freeradius-server-3.2.4-150600.3.3.2<>,rxf_p9|v;,-R(?d ' 5HLX\u     @@ \@ !@ *@ \@ @@b@Bp@p9ݰ990<h(k8t29<2:2=>>F?N@VB^FiG@H@I%@X'Y'Z([(\( @]1 @^R2,bVcWdX"eX'fX*lX,uX@@va@Iw@x@y(zCfreeradius-server3.2.4150600.3.3.2RADIUS ServerRemote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service. FreeRADIUS is a modular RADIUS implementation.f_s390zl367GSUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-onlyhttps://www.suse.com/Productivity/Networking/Radius/Servershttp://www.freeradius.org/linuxs390xgetent group radiusd >/dev/null || /usr/sbin/groupadd -r radiusd getent passwd radiusd >/dev/null || /usr/sbin/useradd -r -g radiusd \ -s /bin/false -c "Radius daemon" -d /var/lib/radiusd \ radiusd # boo#912714: add radiusd to winbind group for ntlm_auth # add winbind group and fail silently if it already exists /usr/bin/getent group winbind >/dev/null \ || /usr/sbin/groupadd -r winbind # add radiusd to winbind group /usr/bin/gpasswd -a radiusd winbind if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in radiusd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in radiusd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi systemd-tmpfiles --create /usr/lib/tmpfiles.d/radiusd.conf test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable radiusd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop radiusd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in radiusd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart radiusd.service ) || : fi fiQ> a O  $ e!%nR o<J6jd "(0L#' 8 #_,P p!3A1 YP8+ Di   Wb!4  E-T +Jv,! &]6 F? G  6n41O44Z m  !X&GG(888X0H7'X880H877X0'08'7H(y8Ș78 x80'080X8X08888@(00H888H88'(0(80G88'7H8N(080H8807x0H8*@h@B1(7 *' ]) E8  p.&!]M2}O .=O)Eu Q"- #B:J+&<FF7x`;{2=%F BuQ DS4r?wXV# %[@VRxT krSL  k @RF }"'YL61 emh/1kc_hn  aA5f /n AE)lv~a VmL?J#] d&!g9 U" ]jL1<Z [ 'F[5 xxawwG'8 } XY A聠A聠聠A聠A聠A聠A聠A聠A聠A聠AAAAAAA聠A聠AAAAAA聠AA聠A聠AAȁAA큤A큤A큤AAAf_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_fff_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_fff_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_e8b345d7f553e880ce863a3689dc11e248d332e8b0733d8a62d6e5ce166eef41537dc913ca617dd3b64e0a0d6726a8d60661b44afd2836ca2e3362f5232c1af7381f27467aad36c65f6f8e79d10d5f4c5eee0a30d1f25fca3682c0e42b7d09a3870fffeca4f1485bcb140c7b79e98d8a2439d95d1c4495374fa94734429d144f1aa60f6c31a6fed23af3fd986c098f39ab86efdd45aaac3ad7eba5b81e382b5c8ae096c15cc0e12c19fc104579a775b111be461dfc954d5067a0cc568f53f14612cab60855fcbae684e860277611de20ba736e8ade46571791d6def116d5ba4e9d4b49900dc46af19ace46878a20367408156166199dc83015c0c6c48c5323e1fc12f4ec8225dd5455801f1b198677231b64f6ade2c8f36ac90caa9a1a8d627e7bb0950fd01b446eebd65c3e7eac66ffdf8a7067c006a034460cb78f3d3ed36ff13c2590d04bf416cd715dd834a8c7a4852f2adc75960e70d849b2df0c3485fa9e5d5524e142a8d4af9b4802b8f47b46c58f12a65ea869151e7cd74343226f4ca02caeb6df36f4ef5fa8e34b8b3e860968b7704d208fa59a06daecaa83ad3371958dab3160ec132efdfdfb4ff1cc274911686fbe3afaa39c52f7343fb9368576627a8f2a063a2d53a5d4c1c050043ea12fe2ef996706dd08243ff4305ffe884edc2d3545e0192a82d1ec1ea7d7c2e2c3a534cff700e1f6d6c0878fec2e0a3e9c1f2b05ce22abe7428bbc6094677ac16b00c86dc4e249aef6203742b277a2cb78bb5c7433891120096e7465aa5aae8662ddb72a3dd56676d523243d38319613ae76e7b11e3fcc28444c0371c7eab110c845ffc542abfe479385d5ec3cafcc8d524e8eaf6089b86ad600167aa0268c002ca4a7f424440d17045843f25795850bbfbc51991fa33a5689dc96c9a75666e2b4414e6c2bafcb0087ba78ac6b6b36e330065ca53e68bce8e6bd43b3de93542e0ca218f3af07808e5670a38258ce9ecd62aaf7dc46c2291470b6648fc7313e849a7db0730b25064529d19fe3c4612f036737b6581b6a66f267fa38ab7fedbb2489bd74c8415df5f68b0f1d613bcad565d7ca598d0b56b147c7b6633627643041391eb33b57af2173f1278c47be5a8b35967464899f00893d018b608fa3e94c776065542b2230657e8dcb8afca113c4dacdb18277071161c25811df1b79e4d82e2bc5d23950a79a8090d068c5a589ec62c75f34df89bbf4774f36f27ab0e9312f590fc58987a01e12d038301f112c9bddc22fc4b9e7144988b03445c239d9d4b2e3c650048c0823dedc70d1378854eed596a0aa6e073400498c189d2b34f8ff4d1c3e0d05587256fadf737b53f780c8b4caca010f402df850d5c9190872d7df1dbbd2d57203bcf6ed127d0d012f1022221d68f5ee29d7510bc37c2bf3606e037488ab9a6c94e77266d5c9098b8df79a06cf85f6c11757a77837702062eb8d34ff862ee02691a173eac007da2330190835b14a85ca1b955b97bc048ac4a8dea70ff31a348b257031cdd57fefb41878d9a47ba4934e90a625ca2224d46c2c3d5d11584d61628d478575dd6099b7947c87fd2dded3bc6435fe032dbfbddd12b60507a9de63ca436350d21f77fa901c8d0230a71344091f2fd2759ccc8f81351dbc300ed4fef02370889113889bf68a08e81b5675c48be55250620694124e9582b09268b01406a8b1794adf8648c4488bfd709ea35e98e2d0b40a0d2c83943319b37b36d0620a3ef6df4802bdf21713aac69ccc852792cd6172b70305150d428e48b71de06bc0a2aeb212f735128735e0ba2e5b14865b8964d231b6f6542d5cefcd8b8d5515c54c834e54948860d9786c4e931a3acc0ab0e1aaa5e97f39ef896a9eba5273df312212ba68abddbf497ed5244e5f624311fb4e4427558c8ac2db869bec2ab1118a5affa190ad23ebc39834dd22277e62a19e4e57c2d0cc107a002042917b2789e4cc357efc30c36863ecef6eb2d9eb32e433ec3f9fe04530b8212d98ce0031a0c04c94e594941691d8c27f07c7d38cb1f1f46fe063a18d6acacde6eb155332e9004c935ac861b16b0c19b0f5fa237defcd03bf00824e13dbc54143ec4e2a6a9b1733a57f02b80f47967c47612f8eafcb5dec8a34f46c350b21224d0cd0d59d246e5f09fa120d74dd8af1c885af12075937066b2571d890abefaa8f1b92fef945c34c03090d6489ba73d2952d904de4bfe4a11d2cf2171e8c1c7bc9703bbdbb758fd1e579daae6e86bb5f0ff25d81f856c5927950b61b793ad9fff4dbbc23f85dd6d154f6e63ebd84f2f417a3a1d06b8837273ff2e4715ecd66ea703276208d9f35348541bc6c6a1f5a72b05542d6e5ca46374e11b94d501e1d803be1e311ecda722c5baeb89bbdf0e932ac460748c060b1ee65a84b81e75d13810894cddabaf7b3cd40ec218ad90d14b0edec0abd16ee8e72face9b296b4bfbdd89f62716387dcdfeef35d379406368944c7ac491f591aae007a8e2b7e2d465afdea225661398b7b467b475d91fedae906f510e4a307334ca6079afdc06b31b2337657270ea117f2d0408ea93f7e40607ff55b8817e3348dbe9cb662b83d8797b5658ad0b6f31cc4daba7f5b54f261de25be6958f9023aafcaa93905a86701ae696b4dfec480abc9e11042aab9aa7f2015b43b17b93bf4b9752e10d32ef5aef8192f95a52e736dcfe6914ae49e5e2b70b5ea578c9d0cef6642d68af6836c7cbc4e4f2c017969227754ebfd82e55ff169140b5553c2760436c3fe44d81376fc4729607735f711230e7b3584f2dc5bdba4a41240c12e2b4a702651f56a07b6dd3933100f7262a61506eb4e61534f755f7a02c572efc25a469797a11b727ade2666a29553b7e12ed204c88235ef4e36cf025b9830c9a3e521762c6e98c9d3b84abad6c72f823cf7b019c48a9c7c5e7e4dae7231a3cd8fdc082d0719875a82133ebe9001296d20f3304980c838313f41cbbdd4fe25e87d79a91c3a9d146fcdf77ffe6941ba3b6df9bcdad3dd7f4810ff382e3ad7309856c4512ecac7159f41243cb3fb12e6ba8821f691cffaec1630d70f9bdd3ff79bf203127879deab9ee4318d7282df4ae31b81e3d9273ea6be1e8338ec2cce02babc8d3fb50e37632e1a296ef791f94e6f78efd6221f8984d19dbb21a231e1b340f2bf2753d0dd98d1bb1c5a6720d922567c796ad0266ecf03cc2715fbe9471ddfcc391de752a6ab6500853e680e32789b8cce3b47bb057fe5a828ed3b1ef3c512d47ace6ef63feff73d84a1efe4f7cef0951ba73ccd175eca9193bd344948545032c577f8915a2fcb3faa5f7c663369803f537ba66e8ef1392841233947b90b846df038fbbdd571cef675518e8c0e4964a3ecc8e71b1b0e193f31a6152a295693eca92cb82956aa8f22b98ab424e2cb1cdaf6d4727bcbc5a16d04bd24dd7355dcf8e1904254568c91944da2e09e01462e94776bf14be53af88862bc14cceeb30ffa824dcfb1c532e6d2f0b142741544636f6ec2ad3a12b4257c9f88f2bfe5f1c8d2564b30a01313c894631e5aca5a322f70cd753d9b5c4a8851ef4fadcc07b8b4dc7342ce0800c4b3bb2315e0b9e7757c083ac05ac0dac0c90002bbdbc979b2b53e5bf8d3b6ba14995a46195739d5b9f213e2dd236b4e25c04d940fbda7bf6a2716d3efe314075f2ede43eb1e997568427bfd650162dec28d659599a57c0723ec0df57142e94726ff9d1be37236c8b100047c811864b0b55920c1ebac2222a26cad8890aa6b1affc58a1d6b331f471d9c791d07e96f89a8d6c77d3363b9b926730edae36fc78eb7f0d99f4052e8468a17766d7ea291d6bf5190b6d443e8316ef9b276f515bb218c810640770c3a00d6d8bf069e3a02145e4961db39e3c7a71be428d19246828d2427457805e758300ce6f0fb67136812b0c6f55a117bedabb6073df5f1adc98f67f9f67a965d3e4d85372a1a4904b87e5217c904770adbba65b3bf0207b821cfb5d139f857d846c6070fcff545ec965dc1198895e37601b9ab056d7bf00987faa6535240b0023ac01be5f7b9a9b7fb1797c6bff1a66791696bd3a077ab0e92a8558f7bfc633bb068898097c075d8ddb91bc179b4eded7e5b9084dde9a32c1fc85c789b9defc86cf6c071242428b7dfce876c22a63ef7021ca911aa14374f347b6b43b6f4a8800a12adfdb29a8fcc0f4484c4261fed88a6d5c377b4b44ae4aa6e915297a5f34e6727188726614dd834bbe425f6e0e6969157bca17afc54c4ab217a741c0273388dd56b888e4718ad4e26fe964ed316c79a4642101d736d360be66c53e14548722bb10cb002e2a0c9ecb3fdd1893b4e97952222040f5ae2a745e8e22f5653bbeca416506f850783083598e0758a5c0385c22b71a465eddab5ce281b400caefcb14c09a2e50e14b2d872bd168b846edc1d5250d1addff7f445e6f2483597681853ebc3635a9c89df5a5abd4d08be46286b17f304bde8b9803d38ef02a75e364f7c007f2efa5f83d290d7e9e7a546a16901b2e3a6fab210819a8c5648665438d6fb4aa8f267d5690c026288bbadfec341936567e0ae4c99e68b752a6d41e960263a373ccb0e9349323527b861ba030703a02da680b764976c7e6090504cb23aad5a3defe69d8f23baa1dfc3a571ff3b6efe294d004405bb69883174da3ef5f9549389b658e1f3abc1476bb41f4854ecb572cb65e69cc3b014abf7848b1fa3fdb21cafff9efadd1226e408ec45ced777523581ce2bd68e0c5fe7b61b745268821681001e6fea4dedacc29a103317afa86619b88b32c317955cfd9717864940adee017d5205ab68298c82d348e3ba017cc908430b5e0ca77257083eda9e428d66bf4f60c76e0ab118e567d30cbe0e65bcb869f1daf94fcbf00f18291304e553a9b3bf5e8ba73a031af3ed70cf495926c798c1998a429071c6a9a9c12d5301262f28efc78e9871bb29bf1cc19d82ef20dcef84b0c8f2ad854ddd6608005e806ca2703a776759f81dd64cbca323e5f3e1623cbfc279abcbafcdfc2bf8be06bd9a782c7d9ad5db7ddc094d2893cd2d2e156fe2abdf6d7e2274f569875e03298baf258610317d10803cb1ed46dc80b6891988d19382d58999a7df4ed17c8553a5377d39d17a8fabca93890e91b4a4c411098c685b41f89be0b307c11130506b594b822535e760c058d305a61c3aac7d758e0d7033c95945a892c5df13cc423e4febdd8050175d6afca21467af23c8b55c1f2008d4dc16bf81bfed77607097ef69d14f57f68276aeb40f8861c6a7fa199357008be5054f4959563c1b2a006e96b603b3ca1b2424ac242131da9e7852a7f9f83b0866501012ecd84e257250150e4d9bee89af3f9b7383c23010f8891dba566550df87e125b545e8de5dd79d2017d345d502346788a8da5225bc316be774c1971c97fd3d5f1f0f2ae4dcc1920bebeee6d15f99706a309ea843028bb7c2777179c8a7f4700b8587967def9561c0a8a86a416cfa8ea2061e699ef1a2fd9ac80c05cf6c71cf8e53f57d4a548b9dd4ca392085fd717c8417c61a5ae2a7eaf4ffbb9fea8e42e617677521ca18b33faa8cd294bf7d4ef75d14f00eb0a7cf4e9b8d753fbd0221be2685a9c0b3b1ea43a6a973bcbf1a9b103c8dd5d8f8792b6ee3c8c2107d94ceb66a5cb3d8ab9da96b686cacf6f33f1f4beb009ab20f4fb568aae6ffba2c94ed1e2e50ae573d86f617df48b9ed955d669b216af18d3e770b6fd079dfb3760a1e1f8976dbf669fd88848fb7f81c6c2a85de1e169ce8642462757fd21c0206a3346875eda3d64dbcf3b80c295287e5ebe6a345120ac11f9752835f382fa6150ed4d3a5daa532cb92ac7db629b4fc7260f80af940cbea80cd2510a465a858455d70c034bcf14d09c24e0ed65eb73128f866312cec1941b0d5222d8fa9bd842a55e079efdd6e25a2b275588c1a2b63dbc66c72d08e58bb48fab86cb70b59f4ee2d32e125df2b2491663fa6c23eedc86f7e81068c4eba56cd09a9bab6398289a50750c75e17fce9fb803ed2faa99d7c9a8687e4bd76d90441fa77920a99fc72e92e42869a9919ebf9ab875de51857142d3b7c628bdb107bfca998cc860f7fe044d00e7ef4e8b5e2644ac4e9e1df9d3d710b074159041e472831f457865a4a5072966a2825a781927050d8399b4d5058948a21d6c3815771d1f21b401e1e90b58590ea54e00ebf1830563de78b86e985dd1fdc544bb47e0c706279d389e9fd375eec4c7a0c00ed1890938fea9918fe2ee1d3814d28e2414cb2a6e81d74acd62d8f6efe54ec38ef622c8580c205f4fe64daf2a46ec96819cd6ca8c1de3ffbedab5042908b909f86681c242a5868135643bc4b18cbc36af83ba9cccbe321e6c522ae1ebc2609a5fb70dce4cde39a38372139e2e4b192898940ab5b454f4fc5cba2ed846a8306a0dbed1ddd7a2ebe0dcab8a2a42e1acd11bd967c63f29030076bd19c57ff52d09d8c5519d4f288e9938aa8da1700341f33e93ac4af48a8e3837ac6d21ddec906bf99e84d99d6e63a5dea16812ff583cb38a4e6577a0b18a809f98c34c3f7ba2d05d19da101b0b5ae11685d2ed0a1bd666bb4444197eada43df3a3e7d13df56e326bcbd8fe71cccae11cea4de359e81c0df74ff13ac1dd3eca738f46ded036f2114d929240189ef8b716bce2fcc264fa228bd2b5d610f22adc261a9c37aca78ac3d23292c80f8014c53e10de98ebb40d6f302a316959c8301feb7cf29fd9ee9239afbe069ba1f125e9c0b824733d19f0c39a79f8da788c5ef2635b0e34a7ff14dc2e50401bf28f9790b293083f6ee0ed4dcc2ef94de86d9c510fd19da3c2a0a100ca7c99ab92a55c77d3face92e736bc31446c4a374a78f4c701c0000dfc152d2d56989e3415cdafa98c5d62d432eb59c04498f3e8a46e9a7aa2d151be36072df097e8b9d2d423e7a6baf10cb408106e0a26ca1f4427a061b57dd9a2199e15d5a63e8c33f281a49fa3adf09b0d66e0aeed09cde6bb7880c91fed6e20881bdada310b6171e1977ea3d5672bd3dbc2dfe64b91cfb53bd3c9f46dd7fbe3584b9fafe5d3232ecdba48209dff51d073fa14f921ff9138ed54d05c1c8e9d3d5321bd632a07ba125b30adfdee54a4ae3865e7a75ad71b91c1385190a2d3fb876cf20cfc923a08761e1cb8461d63a1a07d2a2d04f11b0e85b5c2db4e290133a127ea6eed0cc8c330381ec022a6ea421f38991d390589f23480cdf373ef0bbcc2e1f9d63cbe3b9259f62077c04daf0e1164e7ce2e8a2834d91068741addbf519d2a5e96a643fb4e49c37074cd361b9ab75b2cf9689188ce6bca76452f1f19830c20f7d6d992c90364ed94878cbb92dd285cb48a96151515b786b4dcf3778fe97fb23907536bcc3b67acf04616081da5db23dbedfd045e60198859660b91f5477513b9484139dac408fe5839da46df7cd1c8cdcc3c5a26aceb8b6881cb3c8c3e5ad4adf5b4d7190f2aaad458c4d61bd39fe096f4b9fd997f05f5f3d2154377a7c7f8697990f71662356365136bf0695856f2789bf97b08676cb55224b4e2dd1181a1f2274c94d2009bc7d2e96cc289ede0eab7188e9335fb1ee17f094e4e038558b61a4acddc46b3d991b63e8d228858b0624ec105d403170efa8c7db940cc48152b0f48a30a349d6886a024b6b44e86f5f5daf16d2b325b0e072835da6b2b9ba39d7c16a6bfa670fea6ba625830ca73c1106acadc798753f7e78824fb01038cee1d6cea75886a7f8856bcb6b176221d034840591687d769551f21aa041c35c544ce95378c539e34ebf17ba7b8041001e44e230a53ed31dd35ee135491ee792be2548a42fda760e17abb907cf85e65a268a585c52155691d7f41c58bdacc39afb9da311f8939b7ec52123806b00d69707a054246e8b24212b1b49ddf4f6f6bbd03e830a49cdd3d1276ffc2b67a0984982a6c58831d91d8209b8a0cb6178f3633d1ee65e4d35259a7681c8dec22c4af1dc8a2227e97c4c42669ccb9b7bbb8c06f0a53dcdb38b60ef01f66ebf0e3132ba916590eb7a136f67440646f9ef79f659b1a4742e21bdbb23115d3d573136fc19d530ff9832ec2bb9c6205905d5299db904b43d2ff9ad30010764e5605715de3ad0f8cb85facc8af29246764d7d3aabf75256bf01cdf04185c01fb2a3ebe8f33febff7818324e93d4e3ba94d81452d375789b3b00bf703956624331a54f4c963cd41a5cbb8f0007e92f0b8a07aea697cc233084a18b514188e0d70f0b75e25e48cd9d20bb1137faf68539d3ac873cfd11cd26dcf77d93e293cd4edf18260c0bd1385dcf14f300e795ec618eea0ad7bcdc590490f394a5f25a133b96e48cd55787328e70105ec43f1743df5fb69a61a12c9d30aca99a669a31c936fb7b17d57a5b27d482d85ba5306fc3860e987a48fca61f2f71367445c1897c7cb6124a61bfe194ea94db978430d0a26aac65871a228fd896969682f6f71ec536622e1fd9bc66dc49e93e494aeda7eae0c127c90c2ba28bde7d65022ea1852c76a86e4fc0d9b2e189a97f4b1b7661c9c24379dc4072a35f0e532511178f8a4481cc6140cb7d15780a42b6e89756d09c8dbb3ea2af0fcbd1006f603c2ac889205132553a2c801884f993fcb37a94452236a10e00f3b90a527009b2877d6689ad0ca37944ff919e2811c64c57012eaed37e57cb544653111137eb0f3eea43890db54b1f3d9f129e8ca48f5be8c959ce887645ae0741d60236e2f5a5c52257698266783912e14a88a32087b105579fb3ff04c090831d22f6cbc7621f3fa2cabbce6d28d14e54a227f68bbc8347ea9b973fd1255e7c977c89d24200a7137f57c6c341477805667cadbe9613a19b003da4b381f00a6754b869be8a9749920bf14c88c716015dd6dd2a957e802db49bbef9d8114f6af40d6168bba93d4a29b81765ff05090da03d967f60a2463c3481da9a06dc0b8886725e83e3d798bc4f1f8d227464bf7856d9eb14b6a3530033af32e6492f02e9376922c1d680e40362aca3eaac4eaa7b926f4613e058f61df36569122058b1545f0cb7e15bc29b2a99b451ec9562738d4d04837dc29af060d5ff7ea6dde1dd15e9908dc920464621365508624cc60fd524f3ec570b347a4a7c8340fbb66915fcb44531f603c829f9d38563ba5b4a377e1f845b3b98485a6624da3e9b6cc3eb0ab6dd1d3afecf4c5f2274a7c52ca0036fd9d401e7b58ab8cf6f5be0cf4d8509e9a11384e576d58295e18b883390521827916296348830999bd7a0c41b064ac1236462f00652151203da9bef3880afc7febb982cad361fce98807178aa61ca7d5b7c37fe462ba573687ca6d5b5e073f260afbc54e04ce9b3a0ec34cd7a1581d39d8a8b8ca7aee2a15609a6cb2e439f00cf2b98bae307b2e68b18fe47f7c7c439a471054a8a14f3f6ef3ed125a625c4efd58cd811387d393229eee3d9952a080e78e7ac2bac8371eb28fa5a395d465d9b8f85325595949a12531b1505e57b6307b4042f0d12b8d2bc9ca983806a174d4107b95ef1a420b1c6e3a61070ff28e0b797322a42d3dd6a68920c9133d370148a4d5e0e6ded9389f1f9129c536c637fdb3862185e33dbd8b6f7276f2cebed7879e691829659b6be974e15ef6902e0380e7b8fdce7a2172242f3fd4eaecc92c911a1e1e13e17164509995b4ac7df59f4a9c15e6dbebdf19ca374ae84faba74adc0174ca4ba7b3f8ec7ed07ce85ce889a47b170990eff00fa41458291654fda4c16635ee02720f2ed80e742e28c04090bc7fb1145b013fc0aeb0a0cd044ac3e3be39bfd4e6210e62ffa2ecef8bd676649a8f2f5591aa528e6ca5a0f42837646233e8d7c5d2094b16cbc0f04086effc8497d7b8c8772b3548364b37ef957aa0253a0c4fec6404ee299f04f97f2009998611b845a4ceebd62d954dd964fc70ce0bed6d9d976be005dd4bbcbd395535e9fab9176172cf6c90625060b4507e682b833ef66dfc2a5cdc51e63628bd40395f5cf9c69607367ebe0a2beda5b9777262d583b9dec1eeba4125d8f5d1e8b4add4d560bf82e97c2d6690c51a769816c495833ef66dfc2a5cdc51e63628bd40395f5cf9c69607367ebe0a2beda5b9777262d1e3ae7c32562723ae3a56b9153f7a6dbf2518ee7844d513b5fd02043d61f4eb53256ad4934387bca2d2ca52e01983f079553abe52fff7089162387006b266e8eed399762994a90e0862adacad906a9803427ba6324bb6f389de942497bc526736529c207f3d537a22f865916c81b611e404a31bf7dc59de44f111fc09b1c2fa79659ba31d6e74751a223e7ff36a2d784cae1d91e965ce9af08513a80ededdd740809687105eb0164d0a52928630628505b0b1f5f75d27ebf11bf20f25dfcce04d8bbd652f45cd366b79e185fb9589bfb98b6793455893767759e68e231938f855b9cd33c20d7f953921174fc221b4d72eb8178282186728199d0d1bcc52313f4d01b99f4c42ce9148858d22db6fe001745019a74b9c42c65c533f6454f751f2b0628cac686194c463c75a008032456f96dece439e82a96bc3c3da57189828c0d1bb94ae45d22e168ace194115a7b1f70c93d02697fa2a9f916e60c984da7e38ca3cd7de911ea68dcb133214c9effbd87c7ee730803ef5d28ac645ecd87533bf42f084c9d385869142e0d4cb034eda19eec8ff0b1ed1a8082848d253c05a4f28c5cbdf119e0c504a7ea2e70fc954bb50513f2d2973f8711e239ac63be25b39ccb30fcf48340a899b72da408c56b01f8c8889ea8d70032bd8333ddd8431f58166dd6dc3c0b0ac79139f42b5bc5e2b5bd9028b65fc5b82083b61e8a4d28c8522b56fb563ef703f37ac260764812f5e0759a93e608aff71c7b2cfd19312872877a6798024d27e25434dd4b09f89f604b38cb625ffdfcd3485eeeab28115c101c4d23161b357940f91ce8e38b7861e18b06bc5e628078381a2914221b1986222ec9e8fd32ca89e0068dfb7127550fcf123183cc3ae270a926105d7acfb2d3d0e890324ecab633e2021387dc97dca3cfad1c5b8887dc7dcd5a558b39e48099d860b05f15f493c5a6ab75614ad25c3573bdac3be378b21108c185a64b803b16f2a93edd72956653fae3429b7c51d279bcc431bf57eb7607c799c3f4961c3ea24d6a27068b368d67808bb073da54ebe4d41da5dea5503236c671899d28f9ea98d13079c42f07c0f1fd67abf34b7ea6ac58c950e9f4eeaf5fcda2078bd318d6598b5e9cfa4480610a941518388343cced47c80ca9348297e4a3e1d61f9a964e480d0dc7f97bbb1507f81d4cdd85130de134f9d0d311207d37954277275c54296da280ede621634c3bfa66986efe3261faf06d5c39fa34bf6ef4922dc4984c34d3ce9555e9506b441b95d327dd5e268b9df1b2a8958395a3f8fd70472824a1a4572540dca3a9982bba40164dbde4085753eb058587c8f01f123324b621612a2193e9d518d9c9c5a529efca8369a5935bd95f5b2334a5ec8da7dce0f62fcd0f318bd3421f45889aac6b21f7bddf11add045a69dfbfa9f3e5e83c56fca3c659b72bc835697d2c194a7882904e6be48d1122c737d73b99ebcf30aa657c3287ae0c5000cdf0a049af584d275a6e5081841a9b7db2c4d2d7c2ddda1d9c05808382a7d50bb0b9f69244697a934dd9f7418787a18faa4ec90ebe6b83d50587f2cd99899cea23300ab2a53ac4995bc2b9450f2cbf9f835e1092678d5ceae054fc600cf647a2a793d9b6aaad7b3e770b7f840ced8f169e094246663adccdd98870bee4494ccd5f6538ce2dc320d338da3259a7f0276b0daf3358d3448579a8efa1365d6319989b303e5e463c7ff4d2024f2694b5f302ca301dbefdb9efc1eae6247df9a00028f7fe3acba40290743cc857ee6e0ee36289a7ec69292c0fa22ef4c16cb324d34f16fca9ae7a0a1415667033a29a41d2d3e47a71ef126690cec11bc3909eebc068f35a0e2dc1e8203bf0dad4a4dfa49490916fff4dc9fef87bf8d3b74c2d8cac018298e764c70bc468d78beb2d702f991af2ba4b923b12a679f9efa51cbd9a2c13f83b33821a5e9f306c31556f8b9d1997d8135080beb2a518e8944f547d6b89ca5a66508c9f1d4609ceaee0f4f2df85cac13f8bcbae5b1b28b1bb9beb2dadcf9b1900239670bb360d1f7ff155c27beb48162bd407c148f5bcecbda471160ad0c206e1abe03ab53b0b4f4cb7c08b55d2e3e31568cac8217880d282369468c4241ae9085c496f05d5ee6b256f67f44c863b7bf3d1658978811521073dd8f2764d234496634c74ce545e69eab1bd8f39f6fd138d5d3d75e1ac0cc6ff9da4601cee0b43cb5185d5f3273a1b39606ced1c92c9bad331e4029e266826b3fbe1dff5c18bc628826ba9b5468d392811851dceb8b538a532a595fb4c668ef39f8e9a6ea27420b2b4dc412afd1e91d149fe4b1c8224b4e148d990b9e5a70202aed37beb6fff679928d8df218da66ace64407d3ecc48a6ba49d26f19c3111813c19d22cf68426e15d8eb5e4a9c7dab3a43ed30efbeb42b6014f3ff7d2832f5c4c5408701d6dff6c7114417fe3e4da7fe146a14dba2aceb1677a110ef1196122df112453a1c1cdbc2dfa293ba65126e25891f5a1e8de5cfb8c18dc2f75837ff39ec5ace9021667fde13f9d543199b01338eddc82d5ee57d480376fc548ef8ed0845a66396d60f42a822d5e43be41e47c8c5961fc2dd33678d3f15e805f97f9f7e1a67b8a2fe70f418ded8078dd9c1368475fce3d81e336031d7a3e74931bba8b8b80abf1f623f4719ecd5a16bf15dfbd43220778f633763de091f1c362d810ae5704a248402af49609741ce860c42f28aa44029cbb1b69bc7ce335777b4cdc7814f3480fd4281c57a72e663c2e34bfd9ae2a12c8e9ed9cabcc081d650ffc52aefbb10620bf8408fbf648840019a1a6b7656fe30253cd05a5b934de6037130161a2a045296e9336c7f12b7bf2e7b3ebfc0f476a1e1e4b2111afeaa05a460a9d84f6b79033c1fae23b654abe958e759e23def9bdb3ae2119937e1cfc1a1298e9cde1d6db280297c729d18e7c58ab264d5225cafebd632cc5a41afc086c618fa08461a054b1e50d2d40554f6bbe38d099f899171969e8974ef6d217e90d063f5854cf4d14a1518010f323f3724b8e1789a45b0ea770cd1a61bf19dbda5093236b8da2869bee1df198ab6ed0596daf60225db8dce8de83b7b9fc889cf301b494865e500cb5fab0febbce9fffc073a1bf235c34e44c71d1c7375c4e4a6efb3b6789523143110c313ca11e1506f0ff1bd1a2442c9bb308c294c7cd6a409e476584f0c9f1f475f25eaf4b89aa4c946d134b81410f9ca6b4a4d1a03659ef693ae91af5f40b922aad5bcf238337a3186c72ec7d7e9f49bf7595ce351c374303ba82f6140066dbdb713032ee64925af1a1ba36ce97e55121e84abd525e300ac7bb3ec031b42e7aa289e8d18f2c7d74b23393ea0abc3c5d1e2d66446ed84c8b5c7dbb1863e42f6626b708e91e8f4bbb9ffcb4118a33d2ded2ee42fa76279f81fabb95b6015f9b22dae53cbe10ef7d37454bdd7de70107b720ea2fd6585475cdb33350d9178463437e48e4f9b353057beb000a2557458f63d4179238bf28f2e0ef2545612b0e7e895eefb0715fe5dca032e9f0c69d235f5bfc86bfbde1a2fb5e896117b6412511375620bc0d9a5a52d28d6bf054079093672d136a4a4e24ac4930bc80be39f07b700ed47600e5e258558bcf04476b59da329892db70fa8d46f9a5fdbf0e7d3a32b2f7819427486b6aa77741f1b08331661e3d78c9294360b4df4013aa64bade84d8526941435842381d0c7fe34dd7e5620c2926b48f16573751a263f32368a2f8aa9325dd47f30e81fc57818f37c94978fb1a51cff91731273347681a489f424ebb0dee0ec83765a0ccec9a8258a5bd89a32b47b4576e29f716e9bee1a7ecdc6771a28673afe4ceca4d354119c913bd8ac4a97ac43a666acecfdd41a615af9fc2abcd8f47ff35c337317610efc619eb3a391e87bfe18a721cf39e7c57e78467237d7c1cf4316221cba850195b97d7c2eeafd66e2541b7273fc977cce84aef9fbf27ae009cdd3f8a57e8695ed5206b3b2b1f57339e40010f3ee5fc3bc7b166b5fc4f70caf551fe42ea5129091a82db0436c025cbfcd74fb839ac7eb538b709a64bd1468c9cd79b8b433c91851d50f30f0d23b9afe9c6a25e11ae07426bb179c8336f1cea05a3d91cc3c45cfb8568563c8572c3c21691a717d282ed0011a7b5f1a60f5159fe0c7b33ad75b676a9d2dd583d83f1859165f0a6adcb9960a24028aecd621cb598e9fa992fe812272a35decc7ec6b807ca3126521f0fc11fa2df6dde6dbb4ae6962a01a4d08fe78f1d243e73d5b272c863681b8d9b727cead04cfb6652b74166429147837d9d38ebc51f2f83c339793c1b9f3567df34683290de24fbf7b357b5cfb8db15f05ed1acb10820b9d9b24e36330c0337c394a8491494c4ab9cd877af60ff24c1f1061c453b253316833e50abf9434471fb3ab1aac33b9ad0e90ab703dcd907bc1ed4df641d15a24ac9a8cd987a2ad9a8df1fa333caf87f9c8b402f9a4a474a079cb2d78ef89c22e497a5a7dabf539bc17af6f516fb3c3302cf8cc5776318b31cb85fc9e3d1b12224792700f00eac32caa4ed8a0260608b7c0c5d53e68f7606b94b9755b4d0d0ec5a20e2d7e55dd8da0eb6ee4fc1f8c84133f3daed5f1b21a4dca8dd54db5c968b71c6ee9e7aeca25047ac769cc072b5dfc65fcee22378553e98c9f2282d8fc8bec44ad5d85f636021d98dc9709d8d384a0621a65cb20eb7a09175325d641c15b3234c758120063a46e065fc96f4100e8f9543583a58784c69f6424ff4bed69d893c08b1e19121691932d09f6ed15e9bd277e13ed2a14ba99d82b2cfcb3568de59e9fbe932ab7ef6446f804ce42b693c36aa04e85749eef29761e5f4562cdf284555844409bb277e39eb0ac7ae9892f0cb8eb94abf7f296bcc6a4ee5fee74eda72b26c8040bf7277289c1887e19b37611eb8e62727949012d132d95084f8fb9ec00a971159c0fec42ae49df6396332d86fa91dbbc88c4e43a50884b397cbe376d218c8620ae1ceaa0b74f7a2cfc184ac660ae15aa11a4b2659662152fac731f47deaa8f93def96477ea22326667d165c4e6015b630c19c46e83e70b7782cc93f47a380a3aa412915314db98ff3a9135bf646c8dceb9b77e74415e86f57704a66005bd4c0d93e2e9514244bf5e7767f0d68ee2b112148ca1b1d4c6357391d79046bb3f576838dd6c5667bd69ef2e05ab580d2b5867d6df09062b1623fc0f41cf482353f7c6922debd93be9b9dcdc8cf9434d1882346e570f7dba5a45fbeef5a8d4927fe4d7532bff7f2360789f1290b4a3e6e9907d091b4061c9c87a1c46d4bb13d60519b0a70211acfb84fa3fd31ebdbed10779844440f86cff0c1cb8188c7e549d44a175c2805e5474a624301405ca8b5969963f6ef956da0f0c4b4515018c3c53e4eb5fe05539161320935d3fc5ad11d35a8b8e20d5212e4013458eefd2a9cd9eaf1825540eea76eae03337701581d0ca366b2a4a8fb6b8c3f52f5858a2ca6d3bcfec005c3183b634810735a0f6e470dce8d9da8b96ddb8f86a67a39a70d955a37918f81499016af8f44b73a26683674457d206905df84cde6f859aa24ff1c95a23047c79da4eda1e52951c90059c80896b0885e79ae7bf7e0351b707f62d4c7b40b5ea9038563242ead18b7cbe64ccb07984c9e9fd8e822c5bea1a6f1994954388b427ffb209a0f3335919ec8739a47ac873099995272552ea26cd5a67f69be99c7e16af06065dc6876167833c9ede293b7d9582266b12f360dbc3a8686a6b47989c717c8d8589ff99195e7f186aafab1327c4c0424d0a8fc73aaee79a97a7cc9df952b1d5c06ea145d113ebf98bc9619411f56fae726e785e346e27d1ae96e58b102470a42000ea9222d58a03d014c5431701a918216e87c433a929ed7f5d37097dfa721da22466689dc5fcd6572f2e1c14421a3b9865233375622ecacda1badc94b913172289f03a895a12df94ab3608e13c2d60a702706de66831866eff49347cf03ffa6811d4f27f7526712c8548f0e9ef1549f34f2ddc1cc341227e5e1288e5759dce4bf687e96be18953722fe8c80902be281129de0cdf44ff1893654c367541192eddbafc71f12a1c60461c87a085ea00f64a35f84cef22126bbf1905c81d5e32dc47df07094c3a4340b9b10874a0a1872b61a600b26