samba-32bit-3.6.3-141.1e>UAl\6S-hjM?W$jz/F ̀ҿHV\&ۜya >8? d  L '0 Ig}     H%%%(89D:(>5G@HHIPXTY`\|]^bc9deflCsamba-32bit3.6.3141.1A SMB/CIFS File, Print, and Authentication ServerSamba is a suite of programs that allows SMB/CIFS clients to use the Unix file space, printers, and authentication subsystem. The package named samba contains all programs that are needed to act as a server. The binaries expect the configuration file to be found in /etc/samba/smb.conf For a more detailed description of Samba, check the samba-doc package or the Samba.org Web page at http://www.Samba.org/ Please check http://en.openSUSE.org/Samba for general information on Samba as part of SUSE Linux Enterprise or openSUSE products, links to binary packages of the most current Samba version, and a bug reporting how to. Source Timestamp: 3640 Branch: 3.6.3.SLE11_SP2Wwildcard2^openSUSE 11.4openSUSEGPL-3.0+http://bugs.opensuse.orgProductivity/Networking/Sambahttp://www.samba.org/linuxx86_64/sbin/ldconfig^AWW85e5a81efd7f5ada437cdd01a2f85e37rootrootrootrootsamba-3.6.3-141.1.src.rpmpam_smbpass.sosamba-32bitsamba-32bit(x86-32)  @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ /bin/shrpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.11)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.2.3)libc.so.6(GLIBC_2.2.4)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.5)libc.so.6(GLIBC_2.8)libdl.so.2libdl.so.2(GLIBC_2.0)libdl.so.2(GLIBC_2.1)liblber-2.4.so.2libldap-2.4.so.2libnscd.so.1libnscd.so.1(LIBNSCD_1.0)libnsl.so.1libnsl.so.1(GLIBC_2.0)libpam.so.0libpam.so.0(LIBPAM_1.0)libpam.so.0(LIBPAM_EXTENSION_1.0)libresolv.so.2librt.so.1librt.so.1(GLIBC_2.2)libtalloc.so.2libtdb.so.1libtevent.so.0libwbclient.so.0rpmlib(PayloadIsLzma)4.0-13.0.4-14.4.6-14.8.0W @S@RpRg@R^R].@R].@R>QY@Q@QQɆ@Q@@QKQ(@Q@QQ>@Q>@Qzl@Qzl@Qo@QkQ\QAQ+R@Q@QQ@QEQ \QQPP9@PP@P+PP@PBPBPPP@P*P6@PoPoPoP{@PWPQPP@OjOjO O O@O!O@O@OOO@O OoOc+@OaO`@OKp@OB5O>A@Oanswers[]; (bso#9402).- s4:torture/smb2: improve the smb2.create.blob tes; (bso#9209). - lib/krb5_wrap: request enc_types in the correct order; (bso#9272). - Fix net ads join message for the dns domain; (bso#9326). - docs-xml: fix use of tag; (bso#9345). - s3-aio_pthread: Optimize aio_pthread_handle_completion; (bso#9359). - s3:winbind: Failover if netlogon pipe is not available; (bso#9386).- Ensure adding the winbind group never can fail.- Create ntadmin group only if it doesn't yet exist.- quota: Don't force the block size to 512; (bso#3272). - Fix poll replacement to become a msleep replacement; (bso#8107). - Fix wrong test == syntax in configure; (bso#8146). - Fix --with(out)-sendfile-support option handling in autoconf; (bso#8344). - Fix builtin forms order to match Windows again; (bso#8632). - Fix RAW printing for normal users; (bso#8769); (bnc#790741). - Initialise ticket to ensure we do not invalid memory; (bso#8788). - Fix 'net rpc share allowedusers' to work with 2008r2; (bso#8966). - Fix crash on null pam change pw response; (bso#9013). - Connection to outbound trusted domain goes offline; (bso#9016). - Increase debug level for info that the db is empty; (bso#9112). - 'smbclient' can't connect to a Windows 7 server using NTLMv2; (bso#9117). - Winbind can't fetch user or group info from AD via LDAP; (bso#9147). - Open printers with the right access mask; (bso#9154). - Fix makerpms.sh on RHEL; (bso#9165). - Remove non-existent option '-Y' from winbindd manpage; (bso#9171). - Add quota support for gfs2; (bso#9172). - Make SMB2 compound request create/delete_on_close/close work as Windows; (bso#9173). - Empty SPNEGO packet can cause smbd to crash; (bso#9174). - pam_winbind: Match more return codes when wbcGetPwnam has failed; (bso#9177). - Fix crash bug in idmap_hash; (bso#9188); (bnc#788159). - SMB2 Create doesn't return correct MAX ACCESS access mask in blob; (bso#9189). - Fix service control for non-internal services; (bso#9192). - Don't take 'state->te' as indication for "was_deferred"; (bso#9196). - Parse of invalid SMB2 create blob can cause smbd crash; (bso#9209). - Bad ASN.1 NegTokenInit packet can cause invalid free; (bso#9213). - Fix segfault in smbd if user specified ports out for range; (bso#9218). - Signing cannot be disabled for SMB2 by design, so fix the documentation instead; (bso#9222). - Fix NT_STATUS_IO_TIMEOUT during slow import of printers into registry; (bso#9231). - When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries; (bso#9236). - lib-addns: ensure that allocated buffer are pre set to 0; (bso#9259). - Make tdb robust against shrinking tdbs and improper CLEAR_IF_FIRST restart; (bso#9268). - Add support for reloading systemd services; (bso#9280).- Warn via the smbd log if AppArmor and "wide links" are in use; (bnc#783719).- Backport FSCTL codes and fix segfault in smbstatus from master; (bso#9058). - Fix bad call to memcpy source3/registry/regfio.c; (bso#9065). - "Domain Users" incorrectly added as additional group on domain members; (bso#9066). - Use correct RID for "Domain Guests" primary group; (bso#9067). - Fix crash bug in smbd caused by a blocking lock followed by close; (bso#9084). - Fix smbclient/tarmode panic when connecting to Windows 2000 clients; (bso#9088). - Fix refreshing of Kerberos tickets in Winbind; (bso#9098). - Fix identification of idle clients in Winbind to avoid crashes and NDR parsing errors; (bso#9104). - Fix compilation with newer MIT Kerberos which hides internal symbols; (bso#9111). - Fix flooding the logs with records we don't find in pcap; (bso#9112). - Initialize the print backend after we setup winreg; (bso#9122). - Fix lprng job tracking errors; (bso#9123). - Fix setting of "inherited" bit on inherited ACE's; (bso#9124). - Fix Winbind panic if we couldn't find the domain; (bso#9135). - Make 'smbclient allinfo' show the snapshot list; (bso#9137). - Fix nfs quota support with Linux nfs4 mounts; (bso#9144). - Valid open requests can cause smbd assert due to incorrect oplock handling on delete requests; (bso#9150).- NMB registration for a duplicate workstation fails with registration refuse; (bso#9085); (bnc#770056).- Correct documentation of "case sensitive"; (bso#8552). - Printing fails in function cups_job_submit; (bso#8719). - Fix kernel oplocks when uid(file) != uid(process); (bso#8974). - Send correct responses to NT Transact Secondary when no data and no params for the Trans2 calls are set; (bso#8989). - Fix build without ads support; (bso#8996). - Don't turn negative cache entries into valid idmappings; (bso#9002). - Fix posix acl on gpfs; (bso#9003). - Make vfs_gpfs less verbose in get/set_xattr functions; (bso#9022). - Fix migrating printers while upgrading from 3.5.x; (bso#9026). - Fix typo in set_re_uid() call when USE_SETRESUID selected in configure; (bso#9034). - Using asynchronous IO with SMB2 can return NT_STATUS_FILE_CLOSED in error instead ofNT_STATUS_FILE_LOCK_CONFLICT; (bso#9040). - Fix resolving our own "Domain Local" groups; (bso#9052); (bnc#779269). - Fix build against CUPS 1.6; (bso#9055). - Fix bugs in SMB2 credit handling code; (bso#9057). - rpcclient: Fix bad call to data_blob_const; (bso#9062).- BuildRequire gcc, make, and patch; (bnc#771516).- ndr: fix push/pull DATA_BLOB with NDR_NOALIGN; (bso#9026); (bnc#770262).- Fix shell syntax in dhcpcd hook script; (bnc#769957).- resolve_ads() code can return zero addresses and miss valid DC IP addresses; (bso#8910). - Can't join XP Pro workstations to 3.6.1 DC; (bso#8373); (bnc#787983). - winbind can hang as nbt_getdc() has no timeout; (bso#8953). - Fix crash bug in dns_create_probe when dns_create_update fails; (bso#8627) - s3-pid: Catch with pid filename's change when config file is not smb.conf; (bso#8714). - Possible memory leaks in the main Samba process; (bso#8970). - s3: Fix uninitialized memory read in talloc_free(); (bnc#764577). - Treat exit_server_cleanly() as a "clean" shutdown; (bso#8971). - Avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute(); (bso#8988). - Winzip occasionally can not read files out of an open winzip dialog; (bso#8311). - s3-winbindd: call dump_core_setup after command line option has been parsed; (bso#8975). - Directory group write permission bit is set if unix extensions are enabled; (bso#8972). - s3: remove dependency on automake for "make everything"; (bso#8978). - sd_has_inheritable_components segfaults on an SD that se_access_check accepts; (bso#8811). - smbclient's tarmode insists on listing excluded directories; (bso#8922). - Notify code can miss a ChDir; (bso#8998). - s3:smbd: add a fsp_persistent_id() function; (bso#8995).- s3: Fix a segfault with debug level 3 on Solaris; (bso#8861). - s3: wbinfo --lookup-sids "" crashes winbind; (bso#8904). - smbd crashes when deleting directory and veto files are enabled; (bso#8837). - winbind_krb5_locator only returns one IP address; (bso#8897). - Wrong assertion/comparison: Compare value not pointer; (bso#8859). - Inconsistent (with manpage) command-line switch for "help" in smbtree; (bso#8831). - Fix incorrect debug statement. - Setting traverse rights fails to enable directory traversal when acl_xattr in use; (bso#8857). - Syslog broken owing to mistyping of debug_settings.syslog; (bso#8877). - s3/ldap: remove outdated netscape ds 5 schema file; (bso#8869). - s3-docs: fixes several typos; (bso#7938). - s3-VFS: Fix building out-of-tree modules; (bso#8822). - s3-docs: Add hint that setting "profile acls = yes" on normal shares can cause trouble; (bso#7930). - s3-pam_winbind: Fix the build with a newer iniparser library; (bso#8915). - Avoid null dereference in initialize_password_db(); (bso#8920). - s3:registry: implement values_need_update and subkeys_need_update in the smbconf backend. - s3:registry:reg_api: fix reg_queryvalue to not fail when values are modified while it runs. - s4:torture:rpc:spoolss: also initialize driverName before checking it in test_PrinterData_DsSpooler(). - s3:registry: multiple cleanups, fixes, and optimisations. - s3:auth/server_info: the primary rid should be in the groups rid array; (bso#8798). - s3-printing: Add new printers to registry; (bso#8554); (bso#8612); (bso#8748). - Fix the overwriting of errno before use in a DEBUG statement and use the return value from store_acl_blob_fsp rather than ignoring it; (bso#8945). - s3-auth: Don't lookup the system user in pdb; (bso#8944). - s3-passdb: Fix negative SID->uid/gid cache handling; (bso#8952). - Fix typo in pam_winbindd code; (bso#8957). - Fix remove_duplicate_addrs2 previously it could leave zero addresses in the list; (bso#8910). - Slow but responsive DC can lock up winbindd; (bso#8943). - Broken processing of %U with vfs_full_audit when force user is set; (bso#8882).- Attempt to use samlogon validation level 6; (bso#7945); (bnc#741623).- Add PreReq /etc/init.d/nscd to the winbind package; (bnc#759731).- Recover from ncacn_ip_tcp ACCESS_DENIED/SEC_PKG_ERROR lsa errors; (bso#7944); (bnc#755663). - Fix lsa_LookupSids3 and lsa_LookupNames4 arguments.- docs-xml: fix default name resolve order; (bso#7564). - s3-aio-fork: Fix a segfault in vfs_aio_fork; (bso#8836). - docs: remove whitespace in example samba.ldif; (bso#8789). - s3-smbd: move print_backend_init() behind init_system_info(); (bso#8845); (bnc#730769). - s3-docs: Prepend '/' to filename argument; (bso#8826).- Restrict self granting privileges where security=ads for Samba post-3.3.16; CVE-2012-2111; (bnc#757576).- Remove all precompiled idl output to ensure any pidl changes take effect; (bnc#757080).- Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe- cution as the "root" user; PIDL based autogenerated code allows overwriting beyond of allocated array; CVE-2012-1182; (bso#8815); (bnc#752797).- s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys; (bso#8599). - Correctly handle DENY ACEs when privileges apply; (bso#8797).- s3:smb2_server: fix a logic error, we should sign non guest sessions; (bso8749). - Allow vfs_aio_pthread to build as a static module; (bso#8723). - s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for persistent dbs; (#bso8527). - s3: segfault in dom_sid_compare(bso#8567). - Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER; (bso#8768). - s3-winbindd: Close netlogon connection if the status returned by the NetrSamLogonEx call is timeout in the pam_auth_crap path; (bso#8771). - s3-winbindd: set the can_do_validation6 also for trusted domain; (bso#8599). - Fix problem when calculating the share security mask, take priviliges into account for the connecting user; (bso#8784).- Fix crash in dcerpc_lsa_lookup_sids_noalloc() with over 1000 groups; (bso#8807); (bnc#751454).- Remove obsoleted Authors lines from spec file for post-11.2 systems.- Make ldapsmb build with Fedora 15 and 16; (bso#8783). - BuildRequire libuuid-devel for post-11.0 and other systems. - Define missing python macros for non SUSE systems. - PreReq to fillup_prereq and insserv_prereq only on SUSE systems. - Always use cifstab instead of smbfstab on non SUSE systems.- Ensure AndX offsets are increasing strictly monotonically in pre-3.4 versions; CVE-2012-0870; (bnc#747934).- Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY; (bso#8760); (bnc#741854).- s3-printing: fix crash in printer_list_set_printer(); (bso#8762); (bnc#746825).- s3:winbindd fix a return code check; (bso#8406).- s3: Add rmdir operation to streams_depot; (bso#8733).- s3:smbd:smb2: fix an assignment-instead-of-check bug conn_snum_used(); (bso#8738); CVE-2013-0454; (bnc#811975).- s3:auth: fill the sids array of the info3 in wbcAuthUserInfo_to_netr_SamInfo3(); (bso#8739).- s3:client: ignore SMBecho errors (the server may not support it); (bso#8139).- Be more strict when using PAM_AUTH API from winbind if Kerberos auth is enabled and don't unintentionally use a bogus domain name; (bso#8734).- smbclient fails with posix large reads; (bso#8727).- Use the smbfs init script on versions pre-11.3, or cifs in later versions; (bnc#744614).- s3: Compile IDL files in autogen, some configure tests need this.- Fixes various deadlocks in if-up.d / if-down.d when running under systemd; (bnc#732395).- Update to 3.6.3. + Fix memory leak in parent smbd on connection; CVE-2012-0817; (bso#8724); (bnc#743986).- Use spdx.org compliant license names for all packages.- Update to 3.6.2. + Make Winbind receive user/group information (bug #8371). + Several SMB2 fixes. + Fix a crash bug in the spoolss code. + Add new contributing FAQ announcing acceptance of corporate (C). + DeletePrinterDriverEx deletes files in use; (bso#4942); (bnc#742504). + Fix cli_write_and_x() against OS/2 print shares; (bso#5326). + Fix 'smbclient tar' for files greater than 8GB on BE machines; (bso#563); (bnc#726145). + Remove pointless use_memory_krb5_ccache; (bso#7465). + Fix perl path; (bso#8176). + Grant credits in async interim responses (SMB2); (bso#8357). + Make Winbind receive user/group information; (bso#8371). + Fix Windows XP clients crashing smbd process every once in a while; (bso#8384); (bnc#731571). + Make VFS op "streaminfo" stackable; (bso#8419). + Add an allocation pool to idmap_autorid; (bso#8444). + Fix SEGFAULT from net registry export on not zero terminated REG_SZ values; (bso#8528). + Make DSO_EXPORTS_CMD more portable; (bso#8531). + readlink() on Linux clients fails if the symlink target is outside of the share; (bso#8541). + smbclient posix_open command fails to return correct info on open file; (bso#8542). + winbind_samlogon_retry_loop ignores logon_parameters flags; (bso#8548). + Fix setting the machine account password; (bso#8550). + Make SMB2 handle compound request headers in the same way as Windows; (bso#8560). + Password change settings not fully observed; (bso#8561). + Fix double free error in talloc; (bso#8562). + Fix alignment in the non-extended-security negprot; (bso#8573). + Add systemd service files; (bso#8575). + Add systemd service files; (bso#8575). + smb2_flush: Don't send uninitialized memory; (bso#8579). + Enable inotify if sys or kernel inotify is available; (bso#8580). + Increase a debug level; (bso#8585). + libsmb: Only align unicode pipe_name; (bso#8586). + Fix marshalling of samr_ChangePasswordUser3; (bso#8591). + Don't limit the number of open dptrs for SMB2; (bso#8592). + Fix a crash bug in cldap_socket_recv_dgram(); (bso#8593). + Make cldap work over IPv6; (bso#8600). + Fix intermittent print job failures caused by character conversion errors; (bso#8606). + Improve configure.in so it can be used outside the Samba source tree; (bso#8607). + Winbind: Don't fail on users without a uid; (bso#8608). + Ensure we correctly calculate reply credits over all returned SMB2 replies; (bso#8614). + Fix migrate printer code; (bso#8618). + Fix crash bug when trying to browse Samba printers; (bso#8623). + libsmb: Don't duplicate Kerberos service tickets; (bso#8628). + POSIX ACE x permission becomes rx following mapping to and from a DACL; (bso#8631). + When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field; (bso#8636). + Fix the vfs_commit module; (bso#8639). + Add an update function for Winbind cache; (bso#8643). + vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL; (bso#8644). + Document the "ignore system acls" option of vfs_acl_xattr and vfs_acl_tdb vfs modules; (bso#8652). + Fix deleting a symlink if the symlink target is outside of the share; (bso#8663). + Fix renaming a symlink if the symlink target is outside of the share; (bso#8664). + Fix NT ACL issue; (bso#8673). + Fix buffer overflow issue with AES encryption in samba traffic analyzer; (bso#8674). + Fix Winbind segfault if we can't map the last user; (bso#8678). + recvfile code path using splice() on Linux leaves data in the pipe on short write; (bso#8679). + Try ctdbd_init_connection() as root; (bso#8684). + Packet validation checks can be done before length validation causing uninitialized memory read; (bso#8686). + Fix typo in 'net memberships' usage; (bso#8687). + libads: Fix malloc/talloc mismatch in ads_keytab_verify_ticket(); (bso#8692). + Make DeletePrinterDriverEx remove printer driver files; (bso#8697) (bnc#740810). + Fix major leak with SMB2 in connections.tdb; (bso#8710).- s3-spoolss: Pass the right pointer type; (bso#4942); (bnc#742504).- Use simplified smb signing infrastructure; (bnc#741623).- Use correct license, LGPLv3+ for libwbclient packages.- When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field; (bso#8636).- Fix incorrect types in the full_audit VFS module. Add null terminators to audit log enums; (bnc#742885).- Prefix print$ path on driver file deletion; (bso#8697); (bnc#740810). - Fix printer_driver_files_in_use() call ordering; (bso#4942); (bnc#742504).