389-ds-base-devel-1.3.8.4-15.el7>t  DH`p[[$ƨL~tbMh" JrFkSd23A Pj;&fc\K%?OzM cw0T#" غlb3QNK͂r@8ǼH)O2ٯ5 t9D\zc)FaoQe7ew/tjK-ap) U" U5\r&0-~WOBth$f)ږ#xq6kTUM@pQvޟr>7zKQ snzk{yEU9aޥ19lפUM&XÿHQr&2<1 ֿJf\Ͱ)7ߜ|7z(qʣ +]ėN*"an!$\'d6^k6%'=1tS# ?Dn.k^`m@n^Bb(g>89?9d # R )/8(( (( x( (  (  ( ( t(<`(h([8dO9O:WwOG/t(H0(I0(X0Y0\1((]1(^4ib5d5e5f5l5t5(u6(v7,w8P(x8(y9 9C389-ds-base-devel1.3.8.415.el7Development libraries for 389 Directory ServerDevelopment Libraries and headers for the 389 Directory Server base package.[x86-01.bsys.centos.org-CentOSGPLv3+CentOS BuildSystem Development/Librarieshttps://www.port389.org/linuxx86_64 K%4>Km q!  foE( r5A큤A큤[[[[[[[[[[[[[[[[[+؉[+؉[+؉[[[[[[[[[[[[[[[[[[[[[3e4e2501e2a70343a661b0b85b82e27b2090a7e595dc3b5c91e732244ffc3272d36ab638ed0635afcb1582387d676b2e461c5a88ac05a6e2aada8b40b4175bc19667aa81021c9f4d48690ef6fbb3e7d623bdae94e2da414abd044dc38e52f0371e8235e08aac746155c209c1e641e73bf7a4c34d9971aaa9f864226bd5de9d9953a1e216749208c0bdfc9e8ec70f4bb9459ad1ff224571a7a432e472d22029862807bb4e77579c81dc7e283d60612a6ecc3ce56000691cac744a4bca73cea241a839e2870b7a212ca9dc6f92007907bc42de1984eac6c278a519d4115071f3223ca364e71a110cd0f2317fbaf99bc8552b8374dbeaf0a989695990f940d88beaeead9f55f0774559d37b20fbc5448f978e1a80d27f488768cbbb278a932e7e9f495b7c1e22dcc0f37d78076a1fcad786b69ac78f1e806466d798fd8fc4a5d10d8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903a73b7d3598e98f46aeb0559e641d3e6ac83c0fc34e1e5fa98cb9d4a6050bacd997a6a0413ce3664e192dff12a29bc3f690c24e8a0d48d986478c56cdfe370c3bd110052464fd35c5dc227b3f071606ec40c12ba773fec9ec88ad01430bd4a27b5c3adbdea58a8bb7663c65216dda7d1f38a17b067f718df46ece04ecb503f689005dc9d5aa85b10c3200535af8b0ed2123770e3a79d48be5067e81cc553d55bdaa7ea2def38dfc965b27ae20467006aca779e02ad366d50824c4615a7d43af275ee25b47a83b1431f6ecb1d0a292a8e9a2917c1de9e87129c86cdda743be3f55413aae4fb264aad9d35db94eb28b5f70a7183101692943e81bc90d6718418d8e66004b2e338ce29e59d6a26467e251f092ae0a0f33b67dbba67d2ea9f3ec89f63db4ad3317bff658a04a1bdbc01fab83cd348f76a1d44585b892fdb0223f2b77ccac76a229e6739ab318d9ede59f6b980d3200fc50669409d3b1e8a0ff1fa0295a3378c84c68e2a407add0f850c64d701af2aedcca67dd2489e86cb1e08dbb6bda188ece6801b97c98031b854d4000e348e969edea239cb1bcbfae7a194e352028a93db2fe665e8b08494fe5adf3d8dc00c2f96a4994a09eb70cf982d912fa09ba92ea5c90389b38a3c003a5e4a7b09e57473cbd2fb3645c2c0012808023fd0b502dd15afe5609a113108cad047a810b7a97cc8819e830f1d5b00cb5bf65a2954445b3e6550a3d7da96a246e6138d3f349160420085ce14222d3f686eb29915c649f748bffe197539db9237d56da8a3e408731488550617596359cd32731ec064bd801d053bf456c3dd2c94f9721d1bb0c44d2c119e233b8ad4c5189bd39b256d444bb47f4a83ebd0e6b669f73bb2d6d3dde804b70a0bbd2be66693d88ce8e16087be3693057db21a0b1d38844bb5efa8112f67f3572063546215f25f9fe8d9e2c639c8768e323f2ad4ea96f1667989cb97d49947e9bcebcd449163d9c9bb85clibldaputil.so.0.0.0libns-dshttpd-1.3.8.4.solibnunc-stans.so.0.1.0libsds.so.0.0.0libslapd.so.0.1.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroot389-ds-base-1.3.8.4-15.el7.src.rpm389-ds-base-devel389-ds-base-devel(x86-64)pkgconfig(dirsrv)pkgconfig(libsds)pkgconfig(nunc-stans)@@@@@ @    /usr/bin/pkg-config389-ds-base-libslibeventlibldaputil.so.0()(64bit)libnunc-stans.so.0()(64bit)libsds.so.0()(64bit)libslapd.so.0()(64bit)libtalloclibteventnspr-develnss-developenldap-develpkgconfigpkgconfig(nspr)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)svrcore-develsystemd-libsrpmlib(PayloadIsXz)1.3.8.4-15.el73.343.0.4-14.6.0-14.0-14.1.35.2-14.11.3[:@[[-[~[~[m~@[W[U@[L[L[L[L[0@[0@[+@[@ZZZyZyZk@Z`@ZX@Z*~Z }YZ@YZ@YZ@Y@YB@Y*@Y˒Y˒Y@Y6@Y$$@Y@Y i@Y i@Y i@Y i@XQ@XQ@X@X9@XP@XX@X@X@X2@W@W@Wu@W@Wt@W.@W~W~W@W@Ws@Ws@Wi,@Wi,@W_W^@W - 1.3.8.4-15Mark Reynolds - 1.3.8.4-14Mark Reynolds - 1.3.8.4-13Mark Reynolds - 1.3.8.4-12Mark Reynolds - 1.3.8.4-11Mark Reynolds - 1.3.8.4-10Mark Reynolds - 1.3.8.4-9Mark Reynolds - 1.3.8.4-8Mark Reynolds - 1.3.8.4-7Mark Reynolds - 1.3.8.4-6Mark Reynolds - 1.3.8.4-5Mark Reynolds - 1.3.8.4-4Mark Reynolds - 1.3.8.4-3Mark Reynolds - 1.3.8.4-2Mark Reynolds - 1.3.8.4-1Mark Reynolds - 1.3.8.2-1Mark Reynolds - 1.3.7.5-18Mark Reynolds - 1.3.7.5.17Mark Reynolds - 1.3.7.5-16Mark Reynolds - 1.3.7.5-15Mark Reynolds - 1.3.7.5-14Mark Reynolds - 1.3.7.5-13Mark Reynolds - 1.3.7.5-12Mark Reynolds - 1.3.7.5-11Mark Reynolds - 1.3.7.5-10Mark Reynolds - 1.3.7.5-9Mark Reynolds - 1.3.7.5-8Mark Reynolds - 1.3.7.5-7Mark Reynolds - 1.3.7.5-6Mark Reynolds - 1.3.7.5-5Mark Reynolds - 1.3.7.5-4Mark Reynolds - 1.3.7.5-3Mark Reynolds - 1.3.7.5-2Mark Reynolds - 1.3.7.5-1Mark Reynolds - 1.3.6.1-16Mark Reynolds - 1.3.6.1-15Mark Reynolds - 1.3.6.1-14Mark Reynolds - 1.3.6.1-13Mark Reynolds - 1.3.6.1-12Mark Reynolds - 1.3.6.1-11Mark Reynolds - 1.3.6.1-10Mark Reynolds - 1.3.6.1-9Mark Reynolds - 1.3.6.1-8Mark Reynolds - 1.3.6.1-7Mark Reynolds - 1.3.6.1-6Mark Reynolds - 1.3.6.1-5Mark Reynolds - 1.3.6.1-4Mark Reynolds - 1.3.6.1-3Mark Reynolds - 1.3.6.1-2Mark Reynolds - 1.3.6.1-1Noriko Hosoi - 1.3.5.10-12Noriko Hosoi - 1.3.5.10-11Noriko Hosoi - 1.3.5.10-10Noriko Hosoi - 1.3.5.10-9Noriko Hosoi - 1.3.5.10-8Noriko Hosoi - 1.3.5.10-7Noriko Hosoi - 1.3.5.10-6Noriko Hosoi - 1.3.5.10-5Noriko Hosoi - 1.3.5.10-4Noriko Hosoi - 1.3.5.10-3Noriko Hosoi - 1.3.5.10-2Noriko Hosoi - 1.3.5.10-1Noriko Hosoi - 1.3.5.9-1Noriko Hosoi - 1.3.5.8-1Noriko Hosoi - 1.3.5.7-1Noriko Hosoi - 1.3.5.6-1Noriko Hosoi - 1.3.5.5-1Noriko Hosoi - 1.3.5.4-1Noriko Hosoi - 1.3.5.3-1Noriko Hosoi - 1.3.5.2-1Noriko Hosoi - 1.3.4.0-19Noriko Hosoi - 1.3.4.0-18Noriko Hosoi - 1.3.4.0-17Noriko Hosoi - 1.3.4.0-16Noriko Hosoi - 1.3.4.0-15Noriko Hosoi - 1.3.4.0-14Noriko Hosoi - 1.3.4.0-13Noriko Hosoi - 1.3.4.0-12Noriko Hosoi - 1.3.4.0-11Noriko Hosoi - 1.3.4.0-10Noriko Hosoi - 1.3.4.0-9Noriko Hosoi - 1.3.4.0-8Noriko Hosoi - 1.3.4.0-7Noriko Hosoi - 1.3.4.0-6Noriko Hosoi - 1.3.4.0-5Noriko Hosoi - 1.3.4.0-4Noriko Hosoi - 1.3.4.0-3Noriko Hosoi - 1.3.4.0-2Noriko Hosoi - 1.3.4.0-1Noriko Hosoi - 1.3.3.1-19Noriko Hosoi - 1.3.3.1-18Noriko Hosoi - 1.3.3.1-17Noriko Hosoi - 1.3.3.1-16Noriko Hosoi - 1.3.3.1-15Noriko Hosoi - 1.3.3.1-14Noriko Hosoi - 1.3.3.1-13Noriko Hosoi - 1.3.3.1-12Noriko Hosoi - 1.3.3.1-11Noriko Hosoi - 1.3.3.1-10Noriko Hosoi - 1.3.3.1-9Noriko Hosoi - 1.3.3.1-8Noriko Hosoi - 1.3.3.1-7Noriko Hosoi - 1.3.3.1-6Noriko Hosoi - 1.3.3.1-5Noriko Hosoi - 1.3.3.1-4Rich Megginson - 1.3.3.1-3Noriko Hosoi - 1.3.3.1-2Noriko Hosoi - 1.3.3.1-1Noriko Hosoi - 1.3.1.6-26Noriko Hosoi - 1.3.1.6-25Noriko Hosoi - 1.3.1.6-24Noriko Hosoi - 1.3.1.6-23Noriko Hosoi - 1.3.1.6-22Noriko Hosoi - 1.3.1.6-21Noriko Hosoi - 1.3.1.6-20Noriko Hosoi - 1.3.1.6-19Noriko Hosoi - 1.3.1.6-18Noriko Hosoi - 1.3.1.6-17Daniel Mach - 1.3.1.6-16Noriko Hosoi - 1.3.1.6-15Noriko Hosoi - 1.3.1.6-14Daniel Mach - 1.3.1.6-13Noriko Hosoi - 1.3.1.6-12Rich Megginson - 1.3.1.6-11Rich Megginson - 1.3.1.6-10Noriko Hosoi - 1.3.1.6-9Noriko Hosoi - 1.3.1.6-8Rich Megginson - 1.3.1.6-7Rich Megginson - 1.3.1.6-6Rich Megginson - 1.3.1.6-5Noriko Hosoi - 1.3.1.6-4Rich Megginson - 1.3.1.6-3Noriko Hosoi - 1.3.1.6-2Noriko Hosoi - 1.3.1.6-1Noriko Hosoi - 1.3.1.5-1Noriko Hosoi - 1.3.1.4-1Rich Megginson - 1.3.1.3-1Jan Safranek - 1.3.1.2-2Noriko Hosoi - 1.3.1.2-1Noriko Hosoi - 1.3.1.1-1Noriko Hosoi - 1.3.1.0-1Noriko Hosoi - 1.3.0.5-1Mark Reynolds - 1.3.0.4-1Noriko Hosoi - 1.3.0.3-1Parag Nemade - 1.3.0.2-2Noriko Hosoi - 1.3.0.2-1Noriko Hosoi - 1.3.0.1-1Noriko Hosoi - 1.3.0.0-1Noriko Hosoi - 1.3.0-0.3.rc3Noriko Hosoi - 1.3.0-0.2.rc2Noriko Hosoi - 1.3.0-0.1.rc1Mark Reynolds - 1.3.0.a1-1Rich Megginson - 1.2.11.15-1Rich Megginson - 1.2.11.14-1Rich Megginson - 1.2.11.13-1Rich Megginson - 1.2.11.12-1Mark Reynolds - 1.2.11.11-1Mark Reynolds - 1.2.11.10-1Mark Reynolds - 1.2.11.9-1Mark Reynolds - 1.2.11.8-1Fedora Release Engineering - 1.2.11.7-2.2Petr Pisar - 1.2.11.7-2.1Rich Megginson - 1.2.11.7-2Rich Megginson - 1.2.11.7-1Rich Megginson - 1.2.11.6-1Rich Megginson - 1.2.11.5-2Rich Megginson - 1.2.11.5-1Petr Pisar - 1.2.11.4-1.1Rich Megginson - 1.2.11.4-1Rich Megginson - 1.2.11.3-1Rich Megginson - 1.2.11.2-1Rich Megginson - 1.2.11.1-1Rich Megginson - 1.2.11-0.1.a1Noriko Hosoi - 1.2.10.4-4Noriko Hosoi - 1.2.10.4-3Rich Megginson - 1.2.10.4-2Rich Megginson - 1.2.10.4-1Rich Megginson - 1.2.10.3-1Rich Megginson - 1.2.10.2-1Noriko Hosoi - 1.2.10.1-2Rich Megginson - 1.2.10.1-1Rich Megginson - 1.2.10.0-1Noriko Hosoi - 1.2.10-0.10.rc1.2Petr Pisar - 1.2.10-0.10.rc1.1Rich Megginson - 1.2.10-0.10.rc1Rich Megginson - 1.2.10-0.9.a8Rich Megginson - 1.2.10-0.8.a7Rich Megginson - 1.2.10-0.7.a7Fedora Release Engineering - 1.2.10-0.6.a6.1Rich Megginson - 1.2.10-0.6.a6Rich Megginson - 1.2.10-0.5.a5Rich Megginson - 1.2.10-0.4.a4Rich Megginson - 1.2.10.a3-0.3Rich Megginson - 1.2.10.a2-0.2Rich Megginson - 1.2.10.a1-0.1Rich Megginson - 1.2.9.10-2Rich Megginson - 1.2.9.10-1Rich Megginson - 1.2.9.9-1Rich Megginson - 1.2.9.8-1Rich Megginson - 1.2.9.7-1Rich Megginson - 1.2.9.6-1Rich Megginson - 1.2.9.5-1Rich Megginson - 1.2.9.4-1Rich Megginson - 1.2.9.3-1Rich Megginson - 1.2.9.2-1Rich Megginson - 1.2.9.1-2Rich Megginson - 1.2.9.1-1Petr Sabata - 1.2.9.0-1.2Petr Sabata - 1.2.9.0-1.1Rich Megginson - 1.2.9.0-1Rich Megginson - 1.2.9-0.2.a2Marcela Mašláňová - 1.2.9-0.1.a1.2Marcela Mašláňová - 1.2.9-0.1.a1.1Rich Megginson - 1.2.9-0.1.a1Rich Megginson - 1.2.8.3-1Rich Megginson - 1.2.8.2-1Rich Megginson - 1.2.8.1-1Rich Megginson - 1.2.8.0-1Rich Megginson - 1.2.8-0.10.rc5Rich Megginson - 1.2.8-0.9.rc4Rich Megginson - 1.2.8-0.8.rc2Caolán McNamara - 1.2.8-0.7.rc1Rich Megginson - 1.2.8-0.6.rc1Rich Megginson - 1.2.8-0.5.a3Rich Megginson - 1.2.8-0.4.a3Rich Megginson - 1.2.8-0.3.a3Fedora Release Engineering - 1.2.8-0.2.a2.1Rich Megginson - 1.2.8-0.2.a2Nathan Kinder - 1.2.8-0.1.a1Rich Megginson - 1.2.7.5-1Rich Megginson - 1.2.7.4-2Rich Megginson - 1.2.7.4-1Rich Megginson - 1.2.7.3-1Rich Megginson - 1.2.7.2-1Rich Megginson - 1.2.7.1-2Rich Megginson - 1.2.7.1-1Nathan Kinder - 1.2.7-2Nathan Kinder - 1.2.7-1Rich Megginson - 1.2.7-0.6.a5Rich Megginson - 1.2.7-0.5.a4Rich Megginson - 1.2.7-0.4.a3Rich Megginson - 1.2.7-0.3.a3Rich Megginson - 1.2.7-0.2.a2Rich Megginson - 1.2.7-0.1.a1Rich Megginson - 1.2.6.1-3Rich Megginson - 1.2.6.1-2Rich Megginson - 1.2.6.1-1Rich Megginson - 1.2.6-1Rich Megginson - 1.2.6-0.11.rc7Rich Megginson - 1.2.6-0.10.rc6Rich Megginson - 1.2.6-0.9.rc3Rich Megginson - 1.2.6-0.8.rc3Rich Megginson - 1.2.6-0.7.rc2Nathan Kinder - 1.2.6-0.6.rc1Rich Megginson - 1.2.6-0.5.rc1Marcela Maslanova - 1.2.6-0.4.a4.1Rich Megginson - 1.2.6-0.4.a4Nathan Kinder - 1.2.6-0.4.a3Caolán McNamara - 1.2.6-0.3.a2Rich Megginson - 1.2.6-0.2.a2Nathan Kinder - 1.2.6-0.1.a1Rich Megginson - 1.2.5-1Rich Megginson - 1.2.5-0.5.rc4Rich Megginson - 1.2.5-0.4.rc3Rich Megginson - 1.2.5-0.3.rc2Rich Megginson - 1.2.5-0.2.rc1Rich Megginson - 1.2.5-0.1.a1Rich Megginson - 1.2.4-1Rich Megginson - 1.2.3-1Caolán McNamara - 1.2.2-2Rich Megginson - 1.2.2-1Tomas Mraz - 1.2.1-5Noriko Hosoi - 1.2.1-4Rich Megginson - 1.2.1-3Fedora Release Engineering - 1.2.1-2Rich Megginson - 1.2.1-1Rich Megginson - 1.2.0-4Rich Megginson - 1.2.0-3Rich Megginson - 1.2.0-2Rich Megginson - 1.2.0-1Noriko Hosoi - 1.1.3-7Noriko Hosoi - 1.1.3-6Rich Megginson - 1.1.3-5Rich Megginson - 1.1.3-4Rich Megginson - 1.1.3-3Rich Megginson - 1.1.3-2Rich Megginson - 1.1.3-1Rich Megginson - 1.1.2-1Rich Megginson - 1.1.1-2Rich Megginson - 1.1.1-1Rich Megginson - 1.1.0.1-4Tom "spot" Callaway - 1.1.0.1-3Tom "spot" Callaway - 1.1.0.1-3Rich Megginson - 1.1.0.1-2Rich Megginson - 1.1.0.1-1Fedora Release Engineering - 1.1.0-5Rich Megginson - 1.1.0-4Release Engineering - 1.1.0-3Rich Megginson - 1.1.0-2.0Rich Megginson - 1.1.0-1.2Rich Megginson - 1.1.0-1.1Rich Megginson - 1.1.0-0.3.20070720Nathan Kinder - 1.1.0-0.2.20070320Rich Megginson - 1.1.0-0.1.20070320Rich Megginson - 1.1.0-0.1.20070223Rich Megginson - 1.1.0-0.1.20070213Rich Megginson - 1.1.0-1.el4.20070209Rich Megginson - 1.1.0-1.el4.20070207Rich Megginson - 1.1.0-1.el4.20070129Rich Megginson - 1.1.0-8.el4.20070125Rich Megginson - 1.1.0-7.el4.20070125Rich Megginson - 1.1.0-6.el4.20070125Rich Megginson - 1.1.0-5.el4.20070125Rich Megginson - 1.1.0-4.el4.20070119Rich Megginson - 1.1.0-3.el4.20070119Rich Megginson - 1.1.0-2.el4.20070119Rich Megginson - 1.1.0-1.el4.cvs20070119Rich Megginson - 1.1-0.1.cvs20070115Dennis Gilmore - 1.1-0.1.cvs20070108Rich Megginson - 1.0.99-16Rich Megginson - 1.0.99-15Rich Megginson - 1.0.99-14Rich Megginson - 1.0.99-13Rich Megginson - 1.0.99-12Rich Megginson - 1.0.99-11Rich Megginson - 1.0.99-10Rich Megginson - 1.0.99-9Rich Megginson - 1.0.99-8Rich Megginson - 1.0.99-7Rich Megginson - 1.0.99-6Rich Megginson - 1.0.99-5Rich Megginson - 1.0.99-4Rich Megginson - 1.0.99-3Rich Megginson - 1.0.99-2Rich Megginson - 1.0.99-1- Bump version to 1.3.8.4-15 - Resolves: Bug 1624004 - Fix regression in last patch- Bump version to 1.3.8.4-14 - Resolves: Bug 1624004 - potential denial of service attack- Bump version to 1.3.8.4-13 - Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly- Bump version to 1.3.8.4-12 - Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)- Bump version to 1.3.8.4-11 - Resolves: Bug 1614820 - Server crash through modify command with large DN- Bump verison to 1.3.8.4-10 - Resolves: Bug 1614501 - Disable nunc-stans by default - Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server- Bump version to 1.3.8.4-9 - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.- Bump version to 1.3.8.4-8 - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.- Bump version to 1.3.8.4-7 - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA (removed patch file all together)- Bump version to 1.3.8.4-6 - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA- Bump version to 1.3.8.4-5 - Resolves: Bug 1595766 - CVE-2018-10871 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default- Bump version to 1.3.8.4-4 - Resolves: Bug 1597384 - Async operations can hang when the server is running nunc-stans - Resolves: Bug 1598186 - A search with the scope "one" returns a non-matching entry - Resolves: Bug 1598718 - import fails if backend name is "default" - Resolves: Bug 1598478 - If a replica is created with a bindDNGroup, this group is taken into account only after bindDNGroupCheckInterval seconds - Resolves: Bug 1525256 - Invalid SNMP MIB for 389 DS - Resolves: Bug 1597518 - ds-replcheck command returns traceback errors against ldif files having garbage content when run in offline mode- Bump version to 1.3.8.4-3 - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.- Bump version to 1.3.8.4-2 - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.- Bump version to 1.3.8.4-1 - Resolves: Bug 1560653 - Rebase 389-ds-base in RHEL 7.6 to 1.3.8- Bump version to 1.3.8.2-1 - Resolves: Bug 1560653 - Rebase 389-ds-base in RHEL 7.6 to 1.3.8- Bump version to 1.3.7.5-18 - Resolves: Bug 1539082 - Fix memory leak- Bump version to 1.3.7.5.17 - Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent - Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 - Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp- Bump version to 1.3.7.5-16 - Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP- Bump version to 1.3.7.5-15 - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy - Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections- Bump version to 1.3.7.5-14 - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)- Bump version to 1.3.7.5-13 - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 - Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c - Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy- Bump version to 1.3.7.5-12 - Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter - Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica - Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length - Resolves: Bug 1518287 - heap-use-after-free in csn_as - Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing - Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired - Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate - Resolves: Bug 1457315 - cmocka tests are not executed during rpm build - Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL- Bump version to 1.3.7.5-11 - Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape - Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base - Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base - Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get- Bump version to 1.3.7.5-10 - Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled. - Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick - Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base - Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package - Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset - Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes - Resolves: Bug 1498980 - heap corruption during import - Resolves: Bug 1511462 - scope one searches give incorrect results - Resolves: Bug 1514033 - opened connection are hanging, no longer poll- Bump version to 1.3.7.5-9 - Resolves: Bug 1271208 - Fix copy and paste error- Bump version to 1.3.7.5-8 - Resolves: Bug 1509016 - cleanallruv task is not logging any information- Bump version to 1.3.7.5-7 - Resolves: Bug 1474100 - Use of uninitialized value in string ne at /usr/bin/logconv.pl - Resolves: Bug 1506425 - Improve valueset sort performance during valueset purging - Resolves: Bug 1505046 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV - Resolves: Bug 1271208 - nsds5ReplicaProtocolTimeout attribute accepts negative values- Bump version to 1.3.7.5-6 - Resolves: Bug 1488836 - directory server fails to start because maxdisksize - Resolves: Bug 1474100 - Use of uninitialized value in string ne at /usr/bin/logconv.pl - Resolves: Bug 1447308 - Add option to show full un-ellipsized output in status-dirsrv - Resolves: Bug 1438526 - Server allows to set any nsds5replicaid in the existing replica entry - Resolves: Bug 1185774 - Missing warning for invalid replica backoff configuration- Bump version to 1.3.7.5-5 - Resolves: Bug 1476207 - Enabling instance service doesn't work - Resolves: Bug 1434335 - Errors log filled with attrlist_replace - attr_replace - Resolves: Bug 1453155 - unable to retrieve specific cosAttribute when subtree password policy is configured - Resolves: Bug 1459965 - repl-monitor - matches null string many times in regex - Resolves: Bug 1463204 - Adding a database entry fails if the same database was deleted after an import - Resolves: Bug 1469567 - Activating roles returns error 16 - Resolves: Bug 1498773 - Installation of ipa fails with crash in topology plugin - Resolves: Bug 1501058 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends - Resolves: Bug 1352121 - [RFE] allow to enable MemberOf plugin in dedicated consumer- Bump version to 1.3.7.5-4 - Fix coverity warnings from convscan - Improve atomics- Bump version to 1.3.7.5-3 - specfile remove cap_net_bind_service+ep from ns-slapd- Bump version to 1.3.7.5-2 - specfile updates: add asan support, make nunc-stans default, and general cleanup- Bump version to 1.3.7.5-1 - Resolves: Bug 1470169 - Rebase 389-ds-base in RHEL 7.5 to 1.3.7- Bump version to 1.3.6.1-16 - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify - Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird - Resolves: Bug 1456774 - ipa-replica server fails to upgrade- Bump version to 1.3.6.1-15 - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify - Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file" - Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0- Bump version to 1.3.6.1-14 - Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing. - Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value - Resolves: Bug 1449098 - ns-slapd crashes in role cache creation - Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so - Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users - Resolves: Bug 1451657 - -v option is not working for db2ldif.pl- Bump version to 1.3.6.1-13 - Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)- Bump version to 1.3.6.1-12 - Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10- Bump version to 1.3.6.1-11 - Resolves: Bug 1410207 - Utility command had better use INFO log level for the output - Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl- Bump version to 1.3.6.1-10 - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val - Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous - Resolves: Bug 1377452 - Integer overflow in performance counters - Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values - Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975 - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script- Bump version to 1.3.6.1-9 - Resolves: Bug 1442880 - setup-ds-admin.pl -u with nsslapd-localhost changed - Resolves: Bug 1443682 - util_info_sys_pages should be able to detect memory restrictions in a cgroup- Bump version to 1.3.6.1-8 - Resolves: Bug 1432016 - Possible deadlock while installing an ipa replica - Resolves: Bug 1438029 - Overflow in memberof- Bump version to 1.3.6.1-7 - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set(fix crash regression) - Resolves: bug 1381326 - dirsrv-snmp.service is provided by 389-ds-base instead of 389-ds-base-snmp - Resolves: bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl.- Bump version to 1.3.6.1-6 - Resolves: bug 1437006 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages - Resolves: bug 1341689 - dbmon.sh / cn=monitor] nsslapd-db-pages-in-use is increasing - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set - Resolves: bug 1397288 - typo in logconv.pl man page - Resolves: bug 1436994 - incorrect pathes in pkg-config files - Resolves: bug 1396448 - Add a hard dependency for >=selinux-policy-3.13.1-75- Bump version to 1.3.6.1-5 - Resolves: bug 1377452 - Integer overflow in counters and monitor - Resolves: bug 1425907 - Harden password storage scheme - Resolves: bug 1431207 - ns-slapd killed by SIGABRT- Bump version to 1.3.6.1-4 - Resolves: bug 1379424 - Reset-agmt-update-staus-and-total-init - Resolves: bug 1394000 - dbmon.sh-fails-if-you-have-nsslapd-requi.patch - Resolves: bug 1417344 - targetattr-wildcard-evaluation-is-incorr.patch - Resolves: bug 1429770 - ds-logpipe.py-crashes-for-non-existing-u.patch - Resolves: bug 1433697 - Fix-double-free-in-_cl5NewDBFile-error-path.patch - Resolves: bug 1433996 - retrocl-can-crash-server-at-shutdown.patch - Resolves: bug 1434967 - rpm-would-not-create-valid-pkgconfig-fi.patch - Resolves: bug 1417338 - To-debug-DB_DEADLOCK-condition-allow-to.patch - Resolves: bug 1433850 - Deleting-suffix-can-hang-server.patch- Bump version to 1.3.6.1-3 - Fix spec file to include the tests- Bump version to 1.3.6.1-2 - Resolves: bug 1431877 - 389-1.3.6.1-1.el7 covscan errors - Resolves: bug 1432206 - content sync plugin can hang server shutdown - Resolves: bug 1432149 - sasl external binds fail in 1.3.6.1- Bump version to 1.3.6.1-1 - Resolves: bug 1388567 - Rebase 389-ds-base to 1.3.6 in RHEL-7.4- Release 1.3.5.10-12 - Resolves: bug 1384785 - Replica install fails with old IPA master sometimes during replication process (DS 48992) - Resolves: bug 1388501 - 389-ds-base is missing runtime dependency - bind-utils (DS 48328) - Resolves: bug 1388581 - Replication stops working only when fips mode is set to true (DS 48909) - Resolves: bug 1390342 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin (DS 49014) - Resolves: bug 1390343 - trace args debug logging must be more restrictive (DS 49009)- Release 1.3.5.10-11 - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates- Release 1.3.5.10-10 - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957) - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)- Release 1.3.5.10-9 - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950) - Resolves: bug 1366828 - audit on failure doesn't work if attribute nsslapd-auditlog-logging-enabled is NOT enabled (DS 48958) - Resolves: bug 1368520 - Crash in import_wait_for_space_in_fifo() (DS 48960) - Resolves: bug 1368956 - man page of ns-accountstatus.pl shows redundant entries for -p port option - Resolves: bug 1369537 - passwordMinAge attribute doesn't limit the minimum age of the password (DS 48967) - Resolves: bug 1369570 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964) - Resolves: bug 1369425 - ACI behaves erratically (DS 48972) - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957) - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969) - Resolves: bug 1371283 - Server Side Sorting crashes the server. (DS 48970) - Resolves: bug 1371284 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)- Release 1.3.5.10-8 - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48954) - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950) - Resolves: bug 1366561 - ns-accountstatus.pl giving error even "No such object (32)" (DS 48956)- Release 1.3.5.10-7 - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450) - Resolves: bug 1360976 - fixing a compiler warning- Release 1.3.5.10-6 - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48928) - Resolves: bug 1360447 - nsslapd-workingdir is empty when ns-slapd is started by systemd (DS 48939) - Resolves: bug 1360327 - remove-ds.pl deletes an instance even if wrong prefix was specified (DS 48934) - Resolves: bug 1349815 - DS logs have warning:ancestorid not indexed for all CS subsystems (DS 48940) - Resolves: bug 1329061 - 389-ds-base-1.3.4.0-29.el7_2 "hang" (DS 48882) - Resolves: bug 1360976 - EMBARGOED CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack - Resolves: bug 1361134 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password (DS 48943) - Resolves: bug 1361321 - Duplicate collation entries (DS 48936) - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450) - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat- Release 1.3.5.10-5 - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)- Release 1.3.5.10-4 - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144) - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919) - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat - Resolves: bug 1354660 - flow control in replication also blocks receiving results (DS 48767) - Resolves: bug 1356261 - Fixup tombstone task needs to set proper flag when updating (DS 48924) - Resolves: bug 1355760 - ns-slapd crashes during the deletion of backend (DS 48922) - Resolves: bug 1353629 - DS shuts down automatically if dnaThreshold is set to 0 in a MMR setup (DS 48916) - Resolves: bug 1355879 - nunc-stans: ns-slapd crashes during startup with SIGILL on AMD Opteron 280 (DS 48925)- Release 1.3.5.10-3 - Resolves: bug 1354374 - Fixing the tarball version in the sources file.- Release 1.3.5.10-2 - Resolves: bug 1353714 - If a cipher is disabled do not attempt to look it up (DS 48743) - Resolves: bug 1353592 - Setup-ds.pl --update fails - regression (DS 48755) - Resolves: bug 1353544 - db2bak.pl task enters infinitive loop when bak fs is almost full (DS 48914) - Resolves: bug 1354374 - Upgrade to 389-ds-base >= 1.3.5.5 doesn't install 389-ds-base-snmp (DS 48918)- Release 1.3.5.10-1 - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48905)- Release 1.3.5.9-1 - Resolves: bug 1349571 - Improve MMR replication convergence (DS 48636) - Resolves: bug 1304682 - "stale" automember rule (associated to a removed group) causes discrepancies in the database (DS 48637) - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755) - Resolves: bug 1316731 - syncrepl search returning error 329; plugin sending a bad error code (DS 48904) - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule (DS 48891) - Resolves: bug 1349577 - Values of dbcachetries/dbcachehits in cn=monitor could overflow. (DS 48899) - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT (DS 48898) - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538) - Resolves: bug 1350632 - ns-slapd shutdown crashes if pwdstorageschema name is from stack. (DS 48902)- Release 1.3.5.8-1 - Resolves: bug 1290101 - proxyauth support does not work when bound as directory manager (DS 48366)- Release 1.3.5.7-1 - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109) - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449) - Resolves: bug 1290101 - proxyauth support does not work when bound as directory manager (DS 48366) - Resolves: bug 1338872 - Wrong result code display in audit-failure log (DS 48892) - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538) - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule (DS 48891) - Resolves: bug 1347407 - By default aci can be read by anonymous (DS 48354) - Resolves: bug 1347412 - cn=SNMP,cn=config entry can be read by anonymous (DS 48893)- Release 1.3.5.6-1 - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982) - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48766, DS 48636) - Resolves: bug 1233926 - "matching rules" in ACI's "bind rules not fully evaluated (DS 48234) - Resolves: bug 1346165 - 389-ds-base-1.3.5.5-1.el7.x86_64 requires policycoreutils-py- Release 1.3.5.5-1 - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 48833) - Resolves: bug 1344414 - [RFE] adding pre/post extop ability (DS 48880) - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449) - Resolves: bug 1257568 - /usr/lib64/dirsrv/libnunc-stans.so is owned by both -libs and -devel (DS 48404) - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755) - Resolves: bug 1342609 - At startup DES to AES password conversion causes timeout in start script (DS 48862) - Resolves: bug 1316328 - search returns no entry when OR filter component contains non readable attribute (DS 48275) - Resolves: bug 1280456 - setup-ds should detect if port is already defined (DS 48336) - Resolves: bug 1312557 - dirsrv service fails to start when nsslapd-listenhost is configured (DS 48747) - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48752) - Resolves: bug 1340307 - Running db2index with no options breaks replication (DS 48854) - Resolves: bug 1337195 - Regression introduced in matching rules by DS 48746 (DS 48844) - Resolves: bug 1335492 - Modifier's name is not recorded in the audit log with modrdn and moddn operations (DS 48834) - Resolves: bug 1316741 - ldctl should support -H with ldap uris (DS 48754)- release 1.3.5.4-1 - Resolves: bug 1334455 - db2ldif is not taking into account multiple suffixes or backends (DS 48828) - Resolves: bug 1241563 - The "repl-monitor" web page does not display "year" in date. (DS 48220) - Resolves: bug 1335618 - Server ram sanity checks work in isolation (DS 48617) - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48837)- release 1.3.5.3-1 - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144) - Resolves: bug 1332533 - ns-accountstatus.pl gives error message on execution along with results. (DS 48815) - Resolves: bug 1332709 - password history is not updated when an admin resets the password (DS 48813) - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48822) - Resolves: bug 1333515 - Enable DS to offer weaker DH params in NSS (DS 48798)- release 1.3.5.2-1 - Resolves: bug 1270020 - Rebase 389-ds-base to 1.3.5 in RHEL-7.3 - Resolves: bug 1288229 - many attrlist_replace errors in connection with cleanallruv (DS 48283) - Resolves: bug 1315893 - License tag does not match actual license of code (DS 48757) - Resolves: bug 1320715 - DES to AES password conversion fails if a backend is empty (DS 48777) - Resolves: bug 190862 - [RFE] Default password syntax settings don't work with fine-grained policies (DS 142) - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 548) - Resolves: bug 1143066 - The dirsrv user/group should be created in rpm %pre, and ideally with fixed uid/gid (DS 48285) - Resolves: bug 1153758 - [RFE] Support SASL/GSSAPI when ns-slapd is behind a load-balancer (DS 48332) - Resolves: bug 1160902 - search, matching rules and filter error "unsupported type 0xA9" (DS 48016) - Resolves: bug 1186512 - High memory fragmentation observed in ns-slapd; OOM-Killer invoked (DS 48377, 48129) - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109) - Resolves: bug 1209094 - [RFE] Allow logging of rejected changes (DS 48145, 48280) - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144) - Resolves: bug 1210842 - [RFE] Add PIDFile option to systemd service file (DS 47951) - Resolves: bug 1223510 - [RFE] it could be nice to have nsslapd-maxbersize default to bigger than 2Mb (DS 48326) - Resolves: bug 1229799 - ldclt-bin killed by SIGSEGV (DS 48289) - Resolves: bug 1249908 - No validation check for the value for nsslapd-db-locks. (DS 48244) - Resolves: bug 1254887 - No man page entry for - option '-u' of dbgen.pl for adding group entries with uniquemembers (DS 48290) - Resolves: bug 1255557 - db2index creates index entry from deleted records (DS 48252) - Resolves: bug 1258610 - total update request must not be lost (DS 48255) - Resolves: bug 1258611 - dna plugin needs to handle binddn groups for authorization (DS 48258) - Resolves: bug 1259624 - [RFE] Provide a utility to detect accounts locked due to inactivity (DS 48269) - Resolves: bug 1259950 - Add config setting to MemberOf Plugin to add required objectclass got memberOf attribute (DS 48267) - Resolves: bug 1266510 - Linked Attributes plug-in - wrong behaviour when adding valid and broken links (DS 48295) - Resolves: bug 1266532 - Linked Attributes plug-in - won't update links after MODRDN operation (DS 48294) - Resolves: bug 1267750 - pagedresults - when timed out, search results could have been already freed. (DS 48299) - Resolves: bug 1269378 - ds-logpipe.py with wrong arguments - python exception in the output (DS 48302) - Resolves: bug 1271330 - nunc-stans: Attempt to release connection that is not acquired (DS 48311) - Resolves: bug 1272677 - nunc stans: ns-slapd killed by SIGTERM - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT - Resolves: bug 1273142 - crash in Managed Entry plugin (DS 48312) - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982) - Resolves: bug 1273550 - Deadlock between two MODs on the same entry between entry cache and backend lock (DS 47978) - Resolves: bug 1273555 - deadlock in mep delete post op (DS 47976) - Resolves: bug 1273584 - lower password history minimum to 1 (DS 48394) - Resolves: bug 1275763 - [RFE] add setup-ds.pl option to disable instance specific scripts (DS 47840) - Resolves: bug 1276072 - [RFE] Allow RHDS to be setup using a DNS CNAME alias for General.FullMachineName (DS 48328) - Resolves: bug 1278567 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338) - Resolves: bug 1278584 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well. (DS 48339) - Resolves: bug 1278755 - deadlock on connection mutex (DS 48341) - Resolves: bug 1278987 - Cannot upgrade a consumer to supplier in a multimaster environment (DS 48325) - Resolves: bug 1280123 - acl - regression - trailing ', (comma)' in macro matched value is not removed. (DS 48344) - Resolves: bug 1290111 - [RFE] Support for rfc3673 '+' to return operational attributes (DS 48363) - Resolves: bug 1290141 - With exhausted range, part of DNA shared configuration is deleted after server restart (DS 48362) - Resolves: bug 1290242 - SimplePagedResults -- in the search error case, simple paged results slot was not released. (DS 48375) - Resolves: bug 1290600 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same ldapmodify operation (DS 48370) - Resolves: bug 1295947 - 389-ds hanging after a few minutes of operation (DS 48406, revert 48338) - Resolves: bug 1296310 - ldclt - segmentation fault error while binding (DS 48400) - Resolves: bug 1299758 - CVE-2016-0741 389-ds-base: Worker threads do not detect abnormally closed connections causing DoS [rhel-7.3] - Resolves: bug 1301097 - logconv.pl displays negative operation speeds (DS 48446) - Resolves: bug 1302823 - Crash in slapi_get_object_extension (DS 48536) - Resolves: bug 1303641 - heap corruption at schema replication. (DS 48492) - Resolves: bug 1307151 - keep alive entries can break replication (DS 48445) - Resolves: bug 1310848 - Supplier can skip a failing update, although it should retry. (DS 47788) - Resolves: bug 1314557 - change severity of some messages related to "keep alive" enties (DS 48420) - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450) - Resolves: bug 1316742 - no plugin calls in tombstone purging (DS 48759) - Resolves: bug 1319329 - [RFE] add nsslapd-auditlog-logging-enabled: off to template-dse.ldif (DS 48145) - Resolves: bug 1320295 - If nsSSL3 is on, even if SSL v3 is not really enabled, a confusing message is logged. (DS 48775) - Resolves: bug 1326520 - db2index uses a buffer size derived from dbcachesize (DS 48383) - Resolves: bug 1328936 - objectclass values could be dropped on the consumer (DS 48799) - Resolves: bug 1287475 - [RFE] response control for password age should be sent by default by RHDS (DS 48369) - Resolves: bug 1331343 - Paged results search returns the blank list of entries (DS 48808)- release 1.3.4.0-19 - Resolves: bug 1228823 - async simple paged results issue (DS 48299, DS 48192) - Resolves: bug 1266944 - ns-slapd crash during ipa-replica-manage del (DS 48298)- release 1.3.4.0-18 - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266, DS 48284)- release 1.3.4.0-17 - Resolves: bug 1259949 - A backport error (coverity -- unused variable 'init_retry')- release 1.3.4.0-16 - Resolves: bug 1243970 - In MMR, double free coould occur under some special condition (DS 48276, DS 48226) - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266) - Resolves: bug 1241723 - cleanallruv - fix regression with server shutdown (DS 48217) - Resolves: bug 1264224 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in (DS 48188)- release 1.3.4.0-15 - Resolves: bug 1258996 - Complex filter in a search request doen't work as expected. (regression) (DS 48265) - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)- release 1.3.4.0-14 - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228) - Resolves: bug 1255851 - Shell CLI fails with usage errors if an argument containing white spaces is given (DS 48254) - Resolves: bug 1256938 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax (DS 47757)- release 1.3.4.0-13 - Resolves: bug 1245519 - remove debug logging from retro cl (DS 47831)- release 1.3.4.0-12 - Resolves: bug 1252133 - replica upgrade failed in starting dirsrv service (DS 48243) - Resolves: bug 1254344 - Server crashes in ACL_LasFindFlush during shutdown if ACIs contain IP addresss restrictions (DS 48233)- release 1.3.4.0-11 - Resolves: bug 1249784 - ipa-dnskeysyncd unhandled exception on named-pkcs11 start (DS 48249) - Resolves: bug 1252082 - removing chaining database links trigger valgrind read error (DS 47686) - Resolves: bug 1252207 - bashisms in 389-ds-base admin scripts (DS 47511) - Resolves: bug 1252533 - Man pages and help for remove-ds.pl doesn't display "-a" option (DS 48245) - Resolves: bug 1252781 - Slapd crashes reported from latest builds (DS 48250)- release 1.3.4.0-10 - Resolves: bug 1245519 - Fix coverity issues (DS 47931)- release 1.3.4.0-9 - Resolves: bug 1240876 - verify_db.pl doesn't verify DB specified by -a option. (DS 48215) - Resolves: bug 1245235 - winsync lastlogon attribute not syncing between IPA & Windows 2008. (DS 48232) - Resolves: bug 1245519 - Deadlock with retrochangelog, memberof plugin (DS 47931) - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228) - Resolves: bug 1247811 - logconv autobind handling regression caused by 47446 (DS 48231) - Resolves: bug 1250177 - Investigate betxn plugins to ensure they return the correct error code (DS 47810)- release 1.3.4.0-8 - Resolves: bug 1160243 - [RFE] allow logconv.pl -S/-E switches to work even when exact/same timestamps are not present in access log file (DS 47910) - Resolves: bug 1172037 - winsync range retrieval gets only 5000 values upon initialization (DS 48010) - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224) - Resolves: bug 1243950 - When starting a replica agreement a deadlock can occur with an op updating nsuniqueid