d4d68d6339c671002433dfc1fd891539ff1580769ffd3bc739356104b74a6bb4f516a7af040451e3027b0592b7299538362366bf0a064c2c4ec067bb4d2e0dc46314e8e13cf78460e84b2ab294ab0b5db4a0186f9423ce6d8a70e22493d4538fd68b48b1ffe29f07d5e34a597830827d4c3d63bb6ee0b9e554d898624ebd8126600da79aed6b9acefd6d9353ba75a010133958c16f58e928eb1821e6911ca1ebeed7a650907e0ef50ce646c11819a90cbf32c1d6abe1591d26dbd93773ea20ac7f037a6cd62c87cd0bee1d15fbe7f18f8a829ee91267b432b09b40bd7b93a2aed4746b25666a7c6fb712876b0205e9585bc419409f1d705b260bf1eea9d6b32ed3f8e59d9c1ebc92e6ba99da540d0f87bfa088c976df1dafdcaaf2ccc747f2c8f453257535e6a3a0e313d6b78feddba0bedc28c669ca0be0c2d489ca9fe638e6aac76c95cba97f29a890becd784b9f1c97f368e71d3ae696fcf5ca48f3ffa6f6297caea69bbc158e67debd10315d960ad09f3c9df7d367efd0c3e086a33883abddbda1636add0b8d16328f22595f915f1c05d766b68cd5017763afe39836623bb42618ffbcacda10fca203ce60fecb779a282cc3e35f5cea39092acc5f58300c20d13aebe76f9d47d29d4ce2081a9f2d93d4d749f051d206e5d44833515f014798a4d41e00f053f22e435148e91abe57d39619b61c3bfd2730650e5c9139eccfba965f36704a4f24bda33d2f4ff034434eec035e74e99e3aa117c3359b217261a254c50f544209076643c740e44284598809cd52554617db667b3339c8424dafcaf6b10269f8c9548a9ec05e9f6fbca2f59c2ddb8f6cca9a2820872a9ef0f122d8af0381919e4bfd290795d0dd5c9ba9c9cb582c22b007f088ce8522f5db7ecfa6e2237a307b14c10bd074ae9a7377c03672ccc5cf1d9c5baa9e4b39fba6ecba8c1b51b3d2e24f277c4d3cde2b5651ffa524c562e4e0b0607768f46c2505a0f5d6c6bf92b94cdc5864bd4d11a4f274001bbc7c7793bafcadd81f9422dc7123aa683402c8598f1dadc571b8f4ae971caf143f2418f2e07df0beebe2f40a7379dd9f0b0ca21b0c814669db768174f402824bc02d6206629abf2728bdae843bb26588ba4f42c5c6fe479084b28e220cd99ee0552b59ac168eeb1948776d31e48a0eeb07cd08f629c1492af6e304346369d5a140f13696bdf242cc57ea9c66f6ddf3f926398c89b782f3ab9c8fc0a21a9026ec029482d2892562e6728f4dc272b8d3d5a7483dead57f34c1927635398a84eec66faf227785d31d72127ca81713e2b6bd5752edf23dcd2f6be74884441f4d9dc464e03919adcc201e8316efaf2e488e82900a80b71ca1fc19a8dab4d95667e4f2d3ca8da770cc445ac2b8cb05efe24060f7fe5084e1bbe2a563042ef4b6edcdc462035ba31e84cbc0f3021dfee90ca78c4acbf46a3ec15312171494e558c51d56b8976c26a668d1d488bbe1280283f12c63ef3be148c38c204ff8aed77aead4d5cac3077d2ed454cbf03ccd675fd5006d9593edd68ff013c674e4169fdad21b938bd952efb4f13c2d1ab30db54ad55ce92743ea57dd8202dc3c1e2647832c5578c3ad4358cf37dd01522e3de358a16268ccf19eea0f55378b2596a9012496fce0475b962ac92d79e684c4fbc3887f23693781a9b31c65e3a2790d09fba56de41ea7a7bdf7dcc879e716e5eb61f15a1332ed64bc104516dcff6afb7679676fd329d77ef24eb1c91628025bc24001f7ea543a706418bf9a9c40c9df6c8b8632289efd17b70846e0acd5957531e01d43b0338df9d9414042bb4700abf1efef4e8b699e254b80e580009ae9247a2230a2ad5aecd5989c4014a4e45eb7c1c7090872674ef7edaf5a38eebf41e0bc917c5b3d215266a8ea8449d2a0dc840e83b7e1d28475e165bda6dece67683d363255447c4a443a0f25b0b74a5e547ad4cb74ad885c9d9a677d0c254b7a95a8f4ac5336db3695f6462c05a9090eede29499e915625ed99154da68806b963b3dcf6834b114925691fa293f5674a0498684045dd0cb071cb0daf49e557fcb2bb268a4da75d99d0f86f38cce76c2204cc961514f13af0a42e253f3cf1f04320316b59e1b11b16f0d930041cb9202e21a50f4fab2cb3bf35d682675dbf21c508b378748cbc422bca98cc777eb617ab0306af768ccd551d49807ac6937cfa740141fcadd448a2e3c71a9ba7c50d49d5d31281f8881c97e06a3e572ad4a1389bb21731230ed55e225fc4d84ce1cf61d357708ebddb518def97ed92db88a57fb4cdcc2698626703f1807bb5c019f713cd56247cd9de2a90ca80f802d9b73e3fdf55ede5dbc072953af560bcc542580ed663e3f10970fbe8d3dcaba0650c72da430faac7afd05964185d1a319ab86dfccb7507bf534c047b1059f6aa3db50328b69fefbd58b8d3d19db009b60d803204117e112660da79983b46f26f2726ed0c44d1e584d0bde2c586f9c5a8213ef8b6a9b139ba23cbd39da287be88c98386e030f293343d94ebfb2c0587d2615d8088ab1193fcf0b15f7c313d10a7f73c04e82ca8c28888fda26b3d3a80145db0db4fefab54cf4d5b52050c5fc2a2d212c52634c1760bbb31b203678a0dcefc0c7f54db6439704a14143993d45b7b0439ba929f9b74353ac0ef84e5a0e9e056f3ee3aedd3386aac1101ec71ff93aa1a0bb322702daf105a30b5dd87c7bafaac12bf430741c36596d7b64eef081c4421d6d54128e1be0638bd85a6349f000ad4e83ecd61eb57cda7c391fa54a265739ab927356e1a2135bf25f304b914c83e87a1fee3884d2cd374f12b5ed1ca5790857cc4bbcc8f1087f4517fb605403ac7de1d6830b4b49271668dca9cfc9169959a6b2c782c1f5db080ca19e013ac99592d690d90c5be986072b705dcb583e1ea8300f1fa67c2cc5fcc3857b5bd856499279357b340def18a8c6d05a52d546d8f3b6727634998e610e08f695a6e20bb756d636db2a2e719ff80ea03e88aee9208741d0e242b2096fc417a9b2bea06d851811eb863f9de7d633e116d5f4dc558118485ecbb1b78abab6b7701c4d8b03d93f30717458b034d2bd2eaed668754bf959e0ecfe98e17ec88de7eb2ad3ddd37845f736183b7d3b5bee00a0f784f0864dae6d092e1fe8af993c108928fd679b27a5f3b043e84a1fb5dd23f14b47b5d65ae7e127eed1763b39cf7127c4edfa9161810c013c999bb8a3a49ffc34e2f3cad2c9989f660c5846180443560de3181a5bd2679477edfb92da913cc67c845ea42b87a117243479add7b27dc743172481072fc0847829075a4ffa8e1779c016519afd7591030d85f9b9605f481895fa43b1a8ff73bdbbdb8862b178ddf8969a70d14419af5b6fa871feab87c4f808b68f13ce1ad05444137266619827ca199b37ba4c7a8c80ec46b7d2a4d9b390a94967abeaaba0608a5edad8c419e17977dd96625adcb7bc9cb92ad2e6fcddb1334cec48960a185682f133fec1040f3f1b0e93180da657792b1134e038658710c249a3981a4c781cbeb6ca000585fb242836a099fec8707d836678e8f7495ebbc29add32ff5f7cfb235b3e8d4439c59199830f729bb83cabf82bd0fa971ea7c66906874c0a9409b00776303228ad61bd5b997d7229cf4780e528d5ac69401316c96b20309936dbfa1e196c1f5d09516331268d790fd7bbb5d7e04366371ddf83a4038f163a15bdad8694e628406112d4a9e5f277ab88b23cb7c68bcc688381d1b659953534f26a589244b3872459577a6522364d86e864a32d85fa99a44ec146d1a21504182a4a43fee3a5ff26cd0c29ca28863c729493557b45b2b77193e444fe20ef4467190b68ac7f0c8cd986962efdd0808a7390469b6276b7258d16d883879240f8e598fd8ff5f0badea9775fb31a932e232dfb212c223a27322758c1908703881b384576158e28bf2e0afdc7a59504b146f31936e4633555bb63c7033746d602f3b87f201aa5d064848777271d8035b2dd1523f41ce7f219aab232bb5fb5e1632f47c3221360cd090d35b0c7bb84a069439d0f27727117e8a59d06d348051a746f2432e129f60b66dbc82089d54e5bc064a7629d666303afb1f732689f7e74a7457a01655a50c18a2bd32d9573f861343be4693d7a3bb1f4001ef0713e8dfee0f45f254e10349c416207199bd38f9fb8763fc39f323cc0a4c45fa1046da746f0ccab220f5dd456220cf4698f3c38d701b1eb2ccc6f8b394c29df366f6050f3bee46b9a4bc5a2a8ee50fa860fe5a9b947bde6b1ae6a1bc94be707d72866e9da7f9c84e42348fd8919b75f70a43e1e9810f5b5c93f9b7c2ac661d8b6bd97976a71cbf00c7ee2b36b5385a270d268e3a168343b852345eab5fde4fcb902f47b87f3b1f840d57a5afbc92fbb737e6201ff5102f8ad71fa86b92798adb25daf49733ddf5da69c940d962bb9f714868a40ed2318c7b3dcf918f9c008144e521a1b95e6d7cec45456bd8b72fca2d0b7505f48362058fa16879212b11d0177729477e4b0e7ac7979aaafe0b94206f06a608cceb5d973be7629ee25d252728c1620a6ebacee58ce335f7f368cc1342b70a933c2871fc71a07a6bd181e132a674d31736d6bb2cba7c35f491001b32bb4ce9a157f40f696cbcca1bf5de9ce95042f7088a0d98b59acf402d49214ef2b0939f81b04c1a4af7524f08466e24891366dd40743c64abe619db490d19230a1fea6b851fc079265eccce108402512a0ba02cf0fc0f3e64d0aae5bee23aaa53dae89ca0d86c930520bfbfd20873b0b79e08e0e405a5592947cbb7808b340b7889530a3819c21071d8ccbe1a60c8ec30049a4552ca4b0e790edb73337ae152883141cf198660d45e69cd12ed571753ba639c1e8c3889c41eac7179c5e574d9d95e78a2923fb576b0635b47f5b615a0e492c806d42884c2fdf477f2ee6b2b2a9d281dc3ff11563b6f86b697a8494f9ac3ba90e8ac4f0a0e46014fc2efd5144a30359c0e6e1ea9fa3dd407d3318204150efd7b4caf6ae6d6a009505e345fe949e1310334fcb0747f28dae2856759de102ab66b722cb490c3b6a0d586bb9dfc845b236cd88877065f84483e3bea2153b4b831c34c3055a449d1cc40adc7e874d81fae1ab82c35ce2a0a84cae7141a582eca2b26e94fce81b0f8d115921fdaeee8ed6c5f2f8ba09da74658bc3f1cabeccfc908a891b04354b2d9bafdf8fea757bab853b1cac4c7df00b2256460e95c7193a028e1917dce5a517d0766fad40dd7abb8dfc75b687bf505cea3bf4a099a14f67ed23b18b15d94ab6def9ab2eafab299f858750ada144f1ad8aa9e42828bbe7dd063003eee8189bda802c3e35623236807dc79ef77f294376add03f2970d4fa96ea0fdd4fa12ed39e2d25679f6645a7052f2701548c529785eacd99df8ea6ca27c3f016e7c5c94cb58892c0b0361499056ffefb9a7a4a3de3b3044d3618f9c277719126154309e80944c93f907bff96183db70e139d0887c167d4ed6047f8c24a4e703ec34feb912fcc11dd1f8b605914b19fd67e4bf66a19b57b1785b1b0664b81a6cd2946d802cb127acf803dcdf2e6b06c6db39d416371ea2fb8694f1f94719ec702c22db0cb8b225676c8487997f15132b44256786f2b0cb73950832080a884d31c1a66b6afa1792e427bac44a074273293fb9a1c9f7eafb75ceec91121930cf0e5e58ee17eb0afb848744651f08d895e5ea0eea2ec6e692cd11e988fd8ceb24c996fc3fe2244f9a8c0a9e09b39ea53083ba528ddb4c7d4366aead52621621b03d9c037bb0e302a80bc4bd241b4c28ed1fe72a0e4738e9c2da636b9bda1be63f446cea1e3b565a59d9783dee9a4e7e1306d547d9cecfaa7d3b5b53749ddba7e5a7629b7825269091b829ae657b72c293188c78d0056b46a2db685e0e028f6c0b483779f8434370cbd280649ccf7443a0fdabdc65e6624298b8bb29fd7228075f9166c461f9e8914d01ed80e90541a91004b6b5cb86dc9855fc5930f1580a7878088be0941fdffa1236a0dffb4cd31696eaaf1982178afbb6784674fc27f6555ca8588f9ea9526620814cbd12823b7e45c9f7322c84a1924d1d8fa3c3ae32991f8f5bd54b21a8f2c8863fdc7c7efb652cd25eb62a3120ebe02c0450c30735b839c813427a20da414c79a46a3304f60b896a6b3da0bb0b63c590d16593e70f0e13cc70b7bbaa3383b27ec15fd446c35e834215e2073c44cdbcb0c6cb06a3b2bfc4bb4906daf32af74f6596f6f832397eab7f15c793af1a06a2dfed2910533b65a78a78a422cee268c7c30e91e3b88333dc55b86c9c472d007f86d5762f6f461117dca84de98d76fbf811c4179dfd9775d3aa635e005f4d8fa251cdd4c8b50987f5eb15bf1653b6cb7dab9742ddf9b1faaebf1ceadf760731dcb3e3028f9e89c156fad6cdc22f91501b7eb343884cd47243de731000d4628ec0620458e4bd2226e25fc922e8a81669f24b9e3a90faa923d5229496bfb1d292508521ff50d7dac2f7baba932ae3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855mods-config/preprocess/hintsmods-config/preprocess/huntgroups../mods-available/always../mods-available/attr_filter../mods-available/chap../mods-available/date../mods-available/detail../mods-available/detail.log../mods-available/digest../mods-available/dynamic_clients../mods-available/eap../mods-available/echo../mods-available/exec../mods-available/expiration../mods-available/expr../mods-available/files../mods-available/linelog../mods-available/logintime../mods-available/mschap../mods-available/ntlm_auth../mods-available/pap../mods-available/passwd../mods-available/preprocess../mods-available/radutmp../mods-available/realm../mods-available/replicate../mods-available/soh../mods-available/sradutmp../mods-available/totp../mods-available/unix../mods-available/unpack../mods-available/utf8../sites-available/default../sites-available/inner-tunnelmods-config/files/authorizeservice  @rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdradiusdradiusdradiusdradiusdrootrootradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdradiusdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootradiusdradiusdradiusdradiusdradiusdfreeradius-server-3.2.4-150600.3.3.2.src.rpmconfig(freeradius-server)freeradiusfreeradius-serverfreeradius-server(s390-64)radiusd @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@     /bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/perlconfig(freeradius-server)coreutilsfreeradius-server-libslibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.2.3)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(XCRYPT_2.0)(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)libct.so.4()(64bit)libcurl.so.4()(64bit)libfreeradius-dhcp.so()(64bit)libfreeradius-eap.so()(64bit)libfreeradius-radius.so()(64bit)libfreeradius-server.so()(64bit)libgdbm.so.4()(64bit)libjson-c.so.5()(64bit)libjson-c.so.5(JSONC_0.14)(64bit)libmemcached.so.11()(64bit)libodbc.so.2()(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libssl.so.3()(64bit)libssl.so.3(OPENSSL_3.0.0)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libunbound.so.8()(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)opensslperlperlpwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd3.2.4-150600.3.3.23.2.45.26.13.0.4-14.6.0-14.0.4-14.0-15.2-1icradiusradiusd-cistronradiusd-livingston4.14.3fCR@dccGc5b?ar@a^@a^@`h@`_@_0@_FN^y@^p^h^@\\v{\u*@[<[2*ZZWQYY@YlY, @XO@X@X*Xh@X.@W@WiV@V.Vf@UĝU@U@UU8U7@TZ@TTT~@T|X@adam.majer@suse.deadam.majer@suse.deadam.majer@suse.deschubi@suse.commichael@stroeder.comwilliam.brown@suse.comscabrero@suse.demichael@stroeder.comadam.majer@suse.derpm@fthiessen.derpm@fthiessen.deadam.majer@suse.depgajdos@suse.comadam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.dejcnengel@gmail.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.comadam.majer@suse.devarkoly@suse.commichael@stroeder.comadam.majer@suse.demichael@stroeder.comkukuk@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demichael@stroeder.comjkeil@suse.demichael@stroeder.comjkeil@suse.dejkeil@suse.dejkeil@suse.demichael@stroeder.comvcizek@suse.commichael@stroeder.comtchvatal@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.commeissner@suse.com- update to 3.2.4 (bsc#1223414, CVE-2024-3596) Feature improvements * Preliminary support for TEAP. * Update EAP module pre_proxy checks to make them less restrictive. This prevents the "middle box" effect from affecting future traffic. * Support "interface = ..." on OSX and other *BSD which have IP_BOUND_IF. * Many fixes and updates for docker images * add dpsk module. See mods-available/dpsk * Print out what cause the TLS operations to be made, such as the EAP method name (peap, ttls, etc), or RADIUS/TLS listen / proxy socket. * Add auto_escape to sample SQL module config * Add 'if not exists' to mysql create table queries. ref #5032 (#5137) * Add lookback and more configuration to totp. See mods-available/totp * Update dictionary.aruba; add dictionary.tplink * Added "radsecret" program which generates strong secrets. See the top of the "clients.conf" file for more information. * Add "time_since" xlat to calculate elapsed time in seconds, milliseconds and microseconds. * radclient prints packets as hex when using -xxx * document KRB5_CLIENT_KTNAME in the "env" section of radiusd.conf. * Allow for 'encrypt=1' attributes to be longer than 128 characters. * Add "dedup_key" for misbehaving supplicants. See mods-available/eap * Add proxy_dedup_window. See radiusd.conf. * Added "-t timeout" to radsniff. It will stop processing packets after seconds. Bug fixes * Fix corner case with empty defaults in rlm_files. Fixes #5035 * When we have multiple attributes of the same name, always use the canonical attribute * Make FreeRADIUS-Server-EMA* attributes work again for home server exponential moving average statistics. * Don't send the global server stats when asked for client stats. They use the same attributes, so the result is confusing. * Fix multiple typos in MongoDB query.conf (#5130) * add define for illumos. Fixes #5135 * add client configuration for TLS PSK. * permit originate CoA after proxying to an internal virtual server * Use virtual server "default" when passed "-i" and "-p" on the command line. * Fix locking issues with rlm_python3. * Better handle backslashes in strings in the configuration files. If the configuration items contain backslashes, then behavior may change. However, the previous behavior didn't work as expected, and therefore is not likely to be used. * The detail file reader will catch bad times in the file, and will not update Acct-Delay-Time with extreme values. * The detail module now has a "dates_as_integer" configuration item. See mods-available/detail for more information. * Fix issue where Message-Authenticator was calculated incorrectly for CoA / Disconnect ACK and NAK packets. * reject_delay no longer applies to proxied packets. All servers should now set "reject_delay = 1" for security and scalability. - shebang_fixes.patch: removes use of /usr/bin/env- update to version 3.2.3 (jsc#PED-6567) Feature Improvements * Add "max_retries" for connection pools. Fixes #4908. * Update dictionary.ciena, dictionary.huawei, dictionary.wifialliance and dictionary.wispr; add dictionary.eleven. * You can now list "eap" in the "pre-proxy" section. If the packet contains a malformed EAP message, then the request will be rejected The home server will either reject (or discard) this packet anyways, so this change can only help with large proxy scenarios. * Show warnings if libldap is not using OpenSSL. * Support RADIUS/1.1. See https://datatracker.ietf.org/doc/draft-dekok-radext-radiusv11/ Disabled by default, can be enabled by passing `--with-radiusv11` to the configure script. For now, this is for testing interoperability. * Add extra sanity checks for malformed EAP attributes. * More TLS debugging output. * Clear old module instance data before HUP reload. Avoids burst memory use when e.g. using large data files with rlm_files. * `rlm_cache_redis` is now included in the freeradius-redis packages. Bug Fixes * Don't leak MD contexts with OpenSSL 3.0. * Increase internal buffer size for TLS connections, which can help with high-load proxies. * Send Status-Server checks for TLS connections. * Give descriptive error if "update CoA" is used with "fake" packets, as it won't work. i.e. inner-tunnel and virtual home servers. * Many small ASAN / LSAN fixes from Jorge Pereira. * Close inbound RADIUS/TLS socket on TLS errors. When a home server sees a TLS error, it will now close the socket, so proxies do not have an open (but dead) TLS connection. * Fix mutex locking issues on inbound RADIUS/TLS connections This change avoids random issues with "bad record mac". * Improve REST encoding loop. Patch from Herwin Weststrate. Closes #4950. * Correctly report the LDAP group a user was found in. Fixes #3084. * Force correct packet type when running Post-Auth-Type. Helps with #4980. * Fix small leak in Client-Lost code. Patch from Terry Burton. PR #4996. * Fix TCP socket statistics. Closes #4990. * Use NAS-Port-Id instead of NAS-Port during SQL simultaneous-use checks. Helps with #5010. Changes in version 3.2.2: Feature Improvements * The "configure" process now gives a much clearer report when it's finished * Fallback to "uname -n" on missing "hostname". Fixes #4771. * Export thread details in radmin "stats threads". Fixes #4770. * Improve queries for processing radacct into periodic usage data * Update dictionary.juniper. * Add dictionary.calix. * Fix dictionary.rfc6519 DS-Lite-Tunnel-Name to be "octets". * Update documentation for robust-proxy-accounting, and be more aggressive about sending packets. * Add per-module README.md files in the source. * Add default Visual Studio configuration for developers. * Postgres can now automatically use alternate queries for errors other than duplicate keys. * %{listen:TLS-PSK-Identity} is now set when using PSK and psk_query This helps the server track the identity of the client which is connecting. * Include thread stats in Status-Server attributes. Fixes #4870. * Mark rlm_unbound stable and add to packages. * Remove broken/unsupported Dockerfiles for centos8 and debian9. Bug Fixes * Preliminary support for non-blocking TLS sockets. Helps with #3501. * Fix support for partial certificate chains after adding reload support. Fixes #4753. * Fix handling of debug_condition. * Clean up home server states, and re-sync with the dictionaries. * Correct certificate order when creating TLS-* attributes Fixes #4785. * Update use of isalpha() etc. so broken configurations have less impact on the server. * Outgoing TLS sockets now set SNI correctly from the "hostname" configuration item. * Support Apple Homebrew on the M1. Fixes #4754. * Better error messages when %{listen:TLS-...} is used. * Getting statistics via Status-Server can now be done within a virtual server. Fixes #4868. * Make TTLS+MS-CHAP work with TLS 1.3. Fixes #4878. * Fix md5 xlat memory leak when using OpenSSL 3.0 - freeradius-server-rlm_sql_unixodbc-configure.patch: refreshed - spec file cleanup: remove duplicate BR: from subpackages- update to version 3.2.1: Feature Improvements * Add dictionary.ciena, dictionary.nile, and DHCPv4 dictionaries * Add simultaneous-use queries for MS SQL * Add radmin command for "stats pool " which prints out statistics about the connection pools. * Client statistics now shows "conflicts", to count conflicting packets. * New optional "lightweight accounting-on/off" strategy. When refreshing queries.conf you should also add the new nasreload table and corresponding GRANTs to your DB schema. * Add TLS-Client-Cert-X509v3-Certificate-Policies, which helps with Eduroam. * Allow auth+acct for TCP sockets, too. * Add rlm_cache_redis. See raddb/mods-available/cache for details. * Allow radmin to look up home servers by name, too. * Ensure that dynamic clients don't create loops on duplicates * Removed rlm_sqlhpwippool. There was no documentation, no configuration, and the module was ~15 years old with no one using it. * Marked rlm_python3 as stable. * Add sigalgs_list. See raddb/mods-available/eap * For rlm_linelog, when opening files in /dev, look at "permissions" to see whether to open them r/w. * More flexibility for dynamic home servers. See doc/configuration/dynamic_home_servers.md and raddb/home_servers/README.md. * Allow setting of application_name for PostgreSQL. See mods-available/sql. Bug Fixes * Correct test for open sessions in radacct for MS SQL. * The linelog module now opens /dev/stdout in "write-only" mode if the permissions are set to "u+w" (0002). * Various fixes to rlm_unbound from Nick Porter. * PEAP now correctly runs Post-Auth-Type Accept. * Create "TLS-Cert-*" for outbound Radsec, instead of TLS-Client-Cert-* Fixes #4698. See sites-available/tls, and fix_cert_order. * Minor updates and fixes to CI, Dockerfiles and packaging. * Fix rlm_python3 build with python >= 3.10. Fixes #4441. Changes in version 3.2.0: Feature Improvements All features from 3.0.x are included in the 3.2.x releases. In addition: * Add 'reset_day' and '%%r' parameter for rlm_sqlcounter to specify which day of the month the counter should be reset. * Partial backport of rlm_json from v4, providing the json_encode xlat See mods-available/json for documentation. * Support for haproxy "PROXY" protocol See sites-available/tls, "proxy_protocol" and doc/antora/modules/howto/pages/protocols/proxy/. * Support for sending CoA-Request and Disconnect-Request packets in "reverse" down RadSec tunnels. Experimental for now, and undocumented. * It is now possible to run a virtual server when saving / loading TLS cache attributes. See sites-available/tls-cache for more information. * Removed the "cram" module. It was undocumented, and used old and insecure authentication methods. * Remove the "otp" module. The "otpd" program it needs is no longer available, and the module has not been usable since at least 2015. * All features from 3.0.x are included in the 3.2.x releases. * 3.2.0 requires OpenSSL 1.0.2 or greater. Bug Fixes * All bug fixes from 3.0.x are included in the 3.2.x releases, including * fixes information leakage in EAP-PWD (bsc#1206204, CVE-2022-41859) * fixes crash on unknown option in EAP-SIM (bsc#1206205, CVE-2022-41860) * fixes crash on invalid abinary data (bsc#1206206, CVE-2022-41861) - freeradius-server-enable-python3.patch: refreshed- Migration of PAM settings to /usr/lib/pam.d.- use chown with colon instead dot in radiusd.service- Resolve issue with linking python3 with rlm-python- Remove libwbclient-devel BuildRequires in favor of pkgconfig(wbclient); (jsc#SLE-20577);- update to 3.0.25: * `correct_escapes` has been added back into the default configuration. * A segfault when trying to proxy to zombie home servers has been fixed. * A number of other small bugs and compiler warnings were fixed. * Added support for building with PostgreSQL 14.