Univention Corporate Server Changelog

What's new in Univention Corporate Server 5.0-6

Dec 13, 2023

The sixth patch level release for Univention Corporate Server (UCS) 5.0 is available with Univention Corporate Server 5.0-6. It contains all bug fixes and security updates released since version 5.0-5, including for PostgreSQL, Samba and a number of Univention’s own packages. Also included are various preparations for the upcoming UCS 5.2.
UCS 5.0-6 is available in the “Software Update” module and can be downloaded from our download area.
Increased Stability and Security:
In the last three months we have released 47 security updates, most of them from the Debian base distribution. However, we have also fixed security-relevant errors in the Univention packages, e.g. password leaks via the process list. We have also further stabilized the Univention Management Console (UMC) when connecting to the individual UMC modules. We have improved the way the Univention Directory Manager (UDM) handles inconsistent user capitalization. Some data is now updated atomically by the portal, which avoids certain error patterns, and the self service now translates the forms correctly in all cases.
There have also been some improvements: UDM’s REST API now evaluates certain request headers when deleting objects and returns more useful responses in case of errors. A new feature is the ability to synchronize subdomains of an Active Directory Forest (AD Forest) with the Univention AD Connector.
Preparations for the Upcoming Minor Release UCS 5.2:
We have been working hard on the next minor release of UCS for the past few months. A few days ago we released the first pre-release: UCS 5.2 Alpha. At the same time, we have already integrated some changes into UCS 5.0-6, which will make an update possible as soon as the final version of UCS 5.2 is available. For example, the SimpleSAMLphp packages have been prepared for removal and a script has been added to check the migration status from SimpleSAMLphp to Keycloak as identity provider. In addition, the logic in our LDAP replication has been adapted to support the new schema from OpenLDAP 2.5. The UMC Updater module will no longer show UCS 5.1 as a possible option, as UCS 5.1 is an “intermediate version” and you should be able to update directly to UCS 5.2.
Patch Level Releases Every Three Months:
You can install UCS 5.0-6 now, although we will continue to provide security updates for UCS 5.0-5 for another 12 weeks. However, administrators of UCS 5.0-4 should update now at the latest, as we have discontinued maintenance for this release.
The next patch level release – UCS 5.0-7 – will be released in early to mid March 2024. This release will also focus on security updates and stability.

New in Univention Corporate Server 5.0-5 (Sep 13, 2023)

Univention Corporate Server 5.0-5 is the fifth point release for Univention Corporate Server (UCS) 5.0. It contains all erratas released since version 5.0-4 for bug fixes, performance improvements and security updates for Samba, Linux, OpenSSH, Bind and Python, among others.
UCS 5.0-5 is available in the “Software Update” module and can be found in our download area.
Security Updates, Bug Fixes and Enhancements for Univention Config Registry and
Univention Directory Manager:
In total, the new point release includes 28 security updates that we have provided since the last UCS point release, such as those for Samba, Linux, OpenSSH, Bind, and Python.
We have also implemented various bug fixes in the Univention Management Console (UMC) environment and upgraded some UMC modules to the new capabilities that have been available with the UMC server since the fundamental change from UCS 5.0-4. In the future, we will be able to significantly reduce the memory consumption of UMC during operation in certain cases. Also worth mentioning is the new option of explicitly setting an empty value or deleting the value in the UMC module for the Univention Config Registry (UCR).
In addition to the security updates, the UCS 5.0-5 release contains more than 50 bug fixes and other improvements in various packages. For example, we have implemented improvements in the theming of our web applications, which especially benefit Keycloak. You can use our themes to customize the look and feel of Univention Portal, UMC and Keycloak.
We have also added the option to configure logrotate for specific listener modules. This means that you now have more control over the size of the log files for the modules become and how long they should be kept.
We have also worked on the further development of the Univention Directory Manager (UDM). There have been a number of quality-of-life bug fixes for the UDM. These include improvements in the passing of arguments to the command line tool “udm” and performance improvements of the associated REST API in certain cases.
Extended Switching Timeframe:
As of today, you can install UCS 5.0-5. However, due to changes in the point release policy and the extension of maintenance periods, you now have 12 weeks to upgrade to the latest release. During this time, we will continue to provide security updates for UCS 5.0-4. We strongly recommend that UCS 5.0-3 users upgrade now, as we have discontinued maintenance for this release.
The date for the next point release has already been set: UCS 5.0-6 will be released in early to mid-December. This release will also focus on security updates and stability.

