Jürgen Steinblock's questions

I have an apache web server which serves files over webdav (Ubuntu 18.04.5, Apache 2.4.29 with mod_dav enabled)

I modifed the permissions with chmod on all files and now the webserver returns the wrong creation date (changed instead of created)

<lp1:creationdate>2020-11-12T07:02:01Z</lp1:creationdate>
<lp1:getlastmodified>Mon, 12 Oct 2020 05:50:52 GMT</lp1:getlastmodified>

This has to be a bug in apaches webdav module. The bad thing is that, because I use the webdav server for my clients to perform backups. And now if a client tries to restore a backup, all backups have the same timestamp and he can't tell which is the right one to choose.

As a quick fix, how do I change a files ctime value to crtime (or mtime)

here are some debug infos to confirm that this happens.

LC_ALL=C stat ./backup.zip
  File: ./backup.zip
  Size: 20234077        Blocks: 39520      IO Block: 4096   regular file
Device: 6620b6e1h/1713420001d   Inode: 61214357    Links: 1
Access: (0770/-rwxrwx---)  Uid: (10001/user)   Gid: ( 1008/group)
Access: 2020-11-11 23:46:05.827618160 +0100
Modify: 2020-10-12 07:50:52.910941633 +0200
Change: 2020-11-12 08:02:01.492212852 +0100
 Birth: -

stat -c %i ./backup.zip
61214357

debugfs -R 'stat <61214357>' /dev/ploop26158p1
Inode: 61214357   Type: regular    Mode:  0770   Flags: 0x80000
Generation: 585915609    Version: 0x00000000:00000001
User: 10001   Group:  1008   Size: 20234077
File ACL: 0
Links: 1   Blockcount: 39520
Fragment:  Address: 0    Number: 0    Size: 0
 ctime: 0x5facdde9:755a49d0 -- Thu Nov 12 08:02:01 2020
 atime: 0x5fac69ad:c551cdc0 -- Wed Nov 11 23:46:05 2020
 mtime: 0x5f83eebc:d92f7704 -- Mon Oct 12 07:50:52 2020
crtime: 0x5f83eeab:bd410660 -- Mon Oct 12 07:50:35 2020
Size of extra inode fields: 28
EXTENTS:
(0-511):287372288-287372799, (512-1023):287354880-287355391, (1024-4095):287360000-287363071, (4096-4939):287350784-287351627

curl -u user:pass -i -X PROPFIND https://domain.tld/ --upload-file - -H "Depth: 1" <<end
<?xml version="1.0" encoding="utf-8" ?><propfind xmlns="DAV:"><allprop/></propfind>
end

HTTP/1.1 100 Continue

HTTP/1.1 207 Multi-Status
Date: Thu, 12 Nov 2020 07:23:27 GMT
Server: Apache
X-Powered-By: PleskLin
Content-Length: 1641
Content-Type: text/xml; charset="utf-8"