- Update to version 3.0.24 (jsc#SLE-21237) Feature Improvements * Add sanitizer options to configure script. * Log information needed by Wireshark to decode TLS sessions. * Allow more liberal SQL commands in rlm_sql_map. * Update dictionary.apc, dictionary.h3c. * Add new Acct-Status-Type Subsystem-On and Subsystem-Off See dictionary.iana and https://freeradius.org/rfc/acct_status_type_subsystem.html. * Add reject_unknown_intermediate_ca. See mods-available/eap. * Add dynamic loading of certificates via TLS-Session-Cert-File See raddb/certs/realms/README.md. * Add Server Name Indication (SNI) for outbound RadSec connections See raddb/sites-available/tls, and the home server tls configuration. * Support SNI for inbound RadSec connections. Certificates will be loaded from "realm_dir" in the "tls" section. SNI will be cached in the TLS-Server-Name-Indication attribute. * Preliminary support for haproxy "PROXY" protocol See sites-available/tls, "proxy_protocol" and doc/antora/modules/howto/pages/protocols/proxy/. * Generate parse errors in more circumstances when we know that the configuration is wrong. * Add "weeklycounter" to sample sqlcounter configuration. * Add certificate attributes to the request list, even if the certificates have expired. * The Simultaneous-Use code is now IPv6 aware, and can deal with NAS-IPv6-Address. * Add dictionary.cambium. * No longer logs passwords in logfiles (bsc#1184016) Bug Fixes * Fix crash in trustrouter module (#4115) * Fix crash in state handling. * Don't alter global options in redhat logrotate scripts. * EAP-FAST will print errors and continue, rather than exiting when OpenSSL fails various internal sanity checks. * Allow admin to manually change core limits, even when core limits are disabled. * Fix chunked rlm_rest HTTP body. Closes #4131 * Many fixes around the SQL ippool queries.conf and schema * Fix MySQL stored procedures. PR #4170 * Rework connection pool management for corner cases Fixes #4161, #4162, #4163. * Final fix for double free in #3188. * Fix sqlcounter wrong memory free. PR #4192 * Accept slow writes from proxies over TCP, which allows the server to make more progress when it receives partial packets. * Add 'weeklycounter' for rlm_sqlcounter. * Outbound proxying over TCP / TLS is better able to deal with partial TCP reads, and has fewer issues with slow networks. * Fix wrong data-type of Acct-Delay-Time in rlm_unix. * Fix EAP-FAST PAC lifetime calculation. * Print correct encoded packet length when debugging. - remove python2 build - drop references to SLE11 - freeradius-server-radiusd-logrotate.patch: upstreamed- Add ldap-schemas subpackage for OpenLDAP radius schemas - Add freeradius-server-fix-perl-shbang.patch to fix RPMlint warnings - Fix RPMlint warnings about macros and permissions- Update to version 3.0.23 * Feature improvements * Add "set home_server state ... down" in order to mark the home server as administratively down. Use "alive" to bring it back to life. * Add Post-Auth-Type "Client-Lost" which should make it easier to log when clients stop responding. * Cache TLS messages in &session-state, for more debugging. * Notes in eap configuration about TLS 1.0 / TLS 1.1, and setting cipher_list = "DEFAULT@SECLEVEL=1" * Added MANY warning messages about using TLS 1.3 with EAP. * Bug fixes * Fix crash in some cases when home server is down, in debug mode. * Fix (again) "read clients from SQL" functionality. * Fix sql_map to return values in more situations. * Silently ignore LEAP configuration instead of erroring out. - Update to version 3.0.22 * Feature improvements * Limited support for dynamic home servers. * Add support for prepend operator ^=. * Added rlm_totp, for use with the Google Authenticator app. * The default minimum TLS version is now TLS 1.2, as per RFC 8996. Older versions can be allowed by setting tls_min_version, and updating "cipher_list". * Significantly improve the readability and contents of TLS debug messages. * Allow CoA and Disconnect messages over TLS sockets. * Automatically set fragment size / MTU, so that PEAP/EAP-TLS works, and no longer requires manual changes to the configuration. * Allow "configurable_client_cert=yes" for EAP-TLS. * Add TLS 1.2 support for EAP-Fast. * Add ca_path_reload_interval option for tls. * Add "tls_min_version" to ldap module configuration. * Support running policies when receiving a RadSec connection. * Update TLS "ecdh_curve" code to allow for multiple curves. * Allow delta CRLs. * add rlm_sql_map, which can handle multiple columns from an SQL query. See raddb/mods-available/sql_map. * New xlat for setting status of rlm_always instances and new resource-check example virtual server for manipulating control flow in unlang policies based on status of some external resource. Patches from Terry Burton. * Update radmin to show more information about the home servers using "show home_server list all". * The default configuration now replies with EAP-Key-Name, if it is available, and was requested. * Include extensions in generated certificates. * Ignore user-provided dhparams in FIPS mode. * Remove native support for Cisco LEAP. It is insecure, and should not be used. Proxying LEAP is still supported. * Allow use of password preparation methods with rlm_eap_pwd. * More RFC compliance for various corner cases of DHCP, * Use DHCP-specific schemas. * Add stored procedures for DHCP lease allocation * Add support for DHCP-Decline. * Added mods-available/dhcp_sql which is a DHCP-specific instance of the SQL module. * Treat DHCP Discover and Request differently for lease allocation times. * Add support for PBKDF2 keys. * Update default PostgreSQL schema to use "text" instead of a fixed-size "varchar". * Add radmin command "show client list verbose", which gives a lot more information about each client. * Add support for EAPS-AKA authentication to rlm_wimax. * Add rlm_rest support for HTTP/2. * Add REST-HTTP-Status-Code attribute holding HTTP status code. * Add option to set http_negotiation in rlm_rest. Fixes #2821. * Encode / decode NAS-Filter-Rule according to RFC 4849. * Allow attributes using old names in configuration files, SQL, or modules to match attributes in the packet which use new names. * Allow querying IPv6 stats via FreeRADIUS-Stats-Client-IPv6-Address and FreeRADIUS-Stats-Server-IPv6-Address * Add warnings if there is no "real" User-Name to identify users. * Add sample configuration to update Stripped-User-Name and/or Class for user sessions. See sites-available/default * Add configuration to suppress printing values for User-Name, etc. * Support dictionary.telrad, which is also in WiMAX format. * PEAP 'proxy_tunneled_request_as_eap' is now configurable at runtime with Proxy-Tunneled-Request-As-EAP. * Debug output now lists client/server proposed TLS ciphers. * Add support for TLS1.3 * Bug fixes * Fix long-term double free due to PCRE calling our "free" function twice. * Respect the "log_reject" configuration item in more places. * Run Post-Proxy-Type Fail... when all home servers are down. * Note that rlm_replicate can only use UDP, and not TCP or TLS. * DHCP pool lookup is now keyed by Client Identifier (Option 61) when supplied by client, otherwise the hardware address is used. Compliant with RFC 2132. This change will not affect existing systems on upgrade, but new installations will use the new behavior. * Don't print invalid tags in rlm_cache, among other places. * Do home_server failover immediately when an initial TCP / Radsec connection fails. * Clear error on SQLITE_BUSY to prevent memory leak in corner cases. * Properly add SQL clients to virtual servers. * Use better API when decoding DHCP packets, to avoid unnecessary work. * Parse locale-dependent dates. * Fix radiusd.conf ENV LD_PRELOAD function. * Make the "date" module handle UTC more consistently. * Check for, and complain about, inconsistent use of tls_min_version versus disable_tlsv1 * Fix "read client from SQL" code so that it properly ties clients to a virtual server. Also document the behavior. * Fix leak with unknown attributes in detail reader. * Fix parenting issues in rlm_yubikey. - Drop __DATE__ __TIME__ fixes, implicitly done with source_date_epoch variable supported by gcc >= 7- freeradius-server-radiusd-logrotate.patch: move logrotate options into specific parts for each log as "global" options will persist past and clobber global options in the main logrotate config (bsc#1180525)- remove redundant definitions of apache rpm macros- freeradius-server-radiusd-logrotate.patch: fix permissions in logrotate global section (bsc#1170505, bsc#1174905)- update to 3.0.21 (jsc#SLE-11896) Feature Improvements * New stored procedure for allocating IPs with PostgreSQL Rates of 1500 IPs per second are now possible See raddb/mods-config/sql/ippool/postgresql/procedure.sql * Add SQL IP pool support for Microsoft SQL Server See raddb/mods-config/sql/ippool/mssql/ * Added RCNTEC dictionary. Closes #3168. * Added Pica8 dictionary. Closes #3179. * Add TLS-Client-Cert-Valid-Since attribute holding not Before date Patch from Boris Lytochkin. Fixes #3157. * Generate attributes containing unknown OIDs See raddb/sites-available/tls * Update the WiMAX dictionary. * Added ability to rlm_python(Python2) show a stacktrace from errors. #2979. * Add WiFi Alliance Policy OIDs. See raddb/certs/xpextensions * radmin now shows coa stats, too. * Sample schema extensions for summarizing data in SQL See mods-config/sql/main/*/process-radacct.sql * Update dictionary.aerohive, dictionary.fortinet, dictionary.arista and dictionary.erx. * Added VAS Experts dictionary. * Many updates to RPM and jenkins builds from Matthew Newton. * Added %C (time now in seconds) and %c (microsecond component of now) back-ported from the "master" branch. * Add reload capability to systemd unit file in Debian and RedHat. * Increase timestamp precision in postauth to maximum supported by each database and simplify (and make more consistent between drivers) the timestamps in SQL queries by using expansions. * Option to set dictionary path in raduat script. Bug Fixes * Various fixes found by PVS-Studio. * Set permissions of certificates in bootstrap shell script Fixes #3132. * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141. * Skip processing proxy reply if there are no home servers available. * Update SQLite IPPool queries. Fixes #3177 * rlm_sql_unixodbc fixes. Fixes #2822. * Fixes when building with LibreSSL. * Fix the rlm_python3 build. Note that this module is experimental. #3183. * The rlm_python should append the 'python_path' paths in 'sys.path'. It fixes the expected behavior to use the existing Python modules Fixes #3180. * Fix rlm_python to print the script errors properly. * Bound total query time for PostgreSQL. Fixes #3253. * Many fixes to Oracle sqlippool. It now does 500 IPs per second without any tuning. Fixes #3270. * Reference sqlippool by it's correct name. Fixes #3272. * Revert 3.0.20 patch which caused crashes on duplicate clients. * Update WiMAX-MSK attribute. Fixes #3280. * Fix crash when trying to access non-existant regex capture group. * Use timestamps (request or server) rather than SQL NOW() in accounting queries so that these are stable when replayed from a file buffer. - freeradius-python3_patches.patch: upstreamed- update to 3.0.20 (bsc#1146848) Feature Improvements * Added Force10 dictionary. * Update dictionary.hp with new attributes. #2690. * Update dictionary.aruba with new attributes. #2696. * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456) * Relax OpenSSL version checks, now that their API is both public, and stable. * Note that tls_min_version/tls_max_version also support "1.3" Since there is no standard yet for EAP with TLS 1.3, it will not work. * Added tripplite dictionary from #2760. * Switch to the async interface for rlm_sql_postgresql so that we can enforce query_timeout. * Added new LDAP option 'allow_dangling_group_ref'. * Updated documentation and functionality for EAP session caching See "cache" section of mods-available/eap. * Tighten systemd unit file security. Fixes #2637. * Disable TLS 1.0 and TLS 1.1 support in the default configuration We STRONGLY recommend doing this for all installations. * Add expansions for *outgoing* Radsec connections "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. Fixes #2839. * Add %{listen:tls} which returns "yes" or "no" for TLS or non-TLS connections. * Update dictionary.lancom with new attributes. #2847. * Added rlm_sql_mongo. See raddb/mods-available/sql. Note that this module is experimental. * Added more documentation in sites-available/robust-proxy-accounting. * sqlippool now re-allocates unexpired leases, to prevent IP pool exhaustion when clients perform multiple reauthentication attempts * Add support to radmin keep the history in ~/.radmin_history. * Add support for ENV and LD_PRELOAD in radiusd.conf. See the new ENV sub-section of radiusd.conf. * Update dictionary.aptilo. #3002. * Update dictionary.airespace. #3039. * Add sites-available/coa-relay, which makes CoA easier #3045. * Add example stored procedure for IP Pools in MySQL See mods-config/sql/ippool/mysql/procedure.sql * Update dictionary.dhcp dictionary with the recent hardware types. * Add experimental rlm_python3. This should largely work the same as rlm_python, which was Python2 only. * Add Dockerfiles for Debian10 and CentOS8. * Add RPM spec file compatibility for RHEL/CentOS 8. * Notes on certificate constraints. See raddb/certs/server.cnf. * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585. Bug Fixes * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627 * ERX-Acct-Request-Reason is "integer". Closes #2635. * Fix a slow memory leak in the file management code. * Try to fix file permissions if they get modified while the server is running * Fix slow memory leak with clients. * Fix request and connection timeouts in rlm_rest. * Fix systemd issues. * Fixes from clang analyzer. * Fix missing include for the dictionaries: alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn, audiocodes,avaya,bristol, columbia_university,freedhcp,garderos, infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus. * Fix internal sanity check when running with "-Xx". * Allow "inner-tunnel" virtual servers to work better with "accept" and "reject" policies. * Fix dictionary.huawei data types for Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address. * Framed-Interface-ID in postgresql/queries.conf is string, not inet Fixes #2817. * Fix rlm_cache to complain on unknown attributes in the "update" section of its configuration. * Add configure checks for -latomic. This helps on armel, mips and mipsel. Fixes #2828. * Add support to Oracle 19 and 18. Via #2857. * Add support for decoding tags in rlm_rest. Fixes #2848. * Use correct passwords when updating CRLs in raddb/certs/. * Properly separate "originate-coa" packets when accounting packets are read from the detail file reader. * Use the correct virtual server for pre/post-proxy. * radsqlrelay fixes backported from "master" branch * Fix DoS issues due to multithreaded BN_CTX access (bsc#1166847, CVE-2019-17185) - disable python2 for SLE15 and Factory - freeradius-server-enable-python3.patch: enable Python3 module - freeradius-python3_patches.patch: backport python3 fixes from upstream - freeradius-server-opensslversion.patch: updated- Enable memcached driver on SLE15- Add missing BuildRequire on samba-core-devel required for windbind support in rlm_mschap.- update to 3.0.19 (jira#SLE-5890) Feature improvements * Update dictionary.cisco * Update sqlippool to allow for stored procedures with PostgreSQL. This increases performance substantially. Patch from Nathan Ward. Fixes #2540. * Re-added "show client config" command to radmin. * Cleaned up mods-available/sql example so that it is easier to understand. * Added pfSense dictionary. Closes #2581 * Update dictionary.h3c Closes #2592 * Update elasticsearch/logstash config for v6.7.0. * EAP-PWD security fixes from Mathy Vanhoef. See http://freeradius.org/security/ (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664) Bug fixes * Update dynamic_client module and server core so that the functionality works. This has been broken since at least v2. * Fix crash in sqlippool due to escaping changes. Patch from Nathan Ward. Fixes #2532, #2533. * Fix systemd notify, watchdog and unit files. Fixes #2541, #2499. * Fix erroneous length check in EAP-FAST. * Update documentation to remove old "ignore_null" configuration. Fixes #2578. * Fix default POD port. Should be 3799. Fixes #2591 * Correctly encode vendor-specific "encrypted" attributes. Fixes #2600- reformat changelog mostly by wrapping lines - add missing bug numbers for security fixes- update to 3.0.18 * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss. * Do-Not-Respond policies can now be set in the "post-auth" section. * Encode / Decode ADSL Forum DHCP options. * Fix module ordering issues. e.g. when "sqlippool" needs "sql". See the "instantiate" section of radiusd.conf. * Add Big Switch dictionary. Fixes #2252. * Add sql_session_start policy (raddb/policy.d/accounting) This minimizes race conditions when using Simultaneous-Use (#2257). * For rlm_perl, all variables are now tainted by default. See raddb/mods-available/perl, and the "perl_flags" configuration item. This change should only affect people who are using variables in insecure ways. * Allow "sqlcounter" module to be listed in "post-auth". * Add support for IPv6 attributes in SQL. Fixes #2280 * The server is better at handling fail-over for outbound RadSec and TCP connections. Fixes #2284. * The server is now more aggressive about retrying failed outbound RadSec and TCP connections. Fixes #2284. * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list. * Add expansion for Radsec connections. "%{listen:TLS-...}" for TLS-Client-Cert-* and TLS-Cert-* attributes. * Add notes on running "ldapsearch" using the parameters from the LDAP module. * "ipaddr" attributes can now be cast to "integer" type attributes in an "update" section. * Move main thread queue to using atomic queues. This should help with contention in high load scenarios. * Add "recv_buff" setting to listeners. For more details, see sites-available/default. * The sqlippool module can now use attributes other than "Pool-Name" to assign IP pools. The "Pool-Name" attribute is still the default. * The "unpack" expansion can now unpack substrings. See mods-available/unpack for documentation and examples. * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE. * Allow for -LDAP-UserDN. See mods-available/ldap for more information. * Add sanitizing of control list for moonshot. Fixes #2318. * Update rlm_sql_mysql to be compatible with MySQL 8 Fixes https://bugs.launchpad.net/bugs/1795310. * Allow logging of only Access-Accept or Access-Reject messages See radiusd.conf, "auth_accept" and "auth_reject". * Removed Connect-Rate comparison. It was unused and broken. * Add dictionary.infinera. * Use OpenSSL HMAC functions instead of local ones. * Some SQL modules can now use "auto_escape" to escape unsafe strings See mods-config/sql/main/mysql/queries.conf. * Add wispr2date conversion in mods-available/date. * Implement dictionary-based handling in rlm_python. Fixes #2334 See mods-available/python for details. * Add support for SKIP LOCKED in sqlippool. This can improve performance by an order of magnitude or more. See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383 * Allow PSK and certificates at the same time Except for TLS 1.3 which does not support that. * Update docker scripts. Fixes #2306 Patch from Matthew Newton. * Add crypt xlat. * MySQL connections can now skip verifying the server certificate. Fixes #2481. See mods-available/sql. * Add better mechanism to detect MariaDB (Old MySQL). * Add RFC 7532 "bang path" support for realms Fixes #2492. * Update dictionary.ukerna documentation. Fixes #2493. * Add support for systemd service and watchdogs Fixes #2499. * Check for openss/rand.h, and allow building without OpenSSL engine. Patch from Eneas U de Queiroz Fixes #2517. * The default PosgtreSQL queries now use "ON CONFLICT" to better deal with issues. This requires PostgreSQL 9.5 or later. Please use a recent version of PostgreSQL, or edit the default queries to remove "ON CONFLICT". BUG FIXES * The session-state list is no longer cleaned in the inner-tunnel. This lets the outer Access-Reject section access session-state. * Fix typo in lock initialization for TLS sockets Found by Sergio NNX. * Add check for crash when home server down Fixes #2233. * Add username key for postauth table. * Better libpcap checks, when the header files or libraries are missing. Fixes #2245. * Allow building with old versions of OpenSSL Fixes #2247. * Allow non-FreeRADIUS State attributes to be used with the "session-state" list. i.e. State length != 16. * Be more aggressive about cleaning up zombie children when running in debug mode. * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries exporting LDAP API functions. * unlock files when asked to unlock them. * return error instead of asserting in map code. * Don't write 0 bytes to SSL. Fixes #2270. * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262. * Various dictionary cleanups and consistency checks Fixes #2281. * rlm_python has stronger thread locking to prevent reported issues. Performance may be affected. * Don't allow Message-Authenticator to overflow past the end of a large packet. * Fix crash in sqlippool when SQL server goes away Fixes #2300. * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303. * Fix crash with CoA packets/ Fixes #2304. * Fix crash in rlm_exec with CoA. Fixes #2328. * Print errors while parsing the log config, and don't quit when deprecated log settings are found. * Fix DHCP encoder xlat so that it can be used with a list of attributes. It previously only encoded the first member of the list, and now encodes all members. * The "expr" module now skips more whitespace. * Remove internal FreeRADIUS-Response-Delay attributes from attr_filter Access-Reject. * Don't send junk to redis when maximum args reached. * Small updates to IPv6 for accounting schema Fixes #2364. * Fix OpenDirectory integration in rlm_mschap. * Fix slow memory leak with dynamic clients. * Don't artificially truncate debug output for long strings. * Fix memory leak in EAP-PWD. * Fix crash in "hints" file with Fall-Through = yes. * Fix crash / timer issues with many CoA packets. * Fix attr_filter so that it does not treat vendor attributes of number 26 as Vendor-Specific. * Fix reconnect correctly in rlm_sql_mysql. * Fix rlm_cache to properly use Cache-TTL < 0 Fixes #2485. * Fix rare occurance of bad xlat expansion. * Check for rare race condition when a proxy reply arrives too late.- install license as %license instead of documentation- also fix ownership of /var/log/radius in systemd unit- update to 3.0.17 Feature Improvements * Add CURLOPT_CAINFO. Patch from Nicolas C #2167. * "stats home server" now supports "src IPADDR", to specify home server also by source IP. Fixes #2169. * Add Dockerfiles for a selection of common systems. * Increase number of permitted file descriptors, for systems with many home servers. * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs Patch from Isaac Boukris. Fixes #2205. * Update main READMEs. Patches from Matthew Newton. * Added dictionary.mimosa. Bug Fixes * Don't call post-proxy twice when proxying to a virtual server. Matthew Newton, #2161. * Use "raw" string value for shared secrets and dynamic clients It now parses strings with backslashes and "special characters" correctly. Fixes #2168. * Fix RuntimeDirectory for RedHat, from Alan Buxey. * Relax checks in 'if' parser from Isaac Bourkis. * Minor cleanups for %{debug_attr:&request} from Isaac Boukris. * Be more aggressive about cleaning up cached certificate attributes, due to deficiencies in OpenSSL. Reported by Nicolas Reich. * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall. * Fix double free in rlm_sql. Fixes #2180. * rlm_detail now writes empty Access-Accept packets. * rlm_python can now create tagged attributes. * Don't crash on duplicate realm + authhost / accthost * Allow partial certificate chain to trusted CA. Fixes #2162. * Treat SSL_read() returning zero as error. Fixes #2164. * detail writer now checks if the file was renamed or deleted. * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name. * RedHat Systemd updates. Fixes #2184. * Use correct API for State variable in rlm_securid. * Remove broken radclient option "-i". * Fix "users" file (and hints, etc). So that it does not get confused about entry ordering with multiple $INCLUDEs. * Fix rlm_sql to expand the un-escaped string, not the raw string. * Link default and inner-tunnel only if they exist. Fixes #2206. * Don't use both IP_PKTINFO and IP_SENDSRCADDR. * Always install signal handler for SIGINT (needed by Docker). * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs which are not self-signed will now be checked. * sqlippool now returns "fail" if it fails IP allocation. * Fix rlm_yubikey to look for correct attribute in replay attack check.- update to 3.0.16 Feature improvements * rlm_python now supports multiple lists. From #2031. * Add trust router re-keying. From #2007. * Add support for Samba / AD LDAP schema. See doc/schemas/ldap/samba/README.txt and doc/schemas/ldap/samba/ * Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL issues. * Better documentation for client certificates in PEAP and TTLS: it usually doesn't work. Fixes #2068. * Distinguish login failure from AD unavailable. Fixes #2069. * Update RH spec files. Fixes #2070. * Run Post-Proxy-Type if all home servers are dead. Fixes #2072. * Print offending IP addresses when EAP sessions come from two upstream home servers, and rate-limit the messages. * Minor packaging updates. * Better documentation for rlm_rest. * EAP-FAST now has it's own "cipher_list", so that it is easier to configure. * EAP-FAST now forcibly disables TLS1.2, until such time as we implement the new keying mechanism from TLS1.2. * Add documentation for allow_expired_crl. * Update Debian logrotation. #2093 and #2101. * DHCP relay can now drop responses. #2095. * rlm_sqlippool can now assign Delegated-IPv6-Prefix. It also now can assign any IPv4 or IPv6 address. Based on patches from maximumG. #2094. See raddb/mods-available/sqlippool for changes. * radeapclient can now use EAP-SIM-Ki to dynamically create the necessary triplets. * Explain why many LDAP connections are closed. Fixes #1969. * Debian build / package issues fixed by Matthew Newton. * dictionary.patton updates from Brice Schaffner. Fixes #2137. * Added scripts to build "inner-server.pem", and updated mods-config/inner-eap and certs/README to match. * Added provisions for using an external CA. See raddb/certs/ * Include dhcpclient binary in freeradius-dhcp debian packge. Bug fixes * Bind the lifetime of program name and python path to the module FR-AD-002 (redone) * Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone) * Allow 100-Continue responses with additional headers in rlm_rest. * fix corner case where detail files were not being locked correctly. * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group. Fixes #1947 * Clean up exfile code. Which should help to avoid issues with reading / writing 100's of detail files. * Fix build for winbind. Patch from Alex Clouter. * Fix checkrad for Mikrotik. Patch from Muchael Ducharme. * Fix home server stats lookup. Patch from Phil Mayers. * Add libjson-c3 as an optional dependency. * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS, which breaks the server. Fixes #2040. * rlm_python fixes. Fixes #2041 * Typos in "man" pages. Fixes #2045 * Expand "next" in %{%{...