcr:`?8[{v6"L]it[A*Exmedt!^c[^tm򧶄=s Pĝc\uSHnYY>_<2$7޿18 |bwX$ {_V8m|L8~e^ud2(h{ RFJ]Y R< 1G߂2[u[i;'YdL ~9 1OO4=cd,4"WNKXW@+fnW dxsђдp6+x,X]Bр0$T|:늽8HI-R'nRD+Lr'4NB{6p,TqK y|$ؗq0UG6!U~[z@~0O'P"eDVy$.~?C|w}V*<.YetBYVIܪƜ}_qX%s,SY)8}So|潊 4`H|;ɦ0pӁw@K7Vr[2C*hNABu^(rⳑ3 ujy\K,cp\L'R*U_۵ng^:]7=}A`Y#̸ n?lc๢qx'ʚdB8X?HGIƞЮ 뛘 %;hSG2J,vSAxXH|]Ɩ*QT dJՉ3\E̊K[w#:}ѨLk"|\yEhJ^’oΰ1뜈 @ |nery٧ aOˆkr_~`Δ1E/ƽT)>Мk8,d6S A]섄ov 󦁿7H =SS'd)J!PgfN ARI)\0iPU>4GL *A2) twlÉR!1z:C @GI#Aj^Spn ;7P"F8ddn<L$6{`Ns3AUjP@k^*00?"35DE.?Z)Wǻp ԛ1PRСϓ t Q\V~i(ocoʵTT.lU.Z̩ILb0+2LmSbRmy0ʬЀZ}Rbq>vJ%Z y ;Rh[&-H\+ʀOyO=5t^ Sim}Mha@<_rjM @iQ7Srhe5 RK^W{]e}"׹'ZԴZ[x[=dOFJo*$uq=^r߇BhA S"I&N:ϭJǹWJSԑY kua%m]`"2Z/gnൻ14fihcvwP^ a\v|Z CZ-%w? N1556Pv(a-G^?Hv& $X Ze84ty.Jjlw0:w4&#° _ձlv_HͫBG׉gq6c 9YϰCSMI%ީD[& ),9^䜽k_@1.`IzG::Å&]L',7I,(fHV-CBDFS*8Ru-Lgs"OC"`t^ićJͬxdT13S}g Q>F ΍ Qo; 8rֿH8wFh*y- Haă˷B7\:ZhBh3zsq[vњ\n5<09t *IG<|9";K|d mK].K~hLS |1@|] TZ| j;ejbhyQIQO>o}-0r`uҏ09YLnSÞkb24x`t$Ju%#n _ݍŨ<#Y _oWCin~c:6;rffW'vE ou[oD$K)b;1 [4xB]~e 'H xnJU ^JCe8k!B'TkQt]);g38-v:,4FT^CH  d$qug#/^ԝxB\Ɗ{-WWv:lyj7pl4²`> aJJLZGpȫP`9~{hW~1MD P$ Xwa kWy4P-_Ojh 028ٽ~#oyyALr\EvL5D[0!;S e:]8359lX@TuNπB eOa;L06ΗfGԼ7mVg? DQˤ{&3LK^^qiCr:$? 2OIQLE{et_GdzwDG;`DˮĿ=tIg9%l12C͞pUg0ǶF;wDV}ؓzxtLJ :..O뭗imAIBj<(d\v .}6!Pm<{URn}}a>S`9^s&X;sP #*T {Ob>~ .Fx/GQ 4e ozyޡ ;1']աp V9UXpoSc.ͯ9ތei5-lPՊ͖F-jޖ'kI8'L>1U>~ɀxȘJs8;-@3⽯2eTjU0|DK)FofL+ Q LI+\&4,NȨu VJjNB`*|9L/zUرދ2Ar,{M1,Yn{xp_ٓ.I<4veVK{}{-U}6 D]Ӓ2gpVfnz`_ce[OuNTy) "Wp>!qBap4ϫi oyS/>D;y!S32U*f#.6H$Hjr˹M34rSL6~A9oQ.i B>4!#pu&|}?%|6X9B+ ϶ ‰Go9B5y®êRGЌh͎ DYOF_B~mur6z'(`BYX(r6sz1Z[I$כ-$N31,pa#hmeF: o&S[5ovVeԁ%mBq2PUKx'MCe4Li&cʾ0ށju'iP_ko"\Y`(JyiFiyр;'}sxPӤ+.+̉o˔5qIf__% #@ddGǍ@EћYC)>|>X??ʑ}L[ zPҞ-2ZŐ?A $=ۇm7VyJ OUl:^q#bs)iejygc0< 7M.HPʍ9dyU}CTH?K-dÀ?&Nyۙ-&N#g NACivj)YR\b$% th: S>̺$L'g X^@V<'x1K$VGij`pm"=j7Uuy;1gkZR {AwM8xݖЩr_/ ;\ ھJV rc~LNP/ͨAy&)PifoSmD\ԯz0#/Q`7VؽpSS+b.X: cK,wo/e5WC /-]P [) WnW~7up&7%QAgC kk_)/`pv'B 6fϡh0ÅbלXL M %F0Hp+Ҕ=_M5-9IDfOA⺬y ,z+qowɐi YH:*oW[휄@7=,=npTo$dm zBE3k(Pwg[Ov&ZuT+ܤ7 yH`8`;Ccg_>bcG?ߞR f~\mUY yY?7J6Me_xrS_ Oꅈ#NՙX8:>D0OI_.|r<@\ y>f,ⅶ) ؉FcMRJwd߿?SoȚ89199 k=vo^73^}'gVqwoz 0֦@`A r_PXdpPE;bsrbjX+Znɳ,v.-miUKk.LM 4|P04QբsH^+(I9 &bHS8Ff:TJrAC2A|cCOKjDfzK>ŷؑJ8Zu4ۜDVh)=8.HRÐV-قTH[~sd~gLɾ>(CE>OIZsxn8&$XZrb7<1*OCEc f:ю lC=R.ֿˉ~a-/(Ä7` `,}uЏiȁX RiU3BaM*rbavZc%3URza8!Dw*+f<1M6&iZ2`kU}!k";fQW6:eΪ!.3"/& `6#Ds;HDѵxOu"XO B+b`[ƒۺku6,"j]qջ ytFd;Jc+]à>XB.^49\,E#vNT  ]Tz897إ'`3@:NQ.۹+@K^D™Sγ} um\@}̲y"Vvu;rS:,>Zt5+ :ъ2g>4s @dyX>JtWKLL|[М]1dn1'tg1J]5,9 L@'-mZ)tvឤ2zF<" e%5)>%G1)3DO[1}5T?Bj5)SY-Ujkma/Fa=XW[JӔ tA;: !ieUnX`,oMj.Ɛ pvZd?Ln<<(?.'IHԑ7]YS %0L1硴A6@}jЃGW4- ]~;"J>]ҦzSAl5UBpf4L.pqg d8ߑwXec44] &'9LBM=AaJ~Pt9h>K|y Mp/f |h.>tj(W#8^=mXC[7 ~&xZ!Xsp2BI;_dkgs$E+(%$ٵ"Pb t֪H53dr"*,Xf;a%) 'ED|3weuo zɰ4]`H@7ے"Qvd#t9K%D,՛RJA_B؋Jr @L' ~QX䆈eEnJDW*a4x!hzA_vpD >Z?** $FVc2nf2*U&$Gk_hӤr:yYB`{`,ś;Gp+caM|JGkiτmcL )l#on^@Pv~2.[BVp1IjD`3umok3(s#f)BTƏw(Uʈ.A S`rl)utC>:$=v_g)V @8١We-%.'jBPjjŗGv _n[{k $fja`N.;,9gfTCTVܱ~޸~/OPr=A) !,H^D+mfl0>GFn~ E3`k}ivP5DR;6aŵb7/f/!KǕݭZIt7 čhعOP!/k4lڰf~FbGu8S/;ð%4&עg%66'=9.=*W47loK&~,e)@fL*>*jq*DOI%S8^eR~EgfҴ=}mS%Lp0"$KiAD浪ć6 I{_OV(DK|\f+ѪvNg"G淚OD,|2i"'o e1(An] ȄG2KxXu1y4+dzkbzSDDGlη+YWF7bNQkƍ+Ǟs&e }kKo\G4e4vD9CAWo>1p"cS:ǚ(}Coz>DJ>[ħQ%6f/j#B#Oҿ F\cxԀߙ'{զDyL՚ ׿|͎akjߵKܘ|J=th^?m@G)Ts<uS%/_Z4D8_3{e/u}V9ՔjBңG)4<5k\a]P5ck *2єu{B[,ɊVޚ28 {;taK͋E=cuU6́w(['R@1E &-mșǢ58ħ14W~yIJ9A i ᥩNgQ;;GӒP#!%D>3a ykp:AzL?qJ -@;˹PX3'_dp @^ub] $Y0{WeD\M0cVڜO= :;Fc`` γ\/HLJk<2/^U?a*q\rzf_J ݗCHA@ gRn |K39G[ehpHa/N2^?Z޶&7l+1tO~{Zqϣ=/\(@EsCpnoI YJ"0Et~BkRPwiz6" 0QZ-wj/X {Jgi";Lk'۶XbT2BjR,L*Hu2*׵yE`i4)Nȝ>wIٗާ=ؽH|OxCrS^ bE`3A w墡88ppSAd 6uLӧ۷m(tzxC7{|nۦJwܣ6@. z&x⍦f7GhO:q9u)Xc7'TK+8"PC[@fnqK2j9m"yd P;Vo6xF .\clI ]tfdq3h6j5-k=QG|r(Kր9~@dA&" wK͉Ee4 q3i2~rD;Y[YSTxdۖJ䵹0e剩3Q<CEʼneU$%oOsX̃sgTPQm[[ρR<b_YߞG&f!-X͒Ǖ0pJ+J +oR MocذL4j]&߂]hؤհBS&f['+[ CpoLA*-dɐD}] :96'p>aWܚd^f@WU0^ ]PʌVSD)jtJt'hI!c;}RP-%=hl*c=I>~WP>ݨ}:Mm#Jޜ\Vc1FYM"kĺ}d[pb9a?yʠ e!lg.3Єc2w+I6 $ 2/,diLj{sᔜ?dH)ntUOHCVQn+D5iއY$c*?#w 7ʊuH@uTٵ41,;m;˘q3Os3B8#>fJd7͟쓩Kpvq_x?Y 1 _ԈB4!4"l8[QHMK^((; FXG.N k諉 =`Vu뱘{ hR!B ߔ, ❿#Ǻgܳ vM un IUM}4*D|e!qN[*" wñ"ȞˇDυr-۸¹qeqn_&f2OBgNt7oz|3RBm|@9_Ƒ^VhX1Єa$2\̇ ՊVj.