389-ds-base-devel-1.3.2.23-1.fc20.scripts.2760_2761T>D ,0@831c3a1f317e7a09753973ca908bd89279a19385wp+uKA>6q?qd 6 e $ P  f  |        3 j  <  (\8d9 :7Gm Hn In4 Xn@YnL\n ]n ^oZbodpepfplptp up vqwqp xq yqqC389-ds-base-devel1.3.2.231.fc20.scripts.2760_2761Development libraries for 389 Directory ServerDevelopment Libraries and headers for the 389 Directory Server base package.Vҍcats-whiskers.mit.edu:GPLv2 with exceptionsDevelopment/Librarieshttp://port389.org/linuxx86_64~;&FLmA큤A큤VҌVҌVҌVҌVҌVҌVҍSKYSKYSKYVҌ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.so.0.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroot389-ds-base-1.3.2.23-1.fc20.scripts.2760_2761.src.rpm389-ds-base-devel389-ds-base-devel(x86-64)pkgconfig(dirsrv)@@    /usr/bin/pkg-config389-ds-base-libslibslapd.so.0()(64bit)nspr-develnss-developenldap-develpkgconfigrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)svrcore-develrpmlib(PayloadIsXz)1.3.2.23-1.fc20.scripts.2760_27613.0.4-14.6.0-14.0-15.2-14.11.3S@SSj@SR@SESS!@S"@S!S@Sz@Sz@S@R'R=R - 1.3.2.23-1Noriko Hosoi - 1.3.2.22-1Noriko Hosoi - 1.3.2.21-1Noriko Hosoi - 1.3.2.20-1Noriko Hosoi - 1.3.2.19-1Noriko Hosoi - 1.3.2.18-1Noriko Hosoi - 1.3.2.17-1Noriko Hosoi - 1.3.2.16-1Noriko Hosoi - 1.3.2.15-1Noriko Hosoi - 1.3.2.14-1Noriko Hosoi - 1.3.2.13-1Noriko Hosoi - 1.3.2.12-1Noriko Hosoi - 1.3.2.11-2Noriko Hosoi - 1.3.2.11-1Noriko Hosoi - 1.3.2.10-1Noriko Hosoi - 1.3.2.9-1Noriko Hosoi - 1.3.2.8-1Mark Reynolds - 1.3.2.7-1Rich Megginson - 1.3.2.6-1Rich Megginson - 1.3.2.5-1Mark Reynolds - 1.3.2.4-1Noriko Hosoi - 1.3.2.3-1Noriko Hosoi - 1.3.2.2-1Noriko Hosoi - 1.3.2.1-1Noriko Hosoi - 1.3.2.0-1Rich Megginson - 1.3.1.11-1Rich Megginson - 1.3.1.10-1Noriko Hosoi - 1.3.1.9-1Rich Megginson - 1.3.1.8-1Noriko Hosoi - 1.3.1.7-1Petr Pisar - 1.3.1.6-1.1Noriko Hosoi - 1.3.1.6-1Noriko Hosoi - 1.3.1.5-1Noriko Hosoi - 1.3.1.4-1Petr Pisar - 1.3.1.3-1.1Noriko Hosoi - 1.3.1.3-1Noriko Hosoi - 1.3.1.2-1Noriko Hosoi - 1.3.1.1-1Noriko Hosoi - 1.3.1.0-1Noriko Hosoi - 1.3.0.5-1Mark Reynolds - 1.3.0.4-1Noriko Hosoi - 1.3.0.3-1Parag Nemade - 1.3.0.2-2Noriko Hosoi - 1.3.0.2-1Noriko Hosoi - 1.3.0.1-1Noriko Hosoi - 1.3.0.0-1Noriko Hosoi - 1.3.0-0.3.rc3Noriko Hosoi - 1.3.0-0.2.rc2Noriko Hosoi - 1.3.0-0.1.rc1Mark Reynolds - 1.3.0.a1-1Rich Megginson - 1.2.11.15-1Rich Megginson - 1.2.11.14-1Rich Megginson - 1.2.11.13-1Rich Megginson - 1.2.11.12-1Mark Reynolds - 1.2.11.11-1Mark Reynolds - 1.2.11.10-1Mark Reynolds - 1.2.11.9-1Mark Reynolds - 1.2.11.8-1Fedora Release Engineering - 1.2.11.7-2.2Petr Pisar - 1.2.11.7-2.1Rich Megginson - 1.2.11.7-2Rich Megginson - 1.2.11.7-1Rich Megginson - 1.2.11.6-1Rich Megginson - 1.2.11.5-2Rich Megginson - 1.2.11.5-1Petr Pisar - 1.2.11.4-1.1Rich Megginson - 1.2.11.4-1Rich Megginson - 1.2.11.3-1Rich Megginson - 1.2.11.2-1Rich Megginson - 1.2.11.1-1Rich Megginson - 1.2.11-0.1.a1Noriko Hosoi - 1.2.10.4-4Noriko Hosoi - 1.2.10.4-3Rich Megginson - 1.2.10.4-2Rich Megginson - 1.2.10.4-1Rich Megginson - 1.2.10.3-1Rich Megginson - 1.2.10.2-1Noriko Hosoi - 1.2.10.1-2Rich Megginson - 1.2.10.1-1Rich Megginson - 1.2.10.0-1Noriko Hosoi - 1.2.10-0.10.rc1.2Petr Pisar - 1.2.10-0.10.rc1.1Rich Megginson - 1.2.10-0.10.rc1Rich Megginson - 1.2.10-0.9.a8Rich Megginson - 1.2.10-0.8.a7Rich Megginson - 1.2.10-0.7.a7Fedora Release Engineering - 1.2.10-0.6.a6.1Rich Megginson - 1.2.10-0.6.a6Rich Megginson - 1.2.10-0.5.a5Rich Megginson - 1.2.10-0.4.a4Rich Megginson - 1.2.10.a3-0.3Rich Megginson - 1.2.10.a2-0.2Rich Megginson - 1.2.10.a1-0.1Rich Megginson - 1.2.9.10-2Rich Megginson - 1.2.9.10-1Rich Megginson - 1.2.9.9-1Rich Megginson - 1.2.9.8-1Rich Megginson - 1.2.9.7-1Rich Megginson - 1.2.9.6-1Rich Megginson - 1.2.9.5-1Rich Megginson - 1.2.9.4-1Rich Megginson - 1.2.9.3-1Rich Megginson - 1.2.9.2-1Rich Megginson - 1.2.9.1-2Rich Megginson - 1.2.9.1-1Petr Sabata - 1.2.9.0-1.2Petr Sabata - 1.2.9.0-1.1Rich Megginson - 1.2.9.0-1Rich Megginson - 1.2.9-0.2.a2Marcela Mašláňová - 1.2.9-0.1.a1.2Marcela Mašláňová - 1.2.9-0.1.a1.1Rich Megginson - 1.2.9-0.1.a1Rich Megginson - 1.2.8.3-1Rich Megginson - 1.2.8.2-1Rich Megginson - 1.2.8.1-1Rich Megginson - 1.2.8.0-1Rich Megginson - 1.2.8-0.10.rc5Rich Megginson - 1.2.8-0.9.rc4Rich Megginson - 1.2.8-0.8.rc2Caolán McNamara - 1.2.8-0.7.rc1Rich Megginson - 1.2.8-0.6.rc1Rich Megginson - 1.2.8-0.5.a3Rich Megginson - 1.2.8-0.4.a3Rich Megginson - 1.2.8-0.3.a3Fedora Release Engineering - 1.2.8-0.2.a2.1Rich Megginson - 1.2.8-0.2.a2Nathan Kinder - 1.2.8-0.1.a1Rich Megginson - 1.2.7.5-1Rich Megginson - 1.2.7.4-2Rich Megginson - 1.2.7.4-1Rich Megginson - 1.2.7.3-1Rich Megginson - 1.2.7.2-1Rich Megginson - 1.2.7.1-2Rich Megginson - 1.2.7.1-1Nathan Kinder - 1.2.7-2Nathan Kinder - 1.2.7-1Rich Megginson - 1.2.7-0.6.a5Rich Megginson - 1.2.7-0.5.a4Rich Megginson - 1.2.7-0.4.a3Rich Megginson - 1.2.7-0.3.a3Rich Megginson - 1.2.7-0.2.a2Rich Megginson - 1.2.7-0.1.a1Rich Megginson - 1.2.6.1-3Rich Megginson - 1.2.6.1-2Rich Megginson - 1.2.6.1-1Rich Megginson - 1.2.6-1Rich Megginson - 1.2.6-0.11.rc7Rich Megginson - 1.2.6-0.10.rc6Rich Megginson - 1.2.6-0.9.rc3Rich Megginson - 1.2.6-0.8.rc3Rich Megginson - 1.2.6-0.7.rc2Nathan Kinder - 1.2.6-0.6.rc1Rich Megginson - 1.2.6-0.5.rc1Marcela Maslanova - 1.2.6-0.4.a4.1Rich Megginson - 1.2.6-0.4.a4Nathan Kinder - 1.2.6-0.4.a3Caolán McNamara - 1.2.6-0.3.a2Rich Megginson - 1.2.6-0.2.a2Nathan Kinder - 1.2.6-0.1.a1Rich Megginson - 1.2.5-1Rich Megginson - 1.2.5-0.5.rc4Rich Megginson - 1.2.5-0.4.rc3Rich Megginson - 1.2.5-0.3.rc2Rich Megginson - 1.2.5-0.2.rc1Rich Megginson - 1.2.5-0.1.a1Rich Megginson - 1.2.4-1Rich Megginson - 1.2.3-1Caolán McNamara - 1.2.2-2Rich Megginson - 1.2.2-1Tomas Mraz - 1.2.1-5Noriko Hosoi - 1.2.1-4Rich Megginson - 1.2.1-3Fedora Release Engineering - 1.2.1-2Rich Megginson - 1.2.1-1Rich Megginson - 1.2.0-4Rich Megginson - 1.2.0-3Rich Megginson - 1.2.0-2Rich Megginson - 1.2.0-1Noriko Hosoi - 1.1.3-7Noriko Hosoi - 1.1.3-6Rich Megginson - 1.1.3-5Rich Megginson - 1.1.3-4Rich Megginson - 1.1.3-3Rich Megginson - 1.1.3-2Rich Megginson - 1.1.3-1Rich Megginson - 1.1.2-1Rich Megginson - 1.1.1-2Rich Megginson - 1.1.1-1Rich Megginson - 1.1.0.1-4Tom "spot" Callaway - 1.1.0.1-3Tom "spot" Callaway - 1.1.0.1-3Rich Megginson - 1.1.0.1-2Rich Megginson - 1.1.0.1-1Fedora Release Engineering - 1.1.0-5Rich Megginson - 1.1.0-4Release Engineering - 1.1.0-3Rich Megginson - 1.1.0-2.0Rich Megginson - 1.1.0-1.2Rich Megginson - 1.1.0-1.1Rich Megginson - 1.1.0-0.3.20070720Nathan Kinder - 1.1.0-0.2.20070320Rich Megginson - 1.1.0-0.1.20070320Rich Megginson - 1.1.0-0.1.20070223Rich Megginson - 1.1.0-0.1.20070213Rich Megginson - 1.1.0-1.el4.20070209Rich Megginson - 1.1.0-1.el4.20070207Rich Megginson - 1.1.0-1.el4.20070129Rich Megginson - 1.1.0-8.el4.20070125Rich Megginson - 1.1.0-7.el4.20070125Rich Megginson - 1.1.0-6.el4.20070125Rich Megginson - 1.1.0-5.el4.20070125Rich Megginson - 1.1.0-4.el4.20070119Rich Megginson - 1.1.0-3.el4.20070119Rich Megginson - 1.1.0-2.el4.20070119Rich Megginson - 1.1.0-1.el4.cvs20070119Rich Megginson - 1.1-0.1.cvs20070115Dennis Gilmore - 1.1-0.1.cvs20070108Rich Megginson - 1.0.99-16Rich Megginson - 1.0.99-15Rich Megginson - 1.0.99-14Rich Megginson - 1.0.99-13Rich Megginson - 1.0.99-12Rich Megginson - 1.0.99-11Rich Megginson - 1.0.99-10Rich Megginson - 1.0.99-9Rich Megginson - 1.0.99-8Rich Megginson - 1.0.99-7Rich Megginson - 1.0.99-6Rich Megginson - 1.0.99-5Rich Megginson - 1.0.99-4Rich Megginson - 1.0.99-3Rich Megginson - 1.0.99-2Rich Megginson - 1.0.99-1- Release 1.3.2.23 - Ticket 47871 - 389-ds-base-1.3.2.21-1.fc20 crashed over the weekend - Ticket 47866 - Errors after upgrading related to attribute "dnaremotebindmethod" - Ticket 47816 - v2- internal syncrepl searches are flagged as unindexed - Ticket 47877 - check_and_add_entry fails for changetype: add and existing entry - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. - Ticket 47875 - dirsrv not running with old openldap - Revert "Ticket #47875 - dirsrv not running with old openldap" - Ticket 47875 - dirsrv not running with old openldap - Ticket 47446 - logconv.pl memory continually grows - Ticket 47874 - Performance degradation with scope ONE after some load - Ticket 47872 - Filter AND with only one clause should be optimized - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. - Ticket 47862 - repl-monitor fails to convert "*" to default values - Ticket 47824 - paged results control is not working in some cases when we have a subsuffix. - Ticket 47862 - Repl-monitor.pl ignores the provided connection parameters - Ticket 346 - Fixing memory leaks - Ticket 47753 - Add switch to disable pre-hashed password checking - Ticket 47861 - Certain schema files are not replaced during upgrade - Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server - Ticket 47797 - fix the indentation - Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL - Ticket 47692 - single valued attribute replicated ADD does not work - Ticket 47781 - Server deadlock if online import started while server is under load- Release 1.3.2.21 - Resolves: #1127833 Ticket 47869 - unauthenticated information disclosure (Bug 1123477) 389-ds-base-1.3.2.22 = 389-ds-base-1.3.2.19 + Bug 1127833 fix.- Release 1.3.2.21 - Resolves: #1127833 Ticket 47869 - unauthenticated information disclosure (Bug 1123477) - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. - Ticket 47862 - repl-monitor fails to convert "*" to default values - Ticket 47824 - paged results control is not working in some cases when we have a subsuffix. - Ticket 47862 - Repl-monitor.pl ignores the provided connection parameters - Ticket 346 - Fixing memory leaks- Release 1.3.2.20 - Ticket 47753 - Add switch to disable pre-hashed password checking - Ticket 47861 - Certain schema files are not replaced during upgrade - Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server - Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. - Ticket 47692 - single valued attribute replicated ADD does not work - Ticket 47781 - Server deadlock if online import started while server is under load- Release 1.3.2.19 - Ticket 47779 - Potential deadlock after startup if a dna configuration change is made - Ticket 47839 - 389-ds production segfault: __memcpy_sse2_unaligned...- Release 1.3.2.18 - Ticket 47750 - Creating a glue fails if one above level is a conflict or missing - Ticket 47763 - winsync plugin modify is broken - Ticket 47821 - deref plugin cannot handle complex acis - Ticket 47831 - server restart wipes out index config if there is a default index - Ticket 47817 - The error result text message should be obtained just prior to sending result - Ticket 47815 - Add operations rejected by betxn plugins remain in cache - Ticket 47809 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..." - Ticket 47704 - invalid sizelimits in aci group evaluation - Ticket 47813 - remove "goto bail" from previous commit - Ticket 47813 - managed entry plugin fails to update member pointer on modrdn operation - Ticket 47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed. - Ticket 47770 - #481 breaks possibility to reassemble memberuid list- Release 1.3.2.17 - Ticket 47446 - logconv.pl memory continually grows - Ticket 47713 - Logconv.pl with an empty access log gives lots of errors - Ticket 47806 - Failed deletion of aci: no such attribute - bump version - Ticket 47720 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator. - Ticket 47670 - Aci warnings in error log - Ticket 47721 - Schema Replication Issue (follow up) - Ticket 47721 - Schema Replication Issue (follow up + cleanup) - Ticket 47721 - Schema Replication Issue - Ticket 47676 - (cont.) Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1 - Ticket 47676 - Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1 - Ticket 47541 - Fix Jenkins errors - Ticket 47541 - Replication of the schema may overwrite consumer 'attributetypes' even if consumer definition is a superset - Ticket 47804 - db2bak.pl error with changelogdb - Ticket 47780 - Some VLV search request causes memory leaks - Ticket 47787 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone - Ticket 47764 - Problem with deletion while replicated - Ticket 47750 - Creating a glue fails if one above level is a conflict or missing; Ticket 47696 - Large Searches Hang - Possibly entryrdn related - Ticket 47772 - fix coverity issue - Ticket 47793 - Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled. - Ticket 47792 - database plugins need a way to call betxn plugins - Ticket 47707 - 389 DS Server crashes and dies while handles paged searches from clients - Ticket 47792 - code cleanup - Ticket 47779 - Need to lock server list when removing list - Ticket 47771 - Move parentsdn initialization to avoid crash - Ticket 47779 - Part of DNA shared configuration is deleted after server restart - Ticket 346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values - Ticket 47782 - Parent numbordinate count can be incorrectly updated if an error occurs - Ticket 47772 - empty modify returns LDAP_INVALID_DN_SYNTAX - Ticket 47774 - mem leak in do_search - rawbase not freed upon certain errors - Ticket 47773 - mem leak in do_bind when there is an error - Ticket 47771 - Performing deletes during tombstone purging results in operation errors - Ticket 47767 - Nested tombstones become orphaned after purge - Ticket 47766 - Tombstone purging can crash the server if the backend is stopped/disabled - Ticket 47759 - Crash in replication when server is under write load - Ticket 47740 - Fix coverity issues(part 7) - Ticket 47748 - Simultaneous adding a user and binding as the user could fail in the password policy check - Ticket 47743 - Memory leak with proxy auth control - Ticket 47740 - Crash caused by changes to certmap.c - Ticket 47733 - ds logs many "Operation error fetching Null DN" messages - Ticket 47740 - Fix coverity issues: null deferences - Part 6 - Ticket 47732 - ds logs many "SLAPI_PLUGIN_BE_TXN_POST_DELETE_FN plugin returned error" messages - Ticket 47740 - Coverity issue in 1.3.3 - Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry - Ticket 47740 - Fix coverity issues - Part 5 - Ticket 47740 - Fix coverity erorrs - Part 4 - Ticket 47640 - Fix coverity issues - part 3 - Ticket 47740 - Fix sync plugin resource leaks - Ticket 47538 - RFE: repl-monitor.pl plain text output, cmdline config options - Ticket 47740 - Coverity Fixes (Mark - part 1) - Ticket 47734 - Change made in resolving ticket #346 fails on Debian SPARC64 - Ticket 47722 - Fixed filter not correctly identified - Ticket 47722 - rsearch filter error on any search filter- Release 1.3.2.16 (This release is 1.3.2.13 + Ticket 47739) - Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind- Bump version to 1.3.2.15 - Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry - Ticket 47740 - Coverity issue in 1.3.3 - Ticket 47740 - Fix coverity issues - Part 5 - Ticket 47740 - Fix coverity erorrs - Part 4 - Ticket 47640 - Fix coverity issues - part 3 - Ticket 47740 - Fix sync plugin resource leaks - Ticket 47538 - RFE: repl-monitor.pl plain text output, cmdline config options - Ticket 47740 - Coverity Fixes (Mark - part 1) - Ticket 47734 - Change made in resolving ticket #346 fails on Debian SPARC64 - Ticket 47722 - Fixed filter not correctly identified - Ticket 47722 - rsearch filter error on any search filter- Bump version to 1.3.2.14 - Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind - Ticket 47737 - Under heavy stress, failure of turning a tombstone into glue makes the server hung - Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry - Ticket 47729 - Directory Server crashes if shutdown during a replication initialization - Ticket 47637 - rsa_null_sha should not be enabled by default- Bump version to 1.3.2.13 - The previous version 1.3.2.12 missed to increment the version in VERSION.sh- Bump version to 1.3.2.12 - Ticket 408 - create a normalized dn cache - Ticket 571 - Empty control list causes LDAP protocol error is thrown (dup 47361) - Ticket 408 - create a normalized dn cache - Ticket 47699 - Propagate plugin precedence to all registered function types - Ticket 525 - Replication retry time attributes cannot be added - Ticket 47709 - package issue in 389-ds-base - Ticket 47700 - Unresolved external symbol references break loading of the ACL plugin - Ticket 47642 - Windows Sync group issues - Ticket 525 - Replication retry time attributes cannot be added - Ticket 47692 - single valued attribute replicated ADD does not work - Ticket 47615 - Failed to compile the DS 389 1.3.2.3 version against Berkeley DB 4.2 version - Ticket 47677 - Size returned by slapi_entry_size is not accurate - Ticket 47693 - Environment variables are not passed when DS is started via service- Added arch aware python dir; moved libns-dshttpd.so* to devel and libs package.- Bump version to 1.3.2.11 - Ticket 47653 - Need a way to allow users to create entries assigned to themselves. - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used - Ticket 47374 - flush.pl is not included in perl5 - Ticket 47649 - Server hangs in cos_cache when adding a user entry - Ticket 443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error - Ticket 47638 - Overflow in nsslapd-disk-monitoring-threshold on 32bit platform - Ticket 47641 - 7-bit check plugin not checking MODRDN operation - Ticket 342 - better error message when cache overflows - Ticket 47516 - replication stops with excessive clock skew - Ticket 47620 - Unable to delete protocol timeout attribute - Ticket 408 - Fix crash when disabling/enabling the setting - Ticket 47629 - random crashes related to sync repl - Ticket 47571 - targetattr ACIs ignore subtype - Ticket 47660 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read - Revert "Ticket 47653 - Need a way to allow users to create entries assigned to themselves"- Bump version to 1.3.2.10 - Ticket 447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs - Ticket 47653 - Need a way to allow users to create entries assigned to themselves - Ticket 47647 - remove bogus definition in 60rfc3712.ldif - Ticket 47634 - support AttributeTypeDescription USAGE userApplications distributedOperation dSAOperation - Ticket 47645 - reset stack, op fields to NULL - clean up stacks at shutdown - free unused plugin config entries- Bump version to 1.3.2.9 - Ticket 47621 - v2 make referential integrity configuration more flexible - Ticket 47620 - Fix missing left bracket - Ticket 47620 - Fix dereferenced NULL pointer in agmtlist_modify_callback() - Ticket 47606 - replica init/bulk import errors should be more verbose - Ticket 47631 - objectclass may, must lists skip rest of objectclass once first is found in sup - Ticket 47627 - Fix replication logging - Ticket 47620 - Fix logically dead code. - Ticket 47313 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result - Ticket 47620 - Config value validation improvement - Ticket 47620 - Fix cherry-pick error for 1.3.2 and 1.3.1 - Ticket 47613 - Issues setting allowed mechanisms - Ticket 47617 - allow configuring changelog trim interval - Ticket 47601 - Plugin library path validation prevents intentional loading of out-of-tree modules - Ticket 47627 - changelog iteration should ignore cleaned rids when getting the minCSN - Ticket 47623 - fix memleak caused by 47347 - Ticket 47622 - Automember betxnpreoperation - transaction not aborted when group entry does not exist - Ticket 47623 - fix memleak caused by 47347 - Ticket 47620 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute- Bump version to 1.3.2.8 - Ticket 47612 - ns-slapd eats all the memory - Ticket 47527 - Allow referential integrity suffixes to be configurable - Ticket 47526 - Allow memberof suffixes to be configurable - Ticket 342 - better error message when cache overflows (phase 2) - Ticket 47587 - hard coded limit of 64 masters in agreement and changelog code - Ticket 47611 - Add script to build patched RPMs - Ticket 47614 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms - Ticket 47613 - Impossible to configure nsslapd-allowed-sasl-mechanisms - Ticket 47592 - automember plugin task memory leaks - Ticket 47591 - entries with empty objectclass attribute value can be hidden - Ticket 47596 - attrcrypt fails to find unlocked key- 924ead4 Bump version to 1.3.2.7 - Ticket 47593 - Update plugin API for OTP plugin - Ticket 47599 - fix memory leak in ldbm_back_seq()- Ticket 47599 - Reduce lock scope in retro changelog plug-in - previous fix missing defition of retrocl_cn_lock- Ticket #47605 CVE-2013-4485: DoS due to improper handling of ger attr searches6cdca01 bump version to 1.3.2.4 Ticket 47599 - Reduce lock scope in retro changelog plug-in Ticket 47596 - attrcrypt fails to find unlocked key Ticket 47598 - Convert ldbm_back_seq code to be transaction aware Ticket 47597 - Convert retro changelog plug-in to betxn Ticket 47585 - Replication Failures related to skipped entries due to cleaned rids Ticket 47588 - Compiler warnings building on F19 Ticket 47581 - Winsync plugin segfault during incremental backoff (phase 2) Ticket 47581 - Winsync plugin segfault during incremental backoff Ticket 47577 - crash when removing entries from cache 6b16d30 Revert "Ticket #47559 hung server - related to sasl and initialize"- release 1.3.2.3 - Ticket 47515 - Fedora 20: setup-ds-admin.pl - Ticket 47569 - Fix build warnings - Ticket 47569 - ACIs do not allow attribute subtypes in targetattr keyword - Ticket 47565 - Content Sync update file needs extensibleObject - Ticket 47560 - fixup memberof task does not work: task entry not added - Ticket 47559 - hung server - related to sasl and initialize- release 1.3.2.2 - Ticket 47517 - memory leak in range searches and other various leaks - ticket 47550 - wip (cherry picked from commit 82377636267787be5182457d619d5a0b662d2658) - Ticket 47550 - logconv: failed logins: Use of uninitialized value in numeric comparison at logconv.pl line 949- release 1.3.2.1 - Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/lock - Ticket 47551 - logconv: -V does not produce unindexed search report - Ticket 47490 - Schema replication between DS versions may overwrite newer base schema- release 1.3.2.0 - Ticket 48 - Active Directory has certain uids which are reserved and will cause a Directory Server replica initialization of an AD server to abort. - Ticket 53 - Need to update supported locales - Ticket 54 - locale "nl" not supported by collation plugin - Ticket 77 - [RFE] Add ACI support for ldapi - Ticket 123 - Enhancement request: "whoami" extended operation - Ticket 153 - Schema file parsing overly picky? - Ticket 182 - Pwd retry counters replication not enabled by default, and enabling it could lead to undesired results - Ticket 197 - rhds82 rfe - BDB backend - clear free page files to reduce changelog size - Ticket 205 - rhds81 rfe - snmp counters index strings for multiple network interfaces with ip addr and tcp port pairs - Ticket 208 - [RFE] Roles with explicit scoping in RHDS - Ticket 283 - Expose slapi_eq_* API - Ticket 314 - ChainOnUpdate: "cn=directory manager" can modify userRoot on consumer without changes being chained or replicated. Directory integrity compromised. - Ticket 411 - [RFE] mods optimizer - Ticket 415 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist - Ticket 428 - posix winsync should support ADD user/group entries from DS to AD - Ticket 460 - support multiple subtrees and filters - Ticket 512 - improve performance of vattr code - Ticket 513 - recycle operation pblocks - Ticket 514 - investigate connection locking - Ticket 521 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change - Ticket 564 - Is ldbm_txn_ruv_modify_context still required ? - Ticket 568 - using transaction batchval violates durability - Ticket 569 - examine replication code to reduce amount of stored state information - Ticket 586 - selinux errors with /usr/sbin/setup-ds-admin.pl - Ticket 589 - [RFE] Support RFC 4527 Read Entry Controls - Ticket 601 - multi master replication allows schema violation - Ticket 602 - replication inconsistency if attribute is modified several times in one operaion - Ticket 607 - Replication issue: Entry can diverge betwen servers - Ticket 609 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts. - Ticket 615 - High contention on cos cache lock - Ticket 617 - Possible to add invalid ACI value - Ticket 626 - Possible to add nonexistent target to ACI - Ticket 630 - The backend name provided to bak2db is not validated - Ticket 47306 - execute index_add_mods only for indexed attributes - Ticket 47310 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync - Ticket 47313 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result - Ticket 47314 - Winsync should support range