389-ds-base-devel-1.3.2.23-1.fc20.scripts.2760T>D ,0@0be45c67eaa4ace55d3fed47d13b7deeee39fe55wTzJ phTpFeA>6q?qd 1 `  L  b  x        / f  4  (O8X9 :7Gm Hm In( Xn4Yn@\n ]n ^oBbodpepfplptp up vqwqX xq yqqC389-ds-base-devel1.3.2.231.fc20.scripts.2760Development libraries for 389 Directory ServerDevelopment Libraries and headers for the 389 Directory Server base package.VmXcats-whiskers.mit.edu:GPLv2 with exceptionsDevelopment/Librarieshttp://port389.org/linuxx86_64~;&FLmA큤A큤VmLVmLVmLVmLVmLVmLVmXSKYSKYSKYVmec51525fa4867b9c3758938a6d25eba2f0d457243d4d4ffef63bfbe98c8f3a5d003da7fb7b297612fd39cff2f963319d682923e3308508cb1534fc09e2a80e0cf139758542057b6568fbc96bb9b553d12cc9fd248f6eca1919c0f602209881ed25ba8688f33749c547e35830c481ba72e7311c155ee2a9c2681818649b164f7b18c4bed873d4b37ca369819056cf9cbef47021eee1e9bfea01e8bb6b2779705d2edbdd4febc24cda9b14c335dd2ddfc2e07ec19a362a7e7b222afa69f6674f42a76f3347f8e2221d9b6550078ac57a0a2c4e8b1da6ce1a1a8aacab93be7e8e2397a6a0413ce3664e192dff12a29bc3f690c24e8a0d48d986478c56cdfe370c3blibslapd.so.0.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroot389-ds-base-1.3.2.23-1.fc20.scripts.2760.src.rpm389-ds-base-devel389-ds-base-devel(x86-64)pkgconfig(dirsrv)@@    /usr/bin/pkg-config389-ds-base-libslibslapd.so.0()(64bit)nspr-develnss-developenldap-develpkgconfigrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)svrcore-develrpmlib(PayloadIsXz)1.3.2.23-1.fc20.scripts.27603.0.4-14.6.0-14.0-15.2-14.11.3S@SSj@SR@SESS!@S"@S!S@Sz@Sz@S@R'R=R - 1.3.2.23-1Noriko Hosoi - 1.3.2.22-1Noriko Hosoi - 1.3.2.21-1Noriko Hosoi - 1.3.2.20-1Noriko Hosoi - 1.3.2.19-1Noriko Hosoi - 1.3.2.18-1Noriko Hosoi - 1.3.2.17-1Noriko Hosoi - 1.3.2.16-1Noriko Hosoi - 1.3.2.15-1Noriko Hosoi - 1.3.2.14-1Noriko Hosoi - 1.3.2.13-1Noriko Hosoi - 1.3.2.12-1Noriko Hosoi - 1.3.2.11-2Noriko Hosoi - 1.3.2.11-1Noriko Hosoi - 1.3.2.10-1Noriko Hosoi - 1.3.2.9-1Noriko Hosoi - 1.3.2.8-1Mark Reynolds - 1.3.2.7-1Rich Megginson - 1.3.2.6-1Rich Megginson - 1.3.2.5-1Mark Reynolds - 1.3.2.4-1Noriko Hosoi - 1.3.2.3-1Noriko Hosoi - 1.3.2.2-1Noriko Hosoi - 1.3.2.1-1Noriko Hosoi - 1.3.2.0-1Rich Megginson - 1.3.1.11-1Rich Megginson - 1.3.1.10-1Noriko Hosoi - 1.3.1.9-1Rich Megginson - 1.3.1.8-1Noriko Hosoi - 1.3.1.7-1Petr Pisar - 1.3.1.6-1.1Noriko Hosoi - 1.3.1.6-1Noriko Hosoi - 1.3.1.5-1Noriko Hosoi - 1.3.1.4-1Petr Pisar - 1.3.1.3-1.1Noriko Hosoi - 1.3.1.3-1Noriko Hosoi - 1.3.1.2-1Noriko Hosoi - 1.3.1.1-1Noriko Hosoi - 1.3.1.0-1Noriko Hosoi - 1.3.0.5-1Mark Reynolds - 1.3.0.4-1Noriko Hosoi - 1.3.0.3-1Parag Nemade - 1.3.0.2-2Noriko Hosoi - 1.3.0.2-1Noriko Hosoi - 1.3.0.1-1Noriko Hosoi - 1.3.0.0-1Noriko Hosoi - 1.3.0-0.3.rc3Noriko Hosoi - 1.3.0-0.2.rc2Noriko Hosoi - 1.3.0-0.1.rc1Mark Reynolds - 1.3.0.a1-1Rich Megginson - 1.2.11.15-1Rich Megginson - 1.2.11.14-1Rich Megginson - 1.2.11.13-1Rich Megginson - 1.2.11.12-1Mark Reynolds - 1.2.11.11-1Mark Reynolds - 1.2.11.10-1Mark Reynolds - 1.2.11.9-1Mark Reynolds - 1.2.11.8-1Fedora Release Engineering - 1.2.11.7-2.2Petr Pisar - 1.2.11.7-2.1Rich Megginson - 1.2.11.7-2Rich Megginson - 1.2.11.7-1Rich Megginson - 1.2.11.6-1Rich Megginson - 1.2.11.5-2Rich Megginson - 1.2.11.5-1Petr Pisar - 1.2.11.4-1.1Rich Megginson - 1.2.11.4-1Rich Megginson - 1.2.11.3-1Rich Megginson - 1.2.11.2-1Rich Megginson - 1.2.11.1-1Rich Megginson - 1.2.11-0.1.a1Noriko Hosoi - 1.2.10.4-4Noriko Hosoi - 1.2.10.4-3Rich Megginson - 1.2.10.4-2Rich Megginson - 1.2.10.4-1Rich Megginson - 1.2.10.3-1Rich Megginson - 1.2.10.2-1Noriko Hosoi - 1.2.10.1-2Rich Megginson - 1.2.10.1-1Rich Megginson - 1.2.10.0-1Noriko Hosoi - 1.2.10-0.10.rc1.2Petr Pisar - 1.2.10-0.10.rc1.1Rich Megginson - 1.2.10-0.10.rc1Rich Megginson - 1.2.10-0.9.a8Rich Megginson - 1.2.10-0.8.a7Rich Megginson - 1.2.10-0.7.a7Fedora Release Engineering - 1.2.10-0.6.a6.1Rich Megginson - 1.2.10-0.6.a6Rich Megginson - 1.2.10-0.5.a5Rich Megginson - 1.2.10-0.4.a4Rich Megginson - 1.2.10.a3-0.3Rich Megginson - 1.2.10.a2-0.2Rich Megginson - 1.2.10.a1-0.1Rich Megginson - 1.2.9.10-2Rich Megginson - 1.2.9.10-1Rich Megginson - 1.2.9.9-1Rich Megginson - 1.2.9.8-1Rich Megginson - 1.2.9.7-1Rich Megginson - 1.2.9.6-1Rich Megginson - 1.2.9.5-1Rich Megginson - 1.2.9.4-1Rich Megginson - 1.2.9.3-1Rich Megginson - 1.2.9.2-1Rich Megginson - 1.2.9.1-2Rich Megginson - 1.2.9.1-1Petr Sabata - 1.2.9.0-1.2Petr Sabata - 1.2.9.0-1.1Rich Megginson - 1.2.9.0-1Rich Megginson - 1.2.9-0.2.a2Marcela Mašláňová - 1.2.9-0.1.a1.2Marcela Mašláňová - 1.2.9-0.1.a1.1Rich Megginson - 1.2.9-0.1.a1Rich Megginson - 1.2.8.3-1Rich Megginson - 1.2.8.2-1Rich Megginson - 1.2.8.1-1Rich Megginson - 1.2.8.0-1Rich Megginson - 1.2.8-0.10.rc5Rich Megginson - 1.2.8-0.9.rc4Rich Megginson - 1.2.8-0.8.rc2Caolán McNamara - 1.2.8-0.7.rc1Rich Megginson - 1.2.8-0.6.rc1Rich Megginson - 1.2.8-0.5.a3Rich Megginson - 1.2.8-0.4.a3Rich Megginson - 1.2.8-0.3.a3Fedora Release Engineering - 1.2.8-0.2.a2.1Rich Megginson - 1.2.8-0.2.a2Nathan Kinder - 1.2.8-0.1.a1Rich Megginson - 1.2.7.5-1Rich Megginson - 1.2.7.4-2Rich Megginson - 1.2.7.4-1Rich Megginson - 1.2.7.3-1Rich Megginson - 1.2.7.2-1Rich Megginson - 1.2.7.1-2Rich Megginson - 1.2.7.1-1Nathan Kinder - 1.2.7-2Nathan Kinder - 1.2.7-1Rich Megginson - 1.2.7-0.6.a5Rich Megginson - 1.2.7-0.5.a4Rich Megginson - 1.2.7-0.4.a3Rich Megginson - 1.2.7-0.3.a3Rich Megginson - 1.2.7-0.2.a2Rich Megginson - 1.2.7-0.1.a1Rich Megginson - 1.2.6.1-3Rich Megginson - 1.2.6.1-2Rich Megginson - 1.2.6.1-1Rich Megginson - 1.2.6-1Rich Megginson - 1.2.6-0.11.rc7Rich Megginson - 1.2.6-0.10.rc6Rich Megginson - 1.2.6-0.9.rc3Rich Megginson - 1.2.6-0.8.rc3Rich Megginson - 1.2.6-0.7.rc2Nathan Kinder - 1.2.6-0.6.rc1Rich Megginson - 1.2.6-0.5.rc1Marcela Maslanova - 1.2.6-0.4.a4.1Rich Megginson - 1.2.6-0.4.a4Nathan Kinder - 1.2.6-0.4.a3Caolán McNamara - 1.2.6-0.3.a2Rich Megginson - 1.2.6-0.2.a2Nathan Kinder - 1.2.6-0.1.a1Rich Megginson - 1.2.5-1Rich Megginson - 1.2.5-0.5.rc4Rich Megginson - 1.2.5-0.4.rc3Rich Megginson - 1.2.5-0.3.rc2Rich Megginson - 1.2.5-0.2.rc1Rich Megginson - 1.2.5-0.1.a1Rich Megginson - 1.2.4-1Rich Megginson - 1.2.3-1Caolán McNamara - 1.2.2-2Rich Megginson - 1.2.2-1Tomas Mraz - 1.2.1-5Noriko Hosoi - 1.2.1-4Rich Megginson - 1.2.1-3Fedora Release Engineering - 1.2.1-2Rich Megginson - 1.2.1-1Rich Megginson - 1.2.0-4Rich Megginson - 1.2.0-3Rich Megginson - 1.2.0-2Rich Megginson - 1.2.0-1Noriko Hosoi - 1.1.3-7Noriko Hosoi - 1.1.3-6Rich Megginson - 1.1.3-5Rich Megginson - 1.1.3-4Rich Megginson - 1.1.3-3Rich Megginson - 1.1.3-2Rich Megginson - 1.1.3-1Rich Megginson - 1.1.2-1Rich Megginson - 1.1.1-2Rich Megginson - 1.1.1-1Rich Megginson - 1.1.0.1-4Tom "spot" Callaway - 1.1.0.1-3Tom "spot" Callaway - 1.1.0.1-3Rich Megginson - 1.1.0.1-2Rich Megginson - 1.1.0.1-1Fedora Release Engineering - 1.1.0-5Rich Megginson - 1.1.0-4Release Engineering - 1.1.0-3Rich Megginson - 1.1.0-2.0Rich Megginson - 1.1.0-1.2Rich Megginson - 1.1.0-1.1Rich Megginson - 1.1.0-0.3.20070720Nathan Kinder - 1.1.0-0.2.20070320Rich Megginson - 1.1.0-0.1.20070320Rich Megginson - 1.1.0-0.1.20070223Rich Megginson - 1.1.0-0.1.20070213Rich Megginson - 1.1.0-1.el4.20070209Rich Megginson - 1.1.0-1.el4.20070207Rich Megginson - 1.1.0-1.el4.20070129Rich Megginson - 1.1.0-8.el4.20070125Rich Megginson - 1.1.0-7.el4.20070125Rich Megginson - 1.1.0-6.el4.20070125Rich Megginson - 1.1.0-5.el4.20070125Rich Megginson - 1.1.0-4.el4.20070119Rich Megginson - 1.1.0-3.el4.20070119Rich Megginson - 1.1.0-2.el4.20070119Rich Megginson - 1.1.0-1.el4.cvs20070119Rich Megginson - 1.1-0.1.cvs20070115Dennis Gilmore - 1.1-0.1.cvs20070108Rich Megginson - 1.0.99-16Rich Megginson - 1.0.99-15Rich Megginson - 1.0.99-14Rich Megginson - 1.0.99-13Rich Megginson - 1.0.99-12Rich Megginson - 1.0.99-11Rich Megginson - 1.0.99-10Rich Megginson - 1.0.99-9Rich Megginson - 1.0.99-8Rich Megginson - 1.0.99-7Rich Megginson - 1.0.99-6Rich Megginson - 1.0.99-5Rich Megginson - 1.0.99-4Rich Megginson - 1.0.99-3Rich Megginson - 1.0.99-2Rich Megginson - 1.0.99-1- Release 1.3.2.23 - Ticket 47871 - 389-ds-base-1.3.2.21-1.fc20 crashed over the weekend - Ticket 47866 - Errors after upgrading related to attribute "dnaremotebindmethod" - Ticket 47816 - v2- internal syncrepl searches are flagged as unindexed - Ticket 47877 - check_and_add_entry fails for changetype: add and existing entry - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. - Ticket 47875 - dirsrv not running with old openldap - Revert "Ticket #47875 - dirsrv not running with old openldap" - Ticket 47875 - dirsrv not running with old openldap - Ticket 47446 - logconv.pl memory continually grows - Ticket 47874 - Performance degradation with scope ONE after some load - Ticket 47872 - Filter AND with only one clause should be optimized - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. - Ticket 47862 - repl-monitor fails to convert "*" to default values - Ticket 47824 - paged results control is not working in some cases when we have a subsuffix. - Ticket 47862 - Repl-monitor.pl ignores the provided connection parameters - Ticket 346 - Fixing memory leaks - Ticket 47753 - Add switch to disable pre-hashed password checking - Ticket 47861 - Certain schema files are not replaced during upgrade - Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server - Ticket 47797 - fix the indentation - Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL - Ticket 47692 - single valued attribute replicated ADD does not work - Ticket 47781 - Server deadlock if online import started while server is under load- Release 1.3.2.21 - Resolves: #1127833 Ticket 47869 - unauthenticated information disclosure (Bug 1123477) 389-ds-base-1.3.2.22 = 389-ds-base-1.3.2.19 + Bug 1127833 fix.- Release 1.3.2.21 - Resolves: #1127833 Ticket 47869 - unauthenticated information disclosure (Bug 1123477) - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. - Ticket 47862 - repl-monitor fails to convert "*" to default values - Ticket 47824 - paged results control is not working in some cases when we have a subsuffix. - Ticket 47862 - Repl-monitor.pl ignores the provided connection parameters - Ticket 346 - Fixing memory leaks- Release 1.3.2.20 - Ticket 47753 - Add switch to disable pre-hashed password checking - Ticket 47861 - Certain schema files are not replaced during upgrade - Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server - Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. - Ticket 47692 - single valued attribute replicated ADD does not work - Ticket 47781 - Server deadlock if online import started while server is under load- Release 1.3.2.19 - Ticket 47779 - Potential deadlock after startup if a dna configuration change is made - Ticket 47839 - 389-ds production segfault: __memcpy_sse2_unaligned...- Release 1.3.2.18 - Ticket 47750 - Creating a glue fails if one above level is a conflict or missing - Ticket 47763 - winsync plugin modify is broken - Ticket 47821 - deref plugin cannot handle complex acis - Ticket 47831 - server restart wipes out index config if there is a default index - Ticket 47817 - The error result text message should be obtained just prior to sending result - Ticket 47815 - Add operations rejected by betxn plugins remain in cache - Ticket 47809 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..." - Ticket 47704 - invalid sizelimits in aci group evaluation - Ticket 47813 - remove "goto bail" from previous commit - Ticket 47813 - managed entry plugin fails to update member pointer on modrdn operation - Ticket 47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed. - Ticket 47770 - #481 breaks possibility to reassemble memberuid list- Release 1.3.2.17 - Ticket 47446 - logconv.pl memory continually grows - Ticket 47713 - Logconv.pl with an empty access log gives lots of errors - Ticket 47806 - Failed deletion of aci: no such attribute - bump version - Ticket 47720 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator. - Ticket 47670 - Aci warnings in error log - Ticket 47721 - Schema Replication Issue (follow up) - Ticket 47721 - Schema Replication Issue (follow up + cleanup) - Ticket 47721 - Schema Replication Issue - Ticket 47676 - (cont.) Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1 - Ticket 47676 - Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1 - Ticket 47541 - Fix Jenkins errors - Ticket 47541 - Replication of the schema may overwrite consumer 'attributetypes' even if consumer definition is a superset - Ticket 47804 - db2bak.pl error with changelogdb - Ticket 47780 - Some VLV search request causes memory leaks - Ticket 47787 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone - Ticket 47764 - Problem with deletion while replicated - Ticket 47750 - Creating a glue fails if one above level is a conflict or missing; Ticket 47696 - Large Searches Hang - Possibly entryrdn related - Ticket 47772 - fix coverity issue - Ticket 47793 - Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled. - Ticket 47792 - database plugins need a way to call betxn plugins - Ticket 47707 - 389 DS Server crashes and dies while handles paged searches from clients - Ticket 47792 - code cleanup - Ticket 47779 - Need to lock server list when removing list - Ticket 47771 - Move parentsdn initialization to avoid crash - Ticket 47779 - Part of DNA shared configuration is deleted after server restart - Ticket 346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values - Ticket 47782 - Parent numbordinate count can be incorrectly updated if an error occurs - Ticket 47772 - empty modify returns LDAP_INVALID_DN_SYNTAX - Ticket 47774 - mem leak in do_search - rawbase not freed upon certain errors - Ticket 47773 - mem leak in do_bind when there is an error - Ticket 47771 - Performing deletes during tombstone purging results in operation errors - Ticket 47767 - Nested tombstones become orphaned after purge - Ticket 47766 - Tombstone purging can crash the server if the backend is stopped/disabled - Ticket 47759 - Crash in replication when server is under write load - Ticket 47740 - Fix coverity issues(part 7) - Ticket 47748 - Simultaneous adding a user and binding as the user could fail in the password policy check - Ticket 47743 - Memory leak with proxy auth control - Ticket 47740 - Crash caused by changes to certmap.c - Ticket 47733 - ds logs many "Operation error fetching Null DN" messages - Ticket 47740 - Fix coverity issues: null deferences - Part 6 - Ticket 47732 - ds logs many "SLAPI_PLUGIN_BE_TXN_POST_DELETE_FN plugin returned error" messages - Ticket 47740 - Coverity issue in 1.3.3 - Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry - Ticket 47740 - Fix coverity issues - Part 5 - Ticket 47740 - Fix coverity erorrs - Part 4 - Ticket 47640 - Fix coverity issues - part 3 - Ticket 47740 - Fix sync plugin resource leaks - Ticket 47538 - RFE: repl-monitor.pl plain text output, cmdline config options - Ticket 47740 - Coverity Fixes (Mark - part 1) - Ticket 47734 - Change made in resolving ticket #346 fails on Debian SPARC64 - Ticket 47722 - Fixed filter not correctly identified - Ticket 47722 - rsearch filter error on any search filter- Release 1.3.2.16 (This release is 1.3.2.13 + Ticket 47739) - Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind- Bump version to 1.3.2.15 - Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry - Ticket 47740 - Coverity issue in 1.3.3 - Ticket 47740 - Fix coverity issues - Part 5 - Ticket 47740 - Fix coverity erorrs - Part 4 - Ticket 47640 - Fix coverity issues - part 3 - Ticket 47740 - Fix sync plugin resource leaks - Ticket 47538 - RFE: repl-monitor.pl plain text output, cmdline config options - Ticket 47740 - Coverity Fixes (Mark - part 1) - Ticket 47734 - Change made in resolving ticket #346 fails on Debian SPARC64 - Ticket 47722 - Fixed filter not correctly identified - Ticket 47722 - rsearch filter error on any search filter- Bump version to 1.3.2.14 - Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind - Ticket 47737 - Under heavy stress, failure of turning a tombstone into glue makes the server hung - Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry - Ticket 47729 - Directory Server crashes if shutdown during a replication initialization - Ticket 47637 - rsa_null_sha should not be enabled by default- Bump version to 1.3.2.13 - The previous version 1.3.2.12 missed to increment the version in VERSION.sh- Bump version to 1.3.2.12 - Ticket 408 - create a normalized dn cache - Ticket 571 - Empty control list causes LDAP protocol error is thrown (dup 47361) - Ticket 408 - create a normalized dn cache - Ticket 47699 - Propagate plugin precedence to all registered function types - Ticket 525 - Replication retry time attributes cannot be added - Ticket 47709 - package issue in 389-ds-base - Ticket 47700 - Unresolved external symbol references break loading of the ACL plugin - Ticket 47642 - Windows Sync group issues - Ticket 525 - Replication retry time attributes cannot be added - Ticket 47692 - single valued attribute replicated ADD does not work - Ticket 47615 - Failed to compile the DS 389 1.3.2.3 version against Berkeley DB 4.2 version - Ticket 47677 - Size returned by slapi_entry_size is not accurate - Ticket 47693 - Environment variables are not passed when DS is started via service- Added arch aware python dir; moved libns-dshttpd.so* to devel and libs package.- Bump version to 1.3.2.11 - Ticket 47653 - Need a way to allow users to create entries assigned to themselves. - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used - Ticket 47374 - flush.pl is not included in perl5 - Ticket 47649 - Server hangs in cos_cache when adding a user entry - Ticket 443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error - Ticket 47638 - Overflow in nsslapd-disk-monitoring-threshold on 32bit platform - Ticket 47641 - 7-bit check plugin not checking MODRDN operation - Ticket 342 - better error message when cache overflows - Ticket 47516 - replication stops with excessive clock skew - Ticket 47620 - Unable to delete protocol timeout attribute - Ticket 408 - Fix crash when disabling/enabling the setting - Ticket 47629 - random crashes related to sync repl - Ticket 47571 - targetattr ACIs ignore subtype - Ticket 47660 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read - Revert "Ticket 47653 - Need a way to allow users to create entries assigned to themselves"- Bump version to 1.3.2.10 - Ticket 447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs - Ticket 47653 - Need a way to allow users to create entries assigned to themselves - Ticket 47647 - remove bogus definition in 60rfc3712.ldif - Ticket 47634 - support AttributeTypeDescription USAGE userApplications distributedOperation dSAOperation - Ticket 47645 - reset stack, op fields to NULL - clean up stacks at shutdown - free unused plugin config entries- Bump version to 1.3.2.9 - Ticket 47621 - v2 make referential integrity configuration more flexible - Ticket 47620 - Fix missing left bracket - Ticket 47620 - Fix dereferenced NULL pointer in agmtlist_modify_callback() - Ticket 47606 - replica init/bulk import errors should be more verbose - Ticket 47631 - objectclass may, must lists skip rest of objectclass once first is found in sup - Ticket 47627 - Fix replication logging - Ticket 47620 - Fix logically dead code. - Ticket 47313 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result - Ticket 47620 - Config value validation improvement - Ticket 47620 - Fix cherry-pick error for 1.3.2 and 1.3.1 - Ticket 47613 - Issues setting allowed mechanisms - Ticket 47617 - allow configuring changelog trim interval - Ticket 47601 - Plugin library path validation prevents intentional loading of out-of-tree modules - Ticket 47627 - changelog iteration should ignore cleaned rids when getting the minCSN - Ticket 47623 - fix memleak caused by 47347 - Ticket 47622 - Automember betxnpreoperation - transaction not aborted when group entry does not exist - Ticket 47623 - fix memleak caused by 47347 - Ticket 47620 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute- Bump version to 1.3.2.8 - Ticket 47612 - ns-slapd eats all the memory - Ticket 47527 - Allow referential integrity suffixes to be configurable - Ticket 47526 - Allow memberof suffixes to be configurable - Ticket 342 - better error message when cache overflows (phase 2) - Ticket 47587 - hard coded limit of 64 masters in agreement and changelog code - Ticket 47611 - Add script to build patched RPMs - Ticket 47614 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms - Ticket 47613 - Impossible to configure nsslapd-allowed-sasl-mechanisms - Ticket 47592 - automember plugin task memory leaks - Ticket 47591 - entries with empty objectclass attribute value can be hidden - Ticket 47596 - attrcrypt fails to find unlocked key- 924ead4 Bump version to 1.3.2.7 - Ticket 47593 - Update plugin API for OTP plugin - Ticket 47599 - fix memory leak in ldbm_back_seq()- Ticket 47599 - Reduce lock scope in retro changelog plug-in - previous fix missing defition of retrocl_cn_lock- Ticket #47605 CVE-2013-4485: DoS due to improper handling of ger attr searches6cdca01 bump version to 1.3.2.4 Ticket 47599 - Reduce lock scope in retro changelog plug-in Ticket 47596 - attrcrypt fails to find unlocked key Ticket 47598 - Convert ldbm_back_seq code to be transaction aware Ticket 47597 - Convert retro changelog plug-in to betxn Ticket 47585 - Replication Failures related to skipped entries due to cleaned rids Ticket 47588 - Compiler warnings building on F19 Ticket 47581 - Winsync plugin segfault during incremental backoff (phase 2) Ticket 47581 - Winsync plugin segfault during incremental backoff Ticket 47577 - crash when removing entries from cache 6b16d30 Revert "Ticket #47559 hung server - related to sasl and initialize"- release 1.3.2.3 - Ticket 47515 - Fedora 20: setup-ds-admin.pl - Ticket 47569 - Fix build warnings - Ticket 47569 - ACIs do not allow attribute subtypes in targetattr keyword - Ticket 47565 - Content Sync update file needs extensibleObject - Ticket 47560 - fixup memberof task does not work: task entry not added - Ticket 47559 - hung server - related to sasl and initialize- release 1.3.2.2 - Ticket 47517 - memory leak in range searches and other various leaks - ticket 47550 - wip (cherry picked from commit 82377636267787be5182457d619d5a0b662d2658) - Ticket 47550 - logconv: failed logins: Use of uninitialized value in numeric comparison at logconv.pl line 949- release 1.3.2.1 - Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/lock - Ticket 47551 - logconv: -V does not produce unindexed search report - Ticket 47490 - Schema replication between DS versions may overwrite newer base schema- release 1.3.2.0 - Ticket 48 - Active Directory has certain uids which are reserved and will cause a Directory Server replica initialization of an AD server to abort. - Ticket 53 - Need to update supported locales - Ticket 54 - locale "nl" not supported by collation plugin - Ticket 77 - [RFE] Add ACI support for ldapi - Ticket 123 - Enhancement request: "whoami" extended operation - Ticket 153 - Schema file parsing overly picky? - Ticket 182 - Pwd retry counters replication not enabled by default, and enabling it could lead to undesired results - Ticket 197 - rhds82 rfe - BDB backend - clear free page files to reduce changelog size - Ticket 205 - rhds81 rfe - snmp counters index strings for multiple network interfaces with ip addr and tcp port pairs - Ticket 208 - [RFE] Roles with explicit scoping in RHDS - Ticket 283 - Expose slapi_eq_* API - Ticket 314 - ChainOnUpdate: "cn=directory manager" can modify userRoot on consumer without changes being chained or replicated. Directory integrity compromised. - Ticket 411 - [RFE] mods optimizer - Ticket 415 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist - Ticket 428 - posix winsync should support ADD user/group entries from DS to AD - Ticket 460 - support multiple subtrees and filters - Ticket 512 - improve performance of vattr code - Ticket 513 - recycle operation pblocks - Ticket 514 - investigate connection locking - Ticket 521 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change - Ticket 564 - Is ldbm_txn_ruv_modify_context still required ? - Ticket 568 - using transaction batchval violates durability - Ticket 569 - examine replication code to reduce amount of stored state information - Ticket 586 - selinux errors with /usr/sbin/setup-ds-admin.pl - Ticket 589 - [RFE] Support RFC 4527 Read Entry Controls - Ticket 601 - multi master replication allows schema violation - Ticket 602 - replication inconsistency if attribute is modified several times in one operaion - Ticket 607 - Replication issue: Entry can diverge betwen servers - Ticket 609 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts. - Ticket 615 - High contention on cos cache lock - Ticket 617 - Possible to add invalid ACI value - Ticket 626 - Possible to add nonexistent target to ACI - Ticket 630 - The backend name provided to bak2db is not validated - Ticket 47306 - execute index_add_mods only for indexed attributes - Ticket 47310 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync - Ticket 47313 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result - Ticket 47314 - Winsync should support range retrieval - Ticket 47316 - Search against 'view' is always reported as unindexed - Ticket 47317 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default - Ticket 47319 - make connection buffer size adjustable - Ticket 47320 - put conn on work_q not poll list if conn has buffered more_data - Ticket 47323 - resurrected entry is not correctly indexed - Ticket 47326 - idl switch does not work - Ticket 47329 - Improve slapi_back_transaction_begin() return code when transactions are not available - Ticket 47331 - Self entry access ACI not working properly - Ticket 47337 - mep_pre_op: Unable to fetch origin entry - Ticket 47340 - Deleting a separator ',' in 7-bit check plugin arguments makes the server fail to start with segfault - Ticket 47350 - Allow search to look up 'in memory RUV' - Ticket 47354 - Indexed search are logged with 'notes=U' in the access logs - Ticket 47358 - backend performance - introduce optimization levels - Ticket 47360 - Delete attribute could crash the server - Ticket 47363 - 7-bit checking is not necessary for userPassword - Ticket 47370 - DS crashes with some 7-bit check plugin configurations - Ticket 47371 - Some updates of "passwordgraceusertime" are useless when updating "userpassword" - Ticket 47372 - make old-idl tunable - Ticket 47381 - nsslapd-db-transaction-batch-val turns to -1 - Ticket 47382 - Add a warning message when a connection hits the max number of threads - Ticket 47384 - Plugin library path validation - Ticket 47387 - improve logconv.pl performance with large access logs - Ticket 47388 - [RFE] Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533 - Ticket 47389 - Non-directory manager can change the individual userPassword's storage scheme - Ticket 47394 - remove-ds.pl should remove /var/lock/dirsrv - Ticket 47400 - MMR stress test with dna enabled causes a deadlock - Ticket 47411 - Replace substring search with plain search in referint plugin - Ticket 47416 - IPA replica's - "SASL encrypted packet length exceeds maximum allowed limit" - Ticket 47423 - 7-bit check plugin does not work for userpassword attribute - Ticket 47425 - should only call windows_update_done if repl agmt type is windows - Ticket 47426 - move compute_idletimeout out of handle_pr_read_ready - Ticket 47433 - With SeLinux, ports can be labelled per range. setup-ds.pl or setup-ds-admin.pl fail to detect already ranged labelled ports - Ticket 47463 - IDL-style can become mismatched during partial restoration - Ticket 47487 - enhance retro changelog - Ticket 47502 - updates to ruv entry are written to retro changelog - Ticket 47504 - idlistscanlimit per index/type/value - Ticket 47505 - get rid of valueset_add_valuearray_ext - Ticket 47520 - Fix various issues with logconv.pl - Ticket 47522 - Password administrators should be able to violate password policy - Ticket 47531 - 1.3.2 with mozldap - need to redo sasl_io_recv - Ticket 47532 - 1.3.2 with mozldap - crashes in new operation work_q - Ticket 47539 - Disabling DNA plug-in throws error 53 - Ticket 47543 - mozldap - fix compiler warnings- Ticket 47513 - Set localrundir outside of the "with-fhs" block - Ticket 47513 - Refine the check for @localrundir@ - Ticket 47510 - remove unnecessary typedef - Ticket 47510 - Repl Sync does not compile against MozLDAP libraries- Ticket #47534 - RUV tombstone search with scope "one" doesn`t work - Ticket 47510 - 389-ds-base does not compile against MozLDAP libraries - Ticket #47523 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch - Ticket 47528 - 389-ds-base built with mozldap can crash from invalid free - Ticket #47504 idlistscanlimit per index/type/value - Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/lock - Ticket #47492 - PassSync removes User must change password flag on the Windows side - Ticket 47509 - CLEANALLRUV doesnt run across all replicas - Ticket #47516 replication stops with excessive clock skew - 6829200 Coverity fix - 11952 - for Ticket 47512 - Ticket 47512 - backend txn plugin fixup tasks should be done in a txn- release 1.3.1.9 - Ticket 449 - Allow macro aci keywords to be case-insensitive - Ticket 47489 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing - Ticket 47507 - automember rebuild task not working as expected- Ticket #47455 - valgrind - value mem leaks, uninit mem usage - fix breakage in slapi-nis introduced with the previous fix - Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly- bump version to 1.3.1.7 - Bug 1002215 - CVE-2013-4283 389-ds-base: ns-slapd crash due to bogus DN - Ticket 47488 - Users from AD sub OU does not sync to IPA - Ticket 47461 - logconv.pl - Use of comma-less variable list is deprecated - Ticket 47473 - setup-ds.pl doesn't lookup the "root" group correctly- Perl 5.18 rebuild- bump version to 1.3.1.6 - Ticket 47455 - valgrind - value mem leaks, uninit mem usage - fix coverity 11915 - dead code - introduced with fix for ticket 346 - fix coverity 11895 - null deref - caused by fix to ticket 47392 - fix compiler warning in posix winsync code for posix_group_del_memberuid_callback - Fix compiler warnings for Ticket 47395 and 47397 - fix compiler warning (cherry picked from commit 904416f4631d842a105851b4a9931ae17822a107) - Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch - fix compiler warnings - Fix compiler warning (cherry picked from commit ec6ebc0b0f085a82041d993ab2450a3922ef5502)- bump version to 1.3.1.5 - Ticket 47456 - delete present values should append values to deleted values - Ticket 47455 - valgrind - value mem leaks, uninit mem usage - Ticket 47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication - Ticket 47440 - Fix runtime errors caused by last patch. - Ticket 47440 - Fix compilation warnings and header files - Ticket 47405 - CVE-2013-2219 ACLs inoperative in some search scenarios - Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D - Ticket 47378 - fix recent compiler warnings - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47449 - deadlock after adding and deleting entries - Ticket 47441 - Disk Monitoring not checking filesystem with logs - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold- bump version to 1.3.1.4 - Ticket 47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negative. - Ticket 47424 - Replication problem with add-delete requests on single-valued attributes - Ticket 47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry - Ticket 47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry - Ticket 47421 - memory leaks in set_krb5_creds - Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute values - Ticket 47369 version2 - provide default syntax plugin - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47399 - RHDS denies MODRDN access if ACI list contains any DENY rule - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47428 - Memory leak in 389-ds-base 1.2.11.15 - Ticket 47392 - ldbm errors when adding/modifying/deleting entries - Ticket 47385 - Disk Monitoring is not triggered as expected. - Ticket 47410 - changelog db deadlocks with DNA and replication- Perl 5.18 rebuild- bump version to 1.3.1.3 - Ticket 47374 - flush.pl is not included in perl5 - Ticket 47391 - deleting and adding userpassword fails to update the password (additional fix) - Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization - Ticket 47395 47397 - v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured - Ticket 47396 - crash on modrdn of tombstone - Ticket 47400 - MMR stress test with dna enabled causes a deadlock - Ticket 47409 - allow setting db deadlock rejection policy - Ticket 47419 - Unhashed userpassword can accidentally get removed from mods - Ticket 47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'- bump version to 1.3.1.2 - Ticket 47391 - deleting and adding userpassword fails to update the password - Coverity Fixes (Part 7)- bump version to 1.3.1.1 - Ticket 402 - nhashed#user#password in entry extension - Ticket 511 - Revision - allow turning off vattr lookup in search entry return - Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate - Ticket 47327 - error syncing group if group member user is not synced - Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback - Ticket 47359 - new ldap connections can block ldaps and ldapi connections - Ticket 47362 - ipa upgrade selinuxusermap data not replicating - Ticket 47375 - flush_ber error sending back start_tls response will deadlock - Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3) - Ticket 47377 - make listen backlog size configurable - Ticket 47378 - fix recent compiler warnings - Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice - Ticket 47385 - DS not shutting down when disk monitoring threshold is reached - Coverity Fixes (part 1) - Coverity Fixes (Part 2) - Coverity Fixes (Part 3) - Coverity Fixes (Part 4) - Coverity Fixes (Part 5)- bump version to 1.3.1.0 - Ticket 332 - Command line perl scripts should attempt most secure connection type first - Ticket 342 - better error message when cache overflows - Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager - Ticket 419 - logconv.pl - improve memory management - Ticket 422 - 389-ds-base - Can't call method "getText" - Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts - Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used - Ticket 487 - Possible to add invalid attribute values to PAM PTA plugin configuration - Ticket 502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen - Ticket 505 - use lock-free access name2asi and oid2asi tables (additional) - Ticket 508 - lock-free access to FrontendConfig structure - Ticket 511 - allow turning off vattr lookup in search entry return - Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time - Ticket 528 - RFE - get rid of instance specific scripts - Ticket 529 - dn normalization must handle multiple space characters in attributes - Ticket 532 - RUV is not getting updated for both Master and consumer - Ticket 533 - only scan for attributes to decrypt if there are encrypted attrs configured - Ticket 534 - RFE: Add SASL mappings fallback - Ticket 537 - Improvement of range search - Ticket 539 - logconv.pl should handle microsecond timing - Ticket 543 - Sorting with attributes in ldapsearch gives incorrect result - Ticket 545 - Segfault during initial LDIF import: str2entry_dupcheck() - Ticket 547 - Incorrect assumption in ndn cache - Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval - Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation - Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration - Ticket 558 - Replication - make timeout for protocol shutdown configurable - Ticket 561 - disable writing unhashed#user#password to changelog - Ticket 563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized. - Ticket 565 - turbo mode and replication - allow disable of turbo mode - Ticket 571 - server does not accept 0 length LDAP Control sequence - Ticket 574 - problems with dbcachesize disk space calculation - Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions - Ticket 585 - Behaviours of "db2ldif -a " and "db2ldif.pl -a " are inconsistent - Ticket 587 - Replication error messages in the DS error logs - Ticket 588 - Create MAN pages for command line scripts - Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control - Ticket 603 - A logic error in str2simple - Ticket 604 - Required attribute not checked during search operation - Ticket 608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message - Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND - Ticket 612 - improve dbgen rdn generation, output - Ticket 613 - ldclt: add timestamp, interval, nozeropad, other improvements - Ticket 616 - High contention on computed attribute lock - Ticket 618 - Crash at shutdown while stopping replica agreements - Ticket 620 - Better logging of error messages for 389-ds-base - Ticket 621 - modify operations without values need to be written to the changelog - Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory - Ticket 631 - Replication: "Incremental update started" status message without consumer initialized - Ticket 633 - allow nsslapd-nagle to be disabled, and also tcp cork - Ticket 47299 - allow