҉9yR,jdh_0iU!Ry0SNoGh>3HKm RQ &/jAGFjMkjt.i@T1'W>%4:{Ud5f+y|)BJW:aʌa(rޑ`OA '$QQ\ɒq^_ͯ#i6?AgrSGL|\Ž|4-=zD"rW: E;U{x4īdCE#墸UVpS;Eg9̓n)Cv`}'w-A^J! .$Hlܺ,!Zs'eB@0(a9!({bO[<,D+MC&8GcM] 9@i6Жt F_#z| 8Лy!_d LC b+o⨳{s" (`CyEO^ddr`jmQLLXt}ܖ^yu߷>FD;̬Yjt=*B' lِ*hȹ”wFy弅mA}j@Ůx,mZwՇ'T'SVRziPv([(J1Q!XҙlD9Rk(=;`C3}&b+P?\vOwSaprzY6nGC%8ޣm+2$>*n9…z= }Bl!߄Xfb~-:%+izS_ͣJ}5 #wOL)Ȕc#]Y]Z ZL.`r;W[R,t[ڨ1l];iS"\5h,Or] *zyS+0XL\?fraPw;j$gDՠ9C+8*e,F0*8|8#zqvV$f9pғdmJnPۡ*m$mwTz]X\ 7\RoϊIeF %64meS_+ &2)s.-.żÔ+Jڏ4Qe&լ2yhQ,3gf?L^=dy8_t qJI ^ZaH3}YMeudSf>.?Ռ^ᄼ XDh E8Kv%n̊Qkʛ0`W=} CD?5;o+X*×4t"9g$1F6G0hkVi} $u=nV} a>b֪ގ&Pvgb\%ý.k/ jĪ#夵jܰf%MA`=>Q2;YmQfDIL!tL  P1,sh|+_|AR:r+J(?d.i3\c&,GrbM _S?//~M^ tibg¨\#B~w$[FM >ƆV-1( ߟ>gkKj[>-R6Z<8G8r$%?|jxpx9L{(YqH0DTs|$?=SJ6ME*"16UY`Ox9N8ydQǔB=Gۀ׮Nz9URo9ԼҬL Wii ǨʆP=hpGcEb BB]VOG@wKƅs܁!oJA ?K1l,dRxNph6#6>Xm},\{z[8 Elp\IxMC5$e %?24>1(I/+¥0SпāH{~-El]nZ=E2X d _rŜc@d_Dz 3Ty҅ )4F/rJg\ezI828Imb]ŋCUBxDY$9kW@Tn9cg' w,d-FxAnY{GJqi9,}9}aQqC^<#JWb#;LzGj~f5N<9kbGcb*\m:̂5T__^KmUkAAiOҧ(# 'نiyw/WFm,]^I0K}rbIf} Ҳ=ֱٰXuaA*fJ9˕p^ry`M[LR]١3 ogo`{HOa(X !'z=JVX# 咂;(|ӹX(jIfGۃgD@6&Mgo lnLwA\" NS;F;xpuE S|&ܮO >dE+PF ̔'N~g=^Hf׀$\}3/wSZ%2?ƽU'"1`0G3ǘm$@[(N."+[ y]RɤhJRUxzFa&HjpI, VѿpWigU:΅ʬ!Q H$n&z jcܦHT0N& fy,W" ;A*};U | )Sv[>iHH nvҥuv.Kb*Tz|R\yԏMÕm(J[rTA=Bhu *㉂sb qn@.pv7Ѧ 䭿?S}bޅ[$)f)ES/gwthɞk]3ߐ:+ginA# !/5[7l7Ə4i*%ieW=0.VP^; p?&Y dY Vir:C%xÀn`gOsחBօ而}ȢUߨ8NV/*QsGys|Nyg Ug{JCׄN;=Δ!+>wR&ybZ8%]7P9GGۢ|ALU )ɷ ~$.3@V˿4}Ep o(4\X;ʢ#j).aH;\uGDq3SWTc6\(&|]~)SC݂+ .vdzcE][ڠ:uֽ͠!g}+^b@v ma |&ڲ檄eɟ,K>|JۛiCu%YQY  +TL*̒)~hwkh٣.l>U-60volqݱ1TȎ;`2$ř=(|*@1S00+8r5V)߱a:ŏT3 WEUȄ-YP-w%' qcvS˒_K*!E"In۾ ҝ^%cx~䃒.12+PG /??{L(AoBEβ1愅e09B+\@&K-zMgnj=1edPiVp;<;L8*"n'HeB{MKI{ԳM `#ŊW~KU4\:bPU{ A#9՟/G:ئKQSRjpw8_, 8{Hu)!o, !3m=یy^ sW>sG™سB!YdڡTXJk.|ƎM 1"HR߃(-#A-6U" ``o@0<$6 `tX|& 4u*yz7q|F;o u,g0>yFic֡-#rԭ00˗MNt:JMqX qrcZKQ==QݩY 2wYRubpTBB)-@m&1YI FDd:ܷAhcI+`U*o_W6ԗ|Mk:x`FǦbxb.J52MvHQ 4j*ih#pBa*)|lv.C} 09SQǴ $$ULѬi+}p Ht *RVyr29LlǷ-OY:.ј&HRB@uvrԇlIJB4mU "jr%辎SgQ4Judz33h]+`Uej[NOC0~M`t6:|7r)nRxmSkT8 g`qCdiFPi'4&zMO D(?nd}Pf4GE,TUOw)~C!ݰ|ݣd"]qMiKGrq?!Z"6f7ftt=eڻ|觞5ыSx~7dD-dDӚ_R(g!3[M4sS3kC_F#^9S-HUpm+Nf|"@#N@J;1 o eSXǛrl;Mn`p(hg # C JH#Abn1g(;f$Xp`K1t| ;[;]gtqT(!V'!أ ` gc!h>|ms/.^ϾE-gXK5.jwve;Rgܺ$C&rus-R/M*-_ؖ1Nfh 9oK{L[\5^ *v^ϐ9Ah#'59%sXסKElRB9I ~[-/ٶ53;$7XMBb;h C."'>/o=t>Mj[ *~k|1'xݼlw9^>D+gQ^>73%+z2Whu=AݔZ|}1o͎BASԸ-´M-r|(}GjqF۰`k /gDϳsD(Wd6ٓ U3zґA8oRE(%]M2|}#J98'm8–/MLd$O7ܭ^=A?M?m?Է"яݶ&L'r??s>.Xg: HB|le:r{8W{tҳZ}pj7g;>e_xs\TvVޮm8⁲=i97Ԙn)UNj%9йGd M+}(f`vx\$ 7%3W{% aɕ%Nč2Z T>,a5B*$sh?}66pfVt~zG3$z=UfR3̏b|K- _FYo tZC8nivamWJ[?N0cUvH >-p`hqxq|3.Ez^mA{^kߥ xJ@zbWk E9 3lLvXN녯~1RBN]J#:6@8Y \'59G Y;RDݝ{놠ŌMLh G_^kkzs\i{|жlט5r9cBF3 WϩúI/& i\J䭿0x-*cb9i#QoF6Ke~ GNH*PG)JH*RNܛRhֺm'N2t BBp`H`$h-_N\:u*[(v⩟Qj((\iH}*L0 7k""w_ks5(Ƥ7~.ҝۦю\ڝK^KDI[ I"w;LӋ M>@@Ӱ2_9FQ0:5%t8 /Җ"pt?CAWrA ȤQ!􃌛.E̓=ZϬX޿rzx%WKLG1 ~b0ͭkr z;oГDWaOkO8.#$tHӠψmPgG`ga1TVK>x) ,3>ƚRF|6aftcRdEz-4=&ۉBE?@'&:&|Dt"VrCfQŠ fQ؏o`1 -aO{?IӐZxՐ-jmGնcZ_ PGz[WQZ% ~deUv6hbw:x#Ԏ OcݸS=*Ϟ>d wd_O4.:CmJQ#R|Pxd~8cx"o[_f8:+Ć^QՀNKN@}X)Xt7+qFdAni=t͛(c N.>Dֳ:X>Z>۴ۙ$ζb@x˺=8+V^p]jjӌQ} 7ߛS3u/hm3L6`Ry= 54yG< Tpƺ۾ y#"nfeCcnwk۶3BFtN/K#޿0L)r鴐*= 3>2SB?2ΦZ"JxYFfvV?. ﺾO2% ;6LCGxy&Zv趷X]cH*]̚TOUdY?DgGwj"@*5y#doX C[vK$5M5a%PaE9ڂ}S71)^5fzulWYL~=?X* >Hn{~ gA5h+8m߾?j,/;'~Ύ/Bеɷ un&ao]'rQJD h+4I6= 9WBXjP(}+a6FT*XG$;6jCZgK4C08%eܼr[d^ 5o҂H`Wt7k)\fŊy^,RhWϚ?~X)<R֓Ǻŧu;SeiS[#i@ػdw_<7+Iz O<~nT+ƌYg]v 8 k}c V2~|>3ɲA\n[GJ^}IcKɕ|ȊݡF=`Q  C4\E|5ȧ"df4)?@yIuE#5X zPՒ>@oUS~6LAS療m\Sx t+1,xZĜOB-e+TMHim*wX zmnPݗ}Eio73e]0_.S3=r%C9I&ni5T;bm_{bQ`.ْrS;pVJNy+}/ym*QxTٺr>sg@QSkŘɼ8=FkՎF9,\[;sJ #?#wh9&~6#JAN%T^"J&@T\l<ms"ezE b)m\m.Utw!q1S\-{p{ꌄe:P :JVNGQɺoiY`,0xuGiOF0!~V(350CGv/0.MSnXn &]Ifl1! -HnMx+Ya+룫Y|F䎛b|~J0 1sPD ›9l.H"#4ߔ5v2Rִ8Kd@Jſ&geV99jWqI~k^shK%jvG8~.:ЏDO ږ-%_VYN]vykHk=dW-;+֍7S[yuBLS3Y6G0ﲉ'`̟ve85:傢eHNUѿTw*FDI"fAJݔ-:GyI3KjH5 ET(yk1,dƆ>bt I56Atlbuw@R':a_8R8&_aQ|ΓBZ=l2Gvfdx2%.k ^x$ZS>HGh^#d~NR== Q0xr5KHp.*qsc=UٱצB{Ke]޸ߦ h*ʯ ̘N \+muk|آ̓l~E˖l,S0XN7L0_9KVHcr5qgLJ~S8š#y5=I3vRb.=PeZש o@ƯFcW9 hhц(L{쾸A.`l.Gf5`T5_[$f!E6/ߊdw '0ZLتZ*یg<93[M0mD h>]="؟