ThomL
-
Posts
388 -
Joined
-
Last visited
Content Type
Forums
News
20th
EduGeek EDIT Conference
Blogs
Everything posted by ThomL
-
I second this! Whatevery you develop should make use of the Wonder API's to collect its data - most school will already be integrated with Wonde so they will just need to allow your application/solution access to their data which can then gather the needed data 👍
-
That's pretty cool - I've seen these from other suppliers but they've always been much more expensive. It annoying you can only write to Ubiquiti SFPs; for the cost of 1 Ubiquiti 10GB SFP you could buy 2 from fs.com pre-programmed, add in the cost of the programming tool and you could buy a third SFP from FS.com. But it could allow some freedom moving forwards if SFPs are costing more than the Ubiquiti option or you would reuse SFP between different switch - remove from HP, flash with tool and then install to Cisco etc. could be very handy. -Edit: I was looking at the 100G transceivers on the Ubiquiti website - the 10 GB multimode options appear to be much cheaper @ £16. Depending on how many SFP's you're going to need thie programming tool might be usful!
-
FS.com should work, I've used them for several 5406 generations - just make sure you are buying the correct product, if needed fs support were very good the last time I worked with them. As an example, the product Steve linked to is a match for the J9150D - you linked to the J9150A, this is a different product on FS.com: J9150A-I HPE ProCurve Compatible 10GBASE-SR SFP+ 850nm 300m Duplex LC/UPC MMF Transceiver Module (Industrial) - FS.com United Kingdom If you can find the latest manual for the generation of 5406 you have, there should be a list of compatible HP parts with a J code that you can then use to find the correct product on FS.com.
-
I made a proof of concept - you can use JS to get the Bromcom login webpage, then harvest the link from this page. Run this JS each time the page loads (page you wish to link to the Bromcom SSO Login), a fresh unique link each time. It's not the best approach - would be nicer for Bromcom to expose a service for this we could link directly to, or an API that could be queried directly to return the link. The only issue with this proof of concept is CORS... this example will likely work for a few page loads/refreshes and then it will be rate limited for you as it's using a free CORS proxy. If someone want to implement this they might want to reach out to this CORS proxy provider Free CORS Proxy for Education – Universities & Students to try an get free access or setup their own CORs proxy and then tweak the code to run the requests through the new proxy. Here it is in action: https://jsfiddle.net/j403qt1x/ Or here's the single page HTML, copy/paste/save as a .html file to try it out from local host. <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <title>Bromcom Link Extractor</title> <style> body { font-family: Arial, sans-serif; padding: 20px; } button { padding: 10px 15px; font-size: 16px; cursor: pointer; } #result { margin-top: 20px; font-weight: bold; color: blue; word-break: break-all; } </style> </head> <body> <h2>Extract Microsoft SSO Link from Bromcom Login Page</h2> <button onclick="getLink()">Refresh Link</button> <h3>Link:</h3> <div id="result">Result will appear here...</div> <script> async function getLink() { const resultDiv = document.getElementById('result'); resultDiv.textContent = "Loading..."; try { const response = await fetch('https://api.codetabs.com/v1/proxy?quest=https://cloudmis.bromcom.com/Nucleus/Framework/Login.aspx'); const html = await response.text(); const parser = new DOMParser(); const doc = parser.parseFromString(html, 'text/html'); const linkElement = doc.getElementById('btnLinkMicrosoftAccount'); if (linkElement && linkElement.href) { resultDiv.innerHTML = '<a href="' + linkElement.href + '" target="_blank">' + linkElement.href + '</a>'; } else { resultDiv.textContent = "Link not found."; } } catch (error) { resultDiv.textContent = "Error: " + error.message; } } document.addEventListener("DOMContentLoaded", () => { getLink(); }); </script> </body> </html>
-
The &SSOAccessKey part of that URL updates with every visit to the Bromcom login page - it wouldn't seem to be a good idea to use the same key repeatedly? The link without the access key throws an error message when I've tried it 😬
-
One time I broke an S2D cluster and we paid for a single incident ticket with Microsoft to resolve, it took a little while to get past the lower levels of support - but once escalated to the correct level you could see they knew the product well and have the cluster back online and repairing in maybe just over an hour. The cluster had totally fallen over at the time and was in a worse state than you describe your cluster. I think we got the ticket going via this web portal: https://support.serviceshub.microsoft.com/supportforbusiness Make sure to sign in/setup an account that isn't your school Office 365 account - these don't work on the portal I've just read, might need to use personal email account or a google account or similar to get a ticket open. I also don't remember how much we paid - possibly £200-£400, but this was 7/8 years a go.
