http://www.hao3w.com/blog/ zh-cn PBlog2 v2.4 http://www.hao3w.com/blog/images/logos.gif http://www.hao3w.com/blog/ Hao3w Blog http://www.hao3w.com/blog/article/ref/94.htm SongShining@Gmail.Com(Richard) Fri,03 Sep 2010 15:31:55 +0800 http://www.hao3w.com/blog/default.asp?id=94 The directory could not be created.

Check permissions to the directory:'./files/_dumps'
Checking write permissions for document files
The directory could not be created.

Check permissions to the directory:'./files'
Checking write permissions for setting files
The directory could not be created.

Check permissions to the directory:'./config'
Checking write permissions for session files
The directory could not be created.

Check permissions to the directory:'./files/_sessions'
Checking write permissions for cron files
The directory could not be created.

Check permissions to the directory:'./files/_cron'
Checking write permissions for cache files
The directory could not be created.

Check permissions to the directory:'./files/_cache/'
Test of writing files of log
The file was created but can't be deleted.

Check permissions to the directory:'./files/_log'.  

将GLPI的所有文件和数据库转移到另一台服务器后，输入登陆账号后不断地重复返回刷新页面，无法正常使用，由于这些文件夹没有设置正确的权限，需要加上iis来宾账户的权限，可是加上后还是老样子，出现这些错误，于是便加了everyone权限，便可以用最新版本的GLPI覆盖后正常安装了，系统自动检测到旧版本的数据库，自动升级完成后便可正常登陆GLPI开始使用了！

当然还要先把旧数据库内关于用户认证的ldap信息更改为新服务器上的信息，而且数据库的连接信息也要和之前的旧服务器上的一致！先前GLPI上安装的所有插件需要进入管理后台后全部重新激活后方可正常使用！]]> http://www.hao3w.com/blog/article/ref/93.htm SongShining@Gmail.Com(Richard) Fri,03 Sep 2010 09:39:30 +0800 http://www.hao3w.com/blog/default.asp?id=93 事件ID 错误内容
13042 自我更新无法正常工作。
12002 报告 Web 服务无法正常工作。
12032 服务器同步 Web 服务无法正常工作。
12022 客户端 Web 服务无法正常工作。
12042 简单身份验证 Web 服务无法正常工作。
12052 DSS 身份验证 Web 服务无法正常工作。

675 预验证失败:
    用户名:    IUSR_JV
    用户 ID:        LAOGANG\IUSR_JV
    服务名:    krbtgt/LAOGANG
    预验证类型:    0x2
    失败代码:    0x18
    客户端地址:    127.0.0.1

529 登录失败:
    原因:        用户名未知或密码错误
    用户名:    IUSR_JV
    域:        LAOGANG
    登录类型:    8
    登录进程:    Advapi  
    身份验证数据包:    Negotiate
    工作站名称:    JV
    调用方用户名:    NETWORK SERVICE
    调用方域:    NT AUTHORITY
    调用方登录 ID:    (0x0,0x3E4)
    调用方进程 ID:     2204
    传递服务:     -
    源网络地址:    -
    源端口:    -

之后通过尝试重置 IIS来宾帐户(IUSR_XXX)和进程启动帐户(IWAM_XXX) 的密码后在安全日志里便不再发生验证错误的问题，WSUS也恢复了正常！

重置过程如下：

在CMD命令行下运行如下命令

net user IUSR_MACHINENAME  P@ssw0rd
net user IWAM_MACHINENAME P@ssw0rd
cd c:\Inetpub\Adminscripts
cscript.exe adsutil.vbs set w3svc/wamuserpass P@ssw0rd
cscript.exe adsutil.vbs set w3svc/anonymoususerpass P@ssw0rd
cscript.exe synciwam.vbs -v
iisreset

