Table of Contents
With Univention Corporate Server 3.2, the second minor release for Univention Corporate Server (UCS) is now available. It provides several improvements and bugfixes:
The operation of the Univention Management Console has been optimised and simplified in a number of points, e.g., there are now simplified wizards for creating users and internal system users are no longer shown in the basic setting. In addition, the Univention Management Console now offers single sign-on; logging in once allows users to access different UMC instances.
SAML (Security Assertion Markup Language) is an XML-based standard for exchanging authentication information, which allows single sign-on across domain boundaries. UCS now provides a SAML identity provider: The external service (e.g., Salesforce) is then registered via a cryptographic certificate and trusted by the identity provider. The user then only needs to authenticate himself in UCS and can use the integrated service without renewed authentication.
The Univention App Center has been expanded further and offers more extensive integration possibilities for third-parties (e.g., relations of apps and optional ordering of apps from the App Center). The standard UCS components are now also installed/removed via the App Center.
Samba 4 has been updated to Version 4.1. SMB2 is used as the preferred protocol for file services instead of CIFS. The Univention S4 Connector has been considerably speeded up and the synchronization of groups improved.
Bridges, bondings and VLANs can now also be configured in the Univention Management Console.
The underlying Debian base has been updated to version 6.0.8; this imparts numerous improvements and bug fixes.
The Linux kernel has been updated to 3.10.15.
The management of shares has been simplified. NFSv4 is now also supported for NFS shares.
Proxy authentication is now also possible via Kerberos.
In environments with more than one UCS system, the update order of the UCS systems must be borne in mind:
The authoritative version of the LDAP directory service is maintained on the master domain controller and replicated on all the remaining LDAP servers of the UCS domain. As changes to the LDAP schemes can occur during release updates), the master domain controller must always be the first system to be updated during a release update.
It is generally advisable to update all UCS systems in one maintenance window whenever possible.
It must be checked whether sufficient disk space is available. A standard installation requires a minimum of 6 GB of memory. Depending on the scope of the existing installation, the update will require at least another 1 GB of memory for the downloading and installation of the packages.
For the update, a login should be performed on the console with the root user and then the update started there. Alternatively, the update can be initiated using the Univention Management Console.
Remote updating via SSH is not recommended as this may result in the update procedure
being cancelled if the network connection is interrupted, for example, and this can affect
the system. If updating should occur over a network connection nevertheless, it must be
verified that the update continues despite disconnection from the network. This can be
done, for example, using the tools screen
and at
,
which are installed on all system roles.
Applications which were installed from the Univention App Center need to be updated before the release update. If e.g. the error message
is displayed, the installed application (in this example Zarafa) must be updated in the Univention App Center using before the release update can be initiated.
As of UCS 3.2, the univention-mail-cyrus package includes a new Univention Configuration Registry template for
the configuration file of the Cyrus BDB database (/var/lib/cyrus/db/DB_CONFIG
).
The default values of the UCR variables for the configuration of the BDB database are:
mail/cyrus/bdb/dbconfig/set_lg_regionmax : "2097152"
mail/cyrus/bdb/dbconfig/set_cachesize : "0 2097152 1"
Any existing Cyrus BDB configuration will be copied to
/var/lib/cyrus/db/DB_CONFIG.debian
during the update. If the new
default values do not correspond to the old, existing configuration or if the used options are
not available in the new default values, the corresponding Univention Configuration Registry variables should be
set prior to the update. E.g.:
ucr set mail/cyrus/bdb/dbconfig/set_cachesize="0 4097152 1" ucr set mail/cyrus/bdb/dbconfig/set_lg_regionmax="2097152" ucr set mail/cyrus/bdb/dbconfig/set_lg_max="1048576"
The listener module for the administration of mailboxes has been revised. Mailboxes are now only created if the mailHomeServer attribute is set for the user (in the UMC under ).
If the mail/cyrus/mailbox/delete
Univention Configuration Registry variable has been activated on the mail
server and the attribute is removed from the user object, the mailbox is deleted.
Some components have been removed and are no longer provided with UCS 3.2:
The UMC module
has been removed. Xrdp can be installed via the Univention App Center as an alternative for graphic remote logins to UCS servers.The univention-local-users package (it was only part of the unmaintained repository section) has been removed.
The installer for the Flash plugin has been removed.
Following the update, new or updated join scripts need to be executed. This can be done in
two ways: Either using the UMC module univention-run-join-scripts
as the user
root.
Subsequently the UCS system should be restarted.
