Embc user level filtering

[spc-rocket]

I see absolutely no reason as to why I should need to assign it a static IP. - Will I then need to do this for the 5 people who use AVCO? - This piecemeal approach is going to do my head in.

 

I say it again, it would be better suited to allow schools to use thier own IP addressing scheme, this kind of issues from both the end user's to the synetrix themselves is a nightmare in a migration scenario. It would make life easier for both parties to allow schools to use thier own IP schemes.

 

One can't blame synetrix for this beacause this was the old way of how Fujitsu did things and they just migrated across to reduce the migration time and to not have schools making too much changes, but the initial design seems to be odd in my opinion.

 

I'm sure there are schools on EMBC networks that are using their own schemes and if you speak to them they will tell you its works and works very well and with less stress.

 

I know people don't want to have these kinds of comments and i'm certainly not blaming Synetrix as the servcies and migration process is still not completed so its inevitable that there will be issues when such complicated services is being migrated not to mention the number schools and users connected to the EMBC network.

 

Ash.

[kmount]

ExamsCentre worked on Fujitsu, doesn't on Synetrix. - That's the simple problem as this time.

 

Staff with their personal ISP email configured on their laptops used to allow relay via mp.embc.org.uk (with the correct credentials) no longer appears to do so. (I've not checked this yet, its from a ticket logged).

 

..as the servcies and migration process is still not completed ..

 

It bleeding well should be as the contract with Fujitsu ended 4 days ago.

[SpuffMonkey]

We had weird issues, email worked sporadically, but the REAL oddity was that two machines side by side would connect OK to remote SSH etc but 1 point blank would not go through the proxy onto the internet whereas the other did.

 

 

It wasn't just us then...today from time to time - its been internet roulette - refreshing a page would give different sites, individual pictures, chunks of Java script each time you pressed F5 - pretty freaky - its still up & down a bit now...

[InvisibleIntellectual]

ExamsCentre worked on Fujitsu, doesn't on Synetrix. - That's the simple problem as this time.

 

Staff with their personal ISP email configured on their laptops used to allow relay via mp.embc.org.uk (with the correct credentials) no longer appears to do so. (I've not checked this yet, its from a ticket logged).

 

 

 

It bleeding well should be as the contract with Fujitsu ended 4 days ago.

 

Hi there, as its an Exchange 2007 server, setting their incoming and outgoing email servers (with authentication set correctly) as to what you have been advised should resolve this problem

[kmount]

Shall try on Monday and confirm. Thanks.

[Edu-IT]

We've got an internally hosted exchange server and since the migration it won't allow users to login. Internally OWA is working as it should but externally it seems as though users can't be authenticated. It does ask the user for their username and password but it repeatedly does this until an access denied message is displayed.

 

Any ideas?

[GrumbleDook]

Two things.

 

First is to make sure that the OWA server is in your proxy exceptions so it is not an issue with the filter.

 

Next, for external access you need to make a call to synetrix to make sure your firewall rules are correct. Are precious instructions from me and Kim as to how to make it easier.

[Edu-IT]

We've not made any changes to our ISA server and OWA was working fine up and till the migration. EMBC tell me that everything is fine their end that it must be something here that is causing the problem.

[GrumbleDook]

Have you had a look in technical library for the guidance for using isa under the synetrix setup? Just in case it is something that was done under fjs as an extra that is not done now.

An example is a number of schools used 8080 as the port for the proxy. This was not official and is now longer working.

Edited April 7, 2008 by GrumbleDook

[vikpaw]

The Exam Officer's machine needs to be a power user IP, but specify the ports so they can't get out to anything else.

 

The ExamCentre software is meant to run over port 443 ... but seems to make additional requests on other ports to ... IIRC Vik has the full details further up the thread or over on one of the threads in FFS.

 

@kmount and anyone else with exam entry issues.

 

as per my previous post, i was told that the issue was to do with FTP ports and ports above 1024.

 

i logged a call and got a response saying they had fixed the problem. i didn't say i wanted a power user or anthing special i just asked for those ports above 1024 to be opened up. i didn't even specify a direction.

 

it works now, so i don't know what they did, but i can only assume that my entire range is now open on those ports. not quite as secure as you'd hope, but no-one queried my request.

[kmount]

Yeah, I lost interest in that.

 

Kudos to the bloke who phoned me yesterday because I had 11 calls open

[InvisibleIntellectual]

Wouldnt have been me ...... I would remember someone with 11 calls open

[kmount]

Dave Rudge was the man who can!

[lindabutler]

It is nice to know I'm not alone in this frustration!!

Hi K.Mount we are not far away are we!! Thanks for your input to date.

Well, just wanted to say that once you've done UPN reconciliation make sure you save the report. If you want to add new student users you have to add them to that report with their DOB&UPN & then bulk upload your whole site population. If you try to upload just new students they assuume you are deleting all current users!!aggh!!

 

Also thanks to the request to get email updates regarding support calls. For the first time today I got information via email to give me an idea as to how things were progressing.

 

Personnally I an leaving 'enable'

on the back burner. I have info that it'll all merege into one service eventually (end of the year) so kids will have 1 rather than multiple logins so certainly for primary that is going to be more managable.

 

So much for an easy tranition eh!

Linda