Napk{֖-+s7&L:sN#^sF!08?O<]QNz*)+!T,)KDYe]p,OcC):PWeyC.Dj|jȳ"*0xǙRpV" g!ė:CfNvfZ7(_$zۨahK/pj_ͅ+Ot>A5Y8jȗ΂Za_6|Ns:UWnAG7R>đ쩁hyU!C_b_#KD_jwzKAFp% ]yi>8'v1 3Qc˸E7)" nuER. 7&Tih)uJ̓L|4on?ywlSȆ;p,UT/5Fش ޭQ#ZD%0zhk<#{~b2ewsiD!ShK?s݉V+B0ZF)R*?ޝp 9[ϾA6VA/hOۀJ4q%v:cWJ*7O_z DC^<\D640Aqu քUûpa,>h5QlK(m<0#t@TgD~)[zHq7-H||s?2KP|%zMUs1Vg$9\Tʰ5</An1򕀯IrJ˱7C-z|A/)|ս_WŎ]ℽ*C̑c(E4`η\lcM}b;]wm^Gleq3%MI]fD! (!goNνO{^˱9I p]+eDzT);$"}f3A慛(ՙ+A1 ۟*=\"6Ύ 1~1=L {%([}C <" \-2в6ԀZC}1|i:?ϥ{O' q WG_)H6j?n| oPH7 J ˨(Af\΂srX]NJMuW\ӭe=<w䉁7[we-}kb4* a[+2{׼xيgd"@g:p <%XM%+N *';}I5Ƌ&&kk0E"q$+0wX+tOA(vR#wLͼoq7}ɉjnAkT,p@V$d"S2#*-ovyV:RJmX6#ꂲCX^;_`1EЍd\z_S2'-SIE j?e:?ӋCr# Rˉ>S~ e{άyhK4?ԓ̢)ʰ&Jkq?~(1q6Gֈ[@Ҳ+Д.DM"ȵ]ғ#r\ҹq: <0e.܈"| pD/eVj>)0 ͷ_ ڟ>A*^DQuNFJszcNIۈpH3?:M4ҿ>l5g\TU/)$*^XkVM}JqQfc!#ֺ '0T Oَ7H ؃K\U3ɤ^4KO<9&`u0jih6 I؈"  Zs-U@l8`j)l?t%Jc0;>i}ceo߳m{1r$5eNhAml;E٣`ꞿŖFkUdfQ,y=;_< WkqqCfp#9 b;?cPq`GVx(5 >&#~5Bctz+ !Sc<3&r0 ϐӁ>mZb~.٫ RL!c;*nDT~qvW) vݜqTxBƊ775ZՍj-T;h,"q|>T僎,$+(ARp4Vs^st+ 6?m\%?MGzS X1ԋF=*`, 1 LehmA~ R S>,٨W033y露Ƶg픦`'Q)<)'Wbrb9gFl:%XnT=| >Saq3(ڣ^Üi]>5ؑ6 1θ:y`51Xꟲ =8)#]POHm4 z܁xOft>y`߶z/x:T?b UO,6GYn3"(]Q D@$rxPlh9~{*]%t},}YCΓaO?E7d*%[| d9L.uqʝ4Nw~%wtCaUךsv7gygsߦlg3F̠g!ۯ^p׆X\4n %Dwp:y&8 k FlԶ|hz,RFO,s-˱_'Hc4thv-]40 oUX8sTEg)5A2by09tTOWAeVj}> B@BdڋWWו~wǭG\j$STiofhs^h+1dp?oB'e]oNLv4 2eﮍ\= R`k*N3JH0}-و]ݢGd}<8L5 :F]W@g3U{@qa, 8P6d=lo_&37Q+I`=bܱvu_^a,L2+b)muZJs0Ψb>Xq 7>|n[-lĝ9N[./ f_`xn_b#,8 rvKi2Aq$Jenu8 JNsUS%oSy=,C |ASN1s6?|| B0]b50gl5"gx$닟Z=KӨdna_]Bqhs^^E8=y>4_F=pG8'طӤ2üGk@~ w]QہUۅ}sĖ-9]f:n@ u / 6(V"QM-xlZ{%De<yȆu<_߀J"Udjr~^[ro1PEɶaBw[ZcH_08Yqke\y!&'`γH`eM';5 IU΋ᬔDHgxF7jY+>Ҫ林q tW(v-ھѴi(K;l)lXx9H.X_)No_^։GVHI]`G?da]0ոi<,HwSSC}˵f4 I'PFyê" njLx]#3WpϽϦ#`v7&wIG;cLS$lWQe4{˷>DDҗ$'GpQp1VoZ`Rb$p Mk0&vGeC~`g%7Fl%bۓ߲_$]4ؑG@;JvVy^>cxqW*KsBLQ?>0O<>7>^:̠ׄ!H{_I|}\dCPd9)v:5FS__/hD5E}ˢ=ꄄ'J+c%:o"KI^!-T,ԯ3o +p-N*[nR]f3Y]֟ J:ΤF)%ly ϵ@)ЦRfBT*?Uw9D%UR4ٖPLp ³wu7C4bNb[)p*}^:v}9)+y T%! /7^iTލY!3_MѰ7,$CA@gM#]c2zC87}NWWv&@`)?r1'F=,Lͭbό`q5n> Y#1q4TvN+[@"5<7FnV4= 7ұESJs ^$T_orҚmߜ3ò| wbCQ̧4\Q_r%}6FfCY<#55!}sZ^"Ix5ҳcۈӞ# AԸ;`xڨ/?8y/]HDO2VtWI+5q: Yu"u|qGtI6Ni--Z Ta J'< gnw& 5D` c:u}`@TyT[ _2ZO% zQ) ovſ2 MZ[3+ij[ȜuoØG C ኹKָ_Bϊy|x*ۄu~+<&b<[3rrMf:ւjmko5+<`^uϕ@J\$6M6>ʹ'akAw 'Y&葼Jwց1庂JOnLT'6'rru{`_8 ?'-JnnD7MeT uMsiu\D5|8TB(:^du4hƅYEΘ8  Ts?k @tjrc74kLHR\|T+Zgޢ$r! CFuI!?4-$7}˨CH`OBx8Lb6 UZ#$7,ʸQջ /?P# y[u׷KXApTI]%QzC}eN\DCYGE[(G<6p(ac5]Y7Z uM6 D|`:Z';ЈbN Y`\&zXH a4Yc:uz3 ۫@">n+k3 2 2G_ն*$1;:/7IO&J$v=ŷLV® RʫB{i|oUHgg*N},cg30!Rqlaxu=i4[Rus]}=i#=k#E"TPi󾛳~2]gE݄͑))hϣ1uvkU*^0'];[KI֜H-BL6JF in:usFL* D -?6 _C|1uk5}W 􁅾ZyCG*PֶgVMĸ9j$f0c5gwDSy[%4q4>! I\fj$1b8&*ɹ&Cu!镎a;;r.TKX&NuXO{H\XrTbךq.00ƷT*kL\9_%W9vsKw-q.]gŞt`[aQ>b$~n]c c?8 ": (g`hFJyo**15|"& m9[ V$$ L d; U. >BGTО^9As ]Kq%Ǵ~D {#oPWk=!d{] z⃁5ǯiҖ׸ubqcSdO oHM U,cDR[fzTSE<w"M5P~zA8 n'|'THLvr!+f< yr[,ӻ`J `)hGkmg]~!+AM|;Oi EV{w\3#9N A8ihKʪ8aֲT܍ ((:MiAAyL?F lSAaw<+ľ4:F*MUfo2wm_S2̋  Qiï!ΐtT㡤5a Kf#a2\יJON3;F1R*wةe(*~ha14@MzNmZD! `f9\˯RրٗXt?t8C,,˛0aqۀ5XTC#Z W]SZ$]sl%p'# $ wa ;yv8Qؿ1bm}bQ/E1%;g^$PV\Qez38xɅCg &DJa)Gqƞ@Dbs0993HYRJhjf^`lK&$|:-),MO07!vpuTQKkL U<=6Sf)Ip`piut#< jU~Qf3V\A~q(';{˜lTb1;KSl9, ܱ=86Ӵd3jɏENLՅoJUg[&v9@qK*Z_Kv88[3^MgmïZ0ASY;},A a, d!ȸYAٚeRj&YSWdAΟ,>#L}f&q,޶gt^X706ǰҭ>W+|&ꚺ+W Tb ndaЮ}g_ri0l_gw"M5-b*.P珟n1>~j>MbY nFCB`.zZ _ jWS ^BW[r~R+ %I]K<ѭV4\.-a?  +Q9gCd & +pN*::J(P/v_AJl9eFe3yz"Vc'/xyH_!}dfZH -:qof-VLj ZLU:1:N2 z/R`Qbw;IJ5Xl@W28L˂_ }va-s0AA2(5W]O5RUI]}#}+ W _]?Wv[6 e1DN*>Y}9l?I'] =u\ ]>l6/԰l[{e>\!;NH^Y8Ԩ9hd3LTm5nVxy-vx6 ޗ0@ s~ۨ`^ix_wdz%%M vLí% ?C/$4='% +dA/нJT|e!F]_p6(oty@Y9R@KTN[ Ic"K~)>*(j_ /So/=?Ho[nqbJ1k`!2v\T!D:9_'ϏYeK%ȚVt%b %ߠ7!?HB5-('FOLƛb Tz\Xˎ9f"(#E TFOIN8 t7.]e@47ϡ?^q< ^9I mR&hMʫUw\Q0z:YL3ZNPM^xY#꛱rnDv3>?vc )XktZ;ۭV/HN"58 y6#j^_^ 3zo>DWQ7\I#'jO eazKQfs3A/W ~LB^WtNKtb8sSѡvT. Z e!@s2K6 7Nd}BE^Ψ8NR"e-,@? 4zNC @_ =oZıkcj!蔎BШwe/JblU_d3l0CwMXZvw*e;2 xIƩf>I=ưOJ^y%ak9OXO iftp xAX `LK#ˬ7iu_}y7 ;61sWk6O\:Ճ[쵶}Ķuu]eRUuN3㴠b@9Z) ?^Wdl+R3N@kέ_ 킛ң@"t1~RmhrLfNyuIhWy#VyA[T9M ^P==?sKo6Y ,`$cXaKzuU͐w +-.$2Nv{Mv?j5oגa\쏙-%yC$ouV?22T-: QlzI}!D]r@JK4~.}KB;Eq4} piOڼ\fe!"ȏ kHOOcA!Y>kXO\J7J8>NҾ#hHOo*TcK@=$KmΠ;غKP}Uycl< ;D Ե|B(š@vHDIjlAܫCK;MTDi+Ìy3ڮuI>x&۲f:#.BN|Gi f A LBkV )";j|fER- !