Linux Schools Project.

Modules

The server is based on modules, we have given example server roles and features you can have below but this doesn't mean you have to use them all. You can have one server with all the roles and features or you can have individual servers for every single one. This means you can mix and match depending on your preferences and environment.

All modules are fully configured, that means that if for example you choose the PDC to install, you will already have groups, authentication, permissions, shares and much more, configured and ready to go, all you would need to do is add your users.

Roles

Primary Domain Controller: The only compulsory role in the installation. The PDC controls everything that you have on your network, it hosts the web interface, provides the user database (LDAP), hosts files and provides the authentication for the clients.

File: Provides home areas for selected groups of users. By default the primary domain controller provides home areas for all users. Using this feature will allow you to spread the server load in larger networks.

Proxy: This will setup squid and dansguardian to provide filtered internet access for the client computers.

Print: This will setup a server to provide network print queues.

Web: Provides web services(LAMP) with ftp access.

E-Mail Server: This will setup a server to provide E-Mail services.

Home Access Server: Web based access to home areas from anywhere with an Internet connection.

Backup: A backup server which will back up servers you have selected.

DHCP Server: This will provide a DHCP server for your network.

Reverse Proxy Server: Reverse Proxy Server

Moodle Server: Installs Moodle.

OCS Inventory: This provides an automated inventory system for your client computers.

Ruby CAS Server: CAS is a single sign on solution for web applications.

Monitor Server: This will provide a monitoring server for you network that will alert you if there are any problems.

Distribution Server: This will setup a distribution server for centralised linux client installations.

Custom application: Will add in a name of a non Karoshi application for your server.

Features

Remote Web Management: Server administration is done though a web browsers using our web management system, this can be accessed anywhere with an Internet connection including on mobile phones. User Access is provided separately from the main authentication system to allow for a more secure connection using 4096bit encryption, external access also requires a client key also 4096 bit so that unless you have the key no access is granted. On top of this all actions completed though the web management is logged so that you can see what has been done by who and at what time and date.

The staff and students of the school also have access to a mini web management, for students this means they can just change their own passwords, but for the staff they have access, to change student passwords, enable and disable print queues, add helpdesk requests and enable and disable the Internet for their classroom.

Helpdesk: The helpdesk allows staff to enter requests for problems they have with computer equipment around the school, it allows the technicians to delegate, set priorities and give feedback.

User Management: This section gives you access to adding, deleting, modifying users, you can also reset users passwords which creates them a randomly generated number password. All users get their own user ID and secure password protected home area with access to shares that provide places to store documents for each other to see. You can set user lockout settings, for example if set on 3 times and 5 minutes, if a user types the wrong password 3 times, they will be lockout of their account for 5 minutes.

Group Management: Users are separated into groups, students are in years, and staff are itadmin, tech, staff, officestaff etc. You can add, delete and rename groups.

Exam Accounts: We provide special accounts for exam users, these users do not have access to the network apart from a home area. Each exam account gets a new randomly generated password when they are need to be used. The is also an option to upload exam files, this allows you to upload once, but have all the exam accounts get the files as read only within their home areas. Once the exams are over you can archive the accounts, this will zip them up and put them in staffshare for later use if needed.

Bulk User Creation: Allows you to take a CSV file from your MIS system and bulk create your users. All users will be generated a username and password that can then be printed and distributed.

Record Incidents and Actions Taken: This section allows the administrator to record any incidents, for example if a student has had their account disabled.

Custom Commands: Enables you to run console commands to any of your servers via the web management.

Software Raids: Create and control your servers software raid.

Add windows servers: Add your Windows server to our web management to be able to send commands remotely.

Themes: Choose for various colours to complement your school, and also have your own personal theme to complement your mood!

Languages: We have language support for a small selection of languages.

UPS Integration: Add your UPS, when it is running low it will start to power down your servers safely. You can also monitor them and see their status and how much battery power they have left.

NTP Controls: Monitor the times on your servers, and change which time server you want to access.

DNS Controls: Add and view DNS entries for your network.

Backups: Enable and Disable your backups, View the backup logs, Run backups on demand and most importantly restore files!

Cron Controls: Add and Schedule jobs.

SSL Certificates: Allows you to add personal and commercial certificates for your websites, web management or reverse proxy server.

Warning Messages: If a new user is added, a service has gone down, hard drive failure or an update is needed a warning message will scroll across the top of your web management screen, if it is an emergency like a server failure and you have the appropriate contract with an SMS provider, you will also get an email and/or text message.

LDAP Controls: For those brave enough to delve into the back-end database, this allows you to do so.

Locations: Add all of the locations/room names in your school to make the helpdesk, asset register and iTalc work.

Asset Register: Allows you to record assets for all your equipment, including - descriptions, budgets, locations, costs, age, IPs etc. Has a browse and a search function, as well as a statistic page which can be used for the UK census.

Wake on LAN Controls: If you clients support WoL then you can use these controls to add WoL rooms that can be either woken on demand or be scheduled to wake.

Linux Schools Client: All the tools you need to run the Linux client server side. Includes PXE installation of the client, remote software installation, remote updating, and editing of the skel/profile.

Windows Clients: Choose between Mandatory and Roaming Profiles. Update Icons, Start Menu, Background and profiles.

Printer Management: Add and Delete printers, Enable/Disable queues, delete jobs.

File Manager: Access your servers hard drives via the web management. View disk usages and edit user space quotas.

Emails: All users get an email address as default, you can use either Squirrelmail or eGroupware for the front-end. The controls allows you to view logs, set quotas, access queue information and view statistics.

Proxy: Allow/Ban Internet access to users, Allow/Ban websites, Wild Card Bans, Part Bans. View user logs, user usage, site logs, computer logs and top visited sites. Allow/Ban entire rooms from accessing the Internet.

Web: Remote upload of files to your web server.

Demo

This demo allows you to view the Web Management interface as the Administrator.

The Network Manager login is:

Username: admin
Password: karoshi

  • The demo is reset at appropriate times, when this happens you will lose connection and any data you have entered will be lost.
  • Some functions are disabled, for example 'shutdown server' and the custom command prompt only takes: date, time, du, ls, the file manager works but doesn't actually delete/move/copy etc.
  • Technician is not accessible as it shows an example of what happens if you don't have a username and password.
  • The setup is normally run on port 50001 and you would need a client certificate for access, this version being a demo, skips these security settings.
 
Enter Demo