为什么你一句轻轻的叫我名字
我的心就突然甜蜜？
为什么你忽然的不开心
我就跟着莫名的心痛？
为什么你可爱的笑
让我瞬间忘了所有的烦恼？
为什么你一个拥抱
我就感觉拥有了整个宇宙？
是谁把美丽漂亮的你带到了我的面前
让我灰暗的人生突然亮丽起来？
是你让我更加认识自己
是你让我不再做一个容易生气的人
是你让我知道一个男人的样子
是你让我知道爱情真正的面貌
见不到你我的心就烦躁
一日不见就心情烦闷
你让我挂念和思念
你让我神魂颠倒
我愿意为你做任何事情
我愿意与你一路同行
我愿意和你不畏艰险
千言万语汇成一句话
我爱你，一直到永远
Shibboleth is open source, meaning that there are no license fees, it is more flexible, and it is easier to customize. Shibboleth can also run on Windows, but can be and often is run on Linux (making it more affordable than buying a Windows license that each ADFS node requires).
Shibboleth provides federated authentication across or within organizational boundaries. Shibboleth supports Active Directory, and unlike ADFS it supports many other LDAP types. Shibboleth also upholds SQL Server as an attribute store, plus many other database types. Shibboleth supports most if not all of the SAML 1.1 and SAML 2.0 profiles, so more client application integrations are supported. In contrast to Shibboleth, ADFS does not natively support federated metadata files required by popular higher education federations like the InCommon Federation.
For all of these reasons, Shibboleth is a great alternative to ADFS. Shibboleth can meet the identity and access management needs of both higher education institutions and organizations, helping to maximize the open source investment.
Whatever the goal of the Shibboleth deployment, Unicon provides the expertise required to give the confidence that comes with a professional implementation. To read more about Unicon’s services for Shibboleth, visit www.unicon.net/opensource/shibboleth.
Testimonial:
“Before I knew of Shibboleth, I ran ADFS at a university in the state of Washington for several years. We mostly set it up for use with Office 365, but eventually tried to make it work with InCommon. I was kind of successful in getting it to work with InCommon, but it was a hack. It got harder and harder to maintain as we created partnerships with more third-party apps (that supported InCommon). Shortly before I left I was making plans to gut the ADFS infrastructure replacing most of it with Shibboleth. The plan was to integrate ADFS as a Shibboleth client only to support Office 365.”
~ Former IAM Architect at a university in the state of Washington
About Shibboleth
Shibboleth Federated Single Sign-On Authentication Service is a standards based, open source software package for web single sign-on across or within organizational boundaries. Shibboleth, a project of the Shibboleth Consortium, allows institutions to make authorization decisions for individual access of protected online resources. The Shibboleth software implements widely used federated identity standards, principally OASIS’ Security Assertion Markup Language (SAML), to provide a federated single sign-on and attribute exchange framework. Using Shibboleth-enabled access simplifies management of identity and permissions for organizations supporting users and applications. Shibboleth is developed in an open and participatory environment, is freely available, and is released under the Apache Software License. Learn more at http://shibboleth.net(link is external).
在加入域的Windows Server安装TabsStudio时出现此错误：The system administrator has set policies to prevent this installation。而是用Administrator身份则没有问题。
域帐号登录，管理员身份运行CMD，定位到安装文件所在目录，运行如下命令：
msiexec /i xxx.msigpedit.msc – Local Computer Policy – Computer Configuration – Administrative Templates – Windows Components – Remote Desktop Session Host – Connections – Limit number of connections – Not Configured.
An error occurred while attempting to start the selected virtual machine(s).
'TestVM' failed to start.
Microsoft Emulated IDE Controller (Instance ID
{83F8638B-8DCA-4152-9EDA-2CA8B33039B4}): Failed to Power on with Error 'General
access denied error'
IDE/ATAPI Account does not have sufficient privilege to open attachment
'D:VMTestVMTestVM.vhd. Error: ‘General access denied error'
Account does not have sufficient privilege to open attachment
'D:VMTestVMTestVM.vhd. Error: ‘General access denied error'
微软说了一堆，要如何如何，还需要命令行什么的。其实呢，哈哈。
https://support.microsoft.com/en-us/help/2249906/hyper-v-virtual-machine-may-not-start-and-you-receive-a-general-access ，这是微软的方案，CMD运行一串命令：icacls “D:\HyperV\Virtual Hard Disks\SCCM2.vhdx” /grant “NT VIRTUAL MACHINE\8093F3E5-E40C-4651-9B6F-B946AA54CEC0”:(F) 。
实际上，也可以简单的可视化操作如下：
昨晚的梦真是好奇怪了。
梦见降临了一个外星球，就在地球的附近。非常的庞大，颜色也和地球的不一样，看起来是纯石头的样子，还有一些植被植物，还间杂有渗水的样子。
我（好像还有同事Borel）们一起就抓到了上面，发现一面墙上写有文字（刚开始早晨还是记得几个字的，现在忘干净了），这个墙面是倾斜的，类似山体，我们往上面爬去，发现上面果然聚集了外星人，把我们又赶下去了。
我们不甘心，找到了另外一条路，终于我们也抗争起来了，发现自己还是蛮有力气的，拿刀就乱砍了起来，一片腥风血雨。
………早上还记得蛮多情节的，现在都忘了，可惜。
首先，你得开启防火墙端口，然后继续做如下操作：
This article shows you how to install multiple SSL certificates for Server Name Indication, using the Management Console on Windows 2012 Server. If you wish to install a single certificate on IIS 8, please refer to the IIS 8 SSL Installation Instructions.
If you didn’t generate a certificate request (CSR) yet, and didn’t order a certificate, please see IIS 8 SSL Certificate Request Instructions.
You may encounter a known issue on IIS 8 if you receive the message “Failed to remove the certificate”. In that case, click Cancel to exit the dialog, and refresh the server certificates list by pressing F5. If your certificate appears in the list, it installed correctly. However, you may want to check that it was saved to the correct Web Hosting store. If your certificate doesn’t appear, you will need to re-issue your certificate with a new CSR.
https://www.kinamo.be/en/support/faq/microsoft-iis-8-configure-server-name-indication-sni
Venhow's Blog 