}:-%{...}}. Fixes #2048 * Don't add TLS attributes twice. Fixes #2050. * Fix memory allocation in rlm_rest. Fixes #2051. * Update trustrouter for new API. Fixes #2059. * Fix SQLite issues on FreeBSD. Fixes #2060 * Don't do debug logging of bad passwords. Fixes #2064. (bsc#1099802) * More graceful handling of "die" in rlm_perl. Fixes #2073. * Fix occasional crash when using cisco_accounting_username_bug = yes * EAP-FAST fixes from Isaac Boukris. [#2078], #2076, and #2082, #2126. * DHCP fixes, relay, #2092, add run-time check, #2028 * Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106. * TunnelPassword is not "single value" in LDAP schema. Fixes #2061. * sql log now opens the expanded filename, not the input one. This was a regression introduced in 3.0.15. * Remove unnecessary UNIQUE constrain in Oracle schemas. * Fix SSL thread and locking issues when modules also use SSL. Fixes #2125 and #2129. * Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and Matthew Newton. Fixes #2155.- Fix permissions of radiusd.service (bnc#1053654)- bsc#1055679 - freeradius-server does not provide winbind/AD auth Added libwbclient-devel as buildrequires- update to 3.0.15 with security fixes for issues found via fuzzing by Guido Vranken (bsc#1049086) https://freeradius.org/security/fuzzer-2017.html * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret() * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63 * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax() * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp() * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions() * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly * FR-AD-002 (v3) String lifetime issues in rlm_python * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare- update to 3.0.14 (still FATE#322416) Feature improvements * Enforce TLS client certificate expiration on session resumption, and Session-Timeout. See CVE-2017-9148 (bnc#1041445) * Updated dictionary.cisco.vpn3000, dictionary.patton * Added dictionary.dellemc * Lowered the log output for failed PEAP sessions. * ALlow utc in rlm_date. * The internal OpenSSL session cache has been disabled. Please see mods-available/eap * Update detail reader documentation. * Make outgoing RadSec connections non-blocking. * Add SQL backing to Moonshot-*-TargetedId generation. Bug Fixes * radtest uses Cleartext-Password for EAP, not User-Password. * Update documentation for mods-enabled/ linking. * Enhanced checks for moonshot salt. * Allow session resumption for RadSec connections. * Update "huntgroups" file to note that port ranges are not supported * Fix OpenSSL permissions issues on default key files. * Certificates are not required when PSK is used. * Allow SubjectAltName as first extension in cert. * Fixed talloc issue with TLS session resumption. * "&Attr-26 := 0x01" now produces useful error messages. * Handle connection error in rlm_ldap_cacheable_groupobj. * Fix endian issues in DHCP. * Multiple minor fixes for Coverity complaints. * Handle unexpected regex. * Fix minor issues in dictionaries. * Fix typos and grammar. Patches from Alan Buxey. * Fix erroneous VP creation in rlm_preproces. * Fix MIB. Patch from Jeff Gehlbach. * Trust router updates from Alejandro Perez. * Allow build with LibreSSL. * Use correct packet for channel bindings. * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us a test license. Please see the git commit history for more info. * Fix incorrect length check in EAP-PWD. This may be exploitable. * Stop rotating session database files (radutmp, radwtmp) since these are not logfiles. - freeradius-server-radiusd-logrotate.patch: updated- removed obsolete freeradius-server-fix-cert-bootstrap.patch because recent /etc/raddb/certs/bootstrap simply works - update to 3.0.13 (still FATE#322416) Feature improvements * Add dictionary.rfc7930. Note that we do not implement the RFC. * Added 'cipher_server_preference' to mods-available/eap Patch from #1797. * OpenSSL 1.1.0 compatibility fixes. * rlm_perl: radiusd::xlat to evaluate xlat string within perl script * Allow authentication retry in winbind. Patch from Herwin Weststrate. See raddb/mods-available/mschap. * Added "recv-coa" method to rlm_rest. It behaves the same as "authorize". * Document Trust Router tr_port option. Patch from Stefan Paetow. * Update elasticsearch/logstash examples so that they work with elastic stack v5. Patch from Matthew Newton. * Print information about packets, replies, and contents in the detail file reader. * Update abfab-tr policy. Pull request #1893 from Stefan Paetow. * Reject packets which contain User-Password and EAP-Message. * Add example for filtering Access-Challenge. See sites-enabled/default. * Pull symlink fixes from v4.0.x. Fixes #1859. * Add systemd reload. Not everything is reloaded, but some is. Fixes #1662. * Better documentation for listen "ipaddr". Fixes #1921 * Add dictionary.cnergee, updated dictionary.nomadix. * radclient no longer needs -x to print statistics with -s. Bug fixes * Minor typos. Fixes #1763 * Fix typo in RPM build. Closes #1767. * rlm_mschap check for password expiry only if password was correct. Fixes #1762. * Update debian build. * update rlm_counter "man" page. Fixes #1775. * Remove erroneous assert. Fixes #1778. * fix mschap password change test. Fixes #1792. * Cleanup config file on data remove. Fixes #1795. * passwd module returns "notfound" if not found. * Check for old OpenSSL, and don't build rlm_eap_fast if it necessary. Fixes #1803 * Cleanup memory better after ldap version query. Patch from Aleksey Katargin. * Rename lt_* functions to avoid linker issues with libtool. Fixes #1277 * Many miscellaneous fixes and typos. * Allow long strings in %{%{foo} bar:-%{baz} blah". Fixes #1866 * Fix filtering operators, along with more documentation and more tests for them. * Fix OpenSSL fixes. Fixes #1876. * Finish SQL select queries even when SELECT returns no rows. Fixes #1879. * Set Module-Failure-Message for more EAP errors. * Correct typo in dictionary.rfc5580. Fixes #1882 * Remove obselete systemd syslog.target. * Client-Port-Balance load-balancing now uses client port. * Radrelay examples fixed from Alex Clouter. * Update systemd target. Pull request #1896. * Trim starting whitespace in xlat strings. * Get MySQL result lengths using normal API. * suid down after fchown(). Fixes #1914. * Fix cases of comparing pointer to NUL character. Fixes #1915. * OpenSSL v1.1 fixes. Pull request #1921. * Better Handle v4/v6 host names. Pull request #1919. * Remove "Auth-Type = System" from docs and examples. * Don't crash on malformed %{home_server}. Fixes #1922 * fix erroneous use of talloc destructor in rlm_eap * Issue trigger modules.sql.fail. Fixes #1923 * Document python_path gotcha's. Fixes #1845 * dlopen() the specific version of Python. Fixes #1592- Don't require insserv if we use systemd - Remove require for unused fillup- Merge changes from SLE to openSUSE (FATE#322416): * freeradius-server-radclient-init-error-buffer.patch - make sure we initialize error buffer. bsc#911886: radclient error free() invalid pointer * freeradius-server-opensslversion.patch: remove OpenSSL version check and assume we know what we are doing. (bnc#1013311) * merge .changes file, mostly. - do not attempt to detect "vulnerable" OpenSSL versions. SUSE security fixes do not necessarily bump version numbers as does upstream OpenSSL (bnc#1021375) - do not generate certificates in %post. End-user needs to do this manually. - keep FreeTDS disabled on SLE12 - we never shipped it enabled - require OpenSSL 1.0+ - use pkgconfig(systemd) instead of plain systemd as BuildRequires - don't list manual pages as %doc- Remove --with-pic which is for static libs only. - Use SUSE RPM group names. Trim filler words from description. - Do not hide errors from groupadd/useradd.- Add upstream keyring - 2 new modules: rlm_sql_freetds and rlm_eap_fast- update to 3.0.12 - still fate#320481 The focus of this release is stability. * Feature improvements + Add support for =~ and !~ in update sections. See "man unlang" + Add dictionary.checkpoint. + Simultaneous-Use prints out more information. + Print WARNING in debug mode when packets may be truncated. + Added expansions %{home_server:state} and %{home_server_pool:state}, which show the state of the server / pool. + Mark rlm_sql_freetds as stable. + Make rlm_perl less fragile. Patch from Herwin Weststrate. + Allow extended attributes to have "encrypt=2" + Update dictionary.aruba. + Add support for EAP-FAST. This is an isolated feature which does not affect anything else. + Update OpenSSL vulnerability list. Use a version of OpenSSL released after September 20, 2016. + EAP certificate verification is now done when "verify" is enabled and "ocsp" is disabled. + New dhcpclient and rlm_rad_counter man pages. + Minor abfab and moonshot additions. + Pass CFLAGS through from environment in RPM builds. Allows more custom builds. + Build with Heimdal in addtion to libkrb5. * Bug Fixes + Use correct typedef for older versions of sqlite. + Update mssql schema to add priority + don't complain on /dev/urandom in ldap + fix == operator in update sections + Don't create DHCP strings with many trailing zeros. + Allow MS-CHAP change passwords instead of complaining on large buffer. + Allow assignment or equality operator on SQL. + Update aclocal tests for FreeBSD 10. + Remove occasional hang in rlm_linelog. + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544 + A few minor bugfixes caught in v3.1.x cleanup, and back-ported to v3.0.x. + do_not_respond again works in post-proxy + Allow realm "~^.*$" {} and User-Name with no realm. + Fix leak when creating unknown attributes + Fix Debian / logrotate. + Make OpenSSL error functions thread-safe. + Fix crash with rlm_sql and updating SQL-User-Name. + Debian build updates. + Allow regular expression comparisons in radclient. + Fix memory leak on unknown attributes in detail file reader. + Update example paths in "man" pages when installing them + Build fixes for rlm_mschap. Fixes #1489. + BSD build fixes. Patch from issue #1583. + Be more careful about /lib/ when building. Fixes #1585. + Correct ifdef placement error. Fixes #1572. + Allow for more files in internal "exfile" API So it will be possible to open more than 64 "detail" files at the same time. + Remove support for statically built EAP modules. Fixes #1591. + Many fixes to rlm_python from Guillaume Pannatier. + Use correct week adjustment in SQLcounter. Fixes #1608 + Minor fixes to allow compilation without DHCP, VMPS, or TCP. + Fix checks for module / config file change on HUP. + Compile regex comparisons when sent via "debug condition". + Update filenames in documentation and examples. + Don't crash if SQL connection becomes unavailable. + Disallow originate_coa when proxy_requests = no. + Free rad_perlconf_hv in correct perl context. + Multiple fixes for Debian builds. #1510, among others. + Set OpenSSL FIPS compatibility flag when necessary. + Pulled fixes for the build system over from other branches. + Fix OCSP for RADIUS over TLS. + Fix skip_if_ocsp_ok behavior. + Better fixes for systems without closefrom() but which have /proc. + Minor build fixes back-ported from v4.0.x. + build --whout-ascend-binary. Fixes #1761. + Be more aggressive about not opening new connections in debug mode after CTRL-C. Address #1604.- use %{with} macro for conditional inclusions instead of hardcoding version numbers - improved package descriptions - fixed builds on SLE12 and SLE11SP4- removed installation of experimental module rlm_sqlhpwippool.so - update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763, bsc#935573, CVE-2015-4680) * Changes of version 3.0.11 + Feature improvements - "unlang" comparisons of IP addresses to IP prefixes are now detected, and types automatically cast. - Allow shorthand form of ipv4prefix values e.g. 127/8. - Add "auto_chain" to raddb/mods-available/eap, tls subsection. This allows the disabling of OpenSSL auto-chaining of certificates. Which might be wrong. - Added printing of coa and disconnect stats (radmin). - radclient defaults to expecting Access-Accept responses to Status-Server. - Updated dictionary.lancom, dictionary.starent. - Portability fixes for Solaris. - More errors from ntlm_auth gets passed to MS-CHAP. - Update abfab-tr-idp virtual server. - Added "filter_password" in policy.d/filter. This removes embedded zero bytes in User-Password, for compatibility with broken clients. - The server now issues a WARNING message if duplicate configuration items are found. - TLS can skip the "verify" section if OCSP returns OK. See raddb/mods-available/eap, "skip_if_ocsp_ok". - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the result from the OCSP check. - Interoperate with AD and "LmCompatibiltyLevel = 5", by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind in rlm_mschap. - TTLS and PEAP now require "virtual_server" to be a real server. - Print WARNING when TTLS or PEAP identities are spoofed or not properly anonymized. See RFC 7542 for requirements. - Various rlm_python fixes from Herwin Weststrate. - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. - elasticsearch updates from Matthew Newton + Bug Fixes - Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to msg_callback with 'pseudo' content types. - Data type "ipv4prefix" is parsed correctly. - Use correct talloc context in rlm_exec. Fixes #1338. - Complain in unlang if "else" is used with no previous "if" or "elsif". - Send accounting status packets to the accounting port. Fixes #1364. - Print out CFLAGS when doing "radiusd -Xxv" - Fixed bug with coa/acct stats value #1339. Based on patch from Jorge Pereira. - Fixes for LEAP proxying. Don't use LEAP! - Fix issue with "directory already exists" seen when doing "make install". - Fixed bug with radmin related to the option "stats detail " - Complain if the detail file reader does not have permission to read the "detail.work" file. Fixes #1398 - Fixed SoH. Attributes were not being copied to the virtual server. - Used a wrong list to global statistics in "stats". - Create EAP-PWD identity correctly. Prevents segfaults. - Dynamically validate authentication types for PEAP and EAP-MSCHAPv2. - Fix includes in installed headers. - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys correctly. See raddb/mods-available/eap, "disable_tlsv1_2" - Allow password change to work for MS-CHAP. This requires 'r=0', because password changes are not retries. - Fix home server fail-over for home servers using TCP and/or RadSec. - Special characters in expanded regexes are now escaped e.g. User-Name containing '.', and comparing /%{User-Name}/, the '.' will now be escaped. See src/tests/keywords/regex-escape. - Use correct authentication vector when sending Access-Reject replies for RadSec. - Set FreeRADIUS-Proxied-To in TTLS again. You should use the "inner-tunnel" virtual server, instead of relying on this attribute. - Fix debugging constants in rlm_perl. Patch from Herwin Weststrate. - Add samba-dev / samba4-dev to debian builds so that rlm_mschap can automatically use the new winbind API. - Automatically skip zero-length attributes when sending packets, instead of erroring out.- fix bsc#951404 * Rebuild of freeradius-server package fails * fix source url - ftp://ftp.freeradius.org/pub/freeradius/ + ftp://ftp.freeradius.org/pub/freeradius/old/- update to 3.0.10 * Changes of version 3.0.10 + Feature improvements - Do more optimization of unlang policies. This makes run-time a bit faster. - Re-name most of the functions in src/lib. Third-party module authors will have to do the same. - More documentation on contributing and how to write modules. - Update radiusd.service for systemd. - Open IPv6 proxy socket if the server is listening on IPV6 auth / acct / coa packets. - Create debian packages for DHCP. Fixes #1125. - Add more tests for "update" section parsing. - Update "man" pages. - Update attributes for Alcatel 7750 - Add dictionary for Boingo Wi-Fi - Add support for DHCP lease queries. See raddb/sites-available/dhcp - On HUP, check all modules for config files which have changed. And only re-load those modules. - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS packets. Patch from Herwin Weststrate. - Documentation fixes from Alan Buxey and Matthew Newton. - Update "logrotate" script. - Added more RFCs to doc/rfc for new standards implemented by FreeRADIUS. - Don't crash when doing "radmin -e "help hup". Patch from Matthew Newton. - The dictionary parser now does more sanity checks, which prevents run-time problems with invalid attributes. - Update debian packages. Patches from Christopher Hoskin. - Many other debian packaging fixes from Matthew Netwon and Herwin Weststrate. - Add "session-state" to Perl. Patch from Herwin Weststrate. + Bug Fixes - Fix rlm_files so that there are no collisions when loading 10's of 1000's of users. - Fix radclient to use our internal v4/v6 parsing functions. v6 addresses with ports now work correctly. - Fix sending/receiving packet messages to wrap v6 addresses in square brackets '[]'. - Check for sasl/sasl.h when building rlm_ldap, and disable SASL functionality if unavailable. - Fix issue which caused a non \0 terminated buffer to be assigned to attributes if the value being assigned contained an invalid escape sequence. - Fix deadlock when reconnecting connections in the connection pool. - Fix potential overrun in functions that used fr_utf8_char with a non nul terminated buffer. - Fix decoding issue for Tunnel-Password type attributes which were very long. Found by Denis Andzakovic. - Fix radclient issue with TCP sockets on FreeBSD. - The server now creates ${run_dir} and ${logdir} directories in daemon mode, when running as "root". - Handle tags when using maps. Fixes #1191. - Fix crash when CoA packets time out. - Fix parse error in rediswho - Fix regex support in SQL radcheck the "users" file and radsniff. - Register listen xlat earlier, so that it's available when the virtual servers are being parsed. - Parse Ascend-Data-Filter when given as "0x..." - Print Ascend-Data-Filter correctly. Add test cases for both. - Allow old-style clients again. They will be disallowed for 3.1.0 and following. - Complain instead of crash when "else" and "elsif" are in the wrong place. - Clean up memory more aggressively. This lowers the maximum memory used, most typically for TLS based EAP methods. - Prevent the server from unlinking the control socket of an already running instance. - Fallback to using the configured OCSP URL if one exists, and no URL is provided in the certificate. - Return CoA-NAK if proxying CoA fails. Based on patch from Jorge Pereira. - Lower peak memory usage by decreasing size of internal memory pools. - The control socket is now left in place if a second copy of the server is accidentally started. - Allow virtual attributes in "switch", "case", etc. Fixes [#1240] and #1265. - Many spell check / typo fixes in comments and example configuration files. - Better handle multiple DHCP listeners. - Don't print secrets for old-style realms. Fixes #1267. - Don't fall through in empty "case" statements. Fixes #1274. - Update EAP-TTLS so that MPPE keys are correctly calculated with TLSv1.2. - Always delete MS-MPPE-* from the TTLS inner tunnel. This allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206. - Fix off by one error that caused some MSCHAP-Error messages to be sent without the password change version (V=3) and the textual message component (M=). - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759 does not say that any of these fields are optional, and not including V= caused errors with wpa_supplicant. - Do not include M= in MSCHAPv1 errors. It's not supported.- Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group- Remove gpg signature file * The gpg signature checking is broken and doesn't work- Fix bsc#935573: Insufficent CRL application for intermediate certificates * CVE-2015-4680 * freeradius-server-CVE-2015-4680.patch based on https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3- update to 3.0.9 * Changes of version 3.0.9 + Feature improvements - Make "pool" configurations more consistent, and update documentation for them. - Move connection pool logic to "most recently started", instead of MRU. This should help with pool stability. - More VSAs for 3GPP2 - Added examples of multi-value attributes to rlm_perl. - LDAP-Group and SQL-Group attributes are now dynamically allocated. - Only the "sql" module registers SQL-Group. Other instances register "instance-name-SQL-Group", similarly to "ldap". - Unknown attributes are now complained about more often when used in unlang statements. e.g. if (Foo-Bar == 3) used to be a string to string comparison. It is now a parse error. - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many things easier. - Move to C99 initializers for modules. - Load modules in raddb/mods-enabled. This allows attributes like "LDAP-Group" to be used in the "files" module, without explicit ordering or listing in "instantiate". - Added 'bootstrap' section to modules. Third-party modules will need to be updated. - When adding clients from a DB, add them to a virtual server if that virtual server has a "listen" section. Otherwise, add the clients to the global list. - When reading dynamic clients from a file, don't expire them if the underlying file is unchanged. - Allow the server to originate CoA requests from the post-auth stage. - The server creates ${run_dir} and ${logdir} in daemon mode, if they do not already exist. - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server now supports all mandatory and optional attributes for this specification. - HUP now re-loads the configuration only if the files have changed. If all files are unchanged, HUP re-opens the log file, and does nothing else. - Much better debug messages for EAP-TLS, including which attributes are cached, and when they are retrieved. - Increase default max_requests to 16384. Memory is cheap now. - Added "stats memory" commands to radmin. Debug build only. - Aptilo controller dictionary updates. - SQL modules now use Acct-Unique-Session-Id everywhere. - The redis modules are now stable. - The LDAP module now supports SASL "interactive bind" method. This allows Kerberos based administrator and user binds. - DHCP code is now in libfreeradius-dhcp. - More DHCP encoding / decoding unit tests. - rlm_replicate can now be listed in the "accounting" section. - Better sqlite debugging output. - Remove "required" option from many sql_ippool directives. - Set default CA "basic constraints" to "critical". Fixes #1073 - Updates to help / man pages from Jorge Pereira. - Added more tests. + Bug Fixes - Be more careful about unused config item warnings when using -Xx. - Move more defines to be auto-generated. - Allow virtual servers in proxy fallback. - Allow %{module:} to work. - Don't crash in RadSec. Closes #980. - Return better errors when a unix group / user is not found. - Re-enable detail module "locking" parameter. - Don't crash when logging replies from Status-Server packets. - The couchbase module now uses "update" instead of "map", for consistent with the rest of the server. See raddb/mods-available/couchbase - Don't require NT-Password for MS-CHAP password changes. - Be a bit more careful about decrypting MS-CHAP-MPPE-Key attributes. Closes #1013. There is no perfect fix, tho. - Fix security issues with EAP-PWD. See http://freeradius.org/security.html#eap-pwd-2015 - Fix dynamic clients read from SQL in non-debug mode - MS-CHAP now allows retries (i.e. password change) when passwords are expired. - Allow "user=radiusd" when the server is already user "radiusd" - suid up/down works on non-Linux systems. This means that the control socket should have the correct ownership. - Fix issue which caused the server to sometimes have problems when a home server was marked zombie. - Fix format.pl because Perl is now more picky. - Fix proxy to Packet-Dst-IP-Address, so that