- Buffer overflow issue with AES encryption in samba traffic analyzer; (bso#8674). - NT ACL issue; (bso#8673). - Deleting a symlink fails if the symlink target is outside of the share; (bso#8663). - connections.tdb - major leak with SMB2; (bso#8710).- Renaming a symlink fails if the symlink target is outside of the share; (bso#8664).- Intermittent print job failures caused by character conversion errors; (bso#8606). - ads_keytab_verify_ticket mixes talloc allocation with malloc free; (bso#8692). - libcli/cldap: fix a crash bug in cldap_socket_recv_dgram(); (bso#8593). - s3:lib/ctdbd_conn: try ctdbd_init_connection() as root; (bso#8684). - s3-printing: fix migrate printer code; (bso#8618). - Packet validation checks can be done before length validation causing uninitialized memory read; (bso#8686).- net memberships usage info was wrong; (bso#8687). - s3-libsmb: Don't duplicate kerberos service tickets; (bso#8628). - Recvfile code path using splice() on Linux leaves data in the pipe on short write; (bso#8679). - s3-winbind: Fix segfault if we can't map the last user; (bso#8678). - vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL; (bso#8644). - s3/doc: document the ignore system acls option of vfs_acl_xattr and vfs_acl_tdb; (bso#8652). - Winbind can't receive any user/group information; (bso#8371). - s3-winbind: Add an update function for winbind cache; (bso#8643). - s3: Attempt to fix the vfs_commit module. - POSIX ACE x permission becomes rx following mapping to and from a DACL; (#bso#8631). - s3:libsmb: only align unicode pipe_name; (bso#8586). - s3-winbind: Don't fail on users without a uid; (bso#8608). - Crash when trying to browse samba printers; (bso#8623). - talloc: double free error; (bso#8562). - cldap doesn't work over ipv6; (bso#8600). - s3:libsmb: fix cli_write_and_x() against OS/2 print shares; (bso#5326). - SMB2: not granting credits for all requests in a compound request; (bso#8614). - smb2_flush sends uninitialized memory; (bso#8579). - Password change settings not fully observed; (bso#8561). - s3:smb2_server: grant credits in async interim responses; (bso#8357). - s3:smbd: don't limit the number of open dptrs for smb2; (bso#8592). - samr_ChangePasswordUser3 IDL incorrect; (bso#8591). - idmap_autorid does not have allocation pool; (bso#8444). - Add systemd service files. - s3:libsmb: the workgroup in the non-extended-security negprot is not aligned; (bso#8573). - s3-build: Fix inotify detection; (bso#8580). - SMB2 doesn't handle compound request headers in the same way as Windows; (#bso8560). - Disconnecting clients swamp the logs; (bso#8585). - s3-netlogon: Fix setting the machinge account password; (bso#8550). - winbind_samlogon_retry_loop ignores logon_parameters flags; (#bso8548). - smbclient posix_open command fails to return correct info on open file; (bso#8542). - readlink() on Linux clients fails if the symlink target is outside of the share; (bso#8541). - s3-netapi: remove pointless use_memory_krb5_ccache; (bso#7465). - s3:Makefile: make DSO_EXPORTS_CMD more portable; (bso#8531). - s3:registry: fix the test for a REG_SZ blob possibly being a zero terminated ucs2 string; (bso#8528). - Make VFS op "streaminfo" stackable; (bso#8419).- Fix incorrect perfcount array length calculations; (bnc#739258).- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.- Remove call to suse_update_config macro for post-11.4 systems.- Use samba.org for the ldapsmb source location.- Fixing libsmbsharemode dependency on ldap and krb5 libs in Makefile; (bnc #729516).- Do not map POSIX execute permission to Windows FILE_READ_ATTRIBUTES; (bso#8631); (bnc#732572).- Add ldap to Should-Start and Stop of the smb init script; (bnc#730046).- Fix smbd srv_spoolss_replycloseprinter() segfault; (bso#8384); (bnc#731571).- Fix pam_winbind.so segfault in pam_sm_authenticate(); (bso#8564).- Fix smbclient >8GB tars on big endian machines; (bso#563); (bnc#726145).- Fix typo in net ads join output; (bnc#713135).- Ignore a potentially missing AppArmor snippet helper script; (bnc#725256).- Update to 3.6.1. + Fix smbd crashes triggered by Windows XP clients; (bso#8384). + Fix a Winbind race leading to 100% CPU load; (bso#8409). + Several SMB2 fixes. + The VFS ACL modules are no longer experimental but production-ready. + Fix 'net ads join -k' when KRB5CCNAME is not set; (bso#7465). + smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509). + Return error of cli_push when 'put - /some/file' is used; (bso#7551). + Fix usage of cli_errstr(); (bso#7864). + Fix 'widelinks' regression; (bso#8229). + Empty notify servername; (bso#8236). + Add man vfs_aio_fork; (bso#8256). + smb2: smbd logs "Invalid SMB packet: first request: 0x0008" and crashes; (bso#8334). + Add a fallback for missing open&x support in MAC OS/X Lion; (bso#8338). + While migrating forms, don't fail if the form already exists; (bso#8351). + OS/2 sends an unexpected write&x/read&x chain; (bso#8360). + Fix build of vfs_prealloc on SLES8; (bso#8363). + Fix the build of gpfs.c on RHEL 6.0 with gpfs 3.4.0-4; (bso#8364). + Fix the fallback to the deprecated spelling idmap:script; (bso#8368). + Fix vfs_chown_fsp; (bso#8370). + Fix smbd crashes triggered by Windows XP clients; (bso#8384). + Fix smbclient access to NT4 shares; (bso#8385). + Optimize serverid_exists() for Solaris; (bso#8395). + registry/reg_format.c must include includes.h; (bso#8401). + SMB2 server can return requests out-of-order when processing a compound request; (bso#8407). + Fix a Winbind race leading to 100% CPU load; (bso#8409). + Fix "saving as" of MS Office 2007 (Word) documents on Samba shares with SMB2; (bso#8412). + Fix 'getent group' if trusted domains are not reachable; (bso#8420). + Fix infinite loop in ACL module code; (bso#8422). + Fix wrong reply to DHnC (durable handle reconnect); (bso#8428). + Compound SMB2 requests on an IPC connection can corrupt the reply stream; (bso#8429). + Fix segfault in iconv.c; (bso#8433). + NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames; (bso#8442). + Be smarter about setting default permissions when a ACL_USER_OBJ isn't given; (bso#8443). + Check the wct of the incoming SMBnegprot responses; (bso#8452). + Fix smbclient segfaults when dialect option -m is used for legacy dialects; (bso#8453). + Fix uninitialized memory problem in group_sids_to_info3; (bso#8455). + Samba PDC is looking up only primary user group; (bso#8455). + IE9 on Windows 7 cannot download files to samba 3.5.11 share; (bso#8458). + smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; (bso#8473). + SMB2 create doesn't cope with an Apple client using NULL blob in create; (bso#8474). + Don't call smbd_terminate_connection in smb2_validate_message_id(); (bso#8476). + Samba asserts when SMB2 client breaks the crediting rules; (bso#8476). + Map to guest can return uninitialized blob of data; (bso#8477). + acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480). + DFS breaks zip file extracting unless "follow symlinks = no" set; (bso#8493). + Remove "experimental" label on VFS ACL modules; (bso#8494). + SMB2_OP_CANCEL requests don't have to be signed; (bso#8503). + smbd doesn't correctly honor the "force create mode" bits from a cifsfs create; (bso#8507). + Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509). + Disallow "." in can_set_delete_on_close(); (bso#8515). + SMB2 create call returns incorrect file allocation size; (bso#8518). + Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520). + Winbind cache timeout expiry test was reversed; (bso#8521).- s3/doc: add man page for aio_fork vfs module.- Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).- s3: Samba PDC is looking up only primary user group; (bso#8455).- Add script to create or update an AppArmor sniplet with permissions for all Samba shares; (bnc#688040).- Add "ldapsam:login cache" parameter to allow explicit disabling of the login cache; (bnc#723261).- Retain the smbd startproc return value for correct startup status reporting. unset was incorrectly being called prior to rc_status; (bnc#723724).- Prevent deadlock in systemd triggered by if-down.d handler on shutdown; (bnc#721598).- smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; changed defaults and documentation (bso8473).- Empty CIFS share can be blocked for other clients by deleting it via empty path (DELETE_PENDING until the last client); (bso#8515).- winbindd cache timeout expiry test was reversed; (bso#8521).- Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520).- s3:smb2_create: fix allocation size return value when opening existing files; (bso#8518).- SMB2 create doesn't cope with an Apple client using NULL blob in create; (bso#8474).- NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames; (bso#8442).- s3-docs: Fix bug (bso#7908) and typo.- Return error of cli_push when 'put - /some/file' is used; (bso#7551).- Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509).- smbd doesn't correctly honor the "force create mode" bits from a cifsfs create; (bso#8507).- Default user entry is set to minimal permissions on incoming ACL change with no user specified; (bso#8443).- smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).- Handle the SECINFO_LABEL flag in the same was as Win2k3; enable Microsoft Internet Explorer 9 on Windows 7 to download files; (bso#8458).- DFS breaks zip file extracting unless "follow symlinks = no" set; (bso#8493).- s3-docs: Fix typos.- s3:smb2_server: SMB2_OP_CANCEL requests don't have to be signed; (bso#8503).- Remove "experimental" label on VFS ACL modules; (bso#8494).- acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).- s3-smbd: asserts when SMB2 client breaks the crediting rules; (bso#8476).- s3-libnet: allow to use default krb5 ccache in libnet_Join/libnet_Unjoin; (bso#7465).- smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; (bso#8473).- s3-netapi: allow to use default krb5 credential cache for libnetapi users.- s3-docs: document -k switch in net manpage.- Map to guest can return uninitialized blob of data; (bso#8477).- s3-registry: registry/reg_format.c must include includes.h; (bso#8401).- smbclient segfaults when option -m is used for legacy dialects; (bso#8453).- Fix 'widelinks' regression intro'd in 3.2; (bso#8229).- Compound SMB2 requests on an IPC connection can corrupt the reply stream; (bso#8429).- s3-spoolss: Fix bug forms migration; (bso#8351).- s3:libsmb: check the wct of the incoming SMBnegprot responses; (bso#8452).- s3: Do not fork the echo handler for smb2; (bso#8334).- s3-spoolss: Fix bug empty notify servername; (bso#8236).- SMB2 server can return requests out-of-order when processing a compound request; (bso#8407).- Remove smb child crash fix. The issue had been fixed upstream differently.- BuildRequire ctdb-devel version greater than 1.0.105 for post-10.0 systems.- Fix samba duplicates file content on appending. Move posix case semantics out from under the VFS; (bso#6898); (bnc#681208).- Make winbind child reconnect when remote end has closed, fix failing sudo; (bso#7295); (bnc#569721).- Spec file cleanup as suggested by the spec-cleaner tool. + Make all BuildRequires, PreReq, and Provides a separate line. + Use %{buildroot} instead of ${RPM_BUILD_ROOT}. + Use straight commands instead of macros (make, install). + Use -p in post and postun if we only call one command. + Use %{_localstatedir} instead of %{_var} in the filelist. + Remove superfluous AutoReqProv on lines.- Remove %release from all Provides.- Fix segfault in iconv.c which caused a null pointer dereference; (bso#8433).- Use /var/run for the cifs state file in the init script too; (bnc#710304).- Microsoft Word from Microsoft Office 2007 fails to save as on a share with SMB2; (bso#8412).- Use sys_write and sys_read in fork_domain_child to fix a winbind race leading to 100% CPU usage; (bso#8409).- Fix wrong reply to smb2 durable handle reconnect (DHnC) request; (bso#8428).- Fix infinite loop in ACL module code; (bso#8422).- Fix getent group if trusted domains are not reachable; (bso#8420).- smbclient can't access a NT4 share since 3.6.0; (bso#8385).- Optimize serverid_exists() for Solaris; (bso#8395).- talloc: + check block count after references test. + added test suite for talloc_free_children(). + license info erratum in the manpage. + fix typos and better differentiation between versions 1 and 2. + preserve context name on talloc_free_children(). + ensure the sibling linked list remains valid during a free.- vfs_chown_fsp returned in the wrong directory; (bso#8370).- Remove irritating "." targets when recent system libs exist; (bso#8369).- Correctly initialize "idmap config * : script" with NULL; (bso#8368).- Add missing include to suppress compiler warnings; (bso#8365).- Point the chain offset beyond the current request; (bso#8360).- Fix gpfs vfs module build; (bso#8364).- Make vfs_prealloc even build on older systems; (bso#8363).- Do central cli_set_error and return the actual NTSTATUS; (bso#7864).- Add a fallback for missing open&x support in OS/X Lion; (bso#8338).- Update to 3.6.0. + BUG 7462: Make SA_RESETHAND conditional on its existance. + BUG 8303: db_ctdb_send_schedule_for_deletion() is not defined. + BUG 8324: smbclient cannot list directories from a big-endian machine. + BUG 8326: WinXP cannot join a Samba3 domain with a 'even' hostname. + BUG 8327: Fix the reload of the configuration, also reload activated registry shares. + BUG 8328: Cleanup of idmap_tdb2 code. + BUG 8330: Fix NFSv4 ACL merging logic. + BUG 8335: File copy aborts with smb2_validate_message_id: bad message_id. + BUG 8341: Fix segfault in libsmbclient. + BUG 8343: Fix SMB2 crash reading with aio_fork beyond the end of file. + BUG 8347: Fix regression for HP-UX, AIX and OSF. + BUG 8357: Make sure we grant credits on async read/write operations. + BUG 8358: Fix a bug in run_poll_events(). + BUG 8362: Fix build issue on old glibc systems.- Remove references to disabled vscan build.- Add missing define, includes, and initialization to get_printing_ticket.- Use /var/run for the cifs state file; (bnc#710304).- Fix #ifdef CTDB_CONTROL_SCHEDULE_FOR_DELETION issue; (bso#8303).- File copy aborts with smb2_validate_message_id: bad message_id; (bso#8335).- Fix reload of the configuration and also reload activated registry shares; (bso#8327).- WinXP cannot join a Samba3 domain with a 'even' hostname; (bso#8326).- smbclient cannot list directories from a big-endian machine; (bso#8324).- Update to 3.6.0rc3. + BUG 7841: Explicitly pass domain_sid to wbint_LookupRids(). + BUG 7888: Deal with buggy 3.0 based PDCs. + BUG 8083: Fix "inherit owner = yes" with vfs_acl_xattr or vfs_acl_tdb module. + BUG 8102: Do not allow to change file ACLs from normal domusers. + BUG 8102: Do not allow to change file ACLs from normal domusers. + BUG 8193: Add new command 'enumerate_recursive'. + BUG 8195: Make rpc client code working against NT4 servers. + BUG 8211: Fix "inherit owner = yes" when "inherit permissions = yes" is set. + BUG 8213: Fixes in idmap_autorid. + BUG 8214: Fix smbd crash on printer driver upgrade. + BUG 8215: Fix Winbind unix username lookup. + BUG 8216: Make Winbind returning correct results with 'sids2xids'. + BUG 8217: Do not stat-check the share path in 'net conf addshare'. + BUG 8219: Fix SMB Panic from Windows 7 client. + BUG 8224: Fix the build on FreeBSD. + BUG 8226: Use c99 initializers which are supported by old gcc 2.95 compilers. + BUG 8230: Move .nmbd socket directory to non-hidden name PREFIX/var/nmbd. + BUG 8231: Fix crash bug in 'net cache get'. + BUG 8235: Fix smbd crash on startup caused by migrate_printer(). + BUG 8240: Fix Valgrind warnings in winreg/spoolss code. + BUG 8244: Fix copying files larger than 2 GB to a Samba share. + BUG 8247: Fix Coverity ID 2582: FORWARD_NULL. + BUG 8253: Fix Winbind panic if verify_idpool() fails. + BUG 8254: Fix "acl check permissions = no". + BUG 8260: Fix DCERPC responses with fragments larger than 1024 bytes. + BUG 8262: Fix build of vfs_commit. + BUG 8263: Fix build with --with-fake-kaserver or --with-vfs-afsacl. + BUG 8264: Fix Valgrind bugs in svcctl. + BUG 8276: Close all sockets attached to a subnet in close_subnet(). + BUG 8278: Fix smbd panic when CTDB is unhealthy. + BUG 8281: Fix build of examples/VFS/*. + BUG 8286: Fix smbd crash on premature end of smb2 conn. + BUG 8292: Fix a major architectural flaw in the SMB2 server code. + BUG 8293: Fix log file rotating in SMB2. + BUG 8304: Fix uninitialized variable in error path. + BUG 8305: Fix segfault in nmbd when using 'smbtree ...'.. + BUG 8307: brl_close_fnum does not call SMB_VFS_BRL_UNLOCK_WINDOWS on all locks. + BUG 8310: toupper_ascii() is broken on big-endian systems. + BUG 8314: Fix smbd crash with unknown user. + Mark 'time offset' parameter as deprecated.- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site scripting vulnerability; CVE-2011-2694; (bso#8289); (bnc#708503).- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site request forgery; CVE-2011-2522; (bso#8290); (bnc#705241).- Fixed the DFS referral response for msdfs root; (bnc#703655).- Fix CUPS print job IDs; (bso#7288); (bnc#701257).- Make use of the actual library version as part of the package name on post-11.3 systems only.- Fix winbind internal error; (bso#7636); (bnc#659424).- Improve ctdb vacuuming performance with use of SCHEDULE_FOR_DELETION; (bnc#705170).- Specify nmbdsocketdir at configure time; (bnc#700953).- Build the tdb, talloc, and tevent libraries ahead of anything else.- Update to 3.6.0rc2. + BUG 6911: Fix Kerberos authentication from Vista to Samba. + BUG 8166: Don't lockout users when offline. + BUG 8200: Add support for multiple writeable ldap idmap domains. + BUG 8148: Default to protocol version 2 for SMB Traffic Analyzer. + BUG 7054: Fix X account flag when "pwdlastset" is "0". + BUG 8144: Fix setting timestamp when touching files with CIFS clients. + BUG 8153: Fix setting up getaddrinfo on IPv6-only machines. + BUG 8156: Fix 'net ads join' using the user's Kerberos ticket. + BUG 8157: Fix parsing a cups printcap file. + BUG 8175: Fix smbd deadlock. + BUG 8189: Support shadow copy display over SMB2. + BUG 8197: Winbind does not properly detect when a DC connection is dead. + BUG 8203: Winbind needs to reset the DC connection if an RPC times out.- Make cupsaddsmb fill printers location; (bso#8132); (bnc#698209).- Add "winbind max clients" parameter to remove 200-client limit; (bnc#697461).- Disable logon cache for password lockout consistency when running in a cluster; (bnc#694836).- Fix logon of AD users with many group memberships; (bso#6911); (bnc#657026).- Don't lockout users while offline; (bso#8166); (bnc#692607).