Is there some way intended to store non-sensitive data in Jenkins scoped to a build configuration so it can be read from a pipeline script?

We're migrating to a new Octopus Deploy server, and our Jenkinsfile looks like this:

pipeline {
  environment {
    OCTOPUS_CLI_SERVER = "https://octopus.example.com"
    OCTOPUS_CLI_API_KEY = credentials("Octopus_Deploy_ApiKey")
  }
  // ...
}

I can update the API key centrally via the Jenkins credential manager, but I'll have to edit and commit the change to OCTOPUS_CLI_SERVER in every branch, since the URL is hard-coded. As long as I'm changing this, I'm wondering if there's a better way than just hard-coding a new value.

I could store the Octopus server URL in the credential manager and access it the same way, but then its value will be redacted from logs, and that could be annoying. Ideally, what I'm looking for could have a different value for multiple projects. For example, both Project A and Project B might read a variable named "PUBLIC_DOMAIN", but one would get "a.example.com" and the other would get "b.example.com".

I'm mentioning Octopus Deploy because it happens to be the change we're making, but this question could apply to any data accessed from a Jenkins pipeline, this isn't specific to Octopus Deploy.

I'm hosting two web apps in IIS 7.5. They must share the ASP.NET Forms Authentication cookie. Since I do not want to put the machine key in the Web.config (I am not using web farms and I don't want the key visible in the web.config file), I've set it to auto-generate with the following setting:

<machineKey validationKey="AutoGenerate" decryptionKey="AutoGenerate" />

According to the documentation, this should cause IIS to auto-generate the same machine key for the two web apps. On my Windows 7 and Windows 8 developer machines, this works as expected. Either web app can authenticate the user, and both apps recognize the same auth cookie.

But, when I move this setup to production running on Windows Server 2008 R2, the two apps will not share the authentication cookie. When WebAppA authenticates the user, WebAppB cannot decrypt the auth cookie and forces the user to re-authenticate. When they do, the new auth cookie is not valid for WebAppA.

I've proven that it's using separate machine keys by explicitly setting the machine key in both apps to the same key:

<machineKey validationKey="F801AB..." decryptionKey="ADB3C1..." />

When I do this, the authentication works as it does on my developer machines.

What difference between my development and production environments might be causing this?

We have several Windows workstations which are shared by multiple users. I'm currently considering a scheme where users have their own user accounts and profiles, but they share the same Desktop and Documents folders. Our users are used to sharing things with each other by saving to the desktop, so this wouldn't require any training. My questions about this scheme are:

1. Is this a terrible idea? The fact that I don't see anybody else doing this makes me think there's something wrong with it, or there's a much easier way to achieve what I want.

2. I could probably do this by logging into each account, going into properties for the Desktop and Documents, and choosing Location → Move. Is there a way to configure the computer to do this automatically on all new user accounts?

Scenario

Currently, the workstations log into a single local user account. The only sensitive data is stored in a few applications like Outlook. We do not have a domain and have no plans to create one.

As far as I know, we can't simply password-protect Outlook profiles because we use Exchange in cached mode. OST files can't be password protected, and since we use cached mode even if we enabled "Always prompt for credentials" on the Exchange account, a snooping user could just hit cancel and look through cached email. When searching online, the advice to protect Exchange accounts seems to always be "use separate Windows accounts".

Since users love saving everything to their desktop and that's how they share files with each other, using separate accounts would require everyone to remember to put shared documents in special shared folders. I foresee this just causing too much friction to be worth it.

But, if I could create multiple accounts that share the same Desktop and Documents folders, users would be able to share files simply by saving them to the Desktop or Documents folders, and yet sensitive per-user data would still be stored in AppData and therefore be protected by ACLs and the Windows account passwords.

The workstations are running Windows XP, Vista, and Windows 7, and running any version of Outlook from 2003 all the way through 2013.

We are using Exchange 2010 as part of an Office 365 subscription. We have a security group owned by Alice only. Without using Alice's account, how can the administrator take ownership of that security group?