Starting with UCS 3.0, in a new installation, the Univention Installer writes GRUB 2 in the boot sector directly.
In an updated system, GRUB 1 remains installed in the master boot record (MBR). Grub 2 sets up a "Chainload into GRUB" entry, which then loads the actual GRUB 2.
Documentation explaining how to write GRUB 2 directly in the MBR on updated systems is provided in the Univention Support Database (http://sdb.univention.de/1218).
As of UCS 3.0, PostgreSQL 8.4 is also available in addition to PostgreSQL 8.3. When systems with PostgreSQL 8.3 are updated to UCS 3.0, however, the installed PostgreSQL version is retained.
The update to PostgreSQL 8.4 is described in the SDB article http://sdb.univention.de/1249.
As of UCS 3.2, the Horde Groupware Webmail Edition will no longer be available via the univention-horde4 package and will be provided instead via the Univention App Center. The update of univention-horde4 to or initial installation of Horde 5.1.0 is performed by installing the Horde Groupware Webmail Edition app in the Univention App Center.
In versions before UCS 3.2, Samba used the CIFS protocol to provide file services. In new installations as of UCS 3.2, the successor SMB2 is enabled as standard. Using a client which supports SMB2 (as of Windows Vista, i.e., Windows 7/8 too) improves the performance and scalability.
In the case of updates from earlier UCS releases, Samba continues to use CIFS. To enable
the use of SMB2 subsequently, the Univention Configuration Registry variable samba/max/protocol
must
be set to SMB2 on all Samba servers and the Samba server(s)
restarted.
Pre-up and postup scripts are scripts which are run before and after release updates (e.g., for post-processing the update, for example by uninstalling obsolete packages). As of UCS 3.2, these scripts are cryptographically signed to prevent unauthorized modification. During the update and when mirroring the repository these signatures are checked. If they're invalid or missing, the action is aborted.
If a repository server is operated with UCS 3.1-x, it should be updated to UCS 3.2 before additional systems can be updated to UCS 3.2-1.
If it is not possible to update the repository server, the signature files must be downloaded manually:
LOCAL_DIR="/var/lib//univention-repository/mirror" SERVER="http://updates.software-univention.de" for release in 3.2-0 3.2-1; do for script in preup postup; do file="3.2/maintained/$release/all/$script.sh.gpg" wget -O "$LOCAL_DIR/$file" "$SERVER/$file" done done
Alternatively, it is also possible to disable the signature checks, which can be a security risk.
For the repository server this can be done by setting the Univention Configuration Registry variable repository/mirror/verify
to false.
For the update the Univention Configuration Registry variable repository/online/verify
must be set to false on all systems.
In new installations as of UCS 3.2 in which Samba 4 is used, the group memberships are synchronised between the Samba 4 directory service and the OpenLDAP directory service by the Univention S4 connector, i.e., each group on the UCS side is associated with a group in Active Directory.
Systems installed with earlier UCS versions than 3.2 can optionally to be changed over subsequently. Further information can be found at http://sdb.univention.de/1238.
In earlier UCS versions, the UCS start page could be expanded with Univention Configuration Registry templates in
the /etc/univention/templates/files/var/www/ucs-overview
directory. As of UCS 3.2, the start page is expanded with Univention Configuration Registry variables
(ucs/web/overview/entries/*
, further information can be found in the UCR
variable descriptions). Any existing expansions must therefore be migrated manually.
Anonymous usage statistics on the use of the Univention Management Console are collected when using the free for personal use version of UCS (which is generally used for evaluating UCS). The modules opened are logged in an instance of the web traffic analysis tool Piwik. This makes it possible for Univention to tailor the development of the Univention Management Console better to customer needs and carry out usability improvements.
This logging is only performed when the free-for-personal-use license is used. The license status can be verified by clicking on the cog symbol in the top righthand corner of the Univention Management Console and selecting Free for personal use edition is listed under , this version is in use. When a regular UCS license is used, no usage statistics are collected.
. If
Indendepent of the licence used, the statistics generation can be deactivated by setting
the Univention Configuration Registry variable umc/web/piwik
to false.
Starting with UCS 3.1, in addition to the standard installation DVD there is also a medium with support for the Unified Extensible Firmware Interface standard (UEFI) available for the amd64 architecture.
It can be used instead of the standard DVD on systems which only support a UEFI boot.
Webkit, Konqueror and QtWebkit are shipped in the maintained branch of the UCS repository, but not covered with security support. Webkit is primarily used for displaying HTML help pages etc. Firefox should be used as the web browser.