retrieval - Ticket 47316 - Search against 'view' is always reported as unindexed - Ticket 47317 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default - Ticket 47319 - make connection buffer size adjustable - Ticket 47320 - put conn on work_q not poll list if conn has buffered more_data - Ticket 47323 - resurrected entry is not correctly indexed - Ticket 47326 - idl switch does not work - Ticket 47329 - Improve slapi_back_transaction_begin() return code when transactions are not available - Ticket 47331 - Self entry access ACI not working properly - Ticket 47337 - mep_pre_op: Unable to fetch origin entry - Ticket 47340 - Deleting a separator ',' in 7-bit check plugin arguments makes the server fail to start with segfault - Ticket 47350 - Allow search to look up 'in memory RUV' - Ticket 47354 - Indexed search are logged with 'notes=U' in the access logs - Ticket 47358 - backend performance - introduce optimization levels - Ticket 47360 - Delete attribute could crash the server - Ticket 47363 - 7-bit checking is not necessary for userPassword - Ticket 47370 - DS crashes with some 7-bit check plugin configurations - Ticket 47371 - Some updates of "passwordgraceusertime" are useless when updating "userpassword" - Ticket 47372 - make old-idl tunable - Ticket 47381 - nsslapd-db-transaction-batch-val turns to -1 - Ticket 47382 - Add a warning message when a connection hits the max number of threads - Ticket 47384 - Plugin library path validation - Ticket 47387 - improve logconv.pl performance with large access logs - Ticket 47388 - [RFE] Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533 - Ticket 47389 - Non-directory manager can change the individual userPassword's storage scheme - Ticket 47394 - remove-ds.pl should remove /var/lock/dirsrv - Ticket 47400 - MMR stress test with dna enabled causes a deadlock - Ticket 47411 - Replace substring search with plain search in referint plugin - Ticket 47416 - IPA replica's - "SASL encrypted packet length exceeds maximum allowed limit" - Ticket 47423 - 7-bit check plugin does not work for userpassword attribute - Ticket 47425 - should only call windows_update_done if repl agmt type is windows - Ticket 47426 - move compute_idletimeout out of handle_pr_read_ready - Ticket 47433 - With SeLinux, ports can be labelled per range. setup-ds.pl or setup-ds-admin.pl fail to detect already ranged labelled ports - Ticket 47463 - IDL-style can become mismatched during partial restoration - Ticket 47487 - enhance retro changelog - Ticket 47502 - updates to ruv entry are written to retro changelog - Ticket 47504 - idlistscanlimit per index/type/value - Ticket 47505 - get rid of valueset_add_valuearray_ext - Ticket 47520 - Fix various issues with logconv.pl - Ticket 47522 - Password administrators should be able to violate password policy - Ticket 47531 - 1.3.2 with mozldap - need to redo sasl_io_recv - Ticket 47532 - 1.3.2 with mozldap - crashes in new operation work_q - Ticket 47539 - Disabling DNA plug-in throws error 53 - Ticket 47543 - mozldap - fix compiler warnings- Ticket 47513 - Set localrundir outside of the "with-fhs" block - Ticket 47513 - Refine the check for @localrundir@ - Ticket 47510 - remove unnecessary typedef - Ticket 47510 - Repl Sync does not compile against MozLDAP libraries- Ticket #47534 - RUV tombstone search with scope "one" doesn`t work - Ticket 47510 - 389-ds-base does not compile against MozLDAP libraries - Ticket #47523 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch - Ticket 47528 - 389-ds-base built with mozldap can crash from invalid free - Ticket #47504 idlistscanlimit per index/type/value - Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/lock - Ticket #47492 - PassSync removes User must change password flag on the Windows side - Ticket 47509 - CLEANALLRUV doesnt run across all replicas - Ticket #47516 replication stops with excessive clock skew - 6829200 Coverity fix - 11952 - for Ticket 47512 - Ticket 47512 - backend txn plugin fixup tasks should be done in a txn- release 1.3.1.9 - Ticket 449 - Allow macro aci keywords to be case-insensitive - Ticket 47489 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing - Ticket 47507 - automember rebuild task not working as expected- Ticket #47455 - valgrind - value mem leaks, uninit mem usage - fix breakage in slapi-nis introduced with the previous fix - Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly- bump version to 1.3.1.7 - Bug 1002215 - CVE-2013-4283 389-ds-base: ns-slapd crash due to bogus DN - Ticket 47488 - Users from AD sub OU does not sync to IPA - Ticket 47461 - logconv.pl - Use of comma-less variable list is deprecated - Ticket 47473 - setup-ds.pl doesn't lookup the "root" group correctly- Perl 5.18 rebuild- bump version to 1.3.1.6 - Ticket 47455 - valgrind - value mem leaks, uninit mem usage - fix coverity 11915 - dead code - introduced with fix for ticket 346 - fix coverity 11895 - null deref - caused by fix to ticket 47392 - fix compiler warning in posix winsync code for posix_group_del_memberuid_callback - Fix compiler warnings for Ticket 47395 and 47397 - fix compiler warning (cherry picked from commit 904416f4631d842a105851b4a9931ae17822a107) - Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch - fix compiler warnings - Fix compiler warning (cherry picked from commit ec6ebc0b0f085a82041d993ab2450a3922ef5502)- bump version to 1.3.1.5 - Ticket 47456 - delete present values should append values to deleted values - Ticket 47455 - valgrind - value mem leaks, uninit mem usage - Ticket 47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication - Ticket 47440 - Fix runtime errors caused by last patch. - Ticket 47440 - Fix compilation warnings and header files - Ticket 47405 - CVE-2013-2219 ACLs inoperative in some search scenarios - Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D - Ticket 47378 - fix recent compiler warnings - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47449 - deadlock after adding and deleting entries - Ticket 47441 - Disk Monitoring not checking filesystem with logs - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold- bump version to 1.3.1.4 - Ticket 47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negative. - Ticket 47424 - Replication problem with add-delete requests on single-valued attributes - Ticket 47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry - Ticket 47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry - Ticket 47421 - memory leaks in set_krb5_creds - Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute values - Ticket 47369 version2 - provide default syntax plugin - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47399 - RHDS denies MODRDN access if ACI list contains any DENY rule - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47428 - Memory leak in 389-ds-base 1.2.11.15 - Ticket 47392 - ldbm errors when adding/modifying/deleting entries - Ticket 47385 - Disk Monitoring is not triggered as expected. - Ticket 47410 - changelog db deadlocks with DNA and replication- Perl 5.18 rebuild- bump version to 1.3.1.3 - Ticket 47374 - flush.pl is not included in perl5 - Ticket 47391 - deleting and adding userpassword fails to update the password (additional fix) - Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization - Ticket 47395 47397 - v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured - Ticket 47396 - crash on modrdn of tombstone - Ticket 47400 - MMR stress test with dna enabled causes a deadlock - Ticket 47409 - allow setting db deadlock rejection policy - Ticket 47419 - Unhashed userpassword can accidentally get removed from mods - Ticket 47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'- bump version to 1.3.1.2 - Ticket 47391 - deleting and adding userpassword fails to update the password - Coverity Fixes (Part 7)- bump version to 1.3.1.1 - Ticket 402 - nhashed#user#password in entry extension - Ticket 511 - Revision - allow turning off vattr lookup in search entry return - Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate - Ticket 47327 - error syncing group if group member user is not synced - Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback - Ticket 47359 - new ldap connections can block ldaps and ldapi connections - Ticket 47362 - ipa upgrade selinuxusermap data not replicating - Ticket 47375 - flush_ber error sending back start_tls response will deadlock - Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3) - Ticket 47377 - make listen backlog size configurable - Ticket 47378 - fix recent compiler warnings - Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice - Ticket 47385 - DS not shutting down when disk monitoring threshold is reached - Coverity Fixes (part 1) - Coverity Fixes (Part 2) - Coverity Fixes (Part 3) - Coverity Fixes (Part 4) - Coverity Fixes (Part 5)- bump version to 1.3.1.0 - Ticket 332 - Command line perl scripts should attempt most secure connection type first - Ticket 342 - better error message when cache overflows - Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager - Ticket 419 - logconv.pl - improve memory management - Ticket 422 - 389-ds-base - Can't call method "getText" - Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts - Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used - Ticket 487 - Possible to add invalid attribute values to PAM PTA plugin configuration - Ticket 502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen - Ticket 505 - use lock-free access name2asi and oid2asi tables (additional) - Ticket 508 - lock-free access to FrontendConfig structure - Ticket 511 - allow turning off vattr lookup in search entry return - Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time - Ticket 528 - RFE - get rid of instance specific scripts - Ticket 529 - dn normalization must handle multiple space characters in attributes - Ticket 532 - RUV is not getting updated for both Master and consumer - Ticket 533 - only scan for attributes to decrypt if there are encrypted attrs configured - Ticket 534 - RFE: Add SASL mappings fallback - Ticket 537 - Improvement of range search - Ticket 539 - logconv.pl should handle microsecond timing - Ticket 543 - Sorting with attributes in ldapsearch gives incorrect result - Ticket 545 - Segfault during initial LDIF import: str2entry_dupcheck() - Ticket 547 - Incorrect assumption in ndn cache - Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval - Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation - Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration - Ticket 558 - Replication - make timeout for protocol shutdown configurable - Ticket 561 - disable writing unhashed#user#password to changelog - Ticket 563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized. - Ticket 565 - turbo mode and replication - allow disable of turbo mode - Ticket 571 - server does not accept 0 length LDAP Control sequence - Ticket 574 - problems with dbcachesize disk space calculation - Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions - Ticket 585 - Behaviours of "db2ldif -a " and "db2ldif.pl -a " are inconsistent - Ticket 587 - Replication error messages in the DS error logs - Ticket 588 - Create MAN pages for command line scripts - Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control - Ticket 603 - A logic error in str2simple - Ticket 604 - Required attribute not checked during search operation - Ticket 608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message - Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND - Ticket 612 - improve dbgen rdn generation, output - Ticket 613 - ldclt: add timestamp, interval, nozeropad, other improvements - Ticket 616 - High contention on computed attribute lock - Ticket 618 - Crash at shutdown while stopping replica agreements - Ticket 620 - Better logging of error messages for 389-ds-base - Ticket 621 - modify operations without values need to be written to the changelog - Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory - Ticket 631 - Replication: "Incremental update started" status message without consumer initialized - Ticket 633 - allow nsslapd-nagle to be disabled, and also tcp cork - Ticket 47299 - allow cmdline scripts to work with non-root user - Ticket 47302 - get rid of sbindir start/stop/restart slapd scripts - Ticket 47303 - start/stop/restart dirsrv scripts