cmdline scripts to work with non-root user - Ticket 47302 - get rid of sbindir start/stop/restart slapd scripts - Ticket 47303 - start/stop/restart dirsrv scripts should report and error if no instances - Ticket 47304 - reinitialization of a master with a disabled agreement hangs - Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task) - Ticket 47312 - replace PR_GetFileInfo with PR_GetFileInfo64 - Ticket 47315 - filter option in fixup-memberof requires more clarification - Ticket 47325 - Crash at shutdown on a replica aggrement - Ticket 47330 - changelog db extension / upgrade is obsolete - Ticket 47336 - logconv.pl -m not working for all stats - Ticket 47341 - logconv.pl -m time calculation is wrong - Ticket 47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide - Ticket 47347 - Simple paged results should support async search - Ticket 47348 - add etimes to per second/minute stats - Ticket 47349 - DS instance crashes under a high load- bump version to 1.3.0.5 - Ticket 47308 - unintended information exposure when anonymous access is set to rootdse - Ticket 628 - crash in aci evaluation - Ticket 627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so - Ticket 634 - Deadlock in DNA plug-in Ticket #576 - DNA: use event queue for config update only at the start up - Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC - Ticket 623 - cleanAllRUV task fails to cleanup config upon completion- e53d691 bump version to 1.3.0.4 - Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data - Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled) - Ticket 490 - Slow role performance when using a lot of roles - Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry- bump version to 1.3.0.3 - Ticket #584 - Existence of an entry is not checked when its password is to be deleted - Ticket 562 - Crash when deleting suffix- Rebuild for icu 50- bump version to 1.3.0.2 - Ticket #542 - Cannot dynamically set nsslapd-maxbersize- bump version to 1.3.0.1 - Ticket 556 - Don't overwrite certmap.conf during upgrade- bump version to 1.3.0.0- bump version to 1.3.0.rc3 - Ticket 549 - DNA plugin no longer reports additional info when range is depleted - Ticket 541 - need to set plugin as off in ldif template - Ticket 541 - RootDN Access Control plugin is missing after upgrade- bump version to 1.3.0.rc2 - Trac Ticket #497 - Escaped character cannot be used in the substring search filter - Ticket 509 - lock-free access to be->be_suffixlock - Trac Ticket #522 - betxn: upgrade is not implemented yet- bump version to 1.3.0.rc1 - Ticket #322 - Create DOAP description for the 389 Directory Server project - Trac Ticket #499 - Handling URP results is not corrrect - Ticket 509 - lock-free access to be->be_suffixlock - Ticket 456 - improve entry cache sizing - Trac Ticket #531 - loading an entry from the database should use str2entry_f - Trac Ticket #536 - Clean up compiler warnings for 1.3 - Trac Ticket #531 - loading an entry from the database should use str2entry_fast - Ticket 509 - lock-free access to be->be_suffixlock - Ticket 527 - ns-slapd segfaults if it cannot rename the logs - Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't - Ticket 216 - disable replication agreements - Ticket 518 - dse.ldif is 0 length after server kill or machine kill - Ticket 393 - Change in winSyncInterval does not take immediate effect - Ticket 20 - Allow automember to work on entries that have already been added - Coverity Fixes - Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5 - Ticket 337 - improve CLEANRUV functionality - Fix for ticket 504 - Ticket 394 - modify-delete userpassword - minor fixes for bdb 4.2/4.3 and mozldap - Trac Ticket #276 - Multiple threads simultaneously working on connection's private buffer causes ns-slapd to abort - Fix for ticket 465: cn=monitor showing stats for other db instances - Ticket 507 - use mutex for FrontendConfig lock instead of rwlock - Fix for ticket 510 Avoid creating an attribute just to determine the syntax for a type, look up the syntax directly by type - Coverity defect: Resource leak 13110 - Ticket 517 - crash in DNA if no dnaMagicRegen is specified - Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry - Trac Ticket #519 - Search with a complex filter including range search is slow - Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error - Trac Ticket #311 - IP lookup failing with multiple DNS entries - Trac Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs - Trac Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error - Ticket #503 - Improve AD version in winsync log message - Trac Ticket #190 - Un-resolvable server in replication agreement produces unclear error message - Coverity fixes - Trac Ticket #391 - Slapd crashes when deleting backends while operations are still in progress - Trac Ticket #448 - Possible to set invalid macros in Macro ACIs - Trac Ticket #498 - Cannot abaondon simple paged result search - Coverity defects - Trac Ticket #494 - slapd entered to infinite loop during new index addition - Fixing compiler warnings in the posix-winsync plugin - Coverity defects - Ticket 147 - Internal Password Policy usage very inefficient - Ticket 495 - internalModifiersname not updated by DNA plugin - Revert "Ticket 495 - internalModifiersname not updated by DNA plugin" - Ticket 495 - internalModifiersname not updated by DNA plugin - Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h]) - Ticket 486 - nsslapd-enablePlugin should not be multivalued - Ticket 488 - Doc: DS error log messages with typo - Trac Ticket #451 - Allow db2ldif to be quiet - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes - Ticket #481 - expand nested posix groups - Trac Ticket #455 - Insufficient rights to unhashed#user#password when user deletes his password - Ticket #446 - anonymous limits are being applied to directory managerTicket #28 MOD operations with chained delete/add get back error 53 on backend config Ticket #173 ds-logpipe.py script's man page and script help should be updated for -t option. Ticket #196 RFE: Interpret IPV6 addresses for ACIs, replication, and chaining Ticket #218 RFE - Make RIP working with Replicated Entries Ticket #328 make sure all internal search filters are properly escaped Ticket #329 389-admin build fails on F-18 with new apache Ticket #344 deadlock in replica_write_ruv Ticket #351 use betxn plugins by default Ticket #352 make cos, roles, views betxn aware Ticket #356 logconv.pl - RFE - track bind info Ticket #365 Audit log - clear text password in user changes Ticket #370 Opening merge qualifier CoS entry using RHDS console changes the entry. Ticket #372 Setting nsslapd-listenhost or nsslapd-securelistenhost breaks ACI processing Ticket #386 Overconsumption of memory with large cachememsize and heavy use of ldapmodify Ticket #402 unhashedTicket #userTicket #password in entry extension Ticket #408 Create a normalized dn cache Ticket #453 db2index with -tattrname:type,type fails Ticket #461 fix build problem with mozldap c sdk Ticket #462 add test for include file mntent.h Ticket #463 different parameters of getmntent in Solaris- Trac Ticket #470 - 389 prevents from adding a posixaccount with userpassword after schema reload - Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang - Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start - Ticket 473 - change VERSION.sh to have console version be major.minor - Ticket 475 - Root DN Access Control - improve value checking for config - Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension - Ticket 474 - Root DN Access Control - days allowed not working correctly - Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas - 0b79915 fix compiler warnings in ticket 374 code - Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope- Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement - Ticket 386 - large memory growth with ldapmodify(heap fragmentation) - this patch doesn't fix the bug - it allows us to experiment with - different values of mxfast - Ticket #374 - consumer can go into total update mode for no reason- Ticket #426 - support posix schema for user and group sync - 1) plugin config ldif must contain pluginid, etc. during upgrade or it - will fail due to schema errors - 2) posix winsync should have a lower precedence (25) than the default (50) - so that it will be run first - 3) posix winsync should support the Winsync API v3 - the v2 functions are - just stubs for now - but the precedence cb is active- 8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete - Trac Ticket #437 - variable dn should not be used in ldbm_back_delete - ba1f5b2 fix coverity resource leak in windows_plugin_add - e3e81db Simplify program flow: change while loops to for - a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0) - 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar - 77eb760 Simplify program flow: eliminate unnecessary continue - c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new - a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking - d49035c Factorize into new isPosixGroup function - 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free - 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain - Ticket #440 - periodic dirsync timed event causes server to loop repeatedly - Ticket #355 - winsync should not delete entry that appears to be out of scope - Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values. - 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code - 2734a71 CLEANALLRUV coverity fixes - Ticket #426 - support posix schema for user and group sync - Ticket #430 - server to server ssl client auth broken with latest openldap6c0778f bumped version to 1.2.11.11 Ticket 429 - added nsslapd-readonly to DS schema Ticket 403 - fix CLEANALLRUV regression from last commit Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute valuesdb6b354 bumped version to 1.2.11.10 Ticket 403 - CLEANALLRUV revisionsea05e69 Bumped version to 1.2.11.9 Ticket 407 - dna memory leak - fix crash from prev fixddcf669 bump version to 1.2.11.8 for offical release Ticket #425 - support multiple winsync plugins Ticket 403 - cleanallruv coverity fixes Ticket 407 - memory leak in dna plugin Ticket 403 - CLEANALLRUV feature Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs 3168f04 Coverity defects 5ff0a02 COVERITY FIXES Ticket #388 - Improve replication agreement status messages 0760116 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion Ticket #409 - Report during startup if nsslapd-cachememsize is too small Ticket #412 - memberof performance enhancement 12813: Uninitialized pointer read string_values2keys Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values Ticket #410 - Referential integrity plug-in does not work when update interval is not zero Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled Ticket #405 - referint modrdn not working if case is different Ticket 399 - slapi_ldap_bind() doesn't check bind results- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Perl 5.16 rebuild- Ticket 378 - unhashed#user#password visible after changing password - fix func declaration from previous patch - Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error- Trac Ticket 396 - Account Usability Control Not Working- Ticket #378 - audit log does not log unhashed password: enabled, by default. - Ticket #378 - unhashed#user#password visible after changing password - Ticket #365 - passwords in clear text in the audit log- workaround for https://bugzilla.redhat.com/show_bug.cgi?id=833529- Ticket #387 - managed entry sometimes doesn't delete the managed entry - 5903815 improve txn test index handling - Ticket #360 - ldapmodify returns Operations error - fix delete caching - bcfa9e3 Coverity Fix for CLEANALLRUV - Trac Ticket #335 - transaction retries need to be cache aware - Ticket #389 - ADD operations not in audit log - 44cdc84 fix coverity issues with uninit vals, no return checking - Ticket 368 - Make the cleanAllRUV task one step - Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week- Perl 5.16 rebuild- Ticket #360 - ldapmodify returns Operations error - Ticket #321 - krbExtraData is being null modified and replicated on each ssh login - Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress - Ticket #361: Bad DNs in ACIs can segfault ns-slapd - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object - Ticket #337 - Improve CLEANRUV task- Ticket #358 - managed entry doesn't delete linked entry- Ticket #351 - use betxn plugins by default - revert - make no plugins betxn by default - too great a risk - for deadlocks until we can test this better - Ticket #348 - crash in ldap_initialize with multiple threads - fixes PR_Init problem in ldclt- f227f11 Suppress alert on unavailable port with forced setup - Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return - Ticket #351 - use betxn plugins by default - Trac Ticket #345 - db deadlock return should not log error - Ticket #348 - crash in ldap_initialize with multiple threads - Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied - Ticket #207 - [RFE] enable attribute that tracks when a password was last set - Ticket #216 - RFE - Disable replication agreements - Ticket #337 - RFE - Improve CLEANRUV functionality - Ticket #326 - MemberOf plugin should work on all backends - Trac Ticket #19 - Convert entryUSN plugin to transaction aware type - Ticket #347 - IPA dirsvr seg-fault during system longevity test - Trac Ticket #310 - Avoid calling escape_string() for logged DNs - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object - Ticket #183 - passwordMaxFailure should lockout password one sooner - Trac Ticket #335 - transaction retries need to be cache aware - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - Ticket #325 - logconv.pl : use of getopts to parse command line options - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - 554e29d Coverity Fixes - Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions - Ticket #315 - small fix to libglobs - Ticket #315 - ns-slapd exits/crashes if /var fills up - Ticket #20 - Allow automember to work on entries that have already been added - Trac Ticket #45 - Fine Grained Password policy: if passwordHistory is on, deleting the password fails.