index (DS 48179) - Resolves: bug 1243970 - In MMR, double free coould occur under some special condition (DS 48226) - Resolves: bug 1244926 - Crash while triming the retro changelog (DS 48206)- release 1.3.4.0-7 - Resolves: bug 1235060 - Fix coverity issues - 07/14/2015 (DS 48203) - Resolves: bug 1242531 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)- release 1.3.4.0-6 - Resolves: bug 1240845 - cleanallruv should completely clean changelog (DS 48208) - Resolves: bug 1095603 - Any negative LDAP error code number reported as Illegal error by ldclt. (DS 47799) - Resolves: bug 1168675 - Inconsistent behaviour of DS when LDAP Sync is used with an invalid cookie (DS 48013) - Resolves: bug 1241723 - cleanAllRUV hangs shutdown if not all of the replicas are online (DS 48217) - Resolves: bug 1241497 - crash in ns-slapd when deleting winSyncSubtreePair from sync agreement (DS 48216) - Resolves: bug 1240404 - Silent install needs to properly exit when INF file is missing (DS 48119) - Resolves: bug 1240406 - Remove warning suppression in 1.3.4 (DS 47878) - Resolves: bug 1242683 - Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute (DS 48223) - Resolves: bug 1160243 - logconv.pl - validate start and end time args (DS 47910) - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224) - Resolves: bug 1230996 - CI test: fixing test cases for ticket 48194 (DS 48194)- release 1.3.4.0-5 - Resolves: bug 1235060 - Fix coverity issues (DS 48203)- release 1.3.4.0-4 - Resolves: bug 1240404 - setup-ds.pl does not log invalid --file path errors the same (DS 48119) - Resolves: bug 1240406 - setup -u stops after first failure (DS 47878)- release 1.3.4.0-3 - Resolves: bug 1228823 - async simple paged results issue (DS 48192) - Resolves: bug 1237325 - reindex off-line twice could provoke index corruption (DS 48212) - Resolves: bug 1238790 - ldapsearch on nsslapd-maxbersize returns 0 instead of current value (DS 48214)- release 1.3.4.0-2 - Resolves: bug 1235060 - Fix coverity issues - Resolves: bug 1235387 - Slow replication when deleting large quantities of multi-valued attributes (DS 48195)- Release 1.3.4.0-1 (rebase) - Enable nunc-stans for x86_64. - Resolves: bug 1034325 - Linked attributes betxnpreoperation - transaction not aborted when linked entry does not exit (DS 47640) - Resolves: bug 1052755 - Retro Changelog Plugin accepts invalid value in nsslapd-changelogmaxage attribute (DS 47669) - Resolves: bug 1096409 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown (DS 47801) - Resolves: bug 1145378 - Adding an entry with an invalid password as rootDN is incorrectly rejected (DS 47900) - Resolves: bug 1145382 - Bad manipulation of passwordhistory (DS 47905) - Resolves: bug 1154147 - Uniqueness plugin: should allow to exclude some subtrees from its scope (DS 47927) - Resolves: bug 1171358 - Make ReplicaWaitForAsyncResults configurable (DS 47957) - Resolves: bug 1171663 - MODDN fails when entry doesn't have memberOf attribute and new DN is in the scope of memberOfExcludeSubtree (DS 47526) - Resolves: bug 1174457 - [RFE] memberOf - add option to skip nested group lookups during delete operations (DS 47963) - Resolves: bug 1178640 - db2bak.pl man page should be improved. (DS 48008) - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981) - Resolves: bug 1180331 - Local Password Policies for Nested OU's not honoured (DS 47980) - Resolves: bug 1180776 - nsslapd-db-locks modify not taking into account (DS 47934) - Resolves: bug 1181341 - nsslapd-changelogtrim-interval and nsslapd-changelogcompactdb-interval are not validated (DS 47617) - Resolves: bug 1185882 - ns-activate.pl fails to activate account if it was disabled on AD (DS 48001) - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005) - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030) - Resolves: bug 1206309 - winsync sets AccountUserControl in AD to 544 (DS 47723) - Resolves: bug 1210845 - slapd crashes during Dogtag clone reinstallation (DS 47966) - Resolves: bug 1210850 - add an option '-u' to dbgen.pl for adding group entries with (DS 48025) - Resolves: bug 1210852 - aci with wildcard and macro not correctly evaluated (DS 48141)- release 1.3.3.1-19 - Resolves: bug 1230996 - nsSSL3Ciphers preference not enforced server side (DS 48194)- release 1.3.3.1-18 - Resolves: bug 1228823 - async simple paged results issue (DS 48146, DS 48192)- release 1.3.3.1-17 - Resolves: bug 1226510 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane (DS 48190)- release 1.3.3.1-16 - Resolves: bug 1212894 - CVE-2015-1854 389ds-base: access control bypass with modrdn- release 1.3.3.1-15 - Setting correct build tag 'rhel-7.1-z-candidate'- release 1.3.3.1-14 - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030) Fixes spec file to make sure all the server instances are stopped before upgrade - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005)- release 1.3.3.1-13 - Resolves: bug 1183655 - Fixed Covscan FORWARD_NULL defects (DS 47988)- release 1.3.3.1-12 - Resolves: bug 1182477 - Windows Sync accidentally cleared raw_entry (DS 47989) - Resolves: bug 1180325 - upgrade script fails if /etc and /var are on different file systems (DS 47991 ) - Resolves: bug 1183655 - Schema learning mechanism, in replication, unable to extend an existing definition (DS 47988)- release 1.3.3.1-11 - Resolves: bug 1080186 - During delete operation do not refresh cache entry if it is a tombstone (DS 47750)- release 1.3.3.1-10 - Resolves: bug 1172731 - CVE-2014-8112 password hashing bypassed when "nsslapd-unhashed-pw-switch" is set to off - Resolves: bug 1166265 - DS hangs during online total update (DS 47942) - Resolves: bug 1168151 - CVE-2014-8105 information disclosure through 'cn=changelog' subtree - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable (DS 47526) - Resolves: bug 1171356 - Bind DN tracking unable to write to internalModifiersName without special permissions (DS 47950) - Resolves: bug 1153737 - logconv.pl -- support parsing/showing/reporting different protocol versions (DS 47949) - Resolves: bug 1171355 - start dirsrv after chrony on RHEL7 and Fedora (DS 47947) - Resolves: bug 1170707 - cos_cache_build_definition_list does not stop during server shutdown (DS 47967) - Resolves: bug 1170708 - COS memory leak when rebuilding the cache (DS - Ticket 47969) - Resolves: bug 1170709 - Account lockout attributes incorrectly updated after failed SASL Bind (DS 47970) - Resolves: bug 1166260 - cookie_change_info returns random negative number if there was no change in a tree (DS 47960) - Resolves: bug 1012991 - Error log levels not displayed correctly (DS 47636) - Resolves: bug 1108881 - rsearch filter error on any search filter (DS 47722) - Resolves: bug 994690 - Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart (DS 47451) - Resolves: bug 1162997 - Running a plugin task can crash the server (DS 47451) - Resolves: bug 1166252 - RHEL7.1 ns-slapd segfault when ipa-replica-install restarts (DS 47451) - Resolves: bug 1172597 - Crash if setting invalid plugin config area for MemberOf Plugin (DS 47525) - Resolves: bug 1139882 - coverity defects found in 1.3.3.x (DS 47965)- release 1.3.3.1-9 - Resolves: bug 1153737 - Disable SSL v3, by default. (DS 47928) - Resolves: bug 1163461 - Should not check aci syntax when deleting an aci (DS 47953)- release 1.3.3.1-8 - Resolves: bug 1156607 - Crash in entry_add_present_values_wsi_multi_valued (DS 47937) - Resolves: bug 1153737 - Disable SSL v3, by default (DS 47928, DS 47945, DS 47948) - Resolves: bug 1158804 - Malformed cookie for LDAP Sync makes DS crash (DS 47939)- release 1.3.3.1-7 - Resolves: bug 1153737 - Disable SSL v3, by default (DS 47928)- release 1.3.3.1-6 - Resolves: bug 1151287 - dynamically added macro aci is not evaluated on the fly (DS 47922) - Resolves: bug 1080186 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten (DS 47897) - Resolves: bug 1150694 - Encoding of SearchResultEntry is missing tag (DS 47920) - Resolves: bug 1150695 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails. (DS 47919) - Resolves: bug 1139882 - Fix remaining compiler warnings (DS 47892) - Resolves: bug 1150206 - result of dna_dn_is_shared_config is incorrectly used (DS 47918)- release 1.3.3.1-5 - Resolves: bug 1139882 - coverity defects found in 1.3.3.x (DS 47892)- release 1.3.3.1-4 - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47750) - Resolves: bug 1145846 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server (DS 47908) - Resolves: bug 1117979 - harden the list of ciphers available by default (phase 2) (DS 47838) - provide enabled ciphers as search result (DS 47880)- release 1.3.3.1-3 - Resolves: bug 1139882 - coverity defects found in 1.3.3.1- release 1.3.3.1-2 - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748) - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47834) - Resolves: bug 1139882 - coverity defects found in 1.3.3.1 (DS 47890) - Resolves: bug 1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (DS 47885 - deref plugin should not return references with noc access rights) - Resolves: bug 1117979 - harden the list of ciphers available by default (DS 47838, DS 47895) - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47889 - DS crashed during ipa-server-install on test_ava_filter)- release 1.3.3.1-1 - Resolves: bug 746646 - RFE: easy way to configure which users and groups to sync with winsync - Resolves: bug 881372 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts. - Resolves: bug 920597 - Possible to add invalid ACI value - Resolves: bug 921162 - Possible to add nonexistent target to ACI - Resolves: bug 923799 - if nsslapd-cachememsize set to the number larger than the RAM available, should result in proper error message. - Resolves: bug 924937 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync - Resolves: bug 951754 - Self entry access ACI not working properly - Resolves: bug 952517 - Dirsrv instance failed to start with Segmentation fault (core dump) after modifying 7-bit check plugin - Resolves: bug 952682 - nsslapd-db-transaction-batch-val turns to -1 - Resolves: bug 966443 - Plugin library path validation - Resolves: bug 975176 - Non-directory manager can change the individual userPassword's storage scheme - Resolves: bug 979465 - IPA replica's - "SASL encrypted packet length exceeds maximum allowed limit" - Resolves: bug 982597 - Some attributes in cn=config should not be multivalued - Resolves: bug 987009 - 389-ds-base - shebang with /usr/bin/env - Resolves: bug 994690 - RFE: Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart - Resolves: bug 1012991 - errorlog-level 16384 is listed as 0 in cn=config - Resolves: bug 1013736 - Enabling/Disabling DNA plug-in throws "ldap_modify: Server Unwilling to Perform (53)" error - Resolves: bug 1014380 - setup-ds.pl doesn't lookup the "root" group correctly - Resolves: bug 1020459 - rsa_null_sha should not be enabled by default - Resolves: bug 1024541 - start dirsrv after ntpd - Resolves: bug 1029959 - Managed Entries betxnpreoperation - transaction not aborted upon failure to create managed entry - Resolves: bug 1031216 - add dbmon.sh - Resolves: bug 1044133 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result - Resolves: bug 1044134 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default - Resolves: bug 1044135 - make connection buffer size adjustable - Resolves: bug 1044137 - posix winsync should support ADD user/group entries from DS to AD - Resolves: bug 1044138 - mep_pre_op: Unable to fetch origin entry - Resolves: bug 1044139 - [RFE] Support RFC 4527 Read Entry Controls - Resolves: bug 1044140 - Allow search to look up 'in memory RUV' - Resolves: bug 1044141 - MMR stress test with dna enabled causes a deadlock - Resolves: bug 1044142 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist - Resolves: bug 1044143 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change - Resolves: bug 1044144 - resurrected entry is not correctly indexed - Resolves: bug 1044146 - Add a warning message when a connection hits the max number of threads - Resolves: bug 1044147 - 7-bit check plugin does not work for userpassword attribute - Resolves: bug 1044148 - The backend name provided to bak2db is not validated - Resolves: bug 1044149 - Winsync should support range retrieval - Resolves: bug 1044150 - 7-bit checking is not necessary for userPassword - Resolves: bug 1044151 - With SeLinux, ports can be labelled per range. setup-ds.pl or setup-ds-admin.pl fail to detect already ranged labelled ports - Resolves: bug 1044152 - ChainOnUpdate: "cn=directory manager" can modify userRoot on consumer without changes being chained or replicated. Directory integrity compromised. - Resolves: bug 1044153 - mods optimizer - Resolves: bug 1044154 - multi master replication allows schema violation - Resolves: bug 1044156 - DS crashes with some 7-bit check plugin configurations - Resolves: bug 1044157 - Some updates of "passwordgraceusertime" are useless when updating "userpassword" - Resolves: bug 1044159 - [RFE] Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533 - Resolves: bug 1044160 - remove-ds.pl should remove /var/lock/dirsrv - Resolves: bug 1044162 - enhance retro changelog - Resolves: bug 1044163 - updates to ruv entry are written to retro changelog - Resolves: bug 1044164 - Password administrators should be able to violate password policy - Resolves: bug 1044168 - Schema replication between DS versions may overwrite newer base schema - Resolves: bug 1044169 - ACIs do not allow attribute subtypes in targetattr keyword - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable - Resolves: bug 1044171 - Allow referential integrity suffixes to be configurable - Resolves: bug 1044172 - Plugin library path validation prevents intentional loading of out-of-tree modules - Resolves: bug 1044173 - make referential integrity configuration more flexible - Resolves: bug 1044177 - allow configuring changelog trim interval - Resolves: bug 1044179 - objectclass may, must lists skip rest of objectclass once first is found in sup - Resolves: bug 1044180 - memberOf on a user is converted to lowercase - Resolves: bug 1044181 - report unindexed internal searches - Resolves: bug 1044183 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added - Resolves: bug 1044185 - dbscan on entryrdn should show all matching values - Resolves: bug 1044187 - logconv.pl - RFE - add on option for a minimum etime for unindexed search stats - Resolves: bug 1044188 - Recognize compressed log files - Resolves: bug 1044191 - support TLSv1.1 and TLSv1.2, if supported by NSS - Resolves: bug 1044193 - default nsslapd-sasl-max-buffer-size should be 2MB - Resolves: bug 1044194 - Complex filter in a search request doen't work as expected. - Resolves: bug 1044196 - Automember plug-in should treat MODRDN operations as ADD operations - Resolves: bug 1044198 - Replication of the schema may overwrite consumer 'attributetypes' even if consumer definition is a superset - Resolves: bug 1044202 - db2bak.pl issue when specifying non-default directory - Resolves: bug 1044203 - Allow referint plugin to use an alternate config area - Resolves: bug 1044205 - Allow memberOf to use an alternate config area - Resolves: bug 1044210 - idl switch does not work - Resolves: bug 1044211 - make old-idl tunable - Resolves: bug 1044212 - IDL-style can become mismatched during partial restoration - Resolves: bug 1044213 - backend performance - introduce optimization levels - Resolves: bug 1044215 - using transaction batchval violates durability - Resolves: bug 1044216 - examine replication code to reduce amount of stored state information - Resolves: bug 1048980 - 7-bit check plugin not checking MODRDN operation - Resolves: bug 1049030 - Windows Sync group issues - Resolves: bug 1052751 - Page control does not work if effective rights control is specified - Resolves: bug 1052754 - Allow nsDS5ReplicaBindDN to be a group DN - Resolves: bug 1057803 - logconv errors when search has invalid bind dn - Resolves: bug 1060032 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime. - Resolves: bug 1061060 - betxn: retro changelog broken after cancelled transaction - Resolves: bug 1061572 - improve dbgen rdn generation, output and man page. - Resolves: bug 1063990 - single valued attribute replicated ADD does not work - Resolves: bug 1064006 - Size returned by slapi_entry_size is not accurate - Resolves: bug 1064986 - Replication retry time attributes cannot be added - Resolves: bug 1067090 - Missing warning for invalid replica backoff configuration - Resolves: bug 1072032 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53 - Resolves: bug 1074306 - Under heavy stress, failure of turning a tombstone into glue makes the server hung - Resolves: bug 1074447 - Part of DNA shared configuration is deleted after server restart - Resolves: bug 1076729 - Continuous add/delete of an entry in MMR setup causes entryrdn-index conflict - Resolves: bug 1077884 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf - Resolves: bug 1077897 - Memory leak with proxy auth control - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing - Resolves: bug 1082967 - attribute uniqueness plugin fails when set as a chaining component - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution - Resolves: bug 1086890 - empty modify returns LDAP_INVALID_DN_SYNTAX - Resolves: bug 1086902 - mem leak in do_bind when there is an error - Resolves: bug 1086904 - mem leak in do_search - rawbase not freed upon certain errors - Resolves: bug 1086908 - Performing deletes during tombstone purging results in operation errors - Resolves: bug 1090178 - #481 breaks possibility to reassemble memberuid list - Resolves: bug 1092099 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone - Resolves: bug 1092342 - nsslapd-ndn-cache-max-size accepts any invalid value. - Resolves: bug 1092648 - Negative value of nsSaslMapPriority is not reset to lowest priority - Resolves: bug 1097004 - Problem with deletion while replicated - Resolves: bug 1098654 - db2bak.pl error with changelogdb - Resolves: bug 1099654 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator. - Resolves: bug 1108405 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..." - Resolves: bug 1108407 - managed entry plugin fails to update managed entry pointer on modrdn operation - Resolves: bug 1108865 - memory leak in ldapsearch filter objectclass=* - Resolves: bug 1108870 - ACI warnings in error log - Resolves: bug 1108872 - Logconv.pl with an empty access log gives lots of errors - Resolves: bug 1108874 - logconv.pl memory continually grows - Resolves: bug 1108881 - rsearch filter error on any search filter - Resolves: bug 1108895 - [RFE - RHDS9] CLI report to monitor replication - Resolves: bug 1108902 - rhds91 389-ds-base-1.2.11.15-31.el6_5.x86_64 crash in db4 __dbc_get_pp env = 0x0 ? - Resolves: bug 1108909 - single valued attribute replicated ADD does not work - Resolves: bug 1109334 - 389 Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled. - Resolves: bug 1109336 - Parent numsubordinate count can be incorrectly updated if an error occurs - Resolves: bug 1109339 - Nested tombstones become orphaned after purge - Resolves: bug 1109354 - Tombstone purging can crash the server if the backend is stopped/disabled - Resolves: bug 1109357 - Coverity issue in 1.3.3 - Resolves: bug 1109364 - valgrind - value mem leaks, uninit mem usage - Resolves: bug 1109375 - provide default syntax plugin - Resolves: bug 1109378 - Environment variables are not passed when DS is started via service - Resolves: bug 1111364 - Updating winsync one-way sync does not affect the behaviour dynamically - Resolves: bug 1112824 - Broken dereference control with the FreeIPA 4.0 ACIs - Resolves: bug 1113605 - server restart wipes out index config if there is a default index - Resolves: bug 1115177 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro - Resolves: bug 1117021 - Server deadlock if online import started while server is under load - Resolves: bug 1117975 - paged results control is not working in some cases when we have a subsuffix. - Resolves: bug 1117979 - harden the list of ciphers available by default - Resolves: bug 1117981 - Fix various typos in manpages & code - Resolves: bug 1117982 - Fix hyphens used as minus signed and other manpage mistakes - Resolves: bug 1118002 - server crashes deleting a replication agreement - Resolves: bug 1118006 - RFE - forcing passwordmustchange attribute by non-cn=directory manager - Resolves: bug 1118007 - [RFE] Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords - Resolves: bug 1118014 - Enhance ACIs to have more control over MODRDN operations - Resolves: bug 1118021 - Return all attributes in rootdse without explicit request - Resolves: bug 1118025 - Slow ldapmodify operation time for large quantities of multi-valued attribute values - Resolves: bug 1118032 - Schema Replication Issue - Resolves: bug 1118034 - 389 DS Server crashes and dies while handles paged searches from clients - Resolves: bug 1118043 - Failed deletion of aci: no such attribute - Resolves: bug 1118048 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed. - Resolves: bug 1118051 - Add switch to disable pre-hashed password checking - Resolves: bug 1118054 - Make ldbm_back_seq independently support transactions - Resolves: bug 1118055 - Add operations rejected by betxn plugins remain in cache - Resolves: bug 1118057 - online import crashes server if using verbose error logging - Resolves: bug 1118059 - add fixup-memberuid.pl script - Resolves: bug 1118060 - winsync plugin modify is broken - Resolves: bug 1118066 - memberof scope: allow to exclude subtrees - Resolves: bug 1118069 - 389-ds production segfault: __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:144 - Resolves: bug 1118074_DELETE_FN - plugin returned error" messages - Resolves: bug 1118076 - ds logs many "Operation error fetching Null DN" messages - Resolves: bug 1118077 - Improve import logging and abort handling - Resolves: bug 1118079 - Multi master replication initialization incomplete after restore of one master - Resolves: bug 1118080 - Don't add unhashed password mod if we don't have an unhashed value - Resolves: bug 1118081 - Investigate betxn plugins to ensure they return the correct error code - Resolves: bug 1118082 - The error result text message should be obtained just prior to sending result - Resolves: bug 1123865 - CVE-2014-3562 389-ds-base: 389-ds: unauthenticated information disclosure [rhel-7.1]- release 1.3.1.6-26 - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution (Ticket 346)- release 1.3.1.6-25 - Resolves: bug 1082740 - ns-slapd crash in reliability 15- release 1.3.1.6-24 - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735); regression - sub-type length in attribute type was mistakenly subtracted.- Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind) (Added 0095-Ticket-47739-directory-server-is-insecurely-misinter.patch) Tue Mar 11 2014 Noriko Hosoi - 1.3.1.6-23 - release 1.3.1.6-22 - Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)- release 1.3.1.6-22 - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735)- release 1.3.1.6-21 - Resolves: bug 918694 - Fix covscan defect FORWARD_NULL (Ticket 408) - Resolves: bug 918717 - Fix covscan defect COMPILER WARNINGS (Ticket 571)- release 1.3.1.6-20 - Resolves: bug 1065242 - 389-ds-base, conflict occurs at yum installation if multilib_policy=all. (Ticket 47709)- release 1.3.1.6-19 - Resolves: bug 1065971 - Enrolling a host into IdM/IPA always takes two attempts (Ticket 47704)- release 1.3.1.6-18 - Resolves: bug 838656 - logconv.pl tool removes the access logs contents if "-M" is not correctly used (Ticket 471) - Resolves: bug 922538 - improve dbgen rdn generation, output (Ticket 47374) - Resolves: bug 970750 - flush.pl is not included in perl5 (Ticket 47374) - Resolves: bug 1013898 - Fix various issues with logconv.pl (Ticket 471)- release 1.3.1.6-17 - Resolves: bug 853106 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (Ticket 443) - Resolves: bug 1049525 - Server hangs in cos_cache when adding a user entry (Ticket 47649)- Mass rebuild 2014-01-24- release 1.3.1.6-15 - Resolves: bug 918702 - better error message when cache overflows (Ticket 342) - Resolves: bug 1009679 - replication stops with excessive clock skew (Ticket 47516) - Resolves: bug 1042855 - Unable to delete protocol timeout attribute (Ticket 47620) - Resolves: bug 918694 - Fix crash when disabling/enabling the setting (Ticket 408) - Resolves: bug 853355 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read (Ticket 47660)- release 1.3.1.6-14 - Resolves: bug 853355 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs (Ticket 447) - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613) - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribut; Fix logically dead code; Fix dereferenced NULL pointer in agmtlist_modify_callback(); Fix missing left brackete (Ticket 47620) - Resolves: bug 1042855 - nsds5ReplicaProtocolTimeout attribute is not validated when added to replication agreement; Config value validation improvement (Ticket 47620) - Resolves: bug 918717 - server does not accept 0 length LDAP Control sequence (Ticket 571) - Resolves: bug 1034902 - replica init/bulk import errors should be more verbose (Ticket 47606) - Resolves: bug 1044219 - fix memleak caused by 47347 (Ticket 47623) - Resolves: bug 1049522 - Crash after replica is installed; Fix cherry-pick error for 1.3.2 and 1.3.1 (Ticket 47620) - Resolves: bug 1049568 - changelog iteration should ignore cleaned rids when getting the minCSN (Ticket 47627)- Mass rebuild 2013-12-27- release 1.3.1.6-12 - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute (Ticket 47620) - Resolves: bug 1034898 - automember plugin task memory leaks (Ticket 47592) - Resolves: bug 1034451 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms (Ticket 47614) - Resolves: bug 1032318 - entries with empty objectclass attribute value can be hidden (Ticket 47591) - Resolves: bug 1032316 - attrcrypt fails to find unlocked key (Ticket 47596) - Resolves: bug 1031227 - Reduce lock scope in retro changelog plug-in (Ticket 47599) - Resolves: bug 1031226 - Convert ldbm_back_seq code to be transaction aware (Ticket 47598) - Resolves: bug 1031225 - Convert retro changelog plug-in to betxn (Ticket 47597) - Resolves: bug 1031223 - hard coded limit of 64 masters in agreement and changelog code (Ticket 47587) - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613) - Resolves: bug 1035824 - Automember betxnpreoperation - transaction not aborted when group entry does not exist (Ticket 47622)- Resolves: bug 1024979 - CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches- release 1.3.1.6-10 - Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep - had to revert earlier change - does not work and breaks ipa- release 1.3.1.6-9 - Resolves: bug 1028440 - Winsync replica initialization and incremental updates from DS to AD fails on RHEL - Resolves: bug 1027502 - Replication Failures related to skipped entries due to cleaned rids - Resolves: bug 1027047 - Winsync plugin segfault during incremental backoff- release 1.3.1.6-8 - Resolves: bug 971111 - DNA plugin failed to fetch replication agreement - Resolves: bug 1026931 - 1.2.11.29 crash when removing entries from cache- Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep - Resolves: bug 1018914 fixup memberof task does not work: task entry not added- Resolves: bug 1013900 - logconv: some stats do not work across server restarts - previous patch introduced regressions - fixed by c2eced0 ticket #47550 and e2a880b Ticket #47550 and 8b10f83 Ticket #47551 - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock - previous patch not complete, fixed by a11be5c Ticket 47513 - Resolves: bug 1016749 - DS crashes when "cn=Directory Manager" is changing it's password - cherry picked upstream f786600 Ticket 47329 and b67e230 Coverity Fixes - Resolves: bug 1015252 locale "nl" not supported by collation plugin - Resolves: bug 1016317 Need to update supported locales - Resolves: bug 1016722 memory leak in range searches- Resolves: bug 1013896 - logconv.pl - Use of comma-less variable list is deprecated - Resolves: bug 1008256 - backend txn plugin fixup tasks should be done in a txn - Resolves: bug 1013738 - CLEANALLRUV doesnt run across all replicas - Resolves: bug 1011220 - PassSync removes User must change password flag on the Windows side - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock - Resolves: bug 1012125 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch - Resolves: bug 1013063 - RUV tombstone search with scope "one" doesn`t work - Resolves: bug 1013893 - Indexed search are logged with 'notes=U' in the access logs - Resolves: bug 1013894 - improve logconv.pl performance with large access logs - Resolves: bug 1013898 - Fix various issues with logconv.pl - Resolves: bug 1013897 - logconv.pl uses /var/tmp for BDB temp files - Resolves: bug 1013900 - logconv: some stats do not work across server restarts - Resolves: bug 1014354 - Coverity fixes - 12023, 12024, and 12025- bump version to 1.3.1.6-4 - Resolves Bug 1007988 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing (Ticket 47489) - Resolves Bug 853931 - Allow macro aci keywords to be case-insensitive (Ticket 449) - Resolves Bug 1006563 - automember rebuild task not working as expected (Ticket 47507)- Ticket #47455 - valgrind - value mem leaks, uninit mem usage - Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly- bump version to 1.3.1.6-2 - Resolves Bug 1000633 - ns-slapd crash due to bogus DN - Ticket #47488 - Users from AD sub OU does not sync to IPA- bump version to 1.3.1.6 - Ticket 47455 - valgrind - value mem leaks, uninit mem usage - fix coverity 11915 - dead code - introduced with fix for ticket 346 - fix coverity 11895 - null deref - caused by fix to ticket 47392 - fix compiler warning in posix winsync code for posix_group_del_memberuid_callback - Fix compiler warnings for Ticket 47395 and 47397 - fix compiler warning (cherry picked from commit 904416f4631d842a105851b4a9931ae17822a107) - Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch - fix compiler warnings - Fix compiler warning (cherry picked from commit ec6ebc0b0f085a82041d993ab2450a3922ef5502)- bump version to 1.3.1.5 - Ticket 47456 - delete present values should append values to deleted values - Ticket 47455 - valgrind - value mem leaks, uninit mem usage - Ticket 47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication - Ticket 47440 - Fix runtime errors caused by last patch. - Ticket 47440 - Fix compilation warnings and header files - Ticket 47405 - CVE-2013-2219 ACLs inoperative in some search scenarios - Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D - Ticket 47378 - fix recent compiler warnings - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47449 - deadlock after adding and deleting entries - Ticket 47441 - Disk Monitoring not checking filesystem with logs - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold- bump version to 1.3.1.4 - Ticket 47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negat - Ticket 47424 - Replication problem with add-delete requests on single-valued attributes - Ticket 47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry - Ticket 47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry - Ticket 47421 - memory leaks in set_krb5_creds - Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute v - Ticket 47369 version2 - provide default syntax plugin - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47339 - RHDS denies MODRDN access if ACI list contains any DENY rule - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47428 - Memory leak in 389-ds-base 1.2.11.15 - Ticket 47392 - ldbm errors when adding/modifying/deleting entries - Ticket 47385 - Disk Monitoring is not triggered as expected. - Ticket 47410 - changelog db deadlocks with DNA and replication- bump version to 1.3.1.3 - Ticket 47374 - flush.pl is not included in perl5 - Ticket 47391 - deleting and adding userpassword fails to update the password (additional fix) - Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization - Ticket 47395 47397 - v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured - Ticket 47396 - crash on modrdn of tombstone - Ticket 47400 - MMR stress test with dna enabled causes a deadlock - Ticket 47409 - allow setting db deadlock rejection policy - Ticket 47419 - Unhashed userpassword can accidentally get removed from mods - Ticket 47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'- Rebuilt for new net-snmp- bump version to 1.3.1.2 - Ticket 47391 - deleting and adding userpassword fails to update the password - Coverity Fixes (Part 7)- bump version to 1.3.1.1 - Ticket 402 - nhashed#user#password in entry extension - Ticket 511 - Revision - allow turning off vattr lookup in search entry return - Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate - Ticket 47327 - error syncing group if group member user is not synced - Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback - Ticket 47359 - new ldap connections can block ldaps and ldapi connections - Ticket 47362 - ipa upgrade selinuxusermap data not replicating - Ticket 47375 - flush_ber error sending back start_tls response will deadlock - Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3) - Ticket 47377 - make listen backlog size configurable - Ticket 47378 - fix recent compiler warnings - Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice - Ticket 47385 - DS not shutting down when disk monitoring threshold is reached - Coverity Fixes (part 1) - Coverity Fixes (Part 2) - Coverity Fixes (Part 3) - Coverity Fixes (Part 4) - Coverity Fixes (Part 5)- bump version to 1.3.1.0 - Ticket 332 - Command line perl scripts should attempt most secure connection type first - Ticket 342 - better error message when cache overflows - Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager - Ticket 419 - logconv.pl - improve memory management - Ticket 422 - 389-ds-base - Can't call method "getText" - Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts - Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used - Ticket 487 - Possible to add invalid attribute values to PAM PTA plugin configuration - Ticket 502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen - Ticket 505 - use lock-free access name2asi and oid2asi tables (additional) - Ticket 508 - lock-free access to FrontendConfig structure - Ticket 511 - allow turning off vattr lookup in search entry return - Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time - Ticket 528 - RFE - get rid of instance specific scripts - Ticket 529 - dn normalization must handle multiple space characters in attributes - Ticket 532 - RUV is not getting updated for both Master and consumer - Ticket 533 - only scan for attributes to decrypt if there are encrypted attrs configured - Ticket 534 - RFE: Add SASL mappings fallback - Ticket 537 - Improvement of range search - Ticket 539 - logconv.pl should handle microsecond timing - Ticket 543 - Sorting with attributes in ldapsearch gives incorrect result - Ticket 545 - Segfault during initial LDIF import: str2entry_dupcheck() - Ticket 547 - Incorrect assumption in ndn cache - Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval - Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation - Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration - Ticket 558 - Replication - make timeout for protocol shutdown configurable - Ticket 561 - disable writing unhashed#user#password to changelog - Ticket 563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized. - Ticket 565 - turbo mode and replication - allow disable of turbo mode - Ticket 571 - server does not accept 0 length LDAP Control sequence - Ticket 574 - problems with dbcachesize disk space calculation - Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions - Ticket 585 - Behaviours of "db2ldif -a " and "db2ldif.pl -a " are inconsistent - Ticket 587 - Replication error messages in the DS error logs - Ticket 588 - Create MAN pages for command line scripts - Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control - Ticket 603 - A logic error in str2simple - Ticket 604 - Required attribute not checked during search operation - Ticket 608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message - Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND - Ticket 612 - improve dbgen rdn generation, output - Ticket 613 - ldclt: add timestamp, interval, nozeropad, other improvements - Ticket 616 - High contention on computed attribute lock - Ticket 618 - Crash at shutdown while stopping replica agreements - Ticket 620 - Better logging of error messages for 389-ds-base - Ticket 621 - modify operations without values need to be written to the changelog - Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory - Ticket 631 - Replication: "Incremental update started" status message without consumer initialized - Ticket 633 - allow nsslapd-nagle to be disabled, and also tcp cork - Ticket 47299 - allow cmdline scripts to work with non-root user - Ticket 47302 - get rid of sbindir start/stop/restart slapd scripts - Ticket 47303 - start/stop/restart dirsrv scripts should report and error if no instances - Ticket 47304 - reinitialization of a master with a disabled agreement hangs - Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task) - Ticket 47312 - replace PR_GetFileInfo with PR_GetFileInfo64 - Ticket 47315 - filter option in fixup-memberof requires more clarification - Ticket 47325 - Crash at shutdown on a replica aggrement - Ticket 47330 - changelog db extension / upgrade is obsolete - Ticket 47336 - logconv.pl -m not working for all stats - Ticket 47341 - logconv.pl -m time calculation is wrong - Ticket 47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide - Ticket 47347 - Simple paged results should support async search - Ticket 47348 - add etimes to per second/minute stats - Ticket 47349 - DS instance crashes under a high load- bump version to 1.3.0.5 - Ticket 47308 - unintended information exposure when anonymous access is set to rootdse - Ticket 628 - crash in aci evaluation - Ticket 627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so - Ticket 634 - Deadlock in DNA plug-in Ticket #576 - DNA: use event queue for config update only at the start up - Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC - Ticket 623 - cleanAllRUV task fails to cleanup config upon completion- e53d691 bump version to 1.3.0.4 - Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data - Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled) - Ticket 490 - Slow role performance when using a lot of roles - Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry- bump version to 1.3.0.3 - Ticket #584 - Existence of an entry is not checked when its password is to be deleted - Ticket 562 - Crash when deleting suffix- Rebuild for icu 50- bump version to 1.3.0.2 - Ticket #542 - Cannot dynamically set nsslapd-maxbersize- bump version to 1.3.0.1 - Ticket 556 - Don't overwrite certmap.conf during upgrade- bump version to 1.3.0.0- bump version to 1.3.0.rc3 - Ticket 549 - DNA plugin no longer reports additional info when range is depleted - Ticket 541 - need to set plugin as off in ldif template - Ticket 541 - RootDN Access Control plugin is missing after upgrade- bump version to 1.3.0.rc2 - Trac Ticket #497 - Escaped character cannot be used in the substring search filter - Ticket 509 - lock-free access to be->be_suffixlock - Trac Ticket #522 - betxn: upgrade is not implemented yet- bump version to 1.3.0.rc1 - Ticket #322 - Create DOAP description for the 389 Directory Server project - Trac Ticket #499 - Handling URP results is not corrrect - Ticket 509 - lock-free access to be->be_suffixlock - Ticket 456 - improve entry cache sizing - Trac Ticket #531 - loading an entry from the database should use str2entry_f - Trac Ticket #536 - Clean up compiler warnings for 1.3 - Trac Ticket #531 - loading an entry from the database should use str2entry_fast - Ticket 509 - lock-free access to be->be_suffixlock - Ticket 527 - ns-slapd segfaults if it cannot rename the logs - Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't - Ticket 216 - disable replication agreements - Ticket 518 - dse.ldif is 0 length after server kill or machine kill - Ticket 393 - Change in winSyncInterval does not take immediate effect - Ticket 20 - Allow automember to work on entries that have already been added - Coverity Fixes - Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5 - Ticket 337 - improve CLEANRUV functionality - Fix for ticket 504 - Ticket 394 - modify-delete userpassword - minor fixes for bdb 4.2/4.3 and mozldap - Trac Ticket #276 - Multiple threads simultaneously working on connection's private buffer causes ns-slapd to abort - Fix for ticket 465: cn=monitor showing stats for other db instances - Ticket 507 - use mutex for FrontendConfig lock instead of rwlock - Fix for ticket 510 Avoid creating an attribute just to determine the syntax for a type, look up the syntax directly by type - Coverity defect: Resource leak 13110 - Ticket 517 - crash in DNA if no dnaMagicRegen is specified - Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry - Trac Ticket #519 - Search with a complex filter including range search is slow - Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error - Trac Ticket #311 - IP lookup failing with multiple DNS entries - Trac Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs - Trac Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error - Ticket #503 - Improve AD version in winsync log message - Trac Ticket #190 - Un-resolvable server in replication agreement produces unclear error message - Coverity fixes - Trac Ticket #391 - Slapd crashes when deleting backends while operations are still in progress - Trac Ticket #448 - Possible to set invalid macros in Macro ACIs - Trac Ticket #498 - Cannot abaondon simple paged result search - Coverity defects - Trac Ticket #494 - slapd entered to infinite loop during new index addition - Fixing compiler warnings in the posix-winsync plugin - Coverity defects - Ticket 147 - Internal Password Policy usage very inefficient - Ticket 495 - internalModifiersname not updated by DNA plugin - Revert "Ticket 495 - internalModifiersname not updated by DNA plugin" - Ticket 495 - internalModifiersname not updated by DNA plugin - Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h]) - Ticket 486 - nsslapd-enablePlugin should not be multivalued - Ticket 488 - Doc: DS error log messages with typo - Trac Ticket #451 - Allow db2ldif to be quiet - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes - Ticket #481 - expand nested posix groups - Trac Ticket #455 - Insufficient rights to unhashed#user#password when user deletes his password - Ticket #446 - anonymous limits are being applied to directory managerTicket #28 MOD operations with chained delete/add get back error 53 on backend config Ticket #173 ds-logpipe.py script's man page and script help should be updated for -t option. Ticket #196 RFE: Interpret IPV6 addresses for ACIs, replication, and chaining Ticket #218 RFE - Make RIP working with Replicated Entries Ticket #328 make sure all internal search filters are properly escaped Ticket #329 389-admin build fails on F-18 with new apache Ticket #344 deadlock in replica_write_ruv Ticket #351 use betxn plugins by default Ticket #352 make cos, roles, views betxn aware Ticket #356 logconv.pl - RFE - track bind info Ticket #365 Audit log - clear text password in user changes Ticket #370 Opening merge qualifier CoS entry using RHDS console changes the entry. Ticket #372 Setting nsslapd-listenhost or nsslapd-securelistenhost breaks ACI processing Ticket #386 Overconsumption of memory with large cachememsize and heavy use of ldapmodify Ticket #402 unhashedTicket #userTicket #password in entry extension Ticket #408 Create a normalized dn cache Ticket #453 db2index with -tattrname:type,type fails Ticket #461 fix build problem with mozldap c sdk Ticket #462 add test for include file mntent.h Ticket #463 different parameters of getmntent in Solaris- Trac Ticket #470 - 389 prevents from adding a posixaccount with userpassword after schema reload - Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang - Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start - Ticket 473 - change VERSION.sh to have console version be major.minor - Ticket 475 - Root DN Access Control - improve value checking for config - Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension - Ticket 474 - Root DN Access Control - days allowed not working correctly - Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas - 0b79915 fix compiler warnings in ticket 374 code - Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope- Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement - Ticket 386 - large memory growth with ldapmodify(heap fragmentation) - this patch doesn't fix the bug - it allows us to experiment with - different values of mxfast - Ticket #374 - consumer can go into total update mode for no reason- Ticket #426 - support posix schema for user and group sync - 1) plugin config ldif must contain pluginid, etc. during upgrade or it - will fail due to schema errors - 2) posix winsync should have a lower precedence (25) than the default (50) - so that it will be run first - 3) posix winsync should support the Winsync API v3 - the v2 functions are - just stubs for now - but the precedence cb is active- 8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete - Trac Ticket #437 - variable dn should not be used in ldbm_back_delete - ba1f5b2 fix coverity resource leak in windows_plugin_add - e3e81db Simplify program flow: change while loops to for - a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0) - 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar - 77eb760 Simplify program flow: eliminate unnecessary continue - c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new - a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking - d49035c Factorize into new isPosixGroup function - 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free - 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain - Ticket #440 - periodic dirsync timed event causes server to loop repeatedly - Ticket #355 - winsync should not delete entry that appears to be out of scope - Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values. - 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code - 2734a71 CLEANALLRUV coverity fixes - Ticket #426 - support posix schema for user and group sync - Ticket #430 - server to server ssl client auth broken with latest openldap6c0778f bumped version to 1.2.11.11 Ticket 429 - added nsslapd-readonly to DS schema Ticket 403 - fix CLEANALLRUV regression from last commit Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute valuesdb6b354 bumped version to 1.2.11.10 Ticket 403 - CLEANALLRUV revisionsea05e69 Bumped version to 1.2.11.9 Ticket 407 - dna memory leak - fix crash from prev fixddcf669 bump version to 1.2.11.8 for offical release Ticket #425 - support multiple winsync plugins Ticket 403 - cleanallruv coverity fixes Ticket 407 - memory leak in dna plugin Ticket 403 - CLEANALLRUV feature Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs 3168f04 Coverity defects 5ff0a02 COVERITY FIXES Ticket #388 - Improve replication agreement status messages 0760116 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion Ticket #409 - Report during startup if nsslapd-cachememsize is too small Ticket #412 - memberof performance enhancement 12813: Uninitialized pointer read string_values2keys Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values Ticket #410 - Referential integrity plug-in does not work when update interval is not zero Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled Ticket #405 - referint modrdn not working if case is different Ticket 399 - slapi_ldap_bind() doesn't check bind results- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Perl 5.16 rebuild- Ticket 378 - unhashed#user#password visible after changing password - fix func declaration from previous patch - Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error- Trac Ticket 396 - Account Usability Control Not Working- Ticket #378 - audit log does not log unhashed password: enabled, by default. - Ticket #378 - unhashed#user#password visible after changing password - Ticket #365 - passwords in clear text in the audit log- workaround for https://bugzilla.redhat.com/show_bug.cgi?id=833529- Ticket #387 - managed entry sometimes doesn't delete the managed entry - 5903815 improve txn test index handling - Ticket #360 - ldapmodify returns Operations error - fix delete caching - bcfa9e3 Coverity Fix for CLEANALLRUV - Trac Ticket #335 - transaction retries need to be cache aware - Ticket #389 - ADD operations not in audit log - 44cdc84 fix coverity issues with uninit vals, no return checking - Ticket 368 - Make the cleanAllRUV task one step - Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week- Perl 5.16 rebuild- Ticket #360 - ldapmodify returns Operations error - Ticket #321 - krbExtraData is being null modified and replicated on each ssh login - Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress - Ticket #361: Bad DNs in ACIs can segfault ns-slapd - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object - Ticket #337 - Improve CLEANRUV task- Ticket #358 - managed entry doesn't delete linked entry- Ticket #351 - use betxn plugins by default - revert - make no plugins betxn by default - too great a risk - for deadlocks until we can test this better - Ticket #348 - crash in ldap_initialize with multiple threads - fixes PR_Init problem in ldclt- f227f11 Suppress alert on unavailable port with forced setup - Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return - Ticket #351 - use betxn plugins by default - Trac Ticket #345 - db deadlock return should not log error - Ticket #348 - crash in ldap_initialize with multiple threads - Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied - Ticket #207 - [RFE] enable attribute that tracks when a password was last set - Ticket #216 - RFE - Disable replication agreements - Ticket #337 - RFE - Improve CLEANRUV functionality - Ticket #326 - MemberOf plugin should work on all backends - Trac Ticket #19 - Convert entryUSN plugin to transaction aware type - Ticket #347 - IPA dirsvr seg-fault during system longevity test - Trac Ticket #310 - Avoid calling escape_string() for logged DNs - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object - Ticket #183 - passwordMaxFailure should lockout password one sooner - Trac Ticket #335 - transaction retries need to be cache aware - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - Ticket #325 - logconv.pl : use of getopts to parse command line options - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - 554e29d Coverity Fixes - Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions - Ticket #315 - small fix to libglobs - Ticket #315 - ns-slapd exits/crashes if /var fills up - Ticket #20 - Allow automember to work on entries that have already been added - Trac Ticket #45 - Fine Grained Password policy: if passwordHistory is on, deleting the password fails.- 453eb97 schema def must have DESC '' - close paren must be preceded by space - Trac Ticket #46 - (additional) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #331 - transaction errors with db 4.3 and db 4.2 - Ticket #261 - Add Solaris i386 - Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks - Ticket #324 - Sync with group attribute containing () fails - Ticket #319 - ldap-agent crashes on start with signal SIGSEGV - 77cacd9 coverity 12606 Logically dead code - Trac Ticket #303 - make DNA range requests work with transactions - Ticket #320 - allow most plugins to be betxn plugins - Ticket #24 - Add nsTLS1 to the DS schema - Ticket #271 - Slow shutdown when you have 100+ replication agreements - TIcket #285 - compilation fixes for '--format-security' - Ticket 211 - Avoid preop range requests non-DNA operations - Ticket #271 - replication code cleanup - Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages. - Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration - Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs - 6f8680a coverity 12563 Read from pointer after free (fix 2) - e6a9b22 coverity 12563 Read from pointer after free - 245d494 Config changes fail because of unknown attribute "internalModifiersname" - Ticket #191 - Implement SO_KEEPALIVE in network calls - Ticket #289 - allow betxn plugin config changes - 93adf5f destroy the entry cache and dn cache in the dse post op delete callback - e2532d8 init txn thread private data for all database modes - Ticket #291 - cannot use & in a sasl map search filter - 6bf6e79 Schema Reload crash fix - 60b2d12 Fixing compiler warnings - Trac Ticket #260 - 389 DS does not support multiple paging controls on a single connection - Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName - fdcc256 Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e - Ticket #306 - void function cannot return value - ticket 181 - Allow PAM passthru plug-in to have multiple config entries - ticket 211 - Use of uninitialized variables in ldbm_back_modify() - Ticket #74 - Add schema for DNA plugin (RFE) - Ticket #301 - implement transaction support using thread local storage - Ticket #211 - dnaNextValue gets incremented even if the user addition fails - 144af59 coverity uninit var and resource leak - Trac Ticket #34 - remove-ds.pl does not remove everything - Trac Ticket #169 - allow 389 to use db5 - bc78101 fix compiler warning in acct policy plugin - Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints - Trac Ticket #27 - SASL/PLAIN binds do not work - Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFYops - Ticket #17 - new replication optimizations- Ticket #46 - (revised) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #66 - 389-ds-base spec file does not have a BuildRequires on gcc-c++- Ticket #46 - setup-ds-admin.pl does not like ipv6 only hostnames- get rid of posttrans - move update code to post- Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash- b05139b memleak in normalize_mods2bvals - c0eea24 memleak in mep_parse_config_entry - 90bc9eb handle null smods - Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash - Ticket #306 - void function cannot return value - ticket 304 - Fix kernel version checking in dsktune- Trac Ticket #298 - crash when replicating orphaned tombstone entry - Ticket #281 - TLS not working with latest openldap - Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails - Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse- Ticket #124 - add Provides: ldif2ldbm to rpm- Ticket #294 - 389 DS Segfaults during replica install in FreeIPA- Ticket 284 - Remove unnecessary SNMP MIB files - Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5? - Ticket 175 - logconv.pl improvements- Introducing use_db4 macro to support db5 (libdb).- Rebuild against PCRE 8.30- ad9dd30 coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources - Ticket #281 - TLS not working with latest openldap - Ticket #280 - extensible binary filters do not work - Ticket #279 - filter normalization does not use matching rules - Trac Ticket #275 - Invalid read reported by valgrind - Ticket #277 - cannot set repl referrals or state - Ticket #278 - Schema replication update failed: Invalid syntax - Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled - Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server - Ticket #87 - Manpages fixes - c493fb4 fix a couple of minor coverity issues - Ticket #55 - Limit of 1024 characters for nsMatchingRule - Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned - Ticket #6 - protocol error from proxied auth operation - Ticket #38 - nisDomain schema is incorrect - Ticket #273 - ruv tombstone searches don't work after reindex entryrdn - Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword - Ticket #22 - RFE: Support sendmail LDAP routing schema - Ticket #161 - Review and address latest Coverity issues - Ticket #140 - incorrect memset parameters - Trac Ticket 35 - Log not clear enough on schema errors - Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn - Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if IPv4-mapped-IPv6 address is given- Ticket #272 - add tombstonenumsubordinates to schema- fixes for systemd - remove .pid files after shutting down servers - Ticket #263 - add systemd include directive - Ticket #264 - upgrade needs better check for "server is running"- Ticket #262 - pid file not removed with systemd - Ticket #50 - server should not call a plugin after the plugin close function is called - Ticket #18 - Data inconsitency during replication - Ticket #49 - better handling for server shutdown while long running tasks are active - Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead - Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same - Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI - 6aaeb77 add a hack to disable sasl hostname canonicalization - Ticket 168 - minssf should not apply to rootdse - Ticket #177 - logconv.pl doesn't detect restarts - Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating - Ticket 75 - Unconfigure plugin opperations are being called. - Ticket 26 - Please support setting defaultNamingContext in the rootdse. - Ticket #71 - unable to delete managed entry config - Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock - Ticket #256 - debug build assertion in ACL_EvalDestroy() - Ticket #4 - bak2db gets stuck in infinite loop - Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS - Ticket #3: acl cache overflown problem - Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations - Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full DN.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Bug 755725 - 389 programs linked against openldap crash during shutdown - Bug 755754 - Unable to start dirsrv service using systemd - Bug 745259 - Incorrect entryUSN index under high load in replicated environment - d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere - 5910551 csn_init_as_string should not use sscanf - b53ba00 reduce calls to csn_as_string and slapi_log_error - c897267 fix member variable name error in slapi_uniqueIDFormat - 66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf - 580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf - Bug 751645 - crash when simple paged fails to send entry to client - Bug 752155 - Use restorecon after creating init script lock file- Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD' - Bug 750625 750624 750622 744946 Coverity issues - Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication - Bug 748575 - rhds81 modrn operation and 100% cpu use in replication - Bug 745259 - Incorrect entryUSN index under high load in replicated environment - f639711 Reduce the number of DN normalization - c06a8fa Keep unhashed password psuedo-attribute in the adding entry - Bug 744945 - nsslapd-counters attribute value cannot be set to "off" - 8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular - d316a67 Change referential integrity to be a betxnpostoperation plugin- Bug 741744 - part3 - MOD operations with chained delete/add get back error 53 - 1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in - b6d3ba7 pass the plugin config entry to the plugin init function - 28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins - Bug 743966 - Compiler warnings in account usability plugin- 498c42b fix transaction support in ldbm_delete- Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations - Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config - Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user- Bug 695736 - Providing native systemd file- corrected source- Bug 735114 - renaming a managed entry does not update mepmanagedby- Bug 735121 - simple paged search + ip/dns based ACI hangs server - Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code - Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server - Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.