should report and error if no instances - Ticket 47304 - reinitialization of a master with a disabled agreement hangs - Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task) - Ticket 47312 - replace PR_GetFileInfo with PR_GetFileInfo64 - Ticket 47315 - filter option in fixup-memberof requires more clarification - Ticket 47325 - Crash at shutdown on a replica aggrement - Ticket 47330 - changelog db extension / upgrade is obsolete - Ticket 47336 - logconv.pl -m not working for all stats - Ticket 47341 - logconv.pl -m time calculation is wrong - Ticket 47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide - Ticket 47347 - Simple paged results should support async search - Ticket 47348 - add etimes to per second/minute stats - Ticket 47349 - DS instance crashes under a high load- bump version to 1.3.0.5 - Ticket 47308 - unintended information exposure when anonymous access is set to rootdse - Ticket 628 - crash in aci evaluation - Ticket 627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so - Ticket 634 - Deadlock in DNA plug-in Ticket #576 - DNA: use event queue for config update only at the start up - Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC - Ticket 623 - cleanAllRUV task fails to cleanup config upon completion- e53d691 bump version to 1.3.0.4 - Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data - Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled) - Ticket 490 - Slow role performance when using a lot of roles - Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry- bump version to 1.3.0.3 - Ticket #584 - Existence of an entry is not checked when its password is to be deleted - Ticket 562 - Crash when deleting suffix- Rebuild for icu 50- bump version to 1.3.0.2 - Ticket #542 - Cannot dynamically set nsslapd-maxbersize- bump version to 1.3.0.1 - Ticket 556 - Don't overwrite certmap.conf during upgrade- bump version to 1.3.0.0- bump version to 1.3.0.rc3 - Ticket 549 - DNA plugin no longer reports additional info when range is depleted - Ticket 541 - need to set plugin as off in ldif template - Ticket 541 - RootDN Access Control plugin is missing after upgrade- bump version to 1.3.0.rc2 - Trac Ticket #497 - Escaped character cannot be used in the substring search filter - Ticket 509 - lock-free access to be->be_suffixlock - Trac Ticket #522 - betxn: upgrade is not implemented yet- bump version to 1.3.0.rc1 - Ticket #322 - Create DOAP description for the 389 Directory Server project - Trac Ticket #499 - Handling URP results is not corrrect - Ticket 509 - lock-free access to be->be_suffixlock - Ticket 456 - improve entry cache sizing - Trac Ticket #531 - loading an entry from the database should use str2entry_f - Trac Ticket #536 - Clean up compiler warnings for 1.3 - Trac Ticket #531 - loading an entry from the database should use str2entry_fast - Ticket 509 - lock-free access to be->be_suffixlock - Ticket 527 - ns-slapd segfaults if it cannot rename the logs - Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't - Ticket 216 - disable replication agreements - Ticket 518 - dse.ldif is 0 length after server kill or machine kill - Ticket 393 - Change in winSyncInterval does not take immediate effect - Ticket 20 - Allow automember to work on entries that have already been added - Coverity Fixes - Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5 - Ticket 337 - improve CLEANRUV functionality - Fix for ticket 504 - Ticket 394 - modify-delete userpassword - minor fixes for bdb 4.2/4.3 and mozldap - Trac Ticket #276 - Multiple threads simultaneously working on connection's private buffer causes ns-slapd to abort - Fix for ticket 465: cn=monitor showing stats for other db instances - Ticket 507 - use mutex for FrontendConfig lock instead of rwlock - Fix for ticket 510 Avoid creating an attribute just to determine the syntax for a type, look up the syntax directly by type - Coverity defect: Resource leak 13110 - Ticket 517 - crash in DNA if no dnaMagicRegen is specified - Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry - Trac Ticket #519 - Search with a complex filter including range search is slow - Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error - Trac Ticket #311 - IP lookup failing with multiple DNS entries - Trac Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs - Trac Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error - Ticket #503 - Improve AD version in winsync log message - Trac Ticket #190 - Un-resolvable server in replication agreement produces unclear error message - Coverity fixes - Trac Ticket #391 - Slapd crashes when deleting backends while operations are still in progress - Trac Ticket #448 - Possible to set invalid macros in Macro ACIs - Trac Ticket #498 - Cannot abaondon simple paged result search - Coverity defects - Trac Ticket #494 - slapd entered to infinite loop during new index addition - Fixing compiler warnings in the posix-winsync plugin - Coverity defects - Ticket 147 - Internal Password Policy usage very inefficient - Ticket 495 - internalModifiersname not updated by DNA plugin - Revert "Ticket 495 - internalModifiersname not updated by DNA plugin" - Ticket 495 - internalModifiersname not updated by DNA plugin - Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h]) - Ticket 486 - nsslapd-enablePlugin should not be multivalued - Ticket 488 - Doc: DS error log messages with typo - Trac Ticket #451 - Allow db2ldif to be quiet - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes - Ticket #481 - expand nested posix groups - Trac Ticket #455 - Insufficient rights to unhashed#user#password when user deletes his password - Ticket #446 - anonymous limits are being applied to directory managerTicket #28 MOD operations with chained delete/add get back error 53 on backend config Ticket #173 ds-logpipe.py script's man page and script help should be updated for -t option. Ticket #196 RFE: Interpret IPV6 addresses for ACIs, replication, and chaining Ticket #218 RFE - Make RIP working with Replicated Entries Ticket #328 make sure all internal search filters are properly escaped Ticket #329 389-admin build fails on F-18 with new apache Ticket #344 deadlock in replica_write_ruv Ticket #351 use betxn plugins by default Ticket #352 make cos, roles, views betxn aware Ticket #356 logconv.pl - RFE - track bind info Ticket #365 Audit log - clear text password in user changes Ticket #370 Opening merge qualifier CoS entry using RHDS console changes the entry. Ticket #372 Setting nsslapd-listenhost or nsslapd-securelistenhost breaks ACI processing Ticket #386 Overconsumption of memory with large cachememsize and heavy use of ldapmodify Ticket #402 unhashedTicket #userTicket #password in entry extension Ticket #408 Create a normalized dn cache Ticket #453 db2index with -tattrname:type,type fails Ticket #461 fix build problem with mozldap c sdk Ticket #462 add test for include file mntent.h Ticket #463 different parameters of getmntent in Solaris- Trac Ticket #470 - 389 prevents from adding a posixaccount with userpassword after schema reload - Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang - Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start - Ticket 473 - change VERSION.sh to have console version be major.minor - Ticket 475 - Root DN Access Control - improve value checking for config - Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension - Ticket 474 - Root DN Access Control - days allowed not working correctly - Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas - 0b79915 fix compiler warnings in ticket 374 code - Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope- Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement - Ticket 386 - large memory growth with ldapmodify(heap fragmentation) - this patch doesn't fix the bug - it allows us to experiment with - different values of mxfast - Ticket #374 - consumer can go into total update mode for no reason- Ticket #426 - support posix schema for user and group sync - 1) plugin config ldif must contain pluginid, etc. during upgrade or it - will fail due to schema errors - 2) posix winsync should have a lower precedence (25) than the default (50) - so that it will be run first - 3) posix winsync should support the Winsync API v3 - the v2 functions are - just stubs for now - but the precedence cb is active- 8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete - Trac Ticket #437 - variable dn should not be used in ldbm_back_delete - ba1f5b2 fix coverity resource leak in windows_plugin_add - e3e81db Simplify program flow: change while loops to for - a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0) - 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar - 77eb760 Simplify program flow: eliminate unnecessary continue - c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new - a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking - d49035c Factorize into new isPosixGroup function - 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free - 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain - Ticket #440 - periodic dirsync timed event causes server to loop repeatedly - Ticket #355 - winsync should not delete entry that appears to be out of scope - Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values. - 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code - 2734a71 CLEANALLRUV coverity fixes - Ticket #426 - support posix schema for user and group sync - Ticket #430 - server to server ssl client auth broken with latest openldap6c0778f bumped version to 1.2.11.11 Ticket 429 - added nsslapd-readonly to DS schema Ticket 403 - fix CLEANALLRUV regression from last commit Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute valuesdb6b354 bumped version to 1.2.11.10 Ticket 403 - CLEANALLRUV revisionsea05e69 Bumped version to 1.2.11.9 Ticket 407 - dna memory leak - fix crash from prev fixddcf669 bump version to 1.2.11.8 for offical release Ticket #425 - support multiple winsync plugins Ticket 403 - cleanallruv coverity fixes Ticket 407 - memory leak in dna plugin Ticket 403 - CLEANALLRUV feature Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs 3168f04 Coverity defects 5ff0a02 COVERITY FIXES Ticket #388 - Improve replication agreement status messages 0760116 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion Ticket #409 - Report during startup if nsslapd-cachememsize is too small Ticket #412 - memberof performance enhancement 12813: Uninitialized pointer read string_values2keys Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values Ticket #410 - Referential integrity plug-in does not work when update interval is not zero Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled Ticket #405 - referint modrdn not working if case is different Ticket 399 - slapi_ldap_bind() doesn't check bind results- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Perl 5.16 rebuild- Ticket 378 - unhashed#user#password visible after changing password - fix func declaration from previous patch - Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error- Trac Ticket 396 - Account Usability Control Not Working- Ticket #378 - audit log does not log unhashed password: enabled, by default. - Ticket #378 - unhashed#user#password visible after changing password - Ticket #365 - passwords in clear text in the audit log- workaround for https://bugzilla.redhat.com/show_bug.cgi?id=833529- Ticket #387 - managed entry sometimes doesn't delete the managed entry - 5903815 improve txn test index handling - Ticket #360 - ldapmodify returns Operations error - fix delete caching - bcfa9e3 Coverity Fix for CLEANALLRUV - Trac Ticket #335 - transaction retries need to be cache aware - Ticket #389 - ADD operations not in audit log - 44cdc84 fix coverity issues with uninit vals, no return checking - Ticket 368 - Make the cleanAllRUV task one step - Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week- Perl 5.16 rebuild- Ticket #360 - ldapmodify returns Operations error - Ticket #321 - krbExtraData is being null modified and replicated on each ssh login - Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress - Ticket #361: Bad DNs in ACIs can segfault ns-slapd - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object - Ticket #337 - Improve CLEANRUV task- Ticket #358 - managed entry doesn't delete linked entry- Ticket #351 - use betxn plugins by default - revert - make no plugins betxn by default - too great a risk - for deadlocks until we can test this better - Ticket #348 - crash in ldap_initialize with multiple threads - fixes PR_Init problem in ldclt- f227f11 Suppress alert on unavailable port with forced setup - Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return - Ticket #351 - use betxn plugins by default - Trac Ticket #345 - db deadlock return should not log error - Ticket #348 - crash in ldap_initialize with multiple threads - Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied - Ticket #207 - [RFE] enable attribute that tracks when a password was last set - Ticket #216 - RFE - Disable replication agreements - Ticket #337 - RFE - Improve CLEANRUV functionality - Ticket #326 - MemberOf plugin should work on all backends - Trac Ticket #19 - Convert entryUSN plugin to transaction aware type - Ticket #347 - IPA dirsvr seg-fault during system longevity test - Trac Ticket #310 - Avoid calling escape_string() for logged DNs - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object - Ticket #183 - passwordMaxFailure should lockout password one sooner - Trac Ticket #335 - transaction retries need to be cache aware - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - Ticket #325 - logconv.pl : use of getopts to parse command line options - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - 554e29d Coverity Fixes - Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions - Ticket #315 - small fix to libglobs - Ticket #315 - ns-slapd exits/crashes if /var fills up - Ticket #20 - Allow automember to work on entries that have already been added - Trac Ticket #45 - Fine Grained Password policy: if passwordHistory is on, deleting the password fails.