Marci

You can always tell when Wakefield RP has failed... just check https://eportal.horbury.wakefield.sch.uk/eportal/index.jsp and © Ossett School 2010 - Welcome To The Ossett School Website Have to say, the improvement today vs yesterday and the day before is tenfold for RP'd sites thus far, so well done on sorting the configs. I've been watching all the Wakefield YHGfL RP'd sites fail for 3 years on the trot now whenever it's been a "snow day". It's why we've flat out refused to use it for our webserver other than ePortal services. Our PlusNet 2Mb upstream ADSL backup connection has proved far more reliable thus far - it may get a tad sluggish from 7am to 9am on proper snowdays when we have several hundred hits to the site simultaneously - but it stays up and continues to serve either way. Am watching the Wakey sites with interest to see the impact of the new config changes, as I would LOVE to get all our webservices running over the YHGfL connection, especially as we're now on 100Mb, but whilever the 4Mb ADSL keeps our site up on high-traffic days and I see sites such as Ossett's being down, I won't be persuing it. If failover DNS could be provided so that if RP fails it rediverts to any other available connection, that would be the best solution all round that way there's a degree of redundancy - unfortunately LEA helpdesk doesn't provide a 24hr support service... whereas the web IS a 24hr service, and many Web Admins within schools find they end up having to be on call 24hrs when it comes to the school's site being accessible or not. For situations such as this there needs to be a direct contact for YHGfL, bypassing LEA. Add in to the equation the current conditions... where schools are closed, as well as many local council offices, for health and safety reasons. Potentially you could find yourself with an unmanned LEA helpdesk, which means any chance of a speedy response or action from YHGfL is slim to minimal without direct lines of communication. The support infrastructure for YHGfL has always been the weakest point in the whole system. Whether that's a local issue or whether that's an issue that all YHGfL users suffer, I don't know. I'm speaking for myself here. Are there procedures accessible to us for such circumstances? Stevee - with regards external hosting - if you can find an ISP that will offer a webserver with 2 connections, 1 to public web, 1 secure VPN, you can then latch it onto your internal network that way and keep LDAP integration without needing to expose a barrel of ports and services to the net. Could also schedule a cronjob or similar to retrieve and update LDAP data into MySQL every 15mins if you can't find someone accomodating on the VPN front, or do it over an SSH tunnel. There are options out there...

Blocks and radiators etc should have 1/4" BSP threaded holes (also known as G1/4) if your chosen hardware is hip n' trendy, altho I still stand by my original statements around the net that G3/8 threads on radiators is better. That's why ThermoChill rads were all 3/8" threaded until I departed, then the XSPC / WatercoolingUK boys bought the brand and converted everything to G1/4 without checking the performance losses thoroughly enough. Anyways, sounds like you want 7/16" ID hose therefore your fittings should be 1/4" thread to 1/2" hose. As 7/16" is slightly smaller than 1/2", the tubing will be a nice snug fit on the barbs, and thus means you won't need hoseclamps to keep it all in place. You also end up with a smaller overall tube OD, which means your system ends up less cluttered and you can manage some tighter bends. See Tubing Review - 18 Types of Tubing Reviewed [56k warning] - XtremeSystems Forums If you want to get the RIGHT choice tho, have a read of this: TUBE / HOSE SIZES COMPARED: 6mm vs 8mm vs 10mm vs 12mm vs 3/8" vs 7/16" vs 1/2" - O-CuK Forums but don't bother posting questions there - that site is just an archive from when we were still in business. If you want to be sure that your selected bits will cool the hardware that you want it to cool, take a look at HOW TO: Spec-ing Up A Waterkit - O-CuK Forums (altho not sure if the links to the various calculators are up to date/working anymore, they're worth a try). Most of all, before you start, read and digest thoroughly: Watercooling Myths Exposed | Overclockers XtremeSystems is still the best place to find anything out in terms of watercooling component performance. You'll have to wade thru it to find stuff, but be warned, the reviews there are done semi-properly, so everything tends to be approached from an empyrical-testing standpoint where possible. Personally I'd say give all your business to Tom @ ChilledPC and tell him I sent ya... he knows what he's talking about more than most in the UK Scene. No - you really don't, and it really isn't - if chasing those levels of extreme, pick up a MkII Prometeia and get it regassed to R507 and run the cpu at -80degC - it'll cost far less, and be far easier to maintain. They (TECs) are massively power inefficient, and disastrous when they fail. You'll find your electric bill ends up thru the roof from running one. I spent several years running 226w TEC on CPU, 156w TEC on GPU, and 80w TEC on Northbridge. Ended up with approaching 1kW of heatload getting dumped into the watercooling system which meant muchos fans. The prep work to avoid condensation itself means the motherboard and CPU end up out of warranty also... see http://www.over-clock.co.uk/ivb/index.php?showtopic=1103