it uses the correct destination port. - Fix corner case with cursor functions and removal. - OpenDirectory fixes and documentation. - Fix leaks in rlm_redis. - RFC 6929 "evs" attributes are now encoded / decoded properly. - Fix talloc pool leaks when receiving malformed or retransmitted Accounting/CoA requests. - Printed attributes again use double quotes instead of single quotes. - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to eap.conf. Fixes oCert CVE-2015-4680. - rlm_expr now errors out correctly on malformed attribute references instead of triggering an assert. - Make "break" work in "foreach" loops - Allow dynamic expansions to work again in the "hints" file. - Correct minor typos in comments and examples from Alan Buxy. - Re-urlencode the path portion of ldapi:// urls before passing it to ldap_initialise. - freeradius-server-rlm_sql_unixodbc-configure.patch removes hard-coded directory in configure script of rlm_sql_unixodbc - install new module rlm_sqlhpwippool.so- minor adjustments/cleanup of spec and changes- update to 3.0.8 * Changes of version 3.0.8 + Feature improvements - Allow syslog_severity to be set in rlm_linelog. - Allow defaults to be set for bulk clients in LDAP and couchbase. - Updates to dhcpclient. Patches from Nicolas C. - rlm_mschap now supports direct connections to winbind, which is faster than ntlm_auth. See raddb/mods-available/mschap. Patch from Matthew Newton. - Recommend /dev/urandom for TLS randomness, instead of ${certdir}/random - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}. - Allow Expanded EAP types where vendor is 0 (IETF) and type is normal EAP type. Supplicants sending Expanded EAP types like this are broken. - Add support for server side sort controls when searching for user objects in rlm_ldap. + Bug Fixes - Don't complain about "authorize" in "server {}" blocks, but only if there's no "server" block. - Fix cosmetic issue where debug from the first packet read by a detail reader thread would be emited during config parsing. - Fix ASSERT on truncated detail packets. - Don't use main server log functions from within panic_action, as in the case of syslog this would cause deadlocks if the fault was triggered from within a malloc. - Fix issue in "switch" when "correct_escapes = false". Fixes #911. - Fix sqlcounter configuration to use "%%b" instead of "%b", otherwise the new syntax validation will fail. - Allow forward references in configuration items. Modules aren't always loaded in a sane order. - Fix more escaping issues. Closes #912. - Decode MAC addresses correctly for VMPS. - Fix memory leak with TLS connections. - Fix state machine threading issues for conflicting packets. - Fix copy_request_to_tunnel issues for tagged attributes. - Allow "ok" to over-ride "updated" inside of Auth-Type sections. - Update state machine so that post-proxy is run though child threads for performance, instead of blocking the main thread. - Allow "netmask" to work again in client definitions. - Relax restrictions on SQL group queries. - track outgoing proxy sockets and clean them up more aggressively. - track proxy statistics, including CoA and Disconnect. - If radmin has a connection failure when running a command, it re-connects and runs the command again. - mark home servers "unknown" less aggressively. - Fix potential SEGV in PostgreSQL driver on error. - Fix issue where fields like nas_type would not be accessible via the %{client:} xlat, for dynamic clients. - Set default busy_timeout (of 200ms) in the sqlite driver, so writes don't cause selects to fail in multithreaded mode. This is user configurable, and may be increased if required. - Convert Password-With-Header attributes to binary (from hex or base64), in the authorize method of rlm_pap. - Fix invalid assert in state.c, that could cause abort in post-auth. - Fix double free when -m flag is used, and connection pools are referenced by multiple modules. - RADIUS over TLS accounting uses the same port as authentication. - Regularized return codes from radmin commands. - Fix RHEL spec file so it works correctly for Centos7 which uses systemd, and didn't like the SystemV init script. - radwho and radlast now have a -D option to load dictionaries - DHCP packets are no longer checked for duplicates. - Don't crash in sql module group comparisons in corner case. - Calculate MPPE keys correctly when using TLS 1.2. - Fix load-balance sections. Closes #945 - TLS certificates are available again in the post-auth section. They are not available for session resumption. - radclient encodes CHAP-Password properly when using -c Closes #955. - Fix issue in rlm_cache_memcached driver that caused variable length values to be truncated. - Fix track functionality in detail reader, so it no longer fails with a "Failed marking detail request as done: Bad file descriptor" error. - Actually add the peer identity (as User-Name) to the inner tunnel in EAP-PWD requests, so it's available for lookups. - Fixes to PostgreSQL queries. Patches from Santiago Gimeno. - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1.- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = ). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. * Preliminary support for EAP channel bindings. * Foundational work for dynamic home servers. They do not yet work, but this is now only a matter of updating the "realm" module in a future release. * Support &attr[*] syntax to copy all instances of an attribute when used with the += operator in an update section. May be qualified with a tag. * The logintime and expiration modules can now be listed in the post-auth section. This makes some configurations simpler. * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. Please submit patches. and numerous; bugfixes - remove gpg-offline - create /run/radiusd after install - drop freeradius-server-opensslversion.patch (upstream)- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682/bin/sh/bin/sh/bin/sh/bin/shfreeradiuss390zl36 1717503429  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@3.2.4-150600.3.3.23.2.43.2.4-150600.3.3.23.2.4-150600.3.3.23.2.4      !""#$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$%&&'''''''''''''''''''''''((((((((()*+++radiusdradiusdraddbREADME.rstcertsMakefileREADME.mdbootstrapca.cnfclient.cnfinner-server.cnfpasswords.mkrealmsREADME.mdserver.cnfxpextensionsclients.confdictionaryexperimental.confhintshuntgroupsmods-availableREADME.rstabfab_psk_sqlalwaysattr_filtercachecache_authchapcouchbasecountercuidatedetaildetail.example.comdetail.logdhcpdhcp_filesdhcp_passwddhcp_sqldhcp_sqlippooldigestdpskdynamic_clientseapechoetc_groupexecexpirationexprfilesidninner-eapippooljsonldap_googlelineloglogintimemac2ipmac2vlanmoonshot-targeted-idsmschapntlm_authopendirectorypampappasswdpreprocesspython3radutmprealmredisrediswhoreplicaterestsmbpasswdsmsotpsohsometimessqlsql_mapsqlcountersqlippoolsradutmptotpunboundunixunpackutf8wimaxyubikeymods-configREADME.rstattr_filteraccess_challengeaccess_rejectaccounting_responsecoapost-proxypre-proxyfilesaccountingauthorizedhcppre-proxypreprocesshintshuntgroupsrealmfreeradius-naptr-to-home-server.shsqlcountercuidhcpippoolippool-dhcpmysqlschema.sqlschema.sqlpostgresqlprocedure.sqlmainmoonshot-targeted-idsmysqlqueries.confschema.sqlpostgresqlqueries.confschema.sqlsqlitequeries.confschema.sqlunbounddefault.confmods-enabledalwaysattr_filterchapdatedetaildetail.logdigestdynamic_clientseapechoexecexpirationexprfileslineloglogintimemschapntlm_authpappasswdpreprocessradutmprealmreplicatesohsradutmptotpunixunpackutf8panic.gdbpolicy.dabfab-traccountingcanonicalizationcontrolcuidebugdhcpeapfiltermoonshot-targeted-idsoperator-namerfc7542proxy.confradiusd.confsites-availableREADMEabfab-tlsabfab-tr-idpaws-nlbbuffered-sqlchallengechannel_bindingscheck-eap-tlscoacontrol-socketcopy-acct-to-home-serverdecoupled-accountingdefaultdhcpdhcp.relaydynamic-clientsexamplegoogle-ldap-authinner-tunneloriginate-coaproxy-inner-tunnelresource-checkrobust-proxy-accountingsohstatustlstls-cachetotpvirtual.example.comvmpssites-enableddefaultinner-tunneltemplates.conftrigger.confusersradiusdradiusd.serviceradiusd.conffreeradiusproto_dhcp.soproto_vmps.sorlm_always.sorlm_attr_filter.sorlm_cache.sorlm_cache_memcached.sorlm_cache_rbtree.sorlm_chap.sorlm_counter.sorlm_date.sorlm_detail.sorlm_dhcp.sorlm_digest.sorlm_dpsk.sorlm_dynamic_clients.sorlm_eap.sorlm_eap_fast.sorlm_eap_gtc.sorlm_eap_md5.sorlm_eap_mschapv2.sorlm_eap_peap.sorlm_eap_pwd.sorlm_eap_sim.sorlm_eap_teap.sorlm_eap_tls.sorlm_eap_ttls.sorlm_exec.sorlm_expiration.sorlm_expr.sorlm_files.sorlm_ippool.sorlm_json.sorlm_linelog.sorlm_logintime.sorlm_mschap.sorlm_pam.sorlm_pap.sorlm_passwd.sorlm_preprocess.sorlm_radutmp.sorlm_realm.sorlm_replicate.sorlm_rest.sorlm_soh.sorlm_sometimes.sorlm_sql.sorlm_sql_freetds.sorlm_sql_map.sorlm_sql_null.sorlm_sql_unixodbc.sorlm_sqlcounter.sorlm_sqlippool.sorlm_test.sorlm_totp.sorlm_unbound.sorlm_unix.sorlm_unpack.sorlm_utf8.sorlm_wimax.sorlm_yubikey.socheckradraddebugradiusdradminradrelayrcradiusdfreeradius-serverCREDITSChangeLogfreeradiusdictionarydictionary.3comdictionary.3gppdictionary.3gpp2dictionary.accdictionary.acmedictionary.actelisdictionary.adtrandictionary.advadictionary.aerohivedictionary.airespacedictionary.alcateldictionary.alcatel-lucent.aaadictionary.alcatel.esamdictionary.alcatel.srdictionary.alphiondictionary.alteondictionary.altigadictionary.alvariondictionary.alvarion.wimax.v2_2dictionary.apcdictionary.aptilodictionary.aptisdictionary.arbordictionary.aristadictionary.arubadictionary.ascenddictionary.ascend.illegaldictionary.asndictionary.audiocodesdictionary.avayadictionary.azairedictionary.baydictionary.bigswitchdictionary.bintecdictionary.bluecoatdictionary.boingodictionary.bristoldictionary.broadsoftdictionary.brocadedictionary.bskybdictionary.btdictionary.cablelabsdictionary.cabletrondictionary.calixdictionary.cambiumdictionary.camiantdictionary.centecdictionary.checkpointdictionary.chillispotdictionary.cienadictionary.ciscodictionary.cisco.asadictionary.cisco.bbsmdictionary.cisco.vpn3000dictionary.cisco.vpn5000dictionary.citrixdictionary.ckeydictionary.clavisterdictionary.cnergeedictionary.colubrisdictionary.columbia_universitydictionary.compatdictionary.compatibledictionary.cosinedictionary.covarodictionary.dantedictionary.dellemcdictionary.dhcpdictionary.digiumdictionary.dlinkdictionary.dragonwavedictionary.efficientipdictionary.elevendictionary.eltexdictionary.epygidictionary.equallogicdictionary.ericssondictionary.ericsson.abdictionary.ericsson.packet.core.networksdictionary.erxdictionary.extremedictionary.f5dictionary.fdxtendeddictionary.force10dictionary.fortinetdictionary.foundrydictionary.freedhcpdictionary.freeradiusdictionary.freeradius.evs5dictionary.freeradius.internaldictionary.freeswitchdictionary.gandalfdictionary.garderosdictionary.gemtekdictionary.h3cdictionary.hillstonedictionary.hpdictionary.huaweidictionary.ianadictionary.ieadictionary.infineradictionary.infobloxdictionary.infonetdictionary.ipunpluggeddictionary.issannidictionary.itkdictionary.juniperdictionary.karlnetdictionary.kinetodictionary.lancomdictionary.lantronixdictionary.livingstondictionary.localwebdictionary.lucentdictionary.manzaradictionary.meinbergdictionary.mellanoxdictionary.merakidictionary.meritdictionary.merudictionary.microsemidictionary.microsoftdictionary.mikrotikdictionary.mimosadictionary.motoroladictionary.motorola.illegaldictionary.motorola.wimaxdictionary.navinidictionary.netdictionary.netelasticdictionary.netscreendictionary.networkphysicsdictionary.nexansdictionary.niledictionary.nokiadictionary.nokia.conflictdictionary.nomadixdictionary.norteldictionary.ntuadictionary.openserdictionary.openwifidictionary.packeteerdictionary.paloaltodictionary.pattondictionary.perledictionary.pfsensedictionary.pica8dictionary.propeldictionary.prosoftdictionary.proximdictionary.purewavedictionary.quiconnectdictionary.quintumdictionary.rcntecdictionary.redcreekdictionary.rfc2865dictionary.rfc2866dictionary.rfc2867dictionary.rfc2868dictionary.rfc2869dictionary.rfc3162dictionary.rfc3576dictionary.rfc3580dictionary.rfc4072dictionary.rfc4372dictionary.rfc4603dictionary.rfc4675dictionary.rfc4679dictionary.rfc4818dictionary.rfc4849dictionary.rfc5090dictionary.rfc5176dictionary.rfc5447dictionary.rfc5580dictionary.rfc5607dictionary.rfc5904dictionary.rfc6519dictionary.rfc6572dictionary.rfc6677dictionary.rfc6911dictionary.rfc6929dictionary.rfc6930dictionary.rfc7055dictionary.rfc7155dictionary.rfc7268dictionary.rfc7499dictionary.rfc7930dictionary.rfc8045dictionary.rfc8559dictionary.riverbeddictionary.riverstonedictionary.roaringpenguindictionary.ruckusdictionary.ruggedcomdictionary.sangomadictionary.sgdictionary.shastadictionary.shivadictionary.siemensdictionary.slipstreamdictionary.smartsharesystemsdictionary.sofawaredictionary.softbankdictionary.sonicwalldictionary.springtidedictionary.starentdictionary.starent.vsa1dictionary.surfnetdictionary.symboldictionary.t_systems_novadictionary.telebitdictionary.telkomdictionary.telraddictionary.terenadictionary.tplinkdictionary.trapezedictionary.travelpingdictionary.tripplitedictionary.troposdictionary.ukernadictionary.unixdictionary.usrdictionary.usr.illegaldictionary.utstarcomdictionary.valemountdictionary.vasexpertsdictionary.verizondictionary.versanetdictionary.vqpdictionary.walabidictionary.waveriderdictionary.wichorusdictionary.wifialliancedictionary.wimaxdictionary.wimax.alvariondictionary.wimax.wichorusdictionary.wisprdictionary.xediadictionary.xylandictionary.yubicodictionary.zeusdictionary.ztedictionary.zyxelfreeradius-serverCOPYRIGHTLICENSEcheckrad.5.gzclients.conf.5.gzdictionary.5.gzradiusd.conf.5.gzradrelay.conf.5.gzrlm_always.5.gzrlm_attr_filter.5.gzrlm_chap.5.gzrlm_counter.5.gzrlm_detail.5.gzrlm_digest.5.gzrlm_expr.5.gzrlm_files.5.gzrlm_idn.5.gzrlm_mschap.5.gzrlm_pap.5.gzrlm_passwd.5.gzrlm_realm.5.gzrlm_sql.5.gzrlm_unbound.5.gzrlm_unix.5.gzunlang.5.gzusers.5.gzradcrypt.8.gzraddebug.8.gzradiusd.8.gzradmin.8.gzradrelay.8.gzradsniff.8.gzradsqlrelay.8.gzrlm_ippool_tool.8.gzrlm_sqlippool_tool.8.gzradiusdradiusradacctradius.logradutmp/etc/logrotate.d//etc/pam.d//etc//etc/raddb//etc/raddb/certs//etc/raddb/certs/realms//etc/raddb/mods-available//etc/raddb/mods-config//etc/raddb/mods-config/attr_filter//etc/raddb/mods-config/files//etc/raddb/mods-config/preprocess//etc/raddb/mods-config/realm//etc/raddb/mods-config/sql//etc/raddb/mods-config/sql/ippool-dhcp//etc/raddb/mods-config/sql/ippool-dhcp/mysql//etc/raddb/mods-config/sql/ippool-dhcp/sqlite//etc/raddb/mods-config/sql/ippool//etc/raddb/mods-config/sql/ippool/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids//etc/raddb/mods-config/sql/moonshot-targeted-ids/mysql//etc/raddb/mods-config/sql/moonshot-targeted-ids/postgresql//etc/raddb/mods-config/sql/moonshot-targeted-ids/sqlite//etc/raddb/mods-config/unbound//etc/raddb/mods-enabled//etc/raddb/policy.d//etc/raddb/sites-available//etc/raddb/sites-enabled//run//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/freeradius//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/freeradius-server//usr/share//usr/share/freeradius//usr/share/licenses//usr/share/licenses/freeradius-server//usr/share/man/man5//usr/share/man/man8//var/lib//var/log//var/log/radius/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:34057/SUSE_SLE-15-SP6_Update/8f38b87e450812fcf3f108ec13b38120-freeradius-server.SUSE_SLE-15-SP6_Updatedrpmxz5s390x-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDCEEFFFFFFFFFFFFFGFFFFFFFFFFFFFFFFFFHHASCII textdirectorymakefile script, ASCII textPOSIX shell script, ASCII text executableUTF-8 Unicode textELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=cf29a870dad6952874e50489a5377fcd68316047, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1e338bc539a7ab6b4aa6bb2ee100158feee5a8c7, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2c7801cf04ed44438a4f0c5755b3d0453dec874c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f73405fa38748352bc2491490bda0cf94d54e8af, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=32f156ca5626fd1a1d9e3143337183625ca4935c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=025fb6ff9af70ef0991521f646f84f5d6bdf618e, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ee34fe1c2fbdbc3d1cc333da27689383499d39ac, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1e1e7bec99ef86752b388b1ed9669f1461aba33f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=91c98e3dddf6843f640d3cf721e977e115da14a7, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f79dee2b9b4b2e44d12aadadce7fffdfaab26102, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6375ea65a5d6f417201fb7d977bbef593a13f507, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5904fd9ea1494faa692285d1a780afb821ca3244, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=59e7d39baa023916f991214b605669deaafa3dd6, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1ef48f913609565a970e2f2a6a10c07af02405b2, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=569f1fae837a53d914b241cb8407c32c5a22cdaf, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5d76a4d3ebe27d31f660bb655fc46bccfb4c9449, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=02c68461e3e9c1ab0736490988ebd4b5554c40e9, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=34028c25d7bdc56794071656ab920a41d7afd014, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=dbf89a994a908f8b504ddd0387988d2aa6074573, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fbdad8f065ea38d02d285ab39d918d67e18f7af1, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9e13c84e4d8326d8b6c6933ea4b2007f08d26f78, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8d833826a0811a9d63820f8f79334127349b3f15, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ded016af53d0fb559aee945f555f18577e250c8e, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=33d05907d238955cff733bb9f36251d2dc867a91, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5a878ce96950b27a4fb8ee523558465b0306480b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b8556fa18125b253874d6afbb7eb34f76ade39bb, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=283fef6f76ce83833f3e3529b5bd9d4441c032ab, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2181c77be759eab849a1674d096e82c91ec0322b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b9c93ebb48b6a932462e676996e4c220fdc6d5e0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9db27d5258551f7ed281d6bb63a454b5c3a09cd6, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a92edf5065caf688e05aebc48086ea55205b8911, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=074204b71b41ebdf839710ef135909f0f627baea, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=10dcf1a97af9e2790a63053fc1c7026c6da18620, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=317b3f4f57250a940aaaa61e805b74b2efcbc67b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e9a930b8ff58fdef09f6da33302b8d214e3533ba, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=43d8084977850beedcb6b02218320b97cd715fbb, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9bd3caf81ed9ad4fcede947506a924b69b0cf138, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8a53d469e566eafc38ee5e7ec1d66c9380dac734, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9bd05b90688cfaf692fde57e46b014ffa9ebe226, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=552adeb1c372f063eb14e3af8266b26c9eb88369, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=99a17a0e456851ef4ea2fad92cec62d40f535662, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7e7a9a71fcf8c1cd3c5df32a66512fc51e5122e7, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0a94349a1208f9c81b0b7e26fe44b81d5155d995, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fa0da47689778fa3a2c13a416d70320cc6bc83d3, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=09b7a73e6e7c8db84aa76193d2e513dc1b0ff47c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ec9070dfdfce2547958d0ecafc88bf1d321545cf, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=dfa366eae0b1b5d3e299e6b4d340a7ee6331cea2, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8ad272ce2419e3d44a0bed37e8be2d6c8a613425, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b8cabd4a05bb6db934e1e96f519c2b6a2de84e4a, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c4fe4a0f4d97e7c926281fb5bd77093b98e9cafd, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3887e513a85883089c84527e9a7045f20896471b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3fb2a5c4c343b62c5160edd471399f50dbb994f3, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1bf9b83e38aacf6656522c49068ca8caca0e4331, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1b83e69c7bf2b120ce22529f258051f848359f87, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d5cbc319e66b08b772842747097b34a30235560f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=451ca8534649332a91b4cdfdb18bad53cdf0a80b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=84f01b5be5cf92f8e2a5f0325594ff855689555c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c55f90d8c714596bffca553d4bf160f79ca70bc7, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3d70a22e5e400d5c64ee42f8147ff123f496cd89, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c9a862d1d3354852c8a001dd96b5240bb155e45f, strippedPerl script text executableELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=caef1f91dfcd7c81d45311f6767a39ada1f42e6c, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=8b2bbee7f8243ee79026c12d78f5c18651270cf9, for GNU/Linux 3.2.0, strippedAlgol 68 source, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)empty #(-26;?EJMQUY^bgjoruz}  RR RR RR R R R RR R R'RR RR&R RR R R R'R R&R RR R R RRR RR R RRR R RR RR R R RR RR RRR R R RRR R RRR R R RRR RR RRR RR RR R RRR R RRR R RR RR RRR RR RR RR RRR RR R RR RRR RR RR R RR R RR RR R RR R RR RR R RR RRR RRR RR R RRR R R+R*RRR R R)R R#R R"R RRR RR RR R RRR R RRR R RR R R R R RRR RRRR RR R R R RRR RR RR RR R R R R R RR R!R R RRR R RRR R R R RR R R R(R RRR R R RR RR R R RRR RRR R RR R RRRRR'R R RRRRRR R%RRRR$R&RR R'RRRR RRR&R RRR'R R RRRRRR R%RRRR$R&RR 3Pv7s>t(clogrotatesystemd-sysvcompatutf-881b8f8e2af7207de26c054fe74211933148275b262d8e8f06d09057275c615eb?7zXZ !t/o]"k%(fm?1 1N8[xOu( )+慳 ̕)/wd䘙hzݨsEد(~}]`sDlTGuAu`Gny@;VP>\_PANjꂓڈ%2-]ߩQ{P86`Ӌ0XØX<~@uzx;4[FRpκpT6ÍN woǦfVIje>cЪ󠓨ӄw5]`J#Q"ȼB*5Qe/ gg{owA+;HOω=a7%#"eT 6s?"k,/E? 7< Gj+X'F=GڑID67~*𡇹ZLSv|Bf"q0M DcRu$\>DaUw zB. ܄8E?u-={amL$ m$*tX 0 :Bķ ]u K@ny%:)4اKo|@Q;1;j7/X1k8[Su2 gܠ—͡ފ;unt3&h>)0jbxD'mF=(E@I&KQ-weUk/ˢ!4_twʏjsOHgmΑpy}i]% /w~|;'04j7o7,teeUHڀSƔAKʹ$ (]`;ReaOH>[-Y y2K}\:o) -K^xHuI.bj۶ų84e#F,d8ZFb{)Niqz@t3c`BҢ8"% ob: ?u3QU'j:oѐ[#/9WkvY]gw]IE3QJ,wUtI%9lSOiPmXeKч=WfKy&܌xc{+*S&t?O>a-U'O8j:y#nZd_ |M8=4mHUJXˠSHF;vr,Yjd6sX]Y׸_䙜ʺ~УE]-$jyQ=诶GjXL+]R ~ۯ@"u9~^5̥Kq(q4^%E<1_`Mt{VY=LԸIɸ~6[+}bf@yB hB.JD*8o˭~ '7ސ=)ىktb&}|9B.[M[n VEuAb~:닋Mq(na 05M(-#{ϡUMeg#::wNm)oAxIAf;DŽ^IhSqC| Z&$ܡjGY!yr/ŗ|%E/8}43~^A{` )l},˵ y.,a]/P\X.l Ae>zΌ|.64<`"65 ^>~su$Hx\6nѥyw7Sc$roeO[WV]B)ݙ(K?{K{Ԭ!'8ѻq:F\ɧ{ox}JjwRHh)pB){BCv䂮X4Kfgf CB(Y,74.0MM <$jv:3+1K4{}9{u#D1Z G2 &%ƛX0lx/qj} $QӞj)>y = -.[O@LO6c`F} g2&Sg1qW&.|/F0˭5w1XLq^?tt*+ڴhj1fbSC" aLP7Lls^? ȃpx7{lY_@MNec>~R'٥__ TETe?F0h/%JO@n3]LԜ[L3ffo~ {Opn[٘#mz/쎤]I߳ЍPsh*eZSJ kOMS|&>S$TM37oeCLZVQi?1V( +څ|=6O?xغ9,P m~KC-`ֺ֑,-H%ay8S_>KEȇcvDS2P.c@:EmPboL~/Qi "L-Hs>XÌRz D[4:bre{I7eJ7;-l8iR1x}Ьs-ІgCLrYfHpФ>n6'B`J<qCORDIV -} 4( =lK'aU!ޭ; SaJzkyz n`d|'}|PX9uVAP6)To&j+r-yK SX8&G ԐЃ/d劭OjR1Ε[ˆ\hv `.(i_Ng>r: OH,Js0q׎$!%WE ?-~/2ߢXϙ9@k& h S6+_|z–p k(U, B# UNwtq3`nd5F\Y(Y50kHjom-6O1!^Fq@=ګ7/gN Q&hPy{DvEe Nޔd0LulWh-;KMxO8mο`Gz9D 0L?? ߥ=CGk9)%vk'=~Z2R OF> R5|4"-nmxqOAshzǔ&1"EP!/e~/aQ#L'Lk~BBw簤Qd&4wY';ng|FK1N䣪'0Ycn2|skN,fÔ < ~-48L\1䲍"312U#M C$ EԼC?T_FBչw٩py$shHH->XXjڹ>|Z@굌\M(.y54= vGSέ4V'U~%-&9(BDno$pa=|T?\?J&7(jW9FC.$JH1Zp(?q&Kө>~.9Wz75 ;fybmT{fr;c-BdTq5㲯6DjωjɎs_ 2RОo}k KĠg͐7 ]aKޚh>w>LړY6hhm;a:^z5,+k5X @q9j*EZZy<<*GGqM G@?I^_9Md1p#sOT16SưDTZbŽ 'A*b=8 芅: cUmZ)l꧘> E-k, Jhqbp }5ZNU(gsl?+D;bwRqO+A0q`k?:(:Mף&<5^򋫭CN?Xr(> `H.W8}Lg u|˦ǜCo4#l@&פ!fŵdšbw3>5"Z;}mKrЬ\֘_A϶_*c)Ϧ:a5tatzRO2];XTnzvnpÎ7$a"l*Xw } cX|"״儧OON~5~31>BV 3f1-Ao (Sq9V)}uM@S(i&!C4ӭDv5Uk}Aab#2rLS:Q(/9*F':ߐ)7@Aԫ0Rlc6Y]` 5/? vT`Oú6Vmˬc68Laޔhos%bJ@k4|3|%^'Fh8u?2;;'6.bo%gLqpw|TgoNX[E%YKIlchBaERLAv8w 8cr~@C $ڊKv&v,xڪ=sW,%Av,v}5UQ*'d<i4yZp'&@6rMIq P5>V @<Ͱ=ّcPCZ}W+l-|ӍJ||^*ݍ߼X@V.Ir5sf[zں]V]k߹[y[CatZQfACK LXLXhC9' (pZ7{Oq5]@T#F: ӕ75/iv[NݲN혛4X3Uk=tKhJ{XDO'C땬&iIƖe3٩Ӝ>J.8pZjO-aӌ{F8؁}L|bC ?6*F!FY~!Dcf$:VmxF|ǰ:J\j 2a'7Oi2a^ V2G%iQkLyΡ%O9^уsRc4|"G;r .tSpM`~ezR]jqD 5GN%ĚE x&>+]1'?dsr.<ֽ|9b㥻݄#ΘEiB"Y &SԄ r:4BX矰;ܺ-{* a,<2]@am/S#jn`)srs,B!PnomH7Nebo-鳭x _Q pr3&Tɚdpm<*Y+qa x_qsF(+md rrW䞎E~{ߋCTQv[L9M : }k^o%G{1d`G2-n""~?̆DqFY;阗\Չ `;|P2kO9}>lp/=*'*zk_'-1uc($Rz#d͠2x"UM;o8Ó?\ s>bf=u6CEvEyVDf{RJRUYbWRABj؋oA,Qa"xxatC9"֪^}zkaz 蚥^ n wI-~, PTvNyx-pgL`HލFNehKq0#R #9`uKb[jo&OR%tmJXM>c\ %1\.8rc`/?˓#>0L[n5>5 ^u=L)4MaK>D#DI0/|U"RP'] _H.V31g*)ͭ6hDZxijleHGO Tn?t W[DK!L30Z9&̑@Z ߮|"ň;3KYH0pܦN*ky j-#ٜf &Mee^\̲kֆ g<| f}F`<0po'{gDѐGk0d,s*cٮdؓxMnLqZJ(J)&ӛ˭2'<*n!\,f72)lQq CL.[@û}džđmN+.EZ;Ͻv%>PCɰ".V __u5 '&2?| VT]g@#*A ãBS=?Ie3atwNJ1wOIlz5奧 ;=#C߂f ,1T4VS\{s91}5`F= zp퀼(.SPArvDN65"6u׎nk޸"d.h2AUykn;E%ڪSuqs?87mjy8Ĵ1Jӄ|.hNͬC`f/I,MS?