Hi I have a single MariaDB 10.1 node running on Debian 8.
Today after months of stability, it has become 20 times slower, and top is showing that >99% is used in user% and <0.3% is used in iowait% (during normal operation our iowati% is more like 5-6%, and user% was more like 50-70%)
The service provider have tested the node and the disks and report everything as "better than average".
If you would like any stats let me know which ones and I'll comment them.
I have a normal Apache/MySQL serving a webapp that companies and users of those companies log in to. So everyone from all the companies are in the same Users table.
Whilst my code does try to keep the companies isolated in PHP, such as SELECT * FROM Users WHERE Company=$COMPANY , I do see the chances of an SQL injection to get private data from other customers as being quite likely as the code base is quite vast. We are reviewing the code, but at this rate we will be completed in years.
In the meantime, I was looking at Docker to hopefully give each of my customers their own container with Apache server (with a tiny buffer, and 2 php workers), and MySQL with a measly 32 or 64 MB of buffer pool. This container would then allow just 1 TCP connection for HTTPS, which would be reverse-proxied based on hostname (eg customer-a.mycompany.com). No files get written to disk. And the PHP source code would be kept up-to-date using git, so perhaps we could even put selected customers on our Beta version, for example.
I have been advised that Docker is not designed for the above scenario, and would not provide me with the security I seek.
I get that a hacker could inject code into 1 container and would affect that one customer. But would Docker not prevent discovery of the virtual hosts used for other customers, reducing the chances slightly that a hacker would have affect on most of my customers. Just one we could financially handle, but not 12.
Aside from security, I was excited about the possibility of the MySQL buffer pool being dedicated to each company was going to make the webapp generally faster because when Customer A does an insane SQL report, I am guessing the buffer pool gets overwritten with the insane report, so when Customer B does a simple query next, the data has to be fetched from disk all over again.
In the future, I would love to see these "containers" on a GUI, and be able to drag-and-drop them onto another server (faster, with less containers).. eg to offer "faster" speeds to certain power customers.
Does any of the above dreaming fit into reality for 2017?
What platform/tool do you think I should consider?
How can I trick SBS 2011 into allowing me to assign a UPN alias so users can logon as [email protected]
See http://support.microsoft.com/kb/243629/en-us
But on SBS I only have a 'General', 'Trusts', and 'Managed by' tab.. this is SBS 2011.
I have set up Exchange 2010 and Outlook 2007 in a test lab. Everything works (with SSL, OOO, etc). But there is one niggle:
During autodiscover from an external machine on the Internet, the end user inputs their name, email, and password twice, clicks next..
Then, on my setup I get a windows login prompt, with the username as being "[email protected]" already filled in. Entering the password fails. Username set to "FredSmith" also fails... but "contoso\fredsmith" works perfectly!
The IIS log shows error 401 for the first hit, which was contoso.co.uk\fredsmith. So Outlook is taking my email domain name and using that as a logon domain, which fails because only contoso.local works.
Now, my philosophy is that the end user shouldn't have to ever know or type in the domain name. This is particularly because this is an SBS 2011 test site.
So to recap, end user has to complete autoconfiguration wizard by effectively logging in twice, with different credentials. The whole idea, surely, is that any end user can set up outlook. Let's imagine 20% of end users don't even know the difference between a forward slash and a back slash when it comes to that username.
I am renting a Windows 2008 R2 VPS (Hyper-V). It has 1 network adapter which has a public IP statically assigned.
I wish to allow incoming VPN connections, so that I can access SMB for a central file server.
I have setup RRAS, and VPN'ing in works fine -- but when I uncheck the 'Use default gateway' on the client-side (as I do not wish for clients public internet traffic to flow through the VPN server), name resolution stops working.. so \servername\sharename stops working. Likewise, ping servername also says could not find the host. \10.0.0.50\sharename works still, but this is not ideal.
I've tried setting the RRAS properties to give out addresses from DHCP and statically assigned pool. I tried to install DHCP server but it appears to only be able to bind to the physical adapter.
Can anyone help, please? Apologies about my low accept-ratio, I will be wrapping up all my other questions at some point.
I am the Domain Administrator. Is there a way I can log on to a workstation, as a User, without knowing their password?
I know I can reset the user password from Active Directory. But say I did this, how can I put their old password back after I've temporarily reset it to something I know?
EDIT:
It's a nice thought to think we can configure everything through group policy, and that users are even smart enough to complete basic first-time use wizards.. but this is a reality question, not a theoretical one. I agree with you, but when I'm asked to configure outlook on a users desktop, I will honour their request without argument.
And of course, this is ethically obtaining access, whilst the end user is on the phone to me.
I have a Windows 2003 SBS box. It has 2 physical NIC's: WAN and LAN. The WAN is a public IP. The LAN is a simple 192.168.2.x subnet with Microsoft DHCP Server. Microsoft Routing and Remote Access Service is used to provide NAT to LAN. The box also runs VMware Server with a virtual machine running Windows XP. I want people to be able to VPN into the box, and connect to these virtual machines on the MSRDP port. I can VPN (PPTP) into the 2003 SBS box fine, as well as ping other machines on the LAN.
