Jump to content
EduGeek EdSec 2026 is Go! 27th Oct in Derby! Join us for a day of EdTech security focused talks, networking, and an evening social ×

PyROm

Members
  • Posts

    661
  • Joined

Everything posted by PyROm

  1. Also if your flavour of linux has selinux enabled you need to run setsebool -P httpd_enable_homedirs true
  2. As a daft question, you have symlinked mods-available/mod_userdir.load as well as mod_userdir.conf to your mods-enabled folder?
  3. Edit: Sorry meant everything in the directory section of your mod_userdir.conf working backwards, replace evenrything in your userdir.conf with Options Indexes FollowSymLinks AllowOverride None Require all granted And try again, also you have indexes on so if you just out the directory into your browser it should list contents.
  4. Just got an automated email from misco today asking if its ok to keep sending eDeal emails.
  5. hi, url should be http://compsci/~tkid3/public_html/file.html if it still doesnt work get rid of the limit sections
  6. another thought is look in /var/log/apache2/access_log and error_log for clues.
  7. As a quick check, has the user the webserver is running as got permission to the folder? quick test would be to chmod -R 777 public_html. Have you tried it with a straight index.html file as well (also with right permissions). Have you tried putting the file your trying to view on the end rather than relying on it auto fiinding the default index? ie goto http://server/user/public_html/index.html
  8. In your userdir.conf you have changed their example, you have used "UserDir public_html", I believe if you chage this you also need to change the line "" to ""
  9. Hi, The universal driver supports multiple models of copier at once. We have 2 models here, you print to a central print queue then swipe your card at any copier in school to collect your printing, which means when you print the driver has to produce output that both models understand, without selecting the model you want to print to when printing. If you are just using one model then it shouldnt make a difference to you which one you use.
  10. We use the RICOH PCL6 UniversalDriver V4.6 for all our ricoh copiers. Works with windows 10 fine.
  11. Am hopeing to make it, just put my request in to school.
  12. I can just see the commands now... "git checkout PornStar", "git pull bird" etc. We used a raspberry pi emulator a while ago (vm basically running raspberry pi os), we had it copy the harddrive image over to the users local profile on the machine if it didnt already exist when you ran it, then start it up, so each user ran their own copy and couldnt interfere with each other. Wouldnt be too big a job to setup debian with mysql running on it and loopback networking. That way they could all have access to their own personal mysql server, maybe even if you could get vm passthrough a folder you could have apache serve files from the vm saving setting up apache/iis on the windows machines to run php.
  13. Havent looked at this as no one has mentioned it to me yet, but might be worth considering SQLlite as well as it is a file based server that might be easier to handle per student (and has standard sql command syntax). With using access .mdb as a mssql database, dont you have to set it up as an odbc source, or is there a way around that?
  14. The vers=2.0 is still an option, so you need a comma between username and vers=2.0 eg. # /bin/mount -t cifs //stinkyprintserver.mydomain.sch.uk/papercut$ /mnt/remotesmb -o username=MYDOMAIN\\Administrator,vers=2.0 I believe you can use vers=2.1 as well.
  15. Once you have the log though you can just do a find against the log, in the eventviewer gui, putting in the path eg. "D:\Sharename", but as above I havent found a way to limit it to just logging that path.
  16. From what ive read the filter uses a subset of XPath 1.0, and doesnt support wildcards or start/end/mid. I wanted to include a filter to ignore .tmp files and ~ files, I dont think its possible though.
  17. After reviewing how we manage looking for who deleted what files and updating a few things I wondered how others did it? We have 2 file servers that are a dfsr copy of each other. We are now using event forwarding to forward events to another server, using the filter in the event subscription section so we only recieve deleted events, this massivley cuts down the events received to just the ones we are interested, getting round the limitation of having to audit all file access events creating which creates a massive log file and takes ages to search. Also smaller log files mean we can retain deletion logs longer. Forwarding the events means we can have smaller log file sizes and shorter retention times on the actual file servers themselves as information we need from them has been forwarded elsewhere, no more deleting old auto archived security eventlog files. The filter we use is:- *[system[(EventID=4663)]] and *[EventData[Data[@Name='AccessMask'] and (Data='0x10000')]] *[system[(EventID=4659)]] and *[EventData[Data[@Name='AccessMask'] and (Data='0x10080')]] *[EventData[Data[@Name='ProcessName'] and (Data='C:\Windows\System32\dfsrs.exe')]] or *[EventData[Data[@Name='ProcessName'] and (Data='C:\Windows\System32\svchost.exe')]] Originally we were just using the standard event of 4663 and access mask of 0x10000, however I noticed that it didnt seem to be catching all events. Adding in event 4659 (intent to delete) with mask of 0x10080 (Delete+read permissions) caught the rest. Im guessing this is either to do with shadow copies or dfsr. I exclude the dfsrs and svchost services as I am only really interested in users deleteing files.
  18. Router is best, although you can be really nasty and change the subnet on all machines to 255.255.0.0
  19. Just wondering if anyone has found a way to remove the search box from file explorer. So far all I can find is ways to remove it from the start menu. On windows 7 we used to uninstall windows search from the windows features link under add/remove programs, however this doesnt exist anymore. We used to get problems where the students would all search the shared drive for the work they were given at the begning of lessons, rather than followingfollowing the path they were given, which slowed the servers down a bit.
  20. As a side note, you can setup nps on a dc, we have it here to run radius auth for our domain joined pc`s.
  21. We have smoothwall and unifi here. We treat the BYOD is a seperate network, it is vlaned off from everything except the smoothwall box, which then acts as a router using group bridgeing to the main network. We have the ap`s radius authentication+accounting pointed to smoothwall. We use smoothwalls built in dhcp server to serve addresses to the BYOD network (Can be important for some ap`s that dont send framed-ip headers). Smoothwall is set to core authentication for the BYOD vlan, this picks up the radius login user for the device and uses that as the user in smoothwall, so doesnt require the user to login seperately to smoothwall. We then use group briding rules to allow access to internal servers from the BYOD network. In this setup there is no need for nps.
  22. You can use notebook 9 key with notebook 11.4, you need to install smart drivers/ink version 12 (in addition to notebook 11) for windows 10 compatibillity.
  23. I should say, by upgrading I mean the domain itself, eg. if there used to be 2003 dc's on the domain. Raising the domains functional level doesnt auto activate dfsr on older domains (from memory)
  24. Daft question, are your domain controllers using dfsr or frs for syncing? if upgrading from older (server 2003) you have do do some manual tweaks to switch over to dfsr. If using dfsr you can install the dfsr role which lets you run diagnostic reports etc through gui. You can also use dfsrdiag at command line to check replication status.
  25. We have fog imaging running on an old i5 pc with a couple of harddrives in raid mirror holding the image, we then have a nas box that fog replicates with as a backup, probably total cost £500 max. and even that is ott for fog.
×
×
  • Create New...