- 453eb97 schema def must have DESC '' - close paren must be preceded by space - Trac Ticket #46 - (additional) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #331 - transaction errors with db 4.3 and db 4.2 - Ticket #261 - Add Solaris i386 - Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks - Ticket #324 - Sync with group attribute containing () fails - Ticket #319 - ldap-agent crashes on start with signal SIGSEGV - 77cacd9 coverity 12606 Logically dead code - Trac Ticket #303 - make DNA range requests work with transactions - Ticket #320 - allow most plugins to be betxn plugins - Ticket #24 - Add nsTLS1 to the DS schema - Ticket #271 - Slow shutdown when you have 100+ replication agreements - TIcket #285 - compilation fixes for '--format-security' - Ticket 211 - Avoid preop range requests non-DNA operations - Ticket #271 - replication code cleanup - Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages. - Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration - Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs - 6f8680a coverity 12563 Read from pointer after free (fix 2) - e6a9b22 coverity 12563 Read from pointer after free - 245d494 Config changes fail because of unknown attribute "internalModifiersname" - Ticket #191 - Implement SO_KEEPALIVE in network calls - Ticket #289 - allow betxn plugin config changes - 93adf5f destroy the entry cache and dn cache in the dse post op delete callback - e2532d8 init txn thread private data for all database modes - Ticket #291 - cannot use & in a sasl map search filter - 6bf6e79 Schema Reload crash fix - 60b2d12 Fixing compiler warnings - Trac Ticket #260 - 389 DS does not support multiple paging controls on a single connection - Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName - fdcc256 Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e - Ticket #306 - void function cannot return value - ticket 181 - Allow PAM passthru plug-in to have multiple config entries - ticket 211 - Use of uninitialized variables in ldbm_back_modify() - Ticket #74 - Add schema for DNA plugin (RFE) - Ticket #301 - implement transaction support using thread local storage - Ticket #211 - dnaNextValue gets incremented even if the user addition fails - 144af59 coverity uninit var and resource leak - Trac Ticket #34 - remove-ds.pl does not remove everything - Trac Ticket #169 - allow 389 to use db5 - bc78101 fix compiler warning in acct policy plugin - Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints - Trac Ticket #27 - SASL/PLAIN binds do not work - Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFYops - Ticket #17 - new replication optimizations- Ticket #46 - (revised) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #66 - 389-ds-base spec file does not have a BuildRequires on gcc-c++- Ticket #46 - setup-ds-admin.pl does not like ipv6 only hostnames- get rid of posttrans - move update code to post- Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash- b05139b memleak in normalize_mods2bvals - c0eea24 memleak in mep_parse_config_entry - 90bc9eb handle null smods - Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash - Ticket #306 - void function cannot return value - ticket 304 - Fix kernel version checking in dsktune- Trac Ticket #298 - crash when replicating orphaned tombstone entry - Ticket #281 - TLS not working with latest openldap - Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails - Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse- Ticket #124 - add Provides: ldif2ldbm to rpm- Ticket #294 - 389 DS Segfaults during replica install in FreeIPA- Ticket 284 - Remove unnecessary SNMP MIB files - Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5? - Ticket 175 - logconv.pl improvements- Introducing use_db4 macro to support db5 (libdb).- Rebuild against PCRE 8.30- ad9dd30 coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources - Ticket #281 - TLS not working with latest openldap - Ticket #280 - extensible binary filters do not work - Ticket #279 - filter normalization does not use matching rules - Trac Ticket #275 - Invalid read reported by valgrind - Ticket #277 - cannot set repl referrals or state - Ticket #278 - Schema replication update failed: Invalid syntax - Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled - Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server - Ticket #87 - Manpages fixes - c493fb4 fix a couple of minor coverity issues - Ticket #55 - Limit of 1024 characters for nsMatchingRule - Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned - Ticket #6 - protocol error from proxied auth operation - Ticket #38 - nisDomain schema is incorrect - Ticket #273 - ruv tombstone searches don't work after reindex entryrdn - Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword - Ticket #22 - RFE: Support sendmail LDAP routing schema - Ticket #161 - Review and address latest Coverity issues - Ticket #140 - incorrect memset parameters - Trac Ticket 35 - Log not clear enough on schema errors - Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn - Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if IPv4-mapped-IPv6 address is given- Ticket #272 - add tombstonenumsubordinates to schema- fixes for systemd - remove .pid files after shutting down servers - Ticket #263 - add systemd include directive - Ticket #264 - upgrade needs better check for "server is running"- Ticket #262 - pid file not removed with systemd - Ticket #50 - server should not call a plugin after the plugin close function is called - Ticket #18 - Data inconsitency during replication - Ticket #49 - better handling for server shutdown while long running tasks are active - Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead - Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same - Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI - 6aaeb77 add a hack to disable sasl hostname canonicalization - Ticket 168 - minssf should not apply to rootdse - Ticket #177 - logconv.pl doesn't detect restarts - Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating - Ticket 75 - Unconfigure plugin opperations are being called. - Ticket 26 - Please support setting defaultNamingContext in the rootdse. - Ticket #71 - unable to delete managed entry config - Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock - Ticket #256 - debug build assertion in ACL_EvalDestroy() - Ticket #4 - bak2db gets stuck in infinite loop - Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS - Ticket #3: acl cache overflown problem - Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations - Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full DN.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Bug 755725 - 389 programs linked against openldap crash during shutdown - Bug 755754 - Unable to start dirsrv service using systemd - Bug 745259 - Incorrect entryUSN index under high load in replicated environment - d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere - 5910551 csn_init_as_string should not use sscanf - b53ba00 reduce calls to csn_as_string and slapi_log_error - c897267 fix member variable name error in slapi_uniqueIDFormat - 66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf - 580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf - Bug 751645 - crash when simple paged fails to send entry to client - Bug 752155 - Use restorecon after creating init script lock file- Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD' - Bug 750625 750624 750622 744946 Coverity issues - Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication - Bug 748575 - rhds81 modrn operation and 100% cpu use in replication - Bug 745259 - Incorrect entryUSN index under high load in replicated environment - f639711 Reduce the number of DN normalization - c06a8fa Keep unhashed password psuedo-attribute in the adding entry - Bug 744945 - nsslapd-counters attribute value cannot be set to "off" - 8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular - d316a67 Change referential integrity to be a betxnpostoperation plugin- Bug 741744 - part3 - MOD operations with chained delete/add get back error 53 - 1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in - b6d3ba7 pass the plugin config entry to the plugin init function - 28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins - Bug 743966 - Compiler warnings in account usability plugin- 498c42b fix transaction support in ldbm_delete- Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations - Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config - Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user- Bug 695736 - Providing native systemd file- corrected source- Bug 735114 - renaming a managed entry does not update mepmanagedby- Bug 735121 - simple paged search + ip/dns based ACI hangs server - Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code - Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server - Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.