389-ds-base-libs-1.3.4.8-1.fc22$>s<Epl7}->9?d " J48`ds  8 T  Z  Rp000 0( P8 \ 9 :D GHI X0YD\h]^bdefltuv@wx8ypOC389-ds-base-libs1.3.4.81.fc22Core libraries for 389 Directory ServerCore libraries for the 389 Directory Server base package. These libraries are used by the main package and the -devel package. This allows the -devel package to be installed with just the -libs package and without the main package.VcHbuildhw-10-nfs.phx2.fedoraproject.orgFedora ProjectFedora ProjectGPLv2 with exceptionsFedora ProjectSystem Environment/Daemonshttp://port389.org/linuxx86_64DHPAxKmAA큤Vc;Vc+Vc+Vc@Vc*Vc*Vc@Vc+Vc@VcHVO@VO@VO@Vc 2a7687318207356d79a1c3a2e4564ce9e79b0273642183c8351e4d6243fd27284dc38f21c0dd0ef371f9b5fb15f944cca138b1d7ef9959ca7500a0e6a3c948242bf9ba015f82e2cd213ec5f295e8ef3351101727c8f605debbcd8ac2e46844b33b7890a4649be2b30d3e490afd203f962f318315762ecdfe4539a192ac71ed758ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903a73b7d3598e98f46aeb0559e641d3e6ac83c0fc34e1e5fa98cb9d4a6050bacd997a6a0413ce3664e192dff12a29bc3f690c24e8a0d48d986478c56cdfe370c3blibns-dshttpd.so.0.0.0libns-dshttpd.so.0.0.0libnunc-stans.so.0.0.0libnunc-stans.so.0.0.0libslapd.so.0.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroot389-ds-base-1.3.4.8-1.fc22.src.rpm389-ds-base-libs389-ds-base-libs(x86-64)libns-dshttpd.so.0()(64bit)libnunc-stans.so.0()(64bit)libslapd.so.0()(64bit)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcom_err.so.2()(64bit)libevent-2.0.so.5()(64bit)libgcc_s.so.1()(64bit)libk5crypto.so.3()(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libm.so.6()(64bit)libns-dshttpd.so.0()(64bit)libnspr4.so()(64bit)libnss3.so()(64bit)libnss3.so(NSS_3.10.2)(64bit)libnss3.so(NSS_3.12)(64bit)libnss3.so(NSS_3.2)(64bit)libnss3.so(NSS_3.3)(64bit)libnss3.so(NSS_3.6)(64bit)libnss3.so(NSS_3.9)(64bit)libnunc-stans.so.0()(64bit)libpcre.so.1()(64bit)libplc4.so()(64bit)libplds4.so()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libsasl2.so.3()(64bit)libslapd.so.0()(64bit)libssl3.so()(64bit)libssl3.so(NSS_3.12.6)(64bit)libssl3.so(NSS_3.14)(64bit)libssl3.so(NSS_3.2)(64bit)libssl3.so(NSS_3.4)(64bit)libstdc++.so.6()(64bit)libsvrcore.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)3.0.4-14.6.0-14.0-15.2-14.12.0.1V@V@VVLh@UU@U(UU@Ua@Ux&U?v@TT@T T T@T@T,@TmT7@T+T@T@T@TT@TTS@S@SvS@SSj@SR@SESS@S!@S"@S!S@Sz@Sz@S@R@R'R=R - 1.3.4.8-1Noriko Hosoi - 1.3.4.7-1Noriko Hosoi - 1.3.4.6-1Noriko Hosoi - 1.3.4.5-1Noriko Hosoi - 1.3.4.4-1Noriko Hosoi - 1.3.4.3-1Noriko Hosoi - 1.3.4.2-1Noriko Hosoi - 1.3.4.1-1Noriko Hosoi - 1.3.4.0-1Noriko Hosoi - 1.3.3.12-1Noriko Hosoi - 1.3.3.11-1Noriko Hosoi - 1.3.3.10-1Noriko Hosoi - 1.3.3.9-1Noriko Hosoi - 1.3.3.8-2Noriko Hosoi - 1.3.3.8-1Petr Machata - 1.3.3.7-2.1Noriko Hosoi - 1.3.3.7-2Noriko Hosoi - 1.3.3.7-1David Tardon - 1.3.3.6-1.1Mark Reynolds - 1.3.3.6-1Noriko Hosoi - 1.3.3.5-1Noriko Hosoi - 1.3.3.4-1Peter Robinson 1.3.3.3-2Rich Megginson - 1.3.3.3-1Nathan Kinder - 1.3.3.2-1Jitka Plesnikova - 1.3.3.0-2Noriko Hosoi - 1.3.3.0-1Jitka Plesnikova - 1.3.2.23-1.1Noriko Hosoi - 1.3.2.23-1Jitka Plesnikova - 1.3.2.22-1.3David Tardon - 1.3.2.22-1.2Fedora Release Engineering - 1.3.2.22-1.1Noriko Hosoi - 1.3.2.22-1Noriko Hosoi - 1.3.2.21-1Noriko Hosoi - 1.3.2.20-1Noriko Hosoi - 1.3.2.19-1Noriko Hosoi - 1.3.2.18-1Fedora Release Engineering - 1.3.2.17-1.1Noriko Hosoi - 1.3.2.17-1Noriko Hosoi - 1.3.2.16-1Noriko Hosoi - 1.3.2.15-1Noriko Hosoi - 1.3.2.14-1Noriko Hosoi - 1.3.2.13-1Noriko Hosoi - 1.3.2.12-1Noriko Hosoi - 1.3.2.11-3Parag Nemade - 1.3.2.11-2Noriko Hosoi - 1.3.2.11-1Noriko Hosoi - 1.3.2.10-1Noriko Hosoi - 1.3.2.9-1Noriko Hosoi - 1.3.2.8-1Mark Reynolds - 1.3.2.7-1Rich Megginson - 1.3.2.6-1Rich Megginson - 1.3.2.5-1Mark Reynolds - 1.3.2.4-1Noriko Hosoi - 1.3.2.3-1Noriko Hosoi - 1.3.2.2-1Noriko Hosoi - 1.3.2.1-1Noriko Hosoi - 1.3.2.0-1Rich Megginson - 1.3.1.11-1Rich Megginson - 1.3.1.10-1Noriko Hosoi - 1.3.1.9-1Rich Megginson - 1.3.1.8-1Noriko Hosoi - 1.3.1.7-1Petr Pisar - 1.3.1.6-1.1Noriko Hosoi - 1.3.1.6-1Noriko Hosoi - 1.3.1.5-1Noriko Hosoi - 1.3.1.4-1Petr Pisar - 1.3.1.3-1.1Noriko Hosoi - 1.3.1.3-1Noriko Hosoi - 1.3.1.2-1Noriko Hosoi - 1.3.1.1-1Noriko Hosoi - 1.3.1.0-1Noriko Hosoi - 1.3.0.5-1Mark Reynolds - 1.3.0.4-1Noriko Hosoi - 1.3.0.3-1Parag Nemade - 1.3.0.2-2Noriko Hosoi - 1.3.0.2-1Noriko Hosoi - 1.3.0.1-1Noriko Hosoi - 1.3.0.0-1Noriko Hosoi - 1.3.0-0.3.rc3Noriko Hosoi - 1.3.0-0.2.rc2Noriko Hosoi - 1.3.0-0.1.rc1Mark Reynolds - 1.3.0.a1-1Rich Megginson - 1.2.11.15-1Rich Megginson - 1.2.11.14-1Rich Megginson - 1.2.11.13-1Rich Megginson - 1.2.11.12-1Mark Reynolds - 1.2.11.11-1Mark Reynolds - 1.2.11.10-1Mark Reynolds - 1.2.11.9-1Mark Reynolds - 1.2.11.8-1Fedora Release Engineering - 1.2.11.7-2.2Petr Pisar - 1.2.11.7-2.1Rich Megginson - 1.2.11.7-2Rich Megginson - 1.2.11.7-1Rich Megginson - 1.2.11.6-1Rich Megginson - 1.2.11.5-2Rich Megginson - 1.2.11.5-1Petr Pisar - 1.2.11.4-1.1Rich Megginson - 1.2.11.4-1Rich Megginson - 1.2.11.3-1Rich Megginson - 1.2.11.2-1Rich Megginson - 1.2.11.1-1Rich Megginson - 1.2.11-0.1.a1Noriko Hosoi - 1.2.10.4-4Noriko Hosoi - 1.2.10.4-3Rich Megginson - 1.2.10.4-2Rich Megginson - 1.2.10.4-1Rich Megginson - 1.2.10.3-1Rich Megginson - 1.2.10.2-1Noriko Hosoi - 1.2.10.1-2Rich Megginson - 1.2.10.1-1Rich Megginson - 1.2.10.0-1Noriko Hosoi - 1.2.10-0.10.rc1.2Petr Pisar - 1.2.10-0.10.rc1.1Rich Megginson - 1.2.10-0.10.rc1Rich Megginson - 1.2.10-0.9.a8Rich Megginson - 1.2.10-0.8.a7Rich Megginson - 1.2.10-0.7.a7Fedora Release Engineering - 1.2.10-0.6.a6.1Rich Megginson - 1.2.10-0.6.a6Rich Megginson - 1.2.10-0.5.a5Rich Megginson - 1.2.10-0.4.a4Rich Megginson - 1.2.10.a3-0.3Rich Megginson - 1.2.10.a2-0.2Rich Megginson - 1.2.10.a1-0.1Rich Megginson - 1.2.9.10-2Rich Megginson - 1.2.9.10-1Rich Megginson - 1.2.9.9-1Rich Megginson - 1.2.9.8-1Rich Megginson - 1.2.9.7-1Rich Megginson - 1.2.9.6-1Rich Megginson - 1.2.9.5-1Rich Megginson - 1.2.9.4-1Rich Megginson - 1.2.9.3-1Rich Megginson - 1.2.9.2-1Rich Megginson - 1.2.9.1-2Rich Megginson - 1.2.9.1-1Petr Sabata - 1.2.9.0-1.2Petr Sabata - 1.2.9.0-1.1Rich Megginson - 1.2.9.0-1Rich Megginson - 1.2.9-0.2.a2Marcela Mašláňová - 1.2.9-0.1.a1.2Marcela Mašláňová - 1.2.9-0.1.a1.1Rich Megginson - 1.2.9-0.1.a1Rich Megginson - 1.2.8.3-1Rich Megginson - 1.2.8.2-1Rich Megginson - 1.2.8.1-1Rich Megginson - 1.2.8.0-1Rich Megginson - 1.2.8-0.10.rc5Rich Megginson - 1.2.8-0.9.rc4Rich Megginson - 1.2.8-0.8.rc2Caolán McNamara - 1.2.8-0.7.rc1Rich Megginson - 1.2.8-0.6.rc1Rich Megginson - 1.2.8-0.5.a3Rich Megginson - 1.2.8-0.4.a3Rich Megginson - 1.2.8-0.3.a3Fedora Release Engineering - 1.2.8-0.2.a2.1Rich Megginson - 1.2.8-0.2.a2Nathan Kinder - 1.2.8-0.1.a1Rich Megginson - 1.2.7.5-1Rich Megginson - 1.2.7.4-2Rich Megginson - 1.2.7.4-1Rich Megginson - 1.2.7.3-1Rich Megginson - 1.2.7.2-1Rich Megginson - 1.2.7.1-2Rich Megginson - 1.2.7.1-1Nathan Kinder - 1.2.7-2Nathan Kinder - 1.2.7-1Rich Megginson - 1.2.7-0.6.a5Rich Megginson - 1.2.7-0.5.a4Rich Megginson - 1.2.7-0.4.a3Rich Megginson - 1.2.7-0.3.a3Rich Megginson - 1.2.7-0.2.a2Rich Megginson - 1.2.7-0.1.a1Rich Megginson - 1.2.6.1-3Rich Megginson - 1.2.6.1-2Rich Megginson - 1.2.6.1-1Rich Megginson - 1.2.6-1Rich Megginson - 1.2.6-0.11.rc7Rich Megginson - 1.2.6-0.10.rc6Rich Megginson - 1.2.6-0.9.rc3Rich Megginson - 1.2.6-0.8.rc3Rich Megginson - 1.2.6-0.7.rc2Nathan Kinder - 1.2.6-0.6.rc1Rich Megginson - 1.2.6-0.5.rc1Marcela Maslanova - 1.2.6-0.4.a4.1Rich Megginson - 1.2.6-0.4.a4Nathan Kinder - 1.2.6-0.4.a3Caolán McNamara - 1.2.6-0.3.a2Rich Megginson - 1.2.6-0.2.a2Nathan Kinder - 1.2.6-0.1.a1Rich Megginson - 1.2.5-1Rich Megginson - 1.2.5-0.5.rc4Rich Megginson - 1.2.5-0.4.rc3Rich Megginson - 1.2.5-0.3.rc2Rich Megginson - 1.2.5-0.2.rc1Rich Megginson - 1.2.5-0.1.a1Rich Megginson - 1.2.4-1Rich Megginson - 1.2.3-1Caolán McNamara - 1.2.2-2Rich Megginson - 1.2.2-1Tomas Mraz - 1.2.1-5Noriko Hosoi - 1.2.1-4Rich Megginson - 1.2.1-3Fedora Release Engineering - 1.2.1-2Rich Megginson - 1.2.1-1Rich Megginson - 1.2.0-4Rich Megginson - 1.2.0-3Rich Megginson - 1.2.0-2Rich Megginson - 1.2.0-1Noriko Hosoi - 1.1.3-7Noriko Hosoi - 1.1.3-6Rich Megginson - 1.1.3-5Rich Megginson - 1.1.3-4Rich Megginson - 1.1.3-3Rich Megginson - 1.1.3-2Rich Megginson - 1.1.3-1Rich Megginson - 1.1.2-1Rich Megginson - 1.1.1-2Rich Megginson - 1.1.1-1Rich Megginson - 1.1.0.1-4Tom "spot" Callaway - 1.1.0.1-3Tom "spot" Callaway - 1.1.0.1-3Rich Megginson - 1.1.0.1-2Rich Megginson - 1.1.0.1-1Fedora Release Engineering - 1.1.0-5Rich Megginson - 1.1.0-4Release Engineering - 1.1.0-3Rich Megginson - 1.1.0-2.0Rich Megginson - 1.1.0-1.2Rich Megginson - 1.1.0-1.1Rich Megginson - 1.1.0-0.3.20070720Nathan Kinder - 1.1.0-0.2.20070320Rich Megginson - 1.1.0-0.1.20070320Rich Megginson - 1.1.0-0.1.20070223Rich Megginson - 1.1.0-0.1.20070213Rich Megginson - 1.1.0-1.el4.20070209Rich Megginson - 1.1.0-1.el4.20070207Rich Megginson - 1.1.0-1.el4.20070129Rich Megginson - 1.1.0-8.el4.20070125Rich Megginson - 1.1.0-7.el4.20070125Rich Megginson - 1.1.0-6.el4.20070125Rich Megginson - 1.1.0-5.el4.20070125Rich Megginson - 1.1.0-4.el4.20070119Rich Megginson - 1.1.0-3.el4.20070119Rich Megginson - 1.1.0-2.el4.20070119Rich Megginson - 1.1.0-1.el4.cvs20070119Rich Megginson - 1.1-0.1.cvs20070115Dennis Gilmore - 1.1-0.1.cvs20070108Rich Megginson - 1.0.99-16Rich Megginson - 1.0.99-15Rich Megginson - 1.0.99-14Rich Megginson - 1.0.99-13Rich Megginson - 1.0.99-12Rich Megginson - 1.0.99-11Rich Megginson - 1.0.99-10Rich Megginson - 1.0.99-9Rich Megginson - 1.0.99-8Rich Megginson - 1.0.99-7Rich Megginson - 1.0.99-6Rich Megginson - 1.0.99-5Rich Megginson - 1.0.99-4Rich Megginson - 1.0.99-3Rich Megginson - 1.0.99-2Rich Megginson - 1.0.99-1- Release 1.3.4.8 - Ticket 48445 - keep alive entries can break replication - Ticket 47788 - Only check postop result if its a replication operation - Ticket 48536 - Crash in slapi_get_object_extension - Ticket 48492 - heap corruption at schema replication. - Ticket 48448 - dirsrv start-stop fail in certain shell environments.- Release 1.3.4.7 - Bug 1299417 - worker threads do not detect abnormally closed connections (DS 48412) - Ticket 47788 - Supplier can skip a failing update, although it should retry - Ticket 48341 - deadlock on connection mutex - Ticket 48406 - Avoid self deadlock by PR_Lock(conn->c_mutex) - Revert "Ticket #48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results"- Release 1.3.4.6 - Ticket 48388 - db2ldif -r segfaults from time to time - Ticket 48312 - Crash when doing modrdn on managed entry - Ticket 48332 - allow users to specify to relax the FQDN constraint - Ticket 48375 - SimplePagedResults -- in the search error case, simple paged results slot was not released. - Ticket 48362 - With exhausted range, part of DNA shared configuration is deleted after server restart - Ticket 48289 - 389-ds-base: ldclt-bin killed by SIGSEGV - Ticket 48305 - perl module conditional test is not conditional when checking SELinux policies - Ticket 48370 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same modify operation - Ticket 48369 - RFE - Add config setting to always send the password expiring time- Release 1.3.4.5 - Ticket 48316 - Perl-5.20.3-328: Use of literal control characters in variable names is deprecated - Ticket 48348 - Running /usr/sbin/setup-ds.pl fails with Can't locate bigint.pm, plus two warnings - Ticket 48339 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well. - Ticket 48311 - nunc-stans: Attempt to release connection that is not acquired https://fedorahosted.org/389/ticket/48311 - Ticket 48325 - Add lib389 test script - Ticket 48344 - acl - regression - trailing ', (comma)' in macro matched value is not removed. - Ticket 48325 - Replica promotion leaves RUV out of order - Ticket 48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results - Ticket 47976 - deadlock in mep delete post op - Ticket 48311 - nunc-stans: Attempt to release connection that is not acquired - Ticket 47978 - Deadlock between two MODs on the same entry between entry cache and backend lock - Ticket 48305 - perl module conditional test is not conditional when checking SELinux policies - Ticket 47957 - Add replication test suite for a wait async feature - Ticket 48227 - rpm.mk doesn't build srpms for 389-ds and nunc-stans - Ticket 48264 - Ticket 47553 tests refactoring - Ticket 48304 - ns-slapd - LOGINFO:Unable to remove file - Ticket 48298 - ns-slapd crash during ipa-replica-manage del - Ticket 48192 - Individual abandoned simple paged results request has no chance to be cleaned up - Ticket 48299 - pagedresults - when timed out, search results could have been already freed. - Ticket 48204 - update lib389 test scripts for python 3 - Ticket 48283 - many attrlist_replace errors in connection with cleanallruv - Ticket 48266 - do not free repl keep alive entry on error - Ticket 48284 - free entry when internal add fails - Ticket 48266 - Online init crashes consumer - Ticket 48188 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in - Ticket 48217 - cleanallruv - fix regression with server shutdown - Ticket 48266 - coverity issue - Ticket 48266 - Fractional replication evaluates several times the same CSN - Ticket 48279 - Check NULL reference in nssasl_mutex_lock etc. (saslbind.c) - Ticket 48226 - In MMR, double free coould occur under some special condition - Ticket 48273 - Update lib389 tests for new valgrind functions - Ticket 48276 - initialize free_flags in reslimit_update_from_entry() - Ticket 47553 - Automated the verification procedure - Ticket 47761 - Added a few testcases to the basic testsuite - Ticket 48254 - Shell CLI fails with usage errors if an argument containing white spaces is given - Ticket 47511 - bashisms in 389-ds-base admin scripts - Ticket 48267 - Add config setting to MO plugin to add objectclass- Release 1.3.4.4 - Ticket 48255 - total update request can be lost - Ticket 48263 - allow plugins to detect tombstone operations - Ticket 48265 - Complex filter in a search request doen't work as expected. (regression) - Ticket 47981 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes - Ticket 48204 - Convert all python scripts to support python3 - Ticket 48258 - dna plugin needs to handle binddn groups for authorization - Ticket 48252 - db2index creates index entry from deleted records - Ticket 48228 - wrong password check if passwordInHistory is decreased. - Ticket 48252 - db2index creates index entry from deleted records - Ticket 47757 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax - Ticket 48254 - Shell CLI fails with usage errors if an argument containing white spaces is given - Ticket 48254 - CLI db2index fails with usage errors - Ticket 47831 - remove debug logging from retro cl - Ticket 48243 - replica upgrade failed in starting dirsrv service due to upgrade scripts did not run - Ticket 48233 - Server crashes in ACL_LasFindFlush during shutdown if ACIs contain IP addresss restrictions - Ticket 48250 - Slapd crashes reported from latest build - Ticket 48249 - sync_repl uuid may be invalid - Ticket 48245 - Man pages and help for remove-ds.pl doesn't display "-a" option - Ticket 47511 - bashisms in 389-ds-base admin scripts - Ticket 47686 - removing chaining database links trigger valgrind read errors - Ticket 47931 - memberOf & retrocl deadlocks - Ticket 48228 - wrong password check if passwordInHistory is decreased. - Ticket 48215 - update dbverify usage in main.c - Ticket 48215 - verify_db.pl doesn't verify DB specified by -a option - Ticket 47810 - memberOf plugin not properly rejecting updates - Ticket 48231 - logconv autobind handling regression caused by 47446 - Ticket 48232 - winsync lastlogon attribute not syncing between DS and AD.- Release 1.3.4.3 - Ticket 48204 - Add Python 3 compatibility to ds-logpipe- Release 1.3.4.2 - Ticket 48010 - winsync range retrieval gets only 5000 values upon initialization - Ticket 48206 - Crash during retro changelog trimming - Ticket 48224 - redux 2 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files - Ticket 47910 - logconv.pl - check that the end time is greater than the start time - Ticket 48179 - Starting a replica agreement can lead to deadlock - Ticket 48226 - CI test: added test cases for ticket 48226 - Ticket 48226 - In MMR, double free coould occur under some special condition - Ticket 48224 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files - Ticket 48203 - Fix coverity issues - 07/14/2015 - Ticket 48194 - CI test: fixing test cases for ticket 48194 - Ticket 48224 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files - Ticket 47910 - logconv.pl - validate start and end time args - Ticket 48223 - Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute - Ticket 47878 - Remove warning suppression in 1.3.4 - Ticket 48119 - Silent install needs to properly exit when INF file is missing - Ticket 48216 - crash in ns-slapd when deleting winSyncSubtreePair from sync agreement - Ticket 48217 - cleanAllRUV hangs shutdown if not all of the replicas are online - Ticket 48013 - Inconsistent behaviour of DS when LDAP Sync is used with an invalid cookie - Ticket 47799 - Any negative LDAP error code number reported as Illegal error by ldclt. - Ticket 48208 - CleanAllRUV should completely purge changelog - Ticket 48203 - Fix coverity issues - 07/07/2015 - Ticket 48119 - setup-ds.pl does not log invalid --file path errors the same way as other errors. - Ticket 48192 - Individual abandoned simple paged results request has no chance to be cleaned up - Ticket 48214 - CI test: added test cases for ticket 48213 - Ticket 48214 - ldapsearch on nsslapd-maxbersize returns 0 instead of current value - Ticket 48212 - CI test: added test cases for ticket 48212 - Ticket 48212 - Dynamic nsMatchingRule changes had no effect on the attrinfo thus following reindexing, as well. - Ticket 48195 - Slow replication when deleting large quantities of multi-valued attributes- Release 1.3.4.1 - Resolves: Bug 1234277 - distro-wide architecture set overriden by buildsystem; Upgrade nunc-stans to 0.1.5. - Enable nunc-stans just for x86_64. - Ticket 48203 - Fix coverity issues - 06/22/2015- Release 1.3.4.0 (rebase) - Enable nunc-stans in the build. - Ticket 47490 - test case failing if 47721 is also fixed - Ticket 47640 - Linked attributes transaction not aborted when linked entry does not exit - Ticket 47669 - CI test: added test cases for ticket 47669 - Ticket 47669 - Retro Changelog Plugin accepts invalid value in nsslapd-changelogmaxage attribute - Ticket 47723 - winsync sets AccountUserControl in AD to 544 - Ticket 47787 - Make the test case more robust - Ticket 47833 - TEST CASE only (modrdn fails if renamed entry member of a group and is out of memberof scope) - Ticket 47878 - Improve setup-ds update logging - Ticket 47893 - should use Sys::Hostname instead Net::Domain - Ticket 47910 - allow logconv.pl -S/-E switches to work even when timestamps not present in access log - Ticket 47913 - remove-ds.pl should not remove /var/lib/dirsrv - Ticket 47921 - indirect cos does not reflect changes in the cos attribute - Ticket 47927 - Uniqueness plugin: should allow to exclude some subtrees from its scope - Ticket 47953 - testcase for removing invalid aci - Ticket 47966 - CI test: added test cases for ticket 47966 - Ticket 47966 - slapd crashes during Dogtag clone reinstallation - Ticket 47972 - make parsing of nsslapd-changelogmaxage more fault tolerant - Ticket 47972 - make parsing of nsslapd-changelogmaxage more fool proof - Ticket 47998 - cleanup WINDOWS ifdef's - Ticket 47998 - remove remaining obsolete OS code/files - Ticket 47998 - remove "windows" files - Ticket 47999 - address several race conditions in tests - Ticket 47999 - lib389 individual tests not running correctly when run as a whole - Ticket 48003 - build "suite" framework - Ticket 48008 - db2bak.pl man page should be improved. - Ticket 48017 - add script to generate lib389 CI test script - Ticket 48019 - Remove refs to constants.py and backup/restore from lib389 tests - Ticket 48023 - replace old replication check with lib389 function - Ticket 48025 - add an option '-u' to dbgen.pl for adding group entries with uniquemembers - Ticket 48026 - fix invalid write for friendly attribute names - Ticket 48026 - Fix memory leak in uniqueness plugin - Ticket 48026 - Support for uniqueness plugin to enforce uniqueness on a set of attributes. - Ticket 48032 - change C code license to GPLv3; change C code license to allow openssl - Ticket 48035 - nunc-stans - Revise shutdown sequence - Ticket 48036 - ns_set_shutdown should call ns_job_done - Ticket 48037 - ns_thrpool_new should take a config struct rather than many parameters - Ticket 48038 - logging should be pluggable - Ticket 48039 - nunc-stans malloc should be pluggable - Ticket 48040 - preserve the FD when disabling a listener - Ticket 48043 - use nunc-stans config initializer - Ticket 48103 - update DS for new nunc-stans header file - Ticket 48110 - Free all the nunc-stans signal jobs when shutdown is detected - Ticket 48111 - "make clean" wipes out original files - Ticket 48122 - nunc-stans FD leak - Ticket 48127 - Using RPM, allows non root user to create/remove DS instance - Ticket 48141 - aci with wildcard and macro not correctly evaluated - Ticket 48143 - Password is not correctly passed to perl command line tools if it contains shell special characters. - Ticket 48149 - ns-slapd double free or corruption crash - Ticket 48154 - abort cleanAllRUV tasks should not certify-all by default - Ticket 48169 - support NSS 3.18 - Ticket 48170 - Parse nsIndexType correctly - Ticket 48175 - Avoid using regex in ACL if possible - Ticket 48178 - add config param to enable nunc-stans - Ticket 48191 - CI test: added test cases for ticket 48191 - Ticket 48191 - RFE: Adding nsslapd-maxsimplepaged-per-conn - Ticket 48191 - RFE: Adding nsslapd-maxsimplepaged-per-conn Adding nsslapd-maxsimplepaged-per-conn - Ticket 48194 - CI test: added test cases for ticket 48194 - Ticket 48197 - error texts from preop plugins not sent to client- release 1.3.3.12 - Resolves: Bug 1232896 - CVE-2015-3230 389-ds-base: nsSSL3Ciphers preference not enforced server side- release 1.3.3.11 - Ticket 48192 - Individual abandoned simple paged results request has no chance to be cleaned up - Ticket 48190 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane - Ticket 48183 - bind on db chained to AD returns err=32 - Ticket 48158 - cleanAllRUV task limit not being enforced correctly - Ticket 48158 - Remove cleanAllRUV task limit of 4 - Ticket 48146 - async simple paged results issue; need to close a small window for a pr index competed among multiple threads. - Ticket 48146 - async simple paged results issue; log pr index - Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) - Ticket 48177 - dynamic plugins should not return an error when modifying a critical plugin - Ticket 48146 - async simple paged results issue- release 1.3.3.10 - Resolves: Bug 1216203 - CVE-2015-1854 389ds-base: access control bypass with modrdn- bump version to 1.3.3.9 - Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all] - Ticket 47801 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown - Ticket 47957 - Make ReplicaWaitForAsyncResults configurable - Ticket 47431 - CI test: added test cases for ticket 47431 - Ticket 47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly - Ticket 47936: Create a global lock to serialize write operations over several backends - Ticket 48021 - nsDS5ReplicaBindDNGroup checkinterval not working properly - Ticket 48048 - Fix coverity issues - 2015/3/1 - Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) - Ticket 48109 - CI test: added test cases for ticket 48109 - Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) - Ticket 48048 - Fix coverity issues - 2015/2/24 - Ticket 48030 - spec file should run "systemctl stop" against each running instance instead of dirsrv.target - Ticket 47828: DNA scope: allow to exlude some subtrees - Ticket 47988: test case - Ticket 47901: After total init, nsds5replicaLastInitStatus can report an erroneous error status (like 'Referral') - Ticket 48003 - add template scripts - Ticket 48003 - build "suite" framework - Ticket 48005 - CI test: added test cases for ticket 48005 - Ticket 48005 - ns-slapd crash in shutdown phase - Ticket 47742 - 64bit problem on big endian: auth method not supported - Ticket 47836 - Do not return '0' as empty fallback value of nsds5replicalastupdatestart and nsds5replicalastupdatestart - Ticket 47728 - compilation failed with ' incomplete struct/union/enum' if not set USE_POSIX_RWLOCKS - Ticket 48027 - revise the rootdn plugin configuration validation - Ticket 47451 - dynamic plugins - fix crash caused by invalid plugin config - Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD- Fixes spec file to make sure all the server instances are stopped before upgrade - Ticket 48030 - DNS errors after IPA upgrade due to broken ReplSync- bump version to 1.3.3.8 - Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD - Ticket 47963 - memberof skip nested groups breaks the plugin- Bump for rebuild.- removed USE_64=1 which is not used any more.- bump version to 1.3.3.7 - Coverity 12970 - Explicit null dereference - Ticket 47988 - Schema learning mechanism, in replication, unable to extend an existing definition - Ticket 47996 - ldclt needs to support SSL Version range - Ticket 47738 - use PL_strcasestr instead of strcasestr - Ticket 47462 - Stop using DES in the reversible password encryption plug-in - Ticket 47807 - SLAPI_REQUESTOR_ISROOT not set for extended operation plugins - Ticket 47991 - upgrade script fails if /etc and /var are on different file systems - Ticket 47989 - Windows Sync accidentally cleared raw_entry - Ticket 47964 - v2 - Incorrect search result after replacing an empty attribute - Ticket 47934 - nsslapd-db-locks modify not taking into account. - Ticket 47617 - replication changelog trimming setting validation - Ticket 47905 - Bad manipulation of passwordhistory - Ticket 47973 - During schema reload sometimes the search returns no results - Ticket 47981 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes - Ticket 47980 - Nested COS definitions can be incorrectly processed - Ticket 47451 - Dynamic plugins - fixed thread synchronization - Ticket 47750 - During delete operation do not refresh cache entry if it is a tombstone - Ticket 47947 - start dirsrv after chrony on RHEL7 and Fedora - fix jenkins warning - Ticket 47526 - Additional fix for ticket 47526 v3 - Ticket 47451 - Add Dynamic Plugin CI Suite - Ticket 47965 - Fix coverity issues (2014/12/16) - Ticket 47451 - Fix jenkins errors - Ticket 47451 - Dynamic Plugin - various fixes - Ticket 47935 - Error: failed to open an LDAP connection to host 'example.org' port '389' as user 'cn=Directory Manager'. Error: unknown. - Ticket 47750 - Need to refresh cache entry after called betxn postop plugins - Ticket 47942 - DS hangs during online total update - Ticket 47960 - cookie_change_info returns random negative number if there was no change in a tree - Ticket 47960 - cookie_change_info returns random negative number if there was no change in a tree - Ticket 47722 - Using the filter file does not work - Ticket 47636 - Error log levels not displayed correctly - Ticket 47965 - Fix coverity issues (2014/11/24) - Ticket 47969 - Fix coverity issue - Ticket 47949 - logconv.pl -- support parsing/showing/reporting different protocol versions - Ticket 47525 - Crash if setting invalid plugin config area for MemberOf Plugin - Ticket 47970 - add lib389 testcase - Ticket 47970 - Account lockout attributes incorrectly updated after failed SASL Bind - Ticket 47969 - COS memory leak when rebuilding the cache - Ticket 47967 - cos_cache_build_definition_list does not stop during server shutdown - Ticket 47451 - Running a plugin task can crash the server - Ticket 47963 - skip nested groups breaks memberof fixup task - Ticket 47963 - RFE - memberOf - add option to skip nested group lookups during delete operations - Ticket 47810 - RI plugin does not return result code if update fails- rebuild for ICU 54.1- 5d72a2f bump version to 1.3.3.6-1 - Ticket 47950 - Bind DN tracking unable to write to internalModifiersName without special permissions - Ticket 47958 - Memory leak in password admin if the admin entry does not exist - Ticket 47952 - PasswordAdminDN attribute is not properly returned to client - Ticket 47451 - Need to unregister tasks created by plugins - Ticket 47928 - Disable SSL v3, by default. - Ticket 47953 - Should not check aci syntax when deleting an aci - Ticket 47948 - ldap_sasl_bind fails assertion (ld != NULL) if it is called from chainingdb_bind over SSL/startTLS - Ticket 47945 - Add SSL/TLS version info to the access log - Ticket 47939 - Malformed cookie for LDAP Sync makes DS crash - Ticket 47937 - Crash in entry_add_present_values_wsi_multi_valued - Ticket 47928 - CI test: added test cases for ticket 47928 - Ticket 47553 - Enhance ACIs to have more control over MODRDN operations- Release 1.3.3.5 - Ticket 47914 - Add FreeIPA Conflicts to 389 spec file - Ticket 47922 - dynamically added macro aci is not evaluated on the fly - Ticket 47897 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten - Ticket 47920 - Encoding of SearchResultEntry is missing tag - Ticket 47912 - Proper handling of "No original_tombstone for changenumber" errors - Ticket 47899 - Fix slapi_td_plugin_lock_init prototype - Ticket 47919 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails. - Ticket 47892 - Fix remaining compiler warnings - ticket 47916 - plugin logging parameter only triggers result logging - Ticket 47918 - result of dna_dn_is_shared_config is incorrectly used - Ticket 47900 - Server fails to start if password admin is set - Ticket 47892 - coverity defects found in 1.3.3.x- Release 1.3.3.4 - Ticket 47880 - CI test: added test cases for ticket 47880 - Ticket 47880 - provide enabled ciphers as search result - Ticket 47838 - CI test: adjusted test cases based on the phase 2 fixes for ticket 47838 - Ticket 47838 - harden the list of ciphers available by default (phase 2) - Ticket 47900 - Adding an entry with an invalid password as rootDN is incorrectly rejected - Ticket 47908 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server - Ticket 47907 - ldclt: assertion failure with -e "add,counteach" -e "object=,rdn=uid:test[A=INCRNNOLOOP(0;24 - Ticket 47750 - Creating a glue fails if one above level is a conflict or missing- Use generic 64 bit detection (fixes aarch64/ppc64le) - PPC/s390 has lm_sensors - Minor spec cleanups- Release 1.3.3.3 - Ticket #47892 - coverity defects found in 1.3.3.1- Release 1.3.3.2 - Ticket 47889 - DS crashed during ipa-server-install on test_ava_filter - Ticket 47895 - If no effective ciphers are available, disable security setting. - Ticket 47838 - harden the list of ciphers available by default - Ticket 47885 - did not always return a response control - Ticket 47890 - minor memory leaks in utilities - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. - Ticket 47748 - Simultaneous adding a user and binding as the user could fail in the password policy check - Ticket 47875 - dirsrv not running with old openldap - Ticket 47885 - deref plugin should not return references with noc access rights- Perl 5.20 rebuild- Release 1.3.3.0 - Ticket 47879 - coverity defects in plugins/replication/windows_protocol_util.c - Ticket 47876 - coverity defects in slapd/tools/mmldif.c - Ticket 47574 - start dirsrv after ntpd - Ticket 47838 - harden the list of ciphers available by default - Ticket 47579 - add dbmon.sh - Ticket 47819 - Fix memory leak - Ticket 47819 - Improve tombstone purging performance - Ticket 47714 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime. - Ticket 47812 - logconv.pl missing -U option from usage - Ticket 47664 - Page control does not work if effective rights control is specified - Ticket 47790 - Integer config attributes accept invalid values at server startup - Ticket 47710 - Missing warning for invalid replica backoff configuration - Ticket 47853 - Missing newline at end of the error log messages in memberof - Ticket 47853 - client hangs in add if memberof fails - Ticket 47746 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf - Ticket 47711 - improve dbgen rdn generation, output and man page. - Ticket 47855 - Fix previous commit - Ticket 47859 - Coverity: 12692 & 12717 - Ticket 47855 - clear tmp directory at the start of each test - Ticket 47844 - Fix hyphens used as minus signed and other manpage mistakes - Ticket 47843 - Fix various typos in manpages & code - Ticket 47832 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro - Ticket 47852 - Updating winsync one-way sync does not affect the behaviour dynamically - Ticket 47846 - server crashes deleting a replication agreement - Ticket 47823 - attribute uniqueness enforced on all subtrees - Ticket 47654 - Fix regression (deadlock/crash) - Ticket 47827 - Fix coverity issue 12695 - Ticket 47829: memberof scope: allow to exclude subtrees - Ticket 47815 - Add operations rejected by betxn plugins remain in cache - Ticket 47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed - Ticket 555 - add fixup-memberuid.pl script - Ticket 47827 - online import crashes server if using verbose error logging - fix compiler error with alst coverity commit - fix coverity issue 12621 - Ticket 47810 - investigate betxn plugins to ensure they return the correct error code - Ticket 47602 - txn commit being performed too early - Ticket 47752 - Don't add unhashed password mod if we don't have an unhashed value - Ticket 47803 - syncrepl crash if attribute list is non-empty - Ticket 47466 - Fix coverity issue - Ticket 47644 - Managed Entry Plugin - transaction not aborted upon failure to create managed entry - Ticket 47791 - Negative value of nsSaslMapPriority is not reset to lowest priority - Ticket 47805 - syncrepl doesn't send notification when attribute in search filter changes - Ticket 47636 - errorlog-level 16384 is listed as 0 in cn=config - Ticket 47451 - Remove old code from linked attr plugin - Ticket 47756 - fix coverity issues - Ticket 47761 - Return all attributes in rootdse without explicit request - fix assertion failure introduced with fix for ticket 47667 - Ticket 47712 - betxn: retro changelog broken after cancelled transaction - Ticket 47667 - Allow nsDS5ReplicaBindDN to be a group DN - Ticket 47655 - Improve replication total update logging - Ticket 47756 - Improve import logging and abort processing - Ticket 47451 - add/enable/disable/remove plugins without server restart - Ticket 47553 - Enhance ACIs to have more control over MODRDN operations - Ticket 47727 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53 - Ticket 47725 - compiler error on daemon.c - Ticket 47701 - Make retro changelog trim interval programmable - Ticket 47453 - configure SASL/GSSAPI/Kerberos without server restart - Ticket 47701 - Make retro changelog trim interval programmable - Ticket 47602 - Make ldbm_back_seq independently support transactions - Ticket 47552 - logconv: unindexed report should list bind dn - Ticket 47619 - cannot reindex retrochangelog - Update test cases due to new modules: Schema, tasks, plugins and index - Ticket 47608 - change slapi_entry_attr_get_bool to handle "on"/"off" values, support default value - Ticket 47437 - Some attributes in cn=config should not be multivalued - Ticket 47573 - schema push can be erronously prevented - Ticket 47618 - Enable normalized DN cache by default - Ticket 47570 - slapi_ldap_init unusable during independent plugin development - Ticket 47659 - ldbm_usn_init: Valgrind reports Invalid read / SIGSEGV - Ticket 47654 - fix double free - Ticket 47675 - logconv errors when search has invalid bind dn - Ticket 47657 - add schema test suite and tests for Ticket #47634 - Ticket 47668 - test: port ticket47490_test to Replica/Agreement interface (47600) - Ticket 47654 - Cleanup old memory leaks reported from valgrind - Ticket 47651 - Finaliser to remove instances backups - Ticket 47603 - should not modify pre op entry during config validation - Ticket 47628 - port testcases to new DirSrv interface - Ticket 47525 - Don't modify preop entry in memberOf config - Ticket 605 - support TLS 1.1 - Fixing "Coverity 12415 - Logically dead code" - Ticket 605 - support TLS 1.1 - lower the log level for the supported NSS version range - Ticket 47368 - fix memory leaks - Ticket 605 - support TLS 1.1 - adding backward compatibility - Ticket 605 - support TLS 1.1 - Ticket 47603 - Allow RI plugin to use alternate config area - Ticket 47586 - Need to rebind after a stop (fix to run direct python script) - Ticket 47525 - Need to add locking around config area access - Ticket 47457 - default nsslapd-sasl-max-buffer-size should be 2MB - Ticket 47525 - Fix memory leak - Ticket 381 - Recognize compressed log files - Ticket 47525 - Allow memberOf to use an alternate config area - Ticket 47529 - Automember plug-in should treat MODRDN operations as ADD operations - Ticket 47521 - Complex filter in a search request doen't work as expected. - Ticket 47582 - agmt_count in Replica could become (PRUint64)-1 - Ticket 47368 - Fix coverity issues - Ticket 47555 - db2bak.pl issue when specifying non-default directory - Ticket 47368 - Fix Jenkins errors - Ticket 47368 - IPA server dirsrv RUV entry data excluded from replication - Ticket 538 - - hardcoded sasl2 plugin path in ldaputil.c, saslbind.c - Ticket 47519 - memory leaks in access control - Ticket 47398 - memberOf on a user is converted to lowercase - Coverity Issue 12033 - Ticket 47530 - dbscan on entryrdn should show all matching values - Ticket 47422 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added - bump autoconf to 2.69, automake to 1.13.4, libtool to 2.4.2 - Ticket 47436 - 389-ds-base - shebang with /usr/bin/env - Ticket 47499 - if nsslapd-cachememsize set to the number larger than the RAM available, should result in proper error message. - Ticket 47530 - dbscan on entryrdn should show all matching values - Ticket 47535 - update man page - Ticket 53 - Need to update supported locales Cleaning up typos and format. - Ticket 47535 - Logconv.pl - RFE - add on option for a minimum etime for unindexed search stats - Ticket 47491 - Update systemd service file to use PartOf directive- Perl 5.20 rebuild- Release 1.3.2.23 - Ticket 47871 - 389-ds-base-1.3.2.21-1.fc20 crashed over the weekend - Ticket 47866 - Errors after upgrading related to attribute "dnaremotebindmethod" - Ticket 47816 - v2- internal syncrepl searches are flagged as unindexed - Ticket 47877 - check_and_add_entry fails for changetype: add and existing entry - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. - Ticket 47875 - dirsrv not running with old openldap - Revert "Ticket #47875 - dirsrv not running with old openldap" - Ticket 47875 - dirsrv not running with old openldap - Ticket 47446 - logconv.pl memory continually grows - Ticket 47874 - Performance degradation with scope ONE after some load - Ticket 47872 - Filter AND with only one clause should be optimized - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. - Ticket 47862 - repl-monitor fails to convert "*" to default values - Ticket 47824 - paged results control is not working in some cases when we have a subsuffix. - Ticket 47862 - Repl-monitor.pl ignores the provided connection parameters - Ticket 346 - Fixing memory leaks - Ticket 47753 - Add switch to disable pre-hashed password checking - Ticket 47861 - Certain schema files are not replaced during upgrade - Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server - Ticket 47797 - fix the indentation - Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL - Ticket 47692 - single valued attribute replicated ADD does not work - Ticket 47781 - Server deadlock if online import started while server is under load- Perl 5.20 rebuild- rebuild for ICU 53.1- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Release 1.3.2.21 - Resolves: #1127833 Ticket 47869 - unauthenticated information disclosure (Bug 1123477) 389-ds-base-1.3.2.22 = 389-ds-base-1.3.2.19 + Bug 1127833 fix.