%JzdxMJra,#Pqv^eAͭ22KCO``$bTE+ 2 U<'t:tIYČcfEXƙ$a]s8;2r GxwTƆ!) GNPXn4HkӗI|8qH{4\eܨGC%^6IZ(lo[tJNReRc;Hb*8h&u;&Հcqn f$k?̋@hkj9 Lj'~Ǡ:T+S0G*%SITܕ͏F>9!xjiʠu/^ HNE!I;;>{8+Ȉ##;'+6|"g'TAILrԙ zۛ_\eڤF'&( Y왏QR4ݟh s~xS5`h?;:Voi PNj\s=JJ6Fp{xfm$ҏI_={15SD9O1ޜdJT,ƼsܸН:OfG<Kԑ̰"21YkL|Q9;hJgk'󱦷@n dg^\=6WB㓨ےIீ0ttCG#`M ö/H$l$;49ƆKm;Z܀Z6^0wQ`SBPwKfBj? E$(U4 Si5M!+VTF:;af]GSуR\k-sw䯕Zgn%2qA]Y_7Sd^v,\ Z PXɐk4yh6"qFC=\hŘ'_ju8ͥ9]xDċ߇= qIؗzTGiyUg.\ӈewL~O䋍nX6EaT)D|偆 >Z%\q^TZͱ,Ť^pq# 2,'-~Ξ,K0ɀ-)Wy8)wL wHAIfܶWZNZ_XvaYSP< G{Ql jYoh?nO汿7O KOEğB_bwpZFZ0qZEUKHӆϥtߟt}&WIP*L?C5;4!ҙ}} $/9 Y`۞x W6 T]V]1_48YCl[crRzG/#g%Û:pfIMCq-s7@/i1gK?XSsԡ{!* N9[` B00Uiq.ࣥ䔧83?2n_`UX<?D;LeX;UЫ1)#L Fߦh %")7&F5 '\wLNFP}=N)Y;JK| ]grGiv,ꇛHN M.sSe!R'}9[meX kGl]%f!f^wUok%r'/? aqy }HSG xFosOxzh|9j M<ȵ;ėZq"?KAd$zL?۰hbٮ#^;7%dGyn˳iDe&M5k ՚/NC-ZHkX4%Gf!ybuƱ%ٵUL)Cq)1}kK݃½&+ĭ4k L(k&ү*X}81~vBB$O$^9Z *n8)5-3n{J&0R/X|tel#3%E]A*~uhUXrvX'5bRD.E\ wqe޾BC"DIJy\kŭg8?}:ᓷ q>G)'u_s;杗|=. I"BBqHx1%?ƈ7 q[fIbX/ w3Q-(SRCTnN˔tђ`90q إ.ԔTzal)ޏ  O43{I V\~\ zdzLRufhpW~L#3Fz+RD[DVPl>XǶD}ȳ߿A"~ƅ)8bL#?hMwۍ_)n ? |XlĄVVw=MsI=]oIxH-"4ߜZ8=E_fؾ^XvʀHA*^Sչ d%1;;4B}m^u31paBןy T tkw qM9@JTIL6KTxai q=Zy($ٹN\s<{K ,nO,_~F,q)|Qڕ;fS#ƭREn c5Q -.\/B?fS * Dr}Med)%CI#}C8|MQ }2W+Vb r;5!aK-r `>UfkӵY.6U+C "=SڈEd|/ ޝ9wqoɝJR!)>4ugyklddBq2 k/aD]40S׉h㞡vLzp@= &rOȤ7q6H.` ZLyNR-6KT6KFO{ :dtNACVL aq 7FeWnM6nc( ΁ZZe^IΙd*#lQ%m@zA?tZ؃L퍑U5I|n<2w2m>wLJHGn}K]{qڥVVx?a'w U_tPhZkEKsYCBQ:)s'\cIqz`E&%,JsXڥ6Frqaw?ԍ K&S>]qqzTAv,Xœ4#~E#z^g93-2ﲊ 9wwgC$ImQ.Kwn'37extVD,H̽j@ZF{AVܥָ3u|Nܬy)@Öz$n*~RamAƺU1Tϋ/xqDWIW*X̡T6O\adNTwPę ?To>٠ҖϧrQ-7/ ?5plZt r~+c)GxN]EJV ױG?w þZ0, BZwtsN;ڷMZ+t:Q~7@o=c5dr>EG+n7|R}5Btmf%={\L{^+f*(ܾf$׷c!g&UK0[cF ZI+[)Qh-p$4x,2|NrHe޽bauJʃ+MHpqH{hx6ov<e8= ;B- *0~ږ~cyjjcNeEvnd ^d(GTkmĸ:D4#ò0{[B͠p>& )uR]X@Kʢ!]6V]l)p aJӛV,~peA_~tǔ3dϼ@XO~9`begC(8 @b$NtZ% fQHdկSR99.Y}yl_:l.<R,tTބP /ߨY'zg27m1ܴɾG܅ڄLLxiMhR`z2P fzvhB .RHeg 1Wƈ]=9ڑAL*_m`Tţ!]ƎU~YE1(&`{*N 0e-:Q!nUZn c*TN:*W v0<1һ*6AA) wiU6 8"ؽ߻{R0 tk2˔ [n,cF+ǨBwJVлڇ]j{. 遙:J$_nVmf(e$KOC¢/𥼈|!qSJhޖv142%&lBdk:\Te#]봵罳3͚&<_(0kf[;8h,ep49JuYبcm,k`wN"v`<Px"Hxܝ 'K,@1/Zg m9VՖGTwá_=U$b:XĤL/[+GPx6ɭM"]kP{`ydhJߗ.ݘZk!@bm?"쥒TKo zL=\+LweC& XA/H6/#E3t~hϗ8SDDRϣk`\YUUbc+m&rF58(jpU._ YLuSI廰J^huҿ~*0, cpœhQ Mw/`kwUWdܦj΢2j*F׌j]сK"8<^cpAX,Gqn<˓Y{=HFUC0tüRsbfйGW(QzNB/rSe3$|$d|>35kƟ*1T׎U+f5Uv|bݸr=, /['q {Y"w/. \>A?tG-ѩ sz'F>@\obӺ 0Q̨.`a9)o@ 4?)pNζTǺ.6^B0 f[ZWU+h86 ""DT^!ک%m#H 䧵txa$ZA!rQ۴F< c60Ҡ@vחcUZr-vtj^ϳ>tW_,vGEQAWJƇoH(6  u0st-2iAQZmTkM<>{b@͌0cw=CDr޻X]S㲂V<Oi8fxEU* v@ ] )ca \ZNsai k_(Ϭ,-ƕ;i iWENCpgP ͱ5U?ù'8^x0qd=*uYÂOGdˌu81Z-T9&z\:-OµX !GG<2כЀhkoDk!R)J?OZ*|A;@!~-2%?z=Nq=y= [p~mxmp{ˌ\;D ԥ{@r. K?$ ] woysr%Nak)@#-vc}C''M.OSX2Pb V C!$d>x\R$ Pût/zcp43 d":0^*myDK~,BMb"T ]^p j_-IM_=lӎ:)&EO^7#@3C)L<3 |ϖh$:6ܚBO1);P+YZ)hW-۵rAe55: %T9& ĊT8e+/z|']Ҩi#Tuk1 ݼ}Un'U2u?ODf`rc>"EO,:L<;SE[0ĴQȓ E+QIhe77KUPPq00= M9^ DgF]SF/+sz/KEx7@`- ^>ȄaHJ/јIY.0>5\s^SqDqulZI)*Y=/X Ͱ|Xf2͸gw6j;urCBg0/Ӹ@$fhLQ\&sK:Օ_BD9(dRB[rj2!뚑Lxd?Kz6ʈjGjF 6|AbR"̪f h1SbL=׬lg<'蕨K$(;KvC᝕C-A %ʸy,d6#jdՊn=j`NR$)A6%MǸ{kưbyv<|]n(8%Fs׸)2ZsHIYCF. E'eB^N8lMAqMpuB9wu2=s1@-(x2>KԿ6)r5>3kBJ6`NT-xv9X`8HxՎ)*va{mn)+۱욍?Ramkw#[??|xS:Bw|Rr ,wRJȀ1w|_Ch^{hʷJOv}G")U(!8%"+h1Y|XQ]~cB>ZgO+[|6_0 ;1?})}0+G7%=v U`wz,r"kSbϴ>bV{4*v٥ۺ C0NeȤUgd^yjSPK䓵М P3gˍ0YN̎$:VxЍr[\n侰w@>;,Vb蔐e2VNNo:G3ʵyyLrtrE>49m%0x8<^_(dlaS2Bfr5f獉 v]MkMawh1cˢF~MѫӵǻJ_1(ƃ@ھ=Vp.H]?VC~BzԋV2$mxt?&-6q"Vfs #fbr*DpQ@^!|i3T ?;\ FN 98"O[=Wꉋ}4^w<˿|:4ufTxO^s}n u.3A,"qjmhoSI|'Vϳ-;VXe-sIDw_ }]TJ YZQd' f@jY>N JOx` :'zZ ͔ SM, ADðFBR9X+zrW7yo]ݺZl"I0G "U}im6^(+7 V@c>soU%^}uLl@N&[ʖpU$oyqL+eXw3Rӿ1 IUJ~5bXDl^4W]vkͣ;G,qmcՔ!og2J=[cE^' u~m^ sa ɕ k4u0 txĊ$Amk`~VQv[l%_uE`}I.iatdbׁyux*W'<֟~`GQ<[D˽Qԫ^z;"-mTk˞ JӚî%brbgʾBtKqeѿ(bH}zΔ/q>-4K 2КУՋ?w{n`cuqJ-_Fn8~϶rQO1yP1\C0~rkf1'WVC o$-匢 DR,AܞM(xdxMs u"z.kE JWAUph}i$VJBC =+bs\CF|/~n\P/WW 30iNl% 8$^݁?ly]^ݕ[:`YD~!Z<^Ӊ<$6;iQ/m >y[8r Jl}{bY`M-糌q۰dqYu/INհLmu߄ T-&J Lqw֟= $N?n뛩GT};"&ܨMKLJymmddX!xVC}CspFb4W_>Õ|^RA'< ׽Qhm"$)75x5/mļo8ZBc(Kj[m`pXauFp_-O@'+]7jKyy |`4{W_3n% #5Q8/[) A6U$|[xn4%xf:1|␿3Nqi?