New in Univention Corporate Server 5.0-3 (Feb 13, 2023)

With the point release UCS 5.0-3, the next important step for the further development of the Univention Corporate Server has been taken – towards more usability and performance as well as the deeper integration of services and their central administration. In this blog article, I would like to give you an overview of the most important new features and improvements bundled in the release.
Improvements in the Area of Usability: More System Diagnosis Possibilities for More Efficient Support:
Univention Support Info – Provision of Relevant Information:
The “Univention Support Info” programme identifies a range of system information about the UCS system that is in operation, which our Univention Support team needs to be able to analyse problems and identify the relevant error sources quickly. This can include, for example, information about running processes, open network connections, file system utilisation, log files and aspects of the system configuration. You no longer have to install this program separately yourself, as it is pre-installed on all UCS instances and can be used by you.
Optimisation of System Diagnosis to Suit Individual Needs and System RequirementsYou can deactivate individual tests within the system diagnostics via UCR. For example, a test that does not make sense to carry out in your environment should be excluded. The format of the UCR variable you need for this is:
ucr set diagnostic/check/disable/TEST_NAME = true
Visualisation of Operational Attributes:
Operational attributes are internal attributes of the OpenLDAP database. The database maintains some properties of objects, such as when they were created, who created them, who last modified them, etc. In the past, retrieving these values was sometimes a bit more complicated. The extension in the Directory Manager contained in the UCS 5.0-3 release now lets you visualise the values using a configuration on the front end and thus also supports various support scenarios. You can read more about this in our user forum article about displaying LDAP operational attributes in extended attributes.
We have also improved the usability and provision of information for detecting errors when changing server passwords. Additional information about all steps taken to change the password is now saved to make it easier for you to analyse failed server password changes. This facilitates troubleshooting and subsequent debugging.
Improvements in the Area of Performance: Cache on User Object Displays Group
Determine Group Membership of Users Faster:
The group membership of a user in UCS is now conveyed via the “memberof” attribute of the user. This means you no longer have to search across all groups for a user but can access a cache on the user object that contains this information. This considerably speeds up the search for group membership.
Other Features:
Step-by-step Saving of Information Around Server Password Changes for Easier
We have also improved the usability and provision of information for detecting errors when changing server passwords. Additional information about all steps taken to change the password is now saved to make it easier for you to analyse failed server password changes. This facilitates troubleshooting and subsequent debugging.
Improvements in the Area of Performance: Cache on User Object Displays Group
Memberships:
Determine Group Membership of Users Faster:
The group membership of a user in UCS is now conveyed via the “memberof” attribute of the user. This means you no longer have to search across all groups for a user but can access a cache on the user object that contains this information. This considerably speeds up the search for group membership.
Other Features:
Synchronisation of Password History
With the new UCS version, to prevent the use of passwords that have already been used, a user’s passwords that have been used in the past are stored in a history. For this purpose, UCS saves hashes of the passwords in the history. In the past, the history was saved individually by the system that processes the password change – this can be OpenLDAP (for changes via UDM and Kerberos), Samba4 (for changes via desktop systems in the UCS domain) or Active Directory (when using the AD connector).
From now on, these different histories will be synchronised, so it doesn’t matter which system the user changes their password on since the same overarching password history now applies.
Highlights from the Univention App Center
Migration to Keycloak
An important milestone has been reached in the step-by-step migration to Keycloak as identity provider in UCS: In August 2022, we made Keycloak available as an app in the UCS App Center for integration into UCS in a first version and have been gradually developing it since then. With the release in December, the Keycloak app is now also part of our official product support and is, therefore, also ready for productive use by you. Read more about Keycloak in our referring blogarticle.
Synchronisation of Password History:
With the new UCS version, to prevent the use of passwords that have already been used, a user’s passwords that have been used in the past are stored in a history. For this purpose, UCS saves hashes of the passwords in the history. In the past, the history was saved individually by the system that processes the password change – this can be OpenLDAP (for changes via UDM and Kerberos), Samba4 (for changes via desktop systems in the UCS domain) or Active Directory (when using the AD connector).
From now on, these different histories will be synchronised, so it doesn’t matter which system the user changes their password on since the same overarching password history now applies.
Highlights from the Univention App Center:
Migration to Keycloak:
An important milestone has been reached in the step-by-step migration to Keycloak as identity provider in UCS: In August 2022, we made Keycloak available as an app in the UCS App Center for integration into UCS in a first version and have been gradually developing it since then. With the release in December, the Keycloak app is now also part of our official product support and is, therefore, also ready for productive use by you. Read more about Keycloak in our referring blogarticle.