- Release 1.3.2.21 - Resolves: #1127833 Ticket 47869 - unauthenticated information disclosure (Bug 1123477) - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. - Ticket 47862 - repl-monitor fails to convert "*" to default values - Ticket 47824 - paged results control is not working in some cases when we have a subsuffix. - Ticket 47862 - Repl-monitor.pl ignores the provided connection parameters - Ticket 346 - Fixing memory leaks- Release 1.3.2.20 - Ticket 47753 - Add switch to disable pre-hashed password checking - Ticket 47861 - Certain schema files are not replaced during upgrade - Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server - Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. - Ticket 47692 - single valued attribute replicated ADD does not work - Ticket 47781 - Server deadlock if online import started while server is under load- Release 1.3.2.19 - Ticket 47779 - Potential deadlock after startup if a dna configuration change is made - Ticket 47839 - 389-ds production segfault: __memcpy_sse2_unaligned...- Release 1.3.2.18 - Ticket 47750 - Creating a glue fails if one above level is a conflict or missing - Ticket 47763 - winsync plugin modify is broken - Ticket 47821 - deref plugin cannot handle complex acis - Ticket 47831 - server restart wipes out index config if there is a default index - Ticket 47817 - The error result text message should be obtained just prior to sending result - Ticket 47815 - Add operations rejected by betxn plugins remain in cache - Ticket 47809 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..." - Ticket 47704 - invalid sizelimits in aci group evaluation - Ticket 47813 - remove "goto bail" from previous commit - Ticket 47813 - managed entry plugin fails to update member pointer on modrdn operation - Ticket 47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed. - Ticket 47770 - #481 breaks possibility to reassemble memberuid list- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Release 1.3.2.17 - Ticket 47446 - logconv.pl memory continually grows - Ticket 47713 - Logconv.pl with an empty access log gives lots of errors - Ticket 47806 - Failed deletion of aci: no such attribute - bump version - Ticket 47720 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator. - Ticket 47670 - Aci warnings in error log - Ticket 47721 - Schema Replication Issue (follow up) - Ticket 47721 - Schema Replication Issue (follow up + cleanup) - Ticket 47721 - Schema Replication Issue - Ticket 47676 - (cont.) Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1 - Ticket 47676 - Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1 - Ticket 47541 - Fix Jenkins errors - Ticket 47541 - Replication of the schema may overwrite consumer 'attributetypes' even if consumer definition is a superset - Ticket 47804 - db2bak.pl error with changelogdb - Ticket 47780 - Some VLV search request causes memory leaks - Ticket 47787 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone - Ticket 47764 - Problem with deletion while replicated - Ticket 47750 - Creating a glue fails if one above level is a conflict or missing; Ticket 47696 - Large Searches Hang - Possibly entryrdn related - Ticket 47772 - fix coverity issue - Ticket 47793 - Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled. - Ticket 47792 - database plugins need a way to call betxn plugins - Ticket 47707 - 389 DS Server crashes and dies while handles paged searches from clients - Ticket 47792 - code cleanup - Ticket 47779 - Need to lock server list when removing list - Ticket 47771 - Move parentsdn initialization to avoid crash - Ticket 47779 - Part of DNA shared configuration is deleted after server restart - Ticket 346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values - Ticket 47782 - Parent numbordinate count can be incorrectly updated if an error occurs - Ticket 47772 - empty modify returns LDAP_INVALID_DN_SYNTAX - Ticket 47774 - mem leak in do_search - rawbase not freed upon certain errors - Ticket 47773 - mem leak in do_bind when there is an error - Ticket 47771 - Performing deletes during tombstone purging results in operation errors - Ticket 47767 - Nested tombstones become orphaned after purge - Ticket 47766 - Tombstone purging can crash the server if the backend is stopped/disabled - Ticket 47759 - Crash in replication when server is under write load - Ticket 47740 - Fix coverity issues(part 7) - Ticket 47748 - Simultaneous adding a user and binding as the user could fail in the password policy check - Ticket 47743 - Memory leak with proxy auth control - Ticket 47740 - Crash caused by changes to certmap.c - Ticket 47733 - ds logs many "Operation error fetching Null DN" messages - Ticket 47740 - Fix coverity issues: null deferences - Part 6 - Ticket 47732 - ds logs many "SLAPI_PLUGIN_BE_TXN_POST_DELETE_FN plugin returned error" messages - Ticket 47740 - Coverity issue in 1.3.3 - Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry - Ticket 47740 - Fix coverity issues - Part 5 - Ticket 47740 - Fix coverity erorrs - Part 4 - Ticket 47640 - Fix coverity issues - part 3 - Ticket 47740 - Fix sync plugin resource leaks - Ticket 47538 - RFE: repl-monitor.pl plain text output, cmdline config options - Ticket 47740 - Coverity Fixes (Mark - part 1) - Ticket 47734 - Change made in resolving ticket #346 fails on Debian SPARC64 - Ticket 47722 - Fixed filter not correctly identified - Ticket 47722 - rsearch filter error on any search filter- Release 1.3.2.16 (This release is 1.3.2.13 + Ticket 47739) - Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind- Bump version to 1.3.2.15 - Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry - Ticket 47740 - Coverity issue in 1.3.3 - Ticket 47740 - Fix coverity issues - Part 5 - Ticket 47740 - Fix coverity erorrs - Part 4 - Ticket 47640 - Fix coverity issues - part 3 - Ticket 47740 - Fix sync plugin resource leaks - Ticket 47538 - RFE: repl-monitor.pl plain text output, cmdline config options - Ticket 47740 - Coverity Fixes (Mark - part 1) - Ticket 47734 - Change made in resolving ticket #346 fails on Debian SPARC64 - Ticket 47722 - Fixed filter not correctly identified - Ticket 47722 - rsearch filter error on any search filter- Bump version to 1.3.2.14 - Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind - Ticket 47737 - Under heavy stress, failure of turning a tombstone into glue makes the server hung - Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry - Ticket 47729 - Directory Server crashes if shutdown during a replication initialization - Ticket 47637 - rsa_null_sha should not be enabled by default- Bump version to 1.3.2.13 - The previous version 1.3.2.12 missed to increment the version in VERSION.sh- Bump version to 1.3.2.12 - Ticket 408 - create a normalized dn cache - Ticket 571 - Empty control list causes LDAP protocol error is thrown (dup 47361) - Ticket 408 - create a normalized dn cache - Ticket 47699 - Propagate plugin precedence to all registered function types - Ticket 525 - Replication retry time attributes cannot be added - Ticket 47709 - package issue in 389-ds-base - Ticket 47700 - Unresolved external symbol references break loading of the ACL plugin - Ticket 47642 - Windows Sync group issues - Ticket 525 - Replication retry time attributes cannot be added - Ticket 47692 - single valued attribute replicated ADD does not work - Ticket 47615 - Failed to compile the DS 389 1.3.2.3 version against Berkeley DB 4.2 version - Ticket 47677 - Size returned by slapi_entry_size is not accurate - Ticket 47693 - Environment variables are not passed when DS is started via service- Added arch aware python dir; moved libns-dshttpd.so* to devel and libs package.- Rebuild for icu 52- Bump version to 1.3.2.11 - Ticket 47653 - Need a way to allow users to create entries assigned to themselves. - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used - Ticket 47374 - flush.pl is not included in perl5 - Ticket 47649 - Server hangs in cos_cache when adding a user entry - Ticket 443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error - Ticket 47638 - Overflow in nsslapd-disk-monitoring-threshold on 32bit platform - Ticket 47641 - 7-bit check plugin not checking MODRDN operation - Ticket 342 - better error message when cache overflows - Ticket 47516 - replication stops with excessive clock skew - Ticket 47620 - Unable to delete protocol timeout attribute - Ticket 408 - Fix crash when disabling/enabling the setting - Ticket 47629 - random crashes related to sync repl - Ticket 47571 - targetattr ACIs ignore subtype - Ticket 47660 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read - Revert "Ticket 47653 - Need a way to allow users to create entries assigned to themselves"- Bump version to 1.3.2.10 - Ticket 447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs - Ticket 47653 - Need a way to allow users to create entries assigned to themselves - Ticket 47647 - remove bogus definition in 60rfc3712.ldif - Ticket 47634 - support AttributeTypeDescription USAGE userApplications distributedOperation dSAOperation - Ticket 47645 - reset stack, op fields to NULL - clean up stacks at shutdown - free unused plugin config entries- Bump version to 1.3.2.9 - Ticket 47621 - v2 make referential integrity configuration more flexible - Ticket 47620 - Fix missing left bracket - Ticket 47620 - Fix dereferenced NULL pointer in agmtlist_modify_callback() - Ticket 47606 - replica init/bulk import errors should be more verbose - Ticket 47631 - objectclass may, must lists skip rest of objectclass once first is found in sup - Ticket 47627 - Fix replication logging - Ticket 47620 - Fix logically dead code. - Ticket 47313 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result - Ticket 47620 - Config value validation improvement - Ticket 47620 - Fix cherry-pick error for 1.3.2 and 1.3.1 - Ticket 47613 - Issues setting allowed mechanisms - Ticket 47617 - allow configuring changelog trim interval - Ticket 47601 - Plugin library path validation prevents intentional loading of out-of-tree modules - Ticket 47627 - changelog iteration should ignore cleaned rids when getting the minCSN - Ticket 47623 - fix memleak caused by 47347 - Ticket 47622 - Automember betxnpreoperation - transaction not aborted when group entry does not exist - Ticket 47623 - fix memleak caused by 47347 - Ticket 47620 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute- Bump version to 1.3.2.8 - Ticket 47612 - ns-slapd eats all the memory - Ticket 47527 - Allow referential integrity suffixes to be configurable - Ticket 47526 - Allow memberof suffixes to be configurable - Ticket 342 - better error message when cache overflows (phase 2) - Ticket 47587 - hard coded limit of 64 masters in agreement and changelog code - Ticket 47611 - Add script to build patched RPMs - Ticket 47614 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms - Ticket 47613 - Impossible to configure nsslapd-allowed-sasl-mechanisms - Ticket 47592 - automember plugin task memory leaks - Ticket 47591 - entries with empty objectclass attribute value can be hidden - Ticket 47596 - attrcrypt fails to find unlocked key- 924ead4 Bump version to 1.3.2.7 - Ticket 47593 - Update plugin API for OTP plugin - Ticket 47599 - fix memory leak in ldbm_back_seq()- Ticket 47599 - Reduce lock scope in retro changelog plug-in - previous fix missing defition of retrocl_cn_lock- Ticket #47605 CVE-2013-4485: DoS due to improper handling of ger attr searches6cdca01 bump version to 1.3.2.4 Ticket 47599 - Reduce lock scope in retro changelog plug-in Ticket 47596 - attrcrypt fails to find unlocked key Ticket 47598 - Convert ldbm_back_seq code to be transaction aware Ticket 47597 - Convert retro changelog plug-in to betxn Ticket 47585 - Replication Failures related to skipped entries due to cleaned rids Ticket 47588 - Compiler warnings building on F19 Ticket 47581 - Winsync plugin segfault during incremental backoff (phase 2) Ticket 47581 - Winsync plugin segfault during incremental backoff Ticket 47577 - crash when removing entries from cache 6b16d30 Revert "Ticket #47559 hung server - related to sasl and initialize"- release 1.3.2.3 - Ticket 47515 - Fedora 20: setup-ds-admin.pl - Ticket 47569 - Fix build warnings - Ticket 47569 - ACIs do not allow attribute subtypes in targetattr keyword - Ticket 47565 - Content Sync update file needs extensibleObject - Ticket 47560 - fixup memberof task does not work: task entry not added - Ticket 47559 - hung server - related to sasl and initialize- release 1.3.2.2 - Ticket 47517 - memory leak in range searches and other various leaks - ticket 47550 - wip (cherry picked from commit 82377636267787be5182457d619d5a0b662d2658) - Ticket 47550 - logconv: failed logins: Use of uninitialized value in numeric comparison at logconv.pl line 949- release 1.3.2.1 - Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/lock - Ticket 47551 - logconv: -V does not produce unindexed search report - Ticket 47490 - Schema replication between DS versions may overwrite newer base schema- release 1.3.2.0 - Ticket 48 - Active Directory has certain uids which are reserved and will cause a Directory Server replica initialization of an AD server to abort. - Ticket 53 - Need to update supported locales - Ticket 54 - locale "nl" not supported by collation plugin - Ticket 77 - [RFE] Add ACI support for ldapi - Ticket 123 - Enhancement request: "whoami" extended operation - Ticket 153 - Schema file parsing overly picky? - Ticket 182 - Pwd retry counters replication not enabled by default, and enabling it could lead to undesired results - Ticket 197 - rhds82 rfe - BDB backend - clear free page files to reduce changelog size - Ticket 205 - rhds81 rfe - snmp counters index strings for multiple network interfaces with ip addr and tcp port pairs - Ticket 208 - [RFE] Roles with explicit scoping in RHDS - Ticket 283 - Expose slapi_eq_* API - Ticket 314 - ChainOnUpdate: "cn=directory manager" can modify userRoot on consumer without changes being chained or replicated. Directory integrity compromised. - Ticket 411 - [RFE] mods optimizer - Ticket 415 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist - Ticket 428 - posix winsync should support ADD user/group entries from DS to AD - Ticket 460 - support multiple subtrees and filters - Ticket 512 - improve performance of vattr code - Ticket 513 - recycle operation pblocks - Ticket 514 - investigate connection locking - Ticket 521 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change - Ticket 564 - Is ldbm_txn_ruv_modify_context still required ? - Ticket 568 - using transaction batchval violates durability - Ticket 569 - examine replication code to reduce amount of stored state information - Ticket 586 - selinux errors with /usr/sbin/setup-ds-admin.pl - Ticket 589 - [RFE] Support RFC 4527 Read Entry Controls - Ticket 601 - multi master replication allows schema violation - Ticket 602 - replication inconsistency if attribute is modified several times in one operaion - Ticket 607 - Replication issue: Entry can diverge betwen servers - Ticket 609 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts. - Ticket 615 - High contention on cos cache lock - Ticket 617 - Possible to add invalid ACI value - Ticket 626 - Possible to add nonexistent target to ACI - Ticket 630 - The backend name provided to bak2db is not validated - Ticket 47306 - execute index_add_mods only for indexed attributes - Ticket 47310 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync - Ticket 47313 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result - Ticket 47314 - Winsync should support range retrieval - Ticket 47316 - Search against 'view' is always reported as unindexed - Ticket 47317 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default - Ticket 47319 - make connection buffer size adjustable - Ticket 47320 - put conn on work_q not poll list if conn has buffered more_data - Ticket 47323 - resurrected entry is not correctly indexed - Ticket 47326 - idl switch does not work - Ticket 47329 - Improve slapi_back_transaction_begin() return code when transactions are not available - Ticket 47331 - Self entry access ACI not working properly - Ticket 47337 - mep_pre_op: Unable to fetch origin entry - Ticket 47340 - Deleting a separator ',' in 7-bit check plugin arguments makes the server fail to start with segfault - Ticket 47350 - Allow search to look up 'in memory RUV' - Ticket 47354 - Indexed search are logged with 'notes=U' in the access logs - Ticket 47358 - backend performance - introduce optimization levels - Ticket 47360 - Delete attribute could crash the server - Ticket 47363 - 7-bit checking is not necessary for userPassword - Ticket 47370 - DS crashes with some 7-bit check plugin configurations - Ticket 47371 - Some updates of "passwordgraceusertime" are useless when updating "userpassword" - Ticket 47372 - make old-idl tunable - Ticket 47381 - nsslapd-db-transaction-batch-val turns to -1 - Ticket 47382 - Add a warning message when a connection hits the max number of threads - Ticket 47384 - Plugin library path validation - Ticket 47387 - improve logconv.pl performance with large access logs - Ticket 47388 - [RFE] Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533 - Ticket 47389 - Non-directory manager can change the individual userPassword's storage scheme - Ticket 47394 - remove-ds.pl should remove /var/lock/dirsrv - Ticket 47400 - MMR stress test with dna enabled causes a deadlock - Ticket 47411 - Replace substring search with plain search in referint plugin - Ticket 47416 - IPA replica's - "SASL encrypted packet length exceeds maximum allowed limit" - Ticket 47423 - 7-bit check plugin does not work for userpassword attribute - Ticket 47425 - should only call windows_update_done if repl agmt type is windows - Ticket 47426 - move compute_idletimeout out of handle_pr_read_ready - Ticket 47433 - With SeLinux, ports can be labelled per range. setup-ds.pl or setup-ds-admin.pl fail to detect already ranged labelled ports - Ticket 47463 - IDL-style can become mismatched during partial restoration - Ticket 47487 - enhance retro changelog - Ticket 47502 - updates to ruv entry are written to retro changelog - Ticket 47504 - idlistscanlimit per index/type/value - Ticket 47505 - get rid of valueset_add_valuearray_ext - Ticket 47520 - Fix various issues with logconv.pl - Ticket 47522 - Password administrators should be able to violate password policy - Ticket 47531 - 1.3.2 with mozldap - need to redo sasl_io_recv - Ticket 47532 - 1.3.2 with mozldap - crashes in new operation work_q - Ticket 47539 - Disabling DNA plug-in throws error 53 - Ticket 47543 - mozldap - fix compiler warnings- Ticket 47513 - Set localrundir outside of the "with-fhs" block - Ticket 47513 - Refine the check for @localrundir@ - Ticket 47510 - remove unnecessary typedef - Ticket 47510 - Repl Sync does not compile against MozLDAP libraries- Ticket #47534 - RUV tombstone search with scope "one" doesn`t work - Ticket 47510 - 389-ds-base does not compile against MozLDAP libraries - Ticket #47523 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch - Ticket 47528 - 389-ds-base built with mozldap can crash from invalid free - Ticket #47504 idlistscanlimit per index/type/value - Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/lock - Ticket #47492 - PassSync removes User must change password flag on the Windows side - Ticket 47509 - CLEANALLRUV doesnt run across all replicas - Ticket #47516 replication stops with excessive clock skew - 6829200 Coverity fix - 11952 - for Ticket 47512 - Ticket 47512 - backend txn plugin fixup tasks should be done in a txn- release 1.3.1.9 - Ticket 449 - Allow macro aci keywords to be case-insensitive - Ticket 47489 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing - Ticket 47507 - automember rebuild task not working as expected- Ticket #47455 - valgrind - value mem leaks, uninit mem usage - fix breakage in slapi-nis introduced with the previous fix - Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly- bump version to 1.3.1.7 - Bug 1002215 - CVE-2013-4283 389-ds-base: ns-slapd crash due to bogus DN - Ticket 47488 - Users from AD sub OU does not sync to IPA - Ticket 47461 - logconv.pl - Use of comma-less variable list is deprecated - Ticket 47473 - setup-ds.pl doesn't lookup the "root" group correctly- Perl 5.18 rebuild- bump version to 1.3.1.6 - Ticket 47455 - valgrind - value mem leaks, uninit mem usage - fix coverity 11915 - dead code - introduced with fix for ticket 346 - fix coverity 11895 - null deref - caused by fix to ticket 47392 - fix compiler warning in posix winsync code for posix_group_del_memberuid_callback - Fix compiler warnings for Ticket 47395 and 47397 - fix compiler warning (cherry picked from commit 904416f4631d842a105851b4a9931ae17822a107) - Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch - fix compiler warnings - Fix compiler warning (cherry picked from commit ec6ebc0b0f085a82041d993ab2450a3922ef5502)- bump version to 1.3.1.5 - Ticket 47456 - delete present values should append values to deleted values - Ticket 47455 - valgrind - value mem leaks, uninit mem usage - Ticket 47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication - Ticket 47440 - Fix runtime errors caused by last patch. - Ticket 47440 - Fix compilation warnings and header files - Ticket 47405 - CVE-2013-2219 ACLs inoperative in some search scenarios - Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D - Ticket 47378 - fix recent compiler warnings - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47449 - deadlock after adding and deleting entries - Ticket 47441 - Disk Monitoring not checking filesystem with logs - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold- bump version to 1.3.1.4 - Ticket 47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negative. - Ticket 47424 - Replication problem with add-delete requests on single-valued attributes - Ticket 47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry - Ticket 47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry - Ticket 47421 - memory leaks in set_krb5_creds - Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute values - Ticket 47369 version2 - provide default syntax plugin - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47399 - RHDS denies MODRDN access if ACI list contains any DENY rule - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47428 - Memory leak in 389-ds-base 1.2.11.15 - Ticket 47392 - ldbm errors when adding/modifying/deleting entries - Ticket 47385 - Disk Monitoring is not triggered as expected. - Ticket 47410 - changelog db deadlocks with DNA and replication- Perl 5.18 rebuild- bump version to 1.3.1.3 - Ticket 47374 - flush.pl is not included in perl5 - Ticket 47391 - deleting and adding userpassword fails to update the password (additional fix) - Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization - Ticket 47395 47397 - v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured - Ticket 47396 - crash on modrdn of tombstone - Ticket 47400 - MMR stress test with dna enabled causes a deadlock - Ticket 47409 - allow setting db deadlock rejection policy - Ticket 47419 - Unhashed userpassword can accidentally get removed from mods - Ticket 47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'- bump version to 1.3.1.2 - Ticket 47391 - deleting and adding userpassword fails to update the password - Coverity Fixes (Part 7)- bump version to 1.3.1.1 - Ticket 402 - nhashed#user#password in entry extension - Ticket 511 - Revision - allow turning off vattr lookup in search entry return - Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate - Ticket 47327 - error syncing group if group member user is not synced - Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback - Ticket 47359 - new ldap connections can block ldaps and ldapi connections - Ticket 47362 - ipa upgrade selinuxusermap data not replicating - Ticket 47375 - flush_ber error sending back start_tls response will deadlock - Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3) - Ticket 47377 - make listen backlog size configurable - Ticket 47378 - fix recent compiler warnings - Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice - Ticket 47385 - DS not shutting down when disk monitoring threshold is reached - Coverity Fixes (part 1) - Coverity Fixes (Part 2) - Coverity Fixes (Part 3) - Coverity Fixes (Part 4) - Coverity Fixes (Part 5)- bump version to 1.3.1.0 - Ticket 332 - Command line perl scripts should attempt most secure connection type first - Ticket 342 - better error message when cache overflows - Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager - Ticket 419 - logconv.pl - improve memory management - Ticket 422 - 389-ds-base - Can't call method "getText" - Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts - Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used - Ticket 487 - Possible to add invalid attribute values to PAM PTA plugin configuration - Ticket 502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen - Ticket 505 - use lock-free access name2asi and oid2asi tables (additional) - Ticket 508 - lock-free access to FrontendConfig structure - Ticket 511 - allow turning off vattr lookup in search entry return - Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time - Ticket 528 - RFE - get rid of instance specific scripts - Ticket 529 - dn normalization must handle multiple space characters in attributes - Ticket 532 - RUV is not getting updated for both Master and consumer - Ticket 533 - only scan for attributes to decrypt if there are encrypted attrs configured - Ticket 534 - RFE: Add SASL mappings fallback - Ticket 537 - Improvement of range search - Ticket 539 - logconv.pl should handle microsecond timing - Ticket 543 - Sorting with attributes in ldapsearch gives incorrect result - Ticket 545 - Segfault during initial LDIF import: str2entry_dupcheck() - Ticket 547 - Incorrect assumption in ndn cache - Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval - Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation - Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration - Ticket 558 - Replication - make timeout for protocol shutdown configurable - Ticket 561 - disable writing unhashed#user#password to changelog - Ticket 563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized. - Ticket 565 - turbo mode and replication - allow disable of turbo mode - Ticket 571 - server does not accept 0 length LDAP Control sequence - Ticket 574 - problems with dbcachesize disk space calculation - Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions - Ticket 585 - Behaviours of "db2ldif -a " and "db2ldif.pl -a " are inconsistent - Ticket 587 - Replication error messages in the DS error logs - Ticket 588 - Create MAN pages for command line scripts - Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control - Ticket 603 - A logic error in str2simple - Ticket 604 - Required attribute not checked during search operation - Ticket 608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message - Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND - Ticket 612 - improve dbgen rdn generation, output - Ticket 613 - ldclt: add timestamp, interval, nozeropad, other improvements - Ticket 616 - High contention on computed attribute lock - Ticket 618 - Crash at shutdown while stopping replica agreements - Ticket 620 - Better logging of error messages for 389-ds-base - Ticket 621 - modify operations without values need to be written to the changelog - Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory - Ticket 631 - Replication: "Incremental update started" status message without consumer initialized - Ticket 633 - allow nsslapd-nagle to be disabled, and also tcp cork - Ticket 47299 - allow cmdline scripts to work with non-root user - Ticket 47302 - get rid of sbindir start/stop/restart slapd scripts - Ticket 47303 - start/stop/restart dirsrv scripts should report and error if no instances - Ticket 47304 - reinitialization of a master with a disabled agreement hangs - Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task) - Ticket 47312 - replace PR_GetFileInfo with PR_GetFileInfo64 - Ticket 47315 - filter option in fixup-memberof requires more clarification - Ticket 47325 - Crash at shutdown on a replica aggrement - Ticket 47330 - changelog db extension / upgrade is obsolete - Ticket 47336 - logconv.pl -m not working for all stats - Ticket 47341 - logconv.pl -m time calculation is wrong - Ticket 47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide - Ticket 47347 - Simple paged results should support async search - Ticket 47348 - add etimes to per second/minute stats - Ticket 47349 - DS instance crashes under a high load- bump version to 1.3.0.5 - Ticket 47308 - unintended information exposure when anonymous access is set to rootdse - Ticket 628 - crash in aci evaluation - Ticket 627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so - Ticket 634 - Deadlock in DNA plug-in Ticket #576 - DNA: use event queue for config update only at the start up - Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC - Ticket 623 - cleanAllRUV task fails to cleanup config upon completion- e53d691 bump version to 1.3.0.4 - Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data - Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled) - Ticket 490 - Slow role performance when using a lot of roles - Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry- bump version to 1.3.0.3 - Ticket #584 - Existence of an entry is not checked when its password is to be deleted - Ticket 562 - Crash when deleting suffix- Rebuild for icu 50- bump version to 1.3.0.2 - Ticket #542 - Cannot dynamically set nsslapd-maxbersize- bump version to 1.3.0.1 - Ticket 556 - Don't overwrite certmap.conf during upgrade- bump version to 1.3.0.0- bump version to 1.3.0.rc3 - Ticket 549 - DNA plugin no longer reports additional info when range is depleted - Ticket 541 - need to set plugin as off in ldif template - Ticket 541 - RootDN Access Control plugin is missing after upgrade- bump version to 1.3.0.rc2 - Trac Ticket #497 - Escaped character cannot be used in the substring search filter - Ticket 509 - lock-free access to be->be_suffixlock - Trac Ticket #522 - betxn: upgrade is not implemented yet- bump version to 1.3.0.rc1 - Ticket #322 - Create DOAP description for the 389 Directory Server project - Trac Ticket #499 - Handling URP results is not corrrect - Ticket 509 - lock-free access to be->be_suffixlock - Ticket 456 - improve entry cache sizing - Trac Ticket #531 - loading an entry from the database should use str2entry_f - Trac Ticket #536 - Clean up compiler warnings for 1.3 - Trac Ticket #531 - loading an entry from the database should use str2entry_fast - Ticket 509 - lock-free access to be->be_suffixlock - Ticket 527 - ns-slapd segfaults if it cannot rename the logs - Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't - Ticket 216 - disable replication agreements - Ticket 518 - dse.ldif is 0 length after server kill or machine kill - Ticket 393 - Change in winSyncInterval does not take immediate effect - Ticket 20 - Allow automember to work on entries that have already been added - Coverity Fixes - Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5 - Ticket 337 - improve CLEANRUV functionality - Fix for ticket 504 - Ticket 394 - modify-delete userpassword - minor fixes for bdb 4.2/4.3 and mozldap - Trac Ticket #276 - Multiple threads simultaneously working on connection's private buffer causes ns-slapd to abort - Fix for ticket 465: cn=monitor showing stats for other db instances - Ticket 507 - use mutex for FrontendConfig lock instead of rwlock - Fix for ticket 510 Avoid creating an attribute just to determine the syntax for a type, look up the syntax directly by type - Coverity defect: Resource leak 13110 - Ticket 517 - crash in DNA if no dnaMagicRegen is specified - Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry - Trac Ticket #519 - Search with a complex filter including range search is slow - Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error - Trac Ticket #311 - IP lookup failing with multiple DNS entries - Trac Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs - Trac Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error - Ticket #503 - Improve AD version in winsync log message - Trac Ticket #190 - Un-resolvable server in replication agreement produces unclear error message - Coverity fixes - Trac Ticket #391 - Slapd crashes when deleting backends while operations are still in progress - Trac Ticket #448 - Possible to set invalid macros in Macro ACIs - Trac Ticket #498 - Cannot abaondon simple paged result search - Coverity defects - Trac Ticket #494 - slapd entered to infinite loop during new index addition - Fixing compiler warnings in the posix-winsync plugin - Coverity defects - Ticket 147 - Internal Password Policy usage very inefficient - Ticket 495 - internalModifiersname not updated by DNA plugin - Revert "Ticket 495 - internalModifiersname not updated by DNA plugin" - Ticket 495 - internalModifiersname not updated by DNA plugin - Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h]) - Ticket 486 - nsslapd-enablePlugin should not be multivalued - Ticket 488 - Doc: DS error log messages with typo - Trac Ticket #451 - Allow db2ldif to be quiet - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes - Ticket #481 - expand nested posix groups - Trac Ticket #455 - Insufficient rights to unhashed#user#password when user deletes his password - Ticket #446 - anonymous limits are being applied to directory managerTicket #28 MOD operations with chained delete/add get back error 53 on backend config Ticket #173 ds-logpipe.py script's man page and script help should be updated for -t option. Ticket #196 RFE: Interpret IPV6 addresses for ACIs, replication, and chaining Ticket #218 RFE - Make RIP working with Replicated Entries Ticket #328 make sure all internal search filters are properly escaped Ticket #329 389-admin build fails on F-18 with new apache Ticket #344 deadlock in replica_write_ruv Ticket #351 use betxn plugins by default Ticket #352 make cos, roles, views betxn aware Ticket #356 logconv.pl - RFE - track bind info Ticket #365 Audit log - clear text password in user changes Ticket #370 Opening merge qualifier CoS entry using RHDS console changes the entry. Ticket #372 Setting nsslapd-listenhost or nsslapd-securelistenhost breaks ACI processing Ticket #386 Overconsumption of memory with large cachememsize and heavy use of ldapmodify Ticket #402 unhashedTicket #userTicket #password in entry extension Ticket #408 Create a normalized dn cache Ticket #453 db2index with -tattrname:type,type fails Ticket #461 fix build problem with mozldap c sdk Ticket #462 add test for include file mntent.h Ticket #463 different parameters of getmntent in Solaris- Trac Ticket #470 - 389 prevents from adding a posixaccount with userpassword after schema reload - Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang - Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start - Ticket 473 - change VERSION.sh to have console version be major.minor - Ticket 475 - Root DN Access Control - improve value checking for config - Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension - Ticket 474 - Root DN Access Control - days allowed not working correctly - Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas - 0b79915 fix compiler warnings in ticket 374 code - Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope- Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement - Ticket 386 - large memory growth with ldapmodify(heap fragmentation) - this patch doesn't fix the bug - it allows us to experiment with - different values of mxfast - Ticket #374 - consumer can go into total update mode for no reason- Ticket #426 - support posix schema for user and group sync - 1) plugin config ldif must contain pluginid, etc. during upgrade or it - will fail due to schema errors - 2) posix winsync should have a lower precedence (25) than the default (50) - so that it will be run first - 3) posix winsync should support the Winsync API v3 - the v2 functions are - just stubs for now - but the precedence cb is active- 8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete - Trac Ticket #437 - variable dn should not be used in ldbm_back_delete - ba1f5b2 fix coverity resource leak in windows_plugin_add - e3e81db Simplify program flow: change while loops to for - a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0) - 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar - 77eb760 Simplify program flow: eliminate unnecessary continue - c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new - a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking - d49035c Factorize into new isPosixGroup function - 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free - 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain - Ticket #440 - periodic dirsync timed event causes server to loop repeatedly - Ticket #355 - winsync should not delete entry that appears to be out of scope - Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values. - 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code - 2734a71 CLEANALLRUV coverity fixes - Ticket #426 - support posix schema for user and group sync - Ticket #430 - server to server ssl client auth broken with latest openldap6c0778f bumped version to 1.2.11.11 Ticket 429 - added nsslapd-readonly to DS schema Ticket 403 - fix CLEANALLRUV regression from last commit Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute valuesdb6b354 bumped version to 1.2.11.10 Ticket 403 - CLEANALLRUV revisionsea05e69 Bumped version to 1.2.11.9 Ticket 407 - dna memory leak - fix crash from prev fixddcf669 bump version to 1.2.11.8 for offical release Ticket #425 - support multiple winsync plugins Ticket 403 - cleanallruv coverity fixes Ticket 407 - memory leak in dna plugin Ticket 403 - CLEANALLRUV feature Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs 3168f04 Coverity defects 5ff0a02 COVERITY FIXES Ticket #388 - Improve replication agreement status messages 0760116 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion Ticket #409 - Report during startup if nsslapd-cachememsize is too small Ticket #412 - memberof performance enhancement 12813: Uninitialized pointer read string_values2keys Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values Ticket #410 - Referential integrity plug-in does not work when update interval is not zero Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled Ticket #405 - referint modrdn not working if case is different Ticket 399 - slapi_ldap_bind() doesn't check bind results- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Perl 5.16 rebuild- Ticket 378 - unhashed#user#password visible after changing password - fix func declaration from previous patch - Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error- Trac Ticket 396 - Account Usability Control Not Working- Ticket #378 - audit log does not log unhashed password: enabled, by default. - Ticket #378 - unhashed#user#password visible after changing password - Ticket #365 - passwords in clear text in the audit log- workaround for https://bugzilla.redhat.com/show_bug.cgi?id=833529- Ticket #387 - managed entry sometimes doesn't delete the managed entry - 5903815 improve txn test index handling - Ticket #360 - ldapmodify returns Operations error - fix delete caching - bcfa9e3 Coverity Fix for CLEANALLRUV - Trac Ticket #335 - transaction retries need to be cache aware - Ticket #389 - ADD operations not in audit log - 44cdc84 fix coverity issues with uninit vals, no return checking - Ticket 368 - Make the cleanAllRUV task one step - Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week- Perl 5.16 rebuild- Ticket #360 - ldapmodify returns Operations error - Ticket #321 - krbExtraData is being null modified and replicated on each ssh login - Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress - Ticket #361: Bad DNs in ACIs can segfault ns-slapd - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object - Ticket #337 - Improve CLEANRUV task- Ticket #358 - managed entry doesn't delete linked entry- Ticket #351 - use betxn plugins by default - revert - make no plugins betxn by default - too great a risk - for deadlocks until we can test this better - Ticket #348 - crash in ldap_initialize with multiple threads - fixes PR_Init problem in ldclt- f227f11 Suppress alert on unavailable port with forced setup - Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return - Ticket #351 - use betxn plugins by default - Trac Ticket #345 - db deadlock return should not log error - Ticket #348 - crash in ldap_initialize with multiple threads - Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied - Ticket #207 - [RFE] enable attribute that tracks when a password was last set - Ticket #216 - RFE - Disable replication agreements - Ticket #337 - RFE - Improve CLEANRUV functionality - Ticket #326 - MemberOf plugin should work on all backends - Trac Ticket #19 - Convert entryUSN plugin to transaction aware type - Ticket #347 - IPA dirsvr seg-fault during system longevity test - Trac Ticket #310 - Avoid calling escape_string() for logged DNs - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object - Ticket #183 - passwordMaxFailure should lockout password one sooner - Trac Ticket #335 - transaction retries need to be cache aware - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - Ticket #325 - logconv.pl : use of getopts to parse command line options - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - 554e29d Coverity Fixes - Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions - Ticket #315 - small fix to libglobs - Ticket #315 - ns-slapd exits/crashes if /var fills up - Ticket #20 - Allow automember to work on entries that have already been added - Trac Ticket #45 - Fine Grained Password policy: if passwordHistory is on, deleting the password fails.