Ricky's Blog

https://www.jianshu.com/u/7d924aa18a03

node-sass安装各种坑

1. 

set SASS_BINARY_SITE=https://npm.taobao.org/mirrors/node-sass/
npm install node-sass

2. 修改.npmrc

sass_binary_site=https://npm.taobao.org/mirrors/node-sass/
phantomjs_cdnurl=https://npm.taobao.org/mirrors/phantomjs/
electron_mirror=https://npm.taobao.org/mirrors/electron/
registry=https://registry.npm.taobao.org

3. npm install -g cnpm; cnpm install

相比运行一个虚拟机来运行命令，显然WSL要轻便的多，打算主要用来更新各种需要在线更新以来包和镜像的工具，比如docker, npm, yum等

1. 当然是开启开发者模式

2. 控制面板程序和功能中安装WSL

3. 运行bash安装即可，现在安装速度比以往快了很多，应该有CDN加速了

4. lxrun.exe /setdefaultuser root 设置bash默认用户为root

5. 使用阿里源 http://blog.csdn.net/Hehailiang_Dream/article/details/54094634

6. sudo vim /etc/ssh/sshd_config 添加两行

    KexAlgorithms diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1

http://www.troylc.cc/docker/2017/01/15/Docker06devicemapper.html

Docker启动脚本有问题，在/etc/docker/daemon.json加入启动参数

{

使用阿里源

wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo

yum makecache

安装Docker CE

sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json <<-'EOF'
{
  "registry-mirrors": ["https://your_docker_image_server"]
}
EOF
sudo systemctl daemon-reload
sudo systemctl restart docker

Jenkins修改语言和系统时间

Jenkins安装Local Plugin插件，然后在系统设置中设置默认语言为zh_CN

实际使用中IE可以根据浏览器语言自动显示，但Chrome设置了中文还是显示英文，只有修改系统默认语言解决了

Docker运行Jenkins需要修改

/etc/localtime -> /usr/share/zoneinfo/PRC

/etc/timezone:Asia/Shanghai

显示当地时间，否则显示UTC时间

LDAP服务地址

ldap默认端口是389，ldaps则用的是636

虽然curl也可以实现，但由于网站有cookies，偶尔会失败，所以研究了用Powershell控制IE模拟人操作实现网站登录认证

$url = "http://web.com/login.html" 
$username="username"
$password="password"
$ie = new-object -com "InternetExplorer.ApplicationMedium"
$ie.visible=$false
$ie.navigate("$url")
while($ie.ReadyState -ne 4) {start-sleep -m 100}
$ie.Document.IHTMLDocument3_getElementById("account").value = $username
$ie.Document.IHTMLDocument3_getElementById("acc_pass").value = $password
$ie.Document.IHTMLDocument3_getElementById("account_login_checkbox").checked=$true
$ie.Document.IHTMLDocument3_getElementById("account_login_btn").click()
start-sleep -m 1000
$ie.Quit()
[System.Runtime.Interopservices.Marshal]::ReleaseComObject($ie)
Remove-Variable ie

while($ie.ReadyState -ne 4) {start-sleep -m 100} 这句是控制等待IE载入页面

由于Windows 11下powershell通过ID获取网页元素存在问题，通过$ie = new-object -com "InternetExplorer.ApplicationMedium"可以解决，但首先要在注册表新增默认值

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\InternetExplorer.ApplicationMedium]

[HKEY_CLASSES_ROOT\InternetExplorer.ApplicationMedium\CLSID] 
@="{D5E8041D-920F-45e9-B8FB-B1DEB82C6E5E}"

找到npm_modules/npm/npmrc

修改如下即可：
prefix = D:\nodejs\node_global
cache = D:\nodejs\node_global
registry=https://registry.npm.taobao.org

https://textslashplain.com/2015/12/30/whats-new-in-fiddler-4-6-2/

添加自定义rules，添加一个copy as Curl即可

不过如果用到了cookies则需要把cookies修改为参数形式 --cookies "name=yes;parm=1"

1. 安装Docker和docker-compose

2.新建wekan用户useradd -d /home/wekan -m -s /bin/bash 

3.加入wekan组usermod -aG docker wekan

wekandb:
  image: mongo
  restart: always
  volumes:
    - /home/wekan/data:/data/db

wekan:
  image: mquandalle/wekan
  restart: always
  links:
    - wekandb:db
  ports:
    - 8080:80
  environment:
    - MONGO_URL=mongodb://db
    - ROOT_URL=http://hostname/wekan

5.用docker命令导入image后启动容器

firewall-cmd --zone=public --permanent --add-port=21/tcp

firewall-cmd --zone=public --permanent --add-service=ftp

firewall-cmd --reload

http://www.infocool.net/kb/Other/201702/295623.html

参考链接即可

不过需要设置开机启动

新建启动脚本文件/etc/systemd/system/shadowsocks.service

[Unit]

Pentaho 7.0使用AD作为LDAP服务器，不支持OU中包含中文字符

URL填ldap://hostname:port即可，如果是389端口则可以省略

验证的账户则必须是完整的DN，比如CN=bind,ou=pentaho,dc=adnet,dc=com

其他的参考bigdatafan.blogspot.jp/2016/08/pentaho-ba-server-with-active-directory.html

SpagoBI 5.2集成AD访问

官方手册是在太老了, 花了一天时间才搞定

1. 仍然是修改三个参数

SPAGOBI.SECURITY.PORTAL-SECURITY-CLASS.className=it.eng.spagobi.security.LdapSecurityProviderImpl 
SPAGOBI.SECURITY.USER-PROFILE-FACTORY-CLASS.className=it.eng.spagobi.security.LdapUserProfileFactoryImpl 
SPAGOBI.SECURITY.PORTAL-SECURITY-INIT-CLASS.className=it.eng.spagobi.security.init.LdapSecurityProviderInit