- Update to 3.6.0rc1. + BUG 8111: CIFS VFS: Fix unexpected error on SMB posix open. + BUG 8112: POSIX extension opens of a directory are denied with EISDIR. + BUG 8132: Fix filling printers location field when using cups. + Remove fstrings from client struct. + BUGFIX when converting from safe_strcpy to strlcpy. + Fix off-by-one calculations with strlcpy. + Ensure we always write the correct incoming mid into the share mode table entries. + Fix the SMB2 oplock showstopper. + Convert user-specified domain to uppercase in libsmb. + Fix Coverity CID #2302: FORWARD_NULL. + Fix cups_pull_comment_location(). + Fix double free of cups request. + Make cups_pull_comment_location() work again. + Fix potential crash bug in display_print_driver3(). + Properly clean up in pthreadpool_init in case of failure. + Make plaintext session setup async. + Reduce fd load in Winbind children. + Avoid a potential 100% CPU loop in Winbind. + Tune broadcast namequeries for unique names. + Properly deal with exited winbind children. + Fix dup_smb2_vec3. + Fix return check in nss_wins.- Fix to renew the kerberos ticket in samba after expiry; (bnc#669949).- Fix a 100% CPU loop when ctdbd dies during a traverse; (bnc#693945).- Make dhcpcd hook BOOTPROTO check cover dhcp6 too; (bnc#691969).- Handling of large (> 256 bytes) ntlmv2 blobs in winbind; (bnc#529946).- Package static libraries with 0644 permissions.- Add Requires libtalloc-devel to libldb-devel and libtevent-devel.- Rename libldb0 to libldb1 as 1 is the current major version of the library. - Add libldb1 and libtevent0 to baselibs.conf.- Don't call the suse_update_config macro before building lib ldb and tevent.- Update to 3.6.0pre3. + Listen on IPv6 addresses with IPV6_ONLY; (bso#7383). + Fix wrong output in 'smbget'; (bso#8066). + "inherit owner = yes" doesn't interact correctly with vfs_acl_xattr or vfs_acl_tdb module; (bso#8083). + rpccli_samr_chng_pswd_auth_crap segfaults if any input blobs are null; (bso#8088). + setpwent() actually does endpwent() and vice versa on FreeBSD; (bso#8099). + Fix the build of 'smbget' on HP NonStop; (bso#8106). + Fix build of tdb2. + Correctly detect and deny symlinks anywhere in a path (not just the last component) if "follow symlinks = no". + Fix timeout in rpc_pipe_open_tcp_port(). + Fix the build of "--with-profiling-data". + Fix Coverity IDs 986, 1340, 2047, 2299, 2307, 2325, 2335, 2336, 2470, 2471, 2478. + nsswitch: Add 'wbinfo --lookup-sids'. + nsswitch: Add 'wbinfo --sids-to-unix-ids'. + Fix smbd with the async echo responder. + Fix the build of vfs_gpfs.c. + Add a 10-second timeout for the 445 or netbios connection to a DC. + Many pthreadpool fixes. + Fix transaction recovery area for converted tdbs.- Add PreReq permissions to the krb-printing package.- Remove _libdir ldb and tevent from file list. - Explicitly state not to bundle talloc or tdb while ldb and tevent build.- Always use the actual library version as part of the package name. - Exclude shared python modules.- Fix printing from Windows 7 clients; (bso#7567); (bnc#687535).- Update pidl and always compile IDL at build time; (bnc#688810).- Update to 3.6.0pre2. + ID Mapping changes. + Implement SMB2 support. + Add an Endpoint Mapper daemon. + Make "rlimit_max below minimum Windows limit" notification less scary; (bso#6837). + Quota only shown when logged as root; (bso#7080). + Fix printing from Windows 7; (bso#7567). + Retry DNS updates when connection to one nameserver has failed; (bso#7690). + Unlink may unlink wrong file when hardlinks are involved; (bso#7863). + Fix 'nmbd --port'; (bso#7875). + cmd_spoolss_deletedriver() returned without checking all architectures; (bso#7880). + Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899). + Fix cups pcap reload with no printers; (bso#7915). + Fix bug in chain_reply; (bso#7917). + Fix problems with "kernel oplocks" option set to "no"; (bso#7928). + Fall back for utimes calls; (bso#7940). + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944). + Let winbind try to use samlogon validation level 6; (bso#7945). + Sgid bit lost on folder rename; (bso#7996). + Fix getting username in 'net rap session'; (bso#8009). + Fix inode generation so nautilus can count total dir size correctly; (bso#8010). + Use jenkins hash for str_checksum; (bso#8010). + Add explicit configure option whether or not to enable dmapi support; (bso#8033). + Fix smbclient segfault with Cyrillic netbios names; (bso#8040). + Fix file creation on OS/X; (bso#8042). + Add "--option" to 'testparm'. + Fix crash bug on smbd shutdown when using FOPENDIR(). + Ensure we don't return an incorrect access mask. + Fix bug against the new Mac client. + Fix leak in error path. + Fix error where Windows client spoolss returns WERR_INVALID_DATA. + Fix a segfault in the krb5 locator plugin. + Enable sharesec for registry shares. + Fix memory leak in "security=share" and "force user". + Add "net idmap check", a check and repair tool for the id mapping database. + Add new 'net idmap delete' command. + Fix segfault on missing input file in 'net idmap restore'. + Fix 'net usersidlist' not to skip every other user. + Fix potential crash bug in spoolss_PrinterEnumValues push path. + Internal restructuring. + Don't wipe out all printer drivers when only one should be deleted. + Fix winbindd_dual_pam_auth_samlogon() for NT4 domains. + Fix memory leak in print_cups.c. + Remove duplicate cups response processing code. + Follow force user/group for driver IO. + Initiate pcap reload from parent smbd. + Reload shares after pcap cache fill. + Fix numerous Coverity IDs (2041 and others). + Fix a memory leak in check_sam_security_info3. + Fix a segfault in the nss wrapper when libnss_winbind.so is not loadable. + Make "net sam list [users|workstations]" list only the right things. + Fix a potential memleak in secrets_fetch_trusted_domain_password. + Use the right credentials in check_netlogond_security. + Add support for AF_NETLINK addr notifications. + Fork multiple Winbind children per domain. + Fix a deadlock between smbd and ctdbd. + Add 'wbinfo --dc-info'. + Make "nmbd socket dir" configurable. + Fixed valgrind errors. + Fix a memleak in receive_getdc_response. + Don't grant SEC_STD_DELETE always to the owner of a file. + Fix segfaults on addrchange errors in Winbind. + Allow machine accounts as members in groupdb. + Add IPv6 support for the endpoint mapper. + Free unused memory in the rpc server. + Fix possible segfaults in svcctl server. + Fix possible segfault with client_id in rpc server. + Add a 'svcctl shutdown' function to rpc server. + Fix a resource leak in net_afs. + Fix a resource leak in smbta-util. + Fix possible resource leak in net_usershare. + Fix possible resource leak in 'smbget'. + Fix possible resource leak in 'smbfilter'. + Fix a possible null pointer dereference in smbd. + Ensure we send the direct levelII oplock break to the correct fid. + Fix private libdir and codepages paths. - Add RFC 3454 to the vendor files.- Fix idmap_tdb for big-endian systems such as ppc and s390; (bso#6901); (bnc#675978).- Fix smbclient -M NT_STATUS_PIPE_BROKEN failure; (bso#7635); (bnc#681913).- Replace jobs by _smp_mflags macro while calling make on post-11.4 systems.- Don't crash when publishing a single printer; (bnc#643119).- Carry error status in printer list IPC message, do not refresh printers if cups is unavailable; (bso#7994); (bnc#675478).- Define the libwbclient packages ahead of packages with a different version.- Use %_smp_mflags for parallel building.- Update to 3.5.8. + Fix Winbind crash bug when no DC is available; (bso#7730). + Fix finding users on domain members; (bso#7743). + Fix memory leaks in Winbind; (bso#7879). + Fix printing with Windows 7 clients; (bso#7567). + Fix 'testparm' return code when EOF in encountered in param name; (bso#3185). + Make "rlimit_max below minimum Windows limit" notification less scary; (bso#6837). + Fix "Your Password expires today" message for users of trusted domains; (bso#7066). + Fix maintaining of users' groups via UsrMgr; (bso#7262). + Fix 'net ads dns register' in Windows 2008 R2 domains; (bso#7356). + Raise debug level for "reduce_name: couldn't get realpath" messages; (bso#7409). + Fix updating the time on close in vfs_gpfs; (bso#7498). + Fix "log=>ndr_pull_error" in 'wbinfo -u' and 'wbinfo -g'; (bso#7594). + Handle Windows 9x adddriver calls without config file; (bso#7641). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix memory leak in the netapi routines; (bso#7665). + Store unmodified copies of security descriptors in acl_xattr and acl_tdb modules; (bso#7716). + Fix incorrect unix mode_t caused by invalid client DOS attributes on create; (bso#7733). + Apply appropriate create masks when creating files with "inherit ACLs" set to true; (bso#7734). + Fix "dfree cache time" parameter; (bso#7744). + Fix a getgrent crash with many groups; (bso#7774). + Fix requesting lookups for BUILTIN sids; (bso#7777). + Fix smbd crash caused by expand_msdfs; (bso#7779). + Fix atime limit; (bso#7785). + vfs_scannedonly: Switch from mtime to ctime which is more reliable; (bso#7789). + Fix copying files from a SMB share using Gnome vfs and SMB signing; (bso#7791). + Make Winbind recover from a signing error; (bso#7800). + ACL inheritance cannot be disabled in vfs_acl_xattr/vfs_acl_tdb; (bso#7812). + Fix "force group" with ntlmssp guest session setup; (bso#7817). + vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on; (bso#7835). + Make WINBINDD_LOOKUPRIDS asking the right domain; (bso#7841). + Make WINBINDD_LOOKUPRIDS returning the domain name; (bso#7842). + Expand the local SAMs aliases; (bso#7843). + ntlm_auth: Support clients which offer a spnego mechs we don't support; (bso#7855). + Fix 'net ads dns register' in cluster setups; (bso#7871). + Fix 'nmbd --port'; (bso#7875). + Make 'rpcclient deldriver' delete drivers for all architectures; (bso#7880). + Fix flaky Winbind against Windows 2008; (bso#7881). + Fix SMB session setups with Kerberos against some closed source SMB servers; (bso#7883). + Fix stale lock in open_file_fchmod(); (bso#7892). + Fix sporadic Winbind panic in rpc query_user_list; (bso#7894). + Don't set SAMR_FIELD_FULL_NAME if we just want to set the account name; (bso#7896). + Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899). + Fix connections from WinCE; (bso#7917). + Fix opening MS Powerpoint files; (bso#7940). + Fix endless loops caused by inotify; (bso#7942). + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944). + Let Winbind try to use samlogon validation level 6; (bso#7945). + Revalidate the pathname once re-constructed from a root fsp; (bso#7950).- Require a particular library version even if the major version is part of the package name. Using the same major version does not guarantee forward compatibility.- Fix a fd-leak in libwbclient at dlclose-time; (bso#7684); (bnc#668773).- Update to 3.5.7 + Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).- Disable separate build of samba-doc for post-11.1 systems.- Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).- Increase the log level for missing PIDs on SIGCHLD, printcap child processes are not added to the children PID list; (bnc#666460).- Do not require a particular library version if the major version is part of the package name.- Use the actual version numbers of the ldb, talloc, tdb, and tevent libraries on post-11.3 systems.- Abide by print$ share 'force user' & 'force group' settings when handling AddprinterDriver and DeletePrinterDriver requests; (bso#7921); (bnc#653353).- Remove pcap_cache_loaded asserts from (re)load_printers. pcap_cache_loaded() returns false if the pcap cache contains no printer entries. correct call ordering is already enforced. (bso#7836); (bnc#625936).- No longer force activation of the cifs service on post-11.3 systems. - Add X-UnitedLinux-Default-Enabled to the cifs init script on pre-11.4 systems. - Move the cifs init script nfs dependencies from Required to Should.- Recommend to install samba-krb-printing from samba-winbind on post-10.3 systems; (bnc#661845).- Fix error paths in cups_async_callback(), an empty cups printer list should not be treated as an error; (bnc#661842).- Abide by printcap cache time, reload parent smbd pcap cache on expiry; (bso#7836); (bnc#625936).- Fix race in cups async printer services reload; (bso#7836); (bnc#625936).- Don't tweak with baselibs.conf during %post if not present; (bnc#652620).- Don't make use of baselibs.conf on SUSE Linux Enterprise 10; (bnc#652620).- Don't use --tmpdir as this option isn't known by mktemp of SUSE Linux Enterprise 10; (bnc#652620).- vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on; (bso#7835).- Replace Requires samba-client by samba-gplv3-client in the gplv3 packages; (bnc#652620).- Fix Dolphin SMB share IO with SMB signing enabled; (bso#7791); (bnc#656112).- Add Conflicts to the samba-gplv3 main, client, doc, krb-printing, winbind, client-gplv2, and doc-gplv2 packages; (bnc#652620).- Add Provides samba-client-gplv2 and samba-doc-gplv2 to pre-3.2 versions; (bnc#652620).- Obsolete samba-client-gplv2 and samba-doc-gplv2; (bnc#652620).- Remove Provides samba-client:/usr/sbin/winbindd from the samba-gplv3-winbind package to avoide an accidental install trigger; (bnc#652620).- Add Provides samba-client to the samba-gplv3-client package; (bnc#652620).- Remove all Obsoletes from the samba-gplv3 packages and only keep the Provides samba; (bnc#652620).- Add fitting Conflicts to all samba-gplv3 packages; (bnc#652620).- Reduce unnecessary ldap round trips and eliminate invalid DN messages; (bnc#654719).- Exclude cifs-mount and ldapsmb from the samba-gplv3 build of SUSE Linux Enterprise 10 SP 3 and 4.- Add the _build_arch at the end of the vendor version suffix.- Provide and Obsolete samba-gplv3 to replace potentially installed packages.- Change package base name to samba-gplv3 for SUSE Linux Enterprise 10 SP 4. - Do not package libsmbclient and libsmbsharemodes.- Update to 3.5.6 + Fix auto printers with registry config; (bso#7280); (bnc#617153). + Fix SPNEGO auth when contacting Win7 system using Microsoft Live Sign-in Assistant; (bso#7577). + Fix 'net idmap restore' setting HWM to avoid duplicates; (bso#7578). + Fix "admin users" when using vfs_acl_xattr; (bso#7581). + Fix using cached credentials in ntlm_auth; (bso#7589). + Fix Winbind offline login; (bso#7590). + Fix Winbind internal error; (bso#7636). + Fix mknod/mkfifo failing with "No such file or directory"; (bso#7651). + Fix smbd changing mode of files on rename; (bso#7693). + Fix crash bug with invalid SPNEGO token; (bso#7694). + Fix smbd panic on invalid NetBIOS session request; (bso#7698). + Fix smbd crash caused by "%D" in "printer admin"; (bso#7541). + Fix 'smbclient -M'; (bso#7635). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix crash bug in rpcclient; (bso#7688). + Fix file corruption when setting Samba "write wache wize"; (bso#7715).- Let startproc wait for nmb, smb and winbind pid files getting created on post-11.1 systems; (bnc#520036).- Include the reviewed french translation for pam_winbind; (bnc#499233).- Fix smbd crash with CUPS printers and no [printers] share defined; (bso#7297); (bnc#637755).- Fix printing from 64-bit windows clients; (bso#6888); (bnc#640870).- Fix baselibs.conf for libtalloc.- Fix buffer overflow in sid_parse() to correctly check the input lengths when reading a binary representation of a Windows Security ID (SID); CVE-2010-3069; (bso#7669); (bnc#637218).- Use cached ntlm password in libsmbclient. Prevent lockouts when kerberos tickets are lost; (bnc#602418); (bnc#606304).- Add a dependency on nfs to the smbfs/ cifs init scripts as they require the en_US locale and /usr might be on NFS.- Complete fix for trusts with Windows 2008R2 DCs.- Fix authentication dialogs when connecting to older systems; (bnc#632055).- Adjust position of conditional ldapsmb %package and %files definition.- Create the /var/run/samba directory on the fly and package it as %ghost.- Fix preexec scripts; (bso#7104); (bnc#632852).- Add missing netapi, smbclient, smbsharemodes, talloc, tevent, and wbclient pkgconfig files and BuildRequire pkgconfig; (bnc#632770).- BuildRequire python-devel for post-9.3 systems.- Only create precompiled headers for post-10.2 systems. - Remove mkinitrd scriptlets.- Add vfs_crossrename man page. - Call make basic and remove conditional proto target. - Increase libtevent version to 0.9.9. - Remove wbc_async header from the file list. - Remove remaining cifs-mount pieces from the spec file.- Fix printers not auto loading with registry config; (bso#7280); (bnc#617153).- Update to 3.6.0pre1. + SMB2 support is fully functional despite managing quota using the Microsoft management tools. + Internal Winbind passdb changes to use samr and lsa rpc pipe to get local user and group information. + The spoolss and the old RAP printing code have been completely overhauled and refactored. + The SMB Traffic Analyzer (SMBTA) VFS module got added.- Intilize workgroup of nmblookup as empty string.- Fix net ads join when using parent domain users; (bso#6364); (bnc#630812).- cifs: do not restart during dhcp lease renewal when IPaddress remains the same; (bnc#573246).- Fix "Too many open files" when trying to access large number of files; (bso#6837); (bnc#619787).- Update to 3.5.4. + Fix smbd crash when sambaLMPassword and sambaNTPassword entries missing from ldap (bug #7448). + Fix init_sam_from_ldap storing group in sid2uid cache (bug #7507). + Allow previous password to be stored and use it to check tickets; (bso#7099). + Make ea data checks identical for trans2open and trans2mkdir; (bso#7188). + Fix editing users' groups via UsrMgr; (bso#7262). + Fix Winbind over IPv6; (bso#7341). + Samba sends "raw" inode number as uniqueid with unix extensions; (bso#7410). + Fix printing large formats; (bso#7423). + Fix spnego returning incorrect mechListMIC string; (bso#7449). + Fix some crash bugs and missing error codes in AddDriver paths; (bso#7459). + Fix crash bug in _samr_QueryUserInfo{2} level 18; (bso#7479). + Fix 'not a string literal' warning in netdomjoin-gui; (bso#7500). + Fix calculation of st_blocks in vfs_streams_xattr; (bso#7503). + Fix numerous build issues; (bso#7504). + Fix session setup from linux kernel cifs clients with "sec=ntlmv2"; (bso#7517).- Remove all provides and obsoletes samba3 from the spec file. Packages with this base name have not been offered as part of a product.- Fix a NULL pointer dereference in smbd of the 3.4 code base; CVE-2010-1635; (bso#7229); (bnc#605935).- Address possible buffer overrun in chain_reply code of pre-3.4 versions; CVE-2010-2063; (bso#7494); (bnc#611927).- Update of the SMB Traffic Analyzer v2 VFS module- Fix trusts with Windows 2008R2 DCs; (bnc#613459); (bnc#599873); (bnc#592198); (bso#6697).