Kirsten's questions

I am having trouble understanding the docs terminology on Multi Tenant.

Multi-tenant: Azure tenants that access other services in a shared environment, across multiple organizations, are considered multi-tenant.

I understand the concept of a Mult-tenant SaaS database as explained in the docs here which is similar to Wikipedia's explanation

But what is a multi-tenant tenant?

From the same terminology the definition of a tenant is

Azure tenant: A dedicated and trusted instance of Azure AD that's automatically created when your organization signs up for a Microsoft cloud service subscription, such as Microsoft Azure, Microsoft Intune, or Office 365. An Azure tenant represents a single organization.

So presumably a multi tenant tenant represents multiple organisations. I just don't see how.

It is a bit like calling a set a multi-set. A contradiction in terms.

I want to test my ASP.Net Core 2.0 Hello World Api on localhost.

I Created the project using VS2017 File->New Projecct-> .Net Core -> ASP.NET Core Web Application -> Empty

It ran fine in the debugger

Next I right clicked the solution and selected publish to create the publish folder.

I copied the contents of the publish folder to c:\inetpub\wwwroot

I set the application pool to No Managed Code and ran Iisreset

When I browse to localhost I get

HTTP Error 500.19 - Internal Server Error
The requested page cannot be accessed because the related configuration data for the page is invalid.

Detailed Error Information:
Module     IIS Web Core
Notification       Unknown
Handler    Not yet determined
Error Code     0x8007000d
Config Error       
Config File    \\?\C:\inetpub\wwwroot\web.config

Requested URL      http://localhost:80/
Physical Path      
Logon Method       Not yet determined
Logon User     Not yet determined

Config Source:
   -1: 
    0: 

More Information:
This error occurs when there is a problem reading the configuration file for the Web server or Web application. In some cases, the event logs may contain more information about what caused this error.
View more information »

The contents of web.config is

<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <system.webServer>
    <handlers>
      <add name="aspNetCore" path="*" verb="*" modules="AspNetCoreModule" resourceType="Unspecified" />
    </handlers>
    <aspNetCore processPath="dotnet" arguments=".\WebApplication1.dll" stdoutLogEnabled="false" stdoutLogFile=".\logs\stdout" />
  </system.webServer>
</configuration>
<!--ProjectGuid: e0c1b13d-2f11-4e4f-9b5d-3150bdecd831-->

I don't think it is a permissions thing because before I pasted the project I had a simple index.html and localhost worked fine.

WinVer reports that I am running Windows 10 Version 1803 ( OS Build 17134.48)

Because of this question I thought I would try importing a BACPAC file into Azure SQL Server.

When I try and import a Data Tier Application ( a BACPAC file) to a new Azure database I get an out of memory exception.

When I ran the Data Migration Assistant I get 1 unsupported feature Azure SQL Database does not support trace flags

I wonder if that is why I get that error

I am following along instructions to deploy a .netcore api to IIS

Only after I followed the instruction to install the .NET Core Hosting Bundle did I read

To prevent the installer from installing x86 packages on an x64 OS,
run the installer from an administrator command prompt with the switch 
OPT_NO_X86=1.

Should I be worried that I did not do that?

Why did the instruction come so late in the steps to follow?

I am trying to depoly a .net core 2.0 webapi on IIS The help here states

"Only use the stdout log to troubleshoot app startup failures. Never use stdout logging for routine app logging. There's no limit on log file size or the number of log files created. The app pool must have write access to the location where the logs are written. All of the folders on the path to the log location must exist. For more information on the stdout log, see Log creation and redirection. For information on logging in an ASP.NET Core app, see the Logging topic."

I visited the log creation and redirection link and I still can't figure out how to do this.

I expect that I need to use windows explorer to go to the logs folder and grant a permission, but what is the user name I grant the permission to?

I see from this link that an application pool name can be used for an identity but when I try entering it as an object name to add a permission it can not be found

Looking at the application pool advanced settings I see the Identity is ApplicationPoolIdentity however that also is not found if I enter it as the object name

The Built In ApplicationPoolIdentity is not listed

I am trying to use Cloudflare SSL with my Azure app on a small basic service plan. I have the SSL set to Flexible in the Cloudflare Crypto tab. The status is Active Certificate.

In the Cloudflare DNS tab I have the orange cloud for the A record and CName record for my domain.

A   mywebsite.com.au    points to XX.XX.XXX.XXX

CNAME  www  is an alias of mywebsite.azurewebsites.net

In Azure Custom Host Names I have a binding for www.mywebsite.com.au and mywebsite.com.au

when I go to https://www.mywebsite.com.au I get an error

unsupported protocol: The client and server don't support a common SSL protocol version or cipher suite.

