Inhaltsverzeichnis
Dieses Dokument enthält die Changelogs mit den detaillierten Änderungsinformationen zum Update von UCS@school von Version 4.4 v4 nach 4.4 v5. Sofern notwendig, werden wichtige Hinweise zum Update in einem separaten Abschnitt behandelt. Die Changelogs werden nur in Englisch gepflegt. Die Änderungsinformationen für vorherige Versionssprünge finden sich unter https://docs.software-univention.de/.
Während der Aktualisierung kann es zu Ausfällen von Diensten innerhalb der Domäne kommen. Aus diesem Grund sollte das Update innerhalb eines Wartungsfensters erfolgen. Grundsätzlich wird empfohlen das Update zunächst in einer Testumgebung einzuspielen und zu testen. Die Testumgebung sollte dabei identisch zur Produktivumgebung sein.
UCS@school 4.4v5 setzt für das Update bzw. die Neuinstallation mindestens die UCS-Version 4.4-3 voraus. Die betreffenden Systeme müssen daher vor dem Update mindestens auf diese UCS-Version aktualisiert werden.
Größere Updates für UCS@school werden im Univention Appcenter als eigenständiges App-Update herausgegeben. Kleinere Updates und Fehlerbereinigungen (Errata für UCS@school), die keine Interaktion mit dem Administrator erforderlich machen, werden im Repository der bereits veröffentlichten App-Version von UCS@school herausgegeben. Die Changelog-Dokumente, die Univention mit jeder UCS@school-App-Version herausgibt, werden dann entsprechend um einen neuen Abschnitt erweitert, aus dem ersichtlich wird, zu welchem Zeitpunkt welche Pakete veröffentlicht und welche Fehler dabei behoben wurden.
Mit dem Errata Update vom 11.09.2019 gab es eine Regression im Migrationsskript für UCS@school-Rollen. Sollten Sie im Zeitraum vom 11.09.2019 bis zum 27.11.2019 Ihr UCS@school von einer Version kleiner als 4.4v1 aktualisiert haben, dann konsultieren Sie bitte den folgenden Artikel auf univention help: https://help.univention.com/t/keyerror-ucsschoolrole-in-computerroom-room-aquire-and-schoolwizards-computers-query/13718
Source package ucs-school-import in version 17.0.29A~4.4.0.202003201250:
Logging of the import has been improved (Bug 50039):
The log file /var/log/univention/ucs-school-import-error.log with entries of log level ERROR and above is now created besides the regular log file /var/log/univention/ucs-school-import.log.
The origin of the import job is now printed to the log file, so it is now possible to distinguish between jobs started on the command line and jobs started via the UMC module.
The first line of the input file (CSV) is now printed to the log file.
Multiple symlinks are now created in the directory /var/log/univention/ucs-school-import/ to allow faster search for relevant log entries
The SiSoPI documentation has been moved from the packages HTML documentation to the official UMC-import manual: https://docs.software-univention.de/ucsschool-umc-import-handbuch-4.4.html (Bug 50806).
The script ucs-school-purge-expired-users does not fail anymore in a scenario where school is not set in the import configuration (e.g. SiSoPI) (Bug 50406).
Source package ucs-school-lib in version 12.1.10A~4.4.0.202002211437:
Internal change: within the UCS@school LDAP attribute ucsschoolRole are now additional context types allowed. Besides the existing school the new type exam has been added (Bug 50819).
Source package ucs-school-metapackage in version 12.0.3-1A~4.4.0.202003251252:
When joining a Domaincontroller Backup into a UCS@school domain, demo schools are no longer created. The creation of demo schools is only performed during initial installation of UCS@school on the Domaincontroller Master (Bug 50578).
To reduce the load of LDAP servers in the UCS@school domain, the UCR variable nss/group/cachefile/check_member will be unset during the update to UCS@school 4.4v5 or higher. Thus the ldap-group-to-file mechanism no longer checks each group member for existence (Bug 50905).
New diagnostic modules are now automatically installed on Domaincontroller Master and Domaincontroller Backup systems (Bug 50500).