- Update to 3.5.3. + Fix MS-DFS functionality; (bso#7339). + Fix a Winbind crash when scanning trusts; (bso#7389). + Fix problems with SIGCHLD handling in Winbind; (bso#7317). + Add replacement for IPV6_V6ONLY on linux systems with broken headers; (bso#7196). + Fix cups encryption setting; (bso#7263). + Fix exporting printers via 'cupsaddsmb' command; (bso#7277). + Fix SMB job IDs in CUPS job names; (bso#7288). + Fix segfault in mount.cifs; (bso#7315). + Make TIME_T_MAX defines consistent; (bso#7352). + Re-fix a bug with smbd serving a windows terminal server; (bso#7357). + Display an error on 'net conf import' failures; (bso#7378). + Fix bitmap leak in dptr_Close; (bso#7384). + Fix rename problems with full_audit VFS module; (bso#7398). + Fix setting of passwords via 'net rpc user password' command; (bso#7417). + Fix 'net rpc printer list' command; (bso#7418). + Rename mod_name to module_name; (bso#7421). - Fix unnecessary traversing winbindd_cache.tdb in SIGHUP handler. - Added EN ISO 216, A0 and A1 to builtin forms; (bso#7423). - Winbind not working over IPv6; (bso#7341).- Honor "interfaces" list in net ad dns register; (bnc#606947).- Exclude the RPM release from the vendor tag for openSUSE Factory; (bnc#604049).- Enable the build of the idmap tdb2 module; (bnc#600822).- BuildRequire keyutils-libs-devel for Fedora and post-RHEL4.- BuildRequire pkg-config for post-10.2 systems and else pkgconfig.- Add "net conf import" error messages; (bso#7378, bnc#598189).- Define cups_lib_dir %{_prefix}/lib/cups for post-11.2 systems; (bnc#575544).- Update to 3.5.2. + Fix smbd segfaults in _netr_SamLogon for clients sending null domain; (bso#7237). + Fix smbd segfaults in "waiting for connections" message; (bso#7251). + Fix an uninitialized variable read in smbd; (bso#7254); (bnc#605935); CVE-2010-1642. + Fix a memleak in Winbind; (bso#7278). + Fix Winbind reconnection to it's own domain; (bso#7295). + Fix segfault if hide files or veto files has no ".AppleDouble"; (bso#1206). + Fix parsing of the gecos field; (bso#5198). + Fix several printing issues; (bso#6727). + Fix valgrind warning; (bso#6814). + Fix race condition in mount.cifs that allows user to replace mountpoint with a symlink; (bso#6853). + Fix bug in vfs_scannedonly rmdir implementation; (bso#7075). + Fix handling of bad server data returns in client rpc_transport; (bso#7159). + Never mark external domains as internal in Winbind; (bso#7170). + Fix access by multi-threaded applications; (bso#7202). + Fix 'net share' command; (bso#7203). + Fix DN parsing name was always null; (bso#7204). + Signals are processed twice in child; (bso#7206). + Fix returning of group members with 'getent group'; (bso#7212). + Fix the build of net_afs.c with --fake-kaserver=yes; (bso#7216). + Make Winbind logs more verbose for troubleshooting; (bso#7225). + Fix a NULL pointer dereference in smbd; CVE-2010-1635; (bso#7229); (bnc#605935). + Fix automatic building of vfs_tsmsm if gpfs and dmapi are present; (bso#7231). + Fix race conditions in CTDB persistent transactions; (bso#7232). + Symlink delete fails but incorrectly reports success to client; (bso#7234). + Fix "printer admin" functionality; (bso#7255). + Fix value-needed calculation in_spoolss_EnumPrinterData(); (bso#7256). + Fix _winreg_QueryValue crash bugs and implement Windows behavior; (bso#7258). + Fix job management commands for CUPS queues; (bso#7269). + Fix smbd segfault if using vfs_acl_tdb; (bso#7283). + Fix core dump in 'ntlm_auth' with "gss-spnego" helper; (bso#7290). + Fix smbd crashes with CUPS printers and no [printers] share defined; (bso#7297). + Fix DOS attribute inconsistency with MS Office; (bso#7310). + Many disconnecting clients render clustered Samba unusuable for some time; (bso#7312). + Make 'net conf addshare' atomic; (bso#7313). + Eliminate race condition in creating/scanning sorted subkeys in the registry backend; (bso#7314). + Winbind possibly segfaults when trying a trusted domain without inbound trust; (bso#7316).- Add SMB Traffic Analyzer v2 VFS module.- Document "wide links" defaults to "no" in the smb.conf man page for versions pre-3.4.6; (bnc#577868).- Fix workgroup enumeration, for client printer and file share selection; (bso#6880); (bnc#586215).- Fix tdb validation for offline auth; (bnc#587014).- Fix "printer admin" functionality; (bso#7255).- An uninitialized variable read could cause an smbd crash; (bso#7254); (bnc#605935); CVE-2010-1642.- Ensure to have a valid talloc stackframe; (bso#7251).- _netr_SamLogon segfaults for clients sending NULL domain; (bso#7237).- Merge missing pam_winbind message translations; (bnc#499233).- Remove cifs-mount subpackage for post-11.2 systems as the tools are now part of the independent cifs-utils package.- Fix join of Windows 2008 domains; (bnc#567013).- Update to 3.5.1 and 3.4.7. + Fix security flaw on Linux platforms if built with libcap support allowing file system access even when permissions should have denied it; CVE-2010-0728; (bso#7222); (bnc#586683).- Fixed libldb.so link in libldb-devel.- Fix argc handling in net_share, making the command "net share" work again; (bso#7203); (bnc#584253).- Update to 3.5.0. + Fix duplicate sam and unix accounts; (bso#7145). + Keep the the correct negotiate_flags on the cli->dc structure; (bso#7160). + Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send; (bso#7166). + Fix 'net ads dns' usage calls; (bso#7181). + Fix uninitialized variable in wkssvc_enumerateusers; (bso#7182).- Update to 3.4.6. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix printing with 64 bit clients (bso#6888). + Fix core dump on 64 bit Linux (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio) (bso#7067). + Fix string buffer overflow causing heap corruption in smbd (bso#7096). + Fix bogus ip address in SWAT; (bso#5885). + Fix vfs_full_audit; (bso#6557). + Use the first "uid" value; (bso#6157). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix DFS on AIX (maybe others); (bso#7052). + Fix pdb_search crash as non-root user; (bso#7068). + Fix unlocking of accounts from ldap; (bso#7072). + Fix vfs_expand_msdfs; (bso#7081). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Fix reading of large browselist; (bso#7122). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix listing of printjobs in Windows 7; (bso#7130). + Spoolss getprinterdriver2 level 101 marshalling is bad; (bso#7136). + Make idmap cache persistent for "ldapsam:trusted". + Also fill the memcache with sid<->id mappings in ldapsam_sid_to_id() not only the persistent idmap cache. + Shortcut uid_to_sid when "ldapsam:trusted = yes". + Make pdb_copy_sam_account also copy the group sid. + Shortcut gid_to_sid when "ldapsam:trusted = yes". + Speed up pdb_get_group_sid(). + Try to build the full unix_pw structure with ldapsam:trusted support. + Optimize ldapsam_alias_memberships() and cache ldap searches.- Update to 3.5.0rc3. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix vfs_full_audit; (bso#6557). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Fix duplicate initializer in the rmdir module; (bso#6876). + Fix printing with 64 bit clients; (bso#6888). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix core dump on Ubuntu 8.04 64 bit; (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio); (bso#7067). + Fix 'smbget' error status; (bso#7069). + Fix build of 'smbfilter'; (bso#7071). + Fix unlocking of accounts from ldap; (bso#7072). + Cliconnect gets realm wrong with trusted domains; (bso#7079). + Fix vfs_expand_msdfs; (bso#7081). + Fix storing of create time on directories in an EA in new create time code; (bso#7084). + Fix an early release of the global lock that can cause data corruption in libtdb; (bso#7085). + Fix string buffer overflow causing heap corruption in smbd; (bso#7096). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Add pdb_ldap performance fixes; (bso#7116). + Change ldap filter to what really was intended; (bso#7116). + Add new "nmbd bind explicit broadcast" parameter; (bso#7118). + Fix nmbd problems with socket address; (bso#7118). + Support large browselist; (bso#7119). + Fix reading of large browselist; (bso#7122). + Fix listing of printjobs in Windows 7; (bso#7130). + Owner of file not available with Kerberos; (bso#7139). + Fix IPv4/IPv6 problems; (bso#7140). + Fix get_acl_blob in the acl_tdb VFS module; (bso#7148). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix some wrong newlines in de translation strings.- Take extra care that a mount point of mount.cifs isn't changed during mount and don't allow it to be run as setuid root program; CVE-2010-0787; (bso#6853); (bnc#550002).- Check in mount.cifs for invalid characters in device name and mountpoint; CVE-2010-0547; (brc#562156); (bnc#577925).- Don't invalidate cache for uninitialized domains; (bnc#538923).- Signals are processed twice in child; (bnc#538923).- Allow forced pw change even with min pw age; (bnc#561894).- Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; CVE-2010-0926; (bso#7104); (bnc#577868).- Fix enumerate domain local groups for primary domain; (bnc#573813).- Fix malformed require_membership_of_sid; (bnc#525123); (bso#7106).- Normalize "Changing password for" msg IDs and STRs; (bnc#499233).- Build libtevent and libldb and put them into separate subpackages.- Update to 3.5.0rc2. + The Using Samba HTML book has been removed. + 'net', 'smbclient' and libsmbclient can use logon credentials cached by Winbind; (bso#7062). + New vfs_scannedonly module has been added; (bso#7028). + Check password history before increasing "badPasswordCount"; (bso#4347). + Fix changing of ACLs on writable file with "dos filemode=yes"; (bso#5202). + Restore Samba 3.0.x behavior and use the first "uid" value in pdb_ldap; (bso#6157). + Fix deletion of an object whose parent folder does not have delete rights fails even if the delete right is set on the object in vfs_acl_xattr and vfs_acl_tdb; (bso#6876). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix a segfault in winbindd_dual_ccache_ntlm_auth(); (bso#7027). + Disable sanity check in NetShareEnum for better compatibility with Windows; (bso#7029). + Fix SMBrmdir error message when deleting a directory fails; (bso#7033). + Fix segfault in vfs_cap; (bso#7034). + Fix 'net rpc getsid' in hardened Windows environments; (bso#7036). + Fix a Winbind segfault in "trusted_domains"; (bso#7037). + Complete and improve some German translation of 'net'; (bso#7039). + Fix compile error with WITH_DNS_UPDATE. Update .po files; (bso#7039). + Fix crash bug in libsmbclient; (bso#7043). + Fix bad (non memory copying) interfaces in smbc_setXXXX calls; (bso#7045). + Fix libsmbclient crash against OpenSolaris CIFS server; (bso#7046). + Lock down some srvsvc calls according to what w2k3 seems to do.- Update to 3.4.5. + Fix memory leak in smbd (bug #7020). + Fix changing of ACLs on writable files with "dos filemode=yes" (bug #5202). + BUG 6642: Fix opening the quota magic file. + BUG 6919: Fix remote quota management. + BUG 7034: Fix internal error caused by vfs_cap. + BUG 7036: Fix 'net rpc getsid' in hardened Windows environments. + BUG 7043: Fix crash bug in "SMBC_parse_path". + BUG 7045: Fix bad (non memory copying) interfaces in smbc_setXXXX calls. + BUG 7046: Fix a crash in libsmbclient used against the OpenSolaris CIFS server.- Free unused memory after a packet got processed; (bso#7020).- Add timeout to rpc call to prevent infinite loop when network is down; (bnc#538923).- Update to 3.5.0rc1. + BUG 6837: Fix "Too many open files" when trying to access large number of files with Windows 7; (bnc#619787). + BUG 6939: Fix long filenames when "mangling method" is set to "hash". + BUG 6991: Create symbol links to shared libraries. + BUG 6992: make test for getgrouplist cacheable. + BUG 7014: Fix Winbind crash when retrieving empty group members. + BUG 7020: Fix smbd using 2G memory. + Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned attributes by protocol level. + Vector correctly through reply_openerror() (which uses the same logic). + Fix bugs with the full Windows ACL support. + Add a few missing gettext calls to the 'net' command. + Fix up a share type translation and translate some more strings in 'net'. + Allow to call "pdbedit -N description -u user" without specifiyng "-r". + Add spoolss_DriverInfo7. + Fix rpcclient after setprinter IDL fixes. + Use generated krb5.conf in 'net ads testjoin'. + Add some German translations for the 'net' command. + Update mount.cifs man page with nounix option. + Fix _samr_GetAliasMembership for results with 0 rids. + Fix an error case in cli_negprot. + Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc. + Restore correct timeouts for SMB requests. + Fix a 64-bit error in libsmb. + Replace IS_DOMAIN_OFFLINE by a function in Winbind. + Simplify/cleanup Winbind code. + Fix write behind memory block in libtalloc. + Fix result check for getaddrinfo(). + Add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr() to tsocket. + Always set tdb->tracefd to -1 to be safe on goto fail in libtdb. + Add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior. + Fix standalone 'make installdocs'. + Output %p as unsigned in snprintf replacement. + New attempt at TDB transaction nesting allow/disallow. + Remove swig stuff from libtdb. + Reset tdb->fd to -1 in tdb_close() in libtdb. + Change the way mksysms work in libtalloc. + Also build and install tdb manpages from standalone tdb. + Fix infinite loop in NCACN_IP_TCP as there is no timeout. + Make winbindd_cache.c aware of domain offline to avoid unnecessary backend query. + List trusted domains from wcache when domain is offline.- Update to 3.4.4. + Fix interdomain trust relationships with Win2008R2 (bug #6697). + Fix Winbind crashes when queried from nss (bug #6889). + Fix Winbind crash when retrieving empty group members (bug #7014). + Fix "UID range full" error in Winbind (bug #6901). + Fix multiple LDAP servers in "idmap backend" and "idmap alloc backend" (bug #6910). + BUG 4832: Fix iconv checks. + BUG 6338: Do not always display "none" in 'net rpc trustdom list'. + BUG 6851: Add pdbedit --kickoff-time/-K to set the user's kickoff time. + BUG 6828: Fix infinite timeout when byte lock held outside of samba. + BUG 6837: Fix "Too many open files" message when trying to access a large number of files with Windows 7; (bnc#619787). + BUG 6841: Fix "map acl inherit = yes". + BUG 6850: Fix shadow copy display on Windows 7. + BUG 6867: Fix listing of directories with a lot of files. + BUG 6868: Support building with Heimdal we well as with MIT. + BUG 6875: Fix DOS attributes on OS/2 clients. + BUG 6880: Fix listing of workgroup servers in libsmbclient. + BUG 6898: Samba duplicates file content on appending. + BUG 6918: Fix krb5 build problem on Ubuntu karmic. + BUG 6929: Fix build with recent heimdal. + BUG 6939: Fix long filenames with "mangling method = hash". + BUG 6967: Fix 'net ads join' with OU. + BUG 6981: Fix paged search with DirX LDAP server. + BUG 6982: Remove erroneous out of memory error path in lookup_sid. + BUG 6997: Fix _samr_GetAliasMembership for results with 0 rids. + BUG 7005: Fix "mangle method = hash" truncates files with dot "." character. + Fix the build of the winbind krb5 locator plugin. + Fix enumprinter key client and server.- Readjust the _libdir/cups/backend/smb sym link only on uninstall of the samba-krb-printing package; (bnc#568603).- Add BuildRequires to fam-devel; (bnc#564260).- Prevent winbind crash; (bso#7014); (bnc#566119).- Fix processing of open modes in POSIX open; (bnc#530683).- Add baselibs.conf as a source.- Update to 3.5.0pre2. + BUG 2350: Add LDAP Alias Dereferencing support. + BUG 6288: SWAT adds a second share when changing parameters of an existing share. + BUG 6435: Fix minor memory corruption. + BUG 6710: Only install the cifs.upcall man page if CIFSUPCALL_PROGS was set while configure. + BUG 6802: A created folder does not properly inherit permissions from parent in vfs_acl_xattr. + BUG 6837: "Too many open files" when trying to access large number of files from Windows 7; (bnc#619787). + BUG 6860: Fix shared library build on QNX. + BUG 6879: Fix crash in Winbind. + BUG 6929: Fix build with recent heimdal. + BUG 6938 : No hook exists to check creation rights when using acl_xattr module. + BUG 6967: Prevent glibc error on 'net ads join'. + Fix vfs_acl_xattr which was failing to call the NEXT connect function. + Restructure the ACL code. + Refactor reply_rmdir to use handle based code. + Fix the build when no external talloc and tdb are installed. + Fix detection of CTDB headers on systems without system-libtalloc. + Fix several printing issues. + Fix the build on Mac OS X 10.6.2. + Fix net and rpcclient after setprinterdataex changes. + Add full support for level 8 printer drivers. + Add more spoolss architectures to IDL. + Fix enumprinter key client and server. + Fix crash in EnumPrinterDataEx. + Prefer posix_fallocate for doing "strict allocate". + Restore "fake directory create times" as a share parameter. + Fix explicit stat64 support. + Add support for NetWkstaGetInfo 101 and 102. + Add rpcclient wkssvc_enumerateusers. + De-deprecate "write cache size" to prevent its removal without a proper alternative. + Allow more than 1000 users in BUILTIN\Users. + Complete support for NetWkstaGetInfo/NetWkstaEnumUsers. + Fix the build of the example VFS modules. + Fix crash in free_file_list(). + Give the user a chance to change password when password will expire soon.- Store the smbfs service state if enabled and restore it for cifs while upgrade on post-11.2 systems.- Prevent cifstab from being overwritten while upgrade on post-11.2 systems.- Give the user a chance to change password when password will expire soon; (FATE#302414).- Rename smbfs init script to cifs for post-11.2 systems.- Allow Windows 7 to connection to samba domain controllers and member servers; (bnc#551811); (bso#6099); (bso#6100); (bso#6680).- Error on joining windows domain (invalid pointer); (bso#6967); (bnc#553622).- Add PreReq /usr/sbin/groupadd to the winbind package; (bnc#559165). - Simplify the winbind package %pre script and suppress stdout only.- Update to 3.5.0pre1 + Add support for full Windows timestamp resolution. + Experimental implementation of SMB2. + Add encryption support for connections to a CUPS server. + Major windbind asynchronous refactoring. - Remove using_samba from the doc package. - Increase major version of libtalloc to 2.- Fix kerberos refresh chain; (bnc#546162); (bso#6872).- Hardlink duplicate files on post-11.1 systems.- Add BuildArch noarch to samba-doc on post-11.1 systems.- Use full 16byte session key in make_user_info_netlogon_interactive(); (bnc#551811).