- 453eb97 schema def must have DESC '' - close paren must be preceded by space - Trac Ticket #46 - (additional) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #331 - transaction errors with db 4.3 and db 4.2 - Ticket #261 - Add Solaris i386 - Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks - Ticket #324 - Sync with group attribute containing () fails - Ticket #319 - ldap-agent crashes on start with signal SIGSEGV - 77cacd9 coverity 12606 Logically dead code - Trac Ticket #303 - make DNA range requests work with transactions - Ticket #320 - allow most plugins to be betxn plugins - Ticket #24 - Add nsTLS1 to the DS schema - Ticket #271 - Slow shutdown when you have 100+ replication agreements - TIcket #285 - compilation fixes for '--format-security' - Ticket 211 - Avoid preop range requests non-DNA operations - Ticket #271 - replication code cleanup - Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages. - Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration - Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs - 6f8680a coverity 12563 Read from pointer after free (fix 2) - e6a9b22 coverity 12563 Read from pointer after free - 245d494 Config changes fail because of unknown attribute "internalModifiersname" - Ticket #191 - Implement SO_KEEPALIVE in network calls - Ticket #289 - allow betxn plugin config changes - 93adf5f destroy the entry cache and dn cache in the dse post op delete callback - e2532d8 init txn thread private data for all database modes - Ticket #291 - cannot use & in a sasl map search filter - 6bf6e79 Schema Reload crash fix - 60b2d12 Fixing compiler warnings - Trac Ticket #260 - 389 DS does not support multiple paging controls on a single connection - Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName - fdcc256 Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e - Ticket #306 - void function cannot return value - ticket 181 - Allow PAM passthru plug-in to have multiple config entries - ticket 211 - Use of uninitialized variables in ldbm_back_modify() - Ticket #74 - Add schema for DNA plugin (RFE) - Ticket #301 - implement transaction support using thread local storage - Ticket #211 - dnaNextValue gets incremented even if the user addition fails - 144af59 coverity uninit var and resource leak - Trac Ticket #34 - remove-ds.pl does not remove everything - Trac Ticket #169 - allow 389 to use db5 - bc78101 fix compiler warning in acct policy plugin - Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints - Trac Ticket #27 - SASL/PLAIN binds do not work - Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFYops - Ticket #17 - new replication optimizations- Ticket #46 - (revised) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #66 - 389-ds-base spec file does not have a BuildRequires on gcc-c++- Ticket #46 - setup-ds-admin.pl does not like ipv6 only hostnames- get rid of posttrans - move update code to post- Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash- b05139b memleak in normalize_mods2bvals - c0eea24 memleak in mep_parse_config_entry - 90bc9eb handle null smods - Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash - Ticket #306 - void function cannot return value - ticket 304 - Fix kernel version checking in dsktune- Trac Ticket #298 - crash when replicating orphaned tombstone entry - Ticket #281 - TLS not working with latest openldap - Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails - Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse- Ticket #124 - add Provides: ldif2ldbm to rpm- Ticket #294 - 389 DS Segfaults during replica install in FreeIPA- Ticket 284 - Remove unnecessary SNMP MIB files - Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5? - Ticket 175 - logconv.pl improvements- Introducing use_db4 macro to support db5 (libdb).- Rebuild against PCRE 8.30- ad9dd30 coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources - Ticket #281 - TLS not working with latest openldap - Ticket #280 - extensible binary filters do not work - Ticket #279 - filter normalization does not use matching rules - Trac Ticket #275 - Invalid read reported by valgrind - Ticket #277 - cannot set repl referrals or state - Ticket #278 - Schema replication update failed: Invalid syntax - Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled - Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server - Ticket #87 - Manpages fixes - c493fb4 fix a couple of minor coverity issues - Ticket #55 - Limit of 1024 characters for nsMatchingRule - Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned - Ticket #6 - protocol error from proxied auth operation - Ticket #38 - nisDomain schema is incorrect - Ticket #273 - ruv tombstone searches don't work after reindex entryrdn - Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword - Ticket #22 - RFE: Support sendmail LDAP routing schema - Ticket #161 - Review and address latest Coverity issues - Ticket #140 - incorrect memset parameters - Trac Ticket 35 - Log not clear enough on schema errors - Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn - Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if IPv4-mapped-IPv6 address is given- Ticket #272 - add tombstonenumsubordinates to schema- fixes for systemd - remove .pid files after shutting down servers - Ticket #263 - add systemd include directive - Ticket #264 - upgrade needs better check for "server is running"- Ticket #262 - pid file not removed with systemd - Ticket #50 - server should not call a plugin after the plugin close function is called - Ticket #18 - Data inconsitency during replication - Ticket #49 - better handling for server shutdown while long running tasks are active - Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead - Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same - Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI - 6aaeb77 add a hack to disable sasl hostname canonicalization - Ticket 168 - minssf should not apply to rootdse - Ticket #177 - logconv.pl doesn't detect restarts - Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating - Ticket 75 - Unconfigure plugin opperations are being called. - Ticket 26 - Please support setting defaultNamingContext in the rootdse. - Ticket #71 - unable to delete managed entry config - Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock - Ticket #256 - debug build assertion in ACL_EvalDestroy() - Ticket #4 - bak2db gets stuck in infinite loop - Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS - Ticket #3: acl cache overflown problem - Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations - Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full DN.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Bug 755725 - 389 programs linked against openldap crash during shutdown - Bug 755754 - Unable to start dirsrv service using systemd - Bug 745259 - Incorrect entryUSN index under high load in replicated environment - d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere - 5910551 csn_init_as_string should not use sscanf - b53ba00 reduce calls to csn_as_string and slapi_log_error - c897267 fix member variable name error in slapi_uniqueIDFormat - 66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf - 580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf - Bug 751645 - crash when simple paged fails to send entry to client - Bug 752155 - Use restorecon after creating init script lock file- Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD' - Bug 750625 750624 750622 744946 Coverity issues - Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication - Bug 748575 - rhds81 modrn operation and 100% cpu use in replication - Bug 745259 - Incorrect entryUSN index under high load in replicated environment - f639711 Reduce the number of DN normalization - c06a8fa Keep unhashed password psuedo-attribute in the adding entry - Bug 744945 - nsslapd-counters attribute value cannot be set to "off" - 8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular - d316a67 Change referential integrity to be a betxnpostoperation plugin- Bug 741744 - part3 - MOD operations with chained delete/add get back error 53 - 1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in - b6d3ba7 pass the plugin config entry to the plugin init function - 28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins - Bug 743966 - Compiler warnings in account usability plugin- 498c42b fix transaction support in ldbm_delete- Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations - Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config - Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user- Bug 695736 - Providing native systemd file- corrected source- Bug 735114 - renaming a managed entry does not update mepmanagedby- Bug 735121 - simple paged search + ip/dns based ACI hangs server - Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code - Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server - Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.- Bug 732153 - subtree and user account lockout policies implemented? - Bug 722292 - Entries in DS are not updated properly when using WinSync API- Bug 733103 - large targetattr list with syntax errors cause server to crash or hang - Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining - Bug 732541 - Ignore error 32 when adding automember config - Bug 728592 - Allow ns-slapd to start with an invalid server cert- Bug 728510 - Run dirsync after sending updates to AD - Bug 729717 - Fatal error messages when syncing deletes from AD - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working. - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash - Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed again - separate tests for atomic ops and atomic bool cas- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix another coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - previous patch broke build on el5- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error- Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed to use configure test for GCC provided 64-bit atomic functions- Bug 663752 - Cert renewal for attrcrypt and encchangelog - this was "re-fixed" due to a deadlock condition with cl2ldif task cancel - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma - Bug 725743 - Make memberOf use PRMonitor for it's operation lock - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package - Bug 723937 - Slapi_Counter API broken on 32-bit F15- Perl mass rebuild- Perl mass rebuild- Bug 720059 - RDN with % can cause crashes or missing entries - Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2. - Bug 691313 - Need TLS/SSL error messages in repl status and errors log - Bug 712855 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not - Bug 713209 - Update sudo schema - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9 - Bug 718303 - Intensive updates on masters could break the consumer's cache - Bug 711679 - unresponsive LDAP service when deleting vlv on replica- 389-ds-base-1.2.9.a2 - look for separate openldap ldif library - Split automember regex rules into separate entries - writing Inf file shows SchemaFile = ARRAY(0xhexnum) - add support for ldif files with changetype: add - Bug 716980 - winsync uses old AD entry if new one not found - Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9 - bump console version to 1.2.6 - Bug 711679 - unresponsive LDAP service when deleting vlv on replica - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package - Bug 663752 - Cert renewal for attrcrypt and encchangelog - Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute - Bug 711906 - ns-slapd segfaults using suffix referrals - Bug 707384 - only allow FIPS approved cipher suites in FIPS mode - Bug 710377 - Import with chain-on-update crashes ns-slapd - Bug 709826 - Memory leak: when extra referrals configured- Perl mass rebuild- Perl 5.14 mass rebuild- 389-ds-base-1.2.9.a1 - Auto Membership - More Coverity fixes- 389-ds-base-1.2.8.3 - Bug 700145 - userpasswd not replicating - Bug 700557 - Linked attrs callbacks access free'd pointers after close - Bug 694336 - Group sync hangs Windows initial Sync - Bug 700215 - ldclt core dumps - Bug 695779 - windows sync can lose old values when a new value is added - Bug 697027 - 12 - minor memory leaks found by Valgrind + TET- 389-ds-base-1.2.8.2 - Bug 696407 - If an entry with a mixed case RDN is turned to be - a tombstone, it fails to assemble DN from entryrdn- 389-ds-base-1.2.8.1 - Bug 693962 - Full replica push loses some entries with multi-valued RDNs- 389-ds-base-1.2.8.0 - Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1 - Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1 - Bug 693466 - Unable to change schema online - Bug 693503 - matching rules do not inherit from superior attribute type - Bug 693455 - nsMatchingRule does not work with multiple values - Bug 693451 - cannot use localized matching rules - Bug 692331 - Segfault on index update during full replication push on 1.2.7.5- 389-ds-base-1.2.8.rc5 - Bug 692469 - Replica install fails after step for "enable GSSAPI for replication"- 389-ds-base-1.2.8.rc4 - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - 389-ds-base-1.2.8.rc3 - Bug 690955 - Mrclone fails due to the replica generation id mismatch- 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2 - Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences - Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format - Bug 681015 - RFE: allow fine grained password policy duration attributes - in days, hours, minutes, as well - Bug 684996 - Exported tombstone cannot be imported correctly - Bug 683250 - slapd crashing when traffic replayed - Bug 668909 - Can't modify replication agreement in some cases - Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1 - Bug 644784 - Memory leak in "testbind.c" plugin - Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree- rebuild for icu 4.6- 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1 - Bug 518890 - setup-ds-admin.pl - improve hostname validation - Bug 681015 - RFE: allow fine grained password policy duration attributes in - days, hours, minutes, as well - Bug 514190 - setup-ds-admin.pl --debug does not log to file - Bug 680555 - ns-slapd segfaults if I have more than 100 DBs - Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically - Bug 674852 - crash in ldap-agent when using OpenLDAP - Bug 679978 - modifying attr value crashes the server, which is supposed to - be indexed as substring type, but has octetstring syntax - Bug 676655 - winsync stops working after server restart - Bug 677705 - ds-logpipe.py script is failing to validate "-s" and - "--serverpid" options with "-t". - Bug 625424 - repl-monitor.pl doesn't work in hub node- Bug 676598 - 389-ds-base multilib: file conflicts - split off libs into a separate -libs package- do not create /var/run/dirsrv - setup will create it instead - remove the fedora-ds initscript upgrade stuff - we do not support that anymore - convert the remaining lua stuff to plain old shell script- 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3 - Bug 675320 - empty modify operation with repl on or lastmod off will crash server - Bug 675265 - preventryusn gets added to entries on a failed delete - Bug 677774 - added support for tmpfiles.d - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search es - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH - Bug 671199 - Don't allow other to write to rundir - Bug 678646 - Ignore tombstone operations in managed entry plug-in - Bug 676053 - export task followed by import task causes cache assertion - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8 - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used - Bug 676689 - crash while adding a new user to be synced to windows - Bug 604881 - admin server log files have incorrect permissions/ownerships - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - Bug 675853 - dirsrv crash segfault in need_new_pw()- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2 - Bug 674430 - Improve error messages for attribute uniqueness - Bug 616213 - insufficient stack size for HP-UX on PA-RISC - Bug 615052 - intrinsics and 64-bit atomics code fails to compile - on PA-RISC - Bug 151705 - Need to update Console Cipher Preferences with new ciphers - Bug 668862 - init scripts return wrong error code - Bug 670616 - Allow SSF to be set for local (ldapi) connections - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the - log output to the text file - Bug 668619 - slapd stops responding - Bug 624547 - attrcrypt should query the given slot/token for - supported ciphers - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any - error message in logs- 1.2.8-0.1.a1 release - git tag 389-ds-base-1.2.8.a1 - many bug fixes- 1.2.7.5 release - git tag 389-ds-base-1.2.7.5 - Bug 663597 - Memory leaks in normalization code- Resolves: bug 656541 - use %ghost on files in /var/lock- 1.2.7.4 release - git tag 389-ds-base-1.2.7.4 - Bug 661792 - Valid managed entry config rejected- 1.2.7.3 release - git tag 389-ds-base-1.2.7.3 - Bug 658312 - Invalid free in Managed Entry plug-in - Bug 641944 - Don't normalize non-DN RDN values- 1.2.7.2 release - git tag 389-ds-base-1.2.7.2 - Bug 659456 - Incorrect usage of ber_printf() in winsync code - Bug 658309 - Process escaped characters in managed entry mappings - Bug 197886 - Initialize return value for UUID generation code - Bug 658312 - Allow mapped attribute types to be quoted - Bug 197886 - Avoid overflow of UUID generator- last commit had bogus commit log- 1.2.7.1 release - git tag 389-ds-base-1.2.7.1 - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes - Bug 656392 - Remove calls to ber_err_print() - Bug 625950 - hash nsslapd-rootpw changes in audit log- 1.2.7 release - git tag 389-ds-base-1.2.7- Bug 648949 - Merge dirsrv and dirsrv-admin policy modules into base policy- 1.2.7.a5 release - git tag 389-ds-base-1.2.7.a5 - Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-ref erral) - Bug 635009 - Add one-way AD sync capability - Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot - put replication config entries in separate file - Bug 567282 - server can not abandon searchRequest of "simple paged results" - Bug 329751 - "nested" filtered roles searches candidates more than needed - Bug 521088 - DNA should check ACLs before getting a value from the range- 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4 - Bug 647932 - multiple memberOf configuration adding memberOf where there is no member - Bug 491733 - dbtest crashes - Bug 606545 - core schema should include numSubordinates - Bug 638773 - permissions too loose on pid and lock files - Bug 189985 - Improve attribute uniqueness error message - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat ions - Bug 619633 - Make attribute uniqueness obey requiredObjectClass- 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Adding the ancestorid fix code to ##upgradednformat.pl.