I was hoping to set up 2 or 3 Windows XP virtual machines on our only server, so that a couple of people can VPN then RDP in to work without having to leave a physical machine on in the office. You could this attempted set up a "poor mans terminal server".
On the 2003 SBS Server:-
C:\Documents and Settings\Administrator>route print
IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 50 56 c0 00 08 ...... VMware Virtual Ethernet Adapter for VMnet8
0x3 ...00 50 56 c0 00 01 ...... VMware Virtual Ethernet Adapter for VMnet1
0x10004 ...00 53 45 00 00 00 ...... WAN (PPP/SLIP) Interface
0x10005 ...00 11 43 d4 69 13 ...... Broadcom NetXtreme Gigabit Ethernet
0x10006 ...00 11 43 d4 69 14 ...... Broadcom NetXtreme Gigabit Ethernet #2
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 81.123.144.22 81.123.144.21 1
81.123.144.20 255.255.255.252 81.123.144.21 81.123.144.21 1
81.123.144.21 255.255.255.255 127.0.0.1 127.0.0.1 1
81.255.255.255 255.255.255.255 81.123.144.21 81.123.144.21 1
86.135.78.235 255.255.255.255 81.123.144.22 81.123.144.21 1
109.152.62.236 255.255.255.255 81.123.144.22 81.123.144.21 1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.2.0 255.255.255.0 192.168.2.3 192.168.2.3 1
192.168.2.3 255.255.255.255 127.0.0.1 127.0.0.1 1
192.168.2.26 255.255.255.255 192.168.2.32 192.168.2.32 1
192.168.2.28 255.255.255.255 192.168.2.32 192.168.2.32 1
192.168.2.32 255.255.255.255 127.0.0.1 127.0.0.1 50
192.168.2.50 255.255.255.255 127.0.0.1 127.0.0.1 1
192.168.2.255 255.255.255.255 192.168.2.3 192.168.2.3 1
192.168.10.0 255.255.255.0 192.168.10.1 192.168.10.1 20
192.168.10.1 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.10.255 255.255.255.255 192.168.10.1 192.168.10.1 20
192.168.96.0 255.255.255.0 192.168.96.1 192.168.96.1 20
192.168.96.1 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.96.255 255.255.255.255 192.168.96.1 192.168.96.1 20
224.0.0.0 240.0.0.0 81.123.144.21 81.123.144.21 1
224.0.0.0 240.0.0.0 192.168.2.3 192.168.2.3 1
224.0.0.0 240.0.0.0 192.168.10.1 192.168.10.1 20
224.0.0.0 240.0.0.0 192.168.96.1 192.168.96.1 20
255.255.255.255 255.255.255.255 81.123.144.21 81.123.144.21 1
255.255.255.255 255.255.255.255 192.168.2.3 192.168.2.3 1
255.255.255.255 255.255.255.255 192.168.10.1 192.168.10.1 1
255.255.255.255 255.255.255.255 192.168.96.1 192.168.96.1 1
Default Gateway: 81.123.144.22
===========================================================================
Persistent Routes:
None
C:\Documents and Settings\Administrator>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : 2003server
Primary Dns Suffix . . . . . . . : mycompany.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : mycompany.local
gateway.2wire.net
Ethernet adapter VMware Network Adapter VMnet8:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for VMnet
8
Physical Address. . . . . . . . . : 00-50-56-C0-00-08
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.10.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
Ethernet adapter VMware Network Adapter VMnet1:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for VMnet
1
Physical Address. . . . . . . . . : 00-50-56-C0-00-01
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.96.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
PPP adapter RAS Server (Dial In) Interface:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.2.32
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled
Ethernet adapter LAN:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-11-43-D4-69-13
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.2.50
Subnet Mask . . . . . . . . . . . : 255.255.255.0
IP Address. . . . . . . . . . . . : 192.168.2.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.2.3
Primary WINS Server . . . . . . . : 192.168.2.3
Ethernet adapter WAN:
Connection-specific DNS Suffix . : gateway.2wire.net
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet #2
Physical Address. . . . . . . . . : 00-11-43-D4-69-14
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 81.123.144.21
Subnet Mask . . . . . . . . . . . : 255.255.255.252
Default Gateway . . . . . . . . . : 81.123.144.22
DHCP Server . . . . . . . . . . . : 10.0.0.1
DNS Servers . . . . . . . . . . . : 10.0.0.1
Primary WINS Server . . . . . . . : 192.168.2.3
NetBIOS over Tcpip. . . . . . . . : Disabled
Lease Obtained. . . . . . . . . . : 25 February 2011 22:56:59
Lease Expires . . . . . . . . . . : 25 February 2011 23:06:59
C:\Documents and Settings\Administrator>ping 192.168.2.11
Pinging 192.168.2.11 with 32 bytes of data:
Reply from 192.168.2.11: bytes=32 time<1ms TTL=128
Reply from 192.168.2.11: bytes=32 time<1ms TTL=128
Reply from 192.168.2.11: bytes=32 time<1ms TTL=128
Reply from 192.168.2.11: bytes=32 time<1ms TTL=128
On the VPN client:-
C:\>tracert 192.168.2.3 ## THIS IS THE SBS SERVER
Tracing route to 2003server.mycompany.local [192.168.2.3]
over a maximum of 30 hops:
1 59 ms 58 ms 61 ms 2003server.mycompany.local [192.168.2.3]
Trace complete.
