Znik's questions

If I'm using openssh server, allowing multiple public keys are simple. It is enough put it into file ~/.ssh/authorized_keys with content

ssh-rsa ****there_is_public_ssh_key****  some_text_typically_user@host
ssh-rsa  *****second_pub_key****  another_text
...

But how to do it with proftpd with sftp protocol? Typical configuration for single public key is, base config for virtual or global:

SFTPAuthorizedUserKeys file:/some_key_ssl_store/%u/autorized_keys

with example autorized_keys file content:

---- BEGIN SSH2 PUBLIC KEY ----
Comment: "some comment"
*****public_key_splitted_with_some_lines*****
****second line for the same key ******
****third line*****
****as many lines as is needed *****
***last_line***==
---- END SSH2 PUBLIC KEY ----

How could I store second key? Should I insert next block BEGIN to END after this example? Unfortunately I didn't find clear explanation for this one.

Currently I'm using workaround with many users with the same UID's , but this is not so clear config.

is there available any software for ftp proxying? Problem is old ftp server that cannot take ssl layer. Idea is, make additional gateway that take client connections with ssl, uncrypt this and put connection into this old ftp server. I found FTP-Proxy, but it supports only uncrypted connections on both sided. I found Delegate also, but it is big combo pack and is very expensive. And the last I found http://www.ftpproxy.org/ , it is very interesting. Unfortunately it is not developed until 2011 year (not supported for 5 years:( ) Can anybody help me with looking for proper ftp bridge/gateway/forwarder ?

I have any very long sql query in postgresql. I tried show what postgress do with:

select * from pg_stat_activity

unfortunately I see something like:

select some_fields from anytable1 anytable2 where \
( anyfield1.anytable1=$1 )and( anyfield2.anytable2=$2 );

Is it possible to show what values are replacing parameters $1 $2 ? It is not important, it can be log file or any sql command. I must debug it because something is terminating. this is long query and I want to test it manually.

How can I customize "403 Forbidden" message? For only this message I want add additional info, like this "403 Forbidden (you have no rights to [URL to repository])" . How to do it? I want to save compatibility with any svn tools, like native svn client, tortoise, java programmers environment etc.

--edit--

My environment:
OS: Linux Debian
SVN: 1.8.8
access protocol: HTTP(s) by Apache and DAV svn
auth protolol config: authzsvnaccess

All works like I want, except forbidden message. This misguide users. They think problem is with service, but really problem is with access rights.

It looks like joke: swapfile on "ramdysk" in 64bits system?

I look into file: /proc/meminfo and made some investigation. Look for line: SwapCached: nnnnn kB . One is what I don't understand. What for linux kernel caches swap? What for caching this? Isn't better idea leaving page as active?

Another, what is difference between swapping and paging? I never found exactly explanation about it. Where can I see counters?

Thanks for any explanation.

I succesfully configured ntlm authentication. Unfortunately config allows semi basic authorization. For example when I'm using tortoise svn1.8.4(with serf access lib), chrome or IE web browsers, they authenticate NTLM succesfully without prompting anything. In log file I see authenticated users. Unfortunately when I'm using for example unconfigured FireFox or Maxthon, that browserws prompts me for credentials. I don't need this, because the same situation is when I'm trying access from out of domain computer.

I'm using windows server as domain controller, windows7/8 as system client, linux/debian as web server. I configured kerberos from linux do windows AD, winbind for local NTLM authentication and apache 2.2 series. For apache authentication glue I use mod_auth_ntlm_winbind.so apache2 module, and under directory/location config ntlm helper for communicate with winbind. This works properly, example for apache:

<Directory /var/www/>
  #defaults for main www directory
  Options Indexes FollowSymLinks MultiViews
  AllowOverride None
  #modified, prevent for any ip access, for future add authless access from specified hosts
  Order deny,allow
  deny from all
  #allow from IP/mask
  #settings for NTLM auth with winbind helper
  AuthName "NTLM Authentication"
  NTLMAuth on
  NTLMAuthHelper "/usr/bin/ntlm_auth  --domain=MY.WINDOWS.DOMAIN --helper-protocol=squid-2.5-ntlmssp"
  NTLMBasicAuthoritative on
  AuthType NTLM
  require valid-user
  #because ip is default deny
  satisfy any
</Directory>

I hoped, maybe I can do some redirection using apache authtype variable, then I added to config above rewritting:

  RewriteEngine on
  RewriteRule ^ /cgi-bin/TestAuth.pl?DollarOne=1&AUTH_TYPE=%{AUTH_TYPE}&REMOTE_USER=%{REMOTE_USER}

And example script TestAuth.pl as cgi content:

#!/usr/bin/perl
use strict;
use warnings;
use Data::Dumper; #easy way for print system variables
print "Content-type:text/plain\r\n"; #respectint HTML protocol
print "\r\n";
print "Enviroment contains:\r\n";
print "x\r\n";
print Data::Dumper->Dump([\@ARGV,\%ENV],[qw(ARGV ENV)]); #prints all script arguments and process variables

Unfortunately in all cases, with windows based auth ntlm and prompted credential, I allways see AUTH_TYPE is allways NTLM. Then there is no way to recognize what browser does. In that situation I can access from clients out of domain.

I tryed wrap ntlm hepler by strace. Unfortunately I don't see anythink important in its dump with four way combining success/failed auth and access by IE non prompted ant FF prompted. I think the same situation occurs when ntlm helper authenticates to local samba server, but I never tested this.

Now I'm trying do some config with multiple auth type, Basic and NTLM. I try do Basic first and filter out this with allways fail and redirect it to info page. Unfortunately at now without success with NTLM mix :( NTLM is allways done first.

Then anybody have an idea how to prevent credentials prompting? How to revoke access from prompted clients? How to recognize credentials are from prompt or from windows client api?

It is possible to tell MUMIN plugin draw graph with different up and down Y axis scales? I looked for this on Internet but found nothing. I read mumin docs, but this points to RRDtool docs. In last one I found nothing.