使用stat 指定列出檔案的 ctime , mtime , atime
root@lab-101:/workdir# stat this-is-a-file
File: this-is-a-file
Size: 505987 Blocks: 992 IO Block: 4096 regular file
Device: 801h/2049d Inode: 1048579 Links: 1
Access: (0646/-rw-r--rw-) Uid: ( 106/ tftp) Gid: ( 113/ tftp)
Access: 2023-11-20 14:39:11.722228112 +0800
Modify: 2023-11-20 14:38:52.570334312 +0800
Change: 2023-11-20 14:38:52.570334312 +0800
Birth: 2023-11-20 14:30:57.628959474 +0800
安裝 tftp server
apt install tftpd-hpa
安裝 tftp client
apt install tftp
編輯設定檔
vi /etc/default/tftpd-hpa
# /etc/default/tftpd-hpa
TFTP_USERNAME="tftp"
TFTP_DIRECTORY="/srv/tftp"
TFTP_ADDRESS=":69"
TFTP_OPTIONS="--secure"
redmine top-menu 預設字型很小很小，如果要調整上方字型的大小
cd ./redmine/public/stylesheets
vi application.css
#top-menu {background: #3E5B76; color: #fff; height:1.8em; font-size: 0.8em; padding: 2px 10px 0px 12px;}
將紅字部分改成 1.2 我覺得就很合適了
測試環境: docker + apache base
root@hellowordl:/home/nextcloud# docker exec --user www-data <CONTAINER ID> php occ config:system:set twofactor_enforced false
System config value twofactor_enforced => false set to empty string
若出現以下訊息
Operation Type
Update
File Type
Backup Image
Status
Operation Failed
Error
Copy: Version too old, downgrade prevented.
請將下載下來的zip 解壓縮，僅上傳 *.wsi 即可
測試環境
docker: Base version - apache + mariadb
root@helloworld:~# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
846abceb2e61 nextcloud "/entrypoint.sh apac…" 2 days ago Up 2 days 0.0.0.0:8080->80/tcp nextcloud-app-1
ab2fb11739b8 mariadb:10.6 "docker-entrypoint.s…" 2 days ago Up 2 days 3306/tcp nextcloud-db-1
root@helloworld:~# docker exec -it nextcloud-app-1 bash
root@846abceb2e61:/var/www/html# runuser -u www-data php /var/www/html/occ user:resetpassword admin
Enter a new password:
Confirm the new password:
Successfully reset password for admin
root@846abceb2e61:/var/www/html#
用AD帳號 登入windows 時，如果出現以下錯誤訊息
此工作站和主要網域間的信任關係失敗
解決方式:
使用本機帳號登入
確認系統時間與AD DC 之間是否有時間差
時間調整一致，登出再用AD 帳號登入測試是否成功
手動更新時間，出現以下錯誤訊息
root@lab:~# timedatectl set-time 11:55:12
Failed to set time: Automatic time synchronization is enabled
關閉 ntp 自動校時
root@lab:~# timedatectl set-ntp no
重新手動更新
root@lab:~# timedatectl set-time '2023-09-19 11:58:30'
root@lab:~# date
Tue 19 Sep 2023 11:58:31 AM CST
找到 httpd-ssl.conf
每個版本路徑可能不大一樣，要自行找一下
找到以下關鍵字
SSLProtocol all -SSLv3
調整成
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
存檔，重啟 apache
可用 nmap 工具測試
nmap --script ssl-enum-ciphers -p 443 example-server
報告內容
Summary
The remote SSH server is configured to allow / support weak host
key algorithm(s).
Detection Result
The remote SSH server supports the following weak host key algorithm(s):
host key algorithm | Description
-----------------------------------------------------------------------------------------
ssh-dss | Digital Signature Algorithm (DSA) / Digital Signature Standard (DSS)
Detection Method
Checks the supported host key algorithms of the remote SSH
server.
Currently weak host key algorithms are defined as the following:
- ssh-dss: Digital Signature Algorithm (DSA) / Digital Signature Standard (DSS)
Details:
Weak Host Key Algorithm(s) (SSH) OID: 1.3.6.1.4.1.25623.1.0.117687
Version used:
2021-11-24T06:31:19Z
Solution
Solution Type:
Mitigation
Disable the reported weak host key algorithm(s).