-
If you shut down node 1 does the cluster/VMs/CSV stay online? If so, bring the node back online without networking so it doesn't join the cluster and you can mess with it: blast the storage to get it in a good state, I think this is the powershell code that removes the S2D metadata: Get-PhysicalDisk | Reset-PhysicalDisk With this disks all clean you should be able to re introduce to the cluster, at which point it will see it has the storage it needs to rebuild as the disks will show as healthy. I had an issue similar to this when first testing S2D years a go - as you've mentioned the cluster was already aware of the disks and wouldn't use them - I', pretty certain the script I posted earlier got the disks back to a healthy state and ready for reuse... Might have to nuke the node and reinstall windows server 2022 then run the script to clean the drives and then look to rejoin the cluster/get S2D things rolling Get-PhysicalDisk | Reset-PhysicalDisk Get-Disk | ? Number -ne $null | ? IsBoot -ne $true | ? IsSystem -ne $true | ? PartitionStyle -ne RAW | ? BusType -ne USB | % { $_ | Set-Disk -isoffline:$false $_ | Set-Disk -isreadonly:$false $_ | Clear-Disk -RemoveData -RemoveOEM -Confirm:$false $_ | Set-Disk -isreadonly:$true $_ | Set-Disk -isoffline:$true } Get-Disk | Where Number -Ne $Null | Where IsBoot -Ne $True | Where IsSystem -Ne $True | Where PartitionStyle -Eq RAW | Group -NoElement -Property FriendlyName
-
I think it depends on where the drives with the issues are - are there drives with issues on nodes 2 and 3? I'd be looking to get all drives on those nodes healthy, then after reviewing storage jobs I'd evict node 1 (server 2022) - clean the disks with the script above, check network settings and then with the drive all checked and looking ready to join the cluster I'd add the node back to the cluster, add the drives to the storage pool etc. wait for storage jobs to complete and at this point you should be stable again. Once stable evict node 2, get server 2022 installed, reintroduced to the cluster, wait for stability and follow the same process for node 3. Then up the functional level of the cluster and start the update process again to get to server 2025 if desired. This should be salvageable, keep calm and logical - no rash powershell commands or reboots!
-
So at the moment you've got an active storage job trying to repair the storage? what does get-storagejob return at the moment (powershell)? What is the state of your cluster currently, do you still have 2 nodes running 2019 and one running 2022 with the 2022 node causing problems, and it thinks it's running a 3 node configuration?
-
Where are you with this at the moment, do you still have 2 nodes running 2019 and one running 2022? If so is the 2022 node still failing to join the cluster because of the storage & if you run this command from an admin PowerShell on the 2022 node what does the output look like? Get-PhysicalDisk I had issues with storage when I broke a node previously and might have a few cmdlets that got things back online. If you're certain you're not going to lose data, this should reset the disks -maybe! I think you'd run this on the 2022 node to reset the storage and then attempt to join the node to the cluster again: Get-PhysicalDisk | Reset-PhysicalDisk -ErrorAction SilentlyContinue Get-Disk | ? Number -ne $null | ? IsBoot -ne $true | ? IsSystem -ne $true | ? PartitionStyle -ne RAW | ? BusType -ne USB | % { $_ | Set-Disk -isoffline:$false $_ | Set-Disk -isreadonly:$false $_ | Clear-Disk -RemoveData -RemoveOEM -Confirm:$false $_ | Set-Disk -isreadonly:$true $_ | Set-Disk -isoffline:$true } Get-Disk | Where Number -Ne $Null | Where IsBoot -Ne $True | Where IsSystem -Ne $True | Where PartitionStyle -Eq RAW | Group -NoElement -Property FriendlyName
-
Every website Certificate Error
ThomL replied to JazzFlute's topic in Internet Related/Filtering/Firewall
Same cert issue when hitting every.education:
-
We previous blocked student access to cmd with Applocker, this caused issues with idle startup for students - I can't remember why, but students were definitely getting a different experience to staff that were allowed cmd. We allowed the students cmd access and this improved the teaching and learning and removed some barriers I am told and shouldn't really be a risk factor - but it was nice to have the block in place originally. We will probably move to a group based rule to allow cmd access for just the students taking the programming lessons/course. Reading your post again it seems your CS teacher is opening python in interactive interpreter mode via cmd (I think the python + idle install put a shortcut in the start menu for this) and not launching IDLE - interactive interpreter mode mention near the top of this page: https://docs.python.org/3/faq/windows.html There should be another shortcut that launch IDLE. Have you witnessed the process/steps the teacher is takin - what shortcut or how are they trying to access IDLE? My gut feeling/the short of this is you can't expect to open IDLE if you clicking a shortcut for interactive interpreter via cmd...
-
We had this, for the reason you mention - disabled fast user switching to force log off and log in events to be recorded on the DCs event logs and I assume reported to the smoothwall via IDex and it solved the problem from our testing. Not sure if there are alternate options or settings that can be tweaked in the Smoothwall, but it seemed logical to why this was happening with user switching in place and why the problem disappears when removed, so we went with removal!