2. ldap_authirizations.xml

<?xml version="1.0" encoding="UTF-8"?> 
<LDAP_AUTHORIZATIONS default="FALSE"> 
<CONFIG> 

<!-- SERVER --> 
<HOST>10.16.10.98</HOST> 
<PORT>389</PORT> 
<ADMIN_USER>ldapadmin@tfsad.com</ADMIN_USER> <!-- THIS IS KEY --> 
<ADMIN_PSW>password</ADMIN_PSW> <!-- password in clear text --> 
<BASE_DN>DC=tfsad,DC=com</BASE_DN> <!-- base domain, if any --> 

<!-- USERS --> 
<USER_SEARCH_PATH>ou=XXX</USER_SEARCH_PATH> <!-- SpagoBI will look for users under this node - Our user OU is STAFF --> 
<USER_OBJECT_CLASS>user</USER_OBJECT_CLASS> <!-- class for users' objects --> 
<USER_ID_ATTRIBUTE_NAME>sAMAccountName</USER_ID_ATTRIBUTE_NAME> <!-- name of the attribute containing the user identifier --> 
<USER_NAME_ATTRIBUTE_NAME>name</USER_NAME_ATTRIBUTE_NAME> <!-- name of the attribute(*) containing the user name --> 
<SUPER_ADMIN_ATTRIBUTE_NAME>superAdmin</SUPER_ADMIN_ATTRIBUTE_NAME> <!-- name of the attribute(*) containing the super admin flag --> 
<!-- (*) SPAGOBI attribute, not LDAP attribute!!! It must match the "name" attribute of one USER_ATTRIBUTE tag below --> 
<USER_MEMBEROF_ATTRIBUTE_NAME>memberOf</USER_MEMBEROF_ATTRIBUTE_NAME> <!-- this attribute has to contain the list of groups the user belongs to --> 

<!-- list of the users' attributes to be loaded when querying the LDAP --> 
<USER_ATTRIBUTE name="id">sAMAccountName</USER_ATTRIBUTE> <!-- LDAP attribute to be considered as SpagoBI attribute --> 
<USER_ATTRIBUTE name="name">name</USER_ATTRIBUTE> 
<USER_ATTRIBUTE name="mail">mail</USER_ATTRIBUTE> 
<USER_ATTRIBUTE name="memberOf">memberOf</USER_ATTRIBUTE> 
<USER_ATTRIBUTE name="superAdmin">superAdmin</USER_ATTRIBUTE> --> 

<!-- GROUPS --> 
<GROUP_SEARCH_PATH>OU=XXX</GROUP_SEARCH_PATH> <!-- SpagoBI will look for groups under this node --> 
<GROUP_OBJECT_CLASS>group</GROUP_OBJECT_CLASS> <!-- class for groups' objects --> 
<GROUP_ID_ATTRIBUTE_NAME>cn</GROUP_ID_ATTRIBUTE_NAME> <!-- the attribute containing the name of the group --> 

<!-- list of the users' attributes to be loaded when querying the LDAP --> 
<!-- <GROUP_ATTRIBUTE>ou</GROUP_ATTRIBUTE> --> 
<GROUP_ATTRIBUTE>cn</GROUP_ATTRIBUTE> 

<ACCESS_GROUP_NAME></ACCESS_GROUP_NAME> <!-- Access group name: if specified, users must belong to this group in order to enter SpagoBI --> 
<GROUP_MEMBERS_ATTRIBUTE_NAME></GROUP_MEMBERS_ATTRIBUTE_NAME> <!-- this attribute has to contain the list of users belonging to this group, in case the ACCESS_GROUP_NAME is specified --> 

</CONFIG> 
</LDAP_AUTHORIZATIONS> 

注意密码是明文，而不是加密过的

3. AD中添加superAdmin自定义属性

添加时需要具有Enterprise Admin和Schema Admin组的权限，另外需要在注册表中确认Update Schema Allowded是否设置为1

添加后需要重启AD服务,参考http://www.morgantechspace.com/2013/08/how-to-create-custom-attribute-in.html

4. 添加角色映射

参考https://www.spagoworld.org/jforum/posts/list/3600.page

ildasm转储为IL文件，修改IL后用ilasm.exe /dll/resource=Web.res Web.il编译为DLL

也可以用.Net Reflector或者ILSpy配合Reflexil

Windows 10带来了Ubuntu Linux子系统但是缺少好的终端支持直接登录，只有用ssh客户端曲线登录本机了

1.安装：cmd下执行lxrun /install

deb http://mirrors.aliyun.com/ubuntu/ trusty main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ trusty-security main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ trusty-updates main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ trusty-proposed main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ trusty-backports main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ trusty main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ trusty-security main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ trusty-updates main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ trusty-proposed main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ trusty-backports main restricted universe multiverse

遇到invoke-rc.d: policy-rc.d denied execution of start则修改/usr/sbin/policy-rc.d为exit 0

3.重启sshd sudo service ssh --full-restart

 Windows 10自带了ssh服务可能会占用22端口，所以需要停用两个服务

另外遇到upstart的问题可以用如下命令