Univention Management Console uses numerous Javascript and CSS functions to display the web interface. Cookies need to be permitted in the browser. The following browsers are recommended:
Chrome as of version 14
Firefox as of version 10
Internet Explorer as of version 9
Safari (on the iPad 2)
Users with older browsers may experience display or performance problems.
The versions of Samba 4 currently published by the Samba project are undergoing more intensive changes in their further development than Samba 3. For this reason, some functions are not yet completely available:
Microsoft Windows domain controllers cannot be joined in a Samba 4 domain currently.
Selective replication is not possible with Samba 4 as this is not supported by Active Directory in principle (in UCS@school selective replication is implemented through the listener/notifier replication mechanism).
Samba 4 does not currently support forest domains.
Samba 4 does not currently support trust relationships.
Further information can be found in Chapter 8 of the UCS manual [UCS-Handbuch].
During the installation of UCS in the virtualization solution VirtualBox, a VirtualBox bug may appear which has been corrected in version 4.2: if UCS has been successfully installed and the DVD is still in the disk drive, the installation DVD offers the option
. If you select this option, VirtualBox freezes.For Linux distributions which still use Virtualbox 4.0 or 4.1, either the installation DVD can be taken out of the drive settings of the VirtualBox VM or F12 pressed when starting the virtual instance and the hard drive selected as a boot partition as a workaround before starting the UCS VM. UCS will then start successfully.
When UCS is installed in the virtualization solution Citrix XenServer 6.0 - 6.2, the Grub menu of the Univention installer is not shown with the Cirrus graphics card emulated as standard. The Univention Installer can be started directly by pressing the ENTER key; alternatively, the installation starts automatically after sixty seconds. The Univention Installer which then starts is displayed as normal.
To display Grub correctly, the graphics card emulated by XenServer can be
reconfigured. This is done by logging on to the XenServer system as the
root user. Firstly, the xe vm-list
command is used to
determine the UUID of the virtual machine. The following command is then used to
reconfigure the emulated graphics card to VGA:
xe vm-param-set uuid=UUIDVM platform:vga=std
There are two basic procedures for migrating Samba 3 to Samba 4:
Setup of a parallel Samba 4 domain. Both domains use different NetBIOS names and SIDs. The clients then join the Samba 4 step by step.
Migration of all systems within one maintenance window.
Both procedures are documented in detail in the Univention Wiki: http://wiki.univention.de/index.php?title=Migration_from_Samba_3_to_Samba_4.
If the Xen hypervisor is used and the memory limit for the Dom0 has been configured using
the Univention Configuration Registry-Variable grub/xenhopt
, the value should be updated to include
the ,max: part as well. See the
http://wiki.univention.de/index.php?title=UVMM_Quickstart-3.1/en#Configuring_the_Dom0
for details.
Listed are the changes since UCS 3.1-1:
/etc/issue
(Bug 31094).
The Debian point update 6.0.8 was incorporated. Among other changes it also fixes several security issues (Bug 31956):
preup.sh
using slapschema
(Bug 25674).
pvremove
before pvcreate
is called (Bug 31925).
grub-install <device>
after the update has
completed successfully. Alternatively if the GRUB device is known in advance, the Univention Configuration Registry variable
update/grub/boot
may be set to the corresponding devicename
(e.g. update/grub/boot=/dev/sda
) (Bug 28191,
Bug 32634, Bug 33125).
grub/vga=788
). During the update to UCS
3.2 the color depth switches from 16 to 24 bits (grub/vga=789
) if the default settings
are still set. The old state may be regained by setting the Univention Configuration Registry variable
grub/vga=788
. To prevent this change during the update, set the Univention Configuration Registry variable
update32/grub/changecolordepth=no
prior to the update (Bug 32634).
uniboot.png
and
uniboot.xpm.gz
) are now stored in
/usr/share/univention-grub/
and will be copied to
/boot/grub/
during package updates (Bug
33123).
update/reboot/required
,
which triggers a note to the user that the system requires a reboot to complete the update
(Bug 24287). The kernel 2.6.32 transition packages have
been removed (Bug 31593).
kernel/blacklist
can now be used to prevent kernel modules
from being loaded. Multiple entries need to be separated by a semicolon. By default the
nouveau module is now blacklisted since the kernel module from 3.10 is incompatible with
the Xorg userland (Bug 19892).