- 453eb97 schema def must have DESC '' - close paren must be preceded by space - Trac Ticket #46 - (additional) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #331 - transaction errors with db 4.3 and db 4.2 - Ticket #261 - Add Solaris i386 - Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks - Ticket #324 - Sync with group attribute containing () fails - Ticket #319 - ldap-agent crashes on start with signal SIGSEGV - 77cacd9 coverity 12606 Logically dead code - Trac Ticket #303 - make DNA range requests work with transactions - Ticket #320 - allow most plugins to be betxn plugins - Ticket #24 - Add nsTLS1 to the DS schema - Ticket #271 - Slow shutdown when you have 100+ replication agreements - TIcket #285 - compilation fixes for '--format-security' - Ticket 211 - Avoid preop range requests non-DNA operations - Ticket #271 - replication code cleanup - Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages. - Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration - Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs - 6f8680a coverity 12563 Read from pointer after free (fix 2) - e6a9b22 coverity 12563 Read from pointer after free - 245d494 Config changes fail because of unknown attribute "internalModifiersname" - Ticket #191 - Implement SO_KEEPALIVE in network calls - Ticket #289 - allow betxn plugin config changes - 93adf5f destroy the entry cache and dn cache in the dse post op delete callback - e2532d8 init txn thread private data for all database modes - Ticket #291 - cannot use & in a sasl map search filter - 6bf6e79 Schema Reload crash fix - 60b2d12 Fixing compiler warnings - Trac Ticket #260 - 389 DS does not support multiple paging controls on a single connection - Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName - fdcc256 Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e - Ticket #306 - void function cannot return value - ticket 181 - Allow PAM passthru plug-in to have multiple config entries - ticket 211 - Use of uninitialized variables in ldbm_back_modify() - Ticket #74 - Add schema for DNA plugin (RFE) - Ticket #301 - implement transaction support using thread local storage - Ticket #211 - dnaNextValue gets incremented even if the user addition fails - 144af59 coverity uninit var and resource leak - Trac Ticket #34 - remove-ds.pl does not remove everything - Trac Ticket #169 - allow 389 to use db5 - bc78101 fix compiler warning in acct policy plugin - Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints - Trac Ticket #27 - SASL/PLAIN binds do not work - Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFYops - Ticket #17 - new replication optimizations- Ticket #46 - (revised) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #66 - 389-ds-base spec file does not have a BuildRequires on gcc-c++- Ticket #46 - setup-ds-admin.pl does not like ipv6 only hostnames- get rid of posttrans - move update code to post- Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash- b05139b memleak in normalize_mods2bvals - c0eea24 memleak in mep_parse_config_entry - 90bc9eb handle null smods - Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash - Ticket #306 - void function cannot return value - ticket 304 - Fix kernel version checking in dsktune- Trac Ticket #298 - crash when replicating orphaned tombstone entry - Ticket #281 - TLS not working with latest openldap - Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails - Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse- Ticket #124 - add Provides: ldif2ldbm to rpm- Ticket #294 - 389 DS Segfaults during replica install in FreeIPA- Ticket 284 - Remove unnecessary SNMP MIB files - Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5? - Ticket 175 - logconv.pl improvements- Introducing use_db4 macro to support db5 (libdb).- Rebuild against PCRE 8.30- ad9dd30 coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources - Ticket #281 - TLS not working with latest openldap - Ticket #280 - extensible binary filters do not work - Ticket #279 - filter normalization does not use matching rules - Trac Ticket #275 - Invalid read reported by valgrind - Ticket #277 - cannot set repl referrals or state - Ticket #278 - Schema replication update failed: Invalid syntax - Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled - Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server - Ticket #87 - Manpages fixes - c493fb4 fix a couple of minor coverity issues - Ticket #55 - Limit of 1024 characters for nsMatchingRule - Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned - Ticket #6 - protocol error from proxied auth operation - Ticket #38 - nisDomain schema is incorrect - Ticket #273 - ruv tombstone searches don't work after reindex entryrdn - Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword - Ticket #22 - RFE: Support sendmail LDAP routing schema - Ticket #161 - Review and address latest Coverity issues - Ticket #140 - incorrect memset parameters - Trac Ticket 35 - Log not clear enough on schema errors - Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn - Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if IPv4-mapped-IPv6 address is given- Ticket #272 - add tombstonenumsubordinates to schema- fixes for systemd - remove .pid files after shutting down servers - Ticket #263 - add systemd include directive - Ticket #264 - upgrade needs better check for "server is running"- Ticket #262 - pid file not removed with systemd - Ticket #50 - server should not call a plugin after the plugin close function is called - Ticket #18 - Data inconsitency during replication - Ticket #49 - better handling for server shutdown while long running tasks are active - Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead - Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same - Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI - 6aaeb77 add a hack to disable sasl hostname canonicalization - Ticket 168 - minssf should not apply to rootdse - Ticket #177 - logconv.pl doesn't detect restarts - Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating - Ticket 75 - Unconfigure plugin opperations are being called. - Ticket 26 - Please support setting defaultNamingContext in the rootdse. - Ticket #71 - unable to delete managed entry config - Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock - Ticket #256 - debug build assertion in ACL_EvalDestroy() - Ticket #4 - bak2db gets stuck in infinite loop - Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS - Ticket #3: acl cache overflown problem - Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations - Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full DN.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Bug 755725 - 389 programs linked against openldap crash during shutdown - Bug 755754 - Unable to start dirsrv service using systemd - Bug 745259 - Incorrect entryUSN index under high load in replicated environment - d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere - 5910551 csn_init_as_string should not use sscanf - b53ba00 reduce calls to csn_as_string and slapi_log_error - c897267 fix member variable name error in slapi_uniqueIDFormat - 66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf - 580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf - Bug 751645 - crash when simple paged fails to send entry to client - Bug 752155 - Use restorecon after creating init script lock file- Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD' - Bug 750625 750624 750622 744946 Coverity issues - Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication - Bug 748575 - rhds81 modrn operation and 100% cpu use in replication - Bug 745259 - Incorrect entryUSN index under high load in replicated environment - f639711 Reduce the number of DN normalization - c06a8fa Keep unhashed password psuedo-attribute in the adding entry - Bug 744945 - nsslapd-counters attribute value cannot be set to "off" - 8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular - d316a67 Change referential integrity to be a betxnpostoperation plugin- Bug 741744 - part3 - MOD operations with chained delete/add get back error 53 - 1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in - b6d3ba7 pass the plugin config entry to the plugin init function - 28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins - Bug 743966 - Compiler warnings in account usability plugin- 498c42b fix transaction support in ldbm_delete- Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations - Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config - Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user- Bug 695736 - Providing native systemd file- corrected source- Bug 735114 - renaming a managed entry does not update mepmanagedby- Bug 735121 - simple paged search + ip/dns based ACI hangs server - Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code - Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server - Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.