MACHINENAME 是你服务器的名字，P@ssw0rd是需要设置的密码。

之后过了段时间又发生了错误： 自我更新无法正常工作，然后在安全日志里还有预验证失败，未知用户名密码的iis来宾用户的登陆错误，于是重新重置一遍后将默认网站中的selfupdate、CLIENTWEBSERVICE以及WSUS管理 网站中的目录安全性的身份验证方法中启用匿名访问的IIS来宾账户重新输入用户名并使用刚才重置的密码后重启IIS，过一会再查看安全性日志不再出现验证失败的错误，查看应用程序日志也显示自我更新正常工作！]]> http://www.hao3w.com/blog/article/ref/91.htm SongShining@Gmail.Com(Richard) Fri,20 Aug 2010 17:04:29 +0800 http://www.hao3w.com/blog/default.asp?id=91
经测试发现不发送带附件的邮件是正常的，不会报错，然后发压缩文件附件也正常。有点搞不明白！

还伴随着pdf附件打不开的现象！

最终发现原来是由于系统所设定的临时文件夹temp不存在所引起的！

进入regedit注册表查找所有的错误临时文件夹位置，修改后便恢复正常不再报错！！]]> http://www.hao3w.com/blog/article/ref/90.htm SongShining@Gmail.Com(Richard) Wed,18 Aug 2010 16:39:26 +0800 http://www.hao3w.com/blog/default.asp?id=90
http://www.cnpaf.net/Down.asp?ID=077323181289919&DownID=077322543946319

复制到迅雷即可开始下载！

安装了这个版本后，之前的蓝屏就没有了，不是安装这个版本的时候，只要一开始抓包就直接蓝屏！！]]> http://www.hao3w.com/blog/article/ref/89.htm SongShining@Gmail.Com(Richard) Fri,16 Jul 2010 21:53:57 +0800 http://www.hao3w.com/blog/default.asp?id=89 {2242B406-90A2-4EF9-BC19-492D477F7914}


Corporate KnowledgeBase
ERROR: DCOM Error Event ID 10001 (using Total Protection Services on Domain Controllers)
  Printer Friendly    Rate this Page  


Corporate KnowledgeBase ID:    KB58633
Last Modified:    March 12, 2010

  
Environment
Microsoft Windows Server (Domain Controllers)
Summary
In previous versions of Total Protection, if no one was logged on, the computer would not update. To address this issue for those with unattended servers, mvsuser was introduced. This acts as a user for updating purposes in the absence of a actual logged on user. This feature works on many platforms and servers with the exception of Domain Controllers, because these require a domain user and, for security reasons, mvsuser only installs as a local user.
Problem
Total Protection fails to update on Domain Controllers when no users are logged in.

Account lockout errors are generated for McAfeeMVSUser on domain controllers.


The following error is displayed in the Windows System Event Viewer:
DCOM Error Event ID 10001 / 10004: Unable to start a DCOM Server: {427D6FE2-4FA4-B65C-AC7E2VF0B976} as ./ McAfeeMVSUser. The Error: "Access is denied." Happened while starting this command: "C:\Program Files\McAfee\Managed VirusScan\Agent\MyUsrSrv3.5.0.exe" -Embedding

The following error is displayed in the Windows Security Event Viewer:

Security  529  Logon Failure:
Reason:  Unknown user name or bad password
User Name:  McAfeeMVSUser



The following event 10004 error is logged on the domain controllers:

DCOM got error "Logon failure: user account restriction. "and was unable to logon .\McAfeeMVSUser in order to run the server:{2242B406-90A2-4EF9-BC19-492D477F7914}
Cause
These events are informational and are non-critical errors. They are generated when the default McAfeeMVSUser account attempts to automatically update on a Domain Controller when a user is not logged in.

Total Protection is unable to automatically create a user account with sufficient privileges to update on a Domain Controller when no user is logged in. This is to avoid creating any unnecessary security risks on a critical network component.

On most computers, the McAfeeMVSUser account has sufficient privileges to update without a user logged in. When a user is logged in, the privileges of the logged in user allow the updates to occur.
Solution 1
A user account with sufficient permissions to update must be logged in to the Domain Controller to allow Managed VirusScan / Total Protection Services to update.