PS C:\> Get-DistributionGroup "SecurityGroupX" |
          Select ManagedBy -ExpandProperty "ManagedBy"

namprd00.prod.outlook.com/Microsoft Exchange Hosted Organizations
/example.onmicrosoft.com/alice

I am a member of the Organization Management role, so I expected to be able to override this permission. I tried using the Exchange management portal, and I also tried using PowerShell:

PS C:\> Set-DistributionGroup "SecurityGroupX" -ManagedBy "[email protected]"

You don't have sufficient permissions. This operation can only be performed by a 
manager of the group.
    + CategoryInfo          : NotSpecified: (:) [Set-DistributionGroup], OperationRequiresGroupManagerException
    + FullyQualifiedErrorId : 99CEE042,Microsoft.Exchange.Management.RecipientTasks.SetDistributionGroup
    + PSComputerName        : bl0prd0000psh.outlook.com

I'm trying to setup a RhodeCode server on Ubuntu 12.04. I have everything installed into a virtualenv, and everything works properly when I run it from the console (paster serve production.ini).

I wrote an init.d script to start it on boot, but it does not seem to work. When I execute sudo /etc/init.d/rhodecode start manually, I see "Starting RhodeCode" echoed to the console and everything works. However, if I reboot, or if I use sudo service rhodecode start, I do see the message echoed to the console, but the Python processes are not running.

I've installed the script using update-rc.d rhodecode defaults.

From researching how to achieve this, the sources I've found have suggested I don't need to run source /usr/rhode/venv if I run the python directly from the virtualenv directory. Successfully running this from the console without activating any virtualenv first seems to support this theory. The virtualenv page seems to confirm this:

If you directly run a script or the python interpreter from the virtualenv's bin/ directory (e.g. path/to/env/bin/pip or /path/to/env/bin/python script.py) there's no need for activation.

For more details on how I've set the server up, this Gist shows my notes on what I've done so far: Installing RhodeCode 1.3.6 on Ubuntu Server 12.04

/etc/init.d/rhodecode

#!/bin/sh

### BEGIN INIT INFO
# Provides:       rhodecode
# Required-Start: $all
# Required-Stop:  $all
# Default-Start:  2 3 4 5
# Default-Stop:   0 1 6
# Short-Description: Starts RhodeCode
### END INIT INFO

USER=rhodeuser

VENV_DIR=/usr/rhode/venv
DATA_DIR=/usr/rhode/data

CELERY_ARGS="$VENV_DIR/bin/paster celeryd $DATA_DIR/production.ini"
RHODECODE_ARGS="$VENV_DIR/bin/paster serve $DATA_DIR/production.ini"

CELERY_PID_FILE=/var/run/celeryd.pid
RHODECODE_PID_FILE=/var/run/rhodecode.pid

start_celery() {
    /sbin/start-stop-daemon \
        --start \
        --background \
        --chuid $USER \
        --pidfile $CELERY_PID_FILE \
        --exec $VENV_DIR/bin/python -- $CELERY_ARGS
}

start_rhodecode() {
    /sbin/start-stop-daemon \
        --start \
        --background \
        --chuid $USER \
        --pidfile $RHODECODE_PID_FILE \
        --exec $VENV_DIR/bin/python -- $RHODECODE_ARGS
}

stop() {
    /sbin/start-stop-daemon \
        --stop \
        --user $USER
}

case "$1" in
    start)
        echo "Starting Celery"
        start_celery
        echo "Starting RhodeCode"
        start_rhodecode
        ;;
    stop)
        echo "Stopping RhodeCode and Celery"
        stop
        ;;
    restart)
        echo "Stopping RhodeCode and Celery"
        stop
        echo "Starting Celery"
        start_celery
        echo "Starting RhodeCode"
        start_rhodecode
        ;;
    *)
        exit 2
        ;;
esac

exit 0

We are using System Center Virtual Machine Manager 2008 R2 trying to allow creation of VMs using templates. The two computers involved are HQ-VMM1 (Server 2008 R2 Enterprise SP1, running SCVMM) and HQ-VM2 (Server 2008 R2 Datacenter SP1, running the Hyper-V role).

Whenever we create a VM from a template using either from SCVMM Admin Console or the Self-Service Portal, the job stops on "Install VM Components" and after a few minutes we get the error:

Error (2927)
A Hardware Management error has occurred trying to contact server HQ-VM2.domain.local. (Unknown error (0x80338029))

Recommended Action
Check that WinRM is installed and running on server HQ-VM2.domain.local. For more information use the command "winrm helpmsg hresult".