New in Univention Corporate Server 5.0-2 (Jul 4, 2022)

With the Point Release UCS 5.0-2, another important step has been taken for further developing Univention Corporate Server towards more accessibility, better usability, as well as the integration of services and their central management. In this blog article, I would like to give you an overview of the most important new features and improvements, such as the integration of Self Services into the UCS Portal, the introduction of service-specific passwords or various performance improvements in the use of DNS and LDAP, as well as an overview of the apps made available for UCS 5.
Table of Contents:
Integration of User Self Service into the UCS Portal
Service-specific Password for RADIUS
Assignment of Separate Networks
Deployment of New and Updated Apps for UCS 5
Improvements and Enhancements from Current Updates
Release Notes:
Integration of User Self Service into the UCS Portal:
The Self Service, with which users can easily make adjustments to their user profile, verify their account or reset their password, has been integrated directly into the UCS Portal in UCS 5.0-2, making it even easier to access. The look and feel have also been adapted to the UCS Portal and the access has been made barrier-free.
In addition, UCS administrators now have more flexibility in designing e-mail templates for self service communication . For example, the email template for password reset now supports additional placeholders for title, first name, last name, organization, and more, making it even more intuitive to use.
With the new self service features, as of now users can also set specific passwords only for particular services, such as wireless network access via RADIUS. More about it in the next section.
Service-specific Password for RADIUS:
Basically, every user in UCS gets assigned a domain-wide valid password that can be reset by the user via self service. With this password, users can access numerous services integrated in UCS.
We have newly implemented the capability of setting individual passwords for individual services. This was the first service to be implemented by our development department for RADIUS. Therefore, with this service-specific password, users can then log on exclusively to the organization’s Wifi. This separation can be useful, since Wifi passwords can quickly fall into the wrong hands if a mobile device is lost. If the same password is used for domain-wide services and Wifi, there would be access to all services the user has been enabled for in UCS.
Assignment of Separate Networks:
With version 5.0-2, RADIUS now also allows administrators to assign dedicated VLANs to specific user groups. For example, visitors can be assigned access to a dedicated guest VLAN that allows access only to the Internet, but not to the organization’s internal network. This is an important feature for increasing network security.
For more info, see the blog article Service-specific Password for RADIUS .
Deployment of New and Updated Apps for UCS 5:
Minor enhancements and bug fixes have been released for the App Center, which in detail can be found in the release notes. Here, we have focused on porting more apps to UCS 5 as well as the deployment of new apps.
As new apps were released:
Xwiki: Open Source Enterprise Wiki
ITISeasy.business: Modular Open Source ERP
Dovecot Connector: Synchronizes users to be deleted for Dovecot that is not installed on UCS.
The following apps have been made available for UCS 5.0 since 5.0-1
UCS Dashboard
itslearning
Microsoft 365 Connector
Apple School Manager
opsi Client Management
Guacamole
audriga Groupware Migration Service
In addition to the first release for UCS 5.0, there have been significant updates to the UCS Dashboard and opsi. In the UCS Dashboard, all modules (in the core Prometheus and Grafana) were updated and migration of the databases was also taken care of. opsi was updated to version 4.2, the new features are described in detail in the blog article UCS 5.0: opsi 4.2 in the Univention App Center .
UCS Dashboard:
Many other apps in the App Center were also updated, such as : ONLYOFFICE, Nextcloud, m23, EGroupware, Kelvin REST API, OX-Connector, Collabora, UCS@school ID Connector, Wekan, Benno MailArchive, Relution, Jitsi Meet, and Webweaver.
Improvements and Enhancements from Current Updates:
Point releases like UCS 5.0-2 bring all the errata updates from the last few months as a collected update. As always, the full list of changes can be found in the release notes [link], but I’d like to single out two improvements worth mentioning:
Better LDAP Replication Performance:
The transaction protocol for replication between UCS LDAP servers now ignores temporary LDAP objects and thus reduces the required storage space and the number of replication operations. This significantly increases replication speed, especially in environments with many changes.
UMC with Updated French Translation and Improved License Check:
In UMC, an updated French translation for the UCS management system is now available with the new version of UCS. In addition, we have improved the license check processes to reduce the initial login time in large environments.
Release Notes:
For a complete list of enhancements and bug fixes for UCS 5.0-2, please have a look at the release notes. If you have any requests or suggestions for improvements, we welcome your feedback – here on the blog or at help.univention.com.

