On Windows server the disk performance is not displayed by default in Task Manager.
For Windows 2012R2 (and some other versions) it can be enabled by the command diskperf -y (and restarting Task Manager).
This does not work on Windows 2019. Is there another solution?
(all solutions on internet that I found are for older Windows server versions)
When connecting to a remote PC, I get this error:
But if I walk to the remote PC, login (with the same credentials) and walk back, RDP suddenly works. This happens each day. The remote PC might be powered off in between (I'll check this in the future).
Details:
Walking to the remote PC defeats the purpose of remote access, so I'm looking for help. Also, I would rather not disable NLA.
EDIT:
Another workaround is to use another remote access software, and perform a "local" login (they usually just mirror the local screen and keyboard, so this is possible). After that the RDP login usually works.
With a certain web site, a certain client certificate works fine with Firefox, but not with IE or Edge (all on Windows 10, as both IE and Edge behave the same, I'll use the term "IE/Edge" from now on).
The error shown in IE/Edge is (as usual) pretty vague:
Can’t connect securely to this page
This might be because the site uses outdated or unsafe TLS security settings. If this keeps happening, try contacting the website’s owner.
IE/Edge using another client certificate (from different CA) connects without error to this same website.
Details:
Any idea how to make IE/Edge also work in this scenario? (or if it can be solved by changes on the server side)
Is there a comprehensive explanation how exactly does certificate chain verification work in apache httpd and how exactly does the SSLVerifyDepth parameter affect it? Possibly as pseudo-code.
Most references just casually mention it.
If I have two physical hard drives in a Storage Spaces pool and a 2-way mirrored virtual disk on them, how can I replace one HDD with a new (larger) one, without at any point having only a single copy of data?
A naive plan would be:
Starting point: two drives: hd0 and hd1
But Storage Spaces seem to work in other direction:
Is there a way to do this without having at any point only one copy of data? (besides the obvious "backup and restore", which I expect to be much slower than a single copy operation between hard drives)
OS: Windows 2012R2
A few days I copied a large (56GB) file from a workstation to a file server. After checking the copy I found out it had a few bytes different from original.
Details:
The file was copied by drag-and-drop on the workstation from the local disk to the network shared folder (on the server). The file size is 56886041991 bytes.
A second copy done the same way one day later was OK (checked by md5sum). Comparing reveals there are 97 bytes that differ. (see below) The only pattern I see is that the broken bytes are clustered in three groups where each 128th byte is changed.
What can I do? Where to start looking for the cause? It can not be the disks on the server, as they would report a read error in case of corruption, and even if not, ReFS would not notice the bad checksum and read the sector from the other disk and if that is corrupted too, it would (should) report a read error. SATA has CRC. RAM has ECC. Network has 2 layers of checksums. The Workstation has no ECC memory. Maybe network driver bugs?
Output of cmp -l: see here
Additional tests done in the meantime:
md5sum /dev/sdX in a loop: 5 times executed on the 5TB disk , over 20 times on others - no errors detectedI guess it was a lone cosmic ray...
I found that when accessing a web application that uses client certificate authentication run on Tomcat/APR (on Windows) with Firefox or Chrome, the client cert is "lost" after a short while. To the app it appears the client certificate was not sent.
Example code (JSP fragment):
User client cert data:
<%= ((java.security.cert.X509Certificate[])
request.getAttribute("javax.servlet.request.X509Certificate"))[0].
getSubjectX500Principal().toString()%>
After a few refreshes of the page (where it will show the client certificate DN) the page will fail with a NullPointerException as request.getAttribute will return null. It usually happens in less than a minute. To be more precise: when reloading about once per second, the problem occurs almost every time after 30 seconds. After that each request will fail the same way, until I restart tomcat (or restart Firefox, or just clear "Active Logins" in Firefox and re-select the certificate on a new connection). After the restart the problem always returns (and goes away for 30 seconds if I restart again).
This happens with Firefox (v39 and v40) and Chrome (v44), but not with IE v11.
It also occurs with different versions of tomcat and Java (and OS bitness).
A test case using latest versions is:
in server.xml add a line:
<Connector port="8443" protocol="org.apache.coyote.http11.Http11AprProtocol" secure="true" scheme="https" maxThreads="150" URIEncoding="UTF-8" SSLVerifyClient="optional" SSLProtocol="TLSv1+TLSv1.1+TLSv1.2" SSLPassword="testing" SSLEnabled="true" SSLCertificateKeyFile="C:/your_server_key_private.pem" SSLCertificateFile="C:/ your_server_key _public.pem" SSLCACertificateFile="C:/supported_client_CAs.pem" />
start tomcat by executing startup.bat
(see the bug linked below for a complete testcase with all the needed files, including certificate files)
If I don't use APR (by deleting the tcnative-1.dll file and adapting the connector syntax for JSSE) the problem does not happen.
Tried versions, all having the issue:
A similar issue was discussed on the tomcat-users mailing list in 2010: Client certificate gone after 1 minute timeout (SSL, APR) but with no solution. I posted there myself recently ( Firefox SSL with APR - losing client certificate has a bit more details), but it is basically just my monologue.
Edit: Certificate info
Originally I tested with a server certificate issued by my private testing CA. Now I also tried with a "real" certificate issued by trusted CA. (I used my personal certificate. The browser complained about the hostname mitmatch which I clicked away).
Edit: bug report
Reported as Bug 58244 - two way SSL loses client certificate after a few requests
Suggestions on how to debug the issue are welcome.