- Update to 3.4.3. + Fix trust relationships to windows 2008 (2008 r2) (bug #6711). + Fix file corruption using smbclient with NT4 server (bug #6606). + Fix Windows 7 share access (which defaults to NTLMv2) (bug #6680). + BUG 4675: mount.cifs: Do not attempt to update /etc/mtab if it is a symbolic link. + BUG 6529: Offline files conflict with Vista and Office 2003. + BUG 6532: Fix domain enumeration if master browser has space in name. + BUG 6606: Fix file corruption using smbclient with NT4 server. + BUG 6690: Fix wrong error check in profile. + BUG 6703: Allow smbstatus as non-root. + BUG 6704: Fix syntax error in avahi configure test. + BUG 6707: Fix an occasional segfault in config file parsing. + BUG 6710: Adjust regex to match variable names including underscores. + BUG 6711: Fix trust relationships to windows 2008 (2008 r2). + BUG 6726: SIVAL should have been an SVAL. + BUG 6728: BSD needs sys/sysctl.h included to build properly. + BUG 6731: Fix reading beyond the end of a named stream in xattr_streams. + BUG 6735: Don't overwrite password in pam_winbind, subsequent pam modules might use the old password and new password. + BUG 6764: Fix timeval calculation. + BUG 6765: Add a "hidden" parameter "share:fake_fscaps". + BUG 6769: Fix symlink unlink. + BUG 6772: Allow outstanding_aio_calls to be decremented. + BUG 6774: smbd crashes if "aio write behind" is set. + BUG 6776: Fix core dump caused by running overlapping Byte Lock test. + BUG 6781: Fix renaming subfolders in Explorer view. + BUG 6791: Fix linking order in cifs.upcall. + BUG 6793: Fix Winbind crash with "INTERNAL ERROR: Signal 6". + BUG 6793: Fix segfault in winbindd_pam_auth. + BUG 6796: Deleting an event context on shutdown can cause smbd to crash. + BUG 6797: Fix a memleak in libwbclient. + BUG 6804: Fix hpux compiler issue. + BUG 6805: Correctly handle aio_error() and errno. + BUG 6807: Fix a segfault in "net rpc trustdom list" for long domain names. + BUG 6810: Add support for finding alternate credcaches to cifs.upcall. + BUG 6811: Fix reference to freed memory in pam_winbind. + BUG 6815: Fix Windows 2008 R2 SPNEGO negTokenTarg parsing failure. + BUG 6824: Fix avahi activation. + BUG 6826: Don't fail authentication when one or some group of require-membership-of is invalid. + BUG 6828: Fix infinite timeout when byte lock held outside of Samba. + BUG 6829: Fix displaying of multibyte characters in smbclient. + BUG 6840: Fix crash in pam_winbind. + Fix an uninitialized variable. + Only ever handle one event after a select call. + Conditional install of the cifs.upcall man page. + Fix warning occuring when building the manpages.- Let smbclient show special characters properly; (bso#6829); (bnc#544204).- Don't fail authentication when one or some group of require-membership-of is invalid; (bnc#525123); (bso#6826).- Allow winbind to ignore certain domains; (bnc#539506).- Update to 3.4.2. + Fix unresolved home path; CVE-2009-2813; (bso#6763); (bnc#539517). + Fix potential denial of service; CVE-2009-2906; (bso#6768); (bnc#543115). + Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).- Fix potential denial of service; CVE-2009-2906; (bnc#543115).- Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).- Fix unresolved home path; CVE-2009-2813; (bnc#539517).- Don't overwrite password in pam_winbind; (bnc#515444).- mods for winbind (when used with squid - ntlm_auth) o winbind adds group 'winbind' o permission 0750,root,winbind LOCKDIR/winbindd_privileged- Merge two fixes from 3.2.8 and 3.3.1. + Adjust regex to match variable names including underscores. + Conditional install of the cifs.upcall man page.- Remove supplements from baselibs.conf while %clean for pre-11.1 systems; (bnc#520579).- Update to 3.4.1. + Fix authentication on member servers without Winbind (bug #6650). + Nautilus fails to copy files from an SMB share (bug #6649). + Fix connections of Win98 clients (bug #6551). + Fix interdomain trusts with Windows 2008 R2 DCs (bug #6697). + Fix Winbind authentication issue (bug #6646). + BUG 5879: Update LDAP schema for Netscape DS 5. + BUG 5886: Fix password change propagation with ldapsam. + BUG 6105: Make linking of cifs.upcall and rpcclient --as-needed safe. + BUG 6222: Default to DRSUAPI replication for net rpc vampire keytab. + BUG 6437: Make open_udp_socket() IPv6 clean. + BUG 6496: MS-DFS cannot follow multibyte char link name in libsmbclient. + BUG 6506: Smbd server doesn't set EAs when a file is overwritten in NT_TRANSACT_CREATE. + BUG 6532: Fix the build with external talloc. + BUG 6538: Cancel all locks that are made before the first failure. + BUG 6560: Fix lookupname. + BUG 6564: SetPrinter fails (panics) as non root. + BUG 6568: Fix _spoolss_GetPrintProcessorDirectory() implementation. + BUG 6585: Fix unqualified "net join". + BUG 6593: Correctly implement SMB_INFO_STANDARD setfileinfo. + BUG 6601: Avoid global fd limits. + BUG 6607: Fix crash bug in spoolss_addprinterex_level_2. + BUG 6611: Fix a valgrind error in chain_reply. + BUG 6615: Fix browsing of DFS when using kerberos in libsmbclient. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 6650: Fix authentication on member servers without Winbind. + BUG 6651: Fix smbd SIGSEGV when breaking oplocks. + BUG 6655: Fix 'smbcontrol smbd ping'. + BUG 6620: Fix a bug in renames of directories. + BUG 6664: Fix truncation of the session key. + BUG 6673: Fix 'smbpasswd' with "unix password sync = yes". + BUG 6680: Fix authentication failure from Windows 7 when domain joined. + BUG 6688: Fix crash in 'net usershare list'. + BUG 6693: Check we read off the complete event from inotify. + BUG 6700: Use dns domain name when needing to guess server principal.- Update to 3.2.14. + Fix SAMR access checks (e.g. bugs #6089 and #6112). + Fix 'force user' (bug #6291). + Improve Win7 support (bug #6099). + Fix posix ACLs when setting an ACL without explicit ACE for the owner (bug #2346). + BUG 6387: Fix Winbind crash when multiple IDmappings exist in the LDAP directory. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6089: Fix SAMR access checks. + BUG 6112: Fix SAMR access checks. + BUG 6279: Fix Winbind crash. + BUG 6291: Fix 'force user'. + BUG 6099: Try to fix domain join of Win7 Beta. + BUG 6386: Groupdb mapping fix. + BUG 6421: Fix POSIX read-only open on read-only shares. + BUG 6476: Fix more smbd-zombies in memory. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + BUG 6504: Fix SAMR server for Winbind access. + BUG 6520: Fix time stamps. + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6465: Fix enum_aliasmem in ldb branch. + BUG 6484: Fix searching for users while adding them to groups via Windows usermanager. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 6526: Let parent_dirname() correctly return toplevel filenames. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 5798: Preserve CFLAGS info in configure. + BUG 6382: Case insensitive access to DFS links broken. + BUG 6481: Don't require "Modify property" perms to unjoin. + BUG 6628: 'smbpasswd -a' uses algorithmic rid base with 'passdb backend = tdbsam'. + BUG 6560: Lookupname failed, cannot find domain when attempt to change password. + Prevent creation of keys containing the '/' character. + Fix join of Windows 7 RC to a Samba3 DC. + Fix bug in processing of open modes in POSIX open. + Fix the negotiate flags. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to 'net'. + Fix a race condition in Winbind leading to a panic. + Add workaround for MS KB932762. + 5945: Fix out of memory error with Winbind idmap. + Avoid duplicate ACEs. + Fix profile ACLs in some corner cases. + Zero an uninitialized array.- Unable to browse DFS when using kerberos in libsmbclient; (bnc#528271); (bso#6615).- check in .po files for pam_winbind; (bnc#499233); (bso#6602).- Add ntp and network-remotefs as Should-Start dependency to the winbind init script; (bnc#515629).- Update to 3.0.36. + Fix Winbind crash on 'getent group' (bug #5906). + Excel save operation corrupts file ACLs (bug #4308). + Prevent segmentation fault on joining a very long domain name. + BUG 4308: Excel save operation corrupts file ACLs. + BUG 4370: Clean-up entries in /etc/mtab after unmount. + BUG 4640: Fix guest mounts in mount-cifs. + BUG 5906: Fix Winbind crash on 'getent group'. + BUG 6066: netinet/ip.h present but cannot be compiled on Solaris. + BUG 6099: In order to allow Win7 to connect to a Samba NT style. + BUG 6279: Fix Winbind crash. PDC we set the flags before we know if it's an error or not. + BUG 6085: Fix build of vfs_default. + BUG 6098: When the DNS server is invalid, the ads_find_dc() does not work correctly. + Fix logic error in try_chown. + Correctly use chroot(). + Fix bug in processing of open modes in POSIX open. + Don't install the cifs.upcall binary twice. + Fix mount.cifs handling of -V option. + Prevent segmentation fault on joining a very long domain name. + Don't try and delete a default ACL from a file. + Add workaround for MS KB932762. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Fix a crash during name resolution when log level >= 10 and libc segfaults if printf is passed NULL for a "%s" arg.- Use a conditional suse_version macro in front of the SUSE_ASNEEDED export.- lookupname failed, cannot find domain when attempt to change password; (bnc#520645); (bso#6560).- Don't link with --as-needed flag on post-11.1 systems.- Stop the smbfs service if an interface goes down; (bnc#517768).- Disable build of static libraries on post-11.1 systems; (bnc#509945).- Fix missing zlibs for cifs.upcall and test_shlibs.- Update to 3.4.0. + BUG 6431: Local groups from 3.0 setups no longer found. + BUG 6459: Fix build of pam_smbpass on some distributions. + BUG 6481: 'net ads leave' needs to try account deletion, NetUnjoinDomain not. + BUG 6497: Fix calling of 'test' in configure. + BUG 6498: Add workaround for MS KB932762. + BUG 6499: Fix building of pam_smbpass. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6512: Fix support for enumerating user forms. + BUG 6514: Improve error message in 'net' when smb.conf is not available. + BUG 6520: Fix time stamps when "unix extensions = yes". + BUG 6521: Fix building tevent_ntstatus without config.h. + BUG 6526: Fix notifies in the share root directory. + BUG 6531: Fix pid file name.- Package /etc/samba/smbpasswd as %ghost on post-11.1 systems.- Fix net ads leave; (bnc#511695).- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164). - Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).- Update to 3.2.13, 3.3.6. + In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with file names treat user input as a format string to asprintf. With a maliciously crafted file name smbclient can be made to execute code triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478).- Update to 3.0.35. + In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a data value can potentially affect access control when "dos filemode" is set to "yes"; CVE-2009-1888; (bnc#515479).- Uninitialized read of a data value; CVE-2009-1888 (bnc#515479).- Update to 3.4.0rc1. + BUG 4699: Remove pidfile on clean shutdown. + BUG 5456: Fix "net ads testjoin". + BUG 6081: Make it possible to change machine account sids. + BUG 6253: Use correct value for password expiry calculation in pam_winbind. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6305: Correctly prompt for a password when a username was given. + BUG 6328: Add support for multiple rights to "net sam rights grant/revoke". + BUG 6333: Consolidate create/delete account paths in pdbedit. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6451: net/libnetapi user rename using wrong access bits. + BUG 6458: Fix uninitialized variable in local_password_change(). + BUG 6465: Fix enumeration of empty aliases. + BUG 6476: Fix smbd-zombies in memory when using [x]inetd. + BUG 6487: Add missing DFS call in trans2 mkdir call. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + Improve pam_winbind documentation. - Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions.- Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user input as a format string to asprintf; CVE-2009-1886; (bnc#513360).- Fix a bad memleak in vfs_full_audit; (bnc#510035).- Update to 3.3.5. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix joining of Win7 into Samba domain (bug #6099). + Fix joining of Win2000 SP4 clients (bug #6301). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5853: Add keyutils-devel to build requires to fix build on RHEL. + BUG 5897: Fix shutdown script example in the smb.conf manpage. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6301: Fix joining of Win2000 SP4 clients. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix 'net groupmap set' segfault. + BUG 6361: Make --rcfile work in smbget. + BUG 6365: Re-Add the "dropbox" functionality with -wx rights on a directory. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6415: Filter out of range mappings in default idmap config in idmap_tdb. + BUG 6416: Filter out of range mappings in default idmap config in idmap_tdb2. + BUG 6417: Filter out of range mappings in default idmap config in idmap_ldap. + BUG 6441: Fix the compile with --enable-dnssd. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent infinite include nesting. + Mark registry shares without path unavailable. + Also handle DirX return codes. + Fix Coverity ID 897. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix a race condition in winbind leading to a panic. + Some man pam_winbind improvements. + Zero an uninitialized array.- Update to 3.2.12. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix "force user" (bug #6291). + Fix Winbind crash (bug #6279). + Fix joining of Win7 into Samba domain (bug #6099). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5798: CFLAGS info lost in configure. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5835: Add keyutils-devel to build requires. + BUG 5945: Fix out of memory error with Winbind idmap. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6279: Fix Winbind crash. + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6291: Fix "force user". + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6386: Groupdb mapping fix. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent creation of keys containing the '/' character. + Fix bug in processing of open modes in POSIX open. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a race condition in winbind leading to a panic. + Fix a crash bug if we timeout in net rpc trustdom list. + Fix profile acls in some corner cases.- Default with passdb backend to smbpasswd for SUSE products older than 11.2.- Explicitly use 'tdbsam' as passdb backend in the default smb.conf file.- Update to 3.4.0pre2. + The default passdb backend has been changed to 'tdbsam'! + Samba4 and Samba3 sources are included in the tarball. + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Made parameter syntax of the net command more consistent. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 4271: testparm should not print includes. + BUG 4831: Don't call openlog() or closelog() from pam_smbpass. + BUG 5681: Do not limit the number of network interfaces. + BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo access checks. + BUG 6099: Fix NETLOGON credential chain. + BUG 6136: New AFS syscall conventions. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6253: Use correct value for password expiry calculation. + BUG 6291: Fix 'force user'. + BUG 6292: Update config.guess from gnu.org. + BUG 6302: Give the VFS a chance to read from 0-byte files. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on malloced memory. + BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix segfault in 'net groupmap set'. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6357: Use Samba default command line arguments in 'net'. + BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4 and IPv6 addresses + BUG 6361: Make --rcfile work in smbget. + BUG 6371: Unsuccessful 'net conf setparm' leaves empty share. + BUG 6372: usermanager only displaying 1024 groups and aliases. + BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids. + BUG 6415: Filter out of range mappings in default idmap config (idmap_tdb). + BUG 6416: Filter out of range mappings in default idmap config (idmap_tdb2). + BUG 6417: Filter out of range mappings in default idmap config (idmap_ldap). + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Fix the core of the SAMR access functions. + Fix SAMR server for winbindd access. + Add dbwrap_tool - a tdb tool that is CTDB-aware. + Hide "config backend" from swat. + Fix linking with --disable-shared-libs. + Fix issue with missing entries when enumerating directories. + Map NULL domains to our global sam name. + Fix driver upload for Xerox 4110 PS printer driver. + Add "net dom renamecomputer" to rename machines in a domain. + Inspect the correct computername string before enabling/disabling the change button in netdomjoin-gui. + Fix join prompt dialog test in netdomjoin-gui. + Only gray out labels when not root and not connecting to remote machines (netdomjoin-gui). + Allow to switch between workgroups/domains with the same name (netdomjoin-gui). + Add NetShutdownInit and NetShutdownAbort. + Fix samr access checks. + Add a security model to LSA. + Also handle DirX return codes. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix Coverity ID 897. + Fix a race condition in vfs_aio_fork with gpfs share modes. + Fix bug disclosed by lock8 torture test. + Fix a race condition in winbind leading to a panic. + Detect tight loop in tdb_find(). + Fix chained sesssetupAndX/tconn messages. + Fix strict locking with chained reads. + Fix two bugs in sendfile. + Fix memory leak. + Fix file descriptor leak. + Fallback to the legacy sid_to_(uid|gid) instead of returning NULL. + Always allocate memory in dptr_ReadDirName. + Fix 'net' crash during domain join. + Zero an uninitialized array. + Allow child processes to exit gracefully if we are out of fds.- Enable cifs.upcall on versions newer than SUSE 10.0.- Add BuildRequires to keyutils-devel.- Remove redundant Requires to keyutils-libs for cifs-mount.- Detect tight loop in tdb_find(); (bnc#450974).- Fix lp printing with kerberos; (bnc#476913).- Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all other build targets.- Update to 3.4.0pre1. + Samba4 and Samba3 sources are included in the tarball + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Make merged build possible. + Move common libraries to the shared lib/ directory.- Update to 3.3.4. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix usrmgr.exe creating a user (bug #6243). + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6279: Fix Winbind crash. + BUG 5329: Add "net rpc service delete/create". + BUG 6238: Make sure wbcLogoffUserParams are properly initialized before freed. + BUG 6263: Fix domain logins for WinXP clients pre SP3. + BUG 6286: Call init function for builtin idmap modules before probing for them as shared modules. + BUG 6243: Fix usrmgr.exe creating a user. + net conf: Save share name as given, not as lower case only. + Prevent creation of registry keys containing the '/' character. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Don't access a freed structure when logging off and re-using a vuid. + Try to to fix password_expired flag handling. + Make sure to grey out change fields in the netdomjoin-gui when not running as root. + Don't look up local user for remote changes, even when root. + Use procid_str in debug messages for better cluster-debuggability. + Use cluster-aware procid_is_me instead of comparing pids. + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Do not use the file system GET_REAL_FILENAME for mangled names. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to net. + In net_conf_import, start a transaction when importing a single share. + Fix writing of roaming profiles with "profile acls" set to "yes".- Update to 3.2.11. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix smbd crash for close_on_completion. + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6205: Correct sample smb.conf share configuration. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6263: Fix domain logins for WinXP clients pre SP3. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Fix resume command typo for "printing = vlp". + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Don't look up local user for remote changes, even when root.- Don't lookup local user for remote password changes; (bnc#493507).- Update to 3.3.3. + Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb correctly (bug #6195). + Fix serving of files with colons to CIFS/VFS client (bug #6196). + Fix "map readonly" (bug #6186). + BUG 6195: Don't let smbd child processes panic. + Add backend_requires_messaging() method to libsmbconf. + Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf. + Fall back to file backend when no valid backend was found. + Fix a memleak in dbwrap_rbt. + Provide transaction_start|commit|cancel fns for the registry tdb. + Speed up "net conf drop". + Speed up "net conf import". + Add transactions to the libsmbconf API. + Reduce memory usage of "net conf import". + Registry cleanup. + Fix handling of SAMBA_VERSION_VENDOR_PATCH. + Fix build of pam_winbind.so with static linking. + Tidy up some convert_string_internal error cases. + BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to run elections. + Allow DFS client paths to work when POSIX pathnames have been selected. + Try and fix the build farm RAW-STREAMS errors. + Ensure files starting with multiple dots are hidden. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6193: Avoid messing with sync_context in libnet_samsync_delta(). + Fix notify_printer_status_byname. + Fix Coverity IDs 722, 762, 774, 775, 776. + Fix build on old Heimdal based systems. + Fix compile warning. + Use parentheses in if condition to make negation clear. + Add dirsort module. + BUG 6147: Fix detection of the GNU ld version. + BUG 6097: Fix smbd segfault. + BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6139: Add missing whitespace in mount.cifs error message. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix a valgrind error. + Speed up "net conf list". + Add sorted subkey cache. + Use StrCaseCmp in the dirsort module. + Document the dirsort module. + Disable dns_sd by default. + Add avahi detection to configure. + Add event avahi binding. + Use avahi to register _smb._tcp in smbd. + Fix two memleaks in the encryption code. + Fix a scary "fill_share_mode_lock failed" message. + BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't set errno. + Don't use reserved words in smbconftort. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Parse_packet can return NULL which is then dereferenced in match_mailslot_name. + Format the header check for netinet/ip.h more nicely. + Missing break in conversion function prevents tdb password database update.- Update to 3.2.10. + BUG #6195: Don't let smbd child processes panic.- BUG 6195: Fix crash on passdb conversion.- Update to 3.2.9. + BUG 5920: The length of the memcpy was calculated wrong. + BUG 6097: Fix smbd segfault. + BUG 6098: Fix ads_find_dc() with "security = domain" when the DNS server is invalid. + BUG 6099: Samba returns incurrate capabilities list. + BUG 6100: Implement _netr_LogonGetCapabilities() with NT_STATUS_NOT_IMPLEMENTED. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem. + BUG 6161: smbclient corrupts source path in tar mode. + BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif(). + BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client. + BUG 6224: nmbd waits 5 minutes before checking to run elections. + BUG 6228: Fix SMBC_open_ctx failure when path failure doesn't set errno. + Numerous Coverity fixes + Fix double free caused by incorrect talloc_steal usage. + Backport delete semantics of alternate data streams on a file truncate. + Allow set attributes on a stream fnum to redirect to the base filename. + Fix use of streams modules with CIFSFS client. + Fix more POSIX path lstat calls. + Allow DFS client paths to work with POSIX pathnames. + Ensure files starting with multiple dots are hidden. + Fix guest auth when Winbind is running. + Fix memleak in get_remote_printer_publishing_data(). + cifs mount fix for handling -V parameter. + Fix guest mounts. + Clean-up entries in /etc/mtab after unmount. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Enable total anonymization in vfs_smb_traffic_analyzer. + Don't try and delete a default ACL from a file. + Fix remotely adding a share via MMC. + Fix resume handle for _samr_EnumDomainGroups. + Fix a buffer handling bug when adding lots of registry keys. + Fix a O(n^2) algorithm in regdb_fetch_keys(). + Fix a valgrind error / segfault in dns_register_smbd(). + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix two memleaks in the encryption code. + Fix "fill_share_mode_lock failed" message. + Add S-1-22-X-Y sids to the local token. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Don't miss an absolute pathname as a kerberos keytab path. + Have nmbd check all available interfaces for WINS before failing. + Initialize the id_map status in idmap_ldap to avoid surprise.- Obsolete change from 2008-03-05 by removing the needless examples cleanup.- Update to 3.3.2. + Fix "force group" (bug #6155). + Fix saving of files on Samba share using MS Office 2007 (bug #6160). + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + Fix corruptions of source path in tar mode of smbclient (bug #6161). + BUG 6082: Fix renaming and deleting of directories using Windows clients. + BUG 6154: Make ZFS honor admin users. + BUG 6155: Fix "force group". + BUG 6160: Fix saving of files on Samba share using MS Office 2007. + BUG 6161: Fix corruptions of source path in tar mode of smbclient. + Fix some NetBSD warnings. + Fix bug in processing of open modes in POSIX open. + Fix use of streams modules with CIFSFS client. + Ensure ACL modules work with POSIX paths. + Use fsp->posix_open in preference if we have it. + Fix more POSIX path lstat calls. + Fix a bug in message handling for the change notify code. + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + BUG 4640: Fix guest mounts in mount.cifs. + Fix displaying the version string properly when no other parameters passed in in mount.cifs. + Prefer gssapi header files from subdirectory. + BUG 6176: winbindd -n should disable the winbind idmap cache. + Add a vfs_preopen module to hide fs latencies. + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a valgrind error / segfault in dns_register_smbd(). + Fix build on SLES8. + Decremented by 1 for ntcancel requests. + Fix creation of core files. + Fix first mapping of uids/gids in Winbind. + Initialize the id_map status in idmap_ldap to avoid surprise. + Fix initialization of idmap status.- Only call '%find_lang pam_winbind' in the samba spec file, not samba-doc.- Ignore return value from subshell to fix build./bin/sh3.6.3-141.13.6.3-141.1securitypam_smbpass.so/lib//lib/security/-fomit-frame-pointer -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -gobs://build.opensuse.org/openSUSE:Evergreen:Maintenance:4627/openSUSE_Evergreen_11.4/1af6c5bb952ae8b921021669103e3f44-samba.openSUSE_Evergreen_11.4drpmlzma5x86_64-suse-linuxpackageand(samba:pam-32bit)?]"k%jz46  IprhP3La}T=M2YCވ>??U ,:zIu$7EE&oR3#`;Jg|HtΝZh]ʛƂ3!ER= +<ݴ.3l7\i EX7GaT|o+J+ o`N ]s}SM}OKB79C@#<`,Gj+щyښf y4ĢbpT^6!Z Y&%5c"Db_񀰢bC; ( BA1kɝQ?5lo=ylv-m6ZI@5Pf΄uVPXF!"r Z+}&իL! YTta,0:jZ{o#2{Dcu+{ȝ=iVEcʃ5s~x WP;G΁Jt-F!x:.36z+7)XpGSh1.,`yR%/`OvdaYЬqji+-%.&^2o[MaXXxH4x_a)BED41/FrEWMn/󘅠0KagUn۴O~=iH:NG9S^kKy &-nj ߻(M*hfl_&GNcB8SCm}Tʼ~^:TuTr2S}fEvZ.xhlMJ^xYw~$tGFH;A yb~hǥ2lsf5~Cώ61!m G4&>k&O>2Ps!q.ild7X^,>Nئ1I0{z .ZzXY#Vw~}hOsCŸ[Z)6)k}9BWZםR2o*0OUsX4IAd*WcȈc~6xX7ocXڋ~0OB3BO~qHSǝ TmFwϥ9~,W!B4xc*فqXSJ;F'Z60ӳu10N=f9 Uիk)@>,*&v| kD*>~fJ5-A,YIﶅ c i\ .*6:sӑ|Z;qX/M3kw?u>-d+|Qh(dn%N"$e{8ˋZUZ9PQ y ͜^hɑR-Z7MuA$Ȁ V.9Tw-B:q10*ߠS6k3VNi{-AHvNoS`"o\<nWfԕyvPi6@u\@ =&퇸Ȥpk1|I1-/0܏zW# >m \ 6EZ\7vͭ}G_Pm=M\^]}l+Z(No]KN7f vCM$2Ŧ/g}Bt:tcfqn YPP || |s\7HyJ5܆! aDͫD|uF -Bx춵{||F3(xkR.Jbh4e "/ε^^hе93B|-uJ׹aV/j p%prrR^,kM)2kR˭~~!Esn7ƭg}Qj㜸iXvYr*4~f{@s%4nmeH*:Q\MGTgZ$Z V LOf˛wɕKw?`t )?x\NYdZs/}mw!%^Vcy…]T 2/kMY0iC'8]ARO$Cdw# ~3e\"Gf=Iu-ӌGm=)짞MV<7վ=MF/,<X-9 j1wvFv>XU-xUUK4c#X]]svuL"u`A: Կ$MƐt( BܐD{ln6EkG5w6cs 0|Y-܋pHACu7I-9r̭~x>ɆP\ o]9a'ݚ-42f0uV%!y]tDep߰,,̮Oe5c2H-ա>8>;<4tX7@ s HNѼ58U(tZI= r9~FQM!. fF!&&ҷ3Tu, =KFXN,#heC4 \k?9)(5<˓-'&춾TV.#VCkmSF5su (fYH# j"C21,f/ߠiG5kW "%NʵLkKNm^:P(?z]4 R}q}?*8:^Gr0j zewm(kHHWNSBF䗘Pyޥw.nR&(0Ck0D瑁6:NJZj/ehsI;?d#l͊e\s=Џ:5'iG%Ys(*] W0j+ (y _K0'G+W],T2LؾoA~q 4Q/ ;_I &}O?!̐M&]t|:n#/r\cc>}|gGu{Y K2(l'Lx}20D.jjahɊ H`_EݍP4 B .HߘzifMpsSMC |z7}zRvwgdCAKb$LMfsR0f#(/\m,]}t<hY}o5zX NP-6Pl! Y 2…GC08pŃv$g1h}j,S;ya2Y.#=VlF)zmPS9k/ϸ{)["gP!UoҗcФqܲU~Ks"qcu;SGX-@7KB Cܣ* ݣ6iBzUgዓ`kޔbp@t..-d?惑>^5bhDC^VY5r"? Z?XQ Z a|Ű|S F= KVRԗօغIEx$I`!?GM䳥72dzנabu22qdĿ7"@ѮotHp_SU9Ru} "z^D޽iܨZ'нTSe[BidC#dP(_:Uh&}ҧhT\?0"ZI,5M[pMhW>vOȀ\J\݀ο(XzZ!mnK+r򹴤ݎDSl#1MH"2)J CJ'I([DUV06Q)bY6>1 jz;=S_6bbl{7 sߙl4~ bO `M >?+/᜻-N+krZ? $Aq>A+1} 3m:H 1V&%Ru_xNCsP?ƿ8fPkґ`n |ה8t;gV'qP0o' ĊCte*E+`6WqmΟfYE^%b[x둉V5Q^50F$;5S@\ B/òqx zRl9o+-#l{9`}7W$p6z =J^* 3 >3zL|c`\T]n)p7ukg )e3%$̐]ViiiY:HGEgL[Ct*~̼F)yR tF#:UDSʊ{{Y0"K08#𮿡1JZI[fҜI+ {odlx5eR4jthˠ{ Si2ⴺ 3qHϑ:~ũz:vWm.wK֟0PSS9ޛZcNqQW}mzɠ\ϲUJVbu֣%*1\Ejŵ XZiBad᧍^P31j7 <ʰڭT35y$7)d9}X#f_*BLb e>4XOJyW4t)-J2ׯs|uFrg ,~Yfm3ь7 $$B :H"2?K#4@is } 8!f똛v'W:å‹Z@Bw2hH,m 7#pXKlx%;`Bj 8~Ń773]r8K¶06[AJdUKƩOlgdc9s#F 9^Fኊ$6}jn߮Ea<*o> V%q~0j /fwZƤNEP-㚘_xdi#"r^3o)U†= = >Kiu魐Kszd/'%{_GFt8'Cc{A~+_v]dIo 65 w&c^טr5Үg" cyrH^"WC̮)Fu$g(ø[E p7p eI7Uuzy;Cog@f+VpD(e"Y\]j$_"#O™)f ܘT}~L¦qo[%=o1 Cbc+#EmBIoਫ*jmtT4lȤp$mu49,|9+mUf;${=܄ >Q`X"٦ Wp3N7Nm>E<>E޲E#"̃|#s弱OH3,W!ZgK$7"/N1l'\jv nx=7z':%vxy~P]Q'0yV 1 Y129Ҁz*_9-[ ך*wn޷2P|*-kB Ív]iOr)sLOhA_L(rk(i^Ǐ9#4rs8mLiy c,|3ƑvЉ*E %apeG }EuX:7wk+c^ehVNW(E-*Т:3F$xl-'=/@ Q V:6AwH:,o`1_3Ar4`;_4iUdf]B>u2K,uòvޮXf/;^)>#$q`/nXfS ٘XHFH R~GiݩʎO# P!4@ה>m5]J.gᴉ|ry.2Kk>!KS.n)6j^ncguvgL v5FkuTn h b+[/60'>"S%C;a8:|,R$֐~Lh|CbpASkIR!o;0S9' CF&ZeW$$ a4喌 ^=F7H#6B+!LK4GAG<)0^ٗ e6xBIy9U[@F̯9a97}K+q(#KY1T/՝w5~(cAdMihqko!B6AXL{<3&0ťhucm2z]I};}}s#P4uO[V~n*uB c6p-LN%uKyȅ0<$;*oqUٍ#3L&׸k g@k!Vma@q f~sv̌'5j쌶K0%0,\8] th%-됫ڕ]rr@lv;M[LC⛥.ܳ͵E[Y I|D82?3iU׼ Q0K Kp<m 6>ʼnny q[\@`#lkvfX!գЧh=^_W/= =g&Ztl(;4:>7O4 ђc/kyM{RNIҟ]1_mR&Yv Z]FJ]{%5o~E9!u@'B)-D6eƉ/XHdm6}۸!tʻv N^-bEl48[w|\G.^KԼk巐úl"^ٞ:lI"3tl0$f @M|o̰*Uf;P'!}@4Et9䓫b)3Z&UJŝ*XtǔƱ]^q7i3g[yyo e0!CTU=SmQ>͖]SyoAl/Q_%YKkp,$+1Z>`PZ9>w'bl t,RV_>!ؙ |ͲM~"W$'x3럡ds; HH~RNn(C{@2*ߥڑa*N{ @AA98HO_6fXrBKw x0'=jmɡl=뚓~~#<4DfKP2fQ k<@wGvSMnÀ+jl 8ǣ]'ղGs%GS]W^C*yFJS զS޶n.[AsC sVg2j=}lX7F7/X,Ǜ)+2gDyo֖$ )j%~YD>s57.0 JE2pmc͞$[ȗHO@)yqQ= p;$lJ !*`C뺥boٯFcŌŹ򡁪-c*MRi:~;.+B y}==s8Tn#Wy'WߖktKDON?}WTn4K!q3m|+pB[ yVu V5jR`o'IO*I0amH6NtE0 5RAAmRȂ~mB7 yT$,U_|j 61\bZ[,Vˌ\94OVm< %MT֭}ʯ6Z5:[:-yYj6eRc2 W]*X<UmFbO\{"Jn4%maCI ylv!$x˘" ސ$!GS%>m.C%C$X larsU~2?in .J_2+{JH]x? oiRl{v8f`57O-nHS:ݣt%DXOks~+`Ld[7XԿxY7K^C_IZeT(G$Aaj/CDy @Oa-!$*z'x|3w.Pf+Ð lv˵HHf ѧ5)KPqbNn g.g$;*y /D3ˆ~6dI&Ƃ91h,;gE ^p䛺@o B*5]>Z֏g7K+NH2CϬkSr`=.^9 1nT>Gd Bl`3Rp4ZXiN^}|U:t"?}cc؅ L,@g{!y{1Sq _+]i\%9u4Uř~ p4ԇC`V]w/,#XVzc2_W3fxe-HƙČV&?'@3B@C8[E|}@۵VIVHPP?) ͷwS3s'<[49#*EםIas-A$}LeSzj2 BHHT7VJ%syJ,׆}nс%qpl(>PQƧc]?-+%%`F `p&O_M#|h8y$P[v+؃]e_4%,?gt=< FE$$ y{Ki:;%-aZCu ,2SYz6v!,B.pǥa#d [F :;:KO؟{Nϡ*ҌӯԐT0-j~ݷ_;%f;b)JE <{u߭HzdERJZW֥gp%P =u6\ʆYTs)0PҎ fc^gūfprY }(f:agV{^ԼO1$xlYRey7楂c=rve}w"⒵ֵ!^hL8h>U%gIa,mK;>"tee|VU˼9yvZW[ ac49]fNV$>3~ȈI"/z 9 + cᔛP@I :RK{EQKsvaٺP`{?Tz(p^{N;aHVBb?Z P ԓi RU]=vQLQ*`OCF(SLžQvu[l.xi%J5^xss dײ az릋FW }}7#]GdfLhVO9vѻz\V7a[1~}<|57rw{ ,~+tkV# ٗ=fNGiOk%42xc&ҡ\Xb6 **=ECVB3[#b=`0#2 MlFZ6>LVu{e ayy[\: dߣwͤ럇kbo#tsT5HBEP+k9"BbCGVM@9x)pd!t7C3f 0,/}Κm̚|Z+(4ՑX}0g(ohKBQzf~_ֳkh@ n0t[}vڟ%< X廎MlK;*3{2ãe¶O{X;AJBN8j7mW?`Q_s;hp2O#2ݎo,xTYhy4.ܐ,+Nh(:C) [65F^?/?#ْLu {t' ~LGIhep $K43\%`f91԰Mr(\˃^~E἞V$BoFU̵-6A'ܖa`ysɟJrjٛ9i߯W|e"Y /נ{PW'?8=z:/+uFB 5ρO: S'_s2K>AK 5ҹz VlфRύiIF ^N-!2N7SEw"$l0[0ávRu{%Ž e^i?&!CAp0|QF쩈y(]kG!La~'iae-[admj_c PKr+<- ͕p$jӱ4jHCcPy\\Qf`8 lN{ۓ n4e>=? vQdtVu5`Ʈ kqV-_`oVs ؓ+ZCL!ED /"8q]A ξDXmeizσ#?S٣AR1=Ɲ'nUbLG%T0n_|L1ckgfU7muby4 BG=A/oc㶼 9k_D@TA mEXcUx& asVD&c+$-c*Vsr:cqE#ȳbnB\ey.G~a)p!.B1xvhhVtq\0IYHڵ-Mg˯ݳNkc[(jcsybb>^J=sFX.V.7kæB Pg|x4v8Nqꭾ uD5]Ui Yjho>μqrMD|bs^H')J'tYב;{-ڲ ?n:O_i?cA!~Bg^aY1L9aJpJ9ukuEb"0j!zJW&n+!7.s0 `"3(lB@cn(и}VM|`4MN!.=R&g^۫ $=IƆKzDBtK#,CiHŹ+cl-M6qoOiQpсE;BC)nDՐuOiM4= WCަQzOi b3n~F-tJ u, Y`pFȥ!\~warXrA%j aёU1/:k|/:ZlR7Y<Pa91LS#+9Gg_%Mzu8U8o30c.~[N6,Đ [M$Ӑ7rc#%ru-U-32$r GYh&{Z.$b[Z&(nT OgQ^ZT F,^5)|X2j'k@~d3Y$ d3kpӲb)ts"/n]e64tE WF wW3R%MTrL OK?Q瀳¢՟m齇:ZuQh}$9S06Ս$V%s/r'{reu0&qߜ ,hijqQ&bcAq+ v P=yIq/S`xN EA]cp*#e I*[i `fnzg䋍CUkE|!hُ{& ЊdSy&堅QtJDU+l2 6zy;b\"} E59"b1F.tnl gIzV97Z/3"苔b`U%e촃w'0B"k3noZM<OXf@-Y$Ͳx -XMnRamD慲q OQ:CHAaӅmQ䭧\!1[*t$`AȄg,)1OID@yaDdlbv$yMT^* S9}"fu*#>e_Jx41yԚyRFK._ 'el g2Ppb)&S 4?2pf9g'NB!nNZ=]y6Y0g3|^48n M{.f4DUWvHPfMm$iUtd*:l+|?z&8ķ zOg}e0u?BXc:qV1R'F ! }-Ȱ"PlUu_gdA6ginVxjN_+@D2bdjk׽}w8\$` B,vYW'O"/5[@/*VTQuWT!nXB<0ѴI`ؽZ re>p&~D~.g9-N*t]NSn>f9\$KoAobӖɂal3`b/2鬑G q;-i݄ROTcIL N%C4v'$WsA2~7,B@A8ymu#\E^$)Bd@ÌROՠ":1L.` 7ZCx3B(!r1 b8(ʄGYR0a8#c;u&»PB4LvvG#,KVXs ! &QYRxgvMG/ob[ %0Ek$RLE7b#'Dk &}X g0^יL&gXFֶߏ\5ѥ e[ǏA(=9Ёi鯤*Ou4m"ðFq1Zq(~Vgm&cF8DMy(<('`q|QJ4f;3Ҭ5>RQ'jSDk+6fmm>z5] bbk:2 rȠzPj!}w/vNV-OC5Шb S|arS-=Yib!hw ಧUx[2tK_"$p<* Z$gZ^0f.cɴ" nO$G9﯉n[)?u3"JSx0"$2ESMW0儴^1ظ #5 3obV 7D¿d}Ww*봰{JkG[U.')*1-h.ev&lQӬ'{ UnE\,i<Tĵu/?0=Y<܃52FRk25ߪ6rmX{0U80A>_Fc{.^9x#uҙf!E CtRN4 UC+9:)M,8eƻ*wzi Cåo$lz+ ?A~^zN{ER(٫2 cFm>|9jw0B(.xŅLv/KTZ?c M' uT E 2 "dƏW"u9n^@v5V33&`@:r.y} \>GYR̴0qRTs;dTU_#V<˄L;fkjG%tP8vł0N7'q.F'<LA: WF #gUbBzg!W73nHJ}{Yle0kD =~>#]c}Puɳe}kv z'sXQPPXGb2'%oXILO"K5Q@`Wr3W7f2%~xSh/Q:;tEL.)>pĭ(%XA\WAa46|kD[QBMlbцaTPzR"Zb\[W 9mp#N?ϗ~oɬq>P˒m?閂7Y Mՠzf\0n>M%iwЂʯvSeٍyB y-kev_r;J-5h&p#kDӥfB+>eG@zC>!ApIaHyK?{@Ն.DŽ7R+TLD.IN+m-RFB97 2RX8]KὺSY;i{:My)kcۢ%*rrFgM٨M}bŪGYi&>la?/a h]8.ajҿp9m,VV>L;od"0y{1i%q"vGrz0m|loUYZvTs,w?M/<CAH]l3!/*buu˄?JCssud2J}Ehѡ~`vwgl)Wr G.bp ' q.*XdQфoh?pٺj4l(ZG\`&\#+ig|wETsWk8l[fUU3Rc(C;-q/]jv; gFHjg@*˽1糶ki.K/wpFS|ˆ?e+7Dk\W $U1Jg ء=jv8ך!0u4VߜlL`0# Vw,*[c<H avT6%GN+ 5/ 2cm$ͥI W ԗܫ5cHSU0/DC_ XohgLP˾9mT=}^|U/wj 0rƻ >De5kAK6(Ќz揦vj6GJ3N0'm1R͌d0a6@熎$l7&̰G)8R,bSrn6!2 !=USBP6E(ifŲOG9=0<؏b TDagۻ yk6IȰp:]\-L8aPH_骒[Vpt@ kDS:NS7ϝxVrW1.0 S^)AA:ll|,E^0?LϾT$Jy0oy,GLМ=si>i5 WOuw*`P]ӕt~ֽ<>aiWQN--Y\eQ[)sO4$Y29lAL'gg0fH<qyrQhj>yJۆQ^ڕOtͣV f_ac_W?G{N^v܂d%ڱZxV.qr%!xfMRB{T' ;D,APU Kۚ&z!%w{V F8S7+Պ;R}R6ö7X芙WGMb&56-LZ\#pBUW@_L)HGF`t;Ŭ0#)'cC/,v az S|pYץ| /D64JCm(9l92 Ŕ/~q}Z_x${)DUɔP?g`+8H@E.jrWoq5X1~0ր|ӭ_!,,Tf"_-?-[s=L//> /[Wn-Ѡr*;jY}YG+`Ue[.lZ6&Lt fU M rC*iAr!^ Az , L]@X۩A|)!̀7 LN^>s*g'g;$-TZie qH~an6G%ovuV鄋&_{#s&3oq1"?Ϋu˥;bˀLuRuܱ;BsJnuWTWd.7~r\쯥 W-?]Dy=' ]T|fN/}bXd-ά^!~H_]*~.GlV@d&5\e>9?Bz) Ud k񝑮iTAo*unO%EFsn&./`9 tߤo!#&@gg;˼ A#llPa2-D)bD)53m;O4/~sd/ .<1Bpų:a[@ZJ}n$e 悖inO:r.B2aqū-\-UR-цbJ! :6Qwo383o) ^x֪>Q^M*dq܇)bM!JϤ 򷑐1Q10R:n>4S3([t5 ݪp6v\9jJ}T@L@CaB,06F+Axt&r]VYYܦZӒyۛ hܓ qN!7BM垨\}3W5z^?F8{^Rx)e3`J4=yG _|aδQ,pIQpet82I?fv fU SIu5) OZJA3yY =L_3eIީFvqFGm HŨs$ohZȑVK/bNǓĸ EQ23CO/^xCN$/x3&]@iX•4>V50*Gs]MwlGѥgV6e'TWGsc'M Aۑ1`=(5ut%r5?:_?X0hF2XЖNXr@'*Iqxt:).%wwv'ɣ )H>j]]ubʓP VPC7|W{ |I ^zj!EqݕN7yG$hj@ؖ(k#S)L|@'K!9"N(X]qc #Y|k\}=wJ?z'u$zޙ$^V $X6#cL&sɺ3}&*&l*ӮX(ؤjDuks\MY6m(ءk qee[/}ΡW<9+#p5>m0=eC0(\!pSܗM"[deJ%R_8dȤF|QA2"޺LW&K+ %/t (A0 ؆\--$nVf_gƁ >6crp5ұ/8e*ĆܥՍFg_`Xg_ʲ Y mkXGyZ0/)x ݊'^dA4oăw@fnM:_a .`J(ˉ0\n@o5B%_9vx(q kƀG*s2sZxoVY5-{~7Ecy* ΍^iF>ѧYY!D 8K`@>M*e@8D{)*?Q(g9/e\jƧ]$xgİrF&aOe8^m[-5R+($-;D E<= ~=s\E]pr,ۼ3 ~4@x>7,^Y]Mw<8x Oӕi}Jy_Q~ 8NjzxYWv^ARߝ_`,ҁ|)ևD ɓ R7): ӃpQ;s5䴭p΍.Ennse/nz<gw-LY[Ԣ0bx0R3７y]ˢLaST`I|cS8Ӝ-/TOwPw׸_ڬj9%sa#tSZ 2%r ^jzapW*<@yoFbY~3qSi CRjG9\;#2q,zˆ0ѶfcuHj[C#n_^\BU|(q{nw ZP![tU> 2?t BE]B[fvJ(ma݈D7y&ik,r=xBJD&04ޜ^/sUR1 )J-}_.`$ybẒW'ֈ5E_]Ov7BH"}p :JE*iGA5wv ovϑ;!JV.1Ulw{76¬]}1!U_IÞ;~ۮ(\Zt6KuML,׺-X+Q̃sWC}z,bOd%ԡŇrY=2|:V<{oelW[]̎-־N> vݺ[PKpnhYONo_+79kwʄe/Mߜ:eԯ(--}`S28'D;Ϩe]Y."ol0wꝞg9gFb&$oVSM2kƇa YuD/A8fU G 0]`d"׹P>p#%?^Yd7&KuX1yZd yZ Zm{3g9;bFa1ko=X 8p X}kpUJNce@AT3m\A6WyXvUo b 7ĻE)Tx< %BKS3EB6fʪ2Bc?;V[+絒$͔ 5@-ѬAvv^YrDTLȼBykpXe8{Jڵ6$ TFu1ޅԺ O|NWJSKpgwdhkpXDsdmz ǼɁ•{UF{8>F;*0YyȇC3pjBAOAfas KZ1=o5}&N{ 0$S|_"S-y,g 2`!nys7u7A7Yc})P]Js߾TUeߋ}-LE/ŷָvGb|71P<z4s#ak=vZ"lp~-hI26^K`;4 [y8K];5XTn|g !M h%ŵ(6NNS(#̖ǁ2I'kı. *Mө)\d|{v?;fXɣZc9ӥ YcLp^#mçG&Ѹk\0ັhf_,>*x/y?p?hx L`JH)1/fj?U~ QENheUEpm }Xۜ빓5\4!;ݫmD@Op![QJ1ᖢLPT=wFVd *N^~FnUjbeYh,Lw3[[G5H+mG޿fj;&q6.rzgRggݬ yէNH=] W 3Ʒrg' 1նKسHKp&U)(-jPJPn{T F9SZs7u un a>A hS -6E0}M7p:3S eԅdy"hNOywn ֬K%΢r{EΘ XQj\3VւJU5:fMi( ӗW)lw=S}@4Rcu3}?jNf6Թ>/ ]N aB$cW6h\e[Bwn|*:o5K0LG<tЉR"bp _X~,ȫ #h܊-IAHgi(2vݨIږj7LuEnb3r:ڕr1&2;  tV70״ \&E˲r_0>5#7K].ʌlG Tܫ4ap(Ȗ}Z^#vf2eTL8ɘg+zܐiĸ/{xⵕ.Xԕe+i19 p&`; ^A*&ϠDo+W<5C tDu$ [܌7k?ʝuTPQ?$ ,6wUhVv(YpVҽ^0}CRgnx#raΧ;e%d\:g$*ELɚP'تh,7ؤ)>##bWmC'iԅHSU>Jxݘ!_:$Hټʶ|lirʃ?hw3{#vr bgլ&J ,{5Dl cߨF_:Yr CvZ-ң65*%2Q8bpgOZ_ZDLt3VL"|BҶbqsZ7O$1#zǂ +ulBJEA!֨_&'"P6E+9j]B6#Y r22nU3vv"[ׅ 8_gTP.7'S7 ߦ uDiޜAr&3cFgJN"p2ɒ7nk?V6! }}.P!.8q4:ѲLZOݹ>^FirݏE[Y\MRW Z-xr D,Gj]R q :Ru-JT<#PO۟oKfSѱbfF Wji᫢7rY;^n+P\6ܱ5ªBpwѾX2 wA;N|}VA]c (gY+Ҧ!.7xak8^yq=P61SγpN6cHA_-*@TwSnK!jCôoiwoY7.ֱeKtqvzjNGbNƸ<%}Q*m idFfM"`LJ+U6e\z_ERS'˹63hz'VL| %_lYM pI[^fr;)>SڳUxqz=)cM38O*%@vk ˼N B̞Ol o+'o_|`-6f3k6n!I:xXkˈ,Cv5W!E YvN/b緉(6VAv+qv2^icdx^m[0zh?mBth+LLy9ʺ]i_Y{7$1F% ʴZ":Xߢ^.]U(ˊ* kp>ƣ b%ـLI{>]yϒ98$LC>΍^7&=_%xB/(<__&5Q35q1#>y:X}E5i<užTg[mVc[! ?=:RAX-qUܢ3qjP_nUdnZAZ0_J&Ky_FӜԯp[yBSRr1@@WݚkJ%%ӀVQC$S`v%~-$ 90Q椖7~MaW%m7HH(fHϲ4|.9-3 SkJ A/^DD@M^ᭈ3VlKUB~ҦU!nL!g$|]1b2Ʌ"O'&?V§ kϜkykp'-Kgs` ^'&+$TGg6CRL.į`؅P<ާ))}|*HB%yn\!L'U露vʙi-֛AHx 6T3R()ޤ5"CQ eyu[n$P"*t 1[4 NM^%Rc!(Z)Co+DtUHy _ӟKW68_2 }p/bvݣ\?í+`Aq6 6i6Z8EbѴ귄[W[3V?un3Gvf^>Mj:gE}8ǘE(oߞ 8907jjtf;M0? Y|Zq /+$F`T>:' JȄ֘][POM% ?