- Bug 732153 - subtree and user account lockout policies implemented? - Bug 722292 - Entries in DS are not updated properly when using WinSync API- Bug 733103 - large targetattr list with syntax errors cause server to crash or hang - Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining - Bug 732541 - Ignore error 32 when adding automember config - Bug 728592 - Allow ns-slapd to start with an invalid server cert- Bug 728510 - Run dirsync after sending updates to AD - Bug 729717 - Fatal error messages when syncing deletes from AD - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working. - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash - Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed again - separate tests for atomic ops and atomic bool cas- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix another coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - previous patch broke build on el5- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error- Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed to use configure test for GCC provided 64-bit atomic functions- Bug 663752 - Cert renewal for attrcrypt and encchangelog - this was "re-fixed" due to a deadlock condition with cl2ldif task cancel - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma - Bug 725743 - Make memberOf use PRMonitor for it's operation lock - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package - Bug 723937 - Slapi_Counter API broken on 32-bit F15- Perl mass rebuild- Perl mass rebuild- Bug 720059 - RDN with % can cause crashes or missing entries - Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2. - Bug 691313 - Need TLS/SSL error messages in repl status and errors log - Bug 712855 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not - Bug 713209 - Update sudo schema - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9 - Bug 718303 - Intensive updates on masters could break the consumer's cache - Bug 711679 - unresponsive LDAP service when deleting vlv on replica- 389-ds-base-1.2.9.a2 - look for separate openldap ldif library - Split automember regex rules into separate entries - writing Inf file shows SchemaFile = ARRAY(0xhexnum) - add support for ldif files with changetype: add - Bug 716980 - winsync uses old AD entry if new one not found - Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9 - bump console version to 1.2.6 - Bug 711679 - unresponsive LDAP service when deleting vlv on replica - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package - Bug 663752 - Cert renewal for attrcrypt and encchangelog - Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute - Bug 711906 - ns-slapd segfaults using suffix referrals - Bug 707384 - only allow FIPS approved cipher suites in FIPS mode - Bug 710377 - Import with chain-on-update crashes ns-slapd - Bug 709826 - Memory leak: when extra referrals configured- Perl mass rebuild- Perl 5.14 mass rebuild- 389-ds-base-1.2.9.a1 - Auto Membership - More Coverity fixes- 389-ds-base-1.2.8.3 - Bug 700145 - userpasswd not replicating - Bug 700557 - Linked attrs callbacks access free'd pointers after close - Bug 694336 - Group sync hangs Windows initial Sync - Bug 700215 - ldclt core dumps - Bug 695779 - windows sync can lose old values when a new value is added - Bug 697027 - 12 - minor memory leaks found by Valgrind + TET- 389-ds-base-1.2.8.2 - Bug 696407 - If an entry with a mixed case RDN is turned to be - a tombstone, it fails to assemble DN from entryrdn- 389-ds-base-1.2.8.1 - Bug 693962 - Full replica push loses some entries with multi-valued RDNs- 389-ds-base-1.2.8.0 - Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1 - Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1 - Bug 693466 - Unable to change schema online - Bug 693503 - matching rules do not inherit from superior attribute type - Bug 693455 - nsMatchingRule does not work with multiple values - Bug 693451 - cannot use localized matching rules - Bug 692331 - Segfault on index update during full replication push on 1.2.7.5- 389-ds-base-1.2.8.rc5 - Bug 692469 - Replica install fails after step for "enable GSSAPI for replication"- 389-ds-base-1.2.8.rc4 - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - 389-ds-base-1.2.8.rc3 - Bug 690955 - Mrclone fails due to the replica generation id mismatch- 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2 - Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences - Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format - Bug 681015 - RFE: allow fine grained password policy duration attributes - in days, hours, minutes, as well - Bug 684996 - Exported tombstone cannot be imported correctly - Bug 683250 - slapd crashing when traffic replayed - Bug 668909 - Can't modify replication agreement in some cases - Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1 - Bug 644784 - Memory leak in "testbind.c" plugin - Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree- rebuild for icu 4.6- 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1 - Bug 518890 - setup-ds-admin.pl - improve hostname validation - Bug 681015 - RFE: allow fine grained password policy duration attributes in - days, hours, minutes, as well - Bug 514190 - setup-ds-admin.pl --debug does not log to file - Bug 680555 - ns-slapd segfaults if I have more than 100 DBs - Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically - Bug 674852 - crash in ldap-agent when using OpenLDAP - Bug 679978 - modifying attr value crashes the server, which is supposed to - be indexed as substring type, but has octetstring syntax - Bug 676655 - winsync stops working after server restart - Bug 677705 - ds-logpipe.py script is failing to validate "-s" and - "--serverpid" options with "-t". - Bug 625424 - repl-monitor.pl doesn't work in hub node- Bug 676598 - 389-ds-base multilib: file conflicts - split off libs into a separate -libs package- do not create /var/run/dirsrv - setup will create it instead - remove the fedora-ds initscript upgrade stuff - we do not support that anymore - convert the remaining lua stuff to plain old shell script- 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3 - Bug 675320 - empty modify operation with repl on or lastmod off will crash server - Bug 675265 - preventryusn gets added to entries on a failed delete - Bug 677774 - added support for tmpfiles.d - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search es - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH - Bug 671199 - Don't allow other to write to rundir - Bug 678646 - Ignore tombstone operations in managed entry plug-in - Bug 676053 - export task followed by import task causes cache assertion - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8 - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used - Bug 676689 - crash while adding a new user to be synced to windows - Bug 604881 - admin server log files have incorrect permissions/ownerships - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - Bug 675853 - dirsrv crash segfault in need_new_pw()- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2 - Bug 674430 - Improve error messages for attribute uniqueness - Bug 616213 - insufficient stack size for HP-UX on PA-RISC - Bug 615052 - intrinsics and 64-bit atomics code fails to compile - on PA-RISC - Bug 151705 - Need to update Console Cipher Preferences with new ciphers - Bug 668862 - init scripts return wrong error code - Bug 670616 - Allow SSF to be set for local (ldapi) connections - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the - log output to the text file - Bug 668619 - slapd stops responding - Bug 624547 - attrcrypt should query the given slot/token for - supported ciphers - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any - error message in logs- 1.2.8-0.1.a1 release - git tag 389-ds-base-1.2.8.a1 - many bug fixes- 1.2.7.5 release - git tag 389-ds-base-1.2.7.5 - Bug 663597 - Memory leaks in normalization code- Resolves: bug 656541 - use %ghost on files in /var/lock- 1.2.7.4 release - git tag 389-ds-base-1.2.7.4 - Bug 661792 - Valid managed entry config rejected- 1.2.7.3 release - git tag 389-ds-base-1.2.7.3 - Bug 658312 - Invalid free in Managed Entry plug-in - Bug 641944 - Don't normalize non-DN RDN values- 1.2.7.2 release - git tag 389-ds-base-1.2.7.2 - Bug 659456 - Incorrect usage of ber_printf() in winsync code - Bug 658309 - Process escaped characters in managed entry mappings - Bug 197886 - Initialize return value for UUID generation code - Bug 658312 - Allow mapped attribute types to be quoted - Bug 197886 - Avoid overflow of UUID generator- last commit had bogus commit log- 1.2.7.1 release - git tag 389-ds-base-1.2.7.1 - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes - Bug 656392 - Remove calls to ber_err_print() - Bug 625950 - hash nsslapd-rootpw changes in audit log- 1.2.7 release - git tag 389-ds-base-1.2.7- Bug 648949 - Merge dirsrv and dirsrv-admin policy modules into base policy- 1.2.7.a5 release - git tag 389-ds-base-1.2.7.a5 - Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-ref erral) - Bug 635009 - Add one-way AD sync capability - Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot - put replication config entries in separate file - Bug 567282 - server can not abandon searchRequest of "simple paged results" - Bug 329751 - "nested" filtered roles searches candidates more than needed - Bug 521088 - DNA should check ACLs before getting a value from the range- 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4 - Bug 647932 - multiple memberOf configuration adding memberOf where there is no member - Bug 491733 - dbtest crashes - Bug 606545 - core schema should include numSubordinates - Bug 638773 - permissions too loose on pid and lock files - Bug 189985 - Improve attribute uniqueness error message - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat ions - Bug 619633 - Make attribute uniqueness obey requiredObjectClass- 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Adding the ancestorid fix code to ##upgradednformat.pl.- 1.2.7.a3 release - a2 was never released - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Bug 629681 - Retro Changelog trimming does not behave as expected - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif - are not upgraded in the server instance schema dir- 1.2.7.a2 release - a1 was the OpenLDAP testday release - git tag 389-ds-base-1.2.7.a2 - added openldap support on platforms that use openldap with moznss - for crypto (F-14 and later) - many bug fixes - Account Policy Plugin (keep track of last login, disable old accounts)- added openldap support- bump rel to rebuild again- bump rel to rebuild- This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1 - Bug 634561 - Server crushes when using Windows Sync Agreement - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self - Bug 612264 - ACI issue with (targetattr='userPassword') - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager" - Bug 631862 - crash - delete entries not in cache + referint- This is the final 1.2.6 release- 1.2.6 release candidate 7 - git tag 389-ds-base-1.2.6.rc7 - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6- 1.2.6 release candidate 6 - git tag 389-ds-base-1.2.6.rc6 - Bug 617013 - repl-monitor.pl use cpu upto 90% - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors - Bug 613833 - Allow dirsrv_t to bind to rpc ports - Bug 612242 - membership change on DS does not show on AD - Bug 617629 - Missing aliases in new schema files - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments - Bug 617862 - Replication: Unable to delete tombstone errors - Bug 594745 - Get rid of dirsrv_lib_t label- make selinux-devel explicit Require the base package in order - to comply with Fedora Licensing Guidelines- 1.2.6 release candidate 3 - git tag 389-ds-base-1.2.6.rc3 - Bug 603942 - null deref in _ger_parse_control() for subjectdn - 609256 - Selinux: pwdhash fails if called via Admin Server CGI - 578296 - Attribute type entrydn needs to be added when subtree rename switch is on - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"- 1.2.6 release candidate 2- install replication session plugin header with devel package- 1.2.6 release candidate 1- Mass rebuild with perl-5.12.0- 1.2.6.a4 release- 1.2.6.a3 release - add managed entries plug-in - many bug fixes - moved selinux subpackage into base package- rebuild for icu 4.4- 1.2.6.a2 release - add support for matching rules - many bug fixes- 1.2.6.a1 release - Added SELinux policy and subpackages- 1.2.5 final release- 1.2.5.rc4 release- 1.2.5.rc3 release- 1.2.5.rc2 release- 1.2.5.rc1 release- 1.2.5.a1 release- 1.2.4 release - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif- 1.2.3 release - added template-initconfig to %files - %posttrans now runs update to update the server instances - servers are shutdown, then restarted if running before install - scriptlets mostly use lua now to pass data among scriptlet phases- rebuild with new openssl to fix dependencies- backed out - added template-initconfig to %files - this change is for the next major release - bump version to 1.2.2 - fix reopened 509472 db2index all does not reindex all the db backends correctly - fix 518520 - pre hashed salted passwords do not work - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of - bugs fixed in 1.2.2- rebuilt with new openssl- added template-initconfig to %files- added BuildRequires pcre- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- change name to 389 - change version to 1.2.1 - added initial support for numeric string syntax - added initial support for syntax validation - added initial support for paged results including sorting- final release 1.2.0 - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389 - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428- re-enable ppc builds- exclude ppc builds - needs extensive porting work- new release 1.2.0 - Made devel package depend on