New in Univention Corporate Server 5.0-1 (Dec 15, 2021)

On the way to perfection.
The first point release of UCS 5.0 brings further important features and tops off the major release from May. The announced Light Theme is now available as an alternative for the user interface. There were improvements in the UCS Portal and App Center, and a number of other apps are now also available for UCS 5.0.
UCS 5 design in Light Theme:
With the release of UCS 5.0, we already announced a Light Theme as an alternative to the Dark Theme configured by default and released it as an errata update in mid-September. Administrators can enable the Light Theme globally for all users on a UCS system via UCR variable. Details and help for switching the theme for the UCS web interface can be found in the UCS manual.
UCS Portal improvements:
We have implemented a whole range of improvements for the UCS Portal in the last few months. I would particularly like to highlight the improvements for accessibility. The portal can now also be operated and edited entirely using a keyboard.
For more individualization and usability, portal users can arrange their tiles individually themselves. And UCS administrators can now also assign certain tiles to user groups, so that only users who are in the corresponding user group will see the tile.
Many improvements happened at the detail level, for example:
Improved layout behavior when using the portal on mobile devices
Customization of the cookie banner to the portal layout
New handling for text translations of tiles
Improved performance for drag-and-drop actions on tiles
App Center: Handling App Settings:
For app developers, there have been some improvements in the App Center. I would like to highlight the App Settings area. Apps can request configuration settings from administrators via App Settings, which are passed to the app.
There was an issue with the timing of evaluating App Settings and passing it to the app. To work around it, containerized apps often reinitialized their containers during installation. With the improvement in the App Center, this is no longer necessary.
User accounts: Time-controlled activation:
Administrators can specify an activation date when creating a new user account. User accounts with an activation date in the future are deactivated after creation and are only activated on this date. Thus, user accounts can be created in advance and UCS automatically takes care of the staggered activation.
User creation wizard:
For the creation of users, there is a wizard in UCS that asks for all the required information.
Administrators can specify additional attributes as required for a user account in addition to those already required, such as last name, user name, and password, for example, the e-mail address.
As soon as additional attributes are defined, they are now also displayed in the UCS 5.0-1 wizard when users are created. This guarantees that administrators can also assign customized values for these attributes and not only the default values are used.
Apps for UCS 5.0: More apps available from UCS 4.4:
Since the release of UCS 5.0, more apps have been added, which are already available for UCS 4.4.
Let’s Encrypt
OX App Suite
opsi
Rocket.Chat
OpenID Connect Provider
Relution
m23

New in Univention Corporate Server 5.0 (Dec 10, 2021)