@O:h"cl=h^\]b;]B}Xپ>v`ֲŦrVgs[3|6,)+g& ty36W~ojI [ ?0- 9qVNva0B&@f޽`=mŅE+ȏjLm`i+뉢ǚ?MH| 1S8xπ_ &vx( 'l P*&0cgV ={+Y"&sB {Hktoy97)W: 2 B QdeB'ؗIYveS/s'K=nR. @nй# VA ~d@[FӡygbTqÜIW>e/9>9Y-#]q1i<غÌ[\,I$qUrX5WWH+v-][,TCBHeLKde;y$eFΧ|dd#۝(EE?!Cq;PB^b;%^^1.{oaM5/;sK#"lhL:s{hr\c`HVo$*$*n*r? @QNטTu++9߃oEHo4)CW# vg̓lܯ}dC:%HگM}eVԸo<7ix/}Kc K@lwiMjϐ!eWA}IsFhRLVN˜֝ n'iXHb~q%LlL9߀㋐V6 eQ[IFVU3| 0ʂ v؅>9Àr-?÷}wn)C7߄5צɺu5J_Uek ZO^D迯%){sb>:5r>߲lw(HC.knj%dW"Fl(ԫϵ|Rq 쑢Hd` В7G~=?sLaqzHjhD"Mjm?Oozc;/M'uDZiE@h]i>葖in p)z%veu%DEKՏ7h(N+dNqK (nԤ8`Bwu` GRTMUndݘJ CXWc:~/%pF+=p+?#p*~6ߪ8[*ۖgDmhrGlt KEv^5ZIU/Ӯk^Ngvu^e=qK/ƒ"8s.ql9Rg(ĝTQ ~ ָtжlsZG:G3NnV&ٙaVIiK=oJWiS@W&X˷\p8,"]A~o]>:PkP({EG&0NwYKM٠N6#Qlh jnb[һ{7B;)Dle)4ԚL+K1oDM|@K{ť~. ԰Z^ v)V(*8J!" ]Ѹ<VSK"}v ,]@!UXԣ3/F3)}5s.0<_nuJAg;DyT4|coQ~_nySy{k5uNgc] +m']\,%LHrEt<˜gۺ%SQrMĒsd;q kM{ÊSVՋn?)S#^j/iQ%a6Y6O3=6oӜI[>})ADhÎxƸtE2*ǐьa}`wF2-vB0C}ӷĭOK3MZkgᐄ9-Py! V0ac,W ht!@Z UQxS 41l }ȸhX9 *Tyr/7DQqxG *|ijrͣDNd6z]Gk{p'8zw\rݳ`&=Dŕ'w=YЯ`L6£zќ*k %TSr%Y^CBɑ+I!̮9%HH]>_%%SL/Zjy^6ڰ1uY'+9 ?c$jAg̢ui%U֕(±p =8 "4~ABS|yzS@}3Ly5j {q%C4=<]z\D&F7ŘWb!Vssp,!} hZjS8S~Cbi%t"^Oy >葮wwUX)^jlթeQ`_~.*h]"^ᒃ:/e$v%wd-K":#3%5XWUD w=Ckj$Mřv!;JchLD5h uTNfy@ @K/[>ҜBQ:.k4k[nȽ:('m o-'hˮ,FFf4jBC453&\ߙ9Ә%ށ쑝2#dΘ= jD {,(tZEq8sda-l7s&Fs@cajuY۵z8;WM@y#W-aTUe Δvt78A3 %bq=rLBg__Wt5p3W۱LK}柘9eq/fdџǜ88kaEo@yz-EHR3}-Gٰi(mzѵ3ʇJpJr:͑V¸|kg LDkƐ N 淽|V|*':>$u~ l.䧓Mu؄faAP;bNc\:P۞*>"{Y} Ԁ]R}z1JJq09`kF,^Jһfyyt_Wbp=/1wRHn"<cAdѻrkf8Px4d  U03cn·98J`A+σ3UI>AM_)?r?ވxwfv˰P409ܰf>vM3{QKnTTͽix_IgsH~x!}U٪cƽ0N+VqϋJR0fDH[=&O(UjN6; "Z-110ZnrѼI#phh1_T ӱJ>Cd5D7]YX̠bk:0OSɺ @z-i, bz!QFMfC/Ǥ%өsJ,FKU]ۦe~~TDЫB|:f~EUBWi]BxUU]Xu,Ti@.sTSExI.^~de;,!{߆C'XDDI:bb`3UyWLtM&[8:ԎZ\tXk 3ʨqePi=Ftp*R땘PQ4AYlex5ebK&n3aա}<gPlu"*ΓjNw^zt=X hrQ 4B M*`f_0E'I=i߿ZZ桱mK"('K}4WY#oBhkq/{ 87h(.V8"W%eX-0iW/)tQ cʫbJPl418eM~xbC:0{$&dfSZ#SM^\ÒeqDnO(ϐ6THK|pL´nFÏWjbR=ƗS?jȺ)#Č}mmOq1Q=>WךhK9I*R`+^}ͧ8ǩ-^2~M.P?\: 3~cƼdskVVdLi]; 83P׋yL*)܄r;G[QF0g|#|L JOrsw]+&7m~Ap߱H?`4ڲQc:ĸ]&-r(xD _ndijy%nNt !hK^,@O7ue7@`_80E[^KZ'* D3Ԅgzxf@y0]rS6=$LNΎK 8g|8tENA.lrE/]% FlFŪ>Rz nyaKdx=ZC uaD # 2C]yssa~ \G#JQ(QJ.tZS>,B q:sP$N5ȊUD7tqoXbF!Ry"OQHV$cp1@ŘzEVfH/ Lƹ ~)0V`'p%"nAZ{Bux cS>!B"0k~دo= F}ʩn\Tb5.,=,ıDj41ceq ”{P1W6k:dnIulXY!kTOj ѵ`#z+8 !Ϩ-^b6ԋOkWzQ'sgk|HGX>2I-wJH(K R]-1kO1 \G>i3L8Ő2ZB-g讖CD789z|<+1N|#DSmX4ؿ٨VxMX!;=O*"MesJ6A,9%3I]/72e%@o/ =lށ͋ձkށBa LC;V.fd}x)Pg"\!w9";GTC{ܬߌB^ ?zMowu󰄼o6'[LB"5(a1JM1F!|]+}^$'(ѱJ 9 |}Z F\Ka}ERb,Y^vF̩C7~Zxpo”,ΡS2dPc@vۂ.itѷ`,$ 6u$Ad?K|=BWn?ѪP2hk^ y3 ~(d'WxxVZ~$$/aئw/pZY`{> >3vLLiaꔺHsAJBhU ב EԀ~]eE]o9~ o&NDYQ V_H[yy=]cd[1lba|05Z TQ&OmVLReT ̥k^aوmf PI CQ@l3>dJ2Rr-|+HF\wECbDJe\$DjwtV=ca-i\?[EqNa#, ܼp׭Տ`Ar!p%D@4LҐ]V/8JG=^w+h NNjpU{4At%ﱌ$iky6@Nl ίL;":M.4t{cʄ^]4U"D\m yQjCa\ pSXAoGN"l-=j*̈́y4L;a 8~qR"K: q }C- ?nt)#B c"W즰iY%Ný;eyQ; ;#!Lav mS /Q&FW4"t%v(d$'F19UXDC0r|@K a`sY0WkDn#5.0& ]ڼgH^b[Lgk|l5tswOI\ڴMFSE~8D:螫eR@pO +1:T|ϜŹzǤ `k,{' Dudbi$LDJ;28GN aЫ?,zȆGT񊙟t']'!RjN3e*/N1#-~|8`% ɽ-~J oh~aA,ꈱ:gjaZF婌YI^(n5O'._Is^'z0Lb6g[qGLo):C&n7vTJ!w{c+<_Ls(1+?v\Wmjo_e`-JE~n(  YRiIW;^NJJ3H:eO2t`u/kL5r^vw3{2wZ3MR Ψ_y|2M gyՔN;Kϰ,);FV䡕U?NĂ)erFluP҆)HN_a8xƚӽ*r{+MpTSaEWBehC"-DwQQ8x Un8u . |n=' yy@6GϿurV% I ”?W-U?/л=! V*`ֵP1XVBM tbcFCcNwPm@s֐6[w.zr?ڧ(X\/ݾ*zi0[wҟ*`WK}U4o/J1R^ 5cbA5` %8wJr-~1SIxpb 6py T`zxӍDMߍog\f[#YRt4mˎP-ߘ>t~_Z -iJs6nF?{OOxmYAQ1A>wXl=u$I4#G]F+G{EO;>~ܡJb`< xՍk0+1P;c5ϏOpv/̗g榁X uceI ] E\*`6U:9!k+N3~rp~ܤƬ IέoO0iKPW>GHٟ OHlb9HǠL]T58 ٷ޸o@"&糼#.CiFU0Mp(ˈ8wI篤L未 s y@oMPb;_ag`l˨jr:jB!Y.Ռt (+B31QޕOjNˏjϘs\t,hdZ[`UІD!InxkG([\rJQᾨ6ZE$[*O^#~d#;=iߪ[wCNY fcZdIa9gmݱ v]'5 ޙɊ}hTݤ:[ 9&,jg?ǜVh&|R jqڴ\"}X#V/2'|w$lqqpF_UQ'Kdb~5g~ :Bj"H"1=}R%+~p.9C3ooFpȡEv-4ȧwi$wV/l'Ƕc+}W۳js]_KY1L:ڗy!ƶ'JLӃK$ٓ[]鬋q ňW?C3N{+wŞ,lCO!D2lUe1A?H\뚀%zve'!@0qMdAt?w)n͋.Z('!MOV X^M ĝUnd=^-ʟVPPZ7y>VpUbrdgZ hR>fif.U{F42Y_?T`eus=JvEQP7u!-s Vcsus[F{ynJ@6:DIzjFK|'+jDӉnI3]h!A=eYoL֙(>*S]fk3RƕBzǾPER0s_qf=']RP>o$g.}8%~j~ $() ^H$nB!Lڊ[\L+n$ƀuf %;-`Ñb&`5-|.aLݸԇN".FgXa1Q= %ABH卍te3lgإ%Fz𠳠ћ ݉63D]nvsw4ƪΞzF﷐^e= ~gD<7XRT_A-!vfҤڍ I1xa-;h,Vp7qnYTQP$3'NFjm`YJNy0(N6zyyDArx)= sGUq?aIƦ&I/3`GPy_ O@&k!9\Дr&ỉlrBE+6Bna: ^)wm&xu^v'L3q', Z%:gm&17js*$^H\nq3:)9@@1L;ˮJ,EB6T0jLl偕qK}?-[$I/HpHݵ:s$(1)OAu~ԓx;HZ(Js?MG"vق76Dj:@%Oӣ@.єa3,h-oeJ8)Its02lgQu3a~e]Ŗ#JX1CcYT87DZ#\$W$~6 \,jB^ aqP**Ȓ ,i4bګTFŸUG_D\sU7WǤ28FI)ŭ^ݚ2A->|U7Au]~#~ ~(V D,́6y`Y(cYJooaCa /ҝ=ZQ*r0!