<?xml version="1.0" encoding="utf-8"?>
<D:multistatus xmlns:D="DAV:" xmlns:ns0="DAV:">
<D:response xmlns:lp2="http://apache.org/dav/props/" xmlns:lp1="DAV:">
<D:href>/</D:href>
<D:propstat>
<D:prop>
<lp1:resourcetype><D:collection/></lp1:resourcetype>
<lp1:creationdate>2020-11-12T07:02:01Z</lp1:creationdate>
<lp1:getlastmodified>Mon, 12 Oct 2020 05:50:52 GMT</lp1:getlastmodified>
<lp1:getetag>"1000-5b172e19a0d5d"</lp1:getetag>
<D:supportedlock>
<D:lockentry>
<D:lockscope><D:exclusive/></D:lockscope>
<D:locktype><D:write/></D:locktype>
</D:lockentry>
<D:lockentry>
<D:lockscope><D:shared/></D:lockscope>
<D:locktype><D:write/></D:locktype>
</D:lockentry>
</D:supportedlock>
<D:lockdiscovery/>
</D:prop>
<D:status>HTTP/1.1 200 OK</D:status>
</D:propstat>
</D:response>
<D:response xmlns:lp2="http://apache.org/dav/props/" xmlns:lp1="DAV:">
<D:href>/backup.zip</D:href>
<D:propstat>
<D:prop>
<lp1:resourcetype/>
<lp1:creationdate>2020-11-12T07:02:01Z</lp1:creationdate>
<lp1:getcontentlength>20234077</lp1:getcontentlength>
<lp1:getlastmodified>Mon, 12 Oct 2020 05:50:52 GMT</lp1:getlastmodified>
<lp1:getetag>"134bf5d-5b172e19a0d5d"</lp1:getetag>
<lp2:executable>T</lp2:executable>
<D:supportedlock>
<D:lockentry>
<D:lockscope><D:exclusive/></D:lockscope>
<D:locktype><D:write/></D:locktype>
</D:lockentry>
<D:lockentry>
<D:lockscope><D:shared/></D:lockscope>
<D:locktype><D:write/></D:locktype>
</D:lockentry>
</D:supportedlock>
<D:lockdiscovery/>
<D:getcontenttype>application/zip</D:getcontenttype>
</D:prop>
<D:status>HTTP/1.1 200 OK</D:status>
</D:propstat>
</D:response>
</D:multistatus>

I am currently in the process of migrating an old webserver.

The old server uses basic auth with users stored in a mysql table and mod_auth_mysql enabled.

The password ist stored with apaches build in sha1 function SELECT sha1('secret') which works for mod_auth_mysql

Unfortunately mod_auth_mysql is not supported anymore. That's why I found mod_authn_dbd as an alternative.

https://documentation.help/httpd-2.4-es/mod_authn_dbd.html

I alreay managed to get everything up and running until the point that I can login with basic auth and a fixed password

<Location />
        AuthType Basic
        AuthName "Test"
        AuthBasicProvider dbd
        Require valid-user
        AuthDBDUserPWQuery "SELECT '{SHA}qUqP5cyxm6YcTAhz05Hph5gvu9M=' FROM users WHERE user = %s"
</Location>

I only store the sha1 hash in the user table. While the old mod_auth_mysql accepted hashes generated by mysql (SELECT sha1('test')=a94a8fe5ccb19ba61c4c0873d391e987982fbbd3) mod_authn_dbd doesn't.

According to https://documentation.help/httpd-2.4-es/password_encryptions.html

SHA1 "{SHA}" + Base64-encoded SHA-1 digest of the password.

Passwords generated by htpasswd are accepted.

htpasswd -bns user test
user:{SHA}qUqP5cyxm6YcTAhz05Hph5gvu9M=

Now I need to convert this value a94a8fe5ccb19ba61c4c0873d391e987982fbbd3 (stored in my db for password test) to qUqP5cyxm6YcTAhz05Hph5gvu9M= (accepted value for password test) inside mysql

I already tried

SELECT to_base64(sha1('test')), to_base64(ucase(sha1('test'))), to_base64(lcase(sha1('test')));`

but none produces the expected results.

I either need a way to convert my existing password hashes to the expected format or convince mod_authn_dbd to accept my existing sha1 hash.

Any help would be appreciated

We use a VMware VCenter installation with a Essentials Plus license.

The official VIC Documentation says the following

Get vSphere Integrated Containers
To obtain the latest official release of vSphere Integrated Containers, go to the vSphere Integrated Containers download page on vmware.com. This page includes the downloads for both vSphere Integrated Containers Engine and vSphere Integrated Containers Registry. You need a vSphere Enterprise Plus License to download an official, supported release of vSphere Integrated Containers.

You can also obtain open-source releases of vSphere Integrated Containers that are more recent than the latest official release:

How to understand that?

a) If you do have a vSphere Enterprise Plus License you may download open-sources releases, too
b) If you don't have a vSphere Enterprise Plus License you can download open-source releases instead

I just installed a PRIMERGY RX300 S8 with Windows Server 2012 R2

The system shipped with a Fujitsu Server View DVD. But I can't find a manual what is the recommanded order to install drivers.