mozldap-devel - only create run dir if it does not exist - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330- added db4-utils to Requires for verify-db.pl- Enabled LDAPI autobind- updated update to patch bug463991-bdb47.patch- updated patch bug463991-bdb47.patch- added patch bug463991-bdb47.patch - make ds work with bdb 4.7- rolled back bogus winsync memory leak fix- winsync api improvements for modify operations- This is the 1.1.2 release. The bugs fixed can be found here - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721 - Added winsync-plugin.h to the devel subpackage- bump rev to rebuild and pick up new version of ICU- 1.1.1 release candidate - several bug fixes- fix bugzilla 439829 - patch to allow working with NSS 3.11.99 and later- add patch to allow server to work with NSS 3.11.99 and later - do NSS_Init after fork but before detaching from console- add Requires for versioned perl (libperl.so)- previous fix for 434403 used the wrong patch - this is the right one- Resolves bug 434403 - GCC 4.3 build fails - Rolled new source tarball which includes Nathan's fix for the struct ucred - NOTE: Change version back to 1.1.1 for next release - this release was pulled from CVS tag FedoraDirSvr110_gcc43- Autorebuild for GCC 4.3- This is the GA release of Fedora DS 1.1 - Removed version numbers for BuildRequires and Requires - Added full URL to source tarball- Rebuild for deps- This is the beta2 release - new file added to package - /etc/sysconfig/dirsrv - for setting - daemon environment as is usual in other linux daemons- fix build breakage due to open() - mock could not find BuildRequires: db4-devel >= 4.2.52 - mock works if >= version is removed - it correctly finds db4.6- Change pathnames to use the pkgname macro which is dirsrv - get rid of cvsdate in source name- Added Requires for perldap, cyrus sasl plugins - Removed template-migrate* files - Added perl module directory - Removed install.inf - setup-ds.pl can now easily generate one- added requires for mozldap-tools- update to latest sources - added migrateTo11 to allow migrating instances from 1.0.x to 1.1 - ldapi support - fixed pam passthru plugin ENTRY method- Renamed package to fedora-ds-base, but keep names of paths/files/services the same - use the shortname macro (fedora-ds) for names of paths, files, and services instead - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base - updated to latest sources- More cleanup suggested by Dennis Gilmore - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1- latest sources - added init scripts - use /etc as instconfigdir- latest sources - moved all executables to _bindir- latest sources - added /var/tmp/fedora-ds to dirs- added logconv.pl - added slapi-plugin.h to devel package - added explicit dirs for /var/log/fedora-ds et. al.- just move all .so files into the base package from the devel package- Move the plugin *.so files into the main package instead of the devel - package because they are loaded directly by name via dlopen- Move the script-templates directory to datadir/fedora-ds- change mozldap to mozldap6- remove . from cvsdate define- Having a problem building in Brew - may be Release format- Changed version to 1.1.0 and added Release 1.el4.cvs20070119 - merged in changes from Fedora Extras candidate spec file- Bump component versions (nspr, nss, svrcore, mozldap) to their latest - remove unneeded patches- update to a cvs snapshot - fedorafy the spec - create -devel subpackage - apply a patch to use mozldap not mozldap6 - apply a patch to allow --prefix to work correctly- Fixed the problem where the server would crash upon shutdown in dblayer - due to a race condition among the database housekeeping threads - Fix a problem with normalized absolute paths for db directories- Touch all of the ldap/admin/src/scripts/*.in files so that they - will be newer than their corresponding script template files, so - that make will rebuild them.- Chown new schema files when copying during instance creation- Configure will get ldapsdk_bindir from pkg-config, or $libdir/mozldap6- use eval to sed ./configure into ../configure- jump through hoops to be able to run ../configure- Need to make built dir in setup section- The template scripts needed to use @libdir@ instead of hardcoding - /usr/lib - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall - do the actual build in a "built" subdirectory, until we remove - the old script templates- Make replication plugin link with libdb- Have make define LIBDIR, BINDIR, etc. for C code to use - especially for create_instance.h- Forgot to checkin new config.h.in for AC_CONFIG_HEADERS- Add perldap as a Requires; update sources- Fix ds_newinst.pl - Remove obsolete #defines- Update sources; rebuild to populate brew yum repo with dirsec-nss- Update sources- initial revision 1.3.2.23-1.fc20.scripts.2760_27611.3.2.23-1.fc20.scripts.2760_27611.3.2.23dirsrvrepl-session-plugin.hslapi-plugin.hwinsync-plugin.hlibslapd.sodirsrv.pc389-ds-base-develEXCEPTIONLICENSELICENSE.GPLv2README.devel/usr/include//usr/include/dirsrv//usr/lib64/dirsrv//usr/lib64/pkgconfig//usr/share/doc//usr/share/doc/389-ds-base-devel/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnudirectoryC source, ASCII textC source, UTF-8 Unicode textpkgconfig fileASCII textRPR?7zXZ !#, #] b2u jӫ`(hקyҌ8-eNnY›{+Ö4BķQm_;/;9H@A\/=Yɇ !nRc:7)7Do0Y~4_D(rb5*zg@VԲZB |Exs̴κ0&+= "^fqM4{c޼~xf c ?7l DMmԡܤ+֠M1bjXRP( ңuaI߁x;٪}Z]g} ]z[:ifo,A]݂ʹŅOs}6 Ȣuݴ|(Ҫ/;QrrK-p haXs*9φuV,꽅E( = ~-]ʀK~W yߵ4 ,@YФi@,atD &kfcZT &aa| JĐicT :Eb#rK"ŗ}x W4ѻj&Z xkF&kZ#Jwq).9M1n. WƓFeWY~|)@v.SO7Lcn*(r! [D.3 %^jPcdD&£*-"3gk~b*۹ܸ7ݫ;I5ez^D90`2d:e5!FlYE dKXIɕg֦ :F/_yӍ}$.@{5[`=#,갢Eʵ- =ohdw"/.fX V<#lJmH4rNj6|x AEO_~ qD 9fZ<==|1obli#E}kap򿽪Ka&YxYz',f Nw9E.~*m LJW7 K&sz&JFMM\]=Q'D~I[/'ptk$ cU2ȊRNkQg#WvvK"WnQ /( =KVuDxsToJi9=I!QO =!؀kNQE}A270G =+4Q_UkCh=/\w >K% aCg_ې^y.cǠeRL}= Imb{J n-M[F䘈ɦhz;Y*]7F(%ZώHaT[o}Jz2kBs6կOQArlO O+E9_ֆ*Ǐ趮ҁ5P%goE)֮|:6v#Z[L meuu%F^ em-{fƗ9  XTLphT*W sw'sxߒʜOieJ!SfIx [Hh=e9 +; (Q-_rT >gАDiFgwd|6E}ԅD;7ID/BK_UWCi -)^̂ hlA csz-*~%?+ON[sx7bYqZI :8g#@|Id"f dMWqs.x!aL\t(@@W4[LV9`>޹vgUOd{3*v萅!ʦL]r׉~r}HGwy*%(JX e3r`p:&K<ܒ%;k*c.uHP*0P9Ę]y,g]cѸMu-=B{Նʳft%Pp4(˝- ܀lr^0s{Rn|[ Meǩ*Qp.(1fqd鷕x%= 7 y |*_`O-v18 l`{`T>NLlL9)!U%YJz䷳½GʸߋÆ2 Xz5,4 >Z[ 뭊28f,35쫚:e#Xly+o -͒#/uDsI̩O8vw]7Xt$'(?}һwy6%A@ /Wg}NRK)}YKQ ,˲!{@5@GyػȰ,[c| v`E  EJBo!d@|\A4RkHڮkJoi?# Ƌ4iJP5ip% .})%&c]9ɜG˧\1;lTz L"5+wꡁIcH:![ ZhRD&ې̫-AD ˍd+vZdĞ`Н"ˏE5feb& "hD޹;dV̋[# OuZ- Nwy*vS~;A9lL>`" ZF)~w|ouLHqB/ +N97y"ۜo-s %FQeb} yHU#epiQ$a&ZIՌYܨ]nrBH9^O*O Y5퀾fI 1 )xm/X-(#SkYE)HO+is_(6ZGzۅ% q?w|z=P)e-9 t}ㅭccҺD dmʬZ$<q -JVt**- @orGvd=C_I13hh l3{_!kF L#*O]ul @cCuǹ7uP_p>rAWwtRr.xG^hغKͨJ܋`z I `CiDPJnjдǘ7B_ZBvqA'Dc^م#U"֌.apN39,ˆdJJ+7`R7CfY3(ئ!Y`/qgzQ6ʋvOKIq`nJK6@w‚H19ᄻ3QчCDɒޥW̍.m#Y#E2n@k4xBs5|Dfj]ƤLʼno.4Y'جH9Va]Em21+}Yq2ùA%E-DZ||tP|;PSRz]Dy\,%` Iohû/m,U2l΅jN6KZU3N@E85faEo>VֻMxYA!(f_qYy׆H9j**IhcSR:ێ dHu#eyպYJ@w29s/_CaPH'K6&mv4gz< 13 3ZZfx鸅|&ЖuȖMѰ4!{ Qܖ̮C콗"R!3*~Ocm>L%gEoGI|(^e]..p]l.qT m< Q.}[eE|;rAa }vT"+sZ|AzZN՜ ]w=|8!Cd½'>ITРp9pFqM=^}NsTD۟LV!m0DsbR흛8Oe+K8>V.4CpEAHY`2#d$}⵺4^ Ǡ 2b=utXR.9R;J<'#> ??4ںE.[ 葳u)jGnkپ u*rhyEDŽ@~{vT4͉sHf Sdt|Ɲ!|-U9+=Rm3f,: KߔL_tkMR24ot>f|f1$␳ uw+;JğTTYۨDO`CWc0Y2j.f=?axOH"++6X ;VWv}\{95w@sMx$n_1CU: W`V3WR.ϩ6/;@*jN۠EP^~v93QOz`u l{| Y5 0621(Ie! |,LfteԲ[O:Kh Xl.-#HaزPP{FVwƟFR/e%"gӰ,٤Uč,yR n)q Cɽ?l*[RCQGIYҟ>&+&<)yuo5%3}5hoq#Oo2 <Q?]d% W^U }*fěK<|;#Q[,!p1/S2Ǘql>젪nԡR |&_]ۆ`W96r8d={"DC2yE &K,PԜ%r  b&@raW(GzŸWI!Šptl_fHG RedHۏPa)>=9H|`"P~QkCJF5?%c.i"ջ 3+@IOj2v14*?uz'DN8>>o[P&q3G6wEI%\I0Kjnaz*sĹf*:IĨ@a{b*Y&AQ%wydCH\[rK-%# ]Ql/g%dT%f(jqRXS0!>8E|iDBLBmg3 ql.Cɉ<(>{Q5W7^َ/6FE6 Jp=xjA*tzS ˳C9ǹ1I ۺ5C<~:q6ilx)wACḙ[5]DkXn S}X/[& K =^T+>倣iPڧzBQ| .@~hlUk>&bP &\IGN➦hY8p?Q;.qH:T,c/lܨ n)FF9suGM$h{1ʌ&-Wb#7cGz7g(#kieg( YyxkeOpeb`S?~Z.=')i:UHI׫(# ƻ*ZLeT:g=wKڷ~=O@cf~^шWl+\MWyςBUܱ&Ծ+`'ϸMj75soJpHbCܸsAnw7SCu/tNn*-t_R+ƀS'4; Cg9CX4>fibctP"yP ^`JGWGChjȳwN3Ac٫7n4 UsX@YECFs}.(a~~.\VEFZO^eo̓#2!c~jlq_j'2*x5f;rIyM9DNXz-Xixeϩ&>>fa^ԬCC8?m.lKT+uf5&C{UfI ]?.Giq>x6o*iqQTvBDŽ 驭OnkUgė]%^]YOqcVܪekliG;cbaŊ3%Fjd,)S 9Xa׮) dUEEpH `Db ">.e֡fv "`щ.e hgWU6 tr3ݙMJ y"mؙ8yDI|+-BTA<q|O؎ƅ5vj>R#cq0yµƳ+ۭHcCXa$EG[}Ww;S0Nzv,Ocq #@UFZ4rk>8 LfuC-^g{>m`v@p{]ל`p5)vDepa1t]=D<^<99]/ٔ%"ۈhCu<?E@4|*۔ jمM9hX_<0WST\un#oyYIi6(a ^(bP#]f7mGvlRwUn(8#ҀFsU5.;gufz7{Zŗ=Aڙo.I> 8ǹY,ɮ//0E< ~e "$ʠ#"==3׶XQO?_Ê6n)$n fљHgTB^H/'lDnXZUY9ۇiMQ/hYZx SU4?/'Z4^V0cL$62't єUN]!|~\u,OG饽7mkO*'e(>!8l 1\nH!W[ !8IבV}=DWmR:G1(V,mLW&O,> ޚD5~%'FANyA-aio82~`v=*cU#bNԗUi74C\96pgi=OW%rSα\Jnk:JS0?_찛"icfvUQ.Sό@g~IN1C%z<.R7IʈkmSؐHOgq [l$8MSo8;N'>RH+wW~vYVY),^"kVOn6ST#]953vy3e;DGBW]cv15姰&+P0b\>T zoQiZ ICNv5]Plx>Oiwb_P4r/*la67h|nH)7ZHeS={aXI@(3wġ/k KXѬrV_!}kiXĕ\dtensx̝:&!s!O,(dw¯inȔ 4S)k|925 L2TDtmM\/p%~{Ku=H6[sc\tɏ:9(~{ZhG23E 1;q'2 n mP/v#Vz Zp&m 5v~7L4 '@9յ&\$_m 'ABI^[)0F>ś8OyvBM>,-]G; ԨHrUnJKoUĩs))\?zB tWؔ8hQTh(aP5Q`}G̈ƺ3Kw$W8]2>b!uFL`^ 971 *-_k؁wY{ PP.:{qVs'ܙ6>!;;䥸y9@vx;H\Q]JylM4|HXnˍܺ^ 'Ę0* hAoARЌЌ֢h,7 P?^k-ʾds]="= C,v/=/ݠ?<5] 6D[ddR)B'J<'[eA"7E3_IyՍXèGş7u2'nXa֋ڴ Xbu@ AQT]͓u[9;8kGY] d]=W-7z6_Gj VS+f&!Lm}u &\&҆DVL{0.Hb]ΰʣފw}ޫ']+ K': AXKD5Jc«aFlLΙ7C;?D|KFU9"QsJm$4 u%qV9Վ w\"Pg+qիa6…f~hJ7WoTQ2'OrV:Ϝb_{_7 g#1r5lHKWuo!mHݼe3-"ȳ 𶝎G4mkQQw.;u^ )ןS`$ņeֳpYޒ7/VtVUʑ.cSe:~ Җl*cQ}J Y12Wo"gXT [6WzbEc5U8ʡʹo%'.OsDY>2(d3^ Q+S)z;e$JZo.-RzUjpVzmHYp$'܃4p%ߠ~^F-8av`3 J<٭7HPWG88Fh PPx{#Ê^kb/OHZ/OY=-pIeWSTQpfg2&@'aMq; q,68٫GD y>C)2JRŠnl4LStD=5R{{VO!ͷ|/zpÀD? X;hP\K8ȅ{%QgXZ āQDTRo~Am*pd. LƪdWV&/C WCCi.7)BB^ fxpUeBa=~iKbF+i -82xjr?A|Oq]4DZ!8g|69\bCZl/+WB%XeD-JRFhJZM+ZH'{.l[#XB̷Oȳ BcY+x2h w'v&Lu7r'<[:m @:y9AjŲfҫGMBT\AhZ@,Մ5ሲS!@RaZ=7}Q犄ώ}]8cWѢOFn#][# WgƷ,淽hc׻"!4z]%TjrŅnV%Q]}D1DN}j>\\AoΦʬ6堢lKM!1 "tCķWsm4,:T# Xj!w||6 Ru A 1LM+uy}%LWM!-! D>J15vb!MoXz ~7/p]z0q8ELqd:UN\:SK$:m։}"}jgg8WY8ךwm!~{կ8ST؆2h&IềyA9x""3;,MW A_iȁ BPyڪ46y(HBlڋeL3020psv.Ʒo٭8M((pI=v;.ammi )4GF!%=SqWSL‘|~/%ZlF.=[=88<=qnt{ED"'82EDJWW%>6<\,] ˅zդ`(]a?O]8iyÂ#Rm_2e,U\A=j$EN~ 9}'b.4w`’4f]<&4x&"MGd A1Xp4Ln28Z]z1M7pKRV[dȽvv[s&h>?aZ4_@imV|5rFw$yFU,K:.@3FUFlӍ9-FWuCnSv-_Hר^]d Y2f0&{DW˩axB>j \;H(S~>5H83{sQG` \ wC L R٤g+m}As)ҩ9mE8ZyAQj )sl iwz_`8q̏VeYܛV 0BW8i:˜v^G,;!4I8kX-kr?+v..<5;J \ 6{r-Ń-ep[QkEB&>™itźq*`' qgT!ҥ;vͷ$?GPYc R{* gI,C  7pא00Y8>22Jr %㜶0o?qgQj Fsj4}Za5n56^B[i..!Kw5^a !ٽoCK7qlcg倎AV9~])3U$1Zz7ܽVrScb9<̇QƇ +Lص vPAGlL?jĊwY}JZĝ@hy!yveUz "7F7hǽ{5^:HgЋB\6 '$P0 U닯=O8W|-(Iøa E@Z=cM9 @Kʧ&y_TRn.ƻX+hlq5y7 7mK>tpjO4ـb >/,-,V'XE.oo, hmɿBK_6ybƴFZӉŽ]npY-/'~,jTF?P]Y˔1$uhRS BTV~`4?1o8޿:F ,X ϱy]Ry!MuzK$Sҝ6*X1׋p8;ܒ'GK6gvHK~MSZ]uUd;i^J3YA #/ZΧĤ1:]g'n2Md{~A\& hhi/|_tq6XJښ#*XCmkeDXj'Kq ZIBb/gH凑潱(W(n4A9WZx\nB 8WK0藂aJE@0:8H)hx˒W_1eU i}qP3'YN,SC)bE'6^}Iدd4@a˭*j9`" O`~Hg) &EG<%OV4ȞFO^Idb<0{z裰_8Cx#CϮ@!&,9?7oMw%k~Rx,w.c2L lYy-{QWA03!_i&0wAwp_wI6AiF}'Lp*kAUwLdEwj{ԗ6(J1n@PL plJf:C,ɖ2m=*yۙ`*虝J%E<٣ƭ|cD sGBBqF'R-[Bbn z8M>ӄI>JSơٯ.>+ 4|Q8x抃I{ݑK1Q bָ_)kg7K:;廏oTԆWb߬4oH;sk݃9-bIepզZ6dZ=4pA; ;4,yG9JǒJNCz` 0: AnoIBDa!O!b. {q&$㱬pw^bd M.{_֥5iH/((paO|yA$9Aֻg|gYAx+_ʹ!8 jRn 7&>`;i?GB 8,ny<6İfu{3e +4L_ݘ ŞU:pb8 @>o-y W ĩa3s)-bC0Xe-/ @]Rg]\ #+261--Lls? UfH<_Lz::#F-+8-\&#[+UY^qZ޴$... Ʈ5b]^޼2~64{@iS^a`2$wE͎\9YHoV*۸?2BX(R#6wE]-?5⍱ѦmMai eJV9fTKZ!'{>ooMI}i,gGpE*(2ʲqa*Dy&s\&kr+Ab3 v?.Q;E(3Wk|(&[>yِ7gCd1` wv*vHeT)ܼ\B37(eb^8JFWYWc/Pň7Y%]q5 w(E#&N.ڌ[)ЌUU^o䧮, +vT rxYthLMƢȞ5h\ms,z 渧[/CA c0uxr`FwXKiE"HPk Wj"=2b=OԵ4Sh,LNM7鑵啌ۇB_juʨMj==]l<J=ǧǚ/;yUDU-m 3f ۄz蕋:k؝=gB)RC3.:-6ͺPsOc)n[=F#j#+š`$ ?~I*'EF{ԗu*x$FV ]W`ݣnGwPFj 3"fZKW_һ?&d ŗ#y0K-}%@Yj6 4a)sizroZx fG>倮)PK~=}ªRWPS~?lqbͭ3[|~WsYJK`7;JL/,k;naa=jFl>2 }S%T,+"j<U`:_֎ZQ5Vn×%%Fo-JCZŦTU9P<4v4F{ŨEOv7 ,75Ȇ+  P;Aeȕyf M M",NM&lת. Q \IjV_8iѫ9h@[wWݳeZ ajjg` О=USɶFk1Tݏuj9w_ JWQZ91gnB < &䖂W %5x󐱇 T2쓻*;=/l~ͱxFuk</~ǀ5Km3 c{{ޡmE_s?jCHk'|n|'(悊>L'.A#Ϧ3f"At aߖM)xsO#?& rC <#Wnx.O]%p /$ 2mPR eW%Lx꩑4ԤJK#jV`M8ɺegb'{m::R7xOEb&W_d-EFQ=ZTۅ2)B4<1t9>Q/uD ?'6ŰȹC,8A6lmH⫤(6{hl\Q|  { ţś2}Ʀ۠NX)|S^3oxI߆]˜k}hjFjMi 0t-#ǎ>wl5j~!~m>g\'녵.nAJs2:M:okP|;w33D [kp!4S4oKuzwƥw> a'j5Uc(IܱO쌶p@s>g.07)I#SMMYzRRT $\Hr DqgE a4Ve23R4<,c;#nW<>i-\+WQɡ: qC"sxS"ӷaQ-s$L.Q-U0!c) ,p iRGBugàHswR6*$x= pƳo0e7ؘU'#g'c;˘D>*u1v4^ic&xGb_1: X\ɫ1k~X"rV+qϜ,SDBٯ|KZiW7ȴ9λ+&wн88<,ad!s`1=՛~TNTÎ\뉛`Е7ıWh ɿJB\E-/7kV$ʼnos>DacW.dBV{iRoD ꇲ@tvW>2I,XCTF> pĤ3T:%p`˕د@f>ce8]xCu97vcO\*UaՊӺP1qjaHlUP?6{9˵6(?*/WwSCoq>s>oXof<_˶ >4vD:-m!n%uV3wL뚛oj`8!a#9nh\zS.-9(34(arDVTKҠ1&PQP2\E;hbBhջ撞 -,@h8&b"Sa m< aK F ?/#"G6umsٻ]`v+-JrNV,*AΕ!ɜ P6 l'9>L{ۼՙZ|r #T=&q9_VC:& 8ɓ7 ~i>R/S2ВK]|UVMMxDt(J-@ T4#ϟ b#e/oFd)/(VQ)[ɜᦇ V[/j}- ^@+TFjlp3d!6kcq| Ռ{[7?`bԣGƼhܦ8h]=2[ĶNث!YgRk\v9_v}(GNVVšiNM/vcM=C b;4ixYQGP_L#.Czwfw(tɀcd=W6k"qEP:ʓllHNqA˻|ͷNzv Z5!Ѣ P j&E4@3O,|A[k!