㿬DJ]:ouW:sl1"[U$SOaTeuT )q3h6%Z`r_p.K&WeOz hW p`ߵfXG H3i΢ȒZB̒3@oQ.F,@6>!MRZ? \")Xw|)'-hx*nXէ ]]7 &-uM܎ԕ{3*GoCK'JC3U9U)hQgލK~CZD1UW_*cRFlI M Ϸ_y6en`$옅|M7\`aPdrJ IL!Mȏc+Gs6CyBdS њ)Q wn2eHanߒ^ėx5%#V<{;q讛2..C[6W5YBvLYxZ~ƒ#tQוa%dX doC}q9UuwwZ2;kӤ[M.{9qOLy}fE:s'YwXJjk 4gȡ/o]%¢nG:m^ =, 9M;G8[2`t=/Q4/jTC=c60큈Y2?2gh+t9+?VC0qsσ!$ËϮu牠a{ֹ!Rw='XG bŭј U4j ZwM>S_0s!$ p/ַ!9dox"$ɹ`ZnS OPӨ{nVul7Ȳ։7,+Q637e\ .Ek)Z:ZX0Aq@@ A#fhd* lAyvxU/ҎK;μ|D f&9:Y\ Y}]t'6xʂ #[kK|' KXdA{Ov%}Ls)U8Ћ T_sYp?2`M0=袐ײNlNCx=Q?2~~\qE] ñXN*]#c70;rLlV\@k Cm;j|gň1F6):f4qYhW^(-: iof .Kp{ցVB11-Jx{:Y['V-i/Lv:i1礇",ł8@MZUl()nJ]|hĝ9 :G+036ʼnXX!BW*zȱc1#$|1( 8uէ~w*|5v_PLJ֗f LQ_ ˿r9Ȯx\f^"jsm5t-Lff}Tp6}y(~^hlNyc7Oe(ŔyL{nTUS+)y^?!Dz$KA;J l>'Whw# xBD,mM=PIO1n>”%rxMܓxtx=_)kIF#ՠVE f HXI֗9]1L2+f _B_Bf*"⃰ ?,bش?3͗wl8r0O ?O'r3YZ~ gvo٭[:"W(ϘO0X{n,J˃ #^PlBw,bt.}ť@PXE3T3:p62f N+tgY<"EB8}:Ll}I w,3x'Qa$:͌m=Pu94h Dm>okTcUB']m>U%dZwafиw>J6`z!ıFۘjǴD\TF$ $zTarulEyԠ:!Tnك }RU;FW@BICVsMyԑ-vLdZP-z<$#T7D<52z{uxdǵIG$U1%x8s [څOf @ى;˨\aCWSdb(>;>۳;MӼB&%*k? q~W ³;ȯ8@Rx)PS$>u@Y2US=_7 cAe9X[broTw]c /p~ց[E)'n'e4 ~qE?P:mãm0·{;إ5v7l>o2+v(0ԢڧA_r(!Vu7g#jͼN!󸋐O@u{:~$)OCٱ$ |uћg 4UƱNyL67Hh&/HztkY[7,grBAcS&yհƧ -SχtwLR٦fx 1)kf4w9Y!^>WG:$`|'|kc@2}$<+ĂMsGښBg+ǐy>;*GS ޢΚp2XNV`)\$R`|۱Kdgh.D~dc i*X׎aHZ9 !f{MmǍ? ;iqkt̮rcCuqP`#'>.S?P>OD󹩴TgS7Ho)XAm6L-zDD)h6y~BxOt*qe|%hm7!Tb#* ܕxZk,6 ? of”"@a">8Fpa ܾШ rQdڰ,(ŢHElsHfz!=_<20u3Bc_\u/\H+|E36wh-"r[խXL^)fFR5.h۹0tت\vWVɇ'E1*LK%mI+p3K;GWFѭhI\R/3Ri}όh~ %DF cpu鯌Rp1t*׹ln ך2 5x5)9'!`AbQ" cօoW;;!^ nËږG'ί|Iv ` svg$?1s3jlQ{$Y&k251ڃiR2q$0G|>9Dpa0"/_5&Mb7Y?&X jiJpGyt~ 67>}0f8.zp2S#o=Mᝲ7IbV&zl}kuoIŋU2{PLC)EzߚA͹68Yo*^OJH3j nW)*6m/ۤʢ,M2`+-an,HqtEoRȢWы@R kӜ#GkUo( '~" hJ)/ìo~)N꺥g/#yho +$51!CY1Q\?Ua)=Ks(pB%sI/e˭XEͬԭA[| s 4"g~\OPtd õ}R [r}fw#kG210gQ6G PY 0fQ Խv"d]j~1+I u+g{ BμZ GlV 8\ @:(զ.' lSHmkm =sZ<`s>45GAVKiSJ_j%wZ>"g.et{i M7IuSD83lm [:-o<Ցb}d;3V럪dҩ\cQ\R6)3B9l r?4_wv=c\^ T?,W8gvd"אV6k!9N tK"hvKY Xhƣn@V TKQtH#u #a.gt[zaPtba"Hb:i rY8gzœWz /^­[V"c\m?sVHrsl&F|7y y6vbۘ#QTb[lT_ߔ dIyPw8ޘ6~% ʮC^8e,b}xn?a Z.$f CpGȶ 4J}ueGQOa.TBi02?l!nl:vN 1xkHy tVU`>gl@YjZոmfQ1|b6q@Q}H5ӛL z0@v"5."q`AS]e"(lψ-#6Q[yG_ Ҡ [έE 1Lѹ.aj,\M( ,gVcұ>c6piޘ 3F xSHoJ]p490X5CGx&i>TU@ 𺽂Cwe[7=Z嚄YE4BОPAƶ5'z1M E{?ȲcS]֭TX.8zU.,5LRdq~&R`50_a\`oS"UJR[m C/I\>r(xq)~90E7y^Ð(n,!94xӨ\9DsTgS'#S 1kdBN.&^.>-3=}aI31- 2 9չ"Qԅ(`pڹW)O˞HLҎu4M}TI֖6dC~,|DJZg &,KkծE%XZ"AK$ Լ934= 4MHZf%doſ?Ef< "/|K^,V|e֩S*.Q`mN>CRJ,Ҩ3+n_"8A\(JNsQ Z¾ogٝj[x5nd|aPK8ZݔűLݼMDL RD3c-lN^X/uq@UT9q0ݟutYݗO$r&nVf+Ff`׾gM%^2 noGrk+T64e#2O(W>wҖ-?Ċn:JE8%d~^MFƂO!*_'DQ̩)_`adgZQʼnHuDV]+tC߉UK!$I|/UpKή8]3.1njю{;[Y}2bmL ucӸ:FKiX4܅>g{R-1lmxܷ6)5uiX|*ȫ[դoF[a3uҮ6ѧF,V)His_YTS?55|Ba!x ȗ [#)d&Y;n{!8ٓxGJ4ۢPWУ{a4*ɉ+=4_0 9Cxn%T0~0a{c<79C9@`xDFpdi),v{ 70@٩-F:Ɂv;7)Rc<:- ±N{(21J-bƔ\<V@!'xH6Rʽiɤ瓊"6;( N*J\ F4.͒jԿ}+YfpkK'(8[e>&Qk?b%8fr3e,|hEx EW|,=YnjpXX;OgH)>o\s30ȠJъ_1XM=2<+=Oa2Mv( j CGTD3V'M$ Cl0*+puVjN%#' q9jħ\O!1fIxL:aVѻ.PZ#bIpAӟvOz ݒ.XA=ɑˇl"=㚄t{FPa3g@r(oӮZf@e{v{BQ*|-La3Qf}t·3]Y"Zj,'_DYӤvODVV 1*⩭qU9:}woFw`=,PoǣW݊xXA!d!2@R<0k k5p}jpdl肌MH딻7J<0fE6-qPh:3Z6N7^,9*px^ rMo^: /vZiy?X/ݡsw_ by=Yw?'ZO:[C$pxUdK+gXfRMKܗycJx,-98'*ːKmt{H>M-V[h@Kw-Wx %2Biu_Kx@jOi# }0 Mıi @+4 d{жo{!-DkyqI"C<0 BpRU Qkp=n<~$atdGuϑ! q.{(qpEG%doNݲCVo^Ts(4bm4ݥ;>c3[=H}Oԟx 36҉:)eX0`#mymW .#ŰK:VBY_q 2~O~]UK>1 sFZ\_1+\o,Qb7݅)_5O43y8`s( s.a_4ms-w@aUI $>~w-|keM8᫸^W&dsu1 +#Țtvڞ@e˫k QIM#p*L>mA A&8g.sN{lG7X (5@oBqx;op1MY-bf Z*z!(9ɤ?*qGyыIUG_hK_ұpzP$f@ 8^6"^4mZxo(YR]'jMC9&c z#}偲s`8JA(*8Q&eqRD>9 d:j&D"jp3>2*>92kE@vgY *קm:O6TQ O2o?Ol0u_^:Ќ63|hC;͚ӂ9>YMnƙ=%؃|*JK Wi(*x9`l-k?.4b]"dݷrㅰbfQMɴpN1Uf=Kw< lʼقpmZ;tӠoٚ6rVPi8, ]I?v(W(+E[_d6 R`f!u}tF?0g?ch^=A`?t,2kݹ.Hqĝg:$!69jTíS*Mz*TiJZ9?fZ'}"V@>9U1,:܍Tw`۞1\2=z ^gxyb]ZT0 4XX4+kvȥ=\L"] qXҵ]үi@R'BRf-O0*kK+n*N>\)0 |c*]2$Aw|Z^,Cm  C6/HJBNDK$ 脨1JN7z04bYcm`ƞOJ{vjYx dA@z@pڔ̃0T0q{N}{9H!aye:?;cj~ʔ "utl6'zl&ImV1eGe. 610y. Qͨ2pC޴W-)QTQ]nz#qx(h|@(< 5:Ԇ8=wk&}JKɛ0N8֖[i_;RQ&іwSm %C,:ƅB1mqP_4c2XP&uwŽ"\5.V "+(?9̿調섛ݨpGWC5{~7xED&]jݣXb4ڽjɃTuK(%cJ;~m\8BhbqJ*g MLהκe LW m'9脃Zח^ca$sz`]Up:{70z &4~Y΂rX0٩Wp;'|R}q>d8+:;>3[(}&}Iq Ya`ֽjvw aƿ]PioX 8CpG*YC-G_S1WhDi鹜 ̪:q팙ݹ$';㦼%yb5՚j|?# p1kbh.