- Bug 732153 - subtree and user account lockout policies implemented? - Bug 722292 - Entries in DS are not updated properly when using WinSync API- Bug 733103 - large targetattr list with syntax errors cause server to crash or hang - Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining - Bug 732541 - Ignore error 32 when adding automember config - Bug 728592 - Allow ns-slapd to start with an invalid server cert- Bug 728510 - Run dirsync after sending updates to AD - Bug 729717 - Fatal error messages when syncing deletes from AD - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working. - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash - Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed again - separate tests for atomic ops and atomic bool cas- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix another coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - previous patch broke build on el5- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error- Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed to use configure test for GCC provided 64-bit atomic functions- Bug 663752 - Cert renewal for attrcrypt and encchangelog - this was "re-fixed" due to a deadlock condition with cl2ldif task cancel - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma - Bug 725743 - Make memberOf use PRMonitor for it's operation lock - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package - Bug 723937 - Slapi_Counter API broken on 32-bit F15- Perl mass rebuild- Perl mass rebuild- Bug 720059 - RDN with % can cause crashes or missing entries - Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2. - Bug 691313 - Need TLS/SSL error messages in repl status and errors log - Bug 712855 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not - Bug 713209 - Update sudo schema - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9 - Bug 718303 - Intensive updates on masters could break the consumer's cache - Bug 711679 - unresponsive LDAP service when deleting vlv on replica- 389-ds-base-1.2.9.a2 - look for separate openldap ldif library - Split automember regex rules into separate entries - writing Inf file shows SchemaFile = ARRAY(0xhexnum) - add support for ldif files with changetype: add - Bug 716980 - winsync uses old AD entry if new one not found - Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9 - bump console version to 1.2.6 - Bug 711679 - unresponsive LDAP service when deleting vlv on replica - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package - Bug 663752 - Cert renewal for attrcrypt and encchangelog - Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute - Bug 711906 - ns-slapd segfaults using suffix referrals - Bug 707384 - only allow FIPS approved cipher suites in FIPS mode - Bug 710377 - Import with chain-on-update crashes ns-slapd - Bug 709826 - Memory leak: when extra referrals configured- Perl mass rebuild- Perl 5.14 mass rebuild- 389-ds-base-1.2.9.a1 - Auto Membership - More Coverity fixes- 389-ds-base-1.2.8.3 - Bug 700145 - userpasswd not replicating - Bug 700557 - Linked attrs callbacks access free'd pointers after close - Bug 694336 - Group sync hangs Windows initial Sync - Bug 700215 - ldclt core dumps - Bug 695779 - windows sync can lose old values when a new value is added - Bug 697027 - 12 - minor memory leaks found by Valgrind + TET- 389-ds-base-1.2.8.2 - Bug 696407 - If an entry with a mixed case RDN is turned to be - a tombstone, it fails to assemble DN from entryrdn- 389-ds-base-1.2.8.1 - Bug 693962 - Full replica push loses some entries with multi-valued RDNs- 389-ds-base-1.2.8.0 - Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1 - Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1 - Bug 693466 - Unable to change schema online - Bug 693503 - matching rules do not inherit from superior attribute type - Bug 693455 - nsMatchingRule does not work with multiple values - Bug 693451 - cannot use localized matching rules - Bug 692331 - Segfault on index update during full replication push on 1.2.7.5- 389-ds-base-1.2.8.rc5 - Bug 692469 - Replica install fails after step for "enable GSSAPI for replication"- 389-ds-base-1.2.8.rc4 - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - 389-ds-base-1.2.8.rc3 - Bug 690955 - Mrclone fails due to the replica generation id mismatch- 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2 - Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences - Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format - Bug 681015 - RFE: allow fine grained password policy duration attributes - in days, hours, minutes, as well - Bug 684996 - Exported tombstone cannot be imported correctly - Bug 683250 - slapd crashing when traffic replayed - Bug 668909 - Can't modify replication agreement in some cases - Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1 - Bug 644784 - Memory leak in "testbind.c" plugin - Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree- rebuild for icu 4.6- 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1 - Bug 518890 - setup-ds-admin.pl - improve hostname validation - Bug 681015 - RFE: allow fine grained password policy duration attributes in - days, hours, minutes, as well - Bug 514190 - setup-ds-admin.pl --debug does not log to file - Bug 680555 - ns-slapd segfaults if I have more than 100 DBs - Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically - Bug 674852 - crash in ldap-agent when using OpenLDAP - Bug 679978 - modifying attr value crashes the server, which is supposed to - be indexed as substring type, but has octetstring syntax - Bug 676655 - winsync stops working after server restart - Bug 677705 - ds-logpipe.py script is failing to validate "-s" and - "--serverpid" options with "-t". - Bug 625424 - repl-monitor.pl doesn't work in hub node- Bug 676598 - 389-ds-base multilib: file conflicts - split off libs into a separate -libs package- do not create /var/run/dirsrv - setup will create it instead - remove the fedora-ds initscript upgrade stuff - we do not support that anymore - convert the remaining lua stuff to plain old shell script- 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3 - Bug 675320 - empty modify operation with repl on or lastmod off will crash server - Bug 675265 - preventryusn gets added to entries on a failed delete - Bug 677774 - added support for tmpfiles.d - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search es - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH - Bug 671199 - Don't allow other to write to rundir - Bug 678646 - Ignore tombstone operations in managed entry plug-in - Bug 676053 - export task followed by import task causes cache assertion - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8 - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used - Bug 676689 - crash while adding a new user to be synced to windows - Bug 604881 - admin server log files have incorrect permissions/ownerships - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - Bug 675853 - dirsrv crash segfault in need_new_pw()- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2 - Bug 674430 - Improve error messages for attribute uniqueness - Bug 616213 - insufficient stack size for HP-UX on PA-RISC - Bug 615052 - intrinsics and 64-bit atomics code fails to compile - on PA-RISC - Bug 151705 - Need to update Console Cipher Preferences with new ciphers - Bug 668862 - init scripts return wrong error code - Bug 670616 - Allow SSF to be set for local (ldapi) connections - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the - log output to the text file - Bug 668619 - slapd stops responding - Bug 624547 - attrcrypt should query the given slot/token for - supported ciphers - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any - error message in logs- 1.2.8-0.1.a1 release - git tag 389-ds-base-1.2.8.a1 - many bug fixes- 1.2.7.5 release - git tag 389-ds-base-1.2.7.5 - Bug 663597 - Memory leaks in normalization code- Resolves: bug 656541 - use %ghost on files in /var/lock- 1.2.7.4 release - git tag 389-ds-base-1.2.7.4 - Bug 661792 - Valid managed entry config rejected- 1.2.7.3 release - git tag 389-ds-base-1.2.7.3 - Bug 658312 - Invalid free in Managed Entry plug-in - Bug 641944 - Don't normalize non-DN RDN values- 1.2.7.2 release - git tag 389-ds-base-1.2.7.2 - Bug 659456 - Incorrect usage of ber_printf() in winsync code - Bug 658309 - Process escaped characters in managed entry mappings - Bug 197886 - Initialize return value for UUID generation code - Bug 658312 - Allow mapped attribute types to be quoted - Bug 197886 - Avoid overflow of UUID generator- last commit had bogus commit log- 1.2.7.1 release - git tag 389-ds-base-1.2.7.1 - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes - Bug 656392 - Remove calls to ber_err_print() - Bug 625950 - hash nsslapd-rootpw changes in audit log- 1.2.7 release - git tag 389-ds-base-1.2.7- Bug 648949 - Merge dirsrv and dirsrv-admin policy modules into base policy- 1.2.7.a5 release - git tag 389-ds-base-1.2.7.a5 - Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-ref erral) - Bug 635009 - Add one-way AD sync capability - Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot - put replication config entries in separate file - Bug 567282 - server can not abandon searchRequest of "simple paged results" - Bug 329751 - "nested" filtered roles searches candidates more than needed - Bug 521088 - DNA should check ACLs before getting a value from the range- 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4 - Bug 647932 - multiple memberOf configuration adding memberOf where there is no member - Bug 491733 - dbtest crashes - Bug 606545 - core schema should include numSubordinates - Bug 638773 - permissions too loose on pid and lock files - Bug 189985 - Improve attribute uniqueness error message - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat ions - Bug 619633 - Make attribute uniqueness obey requiredObjectClass- 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Adding the ancestorid fix code to ##upgradednformat.pl.- 1.2.7.a3 release - a2 was never released - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Bug 629681 - Retro Changelog trimming does not behave as expected - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif - are not upgraded in the server instance schema dir- 1.2.7.a2 release - a1 was the OpenLDAP testday release - git tag 389-ds-base-1.2.7.a2 - added openldap support on platforms that use openldap with moznss - for crypto (F-14 and later) - many bug fixes - Account Policy Plugin (keep track of last login, disable old accounts)- added openldap support- bump rel to rebuild again- bump rel to rebuild- This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1 - Bug 634561 - Server crushes when using Windows Sync Agreement - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self - Bug 612264 - ACI issue with (targetattr='userPassword') - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager" - Bug 631862 - crash - delete entries not in cache + referint- This is the final 1.2.6 release- 1.2.6 release candidate 7 - git tag 389-ds-base-1.2.6.rc7 - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6- 1.2.6 release candidate 6 - git tag 389-ds-base-1.2.6.rc6 - Bug 617013 - repl-monitor.pl use cpu upto 90% - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors - Bug 613833 - Allow dirsrv_t to bind to rpc ports - Bug 612242 - membership change on DS does not show on AD - Bug 617629 - Missing aliases in new schema files - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments - Bug 617862 - Replication: Unable to delete tombstone errors - Bug 594745 - Get rid of dirsrv_lib_t label- make selinux-devel explicit Require the base package in order - to comply with Fedora Licensing Guidelines- 1.2.6 release candidate 3 - git tag 389-ds-base-1.2.6.rc3 - Bug 603942 - null deref in _ger_parse_control() for subjectdn - 609256 - Selinux: pwdhash fails if called via Admin Server CGI - 578296 - Attribute type entrydn needs to be added when subtree rename switch is on - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"- 1.2.6 release candidate 2- install replication session plugin header with devel package- 1.2.6 release candidate 1- Mass rebuild with perl-5.12.0- 1.2.6.a4 release- 1.2.6.a3 release - add managed entries plug-in - many bug fixes - moved selinux subpackage into base package- rebuild for icu 4.4- 1.2.6.a2 release - add support for matching rules - many bug fixes- 1.2.6.a1 release - Added SELinux policy and subpackages- 1.2.5 final release- 1.2.5.rc4 release- 1.2.5.rc3 release- 1.2.5.rc2 release- 1.2.5.rc1 release- 1.2.5.a1 release- 1.2.4 release - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif- 1.2.3 release - added template-initconfig to %files - %posttrans now runs update to update the server instances - servers are shutdown, then restarted if running before install - scriptlets mostly use lua now to pass data among scriptlet phases- rebuild with new openssl to fix dependencies- backed out - added template-initconfig to %files - this change is for the next major release - bump version to 1.2.2 - fix reopened 509472 db2index all does not reindex all the db backends correctly - fix 518520 - pre hashed salted passwords do not work - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of - bugs fixed in 1.2.2- rebuilt with new openssl- added template-initconfig to %files- added BuildRequires pcre- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- change name to 389 - change version to 1.2.1 - added initial support for numeric string syntax - added initial support for syntax validation - added initial support for paged results including sorting- final release 1.2.0 - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389 - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428- re-enable ppc builds- exclude ppc builds - needs extensive porting work- new release 1.2.0 - Made devel package depend on mozldap-devel - only create run dir if it does not exist - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330- added db4-utils to Requires for verify-db.pl- Enabled LDAPI autobind- updated update to patch bug463991-bdb47.patch- updated patch bug463991-bdb47.patch- added patch bug463991-bdb47.patch - make ds work with bdb 4.7- rolled back bogus winsync memory leak fix- winsync api improvements for modify operations- This is the 1.1.2 release. The bugs fixed can be found here - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721 - Added winsync-plugin.h to the devel subpackage- bump rev to rebuild and pick up new version of ICU- 1.1.1 release candidate - several bug fixes- fix bugzilla 439829 - patch to allow working with NSS 3.11.99 and later- add patch to allow server to work with NSS 3.11.99 and later - do NSS_Init after fork but before detaching from console- add Requires for versioned perl (libperl.so)- previous fix for 434403 used the wrong patch - this is the right one- Resolves bug 434403 - GCC 4.3 build fails - Rolled new source tarball which includes Nathan's fix for the struct ucred - NOTE: Change version back to 1.1.1 for next release - this release was pulled from CVS tag FedoraDirSvr110_gcc43- Autorebuild for GCC 4.3- This is the GA release of Fedora DS 1.1 - Removed version numbers for BuildRequires and Requires - Added full URL to source tarball- Rebuild for deps- This is the beta2 release - new file added to package - /etc/sysconfig/dirsrv - for setting - daemon environment as is usual in other linux daemons- fix build breakage due to open() - mock could not find BuildRequires: db4-devel >= 4.2.52 - mock works if >= version is removed - it correctly finds db4.6- Change pathnames to use the pkgname macro which is dirsrv - get rid of cvsdate in source name- Added Requires for perldap, cyrus sasl plugins - Removed template-migrate* files - Added perl module directory - Removed install.inf - setup-ds.pl can now easily generate one- added requires for mozldap-tools- update to latest sources - added migrateTo11 to allow migrating instances from 1.0.x to 1.1 - ldapi support - fixed pam passthru plugin ENTRY method- Renamed package to fedora-ds-base, but keep names of paths/files/services the same - use the shortname macro (fedora-ds) for names of paths, files, and services instead - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base - updated to latest sources- More cleanup suggested by Dennis Gilmore - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1- latest sources - added init scripts - use /etc as instconfigdir- latest sources - moved all executables to _bindir- latest sources - added /var/tmp/fedora-ds to dirs- added logconv.pl - added slapi-plugin.h to devel package - added explicit dirs for /var/log/fedora-ds et. al.- just move all .so files into the base package from the devel package- Move the plugin *.so files into the main package instead of the devel - package because they are loaded directly by name via dlopen- Move the script-templates directory to datadir/fedora-ds- change mozldap to mozldap6- remove . from cvsdate define- Having a problem building in Brew - may be Release format- Changed version to 1.1.0 and added Release 1.el4.cvs20070119 - merged in changes from Fedora Extras candidate spec file- Bump component versions (nspr, nss, svrcore, mozldap) to their latest - remove unneeded patches- update to a cvs snapshot - fedorafy the spec - create -devel subpackage - apply a patch to use mozldap not mozldap6 - apply a patch to allow --prefix to work correctly- Fixed the problem where the server would crash upon shutdown in dblayer - due to a race condition among the database housekeeping threads - Fix a problem with normalized absolute paths for db directories- Touch all of the ldap/admin/src/scripts/*.in files so that they - will be newer than their corresponding script template files, so - that make will rebuild them.- Chown new schema files when copying during instance creation- Configure will get ldapsdk_bindir from pkg-config, or $libdir/mozldap6- use eval to sed ./configure into ../configure- jump through hoops to be able to run ../configure- Need to make built dir in setup section- The template scripts needed to use @libdir@ instead of hardcoding - /usr/lib - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall - do the actual build in a "built" subdirectory, until we remove - the old script templates- Make replication plugin link with libdb- Have make define LIBDIR, BINDIR, etc. for C code to use - especially for create_instance.h- Forgot to checkin new config.h.in for AC_CONFIG_HEADERS- Add perldap as a Requires; update sources- Fix ds_newinst.pl - Remove obsolete #defines- Update sources; rebuild to populate brew yum repo with dirsec-nss- Update sources- initial revision  !"#$%&'(1.3.8.4-15.el71.3.8.4-15.el71.3.8.41.3.8.41.3.8.4dirsrvnunc-stans.hrepl-session-plugin.hsds.hslapi-plugin.hslapi_pal.hwinsync-plugin.hlibldaputil.solibns-dshttpd.solibnunc-stans.solibsds.solibslapd.sodirsrv.pclibsds.pcnunc-stans.pc389-ds-base-devel-1.3.8.4LICENSELICENSE.GPLv3+LICENSE.opensslREADME.develmd_docs_job-safety.3.gzns_job_t.3.gzns_thrpool_config.3.gznunc-stans.h.3.gzsds_bptree.3.gzsds_bptree_cow.3.gzsds_bptree_cow_instance.3.gzsds_bptree_instance.3.gzsds_bptree_node.3.gzsds_bptree_node_list.3.gzsds_bptree_transaction.3.gzsds_ht_instance.3.gzsds_ht_node.3.gzsds_ht_slot.3.gzsds_ht_value.3.gzsds_lqueue.3.gzsds_misc.3.gzsds_queue.3.gzsds_queue_node.3.gzsds_tqueue.3.gz/usr/include//usr/include/dirsrv//usr/lib64/dirsrv//usr/lib64/pkgconfig//usr/share/doc//usr/share/doc/389-ds-base-devel-1.3.8.4//usr/share/man/man3/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnudirectoryC source, ASCII textASCII textC source, UTF-8 Unicode textpkgconfig filetroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, from Unix, max compression)troff or preprocessor input, ASCII text (gzip compressed data, from Unix, max compression) RRRRPRPRR PRR ?7zXZ !