ґMƤK{A?+hZ?w_w' *U4y|}ֶ[#@ܫi9&6[A{!Yʕϑ2x_"n9ܙ~)){Tc:>>,ח^}wDݕxq E<RDKeVirҿ1?H,,Q nd3wL364hR_bSD] wnrX0Z)Ѵ,YZ=%IL~j\Ina.kE:\$5{ySF617b_ՂJO8b3zUkP޺S[}CP1'JDn181F kbat폦 9zޗkǃ(:<{1ԋfX܄У_r-̦ň$%MQ03:`MN13N߬**PsS)u]wJuİ(.뢠H\M«y׌vAkEfyB:7 4o7N;=NDq5:ŧxL~iI|M›g, +>x!&iR4{\M%':># XfMmOTSXhQ~ ޅ Y JBf^{0cCl9 ŤO20µFkK9>Iaz ޯf{ {Жd?D=ْjATaZF7\ 8g*;wѲ4;fǢ#v2#ndWICzvb} o(NJJ5eִ\M:*Lï5kxV!֍+E Ƈ|ר`LhD`5 T6-+G^[&/ad|1ơq4ib'О>$F@飍u9{ ^Rvh-A$ o_8 nx43kHy@uO/8xʃ0Cl?_{ܧUѬ.UЩ麴3ZvK$.6*Y4`ek0cE I"/Y}ZOE:L nկ@=Lˇ$$F1luնhĉ~yq#qda6-K&m .d%[(ْ镟^|m{;d|| ,92wTB7Cc}ڙx~8Ygz/uH9%K{Εxa]R]XkSY + ?WMxo_RYq[._&o/$ۅlisi֨kDZ>uO2!78r?ܱAxI\i,=Ϻ>jȮBl{fSUU6|StUom MC<VLa{e-˂r |ch5xJ]2]1FIƘ* tO.3#ho:!ԃʟq 0ΦF4bR ާe_6GNU7Mw, 8Hx'NC39etۍjNiwͤ!%B9_ s5sœ &5~U?RU='rR56Ba}A?5,W5z54qDXFzÌ+'A{yn|f}&ۍhp F%51mܨvWוMF&BȾJ֋b˟/X4H)gxc*h;!)ajfor!C|Xx }qn@H|fhKO\!jMTY<W2npK~nJA6}FdrRN!#'+b_2䛛w.ZM94#hc&(zkʂۣl!Ya.q%cj뷧In ݘGSKa\,;Zkj/xMB[0W&))i|(g|u==Ukj8c>H{˓ބ=+lFEQ߁+ܑ9#;1m8^آ Ds7@߹~L˔~/ b@:SlaH j'8ܐ_[:I*Ay{y Jx_BdȉCp"$>tC3l2U)c!X[;ȳ-Z\?>44|)KHJmxܱdOdu X7(' wTLg7ڭVPf~gfV?Ѫ[P@c)$Qe&V~?QAtfbњ1Hq 9"z[OP]ҝ/BpW{ZS4pLp"64#?(xzJvW> uJO%Ny+a |G"mQsQȅhT>Y"m$8UEDnETvl߸OTOw*>Ǘ*˲AٞL*Ki+u(Ksh$Z$!?F7Yv }`YnizA*Lg*Xzi6kX29Dvy֜zDMW>QnVcFylSC=fI Q 8$/a)W 2$/#Q[v+/zI5WEC :Uų-1UMF:``Qs vTFa:1BWop'cMRX%?`BsCܕP@sG(g~M "jg!/n5_18Cg3HڰN.&M& ᛜHԃx"i}סl:u&-=R#8=mEH[])q!(HpMar2Wta<9(4542m I[gX${XZ}@ WolȢawI|`Nd;LS:ﵣ)_Nӣm!ۂj)eh3:N2I{师3 \E~t7MqS+cнmDc +7_5vOnVc !2iň*%uҘ΍OnnLUo{+P)5pp:һ{I-y 3XE*/E.M]<[7 }C` ݘQ.E4s;y"r t]%!lxOZK-hy6K/4B>1<_4azʺ=tŠeMNB,a}Dd|Px c全{aʖ~#ޫ8uqF8۝5"sx|P~ &N^P0YF3@]^EAL_KoFnmhR% $ܪT=&&q/`qt~ (oKShf[~`cyqDxvKG۲R[-?QNMSљ< | N)o~!)l6-R$?Jwb4|x 씶D3ۄ{jjg sWs;!&JDUr𰘉 @5(#Y䵯GBswpoVgpx#tGb:cْd-ylE0h*Fd]AL-Wv)C.Wrz~Lh)ᨋť8ȪT1P7 r`=\[$)!Q†KY V)v&.?:Oѱ}4ϑ|r@/9$*@c%2GQ.pRާhM{9jݣ:)((?*2]jf}q+UN)9'tj6)P?IPw[nѫ`u4V |;_d5}<5Sl#*S,tP̸ݏ jh̏IlG'Ƽk7ycC:x/XuxȢ|6Hk$Ba npboգ4U.K(FӢ Mj=I*f PO:YE1D;+A KCӳf JȐC]@L_U#w1sCӉ!?JWf_&}zVxA&6u&6;ڕ7K݃&RQ:%'͠6scD9uk5H_#@>|I}^*? ;ka^:S\N&BEe L/tﯓ9 <2*أ1Bvd#@"Qy yri!߇> F5%x6k r|AfxR ?)gj{naTԉGGX}ngg'UHʡd-u\=ZN2`Z<8ד1x: <\]q#M$tx'Ք*`~#h\U,`@lySdMt iDp&i)% [ TNȲ.o߹L.i_㜲~ fqHg=c]Qb+C#ܙ|~voLouvab9ExSipB0C[:uFCdk+whs3tImlZ~C/=L|z~fds;/@͖P F8BRJ[]3b1XAMҥ16%͐3:ގS2d59BN=%9C&d+JY^N6a5QwφG ;Mb"H1[ <7dW#2H% =1_DçDGڠxI"![Hb|9%`5c߶,ѩ1-"U);&(创vcAn&mc2 s3Pν3}3\-; 5=dP lY>cƥnӜ(_ dkAݘtpa JyC+;4\,Ÿݙ\-`cfkfs$<ڗ貽?|B T@ Ry/Ab/n-d"1{sԴؚ bJ#O(j!=2kfq/~ִ1%۫ I`7T@Ʃnel= $Ϧr\pon;AϪl'a.GW !-T` rv*2ڋp@q "`0 =[{}aB9,-ЉGUli( u\'}Qw3591ԧX|!v7hy ٌ}H6\q/u'zLn3ᰣ@xMږqxˁ7KUƐ|ϖ/A Z>NX=^=NI ,th@b FD1<]҂Tð)D% uY{Tݼnb%#\|Wꂢf' u@0;68N\nbN.>,/[6\0eMKp0{LjWBNV_ϫ+Υ#PpW+w0}Nd6K &j3##?L/ea?7b'"-dhV"unاgnPbe1ԚBZv= _G"'=o߃"mZ_9]/,M( eΘ0g yB *&`Sc§*Ok&^1[%:\t=/[LrR2ޗrP*;>[ޘMD<ʼnN#n&Ŧ*+5zz~/ WyQG"F?dGrW _5.2qL uv7^(7٠cA1xxʈ#ZEiUyePp$@u<޼At(BgfƸ ]ÉW;!L"*g3&jEls8j7lLʶHĺJ-%;YZguGBr욍U\S9עn>pw"@YXy}<%{6Y Q_{;*Fg\cUf=GUY@ &rTt{KrTVT΁"#]w~]*||kj\5l< Z]_(Mdq?F"* )H12+6C^KDo}q8sI,t&"^R/G~E# ɸqa&OD@Ŏ\#S9PT0IBt9:KΞՏay 1~R@$3fqkPDhGS_k&b3LEkTb!rQX@ұm b)&ϼQD.drݔxBWQ T}"{rjpGB9^H2GlY͎Ӌ"AŴP|Уwa4@Gլ$tz]8isR@t/cJVmĠMP g2,SJq` זȊOy3OWBNX!Jr$=?\c:xmχjbn3E DIn&r:_1B!' +Lnhv-u'[e.@~ovUG^>іeg[ #OELU{93wkhU_Jjs6sPV4JJ@da7z0'?gϑG>/8%b=;*|W|;^ ϙ]t8 aYj53KϨqX~p!h Fgj6..KmmF">F(Ԉd4%oZE/4foՃiCzvJjwb߽4-y;Tzy3ͅ`߉42j5O{ ƽ#^⭃\}y#gqѪ23Oox"?RƔo>{&(ru0j}[oTQBznSRH٧2o m@OgY׫7F݇`Gc;׵hAA*ϠVw]OB9,oP˥{4of/qhZ&o&L[tF#@pqDdnbw6r&RҬ .*1iW 0;tH@eUMl~ia+8COWa7Vz!theAWCwAVrhX֢ c1TPݹy8hsH|Z~mw |ԏhģ;F"ݪփ۱y^ Fː`mѸaj!f)˗JMVQD*0iL-k Ek)v o<ּ[܁My=Y3w< L 1' R5`R{> BOJW$d1#kOT{DEIPYD8W?WWiY+n2Gs2yh)5uw^SVXK v*b7!Ar{hsYZՄID2֔%tT{5m-OLFg w( ۓ+/ؾ3)+r)^!til" uݞ@IOjC #oZuT^woԘ:Ns~j,~_*N>4n.paf?}JYPdRcP$(d/ |a{fqC~-^@|YEM}w!x mk)Ctn3wrr6nkuRdm>Q*|Z`Kۜ5HX뙦"'ꖻg6.ZmEj80p'Ŭ^4:M:%Aų\qH 5 "KFjvH[>ΰyb֢.k$4"سO }upkX0NACkl9ֶ"XP ~p9$n⎱'WP{gԡȽQ#mn8XuFA&lx3-%m1 e+-A QjlVv@e\gtE4 #`.1 xy՞-sO91vA)[` 5}+'{7ͥW0``N%Q˪5h*vYu6wB3Ҙ[C8T&@\q:hR0yJh;:Rc4H.WgwaS @^Қ\rO%ZU$_%M 9.= !2  z1 Fnu4]~_{"t AOѿp 6}pgLP_ 6 XI7Kc_/'bXEƮU3 }bPSbDZO8h?'pF#VڗN񺷪߉B): 4 <v-䧿D/`k&d'u4# K#E؁ )eExH7 oǭO hѿ_{ dnݟt$))%)c7ai;xƘFlvU$ *qZ} P:-T2Dϭlb}| nRH o\)÷ѓ핣Bl^>D[4a dx-˓G(϶)>v![ŭzLZTd~$SoB6-߿b?ɋ@,J5OZ)+{4vk"דs-LYO+9ғ ע![1wiK])JF'J\8e'&Naˊ[@"Y´<ߕa u}N^g%z$4DVƚ.Lq d{,& |_=/5XDL nn秝bꑂ/۵4&y3U=#2<^*/pcZ]9-cSJٞUj2يM2,#/er99ƚgGAd[U)ȝ`DBv0I:KԅZ٦.պ"/*Iw'(OXRTb.RQvdFEuGc!R{IHdGtA:ݕ3…d>'7tTCp)!>di"ZQ7%")rNZei ?obxɃR4|^=$+^MwF),8G\B~-P %piRjX-jOYkOQl[.i1<,xt lL)m+o)o;oY/.34)647UxEkJ2|M:F4&L}hv evNr*UctWkb`yCxM1ԙ|jsV!5q홢`{vJ.Ҍ-HZ5D6N3畗0LSZ{\qk \iIp洍a'r Q}]Y4f\cAB[>poWxT'UgZv(^ ^~C-e*W?{GiA=Ԓݵ4/cZ퇽3ݨaqS#?BgZ釶o Mhy[|vn*Oٻң,b/ t#4v["t65֡f}IKUR< s̟v,-lՇ Ĝ9$ ͱ)e>BDőF c\KG;Y?o/x %Ҁs['J^Lhw|e^Oي%$uap,5iH$à5ڎƴk;JB(idͪ͠GSĢMQ6LEPhg]]vŃC/9- U;E `| *T6]] Pɠv]N$;ym7'~%t8`ҁLQLN`|p@@-\|-)o{|AJp&(H[L9hCאVUxa  ]5ȕ ~1EMnX)zF0GQݣɄ;{!!r-4QlA& vꊭ^$oܼӚ 87FoHFNe {lMSJ) @8]U33RڣVXsS^k8&v OdN U-NYѦQ&%Fs:.׷i_"cL|s4ecaUFn]5856qk?)`c7*݉!ҵ<8:]C^,Q !BeQy<'F,2yX灻z;-oA*c P/Kڋ@:P޿wz XZ(YjCc ~EΥF`7! 3[L0. WB)~h))GM5 xyic+>}8O m~H F,QPGDA`&0-Ј2U/M~&)ry_6 4;gB1JFZ7k-,6~)Ҋ?q_>]AaHB θj{e֥qTXmJXYvnIxY3tޖ6N`FɒMdҼpw]FGtp,;"tRP}GSqP`p*A_$aaL# ?cd[چJ^?O4 -FE5f'؋2&Rk\acsa}G6IΩo3sl!W \t)f/|{W!É]3{EJsR%,baNEUCCDx2A:2ȃDh(e>Ao.[ۛ!m'đ/9K_%CmCFmF(޾l0ۀ9Czoj*?}:oIw;0Am Hiz-˼ -NBe~+-[~ vP, 7RXž֙zzG '{N㴱mIl1rCGkOdZbh'Wp"w%+ ?9[r[6%ZJN|RgN2qɻCDF:8rzYZ8J!J/M#U^P /M˛u2#N"W޻awy&R=}*AiQꢒ\U_6,z=)G3L@5)lG!X\Là #BHF|y`6rdQylj?±)Փy8eHkoAoDcR3ӝ}]Ku5)>QnjR3Iz_7q^L۷r'cYoa!|PJJf'# bff MO(|vl \U-}CHGR"8J %5j{Es?Qc(Syrvaw 0tzpPXIFdᑐxF(gq4"BѢ$"y-fp4M "f]mKy^JRrgVX*oFI8k|} o(ΊVL-+ 6j@c fxw+A (h\ǵ\-&% y>@j3opSdՀA'*LQ)%o-ڙNs?Ƀg%;"%5G4($󆒟u ub˕w<;૶lnx=JU`]K=Ӫ5 bÏWՄ٘K336yWQo۬8̺Z3;оd$qW!%c`}/Z$RcK-zퟎb]~v| ױrQ~$4ջ1pQVW|.Mu M^4v=AnOjU qu/+Q>O-1|MfܧcޖĢFKs|pD;rmPZwM#T%C413ƣqƼ%<nb=y&p^0ҸE܎,':9nC,VmMW@$ 7'Ew~Q#{PϏM\V#)'c]җi#2`l.U6$afنN!0}XXB%{Z's4F|n{w 0`{j˅jQ[ply$2Bt21`:\=bW&[; U'a <cG~ hCsVxq(s!vXX"{TZ/n\{uSx(m:|eơU[I(ڬjl1e&ĎК"ɈễQ&L +m.{c'h_W}7/y n5 ?'gpڸv"DUU"~ř㞸 [=0Oĉ4#Q#^%T^ ?pWV]K.kU:%NҢuǷt0W 'P 2tqo00DWO@hαWLq!.K_9r&tx9D٤LyH6R׺`u]Hm;D$f?Rҁ( ́v+4y9:?hZGF>)-k%te_zrr̻4ɸӝ5r&z\$~"GGTze4'_Z@q`˹ Ѩ@R/jJB@sZ>RB=|F\zVh#CSCXc Ec=ok䳒#''P@4 0Rm|cdz, ɤqX\4`z)8#$K)x`L6{8 '6Pĕ`n+V2@7W1p6ݨ~3E 44cϥTy!Kd2Vhth&nb"'!q,+++g@ ,94R5P$ a̢}v-& ,w֌S8O|N3ŗ~s5VQ4GU̽o篁-1q_@{}yHG~;f "35pdoyd!koqxhMZ-. 1?B-mC'ƍCN%g\CߦZig:o R` J)]pt 9w*Y!=s^(2h8Fo^x!> 4s!5._zb Nǭ`l1)cC9:I~5w1-]E'o۷dRN[A^]{/pR4PQ%@m;Vfri>IVsjp 6~  x6MLjV2Pi+%NW:x[ݥM׃+iH-Y0tR1z-錱̑#V^ ni&5;̍,8{slGIU74C!6{yt^K? j5>ֽq%f(Y9zM$9'}fJUU,H ۔( y6r"&ο4xsdg^cI?Y~ -śQ@%ؘק/s}tlV>S#ul@r4\DT/۰³.VKeFX\pDn m%UV}Pp |y9҉1XV|}m$荁2ԄjQmo<I*A^5eqoaVf(;ỉRՇ_ݙp8'.ϾKMٗ;muoX)`i4%t&G̟xH7͜"1y-N-`s#~ t4U+IrT< `+\|k?V&5ŒesL=sAY ž(>.*k)r[l,c E=jSQ@+ OutOC =D6%mCykL J;3㰽/r̅P ƳwlhaMX K fu{MmZ)? w cD!m2ݸjA3 Ϛ9SOH'OuӧA܏ zNuDYgVuYFP>PV+GK(m*S p Ъ,+kLcziiS H밗nipCߥ@jd펪Ვx~: b#%qliŲԏeWu6/"ZTW({/2\e  ,idh9֟ڢ^ywlɲ(%IA@p%9ؗs0vkh*.:8ۚP QS_1 ʏ R㡚uWJ(G|>ÊzW.^tµ4(C#U?N̟ 8-NÓ1I^ xVCF;4C؇O0쓴:ٯ#բ?^a˽J.Ϥ"b3s 5I,v<S_H@ͬv%I|KkIQ~ U J; Jdi{;u`2jj8 {5Փ@L{M98 [?0|~A-w _6-ll޺xSrQkҵ7I y$?_3þN*(4>wTs, o mr-x*̿al %oBOMP_5lRUIp'8ymF Ԃ.Ē:KWz_:23b_W;PV'+ v Xf?vrV~*uO).KM܏VA ty!H01K$`ߕByS/ٵ;!"qE?ai/$j(Tu.y$ G"r}j5ҀVvQMhd%1PǧpfQӊlX43{ͣ@soc0܏+EI dO)PngvCZk:TGD[h!xg[5,^u3מ? ;Q$i:JV*;CiH.R[TZ˲CL>dW4m5K5 HN #Iӽ-Uy:{fA=$_E]VXd0og՝;}Thd,&DSYߢ"g" @ԽL6]OmA-,:넍 eO#:|DFxv[JQ}~2<,Vhhu bB`3~N&z,b¬xC%+Lł-Jg juyi"ŭC8D~v_$Pٺ q20(= g$~3(,?ޘ^DIc{tF ! QH1OμQyD9*_tLon1uq(YF,n細e@a;gO![ UMP\9|*!<-ќ;L\#BS} h5Ӗ?GD h92i =gh|y2 'ƜbPnv0˽g;:MwCzxEL^L[(eɾ)+"<|gSó^d 8<1@H>VO9a]ɩ;]/L2yh{ #tZK5W PhUA:ώ/|o~d;]nւ.%yE1<APx(̠Tp5QT-E Lڢ;o_ 5@H-;N)YH/c!e:e!¥;r$m! I,ꃋ0/T"r<` kؠ$ĵI5Qk26Ht\ptf18Zu4m9q%ZsyMLsd[ .0Q(W5P }?C]:a4UʔΜ4S@;e&/ȖYei&HtroK7 Ƞ!"LQW49eSH2?-]JYNϨo )1 վ]ZZѹñ~2K+'H?杅`&7Xp%{gH-|9>Rs%)mdQZ%-QpLWkf0֡O穨zH%85o^ٳ-nI;.`}6ߍUWmL K=wK8v"'4iN Ud›c?m9>+鶼/d ٷݿlZ y䘷sk55r7xXׯ)Eoܯ}?/<҄AENdu5:wlKK1XEv2oɉVJwt+᲍|yd} ]]3Ew"1&cUzIRSD ET݄4qM_A)Ut<ᆀ!`[nldYT4:mbn#5&Y'ؿH wmAhO[۹pYʮ4PE6h{9] QDYs1IaJ3gr \L͵Nx`בlUDڧ`ePzЦ5} 5T aK%iP5Jr\9LJ ~!]4sO VM>||Uڦi|/o`/IӻKEϷvZl13͞wqBWL%STb[ [Ӏ=ICZRt0~,F"b7 _B^_|\v/*`<%gMP(:ýG|R"mb9 =)-r~At4{x>qe?oLl0Ѣ ws/3ڄ.q]F rr K^8\Sךn<_PU^ &q^f(#5f: ƱiHpK?P:Dל=ZTJJ6Y\n;8蓭;^4^ Ox=RRmqOC:࣑ueܨBheVeׂR~`K3h؈Ks6æ'VxmGW}ZF0%]/JOv~|R[ÕN}bxsgmX}P0pKb3$,t1(MM8hK?9I,+ j9497ofʓ@]&Zx櫿Z䇴sRD$v!p (pxQ`*[K lEE|ՠ 2{+nZ!ڎ_G¿m>@{ T۸4,qo5^9 (@== fDMWeۦR[Oݖ2o#ke4%,^+3 "g97«s4!,iI s$ېvʾd6Mh,yZWEⓒ4#/FvL}ӗxԄm@Kb| Ba`*?u$FWe.ۺWTqȆnjkdKTTFaGi FR=sH*t+ @Ctlj21,'BWS_K<76E)o<H՞T{FH!QO:tوFKa1k pyV!1Hu3XyX}k#SF֬DxȂ :4_U=^Di\ʉkb3*-xuN+of=2kLhiK{? )f茒I{v0.'!aI3}.u[n W? Jdp]ߛM."Lm_:dq?Z>wȗ`[]6V-䗁OpiI3cF^IԡU9%+mPda] N# 2==9%-Ц0u}SDeFHOwwe1Xn9X{*NȒcЍi-)FeT_Ɗq+D?]GVhI&c&Q\t#U"ѹ$ όLn_Z"~[蹦"|O]Y1";sr_7˭[DrOꥎRD0UݎR1-tA6 @W(qMC(dlܫ.)e9 HyػAPlX٘>]9iӵvxlK \BʣnʬYy)8}&p1/qoܪD%#:iiSJ*Is>UjMIat&to޺M߁j2My[ Z+s2x2yA,C3A'gM!,8X! ?^gh)h'K0O_DnHC-N> 禥2{q"CU*ES*2uCy]2q6 uaRj&phl?'' BL6`29(rQ˦kvq*,P$]Aym2pQeF\xM{ `XtaroX8EH40??,`V]qJ[g|2l~)1KCiV;K7 6i|n$p%66{J&SUaJ/NP`Yg8iQh馩:jqcm' Bo=DKMqȺ`W rVʃ1ze눉5@Lz'in7+(1WdyuQm,"o!B!n Gh,hQgH[wFJP[rԩ\8dX:RfG'm X4qvQqYLБv{0 iX: 2eˁq u5&-61[rIbzFbÔo=z/kB0uͺh('*iK&Y$aHhROFZm ?_c~M 7)ƟTNK4B(ES]7:ŴdsuC8lAfyb꟦*=SZkmY1D3/9q3xHA5h?qhp xZQbtē?.AUkƘbw 謓~E"Y~CSCXn}N?SG'iHMMjj*IViNeNʤp.7!{)6]its}R0`APu)OJ@ηُt kmۦoI赒9hrIDcƕ|nHuiph?M4K~jzEs4Π 12M\hR?P4^V;uSzn j/c aВߝ6TnPwk]rCZESP"pDTGqz4>Hr ੑgH,^ l,0G~df7̑.Vy>[h C3[R~uLQ3f,(]*@z//,z5nbU6%239Q{➖sbTr7y5Jx~J}[T|[R.80OlW%%IcAJ%O07^c$tq%=P:Nkl=K+\3&^vcsz QφIS:1ɪN)5wYO;!>!`킨l#o]JWf?+IJ;1% OBQ+@ iN?nD4(P R™SK.]n8 ;ڦC'G$61ZmI;0w)tv\CjKB}1aƸu=t,s7=/vuXEB0 J3E0wsS{__q7WvaGֳRH׸$ؙ$[6ZѠf/li-$ c&q^,<00'8-?L& ]ש2TbE6N ; %'8$SLʏ׮ڡ8ήIg^XGro4 We͏Û$="!qWKV*6s#U7 짆efKV{ŵyߏy/5<#ǢXxջ,3 K2LSh$:p^Zy'DRf9`f./v"sBu?#[)($'MAOl1VU+Xpxj#CZZ.Nk4@m|=r5\9N<7ºJsyD\.Wǖ 3[~nBU=ߦrf#uyR"Q6-*69^0>O) RNsGg9 W &:Rn}ۺ@=zgS|V1yG|ș|_ߕvT~=JV38i~Bc=qߺIἍ:-Ɔ*ZLS&찯S4uD9v%CčqGEm(U}4R/p{)"aCv8u1ĸM25lRզ]~Xܭ9|8ElsMcSaq 4xCES*tcR9ŲF kӐAH ҢFU^26OܬÂQ3Ѩtn'Q }:hL);+e ^u$(WQn7DC$fn/"'" _+֫OzKleuEc NF@i[H S}Q'C4xKr|S)b5-cUE^ܵ0RUR(I_μȲ뀅QY]Sx,#tW47JGP+6;]Gd\p#0gT48+Bćֳ:M$ҫGԪ h:a#Y^bpkQ;"=t g zso))4憿[ǎI Up&[?V66qj{s4~]Qf/` ۍNd!sq-;JO*LQQYşFFdsu\IqvFM7ALy`v[0䱢y)( 9Doۥ%.{S(ϧB-9c;fkKlE=ʤ) Py%jS[%+o/U"kg=4b2>:wƍp2VRF@pl<ŸgmUCf|(Z1n&"Džrπpz:/d,a-lk ]Uj%MR^ÖˈMD.zLrҷB~f01CR5'<5߀ۜӍ^ut'%x{ =KI9GY/+t Tm]%V[8S;kE՚IS9h,qպr=549en^K= =">e_k@5RZAB=R5d{@e~o1_h'ܓoh!a_ g&T4@&Gm^K'%UpѼV'Y߃ xK/S/3(45M^6\B+в3JQɟYƣ;1fpNmωNa.@rr3ϯ. ?oFYHѤ7w(UU%iy%4}𪈉;:YKqB< PM<аnm8bHUuxqX qwmϠ'qJzxp79l;9b-.=;CHODZ)R)V zEr\zu:^mxfWna]"C3 ćd/xC %efMx6㬽 iRU ]=\|ȶ|]ƨa@CA&OA/5.sA0㩧ѷys ,&B𜠳Bۡ*8oaI쬩(ѓs]٘ýBi7;&+2r>P]"g5@\/(?qy&$R,]^_/c?~dZ./n)j WVz%vL6"hS_2ע2"l[;)#~S<< 6rO姱>>Ѐg=eQf6d/S ;>hykZl{j~$:xzDñCH ܤ݅LWM 5L%VS$\QpA f}3,SsH,( 5hX_P4znPp&OwoYcbhϤE>4|47#}'1v;űhŶfhk7-7?^)RK]]cIU(UF'hZS"ٺج}1x btEf +3*ln69G9yjAq-urԢK%*W&Gmb'$֊6xA84?=(R9s? mR ?é攠6Uia(!(5偌Ns8qMgpMR/7(T ת2-B[yXġ 0'VN"5Sz'ϡ3/:vk<NT'@-㗼xq\Q!2g:qlyOLNWK|u׎ңgbk D$ @㞗FVql^I룦2[t45rF̀a@-W@sn6Q 0 m;n{ֺTq?"dž|O/z3xtne L]66 ,/W^.WWKyRgƯf 3)KP,I|`?礭y#~d)Ƅ=RV<2J._c$vP::KU"7Xe$wM]$*@]׀G^QCDG^b{[:S=В;ܝϖjJFi moO 3|${mOh_yBsHl8]{!Wwȶgsm9e{"!,\H,CA|-DSj1ớ0y'ZB9"D*k @7mlј u݄Us4.꒢I!Tb]0[#nC:)=^8nfE(=Cb͍+tf~$YĿE7ЍǢ+Fsf$ KQp8Qrbaи&&pS\,vHX|58Y;rܡ KZOy55"Yz8(ÍQ?aoĸyM9s_&-Q]cFkBA'9Ks-&GL!E$إ΄6m*oUWs`:`&PksV.iQ8 W.T$a3lDFO[zd;X0M-qFr\hv]bNr"M#-*n9^?.T *Y1;P?7XG&K> VN-Qe)q&JJ4LY9eQ1I&U%jL-ɵE\{ U&v2|2ULβ߁aEc`e⏋pxB{{*k#D,PSx(U vU"=%f{xZj-Bj\2zu ~JJ+_LMˀJNBPנ^ݮҢA\ӯ iV:F8QP5=%qaעEh! ~6Z^5nŪd8`2'Ԑ1˗V-HQ癩Er$U,qAMo2e>.=Ef47:]bL9  Dz[y 05eWI7lSq(E&jhQdl+4Yt@2͉"\KK`u]jy/cO(}mu9:N4-hKѼ%du?d#)[ ܍*QD/EǴMh7z֝ƭN7e0Ҟ1&{_7V&Y54tN}F셕Rŵ.}FZ%4:Qju쬓Rejۉ yeu\0:Za/҂*o-DC-vj ,YPCȓ eО|odI>[ )ez񢲣}Pgl .VVJ q{*F`,%p2,S;{ mELsqj.9VEf4 }K@RN5VZEk@s$܄w$LmhJ}饢!ވdH&C0go̱4"bu\Y*]`pY)8]Vsɺ?g}![eYG<_qO奠WF7Կ8g n~$/$67xЪElM3l17=1T!(Ot~i*!_iWWM;,__,5%li7=gfMI}VzU NQIʣ-$CGS 5S‚FIT 3@@Da3k I$aV3>OKI: ާÊqxh*%>*[B9] ʑ2xuTM xyelh=sL[giiid,o`[8l:eUNJa39d$Yusޗ%oK V/I[Cx"s<)y}DOD:Sz-:K!u0 lW}чR qDŢJ>p* ߍm^Cec ,KGWG#{ OȌcgȶyO'o@HUaˡꓥ&ϭ1s5Q ng쯰` l" )~ginV:S`>q.'.$}-h݁A4*P}IPJHD;PafF<&me[wN]h~[ͣ MyiF.V ^C6j$9WԎK忛TO)!NCt8a,Q$Txp^,fXBߙma,`=p+96(5Tʜu}vG0}Z>utfeSmG7c;i5}U(-oךA0tL $4rn}ϯgHUt< *m&+ \ʀ̢?švg^'QGyGEZa7kUqtr=OÊA9Btl9Z{FmUB^Ֆ>`NuL~-0%!aYI-8*+L_ g$xd*qb`Xij8'J{Hm}Dk(Dy4SW';1h+HoœgЀ%-GYj9)ӿW(ΩR ;Ѵ Dŭq6:L S) C;Ȯs|]\siwNr>g.;h/4SAbN}aaK?%9HF3G ?^iſ=B > u[|QYmTo9.[*ڀq40

{PvXTU?ڞ{s&RL qs7Be"DzCV/(]. M26 mM1GƒhFpHaTw&|ZW {OSbHVtp蟻h%z::ٕlj̴9 >5vzqy E[-¸][d2VC!]} E"8GS9/ߛվ=[³ d݋lႹ~@?HMmugNn ji@ pϒ{´w@"Y OzWU[K\j꣤^ʏ٬:xGxIyh@N mz{@V׮ Q?BAʬQ!i"l~sQ>}%|8<%V6'p`Q U40+RKt@ GjoMj=0(ߪe7( ّY,% c%JVVll.^mb xR\ޟvBimF [nD fdŚk< +_H1 b Eڡ$i{*x#'_صq+E_UI@?ȇiߣJrZ *ƀ˰)tW-} _'53wqдr? 'jHW^/|92|MEcW%+tBg@FuG6{,i|O7)_EP}^]@c\HfѪ裦R{ըVuTZ0khU.p߮ 䫻ƖڰIݕ=gGp+ 5w7N v%PfJUir0 ׉ N:ϿgZ#R{7t>PwI '_!^If(H@3S`4Ttِe97C 3'l_/-:3`LXM5/D@cǗ |ʫf<a &DnKO&:8L=Dӧ 8w dS~MFʼnjIs&Cc]N'iƛGnh;ؐ9!hn4p_%ʢ:9~F |?i Y;}wgbj*\ FI_: V?;dkl#ї/¥e 3O ¤^T?;T!(?Qa^Ui Vfɒ#!\"zV{xk~ҮokQ~\O^.zOS)u0&C7`< 6^?M%hl |8{5(nalk}&%<$'a@>:ZT~q͗m|aNR*_) fv=, Y3TڞmwΛ@&:Iiܐ[s)6-@ř|aEhǘ\#Cq8dX֠z |Oӵvqo>`#n8OZzh Km_4gtq+-n7O}ZIGuc4});m_:2LS5W\Kӡ$C9`$ ¦K_{B}?Yjʈ: HK4v[EhSI0i֢{/;"x+b#QCIQc?oK :*ok-|X!Oyjld/m/9?ٚš`D^NX*;MgSOOqSaC|;mJZ ?WU7fA5z1(gύGMX0T(cx nl>d|]5!ӄSO-7dGs Ӫp.<#QT玓mGNSzݕZYal. ̬N woC)%A)ȈV`6Kem&&.f GW}@x&E}(dʆLf^ޑT4 *lՂ ;w-Dޑjj i $UX9~.D|H?Œ K+6T+{09gۃֻA O#Va&;[kq,e!P+a BYHYAp/cW]SfwlP8DDƓ׶sE=gM +G wȱS ǖ|rfqPD.&]ʂ'm~wgJ G4ہ4_yvr ;eXhg`ECo>6kWX=ZTq-#3Toʘw΀fQye +7rIzP:yRʫŠ]<7:u`ɼ1&HLp23pY<(PV|`Xds"t­H!G7zA2.g{'biYUry=PJE!lo4a-IA|@;apG{2U++>ȣhx f˅BgPcY0x~3}vb0A_ /Uslm"|4E>XZ.c9cļPbO`Se2R yeYC'zsY޵)8逶3Q,*݋i a -aMj k؁yW^$'UX{v4BC Hg/z5xx~ b+s_ލFMEp7rÏ>8{)?w$nǷ, St15Ȑ lœp@͙:zh:>sƜCYS-OE^iLj*@)_T$h&7CGg[8?v)~pЛٙ<27dtۘP~GP\yTZ<潤 lTmʈv1r;O>& E6M<)}:)Zk $&7{8T'?KB65'qc 5H|R{M$m ]:ܺgT$iy#=9jWg[ؘ_I2I$'O7HhI+9%>rmAtl0;{In79DѐO'wTj2 τ_sZZg>%$lXlWv/_* ~D6()B l⣴?k3a[Dr .NqIY#d YߎcE0fF>rþ4§j@%1=k|4=8Qn's.9XR0jcv8,OI{6k l%{~hjb/,ܙr*ל RQUTDgba×9LoƃvQ&~bEǺ~Ջ 3N1 k) Lg5r&=rوPQ`y^vXw` |ee}S^Oq|+@v0/'CQJp"+Y^.JDRѵT +aakyJ4wV?<Ra D=_/ܰBwDyו# փvϬu-&:L91n"dAX#}el4r}uv {!|pB>d&t}[F%!aCL OӒ|/i~4 u$n ls l" `T'bo^_Gf&l]nPO%\x:Dֻg'Nd UBj0^i.! sD&F7AW N^'3ԅx΅g9$&xyuA5c'18` ѭMj Vhj= xcetnFiB%px"7lEwh)fB$ 6`N۹XmqM*M-4fٓ9fa3[aX'&D=*ҫj(3ܙnax%i_zDJWB]Mȶ^X![r`?LO5}! ބJm^G=Y9f5`be,_ )"dsY;̯xp|08SCṋόZ &egDVbA dc uvP',"8p8Zro *QȚttD(zY2q6.;w4݉0MvJyf'¬\5-9\W_ǃΓvB Uj {w4Ύ"g%B.60w3))H$D}\ϩFP]?ۨzM ޫgJXb#Jdeq퟼ ¼0 _>1HdQ+|!soiOm%ެe~Y*/F{.S&-㓦T-UXKE"fsFӒBf(5SCHi5P~?;@EZ妤hS@T=a]>mKğ"N^!qw4Y~W|Z E Topoud]#A36TG^J1,A;Y2"ńkHmXQmR)̊Sq{{Ƿc$߉{yLjʏ۲ߜe%7R;`E!R˴3,t)`r{6ˈL4 گm/S(wdI`#(?)h&r4J\l 4&=ok7[8`Wg;cS1ގLVe/(X#MQ@qV?r>o:"60QHtKsb{y33TDZ˓l_rmتB~xҽVHjC vt6em,O`d[hh9#.ZY+;v@w?XY U0xsʒ-j^RC%l I瑡{8DDשӉ(pָ$ ɚ{~332VPV*#*~x5*WCJ'&!L< ^d˹ʡU囚1b4Q$\سn!@l8"$쭛ʽqPDv ;\mI߅y]Q|f'9wj~-5Fb}Аh\[OrZ߫-'p(R jaY"'TaJCC(PHjܷg'"*S>2K4ye&+{:ij-ddO㖨;mCKß.CU!QCо ]}w!ke74v<jd^efhBиa4|N|iB#rL"sE1<+IXccKb1#h^ZXNE2c5QNCza^@: sC4{Qz r8(P.-d(zq|dmZ&KKpLDMXFia Q1_8Nv6) r7 pxyU_4QV*ÒqyC_kRЗ]h5;~ 'ᄼR'(nX~MyLPVIThdll=tpTaPF-'jI eiW^Px}?u# uZr8*zra볒d@^'vht|m쇧T!+jh^*(67H7JU)6d<?1pw#cXi'hlxNYt[x cw|(WϛǛzQ c5Kθ]E2z3K>wE(bNlgή' /9w'nA)l|ظ^ޘePگbX.UYp>nT fW1l>Q[L~G;}0s%`~O?ijI͎)6Wg2N8 (tM[KhFPeAA gJ9K]p(F=_^6#VVҶ>Kƫ۟s;< eϜ CTYHd .);8֎Cԛ3;W Io5Q&.F~6ӣf7%=!];lU6weOy_VAV ]BTz"o XA2lLR=[se`eVol E2w YWQb嬘w~\(,&xL +EI8}NΑ&'X9IΒxƂ,?DIh*9q8haVm>f(i^Z0"E&x\WwƹN pezg3T㵺I 2G} 7ᑳf^ʪU+^Ihz&:G<-VKiJ ~#7^6dx `QAER>nqt ]qS=#-:UTy0 dwFmSMuGF.'褙!O`5͓@36n`Xԝ vyqR&cU(SQV"ˣr鑼}ՓreyR g#&WDSL@y?Yp̚ vh's5M̩h@!+gT;SO<_rϧ_5c=MrMwU+!Wr lƧ#\0|$C㝊fX$%oc$OYte&\x] nqUSAGWbRdL͙m9`DEJ7Iw2Nv}Fc<;9DxDeE. VU_rgpF:_ZƑzHH$l:oB\c &ۄٕo$0cTpCVs<ɯ8LYP٫ѣC<`o^z<:F+ K@eoc>YXOA?$3Svtq JW_l$VFmE nj-Qn=;Ȭ SwDOt_,^=H5MIG۔ ,k0a8}$g f3S+ 4=#\O@FW(`z.Ҡ$W0n:}p`6Ui_D2]93G۰9Qpӏx] %ZL.|eϵN{ „<=rA-t֋B$OqD<3&+B/Dؖ7RVVroq˴ ըB30׼_)KPD|sZ{&t~:jGw7{GJBY%27ۊg]FW{c8Ig?Sh<}YN8''ȃ3tJg١5#sx]$R);&PD''!JTvɪJU:n-T XVLs\) DP\: !0S>uTҎKp`L@ġ3z|a8Tpt< ׸k$,Kfؽ:U Pde=tDužH,?:8^rd<*T}~S:3ib%J!>񬾎&]شmMcX,[ f n1kAi5/ |zByY]1 ArTGE$2/c"2Ӹn DWkMb~@79Y_%擄δj#7W_AR2^F0KN/QRPULKZb3r\&;Uv8ZifVUyLVI¤xBש!ɍe}ߥZ"Mt,Y@|Pd rR{tH%*]U' 'INOEiYX"' W}zЙlkbdꢨ%9YpIݲMB鯫ӄ-CF._k DER2 ;4v\Vfi}ÖT 2C5H辭2|>Ͱ)t҂2%!v0 n`)J=x33T\ P$"'/*JG튲 $zV{+wch,X[ <բø^ p N-Zv}܄e y4u!MaP~]ͮzVBt=eqN믻dLgCǻ̎gP`=VfIOՖ44w`JJ~K) "EU Z3u<Qcv!Sϵ/NR)Jӽ;`3Nra3a#m(G% >KuHv6, I`੅3ʣUGq?zxջ &\rjc嫽cF!EԒ({u?ݍ'|N}u;)Im&γZ-7¿oFi:)#Ǽ5QT _bQڙ@6֌Wy])uvP|1V<j[\W,lt|V-؎R2>XXa',_'VAv98z &UTv¶om-FAPM"1d+}B°d*pF&m;oCe`DP (NR>6{[sW>Q꒥v.3="AUc2)!on vo9TBZȜ%"RӃvbH-#dNoTQGWT1Mkf{,_rrF%WI(.,ܹa◛Mh!R;Qt5gXW+/j xXEHUuۉ2sP՚u4g%"!Ʀ,4 4\Y!DdԬbuc 38hLV9- %p8ex5m^s.ME>|l‰tKyt{tIӽY7Fwij>P">l:"b/sTF㥋/U7= Hd,DЧr޳3ÝBP%yK/~UılvņWi(=Ԑd*@ї4|!Y}RibtzY<\F/?y6І $};HGgfl?WuLjT3fTa*{vMa"@Zx8;+Xk7羓ab`rKԭ 39~;en zi~k5#iGb62 .*|VC_DžtH0k{7㎐9VY܏I1A%V5B6h jpG-ɕ>Y݉cdD;܄cbQoχΏXpWæ5_pRi\yƲ l{9tWg Sܘhc#kkkų!"βn8 WLeĢ5LqHGX('O΀Ѓ@wvqG@nBbˊ. Ye=ʹP]'@N(BzP3ycX %'e.Ȍ3=U | vz nW0{jIC*t8 ʴkbmXU xY֚~K^lfI}PU` 65!1D3! [(m4PtwD3UtJ:H=djq(+>3ۢ&|mbpjhh(Fƾ_7j(L]>̴ _ 1zs?JEBH*?#[=Ϭ*}bG n@߳M-94 a.MiVt!sF}ȗtה+ݲ><8(/_ T)Rfz;` t3G{.}vy{uIVV~eE K1%__>WG|k ,U˜4֙ 褣);T1Ɠw~SA5*]M2zW=G液bGrAɁuE 'Icȷ,e[ԅgOi lzC7ڕي)z –o\,oXac!3*v)OB11t oW<ČiېNuɷ)N15VѢRT(_7y+u`g2sg^ (+yߵd${=:ITu.G~xdd j`]Pv. ]ͽ_hq*N_+0 Ǜ eZ9l%ߐQ(sŞg,}kiG(ϕYwjz dT N+)ܱ@RXC-u!^ *d(0jLQOWlz_UeT\nz:9ܷLqpw|# ^`N& T/Drw"ET;'xy“]jDj'^w@!T`Jw4ɷ)(M #w0 4â2,f[@e 92Q4;% c!n<䀺>+>Vo i@TH@r\&hJ ΂0Mi :5v- lr0}]mN+uKT@Yh&aY܂Em.^-v G&{`Mɓ7%}7l"W]NߏzbU^CnS!O?$[Jށ6pv@V'!7goWӚf!ǽ֚zeP+GWrjڒQK]79!W_.B]~; Dݧٮ2N IT*,8hR!'Mp+zVt# +}p_n fgcPg+D{,two'Mu9- quw&#Od9xAVnGħXZ+̔%#TjDЏeU, -#l-\uZ_~s(O KBͨlSDU! Z͖ӝ$f7tA*o>zFk"}# X gy ] þxNyACZZ97u,CoL;6  Ngn=$[4#(;P"@/VrV^^hNBla!<V?}-Gn28Ly*WfT1p3aX6<) \OX<+PF4B$};9HY3%h DغsL5Es J^yOOvԝbYיfTy- 먂ߺfNJ5#K(&~HmmD)#KÈ*ꯥF8]wTVRODUP蓿C[ZmIL PmWhn3)c~^qG<߇+^~C$:N啹|IkJ%AȻ3;`l)1C_&WJ,peMW 5$_[鲭RP-m9yw oTEDM6zξ5PvЈ&GxZ>nٶhS5;$Z bjի5 r7pS|x`1ٴaÅbQ-TO%Z~R"xto9}^vSaXy(=57Jk"$f?#4/K .,/,H]~?E~닪LJ䈙كy.S翮m)_^l"E mn2"PqXMM֥8L39'*>Q6$4Di!(c.0n%If:[:Hyh)JAþFDva1L]z[=II\=$An"ge : OZ\N> hʱYTjq)A[yЃ<݆u஛flB#Z{'bq2TY =IFW xk[+ރ>!ńl!kJ%Sd[r`O]UvB&%X=H`}%BM?y:s|IΖܠ6u&,c^% EmPx^Kjx GԨ]S4žN5& =\M"@}/`pԛ?+ FR41Ki1<=oQ_3K@WJ^4S); =h΂M!t?|3BA,YcȦ WQ"Nn3-_ҹOm?؉M,V }YNjAu;AC[r]e cJW%0P`l@oL;jGvrIhvՈ_sAZ{0h<ևǦBïbDt=X G /\.KhQ` QD@߇=6nAIms OԢ+=!vJOb;,4 nf[S}+fHZq!hɶNr/;/v7lbL鐄4u6; BԼyb֨ĥoFL7^f>5b"FPĎ xzİO>(#DK uw>vrJ]* OOQB17g3j4; =]$d,ْ7[1?ihK'{ +HAGZ5<_PshopMT \$H٤S_ʦUb}FOc HGIi ~D*/" |vKy ¿Kߦ37ʘSO\d2/Q0l1K TYf+1E@yQGp ke{E]_3v#n,V"1 }Da^3~ -d2+)΃t䎿߹ l v7/-Zju,!]A+D}]K(9zdzLP2WG|9?j]+ 3{*f?H6#-(64> Q&5?J_NOuK6m]0. 7`YV96Mڤ`,U T"8w$F7d>G :UO'&EɝWd5"_3SwqBw>i1IZ|6ت ZW˟f|ej W@šXGßp *oYVu|\]0^Ӓx,PBs`V&nE1r:G <~=s_ =W'mFrI^_MYOSk4gk?nnZѣu˷~Odyig "(C52ABWT  rǒ}gW# vD1 g2hIk+szAioK20M\av%fG,+g.)r|4!KbDgh!93/-.|J5R UxeQg/\6N5:>gym@hm2u)Jtwk[ q)ԑ8;czQJ[wrt& vJi诐UwQD)@\FIHQ]A2l(xX (Hd:13xh\ffkPFజ4(+@nU$! xOywӕejX3.cUεǽde)^0̋" #tC; mS9p H$Yx`W/2pXWnKx|/X{9ޒSE>lS Mq֦p7^= mjLIW5%̰ C6ܟR\ho]ҡoI]۠"ߛ!AHMGꖈ߹Yx |Y bn5RðΪ_޾30oC+v]zO -}v6Fvd*?b9䃈Hz^җD2lk,FCU+."|ytZI9Ӕ˘\Uqp W"q)t#Ŏ|^-Յ}$Vx Ķ{G2#\D!:ꇴW/\ 5s/R."bn·VE4ZEW ֍ugg'3V2OԜ KULJ|j:aQ(6 ۅq5fL8FZg>٨xe'>GFG}kaA}o_¦DKϞ[\z<-SHED{KTDu҆Y`fQ We{3<3Y'3ckB0uDY0kEavץyearx|Y?JJ#J;9[*MPH3B0 (N@롱8`Kn;N%Hd~Y'v1rMR&F>f?kzf)8pC+џL#?̛Ā;u2P9,Ldc4m7M^3{YY? 7f3WO`2*{xjҳTجB3d@^ӯ>VSOzWW:v`E|OwT.KzGeN{sbmgl?;K̇ښ %FHԟ6rݥb;f\+Iazz]wx=x(4r?@|وN :kW_6e3.(ē>}pͩ)0q.86n\SZv|3 A?pi** P?#N,;q)(x9Kd>YY[1(A~9au}|ݧMLxhYvZgܝ5WR3N2ֈtAKĥCpeZa wYvhcq1|"}h%/{m!8"n_ߢ&ڞ64zP)b1DIQD{jqhTZ"$w`:;H2naAM|$ 6(FOvT$o= U*v9TeJMXc3G,3|e% >*J*Y4_?$'lk4ηѤ[H%d`h ۝~U~8LaqLyH酳+&]!e`%yq[!