$Lk`Cn"Q* Xobϙ9r~k K(GNZNbX"+~˽ƈmI[l%m+9V IvMZw4bpKzyW_nOCQ أu5w@^mo-5H4<#vE]oc(`;4imY<ׂ%a{Ir?wת +FTʻ`]?۟MW1"gVQUW 44) *tCOZA_;FAWrE ?ةf&C%Y|{0uTۃ8BHdjX3ї*nݾ5wøs iv? ,(HoN+aKCYۡSJv{] RJ#jU}Å#+^.e '-IsYOLƠpA%W 8IJA(MP N PZ̭;zu/gv|.< _3.)Sd*MmG5_}48oe; !'{>Hʈ[CUehÓ?%o!t; a-dSo/oS΍TFGtP <Vfek;|Kgp%Z"'I|sbD~A>'F^ ]e#J& ٷixmx"9䬉IX2V|XdVZ᾽$ tR{thCG'{MDx!_*}Ͱ7pأĿ.hc?ě" _m]}U?MRl*{>IE~ 9^ ^ׅ a;-@$6FR8^ȑ66XUʯ_(>m.tǤtrDD&XSv ׄR(Rd8q.ݐd2Am*h !Դ0ZbʮQe@Ud , $`/oNa>!{t82yE)Hw(^.0QR<9ieRߠ Hz0[fSRۿْ}gޘXR>sص&WAGNԿ?Fo?˽lr*: z/ȉhMdk))@NJ+S˲=mb-Ө6o/12#+Nmv*ESœI[zg) y6A;?) Ręrsًr8 sYv!5h%n+TEwR 5zB{jSџ+Xa9F$[|A.213-_U/g* H:lҲuSF`v* Qփ)OXͱwEFV牕N %6{^2QV?fΝ.V/(1Seu?]ҋ'&${ܪ=k: FgugoN.%xs:+\!Ѹ 0S0WǒˍIz{'Ї(7{zm C g2No<|dqP{N  QS4*w' uW5~CQYh$ҶYګ3lZ*O2btp KR~,P3?n W%gp=p%Jq՟O.|gsWRZ?w0nQhrh:!ZGsd2n4_wڮsCv:qa1<(SpMW=,<O\@$KX.$H_4J{6I0|`y*gLrc\7*ܾ=nC3e?jULhwr䯷"eznmg$R&G\ʜڵ}X?χCe(՜Z'݌@!m,ffyMJf펶1=,Ŋ^|۔N S+㔱a!U eÆ#剸 f|Y^ڦ#wA}͎1\at!>LdŞb#:y;J;]ky{N1V| :xE@8d»/nqysG嵉Vkpgeķ1¾ z0ooN㥽nAL7In`dGooP!Sn]DBHzgUIL :?Aģ`Sհ$b'Ja 6&yaQ67/7Pݳr7IU*w,*Hk_-'МlVu-Vl|6׋_WoEʎҲ0v`̳+0Rh!LLBo^[c4\0!70@[=hXH JXh@a8EyfZgZ|ٟ<؄b¡,G$ٶmbvw0;7e c! 6\xmϮ~ > ;S]7˔|EFĶdޏ sɰoU \tG# WS%*K{#bn 8Pdei`aZc;yzֆd>sK|=Y-/?P @J)~ qւLiQO2585*DhjgKmJN3gmbT(׈eɒ:KrÅ\1/>x~@#iɫQDN #LxTU]KWP 0mYDφ@ Ǒ.UvsX#9Gmlք(/zF>I.Z1A)HkXrOԳPQ j3ޓhWŮaBEΧ_`)wX j`nʰ?k< nV0x F,,")eZ jA-ȍ;S8nIrx%s$/T,j:޺{F 3+] M?ߪC yȦs #RP(Q+Oh۸sH1IIۢ%L}B 촱^vFٴev([+ݓ6IB?{hܞb]˝1R> WVdlAg0[]@"Udn%9rʖjGPߝ }GÕ#{[RY_\kf!g4>P#X̌`fD H)3^[%=4R T{FŒ.COJ1^P<\ R^R^#*r2He ې 0":̔zEX+}gEQ16GMW,BB?:NPtRY•[+;OB)n*`)/Еsw[P;SdAS"Z@u-crosDO'ntwlh7|ϥr3C'ڰzCk@:3&K1lAGaMoMpVoP_+ @V/V.\P0:2fvŦZ o sس)ճ29!E.) 'rDL>y"-c8!+;v6F&D/+xG)~`doː9iU+$7Ӿf1$.:Nn2_뼄>2TX1"Cu"r0T{W5tS#;QR98dô%2F|^بxhE0e\1qbeGɵWfD((eYel+MRg/\(!.!e)S$ɠ7 P넋^u)A !=X;9V`Iuh,;^c6k&%<&c8zzΦm"_$ẸSsh8f9uaTC.:0]O R+D+H99bʫ_m4%TOZ" %UՌ\l'U9v*CYA9(g[a]91ȦUfũa%8ᰋG11Kc|d\ɴJW58,Q d`g<T psa+j#[pSŞa ]1/}PkJg6 9a '`[$_9kT9Uw(zDkX_-[h ~f7۳O.̻i߶tt >Ζ,7!t.Un tA+Һ" Ss]"l4ta`j+N&*Dći`_jV-6e SL( f`bXEi1܀%!ls> :a^ݑy4 7gzx%G[[ܞ;!VXTY4_R,ܝI!7dCIZ۷Rwu` П~PTvf4C PɌ>y\=Jp CYxG >B*>߄掠\;~z@ʯ*|;A/\" L:8ri՟ő!n% |)3 giO~uThUV9R.PHNB[}WT41pX[La+6'%I&jF S7ƟR8LaV7*>4.]ʌA,˘rڒW2S1 Ǡu"Q_Ԑ2`TC :fh,Ja;%#Y#} xYBcO#M-N=$0.V:  h}A8eJM$̿62Zb$ @xcO* g o68" 3BAW7ER߆L$YFc<8MEoXGoz&}Ct)~]?A,\ZAsQP5|4 2EO40@1{X{\6V#5m\46\;~e$fNC;y:LY6"gjQ##ΗP>-ͪ9G.t$JAq1H S 9ȼ$tIqb-pw&+M E_Hpc=.1n"h׮筗{,FGwW*8& {DdsZ$-Ӗu ߶t?+EһPɊs Pu!@)SqR{P(]vւт5Qf nXZ䏳{ .~f8Sl,ECz6g# y Ҟ#-_`;hL?[ĶRIK!c7/clLdX4i"sq^S1횅D&5 KH2g31e)mlK:Q8,6aͩ:i0 xY9 rNJA=v" Q_SqDdBF}/"P4c3L&dІtajO i]A{{-H11lgFeF 8ϤIW0[4:Iڄ_*p%βSa$э]KӲkTQʬHMqG]evmV帾 }U,~v!)9kotNR@{q {\Kou=,PxM8uvHAXow)Ad}r)T@4yl~43j e@S=~㡦Q!Jmڒ[҆6G+ V;=0|kUρH2ѩO]l옥nk?/T-"*l䆹b5XCڳk9pNЊ2o,bvfd'{=b7 -/8Aϐ4JüJ,:025 W*)y cQB#r4nБ˛?P'G\Αyqy?qAH{(z,M]4cl:a^\ Ee8 =7A sI` vcjIw=.+)hS榯g#zVKDP)K:Y;8\ZA( F…ZH>Z? ÐzME/n"E0!PDu>hzAk@\:@&%?A V5k &jF<Z<Mwf;:@ȹ$(79)0#tA<<H44ZxBvz[ν܏nYW_ƔF ޤ )q+0Yl2P5ta8]~?OmǷvrTn=?s2e}}5`x$? b(,ϙ`QN=zߠ%bpXf7"};EjױuNG VCe^pZ L2<m T}r jR3I ]1'{@MD:Vq5V5|)YZ[%r3NY ^/W3+?J?G8w,9ӗ*ĤKYk=SXt櫫.Z+)rLb@ dJ0yH QL3:$QoÙ Yʶ"h Cd{AR?ƖzxKvvyK)O 1¦ʟY$4 =*D`@dX&1p<;9.$-z§qX5b.]߯k5lM:/b%>;1f$G̬&4tUduPҝ%Dz^خvrLeu%F`)g'}~v|F ,kN׌&z.gT K5hhp|$0>#OşrakSV-ւS-=Z靝zS4?@clXi1 *P0\jbsz>)Ma ~I+_L:(Лz@ XLTw9Nr[b 7y0jcg0)B2S+㚅k3~8k7[KS3e3I?_z?7 </6o&DPH 2|I^$&:>.W 4"xCX5; WM)j)nn $MۇFL~[FCLo2YG_,fdh~/bC ~8Y<ܪI"=h@? tOͅ@Vbx1Yf4E.2zPeEi3g#kh\[MϖD*9`*XSݡFi\]BÅXOfWQ'lxP JfF }xOv!Q̵lx[WzHE?8nY!F+p^2*Y]V@2v qmCQIT扬81Vpjc^xqhXtib$<dɵfxU4TbqM$\&ҋt(mwPfV.6B'!}EcD MOU 0h57"5b۲8@ZPr /'?P۬( I};bhk)yL!4Vv}Ns,_pFffx-ZФ-ZWBq?aojJTpϝowh0 tanWjʵYZ+V7e^b`LƬ=+Ij4h#A8gi dP\<u9 _M{2F?}+SCَ'N$vO\ZF[ 0MbmYב Sr`~{9UmGȣpCJ+.8+]4&i_"˂y FF4 tJ@^ly \.".mx1*N>b8hyc# {e`3'`ycg5g $=-[o|0~1 ='2tʚrUFU6SQҚKל}ұkb&:OA Yz6&L~W Ӛj Ρ27r|AIswd˿ aoUBHzq7=K.AL4ň'c3NWkF꬀8FMAIu^t#c>wgJF_(}D)[wj:QppԄ!*;f#,S O%DoɼkGo#0)+n{ETd"[,dKᙡ2f- 2پ_bT.$Oo熫Ai빀s/Gi& 'T>T QJ{jW҈TU.ZMHccy.F[[EW~1Jevȯ.Di[gY5~mɒpYf.֔d։*O;]O|!Yew/ũ isL.{D-." #{ĭIaFјH"ؑH#3FLwMhcrXD^8\bfb)ol%V fL:)umOY' tϤ8͍]c-,Ҹh̸ci+U5P&[XdJlzV/^-2N:j;&qѬJe`zVUXGSM5e;zn@ҁa!%@z=A]b.)Q Whh4f~UEܶ}Fi'OW2ֻ>x.yɰIۃB6 I5X=@E i;-&p|>Zz%͘T#reOVEȏvy" a6YMm~,L?