C:\>tracert 192.168.2.14 ## THIS IS A PHYSICAL LAN COMPUTER
Tracing route to ws2001.mycompany.local [192.168.2.14]
over a maximum of 30 hops:
1 57 ms 57 ms 56 ms 192.168.2.32
2 64 ms 63 ms 59 ms ws2001.mycompany.local [192.168.2.14]
Trace complete.
C:\>tracert 192.168.2.11 ## THIS IS THE VM
Tracing route to ws2009.mycompany.local [192.168.2.11]
over a maximum of 30 hops:
1 69 ms 58 ms 56 ms 192.168.2.32
2 * * * Request timed out.
3 * * * Request timed out.
(the rest is omitted, all timeouts)
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 5.0.0.1 5.131.104.16 9256
0.0.0.0 0.0.0.0 192.168.2.1 192.168.2.104 25
5.0.0.0 255.0.0.0 On-link 5.131.104.16 9256
5.131.104.16 255.255.255.255 On-link 5.131.104.16 9256
5.255.255.255 255.255.255.255 On-link 5.131.104.16 9256
81.149.144.21 255.255.255.255 192.168.2.1 192.168.2.104 26
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.2.0 255.255.255.0 On-link 192.168.2.104 281
192.168.2.0 255.255.255.0 192.168.2.32 192.168.2.23 26
192.168.2.23 255.255.255.255 On-link 192.168.2.23 281
192.168.2.104 255.255.255.255 On-link 192.168.2.104 281
192.168.2.255 255.255.255.255 On-link 192.168.2.104 281
192.168.56.0 255.255.255.0 On-link 192.168.56.1 276
192.168.56.1 255.255.255.255 On-link 192.168.56.1 276
192.168.56.255 255.255.255.255 On-link 192.168.56.1 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.56.1 276
224.0.0.0 240.0.0.0 On-link 5.131.104.16 9256
224.0.0.0 240.0.0.0 On-link 192.168.2.104 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.56.1 276
255.255.255.255 255.255.255.255 On-link 5.131.104.16 9256
255.255.255.255 255.255.255.255 On-link 192.168.2.104 281
255.255.255.255 255.255.255.255 On-link 192.168.2.23 281
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
0.0.0.0 0.0.0.0 5.0.0.1 Default
===========================================================================
On the VM:-
C:\Documents and Settings\Administrator>route print
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x10003 ...00 0c 29 dc a2 c1 ...... VMware Accelerated AMD PCNet Adapter
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.2.3 192.168.2.11 10
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.2.0 255.255.255.0 192.168.2.11 192.168.2.11 10
192.168.2.11 255.255.255.255 127.0.0.1 127.0.0.1 10
192.168.2.255 255.255.255.255 192.168.2.11 192.168.2.11 10
224.0.0.0 240.0.0.0 192.168.2.11 192.168.2.11 10
255.255.255.255 255.255.255.255 192.168.2.11 192.168.2.11 1
Default Gateway: 192.168.2.3
===========================================================================
Persistent Routes:
None
C:\Documents and Settings\Administrator>tracert 192.168.2.23
Tracing route to 192.168.2.23 over a maximum of 30 hops
1 * * * Request timed out.
2 * ^C
C:\Documents and Settings\Administrator>tracert 192.168.2.3
Tracing route to 2003server.mycompany.local [192.168.2.3]
over a maximum of 30 hops:
1 1 ms <1 ms <1 ms 2003server.mycompany.local [192.168.2.3]
Trace complete.
C:\Documents and Settings\Administrator>tracert 192.168.2.14
Tracing route to ws2001.mycompany.local [192.168.2.14]
over a maximum of 30 hops:
1 <1 ms <1 ms <1 ms ws2001.mycompany.local [192.168.2.14]
Trace complete.
C:\Documents and Settings\Administrator>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : vm1
Primary Dns Suffix . . . . . . . : MyCompany.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : MyCompany.local
mycompany.local
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : mycompany.local
Description . . . . . . . . . . . : VMware Accelerated AMD PCNet Adapter
Physical Address. . . . . . . . . : 00-0C-29-DC-A2-C1
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.2.11
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.2.3
DHCP Server . . . . . . . . . . . : 192.168.2.3
DNS Servers . . . . . . . . . . . : 192.168.2.3
Primary WINS Server . . . . . . . : 192.168.2.3
Lease Obtained. . . . . . . . . . : 25 February 2011 22:23:31
Lease Expires . . . . . . . . . . : 05 March 2011 22:23:31