4. UCS web interface

Fig. 4.1 UCS portal page

The UCS web interface is the central tool for managing a UCS domain as well as for accessing installed applications of the domain.

The UCS web interface is divided into several pages which all have a similarly designed header. Via the symbols in the top right, one may launch a search on the current page (magnifier) or open the user menu (three bars) (login is possible through the latter). The login at the web interface is done via a central page once for all sub pages of UCS as well as for third party applications as far as a web based single sign-on is supported (Login).

Central starting point for users and administrators for all following actions is the UCS portal page (cf. Fig. 4.1). By default, the portal page is available on all system roles and allows an overview of all Apps and further services which are installed in the UCS domain. All aspects of the portal page can be customized to match one’s needs (UCS portal page).

For environments with more than one server, an additional entry to a server overview page is shown on the portal page. This sub page gives an overview of all available UCS systems in the domain. It allows a fast navigation to other systems in order to adjust local settings via UMC modules.

UMC modules are the web based tool for the administration of the UCS domain. There are various modules available for the administration of the different aspects of a domain depending on the respective system role. Installing additional software components may add new UMC modules to the system. Univention Management Console modules describes their general operation.

The subsequent sections detail the usage of various aspects of the domain management. LDAP directory browser gives an overview of the LDAP directory browser. The use of administrative settings via policies is discussed in Policies. How to extend the scope of function of the domain administration is detailed in Expansion of UMC modules with extended attributes. Structuring of the domain with user-defined LDAP structures details how containers and organizational units can be used to structure the LDAP directory. Delegated administration for UMC modules explains delegating administration rights to additional user groups.

In conclusion, the command line interface of the domain administration is illustrated (Command line interface of domain management (Univention Directory Manager)), and the evaluation of domain data via the UCS reporting function are explained (Evaluation of data from the LDAP directory with Univention Directory Reports).

Note

The UCS web interface is part of Univention Nubus in the Management UI component. For more information about Nubus, refer to What is Univention Nubus?

Chapter contents:

• 4.1. Introduction
  • 4.1.1. Access
  • 4.1.2. Browser compatibility
  • 4.1.3. Switching between dark and light theme for UCS web interfaces
  • 4.1.4. Creating a custom theme/Adjusting the design of UCS web interfaces
  • 4.1.5. Feedback on UCS
  • 4.1.6. Collection of usage statistics
• 4.2. Login
  • 4.2.1. Refresh portal tabs on logout
  • 4.2.2. Choose the right user account
  • 4.2.3. Single sign-on
    • 4.2.3.1. SAML for single sign-on
      • Activate
      • Update sign-in links
    • 4.2.3.2. OpenID Connect for single sign-on
      • Requirements
      • Activation
      • Create sign-in links
      • Verification and log files
      • Deactivate
      • Identity Provider with non-standard FQDN
      • Non-standard FQDN for the Univention Portal and UMC
      • Back-channel sign-out
• 4.3. UCS portal page
  • 4.3.1. Assign rights for portal settings
• 4.4. Consent for using Cookies
  • 4.4.1. Usage of the cookie consent banner
  • 4.4.2. UCR reference for cookie consent banner
• 4.5. Univention Management Console modules
  • 4.5.1. Activation of UCS license / license overview
  • 4.5.2. Operating instructions for modules to administrate LDAP directory data
    • 4.5.2.1. Searching for objects
    • 4.5.2.2. Creating objects
    • 4.5.2.3. Editing objects
    • 4.5.2.4. Deleting objects
    • 4.5.2.5. Moving objects
  • 4.5.3. Display of system notifications
• 4.6. LDAP directory browser
• 4.7. Policies
  • 4.7.1. Creating a policy
  • 4.7.2. Applying policies
  • 4.7.3. Editing a policy
• 4.8. Expansion of UMC modules with extended attributes
  • 4.8.1. Extended attributes - General tab
  • 4.8.2. Extended attributes - Module tab
  • 4.8.3. Extended attributes - LDAP mapping tab
  • 4.8.4. Extended attributes - UMC tab
  • 4.8.5. Extended attributes - Data type tab
• 4.9. Structuring of the domain with user-defined LDAP structures
  • 4.9.1. General tab
  • 4.9.2. Advanced settings tab
  • 4.9.3. Policies tab
• 4.10. Delegated administration for UMC modules
• 4.11. Command line interface of domain management (Univention Directory Manager)
  • 4.11.1. Parameters of the command line interface
  • 4.11.2. Example invocations of the command line interface
    • 4.11.2.1. Users
    • 4.11.2.2. Groups
    • 4.11.2.3. Container / Policies
    • 4.11.2.4. Computers
    • 4.11.2.5. Shares
    • 4.11.2.6. Printers
    • 4.11.2.7. DNS/DHCP
    • 4.11.2.8. Extended attributes
• 4.12. HTTP API of domain management
• 4.13. Evaluation of data from the LDAP directory with Univention Directory Reports
  • 4.13.1. Creating reports via Univention Management Console modules
  • 4.13.2. Creating reports on the command line
  • 4.13.3. Adjustment/expansion of Univention Directory Reports
• 4.14. Let’s Encrypt