The kernel inotify parameters can now be controlled by Univention Configuration Registry variables (Bug 32327). The default values have been increased to improve support of large environments. The following Univention Configuration Registry variables are available:
kernel/fs/inotify/max_user_instances
(default: 512)kernel/fs/inotify/max_user_watches
(default: 32768)kernel/fs/inotify/max_queued_events
(default: 16384)/etc/sysctl.d/
the file should be removed and the configured values transfered to the respective Univention Configuration Registry variables.
/etc/network/interfaces
was converted from a single-file template
into a multi-file template. To preserve user modifications the original file was moved to
the new location. This breaks the network tools, since the generated file now contains two
declarations for the loopback interface. This situation is now detected and the second
declaration is commented out (Bug 32297).
interfaces/restart/auto
to false
(Bug 31844). In the past this has caused time-outs and
re-connect problems. The previous value is restored after the package
univention-base-files has been updated successfully.
{K5KEY}
scheme has been fixed (Bug 31352).
slapd
init script now supports graceful-restart
and graceful-stop, both asking the slapd kindly to
stop and then waiting for 120 seconds before forcefully killing the process
(Bug 31998). If slapd
can not be
started, slapschema
is called to determine the cause and the output is
displayed (Bug 23055). The temporary schema file is now
properly removed (Bug 31989).
ldap/server/port
is now set to 7389 by default (Bug 26888).
ldap/server/additional
has been
removed. ldap/server/addition
can be used instead (Bug 24507).
univention-ldap-backup
now creates a separate logfile during the backup
process in /var/univention-backup/
(Bug 31997). A bug which could lead to truncated
slapcat
output was fixed (Bug 31170).
ldap/acl/user/passwordreset/protected/gid
.
By default the group Domain Admins is protected (Bug 29710).
The Univention Configuration Registry variable descriptions have been revised (Bug 30946).
univention-object-metadata.schema
,
udm_extension.schema
and
univention-ldap-extension.schema
(Bug 32391, Bug 32410).
univention-app.schema
using the new mechanism implemented via
Bug 32412.
univentionShareHost
now supports the substring
search (Bug 31208).
univention-legacy-kolab-schema
have been revised (Bug 30946).
windows/domain
is now set in
univention-join
to the value of windows/domain
on
the DC master (Bug 24442).
univention-run-join-scripts
have been fixed (Bug 32005).
univention-server-join
now adds /usr/sbin/
and /sbin/
to the shell PATH
environment variable before importing the univention shell libs (Bug 31281).
univention-backup2master
now also replaces the Univention Configuration Registry variable kerberos/kpasswdserver
with the new masters's FQDN (Bug 31077).
univention-backup2master
now cleans up Samba 4 related objects
(Bug 27893).
univention-backup2master
now transfers the Samba/AD FSMO roles before removing the old DC account from Samba4
(Bug 33382).
umc-get
was fixed (Bug 30605).
univention-add-app
more robust (Bug 32398). A new option allows to
install the latest version of the application (Bug
31157). Fixed app installation with --all and --master when pointing to an
outdated version (Bug 31279).
univention-management-console-server
startup (Bug 31154).
apache2/startsite
will now be set to correct values when
reinstalling, uninstalling and updating univention-system-setup-boot (Bug 31385, Bug 31643).
directory/manager/web/modules/users/user/properties/username/syntax
to
string) (Bug 19441).
connector/s4/mapping/group/grouptype
is set to true (Bug 32767).
eval()
has been replaced with getattr()
in several UMC modules
(Bug 31523).
proof_dns_dhcp_records
has been
corrected (Bug 30903).
univention-dnsedit
which occurred when trying to remove the last
location from a SRV record has been corrected. When removing the last location, the whole
SRV record will be removed now (Bug 32592).
/etc/apache2/sites-enabled/univention-repository
will now be disabled
(Bug 29262).
preup.sh
and postup.sh
are digitally signed from UCS version 3.2-0 onwards.
Both updater and mirror will refuses to download them if they are not signed by any PGP key stored in trust-ring of apt-key
.