- 1.2.7.a3 release - a2 was never released - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Bug 629681 - Retro Changelog trimming does not behave as expected - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif - are not upgraded in the server instance schema dir- 1.2.7.a2 release - a1 was the OpenLDAP testday release - git tag 389-ds-base-1.2.7.a2 - added openldap support on platforms that use openldap with moznss - for crypto (F-14 and later) - many bug fixes - Account Policy Plugin (keep track of last login, disable old accounts)- added openldap support- bump rel to rebuild again- bump rel to rebuild- This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1 - Bug 634561 - Server crushes when using Windows Sync Agreement - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self - Bug 612264 - ACI issue with (targetattr='userPassword') - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager" - Bug 631862 - crash - delete entries not in cache + referint- This is the final 1.2.6 release- 1.2.6 release candidate 7 - git tag 389-ds-base-1.2.6.rc7 - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6- 1.2.6 release candidate 6 - git tag 389-ds-base-1.2.6.rc6 - Bug 617013 - repl-monitor.pl use cpu upto 90% - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors - Bug 613833 - Allow dirsrv_t to bind to rpc ports - Bug 612242 - membership change on DS does not show on AD - Bug 617629 - Missing aliases in new schema files - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments - Bug 617862 - Replication: Unable to delete tombstone errors - Bug 594745 - Get rid of dirsrv_lib_t label- make selinux-devel explicit Require the base package in order - to comply with Fedora Licensing Guidelines- 1.2.6 release candidate 3 - git tag 389-ds-base-1.2.6.rc3 - Bug 603942 - null deref in _ger_parse_control() for subjectdn - 609256 - Selinux: pwdhash fails if called via Admin Server CGI - 578296 - Attribute type entrydn needs to be added when subtree rename switch is on - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"- 1.2.6 release candidate 2- install replication session plugin header with devel package- 1.2.6 release candidate 1- Mass rebuild with perl-5.12.0- 1.2.6.a4 release- 1.2.6.a3 release - add managed entries plug-in - many bug fixes - moved selinux subpackage into base package- rebuild for icu 4.4- 1.2.6.a2 release - add support for matching rules - many bug fixes- 1.2.6.a1 release - Added SELinux policy and subpackages- 1.2.5 final release- 1.2.5.rc4 release- 1.2.5.rc3 release- 1.2.5.rc2 release- 1.2.5.rc1 release- 1.2.5.a1 release- 1.2.4 release - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif- 1.2.3 release - added template-initconfig to %files - %posttrans now runs update to update the server instances - servers are shutdown, then restarted if running before install - scriptlets mostly use lua now to pass data among scriptlet phases- rebuild with new openssl to fix dependencies- backed out - added template-initconfig to %files - this change is for the next major release - bump version to 1.2.2 - fix reopened 509472 db2index all does not reindex all the db backends correctly - fix 518520 - pre hashed salted passwords do not work - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of - bugs fixed in 1.2.2- rebuilt with new openssl- added template-initconfig to %files- added BuildRequires pcre- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- change name to 389 - change version to 1.2.1 - added initial support for numeric string syntax - added initial support for syntax validation - added initial support for paged results including sorting- final release 1.2.0 - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389 - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428- re-enable ppc builds- exclude ppc builds - needs extensive porting work- new release 1.2.0 - Made devel package depend on mozldap-devel - only create run dir if it does not exist - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330- added db4-utils to Requires for verify-db.pl- Enabled LDAPI autobind- updated update to patch bug463991-bdb47.patch- updated patch bug463991-bdb47.patch- added patch bug463991-bdb47.patch - make ds work with bdb 4.7- rolled back bogus winsync memory leak fix- winsync api improvements for modify operations- This is the 1.1.2 release. The bugs fixed can be found here - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721 - Added winsync-plugin.h to the devel subpackage- bump rev to rebuild and pick up new version of ICU- 1.1.1 release candidate - several bug fixes- fix bugzilla 439829 - patch to allow working with NSS 3.11.99 and later- add patch to allow server to work with NSS 3.11.99 and later - do NSS_Init after fork but before detaching from console- add Requires for versioned perl (libperl.so)- previous fix for 434403 used the wrong patch - this is the right one- Resolves bug 434403 - GCC 4.3 build fails - Rolled new source tarball which includes Nathan's fix for the struct ucred - NOTE: Change version back to 1.1.1 for next release - this release was pulled from CVS tag FedoraDirSvr110_gcc43- Autorebuild for GCC 4.3- This is the GA release of Fedora DS 1.1 - Removed version numbers for BuildRequires and Requires - Added full URL to source tarball- Rebuild for deps- This is the beta2 release - new file added to package - /etc/sysconfig/dirsrv - for setting - daemon environment as is usual in other linux daemons- fix build breakage due to open() - mock could not find BuildRequires: db4-devel >= 4.2.52 - mock works if >= version is removed - it correctly finds db4.6- Change pathnames to use the pkgname macro which is dirsrv - get rid of cvsdate in source name- Added Requires for perldap, cyrus sasl plugins - Removed template-migrate* files - Added perl module directory - Removed install.inf - setup-ds.pl can now easily generate one- added requires for mozldap-tools- update to latest sources - added migrateTo11 to allow migrating instances from 1.0.x to 1.1 - ldapi support - fixed pam passthru plugin ENTRY method- Renamed package to fedora-ds-base, but keep names of paths/files/services the same - use the shortname macro (fedora-ds) for names of paths, files, and services instead - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base - updated to latest sources- More cleanup suggested by Dennis Gilmore - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1- latest sources - added init scripts - use /etc as instconfigdir- latest sources - moved all executables to _bindir- latest sources - added /var/tmp/fedora-ds to dirs- added logconv.pl - added slapi-plugin.h to devel package - added explicit dirs for /var/log/fedora-ds et. al.- just move all .so files into the base package from the devel package- Move the plugin *.so files into the main package instead of the devel - package because they are loaded directly by name via dlopen- Move the script-templates directory to datadir/fedora-ds- change mozldap to mozldap6- remove . from cvsdate define- Having a problem building in Brew - may be Release format- Changed version to 1.1.0 and added Release 1.el4.cvs20070119 - merged in changes from Fedora Extras candidate spec file- Bump component versions (nspr, nss, svrcore, mozldap) to their latest - remove unneeded patches- update to a cvs snapshot - fedorafy the spec - create -devel subpackage - apply a patch to use mozldap not mozldap6 - apply a patch to allow --prefix to work correctly- Fixed the problem where the server would crash upon shutdown in dblayer - due to a race condition among the database housekeeping threads - Fix a problem with normalized absolute paths for db directories- Touch all of the ldap/admin/src/scripts/*.in files so that they - will be newer than their corresponding script template files, so - that make will rebuild them.- Chown new schema files when copying during instance creation- Configure will get ldapsdk_bindir from pkg-config, or $libdir/mozldap6- use eval to sed ./configure into ../configure- jump through hoops to be able to run ../configure- Need to make built dir in setup section- The template scripts needed to use @libdir@ instead of hardcoding - /usr/lib - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall - do the actual build in a "built" subdirectory, until we remove - the old script templates- Make replication plugin link with libdb- Have make define LIBDIR, BINDIR, etc. for C code to use - especially for create_instance.h- Forgot to checkin new config.h.in for AC_CONFIG_HEADERS- Add perldap as a Requires; update sources- Fix ds_newinst.pl - Remove obsolete #defines- Update sources; rebuild to populate brew yum repo with dirsec-nss- Update sources- initial revision 1.3.4.8-1.fc221.3.4.8-1.fc22dirsrvlibns-dshttpd.solibns-dshttpd.so.0libns-dshttpd.so.0.0.0libnunc-stans.solibnunc-stans.so.0libnunc-stans.so.0.0.0libslapd.so.0libslapd.so.0.0.0389-ds-base-libsLICENSELICENSE.GPLv3+LICENSE.opensslREADME.devel/usr/lib64//usr/lib64/dirsrv//usr/share/doc//usr/share/doc/389-ds-base-libs/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericdrpmxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=304abedc47360e141f7c9637ed7385fb4601213e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0039357a3e343959fa332ca2599e1a41629af459, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4b3e9e01456520a30be2d1697ec0d14fe279244f, strippedASCII text, #RPRRRRRRRRRR&R R RRRR R RR RRRRR%RRRR.RPR(R*RRRRRRR)R'RR.PRR$R"R#R!RRRRRRRRRRRR R R RRR&R RRRRR R RRRRR.?p7zXZ !#,y]"k%{c7B♶6?%W)[@W+'5Q[@a>׳LW|Y:Nz:#{ud|S)@r#,f{#gO.,Ԥ&{GC lsRژo})tJ("+4)LZY}vc#P.L=8@_bFV@ k-g'<<\J_Tϱw`{n e S1hl B!AW߬NJVs=^/x>CƟX##9v*p~nsᑞݗת~U‡KY6'kQ.(L;f{2w!U͜JM'[(:mBypTV|hy"pF>ɟۋw%nW3p)7_賯s/Xi<:.QM_Jt 'J _C}p5{ݴ$;.`\k6np|ٲP:$3v2,X7,rʔ~>_x,)AZ_`!;ox2a g3ݯ8<B?hcҊG%T Y0"w.c%U ? !fm'2W;>Fb "q *F5b&2?C NH֓a-]l1a m%mj%ӧ?BYW4H){iy3<|$ɻX'^8ȔAm0X|YΝF[Ê2hL%;&JѶ'Ke@R&y兠{ dۆ8Sn.Ju*:1XWV/w0!N!.YlݸdB ӕFPO>N+}a}I6VF~k}yr<|IY?!ثaeyH 6f  }q2³y6N˟bRKf$O+zDߵ I`dq+V"|D)5qWc9npS޿T%> m/v$8,B~AN,; |”b- %"WVo8AR= 1GDM?GU$:nQ!'^rȆͭ c\;;(Yt#a35Iﮥ*L@@90:b&BuO2TwIZL>fWt9+' \;mJeRK+ ]BKQoM#^ XJz4{Q@mr',%7⤃YƂZ]v{uLT8mEã[zsaNÆ!^vS0fvκxx/\[<`dثx& q)ZC67ffح^Abqڟ=SBO1;^ }T#"Bs$61Q=:us͇tDyJ'|Ep 7~ tR9O]u;=>%}'R$ҫ<i- 3cPc0Gwb5h)8Sތףmzg1t\_Sd z)cCZgs҇{[6M :7K<ŕCb&>po"&{,uD2I7oνg ͂3m"*PCg/Am\j 8dij ;W,Q-Ѹ@5q7ÞG8sՌ>ڡ>sYXBgъtR98T=EuoEV_^h4.H7]ݝXoIZ)a7 mР3T'fqB}(DF)*O l:$ g3vY X̟8j)FҗC` $K+kn)RO[8 >4擶HiyfJG.Ҹ&J(N2P%CnQOTVe$3H|kϮsGAGRYO < $Rvׅ0h-)t ; HEkm̜"Z7# ?\ cg):|)B/#fR{&95Z҆қ89\$=`|Bu{%L .*5u1#nCh=I,RR3~"51vl^jf Ֆ3%cl {Nqz=$;a 3߆z0 Jc1vVtc-s W8eF(?P ^,5F 0i4(N[bc 8XjN^Nװ{dRhc6?1ˍLyP8/ YI/T|mq9nA?gg"OU;eG㨲YBEX@܋tԄ6o f\;pW%y>88$0KVRQJ| n/"Wsf!.տI8b5-#gba(pJI`)9qH, ^Nݭw t2Df(U69!)mCPQ;{[C:.A(19(1t<ߌܨ&ARԐZ)ql0= W*7Ԡ'*zZA;+Wޥ+[c iGV~nu~L[Py(.ų{)ouH%Rz g0BV/g8Ri P%E,=a\<*a%j8*t`27NI/p/Y@NTzo/tDIL[Yt詫M &~o6]AjtXנ/uo PLY>gLYFt.`B}o{`d\ n77[s]->35<q 0JBϫPD ٨<XRqpfta6+ebňZ&(.#0wv,-"Z'lfXkژoRAxF/P7ck 6R#s+N%0pj xΓ^biS4ChkV 'ު#d1'h7PmߤNB0|KMۡ8zXzBP(«y2븞֜:W?V鸀f_1zm=tf>&vk\ZCnS1S( (&yd  E40`H8eRdiGPޯ݂HV:{eyH%o ۅ?J9d3o"L6%;kO'1*7`ӔlOQ}H׳290uEV> -Y.lHO@!sq)p![ŇA 8. ˍ-E>nDM|NtrE5} Q4,D0>b"@pF(̙[ΟݵyXݯc f  ڙnJAO{#P-3cr.%D|;!.<6`g9ۖCÝ55\Eq m]c,+ހ{KVU%}'x~a5=2ϥ9M&J2==i~}¤rtL{2]EGP܄Yq̕ BiJ|©=ꅬO3"l=IVע~im-*i$"h[cQ=S΂8*e Sel(.1G eF XpxÌ 8)V>&$sGI3-D;<}χMl6;Q㮙;am6 "en]N+u5؄kg\Ye\Z.\R p~]ٽ9?ƩA|_.}7Ye[|9X{n(/I KdCk&+uGZ;c;ԅ#SF~&0Tc/*ZyyCMoN!vOl䚇jCūS)@ @Bjٷ[X-%FĹx (LUcxAX܇*B USPLK}#ShWR&HAkgn֫/ &|rsu=y?Ѣmݦk`L}UU #27Z֨_ A1z7(-0R/Պ3.jQʀ鿄nʬ+;SJ _Hmx@-')`'ʽ?tVe!ndnUSӻk# / _k,L' 0+|+R+dWNiW vr)ZuF #9{gO^O|k% ;GoTCeKEEl fӪYM4==lV,"Z]:Zv a؉kӅ[C,EepYџ0/3_ &`L&7Qgޢ4`6tR9axtt6;MAA|ai(w39Ul'(:{4C DMf`J* :  apeenVv,ߥm,טّŒs>0@HPkƬcNQ3U&\ YҫeHXL-pVOBSs.-ë˳eXKM)ݩ'[)7xd^$yYI&KbĶEpsѸۻ屄HD5GA4٪,AوP/Maeg1Kdv445|O5!:ɚ3gJeoaG4S (2 -8zզ>}(>(^o>E6 Xלּڔ0bn3H,#%tZ_UJt.6E-5*3;čs'r{}o"H0 I&Q[Sjy8Fއ=HM@]y1!zխ(&F-ƱOP>0 \4=Xq+'ۆ2x'}_Pӆ.*`ߘmڮA"ҽQng3%[3dQ I޶xiqF3Ń K+&y85; Pa`{|ږ KZD0*os?\L³=eµ)<4ly16Zxv)'C>41Zm$/T3_{+r0 DOh&|+U0F ]q"3=^N–o 8"Lk-tbP5gBYT#Ԟ)d4dž&nsX#n+=]c|Q^= Yޕnpy/EKT?B_UV, Evf>t~VQ!˳$n,] '9% cAmj}Cgnt5UvtҁS{L2 ɸe1V/bo~@4G&u;RøE]!AW R-$ !_؞uD"9RlDL&:rqɧ꟔W4=) nQ(a\qt53] T%޼3epRGG%VzV1Z ;ʅ"gMIGl9p)_#0DK[hN?:"5!>`͂ogͻ044o峔\rw0+8}1srI:1D<9,.$JE&&FݿkE)|_T1JRop%(8͑iL\C xt|B]h -bLZec_ȼRt qWC#q)߾ V+k{5Tg- Rzt]t3j ^ehurťƠf @ځapxvzP`xLzMЕ|;U?ayز"sykp)^(0jX& ' ;+ Wm XHBi[ɳ Wk`.5Zp8xj/ h+H'lA'Uz:k&7 ,4fYreH31hY&h;?r4 p'ya)&8 4]vd 1wz|-](3IA- q߫Oim^Ð)IzM@AiʋcE`!Ôc1*KřB> Ȁ_o=īm*5h%SJP ?9~ xZE6H&YoS Cn(m~1eGeh95{#e/s72g2|l3$߃Dksd<}^4|l^i*L(o;k5 vǮe&2'7*0>N.}[':E #튝)(NM#s6K]WAQud?MPl-4a^u nޱtДoF,<ع? !&p{L(EL(aHe#뚫 n㤏:YB ί4g4 ʞJȮ)ZQښ]B: 2W1W:UGAj%Z0wcq>?: *.M2iƝ`o[TO 冡N&쐻DžBrGg۬XNxlTY ؟ ʇqM?v/o7w -y z(wĺ~I26&m,,S^ 5!n^Jb<cc;\8$o2k-LWi_ ٙrh؉>p__2H1? ]=ńMϘu4ώDf,DCCqVufYX7WJoBZqsӋ<ڞRlOWT˃شæm|] ˉE%\>NsL ZV5E;$~?"Eˈd[2!sY i`ˉRPj1^$W\_1=܈1!Gw ;1@`jpOHјkYM5# f .zHxX9K6rQm^, &yc_#^hDE pW +/~_6']~&}0{ 2W©ءAg]C2#A{HfFƍt̅ '`E-j1 0Rj'S9b숯VM,㑾E͆CZ"#EPF&.0Y%Wխd#@~C=IiP ]GE_ʉ|7>n9tq0#Ե|%{@! BOxJ}piU||uC!< ~W#AazWt]i?xnSڴ㬂\&Q]b[&Ho,%zUf4kD+\SyeYC[qe`{U^ lEFѼQN 3*{>s {~i2-f^㠱j74G{y]/5v]>Ә {JBXi X{`bDP}q(WA %l?>M!5j'x&C֐N7/zՍ^M$'gr6zOG8aic̻pޮ qWd=k KG=}?ގ]#U$( HD"gtdEo ?L% M Q`;_-E زy2oND  k?JO}c1if|xҎ@ifOLH|j6;"HrǦ㧠h7LT\b)zyg̖X 3 d.Ez|6cq;ܪe-4Dޛ m&V(3Xw@դ;Ut⭲9'0ƴ"'h;A"e`0Jikt>t3wk03b#>툩S&Cwge@$sV,U lȴb(ITyp QsqU]~Km6"b1םFb%C,~)_+Q$TeAFT;_Ոd*ջx!1It[G4XU9ikOK$PBbq˃)HeczL$)n8Bc5YOak_m/Hēnu=L5})ov^&pDBTݾz5=dzlr/J-C[TDg?b$|,0e?Um H6tQ2vB2Y_s-`i?u#_cfJĉaJ"gjaߐ voD zPTP*+wfaІS\CTZ74e 5grA)(OB'_WfɸG$6??wp_KA"W?N+ُ[y>Ce=~MB?cZFeVSFD6YwNRPJ\$OY $̙;ԅρ.,B]يǯC46Vz"#d]BBjdPl q=l6Ry`BI,*oKJD!qh:].B{ca~tv3˂%["ՠ] PwxIVֽ]扂c -䄗^PvmS}-ƫr7Wȝ4-\pb~·.٘i0awF2dO , ^P+=%_&P=Y\f%d @t(Ա_Llئd%T-S$.8do<6G'suQt,,|bCySQҭl7R~Kw~/5`QƗ}yOQ_D1^J ȝ2oQr,UN@S>:}ϻ]Y {a,T(}PىxlnH{0ule__S&A&$iKwRZ*/l[ Z{ވC>^7y@ې\ux} %GާP\.R/eF2\0jճMyN?L סr̀VğؓAL7\@0pؽӥr'd9~o7]B@7GyEߑ^@ V'1)U!2cT ] [FQ]Nn )0nnQ$+WJ]ʓK ݾ z.$Y{@\mFJ۪Sw16/i"VKBLTLbƽuk%CYms M*Sdzn0YK1ԙ$?I:i[.25`{,meNsjV0OW>i54P~SZpv"zAk<2\><.Qhzw[: }w$Da _5=3W!_^u?'->)d8%mfsslUQ53 2JÐ>+ f`ᕍK𚍱C֍ϖUO\ ]o:g2u8sY:9"C@r(ga8H`bAOh>- A:!>U4dԍR$TU@C'Qݮw$_uF$ь;J2I4q#{v꿪NBƯ ~Z~Q&SÛOR 0JU!D%;m,ey;Wn%ϙ[j8\=tEX`[5gήiȺ oHkZ7G pUugapQI¦:,vصTGl-;У̓)t #CQJ>/Te`~g2uOO-|"ᝄm )4u ˆc[ 1鄓 gQYU#"jt 竺ܽuga }!ɶ}wO N8.YA'[0U# GTf_'.b( 5o,c bc q(@AFS==%zרS Ueb#=<&}gGpmp?ɥ?H"s'63>h#Ϯ`X7&CA,`eGDYfP=7-_GdA]tcxǹVӈhٛNgm<,_9srzVzY=" jHw$ ~ }e`atb,(14xF^53.+%HI]&R1 7>ID@]4b"YF?l^o %oذ\L.><[lR{'~Ya_s1i?.r-]$g%N1*މ˸ Yޜ0 ݁*"T2gpҐ( gz g굎To!,Bp+ p<|%l҆'dueuna&S9uVbݰsNkeД6c;xNswDK   2`ndtMį_u-gT8\kml:7ned|`KoSY jOijeHQzROD,Z9WT& sfkau8&k.ƌ|?;z$-]}Q:SR3ˍ ݈ џTܼȹ5KtVMotRmF Dq##Fb![8;w2*x@-_P\&tަ-Qm?c7pA7FG="-Sһ,ۑ'iS.~?U7σkH%ko H&=^(izLzHC=l1&B;_y2Ԩk|w3 }Bj}Nx55Q׻7k:a As̳9iH'y2lľSғ!!ǝc;{| }*@"BP|5m_ 4aÓ喙MB_u9fq$))Gm$ ڧl{;[#貽o2V?.0UiA`V唛*Ƚy>䠴Qgh(g߮ˡS&d-72O`9{$AQx!a}S=,֏gP im{UnMwgCHadsEO\F H:Gu~I =6= c_ڋM՞uh}iSzǙBέc~7B0I2z# n*%VK[}o_ ]|'29\OĝBw"jFVIUFgxbvHX!ܜ C0O[$Vm|'1oQ`RmڗY c\9A&핖 ح\m:!%)b;E6$irK:[{48XkԏW(B?Q260<WAz?4yn/z0cE^3t#[8~dؽ﬽80͡ C$i;d7>lAlP[3XSv ]w`U*$ݕyGÈ  d~us8y>|?}uU"QM ;t[Ofa#̣ҌPD !;ns[Z|q7:J`wAI߇dFsj*}j\4 >8{/0]Ÿ-Q3r$"k϶P`Ơ9Jdrz[_P"-R'o%|#qGw@>5AR_dn '7Lv<ゴK$ݸn|z2ag%'3+@Ij2B 4Qߘ]fPDuӚY3E u2 hA%ט,s0hU'o]dYw[$=/8*YƶT"CI-;&v$u!]TNE>F!&z>7g {tY(td4Ib^)]c" ̨dA}V.w@w?PYxPp OY&;C$(~D cNهW+f}^̲j|b 0*ƱͰOWsQfGՃq@Jwˠkj]詆ʗ _B0uUp\ΫA'L[q^WagU.PO.mIw@<}F8͗z15Hu˫| ;%vORG:Z /8mq^IÂ,%4F6Y"-s52+B.~EU&Qe,h`ƒMbp4=lW@h[Z9j$@‡4lv-@BҀv7&6zCЍI?w8+cdBh w>Kĸl%\ݭ.l8Ak QЁ#@_54;aކ{b>Uy:sh",9k+B|f%cb ҩo9vf|;eT;m=g@\lv; 2Hx]c["5UݗvjG )/uѐng4iE 0}?d:ntRb| N<fW֯߀sW8KW┴Д|چ nʙyFYGO\طJ\4R+x]-ċr;B~c1b:eLY*I%Pr*S~6>#Smѐn!қGv¢=r>|]*#*̺cSֆG%.~oBMX \% DWEqN*$eNֆ2ްTxB&Z4EPDQo@MR"U'bFio텸r:WKp=!r?ťALA[_#}/ L0TM3|ZZ#~Tۥsɝ`*E F!pey`|L{EH /Fgn0J$mP; 7'Y%@l%"7@XImA8 G- Z E.vm"< 4IBl 0:o1Kj26u*TM ;7EsWچOHA6:VtNB!Xs~Yz 2xe4*N 0rWz"h fXY&;IƿzL )#;1%tȝJ@?"P˜@7)!J= GS "6T~0)r+@uB \ c 4-WV}x 4s! iۈ H{;ڥ./R`t+nL~ؿ'2hQhFYV^AX,:e,"2qM>Ko?( z_"~& +q%'1.K1"YVo"Gax%)F)~;k}ڟ72v]: b6C =&UL #h롘*j`>BXc&~j}̉|cǁ$%w/ڑKJOp]cviNבD] B!vHBX{]]kYJ [>DrOHc3\-H)@eK4)$6_ӆcJ N׉9p&)pɯ<уu*l V43'@'&W"Z9Y$v8借<| U{uu!> HVFًM(@ O/7Gv*D{%2lU 0(wt.9rY mhCV)ƜΩR(Y8y@v`4bKo!KFjiw(4_i!#Q>pFX0p`sbqkYJP9ɺM:6Ams=*"L4!͂z<"ZPT_ȏ_NgX&͈$˜\R 8ߨd!*OJ30!ߺrwNszB7زQגtF$P2va9xEZAJJD [`O9Uİ=ҞXEMZej2HRvKVOb&u6*9O:?r:;yZ*W4P'r%V#ݬjr Ux%/֭3HB>Fh*΢%!|tAt&꺗i-8↣?-ʊȌeNy}( ּ3Ur +g/u /? :v$ 0m:n%5/9`WUZg4COO@sF*r4-Tôq qY$A:S5^hf7FXn [ޛO+ɗLF/pS8(|ŗҜF8UNVbBthpxMɥ+6y4LWnu9Wtd\uG}jo&von_/f^6Axc&UͶ'54-d xtgH pmBbn.G3ωV_~4 {sE!R9= T:_0ŏt)VICTk : {7DkQ"S&L C WJ<Ř"o]=S=03 .ttR0LZ!vߝ%ryO{0qyܰ_ rPE߁ f7~+aι pRR—ͳp<:R,+ d/)'E9]KM-\J`yɎ30FQ-+רNv"5_خ:1 ˫ϛM]q>뚉ZN&ax@$.QKTdZrrDŽ]/U2DwAK1=5K@GKU?/:^]ө榻u"ZbL5860 P@j}< qdUgjDԸN1( sW$jbV_O96_w!Sˢ $G3%^uT].`Zs0P5p*Z2zs9m&,7!)Ԃ7_mҭ:M^n+90+^ɝ[t&\J)10\r >>yP;Ƭ>(۷ ؏:]A#ݰ V#1m$]̤&:ԧ@a͠Apmh:Q+<1QxjY+vNQ*8|u"Ɛ7%sZ·2rImRnIGv}㹓v3g:'|x"K!'&.ij JR,+}R4"؟hB"ïCr vަyYGAȭ$Lf'DpF{ SqLO"Db71[곌ӶÁ tX+]AL@]MA=ބ b:Q?+'ڛV-hRgKvn7,<GxEXԊ$#, Y}<ϖDID m*΃6eX4(9S=̓h3#6r 7`La T(u feVe8r&(>oߔiA&%h9A[v{} oiŹ2._o0Q#|U~ScDV0="}K7z:DKNBћIE+'0ПHt-BHv}\A]p T/4)V,8 5x Vrp%rNZ~*7ӽjL>8Fl,g"@O."xB_o<֏zѣv"ޢ!ڲ1C4d!Ҝݮswqdx!PODG+oe^/҇=7WN ϚqXRظ+L֮o=(08t|0j+Q1ܚlC!e{V!!N{0ˮ ܨ Hշ0o$+&aJ-)6B. l B`cᷖ}h0{kiaWB9SH7!'mz M"3G.Hu%8H~ՈRP^˾N (o~Gh ! 6>یA똅\=6r!~eLp^ȵ1Ƭ: U sҁnzw>lmӣ|jM;s"ޥ ݦ'A6pe AgP[Albt|iwVƕԉy_3ҹ#ֹ$}8! 05X?)j6eGiђc۴z{H"/$JT-7x^<},kƁ `uX9Qe|U u9;-~Gb*2@Qy<:@O:?B ێ`ۥzQ [WgfKix;!ˊ~}ٱuko?9i bpHbSʼn#Ў6*H,X8 w}zBkjYт]VAPci~gіY2:"͖t> 'A&=";c?N=s}xfB YNPDM'VPrV\C#'aô , u}*1vP]#>r^1錙}9dH*"@q?kݶ1n~]nUKߏJ3i"t_;_NDѷ)Ua;KªO\aрFBR68jZ\9>SM h=,*m:`V56>vģG I|Ktr)ܱb'd|& ^}s]k/$( a~utgX*nT=?2't~)sI9[& ^ۓ_F ~S@+f:M#MG Ctz)WRMR}5y;adfJLۇiw"eJ%@sj#[>5DDQUɓ6^vm\?'nu=#~F"vH8bPp.d՚,"+cJCPyr) 7>+y7ZrU_m5"a"ް={$o Q[BMQh- M~WVL7vh^,R8↢X(|8#ZBd3Gg^Z'c2GJNV ]3#|(Oĥ5nHUH` o93"*Ͻ$)9_-? RZrr:Ce7*-Jw;Ϣ+E1}oXixg& &lͷ&F1*$4q-a'彤quQX\:.ܻ`56FdGe@HQD*ǤqohH5%fCZ3P!4I{5w4eA(M5}rLA Xk3eƂVܑq5{A .h+NTЮcŰ9ʐ SwY:wvP :Lf^wjRs:uW4>.1k %"X\>SLZQ+,Ҳa;}@澝w?&;e3j^YuLWd7p.]J8Za ONZ'DZGJ= k1"z-$y\M,d0D՞L{RT#3{_4ፃ=w ں,dK KEClٞO۫J(Vf"NZ b-tƀTQ{[yIkk_ӁRNJU!_?_#/кn!gIg=<A>ݙZz}6P9 N 8ʯ h7-ǜnpޚ:Uh 7BA ab^{;,l/Y8-QS@kwu CpiꆆZPBB n y&?&#x!s Mz5Zr$ʸU"=rɄGB/2j}pg\"M++/,P%@a[NvJ[x$8%.ʤ !2"NiQrXC R„q{ZBN%KVyۨ=wGιԥþrjWfBl0~juǵ]̓t_U4wAw_G(VmϋԽ~l\ַwF$PiN+ׁTuYYqpRG V6Qzhɗ MY1{塇. l N]903(}4WDhn< .H@.d#`=*ÕZ6e@ U)jHlB ښUJ-޼"r܉ ,C3V}ozE2_l\}gG-(^4{r38Xgp K]nxnEc@IO}r;Cb2#i*a 2T\3 Ƕˏ8XP 'a+Ty!Y?5 .[4q=[!oטR3/}QPYkN8lz+@d7">W'Y}ؓ<)~*[ݐR:L IۚPے}_,\2pG.J*iq}>y~'u3&yQpbMk056QCkLyōj8|wDnDf??Q鮩5U|7HG=1 ㎼c>6&`q7fs~q2 ,#:擴"Swl=mmdzNx-tYTA0Wk *[I"(w暱J_F6PVȺ+noo%5gɍ5UC⇺_՞4fv>_=(ul/&}Uy#_Akj~:$X: ^gnZ҉mkxR/ ,|k J^sNr9p>Fr|p\i&i|^d+Vfԉl m!m% zs! g;:#b&fܼ@0HUjpt!EæIFK%SX+T- `Igđ֢^BVE|1aE-ofBZ읞4[ (ؚ;Uu.o#Öȕľ2׫p; ϹޏLC -ZgUW^S/8{LWV,ImƌXBKϫ.eu*hytR|+T:@y_{ `y 5܃ns}d2<P=~oy%`@؊>& AHvxjCaዮa qdY"χh|Ѱ0;on4e}o^ȞyίW=Xy%~8TakrVC;=!;+$+C%_KI<ӯN^IlVex'1d'azP=We#a -ja8Cd()sUaĆ *sxqSSIV(n6_oI1MǢg"udZEOES<׉ҝ-HX,PJi"½娄QH,n}˔}G,]8G fu &ڰRy_1 fd }MD]A n‰E١!rf5=n'Z*r8"% F97?f٨D/Dٓ|7\b-Nà[>t윯( x6#dpvD>σm8B'Qz~%"(tE;|^)9|fzꀲ):ȫ` 2z_f By'Nu6ME2A|As YP[; 1TyD径qkLofEjy Q *F4(;?ts]< <ڏ}lB},vxsʫZ6` APz%^ V'\ Ra}{_d3 v,_!Cֱۿ E҃2Э54ʞv:J N],R~k6ۼ7yLT)Ax,*_ЏORj|CUfa(# Mԝuczpz,'&Bêh 0$`R[j36;OWPXTZC=eX',8 Y 5X#]ӛQ0("" CT6- ;Ś)E%:Uk3g}#G=HngHB? 7;ⁿc!ͻ㜵Zn{aefo ID=-Mbq:=It6j4HD0?riw+@;OUz@J} PeLq7+}W=9rÃ}/^\AB:%Y f-嫷waIZd*}A;3)bxz,^'3qiXx˽8Rh:0yLM=(Z:$uk:lpK:ϠP8VǪsh&Y߱2tϕiO&ށ=8͘',dUi7vU;G[§gRG1tR6q!5?ߎcȿqG#PMUb~'c9MY`nsr)PDH4^@>Z%YUv ?Fb>wjϡPk,jE5n#C,%/-i7A>7ОcXϑO9"3u4ҷ> G^bjŸ[n(XE åt7t~ܑnIˁ#l?ⴸH5H ێ׫IUm N*oQGDϨO_[du20#in>j WU6-,EE{n=kƎqxuXUR$!.J[ӼLQ8L-aR{VRo3=A^!r1,,QH`ۏj]}K/lې?ItܒjA,:)MyzOA_;FEl$ǵEn1lx%rTWyEY.% Js9Hg$K'Tҷ!K{ǎFU(ySbyO$tbt Jg$$ 't]Q؁}Ӏ$,Uc̮b 2\gf6l6B&2}NРhɦ#>vppIv0m4T=75 l2A] ygeՇƲ2O@NgMH_aa+3ՎaDy.cQ Gs 'tdȿzgr{^q1V;s;#C9ڥ |7`,T{Co܅.aoߎU1]]n, x-tѯ_&o_h >,lK0\-vJ@,M&>J"6JWK-gU a}#=In@4\1vdm>h|:<=IFvP/]/12ЉN-iFA~:k,$=UmRb@8 OnI(S^/r"kL͋{%w,x7B2(XSpr^6muaQjļ;o& I$ș\4eHƟ.6cc 2/Z7Od d HDvU\ /!bUEQ_Ph@=q\!]aBOvZZW1 HªEهoM|hweuYg޲*W~ʦf 4h߂TY X ildG7*h2+qk ;suKg l6bv[gPX +ǶSUAǠUsupCǂ{r=vZxLІ C$͊Ϛq8Hs!^ODܰ?[J\U{Wzk(|+4xms~Ձ†S?7GqNLAkLM8"nwz1@Z5+7 &7 q {99I^?yQ.#xPY`P/(N{+PؒWd.NiJ[L=HRGoN i1J[0(<޲lP [[c$xZh,}5%5>5`lk壩mvy&w'=:# a=lc*bd-X  Zmf73G4lX,, +_sG͋@@n8_׽ۤݸP~L0 \s%fLB[_QYݙĸdFKF%: rՁ] sǯM̌|")ɇQԣn,ըR/Olg}јTﯜvf6>vm?EFkPeqC>'6ӄ6< b'y>\øR.