-
https://chatgpt.com/share/695fb148-393c-8008-b305-e690f58d0f39 ChatGPT to the rescue?
-
Once you got your App ID And Secret setup and delegated the permissions needed to the endpoints you wish to access (in the following example you'd need access to the students data) - you can then start poking around the API/data. This should get all current students data: ### Bromcom API Request Variables # Define API credentials and parameters $applicationId = "App id here" $applicationSecret = "Secret here" $schoolId = "school ID here" $entityFilter = "endDate IS NULL" $baseUrl = "https://api.bromcomcloud.com/v2/" $EndpointStudents = 'Students?' # Build URI $uri = "$baseUrl$EndpointStudents`entityFilter=$([System.Web.HttpUtility]::UrlEncode($entityFilter))&schoolId=$schoolId" # Set up the headers $headers = @{ "accept" = "text/plain" "ApplicationId" = $applicationId "ApplicationSecret" = $applicationSecret } # Set TLS 1.2 [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12 ### API Reqest variables end # GET request try { # Get request $resAllStudents = Invoke-RestMethod -Uri $uri -Method Get -Headers $headers # Harvest response data $AllStudents = $resAllStudents.data # Display results Write-Host $AllStudents | Format-List } catch { # Display error if encountered... Write-Error "Error occurred: $_" }
-
Office 365 "Your School account is no longer active"
ThomL replied to supportman's topic in Cloud Services
A3 licenses needed for the local install of the Office suite isn't it? Even in shared activation mode I think... -
I had an issue with the Cloud Filter extension that sounds similar to this; if it's the same issue I needed to enable 'Force Windows executable Native Messaging hosts to launch directly' as detailed here: https://kb.smoothwall.com/hc/en-us/articles/20641568699804-Chrome-and-Edge-browser-configurations-for-Cloud-Filter-Extension
-
Iperius looks interesting, it's been part of the plan to buy a Synology device this year to act as backup for Office 365, but we do have a large backup server on-site that might be nice to use for this with Iperius... then again, maybe splitting these roles is a safer option, maybe at £200 it be better to do both...
-
We're looking for a new team member to join the IT Support Team here at Nailsea School. There has been good investment in the school's IT devices/network over recent years, any questions please feel free to send me a message or post a reply. https://www.eteach.com/job/it-technician-1516771
-
What's The Easiest Way To Disable The Calculator In Windows
ThomL replied to Fazza's topic in Windows 10
That seems... odd? Good luck! -
What's The Easiest Way To Disable The Calculator In Windows
ThomL replied to Fazza's topic in Windows 10
Just checking: Definitely the Calculator causing the pop-up? Seen in the applocker event log? -
We're Cab Letter/Patch Panel No. e.g. B021, E255. Site was already setup in this configuration when I joined and configured this way when the school was rebuild. Works well enough, but then again we are single site, one building, 2 floors, not too many networking cabs about the place - networking was planned fairly well during the rebuild, with purpose built rooms for the racks/equipment throughout the building. In my previous two roles/schools ports were just labelled with a number and then it was tribal knowledge which of the many many cabs you had to head to and cabs could be anywhere - random rooms/classrooms - rather frustrating.
-
Could you use radius authentication/802.1x? If so you could set policies that should eliminate several of those SSID - allowing you to combine to one SSID with different policies applied based on the device or user account joining the network. I think you could possibly combine SM_Staff_Laptop, SM_Student, SM_Staff_Phones but it depends on the equipment you are using for WiFi/filtering/networking. I currently have 1 SSID for Guest users that visit the school, which allows registration via a customised Meraki Portal and then another SSID that is used by staff/students/governors/tills that places the different users/devices onto various vlans based on policies in the NPS/Meraki configurations and then our smoothwall applies different levels of filtering and our Firewall cluster is controlling the inter-vlan routing to control 'LAN' access. I plan to tweak this further - I need to use more certificate based authentication and have started looking at using PPSK for guest users as we have issues with devices that cannot use radius/make it through the registration portal e.g. credit card readers used to take payment. I think you want as few SSIDs as possible, Ciso Meraki documentation states a max of 3 SSIDs broadcast per AP.
-
SQL can be license in different ways - one way doesn't need the use of CALs but might be fairly more expensive that the CAL version? I'd expect to pay between £200 and £400 per year for the version that doesn't require access CALs.
-
Follow a ransomware incident we also implemented a more service based approach to our vlans/network segmentation - we no longer have a generic 'servers' vlan - AD servers are in their own vlan, file servers are in their own vlan, services servers are in their own vlan, etc. all policed by the FortiGate firewall cluster with strict policies attached to control the inter-vlan routing. We have more Vlans for our domain joined servers alone than total vlans you have in the document, on top of the server vlans we have the various other vlans you have in your document for clients, management etc. Might be something you want to architect in to the plan?