#,T] b2u jӫ`(|2KNH@?:" ..ʹ-.]Ԙ4CҚr!>+"7A@^`[OPV-=`cGkȩt"GWw\%ys6 5Ga0 #;-^e < -ZCR=0ÁL] jr@%B !'C\(=Y)x- RQgXj05}¦wEᦃ/F˺LӜ5Ɗl0%J嶮̆A9`Uv) `-S k^$M{D2B{^/ ]ʻRN] 8*L'hGͽ 6ړkkánReM&hÕ;T0K1%=: xbpْ i@v4аEy.1ufΦ?L3X[܃_,H8w;#e~Zm7~3d׼0pt8b%™ێgM}ϝHu80.Oo g`'48ꣲ#d?= Y!H4ږe5+zGn6_4X&0Uy[}}X/RxaPks޴d{+szS á3}/`}L8LENw5q-2H8$QBxP1 FBn3X R%ceE^8& lL wRt(02˩>m*:k<HeʽU2Ȅvi0͇_\zxcM3װ[/.oGیDIvMٱbQ6PDB 4.+N]5츃cb3!IZէÅ5W,6=&* &)=9ڋSiQFM-%_OٮOz)ູwtE臸6ˣ`KT} ;䝟(<"W&4b&uaoYzdCha6~NyB3p'{ LJkOҚw19|Ǣ^OF &'lׂt̜ Na_gh}_GG L .Gʋ]yv*˯.0=NF2iϡӆD@ؐNhK`ZXp3qBWK.&!P"*4z ~բ2$b *7 r=ѕaILu(}]2aΑ.^UiYWulJXUgWQS΀g({¦ c™{xC~DG<p#X$zI1Ѿm.\4.T0[պo:]+  v^; v\ʚy4T0Rұq̕.e^üF(O+vP\CQD5lΚHqe1*~t 0`l~,Dm!@Λt 2f5Bzg*/@i<" 36}QϽdXo/{V1]עWө*rڽ|ԝeT4]#PXz8KՁOIp7<'Z ~`jOu\ uw(g*BﳔՋn>9idA 4nePxb<"D :k1 Z>Lx*n ,ƪ 1"*ɨ5?Ww.G*)_`LtnAى~&иR˾t6OdZBl];qV]A)qgLO_ i )79!1\TS5>c)B~/5?\rk߽h\'e7B ,My6=p_ZȣhB@Kdql[: DE̊U;jo*t-qm\~ )I=GqvDܸ9#IAb;;s2?ݶ" êfĝKKkDu S[ognS%ii}S%` 6I`.PX ʕ {Zῲ*1@"'{7 /l*d7<~t J[l_fm x qFFzeQ;iyW{ϴ*F;r{LNY- #P[cRcp/kADgL.E=5}'6_!%) eK%nqP׸-gށ*e=}l4_-{gb'>PH  JG߽h xfU>; -%d@K œd4VYZPsŤYe"*]y[;q٢˃1N=&ɩ&2sjKeXZ1$ZfVv@haY 4?gu23 Ev]<+v0t*ƘHRK4<8LO7|d_$=*lý2Ñyaʼn/ qE.Bgd152cK`JGoFw4Ro+j^0HgT(YbBjw+Cq b#IQҜ%IVȱ~9%Np7hq\Rؚt2q"ԑTj|>n,9v:s uID{jջ$;MmvS-96MF[x8`v BfS1T[OŅ,0j蕡螄q ᧡LA8hѐ_zy)=NJo-`"adekgџ8(a P'2`pg3 Q|B FrV14#܍".{Me>"f /aQkn] W"K= qXJ·A4h+\^NTT[ǑX>2sLm7q5?%EQ'WŝK360Mvl~蕙ЖJCMF1c1wּ=Vб?{IG'MF D{Os!QeQke#UֵbGeZ"&ԝ$(~ac*ao/{̒{Пէ(ϜNc#4+Os!L%(9yov}*lbL5vO זs dīɅ= ؍q 87SkOv3ש#D;]9fRD)WxoN>{KMtwYK=âUѤE D^`cqB|c1=~ܱuᶩax&zCsF.h5j#$4g/SO;ײ RX#kx \y|]Wb[Ifؾ.%+(-> #%~0.S:Up)Ύɀ&k @g>&<$f?~R笜ЈR1٦= #H.cY橪9F?NKϊ*Od =!. <|He͑C#=rx;8=)8%f{+z8Ziۊ e5yJ3eEq0K׌H &j=5cnOpρCu g‚ ''At?tq!Q='Ӄktvآ'%%='m[3)烼+[֯?l~˼a 5iPq0;qy|0Fv&R)EMc[= IVRHL?}@9r&N(pO\Yq)e^G~ʫn*ivW<1wnlp>C G*;e(\oG4}+iM1*Afuȡ9LLE54in{l$dezMx/R ^&ؾ :GeQsj)jRKzKѷp)P4 χ㻄56\O0,Žu3Ѹk7l7巶ap/M "MwS1rY)J3(:x$Ev}|"VF@}Хq9H?Ci<,:cvkڼVTԖ'.KHS9RRtl>IچDE VOvhy`C׉_fBs[面twcGU<B(3uْoJ>K8 Msכ< 8SCqm}&)G">Kܤ<"{js̑*$Q+I\<͈(lD o4()A"d6#"D>& GZqYfhXk_UwburKg+L90n7 K"cdj05q!}@?ڐjdA0}5}~I}#}]Y GU2oKkޣϧ)28-~-ƞ< %l1s2ch\kXKSEarUV#z%LX0n304$me0fhg[ӹ.\/ SĂ0*X?!1"9 ъ퉑gKGa2rvTz͸tBSB $eS:{5Ke:Sͮ%\2 7*X6W2@Dk,<8~6Gҡ)Œ1%&Ž:9_ $0į"cl]v9>Ĝƥ5QxleIӣ`lc)&\bzz^N}x, c4%e<{gȨa)9|t],9 rzavɘ3ia!Ber= r&(yLч^LN/vj~#ݩ۽7bJ?k61 uM!|KJcV_gN_*[h0)eAuI96揝F-{ _9Z@|č 8F ?Y{}Yq%G)YM+9?}\a~=:Slݏ*Z3csهk _RnVG{x/ҋ "Dջp5Iѓ x]Ϩ%B3>I$=nPpکLWGcVW>2O${ae1Ok6_mkDz. ekMewq wVuan!e>~2O agްүoAzʸY̝V P{D (Pf4/~GÑõD ;I!СD יBiJ.p`7F/3Q):&\%e*W U)ą8yQ?F ˢTY-+7Qe(a61x$ ƶxRۢfήmhm{%haO\^ո}Be-u/sTJu~ڼt'u! M ""Wu$0qΒT @AZ:}Hi ū'jrDC7Y\6ȟ7/a{+lLd0vgBZ tcY^ "1 5ŕO`P| WVhKͪ=)Eux I~9(.K rQF݆? 'PfO@FюS D|Xdc;G*3! /40E6o@.(aۇ6X!342/;ŷ\?BZJՄ*CiQ]H)αxaã=M7?Yo ;v`@loqZrF3v liS:i]6?ɝT3-2MS5ʟQ 6w!>$l13pa:W1ݢ[)GII !iZu1Cގ72 GqVDx$ra;jmm{b, MrlN~Zgc6JyOpuRw$&S?UGtSh[Y0tL`3 ?b:cn_(ٶOI43` Iyf<)bpعU [cwb: QyPtQDkK}MQBLR)vEq`=J2D6A&7(*pF\!~"c%xL|k<1Nþ2<-C?R\Ɲb|]MН)/%uUꢪ("; y]6[ *ܒ mJayCk7-kHæ}i:ЦYKR:ԳV8OuBQe2<ܼ+2f<(8w)6IauՎʥs'^!;ր^Svr|b-9; M@Y*L܀65SBc?ׇjq-U-E;,#=oO0JM r_x_Nh+3^$?[Ҍ,q]yN #clH#.nVݬ]/nl缟7Fl%S;g/2ͲSlrOr/ hQ8zpϹo2ӑ! =,"Mo_,EpK@#h_4.:Q7|ǁ Y4^% JXEtͽ1p\?9+[u0͊B̂CcI !7޾[dq'ׂSEZSݳF"yطz+_[)qJ=vʢ6-HNamu LmIY{ eQ=bJKd>ںf }RBybU֔*=W3,ךиIBnV1]̴N ??=>{s7|ؑVȺ%Obw`a2?7 (x8^ *DOxo+iys1U#zjD!*$:~ Qw>dt4ŽMrb[ው=])_$+F*_0}ȹ;K9m !/gN~4AZ&0m"^2uZ}֌] gޢO=c F"D}U.'D毳LVʕδq^aT;r8J{.l:mF"|J%<, |7SCh!FаZM`7{@`\e^=@WkQteu?JQn:=9fWe4;r1xy gs1HBdojߤX~&,WC9 zJIizb,"šH"p*>1fkb$\u!%mIF2wy/Xe։ӯⰷ!Y$3Yjee}c ·2#䟀6(crևzGRr5q2n|G0̝P7jge 42@ؓ葊=+%DrB0^sDң"vE ,'~GU\GxR:q0:sRs,B[| lN *~S&,jμsAZV9 Eb^ yj6RQ 8#*LK25 E.@!fW)%HlJ$g]ҳZ /ڐч=a(/Ы|./r`k$1ᎂ2PDf*~Y.e2fX{ޯƬ\ُ hk!,e衬)WNispk3 =yG1ʸY^G@/ﭢMaESh.Jz0m*@53+Pڞ}2K'e3B--\i;ٻBr 8]GKjQUe߄#VKc A)W)&i KcsOًDބ0ߠ]OU[:#gR)fđ(؈7XCRƲ홙γqBt4A,u 8Y_7o$ĮBj]Cm0Ү݃|I" {v8c$wjEit/GtrZKC;'hL2[ x7Z@\ơK!|XBaV4v9NW`ûĬŮz3,Pʘ4+k<S$UŒ /fpԋ6${%W8^6])-]V΢sRj5sj*7 sDnq9Wк쌿R?|oDU 4*X: &a4̓¾rժ-C3,6ˠR[< r(NC}3WGd `ވ^@^dCѵ#R%I#nXesiޑ4KOB7߮ zJ~rC~ -ʧwonA ^ϯ iAOF'>i+c} #3sqd?ҧI+)4A⹖X}G?Q>>5 AE`x5cㄈڇ+V{@!R@J#nE\G_x'ReЈd4bPb:Wݵ|N  &xhqkeob^d4 qgAآyrkBm,nͦ1Q3x, * ?_kc"#^(&K TF;[S{Q6%Di._BCy:sGqcbű!N.o~T׮2ʃ<j x8|Voh1ʅDGQK]ېqYEߕ?FcaE Sl%c#a>+BUeы$]j=)}"4 m ifqkj0T46_J`~4k?f@NԃK7(_emK`]͈ef ǡHY/OS0@O.v1UPCYz8dh_tXxe\2p:&`܏^B^u v2ɼBevSfa/kp`+ =p/ |K RҴ;=1U2)2F߯`?yS5q@fa\p3hJcUȤo3ؗ~4ܝ&X~6I @|PC*2z h'+HNd `ҞЈS>U~Չ붠)}v1 2 1S"gM!Pŏdk8viO`lfYў48~s1&k!~Rl !T08R;uI[e}&@&;>uũRbW'O#^>Z݀UE3PkEnrq >@k"d"g4I*MgwF*Plg7jUm݀MЈzZ8I%)S32H]nis. Ozn 1 $(y.7f91,+qlsJ:GﵑkO3^2:3% dRmKƑߚa/(녟ĹlS ?_z;,_w7NؒbgRbh@Ft_OtOڷ#]:-@#!fgL].k;f Vp76wGU 8y!b*;LnIaT):IhqAẢeB*'G!&Y,nUe߹ս'h~@ V@)ٺ9mr\N۴S֧>s-Cl;apBnUZ8U`z] $d03XW<B[HP̭|39__Egi=R,9&JX$_`g%Su/;M槥# XQ6vʕw"k_1h$t0׏17f7=AGT b9l2Kȏ @S&#%AI zMm@eZ0g2ߴ1"|8g ȓpS %C$?^+@C[THA>kPd.Mkp^lFeKAfN[~Rvf;<^m3 R $U黒F`fe PR~Eׄn<_5 O,*ڐne"T}< `P0h+7Bt{?px#ys9Xf9}#~c=@/+ƢF 샄*CAEo{]Uʄb)E&|E7:SV1ԵJ LUӭAz7.P$YUï$To@r oIߊ@\Sn46O;C#A._n"79&!'FW98L3W #timTzvv|C73*Ǡ&UC$5 }bFm EHc  N`io:7s ~46o3`bȣV0馹DsXug1PhQAurqI&{לۡ'=-/J~;o2*i֩l9 qx\7u5q.J~*K{sRʑRX=e %:@?εc11kI;w)5%߫H!lBxt gZky ɉSpiL|fIKۤhdQ=?gs[,gH%Y16ܯrqRbBpZ(qbJvAYN&}9E+;:Fi߻6_aLY 4@72LcLoE#F0`P@G'#RfH5Vw *!/I8Xr+WoujDLѮ'wV'(N3E;;3RYSm*55RDմ//lWiꯗl!N ,VH2˨0_ns.;[4Ezb3@K>+LjAp42ϓv`Xsp䣾&_3(:/*&acI ^nheq Ö-0;6OC NT:ĵqְ>/NʟMTSQT"LN{s!l9nƼı[|U17fQJ! 6f= 9ib҆{أZj?RܮY Jʷ̜dz3EC,+UnȠ Tˑm7!+BepWL^urLXl CtΟj`kp[hEzfN~7mR?\p$bXFʹFNU8im;C"h|/ wquq韸X;wnNJBB|+7GQkKݥGK\@Hʏ/ te/.'?]JO۱0&p\Ēzm{ߘY Ok}!f-fr!{OuQq9Jj:zIZ4ѵ3nsY VK8mjžϺMc`+Zhv4V uϔR< 9!1bO$kcHG6OJP۬y14\4{eICiA{#SY(Jg8a4g.>z:cl?\aM--B4݋7^ǵ BE@eKC)yYʼnq+rOq(5Og}=/<EճOWk>u)S{R+l0vNNj'Ue:TŁXD!1 -a##@vj ,)ą7&xSeېKHaϖƱX~ݨ|xE@K&2ZZ{ pnDM<[p~VMjy P+0=-9#:7aV,*PrOq񛮩)M}eY ph_Ɯ;F/-0Jb[VFQ3STP:T 4_]T%kvOX͞Fq;+1ELt#~9m?|X/^dCj ֨ sk[<ŕ;7A1V,͂&o1Β%yhL#ޚw KM M֎DlԗZGdoǝ'݆q"wΩDj47WWhE A_HRFOQ E7j礽 xR%m2w}pbS̾D bfRJ.mէ1!]oHՎ4/m}Ə 9߄%1s.ؒbXlY WICBqb{J?> u5 ]+[5%+8G?fWS45%̊@\+623<eΩy5.g|騫iJk6@Ϝ棛:.$q O/f .NBCN iGh'#R3tc04vwԔ.8g^ 7hm^dD1)5֤vOߢ=7Q:!y+6w߫=^<}qeԗL{mmO_Ĝ}d( X/[ JI(`^bylv2N. ^Z!T1޶&NUbiʳJ'Q_\0mɚ%)L@$ ־˵nÄ!W70>ag;O2yE]T=%!tkU k$upW➳(4tiHp-̋b[|R֭|‚TN{(G-'-;D; Ԡw-JY|mG;#}5 ,};q[YHQu /pAAJxZ*G`B2/ իZZjҢ+kŠqP $?3@6%Q:uVT ӝМiD@/' ͕ydsɑucǎ<?ragI4'o>3m,lΝ.R|W7}X b|43ݲW1A[\sW odljm=JL9_ƷY1t%#,]RkHSe,dk~R,*4cN?3(Y[nT]Ll*pL'T5I=^jT |!O1\%ޚ<*hEi8|"> S;U+ΒxL@U@*u}߀拺S uV2ˢhO+sRceײlwŵΚ5UZ5T1~n1F涓J?{>[[t@fnybN>}bpJ`r 4K8)-wxΈ ln4vxn՟,~W#r+cɴЪ x'SHtOZ2>6v9H?}L>(7'ހ=U]J-Z/} sG<n)&$7Ȅj@h󿥵'0R/d/*!p0dN) |҆& ']͟V`D[,ghgس/!Ocv`R~i?=3!Z'?QH߈&o^Ͻ3X荥+w P̂N_A=AdĴLBtҾ[Z݆UpH1XO*?oz/Wm>? x ,6!R] vB.rQ5ASX~F-iBg SQ ΂s0a=M wb>{:խ o73k ޓmƒ9GoOҜ0l*@guNrk\xrҦ u~ؖ 4709lj"\3L$Nev͞KC aw*:-Fr\RaƖi`=!¶OB#5spo&{Xk{iubYm'RWOTu$A I|o܆(9f&qb.z88_g V<{'O*֨ >>.2u߶y0a?3nw6Hs.\]])ahA9]V֣.qtWd\.*B™w ]rS_-߷|XQb{a>GXnLs:9ے++E%- ZM 'Rcs8Һ~q? 6*?< 7ch=Aۍ0bQґ@0+0x&r߉=9/Wݥͮ.aI&㶁NChjD/eأs0˂:BL޻O":J_vzr%ze(uY]"cBZN 4 pEeXb[ҾOաLM#BYtӌ~:5 neLLPGkrh!wF3JG.+7e N$ ҶyF5kM߶m#'NPo9o'!zBM'bt<1+J>~Vة?JC]Qc{އ,*EAM8=uxx 0mծe%c#ވȮS{<㨤5m:XHm֖ЙL =!T2_ p8Ճ90n0N})rgdsN1xIJܥ/sX4UԳ|{"K9OLh6o"VDB [cq3*HҝAe+d_~f-%_onv'堇1ocVa ʗ"IEt= A< Z!_w xÁ9ځqL 4ыq͈8Eg[WpϿ <{]|%UxӽvzTS.FLh͆=◣CnT=-Z픨C^NWaFKN*Bo.aS `U_@Gد* .(4j b!n)m|-bf+ a NNmqOl2Vȶ0Jt Vg2.Dvգ:p|7G Aq-#Q^os'X śֆE[1l+gAIv<"=,ʘfׇ^hػGYM> ufYN0A:RnG9j~agϔ2 zT6p||| TnF$A~\$ Cm,ijE|[oF Lgk&fj<8yLPWLn\J+ *V'LK{T,eؖ/J$ eo+_VWAȒGxqޱe6dz&}KVmќ0R Pc{Gxp:9JZKq-5\X%m(j}kQBӡgltWJG(dx3Or"^h| Ǖ8 7*;0Oς b6dt2S{]hrHzZlx?GN  W_ l.ic ]3\,?}DJřo"cyro,Z֠9pm*]P`zQ:[{ 2"%6.ڽd%&b˚y{h`IK\&շY7k<4fuI|pN`_8 kb2K~;nSe R @yj$a(M+dΨ]^gB$~' `۵lN$ȶ}ʿg>{l(I𸊉_8j? |a_e$oQ.5 eת8ŃqeD0vPFX:Vd찑r4Z,rJ>oFxD!FSZ*`J3쯋ԖV{^w *ԦB/)bpO4F9tH.*1ᕰoQ:bzg2w@ah,潈 ;k6ȃ RtQȚX(oڭQ v&3K!q5NhH&Cב(.n;7-L1Vn"y`l?2O0ly~yf@k(mB#&m]W%.Z Q5 t'?M~BmHz-H]LҤQY}>^2 8܂V,z;\fD;(@΃mp^ BZ:S7K+\M-:j@P߁~@脏DBͭҵhr!yu89S URI7WUHLRi\xYϐՍ'A7k:,d6 ?`R9ЯK-BE6Zz9RX Hqw b3^恷AM C@ԙRJ rBAP3 @ r60uuVq)Z Uh#I_LF_O )%5lFxp r"+'~3G ^cok'~?mPW܋ Yak~ 6GG>u{ 2k;+c!X O@ž6ޗU', )LЌjeBxh\zzDF6=U'soU,25 [+%}(Qfse1yc4~kWf YD"lj4O7bv^%Yۚgfs N}V&V;zϧ<3U*.aAާӼw d0쎺AO-8Z|esHᜟMzdk }?:)'_9[&Z1@+ؐ$P2xc0A\K+̋]xh+:2a~rSY?5-Zd =uNGk\S=‡]eD5x}"nYJD]Ցq凾Sܹ~GVEk^:} ;.D#C1L:8^yX* "&vu/A5cO`J:BX Q5) XImًoɄUSW%l$5b-PELO0 !:菦 Cu&i@Po@zebBɞfM³4etE8ҝ8Ln9vʃyu}NlW36$N44]~"nζ`Et\!7T'Dw eJ7j)&Kmw2c8`C1gz)B{nK@ZЫg?w2sl?uYђfo?|Q OqH^t~?i!/jMSC^+b] X5#h緐ϢGq0.֞2.&MYwq,Jφz9,1˓]? rmKrRoE@rBZ03!^IjX/SjQoO)2 K 3_pSIjHٛDy 7eL7ݝWߘ.?K^wh/ aB~$ӉSU ,hήE>go)[Ć{ ("Ϯ`>X'N"HВ q}ԍVDKgc%ft{ddBۆ9h{r+l~d>!;eŢmF:X6_nv |gNn)a W2t=xjKbZ+D__iH^+Y>eoK.D 11(?J^S }wgi1΋I n< z@rGgI+5 .^BFpѝ+ IEu! s#p51A%&$'%izD=Bq6> 51Q_!0b,xͷxB {t.[?fBI.j yDkWL!PsȗQm*HwB;"0.$Y7bJa$]_p-mp7Hb]7 -l}\aJ_[E{ ,Fcn U=k#(hw;i`t \2w^TD@j<9@|FP.z>XͷN<2/MVdB}eIw.PyCVI究G }+;>s};RIgΕ QFB&WFswކ:utwmxE|p.x54)LPIKat:" W';9"̺JC7kVmT2's}_S"$B b9TOᙿK"îɶ\]xq͸D=]#hz%w/|Crݴ͟)ԇ,6~49Czm~uz{SUZYZv-ŋJ߀n`U+of.BڠIfzm%J{ϭ0ٔut) |k4ޞ%\4ў> kg5>DLT/9 $ZJTVf= ƥp5Ī^r4VD5E{7JpW茺6is4r]6a,q93V9O Uo>ImQ2*n ), uJ8X{"R5AY7nxKY~8Sү*?xW|(hL;N"4o#E)|O/8- oV.zT+Fc RQԈRr4yw@-# -%$~Xf_E&hqϿ;ޟ Ҹ2:x{4R?1keN9]FnR"0 F߅ūC^0m8 fڇbjHHzW;ŅҼ˔QSe@,B`JAnvr DթitxpPa`q!ָlg=V7& O"Ҙw A1 ,J?D3]G-CX,X?J&]O7uT=[Q>xмgMs],QPoZ{4j 5egiX+v/8u!J!OkAbR!PYhr__cآ܎7qQ'͐mķ ozWδ]!_:z wnGfml PO113&͡+tkE_4PE7!)Aؒ7Ю(rp/eёB癧ɮcL4]<ZNv')ԍh3J !Ei6bwYR"Jms ҆.*7sR٢1g$u2[z^غe-|Pr,14SSՠ68Pc/؀>+ :TiԃDOBDWf>,YE㘶N~%=q"R}•R/Ch 3%y@hDeńm2S1< >*y%Pr?5K ^ pUeq&[Fte,j7gN S轨{8+KnTimO3!k:H $aߣv. ec|'[za\] rn9NFNi0EbDUI=g1LعT1qkVJpfY8h{CqS1(T^-z>N'yV=,b? wɉj``n׈V#+o"ܕm&RCc1AgH2Ef޶bvDҔ^&6"9cBU!(oaJHQ?\S߿tu?#xKS#9x(HܖfBbt5w8083=*?rSΣI{ nO0F'UA!\݄aúCu!m C$8FRveqeLE [{\D_'9vshwR®޹7K6\qPifb%IA/78('8klP&"._/ ߦv(f[>XE L9sCKi| B93#C=C42}o^E&9 ;devet;h\"%lOUm/̝By7DyҸ3w*EM*_]g} "Dct-KuX*UAyha7CZ/ D'H:q@N.i=Pc7ɶ]/tv0z=ól:{nS#F=[ I`J.tx'2}Ѹ*\mVx] [HT.H{!CG2\}iO@KD h&_au36S7uԶ<SYF&*ߵ$rX1("j uxxuZhMnZkg!z2"ar ۾%sfL&BI^ؠ%n_? |WIZhP-eunsVY[wجk& dIgh%N`Ɲ3Rh:^(29_p<΂QJkid:h \b8yXyeQdJhj8~5<ViꙫjƔ!f tµ T,؆)E}e'-1ቛd'旓?.NDjc!ʄ*5Dz= ơV 48xCp:/cTOs'4euDK3z\E^Q7w+50FE`bL(p}y@gA„L|UÚ iL5LP|0h'Pu_CYGٝ'{#~ X͏]_o(-gX ͓Pg/CMB$rS#Jt!SȼjRP+[& 72uIGT(ho}/F3 EFgY*y:ҍ{#O,$>^1HB]Q]-m6Vjo; #on8ߊF*lo|,ɿ&8?^P^A̡&<;8@՝cŽy8m^ 0j!V9(<K qFQlwnR7^?n mh%|"&z[M@KF]LGkx{97xaqMUesqL% +}hL[5S}OK`֝̃5 2LcwJjiFQ5z FoZ X(Z>@eY7UƎQeL[*0rMb}'JwB#'пf;5J\8 ÉF9|~eGVWV2.X+r>psi6B8US@t(x&XNI@p$-.Jn.+eЬ6 2%s0ú |{N~:bv%ZSC%zvBo"tkگ5:!->vc{*oɶ^i :{? !#>쉊p_._AVɌF{f)IDxi*C/jsyJdj̐E%=*ne͙4Kg8{_k^{:ޗJ?Q1'rhy7/S9Q~Ac E_QMȻC{o-o;,[OZ2gbuI6Bc8dGn~+Z-6=H ;6W`ɎXU:>'6dի eC9<#> sw搾?Taxh, ḽ聺=ٴe8'P y9"-HK%/-cY8Sn]E - ;J"cn|H\ $cWV3G+iUf+Auktj y1;r ,tg\'+U0ͣaȵY o1a@Ӱ2(_xy4]ܰӼ1ۅK! ~ )Dmyތ2<8JxI˱~$9C(lφz9 og&At,vX9oC֦^. KuPE%!gg6'/V/ &YmӺOb\-tg;v"B3z9xqJcIpV2ljbu-Y`ξ.f_ DT^y veM( ի=r45] rKahDzg`J)e8K-͘{b[S ;\b/3Nd1NK'i<62x`6CMt&YMbzn5&)F#(\5s%੕z؈As6J ~^g0!Hj'FvܖRɘx.TŲ!|S nb9Mn $E8 ٌ3sBjfg(9OVV g! ScKc4Gs4ߙ]mC빆鎗8:2s $W,&JOtpxyn1i BKwMY]v<&ChGz̋DC* ®l|jkCʚb dw.̿吥m.ZypQ:qyɚ:pTF,7/G͝L20z%s?6gݹk4Yfzc2r#ylE@,ҍW-ZqlK!vAxSj^hR}T26R| /J2bS')MW.Բ1ƨƿt~RJؠ;维E<`] ;\xڈ8@E#֬6_;ǻ#E%E)x Dj5]x%!,?AvwސKMB9;N3OxutR>4R Lo,GKrE C6~1ә'QH]T!fvT/82bpNPH:Enzn4*"nO:Q:4|֪IOfF@4xʲ(0yR)?9`~Mz2}rgW.5B<"!@0=pv *[vy@UEʧƍYs'1F kՔD.;t\v ~13CͩtW>[>v=sC[ dS4Hktҙ!9 8M'h7EbdU[,kHeǒסvM2齿H]럽n1]kj[)d#ɀjkdz5cam'Ԋ,%I.;Xs˳!c+gI|ASqZ7;hu,(%mx1.Խ $֏\&,JK(+8{' MN weS;EPg QjWVuf |e#x]})YP~`u#!.EsG÷!P[Xgcfċ)Xj .`P,DA(,ZKSY6iG\]邆ܫ"dvL%MEIWaJ&Y }%BJyi"W-ߟ~k(ڸ>rhCk|s:|66iC#'27(SDe<7Wx -8knlFG|GOY7X5Euu\/c1j8R53FX^ ~-U֪:[ o-baJ:}LVJ?z[ s׆M1qyQ{#7Sx P΂zڅ9!|/bYނ59w$bMO/iyQ Dit·tOR)a'wbuQHƂY9#aF'~`bZF;1#_HAy+jnfo%9D7HKOvw1s;' `Npy|0@?a#X_Wb%o?Y%YP8 F̈́ҀD,Ջ<Σr}&7ٌm7{Ch/9D,2TC9o+*VR,bh37^FxC( WCԠESUò~_'p6xiz$CMEIn#!J]( ~a*8~iV}.19.y>$>o6 &{`0͏FFe[RLRQDmJD!i1:EK"t%O# Z'BL.-v'm*=;NeXy穧<.ᡀ 1VfɆ wŵlREh>[V hJ!Pr541dfp?DžC -5TEqLb獎U wmyv6iT֋~P{%=tE/f>}ȷafcCwExcJtY- ɮD.14˩ϭJuio(P ¯ώԗR?/CJ'ce+,UEƹ;9jL$]QfSEP1״QVyxcCLEh v&4~ׂ=I$vO-B,96Yf5Etj"x>Ɓqy0v5G]"0Шk/`:Yp3%*}xy-Q#ԓ͙1Y {Ul^ܓj4?Sd@ӝ销p'FV{QvdnۉA]-%) B'(^nՙ5uxPU>\<.@,TV7]b {M7CDl-(A㯨eѓE9.7}7&W !+#Rވ1A}ɽ޻n6[$сC},ܲ;~&gOGG/sȝγ@&3F&GQԪTF;{0X:S}]ZtNMpPF; [D4Ald7vb8klzi #$uq;UL![> _wV~^xۼ&69mE'fH_Y+olۙT8vPrT2iJЛʔCό vcГy_x'ct6HuQX ;OM2f^%G4)7ѿ<; -4ؙrdJѦ@=?" Z&+9 RKdPHVXLJ4X K?_h % +ߡwʘgRv;'Sc} zZ$v=\jC)eK/9NFer0قp s͜Zufؤ% .F!sdLƢO:' [uln_~Ɉ#2 9^?+ ۴a%b'c!>AZgdغ>j#2p)I" ɣ(YV`q[?BvJ&E=f LDwbIxqb֧+e5y 9XfpVcdX 5;#OMҰxm,JS-iU.NF<ALhmԂ9o0 VN,Y ߍ =; xh7c--o2F/qy?dlWj[kKϩ Z58#t$Wh~Y55N].=214'n= =Eܓt-i` 7H;OGaWH *H9d\xD/2:%]#S"jtl+<}PƿSI2̉$Qi 3j TƽGԹ]Y޾fg&dhST;#q23")W&fɥ8,|),0+TgQ9Wog{K:204$G}BD#2=&1hq*DjfXMAH]ZhϢB&a~$$zD'"m|( %뙅3;.>PAEc_s\Gm [|Om%FG- 3TJxq3Xgg,ȗ%JJP*&#!]Fh_[A0Pd HֳP͐ )rqe"u u*xT[(gWO-&Xn`|4_9\ILަ5E x &QŒ5Ӈ trz}^IZ#guK o᪛)|a-s? B#) _"\$pï,oU9pȒ|^LՁg҉'FLD*?AUl>k5;$}ik ҰyzQ*p;&nhb5S*VldJϤ6|YR㭦n!+~ 㮸1Le]ێ"\L]& eSw"8U 3ΰ;,T,)nƻBGT!eYRzp¢7'n}ɥM]asMCSl5''bs?e 1^gT8Y 5Ykö cU4lTCv_@ i6(C mꔕV:hO b3[ţo֥~ H qgAk¢:0?*;Lj=Y0{O厮'h"m/Os&HF۴h|Ď>p) 2Il<2ȝkيeF=u0 ٚ"I@=s;ryо` :+k߼K䐶e*8cĐ=$)PmTrFZbV bYPHrLO5̘a"W u'=Vfwmc[UT^KQ̔G V^z{8Z _Kk Pə( wxhrvTP%Bt褧8ܞ:p^)S7d#!տgy@?>({S!hՉQId/kC68h<6Mz{sW~/N'xUS.IIL8>g \sIb9,{L͍wҷܺJiר@%tњRe@}-ގ9CG >pj gDЏ /oiiILJy4,UfdkyKnZtf_g,&EӘW/32 K($9uiv YێүK*F oNDпGMoPX5iW.@L飅9"P5_zz^hZڣ evf *]nj*AZO j iHHعG>b;̆juX0T GL"$ ~9{`?z;В~Vcy/Ǚ5j{je6Nvޣ'Tȗ \Ypb4TaTolݹ䥋A`d0]t 1^&5fR^*8DGf dQ8,8nsRa@R{T>f.'^§4&j8R 8 ڽRh[`OIZ%/.WwΜoNàF0~R?0s$w9Bq3:P3t~Oh 6EHʹ:hMV:Bt% }ax`ߦpp"I!O1,5C(`y? HE܊kfjQamO{Z5o'%ub>PYzKܮB`Nl{)tU%ڑ@4F:%lfv??w.^}@'0SEZ ($[^,2B ,!+X5&y5MU@ÁjU?4oH;ݕa}j ZUcsf lZx`Ѐ,K(U4סD)H^{c}̾*Inٴv 6|+fm o!} C oE*q(n?9!TDl߀x.c JuhCJFkٗp2t73Ƈ9SG=gm")~v8KeY·i^x/+nJ:3*^΢n 4LU_Uʡwa"nTnjg Yœ!}tuR Zk_u,/̊=.ѿ vd|'"EmAጿ4aj]dʢ׸:v?]{ЬLIhS?H6ku?UyZLj3aSgNvX8L+.7a̟?7"^ ްnQM> 9Pnv<=0dh޼7,׬oΖ{oWd+ݶi., $Hz2qV`AD˗bw #QT7qX(ޟ"z׏*e> EhJ*x T)_w_69 )>ډ:NәUyg(Jk&+tUDlR/||GI9;MlMvZlOɷW #٠)r* */Z45b`=ȹ)ٕh{m}3? ̷#i I5yRR$r+GQ'yCJxrH[1͙qn:F9m#蓭q!ha@xwa:ܵUI#$]/#wD!_!;a|bd6bet6K3l7"й i@ 8b+ѻ!4riPAâw*FL<'>QkV3}UWeyR`S:S@hni<0`stإtCйp:ZKwaXPг{Y*4A qjzX"Bdݐ7xq9I2fd:  s\"{*p4kv{ ~o`.R{HH.:TDځol*Khu0""΁ws<61/I# zo.ږm98UbAhQE@>3 -̝t:5+ bn?/^d-ݟom~LGQd:ӃQCAETZ ` >t5YKĬh[ƒ>bq-rn_{Z䫢̸XQ"ڜͨ9ostЮ]5\ 9% Y@+ 8Rfx[wEԪ0EVH'~QڇzAJ%!1V5`~[ F+CV)]Q:mKtq+㤌2h) hJRo|jĀjLPr[y,Q AJz!]:|u4PÅ5@?٧sArE')Ve$]9҉R75b_;`<<_@J_!oPuswԵGedB/p@!v}! +ne`?rc9P'x EcVF հa"uiw~ /pT $5&ri= L߇Bw#@^Gm" *߫u (Dq'n ͓|s8 ظ5Lǃ=9lǑ?U%GZgcc2Ԁ +Xdz>AUeB3i6>y81:hLtC%.a',,Ha*NG 7#:cTc+(Ƞ垿Ci9I˶o׃Ӏ'ѭI%0+}re0JE>(uԀa}1Ӳn fRkoQ/JZ'ekRӴhG"5AR8du;0{Ɋ?r"kD.\PX@\\mU-b(tD,7׼\<&/ H$JxvZ 2#΀dͷsћR, _:e`60Rli֣U6vލCGXX`~Q/?8%#)SC>6±L&όLoU_D{ Kduo;\IZ1#UƏR# oTwDF2lrO7AW~NJڤ~R;2yU(buEƨAhi"yBH2Mst/<0e4`5ʁzGG+I'!`7'Č`$/f h(7օbq= i m{{d׈y 莏҄|yK1M%LnHoNQ 9}؈d]j#p 5$45m$~%K!™_1()K} i.s)J=$~nms=Z7;Bi<7v42_m N]ol|PrqޮIb(w"1-[UX{,0LGBBQ#cRQ1?0:=e8`4쾾cp5{395ܻdAޯ kL mI<},KU_{AU48>uFc\dPsCT=:De{'&MĎ*ɿyuĺy a%ZImkw3:^D/9t.b,&™[pl_WU=J`:[* ;qYt_39 R.YE_FK4֏SS|"f_%ek9>}V  l=IyEه./zVP?SF^V3Su P̳pTL!Q]zؐRK- 4X|fz /Mwߡsx?E|67AkX(GVK$*nT>K]ANѣ}{MT/`z(:d(F"@i4.`l["QC/I#AnR1Du:=E(=} QN;NAxcܖjtq`!5E>dޔb-zH!VŠb#S̱Bҩi=©)}` c6{NV n'KYbb 'LM1o ʐ/') DNI6C 1a5pFEvvxƲ*W>MyA:J5jI *0}}(# /ȁj#g､EOg& C0%($v]0qV%M*ú|lax=rSZpyˏt@R{m[ih&RTv N?I>' *jqUe$B} ٝ .=0V(ɨK]#la5Mcq\7K L6gzǽ?uj2%y=-xq `UEܷ_ kށ݅T|)hGٝOql[]mG3QqaTʾO@lRHX*[ S<ӯ/vp vm,=G#Kў@礔H~i5w7Pkfgت42\l T.-Rخ:ݛ̎bݴۏ֫Xipd4.bk-K{D}^JRjЋXF$TclXp6EfCZT(k+;mHsߓtd~rɺu.t/n1y'6CTГ4#tZT̃!lr^˓36%߻p\_UH0 ܲc~ R6)Dle ΗyjhRZ:/fاlKY*7eRbp1JPwO{"2cG({|46YHɧ!wLc `ϣ`uV⿹P#{Lwb m9 Ƃ beqtڪU,ԸX!<;o+VÎP_I#4emdJMdG~iN;7:ZU5Kp$F[_<7lMq%H;x#%tT&^gO0xfog!|&RB=$i&//]#TSL=dlF %e?'"hȑ4RE^ l~Xͥ85R;{B|&^#Œ,7t}MWn y3y.)2|ŝڶ:H{* cV݋!hK?vsΒ&gqX /Xc^}kǒ/ RYY,Z9(sqhQtn? DcE|uIf*ffVʄ6 ְgY\уѻ1нJ$sy ^iZKЬ=H p߁pR=9E&|['uxrky/A|%`3\963ߩ \RQdRà ?s" %ܬa-8ہ<}{M3L^lmk'F9bjG3YхX@7R߶|5%\϶4S =" gAԷږp<|$U%ɢjU'F Ѕ?rũ6mNYK1>%="T߉X.2@û4NV4vXh|{ۛ&AIJ q50a|Ev崖CĹ/n(j%=tA5½rşAJ}8R C*kΕP&otB, %tܽJ(,;h ;mm4Mڽ;6]5Q҈'?-^a?hؚNyD:۝\/[g) oE\J&O/N"=TV!VPEVjRAǰ5zs|83bmi$,>ynW1K[hX]1NTaϦH9p]^,UxaL@8 @#=\嘡Q']%G0W#.҄3җ<{ֈQ ړS}5Onёk q.0,}-ɍHi*YtEf y?B#ɹLh[#CŸm$K6bvb]J"`MPhU[/}維cRрc1r'وE^z`zE!xG]pH\ Xv)7S )/l!k]y9`٢Qh3n8W_++ UyǿS3bBC]b~mt'MH jrnbطm՛zoS71OarZWE!Ts3k{Zf%h}ylY0vxjوCgUTmO։ràATs<}N*#6Vwn0.ӱHԸFۙ}&zD31 *"e ׊+M𚀡7503E,AoCtW}[෯6<buiBhŎg} B)vFޞ⹓/K=1ɤ*+">bN\WIe$6 t}s(u~c#DT'Aw=X=pr)&l Hpm{Tt1? Ƃ e[YD8Ih])RWםQ{V۸kG cpplu6hٖ+cn/BHr5BĒ& 5tS ƂdLa㌶nޫlE5[iŠ ᆂ D+aͳm/Y!`%FmЮ\_N=< >a>"Ŀɉoyˮȁ˚;$y}@c% 4cȀ5=l>R%7BΔ̟ۇL>7u%CrKS$Za\)@ ]dD#(ڳ0,wa4Ғ dr$[٫\h&k40u4?b3h{nz}6!>X @sw}Unw .M*SkhuI\Zw lJ*Zg˜ωƱ"@9yq!ҷd h{9035_!/ )pԣT'Ly^]Nhl9=[`U±^*-!*M'gL=.M31{оf|BZ-snlۜHd55{3-9qO @Y؁R)ZײZwNTif-X9Z p&sK=~>({ߖ;e"GF˜ ӺIW|y]*T'vY pu%(P292c;P\88- ,}WAr/P0hкwqHhQ3*!4~:G#$k)ayz#J kbnFyES!3]@Q_gBhvb_!f4QYh7틬7"g f Wm[S} XRȢgxAֺR«,mY[$&oc.i#PNivqwC8aODhoA;TgMe= xm'Ԡ:2 Z$J*HzsWgG+?O&CB쵿1ӱWK}Rýf\}yB.inswC;]D<K\X ԝH+B G# $B@:*b/ۗm?d.\?P4ޭz Xo9p48TSWme~qŠ+2;fUHn{=q?pJPtDX,+Tt%Aq᐀_9)u?x4,sN?CT٤_DŽ_W7@+ {V8">urcqիpBWpC|Ityi<|OU w\nIvqGxU#qo்$I|-/k]!>B i.â`O_pJӌ! r7Ybb| %Paa&fgm9T){=C_w鳣ĂJKTkP|]_Yuá00í"KYO)a 4wOajnD3}?8,890s\ R]G.`FVc_ bY ou%Ur8=,spcDh}u2+%Hp$r=6y}9njBN93zTi_uHv v逐'j,V4yxyE]2@Chy}e4EyleR!2?^?Ԡ)bGTPP^8.tc lF1ՠl<#?) jd py1MD%?W5VO_ϰk1068jyHH(h*<ӖYXVS./IZl[=z/. =Fw-#H4vk$b;?̛sXmJ*X6-X(b]iժQmRЕϯClfN ]e@J"kzs#\#^0bmmei(4uvz]VeeMs eN*5N&_[J>l1IĻeL[D~ucKWNZáٶ\I&`_]@6J}{1 M:J/Pu`HϽU9(,Pt*gI%kz E#_ SJn@[8rP*IwJ'IN\@M8=V37 q¢sfn76n~py4 -zk_eY9?e4V|>f[#҆e4އ Z]C4.jlm9J@s 'u x_lJn ^SާJZdML1"́o#n G'͟wʨ\+ zD3 )N ̙"uyJrnMy6$i׏qڑc lO,n%[q^gBa  -Wx-qHC59:h.վy ayksاQẹ'ʟ sN dJD E HљZ],ۧnR dY/(&ʑI/ciRai!,F,PXI 5xLϪT8ӫS·˝TW^Os]]2y6c]fkߥ㋔-}xNwUX=l!kPH87?sV R~7*{4RrƶǖdmoRĆ#7c%mt!I\h H8{XBGW,۴Xm2;,\Oj5!VNrU 7u.) 30i"]*OV5hKuH4OYȤWN{Π9qZ` F xᯞ$Uv3gγ~ru `c>T ]ot{Q{I}7oB :082rUjS;/Bow<`  Exd%GjǃUmasmyÉ/祝g/X9,ylP2 5ۄMT4E-UWڿ8#GF| g>po0xA?8mQ.@yO1X0ɸ[K|1ɋ|;߳镗ת& LJ g M7 ll%wSƯQx=A `lDJ7%,γ'[MtF-f?db݋H{uӣ>) G c Ѱk ǣ{$` BE=' 2Lz?*\d~H5TﳐC?[^NNs}Lѓ&Vz&X]\/ugh<XA4ešZ:yܔvն޷fHīRV`AsALR6ꠒx&'gR}(`^Qnfz%dx_9e4PĨR)+ǨonZ62!Ie*Bprɓ^7j3wBė8hJ_hӿ>,T'֐up!>ኦ#c]f**$Ҕpy}sT5 x뮍4/;;#H kGS>aVfo&-Vywʄ!aIgp7RerӶ{F 7))1_b72±wBV.^ZE~ H7G?cm\*p .d9°'ZLr8"M}/sNizd ,".i;"XtpZ$^L~> GH7!Fkꆌ<{i;p\=a\:>,"Yjj~䉸>x]@JP}@ ȗg^du^b##X.LJ5;2 X$ḻ$_/[c/90LuC^1@أߒ#"Mi\ijY&w~Nf~3u)Fſ ޘe@[ę\%Qil3~e)q Pau'(F>`{mYGӧbYFͪQQ1i50~s.J66>ը ')ȥE/ߌ|Cxm'[٭w `| @cz4cQ`7Z kjO^jTJCB?:I.Fe c&SW|IfgB$l:yƈpM/!Hۇ X0ǺFf^2ݴ ESZ!-عWYH!r >ETEz2:QA5vЪ|2f娪} [81H=z,vrз%5;oFOc.S֫N+!gOcMm3Ei0&kĒH$m ܸ?6v2/47q5U2CȾfoెz )`<~ THsdH=a eYӅLս݀zN~/י*29 ó g1l-7# c$AN%H2qiﰇlF,u3:-@"}ԤmS@fFkA$p>sQM T$uP ֋_dL#ݫ"w=d oŮ)bLnd+ ,y-F ] p1n38-^ 2bF$,,мc!pU}Q72Qi$atåd`* /s~{Gi^U;_LɑAk ) 7]NxE!l4%3d [")XnncdfmdgGOH:CrǝǟIEeL6vv;FMXcI" %P@:itpɀJj 7B]xam[В}lvNٔ~9>*`#'-J^ A?8|ތsc'^r-(mD" I` NK6$ڳoV@Ȳ Gu}̣3 6LΞoۍL8X C?K YS_P/X層깔\])-1[\([TmHwНo/=-9o% K%G\N֌Wyۊ#8$]zσ6ʟIaDR &jXb'aLϪa txm0!2ɋ "F_J1NQ"ܑfQ7҆'v*\[/!|0VId7L__LP\m:;lOh2IP "V(U{4vL17gN GL#^Q@#eWB o; ƣSIG' TYslgu_&85P^R!J$<*+td_ QYLSͭҡ9LR|)SE!r/@ "!z&>JnZc2j#Wq#ddbtڅ;I{@uN dٳXcs{)M.ت5j<=Z l`P0#[{+;NJ/< !5XXN:!|J^Dlj'NXutGTA`̋H @8XܩD!R#ʒC͆1|J 9d;26D=G*Q)͟`ĀB2磨 #e\l/q`}cF}ܝy aЪS`w* [/WMrTw\S&\MMg!*GDRzK`aT LJ`'+_2B ϫ!&uk8=`_.J ٯ~jtQm9L wP Q=?Dz7摘J E,Kt[Yy9V@fLD&'-(@xm>E3w8XkTcQ8? M5cly#;¨ uQIv{kyCϑGe"׬}vn4Ȗ$o|% _j)4t+OKTv8G¹j׃*P=#7jz-;Y. ^qtcMw٦Xȴ:rӾ7Le EIŇ9!Rx"Nm V~@tii~{"bKw4pE #;:^iRIJC`8/CeXȥu-FGYb1GM̳< 3-zR5ޓ avt?QL׬q@DO[7?d Jm|%,n6OK<gHۋn$,4X jve6Jl U\ފGc֪U SDX  9#`\$6;wQzl 6~~+.ut/v'EVvYYd`i}jB Df|c8["ũ zEbLVdVN ,eՐQ7ͩBj/f_u 2&z_?`4H7PUX&8w/F۪q,SY9*!pg4 u nc BAU(%=d l|.MeD" @l Noa<F MoH8}k0>@g]A hR zZ֦_U:B+P|EfPEغ}bm+r Xnm&q)K}vh7qp3wJRKXs%5MMK̝lg;}$-޵.tcX1>g*){!Uȫ>dK$Ǵ)%ܫ!GV&1?GnXەoApd?3GP9Px Z ٯjorܮʾc-LUMʹDJhJ2YOK%*3"M r-_^]bV Yט}R$f„+ 'i yAዹr`4rƥ#3 ?@4;4 8R)U_dBxhDu1?[*3$*_1J_<.O/ nBAmj;9L?;N]TiZZ{inꈍ4-q` Dlk&km~րXZbE-§iiTPUVL) Y b{b2t\G(ݪLzѥiADĽ-A-+0BV@yUC G-*]O1w|}KzySxzyإԏ7 Ӑ;GvK̤&L MJz:» Zr?x as{h?|Ӳ:'Ppڢ7]fml6}:j Prn%ק=3ܘ !Gdw =|};l2]/M >Sngsԁo$t Ɛe`_¦q'" H9+0Qz#FnԠG/Em5i:[36(PPۉ8)2f+;ͦ 2o@AE r :z*j "aMJ|LAnIiuxO$~mwֻY.(ꆄǵ' :3-~PuG~d9A>d!J*pZ&5ˍBtڔ%RO~;^U3(A]%rqnP]Zg(udGQ$-gu,T@+Fwr`H*$ F:z6)D0bq|Us1̻3N : ۣ\:} 3$ZO2 %7< Y W}1r (U>+0g[dl,Oc0)1is!hD`-0 ѾX?#IY+yp36:ݼ\ Y+0㜤_m/!E@3 5[^Es͠MzH+ %Hlx*:=m (I DFdS ,krI_ '9Gw^O*yZa* bw{\Yr>uG}Ֆ<%rYy12e38ٻEKcP}8IFCq~62PZSB)R/p4{:JJXw>5:.ߢ v^Ge D&-F ܢ8 aK;Jn ζjVϞslm0S^?7rI e&]l;ӇӇbiͅ ^F&. YMỪJ4]f`3YS-9ӯR66&Cm(PB}e?-ۼlMG1eC+2!U\j7 {mq?TuYK[䋯@EXY?_.XS:0W*@cYq͹w|V!J40LZ֬fSﰐJ;#+3GdK ex߲a=7}4M6. #!`jW x@Q8.9 7bA-.ǿ_P$uVEV+r;*yQZu#,lQ~*SaI}a q Ư'rۑz]A{J[,%VBC—Y6!vsq'JצUO"w>|B=h)Y̏[HZx>'F!j*rq\ ~&_P`ҏVn+d@/]難|"̹ `tPϸMg؆ILB.