{l.xtysrv>׿Q}NQ]L)@8 YQoV?p2W2QAj3'-t#}I\]FO3g/p׎PWnԇ" |+Twib|Bw 2Q?ڙG17&wؖMdIə<~c@·pl_٪;jJEQ֫gX"*F:!y[:V7>̪PQ}~iteKKui< QA8oJj|K)\)QbřYrsX]eC:bq]3P]Pkw=%VC QYJBwn|ln `ӕ2X{Dtd뱯RmUq 1 1`;X˳@zilK(N~;T;[GkK2ݍlkY rZUƚhP'NkeXzqv3M8?)ktϸ~;R~m|Hu~/;sϓhOg-0x "*vOk 2jQ<` tN-f S$Tp!^ v3 V5a'72qh~dsݩJN`Mr0x>eDb45 pb4|8JiK.RU5BcT9BV 4)/C6pȡk>|e3pzцIDF'!jn׵ r%kc RMb6ݥwoلa@Z& ~ k |{~3l]2HS{mz(8?DUV';TY$ؿE;i.`'"V =vu:>{kuؘKk5 [X_P R؛ES۬o՗{6dMiÏRGЋI"[xJ0K]JNi01cTR>jvD\uQG j?DaRm1I?c ppyXn[- Ś!VC=eYmfF.T&A"9cT ᾰm~ cw"Fb˺J4m1zK3@hFsLw4"m8.*gca05ȳF6:\s!['oF\ ҠuoQSٺķ$>XVFyO =) /N1qaqm? (l, goHv]FI[5Vay+(CU!,1 S0]Y#lp@ϚdV>?ɵ1xOV?ד v1q*v LBm Bw^ )7Ss Ї^9j}b]M xɣ_؎$):4Eo&^cR TΜpQzqc-E`ɮa=. $s:ni.5UnK:dYVWK%Kp7mgviq Zc XZ7ZG'r^ȪE}f!J,X׶-:Y1^1p\&MPu&kٶkZLǒZ޺Y~P->ZhSH$Q5!ta.;ѿVؗ׆p L:]83uB/UX oaVݼ)}#IzJGƷ4HQR| 'G*נyټڼ4Xzp+VHKϊhV@cLe@Mi*QQLms "^:=Ip([QH"LI碯`GKn.C=tW+%א%MkSH.Lom`j;cG5dl qϾpQU1qg{uIY궦(kgp;b8!`~t(%o8y}Yn?aXi{; ~7'Um:&ühč@荪RΛ:Iydi?ֹ{280OҼj(qZ =sK3n.Zy:`6`<)%ܰ+@9ke/y9R4-WmMU M(QeJͤd~K2%{t #M R͠ 5e͚AB {I?LrX ;UmZ 3.PY p^4P۵Lsm өn< |ؙ>XxQJ׫ Vtk4Hir_ LDW8Y`/F/_kKW[cwJ2C1P"F0`1?׿^eZFqADnb_6ZI{Y{q8+f?jgؐ/.ysouMo#zz>_f88}.ۭ*;]%Og8O䭾Wt[?Sdeɚ2!; :HS1kKF.mZ$ [ ߰Hj{hJ'0mu geY^{""y \x:@Zp`\i%:q-`rX&.6(Hl&}-3b%2e%ݍ8T' #;-͔i[wLN4(%o}3EXJq~<&%ݘH<}#R)d n_Ք -~׊pF(\I뻡jb,l+{6/щ/H S{3m9CZ4A7BS&(XLՕr@+ƩB`ADY ~,y o+p4Sl* Go(j>ܺNߤG9NIyƺ0j Tw\0 _&v,In#>h,r3{R.oNF|L"|u዆݃4ZcH3=}D 3uNgB:5 Fe.!+Mٿ [.(('F77*%lpYg=B=*k`dSֆp^V}~8"*Lyhh;Dox'GVV7Q>mVY͹&^ծ΀yMPF4:,G$ x-zkd|jqvѭTtp1i{MgIq% EYjSI3@IC-T6s'mNYe2l(X)=;?!dfE]ݒ:|g!Q]P0`:D.Y Z!WZ(,4{% =z=r}_^WܟKo17ŗo0?\v1 -m[ zL྾2p~2W#媺hJDI%}l%ncxw]6"kk6 j+7JJ |ma\qØ G_zZN~Yd#Q\)QDggw2Ğm_PTd  SWqZm,sx-aّn%1hi/>TFJ9=MZ1؊ aE.\Q{L@$Js@)!E ;J_FxVBcW{(39[ J il~ulB1F|vFЅuî9Ǘ)C%kZ;Ғ(|Xlj.R@$?y'6g^cK ׍XsZ DJH"1L8ևKi~Bx$˧Ț1qrJ/G(cBp.y%TItW+ƕsSS;Ǣ8 k9so`)![Y jo$or(&8Z =2p3ZX~pK3sjHK#U؉d'DzFFX+YWoxx[q%I6%򪮻XbTA7@ǒf`п pZG`DJGQIIzwiH/n)^<-.0NމE.B$➍l8jq[Fv^*܄9*Rxe{v`$W9~D%* + 雩pB6"]蟬Ӧ(1QJL1F*("gZ~3^Z-yVχ=^p]i Rv.4xC` L{7!aJh/ y(#n(;^9`YZr˂֯1,B ̅f%\t~gGT5<[r /eq|{ͻL0$XEa7iVƣjӢ.*ܺ+X)"A Dޞ4>J$yHS?~ VjdRk[)쩈Y_yCo O1Cp>T9y޴2cJZvxNWVzw̒Y${a_EbGQl' &GRO_^34.%0ж% 'g6m7 Lϗr/`%jPk럍Wູň]*W_?娔&e0\x#1oCY12ZZ쑽`  (KCT_-ќpy+w#@C悯lSDCt{͵1=RATc'Uz$`P˰`PH]wmA"UO -2:P~ o<؜U[:`JڬTƁ5HoJϤEp+ X*Vf!َȍI{WES,о $ r9zڷո&rVx(~FP43jF VgmCb wH+ m '6s&"G1Scz[H>KRMb$# La]sE7q 1z'gSQ7EӐ3_x`+b {S Hi/T)eV+Ht̸pݲ ӽ%]H{BN)cVߒXl+e3A*2`W9|>搴\!G]#a0+yk@ZB*S-s^siw;r#!݁I cd5K[Vbv~SdykE4jacS:t'GSR~LDxP gpn(ZFC'ʋ,dNú[|'hdy{g#D$$y{$Y5 ^Jc'4uޢˀOB"+Ҩf RKF8TVA$ޞd8ޟUhi=H6@/Q]UbJ{S6ͱZgح3_UH C>Ƕ_C)JQ5QV58UԪ)sX&NgNWms-X_k~vp\&~ 5ޫ}u/O)oTԟ>za 浳f$: F3+.D>]xj3U^wN@,=h|xA9+1Z)d+%=aiTI?r4#5̉ԗQ]9S`lr)5c|]Ǫ~U9mwUèpH<|k>?dY719@_ ۨZn8ܳwB0scV"o2ъh 'g81N6qb(xGkrUɟ7sS nb~k_ŭ k3ri!--ʜ۾4"7Ћ!*#SbP. g}XԙXQV/>"?0!PҒlP UCӧxEM:UP#,^gm?e`MWڐ9q0= _|v6ɸwe ea NQ|s4oc  }iE7j }f9CTzƖ4qȎdgk r!9uaÞcxA qNBz?VM?d6HY\4 'x3;^_)*ǒp|^.ɂOuACQL٠O+.f7}VT  G ;`Q$Gb kdt4P}'_o/z%^ *u.Lt9u$:EU&ND+׫{'%>y¼y>uu">;Ԓa[/kD,A.Hsd0(-2L'}\C/^ۋsꅼs G9LVbNGX4yFnH YzhF*RץG([8l #U7Тxi TAdZM#TDNP<)ܑ^q_<Oe \hYC+5Ni}EaX8:q] D;=fYhEQ+xM;C!*hXqD)ޟZ22puN؋ -6+s?B/DiKhkZFU yb/s"_?~w@I;Z㸆;D@n ͗]ϩX-=%,Bի?:UR͙6v|a'Lq{t;BuW9J ק0ܑ}<^S*lS]R'R)]>At'W91/)C&\2pa??^=& L>/L5en_%gKk,wuicZG>ʫdStUiXCw>BGU0K oZcngzV1|C$=H%6:G`k|7*7^7caA>fcg e"uQGO#x`$NtoYMf6)o !#5e  U|4}!\Gߨ"BN¢F%%5K it]&E?vSկ9,&#6|lK!R䖋s( yVYۀRC4 9Qm^1sD6Vk4ՌkSR:O{@ rd珶CMeC\G󍉊U}iw}>kU _{K=8ߴy {Ba!05/9߾é~U,άl}yd(սgo0,N({q*>4S"VWk5ReXpCró8i|M cYeLV&Ytc¨/2ёOU@2F`3 5scو6X F8u߻,ՎOez0I7"I-:*5 (%3o"4J1WRe,mJF,?ILrH*$mwS\+ jr- r>h3ź50 uaR,*T PC;׎8 5 RI*2ZUǼer _ùAga& /@nKVPT$ Bj[`Iy +&?Hb*kDd3hzWV3u8Us _N+w,\_@ΚAuߩJ1Fnձ)qM+TVxyRc/خhʼH&!~WM%R$\0=xcqSF%~Ι AUiKoh -~QDZO;hE<rm^-|fL̶am<|QZ?GpvQ9JtO;$=`w^p= thy<_-|$M{Wřj(wM0)q sk`! ͨ6e0-w{k>5Ze+?Y'{Evܥ[+=涵PG7=lKj/iP= N"\/AK!؆7A3TGMoVټA:b Vik NIM@=d*PU+tھc!EY=YYX- bAl;{y^hnlxOП>54l-)k݀5~PpcUywW[)āuyk 'A!_J]UdnQ‡>((Iw.tڐ*ylH9Hgf# d~{A=IHL.iU0s4$! ]Ã`^I5  \>j0k"gHemqO.zK=9LZ+iPf(Q>`<=rGfHYp yYI 4>P}w.J|T:srb]k4 8:l=QR!y_ /0 4!>B @hӗӼ?LG'8:9`jIOr*4W&N@fWrM8Q1ΐitB>uEPfmh﨑_!E4b5)@_Őqvs XW3×ܷɐv51m/UB#%ДCdco m$Do2{-l(Gz^ĭ >?V:H,Ou@CTEI$Cy2l'GlBaا}~Ld]S l@5C䚫Ljݯ]i{`G%9jlQ7Ҹ[bq6OI\EN.!BO1HBQdsͲE<~P{C+\ĕZѠr,Ǡ}#nD"XW .օƪ0ucKsLJ4փc1M [Mu_6A;1%^_{ 4]{囇8[J,L;.mbR<}5H;^ kARq$6Y? Qs͘#ӌZ o:&[wZŵ52:S'E3cH> J4hzYa'o;(?~8UU c2RQAZ4Fwzةv6@\~It1e^Nr{Me$J $UhR k%z+ĒAI݅Q PЬT -ł$5CH l܁MaMwp%ʢ6]ɞ  Xp(xxg=6|,$Zu1Ad$o9v(F.z}6 L ~OWJpoj Q)j/H\#WAIcI JP$&n0:px¯؇jLbYX&!M89^`DSl1~@rK(IN hg2.X /u I^% WL:>m+BJ`OfTc鼩& X7{6rwpCE3I5,mRg6 O.V!`>Z+N˂LǴEuԿ11>M1">_7=$Gc@JHSzKdGbYsR,5 oߥ \>;6d)_/ח\P{G/~$+U5BzWu‡p[V+M0Yb5 N֬~F\ :)[!'$J2?8N\{{ܖWCĥH͈>Ke!NuߝIQ$yo͉q3.˪n<-ө#drK 0VkSIc?&#" 3 '0h;tU>edz KϖVO(q;ʼX,p. qnk32_1[*sBNă10ԒE>M+uk{i+inIT6\RQG[Mn4Յosh(ȬF!5 "MCw7R#A3 k/<` Z?+1H?f{ j{;~@Ŋ*PhM_KQ5'otH S(_ݻ|tp9G[v.f͵tLT,Y*&dnQINkl QxӦǕޗ8 A*wyQsBa`6%mKIA{gKIuf^W:9nAPN֕Zj&e?./i~j i{J]=+BɹV! %@^y޲)2sah*l+ojʯΞM.uP '^̢pF%&_}KH MD'6fDߙ e5>j|aaij87IF` Fz?Âi#ZPa<95~&7;yqq}S@lD֜!oY,6mS%# {8/wELs.5Rqjaa55-|bѲ~f2jT"ZjÍ[nʍe>ݖmTf4]{ >Šn$ 9(ӵ*hʬ/ M-r ' @6_8jPDS"`yY>H|%κUX>Vy?3.nɒԳKH/';tp8Yf&s   (3iu-Ak$o\ߵ$NRPcEG )g2Rmq1JO3V~vUy\C]l zHE~|i' džEN'tu41+,٢=NJtQP(^Cu~a;3S%pdN QBh7 ` 2<5ӯKbC7gRb:5p \:^]gipQHc;,ힾC釣"aPY*M)q"`㑪Ȓ~d,6xv/tx~{l&[j3.i)cI`KtW-R0*7SêZ3UHNxԹWD([\@Raϕ._N\F$:ԒXx7 u=a|oy2<Ѣ5Y~!pq{$PU `mZ3yQo (ŭ˖}|Ҕ?Rf)/:]$Vwmz}M`D@ar8dhi^(0Cd4u)cU2v݁nCTS 9"JWd!r8QC مMS *B=[/3\i*[8 ]@JM|y= #ͤ|{RoQ]`cVEȻ_+ %CoRx39X 3AHNqßp=`kڝ]T>zEp5ĸ(:<; PۮaZb&6$C eBpbIEp26 A^5I%@afuD_I36PkBTU`!9 {ܮeZ5NW}5p#uUF>w櫄V>Bԫ/Jݐ F5,Grv˻v5C\F]&R _WlB=I;gjU&m{΍0d?憘 t׶nk"1-){=?75lAtuoETf7젛=Bhr{{#+otAg,]7dFR "u*?O7R0Uk\$hs +|s*l_kЩ/ 4rPabE0$\ vZZcå7VFv-wg:\k H7[2/FmɢGǰn60mM g!YyN U \bԘ@>o)cgS :mڨig (T3`+Eg ;SGl1v>%a*w:Jx\A|f^qx5l %W4} q젎Q*e?pgC^m DgOuGLK yq-~?YKOIA׀rڈS" Szq .\$$Hi c lQj~C6A4y'ǛNjnОIRD 8 S4U$RS2t3trmj9'#Uq2Ұ>i0PE<,~eh|Ҍc`;" zteYĉIQ"D4>sg҇o:6+I #|^c16p_qNrn<(lΛ4ӮꭨAIǪuu)KWܫ;{i"hɶ5}*\&K8q^THT 5H6Yq3aC 1Х!@%q:"[*:XBw0#nWGc\RE!E}b$շxرw"NC`c<tԕ|%Ac}Wj&j'J͋L>@{;1W N MBA~y YR+a@D d_W[x  QНpy(oԨH5ng%!*6zG&8Ӊ`ZO5yR__Ч~N_ n[l8f<6\a'6P=}hhKsܷiWN/hf0,}\q9ը5Kr @1OrR/G}3uMqBA /ޠr g5߁m<͕hv{'&l+XTD`;B+˘=:ͺyV|uc3컱#kOi{5DívsQ^FM ,^4w/FXpJf+)B:m`IcHjD'mT=fgFi!6XI:fR> -hj5BmM?o7czh(Z[O06]Fkz@܉1P{c^!šJrv /=Y Eq l8wefS 3h.$AuhhfE.Z|-?*zd=`>G8!!;֬9MC'e.z؈@B 9gkOXӛqNЧ`Fhm#bVp:C̷O}Yo^=^L@nɸf/AZ:k :}"| ^* )^eW׾FEaWjMݵdTsSl7eaM:)tB'.V*mߓ* `r=uX2|)zV@2H:Z)0nLMKҚm,N]-=4TAg#qeKs`Y(@A.v'Y 񩔏; AQ1~ԙOjnYnϝmTJNJIʐ)`:5)>֧M;gxkT{3b9? TIn!Oe̺ )?*u>LE!Mr9`4 1ƣv $1kn)ԍ xg:\?,g]n28EH mt]֗on{mJS}h<0hd=MBF:vV;DD]qtNeg3sZ/F(ԿWR5uZ^fFtō (U'17!"8He%0۳]c(OHNg @>dq*V|u1s]%݋ |bHE<)}lAęG"|PD-?Ot]Y-(ApnŐn=r$k1rW%#xY)gW)̵—:晱V(5ۏpO' ޳>?5vn;9=5^DKh^ǢH<ભgwZ߹f [v#SW%UkV' 4F"|V|tpՈ!~JVb>,q}hkXC n榊 ͨa2LӨj֒R,3ܽ8x_N&2ϱcpA!GtztE VƳsѮMcA/6Qd![~nwM@|yAod'ĺd&(CTi 0R3;YKbv@S|"#6hĩƯlٴk"0};|S `oE fQM<ib&'4y?7h(]x߁f)z"P#~\gpu7g~Tt+f&\>-. .R^4o(iI4?`sw0 4SYxTGqpNKѡ؁By>h SO#FSnL,ԏFo%?8.ڮ2cKf=MFO#xSZzɉ|'wkG˂*p+ =8GmM|A2j)= kg;"}[zOLďMl$8LNIvfY.>فn/;™O,9!&dޘ u>h T$7RQB9!gҢC/y:i,K#\)ȯ*&|4}S'SDaKm2R,qF@t*nz{CfV?mRo'c 7Rgw(>ҭ&üLn1>4+)Ih djSi._6_eS0zUB_Iǚ;;m[yuԨRAa$5AKyF%܌O?s=eeawgq Yo"e"+%Hg8eC~! ¹{rU&Ņ xt;;W,pN,gTʔAp445[`K{NSngU.qTs" MPJaON&8VkJŷT@/!o Ƿ(r$mS%ldsQ$.`;j~4'!zWWYC#M/g'kA[pd3G?v@kCJ #H\7 |Y_VH…E͗)+3.n=-!K/ҢILr=2v`/۵I1a#ݍߗj@o(??^(UF5lU Xi$zSljo|$yTOֺBvVΊxt!*G@GTlqXLQqCf# [#s@ɉ+QM{J:sc+yX5)ARh5ˑFR=W" GH:)5#8Bp rʹlB6b9B5TQ{Wg–JͰ[ϋ$Ol:݌f 'PNcɱ!vm׮ڈV XT`DF/wiYPJz}塗ߦj0MC1K LP܍2ܑ@x ? rJ>!9Ro/dX+n))O˛~!WRO}!&t TGeիgpῄggU ҉cfsF!IRC˭1Sfgvt >R!֯L4&tb@XXu1L|lLJ=߾dU)GcÑ_QK0OB" 9"\$$:5h:T!R/ *([;8um*4zأ @Mq3@Ԑz׮kN[B\@Rc{ߞ m%.PoTˏbdAɓY D4:t8XӑZetܫݛmkZAt AK[4ۃ B#7x@mc7C<&{ d7\"tDb zecPL+ <<*Wt%= Uc)*Y֧weS#:ί5P]FŁsVkt)0fι] s!ܪ};jMNJ٣>7iEHb&]pg,Ccu:lݺ(<#ǐx^* NsF_l0<+'!Vbe]U+<P kі5LM_'6%Pxχ7`{/ O n>Mh7hJg),]D;:Y/U&pȗTZ?jzgɘCrG1sI[FIOIen-p.ʶ;Gon$qM$~7yZJZeM4#kM!'CAtmϿ3\Efz͞]rZ(~U%Wc'MXnǶoò:a`$}LuCgQ_NhDyLH*[% )/}d @\ӥ5bzcx<&_4Ag2[vwcs_:c&9(~]l|~L\EdHN-"Xn {iTh/w^R2 dz\ĊQw l)ɺ4 RFbο^\TuhYEF'E)\,d0q<hTCK%.J7hͽ~ H{j]4Hu^}(3D=B:Қ179`F\,Ru ;R׷i|%Y+SQIm 0h :vFUЦ /G]Wt]3ExS$'9<)F0Nt/g1$. e.3 ~.s$:sf?Lb\}AMCx,Ȩg?a8ɟ9H#@BRϽʶkפ>IyH=TXr 0ؒaT 찚u:s#,>Ś(,țE~3NY &oY͟,!åڕX8l=(#"hAhDT~2ޛBts{ic+~N%zEuAx|ƘxQZ1/n/|wa`39\/=Fj#\Yg876|M &J|4%_$ӻS5 `o3fw@eVO+atj<$fWc3N\쑋1H3)8uZtRo&yt<J\-Q[ p:jcfrD~^ sPUMlҸ͡5w`1ՔE}VgYzUA5Y g+la cNŸ$O/;Mw~yt6~[([s9:]A7mk).8=՚lԏ6sQe6'ḱ2Q;Z3vjIy6B$]5:BKFs*P:-DW[Lw؍.Xks99WKAX>px`zIwjl(cAw@([%qЬϮ,TIN6i" EA{ &qd]uR*[A L2u5[c{[L$zjKrAK28²Mp*$Iru4wmv,5zcr<~Joe0m*Oo;Y])y_ob!UgB\дag{CޘFM~^3jitU(@,\t}BYsT^bĢy kHU,T#Zxxl Y2Oz>ilC1M+$\[Q 9z/yIo+Oxp(D05< hpPܨx<"zqiA-6-fcAd#VxaQx*aqvI5MƇ84nô-4Qk/(ĎI~aFAMFN-@z AQŞ> 絆W6x\_J2 @YAa9y1 GWRRmBOh>Sg݆~!߉*W&WԸfԍռ ÅSSDE)O<.(?Bș~{yoQ'e# Fo- Ж'-80PW-0-g"by o X8η(,l`tpy%)0<6'ng|I8?oW :_gf"$o,KRWRː:[ m3u8w#fX,Q-\^|ݱK@ATfq |~2j&  ƏphkZU^P:eeY, a;Qlh9 Φ텨3$ORiu=E*vpd-#Ke|+cd)tpZIwf5nԄFZG%I>0wX ?Pȫ6Y֮I2c &CDo]wֹ`d;ƒbT?Sa53~~vsW8u휌_B<ܦfAzJK< >l^%QL˽CҦ(%'$Jt܄ J3rdŤOW4~8a X/[y}kn&Ij}p_=V e` ^S¥鴇i0Y4S嚃t\B= E/:Xs ^\l_{liRۡކ$"WҠ4YΗwv eXT&ꞥֽB=L]ȪC{tAڑYݢ j3L6fpjBj+-]ܵOd!Sln";gwrr QO&ߐ $-mKԗ;1ό?&[A;<0{ L[k~ n+sWar~]N#r[Vwxyn\Vw_N*Z)ĎfVա+d;-% OQz(EPXg]AYll R_ujy80&A3g.D*FaTmuwJd/Oh}5g:M2_YfaL]C;J*ACIG%u+BbGOBwdnT.BQzz~Uf51F rM X>TcVlul뀋WBu,Q[jXQ;dekߏV២س+ȫ 8GMlEj7hge w3 v4uCb*P>G0S,k"=6Ϋئ<BXKBlM5"2'm`dJT+Õ ;hk-6z:%+rMk 7 3;m%k#m꧔9uPT2' Ѯ Zj}Ѹb:<~NAfZz$SzASMSp UCpYmz/w\>n7/78闎EZT.ѣy\A]j('adGBNmqE4qO Bg8ΓA?|uͦ ?;K`.z,qM{myuUuIbIj}s+KOr2[>!*s:S&.,E}A2vp}E=86 EXidMOm;Έ$#r7% rv9*%]Ԝ ̀'хd\{E 9L3P]ˤwHVmMV7]4i7IڽjE&aq|o$j Sف]Yw8>VB2ț|.uǍwlbʛL\܋P'&A&n`$K$ۖKe;!) c ُ.Yf4JUsq|"7B>_{9 #n;,jFFfpNOKy4N+1gy孽9&UBሟ^`2U`XT]V7`9oIJ W`1T,\bbOd i[|D+X0\H)?N/UR(< 9wRV\l؎cظbݙp{ s(I6CU|ȴ`^=hHFMPoU)jP sM 8fLSl[fTĞQs*"+Ǽ_y=||v&@Kę2\Wٛ'z\鄈DM^GƜ}i1o"myu%WO_,bAOe" f+}tSý zP1^Jxk`C`|m2yuDqMYӇӳDy^AWz?Fx9ԊOaKju5|̓0P$*pEWŪ99K}M'M}B%b/z*0q0]8j;kT徒H!dX#x&!ܺw3$\K,kAI%p'`x$F&>5|fȶ$lk8Xu]{Ñ݄#Qc#4,!"BS~7o3-V # v>72ϖ-0m A_7< I(IS%`TmQ.;=POXmÐG\EnK[WB Ɠ弔:`n(դz)FQ&N֖ޑ!0ɁCr:O> qRTᱦJCϊXZ{ba^4쵤g=l3(t4,m@&e,} /wr(0&P 0'w!廍G}"SWCG> mö~ ^?.Y- j7Gcᇷ8e\$~/#(Qsm= #Ek 0L T7R2fzJ>[|N6 khFm %K#uQvbQ9I O5UU?+ ˴Nz-ԫKQ]08zz  ˚ :VW1Tu?!ZdQߎFH=U8 fσ :wTlZIH'֍dAWCxImpjhUϣ7Jey&G8GT*XcH)y{Qo6h&&!Goݟ0tlb83R 6 ަX#H0.|{_Hv,nWoFKPX3?l6|QA}^ɀ %C4]faC4{x^ՉvfqSb.1׫E3?.B:+%nY '|e4J~.*Zs=}4BLW;L߃jb棹/e;b:q//ch=FTG?Ld[[^(ZXT_Ii=/:D[{uƤnՎ]¢aFO;[݂!&Ȥx:6'YAx:ߪa h+=F)ƛ <j&JS Ԑ΍|li}DUM,M6n8bHLݔXpi; OFŊIs(mz}~YEQ0ots<=e.scZBlс:1c-j%NJUJ(zTa*躝i?R'$}8iQ_o(u^0XL2V~U"JG;a~( |ʪ)獐mi<#Qܪ~ۖfoE{e}vv' R.Cߊv~tPoT0? p]1_X8UMo~n˃oqTK4~GOM6{BEVwwjD;2:m!tUn y3-٤dPĒ%~7vop۟~+ ~/w *j hzo; YcoT!Պ_s,EN;8Zpxx*hN{M 6:Oi.>m8 ?b4n0`2䩜ǺaC| +Dp6҇cv sXU}Z? `n(o DP6Nf7v-d[')dSga% p%/~9ЌFn2wHvF7]VC(^YT䑼Bj^|*91$^Otɯ ,+mvBڱ̣WV@|P|ze\@5#ȌӰIj!l͆ A%k#=i s~)Cfl˳)TN.h7B` ' 1u T|[Vx2{RFWB۸4}]_XSxnƄS~ 4?TL363N禾 Kx~l< 'yOסQNx=E.xsgxi0c`` Pp/KZ;#{>* ,TyG,kHkRFWû-[s$l@&#BWf_U//5iܐCu%"Wl /^Qn1*dε7ؓ$&.-oN1}@AZғfLbf%_i)rW|b.;Vҩ4< fE2 Z@; 3O.aU[>^m>"?m&4g.b |5v[pŢJcPqepN~\voť#PFy@sW>Ty&ɤ8b}-SivS[vKVDXҖ#;Ϩ#'PàKi7bPh(؅m U\Wb1] >N`AG.ݴar.J1 >GN^RhIQ}ΏG *k‰5Q!tD}weZo?Ų"7߃8+ =''wB 3NA[䰯O$ijBCO8taU #^;,_-~M(]sihP.ft0jGHq.CF͑,Ď J6̲Ʒ84DI1sLU,ϒm_^ᒫª\<%tbA \YyBQ˛O .p(,㜱tҤ+.$uj6[k T?Ep|h$+˪/3J%r+LAdCR82{ʧ;BSZVCwaa%Dd*;Qfv(Ӆn m>6Plo_,Bݗ UGGNslk a*ZGqcTzU1㷘QPˇ#ʄߣ6+7AH Fن2-<&:QT>Rmu(meA #@OZފwͺ~Y¢nPV|&Cq+?B㫊qw& R *[ 67q&-hszNRj t cAxثD _Y]6wsP >c^@w[YHd]m!~umeqk.ؚ̮IƏ,nf9DcnTw;i7n=ԷRKVOUuĝQMF0< |>g 9畹AT.͉{~cE:!g=tdFa=֡@,2^+jOyyhkQz2ܕYt3ɔ[f`*Լy%ܱQ=M-9|8>7=h4jtHCG DbNvB']CzԏhAj É_β%DR[ LAś=d d6E$mIBy=U{GF?Fu|v=&"Jh Psfrxisxj͚'sg`[6G~dz%{DQe-iH sk8^:) 3g.7 /8&)B@w,1%eT- 4ي1|% zL_U<85$dr{Jl,9AL.-53,G>M\%ZN@{ӻ[Uw9܂KRL!/++ff>@[jI~RWM׏")v Dy'{ ӏE6aa h̝e|XFI3\MQ8Z4%ES\=x;H Ҷ'KRƑ1mj{"~/ ~0+9(0W?;G%#8Vfqdֆ>ꖅfAop֏59ڬ'q"Q" @h[zaE8 q5o^NXZ|օV 6#FËA$pyJ {zW2e0CK(J10ˀm>>fIڄiޘ#=DRh.7i]ZO7¾)Kxw"LS_yLp14H} ۆOEi%c ޚWS>yx`"uKGƸmh,<`pMϒFTh\4恩2VМG}0%n^ch AC<\]tMP5yi^r}Oߞ_pr1u L H  t`Xt2, |gvg Zr^2MHf É52vvC7mi;ZB+#4ơI)rI644^kޭX}Pd<8 .CݧlEԖhZN;Z-ɶu`(J!mdzQ.J}qݟ-pj-8Dp[bV^r`%:, t|5| Άiﵸ|ê)! &?M;ĊQS8(ߛGSǂ+l R!]y>auRu)W \ֽz1kɻ(CxNٟL{g<~)ΗbucFo Kq¸"l~%G / zjWjrrY0]'eG <+UO`LGd* ŮiiE'Ta$XE)߮[T|m*R$AtkڙRךnvM/kIeDS{b֒#^$uv ;mY$ o% b8z_/~r3PG׍CK`&c?&-o$ dΖKHXbaQ )1uy6ۃGK,&fͫX`;I(x-zЊIO, hwmC2 ]`Cڲ1x#4|fWPYBIZ7rɇA{67lj3ދUʵDWީ@>}uwip"ǨhOzX9@&XQ*ݑhg,Is.x]U-Cf׬Q~282nHi.1ܺ v#?)47VʺFmÝj?˔ʌV-zesumn@Ni(%SPv]́_tdRY~!A~j,9e%n-8}值 @ږuΚa,˖edӎEjBvN P։$[bJܪ4Ԩ@0[kha&wȘUHN>fW &@}d@uu,)W!Ͼj#-QĸN]:*ۘ\D7hUK2=d6Lrzɴ7vcӧzυPiE'9R  .Hk`͚p [/:G^ꝻhԴw%ZV]q wnfЋD-N)I'XψZl1p c8^+J~%+"_Yd`*bifF2fY^Lсȩt2_Xӝizպ`8m%WJ8JdMփ:=tg `t9k= s1ח=TQU ɺ/mJ !m7z%<jC_&=4bfBHo |%Z KO80j,m WٔSޖ?|G K U L"l8Vh=386C;.+L O45Mb3aPk2*{̀.رj vm2/Un!QVǜPxI`V| 1wkВQc6X9D--PlVb k\Tj5>۝jǴHpW}>PYVΔXBxt>W(ZݔP%閎7&^.co.y`Pt cm8`BS7M?rږu|,))R뚨 |@R2;S=͕) O kjž K|@HI~/Y11?xRHy" _*{yBml /j.O@V颊- 0*ZRa,y (3h ߍѧDLglF1x6DejqBIWH0 'h_4;F^PvWm Mg&ʯ>{}+PN6/E +޲5d%l9q>w݀9/d6>LUvj644Yx֘*IrW.!Td-~M|Mz> |u]G{fy0ZT6Q ?gGJcUo='~w$bg**kc0U`I\֌R2;5y%OظB]c(_ol6ܱ͑|4|&{-}3y3D0[@u'a_glTiGQ؊4!pDԧϲM 5Ұ!'[=Oϫ((2}JEa8C蜚4sd@,17Hn yTT wq 9A,LZjm+kSR *33Ya4be!b>%)éW_U}Z,0*R8 /Ǹt9Ey"dQ1 Szm!Q:.n"pg猶}ZJ `+JHJ=+llaZ+nAaQt\!7gՌ-ˎBƮ; ]۵_W-dJ9.aބ02w`5y2P XrbGNVZqs9&RSHUIT :WKu)E%"yb~"+~Rj;v D|"ʱqF25kR_?@x=HCҝ*:7I.CmBO+5쯸#N˜0͑f^2Eۜ/.~"$F'2'F<:I&vIHp(oniϘw|%+һ )v!]m({{u?C i1 .h_bx>ZyS=:M#Ivj ˏT2L$MUKBhs30!:8k{{‡o6GA fr.E1}*3Tz&o*cs3}iF[G\5A\] iڦWOq&}/oMϭ`^;isu޸v]FKyY9~§fI@tB]&4TWhᲺ/adNnuFɅVL45DWiΉeb^q]ӂgxnV@-C3ntBЂ4ȊCԍjDNF&&s2H567ѳ3i4Uf6RO/rL]eG$?K!,k{u6zXa$k2?}b*:uZK.eҳ& N0՞>bXiJ?w Н= ]$a؅騨V]kZ]?iw i 'ۓ0{0\㣫Oc64BZ?@ {K~dRZ /m5ύ4twAz99f vYa`kɈ#S]لoUԪMW0H$R}{4|ZDP֋E 5p 1?PJa߽ͿE-oiлYd@@ڿs_bH)a8WxңDt>U ZնmlN3⩷H5Nϥx㲿1"18DCi3U6LIñ6m{c%{`~jeBM5X{- J1CJ&Mʗg`(088-b?/s;hU=K,Lq͑snDY7k۠;#)WE~5-䐻|v6/虩T `^&2Ӿ6ƹ6~x7_X۝E1>7]jzv  ,i5~]w&[@hMPБ [.ZP@ J(X(`hbJP;3]O* @"Ǯ(<'>o-}eWzF⦳Þ9=.{ %G#|BE-  eSBsX؁AFH(vVtn?F,4K5 fUW&?z56%Ay@[Dw~,-R4~xd]Xi eZh@C£o=1-RuˏUj,?bM셼"I|pӥx'V]h{li:Ek egI?2l ̖M.#e1j!SWx קwɌt݄ 1G˷a'vs;.-rS"1j"wMQ ClnNq,h`jvNg~p9_BObilCfl~pҲH eNg5ˈm{g\)y{BDAKhykl/!%oMzJ' ߣ`S~t24K 2J c$ *'.ĺp Ua<ܭW Rg%DYBm87PqV{(F~}75y8&*YOoNU&v<=i |SoP`;b~c)?v :W9(dSq w%!Br({!b 8]O> "z[ Ga_?|H.ɛ=P|e:^esIc%=bY鱎Q!"Ʃ琱U5ӎ?oqmk9hzaحk_b|'&S4=Ti(_(?휟>E amEN!c H l!U̩mð9*,1%PC\MtԩI"nN=EL{{'yܭN:[6]LAก*T덛W+I5Jq+@x-]9}Q\Kڻ|͌N E*0rދl+AJcWF Tc&ުƶ'aS_%T1{,3ȜOfQO[b:(%>GC">#azU [[pmF G:ҿ A/q{)VB=̂"YT`bV'o(Y"]F}oQ/&f< qExR}Z7=sѶ $+w Χnf@x['Hݦ4wf3PF\,}6zFr]W[^ TT{ #'#wP% 4y$2b:3ӗFOGtttp=d?Ձvh\ա$]~Ibv2G8w;&)tO! ].$ν}a,)ʓA#GYOsARK%챸X7_E=:ؽZkoEeĽSu>*!ٯ9tOy@̈́e_` .ebh/͏fTJ"< goǼZDFL#2L/ "$`>{k-vlO^-w[YF|cBzUcaťM|cVࠋ9hs,T}d{b^ΓH $K[ ɹi6vJL<n TԔIe%\v `-㹁ۑ;9UTt6ilߚ?b)GEGhQ\/ @5ªQ? ;Wk oζ,'k#w xԄ|[2 #,BCҹ#UPG#W]f9Uyz'NyR$CH%^ȏliUK;dy PbϜ'Jt6N!DTnPo |5c sMɺU%̀H7Эx34C<RC:6(`+Mi!vk/Pȫ>rD 9bfCYo3Z35NtYQC"&j38&f6IѓL90 Ai-]Es-ɟn%V &@\A*j._F&g岭E%JH#/r!K(_[npApjX(N0/*`[Y7)ND1^NEs~Wӷq aeeϋ؁+v%g!Ln%5٠J_GaGl.`TvBfBۣ׷M%|D\`*/M8ɉȬc6 'mZuh7b8XA.0ϕMіL HCѮ)ްke:2!왂/_5,L UpoX{ܮFlroyn*p-hXSDg+Btؽ^{+7iC:F}Cڜ@V+;}rfԳдlF^&oh.!3KJ&>sġ oQb@8E"}+K*STPb|Aˎށ5dX0KWJ ާd|3}>m3wmJ\O0FYWO=O.@`K cV\B1`p4 U x+L/uU)fFsC)rZVƧ*r}enlnٓUחKYֽ8u_Ib"doLSwl st/gX'V#*ypjm"3Dl0e% }!3k͵j-mxzK*KGACD@c.^$EvҀ}6 WYrߺ]WCOQwDl/k6/GnGgc2ȮW:,特T{,id? ~7)d<.q 7 EF꟨!ߋW+XppxpS4W/EA/nfZPJ$Pq-n3 t'eHRyLxa1Cr\Ϋdl8-;bLA*"^YNc#]w9J0e=7vµ/>};q_ۛBWJDЀM[U'$ 4ď{D;o9mmlEE]WQEB+kd5z+ ɉS)tFB8cALW&XGl%g\ ܹ;= hN@vZϏ(2`))H?M6vUg1< ͣ˶.s)^lo0Zad=S{R5$&1 / $B uh#u މ'Bɧ˚2%t< l޿0 !!yǀ7)03QZߊ"m@۪Xŀֵ\5^:V:skRi/<4/pLޏBMC/S'W<=u/+Sp},E Rx!grOowAΦ} Opd_ ^ڗW怃5ߐ d ] s{L/G^5w@݂=Uz'nr+2,OqtV .dVܝO6#x$QIbc=1u J2j_%<n1Y.C|K;O y3}i8z޻%bNq4o72%٫pޕ\A* ilSa8)p IlthF 'R!1**uTU>YR8{8;byt^<"Ѓ6q|A9 ysAOwLWinYX` !QBOVA2:py{y\dPA9Wyt)}6Σ*V )~P_KqÖE,hrEC_!O}=vqS13fzro^I vm5 e:d:a@ n b4F""j:EqCu6sو*rHjCD@5!tHcc`P[d%{E-AwfCE P`ea-, ,R_ Ovӷyt˭]asZ9.Atv;D>3zm_qzrXpO=jeTjn.Mޭ ʷRMWD ϟv2:sD4kՕW: Wc@noF0=IV8>Ĉ&rGIgmR.rOnR2inդHlv]3#p g(pVXJ&jn$]?#_{}Xwojaކ*}u'20Spo.un P^bVCt1gw:[9{oDnL7mS!ΛPEE_j3 l"$h C%8b=9N>j-0EE )vt6cdp#%6I6-=؜kr"wNV/EƺbjvZhK1LŤڂ[Lc(e/>ʲo!nro/'ԙWq+@"$Q A7+FNu1"SV{^&[ y]$8t;-.3#!7)B=s^>jPh5hKR^{ :v+\֐\$-:P;?uܠ)N0%wZXF5ȠXwF!zk0X:[Ύ.yN!$Ŧy3=*" *AAW j%1 +њwcVA{Scr.i < o-.jr51(1xZ5 yӢQV1 ?,.0g \vU@lWV| _ږ/q λvi,u 9vVd'R\7DȎ_CxM'%V7DL1j ?߽eKQä;+ =Ka65#85Fqv`g34 je`*O`꯫SMY9;)uF`H@4ubuA) feMX!}z͝MW`t!-TtWgl޼0XjX]aqZC/(Q"ݝ ҜM # ᡮz$Ip|7Je6Sw[$Ꙙقn؅Ϡ)@x}O 4o%1-+5M`)ǩJ L"V8(Q!uǢ) Ho:7deq+E:&b=e].lN뮎[zǥ\o:8+QhRhYPnwN _5Z6qrT[^$ - 8MA,`*MxD }fK~1K'vٵE2O pNh_"vYmB$R6oӽCw yb(Uy=ӃmrXz ?q.p5{YG?5u$WTT2X[SP t 7DOU*c NI IF]0oح-.R1#NR|sB*;'ܻPW -[f턪 [6\`y5}VXR=X4܊O4o_+L|C:p?*yu^cU6BD+t:fXؕ#|]1dSm'hsavoKv9U @&}aqRDBH|ùd:.[w3މ@dȰDlTF 7cP#$6"/xkDCX3h jf*jP ohg3*CX5;_vmuؾʌ?7{mK&NIsoiO*Է~e\r9)*Bª3`Dw!BC`o[@Rv6#ѩ z8MTYX)HJP+b!/#ʬ)ʲ}"JEcŽLBgBPg=MXZ=^] lߟ#j{$$H} `^fN{J>wsQ&FAu^߆ )VLJ^愈k)#~/=5QQ_z+]Nm@2Hd#i+<=UbE,w$LGs0lP8 ]s|-˚sszNۣ() -m1I}:$E|WgT \1K!14e5Wx"|%v!Z ITp T*m o' 4Uk{o|*RۊlxCm_tq&^hc·o+ Mzbz ue9vrG&ko"R_2 \/R}0 `/Wx6ەIfs5Mj[xۯoZv=tQfZڤvQskxL~ib oWm5*-P]3㧩̵qĶ H,kZ6؋'c{96rX>i>*c6B;(vLFի5Tl =Ecxu,F\ m횲D0&ń޻[W kq]0_2$DR#oЬCK,MlXk>X`2ٍqݬZqwks8;J_jX/=!Loă$m ֪Y#o[J*ڨHg FI U"PVF4poU!>DBoA[+NljhSc[V: F{H7P8]n@!Z(Ȯ &î/5ı$ |^Jm82ӱt> * 2cJՏ,E~yXƤ'Vg-dYcd7 /_%`iZT"m6(?ҏ-S)fi==uY⶯JI˚qMW,3>ECi]x6hv 8I_ܤqfudkh3A$ {n(0>;Xi ~(ih %Conyn9C(ŽWlITKShA jސ>o8&RX/4*F,9&qU2OCFhq/Z4 1X^\2/ʈ*=]aaq1SHi T`EK$'6FY(?kx'耿`P2tR^Huʫ{AzT6{&gĒ#W(C'xŴa& U}Ԉ3/Dk[xŐyQ}Dž&e@έ2Ϲ 3i| kbpMcW.oꨒ5x"0@xAP1oQAJH:'-=ﴬ,'92?dKDe#`9L%C_58?:AcpWVuyhSv~KnWž$MERD͹Em<ɝ ٱQb<ժkG׸U|RQn3bˡ]=d[DsҠy IyrRaO{@Sl-r7򜇉_g/XkeK6-Lp?~GFJԛu,o <39,֢95|?C CK14x6!nzaÄ|gFEI*rQ HN c/9d93Zi1)љ[_TQe3H6SMêpd,a Sj!cP8)켂dk'r3{O;/Y ~%i1f+.֒GC:yȆa3> c.qF$pK3FBRmS>QVɸw?>BʬΉ-c#cCN ģΑ]9JГ9(HKSk x7U<16>f"D)̍H+˵l,uqKٗ`gQ 0U;+K~SS"I]q庩pUu(Ms0.HJc.y9Ss>'DŎl{g!4ݿ̏lEO DUZHY g(?76P !!bƕdx=YfE[< ~pHcb$򨉒\7w^<]c]sO@0͇s_Se3>h:-KoDpkrL"Nb^uk% O.Q;YEd{Vvṵf총mHM̭ptœ !ck/|2f{Sgl@A1[Ern x PK{IɱKڵȒ?Op+ ff޽ Ȑ!})p\hoOSgnKQoEScQL66I6+?jRp Z5W4k s4c_8">cYVi;mF^h&\wr7(?Yva'>F:Y@…SFB$@K⭻Sjʥ,Yt%y}A,'uǣM5V~$!dsc)$cDI±{}"FX{&v݆a^  )ح  R3߃頮9ץnRZ2'q''Q>pÏ$~ 仌cgm^aӔ$7sԖ~|*O`UW9{@FyZ ?fqƭs",dԡ}5ͱvH1b~Oŀ8D^BR(QcF7+K5:ʄxPZ(5MIfN. 7?Ow_b{sbgfݙ0 ZeU] ȡP=905VɭĚvDzCg yX2=%d*hbdm0`!̑:Q*o\[hf"D=PB *R3pa?P"!(d#)]{!qaxאa ۺѮ1uTHDZߨRzU0/r* V,`rUNjP]A=Gu6'ovo);t9aV0?)mW }R%U-,0!e@A3L3oEWgE9@_SwUy5̦gdg^@J\a͝{n4Sspb0|;iYp dbޟ5w(mvf?Ph$†hht>0%̢p sFOxd&K/11Yp 5q5d)5R;_wWrbbnǭIAM-IEAPzoX!aaW0*E"t0^ZɈܺ CzP6F8}Xx&ֆUYIG)%@JWSm6J?jFœ{LUBt:' o?6/k!V\yaBoJt3o[I2;uW.J0iׂM#ro200_8x㶩UP{H pqlv}%!φҾ>$h>' ,8 m4?vԏhG3V[UMP>@0ңC_qT OP;H'VaD_Pݏ]ic@|Y*E0b%B:_ؕK^/ ih1#zZ_c AF f-ʘjzP+Axxs 1Ȯz8zeG]-d*yة>eCJ1{=~gtVx bXqs(*e=vۙ\ t-_{b2:lZDlz_ tෛcg'R1yRaTIȊWSr0z3wc.lڕ2!!C$E~2[#W:FvGuFAN Z0Vٍ\O9]#[e9 =pG'(r ɟP@0B&'5c.HDbMY0YEe0 [² cN #!d)hk.礈o^7}z򤟭@*zR"C/lIyOǶy"LȘNRxϰaS<'b8fy,`H'}&mѨ=6OCEeNr'|V`>BO:?"C<3ɖyoM"#ʝAW. zy|$ҟ"o*#]5'rgX>YQH:~S&=!h m37rkٿLDW<ܙ+L||߮˼#Y^??ԛ&74ckgu vO_rOw~l;HO$RLn(DoMEe 6%WK)P;TSZM wx.2)0U$C[QT(cK&(=S,hDȉ$V|!nӃYk.J_s9Ya ,XsЄ iGQldwZ0{fru uϏ-۔{dFM8`0 (l &&6'te[ICiq}g>, ""c&@wې$p+;v "&&{R`K#FWbAоյ_<GOnn_Pd ;.IꜾO>F P*.crt|J.-t9ymSZ ?}@Wq%0쑁MI}R/ꡀPfs*/Ν72mi>dAXty}fcn髝2uCYvkKF)8nwF8R ڒWKT&r[V"0nոSD~6p–2.} Vla u'gxVhU|6U,#C}~M&]M.gjnoz㗄IP(ʁLc xvUDȍ6><Vct)Ý2`ř}Zr{g|7&,GRƹd3n<&Xڳ?=3{F`'4/>*xhۛ̌(J7 ?<:I4l1!-.y40Uo̻[U$j# n=soڿ%ϿA$-I s1/ˬ|nϪ|:y/F.0#pf4lmV6){Usj,BRpx.!m&H; r@M;$Q\T7Hd34 E{?wT"Ҙ,N;a'ٹ-[9{2MTIKI Z(Pc˛<"ƮM.-숷[+;k~ߥ\Ys4Jhyc-^HݫM:I,{F:j^`L#l&7ҝ<,R AbͩG o> $m<X/a"G,+1?ϛ¼^|0?|R=[s8޺liMmrOv)"nuvoA+IZ<{~YMD)J2c]2jJ> ~S ySF.=j_zxw#׮5pgN!sDsy~npp/N ?oIJi,Ky_xHf6?,'Ϛ4 F}IJahX,<:l~a/dG!`(а+M WdJejK)>ܟy8Y_:})֫sKYc/ͷ)ƐMa/l$ ,qB]{)40z#]6&E/ ?3NDS/yۍxlIF32X&5? aSf t_Td9RYUx*d}6 Ԫ\<. ;?g*Nw," `i,?w4 7!@S1J蝠;~ ;( vdN'@t̡^S vATuO*@wry鯫v"(qnq{6f#(H}ݣɮlh^ՁkϘGw *!G7OfV<(Ҕ %Za)4*ݼnZ1ؒOQZa@%,GsxQo?@8cWYOʼn}N.L0T|)9NMI3$#`Ƽf#l@ߖMD,hm~\ւG%w8R[4E\:]E KKvf,F%#'Q/l d3 dE'KH͆KzFwUf۶_`)RefƯ4/ٛ0 ǥ@fGeȼn+'cbǯ` A[Zh//6F{Kcwe໵=+vY냓ӍPdYWƆp|RٮCS.WZ'L-G8Ć M44v"]D`xሦoLY4)pϝ@ZŜ:uT9Bں=5Ps+e]tN{}iaoIV 4M?Q{waaEN u+#K>>8 X淢XD겅SXA8 pWۓxZZ\ёy.}͈]q<毛 -KWGỵF ZQ^=Xg/cXe( _29`yj,c6hJ ~ jmZBAså/yWljF~XndZy}ۧx01,?uP!z%htQRH$H [rəy|5 <||vaBҌs͏0.iV1 e3noHG)o+%p79@,G8acY3 {>>أ?i/PbХX!T(A΍uO 3LUBC~BSߺ2}I늳̘O_+Y$hҫ,7l?WT_ҟ":}&72ڦD{"iUl4Ϧd"̃go 9߽crbSGwWNIOFoE&o3 ,Ӛ%䵶񒣲$B{_ilt[ Wr&p<$Sת{8rP$sP» Ih.PlJt Ӊ5׬ކN!.yW##HY@ҟYeJ;8HS!ye@vP0F붃]KFH58RLQ3jJazSS]}Q_ss@#'< Re k@-r& Z.Z5EXLy7FkqAHbjanlcY15QkbwN- ]2ip]̺Rk?5@KPTvbYT@ӵ㟗EM+:HB#(-hQ%F#EGq%! #4/uZzQS;81xiveJ ?Q|E,]ROO_'"Aq[2h$UK-M}֋g>ݨipIw).*Q~;jVbV:v՛ )†/O=߮vOll Y0Gs2x~Ru]a"8m?bz`Os-Aѧ8#tg7K{W.:ZR]Émgtl-6& Mr:uWح]'D_Jԧy:-TLw:-Ub]dƑ [\*%LsT2F~m֏z`-VT$bq~n#u>| 1Œt އ/0&]-̐uD" =78+DXB] lE,%1'w9Ɩ!k>G@"]shIrU5+,Sjv[*Xx iˏOw?%a*6pV\ Oʦ\ jǑGLV$r|P5g\jwDHd{!G>eT5g%4Ճ\g/l!y{.;MC,f#ѲiKvXy.(:8,rH:ΟZk[Gwt>D@f'}5.#bJل.Ur}6SCNV4qCQnA;kt{a;ޤ+مD&Zf7Bby.dbify#plb4GQ.QW>;]i -lӀ_&LK -y/NI]IʮQ~& D\~*nzC.lSw\MKa:r,ӻ`JeБ쎬sLB.CJfNHn䢦^=#~d! s##㚜#ڡq8iޘL>N"N8D [6L/4v0TqZm:yDVMdI'CT%J7^VyB|BBJu"D=A/qr/)p GLl[S0Y0Ŋ7m?el7q]kGI<Rq"iNݘ^n@d:_0*Ozj"=iu*^:Er$۟[!DmϰZ9qV;9Jcw;dwnOgA)p C FF Wg85lHACaN"#&1"9İї${Դ$Wskqx+кz\QH?coA?>dq'i+Ҕ yyaJ0t9NgD̻t E1}HY:hih"??