Services
The domain hochstaffl.eu provides network, communication, storage and remote-access services for authorized users and systems.
The internal Windows environment uses Microsoft Active Directory for centralized user accounts and authentication. Other services, such as OpenVPN and some web applications, are operated independently and use their own access configuration.
Contents
Service Overview
- Active Directory – centralized user accounts and authentication for the Windows domain
- OpenVPN – secure remote access to the internal network
- Remote Desktop Services – remote access to Windows desktops and published applications
- Microsoft Exchange – email, calendars, contacts and groupware
- FTP Services – file transfer, user storage and archival storage
- Nextcloud – current on-premises cloud storage and file synchronization
- Pydio Cloud – legacy cloud storage retained for access to existing data
- EUMETCast – satellite data reception and processing
- EarthOnline – presentation and archive of processed satellite imagery
- Flightradar – collection and visualization of aircraft tracking data
- Web Services – public and internal web applications hosted within the network
Identity and Authentication
Active Directory
Microsoft Active Directory provides centralized user and computer management for the internal Windows domain.
Domain accounts are used by domain-integrated services, including Windows systems, Remote Desktop Services and Microsoft Exchange.
Not all services use Active Directory authentication.
Remote Access
OpenVPN
OpenVPN provides secure remote access to the internal network over the Internet.
Once connected, authorized users can access internal systems and services that are otherwise available only from within the local network.
OpenVPN is operated independently from Active Directory.
Remote Desktop Services
Remote Desktop Services provide access to Windows desktops and published applications within the hochstaffl.local domain.
Users authenticate using their domain credentials.
See Remote Sessions and Desktop.
Email and Groupware
Microsoft Exchange
Microsoft Exchange provides email, calendars, contacts and related groupware services.
Users can access the service through Outlook, webmail, mobile devices and supported mail clients.
See Webmail, Outlook and Exchange.
File and Cloud Services
FTP Services
Several FTP servers provide different storage and transfer functions, including:
- Anonymous file access
- Individual user directories
- File transfer between systems
- Archive storage
See FTP Server.
Nextcloud
Nextcloud is the current on-premises cloud storage service.
It provides file storage, synchronization and sharing through web, desktop and mobile clients.
Pydio Cloud
Pydio is the previous cloud storage service. It remains available so that users can access data that may still be stored there.
New cloud storage should generally use Nextcloud.
See Online Cloud.
Earth Observation
EUMETCast
The network includes a dedicated EUMETCast reception and processing system.
Satellite data is received through DVB-S2 equipment and processed locally for further use within the network.
Related documentation:
- EumetCast Dissemination Service
- DVB Reception Devices
- PC Hardware Specifications
- Operating System Specifications
EarthOnline
EarthOnline provides near real-time satellite imagery and derived products generated from EUMETCast data.
It also provides access to archived imagery.
Aircraft Tracking
Flightradar
A network of receivers collects aircraft tracking data and forwards it to a private Flightradar server.
The server combines the received data and provides a web-based visualization.
Web Services
The hochstaffl.eu infrastructure also hosts a number of public and internal websites and web applications.
Public services are accessible directly over the Internet. Internal or administrative services may require authentication, local network access or an OpenVPN connection.
Access Model
Services within the network do not all use the same authentication mechanism.
Active Directory provides centralized authentication for the Windows domain and domain-integrated services.
OpenVPN is operated independently from Active Directory.
Other services use their own authentication or access configuration where applicable.