To stop these errors, disable the McAfeeMVSUser account from an Administrator account:

Step 1 - Create a new group for the Domain Controller
Log in to: http://www.mcafeeasap.com.
At the top of the page, click Groups + Policies.
Click Add Group, type a name for the new group (for example, Domain Controller), then click Save.
Step 2 - Create a new Policy to disable the McAfeeMVSUser account
Click Add Policy.
Enter a name for the new policy (for example, Domain Controller).
Click the Advanced Settings tab.
Deselect Update client computers where users are not logged in.
Click Save.
Step 3 - Apply the new policy to the Domain Controller
On the Groups + Policies page, locate the new group and select Edit / Assign Policy.
From the drop-down menu, select the new Policy and click Save.
At the top of the page, click Computers.
In the list of computers, select your Domain Controller.
At the bottom of the page, from the Move to drop-down menu, select the new group, then click Move.
The Domain Controller will receive the updated policy at the next update interval.

Solution 2
Manually disable the McAfeeMVSUser account on the Domain Controller.
Click Start, Run, type cmd and click OK.
Go to C:\Program Files\McAfee\Managed VirusScan\Agent.
Type the following command, then press ENTER:

myUsrSrv4.0.0.358.exe /UnregServer

NOTE :

This only disables the McAfeeMVSUser account. An account with the correct permissions must still be logged in to allow updating.
You can create an acount for updating purposes only and leave this logged on while locking the DC server screen.
Previous Document ID
KB47500
]]> http://www.hao3w.com/blog/article/ref/87.htm SongShining@Gmail.Com(Richard) Sat,26 Jun 2010 16:23:22 +0800 http://www.hao3w.com/blog/default.asp?id=87
     具体实现过程如下：

     首先在主机或备份机上注册连接好两个数据库服务器，然后在主机上打开SQL的企业管理器，开始设置，步骤截图：

图01：


单击“Creat and Manage Publications...”

图02：

选中你要分发的数据库，单击“Creat Pbulication...”，再单击“下一步”->还是单击“下一步”到分发类型选择图03

图03至图20：




















最后手动更新该表内的记录，查阅订阅服务器上的数据库相同表内的记录，已成功实现数据的实时同步更新，也即达到了备份的目的！]]> http://www.hao3w.com/blog/article/ref/86.htm SongShining@Gmail.Com(Richard) Sat,19 Jun 2010 22:04:08 +0800 http://www.hao3w.com/blog/default.asp?id=86
作文范文

  题目： Due Attention Should Be Given To the Study of Chinese

    With China’s opening up, interculturalcommunication has become more and more frequent between Chinese and foreigners. A good command of at least one foreign language has increasingly been an essential skill for us. People, especially the youths, pay much more attention to foreign language acquisitionthan Chinese study.
    Various factors can account forthis situation. First of all, a good command of a foreign language may help young people to get a good job while Chinese skills may be of no significancein one’s job hunting and even their career. Consequently, some students may not treasure Chinese language any longer. Apart from that, nowadays fewer and fewer universities stimulate Chinese language study in campus, which has caused it to be marginalized. Under this circumstance, Chinese language becomes less and less popular in universities. It is clear that professors in the field of Chinese study are not so respected than they were before.
    In view of this situation, effective measures should be taken to change it. First, the whole society should emphasizethe importance of Chinese language in order to make it clear that it is one indispensablepart of Chinese culture and Chinese race. Second, schools should promote Chinese language study and research. In addition, we individuals should contribute our own efforts to the study and protectionof Chinese language.
    To conclude, we should pay great attention to Chinese language, since the importance of it is never too great to be exaggerated.