`Y (XE麩.u{~ *U־g.i'>aexFW4L ֿ77)IB]v KKna>E]g6Pp#gϣwvz&r;PԇԭB! :FP:*@-wG-RrC4~lpW)G1g2K|EuH kmг1[x^σ*BE+<=}I6_7{ρ2m00M1IuS܂ɿR^9}Gp׼Xc?oװ#Ɨ! !M٘c J|bs6)e`u@s`14/]4a$սViڗ8{D&$*؊:6\W,r;xGC?%{ O" 7ÖR5..h>dhFm.`a횆C(rg5*oډG] l ֧\7Y)1 )ZG8~+$}hʿch$LW'#D޲?|ru!yuA@Q”;`\'nyI)(N?I!O;76`Γ3FgJJz A4hx<':#z &]P)>=Du?B$ɁH>i izѢVLZ%aT-)-xVAH%(d_}.pNfYqZľ7ʘr1RtW;BZՈZUt=\:)إ698T8bRJXAtJt]Er[n,C0RӼ䀪|٠(SY9 ^G.pSͿYĕ&YԘ/Nw.mV6NufB)7U-F8nfV22o-ͳlP?kJi7JkVkS9Y7uk#{s Mqq0"( (_^ ~pC2  Wd{4 h‚[Y?`Kzۋm:NK:7kАsI6z߿h[I([jW * C'IԳq+2\K ~V%vST%N\UL5~}d۟fE]C@slD7'RM~+$\确g1 z+W]pŲk)ȯRr(r %֊A^p=刪ާΫ9neq{ pEYQ줡OGjB,k%lC@ mN$_c'Z/,hdjsxi^6C2*NDPĘ~4[Wwms \{"qQ,l.bȵv7I臄3?m I?PWOk(E'DYM`LFMH.2&oS$!AwDٹ0-ep,[؅nN]cFj Iw,aVl ⾹a XNmԊFRoEWgDEvҕ["VZᚵE%:56?F1x˪w?,Mp[¦9~!'cK\]v&)U8nr,aTg#lj{.\߿kT.uڡ=.טԉf+Ol*>U_vHAkǤ8#g_ "/SeA~"N浵MG/8oy(oe&S\jJH;(FKcȐ2!ߋs (T$J"0sG9W)kVUg{s x؟d3sM!Z:Q-LĎcٟi)_l uPAMx֠>R*;ʒF[c `MC O>BH -Ml"A^LehIӜԄ3U~([2pR>cO,zqs{SI$?JpC\X>٣n9 #4 9AYAavZ%bu+3H.Ac'@}k'sK5e >>؁öh9 o!Գ. ɚy<~[aР) 8w+X!PddxddE<QՆDS& V>xbXqbo'x 58W;{N HChw.r'58egѹ;uVL5 bQs5'UB3P!&%0Mhtj-s&RўfFL ɤ1mƣ8ۡ-in{9 2)TEo`=Hm1 .:p5<9RĚJr VTbb@"u/3 kxYQ 6JK."̈́:3?~ `k^LX)|ƘW^waM]PFPf^Xذ^>s~xCbdX^+}ٱ% vO+$|ĞRc+gYUhQ }p/aYre]RU1 @o@w\Ό gXu6n]wȲ8zxCH6 G*xTSxr0ЀrVJJy1( `ܰtl42a?u?CjomxcށM_1! Ѷ13 K NizVq쌬Zy#\_g;q`lQ0m'Xf'aҮg ]SJ RnM?u^L?'aK-4ڞ{n ߭tpolZVƂ#VajQDmViQ~1`7]1 m 4c:~{DA}~ 2Y8!VTCe桶Lw+ϏK55|Bbޙ:UlEAax'vSe7+w$Hd`ԗ9ǛVi=CH[`q5ND|ԣd Vޯ ́9KM4G͓Mg0 T4{?);nJ0dЅ̈́/$h7M Z2,@DZmUє8`OnRdU B :oae =RW?J]!59QS,<^w͏,S+T_ӈTULzhdWRZ5D(V|" q\2t[>ʷر<3\Ff|T TjP A9Fj rٰ]b,id^q'܇_H=z/\,ZR|1}G ?u}VO7J ^l bo`"P {-}wJ)eR!>jsTB/#n5wċZ+"QO'o|~Qj0C{ ˱l 4my% HnP{u o[CF\[UB~-țt;+{{ &X"L&%qR_g@gƲ3HT Z ,d^_tR-x:ۄLAoBkVu\iHYJ7V?dE(rL&%ŢПQM .b!Δ&_Y1j$l$ЂQbMsF盘:)|IDx,J{Gi C.h|8[3QYF=i.ȯpJ!1g+ n.5LK`jC[;r.vl5(mZڠ)kK+RhAKiY/g\Gh&e G"ğsڰV<+݆rVLfKIBC4ε^wvL4{aƥ@Obxg4Bq4ӹ?!9=HM 7i4PghtCѿ5ӍWv09I|E߰Jjʣ`93gI:lfQoJ= ,vD{rLgTx``<2pAλc7216qx6] TP'.TI<0-4ώN;prf]Y#ض( 85uBh@BJO@E{+96^ YѴNWm疪\ơa!Zw$%-> k?ݶXhD7DpCGEzK|BL\ot~\^~1D )gIO 7vD3x ?*Ša4@0,tɳP3˓S;:-:sh*_H4ZFJ7G6l; ہ: }Ebƙ$CNFzb}%jTԒ埳.VZgW-:㟄+ ۳w ,$ls2]vjb'$>0ݽ n6'NJ5C][l; CR;d,SWs$6׭2we<#%K֯4U"vP9&vلo[\@;o24mL]lj)p{f7!t3pGR#[Td aV!RWz|v<c@nchGM̽jqR c3YR9#&]Pz~ױ=:*;!qPXm1 6 %gߪ:^.䌋k$&F{VYD=D +E"<)y6)nuCi~N,r-78g,(c|P r%8 #9[8nߌ^fw>KY~I›5xˬwE;¶\z' ='7&R;2r̅a;SW~kfIZQK-^$Qɜj$G~llArHu28"ض,pN@dY_6Z2mPO.90bz<|x޾#R !@JU:gPNHg} H^x ̚Cx策$$J͏d6z7n5V4_BN Wʕ)>oO㱋6#Z.Z|=ª|H0{,&֓!򴏀qŸRٙI8^Xt54Y_UߙN^gz?-;NA%oi S?S G HۛU@+!o.~g}n_Y ZB@QYʠSma"J;I>%G©_xQa!7ˤ?$q} uL ^$f*^a뙗/xڮH#_^ kJnPh0~o.?V;dҗ`}6B(|< 1֫>-[8kzw.˟ݑ(P?IlxLʃ%';8:41GGͥ=68S2P .o ʥLcSY:TP(LNpE4w~j»kP~&h{OZSJaԉDr=ն'{ָ'ƈ,""["/$S6V_RC!9*Ztx9טg64^TF6 jz.ޒu 7g4p;D1 &{Hbj?3ML0܁ݮ[\i _=.NJB]..jtl+ é13 EQk3IqEz<ۭY:ײ!MJX*;A}[$Huq} @ۣ DSeёk?Y j6iF8ulz JHs7*J]: h˶OI0;=Ci&*}TA\G_bhu+$4Q{{FQp 7[0e.B>(FG8H&jlnmMRt={il!_QLos3DC[l5F23=tsWpZۈar^@>%Q& XeE[g-X'e'Vuz"BVaV#  -*L޼,V{ђra]*|5{li ]L\-$D[^h*S[@3$RD}F"j诉їQ 8FҳXC/\ x.>P( uW#AqsnХ>0wx@bv?˶<î7?ʾIH}I9׎mnXRlqڊArI&_񊶲?qz*#5ЭVp'MQttE8{+؝ZoD$|{L ²j3sGVJ0CvhlL}[HCq3W>SrVjb\="Īh"`7h~24;D}p4q4xFWf u]=H~zM}XMعsB^-!A 2 KF&ĆjiׅީVتyl/+1[/{U0I-H2œ3u JM.E]CѧUVZ!׃i!8 ;-#!Qʎ=~!X?84cEiJXP +ݜQDlv˫Oy ‰|6yis}!_.Z qiBKHgReۗ<ܧ䳼} E֬G> ah29[T:˂,;ۙ׎;82#G$|hïTh7 `< fF@*DO([\:xxAhR /=*, C}"^mY;)$q}n >nm~?]ԅH]ր s(7YDGD}X1d= mX5[tAv"*Hԥ8DW6>-\9_ʵxqlMXr"QUJ~)pU?pB~"j֖/^F/JSS6l1ADzoY@Xwc_jM]ҝhoa.FY-+N3Z(9Sg1=<)&#D=ħ Vʝ)ód=n):)M1OI~y(v ЈY4YZՐ݈w5lC7TٞUV%i E_2~8zY/&m+o.} C= ^%E!MDu?c Xzat1}rѭоJmVEn k&;O{[UiQ| Q҄N4[7 C~L`\VfK~[YU4#tL›6 aڋ%(_y05SH?}m~q${)-c_&Cj葳xaPGt3Nzk*ŅadԜGlRt7C ZNǰv ڿA)FZp-Z gs<ôi1e1r)fḞ2M ~)4PN>eReُiAtn먏)Bdtio WRvQhqGG6qHYCr$^~_dt N!L4YDf E JM! /'3*E dYLv: dsc-kɋϕ@wP+amcml=(1qp)y٭ O 0fuSQ#K FPC4%Pв]["di4e" sSbX^xuU>)BTGhbQrI&ň3qvkÀp!EH<&鮦dncjr%H7UQˤQvz,Pu0eOCP?<;] +ֹ9^6>q/ %V+͈h\pLU+5,j7eX \_gWE53IX#-+,(zȚiBmo뽘dԃWSN'Z"c zX|6}wB wY;e)Ķ|DF=SRwȴ Sͤ#*Ӻ\TJԝc {upD3'hb&Iw9ZգߏN̆uzIۋCRqAy_Oԁ91g\G鿧ZڟkDmx\wD҅DlGAv%_\H>"8 pjV8x˩}pg8B0ӠK^BP\NN֯҇tN.9p˝aE3uE(2liLCDp>Y|G8av eKj 2b4L>[!$eʠ+WJB$_L #4ztS H%aW]!j $߻\?C:;Bt"g.Rɪ KΥ|,ut6H%;i4 K]a2iCJKN<|ձY 1? QAZݛB,JZ4xxЌ ։L!Q7_ځVi&Qx$0vaDx0ԗ֎>D B 3\Tj'}J!Ƽ.]EñJ_h E9p}0tS ih,S2Ύ|q' ZT/zVBcc2n%`ܟiZ2'RV}dK^-,n g!>K}nٜ/*=FZJ /<ʋ'r0 \j'%bhs;eVdh!p mQ$T2Q*I \*`06YF˅_ &s^nQQB8o=gHQt;2׺ /2r6O?UPb．Ξ@Ī%X(]Ϙ(eKݨ⨛FNB8' ~aɻKPT"[zl@s"٬)UN[m^zh :R& %fMƦg`DV5;q}`KaFU뻄PtQ"aN-s^eki뇇܄ -AGǥ_8dzDlV991^ePu240^3{߯$*K8^? OI&n F's=6^'tqnqO}3٧(ĎhH2f4_9T嬟ҲReᜡT ZN 5K$T&:oJ20ndPB}K9H2/l/0kR:O<O#BۧJ<< JP1m\͂XIPhz<7 8 *M18Jk @9 =g~Ǚ8?156xj_[4,h櫁LaPv,Ї0ןE/ (djq׳ڽIWuiݿQI#f'& 9P[|dbc]cIŒF>n{?Ow)Z8|(~ZJ+ioR(F+^?2S630j(W_UKxS3ZFGCr }'^\,6TTe$OivHt s (5BH s335ދ`2ZWdkkOgx )8I) Ҡ*-__O'2L/[(B1e8r_;bނ װ*CfKsBΐG_%@^UODpR  gd/x5D#0<͵twR(H+Rc,K,eݸTzbݢ^Uyő,U$]V d}Ca_! Xe۱ڗ#Fd_ggyq'xqf"sS+t ,c:m ~|ƕ;uX5J&ħau&&~+|Ǒ 7s jwCwuV7Pm%#tsW{?n3{r)IZ ^. a]^Rzz;2;\2^#2mWFM9QH4O.l= S5?4oc:sj 1֭3"PJ:`F;bhgƀt̫RӃ2 ,m d3`T{f'6ŠsHA NCJ 6CyM;t'ɡcx> Z@Qe5/wʲԣLbCCZ`?XOQ#zs SHΑqK?/7_$K?:}lE-0uFp U,=C8if]-MQ\ʤ(C5wg |LHJRdOm`ՉRVvl᮴&I`qҸ b%[' 1RSA՘*,zn/[;هׄ2h$OrF(2M:`G AU}ل}~`^`9D}塩ŷk<5;?̃W #ME *ynb/lT'JTa7NYg(Y\E@yinBIH/nVN#S3|r?(w.]'JkR2y*#ΐ VW)Ȏ20ျ1(_ӟ9^mPT&E~1b;Q&pjXo~h:"wɭەiZwhBX9jt(%:<~0pӆIVcU%%e,q"b˿4\|JK}+ap (X'+.tKt+܈L/[ފRӊJSwcM$s [lv(8 2 7[|yDyW9 :]9ywS喱+u_伮:I,6,~ %| eKMWoHfv9䏋cV״y{n R+pR/{cߣU wn++7 ;ҚDL9MO<8`ʨ&+jyz8"GQlQ%-8`G_U?%9l|/fm19C G1L_|%L/2;.Z5-Nqp0@tfc1]z>nK?\Ԋ۞JZ *bP+J{l{R>S|h.{5SO /Hs$ߍ\n;1=ySo?"Mg&@~%Oz|@`8-}ᮌ@u0fIRB/ҼkimTz_oap ݃ hZ5nӉ]Uɞ꟪C !CrM=fc!kC"bG0>"Si+mP/Q#ܶ:+jua5@g.px?BnVE,܄8{g(+W;1wǜ༵0*$ hYSX@Aag ^Ez9<&bmW,9G9m>DwH}PB9b뚢?&ze7H.}/zkY u!S(A"r[Ga/,2s4i p 3䐺1q;h+| 4%y^@Λ;rL(&xO\}J,<7Aْv.[v|?{-i2:H@E$uf<7P->s~Nh]KͬY*8vxB.dK%?[Y'mtzG\N3AJʞ8l1ᦂ&kbk@|'(FcWلi8SlżKut`v7{?xnY)fI,&dLkI>y qa[Rz颗7ÆcTUd[bޘNӒGڽtXE$P܃B?bRu~G)KJ\~Wox9A9Wx']c&-Lfq5Q1xVԹ3xoY: N9 /BT+t[[ޮ6BQ{woI^WnKz!\9 S楹lXQX0|:{o,m="i{Tui 鍫b:L>B6,E{*F[+xg],tL8SџZ5A0ͬ0A.3Luyu Uij%$ l/8qG[UiNjR*M%WR"Z[>BPK̯Fr!vBdz ʮŞd hsk] =_ı=>g'Db¸-У2pzn,i_O~7T,wb2[q&Ӡ]\1hgE RE ӧ.+PfNyN`1|#15Ji&kL] H#*"XG%qi2=,+g \-GF7Pq,9Uľ&i<|BMz=~/Kȱεc.pQ>&2'6iJeuX slٽf*U:RcC 䮩oz.2Ht3"8r Wζ!iQS2qòl s8O{L8uLboυY(n-6av;Fo˜t#ȸ}M'Ȃ2//  VY)'> Z-F/ؚ-ɷ"5pn_U/?EYw^ۻnT:N~@ 5w@/&##^:"O'ŚT;:;vQMb<(m9.o#-\ckkz X?@\r-rñf.{GJ9[&X0cI¸XiMfgNR[L>;QLfàlڔ)aкW@(z22AOXB?%KES(>c?F2 #j>{*&Թ ^1Yri/Τ9OR$+IP3Hyj`;U|T\|-J <Bg:Jms\ڀmΗD5Lɭ&7"΂t'Ϝ ˍ5,_fXl!x|\oe7Ԓ6fKhd'TiI[ 1ㄼr&RtGgorұl@vP ^i ٰ-TiQ=J=ݰ\K",wY#uӁ֫C`5zޗ]zC^ٓ2@: ƼEd4Pb,$unYꅛw:W b&n{ʼnߛ<%%XہQewC+S J"ȧ8g'BHD/w%T$di%$MIge'բhh ݒtqؽ5A}F"< բ*C \]ɶdVӣ%s!CXܵ3V17\(YNw[:l3jꈼ|8wBYl6Ÿqݶל*kYZ/k @0SYP]]o(n%`@1#+߲n ?*5ͤvMˆmSqۣeY>&J_k _vuI!Kj2{6=-輞Q Y.}06BYښ•3`31XP]~Xe| iQ |$67b *K8OHbӻ ,k}4X ùXG_J x؎1 wӴ0Kf*O{,ҩ5;I3ڏj} \a ~ 8zJ<*ǵi4ﳅF`0LˍĒf4(j r#>)kҍiahOY9$vΡM2bxhξ/LZ-1:i].K`P7. mny7m߈p:HlDj/1Zk Y,~p_\$S='Hx{Tjqw-"4;LP(($.;Cg Rs c> uWG LOpΓ~;V`o|˜h-Tuꕅ'UT?$5F ^;R t'':h[![*g^ 'K X t.+\Ҏ1+`ר5D3DLtSzLJV@ʅ?A6Al:nE X+(atJŤ*8n.K%pP*u\djU,F}wvD,`rՍB+A }?wsjVP2Ϛ^S|c+A[N|<ͪXS utK Xۿ7(~x_B` /f% M b٤5ĉGS^L8Y4PߘK?'!*u|)IpB:H¼g1#\"a _˻gLX>浇q4i̝#&)L6g2cuLGi|UÛ2R, WHܣf.5!o`O!(#u]dyfe G"S!.`iDi}p<RQRChCJOP0x kGZnJp?IYj(ƞ:6UX߬f#9m; 0}W4R.;̺ܦ3 aC@`AU o3 شo*/_L\{Qy&tCmo]PNOl[@4Z&5ԗn֜siL<s6au^|y=BDvPYesY64K)ԅVcaf%zBmGR&Rrp]($ "3,y-W%9Q# ln<VRr$;xU6M[-f%{jj _#n `(A@Z$ݤE ح2kSsO9 [-m0NFm?;aS =kH9$Xx" fIU?5+֑M"=t~$P+i `J=nQNz:LL@Œ=k(FFM%s>4Qz]}&*JE%[+z%`̺(h6Z5r4L,dEoi$/<~KZʦZtf  `H>QN`0>\[T]BkGíe;l3tɽT_rpB$Q`E!ӯ*XZ l@Corװ?Qt>6A]'s<"B綂$x:ֈ6v&?V0\?Xx QGʿprPUzS9:(ZOG#--$Xz |AW :]WidV"m!4-@?;VWvo $hi ,:' -xÎ F>¨'f^ i{u4~k,FJl4ݬilqL80sefݹll_2Zڰ91s5+10GҥuaEj}ՍQɼ{u[Hl}X6|ѽ4u:*rf"ͮ덅M` ^u4N3{jS})'m=Snrh⿷AƮXy P;ub29W>b^UwˤBih[g-I킏 n%3MYTgmuGf((6پu}>_,$d讧J5ECE?r6oh'=N5:dIUDηØvn%+uO+rTyټKR3'|)a+:܏9ēLΏ-:z_i&&!o"' 0{\7BmzTr=QF]nSBNwUFO ,]dɊ]sz. ?j[qRA! ZE<ʥ=Al->0 L+@36se;"=~7&\cfr=;0/6 7kR?qA֨UyxdU?Y&wL!pv0ܞUL~ Z`庾(K㍼溫m,w'x~  _vJ- t_!p)\'b\7p\7?ĴHQUhFż.Xid?,ͯ>BUlz]k]Ww5ۉ( T/V@: Wae &SzK$ I檙E#[ FdG >^٠In|[7v̀g~P4R\=}aLLI(+x[R;Aҹs!hzyuiRF//!;#!sj:mAIRixK,7xp ]9#AA5xxN`A{98H⮝NP@3t;V@.ˑr`$KĿ9; @=q >DD08-2*Y;/}ڽBI9SGde84cwDhb\Am,"9`Va_p¨/Uri46 +2>롒^%_בy>,& +\/k'tyh*@w~VaU7~Z@ūA1+}-%powDB|z9RhM7KJ9b87<~} Qπft|~ a:BS+RҧP&FUĐh IZz`;ox7Fl4W ;k ѯx7fx Kp/BO|aW$$IdOZ'v7㯌ף=*T2KG'vOKҁ0{vT`U)Y(Y=zF9n["oE|X6]\9Ve"l: Aͭ)_!p: 7 d:J,PQ"Er9Ca4rR= 7;.4al_~OJUН|PGfl)%C/xPG>!gNᲂ&wj3J6 ĞOEX*$;5 H6RcFVƗ >:U 粛6YXVƛWv B}OT3A.lE4sGkRơv+.q_灊a-62̪ڪ;flZ1Y&i`!JFI:I}3K>ڍ@$.GGm6xRq_:s:EN=з\O&TV*5sʅ:('m-D_8u\GK^&de% ֿ"* 4PO܍d+#4Vb93]N%U"(boE:^ E6f+.qq 9uQŒzoWLD&C}d"ysVuRr/Hƾf7k̀{X9ORO~ͷ-zf߽Tx`imd0}ҬTZ(AW͠n՚xrk8D7lZ^yiT~!S$ev 1}@/S [˱%ԢIff! rDe%Ji0PC1G6UJT(f;üzP:ҦšܒQm is a #+C n ib°\er=$PsWؐ` Aл:2-!qj]M.#|gU_@#(aGH18/ٟ,?܃TTHktZa$!NjA T-.#n$I郃NI:&zK36FWM7/fGB;BBĦYQ5R0]f:at/lJ)e,?@ Ur476z/pM{nm (p(`/8ą[h\l0p[42-/x*5[A.z}T,L+DjIFK꽷Q&f#[{- ^jF[-c8?68t-ҤsDtaf1+jbz:v#_&$Ré٠7i1,3,Ds&}Px8M+)yH՚: ax}G Cf$dCm;q'Uæ(eq=X^5ϐ۝neͳQ*$~E؇K][Մ}`&*>MZ. L3/?x~XAhDyNcrgPfrg2\׫'Ǐe`p$"5*uI4r"9t,qz 3XI4e /,W^ \+lUFoUt#<6F﬉yNĶ;%L#IN2*ӞApSsW)F>v X?Y$W.d*._bKK7>ۭ0s_Rpl;yI-Uc{ =7MƷ94F]ud- NwhHGAz &-B&J2A5skə> dSV1A?^twNj˂=*%yQ;S\y\Ko}g<`ӡ$; ^n5YQEk;|#dU~U3nw xզj"ʄzI|Pƽ<\!D.bJ=>up/$4vO0fL xw7\pileUagQ}(H`sh-dAF>Z ;[H&M38ezYU߫jaWW3ѓ#av5f>o/-.V<`>)#>о~apd=8 csx՗fdϒ/ וs3EQqJ]6x@2p1fDoAh ݔMnٽglaH`0#ĺ\0@S"9uIč-Fl++@^5QyW@^ܘ y]o9Vk@y2lfvP6\8+Ԩ.BE )!S}6N G˴Xݽu=ճjL(s(>*Ybj}RlYF\vFR4,ov=pOq-[CUr o5[``JBexAS}Rhm43䭈:;Kxr EHBIl[ǶQ}A ^*85J5~mu^V ˶Įc-z\/1wRogF`y2K@6z@'#fvz=4Wy xPP=]y)hq?,ﭺ׭ڂh 7Qy} W,@ڭ0UWHi`OPXnM9b},$_G~;&Y\5a|U д@5D?_#`?)?r]9Z4_ _]Zi5}3g {@u(9Б6^cGc/ `5g35#Xd?`AͼDoJF.6Θ=!>+e?q՛Os  `s "ᕗ _KÂ)#<>ć&®x (`9b1:CP6XDP{6d`ZO}ӵH& C9zn4)|ߗy^޵uq<3I'?K=&P)x?97 BzRj<;jJhf(`1E;t;@=S #&oq} yovy 5+eQ{M-k6/s#HGufJ+H9A^X)}s'#ӞN9!F-sP*c,g>%Z0t/aAXXj Wee:p d;^5)MWixIVv{@_>8_C &9pڱ#^Wƈ>~);c3Yjuô~وhVu蚂,ϱ IM⒡_rr+_*7uw&3dgKb)Oűq%m`M BjsJ8%9?δI4/3]n8Q| l&_CK9qykܔ?Q|ńz-}xi,Nf 01.F. By߂Y*z*%hu^ i$M3WSTo.WbQbjA.|&. r=W,,/Lz *9+muc2b PjE ^ĺ('oVkv"KՋ}r;2,ĻO (mk_kP\g7ھ26!ol{2Ɛ@s b=6ո)'h 9BD"k3!heƗ06' }~+2z*Xg`ag $b}yU;.:u8> E]3 _F'gh9)+E]*E#R|MfrA[#^iHG2]TOK?r] ]wyxY‚酵8tZT?˸Am?o4ʀieI`rEr#BC(4>&HmYoi!<|0 w`j֞XoϢЀWȩ "h8Sl\!NX`cە$poznfqޘu!oY 3x11\t#t|a"R$aanp,LY1[-ȋ='u! "!G dZnFCJ.(hܽMHH0il&P$%)yBZeZԱl{2AT(`]U2 Yi u1 ߙe +I4,'\?zrtFd6K-JW3Nfqh-98c JMIEBvMDQ{({wrKirPXC:r/R1:K pU.qD/f,͆UywcɂC:@ AΡjmlVm{Z'/׏.9c:8")j"n 6`VP}GA3ܓ L_\4A[΋SڢN]o3"?ѳ:hː:+X>%h=ECުM?!.sSqC\v!ѻS9iLS.GM[ qV;+~s?Я(sH7^֑ƔH?ouD?ݏz~4 (0qq za zpotp'\ }r|s\5@T5v6H:8d "CfqvOVr1Q bK <  , )yF)u&D/~<`z9j[g1̼!)u/_Q0Ond4lpR;_)_gφU3Ql'Y~:yۖdP0$x?ZKZ )w` 3…UgnN#P" }${(!h*P*Rцa爴׼&-tzjbd[QobB%o,$Ujl~X7oYK\ 0'K}"$.;Ϻr_ .~U /.e =iRQ+`}qTB %k1 Y@\ D@mh)TQ#!_-^4H5_G,pUFxv zHcFf᰷#G) k慯*#)lOLM}8y8I, uU섅`Ӻ ene V,"OWdȮCGԿ]5q;++e,ɕ8xq* 9gv.ָ:ݿUOlǞ@&cT#;tB@y/gg=gĚ&3+fZ<4Rk~Ύ8+&ƅĝ<>1Gڮ (=8{2Þ?jcQEq% t@ad>B.;W(UɣE)xq&xUYE Y|joTgW^b 9:$ҩ-%{.!QimϪKS$q\Y$cPIonk i$15?P)./Osʚҕ:~?$iK]S?YLlN%^5i0ΰ{Z8 W-@CȈ&cgӱeg^NYw\M3ahmXKSk?79N^m:6V(M9>]a|uW"O4,- n% d,YZ2T}|IK'mwojbxq0X6] {${Tl3WC?* ovAGwG4  M. LC v,BQ~CXD D{ipϣ1dS-{6"<=WnLjܚ <)(Ń1b)+ (!A)r[9Е'}\˥'Jɡ`&XR<_\z M}HXL\^8L EO/C-8 jAa ,?֭E*=p0:^EbT N':ocn՚tQ}"UMdS0̠dоk|M4|l.i<ӗ7쮏JNc'FĆ3ш68'M`ZS0m8AnOr_G$/miIvgsy~>,9hǍ_Su{OYc˟,~]L5Ui g$&)v(ѡFwjLQ\ ~4uzyҨ=l1;RWUGfVs9aVP;Cq ,( /+%MnJ.#Cmr[y]r Lf+Lv_sݡxRTem]|Hcv~uAfGuD bhKMH`Q^OX|A]7c=t:#gv0(YImxq$@r&XnƩ9V(Z- zm\ Q>kxڑTzphjQ&9ż&6OBCCFS`h@Bl c {,Q8UxSpk[k4֯4%Oh[ XKY==7dSv\XWZI*R]qw;qt~F֯P}8&,Mz"!ZD3;@~Tw$nC]_}1ܨn3OwXzboLOdՑA8 %vj5UUVB$fS>5l6h`K7P*z=uB➉Bգ~mdwMeg]骩Hm@B[^#ʚ#&G1-dh2'a-Oܮ̮XvbMܕX1R*ڭxLAPkSW\A:'d{Ps Ho  ~mm MДɛj!r[:S}Z-UB /z@S1,j&k "!/'r)AA'kRZ510iM~9WT>i*1G)Wx:I UuI/5.u@2`sf=jܨ먵VuZz&)V`CG M SJ˹|x}}o!eJ-iz5MlVu 9!#c=)׎/jR%y6_X _ iC?αSj@:SC|,6X}LJ9&;uzo6mp>Pl,6 +rАJ /OuO?A9;Uֵq>yէ9_HxlKېLfX,B"9,!vd}@ WYF :!UGBFHuʨ3&Y?cؿj}>$rɈU0^!EE*/=2 Ƽ\Zaf,y;]`6.ڲQap7wgZ3ԢHSwXM.P̻G41N(Xȅմ%ߴ{"Q"6AM&_pz.?0a)Wc;RԻ\>dr f+GԹ-,#㻠9r10A:gNh N`qz {ĵ5щ,^t 4dD ;"/M>}f*HILL&zo|M4!x}?C0P0=9V? *R) 93.$iOҭw1P''thȮ{Pb— (K-^.XjRD }" @4P2w{E)o0˭6_a$a[_Z2&#Z*6&o#Zi""]aE?. [0GŮLЬ_74֗$s} sS@~(W.\hssm9! 6oi\d Mfd >aK );Q`)k Y!4`զR̯%f3鱙z,W9_8,]CLBk;jq}Qw sv4% , k 4@p+yӍ.P^lF}k_՘"{un {ڨ?]=Zؾ6 Ќ "&X.-67 @7V{k Xz0q3=R<>kE& #[f4}\+ҭ(WݦjGyAR (`/Tb/}}/$=M_+z&RS$ Hz7[w.`ɍ 2Q8_ʵfӊ)n-l@NsSVx/c DŽ-pqDd]$/ }#^zn4j3bu=&*p=GZ~1k(]^A>'Z6]gK4}ϕ MFǒTʿӨY/zu&F85b``l_aV ݚFmG/wdx+7p-g`Щחd7|_|Rb4B& vU]'~\qYVH+îp*nAF /#x $z:, ; +6,ȵ9^4B{s_odM8u"Q0^yԿ4*ˡE\l}Σle:΁lzjJK?t Ph'뾼 _4גG-Aؕ#2-`g̱.DH Оpn;U|8u21Ϻ4,Q9;xk苠;= a9s`nuzM#2}M8vUzRОP\OvkgӭN`-W\6*h66$ 8IaPTd~-:B1B; z[V,Gx*M{(kU g s`}k,4|~Ъe爟 $rqh)mQb (xepbTquT[w]BzrEẑlRT!u\*>⚿ZsW賨,X ^X@|n*)io>2*) &Jod ,N rNS%Y:Ρ,:ĚpO)svDM\g׿*f#Hl %TPT/F.R)yb(O¢(gʟTN1&4c2xgm>a\6C͚i`U !T& aL+Q V9&]*xk )^=YNւ8^4&kA{{RXGg{.ܪtn-X˳ieB#jA5R1&2kn{Ј̕OW:~8~NmBZʅc#_!e)"IJ<s|o@ho.4kGf +js%#h0Y5G?V;XQmjّ萉P@]baeog&&ƙpSm(Vqz ؏H|E$4$ՍeaZgť,S0^#@;ly S$Ыaшpn+oا3"L꯷h (%)bl}}߶[>F|E©HώDzs2,M^$=2#uKURVٵre*x WDB)=&r%[®Cmw_-vm!_ꢇq.o+ EӋ( sKg˫T8~FVb8$YI^]x/@a/u{I%Y'&nqS^+G}jWyDEW';#A}OSݫĩ[؊ޥ%WYe ZWꓢ\ֳc%PzYiӫ6>R9-~ȳcO_ҿ>KBmF^,g;YK2NXU.;KF7#˓YF]̓8¾ɔzԔ< ,ֺq85#EfB*q۴Pl>4Q^UG5fָGGE-z;R&|E|ؔrBSb9ҸG9*P \YXF8]&ܬC&P*P~m| ogY5xlvL%U]CbPE ]=t nN GAo(Bһ×1!x0,̃);#KtXdj!xElcj.Y  .sq$ ?F8fA$ `Pn44AMeEnnG T@q64a~2we ڬf8PJksцáP0ᏻ~R[MٟX'&vǧ¯nBxd\/ȁ BI|_*MZyTP&Ѕb)56軲32^'D<)# jK=dn({:JBŮ 'zw7i$ٗ \<@`_2Cˏ)Rw$x"`X YBjדi(hǖ@NGt21w%4{dIA[}ɠc27XN@VfZL,UgqE 8t(0q:Noz˗|_!LU`} w6LkQe)ؠ>?'!{<X88 #.Vtj>(ˆ% 1Ŭs$ x <+ōџ yyȄ i+kgJqǃ"2IZ-őE/], 116$i/u):wBb|μICί 9SPLoD;-»dub,&ևrv G6g *:?%]2D?dƃpdDppof #X,n Y5T< EXtZ/21N [UTK;&;Ô`9LkUnxȿeIg#t\:iےqj1Aφۄ/5ڛ˒-+M]}4sKsnq4<ćjg--2(GOT0~#U&iA_ ׮v"#+5oC)"Q =c.xM3X>h՟gK>W4!҈']X\-`7?Ԟq>;E$v&&) YڕVʽ{ᜄ%{RN)eƫT1"[o*QZv+kTM;ִ,QJεGpURK UҦ9;T1>/qw Ab&0ӵ2M~AoX *5 b ZcUWh, ǂq (A?Y*8}5f TXNѐ@ h!Q*Bԋ2NCx~vW/I4RFgגS⿉o=ULis&N}8>WԠ3<*ȶ ¡a&M.^t6Vk_;G5=+,D_|AKYq$cOduk?MG.lZ0hc\Qp6)lsZ4ux[[5IgY[d9EF<{_Ճ\SyE yӸކN|P=m6nN_ڜiP%QhE.8=P{>X*l&pt`h@\KCG.9CPhܵ/Ì>a91)s&u9HRo ?|#,jR͢݌  `nOʪ\kۏl5vnT68Fj!xF#aX_ l=:7FLLM2X8*%/u,8Sa!#Za <"9'Bm$.؄P{GKZdvKYccs5>Kfs@~#(|j@OcnS2I%Agxa?)g4U>5*lFOEGաjOp*̛wtP/B4ND;谯a jTuHL,MAˆN|4xx0rdnP$ZR]->Hߵ.'ȨUhD[Ӷn7$;ځ ̫P}7(v$_DYn qi(4b6/3975Jv ߍN %ԡ~&,@> B_4;h7Y!4Aqv3&2ֽb3>' J\ B;Mk7IIo)͖MJͺqb&L];KITyw4\.UP"d Yq&бm5FN.E;5bP5ORji/P`97Z}!CﷁG?Ƨ7n WaI\aN_@R㯡xx-&r΋1$SL{YͱX)L0s0)zT-2!H# O7Xoe~ cx/l&kU,T;2zɊn[ ey\F\ۀA?O*@9緅U -CĐH/o;(;X^=6XyIfxjtU`r9?i3+onb\usʛ=)3}r(⨶jK奸Kv=qcA‹K 7r YsV=]MaPa7LZ =˴Eq>9T,{*\>hR>M 逻&?¥hV슥Cڻ;GO\=/ͻѽ<ݙAqbiz_. W輈(1UVXF2ScDL?jҥ9؟Cue0o,⮶,91`W*Fy*\X0\bHS|>uq d$6w3\ڝ{Z%s;$aJ B?E+ezBatЛٲhzb*'R>Z),$q0WЎw%Nq$xНlNLe2|lDa$ZDXZSsyn Ja`E#MVHZ/4.ֻcB]OǗ9kw nMS(<#t0Oy ĸs9E<iJEF}֭xCj#@1 ԑ!+B]hU{?O6g#?ۜ:+֑im&anԄMJMÜnnrB)݆k`|?#) BYɗ#wrTq *Wfy)erdԗ^dv_G9,tz|Њv b3d$xK\x&+1Yq,=G6Jnɖ%9?+l-_m" .F"˦~ >o<ox'P{[}w쓻f>Y1O@Vu7ɴPWBBzg ** Uc+f3KZ=F:u 1O-LGؽm phF"D[b\"i|+UǕ[_܏h_<]KN͹AQTP^**!|Eh`\ I|4Ḷ(OɵKl?4l']lqi?nő+*F뮠&~ IPU3^ ܶ DEk3eV ! 6􃀱U{14qŢg8aqopÓ'6R{l\n+.)3;Qd]?ZVT?.}2c_rdY{zXkpڞG]cځY[4N5;of9$rCIZ<=DTŦu 7!b15?-N:qw'n=wc|XދhWvm8 ,zI%*jz|KEZ|fIy!E=nBc$ !RMZkQ1/aiB)o:͉"88 \3NW9ͧ؍w$Kx`:XȘRJ kQ)UreFgYyK>R]Bߓ3d_f}yޖiѹMw~NE+2%j sSLf+8X0b0`ܹҠ|zډ8kIȑL'6ЋA9a 5GSLWfSk5\I-uiبVvuS=o)^ 7؆HLQhBO>r,ޑ8OVE/oP!>bZatV/Kb䠸xBJkHH(+ΠDm dPҵ8딞 ڶYm+u<99X? Y m߫:xW/Q`b]ʧ-}]kϠVR VE({JYr℁jQh,v-ᗆ@*6 X^Vu׃D%zY͐TTo#"87ՆO 2ATm"JWY3 C[( )cp:Vc-g)m~?:v/@E0Vԣrb%E="i:p ^~a&%kY o,VI 鮑 ް/^Cڇ_ [31cbڎ):qR=ß0 i. odj @zٶjvWy?k# %) C |pOiZMNN1^oﴘl>_%+qV_ڮNr IČicD3}5]d"iJ<m&?i_X#=)VI^-<]ݺMV j( b66M3L~\wu%8>.YtT.Ud=@VbIhV8?)̱'69ಯGPTCخ'a26ۼ B遙_^OǰRf&'IgYcWE(30L 9*$Vg R7_3J K*j솎 kjer2&!ߪWCCkO#)a4?ȬWOƎ\iQ25߃BByaQ `r`Pý!LGxKYdջxlє*L|foggI}O~ˣyz"D6ot}D4ǞR7p8H?Wdo$&5 eɅdQ ăwG]p8 5+r/vp$_iΚYZ!k֞u[Nt^ܢS+&hy/F+t?T.Q _B;4inusf'N]){ :p@N/QHt&zFS$~ڟⷚ$%`RiJ/&f;kf2Jqg%;1D>"S")²>ǁ p٫]k(><;yi=o icQ>JK0FC;$dA$o#=`IJ,'"f ?*wJO+WsHS|ad-QsV껆`nkLisN}ͺ>D}vþPïr|܅x e 1 $70Gt De}RRW9;VM\l&DXz-lsU3e!fp~5|#)U}$ȋ>#sY"".%ඇ]oAso"sγה}2 μ' 1r?N?YW\}Ǎgi($K-H4%xɷvvOV8w̰SS$ifV)rfsWPG3X+U~s쵞.V7-CG"*bA@|QHzưAMd3!줠}6L*VC|9o*[=G@%j;Egl!mm1H |2ymkWĥ_F4Y9ť]pP12%h/"oDJgi^D'߲Jꢊanry>p1Mn0S h>*]I*Gh,qpDɄvK4p hyNB0Ľ.~|[ o" W};2<5feq!H!bh.3XPFu©`muw>$U * ^!d'ADAgB0t)acf9\Ր-.I o)؄I!,@r"#}+eF[<@LHiCn>T\Ҙbٺ!*{ӳ俚#B C# :!~0 >yW̰G` ᳁zh &/08s[ p9= ;KDgX(}d/8sIk,e7*2FbU 1ڬ(Y ]!׷ػ~KKߩnU4?3XޚMӒu +hpջDrSc=џRb てK2A1'"1WvEKbhFQ\@8AvF=bsWCRH}qfo*-tSթh5OA:@@6&z0*mYcfXs o@<[Fcd<+Rԕ,vT :5ǤXC{\3X^0fo_)+`u 6DϏ?Ŗ45-r27 H=l9I".~57/L }V˽D=bj.\XX@=K557Ú.ezJC)*? Tafxb}TU"#LZ6/>$-۽[8pyC@ey\-=}F2EIJ}j̫9}ZFl.GD S.D0`>ߢ (uTWH %d;c5GP]MЍx0WTZmB%&(Yfj*0vjy}&K=^Kg"l g6'^@"z=JG[md8v6j[ o6@c8BY_`=X5\u>Ა8RǾ,z1(a(m4i$đf{  N( hencI'Z]r$L)\/ Ab!>Bs <zÿh%=WɊ]e~T! m#(z9jGBMQw(;ZQ_( fOaB{uh7~ p!lG'i:naR&Л=ڟ/X dMSб;d,Um07HQ~Oܙ"N^t3SPԘ t`0&;0ۄ7}3Vf_ <+ry@$#vIFT5?\8_k z!*V/S R.c;dޞ,vOFxCX |BgM?1ʝLg*1+X N7ux b0KU1['7|=`ÆF,WU,hW*4jEVm*ʝoVݐ8PR/O3S_Y$c}OH#\a#ݭrH# qWpɪԳP=,>%3*Bh}W7e! z̴a%eoQ:j5.n6Ȣ4'ir2z{nC;h^p8og?dy ʇ@kTLb](lXv2v /C&3dt-RD-ѓ}/QA"k(+7]k,)o}2 Ϯw$taHz5?!N?Qۈ-sܬ1¥}}y<<+=>2s~3>O ѶBΣY!U"e9䃱TGQka;C 8ުͼ)٤bjOa[d0P0t;LG͞}9~,zr,Vv?s~[9SmI郬73tZ蓉t[EIw,45-/3qw{@؇a&dm%6K.YĿ8u/F/@GJW_MҎ`B/l?P&t7<~* b*Ve}b> -B'UO4zh;-"X݌ČNݨj jD])}yAx!Hz1NBtծֿh~0maK_PuzLcwUfjP#m-\ܯ/ڿBe1,#{e u%{[T[7.wǫʸYkynKhNiEln[H࿽3ɦ1(%Oԙjs-G3#مZSXN k2Yfc%#Q5&?UX6Hk %Plf4|QzB a/=!z:5'}PN.Bȁ}e'h>=\!s[պG~@x Y=7{J2/nz!&c=^sR:2TmxMhP%ALmOOä5.Ǜ/2Yhu7Q% -Y)Hv A 6PR4Ú5`8f+/)Z ׊n`xlI]gү Aj^Bh GV2g6N'=6)l7|19@Vdbnak>}SRd>j'g\!|W!L]`u03I^MmSoUߤ_a؋R+g%G%ŸYGR-,O2@>v CK HO8l[o۪ҞtEal5a/ӎ49LW+ny_yNgo;q9lV]O#"ԉ 3*mUxYIzŮzrD@,tAmH*@KЩݯk %Z9>L8ýhq_[YXE;MJ;TVK{% Kăt0с7< ҝ&?DR.?DR'*0lA\j>aۈCA :b@YȁeIX" *Jr0c5pV ҝ^B+h싙vQKibkœqG8Yig>+GQ}ѺtJUЋ^x1x*ɶ(o5Fu=VjW' 9ITc]2Hز,a: B:^.M脤ۑ0dԍ4e`~ݾZ05<\~CNx&n+^(F?᷇`)U&k|ܰq@[mq-Z<W|}d't.0dG /wǡ?1T Esej{}n5 MoEqu^[lJ2j/0.Gu@)*>[j\D6Y?1uS|p>[}\bH7~t۸V餇A8(H֡;qVO @Z5Y J4ƍޢ(G / f# U$G__U[-vDճ(fޘptyVwZ \R3Yp,$$5y+*%H>6ډ^tyYrdT,*8 j)SDc|s0@w4x&}@%"b] ~ WoKZS>Y*,^}{FS w1x?%=1Ro'4O? Sr1UuP2ԭ)\yIJf)X4JIvж ܺtd$?&@!U'6@9C<YՂV-C?k@ģ@jH@7ƶ1 Co U/KAw*TD f١[i]L03ݬM%$7؀qۅN0*%'vS|V5 ^|1gvO^sX;i<%;uQ̄b;#J=iW$l[d^Nސ>&<$^K3}ŝ= J`)ec 0Uz(0m 6{CKw[{EK4LzP!y 4`b¥iگ~99?43}MtΜ6J70gN pzTh[ f=Χ%}MQ躤?,|'nו-:cЄiDWrX\faP0+=k`%792t֔֌Y7Y /|_t\ŷH;L'$MY g U3E?`Eq|vMBf#T} rəҰ߱d0N`ٔ}V4 1W;䏏O0jbD\&`jzM@2jqp,Y_|ۈz?o9r6n[o&WIZeRC1"".S~S\ZtQ|&]H[䪄۹kv CTTkt/H9cH4p7ϴOfŋ3@ȹ{mB (/Ծ /~E硡J? TGȆ/塰v;ҴMCG[-~W$0#뽙}nc},+^}ώTggyFtN妫m\-LJ4l3>ۡٚ]7E'<\3dyj dSn#$PU(hDZgo+i3#Qgg+=|Ֆ 璭P\lc57C|?H7w3V~d 8V 2 2`_D-XeM[PxB҂mbX%/> e6Նj_ @xS`w?^̅F%{4* !R(ai DQGz#d,[d骥 r<ͦ|VA`n# "v5ԬOaOS1ts73wPMsJd;Ȝ Gx 2Υ?Mbu_%MG!ZkvkJ?KW)ۂXQ^Rwuf=8T7XncAsF<tO[KZgfi2P0Ι(5 'Q@?aD2`|G]+}[ m;;1\_i; XOT 8TC3[7Zp߮H;FI1}p鐱5aH%]Z |&-xͤ 71{D;at33(rf/p 7!^@H-%0b#&I1S"j,nL@A5:θ(p؈v>GBCL 2 R5E3eO UTɜ ֣8ᢄ\DIcyM]: ^RZ> >yU\ ꅺGg.UZS15r{hC=.?uS ȚnvY#oZKܙD{;ó"Tt a!m&r95Ht"E597Z,H #y/B%hѪ㰕:WԄahXva@S{0{O"f[|Kaʉ V/9\C^UF~d+RkKo7(߮(8z_A\(Be"rC;t K=XL'kN8~1۷8:\LyCҁސL$c֣,&>@wn})6n1 ˧XEDl@ L P%dG Q!ċɷBD1^4d"\BUGkքg".[|_uVwIC \{htw#~k#*NM.A7-hI1A oNf}fM[nBaRx>(/k()<R6?8z`b_wY#Vǹ4z#dO^j"jaJNPxDp@j_aMCiKGx+9IK2=)ǀ>·,%#lMy4§-8BAJtX@&v 6ϟMduc*'/q`|&W|7y]G0Rkd >䓺{HE`\o)Ax<^7wʱr)WהYTpgV =QVG A-A~Gs='hWjn~ȭ=Va&=WF^Nˎ-AqZxU>8y9|CvrB<, ;F נ?y@Pm%cN%! J >S3y]S+5/ZQ;m#(dN)΢]mK4|jed&]SDqápJpf֝\&qtxk 3ð\Es`逆Smz"D8Z#?{Z檉=bf v_ ~c T1dK,i'd{j$A%B|314ҢSCӶ)SALvۈʹn )d?wEj}I((|H{2 UosVսQs@ϱtwOnΫk=Qy4ыcSsyaA<^sZ{d죓?EN&limnzWd*s?.P5ij̦ic?koQV^SfT#,~yZˁgC16ȋ;@xNA z J7!<@ò]ɡoS]ً;85بz9u3q.Ә_kh}",iXh噥hiSN}/6~d$\iG3*(]d73Qsqê 7wJ%] &K1JV 12 ڠLUmg(PaMP2M!jmi{ 1dine_EfUDhfq$BUB1"]Rڠ8i`f_SBߢ"k;'$H ˥_؟#;œ}LMa!~":f "FiJ\^5.lqu+Q#pɡSUda/dҺfcH0~#jʋzL*Jw'|Ŀ q5[q^jg.rsC{gv@ET#?s\ 9P+:N v6>U'*q4!0{ZݿlAhI=)) k똹MQ X{w}Im]w=bD B0n3x_-&#hX@VxP/N;ɼKɍ}IeUy532ڜ%t$ B['(SW8!&JV d * ֓cȩӨg6丝(;%Ap О 8@MU%anǥ7Pw ̜: pe+koa9V1Nds:(nZ#>cK3ӹnd 1,-|Ɛ3Թ3|۞%V/ȅvk:5jo@ 0;$P3Xm+D2F(Z56ochUF/5̽]y