`X_|B*^G k`#uّ r 8u}EaM ##6vCNd3'1}B-| v=㲹yFFEeNo湬mQ); V}8Za{ bCWɘҾ?3IN:фC J_ar Hj6 >T87/g%S8W4rOZ%$lyJa6b*IO̹~:]5"8`PZS1+ n ap rq'Bޠ~5•Bu8zTR]4dz YaX-zpؗDq'TSAbYr!nGFPWDw]hنJ<[?.'Q$ijі } *s@nYI8Tcq\8ߥSy6D}$=o&oֱ5@Ǔ/ sR &y@!mB7ޠoBшJN{"].u=Kޒ/ܝE҂S 5FU F!Ȅ:n_Nra/YB]HP}\+!Z͜B傍? , ㋰!1V@려Gz2WD-E<׫NS0+JȋLT n }c`N6oL1-;N l /C2}{YH_STDWgB㑻By)2 %a YWbc/ {K6?"w#vNe$zseZY8//{GUX`Niw@~!<Ӯʾ o< RT~ҚRݻΉbYUL-Sk53;R` Tfᆭ+ { XٳͧL=mV ҝ#Q[MBgl0i;`f@vPPrmFHnqr#Ȼ}fcA7s瓪Urhv;!07:1vVT)yC?wRPjnwqMy `tpxI5:!h Rؐ got*^_o) EWM1tb!47=񿱞oH6&Z&@qgYv闏Y8K|^܂S8&753*҆x-dSyV4Sݷ1◗{D4U_퉍_t%UemuZ ȱiT{t1Gu q{Z"jbn$Ѓnt\ "F)>3EÞ4vdCW Uv){p@Ń~% PkLQ㦓7ؖwh ,ZJl +!SC]_SG0U&p<3t?O,R^w1ygIrK=Aq9 SS>(pZt!LπqN6L4,R ]<4Zfژ˓Ş3?A?:H;wX:A -TOx?s'O*/bб`g(gK6di,*{V1O,%ޘP4hO6XrK}J$XJ Ț>M xYPBJ vudFUž7_^Q@w bQ6d'Wc-%^}%R%oܬmIhANo1L };v2ݚWq.L^૒ ^F[bb _WFW~e`=xGH-Ys @VaMΫ߂.*aC9wkWf5ɷ;V2pP2x3My%I/S5QfP1h9`#u N*XU%TQd6+L80]+/|th7:OtCF[1f4 rIq`،׬u o-=6J6t3NٮȀ}T*S. kB rb6>8lVBy%* sn-ĚW>yYC܉7X&āZR{ {hbS:o~N2>г$Z/| R9  |fދ\E>Ն3)>^QWuበS$|m#b֛*[r?@uZX̼r%͛ԝ #L y r1ٌdZ[4P{ATajw.d%.;Y}Mړ1&OƅV=TxXRH{Wp0J:n6Zw!6Az\ $};A(e]tՔ&R#*lbɎIbQ](O-4y1<aU;4s5Yf_l }jdY٤>F#lսD{w:|@ $."V,[<ƒ!ŵ'ԃX.U`ߜ#~׈@;'hh⟰8nb)y-pORjm)Mq/Q*b]r󛔉x^Iw8Q?$Vr7CU ӜACyTٶ?#.8yg6(xԻ@PB& :,5 /8tE=$UE^ [1w f0%CHY^%>q,C#F"y3 Oo!xcouvsTR 9s3h$_ lB+1L׶ z5d[~)C!=q|Zi&FxR|%i7:ro2m 91:S8U yuOV˓LV #E̥u"05Uk[Ց]Psڞ穩){IYT 7#kYN^6oYA+F0jTPd}*Șo# IB.ǁ%;j2sc7 К%j TUvĈUs˼GD65U#}Aٔ2s9UlֈJ/ơa+jf=sW_t@޷قeRל߄WύOٴ|{m_ʤǞѫ@/'B* )IVk`_1ad+ Wᮥ䮤#K'@ b* o_Dh>m+TrظȜ"j(ld{%0:jZ)]lU >~|f|PbWjh މ4U`6tLy}.;.Hi8K$ܒ\"lq-E x4i}=ܻ+Z+,{^g[~?o~8aT}43=zc? a+wChV`voS)~~oX);$EPe ִHL!r0VMys_eG˖CKw*{R0"vԳgn뉨j$eȑQʡD|d+ʭ(\s?iӰ\5^Sv %7r$gKYH*9?vc}^&)_FQ7\zDP8KJC;f4aA d7hL 2f?vN[}4I84B QN+"@ oEG!-2-0C}KS?bE fcA>[1ف۬ WIS[A}/Bda[`juwޑBx:]uYOؽ !Ǩ+,i} do-44#b zT IwU_3yVvbQ&iEץa:]{r֠. x9Ĩ ^6dknJ*6rPX$ VABI ~',բu'+(.| 1Ubs\'Q!kk[*ۊ؂$i㮷-rʸB|S0q9n?S}wA|A٨03+lhCo #v'Tq ozi'F^{\zzWfо *#CVO;L`#|%+XhpaE@ݹB03ZyWVԵ@m9/־EBFs )}:DpƕX`Cs-ba"=͊=ϧb*׆0K*=ͫ& }G!}5_&zZ\Ei,D,ҝ^b#f,?p;TrU[c:97)`nu]0,Y)Nt@GK3bfS: Ao,|EnQ ʀ!@Z'LQpӸ+%=tA`1t)P;*ȂD<Ӌ-o;!:+).CTpBiRooU}Z]TS̱dӫ,[X? uY20Fiy0߮%R,VEwzbtW6|E{'!"pd 8Ӊ`v6l撯tKkӭekc~@/dP&gܗ߅ir=*[5GfP)T{Zkwݲ)$*/ NKP'QkSLp'1etoeǾ@^lv*+ v;p q6yQMK<Ͱ$7Kw4$YRND4^N(QD O%@8cb,Q? ]qIpe`>.eCE~_۬+Ich&9/mLشَX\XǮSOqjK0]=B:E/ aUA^ӯt<sZx9=21l:+K|J2>i4I3GWP:b=kn"|w?qbӟG^"8í$^˕:7WR]0}4ǻOeouCY򢁅1l)ޞr¹R\N(/b y-ۄGw?T&2lQJWϛ)..:nCܢ,zÛl%3l K=EtHȇ[Q ߖ~&5f38'QC[_>2/KRs* Z%Ѷm|VwԵU $0WDE}sԢ N("3 f$ր&[t&+4#Nг$a͏PqA㾧TW-#%5r d0#37jWJu@z~,`lLNl|+YFu+vܛ6 0H5M:8X.M(VR^7ן@o'=}@53@}t//楰\"={i󐗬}kom0尳_HALLٿJ_;V]&NQ#hť4kUHN_|d멖w*nr 苒ප^fiZB1_ :O%ArF&$,|\l|`|ict)[@GU!-֤Y¬/0K&~[kW\9 _+ 92w85B?|in p3psnĞ큼RD7Bpꈨ<3ΈP59n/$iRFxz#:G:)k_'%Ɠ{'0+-e6+ ʈr`$;өˏج;lē=^v" ꑎjC@97*kd~+a#"'Ŧ2GCp3(fR):~1i !$2״HVMu Q)0@e?+qTךP7NCJnxv e]S5߀fFw6%/^Ip j D 0e"}СT<؅MD-ud\\_ÑSr.8 ,UvuHRe'FD~z/goRrQ7:.qT9PJm,HgDjScل-I@x0jX8PI2U}c/(S BI:Iz@uuz7g+p@VJ‰Gn?MbrvPKtQJ;[30!"MV1E,! {Hvs;՚Nd@"VS``ꇡb&}gMI7ф#=-ꟋU?מ:X@]t+"ӅR]wuS8( (e/`D9 acq.a/Է΅8?xs@3Wu@ 띃# )`RH\|W)Pb8r*m}I,)鰈z;/YY=~ E_8YM<"R{W0_+wTkضƇvug̢%%k~kB¨vt" )Jt^l(m퓕j!;k;:j(@3UB^34) U-^"a)M1VޘQ-+r0f=W&`7 Km\h"FquvZ*iO̧ŧi4+.DbvI|j'Eˤ1@`]mQo4=E]-O=V O . iO-V9]5}?Q#N*z j1 נOkPaAp@ =Q8-t+HBw2w0?0,:3tG;-I;@"Ra*2w1o%0[UU,BQD9ZSIFP%Htҡ̠R XEA2"IgNHAr!Qq "Vv+ڥ~E~<9? }fYdRi-sM3PS4d<8(*12#ˏ-)q8Kj4N3\7o]찴H]G{s,b py/+g&1>bjk! *ej "EmWR@;*h!IMGet.44>I>Z_aKUs1Q$`D-|Qwt)L4* ɋ6hF0!EdΈPC8r AWAId'k蠮xD`qE ȜJ\Bgc`(۱{W[Y$X20\]rnJ 2ɤüQG B[IN**~I&hKGCGGi23â/+ɕZB>=mLa ZK[w2q\~Mz'2ŭp`O% xChrq `^j: `i/#<]yyBsT@G$_z v"7aqK y L@ wR {EQ91V5*:/CU 5i1Alemu>WGU1p37rQ^:6 5%_$~s|J6IU]#Tr 7}\< OH$۝UE`Wܒ|_>ӫEsCvjy+5l RC;9{#c`xO|$9al|U1Ŧns32[wWJI(jm^} >5󻅣Sg|e)cV:Oe3P%iޛBBAIN^`6u !a)_]bA^j2_P5_ ׹{Ӓ p<~%AB{bwȤb"9>zMh>y|<6]' >K.dŎ 97 f0:% ' ) MݮVXb˧حۦ?I,cMɭtBPo8+ܽu-6( 6-9Ya:6'ah]Ҙ; PLб.ہ$# .I'M HIjخVʅr(M+V#Uw푿Xٵ-qnRS͏s6tCY}{,Äh_2Rye!ZԦu5E 3?n9 [(:$2p%i(ؒL)L*?@$}( -Rx5I$4e^15yV,BdX̫*uhh&Ɩp47댣w3'>JM|2,o!!ayT^XVK+ 8u~^^p8uxa6n;KPF(.ČXi0$ o'6q=cԙɶ2u4O@uG% =QX2ߔl/F 7z`Pxuktiިampr5)l\,ƼãACMNB\.9L-YʆDjh$ le/xPV4D* (QZE"HAh5ճilݷZ4wW-`z(^Ei0lM.q_<Μ-= !L?nFd#XA#ӘjZ|/2!}">kzG 06/ h[ȏRQNJbI7"~\u`! xɚ\:)3qh2C-ch50`'3){{c|pM0m86W@,i'r챮w<_]%I"}#/nDe55/wj~=&^b(8hɷdڽ@Ӵz+=|f-;fʙH@lt:me:$IڗsiL =Ǹ{f$7w_n^J_eؕgat67kݓIpr!DDf4WriML=^/l.\6[Ii;p5lk((BZJ5JXnߩ#$9tvǧT&MZh>GFrOOR雂mR4F~z3c|#W ?RN\AdݮevuЙ|ȥY݄NKЗgOd6? Uo[)!ؗCh3+VCN BQAbe2':b*]<-| _&A3ttvJo)}6>Ͼr6T'oC,z00_lt(jKշOn5|lXd`G]Nn}b3^{o|1WE-?Hk|MIgϪ ѕoInC ݂!c~ƋƟ}|S>l^2j;6Cm[Ĉ?P&zkrQsʬz*@Ij8t!^]([Bd69~9RG\??y,1  'Es1aD}ag-PD~.X ǡmj l&ڍL!4}"xIb>V;uH%Ds>J"h0[c~x-]_nvw$-M.Oy|,cãJ|Il"@3b(X L7>mǓqhHssf ܖv+Yd&77?_a}V#Ѕ/\K\Rh<8WqZ&# SM` jQ)[hcFlpa?U= CAt)L.!K(.~kU*u*Wxb8 gEa t%wXw/jg(anW Z)3,?mgOnY"G$A%{~} @ Էb XĄm u i %jP_m!FZ>`,f g<#bE-{5o8֚9<%]ZĂ;u=IH;W[rg\d)rp#銀~)!%%(]OJ8Mѿ$4ҏJd]ޗXѻ)/Efȍp+^[x1dAHvt T6#Pk*&εi]-{ Ybc`<\W\t,u2x n$zUZ3JcE9J25Ƈ?~b?(K"x~V '{W {el=qY4gqcؑL7:駵FvG1GoL{5zoOg0`/IWpþd_ho݀m{}!s{,t=0ͪ5#d.@f})wۘ]EG$@Gc_c} ۙ;$V ~r:٥N +.Q-)g[ёW&Q {js҇Re:S_$&B-+]LC'mBHi@ i.N p6WZN4@!I?ZM0)7U`UZx dFeR Ĵo3GWj em/i|Oݯ l%)j)Ou9^5왺,].iX{sVckϙxBp]m2jjʀ/*.+wkςN_+|{܂y`]=Ngk87[nG$b]Sw}kT]D˩Tz[v[ 6a%9yZnY~%W 9B[ I%R1,'k@7sWe(aS-LܮmC3-t=#"bު;َ#&ڮ2(@l+М s^1R#ɍGku{-` AZ~`ND2nmT*̚ yfl."^TX6hϊ3CA00+"^Hٹ,k{%+|;L ]2IUTyNȵ7`Vm/܇d;`>!AGy< ѽ #FﰄF*4(cX:,a,dκ rfXMC,w&?r_pt:pM) ev(AIlǵn>[yFm҃b~oW/@ p2(~j ]adY$N@V@GRYwyZmoN4),#遬=ހ&+?iR;x[,DQVYSIdd=} JTS1b] _! qrjOCJ95Y}b:2tT}T2[!'G0bXC%u$YmtJՁ˭F?V1.BA6Z*kf,VP ߟg@g8XÑ=xgq~]4ܶ/?]1.tE"i<- <;9MvG'DcH2o nҵݛ'VRdCBBn5(rId+t=o75}ߪHR2_CEFp5a s_JF͸ 3ki_˿a׌6hF<+VpD޵ʷfL"Uc7Ge Sv+LQO j%YDŽKs98OA;(g;x71fHy Ro9&eh6r#?|Ǣ߾&@p5he5БeDy{ɡ6](r O6/G+c{ˈ2߹l M3C+zh-(x6ڝIͩ_UnvLƣ\jziMsޕ\4Rr7oA&'U[Aո;|j?H`SGcgXEF0ߙyׯyWP!R"KAm\8$Je8GNH2=xT=RSU,mgUXTmWa;A#4o,08 pWMfvb/0sD!w<=#2>;|Up WnEo瞄,hiYQ C䓴mDh= 6k[Jqo@Pg:vڞpAeW%_8U FUq*ZmT`A0%gB& - VHv ~/ZHA!naxd';?ٽz4_LB.)Ώ^ #^t*Vn˳F2h6_ vD$ -=줶z E{(Cp.%+5\\%_|iV)k:%оp/i9sHaz5V^o$"Vr5ht'ԱU:gb.OcL;22[:Qs~^jRCu< E9n~ַ?o(e_8[%>T=>E-g-{@TnRbw11Ld,u%KnMw] (V?ʓ(fww UB \qm)`o)q,űFO9桖`c\FSyI6 npYҶ勇lӔتG1O?+v%!5J28FFic"s!gkݟ/Dƨcl3}_}A!XS6E[rZDC>,DgԺv!4U,?gź}j/O`%O%ʮz-ʎ7ю4t*e$(πВڳ}фrbUdͲJ{EK3-lf )"社YXRْau&R@`:чj}myEfz {3!ml@ʄ=+4Bɔ{ !*|Fhtcٯ#Otn|ǥdRE(? Ak 3i8h|L]$ fcMzޛb/t*}0|Nf4(WSa4꣔Z>>q1qDg@7G;TS5 }F*a9S1 =o$eFUZ1b5˗QOFV`2h$'zLzŴ'-/[u Ul((JD}=['_6сBz$fs|tU%^z>-Xu_b 4⍫"U(Yo<6oQ"'Zy瀻`CJ#kŷدVށ ) rȝ? }1ҍU`AQUvW 2 MK/љ'r]sR4+@$`#mm3#.z[n~eOOBo K|✹;dav D(NտFUi%uz媆Q$JmK7NZh esgWٍ!:A`s~HmSz鲇BŪ#< l`HfqV1~VR|H)3}lMQw~J@3 k(/#fW K~uu~@R`p3R&ZY9 c&FWT4j5۶[8 L}pI֞Y5BS= 8Uu됊f˾kLVq$t 99Y_%1k(SZW _azU)hstM`>b"_h‹ TX"0˺{t`_6 "pB$\{ט1)1%o2/ !\F"9} :e5]1gTog>]$gR`1X(1٢ٓ 6%'L/=Xbir]@oQ!FDt.۰M^E_m$k4EnQkns,$>BDo^#oT{Mv Ck`?C٬ῇJ4XJ,uMPԕ*=I57 s/Ĕf\KM݇YWF\7yՖ8~3Y"Vvt= S¦v}*Yƈ0NgyT0ўMT,9{fɱ~K/V-Z_bhwmOnނ96LC-ɇͰ ',{AQ)q! mlC up[/JZD8q !t0"cdd4I#.uL3=Tm2_*2ւ%Im<-Đ6=auï"֗76}6mb > XY<+ WOp4)s!F مq(ҟFx qed\r g{X͡!3 B1lE_)INSsH$pdrNzo#:`dBuƛ Rpyq-:}77OTzV0~y!w p#O[?0]ͅC$@/]1O3T[[%5dF]^KJ?b@/`Xљ5$Yzu1C`J3B,vi.{ڒ KyfW鬅[2cp"hSіşϜ38)YM+@'*`~ຣUޘP|u^A}Z q*/7|ie|3xy<~xˏ&`aJh Fp*"=:YLֶw0s's&8ߞl >KdY}1L*$N8{0]Od=7i..sI>4s&̷1][IY|"J3%zd}xX$)0wŜ4pHX'w1'kN9H 7Xut~SB7@!vusg/]8cD6Vܣ 8rz-[?}qbghzd}Y1ng8-˅6iށ!j.(t9'LjyE PG>&DnT*px Vagm] +O` ȹA^snmlVаm'QR<2 œI]I}"k::ﴝ[{ iIc}1.Fj+HvFyaG}NUbQ'$v5h ).Pin"2Ьk—*2{}Yxx2M[#XksViȂM&0d ߫ K7kx3 &W!0]m ɥǩvEEqwێQvr{pӥ^hbqjFm$sy$ )]r@|ut1\VlqSz1vh7MA5qNu^#lBÁܘ۩\c6 0yJG~13pmv&ǔ!#q2OBݲF1Ih?d1Rc$2D˄z-q 2?dVS(Gi23aGu2ԗ|WA7;~+MaQ1L/YDQoC0 A.U? >Q<;M^k8 񋫁BEY6He.8EF|f?AG!_xC .a'rY9q4/ =G6EINU$?OʵXHL@uY ,)6s@jP]sV՚C`Ħf!Jy'{*?w-KNNS\]%  W(TAִ(nx]}.!y~Pif8.nkz64oeԇqR]Xh 6rdX %eMdhA^"鐻f싶G`_D_Vo&)ΉW-j~ 7(#ngg&)&Fڵ/P6;NՖ9V>~z(%yĜPј0RjdOJIǧ7 pwh8WmY$&.ʟG_KߧHz;um^񊣁emHh `PBF{f=VrHJ8\I;b,5Rd&&Pi!8 lsJ܀Xnc6uXkyE՘2_r/`MC "J=)@3̾87l٣nGJa֍,.=񟟊Rm:%h@ߩ9F.Z# M@=H{Ybw z~𚧶**>!NIb$p N_]%_1MZd̜C) 1$A͝%R?9C//}5s0 *^a#ơB|Jl$wH `7llF8 s@}h;l+ڰ6Z Ѭ z`0 &=\#s?YTq=U ^ZlCeco$}q͋)KEcä N@Š+UYJ>=+9Q $!XqFDAF[{@+wB _酢)V=i J L{XCjc2T4 ke#:/J,k!QaC:t: M@VB5t;vg./=ֺmeo7HA[.okMw cp{%kBjCKi$TF2mΔ CWO"wF.6{lz/c;5CBzQ{g>=p0]/ss9CHKD'@rdў6Xf]Anތ=c]kԫY)HqHl~%f(>{epzuvl"^J>XOLy-ߔnCiDuJ"{s3M%#R#BHFVlV ՕŶa%K"{OH6 W͊kzK5i|tBtf^lKĤi ñOIi"\V>!*ېW4LQyV0 6uKd)u#[QaD績.cn~t軚h7ݍxt( 7_-m.219DBZBC"!kR3X~ Ttl 'j&(% ̦ wfzc|.wحJZRgP)ե|9`SE4n;zSE6) =ϡfJָW[JX2e7zV U5K`̉?AQi -J")vJ*kң8|Aka-P>ЭlwhM}4"?7pfO1 ] \Cݺ} I=6gKUq~G=]#9b[Q##Ђ*G,;2-Fixbyq# /zqp,Zoyd,[,)mHe!us01Ys"<+.l?)<`vψő %P`=1X~-9 Y !v#.q >{|!i[9Jx/='Qה>s*H|'LĐj(E ˩;NA|~iocˡ=)3q*lT!P8A/c햺1 ᘟ/7ӖxB;_V8W0X:66:j6ݛX!s~h?m>)T"#q3e}ԜɃ?2kVFۓ} ؅j>EyEltXHqqGuEM?* ^-}ىm^?XLCi,shJ`+ѻdEpUs*_B[)?I{HUS%fVn:YTx)C 0"y+.N[0e#F!_"#zK!ŊZԋ[@Š6m87rOgUAխ)GH"q=܀s)WRϞx@};7#ob}_pGZ 0lL.,u$^na4Q*Tz7K`ZU^ bJQ^wWv0yFrp*Թ GJ)n>J3`wpp] r*:"&i雞̒`٘,7DyY"&C9A l*Δ VSK̊5-<^I?[pW{]܍c va8Wޝ]2/:7 1u/ D{UL՞0|("Qգ䊩Q.{w>i{/]4@ es'-a*x/#-64]Lq\$%Y|C)i?@W/TK_k4!Ε /:0x}oaFo2<c5M%S|T}=:Ji;gCB< )]H N~dCj!}[9(W\J7-ܷ?-S:nNsq򦒀2lS^laq- ˺(veA[@ ll ǼJ)HߢiT=k8A0ѝ7ǍQ8U!~뀖iKB 9Zg}3! e h}@O3 , [XaLh0U%q!l ˞Y50M[u4lly15m4e(j_1yY3[}]]AXeӼ["7r<e'QsGLb;l?<ؒ3V`~mET~z8y!ב|4_>3ʺ|~lj[7A;r,F)k>Q'Gqf}+iU^O_ۉd%Dx@1q=p7,cLldq!&,MNJ?EfgQoD ac炌x)NL10vb~HTÖ4WpCqᨆJT >جf&O'.8szvTvTͱ@56G2ODa _XW˽2ꙍ73 hnĽ-.f0P5isH+6&)lSȴ &iZh' wx}=+X"L\Lr 5~ȾDgok `4]o/e.j(uK ® zVk9=Akjz5Rx1+HWaW%ַ@_ +}0Ë"Zi] @ʩKgQ@>]mc8Uaq,iq-V Mr2\XOZy{N!1iPv0ɨegi꺉P^>\byQ[/LݯM#[hZL7 "U UOI_4D\M@UkO GCi&%=g8~oQmWgCņ? =[e IeؘGEB> ?FYx$m7 SX=0 *@9v ŖW.{1O%GIP,d{8ԧsW4dӡ_a'A@Wʙ\7]9jyN=S=55M&\ħe( `cR9O{踖Ec Jx*#9!sH0C -'Ao6}o2 Y['_sF8aHe99kkVya%ä]p#o5+ S'z'^N= pdj%UhKxPkU@QK[c? SؙN48F*#B="9w,.c~3=xNYC$ӖMS/bv= MywoO( WXc)18a4e8+DuGp &% O$Yg$UnyɉW<.Eݠ[C|G#d6{QnWں0*݇pdixZE c^+6_ąɥ=Q o[gؘ4N#4a25A;>ff=B/` BX#Zci^F Cefb\f$&?>+7\ ;})3!ie6ڞ= Qۍ"LbA}-U8U5s5BJ C>]Tfj,!iI(y6eB l1myVdRBgsvG$Sww۫eYp6.eEM 6.f=]d%_- D]@ 6m&Q9c:( mM5:&ݰ'Zw=meNTu$id` M]6X*Xƞ{.B0xNv]ӫQߩ߈'&Vt nevd37X^u݀s9_=P'Ht͡7oqWz+ hCJ#3Ty tO.ͬmҸ`mAtŻ/7'`x~= A˫윫BEM>g pYi+XO"z(#P2 edҲf9^#]I+ŇNg7]#YCIqi2ܜ .h\8hVP }V9I2wr@4h:mԫ-ȋd6'<6s-^+„=J6!7%a\+Kuݍ1 GI_:O0 H- )bhD@hsSRLHv6/Α+;YcGCCc6J?ea Bч|!HBi,#q/M1?@+i?Dwgʰy5RQ°T+qTREAR[ɖ"S+x+ipfVhrC͠^3+kcZK$)C76ԃCWO$^UvJIpRF79Oun eP H 훣f8!;#ytCf\,Ѧl0,hpۜ 槳qUh>f7?D;'lybZh|s9{LtF>%sV47o-x}k ;{G[<$2ȳng)2d2Nncʸj  X@ɖ٭>eCEsS=e↝ܧK,Tdlݬ xM52Ж)%UP8QףKx8يmo#}duFFy'9*S^;\Vs8_BG/dU;R0?5K9w%tYe]+v$٨zDB?N9Abt: ¯d`C=YpͯjAB(I)p9kVF>UwR.zۢ;KH42fhF~ՙ$]`?kE Qb@pi#[Ruk,qZv3Ɂ `&uw蒶UL}k6#(ih,i+1n࠷BNӰg|!] 䯶,sZZ=/ ˒4oB7Gj*hiwG^迷oJ u(v52!Wsjΰw*3 |ؓ\TԴa')6NV`ę e/TE4N`{ B?}%qlAJ>#FZum{UnV:C|ŁKs봀jTݜYs"R =5;Xp^7ˇb AyC0[I}'!uywE1-o,аIvd\t/jYo9KnC@':EXf$nL 7+SeD﬉?%"{|M#] <2q,Y'3WRBedT[Ι1;7V/qS#GL@ESv5 s!gE+#7"kmB 7]rP!ORAn]BT[#W3ZLe]^Zg?U|$f/үꗀb-g] }7V'v/: *ߛNy!99 -TJJYgI:6EJ]S ,S' ~('sO 0u"D\Apu[ic^xkfKܳU4ݱlڒ AbĵE{oY.|A/]`.,Hx}{Q%OO{n،0'P!t_ /F?{@?Ba˷,胘 ?Vp*ݻe+@0،QCws}F):7`ʪN7N/N7X!#ʓҟZ!v.Wauۂ? [c v[&Ql1~dۗ겭X;KRN=mf Md_ϙ 'WN)Ћ+۟;{^Z|oYw55L>y^|m%y"\B~]jdv§I ͫ4j(Ll7 eȋW' 8CߝS%~ԍ^Ci-OyC?jOVrY08,(;t ۨ ;Tu|!b*w̫ XUv^n11 RKϜG`tϗ@zwڷ̚  ˡfEbЕS1I sf# ]Zlo@9:PąUr"ߨۃC6Jع1mF.=TȪ_fEeF;``+;zɄC '+|:ķr^Ri `5Iqd Rk8CT sbD(g[c6?Art(Tk{V#@ >%З8~ٕCGy"0Ţs8TèFM5цxԴ~);ߑzLN8W(:%A;(la!Z^x!x"6}LaBD\=stHgt^q`$陌_mhq\jS0>޹ -8^_d'w_Es#f!7=c,s %%0mqh rmE}' ܙ\wIiWr^q+)@{ѿn1L*צ̤ _΢0m[>fld:~吺𺻜ut]7Pc2v/W(OǿՊaqU z%m9tnE 0x3҄6[C8m]ʱ =^i_o7ٟDŽ3[!IQ+Y9kAxFBJ!LBJ߶qθQqb͔.%,'_A[r@-H9Ց9'ѓn%t0r  I+BlsL#`o022w S,Ub[񚯁vݒߡ@U{ Xs^/8nP@crEG <[!}6Bi 5x|՟,S D\qyDHV)u 8ȧ@$z(s^NR5;SE7/b0˷?,5.ARl&y7)y x?>AM<|ZI-iLUi{Ud~rJ߇v’o(qcl "9(L<ѐ9B3qUx[u/RDzw~N'eꛒ+N.5QS̤nJ|¬ج11?py׼6t"i|*6R,>C L !BxQǢuޓâf'oC=(|*!9m% Qou.9'cAw $IOp$gwq {~Sa!Ut7808|3txIo&zVՌK{f7ER)'+`vA+ ؆iC xw9 _oNpӷGl rCfD H g1-`;K5@>:]@Mq/̤Ȥo)ji~/ H +cS84[T!DF 1y1bX0I}߀kxMFN+!ElE}IYnV),7L] Ŷ|1}FܕZL`1dH] D5UZZ 炝'Yqlԧ >yt6_b`I`fV_t} Q2QW!?AmTKG& 1~|c8("IS8ta\/]eKV^5˵ޠ*2r Ŗ)\^dU<;3_9<;+ڧ,A9_f68~гENL'fpZT!fOfMCJ(xM<.Q<tORG;)f@ 6ה)2 7%vL.Hgr5vҾpe;}D&Li~J(K/eb /jJJ8DW ؄03݅ 7(T GT{@i* OF5Ho1C/IFcU1߰RIfs*XZi{K YLJmFj9QimBbeL)4rg~U8t[ijU|F^fZ%=xz- Е٢`Qwԓ4rFegirrˎBfQ^vSm.6;]%W= ;&aFE&ե%ǑUe4EuSsu렒HԮ=iB6"K$^ZZ-{V`{si0l c'!#XVOd'nQ.l !3 ͢w _G ֤Yo?kc'9P6_ T~=vQ0Cp؛}_{A/0y3w}DDקv oʚt (M 'KOw9 kΰX!i2σT{rEĕfK#ɶo.ߋaΑh|1,0Ƈp6ɚ`H[]gplڪ?^$59Pakl2R ޮWG6xs8?|6^3B!:. | WɪܺbwBc*˰Quw u1 l;^AG(D3h7^ZCG7шawoKC?ISrY9YV!1kZ=)dMC V7/q {n~zL\53%{o^JNUpPyu}eqcCF/}㭗5*Ԩ ܦEpo =1Eh*k/fC I#>ѥ';ǺcoHrT{A!NJ`=lAlzYAi"'mۤ] *q7QKW( )~)n`8T##^zt0ayygbjDr a 8z‡欮EX^BSYM4@F/3d xy\\pP!?յ;i*)$=u =0=Y֚S j ӵk>ZM Ɛ%+FBᩄ>q7:GB5uhc7'T#; c{ϰ(fa&HI0% V}d=^!I&bXjڋ *IRGO^X I i|ou7Q8yέ)mpx!}-a<+?Dun\D뉁D1{16* NvMOn&cJ#]ƿgZJ=ۯ?Rfsb\y2:r!rYnqI[V~͢RF#ݍvUvn,23.vk@Lq&k2So{EMUV2Jn1y RƓ& kl,b7 oz" }oh8qq6rajkkBIKɿ RcAڨKipSU; LbxTĶkWæ"u",pu62KȦ^]Xv=73kt[Px>A__q_#X`Xa(.g}/x| /9{P%' ]I0KXI|r w9t;-Ʃ쎺n .>eFңtXil"sEƑ(Dus>jw*: !Bab1nƕÂ|NƓg{HBi"“trr\0LeyԂX+ڲ+M{Ǫ󈲌o"yg~]/mӚgW$O<2p5Z=! b:м,n\^ d ^fb(C! Iv40̇ tUvF?{-$ wTDs˷ Ps,L xrTΫi(%Zo>X^̀}^(.O:`gI{vmʺy(_ ǬwPt@puPZ⎬!S›8G~" kjRAq?rpbŞ0Ar|5ʴe hK lsEIYYj|, bH@@dMEU^\S3x/~ĸ<[ԹÊ;mᚴYݻK`wé{JliYg[AiU+wJ#{ݴNic&:nގ~H9!{]C)`lQPӞ\X 6[?.|*[.uL 7N|j: =%p-R>Cg婵 Lց20lEE_6`q$kGӢg.@F,!"Z }j-o9{15mOcɝVtV1']ә$kG~BuMR.ҍe(:[M5yAYB\i YNX Ml'& ។