快速阅读
   1. D Relieved
    2. B she could go as far as she wanted in life
    3. B The power of role models
    4. D Obama's success impacted blacks' performance in language tests
    5. A The change in bias against black is slow in coming
    6. C people are now less ready to supportpolicies addressing racial inequality
    7. C racial inequality still persists in American society
    8. our views of women
    9. political sentiment
    10. stereotypes

听力
    Section A
    11. A) The man failed to keep his promise.
    12. C) The woman should spend more time outdoors.
    13. D) It is not a good idea to buy the T-shirt.
    14. B) Most readers do not share his viewpoints.
    15. A) Leave Daisy alone for the time being.
    16. A) Batteries.
    17. D) The man can get the ticket at its original price.
    18. A) The speakers will dress formally for the concert.
    19. D) He is undecided as to which job to go for.
    20. C) They are all adults.
    21. B) Varied and interesting.
    22. C) Hosting a television show.
    23. A) He lost his mother.
    24. B) He got seriously into acting.
    25. B) He has long been a legendary figure.
    Section B
    26 C) It crashed when it was circling to land.
    27 A) He was kidnapped eight months ago.
    28 A) The management and union representatives reached an agreement.
    29 B) rainy
    30 C) Very few of them knew much about geology.
    31 B) By noting where the most severe earthquake in U.S. history occurred.
    32 C) Stop him when he had difficulty understanding.
    33 D) It is a tool of communication among speakers of different languages.
    34 D) It has supporters from many countries in the world.
    35 D) It has had greater impact than in any other country.
    Section C
    36. intelligent
    37. foundations
    38. romantic
    39. reflects
    40. profound
    41. dramatically
    42. deprived
    43. hindered
    44. research shows that communicating with others promotes health, whereas social isolation is linked to stress, disease, and early death.
    45. A group of researchers reveal scores of studies that trace the relationship between health and interaction with others.
    46. loneliness harms the immune system, making us more vulnerable to a range of miner and major illnesses.