To avoid anyone mucking up DNS records having an impact on the Macs, I imaged all ours with hosts files covering all the servers they'd need with all permutations of DNS and IP etc. Not to say our DNS records get mucked up frequently, I'd just rather be safe than sorry...! (eg: If our DNS server goes down, Macs will continue to function regardless)

If memory serves correctly, you need to be using the LDAPCapture auth plugin, which has to be installed in accordance with it's instructions, otherwise you get the above issue.

Aye, Ofsted haven't didn't so much as sniff at our door when they came a few weeks back. No interest in IT team. All they wanted was Wireless access (made `em sign an AUP agreement first), and a copy of our IT Policies, which were handed over to the head to issue to them on Day One. Never heard anything else from `em.

Either that or use active speakers in each room, and run the laptop output out into a 4 way line-level splitter or small mixer with the required number of outputs, going direct to each speaker.

Can you PM me a copy and paste of the contents of your config-dist.php please? Obv remove usernames and passwords.

Paul - can you have a look at a student user record within your mdl_user table and report back what mnethostid your users are being assigned please?? (See screenshot of my user table) http://www.horbury.wakefield.sch.uk/img/caps/skell-screencap.jpg

It has... it's called "take over premises team's desktop to pop up a note and ask them if they can collect and deliver" - obviously the premises team should be previously acquainted with your sharing-the-cakes-n'-coffee-n'-wine methods of payment, and appear fairly rapidly with a hungry look on their face and their glaze fixated on the vanilla slices positioned by the door... The vanilla slices should ideally have been acquired from a member of teaching staff for unbricking their iPhone / reinstalling windows on their personal laptop earlier that day. Always ensure you're paid in twice the number of cakes than there are mouths to feed for such occurences.

Righty - leave it with me and I'll see if I can raise some further assistance!

Done this on the mainboards in several HP3005's without issue... got told to by our local printer repair company who felt guilty charging us to fix when that's exactly what they would have done once they got hold of `em.

Something definitely wrong there, but far more detail required... What version of OSX are the clients running? What version of OSXServer is the server running? What version of AD Domain are you running? How is your DNS set up across the network? Apart from that, first thing I'd suggest is swipe one and move it into your office for a week so you can get your head round what's going on in comfortable surroundings.

(Thought I'd done this ages ago - guess not!) Job Title: ICT Technician - Web & New Media Development Engineer School Type: Secondary School Size: ~1200 Network Type: 2 separate domains (1x Vanilla 2003, 1x RMCC3), OSX Server AD integrated (Music Suite), Linux integrated (Filter bank), FreeBSD integrated (Public Webserver) MIS: Serco Facility CMIS / ePortal (but using SIMS + combo of others for financial management) Other details: HP ProCurve network, Trapeze Managed WiFi, Mitel ICP, Samsung MagicInfo Signage

(Unless you got it from YHGfL, in which case contact your LEA helpdesk, and they'll contact Sophos on your behalf (pah! daft idea tbh))

If memory serves, 2008 requires complex passwords by default without enforcing it in group policy... default to a high level of security basically. If you want to lower the security, you have to make the conscious choice to do so by applying a policy to disable it. I know my development 2008R2 server insists on complex passwords from a clean install...