The verification can be disabled using the Univention Configuration Registry variable repository/online/verify
and repository/mirror/verify
(Bug 28045).
call_joinscript()
has been modified. The start and end of every
executed join script will be displayed on console (Bug 29263).
machine/password/length
and
machine/password/complexity
(Bug 31281).
getLDAPURIs
and getLDAPServersCommaList
have been added to the Python lib, which return all configured LDAP servers (Bug 19753).
ucs_registerLDAPExtension
and ucs_unregisterLDAPExtension
have been implemented
(Bug 32392, Bug 26785, Bug 32643,
Bug 32663).
ucs_isServiceUnused
now always searches in the LDAP
directory of the DC master and uses proper LDAP bind credentials
(Bug 32578).
univention-ipcalc6
to compute DNS names have been moved to the new Python module univention.ipcalc (Bug 32931).
ucs_removeServiceFromHost
was made idempotent and can now also be used when the service does not exist (Bug 33138).
mail/cyrus/imap/duplicatesuppression
(default: yes) has been
added to univention-mail-cyrus
. If set to yes, lmtpd will suppress delivery
of a message to a mailbox if same message with the same message-id (or resent-message-id)
has already been delivered to the mailbox (Bug 22429).
/var/lib/cyrus/db/DB_CONFIG
for the cyrus bdb
configuration has been added. This template is registered to UCR variables with the prefix
mail/cyrus/bdb/dbconfig/
. All these variables, without the prefix,
and the values are written to the DB_CONFIG file. Default settings for the DB_CONFIG file
are:
mail/cyrus/bdb/dbconfig/set_lg_regionmax="2097152" mail/cyrus/bdb/dbconfig/set_cachesize="0 2097152 1"(Bug 28464)
ldap/server/addition
too (Bug 19753).
pam_univentionmailcyrus
now supports multiple LDAP
servers (Bug 19753).
mail/cyrus/ssl/cafile
and mail/cyrus/ssl/capath
have been
added to configure the Cyrus CA certificates (Bug 28123).
mail/postfix/smtpd/debug
has been added to configure
whether the smtpd should be started in debug mode (Bug 29593).
The Univention Configuration Registry variables mail/postfix/ssl/cafile
and mail/postfix/ssl/capath
have been
added to configure smtpd ca certificates (Bug 28124).
The Univention Configuration Registry variable mail/postfix/smtpd/banner
has been added to
configure the the SMTP greeting banner (Bug 32444).
ldap/server/addition
(Bug 19753).
cups/errorpolicy
. The change will be applied to all printers (Bug 28877). The SystemGroup parameter has
changed. System groups are now separated by a blank character and not by a comma in
cupsd.conf
. The Univention Configuration Registry variable must remain a comma separated list
though (Bug 28884).
lpadmin
(Bug 17660).
univention-check-printers
(Bug
28558). Package dependencies to univention-printserver and
bsd-mailx have been added (Bug 29123).
cups/printmode/hosts/none
. This functionality is needed for UCS@School
(Bug 32055).
/etc/samba/printers.conf
is refreshed directly
(Bug 31764).
/usr/share/univention-heimdal/check_cracklib.py
has
been fixed (Bug 22926).
kpasswdd
is now only started on the master domain
controller (Bug #20167).
squid_ldap_ntlm_auth
is a negotiate wrapper for either Kerberos
or NTLM over negotiate. The previous negotiate authenticator setting can be restored by
setting the Univention Configuration Registry variable squid/krb5auth/tool
to
/usr/lib/squid3/squid_kerb_auth (Bug 31972).
squid/auth/allowed_groups
was not set (Bug 30969).
98univention-squid-samba4.inst
now correctly saves its status when
not in a Samba 4 environment (Bug 32011).
/var/www/ucs-overview/languages.json
, which contains available server
languages and can be controlled by Univention Configuration Registry variables
ucs/server/languages/*
(Bug 32677).
umc/server/languages/.*
has been renamed to Univention Configuration Registry
variable ucs/server/languages/.*
, possible user defined variables will be
adopted during package update (Bug 32678).
nagios/server/checkexternalcmd
has been
changed to yes (Bug 29839).
nfs/nfsd/nfs4
can be set to false (Bug 21556).
nfs/common/gssd
, which defaults to yes (Bug 21556).
nfs/common/idmapd
, which defaults to yes (Bug 21556).
nssldap/nss_srv
has been added to specify whether or not
libnss-ldap is allowed to perform DNS SRV record lookups (Bug 30779).
libnss-ldap.secret
if it is a link (Bug 30779).
ldap-group-to-file.py
does now support postrun hooks located in
/var/lib/ldap-group-to-file-hooks.d/
. Thus scripts can be executed after
changing the group memberships (Bug 32581).
/etc/postgresql/pam_ldap.conf
now uses
the univention Python lib to generate the LDAP URI
(Bug 19753).
server/password/change
.
The date is now calculated relative to the date of the last password change instead of
being relative to the start of the current year (Bug
31068).
sshd/motd
to false (Bug 31096). The
new Univention Configuration Registry variable sshd/banner
can be used to configure a banner display for
SSH logins.