\6+"j !p6=-~6 2(r3l5>"(e^@% oob8\ 6b)ADڵ QAeX$>n =㦂Χ0C/plKZ&1] k5dpd,ks:`& RQQ apBu\{[Hv1xWGBܟmO+D|R˷ÒJBLHkR{鮦Ft3Ⱦe'{պ7p`56wҒS\SWEv^OR#.*q^6A[*~US֢:C0:IeqpcWe -GT7KjIӌ ;z52.|J)< MZ,>祡ˁOE=8-27_AѾjXb`Ob|]2eeJo?7gK$[EW!:1FE @;'f8D}X9 A:9egA 5)jjzh6CGM%i(lyCFh. .uXWZgA(vE. U'n8O M̲8ǖ0_Ou`-hnؚ>0V\KljJcaW nQ,5g?PHp9a#? vqk;Jf ,J\GHt(Rm_=6G"LjB9BIfaOqW2?9y9UΥ[)Bh_Qӳ2f {츍2\h^[$$ȶ{_ڲuUKq@ ߯ܐVH\+7Os_p@[3 NLV֭$OYo/!jG/V~;`H"f/ ^#Uc2~}{vSú-6W. o/($nEbw)w>҇LqG&Lz`uZyuSps,鎹CՉ.}|bg!:7$cd=˞[1>+d-_v}Dznd-%(z|XljgW]`Ɨܢ Y,zuXZ0D2ё#D~ǫT~"nm~yrn)C<5S#j-51*UGzN-v.0\+%G5@䁺m*f~v GzbYlqWwLsycX)y%En&cEmNqP|{f |=A17)W5m ^A'\ Mie)(׆:)86a6\N6]d=W%NI M)|a>9R#cdd8_ GSϙa>H88LهX?nf^y,3C¤ҏP4\ ~+0-ljJ\( T0 ֕k*.yPZ4ݢ.>!~7)_]HuhDu&#F+by 4kJيޗOKzK*Kr]˩PkJ1*oAi7Pd'ƚcz!i.)vC5kS)~ QPt bWě@cA ،oÈ4;|ʓ%D0? (Z1$n8t3)1G"m Wrt^'\u0;d_b@gk@ 3niu۟,! t}YjaE5m_v8_{ Jr|.h{^cTf8jO!,B<-YAxiމQCGKY>K~c/Q=L^șoĐ݋F-QȽo=߸ v-%Y<`nyy&cH؊Y$esFvwh5БjVH,}hM}UD"p 8[3'ե}I{?+6&/|CberJdW? z^BW7?`lKSNǥ}M0\e!k025L%>y{h{"hVhOmybd_.m@ U\j? ai3imr4D_?~'L͈׫Ó8Cz:_k sLGҀpVpB? ԇɸ-վɂY L>dO⌵2%z+Xô #rNOO { ^[N8;ț(yߊQCIo}1urX4uMw15ING[0LD@UᚲP(ѸLYQZ ~Ś /i<ѬgQz0)8=gODwyZd9~x%Ñh h,!?hU&كGEE^>eld,?h+SLwWlN쮀Xvy(:_GU8_oEA\VArlm>ǒ@OPȲs/'R_P_'o/ם]*'d~} )p!e;'5=.y>n1@*c$b/^%aLDpyI<䡸@€=m(ײh샵}"ɤ2T`oRbA@0t.︋%V^ېCܢ68Zy JXk遰|j +`W6 oTG j-HE*(8 LRؖ-$z٦N?9?(6YȆ5{r屢|6pܨ:-s':jNud؆ um g5ǯ2d4-ס'a9iX ># ^GzGXTgK,roA$MHt._4 _(ɥ3d}RHFbWuq7%O6h6RZBsW^緿o>`7l,TRAآw.n7 ufܴ ʇUް/iu{^Q_4 +k$djT?띬q+S l` Ʒvsr@R4 ȧ,J_jzE=}_"v~t<MF83prPއ zndJ~upY7E&X%",jZ,]bKv|I">|2 ’ľ!frr k3Ֆ/~<ū,3&=6ig<;sȺEE=ۥ1H%tf 1ii9P);`Cyc L5!gKA>,xE?3FVFҮpն̯#j>s;z\^J-vxh8䅉&/6@mR4VZJDjH(֍KizrP =0. %Ui6G&nK8HTv:@IQ :]'$US5^sB=wnyqoyRJTD2?Ó|')j'gGk5-)wWbfZg'Qd}T} 3pmGѴ Sv(5-}' $uօ]p!w-3{R ?I][@IdhV"I,t9#NڝB+ ױY;TE%AYUG[4楊@:ė:O$9k`36xNoI%ڡ6feR3tH[b"nW·iiO'6| m .`-k5?OSZC b^Jl:$(#)PDSu*}n|7/o ufSA!"xz6ɖ(SԺlO@ }F7 ]{B&MF@@㸩{dSN58v@sJQߺ]w4 =kK4PMO_ <߳XYPW"zZP"{#CxGk> =.Kv~OwSLuO;6#*2U<%gKP=b 5c50'O(*6=?E|dqY9ެDԋhls|b }Ae4TJ/`A ? 0΋ONXE3%=jd27$#e G405v3|Q+㙨 yfBQŮҀW\(*֓| 5:SPe'$Z%>SG< ^_ʃVx]OUXa( ?K͒1;MN:?b|.1% 5wmp _kTBnce8nڧRNc-byœ|9Q9t.\#/ز2ɏ3:D4͸'ln @}T>?Hp.;Z?P8yb[ۯ@^۱yr yCsϹ+@E*ThoeƿM L[sUm+"IoYUXlYGos#`kcҁwaϷ''rjtl6>QworRn'].c+L2"V$s)?S_bNv^(3plƯ8DM4 +Kʃ~΁xdzJ3_C;d gf2`x(&Wp_+YUu>5K_C#K aӛN-WrW# ]m~+2Z5b snk_^Gx(E< 9/?j=PE+eVn$+ҢW EU,7rDJs뜘R$e,lo?! yǫt~8:{k?~P]D.+70ZNmWKJD\!Ƈ:y. O4Ҏ>Ώ?M kR*A´]H;:D / E"7"#+|_,dEE: Gk;n>OΜsZv. N[瓀 eCu*]Z!E]w?:wh'F"IT=*r$k18'ײkҸkNA_ v<4*lwO^dЦ%eUK;@нM]ˊwRViI{'Wh2%e^^o%+e]UDP uJEלG16OBjNW:7nC(l}k ~H͝gbm؉t,*+B왆ȧ.F$GK0sӴc( lIE,#>;gv&+)ږJT]u"T,j- DNy>a$%avmϧ7ƏD Vgޣ/?@X'~M8odhA w|ZhЁ+%ٔ,Wߥ6#~3IqIkdcf,;EJP&X˭p7w4n3H7LzN/x6y|#i P+YJ4]r[g>Cё-S6keIF|`a泞GMڴ Oٸ{P)kqguRՅ` Gԗ1+~ҡQ/fE"@'QEPAH Tg?߷y!~ʨuA8Aت8DL0bԐ֙.9 8'!4|<. 85[|^=8xEQt8"BpUӄ5Ln o3w|ݎ&gl7DءD€NoAL_0OTh d:SҊM{tW+go0- i%{!-U]6_ݍ anHܧyցƋps&PgGаAtP.!,CmE> 9c^dt2ү VUvl /ppCT}{r,€LӴ@kZl 8[(zv\\g/f}n;0{`[&+_⧊™*C{/Ԩ)f[E(i4a>'\R*-M1-f +c--ɡ IǪflyPT.vv6Sg|Po5} m `D0)E* TwNjCli' ,SPŬdJu+3M]7S:QBا? L4T.(g>7Y”M5RBl/ѡK?`i](LT?T/«O @Ö45G Cߣ?[{}b/}C"h)U EQO/y+RE*Ȣd )y|]Z}{VSneqBZx/Dv3ً痋0JQO}th&EҌUfP{$/2sI;ӚpsZDm8)ʣecê}fZPQqwP2KE|6DXKөƲɠ1mr:?{bPqFnY39_熀0Z#yA|.u td>V+7&jMibw&v%ɒzmI}D,L$Rl@:)=./3 YQǬEY笴 g?͜qDS}t춵4;(QJ0Tq"V-66d8!R%{;ښK"Vv&N\o!ō2kԡT2 dBciov}+8CXؖ cU3wkԳ+F Fק@Tc.KM'R}kXG4_(]@h+w23pB-xs[ gBfɬ8`9Y6DՉ]MnpupgGOdP(R.[l9Tf\\fmb֝us3ynihP.#i#֗#7YG+!~m]v֢*d71ā7{4P[!uo.A~L+5[BS~HzSSN6;ٜD0o0X(@x!8ڋihӮ É~:55,-7Ͱl&jН\Ut+M9c-%awZZ~&0jsOoJk5pcF\Tuڤ*C+Tz1+ U- eCj/J(f/pgg5}ˑ(eϿ[`qfXS %Xf!ngG4pA-neFAс!oo#0$& NO1e?#szAq6kzA'B2'k hz%SMC;m'ا_rqrw#NV-_ڙB(%0^[`ԩ@h^ l4/~8̹)e*.hFN?Bh6k{K '"n B{D=/M( Ewl/8"YRg݌'GxZ:[ pѤJtS{xcg~ BQ|ݺᄄtڎ[! DAxʗѬNhq,\5TݨŞ$|]S t4-6γ%Y*rȎ~<.+PyԦgՌr"Uk՜vSrol$'IO|L\D/Qv1/}[8Γ7rK7%yUp2h j_U5:T|V rlDB jŠ;SN>D`ePHQM8C Y c^0`;8V0R's zN3176eGEK„d_awUqApReB8 }t[N jI7__/Vvi7E-(Qq ` M5Ʒ>=|:`1 "*GtL\KżAnSxC%D4ɲ=qŭ*j(-@rS,a)x ,Q8:1(9zv@rѶ&=wOJpKRO9dO# 774AE@152%#vDHvER. Up@Ok`;Y\weӓ􄭭H,ZU67ԷwDFh4ٰe(;#z+^#]!q|L \r ;WaeM1YETWa@LlHc>aΑQ En2@?`IfZ蹳 VHxs gҿ)㖜ytC#QΉyNgVߩ%S3c%bi`?I"uI3&#N3b\/$GkWK06t= _"PtұT_Ƽ(~\M)m@-X/~[!ZL%#$}]6&=f%&%PJFWFS7L~ⰐC|%_c(RX!`!/*IƒAڐU;ڈ`{@i_5SAt.T`W6Ʊ*WyEbKD;C*翓Q/#tmcߒ{]{<IeRC)lYiB[P-ѻ_{ftT](-Q`l V*`b $eD:K%jk!uC"tl=c&N3!"Qw?3,g3D+ 9vͰ50<xdw5{ '>&}>hY?&C@7<$58u䝋}^Q4n7!~kȑTs VlhʦA6{:g&؜,yyNXtH=4Q̫ tKOG3GJr֫=`a%>vtH1 b E $, H !%[/n7ۋvͱ4B9.^>GpV$gDJWu;i>8m0]xum$ygw@G9F 'NfT"Oi뀙P݆cZaċ GZB( `߀^ 'Q@:fP@mTQѝ ͛>?[Lg5PU^Ҡq~h=l^KǏM jUQF:05vkmP˥6W#|R|JL, ;A`xB) @KW'oXl_钕Vj =q2gx}(5樀urd @%4gCZ)AFA)9d\¦,N19x6w^JBuvN?𒇰AVsa cmqW*Ŋ(q1}$#\p+6ym_0ŭ Y+T۲DArSG9 /fKV5륐wUFDctf$dk;1CTjÝA#zAtŌFz1+M )/?]'%Z^ Ռ eFܸɇ }*wEJg9lN+,C:18-v$#1'5wZO<~ku7I+/7숨`Id#_yKՈחDES 0bU2+%s34t= 71h`!q N\-=;3lm 0yn -Ozυk! ?OuC5N:vx€a tzO4/+tojcx[J6U"]~?fNkb`a2!LgQ~Q>)kS8`ͻ%:z兿U9r,C/.t[)E=?ŬE7hI?ְW7%L{[92=qKvbÌ͈ǁiĒ=r ;pUyd2WV(e>,52zfe JM\uVoOZ~nͷSQ( TU ' ks+H' 8yÖ1g-”^4W|O3"Ȑ(;Ǜ~(` {l'c i @E=PjJ u5jс";&TXe-ϒ*wȖ[D AY\JY0a}&*cX0+w푔䛑nþ4̅a`R! $ih,塐zFHödcvPLM :nӱ㞴QK׳az:(Æ:3|ap7H`2}1~ЕY o2Zѵ+CZ?NoalCڦ( 0wbߙZihSFpj7ߥ;JVܢe'T$.n1(5&n~\l(OK9s2,CxHW-P ^Oh+ٕi&\"W\ΊM-`d"Ȉ#و:%ZTTɦFW#t\dXj$:i'H;$ (9\;Դ䡚gEjAYDlZdڻl},~ѧ3'@YUHBr۳)ڌBO꛻Gtk.R>P>4ʚ#z|&ơ]ǐZ6M5},+,/{֚kہorw+EXd~ xZ=y-$.-QlZ[ gɼ= cy n@D]nB:2?83b~ω=L֏|K1}dmyEz\H'1dwj[j@Sa'h}I4e^sa×./p X&,3*ehN§h ňm eg`>zewTS}^ckK0'ΝE;p\ڛs_d7)GJti\kSAZZX-Ӊaˆ6)[)Ћ0ikhE4Pnq!fYtXܹw:A﬋9`۸^?Il/ ))GcI^z=.@L0ƂsƖG":i;Udq7 O{!t)t1촘95pיZnϡQo[4-P;pjS$!җDM{%_-~o2A PBQ4ndbZM[ie;QEo1JT1E9-IT1t$6,VtY9KS8~hlDES,^n]&Rnn #|o-u{49b{] cqH','@4`ԇaE2Q<~lI/ٲ`񥺵eFuB%3 %hdyS5g*n$u❧7CZ5C_' ˶oCI+hRV8e9N`m 0"u?C֚/"H6v`uQ3) } tHeX(>CtҦVs:ɀ"xL#5r>N)CHn| RYX(f#Wm -jL㉿Oc6Yk/:Wq~B7e4E8TB鷦nƾéHNͥH pɶOT Om{KQ .ArKC83_kd4 ACKmv-nK]-붗2<Ƙw,pLJ;Uukrz5Y-?=4]T=w*MEC#H삅%[]UR E3^|Ϛc_":i,~譫.>G}͔pT[H!s2_q !6QpH'FY &9xJO h>Vn֏K挥0_N3Oݜc-\cpe{Ish-6g0rR= W,DTj~wL>kpWፍ6Z A]*N3,hyQ3`O" .$Xo5,O[֌*iz/{L&`ѓ)Nx7r:zP˩,SmT:Οj4v .Bz5Agl$Xi)Q_.?HTSIsO|6! /B> B{:AQE_u-j:zj#/Hg_8ysv4Tery2#q9U.Y\Ē%OdvR&ސڿ%y1TwTPmn-9(snZf@"j^:ܖ:J5膳ҥZT`#<=2y!k.0R g,4t_aEXNTl+l2hw3">)Y[0M.H+^^09[ߺ3ݎ!p w_tKN2T ʏ) ZJz?:UgjhzWb/ DhAҟa$)LK4G[Λrn1! rpL$) /g(n2S%Gs/ԏ?}D_xG$/TJ!~#Wǣ+7 >]ɶO4kjDKiu)^3>XԼu?}uk5TkĄˊ2q z5U骕ćVfI=AyԦBAYNSP-XXq^ qqO-hd䕰)nj tV!\?}{T!`C6s@*XtPF}H74^W~ 3 l`bG*̖oƠ=|t6fP>b=t8@0nyLʦHR1Xѕix{CJĖ{d,ƓO,~!y ݓc]L$nf>tq6nCF(bxR;B~ef`H"GxReZ:tc hr'*=KyX0|-O 3VRmG[%?=0s'E%Fu">jhyC HeGmw3^U1҃{pm }[E.jkϗ%6I S:b?%ZtX`> я:ݒήREdbq4@.E!&tjw*m/hHSI>SGF=.@ 9i"r8*kw^g-~ϰ^-ɺrw|w962kvqeVTWL/z M8a@'Iѵg5+Ax\&XNъ:_Jsh}$DgvO8 `ƚ?q%[a0q)9G3YQ)*`(/ZR޹Fc0'[OWsq-)5.xWцPpKoUDIyVag1)&Al]71^qq² q Nd~7Wv> SPx;dFÞ"FUic&6#SU{%VG#mk'vjA;[,KUe}SMl/ tRő J7)Y!.jWkUvjl<$ s!V9(諱ÅvSkBPIoa9'lD 4ah4_CKU@& \mn^7%i *fXnKn`)BtL=OJّᳩ+iѾK]S*nвツnXX y$QJ?_o!psm5,.ˆȣ>!#h/U-2-R{T{ɰD-"ۆPzϦ xkFBXtNb Iwup-5K*ǧX>6w]AqҰKծV1kC'ڬ1v1ɁAjx<6n:e /ʑ0~*f ̃vɁ?k&bdKF9N`U[8XwJd{ ͒1qr ޒJsy $p ؐTE[AcO7*%d>9殟=Eell;aU꩷#ZBO2K|ǕMaڕη-1wCc&Z)׭^}_AyvTO%dƚ}R ړ*ʳZq&CyNu4Zn Iɀ~+1]Ʋi9!I# Ua:F/e6Mr@KgZ|J/T gos&q -a3Vo 9T > BE,%Nԙ;Ev_OJĽXtݔ|_7M,e=AtBI^oKQN]16EhR  j(eRyj0-**G͑ ZܷT[fKʱ{`4dAIjSj{U||G eά mmU-V4)tǕM-ԓy!|&JۅN[EDBU{&= iўIānml՜17M*)n.O:&˂N+}e7[:9[X}3l\o{"1d5O[/++_甑 c/ j_Q?ǥtɟT /ǯ7K*YTTŃ - Ϡapu] .ooLLDjήf۽EV"̗Yh,IA؉;"c<" -p]u@a%3H`)9,Yvo@@}w>𙷗Q+`"v!|XnAR©H _o2т0DKBqE/"ÊU:_{o M`][QlokpG,oa]biQ3w%qҝY4 NnPYw7"MZ]_"ISYcsHd[~$`Β  '-kEqsD|k3^OmVM8 NKCN-p|,8m4GsDV,9ouxvrkkL#4@zSS`r'7W(EQYϬY3YZ[v-!>][C!iY "e\Jda'.ޗ%.\޿W;rg{Nj!/q-N5=;ƊWlK, eؚʡr'"Ry 3jtнdaE:$? a~ݷqi3h`-X8ҽu! GěnͬqHan~o2 0IoHkbk|u;pv18q:I׸M`N Ee86ϣӱ}+TZÉPo4`>7aPڑ-/@K#ћJ8gg,6? - p#F6C,4]ok_tA>*[K#!"*M8b`hK 7HVq u*K~lu]T=f(^%#ppexTO _Yg &/y"pYv12c!o4]e)Z}qouB ֪[Z2\;k8O?j 7w^V,M{âP*7e XTu|g%À31z%[_=W66vt:>鞴s5B8<,M{iؖk9]a=DLޔ $%#fgZc%(xLgpJ4P5lʜ!~YNu)R\o%nZQ`vS!Uˢr%:'UJ<.U}xC؂[p-1MhFLnRCozXH|e$֩9AN,Q(<0`Dgk8_XJ?6Mv$إڀ ]69esr[$db%aR sl9׷ٔM/Dmkbɠ)$pZEl9aꩍ~@J/= ?D:=wzt H6|lR(łqFܰ :riDߠϔ`NŽB#_6rmZ^.' D&⫒)5tFg&%0:%xd |5}Cpe݄׿ gI .CJ Be3+8._yq0Ns=`P X[Wޱ;at|DPz>YQ x EA=r 3IUB2,u)I)٥v A)q*l6˾LZXݩA_>VMy2{*",4I1LAbaz.fU@dz6v'zeW 2UA=v;oܼ w7֋8RB'~<_ׯAVѹ#~Jpy3mf ĮR ;~[ #2Szus& I3u~VޗOprld+R)d%4UН!YaX'Ǒnwި'$ŇxQ4j}[SRqIMǁK|!WE Gz>Cpuä$1,ߦԋVo<|1"_xKDxUÏŕNpX'O X̘qaoN= #p% *ߐ'QA0nQ|]wкM,}0<  |'ڿ~{T5p+֠zMG_!Q\dza7I g8uqLI5{svz+0VǙ༈5bNB3tAo3IGwthC[P0_}%Vu: 6 aʀ~GV -0  Who8 $}XWWP|碴OiLXID)}Nр6sJxd`;л R yT9"wtJA\d\3BN!o PNsG{NgF-cE!*1DGru(]&@lʫE)L$":JffuYS#h LXփ=orumD6\ Mm(o$k{@[]T KۖcڎUnְIt&f)Ejh߾ĉƖG>i#Jl QJZ&̌70 2koT6uP5eJ6]j4](@ 4nOLreX>$1Q|rzD!޴5C1q1uc.H" x`+!pw#l;N-&8TXlN.rQ䦱Ul.>=NJFa|(haM<:p1 +A}착Nt`Nb~-Պ= RCђWT/QͰ,73T~@*4:LِْؔJۛ(5(khlN ,% c_8~8R=ED&4$x’+Epw\Bhb2|-ډ`Hn?,e0|D}W95 =р.G7zsFayɖ:uq9Yg]I 5fPzءۥU2ܵT##Lx* bm7| nDY:A_6` UNz|J%Kظ ]y2 hgD.V%6w.٨3_-yEk+ji ..S/鈩3"h-mG97Z+uH^\1g' C\%UVF|U)6w hCx?aN FSr990$UJrx.)}& PVjlW-kRScc㟾-)`]?NTUb Kxa/p bfPyae-ikd6 N_EUei, : u<8`nK;|VlP7~,-}1\oYs(2o=%/2sJ3Kml:|';p`aZ3I'Sk46hBܡ֢2usB,{1$}AauMǑ>3[uI?ZCPteQmԹ4 xB6&UwQeP'__0D-U-TW 6쁅ˉ,B%|46]R-M E `Aِl9o.+>r"]=Hhϫ;/UǪw.t43@VBV'StVҝ$WQзv֪y@$'/!Wβ7?ԉ'aVMLwԸ6Z*%^5h(. [ 0}G_x0oHJl?-KQٜ ĵ6׌NI; \` jAVŠ K}Ӳڢ).3UY r[6| fiL4bXUGо49{ب@u2giE݂eߩ5+Z낟 jN.~,Tfɱ1Q$o)ʬXdv֝o EO1#ϯqjSK9;6dEEԞ]/L!J^P/n+^U z[r==Qٌُ3:eKDw.Ncp~$~+awӌz޶Zy|.4<]~]Rgb}{ph`Xw[m"6ڗ/}#^_°u2Ғ WRbIމHWpqAbO2CxMծ dJN?+*Sf?uRZ d GDr镃}!@ ,,`umt'd~y%~$}i˧ Gye8IƟF_.^4b\ݼӘZ"7>Q-MQO&*_4[4}{;?ްJo>˩+&.UgZ _+:YR<Ho njޓᮿIP l烷X=ʒi\^.QȺZ]`Q͋ ssd 6׾a&=t})+]E%#E(T`"@(V{+Dq)U溞AthDuS/ }vi/_.=K웼l [cuEl@wwdJ*[-wYHߜc~q*Z QǤ2‘bB|ZVw2eʊJg~eRH#G<{T{HO9p3\Tp*H(,Urd@{w7V{,Ox6.o~%?^qqqfꥌ0uHR&o|? /hhW)qȟg_ ݼh_E"<-bG'wfwvVMޠe9N"rGy&ӳj(7^:Xz+r[㭀)*Bkw_/a7/YSkE J@RRO:gHһ !р-q0|nk骹ڐV-G+iS;,@pQvE I.eZdkmH_oIaŕG<`S'Xm=faM jr{#C.XQIwVL3uǛ H-z2WFU0BW?a|+AMt^͢ ;~覨7>7i՟Xɦp\sK9ˠR!~G5~i"`nuz% uLpۗױ \I3cಒ> E}/ a9;췟2v.ľpr(svTdMNܓWbM(T'? <+am7 =xH#;Qᶾy=#y ξ* j@ZafT{z0ߕ 4^%g"T!Ii4#REχ@Q΂aqCcdvR^487jϋE]^[T1PY`-FSm?`7D3q7(N񂰤!ʧvFg2~w.o~I{/ӿ!c"|!`Žft1ҥTW֣NYwفz\[myOPxzA=F4D|9$ 3x eQ@&+o S{$e\lL]8eB1z3EK}hdRg#.驅K )7i`ٻ^UxT zS9Dm-\m23-W8Cحsޮ&)@ϣ yzq=ll`XuiM g[6qd _8ғnCW4OfCՕ3ri[WS #%pJ; D~͈LpGy0{=(?abҬxɕ?G(zմ22=m 9f|bP13Gxhٛd54_Vfb WiWq#N_7~&$Gȇ'&~R]PG.ˆTN˝{ѯ˝iGcRU^Jsrf.^QH'S ,udAk5[Y60!@n,{g_JI/8v(0_J>GdzqBs9H[x/E,b7'L7ŵߐis_+h4dh_2WK5亿M2yꃴ(zYjHH(B7[s!u>քH46F1[h[h¾(t[=~gUoFW)7|^hG)isÌ^ AH0V"|L |)E˅R0o+5 `m~O3ޙ]rDM%(Nti^w@JR_#h[x&ʶ: Ct vBʥ'FQ'5MӉa ЭEzu=5eZDD]$]9`>uvc&p1>w?``ޒC14р !/^_ʚĤFi9VN\_\d΄!0q; ӑrPێKj1@kXYѱ7CLyG"Per1Rt`G#ffDϟ=iN7$ ٙlu-`F$>ʷ/`pS<3*P/l*@2<ں&wVR`Btmc2}T,[Qyy8Wr!R^`S Nv)jЪU FES7 }7Llڗ ~j!OنVI\Q ^]`" ob:Xwx$ 58-ׅڐ KX} H$~"b!:|"LYZsy_J駭k=ԟ<K hۥnٓ.=2)Hۧ8؝ 䐜#r8a>7Lf>`ZNp@GdFs5J~bS?E&,kٔ GGoB#ѽ `zuVe'0cKA-Z6*8hߞ(!xxq&l+)|xmA`  2t" $Hhyji|u8qoi*4!vG6.s[L$5Yq-=eׂ5W?/r1* V]E 9_un#T Fy ݽ~ev\꼅0Jtxif^y)NSTŕmx 39ǘpڌSt8J)-W ULOO#X#-qƒg }6U9jlۢ%Bo!wp:s 9K:hk%P>2p&b? z+W'!* HV{2bR ;fTtNA(hy32j>o}NA)΃Q3 >+uetޛ9[ AtCj~b*e1^X&=v0zzPt/Z)LX47ʅ?] #n$P.*an>Ֆ>{[,xKn$VI[<4L"J4rgt;nܷI$=Rd2񋽫chHз/Q-å5|c#PN@ӬWIG%QU:yAB<98R@Q}9nL؛^bcE(SP@OsNTVMG|ajJB$H!ۀ߾y{g+܏2øȚ[Ң^ss-( CbBynɧ3VlP|cX'[, i3P%I9&e&u|8d؟E?NkПӘ+kkL3$Y!7>p_7ER+RUN2X 1F+P=o9\ 1HTD:,ҁcK~OqS[O_H:# kt?Bqpl$1ӧ$;_\>o,r:dWEB2ȋVfyi<$`gǰc2 &#Qt d3Ψ#BA@RZx$|bB\H<$ȼfɺ~ H﷕TO{vjyq}p E< ^O"'Y0.G$u=3 Oɱ#qzVӖ"IJ3᭏^}{`YL"(G98 k*1=i$D8Eߢ}XˤYPͻo) E֪,<;=ykf7%3qp2ԄA4WgNxM):ο/To В/~,䡓ψK0#MIaR35v'TH.%DŽAcYroMaIhtFu1+m}]Om ;] ~pN>0ŤA^C*u+R}7Jڹ :4"ib%EXeHqD[܎n&,$հy~?!% HDީq"32U9KW6*n Il'N ˭(-%}xhGʟ7]SijZ3šG}vS㘡;Vл.<4&ln|a~m顥#/ &2OQ/b^$8uly(0UFm\s]l䏣ۑvEĊv_͛*K6b8 FZbw$yk>#5Q9pi0KK%Zv-R׷C^zww-ne cgGML~6Aٕ>A-p.,*ay.u+z}A(:U[!gy:aM쀸/nM\įDŽP1B1ߺ^ůYCg~> nLmW~TDPpV}xnV5lQy>P C5?1`I({=  @h;1ۓk?gA%2Dj=wxYS%x`a x[`|Է"2w4 El%+Ejl/BSPѻSꚲ<뛗VO2%<\StPgom"<mZ b<^f3!Sly_~<ͩP|ì-(g ~^ 2i_wj*]}D(R3h8=n4ߊa~F +xj$tїo47ݧKjJMnRG΂FoW+x&Pپ|%F(2X5h>A,4uFNf`=.ȥ::yحǍ:tؒ-Qa!kN##h<\LY%E?K{Ūi KjM`؎qX6O V>fx߯ڟH! Bu-J.S/Vc[e x (Ǜ'.HF}sfj5U >W*ּ3Ґ1@?')DK<^T8\$:Wm*4VRۢlHtKʬh#6'mYI.Q4`J7Sq"$(i /7&h%uf4&77:ę{f$ 4Tz{TWJחm )=V3J|B+J( }v}Epzoz7NOy6E6imւ xz^ Hta\9xy8/פ :F2s-Bp5[MnDKB}e Xol4Ĺ!`p|R0ΨI %Y'.տdJL#5ܪIPbSڂ?F&7`׬ַ[S8Ѳs?bʾ!\gq2K/vZ|%,?[lǒ-,ʒ`M'6S? 9 n)3[ Cybgou&` LHHm 5ݝP?74LdFH2I"k\:9 n?#TXgm5l$m6vX a|11㔾` djKv!B^gpddc~YL4`6 {"z>x%V {}u.H?I_Ҵ1\Ro߲-qD +X|c~j8#jHT(A:vz#$~}ef!hB;?2jQftC2%zGBkȞ9*KQ Tm eQLod{2VqŘ|P4ӌL:RˣCa06H/oMFD+0[ _(aYd+Px]wloQ"roRǮl|zH}œr0 :Ãcw.!sOApϲEFc!1fWnm>l&9!8DH"z a\P g(d׉ȯhZxj'C#!#9B?,s2tWzpu{I:أ]Y &Ry[%Kf4C=z0y@hWP[ ]v ZEPDK_ Y"!}ByG_t4u'fΣ3}䯯|Op0!6Jl@~ι_4µ^Ȩ ~c.Ʋa UBv`lWk|KFټwv!jU=F`)Imyo"uE|hEYeҾġk݅i$I8o>a҉"Dp"_=Osq%OӷXHǪ),rBCmoS~Q *'nKQ?~!ﱥ _^ȧ rUb1;BljO^crk_VZQ%1#J~v9LshdGEYM58q(Xyl; w|69b^lkTYd`xL/R1`Y,O8M;@ 0i^ۧ͞".E 㻁X#CP4DLQؘj'_ {1MkQ݋4)F\a!@xܰJ]vH)'q5u;2pm{hʩ_y(0Rw&8,zښ!Edˠ0GcZRMmv/tMLm1Ág` '#QCV' X7[k&ie W/bwnG@\LC~A ̄sp W5Մ>cFuNaN.M<}iĴzڭ]R1QYc$UκӈW)-)ȍۦ*;>V LR)~-~XAMD֕:.֝jX;'<ץ@.> c\ίdt4gW2!F|Faw!L(- @{D ,?MkB cuӉ4bWuzu-r2r@|~#j{`:mwWJ(ۭnR?]3"Q6|{83,rHpwaꈭ{-N%(V [*`3$|IdcmzV$|¾킌3%Zkd;|jޕGPi 22޳}]&^^OtNv{ 쟝`tE.Wn%!YqU |ݬ}3|n8Ls^L5i)q>>Q}݂Y jzIVRHÎnWA i* % Z9KH` -o0Rxɜ%|;lS$AA4MJ;减 v>zYS֊ܾ䵀o] CaC_{qv nԗ1΍WĨn^#-8@C[b*\+{] L{G *{ɬ)̫ 4ɷ`"It+"Non(=,wΑDz8pb<ˑo۝^Svffם-K"=$`J\Jh)榡=I!h:_scZ$n%ܜ!;.o{JTC{X><*ϯޕz({@fdBt6.!6TՂ"UЩ2b$d5A0&dn|Cgd 'j|qFT(C[UJ&bk+j#8|pߢSr-=HǺjHa0mG64_pq 1g▞@> )ŷp2E$+Ex|cΧu:'J#eb罖CĄrr'64K$ȯ d[w]4V)|ޚ1I`|̒*͎[T(ػI07_2FqO/y0:scpWUYTE_4F /j.{|hNK|7ˀ/>|mlr7^/⽄/ylKf̑>Ayvy OH i**_/0;+πyd~M$evpx:xBf_0~r?sx+5#RÄRMIãq3W ]7&2;· 3|Qsm:n;ph╁^ {F֮B9#[/ȖtJj, O yz ؊|*`c<9XŜS¹#|AyDf26Z A7:#q;yR@Ub+A9oi SdtQcFgjo)EqM`ΧFϴ  s\?zLMPYKڞj_)k"*Ve[ lN^{4x{+JWKNMh9;^lǑ|QNHw걀]H p'g~eP>rcC*e?+L P.7J}`)beTFG4xbC3l2Baog6׺his^3m$<l;?U1H)!5%WOQaP5ɭ_7k-V[]P4}"RQz읚}=IhL{-N"G@%]DDGO@\Yi:1 E]}%N=U؇w:#Z߲sC~l*,juiT J"8EHr/~hbm*QI9b= 0?YoFT_uO/J$]k( ݞ^8CxB<ҽSNO-*-΢e`' ՘@VpPAۮݡ*z꛶ n-LӑiB/ L~M7$jx}|wc]'@}=dvze~hzF#5^~2 nRfG8bLѓTמ Ҏ(hpSfz$5m(<)|czmm2F9QKq&Y,c7$~aI* U99GĞў/ooa;t#=<  >g%x_:EPRg0$[g(X 2~!T^a.} "cc'0|Xo,Fڳ9c~1NR-Õ$;CK8$dC1+ i5nUv,zzs^8jkfdas$b='6̳jdzhzO[C0c;۴@ ?Td ,vo܊8^Qs]0-ΎW)v4#1%xK+o@?[jFtK*=qM*5%htdnTRFpLNiLx BmI~߆D\Mg+]G9 mX :іYUEu%YMOw]v sr"\wa,;R*;s > uAZ0?d\uW}mof0/ܜq_ߍg-FҬZORА c 9d9Ep L>D!,aqpS^pGn"Xq֢@1CFP/;th+EguG:&f"dQw=ܐIGՏFwh$g_mZw6~n7n@z::/b3z?T粂#hn@F6Visp|O;'ލxOLwxȉ3աZiXd3#i-?v l@"GFo.ܙޱu eF˱IFM09Y!ANH#ǯmnl>$D?p1«uwSd&-& D`[A08* uÐ%@!nWt˦ySeрm>޻k޲슐h]gs=#ా 7- 'Q }`J:\:ܸ!)WjZ|i|cƖ.\um>7'+nQ8F,^rN tRW{;΁bɤ=J9LQ΁HāR"Sg FmZ $PpL^)(P7%Sq3=yd}$/3]"%}a۹;MgnT5xq6ЬOLςW:ѕؗa'7;,rafjg?;}M\43bg_J%]+B(F$(`0w_x+B&E{CQgy|18LVT팰 Y8]Ya7,)p3^;t BNq\ohpm7X{wWOf^,)g4\$M뽘 2 _ nt5yR YÿH c\HR\J|@kbP6!ΝK.>Cd "8h>>/g:8[YawwI4/>Uۏ+.mtUa ?;7%g47>Y` (as3D:R2o &t<eaµI!*VTJ}gh_ɒZt /OL1g҆{NYSwkP>$1G+²7組B~A-Q/ :SbBAMzÕr0jw|l{jbDcFV}|zӍd iF(ЙD-wOO2'X3d: _VRWU\9A`R׺oY3{1.nqnG5 B4/)L_<񓶮M0B)fura ~I3w^'X"TqTƬ* H^{l)-6t=5 2$k5|N+j߆ƫш‹Aۡ^jXq9?,uzdXLDz &6%dqvA&DoDyF`KT1aef ɱ] DЄ  ʀScKfcF+o[;Dؚ2?>BRrA](=Q\B5A!nP$_E nGCp~\o줵\VKzSj}B5 b# -%uMOj[#4G%$Rsw.cD!E E 9Oޘl1)O~zYʨ~]?;y9㵟xuM_!83 \ʈK{津ESv󙟆3`(]VM($?X4"?eʏPfPVjt S6r*IaAКх |L ʽ`vSǔT _~}H3k=2V}vk U!?@Ma手 hWeyNJS0\cߺ;aT?QJ0c!Yt [_Gs 4m.&/KxOoWa V3QDǞPEA)@K]|_.˦w9'XFy䬚.1 4&oT!c(ѤL0{^,&:[0 gP52Y~z+it1sj ԕLbfԞ9Nu&wQG{"Sڗd%vI|>!ƥxcgPIM`_}EvR$?dQ_DUZ7w;xieD׈L}7^8iUTt||W#;#rRJFE~ H zdj1yM$qֶ Ly plj1i&K,NsZS3ڿ ݄%{gd0S0M6޺i.a.׸Ɍ$H A0a$x&'/AB67c9̛# Y,skvE(|M6X2Wj_W#Lq4_ oQS=n %;zf/خ?; 8$@m`'L9:]@XXW]*?YeezzH q$g ^KLj\cJvlyt+G[,G@rC2c".YgV045TN^ogE"XA`PG!f~>L gUNRk*rʁ<ZUqP"VnK℗AtM:t&UtO%4Njfqj`X/\ C5gzXW9 QעUv֘7{;F?L p6^ߦ%gH6 cwDhJ{wvӃCX}ks/ )"rb#'TSy8|S"6e De [wA!6м\,ތT PvJEaF茠'y=ZPƟ4wTYqnz?&:]@qҟE7ĬkgE͌n}Oe)"&T'x-b/&ٱ, U#?K/_w%=A% `;? r.#QyH"aIZevd+(߼s5Z&͆dE /cKEJ :`B[K}DLJ*]q;.yq56&bQdp9'("]evYkW 0ԡϞ3 =7$}NeJnFNѵ \ 2_ |ȑゝϾ|O^ߠݓM!6Ew8cB%uvʇ:)Opf \$&Q>fX@IISU!k k|b!{Nz'C^+x5T[?f;@lhݘX+vȦyӥ w?x43?a.|F@S0դ@ Y*7ht(w!d{ Ϣm@{ &lN'~1`sê uNdڕrR=Z#X\k됦Eo>zʥ r p*=cZY42]3i4[)#KSk36ȱnsʑ&N.;`::u&4V[TA9M{9d?2jEST^f;' n=Q(a1k8!1m$vGgy:zx?.T\X֌Zߵ-,MC=zBs.)݅TqII{]bWL 0SJ9 enjQ*Q=VR?R)1fЧ\LzsCvpz{7vuP3)}Ts}h/58eW}f{~cn0)#;/L_Ț҆pAA*W7T5=3֨Vxb~1g4/+/UOQ=W65V)gĴ6m۠<1zY qMl43$&'169?2;cU-Ùe?K*-gk7Atp /PwST Y*V:&a'cg= IX_o$ԑz=:3)d9ݶOsr,>̕@Q؃- B,R"ѡ{V&^3d C/>y(>Q,S؜N.|u9vF `7r"KsM/tۊՐ`:u^d輖r8/[neHl =$E Wx)l fbXP3CdHG4=^D'Ȼ`;bSuFC o|aQX z8s֢lj,ĄQĚͫVݦ\0'S$WF#:?vˣ]MHCԞ f{~w<6UmjEO ]8Lw,f/6/r7Pٵ1N]?? K%y;3-0aև|e!T"Qunm]G&mJdt^rE)["Fg(Ploη}t~Dxg=*vd3 >]{) AHQӕ Unwi5 *jf>]-=,ã(**?}{eiĸtL°h֘S-z\]2sMu:"8O٤M$癞G$Qx+'-}8y 5kL0ZS\|C y Ɋ}\/Nt>șg )6:ഗVtQ6ΡQgnHz[Ʉُo̗Z2,%{om|uvb1VrQ8hDxMzՂeA+KbcELV{dn)>:Hi5߻;YۺXxAb3 9l e[Ko, ^Wq>vCU {OJ֎2GKN{dDXIXxG1܎1br19!5I=;eTҹY6&s*|a\Bntr3,%Al1NJP8I81?5WCVZt1F2MvK&l-Cd o|__/| C"WTQml=NCOޜ 'eI2jfK+!;'iO0t 0Ҩp%مiP]_X՝T~W|[mNù0֝ucv%g }0N wMР /-c01vU0Uk #8&#vfPL/IPeb=V9'B{„8qwۜWN Ң;K'ҋ":h"l_;jՓ⢗_z˃TP)ڲ Γ J{Q,ǡ]`!G)v9L<&Wax]9评 : "Z2ʜN7[sg\ &U1]$(Twe9vyiE6꒩N2A]%GAgT+Ül)i# Snl*D<-5K # Hոg&l ҴT_ZLsr}Aouk?/QX'hY6m+~ ꜷ_:h0uTHeW0%~pkywEf*M տ?#servgiսE}r[JˬoM:)Nf# ̔tRf v~TdgẼ3ME^$p}g&h*gosq["`8RSG^z@l K!|@Aj6\0jQ r@PIHXv;(hn ˧iWJlp~/Bk kK\CvѦL TC<0D uעSft`}ve\~ۋ͸8ݵeY"]:8Nd4ك!`"8iEl,~)! w񭛖Ç*"`( |nqx1@EsA0 рN9nĺp\4D +!UnT cGsݒ L nb]\n!LZXZj;rj6b҉~&b<W*Z$ ,UhWzn#y ۨe@V^ 'e0egWZ@+Ƭp2Yy2,7g(_}Q\@R\3 4EV@C?>ߏ}EKn"Fj@)LhChI _ߤt5c>©bN޶iϟtO,l-NzBQih_?D9z]Ixl7'h~>է%uD_" ~[W#O qp2t'Z3Ԃfw3󍮇*4 h]|i89 83|~G_UJ'(`֗bs_{sU~T@!/ً̽`p /#ɚ]-V. i)W<hJfsy 6B8|WO2d//͓sN+l̔91B֫pKc(nWs5HԜ CIX`nY?@n@U]h@sVp0oݾdWAK "<׏ckꀿ 5ȵM|):^AOTuVr^A ؖoڭGtS^I6gȸp_ƽv^VKV9T5~!C@b v2am(GV12wմø[Rf&:UzW^WتZ8qڞs#Kkue8q䟃鷅]݉,l/۟4d$ C<"D0 +I{OVq1 b̮%ى=z.@X'ԫ$ԡ!r;o}`T >e xz {1QB$ FQRKS'h8QcW$C].Xz%EoVL TsC.UG|7}PKؓA>hQ>x|llw3g@wPoȬ~>#*oav&fT\:L ICnw8KIR[, P>:v2;41d,9T/~!F~}+^|_+4 ! @w_1X~dIMYpvZa[d'9S+֬wpKNj՗7 irp*՛]/IYr+jS ~)=ÚbDkkTAϠDjcbןZ rE@LL]e@&%P2olC6!}_O1huaøcѮ3JǠ`r@[%7n.YJsF%j-6)c{^PTH >ȏR NjA/RuFʇ]NˇY7 iq5A_um3CRpۭ BuֵȪN -O*dQ,׮&րQo3ѥhw)+>Wܑfv|+MمD+էlȸ_>lIXcm P<$'s/t8Wa58y&ry3JɛΌ8h!0jt/hCe0I/)] ̮nnBZ@uxs5T:ZGNrKeZp]Գ%stjZhE 7n~f^lMQIk:=F5T`ihxYBbXNh0`idJ]/퐙Pwo ´ "p5qKnNn+$t߹ûӵ6^6dŜ UXw-LӋ| ?8 4|>N&fl-rLtoQ؅?JdwOޖEVsi3 ɧ FV,Aax@GEn lc;Jj;,Й܍;+҄Ud#Żk.7-=} ɐ+* TbEMhМ̰̾nJJ@9КI"+Dw1z)&ON#vIE<22i(:gZ^~+6|?gFSs1H\g)vl6L/xOKtα`Զ_I(̪|V6CQkk`F&Dq/#(:+ۡT-LUޣMְcSbK%)̿ɥºJh\L^D֎.?c <A)UDኆꐼzB6{ݏf ΢kч)}M/Y \/AUHGRE&WS a8>@i@Lz0H9QK4i:8,3/N} [b/Czz:ܱs%:(Մcr5boYch[J0?Dj*wΊ/Ew){E<>eywmDqDuj@D>Ѥa*r=$h=|qbI#CpAȡޟr K(_^ֆT~/|aneu5:1>GJ`ٳQO: nIMSsv{:duU?CuFWu׸Wu+YaBFˆ췱qE " v1>##y}ԝX^T#[H_lpz1j\DU'۬X-`q33XyLZiv(М9 OQbl?#ziQM19vMAs]Lоsg-rNT p*tx8aM|b47uSNɹtYT!ɐՀ<1~c*؀l<\)650K}P;:!F>뇪fRjJ Xx Wyӑ;O@P=wV Wؕ\H2-R3-Sz).{"`}lE/~tjݝ'F8 f v|SH7&Rتnw{ɶR'1XAl(ܦi\!{5T[Tk1zx!9'%_?Js Cٯ'ps2}V5=^җ'Ӌ"]拶BG@mKWZaZt[aOuyO/.qlJ4gh"(t"*٥mfzqTqw8k17YHN׮RNNbkW>8J%g`'fޮ;Gqik }Ѽ̹d~wkg2LKj)ͨkUPv\" BmE}=xY;q>kV-M3)%AԜKJ|IAnv+ir8YȄeC7wQI1̆o\ʏd^4 }&<*?SK (1@q @|/XA[تK}ꥄ*PrmSD8(/t7Pč K(o,渔Qo] &{0%Xfm9 9?ƉI+$~6YKJ?tg{g@ *dΌ'y^q0-X>אX2$F4sF84aO`6w7¯t rԜUŅs*Omܨf]v&]|}lP^"}7Qvj}oK yP丗OЉkbQ1i gZ "ֻ2ԛ0(ޯ)Dp)tk:iSOZzjفqK=ٖǦ/KهT&q&󐅭lHeˬ] o?hQBs MŒoP a!@Dq[w$lg#M+곎j̊X yWTxFY6!8W?p:NqsK<9d6"&hP7|_fLb LF80~s9ێӰ3D`3= "C-Du0E &-|vcO2W^\!`ܽX{ϖ4UIzf*7fX oMޟZ04@+vfWQ* 5u--_x dO ax=F@_4O"oa,գ=$# ''(@rH zg8'(Vz/&U~ף\G5ksB u!5ɱFD4מN J S`#W\~!`L\r*_Imdr e 7b,F,73Ba$Y ^ Kb;^WL&Wz8!`bTNDu4GI^26b0cwuO`d#0}>Ho 7蠱DRbTah8BpiKs>0yw,~@ lB8yx(H4*Ӗ=' 7#K!ac 6 95_Kqpqk*ǚKB>94ʮ:qlSpL A㩅lLGL  E, -:ܿyds#yLۂ\TG^]|Haj_5O QYbWmt(NǛO)>]9f Ji3ް ʬ"aRwB"OвP \'2zC-۰4}:}7ruٲz?kԨOv[OJhJ2>c1Z)SEB5X)jT(,vjsDԞETaSukC[6ÌW+ANC_aEK%0Z7x5:DOlcEݖ_͑ :=o L^%ΪoGMpsh 1`U{`` |pwbk+`$ AF#F+.Wt i'[KR1pLTCVx>:QMb.4|8Af ,EX[z5UUH@:I噞!a_D%?ZCR!1X@C78)S_6ljDWHIi`%-c 5ϯ>i=6_19㮨1SAeY'k -X썘L1d,~D`!^`]!W+"jPǔxˑ4"aJkqp$ݪ ܱpDZqODEo5 #Kd:֏LJA2n^2הlQŗ.Į8:I _OGZCTX;"3J|+yomk㳹|=vBM#cLO08V!*[JsV{3g(zg.G]UcօGYs3R1 )b: s)wVй}- 3{AS,ea~L*˓-\ <i"bA] ot˖5YssV,TfOO]zOWϟ,n'kVbȒ.w"~k7-9?ShqπEUzP&S¨bZv=&j6m̿Q3p3_Jl&ƥXi&CR{XDC7W|N_'qVdȲ*-D#\EvPLy2!5HNU%$HV bC\giĘW "u%!wo8Wd6h:&%=9kj凶V ᐸ)c\ފtF:,oWhR̒HJ'(EeBq3ڹL䣎<}_SD'0;B,O;;n``m؜S.țȇLM8X^\!,ږ8D.Täwr'H-sn9v9+ϴHuˋ)1bs,fB«.^TrG[5WC@ٽ)"򯇩T>V6ogFr=tP)Ƈq@4H-4|u0԰BTgI9YY;1d W<]&Y"_HB)Y #͠Ը"~Pnj`{2g؜.YsԱPIfyayoz=NSlT`Yu1CQ8i@WMU\h\356H1WJ1 ͪr|u;({@a96MG=VȩG/'m P،5 .R= 8M41_Th:Ϳ'T.QDFir|UWΝfݥ* J.9}J:=EVXA m4k/G9ЧJķZ*Qs #~؃:p8ߎ4[ sU4G Uᱏl9LӪ:Xwj XT$J kv⬣5b^ -+145C5ܡt9@<LHpf n*fTSnaUBb{BRn`el-V%RV7)z&g^ gqijծgX&uoyeb/V,&CQrtQճz~X?S:$Ath޹u3pcڈO2U l}?)Z.&ӗXhA%-OgqAU{46 Һ{6 ^Ģ@=GUow3YQ#Ek$Bݭj.28S퀢 e򉇆D;LHT0 Ja!ݷPĈKGtODWfZW[]XL̈́RC(a[=cJz*+_|Q`nŸfVIV֙'b1}oqrCa 1haY}[iۂO/Ԣ н2 S;C=.P6GG׀38E\K!3V Fmo{Vò)BngO)e>d\whZ%. 11 nf L8,y"F$8[iy qn^kvbDC}%4%0Knˆ W%n0E8@- %EcJ` l@RNN{)i a=WbA.~8b__/x}KC3`¬1.-v\,98J04ACtrMv߹zm452U8WȣfX[J3GΉ[j <Ȯ냣1-.OV WϭoTArɽ#/'-կ3_8t[ĆƍQFq Zգ7=w7>H'X/Jx[Vf؀*&!$\SGڀ@4V=DL]/R ۶`T==K=ZN\&Z;qkI 6yq߂ mPq *93w6Z,5eV:J8w@t@ZbʫhkFy뉼cY9DžL%ק-#Pupޓ*4"ΓT3E֑!U"`LYOA&~}c:[iR|}e@Ϫs"Aw?f(mP4uv"Mpt乫>SB8VϦ&.dQ@f,.$rx7g0>S~ dV6{yYwbCSEÍG*2n.~ 4vo}#_ $3/M_#^}r&aiۂ,19x? T:>YS[sHN)/#Z[&4HrgE kqʞhL̎, BC#JƘ2LBp2 QvHð4nMmȟ/Ҋ0x\xI7Z1"B0_wuC~.66nJkdhN``1ڽ3 R |8/*HU ? )(1+diz9?*UX"h@JR৭G|K@Kfk:4L!,W Tyb=X]\4 S5c$ )"H(ȑ3sɻ'D7=FO8v40uCgX;E͓u șob;Iص.w~dC PǯW$,moWO蘔j%; F%ȕD9`4۷ `[kM|u`PfbRxLX~ Y)ώ] h)[$VQB~#Lů8u+ɖ֨G\Mstr_1aX@(pA xr {#} AvxRE7_!^MP iM7З㳂˒~RR&ډV0M0z qKDӰG[kK#f <,}^V)rHD'KlY@)%>*2 #I, 1^m~Sqw0<#)-6_uHHlDƼbh8H%h/x͈ 8#h`Cl~V:1zB|3֦|+2vkMe~ mۃ oN*܍*@ U7:]n7瓝m]Ac~:Ey&8!% 3n"0zi){9P *sXaO8N*#$q^z *8oŏ:B',f[fpu]>g:p×]WHn_ᣡCʘ^r%rUq5E;ZIt?>qt"$TsvmexA_MdAM^+G$~Ŏ<2mʱ'dWsem"Vb8_Ss|FwȎt׾,ǡƑ{VƵ~*+HKh&>>aO%\7$Oo-Nq'5'u!G?@wzcGeC _ Ϝyl YZ