New Design and modern Core:
Univention Corporate Server 5.0 has been released:
The fifth major release of Univention Corporate Server is ready and available for download. UCS 5.0 contains new features, has a fresh look, comes with several improvements and bug fixes. The new version also uses a new core: UCS 5.0 is based on Debian 10 (“Buster”) and Python 3.
In this blog post, I would like to introduce the most important changes, give tips for the upgrade process and reveal what we’re planning for future releases.
New Design and improved Usability:
Univention Corporate Server features a new dark look, also visible during the installation, which gives the distribution a modern and elegant, yet tidy touch. The clean look is also present in the web interface: many areas have been visually reduced. The tiles in the portal, for example, now appear in a new colour theme.
UCS 5 with new and clear structure and dark morde
You don’t really like the new color style? No problem: UCS 5 supports themes. All our web interfaces (portal, Univention Management Console, Self Service, Login) can be redesigned with custom CSS stylesheets to change colours and fonts or integrate your own brand.
The portal is always the fist point of contact. Therefore, the new UCS version integrates the Univention Management Console (UMC) for central administration of domains, services, user accounts, and other resources. All UMC modules are available directly in the UCS 5 portal. To help admins stay on top of things, the portal can now group several tiles – similar to smartphone or tablet interfaces.
While working on UCS 5, we decided to migrate the portal to the JavaScript framework Vue.js which improves the look & feel and makes everything much more accessible. After the release, we want to successively convert the other UCS web interfaces and expand the portal’s functionality.
Enhanced Univention App Center:
The App Center also benefits from the new user interface design, it’s now more clearly structured. We’ve also added some new features. For example, we have significantly improved the App Center’s handling of dependencies between individual apps. If an app needs other components, it is no longer necessary to resolve the dependencies in advance and install multiple apps one after the other. Instead, the installation of all required apps now happens in one step.
Admins can now directly select multiple apps in the frontend to install, update or uninstall them in one go. The App Center collects all necessary information and potential questions about your configuration in advance before (un)installing or updating the apps.
Appcenter Overview in UCS 5.0
New Core: Debian “Buster” and Python 3:
UCS 5.0 is based on the current stable Debian release (10.9) and includes all its packages. We have also restructured our own repositories. Previously, we organised them hierarchically, by UCS release, so we had a separate repo for each patch level release, which led to a somewhat confusing situation. Also, this structure was time-consuming to maintain, because some repositories contained the same package versions, sometimes different versions. In future, we will put all software packages in one repository and maintain a separate packages file with a list of available packages for each release. This not only saves space on the download servers, but also simplifies the processes and speeds up the installation via the package manager as well as the App Center.
The migration from Python 2 to 3 has been completed for all core components. During this process, we adjusted many libraries and other tools. The interfaces for integrating applications have also been migrated to Python 3, which should help developers of third-party apps. Admins running both, UCS 4.x and 5.0, in their environment can roll out Python-based extensions (such as hooks to Extended Attributes of Univention Directory Manager) for both Python versions.
Staying Focused: Fewer Features, But Good Ones!
As I wrote in my blog post blogpost UCS 5.0 – Focus instead of feature overkill at the end of last year, it was time to clean up a bit and say goodbye to some applications and projects. It was simply too much work to maintain their integration with the UCS core components – especially during upgrades. By removing features which are rarely or never used, we can now focus on our strengths, including the portal, the Univention App Center and Samba 4.
The following features and apps are no longer part of UCS 5:
32 bit Systems:
We haven’t been offering installation media for this architecture for some time now. In future, there won’t be updates for existing 32-bit systems, either.
Windows NT compatible Domain Controller:
Samba 4, as a UCS core component, takes over the emulation of MS Active Directory including compatible file and print services. Users who have not yet migrated from the “old” Windows NT domain to Samba are strongly advised to do so before upgrading.
Univention Virtual Machine Manager (UVMM):
UVMM is no longer part of UCS, since other applications can provide the same functionality, for example the standard KVM stack plus additional tools.
Local Desktop Environment:
We have deactivated the graphical desktop environment in favour of our web interfaces. Admins who miss a desktop can install different versions via the package manager.
We have also parted with old names. As described in the blog article Farewell to “Master” and “Slave”: new names for system roles in UCS 5.0 from November 2020, we have named the system roles differently. UCS no longer uses discriminating terms such as “master” and “slave”, but names which provide an indication of the actual function:
Domain Controller Master → Primary Directory Node
Domain Controller Backup → Backup Directory Node
Domain Controller Slave → Replica Directory Node
Member Server → Managed Node
Tips for Upgrading to UCS 5:
Images for the new UCS version are available on our download servers. Admins who want to upgrade an existing UCS system can do so via the UMC or the package manager. The new release doesn’t include all apps from the beginning, so not every user can upgrade straight away. Over the next few weeks, we plan to gradually port and release missing apps, including UCS@school, an alerting solution for the UCS dashboard (as a successor to Nagios), and third-party integrations.
Only after that we’re going to announce the end of maintenance for UCS 4. If you update UCS 4.4-x to UCS 5.0, there is an automatic check whether new versions of the installed apps are available. The update will only start after we have released these modules for UCS 5.0.
Here are a few tips for the upgrade from a previous to the new version:
All systems in a domain must be upgraded to UCS 4.4-8 before upgrading to 5.0.
Whenever an update of an individual app is necessary before you can upgrade, the upgrade process will inform you about this.
Replace i386 systems with AMD64.
Mixed environments with UCS 5.0-x and UCS 4.4-8 are supported, with a top-down upgrade path for system roles (Master/Primary → Backup → Slave/Replica → Member/Managed).
Sneak Preview: What’ s next:
We’re really happy with the new release, its new look and improved core components. However, our work is not yet finished: we’re planning to publish UCS@school 5.0 soon, and we’re also working on porting several other apps. Nagios will be replaced by our own alerting feature in the UCS dashboard which is based on Prometheus and Grafana®.
A light theme as an alternative to the default dark theme will be available in a few weeks. Additionally, we want to further enhance the portal so that users can configure it, for example, select a theme, create their own tiles and group them. We also want to improve the Univention Management Console’s integration.

