We released UCS 4.3-1, the first point release for Univention Corporate Server (UCS) 4.3. In addition to a number of security updates, it also brings various new features.
The diagnostics module of the Univention Management Console (UMC), for example, now provides further functional tests. These help administrators to check the “health” of the server and the entire domain. In addition, UCS 4.3-1 has improved its usability, for example with regard to the configuration of e-mail addresses or DNS settings. Furthermore, the integration of very large LDAP scheme extensions and the start of the LDAP server on DC backup and DC slave systems now work much more stable.
UCS update process from UCS 4.2 to 4.3
From now on, when you update from UCS 4.2 to UCS 4.3, the process will automatically be blocked if there was an inconsistent LDAP state caused by the presence of a failed.ldif file which would lead to errors.
Numerous security enhancements integrated into UCS 4.3-1
For improved browser security, we defined a content security policy in the UCS web interface which protects HTTP cookies set by UCS. In addition, various security updates for the Linux kernel, Samba and Apache2 have been integrated and the Linux kernel has been updated to version 4.9.88. This release also includes various security and stability updates.
Another new convenient feature to use during a domain join is the ability to declare a script in order to read out the domain password directly from a file instead of passing it on in plain text. Additionally, manually created certificates for computer accounts can now be replicated by DC backup systems.
Simplified License Management
Important for enterprise users: Computer accounts for Docker apps no longer count as servers with regard to number of licenses. In addition, the number of servers in the domain is no longer displayed in the UCS license dialog as this has led to confusion in the past about the license status of the number of licensed servers.
An overview of all new features can be found in the Release Notes: