openldap2-devel-static-2.4.44-18.1<>, Y /=„4[\lR.R !5+Aߦ8J;'Qvby9]4= >,{ۅ0'~%˸aݵ"/(](֐ &#uL,`t \Hk:JFa } o1MqySmx|N/0XDD4e3x:C,%>툇pqiNj-f-_:xdz7w<02X*&Iu$_?N{řX|dY@+>9 ?d  % Q 39@L R X d   Xp(8S9hS: SFGHIX Y(\@]L^lbxcdefluvwxzCopenldap2-devel-static2.4.4418.1Static libraries for the OpenLDAP librariesThis package provides the static versions of the OpenLDAP libraries for development.Y cloud121XopenSUSE Leap 42.3openSUSEOLDAP-2.8http://bugs.opensuse.orgDevelopment/Libraries/C and C++http://www.openldap.orglinuxx86_64'0+*YYY1952ad90e358113f79d4de559409006fb9d24f8e0b0a34adc7c247c10133d39cf3fdd00c424a8ecbf48dae38bd7732adrootrootrootrootrootrootopenldap2-2.4.44-18.1.src.rpmopenldap2-devel-staticopenldap2-devel-static(x86-64)   cyrus-sasl-devellibopenssl-developenldap2-develrpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsLzma)2.4.443.0.4-14.0-14.4.6-14.11.2YWk@WbW;VVɦVŲ@VŲ@V@V@V@V@Vf@V^@V\:@V@V @U4@T@TuT:m@T @T=@T@Si@S@Sr @SW@SK@S@Rb@RRSRSQ@QP<@P|@P*P{@P{@P}L@OOD@OU@OKp@NU@NؽNσ@NS@NMMc@MY@MGM6@M$]@L,@L@Lp@L*@LvW@LI@L,@L,@K@KK@KrKv@KEK KJ@J@J JJ\s@JHJCfJ67IA@IIÅ@hguo@suse.comjengelh@inai.dehguo@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comlmuelle@suse.comhguo@suse.commpluskal@suse.commichael@stroeder.comhguo@suse.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comrguenther@suse.comjengelh@inai.dejengelh@inai.detchvatal@suse.comvarkoly@suse.comro@suse.deckornacker@suse.comckornacker@suse.comcoolo@suse.comdmueller@suse.comckornacker@suse.comro@suse.devarkoly@suse.comvarkoly@suse.commatz@suse.devarkoly@suse.comjengelh@inai.dejengelh@inai.dero@suse.derhafer@suse.comrhafer@suse.comcoolo@suse.comcoolo@suse.comrhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.decfarrell@suse.comrhafer@suse.decoolo@suse.comrhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@novell.comrhafer@novell.comrhafer@novell.comcristian.rodriguez@opensuse.orgrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comadrian@suse.derhafer@novell.comrhafer@novell.comrguenther@suse.derhafer@novell.comrhafer@novell.comrhafer@novell.comcoolo@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@suse.derhafer@suse.de- Catch up with patches applied to the package on SLES. * Introduce patch 0012-use-system-wide-cert-dir-by-default.patch to let OpenLDAP read system wide certificate directory by default and avoid hiding the error if user specified CA location cannot be read (bsc#1009470). * Fix CVE-2017-9287: openldap2: Double free vulnerability with patch 0015-Fix-double-free-of-search-base-with-page-size-0.patch (bsc#1041764) * Fix an uninitialised variable that causes startup failure with patch 0016-ITS-8631-Initialize-sal.patch (bsc#1037396) * Fix a regression in handling of non-blocking connection with new patch from Alex Novak (bsc#1031702): 0017-retain-non-blocking-status-on-socket.patch- Test for user/group existence before trying to add them. Summary spello update.- Move schema files into tarball addonschema.tar.gz: ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema yast.ldif yast.schema - Package previously missing schema files in LDIF format: amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif sudo.ldif suse-mailserver.ldif (bsc#984691) - Fix a minor issue in schema2ldif script that led to missing attribute in the generated LDIF.- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.- Move ldap.conf into libldap-data package, per convention.- Move ldap.conf out of shlib package again, they are not allowed there for obvious reasons (conflict with future package).- Build password strength enforcer as an implementation of ppolicy password checker, introducing: ppolicy-check-password-1.2.tar.gz ppolicy-check-password.Makefile ppolicy-check-password.conf ppolicy-check-password.5 0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch (Implements fate#319461)- Remove redundant -n openldap2- package name prefix.- Remove openldap2-client.spec and openldap2-client.changes openldap2.spec now builds client utilities and libraries. Thus pre_checkin.sh is removed. - Move ldap.conf and its manual page from openldap2-client package to libldap-2_4-2 package, which is more appropriate. - Use RPM_OPT_FLAGS in build flags. - Macros dealing with old/unsupported distributions are removed. - Remove 0002-slapd.conf.dif and install improved slapd.conf from new source file slapd.conf. - Install slapd.conf.olctemplate to assist in preparing slapd.d for OLC. - Be explicit in sysconfig that by default openldap will use static file configuration. - Add the following schemas in LDIF format: * rfc2307bis.ldif * ldapns.ldif * yast.ldif - Other minor clean-ups in the spec file.- Use optflags when building- Upgrade to upstream 2.4.44 release with accumulated bug fixes. - Specify source with FTP URL - Removed obsolete 0012-openldap-re24-its8336.patch- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch into 0010-Enforce-minimum-DH-size-of-1024.patch- Upgrade to upstream 2.4.43 release with accumulated bug fixes. - Still build on SLES12 - Loadable backend and overlay modules are now installed into arch-specific path %{_libdir}/openldap - All backends and overlays as modules for smaller memory footprint on memory constrained systems - Added extra package for back-sock - Consequent use of %{_rundir} everywhere - Rely on upstream ./configure script instead of any other macro foo - Dropped linking with libwrap - Dropped 0004-libldap-use-gethostbyname_r.dif because this work-around for nss_ldap is obsolete - New sub-package openldap2-contrib with selected contrib/ overlays - Replaced addonschema.tar.gz with separate schema sources - Updated ldapns.schema from recent slapo-nssov source tree - Added symbolic link to slapd executable in /usr/sbin/ - Added more complex example configuration file /etc/openldap/slapd.conf.example - Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap - Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap - Added patch for OpenLDAP ITS#7796 to avoid excessive "not index" logging: 0011-openldap-re24-its7796.patch - Replaced openldap-rc.tgz with single source files - Added soft dependency (Recommends) to cyrus-sasl - Added soft dependency (Recommends) to cyrus-sasl-devel to openldap2-devel - Added patch for OpenLDAP ITS#8336 (assert in liblmdb): 0012-openldap-re24-its8336.patch - Remove obsolete patch 0001-build-adjustments.dif- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch to fix CVE-2015-6908. (bsc#945582) - Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch to address weak DH size vulnerability (bsc#937766)- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch to fix an issue with unresponsive LDAP host lookups in IPv6 environment. (bsc#955210)- Remove OpenLDAP 2.3 code and patches from build source. Compatibility libraries for OpenLDAP 2.3 are built in package: compat-libldap-2_3-0 Removed source files: openldap-2.3.37-liblber-length-decoding.dif openldap-2.3.37-libldap-ntlm.diff openldap-2.3.37-libldap-ssl.dif openldap-2.3.37-libldap-sasl-max-buff-size.dif openldap-2.3.37-libldap-tls_chkhost-its6239.dif openldap-2.3.37-libldap-gethostbyname_r.dif openldap-2.3.37-libldap-suid.diff openldap-2.3.37.dif openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif openldap-2.3.37-libldap-ldapi_url.dif openldap-2.3.37.tgz openldap-2.3.37-libldap-utf8-ADcanonical.dif README.update check-build.sh- Upgrade to upstream 2.4.42 release with accumulated bug fixes.- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements. * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch * Remove already applied patch 0009-gcc5.patch (Implements fate#319301)- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks for Berkeley DB version- binutils is required for "strings" utility invocation in %pre [bnc#904028] - Remove SLE10 definitions- Use %_smp_mflags for parallel build- Add baselibs.conf to sources list- Do not bypass output of useradd and groupadd- sanitize release line in specfile- segfault on certain queries with rwm overlay (bnc#846389) 0008-ITS-7723-fix-reference-counting.patch- enable systemd slapd service if SysV ldap was enabled (bnc#881476)- use %_rundir if available, otherwise /var/run- move systemd requires to server package- Fix systemd service installation- use configure macro also for building the 2.3.37 version- Remove PidFile from service definition - Update to 2.4.39 * Fixed libldap MozNSS crash (ITS#7783) * Fixed libldap memory leak with SASL (ITS#7757) * Fixed libldap assert in parse_passwdpolicy_control (ITS#7759) * Fixed libldap shortcut NULL RDNs (ITS#7762) * Fixed libldap deref to use correct control * Fixed liblmdb keysizes with mdb_update_key (ITS#7756) * Fixed slapd cn=config olcDbConfig modification (ITS#7750) * Fixed slapd-bdb/hdb to bail out of search if config is paused (ITS#7761) * Fixed slapd-bdb/hdb indexing issue with derived attributes (ITS#7778) * Fixed slapd-mdb to bail out of search if config is paused (ITS#7761) * Fixed slapd-mdb indexing issue with derived attributes (ITS#7778) * Fixed slapd-perl to bail out of search if config is paused (ITS#7761) * Fixed slapd-sql to bail out of search if config is paused (ITS#7761) * Fixed slapo-constraint handling of softadd/softdel (ITS#7773) * Fixed slapo-syncprov assert with findbase (ITS#7749) * Build Environment Test suite: Use $(MAKE) for tests (ITS#7753) * Documentation admin24 fix TLSDHParamFile to be correct (ITS#7684)- Add systemd style service definition - FATE#315028 remove memory limit for slapd - FATE#315415: LDAP compat packages required for older SLES versions For this reson following patches were applied: openldap-2.3.37-libldap-suid.diff openldap-2.3.37-libldap-ldapi_url.dif openldap-2.3.37-libldap-ntlm.diff openldap-2.3.37-libldap-gethostbyname_r.dif openldap-2.3.37-libldap-sasl-max-buff-size.dif openldap-2.3.37-libldap-utf8-ADcanonical.dif openldap-2.3.37-liblber-length-decoding.dif openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif openldap-2.3.37-libldap-tls_chkhost-its6239.dif openldap-2.3.37-libldap-ssl.dif- Make /etc/sasl2 owned by openldap2.- Update to 2.4.38 * Fixed liblmdb nordahead flag (ITS#7734) * Fixed liblmdb to check cursor index before cursor_del (ITS#7733) * Fixed liblmdb wasted space on split (ITS#7589) * Fixed slapd for certs with a NULL issuerDN (ITS#7746) * Fixed slapd cn=config with empty nested includes (ITS#7739) * Fixed slapd syncrepl memory leak with delta-sync MMR (ITS#7735) * Fixed slapd-bdb/hdb to stop processing on dn not found (ITS#7741) * Fixed slapd-bdb/hdb with indexed ANDed filters (ITS#7743) * Fixed slapd-mdb to stop processing on dn not found (ITS#7741) * Fixed slapd-mdb dangling reader (ITS#7662) * Fixed slapd-mdb matching rule for OlcDbEnvFlags (ITS#7737) * Fixed slapd-mdb with indexed ANDed filters (ITS#7743) * Fixed slapd-meta from blocking other threads (ITS#7740) * Fixed slapo-syncprov assert with findbase (ITS#7749) Changes in 2.4.37 * Added liblmdb nordahead environment flag (ITS#7725) * Fixed client tools CLDAP with IPv6 (ITS#7695) * Fixed libldap CLDAP with IPv6 (ITS#7695) * Fixed libldap lock ordering with abandon op (ITS#7712) * Fixed liblmdb segfault with mdb_cursor_del (ITS#7718) * Fixed liblmdb when converting to writemap (ITS#7715) * Fixed liblmdb assert on MDB_NEXT with delete (ITS#7722) * Fixed liblmdb wasted space on split (ITS#7589) * Fixed slapd cn=config with olcTLSProtocolMin (ITS#7685) * Fixed slapd-bdb/hdb optimize index updates (ITS#7329) * Fixed slapd-ldap chaining with cn=config (ITS#7381, ITS#7434) * Fixed slapd-ldap chaning with controls (ITS#7687) * Fixed slapd-mdb optimize index updates (ITS#7329) * Fixed slapd-meta chaining with cn=config (ITS#7381, ITS#7434) * Fixed slapo-constraint to no-op on nonexistent entries (ITS#7692) * Fixed slapo-dds assert on startup (ITS#7699) * Fixed slapo-memberof to not replicate internal ops (ITS#7710) * Fixed slapo-refint to not replicate internal ops (ITS#7710) Changes in 2.4.36 * Added back-meta target filter patterns (ITS#7609) * Added liblmdb mdb_txn_env to API (ITS#7660) * Fixed libldap CLDAP with uninit'd memory (ITS#7582) * Fixed libldap with UDP (ITS#7583) * Fixed libldap OpenSSL TLS versions (ITS#7645) * Fixed liblmdb MDB_PREV behavior (ITS#7556) * Fixed liblmdb transaction issues (ITS#7515) * Fixed liblmdb mdb_drop overflow page return (ITS#7561) * Fixed liblmdb nested split (ITS#7592) * Fixed liblmdb overflow page behavior (ITS#7620) * Fixed liblmdb race condition with read and write txns (ITS#7635) * Fixed liblmdb mdb_del behavior with MDB_DUPSORT and mdb_del (ITS#7658) * Fixed slapd cn=config with unknown schema elements (ITS#7608) * Fixed slapd cn=config with loglevel 0 (ITS#7611) * Fixed slapd slapi filterlist free behavior (ITS#7636) * Fixed slapd slapi control free behavior (ITS#7641) * Fixed slapd schema countryString as directoryString (ITS#7659) * Fixed slapd schema telephoneNumber as directoryString (ITS#7659) * Fixed slapd-bdb/hdb to wait for read locks in tool mode (ITS#6365) * Fixed slapd-mdb behavior with alias dereferencing (ITS#7577 ) * Fixed slapd-mdb modrdn and base-scoped searches (ITS#7604) * Fixed slapd-mdb refcount behavior (ITS#7628) * Fixed slapd-meta binding flag is set (ITS#7524) * Fixed slapd-meta with minimal config (ITS#7581) * Fixed slapd-meta missing results messages (ITS#7591) * Added slapd-meta TCP keepalive support (ITS#7513) * Fixed slapo-sssvlv double free (ITS#7588) * Fixed slaptest to list -Q option (ITS#7568) Changes in 2.4.35 * Fixed liblmdb mdb_cursor_put with MDB_MULTIPLE (ITS#7551) * Fixed liblmdb page rebalance (ITS#7536) * Fixed liblmdb missing parens (ITS#7377) * Fixed liblmdb mdb_cursor_del crash (ITS#7553) * Fixed slapd syncrepl updateCookie status (ITS#7531) * Fixed slapd connection logging (ITS#7543) * Fixed slapd segfault on modify (ITS#7542, ITS#7432) * Fixed slapd-mdb to reject undefined attrs (ITS#7540) * Fixed slapo-pcache with +/- attrsets (ITS#7552) Changes in 2.4.34 * Fixed libldap connections with EINTR (ITS#7476) * Fixed libldap lineno overflow in ldif_read_record (ITS#7497) * Fixed liblmdb mdb_env_open flag handling (ITS#7453) * Fixed liblmdb mdb_midl_sort array optimization (ITS#7432) * Fixed liblmdb freelist with large entries (ITS#7455) * Fixed liblmdb to check for filled dirty page list (ITS#7491) * Fixed liblmdb to validate data limits (ITS#7485) * Fixed liblmdb mdb_update_key for large keys (ITS#7505) * Fixed ldapmodify to not core dump with invalid LDIF (ITS#7477) * Fixed slapd syncrepl for old entries in MMR setup (ITS#7427) * Fixed slapd signedness for index_substr_any_* (ITS#7449) * Fixed slapd enforce SLAPD_MAX_DAEMON_THREADS (ITS#7450) * Fixed slapd mutex in send_ldap_ber (ITS#6164) * Added slapd-ldap onerr option (ITS#7492) * Added slapd-ldap keepalive support (ITS#7501) * Fixed slapd-ldif with empty dir (ITS#7451) * Fixed slapd-mdb to reopen attr DBs after env reopen (ITS#7416) * Fixed slapd-mdb handling of missing entries (ITS#7483,7496) * Fixed slapd-mdb environment flag setting (ITS#7452) * Fixed slapd-mdb with sub db slapcat (ITS#7469) * Fixed slapd-mdb to correctly work with toolthreads > 2 (ITS#7488,ITS#7527) * Fixed slapd-mdb subtree search speed (ITS#7473) * Fixed slapd-meta conversion to cn=config (ITS#7525) * Fixed slapd-meta segfault when modifying olcDbUri (ITS#7526) * Fixed slapd-sql back-config support (ITS#7499) * Fixed slapo-constraint handle uri and restrict correctly (ITS#7418) * Fixed slapo-constraint with multi-master replication (ITS#7426) * Fixed slapo-constraint segfault (ITS#7431) * Fixed slapo-deref control initialization (ITS#7436) * Fixed slapo-deref control exposure (ITS#7445) * Fixed slapo-memberof with internal ops (ITS#7487) * Fixed slapo-pcache matching rules for config db (ITS#7459) * Fixed slapo-rwm modrdn cleanup (ITS#7414) * Fixed slapo-sssvlv maxperconn parameter (ITS#7484)- For now, avoid automatic use of libdb-6_0 by explicitly selecting libdb-4_8 as BuildRequire.- Put static libs into openldap2-devel-static and relieve openldap2-devel of static-only deps- fix check-build.sh for kernel > 3.0- Fixed initscript to avoid endless loop when no configuration is present in /etc/openldap/slapd.d/ (bnc#767464) - cleaned up SLES10 buildrequires and dependencies - removed support for building on SLES9, didn't work anyway anymore - Don't buildrequire krb5-mini on Distributions where it does not exist- enabled mdb backend - Update to 2.4.33 * Added slapd-meta cn=config support * Fixed slapd alock handling on Windows (ITS#7361) * Fixed slapd acl handling with zero-length values (ITS#7350) * Fixed slapd syncprov to not reference ops inside a lock (ITS#7172) * Fixed slapd delta-syncrepl MMR with large attribute values (ITS#7354) * Fixed slapd slapd_rw_destroy function (ITS#7390) * Fixed slapd-ldap idassert bind handling (ITS#7403) * Fixed slapo-constraint with multiple modifications (ITS#7168) Changes in 2.4.32: * Added slappasswd loadable module support (ITS#7284) * Fixed tools to not clobber SASL_NOCANON (ITS#7271) * Fixed libldap function declarations (ITS#7293) * Fixed libldap double free (ITS#7270) * Fixed libldap debug level setting (ITS#7290) * Fixed libldap gettime() regression (ITS#6262) * Fixed libldap sasl handling (ITS#7118, ITS#7133) * Fixed libldap to correctly free socket with TLS (ITS#7241) * Fixed slapd config index renumbering (ITS#6987) * Fixed slapd duplicate error response (ITS#7076) * Fixed slapd parsing of PermissiveModify control (ITS#7298) * Fixed slapd-bdb/hdb cache hang under high load (ITS#7222) * Fixed slapd-bdb/hdb alias checking (ITS#7303) * Fixed slapd-bdb/hdb olcDbConfig changes work immediately (ITS#7338) * Fixed slapd-ldap to encode user DN during password change (ITS#7319) * Fixed slapd-ldap assertion when proxying to MS AD (ITS#6851) * Fixed slapd-ldap monitoring (ITS#7182, ITS#7225) * Fixed slapd-perl panic (ITS#7325) * Fixed slapo-accesslog memory leaks with sync replication (ITS#7292) * Fixed slapo-syncprov memory leaks with sync replication (ITS#7292)- add explicit buildrequire on groff - needed to build manuals- buildrequire krb5-mini in openldap2-client to avoid cycle - move Summary out of the %if as prepare_spec is confused about the license otherwise- update to 2.4.31 * Added slapo-accesslog support for reqEntryUUID (ITS#6656) * Fixed libldap IPv6 URL detection (ITS#7194) * Fixed libldap rebinding on failed connection (ITS#7207) * Fixed slapd listener initialization (ITS#7233) * Fixed slapd cn=config with olcTLSVerifyClient (ITS#7197) * Fixed slapd delta-syncrepl fallback on non-leaf error (ITS#7195) * Fixed slapd to reject MMR setups with bad serverID setting (ITS#7200) * Fixed slapd approxIndexer key generation (ITS#7203) * Fixed slapd modification of olcSuffix (ITS#7205) * Fixed slapd schema validation with missing definitions (ITS#7224) * Fixed slapd syncrepl -c with supplied CSN values (ITS#7245) * Fixed slapd-bdb/hdb idlcache with only one element (ITS#7231) * Fixed slapo-accesslog deadlock with non-logged write ops (ITS#7088) * Fixed slapo-syncprov sessionlog check (ITS#7218) * Fixed slapo-syncprov entry leak (ITS#7234) * Fixed slapo-syncprov startup initialization (ITS#7235)- Disabled testsuite for now. Causes problems in the buildserivce- Update to 2.4.30 * Fixed libldap socket polling for writes (ITS#7167) * Fixed liblutil string modifications (ITS#7174) * Fixed slapd crash when attrsOnly is true (ITS#7143) * Fixed slapd syncrepl delete handling (ITS#7052,ITS#7162) * Fixed slapo-pcache time-to-refesh handling (ITS#7178) * Fixed slapo-syncprov loop detection (ITS#6024)- Update to 2.4.29 * Fixed slapd cn=config modification of first schema element (ITS#7098) * Fixed slapd operation reuse (ITS#7107) * Fixed slapd blocked writers to not interfere with pool pause (ITS#7115) * Fixed slapd connection loop connindex usage (ITS#7131) * Fixed slapd double mutex unlock via connection_done (ITS#7125) * Fixed slapd check order in connection_write (ITS#7113) * Fixed slapd slapadd to exit on failure (ITS#7142) * Fixed slapd syncrepl reference to freed memory (ITS#7127,ITS#7132) * Fixed slapd syncrepl to ignore some errors on delete (ITS#7052) * Fixed slapd syncrepl to handle missing oldRDN (ITS#7144) * Fixed slapd-monitor compare op to update cached entry (ITS#7123) * Fixed slapo-syncprov with already abandoned operation (ITS#7150) - Included patches from RE24 branch: * only poll sockets for write as needed (ITS#7167, bnc#749082) * sycnrepl Fixes (ITS#7162)- license update: OLDAP-2.8 SPDX format (http://www.spdx.org/licenses)- Update to 2.4.28 * Fixed back-mdb out of order slapadd (ITS#7090) changes in OpenLDAP 2.4.27 Release (2011/11/24): * Added slapd delta-syncrepl MMR (ITS#6734,ITS#7029,ITS#7031) * Fixed ldapmodify crash with LDIF controls (ITS#7039) * Fixed ldapsearch to honor timeout and timelimit (ITS#7009) * Fixed libldap endless looping (ITS#7035) * Fixed libldap TLS to not check hostname when using 'allow' (ITS#7014) * Fixed slapadd common code into slapcommon (ITS#6737) * Fixed slapd backend connection initialization (ITS#6993) * Fixed slapd frontend DB parsing in cn=config (ITS#7016) * Fixed slapd hang with {numbered} overlay insertion (ITS#7030) * Fixed slapd inet_ntop usage (ITS#6925) * Fixed slapd cn=config deletion of bitmasks (ITS#7083) * Fixed slapd cn=config modify replace/delete crash (ITS#7065) * Fixed slapd schema UTF8StringNormalize with 0 length values (ITS#7059) * Fixed slapd with dynamic acls for cn=config (ITS#7066) * Fixed slapd response callbacks (ITS#6059,ITS#7062) * Fixed slapd no_connection warnings with ldapi (ITS#6548,ITS#7092) * Fixed slapd return code processing (ITS#7060) * Fixed slapd sl_malloc various issues (ITS#6437) * Fixed slapd startup behavior (ITS#6848) * Fixed slapd syncrepl crash with non-replicated ops (ITS#6892) * Fixed slapd syncrepl with modrdn (ITS#7000,ITS#6472) * Fixed slapd syncrepl timeout when using refreshAndPersist (ITS#6999) * Fixed slapd syncrepl deletes need a non-empty CSN (ITS#7052) * Fixed slapd syncrepl glue for empty suffix (ITS#7037) * Fixed slapd results cleanup (ITS#6763,ITS#7053) * Fixed slapd validation of args for TLSCertificateFile (ITS#7012) * Fixed slapd-bdb/hdb to build entry DN based on parent DN (ITS#5326) * Fixed slapd-hdb with zero-length entries (ITS#7073) * Fixed slapd-hdb duplicate entries in subtree IDL cache (ITS#6983) * Fixed slapo-pcache response cleanup (ITS#6981) * Fixed slapo-ppolicy pwdAllowUserChange behavior (ITS#7021) * Fixed slapo-sssvlv issue with greaterThanorEqual (ITS#6985) * Fixed slapo-sssvlv to only return requested attrs (ITS#7061) * Fixed slapo-syncprov DSA attribute filtering for Persist mode (ITS#7019) * Fixed slapo-syncprov when consumer has newer state of our SID (ITS#7040) * Fixed slapo-syncprov crash (ITS#7025) * Added missing LDIF form of schema files (ITS#7063)- add libtool as buildrequire to avoid implicit dependency- ACL changes to the config database only got active after slapd restart in certain cases (bnc#716895, ITS#7066). - Adjusted default DB_CONFIG to increase max values for locks and lock objects (bnc#719803) - Fix UTF8StringNormalize overrun on zero-length string (bnc#724201, ITS#7059)- Update to 2.4.26 * Added libldap LDAP_OPT_X_TLS_PACKAGE (ITS#6969) * Fixed libldap descriptor leak (ITS#6929) * Fixed libldap socket leak (ITS#6930) * Fixed libldap get option crash (ITS#6931) * Fixed libldap lockup (ITS#6898) * Fixed libldap ASYNC TLS setup (ITS#6828) * Fixed libldap with missing \n terminations (ITS#6947) * Fixed tools double free (ITS#6946) * Fixed tools verbose output (ITS#6977) * Fixed ldapmodify SEGV on invalid LDIF (ITS#6978) * Added slapd extra_attrs database option (ITS#6513) * Fixed slapd asserts (ITS#6932) * Fixed slapd configfile param on windows (ITS#6933) * Fixed slapd config with global chaining (ITS#6843) * Fixed slapd uninitialized variables (ITS#6935) * Fixed slapd config objectclass is readonly (ITS#6963) * Fixed slapd entry response with control (ITS#6899) * Fixed slapd with unknown attrs (ITS#6819) * Fixed slapd normalization of schema RDN (ITS#6967) * Fixed slapd operations cache to 10 op limit (ITS#6944) * Fixed slapd syncrepl crash with non-replicated ops (ITS#6892) * Fixed slapd-bdb/hdb with sparse index ranges (ITS#6961) * Fixed back-ldap ppolicy updates (ITS#6711) * Fixed back-ldap with id-assert (ITS#6817) * Fixed various slapo-pcache issues (ITS#6823, ITS#6950, ITS#6951, ITS#6953, ITS#6954) * Fixed slapo-pcache database corruption (ITS#6831) * Fixed slapo-syncprov with replicated subtrees (ITS#6872) - backported delete support for child entries of overlays from master (bnc#704398)- Updated to 2.4.25, important changes: * Fixed ldapsearch pagedresults loop (ITS#6755) * Fixed tools for incompatible args (ITS#6849) * Fixed libldap MozNSS crash (ITS#6863) * Fixed slapd add objectclasses in order (ITS#6837) * Added slapd ordering for uidNumber and gidNumber (ITS#6852) * Fixed slapd segfault when adding values out of order (ITS#6858) * Fixed slapd sortval handling (ITS#6845) * Fixed slapd-bdb with slapadd/index quick option (ITS#6853) * Fixed slapd-ldap chain cn=config support (ITS#6837) * Fixed slapd-ldap chain with slapd.conf (ITS#6857) * Fixed slapd-meta deadlock (ITS#6846) * Fixed slapo-sssvlv with multiple requests (ITS#6850) * Fixed contrib/lastbind install rules (ITS#6238) * Fixed contrib/cloak install rules (ITS#6877)- Surpress gcc warnings about extra format string arguments for 2.3.x built as well.- Updated to 2.4.24, important changes: * Added libldap_r,libldap formal concurrency API (ITS#6625,ITS#5421) * Added slapadd attribute value checking (ITS#6592) * Added slapcat continue mode for problematic DBs (ITS#6482) * Added slapd syncrepl suffixmassage support (ITS#6781) * Fixed liblber to not close invalid sockets (ITS#6585) * Fixed libldap referral chasing (ITS#6602) * Fixed libldap leak when chasing referrals (ITS#6744) * Fixed slapd acl parsing overflow (ITS#6611) * Fixed slapd acl when resuming parsing (ITS#6804) * Fixed slapd default config acls with overlays (ITS#6822) * Fixed slapd config leak with olcDbDirectory (ITS#6634) * Fixed slapd when first acl is value dependent (ITS#6693) * Fixed slapd-bdb slapadd -q with glued dbs (ITS#6794) * Fixed slapo-ppolicy don't update opattrs on consumers (ITS#6608) * Fixed slapo-ppolicy to allow userPassword deletion (ITS#6620) * Fixed slapo-syncprov to send error if consumer is newer (ITS#6606) * Fixed slapo-syncprov filter race condition (ITS#6708) * Fixed slapo-syncprov active mod race (ITS#6709) * Fixed slapo-syncprov to refresh if context is dirty (ITS#6710) * Fixed slapo-syncprov CSN updates to all replicas (ITS#6718) * Fixed slapo-syncprov sessionlog ordering (ITS#6716) * Fixed slapo-syncprov sessionlog with adds (ITS#6503) * Fixed slapo-syncprov mutex (ITS#6438) * Fixed slapo-syncprov mincsn check with MMR (ITS#6717) * Fixed slapo-syncprov control leak (ITS#6795) * Fixed slapo-syncprov error codes (ITS#6812) * For a comprehensive list of changes please consult the CHANGES file - removed unneeded openSUSE 11.0 specifc patch- slapadd -q could crash for glued bdb/hdb databases- Install the correct schema2ldif script (bnc#665530)- Fixed quotation in init-script to avoid errors when calling it from within /etc/openldap/slapd.d/cn=config/ (bnc#660492).- Surpress gcc warnings about extra format string arguments. - Split-off openldap2-doc (noarch) package (Admin Guide and IDs) - Backported -VVV commandline switch for slapd from HEAD (to list enabled static overlays) - Build all overlays except syncprov and ppolicy as dynamic modules (Fixes bnc#648479, FATE#307837) - Added README.dynamic-overlays to point out some details about dynamic overlays - simplified pie-compile patch and adjusted it to work with dynamic overlays- Handle the libdb-4_5 -> libdb-4_8 Version update by opening the Databases with DB_RECOVER if a version mismatch is detected.- Do not include Build date and time in binaries, this avoids build-compare failures and unhelpful rebuilds/republishes- Don't build 2.3 slapcat anymore for 11.3 and newer. We switch to 2.4 long ago. - Removed automatic 2.3->2.4 migration in %post - moved back-sql examples to make rpmlint happy- Fix listener URIs in init script to make SLP registration work again (bnc#620389)- Fixed RPM Group and Summary Tags (bnc#624980)- Updated to 2.4.23: * Fixed libldap to return server's error code (ITS#6569) * Fixed libldap memleaks (ITS#6568) * Fixed liblutil off-by-one with delta (ITS#6541) * Fixed slapd acls with glued databases (ITS#6468) * Fixed slapd syncrepl rid logging (ITS#6533) * Fixed slapd modrdn handling of invalid values (bnc#612430, ITS#6570) * Fixed slapd-bdb hasSubordinates computation (ITS#6549) * Fixed slapd-bdb to use memcpy instead for strcpy (ITS#6474) * Fixed slapd-bdb entry cache delete failure (ITS#6577) * Fixed slapd-ldap to return control responses (ITS#6530) * Fixed slapo-ppolicy to use Debug (ITS#6566) * Fixed slapo-refint to zero out freed DN vals (ITS#6572) * Fixed slapo-rwm to use Debug (ITS#6566) * Fixed slapo-sssvlv to use Debug (ITS#6566) * Fixed slapo-syncprov lost deletes in refresh phase (bnc#606294, ITS#6555) * Fixed slapo-valsort to use Debug (ITS#6566) * Fixed contrib/nssov network.c missing patch (ITS#6562) - New subpackage openldap2-back-sql. Contains the SQL backend module plus some documentation (bnc#395719) - generate Patches from git tree (resulted in all patches being renamed) - installing binaries without stripping them is done by setting the STRIP enviroment variable instead for patching the Makefile now - Fixed a bug in the syncprov overlay which could lead to not replicate delete Operations (ITS#6555, bnc#606294) - BuildRequires cleanup- LDAP clients could crash the server by submitting a specially crafted LDAP ModRDN operation. (bnc#612430, ITS#6570) - Delete Operations happening during the "Refresh" phase of "refreshAndPersist" replication failed to replicate under certain circumstances (bnc#606294, ITS#6555)- Create /var/run/slapd on demand. /var/run might be mounted on tmpfs.- fix build dependency cycle for -client package with openslp- Fixed quotation in sed expression to escape ldapi path in init script- Removed obsolete hunk from openldap2.dif - Remove ldap.conf patch to use saner default for Certificate verification (bnc#575146)- Add fix for stricter fortification checks of GCC 4.5.- Updated to 2.4.21: * Fixed liblutil for negative microsecond offsets (ITS#6405) * Fixed slapd global settings to work without restart (ITS#6428) * Fixed slapd looping with SSL/TLS connections (ITS#6412) * Fixed slapd syncrepl freeing tasks from queue (ITS#6413) * Fixed slapd syncrepl parsing of tls defaults (ITS#6419) * Fixed slapd syncrepl uninitialized variables (ITS#6425) * Fixed slapd-config Adds with Abstract classes (ITS#6408) * Fixed slapo-dynlist behavior with simple filters (ITS#6421) * Fixed slapd-ldif access outside database directory (ITS#6414) * Fixed slapo-translucent with back-null (ITS#6403) * Fixed slapo-unique criteria checking (ITS#6270) - removed some obsolete RPM dependencies - Added missing tags to init script to silence rpmlint warnings- Fixed an issue in back-config's objectclass inheritence code that could cause the server to fail to start or to spin in an endless loop (bnc#558059,ITS#6408) - default the tls_reqcert parameter of a syncrepl config to "demand" as documented even if other tls_ options are absent (bnc#558397, ITS#6319) - apply changes to the global size and timelimits to all database that don't specify limits themself. (bnc#562184, ITS#6428)- Update to 2.4.20 (fate#306593), most important fixes since 2.4.19 * Fixed liblber embedded NUL values in BerValues (ITS#6353) * Fixed libldap sasl buffer sizing (ITS#6327,ITS#6334) * Fixed libldap uninitialized return value (ITS#6355) * Fixed libldap unlimited timeout (ITS#6388) * Added slapd handling of hex server IDs (ITS#6297) * Fixed slapd checks of str2filter (ITS#6391) * Fixed slapd configArgs initialization (ITS#6363) * Fixed slapd db_open with connection_fake_init (ITS#6381) * Fixed slapd with embedded \0 in bervals (ITS#6378,ITS#6379) * Fixed slapd inclusion of ac/unistd.h (ITS#6342) * Fixed slapd sl_free to better reclaim memory (ITS#6380) * Fixed slapd syncrepl deletes in MirrorMode (ITS#6368) * Fixed slapd syncrepl to use correct SID (ITS#6367) * Fixed slapd tls_accept to retry in certain cases (ITS#6304) * Fixed slapd-bdb/hdb cache corruption (ITS#6341) * Fixed slapd-bdb/hdb entry cache (ITS#6360) * Fixed slapo-syncprov checkpoint conversion (ITS#6370) * Fixed slapo-syncprov deadlock (ITS#6335) * Fixed slapo-syncprov out of order changes (ITS#6346) - Added switch to enable/disable testsuite (%run_test_suite)- updated patches to apply with fuzz=0- Added schema2ldif tool to openldap2-client subpackage (bnc#541819)- Changed permissions on /var/run/slapd to a saner default for ldapi:/// (bnc#536729)- libldap's check of the hostname against the TLS Certificate's CN Attribute did not handle possible NUL bytes in the CN correctly and was vulnerable against attacks with spoofed Certificates. (bnc#537143, ITS#6239)- Update to 2.4.17. Most important changes: * Fixed liblber to use ber_strnlen (ITS#6080) * Fixed libldap openssl digest initialization (ITS#6192) * Fixed libldap tls NULL error messages (ITS#6079) * Added slapd sasl auxprop support (ITS#6147) * Added slapd schema checking tool (ITS#6150) * Added slapd writetimeout keyword (ITS#5836) * Fixed slapd abandon/cancel handling for some ops (ITS#6157) * Fixed slapd access setstyle to expand (ITS#6179) * Fixed slapd assert with closing connections (ITS#6111) * Fixed slapd bind race condition (ITS#6189) * Fixed slapd cert validation (ITS#6098) * Fixed slapd connection_destroy assert (ITS#6089) * Fixed slapd csn normalization (ITS#6195) * Fixed slapd errno handling (ITS#6037) * Fixed slapd hung writers (ITS#5836) * Fixed slapd ldapi issues (ITS#6056) * Fixed slapd normalization of updated schema attributes (ITS#5540) * Fixed slapd olcLimits handling (ITS#6159) * Fixed slapd olcLogLevel with hex levels (ITS#6162) * Fixed slapd sending cancelled operations results (ITS#6103) * Fixed slapd slapi_entry_has_children (ITS#6132) * Fixed slapd sockets usage on windows (ITS#6039) * Fixed slapd some abandon and cancel race conditions (ITS#6104) * Fixed slapd tls context after changes (ITS#6135) * Fixed slapd-bdb/hdb adjust dncachesize if too low (ITS#6176) * Fixed