New in Univention Corporate Server 4.4-1 (Jul 23, 2019)

New in Univention Corporate Server 4.4-0 (Mar 19, 2019)

With this release the new app Admin Diary is available, with which administrative events of all UCS instances of a domain can be viewed and evaluated centrally. Changes to users, groups or other objects in the directory service can be tracked just as easily as updates to servers or (de-)installations of apps. The Admin Diary is delivered as two components: a backend for data storage in an SQL database and a frontend for integration into the UMC. Recording of events is part of UCS 4.4 and is automatically activated when the backend is installed.
The self-service app has been enhanced in two areas:
End users can now use the self-service web interface not only for changing passwords, but also for editing their own contact information.
Administrators can now use the self-service to invite new users by mail. In this process, new users are send a self-service token that they can use to add their password and contact information to the prepared account in the UCS domain.
The portal has been extended to forward users directly to the login page and to display information texts if the portal is empty. The rendering has been optimized and is now customizable via CSS. Furthermore, the portal now has an improved permission management, which allows more access protection on the server side, which forms the basis for future enhancements.
The RADIUS app has been unified by merging the implementations from UCS@school and the UCS app. As part of the implementation, the exchange of Shared Secrets, e.g. with WiFi access points, has been simplified: The access point configuration can now be done using the UMC computer module.
Samba has been updated to version 4.10 RC2, which includes numerous improvements.
With this version, trust settings between UCS and Microsoft Active Directory domains can be configured. This makes it possible, for example, for users administered in UCS to gain access to services operated in Microsoft domains.
Furthermore Samba now supports Fine Grained Password Policies, with which it is possible to define different and detailed password policies within the Microsoft Active Directory or Kerberos domain.
The user experience in the Univention Management Console has been improved in many ways. These include a clearer display of input elements, better handling of long result lists and a more efficient display on small displays.
The settings for a user’s access to installed apps can now be managed on a central tab on the user object. This simplifies both the administration of UCS and the integration by App Providers.
For App Providers Install Permissions are a new feature in the App Center: They allow to specify for each version whether the App requires a contractual relationship between user and provider for installation. The App Center thus better supports corresponding business models of the app providers and users can better recognize which versions of an app are available.
UCS 4.4-0 is based on the Debian release 9.8 released in February.

New in Univention Corporate Server 4.3-3 (Dec 12, 2018)

