mjk

That wasn't really my point, it might be a useful tool for you and it would certainly make it easier for others to use, comment upon and modify your code. You can always post version update here.

Have you thought about using github ? Edugeek is quite good, but version control isn't one of it's strong points.

Putting a competitors OS on it just has to be the best use ! Might see if I can run Fortigate in a VM on our old s8 !

Biostore can manage all of these key fobs. We enter the fob into biostore which is linked to AD, SIMS, Papercut and Paxton (and cashless catering). Once the fob is in biostore you can use it on papercut and net2. I'm not sure where inventry would fit into this scenario though but it might be worth giving them a call as this is the sort of thing their systems manage.

^ what he said

in the U.K the major players are Capita SIMS, Arbor, iSAMs, Bromcom (sorry for those I missed). They all have an API for third parties.

It really depends on what the application is; Most apps get used for a small part of the curriculum - maybe a few hours per week only in a single term/semester but vendors try to charge as if they are used 8hrs per day every day. I think the issue is that vendors buy in huge AWS/GCP/Azure servers to cope with an expected demand and not utilise a sensible scaling approach.

Some of the most reliable web based software has a Java backend. Papercut, Google, Bing, Twitter, Amazon We are talking Web apps here - not apps that you need to manage.

.... and per domain whitelisting - If I buy a site license for all my users I don't expect to have to upload a pre-historic csv file every 5 minutes when you could simply whitelist the domain with a social auth plugin

100% web based, no plugins. Integration with Google Suite and O365 especially for Single Sign On and document storage. Integrations with Google Classroom. API access for school (depending upon what the app does of course) Pricing for *use* not per user - or just a sensible site cost. none of this 5$ per user per month business.

If you buy them by the hundreds you'll get the price down :-) but the flat rate is £19

We use: Getech Schools - Top of the class for sales and service They will also help with setup and support. Glad to see that you are embracing opensource @Garacesh !

We used to use Smoothwall and do RADIUS identification as you are suggesting. It works well with as long as you have a single smoothwall server. If you have more than one you need to configure the RADIUS server to send identification packets to both machines simultaneously which caused some headaches. The basic premise is that the RADIUS authenticates the user to the Wifi and puts them in the correct VLAN based upon LDAP group assignment. The RADIUS then sends an Identification packet to the Smoothwall that puts them into the correct filtering group and logs their internet behaviour.

Sorry that would be how you would send email. Anyway it's a bit off-topic if you don't need to setup a mail server. Stick to ssh - and setup keys so you don't need ot login every time.

mail. so to send a file you would use mail -s subject [email protected] < yourfilename.txt

Our approach was to put on QoS and guarantee bandwidth for: Google Classroom, Google Suite (docs etc), Specific Educational sites, External VPN connections. Everything else is then regarded as lower priority, with things like BYOD updates at the bottom of the list.

Knowing what the server does is important to know the best solution here.

I'm in the legal obligation camp. The school must educate the children and it chooses to use certain tools to do so. You don't need consent to use educational tools. Things like Biometric are different. CCTV is more public interest.

We have some old wyse clients and we just set them up using a text based config file that is held on an ftp server. The DHCP server gives them some basic settings that then locks them down so they have to use that file.

Yes we do use the single channel architecture. The majority of our clients only support 2x2 mimo 802.11ac so an individual client won't get near, I've only really seen 3x3 on newer macs that the kids bring in and none of our chromebooks support it yet, but I', sure they will in future.

I run Fortinet Wifi successfully with 1500 Chromebooks. We have AP832's an MC4200 and (mostly HP A5120's). Don't pay too much attention to those who say it won't work - I can guarantee you they've just not configured it correctly or don't have a decent install company who can help support them. You should plan to have 2Gb/s to each AP as each AP can provide nearer 1200Mb/s. 10GB/s backbone is sensible if you have more than a few AP's connected to a switch. Your leased line (and backup) capacity should be reviewed too.

yes, but wpad is just a dns link to the pac file so it's really simple to do. The other way of looking at it is having the pac file globally accessible and put in some javascript that says if they are on a home network ip range do direct, and if they are on a school range use these proxy servers.

With #4 you can use radius accounting to identify your users to smoothwall

We use RADIUS accounting on chromebooks and it works fine. Students currently do need to authenticate onto the wifi and then log into the chromebooks, but this is getting fixed in a future version which will allow passthrough authentication. I guess in future you could also get them to authenticate automatically with a pre-defined password and then login to the chromebook and have that passthrough to the RADIUS, when the new feature is available.

Texthelp is used by a lot of schools. I'm not sure if this affects their browser plugins - does anyone know?