/etc/mysql.secret
. This file can be read by root. If a password is
already set, nothing will be done (Bug 19354).
univention-mount-homedir
was improved to reduce
server load during concurrent logins. The logging was cleaned up (Bug 31256).
/usr/lib/flashplugin-nonfree
(Bug 31852).
/etc/samba/shares.conf
is now updated directly after
changing a share (Bug 29399).
windows/wins-server
and Univention Configuration Registry variable
windows/wins-support
are now set in the Samba join script
(Bug 31814, Bug 32745).
samba/max_protocol
has been renamed to Univention Configuration Registry variable
samba/max/protocol
(Bug 31921).
windows/wins-server
and
windows/wins-support
are now initialised during the join
(Bug 30813, Bug 32745).
samba/client_use_spnego
and Univention Configuration Registry variable
samba/time_server
have been removed (Bug
26389).
samba4/join/site
without Samba 4 on the master domain
controller now respects the chosen samba4/dc
(Bug 30792).
sysvol-sync.py
now preserves timestamps (Bug 30823).
sysvol-cleanup.py
moved the policy definitions away. Now it considers only GPO
paths (Bug 31186).
samba4/sysvol/sync/setfacl/AU
(Bug 31271, Bug 31275).
samba4-idmap
now also works in case smb.conf
includes files readable
only for root (Bug 31538).
/var/lib/samba/ntp_signd
(Bug 31109).
/etc/samba/shares.conf
includes non-existing
files, it is now updated directly after a share was added/removed or renamed (Bug 31800).
samba/max/protocol
has been added (Bug 31145).
New Samba 4 installations now uses SMB2 as the maximum supported SMB
protocol. On updated systems NT1 is still used
(Bug 32394).
/etc/krb5.conf
will get committed from the updated UCR
template on update (Bug 31306).
/var/lib/samba
is now cleaned up during the
rejoin of the system
(Bug 32595).
/etc/samba/local.conf
(Bug 32376).
purge_s4_computer.py
, which
could occur if a DC was removed from a Samba 4/AD site
(Bug 30763).
idmap.ldb
as ID_TYPE_BOTH
(Bug 33129).
samba/max_open_files
is now raised to
32786 (Bug 32221).
create_spn_account.sh
now also sets the
saltPrincipal attribute, ensuring compatibility with kinit
(Bug 32291).
setup-s4.sh
(Bug 31106).
samba4/service/smb
have been fixed
(Bug 30968).
create_dns-host_spn.py
has been removed
(Bug 28371).
displayName
attribute definition has been moved from post_attributes to attributes in the user mapping
definition. This increases the synchronisation performance (Bug 32323).
connector/s4/mapping/group/grouptype
is set to true. By default this is activated for new UCS 3.2 installations only. All other
systems have to be migrated manually
(Bug 32768, Bug 29486,
Bug 33121).
univention-ad-takeover
script now runs a consistency check on the samba database at the end of the takeover process
(Bug 33339).
connector/ad/mapping/group/grouptype
is set to true. By default this is activated for new UCS 3.2 installations only. All other
systems have to be migrated manually
(Bug 32769).
univention-directory-manager users/user list --filter uid=Administrator
(Bug 30116
univention-dnsedit
has been added (Bug 31104).
user_create
from the internal test framework now checks whether the mail domain
exists or not. If the mail domain for the local domain does not exist the user is created
without a mail address (Bug 31296).
tests/domainadmin/account
,
tests/domainadmin/pwd
and tests/domainadmin/pwdfile
have been added. They can be used to configure which domain administrator credentials
ucs-test should use when running tests (Bug 31250).
udm-test
or wait_for_replication
. The existing test cases have been adapted
(Bug 31687, Bug 31678,
Bug 31679, Bug 31680,
Bug 32025, Bug 32797).
import_ldif_with_listener
, import_ldif_without_listener
and an
example customer LDIF with 5000 users and other objects have been added to
ucs-test-tools (Bug 29418).
ucslint
(Bug 28699).
random_*
functions from random.sh
now encode
timestamp information into the output to hopefully guarantee better uniqueness. Several
unused and subtly broken functions have been removed (Bug
32793).
umc/object/policies
command has been added
(Bug 32271
univention-user-quota
has been rewritten in Python. It does now support share names with
whitespaces (Bug 30636, Bug 31957).
univention-home-mounter
has been fixed (Bug 19441).