仔细阅读
    Section A
    47 a grade above 94/ a higher grade
    48 select the method of grading
    49 improving
    50 effort and accomplishment
    51 discuss his concern
    Section B
    Passage 1
    52 A) America is now the only developed country without the policy.
    53 D) The opposition from business circles.
    54 B) Good parenting benefits society.
    55 B) They fail to provide enough support for parents.
    56 D) It is basically a social undertaking.
    Passage 2
    57 A) More young voters are going to the polls than before.
    58 C) Whether young people will continue to support Obama’s policy.
    59 D) Their lives in relation to Obama’s presidency.
    60 C) Their utilization of the Internet.
    61 D) They are indifferent to politics.
    完形填空
    62.A findings
    63.B attribute
    64.D with
    65.B related
    66.D shrinking
    67.A published
    68.B to
    69.B simply
    70.A vital
    71.C too
    72.A benefits
    73.D outside
    74.C Exposure
    75.B less
    76.C analysis
    77.C necessarily
    78.C approved
    79.B always
    80.A advantage
    81.D grateful
    翻译
    82. Their only son has never thought
    83. weigh your decision against its possible consequences.
    84. would he break/breach his promise/commitment to pay back the money.
    85. should not be addicted to computer games. / should not indulge themselves in computer games / should not abandon themselves to computer games.
    86. never considered working as a salesman.]]> http://www.hao3w.com/blog/article/ref/82.htm SongShining@Gmail.Com(Richard) Mon,24 May 2010 12:46:30 +0800 http://www.hao3w.com/blog/default.asp?id=82 A. MOUNT            B. OPEN            C. NOMOUNT        D. None
2.    当Oracle数据库启动时，如果由于操作系统的原因，一个数据文件或重做日志文件无法正常打开或发生故障，将发生怎样的情况？（  ）
A. oracle将返回错误信息，并且打开数据库    
B. oracle将返回错误信息，不能打开数据库
C. oracle将返回错误信息，并自动启动数据库恢复程序
D. oracle将忽略这些文件，进入正常工作状态
3.    数据库实例启动的三个阶段依次是（  ）。
A. OPEN，NOMOUNT，MOUNT            B. NOMOUNT，MOUNT，OPEN    
    C. NOMOUNT，OPEN，MOUNT            D. MOUNT，OPEN，NOMOUNT
4.    Diane 是一个新入行的DBA，当数据库服务器正在运行时，她执行了shutdown命令，然后她发现Oracle在等待所有已连接到数据库的用户断开连接。请问她是采用哪种方式关闭数据库的？（  ）
A. NORMAL            B. ABORT            C. IMMEDIATE            D. NONE
5.    数据库启动过程中何时读参数文件？（  ）
A. 打开数据库时            B. 装载数据库时    
    C. 实例启动时            D. 每个阶段都要读
6.    以下哪条命令用于删除一个约束？（  ）
A. Alter TABLE MODIFY CONSTRAINT            B. Drop CONSTRAINT
    C. Alter TABLE Drop CONSTRAINT                D. Alter CONSTRAINT Drop
7.    以下关于唯一性约束和主键约束之间的不同的说法哪个是正确的？（  ）
A. 唯一性约束会自动生成一个    唯一索引，主键约束则会自动生成一个唯一或非唯一索引
    B. 主键约束列允许取空值，唯一性约束列不允许取空值
    C. 主键约束可以使用已经存在的索引，而唯一性约束则总是创建一个索引
    D. 唯一性约束列允许取空值，主键约束列不允许取空值
8.    何谓模式？（  ）
A. 一系列数据库物理对象的集合            B. 一系列数据库逻辑对象的集合
    C. 一系列索引的集合                        D. 以上都不对
9.    位图索引最适用于以下哪种列？（  ）
A. 重复值很高的列                        B. 重复值很低的列
    C. 频繁插入的列                            D. 频繁更新的列
10.    Alter TABLE语句不能用于以下哪种情况？（  ）
A. 将表从一个表空间移到另一个表空间            B. 改变表中区的初始大小
    C. 修改表名                                    D. 修改列名    
11.    以下哪种约束不会自动创建索引？（  ）
A. 主键约束            B. 外键约束            C. UNIQUE约束             D. 以上都不对
12.    在Create USER命令中DEFAULT TABLESPACE子句用于设置（  ）的存放位置。
A. 用户创建的数据库对象                    B. 用户创建的临时对象            
C. 用户创建的系统对象                    D. 以上都不对
13.    以下哪个不是系统权限？（  ）
A. Select        B. Drop ANY INDEX        C. Create VIEW        D. Create SESSON
14.    在创建用户的命令中，下列哪个关键字是限制用户可以使用的存储空间的？（  ）
A. SIZE         B. NEXT_EXTENT        C. MAX__EXTENTS        D. QUOTA
15.    以下哪个不是预定义角色？（  ）
A. CONNECT        B. DBA        C. RESOURCE        D. Create SESSON
16.    以下哪个不是创建用户过程中必要的信息？（  ）
A. 用户名        B. 用户权限        C. 临时表空间        D. 口令
17.    以下哪个不是Oracle 提供的权限？（  ）
A. 对象级        B. 系统级        C. 角色级        D. 公共级
18.    数据字典由以下哪项组成？（  ）
A. 表和视图        B. 用户和权限        C. 角色与视图        D. 用户与表
19.    建立表结构的SQL语句是（  ）。
A. Create CURSOR                B. Create TABLE
C. Create INDEX                D. Create VIEW
20.    从数据库中删除表的命令是（  ）。
A. Drop TABLE                    B. Alter TABLE
C. Delete TABLE                D. USE
21.    以下哪一条语句可实现增加表employee的name列的长度到25？（  ）
A. Alter TABLE employee MODIFY name VARCHAR2(25);
B. Alter TABLE employee RENAME name VARCHAR2(25);
C. Alter employee TABLE MODIFY name VARCHAR2(25);
D. Alter employee TABLE MODIFY(name VARCHAR2(25));
22.    如果希望employee表原有的列name非空，应该使用以下哪条语句？（  ）
A. Alter TABLE employee ADD name NOT NULL;
B. Alter TABLE employee MODIFY name NOT NULL;
C. Alter TABLE employee Alter name NOT NULL;
D. Alter TABLE employee Drop name NOT NULL;
23.    撤消约束的命令关键字是（  ）。
A. Drop            B. DISABLE        C. ENABLE        D. Alter
24.    Unique关键字表示创建的是哪一种索引？（  ）
A. B树索引        B. 唯一性索引        C. 位图索引        D. 非唯一性索引
25.    Create INDEX语句用来创建（  ）。
A. 序列            B. 同义词        C. 索引        D. 视图

