【AD ADS (AD Lightweight Directory Services)】
◎ Microsoft's pure LDAP service。
◎ Independent program，Can be installed inside/outside the domain，Can install multiple。
◎ Account information of AD DS can be synchronized through adamsync，But unable to sync password，Unless through other tools，Such as Microsoft's FIM、ME，But need to purchase authorization。
◎ If you plan to use a single account to access the LDAP address book，Can consider it。
Continue browsing »
◎ Server OS: Windows Server 2019
◎ OpenVPN: OpenVPN 2.4.9 (Community)
◎ AD verification component: Auth4OpenVPNv2.0
OS Client OS: Windows 10
Continue browsing »
【aims】
◎ Use AD as the account verification method。
◎ Client side uses independent network segment，And get IP automatically。
◎ Client side will only flow VPN for specific network segment traffic，Go online (Internet) will not。
◎ Client can connect to other network segments within the enterprise。
While testing Open VPN today，Try to open "Network Network Connection Sharing"，But the following message popped up：
Unable to enable "Internet Connection Sharing (ICS)」，Because routing and remote access are enabled on this computer。If you want to enable ICS，Please disable routing and remote access first。
Let’s try to apply for Wildcard certificate in SSL For Free (*.abc.com)，I didn't expect the application to be successful，I originally thought that Let’s Encrypt can only apply for individual URLs。Recently the voucher is almost three months，Ready to apply again，But found that SSL For Free was bought by ZeroSSL，Application for Wildcard voucher，Can only be purchased for a fee，So I had to give up the service of this platform。
Forgot which version to start，In the upper right corner of Unifi AP Controller, a WebSocket connection error message will pop up，The guess should be because there is no Unifi gateway product，I didn't pay any attention to it。
◎ regedit。
◎ HKLMSOFTWAREMicrosoftWindows NTCurrentVersionSPPClients。
◎ Add a new name “{09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}” "Multi-string value"，Value input 1。
A few VMs suddenly appeared a large number of vmStatsProvider error messages these days，Follows：
The “vmStatsProvider” can not be initialized. “vmGuestLib” returns error “Host does not support this request.” (10).
Previously there was a Server that appeared Time-Service every day 50 Warning message，Follows：
Time service continues 900 Seconds detected greater than 5000 Millisecond time error。The cause of the time error may be synchronization with inaccurate time sources or unstable network conditions。Time service is no longer synchronized and cannot provide time to other clients or update system clock。When the correct time stamp is received from the time service provider，Time service will correct itself。
wrote an article earlier Ubuntu decompression garbled Article，After reaching Manjaro，Encounter old problems again，I also bought songs at Omusic，After buying, unzip and garble，And deal with it in the previous way，This time it was invalid。
Anson | 
08 10th, 2020| 