_M=Ѹ{/B Z^Z4N;?}ƷRaXKy _A bIQ飆!6&U8'ؖ?~FG<6i Yb,Š#G&Vn<]sOS&Xv!k?A xd`c6Rf'u_C\|W h9L&5qbyHGoaqi@{RʠΦÝiܸe;>X?jvTz[@̳%+*r7T[> Ka% UK jUp'adXo&C4}_A;œVlH1ǍF>/]-)} 2."O[N4Ǡ\'PKEbw EII@n!Ur 0#5jEqYh33YZeW/.'-Q\B\Xm hNcⰲyLK4(CV:7-Mrp!2XT=W`lmSMVkz4Wטj%SlqZ9p824Sui`v$nP\! v>;Ξ5{xyI#G7a&ik8ȷ|aMt8xVU]SP ( Fd)ph"v5tF;u%lc~yO ґ2U$E:CVYdNu2Jve3Iz,QO>|j}ti-Fɪ#n DWm8emdqȟB? 7=h>bG&Y-7dݷ|`"SEٗ:a ueq P_Z`֋p{Ka"b6[( 9z[񲾑?|М:ßOpCVJnty*b0d9WRBmhNE;+O:XnYP߫ܖ(c/bI9hI%rW>tDBCrj"zh1RTt7uKL$hyjhq &5ltdHmj~7:y9dG/Rޣ7~z:H2kP.Y삎ݗ-#ݔRw꒽e^=DHAx8ebEpQ8a#p mX"_'<}06,Y))oj˸gby[S77xۖzO@qyGm T‚0bL^+Ƞ߳HuEZ#%Ych_e8 $ZW]5/ج")cikJQwe<~F+hNdy^Jd;'jֵ6 Ah΂D+`;KD}/AC^axS@g5wd4vZ5[a#I~3h 2͏2>#t6(kn,;QqYbo$NYjTte}?Th߯#ť׮U3kyt,K8dhU$Ci&2k6@_ID3$2؈OY 2>AFVA` gfcC{wYwrB\Q:rEߒфB +K*ؿx#ھZ4wEA+ l..Yr33q.1^F5 6Q𨇋xX{7Plkkh4føԕ.;_,}~TPZr\R̼@q?LR<b0ω>zO!F{bWfKt:P*xėz&c|_a@o )b``*>Tsm}řvW!ƨ ^ڸu& ;GAgDc} ~YuئNEab%ogH 2PjfOkwnǰV`p+DdZKrv eoDᤙ]vYe-wOFz #*vD . DA5hjшŌU^ i@iƫSz͋[GMi»nC`g=asf2DR$rQ "Ap0懰ޭ&b4@sz{hoYvQ0=8SsTNN oOȑ_A|>jBo{UnS'p ueG3uɰ0=N>ZB`*_y aJ9ѱE/JIK"0:PAʁ:A2 =׃Ioӌ `;PCX=05= ݧUwOE;p&MN8hd!(8nQq0ͽcM9{K>VW&gՄôJz6+ɹHBq˞ > jR?9"Ixr#+.cƨ/Yv!.^ 8 e5#>dirz@ߺ?{TP5;TIRro4HMA$l.-`!~fWmRJ,Xcqcjo zIDGu o ܕ[ۻ+ T%HRnjU"\_3g)PwS$7A> ; )aeIܐ`ax1["%vA356X g`iNVcTE7 zKX 8 ZҚİxy;WhRB^r t;KuSa)ˏ?2|E)n/{@/;|ZA^hT9856jawLlGu& @ qV%7*ڽUL/jRUMZ])ZV!\QFQk0Cj_p߱=gz6fg(m!K;Q/Ɵ b߄:*.2(R.hO/pt(麲HAn8GƵz};ܺRMy޳)H n|I,,n>bCXɼXd܎cB>H]<R'ΰsJ} TVPH[$=l ZfЕ\7`N0[A$/IJ< ?#9tnW,xZ3r5k?D`tXG6C^ilJ1c^ZJޭ{ldP' /| /dffsɖo(M 7uNHCQ<6 ߙyvXN *k=$o$,G^HUak#UƊu vL fAs~XxZB!?ieS?" B1'Gie롭 }T!h0_Οu> @L QylBOϝӨ˩t2 ]jد 7āO]ilHFIZi&*QVa^ A[3 5mxjnL'jt? a_@3`>CgUOeY:ˤOXH uF.OM4kTۇlM-[g"9H$>9S37D:~0Hp.9,HU"Ůn700ު9 ]o8_T{_'nPP%H8r mS:{@)S^XO*L:0Ԩ2p֔ڎeLM?w~f Һ#%o'7SST]vr SNlT= B0u}"-rJƲ27Vi҂;_(C+vxwOj}WO". |,4j ezG{\8eFwBO6o؍ɌlcAFֺXsW1ކg8Ut8˞x㍡¹ E5&̬L/僎g+~:{\5ъο~Ad =SqЄ#t:dP|qt]J,V}2=α{ޕ4?h~$ @zƩ \Upc@zR B>#4? *FRO0h f *eO`@C^B&)5J:QԵզ׺|c&3" )@dZt2AcZ^ctĈ(4 Y?2S5H-ا|nlm1x[{8chfz?nsi蒨GmtB=a'(K 7ą?Wh1G,meScO4^:o;9זu)pł[$ݨ/'ij[̀dDDRF,4 hѣow}߯ ,h9y>PkzOZM'LK#=CƑ,B-M=Ws+Ur"~{1k4;YiZ# U~2Ԭ5^نԻg2 mO1-itƪ9 3BPO!O_Ը3r~3sI 8ϴ!|m84#A03hHfbD]EpG!?.F"cg[ymި2rYU+"ZS2_4j;ٚrAYB9]SRQqD9!&E\1X*gNs7 ojx#`B%(dKoT?g D_ XCO2epCD-}|nϼŠT >m`7r⪙ L *zp,c|Y]qqPڰxʇ񵹏oo0o Q pKQKmwyn)ߍ!c~gb~~5ay$Y2rpZ=Z;tUgff&&gWlyunN ]ҴҴUPz-M((asK_Rn zi6"5HnaH/sCw,VѦ\{#a/wVKUst\Xck+]nhbh]n''VP{HtX/>?nY^$I`aMjLwQ)EU`ҁa`tqh('k0me{W U>OU85/>?JHUq]$m&Nd5/p=K~2xn!K Rק>rO p[aٶmwêWO>EWUV~]t&E6RS~)kLT 4\vH K>[u.I$ٳFv[}VtNvT#Xw)Dp3vng/ʼna+iKy>Am %Xߓ>u$V#wCp^PIݟ"e;1} Kй^Hd] j"m$}ѿOl 3[$S[?ԧ4۷?B5sN,niV2i?GO -8MLB}2GckO!+ճ9NVjd0?5.p $Dwyw Aa+'d=mX 0WV4g>&OHLjBӟǞONLR0yoK&hRI-7g' Ҁ`M>2_L[@HvvHJoYbaM\SB:CsfV%y >Rp3ٸ:Է בƉLTszζ(=G" .kyHrߨdqQT1L;+KJvB\>튶wxlͭο1 /@'dq+T$F3+aӅ"8 =fQ^Iܫt|GA^` &㚾 liC=;$m epkl+ $BsK՝tB+naB ^HfWEE_:ljBG5˚gi=!c95vmKN;:>`AF1" `hG^>pHpѻ5d}R9%+u#N(?=Ȳ d=B9Etϭ_̚1}ɁiHRVTh<CoZP̢e3v"s(hFwk1-R4v(8l.am̐Wz!i/2h g )*ARNU,|\lscPOBoF<_֗!6A-cxX,iM7S2#=G-,s4;I\qj b2l)wD1h- NJwf׭J"x-*0"eZ.":E,1zɊ5II.dʼn˰\џtQͳiZ[6EC̯)L4ވnjc J7uWFVΥk=sg 4" f>'7*CfUe!y!#og|?v)%Uh$.Iܸt)ԙ*0T^$?(LɾׅiNZ;+Sw (Wt[Ptiȍ8 @;En< y ̡ c]2~s`lpKbʟ(3O.R;)?K=ܥ-Hob& ﱘ2Zm$.cNz8pQuO`8 9qB,ܷd66vxň@-~Y86WC AI2,Ǽ,?RDuQ*2*܂ўl)%Z]^A g)bon^FʄwH x1l;ˇl 7藌`r `mDV8Iw]_]7S~\݇. \ D~F*v]6QYYP W}~K% qF)!_rV=]m, ՙû&ˢnsLY^ު_aRL$kgGhjо]COXfYeή$bU+?MK~j&h+OJ@b'+(IaVgy*EBR;wCńqmQ7/0ױޭRs`w7CQ*Ƙ#p7.{prNu`b˽(o\Gd@Z%z{z&8 nհ||w!9rn%ɞc^WMd"M5Bq+b^3#!{C쇚7ĠJ(/0:V/vyw7uIL4FsB5?u=b6kPG[UJYȝ,xnj4O*aXԫp=O2Ev;W% Aqs}&}+a`QQ{M/ |/5DFq7nb40//jI?t9# e{TkVxQ=7e~3ɒi&Vl2 U"pL߱z@5p?b9w LR6@"N}ظ(#CAKc\MRVUVt,bv1kH4E¶q4U_4sBO>4~z$UCx|".Nfr٣څQOӅk> ,9j+l:2cG>l]QܨQ-9EBURYT0c85;J lj"TQGTh<õXO\zᜣςt0[V?7_<"ʉq#*I2Ƈ5|4uC^y; :LLSly3C.9=t )=Ľ4׆ӛe{a2rk؁g8y,+ݐ+{ G|Oӥǡ)C sab29w o+;9F8lp|o%VOxP:`Q8~#;/3,jFj2O^{z:8}S-OCF7ue';Xx:<˘#]NQvH0tەJp,ڗ5{/L4_(i.ljAbѮV&@K}8cg"j)EĪIU,FnNk:\3>q xb'2nQ}1L5#\/ɔ2}!4ɘOGӄFe]duq-Ψ3?ZQPTDO9φ.3%W*"ȼs`~ύUi/L fӑ#aSe`IcLْf ahQ1[Էzގ'nO1D|/}Qȿ*5}M!/w]8)# L+R"Bka*6pcᑇڰ2ᮤ\2-iڙL:E,n1m+#AQ@$hq{FlwSO\|`+WE9|4v#iU* }S'؁ZzgBNԙ-ꟻt5$N gtv\W!xMuKC ,>Mv͎:C).ǸWDiGuD.:BoaJ{,iRA0HFE ()".hȏfY '>2YWMdA͐C4KzUv8km@RL9Oy`l>Txa_inQXagn0иC֎d/006<"ήWDF\ԫaw2L̞ﯢ`HJ|7(ؽ8ک§`&PiX`V ߙ'b:Tr £(۲/$Pg@m'|Һv2EnT\ŃLJ r_3i")>ʼn%y"4r` sN{w1hG%Wv*V=r 6Ac5~w":V!O6YMegF|ĵM]p 5 K6tN9*(6a|Es lC(0<7D2]ʬ"{D~~|7 D<z0 mr?]^Agz_닲x/fvA6c0`B#@uMGOy7'v gGpU43"}ƀ''[S a VߎV'%RZ8m<\)4GH2e>MGRDS;}n]Fv"G5g'g[@knwzt4_ uPmo=/.X+4ӳЌDKvw iLϜzwlq;x.EǛlv2{j#V9qK<;urpk @5'`Gu䣗ҰK;T}!>]%r!NH+/~$>wCEz桚Q*E@+qE %!%.^(U\Q_-[pؙjm$[Rćֆ{CDրYȑ;R2XI}pY[tON\w3BA=;g*h0D!Ax9{8XU xڏbх>Ii>[ky &4%"[MM8;6ld1m)ڨ8G(fMQi |*6g?#-u`ɯsNˣIdl4 F0=Cz^wtbjw; d_SiՔ]P |87klX @/6pJ?ϵB쓸&-#*sWA`ah:i|q|^ @Z" \/f ÕʡV,LJ*RaT䣨ZϙX涕 X!ũ&nBt//cG/S2UÏvcͫ6ȓВ1YzaG{ Cg> gЪzi )]塵̇Xkʲ, ɮv/>3L d&<|ԋI%qF,¾ԼB,dJlB2zEyT獵xFr\2^&([HaKyXX ޛxy`D_:lt_lGͺǠF{u`OC2;n=]E4` `-n5Y.iVN1Ŧ}+xPGbKdP؄`^g4kfM<*[F8?)QiT&IYo(V0< A%CfQk-yOA+*)m"3*\ݍ F'- ߛ('2Ŏ&Owf%pݦ}2h}ǫ}CiIoK826O|3kF@vo/O]CDtЬb]}%(7<ɮyHp >>%M-2FKwOP2\HU/M@=Zd{,wpnW՞jڤU-7O38W5c)ud'Y@֬RgzcV5rLtSs@p7BMG&ұ֜b@8m.%kSMoVn~jo>1PT!qk}_,;N6f#7'dV#*io+o+ϸmo}e&)&{k\Cv=NPIpLtKiDqW8ZhH,Fr| fŃ~gtP v;qldci5_LR]i_Esodf2ErV:TLTk!)6o=ϸMCsW6Dj>9)СynA= ;%)Ԭ^TMY\|c{eq]܉qZ@7m{KcqۓMh"^Όv}o~R陙 %4işF(5QZ^3n2匓 9ϝy[%qޥ#;]͚++j{lf0T:W~C·68=d-L+J೶7O(lXjD>pMcJŕY5w nncTgw?&%Y4MLy94)lƮʘqL%_y0(i1\qj|0 j9`[Qh koDurAC!]H_ h{6eƯݯ#DYeK/Fjh\yȡ„h09L E` (r)}?iG4V^DfcC;{64҄(]3бSfp7F\aaM7jT* ϞaG\m!F@^pXWEw~s fʎv](VdaGKkw7 YbzwfA# s~$fYPI\ټD`/4 Hp[`b7ctʍ[lAD\+EPfZ.kmlX \%tDM\wZ,R꛽=N˜A,TĻy͞nUܿ%z.OXDbADqmn{džJЕy/:zy)hQhUj]gTo#/ 1:^1| cmp)yg9kDt,Uv+`/7DHDJDoFĖ]·$ޡ:=p }h_ f}}xMUhP4#mL!@ԆLQzwWy]o -W"@Bc?*̊SPAr2g_g`eqb]"mD [D,x6N+Õ+(,q0"^$y"Nm) {11Emy6GX_7U2 oGHql>Șf -ҠcI4Y`^J#j_ÄgZE wâ~hMohϗςwM<9Pm?O57SCGNmfˣmjkۍ4yY]d6ls_hDyp! orCa""7A렯 4NR5U O'4-521 '_qA70Ϩr[օ4c}-Tr1HQLolѡw qc?{Js_yJt0ɜތR2 *N@0;"(>ոѡ`EZ`(lɤ)iۇE0`@t'`e#h=Pga9O`L**L5bESto[g9br⧎{+ "b!2cХq0-䧾UUID}p!} {5P(S&S=ρ'0+a܍q߱)m{x! Љ(~YQ;VO]CSan;LD[U)>A<t,o"-k#ߘWXD "?M"y{~Zl;^B6*MBT{JAG ߷2vo||Rɜ\ xD<~nsl*Iah|-7m\4_Jևÿy=POhhO|OѬq#϶/Ѧ)&VO=ګ&AٷZ\i:k,H 6݄*}X^ˮr@KB}IL'. nMWsi Gp)_&,@Md~3Mc[YM؍PUO;FM}eQ hl1oV"P6:fgκuʓ*cjVCAB@2 ^s &QDȴQ^$ĎcL@WL.8/Pp!#ea 8 FlG::U0S "3'#:#׳n!2Aŀ:ᮙޱeKEK6zb*Uvb~҄ ? @پM>]F4op ,_` pXaE wZbJTֆKzO3D[sS4(Eq,1˕ckfs zGRZH{'SNbJ:uj+WfPXðUW]UY6&M-*]1U5, $&,G %$TRn0#u~g_?]lL ;sy,億:@ |9{NyVBxv}Ĥvb ưtj "tBХK4T47> xx .Q6b+SVvnx9Qn5 zS{/SwQ@6H^ vo| Cװ. #qTᆵ$c_dd,X [(' Pã <9{:r d:QqqufӁZ:Y0Oi^/uƢjbJ6ox_{Ix=:mPl(PsQGW&^qr'Q[gOomZA苔mGOڂ xSV,3xOJO.3F0]5kg,b'}'Hf2;*R#]7lY կGg<6ߚ !dO>cʤ+kh=,n*S&:htilYmi !@P !`b3Yy2M̦d܏`Ԟ`tB˔ G"ýo$ #AքCσ4&Q1y[ݬlQ%r2LJdN3/jZi傈|87:'ẒQYt k1qѢQ`!j\,/ `_mdTɑ Wc qAl*,^c^)LNΚ}ۮN`E@;i 1R قxط㦪xEQr*rhNDZ^4p2 Mʐ)`k:]U@0>!oQT#C}-&{d ,kΑì";~ǃ~3syv.@r!3T^^"PN`?ش ^7KnB̾ K#G+14ҧmq =oCb#noWz{y 0*ڼVM0MU݉+=FC~P[& pW uUagۍlqedխlsڻϸmv4/ T4}c*yiBi<.B H({ǮAi,;5ӑZ2_g8 CܢDO4#t `E`f~1pORNW'g^; QYha$G&IV箭ëXX6F۪s3B;@bw)9n5U=7fi %f+w$*,ǬQa ҭg"D+H]I׭VH4k//GCQDC, ̓عnK΅\(\4siiL1U\v2u ,>\1n(M:;gHqUɥۈ"y`fB9v]*F>3_={CODa] '$gx39@dg" PAB%31?y@17}J\YNKc!ӵ}b*2k*ZI"sf|bW8e#K!+G̥'4j̼,ۚj? k3{w{تKB[;[E8wmu h^.B^ =)dW v)J:n7ݸP1\":Ci>gY0T.5{gʺ&~,ܬO6ܰ _}tSZb!Xm; iߨwhT` ^NeIg6 E ~!WX}w6T,*x~Zjx`Yxi> %` L,٧h@@bASSI9fx6LoScuD7<=,1s7O>Uɶ'a%{,:$A%@[m=ņisq'<@8!9 Ddcw`!?z-w{L'{I2@nw"^" ] v)^Ta@9f{`uJ 8wmgT/ WˠQCX?C\+crϠaks̨;z76Jj:} O&BvA'-mDYݣ>wt8uH4C2T Z- MFn1h"La7 I7UAZMr?})* NK yȖ~:UO?`m Bq5uCkK1 vkoS(,}[:՟jL,7:c0$k!`QNC=۷K5Ywu pf VO51կ~*sWu\\%{G#?Hq M LًMtUSP:H}gW' yU6r+4?轒TTC͡A'9=&; Yxgl0CSbziI`F9ņ!h T_R6B14w*肅i4! fr`an~tCp`?\F!Zݠ?_nRJ&՞p>kE/,2*}΅H^3%\RR{mhPZ}fr>Lpsjĝ L^w v#&$==|3!"PE~ŷ\520,4ԫoCɂA8ĉf.۩ۡoljxH?uLv\cl6U͏jODҰ'(h`{CiBOu(.,ntE m?7oH0^ʶ6FʁdR]@"qHKȋ!dC09 Ծl'Δ6FW,'ˀ̃h̵/PU NGLh互!_tBy?b|vXߌP8[LNeZ8 ~?wzL}i)ڼnFb} C>Pyn${0b#*];4@{#16.?BXO"3X6MLM,[TۚJ#k5XaOA@J "Pw#|,i69X4HC Slu83h_*zj%HͿ=% ߦlGE(}73qpj /-CjV w}uGbtlF=߰SRHNUjmȺ#=Śd]uwdL6݀Ml b Ȩz>$%zDWoge0.CCهH[JՊѐ jHr <0ݽ8.P90lÉ`6HvtO$ \]EiiŔ RF|I+b>XEsĭPYu u@Jc0P' [c>(*%Q5rf3I qFtɃ\MU?'K;X.8tҽ.ǘ 4 T))/EXtE恋#bfԏw`gdسʭ&#4D $wm!zboN>8_ 5/:4dw+goNN0mn75 $=B{}qmn8#r PetᩢΟ4&!mQ$vE1?NzAas`d^!=SZƍB "oĂ fc%2c;1H-l2P ׹%Aiuİ(1Ly"F[dqKy*jhH ߟKs6SVIYNfJg>o-D;&_x*ٻ9Bc$PWEZQp)IZJF BJ4<8\;*zx.1ca C[_A`\:9r, qVM/4|{}yo-Pp(!a/`{&pl>㲠7n?ȡ4 PTs*ϺbZCe3't3eteF P\%׍>W/TeMu?\T=D`':ulvE#+dF+}=2hA'7藇0S~96q QMəGvO 0.d5~;e)M¯aaϚFT@.) |O _6,?6!ZJQfZ8KEp4+~b;S%>hL" H|ƥ^,4QDބo R>sa"* h>\ZblK_a;6yg9zЩ2bK5^:mz;՟(%)Q!EzsH/.u4sd^%jȬؐz}nqMD}ڐSַ( Ra 3 M>׽֤(L<1.tՏrAmi{1a_)8ngp>{mrVrG%7 ep{g3(0݁E$À+-Ic@/BX? 'CiOC&K֛B 5HbY8W1' T ר3L'4J6Z46:V.gle8뚨Eǫ9# DMS7FV[۵qv- r,1o"\jGKbT>.AV, LI'k be uԴ-}&wA|3X֠ێuﲐ 7.BSwt@6r %TrlGo8}-&JArAsU [/ p Ǝ,Up7B tJg I~X*v'$j*.(R@(c>hp4ie2?bNKmQ> NL`Sѩ+@Pn39dV'wK729#{7x{֩v@m.;{]e)XsG({`ƼɰuR&, n/^lZ uO\s 1=nntOv?%n6 (M2rW, [-.Qv'%&Q0WD ;_bǥ H&Uå~v0j"PM}^O?5~GHIAaP.\Dn[d Let/zg=FɠoѺ&3gp\7ёv(_43N3?S^h %/t/Pn_yeo1/^l)Dg}~>s|mf.C69$du ~z"1ގw>.H|&A E,"uY+1w9rfRZldpPnlQ [g" [_,:uI qkb/pdaZI%ybT?}_H5uBn"n~ϹYƊ߰xAj(AVC,,}@k+*5@Zt⪗ᯛy֜x U:^F Y#xD%SdnE*̧,/er΢YXpgD+Wi:Vl Iq+j#26eݬ{Sﳡ(1+ezmZ*: )*0OO3{8 HȷAƼ ruiCpC;^yV!-C1Rr]j.ĭӚKt<̍Z6Cw}8)vOF#'Eҵ56OT,! `ݿgUmyTY:*.8:&~ޅUTt^ v}l2brLS, u dqxNU{ZAO/*aPa R`?|+R@ET-O Tڙ7vb&gI0!#LF~0j,:H/vxMXǩs1{(0Z;3?)|>!EB 𰤊Y38gp)Ln ؼ8.>VYǒnϠNu&_5l"d_$O(Ɉc_-[$Pա u'<`9sqlAe$gAp5s]N1$Fjxj4`HZ C%{! <=G#izx;±:+Jf10!?z#U8UM."[TXkk2vJpQǤ!y`>v M~]>)\rO}'#*b{aV?hVT2G0{)@Ut.`c@=hs^lrR4]t̝ǮAd;GO  ۙ;:J9 ރoxOb# mop=iN+G0%?/)EuPwEHgϚ锻Y6n cDw }!.{htvD: MZRBOg꬜xMF)(`""r%olzr5>'r5lt3Y62" :w)qz8I98O*dqiZ3xs F29DUa+=Gd]T5kЪәϔêg m)2~Ug, v`Me[O9=# wQl2֫og ] Jj"cŸ 1|'tf[8ݽ#ə$@v8>36<h^QG7np)2ݿϔYFj{[dӠ!F:;}Mh:yP%|qdWuJ gm+ݐ 'A:{yNŇn ?#4/ K]9EyIa9?qN\,S>~8o'`piuSlo҉+=zwW'RES8o8& "_\u{Tj^%"3ACRBH};C[XԊkO3zh"RSR+& +LcߎЪKGC-ћ]̳,޻qKh~֌&rT9ePX5< CEaF2BKi>85jP^0D@_Ee!QBa3P[3;"j(1῞TU_uiV M5-u6%B[EfF%RyasWD hAI.갴hIz{zeǴp;'[&EDu1k'`xq=!hOk3Nҽ9 6-Jr2GMO.E֊X|'nh2Rˑ8jOJq7xQFMƊ] ǽk5bPܻ³+Szq%@L,+x$Dm $&K“bj7YP(ƸW5&h>ٹ׌[F++keh7 \#-\ɺ +ɴm.n:3\#tkWpW5' tnr~10^e7uML-!~V({5oL8,<e51M1(_vO%OSeMxO;t–oتpȝ611?jkY=ca)eM! 2Eu v-[G皼/CArժ ~Rh,ҴƉ7߈7#Y:ͪ;}=Ȩ isDvٙ}k2M 6} PhAPJ:nL z}:Nm῁!LJ_O[WlƼ:omgpt;S HjezW0K FɞHCXI稞U^| ߯0ޗ;Dl85fG, RS B#AY>֬u٬ 1ņ[kFjY`һ;Ԕ, |(#xި8iR?Kg_d7##H U]004Uk(.t?*a_ =u]6ق|^pMwe2 2(RG٤7-]ȑ18AR%@$dYR&]eT^ʌ(<Gw}NomvA[hZLvzˁ8OWy:b]Skԧ~:r $PQXU3pcEcqr3@6k߅hD=| zDz@B'[ ϷYyUU|2,8luTY ʞa T 3kOg2Rl` ջJ&ZPݥ A@"۴% )H4\5q+477=La$5."G+(jmN5$z27Ͷ\y*>aZR+Rvʚ<-$#@`^ڿBq8+ztZ?ER e2ܡÈ]1hǑj},va\U#870 mCnxqx$Nki[$e_i~? Vmoky7J`/|j(Ta"rj%#_9ӭӫ6VX/;OxA)t4D0{ItCA…lAxEmv2mϴ߈f_ [U̐DpTYA礆k #P錍ox2.ǮynوŢq,Ш[⛥t&](n`tia Ot CBM8> P&?qH76t~ޭH?T=6eosZdem#4LqTdi7kh0s  ;ɍ9=+p%cXNz KY2[K±W^] 36 c5҃3iOsV[EUbMb(dvycrF,(y9C@?_KhY Yڄ!NGnX⑦F6] \ySɢ$'ܭ&7SXG)#,.bvn9~xAG*|ty))qǰk Xvn]䏝,܏%y>O!0 ϡPi)Cj2(rWxtlUnli9L.EMN;& ĺX|aI1(SJ(A2 /+h9mDS{FVfXorU_r0 jh n) >3삊PjHpĽ (u]X W I<+)W|lWB-&(HR*$A)џ3B[-T 𤶆}D}mjLkrNwuLwe) Wh+О2~eNxkej2IBc&~8{wg&}BbWy #)٦zPzHƄOR ![.ХLSj%IK8w5Zݞjn,Ew/JH5N8QEQ !d"Su0[dI|߮iFgw~,Z9^GjNȦ0q&]ՁI7>C4mZt{?4-z_}: Ww( 8) `C~ݎ-W7zڐ0D-0J0VPti(9{`W" >X: >yrsct0IFz%IBPeh%(0YpIU k:|O|ﶏ,h 8*u, # 5սSd/1bq4ܓ}l jZ qOTv턂yv7o jrKeu%t{258YC=){Xi>d٬. t6,I \ ]gD8%_TVr30b먆pZEM H4U: /ΊV_H.Ȥ\Zm3]_lo6lOW@˵Gd'QHMe.cC!UUhӺr;?ozⱟcjfS\d  qn9)WS5~7̿-;(˶92!b;Lzߺ)ڵ>_^k ,]Cy¡k;6(դQȅ VN`3,H^ en#+j/ZH4_,%ؑz,%0 BV̲%y]:1v= 甩PUIु̮g?tZF? kq0jyCn7'DD;iیZ]zQO7hYK57݅X W6 DV||}bn|jI [< NPUԑ΃">D7^&C`~30  =?}Y"ID %r9 Y K4g ^!&w]Y ]vVR.F;l |iݾDPU3w,YNOW| FH{/䭀*h".41wdz BTbu%(?VRQxI4OZZʫ+N™Hhŧty_Ay݃m*Kcى%]^,%5+\i쟆 dJ(} K%F8Ίv vIyN]bZ7 ^OO&KKڗM&$:xaĿ5c͠Oc%}]ȿve'7u!$\dC(mu!g7&zN5)O@W)+ =k}Mf9D5>Djju= C& ¢ (fp6iÚQ BGWHnQ[u9Bub+<6B&"ރ|\X$U5ۛ;5ZI jFY!֤p{͑df$I-ق,4sac#PaVy?#NũwUNFlw _{~j[`5$MWsDGe,|I{N\okMܨxCFf:(h6Q뽏=yIjc?:.j>섡dw`s-[թ#ԃ|t;f2z+7=1 > Ƌ(ǎ^9 RtWEBldDv}va=""!V劣ZSjfxԌv>l?\c5,l, -Po㙆 r8UvK:\4;^1-GAC-`I'EwI-!8Eјl-(u67H(;p$Ю簅=>S䌦R+WcӑTJ]2' &5}֩Q_oU JSV# `Kv^iI#h:X9U{&4 5e%v}pi|f]30ж~`,Fʒ'!4c^@ASo-})FK-M*Iʲox\_(i\*]\BRx)D{Ub~ZD]kgfɶy1V#MPbwis啕qDL˜=\.p}I䂳S-\~kPa)#h¸ͭ?HM楝Ό^o2$GS6r"c*9B],bo2m4O5o d;F?Zm&9^J6-1G UIԲ[i^XbL}ەD27ǹZg7rJXak 6lVpq)B0򶵾?gl MM-H>;ж}G --GRÖD~a#&П :-aJ)QQ,f֒+~֤> 3oDN\:Th3X]rߒ %>,axNRR}BEH%Y_ڃ 9tnF!Lq,̳rz '_'zeB:{M y6X<'A,}1樄d;3qf=J]3`ҬDMM/cNdⅯldFWQ RhG@ sAE׬d9PDUz;'¸>]"/q4_M>)>,+U//q@ycڏٍq 0Ƒï/{ ѯ49@($5#)D1K0,W4HwWWdҺ;HWC lX\4@dUz.wk:uqzH.9WcKvb?d6<|;khST\bܯC=ڲG2њ&%( hk@sg[5xvZ~u-[Y"绝WDJжPE"5}7 Ҡ ꘧y?澣ѐ.곚.CE m`^K)R&]rJ[ǿlGk'm@*$(<3 CALՎA^>손&o JFtn(oRжs"|S@*!绋(@j%`(;9GecD5>ctՍ E&+b)W֩?Kdv QRͬDc VNa,0G)2V#9 XvƠNRQAejl_"'Eɉb}~4I~Aʭ m;P>cx>S-)oe)Tr4DE2s+k|i,txKojzqKT:s@[jI,PDfLVt@TqBы3z8AV#:c6oh*g% Hms=BYA>gɚa1T3d"# &, MOX\.vNѫ^DsƔ3- Fs ٫ = y2̑ ֕1UL:s;[r$ 1:&7~6ƶK.Ѷ,crCfQ=Dj{'Fu&^LyTF,+g!vnv gIċLc&t RTpX_lKC!SQE|\EjwM5$c$OkKF2(<%u4-<"_0WkP }DHK~([\RSՒ[:ĞG$_ғ0WPH+aZNTaŤc+p{q5lyR8y5+16CSp@02鍇ES(Gȴ!uiСrV=I,_-=6z _+w6Q1bHb?m/5?&q#YiD=kLfzUӬH0]F4(CBJ>nYȕf,[QzF%1J-'M`uvd+dꖅB?m,- T I.=ܣ-ݛcqgrmCm&s*ҔGdT$ wCݪ76;<^Cp9񱮛)UԴ&漟q.jNge4XAf5s[iu_d"k Eȃq$'*5is+dy)Glc I""ثHzC ( fSn {VƣUZ;Y8vv~)Άvuj J; w.nq;Hzo7 E]qN^L]i)1^ԦD5;je@ƫ-3i1P)8,cj6-vד|M SM7µUBmZh h^: >.HK4<2α8dlw[R {14Iv8M4Ñ Uo7j_X%P +$J-nهF1$_7RGFM1 Z~jty/-v  >!qxrIP#Ă}z+QgF/N;SLk2l~=tNzR܅?.Zph8,@yJN=: !qV12ӾpG4wy{SՇ)F~}d-*؎a62Av+Ym"#hGDVQ }ݔ%IL %hw=ﾴ?VԹgFhgb#2W]*8eHɪ}GxA eH6fFt[aCyeYe-1^zi wЃmJN?>S'wd+~`FM|?&RM!]!>j\;MeI a/|C؛J;HVs{x*vmgΠϹ %o&NjƇ~*jXXc^mٖ8-џE#ssܲ+ g HPIQ+wוN:)bi$Sd}?kB_ΕdFZ:se.W{nCCXgV(E*t><Ż,UG_;BBJᴄ'w@,Ok?Iy|/8KNgYof|?۞y 4"YEi.{Qלּ@+؉P."j~C @!vxamM">α>hMAgÜyHd;/v23h[9|O^ oq˴ݪLH ݧYWs '@G^ӃlME lOCs(u#J:YRM\LQ9>mT}sekO;V}L'gkWPslo.jr.Y48]R%HQ k#1{ŋIcN-m .Њ #^a0 C_޶Y)j|>?p ۧ\5P$+r'5b$6ˆS(pG^՘!v_d$P?q2UpC{@eSse'ƚxSJvvk 뀃Ô+#EJ0\YY:mj3~bm8g2w@k=Caq<{jObl@|TN(yY̺E`Ĺ &$4,P)?55R LΧ #n;Z꽓g'o6D2C[ GMb^@x",|o19 8-s]5;ǪX)8Q:a慣|F;;9g`I8P2+АCTovƒȝ2'?M΁()G*BO4s`Y䓜|Z$oW.B^֣H˱ڙqH)1~gYJa`]=FЉ)ɗT= N@Rq}5&&ӄTKN.} ˲(b|3÷ BTDH174Je.Do %ƭg*J Mڽx, dc OAQ޲Y#2͹6_]([=G6%W АZH(oWS7m+ہeJ~ǢDqM]T|n1ea4L#bÑϠo)lЄ2cPBgVw1)p+Gc'/Ǔ׬Z6#x|(\h-mթ}<;x:x!fFf⊾4M%`[%W\{;f=ͧ~_A"=^2Y)*DJ *,;Hos8qVqy'5E.-3[#\uk'50{!#pu}W*b7d)GEu==/!=劉\`nYȺ$*0{H_Z285ѽ^hrnbcGۂ6EZ+HgК]z-##fq:b1ﰥ5%Rlz_D! g"*I?Cn@slU#OFwg*@mbM?^NX=1 D&f]J0>ԕĭu(,ƗKH[oO}y(ZhՀdc9?7B13.ꚳKLq !H<3BP-~P \, ?S*`#To]Vd;= *C^$fnZ)^R 4'+'&o7viS$I7>]@Ce|4yT}lT'% 0!gܛJy#}% x {ID '(Eڇ! 7iIssH|}` C!¿ 8Tsh[sC5cm1Z>Yi~Wl߶AiGí/$4T:C9b:t2+߯+_nP*NϬ'))d`HB_pD}O[VXRcky31n|nSm!{i>YUx-iq^L*uPvаTX_ccE';)bdFIZTnV'e@@NHf=K 0܄AqJ[pJ}TuϪ3-̝V;'H%W ynZ/ڐˬPK?p{g?]BtFM=wLxK*j( )}&LVLT3C`M)7 B!>@А Y#mi(aI Ӥ9aC(*@zQrlLvNj]u&[:]ᎤӋBxջ&ϑ*f+KPƒӮz# fCy X[4i%>C6<Èx;V;Gu<P _|n)\${C@6l_(iJ+6"9gGIf5~pT2iVP $|GKyŇ#"*k2łhn: 8~b\8{ pR%eǼ ȕS I/7*xK=gw|BF?!e|>Eg$X4+xb+<<`ǎk_ΣhU ]^YEn!YPgB4OjR7 fs~$xxsYrkc3h> JsxZ8BⓅ~T^">4YJPE& \isTE]Xhi7+/vD9W@Qc> FAmV ƒŢ<6|]ݾr/0鞐mg`R2¬*m0rV(]!psÊ.;Ln%%|G"|J[&/g{n3iBbm1.jqzez9H ZC,GuǨ??Dp&;qԠx+" bϮg7gʹ-B9K̗< SGJK.H>grN]P=_@iZ5X`RgѤzNPMm"{&i}m9m*ioB@e-G3E5m1l':jp4lV7 3*DV. \vCTMjd?;M\FZu6- V$Fy90Y^dJoid 6۾N-eBw,A .R읇13Eׯu0NlbOђJd[LݒOebMo. 5vm>) p} ZJr9`ı %u -$J`&puy^Űn |NjArɀɕ4e"svYIDŽ q ޖws4BwvX/^}/#MJMn:o 6Arh7չ%%o(faV\6Ⱦ`g #tƚм!I 9הll$z;O[3%N7Ȫ RNuY|J vlj4qū7J&9&, zaA83Ivr!zk,SeDEõQ"Nq S:=-r5W[{6}^2y4A3j]'ӞBN5urz;4HG:8z^&HZSp4Vl "{%䋾y)f+$f{„ FqpqcM/|_,Svbz&Ye{#MnFn 85xjKlouXIY6([Y֛؊!'SK2|c۝ߤ 6Q "t%#*!  (O*i(]\L{W7~Kt^ OErLƟ7gjPah޽H#v^/?BKC)5`By2H30Hc~۸ٮ,]Z^$v@Kkcaru{v׸晍* n-wO03/kQ^09͎}cD%<&1F,o=igNʮL~j)-$ּ=c`jI٘Y5"7Č}^vi^[Z 8Nݗ+4+hTM9ybB@c_]X-TŻAKbY]zA%}]v䛣)L6qJ7z'' )唍$&8\Pv7S$,-`ZR$"FB":m+679,KsoSfsmIGF9 WHcs?F6q4^$L5=&^1m W`b2)gOE)UIvwfZQ[@XM3SyA1vK$sX `ؿbafT뤂`HD(6D0M[:jŧBXxIaT5؁H*ud;+(L1d >9aJ9=ŠtA+ܭdv bیBL᮸k#YOd}gGi۽!|\}C q1òGqԠMehu$۬f~>@hm]Op}+ +Cwpc:bnKhU_\n':"gecw_y %.-6D@[K2@$va1y݄͢0eV&4\: X/t4e:pGm7p^=Gw'wgэr>:DG=-F(>ۢuяNZQojb-[%'m ٲ$I56liѩc"?[]?:%~j6[VX+;*>!rڭeXkP#uq V"y #"Yg2 t14>ݟ 6b`[hqvUVC56i-5JTxR=U̥X JW/¦DT0tVk\ L9>Ê$J2wRY9]-)5ȐIO|!ju aXn7e}ԤSW|[o:ѣtxaV7jK1 C<6 Ɉ`db[]AZѐ X)0ͶL; hNF4Y όD7vX+dբjS5A;gD ܛpX\c'a@^)qq2 x[e&|:_(DlLhŃ.P]|ȆD Kϲc%cdeRAN\,5TכONAڨI wv8XFAPK(O2MGިE|N3F5W&wA^͍[e70jL@cn|A#\+~7 [-9B)U^g_SQ!/N@Xo.La/hjWgF&ž:)Wzhb2L\D[&u옘!\s[`2+vC._[|~N|Ja 3wNQb_ }Jyn*s̄jBP8. ӈ ÆIL^1_x~gm%=(`g_VpS9XS͋|b́Q,p^\av!f_ty+f,}jg*TrXW2&ZDykP/uu=1uqiՏTI),(Jf|y ,7OGˮ c+y@KN/̧es/Oߨږ] (&*G>$Ouk2Շ_V PjU]iZJNʺiht)|qQ6}C\OֲjqiXhL1U#g a]:(KBVn@gѶ4kW{R~$(99IAd x~2 U\Y .( :vّ|Lǀ!|OtD`/|"Sݼ!b7_59d"4+{oa)YmoY ףZ2#-N@a ;TX?Ԯp820Ӝ$ -|mY!n?rh8I6EDP@5me/v=/Tcۢ1~坢gXcY$O2sKBLnlYzǂE QX2i By;Lm!Rp}QD[&sgy7E+ CjUۛlnй4`*> Qd?N*д4HndA sHA4%nLo>|f5,cWO2([.M+l>Q-zt9|"}`-dS[O㦔eboMe܇v˂PRNG%٣5Z6 (Ëq>KSstßXA(Rwꣻ7Em)6?q.iQ?  ǥ&Xq. K/Z{ܶVqib_D:Z4P&H=@{J1ֻ++`WL 1Oc p eqP(~ib#;UdcϏ/z񛻭5teCoIUal@T“!f0LͨCSD&Ԣ֚LDpzLPw=6uDdYrks4_ZR.r:_AW xR%a:Ďww6nvQ7Z x(>L˒0Q=cJA}(xoH -=.( D͞[c2mVpʃ^KqxGI7r!@Vra*cXs|vU\Q\ gC3Ov1[v[s?Ϧ%kK 2 멛P1-l٪dX7u R757,ZOsn (Lsx&](P1EVՒ9TaUǀ$lO6kMS)94]5t61.)ywjH+ ;y!ԒMoxpzF(S@::bKi,^cx!d1\gFɹVHx "F)ۚz5ZcP@!|jB+ϴW32 w_}C>"S?w_Jv.Wf5m8 Qn=3k-jb'<'ɍfjjxy0dBm9Q 6/L ?bўbJː_;+o}XBtDO8?zqG@pU$O<5LkW*(0ְ)BF*t(i˥X}Guavx-sHn<5$X6oAS,30RF!%X}Rč>R:FbzMMrw&y6Gq̽g$AɎ2Wx4e[uSP4 P ͽ@W'k/jIyNbB0!{mR6cWoiW t,.n8]F2X-8"^ őY\I,' 9j^HX1OGMmdMSUR'E֛Xv E%UdTY &?gD/P:8A6\T>3PH$IcYՂը\1̫"=e,8bq^)D`QGb$^-2OWo/svӔUH0sYf#\vLDv^pKOϒnIϛd4$mܷwAiYsA=*z;'J7kVLЕX5Jz]Nk\ UV,%12PhSu-HW7d21X8PGޅe\aFP@R_r[f`j; X kAwJҖѯhDX܃ӫrFH aoRc ^˄ eI| VB2ν T4bm+S!(%U5)r-?[[QMX<:RWC_=$~ோ[V4[' j8c,Z|x IQu}(S $ 9)RZZQ)e~{7"S\q1:Ф+(-Wur v |ܮJG^'vB1` Sʸ0fI ey-P:K7cq)01!\=rruoUOE5ҺnKԻIYuc:AZ0Àid[ $ֹt?U"--ry݋p)YIUc[2 /\ʼBhkOo>a,[#eiE5_'5RW^yU7Iv1}ݬOSHlwP.*3dq Ujj HyXShzK$M$4AAVן~/ZlBQB*depܩ*@mEheF .}jD⭬̸Ň+q8M_F&& t)-Df.hϤQ2yf8ɾIQ pתAxՌ#!k'_h Zt6%[nՀs7g`1.ul` `3D05Nm4OV3M![>J/hop֨+OjtCB/ЉW4~Ձ{0 8s4y`_j:c{kjhrw-Qb f ukNZ(4f>z҆#o N'~X1K^@$T_͠ w3kǂܚIe;<)*N^& ;f|u7 ߧD(xz0:>KfBsv~$"kNboA_+Ҽe@+'R\RPI3Ԛƃݦ7׈(if{j8~G@w#]^Qel'vPys˫N^{,-q#ǀ_䠠5JF} m\/x*Tr*z]6 oԿg-#eN&. jEKJvoV %&f&̰B^NH=%.f&$>$JY D4qk8Kdx7 6{:{:>!#%K%<}ŢݹߦtK@-|/8aia{> SIJ\0WP|sz/Q`zV:~*_*xW+wQCZh>8L # VwG|5nIxc..J5,i!2m mP+&t@S3BiNޯi b D4d=\u0*$ l3h}ien蓻):;DQ#_Z:] a~x4 MӤ-eC=Q6WAgݖ]HBLҰu@O +;w+/^*&((~ V4M3*ٶy!=2mڗ898k! 'C`>̬q2U?ʨ*/y]?#AšJPxX@V9Lb8]#65-87XgV99^ l_klo }njѩ!!7|<_;l/S:svV6>|M.-9!{䉎P<fi@ RTG4oC-݀s.fcw'X#:/ҴC>Zzg{\ʻY H#vpKݲZ=}}+G`"m& mGH@!>Q_8 EH_J|"vHy%Dڞd.-F}dxN?m9e#n 0qWT߿U '}rTP}VR@.3pU2:mV:V?\b 3/2J泂:ANCx [:9vrTIWf"X N5{!O-E?[ypjѫw}o8/cnj[tH e{cʸBuLyy8NYvI2rLÝ^e =52'JU>二A5hkĽ\Jo:PushܪQ-ۅb< +rwtѣKqvm͸UeR,2nA]|ei6oa#F36кt{OuTm\]TLE 3j5ߊ99&δ/Etxs;z y-߄Gj_!to"Nbǘ`X'B&7Xɶ;܎TwҴ&(,I^ʘIwɳ\qtL~h &bu7]_Z KyeVɪs5&82wY=d 3AjhB,W_?8`k6斲9 "=eTu0 vg%x4+C=[?pL7!+`~[3+zyT,-gS=;v,pD/"hy:R9hH(oѼDv3D񷑊>?z/!QS atͶn3;9ym/$+*!3R8gMdFNO|ֲ pKG r|RoiM:ڰdG;R۠P7NmXRB&~ؿ w {sQz_Ct47^77Zmvb!fC:+ȪP~wҾ0<,yJKo~e 5)SbL]D FrXP\99($f !t|;4Q6vR3&]}l2<%-琖׎EִʀԋMμW7P<JKUv?̯)鿽ج5o3睟m@~L7F}Q:OI$.h]eH H)l魛(>FyVſXByP]dy[ :iQf̑Jf_Pݟ|!5^ C+wڂ(F@ǦoKWΛb -(xMiKTPžN]i,.tf޲x+ 16ݵтS 6_,1…MD6ÖF b9Zgb&;,ܭn\̋@f= M+j3أr-ݜaT.2QJ.K`aQ{Y Ov N,! tvP㚌.ǃJ$}Ɉ29(qMGR? 9B&BPHEXa-M3zD&4"9X qYptR0;nՍ@(Zd-A? FBt>=X( )E8m`3,ZnLTWʭ ՘œ<2A2j7=t`ж/8lqm (Rs`n=JIKs SUic~fZelV|UMf>>ʎ%uds`e u^ ,ҙ ale?XY% WDĭ+Sh\NnU@mV;}0:]F*ęK9S i(ў?26Y%O=9Ao\yfz-Cv3ٟxmp.sno4V$IBK,,}@g ܴ9Ҁ }-j.Wm)::7 .:?Gg7{NzÝ<ZtQi{e [jz)Y 9$ v /GEEF!~"t\@d" zt-$K77ZZz N"gPwK&:-6Fr,17sKI>=f/Mu-tk恝fP,=6VFX9cC/zVWpRS`L} e2f^BQJHg#wإ̳DE,F&/:Os, UkW YVuO%eF,* Bla/qz8`x P9 M޽@{:L["bQ:3?(ea,5 co"f늿^2~g\Ξ;mEGߓbσ+q}`  8}:VZSGto P#v%?/'L.Hm\`bQ3sYK)d ",l+m#r_WtTgRRDA|]ХS7_f ^&Җ*9f}ޟ@J0*>V8GRanj4`r*ttTûw|̨29 ԡO&䨘'.Em=$H2T{ v;K%h[\4N7ÐOIQ#ʰhjeƨsh+cS^~kLD]M A  cJ⼐u!oXI;oyLN^Cvx'ȅ䇧 y,7J /] ۂA_ L(KOҟVV\죈 DE*lGeC,vv 4>6FFˆYPVf9@UAƩA&G#yA/)gx/]l Z.(JkPomS fQSy[/?:a%.$\ HP -Pv^ׄ+fxH?#`?7ׁKo:oX}x~GVMZIQtk׵D. ̭u-K%&+}^ -}BY<@sObžakKmΰIu&m0؋64d9_tTB$1( sa`dJ YvJCn|1a (k3yt:3H*f6c{PW oJVpf,Faz&]lџaumLB@4meU5x!l? 'o^K|h쌝t68td"&KNfCjdqQĹu ~AI's y:e b5XS/@ $;m_Ϟ"yҪD`H[TV"N a#oZiiB'j(]KQ [UZ9U3g{# y4W8*ѻ2kn4)yGgju6:&zs0L6I15ڲpTRῸlV_j^‚w>wZ@"c(Z,Vl> fFieW'Yl1$m, l:Bb 9Cr-U'L13J"b]JX(tqAI- z8}G0tjnj5)Z=LJ9U'6V\ ܑ-pD)'VV=NaxkA]zjEAQOnv! bwK ެ:.2 4`EAdcJJ% rKn EHa)BXO|iPuN*OHQD@ϒBKp!?Vv8֕ϭXȤFe?*"^Lv% DĄsYiZV n.ś:8zb;Ke*O 9PRƗj,JϿ= ϕfm.0oڊ10^8rTbKjP;etď x E<4_! 4E VQh1A8@7ql?jA/XKެq_JN{W'HfKϼy:BW.b!0*@ O< KXZ  >/P|=q{PTr A *()B{zsxAu,hZ4wsň) 8"Ҙ[:.;r{"J<|-aQW|^_z"]va bn/VI~"xd3ot9る3le>6øsDŧ@? SgN9n׫?bugӹ$22_ b9W*1q={!q#'P=I~bΈP䊦OO<.DE@,ܗO޿}NTH"U0I0H$!7*+Je:ܑ!q3_gëłdέ܂aXc&!2{1X6.VpMhw{4fNJM-_ Ĉ4W[TcGctk!;ʊ+(7Us<.V ˩OydR˫+K$^2 ;hydV\հ}, }+9tQԅ6WAuPy/ ) d2iÚG6SgR|7>+UFn4Q}Bǫl+WeW2I2c@S`^ "{ 9 £ۋ'np%2` !G=jql/28zL0@y"R"Qz{(;)6_I=:7`|S P!5[@o< ncg-jcQn7%捳>N4=H+ jh쪧;t(|TQ{o9$ZZpHDL.?GK5hot;Ȓ&z>-MG[t*ߗ+zilbMa ǔz +`&=v*hM?2ǗuwПIvG/eFeF#T,H&_k$MƐϋ@Gn['%v[z}S>|ݍ5έ֎ܴizӕoJ L0I2(mGsslh;6-յ ngV*KS|I6@`D1PNbgMxmwK3AJopi=a%8BHr6-ODakN>?QP *;?ΐto-\9#Cvנ|cmk'_c-c@=` T0~+R YagGN0\` ogbU&yl<\53TH lZEg,ƴı;=&A?HHkE`6AJH:z"߃lK. };SBmG&{OOɮ{)EGvgP_d$yײxq 0^r?p%قek.;qsH ԧw*5'1]?3o Ue;Lv@]`OX"Bii.gF_v6-\@Ӏt*$1DK+\Wv#K 6؀ײ5#Z RTӓ}2bvZ˥DT"s+[ hm-|}47Cmm!16WV\#LM‹d:'U6ar8jm7"ѽWB¤&P0L8 IzTlHnCH7X:UD;Nܹa*s@ 2B8ߊ\q+'fxc4cx3Xqv)f0 F/$;, bHz޼n3L$=>%Fߠ94iy5!deK>ow&ԅ1(ơh>S0N"̑myNyЁ\+DS{78Mud:++LtN2rJxٗcwl' \L7Q?k91D q Q R׾ ( ufzSb8|ݥG z&!L74~Hqo(Yf57iH0NőV}h tǖ)Q>yKw , S}7~ x u1w[e?3R4@rPI}ťwʦ,jK2+gK1Zz z R/YWf`^Nud] V](wh G^N2 䵢}.\(#-B{jK҆p>5 mI`,8[6byQ:4ܣ.~4Ǧ@ ,J@iS򵭒bT!zXCþL z4ACx=4_ʫbSRͰVV6>RsD";FH"ᵓEn慯.lr t\g^í‚.15ʝ8Y3R:񹑲 Д[Z5=|o TS*;Ѓɿ>_("nt8wk2Q➔ېR-v[T;U/Vi -BDlwDٳZ-SbvkjmyУu/2|<GχoK a8vԶNCocyZ6uڡszYI9) 𛯽* Ӛ_>7ʸUjlܲ09׀??DDS]n?l pĒe Gf^4͊e]_=BFw,$(7.bq[xP{7>zCUqc%1⥬zKt}f^;]'7Na:@`kب+uΡd/XXɍ8 vW3Uz7dbl!*p&jZPIڵ:Og»O\ϲp54$<qV/}Wf{ZԠdv&0foJ̵0V2ënu^*I5ꠁ8jJf. כJ2h) u|H>KklAJ1ҼclȈE;*9I6* Vȅ0: l]wD C0fC5"+a)!1sIx/}StGMV:D3[5+BM&9Qa0Q<$w5<3Һ(e%)i9eXܳS!d3n lZ-jˎm.eFsgxnh/e~"CcJV 3!pz)\jV@n |?nibXi0m,ÇJ, ^d$&`oUI 􇈦'/37s@ڤ A$[0i֥!^R>(s ٝ'bտMpn~<N`2ͱNV'ױNs:b0$ ft{$k5j&MM.,0 LQ_oh8mi6EM1V^:l-#,MHk܏X0Hv QGWOƦŀ5'cKxؤs^PE"Wj~dbzV(Q7*˶^K p.0.3pv{Cr)dZ_@& 0|X~) rΥyi4WR!U-\CRظG Nk`&5'0B;|!c'KDM <VW=5ju9ґI4#/dM%6Th$)w֋bT%q7֫XqGf/zב`:PnC-+,K \7&#pnuC@ߛ}UǕ bZlV8  kɮً$TK$P>xׄ;: 7Kc [=6$LSR |/:~_MzhD}aʃ@;'to쿙e!O %/O$E*, 'hH ]su=Qw,T0Y.V7~QF9Xi<J"QA >vt"k/~!Dꎡg\0LEV,lrIk!<|܊4?9t1,[jL{~]~?1N&/p᳻Oā YGszDlH@ߖ#8 ptCs 1WE {",E}H6Հ"].4M X/Eny=Alپ%8c!UAqsj5ԡ|l8V }xNæ޴'xE%}Ƀ{EY_cbXW}yt Hΰ3f?_Ne* ԑo3+DeK zÀnX36ˢ+(+gܷB'j|`}9G@dWrw=ʂhчP}@W Q7h`m&(!;'|Uk-iFpǺ7u<]yibYn{Qa0U襞,“HqZ2A;>~9hȘN0IBfxnw'd/idC '׋:S:wk<#ELeH$U(D#A uTb)2ZMom/zFIگ!eϨд944gP7]'UenQ`,Y7^ӡ{Y%L ݐO ,Q`@+)[#zϛ.V)}j~=f_Bo߷qS1 B1R\jpd gMc(َݭjap aDqۂ1஭ ˭a塄,5ű3͝f5drjvQL˓)iԸhƇ\ r\_ԁH!^n{!cG h44K m**[C@ԍYLpz렟cc&[ޞ;޳,LjxEܜDBC{1\7,A tɣɺ?}z#-0ŋܬ]HRH~3[`sIPK B/EaܽlKwrd_ U"2ȱǒ&!)˲|`Au \I!2 Y}%$~}`+O4-uΪUX͊idiYGUÁ6FгQb@EKщp#w.X+2*Sv@+ `L(RA(< =1(FΦ7;D|I-rdMǺ_m_؎R$ #MOpܗ ZRï&=⺪qa3K0Rfm{6?eVg KaQ ZC֝U ղNdf0X':A}Z.ΦEE>T CfCƐG -e4%òR3eF]u4h,wz' 8WWmYKUνOmvs`|w6 ؚHF<叼S 7ߝL(M(9go:z2fוP/,oD2m+LaBꥳn`enA@jQK¬BsܤBl -'闹.~$0aoϓ ܪbjQx~ٝ)N쟘XvkU([3-"5r)g YFIÎHlLdN9^'=&3{M>/O5C wp֋$$%:68E>iڼN^ Y>Myw_"S܈ yGQ|q_M`+ C}vOIoI&4޸c_R/dCktdQ[N%k47x/69bɷ E2(,z EGcJbL&SWK3IZ7^I(uF? #nbVR ,מy^1/HBg>YLz"%gy-/^zw|t&q3>+~~M8r:8r&P7yca xXӰ4c+zWkžQ/&>f ^a2rۋ"vǞ!XlܢhTJjv?oG`)' {#AIb^FwYJx:4 "cK$ ڦ?oE~Cssƻ,ֻ6dr'SauDXRq:>l]_r@ ݱ"Ll4޼Vݮ.UYUHi1]-R:"_Q.s_-9Y{ל j"k.ˌ)/o;?fDRaHb<]I|)s[*|>%L/MnG=h Y͕DWJ`i] 2'7Xzp);;hOOu4򊡻ԟ= RQAuqDt͊,A":E2fEGnL!g{A,IS!VJr&ymP v5H\V[t$| =kٟۨ9w:JJsR$M$P e&י WX)3 .9ߴyU#TRRRH]1#]z=ܵ%wM0$W^;9ca`v -@U@e^i= f'Z&tV_V{(JjI"NT<$aL?h&BaRnE `_*.;A<&.UxiKgGx V>?0O6 :#Ɔx`N4)l Ŷx6 9&y`#\&M6׿X5H6N!KC/qGDSA؏aNvJDbnk2QwK-6A=A8>Q`~%`G '-F@X!ݒÍx~0zvo[bt}lC)&Ea$WWV~Q=0q.%6*l []G, < JS8c<Ffa`]] k%/Qwtd @u ۟^4f{u[%ŠSV j?:y?|v}| v8~Y?+nV\Ɇ+oazSr`/D쵪Hφg49)MuJhF٥6?g#p>l)P*1@Zau=>A-k7\NԗY8ܞ̱H,O/׋ []l!ݛ{W4j@~I-qs^4?>-]be̘J(L^Sf-+ Ǝ[#K> I ̕MpTzJf\"#xKka "[(ԆԀ;k^Q"ɕ=Pu圆K,3 'v_ؖxgeGknH%'ɖ tTq0sri>=8T2E9_@6#SۯG + } ;S  (('qW-َ]x] Lu _zR%/jJ#v#ZJ܍-ÙcM]H}+7?D$s994t$i>śP_Z͒-Mp86YJ|Dz| iZ{sdwĎھKQՋ#[oiQP,m9\QX;qS>Zs7{|%:#aXD)aɴK@١bьW*mڽ>lhX{]K!oӥ&.p߿ʣSDe/Dt}I2nE*@s,Z1^a;V"0;ډf ȳ" i-RݓWzx 3G38;^ aF v4EMbv's*\%uuĶ?zwMW<0g} ߠ |TTM5Y@RlD  i'Yh+. TE1]@Mu]&j#+ ^/=gK`nL.̰P-\`>2q'D;vHbYXkT$B^H_TERTB Wg) U4rN[ESA}-׋# eBQzN6g~g(Doyt t~TT`}׼ 7ۥ6Gs:_t|(kj()D}z"lZc_[S NM: w/C>QGۃ1Sh짅HE74[RNAdxgx姿gq>02*{>,sL/oej- ;ڤ{7yVf%isP.P|쬖i :pl#%r9p.j$o4Y^iyVf03[ZXp(^]T\(McHH *3hţ>#9xyP:IQvu|vN !sq^/&'{mvg8d]簱\g| Iω%~}UV$/ Gzjh<K&-'LM:\mX~E5X\vұb>j@w^vйt4?yhXYz|>vy''ߒڗݐh|ЎzxHrg`0^Տd3Tp]F]0V>n`x4Q j@2@a:9pj?rV$+*H9_ Up-*Lm"iC$J, y7$3Ƿ)ڙ$X{R6ٴ]@ofoM0QUo*q꾍,E R6u"/c&'v*'Я 2zUۀRْiȜx=Gd~9y Y7ݤ ;梘߿ ΠW@|l|PGEC!h%T%h[?j]wB˞|vO?gr>P_Y؈E Zʠg}HE|u. D-)b/ B.4# 75+)$Zײnb[tXӲ+Nh{ǫb1&FV,BcC7mᴷ\0-{xYC ivjū)7@_Kx3ԭ]KD5m"qmoJ'%;C ^>u\Dba*^!tl7Tjgtzg?_&jKP&z(0 Ѓh>e}ӆ9/-sJÍEAvK:qajz' &V+h]rߎܠ0>plOKE呮Mb4j7MzIy.E怤+\-J@$[".t;+l]ޝ^gfNI+>̦ԟD3/d*Ji.S :YGy߫8Z?9)hƹ?M*mJ:`75q2!!W"CQA$&Y68EX I"ǵkF+m0G~gv :M%"R~Kv0r.ӕL"W`%Gx[ߊyp1(z󈸛,.x 6 z&aK V#R]r:Ŷ7jFa ,> Ϝo&(6){؆dȈ)O!^`!gpV$5_%%v9LlpKzgZj`u"3?!+oA\R:OfMj2NlK8%"khWg Ag]c|ד og H'vg${|"w)p@M v:B@NԾDڕoX-@&giLK։N`n`3i"RBzR e׺#s#A. ]׽,Hy !\&kmiS/(Q2@c28CjhfJ,Gr= s5Q .e-@pVAŤY,aĪo?<}򳬼xr;E% JŸ⪊ݝ_Qtny1=MC_2ժfOIZ&~RqprlVl*/sߖu4>a$VnHvp.dǰ^6^@ %$ʟXx,XI2~\s8.)jX 5 5Tdm4Rƚ(zm˧A=#K;{v*bCZ32Lq< (r81(Cʐ@;nl lbi O@ ) UxA@!o$b/l[KYoeKjnݎ1B*O\Fl=ёc2-]$$N'Mj%xMZ-lTNYMʪxTmឈ8@, ODUq)"$|a*]xɊ^v:kyT>⃀kAvHғlTTυ#,lIdžTLUEvy&]f?`TS JAw_lxmK8IrEMa -Mg2nhdI4+.Rz yHzEÚ=Wy%WƜ!TO?o ୤ɽ]JWjɠSk\̷z%Q6º*Lm _p2w  `ךTeoK)*ͻLeѡ ~f lәg<;j}V('½_Bi `$)buA95 (&r׵aqzZi+`g" ):wx5\e>@>vgW<$[| U?YƬ%RZ:B UgpjQ0GB m[BHq Hg):&lPf u¯fz]:dGh~ F .t@OU(vA'IKʻv+#G37'k B1L}@OT88O|05ece&1t~۟ f*eٞMb6]Y36V[))B_⾬]Yo8NFT5)ul}Q#8ʹV;tIl9u)Keo\vP%-W0UP*F&#g-z<2?]ۮXJzeG(֕Os4qUn,%a_q8@ZumU:=?R$\e@ͺ0 qv wd[7:{@S/8(jB3c,j3~}3B5ˆzYzG\xapkꠊvcQ%C&ɮGNB/]:1Pc)-IAOgśhǦ=R6iC|(KU CM< i NNZ2Eɤnyeuy:9,ֆ^!X\jA~ub2~ s,pw 2ڨfǑ+C8E:g-5hwH9x"1-pS-/"|bbX<^ 2 9`݁ZE昉Qn' !9` %,ie#G2ۺ&j.X-( {HF81Tl+)+>FN'%+.@{ i!5SWܯ} ^0aiI'unɱ޾(;KnYb ßݕ6.-[Rss!e+hgQ9{;dLGD`ve,83{cRߌ%&,4.u p<8ٻ|kA;,UЈzuJ<3<‹&BU.-{[LQnk 8IXKub}Wh?A)0FHJVڐ= 9ߜ*:^Øvs914Oüt+Ǟ~Nl*h&AI{vl>U*FneM{[!(`'Cvxn]Q=Q'ZTĸ&CKb̙8~$WLxqse6a.jR 眦ޙ \b֚N,CF%P&Ѯ͢],غc9+(O"М*:ODU%zhYEԉv4y>AdžƆ4qjkڧ\%;s*#RHϗsR)]pkx LNP{40{Xj6m[4<,L K-gQ \x_k鴄*Lg|1K&71ka9qŴFC5U,NcfiA{riݙ`ȕF*或*_S_m8^:_G*j 5^I~ V]qaU7"qtPh<BJGj׫P^x7T|Qj^j6i6|qٜ@|>Dҭ߯d!S, ^ Ɲ|¹ƱN\?Ս%ɚ.C뭬|%Oc!}4S0 ıU jc-u5.ǚsx[KM-Kw"/agRJe<۹OyPPE+6:eV48`ttv:1)ܒykZRo@-PyMC^ꜱġ^{Tz%t &xUZ Sv={s}}aNk8; %԰:shv-t.3GGºn?ai6ऐab5m >m`S«$B!