参考答案：


C~B~B~A~C~C~D~B~A~B~B~A~A~D~D~B~D~A~B~A~A~B~A~B~C~

]]> http://www.hao3w.com/blog/article/ref/78.htm SongShining@Gmail.Com(Richard) Wed,19 May 2010 10:08:26 +0800 http://www.hao3w.com/blog/default.asp?id=78


——置于三级网、四级网防火墙前以检测企图对公司局域网的攻击；

——置于防火墙之后以检测成功地穿越防火墙的攻击和来自局域网内部的攻击；

——置于核心交换机上以来检测局域网内的攻击行为。



检测入侵的技术是从事件中检测出通常表示恶意或可疑企图的攻击特征。根据事件来源的不同，入侵检测系统可以被分成两类：

一类是基于主机的入侵检测系统(HIDS)。入侵检测系统通过分析审计日志纪录中检测攻击特征，称其为基于主机。审计日志是主机系统的一项安全设施，能够对主机资源的使用事件：哪个用户、使用何种资源、如何使用以及使用的时间等问题提供完备记录，以备非法事件发生后能够有效的追查。

另一类是基于网络的入侵检测系统(NIDS)。入侵检测系统从网络流量中检测这些特征时，我们称其为基于网络；基于网络入侵检测系统(NIDS)具有实时性、隐蔽性、与操作系统无关性等优于HIDS的特点。同时由于NIDS既检测包头，也检测包的载荷，因此它可以检测到HIDS可能会遗漏的攻击。而且NIDS安全探测器可置于防火墙外来检测企图对它保护的资源进行攻击的恶意流量（由于防火墙可以拒绝一些入侵企图，因而它们可能无法到达主机系统，但是获得关于这些攻击的类型和频率方面的信息仍然是至关重要的）。位于防火墙内部的安全探测器也可以作为审查防火墙配置的安全工具。



引入基于网络入侵检测系统（NIDS），以实时监控网络流量，保障数据安全。可以确保网络的安全性、合规性。





位置1应该是处于 ——置于三级网、四级网防火墙前以检测企图对公司局域网的攻击；



位置2、3              ——置于防火墙之后以检测成功地穿越防火墙的攻击和来自局域网内部的攻击；只是一个是检测服务器一个是检测各部门核心交换层。



位置4、5、6        ——置于核心交换机与各部门交换层之间以来检测局域网内的攻击行为。



若有勘误之处欢迎邮件交流：webmaster@hao3w.com
]]> http://www.hao3w.com/blog/article/ref/76.htm SongShining@Gmail.Com(Richard) Tue,11 May 2010 15:50:26 +0800 http://www.hao3w.com/blog/default.asp?id=76
1. Uninstall Malwarebytes' Anti-Malware using Add/Remove programs in the control panel.
2. Restart your computer (very important).
3. Download and run this utility.
4. It will ask to restart your computer (please allow it to).
5. After the computer restarts, install the latest version from here.

Note: You will need to reactivate the program using the license you were sent via e-mail.

按照下面的步骤来解决这个错误，我是在更新的时候发生这个错误的：
1、通过windows操作系统的控制面板中的添加删除程序来卸载Malwarebytes' Anti-Malware ；
2、重启电脑(非常重要)；
3、http://www.malwarebytes.org/mbam-clean.exe ，下载并运行这个mbam-clean工具；
4、这个工具运行完后会要求你重启电脑(允许它重启)；
5、重启后，安装最新版本，下载地址：http://www.malwarebytes.org/mbam-download.php

]]>