Think of it from the other side: Don't remove the policy, just apply a policy to disable that feature - change Password Complexity from "not defined" to "define", then choose "disabled" from the options... thusly: (but ticking the other radio button) http://support.gfi.com/manuals/en/lanscan7/images/lanscan7manual-1-85-316.png

Good for the Macs/BSD based OSs, an embarassment for the PCs.

Install TheDude from Microtik (free), drop on your switch, drop on your workstation, link the two and set the link's snmp monitor to the port on the switch that either the source or destination are connected to, start the copy, watch the figures, hover for graph. Once you've gotten more familiar with it, do your core switches and server links and monitor the lot in realtime. S'a damn fine tool (which I keep banging on about, I know). I can max out both 10/100 and gigabit connections copying from mac to x-server, or freebsd workstation to x-server... not found a PC yet capable of doing the same.

No autopurge - you have to bin them manually... but that in itself is behaving oddly. If it finds that the user already exists it should update their info rather than recreating them... however, it's likely that it does this via the ID number. Personally, I would bin everyone out of your Moodle User database (apart from a local admin user) and redo all your parent / staff / student transfers to pull them all in cleanly. I'm presuming all other prerequisites are already met - ie: student's email address is in the email field in AD, first and last names are completed within AD...

You should see errors during import if the Description field isn't being brought in... // exit if description is not populated if ($desc==""){ $this->lookupbydesc_failmsg='[b]Active directory description field empty[/b]'; return(false); } if (isset($ftm_cfg->numericStudentIds) && $ftm_cfg->numericStudentIds){ // according to config, id should always be numeric so exit if not if (!is_numeric($desc)){ $this->lookupbydesc_failmsg='[b]Active directory description field is not numeric[/b]'; return (false); } } $id=$desc; You've definitely got $ftm_cfg->forceauthtype=''; (in config_facility_to_moodle.php) set correctly for the authtype that you're using haven't you? (If it's not set it doesn't update the local database correctly apparently).

Have you rerun the "Transfer Students" script since making the change?

[EDIT] Refresh the page as I've made multiple edits to my reply above![/EDIT]

Therein lies your problem then. Facility-to-Moodle hasn't brought in the Facility ID Number from the "Description" field in AD... and reading Guy's script from line91 of lib_student_match.php within blocks/facility_to_moodle: Which kinda implies that (iirc) the hyphens used within your establishments' ID numbers may just knack up the entire proceedings... unfortunately, the $ftm_cfg->numericStudentIds variable doesn't exist in config_facility_to_moodle.php for me to know what effects it has on things. Transfer Students runs a different routine to Transfer Staff and Transfer Parents, hence the possible reason why Students isn't working when the rest are. So, first things' first, add the following into config_facility_to_moodle.php... $ftm_cfg->numericStudentIds=false; Save, upload, then do a "Transfer Students" and see if that brings in the correct info into the IDNumber field in mdl_users. If that still doesn't work, comment out that line and reupload, then I'd suggest if you can remove the hyphen from your current ID Numbers in Facility, update that info in the description field in AD, then re-run the "Transfer Students" function, it SHOULD bring the correct data thru... It appears at somepoint Guy decided that more or less everywhere would be using an integer for the IDNumber in Facility, so removed the feature within the block to set the content of that field to anything other than an integer. In fact, what version of Facility_to_Moodle are you using? Might be worth updating it just incase you're on slightly outdated version... latest is at http://www.horbury.wakefield.sch.uk/media/moodlegpl/head/facility_to_moodle_project.zip

Hmm - have you had a look at the content of your user table and ensured that what's stored in the mdl_user table's idnumber field matches the student's admin number in Facility? All the MIS Block really does is grab that number (imported when students were brought in using Fac-to-Moodle block) then use it as the base ID with which to search Facility. Also check your roles. Whichever site-wide role contains your staff, ensure that permissions are set to ALLOW for Mis:ViewAnyStudent, Mis:ViewBlock, and Mis:ViewStudent. Manage Assessments and View Own should be set to PREVENT (as staff won't have their 'own' student record, and you only want admins messing with the assessments section).

Phil - you're confusing things. The MIS Block is still maintained by it's original author, Alan Hardy. The Facility-to-Moodle block and the MIS block are both separate entities.