Source package ucs-school-umc-diagnostic in version 1.0.0-9A~4.4.0.202003241232:
Source package ucs-school-umc-exam in version 9.0.1-34A~4.4.0.202002252150:
The tracking of exam users has been improved: in the past, problems could occur if users participated in several parallel tests and one of the tests was finished. The membership in exams is no longer recorded in LDAP via the attribute ucsschoolSchool but via an additional role entry in ucsschoolRole (Bug 50819).
The containers for exam users are now cached per OU. This fixes problems with exam users from multiple OUs (Bug 50588).
Source package ucs-school-umc-computerroom in version 11.0.0-18A~4.4.0.202004161150:
Teacher computers are now properly exempt from the share restrictions in the computer room. This is valid during exams as well (Bug 50852).
Source package ucs-school-import in version 17.0.31A~4.4.0.202004241630:
Some birthday date formats could not be parsed correctly during an user import (e.g. dd.mm.yy). This fix adds various common formats that will be accepted. (Bug 48138)
A user import crashed when a class name contained unallowed characters (e.g. a backslash). This fix ensures, that such characters will be replaced with a configurable replacement character. (Bug 45683)
Source package ucs-school-ldap-acls-master in version 17.0.4-1A~4.4.0.202002241104:
By default, the access to the import counter objects below cn=unique-usernames,cn=ucsschool,cn=univention,LDAP_BASE and cn=unique-email,cn=ucsschool,cn=univention,LDAP_BASE is now rejected for systems with role domaincontroller slave and memberserver (Bug 50830).
Source package ucs-school-lib in version 12.1.12A~4.4.0.202004241641:
Source package ucs-school-umc-computerroom in version 11.0.0-19A~4.4.0.202004241449:
The UMC checks the computer room settings before finishing an exam now to prevent wrong behavior due to de-sync of the room state (Bug 51165).
Source package ucs-school-umc-distribution in version 17.0.1-8A~4.4.0.202004241433:
Internal improvement (better logging of internal state) (Bug 51167).
Source package ucs-school-umc-exam in version 9.0.1-38A~4.4.0.202004241746:
Source package ucs-school-umc-exam in version 9.0.1-40A~4.4.0.202005042218:
The time to finish an exam has been drastically reduced by optimizing the way exam users are deleted (Bug 51199).
Source package ucs-school-import in version 17.0.35A~4.4.0.202005051459:
When ucsschool/import/generate/user/attributes/no-overwrite-by-schema was an empty string, the import would not recognize it as unset and assume all attributes should be overwritten - including uid and mailPrimaryAddress. This fix ensures that uid and mailPrimaryAddress will not be overwritten in that case (Bug 51003).
Schemes in user import configurations now get checked for valid format (Bug 50894).
Source package ucs-school-ldap-acls-master in version 17.0.4-4A~4.4.0.202005041233:
The access to sensitive user data is now more restricted (Bug 50669).
Source package ucs-school-lib in version 12.1.14A~4.4.0.202005121819:
Source package ucs-school-umc-computerroom in version 11.0.0-20A~4.4.0.202006031054:
Users can now set the UCR-V ucsschool/umc/computerroom/wakeonlan/target_nets to send WoL signals to multiple alternative broadcast ips instead of the default 255.255.255.255 (Bug 51074).
Source package ucs-school-import in version 17.0.36A~4.4.0.202006191705:
Deactivated hooks for the creation of new OX contexts, when set on a user, were added (Bug 51536).
Source package ucs-school-umc-diagnostic in version 1.0.0-11A~4.4.0.202006241019:
In UCS we can switch backends for DNS by UCRV dns/backend from samba4 to ldap. This variable must be set to samba4 in UCS@school systems with the role dc master, dc slave and dc backup. This fix adds a diagnostic module which checks if the UCRV of dns/backend is set correctly (Bug 50503).
Users that are considered for user-imports, might have a sourceUID but no recordUID set. However, this will most likely lead to problems in the future and should be avoided. This fix adds a diagnostic module which detects users with a sourceUID but no recordUID set (Bug 51542).
Source package ucs-school-umc-lists in version 2.0.0-6A~4.4.0.202006170938:
The UCR-V ucsschool/umc/lists/class/attributes was added to set the displayed UDM properties and the column names in the csv file, which is downloaded in the UMC classlists module (Bug 50773).
Source package ucs-school-import in version 17.0.39A~4.4.0.202007171700:
Republish code of version 17.0.36: Deactivated hooks for the creation of new OX contexts, when set on a user, were added (Bug 51536).