Improved configurability of the portal:
The portal is the starting point for many UCS users and administrators. As described in the blog article Design the UCS Portal with Drag & Drop, you can adapt it very easily to your needs. The categories “Applications” and “Administration” were static until now. We have extended the portal so that you can now define your own categories. In addition, you can add static links to the portal, e.g. also link an imprint here.
In many environments different users should be shown different tiles. To do this, the group members for whom a particular tile is displayed are stored in the tiles. Previously, you could only assign each tile to one group. With UCS 4.3-3 you can now assign several groups to each tile. As soon as a user is a member of one of these groups, the corresponding tile will be displayed.
UCS Dashboard for infrastructure overview:
After a three-month beta phase, in which we have collected user feedback, the UCS Dashboard is now available in version 1.1 in the App Center. It can be used as an extension of UCS. In the past weeks, we have mainly improved the beta version towards more robust installation and uninstallation as well as better configuration and extensibility.
The dashboard allows administrators to see the state of the domain or individual servers quickly and easily on different dashboards. The UCS Dashboard provides the ability to identify server utilization trends and take action before problems occur. Especially in large environments with many servers, it is a very useful feature for administrators. During installation, two dashboards are automatically created and you can easily create additional custom dashboards yourself. The open source solutions Grafana and Prometheus are used as basic technologies.
Usability improvements in the Univention Management Console:
The web-based Univention Management Console (UMC) allows you to manage the entire domain. UMC offers various modules for administration, e.g. for creating users, joining the domain or diagnosing the system. We have fixed minor bugs in different modules and improved their usability. Furthermore, we have improved the scrolling in the UMC module of the App Center and the LDAP Directory. Individual areas can now be scrolled independently and edited separately more easily.
Multi container support for the App Center:
So far, the App Center has only offered Docker-based apps that consist of a single Docker container. From now on also so-called multi container apps are supported. The multi container apps are apps that consist of more than one container. A detailed description can be found in the blog post Multi Container Support for Docker Apps for Univention App Center.
In addition, various improvements have been integrated into the App Center, which above all improve the stability of updates. For example, the password you enter during app updates is now validated before any action is performed.
New simplified Python API for using IDM:
The Identity Management System is accessed in UCS with the help of Univention Directory Manager (UDM). In addition to the command line interface, UDM also offers a Python API, which is designed for the internal use.
With UCS 4.3-3 there is now a new improved Python API, which makes it possible to work very easily with the objects from the Identity Management System. We will publish a corresponding API documentation shortly. First examples can be found at github.
Univention Virtual Machine Manager:
UVMM is primarily used to centrally manage KVM-based virtual machines. We have adapted UVMM so that you can configure whether you allow or don’t allow a live migration in case of having different CPU types of the host systems. You can and should use this especially if you use incompatible CPU types in your environment.
In addition, we have integrated several other improvements in UVMM. If, for example, the virtual machine pauses automatically, because there is not enough hard disk space available, a corresponding warning is now shown in UVMM.
LDAP replication:
It could happen in our LDAP replication that the Univention Directory Listener reestablished the LDAP connection to another server. However, the connection to the Univention Directory Notifier was kept under certain circumstances. As a result, it could happen that the notification was sent by one system, but the changes were read from another system. An incorrect replication could be the result. This problem has been fixed and it is now ensured that the information always comes from the same system.
Samba:
In Samba there is a command dbcheck to detect and fix inconsistencies in the Samba databases. This tool is often the first approach to solve problems in Samba environments. Several improvements have been integrated to find and fix errors in a more targeted way.
For the synchronization of the directory service objects between OpenLDAP and Samba 4 the S4 Connector is used. For the synchronization between OpenLDAP and a Microsoft Active Directory the AD Connector is used. In both connectors various improvements in synchronization have been implemented, e.g. the synchronization of DNS objects and password expiration data in the S4 Connector and the synchronization of mail attributes in the AD Connector.
Stability and Security Updates:
UCS 4.3-3 is now based on Debian 9.6., which has been released in November and contains a lot of stability and security updates.
In addition, various other security updates have been integrated into UCS 4.3-3, such as the Linux kernel, OpenSSL or MariaDB.

New in Univention Corporate Server 4.3-2 (Sep 7, 2018)

New in Univention Corporate Server 4.3-1 (Jun 13, 2018)

New in Univention Corporate Server 4.3-0 (Mar 14, 2018)

New in Univention Corporate Server 4.2-3 (Nov 29, 2017)

New in Univention Corporate Server 4.2-2 (Sep 7, 2017)

New in Univention Corporate Server 4.2-1 (Jun 21, 2017)

New in Univention Corporate Server 4.2 (Apr 6, 2017)

New in Univention Corporate Server 4.1-4 (Nov 8, 2016)

New in Univention Corporate Server 4.1-3 (Aug 9, 2016)

New in Univention Corporate Server 4.1-2 (May 10, 2016)

New in Univention Corporate Server 4.1-1 (Feb 17, 2016)

The Linux kernel has been updated to 4.1.16. This includes several security updates as well as new and updated drivers for better hardware support.
The compatibility to Active Directory has been improved with the Samba update to 4.3.3. This includes, among others, improvements in the DRS replication and several security updates.
Univention Virtual Machine Manager (UVMM) is now able to manage Virtual Private Clouds (VPC) in Amazon Web Services (AWS). This provides the possibility to administrate virtual machines in the EC2 region eu-central-1 (Frankfurt am Main).
The performance of the directory service replication has been increased significantly. Thus, the join into a domain with thousands of users is much faster.
Several enhancements in design and usability of the Univention App Center have been implemented. For example, it is now possible to navigate easily between the different Apps. Additionally, the App Center startup performance has been increased significantly.
The compatibility to the Internet Explorer has been improved. Furthermore, the browser compatibility list has been update. Users of older no longer supported browsers receive a notification.
Numerous bugfixes and improvements in the area of localization and internationalization have been made so that own translations can be added easily.
Numerous enhancements, amoung others:
UVMM supports the migration of stopped virtual machines.
Management and provisioning of Active Directory functions provided by Samba has been enhanced.
The self service functions have been improved.
The installer now supports the automatic setup of systems in the role domain controller master.
Automatic monitoring of the provisioning of the built-in Active Directory via Nagios.
Improvements on the management of the print server
Improvements on the rubustness of the LDAP replication
Numerous security updates, amoung others for MySQL, OpenJDK or the Bootloader Grub.
Extensive stability improvements amount other things in the App Center, the installer, the management of Samba as well as in the UCS management system.
Usability enhancements besides the App Center also in the installer, the UCS management system, in the updater as well as in UVMM.

