雲無定,難為知己難為敵

1. install openssl on Linux     apt-gete update     apt-get install openssl 2. openssl -genrsa -out aaa.com.key 2048 3. openssl req -new -sha256 -key aaa.com.key  out aaa.com.csr     Country Name:     State:     Org:     OU:     Common Name:     Email Address: 4. make sure there are 2 files under the folder - aaa.com.key & aaa.com.csr 5. cat aaa.com.csr the copy red square part 6. paste it to Enterprise CA web portal  (https://aaa/certsrv/en-us) 7. choice as web server certificate 8. download aaa.cer and aaa.p7b 9. upload both file to Linux 10. openssl x509 -inform der -in aaa.cer -out aaa.pem 11. modify config file under /etc/apache2/site-available

1. Mount iso file on VCSA , iso file should download from VMware    https://my.vmware.com/group/vmware/patch 2. Logon VCSA who with Administrator role. 3. run "software-packages install --iso"

Linux RD VDI machine, the scaling issue is fixed. svga.vramSize = "268435456" svga.autodetect="false" modify svga.maxHeight="2048"  to svga.maxHeight="3200"   and keep svga.maxWidth="10240" after that, I also add keyboard.typematicMinDelay = "2000000" 

Logon VCSA and logon shell then input below command chsh -s /bin/bash root After complete SCP, use below command to rollback setting chsh -s /bin/appliancesh root

1. Install PrivacyIdea on 1st Privacyidea Refer: https://www.youtube.com/watch?v=YzQPA3fQuYQ Add repository on Ubuntu #add-apt-repository ppa:privacyidea/privacyidea Update apt #apt-get update Check apt cache has privacyidea # apt-cache search privacyidea Install 2FA system. This is a meta package to install privacyidea with apache2 + MySql #apt-get install privacyidea-apache2 Create admin account and set password #pi-manage admin add admin admin@localhost Install 2FA FreeRadius  # apt-get install privacyidea-radius Install 2FA everything # apt-get install privacyidea-all 2. Install PrivacyIdea on 2nd Privacyidea  3. Setup Mysql master to master replication Refer: https://www.digitalocean.com/community/tutorials/how-to-set-up-mysql-master-master-replication ********************************************* Primary my.cnf bind-address            = xxx.xxx.xxx.xxx server-id            ...

migprofile.exe /s:\\file02\share\profiles\*.v2 /v2tov6 /takeownership