^S? m9n`T͐CD -kZB`޶>9⻨ʶw֝g*0 *Q PfTY+-)!?Ep ĦDp/٨R ؟5瓳9>oHyxmn/O nP]`Zi#k¿{~zeB1ҵ*5:yU~er$qQ;cq6) #q]ci=A^J,V ȔB=թO尡|:'+K˚०2<(MO.Q㶐X .7D91/)Z-`hn`餈;,M`[j}cR ă'&\gnхOܑ@3ԆHVHw(A~Hl ɔ+Ro\vGp_Vb4]"i^uNG>>~8doOBM2~6|u !e4kEusnS@*nѕo9:I2TPh'I !1˸Bu^˪C721Y.P>{)&StvmpIQr7-}P,xr}Ywݛ@SM|$k ȉ,%E'A`R K,6C@3^9c=| 9%?=t })b^d1Ɖt[Qf<]!kIP಩vG&ZhVZ H.vҞ4՚~"XnlZYڃM qNaRݟ]nV.k+rm{"&|* Jnʂ}1^W'~4 -ʞ,1dGb*E4!tThkq~EJ<)Q |B_CXck:uRF"QqvmBu))5S/ĺR(j#ϤiZ qȜ6IWofd<B,؅ ȇ~)ñ3MIh5P<~8"We\mgDtP"KSIJ@EbJ l.fpQ#ɣ+ټYhMM݀(E{ w`L!aU(b5sП-P'+.ڰv} @Ţ5FM}ӾUm $ۣ5QL$Z08 457\ )Z @E4"vIM4.j<26l&.[g]A>> L'LJT[&qzAeXY&a鑿1;8A{HXg,26SaLq%䞞}=NvR">2kdt!Õ|=cYu,3A) |nuwC};G3oTx Xr8PA[5 j`v!<qh2=,kp/bTIq6 IH`GXӘ>Dg5k忹)jPLC/'e6oBGG|kw g&= lJ̅U"&‚r{YKɌ+fUJ8벇 I)+1D\jL]ǾGcu*bo&v?'- -OwkdYEpɝ~/6de“NѤ5%?&ۘgHIJD^J´y 23ˑ/ʕʀdj@2cQҐˑ4'KoVjV5iKA]%)c:S k>rN!CR0% ;|s-׾f4[-x0qA4gbUlY0 YU3Ate庠(jN * p&vLPSԳ& !54R RZk AS^ V(KuyN#{@G!{Pʠ];I}gy](D[P^-m]>'oڽN](yR5)h4r-d-T?61? Vcgm᷍lNJ=g:wzJE SV^U/d꿬-Z ]JtRet!čЊPAB.æ֨H3#(X!OɁM@탰l6BѾ0(dLIՃPd,uI+e,C6̵a5d[OW$NiPZ: h Ơ_Gjq279 Qވ'"?Ab/a9ޗglwjS.WK8ũH!W궿SvfՑ1YBNIvodJB ?Yg$&`\CN뭼,Ņ"h9 η0`@T\p{@`8 = :(WiG֨G.܄dnKHhG'B-LZaB'/9?ϯ( _t4v*¥6Фq'#h_Tq:#.Yס mvذqËm'hYj'//^9 JvУ bnt]LWJS<ޜ) ΃"I:rGUBo]xȱx@'EŒ=a%ᭊk+"v@۰vi1qMs`8)9]S YHBC(8FkVYȎ=~)5 _Z |> jӑ*U(<G Ho7.ɖTi=_0ja8\ J%xIҌ}lBLCy]y2P"_ ٸ^0'0?/&'Հc3L @J)$f'US [ڍ𐤡!GG")wPQ+ќ'sd 5 ÇR]RwϙJ1P+1fS<թ2r>![35RoP~v_OV&M#x`58VU<]ٍ"n\J~yflB5A;BRiu&^wEZOx[l< yYznaCY yPj.mR,+v*o]p6& _iR=oDszeRJw$ڹ.L-!%ӗMk' ;=B6D;ZS.9 z׵NOfqęźu9P{\rGPN=g eJǞ,> tC$$hF;˅@p51y|1/~\:U`YaΊ z7> :xnFcĮ3 8CꚚRsy$C3& l&/>!Zt az<'8ބjJi {-;|Ŷqz]-F֘朹34_DK+4lZ۽ JsuHH s\D)KGܸc#gu׶ٍZhJЏOj8,]=%A'ʼnaח@55|9.r0>KMNTScB-)}(Q޾5;GWqjVbd0P- Nz7vk1}H/Y|ɃYz)]o[޾e57Z*4;܋c݁0۳H]9^jVF~+虴鵲M-_v;`m~|ndGF%ܨKp`&bJԧiû9~ &xMMTV9q$ V?,+d~\Z8x/<}45 ֫ib9?I1mc)ߞ%or4lA% 1KǔGԏϩ$ q8oV~wFUACXm)& @865ǦNPĽ} *y{8! _0I86bOɀ=$2i;-JלoQ?7;t>Qz W/0=5r$"p)փ{;U!,G)4IqM+-/jpXSNVDⱳ̌?"6F:-u"Ēe(ˆF 勛r=zt~tJ(A烩ĉuS,=7W3 i?ymoi9wdy@^_9ⷵ{ 6wD<*d#Z 螥m)y,|OΌfVBp{Zu#3 Yz0{!2z̴<fh*g$=N-bscӤkn/*# @ lX5Zn`}mY>ׂWY߉xuSfWiӵ߀t[5F@cp_@(ΓӋ&jB>(rJ'ѠF(s-=@ݝ)@0w'[w@zA0zavo^jVD^_ ?JcOrYa)+1Ds]t ^W3 N | ĞrKFg%HI ef4. ėA[OUfqm\AvL hD sf\d Awa%H%TXaW835]ɍQsweq,|F*n1re("vՇVPL<~I3nd6PG`n3Sz`}Ҟր{Jspx&B쀽$乡S2@LnkԌc̷&h8J&$"߬ ~})c߾~Dǩ[~;Ht_,9Լ?4Je ERq.du1?jm{jW%X"V7JE9Ǹxg2yQL?H0i`=ၦBX[؄p !Uz8/C͊+*[4{&M 8 iguՂ/<f'/zY`nJ»#=z!(`AhO.Q8GGz4Q,\#y2RM4_fsL6YOtf:%O}i%km2hEd_|/sd2 dE}h~c'bz ill1A{5ŒJR{E5|-Ӟ٧mpsu@9^rg%E]g0, T6xp*^]DDwX`SZvJl|&_v[g4 fXN2nKn< #Y!KN?mQ3xڕҺf$[SGZr ޘH/->Ι[P߾ŊWX'.[c2h>B^]I1 D(]9 v=X? XD9p!<^H˿+vx%n1A~.MPҘ\ɤ7Ng@ڋIF"J=V9xb rssV']h7 L=FlX&yj]a[}|`mܟ k̏XsȜtIFYlelX7bdh(tHRmͤl~K Jm“spEhp_th4\ NSA 0Ǿɢ+[sHl+Fu(_o(ˠZ}KK5- [閅unhW[MO[/JTFɁrS@g(2&h> )AOQ4d۾޷_v& N#^؃8о@4L \ϢbJ6nF¨rjXX=k1).4{j& /\BidΑi|H+9S[mMmiPg[/[_rhVPŖIxmb z*"^ BZ >$ݴ"TƁVS_h")4Vڎ YFB}Jj! T4zG:rarҜ#yc4 Aj>SpWy2~7/ttJ-྆U&/|*\<El2$YGENz~Ŋx͙w%G9JDjO$RmsP+Lc"d'%M\ ] 3M&E[go0bH^'q}8c,V^'X;cp@,Ur.3tnW u gyQ!̒[NPA~Cq+A߰ {׸&S(i. ,߭ mR{|L4$I3MSyJ6whY[Ix;/oJTPuV8;ܴD:j{x:_#Yi˟Npl>PρG=@BrE@ Mؐ 6)­.N-\uc29=ֵrպ{L9H)%ğ_sN;)gPW0EHIi T{ GdBeaభ˅CIgT*+)!Jsr|\sYtT _ܞ7dŒmŌøb,>paKEY!U _lNI! %2a-N7PP w6"'e|`4ȡ|>SF{T~-aꢭDj@e d,zO>v4?wH!X[IA@^aTMa,@ WEZDWs+AH/]F N+`if*+|VVPv,pp1>ԃpWapRkf94L° ]Ydf|Lr3-r:ZdgzNJY/T+W  +SS!K-Y=Ժ* V/lʹTOo`nN :ƬX$pNl:1K>uS<2c*uRHߤP`IzNU'O|rqgn# pL w$ʐz / *u{Nt syڭN8tK@ǩdso1#V/B*)urMy62?pgb"@𭜌|fرt7IAZ69㔰m?_9RNiVYͧULwq ʭI>V+ /*%pJ|;R!''.>qhST p+PNVlRf⃳ H©Yr2p>wxFR?:r%p|^cLH060ZFxhI|}B mJ9 #?Y#$ܯPܫGeZU>vRϽlhYƗ% ->r#rsP3o' )bPiiœ( uer7Sٿ&} t/oŴb/w9%HYxfQzbrךhfwô~*qS. y l]J# ( r aOnq74NmG բ[>0kמ2ﾌ @J,Jʓ)|(\61HbaOT~VCS`h c-^uOSĩ6ƞD^ⲕeK|7oRPS 7>lD\u7(o ջAGwrQ`Gt5wtA łu4PEa l1=5OAk1E"bUr+|C:ί`&pkM\&I*A%E/4xB O=46@y@^*od7xd_yӷ3օ@=]&|Lo4eu.O BjfB; va{A]@mRӬL %"0Jz< \BR^' Ηܚ!i5~D_h$y]sM-K:b]/CD_Emd͓pd1WំUTWPmTt^Vvk`ѕ7V`~_R><] ~xMwVq.9z1{\>VطX&Iv褢)\m*UqHCNh@DڽFG4N_w죄C>pHMМ{&" غ뫓qKK <2mmDpVG#I{ZSS.4}BIxU$Kcl,3le߉B;YQPm..8)$ޝb!LeLЃQt7 G$@̏Z;tI S4O oO[84FP9oL$pT%8LJNY#Jx޸@Re][` `0e8Qhp*4Rl>FWtI!/n(wv$ZM_4h>b߿HVRЕtsZSHp#{ iE;w%/5I$g2Ӊ#QrWzJfQm9_/k 9+n"uhMqb[=.=WZQWaGY|Eiy [yJL^jh1Hŗ@VC′TȚǼ"KS:R){om|[7u A+D!ĽF +z%mYc6TVORxzzSALY y0 Eį#c@|µ6/9P WѻLsgu ;So7`b紷ki uv+}E>9S6DU o27!wF4]raQ]]&g1.u8aPU$s}VSu|Q/Z )t1%zx?TC~&4{hV. >?wi\Ws/6S%&j3OƆx=b?u"aEb2?:ƖןDœe򯑚[<"b-?0s3EY.Wz: IaoŘ,y\U[#/.(/;1Ջ z^p=d1]ˎ%e͖I/k<ѩD3>r6&_U6j= R˅4Wߊ=5zZzX!"d>du5.re}anSj<~acz/ *lF6sr峑P$)Zݪ[nUP~G9,PfCIޏX2+Se;Gς#BjVɰ<1Oۡnenj ݲ\^!oe R^ibJC=ټ|g;9v&䷈Q| ;b4<TaD 쀨JbCx- E6.Y!qЕ?ynioYJ4V|mn4=;|=}; tv@ PЕ_N7,(e"o{+0\d*~2wƪ7J' ˎAlHdg{Cg _Ԓ#2l-ADɗgubx*b@ vl׻ R"+j&^=Bw_yhϋ]1SZeYn8}y+FeeGϤ@6ģxXıT+ZǍe*Z_"l"p]1s4j񋳓s"'%Ym%_8d &޿toCd sDo0[&E7 G5b?&'*2ٵm [tfpt;Dl|)MJgv}!CkFWË+=ӷ?zT#e b_#qKCuuHgy߮k_#sAUsŵd$-9ʩ"-;E9[2c~aM.!?-qL':V!Hb2`T♀%wC|04?!*|KSb؋P0J_s=MeU㟈3 $1O+j|ɮOv/: j-6:jqӴY34I'[oqВ031㥲<-]aȆ0Go<;\H3{=qgh*0vJmɉzyylIYVLEҐΓwPx5TZ /n`u&[^'8r>DpaP_kF׬ղ#iۣ8eQ~M_U"&%!8 XiAVKǜe,6%9J>O2? kό =su'+[pWQ%!-T?#%V]]Loflz/=T.fḙ%LiM &0e{y͡(57AKKe-;tpuZ~FC߾ƒiPC^ŋ"\%0T9wJ^_/\` ʵUQ9ФMu4bO(<*g* ]Uۊz11` }_eOׇ963= hAEԎ3'y\ф fwZ`#U gu:Npy8%()f~)^E1lxZC]]\Z= i[& fLw7ȯX Qg5Izb;ꣿ)G gre6?.T@8/jj6^eNYZc~’xB,"dhƁKt*a*;!8wWF㖛ƛr+I;Q҇̕S？ .>r'zY,nr&R$3Uww8(<$2T?`{<ͭեR193+}&i=j™y3c ÃSۑ$f(:3n wIDו(tmZWֆwGͽ|ׄu}"ܜNcWC6j|?10/C1').As7RDheMq˝Utb7/XS/ s}Ӕ|ٵfFg*~S3]/ְw~0aophQ::\l%Se:S' D~~ufo8PcntNOݔ;ֵ"V ^llUou[`S=d bv&m. u8sXl >f9N鍌ɬlb_AE03CS7eүޞ]W4nԄ!UD''Bc@X@ѿ]ȲEכb;d-g?T1ZY씻c[/Y6R'QPx|Ǭl_,UУ܊beR')Y:J_IV~` *˾ ]J[{diR  U{u!Q?@xT4z66Yl` QEZp1ۙ?C2n@7j{IɟDOPi D'kE[5'v~R,j41P 1gU⣞&Y?E 42}ׁ aNbЉ$uUM I Iqwr3p9FR @ =bM/(/<8:cI.alYV[p׫kv/ʪt"o _;Ʌ.449+!1h/$~~ /8+jCK`# Ȇ &1<ۂ)K0nюNHMqHWd*˽p/fC_GA2g^`S:!D3ieKg޻vj[FA'Gu>vUeǡL4-Hc" (6 :n``tҡN-^%f~kaN/`{Y%_ܱqkZڮ4kNS~*ۏ7A%N~3|<8z4}S޳9pet 6E6u*%WyГ m4C:[c`?U@1XFp5kt͢a}9qL5;YZ/׀E3M Y^_iPre0~g1ǰ@ܶlI /3zT4S#mIvDld=;45q]׿lG2em(tZ3ّ"`-IDV+WBi H9J;a>9Ӌvp<8}Yɷb8>M䞘$c]!F63eT;/ZE5[gc_8v&T:34fBXFK#4X77\N(OA ѹ]pM>%?.>26dghϰO^(U`vҰS<1na !9!+ހkS)V/7AǿI 6_|넯|\WqwؐO|0hq"T3IJsrn~^X9ӶTj:UB~+$H;7.p8E;⫱%Pv܋׎F,#+z܀G2.㺏ZI:/\j+X(l@Md_t^{C~̒1*FUj-&5jBTJTy|>__m߃!wQ! c%[TKf4xf5V!\w.}Y $0áN3r Q"9vA' @ˆ"k%Pmv a߼VԆe8inMcdW1r<eY'''vh79p˓Q*@5v83}|Sלr\oʵp&Nfq#KI@hܤLϝU=V_}7XHR 9;ñorC`%;!%,gx"8e^L9V >b _\`j5h睩NGR\Xjs8NtdxJ_ S#βw-M 1݇wu(N!./D+|$6p/2AXO]&Qcˮy}pO8`\kbuEZ nTh3ueSjFHͻW2Enim$swכp'QSǕ 5R]L7"*:cFDޓ\s-$;Ii;}OPն1!HCZ#K0ƛH o638a;#E)RIIIf)Dž;@_C3w(6^х~x;@vb^dϱL^"<eY}|H(S,cCcv0 Hwm>qjҝ6s{~hlQF<SH3"U \ JϢ UKYNu+HL7ֻ} ^V@k.oJjՆ32_#-,#81D}|| T~ݓS'Y,ԟK`$]x\1;n}6أT3&%DL[eHS& 93G/hJQCNHB 7Yv9=@_ύzg W`/ "f#@fg3ڬi Ғ:ۏT̤&I/=~k$EnBlP/ģ}Y*geQE;n 5ܭ(πuq3>?K] !+[/6B(*(q폖;֫+t2'Aδ^bRqLyStP '5gЍGO5IRK+ͼ\ƉVVy)<}u*QApp\Åg-e(B|ZO{ JY ]= 8bpAP1;x#|昝e5[!;Sma/;UIj z.#tdlբwtahĵ3Z$PYNTB L(&,v~tהJ/ ң 8)Rf wv!Q+ *i7F6mh'|fW*()P% (nE9h+b?nosLZ%_tܸl͡ʏp4u )( DE9j-Ü\)ԌM L_\RDUhP)o.HnRoG -.Y J;ɋCXA Cxzu)KS A.sa E9;g>oDJ Gm87x!܍ʙпbtWVE^?BbN%v\VD슣~-e7gאr\m.r-G^ %ۮKƌ*W^: ^e%Mc3 Sui0$gDkx+1Y]cb5쫹)|_89vSzvjvZ 7͟;6*~Б͞FyXrk8n"sm׳<41R'K%j*b"@]՝ÈvoŒ5Ci~5k|n9*F5T%˞wq"{ ĴZ͎۳[o-/c:v%!@rbNq0˾,ĕLcs9YF x3#lN# `BsN$,!aR<6W∅0foN%>^xi_tкc@*f5׉,hӛkv`!D~ *n?20 WoPш}&$)Laq̄m 0P%g.$e%|9EdIRXѸ |lwn:EGR7?{|oכ*{gQmK9Ic!:R9yGG.YhΚuiS!S($ ,-K#bmh)rK@?!ڨ5RV8@vQcJ6b9Rmͮ\WW쵆vq.ZfcĄm4+9 _ ZpفAfl+a\|Ar8?nB4"?}@P mZ]]!\ )kyȍl3"l#[m|*sMm>_3(CT^7tMdAOfoh,Gnfr3˄ddh! *n=f/u|*76`{G\Pi IL%s9,K3^|$1'SӖALX? 5kc]e$=Tq~izAYt+cǀ䔺3HZ7H%H|uJ:Ώy/[_}\aMj&'ƹjh* elʷ H6wq&i6W{,cߜgʦz/u8NȔPI":lGo*E\YRf]Ȯ 0a#EhI`5Y:H mqYJ\>O6fyүGm{`QJFѤ[hʂBzmw5Ac2(hrqgȌU&=\t޼=QC]Ȼ;ƳRM1DxgR|5WPk~)>~bD/{ ;Wz5W\cIRդȃImX0U~䂓ⵧhĝi*יAe2C8QEUĚי.1t}^](Qù%Ʃ?H%kn=X~'@)`'r>tLfN<-'.f@R;M{e J{(̰ecpVhcK[FۉnKn}YYJ=>9pd1ewgP)N{+t;Úϔ2՚@̆ħ cךg <δړ RV' w!7qtL9BW>]aK+ Ya 6N; \v92 K(yg"~lcOL'rOA4L$PIKtܱ(H.]tް-^䐛7k?D:Cl'C{8/FMMӦI9w;RcnڡIZzne1b9HK!uqfQu,X><}<>+]RG[Lv*r3ܟuF7\idv6Rh*3!TriM!? ìD V{f 5*V!'h˃}BgfWG!g]q{Kj5)7AV &2ּ\ÈvQI]y@_o@u?9KϕaȖYRc7r nO1NCNI$RO Qkf7X]v^T}abC%XKq}юtfsr7XqB(g^#jM<8Gu֡.M>wg*!lP&CDJ8{w /+4o6D^%6k Y,vՓ<&?R*}z#Y=zǼu,}O<3p%$s c.5kV.&)\8Ŗ.g vkzHNOXk8y{e eB+j8}_JL_ʑk`PUmB[?h(mݯa?|#,g8܎J Ad_Px;0].,{+VGKWMh.$aтwS-&ii&'$/8i:iUb`Vr!q}9OEft|oٜ cA,zd5L;2z;fӺvY2Ss\Y/& AihYcqJcpr-#60O~ T͏M̂6S:&V1&ӔŠ\E{:xF [n`u,Pkа$~W2xGF}bn 6宄(Ћ%fCtI χT(4" T+F X0sZ43ycoX'!Fh)~2hȔ!\.ٕ w=X N[RQhq@6'<1fMVrB;}v4]`ۥ,eS-:&cT?ֿ?kA#Lsꆭ5|`|+ݡ#3puQ w<C_Æ?Wn} zmˇ$16U#h3)3&/'P۹DϦIfoOfKT5B*k D$%}Mނt7P"S^AW RkK$55> '&܏+޶';P_r^ _ya6&uB`A\/a | '(a$nLź۸,?A@0Ҿ, \ ^e\)&w&h2:׸yWԛjNP8 rQqgGpfv1|$Ef|Ur/~TPaS5E]LpX?,Ag>_<`u)H%7%Lps5Ő갅[HTFeQdϥIk%±Y]8mʚ"P)~pѮP<{Βi?q)|VEbE0:v2Fcmtɍ:S!;$0PQbt ?AmLl꫃Pey e@`U?u݉Ԇ(lxSPg`GoҜTp״hoEy=y"e]+D[q0w,s(5ߑORd+4Ipn_Q ]} uNRA=`(ʎ|p6V ϲC蔫xI+2br 'i*d`Ӣ򲍠}Q1=դl,ˡtC~,zV|X0*+,R`pјG+T7onU#t>SE"PTlSM|)dJd]5_!ت殊]j>_. LJ-7J[&M%ru, aI$@ߵcv0_=nq @9P16l%aqa3:dS_3ϊ'xLr1+k[Of;#^gRBGķ[F6RODX 8䖈5٤@\CetT umDeWϢSJQ] ߳ۀ2 *!ڏd T:``[ L5A=_dr?$Csk[U=ۂ๐/)Q`o3)cE~-LEF1vS(3}vr? jۛ #}W+a?XdF|y268}WnjP,"TTpրXOf0ؒ{dOc^Sn#adiM45eC;M|CgUe_-+ovQ2B3.-2ۭ8t;z_HFWk"i6Qܓ&*JA|M^`^s-~ٺgR|vtUc:""1d]9`pb:8 =XG b ̳cJ" c2uC~iXJbsʙc]MTY3 (i@M;֐,U+ZΦ ) )b,`NEouXJ)F!(D28\TՊ>k6~Y\R} h#&R8Q1PϚ0PGdTFCq(tN$MH;CS:Ҙʹc-٫- < @һS&UeP;nR{[v:E~bM Vk߾J%н9fDG%{ .sA_05Gm qx R~_D)N/O_Yxxq}/]NҪx>G%ۗށF􇫨vHgNB0xu]2 lR؜Α@s,CIhcosnjɏ  LkGvPХJS&<>[LfvQL/ H6~2J_K5dK%6|?;LlcokW#mqN4#*z'Hn0h$ Gq*,u/# ^Z)&SC}xIa_Jy";YKXPk-2 AzFí` mDX(8Yq}fϸ?'=$<{:`p{DQ0!FUE_ 6^~16aNSl;O:ϨvF9RxHW1$LZP}50`ceaG%?~i> Ag*3?oX'Liկ/h+ &†s@;U 4ak圙%25k1նu/!D(Al#x{I&#EgDcbO=f/@)_t]o`,g蕐3CzFP 'p8^?KߛNR rt4׋Pf^pgtO|"qtqq&m%5~G #3F-4i@A4#GbX`'vz!w0iSqe`Q~'JLC<=s%f*vr%=հ jgs/(x@)yY6Fذ6F &(`HvHDtnZR‰&>'ˎRiH8vU4kᰈdRͯSveqK{,.̆ɨJ\W w:aLe}ٳƆ0:&L]o:/a+ vY94Fny!ixIމI`DP;krXZW/v$g˛gr|6eW\H4>ℂl^>ّ*EXӽ޿/Xyݞ@wg&ƫ04f^CdrSG~`b8L ~ɢ;}-r|(2ݢLab rxot7QDPi/"NO*{XP`tGt/S(ƟwG wQ?LL~u9i^ϕp=[4^,A?MLWIAz4}g7?;h,&\&Y&IeH+tZA~ ԜaP`Dc#gFƦKhOETa:9NB~\V9$fN2Aht"=Xav&F 1⯁7b zfA8N̿RR7OZ"u`ǥ|B/'&?vCY$HfL?@^33Rhw䍤L rK!$􏚊.p}-#KEy+Ҳ -p%P?&R}ū*Pka]?LTҒ;M]W5|0yLjeN~(1Hs?*@c|B\$9QŗU, a ۉx,g5 Mf*Rg ɷqs(b㖂nvp+}2p㎕i5Z ]v%Cw\ƧW/XQBR7\+eZ.G?&,8琉Ҧ":pVM{gr#f_dX: m pZ626Y 2RNY@EAd6HdCp"EB\vx;%ɜ3 L-Ր+c ,e˭X+v"E͝bӧLvR/ w#qyYtФ9wp?ќn4G?\@}^\n IBew͚n!_ʸ_Κ1P]+~ՍcȽ4m-J"r 3«L?K0\\ܦFvpm!?[-}E*ɵg 24ǰS-JsV0x=r ի; LJGv1 jA,{6.θ݄M;n_TW$C&uO9]٢\ Rgw&B6lf߲aR pd.^xЀy䤨W_Obmc%DLm@&MwR QU[3;P#H%j3077y S2(];?QKh/W'T@'cG(!7 k~#\do up/QkPj:Q&R|@k8MB Q(դ5T ݞX4^c`nͥ} s/1f0]tݨU\pb#&[?>r鳟]]T!\Gybrȇu}`F[H'Uz &L.0nLI_ѤIjRaXB\ .9>5ĝǍ|ǂ1E;45XCbZ R +!\u(H\ɺD)!ӯ3BӀXv*m;*@2~.f6k]:]+JUND͈T1rBRUz^+-0q7*Pg^.W4*wR+w&: 6`A@Kt?#HӀ47;Ńd. #nQ^Ul  <8A?&5!|m( }a#Iɻ^O(9D¨|x߾_8T7'K1*.d Cb}itK /8 n"mp; bDh񿷿 mڔ.Z0{q 6 -g(u?IM)XR(X \AZrM]ae"Th`Y$D%lVnX<ʑր%)5ԞBpޥ& qk|BK& x4Rw࿤7h0I~Teދ 3L,/ǃD=5/ڔb@oԩ3B< rS;2Ši y]d=+x XS2@@g( 5\ X>}Y^HpO LnBIŁցHv^T <ԯDV<8Zl//%q_~9i{RWo@P2wbc6?F߹zpHvȫQ`%ˇnNˍk_'q0(+ρ 3AdoDQMUrdEvby6q$9",mB;`!i$: 9t{"ZR`'S:by0I©en2>+3 o#QXZ黯/$^7kGO enۥ301M-7kq'X>Yhsggv1]”([bM9r[v`j7Jw/S)?6_3m;u"|\^_a5"f$_aӇE`;pKq 2Dpђ *\tX_t Vwo=c\ o.UM2z/ e8>V}.\]*Wlɒ]}Ldq"%(^Lw$'ҕk ==p 1%>w\&@7npDmo׿ B&qނpڃHIZTE%.ub\LKH3MZI˪ &_Q2a7cs!-aމKtz$#eoISy*{B+J)tͩichYoi7i=6̋}5,_h&va Wr_|=w%46!)i=yU|\,*Sɮ]"䈸>Mfn:D =U+Jnf,( ldʾ-l\A+H:4´}xnrzsW3wS"b*tA ;G0:h8W#nkJGgZ6ޭMx %hCioj ~:k [~Z9gl 莪a ՛ h)<.X޲"rb 5m]"NKzCŐ`B`VPMU<>Ef*/MQX"M1cmUMyCW,@QNwXTN>ٖ04ۅu}s`nn ZD'81fW~*c\WQơubln){T]32&m]@|:gYGRåq9gDqPvg + h%H,oD<̘៞"'S>pa7J:HCӦ`6"/Jv7?ߜ/_8W%}Pbn[IquCBU)߈󅌮f?糘v]V/wxA`woN ݛKyi*;lz:,~z 祩kml JߠjN;B[%yYQs|{Ƥs9Q0+`rG B;LP:V&0miM9{q>[<q Fo+a5|4=յ}[*H_~PU1V=jn^>p.'1ݮv)q归b`wvˊ"b? .Nr> >]ӧ(l/(U@ՊI4lzBgH׿I>HpY<+s zoWy9UNA^RıyCyƩ oͿBUUt ABtC8wҠZ#>Mݭ}p *)9hXb\}9(ҠC=K?蓣;GXpf| #>z0g>$ Nm,ZzUV=01? Y &ut#p8? űrāy#*e OC[ۯ!.@)9~{唶/.Dp~i6V .ɭEoG@/ΤFksfQ40pfڰE l,wݕ'{ipryӸ9Z `'#h[^E6x Mmdq6$b;M*bd*e.P@̻ 8Yq|ɏ*~)qɸ8^xTn,I_k$G@"T|MqsJ&{Nx h#CXfNca5fy\sURN$WE=n].>=B,m&$@~N[ԙ-ġͱꅔ` Yj *;Xǔ`'LI>t#7g S Dni,Ck @ I1h҈]8tTh6#}gf 1m5Zo`eh"jxAVr8@RJA. eV^7hKN/%-wXa3~.ݼj\C 8&>g c"0N gTS[]MͪzE > 0v*Km52'?}޳5`0P/)תּe҄@~8q9'wC5PAX2kC9LҬb-`L3mBEq}%'av;` 9z_jȓ.*DpS8&B:)9mcCڅ܁Wd/>x˷Kx+ܦj="=p*[ocԽ Ƌ_~jTs|븢mEJlmlj;Itn41(]̗GI!#3(uD?B1-8ilѠ}(V0]\f7+s 6a=F鞭f+uʯXG$he )\f;p)A+p '?^U "@"jܔЌxv|ejazf3mp )bxh[tt}"=TMs#Y+:{o9;{-3S(glR{a|ڂ GS(<'A?GBc,щV fbt|;@S&4& _^*H6⊆ "XLeXJ+y7 \ 7Qr1pD ޙpCGm 1ʮ߬)=Ds}9]l)Lϴ{X(\:Z'ĵ8(80LuHkZ}Ve+Z d@@ +FUe ܣ #BWwK|`VH=``n? $Da$t/QgŻX_"]-aH0K[<^a3S隸` ajtJqRJ {$203a/BAs~Q~E/ (Ll (㴎~~@(,z`W6F|-V (⣌B@Ҳ@.l"lOAS*& *F W8%;b!'F e,{KuWξ$« gy oRO<*!:Qry_="C~TRm EgWPsӢe O^J_Y֕?eQ?gd̶ǔ-J *TpBS ~h;VPr ӰjڃV'giy@<ڣN\AtYG9%[dzbCc6'm .LA1p FsZeΌW%V8H88b/6 +XFfZlx7U4i6r5D2d?~[x*[@C-w^Uh,zw+/ JdV }lK!vct/:FpE44?@q T~{jĉ`Z=MjCBE_Q]f*-xJ1%+%HĂmsHi&sFagGGY7E7]g>,J@Løk+8+ƍ̈́ެ˷Вq ͖J5ſ:YlgS@|hBfx+G釼L'l*j=Cb5Ԍߴ>h.og*~al@~& ^ɕ,>JWcrEI Wd%&1ݏ:ZrݥibF/{t{e l:5+$W#B!tȹ:@[Ϟa?21Tc` 1#Z?¡mz)>G۔T.zh⴦` e؉Pn\lȀПIHűD&w*S#{@ko@$k LFX2 E {-Ne&`c'`BK\ijr7Pۘ#vhAuNK}B19_RARm*7CYjߜy]rrS$ޯbsx&-7<4lUtn7t WSBDлY|6ʍs>!VRè4UW, EnF³rmifU,1: $tF`JN:/JdF{0,bp6ujlY#S)P\Fet{p3WG0y ӥQu33ߡm` [œ]U!{.ݰX}f~Kd B7,9j@҈ TB\.=_F08coHH;lꂻIҵTo" CILSn6MңaV:g)WG|0 Sue6Jم9Y>=܎ GV,Px&Cq\:6Lֻ6OM m[-Z G3QHZ*xnIߐю4_3^^TQ;%KUtvW7"yG >M'/k|e'Aȱ8/q*p}yT[q~iKm- F]w(P_˨i"k`nZ/ss`bѻ('>%poOSʆzLT&lT . tAڃhC`d"f}}{JفJO'=g/SfF@z@t\a2(I#*Ʉ{#ƻ(GKil oiiܴ섥4ң1 sd!p]n`-[ B eKc Bش1okFvEq7kIzf4qj!R΍7t7ӵD ׁ£eqVޜ>#*"j" zYIQ[IBdϢi!Zgr!zj7:?ݛkm2O*/Q#~otvdvƱ뽦xaJG0ǬEi8=S$vǂ#C1v,RFlԩjn703Egye''cn΢8$k!2{{b'—P.{TݺvRz#_:Cy764ޏY{jyfqai݀0 ߳*V9@?M9,EM+u5';j|>P. ٌ'ysDLIJ1 ih5;U[}$Hspi;,[j㧈I͆J/VKbWYńb:$mXrMu9R$”65eXQ`-"y@}y.Y[(6S=ãojq{V (b̊4ƄM&BS/|_ǥzY#Mj nz `M+nl53c ̮"a#On'Q] n.mVqF?@Oe.z@\@@j91Ze)VV>=1E9 _0)YpN =Wɨ@O)bd ݡ/rHZ]Y^)eW1{  rMNO3UJu n4²*.(I0,PorQTغʡCW6}KhwuZsx^5lsfly<YPa^ko~sz10yel8]:BŎzċobn5|!fyn+܈En5M2,f`H.=WƠߣÕ[7&H}4~J)҆_dǘe;q7_} 4&hV!I>>gם g>A:⩄QIϏJ+ϩÁɞzвFTh{;BYRypqA9`eI*x$wJ<27 ;[z󨩥dV_՗HlNZE?;Afp13jxYDphT fZbm)3laQ]|oF$bmg?Ӭ:.oPwEV#=zqv15a0m粲 GW/.QHqDET>1#Yʵ5}v|F)3WYE(p)O7 \Y,( e֙Ucf/=xMJhuBCP d%g4:7?c1jL HDA"x 8Q;$؊ ;>Sd6^^2r@W{4KR,6\r}]36,׆,"Sj7;*_,9uHpٕ۞?xvv`S($ X. u Y-+/[8pU/d88P/Vј7ՈHdK)I[ӊe$ 1̣S**Ԝn .sQ"/ 60Cvt9޸7vA2cGM",i;j 3ÕxñOhs/Kv&xl(L*HMь%DIm q D 9k<|Rχ7ǐCJMUJ^ORMg{Դ9ד=4k&&.og>/&ZcX{Ԍ&Sqd*1_f!9fjRP:Q)o$&:ʨPŌ߄}/R2\n*s:3OD`a?~𨁘dsu7o6V޲|90lpV՛7:ûDB8ъMSe`AwmPksiN3B1˕+;z%駖kQ1HӠ%FZjTy |f ,`Y ȞSΛ>[dY4Z׿O؄Axaqn{3-ZDڪ}ŗ3H%;~Ϳ[@dD^=G#R-]יb(]$H}TE_&__=j-<}J$΄3^R_UgH#.qrE f .͔wJSI.>>(z\{%N5-!@<9X ƅ 0mDke=dR?k5TxyF$egQĕ2֚xTP} }\i,I]M5߽G&o B D& ra tdk$qˋ()t8s'/p8j7!{+:BݢQdF:g_1T|([:-q)BL=lI V-5mLL겘 9OXԚCqANyR&{edd)oqX⭯߬x!i-CbiVzY/m*RB"=_DBjn[@d/WV&`rzlj# H?Z)Rp |}qdP~Aa`#^z[pҾ_"Iz%.Y{/Wv>4Ln~uoI>||.qcnG+zQӋEſ>| )!پ}oz°G#rAq᪳KnJxv#Jo-D@y9[w .&KPOŌT>VpfĬGy=˄Mg?"tMuYd]zRF(U;_:w, 5Ϥ_#lcL^z u\">Xxɺ plWdTA6WM(5cG\ #5υ+\V 1?xXSiaͮϸ!%GSآ l=6s{>X0JI.)ݣwx'uby=G6N 7\t[-;p4qfsT.6Z>b3_ǯ"4{*H'?3%L:;Ҫ{=QJSS$U_%%9MڨӿBP4 ڑ"l>-3¼(ڃwT= aK _w^&Gt~mlXĽ'DEU?XyކtD+:@:dth4DݟHo|Mˑzgnȉb i%nW [au^O' u 3LkCy$ʋ.ϝb˲m˄`hV-d#FF;6l<J@RH2lCB;̭?dkɳcE+5?_e3Vc/oT9Uڥ\ˋ'–6T{G1V|^M(K?0R/ ^^t)N bRB6ׂ*%u+!E20:nUQBilj:F ['L~ZTV%.~Jg3`S ,{X|ߎS4we:RV:Y%9}Tom'rP -Ȁ+^<`3lZs#>1.bp?oA<>uz:f/zmyz 8ֆ8"&,̤TܷbiH ĝQN,iqxjZτ*!GK}qm˃b5v=5t;rDzJŰPX;]F vRc!X* 4F(%jnXW?}xX[ķF >v'J,d=Uiꣾs*@8?0"cϰ_S}R}ѬWOI #`3Oa.O) e7~O0nWaD?}a<-r_P%zp7. =/ x #*wE4FfX]`c'}'.n2gM۶,m݌dj۬)+0bS_4Cm16 +k:׹}Ga 4)iCT;B.XyIt'6@G[IuJPK8CFHǁ;.m&pE O,׍O)ofF4Hl%8BT3T)|IO7(RۣP6d?t cB}3T[me^@(_Gѹ G3a)$TEv{\I%, ֢etN6:F0 @xX߮$ȻsenAVaQQ6μ8 {h9;z>.^^&汱DYc 6^6V ݪڥ wߚ{᠆_ *7j`8Hᲂ1h(ytĀDTK~ 0ЌРGf9]H=1;V=;Bga~ԖHԲ\_Z,ѪQ@BѡC0,_O>`$r69؋. ܲBیښ:^ƻ7z>NqJ}xWvfhZ+kbQY1[ֿikGOcmय़j=a l< >uʼY#yѳIYDE"g:_Ϸ4GD]n,_W<ƒ9b[d Z=e1 {cn#)uœ⨳˃Ƽy jTLٗ9'V£0-S=Q0_"E<մK)7 H͏Vv]b.EҾYBV@Y߆AwuporOceUР e8GԵGζqagv* dȊwNS_HQ< ON,-A*K6'4꯴+CӁ uE2;Ɔ鱛[S-FMtΠW}JLچɧYYmwE'u *6GU q:-y˩ƕDһ b[ˑejT3g7hEՇ=cPg'?s|GE:F*9qg:&@m6=ݽ}E}/la'(߈\!dأI66sj+`3@3&)@EDM7PCD*[6il\1M%aO.X#~0~tPғJ ZAgo|ZJس;BV(_G Oo}.?j5.?hFw~,0\3tVX$6#o|:kJKY*T-y/VaCcf~A>%D(aE1@rZjӡq&5e ‹I&31ߵp2zMcU:;քA"黿b_u6Q؍\V |g)Xa2sc}_$# N͋! 4%P#Gz+5|R)ݖOs\c~PeiZY52E֑s>UVӯ~HF7e_M`)'bIsZ@gq!E F"[?/}y/AʉTG~tc?WZtЮsR[:!*bE:uR"P* 2]pu5A^W5aaDLe,C؂~j7]۫6\GGE5dt + .*?~X2vF#B|ϘcoRq8)N0GH z~RֆEYIxb^궲1+!Yawرe@u$$"'"ǩhPf^4"SOZyP|f0uT1Cte|bYV֗3d!C 6aI $9"XJ^YuK !싽&bD?[3S= EpV1_xIE-KVў JW.Yp}'7NY.֮ ^=LugJ'4D''~ G%"6M V^ΞgZV oi=@mj,M׸ԺZ*frHNș}%Z-n=InkP/4'  D1gfp-X:` dDYP⩺cBK <{ uqw:JǢ-Y[t Jq,؋+*:I:FR7 ۠lxS*bsLi~J ZϸɃYՄZJӣgs{em C!TW)&`?jSa):~$!皰/[^un&3 ~IV!((Z5'rqMMT#d@=KaL4 f!{1sP<*\tjw9r4.==NINHAoY@ 8't<QBQB qaa7=LIcRwVLÿh;^JXrF…H! lgt%O{xhbf/^dn"_$~9z2͙aĄ>I[a Js5-0{{vI<-F'&vR bnkxxt Hp &pVz8d9ڬL9UsP5j@9!Iv?#4P2RFfa_at ~{^S0|5UWzND#>;Gm0&S2|"xk7b4z:qznS,] !Ĵ_uC%O6\%㪑5mW7Hd0 -A83r=͟2MA'LYqNM)-L'fapn\)ɲv_ U/"Э2V, uB g*ɴxaʯ@]0ƒp?]$\wGý>_ȫhN $T)LsAşN:b -nA|+Dk6 PEcYj }JYe5Yq{ \GVOt"R`ԭZ>VYT=M:"BMxw{\oEi Fgc㴌;2;u#g볎VDmBj&+_$#w)K׆ nCQˊ3&X!McWe$^ｪQ7hRor5@=˓*ϳ8ȖAFuW?dc1_Gy#IA6 jS'ˀ="Gj5:M27Fa'DΣ*^mHz.#M"i-YKh%Ⱦ0}cWuB".,)b^X8Cv8P4Y&OCɜ_P|Uk6 1j>L Ov눑3^ɿ ؉&4˻=AZ?Ron & hq.0Q Y D<{2E*Dܼ{ܠ5CRmOSS11?;ؗ}+P2EwCɚj.P1]gKM8 oHՈ)+ĜЙu8M IHEv)G,)N#?C7dy]nW/W!lUCPEt}q5uzLQ^ @q$;ޒ >ج$%h ZH?XϠs>ZpJAH:mpÁ8H>N\)MWџ3ӻYL]sFCB`:^_S^gmVDR;J  X& P R|eXVaj6:M 2! CQzHKꓴ{ [IL7FM;TF{~+XؖUO:Af|?|P~[1E 3՛Z4›oBA?ޖ] LIOB=G'o M/Դ[񰀟$êsch+#gل0g0yV-sR5O¿9N[¤ ڵ2+TbCSU;hKly} ׺ԫ7#4gsBؕ*q`ƠÄZB6rhh :mä劭Hg>=4RA*B]7npSXФ$&xU-ilػO1E5 ,̿\Kw ^&O wj»}KA<D`\zMKsKkZ$'׷梈'&|q+BEa9de-{Vg%M9i d[W -=(\l/yy72֎Ll /a 3U<>JVoSDܯZϛkRϗR5n(IkqR] rNf_@?hqLGH|f iw4?!Y s1 |LW9Adl빱p .Xr+JùL8~-E)W MRՄ^QpY>pFRZ%4~`[&h@$HJ݁įeRhӁ+3$7-g;N ?y'lŔ\c<۳. L؞_ n %bt";.ƭWaѾ 76^YsDRw#$"am}߬>O=f:߱(DB?΅1o<E :A14t0銀ӇaGd :CNn̘'Ǥoo"gBSqnsc9O.9Rŗ"”uMLbOfC_]P[8hw<ʸU>΀ccDח?: f|uCcxjm}.~,9jWY_j޴XWN[Go3alޫ-}i#4t6aNhjynw%smZ8gד Wx,܋)VW74*~['aܭ(p[2]69lL1LJ@A(UeolLJkݝM1/'XfUB[ j1.hG@ӓWxȪ38|i);E+ĸZِ _y/%}n 7i,|# d[9Mym:Ʃ[*$#_RbZTzb$q 'Z;78p՝>3yN)]֡ݳ:VE2!&E$b x }7͑쯬)sBpuPBHuw}p xT(/-}`?2BtLC=dGX?:{pawjߘ{wX2W5m胝 xt:58yF֎mG7_b2aFfy̌JuQ$XϺm*WeN&0FOS5q[cDt4xtQ\uE[jJh@_cZiv* d%ڢ[AS-ݦS.I*ދTL!Fs]e5*|_1a"0wŌ/66/t%ͣu%XfbqszѻU;kkF<R!qwɘw-Cq%phJ?pomEnƬy1wQl2}=GA*UrYFR3mлDad{"| 8lk[#a3=zCE [ufK#SZ z@4J1-weqy8bԆ]o)_8@~pZy[\2iWIN `1Ǚe'A\.wS5E4p`%?>\b'g nw1RIE/W YWMcw,%Ί:AQ={DP!I2nMoH kk?4 ;%1X8D45&A#)`6X<X ^Hi\.AK i$woQo֯LXQάZE H׻Cͪ%F'O\s  >U+$^M}ˡPxo>?6N4H̷SpFc;A+R&x#lt?xKvQ$\tYVT /S :X *"Zy#9TwѢλ!e[{ >n]2ұQC{uO~(ē$α[: _%%HmZ+6LvGVj8y)#=صbFS#INn/⽋x;[9޶EOuQRo0^$i:]|@{tUey%1㕠OI. 灃wa^(ʿL0eMtxn<(`K18RqGѐ}ipR/9~|NMVX/dDU n{L3*2v[1qR˘ q[L._:Q;F F7qQREwXq\X9CT8y/hP!Dtzpe}2M1[i^T 0&}ڄ0˄Z)75Hw_pA &Wy?V!< Wyp]d( [>e5IFHB U iv;ӫqV-ɶy>si o~ z(.jmY5'|Sƞ(eNV8oF1c?&w{ѭydՎ3+%+&֬K|9?·^? J#1JZ& j&! /LJVSoXGw>-ɇ _?te?+SB}Q?b&1*b8yaXF;Ыcj[ǀRYaZC;ID^ ,FJ3x3HcN?9wqQP PM/\(B>"#_R:F+aoI0!C>ج봰V EH6ziSj3|1VOoE\;ɯcfB[+G@ 9̏ E IUt kC˻Hf p(DN~}z¾oaMMh3[Fpk7:iL. XDu:E)OHww6q<d`3"1M2h$* 8DKUcxbgh.QG ˂s,=C[#˽SKK˟sCuNOz̑[5x6Qz qWqnB( :Oskv׾}h\eoNT][Ⱥ!jn9+gǶ4=ٯ`0rEx6EKh B>u_mODZx|9+?Cj|d/P^[Lej-BcaWO:F~1y&q摨*#]iD?Nl]-Uo^ׅ*9(*2\> 7fK~j f;̪;_M~eqIKm!*A To/([F?u6C\4VuiI;Ch>v> ~x,%x3Bk|¾8hŢ_emFtR@u:͋'.Qt,,.<" 4-;kXN44em@kk|s.a٪4Fn;$iV>(qkk fh5G|ig@mpEǼ{ ѯCA\>Cr3DrnW6p%iB[n~\&~E kgm&; {X|T{Lp9>|UtG|ZT ]X 4. `CPJG^d 6][kd)_@~9+$uYc{ba=3tg܎#]l{)-}kbR ƵMZ'\lul4*=-@E{oS5L[=Bu: uv錡HWw8rhĩ)cGDLbL G_ASy@7qcݻZ}c}~7zQgY%k?5uqG~etw0{puyFzi~2] #j^ҮǗ?\[MOmp#_X-OxTMڧVDCf)cvX0 k8$*H'U3qHs93˃c9R%W/RG 3m|z[Ι~5ݻ TJq~[WWx 8cL$4Y=gᙅUL39%}~@"Ku&ic4,cPfThW7o{:ɻUzF OIlt&{}EX_rjd,iN#s= "M\Bn; 2k/̰.*`G ҷPT!`0!X!ڊȎdٔ\If:*'\} o^l 8 ?QY:{#O` m (i";Ș%5Cj$+UC.l-JyFhڋ)i3峫֑(xhtd<ַ2seDP;v׊F@%TY KAKdb qZ-k#e1c I|XP_Y@U@XOҔEkxtUn2aPHn PV{Ĭˡ""Wྯ/2d! 0([ܚ 4UEI NY|6}KlK]-w{VDi$53w_a(7-F8?[v%񮺋 ($!,I a6/f] ߊ !tZM2VdJsm~@5N'm\8Ԅ=M[gyu<,+zq 7%6b:wj=u^O/l90-8ȧ65SAOMUL'{mȇKWG^+B獏,!~[HoׯLK;6b1\:B'J~q.{t}L}+U*S 6,%5"T.c@C^lچd֢Gũܝ3ka y{`ö)h0i߈Dp<7N# 9OYۅx9+4vtTa=X+&%k:dk# zΦ/;o3̸u ÚӅ0դ#Qi8Ɂwq+ٜ_\PlT%~XBDYH 3OHNE[Yx^Oa2]8GꮜE4bC|Gi. Wq^bsEv1 wNTLD#: )4f!0È9wRqh8Źr԰rcM}I1R8gB- #l&ncD+洐t;9A`940n ƍ1R/flP҄:z-+MY\4`bU ;乫ZN8{B1F}-2K ;vPe/@TšXZ],#~YʐJ*7 S c=UQn-]s˃JG ?-"!8gIT=#wVq`_yZZlQ͕L{UCN?&:{UA>voY)×PFp`wlK'[H?N n,sI4"z;$fg*4q-.X zjjPjr\]򋇙=:̯}w|&A¸B 3nDnE;mhָ>V<=?'#싻d9wz2!!gH|Ӟ{Z{k'Ցr,O$7(>,yZ6 TqMxA!y~ȶ`! g*LGTP3ןH2 :RÖIk؂0DK;cxJ1l5dW8݃Urt|,Fk |,.d0O \-2D]4Mes똄cew.FWnu|+/h]8jp9/сZwcj-Q㱆dS%f&*k P~2Ɠob(^Ҭ > NK2qcݙ~.FFȨ[뷀%)\%\usa'9y&kX8L02_n@ؗ"v\{%oD?*NW A6Ub.9BR]x&cg#g?&Ċ,")knܜ w>HJڟX8j GB1ՂUږ@jCT|\W*'禌@h#FIo!Z-"& 1{Z$?T@cyD"K lV2]KAt,o}ٗ_=pjl;$㮿r2"y-3| qduDB-_<@ECa +ZT,G8&utFK+e(=t>1?\CEUcG!9 AA2uuzl1;\cL?'D+TARGg9ec_i⪱;sR%o۰uϑFOhuQ؆IŸO; ԷnhXߋT2oc#b}ݜ3#6aW䙑/r+ҦsZHfz ٽqH ÕY8+l\ RHiX`6$6CCt&=#W!~~A~:u !n_tؾ'l8`FJ`C#>5I n{!(TMC5~ޟ`x K.T3_ũRtH'20@e]ـPmVˈ:]aTADi"m+,*hhg}Q$e"@_+,aݘ_A%92+8(*u}fsl@Ge&p[9R\/ťZ oP}`իbW8\3ݟv /tT‘'uY9 HWXaB -Mw Z_u2%s>*S?>Xe/<lG7 .\C) >3#C/uKEA K\e_A+Y[MRgĦq](M6FXB(LY}Bz{p6,.вt-0yS멜<Z}P~1t}j8ܞY]od_z\HnIY>[ YJWBzk^+ER #U}({>/`k*~'1!,#LlpJ B} ,(;!8[mOhvR~.qAʸ)Rb?p9xV2'FqOgU_N䅹C-cj{W1!M3DdE t'7.IY@5J UuAF9{ =,}ه0CyȆK/K)qeFba졇{/s EUx\ь; 4kll US0}AWr!s͛@ jW2nxsА&cbD 6Le:iڷ(^۞jXmi}G|8nk:#R  $Y>R* P7Uf`OS6\bPE) 4B<o=cjAcDډ1s.gƂf0oSͅ|<3=DGh)JdW O }%BX651 \#l\{3]6oEL%f8xtqd16@OX!3J PQ)[迃=c skG[36rM/wl'TG-eVX1أ)fNZ L³t M5JgrS|$2JY1/5x*z8krzKF:' B%)Q%ihz LkIɎFQ睁R{i2Taԑg YZ