I also get the error for https://mywebsite.com.au/

If I switch the orange cloud to a grey cloud for the www CName record in CloudFlare, then I get a different error

Your connection is not private
This server could not prove that it is www.mywebsite.com.au; its security certificate is from *.azurewebsites.net. This may be caused by a misconfiguration or an attacker intercepting your connection.

HTTPS Only is Set to OFF in the Azure Custom Host Names.

If I set the A record cloud in CloudFlare to Orange then

https://mywebsite.com.au/ reports ERR_SSL_VERSION_OR_CIPHER_MISMATCH

If I set it to grey (DNS Only) then the website shows with the https crossed out and the words Not Secure

[Update] After clearing the chrome cache and waiting some time both

mywebsite.com.au and https:\mywebsite.com.au started to work with the orange cloud on the a record in cloudflare DNS

I had used dig with trace which showed the CloudFlare Name servers indicating that my change of the DNS to Cloudflare had gone through earlier.

The other thing I had done was to delete the www CName from CloudFlare DNS and www.mywebsite.com.au from the Azure Custom Host Names.

I have since been able to get the www working using the cname flattening work around given in Stephen Cleary's answer to this question

I found a way to host a static website in an Azure blob, using a subdomain and an http re-direct

I do the following

1) In Azure I create a storage account with a container ( called docs ) that has Blob access policy.

2) I upload my static website to the docs container using the storage explorer. This includes some PHP files in a sub folder.

3) In the DNS I set up a cname record for a subdomain ( called info say) with alias myblob.blob.core.windows.net ( where myblob is the name of my blob)

4) In the DNS I create an Http redirect for record to a file on the subdomain for www with url xhttp://info.mydomainname.com/docs/index.html ( spelt without the x. I put an x in front to prevent the hyperlink )

5) In Azure I create a custom domain for info.mydomainname.com

My website then works however if someone knows the location of the PHP files then they can download them which means I must not store secrets in them.

Is there a way I can prevent them from being accessed?

I am using a Blob access policy for my container

I am tidying up my Azure directory and I want to delete a Resource Group. When I drill into the resource group the screen says "No resources" I have not set a filter. However when I try to delete the resource group a warning appears stating that there are 11 affected resources. The resource names contain words like "ForbiddenRequests" "LongHttpQueue"

I am the owner of the subscription

Is it safe to delete the resource group?

I am also experiencing an issue if I try to create a new trial Azure account

and an issue trying to create SQL Server databases hosted in Australia

I wonder if these issues could be related.

[Update]

There is also some information about a failed deployment

[Update] https://resources.azure.com shows

I am trying to set up the urls https://www.mywebsite.net.au and https://mywebsite.net.au to work for my Azure App Service using with Cloudflare.

Where mywebsite represents my web site name.

Currently when I go to this url I get a 404 error.

In Azure, In Custom Domains, when I try to add a host name for www.jobtalk.net.au and click validate I get a Domain Ownership error "No CNAME records were found. Please add a CNAME record pointing to sbdwebapp.azurewebsites.net"

If I try adding a CNAME for www with the value sbdwebapp.azurewebsites.net

I get an error message:

n A, AAAA or CNAME record already exists with that host. (Code: 81053)

I am trying to follow https://docs.microsoft.com/en-us/azure/app-service-web/app-service-web-tutorial-custom-domain#cname

I have set up a Windows 2012 R2 Server not on the domain as I understand that is better security for the IIS server not to be on the domain.

However I want the website user to have read only links to certain documents on an folder that is on one of the computers on the domain.

To set this up I created a work group user with access to the share. In the basic settings of the virtual directory I am attempting to connect as this user. However when I test settings both Authentication and Authorization fail.

Is my thinking right that it is best if the web server is not on the domain? I think the errors may be to do with the error 1219

I am trying to log on to SQLServer express 2008R2 on a Windows 2003 server using Sql server authentication over a VPN. The login and password work for Management Studio but not for the connection string in a VB6 program.

The connection string is of format

Provider=SQLOLEDB.1;Persist Security Info=False;Initial Catalog=databasename;Data Source=ComputerIP\SQLEXPRESS;UID=usr;PWD=mypassword

where ComputerIP is the computer IP Address How should I proceed to troubleshoot?

I am using Windows Server 2012R2 and want to have urls like the following for my web site and for services.

Something like

www.myname.com, www.myname.com/service1 and www.myname.com/service2

Is this possible and advisable?

I have tried putting the services and websites into different directories, mysite, service1, service2

I am happy to call the service as www.myname.com/service1 for example, but I would need the www.myname.com to redirect to www.myname.com/mysite

Is this the right set up to achieve what I want?