Project
3L :
LINUX pour les LYCEES LUXEMBOURGEOIS.
(Linux for Luxembourgish Highschools)
Disclaimer: This text was originally written in
French before the Netd@ys in 1999, but translated in 2001. Content was
left as is, thus any date-dependent information such as prices,
specification of computers, etc still refer to 1999
During Netd@ys Europe 1999, Lycée Technique Nic
Biever (LTNB) presents the 3L project. This project is
intended to provide highschools (and possibly other
educational institutions) of Luxembourg (and elsewhere) with a software
infrastructure making it possible to manage both the Internet access of the
members of the school community and the usage of the local
area network in a school.
The presentation is about the installation and
operation of the system. It should be noted that the internet access
of most of the other participating institutions will be managed
through a 3L system during the netdays event.
3L incorporates interesting and innovative
characteristics on three levels: functionality, price and history of
development.
Functionality
File and Print Server
The system, just like its more traditional
cousins, provides for the storage of files on a central server (which is easy to
backup), and for the access to printers from all workstations
(classroom computers).
Every user (student, teacher, technical personnel,
etc) also has a personal zone on the server, which makes it possible
to store configuration files of the user's desktop software there and
thus preserve each user's individual preferences independently of
the workstation used. The disk space usage is monitored by an
allocation system which limits possible abuses (quota
management system).
The structure of the centralized data is completely laid
out to accomodate the needs of an educational institution (common
zones for classes, structured acessibility for teachers...)
Firewall
Protection against outside intrusion is provided by
a firewall which, in addition to the usual safeguards, makes
it possible to completely block all access to the system originating
from sites which are known to be dangerous. Another function of the
firewall is the possibility of prohibiting the access to sites
(i.e. to censor them) considered inappropriate for
the pupils, while leaving open access to these sites for other users
of the system.
It is also possible to temporarily block any access
to the Internet from certain classrooms, e.g. during exams.
Email Server
Each user of the system (student, teacher..)
automatically has at his disposal, as soon as his account is created,
an email address of the following format:
FirstName.LastName@mail.lgl.lu. Thus, they can communicate
with the entirety of the Internet community (which obviously includes
the other users). This functionality can also be
disabled temporarily for certain classrooms, during exams for
example.
Web Server
The system makes it possible to publish
the school's web pages on the central server itself, which ensures an
excellent maintainability of these pages.
In addition, it is
possible for each user to publish his own personal Web page, which
will be accessible worldwide under the following web address:
http://www.lgl.lu/~username. In order to publish his page,
it is enough for the user to put the data of the page into a dedicated
part of his personalized zone on the file server, making it immediately
available.
Internet Access
Access to the internet (mainly www) is managed
through a program which keeps in-memory copies of the pages that were
most recently visited (proxy cache). This allows to speed up the
access to pages which are visited from a significant number of
workstations, typically during the teaching of a class.
This program also keeps a log of the operations
carried out, so that the persons in charge can find out
afterwards which user accessed which site, when and from which
workstation.
User Accountability
The individual users have their own accounts and personal
passwords, and for any action on the system preliminary identification
is needed. All the actions are thus tracable a posteriori by the
persons in charge. This makes it possible not to have to permanently
supervise what the pupils do on the computers, because each pupil
knows that he can to be confronted with the evidence after the fact,
should he do something objectionable.
Remote Administration
All maintenance actions for the everyday use of the
system (management of the user accounts, e-mail, disk space, printers,
and internet access; browsing the logfiles, etc) are carried out
using a user-friendly graphical point and click interface. This
interface functions through a web browser (Netscape Navigator,
Internet Explorer, etc) and is usable from any authorized machine on
the network. Acces to functionalities can be granted on an individual
basis for each administrator. These functionalities are adapted
specifically to the needs of an educational institution.
Installation
The installation is easy and driven by some simple menus.
Tools for replication of the workstations are included.
Cost
Standard Hardware
The hardware platform on which the system runs is
made up of a standard PC of a certain power (processor >= pentiumII
300MHz, memory >= 128Mb, disk space 2GB + space intended for the file
service for example 9Gb) for which the prices are extremly reasonable
(less than 50.000 LUF). The standard aspect and the price of the
hardware make it possible to keep certain spare parts in stock, which
leads to very short down-times in the event of breakdown. It is
even conceivable to keep a whole second system as a standby.
Software
The operating system of the workstations is Windows NT or
Windows 95/98, which are standard in the national education, and whose
licensing conditions are known.
The server software is free (as in speech,
and as in beer). Indeed, it is based on the free operating
system Linux, for which no licence needs to be paid and for which the
entirety of the sources are accessible to the public. All
functionalities listed above, as well as others which might be
provided in the future to widen the offer, either are available out of
the box on linux, or were developed in a context which ensures their
availability free of charge.
This brings us to the interesting history of the
development of this project:
History
On an inititive of the Kiwanis Club of
Esch-sur-Alzette, the Lycée Technique Nic Biever (LTNB) placed ,
a few years ago, a test
server allowing small groups of pupils to benefit from the
possibilities of the Internet into the reading room of its library.
Following up on the positive feedback generated by this
action, a Project of Establishment was set up at the LTNB, in
which a first computer system which was to have functionalities
similar to those described above was developped with the help
of a small team of IT volunteers.
A collaboration with LiLux (Linux Luxembourg Club)
was also undertaken and the system evolved during several years in
order to better adapt to the needs of the institution. The research
and development carried out at the LTNB led to a system which
satisfied more or less well the needs of the school, but whose
complexity, due to its "organic" growth during its early
life, did not lend itself to an easy administration, nor to an
easy portability to other sites.
With the announcement of the "plan
informatique" in the teaching sector, prompted by the conclusions
of the tripartite commission, a collaboration was set up between the
LGL and the LTNB, whose purpose was to produce a new generation system
which was easy to manage and to install in various schools. The
prototype of the new system was installed in the LGL. An installation
with the LTML is for the 30.10.1999.
The next step will need to be the creation of a "professional"
documentation and the development of a training course for the
administrators.
The project team (LTNB, LiLux, LGL) is proud to
offer to the "Éductation Nationale" an information technology tool
designed for the needs of the Luxembourgish schools.