slapd-bdb/hdb crashes during delete (ITS#6177) * Fixed slapd-bdb/hdb multiple olcIndex for same attr (ITS#6196) * Fixed slapd-hdb freeing of already freed entries (ITS#6074) * Fixed slapd-hdb entryinfo cleanup (ITS#6088) * Fixed slapd-hdb dncache lockups (ITS#6095) * Fixed slapd-ldap deadlock with non-responsive TLS URIs (ITS#6167) * Fixed slapo-ppolicy to honor pwdLockout (ITS#6168) * Fixed slapo-ppolicy to return check modules error message (ITS#6082) * Added slapo-rwm rwm-drop-unrequested-attrs config option (ITS#6057) * Fixed slapo-rwm dn passing (ITS#6070) * Fixed slapo-rwm entry free/release (ITS#6058, ITS#6081) * Fixed tools returning ldif errors (ITS#5892) - Backported fix for failing back-monitor test from HEAD - re-enabled some formerly disabled tests from the testsuite- Fixed Summary/Description for -client subpackage- Improved connection check in init script (bnc#510295)- Fixed complilation with newer glibc (2.3.X release needs GNU_SOURCE defined as well in getpeerid.c)- gcc 4.4 fixes- Update to 2.4.16. Most important fixes: * Fixed libldap segfault in checking cert/DN (ITS#5976) * Fixed libldap peer cert double free (ITS#5849) * Fixed libldap referral chasing (ITS#5980) * Fixed slapd backglue with empty DBs (ITS#5986) * Fixed slapd ctxcsn race condition (ITS#6001) * Fixed slapd debug message (ITS#6027) * Fixed slapd redundant module loading (ITS#6030) * Fixed slapd schema_init freed value (ITS#6036) * Fixed slapd syncrepl newCookie sync messages (ITS#5972) * Fixed slapd syncrepl hang during shutdown (ITS#6011) * Fixed slapd syncrepl too many MMR messages (ITS#6020) * Fixed slapd syncrepl skipped entries with MMR (ITS#5988) * Fixed slapd-bdb/hdb cachesize handling (ITS#5860) * Fixed slapd-bdb/hdb with slapcat with empty dn (ITS#6006) * Fixed slapd-bdb/hdb with NULL transactions (ITS#6012) * Fixed slapd-ldap incorrect referral handling (ITS#6003,ITS#5916) * Fixed slapd-ldap/meta with broken AD results (ITS#5977) * Fixed slapd-ldap/meta with invalid attrs again (ITS#5959) * Fixed slapo-accesslog interaction with ppolicy (ITS#5979) * Fixed slapo-dynlist conversion to cn=config (ITS#6002) * Fixed various slapo-syncprov issues (ITS#5972, ITS#6020, ITS#5985, ITS#5999, ITS#5973, ITS#6045, ITS#6024, ITS#5988) - Fix building on older openSUSE releases- Update to 2.4.15. Most important changes: * Fixed slapd bconfig conversion again (ITS#5346) * Fixed slapd behavior with superior objectClasses again (ITS#5517) * Fixed slapd RFC4512 behavior with same attr in RDN (ITS#5968) * Fixed slapd corrupt contextCSN (ITS#5947) * Fixed slapd syncrepl order to match on add/delete (ITS#5954) * Fixed slapd adding rdn with other values (ITS#5965) * Fixed slapd-bdb/hdb behavior with unallocatable shm (ITS#5956) * Fixed slapd-ldap/meta with entries with invalid attrs (ITS#5959) * Fixed slapo-pcache caching invalid entries (ITS#5927) * Fixed slapo-syncprov csn updates (ITS#5969) * Added libldap option to disable SASL host canonicalization (ITS#5812) * Fixed libldap chasing multiple referrals (ITS#5853) * Fixed libldap setuid usage with .ldaprc (ITS#4750) * Fixed libldap deref handling (ITS#5768) * Fixed libldap NULL pointer deref (ITS#5934) * Fixed libldap peer cert memory leak (ITS#5849) * Fixed libldap intermediate response behavior (ITS#5896) * Fixed libldap IPv6 address handling (ITS#5937) * Fixed libldap_r deref building (ITS#5768) * Fixed libldap_r slapd lockup when paused during shutdown (ITS#5841) * Fixed slapd acl checks on ADD (ITS#4556,ITS#5723) * Fixed slapd acl application to newly created backends (ITS#5572) * Fixed slapd bconfig to return error codes (ITS#5867) * Fixed slapd bconfig encoding incorrectly (ITS#5897) * Fixed slapd bconfig dangling pointers (ITS#5924) * Fixed slapd epoll handling (ITS#5886) * Fixed slapd glue with MMR (ITS#5925) * Fixed slapd listener comparison (ITS#5613) * Fixed various syncrepl issues (ITS#5809,ITS#5850, ITS#5843, ITS#5866, ITS#5901, ITS#5881, ITS#5935, ITS#5710, ITS#5781, ITS#5809, ITS#5798, ITS#5826) * Fixed slapd-bdb/hdb dncachesize handling (ITS#5860) * Fixed slapd-bdb/hdb trickle task usage (ITS#5864) * Fixed slapd-hdb idlcache with empty suffix (ITS#5859)cloud121 15021417052.4.44-18.12.4.44-18.1liblber.alibldap.alibldap_r.a/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -gobs://build.opensuse.org/openSUSE:Maintenance:7089/openSUSE_Leap_42.3_Update/263d77abb10eff59f659c0a6fbefa462-openldap2.openSUSE_Leap_42.3_Updatedrpmlzma5x86_64-suse-linuxcurrent ar archives,Auur?p]"k%N4JQ7'uPi,iۀyP@xG|a\"P&D1> mK>1_ijGYR6ҴWFۋS=!(nlho>?B]: F8HTppINg?iEݕqqz{.Ѱ ; oV(Q-KF8SJ6jCYp_n53ܾ;ʙGi|pw+%;F\g BSQloQN Ȥ_t_a[2 d_Ek_;́= _z塂 5)@6DT "},|#'&o혯X]);[#aH̸6 eb lj,Ov'^>v[ qVɞ5hj5Ұ a#.g] @eO~M[zg, Q&?լoI(dĞU $69l>j[ Dgd]-g4݁fC`iC4ݰ=m`> hSs ڌT Կ"A:,(̀Hot͋#XKH6TvY$kY ZOKf6i8S0vL~u{4Q7RIqW4j̞Y-feFwH?;L\gLzj@ caxKmtSZ%6ͨi@"0! W3絎uMdN̞UcuGeąfzp'\,(fGE4Mg`U}r:Ԗ_ vSvԋjt_|q6Xw.5,ZpOGn7oG58yEQ7Zy!3t s2}BSi\+ qi`UT=l7fDS`*xȉw?i>[lJ'Zvy\?Î%Ժ5]6뢨!)/GF#rMZ<jWHM 4s=oR #3MtSǎ [Y12CR 5weo0xL)d8aSm{*C ?%lF.;:}=Nԕ`7gS 6P洓3K_0| ' `" Wߧ[ `.Q "6hٖ32K+JcTq5 C>L23nG]fȦ i}z᥋5)Vg_̈"x'>8C IMW~r$}5X\nAwvR{_{ݪ_'2.xE^Kw)8.5_.L~?y zGHF:mṄ%ݓh( E#.vEZOg=g 1R+"ϫ,7 ] DYT$h'^ Wo y˪\-QHE 0-`-m,O<\4a'y$s2@wSb P( bR@g` RuŜ"7y8|jU/E PLڄJA)}‰! ;jGD>dJ^ТTTy\Qf9[ ŽFYs-8dß~ I܇} gMiYLZAg}~;p L9Dm?j?oCw›KJ^9m*3-&!ziEq(a_ĺި {An?ITNm4?^YU?[e˟ 0Yh%!?ҧ /Kf o"Уjvrqniߵ05Y,0bv`ʓ_tpP8!Ձ]rFmMH!jC<6h~ը8up^࠽M|n& AGM`j&EVY/óCQ evTmՠv/rfV_]r?bJnkeկA+3f99Bp2^=*hg]IAHbl81eԑ{13K &WɁ)% IǸ XLYFdR)M-]" =g}U|iP#Bӳ:R!]&]K#MEf1mJXc{-VԄ6uwY O|gXHO4 ؕsFDOԗ. gz;û1Fæ`=!5J2?;^7xB_ ?lz}q9SK;5lXyVQX&+[_ZI8pzU9 ]5aI!$2ڍ4w13[mOrM8±ˎ?8OjUZlJ)-k Mw~PxQ5lўQ?-KcL{Kb <J j?z z8ՁȿD6dhح(dc@aoWMl3t<&mI 4_Kc b\ ވH'kW 0lpj9 ӱ,M}r>Yp:jѵ'My3+mf.: O&NrdIN0e6VR`3ٕKH0.'! v+ :~TGsnye4!b:4aD# (o_ݺ(4-UPfbAᆀ?