When I check the Hyper-V console on HQ-VM2, the virtual machine has been created but it has not been set up at all, and I cannot start it from the self-service portal (I can start it directly from the Hyper-V console, though).

Things I have tried:

• I've found this article describing how to troubleshoot WinRM. It was not previously running on HQ-VM2, but running winrm quickconfig fixed that. I also made sure it was running on HQ-VMM1. I opened a command prompt on HQ-VMM1 and ran winrm id -r:hq-vm2 to make sure the WinRM service was accessible, and I received an IdentifyResponse message.

• I have run Windows Update on both machines, there are no pending updates left.

• I've run the SCVMM Configuration Analyzer and it only recommends applying the latest hotfixes, which I have done, and warning that the reporting server is not on HQ-VMM1.

• One site suggested that a template created in an older version of SCVMM would fail in this manner, so I created a new template but got the same result.

I'm at a loss where to go from here. Any help is appreciated.

Is there any particular backup / imaging software which seems to be a good fit for our situation, or is there some other direction I should be looking in to meet our requirements? I realize this is a strangely-written question. Please comment if there are specifics that would help answer.

To give the necessary background information: we are a VAR looking to engineer a reasonably reliable backup strategy for our customers. Each of our customers has this environment:

• One workstation-class computer running Windows XP or 7
• Two semi-dumb terminals running Windows XP Embedded (not very powerful machines, but each plays a unique role so they aren't interchangeable)
• All machines are networked together

We want to accomplish the following goals:

• If any one of the machines goes down, new hardware can be plugged into the network and remotely imaged with the HDD contents of the machine the night before it crashed.
• We can recover from a crash of either a terminal or of the workstation.
• Backups are hosted at the customer's location, not across the Internet somewhere
• Configuring the backup tasks and running restore tasks should be scriptable. The restoration tasks should be able to be performed by a telephone helpdesk technician with as little training as possible. In my mind, this means scripting it so it's as simple as double-clicking a script.

We have previously used Acronis True Image 9 with the strategy of imaging each machine nightly and storing the data on a second hard drive attached to the workstation, but we found the following challenges:

• Creating the backup tasks on each computer is tedious and error prone, and Acronis does not provide any scripting mechanism that allows creating a scheduled backup job.
• If the workstation needs to be recovered, the customer must be blindly walked through using bootable media to start the recovery.

I've been looking into using Acronis 10 or Backup Exec, but those systems appear to be even more complicated to set up and as far as I can tell also do not provide any reasonable scripting interfaces.

We often want to make quick announcements to our group of 20 people using Office Communicator, so we highlight a group of contacts and start a new IM session. However, only a maximum of 10 people are able to join the conversation; after the maximum number of people join, all other invitees get the message:

Cannot connect to the conference because it is full. Contact the conference leader for more information.

Is there a way to increase the maximum number of participants?

I am trying to write a utility as a batch file that, among other things, adds a user to the "Deny logon locally" local security policy. This batch file will be used on hundreds of independent computers (not on a domain and aren't even on the same network).

I assumed one of the following were my options, but perhaps there's one I haven't thought of.

1. A command line utility similar to net.exe which can modify local security policy.

2. A VBScript sample to do the same.

3. Write my own using some WMI or Win32 calls. I'd rather not do this one if I don't have to.

I am in the planning stages of migrating an installation of Microsoft Dynamics GP 9.0 to a new server. The old server is running Windows Server 2003 R2.

I've been testing installing some VMs to make sure the migration will run smoothly, and run across some hurdles. Any version of Windows Server 2008 allows me to install GP properly, but once I try to install GP service pack 2 using the MSP file I have, I get the message:

"A fatal error has occurred. The Microsoft Dynamics GP installation has ended prematurely."

I've tried with these versions:

• Windows Server 2008 32-bit
• Windows Server 2008 64-bit
• Windows Server 2008 R2 64-bit

I've tried running it manually from an administrator command prompt: msiexec /p en_gp_9.0_sp2.msp. I also did this with UAC disabled, just in case.