%s7>Fğ6Xy+v!pBNLMwWV.*k֍(@AxFEz$Z. 0|U@>2Yj px@ϩ/^–̞Be3Ajߥ_f7"/~3oۊMnY<kߋ7]}<+fTmWkIX6>}Ϩ5TUS#TtoU`B^Wd0s J<$)?%m=6V햫 7v1Z}Nv^JnJwZݣ7%>7ػS}&hCTL=/~ŝQWf0@P=Ov5>=58]YAT<\17NVy \lSRAXZy`Nj TzGn ;bv R~ fd@9ue,PxƉR%,`H45T=wU a`aV+99m KP \ @,%' X2HCqSw" PG"yk$,+M)Jm?#?PgdA}oY!4gg1{)#` TR]񩂦>)ډhjkww03ޜ9"$ƩU؛&awcl 6P.5s̃tl>5 Fk!!NlV0oC!wCnOk>LDi8jDJy@^!6jqrW_ UtօdHT{J:WOR2*`'kX#5F@ke&g.Wxd۵\7Do2dU*O}<X mFNl z{Y`DHt&*(fAS3f1{^ Icyᝓ蜾jvrgW5+|hNJj| $t;tH r֞UQ, C˭G)LuVDa=YBG\jy?^-l6OA;xewL}x-ɡP;D:, `x$,.6(rHij}WDz"|ՍUE6w()$csrPMzkXS w5sD]زj:YeEߋB كl\  ci[BY+V;q /2a.tbbѾ 71gq\e^E^2Iv|lAZM9zI!K9`eXtLpRƉfkp`!mt(#)C{{>WyߍS>' AN~;<7UMN8CUWQ\tD6ZEc1Lq|yY4Mt6-ѝi& fUES,rf}Mzu3Aw+8ղ0@~='`& 9L P lɳdF4Emrhd͓.oAj8UtGBF5}ƯҼo뜏33ΓGJ)DWK wzݯZ3ctg'H,4`3N.7J$+,T.K6Z;"۟?8nL\+(`w{u#̿'& lS|sbE.$.i_zsU0.LZ(;%mS,< sHX3)i,Ċ⇃GH! -qVf=gRb5 w;ڂ@ʼaˠHjW6{/ǝ}X.SKĎs`w/>Y 1G"67yq7ah#[Z|qE0le/FJ$u 3u=mrl, SJ]"~ :*z&WvI!R|L y'(wWH =sZuyؠVU%TeR/:jb[q@!+0m}ރOke߆pUVl2*ȯ lc#C\(Gڃ8$afApԠ֫.)1:H7YlovxnKgM:έfwSŠGkZ+ͯ|lƲB(ƌd4sI;9R3W'J..h*ŏ7}bgnt$Dž2=.LqC2V=4R*mu+E$ +lj{/,IzD]Z ,(l@[B"6:rDӖ,SiLyj_|g vf&% e F|hё|_ SMJ|u6#]:R0\_,'BRqlYB¸ T-FS/\/kU݀w±lL+ʽQ&%/}ȭI+W_Yr6qY d8Ow^Sߝ0%o^L5lqxgns&Jti}U)mB_{StH[m{$EnU+x,gZ od*&$5a l_Yp PEZ 4 Z,l(k{'UwRGEۙą_Gx:{K0U JA>2oq6u_I *9:VHгʺ]Ot~bO?%֔TaB HH!%,2璏ţ^aĄ4y(Q(-4ui$a6@Re Uq)c؀r c-% ig+Lp9w ?GN = Є6HnpDZ̞w$P^uSA7"E)Y4AW&$,'t9 cZjAڥJr{0uG'~/]eIvSӻ[Xײ= BUL-kE3I>ۺ3qvs@U6TXeΪ(Hc|Oy3]-ŲlݳJ`Xut}1!\DՇE}+$ DD#xxW1Q'բ0pS!|Ʃ@ۜHJvwYqM?;AaB o΢ GUqCP58cNk(1()y:HOT518ƞr>HjӸo˯ f6qDIO , _j |ԫ„~).AꡟqN Rhm)j3"fZT{)Z"E֊5FN# NWT{~#Б<3 lυ')E;c| 2l^"-Ŕ_iwoxFwMcsAGf ]/1j> Ϙ+h!ir#7`XHn\,d0e!s;,ø_#|TJ'~9pAmGV"kqVuKĺ>B݃E a{s}=Ȇn,$H5&.VeqH9aS^ZC儳P6`5t!Sr0WIG i8^Nrv `/:n3~~7_H@@v)`'Էvzٵ&"coW{:.xKkW< jDFt<;Y p2A2~ͼ>^DէiaY!q1ۼȔqAԝe9CjDa*S91;3]{w(TIJ4h}ݥu6g%XfdBOC@=zU:abd\uyV`0◃ (31&m|󜏪LqC?!\,v`ZR=8]Wq~1VG=N* kfqzZP Mc[եIEl4A^cF%1"v=Aw,r)\2cxB1vPi>a"\\\sM)ZdsDd}L.rd{8Tus@F#k=e䟑OIQ=] m|*! 2!vE?Yy^#5([La?Q獎yo?~놗& }a+v xOgf+8C.&f$m0Pg|³FGȐ4`E"kic߼*\:>r,萮:LX5e2 |~x‡cg{aLʓ y~1389NW %2e>lg[xɹnvðeJz+ bV3eг $Qh`}a]{J< OM&Dk*sCssOrVyM9⣐X_cYedG:6էyG [ #)k-!T|db*n{/lkW9VV\n}mɧjӈ3m='%mTOn:=]bNJĖpC#PucAQ`p=kt{H]$.n"ڽYm1Od\nRg/}HfRزmLSűu\]:5u%v#EbG-םrBz!w:dP: ~'MGb**Wgl\Y:-Ʉ?fiY>J4R%;9SυĎܹs/KQ Z7WKAL\u_bˏ9'hE.qgIˉSśFJFj_&&A1C4|h]MnG%I̙=–oKrc ³&(1>4!߸cg>-|5|z,jfJ<Z?~i`%OY\~m:.{1vꓯXVT:7UAaGLgvoԊU3($0xꈈF"aԽV}ym;99lxj:?w~cԜ ~EJe\*px"hÇ;>,SbVY -]TwӢ='+ne|=ziע T 98+% 1ܘ 2TJp_'Y9*"C %`"9=BMg]!*4y!}]phc,A{P<uՋU5kzCF);bSteBOx}ԕ"`^ig+izyƓd,R6;>p3IJ%с';".xbԸ>%@\Ro] kKAkbaJL6Zo!QI;NPbnnfB1O(l,Le k%䶰B73^Fafދ4I4`=Y%7~,d#UA.MR`^ɍC%Pr?ޚ85q&?3g+V|Z}4 + 3sN~E i, Ὂ$p*U cӧ{o0wr86&Ėz3ma 4n˦,0 wh't*gnךRq@g|}}2q &3F9S;([Y!6wd|ܺwU>wLio3]_d*(]#bLrj-_'#l!u+_&=o}!N *$i 5UosDkڒ{H|s2t$Œ43+5!bkR@[qk]Zsfim z߫Ǐ/Lk)xEBTǞbꒅa+62䳥e 3v f)"l{)5'R) <z 8kuT.ÕZR޲KbwZ^aēDo1ə,<MKڳ,cBT&KAؼ}&ԋ V+HKUiH9(ke+d۶"S6ov6@EO>_4gSQ}\g2g@>z6LBYmGďD-_&é19lQZ=P y 3*u(;(W{fq6d? !OK hxa: dba'x4Mв۠>uUZ3I?  ᨊODzؾhḢqq+ކorx׶a<ֵp;_O{܋>cL&>X4z:@M8O؆{9`YZ^1yع y puRsH8% \y?)u&WE˖ZS}yM ?Is$C^UL<3QnH\l w{O52Lj4@>t̤H^Et74P2nzuQ5Klh:[׬g8dkE`L o ?v "'͗+]J_}HV S]h{ַ#i4jKiѢBDElB˙e_t2jdQ,OhHXcd?YrIˋ@sς+7f_/2m̍jA~<د_8_`| 9`K:a Tݗģ _|U6DE+Ue uo֯ OTG/.>@Ƀ YD$[ @3WVj~QzH{mB>d!l>Ϯk'VnccS.褃MfO ta5#vj k.r m{O[٪I+9 A[sZ8M|A+)OtY)WPhn1@ʠGqvkW} Zh6Gvyo6}麅l{WrɅ&ö󑿛W8c~ &A=2Kb,&=_+mo{($ uh{OfLOU/ 6ɁO 朥#"dNa C?Dޭ,V#_ߑWDɊ] yP<zH 9`WWL{7QX/!5ٸt7z+7;"0i߾UhaeG9IGgH/n"9%BB_HXFf5 4kkT`y0 j9fO x%ri%m!s*3}­̂Uc1_q\G " Cl7 w;R_Nfߎksn͹'eD}a9C%dݎXHTf'[l nzY`4 n$& iSF;OC* KG3}C%ryhHi؉ Ш8Nxjaa_ COӄaJ9뤳&NihVnC {0'-oMRt΁ME1rie^B xodlS t6 ңOT7mǎ0]X!n1C964ϖv' GW5R&`#8V8B\pJOT`P2Tu23asW&&#l+XI{s&d *4<7d}|1 燪E;wOc}8_%*=5ɒM噭{# 4'ӷdpqNpY+QQ}[U臆n<( XX4`4(@fIvnk&̫}f\ڑ(0|P2 ZY!

?Hjc-qC\&1oЦIbYf!S Tϊ?t=xHER4o|]sA K0I;)EFA'7\; xfXw6DzODW3g~EeI{ 4"$cL>&&_y)BQo0tG*1!󷶱n}+(oJ޼%݁2DտaGOCIust0L\Hk1pk&[igFt.@bheRKx ^ ūw׹(MnC4KzV :Z̉ Oh>2'&xGoP_p&}z;ҳfkuӞAV`W x:gy :k|e{mlh 6fڼغ5 - >6[ֲ\ :Y/U[-Aݵ2W\ 0Ӥ]?0*ITI1'QX>t $.$+vLzjyf4IרN&zY; $J1xv*-uI06˄ޑZ$UJOjlH2o9݄m@XKQm(BmPEY)Hp!]Yiy*$DP:>rVSqIƔO4 f| סvH~^뫘Ėns}0^lt4ѧ/v+ ԖĠ*TvLA" 5t  fC X]]S6.g7}.Vʚ9YI(V -P;| %ssUoUeel"*~!k(-ΊU7_ pɬCƛKL&Ð =DbAB -@CWg!5 YZ