Even when the import aborts, statistics are now still written to the terminal, passwords and summary CSV files are written to disk (Bug 45673).

CSV files encoded in ISO 8859-1 (and others) are now automatically convert to UTF-8 (Bug 47677).

Better error messages are now provided for missing mandatory columns. record_uid and source_uid are now always part of mandatory_attributes. It is now verified that the CSV columns configured in csv:mapping exist in the CSV file (Bug 47681).

It is now checked, that the properties listed in the configuration of mandatory_attributes exist and are non-empty (Bug 47691).

Invalid school class names are now caught in dry-run and reported to the customer (Bug 47861).

The script create_ou has been replaced with a newer version that is based on the UCS@school python library ucsschool.lib (Bug 46765).

Until now, the UMC module "User Import" only displayed a generic and very technical error message when errors occurred. The processing of errors during import has been improved so that errors that occurred can now be distinguished more accurately, are displayed better and contain more comprehensible text (Bug 45165).

Check for existing computer objects in school creation process and use it if possible (Bug 47408).

Extend School validation for hostnames of educational and administrative dcs (Bug 46765).

Prevent writing of role attribute when deactivated via UCR (Bug 47967).

Add simple python interface to check school membership of computers (Bug 47966).

When UCS@school is first installed, a demo school with a demo portal is now automatically created. On existing UCS@school environments that are now being updated, the demo school will not be created. To prevent the demo school from being created automatically, the UCR variable ucsschool/join/create_demo must be set to no before installation (Bug 47807).

By default, the password of the computer account is changed every 21 days. This has caused the ucs-school-user-logonscript-daemon to stop working from the time of the change. The daemon is now restarted automatically during the password change (Bug 47805).

Desktop shortcuts were created by the UCS@school netlogon scripts only if they did not already exist on the desktop. If UCR variables were modified for the desktop shortcuts, the next time the user logged in, the shortcut was not updated automatically. This problem is now fixed when the netlogon scripts of the users are rebuilt (automatically or manually via univention-directory-listener-ctrl resync ucs-school-user-logonscript (Bug 47937).

A user's description attribute is now no longer modified in LDAP if the ldap module has been activated in freeradius (Bug 47347).

The key expansion for DES encryption in pyMsChapV2.py has been fixed. This bug prevented the RADIUS authentication for some users depending on their password (Bug 48128).

Until now, the UMC module "User Import" only displayed a generic and very technical error message when errors occurred. The processing of errors during import has been improved so that errors that occurred can now be distinguished more accurately, are displayed better and contain more comprehensible text (Bug 45165).

The description text in the UCS@school Configuration Wizard now contains a hint on how to disable the automatic creation of the demo school during the initial installation/configuration of UCS@school (Bug 47807).

The UCR variable proxy/pac/exclude/domains/domainnames is not supported anymore. The UCR variable proxy/pac/exclude/domains/dnsnames must be used instead. An automatic migration will be tried. If both variables exist, the migration must be done manually (Bug 47645).

Fix a typo in the new demonstration portal (Bug 48186).

Due to the upgrade from dojo to a newer version the job overview in the User Import UMC module did not display any jobs. This error was fixed (Bug 48303).

The user guidance during the installation of UCS@school was improved (Bug 47640).

Insufficient LDAP permissions and an typo within the LDAP ACLs prevented teachers from resetting student passwords if the student is located underneath another school OU. The problem also occurred when a school administrator tried to reset a teacher password. Both problems have been fixed (Bug 47625).

Added new beta feature to enable educational school slaves to replicate also UCS@school staff user objects. This feature can be activated via the UCR variable ucsschool/ldap/replicate_staff_to_edu. Please activate this feature only if you know all side effects and necessary steps (Bug 48068).

After changes to the school lib it was no longer possible to create schools with DC's for which a computer object already existed. This Bug was fixed (Bug 48245).

If external SSL certificates (from e.g. let's encrypt) are used on the domaincontroller master and master's FQDN differs from the FQDNs within the SSL certificate, the UMC module "Benutzerimport" threw a traceback. The new UCR variables ucsschool/import/http_api/client/server and ucsschool/import/http_api/client/ssl_verify now allow to specify the correct FQDN used in the SSL certificates resp. to disable SSL checks at all (the latter one is NOT recommended!) (Bug 47911).

The UCS@school library has been extended to provide internal functions a faster way to query all users with certain criteria from LDAP (Bug 47885).

An internal filter error while searching for schools was fixed (Bug 48429).

In environments with several hundred users in one OU, opening the UMC module "Passwords (students)" could take an extremely long time, making the module almost unusable. The responsible LDAP search has now been identified and replaced by a more powerful variant in order to considerably reduce loading times (Bug 47885).

Creating an exam with a whitespace at the beginning or end of the name created a traceback upon starting the exam. Whitespaces are now trimmed (Bug 48509).