New in Univention Corporate Server 4.1 (Nov 18, 2015)

New in Univention Corporate Server 4.1 M1 (Oct 7, 2015)

New in Univention Corporate Server 4.0-3 (Aug 12, 2015)

New in Univention Corporate Server 4.0-2 (May 12, 2015)

New in Univention Corporate Server 4.0-1 (Feb 11, 2015)

New in Univention Corporate Server 4.0 (Nov 20, 2014)

New in Univention Corporate Server 3.2-4 (Nov 12, 2014)

New in Univention Corporate Server 4.0 RC (Nov 7, 2014)

New in Univention Corporate Server 4.0 Milestone 2 (Oct 8, 2014)

New in Univention Corporate Server 3.2-3 (Aug 12, 2014)

New in Univention Corporate Server 3.2-2 (May 15, 2014)

New in Univention Corporate Server 3.2-1 (Feb 18, 2014)

New in Univention Corporate Server 3.2 (Nov 20, 2013)

New in Univention Corporate Server 3.1-1 (Apr 9, 2013)

New in Univention Corporate Server 3.1 (Dec 14, 2012)

With the brand new Version 3.1, UCS has developed into a comprehensive operating and management platform for IT infrastructures in companies and authorities of all shapes and sizes. In contrast to single-server solutions, UCS also supports the operation of a large number of servers at several sites in a shared, secure trust context. As such, UCS 3.1 also permits the simple integration of cloud-based services. Consequently, UCS 3.1 offers organisations a high degree of flexibility in terms of the adaption of cloud strategies.
New: Univention App Center: choose the applications, install them and run them:
Particularly with the new Univention App Center, UCS offers excellent and easy-to-use possibilities for trying out applications on the cloud or in your own computer centre. The user sees immediately which applications are available in the App Center and can then simply install and uninstall them with a click of the mouse. In this way, UCS also represents a simple test possibility for new applications and makes it possible to expand existing environments with extra functions, for example from the fields of collaboration and CRM.
In UCS 3.1, in addition to Univention solutions, such as the preview version of the new desktop and thin client product Univention Corporate Client (UCC) for now, the App Center also includes a range of third-party applications such as the groupware solutions Zarafa and Open-Xchange, the backup solution “SEP sesam”, the document management system agorum core, the customer management
solution “SugarCRM” and the Dropbox alternative “owncloud”. According to Univention, other manufacturers are currently also working on making their software available in the Univention App Center. The App catalogue at: http://www.univention.de/en/products/ucs/app-catalogue-for-univention-corporate-server/ gives users an overview of all the applications currently available in the Univention App Center.
New tool for simplified migration from Active Directory to Samba 4:
In addition to a Samba 4 version far beyond the official release of Samba 4 approved two days ago, UCS 3.1 also boasts a new tool for simplified migration of existing Microsoft Active Directory environments to UCS. Among other features, this tool automatically adopts user and computer accounts as well as group policies from Microsoft Active Directory. This allows administrators to replace an existing Active Directory with UCS very easily and without the need to remount Microsoft Windows clients in the domain.
User-friendly, simple network configuration and improved hardware support:
The user interface of the UCS management systems for user and domain management has also been revised: administrators can now select individual management modules as favourites and in doing so easily personalise the UCS management tools.
In addition to a wide range of additional updates to important UCS components, such as the virtualization software Xen or the directory service OpenLDAP, UCS 3.1 also features a new module for network configuration with which the network settings for virtualized guest operating systems in particular are now considerably simpler. The Linux kernel has been updated to Version 3.2.30 and UCS 3.1 now supports the BIOS successor UEFI (Unified Extensible Firmware Interface), which is a component of newer hardware.
New documentation, prices and availability:
UCS 3.1 is available as a DVD-ISO for i386 and amd64. Test versions can be downloaded from: http://www.univention.de/en/download-and-support/. Test systems can also be expanded to commercial UCS licenses without any problems. For 50 employees, Univention Corporate Server costs €985 with installation support and €1,885 with standard support — both versions include one year of maintenance.