When I created a VM of Server 2003 R2, I was able to install the MSP properly. I'll use Server 2003 if I have to, but I would really prefer not to miss out on the newer features in 2008.

I am trying to create a maintenance plan that will run automatically and back up my SQL Server 2005 databases automatically. I create a new maintenance plan and add a "Back Up Database Task", select all databases, and choose a path to back up to. When I save and try to execute this plan, I get the following error message:

===================================

Execution failed. See the maintenance
plan and SQL Server Agent job history
logs for details.

===================================

Job 'Backup.Subplan_1' failed.
(SqlManagerUI)

Program Location:

at
Microsoft.SqlServer.Management.SqlManagerUI.MaintenancePlanMenu_Run.PerformActions()

I've checked the maintenance plan log, the agent log, and just about every log file I can find and there are no entries at all to help me figure out why this is failing.

If I right-click on a specific database and select "Back Up", the task succeeds. I tried changing the plan to back up just that one database and it still failed.

I've tried running the plan with both Windows authentication and SQL Server authentication with the sa account. I also tried specifically granting the SQL Server Agent user account full privileges on the backup folder, but it still failed.

While searching the web for clues, the only solution I've run across so far suggests running sp_configure 'allow_update', 0. I tried this but allow_update was already set to 0 and it did not fix the problem.

The Windows server and SQL Server have all updates applied to them.

Thanks for any suggestions!

Yesterday I began setting up a server with Windows Small Business Server 2008. All I am configuring it for right now is to be a domain controller and Exchange server.

I completed the initial setup of SBS then started looking through different connection options (allowing VPN versus using a TS Gateway). After I rebooted one time, I started having three not-obviously-related issues:

First, I could no longer remote desktop into the computer. I ran TCPView and saw that it was no longer listening on port 3389. I checked everything in Terminal Service Configuration but everything shows the computer ought to be allowing connections.

Also, when I tried to use anything that required user account control elevation, the UAC dialog never popped up and the program that was waiting just froze. If I try to run "regedit" from the Run box, for example, it never appears. When I run in safe mode which does not run with UAC, I was able to access everything. I didn't want to deal with it, so I turned off UAC and rebooted.

Finally, in the Windows SBS Console, there are status indicators for Security, Updates, Backup, and Other Alerts. The first three get stuck saying "Querying". Looking in the computer alerts, I have events showing the following services stopped:

1. Background Intelligent Transfer Service
2. KtmRm for Distributed Transaction Coordinator
3. Distributed Transaction Coordinator
4. Microsoft Exchange Information Store
5. Microsoft Exchange System Attendant
6. Microsoft Exchange Transport
7. Windows Remote Management
8. Update Services
9. Windows Update

I figured I must have configured something wrong accidentally and I couldn't find anything using Google explaining what might be the case, so I just decided to format the hard drive and reinstall SBS from scratch. I did this and everything was working last night, but I just turned the machine back on and it is doing the same thing again!

On my second install, I did not configure anything except the following (all from SBS Console):

1. Connect to the Internet (set IP and router address)
2. Turn off customer feedback.
3. Set up internet address.
4. Decline to use a Smart Host for email.
5. Added one standard user account.

Since this happened again and I was very careful the second time not to configure anything outside of the SBS Console, I feel like there's something else going on.

Right now the machine is on an isolated network that does have internet access. My desktop is the only other machine plugged into this network.

Any and all help is appreciated (before I tear my hair out!)

We are looking to create an email notification system using our issue tracking software and the SQL Server database. The goal is to send email when a number of conditions are met.

This is to satisfy custom notifications that our customers request. For example, one customer would like an email sent to person Y if a ticket is opened for a software problem, and an email sent to person Z if a ticket is opened for a hardware problem.

SQL Server Notification Services seems to have the functionality, but we are interested in a GUI rather than writing queries by hand each time. We also need some way to manage them, since the number of custom notifications could get into the thousands.

EDIT:

These are good suggestions, but one requirement is that we have a GUI for managing rules. We don't want to be hand-writing queries every time we need to create or change a notification.

We know we could hack something together with scripts, triggers, and scheduled tasks, but it seems like there ought to be some kind of packaged product that does this already. Maybe it requires some database skills to initially set up, but ideally after that it can be updated by managers who aren't DBAs.