_]bQ̳V(xRD;(_W7¿llܘjT+Y\B OW3wc<%*Sf)'z$Ws^ߦ ^j֨AR[y d+>'M OI= HzzjݏbnSq BەyHHUT1IM4+]u3B̨k*;5GH33##]ɿ2 SF9.J6뱨V:\'Ê0l)+M[|Y|)t+Wg(Ro]K$MR}n"?"Вk\'*>ݘ.JۂdscP~3Qh}Pw2%@D:D4V\7a?aO|;z*詅adLe;n0qfjfrѐU$tHgֽ#Nz{l 1]팫8y$3_4ʩNn[ (FVTHUeKIf8$L&;9.%"אtdmIzW=&FRo_-#k o+"Є0r,/3Ns=Xt?z^m,YZі SP0ȤṖ6s}29hdWܺo){ \2ˑ +}k7CJ;/fZ!1 &9O]ibC p cv8ty6U, Iw/3֏-ƺǧg6dC<2P_Cmdj\Y7P=v]TO.7qCE LF!LeR9.s$G,Ƴ"au?Ycm{B3T@QL҂A>cCK_\[)Q"YȎivV< 0[' ' 7r\oWKf] WQhtKQv3;R#ܧl-޽PljYOby%&X𩭻([\T~3@\F*E/Macm0my<@%:R=ڟEY+T E 2;fҺ $Iv}?;{` e]nm~LPeo v8piQj6[`ާm9/E~; NH'PR7 ֏r. V 3Ig?n+wJd~lgLq+mq5wv;2:A`IP?oD(Y#1:)O(kE2l@ic}%ƤuP@`ւC6@'Xe9<#*7εόC$Ԫ9A1gi)/Wc99ב^L1H'-]. PRh 7_F)lʈ]~?qbZ&-',5}**O%CfCb+ra q;v89'Yo ͪ $5Ĵ t -\S"ߒo̺܊D$WM|m  V" #s"nO0كP1mUvD%桸kض;m9v@11'I4ٜ$M<똗yPB!WMzs3ovjn8rG}y8$45K .$)9tf;jֳ׀! #Vo&Mrr 88%$*@5h.x(IfCSd f>~Pt0'>5ɓI"pLPNtȑ VTGWmi0n1j@z';[7Epa\.>X,;O*|6\%3nhl h9 &tsk׈vw؅AȠ ELB*^z-u* Ou >ʕ0+RkjyvBhgtQg6o\+M\QYHV ǯ%T0%McZnN44$XPK|i?P7BI-cD(YL9yjMӺZaHLoqNvXCBPNzEI(y|DD\.x/(Z%xOXgmqssm$g+z7Dϧ ޟ`Egj‚] |8*4jL};p >ywMOiˑG]1l6RۿCd*hOb ] {9,QzwOx,G9[9D%y>ù$WtKl4|*%2=ڧ.[f~nS: ^)zoJ)/oPavO^5EUKR.Mvm `S+. 2Kn,Ih0-RCXIdZᖡ9?UL@qUכߣK%A??ѯX=HF "JDU['  4]"7bFC\&( 2z>ic"s\oc>AO=fW`|Q l%ƋhvC!;kp)$iS#Yrݮkąd\sr/J'dxiR oC!'~LIe#)JeKKܧp)m=OqXO- gC$|xq:6y/H蜑XɦB>e"_m:ІA0.)7NÅ$;Y⣁,u% ¦uhN`.iרּ6ך>se/Dw T=/郟$e<)k,JRIρdSg$6ϱ3VϢUd(Δ`r7-c~ǯdRwA)>{ \χVf#< Eod@Rp+L{0륁mҶndBYƀ΃O d/g7-_]}䜺HXHf?"ERI J _Q \bYfh\%^2oc'HZm.NM|9l#V.TIC8Tvb?t3Bfz6{r%iFϯԚD?܃8gdK ũߤh2JYc{հ+~LtdʉJIic^%yt$&~ϫųSw;ˉI$jKK`Iacj-ZXgOqT#mcg㺏Ug,MAPzd>_B/o m۬\P:V_1MbW:b1$ov" JC5bOĂF!Vf{- x6֣hI o ܼ˼B<Ƥ& k߯[zsg j`qgF =L|OlE9 >k+@LVr2V@ ps/T'uO1g4p.IFn.>SJ68Rڿs&-BOFKWV*m,S:e?ȅQB #yldl4Jse VVם| =2Iops4R ۖA}У'Ԧ(Tൠu֬#=L /[$dMm[p~yq·gۉ_W$ɇIlLȆ.#Pެl|x{rBg;3*j>+bq%!"|S:Ӏ?8%Z,+ jH΂bRڪw8^3VW8AhA:T2̰6E)hn*t#i{z 8ҹ;q.K4 cxS=@JQǫz^vJ-Ӗ[ ҦqgcN:bؔCܮft;W|W8څn"H(CiױWcևij!&wG)  WըW[mrT?a =$NAkCgcK*. UF9kLnjr܈My<]_RdMR] g]f[r C5[Jr ƳmAxmDC']cy$ r;VU-^Dg}aAI]qeU({=vܴ|N0F(=ZfHޜ . T ^N5ƴƿXW4/,t:O.B8QK㸘y{s>TO1C+"" =6}{njqomIu*DeyP`RObI:Hj; eJ_x%%?bBͻ/Kc3]-g$|]·kIw"GC7os 2IPibz$/ݺQ P5P8H۾;~Gp?wx;M.VݻQar&]i jpNT!a.o_g|@ k6Xpt=\>1< 3g|Cةiw^~2VK`ܖ~mH,ԊV4'ZyYnV y{=80+-A*Mހ_8z8Z: N\ï"';N mSRr80}Ui_ϋ< L>'DA$ft`]RگGFPŹtS la`L%\(da넚;gc=+sڇcfD 6]wd3Sî掅|`q )g[i X_"u5٩6j00%``G#`#Vhߢ~?{l~"r.&]%ܼ#8Wmgpɕ@Z# Jܦ%(=>s]'5Q7ts͔뭮ICuq|sdybXotn<+n\z`? >2fQO'DY7F5206 Az!"kP{#B(Z'.[[, I5c@W8{,hFc?m6U4T8 xοC/\0@XaRÍ*MA9)O* .epts焜|wua PU~m+0i==~s-}0pr/Wa|5?n(lff~h4zc9Y 7!ukQ3Iyl^ݫDAVmNN,:+ ;{kӔ MU.q G>7dk?P&Vt]+{מTƎ=]L%(l/N^X/^cVMSk8 f6IռńTpjy|]xt]~%qQ$v}̀jp 4 ] MS]xb@o 6g6ce.emrEƍ"k~1PQxUٕ_av?gB A \t߱ $nnUUUq+}caYSYUUPݖ]v${hl ?wѬ6[r B :sr0Wfm>(ۇ6 0ɽ41uc %rzsOQWe ټٱѦ':ȟwN16v)Š][,qڥ"mTB;Ox0Ÿح@ޣ߼䵄hOB@nnʶ^$, uWؿd|a񢞺2Wt.'x+`n|?VTIk'Es֛) YQauH6q=>!Zz6X`EsT4WczEONۚ`2dYG'e$aS л7_Cƌ@4J7Uo6)|( [w.psKG^~lUy|8X>υ/k{z;ξ >Z駻cKVUo0V(GѮY-8k Bй?}o,pHO7v|!IIv\_1xr߰T}D- r:~sվ,6m;ثB/8FV/ 6_E7>g'P|2K ف&'-xU.Z$-q>ogB5ss^ n%[i iƴEu#/CA+H-kn$4Tݷ-}N&R^k&8BsqskuPү*0me4)r`FXQ?Sf*kPwO>]gϯ7B:-qOك={,gv#2X8^C{8 -:S6<ؓb3-JnT>islSQ6rF;€x$V4 m̻dJO.00,X8IYZU ~ܱ ш ~-ЂIRh?nS9Lf[>E 5dos>@~9'|!]}잍cMLSɨ,QAġ9lߧyqtؗ{KZ|fr;d18;a:l0%#h+u`(M بI3P|0=(?-/Կ12^&[擢UpݓJV%kku_0 ~CJ,t.W,*?U{dw:cDr1'EFj kR4m_}̵^Hkt"܊)7p*MX쉯?$qٰR$'M)::LpJ; e ;ss5 #[f%w\z^<`5HĄClG~-^ r2QV۵F6oG.mfYfqQҧq&jv%f4~tD pRPJAL.͜9aa -:="̑\)&zHi{i[}4xxtaMW \q"b*]maTd4Je|5m>)2 Q) Fx@U lg$8jgXq#a/_63mbHNڅJCTaQHPG"m`><#y^t:VTI@.OXf=׽wOaT&d&yro<1Օ{04`f$.;Ռ_OOu)z#\b>(+[$%|0 D$[.UgMyɼI*P0V@Z"4$P>Xr/_8V TZJ=8LJCc>PՊOaJ110YD6Fdx"Ǹsʏ`O'zJM?RDpg 9'vyCt(GkHo,pZA@;?TOFc Ø.@/a) ;Pu?sߵ`#|5wa[~3)+=~ǒ 54~2 $=v%켟趱C9pGε8$ߎ=Z/8lLBڄZU-C֏n0 =օbQl/y>1䪕TUz) O0FY1RcSk6Ay<f ˆdi3b^TEq+USl"е3:A|U#k<h{'Tllr&UJ Y3Q"=q:~ɓrR"2.UO&V${ړ©X5;Hp܁xF3$D&|1!IW]|7nHe`⋙0ߪ+0jÓW") Fp(9Wv$+]p\LF҇.2rqR8 ފICH?nxGFrЭ(sLgK 5CjP#}boｏ2)nH0%q3n@AY\ZVAN8Ƙ!/WK XcPoz9U:@/t!4nz"d~pglꄦ'%q" B28jF6υ3Wb1wj8զPKشZO '(uM،B寂;!ujN{d^%7RrJ1?, "#^zz OE|$A'_jYfl ~hIh(=( '8H[X0 <6a(eNNSH%(bŜINFeth9]: b`|N R= >/vbfp|c&=6ԃȰ(m.iX$xW2} ׬5&ͦz,AqPpR,߁#ES3BV0;[# YTcÑfjNpUe^efoG*p$Σ|AԲJqIBSsZHYUʷKZb`mJm( 7%\?S0KsbKV~t;&Jl'v1Lİ/-Aօ -D~Yw&RlWKUXl8ĩ0H~#Ν.J|u#.63KspH &`#\""1)řųGjS0 0&4;TKϨĭN{𸵀微C\g.I&w+PduDl[@gv1Mr*l'tjuhVn{HxJl7 ) }2ШV #~6$cg=q1{>ꮧ@pLxd n0LҸ2SRp*<$@Su~:)"$os6n}%<ﵯ'T%& j86\Vi " WU傉0@6L|9V!yZULS[RzO9]e r~EID sXon!gd廑ojqP;5#kZ졣4𾰆 {i=wϨ\ CGq0\GbTQQ%w ̇E~{[q{i0nCkyb])bA\3w+_%4B;H`jӎ`Z7N{"2g1ub,d:]Wx;HlWcvJBNĸqL@o*Te;͋ccuXݼ45Ꮯp >Ye'>f0K /a]o\!yIZלw~^u3I*|-iFllH Ѣ#:<78?,HnqbET$ʩ)leV JikiÅ%Hp R~CFQRmK2ԓJϯj|wwSW&40h_Ȉ4Te"}4c'ͣ^h@ʣqA<&WhѾw\J'MQ鞏->YBJ3TYbל>M'xƢxxfzoz/}c)lEd'`6`1|E{5c[XI[/i2M` M]jo)7yNa _ࢴ\\QaC^RN.QJ'Qs:8h,r* ،y!B+n`)/ 4HɄH#rhwkv!ٱN0{i?!R2tJuʱ@ ^tN wppa|6<OB$Gw8we?2Apy>YPYQ;b$=X/?i^9@{i]ي!@hIŘ?L[PvU0=sM(g澂}*ԮW} a[qh9T2yN ~_Bִ&KmvwVw>v$u K*ty> ݷD2x pi|lm3`1i :ClAuZMs} Kk~p,0uWS|"B$  qLAB *`lLbW?:zGnF =xXOs+LO۰vxWM]axc 돥Ję;[iAǥX7jڤrTM૊ս\7OlXU?x)ц l s>Vg쎍#X,6<3iL_Mj'%c3g+|$pyB?3Vao[zšwyS"OH*@ ǡO;Tҗj2X~ h\g{H—9_8-\ Wmcw=K"WEYO!"t]Ȳd {q#ƓwQ 8@Ɂok)[T(j5wiBA!0wD$ FK&]4!Ib hKL"CGOToJMB# iq&vDS%ӭOsEA|f Ƀ2^ˀњ@ xxMڮBs.$,etH[`]3ڃzvU${ \NEdD(|T8ZR?PBdm$qQHk?I@_t09 t>ñM:4BZo|( e)>i"% V/:,"{+=O͏'Xp ~īI[ԁk@}VgLO8P۔KΑ`3A>GX r#p?:Sjԣq?>-y`L@H5dIWS4\ȹI]*(>uqeAtLG1!k"!L6t2Kмט:帩m ~[`y)]]CIgkzµVW#B%,AXl,t9S2_6qlG%WdwDMӾ)ͩE62 ) MVWAh؋#.kKY[Da@^ AT ~ B j LS@>'u5Ƕ 8P^񂫳QIދxw{PVK 0[h߰S\ɃM&<F%DM2Dc:!8Yd8 (Kڨ\V6Dq;=)>E;YcВ 61tw}÷#[I"[DoR礢Tux+!MpSVd״-c2^k)f&x.NYJl Ow@suPvG 4yW1\V0Tkv| >;psrsD e"y7PTh=Of`Sq=7;ŀ J~n*w]bZ'"# Kl5O$,=NJaqb\;7 ahZ=L\TY0I~[\ oˎ3Ryy8Ztskzt(_x$ ]ׅ)d>cl\[!xJ/ "fD_w7 Eik(&K[oy} ҃{ed=u t[X(8Ӆٮ,TySRGۈW7  jfsE5蠰U Q',^iƪMw,KAnU.X0o ij8pEG_$|,/lkO25+?/*s{&y%;Ώ1+Il_gPo΢tL}=:BLcfs /vv zbr}pyloBf[|jh΢ nۻ?ٽdw\;E[^TG& HNB.e|eE`e kkOڥ\c LMASݷt4\^rȻ͐K󐺀o{EzJ-+ZhN*" RLTQ@ixMZX/yf& Ks^Ynϒ6]wڳMʗ_aqqۚ m/Ly,eawp˸ap,V d?nfQ J,)| |wG_0ƈ2dCOg `úK(Wa1T}KщEgmXUY -m H3V* BM:U\~3`-RLi(z*Ҟ?ګn˼nEPgo^x@i%oWvdĤB )FVSd9{F ^Տĉp)iC8X^ο2 ]'llM Ԋ:E<_(e *rg~`ȎTn`%2h P¼f+0(5\cX"r3c֢k(7O>c=8A$ڡE*"b(P)D,Io `LF]#xdi㝺,d}<%x8Dk{%b<.g 9 Q@-L }r`'C%o^fdd!Y`L+$0pWXT۫fNsy*yCqDH P pf56Nתc7 zq1zWe\Ӓ nҼ+J5w4ڿ/ (`,Nxi]jɁP<'7|$eQI[Ŋسuyڣ{/2+gy~H8sM< D=uTT1M՘"DiD)X|SZnz_c`,tdEDe '5MGRRsN.I/gvٷ؍}%n>lɢwGؠG_$u$2Aȳĝ;>~7G E~[t\@$)7%wGESwDs{dPlqGHB*fbj볮>ZaK&U? %)/=0(*>$ڐyt?)N1򄉦c#!׶rb,}q\[k"GK_JԐ('ldgcnĝS#P%Uܒ q|iWi21r ;Y 19)L߫ŴftqW [h _DS&!H#d$x^P(`eVIN&BqRnU*$V.p6Ӵû~|dRg?r%Rw/ .-s^ڧ,W9;pu0Xlj]\ o "Ru0#nXWHe[oMA8-a jL)̦',尵>f@{,Ms~/{L?$ZԋMɞP'CAT䴜&/Vd."|TwrJ< ݎ #mpD`5P_zQ<^3y[6n9o1ǜP=\W->& ?7"m5,tm{}~9g2P/8U3ez|mI|.=SErȼƻZO)}1p>e5NԀo˱x={\z6v~avԅtV91sW'|DG >&WͽpcXW7l1hQyV1A7S*cjgy.0Q[L*@7&s^RlVzaU*(*xiY ӁvzFZj5/:wJ21O>UXoH9؀S8ja Iy4ئF \FNUGƛS$K('L5J 1tG07`LBR65&; O=PJ,Cx_Z8*'tLHZ.at"7/>`J5f*T(Ш@ގ;8 c?vwG ڋm#1\ފd4;q.'G5bK&BlӜx֩_֓vXz\|{hpqa./)55: YfUT?"L(9-5S 6L/N&+j[0#I:5"ot6kWb= T&AA?L7&UƳVG `NίEã˱n+FO6:5P@&b 3ҭx4o@2-Q+6N"am݌;ضd,i>ؽt =5EldSMǑ_ayJ>+պ{#D,Erpl͙Q߇"nRb32(oU[JlМ_4pǑG!^eQ:G_;ZkR `*E^58dr X7 OčRS"P³Jm+;ς֮tgCXj]B\xi4U(TIʩD(Ȼ ['R'і{K*xiiERc_xmDLāUSl:0%R:]k$g 1;mXoڼQ҉ruRP^!\å:˗ǰ~=:l'􁂟̫ή\VI5YoRfH&kU"uf3-W'&od L0&N ؟Т:5 V bkȮƸi2ŋ #jv qeQ>z.ĩQ4a3Z`dw򏜽iMUh )G>(B8sb"x^'u}gOd(9E E*h%a,( s=vQ7\IDg<9*c BG_T{΢KMߋ%u3uͭw$j (XL%I:7 G0<םz.KZ{`!p R3u[ ~񖞣 w(@u+Fl9.8OBH@?zxIrٱ뮛ʐbfCb>0 ?Q Ś>還ƺ?fӔ& Y3Y:U.y]rpUts :OVgjCS{Ye .+[O=:#wV3p)bz.߯RZ;:|Àѱu!9t7@ixʈeڄະ3fm7r]6P~{9]&U9D &-KH] M)8A1HRCŬr%5eBiGgK$qMGvi8º%tz/@ocP1??ܽ~[}2ׁ"R'|>_Y f?2 #ZP87ט-(w U@V/~ _oރ4Ka‘_=5+f[עxէZncV_,i&&Exb9P&1$RG(t~WgYR9Y 0Vי>PIGxrZP%zl%u].̲)uI!OhWE~H-d^.tRnOND_9[+ F1 UWq?k[S\JRAlx`z0٤myto^MbAӘP(sBކ9NZJ!2\Y=VJ7g@ c~%j4`&b3? H#L^2v™Bkڿɡ1(²b\/~S8ZhQ=s~מX]j\7!"jkP׌-1@'_c1Rw;(|3b cd,k&M+-2qcbrѱ@G+ʽAFK'{.3c#1ٷQ]!ͯsk ^U,`9ss6OԘ$N;!W RdMUFޝEp[BU_ dLǎ^R4rh]{YUgюlG9IƧpwkkב%CS%R,z%fwkuC׉ G5ߦ#v?a"\w.7(Y0?dT<(VB6V9a 6qlvW~*[ aè7KByQy:̊0Fj4C?WFPgrLX9W.xfAz+G4o<MfOvT#RifKʣP73'^*}zޛюwS_q'au17#DE A0Nro3)4-{u[ģ awuhԁJQkTkiGB*l*!RKx?CmQ {ns~gCś-Dz]ՠ4`ǪV&>d#A<"^fdR±ޓs\2OmٙhO䠬G g%yr N4K F%2.:YiIy$z>gMEr<ˤA03G-Tӑ""=0~KO?g=\WP5*Ef]7eƴKY¸Ea\D̥؃cPcDbP! ?o@[s @ʿ^kTh77΍`4uh+?bd =po rd49]EZi-m=Di\*#K SX0IFo2lM渱Vm20/<ƍY$pYnL ȇ=+$OʁN֊&}_3932d^lcugĦMq~0V8Gu w{[:ʃ8M317-X?N$ۢfׅt"Ep~ eI89oFgk7{Oԯ3譕ϒVʬ&B7&fP+M|48yD0 n*IHo7S1=I/O2xg?d lf&vcbl*Y01+g 9%s3.7\ rjޟ¸J͌X_L1e@&ֶ8ƨiUc7 qM˃8R^99a-BŽ{WO0By.Rf#^fa\I`v4nZfO2 O o>slL71= [nZ, - 6oCqfTRV9,8tgGVFOX<$5NjWᮒD`~5xMh_7B 4c׵6Xf3H |bdHOP#)12)5'G Dokw==nUxDṰ5 H5 SB^T}.ɔ1dx  ic94F7[G%ܶK?i-2LzV<`9qyԞmThI[;BY¯(,z~n:cu+N>Q"esQRǀ؍Q|tq]1ҬPڮ:[0Z[uOjwD3KaZjRfu->M.<7-eb̥r"&SRH4Vu]XДD0$) Tl=uAFߓ1ǩdn 1xzi`" :-nJP(D0mDڪ8&`Mm#LH.Ƒ=h6N "Dfܽc<Չk&GͰ"ccؘhL\ٚD$ij~]Rt9XD 6^[`ޟe躢a5p`0# XBDz|JX#v]V!0S_?^ϨRl/,F)`#,8rŖISt%~DӕDOfNRVc15K|~W*"<7?0c?s ޲`^K|gR)A\Ϟ~eN@IAcې%Ԓg>c ҶǠBW坴rX vbS:챜_EXE Y)B~>8)HlIzY[z4 J\ 6g~'p66R>57O؈2kqQi6_Dڀ63@CXE]¸ GNff\x_DIeMU.}iL\S7^w g[GTwq'۪-Kc޷ƤӸG`[`s!=yKw;S^NtxYQ*@}uW f{ V4Oƒq cEQBTSYˏ̔Vw|IoV (KDže@>Mvl29K*ũn^ܵLbwOI P۹!puTFw~ .uF:#er*4ω[]eRQ9~tѕm%/XmWD/+ ۶,7ܧUN;u-aj,[f @Ю72 a Y2x@Ȁu/^K.κ9 ـ<X0hP|&!.ze&*A%嚗R%ws]W4˽;%jt$q.UȖYe gy[dzaVKuӍg9kFmY[Ӆ[@iꀬ ŔKS4,q/ۻaT(b `;LGh }w,hs_[C}/. JP/$@ay"3mHA=4Q,]nuLa_b;FG#%P?g#NGTڬb=.:* j6p 8ȓg_9}. I#ՎoI>:/Ň ,E q؉sYA ld. m=7`3zR02a1nxdPYDf1$~N!ЂPWqI~ \kRgN&5KnZd=- QɗDrAu'pQ[4ƽ6!2`W^Vo>>r lwzɸ%v {cD CT* $2NSw T)$2"qe)4+UP'v3+"PMkEag/zcTg"rb*_&$΅W=Z_n9iPn!Xsj#b؁zB;TIZ$^::e\0m@% xgTJp;6 pΡV_;HhP/D0wIې~ݬ&)0P*tƁWeG+-^L[fzގ6IUS8' fϿœsz?k!)ؐ B BtA B%U}: :=} 2, S\@O/IP!t(b̋/Ѥ@{h%3:3L+o#MX+05ۛ{ndC–ɺp(.Wj`{xFx|2j!ފXq$~# lpSn<3K>2qδRӣi: r8x[NdKTDHD`aH}X7im!Cy ?*ʼn.3i޹x0q3~ɨ -W~pl5;sˀHR`X[ẗ́VͰ$͈(7S2g!6ׯ "zN| l6$|W@[uMnQ۫qS7ZH( ;3uG2%q^4uetok}nzq-Y5@um KfbK>Drjbs s 7Q.z};ըOng}D$3\k`ۡh-Za;[Z#k>%B[u>Ձ\ @yHBjhw- +0h~U8-jXy>lu_W!ݝ$SL]qI0|rXulwnl?$:~F Y@y(e q*,4[|jZj՜kn K_]tt\qv/xIJې/aFeM^[N.O!! ibA65~dsP7;EON9C{'᫠,60q  =uj$lXf6(QktB+SHQpB;kՄ|ܣ1IL~åG ^O뿽&/| ~UcbBv Th>j߫7q&ރrym!҅0l?bWps.o ||':L ݫUWR6 ƆSϴ}վ| >u& \ztQSy`BZlԐtG"cѳ+h' jmJfv^c~%( ;U3֬V:}K5Ol)o`Ǜ.иHCHfw&Z1K, v|ɷi20{DDOn Ȉch7] #'?Ggl5ՏUWaq=l̫v/1}:j-k2}COGsۍQlC|h:ô<ԏ sE elo=m3f;*0[&`qKs'd'?uOgݵ.e-f%MЏ/dO>"~-KG%.*-2^({Wy o}O9&øxD"'(_3^SLqzS݈h4mww>2c6M x'SulbmojA?j;$ tBSt^iMcjs"pCa"ǰ&]/dfqndOVC/(MTBf Zdџbz+TəH殯Jn>'-LnÎåZFB ԁΞuaHK7r("]iMiޅ a*pp*!;a^]WAJz~?PD+HAW0{ !FnJO8aV[ff;mZʐps~ !mjڒGmb(+!׬ޒ]5{eOg(b1o~ kqD7Z vQadsV"km99`,3xpMb~U]{ qG3UNTXx_j)sa>Z@)'qyk ++MQZ ^i9 ҩlya Ml>P?}vu޿c'00['x2#D C|%e-uS\op 3uA|< ۱p HkCj(P&78Md܉ NЪ4=E0 /w + L(YP;oM_ RAOBdFBy+ $ -+MkHCߖdMHɄλ70"^E0e|ehSO.J'f#<4:뮁b@ չ(Fd+3b_ R_\ j"6j 1Gj]k]' ST6Ejms̻ b%>$E!Tj:39  \1D7 Y34M;:c<`Z Hc9l4gݬ 'A)>DcKH )drK0$l 1lEaSߑ|4~F.욐pi@X}*9 |? LG,Ɯs>*@슮+ոVtg[ŗ9(e6ʅJޠqFĘG*1 Fµ)o;+֥b=\3\iRYn<0]? ܏݁/ew{`` V )5kB ,Ń% J`4b֊7:Is0-qUyFQ[Ou6/eA(.ujFkߞ8gu>` D|*]`"1uNE k(J.CW^ʪ |KnRM ]"8BVٱ3z8g|Zs=G!\y ݱ9skw"{eKr2#xq 7zMn;LW {*6bd_u{pAD_[@"Pl:upd}{@˲t%Uҽ6v⠻ >N>uj=HfH Cyo׽(߬~'Qee/ *Ā~i;l\L{$~<ɶ=-q,+z/L&7aD֧Y"^vNKe@Uā "͝J2VcgrR3Pwf2~;) \}ؕ ~u4,],?nXzl #ѷ3Ӈ/Nq9ϻ"ZeʃF[5*'k֚>3wWf^-9!M'$gGyCka8c>e}J&*oޗP~_ox<#_/a0VRct|pvDϸ~_#2_ڈYL_5;`iH XQŃ1,wj&ȐlѥVv"\9`/ȔaP":VMk\==tQ!d/ , 'Rey.J~2 9%|h!.g?bPF` scZa7!AqYSEKO"kMI,aR07EsH]jEgr-Ҹބt  S23# 6q9c/ihĦB81Y *V +Mg"YnnB :oCϗ| 332ܑMndNq %dht-R<)X(N-S%@I_Cm`]$ƙ.>q`gÁ*J]%ԋ-K!%姽bT'S/Pݷy*k.;#*Z F7XJ+o@޸گ!v$Vƶϕ*fC~B3O^t.nD֢[.X̊qL;Gtʓ=jIŧ iƟQ;ͭCYkl!|]y*|sgl 5x*"!\0njF'y_0Pmßg`FllHk"qqw,O.S/4k׀zJM cUo/Db?;t'/.3L qҢX ,2ے#'7}R@:jb8J>:d06f=* =/LMVd6.=0va:_'֯9!N$>rJ,b~6 p(Ԡ4C-GDꭎT%XΖMd ;X%{-\ɵ8/a "́€>IT4C?"mqd]QZzH]li[:]gMMm|'LZTS=ޱڇ ܮԶдђ77Fh}G;$!|ؤ<2 &eVRZ㕄!W?3B tiۉLD{Yk!νa>zLнdPQQzQ,?R:? ||`47u߫ yu$%Qэ[KA .AO;@FX]׷h>c<pMMp\`Dg_fjӼCt(Sj"9rP{oab3Ͱ7uBlͷ0ͫ!.j3vO ;YVJ24{3_[@.Nb2RIP->MqwZJ Y`U,oOB{ ˘5b-MUp;K!?N-ji3 wdq7!Ƅx{:!?FΤ&(iTDeӟ{iHx5DC›;(ſ\TXsd(RKuY ,ϛR84<ː,ZRM0ɣWw2v`M%8A DBZ ƨF!k߰ԑmܳ3>u8`/Nb:Kx}?6=R@{|Ңf3A 521'6" %4s,9k5r ,&\ &@>EH3n@rc'PXhgq#%KMuNUdM[Q]!ވ^{N:y G3~2^KAef<)J;GǁYء2bշ%xN6rpGPFlX(kկo+VF- \=*4F1^.?Y&2=1uub2jcqĂ$xřBzӟ˝X.WNT쓦<(QdUa /BM$'h΀|.oגwYNJ sKcwo ZM lE/݄ elr ygS]RMl]qx"-AVu?1׋\@P4da*#7yo6C"ـ^ث=6psI M)kMGhF Yl0Bye %:rwrF[8=V<@ #-7po/#%cN(〨|БoK nTsO׻\~D !+2aBu%X"t?b,eZ5B)" _yRl f%x`U JZn@Nz .ѓuBɷk#6Gѓx2{ǯb;s6ũ᝖i|ِP Keߒ-{3 2j?bbW$Ts=hV2ӹȨQ-$! D ! i@שvf;6yh4t!zU/HHVpNģsD vȒc?,3V0,dtGLΚqgѲ˩p(]DJ囂&ù{͙B5w{WRᾣjU(2EW8Z lwS.A <eVp)7]8eEoW9JLY&bG$TXu7'"fv-9cc*CtUm}5&j4WpA <҄Gw[ęC򤝻6 TvE̎h1$> &-@o(1,rزɎ)Ş:QqdVebu?G, -7p\2~TCW)*M4Vu^r PuR6aRy'Xnj_CFhh5$"0+;'TFPV'r !Vg&jc,7g}"ϰ$S̶e]&*:+ %ұd Pn0S`+N½SfSH Uڙj*f4W;x8J6fh_w ӵ"Ⱕ& 2LQ ͡ A OB$^|B񣂾Q뤴\S^DQNrxbDO  eCÔs`"߈asu*:IU"LT?,JW*b|iy7 Zv%jݔN F^_R駓+[@{9{>obVpg'+yK:-H&d?i+<<\eB,I/`y9E3+!2d@r%08 b vûI-eKDFwED{"KJJcUZ߶h"1'x琍kiE3)lW1=YaVBάɴM#"ȣeA 0(EGH1ᣪ>}kS6BC`@!%b{;Nн rQ84! ɥ }LV"n5E|[$Emzr`O`,7y0OޔEv@_}I0+t/T)WꁉV8 }DO"r Nل|/D]^kf/5 KB`^ez)i3PWk1Zj5vfikCgJ%mrwͱhs3 M\M ۑx)(xaUj8@cqty-1!2F@YٮH҈% ܱ`%)ra,ID(U 9K.2!PRY= 9+JAG4>BvLx_Be=} CIhE8Btnnf~'z>=zR&#kg?XZCPf"prgVX]8y6d] e#*aʒ+71,IA]"D.mI34Lϓ; ^rhӓ^_;鋾Tked5v;&PM3f3U83tG!c~=S`w/"=^:ZR]^ ={^Sdϩ&_oK+ LLi0KahXʝբMyS*@G=p=O*_[!%髷U"& rŹyKMpSö@" 渙 H$'dׁ (>{O< 9/mxJs:c їǂR`if@a/NHxONȡb#KHon_C8ktj]$[<\DShLCb ^n}/Yl!FҰv +%͘is%v =^9"7HP&AN+uDkG:N_^}CTmt5"LpDY"O. v_ t?*NC "͊ |n:f!"%nPYNz:yQvӢ-+Z8bUj@8grcq]z,? xJ`,9lo;?@ȿveJFm$_׵h%Bܚh xC/&1!Xy)a~ ݧ\V}b@eiTDp#L ;`q9r'g 0Z9\E  2Hg >\mTGq^j#zmH+vg뷬AgR9-Sid+(b uRQAyi)l .Ɠ^%Rn Bw;bMT1@#p-xJeBS#J 9^k=٢_F'gbꁘb笃}9X^y`2FV+[?sq 7Zj `İ7p*4;⥢L^$g6o~ Ҳ.}b [+_~_jǏ 5q# )FzDe6->zuJr~!JNY e\ltF~"+TH2zy}~# tf:},Y* 9mP-+Ms 9 %{SCbG0$tu (OQ;<(|m~JHy8ܝ8ɖ-ywi|Nx52-;V≨0ud3|qAҗ?= b24dqwY/$!! _ @bM|6~ԒWb>UjM).E%1WWb·ZJ$Ij콷纸轺RzZ)<(@ sSe3Nɭ])1$4:wd"$~ n|.J4Ӭp; ޴#RLx&Cfv$|J:=I7R{㛘`AM׌h8*KC³ 6$^n ~ WWg[/sۻZL8w0~,ѽ,!I/@qfZ,@S#Jn]q$LۯYif5 rI!T|QSn踉/Z}5J ?O>DOI{ɹ\S"c-%[XԪh83by@M 1]U&ҍ"^58h pXbQvlMHO%t} U8*U򍨔N6*iMHݥTȓFb")Sw'avȆA艸w-**#š뎂p\!LIY^_/$KjڟX՜ਝg=V[}IE]#??B$,%ܐFu496Ǿ%p'@'z.D;vG8ʰӏp(:VؓW(Z_'ӆup&<3N`hTCŘT5|J€f<@-\5P&gY:/`I2OCN Ib^zagtFps/c6":вSJ^^LSuDݚ8}|0;e'f)֬1u8or^A%*K. `l4͎{8ZnNTIPy s|<Zҩazݔ~> _Ot^Rks$K)` pTLQ6 [5qGj52fP]]ꔼ쬊1^]T~Bk(`yXXᙸzkk&fp큅;hhn 0J{2zyh)oIըw 0C8iVeؐrl-@Q (`GSL8JjOuYErY57Zd-0RY^=TtyGW(\k$ۄ^GQ(MfIzP3UH󨃞!9 .00br8g\+He&H(}-MuIlbx'@X'pKj"@̡?C:_g%.yDϟZ,4'l3Va\Q p۵L|(DG+Yc2 PF& o5s_s1OE/]h)+>Y '=z_ʵg#|Qҡ F~S,7l#jt5xB^fsa9w*Gpfm ͞`iۻXË16NM9"|fyeF^ká|60"s>9e[s:u"df/7n,(q0s܏nhf@CС]/VxfnDm'~.vRa0q  u\`;jذs  ~V)!T$^>Dm)J,T7Pw+`[kC6#;)'Xѵ%bx `|s|>`fpAZ89*lӧDWP^dxiȭ& iWS+0[׻|/?㥙E{p1/)>06oҐm>}gPfp󞿁$q=OeNh\#DU[ٴVd ݤU؄B^q~X[ Q֟xEUmq Fגyե5V`"kS=0;5!!Ԫa\@5=)9/ PGw-4;qff~0p"e$yh-1r[5X$5gcøC!t\:U,Pb;sST L zMp`|:dN". >$5<&A-\o(;ٓ\&(>.t=fP)B\\<6PRѲlSzk/Kf I-s[I-_JS>[*jɥEfĞި']h -G yLGjUٓh<ktMvPoVٽ%Y/E9iic#ζ63ó[=B. ;yXc`Ra'<*V#|4{Uԟ4^y ſBw|FzS2(912ؒd!8$`bݐ*;u;Ylh}0%ҁ"yQ|vf|>b2)Jl5e)1$` s=p[ݏh7+.[bTŎ#'C̕f?{+16c&cJ3rO!WPߔ>avB'k̔ )MF9EIQ?Y%o&طɉrOC]sQ-m>n`4oěB~$Fnވ>Xp8cf#XdV;4HN-Y/O`.9)\g% -W(ݳoۅɀK+*~6h`sȒdba[q;&WsBL,X3(eၛ o>CIp>XL/aOwp9l_K/T\KNŗu=J26+7[#>1 &LBD&T3U&,-\J<%9i/9d,X 4)/i9P鄸!k! A4Rdgո]B8:C#>'unН͘ ĉH&1X.ǩ/5GbXn4 B_P]P_Ζ#^F6!yF|olgd#M?_k-go!q}PuwSm0Aw T`!~Hnm#5 sP? 6ɧt79iXD̊1cAfĹ􂜪꒠a"]E ^~?O0z\Q~+ C]ؽۀ>|~8 dKֺQpM]WC`+GQmrKOdO \SKDx-3d69Vf&Ng5ل#pƑ֜rqUQRSHIDB)hfe3v; &t:P=̆P(itA BTiF|fQu(E`+0c?x*GqEe3d5s m(XFÇJU}M>H%G#lo>f<'|f_B!\zZ#H[,0ԡ䎜_e/~Fvu%X5#]T%j\s(70[% =.*}Z!=)KIg# iU:f1 jp:>dh"6A@YB#z RZ)w"nbxÃ+p"KR{|"~<[Z~P7&64*Yu0sI̾MI‘az1Q[4F;x@M>vF >Gnp9JaD̷,<y{3;vb^;| T EMyVrTa.Sh[ JЅIasJ2; yu]C !r@'rjbNksk?irig^ڢsS78ƚoO.p{M:MPə=[(6\'4qu}'}<&|@Ν\&Km{=b>ᦀʖᶷe':h kI#%~w/MK_*2|(X. XQxఐ3Q V5&Q 8UĚ"J@I?@4#TMZ2\6y--=kM__ӱ rw쪥ΐޔ3Ɛ#?e$Z& Tn ؞C,m] ;ZzzENrBp7 Z,wm@I4Ppyy ![ Bt_54;K flCկВJ׳TӜ;3v/o+ըf Didixtg餍d;8V#Lid.[fOٖVINSihY\+նR׃U_Ĉ'$`v9C :tcxr%c{C4V6Tki4.,db;8]-VYI:񚥿𕾝6wH|otLSÚv1Ƀ|OhaIe-QDM W48Z)WDҗJeN~|QƢ[V$x4aq#dLfbt d=j۫WLs7+҂?:02դN|ť$H ྦ Br+?:0R-xZhkIHorGE zS` Eߍ\D~[>lqTIJ/U^T @\gda`!E6Mcr:Z՟h-дSŔFW@_<*ERr@'*t:$ΙcþZOj ^Ǎꉊ7 -7 u6l)_!OK4_.qUBeS,oޏ<#y?!8gZorܙbQz(&->ń)!vkAE2o5d>`Zi)cO9Q}M#Su:Dxws}F )ܞ{V ITɪjz+eUߒMޔQ@jԌ-ȮKw kh,O-[h }1k?"lrJa?Pt{dӄ#˱(<@Νܢ#GqS5$/#X"+<3 8N\jR5m=PABl#jYߎu^tv"7W R@?'}ԋqPy5GJ"%5LCy$-e9 O(ōpP#h[^4Žlo{(]ݔNiA}sSSXNλ%#|Phӯ>ˑtF.Ow+#cI>/A I(pJ"@k@U]t-a)`{:>On&*nϧ;kV&{Mb,Y\*4 wJCI!LdկUaנ=K>bʮɬM~LnZDžL4^]xrh1اx{.(88j?kŢ6Q(mfNEy2 rٽ|N^ evdwMnmIahWM،baŁZF<_aABVvVd:[uC/ԑg A=c xFCOxq)ձ؀ ى !aXKvUCPd| K"SlS㑌p|61gZ]㴈zfaբ)7V AvRo%Z[R& !Zi1=m )0u Yjޘ]ZH59z?+Qp|,-{,x{ 8ZݜG0@qx{SbYhGnùJxƒ9/ 6Y+ojy ZYj8K[; uJEe&Iɼ4Kc ϭt^(İpf@Y`m ZhDU>ȴ ̻=A?P&4aQXSi.!3KXrWEE2$qUkjJd5yڀ`xL [C?R%w֐aKsaUZ ?YP9&J P؊/JBg]oX;כ[QzEFPC}b뱞aa[ހ՚ļ/]Zk33~Ew50床mK{7I Dyjo ny:qyz %_"~aR!ܑܰ| }ΐk}L'U63BT*]t0莾gS5u>h="VC6=kWNkB958ӝs|r D,qJ[/˛3wbD)M;Mq^! 8/)ͱs_sgEKRS?L.E AЩz+K&nA@6Klo(,*ܥ|(Hּ+nO.:Yp>}8y6B~9BA#a8}k b.C;.E-#~ Ƿk`dBKhoO=s5r\>;Dxv1ݺV]#e뇠z_z|ܠٽS$jx=NbUWLWKMVoL6fx}XuQsۺtHcwyiJE.Y,4@F:#])Z¯?=u#jV|WUA zVFP%Fqݖ4d8@㭿djgw.Gk3+\ eN #2з5Z* Q޶|JCk|bC@^:,kk} Yx=6I*ؑ2A+-"\->vᴘ`g!VXSɯZr!ʰm?Aƕ:J'j"J%]j9WKv!s0k :u(Td.tdǰKd BE)5ڄ&}GF8:OئZ +F'%m˻ Df7"94˜3-3T,SiS5@ѲX:E*m^sKO)ɫ= e)Xd/I,OU{oDe:%t&yz}$Sڏx 3 XMXYXx*l#HG嶀zVHT ̯j;QOٟ+o.Rl$K|ZK$ߐ-ATr[Ux9|7w ~8np1!?(q442.UaەgaOf{*e@ t!sm_! fIPNNRK,z <S%i)ʴ M#x=_ިOr)w>]8[,q"*IzgQ(90eYt'$YL\?{*Z{C.󮭇=5RiCBDƚ't߱=p߷OOVzr窛1 p&~1_ͭw+}7J{cT)As ӢO`2 60Ӹdžخ`YŮfxH3X6"ZpG3}%](Y,>W{|?H@Ąȳee?I&4])BQW mBd9j'nsncwήYJT_B}6=GyΙkpTD🉘wJ@v%ZD\sW EF$Qy4\?F9j$ CV\'[ޚXw~<a \ -aRxEcw[0LҪO6ӯd_oRگ)e( cwycw@(PXl;L'0W8<\-ؒ,~v\B [ji$P4=raOk ~#FKGd Q 9ms 4Yd9]KX+V \=PthZߣ,оN/>p5OJ<,7yی=BZ3:gt:e5PPtӍxXE!kj$v Qg?W7̌fQIONetǡ302$94צ+eoZVu:: [n?~jh}ru/6W2IU/LH-w4@PCNn1s({%JFX9 cK5xPe|^~a03+ 5JгЉX׬l煱-G|6ԩzng&%x,-³r5`-eZC )B"/FF3MQm b#paqYOi?L@:gXZuy8аv UIq_ T_;Xw'5Yx Mc m NAcVIoW0 NShk "gOFoXo ح5PHQ<'oGI;tg"pJԄe/T[8%ND}[l}*Ѽқrfa0V@(Eo'O(j%)m5-~ Pi>>m=t鶀r3)|NE5o1ޠŒT.(IG^kpWD^F=FKc3՞<1)/[uXi x9l(4Op{O *7`aEAGwO4j7B-ߺQR>C#&+BA sQ/F[׷16-"gLi~ԦݻNDO8P.V^cƾZ=Ƹc4E4#P^f-YbKMv_87 (@fuV A{ƨ{I E? E6 f(aj++U\GdT--;5mTCGm )$E-I|jgߣ.#Xkv+ IiKv3m2(D׳.cܤpQG?T ef ~kㅖV@~pb%CH' uy0P ̸؜1* 7п_S"q)gKIfHrƞq5^@ch#s/E)˲+Llð;;B-., ySsD&Leg(JwSc›M(˳M?7:=!2_(jؤL?"Z"EcZ׾gՃ&u[}8Q;/2|ǛdoJTw}1Z4xh&.~9Պw#+6,#LzD~+4P* .; ׀YKݗLc.ML ~KߪнdVvAec9} E"ljmp֌_My/͑&ThL(eF%w lg2W\c,)qWĞh+N&uV6|30o$vZ:q[UL5h;H)t^ٷ0P{IH<HئɇHzP2Հ @$[aŕW[\5_S =\5};:{$c!fA,2 3XƍhcoxחJln`P|Ÿ|kOI0k_*Z8b L&س%M~ƙMnK7/3EҵDϒ]qgZg݌ǏWy9k˰X7 R!4oG$Tߩ@hI .Vſ)0?X? b`CDD!b kD2mz}@ݑ Iw)EdS_xFwa՗ &-PfKk;c%J>qSZ!1L&,N5N 8VE "b_"HF,k,Hƞf`U>=]5>޵*la{4?S s-} &b,Mx.i%fcj2&=o3pr׮4o2궤1dѿvg[(ũ\߃<ߪRbgE V uc䨗ݼ#`l_zz_Ѯ;q5tƬ1i>zvkg{F4G4W?1|V'Psűw[`7[r:0׌FIqm`_ژxym$C^y ~ݝQw&9++fY98q0-i[IqsECrzz3 3=WY^|ȜqchuRv'2E)xֲkDzSzA9h]b{1s9O[U 2A]$ 2&On!ttxn:+~ED``J$72g:$H"-cbvr 4{4O<8n=?IzLŅ\@QM"* r?ޥZ/11Hm"8MytDtZo<\E&t\E?ЈJܢ=!1')P!ZF@q ݖnq^b!iwl:ԃcH>o@> J }vซᾮUrGrLIeyz/΄4P1?9 pᱵ 㵺/Ji4c"fkу)4:,EK2?9STE& m=/a0h_>V4}p9< xzU>lcl|{+\ëxh5\Ja3Hʦo &׮;XC] ږeuTxGQq 1b/aXOQX ˏlY_`f7{\˶o6`fϤG!q +9Y@aJlT/h/ڦ쵿w-pE#`Α4jIEQ4Le /eͷfn:Dr9Z6 UĒK0ktXҚ};DA"l vvd|B"K_xLRa˅ʍɅ R΃5C4KD,>@i=s2^&}AZ0ǻU'ƺ{/k5WDI^1ԠRB0QMt=a]cX2]r-xOLubkKxpi"A6RiuGD*s `uLGH^EoL}$wz~!/vVu3rX1Hx\Bx9IjUX{V>FBQ4tBV-5E/&uF< É\wQo.Q.64;ުSOj\]65G^wWhУֺ)EV- L*UAk7|q?ΛPܳęl\$YI{h?6$0p=: Jh#(.YH%f6\ ϱ,:ofqSRm*ˀ%!; 5-1׳WnUtGr^w-OX"}Xq6%36nٸ lM>?=>-}HR9Gq#,<R frʟfTA:zn<Ӹ}NuvJn撿F:%U:n@"% w4A;_7Zc<>F_;JޒSkrLvD?%!]N.[M ^7w"|[~UԺTG*&bti8zh $_ wELEUU灖 9kaKCf rP Y 'ncPUrrZ]CiZZ)/AU*cERUZ蕖L8/4olm\RaZa,N)s˯\J-X6C( %|U0[V;N@I渟x;ZPA ^)im;_slXc 7'sr/~#u6;!%Bլ\̓dV`X`!ҵȑ %,뽎HxpAaG1p)aWݭזňf1XTuOCwed9kNy1/qSN^=+ ]%^[Sa:`TS0[2|Fh3\1mj @CiN $ӊ&u8e߼惩.Wgs0y#L]r5+=QJ9Fj.$!YmCvU+MZZa~ER̍<\%`n!9fH@?H)ٻg2S>IEoq0Fط@=_WߚITθVa]T\ D4">d^c#4w@I3T}NXR;Z?"]R; f($ .> _3!@{?=> ܍YClCzTv]׭}5}(D-cN}f޺6/ :I9Ơ]X daRgdy@ADpsԺMq>(m0`rCP/mE+fOG՟z@^Fs@Ө?7[3_f~!RgMP-7o2qbFVjoPV5ͥXEO D=n E6<@t2a:EF 5*p-E!,w:,ypmg{:t%^)&ת\51SO.54n{!-e*EzB=}4-Rq=烩+lܼPP43s09_lTZ2AkjIVwʳ-oGˋtHXBZaJ~-(NcNo* Q7*Os3, A.@X}2t=\^\ }3nCGsw ^Cר@ :8ZLDUbnȑ5M1YQU;O Sd))ǟpW XEɟJ[F}h2̔g)J&S G:&|`'5 Y8%('B}IN2ؽODOeR}BqȍV$_#Ois3BZ/P&UgS.TNDgWP LU192(J%>\Yƛ G)LoϠHeMa 8 >t)ugL6ءAM;\k>g#$g(V jaQGι[(mFf1GK@/:7cIpz_s%$U>elF"?Y R;0d􁙅o707#ڜWd7]&OHAT^=4 F0.aB y1S4;B)R˜!ad'g^ uGxT%\1( ].RwG\v:H%ro:} zp&t)ϱ%+dw4 Vv٠H4P\vN \J_K&PXu׺ `UK1h{ cɻkZw ZBGOrLLB .١&q'H-{\eĎvͱ/ϼ:7s ߺTH$]Wc;"jբvQ"L B:0ewõ;eW4{)ρ 7YW8C_,d [L~Z*e`Y{(d+ykomô̇{Aea G(ޭuJ1@2vDgqu_M? F\[tZS-)+Q ?La2 ' s-H-H'HCk7:#H`E1ԉ!5,:9y٪[CQVۉ<ҕ/j Ik}+ZY熉:G]xF4#fmaZ@@wRM]ڏuɹP~8}ĵw}* r}^ׄtZ+6V* /ۧ3!%3٠Ibx̳iA䷔̡GsJk@tSϦ$[{tI{'6 g#v8*/9||}90@sn,MxG_uwVDE9񂭪(-9SBJ4fHܞH\|N klxYV sCO*_ 8O +׮Nq)ƙ{ܤܷO2 łhc[>#}J/J!J0i˄5T #u0$& DBq ß'fQcWV=G8q %OLP&n Y>ᝧsU,kY?LBƓ>җC@5#a@:Ur&, 8Ԋŧ`stixGBtAX>GuL>T$?iྞe5ĥN&w~[t_w\V60xvq5>汈5(/cWf910ȶqpsʜDB83:}OvIK̒A^lEjz6p)VIW$2rD{cMl# cb!/WUkh, Y%]LtrYxS f|3YƋ#QN =j\-đu?{ *mWI{Ps§|0]Bp^kKv*.hu~##}X'I8DUM9Nlr;<yǁ?ra96?B5Dom!a5Z4܆Rɝ;N$J:TC7Q sEWn:QiJnz8MbnUEJASWCPD`7ЅmT,#T@4Ι2u/!K? ɖ.N[IdDRODo-yB4+-d+׌E!6ᕕv<8WL޵k"+|Xw3ӱ{ٓ~I0;=LwLu;.PPNF |70g 7Hg&uy;8u9(5wD(n0Ȉϵt4j!ryÃߜxgrZx^WЦ@fc &Ouõ#}- zBUb]{O2Qrj%FTI(̈irs: )y 3/C&3! ;J*Q T@~ K}dZE=TY:k&lˈߝܴ@?5B\.BM r`.! J _]&UO$ATR$* -Z,A- u`lDc)؅*6NB} W.=9to>'S %u6J͹a*7R_M4]CR=A8]7| !~X5GL ({+_;F:|=K돫^XOtUQƚ hIx*SlVKfCo( nEHGZ[Zh Y_ojԍDi s Mcڮ}a®ila>9Jsee) ,/W7֯d@DYTYuHt\W-]^Hś||Bb|l8#,ǝL۔Cڄ9FՋpmtPVu&|k!L' *O;l:8WVBGB&qRe8 OBn{JA9%y,er},Jh(VnL Һ乗72s&Sc/[#Jm(B3 ּxi c Yį47b.YY=$jP.QN8aujސH"|Wqhcna8)L.R?uj*r%C5xΏ>D4X*EjkZ؏u(aЩd%Xso:Ej{Y \B[__ryk#.|8מd4`FS=K` ;Fz/!ף$@  jփ%'qTԆz˼EOZ]F|rsUMSGK :,f- Uq>WP?n"rBY@̿LW#`[è庺` S<)Y-OT/sl 2lF߷JG¯yc٘逦?'?l\qMѢ^.fޛ0V{OR 1\E |Q 3g YTVD'%%k 9 r FQ/Q3%>{Sj[v_& 2W[vnE[ HJIoh L8)9 $kVa 40`)2daiےFURENJ&$L D(vro8z-Wjv Gi괲׵ ĒΈ3tw8Y3H?Y(_~MD_ܵizF DP,dUMZ]t[)pF.ɵԶɫþ L0.ȕ oƤT/V'Z"h<ôL JKQszdkYM[S~5aQ\9j4l WaNޱ@@mHvh!)ڈձT)ȡeZAө -@F4:W>枇5MhsӦ!+Uof޵6Mc`M5:i40с~pMq)xs絋-0UR :LF#QEĻ?v{@#Br佰+$ 0|>,X;.g,w|UQ'? n$7|>aԓh&xS)C{0D+0e/>x2rN66&QM0PS?_(#ow 4<̷\;Nj6kNѭCK| 5[ `޼0)FB:Z;_=B동U*^pՍխs S`Expxa&T^+܈}Mw Wy],|stnY=@}f69qȶD_NM z5y"ű֙T}K+ii| zQ^tRkKAV#h=YzR:,.AGC5\l!#pf-x*c݃єThjNV)Fc |WѦ#Ѹ#U97ŚrX.:z|cճ_ ІħO ? =BܼkfjƝ/pH X4Y@V${y!k` PLk:_\TRG;6}{݌t[HdWZȚw[DК_ U%NGbik(x3 ]*_w/Wۖ_eu,Ghp='Zƿ䉙/Whmv_)bk,`tA sZv74Dz߹0Wr6OdAuA  `tu!Eb3bݿ~2DŽLq͡f JRB)7[9a>pi2F qJZ~C p}I nr31*1qp/g}Q`+oDY(&a\pg-XuD?RL՝,. E`nAIu?YL? E('Goi2݀CȀMs OOb<8<$.p ӭgcxzRX6^\ͩވ؝<}$ZCr= ɑ0@~ < Glgk~'"A%!JJ*ޏ5 | 0Y7E;PMuj-G)0YqyN@k^3TI&\~Uj <:җ}?i޼wэ"DVX묵X`.W=Qory3t2IjEH!ޤ j-1k_-u ]TDɼi쯕 mːU 1]n{N~uMfb^P*dq`S,x_ eIx 91,_}W?L, !6+&L@S6KH*9mzDjŷnh WY6 7 ?Ҙ7_XG Բ :@˝_{,{m쇝p'Nu |UQt[zqĜf%,;tPNx$P!S%"֤͖XPw#ɴEKN _j*sŸ s,2m5Vi`$ARmc=r2T^^?D+'m?P|,/r!\}&2\:)1]`I7^wjTIE7tZ􎮏bS@4s 3LON7wqta^t17΀_0$V4A<&w|u:@:f{۪|-qeB|v߀gzR"c6:ES*5r ]]rsYRA-tFF@;S<ٰ%0m $]W}\[+dJOx-9`;}g Q (VP(jSia;A=%ӟD;?>u {8% Ī'LywevT͘m$,ʇ8u0cqr{Rp>!"<<8`LT%|{](bO~9#ub2k>蓄'3 fG-0!UACb9z*F" Cf^=GU+r)N7Ȗ Q#XpO~=XϢXզߕbX?nXxC}T#}/8J WeQoB;"g@¬:.OY˶Ya|a%A?+'*0zuܮs #R3tmEһ\9,/j&ٲ)xmЄ;q\!)З}ق12k-]l>ͧL"/?bPnuXuyo1~+NT_?suooʮ T>&g-= Ǖ;OA N3lt˼ThֱAzqmxlWIĬ郤\f@2^/WF@k jV"K0=9nG޳#[܎i_0|dvV B&Gb i,XhB!8ׇ-5ZA}6_g^H=2K4d7-IJWwlKGMYBWV;R$o'`i*cGUljH49. 'fOXq#4 ?_fIU+ hiK1384x"03*'J4g)m  > - Dc*ކa*b ΀"dAYL8r YέD'mU=h:,m#".0ZX ԏװw*GL>E*G4SXkrŢM] Sݜ 8ኋ|Y=J! *qLh{ ]Y P~K*Va-0#ʀ&n<>$V.9|$MƁ6;4P%[Sn-Ƒn+jYZ"07af `)B$wp˧~5=yaTq9Q.[.].;O r[ rdU~oC|N3g)[ϼ& >"m K,Huc^ҬG{g1E"_{IFR7iXr?ľj}$MNhsAٿJxw+R~:)"*CXTVZ/tjӎ\:|q:Uf7Yi?`!V׼ d8l;:3NĬ`-ea|h-{2f,i,; 5 Հs&藢e2+?`j8A"9pqէ#dz'6 -ZСm7|Jf 'BK dѺCz)@N(d:g_6 CE$e%J%?2S4|`n,Q4N}J 4rppC!ƬZ!֧G.$˃~ݒ^I)>(}%y>>D5Xm*AB/ra$"C-Lk۴͍}030wZVe2\JM٬#/}Ø&OάQm};rELH_3(yʗ 4ǷiHc,VsZ{#n-ZdŦ Ct;b\8s[J?]8L+ѓC%=$c?QN[ȷóL~æn!uS:H{=w WF,CpP~cޫ=iuzc>h)ݰNXim^O̽lj<,j xdLՅB_ABř#%Y)8 =vt[B,F{-'  0QzB[i5`̄]$j|ʳE.~za=>aElP)f=.00Q$xSqgP PHϺ#ST95C;0!y#][;k剏ɥ:}gII)Ѓ"U^ŽuZ&LhHT5(-jdq;Mh{dUI[5Pf;^י ;@YM&KJ8U AU:GOjPZRNj)icFOƎ $] p/%Xho] 0KB%TKB- [rӁd/FY&ioݹ#D0Zb:Sg50Iϋ@ zhpq_糺:s¥V<|Qg6F9 OigF{?DCK8QʫN_BW(%l" Yrz;;t·1=Lڠ% $#*mg Xx>ۖp0zYBϓ-X͌.lWdPȈ; a* &4M5I]DL/>#疩`MZgHr.ѯ 028"RnA_шb9JdcLٯu5 8k\:V` WPk{%SY/]$% d(a_CJF՟^iZPji=X.xlpG)nx-pi1Hb|TO lƕ5z6Wu4ѐ݁'߂kYSzvέI{{|ӫ"yYE3Vĥ2f@\nOQo\ߚ$J"5Yd?q {+C[pt f?$&H:~QLN C2laө}K62 S? $Yl0Zd:<<+ .SOl7U@y Aw|1E+N'Tl8ܵ姀-F|6,#A}aj%)5Hh<{KVOOd镛Hz:9jq"Ioi`2۶^|2ET7=)"6q k%ȩ<۲Л6FGD-Phi3 '[`K }tYvPţM3r-\k,cR"ghTv gRJl˳( :^iMql9xͲOgGddc"fblW6R&"<PONf6T w6YZMt!-(Ntc*!EWnT+w۴D>.:bb.$73)BG!f@@R<AT6HM3^{Uu0zv*YPOc;g/rז7`0&*BKt8KKHlR>F[7m.;Z \x0kXp¦J jv9'oN-Eqp厏gt~-H۔ˉϤp.n2*_yFF~s}T2j5 cnBq ?(d/o g@ޖ?u@E -29>[U4NRɘ^bgB#pZ{|(+ Gl8I-I$p2FCbڠ&#XWɌ$o̲ы4lXA-VO7\'~d@!kt94yvd@OpR_4zWv!cH8cRMkR _]M;< 0- .`D,/bm <5WwFg:3%[qo^Rߩ⭖2<&jħUD:JJ`GǃW֦-g'rJ4cae(%V7} 7IUW7CsI(Q 5Ԑ&@t' ftĖHRSuhA@q*rh:B=Lbf,ր I OL5se’l*L M;sې&~(p6 "y`Wzj0Rj,>IwUPN LȎkAMܲplY+zM|Yt鳪Iy$zhelߊ?P+LF3sQgF~{1BWUնڦ>;5%Kl2&amER}Kp-CIl6T@YA1k!>U1P2V.6.J&ވp*wVl%P0,8@/gB_ǥF FD˵umO+b9o:c0댍w@p4ߤ};* kQ͞L)=X-3Ӥ Ps<) 25+鬰yC1mF=d"j_mG· !lnISS> вS$IJi*C@UKYR~+x|.7yC sWI $%M/?|,\'ZG b= 6xz~6Re~h9 &]dY:d]w,:W+]&"GKn/-e|rOwѝC( 1l()1$][OxY"G'Z֦ ^] @~'|2&d.@} ώbҫiqP.%Mϒ;8:ӻc-sK @{^ՉmsLK3$'HSZ+(()?j'&Ei+ܽ-ONÂyBAĕxy!rHl˘& y 3D" _UIc8:mUE 3iwՅm5;i5`Y44JʐBٵe`Ϯ0"Te;88b #r\3ӀH/@5Or: &|=|s HTI>5|qC2YUINsQT%ǎ} Fj8,rJDo>౭'h:$54g=:r{k=#L$< ` f0r)mϗ(ya"d:R'%S/fd7L$եUJ,f0(P|);dm mrRќ:$@eB a&vdM^-{D[&!5F\юY3ۅ 29h#-#vvX8eN-i`in ka13zI9?c0]:0„DrU yVce4lJ~ɷ4ϝu:47y`~& -cVXZ$mYu&;xmP=L|?"w74+?8@ņfh7?ݷ2}jqY wG.dnwIںD&.ʹ]a1Ru5w[d5hJT:CΏiF0]k?wÄ$ٿ1 ڥX뒽%סVz >E*_KQ^>0A:XrJ*ղyL. [k 㝀&R{xLtݔAn)~֨آG [Y;ԃc,QJRjaV=!]y<l1;q ~>h"5NAHw̶5j.•~\}4/FJ $g]턐zQvDzMÀʪIV&Gz餹lB󊚪xOxHP8jк o#42bą})6g[ r:ꁦKi+ pa5$ k,v{Ý\.ŵω픴= Oe*|QAP\YR&/0įYUG8Pg66 r'elG'-sT3J>Iwi$tzmt-c_'B?nAI08Z5N9kSG-; ZO 8;$,&;.VH8'"㠋L "R{ޙ&Ń;1q=4lJ2µM;8l~KIF*LA?yW=T<LRG?oScNEl ȏ%/n8+np8#A"JKTpP<aHTZ>w6k@ gu2V4QSK,T.̚Hb-xϨfo%E#ZÌ {&WTo1p0n}{2q F A8 V!TA*{j_Tq00ޝ{>@-:dq 6;jv6N>}E0H ۩%V2O#6n֡~RveOtfj?u71rQ@‡zdJa͐tv+q;*7J>e+0]{Ŕuh\^yT:^'cig"1;G*n OLeoC.:o. [ 47d+mo[0&78<-,qv`z$!eEg 䒊 YF9LMa*kUBq(z5Z# Bܒ^XwO}0>LLS 0%ˉxQ7[zxzLtʐR93RT-kߖv|y-r]<^9z\D)P':$eF~r^q^q~hhu9jz990Sp3IEOwwp%A6[mlwOZ,%4aC0 cTBƭ`vR?dޝQ*i\I(MEr80}bA.WF~P :jMxxCGT1:IR] Zp4X4d:ֱaЄ[짦&=4k@hN=\uT+>#l)z .q+B.}"-/M#,TDc&0k7g$ZnkOv~mሯ nF`(YL#y\)pA,@[c;ف*pdc^>G1&Boh_[VPA= YL$&Rzu%ySm灂M m8dfq&Sy`sRl T6|<}Ek]L<3a=8W%ȹGx}m[{ˣ CHQeϙko~ 4[ CӘVL$EFwM*Ob}= %]:Zoԟ%69@: MdPh wܭNTWMgu%!tUxvq,P#{4=J^֫/[} <"d H>"Jv{+i6Yh+c nG8%!. ĘŤtosPOc9f Aw[H걐["Hªq3L?Z/ NΗKTmhIÌGD_Q,oMu+=pwޝITo-E=w=_XN-!uI45 ʗ"ePk@Yu;]W]F1낡nTýJF4ːKo[~6OkVIq%^etmyKt))-5a%I3e STEyO_ǤrWiX]?m&ns}!&̿+\d(RBdJ&3&ҷ{ssႡc6hcOkuW1h=g-z ͗J(fY Tr5c5ulg,hTg9I 'Xfm9><$`s\2zSJz/6æ48Dt\&J@uroIմ3\LS:3$4n S-U)3\M\zhW<.ۦ5"kHw8֥y2s@Pu硤N_$ӏa韠Y )kvƋa`q1nY@(nkcqjT kf Oz%)@3G]ߪau:j;bF _/['C3-V%y00Aug_jj/,GTPWleoRSmXů+(1S5d̶k]3u"YYrbfXqW -s"I'⃣VݾHPWqj]Hj&kA|wRAcQ(rkaT3DD )ءlyܛl5Y,%;wk% QEk!