I believed in 2014 you would get a nice wizard like tool which tells you what is missing but a manual would be fine, too.

I donwloaded pfsense live cd 2.1.3 and now I want to run pfsense from an usb cdrom drive.

It loads a while and than crahses with "unable to mount ..."

I know I have to choose boot option 3 in order to boot from an usb cdrom but I don't see this menu.

The computer just boots. Do I need to press a specfic key to bring up this menu or is this maybe missing on the current iso?

We are using qmail as a mail server.

If a user sends an email that cannnot be delivered he get's a message back from qmail with some details about this error.

Hi. This is the qmail-send program at our.server.tld
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<[email protected]>:
123.123.123.123 failed after I sent the message.
Remote host said: 552 5.3.4 Message is too large, rejected.

--- Below this line is a copy of the message.

... header information ...

... message ...

... attachments in base64 ...

------_=_NextPart_001_000A0F27.508A4479--

------_=_NextPart_000_000A0F27.508A4479
Content-Type: application/pdf;
name="file.pdf"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="file.pdf";
modification-date="Wed, 24 Oct 2012 14:27:24 +0000"

JVBERi0xLjUNCiXi48/TDQo0IDAgb2JqDQo8PA0KL1R5cGUgL1BhZ2UNCi9QYXJlbnQgMiAwIFIN
Ci9Db250ZW50cyA1IDAgUg0KL01lZGlhQm94IFstMC4wMDAwIC0wLjAwMDAgMTcwMC43ODc0IDIy
...

It is fine to have a copy of the message with the header and message information. But is it possible to tell qmail not to include the full attachment into this error message? This is a big overhead and it would be best to just limit the size of the message to a few kb since the user can't do anything with the base64 stream anyway.

I have a customer who is running a Windows Domain with a Windows Small Business Server 2011.

Now I want to "update" (or downgrade?) to a 2008 R2 Domain. For two reasons.

• The customer has nearly reached the SBS user limit
• The customer now has a XEN-Server for virtualisation and I want to seperate the services (Exchange, WSUS, Active-Directory) to different virtual machines.

Is there a recommended migration path? Is this even possible?

I am currently migrating from a Windows Server 2003 R2 Standard to a Windows Server 2008 file server.

I want to do a "soft" migration by using dfs replication.

Now I am wondering what is the best solution to do this

a) one replication group per share

b) a single replication group that replicates all shares

I have a server running Plesk 8 and qmail as the MTA.

Now I switched one domain from multiple POP accounts to only one catchall because the mail app at the customers side (Tobit David) has the ability to deliver the mails to the right user by reading a specific header field (can be configured by the admin - that's me ;)

Most MTA's add the original recipient to the header already (mostly the field is called X-Delivered-To) and pleak does this, too. The field is called `Deliviered-To´.

However, there is on problem. Let's say I have a user called John Doe with the email address [email protected]. In the mail header the Deliviered-To field does not contain [email protected] but [email protected].

I believe that has something to do with the customer or domain I created in Plesk, since that number is unique for all recipients from this domain, but different for other domains.

Is there a way to tell qmail to add another header value with the original recipient? Or modify the current value of Deliviered-To?

I have a windows service that needs to run with High Priority.
At the end of the day I want to use this script to modify the priority after service startup:

Const HIGH = 256

strComputer = "."
strProcess = "BntCapi2.exe"

Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colProcesses = objWMIService.ExecQuery _
    ("Select * from Win32_Process Where Name = '" & strProcess & "'")

For Each objProcess in colProcesses
    objProcess.SetPriority(HIGH)
Next

But currently I am not able to change the priority, even with the taskmanger. The taskmananger throws an "Access Denied" error, but I am logged on as administrator and I changed the user account of the service to administrator, too.

I still get the "access denied" message when trying to change the priority. Any ideas what permission I need to do that?