Table of Contents
With Univention Corporate Client (UCC) 3.0 the second major release update of Univention Corporate Client is now available. It provides several improvements and bugfixes:
The Ubuntu base has been updated to version 16.04. A large part of available software components are renewed: Unity 7.4, Linux Kernel 4.4, LibreOffice 5.1.4. All Univention packages imported from UCS have been updated to the version of UCS 4.1
The default Desktop is now Unity, which allows us to provide maintenance of 5 years for UCC 3.0.
UCC desktops are now available as 64-Bit images. Thin client images are still available as 32-Bit.
Clients report their currently installed image to the UCS management system. This allows to easily search for clients which use outdated images.
Clients check and update their position in the UCS LDAP. The move of a computer object now does not require a client rejoin.
Images for 32- and 64-Bit architecture images can be build on UCS servers that are using 64-Bit architecture.
Thin clients update their client policies persistently upon booting, which increases robustness in case the LDAP server is not reachable during boot time.
The RDP and Firefox session scripts can be configured to add additional program parameters, or to execute arbitrary commands, including the possibility to change the program binary.
It is possible to activate the custom start script feature. This offers the possibility to sync scripts and other files from the image server and execute them at boot time.
Due to the switch from 32-Bit to 64-Bit architecture in the UCC desktop image, clients are required to boot via PXE for the image update to work.
UCS installations, in which the master domain controller was installed in a release older than 2.3 still use MD5 as the hashing algorithm for the SSL certificates. Later releases use SHA-1 as the hashing algorithm. UCC clients cannot join a domain still using MD5 hashes. The necessary steps to migrate a UCS domain from MD5 to SHA-1 are documented in the Univention Support Database (SDB 1150).
Prior to the release we worked together with Citrix to support Citrix environments in UCC 3. In these tests we found issues regarding USB device support with the Citrix Receiver and UCC 3. A Citrix Receiver update is required to fix these issues. After the update has been released, we will provide an Errata Update for UCC 3. Until then, the Citrix session does not support all documented features.
Update 2016-10-17: With Citrix Receiver 13.4, UCC 3.0 was successfully verified as Citrix Ready. The update is provided via Errata Updates and is also preinstalled in updated UCC 3.0 images, which can be downloaded in the module.
With the release of Univention Corporate Client 3.0 the package univention-ucc-cifshome-pam-mount has been removed due to stability and performance issues in medium and large environments. The custom start scripts feature allows administrators to build similar features if they desire.
If the user password is changed during the login at the LightDM Login Manager (e.g., because the user option is activated or because a password has expired), the password change is effected via Kerberos. This Kerberos password change is not "visible" for PAM modules executed after authentication. The RDP session script and the PAM module for mounting the home directory via CIFS, however, access the cached password and, as a result, the login fails the first time. The correct password is then available for the second login attempt.
As announced with UCC 2.1, the XRDP UCC terminal services have been removed in UCC 3.0.
Listed are the changes since UCC 2.1:
univention-ucc-force-rw-boot has been added to configure
a UCC client to boot in read-write mode (Bug 41427).
ldap/hostdn of the client, and updates it, if necessary (Bug 35411).
systemd services (Bug 41788).
eth0 is used (Bug 41602).
ldap/client/retry/count is set to 0 by default (Bug 41998).
ucc/mount/blacklist
to configure a space-separated list of device names which are not mounted
(by default the list includes the full partition devices sda sdb sdc sdd sde)
and ucc/mount/blacklist/disable to disable the blacklisting.
The Univention Configuration Registry variable ucc/mount/fullpartition has been removed.
If ucc/mount/fullpartition was used, the old behavior can be
restored by setting the Univention Configuration Registry variable ucc/mount/blacklist/disable
to "true" (Bug 41427).
Various hooks (run-parts) have been added to the XenApp session script (Bug 41427).
/usr/share/univention-ucc-session-xenapp/hooks/top.d/ - start of the session script
/usr/share/univention-ucc-session-xenapp/hooks/pre-firefox.d/ - before starting Firefox
/usr/share/univention-ucc-session-xenapp/hooks/post-firefox.d/ - after Firefox finished
/usr/share/univention-ucc-session-xenapp/hooks/bottom.d/ - end of the session script
firefox/session/cmd) (Bug 41427).
rdp/session/cmd) (Bug 41427).