- Bug 732153 - subtree and user account lockout policies implemented? - Bug 722292 - Entries in DS are not updated properly when using WinSync API- Bug 733103 - large targetattr list with syntax errors cause server to crash or hang - Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining - Bug 732541 - Ignore error 32 when adding automember config - Bug 728592 - Allow ns-slapd to start with an invalid server cert- Bug 728510 - Run dirsync after sending updates to AD - Bug 729717 - Fatal error messages when syncing deletes from AD - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working. - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash - Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed again - separate tests for atomic ops and atomic bool cas- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix another coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - previous patch broke build on el5- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error- Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed to use configure test for GCC provided 64-bit atomic functions- Bug 663752 - Cert renewal for attrcrypt and encchangelog - this was "re-fixed" due to a deadlock condition with cl2ldif task cancel - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma - Bug 725743 - Make memberOf use PRMonitor for it's operation lock - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package - Bug 723937 - Slapi_Counter API broken on 32-bit F15- Perl mass rebuild- Perl mass rebuild- Bug 720059 - RDN with % can cause crashes or missing entries - Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2. - Bug 691313 - Need TLS/SSL error messages in repl status and errors log - Bug 712855 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not - Bug 713209 - Update sudo schema - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9 - Bug 718303 - Intensive updates on masters could break the consumer's cache - Bug 711679 - unresponsive LDAP service when deleting vlv on replica- 389-ds-base-1.2.9.a2 - look for separate openldap ldif library - Split automember regex rules into separate entries - writing Inf file shows SchemaFile = ARRAY(0xhexnum) - add support for ldif files with changetype: add - Bug 716980 - winsync uses old AD entry if new one not found - Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9 - bump console version to 1.2.6 - Bug 711679 - unresponsive LDAP service when deleting vlv on replica - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package - Bug 663752 - Cert renewal for attrcrypt and encchangelog - Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute - Bug 711906 - ns-slapd segfaults using suffix referrals - Bug 707384 - only allow FIPS approved cipher suites in FIPS mode - Bug 710377 - Import with chain-on-update crashes ns-slapd - Bug 709826 - Memory leak: when extra referrals configured- Perl mass rebuild- Perl 5.14 mass rebuild- 389-ds-base-1.2.9.a1 - Auto Membership - More Coverity fixes- 389-ds-base-1.2.8.3 - Bug 700145 - userpasswd not replicating - Bug 700557 - Linked attrs callbacks access free'd pointers after close - Bug 694336 - Group sync hangs Windows initial Sync - Bug 700215 - ldclt core dumps - Bug 695779 - windows sync can lose old values when a new value is added - Bug 697027 - 12 - minor memory leaks found by Valgrind + TET- 389-ds-base-1.2.8.2 - Bug 696407 - If an entry with a mixed case RDN is turned to be - a tombstone, it fails to assemble DN from entryrdn- 389-ds-base-1.2.8.1 - Bug 693962 - Full replica push loses some entries with multi-valued RDNs- 389-ds-base-1.2.8.0 - Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1 - Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1 - Bug 693466 - Unable to change schema online - Bug 693503 - matching rules do not inherit from superior attribute type - Bug 693455 - nsMatchingRule does not work with multiple values - Bug 693451 - cannot use localized matching rules - Bug 692331 - Segfault on index update during full replication push on 1.2.7.5- 389-ds-base-1.2.8.rc5 - Bug 692469 - Replica install fails after step for "enable GSSAPI for replication"- 389-ds-base-1.2.8.rc4 - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - 389-ds-base-1.2.8.rc3 - Bug 690955 - Mrclone fails due to the replica generation id mismatch- 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2 - Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences - Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format - Bug 681015 - RFE: allow fine grained password policy duration attributes - in days, hours, minutes, as well - Bug 684996 - Exported tombstone cannot be imported correctly - Bug 683250 - slapd crashing when traffic replayed - Bug 668909 - Can't modify replication agreement in some cases - Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1 - Bug 644784 - Memory leak in "testbind.c" plugin - Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree- rebuild for icu 4.6- 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1 - Bug 518890 - setup-ds-admin.pl - improve hostname validation - Bug 681015 - RFE: allow fine grained password policy duration attributes in - days, hours, minutes, as well - Bug 514190 - setup-ds-admin.pl --debug does not log to file - Bug 680555 - ns-slapd segfaults if I have more than 100 DBs - Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically - Bug 674852 - crash in ldap-agent when using OpenLDAP - Bug 679978 - modifying attr value crashes the server, which is supposed to - be indexed as substring type, but has octetstring syntax - Bug 676655 - winsync stops working after server restart - Bug 677705 - ds-logpipe.py script is failing to validate "-s" and - "--serverpid" options with "-t". - Bug 625424 - repl-monitor.pl doesn't work in hub node- Bug 676598 - 389-ds-base multilib: file conflicts - split off libs into a separate -libs package- do not create /var/run/dirsrv - setup will create it instead - remove the fedora-ds initscript upgrade stuff - we do not support that anymore - convert the remaining lua stuff to plain old shell script- 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3 - Bug 675320 - empty modify operation with repl on or lastmod off will crash server - Bug 675265 - preventryusn gets added to entries on a failed delete - Bug 677774 - added support for tmpfiles.d - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search es - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH - Bug 671199 - Don't allow other to write to rundir - Bug 678646 - Ignore tombstone operations in managed entry plug-in - Bug 676053 - export task followed by import task causes cache assertion - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8 - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used - Bug 676689 - crash while adding a new user to be synced to windows - Bug 604881 - admin server log files have incorrect permissions/ownerships - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - Bug 675853 - dirsrv crash segfault in need_new_pw()- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2 - Bug 674430 - Improve error messages for attribute uniqueness - Bug 616213 - insufficient stack size for HP-UX on PA-RISC - Bug 615052 - intrinsics and 64-bit atomics code fails to compile - on PA-RISC - Bug 151705 - Need to update Console Cipher Preferences with new ciphers - Bug 668862 - init scripts return wrong error code - Bug 670616 - Allow SSF to be set for local (ldapi) connections - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the - log output to the text file - Bug 668619 - slapd stops responding - Bug 624547 - attrcrypt should query the given slot/token for - supported ciphers - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any - error message in logs- 1.2.8-0.1.a1 release - git tag 389-ds-base-1.2.8.a1 - many bug fixes- 1.2.7.5 release - git tag 389-ds-base-1.2.7.5 - Bug 663597 - Memory leaks in normalization code- Resolves: bug 656541 - use %ghost on files in /var/lock- 1.2.7.4 release - git tag 389-ds-base-1.2.7.4 - Bug 661792 - Valid managed entry config rejected- 1.2.7.3 release - git tag 389-ds-base-1.2.7.3 - Bug 658312 - Invalid free in Managed Entry plug-in - Bug 641944 - Don't normalize non-DN RDN values- 1.2.7.2 release - git tag 389-ds-base-1.2.7.2 - Bug 659456 - Incorrect usage of ber_printf() in winsync code - Bug 658309 - Process escaped characters in managed entry mappings - Bug 197886 - Initialize return value for UUID generation code - Bug 658312 - Allow mapped attribute types to be quoted - Bug 197886 - Avoid overflow of UUID generator- last commit had bogus commit log- 1.2.7.1 release - git tag 389-ds-base-1.2.7.1 - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes - Bug 656392 - Remove calls to ber_err_print() - Bug 625950 - hash nsslapd-rootpw changes in audit log- 1.2.7 release - git tag 389-ds-base-1.2.7- Bug 648949 - Merge dirsrv and dirsrv-admin policy modules into base policy- 1.2.7.a5 release - git tag 389-ds-base-1.2.7.a5 - Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-ref erral) - Bug 635009 - Add one-way AD sync capability - Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot - put replication config entries in separate file - Bug 567282 - server can not abandon searchRequest of "simple paged results" - Bug 329751 - "nested" filtered roles searches candidates more than needed - Bug 521088 - DNA should check ACLs before getting a value from the range- 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4 - Bug 647932 - multiple memberOf configuration adding memberOf where there is no member - Bug 491733 - dbtest crashes - Bug 606545 - core schema should include numSubordinates - Bug 638773 - permissions too loose on pid and lock files - Bug 189985 - Improve attribute uniqueness error message - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat ions - Bug 619633 - Make attribute uniqueness obey requiredObjectClass- 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Adding the ancestorid fix code to ##upgradednformat.pl.- 1.2.7.a3 release - a2 was never released - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Bug 629681 - Retro Changelog trimming does not behave as expected - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif - are not upgraded in the server instance schema dir- 1.2.7.a2 release - a1 was the OpenLDAP testday release - git tag 389-ds-base-1.2.7.a2 - added openldap support on platforms that use openldap with moznss - for crypto (F-14 and later) - many bug fixes - Account Policy Plugin (keep track of last login, disable old accounts)- added openldap support- bump rel to rebuild again- bump rel to rebuild- This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1 - Bug 634561 - Server crushes when using Windows Sync Agreement - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self - Bug 612264 - ACI issue with (targetattr='userPassword') - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager" - Bug 631862 - crash - delete entries not in cache + referint- This is the final 1.2.6 release- 1.2.6 release candidate 7 - git tag 389-ds-base-1.2.6.rc7 - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6- 1.2.6 release candidate 6 - git tag 389-ds-base-1.2.6.rc6 - Bug 617013 - repl-monitor.pl use cpu upto 90% - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors - Bug 613833 - Allow dirsrv_t to bind to rpc ports - Bug 612242 - membership change on DS does not show on AD - Bug 617629 - Missing aliases in new schema files - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments - Bug 617862 - Replication: Unable to delete tombstone errors - Bug 594745 - Get rid of dirsrv_lib_t label- make selinux-devel explicit Require the base package in order - to comply with Fedora Licensing Guidelines- 1.2.6 release candidate 3 - git tag 389-ds-base-1.2.6.rc3 - Bug 603942 - null deref in _ger_parse_control() for subjectdn - 609256 - Selinux: pwdhash fails if called via Admin Server CGI - 578296 - Attribute type entrydn needs to be added when subtree rename switch is on - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"- 1.2.6 release candidate 2- install replication session plugin header with devel package- 1.2.6 release candidate 1- Mass rebuild with perl-5.12.0- 1.2.6.a4 release- 1.2.6.a3 release - add managed entries plug-in - many bug fixes - moved selinux subpackage into base package- rebuild for icu 4.4- 1.2.6.a2 release - add support for matching rules - many bug fixes- 1.2.6.a1 release - Added SELinux policy and subpackages- 1.2.5 final release- 1.2.5.rc4 release- 1.2.5.rc3 release- 1.2.5.rc2 release- 1.2.5.rc1 release- 1.2.5.a1 release- 1.2.4 release - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif- 1.2.3 release - added template-initconfig to %files - %posttrans now runs update to update the server instances - servers are shutdown, then restarted if running before install - scriptlets mostly use lua now to pass data among scriptlet phases- rebuild with new openssl to fix dependencies- backed out - added template-initconfig to %files - this change is for the next major release - bump version to 1.2.2 - fix reopened 509472 db2index all does not reindex all the db backends correctly - fix 518520 - pre hashed salted passwords do not work - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of - bugs fixed in 1.2.2- rebuilt with new openssl- added template-initconfig to %files- added BuildRequires pcre- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- change name to 389 - change version to 1.2.1 - added initial support for numeric string syntax - added initial support for syntax validation - added initial support for paged results including sorting- final release 1.2.0 - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389 - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428- re-enable ppc builds- exclude ppc builds - needs extensive porting work- new release 1.2.0 - Made devel package depend on mozldap-devel - only create run dir if it does not exist - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330- added db4-utils to