$#H_q@wՖsG ogiG{1;Upݠ t=jך=QQ'P[cnu[:4*(շt$ɀJ]G6TL!+j3Ln ;}4\]~AmfGܒ0j~zw̎sޯ}2jQ9an$L+'t!ҩK8QNQr?EA;R\}TGeR'Wa0o4q;Uz9_"w"}K7PIQN}a&-iո*hk.ҫ9Á B ɿT0V6-imB~7ĬS-6Ect &҈ &K@sTk!F'7huz>QHA@М-UNsio9&맄|QG46NR:KRD+-`qhc& s2?`=@; XWN`4xo0pHI?yx3- (HަzH3lbR}>=(d*+YL6ubLX d'm;y\mѬ$μu%Aj*{xRv7Io1o2wiށ2LrݔEE"6(k ߻ɕ"}XbG/٫g| _{,=GsQR٨&^4B;78$Cd@O"ҷ4M8wn^ q2C$rվ<\iG ku 9%NӤVmNņ1i*u ƍe|h?dB6=z@%fΟ,G!RQ^0Hmd?ø(=wC|vU/)A93z~oD~i7kCkVf&|cbo $xnS ҧpZNPLql@ `%sj@D`kTKX`+_\NCRH5n6i- I^hׂ殗_O Tf& ʶfP ܋p9^>kݴ;\D/UA dq5ZIn#Bg'8{<1MvFY"5Tled߮ 4@$*oGီ4:LqAk(z;j`E(0a}3HcA?E_}'OT~\׉Hؤo>/ Fş8:-4Е4*n 뎩ߑlS)rbȆ3fdtx}몿=M&[h $(bEwP5J`LK D;EF_[r6ـęxMHXtyp_ MF72֝((`l\r@yhD$RҚ]hʽ֬杽C%BFqك&}'J{D]vsw3m#ڏZÄ6"Y Xۑp0e/?Dp1irCٓ@ep%NP~ kk`ȇ} ]_Ev0P^>ƒ*) uAᝍX/ (',.ъށ7 wa@ J-Z\ 0\6y(z'yugegM̀Jk!CDn3jGH^>9],;-c?-) C@L2SzW~KOR^s_YZ* M^Y|a0K3cZ\tMvIApHEϊogLI.c[MvEփhu kte\ɿ?bԙ0{MK! % -! ,/Chz|){KvBWvENa@cIi訦*o'_+ʹ!Y]@Oo~J9 1/{KVa&fK.H/mt5P2vE](\,!y'qtk&c1F pԐ ^H@,&-MBlbHfC`]?M/Nyc;B|J-> ߟ5ڴJwRi.C١Y|19F޴?aE$w賧BK!q̵@N` P[=ApQh[]m?ޖ&JӆRFW !z*OIF&F4($^Qt}' ]BZ!#S-9c:^V>%)aR'h! L Fp .9 BK$/vLm6V{ûhh}P+7MSY\WmxiKRs`Co*=F9?PPhc^Q!"@dJ+~o[QEif q'E d;侺&VjPH|DjHwciNvMr omR"ܴ"709k li㾑m⨝ )O=!Y;<:ڸނ !XƿX,5>IgeMl+Ym- /yKs\nֿ֧g~d]t*RhN}vGH,mkLMM`&&\6&?=r1'- 4G+TiUVUiP<%l'%ěCފN?# paE*7I/r@mHV;0|&qMJ(;%2IS9: `Y!pZ;-O% Z̎'X!>q6n8.q?2p%q4<w}P ǐMk0]%F*NBvMs~3pa2b6&OC5&Y{( 9]bA<RܭNU3Hb9os̓$wA[~C,nq?4S]D_+/n=׆pJ7_{HO6wbHL7=u_K<7_@jnBr3RķDN6$C@NoH [tA[w}Y\5H3 a`m~; ~y̬h,i(LjN6GɈV }贅ATC.y* :Jb-{:"fٞ ~DYjH䎓B&OMn1&QGgvoamBaR-\Q-tu@b#?%IF| { zBUzhOb~edK^N8wD MhC |E?gJa` 3&O R[ލ}]W~%MJ nX-וx:Ӎ‹h.{_VRr;{D҆}gt[=Z~-S}FLghDWK `x<`sF;Q !M eW9 C4?#<xeC̻5dqΛiEa'x5}f߮2ZFx:|ݑz{]`75!܁0IT!6?M-`g ơ^9~6f7>Bxq7E^J!ө>1@p^I G1: ڪ)&dߝ (->?s NjxyE-va LwcYy&X#R$8&-FBbm@&B[!A``^MD} `U0D0yMUc#ɋ="ڎ^ͮYJKd [:#>o`!rz!pIFqk_x2Ě?X" PP5k~vZ]I@/-!'9#*T_q8l/L(wj)D3]ڡgp㙁|O56;3`ƅw!UاcfJ/͉,KZ nKSPgyy!sʕз'\ 7[;,b5tJ?\ U:75EfRH.j䱟sTeW)fg/VfnX Ӹ "#!gƔ?ة%\;Ya.S i AL4,R~SFo:;wG=|ʋq󄶑&vѡu%..dmV5)g4T QizVjJokE A/V)x0Z#~'4d&D WQ>;uܔC};iEWDjI LS3ʢ(BxUi.@q|ԉМBURq+Mѭ?3,|2qM(d)g;hjIrdGq4ࢫ,`^0s0VG5[BˮD?ufBI]$*S07Kzп"D,Y0ՂοvA!/w r'r-y#Y!,߅&,U ]8ncCXkl`@x',Cn`KYxj\$u8 DK=+ !QUL+gYre4SN){B%ȪtēA 7qVob(xF65N;Vs(@TH Xڝp:яiT˳EWA!gPpPGf7-Q9D,J<QIOdo pH\rQkg8*qUSpfOtgpQH¹Ԥ|8⍮r!->L|}b0a C|vx5HBq_Y/V)zIFɔ3&glFhL5Kș_3' i1?'zD?-~Gg@9i'MHL7Cf$@QKog&[QY|c`Hg=N/*"0 X `ΡUرULY'-TvPF8<`)v] vVw%\*0' ű_w|ʴDt)!1W$bCݴw:%|2F;Ny8W/L'>~5O{=}5g8GLo) E|ZaJSm򛒟?;"2}Heqz3[zы n2^Ry9"?1Y^lλSN.%L%ٲȤY&_m Plzdj1OЧ4y_+ g٪~N{ς 9ab,#)0k_1B=3WN86 0lWO{Mt/Wq86!a4>ґ MXK}w.nūkBhJ["1D=cTԇ}$P_AW|'ұtljɅҙM4I|-=듌V V & =^/8\!_ H-65sqMhKv`X FJ}}!ho HJ\18Y~#pPe @dz䌠d,tHxkwT 8zHUf@OK;OaPL1S{.1ME)gɛ7r+4šDXR\a84i 毎O%XnYd޵D0PIlZQG8\wϹߞ6/$îoI [AYA aƑ([wͧcw|A<3G<+A-Gb.`rH&L .Qpվo6ꚚGUMi_rj2.BWmĢ"}v-2GET~֘KLdA֐"&y"N0SgdMoQW2՘@AKg$fC#W`|lBKI.g :>8D73L{&ӟ ۂtj፜\B~mǝA+Î2aP/8æ2jݦ(us6m%`,.fwkLUx^' g‚Lh<-N'ī0B/"Rԝ2]wCMhSsWo>H5#E|=ѣhl꺘K(ފˤB(B &_];Rq.tݯ'M!cXBcpk?7 qaJ2Mh~D..U^ne%]\ bX]c,Z*]fe;\\[(C41TZ[p'B z"b[J62j`";]HJ< T(h jyғn[S2V*025 +a0qʔwY&9>69a?N>m\S5 /)ad۴&˱4KRٳcnVzh3dX8XF@Y]>;#!3p=~f4#9'S=Jg̨tk%ۼ/ړZNDZ f+pZdhػflgM@e ^{u7 )SP|!f7TXԯY1BsV<>w},'_"1YEh7:GwQKCًe|9g[ Ucv b3bY8}k9t^`oGLء,AhR6Z^3w :}a&r4*^CJ3j@qGuV-deŨaռ;r%pu~!vcǺq@VVhUX $kgam*v&o:ZEdZ}Ihrjꖳ{;d,4l0U@/3t҉Ë؍B$c(/ 8tU;> Xc|6p%?|άd4M*64sլ$2Ngۺܾ {R^?O)%v.~ `/u4yoJ#w =Ag{A,PIy5\-abQsdOx7QO(YFs)]fk!UνĕؠkZ:h̴-`(2XH3mZ u jTaQ9SnWy}h'hjKa<=i>Ku*dCi[$#4R}[Ty"kf~Ξ"!yS77qNN[M,)%iWp>>/vxr4wC;he@`M~K!> sn]sIcc.ק-s/s8* 'a@9~R|p䶻Ɩ,e2vB+>@x-'}ާW!j3_Hy/}ҮƿDx=!sWys-ԭOke  Sh"߇VR1۽!xX W JAIБwD̪T-,t߰߇ h4v!8|o`"bT]3遌P ȿl 2  &\ir9DjJf. 2TQjWT:w:?kQhL"ݰ@ixZ˜/qjׅ w=*88e/Hyp1J06ϔt:rg4GY!v\uIO[2*g|;)H=IZڳAE ~_t$TcҕF=Di 0E=LXr ^\_ԎuLV.{0 :a !?I3`vm I55z2M2!NRWHثLUwǒ* /8vqD8תۅgOC*-oVI,WxMkW ⽟v +j(F da;2O.X'd^;A:q=D/cك|fzǟRDr:AE VͨΤӗӹj*p]ՠt/W>>͘@SxlX2;/xxB { YEs2UGNo5%L(jDqV@$獔UymĐO7UA ttd.> ''9u3SX֨{6@}RײǏqۻ dANVJ"lB#MWbvrhh\t]38 *WkcRɅv;>-otO|:> 06]$/Qn|1HX >M#Wn]ku l 1$Z"#i,B<Nl/-8.=ҏc3DZjy+[><.Wx" *h3TuiS}-cC& Ў 7O<]qK>1\pJ 8,ۨ١X&ٔ[Q}Ӑ1e2ꊩ ,VZa]E4\{==' ˇ 0Qh1%̎^'oeWȎKɕW8,tmb1-],Mtzz&'Kr_=7,>t_be]־c8eVM.A4to:nK|WlNѴ m , ɛAF8N/3R7.K#ͅm i0d/l\9 @h,CӵU%P=!\9t8BeG-0'4Hj\Tū مvA(t,QZky vmmI%Qg !ZԪ:wtkT5?@[2|-|p}!ki}~OL~uӌP_+_,IZX\ "Դt)ƃ=QRâ`}+rY皔+JD;fV6e wU{g=NxfR0>SZ{0\9BEJw>݃@ӕJGZUӢ ̅]Ri0`Z77oT/{BF0Y,r;aIA,Y\o?`a@]9U`=%\{(1YpQRjO=}jA5O,Q7)<$]29Nl)Ojg]rV<؉SU!&TpMpEN{p|64fyx2t R ;#DUBd+6qAZ8 z1^h0SmmH_ ֡ruDٚ pJ98ҙZrUӽŎhe;>a( KSp1T`{;{٘ɱ >ꘪ<U2\Vt^1_xS厦9}yӋi}0G~Y4܇jQw@6@3ʇʗH)}#(3F r^MkQ%rvHc6}n~Z G⍂;'Pb D,?hF }^PS2ܭhRf(2K3.vi6}-w?DVZ64 R*ISS;۝.q,Lh?f K g[fq9q_އ.S^Z.?evh]1(ABq,(C@gi+}NՊ^P_R ki'LJf6 #M".[n8ҳX&nl9d^ t9F~q*ddշ!ЌXb*]G3iߦ$\Ξ+=]Q*k65TUCL [9 ~D T_n}x]3Z4Y^J9u2V5$[sVN@u0*̴9vjj9'@1>ko+C1cJ\vM|ωjQ3 queuZ@5/'%`.*Uu6#9D_j)Zٺ^5'7idEWɐ7ix!>RZ1zb裷)uBL a7Ѝ#S0U5:H/~e.Z墌&UWVOGm϶:Dtc 6iOq|\fx}C K)-vSFшQa Q/41J=CoOGlAFMk=wJ+'XTRcޞГr 1JHfm2#s3sii ڸ>1qBw3ڵЛd?]NB4!6a㪆QoiHp|݁&4CmAYSJ{^INFoW3Khfr>Dz?i(on&.S3np4jwq8-~$[ msۅOr:&߼ QbĻl#uxXwİ rSx ʚiq)s02 r{գmjBMC@UY}I4E)e2d(7?%IR1W-9ʦ`=OZPpvIK+Ll&pl'IIjxEHKl|7nl[dB=v4"6#69H9Ck}#l|ϻ_JׅZX8ri$iT$=*d12I,xl&m w֠1 "gG k_4MpE ePDc(7I%USбU W}"[שʛxFF5^~|IZlM: vo0|"ez! ep]`UR<[6㌤+iUg^QjRX)5yy": 9l,>ME0{w䌻ggvf }ݘxnxf7#(fZpU^{EbO][27ayc,)gX.<;3:|KHՆSjJ})yEP&)12>D-*ݐo|?l2AR'$Ů2>ޓK=v(W*Lu:Lq? qA2'Sx`0WW?fВ0%ͮZ^WǧQ)6ӿipLI0On4-*DT铂 &3 @TH0`nRFR0M@!–D`OM7B'TTNmq'"a hӧ 6>g{ L7jeV,Ld"Lȉ@.v+0y)eJtbLH bmdLk媠U!67:$Xdo75Y\1pF Ff^_Sk}!=>j> ssF?ȣa^E, ]3!S3B%ùn/X<*?~:# T.ɇgj6f^A/ߕmo瞜Źc#iJGs_@~!kpK-7o k23o+"I n|"}b, AU CCve˒>Q1;q1nL赃jsY}?N1h^fObפ-<ay刕=bOu9\j4Da7 +2=v&0rR_bD8s3Yjsb5i=;67y3T!sMwNG=VSr鋝דC`֯О=\rd]*ˋʾ/{>~ʶ͏3Bv)!1| Aꂊ8xm53VV^ 0e6r~|w* $r=zԟ&ڗ~&u{$CUB.V&52a -H\u&/ݱrbe [#"Rc;&?fbo-a2OzqTTG0,ntcT.TkɆ9EOP {2Q+FOr:(|ϟӉ2AQzB6#vdO[10g1(4:kusOnSQ"CfY˨)Y(\J59 Y8-uT>WoR au:Ӗ21 ~#pZtesx `L;lXU'٪(g0į )$X-~txtXfg%̑儵ׅjnDU>pR}c,}7 i=qID<%0漏1_ ԯ^=ߍ%!XY"-(Pn >_ ;?lo.OTMMO᧵8RSw]җr)Y%[,rz l]Jz J*{o.?i fʼ87mi퐻߄89rƉ{PTP WfWI DS4޿jι*wǶjBv AcqwM@9sm>|t KN;026YYwpʲ>E?e{jbsN=-RgFi|w/*d)[XnGnũO*Ot+D*qhU(q2ˀ!{32Z"N/&o]̊u=xgp> Q/MqynefHkjx=Ae2$Xnc[*?Wf嗺WAmC\SF/ dB%@hK̐6a]~[] \ $9˯pG#z v'+LE7࠙Dٙ0>EiǏUYY鷍:Y34US\0N7"{kz So7omWjDyq68) sEM1h33-= ;tRt*8W+(>$urj\@kThpxأW|0dn՗\c"MNL֧v5HO\LdMKB&*i{R~j%<>Qm!E 7wGޙv,A裮03+ğ l}S8_8k4o}02~BE!=YYIן ݔϲN 8e~a~ë$7k8 mduLx#Q;D8diyOJk:nz ߐEoEu$Aпxekɀ ,{_^^(^]{Ѓi^xvb,N㇊ ڤMN٣D0z/~#һh?&vQ 4i1yt-60Ϛ] kN]eH]Ti+spH2S3QV}L֝[Id $ǀh*{!7ѼUԙCru-C!6,!kI @#*b>kz%zU-ܙ>NrS}նR&M9~}E3m 5U!N@?#6J_}x䭴zI9xPfn=(=SiphWn-S`*+Nt=m0zݴrD'w Ƽ.%b7\-RAl9!lp#36٩P&>x燣k3Kڣ![]@2-sꓰ,ht I)/4ҵI"5Q᡼QL5;꽢y| -7<=O.ᮁd,̡8)*rKõx@E*z4I~˖PuKS,_G8ulR$b]E2#_)ݑgVHNT}Ru'٤S .IJ8M{IHsՉ#{}Ptm: rj_d[4"(mxB2dq$Ty 2|a#E]]Lݏ8Z?@ !R{$@Gn)Ra%,7Ssn=* 7/D"{"vޡ@3TE/$>_5Jq @T^hjA"OS7_ޑ Z;&XfڮSl?:Kb:#qD8dAKS!Jm @Kcwnu@TZ =a(loM%; z4)=ԴuEqG0!bWf♹T'Ψ{ŒQm00# d O>jY*VhxbV:+6V[*Gw )0 "eľe`w;qˡb\WKmGU,K". !?2WfsUW"}*T{LS >yB,%f~KZso2)`6EEQυۮ Efk24m[;D(CODan)svq{!rrGMg IUmNmc;@呡:讜"d!s kH  "U!h\5j.-^H1RW h:5 Ҭ k!U֜V) R{CH+'5]`.9_?/#lKA¥:TAzڎᘝ>40rx+# LYl(~pF|a\ ֪$EWV6ɻpQ| M8@<V(~b Dʹ8;Y77GqfYhNr{2˾"p3fh>&6a,i|M.3|.V^Ƹnk6v/5@C mAtT[MT.'r&jVyo{gh^"#|l/nYZ).~;_ցWc-K0ô\yȤ~6 n۞]3v1z&ܱ^s\ޔ)Eql|ʮUԨL/g bztOw,\#1>wv.%hхH9@-l'6"'Xz5KUrg s (0TDXXal;:>5Ɠ k5HMIb(WHzgW"B%Q @A f e9|KڣH)\U.R*? Ɠ%K'?ɛ'EUJ"pZNh;_%tinTaD|nJ]k "8H< yu,ѤLOnqN[7_C%rݪ@o^PngL`.+5bǣcCG}ҷ @/(O^]}bTFC~-TzԾ(p3ث5i~*׽+*C7{f\رV0kCf>Dtuwf#/9?a4[B!A o'}9::dyDs[(`/鼨_ǬqKw(h҅9.;3^h/p(p$jV9=PIK'od04<:qb֝yC^wH˔1ȘCmi0o' N&z%N tao9F{,\Ѕ<@1SȂ\ӄ8kf \PڣmE|~Rp0<> [EPg͈os{[ާ5ԷS(%̥\XA=%Uͺy&i bt .Uϝݣeе-|;7w{h5'txXة 1(,lM;7kU'3\لx>̺^HJVxaA%ũtC _{Y^+DH\{f+ s `'( )9 X7!6Gl4ʍO'*7yWsǷbnx,5w^}_ucF/2L10f$gob No|$\>a#}=YT۬tko~5 Id }м(wF8YWxM &$Nase!U$$\-tЂklD'p VV^J%"+^[%zhSʲV-!Oޖ!+*o vMQlxBuдu"Il=Px.su ,U@W`BeRk s8yфXvn“ p.1rA{W{OlkY윙Z< aӆge[">o].9]5ɾʭf7 N̒هfFJԟӺ+~7(e&Wj* uy,ۆ414E[݈>=) ^YL0qڐ۟58V7Gf_[G_V&}xlaCqW,c ,Ύ9K@nr;v=kџOXabKG}_K1R` w{#]\Sgn74ơ-6c':^b&$pwntV12j GDƋ=f g c:dlGv3R9i0Պ^JHwWeJr`^-`n5<* ẾŸnФŻ*xSu7g qI>st?QoEg}0߉ zЅwjA_CF!vbI+!*g9)IB?>l\GY:ް^4]9z35QPw̔v' 5m٥cV7 ׸WAxxc5 4`PЦvgx,ւ٨ƭтSL%jK4=$g1Pb.S{ł6/I)7=@r%:џ4>ug_;4!N0z~BCH%8Vtn#A=yTOKtA2Msk# Z!Zg8VW.xYpkBJg8zsg*c tmTf/r5e^.ARd ޛ4+GQ'w&\s!e0嬬oK$kÅO+cG:(Vէ #N Y,JP).A ;KiFoI 0W*{ͧtᰱNZlvWeZw/;(S:GGd4<3z! ]ƷxTs!ϿL; \1 8_OALUBVj=~c0#PcCh/Ed#|檎Y翕ו1 Yc}{6g6DG.,A'K5רqĂpr?_ma ̋pItPY9ԱK;Jޛ1@y3# AWWP*>|xo ԣRgt)Klؙ˷ ֛nbehIQ@E카(7{bu*U `PO׶1hV #{?Y)/rqd%αd`V&7S.o0ue3G3J!V2Wk^Y6vJg a1^ekŲ4󠰘FZ?8$}.,eц{:xMͭ8]u]}GuY{QBƏ3\[CŐKMZ 얄`f:+\,Qn S!]\ET\րO\  iA.e4O*ߟKD%r>=$G1tL73eڶu Q!% ! k66:WeƵy[|Qٲc&9bxHXV |0sk|Ql*lZHtǛ<Ċ=>to l.qk{b)a0/G/=]Iᵢ:*f+],uZ}6JߟMPwǑ34$Y(iN- p=%su54,u݌$vf5jGd5QHV_WAaQ4_$+Gg|?x&@rZ05\3^Z`*[id^sɉ5&2R1?:(hv)g<(Yq8&8ȧ5*fƝQ4% *Y*+P3ÛXM3/[r ,-s ܥTH*ɖV] 6qpL0L7ѝV]WLVWYȽr8f>Cn)vFރ,Ҋ~Ah8 &P+חQ]5j"`+1$8\>¿ 3fm~_fJORsoN{C$q'$}yhUc6АpNa#Q-_ Ft1|( oBʚ2{O,4RWw`wpe[5~3 H`!Z *:`FW_&#U|3;`;;*2~Z\?ZU9*EɁ.%TSѻ\UDA64qGTB)B4C&Vs:œKFBm"ciA#J~n\rDA:zV#@r\X+u0 ˠ_7aX==Qf|.껸UzR B!ef]#B|[m p"Qr9q<$$dߡR/m$R`"(WC0JXU1,?W$Y 6A@&-w:S.CEe EN+醅Nފb|ި<v,NVjcխ_y\5>k|J֙,0 m ɵN*ug0#* Ьo@= Zp@#CCq)1g)JJ(z,M40 0Yδ&dRfr, 2g͸ۆzc1x?Ej x idR*P_3>:nPlѓh<6"٨v!nF4jf4[*6Dj5i w~2WV0¢,tD+n"FjuXpWT1YM54GQղgEf7q5As0xt(5_ R^d ? neR~|T+J*^גAht1vHμ7.2 g^wT/`ﴞQ-ʝ.ee_)r `|C wz!7igD>w #mG$A<[Ɔ+P3Ч) Q<&AvU\Bقʘx3TNS| #q{ Ph,A\e(ټųcmVĄm>8OH2~-՗p&D 2hgdnv3gW@tAXVk8QaꮣY;Ԓ_31IZ5lK#{87JJN;7'ra[*4t.Mhy^g, 83@~:O X&waU= *ceZWgz.ԧLu5e1E+!'`'~ʺgVjTr|C҃ :.J*9hJyeuȍ ';|Ix֕ZTo>V];oE?{/|׵9MFZBwk&QdX:[?DE{ 3#3$>|/ tHC%np%͉{-}5CMJm~.m0طUzpQWFUGJQ,2`<0_8Ӏn`gP9Wy*qMm\Vd͌Hщƒ w J G6ݓ1Aӈ\`N8NUH;/خCQ>9[Vs~l,+K!k]loG܎~wjT'hBXDhB+DpZzŵ nwx7VOK|R``nZlo~Ɛ"'V!X-Е8s,&;C[s<9a,q.*b .ç2 g=[3FY\+Lj{r_Y턄Ӭ6c@_\th7qd\]["eM"5i-y'qVrjwdk~Ha#88:]^ԭ`Jp=~Y5:%9qZjAM0kS\֚],"19'#Ȯ6N )l4\^]29N^܇J6_uq|ӡ%wSrhz jȀ_ԋ$]a 37V~M|um/\,h 13]z3ˏ#xoLolظ!+آ ֹ/( ۅKd\]ˆWw'r ̆:߲FKQK"`" Gv8lY8GLKHftuMs89HdC貱*+=˻ې(ɦU>RD`n?5=ڬs|ߒ; @ۢJ(IjQ("].5}| /??m A%=j !=W}ϴwpOv5bgЌ[]ɥ/ WZycZ51k 8C4Idb[|M(ۄ-10уTtZAfP%kw&r,\?a^6IMa G5z, g9p ˊ%=un"}!LkK?չjqTJ1!Vr,2F3 Oʨm1 bo+,tQGb9|(}->h ԥ sdM\ s˗&L ~ Dh[ޠL[nvi (I .,b_4aŴ2# 0z<@~n76 M0(rYJ\$,8׼W~Y'߹.=ߴv*%1[5\]s4c?;OnU ӊ78dL!:(=op&]EIBD/!Z T |sj 31IiދW"Eֽ&W\D+'gѐ*p3ݎBưםb - n{`-+V_M}cYH2.)X/oCq\^nָ +rf5C 0h *K33;OK2ޕשTmK6URDY+f`{`C/plQ2rH:V O0"I:`'%./}AyҌD5IdQۆ pվ3#ZomlvXT=2yZG|} A6gE)*>p{}}OS=UHMZX426y50,! +Ql B϶ӓufKF-OT wYu5mtP'hz.H\iHV‚>#҅PO02fK)t5}!ّKޮZ\(2vJ/ƪXz;+#ޤ<"\PӛA*7>? paA~0v[u1.8y:`',\=ԢҨ]XE4ݭGv %FA;ݢH{?NON~iSq!){OOUl'Ffm#knV6ȝ|Ad(WVkhz5ɨ ۩PVI@Q--=T(e_,/C?d{[ɇ YwyJ0PzNEe8Z1#*"9NRB Yu7$fahx7Ù(֛w[Xr~g`V)P8s룏.uZѧY&`O n(i-N:~ދqr4$JPoE j+ &;^c9`v_>Ȋy Mlnjx.lUFJ- JM lOV5VMkyLr"28,f| v[֔PpRr'hV~t,ɞ0d\mmp@kocƠ ݶx*IYE ],x.HIly^N[1%ZKh U\Lα7>6K曼 }"EI8,n/%ǟځ0Jy EuHCu>5K``ͅՌ4 ظAd{Ã{&ۡwj^cKyN7a`{&ϖ3Ax`{ɼWb$-]8\M4yR*ø:tm1[ʑwbPL q O0 8cͱH/ՇML7p+' F0& k&ˬm; 0߼e4n'n)~57-e`ʥUp߀:CQ>haArDEyY䪌8TC/\L`IԘ8u$W)o+($zU@t琁ܫӾD/yDѥ188u7mj n胦G3U6}/G |ˑb<-pSCn1Zi2V3-qvomRe0E_%H1_јlk'p:BZ Nu/&}`B|MadszB炣>% LYt.K3In.էK@Fla\&:O sEޅ_U&7f)f 쓅).Ze(rs.qt s.-9|>Nͪ?/T]t9TDv*ۖJܲ%XYYXm+ t N>ȅU}=M2P>XZHk9*/ CT2~_8<`NRp7PZksbΝ@a>wL&(wncTӀ 0I,ʊv?=*gTL4O"^Yw;ʆ7ifXaDvYf^lIq!y}s/J16Nm6Ōk*=yq0šT:H8c֓$#oTБon^8CHe>̎m?CoH~mG/l`QeCa NG5`~6qGT |̘3]`Mǎ`ߜp[`JS'(QYcP+f笡#j':ߩĵK dw0%ik*K:Dõ }}Xp G4bJUﳊmL7DfK-SfhOXp50~zFN,'puBO [&Hg15h #D|&-TLDL0fiAVAL-Yp$aA)<7X`w`.o;Y9N'B[Ί_#O Z_A|ã1,F*>q xrz,8Ǝt yAnxva7>pGӂw"l=gI{fd,aU+6hlQt9Ɍ\\!})ؓl BkC@.T11;5es#Hr";chEɰx~=d$O(YڶhQ ^0qĺ|gH໐Ws9jUPT\x6&{r9Ҭ脞sdĐCⓢfqt}+~S;RzMdƬf~v"_b̘]9m%"OI@YzmMXG*xE$$+b,wWurn}vO`?~tHNfDM\{Ẻ2]qF YQ#U5JO,r EpIL,ERA{ ӈORrb[3tS?q?3oL:~> RAp.wzW͏$K"Ds&8}J/7+$Y!-"[@PW<OyF)j8n .4ԡ0WGrRڄ'*V^)2A]VD!~d@X*NЂy4-°NP< _~{5)#@tH02&DiD2h:&2^W2Oo_FwE 8}42g$ak#gZ$iH0 Hv3V6h6ųR :o;2fp؃9#$+SgUڰ?$$8l][Icݝ0=[K3H?OjW>"K J2dɯQ)6AA+[9ؤn/e=ybBMe[JFqBLnR)j~65:쾎IH_:@W{|$A>Gܘgw h`d|m[Qiɟ'm|7`WCe1;b&N9i,[[6$nܟ<ЍL:( ÀUJڌUm])xx i7R n,!,YESqQg#:& O2Nɦ"y/6ݬ@ASdzIb$ϸpԯt߾m2پULEYa=ҿu#!!>=((CW0hݳsj'S%&Je䍓 >,'bn'-Qq+آ 5B/kB.';Xl -XjCϼ\ tȔ6  :52R_QG LK4}-(m ft;(ףPKB >!qmm}VoX7ԯ{0{&J$@7Eۥ&ہ4a8QC3H?7VєƁaZr?NF܆Ws~" a`g,D1k! H}3}(DИr8;~|zLɐ0gy%D&JAU1F`H[ߧ}#5Վg]nL}XU`b A@.bh.O|%jsyf0e8<E* =5 C.x|%C%1L8Z4")YC OicTij*qc>t9 z&xQyMxFv{ &A!62˘9ַǂ_ @??Gn.u d#f޷}3fh\fu1zyHR1wGmoBUQE}]"ALQw @J-ic6ЅtSmbm TafZNlUmzD271̼FvDҘGjDCj' /\xP^?EڇVSrЫ1@y<\[j8g٣[(T}Y8#&a\-j-fw2-쪤1 7FK˩3_(h =--C] ,wwEJ?jYGlUgi1GI N3Xrى.:OVܢa7"߶@EJ. '/>Z^Yb?,1Fg"z׽N%R+a fB^_ܦֵ`_:"$ܴv>Н*#hc ɱ $/U|%AӬܖ)W~|rYRBkAzē8Hgf^l\}|ђ^ 1 X0 Rr3޸vHea%ef6G(@=^X3Bd~:)@7,VL2RMhU\蕁^N,-6g3l}K _.M1X>O6}B/Pyub[G``]7a(Vd4i8Gl>$ꠘc d#bw:!棺&~rtn1˾ e:K |P_zoJ +h:q^߲ v-:q"nJj=ƀX4d Z*J>O+كZ*_N"Qޑ2Ux^z{b~f7qŪcB}#;Xn {LMћ!tdA \U&ADeV{ w[Ciy >xHJW }2WδᣘU{W#<(OӠѿ=&tfI)8 7f"mg-5 )ΙU|7pSJx\w; i9Q;5C/0ِLs8r' ,ae`J(H?I-QzBv^ޓńS,NEtT,Mţ`M$W]!$8!9sЕvƌR`cii4&у9Kn7A1exTl?%v.3AHW6*5ڴ8]][ۛqpgl~z1+x3s 8O]JH_'WuW5nLLE4oڡP7wHI#U&1TcC=TsPJwLUN<`40h+5!)P=*~kJ& 0ȷA-UF$,Ow4!E:X.sWÝ@Fxi#M"Dy."xjsجZ۴h<Dž 75&(8YEw>F=EjݓG@ y8@͡a!tp7tZFesEb0T!NEez[_=+eH#?&7ԋ!?aA#] ,Gw̅ԌUU~!țrRH[2^"֚ڰS\{:c"}%NMKUnS+~kPXf2"%}[$$1Nb!sR2ۮ0O kP@wVDV6x+ٻ#gwq$΀NS=_wepT|N?A.IfET^v}Z=Y(>W v;֯8+ZWnog t pFYʪ ݲ@ FJ*UD,1cu5af[;o/ 0w,#bT:q.AŌ96)\3p8hu GE^?_WmdǍxljyO|M  XFzNXs2Y&QC7O%1LjmR l'mzM kUMdU%yQnFܨj1RQNx źL>H9cM$i{Mr3GrLz_O3/U1~ۮЍjʓtz ̓7Xe䞚˔N]#ICWȉɠieM4zo4EV^y0EG9=wuzf ^v5XQk uYЋ,ޗ3z/ 36Gkףl=A[ ryGfL͙V.qgDUʼ4K]B?Uu7G8%8pYӃ{9HӅ| =n'o% 9y U:u\6Y4Ć3F)2)`BS+EKcg1 w% !ik5 ӯF'fN݋)z1Nن1n`8$J8nwZ8(finNo>eFoYz+m\$F !B1ⲢNWy$.oæftkg2l8.s>ɑjZQs8y\\싿=vPԜػEx:2S>!vl٦b-E5V{k7 8B6TOEvXpDC;O4.qGhW TJ:b Ъ;yBr^;G H:哒sFLU6).%9MbXh¨/,XNJ"3Q}jcnK hL O'uAjcw`KɊ&.n+9Mq?*b4B.*ݷ&W_"亣IR 'W31;2}yփo&GoR)[/!C(f,gK%VFPjZ{.TpZaE3o-)`W`'Z*WQQ!'᪵pԶ|>ߥ q\9@Iy3b eI-8OchWa#~j,(9&b[\EvLoWY^VC#iwsEǛxAIBiq,ʨ~@1|`M-A{jX4'm+?{N=82;Ի9H9N&=<F` gtՂ\nP|^U"'1C2YJÇwX2FBsOrx]/ 5XK Я(@p~yԥ~eNƔ&Pt/8/ | ?֎Eκ~ QYD#+!r(3]NE ڎ 7GH5%C 'T0o { °GcApOHx~V&d"{cW IHXJm]{0vx@q8 FpԊm]!)s=g^hOmZbl}=Hn`Rn<òْ$`b:#yȋC~jrh)7㳚=z?ᕴ-W8ZM ZQ-sKa@\ǐZǞV8l5 e2tky}g* ߌoAONʁҽćD5lÊMqKL TܓWI} n5'V|O묒-wݿH0(f'+%"[R[ohGɋ@k[B;:Hc-YK >WD مv23[Rnɪ|Ix2ZS`N0o-n;cXH\D#`~G1ǯ>;= cڱ*B%UjLekrmR2,rd'f<НR7&{NŮ}f:;[MƄl("W 4ak?|Zn D<{f Z^``وWr7o&.0Mŝ-D7ag4j4&RxTzٰdW$ʎו~TU8`*d u[1b@}͗ӒyIƓ+O4Fsseu K@<4],qI8لˮb/jΓ+:]찙 ;Q:&vhv5d'7/Gf+IX zGz 0vk\;{38{<::-27JqºKy{O(n)f_6zȋ%?9i4̏jޯ"Ӱib:h5}=C.*Gr~_yT+kKK?SS̷{89>9@,X΀o{YpZ}`(,# c'qוJ4,wp{dN_L" !x@ ߘPspK:EJ2z1MVau4:;=Tfǔ8ubBEw옷!J!mwÂFUl x&͐Lyo#Iy7 =\X{6/.FJb:A9p|k]f D5`/pW(on4XU=ȓM걻"j cr-`Xk^{r9xӌ->zZ$Z.rHCFTDU :1Sv3@$.,VN}an4rfťB?p6eY)PS 8P@><,׹7&J]4U*K+)_@@k1BHK<ǭ9>~HK{utF]!dt5WeA0/RakZ9[|픋 n[,nln  eZkׇ/(mc5Ghe%-=֟4^I;JT3)C Lf,S␸AgLa2( dJrvMՂ65;ڪ2=Vy~Q;3ZᔙXU%U'o 3v!ALc12>ړtjҗҊl_pD R/HA92@ZEު0oM[p[T_̰9}$Yדl,b>;H-f-kw0쭥48 Ps%D| aLpDI==!oޡ;NBu^! OI͟m֑ZZ;29Pp(AV&]y|_D)pv~H5[&-\[ʀץe BG)h)ϗ.Di, !LO1N"rc[鮘fʭj.k&H,kۊlv,wzXȶ83r[`盙c7!sѵĂŶ3r丗ju[F8(0:bBw.Bġ$7i6wV~!x dp23 v_lhU RвHYY7αa yC0j3 cz$񅎸htDa$>qp4uB圸 0Ay:UUp!|f9wd8&&V\c\5áh02M_[AR"$v.PL ~'oTHi=I<mfezY.Te3!/d$y `O8)K=M- }g[CUdp'-."xd0彜Bf\q0~q+ OetQNW6S2u\ˈq{{BX./=P?oň?YP"GV"!ӑlgEPSzU!]0eS<Bˎ =RSk'd 1L&S\}ω'i)t4$M9DMD|irO[Q.aѬ t/):*҃pe8whm'U_:,h-COXi9 ߝYq$fR2Ve:4cҒՅ^ɑ|XqZ/K^\91w;S&r#+2IR%t_+vQ$qfDcSDXטCxF7q :zڽ.LH [9Vڥ:gWj>TUtqw*F"]B*nNf'!yKMCo Wu-cbF9K[~|ڣ,Qf|V}El]W ɞ[j锁k.(5-MDC*uۊ=c/<;R?kRBؾIrވ ʹr>.icȷ 42,OR!Uw#\`=dGՔ|d C,xnr= biv V{TM;Lf+&-qQ/a/$pPċV46<ə8`~y;Z4JCVDtg767}J;C|aԐvM.lN.1Cm- H#->}lJW#\cmUM)=K@cm$CG!$0#QrQ͝v S ؞'q>]=!/zډo1GTch ŚZ#UXr{1FN{m.|F(U̼Cq#ܵ7xr/SiePZpvQw}1gQ/锵Qvrˇ9y~0\!~\n~`_gNlw6}{Z /JpL6FЍPo)49+0ghSyKze<2"$YZ -jގ-_skl;VT>110UAO1ى|hE1^x&qW[V۫UbV# C{gc5B~6a1pZ@5r'RWĨK|U|!}ؙ鷀;oMI`aϘqoPHor䀙(^tguMݚgFF {Ls.1v׈05poꚢ("WgZã=t䩉70~lz'{[<qFҤy״ V9MBgd,a:],3۹N#/ȥp H<'{=+GQ| [:~E6Yk͡NMWPR < {!Eλ^"VQ\뇗\؈3&\r1\;H士9NdH1q B |/՞HKc#T~8Rm^rԚ)EE³=! tED]T7Pr34_,V K&%*؋Hhucծ>Htߜ3Dixutd8`}0}#AOu0 _7Wj 5ȉJ,}(kZ1^v\X{JK3 =0XwwN9$'#5 ۋ}VRz:Ө#K+Da[l$lZe,?|63\}Uٙijs!k, ٰ?s[XGMa!(.{XYq+C`k l8qeX-r4 SkV"n] qq`[*iȔ<@|un>/}#bTEJb7VCcĔ؂\ސ"N'c8vػ6}7^“{bRؓRpAK#߻S) bn_ 8\~Hu!P|8Ƃk{[o84+Ť':4 J^g0p(Zch(Y";q3F(ș=)y/ʛQ='W,L4]Y\c ;8[Y(LIu>Œ(0vLq:ʵ"Vv`@Q+.|Ӷ3FjQ:r$Oc{ZAwKz]]{25b9G?Ђ]Mr_RŘ~%vLUҗFqDG]=qi@&gQYr&Vz!+hpPD^ &/_ZUL~e=Ǯ $wwLLV(p\~.-?.*<;!<_ Mi$(o0`<8?+v 7P+x>S5vNfs ]}Ju⭥P/NS!!KLf>ΖIVTx:.UǩC,GR-oQxn2W~%=unǤ0_o^r2\H5, {=rfvQEEpo{O{vl~%)cV&Dp3'7w^]qFN%| xq> =Prs2nl-AVY;JRC9ڙb[Y-MCv&}dV{]@Wx-++>]4dr#k}!V2RGm?zn_WU+VU+>-CԀrl"nuEuq;t}7U@a:A"b*2EY*j>*g~X2ДuG}F* _id`*0ztݬ%l?Sz\WY@iSOpqX+iT]xB뫹96U =6 ,g<šN\$!(Hb B|J7AĆh 0-֢r筴`,{kt%Ƥhi6˕9a[Pz)H $bں[KV|CY^a'akufVrb-<=A' N/lu :wt%W28/cXq% M N'݌3O:׻$`m5醣!Ֆs {Ps%-V> ٛz~,ծx{J* ¢A E6 嶄Bt!_it#b鵖[[R}ç4N`R\Wnmf wxWbb(n>3z}T:ZfEH'Gj%ΤZܞ- g/,Z.u(^(@W 姦 ^"ЛϒDZ5Iw,~΋"yK\1 b!gg&1ӭӨ#rh8@:atҫGŦOHu[P2v4Ut4zedD{i6[2/K3`D yW*?NMze]0"ضtځ|5'>) 9PMdm NRmo4c+*55ق(:/ o38TfhG='ZU&M)n)i`儿Lס- v=DG2u K)\2bϱnxZ2;S-A6S'ڤ[?q*xwW@U `UXffdGn{.f"\)&¼. YTE>5"]SʣC[XZ{lg9IYb&9Z>Hl}__0+l%b>R89+nTyo(ܹ)o@Z1'.|gkD٦@/cif'!&2/5- ##5].)I,BV{X8-Z9?Bu(@eWG1ŵ t;iO XmpG|0 gui9v^ wrr::'G3]M0*:M@ c]\MlaY%wiEazbOJ1HT3Q{G% ^ىB昼۬o|Z޿ cQWzc-Tc4nNV +:5g ǵ(go[nx,}]y"0!En-5/םwVz#O_2kL979rse*9:=*|;i]/{ZܻWm+7TỞbj,= ^$%[NGwcˣ_zYO6w?l WђLc5C,"jdV.8!{u^/]`^ϱ%(ӕ8g>NT,I/OGKU8 gO`ܪ@NQ9ISm \yjUZ-BHyXGSb_ji)φIEkmjdB66-+2L}F̓nV)UPAEI6v5<=8Vm('86s:+ +<7Jn#X" ~gI!lA5năhO88= 6;+6Ф?$Nbi"$ʊ|w o.GO{zЏz[(57:ٽLH^09MFqm<!/xe3ԐYv&oMk4Η+Wl|3/sьbp;t\93y|VF rL:o j6KtLʺ0,[!dt2M YcǑUE6{W83P}9ꭲYw4Xno4tw_Z r' 0#s\ARnm+]=%Az& I'p]&{a=g-3O17r%BC(`W>ZM(Pꌗ4pRSo3%a"+ A }3 LhĀ.͚)7nF"+BJ:%aZG weyckBp.N}ԡ/ J4}@[S\o[rjG%]X`fܚ΍Hb2VeoYjoqB㉕'Sɿ ;W?tYYv jbzQcԎumM?lVtKws狌k͡ s;G!4W< a/EEa=7ltk,"L ]/(aȿ8U[J-A&g*@ 8fgVƭ_y?԰_vVט,Slqs["P; MWڧDz 'TtJh۟ߕ4+g8CɪFcSӼHVmOWwuYE6X_bt/?' >Kx8$*̢T6w$NU!(ӆ.<sW/K92 |c ;-b->YYzJ_kA̶[R'|[ I$%(6̖hŌ^\{=EVuv1}33_L|+i`J덙LP-Kf6uCϔ+ع fQؔfm@ !v]!fp1'TUUlܬKƧVi@iV(Z`;^> Yؙ8+߃_^H)> B0N b5(]ΎF}=ш~:ܦ)vZ7Bt*p,-Ӭ4I~B0C"d φWT0E92}=4CQxl>TL%,^C>0UMnRȕ!1Uۅh+HD< cCz`+fg|avpP&hH&ЭIwBJ WԁKMC @^omDKPmP.g:zh,pLy_ S~LA $VHvYra"`  Ey8QM:;Tw6m;2Xi$+ l+F5D*_R`pw`GlqB rx'lkGK{F6m!'#xkmf6V3?g={sA h6qpFk5}U3=G:*gg*[^8.@t[2k2* tF (Χӷ냀92TJ N>NfkHWCX)T?L'U;U~U|R `{Wzќ|'hc'nc,{(XzݽCh+خF]fh-P_FL䦊&DY׽۰ Am:Dy;g}^#5 ͎k 4ds!5r|'PYug.ގ8{@iٺ ߈n=в7d%f.gD Ik.dv%G=`8)NTW{qSϦdJP~#>n:=v, }ó*^ݫĢLoNxF P49E9Q2J?U:ߕp2%ʁ pjj܏5'1 }P$U737H]]pyS.TzC<}ځc:利H؎Dß#N{ќ1ޫa`zs ZPư$Rt1B>Vf.s| #1B?S2~Jct\_nv&ƄkqIrξሖU/v +/BK^z.KMO\5 IGp0S!O~EܗFfrOЦ%1zM]!IH}ӇFHWGżWxCG{M>#_3`ko 7 ~b ~pCf1.k$|giDNWH4 5F(fb| 7Lh|:*aGnyNCyU<̿ɝרѓYj; 0@76eƏ͔9+hDmT `z,ř^s (>?.E)|}#wh;C$ecHB/%9 g ߬63P;6,A( 斎8w8~OƻWDA*fHreܪ@TDI<!'Dē]֞FJ>NY`OIv})#WrEgݵ.ڰf"7w=_-ٞZZjU{^i(.r?/<7"{Sp|ysSHbtBN]k'A-$Uo(w~_:p`sa {Un-Vɵ }.0N8aLw[%V)bE ԃ0PuKة!V7>-T<;nO= 6xv}L,HBd0[/etj%ޱØ ".YPz}KX7a@^[+fGLE!*cWuXM=R?AQeν6☽X\3 Rl:hf퍢y[  J5s8o= S^,*_km+7Ä̵u_tqlACwڹy)qK`LI*}uɍpaӨ}nwXgO_V" C \mX"YU8QY> rwh33 Y ǀQsKǓ{{?\@9L64#+:CO" 3BձD H+,5mVș:A]NJPn$Q7૱2WkEīO\Dl$\5$`ΕivxˠeKsJN/ܤt 3"d{o8Jϡ,܏}eOբϭ5qJÂy1Ǚiu@zC斧m`+ (6'z*IFb2 ~=y 2`9XmFSeg7D]^u']޿Lʉ7L \ &(j]Ֆwg"QOߐT&k|̚!^\ (u3/gNT~@$!OeVufLE\F~q:=Lvz3JJ\+?v2NJ8?ۺաH>4ke=+< *|8xM ]ELi Vo98C] gYMWͅAyzlr~ڥOZH F*6-r'Ã7I[p>$5>\'@-U6Ӿ&HD Z@48*?5m%]z" FyAb~E{vИB'[8e YQAO%p|<p ,۲&;vQ, tMS bՋ.K6vi9RםU <~{Y.O=6^-pm@%^YnFC8ѿ/p҇'%P(YYw (yѬ2(:"WVHƖ\m|+Fh;e>pX8lC+Uz4Y'b> {K=x%C `;r#:kp7@];}>47 6*/U)s? ªjU)$ǁ#=1xeeX"-pIeȋ;FP7ut! sR1 CZ cIϏR@fy%%Nn_GC[f?/sɐzo~_65 k c7¿ͨlm>55kXAUygF( g ʹ m:1>D`*Rï~^!-/](b6QX7Q)k۫>'Yc`<ԹX1b_%b$kh6,!ꮄ`x@0b@2e7yxCq;iܐLVrи]ՙ9J#.4]>磦1ҁHK, }*t¢e^5:ț}Tt F g-VY_qy;1Nl%a y U׽gyA ܹw#͇L=X3.}p QW5܋X*7`ܾ-޽3$b*C-Vv0rB?%tN=k3{ͼ\v w^MVs[3ޥNO)EϺuySDpy% yq'idA->L7gIGЈ?Zk 3и̌ӷx6$5bܿ-A'@N/BPR. w XhQDudzj8)0;Wpti$v.ʛDMtMޞ::%#x>uȲЂq8WOk)ͮ.rߑpROB-t:n5s,N/Fb 0rUx|',v(z'DNL2VWpLfEE/AԫUg},>tۆ#ɯ..dtY4C"n 8Cz8г²և{ 9ֹ2;%~Ou;oQEP(,z^T#DU!,윫5g]h(%̱=5ll!ic1hQaQj9;ᖻ4vp YO M猪"BӲXۘ &dP> Jtiςc1A;-^{7^~uQF`k3i$3?׍?NaKU7);үb#q?:j=5.Ei|f"m7i,J$҆DSZ@hV9zU.ΐ~$@oqZڳH)u_~t剢x/Q,,N۽UPbE|^<:90?C+VܷV $?-zYD7FìƯړT+⵷PF /Mg-ۻ ҌzyEϔwM =/q}uՋ|X9 ԸyQ8nqQ;ӓQ.X_,ƆVkGKVlS>8f*XGP21^_5:\ 7 cӶD;2\L$op]%J(pCUs/~[hA "%ON*$3#ɦz=KD!G'SkOMg9rehD{Q"sS(&i=isR>z3:DB7Dk76{8Pxy{.xC/vxNKjn"\/3@.03-`ךPS|/)5>2Y?FԂ0M%|r' =~?ʛ"ĿԨ "z[~ /LN% >p=xrlWO R1~|rtw[)fJ?<\B("/z'=ۻ;W+ϸ3F @Fx,I=~KD_m=PEq'XV#@4) )X׶y4pyn:oh3 06˯wAKb!CVh)ěkI OZ?>T)h9/3iNOY5/DɴM/(wK2ˇ)yʮ xk 63.7l=_ p`(g!$>|l@a٢7expb7y@byLj>;۞SާfAj].2 ^+4Pwdy@*ug'dF<*-]c@y%=#quPo:dOצ!1q= wfHP&hIpŰ?8461>Kߴ2S{o)d"=<9 nNޘŶՉoO73%2ϼ؎*XB8/" ڇ8'5mATR+ bB/wh6ϷM8(+8 6߷&E{hy9Q V;;!9S Jeo}%q=|FK0;HlÃ곊9Mm #<. V2! 3Dx=o#J@k4@eE.TE"9u"Bjz rRN Hb$~#e~x?$._xܑ pnQ ~b f r|`Y˂(> ޏC={gscm=1nlZTٱk1Ĥr:ʉFtZF/c"Qin;XL8zgijEV|#[[7CBg3 W 5-(=U|1 a4F္J5i 4ƥNpbF)+ WιvxmGE7h@knɖH}t V*5r+]M2A pWEe!k[!uҺ( aƅ\JUYp|T #| 5BZ_S"X0('bu/Fs,A-˖ilmng6~vX[&Te]1yw#=cqMb>{P2,GI썖7A. A680,Am6Gq`J km( _蚷 Y[]*'C(jפV5ny35D}%KawQ*egJTAuA#[qSeZKѩv%Eqݶkؘ`xuH rɏ`gm|5\RѮTOR $wb5]"AD0q㷦1ԭ-@Cu_mf0K&Ε6@xD,f=i2&4D=?!{a \ J""n8$R4|TéY,A*v.c+bţ7t'f|#C'5I~%s'z``[ʽ?[Sac_g9ƾBƉo`䝋AeCn5I^p[W部070k\ѿ lD_Re(зUrׄTr+@ME=_lXwiɘ >>El@ y#oQ#8p?{E+D2s[Lt^kY/*}! ~g/KJİ W2Aࡑ EȈ:io޾+>fBЮ}-~$̕Q%)2fc]vC)Z׃xʴ@rK* @STԫn}L[}mjs7'5:ѻV"os$g`mWh,CԡJVQZ(y%x EHJ:Lq";LSuԁ @vFX41ֶX$J 0d7PT Y!X"_䬑O;l!<9;Jpwtf)V[(PAshGZ ?<赋dvR1 [d`U1Ayn[?m{7x. u޳3>aEq`bW #"2Eu}URnܦ)t;诌߂jlZ&\`XVa>T&y<_بC3j tS*⵰yR"ZƁH7so]8O:<|d[sTzlZ(|.tǥP_ЧkOx¤cCBXBw+%P-UѸ21=wC[1*6^I5v40P5M5uuWheYwUҗ~ZVU4{5i=aZt2^eX, QaE]γHi!KCVliU'ux4tO/Rz!7:Oz>@JF҃ ZcW]r/6@m%f 0,N݂Q-|aWYߘU+I1i̴7\fcmN #(vdF7~6?*rDK37.RDm_l6Sjx+P-xw B1c2NP3;7QڕIg_\W3gyF)H r*o|2S@Ĺ#{zJrG>>\cG1  K)M֙LW]tXAhfu>p6C%Z74ޫ˙MxczW/6BM)tb$2Ii4PO끎<;hzJRhW[-4p%WzD=瘆7 [V{ =Q6.?lҩ dX<hPv͝HNj\&E+5T.lZ]Hs|j>)+IW55x <<Şq6P9XHq#;EDwf.';G' R ;e6{n:qllG"^ r]ar?4"l^0^:j۵ fk)Ttkgm\[L#ޒm*pcK ZP ۮ/xFU/8טpƯǏHƷE>񩤢Geؗ;̑jN;b'ܞL拡uIxb{GR34qzPIeBHVp^QɃڗ8x pFcҸDNb^`幙7h]&{\%&~`fi2SIg!]1Bm&--`aƮP5y."SgӠCo ;`V{j-0S.1{A>xCC@uT㐂^i A[\sR+R5ǵ+B&IdֱX΂Pp B!6:   씬t=b~)xxPX.jMWlQc϶S< x"U:G;yx<_0PjΆ 1VOwsSd"m{:%TߐN]c&[\w: )xɑ0>c{aJ3ڋ;e0qD?O3 t ja"drFֲI Bjo 7Yhɼh4NbOҴ`Q',0zT_EJc^L-#s 3"68^z+ȕ4`2]Z<F#2; ƙżBޫnW>}T.ّ݌;EZ1jTԛŔ<W1PE vgoԠp,vz ~@)j e9jr G3[\2PiS}1 7E ەt^yZ9,::G^䎨_tX&7{5h@S+O噭D-]6By׌P7#~j7hE~ [uf<-gg՞JG'zjg#l ~cv"o6* sP+ð~Y"Ƒ>2Y^Dp7<%1Jc%[]K's't5?  YOBOh*QvsRkgH|=6#␛UHUή C:?NmѪ̃oH=h(\7?%E9cOʹ!?$| ʹǂ,dQۑ, J@&H#`~JZ: qe'y=gᆘi忕]ڐ4mҫ4NM0qoIF#Գ<^"_|ژft@62Oڙpf<7bUbHf^6!|PCUe*b} 6Ʈ"'."Zy6LAg20Y--5-5Rm&a!ȘӧVa_}Y;$2ZE7_UGbOgΣ`Z%$pvY% PV/_Hr4?f6Ԅml|`r^q'BB`ڠ]S.P?%E i`)l.{ 0u8*,Quzd451=:LUq0-]lDڑXIp 9ʇt/ֿUl-~Rk<לߌ- ʐ3mo'zNt1n4 zii)Ӌxzˡlsw%&ե]5TUS7҆l*G #ه@%BDq'^V́O$7;Ae,[7]%^I:-A(jLVӓbU.9edYMWxYRm_"twM#UEd>!x,#YtM4! "q9:C{>8k"Ck`Ofk7Ϣ0wq4*݄%WӌLDP)cAl*C ؟{4| jJeWmw_nL3bӯ[zrԐus6:+"#+JZÒ ]vduJ{,X|8 *BF&-Ng1imcN3T;;+cؐ'}EZJFi{[Zsgz֒EM/K XPH~7GYdD10Kb6B鰸Ey`x8۲ W)'UvG} ݼxr @sQ3{(&u(zq.GG1b3<"mq.}cӧpz+ⰡJV?]JBFҍ*sЕa-FknL5NDnSzn9E.8 b$oۉB ۸[+iܲk>ƻhnv}#uF2 as>?T QSIXz}:`1*(6$9ɻ^R0) &!#||w:)Tܟy͟6`)*zB39}L{Ţ ?cƚm q%ش m&0 Pkᣙ d ?$_0xv.[eS7؊͌,ѿH L\U`Sr7^|pL"PcRm;U쫛 Mh썄62nhFTˤ FCN1cq ĸ:Ae-OJ.x8QGGEb6)ftϜd;&az%f2N鐤"+GKnSU^+Q, *޲ӶZH3iicRE9-1d;44/4o̕~C\aꔖΛSN)gc[Z˛GҜ%Yszms0vbp:3#_kt񩦽D1|]].jZjWECSP@k6IgCiб~d"]dkO,|^qzs.OL̽4Пvg(;KC\G$SU.4 ?z#Ͽ?U\[uF>QTA8]sϹnE "M&=fP!t?wcE -w{GؑJo GNUGLl9䦝x#j qQ)hk15*r"f}i˩`G/sm~p[L4teJ!Ӊ'3iNvy']Wߪlc %wr]}Mx> i'P!&MsD:k~Qc(Jߝ^&/*AmVV`=Q$,DYeY2-Q'fmG"P`")Y,vᰆ^{* X}x$Έ ͱ.S6$C/Tf2Sƃ.`JF=YJ1#&KkoH!0ӛmA8([6Klor~ );WuV*n\#tx-gR<-|NmDy)њq&q K<.Z1U@rI6u;Ʈw%o2zʹ~tqR i: Û +Zev ? ?Ğkj1X(]~$J8)^WB"1%7kW甐qK!?ĵQl͍Z7Д+^B j*6dU'kplI_ɇsZCw Ǧ3>0mzC b%xF^3ķVjFGEchW*$ml> Lu‚'Y\`jbxw'>wR2T%-ycSe ޵`%7#ڬ'oYZ\t$"774(5W) ]aXNE6\y-I$" .֡g8$&:'P"IQprtִnS˹Mtv8^t!CaH:$W$4,r:hU[7>WDލsmǿ ?jF{Aڻ{#ቩ_ίTV YE8TސFi;ExsԌBh4@ԷxJԃ{cΌQsF'va]lKE)[~ gfpѤ;]Q˒2^fT :~u's_'4?}D^+V ӽWqAo+q˦H79Iꑬ> ꭨaAYlwx>oԪ-3Σqԛ1D. )WogXf WR@/Uc81dٛژ+Tl.:QyA?3KCQFCbLJ%F]܅DxI j[;AHst<)aQ4@ &7$3&j^a_pJhkHd6q LֈɈzH9DF9ji?LMr7 /&b:JʅDPaKBrľ0Q= OZGhbO1eQF :KTOo 5`l7B6ʳ j.<qo}/Cg3+dh:GoJO{i4>/>唃U/P>cGJ]tP3@ܥ=HddQT+$B~l]lui r8콙 hڹ@@J(F2"CL ,\?VA9th(|ꜨS_zD,\UbZR}:?3èg?X ڊR*/A{AJDnegroH c:pHЙ #|جTmdcmeOp, Z_  qe)JyS|l#_HI>ҔU@3uPyQ}Ӆ45|O=j`M~두`"ߦEKK˂(GHn8af!,! 16lG?=ԗ,E.b>bk_7[n8i&(?Zc ,*DܜԳI ,K&r@\ݛ$4uR pN@RشK m42)I@,R c {qWi-vy {3Dd]uVT{w6DkqUʪFY.o~Fr<7Nrݜ=:[QfR ֡N^읋6_(ZxM)ssvEZ (M#J:{= <4?X&gkE_?7,fT̄Q2ݍ㛪a1Db/#AI{iCm!mg9D6|Ojc|K^1A=\xiN0"3w| +Qh Liz`ѣƾoplR4ŭF,fذdJ߳{/+(U[RI"2雓&, `C?^[,o 5 !~lwcX{l;^6en<93'T`-QBOT`2a8_AmDVL\gH%mߤWʴ{ ;O }HAXhݥRI51dcI5V-+67?Yu]LW7{T!.:?3/YkSyI{6 #qh'gCLO V\&ъᖒ_fe#Bcjl/u0ZW}X}6ny }K{;?h*b)Wޚ! L"JMTD<Үt^aD;.㖕i$v%ҮF9vst64*vb{dp:Hī750op= 3 d:)x?5PIB]H*)C˶RȓT{\J,2V`^SB|57}Jӌ>&}-Fn#@o5C*Se97!>E[.Q[n=Js+[Yޏ;K6Y:U"^6S͞XvObUS>/.DE;Ŝ[nPb;!bhOBqDV*H.j4Rga:GL% _u`^=K#7z;u$rxi&"Y1UqmS7e XĀ|躨 1O7 CbarE"ߘ@[]tjEy'zl{/&K@/Pɭ\k#hfi,a4T)eͧ*6W7L._ѹtXȠv#I$dKGƇݧtFB@74pq-LbYMU T2-SˠSOqIEy2gӣ,4N9迅I!G4zb@$,d Ct1q%H\RcqabK*dcO С7qHo5KPgpf}!Q|+r/d zGדGS$:DzncɿfW;tXH[c)TG L ?\/L.ôJY!K?V`2>ۨ%J9g~4C~9Cy \[ S;R7RrPv:wcG6݊ tMqVgB;kre*<@ݫx}=}F7?F;y9P''{n~FH*eYL[]< ݫbS*Y jܤCӸձjq*=[z@uvߟv9׌:2QD ~ 8Aaio>ф@C3HmH8Ʈ-KLccNg^4린1$1; @A` ktL7yCYͧ3kƟ]7v˵쮴A$KG䧞K\܌0WtQOJc暕%D ڣ4(cr2uƓwdy&Kڹr WZ uZOIa>X9zͿA - Vyՙk a4<zn(m9paٮr'4C *=1R~F.2P`Ԯ+s0uBX}m, drׅRus4zl.nXRLyh ά^ u2Y[t6MzDog>җiޔ,@"o-'p\aG\ QԞXMCΠ:_P0 dɲ vE9&+Y~ҙP0JUnz$ o|6Mh5=q ꠶%2T]"F4b)|N.H7ʥBD=pHPQn6:nk5(9/Y&&B6FCuÆJQܦ[Dd5CQ|r x6ާƣ-.MrcpL 9Z~>8\C&SUcxD("D>i}1uzJLҾ8ywz9gHRg -e(J귐JJo6)иfͦ;0&(3J51(vmE $C$rj\5JyPdCm 8uR09φktG;Lo|N.k=ԳQܠODk^o1֨„: {f%smi}};v);Dog9P~+t.Lvf@Urtͦ(!Undw4_IӠ [ rA~cVW-lSu.G;kQpdz$4Z *-ؓ0e✅kD~[zM?Lg[uHC@j5xΔL )y$TgIuZ=,yEv=aUk&Sr0om4j܊"nK,j'~SEhEuY>ִYOŕs5N[/A :dJl旫QW5^d5[ +E> `3^oyyZ@{y:t?H9ED{<߁mwl ^>ALdcSĜ!df) fPJ.T`$>'lvaj$Le=~ &Ø{ Qr̈́vK[tchhdvL2XIAΰW]ئ9Măۅ=P k4bo٠➻hm}7eD8HatۿrBzK:SU1mFST#QPz^DeШH^Z"4]-}GBo8.g*>o1~E4xx02`G8ðzmHt\{2Hgn#UK~zp%fO3)++ט֔gۓޢvC] ~`ŏw(ằ<"%KgDžWhŎ='%PgJ{@̕i'6{eck2PNz5)JTx@9}MÒ1Cs ,GҦ|ƼV\1~b2Tw^<\׷Y;a'L•t. L`ӧ(o"$ ؜^ &53m} |=r8% V8xΐ) N]Gd{Boh,RU\Ne@"B‹Ј>RpRe>/#H="N~y)AF4*DLؙ9$8b8؊C J'<\^4:/L8j>\WGiAF"kR:3\Od7 p|3*adO ߍSpTl:E Ǡp-`Vj^Ffh~9)z| <׿tPY>FQsoQ*ϫ&=SemDz4| EvI_SB|)w 2/5?V#n?Hx ^zp۟H{qUs}=-6t< DǦه0ܣ$rg˜W ll"!'&1v#ove7ҵ/g|QDjD gvA;zM(GkfF.0z y50Ricfmn$TyE R=V9퉁KI~^G;v&_>k:t l.g~TַZ&VD3a[Q'hw<<3}ӓ/1{u: kv,qN xCE=4pmMKw靖 S p 2/tSs/8ӮFN&xT=^sM@'zHeՏHGׄd?+i2Om";/w[,e3]L5V-v~xdTvF_ J9w`S#jhvA%/-nPq՘̜7Ŷ&Eio&z0L`+==F:KD'i.G:RHQN-g9=_Ǵٹ+o/1 'qyWE2(ښ`U!9&LYUݢ/!ZS2:ɔ=A's4,%J0 =ĝwmA!,vC\W𛑘;,G3T2~Ph1[c2L\6TܤRfU#M TQg ŏ]bʕ,Da/0<L,*ARhžJxTR z;еVS.t xeiP8q 'tsN^%Gz؜cU|9ǼMGL#I>0ѝy%̛8 rKjJЮ`8/(JKǘ-4x7ʣFM¾I0bFfytK~27 ϯ=(uHɼH.X+P XYx(Jo^ܣ^5^"j K} %H&S_&|sWw.a3C(FED+o'C A`BLC2}-)3%~eR P'ۧSYrL*8|Q8^xUf2\hzto/?ȶ YZ