MRBS - Stopping students from logging in and making bookings?

[Sam_Brown]

We're using IMAP for authentication and I was wondering how we'd go about stopping students from logging in on our MRBS implementation?

 

All staff accounts have the prefex "ST" here so I suppose if there was no built in way you could edit the coding to check whether or submitted username was prefixed by "ST" but I'm not that au fait with PHP so was wondering if there were any easier options?

[DrCheese]

If it's on an IIS server, just deny the students usergroup access to the folder and set the folder on IIS to authentication required.

Of course, it means you'd have to turn off the anon account but that only matters if you have staff accessing it externally.

[Sam_Brown]

XAMPP unfortunately.

 

Although now you've got me curious. How easy is it to set up PHP on IIS?

[glennda]

XAMPP unfortunately.

 

Although now you've got me curious. How easy is it to set up PHP on IIS?

 

I have it setup here (not using MRBS though) That students proxy settings it set to not bypass proxy for local addresses. Then for any local addresses they are put it in exceptions. So for all the others they can't get to it as the proxy can't find an upstream address for it

[Guest Guest]

being stupid

[DrCheese]

XAMPP unfortunately.

 

Although now you've got me curious. How easy is it to set up PHP on IIS?

 

Easy as pie

Download the Microsoft Web Platform

MS tool will install the whole lot for you.

[jamesfed]

One of the first things I did when starting my latest job was to move MRBS from XAMPP to IIS - as DrCheese has said the Microsoft Web Platform is easy to install and again as other have said its easy enough to restrict access to the folder that contains the MRBS files so only your staff members security group can get on to it.

 

Make sure you have a look at Windows Authentication as well - works great with Internet Explorer and transparently logs the users in using their Username/Password.

We have two systems setup - one for IT Room Bookings which any staff member can book and then another for 'Site Room Bookings' on this we have made it so that only select admins can book (as defined in the config.ini file).

[AlexB]

Assuming your staff are in a separate OU and the pupils are not a sub OU of the staff OU you can use the built in variable array $ldap_base_dn[]

 

For example ours is set like this:-

 

$ldap_base_dn[] = "ou=xxx_staff,ou=xxx_school,ou=Schools,dc=xxx,dc=xxx,dc=internal";

$ldap_base_dn[] = "ou=xxx_technicians,ou=xxx_school,ou=Schools,dc=xxx,dc=xxx,dc=internal";

[ricki]

HI

 

What I do is create a shortcut and put it on the desktop with ntfs permissions denying students access.

 

I also only give the correct people log on rights.

 

Richard