Requires for verify-db.pl- Enabled LDAPI autobind- updated update to patch bug463991-bdb47.patch- updated patch bug463991-bdb47.patch- added patch bug463991-bdb47.patch - make ds work with bdb 4.7- rolled back bogus winsync memory leak fix- winsync api improvements for modify operations- This is the 1.1.2 release. The bugs fixed can be found here - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721 - Added winsync-plugin.h to the devel subpackage- bump rev to rebuild and pick up new version of ICU- 1.1.1 release candidate - several bug fixes- fix bugzilla 439829 - patch to allow working with NSS 3.11.99 and later- add patch to allow server to work with NSS 3.11.99 and later - do NSS_Init after fork but before detaching from console- add Requires for versioned perl (libperl.so)- previous fix for 434403 used the wrong patch - this is the right one- Resolves bug 434403 - GCC 4.3 build fails - Rolled new source tarball which includes Nathan's fix for the struct ucred - NOTE: Change version back to 1.1.1 for next release - this release was pulled from CVS tag FedoraDirSvr110_gcc43- Autorebuild for GCC 4.3- This is the GA release of Fedora DS 1.1 - Removed version numbers for BuildRequires and Requires - Added full URL to source tarball- Rebuild for deps- This is the beta2 release - new file added to package - /etc/sysconfig/dirsrv - for setting - daemon environment as is usual in other linux daemons- fix build breakage due to open() - mock could not find BuildRequires: db4-devel >= 4.2.52 - mock works if >= version is removed - it correctly finds db4.6- Change pathnames to use the pkgname macro which is dirsrv - get rid of cvsdate in source name- Added Requires for perldap, cyrus sasl plugins - Removed template-migrate* files - Added perl module directory - Removed install.inf - setup-ds.pl can now easily generate one- added requires for mozldap-tools- update to latest sources - added migrateTo11 to allow migrating instances from 1.0.x to 1.1 - ldapi support - fixed pam passthru plugin ENTRY method- Renamed package to fedora-ds-base, but keep names of paths/files/services the same - use the shortname macro (fedora-ds) for names of paths, files, and services instead - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base - updated to latest sources- More cleanup suggested by Dennis Gilmore - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1- latest sources - added init scripts - use /etc as instconfigdir- latest sources - moved all executables to _bindir- latest sources - added /var/tmp/fedora-ds to dirs- added logconv.pl - added slapi-plugin.h to devel package - added explicit dirs for /var/log/fedora-ds et. al.- just move all .so files into the base package from the devel package- Move the plugin *.so files into the main package instead of the devel - package because they are loaded directly by name via dlopen- Move the script-templates directory to datadir/fedora-ds- change mozldap to mozldap6- remove . from cvsdate define- Having a problem building in Brew - may be Release format- Changed version to 1.1.0 and added Release 1.el4.cvs20070119 - merged in changes from Fedora Extras candidate spec file- Bump component versions (nspr, nss, svrcore, mozldap) to their latest - remove unneeded patches- update to a cvs snapshot - fedorafy the spec - create -devel subpackage - apply a patch to use mozldap not mozldap6 - apply a patch to allow --prefix to work correctly- Fixed the problem where the server would crash upon shutdown in dblayer - due to a race condition among the database housekeeping threads - Fix a problem with normalized absolute paths for db directories- Touch all of the ldap/admin/src/scripts/*.in files so that they - will be newer than their corresponding script template files, so - that make will rebuild them.- Chown new schema files when copying during instance creation- Configure will get ldapsdk_bindir from pkg-config, or $libdir/mozldap6- use eval to sed ./configure into ../configure- jump through hoops to be able to run ../configure- Need to make built dir in setup section- The template scripts needed to use @libdir@ instead of hardcoding - /usr/lib - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall - do the actual build in a "built" subdirectory, until we remove - the old script templates- Make replication plugin link with libdb- Have make define LIBDIR, BINDIR, etc. for C code to use - especially for create_instance.h- Forgot to checkin new config.h.in for AC_CONFIG_HEADERS- Add perldap as a Requires; update sources- Fix ds_newinst.pl - Remove obsolete #defines- Update sources; rebuild to populate brew yum repo with dirsec-nss- Update sources- initial revision 1.3.2.23-1.fc20.scripts.27601.3.2.23-1.fc20.scripts.27601.3.2.23dirsrvrepl-session-plugin.hslapi-plugin.hwinsync-plugin.hlibslapd.sodirsrv.pc389-ds-base-develEXCEPTIONLICENSELICENSE.GPLv2README.devel/usr/include//usr/include/dirsrv//usr/lib64/dirsrv//usr/lib64/pkgconfig//usr/share/doc//usr/share/doc/389-ds-base-devel/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnudirectoryC source, ASCII textC source, UTF-8 Unicode textpkgconfig fileASCII textRPR?7zXZ !#, #] b2u jӫ`(h#iYl|eGD떸7~@KBdܽybVaWa]0PSub`V8~T$ڜ90_'JbZ{}{1A]1VC6dPxzd}k0l3Qfhbp3܃4R_9t~,BBmrsr샄KdI0=rEn93ROM>6+˅N.ho9 Xw7pPV֤T퉏0gsco>ra]B"+ѓp?M+,QSKI=z. p6͉5 4ގ1"|B<{O'~Yn0܁-g# rtėc{@Cc⁛e o3XJmypQiz4/@FSϡ[¢~6%Խ\ }A zݵ¨ʆ1L p q#>2^jCx=̢R#k4L[xgjg.:,k^'KʔI\g X[SYR|PfOnrE #lYx4xPo&73o}?"߇gCgF|]D <ܨhԖ)*ʪLօ?x63VT'xnOU i 1%e) >E<7:is3]%:J"  },}(H!ۊ$s?i{}\U :<({P4:Mc$``LHA-5a܀V_Ev&!07H̬n/DA2,cjCwŊ$T_uTDG!5=-G3<9< ,57zXU%@QbPJAHs c@PМ%#OxG.w!/(+7i u@g ~vf3M\H;1 fV`&29,MXZ9w_(w NmT "Wo2!I,Qc5qЬ2h/ &3[28`Pur:C#Ol7ӹvc N}s:Wl%Fp)\6X_a2$>g?B|zVmħ5AP ҁֱ(8Oʖ, ]>}KmNOV񗫒r T<#`" RBʲzhh1(rz +Xn)[B>DOI\2|؄c*n Q uy9<-\{˷wժ^1i$W8N㼮KFnE03W-;Y~ݗC ՚uK$WIiÁ;Lf_r9#t^P"BaCA,rI.[}ϣO67ohe8RDb4 z,h1Kf3OyN`= lZct@" %6M&.E?[_Aa,TaֲH2"f=~,=FtHjRNAKw.b{%9FUHc«7;f B^sX&CHA8-.BMBɩsIW[Vyo CUon-z=tOpQ 3<{]{z<}+6aE-۫))y=DO2eZE rqW" zÑ]ݨǴHE~gjj8_P~L4C¹mNuk 6֓|Y(Gm6 :R| WHur Atk']$oVRjr=VTQTj" \nj 1ҦjӾ| !3yKp$k4*&N~=5RVZ?"s"abhD_bci/Uc^}]۳$c:_:l0[)$A) ^J@{8W_F1yI#?pgea.Y&@)6R17Y6V>jEÅB5WP}N!a ]k,ʻu32/(PX0`DŐ 2q NH{?6[J-ƿJskG6TlESBË_?ԧie.IKk('x]+g3H*xFykW YB6B];̴h#~يgk|a-Ȧt,7}ʩQp]0YY9^:<}u*U_7(x@DcHHGeqP~탥Ay2>$P55~ HR[UiSg$߷Y3x)A \S%[qeYϽh>@Lŀ 2<m%Wܻ/_,[eCP/c<$:=~@-^"oC;P %as8p H}n/{hD0LkW?N<$z!HjQQ:[ 7f>H/H<:2ɓ]N<=L)!+j}܏Iy @e(qЁT7;,PxnE8 hLA;nTʡ3zM+@KߺB(ZW@ Fi cyGڇHYK]O-Sj#VQ퓏RڜJK^柹M!y  DK.=hx DIX1ًq!1,f!5ggy9m4 ƘM,k wD{$F钴;Ku>?5jn2.׭R{ABxDCAR4ERReץ+կWf'7_b 8%z!p$k:| .\m @8/7|2{c晟eǹ"?d b< síi6]DEU>ќ 7(6λGϦp מJ])v" K!)ЌZim-sԴJ*}.FPK[/t ys=@ u)La/y{L!Ȑ;dʣ/ dIAqw\ i|+R 2gU:I3\rh[@Od&ǜ/)M^W VrĚ٨‚H f"?h`-rI8Jύx8FIQXe} ;/eӋC{ W!Pǖ>l.CJprrQM高 *5p\6na^CZQYm`k+s^3o(TX)%;A^':!(ԧa`s} 7[Œ IԍXk,yQ?| [Z@z!T,PCG .:g d=JK 4k=t2|C>i&tsYQ};B=rx_g3$pMz̗] F"/(`a%j.-"\GV**<%) e%Dۮ6I=JnB0,*,^f 0vvhD)2;|UF(5t6\ 9CI|wu l9$AjK,Y߬>e낺.BRm _ceL T/CIz8z~L`E%lLS|Ia-ܜ z M[|ASs>݃0֦M  |Dy֨gb[`xMEo5MX(՜t+P iUFqi ě!n.ž{(܎Ee1V,<膱'}iuH[Rxzv/:Aޠ#Vӏiuܣ+ךϬnN5\bϹv~Gl,so2PhZ[AcCS\۴ ~n Y6[ҳ<Ҫ}5Z)#U꟥H*JBg~;!>"W/aBOO$dtW48TihЁׇmƆcHmƏ+}/w0H5DetozTx4a;+d 3g4`Dz\8V >Zٌ\=Ph  4nK&u{%Ҵz'Vץ4uxjfZI~+5#+B&k82Z~S_;Y !m ;^XcGY'Κaeٹ d-!X1pOm_~!T:X^HSlDI({}"KlV} 9GI;I~2p,-_s/'E5´Zܼ;t;:wuъY!(gp0N`ݼLWr`m4V-0F%Y]VUi%Q#]5Re B  \!s_)&ѺQN<; l4MZ/=Jt4X}#ֱ@ɔMBuhpO@Qq5Tꩪdi(D:}%l${Lz%ߣkaL b[lz"|j)N# %%[rpGӅNy'5hEw &cYkDρߏG ڝt,5p@Qkٱh'f\yW}D;.>YJt#( njYUspv-c#QΜ\`K.cM O.iArİwP2Q.K`F Rłj@bH!ͫ-(Ь⌥6DFmTQ4<3-YmL=ϯ6Xc':d1jhi_%%w 5  ,庆qipleI =|Yߔ »ʽ?iA(ɰa€B4}QOCc{+$ _̳`:.KBd&'N!Y3$wcdĢFBR֯!E}з!/ 5lH95)* k*B-zVv+W0ċdrZ7CJ<+tDgmʹ8k A.^Wf#<#FhޮՋx" ß;oD|%T+ZĤOd&c(^sڳ6vy 3{9f(Dr-(C6^VoЌ %薆{:8(gb;$Ͱ#>v~a |CIvkUcz&SصmS2^xn!N5m=!.@e%QedɝK?K؊L~"U0M L/ӰQF ۔ 8y^{ XG\527(7TC Dب: yz~deyz.dԀkjh]=ULhK5{C* <5cb2mϪ xd~։?m0\ѷ5&1}r@S.~^(͉e7[66 ]E׬ۍl+h# + +&bY褷LOkGWp8.V 8 䄆l69[6x*ao<48z#^ГQ_+A12V=pȇ*L|/&2꡽$3}MI9a=>XRdILyunsA/ Afj# cXCvio:Ksa#U.`yQpQ.U˷Bq{9y5te8}:]rpq4CoLX0/p> `-@Y<`(Kә6 u/_H諸9ϩ-bv笴#HL$)=Nbf}F8G8(kP> ZG| aRl KANs_ʮAm؝Y=Qe^|d֯Y^ڊ~/2@zEK4D[u?=O$ZXJ9S%KSPIex͖ʼn$B!8~kFiaγ <Ћ}(}:2BYKxᩐI-Ky3s4[zfu9‚Fu*j8+B')|c_rh-683.?:B&\Zwƽ7E"?D> ]OR=K1y[jog.]O0SV߉%#K,&KM/nXBmxw,Z?׃[ы{l耮5ٴW؏%մl vyNqBѧeظ ̹3Zk4 j-ص-__Zf~ͣ<˧C@zp鎿5އZ?9We[V[]o;xv-1ܟCU{a* #}땈;RE5a! E1 6#2} ߐlkw!^fpVuOt32cUn0gDtp_o?I{K9hUDrb3#bYXs8f\c<6Oa=63{թL1pܶxѰ'7fֱЌf!iƗ?<3ʶ%8*IED(?4s[~/:} [(j=)2^ 5/Nړv6jGCj]7 s%[ЭtÖtNTD=G6?/G,BPzIy 6I~+gl&čm.#]a+ڢD{oSA{4)xr!eW(Ojr޽'R_xNRRN(ߚ7CI9ZS.u>+'8 5M1f!:YEcwya=M \3?pf 8ff5"賗]9oҷ ]__,p|ʲ%&n)#.3 8Y^+D=^s(_%O9 pvL3{E-kZH({NމݧgjYJj,(yHa?9>{wW3+Ƌ'uambo"pՙ{ *uXˣ L6D1L$ZX&k`&-zUTUѺy!k?[/i#Y\HǤ/.\a8aЍ09YyKxT:Ht094_Zg t&J}#TȲ/)ܖ82]WSE/3;e $>;![[{<#,K^-]~jec_&Y^k9SIP; @vvl%=Ӡ3A©K6mgmsN{^ikIر!́Vf3FiΌ[bzKVh%ZS d{+C[UerBs D=P',gj0$^-VT\lpn6ǰ c/9\\=\N$R [ŞDcq=؟|6Cs(_O^ 姣:=\)WNʏ&=P坔BE8P1O@:*o)Rإ-R=F|>i9 ga4mp_baǥ-D~,}.Zʬ޵[E{;mP' rdjd[zRᦪ@ >)zo?a,U.\_Vw"qfcmX"Wu凅7I'=ަtTa7 E\¨I2GF`܀ 8o;k/:m{NmuG6yr)V|-n":sK,_G߆KWkQpPa äx.;QPGknP3Y^b3gVBݤAoEF]㱩91UoEgGËI5J5冁sǽp[o7:X ԅD81tބ]˧n(3LaQ&h]k՚peU !qZЌ!u|E+mzeˉ0Q٣tChB274Y`^G쁽bX Trˤ=TfŃ*kh4@}rA|JW͞i9g < #-nO {uA1NK%gXB"`8W6RU0i81nmW.Vl\Dy qܱ[fP@C,tB-E)beѢ*QۚaNVЀq{,gX':IBŜ̰'ӆ0}E)oῼ~վHE9g ȡR[&=B4dv\>Q@(*_Pwl)Ѵ"XP\* vAJm^r9K "}00wk,oΊܵ}h>DՓ {U9)`vJ :7zˍ. "[Jng&B/@kS-I ;gUmy,$~RK3/z`pVjn^xz'{md{co6M֡n큾6XhN>IƄCv"J_}~FDRIJAmKk.44~XU"ͤu[85'_iR5: 7BS0t]}}LrT#@)moمƁiG&C?1dž'ac_~t%vGs u% C`aA3٭ yn|h\PF#i"`doӤ]quH2 {i*Q@_9֭ ߪ} ZS m)W`(FWUS8g2\gkIa]u9~\dBa@<)i}Ӹn+"gK'AX$a,V|gAD2|,q^קNB6y= WDzA|&HI-8֔6^Hy eϏwc& ?Íf\ٌ^N1,27XVjR"F+CoLP[ұi7#'QL[4U"[Ԕ@6li;$󕯙B ߬Z fcY@}0 * 當ߏ|ryVfa$Wы\<,I["=#y5"Y!L]A~k!vSj\̲v {~W>@4 D ]_rR#>b]R觚h" d3G TXH6[eDDd&8򗮗C*`7CEM>קPL?@aƜ.%5n"OI>`kqhaDx|GpJHZ؟9`BҞγgf0u"t ¦T .Շ5 )%|y'z' 塱1fF>"R@7hZh KL;Q>Յ#)\;Q 4"@'77g .;ks$] ,Df's)Ea(_Z7]|O bwʶ\^PBT$9ԌV D jХ"6dBz Z9-IUA\pPz=IZ .n%)wıDp2Hnt>ą1_(;NA>!] z|KB%LTo-#qDͯwE?Hxa4JMaV_F {psyڃh0]&-G2C`RX_UZqc\/ zF-U 3Q[d8JX#Wa(w,[j-?wɏ^ccsc`kkW*%t R \vL=R,{$;EhnZh%@3Й KC93&I;DtT-nCXY 8cv @yB:Q!1~JCk)yT0D>mR)A#ǿkfBx[=ŻECK /X|.ȴ{2rbŔs,4ŭ铣G糋._ FhfKI9!ZsoU3]Kzz EzMKsX`(u|&.gQՅ 'hLO2$уӪN+=6}/+xn=,X|i&D'Ή~Z@KU#]&7o3J*$ܷ;!wXY`&k#NIn[nb><|E"u]x/]uUZxǛjziڗ1a?aGߟ_b eMo{2Id3]E{ t^TH61p=R$(h=j<=u]>!rLte0b3?dǤQyI_*؆9էG5u1<EOr`$vkmT;EH. pI7OPn9^cv<ˤ?!g}=) 6Qy?ݣ2K v|d;y~uBYe1*!ȶfs\)Leë_cO_ T]EeјUC,-7X5ǧG.w nfeSNuoe3 ,9:"@m@Ԍ" `PЈ:aA.`G &ɦOevQCvc^|ۮZhVxB?CQ'lJL\ri׎ZNC?f'0L4PMۘ}=mwfl>i\9"rgYbmw-c:~Ѧ9,e[RI Iu "@ɦQA 3*6]xsIphNH!sE"0#!_b\]jw`V> Gp*ޘ.@Ű!,ǦYdk(l׫:C:`'~Uk+!ʶA/7Mh9!ӫdl¹uWsO* q@ܥ$YS:=?ȅǁ#KjCjВSυ]zuN ߼cȢF8O5"woB#$l8'֗SҤ!e <$_B!`ygiTy#gΩlTE1,y߸sjϴt0暞{GR>%ɆK:u/gy,;/$@%}N䒒IP?AYQv Ն"m1wstwZ=7w+)Hs8_cRGl^iZ@C%{.1N޻۸%4XJcQw=/L-`l}l8 fe pIMe,KIe-2֗̎^?Cb)nxnQl>I4 ?Iғqm,J^>󊧖 8 >SW)lAd1)rvB$U }.]FtwzR$Rd:EA_m`*5+[AYFIŜ'A`pQ33tr1ז'}z z=gNI@)̲9*:"$~l4Bx `7qm`lP?r#Pp;-[UFv:]2EZ\|Ɍ~s-]%wy<~ X=|FYT Ĥkx1]5e_/p9k|?Mwġ\J_}p{R 7-ᄍp㩿ݐohE?;0ٓz5_b2ࣟ%[59eM՚Ǹ~ZnZ/oɎ@3Swa |AK<)fmճ.l7Y8I|p0O}L?!]VߔtEFt?? ) IBh9iH-[ÊBb]L2䩮{# þ͑Ѝ4qrh(Qzd$u<  dP^۾brCt"=H3T^1 HFBJnhlj w5C'Daw`Xt9S{妀q޶t+ޓٗpkXtt隕F@f. ; "rB@$M' )Ք Ƅ-eyi"`?FJStMQ{I6k#& kvG- O7uk0 Q1GD40Y?xI:4^ȿgr-cܷEǃ8n۳GB\}Lu l6GFlsàxfNTlrڼ2O䕯^RC#xMwIF'6SوEY@vU5GOf[\;ړ/L7 {2Bo#YlP#13E!7h`Z27#SG  \9t8..+q*a2{v:뽇1>h]$o*!בeS/"Qim&ї-' uͷ %~h3dnq>NH at/*3@W xP|NCA+MPL " 5ߢfA}U0|JY)YysCjhۏJkMUF"3ĵ8umubHZ~] U#-#B=Tb1Sp%WMX<-T6=K&Al|WG3Fz^1 ~̲> .c7Yq/>OGp4㬀k3"UH=3op!,xMUBNϣ++Q'F7(}/I6-e5GKkǎLƩ2Hpv rnbw-=cs}ۿQht0Bڦ)x>QW@?LM$ϫ#>ya;^g~N46,\.q`C@-@vEm첔mlYI+f B0rAM yXw*{1&kCM:nйHi@бnh5AsoY\XlAwiiN=e3@O9lg29f=Iě `$ ?f_9Wĭys1 ÿ9\ֆhCuIiڛ ݾl7pD-|FVfčH%0E4٨;24 E֋kvֹÑyY<~\JEVSX/΍|aXjIsG FkV@4:/>6%+=Kzdwa5=@ ICm xn|d(O.-_Cs#t(]~is)Ϡ8YnOW0gžT ״&(>R͒ ly] 5k5%.d}_倥ծ}Fڡ;N; ;eH~Ƥ! :[{(ov{?k4Q$+n#vd`Si+&,ͬ%|.MC"3ZAw5L22)=GU {}!?c+K7_^b$'~F/ߦKTЂ?tbJ'j@0Cu]!_H$Vϓj29N6[C?msOG{4j纁%h?;$ 3y<0}pJN5NY\2,~hrCbI Y/\ÍB{huT$ 5k]_<0 Hxx3`s0FPFX%&'s̲잮/3Rn*]PߴK2X9ey8hљC8זUS/q&-hlùApEМv,/ r2 (UjH\):rÓPWBxC7#YLzR%Z[-ZIeGi?lJIO, JʘJvΚDq 6+ֺq7B9Ta;jwlچ)&nD ƧF[*~G'g̰˱ ȡci@~]xspO-7&$R!*onf;8 EXwO]ŊAq{u/.KyJE=/়HH'9C)ŞSME=NUN7S ^H|@ ñ&h&wi˜۲߿'fT;cy>FPvLkp֟hƈl j9%bFH8*?18+:VǪLAr}a<1vz4E[vB10i3#LFJܕ ;-# e\A2yWѾW񛮻 nOQFd'Gf*/QecFlS&Q*y!Ps^ *Gr.=n[gpgu`/|6Is\_6%NJΗz)  ^Zi=>Z%!&"R< $0ӭ&vpΧ|m- 蒮i "7]3a=rs Glx;9='#uc5H x"EZGuh;H}o!;(5헳KPٶV&+^W5CpҖmu "fe*1q=bXnLc]T:vBLly@wWR#VY2Ƈm@ xwH Tfw87zCY?WL"+lOySjhFԳEpܤ]sQM6m,;e\(9.p `; _\r%m3@N}?͝؀5'cjk-Ýu{:+jBm_c #ch Bu0'3"z')KAqGm~˸ (?7DiP;0?ġ;C yX%ĥ2]YXf 2O X8p/"B~8?k~Ո^ / tH}r2QޟZA!Z&^q+ޟ_O髼Lt[_ =3$s?LF|hEP# f Q!k+zS|o)%5X/ucK40V1rK3@7q/LTGzm@7-eĮ\dwbp̋%D}xph.<02S5;`x[wl>]j) k^x(H~UIw- S[ZWRD!_Jthz]eZcW}G n{~\ݕc+Jxe#~wi.xkV?[m-êݟȤ)z!$[ly|>_Όz%@L+IF#ʆ-HdWOI;E7$;L UݭTB?tl#ṱc[8(*l WׯAVxm_Z?|lICObOx_6hd|I)6XD8$ O&*3 J(q+-vo&X/Hb+TYZ(>V6ӥň?o_NԡEiě au2-@u?cs9˟="K!uOLw\p9TC[>čXpNy "zL=,zJAOtz(2j>f@B`Ya !8fuD*ř2Ϸ%kp^k1:3sYԋ`7xh (>iv)9p< $n`CsH@b+ng^]E@roVMIWdPO\)zB?:z\hXWn( Ppk#o}R?1?