The code checking schemas in the import configuration is now more robust (Bug 51545).
An error, when a user changes a school in the SiSoPi scenario, was fixed (Bug 51418).
A bug that was triggered when using an address for the API root that does not start with the case of the base_url has been fixed (Bug 51606).
Source package ucs-school-lib in version 12.1.16A~4.4.0.202007231036:
If an UCS@school group has invalid members, an error containing the user and group dn as well as a link to a help article (https://help.univention.com/t/how-an-ucs-school-user-should-look-like/15630), is raised. (Bug 50625).
Fixed an internal error with unloaded UDM modules that prohibited the fetching of any UCS@school objects (Bug 51717).
Source package ucs-school-umc-diagnostic in version 1.0.0-12A~4.4.0.202006251224:
Republish code of version 1.0.0-11A: In UCS we can switch backends for DNS by UCRV dns/backend from samba4 to ldap. This variable must be set to samba4 in UCS@school systems with the role dc master, dc slave and dc backup. This fix adds a diagnostic module which checks if the UCRV of dns/backend is set correctly (Bug 50503).
Republish code of version 1.0.0-11A: Users that are considered for user-imports, might have a sourceUID but no recordUID set. However, this will most likely lead to problems in the future and should be avoided. This fix adds a diagnostic module which detects users with a sourceUID but no recordUID set (Bug 51542).
Users that are considered for user-imports, must have a unique sourceUID-recordUID combination. This fix adds a diagnostic module, which checks that those combinations do not have any duplicates. (Bug 51494).
After the release of UCS@school 4.4v4, some errata updates for UCS@school 4.4v4 were released, which were usually applied automatically when the errata updates for UCS were applied. The changes from the errata updates for UCS@school 4.4v4 are listed here again for clarity, since they are also part of UCS@school 4.4v5:
Source package ucs-school-umc-computerroom:
Until now, wake-on-LAN packets were only sent out via an external tool via the network interface to which the default route was assigned. The UMC module computerroom now creates these packages itself and sends them by default on all interfaces unless the interface is on a blacklist (see UCR variables ucsschool/umc/computerroom/wakeonlan/blacklisted/interfaces and ucsschool/umc/computerroom/wakeonlan/blacklisted/interface_prefixes) (Bug 49970).
If a user is logged in via single sign on, it is no longer necessary for the user to re-enter the password to start an exam (Bug 50772).
The UMC now sends the iTALC screen lock signal again if it does not arrive on the client computer or the client computer is no longer locked e.g. due to a reboot (Bug 50740).
Source package ucs-school-import:
Fixed a regression in the migrate_ucsschool_roles script that could skip SchoolComputers during migration. For more information please visit https://help.univention.com/t/keyerror-ucsschoolrole-in-computerroom-room-aquire-and-schoolwizards-computers-query/13718(Bug 50349).
The script fix_ucsschool_slave has been adapted to keep objects with the wrong UCS@school role win_computer from reappearing again after a resync (Bug 50280).
An erroneous function call was fixed, that was leading to wrong ownership of logfiles, which in turn produced empty logfiles (Bug 50515).
A premature cache purge leading to a huge slowdown of the UCS@school user import was fixed (Bug 50689).
The cron job /etc/cron.d/ucs-school-import is no longer executed on DC backup systems to prevent concurrency problems (Bug 50707).
Source package ucs-school-metapackage:
During a re-join of DC school slaves, the LDAP attribute userAccountControl was set to demote these objects, which caused them to be recognized as normal Windows Host Objects by the S4 Connector. The S4 Connector then mistakenly appended the value win_computer to the LDAP attribute ucsschoolRole. This faulty behaviour has been fixed (Bug 50280).
Source package ucs-school-umc-exam:
If a user is logged in via single sign on, it is no longer necessary for the user to re-enter the password to start an exam (Bug 50772).
The cron job /etc/cron.d/ucs-school-umc-exam-master is no longer executed on DC backup systems to prevent concurrency problems (Bug 50765).
The computers of computer rooms are now cached to improve performance during the start of an exam (Bug 50817, Bug 50588).
The logging of the Exam UMC module was improved (Bug 50818, Bug 50588).