=m-MBʛqIY^AƯ#G/Vv^FaO 4wdsv >jI=5ʓ5nkcWP=탎xn+ 'Ii'G, HEZޗ 4dȔM`CmMT!yy][ e=7ȼvwW0B^;0pĽJT:n7'b=hJjÃvꨛ{ٓfJ#L:M4rC_y?hs&.I瀔&<ZL\rBX1m|ZGʼ*v#ʋi3:Q7PpE/RD0 iD׋Y:&`)9WM,h%\*w8?116̐et ǖ HaQ?t2_nmn`sn_V3,+@-E{gkU 9,byRV;tX_n*Ra$8= / F[Qs̊+p-ѢAZNIbŠ7k&(A=8`z;,7؅?#7.цn\C%dmK,Bkn{ $Þˢx8@yN4pG5U^!xIbFf#5 vX(4zJkbNlEdZA|vuAl%yx_(aeUqW%fԱd #!ůa+nn ЛO_/A%eo gܬA&!*M#xB[3Yў"0*.4D.Sc 8~;J[WCov0'0@{74*#춠+g;%o*Za͟*hъjH@"SoՍl~!fÑr @lR9\YRN|s~/Zw2;M+ `,o6/ J]I,=})xl*& h\l\DU); ޳HuR-kAKY\H|E '0yVQ 7Nݣ= q7T!b2QajgsR>1`b_O_QmqパB|ag7,jZ_oԞ^h$d5TT3`L /0 g=Lf( ƈQZ;(1(<#-f4j6Tw KPkj&z͹Lᖍ_zkC'p֛Yad R,т?h0.ߩWWtcҥ q8}ʐX}ӃM`1*b õJl󹸃%z,I&G]J45xauE4oK# C|G2Z el2 v$J0yc n9DؾKvruܡM[r/0 BXZGRHsyXi{W4ƧOJ?"ؘS% \ͽ3~͖Kr컀p[Ч7@ ;J [5sD^m4<%({r!yrvfR>a6T39 CӁz9(hxƑKtKZؼ' +E؛H  "[MK߯fJrV[>O=U= c3᱒,[)@e16l$(-_Ʃ{T= W'MU{ 8+kتQlUfVF:lu{4S0 w)I-RX?@$< ¸x%B,⣈J\i]C1'_S_`o C7pNfuMMOZ1<{dIX)Q9ȲUEɷkiM](޸X|&4(.I+Ah. hXjח [I]\.dc0& MozF2HB_c P/J#[hnv|-驁Ǡq=bgU@AysQkDL!uP}~ SP/`ư3{m*0s?9aWbZt3`Euxצzt 8^3'yCԽs6ίrm?.HkӔ[e7׬Gt"k 瞜`k7OZp][%hZή"`hYTOgrIr4$PT)w:t/ d=3Ą $G+(&@]3V4Rc6"oqQ≇S-o"*|Xjcx񝘏;Zjf: Y;c鄬AQ}0ƋHF#˿reϩ^]V п%s8!t nl"%E}ٵ[bnBGέѢ3ݨV .MÌꢏҲ?n֎V&wbбN>SP8Ŗ`x 6S麓 |vB\vDOf14iљ~ÏF{.VJ̓=>uµ xrq7s|U6hΜR8Y>:+Ɏqhe[as/7z>]>Y88xte4"125nЌ.Ս %M- [W!Sґ}XrȮ 9)o2jpBJ|T,zwf g\0crR34mbV ; E$BN\G]l0ɴXnH3[jݬ;dnIR'Va\Ɋ#@mtLaeiG+g5ltޤ3%v8\Dq2ڏ=|ڋ~_sbwlAo C:]X\g5?hj!Wlm3ša|O GhTO1[(#;2V胩w'ʤTbCN"S#iD7F95&mᡐbwW%b z90H:{ms)d 895\`'bFWK:yg!҉SgI/Sa'xu- ltzGaFb5.j]HHSG7j$\vbf\e*u} G{~YH >=m1;fߣiLj%" NlQT-μGjݴ.z'u/AX%oE_3RLJ'WUꗋVd=y~ooR;/J`v9vvE=bGȴ  -n)=H h+"D&3gW97Ah-?_5EF%%O!ClADX 홄T-e:h) CrT Ny0 #69{u$%AH:,'Vu2TN׏hc})0{w#E.CN" ^vhS0qZVjKV$ƿ::$ɂ|/ pL1ңϸ\ŝ;:}_PAwʅ6V`ط.U\Nh$qCKu:NGEcG:d:1(<]H08e8v9 `(9iJt̕ cy̩Vw-,\褒mSTtp۪ц+y_ +S91>i|~cD oapo~hQn@ylgEygVav]Vɖ&{3 㙀d'&hbƒ]_c&tT_?I<49Eey noG=~v BMOzLݍ9~8wgDpJ+-Ob[-겢UcGK9 焜nq''Acٷ~݃M.ër .ey*ܝeߣi "sDwv "g>Siu]u؞Ǿپ+|:;zDIVX!CmW&919OPZd 8/!}W@*pO9/EC:n)B\FTw4Q<*I!q`ס&0rϬe-hqD!|.ɚ=h1sYyMb'+R$Vr(\U[tŅ>BtcA ckCx!-yZ&b9Fx <$cV5PHq"Wtdv(q0|6qFU5 Kgcϲa\0_?لpz=@/OvDeGW/%o  w5I3^Xbp ?u>|taXfדfbDȂZk4\ MLZ"hy^.aK#/Y&uS: r4 1 ^3 ]⓾TSr}_5 N-<_65&Mb]DƏ9 Z^Ȟ !_MB8AR֊*CTg|$Zf 5Ɠo˛?_f|'܏nXXHEe})'UO!uIyaD$fLˑpJ"̃:C?g͆t:\xP(e/ #6֧/>bۈXI 6x^~܊?fR ZM"-?tGZ^z&]`yDžx^PU5tmi4jKPb oYhxfRh5읅p=9XHfPfgӃy`|\}I:ƺCAޞ!ͮY5hrA+3&8,ʱ'GmJu."lYfXr ~ӏdKs"m_k/ yX%yh;:.v-A,C⃘X f"Ce8œ`v*4&v18)ߛ]PNH̃֗ R|*xDJҘǧcrݙ!і~HflSilV "Yךv^s!.FuB8kR=Ƶn=x7bz#X]ZP5KQɡj2$+09JP!^Q:ljȢΗ~j a m]_-Ac4Èi@4FF2R9G3 PS 2XqN#mXP'AR>}yrHq~$RV!?Sz%oM;aCqwc@Qi}BNR<U` Ő`>ltސY?Geja'0 +VXs;7i2o=2pM)gZHq*N(9*:۷q<~*FEf=Oja|-Yc(ynbk`+;j\_ӬgY!* =D_7,%\pK"@qDu-u(n2BLGKuk[>:u& "qn&™h9&f]ɆDČL\7>~Ev0EI0M ״ /zP8[0N偄Zżܠv.wAq۱[ 1|n~|zӗ6Z_qy2ɂI/-pqZro]NAKW<{p{8⩤] Z n}9 GAxH(v9yVzzJo!v40H3H0k/E}4)*ĘOF1(6ybcy+6Q ^ׇ\ Z%0Eϊf.`qT~a0 Q[!iuA9I Q.g >aÏ> 铌˅ g9Y r*V"Q&bJ]wy(Yܷ^AϪS'-(: qUcJğ[9/i @6oK9 CYU>|j;SJBK2pZ:4?ىmd&F4#bۙJIp|| a7WpMM4%_yЦ_,qV}\2UB{4~yJV'MЋ?wզZs[N*jwZ*nҝoV"*u<9:$HFd\_Ղ-;X>qtcFmGQ!&Er]YP1atjZs.q7ޣ=}Mk4I{*e'BgR럲UPOfDyҟbߓ $Q1AY1hp:DJɒLV<]y0tjWG;WR?MٷчfU^@O`v?Zd'4WK5mN'ZM-xPVu0ǰ=IzNMIeti( فP,;ګB""}dmI *^?:]qep;lm@1ϻpٗV8nSI2k',bgg69ig: K*ZIO Ebi6uL1^:O(bz۵TZbbf*AA~L*%:= d9~U0`w3D,a*AN|#AJ(Cr9~sPLpV \-E=q3[wO7'xuK&L 8$+xIGvoW4i]V>iDGdL qĸ%[SIF#'#a;[yH4M24 _֠F9Y2+IJ:9'8-o»we cL9i,33EFb}}_6ϒPG7;pF$QsVɰqPv @nǢF UR2TR9,m, h!?&a44RmD.NŰ͝n2vyY;Hk(gưC*56/ܕY d-Z֫ɧ-ub09-nRqO5騮R PX:^RB ]Ńj#n:"FD~o56Y4! d H(I&\ .J{L ?)-Ա ֪w?>6`+ espׄtlVrD}7LaFg`y0N%%zVO$BFT"!948ݝR9VTYρu#0B ES yF7U)ۜ1ˁp[XVR aKn%^ pT¸Mw`7.QCXP*-Nttne3%*ܡZ=JKE.X[PMJ zXg⋇N ]C8*euL:)\UCaN]đsj*]}4h}c2`kϑ!"?a`<ҢKZTuV&W?Br$)oHc2))e][(fλU3WWnŁ5(]C3b9N +U H֠]J4&ܾz)G#.*r^J]Gq["exGb'XB|ĮD8hJcC`Vcv M=PKv5D 481OЀFFsf $KulfP7mO_Qݹ**Q`k깼($] Pݶ , 5ㅼ Pئ[ԇmO8wi-!> |Yk e[ SZHYY&a &^*EVKksӭ:zl2NAO~"M9/+Uc7Ӹl8# Q=[>;o~}y*ۣ {O#a4'I0ҙ/Θ,Z*f#iUJh-D8Cvڕ g4`j\RW lt)_DUqسխ[Ѿ 9Wlad+4K'>zZm~+HVGۉ= "p/W4!Ȉ-`R8Y>R[_v]Ŏ+.=;Iuu5Më[w=_RZG=f"߯ȊmĞw5  6eү0찁M/'DAGj^f5-(QF\ᑖA%KX z&vjUԙr[wEXH5x#>wVn>QWi,\/Pf>A]_tcXZ"$R"͐djWO/ b"sԮ2fG) M:Az br"NB0Mo V(oLB33e$SLeZ"m?Y15j7G]&6|sdkpl_+3x`&52:yD Ygs@SPhlʓp>@6Q{>ǓH0&%KW5G|!1sgANZ%]1fTO~̫BtW8A_gq+*N`j 8=#ANyBȂԎ"g=s4Ͼ.31Fx9=z?Ki5'یE `_Lؿg^`('y=HD3wl ':-L%3#{f4U?4UDz$mhYM!a6b'䆟%eSUV% V;L?%[m0ݿw-df>x&S#u9@mO&GZݞY=:/X)X2Q8#箴TQV WNJ:vpc`S^,5TKhd_ֱp3tG =qK'7J똠,ÛŝbUEpm<}Y8 tޠj@1 159OҴW{azS&ƜQMX9N՘,_s^ѐ$}YV zi~*K%y~4lO,l^PR+I7&Zy+ &-Ҟ-g}LlElFvdEKD* "?n4c"J*i+0e3]bNM &<8isy6?Q^zc!Vj>SIBAC~elZbGKЇ"sz 6YRꗜ4SIIX  z n<5znas,PLZ M5\BM.UIe}Y&-|uʓ'`o}j[U A,qqr^T(HME22 W3Oҽ'7O/^o!{䃴E k#fޔRFpZ%L̵_~ya뼶5R&\W?~yέ9^DOT;Iܩ+[*=Ɍom=@#1J]c8MvE[%WvHZ432N۷S{C[\@22p/iln 7Te_wr(m(G>;fO]A1j?Ucސt݌lqȁ 6 C[i?Ag:[^'q7*|59՚p4pd$<:\$ie5%m| ݢ>$ }E6֍02>Ӷ@4:]BN?:NFp Lϲ-9:V l{G;9E,b' c]1`:.jmN̠ٺB&E/(xz:>bcV _*ܠОNUCFRZ0+XuU#oz[BI{Bj6-'(*gf6JcHNy,mkops zꞙa3aW~oMXOlXƄw{OW|Qn"Ƀ6gIݗVjd,D=j= y0ŎDMWWeXNe:oӲ.1n3jQc3lg])]`.ٜk''T! tPL91 0`= %m)jނ݃P{!4b0IO!WޯT N; KT5]w+KvPxH~pyvb&7'ZLL4&0d1GtVs9՗T"r o<>7[[ט 50Ly VX9&[HC5@dd {ZmD[bJT ݰ4 ZP.FGI?I^*lK~eaY\̕rl\9k"{`b%<-.b^-%{FRk)d)\=R~vNSn1l,( ;}CeN~SV8%nޒA%Q- UY5r!s(l~*hs<]˻Q'Nw*BAr:@v!,/5"4QQpT.MT Ö"}ԏ G~"gqifm>jR7c:n`(&Y Ⴣ! gF 'i2 dF$qqM#d&^siSqzu?3* 6d"LWdthZiVWtS \_i{ys Cc+wBj%Y"b>3H^%]Kg5W qiL4a^]ܵZĨMzԬ=rdz-'麝?J$Ew1u}!DGhCyp@YRӧ.KR)hȭd[׮Pa(Oֈ4U%{Z„+PV'\`C'Ivg/5`RiTF)D\O!2yVo%>^3qʊ<;'gK7 B?,$T]o9یTD)W +Osf` -s>Piv )4ChYKG%a] }dcLQ }>}ĵݔjv|jAVr7UQRaTy߈ḵX/xEϹubQ% o|M,y:SZ'}Կë(+朗/8dFrJ?R(0)(&lfA Fǹ3! !jUc?(yi#> r24rh(K~ * p1עo[dLt۔1ŮuOP[Qf;DXϏӻKZU )˃mZxl@N@1F DPF {fCFBѡ4UBPf0!m:U?vo]heG8 U-|_#N9JdqS5ŏ\91 'C:sHphL$3O$zFjC9kI-idc9lꎢqeF|.y 2C~`ū~AQ3sħJ݌"q?70q&!GZNR+#ʻpPmi_1h;r-UR{HDGBJÔLk'*5oCL"1:0kaz.s`M;cڧ_ >YxrWɠ_6y8p'%>5ok=FsI!_\/'Z|˂<~O ܚ$yIceE'N^-^8UoƔW.Q<V5YR[.w foލMP bڤd5.HG};V TȰ<^ ʊVw t[!#чa³K1*uYwbl/~pýp5; 5X 6ʹ EP^Ƣe1`fkQ`~Fɲ>nq 3pC\6qKux3T{:ծ0ɖ-eD/wUstQ&KV9 O2}bP1δ>Ί}  |HMWp!~v S䥟ŸY鬕*<3CjD0Md13^СXv %24m1VUcazD>S16z!{m9OSWmF\ga 9<\tu3(Z8bv<#(ƪ<,k(-ŮHU#t@+MM# )X/n +}o!| C,B |XUAS͉T3ՔT 3dwQ=l:BTiVB,XE2ݛ,'Lׁ.{{j1D( \Eۄ=% BM?ratu/Ud^ " := 6e&?/mS{RUE>dl^e