ʼS#V˫|ϺG/3g0Wf D`x*fC[ڴB%v #p1A#Q7J;K ~g7z&ԑc8$)ɞuh9[GO2d/Z6꬧QbO0\6qDuP!߭Zd/pyx;Bf(oѬ +&R? K˔B/9Y XO;l`V_&X  e =Us pwֺ7|Cs܇ӥf.س\ v;?mimb 7u:t(ûx r?|€PHavC @* 5l{?|S; `9oaj[2_33c&lm^e:\[Pwc1+4;o5˚ ȿ/]5V5N 3._{p$9JѣN+u I5k~ZH/nrsoVъ\>Cɾ^$d04!VXLϊy48; ;k$m쉛~Ss,{*W(G}] 2 LR\ɇ 6*+@0t 0WuvJx[yaE̕}]&s(1ym L01C`lq:Cl^b|][& ͌/ǸLY5<%>ǐ|{GN6|\{L!ɥ ]?gQ%mfQ=$`ozMJtds?GQR䒾z3kdk߮;s*Dhs)M$KT8r]Q*sd!pCJSR&N2eݸ 5}s s&Bs tyRCcWcqO8@T O"J aUgEN2֠le"ڥX@G$EV|Cea9.Bkf ]7!5^e7^7G05^ɴ#@k&N m9v8|-JۓzCSN:OAAL_g) zZ>FځBzwM{U C0TrD§\؟ECn%YBE?v("ji @ HͲ˟{Niu͢({\߮hG8@3ۥ!bD+#"S;#tj0p-IuKtD y;Y :q7hkϩv}mrh~wZj|zQuay@Fʎ:ZA@]R0^ .D -GuY(`ӐO ~wLxsr$'wε&6ӭ&oER7̲e gd2^{sR[2 e\\XPH734ֽQTI$ M!Jl F%e 8IǔcLt 9u ijoc?DbGC`%Ϭ?[Tԓ3sw E&_|FXQUV'v"f"Ê2r/^ު@I3Y'@VZD|#pNo?7Jߟ2R;WwbJ 48֨XgŲIG__`@\F@tګz9j cqYK®jqy˸%%EM3R;8u^}0ZSVTRG0L@|{Bmӻ" .j 2CAΡWL}{4ҾZFS SНY_$6̐"u@x[>Y11$QU.tZE2%>텈Ow֭fB枍JcĝIJ`ȓ8ۺ/4N2K2#(A&Qּ_ 5N~ju ujv5#$7C:Kq;U&C_Ge˥@Ge-P]ˢ y0\%уԕi61B:vgwnhb arXlWrFh~!{IK >h5D-YLGKb J&= M4Ǔ+̞DoɁ53pKQe- /ŕ% yA.'FjUZѣ2}f8:Ey\|fڦbp/v޹Rn p!BQʎe{y5K桼\G<) Ŵ{U˓h<4 a3؛$mSyo@{$4riaJ'aR@/k  [%%H6} ԦD "ӫgϹ1 O6rSt^61 ΁5xcY"0k4`4:I.2olfBy0r2n9=klu?k8^[JwMS.7V VCA'"!\Vˠ?nIzkol3( E{oFV4 S]^[QWAxWv-7i\{k| Ӓ2yqY< ;LN^BM]򜲈%hx$^Uֶ0ӭ)ޓĥ_I%J_]AW1{Awsgx!Ng)S& jf9m.kvs͛WWe;;}iVy$g&2΋!bEl~Zh!# oώ-p).S`b7&#Պ5$ w?JZdNSkto 8B~u[?NvG:Iluuz  ю&̕k3wUnR QQ<Ƒr!`qeΚhrjU4JݢᇮL;6=E86AR iC-U{? _.V]'[KUAu66`0O8{Ff{LÛheܑ__МEwZ!VRnI>O/˪M\s%A XROX}ڻ}/'rJp_@3Z!\,]ciLG񦖻j h% [>Gw6߈y߬`' .>ȳw׮ck]yR"T{b6 tw}esVHl2]h* spNb.W&k,fB?IT$nFںRK^'=ٳA$Ut%JtwObUgh2~իE3IBfg:3ѝ;‰xs2)rmtcRT`^\T_ @rVL./4$83ܴWt9i.I7olg\>>3s=&mu&AjL N 1*Y'nx A;P)ןa`iko*wƗz"X CS%,9К˻V*(|;€b2_ Lrq4*O~4 r~hu{⺹?]TZ=L(9sZ 7ߴ"B Lt1/w/o `sx4.o6YiͷҘo8cy(Fj@צ$H1(ա TI}DŽ8T#MKK(vQe*e3Bt~. 6堣Mm]ֳ[9|­*1 <iXa?)Dfv)('Uٴ2Ox%wwhDCplwPIndm0rAZ׻Ű[q]iBby1JcN)S! Q[P  asf*rҖ"Gg5ρNCDvU DgF&Zћ!R oֽGb:epffG N]Dqz|UYnG*&> DY14 ?4u[_1?Q<Ɍ<4~u *R01v.s5v})3Ii,U֗?h]9࿠aE#LeQs c Jl2;hNs89kexM(ZI'5qaJh*syzх}`+:QjM}CЯ{ zb{oyc-ȻlB'Y4s#h WqEo_*ܰ@8>)&[)L2t1]/bǤ@O b%/#tö*1]#Ӭ&E*ǣ|&]P)/e$"` 146Sy f٢ զDkgI-+pʼVOX٣ }$fTR螮%(&m}a$U@%$ ޽I3fD-8*<؎ap>h_(v\r}!iwQKN2aQֺ-z' ~N6<(.5qڙN>wŶ@aĉ2a`(,zX )J+ }Hϩn)SG*s76ο_G?0 >1Qre<]#j 0xQBgnUr|VN]e'^#=nYv>5% X|Le )5d6ZPp)}PIt>q[}ްr3!@EŮX({Ns!n[n!ue( \]2Kw#V!R7^Oﳮ!x~+B/JR= (ALLǻ5 cÜ#0jg=wJǼS#;9\Ki{\P 8Kj"!7$WK@ؼi%!>[$$hX%l*;⽰*CtҊ o K L= eYL=)08_ibA_PR$[zdbVSr'feha{Dp;(pI􄊇w#J'>Z tljTj6ST43B,!i\/ҥP5:<KPz (Hq{ 1ijJcChw͡e@_t9:oo2E(@c+B +~zD:+$nȡgӇAV&pb~(Ry|2LX&B҆^n|џ!h}I$ D^Th+p(v_Gp%_>m)tTS3Ƕz/Ҥ+ϛc9!v7Nm3A6[!/XXrb<:D$ % ⏋]ǾA/[x'K9W ~k+KcyN^&nzx^.В]RȘi;ZG3 aHUR>LEdE|f$~w{ z1՗>C'[tr3ܵi ZOٖh 9@\;8>&=_) |bMMfߢteO }=9x~5w3T5}χ:䧹+ĉr0[>|UW\kQ f %,񇀾~z /xl@G]-k;N<@ϯ@P@ ePaU=oE>DQhccJe6?9I.ǧ"l^8:;h;8"xv-ɧ@j=@/q2j#l(r}\y{s %MqR.5%Z'Ij\&EfaKbE u`PD' ;+؎N҅OgDk:YX=p1عX9EyEr>m 1T n{hf+Y_+Ga/#U:ٽ\?&@?!=ΚS²wqjuơ{42be::>0kX*ĵ0>)+G6LJ qIfcT=̎<EO ?pcwڛ8tv+&fsgqxyUIawӞo?Y@sin`l5 O XUA -O;"U<7,df!pđZJ>3˼CՂD$/7Y{u~DV *0N&ULf }-|xPohiVˈM6R'oB|EfcӜ(t#l-RP7?&Oe&TI|z}gYL8dO3s=j6)YvDr-&ת@'CUSQ<}01>X^D/L|VSÊ:+Gm8kDLTmRul ygA{h#>=!ڊFX^C`sdrKh/|kZ_IJA<L؁J{Fcj;+pκ[ʊO![x-7P{e~Ǒd% 4 &H*'SnIe8Ė  tc%E(Nj/z).:]? Qr],QrL4lquk|9-tz;0'}X%Cһn^e^¶!lŔU3aY4N!J |Cӡ#,W]}U3@ދ=˓+faڲDZ$>q4_ YϚ|A܄ 95kG \ `-qMgr-@LOT?sNVYI,*-yVr*Y^(؍臺ȹ#n7pq.Qm޵7 hW)EADžDži"q8nװk[blgC"Db1p!{A&Ԏl{M`|8hҷ2D<ܮ>S՟aP(kvO:rEWzO]?0bv#8&-~K.Y9[xX)C_|J"C T kmauj3gZ/pgۯ#XfGFs,_ #F?3a 2nR9Yц|'S#Z25r jEAOop?<ήۚ'9$q2e~xQ&l"XyXPƸ9˂"v"ʅ`YiOΌf uR鉉tFVne͜˗)(c6X2M}Xq:U-D:*8Z%)3/*.tn~kG݂AQWQLZ1k'%+Q Й?gú?x;♼*"``Y1e഑eQC-^fgsՃQS>9W*U7o%Z_|M0Ȩy؃3hOWqƆ!t9:=]yhl5bT  X^=.a[, (|Hֲkڍ+;*{cKr0! Q9NpAdg3MH C&\"gġrr;|utOO}Di9m͞">x9/gXp"'4a$ rX/B|Áv/*ĭ' rv w$+oU)ź!효>LձYe 3`rג_eR"%v-Ng-ZU sW];)j4 Ş،kn.ȥ;Bn RZs& ^|6?3]\Πn!UQ9o [5Zh8*Vg4L^{H }k?'QёT4cgVgw9&88l:aI\l}jZ?YN2+7Q ;48j`~0mB"8%p btk!}"z^ |CED4fIS Yt(.6>Sh$tl}M"l[Rʯq7Ș,_hK( ^UK"t cXuYl mʷNpsLa06+[;Ks|  \2:&;-jA 4fE+;? "?{)<3:UMKUo%zYuHg} |cwj$@XDGwt)?w⩾$iۋ";}1i:ېcf ΐ`H5ZƘ^+om_5EOG頖ٙ?{|SWzXabo/3(rxA }IAGHv2Լ> ֥X .2Zl]:tj T]&פph<q\fxQ)!hwpd/2bp.M{8~hݣ-&,~~oS%*M_\vK¾g!B'eOqI9e= ''?ܢT!D9QŪv!E/ڭ(f݇HL==M\6-Ïm5kF/iy=6GLwĤYVXIhWK0i`w{)Є~A#+ϲ1?):YeXVTE -6++^k.[.rU Hu$uWN]ɩZ|S#@xG”#!CwZ_JDo0Vbp)C]Œq*F\Z4S<!- oS2qK419.|qnTpz\^HWrN#j[VzjXI0 ?' 8rN{PVkc:wX&.};Xk"\>=_f*M{ T%/Bt\85=K-I?w%w|+1X% .5%SߔzQ8Gw7᱒зQ/j~?9O8q&h|e= ܱvdtu8dÊ44\٦xo_ܐGB ?'XطF9јtR N?FKC+QQ&B4 aUJzX]^gȊn{q@4Ь ԋ\@mP,<A \r9#OѧF :QHMz}qc>CqCAIr*L81r.l@5{$ڑclڏ͒#yv˭Xi-vxv{4nĐ"嶘!_;jHT_{NRPqb:QVΤG^+ra7S9qM'r_>ǐ R*ֺ_\2gJ=s o'R{BKR4Rq7!wਫХyZe gp녺5 }=g2Twh&1{ReU!J(udZl'*J-݁.pHaӹ|u ~1BaS%# Ըe!5] H kǪÿf 0AxhTy%d4/Scگ,1ω.{1ːyi쥙hqD.[թs]X̭ұ+'+VHG$бmWAPyC[*_q;Ph ?]*tRy[h&N}8q/rYe f0VyqҘ)k5\#c?)b(wx$7DՌh]&4;0Dxt[=}Շ.Yw>M##t .'#dwW~eĴTv!%w'kW)J'['ޒ̮7_6Orawv"ljJzCXGmž̿gp-[ [vApU7lr)9߻uҪQ̝?İ-,()A~ʼn<ËK7UzOױ*%۴58)w<\i.㩬; ,ݧ\x."3:-6g&' ]p{隝ٹ<)L uHI澣|3<)yfIhU_ݥD n(^}R* qgǶ*i=4 WW[V_$D#Ō=i31"Cxb?N΂2{1(5%Nv|K}Hƥ3Xw9T>XOԲ8R=)oJz.;͡]$; Kq @f%PVQ H4;S7V°5Fio~AM?߹Y @ IVB.NAf)IZ|~x3wi,7HiXH'<$Zj@k?10| mߖܛ4iz~"^0mH&i/D)joYu K8cJSԞV9Vm_ ؄ɧT26L;5AY0.%ݐfh0m.K5)7DӒºJ^YJ|X(ws]V.sqG C #\gZ]ň@N[ i󮒢 }11kJP MJGv9]TOch=3pki GqdFgaiP_U( 2KC'5!/B"850<1tTjqO%+E1%mc'Л1JJ(wu|1|\Q`KŮ@~hAm{v8&4ZRPEwϦ;H/2I#W xBR o˒y,6N*-U\F<J(JSa`_O4ݺd?Tn㽔xNA+G`Ǯt\9omR@~޵PV0~OidZp%9=U'(T8[ BFHZ'#VE =ɖz`hlKV{dBooUA7oƀs8 %_w|A$rҮWwBj?ۦx;-H_xkFOvמ Wy c^BxVH h"'WZMyjau;wK:Ɛޕ}Cf613:[#J ^k&;n >.ƦvƣܦԬ!Nx: ]\ &/lm#*fH-ۇ}b0axu{qe|OiG=X[~VɏscyVhӷSբI78F 츶͑2E|-x QMԽ6D;zNF}REz,w]$1-mv1T،΍ IҗA8ÛjK_~0Cn$9 L]&˵Yqy\mY:`G*Qb3R2̙bWt*.83>|r(c&>A9H^NQm,0:^lkt2U= v(u J?*qkAL>_ aa^G7~Qy>MsxiDg`*K?8c|m+\N!e I!~"n"/JgQm"kF&rKI#p@iиWns=di9]~jTKۣr >eaA"kS@jiޠ䭇CQt <<5O2FPSs3bCȄf`m\0fZz|9 pJ8#ӎ䌬wI}.W:A9\6KC!k>bN,fYag.qψ]McJiŵ%{@iӪREI𛷃qc P,ukg2nQ:gߧ&t0, 0ԲU^ca?.Oc溬Nd ) "-a›s_d0ygRCqEnbF"%Wκ`6I%NLi3G4ҚQDZ7 )p}1``2Tn`덷b5YF7`4 4J8rkMKrca+4Jc]ύ@e9c~xCҴC6ap|)Cycʐ <$eͼrzm|ׂ 'b Ŝf%US?' Aw%}+b>X1 GgiWݻ!.u+Xn'6,KTI2֑KIaDDO ;? EcAAmq/ hMOO*ݲlz~YsfSK޲JA%B-f,S֠sbQP $F25>$Aڞ~ -J`n۠1/OS~zA#X>ܢT#p0\]:S`k, ;ڕ:ɈG-J3;l#uͷ)[!T1+hƄfRu4%d29l\; >iQiLYL=m|V;ﳽ6Ƭb8jqJ,$EJxJ(͋T qmuO/[M#o($'Do YSJq(il{2پEZ)w˸s31^ | V1'`6*?m%m`mMyF!2Mt6/blȇUmN9 Fkvޝb괗X:"DUMS66nEueY4=b@ щKkKm~ڛ<&۶Hr"^u #vD{QA3ʆG`"-([A˰UK^:kޯ5q$tݔ0N_gC svsN(K8([BX5GoR.zWy]~{_[VkD6U]`e <u)Ogd kBm-b0F\,Q<]b,e'oź@0%e m2iaI~lwƔJ]-zEbq)=nȆ@7oe$f+kS)Eϕ*2~ ʪ?#UgfV[J)Za9^JRq=+,7CojAk ֝;*2V%upoM^#bϺANnqP:k9Zc(YZy@]Ei.+a "&r@,U\~Us8CBC<_[9VKr\]Dܟo WXkqF6piگ^̇,UN)BU$ 61K8I3k+dY@LԒBgPx|Mc`dTG̙j/VKȉ0e zзS9;&Ral-?e/nN.:{*%_h_}ED+iY9nN= z# 0D k/aZͅYhHr԰:7h<2J8XI1b,|0z(f57qP/6#yx^*KλE oh:WVf 5u;A7p2quu06^ľ͟`{sXnuя_^὞yڵ?J!/. Fuk^?:UND4l,21?nzB;ToCbI0*Cn&}`EV ?ܟ+~-'F|-.;)AS?$ރL_"FY҂3Jc-u4XVqHGScQI@i^n̳$LʙrTDP;g0N"yTV q K5KTpZy_2iΈͫj$=~"YvO C $eyv^Bi2Ċ'+&g=@ٟ'Z%I5LS緒Q"E<@ݞZ3uk X"sA+˰PRt`eSPF?jUa!'0!tY<ۯTa}Z[/B=Zj0FsƃfxF{$'Y;Zw0SP?D]pMJpP`LʋR# 2unǣ:-o1s% / W*;)\RyEӊMXj.֐QH7=HiO*F*=EQb)hF"ZEHd6I7I:“c̉{a_TON0#Ï-EKSUès%KIjaآ?bSbI,՝P (US4:\ (>:GEi^HY :G<"yx–~?2)|eXevX'T;\dH @1M>dTyy?9V3;\+IlR+_Lbw` zn@tn3TcYM{A 5y e2mNe7X A΀$*T,`!^nN_u^i˃XRll=.{OD]LTQ?ː?5:>``HUJG@*|hHCp'ozҚ_@SUf关;kW x/ nxkUNm`L`یHt\D>bhl \qN _FUSʩWep@{w& 2 ˼[( ?S&!X);\ EaVũ(GF[ӹئ'Z29fi?Zיcv|2 C4eMGBo++sÝ0ǙA.rbiej:__]{ӆ'l]ܱGh- YV( Wq LQ>^\j:Vw"J$,bE[`gw4[A %7a)ybOgBJqdŕ;9(M3ҐTf.5B#@2Cm5+,x"53LNLs̖&OVf|b$ Χ[[f~dD EH7K`ģ[O:W)N꺏"aXWnpMc>+*{Ծ^!QLExq56~mq>=̞2Y&\\,I?jFȒ܂4|4~y"Z[Rb7y&;k_%]"J &>a}PvEABb({ͰJ˄ίA6Oa6񃛀nk$wk~ac0wQ=D^ %xкXm ׼_EN#`Z/ĩI;E\YۢoeB*-]h:]R:\i;.~jVJW)"K֗nUja%qQ$( ([8@]ʐ޻6O@#T Qe^ZTȊ&y> q(9^/Q`K"?l5#%wL'&ɻ}!5 8 L}AޚHKmqx%g*$j[척~GW *NnAm jwUMӼ({.^@N vg B1H&e([3JBqx5+ [?ĐZ˧9ČMͨi2)dN8ZcG]|`yǏzS`-1|Lsl6,,"Z?CI~zB6K:'s?{2:9 DN㓩 ML$im8~fǼtI#G~t([&]1+Xa;nE Stj&.T?j6oyZu3b7&CKv>x"{6bSZ@Έ9СdvRJLn."!"z)G9'Qw>|1KJd)dڃ -iVdE N=?AIvuŠbDx)"OD/zڝ:]?}:HZcF1;:c99) }gJ ٺhdfx}W?ok,ںC$:v1fJ`_`gJܖfwQw\]jΔ:80{$sT8YE!X$.< 7ϳ1`6viLYDH:MkКG@,nhQ']'8roMy(I:TF~"[`Ou<4Zz.Xg %fe1QD Mep_F;?eX C 5e4LaS 6:wŇgQW[{ I~A^9)o0@{UI7엤P&xF}G4*qP-h;5C?hϮ6+u{j$)jK&bE4t+qN2Aø,L]=c3/ĺ$"tb/kǯʉe=i`t>߬$yDZS]R'~0iVJb%w;cav%O: 0vPq ^/՛ wy}ķ(_DZXozg)ou&OU50SFHS f8t gc K/Gl;ފ=1ͻ\F>J+?,>lgep"cxB4(<T(: \Gf TZxX+XӿA/#>&4QQ$sfC "kTXo?Ge{9bN-R/+}ʞ;t"cg>>}K [=++.}'9x+S Bzff!'Gmh 8>J"@_s>iby^4DVQz e +T z+t9'R o0ni O~#$ǔ3'H]7(%Љ$< Au -W=C7p6S7Hs}FAKƁJM: hm. ="n(#ЏA(isBŋSX:+ÁM%$@ ., 5+jݎd xMcϥzq ΉV] 1d'LfU3"a9ڣ@*gX4!#Kޞ,g h \8&w gנpcΉ%hR67.+87/39>v8 7OITP!3Im)T;q7gɋZ[;8ODPԂ]b_~@THQ.VY4x9Z_K|pJqS&8n+fʺ:V-~$dBW"^ZMv+㣂A]nD_r")yns8 @tL#=dZ9ɝ(ʽ2~~ftglQMɎ"Ճa553-9>L Òo )]5PXjQ^@''nCz#].L\k j}clzf~EűQ`Z9UqsSUk}{VZX>oi2pJ}[W[>ҏFRȧ+^oNp[48M#n~iI$$JUoY~ uxPtrIKCjt~3тZB=LyH~%L'N:~4l \)댷⫽'oCߋK[}:tښL`䍜w3BWz#st]4CCy&R "ͦCc`F>9^Ś4|ރ&=ItN`Sۓ6(ƽŝ'%SPc`K.' #$oY ePv:R%r)3qjT'ȖCL|"ᵉw6'  ]HRwY[ifuB(H~$gݍYOiw Ť.AR@4a((}ͼ`!#ߖ%39áIt O•B_ )حLmZ[*n0X-+ʽLܫI%X-;  uBN  =(ʘ p41ĨZ.w<%Vܓ R8vq-t8Ru Jn=7 +6Beom j*DW w:*nVm<4'Y'耢"V)/{w?ۙ"4dl yLpC*;J-6kdQVd>:+Y`H.l>?5sA;~O¢0ϙ]6;@ c|G0@aTޟJm"Ғmg[Ďu.C ۜ"kbѫܸ_h;.?)3Io>ʶSQ,\ -Z?1dz&K.kpŧ0vi{!ᨬj go"xJC-Z(ʠiO+\ !E{:W ź:@U4Ǩ*~JwAi _,ĿW!3z3#EI[lëqrBWv: ip!(BZ\zbO eN[x[YW`3|ډkehޕvKסVe U3M>LpTԞ jFL]S <H,Wz Gq0χƪF%kvIЈU*ZXg$ 9-nInv#qA0d%6F]R`,yI4WJ zIȄ1c"npQzⓖuN D:{o|غؗ |6]Gf)tk ,ATx I^  Ш1 {F&*o8mWEKlpdt>;&`W$bQ%xdy}geET~]46ʵl0ҼrGcHN1mXOw8` "qWгV*4OUz9Ue$28C٦;F?k?!*?tb"6-iakM@x"pdL7 e7 #e2N1~abfZǔλ˕ҮF4Ι'&8;YBi=h!meY"B›Q0r id2fN JO MؓvXkñQLia)vS> u]H[ȍ9ť|Oy ;[h$\@p5:„A{Rw/ );>7*Eb`KnUJD7&-dzƥq-y~r p3^u)tH[v hBa`8:X(@UuoŖ%Мn;'\sW-N2ʿA 71̎2͖]rSMEΡHΐqK6LV_\aܨ)33cv=KceJ +!pYχ>nF-04Bj+o|&{=x$0@S'ui=o/HFy;o zߔ.vɭ)!z>b }C}Ed#cvEdՊ.A4m#kCq,jE\ı 1rJ3YRY(*YWN{ o&_VI3,+ռsd q24UI͞`^W?e ^d'Cli&`6<|deș-XϭaW`tE';KW:%_-eQZ{97Ŏx FΪBswE.FYh(x+?,XA[M< 'PdY@2 HQڠGU+E ݸʽGcGĪ)uV:ג>v2ZM%>vӱUF-pLiS2 #2yV# =柾@*3nRF9(Z⧊mB*$56! "2~_vva2ˤRVTo8T>Ȣ&n&2"S8>dV>[Yz\ᲁoŨh"755^p7(]y9_θ Tw3zkM32hmi>o8) A#oW[z$a](P x3/u , +[<И`"kG:s TޘI ӕl(̭,P[%LiW Tgi.pK"\ 4n jNůb_&ndw/yfNv {6X @ɱ74:3,/h<>R!'hQ8p^$SAVxG*.R΋Fk9!ͺ2/"@{h|OzcF?%vYImwa|*O(ĩn*ry:ު'5tD<gJ@^\0ڵ*}̽r"ڃ-$-[25.%'f<Ք3[,XP ~#ɻ dz+onb0 {_p\"NJ;U^0ʸNQ<%(Cfw?v,bq 㨭⪠gKجLrĂqhy|w_ Ty~XS ]JCG>wwd6?́r'S,|r(:m5-#5*y%΀1z>"-DsȋmRqVN?#T>B%SEF3qE;Ry ZJ^SԮ [Oq6WačJZ$y'fPc`NWtٺ2fuI:+3/kASr9n眥@l@$ yx=g)FE!Z~:^%wzm,=aݑF59D1x3+i2r:mw5(j-΢p[!4 Vm롆5 "s$ξ<d}ː=#'rqGjBD ~o¾M6y(}20|x&K*h7A\`pIBu&LfKORB2ԣ:b= %þ念,@0.K<W<%/tnA;jW\Zr2ΝUˤ S&F>mOІYd!ڸoøK#Vo \fd(U)2׺Sna遼q:vߍ}f)Z0"K%* 砿<+a <^FVtG6*Mc } G$c 0+*^d!Cvԥs}#~\^B<.<"Oo&\ʏe_8gN`w&: f,՟GH=%v*2F0^hڗCZ*QHc BS=_ {7[fZ'`e -3C'5LR]:AЄ%y.:"9 &OD#riYDb?(=@k^w`xkirǭ~}@nHu `-'xL줭z&Q:d<QL\> lZidE޾SK|^gl_щVxڝf{~U|^ίmxtU> 3(1s{m9[Y ǽ/O/[MV]Q#q⎐Q/@炌707ȄãTkUin* '$+Q2[@Qw)'Eq/nX{F$@fTJ ,ZfECbێ8z+-Q6 oHABNS?|η/LEG-@79?$oQ*^Z 4Dnq*-co>4[RPl6.4oLBM_FK:43?5X7'?騻b>،HFE kvH̋*?7u+)`9!Do奨v)3-ĘpTDϳMA7x.˅ Ś%&b--xs0~Yq:<(Q}>V\N\Yyiʭߵr^?=t =77ln+[nmІ Se_e0t/- ZɏIC [{<01VS'Cyh@,&w$/ pNX#^$~R>c] Lᦄ[A&}iDpI`Ƈdlj|FB;]*R&?^F@e"=Hԓ;o~$j<ϋ6,LQxHh!U2xSp3[`{+:S3x[{U+r!?BQ!,*b"i!\ѕēN4EJҎ5 s~mbպY&ᆯĵvݰ a^5g&|XuܝhdClL)j]1sIZQJdl1~ois>vZ_IܢVL{'ѻSP6ɃTۼZB7x p⁡ڄC_uڳwWǗ4yB\,V+V̡9rԗSMieƗHz"ǒLJyz?5#{Q"pg&"o5Ul8$gŏ|AUhARjZ"}#s%PW z}tz҇Bϟ`ߏ0'`~l9?RR2YW` }beIޗ\tl}!g=UEVpZ47Wd6i0'L ig#Z ëuQ}EPF!AA 9x27*F<d%)frke3n=m> iS4.CEʛQқ1Cۏ$ g K$V},OiV_xhi$4ҽ'n$gEވy:wsq{2,&11,AA6D~`c'Sx6vw:Migc ܶeU ÙIvLk56 ـڅj?ea }|r$cJо!-abkk/6pub:iEeq]&@8nukf3r牴Y/ }[Y Ѳֶ~5I('4YQLwˍS'cb롺e.=cD'=YSv=R0#(!h"8 ̚]E`ϋHqfM{ c)-M>|@0!M*TJYR229oV:Wϒn\ ` mŗa&AN$"ZUHm Ru ɹ"R#z^0mG :P "%Z g[_FUi`>/ϒ(\/>ŁYYoT#1.,YAi:{暹-ƶ,khl=f WQ,cTps>I@+z ?Hܫ2 v9~J\/ePGMq. køR _bc&8LaƒdYM}k¡FFoеWd~TWS-ϑ xyBtPǯx<QPCC)SS%C}}T?AvrNR ۉ9m 7[ZKc:B#g};"1ܔ"tr C_M)[>צ\G1>`r?QҷQ DD0om/#V}${r^p0!Z]:QYBc6$4"nf!M0ӋX_}K6bë Ց,tjH$AbXBlpۚp&]aNotL=?A;i*"H׵_^&$O?nz0&]#*HD3ldQU2P?z`^a*oN$٣}IZ&5jMʿ-kxAn=n$åf+y/%r2g@?sEx)nVjus5M#K!azju'#3gvV@7|0!G"ٳCJK!({BVB gfX!qВ] Me'F(WzὭtEV8?7>/xNi\pǞ4HB|˵qGvr4=/Nkm?ASd89wք^ cD}9y-U$G~BWJ;YӯUտ)d[46[j\*]VqƇW Y#Jd6ˠ5ew{,n`뤔WujʱD"zh |Y^u5 ~&,>²~Q ל@:rӮ@M;)&Cy}(zV1BUBX-Pfh%]OYz2+$;n $Wm>+&}^/+MafKl`vUYc&&_l #0N]SW6ZGU! iĺ@`tUZ?xop]V3 |,I=<~FI:OED=~ \U1 >剷R1J i]܈H=,cVpu!ZQJtu7-Y Vpki*t!I;$b|EdJ35^pǜ9Ϊ\'XjepQ 8u?v? 3LPKWqAo fyߣb; yQG=y9nm Nj\! YSy `ޜv ! 80_O0WsDX^aJ5ikt|:`U$_vdhHI 4{kDÑ1ﶔPj%#X &Wg9M `bD.wwzQL g--G]Y>j[D^_bϞ 3ϙW3DCD޷xH0/FbUPef/d{Q1[_6v>ԡݮ=)z'7æX] 5K6s'xX`T*#f+7˫.; ho"]P;EyxW ͝U's/epH+N%Ea"Q5<<2*Ut ~aTr[cySB\57;Tb{ <8S#f*tM>0|_ &G3 { 5Ey;Y\9ZH'*0 0fo߰@L)8VmNP`h--T睳:(r$Tz㨰50MQ , Ñ}E֛A@; prkε qDuLM@#ԜHF35ׁeǘhl>2l9uj nea7g}@,!#g,L7N81beZ;dv ?v€@t.],BU(NX;%Sг)fQ>j2OtY[Wfz?t1UoT+ +4\eZC)uK2~ɥ5Ѓ: Eѭ4 ݎ떪H8DE6.fe ۪"$J6H8dNY^"!]io My\,6fͥ`ebR xzC6r;(Zz8O!)8h8t /{"j-}h;"@+O$ ߭}s哌)!"?Eg2c}QH+ :/%;7ˮU=0jfWM aѽҥh66Ю`Ҕ#H"5}jm. Sn%;Y+X'hqD)RŠb|JGAv8)^MR.\ߜ(u)|^gՎvO\BY@͵WG{-hiMI+RB2c &cA)kptD$Z?)"FL![GA'LSpwCJCfr{z](x8 Eԝz.680cB mhb"NX᭮eO4J9*Ll|E@T#8j]teZah)pC."}Q)}$64+}IGaKa[ /JXmR$ʭ݀ aʎ]C_NowR HMU ykN-0 s]w3IV?'/苨N5'H?ٰ|U?sT;tT[4G.ˌԏSc?O;I6}8>+\9_* K9p{YéW#u^8>0"VEBqq,i-8>uX(1UUX?5${ξmq"$SY 95)q ugaPkcEpم[+%9J;=(jaPYo wY|,,soAnU<)͊{I0ln+Jf^t"^4+*@h}zš7 C 0) &'Dc]t؝|Z[vd,x| fyibӂv:`'T0F•yF=JR&2&$*)+hw^>CFu}h^$O0vdU D!~܏ Sسo#e ײQڼ؃: Q YZ