ijk

That's a choice you make, rather than a good/bad question. Regarding the content of this thread, the way you've described your set up (students log into the Macs with non-Windows accounts) it doesn't matter if the Mac server is bound to AD, and I think if you follow my post above you should find that the students are able to print from the Macs without being prompted to authenticate. In the long term the school will probably want students working at the Macs to have access to their document folders etc, which are presumably stored and managed by your Windows servers. You mention that you have had that set up, but that you ran into difficulties. That isn't uncommon - you will find numerous threads here and elsewhere that will probably mirror your issues. You'll have to determine what is desired and work towards that I guess.

Fair enough. You say you've a suite of Macs, so I'm assuming visiting each Mac is a pain, but not a nightmare. If you use Workgroup Manager to manage the Macs, then you might save some time but you may still need to visit each Mac to reset the printing system and clear out the Windows printers that are currently added/listed. I would do this: Log in to each Mac as an administrator and remove all the printers listed in System Prefs > Printers & Scanners If you use Workgroup Manager or another admin tool to manage the Macs, remove any configuration policy that adds printers to the Macs Reboot the Macs Log in to one and check that the printers are really gone. If you find printers still listed then you'll probably need to check each Mac and follow these instructions: https://support.apple.com/en-gb/HT201539 to reset the printing system. Next, either Log in to each Mac and add each the printer(s) using either Bonjour or IP Or, if you use Workgroup Manager or another admin tool Add each printer to the Mac server and allocate them to the Mac clients use your admin tool I forget, but you may be able to do some/all of the above using Apple Remote Desktop, if you have that available. Hope that helps.

Just to clarify: your students do not use their Windows credentials to log in to these Macs?

I think you have an authentication problem. If you added the printers manually to each Mac, you could remove and re-add them as IP printers (each Mac will print directly to the printer and no auth is required). What are your Mac management tools, if any?

(Oops, not battery powered unless with this sort of addition). (Double Oops, no audio! Although there is this: https://github.com/iizukanao/picam). What about a Raspberry Pi with the camera module (https://www.raspberrypi.org/documentation/hardware/camera.md) and UV4L (Linux Projects - News), which delivers a stream. I set one up to monitor an aquarium and while I can't get the stream to display correctly in many browsers, it does deilver one. This page (Linux Projects - Documentation) lists the encoding options.

Hello, Assuming the Mac clients are bound to an Active Directory? Are the printer security settings allowing printing from "Everyone"? If so, try "Domain Users". Nic

Salary range: £31033 to £38564per annum plus excellent benefits.

This resource seems like a good place to start: Using Libsodium in PHP Projects

The procedures will be different from LA to LA and from school to school. Speaking as a network manager I would like the app developer to include in the system requirements that access to a set of listed URLs or domains is required. I don't think you can do more than that.

This is feasible. Our current set up is a Centos server (within the school's LAN) running Virtualmin that hosts Wordpress, MediaWiki and the Roundcube webmail client. I use bulk create tools to create users in Virtualmin (Linux user accounts with email) and repeat this for Wordpress and MediaWiki, replicating the Virtualmin usernames and passwords in those two systems, so the users see the same username and password for each system. Not quite SSO, but oaky. The Wordpress blogs are exposed to the Internet for viewing only. There's a fair amount of admin involved in that, but it isn't a terrible task in a Primary school of 300 users. Nevertheless a different approach is desirable and I've chosen to go an LDAP route. So far I have Virtualmin set up to create and store users in LDAP and a multisite Wordpress installation that can authenticate against the LDAP server, however LDAP users can log into any blog, which is not what I wanted but not necessarily terrible since I've not discussed the parameters with the staff yet. Maybe that'd be acceptable; and why not? MediaWiki will also authenticate against LDAP, but I've not successfully configured that yet. In both cases I think that my design of the LDAP directory and how I've configured Virtualmin to create usernames may be the issue and ultimately it's probably solvable. I've explicitly chosen not to have LDAP=AD and I am going to be running two directories. If anyone else is going this route I'd be very happy to share experiences. Nic

Possible solution Install MySQL on any server Bulk create MySQL users with appropriate permissions. See: http://www.edugeek.net/forums/how-do-you-do/46692-mysql-script-batch-create-users-dbs.html Configure MySQL server to accept connections appropriately (IP, hostname, etc) Configure server firewall to accept connections to MySQL port Install MySQL client on workstations. Configure workstation firewall to allow connections to MySQL server IP and port. Students connect to MySQL using the Windows command Prompt.

One of the schools I support use it. What is your query?

In my experience clients experience fewer problems when they know that they are behind a proxy because the responses they get back from their requests match their expectations.

^ There you go.

For general proxying: If it is just proxying then the proxy software can simply pass data between the client and the destination server. If it is decrypt/inspect/encrypt then the proxy will present a dynamically generated certificate to the client on behalf of the server the client is attempting to reach. The proxy itself will have received/inspected/validated the certificate it received from the destination server. For the latter to work the clients must trust the proxy, i.e. its CA certificate should be installed on the client. In this case: On reflection, I think there are going to be problems - authentication/filtering/transparent or not/trust of the upstream proxy - which make it unworkable. We have an internal proxy here, so I'm going to give it a whirl...

Yes, you can use Squid to do this. Search for "Squid upstream proxy" or "cache peer".

@plexer is suggesting that you use the VAMT to install the product key and activate. It's a Microsoft tool that can collect information about your clients' license state and optionally install and activate licenses for you. I forget if you can do more than one at a time as I use it to fix occasional activation issues on maybe one or two clients at a time, but I wouldn't be surprised. You can find it by searching for VAMT. I don't know what version it's at or whether you'll need a particular version for your scenario. Here's a link: https://technet.microsoft.com/en-us/library/dn613834.aspx

Right, I see what you're saying. My responses have been based on the assumption that a directory listing is required, but a listing that shows only files of type HTML.

I think IndexIgnore is probably more flexible in this scenario because it masks rather than denies access to files and folders. If you deny access and then whitelist individual types they will show up in the directory listing, which I believe is contrary to what is desired.

Do the HTML pages refer to resources that are stored in the directory you're dealing with? Denying access to those resources will break the pages.

You have a directory containing multiple file types and have allowed directory listing for that directory. However, you wish to restrict the list of files to those of type html? https://wiki.apache.org/httpd/DirectoryListings - see Excluding Files, which links to mod_autoindex - Apache HTTP Server Version 2.5 Hope that helps.

Maybe the traffic is being intercepted/interfered with by your proxy. Try adding autodiscover.publicdomain.co.uk to the list of proxy exceptions used by your clients.

In addition to those records, which map name to IP address, there needs to be a record (PTR) that maps the IP address to the name. Mail servers will perform a check to ensure that these records tie up. If they do not then mail will likely be rejected. You mention that you are handling mail for two domains. In this case, and unless you insert a relay between your exchange server and the Internet, you require two IP addresses because a PTR should return a single name per IP address. A relay is helpful in this situation because all of your mail related DNS concerns one name/IP regardless of the domain concerned. Hope that's helpful, Nic

https://helpx.adobe.com/creative-suite/kb/cs3-product-downloads.html

There is information here: Domain name disputes FAQs | Law Donut .org.uk is available, would that be a better fit for your school?